@backblaze-labs/b2-sdk 0.3.0 → 0.4.0

package/dist/backup/raw.js

@@ -1,16 +1,42 @@
 import { b2Url } from "../raw/url.js";
 import { endpointAllowedSuffixes, nonRetryingMutationRequestOptions, validatePartnerEndpointUrl, withQueryString } from "../partner/endpoint-url.js";
 //#region src/backup/raw.ts
-var BACKUP_API_V1 = {
+var BACKUP_API = {
 	prefix: "api/backup",
 	version: "v1"
 };
+/**
+* Normalizes the `bz_delete_computer` wire response to the array-shaped schema.
+*
+* The Backblaze apidocs response *schema* declares a JSON array, but the
+* accompanying *example* shows a single bare object. This tolerates both: an
+* array passes through unchanged, and a lone object is wrapped in a
+* single-element array, so callers always receive a {@link DeleteComputerResponse}
+* regardless of which shape live B2 returns.
+*
+* @param raw - The parsed `bz_delete_computer` JSON body.
+*
+* @returns The response as the canonical array shape.
+*
+* @throws TypeError When the body is neither an array nor an object.
+*/
+function normalizeDeleteComputerResponse(raw) {
+	if (Array.isArray(raw)) return raw;
+	if (raw !== null && typeof raw === "object") return [raw];
+	throw new TypeError("bz_delete_computer returned an unexpected response body shape");
+}
 function backupEndpointAllowedSuffixes(transport, authorizedSuffixes) {
 	return endpointAllowedSuffixes(transport, authorizedSuffixes, {
 		missingGuard: "Computer Backup endpoint requests require BackupClient.authorize() or a locked URL guard before sending Partner tokens",
 		unlockedGuard: "Computer Backup endpoint requests require a locked URL guard before sending Partner tokens"
 	});
 }
+function backupEndpointUrl(backupApiUrl, endpoint) {
+	return b2Url(backupApiUrl, {
+		...BACKUP_API,
+		endpoint
+	});
+}
 /**
 * Low-level client for Computer Backup API endpoint bindings.
 *
@@ -81,10 +107,10 @@ var BackupRawClient = class {
 	* @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.
 	*/
 	async deleteComputer(backupApiUrl, authToken, request, options) {
-		return this.postJson(backupApiUrl, authToken, "bz_delete_computer", {
+		return normalizeDeleteComputerResponse(await this.postNonRetryingMutationJson(backupApiUrl, authToken, "bz_delete_computer", {
 			accountId: request.accountId,
 			computerId: request.computerId
-		}, nonRetryingMutationRequestOptions(options));
+		}, options));
 	}
 	safeBackupApiUrl(backupApiUrl) {
 		return validatePartnerEndpointUrl(backupApiUrl, "backupApiUrl", backupEndpointAllowedSuffixes(this.transport, this.authorizedEndpointSuffixes));
@@ -102,10 +128,7 @@ var BackupRawClient = class {
 	*/
 	async getJson(backupApiUrl, authToken, endpoint, query, options) {
 		return (await this.transport.send({
-			url: withQueryString(b2Url(this.safeBackupApiUrl(backupApiUrl), {
-				...BACKUP_API_V1,
-				endpoint
-			}), query),
+			url: withQueryString(backupEndpointUrl(this.safeBackupApiUrl(backupApiUrl), endpoint), query),
 			method: "GET",
 			headers: { Authorization: authToken },
 			...options?.signal !== void 0 ? { signal: options.signal } : {},
@@ -113,7 +136,7 @@ var BackupRawClient = class {
 		})).json();
 	}
 	/**
-	* Sends a JSON POST request to the specified Computer Backup API endpoint.
+	* Sends a non-retrying JSON mutation POST request to the specified Computer Backup API endpoint.
 	*
 	* @param backupApiUrl - The Computer Backup API base URL.
 	* @param authToken - The Partner authorization token.
@@ -123,20 +146,19 @@ var BackupRawClient = class {
 	*
 	* @returns The parsed JSON response.
 	*/
-	async postJson(backupApiUrl, authToken, endpoint, body, options) {
+	async postNonRetryingMutationJson(backupApiUrl, authToken, endpoint, body, options) {
+		const requestOptions = nonRetryingMutationRequestOptions(options);
 		return (await this.transport.send({
-			url: b2Url(this.safeBackupApiUrl(backupApiUrl), {
-				...BACKUP_API_V1,
-				endpoint
-			}),
+			url: backupEndpointUrl(this.safeBackupApiUrl(backupApiUrl), endpoint),
 			method: "POST",
 			headers: {
 				Authorization: authToken,
 				"Content-Type": "application/json"
 			},
 			body: JSON.stringify(body),
-			...options?.signal !== void 0 ? { signal: options.signal } : {},
-			...options?.retry !== void 0 ? { retry: options.retry } : {}
+			...requestOptions.signal !== void 0 ? { signal: requestOptions.signal } : {},
+			...requestOptions.idempotent !== void 0 ? { idempotent: requestOptions.idempotent } : {},
+			...requestOptions.retry !== void 0 ? { retry: requestOptions.retry } : {}
 		})).json();
 	}
 };

package/dist/backup/raw.js.map

@@ -1 +1 @@
-{"version":3,"file":"raw.js","names":[],"sources":["../../src/backup/raw.ts"],"sourcesContent":["import type { RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport {\n  endpointAllowedSuffixes,\n  nonRetryingMutationRequestOptions,\n  type QueryParams,\n  validatePartnerEndpointUrl,\n  withQueryString,\n} from '../partner/endpoint-url.ts'\nimport { type B2EndpointUrlOptions, b2Url } from '../raw/url.ts'\nimport type {\n  DeleteComputerRequest,\n  DeleteComputerResponse,\n  ListComputersRequest,\n  ListComputersResponse,\n} from '../types/backup.ts'\n\nconst BACKUP_API_V1: B2EndpointUrlOptions = { prefix: 'api/backup', version: 'v1' }\n\n/** Configuration for constructing a {@link BackupRawClient}. */\nexport interface BackupRawClientOptions {\n  /**\n   * The HTTP transport used to send requests.\n   *\n   * Computer Backup endpoint calls validate URLs against suffixes recorded by\n   * Partner authorization. A rehydrated client that skips authorization must\n   * use `authorizedBackupEndpointSuffixes` or a transport with a locked\n   * `urlGuard`. Because Partner authorize responses redact\n   * `authorizationToken` under `JSON.stringify`, durable caches should persist\n   * `partnerAuthorizeResponseForPersistence(auth)` only to encrypted or\n   * otherwise credential-grade storage, or use another secure token-preserving\n   * representation.\n   */\n  readonly transport: HttpTransport\n  /**\n   * Validated Computer Backup endpoint host suffixes restored from cached\n   * Partner authorization. Facades normally manage this after authorization;\n   * direct raw clients can pass trusted suffixes derived from\n   * `derivePartnerAllowedSuffixes()`. Do not derive this cache with\n   * `JSON.stringify(authorizePartner())`, which intentionally stores a redacted\n   * token placeholder instead of a usable Partner token. Rehydrating that\n   * placeholder fails fast.\n   */\n  readonly authorizedBackupEndpointSuffixes?: readonly string[]\n}\n\n/** Optional controls for raw Computer Backup API requests. */\nexport interface BackupRawRequestOptions {\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n  /** Per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n}\n\nfunction backupEndpointAllowedSuffixes(\n  transport: HttpTransport,\n  authorizedSuffixes: readonly string[],\n): readonly string[] {\n  return endpointAllowedSuffixes(transport, authorizedSuffixes, {\n    missingGuard:\n      'Computer Backup endpoint requests require BackupClient.authorize() or a locked URL guard before sending Partner tokens',\n    unlockedGuard:\n      'Computer Backup endpoint requests require a locked URL guard before sending Partner tokens',\n  })\n}\n\n/**\n * Low-level client for Computer Backup API endpoint bindings.\n *\n * Each method maps directly to one `bz_*` HTTP call under the\n * `/api/backup/v1/` route using the `backupApiUrl` returned by Partner\n * authorization.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport class BackupRawClient {\n  /** @internal */\n  private readonly transport: HttpTransport\n  private authorizedEndpointSuffixes: readonly string[]\n\n  /**\n   * Creates a new BackupRawClient with the given transport.\n   *\n   * @param options - The constructor configuration.\n   */\n  constructor(options: BackupRawClientOptions) {\n    this.transport = options.transport\n    this.authorizedEndpointSuffixes = Array.from(options.authorizedBackupEndpointSuffixes ?? [])\n  }\n\n  /**\n   * Replaces the validated Computer Backup endpoint host suffixes.\n   *\n   * @param suffixes - Host suffixes derived from Partner authorization.\n   *\n   * @internal\n   */\n  setAuthorizedEndpointSuffixes(suffixes: readonly string[]): void {\n    this.authorizedEndpointSuffixes = Array.from(suffixes)\n  }\n\n  /**\n   * Calls `bz_list_computers`.\n   *\n   * Uses the documented GET form. The wire response is a single JSON object\n   * with a `nextComputerId` cursor and active computer backup records.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.\n   * @param authToken - The Partner authorization token.\n   * @param request - The computer listing query parameters.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The single-object computer backup wire response.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async listComputers(\n    backupApiUrl: string,\n    authToken: string,\n    request: ListComputersRequest,\n    options?: BackupRawRequestOptions,\n  ): Promise<ListComputersResponse> {\n    return this.getJson<ListComputersResponse>(\n      backupApiUrl,\n      authToken,\n      'bz_list_computers',\n      {\n        accountId: request.accountId,\n        ...(request.startComputerId !== undefined\n          ? { startComputerId: request.startComputerId }\n          : {}),\n        ...(request.maxComputerCount !== undefined\n          ? { maxComputerCount: request.maxComputerCount }\n          : {}),\n      },\n      options,\n    )\n  }\n\n  /**\n   * Calls `bz_delete_computer`.\n   *\n   * The documented wire response is a JSON array of deletion records. This\n   * destructive mutation is not automatically retried or reauthorized in place.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.\n   * @param authToken - The Partner authorization token.\n   * @param request - The computer deletion request body.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The deleted computer backup record array.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async deleteComputer(\n    backupApiUrl: string,\n    authToken: string,\n    request: DeleteComputerRequest,\n    options?: BackupRawRequestOptions,\n  ): Promise<DeleteComputerResponse> {\n    return this.postJson<DeleteComputerResponse>(\n      backupApiUrl,\n      authToken,\n      'bz_delete_computer',\n      {\n        accountId: request.accountId,\n        computerId: request.computerId,\n      },\n      nonRetryingMutationRequestOptions(options),\n    )\n  }\n\n  private safeBackupApiUrl(backupApiUrl: string): string {\n    return validatePartnerEndpointUrl(\n      backupApiUrl,\n      'backupApiUrl',\n      backupEndpointAllowedSuffixes(this.transport, this.authorizedEndpointSuffixes),\n    )\n  }\n\n  /**\n   * Sends a JSON GET request to the specified Computer Backup API endpoint.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL.\n   * @param authToken - The Partner authorization token.\n   * @param endpoint - The Computer Backup API endpoint name.\n   * @param query - The query-string parameters.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The parsed JSON response.\n   */\n  private async getJson<T>(\n    backupApiUrl: string,\n    authToken: string,\n    endpoint: string,\n    query: QueryParams,\n    options?: BackupRawRequestOptions,\n  ): Promise<T> {\n    const response = await this.transport.send({\n      url: withQueryString(\n        b2Url(this.safeBackupApiUrl(backupApiUrl), { ...BACKUP_API_V1, endpoint }),\n        query,\n      ),\n      method: 'GET',\n      headers: {\n        Authorization: authToken,\n      },\n      ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n      ...(options?.retry !== undefined ? { retry: options.retry } : {}),\n    })\n    return response.json<T>()\n  }\n\n  /**\n   * Sends a JSON POST request to the specified Computer Backup API endpoint.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL.\n   * @param authToken - The Partner authorization token.\n   * @param endpoint - The Computer Backup API endpoint name.\n   * @param body - The JSON request body.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The parsed JSON response.\n   */\n  private async postJson<T>(\n    backupApiUrl: string,\n    authToken: string,\n    endpoint: string,\n    body: unknown,\n    options?: BackupRawRequestOptions,\n  ): Promise<T> {\n    const response = await this.transport.send({\n      url: b2Url(this.safeBackupApiUrl(backupApiUrl), { ...BACKUP_API_V1, endpoint }),\n      method: 'POST',\n      headers: {\n        Authorization: authToken,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(body),\n      ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n      ...(options?.retry !== undefined ? { retry: options.retry } : {}),\n    })\n    return response.json<T>()\n  }\n}\n"],"mappings":";;;AAiBA,IAAM,gBAAsC;CAAE,QAAQ;CAAc,SAAS;AAAK;AAqClF,SAAS,8BACP,WACA,oBACmB;CACnB,OAAO,wBAAwB,WAAW,oBAAoB;EAC5D,cACE;EACF,eACE;CACJ,CAAC;AACH;;;;;;;;;;AAWA,IAAa,kBAAb,MAA6B;;CAE3B;CACA;;;;;;CAOA,YAAY,SAAiC;EAC3C,KAAK,YAAY,QAAQ;EACzB,KAAK,6BAA6B,MAAM,KAAK,QAAQ,oCAAoC,CAAC,CAAC;CAC7F;;;;;;;;CASA,8BAA8B,UAAmC;EAC/D,KAAK,6BAA6B,MAAM,KAAK,QAAQ;CACvD;;;;;;;;;;;;;;;;CAiBA,MAAM,cACJ,cACA,WACA,SACA,SACgC;EAChC,OAAO,KAAK,QACV,cACA,WACA,qBACA;GACE,WAAW,QAAQ;GACnB,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,iBAAiB,QAAQ,gBAAgB,IAC3C,CAAC;GACL,GAAI,QAAQ,qBAAqB,KAAA,IAC7B,EAAE,kBAAkB,QAAQ,iBAAiB,IAC7C,CAAC;EACP,GACA,OACF;CACF;;;;;;;;;;;;;;;;CAiBA,MAAM,eACJ,cACA,WACA,SACA,SACiC;EACjC,OAAO,KAAK,SACV,cACA,WACA,sBACA;GACE,WAAW,QAAQ;GACnB,YAAY,QAAQ;EACtB,GACA,kCAAkC,OAAO,CAC3C;CACF;CAEA,iBAAyB,cAA8B;EACrD,OAAO,2BACL,cACA,gBACA,8BAA8B,KAAK,WAAW,KAAK,0BAA0B,CAC/E;CACF;;;;;;;;;;;;CAaA,MAAc,QACZ,cACA,WACA,UACA,OACA,SACY;EAaZ,QAAO,MAZgB,KAAK,UAAU,KAAK;GACzC,KAAK,gBACH,MAAM,KAAK,iBAAiB,YAAY,GAAG;IAAE,GAAG;IAAe;GAAS,CAAC,GACzE,KACF;GACA,QAAQ;GACR,SAAS,EACP,eAAe,UACjB;GACA,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GAClE,GAAI,SAAS,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EACjE,CAAC,EAAA,CACe,KAAQ;CAC1B;;;;;;;;;;;;CAaA,MAAc,SACZ,cACA,WACA,UACA,MACA,SACY;EAYZ,QAAO,MAXgB,KAAK,UAAU,KAAK;GACzC,KAAK,MAAM,KAAK,iBAAiB,YAAY,GAAG;IAAE,GAAG;IAAe;GAAS,CAAC;GAC9E,QAAQ;GACR,SAAS;IACP,eAAe;IACf,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU,IAAI;GACzB,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GAClE,GAAI,SAAS,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EACjE,CAAC,EAAA,CACe,KAAQ;CAC1B;AACF"}
+{"version":3,"file":"raw.js","names":[],"sources":["../../src/backup/raw.ts"],"sourcesContent":["import type { BackupNonIdempotentMutationEndpoint } from '../http/non-idempotent-mutations.ts'\nimport type { RetryOptions } from '../http/retry.ts'\nimport type { HttpTransport } from '../http/transport.ts'\nimport {\n  endpointAllowedSuffixes,\n  nonRetryingMutationRequestOptions,\n  type QueryParams,\n  validatePartnerEndpointUrl,\n  withQueryString,\n} from '../partner/endpoint-url.ts'\nimport { type B2EndpointUrlOptions, b2Url } from '../raw/url.ts'\nimport type {\n  DeleteComputerRequest,\n  DeleteComputerResponse,\n  DeleteComputerResult,\n  ListComputersRequest,\n  ListComputersResponse,\n} from '../types/backup.ts'\n\nconst BACKUP_API: B2EndpointUrlOptions = { prefix: 'api/backup', version: 'v1' }\n\n/**\n * Normalizes the `bz_delete_computer` wire response to the array-shaped schema.\n *\n * The Backblaze apidocs response *schema* declares a JSON array, but the\n * accompanying *example* shows a single bare object. This tolerates both: an\n * array passes through unchanged, and a lone object is wrapped in a\n * single-element array, so callers always receive a {@link DeleteComputerResponse}\n * regardless of which shape live B2 returns.\n *\n * @param raw - The parsed `bz_delete_computer` JSON body.\n *\n * @returns The response as the canonical array shape.\n *\n * @throws TypeError When the body is neither an array nor an object.\n */\nfunction normalizeDeleteComputerResponse(raw: unknown): DeleteComputerResponse {\n  if (Array.isArray(raw)) return raw as DeleteComputerResponse\n  if (raw !== null && typeof raw === 'object') return [raw as DeleteComputerResult]\n  throw new TypeError('bz_delete_computer returned an unexpected response body shape')\n}\n\n/** Configuration for constructing a {@link BackupRawClient}. */\nexport interface BackupRawClientOptions {\n  /**\n   * The HTTP transport used to send requests.\n   *\n   * Computer Backup endpoint calls validate URLs against suffixes recorded by\n   * Partner authorization. A rehydrated client that skips authorization must\n   * use `authorizedBackupEndpointSuffixes` or a transport with a locked\n   * `urlGuard`. Because Partner authorize responses redact\n   * `authorizationToken` under `JSON.stringify`, durable caches should persist\n   * `partnerAuthorizeResponseForPersistence(auth)` only to encrypted or\n   * otherwise credential-grade storage, or use another secure token-preserving\n   * representation.\n   */\n  readonly transport: HttpTransport\n  /**\n   * Validated Computer Backup endpoint host suffixes restored from cached\n   * Partner authorization. Facades normally manage this after authorization;\n   * direct raw clients can pass trusted suffixes derived from\n   * `derivePartnerAllowedSuffixes()`. Do not derive this cache with\n   * `JSON.stringify(authorizePartner())`, which intentionally stores a redacted\n   * token placeholder instead of a usable Partner token. Rehydrating that\n   * placeholder fails fast.\n   */\n  readonly authorizedBackupEndpointSuffixes?: readonly string[]\n}\n\n/** Optional controls for raw Computer Backup API requests. */\nexport interface BackupRawRequestOptions {\n  /** Abort signal for cancelling the request. */\n  readonly signal?: AbortSignal\n  /** Per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n}\n\nfunction backupEndpointAllowedSuffixes(\n  transport: HttpTransport,\n  authorizedSuffixes: readonly string[],\n): readonly string[] {\n  return endpointAllowedSuffixes(transport, authorizedSuffixes, {\n    missingGuard:\n      'Computer Backup endpoint requests require BackupClient.authorize() or a locked URL guard before sending Partner tokens',\n    unlockedGuard:\n      'Computer Backup endpoint requests require a locked URL guard before sending Partner tokens',\n  })\n}\n\nfunction backupEndpointUrl(backupApiUrl: string, endpoint: string): string {\n  return b2Url(backupApiUrl, { ...BACKUP_API, endpoint })\n}\n\n/**\n * Low-level client for Computer Backup API endpoint bindings.\n *\n * Each method maps directly to one `bz_*` HTTP call under the\n * `/api/backup/v1/` route using the `backupApiUrl` returned by Partner\n * authorization.\n *\n * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n */\nexport class BackupRawClient {\n  /** @internal */\n  private readonly transport: HttpTransport\n  private authorizedEndpointSuffixes: readonly string[]\n\n  /**\n   * Creates a new BackupRawClient with the given transport.\n   *\n   * @param options - The constructor configuration.\n   */\n  constructor(options: BackupRawClientOptions) {\n    this.transport = options.transport\n    this.authorizedEndpointSuffixes = Array.from(options.authorizedBackupEndpointSuffixes ?? [])\n  }\n\n  /**\n   * Replaces the validated Computer Backup endpoint host suffixes.\n   *\n   * @param suffixes - Host suffixes derived from Partner authorization.\n   *\n   * @internal\n   */\n  setAuthorizedEndpointSuffixes(suffixes: readonly string[]): void {\n    this.authorizedEndpointSuffixes = Array.from(suffixes)\n  }\n\n  /**\n   * Calls `bz_list_computers`.\n   *\n   * Uses the documented GET form. The wire response is a single JSON object\n   * with a `nextComputerId` cursor and active computer backup records.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.\n   * @param authToken - The Partner authorization token.\n   * @param request - The computer listing query parameters.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The single-object computer backup wire response.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async listComputers(\n    backupApiUrl: string,\n    authToken: string,\n    request: ListComputersRequest,\n    options?: BackupRawRequestOptions,\n  ): Promise<ListComputersResponse> {\n    return this.getJson<ListComputersResponse>(\n      backupApiUrl,\n      authToken,\n      'bz_list_computers',\n      {\n        accountId: request.accountId,\n        ...(request.startComputerId !== undefined\n          ? { startComputerId: request.startComputerId }\n          : {}),\n        ...(request.maxComputerCount !== undefined\n          ? { maxComputerCount: request.maxComputerCount }\n          : {}),\n      },\n      options,\n    )\n  }\n\n  /**\n   * Calls `bz_delete_computer`.\n   *\n   * The documented wire response is a JSON array of deletion records. This\n   * destructive mutation is not automatically retried or reauthorized in place.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL from `authorizePartner`.\n   * @param authToken - The Partner authorization token.\n   * @param request - The computer deletion request body.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The deleted computer backup record array.\n   *\n   * @experimental Computer Backup API surface; shape may change as the Backup API docs evolve.\n   */\n  async deleteComputer(\n    backupApiUrl: string,\n    authToken: string,\n    request: DeleteComputerRequest,\n    options?: BackupRawRequestOptions,\n  ): Promise<DeleteComputerResponse> {\n    const response = await this.postNonRetryingMutationJson<unknown>(\n      backupApiUrl,\n      authToken,\n      'bz_delete_computer',\n      {\n        accountId: request.accountId,\n        computerId: request.computerId,\n      },\n      options,\n    )\n    return normalizeDeleteComputerResponse(response)\n  }\n\n  private safeBackupApiUrl(backupApiUrl: string): string {\n    return validatePartnerEndpointUrl(\n      backupApiUrl,\n      'backupApiUrl',\n      backupEndpointAllowedSuffixes(this.transport, this.authorizedEndpointSuffixes),\n    )\n  }\n\n  /**\n   * Sends a JSON GET request to the specified Computer Backup API endpoint.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL.\n   * @param authToken - The Partner authorization token.\n   * @param endpoint - The Computer Backup API endpoint name.\n   * @param query - The query-string parameters.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The parsed JSON response.\n   */\n  private async getJson<T>(\n    backupApiUrl: string,\n    authToken: string,\n    endpoint: string,\n    query: QueryParams,\n    options?: BackupRawRequestOptions,\n  ): Promise<T> {\n    const response = await this.transport.send({\n      url: withQueryString(backupEndpointUrl(this.safeBackupApiUrl(backupApiUrl), endpoint), query),\n      method: 'GET',\n      headers: {\n        Authorization: authToken,\n      },\n      ...(options?.signal !== undefined ? { signal: options.signal } : {}),\n      ...(options?.retry !== undefined ? { retry: options.retry } : {}),\n    })\n    return response.json<T>()\n  }\n\n  /**\n   * Sends a non-retrying JSON mutation POST request to the specified Computer Backup API endpoint.\n   *\n   * @param backupApiUrl - The Computer Backup API base URL.\n   * @param authToken - The Partner authorization token.\n   * @param endpoint - The Computer Backup API endpoint name.\n   * @param body - The JSON request body.\n   * @param options - Optional abort and per-request retry settings.\n   *\n   * @returns The parsed JSON response.\n   */\n  private async postNonRetryingMutationJson<T>(\n    backupApiUrl: string,\n    authToken: string,\n    endpoint: BackupNonIdempotentMutationEndpoint,\n    body: unknown,\n    options?: BackupRawRequestOptions,\n  ): Promise<T> {\n    const requestOptions = nonRetryingMutationRequestOptions(options)\n    const response = await this.transport.send({\n      url: backupEndpointUrl(this.safeBackupApiUrl(backupApiUrl), endpoint),\n      method: 'POST',\n      headers: {\n        Authorization: authToken,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(body),\n      ...(requestOptions.signal !== undefined ? { signal: requestOptions.signal } : {}),\n      ...(requestOptions.idempotent !== undefined ? { idempotent: requestOptions.idempotent } : {}),\n      ...(requestOptions.retry !== undefined ? { retry: requestOptions.retry } : {}),\n    })\n    return response.json<T>()\n  }\n}\n"],"mappings":";;;AAmBA,IAAM,aAAmC;CAAE,QAAQ;CAAc,SAAS;AAAK;;;;;;;;;;;;;;;;AAiB/E,SAAS,gCAAgC,KAAsC;CAC7E,IAAI,MAAM,QAAQ,GAAG,GAAG,OAAO;CAC/B,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,CAAC,GAA2B;CAChF,MAAM,IAAI,UAAU,+DAA+D;AACrF;AAqCA,SAAS,8BACP,WACA,oBACmB;CACnB,OAAO,wBAAwB,WAAW,oBAAoB;EAC5D,cACE;EACF,eACE;CACJ,CAAC;AACH;AAEA,SAAS,kBAAkB,cAAsB,UAA0B;CACzE,OAAO,MAAM,cAAc;EAAE,GAAG;EAAY;CAAS,CAAC;AACxD;;;;;;;;;;AAWA,IAAa,kBAAb,MAA6B;;CAE3B;CACA;;;;;;CAOA,YAAY,SAAiC;EAC3C,KAAK,YAAY,QAAQ;EACzB,KAAK,6BAA6B,MAAM,KAAK,QAAQ,oCAAoC,CAAC,CAAC;CAC7F;;;;;;;;CASA,8BAA8B,UAAmC;EAC/D,KAAK,6BAA6B,MAAM,KAAK,QAAQ;CACvD;;;;;;;;;;;;;;;;CAiBA,MAAM,cACJ,cACA,WACA,SACA,SACgC;EAChC,OAAO,KAAK,QACV,cACA,WACA,qBACA;GACE,WAAW,QAAQ;GACnB,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,iBAAiB,QAAQ,gBAAgB,IAC3C,CAAC;GACL,GAAI,QAAQ,qBAAqB,KAAA,IAC7B,EAAE,kBAAkB,QAAQ,iBAAiB,IAC7C,CAAC;EACP,GACA,OACF;CACF;;;;;;;;;;;;;;;;CAiBA,MAAM,eACJ,cACA,WACA,SACA,SACiC;EAWjC,OAAO,gCAAgC,MAVhB,KAAK,4BAC1B,cACA,WACA,sBACA;GACE,WAAW,QAAQ;GACnB,YAAY,QAAQ;EACtB,GACA,OACF,CAC+C;CACjD;CAEA,iBAAyB,cAA8B;EACrD,OAAO,2BACL,cACA,gBACA,8BAA8B,KAAK,WAAW,KAAK,0BAA0B,CAC/E;CACF;;;;;;;;;;;;CAaA,MAAc,QACZ,cACA,WACA,UACA,OACA,SACY;EAUZ,QAAO,MATgB,KAAK,UAAU,KAAK;GACzC,KAAK,gBAAgB,kBAAkB,KAAK,iBAAiB,YAAY,GAAG,QAAQ,GAAG,KAAK;GAC5F,QAAQ;GACR,SAAS,EACP,eAAe,UACjB;GACA,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;GAClE,GAAI,SAAS,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EACjE,CAAC,EAAA,CACe,KAAQ;CAC1B;;;;;;;;;;;;CAaA,MAAc,4BACZ,cACA,WACA,UACA,MACA,SACY;EACZ,MAAM,iBAAiB,kCAAkC,OAAO;EAahE,QAAO,MAZgB,KAAK,UAAU,KAAK;GACzC,KAAK,kBAAkB,KAAK,iBAAiB,YAAY,GAAG,QAAQ;GACpE,QAAQ;GACR,SAAS;IACP,eAAe;IACf,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU,IAAI;GACzB,GAAI,eAAe,WAAW,KAAA,IAAY,EAAE,QAAQ,eAAe,OAAO,IAAI,CAAC;GAC/E,GAAI,eAAe,eAAe,KAAA,IAAY,EAAE,YAAY,eAAe,WAAW,IAAI,CAAC;GAC3F,GAAI,eAAe,UAAU,KAAA,IAAY,EAAE,OAAO,eAAe,MAAM,IAAI,CAAC;EAC9E,CAAC,EAAA,CACe,KAAQ;CAC1B;AACF"}

package/dist/bucket-validation.cjs

@@ -0,0 +1,111 @@
+const require_errors_index = require("./errors/index.cjs");
+const require_text_codec = require("./util/text-codec.cjs");
+const require_bucket = require("./types/bucket.cjs");
+//#region src/bucket-validation.ts
+var BUCKET_INFO_KEY_REGEX = new RegExp(require_bucket.BUCKET_INFO_KEY_PATTERN);
+var CORS_RULE_NAME_REGEX = new RegExp(require_bucket.CORS_RULE_NAME_PATTERN);
+var CORS_OPERATION_SET = new Set(require_bucket.CORS_ALLOWED_OPERATIONS);
+/**
+* Validates a bucketInfo record against B2's documented bucket metadata limits.
+*
+* @param bucketInfo - Caller-supplied bucketInfo record.
+*
+* @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+*/
+function assertValidBucketInfo(bucketInfo) {
+	if (!isObjectRecord(bucketInfo)) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", "bucketInfo must be an object", "invalid_bucket_info");
+	let totalValueBytes = 0;
+	for (const [key, value] of Object.entries(bucketInfo)) {
+		const keyBytes = utf8ByteLength(key);
+		if (keyBytes < 1 || keyBytes > 50) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must be 1-50 UTF-8 bytes`, "invalid_bucket_info");
+		if (key.startsWith("b2-")) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must not start with reserved prefix "b2-"`, "invalid_bucket_info");
+		if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must match ${require_bucket.BUCKET_INFO_KEY_PATTERN}`, "invalid_bucket_info");
+		if (typeof value !== "string") throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo value for "${key}" must be a string`, "invalid_bucket_info");
+		totalValueBytes += utf8ByteLength(value);
+		if (totalValueBytes > 1e4) throw new require_errors_index.B2BucketConfigurationError("bucketInfo", `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${require_bucket.BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`, "invalid_bucket_info");
+	}
+}
+/**
+* Validates CORS rules against B2's documented bucket CORS limits.
+*
+* @param corsRules - Caller-supplied CORS rule list.
+*
+* @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+*/
+function assertValidCorsRules(corsRules) {
+	if (!Array.isArray(corsRules)) throw new require_errors_index.B2BucketConfigurationError("corsRules", "corsRules must be an array");
+	if (corsRules.length > 100) throw new require_errors_index.B2BucketConfigurationError("corsRules", `corsRules cannot have more than 100 rules (got ${corsRules.length})`);
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, rule] of corsRules.entries()) {
+		const rulePath = `corsRules[${index}]`;
+		if (!isObjectRecord(rule)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath} must be an object`);
+		const ruleName = readRequiredString(rule, "corsRuleName", `${rulePath}.corsRuleName`);
+		if (ruleName.length < 6 || ruleName.length > 63) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be 6-63 characters`);
+		if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must match ${require_bucket.CORS_RULE_NAME_PATTERN}`);
+		if (ruleName.startsWith("b2-")) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must not start with reserved prefix "b2-"`);
+		if (names.has(ruleName)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be unique within the bucket`);
+		names.add(ruleName);
+		const allowedOrigins = readRequiredStringArray(rule, "allowedOrigins", `${rulePath}.allowedOrigins`);
+		if (allowedOrigins.length === 0) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.allowedOrigins must contain at least one item`);
+		const allowedOperations = readRequiredStringArray(rule, "allowedOperations", `${rulePath}.allowedOperations`);
+		if (allowedOperations.length === 0) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations must contain at least one item`);
+		for (const operation of allowedOperations) if (!CORS_OPERATION_SET.has(operation)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations contains unsupported operation "${operation}"`);
+		const allowedHeaders = readNullableStringArray(rule, "allowedHeaders", `${rulePath}.allowedHeaders`);
+		const exposeHeaders = readNullableStringArray(rule, "exposeHeaders", `${rulePath}.exposeHeaders`);
+		const maxAgeSeconds = rule["maxAgeSeconds"];
+		if (!Number.isSafeInteger(maxAgeSeconds) || maxAgeSeconds < 0) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be a non-negative safe integer`);
+		if (maxAgeSeconds > 86400) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be at most ${require_bucket.CORS_MAX_AGE_SECONDS_MAX}`);
+		const ruleBytes = utf8ByteLength(ruleName) + sumStringBytes(allowedOrigins) + sumStringBytes(allowedOperations) + sumStringBytes(allowedHeaders ?? []) + sumStringBytes(exposeHeaders ?? []);
+		if (ruleBytes >= 1e3) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${require_bucket.CORS_RULE_MAX_BYTES} bytes`);
+	}
+}
+/**
+* Validates the bucket configuration fields common to create and update calls.
+*
+* @param request - Bucket create/update request.
+*
+* @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+* CORS field violates B2 limits.
+*/
+function assertValidBucketConfiguration(request) {
+	if (request.bucketInfo !== void 0) assertValidBucketInfo(request.bucketInfo);
+	if (request.corsRules !== void 0) assertValidCorsRules(request.corsRules);
+}
+function isObjectRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function matchesEntirePattern(regex, value) {
+	return regex.exec(value)?.[0] === value;
+}
+function readRequiredString(record, key, path) {
+	const value = record[key];
+	if (typeof value !== "string") throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path} must be a string`);
+	return value;
+}
+function readRequiredStringArray(record, key, path) {
+	const value = record[key];
+	if (!Array.isArray(value)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path} must be an array`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function readNullableStringArray(record, key, path) {
+	const value = record[key];
+	if (value === null || value === void 0) return null;
+	if (!Array.isArray(value)) throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path} must be an array, null, or omitted`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new require_errors_index.B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function sumStringBytes(values) {
+	let total = 0;
+	for (const value of values) total += utf8ByteLength(value);
+	return total;
+}
+function utf8ByteLength(value) {
+	return require_text_codec.utf8Encoder.encode(value).byteLength;
+}
+//#endregion
+exports.assertValidBucketConfiguration = assertValidBucketConfiguration;
+exports.assertValidBucketInfo = assertValidBucketInfo;
+exports.assertValidCorsRules = assertValidCorsRules;
+
+//# sourceMappingURL=bucket-validation.cjs.map

package/dist/bucket-validation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.cjs","names":[],"sources":["../src/bucket-validation.ts"],"sourcesContent":["import { B2BucketConfigurationError } from './errors/index.ts'\nimport {\n  BUCKET_INFO_KEY_MAX_BYTES,\n  BUCKET_INFO_KEY_MIN_BYTES,\n  BUCKET_INFO_KEY_PATTERN,\n  BUCKET_INFO_RESERVED_PREFIX,\n  BUCKET_INFO_VALUES_MAX_BYTES,\n  CORS_ALLOWED_OPERATIONS,\n  CORS_MAX_AGE_SECONDS_MAX,\n  CORS_RULE_MAX_BYTES,\n  CORS_RULE_NAME_MAX_LENGTH,\n  CORS_RULE_NAME_MIN_LENGTH,\n  CORS_RULE_NAME_PATTERN,\n  CORS_RULE_NAME_RESERVED_PREFIX,\n  CORS_RULES_MAX_COUNT,\n  type CorsRule,\n  type CreateBucketRequest,\n  type UpdateBucketRequest,\n} from './types/bucket.ts'\nimport { utf8Encoder } from './util/text-codec.ts'\n\nconst BUCKET_INFO_KEY_REGEX = new RegExp(BUCKET_INFO_KEY_PATTERN)\nconst CORS_RULE_NAME_REGEX = new RegExp(CORS_RULE_NAME_PATTERN)\nconst CORS_OPERATION_SET = new Set<string>(CORS_ALLOWED_OPERATIONS)\n\n/**\n * Validates a bucketInfo record against B2's documented bucket metadata limits.\n *\n * @param bucketInfo - Caller-supplied bucketInfo record.\n *\n * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.\n */\nexport function assertValidBucketInfo(bucketInfo: Record<string, string>): void {\n  if (!isObjectRecord(bucketInfo)) {\n    throw new B2BucketConfigurationError(\n      'bucketInfo',\n      'bucketInfo must be an object',\n      'invalid_bucket_info',\n    )\n  }\n\n  let totalValueBytes = 0\n  for (const [key, value] of Object.entries(bucketInfo)) {\n    const keyBytes = utf8ByteLength(key)\n    if (keyBytes < BUCKET_INFO_KEY_MIN_BYTES || keyBytes > BUCKET_INFO_KEY_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must be ${BUCKET_INFO_KEY_MIN_BYTES}-${BUCKET_INFO_KEY_MAX_BYTES} UTF-8 bytes`,\n        'invalid_bucket_info',\n      )\n    }\n    if (key.startsWith(BUCKET_INFO_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must not start with reserved prefix \"${BUCKET_INFO_RESERVED_PREFIX}\"`,\n        'invalid_bucket_info',\n      )\n    }\n    if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must match ${BUCKET_INFO_KEY_PATTERN}`,\n        'invalid_bucket_info',\n      )\n    }\n    if (typeof value !== 'string') {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo value for \"${key}\" must be a string`,\n        'invalid_bucket_info',\n      )\n    }\n\n    totalValueBytes += utf8ByteLength(value)\n    if (totalValueBytes > BUCKET_INFO_VALUES_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`,\n        'invalid_bucket_info',\n      )\n    }\n  }\n}\n\n/**\n * Validates CORS rules against B2's documented bucket CORS limits.\n *\n * @param corsRules - Caller-supplied CORS rule list.\n *\n * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.\n */\nexport function assertValidCorsRules(corsRules: readonly CorsRule[]): void {\n  if (!Array.isArray(corsRules)) {\n    throw new B2BucketConfigurationError('corsRules', 'corsRules must be an array')\n  }\n  if (corsRules.length > CORS_RULES_MAX_COUNT) {\n    throw new B2BucketConfigurationError(\n      'corsRules',\n      `corsRules cannot have more than ${CORS_RULES_MAX_COUNT} rules (got ${corsRules.length})`,\n    )\n  }\n\n  const names = new Set<string>()\n  for (const [index, rule] of corsRules.entries()) {\n    const rulePath = `corsRules[${index}]`\n    if (!isObjectRecord(rule)) {\n      throw new B2BucketConfigurationError('corsRules', `${rulePath} must be an object`)\n    }\n\n    const ruleName = readRequiredString(rule, 'corsRuleName', `${rulePath}.corsRuleName`)\n    if (\n      ruleName.length < CORS_RULE_NAME_MIN_LENGTH ||\n      ruleName.length > CORS_RULE_NAME_MAX_LENGTH\n    ) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be ${CORS_RULE_NAME_MIN_LENGTH}-${CORS_RULE_NAME_MAX_LENGTH} characters`,\n      )\n    }\n    if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must match ${CORS_RULE_NAME_PATTERN}`,\n      )\n    }\n    if (ruleName.startsWith(CORS_RULE_NAME_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must not start with reserved prefix \"${CORS_RULE_NAME_RESERVED_PREFIX}\"`,\n      )\n    }\n    if (names.has(ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be unique within the bucket`,\n      )\n    }\n    names.add(ruleName)\n\n    const allowedOrigins = readRequiredStringArray(\n      rule,\n      'allowedOrigins',\n      `${rulePath}.allowedOrigins`,\n    )\n    if (allowedOrigins.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOrigins must contain at least one item`,\n      )\n    }\n\n    const allowedOperations = readRequiredStringArray(\n      rule,\n      'allowedOperations',\n      `${rulePath}.allowedOperations`,\n    )\n    if (allowedOperations.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOperations must contain at least one item`,\n      )\n    }\n    for (const operation of allowedOperations) {\n      if (!CORS_OPERATION_SET.has(operation)) {\n        throw new B2BucketConfigurationError(\n          'corsRules',\n          `${rulePath}.allowedOperations contains unsupported operation \"${operation}\"`,\n        )\n      }\n    }\n\n    const allowedHeaders = readNullableStringArray(\n      rule,\n      'allowedHeaders',\n      `${rulePath}.allowedHeaders`,\n    )\n    const exposeHeaders = readNullableStringArray(\n      rule,\n      'exposeHeaders',\n      `${rulePath}.exposeHeaders`,\n    )\n    const maxAgeSeconds = (rule as Record<string, unknown>)['maxAgeSeconds']\n    if (!Number.isSafeInteger(maxAgeSeconds) || (maxAgeSeconds as number) < 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be a non-negative safe integer`,\n      )\n    }\n    if ((maxAgeSeconds as number) > CORS_MAX_AGE_SECONDS_MAX) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be at most ${CORS_MAX_AGE_SECONDS_MAX}`,\n      )\n    }\n\n    const ruleBytes =\n      utf8ByteLength(ruleName) +\n      sumStringBytes(allowedOrigins) +\n      sumStringBytes(allowedOperations) +\n      sumStringBytes(allowedHeaders ?? []) +\n      sumStringBytes(exposeHeaders ?? [])\n    if (ruleBytes >= CORS_RULE_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${CORS_RULE_MAX_BYTES} bytes`,\n      )\n    }\n  }\n}\n\n/**\n * Validates the bucket configuration fields common to create and update calls.\n *\n * @param request - Bucket create/update request.\n *\n * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or\n * CORS field violates B2 limits.\n */\nexport function assertValidBucketConfiguration(\n  request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>,\n): void {\n  if (request.bucketInfo !== undefined) assertValidBucketInfo(request.bucketInfo)\n  if (request.corsRules !== undefined) assertValidCorsRules(request.corsRules)\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction matchesEntirePattern(regex: RegExp, value: string): boolean {\n  return regex.exec(value)?.[0] === value\n}\n\nfunction readRequiredString(record: Record<string, unknown>, key: string, path: string): string {\n  const value = record[key]\n  if (typeof value !== 'string') {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be a string`)\n  }\n  return value\n}\n\nfunction readRequiredStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] {\n  const value = record[key]\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction readNullableStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] | null {\n  const value = record[key]\n  if (value === null || value === undefined) return null\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array, null, or omitted`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction sumStringBytes(values: readonly string[]): number {\n  let total = 0\n  for (const value of values) total += utf8ByteLength(value)\n  return total\n}\n\nfunction utf8ByteLength(value: string): number {\n  return utf8Encoder.encode(value).byteLength\n}\n"],"mappings":";;;;AAqBA,IAAM,wBAAwB,IAAI,OAAO,eAAA,uBAAuB;AAChE,IAAM,uBAAuB,IAAI,OAAO,eAAA,sBAAsB;AAC9D,IAAM,qBAAqB,IAAI,IAAY,eAAA,uBAAuB;;;;;;;;AASlE,SAAgB,sBAAsB,YAA0C;CAC9E,IAAI,CAAC,eAAe,UAAU,GAC5B,MAAM,IAAI,qBAAA,2BACR,cACA,gCACA,qBACF;CAGF,IAAI,kBAAkB;CACtB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,WAAW,eAAe,GAAG;EACnC,IAAI,WAAA,KAAwC,WAAA,IAC1C,MAAM,IAAI,qBAAA,2BACR,cACA,mBAAmB,IAAI,6BACvB,qBACF;EAEF,IAAI,IAAI,WAAA,KAAsC,GAC5C,MAAM,IAAI,qBAAA,2BACR,cACA,mBAAmB,IAAI,8CACvB,qBACF;EAEF,IAAI,CAAC,qBAAqB,uBAAuB,GAAG,GAClD,MAAM,IAAI,qBAAA,2BACR,cACA,mBAAmB,IAAI,eAAe,eAAA,2BACtC,qBACF;EAEF,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,qBAAA,2BACR,cACA,yBAAyB,IAAI,qBAC7B,qBACF;EAGF,mBAAmB,eAAe,KAAK;EACvC,IAAI,kBAAA,KACF,MAAM,IAAI,qBAAA,2BACR,cACA,2BAA2B,gBAAgB,2BAA2B,eAAA,6BAA6B,cACnG,qBACF;CAEJ;AACF;;;;;;;;AASA,SAAgB,qBAAqB,WAAsC;CACzE,IAAI,CAAC,MAAM,QAAQ,SAAS,GAC1B,MAAM,IAAI,qBAAA,2BAA2B,aAAa,4BAA4B;CAEhF,IAAI,UAAU,SAAA,KACZ,MAAM,IAAI,qBAAA,2BACR,aACA,kDAAsE,UAAU,OAAO,EACzF;CAGF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,SAAS,UAAU,QAAQ,GAAG;EAC/C,MAAM,WAAW,aAAa,MAAM;EACpC,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,SAAS,mBAAmB;EAGnF,MAAM,WAAW,mBAAmB,MAAM,gBAAgB,GAAG,SAAS,cAAc;EACpF,IACE,SAAS,SAAA,KACT,SAAS,SAAA,IAET,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,sCACd;EAEF,IAAI,CAAC,qBAAqB,sBAAsB,QAAQ,GACtD,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,2BAA2B,eAAA,wBACzC;EAEF,IAAI,SAAS,WAAA,KAAyC,GACpD,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,wDACd;EAEF,IAAI,MAAM,IAAI,QAAQ,GACpB,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,+CACd;EAEF,MAAM,IAAI,QAAQ;EAElB,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,IAAI,eAAe,WAAW,GAC5B,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,+CACd;EAGF,MAAM,oBAAoB,wBACxB,MACA,qBACA,GAAG,SAAS,mBACd;EACA,IAAI,kBAAkB,WAAW,GAC/B,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,kDACd;EAEF,KAAK,MAAM,aAAa,mBACtB,IAAI,CAAC,mBAAmB,IAAI,SAAS,GACnC,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,qDAAqD,UAAU,EAC7E;EAIJ,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,MAAM,gBAAgB,wBACpB,MACA,iBACA,GAAG,SAAS,eACd;EACA,MAAM,gBAAiB,KAAiC;EACxD,IAAI,CAAC,OAAO,cAAc,aAAa,KAAM,gBAA2B,GACtE,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,mDACd;EAEF,IAAK,gBAAA,OACH,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,iCAAiC,eAAA,0BAC/C;EAGF,MAAM,YACJ,eAAe,QAAQ,IACvB,eAAe,cAAc,IAC7B,eAAe,iBAAiB,IAChC,eAAe,kBAAkB,CAAC,CAAC,IACnC,eAAe,iBAAiB,CAAC,CAAC;EACpC,IAAI,aAAA,KACF,MAAM,IAAI,qBAAA,2BACR,aACA,GAAG,SAAS,QAAQ,UAAU,iCAAiC,eAAA,oBAAoB,OACrF;CAEJ;AACF;;;;;;;;;AAUA,SAAgB,+BACd,SACM;CACN,IAAI,QAAQ,eAAe,KAAA,GAAW,sBAAsB,QAAQ,UAAU;CAC9E,IAAI,QAAQ,cAAc,KAAA,GAAW,qBAAqB,QAAQ,SAAS;AAC7E;AAEA,SAAS,eAAe,OAAkD;CACxE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,qBAAqB,OAAe,OAAwB;CACnE,OAAO,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO;AACpC;AAEA,SAAS,mBAAmB,QAAiC,KAAa,MAAsB;CAC9F,MAAM,QAAQ,OAAO;CACrB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MACmB;CACnB,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MAC0B;CAC1B,MAAM,QAAQ,OAAO;CACrB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,oCAAoC;CAEhG,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,qBAAA,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,eAAe,QAAmC;CACzD,IAAI,QAAQ;CACZ,KAAK,MAAM,SAAS,QAAQ,SAAS,eAAe,KAAK;CACzD,OAAO;AACT;AAEA,SAAS,eAAe,OAAuB;CAC7C,OAAO,mBAAA,YAAY,OAAO,KAAK,CAAC,CAAC;AACnC"}

package/dist/bucket-validation.d.cts

@@ -0,0 +1,27 @@
+import { CorsRule, CreateBucketRequest, UpdateBucketRequest } from './types/bucket.js';
+/**
+ * Validates a bucketInfo record against B2's documented bucket metadata limits.
+ *
+ * @param bucketInfo - Caller-supplied bucketInfo record.
+ *
+ * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+ */
+export declare function assertValidBucketInfo(bucketInfo: Record<string, string>): void;
+/**
+ * Validates CORS rules against B2's documented bucket CORS limits.
+ *
+ * @param corsRules - Caller-supplied CORS rule list.
+ *
+ * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+ */
+export declare function assertValidCorsRules(corsRules: readonly CorsRule[]): void;
+/**
+ * Validates the bucket configuration fields common to create and update calls.
+ *
+ * @param request - Bucket create/update request.
+ *
+ * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+ * CORS field violates B2 limits.
+ */
+export declare function assertValidBucketConfiguration(request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>): void;
+//# sourceMappingURL=bucket-validation.d.ts.map

package/dist/bucket-validation.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.d.ts","sourceRoot":"","sources":["../src/bucket-validation.js"],"names":[],"mappings":"AACA,OAAO,EAcL,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAA;AAO1B;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAkD9E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,GAAG,IAAI,CAqHzE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,EAAE,YAAY,GAAG,WAAW,CAAC,GACnF,IAAI,CAGN"}

package/dist/bucket-validation.d.ts

@@ -0,0 +1,27 @@
+import { CorsRule, CreateBucketRequest, UpdateBucketRequest } from './types/bucket.js';
+/**
+ * Validates a bucketInfo record against B2's documented bucket metadata limits.
+ *
+ * @param bucketInfo - Caller-supplied bucketInfo record.
+ *
+ * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+ */
+export declare function assertValidBucketInfo(bucketInfo: Record<string, string>): void;
+/**
+ * Validates CORS rules against B2's documented bucket CORS limits.
+ *
+ * @param corsRules - Caller-supplied CORS rule list.
+ *
+ * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+ */
+export declare function assertValidCorsRules(corsRules: readonly CorsRule[]): void;
+/**
+ * Validates the bucket configuration fields common to create and update calls.
+ *
+ * @param request - Bucket create/update request.
+ *
+ * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+ * CORS field violates B2 limits.
+ */
+export declare function assertValidBucketConfiguration(request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>): void;
+//# sourceMappingURL=bucket-validation.d.ts.map

package/dist/bucket-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.d.ts","sourceRoot":"","sources":["../src/bucket-validation.js"],"names":[],"mappings":"AACA,OAAO,EAcL,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAA;AAO1B;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAkD9E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,GAAG,IAAI,CAqHzE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,EAAE,YAAY,GAAG,WAAW,CAAC,GACnF,IAAI,CAGN"}

package/dist/bucket-validation.js

@@ -0,0 +1,109 @@
+import { B2BucketConfigurationError } from "./errors/index.js";
+import { utf8Encoder } from "./util/text-codec.js";
+import { BUCKET_INFO_KEY_PATTERN, BUCKET_INFO_VALUES_MAX_BYTES, CORS_ALLOWED_OPERATIONS, CORS_MAX_AGE_SECONDS_MAX, CORS_RULE_MAX_BYTES, CORS_RULE_NAME_PATTERN } from "./types/bucket.js";
+//#region src/bucket-validation.ts
+var BUCKET_INFO_KEY_REGEX = new RegExp(BUCKET_INFO_KEY_PATTERN);
+var CORS_RULE_NAME_REGEX = new RegExp(CORS_RULE_NAME_PATTERN);
+var CORS_OPERATION_SET = new Set(CORS_ALLOWED_OPERATIONS);
+/**
+* Validates a bucketInfo record against B2's documented bucket metadata limits.
+*
+* @param bucketInfo - Caller-supplied bucketInfo record.
+*
+* @throws {@link B2BucketConfigurationError} When the record violates B2 limits.
+*/
+function assertValidBucketInfo(bucketInfo) {
+	if (!isObjectRecord(bucketInfo)) throw new B2BucketConfigurationError("bucketInfo", "bucketInfo must be an object", "invalid_bucket_info");
+	let totalValueBytes = 0;
+	for (const [key, value] of Object.entries(bucketInfo)) {
+		const keyBytes = utf8ByteLength(key);
+		if (keyBytes < 1 || keyBytes > 50) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must be 1-50 UTF-8 bytes`, "invalid_bucket_info");
+		if (key.startsWith("b2-")) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must not start with reserved prefix "b2-"`, "invalid_bucket_info");
+		if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo key "${key}" must match ${BUCKET_INFO_KEY_PATTERN}`, "invalid_bucket_info");
+		if (typeof value !== "string") throw new B2BucketConfigurationError("bucketInfo", `bucketInfo value for "${key}" must be a string`, "invalid_bucket_info");
+		totalValueBytes += utf8ByteLength(value);
+		if (totalValueBytes > 1e4) throw new B2BucketConfigurationError("bucketInfo", `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`, "invalid_bucket_info");
+	}
+}
+/**
+* Validates CORS rules against B2's documented bucket CORS limits.
+*
+* @param corsRules - Caller-supplied CORS rule list.
+*
+* @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.
+*/
+function assertValidCorsRules(corsRules) {
+	if (!Array.isArray(corsRules)) throw new B2BucketConfigurationError("corsRules", "corsRules must be an array");
+	if (corsRules.length > 100) throw new B2BucketConfigurationError("corsRules", `corsRules cannot have more than 100 rules (got ${corsRules.length})`);
+	const names = /* @__PURE__ */ new Set();
+	for (const [index, rule] of corsRules.entries()) {
+		const rulePath = `corsRules[${index}]`;
+		if (!isObjectRecord(rule)) throw new B2BucketConfigurationError("corsRules", `${rulePath} must be an object`);
+		const ruleName = readRequiredString(rule, "corsRuleName", `${rulePath}.corsRuleName`);
+		if (ruleName.length < 6 || ruleName.length > 63) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be 6-63 characters`);
+		if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must match ${CORS_RULE_NAME_PATTERN}`);
+		if (ruleName.startsWith("b2-")) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must not start with reserved prefix "b2-"`);
+		if (names.has(ruleName)) throw new B2BucketConfigurationError("corsRules", `${rulePath}.corsRuleName must be unique within the bucket`);
+		names.add(ruleName);
+		const allowedOrigins = readRequiredStringArray(rule, "allowedOrigins", `${rulePath}.allowedOrigins`);
+		if (allowedOrigins.length === 0) throw new B2BucketConfigurationError("corsRules", `${rulePath}.allowedOrigins must contain at least one item`);
+		const allowedOperations = readRequiredStringArray(rule, "allowedOperations", `${rulePath}.allowedOperations`);
+		if (allowedOperations.length === 0) throw new B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations must contain at least one item`);
+		for (const operation of allowedOperations) if (!CORS_OPERATION_SET.has(operation)) throw new B2BucketConfigurationError("corsRules", `${rulePath}.allowedOperations contains unsupported operation "${operation}"`);
+		const allowedHeaders = readNullableStringArray(rule, "allowedHeaders", `${rulePath}.allowedHeaders`);
+		const exposeHeaders = readNullableStringArray(rule, "exposeHeaders", `${rulePath}.exposeHeaders`);
+		const maxAgeSeconds = rule["maxAgeSeconds"];
+		if (!Number.isSafeInteger(maxAgeSeconds) || maxAgeSeconds < 0) throw new B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be a non-negative safe integer`);
+		if (maxAgeSeconds > 86400) throw new B2BucketConfigurationError("corsRules", `${rulePath}.maxAgeSeconds must be at most ${CORS_MAX_AGE_SECONDS_MAX}`);
+		const ruleBytes = utf8ByteLength(ruleName) + sumStringBytes(allowedOrigins) + sumStringBytes(allowedOperations) + sumStringBytes(allowedHeaders ?? []) + sumStringBytes(exposeHeaders ?? []);
+		if (ruleBytes >= 1e3) throw new B2BucketConfigurationError("corsRules", `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${CORS_RULE_MAX_BYTES} bytes`);
+	}
+}
+/**
+* Validates the bucket configuration fields common to create and update calls.
+*
+* @param request - Bucket create/update request.
+*
+* @throws {@link B2BucketConfigurationError} When any provided bucketInfo or
+* CORS field violates B2 limits.
+*/
+function assertValidBucketConfiguration(request) {
+	if (request.bucketInfo !== void 0) assertValidBucketInfo(request.bucketInfo);
+	if (request.corsRules !== void 0) assertValidCorsRules(request.corsRules);
+}
+function isObjectRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function matchesEntirePattern(regex, value) {
+	return regex.exec(value)?.[0] === value;
+}
+function readRequiredString(record, key, path) {
+	const value = record[key];
+	if (typeof value !== "string") throw new B2BucketConfigurationError("corsRules", `${path} must be a string`);
+	return value;
+}
+function readRequiredStringArray(record, key, path) {
+	const value = record[key];
+	if (!Array.isArray(value)) throw new B2BucketConfigurationError("corsRules", `${path} must be an array`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function readNullableStringArray(record, key, path) {
+	const value = record[key];
+	if (value === null || value === void 0) return null;
+	if (!Array.isArray(value)) throw new B2BucketConfigurationError("corsRules", `${path} must be an array, null, or omitted`);
+	for (const [index, item] of value.entries()) if (typeof item !== "string") throw new B2BucketConfigurationError("corsRules", `${path}[${index}] must be a string`);
+	return value;
+}
+function sumStringBytes(values) {
+	let total = 0;
+	for (const value of values) total += utf8ByteLength(value);
+	return total;
+}
+function utf8ByteLength(value) {
+	return utf8Encoder.encode(value).byteLength;
+}
+//#endregion
+export { assertValidBucketConfiguration, assertValidBucketInfo, assertValidCorsRules };
+
+//# sourceMappingURL=bucket-validation.js.map

package/dist/bucket-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-validation.js","names":[],"sources":["../src/bucket-validation.ts"],"sourcesContent":["import { B2BucketConfigurationError } from './errors/index.ts'\nimport {\n  BUCKET_INFO_KEY_MAX_BYTES,\n  BUCKET_INFO_KEY_MIN_BYTES,\n  BUCKET_INFO_KEY_PATTERN,\n  BUCKET_INFO_RESERVED_PREFIX,\n  BUCKET_INFO_VALUES_MAX_BYTES,\n  CORS_ALLOWED_OPERATIONS,\n  CORS_MAX_AGE_SECONDS_MAX,\n  CORS_RULE_MAX_BYTES,\n  CORS_RULE_NAME_MAX_LENGTH,\n  CORS_RULE_NAME_MIN_LENGTH,\n  CORS_RULE_NAME_PATTERN,\n  CORS_RULE_NAME_RESERVED_PREFIX,\n  CORS_RULES_MAX_COUNT,\n  type CorsRule,\n  type CreateBucketRequest,\n  type UpdateBucketRequest,\n} from './types/bucket.ts'\nimport { utf8Encoder } from './util/text-codec.ts'\n\nconst BUCKET_INFO_KEY_REGEX = new RegExp(BUCKET_INFO_KEY_PATTERN)\nconst CORS_RULE_NAME_REGEX = new RegExp(CORS_RULE_NAME_PATTERN)\nconst CORS_OPERATION_SET = new Set<string>(CORS_ALLOWED_OPERATIONS)\n\n/**\n * Validates a bucketInfo record against B2's documented bucket metadata limits.\n *\n * @param bucketInfo - Caller-supplied bucketInfo record.\n *\n * @throws {@link B2BucketConfigurationError} When the record violates B2 limits.\n */\nexport function assertValidBucketInfo(bucketInfo: Record<string, string>): void {\n  if (!isObjectRecord(bucketInfo)) {\n    throw new B2BucketConfigurationError(\n      'bucketInfo',\n      'bucketInfo must be an object',\n      'invalid_bucket_info',\n    )\n  }\n\n  let totalValueBytes = 0\n  for (const [key, value] of Object.entries(bucketInfo)) {\n    const keyBytes = utf8ByteLength(key)\n    if (keyBytes < BUCKET_INFO_KEY_MIN_BYTES || keyBytes > BUCKET_INFO_KEY_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must be ${BUCKET_INFO_KEY_MIN_BYTES}-${BUCKET_INFO_KEY_MAX_BYTES} UTF-8 bytes`,\n        'invalid_bucket_info',\n      )\n    }\n    if (key.startsWith(BUCKET_INFO_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must not start with reserved prefix \"${BUCKET_INFO_RESERVED_PREFIX}\"`,\n        'invalid_bucket_info',\n      )\n    }\n    if (!matchesEntirePattern(BUCKET_INFO_KEY_REGEX, key)) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo key \"${key}\" must match ${BUCKET_INFO_KEY_PATTERN}`,\n        'invalid_bucket_info',\n      )\n    }\n    if (typeof value !== 'string') {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo value for \"${key}\" must be a string`,\n        'invalid_bucket_info',\n      )\n    }\n\n    totalValueBytes += utf8ByteLength(value)\n    if (totalValueBytes > BUCKET_INFO_VALUES_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'bucketInfo',\n        `bucketInfo values total ${totalValueBytes} UTF-8 bytes exceeds the ${BUCKET_INFO_VALUES_MAX_BYTES}-byte limit`,\n        'invalid_bucket_info',\n      )\n    }\n  }\n}\n\n/**\n * Validates CORS rules against B2's documented bucket CORS limits.\n *\n * @param corsRules - Caller-supplied CORS rule list.\n *\n * @throws {@link B2BucketConfigurationError} When any rule violates B2 limits.\n */\nexport function assertValidCorsRules(corsRules: readonly CorsRule[]): void {\n  if (!Array.isArray(corsRules)) {\n    throw new B2BucketConfigurationError('corsRules', 'corsRules must be an array')\n  }\n  if (corsRules.length > CORS_RULES_MAX_COUNT) {\n    throw new B2BucketConfigurationError(\n      'corsRules',\n      `corsRules cannot have more than ${CORS_RULES_MAX_COUNT} rules (got ${corsRules.length})`,\n    )\n  }\n\n  const names = new Set<string>()\n  for (const [index, rule] of corsRules.entries()) {\n    const rulePath = `corsRules[${index}]`\n    if (!isObjectRecord(rule)) {\n      throw new B2BucketConfigurationError('corsRules', `${rulePath} must be an object`)\n    }\n\n    const ruleName = readRequiredString(rule, 'corsRuleName', `${rulePath}.corsRuleName`)\n    if (\n      ruleName.length < CORS_RULE_NAME_MIN_LENGTH ||\n      ruleName.length > CORS_RULE_NAME_MAX_LENGTH\n    ) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be ${CORS_RULE_NAME_MIN_LENGTH}-${CORS_RULE_NAME_MAX_LENGTH} characters`,\n      )\n    }\n    if (!matchesEntirePattern(CORS_RULE_NAME_REGEX, ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must match ${CORS_RULE_NAME_PATTERN}`,\n      )\n    }\n    if (ruleName.startsWith(CORS_RULE_NAME_RESERVED_PREFIX)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must not start with reserved prefix \"${CORS_RULE_NAME_RESERVED_PREFIX}\"`,\n      )\n    }\n    if (names.has(ruleName)) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.corsRuleName must be unique within the bucket`,\n      )\n    }\n    names.add(ruleName)\n\n    const allowedOrigins = readRequiredStringArray(\n      rule,\n      'allowedOrigins',\n      `${rulePath}.allowedOrigins`,\n    )\n    if (allowedOrigins.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOrigins must contain at least one item`,\n      )\n    }\n\n    const allowedOperations = readRequiredStringArray(\n      rule,\n      'allowedOperations',\n      `${rulePath}.allowedOperations`,\n    )\n    if (allowedOperations.length === 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.allowedOperations must contain at least one item`,\n      )\n    }\n    for (const operation of allowedOperations) {\n      if (!CORS_OPERATION_SET.has(operation)) {\n        throw new B2BucketConfigurationError(\n          'corsRules',\n          `${rulePath}.allowedOperations contains unsupported operation \"${operation}\"`,\n        )\n      }\n    }\n\n    const allowedHeaders = readNullableStringArray(\n      rule,\n      'allowedHeaders',\n      `${rulePath}.allowedHeaders`,\n    )\n    const exposeHeaders = readNullableStringArray(\n      rule,\n      'exposeHeaders',\n      `${rulePath}.exposeHeaders`,\n    )\n    const maxAgeSeconds = (rule as Record<string, unknown>)['maxAgeSeconds']\n    if (!Number.isSafeInteger(maxAgeSeconds) || (maxAgeSeconds as number) < 0) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be a non-negative safe integer`,\n      )\n    }\n    if ((maxAgeSeconds as number) > CORS_MAX_AGE_SECONDS_MAX) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath}.maxAgeSeconds must be at most ${CORS_MAX_AGE_SECONDS_MAX}`,\n      )\n    }\n\n    const ruleBytes =\n      utf8ByteLength(ruleName) +\n      sumStringBytes(allowedOrigins) +\n      sumStringBytes(allowedOperations) +\n      sumStringBytes(allowedHeaders ?? []) +\n      sumStringBytes(exposeHeaders ?? [])\n    if (ruleBytes >= CORS_RULE_MAX_BYTES) {\n      throw new B2BucketConfigurationError(\n        'corsRules',\n        `${rulePath} size ${ruleBytes} UTF-8 bytes must be less than ${CORS_RULE_MAX_BYTES} bytes`,\n      )\n    }\n  }\n}\n\n/**\n * Validates the bucket configuration fields common to create and update calls.\n *\n * @param request - Bucket create/update request.\n *\n * @throws {@link B2BucketConfigurationError} When any provided bucketInfo or\n * CORS field violates B2 limits.\n */\nexport function assertValidBucketConfiguration(\n  request: Pick<CreateBucketRequest | UpdateBucketRequest, 'bucketInfo' | 'corsRules'>,\n): void {\n  if (request.bucketInfo !== undefined) assertValidBucketInfo(request.bucketInfo)\n  if (request.corsRules !== undefined) assertValidCorsRules(request.corsRules)\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction matchesEntirePattern(regex: RegExp, value: string): boolean {\n  return regex.exec(value)?.[0] === value\n}\n\nfunction readRequiredString(record: Record<string, unknown>, key: string, path: string): string {\n  const value = record[key]\n  if (typeof value !== 'string') {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be a string`)\n  }\n  return value\n}\n\nfunction readRequiredStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] {\n  const value = record[key]\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction readNullableStringArray(\n  record: Record<string, unknown>,\n  key: string,\n  path: string,\n): readonly string[] | null {\n  const value = record[key]\n  if (value === null || value === undefined) return null\n  if (!Array.isArray(value)) {\n    throw new B2BucketConfigurationError('corsRules', `${path} must be an array, null, or omitted`)\n  }\n  for (const [index, item] of value.entries()) {\n    if (typeof item !== 'string') {\n      throw new B2BucketConfigurationError('corsRules', `${path}[${index}] must be a string`)\n    }\n  }\n  return value\n}\n\nfunction sumStringBytes(values: readonly string[]): number {\n  let total = 0\n  for (const value of values) total += utf8ByteLength(value)\n  return total\n}\n\nfunction utf8ByteLength(value: string): number {\n  return utf8Encoder.encode(value).byteLength\n}\n"],"mappings":";;;;AAqBA,IAAM,wBAAwB,IAAI,OAAO,uBAAuB;AAChE,IAAM,uBAAuB,IAAI,OAAO,sBAAsB;AAC9D,IAAM,qBAAqB,IAAI,IAAY,uBAAuB;;;;;;;;AASlE,SAAgB,sBAAsB,YAA0C;CAC9E,IAAI,CAAC,eAAe,UAAU,GAC5B,MAAM,IAAI,2BACR,cACA,gCACA,qBACF;CAGF,IAAI,kBAAkB;CACtB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,WAAW,eAAe,GAAG;EACnC,IAAI,WAAA,KAAwC,WAAA,IAC1C,MAAM,IAAI,2BACR,cACA,mBAAmB,IAAI,6BACvB,qBACF;EAEF,IAAI,IAAI,WAAA,KAAsC,GAC5C,MAAM,IAAI,2BACR,cACA,mBAAmB,IAAI,8CACvB,qBACF;EAEF,IAAI,CAAC,qBAAqB,uBAAuB,GAAG,GAClD,MAAM,IAAI,2BACR,cACA,mBAAmB,IAAI,eAAe,2BACtC,qBACF;EAEF,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,2BACR,cACA,yBAAyB,IAAI,qBAC7B,qBACF;EAGF,mBAAmB,eAAe,KAAK;EACvC,IAAI,kBAAA,KACF,MAAM,IAAI,2BACR,cACA,2BAA2B,gBAAgB,2BAA2B,6BAA6B,cACnG,qBACF;CAEJ;AACF;;;;;;;;AASA,SAAgB,qBAAqB,WAAsC;CACzE,IAAI,CAAC,MAAM,QAAQ,SAAS,GAC1B,MAAM,IAAI,2BAA2B,aAAa,4BAA4B;CAEhF,IAAI,UAAU,SAAA,KACZ,MAAM,IAAI,2BACR,aACA,kDAAsE,UAAU,OAAO,EACzF;CAGF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,OAAO,SAAS,UAAU,QAAQ,GAAG;EAC/C,MAAM,WAAW,aAAa,MAAM;EACpC,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,2BAA2B,aAAa,GAAG,SAAS,mBAAmB;EAGnF,MAAM,WAAW,mBAAmB,MAAM,gBAAgB,GAAG,SAAS,cAAc;EACpF,IACE,SAAS,SAAA,KACT,SAAS,SAAA,IAET,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,sCACd;EAEF,IAAI,CAAC,qBAAqB,sBAAsB,QAAQ,GACtD,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,2BAA2B,wBACzC;EAEF,IAAI,SAAS,WAAA,KAAyC,GACpD,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,wDACd;EAEF,IAAI,MAAM,IAAI,QAAQ,GACpB,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,+CACd;EAEF,MAAM,IAAI,QAAQ;EAElB,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,IAAI,eAAe,WAAW,GAC5B,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,+CACd;EAGF,MAAM,oBAAoB,wBACxB,MACA,qBACA,GAAG,SAAS,mBACd;EACA,IAAI,kBAAkB,WAAW,GAC/B,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,kDACd;EAEF,KAAK,MAAM,aAAa,mBACtB,IAAI,CAAC,mBAAmB,IAAI,SAAS,GACnC,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,qDAAqD,UAAU,EAC7E;EAIJ,MAAM,iBAAiB,wBACrB,MACA,kBACA,GAAG,SAAS,gBACd;EACA,MAAM,gBAAgB,wBACpB,MACA,iBACA,GAAG,SAAS,eACd;EACA,MAAM,gBAAiB,KAAiC;EACxD,IAAI,CAAC,OAAO,cAAc,aAAa,KAAM,gBAA2B,GACtE,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,mDACd;EAEF,IAAK,gBAAA,OACH,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,iCAAiC,0BAC/C;EAGF,MAAM,YACJ,eAAe,QAAQ,IACvB,eAAe,cAAc,IAC7B,eAAe,iBAAiB,IAChC,eAAe,kBAAkB,CAAC,CAAC,IACnC,eAAe,iBAAiB,CAAC,CAAC;EACpC,IAAI,aAAA,KACF,MAAM,IAAI,2BACR,aACA,GAAG,SAAS,QAAQ,UAAU,iCAAiC,oBAAoB,OACrF;CAEJ;AACF;;;;;;;;;AAUA,SAAgB,+BACd,SACM;CACN,IAAI,QAAQ,eAAe,KAAA,GAAW,sBAAsB,QAAQ,UAAU;CAC9E,IAAI,QAAQ,cAAc,KAAA,GAAW,qBAAqB,QAAQ,SAAS;AAC7E;AAEA,SAAS,eAAe,OAAkD;CACxE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,qBAAqB,OAAe,OAAwB;CACnE,OAAO,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO;AACpC;AAEA,SAAS,mBAAmB,QAAiC,KAAa,MAAsB;CAC9F,MAAM,QAAQ,OAAO;CACrB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MACmB;CACnB,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,kBAAkB;CAE9E,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,wBACP,QACA,KACA,MAC0B;CAC1B,MAAM,QAAQ,OAAO;CACrB,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,oCAAoC;CAEhG,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACxC,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,2BAA2B,aAAa,GAAG,KAAK,GAAG,MAAM,mBAAmB;CAG1F,OAAO;AACT;AAEA,SAAS,eAAe,QAAmC;CACzD,IAAI,QAAQ;CACZ,KAAK,MAAM,SAAS,QAAQ,SAAS,eAAe,KAAK;CACzD,OAAO;AACT;AAEA,SAAS,eAAe,OAAuB;CAC7C,OAAO,YAAY,OAAO,KAAK,CAAC,CAAC;AACnC"}