@beam-network/sdk 0.5.4 → 0.5.7

package/README.md

@@ -96,13 +96,13 @@ For low-level raw transfer configs, use `createRawTransfer`; lifecycle transport
 
 ## Route Streaming And Payload Size
 
-Provider transfers use `transfer-client-control/v5`. Every reply carries Runtime and transport epochs; prepare and every route-stream message carry a UUID route generation. S3, R2, and S3-compatible destinations retain direct multipart UploadPart/ListParts/HEAD handling.
+Provider transfers use `transfer-client-control/v6`. Every reply carries Runtime and transport epochs; prepare and every route-stream message carry a UUID route generation. S3, R2, and S3-compatible destinations retain direct multipart UploadPart/ListParts/HEAD handling.
 
-The client signs up to 64 routes concurrently by default and emits 2,048-route logical batches, split only when encoded MessagePack requests approach `maxPayloadBytes` (8 MiB by default; explicit positive overrides remain supported). The splitter reserves control-envelope headroom for the live auth token and stable request identity so the final encoded request remains below the configured guard. A single route larger than the configured limit fails before publication with both sizes in the error. Multipart create and abort requests use a separate `multipartControlConcurrency` limit of 2 by default, with explicit positive overrides supported, and S3-compatible control requests make up to five attempts for transient provider failures. This keeps URL signing throughput independent from provider control-plane pressure.
+The client signs up to 64 routes concurrently by default and emits 2,048-route logical batches. Encoded MessagePack requests target 4 MiB physical batches under `maxPayloadBytes` (8 MiB by default; explicit positive overrides remain supported). The splitter reserves control-envelope headroom for the live auth token and stable request identity so the final encoded request remains below the configured guard. A single route above the 4 MiB target but within the configured guard publishes alone; a single route larger than the configured limit fails before publication with both sizes in the error. Multipart create and abort requests use a separate `multipartControlConcurrency` limit of 2 by default, with explicit positive overrides supported, and S3-compatible control requests make up to five attempts for transient provider failures. This keeps URL signing throughput independent from provider control-plane pressure.
 
 The stream ID derives from the transfer, selected flow, and immutable plan identity, and each ordered batch ID includes its route-coordinate checksum. Manual multi-destination attachment requires `delivery_index` on every route. Lifecycle mutations retry transient failures up to three times with the same request identity. A non-recoverable provider setup or route failure raises `BeamProviderTransferError`, whose `errors`, `transferCancelled`, and `multipartCleanupComplete` fields retain the original provider, cancellation, and cleanup outcomes. `waitForTransfer` subscribes to the API-key-owned, at-most-once terminal signal before its first status read and reconciles every signal through authoritative status; subscription failure degrades to the same jittered 15-to-30-second status fallback. Call `close()` when the client is no longer needed; it also closes outstanding terminal waiters.
 
-Hippius uses genuine non-multipart v2 routes, so its manifest is empty and group-level final HEAD verification is not available from that provider flow.
+Hippius uses canonical non-multipart `signed_url` routes, so its manifest is empty and group-level final HEAD verification is not available from that provider flow.
 
 NATS requires this guard because the broker rejects messages above its configured `max_payload`. This limit applies only to lifecycle/control metadata; transfer file bytes do not flow through NATS.
 

package/dist/client.d.ts

@@ -32,6 +32,7 @@ export declare class BeamClient {
     private readonly routeSigningConcurrency;
     private readonly routeSigningConcurrencyOverridden;
     private readonly multipartControlConcurrency;
+    private readonly recoverySigners;
     constructor(options?: BeamClientOptions);
     close(): Promise<void>;
     openTransferTerminalWaiter(transferId: string): Promise<TransferTerminalSignalWaiter>;
@@ -75,6 +76,9 @@ export declare class BeamClient {
     }): Promise<AttachSignedUrlsResponse>;
     prepareProviderTransfer(input: ProviderTransferCreateInput): Promise<TransferPrepareResponse>;
     private signProviderRoute;
+    private startProviderRouteRecoverySigner;
+    private stopRecoverySigner;
+    private stopAllRecoverySigners;
     createAndDistribute(input: RawTransferCreateInput): Promise<TransferCreateResponse>;
     waitForTransfer(transferId: string, options?: {
         timeoutMs?: number;
@@ -82,17 +86,3 @@ export declare class BeamClient {
         maxPollIntervalMs?: number;
     }): Promise<TransferStatusInfo>;
 }
-export declare function buildStagingObjectPrefix(input: {
-    finalObjectKey: string;
-    transferId: string;
-    sourceId: string;
-    destinationId: string;
-}): string;
-export declare function buildStagingObjectKey(input: {
-    finalObjectKey: string;
-    transferId: string;
-    sourceId: string;
-    destinationId: string;
-    chunkIndex: number;
-    partNumber: number;
-}): string;

package/dist/client.js

@@ -1,4 +1,4 @@
-import { abortMultipartUpload, createMultipartUpload, expiresAtIso, prepareProviderDestination, prepareProviderSource, signAbortMultipartUpload, signCompleteMultipartUpload, signDeleteObject, signDestinationRoute, signFinalObjectHead, signListMultipartUpload, signListObjects, signUploadPartCopy } from "./provider-signing.js";
+import { abortMultipartUpload, createMultipartUpload, expiresAtIso, prepareProviderDestination, prepareProviderSource, signAbortMultipartUpload, signCompleteMultipartUpload, signDestinationRoute, signFinalObjectHead, signListMultipartUpload } from "./provider-signing.js";
 import { BeamTransferControl, BEAM_DEFAULT_NATS_URL, compactSignedRoutes, isRecoverableRouteStreamError } from "./nats-control.js";
 export class BeamRouteRecoveryPendingError extends Error {
     transferId;
@@ -52,6 +52,7 @@ export class BeamClient {
     routeSigningConcurrency;
     routeSigningConcurrencyOverridden;
     multipartControlConcurrency;
+    recoverySigners = new Map();
     constructor(options = {}) {
         if (!options.apiKey?.trim()) {
             throw new Error("apiKey is required.");
@@ -77,6 +78,7 @@ export class BeamClient {
         }
     }
     async close() {
+        this.stopAllRecoverySigners();
         return this.control.close();
     }
     openTransferTerminalWaiter(transferId) {
@@ -97,7 +99,7 @@ export class BeamClient {
             callbacks: input.callbacks,
             test_mode: input.testMode || undefined,
             progressive_mode: input.progressiveMode || undefined,
-            signed_url_flow: input.signedUrlFlow ?? "signed_url_v1"
+            signed_url_flow: input.signedUrlFlow ?? "signed_url"
         });
         return this.control.request("transfer.create", body, {
             transferId,
@@ -110,8 +112,10 @@ export class BeamClient {
     async transferStatus(transferId) {
         validateId(transferId, "transferId");
         const status = await this.control.request("transfer.status", { transfer_id: transferId }, { transferId });
-        if (["completed", "failed", "cancelled"].includes(status.status))
+        if (["completed", "failed", "cancelled"].includes(status.status)) {
             this.control.releaseRecoveryLease(transferId);
+            this.stopRecoverySigner(transferId);
+        }
         return status;
     }
     distributeTransfer(transferId) {
@@ -128,6 +132,7 @@ export class BeamClient {
             idempotencyKey: `transfer:${transferId}:cancel`
         });
         this.control.releaseRecoveryLease(transferId);
+        this.stopRecoverySigner(transferId);
         return result;
     }
     async planTransfer(input) {
@@ -137,7 +142,7 @@ export class BeamClient {
             name: input.name,
             test_mode: input.testMode || undefined,
             urls_expires_at: input.urlsExpiresAt,
-            signed_url_flow: input.signedUrlFlow ?? "signed_url_v1"
+            signed_url_flow: input.signedUrlFlow ?? "signed_url"
         }));
         if (result.success)
             validateCompactTransferPlan(result.plan_descriptor, result.signed_url_flow);
@@ -145,7 +150,8 @@ export class BeamClient {
     }
     async prepareTransfer(input) {
         const transferId = await transferIdForIdempotencyKey(input.idempotencyKey);
-        const routeGenerationId = input.routeGenerationId ?? randomUuid();
+        const prepareIdempotencyKey = `transfer:${transferId}:prepare`;
+        const routeGenerationId = input.routeGenerationId ?? await routeGenerationIdForPrepareIdempotencyKey(prepareIdempotencyKey);
         const result = await this.control.request("transfer.prepare", compact({
             transfer_id: transferId,
             route_generation_id: routeGenerationId,
@@ -154,10 +160,10 @@ export class BeamClient {
             name: input.name,
             test_mode: input.testMode || undefined,
             urls_expires_at: input.urlsExpiresAt,
-            signed_url_flow: input.signedUrlFlow ?? "signed_url_v1"
+            signed_url_flow: input.signedUrlFlow ?? "signed_url"
         }), {
             transferId,
-            idempotencyKey: `transfer:${transferId}:prepare`
+            idempotencyKey: prepareIdempotencyKey
         });
         if (result.success)
             validateCompactTransferPlan(result.plan_descriptor, result.signed_url_flow);
@@ -185,7 +191,7 @@ export class BeamClient {
                 planIdentity: `${await routeCoordinateChecksum(orderedRoutes)}:${routeGenerationId}`,
                 totalRoutes: orderedRoutes.length,
                 totalChunks: countDistinctRouteChunks(orderedRoutes),
-                signedUrlFlow: multipartGroupManifest.length ? "signed_url_v2" : "signed_url_v1"
+                signedUrlFlow: "signed_url"
             });
             const stream = new RouteStreamSender(this.control, {
                 streamId,
@@ -194,7 +200,7 @@ export class BeamClient {
                 totalRoutes: orderedRoutes.length,
                 totalChunks: countDistinctRouteChunks(orderedRoutes),
                 urlsExpiresAt,
-                signedUrlFlow: multipartGroupManifest.length ? "signed_url_v2" : "signed_url_v1",
+                signedUrlFlow: "signed_url",
                 autoDistribute: input.autoDistribute ?? true
             });
             await stream.begin();
@@ -239,7 +245,7 @@ export class BeamClient {
     }
     async prepareProviderTransfer(input) {
         const expiresIn = input.expiresIn ?? 3600;
-        const requestedSignedUrlFlow = input.signedUrlFlow ?? "signed_url_v1";
+        const requestedSignedUrlFlow = input.signedUrlFlow ?? "signed_url";
         const retainedRecoveryInput = {
             ...input,
             sources: input.sources.map((source) => ({ ...source })),
@@ -282,6 +288,7 @@ export class BeamClient {
             sourcesById.set(preparedSource.source_id, source);
         });
         const multipartUploads = new Map();
+        const recoveryMultipartUploads = new Map();
         const autoDistribute = input.distribute !== false;
         let initialThrowIfCancelled = input.throwIfCancelled;
         const routeStreamLock = new AsyncMutex();
@@ -334,10 +341,9 @@ export class BeamClient {
                     signedUrlFlow: requestedSignedUrlFlow,
                     concurrency: this.multipartControlConcurrency,
                     onGroupReady: async (state) => {
-                        if (requestedSignedUrlFlow === "signed_url_v2") {
-                            validateMultipartGroupManifest([state.manifest], prepared.transfer_id);
-                            await routeStream.addManifestGroups([state.manifest]);
-                        }
+                        recoveryMultipartUploads.set(state.manifest.multipart_group_id, state);
+                        validateMultipartGroupManifest([state.manifest], prepared.transfer_id);
+                        await routeStream.addManifestGroups([state.manifest]);
                         multipartGroupWaiters.get(state.manifest.multipart_group_id)?.resolve(state);
                     },
                     onGroupFailed: (groupId, error) => multipartGroupWaiters.get(groupId)?.reject(error)
@@ -400,9 +406,7 @@ export class BeamClient {
                 while (pendingRoutes.size)
                     await streamNextCompletedRoute();
                 const multipartGroupManifest = await multipartManifestTask;
-                if (requestedSignedUrlFlow === "signed_url_v2") {
-                    validateMultipartGroupManifest(multipartGroupManifest, prepared.transfer_id);
-                }
+                validateMultipartGroupManifest(multipartGroupManifest, prepared.transfer_id);
                 const attached = await routeStream.complete();
                 if (!attached.success) {
                     throw new Error(attached.error ?? attached.message ?? "route stream failed");
@@ -437,6 +441,13 @@ export class BeamClient {
                 throw error;
             }
         };
+        await this.startProviderRouteRecoverySigner({
+            prepared,
+            sourcesById,
+            destinationsById,
+            multipartUploads: recoveryMultipartUploads,
+            expiresIn
+        });
         this.control.registerRecoveryLease({
             transferId: prepared.transfer_id,
             planFingerprint: prepared.plan_fingerprint,
@@ -484,63 +495,113 @@ export class BeamClient {
         if (!upload)
             throw new Error(`${input.signedUrlFlow} route is missing its multipart upload`);
         validateMultipartPartNumber(input.partNumber, upload.manifest);
-        if (input.signedUrlFlow === "signed_url_v1") {
-            return signDestinationRoute({
-                chunk: input.chunk,
-                target: {
-                    ...input.target,
-                    object_key: input.finalObjectKey,
-                    metadata: partRouteMetadata(input.target.metadata)
-                },
-                source: input.source,
-                destination: input.destination,
-                expiresIn: input.expiresIn,
-                uploadId: upload.uploadId,
-                partNumber: input.partNumber,
-                finalObjectKey: input.finalObjectKey,
-                expectedObjectSize: upload.manifest.expected_object_size,
-                expectedPartCount: upload.manifest.expected_part_count,
-                maxPartNumber: upload.manifest.max_part_number,
-                completeUrl: upload.manifest.complete_url,
-                abortUrl: upload.manifest.abort_url,
-                listPageUrl: upload.manifest.list_page_urls[multipartListPageIndex(input.partNumber)],
-                finalHeadUrl: upload.manifest.final_head_url,
-                finalObjectMetadata: upload.manifest.final_object_metadata,
-                fetchImpl: this.fetchImpl
-            });
-        }
-        const stagingObjectPrefix = buildStagingObjectPrefix({
-            finalObjectKey: input.finalObjectKey,
-            transferId: input.transferId,
-            sourceId: input.chunk.source_id,
-            destinationId: input.target.destination_id
-        });
-        const stagingObjectKey = [
-            stagingObjectPrefix,
-            `part-${input.partNumber}-chunk-${input.chunk.chunk_index}`
-        ].join("/");
-        const copySourceRange = `bytes=0-${Math.max(0, input.chunk.chunk_size - 1)}`;
-        const [{ copyUrl, copySource }, deleteUrl] = await Promise.all([
-            signUploadPartCopy(input.destination, input.finalObjectKey, stagingObjectKey, upload.uploadId, input.partNumber, input.expiresIn, copySourceRange),
-            signDeleteObject(input.destination, stagingObjectKey, input.expiresIn)
-        ]);
         return signDestinationRoute({
             chunk: input.chunk,
-            target: { ...input.target, metadata: partRouteMetadata(input.target.metadata) },
+            target: {
+                ...input.target,
+                object_key: input.finalObjectKey,
+                metadata: partRouteMetadata(input.target.metadata)
+            },
             source: input.source,
             destination: input.destination,
             expiresIn: input.expiresIn,
+            uploadId: upload.uploadId,
             partNumber: input.partNumber,
-            multipartGroupId: upload.manifest.multipart_group_id,
-            commitMethod: "upload_part_copy",
-            stagingObjectKey,
-            copyUrl,
-            copySource,
-            copySourceRange,
-            deleteUrl,
+            finalObjectKey: input.finalObjectKey,
+            expectedObjectSize: upload.manifest.expected_object_size,
+            expectedPartCount: upload.manifest.expected_part_count,
+            maxPartNumber: upload.manifest.max_part_number,
+            completeUrl: upload.manifest.complete_url,
+            abortUrl: upload.manifest.abort_url,
+            listPageUrl: upload.manifest.list_page_urls[multipartListPageIndex(input.partNumber)],
+            finalHeadUrl: upload.manifest.final_head_url,
+            finalObjectMetadata: upload.manifest.final_object_metadata,
             fetchImpl: this.fetchImpl
         });
     }
+    async startProviderRouteRecoverySigner(input) {
+        this.stopRecoverySigner(input.prepared.transfer_id);
+        const stop = await this.control.serveRouteRecoverySigner(input.prepared.transfer_id, async (payload) => {
+            if (payload.route_generation_id.length === 0)
+                throw new Error("route recovery generation is required");
+            const routes = await mapOrderedWithConcurrency(payload.chunks, this.routeSigningConcurrency, async (requested) => {
+                if (requested.route_generation_id !== payload.route_generation_id) {
+                    throw new Error("route recovery chunk generation mismatch");
+                }
+                const chunk = materializePlanChunk(input.prepared.plan_descriptor, input.prepared.transfer_id, requested.source_id, requested.chunk_index);
+                if (requested.part_number !== multipartPartNumber(chunk.source_chunk_index, requested.attempt_slot)) {
+                    throw new Error("route recovery multipart slot mapping mismatch");
+                }
+                if (chunk.source_offset !== requested.source_offset
+                    || chunk.chunk_size !== requested.chunk_size) {
+                    throw new Error("route recovery source coordinate mismatch");
+                }
+                const target = chunk.destinations.find((candidate) => candidate.destination_id === requested.destination_id
+                    && Number(candidate.metadata?.delivery_index) === requested.delivery_index);
+                if (!target)
+                    throw new Error("route recovery destination coordinate mismatch");
+                const source = input.sourcesById.get(requested.source_id);
+                const destination = input.destinationsById.get(requested.destination_id);
+                if (!source || !destination)
+                    throw new Error("route recovery provider configuration is unavailable");
+                const upload = input.multipartUploads.get(requested.multipart_group_id);
+                if (!upload)
+                    throw new Error(`route recovery multipart upload is unavailable: ${requested.multipart_group_id}`);
+                if (upload.uploadId !== requested.upload_id
+                    || upload.objectKey !== requested.final_object_key
+                    || upload.manifest.source_id !== requested.source_id
+                    || upload.manifest.destination_id !== requested.destination_id) {
+                    throw new Error("route recovery multipart identity mismatch");
+                }
+                return this.signProviderRoute({
+                    chunk,
+                    target: {
+                        ...target,
+                        object_key: requested.final_object_key,
+                        metadata: {
+                            ...(target.metadata ?? {}),
+                            ...(requested.destination_metadata ?? {}),
+                            transfer_id: input.prepared.transfer_id,
+                            final_object_key: requested.final_object_key,
+                            upload_id: requested.upload_id,
+                            multipart_group_id: requested.multipart_group_id,
+                            delivery_index: requested.delivery_index,
+                            part_number: requested.part_number,
+                            logical_attempt_index: requested.logical_attempt_index,
+                            attempt_slot: requested.attempt_slot,
+                            route_generation_id: requested.route_generation_id
+                        }
+                    },
+                    source,
+                    destination,
+                    expiresIn: input.expiresIn,
+                    upload,
+                    transferId: input.prepared.transfer_id,
+                    finalObjectKey: requested.final_object_key,
+                    signedUrlFlow: "signed_url",
+                    partNumber: requested.part_number
+                });
+            });
+            return {
+                transfer_id: payload.transfer_id,
+                route_generation_id: payload.route_generation_id,
+                signed_at: new Date().toISOString(),
+                chunk_routes: routes
+            };
+        });
+        this.recoverySigners.set(input.prepared.transfer_id, stop);
+    }
+    stopRecoverySigner(transferId) {
+        const stop = this.recoverySigners.get(transferId);
+        if (!stop)
+            return;
+        stop();
+        this.recoverySigners.delete(transferId);
+    }
+    stopAllRecoverySigners() {
+        for (const transferId of [...this.recoverySigners.keys()])
+            this.stopRecoverySigner(transferId);
+    }
     async createAndDistribute(input) {
         const transfer = await this.createRawTransfer(input);
         if (transfer.success) {
@@ -904,14 +965,7 @@ function materializePlanChunk(descriptor, transferId, sourceId, chunkIndex) {
             const partNumber = multipartPartNumber(sourceChunkIndex);
             const objectKey = destination.provider.toLowerCase() === "hippius"
                 ? `${finalObjectKey}/${descriptor.plan_nonce}/chunk-${String(sourceChunkIndex).padStart(6, "0")}`
-                : buildStagingObjectKey({
-                    finalObjectKey,
-                    transferId,
-                    sourceId,
-                    destinationId: destination.destination_id,
-                    chunkIndex,
-                    partNumber
-                });
+                : finalObjectKey;
             return {
                 destination_id: destination.destination_id,
                 delivery_index: deliveryIndex,
@@ -1042,10 +1096,7 @@ async function createMultipartGroupManifest(input) {
                 throw new Error(`plan final object key not found: ${source.source_id}:${destination.destination_id}`);
             }
             multipartGroupId = multipartGroupStateKey(input.prepared.transfer_id, destination.destination_id, source.source_id, finalObjectKey);
-            const finalObjectMetadata = {
-                "beam-transfer-id": input.prepared.transfer_id,
-                ...(input.signedUrlFlow === "signed_url_v2" ? { "beam-multipart-group-id": multipartGroupId } : {})
-            };
+            const finalObjectMetadata = { "beam-transfer-id": input.prepared.transfer_id };
             const retainedUpload = input.multipartUploads.get(multipartGroupId);
             const uploadId = retainedUpload?.uploadId ?? await createMultipartUpload({
                 destination: destinationConfig,
@@ -1062,31 +1113,12 @@ async function createMultipartGroupManifest(input) {
             }
             try {
                 const urlsExpiresAt = expiresAtIso(input.expiresIn);
-                const stagingObjectPrefix = buildStagingObjectPrefix({
-                    finalObjectKey,
-                    transferId: input.prepared.transfer_id,
-                    sourceId: source.source_id,
-                    destinationId: destination.destination_id
-                });
-                const stagingListPrefix = `${stagingObjectPrefix}/`;
                 const maxPartNumber = multipartMaxPartNumber(source.chunk_count);
                 const listPageMarkers = multipartListPageMarkers(maxPartNumber);
-                const stagingObjectKeys = multipartStagingObjectKeys({
-                    finalObjectKey,
-                    transferId: input.prepared.transfer_id,
-                    sourceId: source.source_id,
-                    destinationId: destination.destination_id,
-                    globalChunkStart: source.global_chunk_start,
-                    chunkCount: source.chunk_count
-                });
-                const stagingListStartAfter = pagedListStartAfter(stagingObjectKeys);
-                const [completeUrl, abortUrl, listPageUrls, stagingListUrls, finalHeadUrl] = await Promise.all([
+                const [completeUrl, abortUrl, listPageUrls, finalHeadUrl] = await Promise.all([
                     signCompleteMultipartUpload(destinationConfig, finalObjectKey, uploadId, input.expiresIn),
                     signAbortMultipartUpload(destinationConfig, finalObjectKey, uploadId, input.expiresIn),
                     Promise.all(listPageMarkers.map((partNumberMarker) => signListMultipartUpload(destinationConfig, finalObjectKey, uploadId, input.expiresIn, { maxParts: 1_000, ...(partNumberMarker ? { partNumberMarker } : {}) }))),
-                    input.signedUrlFlow === "signed_url_v2"
-                        ? Promise.all(stagingListStartAfter.map((startAfter) => signListObjects(destinationConfig, stagingListPrefix, input.expiresIn, startAfter ? { startAfter } : {})))
-                        : Promise.resolve([]),
                     signFinalObjectHead(destinationConfig, finalObjectKey, input.expiresIn)
                 ]);
                 const manifest = {
@@ -1101,7 +1133,6 @@ async function createMultipartGroupManifest(input) {
                     complete_url: completeUrl,
                     abort_url: abortUrl,
                     list_page_urls: listPageUrls,
-                    staging_list_urls: stagingListUrls,
                     final_head_url: finalHeadUrl,
                     final_object_metadata: finalObjectMetadata,
                     urls_expires_at: urlsExpiresAt
@@ -1147,40 +1178,8 @@ function multipartListPageMarkers(maxPartNumber) {
         markers.push(marker);
     return markers;
 }
-function multipartStagingObjectKeys(input) {
-    const encoder = new TextEncoder();
-    const keys = Array.from({ length: input.chunkCount }, (_, sourceChunkIndex) => {
-        const key = buildStagingObjectKey({
-            finalObjectKey: input.finalObjectKey,
-            transferId: input.transferId,
-            sourceId: input.sourceId,
-            destinationId: input.destinationId,
-            chunkIndex: input.globalChunkStart + sourceChunkIndex,
-            partNumber: multipartPartNumber(sourceChunkIndex)
-        });
-        return { key, bytes: encoder.encode(key) };
-    });
-    keys.sort((left, right) => compareBytes(left.bytes, right.bytes));
-    return keys.map(({ key }) => key);
-}
-function pagedListStartAfter(sortedKeys) {
-    const boundaries = [];
-    for (let pageStart = 0; pageStart < sortedKeys.length; pageStart += 1_000) {
-        boundaries.push(pageStart === 0 ? undefined : sortedKeys[pageStart - 1]);
-    }
-    return boundaries;
-}
-function compareBytes(leftBytes, rightBytes) {
-    const sharedLength = Math.min(leftBytes.length, rightBytes.length);
-    for (let index = 0; index < sharedLength; index += 1) {
-        const difference = (leftBytes[index] ?? 0) - (rightBytes[index] ?? 0);
-        if (difference !== 0)
-            return difference;
-    }
-    return leftBytes.length - rightBytes.length;
-}
 function multipartMaxPartNumber(chunkCount) {
-    return multipartPartNumber(positiveInteger(chunkCount, "source chunk_count") - 1);
+    return multipartPartNumber(positiveInteger(chunkCount, "source chunk_count") - 1, 2);
 }
 function validateMultipartPartNumber(partNumber, manifest) {
     if (!Number.isInteger(partNumber) || partNumber < 1 || partNumber > manifest.max_part_number) {
@@ -1219,17 +1218,17 @@ const COMPACT_TRANSFER_PLAN_KEYS = new Set([
     "destinations",
     "logical_chunk_count",
     "delivery_route_count",
+    "multipart_attempt_slots",
     "formulas"
 ]);
 const COMPACT_TRANSFER_PLAN_FORMULAS = {
     source_offset: "source_chunk_index * chunk_size",
     delivery_index: "chunk_index * destination_count + destination_index",
-    part_number: "source_chunk_index + 1",
-    route_generation_id: "initial-{chunk_index}-{destination_id}",
-    staging_object_key: "{final_object_key}.beam-staging/{transfer_id}/{source_id}/{destination_id}/part-{part_number}-chunk-{chunk_index}"
+    part_number: "source_chunk_index * 3 + attempt_slot + 1",
+    route_generation_id: "initial-{chunk_index}-{destination_id}"
 };
 function validateCompactTransferPlan(descriptor, signedUrlFlow) {
-    if (signedUrlFlow !== "signed_url_v1" && signedUrlFlow !== "signed_url_v2") {
+    if (signedUrlFlow !== "signed_url") {
         throw new Error(`BeamCore returned unsupported signed_url_flow: ${String(signedUrlFlow)}`);
     }
     const keys = Object.keys(descriptor);
@@ -1239,6 +1238,9 @@ function validateCompactTransferPlan(descriptor, signedUrlFlow) {
     if (descriptor.version !== "compact-transfer-plan/v1") {
         throw new Error(`BeamCore returned unsupported plan version: ${descriptor.version}`);
     }
+    if (descriptor.multipart_attempt_slots !== 3) {
+        throw new Error("BeamCore returned unsupported multipart attempt slot count");
+    }
     const formulaKeys = Object.keys(descriptor.formulas);
     if (formulaKeys.length !== Object.keys(COMPACT_TRANSFER_PLAN_FORMULAS).length
         || Object.entries(COMPACT_TRANSFER_PLAN_FORMULAS).some(([key, value]) => descriptor.formulas[key] !== value)) {
@@ -1257,7 +1259,6 @@ const MULTIPART_GROUP_MANIFEST_KEYS = new Set([
     "complete_url",
     "abort_url",
     "list_page_urls",
-    "staging_list_urls",
     "final_head_url",
     "final_object_metadata",
     "urls_expires_at"
@@ -1290,8 +1291,8 @@ function validateMultipartGroupManifest(manifest, transferId) {
         if (!Number.isInteger(group.expected_part_count) || group.expected_part_count < 1 || group.expected_part_count > 10_000) {
             throw new Error(`multipart group ${group.multipart_group_id} has invalid expected_part_count`);
         }
-        if (group.max_part_number !== group.expected_part_count) {
-            throw new Error(`multipart group ${group.multipart_group_id} max_part_number must equal expected_part_count`);
+        if (!Number.isInteger(group.max_part_number) || group.max_part_number < group.expected_part_count || group.max_part_number > 10_000) {
+            throw new Error(`multipart group ${group.multipart_group_id} has invalid max_part_number`);
         }
         if (!Number.isSafeInteger(group.expected_object_size) || group.expected_object_size <= 0) {
             throw new Error(`multipart group ${group.multipart_group_id} has invalid expected_object_size`);
@@ -1303,22 +1304,9 @@ function validateMultipartGroupManifest(manifest, transferId) {
             || group.list_page_urls.some((url) => typeof url !== "string" || url.length === 0)) {
             throw new Error(`multipart group ${group.multipart_group_id} requires ${expectedListPageCount} unique list_page_urls`);
         }
-        if (!Array.isArray(group.staging_list_urls)
-            || group.staging_list_urls.some((url) => typeof url !== "string" || url.length === 0)) {
-            throw new Error(`multipart group ${group.multipart_group_id} has invalid staging_list_urls`);
-        }
-        if (group.staging_list_urls.length > 0
-            && (group.staging_list_urls.length !== expectedListPageCount
-                || new Set(group.staging_list_urls).size !== expectedListPageCount)) {
-            throw new Error(`multipart group ${group.multipart_group_id} requires ${expectedListPageCount} unique staging_list_urls when staging is used`);
-        }
         const metadataKeys = Object.keys(group.final_object_metadata);
-        const stagedCopyMetadata = group.staging_list_urls.length > 0;
-        if (metadataKeys.length !== (stagedCopyMetadata ? 2 : 1)
-            || group.final_object_metadata["beam-transfer-id"] !== transferId
-            || (stagedCopyMetadata
-                ? group.final_object_metadata["beam-multipart-group-id"] !== group.multipart_group_id
-                : group.final_object_metadata["beam-multipart-group-id"] !== undefined)) {
+        if (metadataKeys.length !== 1
+            || group.final_object_metadata["beam-transfer-id"] !== transferId) {
             throw new Error(`multipart group ${group.multipart_group_id} has invalid final_object_metadata`);
         }
     }
@@ -1345,7 +1333,13 @@ function randomUuid() {
 async function transferIdForIdempotencyKey(idempotencyKey) {
     if (!idempotencyKey?.trim())
         return randomUuid();
-    const input = new TextEncoder().encode(`beam-transfer:${idempotencyKey.trim()}`);
+    return stableUuidFromIdentity(`beam-transfer:${idempotencyKey.trim()}`);
+}
+async function routeGenerationIdForPrepareIdempotencyKey(idempotencyKey) {
+    return stableUuidFromIdentity(`beam-route-generation:${idempotencyKey.trim()}`);
+}
+async function stableUuidFromIdentity(identity) {
+    const input = new TextEncoder().encode(identity);
     let digest;
     if (globalThis.crypto?.subtle) {
         digest = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", input));
@@ -1366,20 +1360,6 @@ function jitteredDelay(baseMs) {
 function compact(input) {
     return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== undefined));
 }
-export function buildStagingObjectPrefix(input) {
-    return [
-        `${input.finalObjectKey}.beam-staging`,
-        input.transferId,
-        input.sourceId,
-        input.destinationId
-    ].join("/");
-}
-export function buildStagingObjectKey(input) {
-    return [
-        buildStagingObjectPrefix(input),
-        `part-${input.partNumber}-chunk-${input.chunkIndex}`
-    ].join("/");
-}
 function validateId(value, name) {
     if (!value || value.includes("/") || value.includes("..")) {
         throw new Error(`${name} is invalid`);

package/dist/models.d.ts

@@ -1,4 +1,4 @@
-export type SignedUrlFlow = "signed_url_v1" | "signed_url_v2";
+export type SignedUrlFlow = "signed_url";
 export interface BeamClientOptions {
     apiKey?: string;
     natsUrl?: string;
@@ -148,7 +148,7 @@ export interface TransferStatusInfo {
     };
 }
 export interface TransferTerminalEvent {
-    schema_version: "transfer-client-control/v5";
+    schema_version: "transfer-client-control/v6";
     producer: "transfer-runtime";
     transfer_id: string;
     status: "completed" | "failed" | "cancelled";
@@ -294,12 +294,12 @@ export interface CompactTransferPlanDescriptor {
     destinations: CompactTransferPlanDestination[];
     logical_chunk_count: number;
     delivery_route_count: number;
+    multipart_attempt_slots: 3;
     formulas: {
         source_offset: "source_chunk_index * chunk_size";
         delivery_index: "chunk_index * destination_count + destination_index";
-        part_number: "source_chunk_index + 1";
+        part_number: "source_chunk_index * 3 + attempt_slot + 1";
         route_generation_id: "initial-{chunk_index}-{destination_id}";
-        staging_object_key: "{final_object_key}.beam-staging/{transfer_id}/{source_id}/{destination_id}/part-{part_number}-chunk-{chunk_index}";
     };
 }
 export interface SignedChunkRoute {
@@ -328,11 +328,9 @@ export interface MultipartGroupManifest {
     complete_url: string;
     abort_url: string;
     list_page_urls: string[];
-    staging_list_urls: string[];
     final_head_url: string;
     final_object_metadata: Record<string, string> & {
         "beam-transfer-id": string;
-        "beam-multipart-group-id"?: string;
     };
     urls_expires_at: string;
 }

package/dist/multipart-limits.d.ts

@@ -1,3 +1,4 @@
 export declare const MULTIPART_MAX_PART_NUMBER = 10000;
-export declare const MULTIPART_MAX_SOURCE_CHUNKS = 10000;
-export declare function multipartPartNumber(sourceChunkIndex: number): number;
+export declare const MULTIPART_ATTEMPT_SLOT_COUNT = 3;
+export declare const MULTIPART_MAX_SOURCE_CHUNKS: number;
+export declare function multipartPartNumber(chunkIndex: number, attemptSlot?: number): number;

package/dist/multipart-limits.js

@@ -1,11 +1,16 @@
 export const MULTIPART_MAX_PART_NUMBER = 10_000;
-export const MULTIPART_MAX_SOURCE_CHUNKS = MULTIPART_MAX_PART_NUMBER;
-export function multipartPartNumber(sourceChunkIndex) {
-    if (!Number.isInteger(sourceChunkIndex) || sourceChunkIndex < 0) {
+export const MULTIPART_ATTEMPT_SLOT_COUNT = 3;
+export const MULTIPART_MAX_SOURCE_CHUNKS = Math.floor(MULTIPART_MAX_PART_NUMBER / MULTIPART_ATTEMPT_SLOT_COUNT);
+export function multipartPartNumber(chunkIndex, attemptSlot = 0) {
+    if (!Number.isInteger(chunkIndex) || chunkIndex < 0) {
         throw new Error("source_chunk_index must be a non-negative integer");
     }
-    if (sourceChunkIndex >= MULTIPART_MAX_SOURCE_CHUNKS) {
+    if (chunkIndex >= MULTIPART_MAX_SOURCE_CHUNKS) {
         throw new Error(`source_chunk_index must be less than ${MULTIPART_MAX_SOURCE_CHUNKS}`);
     }
-    return sourceChunkIndex + 1;
+    if (!Number.isInteger(attemptSlot) || attemptSlot < 0 || attemptSlot >= MULTIPART_ATTEMPT_SLOT_COUNT) {
+        throw new Error("attempt_slot must be 0, 1, or 2");
+    }
+    const partNumber = chunkIndex * MULTIPART_ATTEMPT_SLOT_COUNT + attemptSlot + 1;
+    return partNumber;
 }

package/dist/nats-control.d.ts

@@ -1,9 +1,42 @@
 import { type ConnectionOptions } from "nats";
 import type { MultipartGroupManifest, SignedChunkRoute, TransferTerminalSignalWaiter } from "./models.js";
-export declare const TRANSFER_CLIENT_CONTROL_SCHEMA_VERSION = "transfer-client-control/v5";
+export declare const TRANSFER_CLIENT_CONTROL_SCHEMA_VERSION = "transfer-client-control/v6";
 export declare const BEAM_DEFAULT_NATS_URL = "tls://nats.b1m.ai:4222";
 export declare const BEAM_DEFAULT_NATS_WS_URL = "wss://nats.b1m.ai:443";
 export declare const BEAM_DEFAULT_MAX_PAYLOAD_BYTES: number;
+export declare const BEAM_ROUTE_TARGET_PAYLOAD_BYTES: number;
+export declare const ROUTE_RECOVERY_SIGN_MESSAGE_TYPE: "transfer.route_recovery.sign";
+export interface RouteRecoverySignChunk {
+    source_id: string;
+    destination_id: string;
+    chunk_index: number;
+    delivery_index: number;
+    source_offset: number;
+    chunk_size: number;
+    logical_attempt_index: number;
+    attempt_slot: 0 | 1 | 2;
+    part_number: number;
+    route_generation_id: string;
+    multipart_group_id: string;
+    final_object_key: string;
+    upload_id: string;
+    urls_expires_at?: string;
+    multipart_created_at?: string;
+    source_metadata?: Record<string, unknown>;
+    destination_metadata?: Record<string, unknown>;
+}
+export interface RouteRecoverySignRequestPayload {
+    transfer_id: string;
+    route_generation_id: string;
+    requested_at?: string;
+    chunks: RouteRecoverySignChunk[];
+}
+export interface RouteRecoverySignReplyPayload {
+    transfer_id: string;
+    route_generation_id: string;
+    signed_at?: string;
+    chunk_routes: SignedChunkRoute[];
+}
 export type TransferClientMessageType = "runtime.hello" | "transfer.plan" | "transfer.create" | "transfer.prepare" | "transfer.route_stream.begin" | "transfer.route_stream.manifest" | "transfer.route_stream.batch" | "transfer.route_stream.complete" | "transfer.distribute" | "transfer.status" | "transfer.cancel" | "transfer.resume";
 export interface CompactSignedRouteBatch {
     source_chunks: Array<{
@@ -33,9 +66,9 @@ export interface RouteStreamBeginPayload {
     stream_id: string;
     total_routes: number;
     total_chunks: number;
-    route_contract_version: "signed_url_v1" | "signed_url_v2";
+    route_contract_version: "signed_url";
     urls_expires_at?: string;
-    signed_url_flow: "signed_url_v1" | "signed_url_v2";
+    signed_url_flow: "signed_url";
     auto_distribute: boolean;
 }
 export interface RouteStreamManifestPayload {
@@ -88,6 +121,7 @@ export declare class BeamTransferControl {
     private authTokenExpiresAt;
     private authResolvePromise;
     private readonly terminalWaitCancellations;
+    private readonly routeRecoverySignerCancellations;
     private readonly recoveryLeases;
     private readonly recoveryOperations;
     private readonly recoveryRequestedEpoch;
@@ -95,6 +129,7 @@ export declare class BeamTransferControl {
     private helloTimer;
     constructor(options: TransferControlOptions);
     close(): Promise<void>;
+    serveRouteRecoverySigner(transferId: string, handler: (payload: RouteRecoverySignRequestPayload) => Promise<RouteRecoverySignReplyPayload>): Promise<() => void>;
     registerRecoveryLease(lease: TransferRecoveryLease): () => void;
     releaseRecoveryLease(transferId: string): void;
     continueRecoveryLease(transferId: string): void;
@@ -109,6 +144,8 @@ export declare class BeamTransferControl {
     private resolveAuthToken;
     private resolveAuthTokenFresh;
     private authSubject;
+    private routeRecoverySignSubject;
+    private buildRouteRecoveryReply;
     private requestSubject;
     private terminalSubject;
 }

package/dist/nats-control.js

@@ -1,12 +1,14 @@
 import { encode, decode } from "@msgpack/msgpack";
 import { connect } from "nats";
-export const TRANSFER_CLIENT_CONTROL_SCHEMA_VERSION = "transfer-client-control/v5";
+export const TRANSFER_CLIENT_CONTROL_SCHEMA_VERSION = "transfer-client-control/v6";
 export const BEAM_DEFAULT_NATS_URL = "tls://nats.b1m.ai:4222";
 export const BEAM_DEFAULT_NATS_WS_URL = "wss://nats.b1m.ai:443";
 // NATS enforces max_payload per message. This guard splits signed-route control
 // messages before the broker rejects them; transfer bytes never flow through NATS.
 export const BEAM_DEFAULT_MAX_PAYLOAD_BYTES = 8 * 1024 * 1024;
+export const BEAM_ROUTE_TARGET_PAYLOAD_BYTES = 4 * 1024 * 1024;
 const ROUTE_BATCH_AUTH_TOKEN_ESTIMATE_BYTES = 64 * 1024;
+export const ROUTE_RECOVERY_SIGN_MESSAGE_TYPE = "transfer.route_recovery.sign";
 export function buildConnectionOptions(options) {
     const connectionOptions = {
         servers: options.natsUrl,
@@ -55,6 +57,7 @@ export class BeamTransferControl {
     authTokenExpiresAt = 0;
     authResolvePromise = null;
     terminalWaitCancellations = new Set();
+    routeRecoverySignerCancellations = new Set();
     recoveryLeases = new Map();
     recoveryOperations = new Map();
     recoveryRequestedEpoch = new Map();
@@ -80,6 +83,8 @@ export class BeamTransferControl {
         this.closed = true;
         for (const cancel of [...this.terminalWaitCancellations])
             cancel();
+        for (const cancel of [...this.routeRecoverySignerCancellations])
+            cancel();
         if (this.helloTimer)
             clearInterval(this.helloTimer);
         this.helloTimer = null;
@@ -100,6 +105,53 @@ export class BeamTransferControl {
         if (nc && !nc.isClosed())
             await nc.drain();
     }
+    async serveRouteRecoverySigner(transferId, handler) {
+        const nc = await this.connection();
+        const subject = this.routeRecoverySignSubject(transferId);
+        let active = true;
+        const subscription = nc.subscribe(subject, {
+            callback: (_error, message) => {
+                if (!active)
+                    return;
+                void (async () => {
+                    let request = null;
+                    try {
+                        request = decode(message.data);
+                        if (request.schema_version !== TRANSFER_CLIENT_CONTROL_SCHEMA_VERSION
+                            || request.environment !== this.environment
+                            || request.key_prefix !== this.keyPrefix
+                            || request.transfer_id !== transferId
+                            || request.message_type !== ROUTE_RECOVERY_SIGN_MESSAGE_TYPE
+                            || request.producer !== "transfer-runtime"
+                            || request.payload.transfer_id !== transferId
+                            || request.payload.route_generation_id.length === 0
+                            || !Array.isArray(request.payload.chunks)
+                            || request.payload.chunks.length === 0) {
+                            throw new Error("route recovery request envelope mismatch");
+                        }
+                        const payload = await handler(request.payload);
+                        message.respond(encode(this.buildRouteRecoveryReply(request, true, 200, payload)));
+                    }
+                    catch (error) {
+                        message.respond(encode(this.buildRouteRecoveryReply(request ?? { message_id: "unknown", request_id: "unknown", transfer_id: transferId }, false, 500, undefined, {
+                            code: "route_recovery_sign_failed",
+                            message: error instanceof Error ? error.message : String(error)
+                        })));
+                    }
+                })();
+            }
+        });
+        await nc.flush();
+        const stop = () => {
+            if (!active)
+                return;
+            active = false;
+            subscription.unsubscribe();
+            this.routeRecoverySignerCancellations.delete(stop);
+        };
+        this.routeRecoverySignerCancellations.add(stop);
+        return stop;
+    }
     registerRecoveryLease(lease) {
         if (this.closed)
             throw new Error("NATS lifecycle control is closed");
@@ -285,6 +337,7 @@ export class BeamTransferControl {
         }
     }
     splitRoutesForPayload(messageType, basePayload, routes) {
+        const targetPayloadBytes = Math.min(this.maxPayloadBytes, BEAM_ROUTE_TARGET_PAYLOAD_BYTES);
         const authTokenEstimateBytes = Math.min(ROUTE_BATCH_AUTH_TOKEN_ESTIMATE_BYTES, Math.max(512, Math.floor(this.maxPayloadBytes / 128)));
         const encodedBytes = (candidate) => {
             const encoded = encode({
@@ -312,7 +365,7 @@ export class BeamTransferControl {
             let accepted = 0;
             while (low <= high) {
                 const count = Math.floor((low + high) / 2);
-                if (encodedBytes(routes.slice(offset, offset + count)) <= this.maxPayloadBytes) {
+                if (encodedBytes(routes.slice(offset, offset + count)) <= targetPayloadBytes) {
                     accepted = count;
                     low = count + 1;
                 }
@@ -321,7 +374,10 @@ export class BeamTransferControl {
             }
             if (accepted === 0) {
                 const bytes = encodedBytes(routes.slice(offset, offset + 1));
-                throw new Error(`single signed route is ${bytes} bytes, above maxPayloadBytes=${this.maxPayloadBytes}`);
+                if (bytes > this.maxPayloadBytes) {
+                    throw new Error(`single signed route is ${bytes} bytes, above maxPayloadBytes=${this.maxPayloadBytes}`);
+                }
+                accepted = 1;
             }
             chunks.push(routes.slice(offset, offset + accepted));
             offset += accepted;
@@ -493,6 +549,26 @@ export class BeamTransferControl {
     authSubject() {
         return `${this.subjectPrefix}.${this.environment}.auth.${this.keyPrefix}.resolve`;
     }
+    routeRecoverySignSubject(transferId) {
+        return `${this.subjectPrefix}.${this.environment}.sdk.${this.keyPrefix}.transfer.${transferId}.route_recovery_sign`;
+    }
+    buildRouteRecoveryReply(request, ok, status, payload, error) {
+        return {
+            message_id: request.message_id,
+            schema_version: TRANSFER_CLIENT_CONTROL_SCHEMA_VERSION,
+            environment: this.environment,
+            key_prefix: this.keyPrefix,
+            transfer_id: request.transfer_id,
+            message_type: ROUTE_RECOVERY_SIGN_MESSAGE_TYPE,
+            request_id: request.request_id,
+            occurred_at: new Date().toISOString(),
+            producer: "sdk",
+            ok,
+            status,
+            ...(payload ? { payload } : {}),
+            ...(error ? { error } : {})
+        };
+    }
     requestSubject(messageType, shardId) {
         return `${this.subjectPrefix}.${this.environment}.sdk.${this.keyPrefix}.shard.${shardId}.${messageType.replace(/\./g, "_")}`;
     }
@@ -517,12 +593,7 @@ const ROUTE_ATTEMPT_METADATA_KEYS = new Set([
     "part_number",
     "logical_attempt_index",
     "attempt_slot",
-    "route_generation_id",
-    "staging_object_key",
-    "copy_url",
-    "copy_source",
-    "copy_source_range",
-    "delete_url"
+    "route_generation_id"
 ]);
 const ROUTE_IDENTITY_METADATA_KEYS = [
     "source_id",

package/dist/provider-signing.d.ts

@@ -22,18 +22,10 @@ export declare function createMultipartUpload(input: {
 export declare function signFinalObjectHead(destination: ProviderDestinationConfig, objectKey: string, expiresIn: number): Promise<string>;
 export declare function signCompleteMultipartUpload(destination: ProviderDestinationConfig, objectKey: string, uploadId: string, expiresIn: number): Promise<string>;
 export declare function signAbortMultipartUpload(destination: ProviderDestinationConfig, objectKey: string, uploadId: string, expiresIn: number): Promise<string>;
-export declare function signListObjects(destination: ProviderDestinationConfig, prefix: string, expiresIn: number, options?: {
-    startAfter?: string;
-}): Promise<string>;
 export declare function signListMultipartUpload(destination: ProviderDestinationConfig, objectKey: string, uploadId: string, expiresIn: number, options?: {
     maxParts?: number;
     partNumberMarker?: number;
 }): Promise<string>;
-export declare function signUploadPartCopy(destination: ProviderDestinationConfig, finalObjectKey: string, stagingObjectKey: string, uploadId: string, partNumber: number, expiresIn: number, copySourceRange?: string): Promise<{
-    copyUrl: string;
-    copySource: string;
-}>;
-export declare function signDeleteObject(destination: ProviderDestinationConfig, objectKey: string, expiresIn: number): Promise<string>;
 export declare function abortMultipartUpload(destination: ProviderDestinationConfig, objectKey: string, uploadId: string): Promise<void>;
 export declare function signDestinationRoute(input: {
     chunk: ChunkSigningPlanItem;
@@ -53,12 +45,6 @@ export declare function signDestinationRoute(input: {
     maxPartNumber?: number;
     finalObjectMetadata?: Record<string, string>;
     multipartGroupId?: string;
-    commitMethod?: "upload_part_copy";
-    stagingObjectKey?: string;
-    copyUrl?: string;
-    copySource?: string;
-    copySourceRange?: string;
-    deleteUrl?: string;
     fetchImpl?: typeof fetch;
 }): Promise<SignedChunkRoute>;
 export declare function isS3CompatibleProvider(config: ProviderSourceConfig | ProviderDestinationConfig): config is AnyS3CompatibleProviderConfig;

package/dist/provider-signing.js

@@ -1,4 +1,4 @@
-import { AbortMultipartUploadCommand, CompleteMultipartUploadCommand, CreateMultipartUploadCommand, DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, ListObjectsV2Command, ListPartsCommand, PutObjectCommand, S3Client, UploadPartCommand, UploadPartCopyCommand } from "@aws-sdk/client-s3";
+import { AbortMultipartUploadCommand, CompleteMultipartUploadCommand, CreateMultipartUploadCommand, GetObjectCommand, HeadObjectCommand, ListPartsCommand, PutObjectCommand, S3Client, UploadPartCommand } from "@aws-sdk/client-s3";
 import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
 export function nowIso() {
     return new Date().toISOString();
@@ -149,18 +149,6 @@ export async function signAbortMultipartUpload(destination, objectKey, uploadId,
     }
     throw new Error(`multipart abort is not supported for ${destination.provider}`);
 }
-export async function signListObjects(destination, prefix, expiresIn, options = {}) {
-    if (isS3CompatibleProvider(destination)) {
-        const client = createS3CompatibleClient(destination);
-        return getSignedUrl(client, new ListObjectsV2Command({
-            Bucket: destination.bucket,
-            Prefix: prefix,
-            MaxKeys: 1_000,
-            StartAfter: options.startAfter
-        }), { expiresIn });
-    }
-    throw new Error(`multipart staging list is not supported for ${destination.provider}`);
-}
 export async function signListMultipartUpload(destination, objectKey, uploadId, expiresIn, options = {}) {
     if (isS3CompatibleProvider(destination)) {
         const client = createS3CompatibleClient(destination);
@@ -174,42 +162,6 @@ export async function signListMultipartUpload(destination, objectKey, uploadId,
     }
     throw new Error(`multipart list-parts is not supported for ${destination.provider}`);
 }
-export async function signUploadPartCopy(destination, finalObjectKey, stagingObjectKey, uploadId, partNumber, expiresIn, copySourceRange) {
-    if (isS3CompatibleProvider(destination)) {
-        const client = createS3CompatibleClient(destination);
-        const copySource = copySourceHeader(destination, stagingObjectKey);
-        // Keep x-amz-copy-source (and x-amz-copy-source-range when present) in
-        // X-Amz-SignedHeaders rather than hoisting them to URL query params.
-        // The JS AWS SDK default hoists all x-amz-* headers to query params for
-        // presigned URLs; R2 ignores copy-source from query params (zero-byte copy)
-        // and returns SignatureDoesNotMatch when they are sent as unsigned headers
-        // alongside the signed query value. Keeping them as signed headers matches
-        // boto3 behavior and the copySourceHeaders replay contract in core-server.
-        const unhoistableHeaders = new Set(["x-amz-copy-source"]);
-        if (copySourceRange) {
-            unhoistableHeaders.add("x-amz-copy-source-range");
-        }
-        return {
-            copySource,
-            copyUrl: await getSignedUrl(client, new UploadPartCopyCommand({
-                Bucket: destination.bucket,
-                Key: finalObjectKey,
-                UploadId: uploadId,
-                PartNumber: partNumber,
-                CopySource: copySource,
-                CopySourceRange: copySourceRange
-            }), { expiresIn, unhoistableHeaders })
-        };
-    }
-    throw new Error(`multipart copy is not supported for ${destination.provider}`);
-}
-export async function signDeleteObject(destination, objectKey, expiresIn) {
-    if (isS3CompatibleProvider(destination)) {
-        const client = createS3CompatibleClient(destination);
-        return getSignedUrl(client, new DeleteObjectCommand({ Bucket: destination.bucket, Key: objectKey }), { expiresIn });
-    }
-    throw new Error(`object delete signing is not supported for ${destination.provider}`);
-}
 export async function abortMultipartUpload(destination, objectKey, uploadId) {
     if (isS3CompatibleProvider(destination)) {
         await createS3CompatibleClient(destination).send(new AbortMultipartUploadCommand({ Bucket: destination.bucket, Key: objectKey, UploadId: uploadId }));
@@ -218,18 +170,14 @@ export async function abortMultipartUpload(destination, objectKey, uploadId) {
     throw new Error(`multipart abort is not supported for ${destination.provider}`);
 }
 export async function signDestinationRoute(input) {
-    if (input.commitMethod !== undefined && input.commitMethod !== "upload_part_copy") {
-        throw new Error(`unsupported signed_url_v2 commit method: ${String(input.commitMethod)}`);
-    }
     const targetObjectKey = input.target.object_key;
     if (!targetObjectKey) {
         throw new Error("destination signing target is missing object_key");
     }
-    const objectKey = input.stagingObjectKey ?? targetObjectKey;
     const [destUrl, sourceRoute] = await Promise.all([
         signDestinationUrl({
             destination: input.destination,
-            objectKey,
+            objectKey: targetObjectKey,
             uploadId: input.uploadId,
             partNumber: input.partNumber,
             expiresIn: input.expiresIn,
@@ -256,12 +204,6 @@ export async function signDestinationRoute(input) {
         metadata: {
             ...(input.target.metadata ?? {}),
             ...(input.multipartGroupId ? { multipart_group_id: input.multipartGroupId } : {}),
-            ...(input.commitMethod ? { commit_method: input.commitMethod } : {}),
-            ...(input.stagingObjectKey ? { staging_object_key: input.stagingObjectKey } : {}),
-            ...(input.copyUrl ? { copy_url: input.copyUrl } : {}),
-            ...(input.copySource ? { copy_source: input.copySource } : {}),
-            ...(input.copySourceRange ? { copy_source_range: input.copySourceRange } : {}),
-            ...(input.deleteUrl ? { delete_url: input.deleteUrl } : {}),
             ...(input.uploadId ? { upload_id: input.uploadId } : {}),
             ...(input.completeUrl ? { complete_url: input.completeUrl } : {}),
             ...(input.abortUrl ? { abort_url: input.abortUrl } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@beam-network/sdk",
-    "version": "0.5.4",
+    "version": "0.5.7",
     "description": "TypeScript SDK for BEAM transfer creation and management.",
     "type": "module",
     "license": "MIT",