@backblaze-labs/b2-sdk 0.3.0 → 0.4.0

package/dist/index.d.ts

@@ -9,31 +9,32 @@
  */
 export type { AccountInfo, AuthContextAwareAccountInfo, UploadUrlEntry, } from './auth/account-info.js';
 export { InMemoryAccountInfo } from './auth/in-memory.js';
-export { Bucket, type DeleteAllDeleteEvent, type DeleteAllErrorEvent, type DeleteAllEvent, type DeleteAllSkipEvent, type DeleteError, type DeleteManyResult, type DeleteTarget, } from './bucket.js';
-export { B2Client, type B2ClientOptions, type CapabilityCheckResult } from './client.js';
+export { Bucket, type BucketListFileNamesBaseOptions, type BucketListFileNamesMaybeDelimiterOptions, type BucketListFileNamesOptions, type BucketListFileNamesWithDelimiterOptions, type BucketListFileVersionsBaseOptions, type BucketListFileVersionsMaybeDelimiterOptions, type BucketListFileVersionsOptions, type BucketListFileVersionsWithDelimiterOptions, type BucketPaginateFileNamesMaybeDelimiterOptions, type BucketPaginateFileNamesOptions, type BucketPaginateFileNamesWithDelimiterOptions, type BucketPaginateFileVersionsMaybeDelimiterOptions, type BucketPaginateFileVersionsOptions, type BucketPaginateFileVersionsWithDelimiterOptions, type DeleteAllDeleteEvent, type DeleteAllErrorEvent, type DeleteAllEvent, type DeleteAllSkipEvent, type DeleteError, type DeleteManyResult, type DeleteTarget, } from './bucket.js';
+export { assertValidBucketConfiguration, assertValidBucketInfo, assertValidCorsRules, } from './bucket-validation.js';
+export { B2Client, type B2ClientAuthorizeOptions, type B2ClientOptions, type CapabilityCheckResult, } from './client.js';
 export type { DownloadResult, HeadResult } from './download/single.js';
-export type { B2ErrorOptions } from './errors/index.js';
-export { AccessDeniedError, B2Error, B2InsufficientCapabilityError, B2PartnerAuthorizationError, B2RealmConfigurationError, B2RedirectError, B2SsrfError, BadAuthTokenError, BadBucketIdError, BadJsonError, BadRequestError, BadUploadUrlError, CapExceededError, ChecksumMismatchError, ConflictError, classifyError, DuplicateBucketNameError, ExpiredAuthTokenError, FileNotPresentError, FinishLargeFileResponseBodyError, GroupMemberCreationFailedError, InternalError, InvalidAccountIdError, InvalidBucketIdError, InvalidBucketInfoError, InvalidBucketNameError, InvalidComputerIdError, InvalidEmailError, InvalidFileIdError, InvalidFileInfoError, InvalidFileNameError, InvalidGroupIdError, InvalidMemberAccountIdError, InvalidPartNumberError, InvalidRegionError, InvalidSmsPhoneError, MethodFailureError, MethodNotAllowedError, MissingSmsPhoneError, NetworkError, NotFoundError, OutOfRangeError, RangeNotSatisfiableError, RequestTimeoutError, ResumeFileIdMismatchError, ServiceUnavailableError, TooManyBucketsError, TooManyFilesError, TooManyGroupMembersError, TooManyMembersError, TooManyRequestsError, UploadResponseBodyError, } from './errors/index.js';
+export type { B2BucketConfigurationErrorField, B2ErrorOptions } from './errors/index.js';
+export { AccessDeniedError, B2BucketConfigurationError, B2Error, B2InsufficientCapabilityError, B2PartnerAuthorizationError, B2RealmConfigurationError, B2RedirectError, B2SsrfError, BadAuthTokenError, BadBucketIdError, BadJsonError, BadRequestError, BadUploadUrlError, CapExceededError, ChecksumMismatchError, ConflictError, classifyError, DuplicateBucketNameError, ExpiredAuthTokenError, FileNotPresentError, FinishLargeFileResponseBodyError, GroupMemberCreationFailedError, InternalError, InvalidAccountIdError, InvalidBucketIdError, InvalidBucketInfoError, InvalidBucketNameError, InvalidComputerIdError, InvalidEmailError, InvalidFileIdError, InvalidFileInfoError, InvalidFileNameError, InvalidGroupIdError, InvalidMemberAccountIdError, InvalidPartNumberError, InvalidRegionError, InvalidSmsPhoneError, MethodFailureError, MethodNotAllowedError, MissingSmsPhoneError, NetworkError, NotFoundError, OutOfRangeError, RangeNotSatisfiableError, RequestTimeoutError, ResumeFileIdMismatchError, ServiceUnavailableError, TooManyBucketsError, TooManyFilesError, TooManyGroupMembersError, TooManyMembersError, TooManyRequestsError, UploadResponseBodyError, } from './errors/index.js';
 export type { RetryOptions } from './http/retry.js';
 export type { HttpRequest, HttpResponse, HttpTransport, RetryTransportOptions, UrlGuardedTransport, } from './http/transport.js';
 export { FetchTransport, getTransportUrlGuard, RetryTransport } from './http/transport.js';
 export { deriveAllowedSuffixes, UrlGuard } from './http/url-guard.js';
 export { B2Object, type DownloadCallOptions, type HeadCallOptions } from './object.js';
-export { type DownloadFileOptions, RawClient, type RawClientOptions, type RawRequestOptions, type SseCDownloadKey, } from './raw/index.js';
-export { IncrementalSha1, sha1Hex } from './streams/hash.js';
+export { type AuthorizeAccountOptions, type DownloadFileOptions, RawClient, type RawClientOptions, type RawRequestOptions, type SseCDownloadKey, } from './raw/index.js';
+export { IncrementalSha1, IncrementalSha256, sha1Hex, sha256Hex } from './streams/hash.js';
 export type { ProgressEvent, ProgressListener } from './streams/progress.js';
 export type { ContentSource, FileSourcePath } from './streams/source.js';
 export { BlobSource, BufferSource, FileSource, StreamSource, toContentSource, } from './streams/source.js';
 export { Capability } from './types/auth.js';
-export { BucketRetentionMode, BucketType, CorsOperation } from './types/bucket.js';
+export { BUCKET_INFO_KEY_MAX_BYTES, BUCKET_INFO_KEY_MIN_BYTES, BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_RESERVED_PREFIX, BUCKET_INFO_VALUES_MAX_BYTES, BucketKeyOption, BucketRetentionMode, BucketType, CORS_ALLOWED_OPERATIONS, CORS_MAX_AGE_SECONDS_MAX, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_MAX_LENGTH, CORS_RULE_NAME_MIN_LENGTH, CORS_RULE_NAME_PATTERN, CORS_RULE_NAME_RESERVED_PREFIX, CORS_RULES_MAX_COUNT, CorsOperation, KnownBucketResponseType, } from './types/bucket.js';
 export { DownloadClientUnauthorizedToReadMarker, DownloadHeaderName, } from './types/download.js';
 export { EncryptionAlgorithm, EncryptionKey, EncryptionMode, SSE_B2, SSE_NONE, sseCustomer, } from './types/encryption.js';
 export { KNOWN_B2_ERROR_CODES } from './types/errors.js';
-export { FileAction, MetadataDirective } from './types/file.js';
+export { FileAction, HIDE_MARKER_CONTENT_TYPE, MetadataDirective } from './types/file.js';
 export { accountId, applicationKeyId, bucketId, computerId, fileId, groupId, keyId, largeFileId, partnerToken, } from './types/ids.js';
 export type * from './types/index.js';
 export { LegalHoldValue, RetentionMode } from './types/lock.js';
-export { EventType } from './types/notifications.js';
+export { EventType, notificationCustomHeadersToRecord, recordToNotificationCustomHeaders, } from './types/notifications.js';
 export { PartnerCapability, Region } from './types/partner.js';
 export type { AmbiguousFinishCleanupFailureEvent, CancelLargeFileCleanupFailureEvent, CleanupFailureEvent, CleanupFailureListener, CleanupFailureOptions, } from './upload/cancel.js';
 export type { ResumePartReusedEvent, ResumePartReusedListener, } from './upload/large.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.js"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACV,WAAW,EACX,2BAA2B,EAC3B,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EACL,MAAM,EACN,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACxF,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EACL,iBAAiB,EACjB,OAAO,EACP,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,aAAa,EACb,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,YAAY,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,QAAQ,EAAE,KAAK,mBAAmB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AACtF,OAAO,EACL,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,eAAe,GAChB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAM5C,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAClF,OAAO,EACL,sCAAsC,EACtC,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,MAAM,EACN,QAAQ,EACR,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAO/D,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,KAAK,EACL,WAAW,EACX,YAAY,GACb,MAAM,gBAAgB,CAAA;AACvB,mBAAmB,kBAAkB,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC9D,YAAY,EACV,kCAAkC,EAClC,kCAAkC,EAClC,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,GACd,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,4BAA4B,EAC5B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAClG,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAIxE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.js"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACV,WAAW,EACX,2BAA2B,EAC3B,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EACL,MAAM,EACN,KAAK,8BAA8B,EACnC,KAAK,wCAAwC,EAC7C,KAAK,0BAA0B,EAC/B,KAAK,uCAAuC,EAC5C,KAAK,iCAAiC,EACtC,KAAK,2CAA2C,EAChD,KAAK,6BAA6B,EAClC,KAAK,0CAA0C,EAC/C,KAAK,4CAA4C,EACjD,KAAK,8BAA8B,EACnC,KAAK,2CAA2C,EAChD,KAAK,+CAA+C,EACpD,KAAK,iCAAiC,EACtC,KAAK,8CAA8C,EACnD,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,QAAQ,EACR,KAAK,wBAAwB,EAC7B,KAAK,eAAe,EACpB,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtE,YAAY,EAAE,+BAA+B,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACxF,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,OAAO,EACP,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,aAAa,EACb,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,YAAY,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,QAAQ,EAAE,KAAK,mBAAmB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AACtF,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC1F,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,eAAe,GAChB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAM5C,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,8BAA8B,EAC9B,oBAAoB,EACpB,aAAa,EACb,uBAAuB,GACxB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,sCAAsC,EACtC,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,MAAM,EACN,QAAQ,EACR,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAOzF,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,KAAK,EACL,WAAW,EACX,YAAY,GACb,MAAM,gBAAgB,CAAA;AACvB,mBAAmB,kBAAkB,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EACL,SAAS,EACT,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC9D,YAAY,EACV,kCAAkC,EAClC,kCAAkC,EAClC,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,GACd,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,4BAA4B,EAC5B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAClG,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAIxE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -1,24 +1,25 @@
 import { InMemoryAccountInfo } from "./auth/in-memory.js";
-import { FileAction, MetadataDirective } from "./types/file.js";
+import { FileAction, HIDE_MARKER_CONTENT_TYPE, MetadataDirective } from "./types/file.js";
 import { accountId, applicationKeyId, bucketId, computerId, fileId, groupId, keyId, largeFileId, partnerToken } from "./types/ids.js";
 import { KNOWN_B2_ERROR_CODES } from "./types/errors.js";
-import { AccessDeniedError, B2Error, B2InsufficientCapabilityError, B2PartnerAuthorizationError, B2RealmConfigurationError, B2RedirectError, B2SsrfError, BadAuthTokenError, BadBucketIdError, BadJsonError, BadRequestError, BadUploadUrlError, CapExceededError, ChecksumMismatchError, ConflictError, DuplicateBucketNameError, ExpiredAuthTokenError, FileNotPresentError, FinishLargeFileResponseBodyError, GroupMemberCreationFailedError, InternalError, InvalidAccountIdError, InvalidBucketIdError, InvalidBucketInfoError, InvalidBucketNameError, InvalidComputerIdError, InvalidEmailError, InvalidFileIdError, InvalidFileInfoError, InvalidFileNameError, InvalidGroupIdError, InvalidMemberAccountIdError, InvalidPartNumberError, InvalidRegionError, InvalidSmsPhoneError, MethodFailureError, MethodNotAllowedError, MissingSmsPhoneError, NetworkError, NotFoundError, OutOfRangeError, RangeNotSatisfiableError, RequestTimeoutError, ResumeFileIdMismatchError, ServiceUnavailableError, TooManyBucketsError, TooManyFilesError, TooManyGroupMembersError, TooManyMembersError, TooManyRequestsError, UploadResponseBodyError, classifyError } from "./errors/index.js";
+import { AccessDeniedError, B2BucketConfigurationError, B2Error, B2InsufficientCapabilityError, B2PartnerAuthorizationError, B2RealmConfigurationError, B2RedirectError, B2SsrfError, BadAuthTokenError, BadBucketIdError, BadJsonError, BadRequestError, BadUploadUrlError, CapExceededError, ChecksumMismatchError, ConflictError, DuplicateBucketNameError, ExpiredAuthTokenError, FileNotPresentError, FinishLargeFileResponseBodyError, GroupMemberCreationFailedError, InternalError, InvalidAccountIdError, InvalidBucketIdError, InvalidBucketInfoError, InvalidBucketNameError, InvalidComputerIdError, InvalidEmailError, InvalidFileIdError, InvalidFileInfoError, InvalidFileNameError, InvalidGroupIdError, InvalidMemberAccountIdError, InvalidPartNumberError, InvalidRegionError, InvalidSmsPhoneError, MethodFailureError, MethodNotAllowedError, MissingSmsPhoneError, NetworkError, NotFoundError, OutOfRangeError, RangeNotSatisfiableError, RequestTimeoutError, ResumeFileIdMismatchError, ServiceUnavailableError, TooManyBucketsError, TooManyFilesError, TooManyGroupMembersError, TooManyMembersError, TooManyRequestsError, UploadResponseBodyError, classifyError } from "./errors/index.js";
 import { DownloadClientUnauthorizedToReadMarker, DownloadHeaderName } from "./types/download.js";
 import { EncryptionAlgorithm, EncryptionKey, EncryptionMode, SSE_B2, SSE_NONE, sseCustomer } from "./types/encryption.js";
 import { LegalHoldValue, RetentionMode } from "./types/lock.js";
-import { IncrementalSha1, sha1Hex } from "./streams/hash.js";
+import { IncrementalSha1, IncrementalSha256, sha1Hex, sha256Hex } from "./streams/hash.js";
 import { FileSource } from "./streams/file-source.js";
 import { BlobSource, BufferSource, StreamSource, toContentSource } from "./streams/source.js";
-import { BucketRetentionMode, BucketType, CorsOperation } from "./types/bucket.js";
+import { BUCKET_INFO_KEY_MAX_BYTES, BUCKET_INFO_KEY_MIN_BYTES, BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_RESERVED_PREFIX, BUCKET_INFO_VALUES_MAX_BYTES, BucketKeyOption, BucketRetentionMode, BucketType, CORS_ALLOWED_OPERATIONS, CORS_MAX_AGE_SECONDS_MAX, CORS_RULES_MAX_COUNT, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_MAX_LENGTH, CORS_RULE_NAME_MIN_LENGTH, CORS_RULE_NAME_PATTERN, CORS_RULE_NAME_RESERVED_PREFIX, CorsOperation, KnownBucketResponseType } from "./types/bucket.js";
 import { B2Object } from "./object.js";
 import { paginateItems, paginatePages } from "./util/paginator.js";
 import { Bucket } from "./bucket.js";
+import { assertValidBucketConfiguration, assertValidBucketInfo, assertValidCorsRules } from "./bucket-validation.js";
 import { UrlGuard, deriveAllowedSuffixes } from "./http/url-guard.js";
 import { VERSION } from "./version.js";
 import { FetchTransport, RetryTransport, getTransportUrlGuard } from "./http/transport.js";
 import { RawClient } from "./raw/index.js";
 import { B2Client } from "./client.js";
 import { Capability } from "./types/auth.js";
-import { EventType } from "./types/notifications.js";
+import { EventType, notificationCustomHeadersToRecord, recordToNotificationCustomHeaders } from "./types/notifications.js";
 import { PartnerCapability, Region } from "./types/partner.js";
-export { AccessDeniedError, B2Client, B2Error, B2InsufficientCapabilityError, B2Object, B2PartnerAuthorizationError, B2RealmConfigurationError, B2RedirectError, B2SsrfError, BadAuthTokenError, BadBucketIdError, BadJsonError, BadRequestError, BadUploadUrlError, BlobSource, Bucket, BucketRetentionMode, BucketType, BufferSource, CapExceededError, Capability, ChecksumMismatchError, ConflictError, CorsOperation, DownloadClientUnauthorizedToReadMarker, DownloadHeaderName, DuplicateBucketNameError, EncryptionAlgorithm, EncryptionKey, EncryptionMode, EventType, ExpiredAuthTokenError, FetchTransport, FileAction, FileNotPresentError, FileSource, FinishLargeFileResponseBodyError, GroupMemberCreationFailedError, InMemoryAccountInfo, IncrementalSha1, InternalError, InvalidAccountIdError, InvalidBucketIdError, InvalidBucketInfoError, InvalidBucketNameError, InvalidComputerIdError, InvalidEmailError, InvalidFileIdError, InvalidFileInfoError, InvalidFileNameError, InvalidGroupIdError, InvalidMemberAccountIdError, InvalidPartNumberError, InvalidRegionError, InvalidSmsPhoneError, KNOWN_B2_ERROR_CODES, LegalHoldValue, MetadataDirective, MethodFailureError, MethodNotAllowedError, MissingSmsPhoneError, NetworkError, NotFoundError, OutOfRangeError, PartnerCapability, RangeNotSatisfiableError, RawClient, Region, RequestTimeoutError, ResumeFileIdMismatchError, RetentionMode, RetryTransport, SSE_B2, SSE_NONE, ServiceUnavailableError, StreamSource, TooManyBucketsError, TooManyFilesError, TooManyGroupMembersError, TooManyMembersError, TooManyRequestsError, UploadResponseBodyError, UrlGuard, VERSION, accountId, applicationKeyId, bucketId, classifyError, computerId, deriveAllowedSuffixes, fileId, getTransportUrlGuard, groupId, keyId, largeFileId, paginateItems, paginatePages, partnerToken, sha1Hex, sseCustomer, toContentSource };
+export { AccessDeniedError, B2BucketConfigurationError, B2Client, B2Error, B2InsufficientCapabilityError, B2Object, B2PartnerAuthorizationError, B2RealmConfigurationError, B2RedirectError, B2SsrfError, BUCKET_INFO_KEY_MAX_BYTES, BUCKET_INFO_KEY_MIN_BYTES, BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_RESERVED_PREFIX, BUCKET_INFO_VALUES_MAX_BYTES, BadAuthTokenError, BadBucketIdError, BadJsonError, BadRequestError, BadUploadUrlError, BlobSource, Bucket, BucketKeyOption, BucketRetentionMode, BucketType, BufferSource, CORS_ALLOWED_OPERATIONS, CORS_MAX_AGE_SECONDS_MAX, CORS_RULES_MAX_COUNT, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_MAX_LENGTH, CORS_RULE_NAME_MIN_LENGTH, CORS_RULE_NAME_PATTERN, CORS_RULE_NAME_RESERVED_PREFIX, CapExceededError, Capability, ChecksumMismatchError, ConflictError, CorsOperation, DownloadClientUnauthorizedToReadMarker, DownloadHeaderName, DuplicateBucketNameError, EncryptionAlgorithm, EncryptionKey, EncryptionMode, EventType, ExpiredAuthTokenError, FetchTransport, FileAction, FileNotPresentError, FileSource, FinishLargeFileResponseBodyError, GroupMemberCreationFailedError, HIDE_MARKER_CONTENT_TYPE, InMemoryAccountInfo, IncrementalSha1, IncrementalSha256, InternalError, InvalidAccountIdError, InvalidBucketIdError, InvalidBucketInfoError, InvalidBucketNameError, InvalidComputerIdError, InvalidEmailError, InvalidFileIdError, InvalidFileInfoError, InvalidFileNameError, InvalidGroupIdError, InvalidMemberAccountIdError, InvalidPartNumberError, InvalidRegionError, InvalidSmsPhoneError, KNOWN_B2_ERROR_CODES, KnownBucketResponseType, LegalHoldValue, MetadataDirective, MethodFailureError, MethodNotAllowedError, MissingSmsPhoneError, NetworkError, NotFoundError, OutOfRangeError, PartnerCapability, RangeNotSatisfiableError, RawClient, Region, RequestTimeoutError, ResumeFileIdMismatchError, RetentionMode, RetryTransport, SSE_B2, SSE_NONE, ServiceUnavailableError, StreamSource, TooManyBucketsError, TooManyFilesError, TooManyGroupMembersError, TooManyMembersError, TooManyRequestsError, UploadResponseBodyError, UrlGuard, VERSION, accountId, applicationKeyId, assertValidBucketConfiguration, assertValidBucketInfo, assertValidCorsRules, bucketId, classifyError, computerId, deriveAllowedSuffixes, fileId, getTransportUrlGuard, groupId, keyId, largeFileId, notificationCustomHeadersToRecord, paginateItems, paginatePages, partnerToken, recordToNotificationCustomHeaders, sha1Hex, sha256Hex, sseCustomer, toContentSource };

package/dist/notifications/index.cjs

@@ -1,5 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_notifications = require("../types/notifications.cjs");
 const require_webhook = require("./webhook.cjs");
 exports.B2_WEBHOOK_SIGNATURE_HEADER = require_webhook.B2_WEBHOOK_SIGNATURE_HEADER;
+exports.notificationCustomHeadersToRecord = require_notifications.notificationCustomHeadersToRecord;
+exports.recordToNotificationCustomHeaders = require_notifications.recordToNotificationCustomHeaders;
 exports.requireValidWebhook = require_webhook.requireValidWebhook;
 exports.verifyWebhookSignature = require_webhook.verifyWebhookSignature;

package/dist/notifications/index.d.cts

@@ -1,3 +1,5 @@
+export type { EventNotificationCustomHeader, EventNotificationRule, } from '../types/notifications.js';
+export { notificationCustomHeadersToRecord, recordToNotificationCustomHeaders, } from '../types/notifications.js';
 export type { VerifyWebhookOptions, VerifyWebhookResult, WebhookEvent, WebhookPayload, } from './webhook.js';
 export { B2_WEBHOOK_SIGNATURE_HEADER, requireValidWebhook, verifyWebhookSignature, } from './webhook.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.js"],"names":[],"mappings":"AAAA,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.js"],"names":[],"mappings":"AAAA,YAAY,EACV,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,cAAc,CAAA"}

package/dist/notifications/index.d.ts

@@ -1,3 +1,5 @@
+export type { EventNotificationCustomHeader, EventNotificationRule, } from '../types/notifications.js';
+export { notificationCustomHeadersToRecord, recordToNotificationCustomHeaders, } from '../types/notifications.js';
 export type { VerifyWebhookOptions, VerifyWebhookResult, WebhookEvent, WebhookPayload, } from './webhook.js';
 export { B2_WEBHOOK_SIGNATURE_HEADER, requireValidWebhook, verifyWebhookSignature, } from './webhook.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.js"],"names":[],"mappings":"AAAA,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.js"],"names":[],"mappings":"AAAA,YAAY,EACV,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,cAAc,CAAA"}

package/dist/notifications/index.js

@@ -1,2 +1,3 @@
+import { notificationCustomHeadersToRecord, recordToNotificationCustomHeaders } from "../types/notifications.js";
 import { B2_WEBHOOK_SIGNATURE_HEADER, requireValidWebhook, verifyWebhookSignature } from "./webhook.js";
-export { B2_WEBHOOK_SIGNATURE_HEADER, requireValidWebhook, verifyWebhookSignature };
+export { B2_WEBHOOK_SIGNATURE_HEADER, notificationCustomHeadersToRecord, recordToNotificationCustomHeaders, requireValidWebhook, verifyWebhookSignature };

package/dist/object.cjs

@@ -15,6 +15,15 @@ function bucketDefaultRetentionSnapshot(info) {
 		unreadable: false
 	};
 }
+function bucketDefaultServerSideEncryptionSnapshot(info) {
+	const encryption = info.defaultServerSideEncryption;
+	if (!encryption.isClientAuthorizedToRead) return { unreadable: true };
+	if (encryption.value === null) return { unreadable: false };
+	return {
+		encryption: encryption.value,
+		unreadable: false
+	};
+}
 function resumeNeedsFreshBucketDefaults(options) {
 	return (options.resume === true || options.resumeFileId !== void 0) && (options.serverSideEncryption === void 0 || options.fileRetention === void 0);
 }
@@ -64,12 +73,14 @@ var B2Object = class {
 		if (isLarge) {
 			const bucketInfo = resumeNeedsFreshBucketDefaults(options) ? await this.fetchFreshBucketInfo() : this.bucket.info;
 			const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo);
+			const bucketDefaultSse = bucketDefaultServerSideEncryptionSnapshot(bucketInfo);
 			return require_large.uploadLargeFile(this.client.raw, this.client.accountInfo, {
 				...options,
 				bucketId: this.bucket.id,
 				fileName: this.fileName,
 				retry: uploadRetryOptions,
-				bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,
+				...bucketDefaultSse.encryption !== void 0 ? { bucketDefaultServerSideEncryption: bucketDefaultSse.encryption } : {},
+				...bucketDefaultSse.unreadable ? { bucketDefaultServerSideEncryptionUnreadable: true } : {},
 				...bucketDefaultRetention.retention !== void 0 ? { bucketDefaultRetention: bucketDefaultRetention.retention } : {},
 				...bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}
 			});

package/dist/object.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"object.cjs","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketRetentionPolicy } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketRetentionPolicy\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, SSE-C decryption, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 10 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n      serverSideEncryption?: SseCDownloadKey\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AA8DA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,OAAO,cAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,mCAAmC,WAAW;IAC9C,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,gBAAA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,gBAAA,uBAAuB,OAAO;EACnD,OAAO,iBAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAA,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,eAAA,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,eAAA,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,eAAA,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAU4B;EAC5B,OAAO,iBAAA,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,eAAA,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}
+{"version":3,"file":"object.cjs","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketDefaultRetention, BucketDefaultServerSideEncryption } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketDefaultRetention\n  readonly unreadable: boolean\n}\n\ninterface BucketDefaultServerSideEncryptionSnapshot {\n  readonly encryption?: BucketDefaultServerSideEncryption\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction bucketDefaultServerSideEncryptionSnapshot(\n  info: Bucket['info'],\n): BucketDefaultServerSideEncryptionSnapshot {\n  const encryption = info.defaultServerSideEncryption\n  if (!encryption.isClientAuthorizedToRead) return { unreadable: true }\n  if (encryption.value === null) return { unreadable: false }\n  return { encryption: encryption.value, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n  /**\n   * Minimum milliseconds between byte-only progress callbacks. Defaults to\n   * the SDK's 100 ms progress interval; set to 0 for per-chunk callbacks.\n   * The final completion callback is always emitted immediately.\n   */\n  readonly progressIntervalMillis?: number\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<\n  DownloadCallOptions,\n  'method' | 'onProgress' | 'progressIntervalMillis'\n>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      const bucketDefaultSse = bucketDefaultServerSideEncryptionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        ...(bucketDefaultSse.encryption !== undefined\n          ? { bucketDefaultServerSideEncryption: bucketDefaultSse.encryption }\n          : {}),\n        ...(bucketDefaultSse.unreadable\n          ? { bucketDefaultServerSideEncryptionUnreadable: true }\n          : {}),\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, SSE-C decryption, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 10 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n      serverSideEncryption?: SseCDownloadKey\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAuCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,0CACP,MAC2C;CAC3C,MAAM,aAAa,KAAK;CACxB,IAAI,CAAC,WAAW,0BAA0B,OAAO,EAAE,YAAY,KAAK;CACpE,IAAI,WAAW,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CAC1D,OAAO;EAAE,YAAY,WAAW;EAAO,YAAY;CAAM;AAC3D;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AAuEA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,MAAM,mBAAmB,0CAA0C,UAAU;GAC7E,OAAO,cAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,GAAI,iBAAiB,eAAe,KAAA,IAChC,EAAE,mCAAmC,iBAAiB,WAAW,IACjE,CAAC;IACL,GAAI,iBAAiB,aACjB,EAAE,6CAA6C,KAAK,IACpD,CAAC;IACL,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,gBAAA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,gBAAA,uBAAuB,OAAO;EACnD,OAAO,iBAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAA,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,eAAA,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,eAAA,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,eAAA,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAU4B;EAC5B,OAAO,iBAAA,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,eAAA,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}

package/dist/object.d.cts

@@ -47,13 +47,19 @@ export interface DownloadCallOptions {
      * will NOT emit a `completePart()` event.
      */
     readonly onProgress?: ProgressListener;
+    /**
+     * Minimum milliseconds between byte-only progress callbacks. Defaults to
+     * the SDK's 100 ms progress interval; set to 0 for per-chunk callbacks.
+     * The final completion callback is always emitted immediately.
+     */
+    readonly progressIntervalMillis?: number;
 }
 /**
  * Options accepted by {@link B2Object.head} / {@link Bucket.head}.
  * Same shape as {@link DownloadCallOptions} minus `method` (always
  * HEAD) and `onProgress` (no body to track).
  */
-export type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>;
+export type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress' | 'progressIntervalMillis'>;
 /**
  * Handle to a specific file (by name) within a B2 bucket.
  *

package/dist/object.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsB9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAgCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,iFAAiF;QACjF,oBAAoB,CAAC,EAAE,eAAe,CAAA;QACtC,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}
+{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAoC9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;IACtC;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;CACzC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,mBAAmB,EACnB,QAAQ,GAAG,YAAY,GAAG,wBAAwB,CACnD,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAsCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,iFAAiF;QACjF,oBAAoB,CAAC,EAAE,eAAe,CAAA;QACtC,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}

package/dist/object.d.ts

@@ -47,13 +47,19 @@ export interface DownloadCallOptions {
      * will NOT emit a `completePart()` event.
      */
     readonly onProgress?: ProgressListener;
+    /**
+     * Minimum milliseconds between byte-only progress callbacks. Defaults to
+     * the SDK's 100 ms progress interval; set to 0 for per-chunk callbacks.
+     * The final completion callback is always emitted immediately.
+     */
+    readonly progressIntervalMillis?: number;
 }
 /**
  * Options accepted by {@link B2Object.head} / {@link Bucket.head}.
  * Same shape as {@link DownloadCallOptions} minus `method` (always
  * HEAD) and `onProgress` (no body to track).
  */
-export type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>;
+export type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress' | 'progressIntervalMillis'>;
 /**
  * Handle to a specific file (by name) within a B2 bucket.
  *

package/dist/object.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsB9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAgCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,iFAAiF;QACjF,oBAAoB,CAAC,EAAE,eAAe,CAAA;QACtC,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}
+{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAoC9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;IACtC;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;CACzC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,mBAAmB,EACnB,QAAQ,GAAG,YAAY,GAAG,wBAAwB,CACnD,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAsCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,iFAAiF;QACjF,oBAAoB,CAAC,EAAE,eAAe,CAAA;QACtC,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}

package/dist/object.js

@@ -15,6 +15,15 @@ function bucketDefaultRetentionSnapshot(info) {
 		unreadable: false
 	};
 }
+function bucketDefaultServerSideEncryptionSnapshot(info) {
+	const encryption = info.defaultServerSideEncryption;
+	if (!encryption.isClientAuthorizedToRead) return { unreadable: true };
+	if (encryption.value === null) return { unreadable: false };
+	return {
+		encryption: encryption.value,
+		unreadable: false
+	};
+}
 function resumeNeedsFreshBucketDefaults(options) {
 	return (options.resume === true || options.resumeFileId !== void 0) && (options.serverSideEncryption === void 0 || options.fileRetention === void 0);
 }
@@ -64,12 +73,14 @@ var B2Object = class {
 		if (isLarge) {
 			const bucketInfo = resumeNeedsFreshBucketDefaults(options) ? await this.fetchFreshBucketInfo() : this.bucket.info;
 			const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo);
+			const bucketDefaultSse = bucketDefaultServerSideEncryptionSnapshot(bucketInfo);
 			return uploadLargeFile(this.client.raw, this.client.accountInfo, {
 				...options,
 				bucketId: this.bucket.id,
 				fileName: this.fileName,
 				retry: uploadRetryOptions,
-				bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,
+				...bucketDefaultSse.encryption !== void 0 ? { bucketDefaultServerSideEncryption: bucketDefaultSse.encryption } : {},
+				...bucketDefaultSse.unreadable ? { bucketDefaultServerSideEncryptionUnreadable: true } : {},
 				...bucketDefaultRetention.retention !== void 0 ? { bucketDefaultRetention: bucketDefaultRetention.retention } : {},
 				...bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}
 			});

package/dist/object.js.map

@@ -1 +1 @@
-{"version":3,"file":"object.js","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketRetentionPolicy } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketRetentionPolicy\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, SSE-C decryption, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 10 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n      serverSideEncryption?: SseCDownloadKey\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AA8DA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,mCAAmC,WAAW;IAC9C,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,uBAAuB,OAAO;EACnD,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAU4B;EAC5B,OAAO,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}
+{"version":3,"file":"object.js","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketDefaultRetention, BucketDefaultServerSideEncryption } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketDefaultRetention\n  readonly unreadable: boolean\n}\n\ninterface BucketDefaultServerSideEncryptionSnapshot {\n  readonly encryption?: BucketDefaultServerSideEncryption\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction bucketDefaultServerSideEncryptionSnapshot(\n  info: Bucket['info'],\n): BucketDefaultServerSideEncryptionSnapshot {\n  const encryption = info.defaultServerSideEncryption\n  if (!encryption.isClientAuthorizedToRead) return { unreadable: true }\n  if (encryption.value === null) return { unreadable: false }\n  return { encryption: encryption.value, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n  /**\n   * Minimum milliseconds between byte-only progress callbacks. Defaults to\n   * the SDK's 100 ms progress interval; set to 0 for per-chunk callbacks.\n   * The final completion callback is always emitted immediately.\n   */\n  readonly progressIntervalMillis?: number\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<\n  DownloadCallOptions,\n  'method' | 'onProgress' | 'progressIntervalMillis'\n>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      const bucketDefaultSse = bucketDefaultServerSideEncryptionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        ...(bucketDefaultSse.encryption !== undefined\n          ? { bucketDefaultServerSideEncryption: bucketDefaultSse.encryption }\n          : {}),\n        ...(bucketDefaultSse.unreadable\n          ? { bucketDefaultServerSideEncryptionUnreadable: true }\n          : {}),\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, SSE-C decryption, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 10 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n      serverSideEncryption?: SseCDownloadKey\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAuCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,0CACP,MAC2C;CAC3C,MAAM,aAAa,KAAK;CACxB,IAAI,CAAC,WAAW,0BAA0B,OAAO,EAAE,YAAY,KAAK;CACpE,IAAI,WAAW,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CAC1D,OAAO;EAAE,YAAY,WAAW;EAAO,YAAY;CAAM;AAC3D;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AAuEA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,MAAM,mBAAmB,0CAA0C,UAAU;GAC7E,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,GAAI,iBAAiB,eAAe,KAAA,IAChC,EAAE,mCAAmC,iBAAiB,WAAW,IACjE,CAAC;IACL,GAAI,iBAAiB,aACjB,EAAE,6CAA6C,KAAK,IACpD,CAAC;IACL,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,uBAAuB,OAAO;EACnD,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAU4B;EAC5B,OAAO,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}

package/dist/partner/auth-core.cjs

@@ -1,6 +1,7 @@
 const require_abort = require("../util/abort.cjs");
 const require_retry = require("../http/retry.cjs");
 const require_realms = require("../auth/realms.cjs");
+const require_reauth_coalescer = require("../auth/reauth-coalescer.cjs");
 const require_url_guard = require("../http/url-guard.cjs");
 const require_transport = require("../http/transport.cjs");
 const require_in_memory = require("./in-memory.cjs");
@@ -30,7 +31,7 @@ var PartnerAuthCore = class {
 	#masterKey;
 	additionalAllowedSuffixes;
 	disableSsrfGuard;
-	#inflightReauth = null;
+	reauthCoalescer;
 	/**
 	* Creates a shared Partner authorization core.
 	*
@@ -44,6 +45,7 @@ var PartnerAuthCore = class {
 		this.additionalAllowedSuffixes = options.additionalAllowedHostSuffixes;
 		this.disableSsrfGuard = options.disableSsrfGuard ?? false;
 		this.allowCustomAuthorizeRealm = options.allowCustomAuthorizeRealm ?? false;
+		this.reauthCoalescer = new require_reauth_coalescer.ReauthCoalescer((signal) => this.doReauthorize(signal));
 		let baseTransport;
 		if (options.transport !== void 0) {
 			baseTransport = options.transport;
@@ -142,28 +144,7 @@ var PartnerAuthCore = class {
 		}
 	}
 	reauthorize(signal) {
-		require_abort.throwIfSignalAborted(signal);
-		const inflight = this.#inflightReauth ?? this.startReauthorize();
-		inflight.waiters += 1;
-		return require_abort.raceWithAbort(inflight.promise, signal).finally(() => {
-			inflight.waiters -= 1;
-			if (inflight.waiters === 0 && !inflight.settled && !inflight.controller.signal.aborted) inflight.controller.abort(signal?.aborted === true ? require_abort.abortReason(signal) : void 0);
-		});
-	}
-	startReauthorize() {
-		const controller = new AbortController();
-		const inflight = {
-			controller,
-			promise: require_abort.raceWithAbort(this.doReauthorize(controller.signal), controller.signal).finally(() => {
-				if (this.#inflightReauth?.controller !== controller) return;
-				this.#inflightReauth.settled = true;
-				this.#inflightReauth = null;
-			}),
-			waiters: 0,
-			settled: false
-		};
-		this.#inflightReauth = inflight;
-		return inflight;
+		return this.reauthCoalescer.run(signal);
 	}
 	async doReauthorize(signal) {
 		return (await this.authorize({ signal })).authorizationToken;

package/dist/partner/auth-core.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth-core.cjs","names":["#masterKeyId","#masterKey","#inflightReauth"],"sources":["../../src/partner/auth-core.ts"],"sourcesContent":["import { getRealmUrl } from '../auth/realms.ts'\nimport { DEFAULT_RETRY_OPTIONS, type RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport { FetchTransport, RetryTransport } from '../http/transport.ts'\nimport { UrlGuard } from '../http/url-guard.ts'\nimport type { PartnerAuthorizeResponse } from '../types/partner.ts'\nimport { abortReason, raceWithAbort, throwIfSignalAborted } from '../util/abort.ts'\nimport type { PartnerAccountInfo } from './account-info.ts'\nimport { InMemoryPartnerAccountInfo } from './in-memory.ts'\nimport {\n  derivePartnerAllowedSuffixes,\n  PartnerRawClient,\n  validatePartnerAuthorizeResponseEndpoints,\n} from './raw.ts'\n\n/** Shared Partner authorization options used by Partner and Backup facades. */\nexport interface PartnerAuthCoreOptions {\n  /** The Master Application Key ID for the partner administrator account. */\n  readonly masterKeyId: string\n  /** The Master Application Key secret. */\n  readonly masterKey: string\n  /** B2 realm alias or direct trusted realm URL. Defaults to `\"production\"`. */\n  readonly realm?: string\n  /** Storage backend for Partner authorization state. */\n  readonly partnerAccountInfo?: PartnerAccountInfo\n  /** Custom HTTP transport. Defaults to {@link FetchTransport}. */\n  readonly transport?: HttpTransport\n  /** Override retry behavior for retryable requests. */\n  readonly retry?: Partial<RetryOptions>\n  /** Custom user-agent string prepended to the SDK default. */\n  readonly userAgent?: string\n  /** Extra trusted host suffixes to merge into the default SSRF guard. */\n  readonly additionalAllowedHostSuffixes?: readonly string[]\n  /** Explicitly disable default SSRF guard suffix locking. */\n  readonly disableSsrfGuard?: boolean\n  /** Whether the default fetch transport may follow same-origin GET/HEAD redirects. */\n  readonly followSameOriginRedirects?: boolean\n  /** Allow direct custom authorize realms for tests or private proxies. */\n  readonly allowCustomAuthorizeRealm?: boolean\n}\n\n/** Options for Partner authorization through {@link PartnerAuthCore}. */\nexport interface PartnerAuthCoreAuthorizeOptions {\n  /** Abort signal for cancelling the authorize request. */\n  readonly signal?: AbortSignal\n}\n\ninterface InflightPartnerReauth {\n  readonly controller: AbortController\n  readonly promise: Promise<string>\n  waiters: number\n  settled: boolean\n}\n\n/**\n * Internal Partner authorization state machine shared by public facades.\n *\n * @internal\n */\nexport class PartnerAuthCore {\n  /** Low-level Partner raw client used for authorization and Partner endpoints. */\n  readonly raw: PartnerRawClient\n  /** Partner authorization state storage. */\n  readonly partnerAccountInfo: PartnerAccountInfo\n  /** Default transport URL guard, or null when a custom transport owns guarding. */\n  readonly urlGuard: UrlGuard | null\n  /** Retry-wrapped transport shared by facade-specific raw clients. */\n  readonly transport: HttpTransport\n  /** Endpoint suffixes validated from cached authorization during construction. */\n  readonly cachedEndpointSuffixes: readonly string[] | undefined\n  /** Resolved Partner authorize realm URL. */\n  private readonly realmUrl: string\n  /** Whether custom authorize realms are trusted. */\n  private readonly allowCustomAuthorizeRealm: boolean\n  readonly #masterKeyId: string\n  readonly #masterKey: string\n  private readonly additionalAllowedSuffixes: readonly string[] | undefined\n  private readonly disableSsrfGuard: boolean\n  #inflightReauth: InflightPartnerReauth | null = null\n\n  /**\n   * Creates a shared Partner authorization core.\n   *\n   * @param options - Credentials, state storage, transport, retry, and guard settings.\n   */\n  constructor(options: PartnerAuthCoreOptions) {\n    this.#masterKeyId = options.masterKeyId\n    this.#masterKey = options.masterKey\n    this.realmUrl = getRealmUrl(options.realm ?? 'production')\n    this.partnerAccountInfo = options.partnerAccountInfo ?? new InMemoryPartnerAccountInfo()\n    this.additionalAllowedSuffixes = options.additionalAllowedHostSuffixes\n    this.disableSsrfGuard = options.disableSsrfGuard ?? false\n    this.allowCustomAuthorizeRealm = options.allowCustomAuthorizeRealm ?? false\n\n    let baseTransport: HttpTransport\n    if (options.transport !== undefined) {\n      baseTransport = options.transport\n      this.urlGuard = null\n    } else {\n      const urlGuard = new UrlGuard()\n      baseTransport = new FetchTransport({\n        urlGuard,\n        ...(options.userAgent !== undefined ? { userAgent: options.userAgent } : {}),\n        ...(options.followSameOriginRedirects !== undefined\n          ? { followSameOriginRedirects: options.followSameOriginRedirects }\n          : {}),\n      })\n      this.urlGuard = urlGuard\n    }\n\n    this.transport = new RetryTransport({\n      transport: baseTransport,\n      retry: { ...DEFAULT_RETRY_OPTIONS, ...options.retry },\n      onReauth: (signal) => this.reauthorize(signal),\n    })\n\n    this.cachedEndpointSuffixes = this.validateCachedAuth()\n    if (this.cachedEndpointSuffixes !== undefined) {\n      this.lockUrlGuardFromSuffixes(this.cachedEndpointSuffixes)\n    }\n\n    this.raw = new PartnerRawClient({\n      transport: this.transport,\n      ...(this.cachedEndpointSuffixes !== undefined\n        ? { authorizedPartnerEndpointSuffixes: this.cachedEndpointSuffixes }\n        : {}),\n      ...(options.allowCustomAuthorizeRealm !== undefined\n        ? { allowCustomAuthorizeRealm: options.allowCustomAuthorizeRealm }\n        : {}),\n    })\n  }\n\n  /**\n   * Authenticates with B2 Partner authorization and stores the authorization state.\n   *\n   * @param options - Optional abort signal.\n   *\n   * @returns The normalized Partner authorization response.\n   */\n  async authorize(options?: PartnerAuthCoreAuthorizeOptions): Promise<PartnerAuthorizeResponse> {\n    throwIfSignalAborted(options?.signal)\n    const auth = await this.raw.authorizePartner(\n      this.#masterKeyId,\n      this.#masterKey,\n      this.realmUrl,\n      options?.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n    throwIfSignalAborted(options?.signal)\n    this.partnerAccountInfo.setAuth(auth)\n    this.lockUrlGuard(auth)\n    return auth\n  }\n\n  /**\n   * Locks the default transport URL guard to suffixes from a validated auth response.\n   *\n   * @param auth - Partner authorization response to derive suffixes from.\n   */\n  lockUrlGuard(auth: PartnerAuthorizeResponse): void {\n    this.lockUrlGuardFromSuffixes(derivePartnerAllowedSuffixes(auth, this.realmUrl))\n  }\n\n  /**\n   * Locks the default transport URL guard to previously validated endpoint suffixes.\n   *\n   * @param derived - Validated endpoint suffixes.\n   */\n  private lockUrlGuardFromSuffixes(derived: readonly string[]): void {\n    if (this.urlGuard === null) return\n    const merged =\n      this.disableSsrfGuard === true\n        ? []\n        : this.additionalAllowedSuffixes !== undefined\n          ? Array.from(new Set([...derived, ...this.additionalAllowedSuffixes]))\n          : derived\n    this.urlGuard.setAllowedSuffixes(merged)\n  }\n\n  /**\n   * Validates a Partner authorization snapshot and returns endpoint suffixes.\n   *\n   * @param auth - Partner authorization response to validate.\n   *\n   * @returns Host suffixes safe for Partner-token endpoint requests.\n   *\n   * @internal\n   */\n  private validateEndpointSuffixes(auth: PartnerAuthorizeResponse): readonly string[] {\n    return validatePartnerAuthorizeResponseEndpoints(\n      auth,\n      this.realmUrl,\n      this.allowCustomAuthorizeRealm,\n    )\n  }\n\n  /**\n   * Validates an auth snapshot, locks the default URL guard, and returns endpoint suffixes.\n   *\n   * @param auth - Partner authorization response to validate and activate.\n   *\n   * @returns Host suffixes safe for Partner-token endpoint requests.\n   *\n   * @internal\n   */\n  activateEndpointSuffixes(auth: PartnerAuthorizeResponse): readonly string[] {\n    const suffixes = this.validateEndpointSuffixes(auth)\n    this.lockUrlGuardFromSuffixes(suffixes)\n    return suffixes\n  }\n\n  private validateCachedAuth(): readonly string[] | undefined {\n    const cachedAuth = this.partnerAccountInfo.getAuth()\n    if (cachedAuth === null) return undefined\n    try {\n      return this.validateEndpointSuffixes(cachedAuth)\n    } catch {\n      // Do not mutate a shared PartnerAccountInfo during construction. The\n      // facade will ignore this auth locally until authorize() replaces it.\n      return undefined\n    }\n  }\n\n  private reauthorize(signal: AbortSignal | undefined): Promise<string> {\n    throwIfSignalAborted(signal)\n    const inflight = this.#inflightReauth ?? this.startReauthorize()\n    inflight.waiters += 1\n    return raceWithAbort(inflight.promise, signal).finally(() => {\n      inflight.waiters -= 1\n      if (inflight.waiters === 0 && !inflight.settled && !inflight.controller.signal.aborted) {\n        inflight.controller.abort(signal?.aborted === true ? abortReason(signal) : undefined)\n      }\n    })\n  }\n\n  private startReauthorize(): InflightPartnerReauth {\n    const controller = new AbortController()\n    const promise = raceWithAbort(this.doReauthorize(controller.signal), controller.signal).finally(\n      () => {\n        if (this.#inflightReauth?.controller !== controller) return\n        this.#inflightReauth.settled = true\n        this.#inflightReauth = null\n      },\n    )\n    const inflight: InflightPartnerReauth = {\n      controller,\n      promise,\n      waiters: 0,\n      settled: false,\n    }\n    this.#inflightReauth = inflight\n    return inflight\n  }\n\n  private async doReauthorize(signal: AbortSignal): Promise<string> {\n    const auth = await this.authorize({ signal })\n    return auth.authorizationToken\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AA2DA,IAAa,kBAAb,MAA6B;;CAE3B;;CAEA;;CAEA;;CAEA;;CAEA;;CAEA;;CAEA;CACA;CACA;CACA;CACA;CACA,kBAAgD;;;;;;CAOhD,YAAY,SAAiC;EAC3C,KAAKA,eAAe,QAAQ;EAC5B,KAAKC,aAAa,QAAQ;EAC1B,KAAK,WAAW,eAAA,YAAY,QAAQ,SAAS,YAAY;EACzD,KAAK,qBAAqB,QAAQ,sBAAsB,IAAI,kBAAA,2BAA2B;EACvF,KAAK,4BAA4B,QAAQ;EACzC,KAAK,mBAAmB,QAAQ,oBAAoB;EACpD,KAAK,4BAA4B,QAAQ,6BAA6B;EAEtE,IAAI;EACJ,IAAI,QAAQ,cAAc,KAAA,GAAW;GACnC,gBAAgB,QAAQ;GACxB,KAAK,WAAW;EAClB,OAAO;GACL,MAAM,WAAW,IAAI,kBAAA,SAAS;GAC9B,gBAAgB,IAAI,kBAAA,eAAe;IACjC;IACA,GAAI,QAAQ,cAAc,KAAA,IAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;IAC1E,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,0BAA0B,IAC/D,CAAC;GACP,CAAC;GACD,KAAK,WAAW;EAClB;EAEA,KAAK,YAAY,IAAI,kBAAA,eAAe;GAClC,WAAW;GACX,OAAO;IAAE,GAAG,cAAA;IAAuB,GAAG,QAAQ;GAAM;GACpD,WAAW,WAAW,KAAK,YAAY,MAAM;EAC/C,CAAC;EAED,KAAK,yBAAyB,KAAK,mBAAmB;EACtD,IAAI,KAAK,2BAA2B,KAAA,GAClC,KAAK,yBAAyB,KAAK,sBAAsB;EAG3D,KAAK,MAAM,IAAI,YAAA,iBAAiB;GAC9B,WAAW,KAAK;GAChB,GAAI,KAAK,2BAA2B,KAAA,IAChC,EAAE,mCAAmC,KAAK,uBAAuB,IACjE,CAAC;GACL,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,0BAA0B,IAC/D,CAAC;EACP,CAAC;CACH;;;;;;;;CASA,MAAM,UAAU,SAA8E;EAC5F,cAAA,qBAAqB,SAAS,MAAM;EACpC,MAAM,OAAO,MAAM,KAAK,IAAI,iBAC1B,KAAKD,cACL,KAAKC,YACL,KAAK,UACL,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC/D;EACA,cAAA,qBAAqB,SAAS,MAAM;EACpC,KAAK,mBAAmB,QAAQ,IAAI;EACpC,KAAK,aAAa,IAAI;EACtB,OAAO;CACT;;;;;;CAOA,aAAa,MAAsC;EACjD,KAAK,yBAAyB,YAAA,6BAA6B,MAAM,KAAK,QAAQ,CAAC;CACjF;;;;;;CAOA,yBAAiC,SAAkC;EACjE,IAAI,KAAK,aAAa,MAAM;EAC5B,MAAM,SACJ,KAAK,qBAAqB,OACtB,CAAC,IACD,KAAK,8BAA8B,KAAA,IACjC,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAG,SAAS,GAAG,KAAK,yBAAyB,CAAC,CAAC,IACnE;EACR,KAAK,SAAS,mBAAmB,MAAM;CACzC;;;;;;;;;;CAWA,yBAAiC,MAAmD;EAClF,OAAO,YAAA,0CACL,MACA,KAAK,UACL,KAAK,yBACP;CACF;;;;;;;;;;CAWA,yBAAyB,MAAmD;EAC1E,MAAM,WAAW,KAAK,yBAAyB,IAAI;EACnD,KAAK,yBAAyB,QAAQ;EACtC,OAAO;CACT;CAEA,qBAA4D;EAC1D,MAAM,aAAa,KAAK,mBAAmB,QAAQ;EACnD,IAAI,eAAe,MAAM,OAAO,KAAA;EAChC,IAAI;GACF,OAAO,KAAK,yBAAyB,UAAU;EACjD,QAAQ;GAGN;EACF;CACF;CAEA,YAAoB,QAAkD;EACpE,cAAA,qBAAqB,MAAM;EAC3B,MAAM,WAAW,KAAKC,mBAAmB,KAAK,iBAAiB;EAC/D,SAAS,WAAW;EACpB,OAAO,cAAA,cAAc,SAAS,SAAS,MAAM,CAAC,CAAC,cAAc;GAC3D,SAAS,WAAW;GACpB,IAAI,SAAS,YAAY,KAAK,CAAC,SAAS,WAAW,CAAC,SAAS,WAAW,OAAO,SAC7E,SAAS,WAAW,MAAM,QAAQ,YAAY,OAAO,cAAA,YAAY,MAAM,IAAI,KAAA,CAAS;EAExF,CAAC;CACH;CAEA,mBAAkD;EAChD,MAAM,aAAa,IAAI,gBAAgB;EAQvC,MAAM,WAAkC;GACtC;GACA,SATc,cAAA,cAAc,KAAK,cAAc,WAAW,MAAM,GAAG,WAAW,MAAM,CAAC,CAAC,cAChF;IACJ,IAAI,KAAKA,iBAAiB,eAAe,YAAY;IACrD,KAAKA,gBAAgB,UAAU;IAC/B,KAAKA,kBAAkB;GACzB,CAIA;GACA,SAAS;GACT,SAAS;EACX;EACA,KAAKA,kBAAkB;EACvB,OAAO;CACT;CAEA,MAAc,cAAc,QAAsC;EAEhE,QAAO,MADY,KAAK,UAAU,EAAE,OAAO,CAAC,EAAA,CAChC;CACd;AACF"}
+{"version":3,"file":"auth-core.cjs","names":[],"sources":["../../src/partner/auth-core.ts"],"sourcesContent":["import { getRealmUrl } from '../auth/realms.ts'\nimport { ReauthCoalescer } from '../auth/reauth-coalescer.ts'\nimport { DEFAULT_RETRY_OPTIONS, type RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport { FetchTransport, RetryTransport } from '../http/transport.ts'\nimport { UrlGuard } from '../http/url-guard.ts'\nimport type { PartnerAuthorizeResponse } from '../types/partner.ts'\nimport { throwIfSignalAborted } from '../util/abort.ts'\nimport type { PartnerAccountInfo } from './account-info.ts'\nimport { InMemoryPartnerAccountInfo } from './in-memory.ts'\nimport {\n  derivePartnerAllowedSuffixes,\n  PartnerRawClient,\n  validatePartnerAuthorizeResponseEndpoints,\n} from './raw.ts'\n\n/** Shared Partner authorization options used by Partner and Backup facades. */\nexport interface PartnerAuthCoreOptions {\n  /** The Master Application Key ID for the partner administrator account. */\n  readonly masterKeyId: string\n  /** The Master Application Key secret. */\n  readonly masterKey: string\n  /** B2 realm alias or direct trusted realm URL. Defaults to `\"production\"`. */\n  readonly realm?: string\n  /** Storage backend for Partner authorization state. */\n  readonly partnerAccountInfo?: PartnerAccountInfo\n  /** Custom HTTP transport. Defaults to {@link FetchTransport}. */\n  readonly transport?: HttpTransport\n  /** Override retry behavior for retryable requests. */\n  readonly retry?: Partial<RetryOptions>\n  /** Custom user-agent string prepended to the SDK default. */\n  readonly userAgent?: string\n  /** Extra trusted host suffixes to merge into the default SSRF guard. */\n  readonly additionalAllowedHostSuffixes?: readonly string[]\n  /** Explicitly disable default SSRF guard suffix locking. */\n  readonly disableSsrfGuard?: boolean\n  /** Whether the default fetch transport may follow same-origin GET/HEAD redirects. */\n  readonly followSameOriginRedirects?: boolean\n  /** Allow direct custom authorize realms for tests or private proxies. */\n  readonly allowCustomAuthorizeRealm?: boolean\n}\n\n/** Options for Partner authorization through {@link PartnerAuthCore}. */\nexport interface PartnerAuthCoreAuthorizeOptions {\n  /** Abort signal for cancelling the authorize request. */\n  readonly signal?: AbortSignal\n}\n\n/**\n * Internal Partner authorization state machine shared by public facades.\n *\n * @internal\n */\nexport class PartnerAuthCore {\n  /** Low-level Partner raw client used for authorization and Partner endpoints. */\n  readonly raw: PartnerRawClient\n  /** Partner authorization state storage. */\n  readonly partnerAccountInfo: PartnerAccountInfo\n  /** Default transport URL guard, or null when a custom transport owns guarding. */\n  readonly urlGuard: UrlGuard | null\n  /** Retry-wrapped transport shared by facade-specific raw clients. */\n  readonly transport: HttpTransport\n  /** Endpoint suffixes validated from cached authorization during construction. */\n  readonly cachedEndpointSuffixes: readonly string[] | undefined\n  /** Resolved Partner authorize realm URL. */\n  private readonly realmUrl: string\n  /** Whether custom authorize realms are trusted. */\n  private readonly allowCustomAuthorizeRealm: boolean\n  readonly #masterKeyId: string\n  readonly #masterKey: string\n  private readonly additionalAllowedSuffixes: readonly string[] | undefined\n  private readonly disableSsrfGuard: boolean\n  private readonly reauthCoalescer: ReauthCoalescer<string>\n\n  /**\n   * Creates a shared Partner authorization core.\n   *\n   * @param options - Credentials, state storage, transport, retry, and guard settings.\n   */\n  constructor(options: PartnerAuthCoreOptions) {\n    this.#masterKeyId = options.masterKeyId\n    this.#masterKey = options.masterKey\n    this.realmUrl = getRealmUrl(options.realm ?? 'production')\n    this.partnerAccountInfo = options.partnerAccountInfo ?? new InMemoryPartnerAccountInfo()\n    this.additionalAllowedSuffixes = options.additionalAllowedHostSuffixes\n    this.disableSsrfGuard = options.disableSsrfGuard ?? false\n    this.allowCustomAuthorizeRealm = options.allowCustomAuthorizeRealm ?? false\n    this.reauthCoalescer = new ReauthCoalescer((signal) => this.doReauthorize(signal))\n\n    let baseTransport: HttpTransport\n    if (options.transport !== undefined) {\n      baseTransport = options.transport\n      this.urlGuard = null\n    } else {\n      const urlGuard = new UrlGuard()\n      baseTransport = new FetchTransport({\n        urlGuard,\n        ...(options.userAgent !== undefined ? { userAgent: options.userAgent } : {}),\n        ...(options.followSameOriginRedirects !== undefined\n          ? { followSameOriginRedirects: options.followSameOriginRedirects }\n          : {}),\n      })\n      this.urlGuard = urlGuard\n    }\n\n    this.transport = new RetryTransport({\n      transport: baseTransport,\n      retry: { ...DEFAULT_RETRY_OPTIONS, ...options.retry },\n      onReauth: (signal) => this.reauthorize(signal),\n    })\n\n    this.cachedEndpointSuffixes = this.validateCachedAuth()\n    if (this.cachedEndpointSuffixes !== undefined) {\n      this.lockUrlGuardFromSuffixes(this.cachedEndpointSuffixes)\n    }\n\n    this.raw = new PartnerRawClient({\n      transport: this.transport,\n      ...(this.cachedEndpointSuffixes !== undefined\n        ? { authorizedPartnerEndpointSuffixes: this.cachedEndpointSuffixes }\n        : {}),\n      ...(options.allowCustomAuthorizeRealm !== undefined\n        ? { allowCustomAuthorizeRealm: options.allowCustomAuthorizeRealm }\n        : {}),\n    })\n  }\n\n  /**\n   * Authenticates with B2 Partner authorization and stores the authorization state.\n   *\n   * @param options - Optional abort signal.\n   *\n   * @returns The normalized Partner authorization response.\n   */\n  async authorize(options?: PartnerAuthCoreAuthorizeOptions): Promise<PartnerAuthorizeResponse> {\n    throwIfSignalAborted(options?.signal)\n    const auth = await this.raw.authorizePartner(\n      this.#masterKeyId,\n      this.#masterKey,\n      this.realmUrl,\n      options?.signal !== undefined ? { signal: options.signal } : undefined,\n    )\n    throwIfSignalAborted(options?.signal)\n    this.partnerAccountInfo.setAuth(auth)\n    this.lockUrlGuard(auth)\n    return auth\n  }\n\n  /**\n   * Locks the default transport URL guard to suffixes from a validated auth response.\n   *\n   * @param auth - Partner authorization response to derive suffixes from.\n   */\n  lockUrlGuard(auth: PartnerAuthorizeResponse): void {\n    this.lockUrlGuardFromSuffixes(derivePartnerAllowedSuffixes(auth, this.realmUrl))\n  }\n\n  /**\n   * Locks the default transport URL guard to previously validated endpoint suffixes.\n   *\n   * @param derived - Validated endpoint suffixes.\n   */\n  private lockUrlGuardFromSuffixes(derived: readonly string[]): void {\n    if (this.urlGuard === null) return\n    const merged =\n      this.disableSsrfGuard === true\n        ? []\n        : this.additionalAllowedSuffixes !== undefined\n          ? Array.from(new Set([...derived, ...this.additionalAllowedSuffixes]))\n          : derived\n    this.urlGuard.setAllowedSuffixes(merged)\n  }\n\n  /**\n   * Validates a Partner authorization snapshot and returns endpoint suffixes.\n   *\n   * @param auth - Partner authorization response to validate.\n   *\n   * @returns Host suffixes safe for Partner-token endpoint requests.\n   *\n   * @internal\n   */\n  private validateEndpointSuffixes(auth: PartnerAuthorizeResponse): readonly string[] {\n    return validatePartnerAuthorizeResponseEndpoints(\n      auth,\n      this.realmUrl,\n      this.allowCustomAuthorizeRealm,\n    )\n  }\n\n  /**\n   * Validates an auth snapshot, locks the default URL guard, and returns endpoint suffixes.\n   *\n   * @param auth - Partner authorization response to validate and activate.\n   *\n   * @returns Host suffixes safe for Partner-token endpoint requests.\n   *\n   * @internal\n   */\n  activateEndpointSuffixes(auth: PartnerAuthorizeResponse): readonly string[] {\n    const suffixes = this.validateEndpointSuffixes(auth)\n    this.lockUrlGuardFromSuffixes(suffixes)\n    return suffixes\n  }\n\n  private validateCachedAuth(): readonly string[] | undefined {\n    const cachedAuth = this.partnerAccountInfo.getAuth()\n    if (cachedAuth === null) return undefined\n    try {\n      return this.validateEndpointSuffixes(cachedAuth)\n    } catch {\n      // Do not mutate a shared PartnerAccountInfo during construction. The\n      // facade will ignore this auth locally until authorize() replaces it.\n      return undefined\n    }\n  }\n\n  private reauthorize(signal: AbortSignal | undefined): Promise<string> {\n    return this.reauthCoalescer.run(signal)\n  }\n\n  private async doReauthorize(signal: AbortSignal): Promise<string> {\n    const auth = await this.authorize({ signal })\n    return auth.authorizationToken\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAqDA,IAAa,kBAAb,MAA6B;;CAE3B;;CAEA;;CAEA;;CAEA;;CAEA;;CAEA;;CAEA;CACA;CACA;CACA;CACA;CACA;;;;;;CAOA,YAAY,SAAiC;EAC3C,KAAK,eAAe,QAAQ;EAC5B,KAAK,aAAa,QAAQ;EAC1B,KAAK,WAAW,eAAA,YAAY,QAAQ,SAAS,YAAY;EACzD,KAAK,qBAAqB,QAAQ,sBAAsB,IAAI,kBAAA,2BAA2B;EACvF,KAAK,4BAA4B,QAAQ;EACzC,KAAK,mBAAmB,QAAQ,oBAAoB;EACpD,KAAK,4BAA4B,QAAQ,6BAA6B;EACtE,KAAK,kBAAkB,IAAI,yBAAA,iBAAiB,WAAW,KAAK,cAAc,MAAM,CAAC;EAEjF,IAAI;EACJ,IAAI,QAAQ,cAAc,KAAA,GAAW;GACnC,gBAAgB,QAAQ;GACxB,KAAK,WAAW;EAClB,OAAO;GACL,MAAM,WAAW,IAAI,kBAAA,SAAS;GAC9B,gBAAgB,IAAI,kBAAA,eAAe;IACjC;IACA,GAAI,QAAQ,cAAc,KAAA,IAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;IAC1E,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,0BAA0B,IAC/D,CAAC;GACP,CAAC;GACD,KAAK,WAAW;EAClB;EAEA,KAAK,YAAY,IAAI,kBAAA,eAAe;GAClC,WAAW;GACX,OAAO;IAAE,GAAG,cAAA;IAAuB,GAAG,QAAQ;GAAM;GACpD,WAAW,WAAW,KAAK,YAAY,MAAM;EAC/C,CAAC;EAED,KAAK,yBAAyB,KAAK,mBAAmB;EACtD,IAAI,KAAK,2BAA2B,KAAA,GAClC,KAAK,yBAAyB,KAAK,sBAAsB;EAG3D,KAAK,MAAM,IAAI,YAAA,iBAAiB;GAC9B,WAAW,KAAK;GAChB,GAAI,KAAK,2BAA2B,KAAA,IAChC,EAAE,mCAAmC,KAAK,uBAAuB,IACjE,CAAC;GACL,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,0BAA0B,IAC/D,CAAC;EACP,CAAC;CACH;;;;;;;;CASA,MAAM,UAAU,SAA8E;EAC5F,cAAA,qBAAqB,SAAS,MAAM;EACpC,MAAM,OAAO,MAAM,KAAK,IAAI,iBAC1B,KAAK,cACL,KAAK,YACL,KAAK,UACL,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,KAAA,CAC/D;EACA,cAAA,qBAAqB,SAAS,MAAM;EACpC,KAAK,mBAAmB,QAAQ,IAAI;EACpC,KAAK,aAAa,IAAI;EACtB,OAAO;CACT;;;;;;CAOA,aAAa,MAAsC;EACjD,KAAK,yBAAyB,YAAA,6BAA6B,MAAM,KAAK,QAAQ,CAAC;CACjF;;;;;;CAOA,yBAAiC,SAAkC;EACjE,IAAI,KAAK,aAAa,MAAM;EAC5B,MAAM,SACJ,KAAK,qBAAqB,OACtB,CAAC,IACD,KAAK,8BAA8B,KAAA,IACjC,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAG,SAAS,GAAG,KAAK,yBAAyB,CAAC,CAAC,IACnE;EACR,KAAK,SAAS,mBAAmB,MAAM;CACzC;;;;;;;;;;CAWA,yBAAiC,MAAmD;EAClF,OAAO,YAAA,0CACL,MACA,KAAK,UACL,KAAK,yBACP;CACF;;;;;;;;;;CAWA,yBAAyB,MAAmD;EAC1E,MAAM,WAAW,KAAK,yBAAyB,IAAI;EACnD,KAAK,yBAAyB,QAAQ;EACtC,OAAO;CACT;CAEA,qBAA4D;EAC1D,MAAM,aAAa,KAAK,mBAAmB,QAAQ;EACnD,IAAI,eAAe,MAAM,OAAO,KAAA;EAChC,IAAI;GACF,OAAO,KAAK,yBAAyB,UAAU;EACjD,QAAQ;GAGN;EACF;CACF;CAEA,YAAoB,QAAkD;EACpE,OAAO,KAAK,gBAAgB,IAAI,MAAM;CACxC;CAEA,MAAc,cAAc,QAAsC;EAEhE,QAAO,MADY,KAAK,UAAU,EAAE,OAAO,CAAC,EAAA,CAChC;CACd;AACF"}