@backblaze-labs/b2-sdk 0.2.0 → 0.3.0

package/dist/simulator/validation.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.cjs","names":[],"sources":["../../src/simulator/validation.ts"],"sourcesContent":["/**\n * B2 spec-compliance validation helpers for the simulator.\n *\n * Each function mirrors a documented B2 input limit (file name length,\n * bucket name regex, file-info byte budget, etc.). Validators return\n * `null` for valid input or a `{ code, message }` pair that the handler\n * converts into a synthetic `400`/`403` response with the right B2\n * error code.\n *\n * Keeping validation in one module makes the simulator's \"what does B2\n * reject?\" surface auditable in a single file. Doc references inline at\n * each rule so the spec source is immediate.\n *\n * @packageDocumentation\n */\n\nimport {\n  BUCKET_NAME_MAX,\n  BUCKET_NAME_MIN,\n  BUCKET_NAME_RESERVED_PREFIX,\n  FILE_NAME_MAX_BYTES,\n  getB2FileNameByteLength,\n  hasB2FileNameControlCharacter,\n  hasValidB2BucketNameShape,\n  isB2BucketNameIpv4Address,\n} from '../internal/b2-naming.ts'\nimport { utf8Encoder } from '../util/text-codec.ts'\n\n/** Shape returned by validation functions when input is rejected. */\nexport interface ValidationError {\n  readonly code: string\n  readonly message: string\n}\n\n// ---------------------------------------------------------------------------\n// Bucket name (`b2_create_bucket`, `b2_update_bucket`)\n// ---------------------------------------------------------------------------\n\nexport { BUCKET_NAME_MAX, BUCKET_NAME_MIN }\n\n/**\n * Validates a bucket name against B2's documented rules.\n *\n * @param name - Caller-supplied bucket name.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-create-bucket\n */\nexport function validateBucketName(name: string): ValidationError | null {\n  if (typeof name !== 'string' || name.length < BUCKET_NAME_MIN || name.length > BUCKET_NAME_MAX) {\n    return {\n      code: 'invalid_bucket_name',\n      message: `bucketName must be ${BUCKET_NAME_MIN}-${BUCKET_NAME_MAX} characters`,\n    }\n  }\n  if (isB2BucketNameIpv4Address(name)) {\n    return {\n      code: 'invalid_bucket_name',\n      message: 'bucketName must not be formatted as an IPv4 address',\n    }\n  }\n  if (!hasValidB2BucketNameShape(name)) {\n    return {\n      code: 'invalid_bucket_name',\n      message:\n        'bucketName must contain only letters, digits, hyphens, and periods; cannot start or end with punctuation or contain consecutive periods',\n    }\n  }\n  if (name.startsWith(BUCKET_NAME_RESERVED_PREFIX)) {\n    return {\n      code: 'invalid_bucket_name',\n      message: `bucketName cannot start with the reserved prefix \"${BUCKET_NAME_RESERVED_PREFIX}\"`,\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// File name (every upload / hide / copy entry point)\n// ---------------------------------------------------------------------------\n\nexport { FILE_NAME_MAX_BYTES }\n\n/**\n * Validates a file name against B2's documented rules. Mirrors the\n * server-side checks B2 runs on `b2_upload_file` / `b2_hide_file` /\n * `b2_start_large_file` / `b2_copy_file` filename inputs.\n *\n * @param name - Caller-supplied file name (raw, unencoded).\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-upload-file\n */\nexport function validateFileName(name: string): ValidationError | null {\n  if (typeof name !== 'string' || name.length === 0) {\n    return { code: 'invalid_file_name', message: 'fileName must be a non-empty string' }\n  }\n  const byteLength = getB2FileNameByteLength(name)\n  if (byteLength === null) {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName exceeds the 1024-byte UTF-8 limit',\n    }\n  }\n  if (hasB2FileNameControlCharacter(name)) {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName must not contain control characters (U+0000-U+001F or U+007F)',\n    }\n  }\n  // Path segments equal to `.` or `..` alone are illegal per B2 docs.\n  // Embedded `..` within a segment (e.g. `a..b`) is fine, and a path\n  // like `../foo` is fine because the SDK doesn't interpret it; only\n  // bare `.` or `..` as a complete name is rejected.\n  if (name === '.' || name === '..') {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName cannot be exactly \".\" or \"..\"',\n    }\n  }\n  // No leading or trailing slash, no `//`.\n  if (name.startsWith('/') || name.endsWith('/') || name.includes('//')) {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName cannot start with \"/\", end with \"/\", or contain \"//\"',\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// File-info / Bucket-info byte budget\n// ---------------------------------------------------------------------------\n\n/** Per-file fileInfo total size cap (sum of key+value bytes). */\nexport const FILE_INFO_TOTAL_MAX = 2048\n/** Per-key fileInfo value byte cap. */\nexport const FILE_INFO_VALUE_MAX = 2048\n/** Allowed key character set (case-insensitive). */\nconst FILE_INFO_KEY_REGEX = /^[a-zA-Z0-9_-]+$/\n\n/**\n * Validates a `fileInfo` record against B2's byte-budget and\n * key-shape rules.\n *\n * @param info - Caller-supplied fileInfo record.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-upload-file\n */\nexport function validateFileInfo(info: Record<string, string>): ValidationError | null {\n  let total = 0\n  for (const [key, value] of Object.entries(info)) {\n    if (!FILE_INFO_KEY_REGEX.test(key)) {\n      return {\n        code: 'invalid_file_info',\n        message: `fileInfo key \"${key}\" must match ^[a-zA-Z0-9_-]+$`,\n      }\n    }\n    if (typeof value !== 'string') {\n      return { code: 'invalid_file_info', message: `fileInfo value for \"${key}\" must be a string` }\n    }\n    const keyBytes = utf8Encoder.encode(key).byteLength\n    const valueBytes = utf8Encoder.encode(value).byteLength\n    if (valueBytes > FILE_INFO_VALUE_MAX) {\n      return {\n        code: 'invalid_file_info',\n        message: `fileInfo value for \"${key}\" exceeds ${FILE_INFO_VALUE_MAX} bytes`,\n      }\n    }\n    total += keyBytes + valueBytes\n  }\n  if (total > FILE_INFO_TOTAL_MAX) {\n    return {\n      code: 'invalid_file_info',\n      message: `fileInfo total size ${total} bytes exceeds the ${FILE_INFO_TOTAL_MAX}-byte limit`,\n    }\n  }\n  return null\n}\n\n/** Per-bucket bucketInfo total max keys. */\nexport const BUCKET_INFO_MAX_KEYS = 10\n/** Per-key bucketInfo value byte cap. */\nexport const BUCKET_INFO_VALUE_MAX = 2048\n/** Allowed key character set for bucketInfo. */\nconst BUCKET_INFO_KEY_REGEX = /^[a-zA-Z0-9_-]+$/\n\n/**\n * Validates a `bucketInfo` record against B2's per-bucket metadata rules.\n *\n * @param info - Caller-supplied bucketInfo record.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-create-bucket\n */\nexport function validateBucketInfo(info: Record<string, string>): ValidationError | null {\n  const entries = Object.entries(info)\n  if (entries.length > BUCKET_INFO_MAX_KEYS) {\n    return {\n      code: 'invalid_bucket_info',\n      message: `bucketInfo cannot have more than ${BUCKET_INFO_MAX_KEYS} keys (got ${entries.length})`,\n    }\n  }\n  for (const [key, value] of entries) {\n    if (!BUCKET_INFO_KEY_REGEX.test(key)) {\n      return {\n        code: 'invalid_bucket_info',\n        message: `bucketInfo key \"${key}\" must match ^[a-zA-Z0-9_-]+$`,\n      }\n    }\n    if (typeof value !== 'string') {\n      return {\n        code: 'invalid_bucket_info',\n        message: `bucketInfo value for \"${key}\" must be a string`,\n      }\n    }\n    const valueBytes = utf8Encoder.encode(value).byteLength\n    if (valueBytes > BUCKET_INFO_VALUE_MAX) {\n      return {\n        code: 'invalid_bucket_info',\n        message: `bucketInfo value for \"${key}\" exceeds ${BUCKET_INFO_VALUE_MAX} bytes`,\n      }\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// maxFileCount caps per endpoint\n// ---------------------------------------------------------------------------\n\n/**\n * Per-endpoint upper bound on the `maxFileCount` (or `maxKeyCount` /\n * `maxPartCount`) request field. Sourced from the B2 endpoint docs.\n */\nexport const LIST_ENDPOINT_CAPS = {\n  /** `b2_list_file_names.maxFileCount` cap. */\n  b2_list_file_names: 10_000,\n  /** `b2_list_file_versions.maxFileCount` cap. */\n  b2_list_file_versions: 10_000,\n  /** `b2_list_unfinished_large_files.maxFileCount` cap. */\n  b2_list_unfinished_large_files: 100,\n  /** `b2_list_keys.maxKeyCount` cap. */\n  b2_list_keys: 10_000,\n  /** `b2_list_parts.maxPartCount` cap. */\n  b2_list_parts: 10_000,\n} as const\n\n/**\n * Validates a `maxFileCount` (or `maxKeyCount` / `maxPartCount`) value\n * against the per-endpoint cap documented by B2.\n *\n * @param requested - Caller-supplied count.\n * @param endpoint - Which list endpoint this applies to.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n */\nexport function validateMaxCount(\n  requested: number | undefined,\n  endpoint: keyof typeof LIST_ENDPOINT_CAPS,\n): ValidationError | null {\n  if (requested === undefined) return null\n  if (!Number.isInteger(requested) || requested < 1) {\n    return {\n      code: 'bad_request',\n      message: `maxFileCount must be a positive integer (got ${requested})`,\n    }\n  }\n  const cap = LIST_ENDPOINT_CAPS[endpoint]\n  if (requested > cap) {\n    return {\n      code: 'bad_request',\n      message: `maxFileCount ${requested} exceeds the ${endpoint} cap of ${cap}`,\n    }\n  }\n  return null\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,SAAgB,mBAAmB,MAAsC;CACvE,IAAI,OAAO,SAAS,YAAY,KAAK,SAAA,KAA4B,KAAK,SAAA,IACpE,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,IAAI,kBAAA,0BAA0B,IAAI,GAChC,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,IAAI,CAAC,kBAAA,0BAA0B,IAAI,GACjC,OAAO;EACL,MAAM;EACN,SACE;CACJ;CAEF,IAAI,KAAK,WAAA,KAAsC,GAC7C,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,OAAO;AACT;;;;;;;;;;;;AAmBA,SAAgB,iBAAiB,MAAsC;CACrE,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAC9C,OAAO;EAAE,MAAM;EAAqB,SAAS;CAAsC;CAGrF,IADmB,kBAAA,wBAAwB,IACvC,MAAe,MACjB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,IAAI,kBAAA,8BAA8B,IAAI,GACpC,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAMF,IAAI,SAAS,OAAO,SAAS,MAC3B,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,KAAK,KAAK,SAAS,IAAI,GAClE,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,OAAO;AACT;;AAOA,IAAa,sBAAsB;;AAEnC,IAAa,sBAAsB;;AAEnC,IAAM,sBAAsB;;;;;;;;;;;AAY5B,SAAgB,iBAAiB,MAAsD;CACrF,IAAI,QAAQ;CACZ,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;EAC/C,IAAI,CAAC,oBAAoB,KAAK,GAAG,GAC/B,OAAO;GACL,MAAM;GACN,SAAS,iBAAiB,IAAI;EAChC;EAEF,IAAI,OAAO,UAAU,UACnB,OAAO;GAAE,MAAM;GAAqB,SAAS,uBAAuB,IAAI;EAAoB;EAE9F,MAAM,WAAW,mBAAA,YAAY,OAAO,GAAG,CAAC,CAAC;EACzC,MAAM,aAAa,mBAAA,YAAY,OAAO,KAAK,CAAC,CAAC;EAC7C,IAAI,aAAA,MACF,OAAO;GACL,MAAM;GACN,SAAS,uBAAuB,IAAI,YAAY,oBAAoB;EACtE;EAEF,SAAS,WAAW;CACtB;CACA,IAAI,QAAA,MACF,OAAO;EACL,MAAM;EACN,SAAS,uBAAuB,MAAM,qBAAqB,oBAAoB;CACjF;CAEF,OAAO;AACT;;AAGA,IAAa,uBAAuB;;AAEpC,IAAa,wBAAwB;;AAErC,IAAM,wBAAwB;;;;;;;;;;AAW9B,SAAgB,mBAAmB,MAAsD;CACvF,MAAM,UAAU,OAAO,QAAQ,IAAI;CACnC,IAAI,QAAQ,SAAA,IACV,OAAO;EACL,MAAM;EACN,SAAS,iDAAsE,QAAQ,OAAO;CAChG;CAEF,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS;EAClC,IAAI,CAAC,sBAAsB,KAAK,GAAG,GACjC,OAAO;GACL,MAAM;GACN,SAAS,mBAAmB,IAAI;EAClC;EAEF,IAAI,OAAO,UAAU,UACnB,OAAO;GACL,MAAM;GACN,SAAS,yBAAyB,IAAI;EACxC;EAGF,IADmB,mBAAA,YAAY,OAAO,KAAK,CAAC,CAAC,aAAA,MAE3C,OAAO;GACL,MAAM;GACN,SAAS,yBAAyB,IAAI,YAAY,sBAAsB;EAC1E;CAEJ;CACA,OAAO;AACT;;;;;AAUA,IAAa,qBAAqB;;CAEhC,oBAAoB;;CAEpB,uBAAuB;;CAEvB,gCAAgC;;CAEhC,cAAc;;CAEd,eAAe;AACjB;;;;;;;;;;AAWA,SAAgB,iBACd,WACA,UACwB;CACxB,IAAI,cAAc,KAAA,GAAW,OAAO;CACpC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAC9C,OAAO;EACL,MAAM;EACN,SAAS,gDAAgD,UAAU;CACrE;CAEF,MAAM,MAAM,mBAAmB;CAC/B,IAAI,YAAY,KACd,OAAO;EACL,MAAM;EACN,SAAS,gBAAgB,UAAU,eAAe,SAAS,UAAU;CACvE;CAEF,OAAO;AACT"}
+{"version":3,"file":"validation.cjs","names":[],"sources":["../../src/simulator/validation.ts"],"sourcesContent":["/**\n * B2 spec-compliance validation helpers for the simulator.\n *\n * Each function mirrors a documented B2 input limit (file name length,\n * bucket name regex, file-info byte budget, etc.). Validators return\n * `null` for valid input or a `{ code, message }` pair that the handler\n * converts into a synthetic `400`/`403` response with the right B2\n * error code.\n *\n * Keeping validation in one module makes the simulator's \"what does B2\n * reject?\" surface auditable in a single file. Doc references inline at\n * each rule so the spec source is immediate.\n *\n * @packageDocumentation\n */\n\nimport {\n  BUCKET_NAME_MAX,\n  BUCKET_NAME_MIN,\n  BUCKET_NAME_RESERVED_PREFIX,\n  FILE_NAME_MAX_BYTES,\n  getB2FileNameByteLength,\n  hasB2FileNameControlCharacter,\n  hasValidB2BucketNameShape,\n  isB2BucketNameIpv4Address,\n} from '../internal/b2-naming.ts'\nimport { Capability } from '../types/auth.ts'\nimport { BucketRetentionMode, BucketType, CorsOperation } from '../types/bucket.ts'\nimport { EventType } from '../types/notifications.ts'\nimport { utf8Encoder } from '../util/text-codec.ts'\n\n/** Shape returned by validation functions when input is rejected. */\nexport interface ValidationError {\n  readonly code: string\n  readonly message: string\n}\n\n// ---------------------------------------------------------------------------\n// Application keys (`b2_create_key`)\n// ---------------------------------------------------------------------------\n\n/** Minimum length for application key names. */\nexport const KEY_NAME_MIN = 1\n/** Maximum length for application key names. */\nexport const KEY_NAME_MAX = 100\n\nconst VALID_CAPABILITIES = new Set<string>(Object.values(Capability))\n\n/**\n * Validates application-key capabilities against B2's supported capability set.\n *\n * @param capabilities - Caller-supplied capabilities array.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-create-key\n */\nexport function validateCreateKeyCapabilities(capabilities: unknown): ValidationError | null {\n  if (!Array.isArray(capabilities)) {\n    return { code: 'bad_request', message: 'capabilities must be an array' }\n  }\n  if (capabilities.length === 0) {\n    return { code: 'bad_request', message: 'capabilities must not be empty' }\n  }\n  const unknownCapabilities = capabilities.filter(\n    (capability) => typeof capability !== 'string' || !VALID_CAPABILITIES.has(capability),\n  )\n  if (unknownCapabilities.length > 0) {\n    return {\n      code: 'bad_request',\n      message: `unknown capabilities: ${unknownCapabilities.map(String).join(', ')}`,\n    }\n  }\n  return null\n}\n\n/**\n * Returns a frozen copy of a previously validated application-key capability list.\n *\n * @param capabilities - Validated caller-supplied capabilities.\n *\n * @returns An immutable capability list safe to store internally.\n */\nexport function normalizeCreateKeyCapabilities(\n  capabilities: readonly Capability[],\n): readonly Capability[] {\n  return Object.freeze([...capabilities])\n}\n\n/**\n * Validates application-key names against B2's documented length limits.\n *\n * @param keyName - Caller-supplied keyName.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-create-key\n */\nexport function validateCreateKeyName(keyName: unknown): ValidationError | null {\n  if (typeof keyName !== 'string') {\n    return { code: 'bad_request', message: 'keyName must be a string' }\n  }\n  if (keyName.length < KEY_NAME_MIN || keyName.length > KEY_NAME_MAX) {\n    return {\n      code: 'bad_request',\n      message: `keyName must be ${KEY_NAME_MIN}-${KEY_NAME_MAX} characters`,\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// Bucket name (`b2_create_bucket`, `b2_update_bucket`)\n// ---------------------------------------------------------------------------\n\nexport { BUCKET_NAME_MAX, BUCKET_NAME_MIN }\n\n/**\n * Validates a bucket name against B2's documented rules.\n *\n * @param name - Caller-supplied bucket name.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-create-bucket\n */\nexport function validateBucketName(name: string): ValidationError | null {\n  if (typeof name !== 'string' || name.length < BUCKET_NAME_MIN || name.length > BUCKET_NAME_MAX) {\n    return {\n      code: 'invalid_bucket_name',\n      message: `bucketName must be ${BUCKET_NAME_MIN}-${BUCKET_NAME_MAX} characters`,\n    }\n  }\n  if (isB2BucketNameIpv4Address(name)) {\n    return {\n      code: 'invalid_bucket_name',\n      message: 'bucketName must not be formatted as an IPv4 address',\n    }\n  }\n  if (!hasValidB2BucketNameShape(name)) {\n    return {\n      code: 'invalid_bucket_name',\n      message:\n        'bucketName must contain only letters, digits, hyphens, and periods; cannot start or end with punctuation or contain consecutive periods',\n    }\n  }\n  if (name.startsWith(BUCKET_NAME_RESERVED_PREFIX)) {\n    return {\n      code: 'invalid_bucket_name',\n      message: `bucketName cannot start with the reserved prefix \"${BUCKET_NAME_RESERVED_PREFIX}\"`,\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// File name (every upload / hide / copy entry point)\n// ---------------------------------------------------------------------------\n\nexport { FILE_NAME_MAX_BYTES }\n\n/**\n * Validates a file name against B2's documented rules. Mirrors the\n * server-side checks B2 runs on `b2_upload_file` / `b2_hide_file` /\n * `b2_start_large_file` / `b2_copy_file` filename inputs.\n *\n * @param name - Caller-supplied file name (raw, unencoded).\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-upload-file\n */\nexport function validateFileName(name: string): ValidationError | null {\n  if (typeof name !== 'string' || name.length === 0) {\n    return { code: 'invalid_file_name', message: 'fileName must be a non-empty string' }\n  }\n  const byteLength = getB2FileNameByteLength(name)\n  if (byteLength === null) {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName exceeds the 1024-byte UTF-8 limit',\n    }\n  }\n  if (hasB2FileNameControlCharacter(name)) {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName must not contain control characters (U+0000-U+001F or U+007F)',\n    }\n  }\n  // Path segments equal to `.` or `..` alone are illegal per B2 docs.\n  // Embedded `..` within a segment (e.g. `a..b`) is fine, and a path\n  // like `../foo` is fine because the SDK doesn't interpret it; only\n  // bare `.` or `..` as a complete name is rejected.\n  if (name === '.' || name === '..') {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName cannot be exactly \".\" or \"..\"',\n    }\n  }\n  // No leading or trailing slash, no `//`.\n  if (name.startsWith('/') || name.endsWith('/') || name.includes('//')) {\n    return {\n      code: 'invalid_file_name',\n      message: 'fileName cannot start with \"/\", end with \"/\", or contain \"//\"',\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// File-info / Bucket-info byte budget\n// ---------------------------------------------------------------------------\n\n/** Per-file fileInfo total size cap (sum of key+value bytes). */\nexport const FILE_INFO_TOTAL_MAX = 2048\n/** Per-key fileInfo value byte cap. */\nexport const FILE_INFO_VALUE_MAX = 2048\n/** Allowed key character set (case-insensitive). */\nconst FILE_INFO_KEY_REGEX = /^[a-zA-Z0-9_-]+$/\n\n/**\n * Validates a `fileInfo` record against B2's byte-budget and\n * key-shape rules.\n *\n * @param info - Caller-supplied fileInfo record.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-upload-file\n */\nexport function validateFileInfo(info: Record<string, string>): ValidationError | null {\n  let total = 0\n  for (const [key, value] of Object.entries(info)) {\n    if (!FILE_INFO_KEY_REGEX.test(key)) {\n      return {\n        code: 'invalid_file_info',\n        message: `fileInfo key \"${key}\" must match ^[a-zA-Z0-9_-]+$`,\n      }\n    }\n    if (typeof value !== 'string') {\n      return { code: 'invalid_file_info', message: `fileInfo value for \"${key}\" must be a string` }\n    }\n    const keyBytes = utf8Encoder.encode(key).byteLength\n    const valueBytes = utf8Encoder.encode(value).byteLength\n    if (valueBytes > FILE_INFO_VALUE_MAX) {\n      return {\n        code: 'invalid_file_info',\n        message: `fileInfo value for \"${key}\" exceeds ${FILE_INFO_VALUE_MAX} bytes`,\n      }\n    }\n    total += keyBytes + valueBytes\n  }\n  if (total > FILE_INFO_TOTAL_MAX) {\n    return {\n      code: 'invalid_file_info',\n      message: `fileInfo total size ${total} bytes exceeds the ${FILE_INFO_TOTAL_MAX}-byte limit`,\n    }\n  }\n  return null\n}\n\n/** Per-bucket bucketInfo total max keys. */\nexport const BUCKET_INFO_MAX_KEYS = 10\n/** Per-key bucketInfo value byte cap. */\nexport const BUCKET_INFO_VALUE_MAX = 2048\n/** Allowed key character set for bucketInfo. */\nconst BUCKET_INFO_KEY_REGEX = /^[a-zA-Z0-9_-]+$/\n\n/**\n * Validates a `bucketInfo` record against B2's per-bucket metadata rules.\n *\n * @param info - Caller-supplied bucketInfo record.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-create-bucket\n */\nexport function validateBucketInfo(info: Record<string, string>): ValidationError | null {\n  const entries = Object.entries(info)\n  if (entries.length > BUCKET_INFO_MAX_KEYS) {\n    return {\n      code: 'invalid_bucket_info',\n      message: `bucketInfo cannot have more than ${BUCKET_INFO_MAX_KEYS} keys (got ${entries.length})`,\n    }\n  }\n  for (const [key, value] of entries) {\n    if (!BUCKET_INFO_KEY_REGEX.test(key)) {\n      return {\n        code: 'invalid_bucket_info',\n        message: `bucketInfo key \"${key}\" must match ^[a-zA-Z0-9_-]+$`,\n      }\n    }\n    if (typeof value !== 'string') {\n      return {\n        code: 'invalid_bucket_info',\n        message: `bucketInfo value for \"${key}\" must be a string`,\n      }\n    }\n    const valueBytes = utf8Encoder.encode(value).byteLength\n    if (valueBytes > BUCKET_INFO_VALUE_MAX) {\n      return {\n        code: 'invalid_bucket_info',\n        message: `bucketInfo value for \"${key}\" exceeds ${BUCKET_INFO_VALUE_MAX} bytes`,\n      }\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// maxFileCount caps per endpoint\n// ---------------------------------------------------------------------------\n\n/**\n * Per-endpoint upper bound on the `maxFileCount` (or `maxKeyCount` /\n * `maxPartCount`) request field. Sourced from the B2 endpoint docs.\n */\nexport const LIST_ENDPOINT_CAPS = {\n  /** `b2_list_file_names.maxFileCount` cap. */\n  b2_list_file_names: 10_000,\n  /** `b2_list_file_versions.maxFileCount` cap. */\n  b2_list_file_versions: 10_000,\n  /** `b2_list_unfinished_large_files.maxFileCount` cap. */\n  b2_list_unfinished_large_files: 100,\n  /** `b2_list_keys.maxKeyCount` cap. */\n  b2_list_keys: 10_000,\n  /** `b2_list_parts.maxPartCount` cap. */\n  b2_list_parts: 10_000,\n} as const\n\n/**\n * Validates a `maxFileCount` (or `maxKeyCount` / `maxPartCount`) value\n * against the per-endpoint cap documented by B2.\n *\n * @param requested - Caller-supplied count.\n * @param endpoint - Which list endpoint this applies to.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n */\nexport function validateMaxCount(\n  requested: number | undefined,\n  endpoint: keyof typeof LIST_ENDPOINT_CAPS,\n): ValidationError | null {\n  if (requested === undefined) return null\n  if (!Number.isInteger(requested) || requested < 1) {\n    return {\n      code: 'bad_request',\n      message: `maxFileCount must be a positive integer (got ${requested})`,\n    }\n  }\n  const cap = LIST_ENDPOINT_CAPS[endpoint]\n  if (requested > cap) {\n    return {\n      code: 'bad_request',\n      message: `maxFileCount ${requested} exceeds the ${endpoint} cap of ${cap}`,\n    }\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// Download authorization duration\n// ---------------------------------------------------------------------------\n\n/** Minimum `b2_get_download_authorization.validDurationInSeconds`. */\nexport const DOWNLOAD_AUTH_DURATION_MIN_SECONDS = 1\n/** Maximum `b2_get_download_authorization.validDurationInSeconds`. */\nexport const DOWNLOAD_AUTH_DURATION_MAX_SECONDS = 604_800\n\n/**\n * Validates a `b2_get_download_authorization` duration against B2's\n * documented inclusive 1-second to 7-day range.\n *\n * @param requested - Caller-supplied duration in seconds.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n */\nexport function validateDownloadAuthorizationDuration(requested: unknown): ValidationError | null {\n  if (\n    typeof requested !== 'number' ||\n    !Number.isInteger(requested) ||\n    requested < DOWNLOAD_AUTH_DURATION_MIN_SECONDS ||\n    requested > DOWNLOAD_AUTH_DURATION_MAX_SECONDS\n  ) {\n    return {\n      code: 'bad_request',\n      message: `validDurationInSeconds must be an integer from ${DOWNLOAD_AUTH_DURATION_MIN_SECONDS} through ${DOWNLOAD_AUTH_DURATION_MAX_SECONDS}`,\n    }\n  }\n  return null\n}\n\n/**\n * Validates a `b2_get_download_authorization` file name prefix.\n *\n * B2 allows an empty prefix, but the field must still be present as a\n * string so later prefix checks cannot crash on malformed request bodies.\n *\n * @param requested - Caller-supplied file name prefix.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n */\nexport function validateDownloadAuthorizationPrefix(requested: unknown): ValidationError | null {\n  if (typeof requested !== 'string') {\n    return { code: 'bad_request', message: 'fileNamePrefix must be a string' }\n  }\n  return null\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction validateKnownFields(\n  value: Record<string, unknown>,\n  allowedFields: ReadonlySet<string>,\n  path: string,\n): ValidationError | null {\n  for (const field of Object.keys(value)) {\n    if (!allowedFields.has(field)) {\n      return {\n        code: 'bad_request',\n        message: `${path}.${field} is not a supported field`,\n      }\n    }\n  }\n  return null\n}\n\nfunction validateStringArray(\n  value: unknown,\n  path: string,\n  options: { readonly allowNull?: boolean; readonly requireNonEmpty?: boolean } = {},\n): ValidationError | null {\n  if (value === null && options.allowNull === true) return null\n  if (!Array.isArray(value)) {\n    return { code: 'bad_request', message: `${path} must be an array of strings` }\n  }\n  if (options.requireNonEmpty === true && value.length === 0) {\n    return { code: 'bad_request', message: `${path} must be a non-empty array` }\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      return { code: 'bad_request', message: `${path}[${index}] must be a string` }\n    }\n  }\n  return null\n}\n\nfunction validateNonEmptyString(value: unknown, path: string): ValidationError | null {\n  if (typeof value !== 'string' || value.length === 0) {\n    return { code: 'bad_request', message: `${path} must be a non-empty string` }\n  }\n  return null\n}\n\nfunction validateNonNegativeInteger(value: unknown, path: string): ValidationError | null {\n  if (typeof value !== 'number' || !Number.isInteger(value) || value < 0) {\n    return { code: 'bad_request', message: `${path} must be a non-negative integer` }\n  }\n  return null\n}\n\nfunction validateIntegerAtMost(value: number, max: number, path: string): ValidationError | null {\n  if (value > max) {\n    return { code: 'bad_request', message: `${path} must not exceed ${max}` }\n  }\n  return null\n}\n\nfunction validatePositiveInteger(value: unknown, path: string): ValidationError | null {\n  if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n    return { code: 'bad_request', message: `${path} must be a positive integer` }\n  }\n  return null\n}\n\nfunction validateNullablePositiveInteger(value: unknown, path: string): ValidationError | null {\n  if (value === undefined || value === null) return null\n  return validatePositiveInteger(value, path)\n}\n\nfunction validateUniqueName(\n  names: Set<string>,\n  name: string,\n  path: string,\n): ValidationError | null {\n  if (names.has(name)) {\n    return { code: 'bad_request', message: `${path} must be unique` }\n  }\n  names.add(name)\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// Bucket configuration (`b2_create_bucket`, `b2_update_bucket`)\n// ---------------------------------------------------------------------------\n\nconst KNOWN_BUCKET_TYPES = new Set<string>(Object.values(BucketType))\n\n/**\n * Validates a `b2_list_buckets.bucketTypes` filter.\n *\n * @param bucketTypes - Caller-supplied bucket type filter.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-list-buckets\n */\nexport function validateBucketTypes(bucketTypes: unknown): ValidationError | null {\n  if (bucketTypes === undefined) return null\n  if (!Array.isArray(bucketTypes)) {\n    return { code: 'bad_request', message: 'bucketTypes must be an array' }\n  }\n  for (const [index, bucketType] of bucketTypes.entries()) {\n    if (typeof bucketType !== 'string' || !KNOWN_BUCKET_TYPES.has(bucketType)) {\n      return {\n        code: 'bad_request',\n        message: `bucketTypes[${index}] must be a known bucket type`,\n      }\n    }\n  }\n  return null\n}\n\nconst CORS_RULE_FIELDS = new Set([\n  'allowedHeaders',\n  'allowedOperations',\n  'allowedOrigins',\n  'corsRuleName',\n  'exposeHeaders',\n  'maxAgeSeconds',\n])\n\nconst CORS_MAX_AGE_SECONDS_MAX = 86_400\nconst KNOWN_CORS_OPERATIONS = new Set<string>(Object.values(CorsOperation))\n\n/**\n * Validates B2 CORS rule structure for bucket create/update requests.\n *\n * @param rules - Caller-supplied CORS rules.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/docs/cloud-storage-cross-origin-resource-sharing-rules\n */\nexport function validateCorsRules(rules: unknown): ValidationError | null {\n  if (!Array.isArray(rules)) {\n    return { code: 'bad_request', message: 'corsRules must be an array' }\n  }\n\n  const names = new Set<string>()\n  for (const [index, rule] of rules.entries()) {\n    const rulePath = `corsRules[${index}]`\n    if (!isRecord(rule)) {\n      return { code: 'bad_request', message: `${rulePath} must be an object` }\n    }\n\n    const fieldError = validateKnownFields(rule, CORS_RULE_FIELDS, rulePath)\n    if (fieldError) return fieldError\n\n    const nameError = validateNonEmptyString(rule['corsRuleName'], `${rulePath}.corsRuleName`)\n    if (nameError) return nameError\n    const ruleName = rule['corsRuleName'] as string\n    const uniqueNameError = validateUniqueName(names, ruleName, `${rulePath}.corsRuleName`)\n    if (uniqueNameError) return uniqueNameError\n\n    const originsError = validateStringArray(rule['allowedOrigins'], `${rulePath}.allowedOrigins`, {\n      requireNonEmpty: true,\n    })\n    if (originsError) return originsError\n\n    const operationsError = validateStringArray(\n      rule['allowedOperations'],\n      `${rulePath}.allowedOperations`,\n      { requireNonEmpty: true },\n    )\n    if (operationsError) return operationsError\n    for (const operation of rule['allowedOperations'] as readonly string[]) {\n      if (!KNOWN_CORS_OPERATIONS.has(operation)) {\n        return {\n          code: 'bad_request',\n          message: `${rulePath}.allowedOperations contains an unknown operation`,\n        }\n      }\n    }\n\n    const headersError = validateStringArray(rule['allowedHeaders'], `${rulePath}.allowedHeaders`, {\n      allowNull: true,\n    })\n    if (headersError) return headersError\n\n    const exposeError = validateStringArray(rule['exposeHeaders'], `${rulePath}.exposeHeaders`, {\n      allowNull: true,\n    })\n    if (exposeError) return exposeError\n\n    const ageError = validateNonNegativeInteger(rule['maxAgeSeconds'], `${rulePath}.maxAgeSeconds`)\n    if (ageError) return ageError\n    const maxAgeError = validateIntegerAtMost(\n      rule['maxAgeSeconds'] as number,\n      CORS_MAX_AGE_SECONDS_MAX,\n      `${rulePath}.maxAgeSeconds`,\n    )\n    if (maxAgeError) return maxAgeError\n  }\n\n  return null\n}\n\nconst LIFECYCLE_RULE_FIELDS = new Set([\n  'daysFromHidingToDeleting',\n  'daysFromStartingToCancelingUnfinishedLargeFiles',\n  'daysFromUploadingToHiding',\n  'fileNamePrefix',\n])\n\n/**\n * Validates B2 lifecycle rule structure for bucket create/update requests.\n *\n * @param rules - Caller-supplied lifecycle rules.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/docs/cloud-storage-lifecycle-rules\n */\nexport function validateLifecycleRules(rules: unknown): ValidationError | null {\n  if (!Array.isArray(rules)) {\n    return { code: 'bad_request', message: 'lifecycleRules must be an array' }\n  }\n\n  for (const [index, rule] of rules.entries()) {\n    const rulePath = `lifecycleRules[${index}]`\n    if (!isRecord(rule)) {\n      return { code: 'bad_request', message: `${rulePath} must be an object` }\n    }\n\n    const fieldError = validateKnownFields(rule, LIFECYCLE_RULE_FIELDS, rulePath)\n    if (fieldError) return fieldError\n\n    const deletingError = validateNullablePositiveInteger(\n      rule['daysFromHidingToDeleting'],\n      `${rulePath}.daysFromHidingToDeleting`,\n    )\n    if (deletingError) return deletingError\n\n    const hidingError = validateNullablePositiveInteger(\n      rule['daysFromUploadingToHiding'],\n      `${rulePath}.daysFromUploadingToHiding`,\n    )\n    if (hidingError) return hidingError\n\n    const cancelError = validateNullablePositiveInteger(\n      rule['daysFromStartingToCancelingUnfinishedLargeFiles'],\n      `${rulePath}.daysFromStartingToCancelingUnfinishedLargeFiles`,\n    )\n    if (cancelError) return cancelError\n\n    if (\n      rule['daysFromHidingToDeleting'] == null &&\n      rule['daysFromUploadingToHiding'] == null &&\n      rule['daysFromStartingToCancelingUnfinishedLargeFiles'] == null\n    ) {\n      return {\n        code: 'bad_request',\n        message: `${rulePath} must set at least one lifecycle action`,\n      }\n    }\n\n    if (typeof rule['fileNamePrefix'] !== 'string') {\n      return { code: 'bad_request', message: `${rulePath}.fileNamePrefix must be a string` }\n    }\n  }\n\n  return null\n}\n\nconst DEFAULT_RETENTION_FIELDS = new Set(['mode', 'period'])\nconst RETENTION_PERIOD_FIELDS = new Set(['duration', 'unit'])\nconst DEFAULT_RETENTION_MODES = new Set<string>(Object.values(BucketRetentionMode))\nconst OBJECT_LOCK_RETENTION_MAX_DAYS = 3000\n\n/**\n * Validates default Object Lock retention policy structure for bucket requests.\n *\n * @param policy - Caller-supplied default retention policy.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/docs/cloud-storage-object-lock\n */\nexport function validateDefaultRetention(policy: unknown): ValidationError | null {\n  if (!isRecord(policy)) {\n    return { code: 'bad_request', message: 'defaultRetention must be an object' }\n  }\n\n  const fieldError = validateKnownFields(policy, DEFAULT_RETENTION_FIELDS, 'defaultRetention')\n  if (fieldError) return fieldError\n\n  const mode = policy['mode']\n  if (typeof mode !== 'string' || !DEFAULT_RETENTION_MODES.has(mode)) {\n    return {\n      code: 'bad_request',\n      message: 'defaultRetention.mode must be \"compliance\", \"governance\", or \"none\"',\n    }\n  }\n\n  const period = policy['period']\n  if (mode === BucketRetentionMode.None) {\n    if (period !== null) {\n      return {\n        code: 'bad_request',\n        message: 'defaultRetention.period must be null when mode is \"none\"',\n      }\n    }\n    return null\n  }\n\n  if (!isRecord(period)) {\n    return {\n      code: 'bad_request',\n      message: 'defaultRetention.period must be an object for retention modes',\n    }\n  }\n\n  const periodFieldError = validateKnownFields(\n    period,\n    RETENTION_PERIOD_FIELDS,\n    'defaultRetention.period',\n  )\n  if (periodFieldError) return periodFieldError\n\n  const durationError = validatePositiveInteger(\n    period['duration'],\n    'defaultRetention.period.duration',\n  )\n  if (durationError) return durationError\n  if (!Number.isSafeInteger(period['duration'])) {\n    return {\n      code: 'bad_request',\n      message: 'defaultRetention.period.duration must be a safe integer',\n    }\n  }\n\n  if (period['unit'] !== 'days' && period['unit'] !== 'years') {\n    return {\n      code: 'bad_request',\n      message: 'defaultRetention.period.unit must be \"days\" or \"years\"',\n    }\n  }\n  const durationDays =\n    period['unit'] === 'days'\n      ? (period['duration'] as number)\n      : (period['duration'] as number) * 365\n  if (!Number.isFinite(durationDays) || durationDays > OBJECT_LOCK_RETENTION_MAX_DAYS) {\n    return {\n      code: 'bad_request',\n      message: `defaultRetention.period must not exceed ${OBJECT_LOCK_RETENTION_MAX_DAYS} days`,\n    }\n  }\n\n  return null\n}\n\nconst REPLICATION_CONFIG_FIELDS = new Set(['asReplicationSource', 'asReplicationDestination'])\nconst REPLICATION_SOURCE_FIELDS = new Set(['replicationRules', 'sourceApplicationKeyId'])\nconst REPLICATION_DESTINATION_FIELDS = new Set(['sourceToDestinationKeyMapping'])\nconst REPLICATION_RULE_FIELDS = new Set([\n  'destinationBucketId',\n  'fileNamePrefix',\n  'includeExistingFiles',\n  'isEnabled',\n  'priority',\n  'replicationRuleName',\n])\n\nfunction validateReplicationRule(rule: unknown, rulePath: string): ValidationError | null {\n  if (!isRecord(rule)) {\n    return { code: 'bad_request', message: `${rulePath} must be an object` }\n  }\n\n  const fieldError = validateKnownFields(rule, REPLICATION_RULE_FIELDS, rulePath)\n  if (fieldError) return fieldError\n\n  const destinationError = validateNonEmptyString(\n    rule['destinationBucketId'],\n    `${rulePath}.destinationBucketId`,\n  )\n  if (destinationError) return destinationError\n\n  if (typeof rule['fileNamePrefix'] !== 'string') {\n    return { code: 'bad_request', message: `${rulePath}.fileNamePrefix must be a string` }\n  }\n\n  if (typeof rule['includeExistingFiles'] !== 'boolean') {\n    return { code: 'bad_request', message: `${rulePath}.includeExistingFiles must be a boolean` }\n  }\n\n  if (typeof rule['isEnabled'] !== 'boolean') {\n    return { code: 'bad_request', message: `${rulePath}.isEnabled must be a boolean` }\n  }\n\n  const priorityError = validatePositiveInteger(rule['priority'], `${rulePath}.priority`)\n  if (priorityError) return priorityError\n\n  const nameError = validateNonEmptyString(\n    rule['replicationRuleName'],\n    `${rulePath}.replicationRuleName`,\n  )\n  if (nameError) return nameError\n\n  return null\n}\n\nfunction validateReplicationSource(source: unknown): ValidationError | null {\n  if (!isRecord(source)) {\n    return {\n      code: 'bad_request',\n      message: 'replicationConfiguration.asReplicationSource must be an object',\n    }\n  }\n\n  const fieldError = validateKnownFields(\n    source,\n    REPLICATION_SOURCE_FIELDS,\n    'replicationConfiguration.asReplicationSource',\n  )\n  if (fieldError) return fieldError\n\n  const sourceKeyError = validateNonEmptyString(\n    source['sourceApplicationKeyId'],\n    'replicationConfiguration.asReplicationSource.sourceApplicationKeyId',\n  )\n  if (sourceKeyError) return sourceKeyError\n\n  const rules = source['replicationRules']\n  if (!Array.isArray(rules)) {\n    return {\n      code: 'bad_request',\n      message: 'replicationConfiguration.asReplicationSource.replicationRules must be an array',\n    }\n  }\n\n  const names = new Set<string>()\n  for (const [index, rule] of rules.entries()) {\n    const rulePath = `replicationConfiguration.asReplicationSource.replicationRules[${index}]`\n    const ruleError = validateReplicationRule(rule, rulePath)\n    if (ruleError) return ruleError\n    const ruleName = (rule as Record<string, unknown>)['replicationRuleName'] as string\n    const uniqueNameError = validateUniqueName(names, ruleName, `${rulePath}.replicationRuleName`)\n    if (uniqueNameError) return uniqueNameError\n  }\n\n  return null\n}\n\nfunction validateReplicationDestination(destination: unknown): ValidationError | null {\n  if (!isRecord(destination)) {\n    return {\n      code: 'bad_request',\n      message: 'replicationConfiguration.asReplicationDestination must be an object',\n    }\n  }\n\n  const fieldError = validateKnownFields(\n    destination,\n    REPLICATION_DESTINATION_FIELDS,\n    'replicationConfiguration.asReplicationDestination',\n  )\n  if (fieldError) return fieldError\n\n  const mapping = destination['sourceToDestinationKeyMapping']\n  if (!isRecord(mapping)) {\n    return {\n      code: 'bad_request',\n      message:\n        'replicationConfiguration.asReplicationDestination.sourceToDestinationKeyMapping must be an object',\n    }\n  }\n\n  for (const [sourceKey, destinationKey] of Object.entries(mapping)) {\n    if (sourceKey.length === 0) {\n      return {\n        code: 'bad_request',\n        message:\n          'replicationConfiguration.asReplicationDestination.sourceToDestinationKeyMapping keys must be non-empty',\n      }\n    }\n    if (typeof destinationKey !== 'string' || destinationKey.length === 0) {\n      return {\n        code: 'bad_request',\n        message:\n          'replicationConfiguration.asReplicationDestination.sourceToDestinationKeyMapping values must be non-empty strings',\n      }\n    }\n  }\n\n  return null\n}\n\n/**\n * Validates B2 replication configuration structure for bucket requests.\n *\n * @param config - Caller-supplied replication configuration.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-update-bucket\n */\nexport function validateReplicationConfiguration(config: unknown): ValidationError | null {\n  if (!isRecord(config)) {\n    return { code: 'bad_request', message: 'replicationConfiguration must be an object' }\n  }\n\n  const fieldError = validateKnownFields(\n    config,\n    REPLICATION_CONFIG_FIELDS,\n    'replicationConfiguration',\n  )\n  if (fieldError) return fieldError\n\n  if (!('asReplicationSource' in config) && !('asReplicationDestination' in config)) {\n    return {\n      code: 'bad_request',\n      message:\n        'replicationConfiguration must include asReplicationSource or asReplicationDestination',\n    }\n  }\n\n  const source = config['asReplicationSource']\n  if (source !== undefined && source !== null) {\n    const sourceError = validateReplicationSource(source)\n    if (sourceError) return sourceError\n  }\n\n  const destination = config['asReplicationDestination']\n  if (destination !== undefined && destination !== null) {\n    const destinationError = validateReplicationDestination(destination)\n    if (destinationError) return destinationError\n  }\n\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// Event notification rules (`b2_set_bucket_notification_rules`)\n// ---------------------------------------------------------------------------\n\nconst NOTIFICATION_RULE_FIELDS = new Set([\n  'eventTypes',\n  'isEnabled',\n  'isSuspended',\n  'maxEventsPerBatch',\n  'name',\n  'objectNamePrefix',\n  'suspensionReason',\n  'targetConfiguration',\n])\n\nconst NOTIFICATION_TARGET_FIELDS = new Set([\n  'customHeaders',\n  'hmacSha256SigningSecret',\n  'targetType',\n  'url',\n])\n\nconst KNOWN_NOTIFICATION_EVENT_TYPES = new Set<string>(Object.values(EventType))\n\n/**\n * Validates event notification rules for `b2_set_bucket_notification_rules`.\n *\n * @param rules - Caller-supplied event notification rules.\n *\n * @returns A `{ code, message }` pair on failure, or `null` when valid.\n *\n * @see https://www.backblaze.com/apidocs/b2-set-bucket-notification-rules\n */\nexport function validateNotificationRules(rules: unknown): ValidationError | null {\n  if (!Array.isArray(rules)) {\n    return {\n      code: 'bad_request',\n      message: 'eventNotificationRules must be an array',\n    }\n  }\n\n  const names = new Set<string>()\n  for (const [index, ruleValue] of rules.entries()) {\n    const rulePath = `eventNotificationRules[${index}]`\n    if (!isRecord(ruleValue)) {\n      return { code: 'bad_request', message: `${rulePath} must be an object` }\n    }\n\n    const fieldError = validateKnownFields(ruleValue, NOTIFICATION_RULE_FIELDS, rulePath)\n    if (fieldError) return fieldError\n\n    if (typeof ruleValue['isEnabled'] !== 'boolean') {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.isEnabled must be a boolean`,\n      }\n    }\n\n    const maxEventsPerBatch = ruleValue['maxEventsPerBatch']\n    if (\n      maxEventsPerBatch !== undefined &&\n      (typeof maxEventsPerBatch !== 'number' ||\n        !Number.isInteger(maxEventsPerBatch) ||\n        maxEventsPerBatch < 1)\n    ) {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.maxEventsPerBatch must be a positive integer`,\n      }\n    }\n\n    const name = ruleValue['name']\n    if (typeof name !== 'string' || name.length === 0) {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.name must be a non-empty string`,\n      }\n    }\n    if (names.has(name)) {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.name must be unique within eventNotificationRules`,\n      }\n    }\n    names.add(name)\n\n    const eventTypes = ruleValue['eventTypes']\n    if (!Array.isArray(eventTypes) || eventTypes.length === 0) {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.eventTypes must be a non-empty array`,\n      }\n    }\n    for (const eventType of eventTypes) {\n      if (typeof eventType !== 'string' || !KNOWN_NOTIFICATION_EVENT_TYPES.has(eventType)) {\n        return {\n          code: 'bad_request',\n          message: `${rulePath}.eventTypes contains an unknown event type`,\n        }\n      }\n    }\n\n    const targetConfiguration = ruleValue['targetConfiguration']\n    if (!isRecord(targetConfiguration)) {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.targetConfiguration must be an object`,\n      }\n    }\n\n    const targetFieldError = validateKnownFields(\n      targetConfiguration,\n      NOTIFICATION_TARGET_FIELDS,\n      `${rulePath}.targetConfiguration`,\n    )\n    if (targetFieldError) return targetFieldError\n\n    if (targetConfiguration['targetType'] !== 'webhook') {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.targetConfiguration.targetType must be \"webhook\"`,\n      }\n    }\n\n    const url = targetConfiguration['url']\n    if (typeof url !== 'string') {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.targetConfiguration.url must be a valid https URL`,\n      }\n    }\n    try {\n      if (new URL(url).protocol !== 'https:') {\n        return {\n          code: 'bad_request',\n          message: `${rulePath}.targetConfiguration.url must be a valid https URL`,\n        }\n      }\n    } catch {\n      return {\n        code: 'bad_request',\n        message: `${rulePath}.targetConfiguration.url must be a valid https URL`,\n      }\n    }\n  }\n\n  return null\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAa,eAAe;;AAE5B,IAAa,eAAe;AAE5B,IAAM,qBAAqB,IAAI,IAAY,OAAO,OAAO,aAAA,UAAU,CAAC;;;;;;;;;;AAWpE,SAAgB,8BAA8B,cAA+C;CAC3F,IAAI,CAAC,MAAM,QAAQ,YAAY,GAC7B,OAAO;EAAE,MAAM;EAAe,SAAS;CAAgC;CAEzE,IAAI,aAAa,WAAW,GAC1B,OAAO;EAAE,MAAM;EAAe,SAAS;CAAiC;CAE1E,MAAM,sBAAsB,aAAa,QACtC,eAAe,OAAO,eAAe,YAAY,CAAC,mBAAmB,IAAI,UAAU,CACtF;CACA,IAAI,oBAAoB,SAAS,GAC/B,OAAO;EACL,MAAM;EACN,SAAS,yBAAyB,oBAAoB,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;CAC7E;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,+BACd,cACuB;CACvB,OAAO,OAAO,OAAO,CAAC,GAAG,YAAY,CAAC;AACxC;;;;;;;;;;AAWA,SAAgB,sBAAsB,SAA0C;CAC9E,IAAI,OAAO,YAAY,UACrB,OAAO;EAAE,MAAM;EAAe,SAAS;CAA2B;CAEpE,IAAI,QAAQ,SAAA,KAAyB,QAAQ,SAAA,KAC3C,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,OAAO;AACT;;;;;;;;;;AAiBA,SAAgB,mBAAmB,MAAsC;CACvE,IAAI,OAAO,SAAS,YAAY,KAAK,SAAA,KAA4B,KAAK,SAAA,IACpE,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,IAAI,kBAAA,0BAA0B,IAAI,GAChC,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,IAAI,CAAC,kBAAA,0BAA0B,IAAI,GACjC,OAAO;EACL,MAAM;EACN,SACE;CACJ;CAEF,IAAI,KAAK,WAAA,KAAsC,GAC7C,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,OAAO;AACT;;;;;;;;;;;;AAmBA,SAAgB,iBAAiB,MAAsC;CACrE,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAC9C,OAAO;EAAE,MAAM;EAAqB,SAAS;CAAsC;CAGrF,IADmB,kBAAA,wBAAwB,IACvC,MAAe,MACjB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,IAAI,kBAAA,8BAA8B,IAAI,GACpC,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAMF,IAAI,SAAS,OAAO,SAAS,MAC3B,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,KAAK,KAAK,SAAS,IAAI,GAClE,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,OAAO;AACT;;AAOA,IAAa,sBAAsB;;AAEnC,IAAa,sBAAsB;;AAEnC,IAAM,sBAAsB;;;;;;;;;;;AAY5B,SAAgB,iBAAiB,MAAsD;CACrF,IAAI,QAAQ;CACZ,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;EAC/C,IAAI,CAAC,oBAAoB,KAAK,GAAG,GAC/B,OAAO;GACL,MAAM;GACN,SAAS,iBAAiB,IAAI;EAChC;EAEF,IAAI,OAAO,UAAU,UACnB,OAAO;GAAE,MAAM;GAAqB,SAAS,uBAAuB,IAAI;EAAoB;EAE9F,MAAM,WAAW,mBAAA,YAAY,OAAO,GAAG,CAAC,CAAC;EACzC,MAAM,aAAa,mBAAA,YAAY,OAAO,KAAK,CAAC,CAAC;EAC7C,IAAI,aAAA,MACF,OAAO;GACL,MAAM;GACN,SAAS,uBAAuB,IAAI,YAAY,oBAAoB;EACtE;EAEF,SAAS,WAAW;CACtB;CACA,IAAI,QAAA,MACF,OAAO;EACL,MAAM;EACN,SAAS,uBAAuB,MAAM,qBAAqB,oBAAoB;CACjF;CAEF,OAAO;AACT;;AAGA,IAAa,uBAAuB;;AAEpC,IAAa,wBAAwB;;AAErC,IAAM,wBAAwB;;;;;;;;;;AAW9B,SAAgB,mBAAmB,MAAsD;CACvF,MAAM,UAAU,OAAO,QAAQ,IAAI;CACnC,IAAI,QAAQ,SAAA,IACV,OAAO;EACL,MAAM;EACN,SAAS,iDAAsE,QAAQ,OAAO;CAChG;CAEF,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS;EAClC,IAAI,CAAC,sBAAsB,KAAK,GAAG,GACjC,OAAO;GACL,MAAM;GACN,SAAS,mBAAmB,IAAI;EAClC;EAEF,IAAI,OAAO,UAAU,UACnB,OAAO;GACL,MAAM;GACN,SAAS,yBAAyB,IAAI;EACxC;EAGF,IADmB,mBAAA,YAAY,OAAO,KAAK,CAAC,CAAC,aAAA,MAE3C,OAAO;GACL,MAAM;GACN,SAAS,yBAAyB,IAAI,YAAY,sBAAsB;EAC1E;CAEJ;CACA,OAAO;AACT;;;;;AAUA,IAAa,qBAAqB;;CAEhC,oBAAoB;;CAEpB,uBAAuB;;CAEvB,gCAAgC;;CAEhC,cAAc;;CAEd,eAAe;AACjB;;;;;;;;;;AAWA,SAAgB,iBACd,WACA,UACwB;CACxB,IAAI,cAAc,KAAA,GAAW,OAAO;CACpC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAC9C,OAAO;EACL,MAAM;EACN,SAAS,gDAAgD,UAAU;CACrE;CAEF,MAAM,MAAM,mBAAmB;CAC/B,IAAI,YAAY,KACd,OAAO;EACL,MAAM;EACN,SAAS,gBAAgB,UAAU,eAAe,SAAS,UAAU;CACvE;CAEF,OAAO;AACT;;AAOA,IAAa,qCAAqC;;AAElD,IAAa,qCAAqC;;;;;;;;;AAUlD,SAAgB,sCAAsC,WAA4C;CAChG,IACE,OAAO,cAAc,YACrB,CAAC,OAAO,UAAU,SAAS,KAC3B,YAAA,KACA,YAAA,QAEA,OAAO;EACL,MAAM;EACN,SAAS,4DAAgG;CAC3G;CAEF,OAAO;AACT;;;;;;;;;;;AAYA,SAAgB,oCAAoC,WAA4C;CAC9F,IAAI,OAAO,cAAc,UACvB,OAAO;EAAE,MAAM;EAAe,SAAS;CAAkC;CAE3E,OAAO;AACT;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,oBACP,OACA,eACA,MACwB;CACxB,KAAK,MAAM,SAAS,OAAO,KAAK,KAAK,GACnC,IAAI,CAAC,cAAc,IAAI,KAAK,GAC1B,OAAO;EACL,MAAM;EACN,SAAS,GAAG,KAAK,GAAG,MAAM;CAC5B;CAGJ,OAAO;AACT;AAEA,SAAS,oBACP,OACA,MACA,UAAgF,CAAC,GACzD;CACxB,IAAI,UAAU,QAAQ,QAAQ,cAAc,MAAM,OAAO;CACzD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK;CAA8B;CAE/E,IAAI,QAAQ,oBAAoB,QAAQ,MAAM,WAAW,GACvD,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK;CAA4B;CAE7E,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK,GAAG,MAAM;CAAoB;CAGhF,OAAO;AACT;AAEA,SAAS,uBAAuB,OAAgB,MAAsC;CACpF,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAChD,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK;CAA6B;CAE9E,OAAO;AACT;AAEA,SAAS,2BAA2B,OAAgB,MAAsC;CACxF,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GACnE,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK;CAAiC;CAElF,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAe,KAAa,MAAsC;CAC/F,IAAI,QAAQ,KACV,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK,mBAAmB;CAAM;CAE1E,OAAO;AACT;AAEA,SAAS,wBAAwB,OAAgB,MAAsC;CACrF,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GACnE,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK;CAA6B;CAE9E,OAAO;AACT;AAEA,SAAS,gCAAgC,OAAgB,MAAsC;CAC7F,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,OAAO;CAClD,OAAO,wBAAwB,OAAO,IAAI;AAC5C;AAEA,SAAS,mBACP,OACA,MACA,MACwB;CACxB,IAAI,MAAM,IAAI,IAAI,GAChB,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,KAAK;CAAiB;CAElE,MAAM,IAAI,IAAI;CACd,OAAO;AACT;AAMA,IAAM,qBAAqB,IAAI,IAAY,OAAO,OAAO,eAAA,UAAU,CAAC;;;;;;;;;;AAWpE,SAAgB,oBAAoB,aAA8C;CAChF,IAAI,gBAAgB,KAAA,GAAW,OAAO;CACtC,IAAI,CAAC,MAAM,QAAQ,WAAW,GAC5B,OAAO;EAAE,MAAM;EAAe,SAAS;CAA+B;CAExE,KAAK,MAAM,CAAC,OAAO,eAAe,YAAY,QAAQ,GACpD,IAAI,OAAO,eAAe,YAAY,CAAC,mBAAmB,IAAI,UAAU,GACtE,OAAO;EACL,MAAM;EACN,SAAS,eAAe,MAAM;CAChC;CAGJ,OAAO;AACT;AAEA,IAAM,mCAAmB,IAAI,IAAI;CAC/B;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,IAAM,2BAA2B;AACjC,IAAM,wBAAwB,IAAI,IAAY,OAAO,OAAO,eAAA,aAAa,CAAC;;;;;;;;;;AAW1E,SAAgB,kBAAkB,OAAwC;CACxE,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;EAAE,MAAM;EAAe,SAAS;CAA6B;CAGtE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;EAC3C,MAAM,WAAW,aAAa,MAAM;EACpC,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;GAAE,MAAM;GAAe,SAAS,GAAG,SAAS;EAAoB;EAGzE,MAAM,aAAa,oBAAoB,MAAM,kBAAkB,QAAQ;EACvE,IAAI,YAAY,OAAO;EAEvB,MAAM,YAAY,uBAAuB,KAAK,iBAAiB,GAAG,SAAS,cAAc;EACzF,IAAI,WAAW,OAAO;EACtB,MAAM,WAAW,KAAK;EACtB,MAAM,kBAAkB,mBAAmB,OAAO,UAAU,GAAG,SAAS,cAAc;EACtF,IAAI,iBAAiB,OAAO;EAE5B,MAAM,eAAe,oBAAoB,KAAK,mBAAmB,GAAG,SAAS,kBAAkB,EAC7F,iBAAiB,KACnB,CAAC;EACD,IAAI,cAAc,OAAO;EAEzB,MAAM,kBAAkB,oBACtB,KAAK,sBACL,GAAG,SAAS,qBACZ,EAAE,iBAAiB,KAAK,CAC1B;EACA,IAAI,iBAAiB,OAAO;EAC5B,KAAK,MAAM,aAAa,KAAK,sBAC3B,IAAI,CAAC,sBAAsB,IAAI,SAAS,GACtC,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAIJ,MAAM,eAAe,oBAAoB,KAAK,mBAAmB,GAAG,SAAS,kBAAkB,EAC7F,WAAW,KACb,CAAC;EACD,IAAI,cAAc,OAAO;EAEzB,MAAM,cAAc,oBAAoB,KAAK,kBAAkB,GAAG,SAAS,iBAAiB,EAC1F,WAAW,KACb,CAAC;EACD,IAAI,aAAa,OAAO;EAExB,MAAM,WAAW,2BAA2B,KAAK,kBAAkB,GAAG,SAAS,eAAe;EAC9F,IAAI,UAAU,OAAO;EACrB,MAAM,cAAc,sBAClB,KAAK,kBACL,0BACA,GAAG,SAAS,eACd;EACA,IAAI,aAAa,OAAO;CAC1B;CAEA,OAAO;AACT;AAEA,IAAM,wCAAwB,IAAI,IAAI;CACpC;CACA;CACA;CACA;AACF,CAAC;;;;;;;;;;AAWD,SAAgB,uBAAuB,OAAwC;CAC7E,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;EAAE,MAAM;EAAe,SAAS;CAAkC;CAG3E,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;EAC3C,MAAM,WAAW,kBAAkB,MAAM;EACzC,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;GAAE,MAAM;GAAe,SAAS,GAAG,SAAS;EAAoB;EAGzE,MAAM,aAAa,oBAAoB,MAAM,uBAAuB,QAAQ;EAC5E,IAAI,YAAY,OAAO;EAEvB,MAAM,gBAAgB,gCACpB,KAAK,6BACL,GAAG,SAAS,0BACd;EACA,IAAI,eAAe,OAAO;EAE1B,MAAM,cAAc,gCAClB,KAAK,8BACL,GAAG,SAAS,2BACd;EACA,IAAI,aAAa,OAAO;EAExB,MAAM,cAAc,gCAClB,KAAK,oDACL,GAAG,SAAS,iDACd;EACA,IAAI,aAAa,OAAO;EAExB,IACE,KAAK,+BAA+B,QACpC,KAAK,gCAAgC,QACrC,KAAK,sDAAsD,MAE3D,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAGF,IAAI,OAAO,KAAK,sBAAsB,UACpC,OAAO;GAAE,MAAM;GAAe,SAAS,GAAG,SAAS;EAAkC;CAEzF;CAEA,OAAO;AACT;AAEA,IAAM,2CAA2B,IAAI,IAAI,CAAC,QAAQ,QAAQ,CAAC;AAC3D,IAAM,0CAA0B,IAAI,IAAI,CAAC,YAAY,MAAM,CAAC;AAC5D,IAAM,0BAA0B,IAAI,IAAY,OAAO,OAAO,eAAA,mBAAmB,CAAC;AAClF,IAAM,iCAAiC;;;;;;;;;;AAWvC,SAAgB,yBAAyB,QAAyC;CAChF,IAAI,CAAC,SAAS,MAAM,GAClB,OAAO;EAAE,MAAM;EAAe,SAAS;CAAqC;CAG9E,MAAM,aAAa,oBAAoB,QAAQ,0BAA0B,kBAAkB;CAC3F,IAAI,YAAY,OAAO;CAEvB,MAAM,OAAO,OAAO;CACpB,IAAI,OAAO,SAAS,YAAY,CAAC,wBAAwB,IAAI,IAAI,GAC/D,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,MAAM,SAAS,OAAO;CACtB,IAAI,SAAS,eAAA,oBAAoB,MAAM;EACrC,IAAI,WAAW,MACb,OAAO;GACL,MAAM;GACN,SAAS;EACX;EAEF,OAAO;CACT;CAEA,IAAI,CAAC,SAAS,MAAM,GAClB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,MAAM,mBAAmB,oBACvB,QACA,yBACA,yBACF;CACA,IAAI,kBAAkB,OAAO;CAE7B,MAAM,gBAAgB,wBACpB,OAAO,aACP,kCACF;CACA,IAAI,eAAe,OAAO;CAC1B,IAAI,CAAC,OAAO,cAAc,OAAO,WAAW,GAC1C,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,IAAI,OAAO,YAAY,UAAU,OAAO,YAAY,SAClD,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,MAAM,eACJ,OAAO,YAAY,SACd,OAAO,cACP,OAAO,cAAyB;CACvC,IAAI,CAAC,OAAO,SAAS,YAAY,KAAK,eAAe,gCACnD,OAAO;EACL,MAAM;EACN,SAAS,2CAA2C,+BAA+B;CACrF;CAGF,OAAO;AACT;AAEA,IAAM,4CAA4B,IAAI,IAAI,CAAC,uBAAuB,0BAA0B,CAAC;AAC7F,IAAM,4CAA4B,IAAI,IAAI,CAAC,oBAAoB,wBAAwB,CAAC;AACxF,IAAM,iDAAiC,IAAI,IAAI,CAAC,+BAA+B,CAAC;AAChF,IAAM,0CAA0B,IAAI,IAAI;CACtC;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,wBAAwB,MAAe,UAA0C;CACxF,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,SAAS;CAAoB;CAGzE,MAAM,aAAa,oBAAoB,MAAM,yBAAyB,QAAQ;CAC9E,IAAI,YAAY,OAAO;CAEvB,MAAM,mBAAmB,uBACvB,KAAK,wBACL,GAAG,SAAS,qBACd;CACA,IAAI,kBAAkB,OAAO;CAE7B,IAAI,OAAO,KAAK,sBAAsB,UACpC,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,SAAS;CAAkC;CAGvF,IAAI,OAAO,KAAK,4BAA4B,WAC1C,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,SAAS;CAAyC;CAG9F,IAAI,OAAO,KAAK,iBAAiB,WAC/B,OAAO;EAAE,MAAM;EAAe,SAAS,GAAG,SAAS;CAA8B;CAGnF,MAAM,gBAAgB,wBAAwB,KAAK,aAAa,GAAG,SAAS,UAAU;CACtF,IAAI,eAAe,OAAO;CAE1B,MAAM,YAAY,uBAChB,KAAK,wBACL,GAAG,SAAS,qBACd;CACA,IAAI,WAAW,OAAO;CAEtB,OAAO;AACT;AAEA,SAAS,0BAA0B,QAAyC;CAC1E,IAAI,CAAC,SAAS,MAAM,GAClB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,MAAM,aAAa,oBACjB,QACA,2BACA,8CACF;CACA,IAAI,YAAY,OAAO;CAEvB,MAAM,iBAAiB,uBACrB,OAAO,2BACP,qEACF;CACA,IAAI,gBAAgB,OAAO;CAE3B,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;EAC3C,MAAM,WAAW,iEAAiE,MAAM;EACxF,MAAM,YAAY,wBAAwB,MAAM,QAAQ;EACxD,IAAI,WAAW,OAAO;EACtB,MAAM,WAAY,KAAiC;EACnD,MAAM,kBAAkB,mBAAmB,OAAO,UAAU,GAAG,SAAS,qBAAqB;EAC7F,IAAI,iBAAiB,OAAO;CAC9B;CAEA,OAAO;AACT;AAEA,SAAS,+BAA+B,aAA8C;CACpF,IAAI,CAAC,SAAS,WAAW,GACvB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,MAAM,aAAa,oBACjB,aACA,gCACA,mDACF;CACA,IAAI,YAAY,OAAO;CAEvB,MAAM,UAAU,YAAY;CAC5B,IAAI,CAAC,SAAS,OAAO,GACnB,OAAO;EACL,MAAM;EACN,SACE;CACJ;CAGF,KAAK,MAAM,CAAC,WAAW,mBAAmB,OAAO,QAAQ,OAAO,GAAG;EACjE,IAAI,UAAU,WAAW,GACvB,OAAO;GACL,MAAM;GACN,SACE;EACJ;EAEF,IAAI,OAAO,mBAAmB,YAAY,eAAe,WAAW,GAClE,OAAO;GACL,MAAM;GACN,SACE;EACJ;CAEJ;CAEA,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,iCAAiC,QAAyC;CACxF,IAAI,CAAC,SAAS,MAAM,GAClB,OAAO;EAAE,MAAM;EAAe,SAAS;CAA6C;CAGtF,MAAM,aAAa,oBACjB,QACA,2BACA,0BACF;CACA,IAAI,YAAY,OAAO;CAEvB,IAAI,EAAE,yBAAyB,WAAW,EAAE,8BAA8B,SACxE,OAAO;EACL,MAAM;EACN,SACE;CACJ;CAGF,MAAM,SAAS,OAAO;CACtB,IAAI,WAAW,KAAA,KAAa,WAAW,MAAM;EAC3C,MAAM,cAAc,0BAA0B,MAAM;EACpD,IAAI,aAAa,OAAO;CAC1B;CAEA,MAAM,cAAc,OAAO;CAC3B,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,MAAM;EACrD,MAAM,mBAAmB,+BAA+B,WAAW;EACnE,IAAI,kBAAkB,OAAO;CAC/B;CAEA,OAAO;AACT;AAMA,IAAM,2CAA2B,IAAI,IAAI;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,IAAM,6CAA6B,IAAI,IAAI;CACzC;CACA;CACA;CACA;AACF,CAAC;AAED,IAAM,iCAAiC,IAAI,IAAY,OAAO,OAAO,sBAAA,SAAS,CAAC;;;;;;;;;;AAW/E,SAAgB,0BAA0B,OAAwC;CAChF,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAGF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,GAAG;EAChD,MAAM,WAAW,0BAA0B,MAAM;EACjD,IAAI,CAAC,SAAS,SAAS,GACrB,OAAO;GAAE,MAAM;GAAe,SAAS,GAAG,SAAS;EAAoB;EAGzE,MAAM,aAAa,oBAAoB,WAAW,0BAA0B,QAAQ;EACpF,IAAI,YAAY,OAAO;EAEvB,IAAI,OAAO,UAAU,iBAAiB,WACpC,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAGF,MAAM,oBAAoB,UAAU;EACpC,IACE,sBAAsB,KAAA,MACrB,OAAO,sBAAsB,YAC5B,CAAC,OAAO,UAAU,iBAAiB,KACnC,oBAAoB,IAEtB,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAGF,MAAM,OAAO,UAAU;EACvB,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAC9C,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAEF,IAAI,MAAM,IAAI,IAAI,GAChB,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAEF,MAAM,IAAI,IAAI;EAEd,MAAM,aAAa,UAAU;EAC7B,IAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,GACtD,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAEF,KAAK,MAAM,aAAa,YACtB,IAAI,OAAO,cAAc,YAAY,CAAC,+BAA+B,IAAI,SAAS,GAChF,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAIJ,MAAM,sBAAsB,UAAU;EACtC,IAAI,CAAC,SAAS,mBAAmB,GAC/B,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAGF,MAAM,mBAAmB,oBACvB,qBACA,4BACA,GAAG,SAAS,qBACd;EACA,IAAI,kBAAkB,OAAO;EAE7B,IAAI,oBAAoB,kBAAkB,WACxC,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAGF,MAAM,MAAM,oBAAoB;EAChC,IAAI,OAAO,QAAQ,UACjB,OAAO;GACL,MAAM;GACN,SAAS,GAAG,SAAS;EACvB;EAEF,IAAI;GACF,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,aAAa,UAC5B,OAAO;IACL,MAAM;IACN,SAAS,GAAG,SAAS;GACvB;EAEJ,QAAQ;GACN,OAAO;IACL,MAAM;IACN,SAAS,GAAG,SAAS;GACvB;EACF;CACF;CAEA,OAAO;AACT"}

package/dist/simulator/validation.d.cts

@@ -1,9 +1,42 @@
 import { BUCKET_NAME_MAX, BUCKET_NAME_MIN, FILE_NAME_MAX_BYTES } from '../internal/b2-naming.js';
+import { Capability } from '../types/auth.js';
 /** Shape returned by validation functions when input is rejected. */
 export interface ValidationError {
     readonly code: string;
     readonly message: string;
 }
+/** Minimum length for application key names. */
+export declare const KEY_NAME_MIN = 1;
+/** Maximum length for application key names. */
+export declare const KEY_NAME_MAX = 100;
+/**
+ * Validates application-key capabilities against B2's supported capability set.
+ *
+ * @param capabilities - Caller-supplied capabilities array.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-create-key
+ */
+export declare function validateCreateKeyCapabilities(capabilities: unknown): ValidationError | null;
+/**
+ * Returns a frozen copy of a previously validated application-key capability list.
+ *
+ * @param capabilities - Validated caller-supplied capabilities.
+ *
+ * @returns An immutable capability list safe to store internally.
+ */
+export declare function normalizeCreateKeyCapabilities(capabilities: readonly Capability[]): readonly Capability[];
+/**
+ * Validates application-key names against B2's documented length limits.
+ *
+ * @param keyName - Caller-supplied keyName.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-create-key
+ */
+export declare function validateCreateKeyName(keyName: unknown): ValidationError | null;
 export { BUCKET_NAME_MAX, BUCKET_NAME_MIN };
 /**
  * Validates a bucket name against B2's documented rules.
@@ -83,4 +116,88 @@ export declare const LIST_ENDPOINT_CAPS: {
  * @returns A `{ code, message }` pair on failure, or `null` when valid.
  */
 export declare function validateMaxCount(requested: number | undefined, endpoint: keyof typeof LIST_ENDPOINT_CAPS): ValidationError | null;
+/** Minimum `b2_get_download_authorization.validDurationInSeconds`. */
+export declare const DOWNLOAD_AUTH_DURATION_MIN_SECONDS = 1;
+/** Maximum `b2_get_download_authorization.validDurationInSeconds`. */
+export declare const DOWNLOAD_AUTH_DURATION_MAX_SECONDS = 604800;
+/**
+ * Validates a `b2_get_download_authorization` duration against B2's
+ * documented inclusive 1-second to 7-day range.
+ *
+ * @param requested - Caller-supplied duration in seconds.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ */
+export declare function validateDownloadAuthorizationDuration(requested: unknown): ValidationError | null;
+/**
+ * Validates a `b2_get_download_authorization` file name prefix.
+ *
+ * B2 allows an empty prefix, but the field must still be present as a
+ * string so later prefix checks cannot crash on malformed request bodies.
+ *
+ * @param requested - Caller-supplied file name prefix.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ */
+export declare function validateDownloadAuthorizationPrefix(requested: unknown): ValidationError | null;
+/**
+ * Validates a `b2_list_buckets.bucketTypes` filter.
+ *
+ * @param bucketTypes - Caller-supplied bucket type filter.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-list-buckets
+ */
+export declare function validateBucketTypes(bucketTypes: unknown): ValidationError | null;
+/**
+ * Validates B2 CORS rule structure for bucket create/update requests.
+ *
+ * @param rules - Caller-supplied CORS rules.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/docs/cloud-storage-cross-origin-resource-sharing-rules
+ */
+export declare function validateCorsRules(rules: unknown): ValidationError | null;
+/**
+ * Validates B2 lifecycle rule structure for bucket create/update requests.
+ *
+ * @param rules - Caller-supplied lifecycle rules.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/docs/cloud-storage-lifecycle-rules
+ */
+export declare function validateLifecycleRules(rules: unknown): ValidationError | null;
+/**
+ * Validates default Object Lock retention policy structure for bucket requests.
+ *
+ * @param policy - Caller-supplied default retention policy.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/docs/cloud-storage-object-lock
+ */
+export declare function validateDefaultRetention(policy: unknown): ValidationError | null;
+/**
+ * Validates B2 replication configuration structure for bucket requests.
+ *
+ * @param config - Caller-supplied replication configuration.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-update-bucket
+ */
+export declare function validateReplicationConfiguration(config: unknown): ValidationError | null;
+/**
+ * Validates event notification rules for `b2_set_bucket_notification_rules`.
+ *
+ * @param rules - Caller-supplied event notification rules.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-set-bucket-notification-rules
+ */
+export declare function validateNotificationRules(rules: unknown): ValidationError | null;
 //# sourceMappingURL=validation.d.ts.map

package/dist/simulator/validation.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/simulator/validation.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EAEf,mBAAmB,EAKpB,MAAM,0BAA0B,CAAA;AAGjC,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAMD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA2BvE;AAMD,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmCrE;AAMD,iEAAiE;AACjE,eAAO,MAAM,mBAAmB,OAAO,CAAA;AACvC,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAIvC;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA6BrF;AAED,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,OAAO,CAAA;AAIzC;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA8BvF;AAMD;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6CAA6C;;IAE7C,gDAAgD;;IAEhD,yDAAyD;;IAEzD,sCAAsC;;IAEtC,wCAAwC;;CAEhC,CAAA;AAEV;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,OAAO,kBAAkB,GACxC,eAAe,GAAG,IAAI,CAgBxB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/simulator/validation.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EAEf,mBAAmB,EAKpB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAK7C,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAMD,gDAAgD;AAChD,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,gDAAgD;AAChD,eAAO,MAAM,YAAY,MAAM,CAAA;AAI/B;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAiB3F;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,SAAS,UAAU,EAAE,GAClC,SAAS,UAAU,EAAE,CAEvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAW9E;AAMD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA2BvE;AAMD,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmCrE;AAMD,iEAAiE;AACjE,eAAO,MAAM,mBAAmB,OAAO,CAAA;AACvC,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAIvC;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA6BrF;AAED,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,OAAO,CAAA;AAIzC;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA8BvF;AAMD;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6CAA6C;;IAE7C,gDAAgD;;IAEhD,yDAAyD;;IAEzD,sCAAsC;;IAEtC,wCAAwC;;CAEhC,CAAA;AAEV;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,OAAO,kBAAkB,GACxC,eAAe,GAAG,IAAI,CAgBxB;AAMD,sEAAsE;AACtE,eAAO,MAAM,kCAAkC,IAAI,CAAA;AACnD,sEAAsE;AACtE,eAAO,MAAM,kCAAkC,SAAU,CAAA;AAEzD;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAahG;AAED;;;;;;;;;GASG;AACH,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAK9F;AA6FD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAchF;AAcD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CA8DxE;AASD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAiD7E;AAOD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAuEhF;AA0ID;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAiCxF;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAkHhF"}

package/dist/simulator/validation.d.ts

@@ -1,9 +1,42 @@
 import { BUCKET_NAME_MAX, BUCKET_NAME_MIN, FILE_NAME_MAX_BYTES } from '../internal/b2-naming.js';
+import { Capability } from '../types/auth.js';
 /** Shape returned by validation functions when input is rejected. */
 export interface ValidationError {
     readonly code: string;
     readonly message: string;
 }
+/** Minimum length for application key names. */
+export declare const KEY_NAME_MIN = 1;
+/** Maximum length for application key names. */
+export declare const KEY_NAME_MAX = 100;
+/**
+ * Validates application-key capabilities against B2's supported capability set.
+ *
+ * @param capabilities - Caller-supplied capabilities array.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-create-key
+ */
+export declare function validateCreateKeyCapabilities(capabilities: unknown): ValidationError | null;
+/**
+ * Returns a frozen copy of a previously validated application-key capability list.
+ *
+ * @param capabilities - Validated caller-supplied capabilities.
+ *
+ * @returns An immutable capability list safe to store internally.
+ */
+export declare function normalizeCreateKeyCapabilities(capabilities: readonly Capability[]): readonly Capability[];
+/**
+ * Validates application-key names against B2's documented length limits.
+ *
+ * @param keyName - Caller-supplied keyName.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-create-key
+ */
+export declare function validateCreateKeyName(keyName: unknown): ValidationError | null;
 export { BUCKET_NAME_MAX, BUCKET_NAME_MIN };
 /**
  * Validates a bucket name against B2's documented rules.
@@ -83,4 +116,88 @@ export declare const LIST_ENDPOINT_CAPS: {
  * @returns A `{ code, message }` pair on failure, or `null` when valid.
  */
 export declare function validateMaxCount(requested: number | undefined, endpoint: keyof typeof LIST_ENDPOINT_CAPS): ValidationError | null;
+/** Minimum `b2_get_download_authorization.validDurationInSeconds`. */
+export declare const DOWNLOAD_AUTH_DURATION_MIN_SECONDS = 1;
+/** Maximum `b2_get_download_authorization.validDurationInSeconds`. */
+export declare const DOWNLOAD_AUTH_DURATION_MAX_SECONDS = 604800;
+/**
+ * Validates a `b2_get_download_authorization` duration against B2's
+ * documented inclusive 1-second to 7-day range.
+ *
+ * @param requested - Caller-supplied duration in seconds.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ */
+export declare function validateDownloadAuthorizationDuration(requested: unknown): ValidationError | null;
+/**
+ * Validates a `b2_get_download_authorization` file name prefix.
+ *
+ * B2 allows an empty prefix, but the field must still be present as a
+ * string so later prefix checks cannot crash on malformed request bodies.
+ *
+ * @param requested - Caller-supplied file name prefix.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ */
+export declare function validateDownloadAuthorizationPrefix(requested: unknown): ValidationError | null;
+/**
+ * Validates a `b2_list_buckets.bucketTypes` filter.
+ *
+ * @param bucketTypes - Caller-supplied bucket type filter.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-list-buckets
+ */
+export declare function validateBucketTypes(bucketTypes: unknown): ValidationError | null;
+/**
+ * Validates B2 CORS rule structure for bucket create/update requests.
+ *
+ * @param rules - Caller-supplied CORS rules.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/docs/cloud-storage-cross-origin-resource-sharing-rules
+ */
+export declare function validateCorsRules(rules: unknown): ValidationError | null;
+/**
+ * Validates B2 lifecycle rule structure for bucket create/update requests.
+ *
+ * @param rules - Caller-supplied lifecycle rules.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/docs/cloud-storage-lifecycle-rules
+ */
+export declare function validateLifecycleRules(rules: unknown): ValidationError | null;
+/**
+ * Validates default Object Lock retention policy structure for bucket requests.
+ *
+ * @param policy - Caller-supplied default retention policy.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/docs/cloud-storage-object-lock
+ */
+export declare function validateDefaultRetention(policy: unknown): ValidationError | null;
+/**
+ * Validates B2 replication configuration structure for bucket requests.
+ *
+ * @param config - Caller-supplied replication configuration.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-update-bucket
+ */
+export declare function validateReplicationConfiguration(config: unknown): ValidationError | null;
+/**
+ * Validates event notification rules for `b2_set_bucket_notification_rules`.
+ *
+ * @param rules - Caller-supplied event notification rules.
+ *
+ * @returns A `{ code, message }` pair on failure, or `null` when valid.
+ *
+ * @see https://www.backblaze.com/apidocs/b2-set-bucket-notification-rules
+ */
+export declare function validateNotificationRules(rules: unknown): ValidationError | null;
 //# sourceMappingURL=validation.d.ts.map

package/dist/simulator/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/simulator/validation.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EAEf,mBAAmB,EAKpB,MAAM,0BAA0B,CAAA;AAGjC,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAMD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA2BvE;AAMD,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmCrE;AAMD,iEAAiE;AACjE,eAAO,MAAM,mBAAmB,OAAO,CAAA;AACvC,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAIvC;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA6BrF;AAED,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,OAAO,CAAA;AAIzC;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA8BvF;AAMD;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6CAA6C;;IAE7C,gDAAgD;;IAEhD,yDAAyD;;IAEzD,sCAAsC;;IAEtC,wCAAwC;;CAEhC,CAAA;AAEV;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,OAAO,kBAAkB,GACxC,eAAe,GAAG,IAAI,CAgBxB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/simulator/validation.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EAEf,mBAAmB,EAKpB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAK7C,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAMD,gDAAgD;AAChD,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,gDAAgD;AAChD,eAAO,MAAM,YAAY,MAAM,CAAA;AAI/B;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAiB3F;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,SAAS,UAAU,EAAE,GAClC,SAAS,UAAU,EAAE,CAEvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAW9E;AAMD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA2BvE;AAMD,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmCrE;AAMD,iEAAiE;AACjE,eAAO,MAAM,mBAAmB,OAAO,CAAA;AACvC,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAIvC;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA6BrF;AAED,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,OAAO,CAAA;AAIzC;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,CA8BvF;AAMD;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6CAA6C;;IAE7C,gDAAgD;;IAEhD,yDAAyD;;IAEzD,sCAAsC;;IAEtC,wCAAwC;;CAEhC,CAAA;AAEV;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,OAAO,kBAAkB,GACxC,eAAe,GAAG,IAAI,CAgBxB;AAMD,sEAAsE;AACtE,eAAO,MAAM,kCAAkC,IAAI,CAAA;AACnD,sEAAsE;AACtE,eAAO,MAAM,kCAAkC,SAAU,CAAA;AAEzD;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAahG;AAED;;;;;;;;;GASG;AACH,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAK9F;AA6FD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAchF;AAcD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CA8DxE;AASD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAiD7E;AAOD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAuEhF;AA0ID;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAiCxF;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAkHhF"}