@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/providers/s3/tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.js","names":[],"sources":["../../../src/providers/s3/tags.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport {\n  GetObjectTaggingCommand,\n  PutObjectTaggingCommand,\n  DeleteObjectTaggingCommand,\n} from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { SetTags, StorageTags, TagTarget } from \"../../lifecycle/index.js\";\nimport type { TagsService } from \"../../lifecycle/index.js\";\nimport { S3Storage } from \"./index.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { lifecycleFeature, lifecycleTarget } from \"./lifecycle-validation.js\";\nimport { request } from \"./transport.js\";\n\nexport class S3Tags extends Context.Service<S3Tags, TagsService>()(\n  \"@effect-kit/storage/s3/S3Tags\",\n) {\n  static make(storage: S3StorageService): TagsService {\n    return {\n      get: Effect.fnUntraced(function* (input) {\n        const value = yield* decodeRequest(TagTarget, input, \"getTags\", storage.provider);\n        yield* lifecycleFeature(storage, \"tags\");\n        const target = yield* lifecycleTarget(storage, value.ref, \"getTags\");\n        const result = yield* request(storage, \"getTags\", false, (signal) =>\n          storage.client.send(new GetObjectTaggingCommand(target), { abortSignal: signal }),\n        );\n        const tags: Record<string, string> = {};\n        for (const tag of result.TagSet ?? []) {\n          if (tag.Key === undefined || tag.Value === undefined || Object.hasOwn(tags, tag.Key))\n            return yield* storageError(\"getTags\", storage.provider, {\n              _tag: \"ProviderFailure\",\n              code: \"InvalidTags\",\n            });\n          Object.defineProperty(tags, tag.Key, {\n            value: tag.Value,\n            enumerable: true,\n            configurable: true,\n          });\n        }\n        return tags;\n      }),\n      set: Effect.fnUntraced(function* (input) {\n        const value = yield* decodeRequest(SetTags, input, \"setTags\", storage.provider, true);\n        yield* lifecycleFeature(storage, \"tags\");\n        const entries = Object.entries(value.tags);\n        if (\n          entries.length > 10 ||\n          entries.some(\n            ([key, tagValue]) =>\n              key.length > 128 || tagValue.length > 256 || key.toLowerCase().startsWith(\"aws:\"),\n          )\n        )\n          return yield* storageError(\n            \"setTags\",\n            storage.provider,\n            { _tag: \"InvalidInput\", field: \"tags\" },\n            \"not-started\",\n          );\n        const target = yield* lifecycleTarget(storage, value.ref, \"setTags\");\n        yield* request(storage, \"setTags\", true, (signal) =>\n          storage.client.send(\n            new PutObjectTaggingCommand({\n              ...target,\n              Tagging: { TagSet: entries.map(([Key, Value]) => ({ Key, Value })) },\n            }),\n            { abortSignal: signal },\n          ),\n        );\n      }),\n      delete: Effect.fnUntraced(function* (input) {\n        const value = yield* decodeRequest(TagTarget, input, \"deleteTags\", storage.provider, true);\n        yield* lifecycleFeature(storage, \"tags\");\n        const target = yield* lifecycleTarget(storage, value.ref, \"deleteTags\");\n        yield* request(storage, \"deleteTags\", true, (signal) =>\n          storage.client.send(new DeleteObjectTaggingCommand(target), { abortSignal: signal }),\n        );\n      }),\n    };\n  }\n  static readonly layer = Layer.effectContext(\n    Effect.map(S3Storage, (storage) => {\n      const service = S3Tags.make(storage);\n      return Context.make(S3Tags, service).pipe(Context.add(StorageTags, service));\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;AAiBA,IAAa,SAAb,MAAa,eAAe,QAAQ,QAA6B,CAAC,CAChE,+BACF,CAAC,CAAC;CACA,OAAO,KAAK,SAAwC;EAClD,OAAO;GACL,KAAK,OAAO,WAAW,WAAW,OAAO;IACvC,MAAM,QAAQ,OAAO,cAAc,WAAW,OAAO,WAAW,QAAQ,QAAQ;IAChF,OAAO,iBAAiB,SAAS,MAAM;IACvC,MAAM,SAAS,OAAO,gBAAgB,SAAS,MAAM,KAAK,SAAS;IACnE,MAAM,SAAS,OAAO,QAAQ,SAAS,WAAW,QAAQ,WACxD,QAAQ,OAAO,KAAK,IAAI,wBAAwB,MAAM,GAAG,EAAE,aAAa,OAAO,CAAC,CAClF;IACA,MAAM,OAA+B,CAAC;IACtC,KAAK,MAAM,OAAO,OAAO,UAAU,CAAC,GAAG;KACrC,IAAI,IAAI,QAAQ,UAAa,IAAI,UAAU,UAAa,OAAO,OAAO,MAAM,IAAI,GAAG,GACjF,OAAO,OAAO,aAAa,WAAW,QAAQ,UAAU;MACtD,MAAM;MACN,MAAM;KACR,CAAC;KACH,OAAO,eAAe,MAAM,IAAI,KAAK;MACnC,OAAO,IAAI;MACX,YAAY;MACZ,cAAc;KAChB,CAAC;IACH;IACA,OAAO;GACT,CAAC;GACD,KAAK,OAAO,WAAW,WAAW,OAAO;IACvC,MAAM,QAAQ,OAAO,cAAc,SAAS,OAAO,WAAW,QAAQ,UAAU,IAAI;IACpF,OAAO,iBAAiB,SAAS,MAAM;IACvC,MAAM,UAAU,OAAO,QAAQ,MAAM,IAAI;IACzC,IACE,QAAQ,SAAS,MACjB,QAAQ,MACL,CAAC,KAAK,cACL,IAAI,SAAS,OAAO,SAAS,SAAS,OAAO,IAAI,YAAY,CAAC,CAAC,WAAW,MAAM,CACpF,GAEA,OAAO,OAAO,aACZ,WACA,QAAQ,UACR;KAAE,MAAM;KAAgB,OAAO;IAAO,GACtC,aACF;IACF,MAAM,SAAS,OAAO,gBAAgB,SAAS,MAAM,KAAK,SAAS;IACnE,OAAO,QAAQ,SAAS,WAAW,OAAO,WACxC,QAAQ,OAAO,KACb,IAAI,wBAAwB;KAC1B,GAAG;KACH,SAAS,EAAE,QAAQ,QAAQ,KAAK,CAAC,KAAK,YAAY;MAAE;MAAK;KAAM,EAAE,EAAE;IACrE,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;GACF,CAAC;GACD,QAAQ,OAAO,WAAW,WAAW,OAAO;IAC1C,MAAM,QAAQ,OAAO,cAAc,WAAW,OAAO,cAAc,QAAQ,UAAU,IAAI;IACzF,OAAO,iBAAiB,SAAS,MAAM;IACvC,MAAM,SAAS,OAAO,gBAAgB,SAAS,MAAM,KAAK,YAAY;IACtE,OAAO,QAAQ,SAAS,cAAc,OAAO,WAC3C,QAAQ,OAAO,KAAK,IAAI,2BAA2B,MAAM,GAAG,EAAE,aAAa,OAAO,CAAC,CACrF;GACF,CAAC;EACH;CACF;CACA,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,YAAY,YAAY;EACjC,MAAM,UAAU,OAAO,KAAK,OAAO;EACnC,OAAO,QAAQ,KAAK,QAAQ,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,aAAa,OAAO,CAAC;CAC7E,CAAC,CACH;AACF"}

package/dist/providers/s3/tier.d.ts

@@ -0,0 +1,171 @@
+import { StorageError } from "../../core/errors.js";
+import { VersionRef } from "../../lifecycle.js";
+import "../../index.js";
+import { S3Storage, S3StorageService } from "../../s3.js";
+import { Context, Effect, Layer } from "effect";
+declare const make: (storage: S3StorageService) => {
+  inspectEncryption: (input: {
+    readonly ref: VersionRef;
+  }) => Effect.Effect<{
+    algorithm: import("@aws-sdk/client-s3").ServerSideEncryption | undefined;
+    kmsKeyId: string | undefined;
+    bucketKeyEnabled: boolean | undefined;
+    customerAlgorithm: string | undefined;
+    customerKeyMD5: string | undefined;
+  }, StorageError, never>;
+  transition: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly ifMatch: string;
+    readonly storageClass: "DEEP_ARCHIVE" | "GLACIER" | "GLACIER_IR" | "INTELLIGENT_TIERING" | "ONEZONE_IA" | "STANDARD" | "STANDARD_IA";
+    readonly intent: "copy-storage-tier";
+  }) => Effect.Effect<{
+    readonly contentType?: string | undefined;
+    readonly contentEncoding?: string | undefined;
+    readonly contentLanguage?: string | undefined;
+    readonly contentDisposition?: string | undefined;
+    readonly cacheControl?: string | undefined;
+    readonly customMetadata?: {
+      readonly [x: string]: string;
+    } | undefined;
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version?: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      } | undefined;
+    };
+    readonly size?: number | undefined;
+    readonly etag?: string | undefined;
+    readonly lastModified?: import("effect/DateTime").Utc | undefined;
+    readonly checksums?: readonly {
+      readonly algorithm: string;
+      readonly encoding: "base64" | "hex";
+      readonly scope: "composite" | "full-object";
+      readonly value: string;
+      readonly partCount?: number | undefined;
+    }[] | undefined;
+    readonly storageClass?: string | undefined;
+  }, StorageError, never>;
+};
+declare const S3StorageTier_base: Context.ServiceClass<S3StorageTier, "@effect-kit/storage/s3/S3StorageTier", {
+  inspectEncryption: (input: {
+    readonly ref: VersionRef;
+  }) => Effect.Effect<{
+    algorithm: import("@aws-sdk/client-s3").ServerSideEncryption | undefined;
+    kmsKeyId: string | undefined;
+    bucketKeyEnabled: boolean | undefined;
+    customerAlgorithm: string | undefined;
+    customerKeyMD5: string | undefined;
+  }, StorageError, never>;
+  transition: (input: {
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      };
+    };
+    readonly ifMatch: string;
+    readonly storageClass: "DEEP_ARCHIVE" | "GLACIER" | "GLACIER_IR" | "INTELLIGENT_TIERING" | "ONEZONE_IA" | "STANDARD" | "STANDARD_IA";
+    readonly intent: "copy-storage-tier";
+  }) => Effect.Effect<{
+    readonly contentType?: string | undefined;
+    readonly contentEncoding?: string | undefined;
+    readonly contentLanguage?: string | undefined;
+    readonly contentDisposition?: string | undefined;
+    readonly cacheControl?: string | undefined;
+    readonly customMetadata?: {
+      readonly [x: string]: string;
+    } | undefined;
+    readonly ref: {
+      readonly storeId: string;
+      readonly key: string;
+      readonly version?: {
+        readonly _tag: "S3Version";
+        readonly id: string;
+      } | {
+        readonly _tag: "GcsGeneration";
+        readonly id: string;
+        readonly metageneration?: string | undefined;
+      } | {
+        readonly _tag: "AzureVersion";
+        readonly id: string;
+      } | {
+        readonly _tag: "AzureSnapshot";
+        readonly id: string;
+      } | {
+        readonly _tag: "OpaqueVersion";
+        readonly provider: string;
+        readonly id: string;
+      } | undefined;
+    };
+    readonly size?: number | undefined;
+    readonly etag?: string | undefined;
+    readonly lastModified?: import("effect/DateTime").Utc | undefined;
+    readonly checksums?: readonly {
+      readonly algorithm: string;
+      readonly encoding: "base64" | "hex";
+      readonly scope: "composite" | "full-object";
+      readonly value: string;
+      readonly partCount?: number | undefined;
+    }[] | undefined;
+    readonly storageClass?: string | undefined;
+  }, StorageError, never>;
+}>;
+export declare class S3StorageTier extends S3StorageTier_base {
+  static readonly make: typeof make;
+  static readonly layer: Layer.Layer<S3StorageTier, never, S3Storage>;
+}
+export {};
+//# sourceMappingURL=tier.d.ts.map

package/dist/providers/s3/tier.js

@@ -0,0 +1,100 @@
+import { storageError } from "../../core/errors.js";
+import { decodeRequest } from "../../internal/request-validation.js";
+import { readEncryption } from "./config.js";
+import { encodeCopySource, metadata } from "./object-mapping.js";
+import { request } from "./transport.js";
+import { S3Storage } from "../../s3.js";
+import { VersionRef } from "../../lifecycle.js";
+import { lifecycleTarget } from "./lifecycle-validation.js";
+import { Context, Effect, Layer, Schema } from "effect";
+import { CopyObjectCommand, HeadObjectCommand } from "@aws-sdk/client-s3";
+
+// src/providers/s3/tier.ts
+const Transition = Schema.Struct({
+	ref: VersionRef,
+	ifMatch: Schema.NonEmptyString,
+	storageClass: Schema.Literals([
+		"STANDARD",
+		"STANDARD_IA",
+		"ONEZONE_IA",
+		"INTELLIGENT_TIERING",
+		"GLACIER",
+		"GLACIER_IR",
+		"DEEP_ARCHIVE"
+	]),
+	intent: Schema.Literal("copy-storage-tier")
+});
+const make = (storage) => ({
+	inspectEncryption: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Schema.Struct({ ref: VersionRef }), input, "inspectEncryption", storage.provider);
+		const target = yield* lifecycleTarget(storage, value.ref, "inspectEncryption", true);
+		const observed = yield* request(storage, "inspectEncryption", false, (signal) => storage.client.send(new HeadObjectCommand({
+			...target,
+			...readEncryption(storage.config.encryption)
+		}), { abortSignal: signal }));
+		return {
+			algorithm: observed.ServerSideEncryption,
+			kmsKeyId: observed.SSEKMSKeyId,
+			bucketKeyEnabled: observed.BucketKeyEnabled,
+			customerAlgorithm: observed.SSECustomerAlgorithm,
+			customerKeyMD5: observed.SSECustomerKeyMD5
+		};
+	}),
+	transition: Effect.fnUntraced(function* (input) {
+		const value = yield* decodeRequest(Transition, input, "transitionTier", storage.provider, true);
+		if (storage.profile) return yield* storageError("transitionTier", storage.provider, {
+			_tag: "Unsupported",
+			capability: "conditional-tier-copy"
+		}, "not-started");
+		const target = yield* lifecycleTarget(storage, value.ref, "transitionTier", true);
+		const customer = readEncryption(storage.config.encryption);
+		const before = yield* request(storage, "transitionTier.head", false, (signal) => storage.client.send(new HeadObjectCommand({
+			...target,
+			...customer
+		}), { abortSignal: signal }));
+		if (!before.ETag || before.ETag !== value.ifMatch) return yield* storageError("transitionTier", storage.provider, { _tag: "PreconditionFailed" }, "not-started");
+		if ((before.ContentLength ?? Number.MAX_SAFE_INTEGER) > 5e9) return yield* storageError("transitionTier", storage.provider, {
+			_tag: "Unsupported",
+			capability: "multipart-tier-copy"
+		}, "not-started");
+		const output = yield* request(storage, "transitionTier", true, (signal) => storage.client.send(new CopyObjectCommand({
+			Bucket: target.Bucket,
+			Key: target.Key,
+			CopySource: encodeCopySource(target.Bucket, value.ref),
+			CopySourceIfMatch: value.ifMatch,
+			IfMatch: value.ifMatch,
+			MetadataDirective: "COPY",
+			TaggingDirective: "COPY",
+			StorageClass: value.storageClass,
+			ServerSideEncryption: before.ServerSideEncryption,
+			SSEKMSKeyId: before.SSEKMSKeyId,
+			BucketKeyEnabled: before.BucketKeyEnabled,
+			...customer,
+			...storage.config.encryption?.mode === "customer" ? {
+				CopySourceSSECustomerAlgorithm: customer.SSECustomerAlgorithm,
+				CopySourceSSECustomerKey: customer.SSECustomerKey,
+				CopySourceSSECustomerKeyMD5: customer.SSECustomerKeyMD5
+			} : {},
+			ObjectLockMode: before.ObjectLockMode,
+			ObjectLockRetainUntilDate: before.ObjectLockRetainUntilDate,
+			ObjectLockLegalHoldStatus: before.ObjectLockLegalHoldStatus
+		}), { abortSignal: signal }));
+		if (!output.CopyObjectResult?.ETag) return yield* storageError("transitionTier", storage.provider, {
+			_tag: "ProviderFailure",
+			code: "MissingCopyReceipt"
+		}, "unknown");
+		return metadata(storage, value.ref.key, {
+			...before,
+			...output,
+			...output.CopyObjectResult,
+			VersionId: output.VersionId
+		});
+	})
+});
+var S3StorageTier = class S3StorageTier extends Context.Service()("@effect-kit/storage/s3/S3StorageTier") {
+	static make = make;
+	static layer = Layer.effect(S3StorageTier, Effect.map(S3Storage, make));
+};
+
+export { S3StorageTier };
+//# sourceMappingURL=tier.js.map

package/dist/providers/s3/tier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier.js","names":[],"sources":["../../../src/providers/s3/tier.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { CopyObjectCommand, HeadObjectCommand } from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport { VersionRef } from \"../../lifecycle/index.js\";\nimport { readEncryption } from \"./config.js\";\nimport { S3Storage } from \"./index.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { lifecycleTarget } from \"./lifecycle-validation.js\";\nimport { encodeCopySource, metadata } from \"./object-mapping.js\";\nimport { request } from \"./transport.js\";\n\nconst Transition = Schema.Struct({\n  ref: VersionRef,\n  ifMatch: Schema.NonEmptyString,\n  storageClass: Schema.Literals([\n    \"STANDARD\",\n    \"STANDARD_IA\",\n    \"ONEZONE_IA\",\n    \"INTELLIGENT_TIERING\",\n    \"GLACIER\",\n    \"GLACIER_IR\",\n    \"DEEP_ARCHIVE\",\n  ]),\n  intent: Schema.Literal(\"copy-storage-tier\"),\n});\nconst make = (storage: S3StorageService) => ({\n  inspectEncryption: Effect.fnUntraced(function* (input: { readonly ref: VersionRef }) {\n    const value = yield* decodeRequest(\n      Schema.Struct({ ref: VersionRef }),\n      input,\n      \"inspectEncryption\",\n      storage.provider,\n    );\n    const target = yield* lifecycleTarget(storage, value.ref, \"inspectEncryption\", true);\n    const observed = yield* request(storage, \"inspectEncryption\", false, (signal) =>\n      storage.client.send(\n        new HeadObjectCommand({ ...target, ...readEncryption(storage.config.encryption) }),\n        { abortSignal: signal },\n      ),\n    );\n    return {\n      algorithm: observed.ServerSideEncryption,\n      kmsKeyId: observed.SSEKMSKeyId,\n      bucketKeyEnabled: observed.BucketKeyEnabled,\n      customerAlgorithm: observed.SSECustomerAlgorithm,\n      customerKeyMD5: observed.SSECustomerKeyMD5,\n    };\n  }),\n  transition: Effect.fnUntraced(function* (input: typeof Transition.Type) {\n    const value = yield* decodeRequest(Transition, input, \"transitionTier\", storage.provider, true);\n    if (storage.profile)\n      return yield* storageError(\n        \"transitionTier\",\n        storage.provider,\n        { _tag: \"Unsupported\", capability: \"conditional-tier-copy\" },\n        \"not-started\",\n      );\n    const target = yield* lifecycleTarget(storage, value.ref, \"transitionTier\", true);\n    const customer = readEncryption(storage.config.encryption);\n    const before = yield* request(storage, \"transitionTier.head\", false, (signal) =>\n      storage.client.send(new HeadObjectCommand({ ...target, ...customer }), {\n        abortSignal: signal,\n      }),\n    );\n    if (!before.ETag || before.ETag !== value.ifMatch)\n      return yield* storageError(\n        \"transitionTier\",\n        storage.provider,\n        { _tag: \"PreconditionFailed\" },\n        \"not-started\",\n      );\n    if ((before.ContentLength ?? Number.MAX_SAFE_INTEGER) > 5_000_000_000)\n      return yield* storageError(\n        \"transitionTier\",\n        storage.provider,\n        { _tag: \"Unsupported\", capability: \"multipart-tier-copy\" },\n        \"not-started\",\n      );\n    const output = yield* request(storage, \"transitionTier\", true, (signal) =>\n      storage.client.send(\n        new CopyObjectCommand({\n          Bucket: target.Bucket,\n          Key: target.Key,\n          CopySource: encodeCopySource(target.Bucket, value.ref),\n          CopySourceIfMatch: value.ifMatch,\n          IfMatch: value.ifMatch,\n          MetadataDirective: \"COPY\",\n          TaggingDirective: \"COPY\",\n          StorageClass: value.storageClass,\n          ServerSideEncryption: before.ServerSideEncryption,\n          SSEKMSKeyId: before.SSEKMSKeyId,\n          BucketKeyEnabled: before.BucketKeyEnabled,\n          ...customer,\n          ...(storage.config.encryption?.mode === \"customer\"\n            ? {\n                CopySourceSSECustomerAlgorithm: customer.SSECustomerAlgorithm,\n                CopySourceSSECustomerKey: customer.SSECustomerKey,\n                CopySourceSSECustomerKeyMD5: customer.SSECustomerKeyMD5,\n              }\n            : {}),\n          ObjectLockMode: before.ObjectLockMode,\n          ObjectLockRetainUntilDate: before.ObjectLockRetainUntilDate,\n          ObjectLockLegalHoldStatus: before.ObjectLockLegalHoldStatus,\n        }),\n        { abortSignal: signal },\n      ),\n    );\n    if (!output.CopyObjectResult?.ETag)\n      return yield* storageError(\n        \"transitionTier\",\n        storage.provider,\n        { _tag: \"ProviderFailure\", code: \"MissingCopyReceipt\" },\n        \"unknown\",\n      );\n    return metadata(storage, value.ref.key, {\n      ...before,\n      ...output,\n      ...output.CopyObjectResult,\n      VersionId: output.VersionId,\n    });\n  }),\n});\nexport class S3StorageTier extends Context.Service<S3StorageTier, ReturnType<typeof make>>()(\n  \"@effect-kit/storage/s3/S3StorageTier\",\n) {\n  static readonly make = make;\n  static readonly layer = Layer.effect(S3StorageTier, Effect.map(S3Storage, make));\n}\n"],"mappings":";;;;;;;;;;;;AAcA,MAAM,aAAa,OAAO,OAAO;CAC/B,KAAK;CACL,SAAS,OAAO;CAChB,cAAc,OAAO,SAAS;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,QAAQ,OAAO,QAAQ,mBAAmB;AAC5C,CAAC;AACD,MAAM,QAAQ,aAA+B;CAC3C,mBAAmB,OAAO,WAAW,WAAW,OAAqC;EACnF,MAAM,QAAQ,OAAO,cACnB,OAAO,OAAO,EAAE,KAAK,WAAW,CAAC,GACjC,OACA,qBACA,QAAQ,QACV;EACA,MAAM,SAAS,OAAO,gBAAgB,SAAS,MAAM,KAAK,qBAAqB,IAAI;EACnF,MAAM,WAAW,OAAO,QAAQ,SAAS,qBAAqB,QAAQ,WACpE,QAAQ,OAAO,KACb,IAAI,kBAAkB;GAAE,GAAG;GAAQ,GAAG,eAAe,QAAQ,OAAO,UAAU;EAAE,CAAC,GACjF,EAAE,aAAa,OAAO,CACxB,CACF;EACA,OAAO;GACL,WAAW,SAAS;GACpB,UAAU,SAAS;GACnB,kBAAkB,SAAS;GAC3B,mBAAmB,SAAS;GAC5B,gBAAgB,SAAS;EAC3B;CACF,CAAC;CACD,YAAY,OAAO,WAAW,WAAW,OAA+B;EACtE,MAAM,QAAQ,OAAO,cAAc,YAAY,OAAO,kBAAkB,QAAQ,UAAU,IAAI;EAC9F,IAAI,QAAQ,SACV,OAAO,OAAO,aACZ,kBACA,QAAQ,UACR;GAAE,MAAM;GAAe,YAAY;EAAwB,GAC3D,aACF;EACF,MAAM,SAAS,OAAO,gBAAgB,SAAS,MAAM,KAAK,kBAAkB,IAAI;EAChF,MAAM,WAAW,eAAe,QAAQ,OAAO,UAAU;EACzD,MAAM,SAAS,OAAO,QAAQ,SAAS,uBAAuB,QAAQ,WACpE,QAAQ,OAAO,KAAK,IAAI,kBAAkB;GAAE,GAAG;GAAQ,GAAG;EAAS,CAAC,GAAG,EACrE,aAAa,OACf,CAAC,CACH;EACA,IAAI,CAAC,OAAO,QAAQ,OAAO,SAAS,MAAM,SACxC,OAAO,OAAO,aACZ,kBACA,QAAQ,UACR,EAAE,MAAM,qBAAqB,GAC7B,aACF;EACF,KAAK,OAAO,iBAAiB,OAAO,oBAAoB,KACtD,OAAO,OAAO,aACZ,kBACA,QAAQ,UACR;GAAE,MAAM;GAAe,YAAY;EAAsB,GACzD,aACF;EACF,MAAM,SAAS,OAAO,QAAQ,SAAS,kBAAkB,OAAO,WAC9D,QAAQ,OAAO,KACb,IAAI,kBAAkB;GACpB,QAAQ,OAAO;GACf,KAAK,OAAO;GACZ,YAAY,iBAAiB,OAAO,QAAQ,MAAM,GAAG;GACrD,mBAAmB,MAAM;GACzB,SAAS,MAAM;GACf,mBAAmB;GACnB,kBAAkB;GAClB,cAAc,MAAM;GACpB,sBAAsB,OAAO;GAC7B,aAAa,OAAO;GACpB,kBAAkB,OAAO;GACzB,GAAG;GACH,GAAI,QAAQ,OAAO,YAAY,SAAS,aACpC;IACE,gCAAgC,SAAS;IACzC,0BAA0B,SAAS;IACnC,6BAA6B,SAAS;GACxC,IACA,CAAC;GACL,gBAAgB,OAAO;GACvB,2BAA2B,OAAO;GAClC,2BAA2B,OAAO;EACpC,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;EACA,IAAI,CAAC,OAAO,kBAAkB,MAC5B,OAAO,OAAO,aACZ,kBACA,QAAQ,UACR;GAAE,MAAM;GAAmB,MAAM;EAAqB,GACtD,SACF;EACF,OAAO,SAAS,SAAS,MAAM,IAAI,KAAK;GACtC,GAAG;GACH,GAAG;GACH,GAAG,OAAO;GACV,WAAW,OAAO;EACpB,CAAC;CACH,CAAC;AACH;AACA,IAAa,gBAAb,MAAa,sBAAsB,QAAQ,QAAgD,CAAC,CAC1F,sCACF,CAAC,CAAC;CACA,OAAgB,OAAO;CACvB,OAAgB,QAAQ,MAAM,OAAO,eAAe,OAAO,IAAI,WAAW,IAAI,CAAC;AACjF"}

package/dist/providers/s3/transfer-driver.js

@@ -0,0 +1,72 @@
+import { storageError } from "../../core/errors.js";
+import { operationMetadataKey } from "../../transfers/upload.js";
+import { Upload, nativeLimits } from "./native-models.js";
+import { Effect, Redacted, Schema } from "effect";
+
+// src/providers/s3/transfer-driver.ts
+const connections = /* @__PURE__ */ new WeakMap();
+/** SDK attempts are already fixed to one by S3Storage; Transfers owns all retry policy. */
+function makeS3TransferDriver(storage) {
+	const profile = storage.profile;
+	const limits = profile?.limits ?? nativeLimits;
+	const endpoint = {
+		storage,
+		maximumObjectBytes: profile?.maximumObjectBytes ?? nativeLimits.maximumPartBytes * nativeLimits.maximumParts,
+		maximumSingleUploadBytes: limits.maximumSinglePutBytes,
+		transportOverheadBytes: 1048576,
+		multipart: storage.multipart,
+		handles: profile ? profileSessionHandles(profile.configuration) : s3SessionHandles,
+		reconcile: ({ key, operationId, size }) => storage.head({ key }).pipe(Effect.map((metadata) => metadata.customMetadata?.["effect-storage-operation"] === operationId && metadata.size === size ? metadata : void 0), Effect.catchReason("StorageError", "NotFound", () => Effect.succeed(void 0))),
+		nativeCopy: {
+			maximumBytes: limits.maximumSingleCopyBytes,
+			accepts: (source) => profile?.copy !== "none" && (profile?.copy !== "bucket" || connections.get(source)?.config.bucket === storage.config.bucket && !storage.config.encryption && !connections.get(source)?.config.encryption) && connections.get(source)?.config.endpoint === storage.config.endpoint && connections.has(source),
+			copy: (intent) => storage.copyObject({
+				source: intent.ref,
+				destinationKey: intent.destinationKey,
+				sourceIfMatch: intent.etag,
+				condition: intent.condition,
+				headers: intent.headers,
+				metadataDirective: "REPLACE"
+			}, connections.get(intent.source)),
+			...profile && !profile.copyPartConditions ? {} : { part: (intent) => storage.copyPart({
+				upload: intent.upload,
+				partNumber: intent.partNumber,
+				source: intent.ref,
+				sourceIfMatch: intent.etag,
+				range: {
+					_tag: "Bounded",
+					start: intent.start,
+					end: intent.end
+				}
+			}, connections.get(intent.source)).pipe(Effect.map((part) => ({
+				partNumber: part.partNumber,
+				etag: part.etag,
+				checksums: part.checksums,
+				size: intent.end - intent.start + 1
+			}))) }
+		}
+	};
+	connections.set(endpoint, storage);
+	return endpoint;
+}
+/** Native checksum policy survives restart alongside the opaque upload identity. */
+const s3SessionHandles = {
+	encode: (handle) => Schema.encodeEffect(Schema.fromJsonString(Schema.toCodecJson(Upload)))(handle).pipe(Effect.map(Redacted.make), Effect.mapError(() => storageError("handleCodec", "s3", { _tag: "InvalidSession" }))),
+	decode: (encoded) => Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.toCodecJson(Upload)))(Redacted.value(encoded)).pipe(Effect.mapError(() => storageError("handleCodec", "s3", { _tag: "InvalidSession" })))
+};
+function profileSessionHandles(configuration) {
+	const envelope = Schema.fromJsonString(Schema.Struct({
+		configuration: Schema.Literal(configuration),
+		handle: Schema.String
+	}));
+	return {
+		encode: (handle) => s3SessionHandles.encode(handle).pipe(Effect.flatMap((encoded) => Schema.encodeEffect(envelope)({
+			configuration,
+			handle: Redacted.value(encoded)
+		})), Effect.map(Redacted.make), Effect.mapError(() => storageError("handleCodec", "s3", { _tag: "InvalidSession" }))),
+		decode: (encoded) => Schema.decodeUnknownEffect(envelope)(Redacted.value(encoded)).pipe(Effect.mapError(() => storageError("handleCodec", "s3", { _tag: "InvalidSession" })), Effect.flatMap((value) => s3SessionHandles.decode(Redacted.make(value.handle))))
+	};
+}
+
+export { makeS3TransferDriver };
+//# sourceMappingURL=transfer-driver.js.map

package/dist/providers/s3/transfer-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transfer-driver.js","names":[],"sources":["../../../src/providers/s3/transfer-driver.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport type { MultipartHandle } from \"../../core/contracts/multipart.js\";\nimport { storageError } from \"../../core/errors.js\";\nimport type { TransferEndpoint } from \"../../transfers/models.js\";\nimport { operationMetadataKey } from \"../../transfers/upload.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { Upload } from \"./native-models.js\";\nimport { nativeLimits } from \"./native-models.js\";\n\nconst connections = new WeakMap<TransferEndpoint, S3StorageService>();\n\n/** SDK attempts are already fixed to one by S3Storage; Transfers owns all retry policy. */\nexport function makeS3TransferDriver(storage: S3StorageService): TransferEndpoint {\n  const profile = storage.profile;\n  const limits = profile?.limits ?? nativeLimits;\n  const endpoint: TransferEndpoint = {\n    storage,\n    maximumObjectBytes:\n      profile?.maximumObjectBytes ?? nativeLimits.maximumPartBytes * nativeLimits.maximumParts,\n    maximumSingleUploadBytes: limits.maximumSinglePutBytes,\n    transportOverheadBytes: 1024 * 1024,\n    multipart: storage.multipart,\n    handles: profile ? profileSessionHandles(profile.configuration) : s3SessionHandles,\n    reconcile: ({ key, operationId, size }) =>\n      storage.head({ key }).pipe(\n        Effect.map((metadata) =>\n          metadata.customMetadata?.[operationMetadataKey] === operationId && metadata.size === size\n            ? metadata\n            : undefined,\n        ),\n        Effect.catchReason(\"StorageError\", \"NotFound\", () => Effect.succeed(undefined)),\n      ),\n    nativeCopy: {\n      maximumBytes: limits.maximumSingleCopyBytes,\n      accepts: (source) =>\n        profile?.copy !== \"none\" &&\n        (profile?.copy !== \"bucket\" ||\n          (connections.get(source)?.config.bucket === storage.config.bucket &&\n            !storage.config.encryption &&\n            !connections.get(source)?.config.encryption)) &&\n        connections.get(source)?.config.endpoint === storage.config.endpoint &&\n        connections.has(source),\n      copy: (intent) =>\n        storage.copyObject(\n          {\n            source: intent.ref,\n            destinationKey: intent.destinationKey,\n            sourceIfMatch: intent.etag,\n            condition: intent.condition,\n            headers: intent.headers,\n            metadataDirective: \"REPLACE\",\n          },\n          connections.get(intent.source),\n        ),\n      ...(profile && !profile.copyPartConditions\n        ? {}\n        : {\n            part: (intent) =>\n              storage\n                .copyPart(\n                  {\n                    upload: intent.upload,\n                    partNumber: intent.partNumber,\n                    source: intent.ref,\n                    sourceIfMatch: intent.etag,\n                    range: { _tag: \"Bounded\", start: intent.start, end: intent.end },\n                  },\n                  connections.get(intent.source),\n                )\n                .pipe(\n                  Effect.map((part) => ({\n                    partNumber: part.partNumber,\n                    etag: part.etag,\n                    checksums: part.checksums,\n                    size: intent.end - intent.start + 1,\n                  })),\n                ),\n          }),\n    },\n  };\n  connections.set(endpoint, storage);\n  return endpoint;\n}\n\n/** Native checksum policy survives restart alongside the opaque upload identity. */\nconst s3SessionHandles = {\n  encode: (handle: MultipartHandle) =>\n    Schema.encodeEffect(Schema.fromJsonString(Schema.toCodecJson(Upload)))(handle).pipe(\n      Effect.map(Redacted.make),\n      Effect.mapError(() => storageError(\"handleCodec\", \"s3\", { _tag: \"InvalidSession\" })),\n    ),\n  decode: (encoded: Redacted.Redacted<string>) =>\n    Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.toCodecJson(Upload)))(\n      Redacted.value(encoded),\n    ).pipe(Effect.mapError(() => storageError(\"handleCodec\", \"s3\", { _tag: \"InvalidSession\" }))),\n};\n\nfunction profileSessionHandles(configuration: string) {\n  const envelope = Schema.fromJsonString(\n    Schema.Struct({ configuration: Schema.Literal(configuration), handle: Schema.String }),\n  );\n  return {\n    encode: (handle: MultipartHandle) =>\n      s3SessionHandles.encode(handle).pipe(\n        Effect.flatMap((encoded) =>\n          Schema.encodeEffect(envelope)({ configuration, handle: Redacted.value(encoded) }),\n        ),\n        Effect.map(Redacted.make),\n        Effect.mapError(() => storageError(\"handleCodec\", \"s3\", { _tag: \"InvalidSession\" })),\n      ),\n    decode: (encoded: Redacted.Redacted<string>) =>\n      Schema.decodeUnknownEffect(envelope)(Redacted.value(encoded)).pipe(\n        Effect.mapError(() => storageError(\"handleCodec\", \"s3\", { _tag: \"InvalidSession\" })),\n        Effect.flatMap((value) => s3SessionHandles.decode(Redacted.make(value.handle))),\n      ),\n  };\n}\n"],"mappings":";;;;;;AAUA,MAAM,8BAAc,IAAI,QAA4C;;AAGpE,SAAgB,qBAAqB,SAA6C;CAChF,MAAM,UAAU,QAAQ;CACxB,MAAM,SAAS,SAAS,UAAU;CAClC,MAAM,WAA6B;EACjC;EACA,oBACE,SAAS,sBAAsB,aAAa,mBAAmB,aAAa;EAC9E,0BAA0B,OAAO;EACjC,wBAAwB;EACxB,WAAW,QAAQ;EACnB,SAAS,UAAU,sBAAsB,QAAQ,aAAa,IAAI;EAClE,YAAY,EAAE,KAAK,aAAa,WAC9B,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KACpB,OAAO,KAAK,aACV,SAAS,iDAA2C,eAAe,SAAS,SAAS,OACjF,WACA,MACN,GACA,OAAO,YAAY,gBAAgB,kBAAkB,OAAO,QAAQ,MAAS,CAAC,CAChF;EACF,YAAY;GACV,cAAc,OAAO;GACrB,UAAU,WACR,SAAS,SAAS,WACjB,SAAS,SAAS,YAChB,YAAY,IAAI,MAAM,CAAC,EAAE,OAAO,WAAW,QAAQ,OAAO,UACzD,CAAC,QAAQ,OAAO,cAChB,CAAC,YAAY,IAAI,MAAM,CAAC,EAAE,OAAO,eACrC,YAAY,IAAI,MAAM,CAAC,EAAE,OAAO,aAAa,QAAQ,OAAO,YAC5D,YAAY,IAAI,MAAM;GACxB,OAAO,WACL,QAAQ,WACN;IACE,QAAQ,OAAO;IACf,gBAAgB,OAAO;IACvB,eAAe,OAAO;IACtB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,mBAAmB;GACrB,GACA,YAAY,IAAI,OAAO,MAAM,CAC/B;GACF,GAAI,WAAW,CAAC,QAAQ,qBACpB,CAAC,IACD,EACE,OAAO,WACL,QACG,SACC;IACE,QAAQ,OAAO;IACf,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,eAAe,OAAO;IACtB,OAAO;KAAE,MAAM;KAAW,OAAO,OAAO;KAAO,KAAK,OAAO;IAAI;GACjE,GACA,YAAY,IAAI,OAAO,MAAM,CAC/B,CAAC,CACA,KACC,OAAO,KAAK,UAAU;IACpB,YAAY,KAAK;IACjB,MAAM,KAAK;IACX,WAAW,KAAK;IAChB,MAAM,OAAO,MAAM,OAAO,QAAQ;GACpC,EAAE,CACJ,EACN;EACN;CACF;CACA,YAAY,IAAI,UAAU,OAAO;CACjC,OAAO;AACT;;AAGA,MAAM,mBAAmB;CACvB,SAAS,WACP,OAAO,aAAa,OAAO,eAAe,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAC7E,OAAO,IAAI,SAAS,IAAI,GACxB,OAAO,eAAe,aAAa,eAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC,CAAC,CACrF;CACF,SAAS,YACP,OAAO,oBAAoB,OAAO,eAAe,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,CAC3E,SAAS,MAAM,OAAO,CACxB,CAAC,CAAC,KAAK,OAAO,eAAe,aAAa,eAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC,CAAC,CAAC;AAC/F;AAEA,SAAS,sBAAsB,eAAuB;CACpD,MAAM,WAAW,OAAO,eACtB,OAAO,OAAO;EAAE,eAAe,OAAO,QAAQ,aAAa;EAAG,QAAQ,OAAO;CAAO,CAAC,CACvF;CACA,OAAO;EACL,SAAS,WACP,iBAAiB,OAAO,MAAM,CAAC,CAAC,KAC9B,OAAO,SAAS,YACd,OAAO,aAAa,QAAQ,CAAC,CAAC;GAAE;GAAe,QAAQ,SAAS,MAAM,OAAO;EAAE,CAAC,CAClF,GACA,OAAO,IAAI,SAAS,IAAI,GACxB,OAAO,eAAe,aAAa,eAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC,CAAC,CACrF;EACF,SAAS,YACP,OAAO,oBAAoB,QAAQ,CAAC,CAAC,SAAS,MAAM,OAAO,CAAC,CAAC,CAAC,KAC5D,OAAO,eAAe,aAAa,eAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC,CAAC,GACnF,OAAO,SAAS,UAAU,iBAAiB,OAAO,SAAS,KAAK,MAAM,MAAM,CAAC,CAAC,CAChF;CACJ;AACF"}

package/dist/providers/s3/transport.js

@@ -0,0 +1,94 @@
+import { StorageError, storageError } from "../../core/errors.js";
+import { Clock, Effect, Predicate } from "effect";
+
+// src/providers/s3/transport.ts
+const knownReasons = {
+	NoSuchKey: { _tag: "NotFound" },
+	NoSuchVersion: { _tag: "NotFound" },
+	NotFound: { _tag: "NotFound" },
+	AccessDenied: { _tag: "AccessDenied" },
+	InvalidAccessKeyId: { _tag: "AccessDenied" },
+	SignatureDoesNotMatch: { _tag: "AccessDenied" },
+	PreconditionFailed: { _tag: "PreconditionFailed" },
+	NotModified: { _tag: "NotModified" },
+	InvalidRange: { _tag: "RangeNotSatisfiable" },
+	ExpiredToken: { _tag: "Expired" },
+	RequestExpired: { _tag: "Expired" },
+	SlowDown: { _tag: "Throttled" },
+	Throttling: { _tag: "Throttled" },
+	BadDigest: { _tag: "IntegrityMismatch" },
+	InvalidDigest: { _tag: "IntegrityMismatch" },
+	NoSuchUpload: { _tag: "InvalidSession" }
+};
+function mapS3Error(cause, operation, mutation, nowMillis) {
+	if (cause instanceof StorageError) return cause;
+	const failure = Predicate.isObject(cause) ? cause : {};
+	const name = typeof failure.name === "string" ? failure.name : "";
+	const metadata = Predicate.isObject(failure.$metadata) ? failure.$metadata : {};
+	const status = typeof metadata.httpStatusCode === "number" ? metadata.httpStatusCode : void 0;
+	const requestId = typeof metadata.requestId === "string" && /^[A-Za-z0-9+/=_-]{1,256}$/u.test(metadata.requestId) ? metadata.requestId : void 0;
+	let reason;
+	const known = Object.hasOwn(knownReasons, name) ? knownReasons[name] : void 0;
+	if (typeof failure.message === "string" && failure.message.startsWith("Checksum mismatch:")) reason = { _tag: "IntegrityMismatch" };
+	else if (known) reason = known;
+	else switch (status) {
+		case 304:
+			reason = { _tag: "NotModified" };
+			break;
+		case 403:
+			reason = { _tag: "AccessDenied" };
+			break;
+		case 412:
+			reason = { _tag: "PreconditionFailed" };
+			break;
+		case 416:
+			reason = { _tag: "RangeNotSatisfiable" };
+			break;
+		case 429:
+			reason = { _tag: "Throttled" };
+			break;
+		case void 0:
+			reason = { _tag: "TransportFailure" };
+			break;
+		default: reason = {
+			_tag: "ProviderFailure",
+			.../^[A-Za-z][A-Za-z0-9]{0,63}$/u.test(name) ? { code: name } : {}
+		};
+	}
+	if (reason._tag === "Throttled") {
+		const response = Predicate.isObject(failure.$response) ? failure.$response : {};
+		const retryAfter = (Predicate.isObject(response.headers) ? response.headers : {})["retry-after"];
+		if (typeof retryAfter === "string") {
+			const millis = /^\d+(?:\.\d+)?$/u.test(retryAfter) ? Number(retryAfter) * 1e3 : nowMillis === void 0 ? NaN : Date.parse(retryAfter) - nowMillis;
+			if (Number.isFinite(millis) && millis <= Number.MAX_SAFE_INTEGER) reason = {
+				_tag: "Throttled",
+				retryAfterMillis: Math.max(0, Math.ceil(millis))
+			};
+		}
+	}
+	return new StorageError({
+		operation,
+		provider: "s3",
+		reason,
+		requestId,
+		mutationOutcome: mutation ? reason._tag === "Throttled" && status === 503 || status !== void 0 && status >= 400 && status < 500 && status !== 408 ? "rejected" : "unknown" : "not-applicable"
+	});
+}
+function request(connection, operation, mutation, execute) {
+	return Effect.tryPromise({
+		try: execute,
+		catch: (cause) => cause
+	}).pipe(Effect.catch((cause) => Effect.flatMap(Clock.currentTimeMillis, (now) => Effect.fail(connection.profile ? new StorageError({
+		...mapS3Error(cause, operation, mutation, now),
+		provider: connection.profile.provider
+	}) : mapS3Error(cause, operation, mutation, now)))), Effect.timeoutOrElse({
+		duration: connection.config.requestTimeoutMillis,
+		orElse: () => Effect.fail(storageError(operation, "s3", {
+			_tag: "TransportFailure",
+			code: "DeadlineExceeded"
+		}, mutation ? "unknown" : "not-applicable"))
+	}));
+}
+
+export { mapS3Error, request };
+//# sourceMappingURL=transport.js.map

package/dist/providers/s3/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","names":[],"sources":["../../../src/providers/s3/transport.ts"],"sourcesContent":["import { Clock, Effect, Predicate } from \"effect\";\n\nimport { StorageError, storageError } from \"../../core/errors.js\";\nimport type { StorageReason } from \"../../core/errors.js\";\nimport type { S3Connection } from \"./config.js\";\n\nconst knownReasons: Readonly<Record<string, StorageReason>> = {\n  NoSuchKey: { _tag: \"NotFound\" },\n  NoSuchVersion: { _tag: \"NotFound\" },\n  NotFound: { _tag: \"NotFound\" },\n  AccessDenied: { _tag: \"AccessDenied\" },\n  InvalidAccessKeyId: { _tag: \"AccessDenied\" },\n  SignatureDoesNotMatch: { _tag: \"AccessDenied\" },\n  PreconditionFailed: { _tag: \"PreconditionFailed\" },\n  NotModified: { _tag: \"NotModified\" },\n  InvalidRange: { _tag: \"RangeNotSatisfiable\" },\n  ExpiredToken: { _tag: \"Expired\" },\n  RequestExpired: { _tag: \"Expired\" },\n  SlowDown: { _tag: \"Throttled\" },\n  Throttling: { _tag: \"Throttled\" },\n  BadDigest: { _tag: \"IntegrityMismatch\" },\n  InvalidDigest: { _tag: \"IntegrityMismatch\" },\n  NoSuchUpload: { _tag: \"InvalidSession\" },\n};\n\nexport function mapS3Error(\n  cause: unknown,\n  operation: string,\n  mutation: boolean,\n  nowMillis?: number,\n): StorageError {\n  if (cause instanceof StorageError) return cause;\n  const failure = Predicate.isObject(cause) ? cause : {};\n  const name = typeof failure.name === \"string\" ? failure.name : \"\";\n  const metadata = Predicate.isObject(failure.$metadata) ? failure.$metadata : {};\n  const status = typeof metadata.httpStatusCode === \"number\" ? metadata.httpStatusCode : undefined;\n  const requestId =\n    typeof metadata.requestId === \"string\" && /^[A-Za-z0-9+/=_-]{1,256}$/u.test(metadata.requestId)\n      ? metadata.requestId\n      : undefined;\n  let reason: StorageReason;\n  const known = Object.hasOwn(knownReasons, name) ? knownReasons[name] : undefined;\n  if (typeof failure.message === \"string\" && failure.message.startsWith(\"Checksum mismatch:\")) {\n    reason = { _tag: \"IntegrityMismatch\" };\n  } else if (known) {\n    reason = known;\n  } else {\n    switch (status) {\n      case 304:\n        reason = { _tag: \"NotModified\" };\n        break;\n      case 403:\n        reason = { _tag: \"AccessDenied\" };\n        break;\n      case 412:\n        reason = { _tag: \"PreconditionFailed\" };\n        break;\n      case 416:\n        reason = { _tag: \"RangeNotSatisfiable\" };\n        break;\n      case 429:\n        reason = { _tag: \"Throttled\" };\n        break;\n      case undefined:\n        reason = { _tag: \"TransportFailure\" };\n        break;\n      default:\n        reason = {\n          _tag: \"ProviderFailure\",\n          ...(/^[A-Za-z][A-Za-z0-9]{0,63}$/u.test(name) ? { code: name } : {}),\n        };\n    }\n  }\n\n  if (reason._tag === \"Throttled\") {\n    const response = Predicate.isObject(failure.$response) ? failure.$response : {};\n    const headers = Predicate.isObject(response.headers) ? response.headers : {};\n    const retryAfter = headers[\"retry-after\"];\n    if (typeof retryAfter === \"string\") {\n      const millis = /^\\d+(?:\\.\\d+)?$/u.test(retryAfter)\n        ? Number(retryAfter) * 1000\n        : nowMillis === undefined\n          ? Number.NaN\n          : Date.parse(retryAfter) - nowMillis;\n      if (Number.isFinite(millis) && millis <= Number.MAX_SAFE_INTEGER)\n        reason = { _tag: \"Throttled\", retryAfterMillis: Math.max(0, Math.ceil(millis)) };\n    }\n  }\n\n  // Generic 404s can mean a missing bucket or hidden authority; only named object errors prove absence.\n  return new StorageError({\n    operation,\n    provider: \"s3\",\n    reason,\n    requestId,\n    mutationOutcome: mutation\n      ? (reason._tag === \"Throttled\" && status === 503) ||\n        (status !== undefined && status >= 400 && status < 500 && status !== 408)\n        ? \"rejected\"\n        : \"unknown\"\n      : \"not-applicable\",\n  });\n}\n\nexport function request<A>(\n  connection: S3Connection,\n  operation: string,\n  mutation: boolean,\n  execute: (signal: AbortSignal) => Promise<A>,\n) {\n  return Effect.tryPromise({\n    try: execute,\n    catch: (cause) => cause,\n  }).pipe(\n    Effect.catch((cause) =>\n      Effect.flatMap(Clock.currentTimeMillis, (now) =>\n        Effect.fail(\n          connection.profile\n            ? new StorageError({\n                ...mapS3Error(cause, operation, mutation, now),\n                provider: connection.profile.provider,\n              })\n            : mapS3Error(cause, operation, mutation, now),\n        ),\n      ),\n    ),\n    Effect.timeoutOrElse({\n      duration: connection.config.requestTimeoutMillis,\n      orElse: () =>\n        Effect.fail(\n          storageError(\n            operation,\n            \"s3\",\n            { _tag: \"TransportFailure\", code: \"DeadlineExceeded\" },\n            mutation ? \"unknown\" : \"not-applicable\",\n          ),\n        ),\n    }),\n  );\n}\n"],"mappings":";;;;AAMA,MAAM,eAAwD;CAC5D,WAAW,EAAE,MAAM,WAAW;CAC9B,eAAe,EAAE,MAAM,WAAW;CAClC,UAAU,EAAE,MAAM,WAAW;CAC7B,cAAc,EAAE,MAAM,eAAe;CACrC,oBAAoB,EAAE,MAAM,eAAe;CAC3C,uBAAuB,EAAE,MAAM,eAAe;CAC9C,oBAAoB,EAAE,MAAM,qBAAqB;CACjD,aAAa,EAAE,MAAM,cAAc;CACnC,cAAc,EAAE,MAAM,sBAAsB;CAC5C,cAAc,EAAE,MAAM,UAAU;CAChC,gBAAgB,EAAE,MAAM,UAAU;CAClC,UAAU,EAAE,MAAM,YAAY;CAC9B,YAAY,EAAE,MAAM,YAAY;CAChC,WAAW,EAAE,MAAM,oBAAoB;CACvC,eAAe,EAAE,MAAM,oBAAoB;CAC3C,cAAc,EAAE,MAAM,iBAAiB;AACzC;AAEA,SAAgB,WACd,OACA,WACA,UACA,WACc;CACd,IAAI,iBAAiB,cAAc,OAAO;CAC1C,MAAM,UAAU,UAAU,SAAS,KAAK,IAAI,QAAQ,CAAC;CACrD,MAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;CAC/D,MAAM,WAAW,UAAU,SAAS,QAAQ,SAAS,IAAI,QAAQ,YAAY,CAAC;CAC9E,MAAM,SAAS,OAAO,SAAS,mBAAmB,WAAW,SAAS,iBAAiB;CACvF,MAAM,YACJ,OAAO,SAAS,cAAc,YAAY,6BAA6B,KAAK,SAAS,SAAS,IAC1F,SAAS,YACT;CACN,IAAI;CACJ,MAAM,QAAQ,OAAO,OAAO,cAAc,IAAI,IAAI,aAAa,QAAQ;CACvE,IAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,WAAW,oBAAoB,GACxF,SAAS,EAAE,MAAM,oBAAoB;MAChC,IAAI,OACT,SAAS;MAET,QAAQ,QAAR;EACE,KAAK;GACH,SAAS,EAAE,MAAM,cAAc;GAC/B;EACF,KAAK;GACH,SAAS,EAAE,MAAM,eAAe;GAChC;EACF,KAAK;GACH,SAAS,EAAE,MAAM,qBAAqB;GACtC;EACF,KAAK;GACH,SAAS,EAAE,MAAM,sBAAsB;GACvC;EACF,KAAK;GACH,SAAS,EAAE,MAAM,YAAY;GAC7B;EACF,KAAK;GACH,SAAS,EAAE,MAAM,mBAAmB;GACpC;EACF,SACE,SAAS;GACP,MAAM;GACN,GAAI,+BAA+B,KAAK,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;EACpE;CACJ;CAGF,IAAI,OAAO,SAAS,aAAa;EAC/B,MAAM,WAAW,UAAU,SAAS,QAAQ,SAAS,IAAI,QAAQ,YAAY,CAAC;EAE9E,MAAM,cADU,UAAU,SAAS,SAAS,OAAO,IAAI,SAAS,UAAU,CAAC,EACjD,CAAC;EAC3B,IAAI,OAAO,eAAe,UAAU;GAClC,MAAM,SAAS,mBAAmB,KAAK,UAAU,IAC7C,OAAO,UAAU,IAAI,MACrB,cAAc,SACZ,MACA,KAAK,MAAM,UAAU,IAAI;GAC/B,IAAI,OAAO,SAAS,MAAM,KAAK,UAAU,OAAO,kBAC9C,SAAS;IAAE,MAAM;IAAa,kBAAkB,KAAK,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC;GAAE;EACnF;CACF;CAGA,OAAO,IAAI,aAAa;EACtB;EACA,UAAU;EACV;EACA;EACA,iBAAiB,WACZ,OAAO,SAAS,eAAe,WAAW,OAC1C,WAAW,UAAa,UAAU,OAAO,SAAS,OAAO,WAAW,MACnE,aACA,YACF;CACN,CAAC;AACH;AAEA,SAAgB,QACd,YACA,WACA,UACA,SACA;CACA,OAAO,OAAO,WAAW;EACvB,KAAK;EACL,QAAQ,UAAU;CACpB,CAAC,CAAC,CAAC,KACD,OAAO,OAAO,UACZ,OAAO,QAAQ,MAAM,oBAAoB,QACvC,OAAO,KACL,WAAW,UACP,IAAI,aAAa;EACf,GAAG,WAAW,OAAO,WAAW,UAAU,GAAG;EAC7C,UAAU,WAAW,QAAQ;CAC/B,CAAC,IACD,WAAW,OAAO,WAAW,UAAU,GAAG,CAChD,CACF,CACF,GACA,OAAO,cAAc;EACnB,UAAU,WAAW,OAAO;EAC5B,cACE,OAAO,KACL,aACE,WACA,MACA;GAAE,MAAM;GAAoB,MAAM;EAAmB,GACrD,WAAW,YAAY,gBACzB,CACF;CACJ,CAAC,CACH;AACF"}

package/dist/providers/s3/upload-body.js

@@ -0,0 +1,10 @@
+import { uploadBody as uploadBody$1 } from "../../internal/node/upload-body.js";
+
+// src/providers/s3/upload-body.ts
+const uploadBody = (connection, input, operation, execute) => uploadBody$1({
+	provider: "s3",
+	maxUnknownLengthBytes: connection.config.maxUnknownLengthBytes
+}, input, operation, execute);
+
+export { uploadBody };
+//# sourceMappingURL=upload-body.js.map

package/dist/providers/s3/upload-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-body.js","names":["nodeUploadBody"],"sources":["../../../src/providers/s3/upload-body.ts"],"sourcesContent":["import type { PassThrough } from \"node:stream\";\n\nimport type { Effect } from \"effect\";\n\nimport type { StorageError } from \"../../core/errors.js\";\nimport type { PutRequest } from \"../../core/requests.js\";\nimport { uploadBody as nodeUploadBody } from \"../../internal/node/upload-body.js\";\nimport type { S3Connection } from \"./config.js\";\n\nexport const uploadBody = <A, E, R>(\n  connection: S3Connection,\n  input: Pick<PutRequest<E, R>, \"body\" | \"contentLength\" | \"maxBytes\">,\n  operation: string,\n  execute: (body: Uint8Array | PassThrough, length: number) => Effect.Effect<A, StorageError>,\n) =>\n  nodeUploadBody(\n    { provider: \"s3\", maxUnknownLengthBytes: connection.config.maxUnknownLengthBytes },\n    input,\n    operation,\n    execute,\n  );\n"],"mappings":";;;AASA,MAAa,cACX,YACA,OACA,WACA,YAEAA,aACE;CAAE,UAAU;CAAM,uBAAuB,WAAW,OAAO;AAAsB,GACjF,OACA,WACA,OACF"}

package/dist/providers/s3/validation.js

@@ -0,0 +1,31 @@
+import { ObjectHeaders, ObjectKey } from "../../core/object.js";
+import { storageError } from "../../core/errors.js";
+import { decodeRequest } from "../../internal/request-validation.js";
+import { Effect, Schema } from "effect";
+import { validateHeaderValue } from "node:http";
+
+// src/providers/s3/validation.ts
+const S3Key = ObjectKey.check(Schema.makeFilter((key) => new TextEncoder().encode(key).length <= 1024, { expected: "an S3 key of at most 1024 UTF-8 bytes" }));
+const validateHeaders = Effect.fnUntraced(function* (input, operation) {
+	const value = yield* decodeRequest(ObjectHeaders, input, operation, "s3", true);
+	const names = Object.keys(value.customMetadata ?? {}).map((name) => name.toLowerCase());
+	const bytes = Object.entries(value.customMetadata ?? {}).reduce((total, [name, content]) => total + Buffer.byteLength(name) + Buffer.byteLength(content), 0);
+	if (new Set(names).size !== names.length || bytes > 2048) return yield* storageError(operation, "s3", {
+		_tag: "InvalidInput",
+		field: "metadata"
+	}, "not-started");
+	yield* Effect.try({
+		try: () => {
+			for (const [name, content] of Object.entries(value)) if (typeof content === "string") validateHeaderValue(name, content);
+			for (const [name, content] of Object.entries(value.customMetadata ?? {})) validateHeaderValue(name, content);
+		},
+		catch: () => storageError(operation, "s3", {
+			_tag: "InvalidInput",
+			field: "headers"
+		}, "not-started")
+	});
+	return value;
+});
+
+export { S3Key, validateHeaders };
+//# sourceMappingURL=validation.js.map

package/dist/providers/s3/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","names":[],"sources":["../../../src/providers/s3/validation.ts"],"sourcesContent":["import { validateHeaderValue } from \"node:http\";\n\nimport { Effect, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { ObjectHeaders, ObjectKey } from \"../../core/object.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\n\nexport const S3Key = ObjectKey.check(\n  Schema.makeFilter<string>((key) => new TextEncoder().encode(key).length <= 1024, {\n    expected: \"an S3 key of at most 1024 UTF-8 bytes\",\n  }),\n);\n\nexport const validateHeaders = Effect.fnUntraced(function* (\n  input: ObjectHeaders,\n  operation: string,\n) {\n  const value = yield* decodeRequest(ObjectHeaders, input, operation, \"s3\", true);\n  const names = Object.keys(value.customMetadata ?? {}).map((name) => name.toLowerCase());\n  const bytes = Object.entries(value.customMetadata ?? {}).reduce(\n    (total, [name, content]) => total + Buffer.byteLength(name) + Buffer.byteLength(content),\n    0,\n  );\n  if (new Set(names).size !== names.length || bytes > 2048)\n    return yield* storageError(\n      operation,\n      \"s3\",\n      { _tag: \"InvalidInput\", field: \"metadata\" },\n      \"not-started\",\n    );\n  yield* Effect.try({\n    try: () => {\n      for (const [name, content] of Object.entries(value)) {\n        if (typeof content === \"string\") validateHeaderValue(name, content);\n      }\n      for (const [name, content] of Object.entries(value.customMetadata ?? {}))\n        validateHeaderValue(name, content);\n    },\n    catch: () =>\n      storageError(operation, \"s3\", { _tag: \"InvalidInput\", field: \"headers\" }, \"not-started\"),\n  });\n  return value;\n});\n"],"mappings":";;;;;;;AAQA,MAAa,QAAQ,UAAU,MAC7B,OAAO,YAAoB,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,MAAM,EAC/E,UAAU,wCACZ,CAAC,CACH;AAEA,MAAa,kBAAkB,OAAO,WAAW,WAC/C,OACA,WACA;CACA,MAAM,QAAQ,OAAO,cAAc,eAAe,OAAO,WAAW,MAAM,IAAI;CAC9E,MAAM,QAAQ,OAAO,KAAK,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,KAAK,YAAY,CAAC;CACtF,MAAM,QAAQ,OAAO,QAAQ,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC,QACtD,OAAO,CAAC,MAAM,aAAa,QAAQ,OAAO,WAAW,IAAI,IAAI,OAAO,WAAW,OAAO,GACvF,CACF;CACA,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,UAAU,QAAQ,MAClD,OAAO,OAAO,aACZ,WACA,MACA;EAAE,MAAM;EAAgB,OAAO;CAAW,GAC1C,aACF;CACF,OAAO,OAAO,IAAI;EAChB,WAAW;GACT,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,GAChD,IAAI,OAAO,YAAY,UAAU,oBAAoB,MAAM,OAAO;GAEpE,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,MAAM,kBAAkB,CAAC,CAAC,GACrE,oBAAoB,MAAM,OAAO;EACrC;EACA,aACE,aAAa,WAAW,MAAM;GAAE,MAAM;GAAgB,OAAO;EAAU,GAAG,aAAa;CAC3F,CAAC;CACD,OAAO;AACT,CAAC"}

package/dist/providers/s3/versions.d.ts

@@ -0,0 +1,10 @@
+import { StorageVersions, VersionsService } from "../../lifecycle.js";
+import { S3Storage, S3StorageService } from "../../s3.js";
+import { Context, Layer } from "effect";
+declare const S3Versions_base: Context.ServiceClass<S3Versions, "@effect-kit/storage/s3/S3Versions", VersionsService>;
+export declare class S3Versions extends S3Versions_base {
+  static make(storage: S3StorageService): VersionsService;
+  static readonly layer: Layer.Layer<S3Versions | StorageVersions, never, S3Storage>;
+}
+export {};
+//# sourceMappingURL=versions.d.ts.map