@cobaltcore-dev/aurora 0.22.0 → 0.23.0

package/dist/server/index.d.ts

@@ -4,7 +4,7 @@ import * as _trpc_server from '@trpc/server';
 import { AnyRouter } from '@trpc/server';
 import * as _cobaltcore_dev_signal_openstack from '@cobaltcore-dev/signal-openstack';
 import { SignalOpenstackSessionType } from '@cobaltcore-dev/signal-openstack';
-import { ProxyConfig } from './shared-types';
+import * as _cobaltcore_dev_signal_openstack_dist_types_client from '@cobaltcore-dev/signal-openstack/dist/types/client';
 import * as fastify_types_type_provider from 'fastify/types/type-provider';
 import * as http from 'http';
 import * as zod from 'zod';
@@ -126,22 +126,6 @@ interface AuroraPortalContext extends AuroraContext {
     formFields?: FormFieldData;
 }
 
-interface RequestParams {
-    method: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | "HEAD";
-    path: string;
-    options?: {
-        host?: string;
-        headers?: Record<string, string>;
-        body?: string | object | FormData | Blob | ArrayBuffer | ReadableStream;
-        queryParams?: Record<string, string | string[] | number | boolean | null | undefined>;
-        signal?: AbortSignal;
-        debug?: boolean;
-        proxy?: ProxyConfig;
-    };
-}
-type ActionBody = NonNullable<RequestParams["options"]>["body"];
-type ActionPath = RequestParams["path"];
-
 declare const auroraRouter: _trpc_server.TRPCRouterBuilder<{
     ctx: AuroraPortalContext;
     meta: object;
@@ -179,18 +163,18 @@ declare const protectedProcedure: _trpc_server.TRPCProcedureBuilder<AuroraPortal
                 region?: string;
                 interfaceName?: string;
             }) => string | null;
-            head: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            get: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            post: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            put: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            patch: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            del: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            cancellableHead: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellableGet: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePost: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePut: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePatch: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellableDel: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            head: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            get: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            post: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            put: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            patch: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            del: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            cancellableHead: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellableGet: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePost: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePut: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePatch: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellableDel: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
         };
         hasService: (name: string) => boolean;
         terminate: () => Promise<void>;
@@ -353,18 +337,18 @@ declare const projectScopedProcedure: _trpc_server.TRPCProcedureBuilder<AuroraPo
                 region?: string;
                 interfaceName?: string;
             }) => string | null;
-            head: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            get: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            post: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            put: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            patch: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            del: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            cancellableHead: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellableGet: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePost: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePut: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePatch: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellableDel: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            head: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            get: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            post: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            put: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            patch: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            del: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            cancellableHead: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellableGet: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePost: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePut: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePatch: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellableDel: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
         };
         hasService: (name: string) => boolean;
         terminate: () => Promise<void>;
@@ -529,18 +513,18 @@ declare const domainScopedProcedure: _trpc_server.TRPCProcedureBuilder<AuroraPor
                 region?: string;
                 interfaceName?: string;
             }) => string | null;
-            head: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            get: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            post: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            put: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            patch: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            del: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
-            cancellableHead: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellableGet: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePost: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePut: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellablePatch: (path: ActionPath, values: ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
-            cancellableDel: (path: ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            head: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            get: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            post: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            put: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            patch: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            del: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => Promise<Response>;
+            cancellableHead: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellableGet: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePost: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePut: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellablePatch: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, values: _cobaltcore_dev_signal_openstack_dist_types_client.ActionBody, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
+            cancellableDel: (path: _cobaltcore_dev_signal_openstack_dist_types_client.ActionPath, options?: _cobaltcore_dev_signal_openstack.ServiceActionOptions) => _cobaltcore_dev_signal_openstack.CancellableRequest<Response>;
         };
         hasService: (name: string) => boolean;
         terminate: () => Promise<void>;
@@ -2423,6 +2407,25 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     }, void, any>;
                     meta: object;
                 }>;
+                uploadObject: _trpc_server.TRPCMutationProcedure<{
+                    input: _trpc_server_http.OctetInput;
+                    output: {
+                        success: boolean;
+                    };
+                    meta: object;
+                }>;
+                watchUploadProgress: _trpc_server.TRPCSubscriptionProcedure<{
+                    input: {
+                        project_id: string;
+                        uploadId: string;
+                    };
+                    output: AsyncIterable<{
+                        uploaded: number;
+                        total: number;
+                        percent: number;
+                    }, void, any>;
+                    meta: object;
+                }>;
             }>>;
             versioning: _trpc_server.TRPCBuiltRouter<{
                 ctx: AuroraPortalContext;

package/dist/server/index.js

@@ -6713,7 +6713,7 @@ var require_webidl = __commonJS({
 var require_util2 = __commonJS({
   "../../node_modules/.pnpm/undici@7.28.0/node_modules/undici/lib/web/fetch/util.js"(exports2, module2) {
     "use strict";
-    var { Transform: Transform3 } = require("stream");
+    var { Transform: Transform4 } = require("stream");
     var zlib = require("zlib");
     var { redirectStatusSet, referrerPolicyTokens, badPortsSet } = require_constants3();
     var { getGlobalOrigin } = require_global();
@@ -7333,7 +7333,7 @@ var require_util2 = __commonJS({
       return contentRange;
     }
     __name(buildContentRange, "buildContentRange");
-    var InflateStream = class InflateStream extends Transform3 {
+    var InflateStream = class InflateStream extends Transform4 {
       static {
         __name(this, "InflateStream");
       }
@@ -13114,7 +13114,7 @@ var require_readable = __commonJS({
   "../../node_modules/.pnpm/undici@7.28.0/node_modules/undici/lib/api/readable.js"(exports2, module2) {
     "use strict";
     var assert = require("assert");
-    var { Readable: Readable4 } = require("stream");
+    var { Readable: Readable5 } = require("stream");
     var { RequestAbortedError, NotSupportedError, InvalidArgumentError, AbortError } = require_errors();
     var util = require_util();
     var { ReadableStreamFrom } = require_util();
@@ -13128,7 +13128,7 @@ var require_readable = __commonJS({
     var kBytesRead = /* @__PURE__ */ Symbol("kBytesRead");
     var noop = /* @__PURE__ */ __name(() => {
     }, "noop");
-    var BodyReadable = class BodyReadable extends Readable4 {
+    var BodyReadable = class BodyReadable extends Readable5 {
       static {
         __name(this, "BodyReadable");
       }
@@ -13531,7 +13531,7 @@ var require_api_request = __commonJS({
     "use strict";
     var assert = require("assert");
     var { AsyncResource } = require("async_hooks");
-    var { Readable: Readable4 } = require_readable();
+    var { Readable: Readable5 } = require_readable();
     var { InvalidArgumentError, RequestAbortedError } = require_errors();
     var util = require_util();
     function noop() {
@@ -13619,7 +13619,7 @@ var require_api_request = __commonJS({
         const parsedHeaders = responseHeaders === "raw" ? util.parseHeaders(rawHeaders) : headers;
         const contentType = parsedHeaders["content-type"];
         const contentLength = parsedHeaders["content-length"];
-        const res = new Readable4({
+        const res = new Readable5({
           resume,
           abort,
           contentType,
@@ -13952,7 +13952,7 @@ var require_api_stream = __commonJS({
 var require_api_pipeline = __commonJS({
   "../../node_modules/.pnpm/undici@7.28.0/node_modules/undici/lib/api/api-pipeline.js"(exports2, module2) {
     "use strict";
-    var { Readable: Readable4, Duplex, PassThrough } = require("stream");
+    var { Readable: Readable5, Duplex, PassThrough } = require("stream");
     var assert = require("assert");
     var { AsyncResource } = require("async_hooks");
     var { InvalidArgumentError, InvalidReturnValueError, RequestAbortedError } = require_errors();
@@ -13962,7 +13962,7 @@ var require_api_pipeline = __commonJS({
     }
     __name(noop, "noop");
     var kResume = /* @__PURE__ */ Symbol("resume");
-    var PipelineRequest = class PipelineRequest extends Readable4 {
+    var PipelineRequest = class PipelineRequest extends Readable5 {
       static {
         __name(this, "PipelineRequest");
       }
@@ -13984,7 +13984,7 @@ var require_api_pipeline = __commonJS({
         callback(err);
       }
     };
-    var PipelineResponse = class PipelineResponse extends Readable4 {
+    var PipelineResponse = class PipelineResponse extends Readable5 {
       static {
         __name(this, "PipelineResponse");
       }
@@ -15419,7 +15419,7 @@ var require_mock_pool = __commonJS({
 var require_pending_interceptors_formatter = __commonJS({
   "../../node_modules/.pnpm/undici@7.28.0/node_modules/undici/lib/mock/pending-interceptors-formatter.js"(exports2, module2) {
     "use strict";
-    var { Transform: Transform3 } = require("stream");
+    var { Transform: Transform4 } = require("stream");
     var { Console } = require("console");
     var PERSISTENT = process.versions.icu ? "\u2705" : "Y ";
     var NOT_PERSISTENT = process.versions.icu ? "\u274C" : "N ";
@@ -15428,7 +15428,7 @@ var require_pending_interceptors_formatter = __commonJS({
         __name(this, "PendingInterceptorsFormatter");
       }
       constructor({ disableColors } = {}) {
-        this.transform = new Transform3({
+        this.transform = new Transform4({
           transform(chunk, _enc, cb) {
             cb(null, chunk);
           }
@@ -18840,7 +18840,7 @@ var require_cache2 = __commonJS({
   "../../node_modules/.pnpm/undici@7.28.0/node_modules/undici/lib/interceptor/cache.js"(exports2, module2) {
     "use strict";
     var assert = require("assert");
-    var { Readable: Readable4 } = require("stream");
+    var { Readable: Readable5 } = require("stream");
     var util = require_util();
     var CacheHandler = require_cache_handler();
     var MemoryCacheStore = require_memory_cache_store();
@@ -18934,7 +18934,7 @@ var require_cache2 = __commonJS({
     }
     __name(handleUncachedResponse, "handleUncachedResponse");
     function sendCachedValue(handler, opts, result, age, context, isStale2) {
-      const stream = util.isStream(result.body) ? result.body : Readable4.from(result.body ?? []);
+      const stream = util.isStream(result.body) ? result.body : Readable5.from(result.body ?? []);
       assert(!stream.destroyed, "stream should not be destroyed");
       assert(!stream.readableDidRead, "stream should not be readableDidRead");
       const controller = {
@@ -22010,7 +22010,7 @@ var require_fetch = __commonJS({
     var { safelyExtractBody, extractBody } = require_body();
     var { redirectStatusSet, nullBodyStatus, safeMethodsSet, requestBodyHeader, subresourceSet } = require_constants3();
     var EE = require("events");
-    var { Readable: Readable4, pipeline: pipeline2, finished, isErrored, isReadable } = require("stream");
+    var { Readable: Readable5, pipeline: pipeline2, finished, isErrored, isReadable } = require("stream");
     var { addAbortListener, bufferToLowerCasedHeaderName } = require_util();
     var { dataURLProcessor, serializeAMimeType, minimizeSupportedMimeType } = require_data_url();
     var { getGlobalDispatcher } = require_global2();
@@ -22963,7 +22963,7 @@ var require_fetch = __commonJS({
               }
             }
             const location = headersList.get("location", true);
-            this.body = new Readable4({
+            this.body = new Readable5({
               read: resume
             });
             const willFollow = location && request.redirect === "follow" && redirectStatusSet.has(status);
@@ -26540,7 +26540,7 @@ var require_util6 = __commonJS({
 var require_eventsource_stream = __commonJS({
   "../../node_modules/.pnpm/undici@7.28.0/node_modules/undici/lib/web/eventsource/eventsource-stream.js"(exports2, module2) {
     "use strict";
-    var { Transform: Transform3 } = require("stream");
+    var { Transform: Transform4 } = require("stream");
     var { isASCIINumber, isValidLastEventId } = require_util6();
     var BOM = [
       239,
@@ -26551,7 +26551,7 @@ var require_eventsource_stream = __commonJS({
     var CR = 13;
     var COLON = 58;
     var SPACE = 32;
-    var EventSourceStream = class EventSourceStream extends Transform3 {
+    var EventSourceStream = class EventSourceStream extends Transform4 {
       static {
         __name(this, "EventSourceStream");
       }
@@ -33548,6 +33548,45 @@ var cephProtectedProcedure = cephCredentialMiddleware.use(/* @__PURE__ */ __name
     ctx
   });
 }, "requireCredentials"));
+var cephUploadProcedure = protectedProcedure.use(/* @__PURE__ */ __name(async function resolveCephForUpload(opts) {
+  const { ctx, next } = opts;
+  const uploadProjectId = ctx.req.headers["x-upload-project-id"]?.trim();
+  if (!uploadProjectId) {
+    throw new import_server11.TRPCError({
+      code: "BAD_REQUEST",
+      message: "x-upload-project-id header is required for uploads"
+    });
+  }
+  const openstackSession = await ctx.rescopeSession({
+    projectId: uploadProjectId
+  });
+  if (!openstackSession) {
+    throw new import_server11.TRPCError({
+      code: "UNAUTHORIZED",
+      message: "Failed to scope session to project. User may not have access to this project."
+    });
+  }
+  const scopedCtx = {
+    ...ctx,
+    openstack: openstackSession
+  };
+  const credentials = await resolveEC2Credential(scopedCtx);
+  if (!credentials) {
+    throw new import_server11.TRPCError({
+      code: "FORBIDDEN",
+      message: NO_CEPH_CREDENTIALS
+    });
+  }
+  const { endpoint, region } = resolveS3Config(scopedCtx);
+  return next({
+    ctx: {
+      ...scopedCtx,
+      cephCredentials: credentials,
+      cephRegion: region,
+      getCephClient: /* @__PURE__ */ __name(() => createS3Client(credentials.access, credentials.secret, endpoint, region), "getCephClient")
+    }
+  });
+}, "resolveCephForUpload"));
 
 // src/server/Storage/helpers/s3ErrorMapper.ts
 var import_server12 = require("@trpc/server");
@@ -34073,11 +34112,20 @@ var containerRouter = {
 // src/server/Storage/routers/ceph/objectRouter.ts
 var import_client_s33 = require("@aws-sdk/client-s3");
 var import_server13 = require("@trpc/server");
+var import_http3 = require("@trpc/server/http");
+var import_node_stream3 = require("stream");
 var import_zod14 = require("zod");
 var import_node_events3 = __toESM(require("events"));
 var downloadProgressEmitter2 = new import_node_events3.default();
 downloadProgressEmitter2.setMaxListeners(0);
 var downloadProgressMap2 = /* @__PURE__ */ new Map();
+var uploadProgressEmitter3 = new import_node_events3.default();
+uploadProgressEmitter3.setMaxListeners(0);
+var uploadProgressMap2 = /* @__PURE__ */ new Map();
+var watchUploadProgressInputSchema = import_zod14.z.object({
+  project_id: import_zod14.z.string(),
+  uploadId: import_zod14.z.string()
+});
 var deleteAllObjectsInputSchema = import_zod14.z.object({
   project_id: import_zod14.z.string(),
   containerName: import_zod14.z.string().min(1),
@@ -34812,6 +34860,223 @@ var objectRouter = {
       downloadProgressEmitter2.off(`progress:${scopedDownloadId}:complete`, onComplete);
       downloadProgressEmitter2.off(`progress:${scopedDownloadId}:error`, onError);
     }
+  }),
+  // ============================================================================
+  // UPLOAD OPERATIONS
+  // ============================================================================
+  /**
+  * Upload a file to a Ceph (S3) bucket via octet-stream.
+  *
+  * Mirrors the Swift `uploadObject` implementation (see swiftRouter.ts) so the
+  * client-side UploadObjectModal / watch-progress logic can be reused
+  * unchanged, but targets S3 `PutObjectCommand` instead of a raw Swift PUT.
+  *
+  * Uses `octetInputParser` so tRPC hands us the request body as a true
+  * ReadableStream — never buffered — enabling per-chunk progress tracking via
+  * a Node.js Transform, identical to swiftRouter.uploadObject.
+  *
+  * Metadata travels as custom request headers (the tRPC input is the raw file):
+  *   - x-upload-project-id (string, required) — project id, used to scope the
+  *                                              progress key so cross-tenant
+  *                                              observation is impossible
+  *   - x-upload-container  (string, required) — target bucket name
+  *   - x-upload-object     (string, required) — full object key, e.g. "folder/file.txt"
+  *   - x-upload-type       (string, optional) — MIME type detected client-side
+  *   - x-upload-size       (string, required) — file size in bytes; S3 PutObject
+  *                                              with a streaming Body needs a
+  *                                              ContentLength
+  *   - x-upload-id         (string, required) — client-computed id for watchUploadProgress
+  *
+  * The client computes `uploadId` as "<bucket>:<objectKey>:<uuid>" before
+  * calling this mutation so the subscription can be opened in advance. The
+  * UUID suffix keeps concurrent uploads of the same key from colliding in the
+  * progress map; the id is further scoped with the project id on the BFF.
+  *
+  * Uses `cephUploadProcedure` (not `cephProtectedProcedure`): octetInputParser
+  * can't chain onto the project-scoped procedure's bundled input, so uploads
+  * run on a base procedure that rescopes from `x-upload-project-id` and still
+  * provides `getCephClient`. See cephProcedure.ts.
+  */
+  uploadObject: cephUploadProcedure.input(import_http3.octetInputParser).mutation(async ({ input, ctx }) => {
+    const s3 = ctx.getCephClient();
+    const headers = ctx.req.headers;
+    const projectId = headers["x-upload-project-id"]?.trim();
+    const bucket = headers["x-upload-container"]?.trim();
+    const objectKey = headers["x-upload-object"]?.trim();
+    const contentType = headers["x-upload-type"];
+    const fileSizeHeader = headers["x-upload-size"];
+    const uploadId = headers["x-upload-id"]?.trim();
+    if (!projectId) {
+      throw new import_server13.TRPCError({
+        code: "BAD_REQUEST",
+        message: "x-upload-project-id header is required"
+      });
+    }
+    if (!bucket) {
+      throw new import_server13.TRPCError({
+        code: "BAD_REQUEST",
+        message: "x-upload-container header is required"
+      });
+    }
+    if (!objectKey) {
+      throw new import_server13.TRPCError({
+        code: "BAD_REQUEST",
+        message: "x-upload-object header is required"
+      });
+    }
+    if (!uploadId) {
+      throw new import_server13.TRPCError({
+        code: "BAD_REQUEST",
+        message: "x-upload-id header is required"
+      });
+    }
+    const fileSize = Number(fileSizeHeader);
+    if (!Number.isFinite(fileSize) || fileSize < 0) {
+      throw new import_server13.TRPCError({
+        code: "BAD_REQUEST",
+        message: "x-upload-size header must be a non-negative number"
+      });
+    }
+    const scopedUploadId = `${projectId}:${uploadId}`;
+    uploadProgressMap2.set(scopedUploadId, {
+      uploaded: 0,
+      total: fileSize,
+      percent: 0
+    });
+    try {
+      const progress = uploadProgressMap2.get(scopedUploadId);
+      const fileStream = import_node_stream3.Readable.fromWeb(input);
+      const progressTracker = new import_node_stream3.Transform({
+        async transform(chunk, _encoding, callback) {
+          progress.uploaded += chunk.length;
+          progress.percent = progress.total > 0 ? Math.round(progress.uploaded / progress.total * 100) : 0;
+          uploadProgressEmitter3.emit(`progress:${scopedUploadId}`, {
+            ...progress
+          });
+          await new Promise((resolve) => setImmediate(resolve));
+          callback(null, chunk);
+        }
+      });
+      const isAbortLike = /* @__PURE__ */ __name((err) => {
+        const code = err?.code;
+        return code === "ECONNRESET" || code === "ECONNABORTED" || !!ctx.req.signal?.aborted;
+      }, "isAbortLike");
+      fileStream.on("error", (err) => {
+        if (isAbortLike(err)) return;
+        progressTracker.destroy(err);
+      });
+      const trackedStream = fileStream.pipe(progressTracker);
+      await s3.send(new import_client_s33.PutObjectCommand({
+        Bucket: bucket,
+        Key: objectKey,
+        Body: trackedStream,
+        ContentLength: fileSize,
+        ContentType: contentType || "application/octet-stream"
+      }), {
+        abortSignal: ctx.req.signal
+      });
+      uploadProgressEmitter3.emit(`progress:${scopedUploadId}:complete`);
+      return {
+        success: true
+      };
+    } catch (error) {
+      try {
+        mapS3ErrorToTRPCError(error, {
+          operation: "upload object",
+          bucket,
+          key: objectKey
+        });
+      } catch (mappedError) {
+        if (!ctx.req.signal?.aborted) {
+          uploadProgressEmitter3.emit(`progress:${scopedUploadId}:error`, mappedError);
+        }
+        throw mappedError;
+      }
+      throw error;
+    } finally {
+      uploadProgressMap2.delete(scopedUploadId);
+    }
+  }),
+  /**
+  * Subscribe to real-time upload progress for a given `uploadId`.
+  *
+  * Mirrors `watchDownloadProgress`. The `uploadId` is computed client-side as
+  * "<bucket>:<objectKey>:<uuid>" and passed to `uploadObject` before the
+  * mutation starts, so this subscription can be opened in advance. Yields
+  * `{ uploaded, total, percent }` as bytes flow through the server; completes
+  * when the upload finishes or throws on a non-abort error.
+  */
+  watchUploadProgress: cephProtectedProcedure.input(watchUploadProgressInputSchema).subscription(async function* ({ input }) {
+    const { project_id, uploadId } = input;
+    const scopedUploadId = `${project_id}:${uploadId}`;
+    const current = uploadProgressMap2.get(scopedUploadId);
+    if (current) {
+      yield {
+        ...current
+      };
+    }
+    const queue = [];
+    let isComplete = false;
+    let isError = false;
+    let caughtError;
+    let waitResolver = null;
+    const onProgress = /* @__PURE__ */ __name((data) => {
+      queue.push(data);
+      waitResolver?.();
+      waitResolver = null;
+    }, "onProgress");
+    const onComplete = /* @__PURE__ */ __name(() => {
+      isComplete = true;
+      waitResolver?.();
+      waitResolver = null;
+    }, "onComplete");
+    const onError = /* @__PURE__ */ __name((err) => {
+      isError = true;
+      caughtError = err instanceof Error ? err : new Error(String(err));
+      waitResolver?.();
+      waitResolver = null;
+    }, "onError");
+    uploadProgressEmitter3.on(`progress:${scopedUploadId}`, onProgress);
+    uploadProgressEmitter3.on(`progress:${scopedUploadId}:complete`, onComplete);
+    uploadProgressEmitter3.on(`progress:${scopedUploadId}:error`, onError);
+    try {
+      while (!isComplete && !isError) {
+        while (queue.length > 0) {
+          yield {
+            ...queue.shift()
+          };
+        }
+        if (!isComplete && !isError) {
+          let timeoutId;
+          const timeout = new Promise((resolve) => {
+            timeoutId = setTimeout(resolve, 3e4);
+          });
+          try {
+            await Promise.race([
+              new Promise((resolve) => {
+                waitResolver = resolve;
+              }),
+              timeout
+            ]);
+          } finally {
+            if (timeoutId) clearTimeout(timeoutId);
+          }
+          if (!isComplete && !isError && queue.length === 0) break;
+        }
+      }
+      while (queue.length > 0) {
+        yield {
+          ...queue.shift()
+        };
+      }
+      if (isError && caughtError) {
+        throw caughtError;
+      }
+    } finally {
+      uploadProgressEmitter3.off(`progress:${scopedUploadId}`, onProgress);
+      uploadProgressEmitter3.off(`progress:${scopedUploadId}:complete`, onComplete);
+      uploadProgressEmitter3.off(`progress:${scopedUploadId}:error`, onError);
+    }
   })
 };
 
@@ -38120,7 +38385,7 @@ __name(createContext, "createContext");
 
 // src/server/server.ts
 var import_path2 = __toESM(require("path"));
-var import_node_stream3 = require("stream");
+var import_node_stream4 = require("stream");
 var import_zod26 = require("zod");
 
 // src/server/aurora-fastify-plugins/csrfProtection.ts
@@ -38272,7 +38537,7 @@ async function createServer(config) {
           message: "Glance service unavailable"
         });
       }
-      const webStream = import_node_stream3.Readable.toWeb(data.file);
+      const webStream = import_node_stream4.Readable.toWeb(data.file);
       await glance.put(`v2/images/${imageId}/file`, webStream, {
         headers: {
           Accept: "application/json",
@@ -38327,7 +38592,19 @@ async function createServer(config) {
     }
   });
   server.register(import_helmet.default, {
-    contentSecurityPolicy: isProduction ? void 0 : false
+    contentSecurityPolicy: isProduction ? {
+      directives: {
+        ...import_helmet.default.contentSecurityPolicy.getDefaultDirectives(),
+        // The object-download worker is bundled inline (Vite's ?worker&inline)
+        // and so is started from a blob: URL. Helmet's defaults don't set
+        // worker-src at all, which makes the browser fall back to
+        // script-src 'self' — blocking blob: and the worker with it.
+        "worker-src": [
+          "'self'",
+          "blob:"
+        ]
+      }
+    } : false
   });
   if (isProduction) {
     await server.register(import_static.default, {