@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/mirror.js

@@ -0,0 +1,290 @@
+import { ObjectHeaders } from "./core/object.js";
+import { digestText } from "./runtime/portable-hash.js";
+import { StorageError, storageError } from "./core/errors.js";
+import { DeleteRequest, PutRequest } from "./core/requests.js";
+import { Storage } from "./core/storage.js";
+import { TransferDriver, endpointStoreIds } from "./transfers/dependencies.js";
+import { Transfers } from "./transfers.js";
+import { makeRecordStore, workflowError } from "./workflows/store.js";
+import { buildEndpoint } from "./workflows/endpoint.js";
+import { pin } from "./workflows/objects.js";
+import { makeStaging } from "./composition/representation/staging.js";
+import { MirrorOperation, MirrorPointer, MirrorRepairPlan } from "./workflows/mirror/schema.js";
+import { makeOperations, marker, pointerKey } from "./workflows/mirror/operations.js";
+import { makeView } from "./workflows/mirror/view.js";
+import { Context, Effect, Layer, Schema, Stream } from "effect";
+import { SecureRandom } from "effect/crypto";
+
+// src/workflows/mirror/index.ts
+var MirrorStore = class MirrorStore extends Context.Service()("@effect-kit/storage/MirrorStore") {
+	static make(options) {
+		return makeRecordStore(options, "mirror");
+	}
+	static layer(options) {
+		return Layer.effect(MirrorStore, MirrorStore.make(options));
+	}
+};
+const ensureRequired = (operation) => operation.outcomes.every((outcome) => !outcome.required || outcome.state === "succeeded") ? Effect.void : Effect.fail(new StorageError({
+	operation: operation.kind,
+	provider: "mirror",
+	reason: { _tag: "PartialFailure" },
+	mutationOutcome: "partial",
+	requestId: operation.id
+}));
+const make = Effect.fnUntraced(function* (configuration) {
+	const store = yield* MirrorStore;
+	const random = yield* SecureRandom.SecureRandom;
+	const stage = yield* makeStaging;
+	const selected = [{
+		endpoint: configuration.primary,
+		required: true
+	}, ...configuration.replicas.map((replica) => ({
+		endpoint: replica.storage,
+		required: replica.required
+	}))];
+	const physicalStores = selected.flatMap(({ endpoint }) => endpointStoreIds(endpoint));
+	if (!configuration.configurationId || !Number.isSafeInteger(configuration.maxBytes) || configuration.maxBytes < 1 || selected.length < 2 || selected.length > 9 || new Set(physicalStores).size !== physicalStores.length) return yield* workflowError("InvalidMirrorConfiguration");
+	const endpoints = yield* Effect.forEach(selected, (value) => Transfers.make(configuration.transfer).pipe(Effect.provideService(Storage, value.endpoint.storage), Effect.provideService(TransferDriver, value.endpoint), Effect.map((transfers) => ({
+		...value,
+		transfers
+	}))));
+	const maximumObjectBytes = Math.min(configuration.maxBytes, configuration.primary.maximumSingleUploadBytes, ...selected.filter((entry) => entry.required).map((entry) => entry.endpoint.maximumObjectBytes));
+	const putConditions = ["create-only", "if-match"].filter((condition) => selected.every((entry) => !entry.required || entry.endpoint.storage.capabilities.putConditions.includes(condition)));
+	const binding = digestText(JSON.stringify([configuration.configurationId, endpoints.map((entry) => [entry.endpoint.storage.storeId, entry.required])]));
+	yield* store.exclusive(Effect.gen(function* () {
+		const previous = yield* store.read("configuration", Schema.String);
+		if (previous && previous !== binding) return yield* workflowError("MirrorStoreConfigurationConflict");
+		if (!previous) yield* store.write("configuration", Schema.String, binding);
+	}));
+	const storeId = `mirror:${binding}`;
+	const operations = makeOperations(store, binding, endpoints);
+	const { virtual, current, resolve, listPage } = makeView(store, binding, endpoints, operations);
+	const write = (request) => store.exclusive(Effect.scoped(Effect.gen(function* () {
+		if (request.condition && !putConditions.includes(request.condition._tag === "CreateOnly" ? "create-only" : "if-match")) return yield* storageError("put", "mirror", {
+			_tag: "Unsupported",
+			capability: "write-condition"
+		}, "not-started");
+		yield* Schema.decodeUnknownEffect(PutRequest)(request).pipe(Effect.mapError(() => workflowError("InvalidWrite")));
+		if (!(request.body instanceof Uint8Array) && !Stream.isStream(request.body)) return yield* workflowError("InvalidBody");
+		const headers = yield* Schema.decodeUnknownEffect(ObjectHeaders)(request).pipe(Effect.mapError(() => workflowError("InvalidHeaders")));
+		if (headers.customMetadata?.["effect-storage-mirror"] !== void 0) return yield* workflowError("ReservedMetadata");
+		const staged = yield* stage(request.body instanceof Uint8Array ? Stream.succeed(request.body) : request.body, Math.min(maximumObjectBytes, request.maxBytes ?? maximumObjectBytes));
+		if (request.contentLength !== void 0 && request.contentLength !== staged.size) return yield* workflowError("LengthMismatch");
+		const id = request.id ?? (yield* random.uuidV4());
+		if (!/^[A-Za-z0-9_-]{1,128}$/u.test(id)) return yield* workflowError("InvalidOperationId");
+		const requestHash = digestText(JSON.stringify([
+			request.key,
+			headers,
+			request.condition,
+			staged.size,
+			staged.checksum.value
+		]));
+		const existing = yield* store.read(`operation:${id}`, MirrorOperation);
+		if (existing) {
+			if (existing.binding !== binding || existing.key !== request.key || existing.kind !== "put" || existing.requestHash !== requestHash) return yield* workflowError("OperationConflict");
+			const repaired = yield* operations.repair(existing);
+			if (repaired.outcomes[0]?.state === "succeeded" || repaired.state === "superseded") return {
+				operation: repaired,
+				metadata: repaired.outcomes[0]?.metadata ? virtual(repaired, repaired.outcomes[0].metadata) : void 0
+			};
+		}
+		const previous = yield* store.read(pointerKey(request.key), MirrorPointer);
+		if (existing && previous && previous.generation > existing.generation) return yield* workflowError("SupersededOperation");
+		const previousOperation = previous?.kind === "put" ? yield* operations.load(previous.id) : void 0;
+		if (request.condition?._tag === "CreateOnly" && previousOperation && previousOperation.id !== id) return yield* storageError("put", "mirror", { _tag: "PreconditionFailed" }, "not-started");
+		if (request.condition?._tag === "IfMatch" && (!previousOperation || request.condition.etag !== `"mirror:${previousOperation.id}"`)) return yield* storageError("put", "mirror", { _tag: "PreconditionFailed" }, "not-started");
+		const operation = existing ?? (yield* operations.create(id, request.key, "put", staged.size, staged.checksum.value, requestHash));
+		const previousMetadata = previousOperation?.outcomes[0]?.metadata;
+		const physical = yield* Effect.result(configuration.primary.storage.put({
+			...headers,
+			key: request.key,
+			body: staged.stream(),
+			contentLength: staged.size,
+			maxBytes: maximumObjectBytes,
+			customMetadata: {
+				...headers.customMetadata,
+				[marker]: id
+			},
+			condition: previousMetadata?.etag ? {
+				_tag: "IfMatch",
+				etag: previousMetadata.etag
+			} : { _tag: "CreateOnly" }
+		}));
+		if (physical._tag === "Failure") yield* operations.save({
+			...operation,
+			outcomes: operation.outcomes.map((outcome, index) => index === 0 ? {
+				...outcome,
+				state: "unknown",
+				error: physical.failure
+			} : outcome)
+		});
+		const repaired = yield* operations.repair(yield* operations.load(operation.id));
+		return {
+			operation: repaired,
+			metadata: repaired.outcomes[0]?.metadata ? virtual(repaired, repaired.outcomes[0].metadata) : void 0
+		};
+	})));
+	const remove = (request) => store.exclusive(Effect.gen(function* () {
+		yield* Schema.decodeUnknownEffect(DeleteRequest)(request).pipe(Effect.mapError(() => workflowError("InvalidDelete")));
+		const key = "key" in request ? request.key : request.ref.key;
+		if ("ref" in request && request.ref.storeId !== storeId) return yield* workflowError("ForeignReference");
+		const previous = yield* store.read(pointerKey(key), MirrorPointer);
+		if (previous?.kind === "delete") return yield* operations.repair(yield* operations.load(previous.id));
+		const operation = yield* current(request, false);
+		if (request.condition && request.condition.etag !== `"mirror:${operation.id}"`) return yield* storageError("delete", "mirror", { _tag: "PreconditionFailed" }, "not-started");
+		const tombstone = yield* operations.create(yield* random.uuidV4(), operation.key, "delete", 0, "");
+		yield* operations.activate(tombstone);
+		return yield* operations.repair(tombstone);
+	}));
+	const storage = Storage.make({
+		provider: "mirror",
+		storeId,
+		capabilities: {
+			putConditions,
+			getConditions: ["if-match", "if-none-match"],
+			deleteConditions: ["if-match"],
+			versionedReads: "current-only",
+			ranges: configuration.primary.storage.capabilities.ranges.filter((range) => endpoints.every((endpoint) => endpoint.endpoint.storage.capabilities.ranges.includes(range))),
+			list: {
+				maxPageSize: 1e3,
+				delimiter: false,
+				cursorPersistence: "provider",
+				snapshot: false
+			}
+		},
+		put: (request) => write(request).pipe(Effect.flatMap((receipt) => ensureRequired(receipt.operation).pipe(Effect.flatMap(() => receipt.metadata ? Effect.succeed(receipt.metadata) : Effect.fail(workflowError("MissingPrimaryReceipt")))))),
+		delete: (request) => remove(request).pipe(Effect.flatMap(ensureRequired)),
+		head: (request) => store.exclusive(Effect.gen(function* () {
+			const operation = yield* current(request);
+			const source = yield* resolve(operation);
+			return virtual(operation, source.metadata);
+		})),
+		get: (request) => store.exclusive(Effect.gen(function* () {
+			const operation = yield* current(request);
+			const source = yield* resolve(operation);
+			const metadata = virtual(operation, source.metadata);
+			if (request.condition?._tag === "IfMatch" && request.condition.etag !== metadata.etag && request.condition.etag !== "*") return yield* storageError("get", "mirror", { _tag: "PreconditionFailed" });
+			if (request.condition?._tag === "IfNoneMatch" && (request.condition.etag === metadata.etag || request.condition.etag === "*")) return {
+				_tag: "NotModified",
+				metadata
+			};
+			const value = yield* source.endpoint.storage.get({
+				...yield* pin(source.metadata),
+				...request.range ? { range: request.range } : {}
+			});
+			if (value._tag !== "Object") return yield* workflowError("ReplicaChanged");
+			return {
+				...value,
+				metadata
+			};
+		})),
+		listPage
+	});
+	const applyRepair = Effect.fnUntraced(function* (id, limit = 100) {
+		let plan = yield* store.read(`repair:${id}`, MirrorRepairPlan);
+		if (!plan || plan.binding !== binding || !Number.isSafeInteger(limit) || limit < 1 || limit > 1e3) return yield* workflowError("InvalidRepairPlan");
+		if (plan.state === "partial") plan = {
+			...plan,
+			offset: 0,
+			unresolved: 0
+		};
+		for (let attempted = 0; plan.offset < plan.count && attempted < limit; attempted++) {
+			const operationId = yield* store.read(`repair:${id}:${plan.offset}`, Schema.String);
+			const repaired = operationId ? yield* operations.repair(yield* operations.load(operationId)) : void 0;
+			const unresolved = plan.unresolved + (repaired && ["pending", "partial"].includes(repaired.state) ? 1 : 0);
+			plan = {
+				id: plan.id,
+				binding: plan.binding,
+				count: plan.count,
+				prefix: plan.prefix,
+				unresolved,
+				offset: plan.offset + 1,
+				state: plan.offset + 1 >= plan.count ? unresolved ? "partial" : "completed" : "applying"
+			};
+			yield* store.write(`repair:${id}`, MirrorRepairPlan, plan);
+		}
+		return plan;
+	});
+	return {
+		storage,
+		maximumObjectBytes,
+		write,
+		remove,
+		status: (id) => store.exclusive(operations.load(id)),
+		statusFor: (key) => store.exclusive(Effect.gen(function* () {
+			const pointer = yield* store.read(pointerKey(key), MirrorPointer);
+			return pointer ? yield* operations.load(pointer.id) : void 0;
+		})),
+		planRepair: (request) => store.exclusive(Effect.gen(function* () {
+			yield* Schema.decodeUnknownEffect(Schema.String)(request.prefix).pipe(Effect.mapError(() => workflowError("InvalidPrefix")));
+			const id = yield* random.uuidV4();
+			let count = 0;
+			const upper = (yield* store.read("sequence", Schema.Natural)) ?? 0;
+			for (let index = 1; index <= upper; index++) {
+				const operationId = yield* store.read(`index:${index}`, Schema.String);
+				if (!operationId) continue;
+				const operation = yield* operations.load(operationId);
+				const pointer = yield* store.read(pointerKey(operation.key), MirrorPointer);
+				if (!operation.key.startsWith(request.prefix) || pointer && pointer.generation > operation.generation) continue;
+				yield* store.write(`repair:${id}:${count++}`, Schema.String, operation.id);
+			}
+			const plan = {
+				id,
+				binding,
+				prefix: request.prefix,
+				count,
+				unresolved: 0,
+				offset: 0,
+				state: count ? "planned" : "completed"
+			};
+			yield* store.write(`repair:${id}`, MirrorRepairPlan, plan);
+			return plan;
+		})),
+		inspectRepair: (id, page = {}) => store.exclusive(Effect.gen(function* () {
+			const plan = yield* store.read(`repair:${id}`, MirrorRepairPlan);
+			if (!plan || plan.binding !== binding) return yield* workflowError("InvalidRepairPlan");
+			const offset = page.offset ?? 0;
+			const limit = page.limit ?? 100;
+			if (!Number.isSafeInteger(offset) || offset < 0 || !Number.isSafeInteger(limit) || limit < 1 || limit > 1e3) return yield* workflowError("InvalidPage");
+			const entries = [];
+			for (let index = offset; index < Math.min(plan.count, offset + limit); index++) {
+				const operationId = yield* store.read(`repair:${id}:${index}`, Schema.String);
+				if (operationId) entries.push(yield* operations.load(operationId));
+			}
+			return {
+				plan,
+				entries,
+				...offset + entries.length < plan.count ? { nextOffset: offset + entries.length } : {}
+			};
+		})),
+		applyRepair: (id, options) => store.exclusive(applyRepair(id, options?.limit))
+	};
+});
+var StorageMirror = class StorageMirror extends Context.Service()("@effect-kit/storage/StorageMirror") {
+	static make = make;
+	static layer(options) {
+		return Layer.effectContext(Effect.gen(function* () {
+			const primary = yield* buildEndpoint(options.primary);
+			const replicas = yield* Effect.forEach(options.replicas, (replica) => buildEndpoint(replica.storage).pipe(Effect.map((endpoint) => ({
+				storage: endpoint,
+				required: replica.required
+			}))));
+			const mirror = yield* make({
+				...options,
+				primary,
+				replicas
+			});
+			return Context.make(StorageMirror, mirror).pipe(Context.add(Storage, mirror.storage), Context.add(TransferDriver, {
+				storage: mirror.storage,
+				maximumObjectBytes: mirror.maximumObjectBytes,
+				maximumSingleUploadBytes: mirror.maximumObjectBytes,
+				transportOverheadBytes: primary.transportOverheadBytes,
+				underlyingStoreId: primary.underlyingStoreId ?? primary.storage.storeId,
+				underlyingStoreIds: [...endpointStoreIds(primary), ...replicas.flatMap((replica) => endpointStoreIds(replica.storage))]
+			}));
+		}));
+	}
+};
+
+export { MirrorOperation, MirrorRepairPlan, MirrorStore, StorageMirror };
+//# sourceMappingURL=mirror.js.map

package/dist/mirror.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mirror.js","names":[],"sources":["../src/workflows/mirror/index.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema, Stream } from \"effect\";\nimport type { Scope } from \"effect\";\nimport { SecureRandom } from \"effect/crypto\";\n\nimport { makeStaging } from \"../../composition/representation/staging.js\";\nimport { StorageError, storageError } from \"../../core/errors.js\";\nimport { ObjectHeaders } from \"../../core/object.js\";\nimport { DeleteRequest, PutRequest } from \"../../core/requests.js\";\nimport type { GetResult } from \"../../core/requests.js\";\nimport { Storage } from \"../../core/storage.js\";\nimport { digestText } from \"../../runtime/portable-hash.js\";\nimport { endpointStoreIds, TransferDriver } from \"../../transfers/dependencies.js\";\nimport { Transfers } from \"../../transfers/index.js\";\nimport type { TransferEndpoint, TransferPolicy } from \"../../transfers/models.js\";\nimport { buildEndpoint } from \"../endpoint.js\";\nimport { pin } from \"../objects.js\";\nimport { makeRecordStore, workflowError } from \"../store.js\";\nimport type { RecordStore, WorkflowStoreOptions } from \"../store.js\";\nimport { makeOperations, marker, pointerKey } from \"./operations.js\";\nimport { MirrorOperation, MirrorPointer, MirrorRepairPlan } from \"./schema.js\";\nimport { makeView } from \"./view.js\";\n\nexport { MirrorOperation, MirrorRepairPlan };\nexport type { WorkflowStoreOptions as MirrorStoreOptions } from \"../store.js\";\nexport class MirrorStore extends Context.Service<MirrorStore, RecordStore>()(\n  \"@effect-kit/storage/MirrorStore\",\n) {\n  static make(options: WorkflowStoreOptions) {\n    return makeRecordStore(options, \"mirror\");\n  }\n  static layer(options: WorkflowStoreOptions) {\n    return Layer.effect(MirrorStore, MirrorStore.make(options));\n  }\n}\nexport interface MirrorOptions {\n  readonly configurationId: string;\n  readonly primary: TransferEndpoint;\n  readonly replicas: ReadonlyArray<{\n    readonly storage: TransferEndpoint;\n    readonly required: boolean;\n  }>;\n  readonly maxBytes: number;\n  readonly transfer?: TransferPolicy;\n}\nconst ensureRequired = (operation: MirrorOperation): Effect.Effect<void, StorageError> =>\n  operation.outcomes.every((outcome) => !outcome.required || outcome.state === \"succeeded\")\n    ? Effect.void\n    : Effect.fail(\n        new StorageError({\n          operation: operation.kind,\n          provider: \"mirror\",\n          reason: { _tag: \"PartialFailure\" },\n          mutationOutcome: \"partial\",\n          requestId: operation.id,\n        }),\n      );\n\nconst make = Effect.fnUntraced(function* (configuration: MirrorOptions) {\n  const store = yield* MirrorStore;\n  const random = yield* SecureRandom.SecureRandom;\n  const stage = yield* makeStaging;\n  const selected = [\n    { endpoint: configuration.primary, required: true },\n    ...configuration.replicas.map((replica) => ({\n      endpoint: replica.storage,\n      required: replica.required,\n    })),\n  ];\n  const physicalStores = selected.flatMap(({ endpoint }) => endpointStoreIds(endpoint));\n  if (\n    !configuration.configurationId ||\n    !Number.isSafeInteger(configuration.maxBytes) ||\n    configuration.maxBytes < 1 ||\n    selected.length < 2 ||\n    selected.length > 9 ||\n    new Set(physicalStores).size !== physicalStores.length\n  )\n    return yield* workflowError(\"InvalidMirrorConfiguration\");\n  const endpoints = yield* Effect.forEach(selected, (value) =>\n    Transfers.make(configuration.transfer).pipe(\n      Effect.provideService(Storage, value.endpoint.storage),\n      Effect.provideService(TransferDriver, value.endpoint),\n      Effect.map((transfers) => ({ ...value, transfers })),\n    ),\n  );\n  const maximumObjectBytes = Math.min(\n    configuration.maxBytes,\n    configuration.primary.maximumSingleUploadBytes,\n    ...selected.filter((entry) => entry.required).map((entry) => entry.endpoint.maximumObjectBytes),\n  );\n  const putConditions = ([\"create-only\", \"if-match\"] as const).filter((condition) =>\n    selected.every(\n      (entry) =>\n        !entry.required || entry.endpoint.storage.capabilities.putConditions.includes(condition),\n    ),\n  );\n  const binding = digestText(\n    JSON.stringify([\n      configuration.configurationId,\n      endpoints.map((entry) => [entry.endpoint.storage.storeId, entry.required]),\n    ]),\n  );\n  yield* store.exclusive(\n    Effect.gen(function* () {\n      const previous = yield* store.read(\"configuration\", Schema.String);\n      if (previous && previous !== binding)\n        return yield* workflowError(\"MirrorStoreConfigurationConflict\");\n      if (!previous) yield* store.write(\"configuration\", Schema.String, binding);\n    }),\n  );\n  const storeId = `mirror:${binding}`;\n  const operations = makeOperations(store, binding, endpoints);\n  const { virtual, current, resolve, listPage } = makeView(store, binding, endpoints, operations);\n  const write = <E = never, R = never>(request: PutRequest<E, R> & { readonly id?: string }) =>\n    store.exclusive(\n      Effect.scoped(\n        Effect.gen(function* () {\n          if (\n            request.condition &&\n            !putConditions.includes(\n              request.condition._tag === \"CreateOnly\" ? \"create-only\" : \"if-match\",\n            )\n          )\n            return yield* storageError(\n              \"put\",\n              \"mirror\",\n              { _tag: \"Unsupported\", capability: \"write-condition\" },\n              \"not-started\",\n            );\n          yield* Schema.decodeUnknownEffect(PutRequest)(request).pipe(\n            Effect.mapError(() => workflowError(\"InvalidWrite\")),\n          );\n          if (!(request.body instanceof Uint8Array) && !Stream.isStream(request.body))\n            return yield* workflowError(\"InvalidBody\");\n          const headers = yield* Schema.decodeUnknownEffect(ObjectHeaders)(request).pipe(\n            Effect.mapError(() => workflowError(\"InvalidHeaders\")),\n          );\n          if (headers.customMetadata?.[marker] !== undefined)\n            return yield* workflowError(\"ReservedMetadata\");\n          const staged = yield* stage(\n            request.body instanceof Uint8Array ? Stream.succeed(request.body) : request.body,\n            Math.min(maximumObjectBytes, request.maxBytes ?? maximumObjectBytes),\n          );\n          if (request.contentLength !== undefined && request.contentLength !== staged.size)\n            return yield* workflowError(\"LengthMismatch\");\n          const id = request.id ?? (yield* random.uuidV4());\n          if (!/^[A-Za-z0-9_-]{1,128}$/u.test(id))\n            return yield* workflowError(\"InvalidOperationId\");\n          const requestHash = digestText(\n            JSON.stringify([\n              request.key,\n              headers,\n              request.condition,\n              staged.size,\n              staged.checksum.value,\n            ]),\n          );\n          const existing = yield* store.read(`operation:${id}`, MirrorOperation);\n          if (existing) {\n            if (\n              existing.binding !== binding ||\n              existing.key !== request.key ||\n              existing.kind !== \"put\" ||\n              existing.requestHash !== requestHash\n            )\n              return yield* workflowError(\"OperationConflict\");\n            const repaired = yield* operations.repair(existing);\n            if (repaired.outcomes[0]?.state === \"succeeded\" || repaired.state === \"superseded\")\n              return {\n                operation: repaired,\n                metadata: repaired.outcomes[0]?.metadata\n                  ? virtual(repaired, repaired.outcomes[0].metadata)\n                  : undefined,\n              };\n          }\n          const previous = yield* store.read(pointerKey(request.key), MirrorPointer);\n          if (existing && previous && previous.generation > existing.generation)\n            return yield* workflowError(\"SupersededOperation\");\n          const previousOperation =\n            previous?.kind === \"put\" ? yield* operations.load(previous.id) : undefined;\n          if (\n            request.condition?._tag === \"CreateOnly\" &&\n            previousOperation &&\n            previousOperation.id !== id\n          )\n            return yield* storageError(\n              \"put\",\n              \"mirror\",\n              { _tag: \"PreconditionFailed\" },\n              \"not-started\",\n            );\n          if (\n            request.condition?._tag === \"IfMatch\" &&\n            (!previousOperation || request.condition.etag !== `\"mirror:${previousOperation.id}\"`)\n          )\n            return yield* storageError(\n              \"put\",\n              \"mirror\",\n              { _tag: \"PreconditionFailed\" },\n              \"not-started\",\n            );\n          const operation =\n            existing ??\n            (yield* operations.create(\n              id,\n              request.key,\n              \"put\",\n              staged.size,\n              staged.checksum.value,\n              requestHash,\n            ));\n          const previousMetadata = previousOperation?.outcomes[0]?.metadata;\n          const physical = yield* Effect.result(\n            configuration.primary.storage.put({\n              ...headers,\n              key: request.key,\n              body: staged.stream(),\n              contentLength: staged.size,\n              maxBytes: maximumObjectBytes,\n              customMetadata: { ...headers.customMetadata, [marker]: id },\n              condition: previousMetadata?.etag\n                ? { _tag: \"IfMatch\", etag: previousMetadata.etag }\n                : { _tag: \"CreateOnly\" },\n            }),\n          );\n          if (physical._tag === \"Failure\")\n            yield* operations.save({\n              ...operation,\n              outcomes: operation.outcomes.map((outcome, index) =>\n                index === 0 ? { ...outcome, state: \"unknown\", error: physical.failure } : outcome,\n              ),\n            });\n          const repaired = yield* operations.repair(yield* operations.load(operation.id));\n          return {\n            operation: repaired,\n            metadata: repaired.outcomes[0]?.metadata\n              ? virtual(repaired, repaired.outcomes[0].metadata)\n              : undefined,\n          };\n        }),\n      ),\n    );\n  const remove = (request: DeleteRequest) =>\n    store.exclusive(\n      Effect.gen(function* () {\n        yield* Schema.decodeUnknownEffect(DeleteRequest)(request).pipe(\n          Effect.mapError(() => workflowError(\"InvalidDelete\")),\n        );\n        const key = \"key\" in request ? request.key : request.ref.key;\n        if (\"ref\" in request && request.ref.storeId !== storeId)\n          return yield* workflowError(\"ForeignReference\");\n        const previous = yield* store.read(pointerKey(key), MirrorPointer);\n        if (previous?.kind === \"delete\")\n          return yield* operations.repair(yield* operations.load(previous.id));\n        const operation = yield* current(request, false);\n        if (request.condition && request.condition.etag !== `\"mirror:${operation.id}\"`)\n          return yield* storageError(\n            \"delete\",\n            \"mirror\",\n            { _tag: \"PreconditionFailed\" },\n            \"not-started\",\n          );\n        const tombstone = yield* operations.create(\n          yield* random.uuidV4(),\n          operation.key,\n          \"delete\",\n          0,\n          \"\",\n        );\n        yield* operations.activate(tombstone);\n        return yield* operations.repair(tombstone);\n      }),\n    );\n  const storage = Storage.make({\n    provider: \"mirror\",\n    storeId,\n    capabilities: {\n      putConditions,\n      getConditions: [\"if-match\", \"if-none-match\"],\n      deleteConditions: [\"if-match\"],\n      versionedReads: \"current-only\",\n      ranges: configuration.primary.storage.capabilities.ranges.filter((range) =>\n        endpoints.every((endpoint) =>\n          endpoint.endpoint.storage.capabilities.ranges.includes(range),\n        ),\n      ),\n      list: { maxPageSize: 1000, delimiter: false, cursorPersistence: \"provider\", snapshot: false },\n    },\n    put: (request) =>\n      write(request).pipe(\n        Effect.flatMap((receipt) =>\n          ensureRequired(receipt.operation).pipe(\n            Effect.flatMap(() =>\n              receipt.metadata\n                ? Effect.succeed(receipt.metadata)\n                : Effect.fail(workflowError(\"MissingPrimaryReceipt\")),\n            ),\n          ),\n        ),\n      ),\n    delete: (request) => remove(request).pipe(Effect.flatMap(ensureRequired)),\n    head: (request) =>\n      store.exclusive(\n        Effect.gen(function* () {\n          const operation = yield* current(request);\n          const source = yield* resolve(operation);\n          return virtual(operation, source.metadata);\n        }),\n      ),\n    get: (request): Effect.Effect<GetResult, StorageError, Scope.Scope> =>\n      store.exclusive(\n        Effect.gen(function* () {\n          const operation = yield* current(request);\n          const source = yield* resolve(operation);\n          const metadata = virtual(operation, source.metadata);\n          if (\n            request.condition?._tag === \"IfMatch\" &&\n            request.condition.etag !== metadata.etag &&\n            request.condition.etag !== \"*\"\n          )\n            return yield* storageError(\"get\", \"mirror\", { _tag: \"PreconditionFailed\" });\n          if (\n            request.condition?._tag === \"IfNoneMatch\" &&\n            (request.condition.etag === metadata.etag || request.condition.etag === \"*\")\n          )\n            return { _tag: \"NotModified\", metadata };\n          const value = yield* source.endpoint.storage.get({\n            ...(yield* pin(source.metadata)),\n            ...(request.range ? { range: request.range } : {}),\n          });\n          if (value._tag !== \"Object\") return yield* workflowError(\"ReplicaChanged\");\n          return { ...value, metadata };\n        }),\n      ),\n    listPage,\n  });\n  const applyRepair = Effect.fnUntraced(function* (id: string, limit = 100) {\n    let plan = yield* store.read(`repair:${id}`, MirrorRepairPlan);\n    if (\n      !plan ||\n      plan.binding !== binding ||\n      !Number.isSafeInteger(limit) ||\n      limit < 1 ||\n      limit > 1000\n    )\n      return yield* workflowError(\"InvalidRepairPlan\");\n    if (plan.state === \"partial\") plan = { ...plan, offset: 0, unresolved: 0 };\n    for (let attempted = 0; plan.offset < plan.count && attempted < limit; attempted++) {\n      const operationId = yield* store.read(`repair:${id}:${plan.offset}`, Schema.String);\n      const repaired = operationId\n        ? yield* operations.repair(yield* operations.load(operationId))\n        : undefined;\n      const unresolved: number =\n        plan.unresolved + (repaired && [\"pending\", \"partial\"].includes(repaired.state) ? 1 : 0);\n      plan = {\n        id: plan.id,\n        binding: plan.binding,\n        count: plan.count,\n        prefix: plan.prefix,\n        unresolved,\n        offset: plan.offset + 1,\n        state: plan.offset + 1 >= plan.count ? (unresolved ? \"partial\" : \"completed\") : \"applying\",\n      };\n      yield* store.write(`repair:${id}`, MirrorRepairPlan, plan);\n    }\n    return plan;\n  });\n  return {\n    storage,\n    maximumObjectBytes,\n    write,\n    remove,\n    status: (id: string) => store.exclusive(operations.load(id)),\n    statusFor: (key: string) =>\n      store.exclusive(\n        Effect.gen(function* () {\n          const pointer = yield* store.read(pointerKey(key), MirrorPointer);\n          return pointer ? yield* operations.load(pointer.id) : undefined;\n        }),\n      ),\n    planRepair: (request: { readonly prefix: string }) =>\n      store.exclusive(\n        Effect.gen(function* () {\n          yield* Schema.decodeUnknownEffect(Schema.String)(request.prefix).pipe(\n            Effect.mapError(() => workflowError(\"InvalidPrefix\")),\n          );\n          const id = yield* random.uuidV4();\n          let count = 0;\n          const upper = (yield* store.read(\"sequence\", Schema.Natural)) ?? 0;\n          for (let index = 1; index <= upper; index++) {\n            const operationId = yield* store.read(`index:${index}`, Schema.String);\n            if (!operationId) continue;\n            const operation = yield* operations.load(operationId);\n            const pointer = yield* store.read(pointerKey(operation.key), MirrorPointer);\n            if (\n              !operation.key.startsWith(request.prefix) ||\n              (pointer && pointer.generation > operation.generation)\n            )\n              continue;\n            yield* store.write(`repair:${id}:${count++}`, Schema.String, operation.id);\n          }\n          const plan: MirrorRepairPlan = {\n            id,\n            binding,\n            prefix: request.prefix,\n            count,\n            unresolved: 0,\n            offset: 0,\n            state: count ? \"planned\" : \"completed\",\n          };\n          yield* store.write(`repair:${id}`, MirrorRepairPlan, plan);\n          return plan;\n        }),\n      ),\n    inspectRepair: (id: string, page: { readonly offset?: number; readonly limit?: number } = {}) =>\n      store.exclusive(\n        Effect.gen(function* () {\n          const plan = yield* store.read(`repair:${id}`, MirrorRepairPlan);\n          if (!plan || plan.binding !== binding) return yield* workflowError(\"InvalidRepairPlan\");\n          const offset = page.offset ?? 0;\n          const limit = page.limit ?? 100;\n          if (\n            !Number.isSafeInteger(offset) ||\n            offset < 0 ||\n            !Number.isSafeInteger(limit) ||\n            limit < 1 ||\n            limit > 1000\n          )\n            return yield* workflowError(\"InvalidPage\");\n          const entries: MirrorOperation[] = [];\n          for (let index = offset; index < Math.min(plan.count, offset + limit); index++) {\n            const operationId = yield* store.read(`repair:${id}:${index}`, Schema.String);\n            if (operationId) entries.push(yield* operations.load(operationId));\n          }\n          return {\n            plan,\n            entries,\n            ...(offset + entries.length < plan.count\n              ? { nextOffset: offset + entries.length }\n              : {}),\n          };\n        }),\n      ),\n    applyRepair: (id: string, options?: { readonly limit?: number }) =>\n      store.exclusive(applyRepair(id, options?.limit)),\n  };\n});\n\nexport class StorageMirror extends Context.Service<\n  StorageMirror,\n  Effect.Success<ReturnType<typeof make>>\n>()(\"@effect-kit/storage/StorageMirror\") {\n  static readonly make = make;\n  static layer<EP, RP, ER, RR>(\n    options: Omit<MirrorOptions, \"primary\" | \"replicas\"> & {\n      readonly primary: Layer.Layer<Storage | TransferDriver, EP, RP>;\n      readonly replicas: ReadonlyArray<{\n        readonly storage: Layer.Layer<Storage | TransferDriver, ER, RR>;\n        readonly required: boolean;\n      }>;\n    },\n  ) {\n    return Layer.effectContext(\n      Effect.gen(function* () {\n        const primary = yield* buildEndpoint(options.primary);\n        const replicas = yield* Effect.forEach(options.replicas, (replica) =>\n          buildEndpoint(replica.storage).pipe(\n            Effect.map((endpoint) => ({\n              storage: endpoint,\n              required: replica.required,\n            })),\n          ),\n        );\n        const mirror = yield* make({ ...options, primary, replicas });\n        return Context.make(StorageMirror, mirror).pipe(\n          Context.add(Storage, mirror.storage),\n          Context.add(TransferDriver, {\n            storage: mirror.storage,\n            maximumObjectBytes: mirror.maximumObjectBytes,\n            maximumSingleUploadBytes: mirror.maximumObjectBytes,\n            transportOverheadBytes: primary.transportOverheadBytes,\n            underlyingStoreId: primary.underlyingStoreId ?? primary.storage.storeId,\n            underlyingStoreIds: [\n              ...endpointStoreIds(primary),\n              ...replicas.flatMap((replica) => endpointStoreIds(replica.storage)),\n            ],\n          }),\n        );\n      }),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,IAAa,cAAb,MAAa,oBAAoB,QAAQ,QAAkC,CAAC,CAC1E,iCACF,CAAC,CAAC;CACA,OAAO,KAAK,SAA+B;EACzC,OAAO,gBAAgB,SAAS,QAAQ;CAC1C;CACA,OAAO,MAAM,SAA+B;EAC1C,OAAO,MAAM,OAAO,aAAa,YAAY,KAAK,OAAO,CAAC;CAC5D;AACF;AAWA,MAAM,kBAAkB,cACtB,UAAU,SAAS,OAAO,YAAY,CAAC,QAAQ,YAAY,QAAQ,UAAU,WAAW,IACpF,OAAO,OACP,OAAO,KACL,IAAI,aAAa;CACf,WAAW,UAAU;CACrB,UAAU;CACV,QAAQ,EAAE,MAAM,iBAAiB;CACjC,iBAAiB;CACjB,WAAW,UAAU;AACvB,CAAC,CACH;AAEN,MAAM,OAAO,OAAO,WAAW,WAAW,eAA8B;CACtE,MAAM,QAAQ,OAAO;CACrB,MAAM,SAAS,OAAO,aAAa;CACnC,MAAM,QAAQ,OAAO;CACrB,MAAM,WAAW,CACf;EAAE,UAAU,cAAc;EAAS,UAAU;CAAK,GAClD,GAAG,cAAc,SAAS,KAAK,aAAa;EAC1C,UAAU,QAAQ;EAClB,UAAU,QAAQ;CACpB,EAAE,CACJ;CACA,MAAM,iBAAiB,SAAS,SAAS,EAAE,eAAe,iBAAiB,QAAQ,CAAC;CACpF,IACE,CAAC,cAAc,mBACf,CAAC,OAAO,cAAc,cAAc,QAAQ,KAC5C,cAAc,WAAW,KACzB,SAAS,SAAS,KAClB,SAAS,SAAS,KAClB,IAAI,IAAI,cAAc,CAAC,CAAC,SAAS,eAAe,QAEhD,OAAO,OAAO,cAAc,4BAA4B;CAC1D,MAAM,YAAY,OAAO,OAAO,QAAQ,WAAW,UACjD,UAAU,KAAK,cAAc,QAAQ,CAAC,CAAC,KACrC,OAAO,eAAe,SAAS,MAAM,SAAS,OAAO,GACrD,OAAO,eAAe,gBAAgB,MAAM,QAAQ,GACpD,OAAO,KAAK,eAAe;EAAE,GAAG;EAAO;CAAU,EAAE,CACrD,CACF;CACA,MAAM,qBAAqB,KAAK,IAC9B,cAAc,UACd,cAAc,QAAQ,0BACtB,GAAG,SAAS,QAAQ,UAAU,MAAM,QAAQ,CAAC,CAAC,KAAK,UAAU,MAAM,SAAS,kBAAkB,CAChG;CACA,MAAM,gBAAiB,CAAC,eAAe,UAAU,CAAC,CAAW,QAAQ,cACnE,SAAS,OACN,UACC,CAAC,MAAM,YAAY,MAAM,SAAS,QAAQ,aAAa,cAAc,SAAS,SAAS,CAC3F,CACF;CACA,MAAM,UAAU,WACd,KAAK,UAAU,CACb,cAAc,iBACd,UAAU,KAAK,UAAU,CAAC,MAAM,SAAS,QAAQ,SAAS,MAAM,QAAQ,CAAC,CAC3E,CAAC,CACH;CACA,OAAO,MAAM,UACX,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO,MAAM,KAAK,iBAAiB,OAAO,MAAM;EACjE,IAAI,YAAY,aAAa,SAC3B,OAAO,OAAO,cAAc,kCAAkC;EAChE,IAAI,CAAC,UAAU,OAAO,MAAM,MAAM,iBAAiB,OAAO,QAAQ,OAAO;CAC3E,CAAC,CACH;CACA,MAAM,UAAU,UAAU;CAC1B,MAAM,aAAa,eAAe,OAAO,SAAS,SAAS;CAC3D,MAAM,EAAE,SAAS,SAAS,SAAS,aAAa,SAAS,OAAO,SAAS,WAAW,UAAU;CAC9F,MAAM,SAA+B,YACnC,MAAM,UACJ,OAAO,OACL,OAAO,IAAI,aAAa;EACtB,IACE,QAAQ,aACR,CAAC,cAAc,SACb,QAAQ,UAAU,SAAS,eAAe,gBAAgB,UAC5D,GAEA,OAAO,OAAO,aACZ,OACA,UACA;GAAE,MAAM;GAAe,YAAY;EAAkB,GACrD,aACF;EACF,OAAO,OAAO,oBAAoB,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,KACrD,OAAO,eAAe,cAAc,cAAc,CAAC,CACrD;EACA,IAAI,EAAE,QAAQ,gBAAgB,eAAe,CAAC,OAAO,SAAS,QAAQ,IAAI,GACxE,OAAO,OAAO,cAAc,aAAa;EAC3C,MAAM,UAAU,OAAO,OAAO,oBAAoB,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,KACxE,OAAO,eAAe,cAAc,gBAAgB,CAAC,CACvD;EACA,IAAI,QAAQ,8CAA6B,QACvC,OAAO,OAAO,cAAc,kBAAkB;EAChD,MAAM,SAAS,OAAO,MACpB,QAAQ,gBAAgB,aAAa,OAAO,QAAQ,QAAQ,IAAI,IAAI,QAAQ,MAC5E,KAAK,IAAI,oBAAoB,QAAQ,YAAY,kBAAkB,CACrE;EACA,IAAI,QAAQ,kBAAkB,UAAa,QAAQ,kBAAkB,OAAO,MAC1E,OAAO,OAAO,cAAc,gBAAgB;EAC9C,MAAM,KAAK,QAAQ,OAAO,OAAO,OAAO,OAAO;EAC/C,IAAI,CAAC,0BAA0B,KAAK,EAAE,GACpC,OAAO,OAAO,cAAc,oBAAoB;EAClD,MAAM,cAAc,WAClB,KAAK,UAAU;GACb,QAAQ;GACR;GACA,QAAQ;GACR,OAAO;GACP,OAAO,SAAS;EAClB,CAAC,CACH;EACA,MAAM,WAAW,OAAO,MAAM,KAAK,aAAa,MAAM,eAAe;EACrE,IAAI,UAAU;GACZ,IACE,SAAS,YAAY,WACrB,SAAS,QAAQ,QAAQ,OACzB,SAAS,SAAS,SAClB,SAAS,gBAAgB,aAEzB,OAAO,OAAO,cAAc,mBAAmB;GACjD,MAAM,WAAW,OAAO,WAAW,OAAO,QAAQ;GAClD,IAAI,SAAS,SAAS,EAAE,EAAE,UAAU,eAAe,SAAS,UAAU,cACpE,OAAO;IACL,WAAW;IACX,UAAU,SAAS,SAAS,EAAE,EAAE,WAC5B,QAAQ,UAAU,SAAS,SAAS,EAAE,CAAC,QAAQ,IAC/C;GACN;EACJ;EACA,MAAM,WAAW,OAAO,MAAM,KAAK,WAAW,QAAQ,GAAG,GAAG,aAAa;EACzE,IAAI,YAAY,YAAY,SAAS,aAAa,SAAS,YACzD,OAAO,OAAO,cAAc,qBAAqB;EACnD,MAAM,oBACJ,UAAU,SAAS,QAAQ,OAAO,WAAW,KAAK,SAAS,EAAE,IAAI;EACnE,IACE,QAAQ,WAAW,SAAS,gBAC5B,qBACA,kBAAkB,OAAO,IAEzB,OAAO,OAAO,aACZ,OACA,UACA,EAAE,MAAM,qBAAqB,GAC7B,aACF;EACF,IACE,QAAQ,WAAW,SAAS,cAC3B,CAAC,qBAAqB,QAAQ,UAAU,SAAS,WAAW,kBAAkB,GAAG,KAElF,OAAO,OAAO,aACZ,OACA,UACA,EAAE,MAAM,qBAAqB,GAC7B,aACF;EACF,MAAM,YACJ,aACC,OAAO,WAAW,OACjB,IACA,QAAQ,KACR,OACA,OAAO,MACP,OAAO,SAAS,OAChB,WACF;EACF,MAAM,mBAAmB,mBAAmB,SAAS,EAAE,EAAE;EACzD,MAAM,WAAW,OAAO,OAAO,OAC7B,cAAc,QAAQ,QAAQ,IAAI;GAChC,GAAG;GACH,KAAK,QAAQ;GACb,MAAM,OAAO,OAAO;GACpB,eAAe,OAAO;GACtB,UAAU;GACV,gBAAgB;IAAE,GAAG,QAAQ;KAAiB,SAAS;GAAG;GAC1D,WAAW,kBAAkB,OACzB;IAAE,MAAM;IAAW,MAAM,iBAAiB;GAAK,IAC/C,EAAE,MAAM,aAAa;EAC3B,CAAC,CACH;EACA,IAAI,SAAS,SAAS,WACpB,OAAO,WAAW,KAAK;GACrB,GAAG;GACH,UAAU,UAAU,SAAS,KAAK,SAAS,UACzC,UAAU,IAAI;IAAE,GAAG;IAAS,OAAO;IAAW,OAAO,SAAS;GAAQ,IAAI,OAC5E;EACF,CAAC;EACH,MAAM,WAAW,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;EAC9E,OAAO;GACL,WAAW;GACX,UAAU,SAAS,SAAS,EAAE,EAAE,WAC5B,QAAQ,UAAU,SAAS,SAAS,EAAE,CAAC,QAAQ,IAC/C;EACN;CACF,CAAC,CACH,CACF;CACF,MAAM,UAAU,YACd,MAAM,UACJ,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,oBAAoB,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,KACxD,OAAO,eAAe,cAAc,eAAe,CAAC,CACtD;EACA,MAAM,MAAM,SAAS,UAAU,QAAQ,MAAM,QAAQ,IAAI;EACzD,IAAI,SAAS,WAAW,QAAQ,IAAI,YAAY,SAC9C,OAAO,OAAO,cAAc,kBAAkB;EAChD,MAAM,WAAW,OAAO,MAAM,KAAK,WAAW,GAAG,GAAG,aAAa;EACjE,IAAI,UAAU,SAAS,UACrB,OAAO,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK,SAAS,EAAE,CAAC;EACrE,MAAM,YAAY,OAAO,QAAQ,SAAS,KAAK;EAC/C,IAAI,QAAQ,aAAa,QAAQ,UAAU,SAAS,WAAW,UAAU,GAAG,IAC1E,OAAO,OAAO,aACZ,UACA,UACA,EAAE,MAAM,qBAAqB,GAC7B,aACF;EACF,MAAM,YAAY,OAAO,WAAW,OAClC,OAAO,OAAO,OAAO,GACrB,UAAU,KACV,UACA,GACA,EACF;EACA,OAAO,WAAW,SAAS,SAAS;EACpC,OAAO,OAAO,WAAW,OAAO,SAAS;CAC3C,CAAC,CACH;CACF,MAAM,UAAU,QAAQ,KAAK;EAC3B,UAAU;EACV;EACA,cAAc;GACZ;GACA,eAAe,CAAC,YAAY,eAAe;GAC3C,kBAAkB,CAAC,UAAU;GAC7B,gBAAgB;GAChB,QAAQ,cAAc,QAAQ,QAAQ,aAAa,OAAO,QAAQ,UAChE,UAAU,OAAO,aACf,SAAS,SAAS,QAAQ,aAAa,OAAO,SAAS,KAAK,CAC9D,CACF;GACA,MAAM;IAAE,aAAa;IAAM,WAAW;IAAO,mBAAmB;IAAY,UAAU;GAAM;EAC9F;EACA,MAAM,YACJ,MAAM,OAAO,CAAC,CAAC,KACb,OAAO,SAAS,YACd,eAAe,QAAQ,SAAS,CAAC,CAAC,KAChC,OAAO,cACL,QAAQ,WACJ,OAAO,QAAQ,QAAQ,QAAQ,IAC/B,OAAO,KAAK,cAAc,uBAAuB,CAAC,CACxD,CACF,CACF,CACF;EACF,SAAS,YAAY,OAAO,OAAO,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,CAAC;EACxE,OAAO,YACL,MAAM,UACJ,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,QAAQ,OAAO;GACxC,MAAM,SAAS,OAAO,QAAQ,SAAS;GACvC,OAAO,QAAQ,WAAW,OAAO,QAAQ;EAC3C,CAAC,CACH;EACF,MAAM,YACJ,MAAM,UACJ,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,QAAQ,OAAO;GACxC,MAAM,SAAS,OAAO,QAAQ,SAAS;GACvC,MAAM,WAAW,QAAQ,WAAW,OAAO,QAAQ;GACnD,IACE,QAAQ,WAAW,SAAS,aAC5B,QAAQ,UAAU,SAAS,SAAS,QACpC,QAAQ,UAAU,SAAS,KAE3B,OAAO,OAAO,aAAa,OAAO,UAAU,EAAE,MAAM,qBAAqB,CAAC;GAC5E,IACE,QAAQ,WAAW,SAAS,kBAC3B,QAAQ,UAAU,SAAS,SAAS,QAAQ,QAAQ,UAAU,SAAS,MAExE,OAAO;IAAE,MAAM;IAAe;GAAS;GACzC,MAAM,QAAQ,OAAO,OAAO,SAAS,QAAQ,IAAI;IAC/C,GAAI,OAAO,IAAI,OAAO,QAAQ;IAC9B,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;GAClD,CAAC;GACD,IAAI,MAAM,SAAS,UAAU,OAAO,OAAO,cAAc,gBAAgB;GACzE,OAAO;IAAE,GAAG;IAAO;GAAS;EAC9B,CAAC,CACH;EACF;CACF,CAAC;CACD,MAAM,cAAc,OAAO,WAAW,WAAW,IAAY,QAAQ,KAAK;EACxE,IAAI,OAAO,OAAO,MAAM,KAAK,UAAU,MAAM,gBAAgB;EAC7D,IACE,CAAC,QACD,KAAK,YAAY,WACjB,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,KACR,QAAQ,KAER,OAAO,OAAO,cAAc,mBAAmB;EACjD,IAAI,KAAK,UAAU,WAAW,OAAO;GAAE,GAAG;GAAM,QAAQ;GAAG,YAAY;EAAE;EACzE,KAAK,IAAI,YAAY,GAAG,KAAK,SAAS,KAAK,SAAS,YAAY,OAAO,aAAa;GAClF,MAAM,cAAc,OAAO,MAAM,KAAK,UAAU,GAAG,GAAG,KAAK,UAAU,OAAO,MAAM;GAClF,MAAM,WAAW,cACb,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK,WAAW,CAAC,IAC5D;GACJ,MAAM,aACJ,KAAK,cAAc,YAAY,CAAC,WAAW,SAAS,CAAC,CAAC,SAAS,SAAS,KAAK,IAAI,IAAI;GACvF,OAAO;IACL,IAAI,KAAK;IACT,SAAS,KAAK;IACd,OAAO,KAAK;IACZ,QAAQ,KAAK;IACb;IACA,QAAQ,KAAK,SAAS;IACtB,OAAO,KAAK,SAAS,KAAK,KAAK,QAAS,aAAa,YAAY,cAAe;GAClF;GACA,OAAO,MAAM,MAAM,UAAU,MAAM,kBAAkB,IAAI;EAC3D;EACA,OAAO;CACT,CAAC;CACD,OAAO;EACL;EACA;EACA;EACA;EACA,SAAS,OAAe,MAAM,UAAU,WAAW,KAAK,EAAE,CAAC;EAC3D,YAAY,QACV,MAAM,UACJ,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO,MAAM,KAAK,WAAW,GAAG,GAAG,aAAa;GAChE,OAAO,UAAU,OAAO,WAAW,KAAK,QAAQ,EAAE,IAAI;EACxD,CAAC,CACH;EACF,aAAa,YACX,MAAM,UACJ,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,oBAAoB,OAAO,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,KAC/D,OAAO,eAAe,cAAc,eAAe,CAAC,CACtD;GACA,MAAM,KAAK,OAAO,OAAO,OAAO;GAChC,IAAI,QAAQ;GACZ,MAAM,SAAS,OAAO,MAAM,KAAK,YAAY,OAAO,OAAO,MAAM;GACjE,KAAK,IAAI,QAAQ,GAAG,SAAS,OAAO,SAAS;IAC3C,MAAM,cAAc,OAAO,MAAM,KAAK,SAAS,SAAS,OAAO,MAAM;IACrE,IAAI,CAAC,aAAa;IAClB,MAAM,YAAY,OAAO,WAAW,KAAK,WAAW;IACpD,MAAM,UAAU,OAAO,MAAM,KAAK,WAAW,UAAU,GAAG,GAAG,aAAa;IAC1E,IACE,CAAC,UAAU,IAAI,WAAW,QAAQ,MAAM,KACvC,WAAW,QAAQ,aAAa,UAAU,YAE3C;IACF,OAAO,MAAM,MAAM,UAAU,GAAG,GAAG,WAAW,OAAO,QAAQ,UAAU,EAAE;GAC3E;GACA,MAAM,OAAyB;IAC7B;IACA;IACA,QAAQ,QAAQ;IAChB;IACA,YAAY;IACZ,QAAQ;IACR,OAAO,QAAQ,YAAY;GAC7B;GACA,OAAO,MAAM,MAAM,UAAU,MAAM,kBAAkB,IAAI;GACzD,OAAO;EACT,CAAC,CACH;EACF,gBAAgB,IAAY,OAA8D,CAAC,MACzF,MAAM,UACJ,OAAO,IAAI,aAAa;GACtB,MAAM,OAAO,OAAO,MAAM,KAAK,UAAU,MAAM,gBAAgB;GAC/D,IAAI,CAAC,QAAQ,KAAK,YAAY,SAAS,OAAO,OAAO,cAAc,mBAAmB;GACtF,MAAM,SAAS,KAAK,UAAU;GAC9B,MAAM,QAAQ,KAAK,SAAS;GAC5B,IACE,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,KACR,QAAQ,KAER,OAAO,OAAO,cAAc,aAAa;GAC3C,MAAM,UAA6B,CAAC;GACpC,KAAK,IAAI,QAAQ,QAAQ,QAAQ,KAAK,IAAI,KAAK,OAAO,SAAS,KAAK,GAAG,SAAS;IAC9E,MAAM,cAAc,OAAO,MAAM,KAAK,UAAU,GAAG,GAAG,SAAS,OAAO,MAAM;IAC5E,IAAI,aAAa,QAAQ,KAAK,OAAO,WAAW,KAAK,WAAW,CAAC;GACnE;GACA,OAAO;IACL;IACA;IACA,GAAI,SAAS,QAAQ,SAAS,KAAK,QAC/B,EAAE,YAAY,SAAS,QAAQ,OAAO,IACtC,CAAC;GACP;EACF,CAAC,CACH;EACF,cAAc,IAAY,YACxB,MAAM,UAAU,YAAY,IAAI,SAAS,KAAK,CAAC;CACnD;AACF,CAAC;AAED,IAAa,gBAAb,MAAa,sBAAsB,QAAQ,QAGzC,CAAC,CAAC,mCAAmC,CAAC,CAAC;CACvC,OAAgB,OAAO;CACvB,OAAO,MACL,SAOA;EACA,OAAO,MAAM,cACX,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO,cAAc,QAAQ,OAAO;GACpD,MAAM,WAAW,OAAO,OAAO,QAAQ,QAAQ,WAAW,YACxD,cAAc,QAAQ,OAAO,CAAC,CAAC,KAC7B,OAAO,KAAK,cAAc;IACxB,SAAS;IACT,UAAU,QAAQ;GACpB,EAAE,CACJ,CACF;GACA,MAAM,SAAS,OAAO,KAAK;IAAE,GAAG;IAAS;IAAS;GAAS,CAAC;GAC5D,OAAO,QAAQ,KAAK,eAAe,MAAM,CAAC,CAAC,KACzC,QAAQ,IAAI,SAAS,OAAO,OAAO,GACnC,QAAQ,IAAI,gBAAgB;IAC1B,SAAS,OAAO;IAChB,oBAAoB,OAAO;IAC3B,0BAA0B,OAAO;IACjC,wBAAwB,QAAQ;IAChC,mBAAmB,QAAQ,qBAAqB,QAAQ,QAAQ;IAChE,oBAAoB,CAClB,GAAG,iBAAiB,OAAO,GAC3B,GAAG,SAAS,SAAS,YAAY,iBAAiB,QAAQ,OAAO,CAAC,CACpE;GACF,CAAC,CACH;EACF,CAAC,CACH;CACF;AACF"}

package/dist/node.d.ts

@@ -0,0 +1,14 @@
+import { StorageError } from "./core/errors.js";
+import "./index.js";
+import { TransferHash } from "./transfers/dependencies.js";
+import { UploadSessionStore } from "./sessions/store.js";
+import { sha256 } from "./runtime/node-hash.js";
+import { aes256Gcm } from "./runtime/node-protection.js";
+import { FileSessionStoreOptions } from "./runtime/session-store.js";
+import { atomicFileStore } from "./runtime/filesystem.js";
+import { fileDownloadTarget } from "./runtime/file-target.js";
+import { Layer } from "effect";
+export declare const layer: Layer.Layer<import("effect/crypto/Digest").Digest | import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/crypto/SecureRandom").SecureRandom | TransferHash, never, never>;
+export declare const sessionStore: (options: FileSessionStoreOptions) => Layer.Layer<UploadSessionStore, import("effect/persistence/KeyValueStore").KeyValueStoreError | StorageError, import("effect/crypto/Digest").Digest | import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/crypto/SecureRandom").SecureRandom>;
+export { type FileSessionStoreOptions, aes256Gcm, atomicFileStore, fileDownloadTarget, sha256 };
+//# sourceMappingURL=node.d.ts.map

package/dist/node.js

@@ -0,0 +1,17 @@
+import { TransferHash } from "./transfers/dependencies.js";
+import { sha256 } from "./runtime/node-hash.js";
+import { aes256Gcm } from "./runtime/node-protection.js";
+import { atomicFileStore } from "./runtime/filesystem.js";
+import { fileSessionStore } from "./runtime/session-store.js";
+import { fileDownloadTarget } from "./runtime/file-target.js";
+import { Effect, Layer } from "effect";
+import * as NodeCrypto from "@effect/platform-node/NodeCrypto";
+import * as NodeFileSystem from "@effect/platform-node/NodeFileSystem";
+import * as NodePath from "@effect/platform-node/NodePath";
+
+// src/runtime/node.ts
+const layer = Layer.mergeAll(NodeFileSystem.layer, NodePath.layer, NodeCrypto.layerSecureRandom, NodeCrypto.layerDigest, Layer.succeed(TransferHash, sha256));
+const sessionStore = (options) => fileSessionStore(options, Effect.sync(() => aes256Gcm(options.key)));
+
+export { aes256Gcm, atomicFileStore, fileDownloadTarget, layer, sessionStore, sha256 };
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","names":[],"sources":["../src/runtime/node.ts"],"sourcesContent":["import * as NodeCrypto from \"@effect/platform-node/NodeCrypto\";\nimport * as NodeFileSystem from \"@effect/platform-node/NodeFileSystem\";\nimport * as NodePath from \"@effect/platform-node/NodePath\";\nimport { Effect, Layer } from \"effect\";\n\nimport { TransferHash } from \"../transfers/dependencies.js\";\nimport { sha256 } from \"./node-hash.js\";\nimport { aes256Gcm } from \"./node-protection.js\";\nimport { fileSessionStore } from \"./session-store.js\";\nimport type { FileSessionStoreOptions } from \"./session-store.js\";\n\nexport { sha256, aes256Gcm };\nexport { atomicFileStore } from \"./filesystem.js\";\nexport { fileDownloadTarget } from \"./file-target.js\";\nexport type { FileSessionStoreOptions } from \"./session-store.js\";\n\nexport const layer = Layer.mergeAll(\n  NodeFileSystem.layer,\n  NodePath.layer,\n  NodeCrypto.layerSecureRandom,\n  NodeCrypto.layerDigest,\n  Layer.succeed(TransferHash, sha256),\n);\nexport const sessionStore = (options: FileSessionStoreOptions) =>\n  fileSessionStore(\n    options,\n    Effect.sync(() => aes256Gcm(options.key)),\n  );\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,QAAQ,MAAM,SACzB,eAAe,OACf,SAAS,OACT,WAAW,mBACX,WAAW,aACX,MAAM,QAAQ,cAAc,MAAM,CACpC;AACA,MAAa,gBAAgB,YAC3B,iBACE,SACA,OAAO,WAAW,UAAU,QAAQ,GAAG,CAAC,CAC1C"}

package/dist/providers/azure/blocks.js

@@ -0,0 +1,94 @@
+import { storageError } from "../../core/errors.js";
+import { uploadBody } from "../../internal/node/upload-body.js";
+import { encryption, lease } from "./config.js";
+import { condition, metadata, nativeHeaders, target, writeMetadata } from "./mapping.js";
+import { request } from "./transport.js";
+import { Effect, Schema } from "effect";
+
+// src/providers/azure/blocks.ts
+const BlockId = Schema.NonEmptyString.check(Schema.isPattern(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u), Schema.isMaxLength(88));
+const mapBlocks = (blocks) => (blocks ?? []).map((block) => ({
+	blockId: block.name,
+	size: block.size
+}));
+function blockUploads(connection) {
+	const blob = Effect.fnUntraced(function* (ref) {
+		const address = yield* target(connection, { ref }, "blocks");
+		if (ref.version) return yield* storageError("blocks", "azure", {
+			_tag: "InvalidInput",
+			field: "ref.version"
+		}, "not-started");
+		return connection.client.getBlockBlobClient(address.ref.key);
+	});
+	return {
+		limits: {
+			maximumBlockBytes: 4194304e3,
+			maximumBlocks: 5e4
+		},
+		stage: Effect.fnUntraced(function* (input) {
+			const client = yield* blob(input.ref);
+			yield* Schema.decodeUnknownEffect(BlockId)(input.blockId).pipe(Effect.mapError(() => storageError("stageBlock", "azure", {
+				_tag: "InvalidInput",
+				field: "blockId"
+			}, "not-started")));
+			if (!input.contentLength || input.contentLength > 4194304e3) return yield* storageError("stageBlock", "azure", {
+				_tag: "InvalidInput",
+				field: "contentLength"
+			}, "not-started");
+			yield* uploadBody({
+				provider: "azure",
+				maxUnknownLengthBytes: connection.config.maxUnknownLengthBytes
+			}, input, "stageBlock", (body, length) => request(connection, "stageBlock", true, (signal) => client.stageBlock(input.blockId, body, length, {
+				abortSignal: signal,
+				conditions: lease(connection.config),
+				...encryption(connection.config),
+				contentChecksumAlgorithm: connection.config.checksumAlgorithm
+			})));
+		}),
+		list: Effect.fnUntraced(function* (ref) {
+			const client = yield* blob(ref);
+			const result = yield* request(connection, "listBlocks", false, (signal) => client.getBlockList("all", {
+				abortSignal: signal,
+				conditions: lease(connection.config)
+			})).pipe(Effect.catchReason("StorageError", "NotFound", () => Effect.succeed({
+				committedBlocks: [],
+				uncommittedBlocks: []
+			})));
+			return {
+				committed: mapBlocks(result.committedBlocks),
+				uncommitted: mapBlocks(result.uncommittedBlocks)
+			};
+		}),
+		commit: Effect.fnUntraced(function* (input) {
+			const client = yield* blob(input.ref);
+			if (input.blockIds.length > 5e4 || new Set(input.blockIds).size !== input.blockIds.length || new Set(input.blockIds.map((id) => Buffer.from(id, "base64").length)).size > 1) return yield* storageError("commitBlocks", "azure", {
+				_tag: "InvalidInput",
+				field: "blockIds"
+			}, "not-started");
+			yield* Effect.forEach(input.blockIds, (id) => Schema.decodeUnknownEffect(BlockId)(id).pipe(Effect.mapError(() => storageError("commitBlocks", "azure", {
+				_tag: "InvalidInput",
+				field: "blockId"
+			}, "not-started"))));
+			const headers = input.headers ?? {};
+			const customMetadata = yield* writeMetadata(headers);
+			const result = yield* request(connection, "commitBlocks", true, (signal) => client.commitBlockList([...input.blockIds], {
+				abortSignal: signal,
+				conditions: {
+					...condition(input.condition),
+					...lease(connection.config)
+				},
+				blobHTTPHeaders: nativeHeaders(headers),
+				metadata: customMetadata,
+				...encryption(connection.config)
+			}));
+			return metadata(connection, input.ref.key, {
+				...result,
+				...headers,
+				metadata: customMetadata
+			});
+		})
+	};
+}
+
+export { blockUploads };
+//# sourceMappingURL=blocks.js.map

package/dist/providers/azure/blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks.js","names":[],"sources":["../../../src/providers/azure/blocks.ts"],"sourcesContent":["import { Effect, Schema } from \"effect\";\n\nimport type { BlockUploads } from \"../../core/contracts/resumable.js\";\nimport { storageError } from \"../../core/errors.js\";\nimport type { ObjectRef } from \"../../core/object.js\";\nimport { uploadBody } from \"../../internal/node/upload-body.js\";\nimport { encryption, lease } from \"./config.js\";\nimport type { AzureConnection } from \"./config.js\";\nimport { condition, metadata, nativeHeaders, target, writeMetadata } from \"./mapping.js\";\nimport { request } from \"./transport.js\";\n\nconst BlockId = Schema.NonEmptyString.check(\n  Schema.isPattern(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u),\n  Schema.isMaxLength(88),\n);\nconst mapBlocks = (blocks: ReadonlyArray<{ name: string; size: number }> | undefined) =>\n  (blocks ?? []).map((block) => ({ blockId: block.name, size: block.size }));\n\nexport function blockUploads(connection: AzureConnection): BlockUploads {\n  const blob = Effect.fnUntraced(function* (ref: ObjectRef) {\n    const address = yield* target(connection, { ref }, \"blocks\");\n    if (ref.version)\n      return yield* storageError(\n        \"blocks\",\n        \"azure\",\n        { _tag: \"InvalidInput\", field: \"ref.version\" },\n        \"not-started\",\n      );\n    return connection.client.getBlockBlobClient(address.ref.key);\n  });\n  return {\n    limits: { maximumBlockBytes: 4000 * 1024 * 1024, maximumBlocks: 50_000 },\n    stage: Effect.fnUntraced(function* (input) {\n      const client = yield* blob(input.ref);\n      yield* Schema.decodeUnknownEffect(BlockId)(input.blockId).pipe(\n        Effect.mapError(() =>\n          storageError(\n            \"stageBlock\",\n            \"azure\",\n            { _tag: \"InvalidInput\", field: \"blockId\" },\n            \"not-started\",\n          ),\n        ),\n      );\n      if (!input.contentLength || input.contentLength > 4000 * 1024 * 1024)\n        return yield* storageError(\n          \"stageBlock\",\n          \"azure\",\n          { _tag: \"InvalidInput\", field: \"contentLength\" },\n          \"not-started\",\n        );\n      yield* uploadBody(\n        { provider: \"azure\", maxUnknownLengthBytes: connection.config.maxUnknownLengthBytes },\n        input,\n        \"stageBlock\",\n        (body, length) =>\n          request(connection, \"stageBlock\", true, (signal) =>\n            client.stageBlock(input.blockId, body, length, {\n              abortSignal: signal,\n              conditions: lease(connection.config),\n              ...encryption(connection.config),\n              contentChecksumAlgorithm: connection.config.checksumAlgorithm,\n            }),\n          ),\n      );\n    }),\n    list: Effect.fnUntraced(function* (ref) {\n      const client = yield* blob(ref);\n      const result = yield* request(connection, \"listBlocks\", false, (signal) =>\n        client.getBlockList(\"all\", { abortSignal: signal, conditions: lease(connection.config) }),\n      ).pipe(\n        Effect.catchReason(\"StorageError\", \"NotFound\", () =>\n          Effect.succeed({ committedBlocks: [], uncommittedBlocks: [] }),\n        ),\n      );\n      return {\n        committed: mapBlocks(result.committedBlocks),\n        uncommitted: mapBlocks(result.uncommittedBlocks),\n      };\n    }),\n    commit: Effect.fnUntraced(function* (input) {\n      const client = yield* blob(input.ref);\n      if (\n        input.blockIds.length > 50_000 ||\n        new Set(input.blockIds).size !== input.blockIds.length ||\n        new Set(input.blockIds.map((id) => Buffer.from(id, \"base64\").length)).size > 1\n      )\n        return yield* storageError(\n          \"commitBlocks\",\n          \"azure\",\n          { _tag: \"InvalidInput\", field: \"blockIds\" },\n          \"not-started\",\n        );\n      yield* Effect.forEach(input.blockIds, (id) =>\n        Schema.decodeUnknownEffect(BlockId)(id).pipe(\n          Effect.mapError(() =>\n            storageError(\n              \"commitBlocks\",\n              \"azure\",\n              { _tag: \"InvalidInput\", field: \"blockId\" },\n              \"not-started\",\n            ),\n          ),\n        ),\n      );\n      const headers = input.headers ?? {};\n      const customMetadata = yield* writeMetadata(headers);\n      const result = yield* request(connection, \"commitBlocks\", true, (signal) =>\n        client.commitBlockList([...input.blockIds], {\n          abortSignal: signal,\n          conditions: { ...condition(input.condition), ...lease(connection.config) },\n          blobHTTPHeaders: nativeHeaders(headers),\n          metadata: customMetadata,\n          ...encryption(connection.config),\n        }),\n      );\n      return metadata(connection, input.ref.key, {\n        ...result,\n        ...headers,\n        metadata: customMetadata,\n      });\n    }),\n  };\n}\n"],"mappings":";;;;;;;;AAWA,MAAM,UAAU,OAAO,eAAe,MACpC,OAAO,UAAU,mEAAmE,GACpF,OAAO,YAAY,EAAE,CACvB;AACA,MAAM,aAAa,YAChB,UAAU,CAAC,EAAC,CAAE,KAAK,WAAW;CAAE,SAAS,MAAM;CAAM,MAAM,MAAM;AAAK,EAAE;AAE3E,SAAgB,aAAa,YAA2C;CACtE,MAAM,OAAO,OAAO,WAAW,WAAW,KAAgB;EACxD,MAAM,UAAU,OAAO,OAAO,YAAY,EAAE,IAAI,GAAG,QAAQ;EAC3D,IAAI,IAAI,SACN,OAAO,OAAO,aACZ,UACA,SACA;GAAE,MAAM;GAAgB,OAAO;EAAc,GAC7C,aACF;EACF,OAAO,WAAW,OAAO,mBAAmB,QAAQ,IAAI,GAAG;CAC7D,CAAC;CACD,OAAO;EACL,QAAQ;GAAE,mBAAmB;GAAoB,eAAe;EAAO;EACvE,OAAO,OAAO,WAAW,WAAW,OAAO;GACzC,MAAM,SAAS,OAAO,KAAK,MAAM,GAAG;GACpC,OAAO,OAAO,oBAAoB,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,KACxD,OAAO,eACL,aACE,cACA,SACA;IAAE,MAAM;IAAgB,OAAO;GAAU,GACzC,aACF,CACF,CACF;GACA,IAAI,CAAC,MAAM,iBAAiB,MAAM,gBAAgB,WAChD,OAAO,OAAO,aACZ,cACA,SACA;IAAE,MAAM;IAAgB,OAAO;GAAgB,GAC/C,aACF;GACF,OAAO,WACL;IAAE,UAAU;IAAS,uBAAuB,WAAW,OAAO;GAAsB,GACpF,OACA,eACC,MAAM,WACL,QAAQ,YAAY,cAAc,OAAO,WACvC,OAAO,WAAW,MAAM,SAAS,MAAM,QAAQ;IAC7C,aAAa;IACb,YAAY,MAAM,WAAW,MAAM;IACnC,GAAG,WAAW,WAAW,MAAM;IAC/B,0BAA0B,WAAW,OAAO;GAC9C,CAAC,CACH,CACJ;EACF,CAAC;EACD,MAAM,OAAO,WAAW,WAAW,KAAK;GACtC,MAAM,SAAS,OAAO,KAAK,GAAG;GAC9B,MAAM,SAAS,OAAO,QAAQ,YAAY,cAAc,QAAQ,WAC9D,OAAO,aAAa,OAAO;IAAE,aAAa;IAAQ,YAAY,MAAM,WAAW,MAAM;GAAE,CAAC,CAC1F,CAAC,CAAC,KACA,OAAO,YAAY,gBAAgB,kBACjC,OAAO,QAAQ;IAAE,iBAAiB,CAAC;IAAG,mBAAmB,CAAC;GAAE,CAAC,CAC/D,CACF;GACA,OAAO;IACL,WAAW,UAAU,OAAO,eAAe;IAC3C,aAAa,UAAU,OAAO,iBAAiB;GACjD;EACF,CAAC;EACD,QAAQ,OAAO,WAAW,WAAW,OAAO;GAC1C,MAAM,SAAS,OAAO,KAAK,MAAM,GAAG;GACpC,IACE,MAAM,SAAS,SAAS,OACxB,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC,SAAS,MAAM,SAAS,UAChD,IAAI,IAAI,MAAM,SAAS,KAAK,OAAO,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAE7E,OAAO,OAAO,aACZ,gBACA,SACA;IAAE,MAAM;IAAgB,OAAO;GAAW,GAC1C,aACF;GACF,OAAO,OAAO,QAAQ,MAAM,WAAW,OACrC,OAAO,oBAAoB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,KACtC,OAAO,eACL,aACE,gBACA,SACA;IAAE,MAAM;IAAgB,OAAO;GAAU,GACzC,aACF,CACF,CACF,CACF;GACA,MAAM,UAAU,MAAM,WAAW,CAAC;GAClC,MAAM,iBAAiB,OAAO,cAAc,OAAO;GACnD,MAAM,SAAS,OAAO,QAAQ,YAAY,gBAAgB,OAAO,WAC/D,OAAO,gBAAgB,CAAC,GAAG,MAAM,QAAQ,GAAG;IAC1C,aAAa;IACb,YAAY;KAAE,GAAG,UAAU,MAAM,SAAS;KAAG,GAAG,MAAM,WAAW,MAAM;IAAE;IACzE,iBAAiB,cAAc,OAAO;IACtC,UAAU;IACV,GAAG,WAAW,WAAW,MAAM;GACjC,CAAC,CACH;GACA,OAAO,SAAS,YAAY,MAAM,IAAI,KAAK;IACzC,GAAG;IACH,GAAG;IACH,UAAU;GACZ,CAAC;EACH,CAAC;CACH;AACF"}

package/dist/providers/azure/config.d.ts

@@ -0,0 +1,41 @@
+import { StorageError } from "../../core/errors.js";
+import "../../index.js";
+import { Effect, Redacted } from "effect";
+import { ContainerClient, newPipeline } from "@azure/storage-blob";
+export interface AzureConfig {
+  /** Complete container URL; an existing SAS must be wrapped in Redacted. */
+  readonly containerUrl: string | Redacted.Redacted<string>;
+  readonly storeId?: string;
+  readonly credential?: Parameters<typeof newPipeline>[0];
+  readonly requestTimeoutMillis?: number;
+  readonly maxUnknownLengthBytes?: number;
+  readonly leaseId?: Redacted.Redacted<string>;
+  readonly encryption?: {
+    readonly scope: string;
+  } | {
+    readonly key: Redacted.Redacted<string>;
+    readonly keySHA256: string;
+  };
+  readonly checksumAlgorithm?: "None" | "StorageCrc64";
+  readonly profile?: "block-blob";
+}
+export declare const resolveConfig: (input: AzureConfig) => Effect.Effect<{
+  containerUrl: string;
+  storeId: string;
+  requestTimeoutMillis: number;
+  maxUnknownLengthBytes: number;
+  checksumAlgorithm: "None" | "StorageCrc64";
+  leaseId: Redacted.Redacted<string> | undefined;
+  encryption: {
+    scope: string;
+  } | {
+    key: Redacted.Redacted<string>;
+    keySHA256: string;
+  } | undefined;
+}, StorageError, never>;
+export type ResolvedAzureConfig = Effect.Success<ReturnType<typeof resolveConfig>>;
+export interface AzureConnection {
+  readonly client: ContainerClient;
+  readonly config: ResolvedAzureConfig;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/providers/azure/config.js

@@ -0,0 +1,62 @@
+import { HeaderValue } from "../../core/object.js";
+import { storageError } from "../../core/errors.js";
+import { Effect, Redacted, Schema } from "effect";
+import { createHash } from "node:crypto";
+
+// src/providers/azure/config.ts
+const resolveConfig = Effect.fnUntraced(function* (input) {
+	yield* Schema.decodeUnknownEffect(Schema.Struct({
+		containerUrl: Schema.Union([Schema.String, Schema.Redacted(Schema.String)]),
+		storeId: Schema.optional(Schema.NonEmptyString),
+		credential: Schema.optional(Schema.Unknown),
+		requestTimeoutMillis: Schema.optional(Schema.Int.check(Schema.isGreaterThan(0))),
+		maxUnknownLengthBytes: Schema.optional(Schema.Int.check(Schema.isGreaterThan(0))),
+		leaseId: Schema.optional(Schema.Redacted(Schema.NonEmptyString)),
+		encryption: Schema.optional(Schema.Union([Schema.Struct({ scope: HeaderValue.check(Schema.isNonEmpty()) }), Schema.Struct({
+			key: Schema.Redacted(Schema.NonEmptyString),
+			keySHA256: Schema.NonEmptyString
+		})])),
+		checksumAlgorithm: Schema.optional(Schema.Literals(["None", "StorageCrc64"])),
+		profile: Schema.optional(Schema.Literal("block-blob"))
+	}), { onExcessProperty: "error" })(input).pipe(Effect.mapError(() => storageError("make", "azure", {
+		_tag: "InvalidConfiguration",
+		field: "config"
+	})));
+	const rawUrl = Redacted.isRedacted(input.containerUrl) ? Redacted.value(input.containerUrl) : input.containerUrl;
+	const url = URL.parse(rawUrl);
+	if (!url || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash || url.pathname === "/" || url.search && !Redacted.isRedacted(input.containerUrl) || input.encryption && url.protocol !== "https:") return yield* storageError("make", "azure", {
+		_tag: "InvalidConfiguration",
+		field: "containerUrl-or-encryption"
+	});
+	if (input.encryption && "key" in input.encryption) {
+		const encoded = Redacted.value(input.encryption.key);
+		const bytes = Buffer.from(encoded, "base64");
+		if (bytes.length !== 32 || bytes.toString("base64") !== encoded || createHash("sha256").update(bytes).digest("base64") !== input.encryption.keySHA256) return yield* storageError("make", "azure", {
+			_tag: "InvalidConfiguration",
+			field: "encryption.key"
+		});
+	}
+	const publicUrl = `${url.origin}${url.pathname.replace(/\/$/u, "")}`;
+	return {
+		containerUrl: publicUrl,
+		storeId: input.storeId ?? `azure:${createHash("sha256").update(publicUrl).digest("hex")}`,
+		requestTimeoutMillis: input.requestTimeoutMillis ?? 3e4,
+		maxUnknownLengthBytes: input.maxUnknownLengthBytes ?? 16777216,
+		checksumAlgorithm: input.checksumAlgorithm ?? "None",
+		leaseId: input.leaseId,
+		encryption: input.encryption ? { ...input.encryption } : void 0
+	};
+});
+function encryption(config) {
+	return !config.encryption ? {} : "scope" in config.encryption ? { encryptionScope: config.encryption.scope } : { customerProvidedKey: {
+		encryptionAlgorithm: "AES256",
+		encryptionKey: Redacted.value(config.encryption.key),
+		encryptionKeySha256: config.encryption.keySHA256
+	} };
+}
+function lease(config) {
+	return config.leaseId ? { leaseId: Redacted.value(config.leaseId) } : {};
+}
+
+export { encryption, lease, resolveConfig };
+//# sourceMappingURL=config.js.map

package/dist/providers/azure/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","names":[],"sources":["../../../src/providers/azure/config.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { Effect, Redacted, Schema } from \"effect\";\n\nimport type { ContainerClient, newPipeline } from \"@azure/storage-blob\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { HeaderValue } from \"../../core/object.js\";\n\nexport interface AzureConfig {\n  /** Complete container URL; an existing SAS must be wrapped in Redacted. */\n  readonly containerUrl: string | Redacted.Redacted<string>;\n  readonly storeId?: string;\n  readonly credential?: Parameters<typeof newPipeline>[0];\n  readonly requestTimeoutMillis?: number;\n  readonly maxUnknownLengthBytes?: number;\n  readonly leaseId?: Redacted.Redacted<string>;\n  readonly encryption?:\n    | { readonly scope: string }\n    | { readonly key: Redacted.Redacted<string>; readonly keySHA256: string };\n  readonly checksumAlgorithm?: \"None\" | \"StorageCrc64\";\n  readonly profile?: \"block-blob\";\n}\nexport const resolveConfig = Effect.fnUntraced(function* (input: AzureConfig) {\n  yield* Schema.decodeUnknownEffect(\n    Schema.Struct({\n      containerUrl: Schema.Union([Schema.String, Schema.Redacted(Schema.String)]),\n      storeId: Schema.optional(Schema.NonEmptyString),\n      credential: Schema.optional(Schema.Unknown),\n      requestTimeoutMillis: Schema.optional(Schema.Int.check(Schema.isGreaterThan(0))),\n      maxUnknownLengthBytes: Schema.optional(Schema.Int.check(Schema.isGreaterThan(0))),\n      leaseId: Schema.optional(Schema.Redacted(Schema.NonEmptyString)),\n      encryption: Schema.optional(\n        Schema.Union([\n          Schema.Struct({ scope: HeaderValue.check(Schema.isNonEmpty()) }),\n          Schema.Struct({\n            key: Schema.Redacted(Schema.NonEmptyString),\n            keySHA256: Schema.NonEmptyString,\n          }),\n        ]),\n      ),\n      checksumAlgorithm: Schema.optional(Schema.Literals([\"None\", \"StorageCrc64\"])),\n      profile: Schema.optional(Schema.Literal(\"block-blob\")),\n    }),\n    { onExcessProperty: \"error\" },\n  )(input).pipe(\n    Effect.mapError(() =>\n      storageError(\"make\", \"azure\", { _tag: \"InvalidConfiguration\", field: \"config\" }),\n    ),\n  );\n  const rawUrl = Redacted.isRedacted(input.containerUrl)\n    ? Redacted.value(input.containerUrl)\n    : input.containerUrl;\n  const url = URL.parse(rawUrl);\n  if (\n    !url ||\n    ![\"http:\", \"https:\"].includes(url.protocol) ||\n    url.username ||\n    url.password ||\n    url.hash ||\n    url.pathname === \"/\" ||\n    (url.search && !Redacted.isRedacted(input.containerUrl)) ||\n    (input.encryption && url.protocol !== \"https:\")\n  )\n    return yield* storageError(\"make\", \"azure\", {\n      _tag: \"InvalidConfiguration\",\n      field: \"containerUrl-or-encryption\",\n    });\n  if (input.encryption && \"key\" in input.encryption) {\n    const encoded = Redacted.value(input.encryption.key);\n    const bytes = Buffer.from(encoded, \"base64\");\n    if (\n      bytes.length !== 32 ||\n      bytes.toString(\"base64\") !== encoded ||\n      createHash(\"sha256\").update(bytes).digest(\"base64\") !== input.encryption.keySHA256\n    )\n      return yield* storageError(\"make\", \"azure\", {\n        _tag: \"InvalidConfiguration\",\n        field: \"encryption.key\",\n      });\n  }\n  const publicUrl = `${url.origin}${url.pathname.replace(/\\/$/u, \"\")}`;\n  return {\n    containerUrl: publicUrl,\n    storeId: input.storeId ?? `azure:${createHash(\"sha256\").update(publicUrl).digest(\"hex\")}`,\n    requestTimeoutMillis: input.requestTimeoutMillis ?? 30_000,\n    maxUnknownLengthBytes: input.maxUnknownLengthBytes ?? 16 * 1024 * 1024,\n    checksumAlgorithm: input.checksumAlgorithm ?? \"None\",\n    leaseId: input.leaseId,\n    encryption: input.encryption ? { ...input.encryption } : undefined,\n  };\n});\nexport type ResolvedAzureConfig = Effect.Success<ReturnType<typeof resolveConfig>>;\nexport interface AzureConnection {\n  readonly client: ContainerClient;\n  readonly config: ResolvedAzureConfig;\n}\nexport function encryption(config: ResolvedAzureConfig) {\n  return !config.encryption\n    ? {}\n    : \"scope\" in config.encryption\n      ? { encryptionScope: config.encryption.scope }\n      : {\n          customerProvidedKey: {\n            encryptionAlgorithm: \"AES256\" as const,\n            encryptionKey: Redacted.value(config.encryption.key),\n            encryptionKeySha256: config.encryption.keySHA256,\n          },\n        };\n}\nexport function lease(config: ResolvedAzureConfig) {\n  return config.leaseId ? { leaseId: Redacted.value(config.leaseId) } : {};\n}\n"],"mappings":";;;;;;AAuBA,MAAa,gBAAgB,OAAO,WAAW,WAAW,OAAoB;CAC5E,OAAO,OAAO,oBACZ,OAAO,OAAO;EACZ,cAAc,OAAO,MAAM,CAAC,OAAO,QAAQ,OAAO,SAAS,OAAO,MAAM,CAAC,CAAC;EAC1E,SAAS,OAAO,SAAS,OAAO,cAAc;EAC9C,YAAY,OAAO,SAAS,OAAO,OAAO;EAC1C,sBAAsB,OAAO,SAAS,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC,CAAC;EAC/E,uBAAuB,OAAO,SAAS,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC,CAAC;EAChF,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,cAAc,CAAC;EAC/D,YAAY,OAAO,SACjB,OAAO,MAAM,CACX,OAAO,OAAO,EAAE,OAAO,YAAY,MAAM,OAAO,WAAW,CAAC,EAAE,CAAC,GAC/D,OAAO,OAAO;GACZ,KAAK,OAAO,SAAS,OAAO,cAAc;GAC1C,WAAW,OAAO;EACpB,CAAC,CACH,CAAC,CACH;EACA,mBAAmB,OAAO,SAAS,OAAO,SAAS,CAAC,QAAQ,cAAc,CAAC,CAAC;EAC5E,SAAS,OAAO,SAAS,OAAO,QAAQ,YAAY,CAAC;CACvD,CAAC,GACD,EAAE,kBAAkB,QAAQ,CAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,KACP,OAAO,eACL,aAAa,QAAQ,SAAS;EAAE,MAAM;EAAwB,OAAO;CAAS,CAAC,CACjF,CACF;CACA,MAAM,SAAS,SAAS,WAAW,MAAM,YAAY,IACjD,SAAS,MAAM,MAAM,YAAY,IACjC,MAAM;CACV,MAAM,MAAM,IAAI,MAAM,MAAM;CAC5B,IACE,CAAC,OACD,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,SAAS,IAAI,QAAQ,KAC1C,IAAI,YACJ,IAAI,YACJ,IAAI,QACJ,IAAI,aAAa,OAChB,IAAI,UAAU,CAAC,SAAS,WAAW,MAAM,YAAY,KACrD,MAAM,cAAc,IAAI,aAAa,UAEtC,OAAO,OAAO,aAAa,QAAQ,SAAS;EAC1C,MAAM;EACN,OAAO;CACT,CAAC;CACH,IAAI,MAAM,cAAc,SAAS,MAAM,YAAY;EACjD,MAAM,UAAU,SAAS,MAAM,MAAM,WAAW,GAAG;EACnD,MAAM,QAAQ,OAAO,KAAK,SAAS,QAAQ;EAC3C,IACE,MAAM,WAAW,MACjB,MAAM,SAAS,QAAQ,MAAM,WAC7B,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ,MAAM,MAAM,WAAW,WAEzE,OAAO,OAAO,aAAa,QAAQ,SAAS;GAC1C,MAAM;GACN,OAAO;EACT,CAAC;CACL;CACA,MAAM,YAAY,GAAG,IAAI,SAAS,IAAI,SAAS,QAAQ,QAAQ,EAAE;CACjE,OAAO;EACL,cAAc;EACd,SAAS,MAAM,WAAW,SAAS,WAAW,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK;EACtF,sBAAsB,MAAM,wBAAwB;EACpD,uBAAuB,MAAM,yBAAyB;EACtD,mBAAmB,MAAM,qBAAqB;EAC9C,SAAS,MAAM;EACf,YAAY,MAAM,aAAa,EAAE,GAAG,MAAM,WAAW,IAAI;CAC3D;AACF,CAAC;AAMD,SAAgB,WAAW,QAA6B;CACtD,OAAO,CAAC,OAAO,aACX,CAAC,IACD,WAAW,OAAO,aAChB,EAAE,iBAAiB,OAAO,WAAW,MAAM,IAC3C,EACE,qBAAqB;EACnB,qBAAqB;EACrB,eAAe,SAAS,MAAM,OAAO,WAAW,GAAG;EACnD,qBAAqB,OAAO,WAAW;CACzC,EACF;AACR;AACA,SAAgB,MAAM,QAA6B;CACjD,OAAO,OAAO,UAAU,EAAE,SAAS,SAAS,MAAM,OAAO,OAAO,EAAE,IAAI,CAAC;AACzE"}