@divyacon/piece-google-cloud-storage 0.0.0-stage → 0.1.1

package/dist/lib/triggers/object-updated.js

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.objectUpdated = void 0;
+const tslib_1 = require("tslib");
+// Vendored from Activepieces packages/pieces/community/google-cloud-storage/src/lib/triggers/object-updated.ts (MIT).
+// Generated by packages/scripts/vendor-ap.mjs - do not edit by hand.
+const pieces_framework_1 = require("@agnocon/pieces-framework");
+const auth_1 = require("../common/auth");
+const client_1 = require("../common/client");
+const props_1 = require("../common/props");
+const pieces_common_1 = require("@agnocon/pieces-common");
+exports.objectUpdated = (0, pieces_framework_1.createTrigger)({
+    auth: auth_1.googleCloudStorageAuth,
+    name: 'object_updated',
+    displayName: 'Object Updated',
+    description: 'Triggers when an existing object is updated in a bucket',
+    aiMetadata: {
+        description: 'Fires when the metadata of an existing object in the configured bucket is updated, optionally limited to objects whose name starts with a given prefix. Represents a change to an existing file\'s metadata; delivered via a Cloud Pub/Sub push notification (OBJECT_METADATA_UPDATE event).',
+    },
+    props: {
+        projectId: props_1.projectIdProperty,
+        bucket: props_1.bucketDropdown,
+        prefix: pieces_framework_1.Property.ShortText({
+            displayName: 'Prefix Filter',
+            description: 'Only trigger for objects with this prefix',
+            required: false,
+        }),
+    },
+    type: pieces_framework_1.TriggerStrategy.WEBHOOK,
+    sampleData: {
+        kind: 'storage#object',
+        id: 'example-bucket/example-object/1234567890',
+        name: 'example-object.txt',
+        bucket: 'example-bucket',
+        generation: '1234567890',
+        contentType: 'text/plain',
+        timeCreated: '2023-01-01T00:00:00.000Z',
+        updated: '2023-01-01T01:00:00.000Z',
+        size: '2048',
+    },
+    onEnable: (context) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        const { projectId, bucket, prefix } = context.propsValue;
+        const auth = context.auth;
+        // Generate unique names for this trigger instance
+        const triggerId = `ap-gcs-update-${bucket}-${Date.now()}`;
+        const topicName = `projects/${projectId}/topics/${triggerId}`;
+        const subscriptionName = `projects/${projectId}/subscriptions/${triggerId}`;
+        try {
+            // 1. Create Pub/Sub topic
+            yield client_1.gcsCommon.makePubSubRequest(pieces_common_1.HttpMethod.PUT, `/projects/${projectId}/topics/${triggerId}`, auth.access_token);
+            // 2. Create GCS notification configuration for metadata updates
+            const notificationConfig = {
+                topic: topicName,
+                payload_format: 'JSON_API_V1',
+                event_types: ['OBJECT_METADATA_UPDATE'],
+            };
+            if (prefix) {
+                notificationConfig.object_name_prefix = prefix;
+            }
+            const notificationResponse = yield client_1.gcsCommon.makeGCSRequest(pieces_common_1.HttpMethod.POST, `/b/${bucket}/notificationConfigs`, auth.access_token, notificationConfig);
+            // 3. Create Pub/Sub subscription with webhook push
+            const subscriptionConfig = {
+                topic: topicName,
+                pushConfig: {
+                    pushEndpoint: context.webhookUrl,
+                },
+                ackDeadlineSeconds: 60,
+            };
+            yield client_1.gcsCommon.makePubSubRequest(pieces_common_1.HttpMethod.PUT, `/projects/${projectId}/subscriptions/${triggerId}`, auth.access_token, subscriptionConfig);
+            // Store trigger data for cleanup
+            yield context.store.put('_trigger', {
+                topicName: triggerId,
+                subscriptionName: triggerId,
+                notificationId: notificationResponse.id,
+            });
+        }
+        catch (error) {
+            // Cleanup on failure
+            try {
+                yield client_1.gcsCommon.makePubSubRequest(pieces_common_1.HttpMethod.DELETE, `/projects/${projectId}/subscriptions/${triggerId}`, auth.access_token);
+            }
+            catch (e) { /* ignore */ }
+            try {
+                yield client_1.gcsCommon.makePubSubRequest(pieces_common_1.HttpMethod.DELETE, `/projects/${projectId}/topics/${triggerId}`, auth.access_token);
+            }
+            catch (e) { /* ignore */ }
+            throw new Error(`Failed to setup Pub/Sub notifications: ${(error === null || error === void 0 ? void 0 : error.message) || 'Unknown error'}`);
+        }
+    }),
+    onDisable: (context) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        const triggerData = yield context.store.get('_trigger');
+        if (!triggerData)
+            return;
+        const { projectId } = context.propsValue;
+        const { bucket } = context.propsValue;
+        const auth = context.auth;
+        // Clean up in reverse order
+        try {
+            // Delete subscription
+            yield client_1.gcsCommon.makePubSubRequest(pieces_common_1.HttpMethod.DELETE, `/projects/${projectId}/subscriptions/${triggerData.subscriptionName}`, auth.access_token);
+        }
+        catch (e) { /* ignore */ }
+        try {
+            // Delete notification config
+            yield client_1.gcsCommon.makeGCSRequest(pieces_common_1.HttpMethod.DELETE, `/b/${bucket}/notificationConfigs/${triggerData.notificationId}`, auth.access_token);
+        }
+        catch (e) { /* ignore */ }
+        try {
+            // Delete topic
+            yield client_1.gcsCommon.makePubSubRequest(pieces_common_1.HttpMethod.DELETE, `/projects/${projectId}/topics/${triggerData.topicName}`, auth.access_token);
+        }
+        catch (e) { /* ignore */ }
+    }),
+    run: (context) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        var _a;
+        const payload = context.payload.body;
+        if (!((_a = payload === null || payload === void 0 ? void 0 : payload.message) === null || _a === void 0 ? void 0 : _a.data)) {
+            return [];
+        }
+        // Decode Pub/Sub message
+        const messageData = JSON.parse(Buffer.from(payload.message.data, 'base64').toString());
+        // Extract GCS object from notification payload
+        const gcsObject = messageData;
+        return [gcsObject];
+    }),
+});
+//# sourceMappingURL=object-updated.js.map

package/dist/lib/triggers/object-updated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-updated.js","sourceRoot":"","sources":["../../../src/lib/triggers/object-updated.ts"],"names":[],"mappings":";;;;AAAA,sHAAsH;AACtH,qEAAqE;AACrE,gEAAqF;AACrF,yCAAwD;AACxD,6CAA6C;AAC7C,2CAAoE;AACpE,0DAAoD;AAQvC,QAAA,aAAa,GAAG,IAAA,gCAAa,EAAC;IACzC,IAAI,EAAE,6BAAsB;IAC5B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,gBAAgB;IAC7B,WAAW,EAAE,yDAAyD;IACtE,UAAU,EAAE;QACV,WAAW,EAAE,8RAA8R;KAC5S;IACD,KAAK,EAAE;QACL,SAAS,EAAE,yBAAiB;QAC5B,MAAM,EAAE,sBAAc;QACtB,MAAM,EAAE,2BAAQ,CAAC,SAAS,CAAC;YACzB,WAAW,EAAE,eAAe;YAC5B,WAAW,EAAE,2CAA2C;YACxD,QAAQ,EAAE,KAAK;SAChB,CAAC;KACH;IACD,IAAI,EAAE,kCAAe,CAAC,OAAO;IAC7B,UAAU,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,0CAA0C;QAC9C,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,gBAAgB;QACxB,UAAU,EAAE,YAAY;QACxB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,MAAM;KACb;IACD,QAAQ,EAAE,CAAO,OAAO,EAAE,EAAE;QAC1B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,kDAAkD;QAClD,MAAM,SAAS,GAAG,iBAAiB,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,YAAY,SAAS,WAAW,SAAS,EAAE,CAAC;QAC9D,MAAM,gBAAgB,GAAG,YAAY,SAAS,kBAAkB,SAAS,EAAE,CAAC;QAE5E,IAAI,CAAC;YACH,0BAA0B;YAC1B,MAAM,kBAAS,CAAC,iBAAiB,CAC/B,0BAAU,CAAC,GAAG,EACd,aAAa,SAAS,WAAW,SAAS,EAAE,EAC5C,IAAI,CAAC,YAAY,CAClB,CAAC;YAEF,gEAAgE;YAChE,MAAM,kBAAkB,GAAQ;gBAC9B,KAAK,EAAE,SAAS;gBAChB,cAAc,EAAE,aAAa;gBAC7B,WAAW,EAAE,CAAC,wBAAwB,CAAC;aACxC,CAAC;YAEF,IAAI,MAAM,EAAE,CAAC;gBACX,kBAAkB,CAAC,kBAAkB,GAAG,MAAM,CAAC;YACjD,CAAC;YAED,MAAM,oBAAoB,GAAG,MAAM,kBAAS,CAAC,cAAc,CACzD,0BAAU,CAAC,IAAI,EACf,MAAM,MAAM,sBAAsB,EAClC,IAAI,CAAC,YAAY,EACjB,kBAAkB,CACnB,CAAC;YAEF,mDAAmD;YACnD,MAAM,kBAAkB,GAAG;gBACzB,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE;oBACV,YAAY,EAAE,OAAO,CAAC,UAAU;iBACjC;gBACD,kBAAkB,EAAE,EAAE;aACvB,CAAC;YAEF,MAAM,kBAAS,CAAC,iBAAiB,CAC/B,0BAAU,CAAC,GAAG,EACd,aAAa,SAAS,kBAAkB,SAAS,EAAE,EACnD,IAAI,CAAC,YAAY,EACjB,kBAAkB,CACnB,CAAC;YAEF,iCAAiC;YACjC,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAc,UAAU,EAAE;gBAC/C,SAAS,EAAE,SAAS;gBACpB,gBAAgB,EAAE,SAAS;gBAC3B,cAAc,EAAE,oBAAoB,CAAC,EAAE;aACxC,CAAC,CAAC;QAEL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qBAAqB;YACrB,IAAI,CAAC;gBACH,MAAM,kBAAS,CAAC,iBAAiB,CAC/B,0BAAU,CAAC,MAAM,EACjB,aAAa,SAAS,kBAAkB,SAAS,EAAE,EACnD,IAAI,CAAC,YAAY,CAClB,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAE5B,IAAI,CAAC;gBACH,MAAM,kBAAS,CAAC,iBAAiB,CAC/B,0BAAU,CAAC,MAAM,EACjB,aAAa,SAAS,WAAW,SAAS,EAAE,EAC5C,IAAI,CAAC,YAAY,CAClB,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAE5B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,KAAa,aAAb,KAAK,uBAAL,KAAK,CAAU,OAAO,KAAI,eAAe,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAA;IACD,SAAS,EAAE,CAAO,OAAO,EAAE,EAAE;QAC3B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAc,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,4BAA4B;QAC5B,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,kBAAS,CAAC,iBAAiB,CAC/B,0BAAU,CAAC,MAAM,EACjB,aAAa,SAAS,kBAAkB,WAAW,CAAC,gBAAgB,EAAE,EACtE,IAAI,CAAC,YAAY,CAClB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAE5B,IAAI,CAAC;YACH,6BAA6B;YAC7B,MAAM,kBAAS,CAAC,cAAc,CAC5B,0BAAU,CAAC,MAAM,EACjB,MAAM,MAAM,wBAAwB,WAAW,CAAC,cAAc,EAAE,EAChE,IAAI,CAAC,YAAY,CAClB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAE5B,IAAI,CAAC;YACH,eAAe;YACf,MAAM,kBAAS,CAAC,iBAAiB,CAC/B,0BAAU,CAAC,MAAM,EACjB,aAAa,SAAS,WAAW,WAAW,CAAC,SAAS,EAAE,EACxD,IAAI,CAAC,YAAY,CAClB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC,CAAA;IACD,GAAG,EAAE,CAAO,OAAO,EAAE,EAAE;;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAW,CAAC;QAE5C,IAAI,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,0CAAE,IAAI,CAAA,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CACvD,CAAC;QAEF,+CAA+C;QAC/C,MAAM,SAAS,GAAG,WAAW,CAAC;QAE9B,OAAO,CAAC,SAAS,CAAC,CAAC;IACrB,CAAC,CAAA;CACF,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,46 @@
 {
   "name": "@divyacon/piece-google-cloud-storage",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "DivyaCon google-cloud-storage connector",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "LICENSE.MIT-AP"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "vendor": "node ../scripts/vendor-ap.mjs piece-google-cloud-storage"
+  },
+  "dependencies": {
+    "@agnocon/core-utils": "0.2.0",
+    "@agnocon/piece-types": "0.3.1",
+    "@agnocon/pieces-common": "0.12.8",
+    "@agnocon/pieces-framework": "0.36.0",
+    "tslib": "2.6.2"
+  },
+  "devDependencies": {
+    "@types/node": "20.17.6",
+    "typescript": "5.5.4"
+  },
+  "license": "MIT",
+  "agnocon": {
+    "originVersion": "0.1.7"
+  },
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "keywords": [
+    "agnocon",
+    "connector"
+  ]
+}

package/src/index.ts

@@ -0,0 +1,46 @@
+
+import { createPiece } from "@agnocon/pieces-framework";
+import { PieceCategory } from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from "./lib/common/auth";
+import { createBucket } from "./lib/actions/create-bucket";
+import { deleteEmptyBucket } from "./lib/actions/delete-empty-bucket";
+import { cloneObject } from "./lib/actions/clone-object";
+import { deleteObject } from "./lib/actions/delete-object";
+import { searchObjects } from "./lib/actions/search-objects";
+import { searchBuckets } from "./lib/actions/search-buckets";
+import { createObjectAcl } from "./lib/actions/create-object-acl";
+import { deleteObjectAcl } from "./lib/actions/delete-object-acl";
+import { createBucketAcl } from "./lib/actions/create-bucket-acl";
+import { deleteBucketAcl } from "./lib/actions/delete-bucket-acl";
+import { createBucketDefaultObjectAcl } from "./lib/actions/create-bucket-default-object-acl";
+import { deleteBucketDefaultObjectAcl } from "./lib/actions/delete-bucket-default-object-acl";
+import { newObjectCreated } from "./lib/triggers/new-object-created";
+import { objectUpdated } from "./lib/triggers/object-updated";
+
+export const googleCloudStorage = createPiece({
+  displayName: "Google Cloud Storage",
+  description: "Automate file storage operations with Google Cloud Storage. Upload, download, manage buckets, set permissions, and monitor changes with real-time triggers.",
+  auth: googleCloudStorageAuth,
+  minimumSupportedRelease: '0.36.1',
+  logoUrl: "https://cdn.activepieces.com/pieces/google-cloud-storage.png",
+  authors: ["sparkybug"],
+  categories: [PieceCategory.CONTENT_AND_FILES],
+  actions: [
+    createBucket,
+    deleteEmptyBucket,
+    cloneObject,
+    deleteObject,
+    searchObjects,
+    searchBuckets,
+    createObjectAcl,
+    deleteObjectAcl,
+    createBucketAcl,
+    deleteBucketAcl,
+    createBucketDefaultObjectAcl,
+    deleteBucketDefaultObjectAcl,
+  ],
+  triggers: [
+    newObjectCreated,
+    objectUpdated,
+  ],
+});

package/src/lib/actions/clone-object.ts

@@ -0,0 +1,75 @@
+import { createAction, Property, OAuth2PropertyValue } from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from '../common/auth';
+import { gcsCommon } from '../common/client';
+import { bucketDropdown, objectDropdown, projectIdProperty } from '../common/props';
+import { HttpMethod } from '@agnocon/pieces-common';
+
+export const cloneObject = createAction({
+  auth: googleCloudStorageAuth,
+  name: 'clone_object',
+  displayName: 'Clone Object',
+  description: 'Copy / clone an object (file) to a new location (same or different bucket), optionally overriding metadata. Perfect for duplicating files as backup or version.',
+  audience: 'both',
+  aiMetadata: { description: 'Copies an existing object to a destination bucket/name (same or different bucket), optionally overriding metadata such as contentType or cacheControl. Use to duplicate a file for backups or to move data between buckets. Not idempotent: it writes a new destination object on each call, creating a fresh generation. Requires the source bucket/object and a destination bucket and object name.', idempotent: false },
+  props: {
+    projectId: projectIdProperty,
+    sourceBucket: bucketDropdown,
+    sourceObject: objectDropdown('sourceBucket'),
+    destBucket: bucketDropdown,
+    destObject: Property.ShortText({
+      displayName: 'Destination Object Name',
+      description: 'Name for the copied object (must be valid object name)',
+      required: true,
+    }),
+    metadataOverrides: Property.Object({
+      displayName: 'Metadata Overrides',
+      description: 'Optional metadata and properties to override in the copied object (contentType, cacheControl, contentDisposition, etc.)',
+      required: false,
+    }),
+  },
+  async run(context) {
+    const { sourceBucket, sourceObject, destBucket, destObject, metadataOverrides } = context.propsValue;
+    const auth = context.auth as OAuth2PropertyValue;
+
+    const body = metadataOverrides || undefined;
+    
+    try {
+      const response = await gcsCommon.makeRequest(
+        HttpMethod.POST,
+        `/b/${sourceBucket}/o/${encodeURIComponent(sourceObject as string)}/copyTo/b/${destBucket}/o/${encodeURIComponent(destObject as string)}`,
+        auth.access_token,
+        body
+      );
+
+      return {
+        success: true,
+        source: {
+          bucket: sourceBucket,
+          object: sourceObject,
+        },
+        destination: {
+          bucket: destBucket,
+          object: destObject,
+        },
+        object: response,
+      };
+    } catch (error: any) {
+      if (error.response?.status === 404) {
+        throw new Error(`Source object "${sourceObject}" not found in bucket "${sourceBucket}".`);
+      }
+      if (error.response?.status === 403) {
+        throw new Error('Access denied. Check permissions for source and destination buckets.');
+      }
+      if (error.response?.status === 412) {
+        throw new Error('Precondition failed. Source object may have been modified.');
+      }
+      if (error.response?.status === 409) {
+        throw new Error(`Destination object "${destObject}" already exists in bucket "${destBucket}".`);
+      }
+      if (error.response?.status === 400) {
+        throw new Error('Invalid request. Check object names and bucket configurations.');
+      }
+      throw new Error(`Failed to clone object: ${error.message || 'Unknown error'}`);
+    }
+  },
+});

package/src/lib/actions/create-bucket-acl.ts

@@ -0,0 +1,58 @@
+import { createAction, OAuth2PropertyValue } from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from '../common/auth';
+import { gcsCommon } from '../common/client';
+import { bucketDropdown, aclEntityProperty, bucketAclRoleProperty, projectIdProperty } from '../common/props';
+import { HttpMethod } from '@agnocon/pieces-common';
+
+export const createBucketAcl = createAction({
+  auth: googleCloudStorageAuth,
+  name: 'create_bucket_acl',
+  displayName: 'Create Bucket ACL',
+  description: 'Add an ACL entry at bucket level. Perfect for granting permission to manage the bucket.',
+  audience: 'both',
+  aiMetadata: { description: 'Grants an entity (user, group, domain, or special scope) a role on a bucket\'s own access-control list. Use to let someone read or manage the bucket itself. Not idempotent: adding an entry that already exists fails. Only works on buckets using fine-grained ACLs, not uniform bucket-level access; requires bucket, entity, and role.', idempotent: false },
+  props: {
+    projectId: projectIdProperty,
+    bucket: bucketDropdown,
+    entity: aclEntityProperty,
+    role: bucketAclRoleProperty,
+  },
+  async run(context) {
+    const { bucket, entity, role } = context.propsValue;
+    const auth = context.auth as OAuth2PropertyValue;
+
+    const aclEntry = {
+      entity,
+      role,
+    };
+
+    try {
+      const response = await gcsCommon.makeRequest(
+        HttpMethod.POST,
+        `/b/${bucket}/acl`,
+        auth.access_token,
+        aclEntry
+      );
+
+      return {
+        success: true,
+        bucket,
+        acl: response,
+      };
+    } catch (error: any) {
+      if (error.response?.status === 400) {
+        throw new Error('Bad request. This bucket may have uniform bucket-level access enabled, which doesn\'t support bucket ACLs. Use IAM policies instead.');
+      }
+      if (error.response?.status === 403) {
+        throw new Error('Access denied. You need storage.buckets.update permission to modify bucket ACLs.');
+      }
+      if (error.response?.status === 404) {
+        throw new Error(`Bucket "${bucket}" not found.`);
+      }
+      if (error.response?.status === 409) {
+        throw new Error(`ACL entry for entity "${entity}" already exists on bucket "${bucket}".`);
+      }
+      throw new Error(`Failed to create bucket ACL: ${error.message || 'Unknown error'}`);
+    }
+  },
+});

package/src/lib/actions/create-bucket-default-object-acl.ts

@@ -0,0 +1,58 @@
+import { createAction, OAuth2PropertyValue } from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from '../common/auth';
+import { gcsCommon } from '../common/client';
+import { bucketDropdown, aclEntityProperty, objectAclRoleProperty, projectIdProperty } from '../common/props';
+import { HttpMethod } from '@agnocon/pieces-common';
+
+export const createBucketDefaultObjectAcl = createAction({
+  auth: googleCloudStorageAuth,
+  name: 'create_bucket_default_object_acl',
+  displayName: 'Create Bucket Default Object ACL',
+  description: 'Set default ACLs for new objects added to a bucket. Perfect for automatically assigning permissions to new uploads.',
+  audience: 'both',
+  aiMetadata: { description: 'Adds an entry to a bucket\'s default object ACL, which is applied automatically to objects later uploaded without their own ACL. Use to pre-set permissions for future uploads. Not idempotent: adding an entry that already exists fails, and it does not affect existing objects. Only works on buckets using fine-grained ACLs, not uniform bucket-level access; requires bucket, entity, and role.', idempotent: false },
+  props: {
+    projectId: projectIdProperty,
+    bucket: bucketDropdown,
+    entity: aclEntityProperty,
+    role: objectAclRoleProperty,
+  },
+  async run(context) {
+    const { bucket, entity, role } = context.propsValue;
+    const auth = context.auth as OAuth2PropertyValue;
+
+    const aclEntry = {
+      entity,
+      role,
+    };
+
+    try {
+      const response = await gcsCommon.makeRequest(
+        HttpMethod.POST,
+        `/b/${bucket}/defaultObjectAcl`,
+        auth.access_token,
+        aclEntry
+      );
+
+      return {
+        success: true,
+        bucket,
+        acl: response,
+      };
+    } catch (error: any) {
+      if (error.response?.status === 400) {
+        throw new Error('Bad request. This bucket may have uniform bucket-level access enabled, which doesn\'t support default object ACLs. Use IAM policies instead.');
+      }
+      if (error.response?.status === 403) {
+        throw new Error('Access denied. You need storage.buckets.update permission to modify bucket default object ACLs.');
+      }
+      if (error.response?.status === 404) {
+        throw new Error(`Bucket "${bucket}" not found.`);
+      }
+      if (error.response?.status === 409) {
+        throw new Error(`Default object ACL entry for entity "${entity}" already exists on bucket "${bucket}".`);
+      }
+      throw new Error(`Failed to create bucket default object ACL: ${error.message || 'Unknown error'}`);
+    }
+  },
+});

package/src/lib/actions/create-bucket.ts

@@ -0,0 +1,75 @@
+import { createAction, Property, OAuth2PropertyValue } from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from '../common/auth';
+import { gcsCommon } from '../common/client';
+import { projectIdProperty, bucketNameProperty, locationProperty, storageClassProperty } from '../common/props';
+import { HttpMethod } from '@agnocon/pieces-common';
+
+export const createBucket = createAction({
+  auth: googleCloudStorageAuth,
+  name: 'create_bucket',
+  displayName: 'Create Bucket',
+  description: 'Create a new bucket in a specified location/configuration. Perfect for automating storage provisioning for new projects.',
+  audience: 'both',
+  aiMetadata: { description: 'Creates a new Cloud Storage bucket in the given project, with optional location, storage class, versioning, uniform bucket-level access, and labels. Use to provision storage before uploading objects. Not idempotent: bucket names are globally unique, so re-running with the same name fails. Requires a project ID and a globally-unique bucket name.', idempotent: false },
+  props: {
+    projectId: projectIdProperty,
+    name: bucketNameProperty,
+    location: locationProperty,
+    storageClass: storageClassProperty,
+    versioning: Property.Checkbox({
+      displayName: 'Enable Versioning',
+      required: false,
+    }),
+    uniformBucketLevelAccess: Property.Checkbox({
+      displayName: 'Uniform Bucket Level Access',
+      required: false,
+    }),
+    labels: Property.Object({
+      displayName: 'Labels',
+      description: 'Key-value pairs for bucket labels',
+      required: false,
+    }),
+  },
+  async run(context) {
+    const { projectId, name, location, storageClass, versioning, uniformBucketLevelAccess, labels } = context.propsValue;
+    const auth = context.auth as OAuth2PropertyValue;
+
+    const bucketConfig: any = {
+      name,
+      location: location || 'US',
+      storageClass: storageClass || 'STANDARD',
+    };
+
+    if (versioning) {
+      bucketConfig.versioning = { enabled: true };
+    }
+
+    if (uniformBucketLevelAccess !== undefined) {
+      bucketConfig.iamConfiguration = {
+        uniformBucketLevelAccess: {
+          enabled: uniformBucketLevelAccess,
+        },
+      };
+    }
+
+    if (labels) {
+      bucketConfig.labels = labels;
+    }
+
+    try {
+      const response = await gcsCommon.makeRequest(HttpMethod.POST, `/b?project=${projectId}`, auth.access_token, bucketConfig);
+      return response;
+    } catch (error: any) {
+      if (error.response?.status === 409) {
+        throw new Error(`Bucket "${name}" already exists. Bucket names must be globally unique.`);
+      }
+      if (error.response?.status === 403) {
+        throw new Error('Access denied. Check your permissions for the selected project.');
+      }
+      if (error.response?.status === 400) {
+        throw new Error('Invalid bucket configuration. Check bucket name format and project settings.');
+      }
+      throw new Error(`Failed to create bucket: ${error.message || 'Unknown error'}`);
+    }
+  },
+});

package/src/lib/actions/create-object-acl.ts

@@ -0,0 +1,81 @@
+import {
+  createAction,
+  Property,
+  OAuth2PropertyValue,
+} from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from '../common/auth';
+import { gcsCommon } from '../common/client';
+import {
+  bucketDropdown,
+  objectDropdown,
+  aclEntityProperty,
+  objectAclRoleProperty,
+  projectIdProperty,
+} from '../common/props';
+import { HttpMethod } from '@agnocon/pieces-common';
+
+export const createObjectAcl = createAction({
+  auth: googleCloudStorageAuth,
+  name: 'create_object_acl',
+  displayName: 'Create Object ACL',
+  description: 'Add an ACL entry to an object (grant a permission). Perfect for granting read/write access to a user or group.',
+  audience: 'both',
+  aiMetadata: { description: 'Grants an entity (user, group, domain, or special scope) a role on a single object\'s access-control list, optionally targeting a specific generation. Use to give read or owner access to one file. Not idempotent: adding an entry that already exists fails. Only works on buckets using fine-grained ACLs, not uniform bucket-level access; requires bucket, object, entity, and role.', idempotent: false },
+  props: {
+    projectId: projectIdProperty,
+    bucket: bucketDropdown,
+    object: objectDropdown('bucket'),
+    entity: aclEntityProperty,
+    role: objectAclRoleProperty,
+    generation: Property.Number({
+      displayName: 'Generation',
+      description: 'Optional generation number for versioned objects',
+      required: false,
+    }),
+  },
+  async run(context) {
+    const { bucket, object, entity, role, generation } = context.propsValue;
+    const auth = context.auth as OAuth2PropertyValue;
+
+    const aclEntry = {
+      entity,
+      role,
+    };
+
+    let path = `/b/${bucket}/o/${encodeURIComponent(object as string)}/acl`;
+    if (generation) {
+      path += `?generation=${generation}`;
+    }
+
+    try {
+      const response = await gcsCommon.makeRequest(
+        HttpMethod.POST,
+        path,
+        auth.access_token,
+        aclEntry
+      );
+
+      return {
+        success: true,
+        bucket,
+        object,
+        generation: generation || 'latest',
+        acl: response,
+      };
+    } catch (error: any) {
+      if (error.response?.status === 400) {
+        throw new Error('Bad request. This bucket may have uniform bucket-level access enabled, which doesn\'t support object ACLs. Use IAM policies instead.');
+      }
+      if (error.response?.status === 403) {
+        throw new Error('Access denied. You need storage.objects.setIamPolicy permission or OWNER ACL permission on the object.');
+      }
+      if (error.response?.status === 404) {
+        throw new Error(`Object "${object}" not found in bucket "${bucket}".`);
+      }
+      if (error.response?.status === 409) {
+        throw new Error(`ACL entry for entity "${entity}" already exists on this object.`);
+      }
+      throw new Error(`Failed to create object ACL: ${error.message || 'Unknown error'}`);
+    }
+  },
+});

package/src/lib/actions/delete-bucket-acl.ts

@@ -0,0 +1,52 @@
+import { createAction, OAuth2PropertyValue } from '@agnocon/pieces-framework';
+import { googleCloudStorageAuth } from '../common/auth';
+import { gcsCommon } from '../common/client';
+import { bucketDropdown, aclEntityProperty, projectIdProperty } from '../common/props';
+import { HttpMethod } from '@agnocon/pieces-common';
+
+export const deleteBucketAcl = createAction({
+  auth: googleCloudStorageAuth,
+  name: 'delete_bucket_acl',
+  displayName: 'Delete Bucket ACL',
+  description: 'Remove an ACL entry from a bucket. Perfect for revoking access for a user or group.',
+  audience: 'both',
+  aiMetadata: { description: 'Removes an entity\'s entry from a bucket\'s own access-control list. Use to revoke a user or group\'s access to the bucket. Not idempotent: the first call removes the entry and a repeat fails because it no longer exists. Only works on buckets using fine-grained ACLs, not uniform bucket-level access; requires bucket and entity.', idempotent: false },
+  props: {
+    projectId: projectIdProperty,
+    bucket: bucketDropdown,
+    entity: aclEntityProperty,
+  },
+  async run(context) {
+    const { bucket, entity } = context.propsValue;
+    const auth = context.auth as OAuth2PropertyValue;
+
+    try {
+      await gcsCommon.makeRequest(
+        HttpMethod.DELETE,
+        `/b/${bucket}/acl/${encodeURIComponent(entity)}`,
+        auth.access_token
+      );
+
+      return {
+        success: true,
+        bucket,
+        entity,
+        message: `ACL entry for entity "${entity}" removed successfully from bucket "${bucket}"`,
+      };
+    } catch (error: any) {
+      if (error.response?.status === 400) {
+        throw new Error('Bad request. This bucket may have uniform bucket-level access enabled, which doesn\'t support bucket ACLs. Use IAM policies instead.');
+      }
+      if (error.response?.status === 403) {
+        throw new Error('Access denied. You need storage.buckets.update permission to modify bucket ACLs.');
+      }
+      if (error.response?.status === 404) {
+        if (error.response?.data?.error?.message?.includes('ACL')) {
+          throw new Error(`ACL entry for entity "${entity}" not found on bucket "${bucket}".`);
+        }
+        throw new Error(`Bucket "${bucket}" not found.`);
+      }
+      throw new Error(`Failed to delete bucket ACL: ${error.message || 'Unknown error'}`);
+    }
+  },
+});