@effect-kit/storage 0.0.0-stage → 0.0.0

package/dist/http/download.js

@@ -0,0 +1,99 @@
+import { failUpload } from "../uploads/schema.js";
+import { Effect, Scope, Stream } from "effect";
+import { HttpServerResponse } from "effect/http";
+
+// src/http/download.ts
+const privateDownload = Effect.fnUntraced(function* (storage, request, target) {
+	if (!target.filename || /[\r\n\0/\\]/u.test(target.filename)) return yield* failUpload("BadRequest");
+	const head = yield* storage.head({ ref: target.ref });
+	const headers = {
+		"cache-control": "private, no-store",
+		"content-disposition": `attachment; filename*=UTF-8''${encodeURIComponent(target.filename).replace(/['()*]/gu, (character) => `%${character.charCodeAt(0).toString(16)}`)}`,
+		"x-content-type-options": "nosniff",
+		"accept-ranges": "bytes",
+		...head.etag ? { etag: head.etag } : {}
+	};
+	const matches = (value) => value?.split(",").some((tag) => tag.trim() === "*" || tag.trim() === head.etag || tag.trim().replace(/^W\//u, "") === head.etag);
+	if (request.headers["if-match"] && !request.headers["if-match"].split(",").some((tag) => tag.trim() === "*" || !tag.trim().startsWith("W/") && tag.trim() === head.etag)) return HttpServerResponse.empty({
+		status: 412,
+		headers
+	});
+	if (matches(request.headers["if-none-match"])) return HttpServerResponse.empty({
+		status: 304,
+		headers
+	});
+	let range;
+	const raw = request.headers.range;
+	if (raw && (!request.headers["if-range"] || request.headers["if-range"] === head.etag)) {
+		const parsed = /^bytes=(\d*)-(\d*)$/u.exec(raw);
+		if (!parsed || !parsed[1] && !parsed[2] || [parsed[1], parsed[2]].some((value) => value && !Number.isSafeInteger(Number(value)))) return HttpServerResponse.empty({
+			status: 416,
+			headers: {
+				...headers,
+				"content-range": `bytes */${head.size}`
+			}
+		});
+		range = parsed[1] ? parsed[2] ? {
+			_tag: "Bounded",
+			start: Number(parsed[1]),
+			end: Number(parsed[2])
+		} : {
+			_tag: "From",
+			start: Number(parsed[1])
+		} : {
+			_tag: "Suffix",
+			length: Number(parsed[2])
+		};
+		if (range._tag === "Suffix" && !range.length) return HttpServerResponse.empty({
+			status: 416,
+			headers: {
+				...headers,
+				"content-range": `bytes */${head.size}`
+			}
+		});
+	}
+	const selected = {
+		ref: head.ref,
+		...head.ref.version ? {} : head.etag ? { condition: {
+			_tag: "IfMatch",
+			etag: head.etag
+		} } : {}
+	};
+	if (!head.ref.version && !head.etag) return yield* failUpload("Unsupported");
+	if (request.method === "HEAD") return HttpServerResponse.empty({
+		status: 200,
+		headers: {
+			...headers,
+			"content-length": String(head.size),
+			"content-type": "application/octet-stream"
+		}
+	});
+	const result = yield* storage.get({
+		...selected,
+		...range ? { range } : {}
+	}).pipe(Effect.catchReason("StorageError", "RangeNotSatisfiable", () => Effect.succeed(void 0)));
+	if (!result) return HttpServerResponse.empty({
+		status: 416,
+		headers: {
+			...headers,
+			"content-range": `bytes */${head.size}`
+		}
+	});
+	if (result._tag !== "Object") return HttpServerResponse.empty({
+		status: 304,
+		headers
+	});
+	const scope = yield* Scope.Scope;
+	return HttpServerResponse.stream(result.body.pipe(Stream.provideService(Scope.Scope, scope)), {
+		status: result.range ? 206 : 200,
+		contentType: "application/octet-stream",
+		...result.contentLength !== void 0 ? { contentLength: result.contentLength } : {},
+		headers: {
+			...headers,
+			...result.range ? { "content-range": `bytes ${result.range.start}-${result.range.end}/${result.range.totalSize}` } : {}
+		}
+	});
+});
+
+export { privateDownload };
+//# sourceMappingURL=download.js.map

package/dist/http/download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.js","names":[],"sources":["../../src/http/download.ts"],"sourcesContent":["import { Effect, Scope, Stream } from \"effect\";\nimport { HttpServerResponse } from \"effect/http\";\nimport type { HttpServerRequest } from \"effect/http\";\n\nimport type { ObjectRef } from \"../core/object.js\";\nimport type { ByteRange } from \"../core/ranges.js\";\nimport type { StorageService } from \"../core/storage.js\";\nimport { failUpload } from \"../uploads/schema.js\";\n\nexport const privateDownload = Effect.fnUntraced(function* (\n  storage: StorageService,\n  request: HttpServerRequest.HttpServerRequest,\n  target: { readonly ref: ObjectRef; readonly filename: string },\n) {\n  if (!target.filename || /[\\r\\n\\0/\\\\]/u.test(target.filename))\n    return yield* failUpload(\"BadRequest\");\n  const head = yield* storage.head({ ref: target.ref });\n  const headers: Record<string, string> = {\n    \"cache-control\": \"private, no-store\",\n    \"content-disposition\": `attachment; filename*=UTF-8''${encodeURIComponent(target.filename).replace(/['()*]/gu, (character) => `%${character.charCodeAt(0).toString(16)}`)}`,\n    \"x-content-type-options\": \"nosniff\",\n    \"accept-ranges\": \"bytes\",\n    ...(head.etag ? { etag: head.etag } : {}),\n  };\n  const matches = (value: string | undefined) =>\n    value\n      ?.split(\",\")\n      .some(\n        (tag) =>\n          tag.trim() === \"*\" ||\n          tag.trim() === head.etag ||\n          tag.trim().replace(/^W\\//u, \"\") === head.etag,\n      );\n  if (\n    request.headers[\"if-match\"] &&\n    !request.headers[\"if-match\"]\n      .split(\",\")\n      .some(\n        (tag) => tag.trim() === \"*\" || (!tag.trim().startsWith(\"W/\") && tag.trim() === head.etag),\n      )\n  )\n    return HttpServerResponse.empty({ status: 412, headers });\n  if (matches(request.headers[\"if-none-match\"]))\n    return HttpServerResponse.empty({ status: 304, headers });\n  let range: ByteRange | undefined;\n  const raw = request.headers.range;\n  if (raw && (!request.headers[\"if-range\"] || request.headers[\"if-range\"] === head.etag)) {\n    const parsed = /^bytes=(\\d*)-(\\d*)$/u.exec(raw);\n    if (\n      !parsed ||\n      (!parsed[1] && !parsed[2]) ||\n      [parsed[1], parsed[2]].some((value) => value && !Number.isSafeInteger(Number(value)))\n    )\n      return HttpServerResponse.empty({\n        status: 416,\n        headers: { ...headers, \"content-range\": `bytes */${head.size}` },\n      });\n    range = parsed[1]\n      ? parsed[2]\n        ? { _tag: \"Bounded\", start: Number(parsed[1]), end: Number(parsed[2]) }\n        : { _tag: \"From\", start: Number(parsed[1]) }\n      : { _tag: \"Suffix\", length: Number(parsed[2]) };\n    if (range._tag === \"Suffix\" && !range.length)\n      return HttpServerResponse.empty({\n        status: 416,\n        headers: { ...headers, \"content-range\": `bytes */${head.size}` },\n      });\n  }\n  const selected = {\n    ref: head.ref,\n    ...(head.ref.version\n      ? {}\n      : head.etag\n        ? { condition: { _tag: \"IfMatch\" as const, etag: head.etag } }\n        : {}),\n  };\n  if (!head.ref.version && !head.etag) return yield* failUpload(\"Unsupported\");\n  if (request.method === \"HEAD\")\n    return HttpServerResponse.empty({\n      status: 200,\n      headers: {\n        ...headers,\n        \"content-length\": String(head.size),\n        \"content-type\": \"application/octet-stream\",\n      },\n    });\n  const result = yield* storage\n    .get({ ...selected, ...(range ? { range } : {}) })\n    .pipe(\n      Effect.catchReason(\"StorageError\", \"RangeNotSatisfiable\", () => Effect.succeed(undefined)),\n    );\n  if (!result)\n    return HttpServerResponse.empty({\n      status: 416,\n      headers: { ...headers, \"content-range\": `bytes */${head.size}` },\n    });\n  if (result._tag !== \"Object\") return HttpServerResponse.empty({ status: 304, headers });\n  const scope = yield* Scope.Scope;\n  return HttpServerResponse.stream(result.body.pipe(Stream.provideService(Scope.Scope, scope)), {\n    status: result.range ? 206 : 200,\n    contentType: \"application/octet-stream\",\n    ...(result.contentLength !== undefined ? { contentLength: result.contentLength } : {}),\n    headers: {\n      ...headers,\n      ...(result.range\n        ? {\n            \"content-range\": `bytes ${result.range.start}-${result.range.end}/${result.range.totalSize}`,\n          }\n        : {}),\n    },\n  });\n});\n"],"mappings":";;;;;AASA,MAAa,kBAAkB,OAAO,WAAW,WAC/C,SACA,SACA,QACA;CACA,IAAI,CAAC,OAAO,YAAY,eAAe,KAAK,OAAO,QAAQ,GACzD,OAAO,OAAO,WAAW,YAAY;CACvC,MAAM,OAAO,OAAO,QAAQ,KAAK,EAAE,KAAK,OAAO,IAAI,CAAC;CACpD,MAAM,UAAkC;EACtC,iBAAiB;EACjB,uBAAuB,gCAAgC,mBAAmB,OAAO,QAAQ,CAAC,CAAC,QAAQ,aAAa,cAAc,IAAI,UAAU,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG;EACxK,0BAA0B;EAC1B,iBAAiB;EACjB,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;CACzC;CACA,MAAM,WAAW,UACf,OACI,MAAM,GAAG,CAAC,CACX,MACE,QACC,IAAI,KAAK,MAAM,OACf,IAAI,KAAK,MAAM,KAAK,QACpB,IAAI,KAAK,CAAC,CAAC,QAAQ,SAAS,EAAE,MAAM,KAAK,IAC7C;CACJ,IACE,QAAQ,QAAQ,eAChB,CAAC,QAAQ,QAAQ,WAAW,CACzB,MAAM,GAAG,CAAC,CACV,MACE,QAAQ,IAAI,KAAK,MAAM,OAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,IACtF,GAEF,OAAO,mBAAmB,MAAM;EAAE,QAAQ;EAAK;CAAQ,CAAC;CAC1D,IAAI,QAAQ,QAAQ,QAAQ,gBAAgB,GAC1C,OAAO,mBAAmB,MAAM;EAAE,QAAQ;EAAK;CAAQ,CAAC;CAC1D,IAAI;CACJ,MAAM,MAAM,QAAQ,QAAQ;CAC5B,IAAI,QAAQ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,gBAAgB,KAAK,OAAO;EACtF,MAAM,SAAS,uBAAuB,KAAK,GAAG;EAC9C,IACE,CAAC,UACA,CAAC,OAAO,MAAM,CAAC,OAAO,MACvB,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,UAAU,SAAS,CAAC,OAAO,cAAc,OAAO,KAAK,CAAC,CAAC,GAEpF,OAAO,mBAAmB,MAAM;GAC9B,QAAQ;GACR,SAAS;IAAE,GAAG;IAAS,iBAAiB,WAAW,KAAK;GAAO;EACjE,CAAC;EACH,QAAQ,OAAO,KACX,OAAO,KACL;GAAE,MAAM;GAAW,OAAO,OAAO,OAAO,EAAE;GAAG,KAAK,OAAO,OAAO,EAAE;EAAE,IACpE;GAAE,MAAM;GAAQ,OAAO,OAAO,OAAO,EAAE;EAAE,IAC3C;GAAE,MAAM;GAAU,QAAQ,OAAO,OAAO,EAAE;EAAE;EAChD,IAAI,MAAM,SAAS,YAAY,CAAC,MAAM,QACpC,OAAO,mBAAmB,MAAM;GAC9B,QAAQ;GACR,SAAS;IAAE,GAAG;IAAS,iBAAiB,WAAW,KAAK;GAAO;EACjE,CAAC;CACL;CACA,MAAM,WAAW;EACf,KAAK,KAAK;EACV,GAAI,KAAK,IAAI,UACT,CAAC,IACD,KAAK,OACH,EAAE,WAAW;GAAE,MAAM;GAAoB,MAAM,KAAK;EAAK,EAAE,IAC3D,CAAC;CACT;CACA,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,MAAM,OAAO,OAAO,WAAW,aAAa;CAC3E,IAAI,QAAQ,WAAW,QACrB,OAAO,mBAAmB,MAAM;EAC9B,QAAQ;EACR,SAAS;GACP,GAAG;GACH,kBAAkB,OAAO,KAAK,IAAI;GAClC,gBAAgB;EAClB;CACF,CAAC;CACH,MAAM,SAAS,OAAO,QACnB,IAAI;EAAE,GAAG;EAAU,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;CAAG,CAAC,CAAC,CACjD,KACC,OAAO,YAAY,gBAAgB,6BAA6B,OAAO,QAAQ,MAAS,CAAC,CAC3F;CACF,IAAI,CAAC,QACH,OAAO,mBAAmB,MAAM;EAC9B,QAAQ;EACR,SAAS;GAAE,GAAG;GAAS,iBAAiB,WAAW,KAAK;EAAO;CACjE,CAAC;CACH,IAAI,OAAO,SAAS,UAAU,OAAO,mBAAmB,MAAM;EAAE,QAAQ;EAAK;CAAQ,CAAC;CACtF,MAAM,QAAQ,OAAO,MAAM;CAC3B,OAAO,mBAAmB,OAAO,OAAO,KAAK,KAAK,OAAO,eAAe,MAAM,OAAO,KAAK,CAAC,GAAG;EAC5F,QAAQ,OAAO,QAAQ,MAAM;EAC7B,aAAa;EACb,GAAI,OAAO,kBAAkB,SAAY,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;EACpF,SAAS;GACP,GAAG;GACH,GAAI,OAAO,QACP,EACE,iBAAiB,SAAS,OAAO,MAAM,MAAM,GAAG,OAAO,MAAM,IAAI,GAAG,OAAO,MAAM,YACnF,IACA,CAAC;EACP;CACF,CAAC;AACH,CAAC"}

package/dist/http/schema.d.ts

@@ -0,0 +1,3 @@
+import { GrantResponse, PartRequest, PartsRequest, UploadActor, UploadError, UploadFile, UploadGrant, UploadId, UploadInput, UploadRequest, UploadStatus } from "../uploads/schema.js";
+import { makeStorageUploadApi } from "./api.js";
+export { GrantResponse, PartRequest, PartsRequest, UploadActor, UploadError, UploadFile, UploadGrant, UploadId, UploadInput, UploadRequest, UploadStatus, makeStorageUploadApi };

package/dist/http/schema.js

@@ -0,0 +1,4 @@
+import { GrantResponse, PartRequest, PartsRequest, UploadActor, UploadError, UploadFile, UploadGrant, UploadId, UploadInput, UploadRequest, UploadStatus } from "../uploads/schema.js";
+import { makeStorageUploadApi } from "./api.js";
+
+export { GrantResponse, PartRequest, PartsRequest, UploadActor, UploadError, UploadFile, UploadGrant, UploadId, UploadInput, UploadRequest, UploadStatus, makeStorageUploadApi };

package/dist/http.d.ts

@@ -0,0 +1,35 @@
+import { ObjectRef } from "./core/object.js";
+import { UploadActor, UploadError } from "./uploads/schema.js";
+import { Storage } from "./core/storage.js";
+import { StorageEvent, StorageEventInbox } from "./events.js";
+import { Uploads } from "./uploads.js";
+import { makeStorageUploadApi } from "./http/api.js";
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest } from "effect/http";
+export interface StorageHttpOptions<R = never> {
+  readonly requestTimeoutMillis?: number;
+  readonly prefix?: `/${string}`;
+  readonly allowedOrigins: ReadonlyArray<string>;
+  readonly authentication: "cookie" | "bearer";
+  readonly authenticate: (request: HttpServerRequest.HttpServerRequest) => Effect.Effect<UploadActor, UploadError, R>;
+  readonly resolveDownload?: (input: {
+    readonly actor: UploadActor;
+    readonly fileId: string;
+  }) => Effect.Effect<{
+    readonly ref: ObjectRef;
+    readonly filename: string;
+  }, UploadError, R>;
+}
+export declare const StorageHttp: {
+  callbacks<R>(options: {
+    readonly path: `/${string}`;
+    readonly authenticate: (request: HttpServerRequest.HttpServerRequest) => Effect.Effect<ReadonlyArray<StorageEvent>, UploadError, R>;
+    readonly resolve: (event: StorageEvent) => Effect.Effect<{
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+    } | undefined, UploadError, R>;
+  }): Layer.Layer<never, never, HttpRouter.HttpRouter | StorageEventInbox | Uploads | HttpRouter.Request.From<"Requires", Exclude<R, HttpRouter.Provided>>>;
+  routes<R>(options: StorageHttpOptions<R>): Layer.Layer<never, UploadError, HttpRouter.HttpRouter | Storage | Uploads | HttpRouter.Request.From<"Requires", Exclude<R, HttpRouter.Provided>>>;
+};
+export { makeStorageUploadApi };
+//# sourceMappingURL=http.d.ts.map

package/dist/http.js

@@ -0,0 +1,178 @@
+import { PartRequest, PartsRequest, UploadActor, UploadRequest, failUpload } from "./uploads/schema.js";
+import { Storage } from "./core/storage.js";
+import { StorageEventInbox } from "./events.js";
+import { Uploads } from "./uploads.js";
+import { makeStorageUploadApi, uploadErrorStatuses } from "./http/api.js";
+import { privateDownload } from "./http/download.js";
+import { Effect, Layer, Redacted, Schema, Stream } from "effect";
+import { HttpRouter, HttpServerResponse, Multipart } from "effect/http";
+
+// src/http/index.ts
+const decode = (schema, raw) => Schema.decodeUnknownEffect(schema, { onExcessProperty: "error" })(raw).pipe(Effect.mapError(() => failUpload("BadRequest")));
+const jsonBody = Effect.fnUntraced(function* (request, schema) {
+	if (!request.headers["content-type"]?.toLowerCase().startsWith("application/json")) return yield* failUpload("BadRequest");
+	let total = 0;
+	const chunks = yield* Stream.runCollect(request.stream.pipe(Stream.mapEffect((bytes) => {
+		total += bytes.length;
+		return total > 262144 ? Effect.fail(failUpload("BadRequest")) : Effect.succeed(bytes);
+	}), Stream.mapError(() => failUpload("BadRequest"))));
+	const joined = new Uint8Array(total);
+	let offset = 0;
+	for (const chunk of chunks) {
+		joined.set(chunk, offset);
+		offset += chunk.length;
+	}
+	const value = yield* Effect.try({
+		try: () => JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(joined)),
+		catch: () => failUpload("BadRequest")
+	});
+	return yield* decode(schema, value);
+});
+const StorageHttp = {
+	callbacks(options) {
+		return Layer.unwrap(Effect.gen(function* () {
+			const uploads = yield* Uploads;
+			const inbox = yield* StorageEventInbox;
+			return HttpRouter.add("POST", options.path, (request) => Effect.gen(function* () {
+				const events = yield* options.authenticate(request);
+				if (events.length > 1e3) return yield* failUpload("BadRequest");
+				yield* Effect.forEach(events, (event) => inbox.process(event, () => Effect.gen(function* () {
+					const binding = yield* options.resolve(event);
+					if (binding) yield* uploads.observe({
+						...binding,
+						event
+					});
+				})));
+				return HttpServerResponse.empty({
+					status: 204,
+					headers: { "cache-control": "no-store" }
+				});
+			}).pipe(Effect.catch(() => Effect.succeed(HttpServerResponse.empty({
+				status: 503,
+				headers: { "cache-control": "no-store" }
+			})))));
+		}));
+	},
+	routes(options) {
+		const prefix = options.prefix ?? "/storage";
+		const timeout = options.requestTimeoutMillis ?? 18e5;
+		const setup = Effect.gen(function* () {
+			if (!Number.isSafeInteger(timeout) || timeout <= 0 || !/^\/[A-Za-z0-9/_-]+$/u.test(prefix) || prefix.endsWith("/") || options.allowedOrigins.some((origin) => {
+				const url = URL.parse(origin);
+				return !url || url.origin !== origin;
+			})) return yield* failUpload("BadRequest");
+			const uploads = yield* Uploads;
+			const storage = yield* Storage;
+			const handler = (action) => (request) => Effect.gen(function* () {
+				const origin = request.headers.origin;
+				const unsafe = ![
+					"GET",
+					"HEAD",
+					"OPTIONS"
+				].includes(request.method);
+				if (origin && !options.allowedOrigins.includes(origin) || unsafe && options.authentication === "cookie" && !origin) return yield* failUpload("Forbidden");
+				const actor = yield* options.authenticate(request).pipe(Effect.flatMap((identity) => decode(UploadActor, identity)));
+				const params = yield* HttpRouter.params;
+				const target = {
+					actor,
+					uploadId: params.id ?? ""
+				};
+				let response;
+				if (action === "download") {
+					if (!options.resolveDownload) return yield* failUpload("NotFound");
+					response = yield* privateDownload(storage, request, yield* options.resolveDownload({
+						actor,
+						fileId: params.fileId ?? ""
+					}));
+				} else if (action === "create") {
+					const payload = yield* jsonBody(request, UploadRequest);
+					response = yield* HttpServerResponse.json(yield* uploads.create({
+						actor,
+						idempotencyKey: payload.idempotencyKey,
+						input: payload.input
+					}));
+				} else if (action === "grant" || action === "part") {
+					const value = action === "part" ? yield* uploads.part({
+						...target,
+						...yield* jsonBody(request, PartRequest)
+					}) : yield* uploads.grant(target);
+					response = yield* HttpServerResponse.json({
+						...value,
+						grant: Redacted.value(value.grant)
+					});
+				} else if (action === "content") response = yield* HttpServerResponse.json(yield* uploads.content({
+					...target,
+					body: request.stream
+				}));
+				else if (action === "form") {
+					let count = 0;
+					const current = yield* uploads.status(target);
+					const maximum = yield* uploads.maximumContentBytes(target);
+					if (!["ready", "uploading"].includes(current.state)) return yield* failUpload("Conflict");
+					yield* Stream.runForEach(request.multipartStream, (part) => Effect.gen(function* () {
+						if (part._tag !== "File" || part.key !== "file" || ++count > 1) return yield* failUpload("BadRequest");
+						yield* uploads.content({
+							...target,
+							body: part.content
+						});
+					})).pipe(Effect.provide(Multipart.limitsServices({
+						maxParts: 1,
+						maxFieldSize: 1024,
+						maxFileSize: maximum + 65536,
+						maxTotalSize: maximum + 65536
+					})), Effect.catchTag("MultipartError", () => Effect.fail(failUpload("BadRequest"))));
+					if (count !== 1) return yield* failUpload("BadRequest");
+					response = yield* HttpServerResponse.json(yield* uploads.status(target));
+				} else if (action === "complete") {
+					const payload = yield* jsonBody(request, Schema.Struct({ parts: Schema.optional(PartsRequest.fields.parts) }));
+					response = yield* HttpServerResponse.json(yield* uploads.complete({
+						...target,
+						...payload.parts ? { parts: payload.parts } : {}
+					}));
+				} else response = yield* HttpServerResponse.json(yield* uploads[action](target));
+				return response.pipe(HttpServerResponse.setHeaders({
+					"cache-control": "private, no-store",
+					vary: "Origin",
+					...origin ? {
+						"access-control-allow-origin": origin,
+						"access-control-allow-credentials": "true",
+						"access-control-expose-headers": "ETag, Content-Range, Content-Disposition"
+					} : {}
+				}));
+			}).pipe(Effect.timeoutOrElse({
+				duration: timeout,
+				orElse: () => Effect.fail(failUpload("Unavailable"))
+			}), Effect.catch((error) => {
+				const code = error && typeof error === "object" && "_tag" in error && error._tag === "UploadError" ? error.code : "Unavailable";
+				return HttpServerResponse.json({
+					_tag: "UploadError",
+					code
+				}, {
+					status: uploadErrorStatuses[code],
+					headers: {
+						"cache-control": "no-store",
+						...request.headers.origin && options.allowedOrigins.includes(request.headers.origin) ? {
+							"access-control-allow-origin": request.headers.origin,
+							"access-control-allow-credentials": "true",
+							vary: "Origin"
+						} : {}
+					}
+				}).pipe(Effect.orDie);
+			}));
+			return Layer.mergeAll(HttpRouter.add("POST", `${prefix}/uploads`, handler("create")), HttpRouter.add("GET", `${prefix}/uploads/:id`, handler("status")), HttpRouter.add("POST", `${prefix}/uploads/:id/grants`, handler("grant")), HttpRouter.add("POST", `${prefix}/uploads/:id/parts/sign`, handler("part")), HttpRouter.add("POST", `${prefix}/uploads/:id/complete`, handler("complete")), HttpRouter.add("POST", `${prefix}/uploads/:id/reconcile`, handler("reconcile")), HttpRouter.add("DELETE", `${prefix}/uploads/:id`, handler("abort")), HttpRouter.add("PUT", `${prefix}/uploads/:id/content`, handler("content")), HttpRouter.add("POST", `${prefix}/uploads/:id/content`, handler("form")), HttpRouter.add("GET", `${prefix}/files/:fileId`, handler("download")), HttpRouter.add("OPTIONS", `${prefix}/*`, (request) => Effect.succeed(options.allowedOrigins.includes(request.headers.origin ?? "") ? HttpServerResponse.empty({
+				status: 204,
+				headers: {
+					"access-control-allow-origin": request.headers.origin ?? "",
+					"access-control-allow-credentials": "true",
+					"access-control-allow-methods": "GET, HEAD, POST, PUT, DELETE, OPTIONS",
+					"access-control-allow-headers": "Content-Type, Authorization, Range, If-Match, If-None-Match, If-Range",
+					vary: "Origin"
+				}
+			}) : HttpServerResponse.empty({ status: 403 }))));
+		});
+		return Layer.unwrap(setup);
+	}
+};
+
+export { StorageHttp, makeStorageUploadApi };
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","names":[],"sources":["../src/http/index.ts"],"sourcesContent":["import { Effect, Layer, Redacted, Schema, Stream } from \"effect\";\nimport { HttpRouter, HttpServerResponse, Multipart } from \"effect/http\";\nimport type { HttpServerRequest } from \"effect/http\";\n\nimport type { ObjectRef } from \"../core/object.js\";\nimport { Storage } from \"../core/storage.js\";\nimport { StorageEventInbox } from \"../lifecycle/events.js\";\nimport type { StorageEvent } from \"../lifecycle/events.js\";\nimport { Uploads } from \"../uploads/index.js\";\nimport {\n  PartRequest,\n  PartsRequest,\n  UploadActor,\n  UploadRequest,\n  failUpload,\n} from \"../uploads/schema.js\";\nimport type { UploadError } from \"../uploads/schema.js\";\nimport { uploadErrorStatuses } from \"./api.js\";\nimport { privateDownload } from \"./download.js\";\nexport { makeStorageUploadApi } from \"./api.js\";\nexport interface StorageHttpOptions<R = never> {\n  readonly requestTimeoutMillis?: number;\n  readonly prefix?: `/${string}`;\n  readonly allowedOrigins: ReadonlyArray<string>;\n  readonly authentication: \"cookie\" | \"bearer\";\n  readonly authenticate: (\n    request: HttpServerRequest.HttpServerRequest,\n  ) => Effect.Effect<UploadActor, UploadError, R>;\n  readonly resolveDownload?: (input: {\n    readonly actor: UploadActor;\n    readonly fileId: string;\n  }) => Effect.Effect<{ readonly ref: ObjectRef; readonly filename: string }, UploadError, R>;\n}\nconst decode = <S extends Schema.Constraint>(schema: S, raw: unknown) =>\n  Schema.decodeUnknownEffect(schema, { onExcessProperty: \"error\" })(raw).pipe(\n    Effect.mapError(() => failUpload(\"BadRequest\")),\n  );\nconst jsonBody = Effect.fnUntraced(function* <S extends Schema.Constraint>(\n  request: HttpServerRequest.HttpServerRequest,\n  schema: S,\n) {\n  if (!request.headers[\"content-type\"]?.toLowerCase().startsWith(\"application/json\"))\n    return yield* failUpload(\"BadRequest\");\n  let total = 0;\n  const chunks = yield* Stream.runCollect(\n    request.stream.pipe(\n      Stream.mapEffect((bytes) => {\n        total += bytes.length;\n        return total > 256 * 1024 ? Effect.fail(failUpload(\"BadRequest\")) : Effect.succeed(bytes);\n      }),\n      Stream.mapError(() => failUpload(\"BadRequest\")),\n    ),\n  );\n  const joined = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    joined.set(chunk, offset);\n    offset += chunk.length;\n  }\n  const value = yield* Effect.try({\n    try: () => JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(joined)) as unknown,\n    catch: () => failUpload(\"BadRequest\"),\n  });\n  return yield* decode(schema, value);\n});\nexport const StorageHttp = {\n  callbacks<R>(options: {\n    readonly path: `/${string}`;\n    readonly authenticate: (\n      request: HttpServerRequest.HttpServerRequest,\n    ) => Effect.Effect<ReadonlyArray<StorageEvent>, UploadError, R>;\n    readonly resolve: (\n      event: StorageEvent,\n    ) => Effect.Effect<\n      { readonly actor: UploadActor; readonly uploadId: string } | undefined,\n      UploadError,\n      R\n    >;\n  }) {\n    return Layer.unwrap(\n      Effect.gen(function* () {\n        const uploads = yield* Uploads;\n        const inbox = yield* StorageEventInbox;\n        return HttpRouter.add(\"POST\", options.path, (request) =>\n          Effect.gen(function* () {\n            const events = yield* options.authenticate(request);\n            if (events.length > 1000) return yield* failUpload(\"BadRequest\");\n            yield* Effect.forEach(events, (event) =>\n              inbox.process(event, () =>\n                Effect.gen(function* () {\n                  const binding = yield* options.resolve(event);\n                  if (binding) yield* uploads.observe({ ...binding, event });\n                }),\n              ),\n            );\n            return HttpServerResponse.empty({\n              status: 204,\n              headers: { \"cache-control\": \"no-store\" },\n            });\n          }).pipe(\n            Effect.catch(() =>\n              Effect.succeed(\n                HttpServerResponse.empty({ status: 503, headers: { \"cache-control\": \"no-store\" } }),\n              ),\n            ),\n          ),\n        );\n      }),\n    );\n  },\n  routes<R>(options: StorageHttpOptions<R>) {\n    const prefix = options.prefix ?? \"/storage\";\n    const timeout = options.requestTimeoutMillis ?? 30 * 60 * 1000;\n    const setup = Effect.gen(function* () {\n      if (\n        !Number.isSafeInteger(timeout) ||\n        timeout <= 0 ||\n        !/^\\/[A-Za-z0-9/_-]+$/u.test(prefix) ||\n        prefix.endsWith(\"/\") ||\n        options.allowedOrigins.some((origin) => {\n          const url = URL.parse(origin);\n          return !url || url.origin !== origin;\n        })\n      )\n        return yield* failUpload(\"BadRequest\");\n      const uploads = yield* Uploads;\n      const storage = yield* Storage;\n      const handler =\n        (\n          action:\n            | \"create\"\n            | \"status\"\n            | \"grant\"\n            | \"part\"\n            | \"complete\"\n            | \"reconcile\"\n            | \"abort\"\n            | \"content\"\n            | \"form\"\n            | \"download\",\n        ) =>\n        (request: HttpServerRequest.HttpServerRequest) =>\n          Effect.gen(function* () {\n            const origin = request.headers.origin;\n            const unsafe = ![\"GET\", \"HEAD\", \"OPTIONS\"].includes(request.method);\n            if (\n              (origin && !options.allowedOrigins.includes(origin)) ||\n              (unsafe && options.authentication === \"cookie\" && !origin)\n            )\n              return yield* failUpload(\"Forbidden\");\n            const actor = yield* options\n              .authenticate(request)\n              .pipe(Effect.flatMap((identity) => decode(UploadActor, identity)));\n            const params = yield* HttpRouter.params;\n            const target = { actor, uploadId: params.id ?? \"\" };\n            let response: HttpServerResponse.HttpServerResponse;\n            if (action === \"download\") {\n              if (!options.resolveDownload) return yield* failUpload(\"NotFound\");\n              response = yield* privateDownload(\n                storage,\n                request,\n                yield* options.resolveDownload({ actor, fileId: params.fileId ?? \"\" }),\n              );\n            } else if (action === \"create\") {\n              const payload = yield* jsonBody(request, UploadRequest);\n              response = yield* HttpServerResponse.json(\n                yield* uploads.create({\n                  actor,\n                  idempotencyKey: payload.idempotencyKey,\n                  input: payload.input,\n                }),\n              );\n            } else if (action === \"grant\" || action === \"part\") {\n              const value =\n                action === \"part\"\n                  ? yield* uploads.part({ ...target, ...(yield* jsonBody(request, PartRequest)) })\n                  : yield* uploads.grant(target);\n              response = yield* HttpServerResponse.json({\n                ...value,\n                grant: Redacted.value(value.grant),\n              });\n            } else if (action === \"content\") {\n              response = yield* HttpServerResponse.json(\n                yield* uploads.content({ ...target, body: request.stream }),\n              );\n            } else if (action === \"form\") {\n              let count = 0;\n              const current = yield* uploads.status(target);\n              // The intent bounds file bytes; framing and non-file parts are bounded separately.\n              const maximum = yield* uploads.maximumContentBytes(target);\n              if (![\"ready\", \"uploading\"].includes(current.state))\n                return yield* failUpload(\"Conflict\");\n              yield* Stream.runForEach(request.multipartStream, (part) =>\n                Effect.gen(function* () {\n                  if (part._tag !== \"File\" || part.key !== \"file\" || ++count > 1)\n                    return yield* failUpload(\"BadRequest\");\n                  yield* uploads.content({ ...target, body: part.content });\n                }),\n              ).pipe(\n                Effect.provide(\n                  Multipart.limitsServices({\n                    maxParts: 1,\n                    maxFieldSize: 1024,\n                    maxFileSize: maximum + 64 * 1024,\n                    maxTotalSize: maximum + 64 * 1024,\n                  }),\n                ),\n                Effect.catchTag(\"MultipartError\", () => Effect.fail(failUpload(\"BadRequest\"))),\n              );\n              if (count !== 1) return yield* failUpload(\"BadRequest\");\n              response = yield* HttpServerResponse.json(yield* uploads.status(target));\n            } else if (action === \"complete\") {\n              const payload = yield* jsonBody(\n                request,\n                Schema.Struct({ parts: Schema.optional(PartsRequest.fields.parts) }),\n              );\n              response = yield* HttpServerResponse.json(\n                yield* uploads.complete({\n                  ...target,\n                  ...(payload.parts ? { parts: payload.parts } : {}),\n                }),\n              );\n            } else response = yield* HttpServerResponse.json(yield* uploads[action](target));\n            return response.pipe(\n              HttpServerResponse.setHeaders({\n                \"cache-control\": \"private, no-store\",\n                vary: \"Origin\",\n                ...(origin\n                  ? {\n                      \"access-control-allow-origin\": origin,\n                      \"access-control-allow-credentials\": \"true\",\n                      \"access-control-expose-headers\": \"ETag, Content-Range, Content-Disposition\",\n                    }\n                  : {}),\n              }),\n            );\n          }).pipe(\n            Effect.timeoutOrElse({\n              duration: timeout,\n              orElse: () => Effect.fail(failUpload(\"Unavailable\")),\n            }),\n            Effect.catch((error) => {\n              const code =\n                error &&\n                typeof error === \"object\" &&\n                \"_tag\" in error &&\n                error._tag === \"UploadError\"\n                  ? (error as UploadError).code\n                  : \"Unavailable\";\n              return HttpServerResponse.json(\n                { _tag: \"UploadError\", code },\n                {\n                  status: uploadErrorStatuses[code],\n                  headers: {\n                    \"cache-control\": \"no-store\",\n                    ...(request.headers.origin &&\n                    options.allowedOrigins.includes(request.headers.origin)\n                      ? {\n                          \"access-control-allow-origin\": request.headers.origin,\n                          \"access-control-allow-credentials\": \"true\",\n                          vary: \"Origin\",\n                        }\n                      : {}),\n                  },\n                },\n              ).pipe(Effect.orDie);\n            }),\n          );\n      return Layer.mergeAll(\n        HttpRouter.add(\"POST\", `${prefix}/uploads`, handler(\"create\")),\n        HttpRouter.add(\"GET\", `${prefix}/uploads/:id`, handler(\"status\")),\n        HttpRouter.add(\"POST\", `${prefix}/uploads/:id/grants`, handler(\"grant\")),\n        HttpRouter.add(\"POST\", `${prefix}/uploads/:id/parts/sign`, handler(\"part\")),\n        HttpRouter.add(\"POST\", `${prefix}/uploads/:id/complete`, handler(\"complete\")),\n        HttpRouter.add(\"POST\", `${prefix}/uploads/:id/reconcile`, handler(\"reconcile\")),\n        HttpRouter.add(\"DELETE\", `${prefix}/uploads/:id`, handler(\"abort\")),\n        HttpRouter.add(\"PUT\", `${prefix}/uploads/:id/content`, handler(\"content\")),\n        HttpRouter.add(\"POST\", `${prefix}/uploads/:id/content`, handler(\"form\")),\n        HttpRouter.add(\"GET\", `${prefix}/files/:fileId`, handler(\"download\")),\n        HttpRouter.add(\"OPTIONS\", `${prefix}/*`, (request) =>\n          Effect.succeed(\n            options.allowedOrigins.includes(request.headers.origin ?? \"\")\n              ? HttpServerResponse.empty({\n                  status: 204,\n                  headers: {\n                    \"access-control-allow-origin\": request.headers.origin ?? \"\",\n                    \"access-control-allow-credentials\": \"true\",\n                    \"access-control-allow-methods\": \"GET, HEAD, POST, PUT, DELETE, OPTIONS\",\n                    \"access-control-allow-headers\":\n                      \"Content-Type, Authorization, Range, If-Match, If-None-Match, If-Range\",\n                    vary: \"Origin\",\n                  },\n                })\n              : HttpServerResponse.empty({ status: 403 }),\n          ),\n        ),\n      );\n    });\n    return Layer.unwrap(setup);\n  },\n};\n"],"mappings":";;;;;;;;;;AAiCA,MAAM,UAAuC,QAAW,QACtD,OAAO,oBAAoB,QAAQ,EAAE,kBAAkB,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KACrE,OAAO,eAAe,WAAW,YAAY,CAAC,CAChD;AACF,MAAM,WAAW,OAAO,WAAW,WACjC,SACA,QACA;CACA,IAAI,CAAC,QAAQ,QAAQ,eAAe,EAAE,YAAY,CAAC,CAAC,WAAW,kBAAkB,GAC/E,OAAO,OAAO,WAAW,YAAY;CACvC,IAAI,QAAQ;CACZ,MAAM,SAAS,OAAO,OAAO,WAC3B,QAAQ,OAAO,KACb,OAAO,WAAW,UAAU;EAC1B,SAAS,MAAM;EACf,OAAO,QAAQ,SAAa,OAAO,KAAK,WAAW,YAAY,CAAC,IAAI,OAAO,QAAQ,KAAK;CAC1F,CAAC,GACD,OAAO,eAAe,WAAW,YAAY,CAAC,CAChD,CACF;CACA,MAAM,SAAS,IAAI,WAAW,KAAK;CACnC,IAAI,SAAS;CACb,KAAK,MAAM,SAAS,QAAQ;EAC1B,OAAO,IAAI,OAAO,MAAM;EACxB,UAAU,MAAM;CAClB;CACA,MAAM,QAAQ,OAAO,OAAO,IAAI;EAC9B,WAAW,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC;EAC9E,aAAa,WAAW,YAAY;CACtC,CAAC;CACD,OAAO,OAAO,OAAO,QAAQ,KAAK;AACpC,CAAC;AACD,MAAa,cAAc;CACzB,UAAa,SAYV;EACD,OAAO,MAAM,OACX,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO;GACvB,MAAM,QAAQ,OAAO;GACrB,OAAO,WAAW,IAAI,QAAQ,QAAQ,OAAO,YAC3C,OAAO,IAAI,aAAa;IACtB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO;IAClD,IAAI,OAAO,SAAS,KAAM,OAAO,OAAO,WAAW,YAAY;IAC/D,OAAO,OAAO,QAAQ,SAAS,UAC7B,MAAM,QAAQ,aACZ,OAAO,IAAI,aAAa;KACtB,MAAM,UAAU,OAAO,QAAQ,QAAQ,KAAK;KAC5C,IAAI,SAAS,OAAO,QAAQ,QAAQ;MAAE,GAAG;MAAS;KAAM,CAAC;IAC3D,CAAC,CACH,CACF;IACA,OAAO,mBAAmB,MAAM;KAC9B,QAAQ;KACR,SAAS,EAAE,iBAAiB,WAAW;IACzC,CAAC;GACH,CAAC,CAAC,CAAC,KACD,OAAO,YACL,OAAO,QACL,mBAAmB,MAAM;IAAE,QAAQ;IAAK,SAAS,EAAE,iBAAiB,WAAW;GAAE,CAAC,CACpF,CACF,CACF,CACF;EACF,CAAC,CACH;CACF;CACA,OAAU,SAAgC;EACxC,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,UAAU,QAAQ,wBAAwB;EAChD,MAAM,QAAQ,OAAO,IAAI,aAAa;GACpC,IACE,CAAC,OAAO,cAAc,OAAO,KAC7B,WAAW,KACX,CAAC,uBAAuB,KAAK,MAAM,KACnC,OAAO,SAAS,GAAG,KACnB,QAAQ,eAAe,MAAM,WAAW;IACtC,MAAM,MAAM,IAAI,MAAM,MAAM;IAC5B,OAAO,CAAC,OAAO,IAAI,WAAW;GAChC,CAAC,GAED,OAAO,OAAO,WAAW,YAAY;GACvC,MAAM,UAAU,OAAO;GACvB,MAAM,UAAU,OAAO;GACvB,MAAM,WAEF,YAYD,YACC,OAAO,IAAI,aAAa;IACtB,MAAM,SAAS,QAAQ,QAAQ;IAC/B,MAAM,SAAS,CAAC;KAAC;KAAO;KAAQ;IAAS,CAAC,CAAC,SAAS,QAAQ,MAAM;IAClE,IACG,UAAU,CAAC,QAAQ,eAAe,SAAS,MAAM,KACjD,UAAU,QAAQ,mBAAmB,YAAY,CAAC,QAEnD,OAAO,OAAO,WAAW,WAAW;IACtC,MAAM,QAAQ,OAAO,QAClB,aAAa,OAAO,CAAC,CACrB,KAAK,OAAO,SAAS,aAAa,OAAO,aAAa,QAAQ,CAAC,CAAC;IACnE,MAAM,SAAS,OAAO,WAAW;IACjC,MAAM,SAAS;KAAE;KAAO,UAAU,OAAO,MAAM;IAAG;IAClD,IAAI;IACJ,IAAI,WAAW,YAAY;KACzB,IAAI,CAAC,QAAQ,iBAAiB,OAAO,OAAO,WAAW,UAAU;KACjE,WAAW,OAAO,gBAChB,SACA,SACA,OAAO,QAAQ,gBAAgB;MAAE;MAAO,QAAQ,OAAO,UAAU;KAAG,CAAC,CACvE;IACF,OAAO,IAAI,WAAW,UAAU;KAC9B,MAAM,UAAU,OAAO,SAAS,SAAS,aAAa;KACtD,WAAW,OAAO,mBAAmB,KACnC,OAAO,QAAQ,OAAO;MACpB;MACA,gBAAgB,QAAQ;MACxB,OAAO,QAAQ;KACjB,CAAC,CACH;IACF,OAAO,IAAI,WAAW,WAAW,WAAW,QAAQ;KAClD,MAAM,QACJ,WAAW,SACP,OAAO,QAAQ,KAAK;MAAE,GAAG;MAAQ,GAAI,OAAO,SAAS,SAAS,WAAW;KAAG,CAAC,IAC7E,OAAO,QAAQ,MAAM,MAAM;KACjC,WAAW,OAAO,mBAAmB,KAAK;MACxC,GAAG;MACH,OAAO,SAAS,MAAM,MAAM,KAAK;KACnC,CAAC;IACH,OAAO,IAAI,WAAW,WACpB,WAAW,OAAO,mBAAmB,KACnC,OAAO,QAAQ,QAAQ;KAAE,GAAG;KAAQ,MAAM,QAAQ;IAAO,CAAC,CAC5D;SACK,IAAI,WAAW,QAAQ;KAC5B,IAAI,QAAQ;KACZ,MAAM,UAAU,OAAO,QAAQ,OAAO,MAAM;KAE5C,MAAM,UAAU,OAAO,QAAQ,oBAAoB,MAAM;KACzD,IAAI,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,SAAS,QAAQ,KAAK,GAChD,OAAO,OAAO,WAAW,UAAU;KACrC,OAAO,OAAO,WAAW,QAAQ,kBAAkB,SACjD,OAAO,IAAI,aAAa;MACtB,IAAI,KAAK,SAAS,UAAU,KAAK,QAAQ,UAAU,EAAE,QAAQ,GAC3D,OAAO,OAAO,WAAW,YAAY;MACvC,OAAO,QAAQ,QAAQ;OAAE,GAAG;OAAQ,MAAM,KAAK;MAAQ,CAAC;KAC1D,CAAC,CACH,CAAC,CAAC,KACA,OAAO,QACL,UAAU,eAAe;MACvB,UAAU;MACV,cAAc;MACd,aAAa,UAAU;MACvB,cAAc,UAAU;KAC1B,CAAC,CACH,GACA,OAAO,SAAS,wBAAwB,OAAO,KAAK,WAAW,YAAY,CAAC,CAAC,CAC/E;KACA,IAAI,UAAU,GAAG,OAAO,OAAO,WAAW,YAAY;KACtD,WAAW,OAAO,mBAAmB,KAAK,OAAO,QAAQ,OAAO,MAAM,CAAC;IACzE,OAAO,IAAI,WAAW,YAAY;KAChC,MAAM,UAAU,OAAO,SACrB,SACA,OAAO,OAAO,EAAE,OAAO,OAAO,SAAS,aAAa,OAAO,KAAK,EAAE,CAAC,CACrE;KACA,WAAW,OAAO,mBAAmB,KACnC,OAAO,QAAQ,SAAS;MACtB,GAAG;MACH,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;KAClD,CAAC,CACH;IACF,OAAO,WAAW,OAAO,mBAAmB,KAAK,OAAO,QAAQ,OAAO,CAAC,MAAM,CAAC;IAC/E,OAAO,SAAS,KACd,mBAAmB,WAAW;KAC5B,iBAAiB;KACjB,MAAM;KACN,GAAI,SACA;MACE,+BAA+B;MAC/B,oCAAoC;MACpC,iCAAiC;KACnC,IACA,CAAC;IACP,CAAC,CACH;GACF,CAAC,CAAC,CAAC,KACD,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,KAAK,WAAW,aAAa,CAAC;GACrD,CAAC,GACD,OAAO,OAAO,UAAU;IACtB,MAAM,OACJ,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,gBACV,MAAsB,OACvB;IACN,OAAO,mBAAmB,KACxB;KAAE,MAAM;KAAe;IAAK,GAC5B;KACE,QAAQ,oBAAoB;KAC5B,SAAS;MACP,iBAAiB;MACjB,GAAI,QAAQ,QAAQ,UACpB,QAAQ,eAAe,SAAS,QAAQ,QAAQ,MAAM,IAClD;OACE,+BAA+B,QAAQ,QAAQ;OAC/C,oCAAoC;OACpC,MAAM;MACR,IACA,CAAC;KACP;IACF,CACF,CAAC,CAAC,KAAK,OAAO,KAAK;GACrB,CAAC,CACH;GACJ,OAAO,MAAM,SACX,WAAW,IAAI,QAAQ,GAAG,OAAO,WAAW,QAAQ,QAAQ,CAAC,GAC7D,WAAW,IAAI,OAAO,GAAG,OAAO,eAAe,QAAQ,QAAQ,CAAC,GAChE,WAAW,IAAI,QAAQ,GAAG,OAAO,sBAAsB,QAAQ,OAAO,CAAC,GACvE,WAAW,IAAI,QAAQ,GAAG,OAAO,0BAA0B,QAAQ,MAAM,CAAC,GAC1E,WAAW,IAAI,QAAQ,GAAG,OAAO,wBAAwB,QAAQ,UAAU,CAAC,GAC5E,WAAW,IAAI,QAAQ,GAAG,OAAO,yBAAyB,QAAQ,WAAW,CAAC,GAC9E,WAAW,IAAI,UAAU,GAAG,OAAO,eAAe,QAAQ,OAAO,CAAC,GAClE,WAAW,IAAI,OAAO,GAAG,OAAO,uBAAuB,QAAQ,SAAS,CAAC,GACzE,WAAW,IAAI,QAAQ,GAAG,OAAO,uBAAuB,QAAQ,MAAM,CAAC,GACvE,WAAW,IAAI,OAAO,GAAG,OAAO,iBAAiB,QAAQ,UAAU,CAAC,GACpE,WAAW,IAAI,WAAW,GAAG,OAAO,MAAM,YACxC,OAAO,QACL,QAAQ,eAAe,SAAS,QAAQ,QAAQ,UAAU,EAAE,IACxD,mBAAmB,MAAM;IACvB,QAAQ;IACR,SAAS;KACP,+BAA+B,QAAQ,QAAQ,UAAU;KACzD,oCAAoC;KACpC,gCAAgC;KAChC,gCACE;KACF,MAAM;IACR;GACF,CAAC,IACD,mBAAmB,MAAM,EAAE,QAAQ,IAAI,CAAC,CAC9C,CACF,CACF;EACF,CAAC;EACD,OAAO,MAAM,OAAO,KAAK;CAC3B;AACF"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+import { Checksum, NativeVersion, ObjectHeaders, ObjectKey, ObjectMetadata, ObjectRef, ObjectSize, ObjectValidator } from "./core/object.js";
+import { MutationOutcome, StorageError, StorageReason } from "./core/errors.js";
+import { ByteRange, ResolvedRange } from "./core/ranges.js";
+import { DeleteRequest, GetRequest, GetResult, HeadRequest, ListEntry, ListPage, ListRequest, NotModified, ObjectDownload, ObjectTarget, PutRequest, ReadCondition, UploadBody, WriteCondition } from "./core/requests.js";
+import { GrantConstraint, SignedRequest, StorageCapabilities, StorageCopy, StoragePublicUrls, StorageSigning } from "./core/capabilities.js";
+import { Storage, StorageService } from "./core/storage.js";
+import { MultipartHandle, MultipartUploads, UploadedPart } from "./core/contracts/multipart.js";
+import { BlockUploads, OffsetUploads, ResumableHandle, ResumableState } from "./core/contracts/resumable.js";
+import { ArchiveService, MetadataMerge, MetadataReplace, MetadataService, RestoreStatus, RestoreVersion, StorageMetadata, StorageTags, StorageVersions, TagsService, VersionEntry, VersionQuery, VersionRef, VersionsService } from "./lifecycle.js";
+export { type ArchiveService, type BlockUploads, ByteRange, Checksum, DeleteRequest, GetRequest, type GetResult, type GrantConstraint, HeadRequest, type ListEntry, type ListPage, ListRequest, MetadataMerge, MetadataReplace, type MetadataService, type MultipartHandle, type MultipartUploads, MutationOutcome, NativeVersion, type NotModified, type ObjectDownload, ObjectHeaders, ObjectKey, ObjectMetadata, ObjectRef, ObjectSize, type ObjectTarget, ObjectValidator, type OffsetUploads, PutRequest, ReadCondition, type ResolvedRange, type RestoreStatus, RestoreVersion, type ResumableHandle, type ResumableState, type SignedRequest, Storage, type StorageCapabilities, StorageCopy, StorageError, StorageMetadata, StoragePublicUrls, StorageReason, type StorageService, StorageSigning, StorageTags, StorageVersions, type TagsService, type UploadBody, type UploadedPart, VersionEntry, VersionQuery, VersionRef, type VersionsService, WriteCondition };

package/dist/index.js

@@ -0,0 +1,9 @@
+import { Checksum, NativeVersion, ObjectHeaders, ObjectKey, ObjectMetadata, ObjectRef, ObjectSize, ObjectValidator } from "./core/object.js";
+import { MutationOutcome, StorageError, StorageReason } from "./core/errors.js";
+import { ByteRange } from "./core/ranges.js";
+import { DeleteRequest, GetRequest, HeadRequest, ListRequest, PutRequest, ReadCondition, WriteCondition } from "./core/requests.js";
+import { Storage } from "./core/storage.js";
+import { StorageCopy, StoragePublicUrls, StorageSigning } from "./core/capabilities.js";
+import { MetadataMerge, MetadataReplace, RestoreVersion, StorageMetadata, StorageTags, StorageVersions, VersionEntry, VersionQuery, VersionRef } from "./lifecycle.js";
+
+export { ByteRange, Checksum, DeleteRequest, GetRequest, HeadRequest, ListRequest, MetadataMerge, MetadataReplace, MutationOutcome, NativeVersion, ObjectHeaders, ObjectKey, ObjectMetadata, ObjectRef, ObjectSize, ObjectValidator, PutRequest, ReadCondition, RestoreVersion, Storage, StorageCopy, StorageError, StorageMetadata, StoragePublicUrls, StorageReason, StorageSigning, StorageTags, StorageVersions, VersionEntry, VersionQuery, VersionRef, WriteCondition };

package/dist/internal/http/control-plane.js

@@ -0,0 +1,71 @@
+import { storageError } from "../../core/errors.js";
+import { providerError } from "../node/provider-errors.js";
+import { Effect, Stream } from "effect";
+import { FetchHttpClient, HttpClientRequest } from "effect/http";
+
+// src/internal/http/control-plane.ts
+const controlEndpoint = (value, provider) => Effect.try({
+	try: () => {
+		const url = new URL(value);
+		if (url.username || url.password || url.search || url.hash || url.pathname !== "/" || url.protocol !== "https:" && !(url.protocol === "http:" && [
+			"127.0.0.1",
+			"localhost",
+			"[::1]"
+		].includes(url.hostname))) throw new Error("endpoint");
+		return url.origin;
+	},
+	catch: () => storageError("makeAdministration", provider, {
+		_tag: "InvalidConfiguration",
+		field: "endpoint"
+	})
+});
+const controlRequest = Effect.fnUntraced(function* (http, provider, operation, url, method, headers, body) {
+	const mutation = !["GET", "HEAD"].includes(method);
+	return yield* Effect.scoped(Effect.gen(function* () {
+		if (Object.values(headers).some((value) => /[\r\n]/u.test(value))) return yield* storageError(operation, provider, {
+			_tag: "InvalidConfiguration",
+			field: "headers"
+		}, "not-started");
+		let request = HttpClientRequest.make(method)(url).pipe(HttpClientRequest.setHeaders(headers));
+		if (body !== void 0) request = yield* HttpClientRequest.bodyJson(request, body).pipe(Effect.mapError(() => storageError(operation, provider, {
+			_tag: "InvalidInput",
+			field: "body"
+		}, "not-started")));
+		const response = yield* http.execute(request).pipe(Effect.provideService(FetchHttpClient.RequestInit, {
+			redirect: "error",
+			cache: "no-store"
+		}), Effect.mapError(() => providerError(provider, operation, mutation, {})));
+		if (response.status < 200 || response.status >= 300) return yield* providerError(provider, operation, mutation, { statusCode: response.status });
+		let total = 0;
+		const chunks = yield* Stream.runCollect(response.stream.pipe(Stream.mapError(() => providerError(provider, operation, mutation, {})), Stream.mapEffect((chunk) => {
+			total += chunk.byteLength;
+			return total > 4 * 1024 ** 2 ? Effect.fail(storageError(operation, provider, {
+				_tag: "LimitExceeded",
+				limit: 4 * 1024 ** 2
+			}, mutation ? "unknown" : "not-applicable")) : Effect.succeed(chunk);
+		})));
+		if (!total) return void 0;
+		const bytes = new Uint8Array(total);
+		let offset = 0;
+		for (const chunk of chunks) {
+			bytes.set(chunk, offset);
+			offset += chunk.byteLength;
+		}
+		return yield* Effect.try({
+			try: () => JSON.parse(new TextDecoder().decode(bytes)),
+			catch: () => storageError(operation, provider, {
+				_tag: "ProviderFailure",
+				code: "InvalidJsonResponse"
+			}, mutation ? "unknown" : "not-applicable")
+		});
+	})).pipe(Effect.timeoutOrElse({
+		duration: "30 seconds",
+		orElse: () => Effect.fail(storageError(operation, provider, {
+			_tag: "TransportFailure",
+			code: "DeadlineExceeded"
+		}, mutation ? "unknown" : "not-applicable"))
+	}));
+});
+
+export { controlEndpoint, controlRequest };
+//# sourceMappingURL=control-plane.js.map

package/dist/internal/http/control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.js","names":[],"sources":["../../../src/internal/http/control-plane.ts"],"sourcesContent":["import { Effect, Stream } from \"effect\";\nimport { FetchHttpClient, HttpClientRequest } from \"effect/http\";\nimport type { HttpClient, HttpMethod } from \"effect/http\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { providerError } from \"../node/provider-errors.js\";\n\nexport const controlEndpoint = (value: string, provider: string) =>\n  Effect.try({\n    try: () => {\n      const url = new URL(value);\n      if (\n        url.username ||\n        url.password ||\n        url.search ||\n        url.hash ||\n        url.pathname !== \"/\" ||\n        (url.protocol !== \"https:\" &&\n          !(url.protocol === \"http:\" && [\"127.0.0.1\", \"localhost\", \"[::1]\"].includes(url.hostname)))\n      )\n        throw new Error(\"endpoint\");\n      return url.origin;\n    },\n    catch: () =>\n      storageError(\"makeAdministration\", provider, {\n        _tag: \"InvalidConfiguration\",\n        field: \"endpoint\",\n      }),\n  });\nexport const controlRequest = Effect.fnUntraced(function* (\n  http: HttpClient.HttpClient,\n  provider: string,\n  operation: string,\n  url: string,\n  method: HttpMethod.HttpMethod,\n  headers: Readonly<Record<string, string>>,\n  body?: unknown,\n) {\n  const mutation = ![\"GET\", \"HEAD\"].includes(method);\n  return yield* Effect.scoped(\n    Effect.gen(function* () {\n      if (Object.values(headers).some((value) => /[\\r\\n]/u.test(value)))\n        return yield* storageError(\n          operation,\n          provider,\n          { _tag: \"InvalidConfiguration\", field: \"headers\" },\n          \"not-started\",\n        );\n      let request = HttpClientRequest.make(method)(url).pipe(HttpClientRequest.setHeaders(headers));\n      if (body !== undefined)\n        request = yield* HttpClientRequest.bodyJson(request, body).pipe(\n          Effect.mapError(() =>\n            storageError(\n              operation,\n              provider,\n              { _tag: \"InvalidInput\", field: \"body\" },\n              \"not-started\",\n            ),\n          ),\n        );\n      const response = yield* http.execute(request).pipe(\n        Effect.provideService(FetchHttpClient.RequestInit, {\n          redirect: \"error\",\n          cache: \"no-store\",\n        }),\n        Effect.mapError(() => providerError(provider, operation, mutation, {})),\n      );\n      if (response.status < 200 || response.status >= 300)\n        return yield* providerError(provider, operation, mutation, { statusCode: response.status });\n      let total = 0;\n      const chunks = yield* Stream.runCollect(\n        response.stream.pipe(\n          Stream.mapError(() => providerError(provider, operation, mutation, {})),\n          Stream.mapEffect((chunk) => {\n            total += chunk.byteLength;\n            return total > 4 * 1024 ** 2\n              ? Effect.fail(\n                  storageError(\n                    operation,\n                    provider,\n                    { _tag: \"LimitExceeded\", limit: 4 * 1024 ** 2 },\n                    mutation ? \"unknown\" : \"not-applicable\",\n                  ),\n                )\n              : Effect.succeed(chunk);\n          }),\n        ),\n      );\n      if (!total) return undefined;\n      const bytes = new Uint8Array(total);\n      let offset = 0;\n      for (const chunk of chunks) {\n        bytes.set(chunk, offset);\n        offset += chunk.byteLength;\n      }\n      return yield* Effect.try({\n        try: () => JSON.parse(new TextDecoder().decode(bytes)) as unknown,\n        catch: () =>\n          storageError(\n            operation,\n            provider,\n            { _tag: \"ProviderFailure\", code: \"InvalidJsonResponse\" },\n            mutation ? \"unknown\" : \"not-applicable\",\n          ),\n      });\n    }),\n  ).pipe(\n    Effect.timeoutOrElse({\n      duration: \"30 seconds\",\n      orElse: () =>\n        Effect.fail(\n          storageError(\n            operation,\n            provider,\n            { _tag: \"TransportFailure\", code: \"DeadlineExceeded\" },\n            mutation ? \"unknown\" : \"not-applicable\",\n          ),\n        ),\n    }),\n  );\n});\n"],"mappings":";;;;;;AAOA,MAAa,mBAAmB,OAAe,aAC7C,OAAO,IAAI;CACT,WAAW;EACT,MAAM,MAAM,IAAI,IAAI,KAAK;EACzB,IACE,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,QACJ,IAAI,aAAa,OAChB,IAAI,aAAa,YAChB,EAAE,IAAI,aAAa,WAAW;GAAC;GAAa;GAAa;EAAO,CAAC,CAAC,SAAS,IAAI,QAAQ,IAEzF,MAAM,IAAI,MAAM,UAAU;EAC5B,OAAO,IAAI;CACb;CACA,aACE,aAAa,sBAAsB,UAAU;EAC3C,MAAM;EACN,OAAO;CACT,CAAC;AACL,CAAC;AACH,MAAa,iBAAiB,OAAO,WAAW,WAC9C,MACA,UACA,WACA,KACA,QACA,SACA,MACA;CACA,MAAM,WAAW,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;CACjD,OAAO,OAAO,OAAO,OACnB,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,OAAO,OAAO,CAAC,CAAC,MAAM,UAAU,UAAU,KAAK,KAAK,CAAC,GAC9D,OAAO,OAAO,aACZ,WACA,UACA;GAAE,MAAM;GAAwB,OAAO;EAAU,GACjD,aACF;EACF,IAAI,UAAU,kBAAkB,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,kBAAkB,WAAW,OAAO,CAAC;EAC5F,IAAI,SAAS,QACX,UAAU,OAAO,kBAAkB,SAAS,SAAS,IAAI,CAAC,CAAC,KACzD,OAAO,eACL,aACE,WACA,UACA;GAAE,MAAM;GAAgB,OAAO;EAAO,GACtC,aACF,CACF,CACF;EACF,MAAM,WAAW,OAAO,KAAK,QAAQ,OAAO,CAAC,CAAC,KAC5C,OAAO,eAAe,gBAAgB,aAAa;GACjD,UAAU;GACV,OAAO;EACT,CAAC,GACD,OAAO,eAAe,cAAc,UAAU,WAAW,UAAU,CAAC,CAAC,CAAC,CACxE;EACA,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAC9C,OAAO,OAAO,cAAc,UAAU,WAAW,UAAU,EAAE,YAAY,SAAS,OAAO,CAAC;EAC5F,IAAI,QAAQ;EACZ,MAAM,SAAS,OAAO,OAAO,WAC3B,SAAS,OAAO,KACd,OAAO,eAAe,cAAc,UAAU,WAAW,UAAU,CAAC,CAAC,CAAC,GACtE,OAAO,WAAW,UAAU;GAC1B,SAAS,MAAM;GACf,OAAO,QAAQ,IAAI,QAAQ,IACvB,OAAO,KACL,aACE,WACA,UACA;IAAE,MAAM;IAAiB,OAAO,IAAI,QAAQ;GAAE,GAC9C,WAAW,YAAY,gBACzB,CACF,IACA,OAAO,QAAQ,KAAK;EAC1B,CAAC,CACH,CACF;EACA,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,QAAQ,IAAI,WAAW,KAAK;EAClC,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,IAAI,OAAO,MAAM;GACvB,UAAU,MAAM;EAClB;EACA,OAAO,OAAO,OAAO,IAAI;GACvB,WAAW,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC;GACrD,aACE,aACE,WACA,UACA;IAAE,MAAM;IAAmB,MAAM;GAAsB,GACvD,WAAW,YAAY,gBACzB;EACJ,CAAC;CACH,CAAC,CACH,CAAC,CAAC,KACA,OAAO,cAAc;EACnB,UAAU;EACV,cACE,OAAO,KACL,aACE,WACA,UACA;GAAE,MAAM;GAAoB,MAAM;EAAmB,GACrD,WAAW,YAAY,gBACzB,CACF;CACJ,CAAC,CACH;AACF,CAAC"}

package/dist/internal/listing-cursor.js

@@ -0,0 +1,44 @@
+import { storageError } from "../core/errors.js";
+import { Effect, Schema } from "effect";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { Base64Url } from "effect/encoding";
+import { bytesToHex } from "@noble/hashes/utils.js";
+
+// src/internal/listing-cursor.ts
+const Cursor = Schema.fromJsonString(Schema.Struct({
+	version: Schema.Literal(1),
+	storeId: Schema.String,
+	query: Schema.String,
+	token: Schema.String
+}));
+const decodeCursor = Effect.fnUntraced(function* (provider, cursor, storeId, query, operation) {
+	if (cursor === void 0) return void 0;
+	if (cursor.length > 65536) return yield* storageError(operation, provider, {
+		_tag: "InvalidInput",
+		field: "cursor"
+	});
+	const decoded = yield* Effect.fromResult(Base64Url.decodeString(cursor)).pipe(Effect.mapError(() => storageError(operation, provider, {
+		_tag: "InvalidInput",
+		field: "cursor"
+	})));
+	const value = yield* Schema.decodeUnknownEffect(Cursor, { onExcessProperty: "error" })(decoded).pipe(Effect.mapError(() => storageError(operation, provider, {
+		_tag: "InvalidInput",
+		field: "cursor"
+	})));
+	if (value.storeId !== storeId || value.query !== bytesToHex(sha256(new TextEncoder().encode(query)))) return yield* storageError(operation, provider, {
+		_tag: "InvalidInput",
+		field: "cursor"
+	});
+	return value.token;
+});
+function encodeCursor(storeId, query, token) {
+	return Base64Url.encode(Schema.encodeSync(Cursor)({
+		version: 1,
+		storeId,
+		query: bytesToHex(sha256(new TextEncoder().encode(query))),
+		token
+	}));
+}
+
+export { decodeCursor, encodeCursor };
+//# sourceMappingURL=listing-cursor.js.map

package/dist/internal/listing-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listing-cursor.js","names":[],"sources":["../../src/internal/listing-cursor.ts"],"sourcesContent":["import { Effect, Schema } from \"effect\";\nimport { Base64Url } from \"effect/encoding\";\n\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { bytesToHex } from \"@noble/hashes/utils.js\";\n\nimport { storageError } from \"../core/errors.js\";\n\nconst Cursor = Schema.fromJsonString(\n  Schema.Struct({\n    version: Schema.Literal(1),\n    storeId: Schema.String,\n    query: Schema.String,\n    token: Schema.String,\n  }),\n);\n\nexport const decodeCursor = Effect.fnUntraced(function* (\n  provider: string,\n  cursor: string | undefined,\n  storeId: string,\n  query: string,\n  operation: string,\n) {\n  if (cursor === undefined) return undefined;\n  if (cursor.length > 65536)\n    return yield* storageError(operation, provider, { _tag: \"InvalidInput\", field: \"cursor\" });\n  const decoded = yield* Effect.fromResult(Base64Url.decodeString(cursor)).pipe(\n    Effect.mapError(() =>\n      storageError(operation, provider, { _tag: \"InvalidInput\", field: \"cursor\" }),\n    ),\n  );\n  const value = yield* Schema.decodeUnknownEffect(Cursor, { onExcessProperty: \"error\" })(\n    decoded,\n  ).pipe(\n    Effect.mapError(() =>\n      storageError(operation, provider, { _tag: \"InvalidInput\", field: \"cursor\" }),\n    ),\n  );\n  if (\n    value.storeId !== storeId ||\n    value.query !== bytesToHex(sha256(new TextEncoder().encode(query)))\n  )\n    return yield* storageError(operation, provider, { _tag: \"InvalidInput\", field: \"cursor\" });\n  return value.token;\n});\n\nexport function encodeCursor(storeId: string, query: string, token: string) {\n  return Base64Url.encode(\n    Schema.encodeSync(Cursor)({\n      version: 1,\n      storeId,\n      query: bytesToHex(sha256(new TextEncoder().encode(query))),\n      token,\n    }),\n  );\n}\n"],"mappings":";;;;;;;AAQA,MAAM,SAAS,OAAO,eACpB,OAAO,OAAO;CACZ,SAAS,OAAO,QAAQ,CAAC;CACzB,SAAS,OAAO;CAChB,OAAO,OAAO;CACd,OAAO,OAAO;AAChB,CAAC,CACH;AAEA,MAAa,eAAe,OAAO,WAAW,WAC5C,UACA,QACA,SACA,OACA,WACA;CACA,IAAI,WAAW,QAAW,OAAO;CACjC,IAAI,OAAO,SAAS,OAClB,OAAO,OAAO,aAAa,WAAW,UAAU;EAAE,MAAM;EAAgB,OAAO;CAAS,CAAC;CAC3F,MAAM,UAAU,OAAO,OAAO,WAAW,UAAU,aAAa,MAAM,CAAC,CAAC,CAAC,KACvE,OAAO,eACL,aAAa,WAAW,UAAU;EAAE,MAAM;EAAgB,OAAO;CAAS,CAAC,CAC7E,CACF;CACA,MAAM,QAAQ,OAAO,OAAO,oBAAoB,QAAQ,EAAE,kBAAkB,QAAQ,CAAC,CAAC,CACpF,OACF,CAAC,CAAC,KACA,OAAO,eACL,aAAa,WAAW,UAAU;EAAE,MAAM;EAAgB,OAAO;CAAS,CAAC,CAC7E,CACF;CACA,IACE,MAAM,YAAY,WAClB,MAAM,UAAU,WAAW,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,GAElE,OAAO,OAAO,aAAa,WAAW,UAAU;EAAE,MAAM;EAAgB,OAAO;CAAS,CAAC;CAC3F,OAAO,MAAM;AACf,CAAC;AAED,SAAgB,aAAa,SAAiB,OAAe,OAAe;CAC1E,OAAO,UAAU,OACf,OAAO,WAAW,MAAM,CAAC,CAAC;EACxB,SAAS;EACT;EACA,OAAO,WAAW,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;EACzD;CACF,CAAC,CACH;AACF"}

package/dist/internal/node/provider-errors.js

@@ -0,0 +1,16 @@
+import { storageError } from "../../core/errors.js";
+import { Predicate } from "effect";
+
+// src/internal/node/provider-errors.ts
+/** SDK errors may contain credentials and bearer URLs; retain only classified status. */
+function providerError(provider, operation, mutation, error) {
+	const status = Predicate.isObject(error) ? Reflect.get(error, "statusCode") ?? Reflect.get(error, "code") : void 0;
+	const code = Number(status);
+	return storageError(operation, provider, code === 304 ? { _tag: "NotModified" } : code === 404 ? { _tag: "NotFound" } : code === 401 || code === 403 ? { _tag: "AccessDenied" } : code === 409 || code === 412 ? { _tag: "PreconditionFailed" } : code === 416 ? { _tag: "RangeNotSatisfiable" } : code === 429 ? { _tag: "Throttled" } : Number.isInteger(code) && code >= 400 ? {
+		_tag: "ProviderFailure",
+		code: String(code)
+	} : { _tag: "TransportFailure" }, mutation ? code >= 400 && code < 500 ? "rejected" : "unknown" : "not-applicable");
+}
+
+export { providerError };
+//# sourceMappingURL=provider-errors.js.map

package/dist/internal/node/provider-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-errors.js","names":[],"sources":["../../../src/internal/node/provider-errors.ts"],"sourcesContent":["import { Predicate } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\n\n/** SDK errors may contain credentials and bearer URLs; retain only classified status. */\nexport function providerError(\n  provider: string,\n  operation: string,\n  mutation: boolean,\n  error: unknown,\n) {\n  const status = Predicate.isObject(error)\n    ? (Reflect.get(error, \"statusCode\") ?? Reflect.get(error, \"code\"))\n    : undefined;\n  const code = Number(status);\n  const reason =\n    code === 304\n      ? { _tag: \"NotModified\" as const }\n      : code === 404\n        ? { _tag: \"NotFound\" as const }\n        : code === 401 || code === 403\n          ? { _tag: \"AccessDenied\" as const }\n          : code === 409 || code === 412\n            ? { _tag: \"PreconditionFailed\" as const }\n            : code === 416\n              ? { _tag: \"RangeNotSatisfiable\" as const }\n              : code === 429\n                ? { _tag: \"Throttled\" as const }\n                : Number.isInteger(code) && code >= 400\n                  ? { _tag: \"ProviderFailure\" as const, code: String(code) }\n                  : { _tag: \"TransportFailure\" as const };\n  return storageError(\n    operation,\n    provider,\n    reason,\n    mutation ? (code >= 400 && code < 500 ? \"rejected\" : \"unknown\") : \"not-applicable\",\n  );\n}\n"],"mappings":";;;;;AAKA,SAAgB,cACd,UACA,WACA,UACA,OACA;CACA,MAAM,SAAS,UAAU,SAAS,KAAK,IAClC,QAAQ,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,MAAM,IAC9D;CACJ,MAAM,OAAO,OAAO,MAAM;CAiB1B,OAAO,aACL,WACA,UAjBA,SAAS,MACL,EAAE,MAAM,cAAuB,IAC/B,SAAS,MACP,EAAE,MAAM,WAAoB,IAC5B,SAAS,OAAO,SAAS,MACvB,EAAE,MAAM,eAAwB,IAChC,SAAS,OAAO,SAAS,MACvB,EAAE,MAAM,qBAA8B,IACtC,SAAS,MACP,EAAE,MAAM,sBAA+B,IACvC,SAAS,MACP,EAAE,MAAM,YAAqB,IAC7B,OAAO,UAAU,IAAI,KAAK,QAAQ,MAChC;EAAE,MAAM;EAA4B,MAAM,OAAO,IAAI;CAAE,IACvD,EAAE,MAAM,mBAA4B,GAKpD,WAAY,QAAQ,OAAO,OAAO,MAAM,aAAa,YAAa,gBACpE;AACF"}