@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/providers/r2-workers/multipart.js

@@ -0,0 +1,121 @@
+import { ObjectHeaders, ObjectKey, ObjectRef, ObjectSize } from "../../core/object.js";
+import { StorageError, storageError } from "../../core/errors.js";
+import { bindingError, call, headers, metadata, validateKey } from "./mapping.js";
+import { uploadBody } from "./body.js";
+import { singleUploadBytes } from "./primitives.js";
+import { Effect, Redacted, Schema } from "effect";
+
+// src/providers/r2-workers/multipart.ts
+const Handle = Schema.Struct({
+	ref: ObjectRef,
+	uploadId: Schema.Redacted(Schema.NonEmptyString)
+});
+const Part = Schema.Struct({
+	partNumber: Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: 1e4
+	})),
+	etag: Schema.NonEmptyString
+});
+function multipart(bucket, storeId, unknownLimit) {
+	const validate = Effect.fnUntraced(function* (input) {
+		const upload = yield* Schema.decodeUnknownEffect(Handle)(input).pipe(Effect.mapError(() => storageError("multipart.handle", "r2-workers", {
+			_tag: "InvalidInput",
+			field: "upload"
+		}, "not-started")));
+		if (upload.ref.storeId !== storeId || upload.ref.version) return yield* storageError("multipart.handle", "r2-workers", {
+			_tag: "InvalidInput",
+			field: "upload.ref"
+		}, "not-started");
+		yield* validateKey(upload.ref.key, "multipart.handle");
+		return upload;
+	});
+	return {
+		limits: {
+			minimumPartBytes: 5 * 1024 ** 2,
+			maximumPartBytes: singleUploadBytes,
+			maximumParts: 1e4,
+			completeConditions: []
+		},
+		initiate: Effect.fnUntraced(function* (request) {
+			yield* Schema.decodeUnknownEffect(ObjectKey)(request.key).pipe(Effect.mapError(() => storageError("multipart.initiate", "r2-workers", {
+				_tag: "InvalidInput",
+				field: "key"
+			}, "not-started")));
+			yield* validateKey(request.key, "multipart.initiate");
+			const selected = yield* Schema.decodeUnknownEffect(ObjectHeaders)(request.headers ?? {}).pipe(Effect.mapError(() => storageError("multipart.initiate", "r2-workers", {
+				_tag: "InvalidInput",
+				field: "headers"
+			}, "not-started")));
+			const upload = yield* call("multipart.initiate", () => bucket.createMultipartUpload(request.key, headers(selected)), "unknown");
+			return {
+				ref: {
+					storeId,
+					key: request.key
+				},
+				uploadId: Redacted.make(upload.uploadId)
+			};
+		}),
+		uploadPart: Effect.fnUntraced(function* (request) {
+			const upload = yield* validate(request.upload);
+			yield* Schema.decodeUnknownEffect(Part.fields.partNumber)(request.partNumber).pipe(Effect.mapError(() => storageError("multipart.part", "r2-workers", {
+				_tag: "InvalidInput",
+				field: "partNumber"
+			}, "not-started")));
+			const native = yield* Effect.try({
+				try: () => bucket.resumeMultipartUpload(upload.ref.key, Redacted.value(upload.uploadId)),
+				catch: bindingError("multipart.resume", "not-started")
+			});
+			if (request.contentLength !== void 0) yield* Schema.decodeUnknownEffect(ObjectSize)(request.contentLength).pipe(Effect.mapError(() => storageError("multipart.part", "r2-workers", {
+				_tag: "InvalidInput",
+				field: "contentLength"
+			}, "not-started")));
+			const part = yield* uploadBody(request, singleUploadBytes, unknownLimit, (body) => call("multipart.part", () => native.uploadPart(request.partNumber, body), "unknown"));
+			return {
+				partNumber: part.partNumber,
+				etag: part.etag,
+				...request.contentLength === void 0 ? {} : { size: request.contentLength }
+			};
+		}),
+		listParts: () => Effect.fail(storageError("multipart.listParts", "r2-workers", {
+			_tag: "Unsupported",
+			capability: "multipart-part-inventory"
+		})),
+		complete: Effect.fnUntraced(function* (request) {
+			const upload = yield* validate(request.upload);
+			if (request.condition) return yield* storageError("multipart.complete", "r2-workers", {
+				_tag: "Unsupported",
+				capability: "multipart-conditional-completion"
+			}, "not-started");
+			const parts = yield* Schema.decodeUnknownEffect(Schema.Array(Part).check(Schema.isMinLength(1), Schema.isMaxLength(1e4)))(request.parts).pipe(Effect.mapError(() => storageError("multipart.complete", "r2-workers", {
+				_tag: "InvalidInput",
+				field: "parts"
+			}, "not-started")));
+			if (new Set(parts.map((part) => part.partNumber)).size !== parts.length) return yield* storageError("multipart.complete", "r2-workers", {
+				_tag: "InvalidInput",
+				field: "parts"
+			}, "not-started");
+			const native = yield* Effect.try({
+				try: () => bucket.resumeMultipartUpload(upload.ref.key, Redacted.value(upload.uploadId)),
+				catch: bindingError("multipart.resume", "not-started")
+			});
+			const object = yield* call("multipart.complete", () => native.complete(parts.toSorted((a, b) => a.partNumber - b.partNumber)), "unknown");
+			return yield* metadata(storeId, object).pipe(Effect.mapError((error) => new StorageError({
+				...error,
+				operation: "multipart.complete",
+				mutationOutcome: "succeeded"
+			})));
+		}),
+		abort: Effect.fnUntraced(function* (request) {
+			const upload = yield* validate(request);
+			const native = yield* Effect.try({
+				try: () => bucket.resumeMultipartUpload(upload.ref.key, Redacted.value(upload.uploadId)),
+				catch: bindingError("multipart.resume", "not-started")
+			});
+			yield* call("multipart.abort", () => native.abort(), "unknown").pipe(Effect.catchReason("StorageError", "NotFound", () => Effect.void));
+		})
+	};
+}
+
+export { multipart };
+//# sourceMappingURL=multipart.js.map

package/dist/providers/r2-workers/multipart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.js","names":[],"sources":["../../../src/providers/r2-workers/multipart.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport type { MultipartUploads } from \"../../core/contracts/multipart.js\";\nimport { StorageError, storageError } from \"../../core/errors.js\";\nimport { ObjectHeaders, ObjectKey, ObjectRef, ObjectSize } from \"../../core/object.js\";\nimport type { R2BucketTransport } from \"./binding.js\";\nimport { uploadBody } from \"./body.js\";\nimport { bindingError, call, headers, metadata, validateKey } from \"./mapping.js\";\nimport { singleUploadBytes } from \"./primitives.js\";\n\nconst Handle = Schema.Struct({ ref: ObjectRef, uploadId: Schema.Redacted(Schema.NonEmptyString) });\nconst Part = Schema.Struct({\n  partNumber: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 10000 })),\n  etag: Schema.NonEmptyString,\n});\n\nexport function multipart(\n  bucket: R2BucketTransport,\n  storeId: string,\n  unknownLimit: number,\n): MultipartUploads {\n  const validate = Effect.fnUntraced(function* (input: unknown) {\n    const upload = yield* Schema.decodeUnknownEffect(Handle)(input).pipe(\n      Effect.mapError(() =>\n        storageError(\n          \"multipart.handle\",\n          \"r2-workers\",\n          { _tag: \"InvalidInput\", field: \"upload\" },\n          \"not-started\",\n        ),\n      ),\n    );\n    if (upload.ref.storeId !== storeId || upload.ref.version)\n      return yield* storageError(\n        \"multipart.handle\",\n        \"r2-workers\",\n        { _tag: \"InvalidInput\", field: \"upload.ref\" },\n        \"not-started\",\n      );\n    yield* validateKey(upload.ref.key, \"multipart.handle\");\n    return upload;\n  });\n  return {\n    limits: {\n      minimumPartBytes: 5 * 1024 ** 2,\n      maximumPartBytes: singleUploadBytes,\n      maximumParts: 10000,\n      completeConditions: [],\n    },\n    initiate: Effect.fnUntraced(function* (request) {\n      yield* Schema.decodeUnknownEffect(ObjectKey)(request.key).pipe(\n        Effect.mapError(() =>\n          storageError(\n            \"multipart.initiate\",\n            \"r2-workers\",\n            { _tag: \"InvalidInput\", field: \"key\" },\n            \"not-started\",\n          ),\n        ),\n      );\n      yield* validateKey(request.key, \"multipart.initiate\");\n      const selected = yield* Schema.decodeUnknownEffect(ObjectHeaders)(request.headers ?? {}).pipe(\n        Effect.mapError(() =>\n          storageError(\n            \"multipart.initiate\",\n            \"r2-workers\",\n            { _tag: \"InvalidInput\", field: \"headers\" },\n            \"not-started\",\n          ),\n        ),\n      );\n      const upload = yield* call(\n        \"multipart.initiate\",\n        () => bucket.createMultipartUpload(request.key, headers(selected)),\n        \"unknown\",\n      );\n      return { ref: { storeId, key: request.key }, uploadId: Redacted.make(upload.uploadId) };\n    }),\n    uploadPart: Effect.fnUntraced(function* (request) {\n      const upload = yield* validate(request.upload);\n      yield* Schema.decodeUnknownEffect(Part.fields.partNumber)(request.partNumber).pipe(\n        Effect.mapError(() =>\n          storageError(\n            \"multipart.part\",\n            \"r2-workers\",\n            { _tag: \"InvalidInput\", field: \"partNumber\" },\n            \"not-started\",\n          ),\n        ),\n      );\n      const native = yield* Effect.try({\n        try: () => bucket.resumeMultipartUpload(upload.ref.key, Redacted.value(upload.uploadId)),\n        catch: bindingError(\"multipart.resume\", \"not-started\"),\n      });\n      if (request.contentLength !== undefined)\n        yield* Schema.decodeUnknownEffect(ObjectSize)(request.contentLength).pipe(\n          Effect.mapError(() =>\n            storageError(\n              \"multipart.part\",\n              \"r2-workers\",\n              { _tag: \"InvalidInput\", field: \"contentLength\" },\n              \"not-started\",\n            ),\n          ),\n        );\n      const part = yield* uploadBody(request, singleUploadBytes, unknownLimit, (body) =>\n        call(\"multipart.part\", () => native.uploadPart(request.partNumber, body), \"unknown\"),\n      );\n      return {\n        partNumber: part.partNumber,\n        etag: part.etag,\n        ...(request.contentLength === undefined ? {} : { size: request.contentLength }),\n      };\n    }),\n    listParts: () =>\n      Effect.fail(\n        storageError(\"multipart.listParts\", \"r2-workers\", {\n          _tag: \"Unsupported\",\n          capability: \"multipart-part-inventory\",\n        }),\n      ),\n    complete: Effect.fnUntraced(function* (request) {\n      const upload = yield* validate(request.upload);\n      if (request.condition)\n        return yield* storageError(\n          \"multipart.complete\",\n          \"r2-workers\",\n          { _tag: \"Unsupported\", capability: \"multipart-conditional-completion\" },\n          \"not-started\",\n        );\n      const parts = yield* Schema.decodeUnknownEffect(\n        Schema.Array(Part).check(Schema.isMinLength(1), Schema.isMaxLength(10000)),\n      )(request.parts).pipe(\n        Effect.mapError(() =>\n          storageError(\n            \"multipart.complete\",\n            \"r2-workers\",\n            { _tag: \"InvalidInput\", field: \"parts\" },\n            \"not-started\",\n          ),\n        ),\n      );\n      if (new Set(parts.map((part) => part.partNumber)).size !== parts.length)\n        return yield* storageError(\n          \"multipart.complete\",\n          \"r2-workers\",\n          { _tag: \"InvalidInput\", field: \"parts\" },\n          \"not-started\",\n        );\n      const native = yield* Effect.try({\n        try: () => bucket.resumeMultipartUpload(upload.ref.key, Redacted.value(upload.uploadId)),\n        catch: bindingError(\"multipart.resume\", \"not-started\"),\n      });\n      const object = yield* call(\n        \"multipart.complete\",\n        () => native.complete(parts.toSorted((a, b) => a.partNumber - b.partNumber)),\n        \"unknown\",\n      );\n      return yield* metadata(storeId, object).pipe(\n        Effect.mapError(\n          (error) =>\n            new StorageError({\n              ...error,\n              operation: \"multipart.complete\",\n              mutationOutcome: \"succeeded\",\n            }),\n        ),\n      );\n    }),\n    abort: Effect.fnUntraced(function* (request) {\n      const upload = yield* validate(request);\n      const native = yield* Effect.try({\n        try: () => bucket.resumeMultipartUpload(upload.ref.key, Redacted.value(upload.uploadId)),\n        catch: bindingError(\"multipart.resume\", \"not-started\"),\n      });\n      yield* call(\"multipart.abort\", () => native.abort(), \"unknown\").pipe(\n        Effect.catchReason(\"StorageError\", \"NotFound\", () => Effect.void),\n      );\n    }),\n  };\n}\n"],"mappings":";;;;;;;;AAUA,MAAM,SAAS,OAAO,OAAO;CAAE,KAAK;CAAW,UAAU,OAAO,SAAS,OAAO,cAAc;AAAE,CAAC;AACjG,MAAM,OAAO,OAAO,OAAO;CACzB,YAAY,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAM,CAAC,CAAC;CAC7E,MAAM,OAAO;AACf,CAAC;AAED,SAAgB,UACd,QACA,SACA,cACkB;CAClB,MAAM,WAAW,OAAO,WAAW,WAAW,OAAgB;EAC5D,MAAM,SAAS,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAC9D,OAAO,eACL,aACE,oBACA,cACA;GAAE,MAAM;GAAgB,OAAO;EAAS,GACxC,aACF,CACF,CACF;EACA,IAAI,OAAO,IAAI,YAAY,WAAW,OAAO,IAAI,SAC/C,OAAO,OAAO,aACZ,oBACA,cACA;GAAE,MAAM;GAAgB,OAAO;EAAa,GAC5C,aACF;EACF,OAAO,YAAY,OAAO,IAAI,KAAK,kBAAkB;EACrD,OAAO;CACT,CAAC;CACD,OAAO;EACL,QAAQ;GACN,kBAAkB,IAAI,QAAQ;GAC9B,kBAAkB;GAClB,cAAc;GACd,oBAAoB,CAAC;EACvB;EACA,UAAU,OAAO,WAAW,WAAW,SAAS;GAC9C,OAAO,OAAO,oBAAoB,SAAS,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,KACxD,OAAO,eACL,aACE,sBACA,cACA;IAAE,MAAM;IAAgB,OAAO;GAAM,GACrC,aACF,CACF,CACF;GACA,OAAO,YAAY,QAAQ,KAAK,oBAAoB;GACpD,MAAM,WAAW,OAAO,OAAO,oBAAoB,aAAa,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,KACvF,OAAO,eACL,aACE,sBACA,cACA;IAAE,MAAM;IAAgB,OAAO;GAAU,GACzC,aACF,CACF,CACF;GACA,MAAM,SAAS,OAAO,KACpB,4BACM,OAAO,sBAAsB,QAAQ,KAAK,QAAQ,QAAQ,CAAC,GACjE,SACF;GACA,OAAO;IAAE,KAAK;KAAE;KAAS,KAAK,QAAQ;IAAI;IAAG,UAAU,SAAS,KAAK,OAAO,QAAQ;GAAE;EACxF,CAAC;EACD,YAAY,OAAO,WAAW,WAAW,SAAS;GAChD,MAAM,SAAS,OAAO,SAAS,QAAQ,MAAM;GAC7C,OAAO,OAAO,oBAAoB,KAAK,OAAO,UAAU,CAAC,CAAC,QAAQ,UAAU,CAAC,CAAC,KAC5E,OAAO,eACL,aACE,kBACA,cACA;IAAE,MAAM;IAAgB,OAAO;GAAa,GAC5C,aACF,CACF,CACF;GACA,MAAM,SAAS,OAAO,OAAO,IAAI;IAC/B,WAAW,OAAO,sBAAsB,OAAO,IAAI,KAAK,SAAS,MAAM,OAAO,QAAQ,CAAC;IACvF,OAAO,aAAa,oBAAoB,aAAa;GACvD,CAAC;GACD,IAAI,QAAQ,kBAAkB,QAC5B,OAAO,OAAO,oBAAoB,UAAU,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,KACnE,OAAO,eACL,aACE,kBACA,cACA;IAAE,MAAM;IAAgB,OAAO;GAAgB,GAC/C,aACF,CACF,CACF;GACF,MAAM,OAAO,OAAO,WAAW,SAAS,mBAAmB,eAAe,SACxE,KAAK,wBAAwB,OAAO,WAAW,QAAQ,YAAY,IAAI,GAAG,SAAS,CACrF;GACA,OAAO;IACL,YAAY,KAAK;IACjB,MAAM,KAAK;IACX,GAAI,QAAQ,kBAAkB,SAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,cAAc;GAC/E;EACF,CAAC;EACD,iBACE,OAAO,KACL,aAAa,uBAAuB,cAAc;GAChD,MAAM;GACN,YAAY;EACd,CAAC,CACH;EACF,UAAU,OAAO,WAAW,WAAW,SAAS;GAC9C,MAAM,SAAS,OAAO,SAAS,QAAQ,MAAM;GAC7C,IAAI,QAAQ,WACV,OAAO,OAAO,aACZ,sBACA,cACA;IAAE,MAAM;IAAe,YAAY;GAAmC,GACtE,aACF;GACF,MAAM,QAAQ,OAAO,OAAO,oBAC1B,OAAO,MAAM,IAAI,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAK,CAAC,CAC3E,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KACf,OAAO,eACL,aACE,sBACA,cACA;IAAE,MAAM;IAAgB,OAAO;GAAQ,GACvC,aACF,CACF,CACF;GACA,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,MAAM,QAC/D,OAAO,OAAO,aACZ,sBACA,cACA;IAAE,MAAM;IAAgB,OAAO;GAAQ,GACvC,aACF;GACF,MAAM,SAAS,OAAO,OAAO,IAAI;IAC/B,WAAW,OAAO,sBAAsB,OAAO,IAAI,KAAK,SAAS,MAAM,OAAO,QAAQ,CAAC;IACvF,OAAO,aAAa,oBAAoB,aAAa;GACvD,CAAC;GACD,MAAM,SAAS,OAAO,KACpB,4BACM,OAAO,SAAS,MAAM,UAAU,GAAG,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,GAC3E,SACF;GACA,OAAO,OAAO,SAAS,SAAS,MAAM,CAAC,CAAC,KACtC,OAAO,UACJ,UACC,IAAI,aAAa;IACf,GAAG;IACH,WAAW;IACX,iBAAiB;GACnB,CAAC,CACL,CACF;EACF,CAAC;EACD,OAAO,OAAO,WAAW,WAAW,SAAS;GAC3C,MAAM,SAAS,OAAO,SAAS,OAAO;GACtC,MAAM,SAAS,OAAO,OAAO,IAAI;IAC/B,WAAW,OAAO,sBAAsB,OAAO,IAAI,KAAK,SAAS,MAAM,OAAO,QAAQ,CAAC;IACvF,OAAO,aAAa,oBAAoB,aAAa;GACvD,CAAC;GACD,OAAO,KAAK,yBAAyB,OAAO,MAAM,GAAG,SAAS,CAAC,CAAC,KAC9D,OAAO,YAAY,gBAAgB,kBAAkB,OAAO,IAAI,CAClE;EACF,CAAC;CACH;AACF"}

package/dist/providers/r2-workers/primitives.js

@@ -0,0 +1,80 @@
+import { StorageError, storageError } from "../../core/errors.js";
+import { resolveRange } from "../../core/ranges.js";
+import { call, conditionalEtag, headers, metadata, validateKey } from "./mapping.js";
+import { uploadBody } from "./body.js";
+import { Cause, Effect, Stream } from "effect";
+
+// src/providers/r2-workers/primitives.ts
+const singleUploadBytes = 5 * 1024 ** 3 - 5 * 1024 ** 2;
+const objectBytes = 5 * 1024 ** 4 - 5 * 1024 ** 3;
+const put = Effect.fnUntraced(function* (bucket, storeId, unknownLimit, request) {
+	yield* validateKey(request.key, "put");
+	const options = headers(request);
+	if (new TextEncoder().encode(JSON.stringify(options)).length > 8192) return yield* storageError("put", "r2-workers", {
+		_tag: "InvalidInput",
+		field: "metadata"
+	}, "not-started");
+	return yield* uploadBody(request, singleUploadBytes, unknownLimit, (body) => call("put", () => bucket.put(request.key, body, {
+		...options,
+		...request.condition ? { onlyIf: request.condition._tag === "CreateOnly" ? { etagDoesNotMatch: "*" } : { etagMatches: conditionalEtag(request.condition.etag) } } : {}
+	}), "unknown").pipe(Effect.flatMap((object) => object ? metadata(storeId, object).pipe(Effect.mapError((error) => new StorageError({
+		...error,
+		operation: "put",
+		mutationOutcome: "succeeded"
+	}))) : Effect.fail(storageError("put", "r2-workers", { _tag: "PreconditionFailed" }, "rejected")))));
+});
+const head = Effect.fnUntraced(function* (bucket, storeId, request) {
+	const key = "ref" in request ? request.ref.key : request.key;
+	yield* validateKey(key, "head");
+	const object = yield* call("head", () => bucket.head(key));
+	if (!object) return yield* storageError("head", "r2-workers", { _tag: "NotFound" });
+	return yield* metadata(storeId, object);
+});
+const get = Effect.fnUntraced(function* (bucket, storeId, request) {
+	const key = "ref" in request ? request.ref.key : request.key;
+	yield* validateKey(key, "get");
+	const range = request.range;
+	const object = yield* Effect.acquireRelease(call("get", () => bucket.get(key, {
+		...request.condition ? { onlyIf: request.condition._tag === "IfMatch" ? { etagMatches: conditionalEtag(request.condition.etag) } : { etagDoesNotMatch: conditionalEtag(request.condition.etag) } } : {},
+		...range ? { range: range._tag === "Bounded" ? {
+			offset: range.start,
+			length: range.end - range.start + 1
+		} : range._tag === "From" ? { offset: range.start } : { suffix: range.length } } : {}
+	})), (response) => response?.body && !response.body.locked ? call("get.close", () => response.body ? response.body.cancel() : Promise.resolve()).pipe(Effect.orDie) : Effect.void);
+	if (!object) return yield* storageError("get", "r2-workers", { _tag: "NotFound" });
+	const saved = yield* metadata(storeId, object);
+	if (!object.body) {
+		if (request.condition?._tag === "IfNoneMatch") return {
+			_tag: "NotModified",
+			metadata: saved
+		};
+		return yield* storageError("get", "r2-workers", request.condition?._tag === "IfMatch" ? { _tag: "PreconditionFailed" } : {
+			_tag: "ProviderFailure",
+			code: "MissingBody"
+		});
+	}
+	const resolved = range ? yield* Effect.fromResult(resolveRange(range, object.size, "r2-workers")) : void 0;
+	if (resolved && (object.range?.offset !== resolved.start || object.range.length !== resolved.end - resolved.start + 1)) return yield* storageError("get", "r2-workers", {
+		_tag: "ProviderFailure",
+		code: "InvalidRange"
+	});
+	const body = object.body;
+	return {
+		_tag: "Object",
+		metadata: saved,
+		contentLength: resolved ? resolved.end - resolved.start + 1 : object.size,
+		range: resolved,
+		body: Stream.fromPull(Effect.gen(function* () {
+			const reader = yield* Effect.acquireRelease(Effect.sync(() => body.getReader()), (owned) => call("get.body.close", () => owned.cancel()).pipe(Effect.ensuring(Effect.sync(() => owned.releaseLock())), Effect.orDie));
+			return Effect.gen(function* () {
+				const chunk = yield* call("get.body", () => reader.read());
+				if (chunk.done) return yield* Cause.done();
+				if (!chunk.value) return yield* storageError("get.body", "r2-workers", { _tag: "TransportFailure" });
+				return [chunk.value];
+			});
+		}))
+	};
+});
+
+export { get, head, objectBytes, put, singleUploadBytes };
+//# sourceMappingURL=primitives.js.map

package/dist/providers/r2-workers/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","names":[],"sources":["../../../src/providers/r2-workers/primitives.ts"],"sourcesContent":["import { Cause, Effect, Stream } from \"effect\";\nimport type { Scope } from \"effect\";\n\nimport { StorageError, storageError } from \"../../core/errors.js\";\nimport type { ObjectMetadata } from \"../../core/object.js\";\nimport { resolveRange } from \"../../core/ranges.js\";\nimport type { GetRequest, GetResult, HeadRequest, PutRequest } from \"../../core/requests.js\";\nimport type { R2BucketTransport } from \"./binding.js\";\nimport { uploadBody } from \"./body.js\";\nimport { call, conditionalEtag, headers, metadata, validateKey } from \"./mapping.js\";\n\nexport const singleUploadBytes = 5 * 1024 ** 3 - 5 * 1024 ** 2;\nexport const objectBytes = 5 * 1024 ** 4 - 5 * 1024 ** 3;\n\nexport const put = Effect.fnUntraced(function* <E, R>(\n  bucket: R2BucketTransport,\n  storeId: string,\n  unknownLimit: number,\n  request: PutRequest<E, R>,\n): Effect.fn.Return<ObjectMetadata, StorageError | E, R> {\n  yield* validateKey(request.key, \"put\");\n  const options = headers(request);\n  if (new TextEncoder().encode(JSON.stringify(options)).length > 8192)\n    return yield* storageError(\n      \"put\",\n      \"r2-workers\",\n      { _tag: \"InvalidInput\", field: \"metadata\" },\n      \"not-started\",\n    );\n  return yield* uploadBody(request, singleUploadBytes, unknownLimit, (body) =>\n    call(\n      \"put\",\n      () =>\n        bucket.put(request.key, body, {\n          ...options,\n          ...(request.condition\n            ? {\n                onlyIf:\n                  request.condition._tag === \"CreateOnly\"\n                    ? { etagDoesNotMatch: \"*\" }\n                    : { etagMatches: conditionalEtag(request.condition.etag) },\n              }\n            : {}),\n        }),\n      \"unknown\",\n    ).pipe(\n      Effect.flatMap((object) =>\n        object\n          ? metadata(storeId, object).pipe(\n              Effect.mapError(\n                (error) =>\n                  new StorageError({ ...error, operation: \"put\", mutationOutcome: \"succeeded\" }),\n              ),\n            )\n          : Effect.fail(\n              storageError(\"put\", \"r2-workers\", { _tag: \"PreconditionFailed\" }, \"rejected\"),\n            ),\n      ),\n    ),\n  );\n});\n\nexport const head = Effect.fnUntraced(function* (\n  bucket: R2BucketTransport,\n  storeId: string,\n  request: HeadRequest,\n) {\n  const key = \"ref\" in request ? request.ref.key : request.key;\n  yield* validateKey(key, \"head\");\n  const object = yield* call(\"head\", () => bucket.head(key));\n  if (!object) return yield* storageError(\"head\", \"r2-workers\", { _tag: \"NotFound\" });\n  return yield* metadata(storeId, object);\n});\n\nexport const get = Effect.fnUntraced(function* (\n  bucket: R2BucketTransport,\n  storeId: string,\n  request: GetRequest,\n): Effect.fn.Return<GetResult, StorageError, Scope.Scope> {\n  const key = \"ref\" in request ? request.ref.key : request.key;\n  yield* validateKey(key, \"get\");\n  const range = request.range;\n  const object = yield* Effect.acquireRelease(\n    call(\"get\", () =>\n      bucket.get(key, {\n        ...(request.condition\n          ? {\n              onlyIf:\n                request.condition._tag === \"IfMatch\"\n                  ? { etagMatches: conditionalEtag(request.condition.etag) }\n                  : { etagDoesNotMatch: conditionalEtag(request.condition.etag) },\n            }\n          : {}),\n        ...(range\n          ? {\n              range:\n                range._tag === \"Bounded\"\n                  ? { offset: range.start, length: range.end - range.start + 1 }\n                  : range._tag === \"From\"\n                    ? { offset: range.start }\n                    : { suffix: range.length },\n            }\n          : {}),\n      }),\n    ),\n    (response) =>\n      response?.body && !response.body.locked\n        ? call(\"get.close\", () =>\n            response.body ? response.body.cancel() : Promise.resolve(),\n          ).pipe(Effect.orDie)\n        : Effect.void,\n  );\n  if (!object) return yield* storageError(\"get\", \"r2-workers\", { _tag: \"NotFound\" });\n  const saved = yield* metadata(storeId, object);\n  if (!object.body) {\n    if (request.condition?._tag === \"IfNoneMatch\") return { _tag: \"NotModified\", metadata: saved };\n    return yield* storageError(\n      \"get\",\n      \"r2-workers\",\n      request.condition?._tag === \"IfMatch\"\n        ? { _tag: \"PreconditionFailed\" }\n        : { _tag: \"ProviderFailure\", code: \"MissingBody\" },\n    );\n  }\n  const resolved = range\n    ? yield* Effect.fromResult(resolveRange(range, object.size, \"r2-workers\"))\n    : undefined;\n  if (\n    resolved &&\n    (object.range?.offset !== resolved.start ||\n      object.range.length !== resolved.end - resolved.start + 1)\n  )\n    return yield* storageError(\"get\", \"r2-workers\", {\n      _tag: \"ProviderFailure\",\n      code: \"InvalidRange\",\n    });\n  const body = object.body;\n  return {\n    _tag: \"Object\",\n    metadata: saved,\n    contentLength: resolved ? resolved.end - resolved.start + 1 : object.size,\n    range: resolved,\n    body: Stream.fromPull(\n      Effect.gen(function* () {\n        const reader = yield* Effect.acquireRelease(\n          Effect.sync(() => body.getReader()),\n          (owned) =>\n            call(\"get.body.close\", () => owned.cancel()).pipe(\n              Effect.ensuring(Effect.sync(() => owned.releaseLock())),\n              Effect.orDie,\n            ),\n        );\n        return Effect.gen(function* () {\n          const chunk = yield* call(\"get.body\", () => reader.read());\n          if (chunk.done) return yield* Cause.done();\n          if (!chunk.value)\n            return yield* storageError(\"get.body\", \"r2-workers\", { _tag: \"TransportFailure\" });\n          return [chunk.value] as const;\n        });\n      }),\n    ),\n  };\n});\n"],"mappings":";;;;;;;AAWA,MAAa,oBAAoB,IAAI,QAAQ,IAAI,IAAI,QAAQ;AAC7D,MAAa,cAAc,IAAI,QAAQ,IAAI,IAAI,QAAQ;AAEvD,MAAa,MAAM,OAAO,WAAW,WACnC,QACA,SACA,cACA,SACuD;CACvD,OAAO,YAAY,QAAQ,KAAK,KAAK;CACrC,MAAM,UAAU,QAAQ,OAAO;CAC/B,IAAI,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,MAC7D,OAAO,OAAO,aACZ,OACA,cACA;EAAE,MAAM;EAAgB,OAAO;CAAW,GAC1C,aACF;CACF,OAAO,OAAO,WAAW,SAAS,mBAAmB,eAAe,SAClE,KACE,aAEE,OAAO,IAAI,QAAQ,KAAK,MAAM;EAC5B,GAAG;EACH,GAAI,QAAQ,YACR,EACE,QACE,QAAQ,UAAU,SAAS,eACvB,EAAE,kBAAkB,IAAI,IACxB,EAAE,aAAa,gBAAgB,QAAQ,UAAU,IAAI,EAAE,EAC/D,IACA,CAAC;CACP,CAAC,GACH,SACF,CAAC,CAAC,KACA,OAAO,SAAS,WACd,SACI,SAAS,SAAS,MAAM,CAAC,CAAC,KACxB,OAAO,UACJ,UACC,IAAI,aAAa;EAAE,GAAG;EAAO,WAAW;EAAO,iBAAiB;CAAY,CAAC,CACjF,CACF,IACA,OAAO,KACL,aAAa,OAAO,cAAc,EAAE,MAAM,qBAAqB,GAAG,UAAU,CAC9E,CACN,CACF,CACF;AACF,CAAC;AAED,MAAa,OAAO,OAAO,WAAW,WACpC,QACA,SACA,SACA;CACA,MAAM,MAAM,SAAS,UAAU,QAAQ,IAAI,MAAM,QAAQ;CACzD,OAAO,YAAY,KAAK,MAAM;CAC9B,MAAM,SAAS,OAAO,KAAK,cAAc,OAAO,KAAK,GAAG,CAAC;CACzD,IAAI,CAAC,QAAQ,OAAO,OAAO,aAAa,QAAQ,cAAc,EAAE,MAAM,WAAW,CAAC;CAClF,OAAO,OAAO,SAAS,SAAS,MAAM;AACxC,CAAC;AAED,MAAa,MAAM,OAAO,WAAW,WACnC,QACA,SACA,SACwD;CACxD,MAAM,MAAM,SAAS,UAAU,QAAQ,IAAI,MAAM,QAAQ;CACzD,OAAO,YAAY,KAAK,KAAK;CAC7B,MAAM,QAAQ,QAAQ;CACtB,MAAM,SAAS,OAAO,OAAO,eAC3B,KAAK,aACH,OAAO,IAAI,KAAK;EACd,GAAI,QAAQ,YACR,EACE,QACE,QAAQ,UAAU,SAAS,YACvB,EAAE,aAAa,gBAAgB,QAAQ,UAAU,IAAI,EAAE,IACvD,EAAE,kBAAkB,gBAAgB,QAAQ,UAAU,IAAI,EAAE,EACpE,IACA,CAAC;EACL,GAAI,QACA,EACE,OACE,MAAM,SAAS,YACX;GAAE,QAAQ,MAAM;GAAO,QAAQ,MAAM,MAAM,MAAM,QAAQ;EAAE,IAC3D,MAAM,SAAS,SACb,EAAE,QAAQ,MAAM,MAAM,IACtB,EAAE,QAAQ,MAAM,OAAO,EACjC,IACA,CAAC;CACP,CAAC,CACH,IACC,aACC,UAAU,QAAQ,CAAC,SAAS,KAAK,SAC7B,KAAK,mBACH,SAAS,OAAO,SAAS,KAAK,OAAO,IAAI,QAAQ,QAAQ,CAC3D,CAAC,CAAC,KAAK,OAAO,KAAK,IACnB,OAAO,IACf;CACA,IAAI,CAAC,QAAQ,OAAO,OAAO,aAAa,OAAO,cAAc,EAAE,MAAM,WAAW,CAAC;CACjF,MAAM,QAAQ,OAAO,SAAS,SAAS,MAAM;CAC7C,IAAI,CAAC,OAAO,MAAM;EAChB,IAAI,QAAQ,WAAW,SAAS,eAAe,OAAO;GAAE,MAAM;GAAe,UAAU;EAAM;EAC7F,OAAO,OAAO,aACZ,OACA,cACA,QAAQ,WAAW,SAAS,YACxB,EAAE,MAAM,qBAAqB,IAC7B;GAAE,MAAM;GAAmB,MAAM;EAAc,CACrD;CACF;CACA,MAAM,WAAW,QACb,OAAO,OAAO,WAAW,aAAa,OAAO,OAAO,MAAM,YAAY,CAAC,IACvE;CACJ,IACE,aACC,OAAO,OAAO,WAAW,SAAS,SACjC,OAAO,MAAM,WAAW,SAAS,MAAM,SAAS,QAAQ,IAE1D,OAAO,OAAO,aAAa,OAAO,cAAc;EAC9C,MAAM;EACN,MAAM;CACR,CAAC;CACH,MAAM,OAAO,OAAO;CACpB,OAAO;EACL,MAAM;EACN,UAAU;EACV,eAAe,WAAW,SAAS,MAAM,SAAS,QAAQ,IAAI,OAAO;EACrE,OAAO;EACP,MAAM,OAAO,SACX,OAAO,IAAI,aAAa;GACtB,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,WAAW,KAAK,UAAU,CAAC,IACjC,UACC,KAAK,wBAAwB,MAAM,OAAO,CAAC,CAAC,CAAC,KAC3C,OAAO,SAAS,OAAO,WAAW,MAAM,YAAY,CAAC,CAAC,GACtD,OAAO,KACT,CACJ;GACA,OAAO,OAAO,IAAI,aAAa;IAC7B,MAAM,QAAQ,OAAO,KAAK,kBAAkB,OAAO,KAAK,CAAC;IACzD,IAAI,MAAM,MAAM,OAAO,OAAO,MAAM,KAAK;IACzC,IAAI,CAAC,MAAM,OACT,OAAO,OAAO,aAAa,YAAY,cAAc,EAAE,MAAM,mBAAmB,CAAC;IACnF,OAAO,CAAC,MAAM,KAAK;GACrB,CAAC;EACH,CAAC,CACH;CACF;AACF,CAAC"}

package/dist/providers/s3/admin-configuration.d.ts

@@ -0,0 +1,19 @@
+import "../../index.js";
+import "../../s3.js";
+import { Effect, Schema } from "effect";
+import * as S3 from "@aws-sdk/client-s3";
+export interface S3Configuration {
+  readonly cors?: S3.CORSConfiguration;
+  readonly versioning?: S3.VersioningConfiguration;
+  readonly lifecycle?: S3.BucketLifecycleConfiguration;
+  readonly encryption?: S3.ServerSideEncryptionConfiguration;
+  readonly publicAccess?: S3.PublicAccessBlockConfiguration;
+  readonly policy?: string;
+  readonly notifications?: S3.NotificationConfiguration;
+  readonly objectLock?: S3.ObjectLockConfiguration;
+  readonly replication?: S3.ReplicationConfiguration;
+}
+export declare const configurationSections: readonly ["cors", "versioning", "lifecycle", "encryption", "publicAccess", "policy", "notifications", "objectLock", "replication"];
+export type ConfigurationSection = (typeof configurationSections)[number];
+export declare const ConfigurationSection: Schema.Literals<readonly ["cors", "versioning", "lifecycle", "encryption", "publicAccess", "policy", "notifications", "objectLock", "replication"]>;
+//# sourceMappingURL=admin-configuration.d.ts.map

package/dist/providers/s3/admin-configuration.js

@@ -0,0 +1,171 @@
+import { storageError } from "../../core/errors.js";
+import { request } from "./transport.js";
+import { Effect, Predicate, Schema } from "effect";
+import * as S3 from "@aws-sdk/client-s3";
+
+// src/providers/s3/admin-configuration.ts
+const configurationSections = [
+	"cors",
+	"versioning",
+	"lifecycle",
+	"encryption",
+	"publicAccess",
+	"policy",
+	"notifications",
+	"objectLock",
+	"replication"
+];
+const ConfigurationSection = Schema.Literals(configurationSections);
+const NativeObject = Schema.Record(Schema.String, Schema.Unknown);
+const shapes = {
+	cors: Schema.Struct({ CORSRules: Schema.Array(Schema.Struct({
+		AllowedMethods: Schema.Array(Schema.NonEmptyString),
+		AllowedOrigins: Schema.Array(Schema.NonEmptyString)
+	})) }),
+	versioning: Schema.Struct({ Status: Schema.Literals(["Enabled", "Suspended"]) }),
+	lifecycle: Schema.Struct({ Rules: Schema.Array(Schema.Struct({ Status: Schema.Literals(["Enabled", "Disabled"]) })) }),
+	encryption: Schema.Struct({ Rules: Schema.Array(Schema.Struct({ ApplyServerSideEncryptionByDefault: Schema.Struct({ SSEAlgorithm: Schema.Literals([
+		"AES256",
+		"aws:kms",
+		"aws:kms:dsse"
+	]) }) })) }),
+	publicAccess: Schema.Struct({
+		BlockPublicAcls: Schema.Boolean,
+		IgnorePublicAcls: Schema.Boolean,
+		BlockPublicPolicy: Schema.Boolean,
+		RestrictPublicBuckets: Schema.Boolean
+	}),
+	policy: Schema.String,
+	notifications: NativeObject,
+	objectLock: Schema.Struct({ ObjectLockEnabled: Schema.Literal("Enabled") }),
+	replication: Schema.Struct({
+		Role: Schema.NonEmptyString,
+		Rules: Schema.Array(NativeObject)
+	})
+};
+const validateConfiguration = Effect.fnUntraced(function* (input) {
+	const object = yield* Schema.decodeUnknownEffect(NativeObject)(input).pipe(Effect.mapError(() => storageError("planConfiguration", "s3", {
+		_tag: "InvalidInput",
+		field: "desired"
+	})));
+	for (const [section, value] of Object.entries(object)) {
+		if (!configurationSections.some((name) => name === section) || value === void 0) return yield* storageError("planConfiguration", "s3", {
+			_tag: "InvalidInput",
+			field: "section"
+		});
+		yield* Schema.decodeUnknownEffect(shapes[section])(value).pipe(Effect.mapError(() => storageError("planConfiguration", "s3", {
+			_tag: "InvalidInput",
+			field: section
+		})));
+		if (section === "policy") {
+			const policy = yield* Schema.decodeUnknownEffect(Schema.fromJsonString(NativeObject))(value).pipe(Effect.mapError(() => storageError("planConfiguration", "s3", {
+				_tag: "InvalidInput",
+				field: "policy"
+			})));
+			if (!Predicate.isObject(policy)) return yield* storageError("planConfiguration", "s3", {
+				_tag: "InvalidInput",
+				field: "policy"
+			});
+		}
+	}
+	return input;
+});
+const getConfiguration = Effect.fnUntraced(function* (storage, bucket, section) {
+	const Bucket = bucket;
+	switch (section) {
+		case "cors": return (yield* request(storage, "getCors", false, (signal) => storage.client.send(new S3.GetBucketCorsCommand({ Bucket }), { abortSignal: signal }))).CORSRules;
+		case "versioning": {
+			const { Status, MFADelete } = yield* request(storage, "getVersioning", false, (signal) => storage.client.send(new S3.GetBucketVersioningCommand({ Bucket }), { abortSignal: signal }));
+			return {
+				Status,
+				MFADelete
+			};
+		}
+		case "lifecycle": return (yield* request(storage, "getLifecycle", false, (signal) => storage.client.send(new S3.GetBucketLifecycleConfigurationCommand({ Bucket }), { abortSignal: signal }))).Rules;
+		case "encryption": return (yield* request(storage, "getEncryption", false, (signal) => storage.client.send(new S3.GetBucketEncryptionCommand({ Bucket }), { abortSignal: signal }))).ServerSideEncryptionConfiguration;
+		case "publicAccess": return (yield* request(storage, "getPublicAccess", false, (signal) => storage.client.send(new S3.GetPublicAccessBlockCommand({ Bucket }), { abortSignal: signal }))).PublicAccessBlockConfiguration;
+		case "policy": return (yield* request(storage, "getPolicy", false, (signal) => storage.client.send(new S3.GetBucketPolicyCommand({ Bucket }), { abortSignal: signal }))).Policy;
+		case "notifications": {
+			const { TopicConfigurations, QueueConfigurations, LambdaFunctionConfigurations, EventBridgeConfiguration } = yield* request(storage, "getNotifications", false, (signal) => storage.client.send(new S3.GetBucketNotificationConfigurationCommand({ Bucket }), { abortSignal: signal }));
+			return {
+				TopicConfigurations,
+				QueueConfigurations,
+				LambdaFunctionConfigurations,
+				EventBridgeConfiguration
+			};
+		}
+		case "objectLock": return (yield* request(storage, "getObjectLock", false, (signal) => storage.client.send(new S3.GetObjectLockConfigurationCommand({ Bucket }), { abortSignal: signal }))).ObjectLockConfiguration;
+		case "replication": return (yield* request(storage, "getReplication", false, (signal) => storage.client.send(new S3.GetBucketReplicationCommand({ Bucket }), { abortSignal: signal }))).ReplicationConfiguration;
+	}
+}, Effect.catch((error) => error.reason._tag === "ProviderFailure" && [
+	"NoSuchCORSConfiguration",
+	"NoSuchLifecycleConfiguration",
+	"ServerSideEncryptionConfigurationNotFoundError",
+	"NoSuchPublicAccessBlockConfiguration",
+	"NoSuchBucketPolicy",
+	"ObjectLockConfigurationNotFoundError",
+	"ReplicationConfigurationNotFoundError"
+].includes(error.reason.code ?? "") ? Effect.succeed(void 0) : Effect.fail(error)));
+function desiredSection(configuration, section) {
+	const value = configuration[section];
+	return section === "cors" ? configuration.cors?.CORSRules : section === "lifecycle" ? configuration.lifecycle?.Rules : value;
+}
+const putConfiguration = Effect.fnUntraced(function* (storage, Bucket, section, value) {
+	switch (section) {
+		case "cors":
+			yield* request(storage, "putCors", true, (signal) => storage.client.send(new S3.PutBucketCorsCommand({
+				Bucket,
+				CORSConfiguration: value.cors
+			}), { abortSignal: signal }));
+			break;
+		case "versioning":
+			yield* request(storage, "putVersioning", true, (signal) => storage.client.send(new S3.PutBucketVersioningCommand({
+				Bucket,
+				VersioningConfiguration: value.versioning
+			}), { abortSignal: signal }));
+			break;
+		case "lifecycle":
+			yield* request(storage, "putLifecycle", true, (signal) => storage.client.send(new S3.PutBucketLifecycleConfigurationCommand({
+				Bucket,
+				LifecycleConfiguration: value.lifecycle
+			}), { abortSignal: signal }));
+			break;
+		case "encryption":
+			yield* request(storage, "putEncryption", true, (signal) => storage.client.send(new S3.PutBucketEncryptionCommand({
+				Bucket,
+				ServerSideEncryptionConfiguration: value.encryption
+			}), { abortSignal: signal }));
+			break;
+		case "publicAccess":
+			yield* request(storage, "putPublicAccess", true, (signal) => storage.client.send(new S3.PutPublicAccessBlockCommand({
+				Bucket,
+				PublicAccessBlockConfiguration: value.publicAccess
+			}), { abortSignal: signal }));
+			break;
+		case "policy":
+			yield* request(storage, "putPolicy", true, (signal) => storage.client.send(new S3.PutBucketPolicyCommand({
+				Bucket,
+				Policy: value.policy
+			}), { abortSignal: signal }));
+			break;
+		case "notifications":
+			yield* request(storage, "putNotifications", true, (signal) => storage.client.send(new S3.PutBucketNotificationConfigurationCommand({
+				Bucket,
+				NotificationConfiguration: value.notifications
+			}), { abortSignal: signal }));
+			break;
+		case "objectLock":
+			yield* request(storage, "putObjectLock", true, (signal) => storage.client.send(new S3.PutObjectLockConfigurationCommand({
+				Bucket,
+				ObjectLockConfiguration: value.objectLock
+			}), { abortSignal: signal }));
+			break;
+		case "replication": yield* request(storage, "putReplication", true, (signal) => storage.client.send(new S3.PutBucketReplicationCommand({
+			Bucket,
+			ReplicationConfiguration: value.replication
+		}), { abortSignal: signal }));
+	}
+});
+
+export { ConfigurationSection, configurationSections, desiredSection, getConfiguration, putConfiguration, validateConfiguration };
+//# sourceMappingURL=admin-configuration.js.map

package/dist/providers/s3/admin-configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-configuration.js","names":[],"sources":["../../../src/providers/s3/admin-configuration.ts"],"sourcesContent":["import { Effect, Predicate, Schema } from \"effect\";\n\nimport * as S3 from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { request } from \"./transport.js\";\n\nexport interface S3Configuration {\n  readonly cors?: S3.CORSConfiguration;\n  readonly versioning?: S3.VersioningConfiguration;\n  readonly lifecycle?: S3.BucketLifecycleConfiguration;\n  readonly encryption?: S3.ServerSideEncryptionConfiguration;\n  readonly publicAccess?: S3.PublicAccessBlockConfiguration;\n  readonly policy?: string;\n  readonly notifications?: S3.NotificationConfiguration;\n  readonly objectLock?: S3.ObjectLockConfiguration;\n  readonly replication?: S3.ReplicationConfiguration;\n}\nexport const configurationSections = [\n  \"cors\",\n  \"versioning\",\n  \"lifecycle\",\n  \"encryption\",\n  \"publicAccess\",\n  \"policy\",\n  \"notifications\",\n  \"objectLock\",\n  \"replication\",\n] as const;\nexport type ConfigurationSection = (typeof configurationSections)[number];\nexport const ConfigurationSection = Schema.Literals(configurationSections);\nconst NativeObject = Schema.Record(Schema.String, Schema.Unknown);\nconst shapes = {\n  cors: Schema.Struct({\n    CORSRules: Schema.Array(\n      Schema.Struct({\n        AllowedMethods: Schema.Array(Schema.NonEmptyString),\n        AllowedOrigins: Schema.Array(Schema.NonEmptyString),\n      }),\n    ),\n  }),\n  versioning: Schema.Struct({ Status: Schema.Literals([\"Enabled\", \"Suspended\"]) }),\n  lifecycle: Schema.Struct({\n    Rules: Schema.Array(Schema.Struct({ Status: Schema.Literals([\"Enabled\", \"Disabled\"]) })),\n  }),\n  encryption: Schema.Struct({\n    Rules: Schema.Array(\n      Schema.Struct({\n        ApplyServerSideEncryptionByDefault: Schema.Struct({\n          SSEAlgorithm: Schema.Literals([\"AES256\", \"aws:kms\", \"aws:kms:dsse\"]),\n        }),\n      }),\n    ),\n  }),\n  publicAccess: Schema.Struct({\n    BlockPublicAcls: Schema.Boolean,\n    IgnorePublicAcls: Schema.Boolean,\n    BlockPublicPolicy: Schema.Boolean,\n    RestrictPublicBuckets: Schema.Boolean,\n  }),\n  policy: Schema.String,\n  notifications: NativeObject,\n  objectLock: Schema.Struct({ ObjectLockEnabled: Schema.Literal(\"Enabled\") }),\n  replication: Schema.Struct({ Role: Schema.NonEmptyString, Rules: Schema.Array(NativeObject) }),\n};\nexport const validateConfiguration = Effect.fnUntraced(function* (input: S3Configuration) {\n  const object = yield* Schema.decodeUnknownEffect(NativeObject)(input).pipe(\n    Effect.mapError(() =>\n      storageError(\"planConfiguration\", \"s3\", { _tag: \"InvalidInput\", field: \"desired\" }),\n    ),\n  );\n  for (const [section, value] of Object.entries(object)) {\n    if (!configurationSections.some((name) => name === section) || value === undefined)\n      return yield* storageError(\"planConfiguration\", \"s3\", {\n        _tag: \"InvalidInput\",\n        field: \"section\",\n      });\n    yield* Schema.decodeUnknownEffect(shapes[section as ConfigurationSection])(value).pipe(\n      Effect.mapError(() =>\n        storageError(\"planConfiguration\", \"s3\", { _tag: \"InvalidInput\", field: section }),\n      ),\n    );\n    if (section === \"policy\") {\n      const policy = yield* Schema.decodeUnknownEffect(Schema.fromJsonString(NativeObject))(\n        value,\n      ).pipe(\n        Effect.mapError(() =>\n          storageError(\"planConfiguration\", \"s3\", { _tag: \"InvalidInput\", field: \"policy\" }),\n        ),\n      );\n      if (!Predicate.isObject(policy))\n        return yield* storageError(\"planConfiguration\", \"s3\", {\n          _tag: \"InvalidInput\",\n          field: \"policy\",\n        });\n    }\n  }\n  // Preserve complete SDK-native rules, including fields not projected by validation.\n  return input;\n});\n\nexport const getConfiguration = Effect.fnUntraced(\n  function* (\n    storage: S3StorageService,\n    bucket: string,\n    section: ConfigurationSection,\n  ): Effect.fn.Return<unknown, ReturnType<typeof storageError>> {\n    const Bucket = bucket;\n    switch (section) {\n      case \"cors\":\n        return (yield* request(storage, \"getCors\", false, (signal) =>\n          storage.client.send(new S3.GetBucketCorsCommand({ Bucket }), { abortSignal: signal }),\n        )).CORSRules;\n      case \"versioning\": {\n        const { Status, MFADelete } = yield* request(storage, \"getVersioning\", false, (signal) =>\n          storage.client.send(new S3.GetBucketVersioningCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        );\n        return { Status, MFADelete };\n      }\n      case \"lifecycle\":\n        return (yield* request(storage, \"getLifecycle\", false, (signal) =>\n          storage.client.send(new S3.GetBucketLifecycleConfigurationCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        )).Rules;\n      case \"encryption\":\n        return (yield* request(storage, \"getEncryption\", false, (signal) =>\n          storage.client.send(new S3.GetBucketEncryptionCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        )).ServerSideEncryptionConfiguration;\n      case \"publicAccess\":\n        return (yield* request(storage, \"getPublicAccess\", false, (signal) =>\n          storage.client.send(new S3.GetPublicAccessBlockCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        )).PublicAccessBlockConfiguration;\n      case \"policy\":\n        return (yield* request(storage, \"getPolicy\", false, (signal) =>\n          storage.client.send(new S3.GetBucketPolicyCommand({ Bucket }), { abortSignal: signal }),\n        )).Policy;\n      case \"notifications\": {\n        const {\n          TopicConfigurations,\n          QueueConfigurations,\n          LambdaFunctionConfigurations,\n          EventBridgeConfiguration,\n        } = yield* request(storage, \"getNotifications\", false, (signal) =>\n          storage.client.send(new S3.GetBucketNotificationConfigurationCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        );\n        return {\n          TopicConfigurations,\n          QueueConfigurations,\n          LambdaFunctionConfigurations,\n          EventBridgeConfiguration,\n        };\n      }\n      case \"objectLock\":\n        return (yield* request(storage, \"getObjectLock\", false, (signal) =>\n          storage.client.send(new S3.GetObjectLockConfigurationCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        )).ObjectLockConfiguration;\n      case \"replication\":\n        return (yield* request(storage, \"getReplication\", false, (signal) =>\n          storage.client.send(new S3.GetBucketReplicationCommand({ Bucket }), {\n            abortSignal: signal,\n          }),\n        )).ReplicationConfiguration;\n    }\n  },\n  Effect.catch((error) =>\n    error.reason._tag === \"ProviderFailure\" &&\n    [\n      \"NoSuchCORSConfiguration\",\n      \"NoSuchLifecycleConfiguration\",\n      \"ServerSideEncryptionConfigurationNotFoundError\",\n      \"NoSuchPublicAccessBlockConfiguration\",\n      \"NoSuchBucketPolicy\",\n      \"ObjectLockConfigurationNotFoundError\",\n      \"ReplicationConfigurationNotFoundError\",\n    ].includes(error.reason.code ?? \"\")\n      ? Effect.succeed(undefined)\n      : Effect.fail(error),\n  ),\n);\nexport function desiredSection(\n  configuration: S3Configuration,\n  section: ConfigurationSection,\n): unknown {\n  const value = configuration[section];\n  return section === \"cors\"\n    ? configuration.cors?.CORSRules\n    : section === \"lifecycle\"\n      ? configuration.lifecycle?.Rules\n      : value;\n}\nexport const putConfiguration = Effect.fnUntraced(function* (\n  storage: S3StorageService,\n  Bucket: string,\n  section: ConfigurationSection,\n  value: S3Configuration,\n) {\n  switch (section) {\n    case \"cors\":\n      yield* request(storage, \"putCors\", true, (signal) =>\n        storage.client.send(\n          new S3.PutBucketCorsCommand({ Bucket, CORSConfiguration: value.cors }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"versioning\":\n      yield* request(storage, \"putVersioning\", true, (signal) =>\n        storage.client.send(\n          new S3.PutBucketVersioningCommand({ Bucket, VersioningConfiguration: value.versioning }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"lifecycle\":\n      yield* request(storage, \"putLifecycle\", true, (signal) =>\n        storage.client.send(\n          new S3.PutBucketLifecycleConfigurationCommand({\n            Bucket,\n            LifecycleConfiguration: value.lifecycle,\n          }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"encryption\":\n      yield* request(storage, \"putEncryption\", true, (signal) =>\n        storage.client.send(\n          new S3.PutBucketEncryptionCommand({\n            Bucket,\n            ServerSideEncryptionConfiguration: value.encryption,\n          }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"publicAccess\":\n      yield* request(storage, \"putPublicAccess\", true, (signal) =>\n        storage.client.send(\n          new S3.PutPublicAccessBlockCommand({\n            Bucket,\n            PublicAccessBlockConfiguration: value.publicAccess,\n          }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"policy\":\n      yield* request(storage, \"putPolicy\", true, (signal) =>\n        storage.client.send(new S3.PutBucketPolicyCommand({ Bucket, Policy: value.policy }), {\n          abortSignal: signal,\n        }),\n      );\n      break;\n    case \"notifications\":\n      yield* request(storage, \"putNotifications\", true, (signal) =>\n        storage.client.send(\n          new S3.PutBucketNotificationConfigurationCommand({\n            Bucket,\n            NotificationConfiguration: value.notifications,\n          }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"objectLock\":\n      yield* request(storage, \"putObjectLock\", true, (signal) =>\n        storage.client.send(\n          new S3.PutObjectLockConfigurationCommand({\n            Bucket,\n            ObjectLockConfiguration: value.objectLock,\n          }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n    case \"replication\":\n      yield* request(storage, \"putReplication\", true, (signal) =>\n        storage.client.send(\n          new S3.PutBucketReplicationCommand({\n            Bucket,\n            ReplicationConfiguration: value.replication,\n          }),\n          { abortSignal: signal },\n        ),\n      );\n      break;\n  }\n});\n"],"mappings":";;;;;;AAmBA,MAAa,wBAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAa,uBAAuB,OAAO,SAAS,qBAAqB;AACzE,MAAM,eAAe,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AAChE,MAAM,SAAS;CACb,MAAM,OAAO,OAAO,EAClB,WAAW,OAAO,MAChB,OAAO,OAAO;EACZ,gBAAgB,OAAO,MAAM,OAAO,cAAc;EAClD,gBAAgB,OAAO,MAAM,OAAO,cAAc;CACpD,CAAC,CACH,EACF,CAAC;CACD,YAAY,OAAO,OAAO,EAAE,QAAQ,OAAO,SAAS,CAAC,WAAW,WAAW,CAAC,EAAE,CAAC;CAC/E,WAAW,OAAO,OAAO,EACvB,OAAO,OAAO,MAAM,OAAO,OAAO,EAAE,QAAQ,OAAO,SAAS,CAAC,WAAW,UAAU,CAAC,EAAE,CAAC,CAAC,EACzF,CAAC;CACD,YAAY,OAAO,OAAO,EACxB,OAAO,OAAO,MACZ,OAAO,OAAO,EACZ,oCAAoC,OAAO,OAAO,EAChD,cAAc,OAAO,SAAS;EAAC;EAAU;EAAW;CAAc,CAAC,EACrE,CAAC,EACH,CAAC,CACH,EACF,CAAC;CACD,cAAc,OAAO,OAAO;EAC1B,iBAAiB,OAAO;EACxB,kBAAkB,OAAO;EACzB,mBAAmB,OAAO;EAC1B,uBAAuB,OAAO;CAChC,CAAC;CACD,QAAQ,OAAO;CACf,eAAe;CACf,YAAY,OAAO,OAAO,EAAE,mBAAmB,OAAO,QAAQ,SAAS,EAAE,CAAC;CAC1E,aAAa,OAAO,OAAO;EAAE,MAAM,OAAO;EAAgB,OAAO,OAAO,MAAM,YAAY;CAAE,CAAC;AAC/F;AACA,MAAa,wBAAwB,OAAO,WAAW,WAAW,OAAwB;CACxF,MAAM,SAAS,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KACpE,OAAO,eACL,aAAa,qBAAqB,MAAM;EAAE,MAAM;EAAgB,OAAO;CAAU,CAAC,CACpF,CACF;CACA,KAAK,MAAM,CAAC,SAAS,UAAU,OAAO,QAAQ,MAAM,GAAG;EACrD,IAAI,CAAC,sBAAsB,MAAM,SAAS,SAAS,OAAO,KAAK,UAAU,QACvE,OAAO,OAAO,aAAa,qBAAqB,MAAM;GACpD,MAAM;GACN,OAAO;EACT,CAAC;EACH,OAAO,OAAO,oBAAoB,OAAO,QAAgC,CAAC,CAAC,KAAK,CAAC,CAAC,KAChF,OAAO,eACL,aAAa,qBAAqB,MAAM;GAAE,MAAM;GAAgB,OAAO;EAAQ,CAAC,CAClF,CACF;EACA,IAAI,YAAY,UAAU;GACxB,MAAM,SAAS,OAAO,OAAO,oBAAoB,OAAO,eAAe,YAAY,CAAC,CAAC,CACnF,KACF,CAAC,CAAC,KACA,OAAO,eACL,aAAa,qBAAqB,MAAM;IAAE,MAAM;IAAgB,OAAO;GAAS,CAAC,CACnF,CACF;GACA,IAAI,CAAC,UAAU,SAAS,MAAM,GAC5B,OAAO,OAAO,aAAa,qBAAqB,MAAM;IACpD,MAAM;IACN,OAAO;GACT,CAAC;EACL;CACF;CAEA,OAAO;AACT,CAAC;AAED,MAAa,mBAAmB,OAAO,WACrC,WACE,SACA,QACA,SAC4D;CAC5D,MAAM,SAAS;CACf,QAAQ,SAAR;EACE,KAAK,QACH,QAAQ,OAAO,QAAQ,SAAS,WAAW,QAAQ,WACjD,QAAQ,OAAO,KAAK,IAAI,GAAG,qBAAqB,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa,OAAO,CAAC,CACtF,EAAC,CAAE;EACL,KAAK,cAAc;GACjB,MAAM,EAAE,QAAQ,cAAc,OAAO,QAAQ,SAAS,iBAAiB,QAAQ,WAC7E,QAAQ,OAAO,KAAK,IAAI,GAAG,2BAA2B,EAAE,OAAO,CAAC,GAAG,EACjE,aAAa,OACf,CAAC,CACH;GACA,OAAO;IAAE;IAAQ;GAAU;EAC7B;EACA,KAAK,aACH,QAAQ,OAAO,QAAQ,SAAS,gBAAgB,QAAQ,WACtD,QAAQ,OAAO,KAAK,IAAI,GAAG,uCAAuC,EAAE,OAAO,CAAC,GAAG,EAC7E,aAAa,OACf,CAAC,CACH,EAAC,CAAE;EACL,KAAK,cACH,QAAQ,OAAO,QAAQ,SAAS,iBAAiB,QAAQ,WACvD,QAAQ,OAAO,KAAK,IAAI,GAAG,2BAA2B,EAAE,OAAO,CAAC,GAAG,EACjE,aAAa,OACf,CAAC,CACH,EAAC,CAAE;EACL,KAAK,gBACH,QAAQ,OAAO,QAAQ,SAAS,mBAAmB,QAAQ,WACzD,QAAQ,OAAO,KAAK,IAAI,GAAG,4BAA4B,EAAE,OAAO,CAAC,GAAG,EAClE,aAAa,OACf,CAAC,CACH,EAAC,CAAE;EACL,KAAK,UACH,QAAQ,OAAO,QAAQ,SAAS,aAAa,QAAQ,WACnD,QAAQ,OAAO,KAAK,IAAI,GAAG,uBAAuB,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa,OAAO,CAAC,CACxF,EAAC,CAAE;EACL,KAAK,iBAAiB;GACpB,MAAM,EACJ,qBACA,qBACA,8BACA,6BACE,OAAO,QAAQ,SAAS,oBAAoB,QAAQ,WACtD,QAAQ,OAAO,KAAK,IAAI,GAAG,0CAA0C,EAAE,OAAO,CAAC,GAAG,EAChF,aAAa,OACf,CAAC,CACH;GACA,OAAO;IACL;IACA;IACA;IACA;GACF;EACF;EACA,KAAK,cACH,QAAQ,OAAO,QAAQ,SAAS,iBAAiB,QAAQ,WACvD,QAAQ,OAAO,KAAK,IAAI,GAAG,kCAAkC,EAAE,OAAO,CAAC,GAAG,EACxE,aAAa,OACf,CAAC,CACH,EAAC,CAAE;EACL,KAAK,eACH,QAAQ,OAAO,QAAQ,SAAS,kBAAkB,QAAQ,WACxD,QAAQ,OAAO,KAAK,IAAI,GAAG,4BAA4B,EAAE,OAAO,CAAC,GAAG,EAClE,aAAa,OACf,CAAC,CACH,EAAC,CAAE;CACP;AACF,GACA,OAAO,OAAO,UACZ,MAAM,OAAO,SAAS,qBACtB;CACE;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,SAAS,MAAM,OAAO,QAAQ,EAAE,IAC9B,OAAO,QAAQ,MAAS,IACxB,OAAO,KAAK,KAAK,CACvB,CACF;AACA,SAAgB,eACd,eACA,SACS;CACT,MAAM,QAAQ,cAAc;CAC5B,OAAO,YAAY,SACf,cAAc,MAAM,YACpB,YAAY,cACV,cAAc,WAAW,QACzB;AACR;AACA,MAAa,mBAAmB,OAAO,WAAW,WAChD,SACA,QACA,SACA,OACA;CACA,QAAQ,SAAR;EACE,KAAK;GACH,OAAO,QAAQ,SAAS,WAAW,OAAO,WACxC,QAAQ,OAAO,KACb,IAAI,GAAG,qBAAqB;IAAE;IAAQ,mBAAmB,MAAM;GAAK,CAAC,GACrE,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,iBAAiB,OAAO,WAC9C,QAAQ,OAAO,KACb,IAAI,GAAG,2BAA2B;IAAE;IAAQ,yBAAyB,MAAM;GAAW,CAAC,GACvF,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,gBAAgB,OAAO,WAC7C,QAAQ,OAAO,KACb,IAAI,GAAG,uCAAuC;IAC5C;IACA,wBAAwB,MAAM;GAChC,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,iBAAiB,OAAO,WAC9C,QAAQ,OAAO,KACb,IAAI,GAAG,2BAA2B;IAChC;IACA,mCAAmC,MAAM;GAC3C,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,mBAAmB,OAAO,WAChD,QAAQ,OAAO,KACb,IAAI,GAAG,4BAA4B;IACjC;IACA,gCAAgC,MAAM;GACxC,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,aAAa,OAAO,WAC1C,QAAQ,OAAO,KAAK,IAAI,GAAG,uBAAuB;IAAE;IAAQ,QAAQ,MAAM;GAAO,CAAC,GAAG,EACnF,aAAa,OACf,CAAC,CACH;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,oBAAoB,OAAO,WACjD,QAAQ,OAAO,KACb,IAAI,GAAG,0CAA0C;IAC/C;IACA,2BAA2B,MAAM;GACnC,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK;GACH,OAAO,QAAQ,SAAS,iBAAiB,OAAO,WAC9C,QAAQ,OAAO,KACb,IAAI,GAAG,kCAAkC;IACvC;IACA,yBAAyB,MAAM;GACjC,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;GACA;EACF,KAAK,eACH,OAAO,QAAQ,SAAS,kBAAkB,OAAO,WAC/C,QAAQ,OAAO,KACb,IAAI,GAAG,4BAA4B;GACjC;GACA,0BAA0B,MAAM;EAClC,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;CAEJ;AACF,CAAC"}

package/dist/providers/s3/bulk-delete.d.ts

@@ -0,0 +1,43 @@
+import { StorageError } from "../../core/errors.js";
+import { DeleteRequest } from "../../core/requests.js";
+import { S3Connection } from "./config.js";
+import { Effect, Result } from "effect";
+export interface S3DeleteOutcome {
+  readonly request: DeleteRequest;
+  readonly result: Result.Result<void, StorageError>;
+}
+export declare const deleteObjects: (connection: S3Connection, inputs: readonly ({
+  readonly key: string;
+  readonly condition?: {
+    readonly _tag: "IfMatch";
+    readonly etag: string;
+  } | undefined;
+} | {
+  readonly ref: {
+    readonly storeId: string;
+    readonly key: string;
+    readonly version?: {
+      readonly _tag: "S3Version";
+      readonly id: string;
+    } | {
+      readonly _tag: "GcsGeneration";
+      readonly id: string;
+      readonly metageneration?: string | undefined;
+    } | {
+      readonly _tag: "AzureVersion";
+      readonly id: string;
+    } | {
+      readonly _tag: "AzureSnapshot";
+      readonly id: string;
+    } | {
+      readonly _tag: "OpaqueVersion";
+      readonly provider: string;
+      readonly id: string;
+    } | undefined;
+  };
+  readonly condition?: {
+    readonly _tag: "IfMatch";
+    readonly etag: string;
+  } | undefined;
+})[]) => Effect.Effect<S3DeleteOutcome[], StorageError, never>;
+//# sourceMappingURL=bulk-delete.d.ts.map

package/dist/providers/s3/bulk-delete.js

@@ -0,0 +1,58 @@
+import { storageError } from "../../core/errors.js";
+import { decodeRequest } from "../../internal/request-validation.js";
+import { DeleteRequest } from "../../core/requests.js";
+import { authority } from "./config.js";
+import { target, validateRef } from "./object-mapping.js";
+import { enforceProfile } from "./profile.js";
+import { mapS3Error, request } from "./transport.js";
+import { Effect, Result, Schema } from "effect";
+import { DeleteObjectsCommand } from "@aws-sdk/client-s3";
+
+// src/providers/s3/bulk-delete.ts
+const deleteObjects = Effect.fnUntraced(function* (connection, inputs) {
+	const values = yield* decodeRequest(Schema.Array(DeleteRequest).check(Schema.isMinLength(1), Schema.isMaxLength(1e3)), inputs, "deleteObjects", "s3");
+	const identities = /* @__PURE__ */ new Set();
+	for (const value of values) {
+		yield* enforceProfile(connection, "deleteObjects", value);
+		if ("ref" in value) yield* validateRef(value.ref, connection.config, "deleteObjects");
+		if (value.condition) return yield* storageError("deleteObjects", "s3", {
+			_tag: "Unsupported",
+			capability: "batch-delete-condition"
+		}, "not-started");
+		const identity = JSON.stringify(target(value));
+		if (identities.has(identity)) return yield* storageError("deleteObjects", "s3", {
+			_tag: "InvalidInput",
+			field: "duplicate-target"
+		}, "not-started");
+		identities.add(identity);
+	}
+	const response = yield* Effect.result(request(connection, "deleteObjects", true, (signal) => connection.client.send(new DeleteObjectsCommand({
+		...authority(connection.config),
+		Delete: {
+			Objects: values.map((value) => target(value)),
+			Quiet: false
+		}
+	}), { abortSignal: signal })));
+	if (Result.isFailure(response)) return values.map((value) => ({
+		request: value,
+		result: Result.fail(response.failure)
+	}));
+	return values.map((value) => {
+		const selected = target(value);
+		const error = response.success.Errors?.find((entry) => entry.Key === selected.Key && entry.VersionId === selected.VersionId);
+		const deleted = response.success.Deleted?.some((entry) => entry.Key === selected.Key && entry.VersionId === selected.VersionId);
+		return {
+			request: value,
+			result: error ? Result.fail(mapS3Error({
+				name: error.Code,
+				$metadata: { httpStatusCode: 400 }
+			}, "delete", true)) : deleted ? Result.succeed(void 0) : Result.fail(storageError("delete", "s3", {
+				_tag: "ProviderFailure",
+				code: "MissingDeleteReceipt"
+			}, "unknown"))
+		};
+	});
+});
+
+export { deleteObjects };
+//# sourceMappingURL=bulk-delete.js.map

package/dist/providers/s3/bulk-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-delete.js","names":[],"sources":["../../../src/providers/s3/bulk-delete.ts"],"sourcesContent":["import { Effect, Result, Schema } from \"effect\";\n\nimport { DeleteObjectsCommand } from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport type { StorageError } from \"../../core/errors.js\";\nimport { DeleteRequest } from \"../../core/requests.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { authority } from \"./config.js\";\nimport type { S3Connection } from \"./config.js\";\nimport { target, validateRef } from \"./object-mapping.js\";\nimport { enforceProfile } from \"./profile.js\";\nimport { mapS3Error, request } from \"./transport.js\";\n\nexport interface S3DeleteOutcome {\n  readonly request: DeleteRequest;\n  readonly result: Result.Result<void, StorageError>;\n}\n\nexport const deleteObjects = Effect.fnUntraced(function* (\n  connection: S3Connection,\n  inputs: ReadonlyArray<DeleteRequest>,\n) {\n  const values = yield* decodeRequest(\n    Schema.Array(DeleteRequest).check(Schema.isMinLength(1), Schema.isMaxLength(1000)),\n    inputs,\n    \"deleteObjects\",\n    \"s3\",\n  );\n  const identities = new Set<string>();\n  for (const value of values) {\n    yield* enforceProfile(connection, \"deleteObjects\", value);\n    if (\"ref\" in value) yield* validateRef(value.ref, connection.config, \"deleteObjects\");\n    if (value.condition)\n      return yield* storageError(\n        \"deleteObjects\",\n        \"s3\",\n        { _tag: \"Unsupported\", capability: \"batch-delete-condition\" },\n        \"not-started\",\n      );\n    const identity = JSON.stringify(target(value));\n    if (identities.has(identity))\n      return yield* storageError(\n        \"deleteObjects\",\n        \"s3\",\n        { _tag: \"InvalidInput\", field: \"duplicate-target\" },\n        \"not-started\",\n      );\n    identities.add(identity);\n  }\n\n  const response = yield* Effect.result(\n    request(connection, \"deleteObjects\", true, (signal) =>\n      connection.client.send(\n        new DeleteObjectsCommand({\n          ...authority(connection.config),\n          Delete: { Objects: values.map((value) => target(value)), Quiet: false },\n        }),\n        { abortSignal: signal },\n      ),\n    ),\n  );\n  if (Result.isFailure(response))\n    return values.map((value) => ({ request: value, result: Result.fail(response.failure) }));\n\n  return values.map((value): S3DeleteOutcome => {\n    const selected = target(value);\n    const error = response.success.Errors?.find(\n      (entry) => entry.Key === selected.Key && entry.VersionId === selected.VersionId,\n    );\n    const deleted = response.success.Deleted?.some(\n      (entry) => entry.Key === selected.Key && entry.VersionId === selected.VersionId,\n    );\n    const result = error\n      ? Result.fail(\n          mapS3Error({ name: error.Code, $metadata: { httpStatusCode: 400 } }, \"delete\", true),\n        )\n      : deleted\n        ? Result.succeed(undefined)\n        : Result.fail(\n            storageError(\n              \"delete\",\n              \"s3\",\n              { _tag: \"ProviderFailure\", code: \"MissingDeleteReceipt\" },\n              \"unknown\",\n            ),\n          );\n    return { request: value, result };\n  });\n});\n"],"mappings":";;;;;;;;;;;AAmBA,MAAa,gBAAgB,OAAO,WAAW,WAC7C,YACA,QACA;CACA,MAAM,SAAS,OAAO,cACpB,OAAO,MAAM,aAAa,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAI,CAAC,GACjF,QACA,iBACA,IACF;CACA,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,SAAS,QAAQ;EAC1B,OAAO,eAAe,YAAY,iBAAiB,KAAK;EACxD,IAAI,SAAS,OAAO,OAAO,YAAY,MAAM,KAAK,WAAW,QAAQ,eAAe;EACpF,IAAI,MAAM,WACR,OAAO,OAAO,aACZ,iBACA,MACA;GAAE,MAAM;GAAe,YAAY;EAAyB,GAC5D,aACF;EACF,MAAM,WAAW,KAAK,UAAU,OAAO,KAAK,CAAC;EAC7C,IAAI,WAAW,IAAI,QAAQ,GACzB,OAAO,OAAO,aACZ,iBACA,MACA;GAAE,MAAM;GAAgB,OAAO;EAAmB,GAClD,aACF;EACF,WAAW,IAAI,QAAQ;CACzB;CAEA,MAAM,WAAW,OAAO,OAAO,OAC7B,QAAQ,YAAY,iBAAiB,OAAO,WAC1C,WAAW,OAAO,KAChB,IAAI,qBAAqB;EACvB,GAAG,UAAU,WAAW,MAAM;EAC9B,QAAQ;GAAE,SAAS,OAAO,KAAK,UAAU,OAAO,KAAK,CAAC;GAAG,OAAO;EAAM;CACxE,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF,CACF;CACA,IAAI,OAAO,UAAU,QAAQ,GAC3B,OAAO,OAAO,KAAK,WAAW;EAAE,SAAS;EAAO,QAAQ,OAAO,KAAK,SAAS,OAAO;CAAE,EAAE;CAE1F,OAAO,OAAO,KAAK,UAA2B;EAC5C,MAAM,WAAW,OAAO,KAAK;EAC7B,MAAM,QAAQ,SAAS,QAAQ,QAAQ,MACpC,UAAU,MAAM,QAAQ,SAAS,OAAO,MAAM,cAAc,SAAS,SACxE;EACA,MAAM,UAAU,SAAS,QAAQ,SAAS,MACvC,UAAU,MAAM,QAAQ,SAAS,OAAO,MAAM,cAAc,SAAS,SACxE;EAeA,OAAO;GAAE,SAAS;GAAO,QAdV,QACX,OAAO,KACL,WAAW;IAAE,MAAM,MAAM;IAAM,WAAW,EAAE,gBAAgB,IAAI;GAAE,GAAG,UAAU,IAAI,CACrF,IACA,UACE,OAAO,QAAQ,MAAS,IACxB,OAAO,KACL,aACE,UACA,MACA;IAAE,MAAM;IAAmB,MAAM;GAAuB,GACxD,SACF,CACF;EAC0B;CAClC,CAAC;AACH,CAAC"}

package/dist/providers/s3/config.d.ts

@@ -0,0 +1,43 @@
+import "../../index.js";
+import { S3Profile } from "./profile.js";
+import { Effect, Redacted } from "effect";
+import { S3Client, S3ClientConfig } from "@aws-sdk/client-s3";
+export type S3Encryption = {
+  readonly mode: "AES256";
+} | {
+  readonly mode: "aws:kms" | "aws:kms:dsse";
+  readonly keyId?: string;
+  readonly bucketKey?: boolean;
+} | {
+  readonly mode: "customer";
+  readonly key: Redacted.Redacted<string>;
+  readonly keyMD5: string;
+};
+export interface S3Config {
+  readonly bucket: string;
+  readonly region: string;
+  readonly storeId?: string;
+  readonly endpoint?: string;
+  readonly forcePathStyle?: boolean;
+  readonly credentials?: S3ClientConfig["credentials"];
+  readonly expectedBucketOwner?: string;
+  readonly requestPayer?: "requester";
+  readonly encryption?: S3Encryption;
+  readonly requestTimeoutMillis?: number;
+  /** Unknown-length streams are staged up to this explicit adapter limit. */
+  readonly maxUnknownLengthBytes?: number;
+}
+export type ResolvedS3Config = Omit<S3Config, "storeId" | "requestTimeoutMillis" | "maxUnknownLengthBytes"> & {
+  readonly storeId: string;
+  readonly requestTimeoutMillis: number;
+  readonly maxUnknownLengthBytes: number;
+};
+export interface S3Connection {
+  readonly profile?: S3Profile;
+  /** Compatibility transports may lack the optional S3 checksum read extension. */
+  readonly readChecksums?: false;
+  readonly multipartChecksums?: false;
+  readonly client: S3Client;
+  readonly config: ResolvedS3Config;
+}
+//# sourceMappingURL=config.d.ts.map