@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/providers/s3/object-mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-mapping.js","names":[],"sources":["../../../src/providers/s3/object-mapping.ts"],"sourcesContent":["import { DateTime, Effect, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { ObjectRef } from \"../../core/object.js\";\nimport type { Checksum, ObjectHeaders, ObjectMetadata } from \"../../core/object.js\";\nimport type { ObjectTarget, WriteCondition } from \"../../core/requests.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport type { ResolvedS3Config, S3Connection } from \"./config.js\";\nimport { S3Key } from \"./validation.js\";\n\nconst checksumFields = {\n  ChecksumCRC32: \"crc32\",\n  ChecksumCRC32C: \"crc32c\",\n  ChecksumCRC64NVME: \"crc64nvme\",\n  ChecksumSHA1: \"sha1\",\n  ChecksumSHA256: \"sha256\",\n  ChecksumSHA512: \"sha512\",\n  ChecksumMD5: \"md5\",\n  ChecksumXXHASH64: \"xxhash64\",\n  ChecksumXXHASH3: \"xxhash3\",\n  ChecksumXXHASH128: \"xxhash128\",\n} as const;\n\nexport interface NativeMetadata {\n  readonly ContentLength?: number | undefined;\n  readonly ContentType?: string | undefined;\n  readonly ContentEncoding?: string | undefined;\n  readonly ContentLanguage?: string | undefined;\n  readonly ContentDisposition?: string | undefined;\n  readonly CacheControl?: string | undefined;\n  readonly Metadata?: Record<string, string> | undefined;\n  readonly VersionId?: string | undefined;\n  readonly ETag?: string | undefined;\n  readonly LastModified?: Date | undefined;\n  readonly StorageClass?: string | undefined;\n  readonly ChecksumType?: string | undefined;\n}\n\nexport function checksums(output: NativeMetadata): ReadonlyArray<Checksum> | undefined {\n  const found: Checksum[] = [];\n  for (const [field, algorithm] of Object.entries(checksumFields)) {\n    const value: unknown = Reflect.get(output, field);\n    if (typeof value === \"string\") {\n      const suffix = /-(\\d+)$/u.exec(value)?.[1];\n      const count = suffix === undefined ? undefined : Number(suffix);\n      found.push({\n        algorithm,\n        value,\n        encoding: \"base64\",\n        scope:\n          output.ChecksumType === \"COMPOSITE\" || suffix !== undefined ? \"composite\" : \"full-object\",\n        ...(count !== undefined && Number.isSafeInteger(count) && count > 0\n          ? { partCount: count }\n          : {}),\n      });\n    }\n  }\n  return found.length ? found : undefined;\n}\n\nexport function metadata(\n  connection: Pick<S3Connection, \"config\" | \"profile\">,\n  key: string,\n  output: NativeMetadata,\n): ObjectMetadata {\n  // Some compatible services return upload identities that cannot be used for versioned reads.\n  const versioned = connection.profile?.capabilities.versionedReads !== \"none\";\n\n  return {\n    ref: {\n      storeId: connection.config.storeId,\n      key,\n      ...(!versioned || output.VersionId === undefined\n        ? {}\n        : { version: { _tag: \"S3Version\", id: output.VersionId } }),\n    },\n    size: output.ContentLength,\n    etag: output.ETag,\n    lastModified:\n      output.LastModified === undefined ? undefined : DateTime.makeUnsafe(output.LastModified),\n    contentType: output.ContentType,\n    contentEncoding: output.ContentEncoding,\n    contentLanguage: output.ContentLanguage,\n    contentDisposition: output.ContentDisposition,\n    cacheControl: output.CacheControl,\n    customMetadata: output.Metadata,\n    storageClass: output.StorageClass,\n    checksums: checksums(output),\n  };\n}\n\nexport function headers(input: ObjectHeaders) {\n  return {\n    ContentType: input.contentType,\n    ContentEncoding: input.contentEncoding,\n    ContentLanguage: input.contentLanguage,\n    ContentDisposition: input.contentDisposition,\n    CacheControl: input.cacheControl,\n    Metadata: input.customMetadata ? { ...input.customMetadata } : undefined,\n  };\n}\n\nexport function condition(input?: WriteCondition) {\n  return input?._tag === \"CreateOnly\" ? { IfNoneMatch: \"*\" } : { IfMatch: input?.etag };\n}\n\nexport function target(input: ObjectTarget) {\n  return \"ref\" in input\n    ? { Key: input.ref.key, VersionId: input.ref.version?.id }\n    : { Key: input.key };\n}\n\nconst mutationOperations: ReadonlySet<string> = new Set([\n  \"put\",\n  \"delete\",\n  \"deleteObjects\",\n  \"copy\",\n  \"copyPart\",\n  \"initiate\",\n  \"uploadPart\",\n  \"complete\",\n  \"abort\",\n]);\n\nexport const validateRef = (ref: ObjectRef, config: ResolvedS3Config, operation: string) =>\n  decodeRequest(\n    Schema.Struct({ ...ObjectRef.fields, key: S3Key }),\n    ref,\n    operation,\n    \"s3\",\n    mutationOperations.has(operation),\n  ).pipe(\n    Effect.flatMap((input) => {\n      const error = refError(input, config, operation);\n      return error ? Effect.fail(error) : Effect.succeed(input);\n    }),\n  );\n\nexport function refError(ref: ObjectRef, config: ResolvedS3Config, operation: string) {\n  return ref.storeId !== config.storeId\n    ? storageError(\n        operation,\n        \"s3\",\n        { _tag: \"InvalidInput\", field: \"ref.storeId\" },\n        mutationOperations.has(operation) ? \"not-started\" : \"not-applicable\",\n      )\n    : ref.version && ref.version._tag !== \"S3Version\"\n      ? storageError(\n          operation,\n          \"s3\",\n          { _tag: \"Unsupported\", capability: \"native-version-kind\" },\n          mutationOperations.has(operation) ? \"not-started\" : \"not-applicable\",\n        )\n      : undefined;\n}\n\nexport function encodeCopySource(bucket: string, ref: ObjectRef): string {\n  const path = `${encodeURIComponent(bucket)}/${ref.key.split(\"/\").map(encodeURIComponent).join(\"/\")}`;\n  return ref.version ? `${path}?versionId=${encodeURIComponent(ref.version.id)}` : path;\n}\n"],"mappings":";;;;;;;AAUA,MAAM,iBAAiB;CACrB,eAAe;CACf,gBAAgB;CAChB,mBAAmB;CACnB,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,mBAAmB;AACrB;AAiBA,SAAgB,UAAU,QAA6D;CACrF,MAAM,QAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,OAAO,cAAc,OAAO,QAAQ,cAAc,GAAG;EAC/D,MAAM,QAAiB,QAAQ,IAAI,QAAQ,KAAK;EAChD,IAAI,OAAO,UAAU,UAAU;GAC7B,MAAM,SAAS,WAAW,KAAK,KAAK,CAAC,GAAG;GACxC,MAAM,QAAQ,WAAW,SAAY,SAAY,OAAO,MAAM;GAC9D,MAAM,KAAK;IACT;IACA;IACA,UAAU;IACV,OACE,OAAO,iBAAiB,eAAe,WAAW,SAAY,cAAc;IAC9E,GAAI,UAAU,UAAa,OAAO,cAAc,KAAK,KAAK,QAAQ,IAC9D,EAAE,WAAW,MAAM,IACnB,CAAC;GACP,CAAC;EACH;CACF;CACA,OAAO,MAAM,SAAS,QAAQ;AAChC;AAEA,SAAgB,SACd,YACA,KACA,QACgB;CAEhB,MAAM,YAAY,WAAW,SAAS,aAAa,mBAAmB;CAEtE,OAAO;EACL,KAAK;GACH,SAAS,WAAW,OAAO;GAC3B;GACA,GAAI,CAAC,aAAa,OAAO,cAAc,SACnC,CAAC,IACD,EAAE,SAAS;IAAE,MAAM;IAAa,IAAI,OAAO;GAAU,EAAE;EAC7D;EACA,MAAM,OAAO;EACb,MAAM,OAAO;EACb,cACE,OAAO,iBAAiB,SAAY,SAAY,SAAS,WAAW,OAAO,YAAY;EACzF,aAAa,OAAO;EACpB,iBAAiB,OAAO;EACxB,iBAAiB,OAAO;EACxB,oBAAoB,OAAO;EAC3B,cAAc,OAAO;EACrB,gBAAgB,OAAO;EACvB,cAAc,OAAO;EACrB,WAAW,UAAU,MAAM;CAC7B;AACF;AAEA,SAAgB,QAAQ,OAAsB;CAC5C,OAAO;EACL,aAAa,MAAM;EACnB,iBAAiB,MAAM;EACvB,iBAAiB,MAAM;EACvB,oBAAoB,MAAM;EAC1B,cAAc,MAAM;EACpB,UAAU,MAAM,iBAAiB,EAAE,GAAG,MAAM,eAAe,IAAI;CACjE;AACF;AAEA,SAAgB,UAAU,OAAwB;CAChD,OAAO,OAAO,SAAS,eAAe,EAAE,aAAa,IAAI,IAAI,EAAE,SAAS,OAAO,KAAK;AACtF;AAEA,SAAgB,OAAO,OAAqB;CAC1C,OAAO,SAAS,QACZ;EAAE,KAAK,MAAM,IAAI;EAAK,WAAW,MAAM,IAAI,SAAS;CAAG,IACvD,EAAE,KAAK,MAAM,IAAI;AACvB;AAEA,MAAM,qCAA0C,IAAI,IAAI;CACtD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAa,eAAe,KAAgB,QAA0B,cACpE,cACE,OAAO,OAAO;CAAE,GAAG,UAAU;CAAQ,KAAK;AAAM,CAAC,GACjD,KACA,WACA,MACA,mBAAmB,IAAI,SAAS,CAClC,CAAC,CAAC,KACA,OAAO,SAAS,UAAU;CACxB,MAAM,QAAQ,SAAS,OAAO,QAAQ,SAAS;CAC/C,OAAO,QAAQ,OAAO,KAAK,KAAK,IAAI,OAAO,QAAQ,KAAK;AAC1D,CAAC,CACH;AAEF,SAAgB,SAAS,KAAgB,QAA0B,WAAmB;CACpF,OAAO,IAAI,YAAY,OAAO,UAC1B,aACE,WACA,MACA;EAAE,MAAM;EAAgB,OAAO;CAAc,GAC7C,mBAAmB,IAAI,SAAS,IAAI,gBAAgB,gBACtD,IACA,IAAI,WAAW,IAAI,QAAQ,SAAS,cAClC,aACE,WACA,MACA;EAAE,MAAM;EAAe,YAAY;CAAsB,GACzD,mBAAmB,IAAI,SAAS,IAAI,gBAAgB,gBACtD,IACA;AACR;AAEA,SAAgB,iBAAiB,QAAgB,KAAwB;CACvE,MAAM,OAAO,GAAG,mBAAmB,MAAM,EAAE,GAAG,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;CACjG,OAAO,IAAI,UAAU,GAAG,KAAK,aAAa,mBAAmB,IAAI,QAAQ,EAAE,MAAM;AACnF"}

package/dist/providers/s3/primitives.d.ts

@@ -0,0 +1,8 @@
+import "../../core/errors.js";
+import "../../core/requests.js";
+import "../../index.js";
+import "./config.js";
+import { Effect } from "effect";
+import { PutObjectCommandInput } from "@aws-sdk/client-s3";
+export type S3PutOptions = Pick<PutObjectCommandInput, "ChecksumAlgorithm" | "ChecksumCRC32" | "ChecksumCRC32C" | "ChecksumCRC64NVME" | "ChecksumSHA1" | "ChecksumSHA256" | "ChecksumSHA512" | "ChecksumMD5" | "ChecksumXXHASH64" | "ChecksumXXHASH3" | "ChecksumXXHASH128" | "StorageClass" | "Tagging">;
+//# sourceMappingURL=primitives.d.ts.map

package/dist/providers/s3/primitives.js

@@ -0,0 +1,235 @@
+import { storageError } from "../../core/errors.js";
+import { decodeRequest } from "../../internal/request-validation.js";
+import { resolveRange } from "../../core/ranges.js";
+import { PutRequest } from "../../core/requests.js";
+import { Storage } from "../../core/storage.js";
+import { authority, encryptionHeaders, readEncryption } from "./config.js";
+import { S3Key, validateHeaders } from "./validation.js";
+import { condition, headers, metadata, refError, target } from "./object-mapping.js";
+import { enforceProfile } from "./profile.js";
+import { mapS3Error, request } from "./transport.js";
+import { PutOptions, nativeLimits } from "./native-models.js";
+import { uploadBody } from "./upload-body.js";
+import { listPage } from "./listing.js";
+import { Effect, Predicate, Schema, Stream } from "effect";
+import { DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, PutObjectCommand } from "@aws-sdk/client-s3";
+import { Readable } from "node:stream";
+
+// src/providers/s3/primitives.ts
+const verifyTarget = Effect.fnUntraced(function* (connection, input, operation) {
+	yield* enforceProfile(connection, operation, input);
+	if ("ref" in input) {
+		const error = refError(input.ref, connection.config, operation);
+		if (error) return yield* error;
+		yield* decodeRequest(S3Key, input.ref.key, operation, "s3");
+	} else yield* decodeRequest(S3Key, input.key, operation, "s3");
+});
+const putObject = Effect.fnUntraced(function* (connection, input, options = {}) {
+	const value = yield* decodeRequest(Schema.Struct({
+		...PutRequest.fields,
+		key: S3Key
+	}), input, "put", "s3");
+	yield* validateHeaders({
+		contentType: value.contentType,
+		contentEncoding: value.contentEncoding,
+		contentLanguage: value.contentLanguage,
+		contentDisposition: value.contentDisposition,
+		cacheControl: value.cacheControl,
+		customMetadata: value.customMetadata
+	}, "put");
+	const settings = yield* decodeRequest(PutOptions, options, "put", "s3");
+	yield* enforceProfile(connection, "put", {
+		...value,
+		checksum: settings
+	});
+	if (connection.profile && (settings.StorageClass && !connection.profile.storageClasses.includes(settings.StorageClass) || settings.Tagging && !connection.profile.tagging)) return yield* storageError("put", connection.profile.provider, {
+		_tag: "Unsupported",
+		capability: "storage-class-or-tagging"
+	}, "not-started");
+	const maximum = connection.profile?.limits.maximumSinglePutBytes ?? nativeLimits.maximumSinglePutBytes;
+	const output = yield* uploadBody(connection, {
+		...value,
+		body: input.body,
+		maxBytes: Math.min(value.maxBytes ?? maximum, maximum)
+	}, "put", (body, length) => request(connection, "put", true, (signal) => connection.client.send(new PutObjectCommand({
+		...settings,
+		...authority(connection.config),
+		...encryptionHeaders(connection.config.encryption),
+		...headers(value),
+		...condition(value.condition),
+		Key: input.key,
+		Body: body,
+		ContentLength: length
+	}), { abortSignal: signal })).pipe(Effect.map((result) => ({
+		result,
+		length
+	}))));
+	return { ...metadata(connection, input.key, {
+		...output.result,
+		...headers(input),
+		ContentLength: output.length
+	}) };
+});
+const head = Effect.fnUntraced(function* (connection, input) {
+	yield* verifyTarget(connection, input, "head");
+	const selected = target(input);
+	const output = yield* request(connection, "head", false, (signal) => connection.client.send(new HeadObjectCommand({
+		...authority(connection.config),
+		...readEncryption(connection.config.encryption),
+		...selected,
+		...connection.readChecksums === false ? {} : { ChecksumMode: "ENABLED" }
+	}), { abortSignal: signal }));
+	return metadata(connection, selected.Key, output);
+});
+const get = Effect.fnUntraced(function* (connection, input) {
+	yield* verifyTarget(connection, input, "get");
+	const selected = target(input);
+	const range = input.range;
+	const rangeHeader = range?._tag === "Bounded" ? `bytes=${String(range.start)}-${String(range.end)}` : range?._tag === "From" ? `bytes=${String(range.start)}-` : range?._tag === "Suffix" ? `bytes=-${String(range.length)}` : void 0;
+	const response = yield* Effect.acquireRelease(request(connection, "get", false, (signal) => connection.client.send(new GetObjectCommand({
+		...authority(connection.config),
+		...readEncryption(connection.config.encryption),
+		...selected,
+		Range: rangeHeader,
+		...connection.readChecksums === false ? {} : { ChecksumMode: "ENABLED" },
+		IfMatch: input.condition?._tag === "IfMatch" ? input.condition.etag : void 0,
+		IfNoneMatch: input.condition?._tag === "IfNoneMatch" ? input.condition.etag : void 0
+	}), { abortSignal: signal })).pipe(Effect.map((output) => ({
+		_tag: "Object",
+		output
+	})), Effect.catchReason("StorageError", "NotModified", () => Effect.succeed({ _tag: "NotModified" }))), (acquired) => {
+		if (acquired._tag !== "Object" || !acquired.output.Body) return Effect.void;
+		const native = acquired.output.Body;
+		if (native instanceof Readable) return Effect.sync(() => {
+			native.destroy();
+		});
+		if (native instanceof ReadableStream && !native.locked) return Effect.tryPromise({
+			try: () => native.cancel(),
+			catch: () => void 0
+		}).pipe(Effect.catch(() => Effect.logWarning("S3 response cancellation failed")));
+		return Effect.void;
+	}, { interruptible: true });
+	if (response._tag === "NotModified") return {
+		_tag: "NotModified",
+		metadata: { ref: "ref" in input ? input.ref : {
+			storeId: connection.config.storeId,
+			key: input.key
+		} }
+	};
+	const { output } = response;
+	if (!output.Body) return yield* storageError("get", "s3", {
+		_tag: "ProviderFailure",
+		code: "MissingBody"
+	});
+	const native = output.Body;
+	let body;
+	if (native instanceof Readable) body = Stream.fromAsyncIterable(native, (cause) => mapS3Error(cause, "get", false));
+	else {
+		const web = native.transformToWebStream();
+		yield* Effect.addFinalizer(() => web.locked ? Effect.void : Effect.tryPromise({
+			try: () => web.cancel(),
+			catch: () => storageError("get", "s3", {
+				_tag: "TransportFailure",
+				code: "CleanupFailed"
+			})
+		}).pipe(Effect.catch(() => Effect.logWarning("S3 response cancellation failed"))));
+		body = Stream.fromReadableStream({
+			evaluate: () => web,
+			onError: (cause) => mapS3Error(cause, "get", false)
+		});
+	}
+	let resolved;
+	if (range) {
+		const match = /^bytes (\d+)-(\d+)\/(\d+)$/u.exec(output.ContentRange ?? "");
+		if (!match) return yield* storageError("get", "s3", {
+			_tag: "ProviderFailure",
+			code: "MissingContentRange"
+		});
+		const [start, end, totalSize] = match.slice(1).map(Number);
+		if (start === void 0 || end === void 0 || totalSize === void 0 || ![
+			start,
+			end,
+			totalSize
+		].every(Number.isSafeInteger) || start < 0 || end < start || end >= totalSize || output.ContentLength !== end - start + 1) return yield* storageError("get", "s3", {
+			_tag: "ProviderFailure",
+			code: "InvalidContentRange"
+		});
+		resolved = {
+			start,
+			end,
+			totalSize
+		};
+		const expected = yield* Effect.fromResult(resolveRange(range, totalSize, "s3"));
+		if (expected.start !== start || expected.end !== end) return yield* storageError("get", "s3", {
+			_tag: "ProviderFailure",
+			code: "UnexpectedContentRange"
+		});
+	}
+	let received = 0;
+	body = body.pipe(Stream.mapEffect((chunk) => Effect.gen(function* () {
+		if (!Predicate.isUint8Array(chunk)) return yield* storageError("get", "s3", {
+			_tag: "ProviderFailure",
+			code: "InvalidBodyChunk"
+		});
+		received += chunk.byteLength;
+		if (output.ContentLength !== void 0 && received > output.ContentLength) return yield* storageError("get", "s3", {
+			_tag: "LengthMismatch",
+			expected: output.ContentLength,
+			actual: received
+		});
+		return chunk;
+	})), Stream.concat(Stream.drain(Stream.fromEffect(Effect.suspend(() => output.ContentLength !== void 0 && received !== output.ContentLength ? Effect.fail(storageError("get", "s3", {
+		_tag: "LengthMismatch",
+		expected: output.ContentLength,
+		actual: received
+	})) : Effect.void)))));
+	return {
+		_tag: "Object",
+		metadata: metadata(connection, selected.Key, {
+			...output,
+			ContentLength: resolved?.totalSize ?? output.ContentLength
+		}),
+		contentLength: output.ContentLength,
+		range: resolved,
+		body
+	};
+});
+const remove = Effect.fnUntraced(function* (connection, input) {
+	yield* verifyTarget(connection, input, "delete");
+	yield* request(connection, "delete", true, (signal) => connection.client.send(new DeleteObjectCommand({
+		...authority(connection.config),
+		...target(input),
+		IfMatch: input.condition?.etag
+	}), { abortSignal: signal }));
+});
+function primitives(connection) {
+	return Storage.make({
+		provider: connection.profile?.provider ?? "s3",
+		storeId: connection.config.storeId,
+		capabilities: connection.profile?.capabilities ?? {
+			putConditions: ["create-only", "if-match"],
+			getConditions: ["if-match", "if-none-match"],
+			deleteConditions: ["if-match"],
+			ranges: [
+				"bounded",
+				"from",
+				"suffix"
+			],
+			versionedReads: "history",
+			list: {
+				maxPageSize: 1e3,
+				delimiter: true,
+				cursorPersistence: "provider",
+				snapshot: false
+			}
+		},
+		put: (input) => putObject(connection, input),
+		get: (input) => get(connection, input),
+		head: (input) => head(connection, input),
+		delete: (input) => remove(connection, input),
+		listPage: (input) => listPage(connection, input)
+	});
+}
+
+export { primitives, putObject };
+//# sourceMappingURL=primitives.js.map

package/dist/providers/s3/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","names":[],"sources":["../../../src/providers/s3/primitives.ts"],"sourcesContent":["import { Readable } from \"node:stream\";\n\nimport { Effect, Predicate, Schema, Stream } from \"effect\";\nimport type { Scope } from \"effect\";\n\nimport {\n  DeleteObjectCommand,\n  GetObjectCommand,\n  HeadObjectCommand,\n  PutObjectCommand,\n} from \"@aws-sdk/client-s3\";\nimport type { PutObjectCommandInput } from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport type { StorageError } from \"../../core/errors.js\";\nimport type { ObjectMetadata } from \"../../core/object.js\";\nimport { resolveRange } from \"../../core/ranges.js\";\nimport { PutRequest } from \"../../core/requests.js\";\nimport type { GetRequest, GetResult, HeadRequest, DeleteRequest } from \"../../core/requests.js\";\nimport { Storage } from \"../../core/storage.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { authority, encryptionHeaders, readEncryption } from \"./config.js\";\nimport type { S3Connection } from \"./config.js\";\nimport { listPage } from \"./listing.js\";\nimport { PutOptions, nativeLimits } from \"./native-models.js\";\nimport { condition, headers, metadata, refError, target } from \"./object-mapping.js\";\nimport { enforceProfile } from \"./profile.js\";\nimport { mapS3Error, request } from \"./transport.js\";\nimport { uploadBody } from \"./upload-body.js\";\nimport { S3Key, validateHeaders } from \"./validation.js\";\n\nexport type S3PutOptions = Pick<\n  PutObjectCommandInput,\n  | \"ChecksumAlgorithm\"\n  | \"ChecksumCRC32\"\n  | \"ChecksumCRC32C\"\n  | \"ChecksumCRC64NVME\"\n  | \"ChecksumSHA1\"\n  | \"ChecksumSHA256\"\n  | \"ChecksumSHA512\"\n  | \"ChecksumMD5\"\n  | \"ChecksumXXHASH64\"\n  | \"ChecksumXXHASH3\"\n  | \"ChecksumXXHASH128\"\n  | \"StorageClass\"\n  | \"Tagging\"\n>;\n\nconst verifyTarget = Effect.fnUntraced(function* (\n  connection: S3Connection,\n  input: HeadRequest,\n  operation: string,\n) {\n  yield* enforceProfile(connection, operation, input);\n  if (\"ref\" in input) {\n    const error = refError(input.ref, connection.config, operation);\n    if (error) return yield* error;\n    yield* decodeRequest(S3Key, input.ref.key, operation, \"s3\");\n  } else {\n    yield* decodeRequest(S3Key, input.key, operation, \"s3\");\n  }\n});\n\nexport const putObject = Effect.fnUntraced(function* <E = never, R = never>(\n  connection: S3Connection,\n  input: PutRequest<E, R>,\n  options: S3PutOptions = {},\n) {\n  const value = yield* decodeRequest(\n    Schema.Struct({ ...PutRequest.fields, key: S3Key }),\n    input,\n    \"put\",\n    \"s3\",\n  );\n  yield* validateHeaders(\n    {\n      contentType: value.contentType,\n      contentEncoding: value.contentEncoding,\n      contentLanguage: value.contentLanguage,\n      contentDisposition: value.contentDisposition,\n      cacheControl: value.cacheControl,\n      customMetadata: value.customMetadata,\n    },\n    \"put\",\n  );\n  const settings = yield* decodeRequest(PutOptions, options, \"put\", \"s3\");\n  yield* enforceProfile(connection, \"put\", { ...value, checksum: settings });\n  if (\n    connection.profile &&\n    ((settings.StorageClass &&\n      !connection.profile.storageClasses.includes(settings.StorageClass)) ||\n      (settings.Tagging && !connection.profile.tagging))\n  )\n    return yield* storageError(\n      \"put\",\n      connection.profile.provider,\n      { _tag: \"Unsupported\", capability: \"storage-class-or-tagging\" },\n      \"not-started\",\n    );\n  const maximum =\n    connection.profile?.limits.maximumSinglePutBytes ?? nativeLimits.maximumSinglePutBytes;\n  const output = yield* uploadBody(\n    connection,\n    {\n      ...value,\n      body: input.body,\n      maxBytes: Math.min(value.maxBytes ?? maximum, maximum),\n    },\n    \"put\",\n    (body, length) =>\n      request(connection, \"put\", true, (signal) =>\n        connection.client.send(\n          new PutObjectCommand({\n            ...settings,\n            ...authority(connection.config),\n            ...encryptionHeaders(connection.config.encryption),\n            ...headers(value),\n            ...condition(value.condition),\n            Key: input.key,\n            Body: body,\n            ContentLength: length,\n          }),\n          { abortSignal: signal },\n        ),\n      ).pipe(Effect.map((result) => ({ result, length }))),\n  );\n\n  // A racing HEAD would identify a different write; PUT only reports fields observed by this request.\n  return {\n    ...metadata(connection, input.key, {\n      ...output.result,\n      ...headers(input),\n      ContentLength: output.length,\n    }),\n  } satisfies ObjectMetadata;\n});\n\nconst head = Effect.fnUntraced(function* (connection: S3Connection, input: HeadRequest) {\n  yield* verifyTarget(connection, input, \"head\");\n  const selected = target(input);\n  const output = yield* request(connection, \"head\", false, (signal) =>\n    connection.client.send(\n      new HeadObjectCommand({\n        ...authority(connection.config),\n        ...readEncryption(connection.config.encryption),\n        ...selected,\n        ...(connection.readChecksums === false ? {} : { ChecksumMode: \"ENABLED\" as const }),\n      }),\n      { abortSignal: signal },\n    ),\n  );\n  return metadata(connection, selected.Key, output);\n});\n\nconst get = Effect.fnUntraced(function* (\n  connection: S3Connection,\n  input: GetRequest,\n): Effect.fn.Return<GetResult, StorageError, Scope.Scope> {\n  yield* verifyTarget(connection, input, \"get\");\n  const selected = target(input);\n  const range = input.range;\n  const rangeHeader =\n    range?._tag === \"Bounded\"\n      ? `bytes=${String(range.start)}-${String(range.end)}`\n      : range?._tag === \"From\"\n        ? `bytes=${String(range.start)}-`\n        : range?._tag === \"Suffix\"\n          ? `bytes=-${String(range.length)}`\n          : undefined;\n  const response = yield* Effect.acquireRelease(\n    request(connection, \"get\", false, (signal) =>\n      connection.client.send(\n        new GetObjectCommand({\n          ...authority(connection.config),\n          ...readEncryption(connection.config.encryption),\n          ...selected,\n          Range: rangeHeader,\n          ...(connection.readChecksums === false ? {} : { ChecksumMode: \"ENABLED\" as const }),\n          IfMatch: input.condition?._tag === \"IfMatch\" ? input.condition.etag : undefined,\n          IfNoneMatch: input.condition?._tag === \"IfNoneMatch\" ? input.condition.etag : undefined,\n        }),\n        { abortSignal: signal },\n      ),\n    ).pipe(\n      Effect.map((output) => ({ _tag: \"Object\" as const, output })),\n      Effect.catchReason(\"StorageError\", \"NotModified\", () =>\n        Effect.succeed({ _tag: \"NotModified\" as const }),\n      ),\n    ),\n    (acquired) => {\n      if (acquired._tag !== \"Object\" || !acquired.output.Body) return Effect.void;\n      const native = acquired.output.Body;\n      if (native instanceof Readable)\n        return Effect.sync(() => {\n          native.destroy();\n        });\n      if (native instanceof ReadableStream && !native.locked)\n        return Effect.tryPromise({ try: () => native.cancel(), catch: () => undefined }).pipe(\n          Effect.catch(() => Effect.logWarning(\"S3 response cancellation failed\")),\n        );\n      return Effect.void;\n    },\n    { interruptible: true },\n  );\n\n  if (response._tag === \"NotModified\") {\n    return {\n      _tag: \"NotModified\",\n      metadata: {\n        ref: \"ref\" in input ? input.ref : { storeId: connection.config.storeId, key: input.key },\n      },\n    };\n  }\n  const { output } = response;\n  if (!output.Body)\n    return yield* storageError(\"get\", \"s3\", { _tag: \"ProviderFailure\", code: \"MissingBody\" });\n\n  const native = output.Body;\n  let body: Stream.Stream<Uint8Array, StorageError>;\n  if (native instanceof Readable) {\n    body = Stream.fromAsyncIterable(native, (cause) => mapS3Error(cause, \"get\", false));\n  } else {\n    const web = native.transformToWebStream();\n    yield* Effect.addFinalizer(() =>\n      web.locked\n        ? Effect.void\n        : Effect.tryPromise({\n            try: () => web.cancel(),\n            catch: () =>\n              storageError(\"get\", \"s3\", { _tag: \"TransportFailure\", code: \"CleanupFailed\" }),\n          }).pipe(Effect.catch(() => Effect.logWarning(\"S3 response cancellation failed\"))),\n    );\n    body = Stream.fromReadableStream({\n      evaluate: () => web,\n      onError: (cause) => mapS3Error(cause, \"get\", false),\n    });\n  }\n\n  let resolved: { start: number; end: number; totalSize: number } | undefined;\n  if (range) {\n    const match = /^bytes (\\d+)-(\\d+)\\/(\\d+)$/u.exec(output.ContentRange ?? \"\");\n    if (!match)\n      return yield* storageError(\"get\", \"s3\", {\n        _tag: \"ProviderFailure\",\n        code: \"MissingContentRange\",\n      });\n    const [start, end, totalSize] = match.slice(1).map(Number);\n    if (\n      start === undefined ||\n      end === undefined ||\n      totalSize === undefined ||\n      ![start, end, totalSize].every(Number.isSafeInteger) ||\n      start < 0 ||\n      end < start ||\n      end >= totalSize ||\n      output.ContentLength !== end - start + 1\n    )\n      return yield* storageError(\"get\", \"s3\", {\n        _tag: \"ProviderFailure\",\n        code: \"InvalidContentRange\",\n      });\n    resolved = { start, end, totalSize };\n    const expected = yield* Effect.fromResult(resolveRange(range, totalSize, \"s3\"));\n    if (expected.start !== start || expected.end !== end)\n      return yield* storageError(\"get\", \"s3\", {\n        _tag: \"ProviderFailure\",\n        code: \"UnexpectedContentRange\",\n      });\n  }\n\n  let received = 0;\n  body = body.pipe(\n    Stream.mapEffect((chunk) =>\n      Effect.gen(function* () {\n        if (!Predicate.isUint8Array(chunk))\n          return yield* storageError(\"get\", \"s3\", {\n            _tag: \"ProviderFailure\",\n            code: \"InvalidBodyChunk\",\n          });\n        received += chunk.byteLength;\n        if (output.ContentLength !== undefined && received > output.ContentLength)\n          return yield* storageError(\"get\", \"s3\", {\n            _tag: \"LengthMismatch\",\n            expected: output.ContentLength,\n            actual: received,\n          });\n        return chunk;\n      }),\n    ),\n    Stream.concat(\n      Stream.drain(\n        Stream.fromEffect(\n          Effect.suspend(() =>\n            output.ContentLength !== undefined && received !== output.ContentLength\n              ? Effect.fail(\n                  storageError(\"get\", \"s3\", {\n                    _tag: \"LengthMismatch\",\n                    expected: output.ContentLength,\n                    actual: received,\n                  }),\n                )\n              : Effect.void,\n          ),\n        ),\n      ),\n    ),\n  );\n\n  return {\n    _tag: \"Object\",\n    metadata: metadata(connection, selected.Key, {\n      ...output,\n      ContentLength: resolved?.totalSize ?? output.ContentLength,\n    }),\n    contentLength: output.ContentLength,\n    range: resolved,\n    body,\n  };\n});\n\nconst remove = Effect.fnUntraced(function* (connection: S3Connection, input: DeleteRequest) {\n  yield* verifyTarget(connection, input, \"delete\");\n  yield* request(connection, \"delete\", true, (signal) =>\n    connection.client.send(\n      new DeleteObjectCommand({\n        ...authority(connection.config),\n        ...target(input),\n        IfMatch: input.condition?.etag,\n      }),\n      { abortSignal: signal },\n    ),\n  );\n});\n\nexport function primitives(connection: S3Connection) {\n  return Storage.make({\n    provider: connection.profile?.provider ?? \"s3\",\n    storeId: connection.config.storeId,\n    capabilities: connection.profile?.capabilities ?? {\n      putConditions: [\"create-only\", \"if-match\"],\n      getConditions: [\"if-match\", \"if-none-match\"],\n      deleteConditions: [\"if-match\"],\n      ranges: [\"bounded\", \"from\", \"suffix\"],\n      versionedReads: \"history\",\n      list: { maxPageSize: 1000, delimiter: true, cursorPersistence: \"provider\", snapshot: false },\n    },\n    put: (input) => putObject(connection, input),\n    get: (input) => get(connection, input),\n    head: (input) => head(connection, input),\n    delete: (input) => remove(connection, input),\n    listPage: (input) => listPage(connection, input),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgDA,MAAM,eAAe,OAAO,WAAW,WACrC,YACA,OACA,WACA;CACA,OAAO,eAAe,YAAY,WAAW,KAAK;CAClD,IAAI,SAAS,OAAO;EAClB,MAAM,QAAQ,SAAS,MAAM,KAAK,WAAW,QAAQ,SAAS;EAC9D,IAAI,OAAO,OAAO,OAAO;EACzB,OAAO,cAAc,OAAO,MAAM,IAAI,KAAK,WAAW,IAAI;CAC5D,OACE,OAAO,cAAc,OAAO,MAAM,KAAK,WAAW,IAAI;AAE1D,CAAC;AAED,MAAa,YAAY,OAAO,WAAW,WACzC,YACA,OACA,UAAwB,CAAC,GACzB;CACA,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO;EAAE,GAAG,WAAW;EAAQ,KAAK;CAAM,CAAC,GAClD,OACA,OACA,IACF;CACA,OAAO,gBACL;EACE,aAAa,MAAM;EACnB,iBAAiB,MAAM;EACvB,iBAAiB,MAAM;EACvB,oBAAoB,MAAM;EAC1B,cAAc,MAAM;EACpB,gBAAgB,MAAM;CACxB,GACA,KACF;CACA,MAAM,WAAW,OAAO,cAAc,YAAY,SAAS,OAAO,IAAI;CACtE,OAAO,eAAe,YAAY,OAAO;EAAE,GAAG;EAAO,UAAU;CAAS,CAAC;CACzE,IACE,WAAW,YACT,SAAS,gBACT,CAAC,WAAW,QAAQ,eAAe,SAAS,SAAS,YAAY,KAChE,SAAS,WAAW,CAAC,WAAW,QAAQ,UAE3C,OAAO,OAAO,aACZ,OACA,WAAW,QAAQ,UACnB;EAAE,MAAM;EAAe,YAAY;CAA2B,GAC9D,aACF;CACF,MAAM,UACJ,WAAW,SAAS,OAAO,yBAAyB,aAAa;CACnE,MAAM,SAAS,OAAO,WACpB,YACA;EACE,GAAG;EACH,MAAM,MAAM;EACZ,UAAU,KAAK,IAAI,MAAM,YAAY,SAAS,OAAO;CACvD,GACA,QACC,MAAM,WACL,QAAQ,YAAY,OAAO,OAAO,WAChC,WAAW,OAAO,KAChB,IAAI,iBAAiB;EACnB,GAAG;EACH,GAAG,UAAU,WAAW,MAAM;EAC9B,GAAG,kBAAkB,WAAW,OAAO,UAAU;EACjD,GAAG,QAAQ,KAAK;EAChB,GAAG,UAAU,MAAM,SAAS;EAC5B,KAAK,MAAM;EACX,MAAM;EACN,eAAe;CACjB,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY;EAAE;EAAQ;CAAO,EAAE,CAAC,CACvD;CAGA,OAAO,EACL,GAAG,SAAS,YAAY,MAAM,KAAK;EACjC,GAAG,OAAO;EACV,GAAG,QAAQ,KAAK;EAChB,eAAe,OAAO;CACxB,CAAC,EACH;AACF,CAAC;AAED,MAAM,OAAO,OAAO,WAAW,WAAW,YAA0B,OAAoB;CACtF,OAAO,aAAa,YAAY,OAAO,MAAM;CAC7C,MAAM,WAAW,OAAO,KAAK;CAC7B,MAAM,SAAS,OAAO,QAAQ,YAAY,QAAQ,QAAQ,WACxD,WAAW,OAAO,KAChB,IAAI,kBAAkB;EACpB,GAAG,UAAU,WAAW,MAAM;EAC9B,GAAG,eAAe,WAAW,OAAO,UAAU;EAC9C,GAAG;EACH,GAAI,WAAW,kBAAkB,QAAQ,CAAC,IAAI,EAAE,cAAc,UAAmB;CACnF,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;CACA,OAAO,SAAS,YAAY,SAAS,KAAK,MAAM;AAClD,CAAC;AAED,MAAM,MAAM,OAAO,WAAW,WAC5B,YACA,OACwD;CACxD,OAAO,aAAa,YAAY,OAAO,KAAK;CAC5C,MAAM,WAAW,OAAO,KAAK;CAC7B,MAAM,QAAQ,MAAM;CACpB,MAAM,cACJ,OAAO,SAAS,YACZ,SAAS,OAAO,MAAM,KAAK,EAAE,GAAG,OAAO,MAAM,GAAG,MAChD,OAAO,SAAS,SACd,SAAS,OAAO,MAAM,KAAK,EAAE,KAC7B,OAAO,SAAS,WACd,UAAU,OAAO,MAAM,MAAM,MAC7B;CACV,MAAM,WAAW,OAAO,OAAO,eAC7B,QAAQ,YAAY,OAAO,QAAQ,WACjC,WAAW,OAAO,KAChB,IAAI,iBAAiB;EACnB,GAAG,UAAU,WAAW,MAAM;EAC9B,GAAG,eAAe,WAAW,OAAO,UAAU;EAC9C,GAAG;EACH,OAAO;EACP,GAAI,WAAW,kBAAkB,QAAQ,CAAC,IAAI,EAAE,cAAc,UAAmB;EACjF,SAAS,MAAM,WAAW,SAAS,YAAY,MAAM,UAAU,OAAO;EACtE,aAAa,MAAM,WAAW,SAAS,gBAAgB,MAAM,UAAU,OAAO;CAChF,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF,CAAC,CAAC,KACA,OAAO,KAAK,YAAY;EAAE,MAAM;EAAmB;CAAO,EAAE,GAC5D,OAAO,YAAY,gBAAgB,qBACjC,OAAO,QAAQ,EAAE,MAAM,cAAuB,CAAC,CACjD,CACF,IACC,aAAa;EACZ,IAAI,SAAS,SAAS,YAAY,CAAC,SAAS,OAAO,MAAM,OAAO,OAAO;EACvE,MAAM,SAAS,SAAS,OAAO;EAC/B,IAAI,kBAAkB,UACpB,OAAO,OAAO,WAAW;GACvB,OAAO,QAAQ;EACjB,CAAC;EACH,IAAI,kBAAkB,kBAAkB,CAAC,OAAO,QAC9C,OAAO,OAAO,WAAW;GAAE,WAAW,OAAO,OAAO;GAAG,aAAa;EAAU,CAAC,CAAC,CAAC,KAC/E,OAAO,YAAY,OAAO,WAAW,iCAAiC,CAAC,CACzE;EACF,OAAO,OAAO;CAChB,GACA,EAAE,eAAe,KAAK,CACxB;CAEA,IAAI,SAAS,SAAS,eACpB,OAAO;EACL,MAAM;EACN,UAAU,EACR,KAAK,SAAS,QAAQ,MAAM,MAAM;GAAE,SAAS,WAAW,OAAO;GAAS,KAAK,MAAM;EAAI,EACzF;CACF;CAEF,MAAM,EAAE,WAAW;CACnB,IAAI,CAAC,OAAO,MACV,OAAO,OAAO,aAAa,OAAO,MAAM;EAAE,MAAM;EAAmB,MAAM;CAAc,CAAC;CAE1F,MAAM,SAAS,OAAO;CACtB,IAAI;CACJ,IAAI,kBAAkB,UACpB,OAAO,OAAO,kBAAkB,SAAS,UAAU,WAAW,OAAO,OAAO,KAAK,CAAC;MAC7E;EACL,MAAM,MAAM,OAAO,qBAAqB;EACxC,OAAO,OAAO,mBACZ,IAAI,SACA,OAAO,OACP,OAAO,WAAW;GAChB,WAAW,IAAI,OAAO;GACtB,aACE,aAAa,OAAO,MAAM;IAAE,MAAM;IAAoB,MAAM;GAAgB,CAAC;EACjF,CAAC,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,WAAW,iCAAiC,CAAC,CAAC,CACtF;EACA,OAAO,OAAO,mBAAmB;GAC/B,gBAAgB;GAChB,UAAU,UAAU,WAAW,OAAO,OAAO,KAAK;EACpD,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,OAAO;EACT,MAAM,QAAQ,8BAA8B,KAAK,OAAO,gBAAgB,EAAE;EAC1E,IAAI,CAAC,OACH,OAAO,OAAO,aAAa,OAAO,MAAM;GACtC,MAAM;GACN,MAAM;EACR,CAAC;EACH,MAAM,CAAC,OAAO,KAAK,aAAa,MAAM,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM;EACzD,IACE,UAAU,UACV,QAAQ,UACR,cAAc,UACd,CAAC;GAAC;GAAO;GAAK;EAAS,CAAC,CAAC,MAAM,OAAO,aAAa,KACnD,QAAQ,KACR,MAAM,SACN,OAAO,aACP,OAAO,kBAAkB,MAAM,QAAQ,GAEvC,OAAO,OAAO,aAAa,OAAO,MAAM;GACtC,MAAM;GACN,MAAM;EACR,CAAC;EACH,WAAW;GAAE;GAAO;GAAK;EAAU;EACnC,MAAM,WAAW,OAAO,OAAO,WAAW,aAAa,OAAO,WAAW,IAAI,CAAC;EAC9E,IAAI,SAAS,UAAU,SAAS,SAAS,QAAQ,KAC/C,OAAO,OAAO,aAAa,OAAO,MAAM;GACtC,MAAM;GACN,MAAM;EACR,CAAC;CACL;CAEA,IAAI,WAAW;CACf,OAAO,KAAK,KACV,OAAO,WAAW,UAChB,OAAO,IAAI,aAAa;EACtB,IAAI,CAAC,UAAU,aAAa,KAAK,GAC/B,OAAO,OAAO,aAAa,OAAO,MAAM;GACtC,MAAM;GACN,MAAM;EACR,CAAC;EACH,YAAY,MAAM;EAClB,IAAI,OAAO,kBAAkB,UAAa,WAAW,OAAO,eAC1D,OAAO,OAAO,aAAa,OAAO,MAAM;GACtC,MAAM;GACN,UAAU,OAAO;GACjB,QAAQ;EACV,CAAC;EACH,OAAO;CACT,CAAC,CACH,GACA,OAAO,OACL,OAAO,MACL,OAAO,WACL,OAAO,cACL,OAAO,kBAAkB,UAAa,aAAa,OAAO,gBACtD,OAAO,KACL,aAAa,OAAO,MAAM;EACxB,MAAM;EACN,UAAU,OAAO;EACjB,QAAQ;CACV,CAAC,CACH,IACA,OAAO,IACb,CACF,CACF,CACF,CACF;CAEA,OAAO;EACL,MAAM;EACN,UAAU,SAAS,YAAY,SAAS,KAAK;GAC3C,GAAG;GACH,eAAe,UAAU,aAAa,OAAO;EAC/C,CAAC;EACD,eAAe,OAAO;EACtB,OAAO;EACP;CACF;AACF,CAAC;AAED,MAAM,SAAS,OAAO,WAAW,WAAW,YAA0B,OAAsB;CAC1F,OAAO,aAAa,YAAY,OAAO,QAAQ;CAC/C,OAAO,QAAQ,YAAY,UAAU,OAAO,WAC1C,WAAW,OAAO,KAChB,IAAI,oBAAoB;EACtB,GAAG,UAAU,WAAW,MAAM;EAC9B,GAAG,OAAO,KAAK;EACf,SAAS,MAAM,WAAW;CAC5B,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;AACF,CAAC;AAED,SAAgB,WAAW,YAA0B;CACnD,OAAO,QAAQ,KAAK;EAClB,UAAU,WAAW,SAAS,YAAY;EAC1C,SAAS,WAAW,OAAO;EAC3B,cAAc,WAAW,SAAS,gBAAgB;GAChD,eAAe,CAAC,eAAe,UAAU;GACzC,eAAe,CAAC,YAAY,eAAe;GAC3C,kBAAkB,CAAC,UAAU;GAC7B,QAAQ;IAAC;IAAW;IAAQ;GAAQ;GACpC,gBAAgB;GAChB,MAAM;IAAE,aAAa;IAAM,WAAW;IAAM,mBAAmB;IAAY,UAAU;GAAM;EAC7F;EACA,MAAM,UAAU,UAAU,YAAY,KAAK;EAC3C,MAAM,UAAU,IAAI,YAAY,KAAK;EACrC,OAAO,UAAU,KAAK,YAAY,KAAK;EACvC,SAAS,UAAU,OAAO,YAAY,KAAK;EAC3C,WAAW,UAAU,SAAS,YAAY,KAAK;CACjD,CAAC;AACH"}

package/dist/providers/s3/profile.d.ts

@@ -0,0 +1,25 @@
+import "../../core/object.js";
+import { StorageCapabilities } from "../../core/capabilities.js";
+import "../../index.js";
+import { nativeLimits } from "./native-models.js";
+import "./multipart.js";
+import "./config.js";
+import { Effect } from "effect";
+export interface S3Profile {
+  readonly provider: string;
+  readonly bucketTier?: "standard" | "cold";
+  readonly configuration: string;
+  readonly capabilities: StorageCapabilities;
+  readonly limits: Omit<typeof nativeLimits, "maximumParts"> & {
+    readonly maximumParts: number;
+  };
+  readonly maximumObjectBytes: number;
+  readonly checksums: boolean;
+  readonly completeConditions: ReadonlyArray<"create-only" | "if-match">;
+  readonly copy: "endpoint" | "bucket" | "none";
+  readonly copyPartConditions: boolean;
+  readonly post: boolean;
+  readonly storageClasses: readonly string[];
+  readonly tagging: boolean;
+}
+//# sourceMappingURL=profile.d.ts.map

package/dist/providers/s3/profile.js

@@ -0,0 +1,46 @@
+import { storageError } from "../../core/errors.js";
+import { Effect } from "effect";
+
+// src/providers/s3/profile.ts
+/** Applied before source acquisition or signing, including native escape-hatch methods. */
+const enforceProfile = Effect.fnUntraced(function* (connection, operation, input) {
+	const p = connection.profile;
+	if (!p) return;
+	const reject = (capability) => storageError(operation, p.provider, {
+		_tag: "Unsupported",
+		capability
+	}, "not-started");
+	if (p.capabilities.versionedReads === "none" && (input.ref?.version || input.source?.version || input.upload?.ref.version)) return yield* reject("native-versions");
+	const mutation = operation === "sign" ? input.method : operation;
+	const conditions = mutation === "put" || mutation === "PUT" ? p.capabilities.putConditions : mutation === "complete" ? p.completeConditions : [];
+	if (input.condition && !["get", "head"].includes(operation)) {
+		const kind = input.condition._tag === "CreateOnly" ? "create-only" : "if-match";
+		if (!conditions.includes(kind)) return yield* reject(`${operation}-condition`);
+	}
+	if (input.partNumber !== void 0 && input.partNumber > p.limits.maximumParts) return yield* reject("maximum-parts");
+	if (input.parts && (input.parts.length > p.limits.maximumParts || input.parts.some((part) => part.partNumber > p.limits.maximumParts || part.size !== void 0 && part.size > p.limits.maximumPartBytes))) return yield* reject("part-limits");
+	if (input.parts && input.parts.reduce((sum, part) => sum + (part.size ?? 0), 0) > p.maximumObjectBytes) return yield* reject("maximum-object-bytes");
+	const maximum = operation === "uploadPart" || operation === "signPart" ? p.limits.maximumPartBytes : p.limits.maximumSinglePutBytes;
+	if (input.contentLength !== void 0 && input.contentLength > maximum) return yield* reject("maximum-request-bytes");
+	if (!p.checksums && (Object.entries(input.checksum ?? {}).some(([key, value]) => key.startsWith("Checksum") && value !== void 0) || input.upload?.checksumAlgorithm || input.upload?.checksumType || input.parts?.some((part) => part.checksums?.length))) return yield* reject("unqualified-checksum-combination");
+	if (p.checksums) {
+		const algorithm = input.checksum?.ChecksumAlgorithm ?? input.upload?.checksumAlgorithm;
+		const type = input.checksum?.ChecksumType ?? input.upload?.checksumType;
+		const allowed = [
+			"CRC32",
+			"CRC32C",
+			"CRC64NVME",
+			"SHA1",
+			"SHA256"
+		];
+		if (algorithm && !allowed.includes(algorithm) || Object.keys(input.checksum ?? {}).some((key) => key.startsWith("Checksum") && ![
+			"ChecksumAlgorithm",
+			"ChecksumType",
+			...allowed.map((a) => `Checksum${a}`)
+		].includes(key))) return yield* reject("checksum-algorithm");
+		if (algorithm === "CRC64NVME" && type === "COMPOSITE" || ["SHA1", "SHA256"].includes(algorithm ?? "") && type === "FULL_OBJECT") return yield* reject("checksum-type");
+	}
+});
+
+export { enforceProfile };
+//# sourceMappingURL=profile.js.map

package/dist/providers/s3/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","names":[],"sources":["../../../src/providers/s3/profile.ts"],"sourcesContent":["import { Effect } from \"effect\";\n\nimport type { StorageCapabilities } from \"../../core/capabilities.js\";\nimport { storageError } from \"../../core/errors.js\";\nimport type { ObjectRef } from \"../../core/object.js\";\nimport type { S3Connection } from \"./config.js\";\nimport type { S3ChecksumOptions } from \"./multipart.js\";\nimport type { nativeLimits } from \"./native-models.js\";\n\nexport interface S3Profile {\n  readonly provider: string;\n  readonly bucketTier?: \"standard\" | \"cold\";\n  readonly configuration: string;\n  readonly capabilities: StorageCapabilities;\n  readonly limits: Omit<typeof nativeLimits, \"maximumParts\"> & { readonly maximumParts: number };\n  readonly maximumObjectBytes: number;\n  readonly checksums: boolean;\n  readonly completeConditions: ReadonlyArray<\"create-only\" | \"if-match\">;\n  readonly copy: \"endpoint\" | \"bucket\" | \"none\";\n  readonly copyPartConditions: boolean;\n  readonly post: boolean;\n  readonly storageClasses: readonly string[];\n  readonly tagging: boolean;\n}\n\ninterface ProfileRequest {\n  readonly key?: string | undefined;\n  readonly ref?: ObjectRef | undefined;\n  readonly source?: ObjectRef | undefined;\n  readonly upload?:\n    | {\n        readonly ref: ObjectRef;\n        readonly checksumAlgorithm?: string | undefined;\n        readonly checksumType?: string | undefined;\n      }\n    | undefined;\n  readonly condition?: { readonly _tag: string } | undefined;\n  readonly method?: string | undefined;\n  readonly checksum?: S3ChecksumOptions | undefined;\n  readonly partNumber?: number | undefined;\n  readonly contentLength?: number | undefined;\n  readonly parts?:\n    | ReadonlyArray<{\n        readonly size?: number | undefined;\n        readonly partNumber: number;\n        readonly checksums?:\n          | ReadonlyArray<{ readonly algorithm: string; readonly scope: string }>\n          | undefined;\n      }>\n    | undefined;\n}\n\n/** Applied before source acquisition or signing, including native escape-hatch methods. */\nexport const enforceProfile = Effect.fnUntraced(function* (\n  connection: S3Connection,\n  operation: string,\n  input: ProfileRequest,\n) {\n  const p = connection.profile;\n  if (!p) return;\n  const reject = (capability: string) =>\n    storageError(operation, p.provider, { _tag: \"Unsupported\", capability }, \"not-started\");\n  if (\n    p.capabilities.versionedReads === \"none\" &&\n    (input.ref?.version || input.source?.version || input.upload?.ref.version)\n  )\n    return yield* reject(\"native-versions\");\n  const mutation = operation === \"sign\" ? input.method : operation;\n  const conditions =\n    mutation === \"put\" || mutation === \"PUT\"\n      ? p.capabilities.putConditions\n      : mutation === \"complete\"\n        ? p.completeConditions\n        : [];\n  if (input.condition && ![\"get\", \"head\"].includes(operation)) {\n    const kind = input.condition._tag === \"CreateOnly\" ? \"create-only\" : \"if-match\";\n    if (!conditions.includes(kind)) return yield* reject(`${operation}-condition`);\n  }\n  if (input.partNumber !== undefined && input.partNumber > p.limits.maximumParts)\n    return yield* reject(\"maximum-parts\");\n  if (\n    input.parts &&\n    (input.parts.length > p.limits.maximumParts ||\n      input.parts.some(\n        (part) =>\n          part.partNumber > p.limits.maximumParts ||\n          (part.size !== undefined && part.size > p.limits.maximumPartBytes),\n      ))\n  )\n    return yield* reject(\"part-limits\");\n  if (\n    input.parts &&\n    input.parts.reduce((sum, part) => sum + (part.size ?? 0), 0) > p.maximumObjectBytes\n  )\n    return yield* reject(\"maximum-object-bytes\");\n  const maximum =\n    operation === \"uploadPart\" || operation === \"signPart\"\n      ? p.limits.maximumPartBytes\n      : p.limits.maximumSinglePutBytes;\n  if (input.contentLength !== undefined && input.contentLength > maximum)\n    return yield* reject(\"maximum-request-bytes\");\n  if (\n    !p.checksums &&\n    (Object.entries(input.checksum ?? {}).some(\n      ([key, value]) => key.startsWith(\"Checksum\") && value !== undefined,\n    ) ||\n      input.upload?.checksumAlgorithm ||\n      input.upload?.checksumType ||\n      input.parts?.some((part) => part.checksums?.length))\n  )\n    return yield* reject(\"unqualified-checksum-combination\");\n  if (p.checksums) {\n    const algorithm = input.checksum?.ChecksumAlgorithm ?? input.upload?.checksumAlgorithm;\n    const type = input.checksum?.ChecksumType ?? input.upload?.checksumType;\n    const allowed = [\"CRC32\", \"CRC32C\", \"CRC64NVME\", \"SHA1\", \"SHA256\"];\n    if (\n      (algorithm && !allowed.includes(algorithm)) ||\n      Object.keys(input.checksum ?? {}).some(\n        (key) =>\n          key.startsWith(\"Checksum\") &&\n          ![\"ChecksumAlgorithm\", \"ChecksumType\", ...allowed.map((a) => `Checksum${a}`)].includes(\n            key,\n          ),\n      )\n    )\n      return yield* reject(\"checksum-algorithm\");\n    if (\n      (algorithm === \"CRC64NVME\" && type === \"COMPOSITE\") ||\n      ([\"SHA1\", \"SHA256\"].includes(algorithm ?? \"\") && type === \"FULL_OBJECT\")\n    )\n      return yield* reject(\"checksum-type\");\n  }\n});\n"],"mappings":";;;;;AAqDA,MAAa,iBAAiB,OAAO,WAAW,WAC9C,YACA,WACA,OACA;CACA,MAAM,IAAI,WAAW;CACrB,IAAI,CAAC,GAAG;CACR,MAAM,UAAU,eACd,aAAa,WAAW,EAAE,UAAU;EAAE,MAAM;EAAe;CAAW,GAAG,aAAa;CACxF,IACE,EAAE,aAAa,mBAAmB,WACjC,MAAM,KAAK,WAAW,MAAM,QAAQ,WAAW,MAAM,QAAQ,IAAI,UAElE,OAAO,OAAO,OAAO,iBAAiB;CACxC,MAAM,WAAW,cAAc,SAAS,MAAM,SAAS;CACvD,MAAM,aACJ,aAAa,SAAS,aAAa,QAC/B,EAAE,aAAa,gBACf,aAAa,aACX,EAAE,qBACF,CAAC;CACT,IAAI,MAAM,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,SAAS,SAAS,GAAG;EAC3D,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe,gBAAgB;EACrE,IAAI,CAAC,WAAW,SAAS,IAAI,GAAG,OAAO,OAAO,OAAO,GAAG,UAAU,WAAW;CAC/E;CACA,IAAI,MAAM,eAAe,UAAa,MAAM,aAAa,EAAE,OAAO,cAChE,OAAO,OAAO,OAAO,eAAe;CACtC,IACE,MAAM,UACL,MAAM,MAAM,SAAS,EAAE,OAAO,gBAC7B,MAAM,MAAM,MACT,SACC,KAAK,aAAa,EAAE,OAAO,gBAC1B,KAAK,SAAS,UAAa,KAAK,OAAO,EAAE,OAAO,gBACrD,IAEF,OAAO,OAAO,OAAO,aAAa;CACpC,IACE,MAAM,SACN,MAAM,MAAM,QAAQ,KAAK,SAAS,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,EAAE,oBAEjE,OAAO,OAAO,OAAO,sBAAsB;CAC7C,MAAM,UACJ,cAAc,gBAAgB,cAAc,aACxC,EAAE,OAAO,mBACT,EAAE,OAAO;CACf,IAAI,MAAM,kBAAkB,UAAa,MAAM,gBAAgB,SAC7D,OAAO,OAAO,OAAO,uBAAuB;CAC9C,IACE,CAAC,EAAE,cACF,OAAO,QAAQ,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,MACnC,CAAC,KAAK,WAAW,IAAI,WAAW,UAAU,KAAK,UAAU,MAC5D,KACE,MAAM,QAAQ,qBACd,MAAM,QAAQ,gBACd,MAAM,OAAO,MAAM,SAAS,KAAK,WAAW,MAAM,IAEpD,OAAO,OAAO,OAAO,kCAAkC;CACzD,IAAI,EAAE,WAAW;EACf,MAAM,YAAY,MAAM,UAAU,qBAAqB,MAAM,QAAQ;EACrE,MAAM,OAAO,MAAM,UAAU,gBAAgB,MAAM,QAAQ;EAC3D,MAAM,UAAU;GAAC;GAAS;GAAU;GAAa;GAAQ;EAAQ;EACjE,IACG,aAAa,CAAC,QAAQ,SAAS,SAAS,KACzC,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,MAC/B,QACC,IAAI,WAAW,UAAU,KACzB,CAAC;GAAC;GAAqB;GAAgB,GAAG,QAAQ,KAAK,MAAM,WAAW,GAAG;EAAC,CAAC,CAAC,SAC5E,GACF,CACJ,GAEA,OAAO,OAAO,OAAO,oBAAoB;EAC3C,IACG,cAAc,eAAe,SAAS,eACtC,CAAC,QAAQ,QAAQ,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,SAAS,eAE1D,OAAO,OAAO,OAAO,eAAe;CACxC;AACF,CAAC"}

package/dist/providers/s3/request-extension.js

@@ -0,0 +1,29 @@
+import { Predicate } from "effect";
+
+// src/providers/s3/request-extension.ts
+/** Public per-command middleware: extension headers/queries participate in SDK signing. */
+function extendRequest(command, options) {
+	command.middlewareStack.add((next) => async (args) => {
+		if (!Predicate.isObject(args.request) || !Predicate.isObject(args.request.headers)) throw new Error("Invalid SDK request");
+		if (options.method) args.request.method = options.method;
+		if (options.bucketRoot && typeof args.request.path === "string") args.request.path = args.request.path.slice(0, args.request.path.lastIndexOf("/")) || "/";
+		for (const [key, value] of Object.entries(options.headers ?? {})) Reflect.set(args.request.headers, key, value);
+		if (options.query) {
+			const previous = Predicate.isObject(args.request.query) ? args.request.query : {};
+			args.request.query = {
+				...previous,
+				...options.query
+			};
+		}
+		const result = await next(args);
+		if (options.observeHeaders && Predicate.isObject(result.response) && Predicate.isObject(result.response.headers)) options.observeHeaders(Object.fromEntries(Object.entries(result.response.headers).filter((entry) => typeof entry[1] === "string")));
+		return result;
+	}, {
+		name: "effectStorageNativeExtension",
+		step: "build",
+		priority: "low"
+	});
+}
+
+export { extendRequest };
+//# sourceMappingURL=request-extension.js.map

package/dist/providers/s3/request-extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-extension.js","names":[],"sources":["../../../src/providers/s3/request-extension.ts"],"sourcesContent":["import { Predicate } from \"effect\";\n\nimport type {\n  CopyObjectCommand,\n  CreateBucketCommand,\n  DeleteBucketCommand,\n  ListBucketsCommand,\n  DeleteObjectCommand,\n  GetObjectCommand,\n  ListObjectVersionsCommand,\n  PutObjectCommand,\n  RestoreObjectCommand,\n} from \"@aws-sdk/client-s3\";\n\n/** Public per-command middleware: extension headers/queries participate in SDK signing. */\nexport function extendRequest(\n  command:\n    | GetObjectCommand\n    | PutObjectCommand\n    | CopyObjectCommand\n    | DeleteObjectCommand\n    | RestoreObjectCommand\n    | CreateBucketCommand\n    | DeleteBucketCommand\n    | ListBucketsCommand\n    | ListObjectVersionsCommand,\n  options: {\n    readonly method?: string;\n    readonly bucketRoot?: boolean;\n    readonly headers?: Readonly<Record<string, string>>;\n    readonly query?: Readonly<Record<string, string>>;\n    readonly observeHeaders?: (headers: Readonly<Record<string, string>>) => void;\n  },\n) {\n  // Only the common HTTP request is changed; command inputs/outputs pass through untouched.\n  const stack = command.middlewareStack as GetObjectCommand[\"middlewareStack\"];\n  stack.add(\n    (next) => async (args) => {\n      if (!Predicate.isObject(args.request) || !Predicate.isObject(args.request.headers))\n        throw new Error(\"Invalid SDK request\");\n      if (options.method) args.request.method = options.method;\n      if (options.bucketRoot && typeof args.request.path === \"string\")\n        args.request.path = args.request.path.slice(0, args.request.path.lastIndexOf(\"/\")) || \"/\";\n      for (const [key, value] of Object.entries(options.headers ?? {}))\n        Reflect.set(args.request.headers, key, value);\n      if (options.query) {\n        const previous = Predicate.isObject(args.request.query) ? args.request.query : {};\n        args.request.query = { ...previous, ...options.query };\n      }\n      const result = await next(args);\n      if (\n        options.observeHeaders &&\n        Predicate.isObject(result.response) &&\n        Predicate.isObject(result.response.headers)\n      )\n        options.observeHeaders(\n          Object.fromEntries(\n            Object.entries(result.response.headers).filter(\n              (entry): entry is [string, string] => typeof entry[1] === \"string\",\n            ),\n          ),\n        );\n      return result;\n    },\n    { name: \"effectStorageNativeExtension\", step: \"build\", priority: \"low\" },\n  );\n}\n"],"mappings":";;;;AAeA,SAAgB,cACd,SAUA,SAOA;CAGA,AADc,QAAQ,gBAChB,KACH,SAAS,OAAO,SAAS;EACxB,IAAI,CAAC,UAAU,SAAS,KAAK,OAAO,KAAK,CAAC,UAAU,SAAS,KAAK,QAAQ,OAAO,GAC/E,MAAM,IAAI,MAAM,qBAAqB;EACvC,IAAI,QAAQ,QAAQ,KAAK,QAAQ,SAAS,QAAQ;EAClD,IAAI,QAAQ,cAAc,OAAO,KAAK,QAAQ,SAAS,UACrD,KAAK,QAAQ,OAAO,KAAK,QAAQ,KAAK,MAAM,GAAG,KAAK,QAAQ,KAAK,YAAY,GAAG,CAAC,KAAK;EACxF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC,GAC7D,QAAQ,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK;EAC9C,IAAI,QAAQ,OAAO;GACjB,MAAM,WAAW,UAAU,SAAS,KAAK,QAAQ,KAAK,IAAI,KAAK,QAAQ,QAAQ,CAAC;GAChF,KAAK,QAAQ,QAAQ;IAAE,GAAG;IAAU,GAAG,QAAQ;GAAM;EACvD;EACA,MAAM,SAAS,MAAM,KAAK,IAAI;EAC9B,IACE,QAAQ,kBACR,UAAU,SAAS,OAAO,QAAQ,KAClC,UAAU,SAAS,OAAO,SAAS,OAAO,GAE1C,QAAQ,eACN,OAAO,YACL,OAAO,QAAQ,OAAO,SAAS,OAAO,CAAC,CAAC,QACrC,UAAqC,OAAO,MAAM,OAAO,QAC5D,CACF,CACF;EACF,OAAO;CACT,GACA;EAAE,MAAM;EAAgC,MAAM;EAAS,UAAU;CAAM,CACzE;AACF"}

package/dist/providers/s3/service.js

@@ -0,0 +1,55 @@
+import { StorageError } from "../../core/errors.js";
+import { deleteObjects } from "./bulk-delete.js";
+import { copyObject, copyPart } from "./copy.js";
+import { multipart } from "./multipart.js";
+import { primitives, putObject } from "./primitives.js";
+import { Effect, Stream } from "effect";
+
+// src/providers/s3/service.ts
+function assemble(connection) {
+	const native = {
+		...primitives(connection),
+		...connection,
+		multipart: multipart(connection),
+		copyObject: (input, source) => copyObject(connection, input, source),
+		copyPart: (input, source) => copyPart(connection, input, source),
+		deleteObjects: (input) => deleteObjects(connection, input),
+		putObject: (input, options) => putObject(connection, input, options)
+	};
+	if (!connection.profile) return native;
+	const provider = connection.profile.provider;
+	const rename = (error) => error instanceof StorageError && error.provider === "s3" ? new StorageError({
+		...error,
+		provider
+	}) : error;
+	const mapped = (effect) => Effect.mapError(effect, rename);
+	const uploads = native.multipart;
+	const renameBody = (result) => result._tag === "Object" ? {
+		...result,
+		body: Stream.mapError(result.body, rename)
+	} : result;
+	return {
+		...native,
+		put: (input) => mapped(native.put(input)),
+		putObject: (input, options) => mapped(native.putObject(input, options)),
+		head: (input) => mapped(native.head(input)),
+		get: (input) => mapped(native.get(input)).pipe(Effect.map(renameBody)),
+		delete: (input) => mapped(native.delete(input)),
+		listPage: (input) => mapped(native.listPage(input)),
+		copyObject: (input, source) => mapped(native.copyObject(input, source)),
+		copyPart: (input, source) => mapped(native.copyPart(input, source)),
+		deleteObjects: (input) => mapped(native.deleteObjects(input)),
+		multipart: {
+			...uploads,
+			initiate: (input) => mapped(uploads.initiate(input)),
+			uploadPart: (input) => mapped(uploads.uploadPart(input)),
+			complete: (input) => mapped(uploads.complete(input)),
+			abort: (input) => mapped(uploads.abort(input)),
+			listParts: (input) => mapped(uploads.listParts(input)),
+			listUploads: (input) => mapped(uploads.listUploads(input))
+		}
+	};
+}
+
+export { assemble };
+//# sourceMappingURL=service.js.map

package/dist/providers/s3/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","names":[],"sources":["../../../src/providers/s3/service.ts"],"sourcesContent":["import { Effect, Stream } from \"effect\";\n\nimport { StorageError } from \"../../core/errors.js\";\nimport type { GetResult, PutRequest } from \"../../core/requests.js\";\nimport { deleteObjects } from \"./bulk-delete.js\";\nimport type { S3Connection } from \"./config.js\";\nimport { copyObject, copyPart } from \"./copy.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { multipart } from \"./multipart.js\";\nimport type { S3PutOptions } from \"./primitives.js\";\nimport { primitives, putObject } from \"./primitives.js\";\n\nexport function assemble(connection: S3Connection): S3StorageService {\n  const native = {\n    ...primitives(connection),\n    ...connection,\n    multipart: multipart(connection),\n    copyObject: (input: Parameters<S3StorageService[\"copyObject\"]>[0], source?: S3StorageService) =>\n      copyObject(connection, input, source),\n    copyPart: (input: Parameters<S3StorageService[\"copyPart\"]>[0], source?: S3StorageService) =>\n      copyPart(connection, input, source),\n    deleteObjects: (input: Parameters<S3StorageService[\"deleteObjects\"]>[0]) =>\n      deleteObjects(connection, input),\n    putObject: <E = never, R = never>(input: PutRequest<E, R>, options?: S3PutOptions) =>\n      putObject(connection, input, options),\n  };\n  if (!connection.profile) return native;\n  const provider = connection.profile.provider;\n  const rename = <E>(error: E): E | StorageError =>\n    error instanceof StorageError && error.provider === \"s3\"\n      ? new StorageError({ ...error, provider })\n      : error;\n  const mapped = <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.mapError(effect, rename);\n  const uploads = native.multipart;\n  const renameBody = (result: GetResult) =>\n    result._tag === \"Object\" ? { ...result, body: Stream.mapError(result.body, rename) } : result;\n\n  return {\n    ...native,\n    put: (input) => mapped(native.put(input)),\n    putObject: (input, options) => mapped(native.putObject(input, options)),\n    head: (input) => mapped(native.head(input)),\n    get: (input) => mapped(native.get(input)).pipe(Effect.map(renameBody)),\n    delete: (input) => mapped(native.delete(input)),\n    listPage: (input) => mapped(native.listPage(input)),\n    copyObject: (input, source) => mapped(native.copyObject(input, source)),\n    copyPart: (input, source) => mapped(native.copyPart(input, source)),\n    deleteObjects: (input) => mapped(native.deleteObjects(input)),\n    multipart: {\n      ...uploads,\n      initiate: (input) => mapped(uploads.initiate(input)),\n      uploadPart: (input) => mapped(uploads.uploadPart(input)),\n      complete: (input) => mapped(uploads.complete(input)),\n      abort: (input) => mapped(uploads.abort(input)),\n      listParts: (input) => mapped(uploads.listParts(input)),\n      listUploads: (input) => mapped(uploads.listUploads(input)),\n    },\n  };\n}\n"],"mappings":";;;;;;;;AAYA,SAAgB,SAAS,YAA4C;CACnE,MAAM,SAAS;EACb,GAAG,WAAW,UAAU;EACxB,GAAG;EACH,WAAW,UAAU,UAAU;EAC/B,aAAa,OAAsD,WACjE,WAAW,YAAY,OAAO,MAAM;EACtC,WAAW,OAAoD,WAC7D,SAAS,YAAY,OAAO,MAAM;EACpC,gBAAgB,UACd,cAAc,YAAY,KAAK;EACjC,YAAkC,OAAyB,YACzD,UAAU,YAAY,OAAO,OAAO;CACxC;CACA,IAAI,CAAC,WAAW,SAAS,OAAO;CAChC,MAAM,WAAW,WAAW,QAAQ;CACpC,MAAM,UAAa,UACjB,iBAAiB,gBAAgB,MAAM,aAAa,OAChD,IAAI,aAAa;EAAE,GAAG;EAAO;CAAS,CAAC,IACvC;CACN,MAAM,UAAmB,WAAmC,OAAO,SAAS,QAAQ,MAAM;CAC1F,MAAM,UAAU,OAAO;CACvB,MAAM,cAAc,WAClB,OAAO,SAAS,WAAW;EAAE,GAAG;EAAQ,MAAM,OAAO,SAAS,OAAO,MAAM,MAAM;CAAE,IAAI;CAEzF,OAAO;EACL,GAAG;EACH,MAAM,UAAU,OAAO,OAAO,IAAI,KAAK,CAAC;EACxC,YAAY,OAAO,YAAY,OAAO,OAAO,UAAU,OAAO,OAAO,CAAC;EACtE,OAAO,UAAU,OAAO,OAAO,KAAK,KAAK,CAAC;EAC1C,MAAM,UAAU,OAAO,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,UAAU,CAAC;EACrE,SAAS,UAAU,OAAO,OAAO,OAAO,KAAK,CAAC;EAC9C,WAAW,UAAU,OAAO,OAAO,SAAS,KAAK,CAAC;EAClD,aAAa,OAAO,WAAW,OAAO,OAAO,WAAW,OAAO,MAAM,CAAC;EACtE,WAAW,OAAO,WAAW,OAAO,OAAO,SAAS,OAAO,MAAM,CAAC;EAClE,gBAAgB,UAAU,OAAO,OAAO,cAAc,KAAK,CAAC;EAC5D,WAAW;GACT,GAAG;GACH,WAAW,UAAU,OAAO,QAAQ,SAAS,KAAK,CAAC;GACnD,aAAa,UAAU,OAAO,QAAQ,WAAW,KAAK,CAAC;GACvD,WAAW,UAAU,OAAO,QAAQ,SAAS,KAAK,CAAC;GACnD,QAAQ,UAAU,OAAO,QAAQ,MAAM,KAAK,CAAC;GAC7C,YAAY,UAAU,OAAO,QAAQ,UAAU,KAAK,CAAC;GACrD,cAAc,UAAU,OAAO,QAAQ,YAAY,KAAK,CAAC;EAC3D;CACF;AACF"}

package/dist/providers/s3/signing-credentials.js

@@ -0,0 +1,32 @@
+import { storageError } from "../../core/errors.js";
+import { request } from "./transport.js";
+import { DateTime, Effect } from "effect";
+import { S3Client } from "@aws-sdk/client-s3";
+
+// src/providers/s3/signing-credentials.ts
+const signingCredentials = Effect.fnUntraced(function* (storage, expiresInSeconds) {
+	const now = yield* DateTime.now;
+	const credentials = yield* request(storage, "sign", false, () => storage.client.config.credentials());
+	const seconds = Math.min(expiresInSeconds, credentials.expiration ? Math.floor((credentials.expiration.getTime() - DateTime.toEpochMillis(now)) / 1e3) : expiresInSeconds);
+	if (seconds < 1) return yield* storageError("sign", "s3", { _tag: "Expired" });
+	return {
+		client: new S3Client({
+			region: storage.config.region,
+			...storage.config.endpoint === void 0 ? {} : { endpoint: storage.config.endpoint },
+			...storage.config.forcePathStyle === void 0 ? {} : { forcePathStyle: storage.config.forcePathStyle },
+			credentials,
+			requestChecksumCalculation: "WHEN_REQUIRED",
+			maxAttempts: 1,
+			requestHandler: { handle: async () => {
+				throw new Error("Signing must not send a network request");
+			} },
+			systemClockOffset: DateTime.toEpochMillis(now) - Date.now()
+		}),
+		now,
+		seconds,
+		expiresAt: DateTime.add(now, { seconds })
+	};
+});
+
+export { signingCredentials };
+//# sourceMappingURL=signing-credentials.js.map

package/dist/providers/s3/signing-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing-credentials.js","names":[],"sources":["../../../src/providers/s3/signing-credentials.ts"],"sourcesContent":["import { DateTime, Effect } from \"effect\";\n\nimport { S3Client } from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { request } from \"./transport.js\";\n\nexport const signingCredentials = Effect.fnUntraced(function* (\n  storage: S3StorageService,\n  expiresInSeconds: number,\n) {\n  const now = yield* DateTime.now;\n  const credentials = yield* request(storage, \"sign\", false, () =>\n    storage.client.config.credentials(),\n  );\n  const seconds = Math.min(\n    expiresInSeconds,\n    credentials.expiration\n      ? Math.floor((credentials.expiration.getTime() - DateTime.toEpochMillis(now)) / 1000)\n      : expiresInSeconds,\n  );\n  if (seconds < 1) return yield* storageError(\"sign\", \"s3\", { _tag: \"Expired\" });\n\n  // Freeze the exact resolved identity for this signature; the next grant resolves afresh.\n  // Signing has no body to checksum. Data-plane clients retain WHEN_SUPPORTED protection.\n  const client = new S3Client({\n    region: storage.config.region,\n    ...(storage.config.endpoint === undefined ? {} : { endpoint: storage.config.endpoint }),\n    ...(storage.config.forcePathStyle === undefined\n      ? {}\n      : { forcePathStyle: storage.config.forcePathStyle }),\n    credentials,\n    requestChecksumCalculation: \"WHEN_REQUIRED\",\n    maxAttempts: 1,\n    requestHandler: {\n      handle: async () => {\n        throw new Error(\"Signing must not send a network request\");\n      },\n    },\n    systemClockOffset: DateTime.toEpochMillis(now) - Date.now(),\n  });\n  return { client, now, seconds, expiresAt: DateTime.add(now, { seconds }) };\n});\n"],"mappings":";;;;;;AAQA,MAAa,qBAAqB,OAAO,WAAW,WAClD,SACA,kBACA;CACA,MAAM,MAAM,OAAO,SAAS;CAC5B,MAAM,cAAc,OAAO,QAAQ,SAAS,QAAQ,aAClD,QAAQ,OAAO,OAAO,YAAY,CACpC;CACA,MAAM,UAAU,KAAK,IACnB,kBACA,YAAY,aACR,KAAK,OAAO,YAAY,WAAW,QAAQ,IAAI,SAAS,cAAc,GAAG,KAAK,GAAI,IAClF,gBACN;CACA,IAAI,UAAU,GAAG,OAAO,OAAO,aAAa,QAAQ,MAAM,EAAE,MAAM,UAAU,CAAC;CAoB7E,OAAO;EAAE,YAhBU,SAAS;GAC1B,QAAQ,QAAQ,OAAO;GACvB,GAAI,QAAQ,OAAO,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,OAAO,SAAS;GACrF,GAAI,QAAQ,OAAO,mBAAmB,SAClC,CAAC,IACD,EAAE,gBAAgB,QAAQ,OAAO,eAAe;GACpD;GACA,4BAA4B;GAC5B,aAAa;GACb,gBAAgB,EACd,QAAQ,YAAY;IAClB,MAAM,IAAI,MAAM,yCAAyC;GAC3D,EACF;GACA,mBAAmB,SAAS,cAAc,GAAG,IAAI,KAAK,IAAI;EAC5D,CACc;EAAG;EAAK;EAAS,WAAW,SAAS,IAAI,KAAK,EAAE,QAAQ,CAAC;CAAE;AAC3E,CAAC"}

package/dist/providers/s3/tags.d.ts

@@ -0,0 +1,10 @@
+import { StorageTags, TagsService } from "../../lifecycle.js";
+import { S3Storage, S3StorageService } from "../../s3.js";
+import { Context, Layer } from "effect";
+declare const S3Tags_base: Context.ServiceClass<S3Tags, "@effect-kit/storage/s3/S3Tags", TagsService>;
+export declare class S3Tags extends S3Tags_base {
+  static make(storage: S3StorageService): TagsService;
+  static readonly layer: Layer.Layer<S3Tags | StorageTags, never, S3Storage>;
+}
+export {};
+//# sourceMappingURL=tags.d.ts.map

package/dist/providers/s3/tags.js

@@ -0,0 +1,65 @@
+import { storageError } from "../../core/errors.js";
+import { decodeRequest } from "../../internal/request-validation.js";
+import { request } from "./transport.js";
+import { S3Storage } from "../../s3.js";
+import { SetTags, StorageTags, TagTarget } from "../../lifecycle.js";
+import { lifecycleFeature, lifecycleTarget } from "./lifecycle-validation.js";
+import { Context, Effect, Layer } from "effect";
+import { DeleteObjectTaggingCommand, GetObjectTaggingCommand, PutObjectTaggingCommand } from "@aws-sdk/client-s3";
+
+// src/providers/s3/tags.ts
+var S3Tags = class S3Tags extends Context.Service()("@effect-kit/storage/s3/S3Tags") {
+	static make(storage) {
+		return {
+			get: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(TagTarget, input, "getTags", storage.provider);
+				yield* lifecycleFeature(storage, "tags");
+				const target = yield* lifecycleTarget(storage, value.ref, "getTags");
+				const result = yield* request(storage, "getTags", false, (signal) => storage.client.send(new GetObjectTaggingCommand(target), { abortSignal: signal }));
+				const tags = {};
+				for (const tag of result.TagSet ?? []) {
+					if (tag.Key === void 0 || tag.Value === void 0 || Object.hasOwn(tags, tag.Key)) return yield* storageError("getTags", storage.provider, {
+						_tag: "ProviderFailure",
+						code: "InvalidTags"
+					});
+					Object.defineProperty(tags, tag.Key, {
+						value: tag.Value,
+						enumerable: true,
+						configurable: true
+					});
+				}
+				return tags;
+			}),
+			set: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(SetTags, input, "setTags", storage.provider, true);
+				yield* lifecycleFeature(storage, "tags");
+				const entries = Object.entries(value.tags);
+				if (entries.length > 10 || entries.some(([key, tagValue]) => key.length > 128 || tagValue.length > 256 || key.toLowerCase().startsWith("aws:"))) return yield* storageError("setTags", storage.provider, {
+					_tag: "InvalidInput",
+					field: "tags"
+				}, "not-started");
+				const target = yield* lifecycleTarget(storage, value.ref, "setTags");
+				yield* request(storage, "setTags", true, (signal) => storage.client.send(new PutObjectTaggingCommand({
+					...target,
+					Tagging: { TagSet: entries.map(([Key, Value]) => ({
+						Key,
+						Value
+					})) }
+				}), { abortSignal: signal }));
+			}),
+			delete: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(TagTarget, input, "deleteTags", storage.provider, true);
+				yield* lifecycleFeature(storage, "tags");
+				const target = yield* lifecycleTarget(storage, value.ref, "deleteTags");
+				yield* request(storage, "deleteTags", true, (signal) => storage.client.send(new DeleteObjectTaggingCommand(target), { abortSignal: signal }));
+			})
+		};
+	}
+	static layer = Layer.effectContext(Effect.map(S3Storage, (storage) => {
+		const service = S3Tags.make(storage);
+		return Context.make(S3Tags, service).pipe(Context.add(StorageTags, service));
+	}));
+};
+
+export { S3Tags };
+//# sourceMappingURL=tags.js.map