@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/providers/s3/versions.js

@@ -0,0 +1,143 @@
+import { storageError } from "../../core/errors.js";
+import { decodeRequest } from "../../internal/request-validation.js";
+import { metadata } from "./object-mapping.js";
+import { request } from "./transport.js";
+import { decodeCursor, encodeCursor } from "../../internal/listing-cursor.js";
+import { S3Storage } from "../../s3.js";
+import { RestoreVersion, StorageVersions, VersionQuery, VersionRef } from "../../lifecycle.js";
+import { lifecycleFeature, lifecycleTarget } from "./lifecycle-validation.js";
+import { Context, Effect, Layer, Schema } from "effect";
+import { DeleteObjectCommand, ListObjectVersionsCommand } from "@aws-sdk/client-s3";
+
+// src/providers/s3/versions.ts
+var S3Versions = class S3Versions extends Context.Service()("@effect-kit/storage/s3/S3Versions") {
+	static make(storage) {
+		const remove = Effect.fnUntraced(function* (input, marker) {
+			const { ref } = yield* decodeRequest(Schema.Struct({ ref: VersionRef }), input, "deleteVersion", storage.provider, true);
+			yield* lifecycleFeature(storage, "versions");
+			const target = yield* lifecycleTarget(storage, ref, "deleteVersion", true);
+			let keyMarker;
+			let versionMarker;
+			let found = false;
+			for (let pageNumber = 0; pageNumber < 1e3; pageNumber++) {
+				const page = yield* request(storage, "inspectVersionKind", false, (signal) => storage.client.send(new ListObjectVersionsCommand({
+					Bucket: target.Bucket,
+					Prefix: ref.key,
+					MaxKeys: 1e3,
+					KeyMarker: keyMarker,
+					VersionIdMarker: versionMarker
+				}), { abortSignal: signal }));
+				const content = page.Versions?.some((version) => version.Key === ref.key && version.VersionId === ref.version.id);
+				const deleted = page.DeleteMarkers?.some((version) => version.Key === ref.key && version.VersionId === ref.version.id);
+				if (content || deleted) {
+					if (marker !== Boolean(deleted)) return yield* storageError("deleteVersion", storage.provider, {
+						_tag: "InvalidInput",
+						field: "version-kind"
+					}, "not-started");
+					found = true;
+					break;
+				}
+				if (!page.IsTruncated) break;
+				if (!page.NextKeyMarker || !page.NextVersionIdMarker || page.NextKeyMarker === keyMarker && page.NextVersionIdMarker === versionMarker) return yield* storageError("inspectVersionKind", storage.provider, {
+					_tag: "ProviderFailure",
+					code: "InvalidContinuation"
+				}, "not-started");
+				keyMarker = page.NextKeyMarker;
+				versionMarker = page.NextVersionIdMarker;
+			}
+			if (!found) return yield* storageError("deleteVersion", storage.provider, { _tag: "NotFound" }, "not-started");
+			yield* request(storage, "deleteVersion", true, (signal) => storage.client.send(new DeleteObjectCommand(target), { abortSignal: signal }));
+		});
+		return StorageVersions.make({
+			deleteVersion: (input) => remove(input, false),
+			removeDeleteMarker: (input) => remove(input, true),
+			listPage: Effect.fnUntraced(function* (input = {}) {
+				const query = yield* decodeRequest(VersionQuery, input, "listVersions", storage.provider);
+				yield* lifecycleFeature(storage, "versions");
+				if (query.deleted) return yield* storageError("listVersions", storage.provider, {
+					_tag: "Unsupported",
+					capability: "soft-delete-list"
+				});
+				const identity = JSON.stringify([
+					"versions",
+					storage.profile?.configuration,
+					query.prefix ?? "",
+					query.limit ?? 1e3
+				]);
+				const token = yield* decodeCursor(storage.provider, query.cursor, storage.storeId, identity, "listVersions");
+				const marker = token ? yield* decodeRequest(Schema.fromJsonString(Schema.Struct({
+					key: Schema.String,
+					version: Schema.String
+				})), token, "listVersions", storage.provider) : void 0;
+				const page = yield* request(storage, "listVersions", false, (signal) => storage.client.send(new ListObjectVersionsCommand({
+					Bucket: storage.config.bucket,
+					Prefix: query.prefix,
+					MaxKeys: query.limit ?? 1e3,
+					KeyMarker: marker?.key,
+					VersionIdMarker: marker?.version
+				}), { abortSignal: signal }));
+				const entries = [];
+				for (const version of page.Versions ?? []) {
+					if (!version.Key || !version.VersionId) return yield* storageError("listVersions", storage.provider, {
+						_tag: "ProviderFailure",
+						code: "InvalidVersionInventory"
+					});
+					entries.push({
+						_tag: "Version",
+						metadata: metadata(storage, version.Key, {
+							...version,
+							ContentLength: version.Size
+						}),
+						isLatest: version.IsLatest ?? false
+					});
+				}
+				for (const removed of page.DeleteMarkers ?? []) {
+					if (!removed.Key || !removed.VersionId) return yield* storageError("listVersions", storage.provider, {
+						_tag: "ProviderFailure",
+						code: "InvalidMarkerInventory"
+					});
+					entries.push({
+						_tag: "DeleteMarker",
+						ref: {
+							storeId: storage.storeId,
+							key: removed.Key,
+							version: {
+								_tag: "S3Version",
+								id: removed.VersionId
+							}
+						},
+						isLatest: removed.IsLatest ?? false
+					});
+				}
+				if (page.IsTruncated && (!page.NextKeyMarker || !page.NextVersionIdMarker)) return yield* storageError("listVersions", storage.provider, {
+					_tag: "ProviderFailure",
+					code: "MissingContinuation"
+				});
+				return {
+					entries,
+					...page.IsTruncated ? { cursor: encodeCursor(storage.storeId, identity, JSON.stringify({
+						key: page.NextKeyMarker,
+						version: page.NextVersionIdMarker
+					})) } : {}
+				};
+			}),
+			restore: Effect.fnUntraced(function* (input) {
+				const value = yield* decodeRequest(RestoreVersion, input, "restoreVersion", storage.provider, true);
+				yield* lifecycleFeature(storage, "versions");
+				yield* lifecycleTarget(storage, value.source, "restoreVersion", true);
+				return yield* storage.copyObject({
+					source: value.source,
+					destinationKey: value.destinationKey,
+					condition: value.condition
+				});
+			})
+		});
+	}
+	static layer = Layer.effectContext(Effect.map(S3Storage, (storage) => {
+		const service = S3Versions.make(storage);
+		return Context.make(S3Versions, service).pipe(Context.add(StorageVersions, service));
+	}));
+};
+
+export { S3Versions };
+//# sourceMappingURL=versions.js.map

package/dist/providers/s3/versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versions.js","names":[],"sources":["../../../src/providers/s3/versions.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { DeleteObjectCommand, ListObjectVersionsCommand } from \"@aws-sdk/client-s3\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { decodeCursor, encodeCursor } from \"../../internal/listing-cursor.js\";\nimport { decodeRequest } from \"../../internal/request-validation.js\";\nimport {\n  RestoreVersion,\n  StorageVersions,\n  VersionQuery,\n  VersionRef,\n} from \"../../lifecycle/index.js\";\nimport type { VersionEntry, VersionsService } from \"../../lifecycle/index.js\";\nimport { S3Storage } from \"./index.js\";\nimport type { S3StorageService } from \"./index.js\";\nimport { lifecycleFeature, lifecycleTarget } from \"./lifecycle-validation.js\";\nimport { metadata } from \"./object-mapping.js\";\nimport { request } from \"./transport.js\";\n\nexport class S3Versions extends Context.Service<S3Versions, VersionsService>()(\n  \"@effect-kit/storage/s3/S3Versions\",\n) {\n  static make(storage: S3StorageService): VersionsService {\n    const remove = Effect.fnUntraced(function* (\n      input: { readonly ref: VersionRef },\n      marker: boolean,\n    ) {\n      const { ref } = yield* decodeRequest(\n        Schema.Struct({ ref: VersionRef }),\n        input,\n        \"deleteVersion\",\n        storage.provider,\n        true,\n      );\n      yield* lifecycleFeature(storage, \"versions\");\n      const target = yield* lifecycleTarget(storage, ref, \"deleteVersion\", true);\n      let keyMarker: string | undefined;\n      let versionMarker: string | undefined;\n      let found = false;\n      for (let pageNumber = 0; pageNumber < 1000; pageNumber++) {\n        const page = yield* request(storage, \"inspectVersionKind\", false, (signal) =>\n          storage.client.send(\n            new ListObjectVersionsCommand({\n              Bucket: target.Bucket,\n              Prefix: ref.key,\n              MaxKeys: 1000,\n              KeyMarker: keyMarker,\n              VersionIdMarker: versionMarker,\n            }),\n            { abortSignal: signal },\n          ),\n        );\n        const content = page.Versions?.some(\n          (version) => version.Key === ref.key && version.VersionId === ref.version.id,\n        );\n        const deleted = page.DeleteMarkers?.some(\n          (version) => version.Key === ref.key && version.VersionId === ref.version.id,\n        );\n        if (content || deleted) {\n          if (marker !== Boolean(deleted))\n            return yield* storageError(\n              \"deleteVersion\",\n              storage.provider,\n              { _tag: \"InvalidInput\", field: \"version-kind\" },\n              \"not-started\",\n            );\n          found = true;\n          break;\n        }\n        if (!page.IsTruncated) break;\n        if (\n          !page.NextKeyMarker ||\n          !page.NextVersionIdMarker ||\n          (page.NextKeyMarker === keyMarker && page.NextVersionIdMarker === versionMarker)\n        )\n          return yield* storageError(\n            \"inspectVersionKind\",\n            storage.provider,\n            { _tag: \"ProviderFailure\", code: \"InvalidContinuation\" },\n            \"not-started\",\n          );\n        keyMarker = page.NextKeyMarker;\n        versionMarker = page.NextVersionIdMarker;\n      }\n      if (!found)\n        return yield* storageError(\n          \"deleteVersion\",\n          storage.provider,\n          { _tag: \"NotFound\" },\n          \"not-started\",\n        );\n      yield* request(storage, \"deleteVersion\", true, (signal) =>\n        storage.client.send(new DeleteObjectCommand(target), { abortSignal: signal }),\n      );\n    });\n    return StorageVersions.make({\n      deleteVersion: (input) => remove(input, false),\n      removeDeleteMarker: (input) => remove(input, true),\n      listPage: Effect.fnUntraced(function* (input = {}) {\n        const query = yield* decodeRequest(VersionQuery, input, \"listVersions\", storage.provider);\n        yield* lifecycleFeature(storage, \"versions\");\n        if (query.deleted)\n          return yield* storageError(\"listVersions\", storage.provider, {\n            _tag: \"Unsupported\",\n            capability: \"soft-delete-list\",\n          });\n        const identity = JSON.stringify([\n          \"versions\",\n          storage.profile?.configuration,\n          query.prefix ?? \"\",\n          query.limit ?? 1000,\n        ]);\n        const token = yield* decodeCursor(\n          storage.provider,\n          query.cursor,\n          storage.storeId,\n          identity,\n          \"listVersions\",\n        );\n        const marker = token\n          ? yield* decodeRequest(\n              Schema.fromJsonString(Schema.Struct({ key: Schema.String, version: Schema.String })),\n              token,\n              \"listVersions\",\n              storage.provider,\n            )\n          : undefined;\n        const page = yield* request(storage, \"listVersions\", false, (signal) =>\n          storage.client.send(\n            new ListObjectVersionsCommand({\n              Bucket: storage.config.bucket,\n              Prefix: query.prefix,\n              MaxKeys: query.limit ?? 1000,\n              KeyMarker: marker?.key,\n              VersionIdMarker: marker?.version,\n            }),\n            { abortSignal: signal },\n          ),\n        );\n        const entries: VersionEntry[] = [];\n        for (const version of page.Versions ?? []) {\n          if (!version.Key || !version.VersionId)\n            return yield* storageError(\"listVersions\", storage.provider, {\n              _tag: \"ProviderFailure\",\n              code: \"InvalidVersionInventory\",\n            });\n          entries.push({\n            _tag: \"Version\",\n            metadata: metadata(storage, version.Key, {\n              ...version,\n              ContentLength: version.Size,\n            }),\n            isLatest: version.IsLatest ?? false,\n          });\n        }\n        for (const removed of page.DeleteMarkers ?? []) {\n          if (!removed.Key || !removed.VersionId)\n            return yield* storageError(\"listVersions\", storage.provider, {\n              _tag: \"ProviderFailure\",\n              code: \"InvalidMarkerInventory\",\n            });\n          entries.push({\n            _tag: \"DeleteMarker\",\n            ref: {\n              storeId: storage.storeId,\n              key: removed.Key,\n              version: { _tag: \"S3Version\", id: removed.VersionId },\n            },\n            isLatest: removed.IsLatest ?? false,\n          });\n        }\n        if (page.IsTruncated && (!page.NextKeyMarker || !page.NextVersionIdMarker))\n          return yield* storageError(\"listVersions\", storage.provider, {\n            _tag: \"ProviderFailure\",\n            code: \"MissingContinuation\",\n          });\n        return {\n          entries,\n          ...(page.IsTruncated\n            ? {\n                cursor: encodeCursor(\n                  storage.storeId,\n                  identity,\n                  JSON.stringify({ key: page.NextKeyMarker, version: page.NextVersionIdMarker }),\n                ),\n              }\n            : {}),\n        };\n      }),\n      restore: Effect.fnUntraced(function* (input) {\n        const value = yield* decodeRequest(\n          RestoreVersion,\n          input,\n          \"restoreVersion\",\n          storage.provider,\n          true,\n        );\n        yield* lifecycleFeature(storage, \"versions\");\n        yield* lifecycleTarget(storage, value.source, \"restoreVersion\", true);\n        return yield* storage.copyObject({\n          source: value.source,\n          destinationKey: value.destinationKey,\n          condition: value.condition,\n        });\n      }),\n    });\n  }\n  static readonly layer = Layer.effectContext(\n    Effect.map(S3Storage, (storage) => {\n      const service = S3Versions.make(storage);\n      return Context.make(S3Versions, service).pipe(Context.add(StorageVersions, service));\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAoBA,IAAa,aAAb,MAAa,mBAAmB,QAAQ,QAAqC,CAAC,CAC5E,mCACF,CAAC,CAAC;CACA,OAAO,KAAK,SAA4C;EACtD,MAAM,SAAS,OAAO,WAAW,WAC/B,OACA,QACA;GACA,MAAM,EAAE,QAAQ,OAAO,cACrB,OAAO,OAAO,EAAE,KAAK,WAAW,CAAC,GACjC,OACA,iBACA,QAAQ,UACR,IACF;GACA,OAAO,iBAAiB,SAAS,UAAU;GAC3C,MAAM,SAAS,OAAO,gBAAgB,SAAS,KAAK,iBAAiB,IAAI;GACzE,IAAI;GACJ,IAAI;GACJ,IAAI,QAAQ;GACZ,KAAK,IAAI,aAAa,GAAG,aAAa,KAAM,cAAc;IACxD,MAAM,OAAO,OAAO,QAAQ,SAAS,sBAAsB,QAAQ,WACjE,QAAQ,OAAO,KACb,IAAI,0BAA0B;KAC5B,QAAQ,OAAO;KACf,QAAQ,IAAI;KACZ,SAAS;KACT,WAAW;KACX,iBAAiB;IACnB,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;IACA,MAAM,UAAU,KAAK,UAAU,MAC5B,YAAY,QAAQ,QAAQ,IAAI,OAAO,QAAQ,cAAc,IAAI,QAAQ,EAC5E;IACA,MAAM,UAAU,KAAK,eAAe,MACjC,YAAY,QAAQ,QAAQ,IAAI,OAAO,QAAQ,cAAc,IAAI,QAAQ,EAC5E;IACA,IAAI,WAAW,SAAS;KACtB,IAAI,WAAW,QAAQ,OAAO,GAC5B,OAAO,OAAO,aACZ,iBACA,QAAQ,UACR;MAAE,MAAM;MAAgB,OAAO;KAAe,GAC9C,aACF;KACF,QAAQ;KACR;IACF;IACA,IAAI,CAAC,KAAK,aAAa;IACvB,IACE,CAAC,KAAK,iBACN,CAAC,KAAK,uBACL,KAAK,kBAAkB,aAAa,KAAK,wBAAwB,eAElE,OAAO,OAAO,aACZ,sBACA,QAAQ,UACR;KAAE,MAAM;KAAmB,MAAM;IAAsB,GACvD,aACF;IACF,YAAY,KAAK;IACjB,gBAAgB,KAAK;GACvB;GACA,IAAI,CAAC,OACH,OAAO,OAAO,aACZ,iBACA,QAAQ,UACR,EAAE,MAAM,WAAW,GACnB,aACF;GACF,OAAO,QAAQ,SAAS,iBAAiB,OAAO,WAC9C,QAAQ,OAAO,KAAK,IAAI,oBAAoB,MAAM,GAAG,EAAE,aAAa,OAAO,CAAC,CAC9E;EACF,CAAC;EACD,OAAO,gBAAgB,KAAK;GAC1B,gBAAgB,UAAU,OAAO,OAAO,KAAK;GAC7C,qBAAqB,UAAU,OAAO,OAAO,IAAI;GACjD,UAAU,OAAO,WAAW,WAAW,QAAQ,CAAC,GAAG;IACjD,MAAM,QAAQ,OAAO,cAAc,cAAc,OAAO,gBAAgB,QAAQ,QAAQ;IACxF,OAAO,iBAAiB,SAAS,UAAU;IAC3C,IAAI,MAAM,SACR,OAAO,OAAO,aAAa,gBAAgB,QAAQ,UAAU;KAC3D,MAAM;KACN,YAAY;IACd,CAAC;IACH,MAAM,WAAW,KAAK,UAAU;KAC9B;KACA,QAAQ,SAAS;KACjB,MAAM,UAAU;KAChB,MAAM,SAAS;IACjB,CAAC;IACD,MAAM,QAAQ,OAAO,aACnB,QAAQ,UACR,MAAM,QACN,QAAQ,SACR,UACA,cACF;IACA,MAAM,SAAS,QACX,OAAO,cACL,OAAO,eAAe,OAAO,OAAO;KAAE,KAAK,OAAO;KAAQ,SAAS,OAAO;IAAO,CAAC,CAAC,GACnF,OACA,gBACA,QAAQ,QACV,IACA;IACJ,MAAM,OAAO,OAAO,QAAQ,SAAS,gBAAgB,QAAQ,WAC3D,QAAQ,OAAO,KACb,IAAI,0BAA0B;KAC5B,QAAQ,QAAQ,OAAO;KACvB,QAAQ,MAAM;KACd,SAAS,MAAM,SAAS;KACxB,WAAW,QAAQ;KACnB,iBAAiB,QAAQ;IAC3B,CAAC,GACD,EAAE,aAAa,OAAO,CACxB,CACF;IACA,MAAM,UAA0B,CAAC;IACjC,KAAK,MAAM,WAAW,KAAK,YAAY,CAAC,GAAG;KACzC,IAAI,CAAC,QAAQ,OAAO,CAAC,QAAQ,WAC3B,OAAO,OAAO,aAAa,gBAAgB,QAAQ,UAAU;MAC3D,MAAM;MACN,MAAM;KACR,CAAC;KACH,QAAQ,KAAK;MACX,MAAM;MACN,UAAU,SAAS,SAAS,QAAQ,KAAK;OACvC,GAAG;OACH,eAAe,QAAQ;MACzB,CAAC;MACD,UAAU,QAAQ,YAAY;KAChC,CAAC;IACH;IACA,KAAK,MAAM,WAAW,KAAK,iBAAiB,CAAC,GAAG;KAC9C,IAAI,CAAC,QAAQ,OAAO,CAAC,QAAQ,WAC3B,OAAO,OAAO,aAAa,gBAAgB,QAAQ,UAAU;MAC3D,MAAM;MACN,MAAM;KACR,CAAC;KACH,QAAQ,KAAK;MACX,MAAM;MACN,KAAK;OACH,SAAS,QAAQ;OACjB,KAAK,QAAQ;OACb,SAAS;QAAE,MAAM;QAAa,IAAI,QAAQ;OAAU;MACtD;MACA,UAAU,QAAQ,YAAY;KAChC,CAAC;IACH;IACA,IAAI,KAAK,gBAAgB,CAAC,KAAK,iBAAiB,CAAC,KAAK,sBACpD,OAAO,OAAO,aAAa,gBAAgB,QAAQ,UAAU;KAC3D,MAAM;KACN,MAAM;IACR,CAAC;IACH,OAAO;KACL;KACA,GAAI,KAAK,cACL,EACE,QAAQ,aACN,QAAQ,SACR,UACA,KAAK,UAAU;MAAE,KAAK,KAAK;MAAe,SAAS,KAAK;KAAoB,CAAC,CAC/E,EACF,IACA,CAAC;IACP;GACF,CAAC;GACD,SAAS,OAAO,WAAW,WAAW,OAAO;IAC3C,MAAM,QAAQ,OAAO,cACnB,gBACA,OACA,kBACA,QAAQ,UACR,IACF;IACA,OAAO,iBAAiB,SAAS,UAAU;IAC3C,OAAO,gBAAgB,SAAS,MAAM,QAAQ,kBAAkB,IAAI;IACpE,OAAO,OAAO,QAAQ,WAAW;KAC/B,QAAQ,MAAM;KACd,gBAAgB,MAAM;KACtB,WAAW,MAAM;IACnB,CAAC;GACH,CAAC;EACH,CAAC;CACH;CACA,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,YAAY,YAAY;EACjC,MAAM,UAAU,WAAW,KAAK,OAAO;EACvC,OAAO,QAAQ,KAAK,YAAY,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,iBAAiB,OAAO,CAAC;CACrF,CAAC,CACH;AACF"}

package/dist/providers/s3-compatible/config.d.ts

@@ -0,0 +1,36 @@
+import "../../index.js";
+import "../s3/profile.js";
+import { S3Config } from "../s3/config.js";
+import { Effect } from "effect";
+export interface CompatibleConfig extends Pick<S3Config, "bucket" | "storeId" | "credentials" | "encryption" | "requestTimeoutMillis" | "maxUnknownLengthBytes"> {
+  /** Explicit credentials prevent accidental AWS ambient credential discovery. */
+  readonly credentials: NonNullable<S3Config["credentials"]>;
+  /** Trusted gateway/region override; never derive this from an untrusted request. */
+  readonly endpoint?: string;
+  readonly forcePathStyle?: boolean;
+}
+export interface R2Config extends CompatibleConfig {
+  readonly accountId: string;
+  readonly jurisdiction?: "default" | "eu" | "fedramp";
+}
+export interface MinioConfig extends CompatibleConfig {
+  readonly endpoint: string;
+  readonly region: string;
+  readonly edition: "community" | "aistor";
+  readonly serverVersion: string;
+  readonly versioning: boolean;
+}
+export interface TigrisConfig extends CompatibleConfig {
+  readonly placement: "single-region" | "multi-region" | "global" | "dual-region";
+}
+export interface SpacesConfig extends CompatibleConfig {
+  readonly region: string;
+  readonly tier: "standard" | "cold";
+}
+export interface RegionalConfig extends CompatibleConfig {
+  readonly region: string;
+}
+export interface HetznerConfig extends RegionalConfig {
+  readonly versioning: boolean;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/providers/s3-compatible/config.js

@@ -0,0 +1,174 @@
+import { storageError } from "../../core/errors.js";
+import { resolveConfig } from "../s3/config.js";
+import { nativeLimits } from "../s3/native-models.js";
+import { Effect, Schema } from "effect";
+import { createHash } from "node:crypto";
+
+// src/providers/s3-compatible/config.ts
+const Region = Schema.String.check(Schema.isPattern(/^[a-z0-9-]+$/u));
+const common = {
+	bucket: Schema.String,
+	storeId: Schema.optional(Schema.NonEmptyString),
+	credentials: Schema.Unknown,
+	encryption: Schema.optional(Schema.Unknown),
+	endpoint: Schema.optional(Schema.String),
+	forcePathStyle: Schema.optional(Schema.Boolean),
+	requestTimeoutMillis: Schema.optional(Schema.Number),
+	maxUnknownLengthBytes: Schema.optional(Schema.Number)
+};
+const profiles = {
+	r2: Schema.Struct({
+		...common,
+		accountId: Schema.String.check(Schema.isPattern(/^[a-f0-9]{32}$/u)),
+		jurisdiction: Schema.optional(Schema.Literals([
+			"default",
+			"eu",
+			"fedramp"
+		]))
+	}),
+	minio: Schema.Struct({
+		...common,
+		endpoint: Schema.String,
+		region: Region,
+		edition: Schema.Literals(["community", "aistor"]),
+		serverVersion: Schema.NonEmptyString,
+		versioning: Schema.Boolean
+	}),
+	tigris: Schema.Struct({
+		...common,
+		placement: Schema.Literals([
+			"single-region",
+			"multi-region",
+			"global",
+			"dual-region"
+		])
+	}),
+	spaces: Schema.Struct({
+		...common,
+		region: Region,
+		tier: Schema.Literals(["standard", "cold"])
+	}),
+	b2: Schema.Struct({
+		...common,
+		region: Region
+	}),
+	wasabi: Schema.Struct({
+		...common,
+		region: Region
+	}),
+	scaleway: Schema.Struct({
+		...common,
+		region: Region
+	}),
+	hetzner: Schema.Struct({
+		...common,
+		region: Region,
+		versioning: Schema.Boolean
+	})
+};
+const resolveCompatible = Effect.fnUntraced(function* (provider, input) {
+	yield* Schema.decodeUnknownEffect(profiles[provider], { onExcessProperty: "error" })(input).pipe(Effect.mapError(() => storageError("make", provider, {
+		_tag: "InvalidConfiguration",
+		field: "config"
+	})));
+	yield* Schema.decodeUnknownEffect(Schema.Union([Schema.declare((value) => typeof value === "function"), Schema.Struct({
+		accessKeyId: Schema.NonEmptyString,
+		secretAccessKey: Schema.NonEmptyString
+	})]))(input.credentials).pipe(Effect.mapError(() => storageError("make", provider, {
+		_tag: "InvalidConfiguration",
+		field: "credentials"
+	})));
+	const region = "region" in input ? input.region : "auto";
+	const jurisdiction = "jurisdiction" in input ? input.jurisdiction ?? "default" : "default";
+	const endpoint = input.endpoint ?? (provider === "r2" && "accountId" in input ? `https://${input.accountId}${jurisdiction === "default" ? "" : `.${jurisdiction}`}.r2.cloudflarestorage.com` : provider === "tigris" ? "https://t3.storage.dev" : provider === "spaces" ? `https://${region}.digitaloceanspaces.com` : provider === "b2" ? `https://s3.${region}.backblazeb2.com` : provider === "wasabi" ? `https://s3.${region}.wasabisys.com` : provider === "scaleway" ? `https://s3.${region}.scw.cloud` : `https://${region}.your-objectstorage.com`);
+	const url = URL.parse(endpoint);
+	if (!url || url.protocol !== "https:" && !(url.protocol === "http:" && [
+		"localhost",
+		"127.0.0.1",
+		"[::1]"
+	].includes(url.hostname))) return yield* storageError("make", provider, {
+		_tag: "InvalidConfiguration",
+		field: "endpoint.tls"
+	});
+	const configuration = JSON.stringify([
+		provider,
+		region,
+		endpoint,
+		"versioning" in input ? input.versioning : null,
+		"placement" in input ? input.placement : null,
+		"tier" in input ? input.tier : null,
+		"edition" in input ? [input.edition, input.serverVersion] : null
+	]);
+	const strongPlacement = provider === "tigris" && "placement" in input && ["single-region", "multi-region"].includes(input.placement);
+	const putConditions = provider === "r2" || provider === "scaleway" || strongPlacement ? ["create-only", "if-match"] : [];
+	const checksums = provider === "scaleway" || provider === "wasabi";
+	const versioned = provider === "tigris" || provider === "b2" || provider === "wasabi" || provider === "scaleway" || (provider === "minio" || provider === "hetzner") && "versioning" in input && input.versioning;
+	const profile = Object.freeze({
+		provider,
+		...provider === "spaces" && "tier" in input ? { bucketTier: input.tier } : {},
+		configuration,
+		capabilities: {
+			putConditions,
+			getConditions: ["if-match", "if-none-match"],
+			deleteConditions: [],
+			ranges: [
+				"bounded",
+				"from",
+				"suffix"
+			],
+			versionedReads: versioned ? "history" : "none",
+			list: {
+				maxPageSize: 1e3,
+				delimiter: true,
+				cursorPersistence: "provider",
+				snapshot: false
+			}
+		},
+		limits: {
+			...nativeLimits,
+			maximumPartBytes: 5e9,
+			maximumSinglePutBytes: 5e9,
+			maximumSingleCopyBytes: 5e9,
+			maximumParts: provider === "scaleway" ? 1e3 : 1e4
+		},
+		maximumObjectBytes: 5e12,
+		checksums,
+		completeConditions: provider === "scaleway" ? ["create-only", "if-match"] : [],
+		copy: provider === "spaces" && "tier" in input && input.tier === "cold" ? "none" : provider === "hetzner" ? "bucket" : "endpoint",
+		copyPartConditions: !["r2", "hetzner"].includes(provider),
+		post: [
+			"minio",
+			"spaces",
+			"wasabi"
+		].includes(provider) && !("tier" in input && input.tier === "cold"),
+		storageClasses: provider === "r2" ? ["STANDARD", "STANDARD_IA"] : ["STANDARD"],
+		tagging: [
+			"minio",
+			"wasabi",
+			"scaleway"
+		].includes(provider)
+	});
+	const config = yield* resolveConfig({
+		bucket: input.bucket,
+		region: provider === "spaces" ? "us-east-1" : region,
+		endpoint,
+		forcePathStyle: input.forcePathStyle ?? provider === "minio",
+		storeId: input.storeId ?? `${provider}:${createHash("sha256").update(JSON.stringify([configuration, input.bucket])).digest("hex")}`,
+		credentials: input.credentials,
+		...input.encryption ? { encryption: input.encryption } : {},
+		...input.requestTimeoutMillis !== void 0 ? { requestTimeoutMillis: input.requestTimeoutMillis } : {},
+		...input.maxUnknownLengthBytes !== void 0 ? { maxUnknownLengthBytes: input.maxUnknownLengthBytes } : {}
+	}).pipe(Effect.mapError((error) => storageError(error.operation, provider, error.reason, error.mutationOutcome)));
+	const encryption = input.encryption;
+	if (encryption && (["tigris", "spaces"].includes(provider) || ["r2", "wasabi"].includes(provider) && encryption.mode !== "customer" || provider !== "minio" && provider !== "wasabi" && encryption.mode.startsWith("aws:"))) return yield* storageError("make", provider, {
+		_tag: "Unsupported",
+		capability: "encryption-mode"
+	}, "not-started");
+	return {
+		profile,
+		config
+	};
+});
+
+export { resolveCompatible };
+//# sourceMappingURL=config.js.map

package/dist/providers/s3-compatible/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","names":[],"sources":["../../../src/providers/s3-compatible/config.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { Effect, Schema } from \"effect\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport type { S3Config } from \"../s3/config.js\";\nimport { resolveConfig } from \"../s3/config.js\";\nimport { nativeLimits } from \"../s3/native-models.js\";\nimport type { S3Profile } from \"../s3/profile.js\";\n\nexport type CompatibleProvider =\n  | \"r2\"\n  | \"minio\"\n  | \"tigris\"\n  | \"spaces\"\n  | \"b2\"\n  | \"wasabi\"\n  | \"scaleway\"\n  | \"hetzner\";\n\nexport interface CompatibleConfig extends Pick<\n  S3Config,\n  | \"bucket\"\n  | \"storeId\"\n  | \"credentials\"\n  | \"encryption\"\n  | \"requestTimeoutMillis\"\n  | \"maxUnknownLengthBytes\"\n> {\n  /** Explicit credentials prevent accidental AWS ambient credential discovery. */\n  readonly credentials: NonNullable<S3Config[\"credentials\"]>;\n  /** Trusted gateway/region override; never derive this from an untrusted request. */\n  readonly endpoint?: string;\n  readonly forcePathStyle?: boolean;\n}\nexport interface R2Config extends CompatibleConfig {\n  readonly accountId: string;\n  readonly jurisdiction?: \"default\" | \"eu\" | \"fedramp\";\n}\nexport interface MinioConfig extends CompatibleConfig {\n  readonly endpoint: string;\n  readonly region: string;\n  readonly edition: \"community\" | \"aistor\";\n  readonly serverVersion: string;\n  readonly versioning: boolean;\n}\nexport interface TigrisConfig extends CompatibleConfig {\n  readonly placement: \"single-region\" | \"multi-region\" | \"global\" | \"dual-region\";\n}\nexport interface SpacesConfig extends CompatibleConfig {\n  readonly region: string;\n  readonly tier: \"standard\" | \"cold\";\n}\nexport interface RegionalConfig extends CompatibleConfig {\n  readonly region: string;\n}\nexport interface HetznerConfig extends RegionalConfig {\n  readonly versioning: boolean;\n}\n\ntype Settings =\n  | R2Config\n  | MinioConfig\n  | TigrisConfig\n  | SpacesConfig\n  | RegionalConfig\n  | HetznerConfig;\nconst Region = Schema.String.check(Schema.isPattern(/^[a-z0-9-]+$/u));\nconst common = {\n  bucket: Schema.String,\n  storeId: Schema.optional(Schema.NonEmptyString),\n  credentials: Schema.Unknown,\n  encryption: Schema.optional(Schema.Unknown),\n  endpoint: Schema.optional(Schema.String),\n  forcePathStyle: Schema.optional(Schema.Boolean),\n  requestTimeoutMillis: Schema.optional(Schema.Number),\n  maxUnknownLengthBytes: Schema.optional(Schema.Number),\n};\nconst profiles = {\n  r2: Schema.Struct({\n    ...common,\n    accountId: Schema.String.check(Schema.isPattern(/^[a-f0-9]{32}$/u)),\n    jurisdiction: Schema.optional(Schema.Literals([\"default\", \"eu\", \"fedramp\"])),\n  }),\n  minio: Schema.Struct({\n    ...common,\n    endpoint: Schema.String,\n    region: Region,\n    edition: Schema.Literals([\"community\", \"aistor\"]),\n    serverVersion: Schema.NonEmptyString,\n    versioning: Schema.Boolean,\n  }),\n  tigris: Schema.Struct({\n    ...common,\n    placement: Schema.Literals([\"single-region\", \"multi-region\", \"global\", \"dual-region\"]),\n  }),\n  spaces: Schema.Struct({ ...common, region: Region, tier: Schema.Literals([\"standard\", \"cold\"]) }),\n  b2: Schema.Struct({ ...common, region: Region }),\n  wasabi: Schema.Struct({ ...common, region: Region }),\n  scaleway: Schema.Struct({ ...common, region: Region }),\n  hetzner: Schema.Struct({ ...common, region: Region, versioning: Schema.Boolean }),\n};\n\nexport const resolveCompatible = Effect.fnUntraced(function* (\n  provider: CompatibleProvider,\n  input: Settings,\n) {\n  yield* Schema.decodeUnknownEffect(profiles[provider], { onExcessProperty: \"error\" })(input).pipe(\n    Effect.mapError(() =>\n      storageError(\"make\", provider, { _tag: \"InvalidConfiguration\", field: \"config\" }),\n    ),\n  );\n  yield* Schema.decodeUnknownEffect(\n    Schema.Union([\n      Schema.declare<() => unknown>((value): value is () => unknown => typeof value === \"function\"),\n      Schema.Struct({ accessKeyId: Schema.NonEmptyString, secretAccessKey: Schema.NonEmptyString }),\n    ]),\n  )(input.credentials).pipe(\n    Effect.mapError(() =>\n      storageError(\"make\", provider, { _tag: \"InvalidConfiguration\", field: \"credentials\" }),\n    ),\n  );\n  const region = \"region\" in input ? input.region : \"auto\";\n  const jurisdiction = \"jurisdiction\" in input ? (input.jurisdiction ?? \"default\") : \"default\";\n  const endpoint =\n    input.endpoint ??\n    (provider === \"r2\" && \"accountId\" in input\n      ? `https://${input.accountId}${jurisdiction === \"default\" ? \"\" : `.${jurisdiction}`}.r2.cloudflarestorage.com`\n      : provider === \"tigris\"\n        ? \"https://t3.storage.dev\"\n        : provider === \"spaces\"\n          ? `https://${region}.digitaloceanspaces.com`\n          : provider === \"b2\"\n            ? `https://s3.${region}.backblazeb2.com`\n            : provider === \"wasabi\"\n              ? `https://s3.${region}.wasabisys.com`\n              : provider === \"scaleway\"\n                ? `https://s3.${region}.scw.cloud`\n                : `https://${region}.your-objectstorage.com`);\n  const url = URL.parse(endpoint);\n  if (\n    !url ||\n    (url.protocol !== \"https:\" &&\n      !(url.protocol === \"http:\" && [\"localhost\", \"127.0.0.1\", \"[::1]\"].includes(url.hostname)))\n  )\n    return yield* storageError(\"make\", provider, {\n      _tag: \"InvalidConfiguration\",\n      field: \"endpoint.tls\",\n    });\n  const configuration = JSON.stringify([\n    provider,\n    region,\n    endpoint,\n    \"versioning\" in input ? input.versioning : null,\n    \"placement\" in input ? input.placement : null,\n    \"tier\" in input ? input.tier : null,\n    \"edition\" in input ? [input.edition, input.serverVersion] : null,\n  ]);\n  const strongPlacement =\n    provider === \"tigris\" &&\n    \"placement\" in input &&\n    [\"single-region\", \"multi-region\"].includes(input.placement);\n  const putConditions: S3Profile[\"capabilities\"][\"putConditions\"] =\n    provider === \"r2\" || provider === \"scaleway\" || strongPlacement\n      ? [\"create-only\", \"if-match\"]\n      : [];\n  const checksums = provider === \"scaleway\" || provider === \"wasabi\";\n  const versioned =\n    provider === \"tigris\" ||\n    provider === \"b2\" ||\n    provider === \"wasabi\" ||\n    provider === \"scaleway\" ||\n    ((provider === \"minio\" || provider === \"hetzner\") && \"versioning\" in input && input.versioning);\n  const profile: S3Profile = Object.freeze<S3Profile>({\n    provider,\n    ...(provider === \"spaces\" && \"tier\" in input ? { bucketTier: input.tier } : {}),\n    configuration,\n    capabilities: {\n      putConditions,\n      getConditions: [\"if-match\", \"if-none-match\"],\n      deleteConditions: [],\n      ranges: [\"bounded\", \"from\", \"suffix\"],\n      versionedReads: versioned ? \"history\" : \"none\",\n      list: { maxPageSize: 1000, delimiter: true, cursorPersistence: \"provider\", snapshot: false },\n    },\n    // Conservative byte ceilings: provider GB/TB spellings are interpreted as decimal.\n    // Scaleway's 1,000-part constraint is intentionally independent of AWS's 10,000.\n    limits: {\n      ...nativeLimits,\n      maximumPartBytes: 5_000_000_000,\n      maximumSinglePutBytes: 5_000_000_000,\n      maximumSingleCopyBytes: 5_000_000_000,\n      maximumParts: provider === \"scaleway\" ? 1000 : 10000,\n    },\n    maximumObjectBytes: 5_000_000_000_000,\n    checksums,\n    completeConditions: provider === \"scaleway\" ? [\"create-only\", \"if-match\"] : [],\n    copy:\n      provider === \"spaces\" && \"tier\" in input && input.tier === \"cold\"\n        ? \"none\"\n        : provider === \"hetzner\"\n          ? \"bucket\"\n          : \"endpoint\",\n    copyPartConditions: ![\"r2\", \"hetzner\"].includes(provider),\n    post:\n      [\"minio\", \"spaces\", \"wasabi\"].includes(provider) &&\n      !(\"tier\" in input && input.tier === \"cold\"),\n    storageClasses: provider === \"r2\" ? [\"STANDARD\", \"STANDARD_IA\"] : [\"STANDARD\"],\n    tagging: [\"minio\", \"wasabi\", \"scaleway\"].includes(provider),\n  });\n  const config = yield* resolveConfig({\n    bucket: input.bucket,\n    region: provider === \"spaces\" ? \"us-east-1\" : region,\n    endpoint,\n    forcePathStyle: input.forcePathStyle ?? provider === \"minio\",\n    storeId:\n      input.storeId ??\n      `${provider}:${createHash(\"sha256\")\n        .update(JSON.stringify([configuration, input.bucket]))\n        .digest(\"hex\")}`,\n    credentials: input.credentials,\n    ...(input.encryption ? { encryption: input.encryption } : {}),\n    ...(input.requestTimeoutMillis !== undefined\n      ? { requestTimeoutMillis: input.requestTimeoutMillis }\n      : {}),\n    ...(input.maxUnknownLengthBytes !== undefined\n      ? { maxUnknownLengthBytes: input.maxUnknownLengthBytes }\n      : {}),\n  }).pipe(\n    Effect.mapError((error) =>\n      storageError(error.operation, provider, error.reason, error.mutationOutcome),\n    ),\n  );\n  const encryption = input.encryption;\n  if (\n    encryption &&\n    ([\"tigris\", \"spaces\"].includes(provider) ||\n      ([\"r2\", \"wasabi\"].includes(provider) && encryption.mode !== \"customer\") ||\n      (provider !== \"minio\" && provider !== \"wasabi\" && encryption.mode.startsWith(\"aws:\")))\n  )\n    return yield* storageError(\n      \"make\",\n      provider,\n      { _tag: \"Unsupported\", capability: \"encryption-mode\" },\n      \"not-started\",\n    );\n  return { profile, config };\n});\n"],"mappings":";;;;;;;AAmEA,MAAM,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,eAAe,CAAC;AACpE,MAAM,SAAS;CACb,QAAQ,OAAO;CACf,SAAS,OAAO,SAAS,OAAO,cAAc;CAC9C,aAAa,OAAO;CACpB,YAAY,OAAO,SAAS,OAAO,OAAO;CAC1C,UAAU,OAAO,SAAS,OAAO,MAAM;CACvC,gBAAgB,OAAO,SAAS,OAAO,OAAO;CAC9C,sBAAsB,OAAO,SAAS,OAAO,MAAM;CACnD,uBAAuB,OAAO,SAAS,OAAO,MAAM;AACtD;AACA,MAAM,WAAW;CACf,IAAI,OAAO,OAAO;EAChB,GAAG;EACH,WAAW,OAAO,OAAO,MAAM,OAAO,UAAU,iBAAiB,CAAC;EAClE,cAAc,OAAO,SAAS,OAAO,SAAS;GAAC;GAAW;GAAM;EAAS,CAAC,CAAC;CAC7E,CAAC;CACD,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,UAAU,OAAO;EACjB,QAAQ;EACR,SAAS,OAAO,SAAS,CAAC,aAAa,QAAQ,CAAC;EAChD,eAAe,OAAO;EACtB,YAAY,OAAO;CACrB,CAAC;CACD,QAAQ,OAAO,OAAO;EACpB,GAAG;EACH,WAAW,OAAO,SAAS;GAAC;GAAiB;GAAgB;GAAU;EAAa,CAAC;CACvF,CAAC;CACD,QAAQ,OAAO,OAAO;EAAE,GAAG;EAAQ,QAAQ;EAAQ,MAAM,OAAO,SAAS,CAAC,YAAY,MAAM,CAAC;CAAE,CAAC;CAChG,IAAI,OAAO,OAAO;EAAE,GAAG;EAAQ,QAAQ;CAAO,CAAC;CAC/C,QAAQ,OAAO,OAAO;EAAE,GAAG;EAAQ,QAAQ;CAAO,CAAC;CACnD,UAAU,OAAO,OAAO;EAAE,GAAG;EAAQ,QAAQ;CAAO,CAAC;CACrD,SAAS,OAAO,OAAO;EAAE,GAAG;EAAQ,QAAQ;EAAQ,YAAY,OAAO;CAAQ,CAAC;AAClF;AAEA,MAAa,oBAAoB,OAAO,WAAW,WACjD,UACA,OACA;CACA,OAAO,OAAO,oBAAoB,SAAS,WAAW,EAAE,kBAAkB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC1F,OAAO,eACL,aAAa,QAAQ,UAAU;EAAE,MAAM;EAAwB,OAAO;CAAS,CAAC,CAClF,CACF;CACA,OAAO,OAAO,oBACZ,OAAO,MAAM,CACX,OAAO,SAAwB,UAAkC,OAAO,UAAU,UAAU,GAC5F,OAAO,OAAO;EAAE,aAAa,OAAO;EAAgB,iBAAiB,OAAO;CAAe,CAAC,CAC9F,CAAC,CACH,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,KACnB,OAAO,eACL,aAAa,QAAQ,UAAU;EAAE,MAAM;EAAwB,OAAO;CAAc,CAAC,CACvF,CACF;CACA,MAAM,SAAS,YAAY,QAAQ,MAAM,SAAS;CAClD,MAAM,eAAe,kBAAkB,QAAS,MAAM,gBAAgB,YAAa;CACnF,MAAM,WACJ,MAAM,aACL,aAAa,QAAQ,eAAe,QACjC,WAAW,MAAM,YAAY,iBAAiB,YAAY,KAAK,IAAI,eAAe,6BAClF,aAAa,WACX,2BACA,aAAa,WACX,WAAW,OAAO,2BAClB,aAAa,OACX,cAAc,OAAO,oBACrB,aAAa,WACX,cAAc,OAAO,kBACrB,aAAa,aACX,cAAc,OAAO,cACrB,WAAW,OAAO;CAClC,MAAM,MAAM,IAAI,MAAM,QAAQ;CAC9B,IACE,CAAC,OACA,IAAI,aAAa,YAChB,EAAE,IAAI,aAAa,WAAW;EAAC;EAAa;EAAa;CAAO,CAAC,CAAC,SAAS,IAAI,QAAQ,IAEzF,OAAO,OAAO,aAAa,QAAQ,UAAU;EAC3C,MAAM;EACN,OAAO;CACT,CAAC;CACH,MAAM,gBAAgB,KAAK,UAAU;EACnC;EACA;EACA;EACA,gBAAgB,QAAQ,MAAM,aAAa;EAC3C,eAAe,QAAQ,MAAM,YAAY;EACzC,UAAU,QAAQ,MAAM,OAAO;EAC/B,aAAa,QAAQ,CAAC,MAAM,SAAS,MAAM,aAAa,IAAI;CAC9D,CAAC;CACD,MAAM,kBACJ,aAAa,YACb,eAAe,SACf,CAAC,iBAAiB,cAAc,CAAC,CAAC,SAAS,MAAM,SAAS;CAC5D,MAAM,gBACJ,aAAa,QAAQ,aAAa,cAAc,kBAC5C,CAAC,eAAe,UAAU,IAC1B,CAAC;CACP,MAAM,YAAY,aAAa,cAAc,aAAa;CAC1D,MAAM,YACJ,aAAa,YACb,aAAa,QACb,aAAa,YACb,aAAa,eACX,aAAa,WAAW,aAAa,cAAc,gBAAgB,SAAS,MAAM;CACtF,MAAM,UAAqB,OAAO,OAAkB;EAClD;EACA,GAAI,aAAa,YAAY,UAAU,QAAQ,EAAE,YAAY,MAAM,KAAK,IAAI,CAAC;EAC7E;EACA,cAAc;GACZ;GACA,eAAe,CAAC,YAAY,eAAe;GAC3C,kBAAkB,CAAC;GACnB,QAAQ;IAAC;IAAW;IAAQ;GAAQ;GACpC,gBAAgB,YAAY,YAAY;GACxC,MAAM;IAAE,aAAa;IAAM,WAAW;IAAM,mBAAmB;IAAY,UAAU;GAAM;EAC7F;EAGA,QAAQ;GACN,GAAG;GACH,kBAAkB;GAClB,uBAAuB;GACvB,wBAAwB;GACxB,cAAc,aAAa,aAAa,MAAO;EACjD;EACA,oBAAoB;EACpB;EACA,oBAAoB,aAAa,aAAa,CAAC,eAAe,UAAU,IAAI,CAAC;EAC7E,MACE,aAAa,YAAY,UAAU,SAAS,MAAM,SAAS,SACvD,SACA,aAAa,YACX,WACA;EACR,oBAAoB,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,SAAS,QAAQ;EACxD,MACE;GAAC;GAAS;GAAU;EAAQ,CAAC,CAAC,SAAS,QAAQ,KAC/C,EAAE,UAAU,SAAS,MAAM,SAAS;EACtC,gBAAgB,aAAa,OAAO,CAAC,YAAY,aAAa,IAAI,CAAC,UAAU;EAC7E,SAAS;GAAC;GAAS;GAAU;EAAU,CAAC,CAAC,SAAS,QAAQ;CAC5D,CAAC;CACD,MAAM,SAAS,OAAO,cAAc;EAClC,QAAQ,MAAM;EACd,QAAQ,aAAa,WAAW,cAAc;EAC9C;EACA,gBAAgB,MAAM,kBAAkB,aAAa;EACrD,SACE,MAAM,WACN,GAAG,SAAS,GAAG,WAAW,QAAQ,CAAC,CAChC,OAAO,KAAK,UAAU,CAAC,eAAe,MAAM,MAAM,CAAC,CAAC,CAAC,CACrD,OAAO,KAAK;EACjB,aAAa,MAAM;EACnB,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;EAC3D,GAAI,MAAM,yBAAyB,SAC/B,EAAE,sBAAsB,MAAM,qBAAqB,IACnD,CAAC;EACL,GAAI,MAAM,0BAA0B,SAChC,EAAE,uBAAuB,MAAM,sBAAsB,IACrD,CAAC;CACP,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,UACf,aAAa,MAAM,WAAW,UAAU,MAAM,QAAQ,MAAM,eAAe,CAC7E,CACF;CACA,MAAM,aAAa,MAAM;CACzB,IACE,eACC,CAAC,UAAU,QAAQ,CAAC,CAAC,SAAS,QAAQ,KACpC,CAAC,MAAM,QAAQ,CAAC,CAAC,SAAS,QAAQ,KAAK,WAAW,SAAS,cAC3D,aAAa,WAAW,aAAa,YAAY,WAAW,KAAK,WAAW,MAAM,IAErF,OAAO,OAAO,aACZ,QACA,UACA;EAAE,MAAM;EAAe,YAAY;CAAkB,GACrD,aACF;CACF,OAAO;EAAE;EAAS;CAAO;AAC3B,CAAC"}

package/dist/providers/s3-compatible/service.js

@@ -0,0 +1,48 @@
+import { storageError } from "../../core/errors.js";
+import { Storage } from "../../core/storage.js";
+import { TransferDriver } from "../../transfers/dependencies.js";
+import { StorageCopy } from "../../core/capabilities.js";
+import { assemble } from "../s3/service.js";
+import { makeS3TransferDriver } from "../s3/transfer-driver.js";
+import { S3Storage } from "../../s3.js";
+import { resolveCompatible } from "./config.js";
+import { Context, Effect, Layer } from "effect";
+import { S3Client } from "@aws-sdk/client-s3";
+
+// src/providers/s3-compatible/service.ts
+const makeCompatible = Effect.fnUntraced(function* (provider, input) {
+	const { profile, config } = yield* resolveCompatible(provider, input);
+	const mode = profile.checksums ? "WHEN_SUPPORTED" : "WHEN_REQUIRED";
+	const client = yield* Effect.acquireRelease(Effect.try({
+		try: () => new S3Client({
+			region: config.region,
+			...config.endpoint ? { endpoint: config.endpoint } : {},
+			forcePathStyle: config.forcePathStyle ?? false,
+			...config.credentials ? { credentials: config.credentials } : {},
+			maxAttempts: 1,
+			followRegionRedirects: false,
+			requestChecksumCalculation: mode,
+			responseChecksumValidation: mode
+		}),
+		catch: () => storageError("make", provider, {
+			_tag: "InvalidConfiguration",
+			field: "client"
+		})
+	}), (owned) => Effect.sync(() => owned.destroy()));
+	const { credentials: _credentials, ...publicConfig } = config;
+	return assemble({
+		client,
+		config: publicConfig,
+		profile,
+		...profile.checksums ? {} : {
+			readChecksums: false,
+			multipartChecksums: false
+		}
+	});
+});
+function compatibleLayer(tag, make) {
+	return Layer.effectContext(Effect.map(make, (storage) => Context.make(tag, storage).pipe(Context.add(Storage, storage), Context.add(S3Storage, storage), Context.add(StorageCopy, { copy: storage.copyObject }), Context.add(TransferDriver, makeS3TransferDriver(storage)))));
+}
+
+export { compatibleLayer, makeCompatible };
+//# sourceMappingURL=service.js.map

package/dist/providers/s3-compatible/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","names":[],"sources":["../../../src/providers/s3-compatible/service.ts"],"sourcesContent":["import type { Scope } from \"effect\";\nimport { Context, Effect, Layer } from \"effect\";\n\nimport { S3Client } from \"@aws-sdk/client-s3\";\n\nimport { StorageCopy } from \"../../core/capabilities.js\";\nimport type { StorageError } from \"../../core/errors.js\";\nimport { storageError } from \"../../core/errors.js\";\nimport { Storage } from \"../../core/storage.js\";\nimport { TransferDriver } from \"../../transfers/dependencies.js\";\nimport { S3Storage } from \"../s3/index.js\";\nimport type { S3StorageService } from \"../s3/index.js\";\nimport { assemble } from \"../s3/service.js\";\nimport { makeS3TransferDriver } from \"../s3/transfer-driver.js\";\nimport { resolveCompatible } from \"./config.js\";\nimport type { CompatibleProvider } from \"./config.js\";\n\nexport const makeCompatible = Effect.fnUntraced(function* (\n  provider: CompatibleProvider,\n  input: Parameters<typeof resolveCompatible>[1],\n) {\n  const { profile, config } = yield* resolveCompatible(provider, input);\n  const mode = profile.checksums ? \"WHEN_SUPPORTED\" : \"WHEN_REQUIRED\";\n  const client = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () =>\n        new S3Client({\n          region: config.region,\n          ...(config.endpoint ? { endpoint: config.endpoint } : {}),\n          forcePathStyle: config.forcePathStyle ?? false,\n          ...(config.credentials ? { credentials: config.credentials } : {}),\n          maxAttempts: 1,\n          followRegionRedirects: false,\n          requestChecksumCalculation: mode,\n          responseChecksumValidation: mode,\n        }),\n      catch: () =>\n        storageError(\"make\", provider, { _tag: \"InvalidConfiguration\", field: \"client\" }),\n    }),\n    (owned) => Effect.sync(() => owned.destroy()),\n  );\n  const { credentials: _credentials, ...publicConfig } = config;\n  return assemble({\n    client,\n    config: publicConfig,\n    profile,\n    ...(profile.checksums ? {} : { readChecksums: false, multipartChecksums: false }),\n  });\n});\n\nexport function compatibleLayer<I>(\n  tag: Context.Service<I, S3StorageService>,\n  make: Effect.Effect<S3StorageService, StorageError, Scope.Scope>,\n) {\n  return Layer.effectContext(\n    Effect.map(make, (storage) =>\n      Context.make(tag, storage).pipe(\n        Context.add(Storage, storage),\n        Context.add(S3Storage, storage),\n        Context.add(StorageCopy, { copy: storage.copyObject }),\n        Context.add(TransferDriver, makeS3TransferDriver(storage)),\n      ),\n    ),\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,iBAAiB,OAAO,WAAW,WAC9C,UACA,OACA;CACA,MAAM,EAAE,SAAS,WAAW,OAAO,kBAAkB,UAAU,KAAK;CACpE,MAAM,OAAO,QAAQ,YAAY,mBAAmB;CACpD,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WACE,IAAI,SAAS;GACX,QAAQ,OAAO;GACf,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;GACvD,gBAAgB,OAAO,kBAAkB;GACzC,GAAI,OAAO,cAAc,EAAE,aAAa,OAAO,YAAY,IAAI,CAAC;GAChE,aAAa;GACb,uBAAuB;GACvB,4BAA4B;GAC5B,4BAA4B;EAC9B,CAAC;EACH,aACE,aAAa,QAAQ,UAAU;GAAE,MAAM;GAAwB,OAAO;EAAS,CAAC;CACpF,CAAC,IACA,UAAU,OAAO,WAAW,MAAM,QAAQ,CAAC,CAC9C;CACA,MAAM,EAAE,aAAa,cAAc,GAAG,iBAAiB;CACvD,OAAO,SAAS;EACd;EACA,QAAQ;EACR;EACA,GAAI,QAAQ,YAAY,CAAC,IAAI;GAAE,eAAe;GAAO,oBAAoB;EAAM;CACjF,CAAC;AACH,CAAC;AAED,SAAgB,gBACd,KACA,MACA;CACA,OAAO,MAAM,cACX,OAAO,IAAI,OAAO,YAChB,QAAQ,KAAK,KAAK,OAAO,CAAC,CAAC,KACzB,QAAQ,IAAI,SAAS,OAAO,GAC5B,QAAQ,IAAI,WAAW,OAAO,GAC9B,QAAQ,IAAI,aAAa,EAAE,MAAM,QAAQ,WAAW,CAAC,GACrD,QAAQ,IAAI,gBAAgB,qBAAqB,OAAO,CAAC,CAC3D,CACF,CACF;AACF"}

package/dist/providers/supabase/config.d.ts

@@ -0,0 +1,20 @@
+import { StorageError } from "../../core/errors.js";
+import { Effect, Redacted } from "effect";
+import { HttpClient } from "effect/http";
+export interface SupabaseConfig {
+  readonly url: string;
+  readonly bucket: string;
+  readonly storeId: string;
+  readonly auth: {
+    readonly mode: "user" | "service";
+    readonly token: Redacted.Redacted<string> | Effect.Effect<Redacted.Redacted<string>, StorageError>;
+    readonly apiKey?: Redacted.Redacted<string>;
+  };
+  /** Application ceiling; configure from the project's actual global/bucket limits. */
+  readonly maxObjectBytes?: number;
+  readonly maxUnknownLengthBytes?: number;
+  readonly requestTimeoutMillis?: number;
+  /** Negotiate tus extensions once at Layer acquisition, before accepting transfers. */
+  readonly resumable?: boolean;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/providers/supabase/config.js

@@ -0,0 +1,41 @@
+import { storageError } from "../../core/errors.js";
+import { Effect, Redacted, Schema } from "effect";
+
+// src/providers/supabase/config.ts
+const Positive = Schema.Int.check(Schema.isGreaterThan(0));
+const Config$1 = Schema.Struct({
+	url: Schema.String,
+	bucket: Schema.String.check(Schema.isPattern(/^(?!\.{1,2}$)[A-Za-z0-9._-]+$/u)),
+	storeId: Schema.NonEmptyString,
+	auth: Schema.Struct({
+		mode: Schema.Literals(["user", "service"]),
+		token: Schema.declare((value) => Redacted.isRedacted(value) || Effect.isEffect(value)),
+		apiKey: Schema.optional(Schema.Redacted(Schema.NonEmptyString))
+	}),
+	maxObjectBytes: Schema.optional(Positive),
+	maxUnknownLengthBytes: Schema.optional(Positive),
+	requestTimeoutMillis: Schema.optional(Positive),
+	resumable: Schema.optional(Schema.Boolean)
+});
+const resolveConfig = Effect.fnUntraced(function* (input) {
+	yield* Schema.decodeUnknownEffect(Config$1, { onExcessProperty: "error" })(input).pipe(Effect.mapError(() => storageError("make", "supabase", {
+		_tag: "InvalidConfiguration",
+		field: "config"
+	})));
+	const url = URL.parse(input.url);
+	if (!url || !["https:", "http:"].includes(url.protocol) || url.username || url.password || url.search || url.hash || url.pathname !== "/") return yield* storageError("make", "supabase", {
+		_tag: "InvalidConfiguration",
+		field: "url"
+	});
+	return {
+		...input,
+		url: url.origin,
+		baseUrl: `${url.origin}/storage/v1`,
+		maxObjectBytes: input.maxObjectBytes ?? 50 * 1024 ** 2,
+		maxUnknownLengthBytes: input.maxUnknownLengthBytes ?? 8 * 1024 ** 2,
+		requestTimeoutMillis: input.requestTimeoutMillis ?? 3e4
+	};
+});
+
+export { resolveConfig };
+//# sourceMappingURL=config.js.map

package/dist/providers/supabase/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","names":["Config"],"sources":["../../../src/providers/supabase/config.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\nimport type { HttpClient } from \"effect/http\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport type { StorageError } from \"../../core/errors.js\";\n\nexport interface SupabaseConfig {\n  readonly url: string;\n  readonly bucket: string;\n  readonly storeId: string;\n  readonly auth: {\n    readonly mode: \"user\" | \"service\";\n    readonly token:\n      | Redacted.Redacted<string>\n      | Effect.Effect<Redacted.Redacted<string>, StorageError>;\n    readonly apiKey?: Redacted.Redacted<string>;\n  };\n  /** Application ceiling; configure from the project's actual global/bucket limits. */\n  readonly maxObjectBytes?: number;\n  readonly maxUnknownLengthBytes?: number;\n  readonly requestTimeoutMillis?: number;\n  /** Negotiate tus extensions once at Layer acquisition, before accepting transfers. */\n  readonly resumable?: boolean;\n}\nconst Positive = Schema.Int.check(Schema.isGreaterThan(0));\nconst Config = Schema.Struct({\n  url: Schema.String,\n  bucket: Schema.String.check(Schema.isPattern(/^(?!\\.{1,2}$)[A-Za-z0-9._-]+$/u)),\n  storeId: Schema.NonEmptyString,\n  auth: Schema.Struct({\n    mode: Schema.Literals([\"user\", \"service\"]),\n    token: Schema.declare<SupabaseConfig[\"auth\"][\"token\"]>(\n      (value): value is SupabaseConfig[\"auth\"][\"token\"] =>\n        Redacted.isRedacted(value) || Effect.isEffect(value),\n    ),\n    apiKey: Schema.optional(Schema.Redacted(Schema.NonEmptyString)),\n  }),\n  maxObjectBytes: Schema.optional(Positive),\n  maxUnknownLengthBytes: Schema.optional(Positive),\n  requestTimeoutMillis: Schema.optional(Positive),\n  resumable: Schema.optional(Schema.Boolean),\n});\nexport const resolveConfig = Effect.fnUntraced(function* (input: SupabaseConfig) {\n  yield* Schema.decodeUnknownEffect(Config, { onExcessProperty: \"error\" })(input).pipe(\n    Effect.mapError(() =>\n      storageError(\"make\", \"supabase\", { _tag: \"InvalidConfiguration\", field: \"config\" }),\n    ),\n  );\n  const url = URL.parse(input.url);\n  if (\n    !url ||\n    ![\"https:\", \"http:\"].includes(url.protocol) ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash ||\n    url.pathname !== \"/\"\n  )\n    return yield* storageError(\"make\", \"supabase\", { _tag: \"InvalidConfiguration\", field: \"url\" });\n  return {\n    ...input,\n    url: url.origin,\n    baseUrl: `${url.origin}/storage/v1`,\n    maxObjectBytes: input.maxObjectBytes ?? 50 * 1024 ** 2,\n    maxUnknownLengthBytes: input.maxUnknownLengthBytes ?? 8 * 1024 ** 2,\n    requestTimeoutMillis: input.requestTimeoutMillis ?? 30000,\n  };\n});\nexport interface SupabaseConnection {\n  readonly config: Effect.Success<ReturnType<typeof resolveConfig>>;\n  readonly http: HttpClient.HttpClient;\n}\n"],"mappings":";;;;AAwBA,MAAM,WAAW,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AACzD,MAAMA,WAAS,OAAO,OAAO;CAC3B,KAAK,OAAO;CACZ,QAAQ,OAAO,OAAO,MAAM,OAAO,UAAU,gCAAgC,CAAC;CAC9E,SAAS,OAAO;CAChB,MAAM,OAAO,OAAO;EAClB,MAAM,OAAO,SAAS,CAAC,QAAQ,SAAS,CAAC;EACzC,OAAO,OAAO,SACX,UACC,SAAS,WAAW,KAAK,KAAK,OAAO,SAAS,KAAK,CACvD;EACA,QAAQ,OAAO,SAAS,OAAO,SAAS,OAAO,cAAc,CAAC;CAChE,CAAC;CACD,gBAAgB,OAAO,SAAS,QAAQ;CACxC,uBAAuB,OAAO,SAAS,QAAQ;CAC/C,sBAAsB,OAAO,SAAS,QAAQ;CAC9C,WAAW,OAAO,SAAS,OAAO,OAAO;AAC3C,CAAC;AACD,MAAa,gBAAgB,OAAO,WAAW,WAAW,OAAuB;CAC/E,OAAO,OAAO,oBAAoBA,UAAQ,EAAE,kBAAkB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC9E,OAAO,eACL,aAAa,QAAQ,YAAY;EAAE,MAAM;EAAwB,OAAO;CAAS,CAAC,CACpF,CACF;CACA,MAAM,MAAM,IAAI,MAAM,MAAM,GAAG;CAC/B,IACE,CAAC,OACD,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,SAAS,IAAI,QAAQ,KAC1C,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,QACJ,IAAI,aAAa,KAEjB,OAAO,OAAO,aAAa,QAAQ,YAAY;EAAE,MAAM;EAAwB,OAAO;CAAM,CAAC;CAC/F,OAAO;EACL,GAAG;EACH,KAAK,IAAI;EACT,SAAS,GAAG,IAAI,OAAO;EACvB,gBAAgB,MAAM,kBAAkB,KAAK,QAAQ;EACrD,uBAAuB,MAAM,yBAAyB,IAAI,QAAQ;EAClE,sBAAsB,MAAM,wBAAwB;CACtD;AACF,CAAC"}

package/dist/providers/supabase/mapping.js

@@ -0,0 +1,60 @@
+import { ObjectKey } from "../../core/object.js";
+import { storageError } from "../../core/errors.js";
+import { DateTime, Effect, Option, Schema } from "effect";
+import { Base64 } from "effect/encoding";
+
+// src/providers/supabase/mapping.ts
+const validateKey = Effect.fnUntraced(function* (key, operation) {
+	yield* Schema.decodeUnknownEffect(ObjectKey)(key).pipe(Effect.mapError(() => storageError(operation, "supabase", {
+		_tag: "InvalidInput",
+		field: "key"
+	}, "not-started")));
+	if (key.split("/").some((part) => !part || part === "." || part === "..") || new TextEncoder().encode(key).length > 1024) return yield* storageError(operation, "supabase", {
+		_tag: "InvalidInput",
+		field: "key"
+	}, "not-started");
+	return key;
+});
+const objectPath = (connection, key) => `${encodeURIComponent(connection.config.bucket)}/${key.split("/").map(encodeURIComponent).join("/")}`;
+const validateRef = Effect.fnUntraced(function* (connection, ref, operation) {
+	if (ref.storeId !== connection.config.storeId || ref.version) return yield* storageError(operation, "supabase", {
+		_tag: "Unsupported",
+		capability: "foreign-or-versioned-reference"
+	}, "not-started");
+	return yield* validateKey(ref.key, operation);
+});
+const nativeHeaders = Effect.fnUntraced(function* (headers, operation) {
+	if (headers.contentDisposition || headers.contentLanguage || headers.contentEncoding) return yield* storageError(operation, "supabase", {
+		_tag: "Unsupported",
+		capability: "encoded-content-or-disposition-or-language"
+	}, "not-started");
+	const result = {
+		"content-type": headers.contentType ?? "application/octet-stream",
+		...headers.cacheControl ? { "cache-control": headers.cacheControl } : {},
+		...headers.contentEncoding ? { "content-encoding": headers.contentEncoding } : {},
+		...headers.customMetadata ? { "x-metadata": Base64.encode(new TextEncoder().encode(JSON.stringify(headers.customMetadata))) } : {}
+	};
+	if (new TextEncoder().encode(JSON.stringify(result)).length > 8192) return yield* storageError(operation, "supabase", {
+		_tag: "InvalidInput",
+		field: "headers"
+	}, "not-started");
+	return result;
+});
+const fromHeaders = Effect.fnUntraced(function* (connection, key, headers, size) {
+	const metadata = {
+		ref: {
+			storeId: connection.config.storeId,
+			key
+		},
+		...size !== void 0 ? { size } : headers["content-length"] !== void 0 ? { size: Number(headers["content-length"]) } : {},
+		...headers.etag ? { etag: headers.etag } : {},
+		...headers["content-type"] ? { contentType: headers["content-type"] } : {},
+		...headers["cache-control"] ? { cacheControl: headers["cache-control"] } : {},
+		...headers["last-modified"] ? { lastModified: Option.getOrUndefined(DateTime.make(headers["last-modified"])) } : {}
+	};
+	if (metadata.size !== void 0 && (!Number.isSafeInteger(metadata.size) || metadata.size < 0)) return yield* storageError("metadata", "supabase", { _tag: "ProviderFailure" });
+	return metadata;
+});
+
+export { fromHeaders, nativeHeaders, objectPath, validateKey, validateRef };
+//# sourceMappingURL=mapping.js.map

package/dist/providers/supabase/mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.js","names":[],"sources":["../../../src/providers/supabase/mapping.ts"],"sourcesContent":["import { DateTime, Effect, Option, Schema } from \"effect\";\nimport { Base64 } from \"effect/encoding\";\n\nimport { storageError } from \"../../core/errors.js\";\nimport { ObjectKey } from \"../../core/object.js\";\nimport type { ObjectMetadata, ObjectRef, ObjectHeaders } from \"../../core/object.js\";\nimport type { SupabaseConnection } from \"./config.js\";\n\nexport const validateKey = Effect.fnUntraced(function* (key: string, operation: string) {\n  yield* Schema.decodeUnknownEffect(ObjectKey)(key).pipe(\n    Effect.mapError(() =>\n      storageError(operation, \"supabase\", { _tag: \"InvalidInput\", field: \"key\" }, \"not-started\"),\n    ),\n  );\n  if (\n    key.split(\"/\").some((part) => !part || part === \".\" || part === \"..\") ||\n    new TextEncoder().encode(key).length > 1024\n  )\n    return yield* storageError(\n      operation,\n      \"supabase\",\n      { _tag: \"InvalidInput\", field: \"key\" },\n      \"not-started\",\n    );\n  return key;\n});\nexport const objectPath = (connection: SupabaseConnection, key: string) =>\n  `${encodeURIComponent(connection.config.bucket)}/${key.split(\"/\").map(encodeURIComponent).join(\"/\")}`;\nexport const validateRef = Effect.fnUntraced(function* (\n  connection: SupabaseConnection,\n  ref: ObjectRef,\n  operation: string,\n) {\n  if (ref.storeId !== connection.config.storeId || ref.version)\n    return yield* storageError(\n      operation,\n      \"supabase\",\n      { _tag: \"Unsupported\", capability: \"foreign-or-versioned-reference\" },\n      \"not-started\",\n    );\n  return yield* validateKey(ref.key, operation);\n});\nexport const nativeHeaders = Effect.fnUntraced(function* (\n  headers: ObjectHeaders,\n  operation: string,\n) {\n  if (headers.contentDisposition || headers.contentLanguage || headers.contentEncoding)\n    return yield* storageError(\n      operation,\n      \"supabase\",\n      { _tag: \"Unsupported\", capability: \"encoded-content-or-disposition-or-language\" },\n      \"not-started\",\n    );\n  const result = {\n    \"content-type\": headers.contentType ?? \"application/octet-stream\",\n    ...(headers.cacheControl ? { \"cache-control\": headers.cacheControl } : {}),\n    ...(headers.contentEncoding ? { \"content-encoding\": headers.contentEncoding } : {}),\n    ...(headers.customMetadata\n      ? {\n          \"x-metadata\": Base64.encode(\n            new TextEncoder().encode(JSON.stringify(headers.customMetadata)),\n          ),\n        }\n      : {}),\n  };\n  if (new TextEncoder().encode(JSON.stringify(result)).length > 8192)\n    return yield* storageError(\n      operation,\n      \"supabase\",\n      { _tag: \"InvalidInput\", field: \"headers\" },\n      \"not-started\",\n    );\n  return result;\n});\nexport const fromHeaders = Effect.fnUntraced(function* (\n  connection: SupabaseConnection,\n  key: string,\n  headers: Readonly<Record<string, string>>,\n  size?: number,\n) {\n  const metadata: ObjectMetadata = {\n    ref: { storeId: connection.config.storeId, key },\n    ...(size !== undefined\n      ? { size }\n      : headers[\"content-length\"] !== undefined\n        ? { size: Number(headers[\"content-length\"]) }\n        : {}),\n    ...(headers.etag ? { etag: headers.etag } : {}),\n    ...(headers[\"content-type\"] ? { contentType: headers[\"content-type\"] } : {}),\n    ...(headers[\"cache-control\"] ? { cacheControl: headers[\"cache-control\"] } : {}),\n    ...(headers[\"last-modified\"]\n      ? { lastModified: Option.getOrUndefined(DateTime.make(headers[\"last-modified\"])) }\n      : {}),\n  };\n  if (metadata.size !== undefined && (!Number.isSafeInteger(metadata.size) || metadata.size < 0))\n    return yield* storageError(\"metadata\", \"supabase\", { _tag: \"ProviderFailure\" });\n  return metadata;\n});\n"],"mappings":";;;;;;AAQA,MAAa,cAAc,OAAO,WAAW,WAAW,KAAa,WAAmB;CACtF,OAAO,OAAO,oBAAoB,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAChD,OAAO,eACL,aAAa,WAAW,YAAY;EAAE,MAAM;EAAgB,OAAO;CAAM,GAAG,aAAa,CAC3F,CACF;CACA,IACE,IAAI,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,SAAS,OAAO,SAAS,IAAI,KACpE,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,MAEvC,OAAO,OAAO,aACZ,WACA,YACA;EAAE,MAAM;EAAgB,OAAO;CAAM,GACrC,aACF;CACF,OAAO;AACT,CAAC;AACD,MAAa,cAAc,YAAgC,QACzD,GAAG,mBAAmB,WAAW,OAAO,MAAM,EAAE,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;AACpG,MAAa,cAAc,OAAO,WAAW,WAC3C,YACA,KACA,WACA;CACA,IAAI,IAAI,YAAY,WAAW,OAAO,WAAW,IAAI,SACnD,OAAO,OAAO,aACZ,WACA,YACA;EAAE,MAAM;EAAe,YAAY;CAAiC,GACpE,aACF;CACF,OAAO,OAAO,YAAY,IAAI,KAAK,SAAS;AAC9C,CAAC;AACD,MAAa,gBAAgB,OAAO,WAAW,WAC7C,SACA,WACA;CACA,IAAI,QAAQ,sBAAsB,QAAQ,mBAAmB,QAAQ,iBACnE,OAAO,OAAO,aACZ,WACA,YACA;EAAE,MAAM;EAAe,YAAY;CAA6C,GAChF,aACF;CACF,MAAM,SAAS;EACb,gBAAgB,QAAQ,eAAe;EACvC,GAAI,QAAQ,eAAe,EAAE,iBAAiB,QAAQ,aAAa,IAAI,CAAC;EACxE,GAAI,QAAQ,kBAAkB,EAAE,oBAAoB,QAAQ,gBAAgB,IAAI,CAAC;EACjF,GAAI,QAAQ,iBACR,EACE,cAAc,OAAO,OACnB,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,QAAQ,cAAc,CAAC,CACjE,EACF,IACA,CAAC;CACP;CACA,IAAI,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,MAAM,CAAC,CAAC,CAAC,SAAS,MAC5D,OAAO,OAAO,aACZ,WACA,YACA;EAAE,MAAM;EAAgB,OAAO;CAAU,GACzC,aACF;CACF,OAAO;AACT,CAAC;AACD,MAAa,cAAc,OAAO,WAAW,WAC3C,YACA,KACA,SACA,MACA;CACA,MAAM,WAA2B;EAC/B,KAAK;GAAE,SAAS,WAAW,OAAO;GAAS;EAAI;EAC/C,GAAI,SAAS,SACT,EAAE,KAAK,IACP,QAAQ,sBAAsB,SAC5B,EAAE,MAAM,OAAO,QAAQ,iBAAiB,EAAE,IAC1C,CAAC;EACP,GAAI,QAAQ,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;EAC7C,GAAI,QAAQ,kBAAkB,EAAE,aAAa,QAAQ,gBAAgB,IAAI,CAAC;EAC1E,GAAI,QAAQ,mBAAmB,EAAE,cAAc,QAAQ,iBAAiB,IAAI,CAAC;EAC7E,GAAI,QAAQ,mBACR,EAAE,cAAc,OAAO,eAAe,SAAS,KAAK,QAAQ,gBAAgB,CAAC,EAAE,IAC/E,CAAC;CACP;CACA,IAAI,SAAS,SAAS,WAAc,CAAC,OAAO,cAAc,SAAS,IAAI,KAAK,SAAS,OAAO,IAC1F,OAAO,OAAO,aAAa,YAAY,YAAY,EAAE,MAAM,kBAAkB,CAAC;CAChF,OAAO;AACT,CAAC"}