@backblaze-labs/b2-sdk 0.2.0 → 0.4.0

package/dist/simulator/validation.js

@@ -1,4 +1,9 @@
+import { B2BucketConfigurationError } from "../errors/index.js";
 import { utf8Encoder } from "../util/text-codec.js";
+import { BUCKET_INFO_KEY_MAX_BYTES, BUCKET_INFO_KEY_MIN_BYTES, BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_RESERVED_PREFIX, BUCKET_INFO_VALUES_MAX_BYTES, BucketRetentionMode, BucketType, CORS_MAX_AGE_SECONDS_MAX, CORS_RULES_MAX_COUNT, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_MAX_LENGTH, CORS_RULE_NAME_MIN_LENGTH, CORS_RULE_NAME_PATTERN, CORS_RULE_NAME_RESERVED_PREFIX, CorsOperation } from "../types/bucket.js";
+import { assertValidBucketInfo, assertValidCorsRules } from "../bucket-validation.js";
+import { Capability } from "../types/auth.js";
+import { EventType } from "../types/notifications.js";
 import { BUCKET_NAME_MAX, BUCKET_NAME_MIN, FILE_NAME_MAX_BYTES, getB2FileNameByteLength, hasB2FileNameControlCharacter, hasValidB2BucketNameShape, isB2BucketNameIpv4Address } from "../internal/b2-naming.js";
 //#region src/simulator/validation.ts
 /**
@@ -17,6 +22,80 @@ import { BUCKET_NAME_MAX, BUCKET_NAME_MIN, FILE_NAME_MAX_BYTES, getB2FileNameByt
 * @packageDocumentation
 */
 /**
+* Deprecated compatibility alias for the former simulator bucketInfo pair-count cap.
+*
+* @deprecated B2 bucketInfo has no documented pair-count cap. Use the byte
+* limit constants instead.
+*/
+var BUCKET_INFO_MAX_KEYS = Number.POSITIVE_INFINITY;
+/**
+* Deprecated compatibility alias for the former simulator per-value bucketInfo cap.
+*
+* @deprecated B2 bucketInfo limits aggregate value bytes, not per-value bytes.
+* Use {@link BUCKET_INFO_VALUES_MAX_BYTES}.
+*/
+var BUCKET_INFO_VALUE_MAX = BUCKET_INFO_VALUES_MAX_BYTES;
+/** Minimum length for application key names. */
+var KEY_NAME_MIN = 1;
+/** Maximum length for application key names. */
+var KEY_NAME_MAX = 100;
+var VALID_CAPABILITIES = new Set(Object.values(Capability));
+/**
+* Validates application-key capabilities against B2's supported capability set.
+*
+* @param capabilities - Caller-supplied capabilities array.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/apidocs/b2-create-key
+*/
+function validateCreateKeyCapabilities(capabilities) {
+	if (!Array.isArray(capabilities)) return {
+		code: "bad_request",
+		message: "capabilities must be an array"
+	};
+	if (capabilities.length === 0) return {
+		code: "bad_request",
+		message: "capabilities must not be empty"
+	};
+	const unknownCapabilities = capabilities.filter((capability) => typeof capability !== "string" || !VALID_CAPABILITIES.has(capability));
+	if (unknownCapabilities.length > 0) return {
+		code: "bad_request",
+		message: `unknown capabilities: ${unknownCapabilities.map(String).join(", ")}`
+	};
+	return null;
+}
+/**
+* Returns a frozen copy of a previously validated application-key capability list.
+*
+* @param capabilities - Validated caller-supplied capabilities.
+*
+* @returns An immutable capability list safe to store internally.
+*/
+function normalizeCreateKeyCapabilities(capabilities) {
+	return Object.freeze([...capabilities]);
+}
+/**
+* Validates application-key names against B2's documented length limits.
+*
+* @param keyName - Caller-supplied keyName.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/apidocs/b2-create-key
+*/
+function validateCreateKeyName(keyName) {
+	if (typeof keyName !== "string") return {
+		code: "bad_request",
+		message: "keyName must be a string"
+	};
+	if (keyName.length < 1 || keyName.length > 100) return {
+		code: "bad_request",
+		message: `keyName must be 1-100 characters`
+	};
+	return null;
+}
+/**
 * Validates a bucket name against B2's documented rules.
 *
 * @param name - Caller-supplied bucket name.
@@ -119,12 +198,6 @@ function validateFileInfo(info) {
 	};
 	return null;
 }
-/** Per-bucket bucketInfo total max keys. */
-var BUCKET_INFO_MAX_KEYS = 10;
-/** Per-key bucketInfo value byte cap. */
-var BUCKET_INFO_VALUE_MAX = 2048;
-/** Allowed key character set for bucketInfo. */
-var BUCKET_INFO_KEY_REGEX = /^[a-zA-Z0-9_-]+$/;
 /**
 * Validates a `bucketInfo` record against B2's per-bucket metadata rules.
 *
@@ -132,27 +205,13 @@ var BUCKET_INFO_KEY_REGEX = /^[a-zA-Z0-9_-]+$/;
 *
 * @returns A `{ code, message }` pair on failure, or `null` when valid.
 *
-* @see https://www.backblaze.com/apidocs/b2-create-bucket
+* @see https://www.backblaze.com/docs/cloud-storage-buckets
 */
 function validateBucketInfo(info) {
-	const entries = Object.entries(info);
-	if (entries.length > 10) return {
-		code: "invalid_bucket_info",
-		message: `bucketInfo cannot have more than 10 keys (got ${entries.length})`
-	};
-	for (const [key, value] of entries) {
-		if (!BUCKET_INFO_KEY_REGEX.test(key)) return {
-			code: "invalid_bucket_info",
-			message: `bucketInfo key "${key}" must match ^[a-zA-Z0-9_-]+$`
-		};
-		if (typeof value !== "string") return {
-			code: "invalid_bucket_info",
-			message: `bucketInfo value for "${key}" must be a string`
-		};
-		if (utf8Encoder.encode(value).byteLength > 2048) return {
-			code: "invalid_bucket_info",
-			message: `bucketInfo value for "${key}" exceeds ${BUCKET_INFO_VALUE_MAX} bytes`
-		};
+	try {
+		assertValidBucketInfo(info);
+	} catch (err) {
+		return bucketConfigurationValidationError(err);
 	}
 	return null;
 }
@@ -194,7 +253,627 @@ function validateMaxCount(requested, endpoint) {
 	};
 	return null;
 }
+/** Minimum `b2_get_download_authorization.validDurationInSeconds`. */
+var DOWNLOAD_AUTH_DURATION_MIN_SECONDS = 1;
+/** Maximum `b2_get_download_authorization.validDurationInSeconds`. */
+var DOWNLOAD_AUTH_DURATION_MAX_SECONDS = 604800;
+/**
+* Validates a `b2_get_download_authorization` duration against B2's
+* documented inclusive 1-second to 7-day range.
+*
+* @param requested - Caller-supplied duration in seconds.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*/
+function validateDownloadAuthorizationDuration(requested) {
+	if (typeof requested !== "number" || !Number.isInteger(requested) || requested < 1 || requested > 604800) return {
+		code: "bad_request",
+		message: `validDurationInSeconds must be an integer from 1 through ${DOWNLOAD_AUTH_DURATION_MAX_SECONDS}`
+	};
+	return null;
+}
+/**
+* Validates a `b2_get_download_authorization` file name prefix.
+*
+* B2 allows an empty prefix, but the field must still be present as a
+* string so later prefix checks cannot crash on malformed request bodies.
+*
+* @param requested - Caller-supplied file name prefix.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*/
+function validateDownloadAuthorizationPrefix(requested) {
+	if (typeof requested !== "string") return {
+		code: "bad_request",
+		message: "fileNamePrefix must be a string"
+	};
+	return null;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function validateKnownFields(value, allowedFields, path) {
+	for (const field of Object.keys(value)) if (!allowedFields.has(field)) return {
+		code: "bad_request",
+		message: `${path}.${field} is not a supported field`
+	};
+	return null;
+}
+function validateStringArray(value, path, options = {}) {
+	if (value === void 0 && options.allowNull === true) return null;
+	if (value === null && options.allowNull === true) return null;
+	if (!Array.isArray(value)) return {
+		code: "bad_request",
+		message: `${path} must be an array of strings`
+	};
+	if (options.requireNonEmpty === true && value.length === 0) return {
+		code: "bad_request",
+		message: `${path} must be a non-empty array`
+	};
+	for (const [index, item] of value.entries()) if (typeof item !== "string") return {
+		code: "bad_request",
+		message: `${path}[${index}] must be a string`
+	};
+	return null;
+}
+function validateNonEmptyString(value, path) {
+	if (typeof value !== "string" || value.length === 0) return {
+		code: "bad_request",
+		message: `${path} must be a non-empty string`
+	};
+	return null;
+}
+function validateNonNegativeInteger(value, path) {
+	if (typeof value !== "number" || !Number.isInteger(value) || value < 0) return {
+		code: "bad_request",
+		message: `${path} must be a non-negative integer`
+	};
+	return null;
+}
+function validateIntegerAtMost(value, max, path) {
+	if (value > max) return {
+		code: "bad_request",
+		message: `${path} must not exceed ${max}`
+	};
+	return null;
+}
+function validatePositiveInteger(value, path) {
+	if (typeof value !== "number" || !Number.isInteger(value) || value < 1) return {
+		code: "bad_request",
+		message: `${path} must be a positive integer`
+	};
+	return null;
+}
+function validateNullablePositiveInteger(value, path) {
+	if (value === void 0 || value === null) return null;
+	return validatePositiveInteger(value, path);
+}
+function validateUniqueName(names, name, path) {
+	if (names.has(name)) return {
+		code: "bad_request",
+		message: `${path} must be unique`
+	};
+	names.add(name);
+	return null;
+}
+var REQUEST_BUCKET_TYPES = new Set(Object.values(BucketType));
+/**
+* Validates a create/update request `bucketType`.
+*
+* @param bucketType - Caller-supplied bucket type.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/apidocs/b2-create-bucket
+* @see https://www.backblaze.com/apidocs/b2-update-bucket
+*/
+function validateBucketType(bucketType) {
+	if (typeof bucketType !== "string" || !REQUEST_BUCKET_TYPES.has(bucketType)) return {
+		code: "bad_request",
+		message: "bucketType must be a known request bucket type"
+	};
+	return null;
+}
+/**
+* Validates a `b2_list_buckets.bucketTypes` filter.
+*
+* @param bucketTypes - Caller-supplied bucket type filter.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/apidocs/b2-list-buckets
+*/
+function validateBucketTypes(bucketTypes) {
+	if (bucketTypes === void 0) return null;
+	if (!Array.isArray(bucketTypes)) return {
+		code: "bad_request",
+		message: "bucketTypes must be an array"
+	};
+	if (bucketTypes.length === 0) return {
+		code: "bad_request",
+		message: "bucketTypes must not be empty"
+	};
+	if (bucketTypes.length === 1 && bucketTypes[0] === "all") return null;
+	if (bucketTypes.includes("all")) return {
+		code: "bad_request",
+		message: "bucketTypes may contain 'all' only by itself"
+	};
+	for (const [index, bucketType] of bucketTypes.entries()) if (typeof bucketType !== "string") return {
+		code: "bad_request",
+		message: `bucketTypes[${index}] must be a string`
+	};
+	return null;
+}
+var CORS_RULE_FIELDS = /* @__PURE__ */ new Set([
+	"allowedHeaders",
+	"allowedOperations",
+	"allowedOrigins",
+	"corsRuleName",
+	"exposeHeaders",
+	"maxAgeSeconds"
+]);
+var KNOWN_CORS_OPERATIONS = new Set(Object.values(CorsOperation));
+/**
+* Validates B2 CORS rule structure for bucket create/update requests.
+*
+* @param rules - Caller-supplied CORS rules.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/docs/cloud-storage-cross-origin-resource-sharing-rules
+*/
+function validateCorsRules(rules) {
+	try {
+		assertValidCorsRules(rules);
+	} catch (err) {
+		return bucketConfigurationValidationError(err);
+	}
+	if (!Array.isArray(rules)) return {
+		code: "bad_request",
+		message: "corsRules must be an array"
+	};
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, rule] of rules.entries()) {
+		const rulePath = `corsRules[${index}]`;
+		if (!isRecord(rule)) return {
+			code: "bad_request",
+			message: `${rulePath} must be an object`
+		};
+		const fieldError = validateKnownFields(rule, CORS_RULE_FIELDS, rulePath);
+		if (fieldError) return fieldError;
+		const nameError = validateNonEmptyString(rule["corsRuleName"], `${rulePath}.corsRuleName`);
+		if (nameError) return nameError;
+		const ruleName = rule["corsRuleName"];
+		const uniqueNameError = validateUniqueName(names, ruleName, `${rulePath}.corsRuleName`);
+		if (uniqueNameError) return uniqueNameError;
+		const originsError = validateStringArray(rule["allowedOrigins"], `${rulePath}.allowedOrigins`, { requireNonEmpty: true });
+		if (originsError) return originsError;
+		const operationsError = validateStringArray(rule["allowedOperations"], `${rulePath}.allowedOperations`, { requireNonEmpty: true });
+		if (operationsError) return operationsError;
+		for (const operation of rule["allowedOperations"]) if (!KNOWN_CORS_OPERATIONS.has(operation)) return {
+			code: "bad_request",
+			message: `${rulePath}.allowedOperations contains an unknown operation`
+		};
+		const headersError = validateStringArray(rule["allowedHeaders"], `${rulePath}.allowedHeaders`, { allowNull: true });
+		if (headersError) return headersError;
+		const exposeError = validateStringArray(rule["exposeHeaders"], `${rulePath}.exposeHeaders`, { allowNull: true });
+		if (exposeError) return exposeError;
+		const ageError = validateNonNegativeInteger(rule["maxAgeSeconds"], `${rulePath}.maxAgeSeconds`);
+		if (ageError) return ageError;
+		const maxAgeError = validateIntegerAtMost(rule["maxAgeSeconds"], CORS_MAX_AGE_SECONDS_MAX, `${rulePath}.maxAgeSeconds`);
+		if (maxAgeError) return maxAgeError;
+	}
+	return null;
+}
+function bucketConfigurationValidationError(err) {
+	if (err instanceof B2BucketConfigurationError) return {
+		code: err.code,
+		message: err.message
+	};
+	throw err;
+}
+var LIFECYCLE_RULE_FIELDS = /* @__PURE__ */ new Set([
+	"daysFromHidingToDeleting",
+	"daysFromStartingToCancelingUnfinishedLargeFiles",
+	"daysFromUploadingToHiding",
+	"fileNamePrefix"
+]);
+/**
+* Validates B2 lifecycle rule structure for bucket create/update requests.
+*
+* @param rules - Caller-supplied lifecycle rules.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/docs/cloud-storage-lifecycle-rules
+*/
+function validateLifecycleRules(rules) {
+	if (!Array.isArray(rules)) return {
+		code: "bad_request",
+		message: "lifecycleRules must be an array"
+	};
+	for (const [index, rule] of rules.entries()) {
+		const rulePath = `lifecycleRules[${index}]`;
+		if (!isRecord(rule)) return {
+			code: "bad_request",
+			message: `${rulePath} must be an object`
+		};
+		const fieldError = validateKnownFields(rule, LIFECYCLE_RULE_FIELDS, rulePath);
+		if (fieldError) return fieldError;
+		const deletingError = validateNullablePositiveInteger(rule["daysFromHidingToDeleting"], `${rulePath}.daysFromHidingToDeleting`);
+		if (deletingError) return deletingError;
+		const hidingError = validateNullablePositiveInteger(rule["daysFromUploadingToHiding"], `${rulePath}.daysFromUploadingToHiding`);
+		if (hidingError) return hidingError;
+		const cancelError = validateNullablePositiveInteger(rule["daysFromStartingToCancelingUnfinishedLargeFiles"], `${rulePath}.daysFromStartingToCancelingUnfinishedLargeFiles`);
+		if (cancelError) return cancelError;
+		if (rule["daysFromHidingToDeleting"] == null && rule["daysFromUploadingToHiding"] == null && rule["daysFromStartingToCancelingUnfinishedLargeFiles"] == null) return {
+			code: "bad_request",
+			message: `${rulePath} must set at least one lifecycle action`
+		};
+		if (typeof rule["fileNamePrefix"] !== "string") return {
+			code: "bad_request",
+			message: `${rulePath}.fileNamePrefix must be a string`
+		};
+	}
+	return null;
+}
+var DEFAULT_RETENTION_FIELDS = /* @__PURE__ */ new Set(["mode", "period"]);
+var RETENTION_PERIOD_FIELDS = /* @__PURE__ */ new Set(["duration", "unit"]);
+var DEFAULT_RETENTION_MODES = new Set(Object.values(BucketRetentionMode));
+var OBJECT_LOCK_RETENTION_MAX_DAYS = 3e3;
+/**
+* Validates default Object Lock retention policy structure for bucket requests.
+*
+* @param policy - Caller-supplied default retention policy.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/docs/cloud-storage-object-lock
+*/
+function validateDefaultRetention(policy) {
+	if (!isRecord(policy)) return {
+		code: "bad_request",
+		message: "defaultRetention must be an object"
+	};
+	const fieldError = validateKnownFields(policy, DEFAULT_RETENTION_FIELDS, "defaultRetention");
+	if (fieldError) return fieldError;
+	const mode = policy["mode"];
+	if (typeof mode !== "string" || !DEFAULT_RETENTION_MODES.has(mode)) return {
+		code: "bad_request",
+		message: "defaultRetention.mode must be \"compliance\", \"governance\", or \"none\""
+	};
+	const period = policy["period"];
+	if (mode === BucketRetentionMode.None) {
+		if (period !== null) return {
+			code: "bad_request",
+			message: "defaultRetention.period must be null when mode is \"none\""
+		};
+		return null;
+	}
+	if (!isRecord(period)) return {
+		code: "bad_request",
+		message: "defaultRetention.period must be an object for retention modes"
+	};
+	const periodFieldError = validateKnownFields(period, RETENTION_PERIOD_FIELDS, "defaultRetention.period");
+	if (periodFieldError) return periodFieldError;
+	const durationError = validatePositiveInteger(period["duration"], "defaultRetention.period.duration");
+	if (durationError) return durationError;
+	if (!Number.isSafeInteger(period["duration"])) return {
+		code: "bad_request",
+		message: "defaultRetention.period.duration must be a safe integer"
+	};
+	if (period["unit"] !== "days" && period["unit"] !== "years") return {
+		code: "bad_request",
+		message: "defaultRetention.period.unit must be \"days\" or \"years\""
+	};
+	const durationDays = period["unit"] === "days" ? period["duration"] : period["duration"] * 365;
+	if (!Number.isFinite(durationDays) || durationDays > OBJECT_LOCK_RETENTION_MAX_DAYS) return {
+		code: "bad_request",
+		message: `defaultRetention.period must not exceed ${OBJECT_LOCK_RETENTION_MAX_DAYS} days`
+	};
+	return null;
+}
+var REPLICATION_CONFIG_FIELDS = /* @__PURE__ */ new Set(["asReplicationSource", "asReplicationDestination"]);
+var REPLICATION_SOURCE_FIELDS = /* @__PURE__ */ new Set(["replicationRules", "sourceApplicationKeyId"]);
+var REPLICATION_DESTINATION_FIELDS = /* @__PURE__ */ new Set(["sourceToDestinationKeyMapping"]);
+var REPLICATION_RULE_FIELDS = /* @__PURE__ */ new Set([
+	"destinationBucketId",
+	"fileNamePrefix",
+	"includeExistingFiles",
+	"isEnabled",
+	"priority",
+	"replicationRuleName"
+]);
+function validateReplicationRule(rule, rulePath) {
+	if (!isRecord(rule)) return {
+		code: "bad_request",
+		message: `${rulePath} must be an object`
+	};
+	const fieldError = validateKnownFields(rule, REPLICATION_RULE_FIELDS, rulePath);
+	if (fieldError) return fieldError;
+	const destinationError = validateNonEmptyString(rule["destinationBucketId"], `${rulePath}.destinationBucketId`);
+	if (destinationError) return destinationError;
+	if (typeof rule["fileNamePrefix"] !== "string") return {
+		code: "bad_request",
+		message: `${rulePath}.fileNamePrefix must be a string`
+	};
+	if (typeof rule["includeExistingFiles"] !== "boolean") return {
+		code: "bad_request",
+		message: `${rulePath}.includeExistingFiles must be a boolean`
+	};
+	if (typeof rule["isEnabled"] !== "boolean") return {
+		code: "bad_request",
+		message: `${rulePath}.isEnabled must be a boolean`
+	};
+	const priorityError = validatePositiveInteger(rule["priority"], `${rulePath}.priority`);
+	if (priorityError) return priorityError;
+	const nameError = validateNonEmptyString(rule["replicationRuleName"], `${rulePath}.replicationRuleName`);
+	if (nameError) return nameError;
+	return null;
+}
+function validateReplicationSource(source) {
+	if (!isRecord(source)) return {
+		code: "bad_request",
+		message: "replicationConfiguration.asReplicationSource must be an object"
+	};
+	const fieldError = validateKnownFields(source, REPLICATION_SOURCE_FIELDS, "replicationConfiguration.asReplicationSource");
+	if (fieldError) return fieldError;
+	const sourceKeyError = validateNonEmptyString(source["sourceApplicationKeyId"], "replicationConfiguration.asReplicationSource.sourceApplicationKeyId");
+	if (sourceKeyError) return sourceKeyError;
+	const rules = source["replicationRules"];
+	if (!Array.isArray(rules)) return {
+		code: "bad_request",
+		message: "replicationConfiguration.asReplicationSource.replicationRules must be an array"
+	};
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, rule] of rules.entries()) {
+		const rulePath = `replicationConfiguration.asReplicationSource.replicationRules[${index}]`;
+		const ruleError = validateReplicationRule(rule, rulePath);
+		if (ruleError) return ruleError;
+		const ruleName = rule["replicationRuleName"];
+		const uniqueNameError = validateUniqueName(names, ruleName, `${rulePath}.replicationRuleName`);
+		if (uniqueNameError) return uniqueNameError;
+	}
+	return null;
+}
+function validateReplicationDestination(destination) {
+	if (!isRecord(destination)) return {
+		code: "bad_request",
+		message: "replicationConfiguration.asReplicationDestination must be an object"
+	};
+	const fieldError = validateKnownFields(destination, REPLICATION_DESTINATION_FIELDS, "replicationConfiguration.asReplicationDestination");
+	if (fieldError) return fieldError;
+	const mapping = destination["sourceToDestinationKeyMapping"];
+	if (!isRecord(mapping)) return {
+		code: "bad_request",
+		message: "replicationConfiguration.asReplicationDestination.sourceToDestinationKeyMapping must be an object"
+	};
+	for (const [sourceKey, destinationKey] of Object.entries(mapping)) {
+		if (sourceKey.length === 0) return {
+			code: "bad_request",
+			message: "replicationConfiguration.asReplicationDestination.sourceToDestinationKeyMapping keys must be non-empty"
+		};
+		if (typeof destinationKey !== "string" || destinationKey.length === 0) return {
+			code: "bad_request",
+			message: "replicationConfiguration.asReplicationDestination.sourceToDestinationKeyMapping values must be non-empty strings"
+		};
+	}
+	return null;
+}
+/**
+* Validates B2 replication configuration structure for bucket requests.
+*
+* @param config - Caller-supplied replication configuration.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/apidocs/b2-update-bucket
+*/
+function validateReplicationConfiguration(config) {
+	if (!isRecord(config)) return {
+		code: "bad_request",
+		message: "replicationConfiguration must be an object"
+	};
+	const fieldError = validateKnownFields(config, REPLICATION_CONFIG_FIELDS, "replicationConfiguration");
+	if (fieldError) return fieldError;
+	if (!("asReplicationSource" in config) && !("asReplicationDestination" in config)) return {
+		code: "bad_request",
+		message: "replicationConfiguration must include asReplicationSource or asReplicationDestination"
+	};
+	const source = config["asReplicationSource"];
+	if (source !== void 0 && source !== null) {
+		const sourceError = validateReplicationSource(source);
+		if (sourceError) return sourceError;
+	}
+	const destination = config["asReplicationDestination"];
+	if (destination !== void 0 && destination !== null) {
+		const destinationError = validateReplicationDestination(destination);
+		if (destinationError) return destinationError;
+	}
+	return null;
+}
+var NOTIFICATION_RULE_FIELDS = /* @__PURE__ */ new Set([
+	"eventTypes",
+	"isEnabled",
+	"isSuspended",
+	"maxEventsPerBatch",
+	"name",
+	"objectNamePrefix",
+	"suspensionReason",
+	"targetConfiguration"
+]);
+var NOTIFICATION_TARGET_FIELDS = /* @__PURE__ */ new Set([
+	"customHeaders",
+	"hmacSha256SigningSecret",
+	"targetType",
+	"url"
+]);
+var NOTIFICATION_CUSTOM_HEADER_FIELDS = /* @__PURE__ */ new Set(["name", "value"]);
+var NOTIFICATION_CUSTOM_HEADER_MAX_COUNT = 10;
+var NOTIFICATION_CUSTOM_HEADER_MAX_ENCODED_BYTES = 2048;
+var NOTIFICATION_CUSTOM_HEADER_RESERVED_PREFIX = "x-bz-";
+var HTTP_HEADER_NAME_RE = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+var KNOWN_NOTIFICATION_EVENT_TYPES = new Set(Object.values(EventType));
+function encodedHeaderBytes(name, value) {
+	try {
+		return encodeURIComponent(name).length + encodeURIComponent(value).length + 3;
+	} catch {
+		return null;
+	}
+}
+function isValidHeaderValue(value) {
+	for (let i = 0; i < value.length; i++) {
+		const code = value.charCodeAt(i);
+		if (code === 9) continue;
+		if (code < 32 || code === 127) return false;
+	}
+	return true;
+}
+function validateNotificationCustomHeaders(value, path) {
+	if (value === void 0) return null;
+	if (!Array.isArray(value)) return {
+		code: "bad_request",
+		message: `${path} must be an array of objects`
+	};
+	if (value.length > NOTIFICATION_CUSTOM_HEADER_MAX_COUNT) return {
+		code: "bad_request",
+		message: `${path} must contain no more than ${NOTIFICATION_CUSTOM_HEADER_MAX_COUNT} entries`
+	};
+	const names = /* @__PURE__ */ new Set();
+	let encodedBytes = 0;
+	for (const [index, header] of value.entries()) {
+		const headerPath = `${path}[${index}]`;
+		if (!isRecord(header)) return {
+			code: "bad_request",
+			message: `${headerPath} must be an object`
+		};
+		const fieldError = validateKnownFields(header, NOTIFICATION_CUSTOM_HEADER_FIELDS, headerPath);
+		if (fieldError) return fieldError;
+		if (typeof header["name"] !== "string" || header["name"].length === 0) return {
+			code: "bad_request",
+			message: `${headerPath}.name must be a non-empty string`
+		};
+		if (typeof header["value"] !== "string") return {
+			code: "bad_request",
+			message: `${headerPath}.value must be a string`
+		};
+		const name = header["name"];
+		const normalizedName = name.toLowerCase();
+		if (!HTTP_HEADER_NAME_RE.test(name)) return {
+			code: "bad_request",
+			message: `${headerPath}.name must be a valid HTTP header name`
+		};
+		if (normalizedName.startsWith(NOTIFICATION_CUSTOM_HEADER_RESERVED_PREFIX)) return {
+			code: "bad_request",
+			message: `${headerPath}.name must not begin with X-Bz-`
+		};
+		if (names.has(normalizedName)) return {
+			code: "bad_request",
+			message: `${headerPath}.name must be unique`
+		};
+		names.add(normalizedName);
+		const headerValue = header["value"];
+		if (!isValidHeaderValue(headerValue)) return {
+			code: "bad_request",
+			message: `${headerPath}.value must be a valid HTTP header value`
+		};
+		const size = encodedHeaderBytes(name, headerValue);
+		if (size === null) return {
+			code: "bad_request",
+			message: `${headerPath} must be URL-encodable`
+		};
+		encodedBytes += size;
+		if (encodedBytes > NOTIFICATION_CUSTOM_HEADER_MAX_ENCODED_BYTES) return {
+			code: "bad_request",
+			message: `${path} URL-encoded name/value bytes must not exceed ${NOTIFICATION_CUSTOM_HEADER_MAX_ENCODED_BYTES}`
+		};
+	}
+	return null;
+}
+/**
+* Validates event notification rules for `b2_set_bucket_notification_rules`.
+*
+* @param rules - Caller-supplied event notification rules.
+*
+* @returns A `{ code, message }` pair on failure, or `null` when valid.
+*
+* @see https://www.backblaze.com/apidocs/b2-set-bucket-notification-rules
+*/
+function validateNotificationRules(rules) {
+	if (!Array.isArray(rules)) return {
+		code: "bad_request",
+		message: "eventNotificationRules must be an array"
+	};
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, ruleValue] of rules.entries()) {
+		const rulePath = `eventNotificationRules[${index}]`;
+		if (!isRecord(ruleValue)) return {
+			code: "bad_request",
+			message: `${rulePath} must be an object`
+		};
+		const fieldError = validateKnownFields(ruleValue, NOTIFICATION_RULE_FIELDS, rulePath);
+		if (fieldError) return fieldError;
+		if (typeof ruleValue["isEnabled"] !== "boolean") return {
+			code: "bad_request",
+			message: `${rulePath}.isEnabled must be a boolean`
+		};
+		const maxEventsPerBatch = ruleValue["maxEventsPerBatch"];
+		if (maxEventsPerBatch !== void 0 && (typeof maxEventsPerBatch !== "number" || !Number.isInteger(maxEventsPerBatch) || maxEventsPerBatch < 1)) return {
+			code: "bad_request",
+			message: `${rulePath}.maxEventsPerBatch must be a positive integer`
+		};
+		const name = ruleValue["name"];
+		if (typeof name !== "string" || name.length === 0) return {
+			code: "bad_request",
+			message: `${rulePath}.name must be a non-empty string`
+		};
+		if (names.has(name)) return {
+			code: "bad_request",
+			message: `${rulePath}.name must be unique within eventNotificationRules`
+		};
+		names.add(name);
+		const eventTypes = ruleValue["eventTypes"];
+		if (!Array.isArray(eventTypes) || eventTypes.length === 0) return {
+			code: "bad_request",
+			message: `${rulePath}.eventTypes must be a non-empty array`
+		};
+		for (const eventType of eventTypes) if (typeof eventType !== "string" || !KNOWN_NOTIFICATION_EVENT_TYPES.has(eventType)) return {
+			code: "bad_request",
+			message: `${rulePath}.eventTypes contains an unknown event type`
+		};
+		const targetConfiguration = ruleValue["targetConfiguration"];
+		if (!isRecord(targetConfiguration)) return {
+			code: "bad_request",
+			message: `${rulePath}.targetConfiguration must be an object`
+		};
+		const targetFieldError = validateKnownFields(targetConfiguration, NOTIFICATION_TARGET_FIELDS, `${rulePath}.targetConfiguration`);
+		if (targetFieldError) return targetFieldError;
+		if (targetConfiguration["targetType"] !== "webhook") return {
+			code: "bad_request",
+			message: `${rulePath}.targetConfiguration.targetType must be "webhook"`
+		};
+		const url = targetConfiguration["url"];
+		if (typeof url !== "string") return {
+			code: "bad_request",
+			message: `${rulePath}.targetConfiguration.url must be a valid https URL`
+		};
+		try {
+			if (new URL(url).protocol !== "https:") return {
+				code: "bad_request",
+				message: `${rulePath}.targetConfiguration.url must be a valid https URL`
+			};
+		} catch {
+			return {
+				code: "bad_request",
+				message: `${rulePath}.targetConfiguration.url must be a valid https URL`
+			};
+		}
+		const customHeadersError = validateNotificationCustomHeaders(targetConfiguration["customHeaders"], `${rulePath}.targetConfiguration.customHeaders`);
+		if (customHeadersError) return customHeadersError;
+	}
+	return null;
+}
 //#endregion
-export { BUCKET_INFO_MAX_KEYS, BUCKET_INFO_VALUE_MAX, BUCKET_NAME_MAX, BUCKET_NAME_MIN, FILE_INFO_TOTAL_MAX, FILE_INFO_VALUE_MAX, FILE_NAME_MAX_BYTES, LIST_ENDPOINT_CAPS, validateBucketInfo, validateBucketName, validateFileInfo, validateFileName, validateMaxCount };
+export { BUCKET_INFO_KEY_MAX_BYTES, BUCKET_INFO_KEY_MIN_BYTES, BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_MAX_KEYS, BUCKET_INFO_RESERVED_PREFIX, BUCKET_INFO_VALUES_MAX_BYTES, BUCKET_INFO_VALUE_MAX, BUCKET_NAME_MAX, BUCKET_NAME_MIN, CORS_MAX_AGE_SECONDS_MAX, CORS_RULES_MAX_COUNT, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_MAX_LENGTH, CORS_RULE_NAME_MIN_LENGTH, CORS_RULE_NAME_PATTERN, CORS_RULE_NAME_RESERVED_PREFIX, DOWNLOAD_AUTH_DURATION_MAX_SECONDS, DOWNLOAD_AUTH_DURATION_MIN_SECONDS, FILE_INFO_TOTAL_MAX, FILE_INFO_VALUE_MAX, FILE_NAME_MAX_BYTES, KEY_NAME_MAX, KEY_NAME_MIN, LIST_ENDPOINT_CAPS, normalizeCreateKeyCapabilities, validateBucketInfo, validateBucketName, validateBucketType, validateBucketTypes, validateCorsRules, validateCreateKeyCapabilities, validateCreateKeyName, validateDefaultRetention, validateDownloadAuthorizationDuration, validateDownloadAuthorizationPrefix, validateFileInfo, validateFileName, validateLifecycleRules, validateMaxCount, validateNotificationRules, validateReplicationConfiguration };
 
 //# sourceMappingURL=validation.js.map