@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/azure/events.js

@@ -0,0 +1,62 @@
+import { storageError } from "../core/errors.js";
+import { decodeRequest } from "../internal/request-validation.js";
+import { StorageEvent } from "../events.js";
+import { decodeResponse } from "../internal/provider-response.js";
+import { Effect, Redacted, Schema } from "effect";
+
+// src/providers/azure/events.ts
+let AzureEvents;
+(function(_AzureEvents) {
+	_AzureEvents.decode = Effect.fnUntraced(function* (payload, options) {
+		const records = yield* decodeResponse(Schema.Array(Schema.Struct({
+			id: Schema.NonEmptyString,
+			eventType: Schema.NonEmptyString,
+			eventTime: Schema.DateTimeUtcFromString,
+			data: Schema.Struct({
+				url: Schema.String,
+				sequencer: Schema.optional(Schema.String),
+				versionId: Schema.optional(Schema.String)
+			})
+		})).check(Schema.isMaxLength(1e3)), payload, "decodeEvent", "azure");
+		const base = URL.parse(options.containerUrl);
+		if (!base || base.search || base.hash) return yield* storageError("decodeEvent", "azure", {
+			_tag: "InvalidConfiguration",
+			field: "containerUrl"
+		});
+		return yield* Effect.forEach(records, (record) => Effect.gen(function* () {
+			const url = URL.parse(record.data.url);
+			const prefix = `${base.pathname.replace(/\/$/u, "")}/`;
+			if (!url || url.origin !== base.origin || !url.pathname.startsWith(prefix) || url.username || url.password) return yield* storageError("decodeEvent", "azure", {
+				_tag: "InvalidInput",
+				field: "namespace"
+			});
+			const key = yield* Effect.try({
+				try: () => decodeURIComponent(url.pathname.slice(prefix.length)),
+				catch: () => storageError("decodeEvent", "azure", {
+					_tag: "InvalidInput",
+					field: "key"
+				})
+			});
+			return yield* decodeRequest(StorageEvent, {
+				provider: "azure",
+				kind: record.eventType.endsWith("BlobCreated") ? "object-created" : record.eventType.endsWith("BlobDeleted") ? "object-deleted" : "other",
+				ref: {
+					storeId: options.storeId,
+					key,
+					...record.data.versionId ? { version: {
+						_tag: "AzureVersion",
+						id: record.data.versionId
+					} } : {}
+				},
+				occurredAt: record.eventTime,
+				id: record.id,
+				sequencer: record.data.sequencer,
+				nativeType: record.eventType,
+				native: Redacted.make(payload)
+			}, "decodeEvent", "azure");
+		}));
+	});
+})(AzureEvents || (AzureEvents = {}));
+
+export { AzureEvents };
+//# sourceMappingURL=events.js.map

package/dist/azure/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","names":[],"sources":["../../src/providers/azure/events.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeResponse } from \"../../internal/provider-response.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { StorageEvent } from \"../../lifecycle/events.js\";\n\nexport namespace AzureEvents {\n  export const decode = Effect.fnUntraced(function* (\n    payload: unknown,\n    options: { readonly containerUrl: string; readonly storeId: string },\n  ) {\n    const records = yield* decodeResponse(\n      Schema.Array(\n        Schema.Struct({\n          id: Schema.NonEmptyString,\n          eventType: Schema.NonEmptyString,\n          eventTime: Schema.DateTimeUtcFromString,\n          data: Schema.Struct({\n            url: Schema.String,\n            sequencer: Schema.optional(Schema.String),\n            versionId: Schema.optional(Schema.String),\n          }),\n        }),\n      ).check(Schema.isMaxLength(1000)),\n      payload,\n      \"decodeEvent\",\n      \"azure\",\n    );\n    const base = URL.parse(options.containerUrl);\n    if (!base || base.search || base.hash)\n      return yield* storageError(\"decodeEvent\", \"azure\", {\n        _tag: \"InvalidConfiguration\",\n        field: \"containerUrl\",\n      });\n    return yield* Effect.forEach(records, (record) =>\n      Effect.gen(function* () {\n        const url = URL.parse(record.data.url);\n        const prefix = `${base.pathname.replace(/\\/$/u, \"\")}/`;\n        if (\n          !url ||\n          url.origin !== base.origin ||\n          !url.pathname.startsWith(prefix) ||\n          url.username ||\n          url.password\n        )\n          return yield* storageError(\"decodeEvent\", \"azure\", {\n            _tag: \"InvalidInput\",\n            field: \"namespace\",\n          });\n        const key = yield* Effect.try({\n          try: () => decodeURIComponent(url.pathname.slice(prefix.length)),\n          catch: () => storageError(\"decodeEvent\", \"azure\", { _tag: \"InvalidInput\", field: \"key\" }),\n        });\n        return yield* decodeRequest(\n          StorageEvent,\n          {\n            provider: \"azure\",\n            kind: record.eventType.endsWith(\"BlobCreated\")\n              ? \"object-created\"\n              : record.eventType.endsWith(\"BlobDeleted\")\n                ? \"object-deleted\"\n                : \"other\",\n            ref: {\n              storeId: options.storeId,\n              key,\n              ...(record.data.versionId\n                ? { version: { _tag: \"AzureVersion\", id: record.data.versionId } }\n                : {}),\n            },\n            occurredAt: record.eventTime,\n            id: record.id,\n            sequencer: record.data.sequencer,\n            nativeType: record.eventType,\n            native: Redacted.make(payload),\n          },\n          \"decodeEvent\",\n          \"azure\",\n        );\n      }),\n    );\n  });\n}\n"],"mappings":";;;;;;;AAOO,IAAU;CAAV;uBACiB,OAAO,WAAW,WACtC,SACA,SACA;EACA,MAAM,UAAU,OAAO,eACrB,OAAO,MACL,OAAO,OAAO;GACZ,IAAI,OAAO;GACX,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,MAAM,OAAO,OAAO;IAClB,KAAK,OAAO;IACZ,WAAW,OAAO,SAAS,OAAO,MAAM;IACxC,WAAW,OAAO,SAAS,OAAO,MAAM;GAC1C,CAAC;EACH,CAAC,CACH,CAAC,CAAC,MAAM,OAAO,YAAY,GAAI,CAAC,GAChC,SACA,eACA,OACF;EACA,MAAM,OAAO,IAAI,MAAM,QAAQ,YAAY;EAC3C,IAAI,CAAC,QAAQ,KAAK,UAAU,KAAK,MAC/B,OAAO,OAAO,aAAa,eAAe,SAAS;GACjD,MAAM;GACN,OAAO;EACT,CAAC;EACH,OAAO,OAAO,OAAO,QAAQ,UAAU,WACrC,OAAO,IAAI,aAAa;GACtB,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK,GAAG;GACrC,MAAM,SAAS,GAAG,KAAK,SAAS,QAAQ,QAAQ,EAAE,EAAE;GACpD,IACE,CAAC,OACD,IAAI,WAAW,KAAK,UACpB,CAAC,IAAI,SAAS,WAAW,MAAM,KAC/B,IAAI,YACJ,IAAI,UAEJ,OAAO,OAAO,aAAa,eAAe,SAAS;IACjD,MAAM;IACN,OAAO;GACT,CAAC;GACH,MAAM,MAAM,OAAO,OAAO,IAAI;IAC5B,WAAW,mBAAmB,IAAI,SAAS,MAAM,OAAO,MAAM,CAAC;IAC/D,aAAa,aAAa,eAAe,SAAS;KAAE,MAAM;KAAgB,OAAO;IAAM,CAAC;GAC1F,CAAC;GACD,OAAO,OAAO,cACZ,cACA;IACE,UAAU;IACV,MAAM,OAAO,UAAU,SAAS,aAAa,IACzC,mBACA,OAAO,UAAU,SAAS,aAAa,IACrC,mBACA;IACN,KAAK;KACH,SAAS,QAAQ;KACjB;KACA,GAAI,OAAO,KAAK,YACZ,EAAE,SAAS;MAAE,MAAM;MAAgB,IAAI,OAAO,KAAK;KAAU,EAAE,IAC/D,CAAC;IACP;IACA,YAAY,OAAO;IACnB,IAAI,OAAO;IACX,WAAW,OAAO,KAAK;IACvB,YAAY,OAAO;IACnB,QAAQ,SAAS,KAAK,OAAO;GAC/B,GACA,eACA,OACF;EACF,CAAC,CACH;CACF,CAAC;EACF,kCAAD"}

package/dist/azure/governance.d.ts

@@ -0,0 +1,139 @@
+import { ObjectRef } from "../core/object.js";
+import { StorageError } from "../core/errors.js";
+import "../index.js";
+import { AzureStorage, AzureStorageService } from "../azure.js";
+import { Context, Effect, Layer } from "effect";
+declare const make: (storage: AzureStorageService) => {
+  inspect: (input: {
+    readonly ref: ObjectRef;
+  }) => Effect.Effect<{
+    legalHold: boolean | undefined;
+    immutabilityMode: import("@azure/storage-blob").BlobImmutabilityPolicyMode | undefined;
+    immutabilityExpiresOn: Date | undefined;
+    encryptionScope: string | undefined;
+    serverEncrypted: boolean | undefined;
+  }, StorageError, never>;
+  setLegalHold: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly enabled: boolean;
+    readonly releaseIntent?: "release-object-hold" | undefined;
+  }) => Effect.Effect<undefined, StorageError, never>;
+  setImmutability: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly expiresOn: Date;
+    readonly mode: "Locked" | "Unlocked";
+    readonly intent: "change-object-immutability";
+  }) => Effect.Effect<void, StorageError, never>;
+};
+declare const AzureProtection_base: Context.ServiceClass<AzureProtection, "@effect-kit/storage/azure/AzureProtection", {
+  inspect: (input: {
+    readonly ref: ObjectRef;
+  }) => Effect.Effect<{
+    legalHold: boolean | undefined;
+    immutabilityMode: import("@azure/storage-blob").BlobImmutabilityPolicyMode | undefined;
+    immutabilityExpiresOn: Date | undefined;
+    encryptionScope: string | undefined;
+    serverEncrypted: boolean | undefined;
+  }, StorageError, never>;
+  setLegalHold: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly enabled: boolean;
+    readonly releaseIntent?: "release-object-hold" | undefined;
+  }) => Effect.Effect<undefined, StorageError, never>;
+  setImmutability: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly expiresOn: Date;
+    readonly mode: "Locked" | "Unlocked";
+    readonly intent: "change-object-immutability";
+  }) => Effect.Effect<void, StorageError, never>;
+}>;
+export declare class AzureProtection extends AzureProtection_base {
+  static readonly make: typeof make;
+  static readonly layer: Layer.Layer<AzureProtection, never, AzureStorage>;
+}
+export {};
+//# sourceMappingURL=governance.d.ts.map

package/dist/azure/governance.js

@@ -0,0 +1,59 @@
+import { ObjectRef } from "../core/object.js";
+import { storageError } from "../core/errors.js";
+import { decodeRequest } from "../internal/request-validation.js";
+import { target } from "../providers/azure/mapping.js";
+import { request } from "../providers/azure/transport.js";
+import { AzureStorage } from "../azure.js";
+import { VersionRef } from "../lifecycle.js";
+import { Context, Effect, Layer, Schema } from "effect";
+
+// src/providers/azure/governance.ts
+const Hold = Schema.Struct({
+	ref: VersionRef,
+	enabled: Schema.Boolean,
+	releaseIntent: Schema.optional(Schema.Literal("release-object-hold"))
+});
+const Policy = Schema.Struct({
+	ref: VersionRef,
+	expiresOn: Schema.Date,
+	mode: Schema.Literals(["Locked", "Unlocked"]),
+	intent: Schema.Literal("change-object-immutability")
+});
+const make = (storage) => ({
+	inspect: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Schema.Struct({ ref: ObjectRef }), input, "inspectProtection", "azure");
+		const address = yield* target(storage, { ref: value.ref }, "inspectProtection");
+		const output = yield* request(storage, "inspectProtection", false, (signal) => address.client.getProperties({ abortSignal: signal }));
+		return {
+			legalHold: output.legalHold,
+			immutabilityMode: output.immutabilityPolicyMode,
+			immutabilityExpiresOn: output.immutabilityPolicyExpiresOn,
+			encryptionScope: output.encryptionScope,
+			serverEncrypted: output.isServerEncrypted
+		};
+	}),
+	setLegalHold: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Hold, input, "setLegalHold", "azure", true);
+		if (!value.enabled && !value.releaseIntent) return yield* storageError("setLegalHold", "azure", {
+			_tag: "InvalidInput",
+			field: "releaseIntent"
+		}, "not-started");
+		const address = yield* target(storage, { ref: value.ref }, "setLegalHold");
+		yield* request(storage, "setLegalHold", true, (signal) => address.client.setLegalHold(value.enabled, { abortSignal: signal }));
+	}),
+	setImmutability: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Policy, input, "setImmutability", "azure", true);
+		const address = yield* target(storage, { ref: value.ref }, "setImmutability");
+		yield* request(storage, "setImmutability", true, (signal) => address.client.setImmutabilityPolicy({
+			expiriesOn: value.expiresOn,
+			policyMode: value.mode
+		}, { abortSignal: signal }));
+	})
+});
+var AzureProtection = class AzureProtection extends Context.Service()("@effect-kit/storage/azure/AzureProtection") {
+	static make = make;
+	static layer = Layer.effect(AzureProtection, Effect.map(AzureStorage, make));
+};
+
+export { AzureProtection };
+//# sourceMappingURL=governance.js.map

package/dist/azure/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","names":[],"sources":["../../src/providers/azure/governance.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { ObjectRef } from \"../../core/object.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { VersionRef } from \"../../lifecycle/index.js\";\nimport { AzureStorage } from \"./index.js\";\nimport type { AzureStorageService } from \"./index.js\";\nimport { target } from \"./mapping.js\";\nimport { request } from \"./transport.js\";\n\nconst Hold = Schema.Struct({\n  ref: VersionRef,\n  enabled: Schema.Boolean,\n  releaseIntent: Schema.optional(Schema.Literal(\"release-object-hold\")),\n});\nconst Policy = Schema.Struct({\n  ref: VersionRef,\n  expiresOn: Schema.Date,\n  mode: Schema.Literals([\"Locked\", \"Unlocked\"]),\n  intent: Schema.Literal(\"change-object-immutability\"),\n});\nconst make = (storage: AzureStorageService) => ({\n  inspect: Effect.fnUntraced(function* (input: { readonly ref: ObjectRef }) {\n    const value = yield* decodeRequest(\n      Schema.Struct({ ref: ObjectRef }),\n      input,\n      \"inspectProtection\",\n      \"azure\",\n    );\n    const address = yield* target(storage, { ref: value.ref }, \"inspectProtection\");\n    const output = yield* request(storage, \"inspectProtection\", false, (signal) =>\n      address.client.getProperties({ abortSignal: signal }),\n    );\n    return {\n      legalHold: output.legalHold,\n      immutabilityMode: output.immutabilityPolicyMode,\n      immutabilityExpiresOn: output.immutabilityPolicyExpiresOn,\n      encryptionScope: output.encryptionScope,\n      serverEncrypted: output.isServerEncrypted,\n    };\n  }),\n  setLegalHold: Effect.fnUntraced(function* (input: typeof Hold.Type) {\n    const value = yield* decodeRequest(Hold, input, \"setLegalHold\", \"azure\", true);\n    if (!value.enabled && !value.releaseIntent)\n      return yield* storageError(\n        \"setLegalHold\",\n        \"azure\",\n        { _tag: \"InvalidInput\", field: \"releaseIntent\" },\n        \"not-started\",\n      );\n    const address = yield* target(storage, { ref: value.ref }, \"setLegalHold\");\n    yield* request(storage, \"setLegalHold\", true, (signal) =>\n      address.client.setLegalHold(value.enabled, { abortSignal: signal }),\n    );\n  }),\n  setImmutability: Effect.fnUntraced(function* (input: typeof Policy.Type) {\n    const value = yield* decodeRequest(Policy, input, \"setImmutability\", \"azure\", true);\n    const address = yield* target(storage, { ref: value.ref }, \"setImmutability\");\n    yield* request(storage, \"setImmutability\", true, (signal) =>\n      address.client.setImmutabilityPolicy(\n        { expiriesOn: value.expiresOn, policyMode: value.mode },\n        { abortSignal: signal },\n      ),\n    );\n  }),\n});\nexport class AzureProtection extends Context.Service<AzureProtection, ReturnType<typeof make>>()(\n  \"@effect-kit/storage/azure/AzureProtection\",\n) {\n  static readonly make = make;\n  static readonly layer = Layer.effect(AzureProtection, Effect.map(AzureStorage, make));\n}\n"],"mappings":";;;;;;;;;;AAWA,MAAM,OAAO,OAAO,OAAO;CACzB,KAAK;CACL,SAAS,OAAO;CAChB,eAAe,OAAO,SAAS,OAAO,QAAQ,qBAAqB,CAAC;AACtE,CAAC;AACD,MAAM,SAAS,OAAO,OAAO;CAC3B,KAAK;CACL,WAAW,OAAO;CAClB,MAAM,OAAO,SAAS,CAAC,UAAU,UAAU,CAAC;CAC5C,QAAQ,OAAO,QAAQ,4BAA4B;AACrD,CAAC;AACD,MAAM,QAAQ,aAAkC;CAC9C,SAAS,OAAO,WAAW,WAAW,OAAoC;EACxE,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO,EAAE,KAAK,UAAU,CAAC,GAChC,OACA,qBACA,OACF;EACA,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,mBAAmB;EAC9E,MAAM,SAAS,OAAO,QAAQ,SAAS,qBAAqB,QAAQ,WAClE,QAAQ,OAAO,cAAc,EAAE,aAAa,OAAO,CAAC,CACtD;EACA,OAAO;GACL,WAAW,OAAO;GAClB,kBAAkB,OAAO;GACzB,uBAAuB,OAAO;GAC9B,iBAAiB,OAAO;GACxB,iBAAiB,OAAO;EAC1B;CACF,CAAC;CACD,cAAc,OAAO,WAAW,WAAW,OAAyB;EAClE,MAAM,QAAQ,OAAO,cAAc,MAAM,OAAO,gBAAgB,SAAS,IAAI;EAC7E,IAAI,CAAC,MAAM,WAAW,CAAC,MAAM,eAC3B,OAAO,OAAO,aACZ,gBACA,SACA;GAAE,MAAM;GAAgB,OAAO;EAAgB,GAC/C,aACF;EACF,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,cAAc;EACzE,OAAO,QAAQ,SAAS,gBAAgB,OAAO,WAC7C,QAAQ,OAAO,aAAa,MAAM,SAAS,EAAE,aAAa,OAAO,CAAC,CACpE;CACF,CAAC;CACD,iBAAiB,OAAO,WAAW,WAAW,OAA2B;EACvE,MAAM,QAAQ,OAAO,cAAc,QAAQ,OAAO,mBAAmB,SAAS,IAAI;EAClF,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,iBAAiB;EAC5E,OAAO,QAAQ,SAAS,mBAAmB,OAAO,WAChD,QAAQ,OAAO,sBACb;GAAE,YAAY,MAAM;GAAW,YAAY,MAAM;EAAK,GACtD,EAAE,aAAa,OAAO,CACxB,CACF;CACF,CAAC;AACH;AACA,IAAa,kBAAb,MAAa,wBAAwB,QAAQ,QAAkD,CAAC,CAC9F,2CACF,CAAC,CAAC;CACA,OAAgB,OAAO;CACvB,OAAgB,QAAQ,MAAM,OAAO,iBAAiB,OAAO,IAAI,cAAc,IAAI,CAAC;AACtF"}

package/dist/azure/identity.d.ts

@@ -0,0 +1,4 @@
+import { DefaultAzureCredential, DefaultAzureCredentialOptions } from "@azure/identity";
+/** Optional Azure identity peer is loaded only by this entry point. */
+export declare const defaultCredential: (options?: DefaultAzureCredentialOptions) => DefaultAzureCredential;
+//# sourceMappingURL=identity.d.ts.map

package/dist/azure/identity.js

@@ -0,0 +1,8 @@
+import { DefaultAzureCredential } from "@azure/identity";
+
+// src/providers/azure/identity.ts
+/** Optional Azure identity peer is loaded only by this entry point. */
+const defaultCredential = (options) => new DefaultAzureCredential(options);
+
+export { defaultCredential };
+//# sourceMappingURL=identity.js.map

package/dist/azure/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","names":[],"sources":["../../src/providers/azure/identity.ts"],"sourcesContent":["import { DefaultAzureCredential } from \"@azure/identity\";\nimport type { DefaultAzureCredentialOptions } from \"@azure/identity\";\n\n/** Optional Azure identity peer is loaded only by this entry point. */\nexport const defaultCredential = (options?: DefaultAzureCredentialOptions) =>\n  new DefaultAzureCredential(options);\n"],"mappings":";;;;AAIA,MAAa,qBAAqB,YAChC,IAAI,uBAAuB,OAAO"}

package/dist/azure/lifecycle.d.ts

@@ -0,0 +1,21 @@
+import { MetadataService, StorageMetadata, StorageTags, StorageVersions, TagsService, VersionsService } from "../lifecycle.js";
+import { AzureStorage, AzureStorageService } from "../azure.js";
+import { AzureProperties } from "../providers/azure/properties.js";
+import { Context, Layer } from "effect";
+declare const AzureVersions_base: Context.ServiceClass<AzureVersions, "@effect-kit/storage/azure/AzureVersions", VersionsService>;
+export declare class AzureVersions extends AzureVersions_base {
+  static make(storage: AzureStorageService): VersionsService;
+  static readonly layer: Layer.Layer<AzureVersions | StorageVersions, never, AzureStorage>;
+}
+declare const AzureMetadata_base: Context.ServiceClass<AzureMetadata, "@effect-kit/storage/azure/AzureMetadata", MetadataService>;
+export declare class AzureMetadata extends AzureMetadata_base {
+  static make(storage: AzureStorageService): MetadataService;
+  static readonly layer: Layer.Layer<AzureMetadata | StorageMetadata, never, AzureStorage>;
+}
+declare const AzureTags_base: Context.ServiceClass<AzureTags, "@effect-kit/storage/azure/AzureTags", TagsService>;
+export declare class AzureTags extends AzureTags_base {
+  static make(storage: AzureStorageService): TagsService;
+  static readonly layer: Layer.Layer<AzureTags | StorageTags, never, AzureStorage>;
+}
+export { AzureProperties };
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/azure/lifecycle.js

@@ -0,0 +1,193 @@
+import { storageError } from "../core/errors.js";
+import { decodeRequest } from "../internal/request-validation.js";
+import { decodeCursor, encodeCursor } from "../internal/listing-cursor.js";
+import { encryption, lease } from "../providers/azure/config.js";
+import { condition, metadata, target, writeMetadata } from "../providers/azure/mapping.js";
+import { request } from "../providers/azure/transport.js";
+import { AzureStorage } from "../azure.js";
+import { MetadataMerge, MetadataReplace, RestoreVersion, SetTags, StorageMetadata, StorageTags, StorageVersions, TagTarget, VersionQuery, VersionRef } from "../lifecycle.js";
+import { mergeHeaders, replaceHeaders } from "../lifecycle/metadata.js";
+import { AzureProperties } from "../providers/azure/properties.js";
+import { Context, Effect, Layer, Schema } from "effect";
+
+// src/providers/azure/lifecycle.ts
+var AzureVersions = class AzureVersions extends Context.Service()("@effect-kit/storage/azure/AzureVersions") {
+	static make(storage) {
+		return StorageVersions.make({
+			listPage: Effect.fnUntraced(function* (input = {}) {
+				const value = yield* decodeRequest(VersionQuery, input, "listVersions", "azure");
+				const identity = JSON.stringify([
+					"versions",
+					value.prefix,
+					value.limit,
+					value.deleted
+				]);
+				const token = yield* decodeCursor("azure", value.cursor, storage.storeId, identity, "listVersions");
+				const page = yield* request(storage, "listVersions", false, (signal) => storage.client.listBlobsFlat({
+					...value.prefix ? { prefix: value.prefix } : {},
+					includeVersions: true,
+					includeSnapshots: true,
+					includeDeleted: value.deleted ?? false,
+					abortSignal: signal
+				}).byPage({
+					...token ? { continuationToken: token } : {},
+					maxPageSize: value.limit ?? 1e3
+				}).next());
+				const entries = [];
+				for (const blob of page.value?.segment.blobItems ?? []) {
+					const version = blob.snapshot ? {
+						_tag: "AzureSnapshot",
+						id: blob.snapshot
+					} : blob.versionId ? {
+						_tag: "AzureVersion",
+						id: blob.versionId
+					} : void 0;
+					if (!version) continue;
+					entries.push({
+						_tag: "Version",
+						deleted: blob.deleted,
+						metadata: metadata(storage, blob.name, {
+							...blob.properties,
+							metadata: blob.metadata
+						}, {
+							storeId: storage.storeId,
+							key: blob.name,
+							version
+						}),
+						...blob.isCurrentVersion !== void 0 ? { isLatest: blob.isCurrentVersion } : {}
+					});
+				}
+				const next = page.value?.continuationToken;
+				return {
+					entries,
+					...next ? { cursor: encodeCursor(storage.storeId, identity, next) } : {}
+				};
+			}),
+			deleteVersion: Effect.fnUntraced(function* (input) {
+				const { ref } = yield* decodeRequest(Schema.Struct({ ref: VersionRef }), input, "deleteVersion", "azure", true);
+				const address = yield* target(storage, { ref }, "deleteVersion");
+				yield* request(storage, "deleteVersion", true, (signal) => address.client.delete({
+					abortSignal: signal,
+					conditions: lease(storage.config)
+				}));
+			}),
+			removeDeleteMarker: () => Effect.fail(storageError("removeDeleteMarker", "azure", {
+				_tag: "Unsupported",
+				capability: "s3-delete-markers"
+			}, "not-started")),
+			restore: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(RestoreVersion, input, "restoreVersion", "azure", true);
+				const source = yield* target(storage, { ref: value.source }, "restoreVersion");
+				const destination = yield* target(storage, { key: value.destinationKey }, "restoreVersion");
+				const output = yield* request(storage, "restoreVersion", true, (signal) => destination.client.syncCopyFromURL(source.client.url, {
+					abortSignal: signal,
+					conditions: {
+						...condition(value.condition),
+						...lease(storage.config)
+					}
+				}));
+				if (!output.etag) return yield* storageError("restoreVersion", "azure", {
+					_tag: "ProviderFailure",
+					code: "MissingCopyReceipt"
+				}, "unknown");
+				return metadata(storage, value.destinationKey, output);
+			})
+		});
+	}
+	static layer = Layer.effectContext(Effect.map(AzureStorage, (storage) => {
+		const service = AzureVersions.make(storage);
+		return Context.make(AzureVersions, service).pipe(Context.add(StorageVersions, service));
+	}));
+};
+var AzureMetadata = class AzureMetadata extends Context.Service()("@effect-kit/storage/azure/AzureMetadata") {
+	static make(storage) {
+		const update = Effect.fnUntraced(function* (input, patch) {
+			const address = yield* target(storage, { ref: input.ref }, "updateMetadata");
+			const proposed = patch ?? input.headers;
+			if (input.ref.version || !input.condition || input.condition._tag !== "IfMatch" || [
+				proposed.contentType,
+				proposed.contentEncoding,
+				proposed.contentLanguage,
+				proposed.contentDisposition,
+				proposed.cacheControl
+			].some((field) => field !== void 0)) return yield* storageError("updateMetadata", "azure", {
+				_tag: "Unsupported",
+				capability: "current-if-match-custom-metadata-only"
+			}, "not-started");
+			const conditions = {
+				ifMatch: input.condition.etag,
+				...lease(storage.config)
+			};
+			const before = yield* request(storage, "updateMetadata.head", false, (signal) => address.client.getProperties({
+				abortSignal: signal,
+				conditions,
+				...encryption(storage.config)
+			}));
+			const previous = metadata(storage, input.ref.key, before);
+			const headers = patch ? mergeHeaders(previous, patch) : replaceHeaders(previous, input.headers);
+			const native = yield* writeMetadata(headers);
+			const output = yield* request(storage, "updateMetadata", true, (signal) => address.client.setMetadata(native, {
+				abortSignal: signal,
+				conditions,
+				...encryption(storage.config)
+			}));
+			if (!output.etag) return yield* storageError("updateMetadata", "azure", {
+				_tag: "ProviderFailure",
+				code: "MissingMetadataReceipt"
+			}, "unknown");
+			return {
+				...previous,
+				...metadata(storage, input.ref.key, {
+					...before,
+					versionId: void 0,
+					...output,
+					metadata: native
+				})
+			};
+		});
+		return {
+			replace: (input) => decodeRequest(MetadataReplace, input, "updateMetadata", "azure", true).pipe(Effect.flatMap((value) => update(value))),
+			merge: (input) => decodeRequest(MetadataMerge, input, "updateMetadata", "azure", true).pipe(Effect.flatMap((value) => update({
+				ref: value.ref,
+				headers: {},
+				condition: value.condition
+			}, value.patch)))
+		};
+	}
+	static layer = Layer.effectContext(Effect.map(AzureStorage, (storage) => {
+		const service = AzureMetadata.make(storage);
+		return Context.make(AzureMetadata, service).pipe(Context.add(StorageMetadata, service));
+	}));
+};
+var AzureTags = class AzureTags extends Context.Service()("@effect-kit/storage/azure/AzureTags") {
+	static make(storage) {
+		const set = Effect.fnUntraced(function* (input) {
+			const value = yield* decodeRequest(SetTags, input, "setTags", "azure", true);
+			if (Object.keys(value.tags).length > 10 || Object.entries(value.tags).some(([key, tagValue]) => !/^[A-Za-z0-9 +\-.:=_/]{1,128}$/u.test(key) || !/^[A-Za-z0-9 +\-.:=_/]{0,256}$/u.test(tagValue))) return yield* storageError("setTags", "azure", {
+				_tag: "InvalidInput",
+				field: "tags"
+			}, "not-started");
+			const address = yield* target(storage, { ref: value.ref }, "setTags");
+			yield* request(storage, "setTags", true, (signal) => address.client.setTags({ ...value.tags }, { abortSignal: signal }));
+		});
+		return {
+			set,
+			delete: (input) => decodeRequest(TagTarget, input, "deleteTags", "azure", true).pipe(Effect.flatMap((value) => set({
+				...value,
+				tags: {}
+			}))),
+			get: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(TagTarget, input, "getTags", "azure");
+				const address = yield* target(storage, { ref: value.ref }, "getTags");
+				return (yield* request(storage, "getTags", false, (signal) => address.client.getTags({ abortSignal: signal }))).tags;
+			})
+		};
+	}
+	static layer = Layer.effectContext(Effect.map(AzureStorage, (storage) => {
+		const service = AzureTags.make(storage);
+		return Context.make(AzureTags, service).pipe(Context.add(StorageTags, service));
+	}));
+};
+
+export { AzureMetadata, AzureProperties, AzureTags, AzureVersions };
+//# sourceMappingURL=lifecycle.js.map

package/dist/azure/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","names":[],"sources":["../../src/providers/azure/lifecycle.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeCursor, encodeCursor } from \"../../internal/listing-cursor.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport {\n  MetadataMerge,\n  MetadataReplace,\n  RestoreVersion,\n  SetTags,\n  StorageMetadata,\n  StorageTags,\n  StorageVersions,\n  TagTarget,\n  VersionQuery,\n  VersionRef,\n} from \"../../lifecycle/index.js\";\nimport type {\n  MetadataService,\n  TagsService,\n  VersionEntry,\n  VersionsService,\n} from \"../../lifecycle/index.js\";\nimport { mergeHeaders, replaceHeaders } from \"../../lifecycle/metadata.js\";\nimport { encryption, lease } from \"./config.js\";\nimport { AzureStorage } from \"./index.js\";\nimport type { AzureStorageService } from \"./index.js\";\nimport { condition, metadata, target, writeMetadata } from \"./mapping.js\";\nimport { request } from \"./transport.js\";\n\nexport class AzureVersions extends Context.Service<AzureVersions, VersionsService>()(\n  \"@effect-kit/storage/azure/AzureVersions\",\n) {\n  static make(storage: AzureStorageService): VersionsService {\n    return StorageVersions.make({\n      listPage: Effect.fnUntraced(function* (input = {}) {\n        const value = yield* decodeRequest(VersionQuery, input, \"listVersions\", \"azure\");\n        const identity = JSON.stringify([\"versions\", value.prefix, value.limit, value.deleted]);\n        const token = yield* decodeCursor(\n          \"azure\",\n          value.cursor,\n          storage.storeId,\n          identity,\n          \"listVersions\",\n        );\n        const page = yield* request(storage, \"listVersions\", false, (signal) =>\n          storage.client\n            .listBlobsFlat({\n              ...(value.prefix ? { prefix: value.prefix } : {}),\n              includeVersions: true,\n              includeSnapshots: true,\n              includeDeleted: value.deleted ?? false,\n              abortSignal: signal,\n            })\n            .byPage({\n              ...(token ? { continuationToken: token } : {}),\n              maxPageSize: value.limit ?? 1000,\n            })\n            .next(),\n        );\n        const entries: VersionEntry[] = [];\n        for (const blob of page.value?.segment.blobItems ?? []) {\n          const version = blob.snapshot\n            ? { _tag: \"AzureSnapshot\" as const, id: blob.snapshot }\n            : blob.versionId\n              ? { _tag: \"AzureVersion\" as const, id: blob.versionId }\n              : undefined;\n          if (!version) continue;\n          entries.push({\n            _tag: \"Version\",\n            deleted: blob.deleted,\n            metadata: metadata(\n              storage,\n              blob.name,\n              { ...blob.properties, metadata: blob.metadata },\n              { storeId: storage.storeId, key: blob.name, version },\n            ),\n            ...(blob.isCurrentVersion !== undefined ? { isLatest: blob.isCurrentVersion } : {}),\n          });\n        }\n        const next = page.value?.continuationToken;\n        return {\n          entries,\n          ...(next ? { cursor: encodeCursor(storage.storeId, identity, next) } : {}),\n        };\n      }),\n      deleteVersion: Effect.fnUntraced(function* (input) {\n        const { ref } = yield* decodeRequest(\n          Schema.Struct({ ref: VersionRef }),\n          input,\n          \"deleteVersion\",\n          \"azure\",\n          true,\n        );\n        const address = yield* target(storage, { ref }, \"deleteVersion\");\n        yield* request(storage, \"deleteVersion\", true, (signal) =>\n          address.client.delete({ abortSignal: signal, conditions: lease(storage.config) }),\n        );\n      }),\n      removeDeleteMarker: () =>\n        Effect.fail(\n          storageError(\n            \"removeDeleteMarker\",\n            \"azure\",\n            { _tag: \"Unsupported\", capability: \"s3-delete-markers\" },\n            \"not-started\",\n          ),\n        ),\n      restore: Effect.fnUntraced(function* (input) {\n        const value = yield* decodeRequest(RestoreVersion, input, \"restoreVersion\", \"azure\", true);\n        const source = yield* target(storage, { ref: value.source }, \"restoreVersion\");\n        const destination = yield* target(storage, { key: value.destinationKey }, \"restoreVersion\");\n        const output = yield* request(storage, \"restoreVersion\", true, (signal) =>\n          destination.client.syncCopyFromURL(source.client.url, {\n            abortSignal: signal,\n            conditions: { ...condition(value.condition), ...lease(storage.config) },\n          }),\n        );\n        if (!output.etag)\n          return yield* storageError(\n            \"restoreVersion\",\n            \"azure\",\n            { _tag: \"ProviderFailure\", code: \"MissingCopyReceipt\" },\n            \"unknown\",\n          );\n        return metadata(storage, value.destinationKey, output);\n      }),\n    });\n  }\n  static readonly layer = Layer.effectContext(\n    Effect.map(AzureStorage, (storage) => {\n      const service = AzureVersions.make(storage);\n      return Context.make(AzureVersions, service).pipe(Context.add(StorageVersions, service));\n    }),\n  );\n}\nexport class AzureMetadata extends Context.Service<AzureMetadata, MetadataService>()(\n  \"@effect-kit/storage/azure/AzureMetadata\",\n) {\n  static make(storage: AzureStorageService): MetadataService {\n    const update = Effect.fnUntraced(function* (\n      input: typeof MetadataReplace.Type,\n      patch?: (typeof MetadataMerge.Type)[\"patch\"],\n    ) {\n      const address = yield* target(storage, { ref: input.ref }, \"updateMetadata\");\n      const proposed = patch ?? input.headers;\n      if (\n        input.ref.version ||\n        !input.condition ||\n        input.condition._tag !== \"IfMatch\" ||\n        [\n          proposed.contentType,\n          proposed.contentEncoding,\n          proposed.contentLanguage,\n          proposed.contentDisposition,\n          proposed.cacheControl,\n        ].some((field) => field !== undefined)\n      )\n        return yield* storageError(\n          \"updateMetadata\",\n          \"azure\",\n          { _tag: \"Unsupported\", capability: \"current-if-match-custom-metadata-only\" },\n          \"not-started\",\n        );\n      const conditions = { ifMatch: input.condition.etag, ...lease(storage.config) };\n      const before = yield* request(storage, \"updateMetadata.head\", false, (signal) =>\n        address.client.getProperties({\n          abortSignal: signal,\n          conditions,\n          ...encryption(storage.config),\n        }),\n      );\n      const previous = metadata(storage, input.ref.key, before);\n      const headers = patch\n        ? mergeHeaders(previous, patch)\n        : replaceHeaders(previous, input.headers);\n      const native = yield* writeMetadata(headers);\n      const output = yield* request(storage, \"updateMetadata\", true, (signal) =>\n        address.client.setMetadata(native, {\n          abortSignal: signal,\n          conditions,\n          ...encryption(storage.config),\n        }),\n      );\n      if (!output.etag)\n        return yield* storageError(\n          \"updateMetadata\",\n          \"azure\",\n          { _tag: \"ProviderFailure\", code: \"MissingMetadataReceipt\" },\n          \"unknown\",\n        );\n      return {\n        ...previous,\n        ...metadata(storage, input.ref.key, {\n          ...before,\n          versionId: undefined,\n          ...output,\n          metadata: native,\n        }),\n      };\n    });\n    return {\n      replace: (input) =>\n        decodeRequest(MetadataReplace, input, \"updateMetadata\", \"azure\", true).pipe(\n          Effect.flatMap((value) => update(value)),\n        ),\n      merge: (input) =>\n        decodeRequest(MetadataMerge, input, \"updateMetadata\", \"azure\", true).pipe(\n          Effect.flatMap((value) =>\n            update({ ref: value.ref, headers: {}, condition: value.condition }, value.patch),\n          ),\n        ),\n    };\n  }\n  static readonly layer = Layer.effectContext(\n    Effect.map(AzureStorage, (storage) => {\n      const service = AzureMetadata.make(storage);\n      return Context.make(AzureMetadata, service).pipe(Context.add(StorageMetadata, service));\n    }),\n  );\n}\nexport class AzureTags extends Context.Service<AzureTags, TagsService>()(\n  \"@effect-kit/storage/azure/AzureTags\",\n) {\n  static make(storage: AzureStorageService): TagsService {\n    const set = Effect.fnUntraced(function* (input: typeof SetTags.Type) {\n      const value = yield* decodeRequest(SetTags, input, \"setTags\", \"azure\", true);\n      if (\n        Object.keys(value.tags).length > 10 ||\n        Object.entries(value.tags).some(\n          ([key, tagValue]) =>\n            !/^[A-Za-z0-9 +\\-.:=_/]{1,128}$/u.test(key) ||\n            !/^[A-Za-z0-9 +\\-.:=_/]{0,256}$/u.test(tagValue),\n        )\n      )\n        return yield* storageError(\n          \"setTags\",\n          \"azure\",\n          { _tag: \"InvalidInput\", field: \"tags\" },\n          \"not-started\",\n        );\n      const address = yield* target(storage, { ref: value.ref }, \"setTags\");\n      yield* request(storage, \"setTags\", true, (signal) =>\n        address.client.setTags({ ...value.tags }, { abortSignal: signal }),\n      );\n    });\n    return {\n      set,\n      delete: (input) =>\n        decodeRequest(TagTarget, input, \"deleteTags\", \"azure\", true).pipe(\n          Effect.flatMap((value) => set({ ...value, tags: {} })),\n        ),\n      get: Effect.fnUntraced(function* (input) {\n        const value = yield* decodeRequest(TagTarget, input, \"getTags\", \"azure\");\n        const address = yield* target(storage, { ref: value.ref }, \"getTags\");\n        return (yield* request(storage, \"getTags\", false, (signal) =>\n          address.client.getTags({ abortSignal: signal }),\n        )).tags;\n      }),\n    };\n  }\n  static readonly layer = Layer.effectContext(\n    Effect.map(AzureStorage, (storage) => {\n      const service = AzureTags.make(storage);\n      return Context.make(AzureTags, service).pipe(Context.add(StorageTags, service));\n    }),\n  );\n}\n\nexport { AzureProperties } from \"./properties.js\";\n"],"mappings":";;;;;;;;;;;;;AA8BA,IAAa,gBAAb,MAAa,sBAAsB,QAAQ,QAAwC,CAAC,CAClF,yCACF,CAAC,CAAC;CACA,OAAO,KAAK,SAA+C;EACzD,OAAO,gBAAgB,KAAK;GAC1B,UAAU,OAAO,WAAW,WAAW,QAAQ,CAAC,GAAG;IACjD,MAAM,QAAQ,OAAO,cAAc,cAAc,OAAO,gBAAgB,OAAO;IAC/E,MAAM,WAAW,KAAK,UAAU;KAAC;KAAY,MAAM;KAAQ,MAAM;KAAO,MAAM;IAAO,CAAC;IACtF,MAAM,QAAQ,OAAO,aACnB,SACA,MAAM,QACN,QAAQ,SACR,UACA,cACF;IACA,MAAM,OAAO,OAAO,QAAQ,SAAS,gBAAgB,QAAQ,WAC3D,QAAQ,OACL,cAAc;KACb,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;KAC/C,iBAAiB;KACjB,kBAAkB;KAClB,gBAAgB,MAAM,WAAW;KACjC,aAAa;IACf,CAAC,CAAC,CACD,OAAO;KACN,GAAI,QAAQ,EAAE,mBAAmB,MAAM,IAAI,CAAC;KAC5C,aAAa,MAAM,SAAS;IAC9B,CAAC,CAAC,CACD,KAAK,CACV;IACA,MAAM,UAA0B,CAAC;IACjC,KAAK,MAAM,QAAQ,KAAK,OAAO,QAAQ,aAAa,CAAC,GAAG;KACtD,MAAM,UAAU,KAAK,WACjB;MAAE,MAAM;MAA0B,IAAI,KAAK;KAAS,IACpD,KAAK,YACH;MAAE,MAAM;MAAyB,IAAI,KAAK;KAAU,IACpD;KACN,IAAI,CAAC,SAAS;KACd,QAAQ,KAAK;MACX,MAAM;MACN,SAAS,KAAK;MACd,UAAU,SACR,SACA,KAAK,MACL;OAAE,GAAG,KAAK;OAAY,UAAU,KAAK;MAAS,GAC9C;OAAE,SAAS,QAAQ;OAAS,KAAK,KAAK;OAAM;MAAQ,CACtD;MACA,GAAI,KAAK,qBAAqB,SAAY,EAAE,UAAU,KAAK,iBAAiB,IAAI,CAAC;KACnF,CAAC;IACH;IACA,MAAM,OAAO,KAAK,OAAO;IACzB,OAAO;KACL;KACA,GAAI,OAAO,EAAE,QAAQ,aAAa,QAAQ,SAAS,UAAU,IAAI,EAAE,IAAI,CAAC;IAC1E;GACF,CAAC;GACD,eAAe,OAAO,WAAW,WAAW,OAAO;IACjD,MAAM,EAAE,QAAQ,OAAO,cACrB,OAAO,OAAO,EAAE,KAAK,WAAW,CAAC,GACjC,OACA,iBACA,SACA,IACF;IACA,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,IAAI,GAAG,eAAe;IAC/D,OAAO,QAAQ,SAAS,iBAAiB,OAAO,WAC9C,QAAQ,OAAO,OAAO;KAAE,aAAa;KAAQ,YAAY,MAAM,QAAQ,MAAM;IAAE,CAAC,CAClF;GACF,CAAC;GACD,0BACE,OAAO,KACL,aACE,sBACA,SACA;IAAE,MAAM;IAAe,YAAY;GAAoB,GACvD,aACF,CACF;GACF,SAAS,OAAO,WAAW,WAAW,OAAO;IAC3C,MAAM,QAAQ,OAAO,cAAc,gBAAgB,OAAO,kBAAkB,SAAS,IAAI;IACzF,MAAM,SAAS,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,OAAO,GAAG,gBAAgB;IAC7E,MAAM,cAAc,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,eAAe,GAAG,gBAAgB;IAC1F,MAAM,SAAS,OAAO,QAAQ,SAAS,kBAAkB,OAAO,WAC9D,YAAY,OAAO,gBAAgB,OAAO,OAAO,KAAK;KACpD,aAAa;KACb,YAAY;MAAE,GAAG,UAAU,MAAM,SAAS;MAAG,GAAG,MAAM,QAAQ,MAAM;KAAE;IACxE,CAAC,CACH;IACA,IAAI,CAAC,OAAO,MACV,OAAO,OAAO,aACZ,kBACA,SACA;KAAE,MAAM;KAAmB,MAAM;IAAqB,GACtD,SACF;IACF,OAAO,SAAS,SAAS,MAAM,gBAAgB,MAAM;GACvD,CAAC;EACH,CAAC;CACH;CACA,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,eAAe,YAAY;EACpC,MAAM,UAAU,cAAc,KAAK,OAAO;EAC1C,OAAO,QAAQ,KAAK,eAAe,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,iBAAiB,OAAO,CAAC;CACxF,CAAC,CACH;AACF;AACA,IAAa,gBAAb,MAAa,sBAAsB,QAAQ,QAAwC,CAAC,CAClF,yCACF,CAAC,CAAC;CACA,OAAO,KAAK,SAA+C;EACzD,MAAM,SAAS,OAAO,WAAW,WAC/B,OACA,OACA;GACA,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,gBAAgB;GAC3E,MAAM,WAAW,SAAS,MAAM;GAChC,IACE,MAAM,IAAI,WACV,CAAC,MAAM,aACP,MAAM,UAAU,SAAS,aACzB;IACE,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;GACX,CAAC,CAAC,MAAM,UAAU,UAAU,MAAS,GAErC,OAAO,OAAO,aACZ,kBACA,SACA;IAAE,MAAM;IAAe,YAAY;GAAwC,GAC3E,aACF;GACF,MAAM,aAAa;IAAE,SAAS,MAAM,UAAU;IAAM,GAAG,MAAM,QAAQ,MAAM;GAAE;GAC7E,MAAM,SAAS,OAAO,QAAQ,SAAS,uBAAuB,QAAQ,WACpE,QAAQ,OAAO,cAAc;IAC3B,aAAa;IACb;IACA,GAAG,WAAW,QAAQ,MAAM;GAC9B,CAAC,CACH;GACA,MAAM,WAAW,SAAS,SAAS,MAAM,IAAI,KAAK,MAAM;GACxD,MAAM,UAAU,QACZ,aAAa,UAAU,KAAK,IAC5B,eAAe,UAAU,MAAM,OAAO;GAC1C,MAAM,SAAS,OAAO,cAAc,OAAO;GAC3C,MAAM,SAAS,OAAO,QAAQ,SAAS,kBAAkB,OAAO,WAC9D,QAAQ,OAAO,YAAY,QAAQ;IACjC,aAAa;IACb;IACA,GAAG,WAAW,QAAQ,MAAM;GAC9B,CAAC,CACH;GACA,IAAI,CAAC,OAAO,MACV,OAAO,OAAO,aACZ,kBACA,SACA;IAAE,MAAM;IAAmB,MAAM;GAAyB,GAC1D,SACF;GACF,OAAO;IACL,GAAG;IACH,GAAG,SAAS,SAAS,MAAM,IAAI,KAAK;KAClC,GAAG;KACH,WAAW;KACX,GAAG;KACH,UAAU;IACZ,CAAC;GACH;EACF,CAAC;EACD,OAAO;GACL,UAAU,UACR,cAAc,iBAAiB,OAAO,kBAAkB,SAAS,IAAI,CAAC,CAAC,KACrE,OAAO,SAAS,UAAU,OAAO,KAAK,CAAC,CACzC;GACF,QAAQ,UACN,cAAc,eAAe,OAAO,kBAAkB,SAAS,IAAI,CAAC,CAAC,KACnE,OAAO,SAAS,UACd,OAAO;IAAE,KAAK,MAAM;IAAK,SAAS,CAAC;IAAG,WAAW,MAAM;GAAU,GAAG,MAAM,KAAK,CACjF,CACF;EACJ;CACF;CACA,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,eAAe,YAAY;EACpC,MAAM,UAAU,cAAc,KAAK,OAAO;EAC1C,OAAO,QAAQ,KAAK,eAAe,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,iBAAiB,OAAO,CAAC;CACxF,CAAC,CACH;AACF;AACA,IAAa,YAAb,MAAa,kBAAkB,QAAQ,QAAgC,CAAC,CACtE,qCACF,CAAC,CAAC;CACA,OAAO,KAAK,SAA2C;EACrD,MAAM,MAAM,OAAO,WAAW,WAAW,OAA4B;GACnE,MAAM,QAAQ,OAAO,cAAc,SAAS,OAAO,WAAW,SAAS,IAAI;GAC3E,IACE,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,MACjC,OAAO,QAAQ,MAAM,IAAI,CAAC,CAAC,MACxB,CAAC,KAAK,cACL,CAAC,iCAAiC,KAAK,GAAG,KAC1C,CAAC,iCAAiC,KAAK,QAAQ,CACnD,GAEA,OAAO,OAAO,aACZ,WACA,SACA;IAAE,MAAM;IAAgB,OAAO;GAAO,GACtC,aACF;GACF,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,SAAS;GACpE,OAAO,QAAQ,SAAS,WAAW,OAAO,WACxC,QAAQ,OAAO,QAAQ,EAAE,GAAG,MAAM,KAAK,GAAG,EAAE,aAAa,OAAO,CAAC,CACnE;EACF,CAAC;EACD,OAAO;GACL;GACA,SAAS,UACP,cAAc,WAAW,OAAO,cAAc,SAAS,IAAI,CAAC,CAAC,KAC3D,OAAO,SAAS,UAAU,IAAI;IAAE,GAAG;IAAO,MAAM,CAAC;GAAE,CAAC,CAAC,CACvD;GACF,KAAK,OAAO,WAAW,WAAW,OAAO;IACvC,MAAM,QAAQ,OAAO,cAAc,WAAW,OAAO,WAAW,OAAO;IACvE,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,SAAS;IACpE,QAAQ,OAAO,QAAQ,SAAS,WAAW,QAAQ,WACjD,QAAQ,OAAO,QAAQ,EAAE,aAAa,OAAO,CAAC,CAChD,EAAC,CAAE;GACL,CAAC;EACH;CACF;CACA,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,eAAe,YAAY;EACpC,MAAM,UAAU,UAAU,KAAK,OAAO;EACtC,OAAO,QAAQ,KAAK,WAAW,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,aAAa,OAAO,CAAC;CAChF,CAAC,CACH;AACF"}

package/dist/azure/signing.d.ts

@@ -0,0 +1,17 @@
+import { StorageSigning } from "../core/capabilities.js";
+import { AzureStorage } from "../azure.js";
+import { DateTime, Layer, Redacted } from "effect";
+import { StorageSharedKeyCredential, UserDelegationKey } from "@azure/storage-blob";
+export type AzureSigningAuthority = {
+  readonly kind: "shared-key";
+  readonly credential: StorageSharedKeyCredential;
+  readonly expiresAt?: DateTime.Utc;
+} | {
+  readonly kind: "user-delegation";
+  readonly accountName: string;
+  readonly key: Redacted.Redacted<UserDelegationKey>;
+};
+export declare const AzureSigning: {
+  layer(authority: AzureSigningAuthority): Layer.Layer<StorageSigning, never, AzureStorage>;
+};
+//# sourceMappingURL=signing.d.ts.map

package/dist/azure/signing.js

@@ -0,0 +1,71 @@
+import { storageError } from "../core/errors.js";
+import { StorageSigning } from "../core/capabilities.js";
+import { target } from "../providers/azure/mapping.js";
+import { AzureStorage } from "../azure.js";
+import { signingRequest } from "../internal/signing-request.js";
+import { Clock, DateTime, Effect, Layer, Redacted } from "effect";
+import { BlobSASPermissions, SASProtocol, generateBlobSASQueryParameters } from "@azure/storage-blob";
+
+// src/providers/azure/signing.ts
+const AzureSigning = { layer(authority) {
+	return Layer.effect(StorageSigning, Effect.gen(function* () {
+		const storage = yield* AzureStorage;
+		return StorageSigning.of({ sign: Effect.fnUntraced(function* (input) {
+			yield* signingRequest(input, "azure");
+			const address = yield* target(storage, { ref: input.ref }, "sign");
+			if (storage.config.encryption || storage.config.leaseId || input.ref.version && input.method !== "GET" && input.method !== "HEAD") return yield* storageError("sign", "azure", {
+				_tag: "Unsupported",
+				capability: "signing-encryption-lease-or-versioned-mutation"
+			}, "not-started");
+			const account = authority.kind === "shared-key" ? authority.credential.accountName : authority.accountName;
+			if (storage.client.accountName !== account) return yield* storageError("sign", "azure", {
+				_tag: "InvalidConfiguration",
+				field: "signing-account"
+			}, "not-started");
+			const now = yield* Clock.currentTimeMillis;
+			const key = authority.kind === "user-delegation" ? Redacted.value(authority.key) : void 0;
+			const authorityExpiry = key ? key.signedExpiresOn.getTime() : authority.kind === "shared-key" && authority.expiresAt ? DateTime.toEpochMillis(authority.expiresAt) : Infinity;
+			const expiry = Math.floor(Math.min(now + input.expiresInSeconds * 1e3, authorityExpiry) / 1e3) * 1e3;
+			if (!Number.isSafeInteger(input.expiresInSeconds) || input.expiresInSeconds <= 0 || input.expiresInSeconds > 604800 || expiry <= now || key && key.signedStartsOn.getTime() > now || new URL(storage.config.containerUrl).protocol !== "https:") return yield* storageError("sign", "azure", {
+				_tag: "InvalidInput",
+				field: "expiry-or-endpoint"
+			}, "not-started");
+			const query = yield* Effect.try({
+				try: () => {
+					const settings = {
+						containerName: storage.client.containerName,
+						blobName: input.ref.key,
+						permissions: BlobSASPermissions.parse(input.method === "GET" || input.method === "HEAD" ? "r" : input.method === "DELETE" ? "d" : "cw"),
+						protocol: SASProtocol.Https,
+						startsOn: new Date(Math.max(now - 6e4, key?.signedStartsOn.getTime() ?? 0)),
+						expiresOn: new Date(expiry),
+						...input.ref.version ? input.ref.version._tag === "AzureSnapshot" ? { snapshotTime: input.ref.version.id } : { versionId: input.ref.version.id } : {}
+					};
+					return authority.kind === "shared-key" ? generateBlobSASQueryParameters(settings, authority.credential) : generateBlobSASQueryParameters(settings, Redacted.value(authority.key), authority.accountName);
+				},
+				catch: () => storageError("sign", "azure", {
+					_tag: "InvalidConfiguration",
+					field: "signing-authority"
+				}, "not-started")
+			});
+			const url = new URL(address.client.url);
+			url.search = query.toString();
+			if (input.ref.version) url.searchParams.set(input.ref.version._tag === "AzureSnapshot" ? "snapshot" : "versionid", input.ref.version.id);
+			return {
+				method: input.method,
+				ref: input.ref,
+				url: Redacted.make(url.href),
+				headers: Redacted.make(input.method === "PUT" ? { "x-ms-blob-type": "BlockBlob" } : {}),
+				expiresAt: DateTime.makeUnsafe(expiry),
+				constraints: [{
+					kind: "permissions",
+					enforcement: "provider",
+					value: input.method === "GET" || input.method === "HEAD" ? "r" : input.method === "DELETE" ? "d" : "cw"
+				}]
+			};
+		}) });
+	}));
+} };
+
+export { AzureSigning };
+//# sourceMappingURL=signing.js.map