@backblaze-labs/b2-sdk 0.2.0 → 0.4.0

package/dist/bucket-validation.cjs

@@ -0,0 +1,111 @@
+const require_errors_index = require("./errors/index.cjs");
+const require_text_codec = require("./util/text-codec.cjs");
+const require_bucket = require("./types/bucket.cjs");
+//#region src/bucket-validation.ts
+var BUCKET_INFO_KEY_REGEX = new RegExp(require_bucket.BUCKET_INFO_KEY_PATTERN);
+var CORS_RULE_NAME_REGEX = new RegExp(require_bucket.CORS_RULE_NAME_PATTERN);
+var CORS_OPERATION_SET = new Set(require_bucket.CORS_ALLOWED_OPERATIONS);
+/**
+* Validates a bucketInfo record against B2's documented bucket metadata limits.
+*
+* @param bucketInfo - Caller-supplied bucketInfo record.
+*
+* @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+*/
+function assertValidBucketInfo(bucketInfo) {
+	if (!isObjectRecord(bucketInfo)) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", "bucketInfo must be an object", "invalid_bucket_info");
+	let totalValueBytes = 0;
+	for (const [key, value] of Object.entries(bucketInfo)) {
+		const keyBytes = utf8ByteLength(key);
+		if (keyBytes < 1 || keyBytes > 50) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must be 1-50 UTF-8 bytes`, "invalid_bucket_info");
+		if (key.startsWith("b2-")) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must not start with reserved prefix "b2-"`, "invalid_bucket_info");
+		if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must match ${require_bucket.BUCKET_INFO_KEY_PATTERN}`, "invalid_bucket_info");
+		if (typeof value !== "string") throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo value for "${key}" must be a string`, "invalid_bucket_info");
+		totalValueBytes += utf8ByteLength(value);
+		if (totalValueBytes > 1e4) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${require_bucket.BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`, "invalid_bucket_info");
+	}
+}
+/**
+* Validates CORS rules against B2's documented bucket CORS limits.
+*
+* @param corsRules - Caller-supplied CORS rule list.
+*
+* @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+*/
+function assertValidCorsRules(corsRules) {
+	if (!Array.isArray(corsRules)) throw new require_errors_index.B2BucketConfigurationError("corsRules", "corsRules must be an array");
+	if (corsRules.length > 100) throw new require_errors_index.B2BucketConfigurationError("corsRules", `corsRules cannot have more than 100 rules (got ${corsRules.length})`);
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, rule] of corsRules.entries()) {
+		const rulePath = `corsRules[${index}]`;
+		if (!isObjectRecord(rule)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath} must be an object`);
+		const ruleName = readRequiredString(rule, "corsRuleName", `${rulePath}.corsRuleName`);
+		if (ruleName.length < 6 || ruleName.length > 63) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be 6-63 characters`);
+		if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must match ${require_bucket.CORS_RULE_NAME_PATTERN}`);
+		if (ruleName.startsWith("b2-")) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must not start with reserved prefix "b2-"`);
+		if (names.has(ruleName)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be unique within the bucket`);
+		names.add(ruleName);
+		const allowedOrigins = readRequiredStringArray(rule, "allowedOrigins", `${rulePath}.allowedOrigins`);
+		if (allowedOrigins.length === 0) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.allowedOrigins must contain at least one item`);
+		const allowedOperations = readRequiredStringArray(rule, "allowedOperations", `${rulePath}.allowedOperations`);
+		if (allowedOperations.length === 0) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations must contain at least one item`);
+		for (const operation of allowedOperations) if (!CORS_OPERATION_SET.has(operation)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations contains unsupported operation "${operation}"`);
+		const allowedHeaders = readNullableStringArray(rule, "allowedHeaders", `${rulePath}.allowedHeaders`);
+		const exposeHeaders = readNullableStringArray(rule, "exposeHeaders", `${rulePath}.exposeHeaders`);
+		const maxAgeSeconds = rule["maxAgeSeconds"];
+		if (!Number.isSafeInteger(maxAgeSeconds) || maxAgeSeconds < 0) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be a non-negative safe integer`);
+		if (maxAgeSeconds > 86400) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be at most ${require_bucket.CORS_MAX_AGE_SECONDS_MAX}`);
+		const ruleBytes = utf8ByteLength(ruleName) + sumStringBytes(allowedOrigins) + sumStringBytes(allowedOperations) + sumStringBytes(allowedHeaders ?? []) + sumStringBytes(exposeHeaders ?? []);
+		if (ruleBytes >= 1e3) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${require_bucket.CORS_RULE_MAX_BYTES} bytes`);
+	}
+}
+/**
+* Validates the bucket configuration fields common to create and update calls.
+*
+* @param request - Bucket create/update request.
+*
+* @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+* CORS field violates B2 limits.
+*/
+function assertValidBucketConfiguration(request) {
+	if (request.bucketInfo !== void 0) assertValidBucketInfo(request.bucketInfo);
+	if (request.corsRules !== void 0) assertValidCorsRules(request.corsRules);
+}
+function isObjectRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function matchesEntirePattern(regex, value) {
+	return regex.exec(value)?.[0] === value;
+}
+function readRequiredString(record, key, path) {
+	const value = record[key];
+	if (typeof value !== "string") throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path} must be a string`);
+	return value;
+}
+function readRequiredStringArray(record, key, path) {
+	const value = record[key];
+	if (!Array.isArray(value)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path} must be an array`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function readNullableStringArray(record, key, path) {
+	const value = record[key];
+	if (value === null || value === void 0) return null;
+	if (!Array.isArray(value)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path} must be an array, null, or omitted`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function sumStringBytes(values) {
+	let total = 0;
+	for (const value of values) total += utf8ByteLength(value);
+	return total;
+}
+function utf8ByteLength(value) {
+	return require_text_codec.utf8Encoder.encode(value).byteLength;
+}
+//#endregion
+exports.assertValidBucketConfiguration = assertValidBucketConfiguration;
+exports.assertValidBucketInfo = assertValidBucketInfo;
+exports.assertValidCorsRules = assertValidCorsRules;
+
+//# sourceMappingURL=bucket-validation.cjs.map

package/dist/bucket-validation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.cjs","names":[],"sources":["../src/bucket-validation.ts"],"sourcesContent":["import { B2BucketConfigurationError } from './errors/index.ts'\nimport {\n  BUCKET_INFO_KEY_MAX_BYTES,\n  BUCKET_INFO_KEY_MIN_BYTES,\n  BUCKET_INFO_KEY_PATTERN,\n  BUCKET_INFO_RESERVED_PREFIX,\n  BUCKET_INFO_VALUES_MAX_BYTES,\n  CORS_ALLOWED_OPERATIONS,\n  CORS_MAX_AGE_SECONDS_MAX,\n  CORS_RULE_MAX_BYTES,\n  CORS_RULE_NAME_MAX_LENGTH,\n  CORS_RULE_NAME_MIN_LENGTH,\n  CORS_RULE_NAME_PATTERN,\n  CORS_RULE_NAME_RESERVED_PREFIX,\n  CORS_RULES_MAX_COUNT,\n  type CorsRule,\n  type CreateBucketRequest,\n  type UpdateBucketRequest,\n} from './types/bucket.ts'\nimport { utf8Encoder } from './util/text-codec.ts'\n\nconst BUCKET_INFO_KEY_REGEX = new RegExp(BUCKET_INFO_KEY_PATTERN)\nconst CORS_RULE_NAME_REGEX = new RegExp(CORS_RULE_NAME_PATTERN)\nconst CORS_OPERATION_SET = new Set<string>(CORS_ALLOWED_OPERATIONS)\n\n/**\n * Validates a bucketInfo record against B2's documented bucket metadata limits.\n *\n * @param bucketInfo - Caller-supplied bucketInfo record.\n *\n * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.\n */\nexport function assertValidBucketInfo(bucketInfo: Record<string, string>): void {\n  if (!isObjectRecord(bucketInfo)) {\n    throw new B2BucketConfigurationError(\n      'bucketInfo',\n      'bucketInfo must be an object',\n      'invalid_bucket_info',\n    )\n  }\n\n  let totalValueBytes = 0\n  for (const [key, value] of Object.entries(bucketInfo)) {\n    const keyBytes = utf8ByteLength(key)\n    if (keyBytes < BUCKET_INFO_KEY_MIN_BYTES || keyBytes > BUCKET_INFO_KEY_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must be ${BUCKET_INFO_KEY_MIN_BYTES}-${BUCKET_INFO_KEY_MAX_BYTES} UTF-8 bytes`,\n        'invalid_bucket_info',\n      )\n    }\n    if (key.startsWith(BUCKET_INFO_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must not start with reserved prefix \"${BUCKET_INFO_RESERVED_PREFIX}\"`,\n        'invalid_bucket_info',\n      )\n    }\n    if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must match ${BUCKET_INFO_KEY_PATTERN}`,\n        'invalid_bucket_info',\n      )\n    }\n    if (typeof value !== 'string') {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo value for \"${key}\" must be a string`,\n        'invalid_bucket_info',\n      )\n    }\n\n    totalValueBytes += utf8ByteLength(value)\n    if (totalValueBytes > BUCKET_INFO_VALUES_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`,\n        'invalid_bucket_info',\n      )\n    }\n  }\n}\n\n/**\n * Validates CORS rules against B2's documented bucket CORS limits.\n *\n * @param corsRules - Caller-supplied CORS rule list.\n *\n * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.\n */\nexport function assertValidCorsRules(corsRules: readonly CorsRule[]): void {\n  if (!Array.isArray(corsRules)) {\n    throw new B2BucketConfigurationError('corsRules', 'corsRules must be an array')\n  }\n  if (corsRules.length > CORS_RULES_MAX_COUNT) {\n    throw new B2BucketConfigurationError(\n      'corsRules',\n      `corsRules cannot have more than ${CORS_RULES_MAX_COUNT} rules (got ${corsRules.length})`,\n    )\n  }\n\n  const names = new Set<string>()\n  for (const [index, rule] of corsRules.entries()) {\n    const rulePath = `corsRules[${index}]`\n    if (!isObjectRecord(rule)) {\n      throw new B2BucketConfigurationError('corsRules', `${rulePath} must be an object`)\n    }\n\n    const ruleName = readRequiredString(rule, 'corsRuleName', `${rulePath}.corsRuleName`)\n    if (\n      ruleName.length < CORS_RULE_NAME_MIN_LENGTH ||\n      ruleName.length > CORS_RULE_NAME_MAX_LENGTH\n    ) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be ${CORS_RULE_NAME_MIN_LENGTH}-${CORS_RULE_NAME_MAX_LENGTH} characters`,\n      )\n    }\n    if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must match ${CORS_RULE_NAME_PATTERN}`,\n      )\n    }\n    if (ruleName.startsWith(CORS_RULE_NAME_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must not start with reserved prefix \"${CORS_RULE_NAME_RESERVED_PREFIX}\"`,\n      )\n    }\n    if (names.has(ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be unique within the bucket`,\n      )\n    }\n    names.add(ruleName)\n\n    const allowedOrigins = readRequiredStringArray(\n      rule,\n      'allowedOrigins',\n      `${rulePath}.allowedOrigins`,\n    )\n    if (allowedOrigins.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOrigins must contain at least one item`,\n      )\n    }\n\n    const allowedOperations = readRequiredStringArray(\n      rule,\n      'allowedOperations',\n      `${rulePath}.allowedOperations`,\n    )\n    if (allowedOperations.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOperations must contain at least one item`,\n      )\n    }\n    for (const operation of allowedOperations) {\n      if (!CORS_OPERATION_SET.has(operation)) {\n        throw new B2BucketConfigurationError(\n          'corsRules',\n          `${rulePath}.allowedOperations contains unsupported operation \"${operation}\"`,\n        )\n      }\n    }\n\n    const allowedHeaders = readNullableStringArray(\n      rule,\n      'allowedHeaders',\n      `${rulePath}.allowedHeaders`,\n    )\n    const exposeHeaders = readNullableStringArray(\n      rule,\n      'exposeHeaders',\n      `${rulePath}.exposeHeaders`,\n    )\n    const maxAgeSeconds = (rule as Record<string, unknown>)['maxAgeSeconds']\n    if (!Number.isSafeInteger(maxAgeSeconds) || (maxAgeSeconds as number) < 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be a non-negative safe integer`,\n      )\n    }\n    if ((maxAgeSeconds as number) > CORS_MAX_AGE_SECONDS_MAX) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be at most ${CORS_MAX_AGE_SECONDS_MAX}`,\n      )\n    }\n\n    const ruleBytes =\n      utf8ByteLength(ruleName) +\n      sumStringBytes(allowedOrigins) +\n      sumStringBytes(allowedOperations) +\n      sumStringBytes(allowedHeaders ?? []) +\n      sumStringBytes(exposeHeaders ?? [])\n    if (ruleBytes >= CORS_RULE_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${CORS_RULE_MAX_BYTES} bytes`,\n      )\n    }\n  }\n}\n\n/**\n * Validates the bucket configuration fields common to create and update calls.\n *\n * @param request - Bucket create/update request.\n *\n * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or\n * CORS field violates B2 limits.\n */\nexport function assertValidBucketConfiguration(\n  request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>,\n): void {\n  if (request.bucketInfo !== undefined) assertValidBucketInfo(request.bucketInfo)\n  if (request.corsRules !== undefined) assertValidCorsRules(request.corsRules)\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction matchesEntirePattern(regex: RegExp, value: string): boolean {\n  return regex.exec(value)?.[0] === value\n}\n\nfunction readRequiredString(record: Record<string, unknown>, key: string, path: string): string {\n  const value = record[key]\n  if (typeof value !== 'string') {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be a string`)\n  }\n  return value\n}\n\nfunction readRequiredStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] {\n  const value = record[key]\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction readNullableStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] | null {\n  const value = record[key]\n  if (value === null || value === undefined) return null\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array, null, or omitted`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction sumStringBytes(values: readonly string[]): number {\n  let total = 0\n  for (const value of values) total += utf8ByteLength(value)\n  return total\n}\n\nfunction utf8ByteLength(value: string): number {\n  return utf8Encoder.encode(value).byteLength\n}\n"],"mappings":";;;;AAqBA,IAAM,wBAAwB,IAAI,OAAO,eAAA,uBAAuB;AAChE,IAAM,uBAAuB,IAAI,OAAO,eAAA,sBAAsB;AAC9D,IAAM,qBAAqB,IAAI,IAAY,eAAA,uBAAuB;;;;;;;;AASlE,SAAgB,sBAAsB,YAA0C;CAC9E,IAAI,CAAC,eAAe,UAAU,GAC5B,MAAM,IAAI,qBAAA,2BACR,cACA,gCACA,qBACF;CAGF,IAAI,kBAAkB;CACtB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,WAAW,eAAe,GAAG;EACnC,IAAI,WAAA,KAAwC,WAAA,IAC1C,MAAM,IAAI,qBAAA,2BACR,cACA,mBAAmB,IAAI,6BACvB,qBACF;EAEF,IAAI,IAAI,WAAA,KAAsC,GAC5C,MAAM,IAAI,qBAAA,2BACR,cACA,mBAAmB,IAAI,8CACvB,qBACF;EAEF,IAAI,CAAC,qBAAqB,uBAAuB,GAAG,GAClD,MAAM,IAAI,qBAAA,2BACR,cACA,mBAAmB,IAAI,eAAe,eAAA,2BACtC,qBACF;EAEF,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,qBAAA,2BACR,cACA,yBAAyB,IAAI,qBAC7B,qBACF;EAGF,mBAAmB,eAAe,KAAK;EACvC,IAAI,kBAAA,KACF,MAAM,IAAI,qBAAA,2BACR,cACA,2BAA2B,gBAAgB,2BAA2B,eAAA,6BAA6B,cACnG,qBACF;CAEJ;AACF;;;;;;;;AASA,SAAgB,qBAAqB,WAAsC;CACzE,IAAI,CAAC,MAAM,QAAQ,SAAS,GAC1B,MAAM,IAAI,qBAAA,2BAA2B,aAAa,4BAA4B;CAEhF,IAAI,UAAU,SAAA,KACZ,MAAM,IAAI,qBAAA,2BACR,aACA,kDAAsE,UAAU,OAAO,EACzF;CAGF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,SAAS,UAAU,QAAQ,GAAG;EAC/C,MAAM,WAAW,aAAa,MAAM;EACpC,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,SAAS,mBAAmB;EAGnF,MAAM,WAAW,mBAAmB,MAAM,gBAAgB,GAAG,SAAS,cAAc;EACpF,IACE,SAAS,SAAA,KACT,SAAS,SAAA,IAET,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,sCACd;EAEF,IAAI,CAAC,qBAAqB,sBAAsB,QAAQ,GACtD,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,2BAA2B,eAAA,wBACzC;EAEF,IAAI,SAAS,WAAA,KAAyC,GACpD,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,wDACd;EAEF,IAAI,MAAM,IAAI,QAAQ,GACpB,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,+CACd;EAEF,MAAM,IAAI,QAAQ;EAElB,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,IAAI,eAAe,WAAW,GAC5B,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,+CACd;EAGF,MAAM,oBAAoB,wBACxB,MACA,qBACA,GAAG,SAAS,mBACd;EACA,IAAI,kBAAkB,WAAW,GAC/B,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,kDACd;EAEF,KAAK,MAAM,aAAa,mBACtB,IAAI,CAAC,mBAAmB,IAAI,SAAS,GACnC,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,qDAAqD,UAAU,EAC7E;EAIJ,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,MAAM,gBAAgB,wBACpB,MACA,iBACA,GAAG,SAAS,eACd;EACA,MAAM,gBAAiB,KAAiC;EACxD,IAAI,CAAC,OAAO,cAAc,aAAa,KAAM,gBAA2B,GACtE,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,mDACd;EAEF,IAAK,gBAAA,OACH,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,iCAAiC,eAAA,0BAC/C;EAGF,MAAM,YACJ,eAAe,QAAQ,IACvB,eAAe,cAAc,IAC7B,eAAe,iBAAiB,IAChC,eAAe,kBAAkB,CAAC,CAAC,IACnC,eAAe,iBAAiB,CAAC,CAAC;EACpC,IAAI,aAAA,KACF,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,QAAQ,UAAU,iCAAiC,eAAA,oBAAoB,OACrF;CAEJ;AACF;;;;;;;;;AAUA,SAAgB,+BACd,SACM;CACN,IAAI,QAAQ,eAAe,KAAA,GAAW,sBAAsB,QAAQ,UAAU;CAC9E,IAAI,QAAQ,cAAc,KAAA,GAAW,qBAAqB,QAAQ,SAAS;AAC7E;AAEA,SAAS,eAAe,OAAkD;CACxE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,qBAAqB,OAAe,OAAwB;CACnE,OAAO,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO;AACpC;AAEA,SAAS,mBAAmB,QAAiC,KAAa,MAAsB;CAC9F,MAAM,QAAQ,OAAO;CACrB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MACmB;CACnB,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MAC0B;CAC1B,MAAM,QAAQ,OAAO;CACrB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,oCAAoC;CAEhG,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,eAAe,QAAmC;CACzD,IAAI,QAAQ;CACZ,KAAK,MAAM,SAAS,QAAQ,SAAS,eAAe,KAAK;CACzD,OAAO;AACT;AAEA,SAAS,eAAe,OAAuB;CAC7C,OAAO,mBAAA,YAAY,OAAO,KAAK,CAAC,CAAC;AACnC"}

package/dist/bucket-validation.d.cts

@@ -0,0 +1,27 @@
+import { CorsRule, CreateBucketRequest, UpdateBucketRequest } from './types/bucket.js';
+/**
+ * Validates a bucketInfo record against B2's documented bucket metadata limits.
+ *
+ * @param bucketInfo - Caller-supplied bucketInfo record.
+ *
+ * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+ */
+export declare function assertValidBucketInfo(bucketInfo: Record<string, string>): void;
+/**
+ * Validates CORS rules against B2's documented bucket CORS limits.
+ *
+ * @param corsRules - Caller-supplied CORS rule list.
+ *
+ * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+ */
+export declare function assertValidCorsRules(corsRules: readonly CorsRule[]): void;
+/**
+ * Validates the bucket configuration fields common to create and update calls.
+ *
+ * @param request - Bucket create/update request.
+ *
+ * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+ * CORS field violates B2 limits.
+ */
+export declare function assertValidBucketConfiguration(request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>): void;
+//# sourceMappingURL=bucket-validation.d.ts.map

package/dist/bucket-validation.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.d.ts","sourceRoot":"","sources":["../src/bucket-validation.js"],"names":[],"mappings":"AACA,OAAO,EAcL,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAA;AAO1B;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAkD9E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,GAAG,IAAI,CAqHzE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,EAAE,YAAY,GAAG,WAAW,CAAC,GACnF,IAAI,CAGN"}

package/dist/bucket-validation.d.ts

@@ -0,0 +1,27 @@
+import { CorsRule, CreateBucketRequest, UpdateBucketRequest } from './types/bucket.js';
+/**
+ * Validates a bucketInfo record against B2's documented bucket metadata limits.
+ *
+ * @param bucketInfo - Caller-supplied bucketInfo record.
+ *
+ * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+ */
+export declare function assertValidBucketInfo(bucketInfo: Record<string, string>): void;
+/**
+ * Validates CORS rules against B2's documented bucket CORS limits.
+ *
+ * @param corsRules - Caller-supplied CORS rule list.
+ *
+ * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+ */
+export declare function assertValidCorsRules(corsRules: readonly CorsRule[]): void;
+/**
+ * Validates the bucket configuration fields common to create and update calls.
+ *
+ * @param request - Bucket create/update request.
+ *
+ * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+ * CORS field violates B2 limits.
+ */
+export declare function assertValidBucketConfiguration(request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>): void;
+//# sourceMappingURL=bucket-validation.d.ts.map

package/dist/bucket-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.d.ts","sourceRoot":"","sources":["../src/bucket-validation.js"],"names":[],"mappings":"AACA,OAAO,EAcL,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAA;AAO1B;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAkD9E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,GAAG,IAAI,CAqHzE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,EAAE,YAAY,GAAG,WAAW,CAAC,GACnF,IAAI,CAGN"}

package/dist/bucket-validation.js

@@ -0,0 +1,109 @@
+import { B2BucketConfigurationError } from "./errors/index.js";
+import { utf8Encoder } from "./util/text-codec.js";
+import { BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_VALUES_MAX_BYTES, CORS_ALLOWED_OPERATIONS, CORS_MAX_AGE_SECONDS_MAX, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_PATTERN } from "./types/bucket.js";
+//#region src/bucket-validation.ts
+var BUCKET_INFO_KEY_REGEX = new RegExp(BUCKET_INFO_KEY_PATTERN);
+var CORS_RULE_NAME_REGEX = new RegExp(CORS_RULE_NAME_PATTERN);
+var CORS_OPERATION_SET = new Set(CORS_ALLOWED_OPERATIONS);
+/**
+* Validates a bucketInfo record against B2's documented bucket metadata limits.
+*
+* @param bucketInfo - Caller-supplied bucketInfo record.
+*
+* @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+*/
+function assertValidBucketInfo(bucketInfo) {
+	if (!isObjectRecord(bucketInfo)) throw new B2BucketConfigurationError("bucketInfo", "bucketInfo must be an object", "invalid_bucket_info");
+	let totalValueBytes = 0;
+	for (const [key, value] of Object.entries(bucketInfo)) {
+		const keyBytes = utf8ByteLength(key);
+		if (keyBytes < 1 || keyBytes > 50) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must be 1-50 UTF-8 bytes`, "invalid_bucket_info");
+		if (key.startsWith("b2-")) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must not start with reserved prefix "b2-"`, "invalid_bucket_info");
+		if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must match ${BUCKET_INFO_KEY_PATTERN}`, "invalid_bucket_info");
+		if (typeof value !== "string") throw new B2BucketConfigurationError("bucketInfo", `bucketInfo value for "${key}" must be a string`, "invalid_bucket_info");
+		totalValueBytes += utf8ByteLength(value);
+		if (totalValueBytes > 1e4) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`, "invalid_bucket_info");
+	}
+}
+/**
+* Validates CORS rules against B2's documented bucket CORS limits.
+*
+* @param corsRules - Caller-supplied CORS rule list.
+*
+* @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+*/
+function assertValidCorsRules(corsRules) {
+	if (!Array.isArray(corsRules)) throw new B2BucketConfigurationError("corsRules", "corsRules must be an array");
+	if (corsRules.length > 100) throw new B2BucketConfigurationError("corsRules", `corsRules cannot have more than 100 rules (got ${corsRules.length})`);
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, rule] of corsRules.entries()) {
+		const rulePath = `corsRules[${index}]`;
+		if (!isObjectRecord(rule)) throw new B2BucketConfigurationError("corsRules", `${rulePath} must be an object`);
+		const ruleName = readRequiredString(rule, "corsRuleName", `${rulePath}.corsRuleName`);
+		if (ruleName.length < 6 || ruleName.length > 63) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be 6-63 characters`);
+		if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must match ${CORS_RULE_NAME_PATTERN}`);
+		if (ruleName.startsWith("b2-")) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must not start with reserved prefix "b2-"`);
+		if (names.has(ruleName)) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be unique within the bucket`);
+		names.add(ruleName);
+		const allowedOrigins = readRequiredStringArray(rule, "allowedOrigins", `${rulePath}.allowedOrigins`);
+		if (allowedOrigins.length === 0) throw new B2BucketConfigurationError("corsRules", `${rulePath}.allowedOrigins must contain at least one item`);
+		const allowedOperations = readRequiredStringArray(rule, "allowedOperations", `${rulePath}.allowedOperations`);
+		if (allowedOperations.length === 0) throw new B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations must contain at least one item`);
+		for (const operation of allowedOperations) if (!CORS_OPERATION_SET.has(operation)) throw new B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations contains unsupported operation "${operation}"`);
+		const allowedHeaders = readNullableStringArray(rule, "allowedHeaders", `${rulePath}.allowedHeaders`);
+		const exposeHeaders = readNullableStringArray(rule, "exposeHeaders", `${rulePath}.exposeHeaders`);
+		const maxAgeSeconds = rule["maxAgeSeconds"];
+		if (!Number.isSafeInteger(maxAgeSeconds) || maxAgeSeconds < 0) throw new B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be a non-negative safe integer`);
+		if (maxAgeSeconds > 86400) throw new B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be at most ${CORS_MAX_AGE_SECONDS_MAX}`);
+		const ruleBytes = utf8ByteLength(ruleName) + sumStringBytes(allowedOrigins) + sumStringBytes(allowedOperations) + sumStringBytes(allowedHeaders ?? []) + sumStringBytes(exposeHeaders ?? []);
+		if (ruleBytes >= 1e3) throw new B2BucketConfigurationError("corsRules", `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${CORS_RULE_MAX_BYTES} bytes`);
+	}
+}
+/**
+* Validates the bucket configuration fields common to create and update calls.
+*
+* @param request - Bucket create/update request.
+*
+* @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+* CORS field violates B2 limits.
+*/
+function assertValidBucketConfiguration(request) {
+	if (request.bucketInfo !== void 0) assertValidBucketInfo(request.bucketInfo);
+	if (request.corsRules !== void 0) assertValidCorsRules(request.corsRules);
+}
+function isObjectRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function matchesEntirePattern(regex, value) {
+	return regex.exec(value)?.[0] === value;
+}
+function readRequiredString(record, key, path) {
+	const value = record[key];
+	if (typeof value !== "string") throw new B2BucketConfigurationError("corsRules", `${path} must be a string`);
+	return value;
+}
+function readRequiredStringArray(record, key, path) {
+	const value = record[key];
+	if (!Array.isArray(value)) throw new B2BucketConfigurationError("corsRules", `${path} must be an array`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function readNullableStringArray(record, key, path) {
+	const value = record[key];
+	if (value === null || value === void 0) return null;
+	if (!Array.isArray(value)) throw new B2BucketConfigurationError("corsRules", `${path} must be an array, null, or omitted`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function sumStringBytes(values) {
+	let total = 0;
+	for (const value of values) total += utf8ByteLength(value);
+	return total;
+}
+function utf8ByteLength(value) {
+	return utf8Encoder.encode(value).byteLength;
+}
+//#endregion
+export { assertValidBucketConfiguration, assertValidBucketInfo, assertValidCorsRules };
+
+//# sourceMappingURL=bucket-validation.js.map

package/dist/bucket-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.js","names":[],"sources":["../src/bucket-validation.ts"],"sourcesContent":["import { B2BucketConfigurationError } from './errors/index.ts'\nimport {\n  BUCKET_INFO_KEY_MAX_BYTES,\n  BUCKET_INFO_KEY_MIN_BYTES,\n  BUCKET_INFO_KEY_PATTERN,\n  BUCKET_INFO_RESERVED_PREFIX,\n  BUCKET_INFO_VALUES_MAX_BYTES,\n  CORS_ALLOWED_OPERATIONS,\n  CORS_MAX_AGE_SECONDS_MAX,\n  CORS_RULE_MAX_BYTES,\n  CORS_RULE_NAME_MAX_LENGTH,\n  CORS_RULE_NAME_MIN_LENGTH,\n  CORS_RULE_NAME_PATTERN,\n  CORS_RULE_NAME_RESERVED_PREFIX,\n  CORS_RULES_MAX_COUNT,\n  type CorsRule,\n  type CreateBucketRequest,\n  type UpdateBucketRequest,\n} from './types/bucket.ts'\nimport { utf8Encoder } from './util/text-codec.ts'\n\nconst BUCKET_INFO_KEY_REGEX = new RegExp(BUCKET_INFO_KEY_PATTERN)\nconst CORS_RULE_NAME_REGEX = new RegExp(CORS_RULE_NAME_PATTERN)\nconst CORS_OPERATION_SET = new Set<string>(CORS_ALLOWED_OPERATIONS)\n\n/**\n * Validates a bucketInfo record against B2's documented bucket metadata limits.\n *\n * @param bucketInfo - Caller-supplied bucketInfo record.\n *\n * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.\n */\nexport function assertValidBucketInfo(bucketInfo: Record<string, string>): void {\n  if (!isObjectRecord(bucketInfo)) {\n    throw new B2BucketConfigurationError(\n      'bucketInfo',\n      'bucketInfo must be an object',\n      'invalid_bucket_info',\n    )\n  }\n\n  let totalValueBytes = 0\n  for (const [key, value] of Object.entries(bucketInfo)) {\n    const keyBytes = utf8ByteLength(key)\n    if (keyBytes < BUCKET_INFO_KEY_MIN_BYTES || keyBytes > BUCKET_INFO_KEY_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must be ${BUCKET_INFO_KEY_MIN_BYTES}-${BUCKET_INFO_KEY_MAX_BYTES} UTF-8 bytes`,\n        'invalid_bucket_info',\n      )\n    }\n    if (key.startsWith(BUCKET_INFO_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must not start with reserved prefix \"${BUCKET_INFO_RESERVED_PREFIX}\"`,\n        'invalid_bucket_info',\n      )\n    }\n    if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must match ${BUCKET_INFO_KEY_PATTERN}`,\n        'invalid_bucket_info',\n      )\n    }\n    if (typeof value !== 'string') {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo value for \"${key}\" must be a string`,\n        'invalid_bucket_info',\n      )\n    }\n\n    totalValueBytes += utf8ByteLength(value)\n    if (totalValueBytes > BUCKET_INFO_VALUES_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`,\n        'invalid_bucket_info',\n      )\n    }\n  }\n}\n\n/**\n * Validates CORS rules against B2's documented bucket CORS limits.\n *\n * @param corsRules - Caller-supplied CORS rule list.\n *\n * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.\n */\nexport function assertValidCorsRules(corsRules: readonly CorsRule[]): void {\n  if (!Array.isArray(corsRules)) {\n    throw new B2BucketConfigurationError('corsRules', 'corsRules must be an array')\n  }\n  if (corsRules.length > CORS_RULES_MAX_COUNT) {\n    throw new B2BucketConfigurationError(\n      'corsRules',\n      `corsRules cannot have more than ${CORS_RULES_MAX_COUNT} rules (got ${corsRules.length})`,\n    )\n  }\n\n  const names = new Set<string>()\n  for (const [index, rule] of corsRules.entries()) {\n    const rulePath = `corsRules[${index}]`\n    if (!isObjectRecord(rule)) {\n      throw new B2BucketConfigurationError('corsRules', `${rulePath} must be an object`)\n    }\n\n    const ruleName = readRequiredString(rule, 'corsRuleName', `${rulePath}.corsRuleName`)\n    if (\n      ruleName.length < CORS_RULE_NAME_MIN_LENGTH ||\n      ruleName.length > CORS_RULE_NAME_MAX_LENGTH\n    ) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be ${CORS_RULE_NAME_MIN_LENGTH}-${CORS_RULE_NAME_MAX_LENGTH} characters`,\n      )\n    }\n    if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must match ${CORS_RULE_NAME_PATTERN}`,\n      )\n    }\n    if (ruleName.startsWith(CORS_RULE_NAME_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must not start with reserved prefix \"${CORS_RULE_NAME_RESERVED_PREFIX}\"`,\n      )\n    }\n    if (names.has(ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be unique within the bucket`,\n      )\n    }\n    names.add(ruleName)\n\n    const allowedOrigins = readRequiredStringArray(\n      rule,\n      'allowedOrigins',\n      `${rulePath}.allowedOrigins`,\n    )\n    if (allowedOrigins.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOrigins must contain at least one item`,\n      )\n    }\n\n    const allowedOperations = readRequiredStringArray(\n      rule,\n      'allowedOperations',\n      `${rulePath}.allowedOperations`,\n    )\n    if (allowedOperations.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOperations must contain at least one item`,\n      )\n    }\n    for (const operation of allowedOperations) {\n      if (!CORS_OPERATION_SET.has(operation)) {\n        throw new B2BucketConfigurationError(\n          'corsRules',\n          `${rulePath}.allowedOperations contains unsupported operation \"${operation}\"`,\n        )\n      }\n    }\n\n    const allowedHeaders = readNullableStringArray(\n      rule,\n      'allowedHeaders',\n      `${rulePath}.allowedHeaders`,\n    )\n    const exposeHeaders = readNullableStringArray(\n      rule,\n      'exposeHeaders',\n      `${rulePath}.exposeHeaders`,\n    )\n    const maxAgeSeconds = (rule as Record<string, unknown>)['maxAgeSeconds']\n    if (!Number.isSafeInteger(maxAgeSeconds) || (maxAgeSeconds as number) < 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be a non-negative safe integer`,\n      )\n    }\n    if ((maxAgeSeconds as number) > CORS_MAX_AGE_SECONDS_MAX) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be at most ${CORS_MAX_AGE_SECONDS_MAX}`,\n      )\n    }\n\n    const ruleBytes =\n      utf8ByteLength(ruleName) +\n      sumStringBytes(allowedOrigins) +\n      sumStringBytes(allowedOperations) +\n      sumStringBytes(allowedHeaders ?? []) +\n      sumStringBytes(exposeHeaders ?? [])\n    if (ruleBytes >= CORS_RULE_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${CORS_RULE_MAX_BYTES} bytes`,\n      )\n    }\n  }\n}\n\n/**\n * Validates the bucket configuration fields common to create and update calls.\n *\n * @param request - Bucket create/update request.\n *\n * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or\n * CORS field violates B2 limits.\n */\nexport function assertValidBucketConfiguration(\n  request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>,\n): void {\n  if (request.bucketInfo !== undefined) assertValidBucketInfo(request.bucketInfo)\n  if (request.corsRules !== undefined) assertValidCorsRules(request.corsRules)\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction matchesEntirePattern(regex: RegExp, value: string): boolean {\n  return regex.exec(value)?.[0] === value\n}\n\nfunction readRequiredString(record: Record<string, unknown>, key: string, path: string): string {\n  const value = record[key]\n  if (typeof value !== 'string') {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be a string`)\n  }\n  return value\n}\n\nfunction readRequiredStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] {\n  const value = record[key]\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction readNullableStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] | null {\n  const value = record[key]\n  if (value === null || value === undefined) return null\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array, null, or omitted`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction sumStringBytes(values: readonly string[]): number {\n  let total = 0\n  for (const value of values) total += utf8ByteLength(value)\n  return total\n}\n\nfunction utf8ByteLength(value: string): number {\n  return utf8Encoder.encode(value).byteLength\n}\n"],"mappings":";;;;AAqBA,IAAM,wBAAwB,IAAI,OAAO,uBAAuB;AAChE,IAAM,uBAAuB,IAAI,OAAO,sBAAsB;AAC9D,IAAM,qBAAqB,IAAI,IAAY,uBAAuB;;;;;;;;AASlE,SAAgB,sBAAsB,YAA0C;CAC9E,IAAI,CAAC,eAAe,UAAU,GAC5B,MAAM,IAAI,2BACR,cACA,gCACA,qBACF;CAGF,IAAI,kBAAkB;CACtB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,WAAW,eAAe,GAAG;EACnC,IAAI,WAAA,KAAwC,WAAA,IAC1C,MAAM,IAAI,2BACR,cACA,mBAAmB,IAAI,6BACvB,qBACF;EAEF,IAAI,IAAI,WAAA,KAAsC,GAC5C,MAAM,IAAI,2BACR,cACA,mBAAmB,IAAI,8CACvB,qBACF;EAEF,IAAI,CAAC,qBAAqB,uBAAuB,GAAG,GAClD,MAAM,IAAI,2BACR,cACA,mBAAmB,IAAI,eAAe,2BACtC,qBACF;EAEF,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,2BACR,cACA,yBAAyB,IAAI,qBAC7B,qBACF;EAGF,mBAAmB,eAAe,KAAK;EACvC,IAAI,kBAAA,KACF,MAAM,IAAI,2BACR,cACA,2BAA2B,gBAAgB,2BAA2B,6BAA6B,cACnG,qBACF;CAEJ;AACF;;;;;;;;AASA,SAAgB,qBAAqB,WAAsC;CACzE,IAAI,CAAC,MAAM,QAAQ,SAAS,GAC1B,MAAM,IAAI,2BAA2B,aAAa,4BAA4B;CAEhF,IAAI,UAAU,SAAA,KACZ,MAAM,IAAI,2BACR,aACA,kDAAsE,UAAU,OAAO,EACzF;CAGF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,SAAS,UAAU,QAAQ,GAAG;EAC/C,MAAM,WAAW,aAAa,MAAM;EACpC,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,2BAA2B,aAAa,GAAG,SAAS,mBAAmB;EAGnF,MAAM,WAAW,mBAAmB,MAAM,gBAAgB,GAAG,SAAS,cAAc;EACpF,IACE,SAAS,SAAA,KACT,SAAS,SAAA,IAET,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,sCACd;EAEF,IAAI,CAAC,qBAAqB,sBAAsB,QAAQ,GACtD,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,2BAA2B,wBACzC;EAEF,IAAI,SAAS,WAAA,KAAyC,GACpD,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,wDACd;EAEF,IAAI,MAAM,IAAI,QAAQ,GACpB,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,+CACd;EAEF,MAAM,IAAI,QAAQ;EAElB,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,IAAI,eAAe,WAAW,GAC5B,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,+CACd;EAGF,MAAM,oBAAoB,wBACxB,MACA,qBACA,GAAG,SAAS,mBACd;EACA,IAAI,kBAAkB,WAAW,GAC/B,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,kDACd;EAEF,KAAK,MAAM,aAAa,mBACtB,IAAI,CAAC,mBAAmB,IAAI,SAAS,GACnC,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,qDAAqD,UAAU,EAC7E;EAIJ,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,MAAM,gBAAgB,wBACpB,MACA,iBACA,GAAG,SAAS,eACd;EACA,MAAM,gBAAiB,KAAiC;EACxD,IAAI,CAAC,OAAO,cAAc,aAAa,KAAM,gBAA2B,GACtE,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,mDACd;EAEF,IAAK,gBAAA,OACH,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,iCAAiC,0BAC/C;EAGF,MAAM,YACJ,eAAe,QAAQ,IACvB,eAAe,cAAc,IAC7B,eAAe,iBAAiB,IAChC,eAAe,kBAAkB,CAAC,CAAC,IACnC,eAAe,iBAAiB,CAAC,CAAC;EACpC,IAAI,aAAA,KACF,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,QAAQ,UAAU,iCAAiC,oBAAoB,OACrF;CAEJ;AACF;;;;;;;;;AAUA,SAAgB,+BACd,SACM;CACN,IAAI,QAAQ,eAAe,KAAA,GAAW,sBAAsB,QAAQ,UAAU;CAC9E,IAAI,QAAQ,cAAc,KAAA,GAAW,qBAAqB,QAAQ,SAAS;AAC7E;AAEA,SAAS,eAAe,OAAkD;CACxE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,qBAAqB,OAAe,OAAwB;CACnE,OAAO,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO;AACpC;AAEA,SAAS,mBAAmB,QAAiC,KAAa,MAAsB;CAC9F,MAAM,QAAQ,OAAO;CACrB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MACmB;CACnB,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MAC0B;CAC1B,MAAM,QAAQ,OAAO;CACrB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,oCAAoC;CAEhG,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,eAAe,QAAmC;CACzD,IAAI,QAAQ;CACZ,KAAK,MAAM,SAAS,QAAQ,SAAS,eAAe,KAAK;CACzD,OAAO;AACT;AAEA,SAAS,eAAe,OAAuB;CAC7C,OAAO,YAAY,OAAO,KAAK,CAAC,CAAC;AACnC"}