@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/gcs/admin.js

@@ -0,0 +1,206 @@
+import { storageError } from "../core/errors.js";
+import { decodeRequest } from "../internal/request-validation.js";
+import { decodeJson, jsonRequest } from "../providers/gcs/transport.js";
+import { GcsStorage } from "../gcs.js";
+import { configurationState } from "../lifecycle/configuration-state.js";
+import { iam } from "../providers/gcs/iam.js";
+import { Context, Effect, Layer, Schema } from "effect";
+
+// src/providers/gcs/admin.ts
+const Bucket = Schema.String.check(Schema.isPattern(/^[a-z0-9][a-z0-9._-]{1,220}[a-z0-9]$/u));
+const Native = Schema.Record(Schema.String, Schema.Unknown);
+const Configuration = Schema.Struct({
+	cors: Schema.optional(Schema.Array(Native)),
+	lifecycle: Schema.optional(Native),
+	versioning: Schema.optional(Schema.Struct({ enabled: Schema.Boolean })),
+	encryption: Schema.optional(Native),
+	retentionPolicy: Schema.optional(Native),
+	softDeletePolicy: Schema.optional(Native),
+	iamConfiguration: Schema.optional(Native),
+	labels: Schema.optional(Schema.Record(Schema.String, Schema.String)),
+	logging: Schema.optional(Native),
+	website: Schema.optional(Native),
+	autoclass: Schema.optional(Native)
+});
+const makeService = (storage) => {
+	const path = (bucket) => `${storage.config.apiEndpoint}/storage/v1/b/${encodeURIComponent(bucket)}`;
+	const get = Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Schema.Struct({ bucket: Bucket }), input, "headBucket", "gcs");
+		const output = yield* jsonRequest(storage, "headBucket", false, {
+			uri: path(value.bucket),
+			json: true
+		});
+		return yield* decodeJson(Schema.Struct({
+			name: Schema.String,
+			metageneration: Schema.String.check(Schema.isPattern(/^\d+$/u)),
+			...Configuration.fields
+		}), output.body, "headBucket");
+	});
+	const plans = /* @__PURE__ */ new WeakMap();
+	return {
+		head: get,
+		iam: iam(storage),
+		listPage: Effect.fnUntraced(function* (input) {
+			const value = yield* decodeRequest(Schema.Struct({
+				project: Schema.NonEmptyString,
+				cursor: Schema.optional(Schema.String),
+				limit: Schema.optional(Schema.Int.check(Schema.isBetween({
+					minimum: 1,
+					maximum: 1e3
+				})))
+			}), input, "listBuckets", "gcs");
+			const output = yield* jsonRequest(storage, "listBuckets", false, {
+				uri: `${storage.config.apiEndpoint}/storage/v1/b`,
+				qs: {
+					project: value.project,
+					pageToken: value.cursor,
+					maxResults: value.limit ?? 1e3
+				},
+				json: true
+			});
+			return yield* decodeJson(Schema.Struct({
+				items: Schema.optional(Schema.Array(Native)),
+				nextPageToken: Schema.optional(Schema.String)
+			}), output.body, "listBuckets");
+		}),
+		create: Effect.fnUntraced(function* (input) {
+			const value = yield* decodeRequest(Schema.Struct({
+				bucket: Bucket,
+				project: Schema.NonEmptyString,
+				location: Schema.NonEmptyString
+			}), input, "createBucket", "gcs", true);
+			const output = yield* jsonRequest(storage, "createBucket", true, {
+				uri: `${storage.config.apiEndpoint}/storage/v1/b`,
+				method: "POST",
+				qs: { project: value.project },
+				json: {
+					name: value.bucket,
+					location: value.location
+				}
+			});
+			return yield* decodeJson(Native, output.body, "createBucket");
+		}),
+		deleteEmpty: Effect.fnUntraced(function* (input) {
+			const value = yield* decodeRequest(Schema.Struct({
+				bucket: Bucket,
+				ifMetagenerationMatch: Schema.String.check(Schema.isPattern(/^\d+$/u))
+			}), input, "deleteBucket", "gcs", true);
+			yield* jsonRequest(storage, "deleteBucket", true, {
+				uri: path(value.bucket),
+				method: "DELETE",
+				qs: { ifMetagenerationMatch: value.ifMetagenerationMatch },
+				json: true
+			});
+		}),
+		configuration: {
+			get,
+			plan: Effect.fnUntraced(function* (input) {
+				const desired = yield* decodeRequest(Configuration, input.desired, "planConfiguration", "gcs");
+				const current = yield* get({ bucket: input.bucket });
+				const plan = {
+					bucket: current.name,
+					expectedMetageneration: current.metageneration,
+					desired: structuredClone(desired),
+					changes: Object.keys(desired).filter((key) => configurationState(current[key]) !== configurationState(desired[key]))
+				};
+				plans.set(plan, {
+					snapshot: configurationState(plan),
+					bucket: current.name,
+					metageneration: current.metageneration,
+					desired: structuredClone(desired)
+				});
+				return plan;
+			}),
+			apply: Effect.fnUntraced(function* (input) {
+				const saved = plans.get(input.plan);
+				if (!saved || configurationState(input.plan) !== saved.snapshot) return yield* storageError("applyConfiguration", "gcs", {
+					_tag: "InvalidInput",
+					field: "issued-plan"
+				}, "not-started");
+				if ([
+					"retentionPolicy",
+					"softDeletePolicy",
+					"iamConfiguration",
+					"encryption",
+					"lifecycle"
+				].some((key) => Object.hasOwn(saved.desired, key)) && (input.protectionChange?.intent !== "change-storage-protection" || !input.protectionChange.reason)) return yield* storageError("applyConfiguration", "gcs", {
+					_tag: "InvalidInput",
+					field: "protectionChange"
+				}, "not-started");
+				plans.delete(input.plan);
+				const output = yield* jsonRequest(storage, "applyConfiguration", true, {
+					uri: path(saved.bucket),
+					method: "PATCH",
+					qs: { ifMetagenerationMatch: saved.metageneration },
+					json: saved.desired
+				});
+				return yield* decodeJson(Native, output.body, "applyConfiguration");
+			})
+		},
+		lockRetentionPolicy: Effect.fnUntraced(function* (input) {
+			const value = yield* decodeRequest(Schema.Struct({
+				bucket: Bucket,
+				ifMetagenerationMatch: Schema.String.check(Schema.isPattern(/^\d+$/u)),
+				intent: Schema.Literal("irreversibly-lock-retention")
+			}), input, "lockRetentionPolicy", "gcs", true);
+			const output = yield* jsonRequest(storage, "lockRetentionPolicy", true, {
+				uri: `${path(value.bucket)}/lockRetentionPolicy`,
+				method: "POST",
+				qs: { ifMetagenerationMatch: value.ifMetagenerationMatch },
+				json: {}
+			});
+			return yield* decodeJson(Native, output.body, "lockRetentionPolicy");
+		}),
+		notifications: {
+			list: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(Schema.Struct({ bucket: Bucket }), input, "listNotifications", "gcs");
+				return (yield* jsonRequest(storage, "listNotifications", false, {
+					uri: `${path(value.bucket)}/notificationConfigs`,
+					json: true
+				})).body;
+			}),
+			create: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(Schema.Struct({
+					bucket: Bucket,
+					topic: Schema.NonEmptyString,
+					events: Schema.optional(Schema.Array(Schema.NonEmptyString))
+				}), input, "createNotification", "gcs", true);
+				return (yield* jsonRequest(storage, "createNotification", true, {
+					uri: `${path(value.bucket)}/notificationConfigs`,
+					method: "POST",
+					json: {
+						topic: value.topic,
+						payload_format: "JSON_API_V1",
+						event_types: value.events
+					}
+				})).body;
+			}),
+			delete: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(Schema.Struct({
+					bucket: Bucket,
+					id: Schema.NonEmptyString
+				}), input, "deleteNotification", "gcs", true);
+				yield* jsonRequest(storage, "deleteNotification", true, {
+					uri: `${path(value.bucket)}/notificationConfigs/${encodeURIComponent(value.id)}`,
+					method: "DELETE",
+					json: true
+				});
+			})
+		}
+	};
+};
+const make = Effect.fnUntraced(function* (config) {
+	return makeService(yield* GcsStorage.make({
+		...config,
+		bucket: "administration"
+	}));
+});
+var GcsAdministration = class GcsAdministration extends Context.Service()("@effect-kit/storage/gcs/GcsAdministration") {
+	static make = make;
+	static layer(config) {
+		return Layer.effect(GcsAdministration, make(config));
+	}
+};
+
+export { GcsAdministration };
+//# sourceMappingURL=admin.js.map

package/dist/gcs/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","names":[],"sources":["../../src/providers/gcs/admin.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { configurationState } from \"../../lifecycle/configuration-state.js\";\nimport { iam } from \"./iam.js\";\nimport { GcsStorage } from \"./index.js\";\nimport type { GcsConfig, GcsStorageService } from \"./index.js\";\nimport { jsonRequest, decodeJson } from \"./transport.js\";\n\nconst Bucket = Schema.String.check(Schema.isPattern(/^[a-z0-9][a-z0-9._-]{1,220}[a-z0-9]$/u));\nconst Native = Schema.Record(Schema.String, Schema.Unknown);\nconst Configuration = Schema.Struct({\n  cors: Schema.optional(Schema.Array(Native)),\n  lifecycle: Schema.optional(Native),\n  versioning: Schema.optional(Schema.Struct({ enabled: Schema.Boolean })),\n  encryption: Schema.optional(Native),\n  retentionPolicy: Schema.optional(Native),\n  softDeletePolicy: Schema.optional(Native),\n  iamConfiguration: Schema.optional(Native),\n  labels: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  logging: Schema.optional(Native),\n  website: Schema.optional(Native),\n  autoclass: Schema.optional(Native),\n});\nexport type GcsBucketConfiguration = typeof Configuration.Type;\nconst makeService = (storage: GcsStorageService) => {\n  const path = (bucket: string) =>\n    `${storage.config.apiEndpoint}/storage/v1/b/${encodeURIComponent(bucket)}`;\n  const get = Effect.fnUntraced(function* (input: { readonly bucket: string }) {\n    const value = yield* decodeRequest(\n      Schema.Struct({ bucket: Bucket }),\n      input,\n      \"headBucket\",\n      \"gcs\",\n    );\n    const output = yield* jsonRequest(storage, \"headBucket\", false, {\n      uri: path(value.bucket),\n      json: true,\n    });\n    return yield* decodeJson(\n      Schema.Struct({\n        name: Schema.String,\n        metageneration: Schema.String.check(Schema.isPattern(/^\\d+$/u)),\n        ...Configuration.fields,\n      }),\n      output.body,\n      \"headBucket\",\n    );\n  });\n  const plans = new WeakMap<\n    object,\n    { snapshot: string; bucket: string; metageneration: string; desired: GcsBucketConfiguration }\n  >();\n  return {\n    head: get,\n    iam: iam(storage),\n    listPage: Effect.fnUntraced(function* (input: {\n      readonly project: string;\n      readonly cursor?: string;\n      readonly limit?: number;\n    }) {\n      const value = yield* decodeRequest(\n        Schema.Struct({\n          project: Schema.NonEmptyString,\n          cursor: Schema.optional(Schema.String),\n          limit: Schema.optional(Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1000 }))),\n        }),\n        input,\n        \"listBuckets\",\n        \"gcs\",\n      );\n      const output = yield* jsonRequest(storage, \"listBuckets\", false, {\n        uri: `${storage.config.apiEndpoint}/storage/v1/b`,\n        qs: { project: value.project, pageToken: value.cursor, maxResults: value.limit ?? 1000 },\n        json: true,\n      });\n      return yield* decodeJson(\n        Schema.Struct({\n          items: Schema.optional(Schema.Array(Native)),\n          nextPageToken: Schema.optional(Schema.String),\n        }),\n        output.body,\n        \"listBuckets\",\n      );\n    }),\n    create: Effect.fnUntraced(function* (input: {\n      readonly bucket: string;\n      readonly project: string;\n      readonly location: string;\n    }) {\n      const value = yield* decodeRequest(\n        Schema.Struct({\n          bucket: Bucket,\n          project: Schema.NonEmptyString,\n          location: Schema.NonEmptyString,\n        }),\n        input,\n        \"createBucket\",\n        \"gcs\",\n        true,\n      );\n      const output = yield* jsonRequest(storage, \"createBucket\", true, {\n        uri: `${storage.config.apiEndpoint}/storage/v1/b`,\n        method: \"POST\",\n        qs: { project: value.project },\n        json: { name: value.bucket, location: value.location },\n      });\n      return yield* decodeJson(Native, output.body, \"createBucket\");\n    }),\n    deleteEmpty: Effect.fnUntraced(function* (input: {\n      readonly bucket: string;\n      readonly ifMetagenerationMatch: string;\n    }) {\n      const value = yield* decodeRequest(\n        Schema.Struct({\n          bucket: Bucket,\n          ifMetagenerationMatch: Schema.String.check(Schema.isPattern(/^\\d+$/u)),\n        }),\n        input,\n        \"deleteBucket\",\n        \"gcs\",\n        true,\n      );\n      yield* jsonRequest(storage, \"deleteBucket\", true, {\n        uri: path(value.bucket),\n        method: \"DELETE\",\n        qs: { ifMetagenerationMatch: value.ifMetagenerationMatch },\n        json: true,\n      });\n    }),\n    configuration: {\n      get,\n      plan: Effect.fnUntraced(function* (input: {\n        readonly bucket: string;\n        readonly desired: GcsBucketConfiguration;\n      }) {\n        const desired = yield* decodeRequest(\n          Configuration,\n          input.desired,\n          \"planConfiguration\",\n          \"gcs\",\n        );\n        const current = yield* get({ bucket: input.bucket });\n        const plan = {\n          bucket: current.name,\n          expectedMetageneration: current.metageneration,\n          desired: structuredClone(desired),\n          changes: Object.keys(desired).filter(\n            (key) =>\n              configurationState(current[key as keyof typeof current]) !==\n              configurationState(desired[key as keyof typeof desired]),\n          ),\n        };\n        plans.set(plan, {\n          snapshot: configurationState(plan),\n          bucket: current.name,\n          metageneration: current.metageneration,\n          desired: structuredClone(desired),\n        });\n        return plan;\n      }),\n      apply: Effect.fnUntraced(function* (input: {\n        readonly plan: object;\n        readonly protectionChange?: {\n          readonly intent: \"change-storage-protection\";\n          readonly reason: string;\n        };\n      }) {\n        const saved = plans.get(input.plan);\n        if (!saved || configurationState(input.plan) !== saved.snapshot)\n          return yield* storageError(\n            \"applyConfiguration\",\n            \"gcs\",\n            { _tag: \"InvalidInput\", field: \"issued-plan\" },\n            \"not-started\",\n          );\n        if (\n          [\n            \"retentionPolicy\",\n            \"softDeletePolicy\",\n            \"iamConfiguration\",\n            \"encryption\",\n            \"lifecycle\",\n          ].some((key) => Object.hasOwn(saved.desired, key)) &&\n          (input.protectionChange?.intent !== \"change-storage-protection\" ||\n            !input.protectionChange.reason)\n        )\n          return yield* storageError(\n            \"applyConfiguration\",\n            \"gcs\",\n            { _tag: \"InvalidInput\", field: \"protectionChange\" },\n            \"not-started\",\n          );\n        plans.delete(input.plan);\n        const output = yield* jsonRequest(storage, \"applyConfiguration\", true, {\n          uri: path(saved.bucket),\n          method: \"PATCH\",\n          qs: { ifMetagenerationMatch: saved.metageneration },\n          json: saved.desired,\n        });\n        return yield* decodeJson(Native, output.body, \"applyConfiguration\");\n      }),\n    },\n    lockRetentionPolicy: Effect.fnUntraced(function* (input: {\n      readonly bucket: string;\n      readonly ifMetagenerationMatch: string;\n      readonly intent: \"irreversibly-lock-retention\";\n    }) {\n      const value = yield* decodeRequest(\n        Schema.Struct({\n          bucket: Bucket,\n          ifMetagenerationMatch: Schema.String.check(Schema.isPattern(/^\\d+$/u)),\n          intent: Schema.Literal(\"irreversibly-lock-retention\"),\n        }),\n        input,\n        \"lockRetentionPolicy\",\n        \"gcs\",\n        true,\n      );\n      const output = yield* jsonRequest(storage, \"lockRetentionPolicy\", true, {\n        uri: `${path(value.bucket)}/lockRetentionPolicy`,\n        method: \"POST\",\n        qs: { ifMetagenerationMatch: value.ifMetagenerationMatch },\n        json: {},\n      });\n      return yield* decodeJson(Native, output.body, \"lockRetentionPolicy\");\n    }),\n    notifications: {\n      list: Effect.fnUntraced(function* (input: { readonly bucket: string }) {\n        const value = yield* decodeRequest(\n          Schema.Struct({ bucket: Bucket }),\n          input,\n          \"listNotifications\",\n          \"gcs\",\n        );\n        return (yield* jsonRequest(storage, \"listNotifications\", false, {\n          uri: `${path(value.bucket)}/notificationConfigs`,\n          json: true,\n        })).body;\n      }),\n      create: Effect.fnUntraced(function* (input: {\n        readonly bucket: string;\n        readonly topic: string;\n        readonly events?: ReadonlyArray<string>;\n      }) {\n        const value = yield* decodeRequest(\n          Schema.Struct({\n            bucket: Bucket,\n            topic: Schema.NonEmptyString,\n            events: Schema.optional(Schema.Array(Schema.NonEmptyString)),\n          }),\n          input,\n          \"createNotification\",\n          \"gcs\",\n          true,\n        );\n        return (yield* jsonRequest(storage, \"createNotification\", true, {\n          uri: `${path(value.bucket)}/notificationConfigs`,\n          method: \"POST\",\n          json: { topic: value.topic, payload_format: \"JSON_API_V1\", event_types: value.events },\n        })).body;\n      }),\n      delete: Effect.fnUntraced(function* (input: {\n        readonly bucket: string;\n        readonly id: string;\n      }) {\n        const value = yield* decodeRequest(\n          Schema.Struct({ bucket: Bucket, id: Schema.NonEmptyString }),\n          input,\n          \"deleteNotification\",\n          \"gcs\",\n          true,\n        );\n        yield* jsonRequest(storage, \"deleteNotification\", true, {\n          uri: `${path(value.bucket)}/notificationConfigs/${encodeURIComponent(value.id)}`,\n          method: \"DELETE\",\n          json: true,\n        });\n      }),\n    },\n  };\n};\nconst make = Effect.fnUntraced(function* (config: Omit<GcsConfig, \"bucket\">) {\n  return makeService(yield* GcsStorage.make({ ...config, bucket: \"administration\" }));\n});\nexport class GcsAdministration extends Context.Service<\n  GcsAdministration,\n  ReturnType<typeof makeService>\n>()(\"@effect-kit/storage/gcs/GcsAdministration\") {\n  static readonly make = make;\n  static layer(config: Omit<GcsConfig, \"bucket\">) {\n    return Layer.effect(GcsAdministration, make(config));\n  }\n}\n"],"mappings":";;;;;;;;;AAUA,MAAM,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,uCAAuC,CAAC;AAC5F,MAAM,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AAC1D,MAAM,gBAAgB,OAAO,OAAO;CAClC,MAAM,OAAO,SAAS,OAAO,MAAM,MAAM,CAAC;CAC1C,WAAW,OAAO,SAAS,MAAM;CACjC,YAAY,OAAO,SAAS,OAAO,OAAO,EAAE,SAAS,OAAO,QAAQ,CAAC,CAAC;CACtE,YAAY,OAAO,SAAS,MAAM;CAClC,iBAAiB,OAAO,SAAS,MAAM;CACvC,kBAAkB,OAAO,SAAS,MAAM;CACxC,kBAAkB,OAAO,SAAS,MAAM;CACxC,QAAQ,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;CACnE,SAAS,OAAO,SAAS,MAAM;CAC/B,SAAS,OAAO,SAAS,MAAM;CAC/B,WAAW,OAAO,SAAS,MAAM;AACnC,CAAC;AAED,MAAM,eAAe,YAA+B;CAClD,MAAM,QAAQ,WACZ,GAAG,QAAQ,OAAO,YAAY,gBAAgB,mBAAmB,MAAM;CACzE,MAAM,MAAM,OAAO,WAAW,WAAW,OAAoC;EAC3E,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO,EAAE,QAAQ,OAAO,CAAC,GAChC,OACA,cACA,KACF;EACA,MAAM,SAAS,OAAO,YAAY,SAAS,cAAc,OAAO;GAC9D,KAAK,KAAK,MAAM,MAAM;GACtB,MAAM;EACR,CAAC;EACD,OAAO,OAAO,WACZ,OAAO,OAAO;GACZ,MAAM,OAAO;GACb,gBAAgB,OAAO,OAAO,MAAM,OAAO,UAAU,QAAQ,CAAC;GAC9D,GAAG,cAAc;EACnB,CAAC,GACD,OAAO,MACP,YACF;CACF,CAAC;CACD,MAAM,wBAAQ,IAAI,QAGhB;CACF,OAAO;EACL,MAAM;EACN,KAAK,IAAI,OAAO;EAChB,UAAU,OAAO,WAAW,WAAW,OAIpC;GACD,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;IACZ,SAAS,OAAO;IAChB,QAAQ,OAAO,SAAS,OAAO,MAAM;IACrC,OAAO,OAAO,SAAS,OAAO,IAAI,MAAM,OAAO,UAAU;KAAE,SAAS;KAAG,SAAS;IAAK,CAAC,CAAC,CAAC;GAC1F,CAAC,GACD,OACA,eACA,KACF;GACA,MAAM,SAAS,OAAO,YAAY,SAAS,eAAe,OAAO;IAC/D,KAAK,GAAG,QAAQ,OAAO,YAAY;IACnC,IAAI;KAAE,SAAS,MAAM;KAAS,WAAW,MAAM;KAAQ,YAAY,MAAM,SAAS;IAAK;IACvF,MAAM;GACR,CAAC;GACD,OAAO,OAAO,WACZ,OAAO,OAAO;IACZ,OAAO,OAAO,SAAS,OAAO,MAAM,MAAM,CAAC;IAC3C,eAAe,OAAO,SAAS,OAAO,MAAM;GAC9C,CAAC,GACD,OAAO,MACP,aACF;EACF,CAAC;EACD,QAAQ,OAAO,WAAW,WAAW,OAIlC;GACD,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;IACZ,QAAQ;IACR,SAAS,OAAO;IAChB,UAAU,OAAO;GACnB,CAAC,GACD,OACA,gBACA,OACA,IACF;GACA,MAAM,SAAS,OAAO,YAAY,SAAS,gBAAgB,MAAM;IAC/D,KAAK,GAAG,QAAQ,OAAO,YAAY;IACnC,QAAQ;IACR,IAAI,EAAE,SAAS,MAAM,QAAQ;IAC7B,MAAM;KAAE,MAAM,MAAM;KAAQ,UAAU,MAAM;IAAS;GACvD,CAAC;GACD,OAAO,OAAO,WAAW,QAAQ,OAAO,MAAM,cAAc;EAC9D,CAAC;EACD,aAAa,OAAO,WAAW,WAAW,OAGvC;GACD,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;IACZ,QAAQ;IACR,uBAAuB,OAAO,OAAO,MAAM,OAAO,UAAU,QAAQ,CAAC;GACvE,CAAC,GACD,OACA,gBACA,OACA,IACF;GACA,OAAO,YAAY,SAAS,gBAAgB,MAAM;IAChD,KAAK,KAAK,MAAM,MAAM;IACtB,QAAQ;IACR,IAAI,EAAE,uBAAuB,MAAM,sBAAsB;IACzD,MAAM;GACR,CAAC;EACH,CAAC;EACD,eAAe;GACb;GACA,MAAM,OAAO,WAAW,WAAW,OAGhC;IACD,MAAM,UAAU,OAAO,cACrB,eACA,MAAM,SACN,qBACA,KACF;IACA,MAAM,UAAU,OAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;IACnD,MAAM,OAAO;KACX,QAAQ,QAAQ;KAChB,wBAAwB,QAAQ;KAChC,SAAS,gBAAgB,OAAO;KAChC,SAAS,OAAO,KAAK,OAAO,CAAC,CAAC,QAC3B,QACC,mBAAmB,QAAQ,IAA4B,MACvD,mBAAmB,QAAQ,IAA4B,CAC3D;IACF;IACA,MAAM,IAAI,MAAM;KACd,UAAU,mBAAmB,IAAI;KACjC,QAAQ,QAAQ;KAChB,gBAAgB,QAAQ;KACxB,SAAS,gBAAgB,OAAO;IAClC,CAAC;IACD,OAAO;GACT,CAAC;GACD,OAAO,OAAO,WAAW,WAAW,OAMjC;IACD,MAAM,QAAQ,MAAM,IAAI,MAAM,IAAI;IAClC,IAAI,CAAC,SAAS,mBAAmB,MAAM,IAAI,MAAM,MAAM,UACrD,OAAO,OAAO,aACZ,sBACA,OACA;KAAE,MAAM;KAAgB,OAAO;IAAc,GAC7C,aACF;IACF,IACE;KACE;KACA;KACA;KACA;KACA;IACF,CAAC,CAAC,MAAM,QAAQ,OAAO,OAAO,MAAM,SAAS,GAAG,CAAC,MAChD,MAAM,kBAAkB,WAAW,+BAClC,CAAC,MAAM,iBAAiB,SAE1B,OAAO,OAAO,aACZ,sBACA,OACA;KAAE,MAAM;KAAgB,OAAO;IAAmB,GAClD,aACF;IACF,MAAM,OAAO,MAAM,IAAI;IACvB,MAAM,SAAS,OAAO,YAAY,SAAS,sBAAsB,MAAM;KACrE,KAAK,KAAK,MAAM,MAAM;KACtB,QAAQ;KACR,IAAI,EAAE,uBAAuB,MAAM,eAAe;KAClD,MAAM,MAAM;IACd,CAAC;IACD,OAAO,OAAO,WAAW,QAAQ,OAAO,MAAM,oBAAoB;GACpE,CAAC;EACH;EACA,qBAAqB,OAAO,WAAW,WAAW,OAI/C;GACD,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;IACZ,QAAQ;IACR,uBAAuB,OAAO,OAAO,MAAM,OAAO,UAAU,QAAQ,CAAC;IACrE,QAAQ,OAAO,QAAQ,6BAA6B;GACtD,CAAC,GACD,OACA,uBACA,OACA,IACF;GACA,MAAM,SAAS,OAAO,YAAY,SAAS,uBAAuB,MAAM;IACtE,KAAK,GAAG,KAAK,MAAM,MAAM,EAAE;IAC3B,QAAQ;IACR,IAAI,EAAE,uBAAuB,MAAM,sBAAsB;IACzD,MAAM,CAAC;GACT,CAAC;GACD,OAAO,OAAO,WAAW,QAAQ,OAAO,MAAM,qBAAqB;EACrE,CAAC;EACD,eAAe;GACb,MAAM,OAAO,WAAW,WAAW,OAAoC;IACrE,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO,EAAE,QAAQ,OAAO,CAAC,GAChC,OACA,qBACA,KACF;IACA,QAAQ,OAAO,YAAY,SAAS,qBAAqB,OAAO;KAC9D,KAAK,GAAG,KAAK,MAAM,MAAM,EAAE;KAC3B,MAAM;IACR,CAAC,EAAC,CAAE;GACN,CAAC;GACD,QAAQ,OAAO,WAAW,WAAW,OAIlC;IACD,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;KACZ,QAAQ;KACR,OAAO,OAAO;KACd,QAAQ,OAAO,SAAS,OAAO,MAAM,OAAO,cAAc,CAAC;IAC7D,CAAC,GACD,OACA,sBACA,OACA,IACF;IACA,QAAQ,OAAO,YAAY,SAAS,sBAAsB,MAAM;KAC9D,KAAK,GAAG,KAAK,MAAM,MAAM,EAAE;KAC3B,QAAQ;KACR,MAAM;MAAE,OAAO,MAAM;MAAO,gBAAgB;MAAe,aAAa,MAAM;KAAO;IACvF,CAAC,EAAC,CAAE;GACN,CAAC;GACD,QAAQ,OAAO,WAAW,WAAW,OAGlC;IACD,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;KAAE,QAAQ;KAAQ,IAAI,OAAO;IAAe,CAAC,GAC3D,OACA,sBACA,OACA,IACF;IACA,OAAO,YAAY,SAAS,sBAAsB,MAAM;KACtD,KAAK,GAAG,KAAK,MAAM,MAAM,EAAE,uBAAuB,mBAAmB,MAAM,EAAE;KAC7E,QAAQ;KACR,MAAM;IACR,CAAC;GACH,CAAC;EACH;CACF;AACF;AACA,MAAM,OAAO,OAAO,WAAW,WAAW,QAAmC;CAC3E,OAAO,YAAY,OAAO,WAAW,KAAK;EAAE,GAAG;EAAQ,QAAQ;CAAiB,CAAC,CAAC;AACpF,CAAC;AACD,IAAa,oBAAb,MAAa,0BAA0B,QAAQ,QAG7C,CAAC,CAAC,2CAA2C,CAAC,CAAC;CAC/C,OAAgB,OAAO;CACvB,OAAO,MAAM,QAAmC;EAC9C,OAAO,MAAM,OAAO,mBAAmB,KAAK,MAAM,CAAC;CACrD;AACF"}

package/dist/gcs/events.d.ts

@@ -0,0 +1,41 @@
+import { StorageError } from "../core/errors.js";
+import "../index.js";
+import { Effect, Redacted } from "effect";
+export declare namespace GcsEvents {
+  /** Accepts the Pub/Sub message after transport authentication and payload decoding. */
+  const decode: (payload: unknown, options: {
+    readonly bucket: string;
+    readonly storeId: string;
+  }) => Effect.Effect<{
+    readonly provider: string;
+    readonly kind: "delete-marker-created" | "metadata-updated" | "object-created" | "object-deleted" | "other" | "restore-completed" | "version-archived";
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version?: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      } | undefined;
+    };
+    readonly occurredAt: import("effect/DateTime").Utc;
+    readonly id?: string | undefined;
+    readonly sequencer?: string | undefined;
+    readonly nativeType: string;
+    readonly native?: Redacted.Redacted<unknown> | undefined;
+  }[], StorageError, never>;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/gcs/events.js

@@ -0,0 +1,45 @@
+import { storageError } from "../core/errors.js";
+import { decodeRequest } from "../internal/request-validation.js";
+import { StorageEvent } from "../events.js";
+import { decodeResponse } from "../internal/provider-response.js";
+import { Effect, Redacted, Schema } from "effect";
+
+// src/providers/gcs/events.ts
+let GcsEvents;
+(function(_GcsEvents) {
+	_GcsEvents.decode = Effect.fnUntraced(function* (payload, options) {
+		const value = yield* decodeResponse(Schema.Struct({
+			messageId: Schema.NonEmptyString,
+			publishTime: Schema.DateTimeUtcFromString,
+			attributes: Schema.Struct({
+				bucketId: Schema.NonEmptyString,
+				objectId: Schema.NonEmptyString,
+				objectGeneration: Schema.optional(Schema.String.check(Schema.isPattern(/^\d+$/u))),
+				eventType: Schema.NonEmptyString
+			})
+		}), payload, "decodeEvent", "gcs");
+		if (value.attributes.bucketId !== options.bucket) return yield* storageError("decodeEvent", "gcs", {
+			_tag: "InvalidInput",
+			field: "bucket"
+		});
+		return [yield* decodeRequest(StorageEvent, {
+			provider: "gcs",
+			kind: value.attributes.eventType === "OBJECT_FINALIZE" ? "object-created" : value.attributes.eventType === "OBJECT_DELETE" ? "object-deleted" : value.attributes.eventType === "OBJECT_ARCHIVE" ? "version-archived" : value.attributes.eventType === "OBJECT_METADATA_UPDATE" ? "metadata-updated" : "other",
+			ref: {
+				storeId: options.storeId,
+				key: value.attributes.objectId,
+				...value.attributes.objectGeneration ? { version: {
+					_tag: "GcsGeneration",
+					id: value.attributes.objectGeneration
+				} } : {}
+			},
+			occurredAt: value.publishTime,
+			id: value.messageId,
+			nativeType: value.attributes.eventType,
+			native: Redacted.make(payload)
+		}, "decodeEvent", "gcs")];
+	});
+})(GcsEvents || (GcsEvents = {}));
+
+export { GcsEvents };
+//# sourceMappingURL=events.js.map

package/dist/gcs/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","names":[],"sources":["../../src/providers/gcs/events.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeResponse } from \"../../internal/provider-response.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { StorageEvent } from \"../../lifecycle/events.js\";\n\nexport namespace GcsEvents {\n  /** Accepts the Pub/Sub message after transport authentication and payload decoding. */\n  export const decode = Effect.fnUntraced(function* (\n    payload: unknown,\n    options: { readonly bucket: string; readonly storeId: string },\n  ) {\n    const value = yield* decodeResponse(\n      Schema.Struct({\n        messageId: Schema.NonEmptyString,\n        publishTime: Schema.DateTimeUtcFromString,\n        attributes: Schema.Struct({\n          bucketId: Schema.NonEmptyString,\n          objectId: Schema.NonEmptyString,\n          objectGeneration: Schema.optional(Schema.String.check(Schema.isPattern(/^\\d+$/u))),\n          eventType: Schema.NonEmptyString,\n        }),\n      }),\n      payload,\n      \"decodeEvent\",\n      \"gcs\",\n    );\n    if (value.attributes.bucketId !== options.bucket)\n      return yield* storageError(\"decodeEvent\", \"gcs\", { _tag: \"InvalidInput\", field: \"bucket\" });\n    return [\n      yield* decodeRequest(\n        StorageEvent,\n        {\n          provider: \"gcs\",\n          kind:\n            value.attributes.eventType === \"OBJECT_FINALIZE\"\n              ? \"object-created\"\n              : value.attributes.eventType === \"OBJECT_DELETE\"\n                ? \"object-deleted\"\n                : value.attributes.eventType === \"OBJECT_ARCHIVE\"\n                  ? \"version-archived\"\n                  : value.attributes.eventType === \"OBJECT_METADATA_UPDATE\"\n                    ? \"metadata-updated\"\n                    : \"other\",\n          ref: {\n            storeId: options.storeId,\n            key: value.attributes.objectId,\n            ...(value.attributes.objectGeneration\n              ? { version: { _tag: \"GcsGeneration\", id: value.attributes.objectGeneration } }\n              : {}),\n          },\n          occurredAt: value.publishTime,\n          id: value.messageId,\n          nativeType: value.attributes.eventType,\n          native: Redacted.make(payload),\n        },\n        \"decodeEvent\",\n        \"gcs\",\n      ),\n    ];\n  });\n}\n"],"mappings":";;;;;;;AAOO,IAAU;CAAV;qBAEiB,OAAO,WAAW,WACtC,SACA,SACA;EACA,MAAM,QAAQ,OAAO,eACnB,OAAO,OAAO;GACZ,WAAW,OAAO;GAClB,aAAa,OAAO;GACpB,YAAY,OAAO,OAAO;IACxB,UAAU,OAAO;IACjB,UAAU,OAAO;IACjB,kBAAkB,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,QAAQ,CAAC,CAAC;IACjF,WAAW,OAAO;GACpB,CAAC;EACH,CAAC,GACD,SACA,eACA,KACF;EACA,IAAI,MAAM,WAAW,aAAa,QAAQ,QACxC,OAAO,OAAO,aAAa,eAAe,OAAO;GAAE,MAAM;GAAgB,OAAO;EAAS,CAAC;EAC5F,OAAO,CACL,OAAO,cACL,cACA;GACE,UAAU;GACV,MACE,MAAM,WAAW,cAAc,oBAC3B,mBACA,MAAM,WAAW,cAAc,kBAC7B,mBACA,MAAM,WAAW,cAAc,mBAC7B,qBACA,MAAM,WAAW,cAAc,2BAC7B,qBACA;GACZ,KAAK;IACH,SAAS,QAAQ;IACjB,KAAK,MAAM,WAAW;IACtB,GAAI,MAAM,WAAW,mBACjB,EAAE,SAAS;KAAE,MAAM;KAAiB,IAAI,MAAM,WAAW;IAAiB,EAAE,IAC5E,CAAC;GACP;GACA,YAAY,MAAM;GAClB,IAAI,MAAM;GACV,YAAY,MAAM,WAAW;GAC7B,QAAQ,SAAS,KAAK,OAAO;EAC/B,GACA,eACA,KACF,CACF;CACF,CAAC;EACF,8BAAD"}

package/dist/gcs/governance.d.ts

@@ -0,0 +1,158 @@
+import { StorageError } from "../core/errors.js";
+import { VersionRef } from "../lifecycle.js";
+import "../index.js";
+import { GcsStorage, GcsStorageService } from "../gcs.js";
+import { GcsStorageTier } from "../providers/gcs/tier.js";
+import { Context, DateTime, Effect, Layer } from "effect";
+declare const make: (storage: GcsStorageService) => {
+  setRetention: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly mode: "Locked" | "Unlocked";
+    readonly retainUntil: DateTime.Utc;
+    readonly intent: "change-object-retention";
+    readonly override?: "override-unlocked-retention" | undefined;
+  }) => Effect.Effect<unknown, StorageError, never>;
+  inspect: (input: {
+    readonly ref: VersionRef;
+  }) => Effect.Effect<{
+    readonly temporaryHold?: boolean | undefined;
+    readonly eventBasedHold?: boolean | undefined;
+    readonly retentionExpirationTime?: string | undefined;
+    readonly retention?: {
+      readonly mode: string;
+      readonly retainUntilTime: string;
+    } | undefined;
+    readonly kmsKeyName?: string | undefined;
+    readonly customerEncryption?: {
+      readonly encryptionAlgorithm?: string | undefined;
+      readonly keySha256?: string | undefined;
+    } | undefined;
+  }, StorageError, never>;
+  setHolds: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly temporaryHold?: boolean | undefined;
+    readonly eventBasedHold?: boolean | undefined;
+    readonly releaseIntent?: "release-object-hold" | undefined;
+  }) => Effect.Effect<unknown, StorageError, never>;
+};
+declare const GcsProtection_base: Context.ServiceClass<GcsProtection, "@effect-kit/storage/gcs/GcsProtection", {
+  setRetention: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly mode: "Locked" | "Unlocked";
+    readonly retainUntil: DateTime.Utc;
+    readonly intent: "change-object-retention";
+    readonly override?: "override-unlocked-retention" | undefined;
+  }) => Effect.Effect<unknown, StorageError, never>;
+  inspect: (input: {
+    readonly ref: VersionRef;
+  }) => Effect.Effect<{
+    readonly temporaryHold?: boolean | undefined;
+    readonly eventBasedHold?: boolean | undefined;
+    readonly retentionExpirationTime?: string | undefined;
+    readonly retention?: {
+      readonly mode: string;
+      readonly retainUntilTime: string;
+    } | undefined;
+    readonly kmsKeyName?: string | undefined;
+    readonly customerEncryption?: {
+      readonly encryptionAlgorithm?: string | undefined;
+      readonly keySha256?: string | undefined;
+    } | undefined;
+  }, StorageError, never>;
+  setHolds: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly temporaryHold?: boolean | undefined;
+    readonly eventBasedHold?: boolean | undefined;
+    readonly releaseIntent?: "release-object-hold" | undefined;
+  }) => Effect.Effect<unknown, StorageError, never>;
+}>;
+export declare class GcsProtection extends GcsProtection_base {
+  static readonly make: typeof make;
+  static readonly layer: Layer.Layer<GcsProtection, never, GcsStorage>;
+}
+export { GcsStorageTier };
+//# sourceMappingURL=governance.d.ts.map

package/dist/gcs/governance.js

@@ -0,0 +1,100 @@
+import { storageError } from "../core/errors.js";
+import { decodeRequest } from "../internal/request-validation.js";
+import { decodeJson, jsonRequest } from "../providers/gcs/transport.js";
+import { target } from "../providers/gcs/mapping.js";
+import { GcsStorage } from "../gcs.js";
+import { VersionRef } from "../lifecycle.js";
+import { GcsStorageTier } from "../providers/gcs/tier.js";
+import { Context, DateTime, Effect, Layer, Schema } from "effect";
+
+// src/providers/gcs/governance.ts
+const Request = Schema.Struct({
+	ref: VersionRef,
+	temporaryHold: Schema.optional(Schema.Boolean),
+	eventBasedHold: Schema.optional(Schema.Boolean),
+	releaseIntent: Schema.optional(Schema.Literal("release-object-hold"))
+});
+const Retention = Schema.Struct({
+	ref: VersionRef,
+	mode: Schema.Literals(["Locked", "Unlocked"]),
+	retainUntil: Schema.DateTimeUtc,
+	intent: Schema.Literal("change-object-retention"),
+	override: Schema.optional(Schema.Literal("override-unlocked-retention"))
+});
+const make = (storage) => ({
+	setRetention: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Retention, input, "setRetention", "gcs", true);
+		const address = yield* target(storage, { ref: value.ref }, "setRetention");
+		if (value.ref.version._tag !== "GcsGeneration" || !value.ref.version.metageneration || DateTime.toEpochMillis(value.retainUntil) <= DateTime.toEpochMillis(yield* DateTime.now)) return yield* storageError("setRetention", "gcs", {
+			_tag: "InvalidInput",
+			field: "metageneration-or-retainUntil"
+		}, "not-started");
+		return (yield* jsonRequest(storage, "setRetention", true, {
+			uri: address.uri,
+			method: "PATCH",
+			qs: {
+				...address.qs,
+				ifMetagenerationMatch: value.ref.version.metageneration,
+				...value.override ? { overrideUnlockedRetention: "true" } : {}
+			},
+			json: { retention: {
+				mode: value.mode,
+				retainUntilTime: DateTime.formatIso(value.retainUntil)
+			} }
+		})).body;
+	}),
+	inspect: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Schema.Struct({ ref: VersionRef }), input, "inspectProtection", "gcs");
+		const address = yield* target(storage, { ref: value.ref }, "inspectProtection");
+		const output = yield* jsonRequest(storage, "inspectProtection", false, {
+			uri: address.uri,
+			qs: address.qs,
+			json: true
+		});
+		return yield* decodeJson(Schema.Struct({
+			temporaryHold: Schema.optional(Schema.Boolean),
+			eventBasedHold: Schema.optional(Schema.Boolean),
+			retentionExpirationTime: Schema.optional(Schema.String),
+			retention: Schema.optional(Schema.Struct({
+				mode: Schema.String,
+				retainUntilTime: Schema.String
+			})),
+			kmsKeyName: Schema.optional(Schema.String),
+			customerEncryption: Schema.optional(Schema.Struct({
+				encryptionAlgorithm: Schema.optional(Schema.String),
+				keySha256: Schema.optional(Schema.String)
+			}))
+		}), output.body, "inspectProtection");
+	}),
+	setHolds: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Request, input, "setHolds", "gcs", true);
+		if ((value.temporaryHold === false || value.eventBasedHold === false) && !value.releaseIntent) return yield* storageError("setHolds", "gcs", {
+			_tag: "InvalidInput",
+			field: "releaseIntent"
+		}, "not-started");
+		const address = yield* target(storage, { ref: value.ref }, "setHolds");
+		if (value.ref.version._tag !== "GcsGeneration" || !value.ref.version.metageneration) return yield* storageError("setHolds", "gcs", {
+			_tag: "InvalidInput",
+			field: "metageneration"
+		}, "not-started");
+		return (yield* jsonRequest(storage, "setHolds", true, {
+			uri: address.uri,
+			method: "PATCH",
+			qs: {
+				...address.qs,
+				ifMetagenerationMatch: value.ref.version.metageneration
+			},
+			json: {
+				...value.temporaryHold !== void 0 ? { temporaryHold: value.temporaryHold } : {},
+				...value.eventBasedHold !== void 0 ? { eventBasedHold: value.eventBasedHold } : {}
+			}
+		})).body;
+	})
+});
+var GcsProtection = class GcsProtection extends Context.Service()("@effect-kit/storage/gcs/GcsProtection") {
+	static make = make;
+	static layer = Layer.effect(GcsProtection, Effect.map(GcsStorage, make));
+};
+
+export { GcsProtection, GcsStorageTier };
+//# sourceMappingURL=governance.js.map

package/dist/gcs/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","names":[],"sources":["../../src/providers/gcs/governance.ts"],"sourcesContent":["import { Context, DateTime, Effect, Layer, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { VersionRef } from \"../../lifecycle/index.js\";\nimport { GcsStorage } from \"./index.js\";\nimport type { GcsStorageService } from \"./index.js\";\nimport { target } from \"./mapping.js\";\nimport { jsonRequest, decodeJson } from \"./transport.js\";\n\nconst Request = Schema.Struct({\n  ref: VersionRef,\n  temporaryHold: Schema.optional(Schema.Boolean),\n  eventBasedHold: Schema.optional(Schema.Boolean),\n  releaseIntent: Schema.optional(Schema.Literal(\"release-object-hold\")),\n});\nconst Retention = Schema.Struct({\n  ref: VersionRef,\n  mode: Schema.Literals([\"Locked\", \"Unlocked\"]),\n  retainUntil: Schema.DateTimeUtc,\n  intent: Schema.Literal(\"change-object-retention\"),\n  override: Schema.optional(Schema.Literal(\"override-unlocked-retention\")),\n});\nconst make = (storage: GcsStorageService) => ({\n  setRetention: Effect.fnUntraced(function* (input: typeof Retention.Type) {\n    const value = yield* decodeRequest(Retention, input, \"setRetention\", \"gcs\", true);\n    const address = yield* target(storage, { ref: value.ref }, \"setRetention\");\n    if (\n      value.ref.version._tag !== \"GcsGeneration\" ||\n      !value.ref.version.metageneration ||\n      DateTime.toEpochMillis(value.retainUntil) <= DateTime.toEpochMillis(yield* DateTime.now)\n    )\n      return yield* storageError(\n        \"setRetention\",\n        \"gcs\",\n        { _tag: \"InvalidInput\", field: \"metageneration-or-retainUntil\" },\n        \"not-started\",\n      );\n    return (yield* jsonRequest(storage, \"setRetention\", true, {\n      uri: address.uri,\n      method: \"PATCH\",\n      qs: {\n        ...address.qs,\n        ifMetagenerationMatch: value.ref.version.metageneration,\n        ...(value.override ? { overrideUnlockedRetention: \"true\" } : {}),\n      },\n      json: {\n        retention: { mode: value.mode, retainUntilTime: DateTime.formatIso(value.retainUntil) },\n      },\n    })).body;\n  }),\n  inspect: Effect.fnUntraced(function* (input: { readonly ref: VersionRef }) {\n    const value = yield* decodeRequest(\n      Schema.Struct({ ref: VersionRef }),\n      input,\n      \"inspectProtection\",\n      \"gcs\",\n    );\n    const address = yield* target(storage, { ref: value.ref }, \"inspectProtection\");\n    const output = yield* jsonRequest(storage, \"inspectProtection\", false, {\n      uri: address.uri,\n      qs: address.qs,\n      json: true,\n    });\n    return yield* decodeJson(\n      Schema.Struct({\n        temporaryHold: Schema.optional(Schema.Boolean),\n        eventBasedHold: Schema.optional(Schema.Boolean),\n        retentionExpirationTime: Schema.optional(Schema.String),\n        retention: Schema.optional(\n          Schema.Struct({ mode: Schema.String, retainUntilTime: Schema.String }),\n        ),\n        kmsKeyName: Schema.optional(Schema.String),\n        customerEncryption: Schema.optional(\n          Schema.Struct({\n            encryptionAlgorithm: Schema.optional(Schema.String),\n            keySha256: Schema.optional(Schema.String),\n          }),\n        ),\n      }),\n      output.body,\n      \"inspectProtection\",\n    );\n  }),\n  setHolds: Effect.fnUntraced(function* (input: typeof Request.Type) {\n    const value = yield* decodeRequest(Request, input, \"setHolds\", \"gcs\", true);\n    if ((value.temporaryHold === false || value.eventBasedHold === false) && !value.releaseIntent)\n      return yield* storageError(\n        \"setHolds\",\n        \"gcs\",\n        { _tag: \"InvalidInput\", field: \"releaseIntent\" },\n        \"not-started\",\n      );\n    const address = yield* target(storage, { ref: value.ref }, \"setHolds\");\n    if (value.ref.version._tag !== \"GcsGeneration\" || !value.ref.version.metageneration)\n      return yield* storageError(\n        \"setHolds\",\n        \"gcs\",\n        { _tag: \"InvalidInput\", field: \"metageneration\" },\n        \"not-started\",\n      );\n    return (yield* jsonRequest(storage, \"setHolds\", true, {\n      uri: address.uri,\n      method: \"PATCH\",\n      qs: { ...address.qs, ifMetagenerationMatch: value.ref.version.metageneration },\n      json: {\n        ...(value.temporaryHold !== undefined ? { temporaryHold: value.temporaryHold } : {}),\n        ...(value.eventBasedHold !== undefined ? { eventBasedHold: value.eventBasedHold } : {}),\n      },\n    })).body;\n  }),\n});\nexport class GcsProtection extends Context.Service<GcsProtection, ReturnType<typeof make>>()(\n  \"@effect-kit/storage/gcs/GcsProtection\",\n) {\n  static readonly make = make;\n  static readonly layer = Layer.effect(GcsProtection, Effect.map(GcsStorage, make));\n}\n\nexport { GcsStorageTier } from \"./tier.js\";\n"],"mappings":";;;;;;;;;;AAUA,MAAM,UAAU,OAAO,OAAO;CAC5B,KAAK;CACL,eAAe,OAAO,SAAS,OAAO,OAAO;CAC7C,gBAAgB,OAAO,SAAS,OAAO,OAAO;CAC9C,eAAe,OAAO,SAAS,OAAO,QAAQ,qBAAqB,CAAC;AACtE,CAAC;AACD,MAAM,YAAY,OAAO,OAAO;CAC9B,KAAK;CACL,MAAM,OAAO,SAAS,CAAC,UAAU,UAAU,CAAC;CAC5C,aAAa,OAAO;CACpB,QAAQ,OAAO,QAAQ,yBAAyB;CAChD,UAAU,OAAO,SAAS,OAAO,QAAQ,6BAA6B,CAAC;AACzE,CAAC;AACD,MAAM,QAAQ,aAAgC;CAC5C,cAAc,OAAO,WAAW,WAAW,OAA8B;EACvE,MAAM,QAAQ,OAAO,cAAc,WAAW,OAAO,gBAAgB,OAAO,IAAI;EAChF,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,cAAc;EACzE,IACE,MAAM,IAAI,QAAQ,SAAS,mBAC3B,CAAC,MAAM,IAAI,QAAQ,kBACnB,SAAS,cAAc,MAAM,WAAW,KAAK,SAAS,cAAc,OAAO,SAAS,GAAG,GAEvF,OAAO,OAAO,aACZ,gBACA,OACA;GAAE,MAAM;GAAgB,OAAO;EAAgC,GAC/D,aACF;EACF,QAAQ,OAAO,YAAY,SAAS,gBAAgB,MAAM;GACxD,KAAK,QAAQ;GACb,QAAQ;GACR,IAAI;IACF,GAAG,QAAQ;IACX,uBAAuB,MAAM,IAAI,QAAQ;IACzC,GAAI,MAAM,WAAW,EAAE,2BAA2B,OAAO,IAAI,CAAC;GAChE;GACA,MAAM,EACJ,WAAW;IAAE,MAAM,MAAM;IAAM,iBAAiB,SAAS,UAAU,MAAM,WAAW;GAAE,EACxF;EACF,CAAC,EAAC,CAAE;CACN,CAAC;CACD,SAAS,OAAO,WAAW,WAAW,OAAqC;EACzE,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO,EAAE,KAAK,WAAW,CAAC,GACjC,OACA,qBACA,KACF;EACA,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,mBAAmB;EAC9E,MAAM,SAAS,OAAO,YAAY,SAAS,qBAAqB,OAAO;GACrE,KAAK,QAAQ;GACb,IAAI,QAAQ;GACZ,MAAM;EACR,CAAC;EACD,OAAO,OAAO,WACZ,OAAO,OAAO;GACZ,eAAe,OAAO,SAAS,OAAO,OAAO;GAC7C,gBAAgB,OAAO,SAAS,OAAO,OAAO;GAC9C,yBAAyB,OAAO,SAAS,OAAO,MAAM;GACtD,WAAW,OAAO,SAChB,OAAO,OAAO;IAAE,MAAM,OAAO;IAAQ,iBAAiB,OAAO;GAAO,CAAC,CACvE;GACA,YAAY,OAAO,SAAS,OAAO,MAAM;GACzC,oBAAoB,OAAO,SACzB,OAAO,OAAO;IACZ,qBAAqB,OAAO,SAAS,OAAO,MAAM;IAClD,WAAW,OAAO,SAAS,OAAO,MAAM;GAC1C,CAAC,CACH;EACF,CAAC,GACD,OAAO,MACP,mBACF;CACF,CAAC;CACD,UAAU,OAAO,WAAW,WAAW,OAA4B;EACjE,MAAM,QAAQ,OAAO,cAAc,SAAS,OAAO,YAAY,OAAO,IAAI;EAC1E,KAAK,MAAM,kBAAkB,SAAS,MAAM,mBAAmB,UAAU,CAAC,MAAM,eAC9E,OAAO,OAAO,aACZ,YACA,OACA;GAAE,MAAM;GAAgB,OAAO;EAAgB,GAC/C,aACF;EACF,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,UAAU;EACrE,IAAI,MAAM,IAAI,QAAQ,SAAS,mBAAmB,CAAC,MAAM,IAAI,QAAQ,gBACnE,OAAO,OAAO,aACZ,YACA,OACA;GAAE,MAAM;GAAgB,OAAO;EAAiB,GAChD,aACF;EACF,QAAQ,OAAO,YAAY,SAAS,YAAY,MAAM;GACpD,KAAK,QAAQ;GACb,QAAQ;GACR,IAAI;IAAE,GAAG,QAAQ;IAAI,uBAAuB,MAAM,IAAI,QAAQ;GAAe;GAC7E,MAAM;IACJ,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;IAClF,GAAI,MAAM,mBAAmB,SAAY,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;GACvF;EACF,CAAC,EAAC,CAAE;CACN,CAAC;AACH;AACA,IAAa,gBAAb,MAAa,sBAAsB,QAAQ,QAAgD,CAAC,CAC1F,uCACF,CAAC,CAAC;CACA,OAAgB,OAAO;CACvB,OAAgB,QAAQ,MAAM,OAAO,eAAe,OAAO,IAAI,YAAY,IAAI,CAAC;AAClF"}