@broberg/s3 0.0.0-stage → 0.1.1

package/README.md

@@ -1,3 +1,83 @@
-# Temporary Holding Version
+# @broberg/s3
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Upload and download files of **any size** directly between the browser and S3-compatible
+storage — Cloudflare **R2 in the EU** by default; Tigris, AWS or MinIO by `endpoint`.
+The site's server only issues short-lived, one-object signatures. **Bytes never pass
+through it**, and the storage key never leaves it.
+
+```bash
+npm i @broberg/s3
+```
+
+## Server (Hono / Bun)
+
+```ts
+import { createS3Handler, createS3SignerFromEnv } from "@broberg/s3";
+
+const s3 = createS3Handler(createS3SignerFromEnv(), {
+  // YOUR check — e.g. BID session + allowlist. Return null to refuse.
+  authorize: async (req) => {
+    const user = await getSession(req);
+    return user && ALLOWED.has(user.email) ? { prefix: `uploads/${user.sub}` } : null;
+  },
+  maxBytes: 20 * 1024 ** 3,          // default 20 GiB; checked at start AND at complete
+  allowedTypes: ["video/*"],          // declared type, not sniffed
+});
+
+app.post("/api/s3", (c) => s3(c.req.raw));
+```
+
+Next.js: `export const POST = (req: Request) => s3(req);`
+
+Environment (nothing set → every call answers **503 not_configured**; half set → throws at boot):
+
+| R2 (EU by default) | Any S3-compatible |
+|---|---|
+| `R2_ACCOUNT_ID`, `R2_ACCESS_KEY_ID`, `R2_SECRET_ACCESS_KEY`, `R2_BUCKET`, optional `R2_JURISDICTION=eu\|default` | `S3_ENDPOINT`, `S3_ACCESS_KEY_ID`, `S3_SECRET_ACCESS_KEY`, `S3_BUCKET`, optional `S3_REGION` |
+
+## Browser
+
+```ts
+import { uploadFile, cancelUpload, downloadUrl } from "@broberg/s3/client";
+
+const ctl = new AbortController();
+const { key, size } = await uploadFile(file, {
+  endpoint: "/api/s3",
+  signal: ctl.signal,                 // abort = PAUSE; calling uploadFile again on the same file resumes
+  onProgress: (p) => render(p.percent, p.bytesPerSecond, p.secondsLeft),
+});
+const link = await downloadUrl(key, { endpoint: "/api/s3", filename: "video.mp4" });
+await cancelUpload(file, { endpoint: "/api/s3" }); // discard an interrupted upload for good
+```
+
+Preact: `import { useUpload } from "@broberg/s3/preact"` → `{ status, progress, error, result, start, pause, cancel }`.
+**There is no visual component** — the site owns its design (and its `data-testid`s).
+
+## Security — what is enforced
+
+| | |
+|---|---|
+| No `authorize` → | **401**, nothing reaches the bucket |
+| Key outside the user's `prefix/` (incl. `..`, `%2e`, `//`) → | **403**, every action, upload and download |
+| Larger than `maxBytes` → | **413** at start; and at complete the real size is read from the bucket — a lie is discarded |
+| Type not in `allowedTypes` → | **415** |
+| Not `content-type: application/json` (a cross-site form post) → | **415**, nothing happens |
+| Not configured → | **503** |
+| Signed URL lifetime | ≤ **15 min**, one object (and one part) |
+| The secret key | never in any response (tested) |
+
+## Bucket setup (once, by whoever creates the bucket)
+
+**CORS** — without `ExposeHeaders: ETag` the browser cannot finish a multipart upload
+(the client says so in its error):
+
+```json
+[{ "AllowedOrigins": ["https://your.site"], "AllowedMethods": ["PUT", "GET"],
+   "AllowedHeaders": ["*"], "ExposeHeaders": ["ETag"], "MaxAgeSeconds": 3600 }]
+```
+
+**Lifecycle** — abort incomplete multipart uploads after 1–7 days, so abandoned parts do not
+cost storage forever.
+
+Part size: 16 MiB by default, grown automatically so a file never needs more than 10,000
+parts (an 8 GB video = 512 parts; 1 TB fits).

package/dist/chunk-HBRUN65D.js

@@ -0,0 +1,144 @@
+// src/client.ts
+var UploadError = class extends Error {
+  constructor(message, code, status) {
+    super(message);
+    this.code = code;
+    this.status = status;
+    this.name = "UploadError";
+  }
+  code;
+  status;
+};
+var defaultStorage = () => {
+  try {
+    return globalThis.localStorage ?? null;
+  } catch {
+    return null;
+  }
+};
+var resumeId = (endpoint, file) => `broberg-s3:${endpoint}:${file.name ?? "blob"}:${file.size}:${file.lastModified ?? 0}`;
+async function api(opts, body) {
+  const f = opts.fetch ?? fetch;
+  const res = await f(opts.endpoint, {
+    method: "POST",
+    credentials: "same-origin",
+    headers: { "content-type": "application/json", ...opts.headers },
+    body: JSON.stringify(body),
+    signal: opts.signal
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new UploadError(data.error?.message ?? `upload service answered ${res.status}`, data.error?.code ?? "http_error", res.status);
+  return data;
+}
+var sleep = (ms, signal) => new Promise((resolve, reject) => {
+  const t = setTimeout(resolve, ms);
+  signal?.addEventListener("abort", () => {
+    clearTimeout(t);
+    reject(signal.reason);
+  }, { once: true });
+});
+async function uploadFile(file, opts) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage;
+  const id = resumeId(opts.endpoint, file);
+  const save = (r2) => {
+    try {
+      storage?.setItem(id, JSON.stringify(r2));
+    } catch {
+    }
+  };
+  const f = opts.fetch ?? fetch;
+  let rec = null;
+  const raw = storage?.getItem(id);
+  if (raw) {
+    try {
+      const old = JSON.parse(raw);
+      const { parts: parts2 } = await api(opts, { action: "list", key: old.key, uploadId: old.uploadId });
+      rec = { ...old, parts: Object.fromEntries(parts2.map((p) => [p.partNumber, p.etag])) };
+    } catch (e) {
+      if (opts.signal?.aborted) throw e;
+      storage?.removeItem(id);
+    }
+  }
+  if (!rec) {
+    const s = await api(opts, {
+      action: "start",
+      filename: file.name ?? "file",
+      size: file.size,
+      type: file.type || "application/octet-stream"
+    });
+    rec = { ...s, parts: {} };
+    save(rec);
+  }
+  const r = rec;
+  const partBytes = (n) => Math.min(r.partSize, file.size - (n - 1) * r.partSize);
+  let sent = Object.keys(r.parts).reduce((s, n) => s + partBytes(Number(n)), 0);
+  const samples = [[Date.now(), sent]];
+  const report = () => {
+    const now = Date.now();
+    samples.push([now, sent]);
+    while (samples.length > 2 && now - samples[0][0] > 1e4) samples.shift();
+    const [t0, b0] = samples[0];
+    const bps = now > t0 ? (sent - b0) * 1e3 / (now - t0) : 0;
+    opts.onProgress?.({
+      sentBytes: sent,
+      totalBytes: file.size,
+      percent: file.size ? sent / file.size * 100 : 100,
+      bytesPerSecond: bps,
+      secondsLeft: bps > 0 ? (file.size - sent) / bps : null,
+      partsDone: Object.keys(r.parts).length,
+      partsTotal: r.partCount
+    });
+  };
+  report();
+  const queue = Array.from({ length: r.partCount }, (_, i) => i + 1).filter((n) => !r.parts[n]);
+  const retries = opts.retries ?? 5;
+  async function sendPart(n) {
+    for (let attempt = 1; ; attempt++) {
+      opts.signal?.throwIfAborted();
+      try {
+        const { urls } = await api(opts, { action: "sign", key: r.key, uploadId: r.uploadId, partNumbers: [n] });
+        const start = (n - 1) * r.partSize;
+        const res = await f(urls[0].url, { method: "PUT", body: file.slice(start, start + partBytes(n)), signal: opts.signal });
+        if (!res.ok) throw new UploadError(`storage answered ${res.status} for part ${n}`, "part_failed", res.status);
+        const etag = res.headers.get("etag");
+        if (!etag) throw new UploadError("the bucket did not expose the ETag header \u2014 its CORS rule needs ExposeHeaders: ETag", "cors_etag", 0);
+        r.parts[n] = etag;
+        sent += partBytes(n);
+        save(r);
+        report();
+        return;
+      } catch (e) {
+        if (opts.signal?.aborted) throw e;
+        if (e instanceof UploadError && (e.code === "cors_etag" || e.status !== void 0 && e.status >= 400 && e.status < 500 && e.code !== "part_failed")) throw e;
+        if (attempt >= retries) throw e;
+        await sleep(Math.min(3e4, 500 * 2 ** attempt), opts.signal);
+      }
+    }
+  }
+  const workers = Array.from({ length: Math.max(1, Math.min(opts.concurrency ?? 4, queue.length)) }, async () => {
+    for (let n = queue.shift(); n !== void 0; n = queue.shift()) await sendPart(n);
+  });
+  await Promise.all(workers);
+  opts.signal?.throwIfAborted();
+  const parts = Object.entries(r.parts).map(([n, etag]) => ({ partNumber: Number(n), etag })).sort((a, b) => a.partNumber - b.partNumber);
+  const done = await api(opts, { action: "complete", key: r.key, uploadId: r.uploadId, parts });
+  storage?.removeItem(id);
+  return done;
+}
+async function cancelUpload(file, opts) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage;
+  const id = resumeId(opts.endpoint, file);
+  const raw = storage?.getItem(id);
+  if (!raw) return;
+  const rec = JSON.parse(raw);
+  storage?.removeItem(id);
+  await api(opts, { action: "abort", key: rec.key, uploadId: rec.uploadId });
+}
+async function downloadUrl(key, opts) {
+  const { url } = await api(opts, { action: "download", key, filename: opts.filename });
+  return url;
+}
+
+export { UploadError, cancelUpload, downloadUrl, resumeId, uploadFile };
+//# sourceMappingURL=chunk-HBRUN65D.js.map
+//# sourceMappingURL=chunk-HBRUN65D.js.map

package/dist/chunk-HBRUN65D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":["r","parts"],"mappings":";AAqCO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EACrC,WAAA,CAAY,OAAA,EAA0B,IAAA,EAAuB,MAAA,EAAiB;AAC5E,IAAA,KAAA,CAAM,OAAO,CAAA;AADuB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAuB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAE3D,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AAAA,EACd;AAAA,EAHsC,IAAA;AAAA,EAAuB,MAAA;AAI/D;AAMA,IAAM,iBAAiB,MAAM;AAC3B,EAAA,IAAI;AAAE,IAAA,OAAQ,WAA0C,YAAA,IAAgB,IAAA;AAAA,EAAM,CAAA,CAAA,MAAQ;AAAE,IAAA,OAAO,IAAA;AAAA,EAAM;AACvG,CAAA;AAEO,IAAM,WAAW,CAAC,QAAA,EAAkB,IAAA,KACzC,CAAA,WAAA,EAAc,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,IAAQ,MAAM,IAAI,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,gBAAgB,CAAC,CAAA;AAEtF,eAAe,GAAA,CAAO,MAAqB,IAAA,EAA2C;AACpF,EAAA,MAAM,CAAA,GAAI,KAAK,KAAA,IAAS,KAAA;AACxB,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,IAAA,CAAK,QAAA,EAAU;AAAA,IACjC,MAAA,EAAQ,MAAA;AAAA,IACR,WAAA,EAAa,aAAA;AAAA,IACb,SAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,GAAG,KAAK,OAAA,EAAQ;AAAA,IAC/D,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,QAAQ,IAAA,CAAK;AAAA,GACd,CAAA;AACD,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAC/C,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,QAAU,IAAI,WAAA,CAAY,KAAK,KAAA,EAAO,OAAA,IAAW,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAA,CAAK,OAAO,IAAA,IAAQ,YAAA,EAAc,IAAI,MAAM,CAAA;AAC/I,EAAA,OAAO,IAAA;AACT;AAEA,IAAM,KAAA,GAAQ,CAAC,EAAA,EAAY,MAAA,KACzB,IAAI,OAAA,CAAc,CAAC,SAAS,MAAA,KAAW;AACrC,EAAA,MAAM,CAAA,GAAI,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AAChC,EAAA,MAAA,EAAQ,gBAAA,CAAiB,SAAS,MAAM;AAAE,IAAA,YAAA,CAAa,CAAC,CAAA;AAAG,IAAA,MAAA,CAAO,OAAO,MAAM,CAAA;AAAA,EAAG,CAAA,EAAG,EAAE,IAAA,EAAM,IAAA,EAAM,CAAA;AACrG,CAAC,CAAA;AAGH,eAAsB,UAAA,CAAW,MAAgB,IAAA,EAA4C;AAC3F,EAAA,MAAM,UAAU,IAAA,CAAK,OAAA,KAAY,MAAA,GAAY,cAAA,KAAmB,IAAA,CAAK,OAAA;AACrE,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA;AACvC,EAAA,MAAM,IAAA,GAAO,CAACA,EAAAA,KAAoB;AAAE,IAAA,IAAI;AAAE,MAAA,OAAA,EAAS,OAAA,CAAQ,EAAA,EAAI,IAAA,CAAK,SAAA,CAAUA,EAAC,CAAC,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAA,IAAuD;AAAA,EAAE,CAAA;AACpJ,EAAA,MAAM,CAAA,GAAI,KAAK,KAAA,IAAS,KAAA;AAExB,EAAA,IAAI,GAAA,GAA2B,IAAA;AAC/B,EAAA,MAAM,GAAA,GAAM,OAAA,EAAS,OAAA,CAAQ,EAAE,CAAA;AAC/B,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAE1B,MAAA,MAAM,EAAE,KAAA,EAAAC,MAAAA,EAAM,GAAI,MAAM,IAAuD,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,KAAK,GAAA,CAAI,GAAA,EAAK,QAAA,EAAU,GAAA,CAAI,UAAU,CAAA;AAC7I,MAAA,GAAA,GAAM,EAAE,GAAG,GAAA,EAAK,KAAA,EAAO,MAAA,CAAO,YAAYA,MAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,UAAA,EAAY,EAAE,IAAI,CAAC,CAAC,CAAA,EAAE;AAAA,IACtF,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AAChC,MAAA,OAAA,EAAS,WAAW,EAAE,CAAA;AAAA,IACxB;AAAA,EACF;AACA,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,CAAA,GAAI,MAAM,GAAA,CAA4E,IAAA,EAAM;AAAA,MAChG,MAAA,EAAQ,OAAA;AAAA,MAAS,QAAA,EAAU,KAAK,IAAA,IAAQ,MAAA;AAAA,MAAQ,MAAM,IAAA,CAAK,IAAA;AAAA,MAAM,IAAA,EAAM,KAAK,IAAA,IAAQ;AAAA,KACrF,CAAA;AACD,IAAA,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,KAAA,EAAO,EAAC,EAAE;AACxB,IAAA,IAAA,CAAK,GAAG,CAAA;AAAA,EACV;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AAEV,EAAA,MAAM,SAAA,GAAY,CAAC,CAAA,KAAc,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,QAAA,EAAU,IAAA,CAAK,IAAA,GAAA,CAAQ,CAAA,GAAI,CAAA,IAAK,CAAA,CAAE,QAAQ,CAAA;AACtF,EAAA,IAAI,OAAO,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,KAAK,EAAE,MAAA,CAAO,CAAC,CAAA,EAAG,CAAA,KAAM,IAAI,SAAA,CAAU,MAAA,CAAO,CAAC,CAAC,GAAG,CAAC,CAAA;AAC5E,EAAA,MAAM,UAAmC,CAAC,CAAC,KAAK,GAAA,EAAI,EAAG,IAAI,CAAC,CAAA;AAC5D,EAAA,MAAM,SAAS,MAAM;AACnB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,GAAA,EAAK,IAAI,CAAC,CAAA;AACxB,IAAA,OAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,GAAA,GAAM,OAAA,CAAQ,CAAC,CAAA,CAAG,CAAC,CAAA,GAAI,GAAA,EAAQ,OAAA,CAAQ,KAAA,EAAM;AAC1E,IAAA,MAAM,CAAC,EAAA,EAAI,EAAE,CAAA,GAAI,QAAQ,CAAC,CAAA;AAC1B,IAAA,MAAM,MAAM,GAAA,GAAM,EAAA,GAAA,CAAO,OAAO,EAAA,IAAM,GAAA,IAAS,MAAM,EAAA,CAAA,GAAM,CAAA;AAC3D,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,SAAA,EAAW,IAAA;AAAA,MAAM,YAAY,IAAA,CAAK,IAAA;AAAA,MAAM,SAAS,IAAA,CAAK,IAAA,GAAQ,IAAA,GAAO,IAAA,CAAK,OAAQ,GAAA,GAAM,GAAA;AAAA,MACxF,cAAA,EAAgB,GAAA;AAAA,MAAK,aAAa,GAAA,GAAM,CAAA,GAAA,CAAK,IAAA,CAAK,IAAA,GAAO,QAAQ,GAAA,GAAM,IAAA;AAAA,MACvE,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,KAAK,CAAA,CAAE,MAAA;AAAA,MAAQ,YAAY,CAAA,CAAE;AAAA,KACvD,CAAA;AAAA,EACH,CAAA;AACA,EAAA,MAAA,EAAO;AAEP,EAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,EAAE,QAAQ,CAAA,CAAE,SAAA,IAAa,CAAC,CAAA,EAAG,MAAM,CAAA,GAAI,CAAC,EAAE,MAAA,CAAO,CAAC,MAAM,CAAC,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAC5F,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,CAAA;AAEhC,EAAA,eAAe,SAAS,CAAA,EAAW;AACjC,IAAA,KAAA,IAAS,OAAA,GAAU,KAAK,OAAA,EAAA,EAAW;AACjC,MAAA,IAAA,CAAK,QAAQ,cAAA,EAAe;AAC5B,MAAA,IAAI;AACF,QAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CAAqD,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,KAAK,CAAA,CAAE,GAAA,EAAK,UAAU,CAAA,CAAE,QAAA,EAAU,aAAa,CAAC,CAAC,GAAG,CAAA;AACxJ,QAAA,MAAM,KAAA,GAAA,CAAS,CAAA,GAAI,CAAA,IAAK,CAAA,CAAE,QAAA;AAC1B,QAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,CAAG,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,KAAK,KAAA,CAAM,KAAA,EAAO,QAAQ,SAAA,CAAU,CAAC,CAAC,CAAA,EAAG,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AACvH,QAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,WAAA,CAAY,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,UAAA,EAAa,CAAC,CAAA,CAAA,EAAI,aAAA,EAAe,IAAI,MAAM,CAAA;AAC5G,QAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AACnC,QAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,WAAA,CAAY,0FAAA,EAAuF,aAAa,CAAC,CAAA;AACtI,QAAA,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA;AACb,QAAA,IAAA,IAAQ,UAAU,CAAC,CAAA;AACnB,QAAA,IAAA,CAAK,CAAC,CAAA;AACN,QAAA,MAAA,EAAO;AACP,QAAA;AAAA,MACF,SAAS,CAAA,EAAG;AACV,QAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AAChC,QAAA,IAAI,aAAa,WAAA,KAAgB,CAAA,CAAE,IAAA,KAAS,WAAA,IAAgB,EAAE,MAAA,KAAW,MAAA,IAAa,CAAA,CAAE,MAAA,IAAU,OAAO,CAAA,CAAE,MAAA,GAAS,OAAO,CAAA,CAAE,IAAA,KAAS,gBAAiB,MAAM,CAAA;AAC7J,QAAA,IAAI,OAAA,IAAW,SAAS,MAAM,CAAA;AAC9B,QAAA,MAAM,KAAA,CAAM,KAAK,GAAA,CAAI,GAAA,EAAQ,MAAM,CAAA,IAAK,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,UAAU,KAAA,CAAM,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,eAAe,CAAA,EAAG,KAAA,CAAM,MAAM,CAAC,CAAA,IAAK,YAAY;AAC7G,IAAA,KAAA,IAAS,CAAA,GAAI,KAAA,CAAM,KAAA,EAAM,EAAG,CAAA,KAAM,MAAA,EAAW,CAAA,GAAI,KAAA,CAAM,KAAA,EAAM,EAAG,MAAM,QAAA,CAAS,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA;AACD,EAAA,MAAM,OAAA,CAAQ,IAAI,OAAO,CAAA;AACzB,EAAA,IAAA,CAAK,QAAQ,cAAA,EAAe;AAE5B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,IAAI,CAAA,MAAO,EAAE,UAAA,EAAY,MAAA,CAAO,CAAC,CAAA,EAAG,IAAA,EAAK,CAAE,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,UAAA,GAAa,CAAA,CAAE,UAAU,CAAA;AACtI,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAkB,IAAA,EAAM,EAAE,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,CAAA,CAAE,GAAA,EAAK,QAAA,EAAU,CAAA,CAAE,QAAA,EAAU,OAAO,CAAA;AAC1G,EAAA,OAAA,EAAS,WAAW,EAAE,CAAA;AACtB,EAAA,OAAO,IAAA;AACT;AAGA,eAAsB,YAAA,CAAa,MAAgB,IAAA,EAAoD;AACrG,EAAA,MAAM,UAAU,IAAA,CAAK,OAAA,KAAY,MAAA,GAAY,cAAA,KAAmB,IAAA,CAAK,OAAA;AACrE,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,OAAA,EAAS,OAAA,CAAQ,EAAE,CAAA;AAC/B,EAAA,IAAI,CAAC,GAAA,EAAK;AACV,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC1B,EAAA,OAAA,EAAS,WAAW,EAAE,CAAA;AACtB,EAAA,MAAM,GAAA,CAAI,IAAA,EAAM,EAAE,MAAA,EAAQ,OAAA,EAAS,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,CAAA;AAC3E;AAGA,eAAsB,WAAA,CAAY,KAAa,IAAA,EAAsG;AACnJ,EAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAM,GAAA,CAAqB,IAAA,EAAM,EAAE,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,QAAA,EAAU,IAAA,CAAK,UAAU,CAAA;AACrG,EAAA,OAAO,GAAA;AACT","file":"chunk-HBRUN65D.js","sourcesContent":["// F111.2 — the browser half. Sends the file in parts DIRECTLY to the bucket using\n// URLs the site's server signed; the site's server never sees a byte. Remembers\n// finished parts so a dropped connection resumes instead of starting over.\n\nexport interface UploadProgress {\n  sentBytes: number;\n  totalBytes: number;\n  /** 0–100 */\n  percent: number;\n  /** Measured over the last ~10 s. */\n  bytesPerSecond: number;\n  /** null until there is a speed to estimate from. */\n  secondsLeft: number | null;\n  partsDone: number;\n  partsTotal: number;\n}\n\nexport interface UploadOptions {\n  /** The site's route that runs createS3Handler, e.g. \"/api/s3\". */\n  endpoint: string;\n  /** Parts in flight at once. Default 4. */\n  concurrency?: number;\n  /** Attempts per part before giving up. Default 5. */\n  retries?: number;\n  onProgress?(p: UploadProgress): void;\n  /** Aborting PAUSES: finished parts are kept and the next uploadFile on the same file resumes. */\n  signal?: AbortSignal;\n  /** Extra headers for calls to `endpoint` (e.g. a CSRF token). Cookies are sent (same-origin). */\n  headers?: Record<string, string>;\n  /** Where resume state lives. Default localStorage when present; null disables resume. */\n  storage?: Pick<Storage, \"getItem\" | \"setItem\" | \"removeItem\"> | null;\n  /** Injected for tests. */\n  fetch?: typeof fetch;\n}\n\nexport interface UploadResult { key: string; size: number }\n\nexport class UploadError extends Error {\n  constructor(message: string, readonly code: string, readonly status?: number) {\n    super(message);\n    this.name = \"UploadError\";\n  }\n}\n\ntype FileLike = Blob & { name?: string; lastModified?: number };\n\ninterface ResumeRecord { key: string; uploadId: string; partSize: number; partCount: number; parts: Record<number, string> }\n\nconst defaultStorage = () => {\n  try { return (globalThis as { localStorage?: Storage }).localStorage ?? null; } catch { return null; }\n};\n\nexport const resumeId = (endpoint: string, file: FileLike) =>\n  `broberg-s3:${endpoint}:${file.name ?? \"blob\"}:${file.size}:${file.lastModified ?? 0}`;\n\nasync function api<T>(opts: UploadOptions, body: Record<string, unknown>): Promise<T> {\n  const f = opts.fetch ?? fetch;\n  const res = await f(opts.endpoint, {\n    method: \"POST\",\n    credentials: \"same-origin\",\n    headers: { \"content-type\": \"application/json\", ...opts.headers },\n    body: JSON.stringify(body),\n    signal: opts.signal,\n  });\n  const data = (await res.json().catch(() => ({}))) as { error?: { code: string; message: string } };\n  if (!res.ok) throw new UploadError(data.error?.message ?? `upload service answered ${res.status}`, data.error?.code ?? \"http_error\", res.status);\n  return data as T;\n}\n\nconst sleep = (ms: number, signal?: AbortSignal) =>\n  new Promise<void>((resolve, reject) => {\n    const t = setTimeout(resolve, ms);\n    signal?.addEventListener(\"abort\", () => { clearTimeout(t); reject(signal.reason); }, { once: true });\n  });\n\n/** Upload `file`; resumes automatically if an earlier attempt on the same file was interrupted. */\nexport async function uploadFile(file: FileLike, opts: UploadOptions): Promise<UploadResult> {\n  const storage = opts.storage === undefined ? defaultStorage() : opts.storage;\n  const id = resumeId(opts.endpoint, file);\n  const save = (r: ResumeRecord) => { try { storage?.setItem(id, JSON.stringify(r)); } catch { /* quota: resume is best-effort, upload continues */ } };\n  const f = opts.fetch ?? fetch;\n\n  let rec: ResumeRecord | null = null;\n  const raw = storage?.getItem(id);\n  if (raw) {\n    try {\n      const old = JSON.parse(raw) as ResumeRecord;\n      // The bucket is the truth: ask which parts it actually holds.\n      const { parts } = await api<{ parts: { partNumber: number; etag: string }[] }>(opts, { action: \"list\", key: old.key, uploadId: old.uploadId });\n      rec = { ...old, parts: Object.fromEntries(parts.map((p) => [p.partNumber, p.etag])) };\n    } catch (e) {\n      if (opts.signal?.aborted) throw e;\n      storage?.removeItem(id); // expired or foreign upload: start fresh\n    }\n  }\n  if (!rec) {\n    const s = await api<{ key: string; uploadId: string; partSize: number; partCount: number }>(opts, {\n      action: \"start\", filename: file.name ?? \"file\", size: file.size, type: file.type || \"application/octet-stream\",\n    });\n    rec = { ...s, parts: {} };\n    save(rec);\n  }\n  const r = rec;\n\n  const partBytes = (n: number) => Math.min(r.partSize, file.size - (n - 1) * r.partSize);\n  let sent = Object.keys(r.parts).reduce((s, n) => s + partBytes(Number(n)), 0);\n  const samples: Array<[number, number]> = [[Date.now(), sent]];\n  const report = () => {\n    const now = Date.now();\n    samples.push([now, sent]);\n    while (samples.length > 2 && now - samples[0]![0] > 10_000) samples.shift();\n    const [t0, b0] = samples[0]!;\n    const bps = now > t0 ? ((sent - b0) * 1000) / (now - t0) : 0;\n    opts.onProgress?.({\n      sentBytes: sent, totalBytes: file.size, percent: file.size ? (sent / file.size) * 100 : 100,\n      bytesPerSecond: bps, secondsLeft: bps > 0 ? (file.size - sent) / bps : null,\n      partsDone: Object.keys(r.parts).length, partsTotal: r.partCount,\n    });\n  };\n  report();\n\n  const queue = Array.from({ length: r.partCount }, (_, i) => i + 1).filter((n) => !r.parts[n]);\n  const retries = opts.retries ?? 5;\n\n  async function sendPart(n: number) {\n    for (let attempt = 1; ; attempt++) {\n      opts.signal?.throwIfAborted(); // pause is honoured here even if a transport ignores the signal\n      try {\n        const { urls } = await api<{ urls: { partNumber: number; url: string }[] }>(opts, { action: \"sign\", key: r.key, uploadId: r.uploadId, partNumbers: [n] });\n        const start = (n - 1) * r.partSize;\n        const res = await f(urls[0]!.url, { method: \"PUT\", body: file.slice(start, start + partBytes(n)), signal: opts.signal });\n        if (!res.ok) throw new UploadError(`storage answered ${res.status} for part ${n}`, \"part_failed\", res.status);\n        const etag = res.headers.get(\"etag\");\n        if (!etag) throw new UploadError(\"the bucket did not expose the ETag header — its CORS rule needs ExposeHeaders: ETag\", \"cors_etag\", 0);\n        r.parts[n] = etag;\n        sent += partBytes(n);\n        save(r);\n        report();\n        return;\n      } catch (e) {\n        if (opts.signal?.aborted) throw e;\n        if (e instanceof UploadError && (e.code === \"cors_etag\" || (e.status !== undefined && e.status >= 400 && e.status < 500 && e.code !== \"part_failed\"))) throw e;\n        if (attempt >= retries) throw e;\n        await sleep(Math.min(30_000, 500 * 2 ** attempt), opts.signal);\n      }\n    }\n  }\n\n  const workers = Array.from({ length: Math.max(1, Math.min(opts.concurrency ?? 4, queue.length)) }, async () => {\n    for (let n = queue.shift(); n !== undefined; n = queue.shift()) await sendPart(n);\n  });\n  await Promise.all(workers);\n  opts.signal?.throwIfAborted();\n\n  const parts = Object.entries(r.parts).map(([n, etag]) => ({ partNumber: Number(n), etag })).sort((a, b) => a.partNumber - b.partNumber);\n  const done = await api<UploadResult>(opts, { action: \"complete\", key: r.key, uploadId: r.uploadId, parts });\n  storage?.removeItem(id);\n  return done;\n}\n\n/** Stop an interrupted upload for good: the bucket discards its parts and resume state is cleared. */\nexport async function cancelUpload(file: FileLike, opts: Omit<UploadOptions, \"signal\">): Promise<void> {\n  const storage = opts.storage === undefined ? defaultStorage() : opts.storage;\n  const id = resumeId(opts.endpoint, file);\n  const raw = storage?.getItem(id);\n  if (!raw) return;\n  const rec = JSON.parse(raw) as ResumeRecord;\n  storage?.removeItem(id);\n  await api(opts, { action: \"abort\", key: rec.key, uploadId: rec.uploadId });\n}\n\n/** A short-lived signed link to download `key` (which must be under your prefix). */\nexport async function downloadUrl(key: string, opts: Pick<UploadOptions, \"endpoint\" | \"headers\" | \"fetch\"> & { filename?: string }): Promise<string> {\n  const { url } = await api<{ url: string }>(opts, { action: \"download\", key, filename: opts.filename });\n  return url;\n}\n"]}

package/dist/client.cjs

@@ -0,0 +1,150 @@
+'use strict';
+
+// src/client.ts
+var UploadError = class extends Error {
+  constructor(message, code, status) {
+    super(message);
+    this.code = code;
+    this.status = status;
+    this.name = "UploadError";
+  }
+  code;
+  status;
+};
+var defaultStorage = () => {
+  try {
+    return globalThis.localStorage ?? null;
+  } catch {
+    return null;
+  }
+};
+var resumeId = (endpoint, file) => `broberg-s3:${endpoint}:${file.name ?? "blob"}:${file.size}:${file.lastModified ?? 0}`;
+async function api(opts, body) {
+  const f = opts.fetch ?? fetch;
+  const res = await f(opts.endpoint, {
+    method: "POST",
+    credentials: "same-origin",
+    headers: { "content-type": "application/json", ...opts.headers },
+    body: JSON.stringify(body),
+    signal: opts.signal
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new UploadError(data.error?.message ?? `upload service answered ${res.status}`, data.error?.code ?? "http_error", res.status);
+  return data;
+}
+var sleep = (ms, signal) => new Promise((resolve, reject) => {
+  const t = setTimeout(resolve, ms);
+  signal?.addEventListener("abort", () => {
+    clearTimeout(t);
+    reject(signal.reason);
+  }, { once: true });
+});
+async function uploadFile(file, opts) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage;
+  const id = resumeId(opts.endpoint, file);
+  const save = (r2) => {
+    try {
+      storage?.setItem(id, JSON.stringify(r2));
+    } catch {
+    }
+  };
+  const f = opts.fetch ?? fetch;
+  let rec = null;
+  const raw = storage?.getItem(id);
+  if (raw) {
+    try {
+      const old = JSON.parse(raw);
+      const { parts: parts2 } = await api(opts, { action: "list", key: old.key, uploadId: old.uploadId });
+      rec = { ...old, parts: Object.fromEntries(parts2.map((p) => [p.partNumber, p.etag])) };
+    } catch (e) {
+      if (opts.signal?.aborted) throw e;
+      storage?.removeItem(id);
+    }
+  }
+  if (!rec) {
+    const s = await api(opts, {
+      action: "start",
+      filename: file.name ?? "file",
+      size: file.size,
+      type: file.type || "application/octet-stream"
+    });
+    rec = { ...s, parts: {} };
+    save(rec);
+  }
+  const r = rec;
+  const partBytes = (n) => Math.min(r.partSize, file.size - (n - 1) * r.partSize);
+  let sent = Object.keys(r.parts).reduce((s, n) => s + partBytes(Number(n)), 0);
+  const samples = [[Date.now(), sent]];
+  const report = () => {
+    const now = Date.now();
+    samples.push([now, sent]);
+    while (samples.length > 2 && now - samples[0][0] > 1e4) samples.shift();
+    const [t0, b0] = samples[0];
+    const bps = now > t0 ? (sent - b0) * 1e3 / (now - t0) : 0;
+    opts.onProgress?.({
+      sentBytes: sent,
+      totalBytes: file.size,
+      percent: file.size ? sent / file.size * 100 : 100,
+      bytesPerSecond: bps,
+      secondsLeft: bps > 0 ? (file.size - sent) / bps : null,
+      partsDone: Object.keys(r.parts).length,
+      partsTotal: r.partCount
+    });
+  };
+  report();
+  const queue = Array.from({ length: r.partCount }, (_, i) => i + 1).filter((n) => !r.parts[n]);
+  const retries = opts.retries ?? 5;
+  async function sendPart(n) {
+    for (let attempt = 1; ; attempt++) {
+      opts.signal?.throwIfAborted();
+      try {
+        const { urls } = await api(opts, { action: "sign", key: r.key, uploadId: r.uploadId, partNumbers: [n] });
+        const start = (n - 1) * r.partSize;
+        const res = await f(urls[0].url, { method: "PUT", body: file.slice(start, start + partBytes(n)), signal: opts.signal });
+        if (!res.ok) throw new UploadError(`storage answered ${res.status} for part ${n}`, "part_failed", res.status);
+        const etag = res.headers.get("etag");
+        if (!etag) throw new UploadError("the bucket did not expose the ETag header \u2014 its CORS rule needs ExposeHeaders: ETag", "cors_etag", 0);
+        r.parts[n] = etag;
+        sent += partBytes(n);
+        save(r);
+        report();
+        return;
+      } catch (e) {
+        if (opts.signal?.aborted) throw e;
+        if (e instanceof UploadError && (e.code === "cors_etag" || e.status !== void 0 && e.status >= 400 && e.status < 500 && e.code !== "part_failed")) throw e;
+        if (attempt >= retries) throw e;
+        await sleep(Math.min(3e4, 500 * 2 ** attempt), opts.signal);
+      }
+    }
+  }
+  const workers = Array.from({ length: Math.max(1, Math.min(opts.concurrency ?? 4, queue.length)) }, async () => {
+    for (let n = queue.shift(); n !== void 0; n = queue.shift()) await sendPart(n);
+  });
+  await Promise.all(workers);
+  opts.signal?.throwIfAborted();
+  const parts = Object.entries(r.parts).map(([n, etag]) => ({ partNumber: Number(n), etag })).sort((a, b) => a.partNumber - b.partNumber);
+  const done = await api(opts, { action: "complete", key: r.key, uploadId: r.uploadId, parts });
+  storage?.removeItem(id);
+  return done;
+}
+async function cancelUpload(file, opts) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage;
+  const id = resumeId(opts.endpoint, file);
+  const raw = storage?.getItem(id);
+  if (!raw) return;
+  const rec = JSON.parse(raw);
+  storage?.removeItem(id);
+  await api(opts, { action: "abort", key: rec.key, uploadId: rec.uploadId });
+}
+async function downloadUrl(key, opts) {
+  const { url } = await api(opts, { action: "download", key, filename: opts.filename });
+  return url;
+}
+
+exports.UploadError = UploadError;
+exports.cancelUpload = cancelUpload;
+exports.downloadUrl = downloadUrl;
+exports.resumeId = resumeId;
+exports.uploadFile = uploadFile;
+//# sourceMappingURL=client.cjs.map
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":["r","parts"],"mappings":";;;AAqCO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EACrC,WAAA,CAAY,OAAA,EAA0B,IAAA,EAAuB,MAAA,EAAiB;AAC5E,IAAA,KAAA,CAAM,OAAO,CAAA;AADuB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAuB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAE3D,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AAAA,EACd;AAAA,EAHsC,IAAA;AAAA,EAAuB,MAAA;AAI/D;AAMA,IAAM,iBAAiB,MAAM;AAC3B,EAAA,IAAI;AAAE,IAAA,OAAQ,WAA0C,YAAA,IAAgB,IAAA;AAAA,EAAM,CAAA,CAAA,MAAQ;AAAE,IAAA,OAAO,IAAA;AAAA,EAAM;AACvG,CAAA;AAEO,IAAM,WAAW,CAAC,QAAA,EAAkB,IAAA,KACzC,CAAA,WAAA,EAAc,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,IAAQ,MAAM,IAAI,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,gBAAgB,CAAC,CAAA;AAEtF,eAAe,GAAA,CAAO,MAAqB,IAAA,EAA2C;AACpF,EAAA,MAAM,CAAA,GAAI,KAAK,KAAA,IAAS,KAAA;AACxB,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,IAAA,CAAK,QAAA,EAAU;AAAA,IACjC,MAAA,EAAQ,MAAA;AAAA,IACR,WAAA,EAAa,aAAA;AAAA,IACb,SAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,GAAG,KAAK,OAAA,EAAQ;AAAA,IAC/D,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,QAAQ,IAAA,CAAK;AAAA,GACd,CAAA;AACD,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAC/C,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,QAAU,IAAI,WAAA,CAAY,KAAK,KAAA,EAAO,OAAA,IAAW,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAA,CAAK,OAAO,IAAA,IAAQ,YAAA,EAAc,IAAI,MAAM,CAAA;AAC/I,EAAA,OAAO,IAAA;AACT;AAEA,IAAM,KAAA,GAAQ,CAAC,EAAA,EAAY,MAAA,KACzB,IAAI,OAAA,CAAc,CAAC,SAAS,MAAA,KAAW;AACrC,EAAA,MAAM,CAAA,GAAI,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AAChC,EAAA,MAAA,EAAQ,gBAAA,CAAiB,SAAS,MAAM;AAAE,IAAA,YAAA,CAAa,CAAC,CAAA;AAAG,IAAA,MAAA,CAAO,OAAO,MAAM,CAAA;AAAA,EAAG,CAAA,EAAG,EAAE,IAAA,EAAM,IAAA,EAAM,CAAA;AACrG,CAAC,CAAA;AAGH,eAAsB,UAAA,CAAW,MAAgB,IAAA,EAA4C;AAC3F,EAAA,MAAM,UAAU,IAAA,CAAK,OAAA,KAAY,MAAA,GAAY,cAAA,KAAmB,IAAA,CAAK,OAAA;AACrE,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA;AACvC,EAAA,MAAM,IAAA,GAAO,CAACA,EAAAA,KAAoB;AAAE,IAAA,IAAI;AAAE,MAAA,OAAA,EAAS,OAAA,CAAQ,EAAA,EAAI,IAAA,CAAK,SAAA,CAAUA,EAAC,CAAC,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAA,IAAuD;AAAA,EAAE,CAAA;AACpJ,EAAA,MAAM,CAAA,GAAI,KAAK,KAAA,IAAS,KAAA;AAExB,EAAA,IAAI,GAAA,GAA2B,IAAA;AAC/B,EAAA,MAAM,GAAA,GAAM,OAAA,EAAS,OAAA,CAAQ,EAAE,CAAA;AAC/B,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAE1B,MAAA,MAAM,EAAE,KAAA,EAAAC,MAAAA,EAAM,GAAI,MAAM,IAAuD,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,KAAK,GAAA,CAAI,GAAA,EAAK,QAAA,EAAU,GAAA,CAAI,UAAU,CAAA;AAC7I,MAAA,GAAA,GAAM,EAAE,GAAG,GAAA,EAAK,KAAA,EAAO,MAAA,CAAO,YAAYA,MAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,UAAA,EAAY,EAAE,IAAI,CAAC,CAAC,CAAA,EAAE;AAAA,IACtF,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AAChC,MAAA,OAAA,EAAS,WAAW,EAAE,CAAA;AAAA,IACxB;AAAA,EACF;AACA,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,CAAA,GAAI,MAAM,GAAA,CAA4E,IAAA,EAAM;AAAA,MAChG,MAAA,EAAQ,OAAA;AAAA,MAAS,QAAA,EAAU,KAAK,IAAA,IAAQ,MAAA;AAAA,MAAQ,MAAM,IAAA,CAAK,IAAA;AAAA,MAAM,IAAA,EAAM,KAAK,IAAA,IAAQ;AAAA,KACrF,CAAA;AACD,IAAA,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,KAAA,EAAO,EAAC,EAAE;AACxB,IAAA,IAAA,CAAK,GAAG,CAAA;AAAA,EACV;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AAEV,EAAA,MAAM,SAAA,GAAY,CAAC,CAAA,KAAc,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,QAAA,EAAU,IAAA,CAAK,IAAA,GAAA,CAAQ,CAAA,GAAI,CAAA,IAAK,CAAA,CAAE,QAAQ,CAAA;AACtF,EAAA,IAAI,OAAO,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,KAAK,EAAE,MAAA,CAAO,CAAC,CAAA,EAAG,CAAA,KAAM,IAAI,SAAA,CAAU,MAAA,CAAO,CAAC,CAAC,GAAG,CAAC,CAAA;AAC5E,EAAA,MAAM,UAAmC,CAAC,CAAC,KAAK,GAAA,EAAI,EAAG,IAAI,CAAC,CAAA;AAC5D,EAAA,MAAM,SAAS,MAAM;AACnB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,GAAA,EAAK,IAAI,CAAC,CAAA;AACxB,IAAA,OAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,GAAA,GAAM,OAAA,CAAQ,CAAC,CAAA,CAAG,CAAC,CAAA,GAAI,GAAA,EAAQ,OAAA,CAAQ,KAAA,EAAM;AAC1E,IAAA,MAAM,CAAC,EAAA,EAAI,EAAE,CAAA,GAAI,QAAQ,CAAC,CAAA;AAC1B,IAAA,MAAM,MAAM,GAAA,GAAM,EAAA,GAAA,CAAO,OAAO,EAAA,IAAM,GAAA,IAAS,MAAM,EAAA,CAAA,GAAM,CAAA;AAC3D,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,SAAA,EAAW,IAAA;AAAA,MAAM,YAAY,IAAA,CAAK,IAAA;AAAA,MAAM,SAAS,IAAA,CAAK,IAAA,GAAQ,IAAA,GAAO,IAAA,CAAK,OAAQ,GAAA,GAAM,GAAA;AAAA,MACxF,cAAA,EAAgB,GAAA;AAAA,MAAK,aAAa,GAAA,GAAM,CAAA,GAAA,CAAK,IAAA,CAAK,IAAA,GAAO,QAAQ,GAAA,GAAM,IAAA;AAAA,MACvE,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,KAAK,CAAA,CAAE,MAAA;AAAA,MAAQ,YAAY,CAAA,CAAE;AAAA,KACvD,CAAA;AAAA,EACH,CAAA;AACA,EAAA,MAAA,EAAO;AAEP,EAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,EAAE,QAAQ,CAAA,CAAE,SAAA,IAAa,CAAC,CAAA,EAAG,MAAM,CAAA,GAAI,CAAC,EAAE,MAAA,CAAO,CAAC,MAAM,CAAC,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAC5F,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,CAAA;AAEhC,EAAA,eAAe,SAAS,CAAA,EAAW;AACjC,IAAA,KAAA,IAAS,OAAA,GAAU,KAAK,OAAA,EAAA,EAAW;AACjC,MAAA,IAAA,CAAK,QAAQ,cAAA,EAAe;AAC5B,MAAA,IAAI;AACF,QAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CAAqD,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,KAAK,CAAA,CAAE,GAAA,EAAK,UAAU,CAAA,CAAE,QAAA,EAAU,aAAa,CAAC,CAAC,GAAG,CAAA;AACxJ,QAAA,MAAM,KAAA,GAAA,CAAS,CAAA,GAAI,CAAA,IAAK,CAAA,CAAE,QAAA;AAC1B,QAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,CAAG,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,KAAK,KAAA,CAAM,KAAA,EAAO,QAAQ,SAAA,CAAU,CAAC,CAAC,CAAA,EAAG,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AACvH,QAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,WAAA,CAAY,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,UAAA,EAAa,CAAC,CAAA,CAAA,EAAI,aAAA,EAAe,IAAI,MAAM,CAAA;AAC5G,QAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AACnC,QAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,WAAA,CAAY,0FAAA,EAAuF,aAAa,CAAC,CAAA;AACtI,QAAA,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA;AACb,QAAA,IAAA,IAAQ,UAAU,CAAC,CAAA;AACnB,QAAA,IAAA,CAAK,CAAC,CAAA;AACN,QAAA,MAAA,EAAO;AACP,QAAA;AAAA,MACF,SAAS,CAAA,EAAG;AACV,QAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AAChC,QAAA,IAAI,aAAa,WAAA,KAAgB,CAAA,CAAE,IAAA,KAAS,WAAA,IAAgB,EAAE,MAAA,KAAW,MAAA,IAAa,CAAA,CAAE,MAAA,IAAU,OAAO,CAAA,CAAE,MAAA,GAAS,OAAO,CAAA,CAAE,IAAA,KAAS,gBAAiB,MAAM,CAAA;AAC7J,QAAA,IAAI,OAAA,IAAW,SAAS,MAAM,CAAA;AAC9B,QAAA,MAAM,KAAA,CAAM,KAAK,GAAA,CAAI,GAAA,EAAQ,MAAM,CAAA,IAAK,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,UAAU,KAAA,CAAM,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,eAAe,CAAA,EAAG,KAAA,CAAM,MAAM,CAAC,CAAA,IAAK,YAAY;AAC7G,IAAA,KAAA,IAAS,CAAA,GAAI,KAAA,CAAM,KAAA,EAAM,EAAG,CAAA,KAAM,MAAA,EAAW,CAAA,GAAI,KAAA,CAAM,KAAA,EAAM,EAAG,MAAM,QAAA,CAAS,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA;AACD,EAAA,MAAM,OAAA,CAAQ,IAAI,OAAO,CAAA;AACzB,EAAA,IAAA,CAAK,QAAQ,cAAA,EAAe;AAE5B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,IAAI,CAAA,MAAO,EAAE,UAAA,EAAY,MAAA,CAAO,CAAC,CAAA,EAAG,IAAA,EAAK,CAAE,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,UAAA,GAAa,CAAA,CAAE,UAAU,CAAA;AACtI,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAkB,IAAA,EAAM,EAAE,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,CAAA,CAAE,GAAA,EAAK,QAAA,EAAU,CAAA,CAAE,QAAA,EAAU,OAAO,CAAA;AAC1G,EAAA,OAAA,EAAS,WAAW,EAAE,CAAA;AACtB,EAAA,OAAO,IAAA;AACT;AAGA,eAAsB,YAAA,CAAa,MAAgB,IAAA,EAAoD;AACrG,EAAA,MAAM,UAAU,IAAA,CAAK,OAAA,KAAY,MAAA,GAAY,cAAA,KAAmB,IAAA,CAAK,OAAA;AACrE,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,OAAA,EAAS,OAAA,CAAQ,EAAE,CAAA;AAC/B,EAAA,IAAI,CAAC,GAAA,EAAK;AACV,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC1B,EAAA,OAAA,EAAS,WAAW,EAAE,CAAA;AACtB,EAAA,MAAM,GAAA,CAAI,IAAA,EAAM,EAAE,MAAA,EAAQ,OAAA,EAAS,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,CAAA;AAC3E;AAGA,eAAsB,WAAA,CAAY,KAAa,IAAA,EAAsG;AACnJ,EAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAM,GAAA,CAAqB,IAAA,EAAM,EAAE,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,QAAA,EAAU,IAAA,CAAK,UAAU,CAAA;AACrG,EAAA,OAAO,GAAA;AACT","file":"client.cjs","sourcesContent":["// F111.2 — the browser half. Sends the file in parts DIRECTLY to the bucket using\n// URLs the site's server signed; the site's server never sees a byte. Remembers\n// finished parts so a dropped connection resumes instead of starting over.\n\nexport interface UploadProgress {\n  sentBytes: number;\n  totalBytes: number;\n  /** 0–100 */\n  percent: number;\n  /** Measured over the last ~10 s. */\n  bytesPerSecond: number;\n  /** null until there is a speed to estimate from. */\n  secondsLeft: number | null;\n  partsDone: number;\n  partsTotal: number;\n}\n\nexport interface UploadOptions {\n  /** The site's route that runs createS3Handler, e.g. \"/api/s3\". */\n  endpoint: string;\n  /** Parts in flight at once. Default 4. */\n  concurrency?: number;\n  /** Attempts per part before giving up. Default 5. */\n  retries?: number;\n  onProgress?(p: UploadProgress): void;\n  /** Aborting PAUSES: finished parts are kept and the next uploadFile on the same file resumes. */\n  signal?: AbortSignal;\n  /** Extra headers for calls to `endpoint` (e.g. a CSRF token). Cookies are sent (same-origin). */\n  headers?: Record<string, string>;\n  /** Where resume state lives. Default localStorage when present; null disables resume. */\n  storage?: Pick<Storage, \"getItem\" | \"setItem\" | \"removeItem\"> | null;\n  /** Injected for tests. */\n  fetch?: typeof fetch;\n}\n\nexport interface UploadResult { key: string; size: number }\n\nexport class UploadError extends Error {\n  constructor(message: string, readonly code: string, readonly status?: number) {\n    super(message);\n    this.name = \"UploadError\";\n  }\n}\n\ntype FileLike = Blob & { name?: string; lastModified?: number };\n\ninterface ResumeRecord { key: string; uploadId: string; partSize: number; partCount: number; parts: Record<number, string> }\n\nconst defaultStorage = () => {\n  try { return (globalThis as { localStorage?: Storage }).localStorage ?? null; } catch { return null; }\n};\n\nexport const resumeId = (endpoint: string, file: FileLike) =>\n  `broberg-s3:${endpoint}:${file.name ?? \"blob\"}:${file.size}:${file.lastModified ?? 0}`;\n\nasync function api<T>(opts: UploadOptions, body: Record<string, unknown>): Promise<T> {\n  const f = opts.fetch ?? fetch;\n  const res = await f(opts.endpoint, {\n    method: \"POST\",\n    credentials: \"same-origin\",\n    headers: { \"content-type\": \"application/json\", ...opts.headers },\n    body: JSON.stringify(body),\n    signal: opts.signal,\n  });\n  const data = (await res.json().catch(() => ({}))) as { error?: { code: string; message: string } };\n  if (!res.ok) throw new UploadError(data.error?.message ?? `upload service answered ${res.status}`, data.error?.code ?? \"http_error\", res.status);\n  return data as T;\n}\n\nconst sleep = (ms: number, signal?: AbortSignal) =>\n  new Promise<void>((resolve, reject) => {\n    const t = setTimeout(resolve, ms);\n    signal?.addEventListener(\"abort\", () => { clearTimeout(t); reject(signal.reason); }, { once: true });\n  });\n\n/** Upload `file`; resumes automatically if an earlier attempt on the same file was interrupted. */\nexport async function uploadFile(file: FileLike, opts: UploadOptions): Promise<UploadResult> {\n  const storage = opts.storage === undefined ? defaultStorage() : opts.storage;\n  const id = resumeId(opts.endpoint, file);\n  const save = (r: ResumeRecord) => { try { storage?.setItem(id, JSON.stringify(r)); } catch { /* quota: resume is best-effort, upload continues */ } };\n  const f = opts.fetch ?? fetch;\n\n  let rec: ResumeRecord | null = null;\n  const raw = storage?.getItem(id);\n  if (raw) {\n    try {\n      const old = JSON.parse(raw) as ResumeRecord;\n      // The bucket is the truth: ask which parts it actually holds.\n      const { parts } = await api<{ parts: { partNumber: number; etag: string }[] }>(opts, { action: \"list\", key: old.key, uploadId: old.uploadId });\n      rec = { ...old, parts: Object.fromEntries(parts.map((p) => [p.partNumber, p.etag])) };\n    } catch (e) {\n      if (opts.signal?.aborted) throw e;\n      storage?.removeItem(id); // expired or foreign upload: start fresh\n    }\n  }\n  if (!rec) {\n    const s = await api<{ key: string; uploadId: string; partSize: number; partCount: number }>(opts, {\n      action: \"start\", filename: file.name ?? \"file\", size: file.size, type: file.type || \"application/octet-stream\",\n    });\n    rec = { ...s, parts: {} };\n    save(rec);\n  }\n  const r = rec;\n\n  const partBytes = (n: number) => Math.min(r.partSize, file.size - (n - 1) * r.partSize);\n  let sent = Object.keys(r.parts).reduce((s, n) => s + partBytes(Number(n)), 0);\n  const samples: Array<[number, number]> = [[Date.now(), sent]];\n  const report = () => {\n    const now = Date.now();\n    samples.push([now, sent]);\n    while (samples.length > 2 && now - samples[0]![0] > 10_000) samples.shift();\n    const [t0, b0] = samples[0]!;\n    const bps = now > t0 ? ((sent - b0) * 1000) / (now - t0) : 0;\n    opts.onProgress?.({\n      sentBytes: sent, totalBytes: file.size, percent: file.size ? (sent / file.size) * 100 : 100,\n      bytesPerSecond: bps, secondsLeft: bps > 0 ? (file.size - sent) / bps : null,\n      partsDone: Object.keys(r.parts).length, partsTotal: r.partCount,\n    });\n  };\n  report();\n\n  const queue = Array.from({ length: r.partCount }, (_, i) => i + 1).filter((n) => !r.parts[n]);\n  const retries = opts.retries ?? 5;\n\n  async function sendPart(n: number) {\n    for (let attempt = 1; ; attempt++) {\n      opts.signal?.throwIfAborted(); // pause is honoured here even if a transport ignores the signal\n      try {\n        const { urls } = await api<{ urls: { partNumber: number; url: string }[] }>(opts, { action: \"sign\", key: r.key, uploadId: r.uploadId, partNumbers: [n] });\n        const start = (n - 1) * r.partSize;\n        const res = await f(urls[0]!.url, { method: \"PUT\", body: file.slice(start, start + partBytes(n)), signal: opts.signal });\n        if (!res.ok) throw new UploadError(`storage answered ${res.status} for part ${n}`, \"part_failed\", res.status);\n        const etag = res.headers.get(\"etag\");\n        if (!etag) throw new UploadError(\"the bucket did not expose the ETag header — its CORS rule needs ExposeHeaders: ETag\", \"cors_etag\", 0);\n        r.parts[n] = etag;\n        sent += partBytes(n);\n        save(r);\n        report();\n        return;\n      } catch (e) {\n        if (opts.signal?.aborted) throw e;\n        if (e instanceof UploadError && (e.code === \"cors_etag\" || (e.status !== undefined && e.status >= 400 && e.status < 500 && e.code !== \"part_failed\"))) throw e;\n        if (attempt >= retries) throw e;\n        await sleep(Math.min(30_000, 500 * 2 ** attempt), opts.signal);\n      }\n    }\n  }\n\n  const workers = Array.from({ length: Math.max(1, Math.min(opts.concurrency ?? 4, queue.length)) }, async () => {\n    for (let n = queue.shift(); n !== undefined; n = queue.shift()) await sendPart(n);\n  });\n  await Promise.all(workers);\n  opts.signal?.throwIfAborted();\n\n  const parts = Object.entries(r.parts).map(([n, etag]) => ({ partNumber: Number(n), etag })).sort((a, b) => a.partNumber - b.partNumber);\n  const done = await api<UploadResult>(opts, { action: \"complete\", key: r.key, uploadId: r.uploadId, parts });\n  storage?.removeItem(id);\n  return done;\n}\n\n/** Stop an interrupted upload for good: the bucket discards its parts and resume state is cleared. */\nexport async function cancelUpload(file: FileLike, opts: Omit<UploadOptions, \"signal\">): Promise<void> {\n  const storage = opts.storage === undefined ? defaultStorage() : opts.storage;\n  const id = resumeId(opts.endpoint, file);\n  const raw = storage?.getItem(id);\n  if (!raw) return;\n  const rec = JSON.parse(raw) as ResumeRecord;\n  storage?.removeItem(id);\n  await api(opts, { action: \"abort\", key: rec.key, uploadId: rec.uploadId });\n}\n\n/** A short-lived signed link to download `key` (which must be under your prefix). */\nexport async function downloadUrl(key: string, opts: Pick<UploadOptions, \"endpoint\" | \"headers\" | \"fetch\"> & { filename?: string }): Promise<string> {\n  const { url } = await api<{ url: string }>(opts, { action: \"download\", key, filename: opts.filename });\n  return url;\n}\n"]}

package/dist/client.d.cts

@@ -0,0 +1,53 @@
+interface UploadProgress {
+    sentBytes: number;
+    totalBytes: number;
+    /** 0–100 */
+    percent: number;
+    /** Measured over the last ~10 s. */
+    bytesPerSecond: number;
+    /** null until there is a speed to estimate from. */
+    secondsLeft: number | null;
+    partsDone: number;
+    partsTotal: number;
+}
+interface UploadOptions {
+    /** The site's route that runs createS3Handler, e.g. "/api/s3". */
+    endpoint: string;
+    /** Parts in flight at once. Default 4. */
+    concurrency?: number;
+    /** Attempts per part before giving up. Default 5. */
+    retries?: number;
+    onProgress?(p: UploadProgress): void;
+    /** Aborting PAUSES: finished parts are kept and the next uploadFile on the same file resumes. */
+    signal?: AbortSignal;
+    /** Extra headers for calls to `endpoint` (e.g. a CSRF token). Cookies are sent (same-origin). */
+    headers?: Record<string, string>;
+    /** Where resume state lives. Default localStorage when present; null disables resume. */
+    storage?: Pick<Storage, "getItem" | "setItem" | "removeItem"> | null;
+    /** Injected for tests. */
+    fetch?: typeof fetch;
+}
+interface UploadResult {
+    key: string;
+    size: number;
+}
+declare class UploadError extends Error {
+    readonly code: string;
+    readonly status?: number | undefined;
+    constructor(message: string, code: string, status?: number | undefined);
+}
+type FileLike = Blob & {
+    name?: string;
+    lastModified?: number;
+};
+declare const resumeId: (endpoint: string, file: FileLike) => string;
+/** Upload `file`; resumes automatically if an earlier attempt on the same file was interrupted. */
+declare function uploadFile(file: FileLike, opts: UploadOptions): Promise<UploadResult>;
+/** Stop an interrupted upload for good: the bucket discards its parts and resume state is cleared. */
+declare function cancelUpload(file: FileLike, opts: Omit<UploadOptions, "signal">): Promise<void>;
+/** A short-lived signed link to download `key` (which must be under your prefix). */
+declare function downloadUrl(key: string, opts: Pick<UploadOptions, "endpoint" | "headers" | "fetch"> & {
+    filename?: string;
+}): Promise<string>;
+
+export { UploadError, type UploadOptions, type UploadProgress, type UploadResult, cancelUpload, downloadUrl, resumeId, uploadFile };

package/dist/client.d.ts

@@ -0,0 +1,53 @@
+interface UploadProgress {
+    sentBytes: number;
+    totalBytes: number;
+    /** 0–100 */
+    percent: number;
+    /** Measured over the last ~10 s. */
+    bytesPerSecond: number;
+    /** null until there is a speed to estimate from. */
+    secondsLeft: number | null;
+    partsDone: number;
+    partsTotal: number;
+}
+interface UploadOptions {
+    /** The site's route that runs createS3Handler, e.g. "/api/s3". */
+    endpoint: string;
+    /** Parts in flight at once. Default 4. */
+    concurrency?: number;
+    /** Attempts per part before giving up. Default 5. */
+    retries?: number;
+    onProgress?(p: UploadProgress): void;
+    /** Aborting PAUSES: finished parts are kept and the next uploadFile on the same file resumes. */
+    signal?: AbortSignal;
+    /** Extra headers for calls to `endpoint` (e.g. a CSRF token). Cookies are sent (same-origin). */
+    headers?: Record<string, string>;
+    /** Where resume state lives. Default localStorage when present; null disables resume. */
+    storage?: Pick<Storage, "getItem" | "setItem" | "removeItem"> | null;
+    /** Injected for tests. */
+    fetch?: typeof fetch;
+}
+interface UploadResult {
+    key: string;
+    size: number;
+}
+declare class UploadError extends Error {
+    readonly code: string;
+    readonly status?: number | undefined;
+    constructor(message: string, code: string, status?: number | undefined);
+}
+type FileLike = Blob & {
+    name?: string;
+    lastModified?: number;
+};
+declare const resumeId: (endpoint: string, file: FileLike) => string;
+/** Upload `file`; resumes automatically if an earlier attempt on the same file was interrupted. */
+declare function uploadFile(file: FileLike, opts: UploadOptions): Promise<UploadResult>;
+/** Stop an interrupted upload for good: the bucket discards its parts and resume state is cleared. */
+declare function cancelUpload(file: FileLike, opts: Omit<UploadOptions, "signal">): Promise<void>;
+/** A short-lived signed link to download `key` (which must be under your prefix). */
+declare function downloadUrl(key: string, opts: Pick<UploadOptions, "endpoint" | "headers" | "fetch"> & {
+    filename?: string;
+}): Promise<string>;
+
+export { UploadError, type UploadOptions, type UploadProgress, type UploadResult, cancelUpload, downloadUrl, resumeId, uploadFile };

package/dist/client.js

@@ -0,0 +1,3 @@
+export { UploadError, cancelUpload, downloadUrl, resumeId, uploadFile } from './chunk-HBRUN65D.js';
+//# sourceMappingURL=client.js.map
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"client.js"}