@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/azure/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","names":[],"sources":["../../src/providers/azure/signing.ts"],"sourcesContent":["import { Clock, DateTime, Effect, Layer, Redacted } from \"effect\";\n\nimport {\n  BlobSASPermissions,\n  SASProtocol,\n  type StorageSharedKeyCredential,\n  generateBlobSASQueryParameters,\n} from \"@azure/storage-blob\";\nimport type { UserDelegationKey } from \"@azure/storage-blob\";\n\nimport { StorageSigning } from \"../../core/capabilities.js\";\nimport type { SignedRequest } from \"../../core/capabilities.js\";\nimport { storageError } from \"../../core/errors.js\";\nimport { signingRequest } from \"../../internal/signing-request.js\";\nimport { AzureStorage } from \"./index.js\";\nimport { target } from \"./mapping.js\";\n\nexport type AzureSigningAuthority =\n  | {\n      readonly kind: \"shared-key\";\n      readonly credential: StorageSharedKeyCredential;\n      readonly expiresAt?: DateTime.Utc;\n    }\n  | {\n      readonly kind: \"user-delegation\";\n      readonly accountName: string;\n      readonly key: Redacted.Redacted<UserDelegationKey>;\n    };\n\nexport const AzureSigning = {\n  layer(authority: AzureSigningAuthority) {\n    return Layer.effect(\n      StorageSigning,\n      Effect.gen(function* () {\n        const storage = yield* AzureStorage;\n        return StorageSigning.of({\n          sign: Effect.fnUntraced(function* (input) {\n            yield* signingRequest(input, \"azure\");\n            const address = yield* target(storage, { ref: input.ref }, \"sign\");\n            if (\n              storage.config.encryption ||\n              storage.config.leaseId ||\n              (input.ref.version && input.method !== \"GET\" && input.method !== \"HEAD\")\n            )\n              return yield* storageError(\n                \"sign\",\n                \"azure\",\n                {\n                  _tag: \"Unsupported\",\n                  capability: \"signing-encryption-lease-or-versioned-mutation\",\n                },\n                \"not-started\",\n              );\n            const account =\n              authority.kind === \"shared-key\"\n                ? authority.credential.accountName\n                : authority.accountName;\n            if (storage.client.accountName !== account)\n              return yield* storageError(\n                \"sign\",\n                \"azure\",\n                { _tag: \"InvalidConfiguration\", field: \"signing-account\" },\n                \"not-started\",\n              );\n            const now = yield* Clock.currentTimeMillis;\n            const key =\n              authority.kind === \"user-delegation\" ? Redacted.value(authority.key) : undefined;\n            const authorityExpiry = key\n              ? key.signedExpiresOn.getTime()\n              : authority.kind === \"shared-key\" && authority.expiresAt\n                ? DateTime.toEpochMillis(authority.expiresAt)\n                : Infinity;\n            const expiry =\n              Math.floor(Math.min(now + input.expiresInSeconds * 1000, authorityExpiry) / 1000) *\n              1000;\n            if (\n              !Number.isSafeInteger(input.expiresInSeconds) ||\n              input.expiresInSeconds <= 0 ||\n              input.expiresInSeconds > 604800 ||\n              expiry <= now ||\n              (key && key.signedStartsOn.getTime() > now) ||\n              new URL(storage.config.containerUrl).protocol !== \"https:\"\n            )\n              return yield* storageError(\n                \"sign\",\n                \"azure\",\n                { _tag: \"InvalidInput\", field: \"expiry-or-endpoint\" },\n                \"not-started\",\n              );\n            const query = yield* Effect.try({\n              try: () => {\n                const settings = {\n                  containerName: storage.client.containerName,\n                  blobName: input.ref.key,\n                  permissions: BlobSASPermissions.parse(\n                    input.method === \"GET\" || input.method === \"HEAD\"\n                      ? \"r\"\n                      : input.method === \"DELETE\"\n                        ? \"d\"\n                        : \"cw\",\n                  ),\n                  protocol: SASProtocol.Https,\n                  startsOn: new Date(Math.max(now - 60_000, key?.signedStartsOn.getTime() ?? 0)),\n                  expiresOn: new Date(expiry),\n                  ...(input.ref.version\n                    ? input.ref.version._tag === \"AzureSnapshot\"\n                      ? { snapshotTime: input.ref.version.id }\n                      : { versionId: input.ref.version.id }\n                    : {}),\n                };\n                return authority.kind === \"shared-key\"\n                  ? generateBlobSASQueryParameters(settings, authority.credential)\n                  : generateBlobSASQueryParameters(\n                      settings,\n                      Redacted.value(authority.key),\n                      authority.accountName,\n                    );\n              },\n              catch: () =>\n                storageError(\n                  \"sign\",\n                  \"azure\",\n                  { _tag: \"InvalidConfiguration\", field: \"signing-authority\" },\n                  \"not-started\",\n                ),\n            });\n            const url = new URL(address.client.url);\n            url.search = query.toString();\n            if (input.ref.version)\n              url.searchParams.set(\n                input.ref.version._tag === \"AzureSnapshot\" ? \"snapshot\" : \"versionid\",\n                input.ref.version.id,\n              );\n            return {\n              method: input.method,\n              ref: input.ref,\n              url: Redacted.make(url.href),\n              headers: Redacted.make(\n                input.method === \"PUT\" ? { \"x-ms-blob-type\": \"BlockBlob\" } : {},\n              ),\n              expiresAt: DateTime.makeUnsafe(expiry),\n              constraints: [\n                {\n                  kind: \"permissions\",\n                  enforcement: \"provider\",\n                  value:\n                    input.method === \"GET\" || input.method === \"HEAD\"\n                      ? \"r\"\n                      : input.method === \"DELETE\"\n                        ? \"d\"\n                        : \"cw\",\n                },\n              ],\n            } satisfies SignedRequest;\n          }),\n        });\n      }),\n    );\n  },\n};\n"],"mappings":";;;;;;;;;AA6BA,MAAa,eAAe,EAC1B,MAAM,WAAkC;CACtC,OAAO,MAAM,OACX,gBACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EACvB,OAAO,eAAe,GAAG,EACvB,MAAM,OAAO,WAAW,WAAW,OAAO;GACxC,OAAO,eAAe,OAAO,OAAO;GACpC,MAAM,UAAU,OAAO,OAAO,SAAS,EAAE,KAAK,MAAM,IAAI,GAAG,MAAM;GACjE,IACE,QAAQ,OAAO,cACf,QAAQ,OAAO,WACd,MAAM,IAAI,WAAW,MAAM,WAAW,SAAS,MAAM,WAAW,QAEjE,OAAO,OAAO,aACZ,QACA,SACA;IACE,MAAM;IACN,YAAY;GACd,GACA,aACF;GACF,MAAM,UACJ,UAAU,SAAS,eACf,UAAU,WAAW,cACrB,UAAU;GAChB,IAAI,QAAQ,OAAO,gBAAgB,SACjC,OAAO,OAAO,aACZ,QACA,SACA;IAAE,MAAM;IAAwB,OAAO;GAAkB,GACzD,aACF;GACF,MAAM,MAAM,OAAO,MAAM;GACzB,MAAM,MACJ,UAAU,SAAS,oBAAoB,SAAS,MAAM,UAAU,GAAG,IAAI;GACzE,MAAM,kBAAkB,MACpB,IAAI,gBAAgB,QAAQ,IAC5B,UAAU,SAAS,gBAAgB,UAAU,YAC3C,SAAS,cAAc,UAAU,SAAS,IAC1C;GACN,MAAM,SACJ,KAAK,MAAM,KAAK,IAAI,MAAM,MAAM,mBAAmB,KAAM,eAAe,IAAI,GAAI,IAChF;GACF,IACE,CAAC,OAAO,cAAc,MAAM,gBAAgB,KAC5C,MAAM,oBAAoB,KAC1B,MAAM,mBAAmB,UACzB,UAAU,OACT,OAAO,IAAI,eAAe,QAAQ,IAAI,OACvC,IAAI,IAAI,QAAQ,OAAO,YAAY,CAAC,CAAC,aAAa,UAElD,OAAO,OAAO,aACZ,QACA,SACA;IAAE,MAAM;IAAgB,OAAO;GAAqB,GACpD,aACF;GACF,MAAM,QAAQ,OAAO,OAAO,IAAI;IAC9B,WAAW;KACT,MAAM,WAAW;MACf,eAAe,QAAQ,OAAO;MAC9B,UAAU,MAAM,IAAI;MACpB,aAAa,mBAAmB,MAC9B,MAAM,WAAW,SAAS,MAAM,WAAW,SACvC,MACA,MAAM,WAAW,WACf,MACA,IACR;MACA,UAAU,YAAY;MACtB,UAAU,IAAI,KAAK,KAAK,IAAI,MAAM,KAAQ,KAAK,eAAe,QAAQ,KAAK,CAAC,CAAC;MAC7E,WAAW,IAAI,KAAK,MAAM;MAC1B,GAAI,MAAM,IAAI,UACV,MAAM,IAAI,QAAQ,SAAS,kBACzB,EAAE,cAAc,MAAM,IAAI,QAAQ,GAAG,IACrC,EAAE,WAAW,MAAM,IAAI,QAAQ,GAAG,IACpC,CAAC;KACP;KACA,OAAO,UAAU,SAAS,eACtB,+BAA+B,UAAU,UAAU,UAAU,IAC7D,+BACE,UACA,SAAS,MAAM,UAAU,GAAG,GAC5B,UAAU,WACZ;IACN;IACA,aACE,aACE,QACA,SACA;KAAE,MAAM;KAAwB,OAAO;IAAoB,GAC3D,aACF;GACJ,CAAC;GACD,MAAM,MAAM,IAAI,IAAI,QAAQ,OAAO,GAAG;GACtC,IAAI,SAAS,MAAM,SAAS;GAC5B,IAAI,MAAM,IAAI,SACZ,IAAI,aAAa,IACf,MAAM,IAAI,QAAQ,SAAS,kBAAkB,aAAa,aAC1D,MAAM,IAAI,QAAQ,EACpB;GACF,OAAO;IACL,QAAQ,MAAM;IACd,KAAK,MAAM;IACX,KAAK,SAAS,KAAK,IAAI,IAAI;IAC3B,SAAS,SAAS,KAChB,MAAM,WAAW,QAAQ,EAAE,kBAAkB,YAAY,IAAI,CAAC,CAChE;IACA,WAAW,SAAS,WAAW,MAAM;IACrC,aAAa,CACX;KACE,MAAM;KACN,aAAa;KACb,OACE,MAAM,WAAW,SAAS,MAAM,WAAW,SACvC,MACA,MAAM,WAAW,WACf,MACA;IACV,CACF;GACF;EACF,CAAC,EACH,CAAC;CACH,CAAC,CACH;AACF,EACF"}

package/dist/azure/uploads.d.ts

@@ -0,0 +1,11 @@
+import { UploadError } from "../uploads/schema.js";
+import { StorageSigning } from "../core/capabilities.js";
+import { UploadGrantDriver } from "../uploads/driver.js";
+import { AzureStorage } from "../azure.js";
+import { Layer } from "effect";
+export declare const AzureUploadGrants: {
+  layer(options?: {
+    readonly partBytes?: number;
+  }): Layer.Layer<UploadGrantDriver, UploadError, AzureStorage | StorageSigning>;
+};
+//# sourceMappingURL=uploads.d.ts.map

package/dist/azure/uploads.js

@@ -0,0 +1,83 @@
+import { failUpload } from "../uploads/schema.js";
+import { UploadGrantDriver } from "../uploads/driver.js";
+import { operationMetadata } from "../uploads/verification.js";
+import { StorageSigning } from "../core/capabilities.js";
+import { AzureStorage } from "../azure.js";
+import { Clock, DateTime, Effect, Layer, Redacted, Schema } from "effect";
+
+// src/providers/azure/uploads.ts
+const blockId = (number) => Buffer.from(`effect-upload-${String(number).padStart(5, "0")}`).toString("base64");
+const remote = (input) => Schema.decodeUnknownEffect(Schema.Struct({ partBytes: Schema.Natural }))(input).pipe(Effect.mapError(() => failUpload("Conflict")));
+const AzureUploadGrants = { layer(options = {}) {
+	return Layer.effect(UploadGrantDriver, Effect.gen(function* () {
+		const storage = yield* AzureStorage;
+		const signing = yield* StorageSigning;
+		const partBytes = options.partBytes ?? 8 * 1024 ** 2;
+		if (!Number.isSafeInteger(partBytes) || partBytes < 1024 ** 2 || partBytes > 64 * 1024 ** 2) return yield* failUpload("BadRequest");
+		return UploadGrantDriver.of({
+			begin: (record) => ["auto", "multipart"].includes(record.input.strategy ?? "auto") && Math.ceil(record.input.file.size / partBytes) <= 1e4 && record.input.file.size > 0 ? Effect.succeed({ partBytes }) : Effect.fail(failUpload("Unsupported")),
+			grant: Effect.fnUntraced(function* (record, expiresAt) {
+				return {
+					_tag: "Blocks",
+					partBytes: (yield* remote(record.remote ? Redacted.value(record.remote) : void 0)).partBytes,
+					completed: [],
+					expiresAt
+				};
+			}),
+			part: Effect.fnUntraced(function* (record, partNumber, expiresAt) {
+				const state = yield* remote(record.remote ? Redacted.value(record.remote) : void 0);
+				if (partNumber > Math.ceil(record.input.file.size / state.partBytes)) return yield* failUpload("BadRequest");
+				const signed = yield* signing.sign({
+					ref: {
+						storeId: storage.storeId,
+						key: record.stagingKey
+					},
+					method: "PUT",
+					expiresInSeconds: Math.max(1, Math.floor((expiresAt - (yield* Clock.currentTimeMillis)) / 1e3))
+				});
+				const url = new URL(Redacted.value(signed.url));
+				url.searchParams.set("comp", "block");
+				url.searchParams.set("blockid", blockId(partNumber));
+				return {
+					_tag: "SignedRequest",
+					method: "PUT",
+					url: url.href,
+					headers: Object.fromEntries(Object.entries(Redacted.value(signed.headers)).filter(([name]) => name !== "x-ms-blob-type")),
+					partReceipt: blockId(partNumber),
+					expiresAt: DateTime.toEpochMillis(signed.expiresAt)
+				};
+			}),
+			complete: Effect.fnUntraced(function* (record, supplied) {
+				const state = yield* remote(record.remote ? Redacted.value(record.remote) : void 0);
+				const count = Math.ceil(record.input.file.size / state.partBytes);
+				const inventory = yield* storage.blocks.list({
+					storeId: storage.storeId,
+					key: record.stagingKey
+				});
+				if (supplied.length !== count || new Set(supplied.map((part) => part.partNumber)).size !== count) return yield* failUpload("VerificationFailed");
+				const ids = [];
+				for (let number = 1; number <= count; number++) {
+					const id = blockId(number);
+					if (!supplied.some((part) => part.partNumber === number && part.receipt === id) || !inventory.uncommitted.some((part) => part.blockId === id && part.size === Math.min(state.partBytes, record.input.file.size - (number - 1) * state.partBytes))) return yield* failUpload("VerificationFailed");
+					ids.push(id);
+				}
+				yield* storage.blocks.commit({
+					ref: {
+						storeId: storage.storeId,
+						key: record.stagingKey
+					},
+					blockIds: ids,
+					headers: {
+						contentType: record.input.file.contentType,
+						customMetadata: operationMetadata(record)
+					},
+					condition: { _tag: "CreateOnly" }
+				});
+			}),
+			abort: () => Effect.void
+		});
+	}));
+} };
+
+export { AzureUploadGrants };
+//# sourceMappingURL=uploads.js.map

package/dist/azure/uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.js","names":[],"sources":["../../src/providers/azure/uploads.ts"],"sourcesContent":["import { Clock, DateTime, Effect, Layer, Redacted, Schema } from \"effect\";\n\nimport { StorageSigning } from \"../../core/capabilities.js\";\nimport { UploadGrantDriver } from \"../../uploads/driver.js\";\nimport { failUpload } from \"../../uploads/schema.js\";\nimport { operationMetadata } from \"../../uploads/verification.js\";\nimport { AzureStorage } from \"./index.js\";\nconst blockId = (number: number) =>\n  Buffer.from(`effect-upload-${String(number).padStart(5, \"0\")}`).toString(\"base64\");\nconst remote = (input: unknown) =>\n  Schema.decodeUnknownEffect(Schema.Struct({ partBytes: Schema.Natural }))(input).pipe(\n    Effect.mapError(() => failUpload(\"Conflict\")),\n  );\n\nexport const AzureUploadGrants = {\n  layer(options: { readonly partBytes?: number } = {}) {\n    return Layer.effect(\n      UploadGrantDriver,\n      Effect.gen(function* () {\n        const storage = yield* AzureStorage;\n        const signing = yield* StorageSigning;\n        const partBytes = options.partBytes ?? 8 * 1024 ** 2;\n        if (!Number.isSafeInteger(partBytes) || partBytes < 1024 ** 2 || partBytes > 64 * 1024 ** 2)\n          return yield* failUpload(\"BadRequest\");\n        return UploadGrantDriver.of({\n          begin: (record) =>\n            [\"auto\", \"multipart\"].includes(record.input.strategy ?? \"auto\") &&\n            Math.ceil(record.input.file.size / partBytes) <= 10000 &&\n            record.input.file.size > 0\n              ? Effect.succeed({ partBytes })\n              : Effect.fail(failUpload(\"Unsupported\")),\n          grant: Effect.fnUntraced(function* (record, expiresAt) {\n            const state = yield* remote(record.remote ? Redacted.value(record.remote) : undefined);\n            return { _tag: \"Blocks\", partBytes: state.partBytes, completed: [], expiresAt };\n          }),\n          part: Effect.fnUntraced(function* (record, partNumber, expiresAt) {\n            const state = yield* remote(record.remote ? Redacted.value(record.remote) : undefined);\n            if (partNumber > Math.ceil(record.input.file.size / state.partBytes))\n              return yield* failUpload(\"BadRequest\");\n            const signed = yield* signing.sign({\n              ref: { storeId: storage.storeId, key: record.stagingKey },\n              method: \"PUT\",\n              expiresInSeconds: Math.max(\n                1,\n                Math.floor((expiresAt - (yield* Clock.currentTimeMillis)) / 1000),\n              ),\n            });\n            const url = new URL(Redacted.value(signed.url));\n            url.searchParams.set(\"comp\", \"block\");\n            url.searchParams.set(\"blockid\", blockId(partNumber));\n            return {\n              _tag: \"SignedRequest\",\n              method: \"PUT\",\n              url: url.href,\n              headers: Object.fromEntries(\n                Object.entries(Redacted.value(signed.headers)).filter(\n                  ([name]) => name !== \"x-ms-blob-type\",\n                ),\n              ),\n              partReceipt: blockId(partNumber),\n              expiresAt: DateTime.toEpochMillis(signed.expiresAt),\n            };\n          }),\n          complete: Effect.fnUntraced(function* (record, supplied) {\n            const state = yield* remote(record.remote ? Redacted.value(record.remote) : undefined);\n            const count = Math.ceil(record.input.file.size / state.partBytes);\n            const inventory = yield* storage.blocks.list({\n              storeId: storage.storeId,\n              key: record.stagingKey,\n            });\n            if (\n              supplied.length !== count ||\n              new Set(supplied.map((part) => part.partNumber)).size !== count\n            )\n              return yield* failUpload(\"VerificationFailed\");\n            const ids: string[] = [];\n            for (let number = 1; number <= count; number++) {\n              const id = blockId(number);\n              if (\n                !supplied.some((part) => part.partNumber === number && part.receipt === id) ||\n                !inventory.uncommitted.some(\n                  (part) =>\n                    part.blockId === id &&\n                    part.size ===\n                      Math.min(\n                        state.partBytes,\n                        record.input.file.size - (number - 1) * state.partBytes,\n                      ),\n                )\n              )\n                return yield* failUpload(\"VerificationFailed\");\n              ids.push(id);\n            }\n            yield* storage.blocks.commit({\n              ref: { storeId: storage.storeId, key: record.stagingKey },\n              blockIds: ids,\n              headers: {\n                contentType: record.input.file.contentType,\n                customMetadata: operationMetadata(record),\n              },\n              condition: { _tag: \"CreateOnly\" },\n            });\n          }),\n          // Azure has no operation that abandons only these uncommitted blocks. Native expiry owns them.\n          abort: () => Effect.void,\n        });\n      }),\n    );\n  },\n};\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW,WACf,OAAO,KAAK,iBAAiB,OAAO,MAAM,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,QAAQ;AACnF,MAAM,UAAU,UACd,OAAO,oBAAoB,OAAO,OAAO,EAAE,WAAW,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC9E,OAAO,eAAe,WAAW,UAAU,CAAC,CAC9C;AAEF,MAAa,oBAAoB,EAC/B,MAAM,UAA2C,CAAC,GAAG;CACnD,OAAO,MAAM,OACX,mBACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EACvB,MAAM,UAAU,OAAO;EACvB,MAAM,YAAY,QAAQ,aAAa,IAAI,QAAQ;EACnD,IAAI,CAAC,OAAO,cAAc,SAAS,KAAK,YAAY,QAAQ,KAAK,YAAY,KAAK,QAAQ,GACxF,OAAO,OAAO,WAAW,YAAY;EACvC,OAAO,kBAAkB,GAAG;GAC1B,QAAQ,WACN,CAAC,QAAQ,WAAW,CAAC,CAAC,SAAS,OAAO,MAAM,YAAY,MAAM,KAC9D,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,SAAS,KAAK,OACjD,OAAO,MAAM,KAAK,OAAO,IACrB,OAAO,QAAQ,EAAE,UAAU,CAAC,IAC5B,OAAO,KAAK,WAAW,aAAa,CAAC;GAC3C,OAAO,OAAO,WAAW,WAAW,QAAQ,WAAW;IAErD,OAAO;KAAE,MAAM;KAAU,YAAW,OADf,OAAO,OAAO,SAAS,SAAS,MAAM,OAAO,MAAM,IAAI,MAAS,EAC5C,CAAC;KAAW,WAAW,CAAC;KAAG;IAAU;GAChF,CAAC;GACD,MAAM,OAAO,WAAW,WAAW,QAAQ,YAAY,WAAW;IAChE,MAAM,QAAQ,OAAO,OAAO,OAAO,SAAS,SAAS,MAAM,OAAO,MAAM,IAAI,MAAS;IACrF,IAAI,aAAa,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,SAAS,GACjE,OAAO,OAAO,WAAW,YAAY;IACvC,MAAM,SAAS,OAAO,QAAQ,KAAK;KACjC,KAAK;MAAE,SAAS,QAAQ;MAAS,KAAK,OAAO;KAAW;KACxD,QAAQ;KACR,kBAAkB,KAAK,IACrB,GACA,KAAK,OAAO,aAAa,OAAO,MAAM,sBAAsB,GAAI,CAClE;IACF,CAAC;IACD,MAAM,MAAM,IAAI,IAAI,SAAS,MAAM,OAAO,GAAG,CAAC;IAC9C,IAAI,aAAa,IAAI,QAAQ,OAAO;IACpC,IAAI,aAAa,IAAI,WAAW,QAAQ,UAAU,CAAC;IACnD,OAAO;KACL,MAAM;KACN,QAAQ;KACR,KAAK,IAAI;KACT,SAAS,OAAO,YACd,OAAO,QAAQ,SAAS,MAAM,OAAO,OAAO,CAAC,CAAC,CAAC,QAC5C,CAAC,UAAU,SAAS,gBACvB,CACF;KACA,aAAa,QAAQ,UAAU;KAC/B,WAAW,SAAS,cAAc,OAAO,SAAS;IACpD;GACF,CAAC;GACD,UAAU,OAAO,WAAW,WAAW,QAAQ,UAAU;IACvD,MAAM,QAAQ,OAAO,OAAO,OAAO,SAAS,SAAS,MAAM,OAAO,MAAM,IAAI,MAAS;IACrF,MAAM,QAAQ,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,SAAS;IAChE,MAAM,YAAY,OAAO,QAAQ,OAAO,KAAK;KAC3C,SAAS,QAAQ;KACjB,KAAK,OAAO;IACd,CAAC;IACD,IACE,SAAS,WAAW,SACpB,IAAI,IAAI,SAAS,KAAK,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,OAE1D,OAAO,OAAO,WAAW,oBAAoB;IAC/C,MAAM,MAAgB,CAAC;IACvB,KAAK,IAAI,SAAS,GAAG,UAAU,OAAO,UAAU;KAC9C,MAAM,KAAK,QAAQ,MAAM;KACzB,IACE,CAAC,SAAS,MAAM,SAAS,KAAK,eAAe,UAAU,KAAK,YAAY,EAAE,KAC1E,CAAC,UAAU,YAAY,MACpB,SACC,KAAK,YAAY,MACjB,KAAK,SACH,KAAK,IACH,MAAM,WACN,OAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,MAAM,SAChD,CACN,GAEA,OAAO,OAAO,WAAW,oBAAoB;KAC/C,IAAI,KAAK,EAAE;IACb;IACA,OAAO,QAAQ,OAAO,OAAO;KAC3B,KAAK;MAAE,SAAS,QAAQ;MAAS,KAAK,OAAO;KAAW;KACxD,UAAU;KACV,SAAS;MACP,aAAa,OAAO,MAAM,KAAK;MAC/B,gBAAgB,kBAAkB,MAAM;KAC1C;KACA,WAAW,EAAE,MAAM,aAAa;IAClC,CAAC;GACH,CAAC;GAED,aAAa,OAAO;EACtB,CAAC;CACH,CAAC,CACH;AACF,EACF"}

package/dist/azure.d.ts

@@ -0,0 +1,427 @@
+import { ObjectMetadata, ObjectRef } from "./core/object.js";
+import { StorageError } from "./core/errors.js";
+import { DeleteRequest, GetRequest, GetResult, HeadRequest, ListPage, ListRequest, PutRequest, WriteCondition } from "./core/requests.js";
+import { StorageCapabilities, StoragePublicUrls } from "./core/capabilities.js";
+import { Storage } from "./core/storage.js";
+import { BlockUploads } from "./core/contracts/resumable.js";
+import "./index.js";
+import { TransferDriver } from "./transfers/dependencies.js";
+import { AzureConfig, AzureConnection, ResolvedAzureConfig } from "./providers/azure/config.js";
+import { Context, Effect, Layer, Redacted } from "effect";
+import { ContainerClient } from "@azure/storage-blob";
+declare function assemble(connection: AzureConnection): {
+  provider: string;
+  storeId: string;
+  capabilities: StorageCapabilities;
+  put: <E = never, R = never>(request: PutRequest<E, R>) => Effect.Effect<ObjectMetadata, StorageError | E, R>;
+  get: (request: GetRequest) => Effect.Effect<GetResult, StorageError, import("effect/Scope").Scope>;
+  head: (request: HeadRequest) => Effect.Effect<ObjectMetadata, StorageError>;
+  delete: (request: DeleteRequest) => Effect.Effect<void, StorageError>;
+  listPage: (request?: ListRequest) => Effect.Effect<ListPage, StorageError>;
+  client: ContainerClient;
+  config: ResolvedAzureConfig;
+  beginCopy: (input: {
+    readonly sourceUrl: Redacted.Redacted<string>;
+    readonly destinationKey: string;
+    readonly sourceIfMatch?: string;
+    readonly condition?: WriteCondition;
+  }) => Effect.Effect<{
+    _tag: "Started";
+    copyId: string;
+    ref: {
+      storeId: string;
+      key: string;
+    };
+  }, StorageError, never>;
+  pollCopy: (input: {
+    readonly ref: ObjectRef;
+    readonly copyId: string;
+  }) => Effect.Effect<{
+    _tag: "Completed";
+    metadata: {
+      readonly contentType?: string | undefined;
+      readonly contentEncoding?: string | undefined;
+      readonly contentLanguage?: string | undefined;
+      readonly contentDisposition?: string | undefined;
+      readonly cacheControl?: string | undefined;
+      readonly customMetadata?: {
+        readonly [x: string]: string;
+      } | undefined;
+      readonly ref: {
+        readonly storeId: string;
+        readonly key: string;
+        readonly version?: {
+          readonly _tag: "S3Version";
+          readonly id: string;
+        } | {
+          readonly _tag: "GcsGeneration";
+          readonly id: string;
+          readonly metageneration?: string | undefined;
+        } | {
+          readonly _tag: "AzureVersion";
+          readonly id: string;
+        } | {
+          readonly _tag: "AzureSnapshot";
+          readonly id: string;
+        } | {
+          readonly _tag: "OpaqueVersion";
+          readonly provider: string;
+          readonly id: string;
+        } | undefined;
+      };
+      readonly size?: number | undefined;
+      readonly etag?: string | undefined;
+      readonly lastModified?: import("effect/DateTime").Utc | undefined;
+      readonly checksums?: readonly {
+        readonly algorithm: string;
+        readonly encoding: "base64" | "hex";
+        readonly scope: "composite" | "full-object";
+        readonly value: string;
+        readonly partCount?: number | undefined;
+      }[] | undefined;
+      readonly storageClass?: string | undefined;
+    };
+    status?: never;
+  } | {
+    metadata?: never;
+    _tag: "Failed";
+    status: "aborted" | "failed";
+  } | {
+    metadata?: never;
+    _tag: "Pending";
+    status: string;
+  }, StorageError, never>;
+  cancelCopy: (input: {
+    readonly ref: ObjectRef;
+    readonly copyId: string;
+  }) => Effect.Effect<void, StorageError, never>;
+  acquireLease: (input: {
+    readonly ref: ObjectRef;
+    readonly durationSeconds: number;
+    readonly proposedId?: Redacted.Redacted<string>;
+  }) => Effect.Effect<Redacted.Redacted<string>, StorageError, never>;
+  renewLease: (input: {
+    readonly ref: ObjectRef;
+    readonly leaseId: Redacted.Redacted<string>;
+  }) => Effect.Effect<void, StorageError, never>;
+  releaseLease: (input: {
+    readonly ref: ObjectRef;
+    readonly leaseId: Redacted.Redacted<string>;
+  }) => Effect.Effect<void, StorageError, never>;
+  blocks: BlockUploads;
+};
+export type AzureStorageService = ReturnType<typeof assemble>;
+declare const AzureStorage_base: Context.ServiceClass<AzureStorage, "@effect-kit/storage/azure/AzureStorage", {
+  provider: string;
+  storeId: string;
+  capabilities: StorageCapabilities;
+  put: <E = never, R = never>(request: PutRequest<E, R>) => Effect.Effect<ObjectMetadata, StorageError | E, R>;
+  get: (request: GetRequest) => Effect.Effect<GetResult, StorageError, import("effect/Scope").Scope>;
+  head: (request: HeadRequest) => Effect.Effect<ObjectMetadata, StorageError>;
+  delete: (request: DeleteRequest) => Effect.Effect<void, StorageError>;
+  listPage: (request?: ListRequest) => Effect.Effect<ListPage, StorageError>;
+  client: ContainerClient;
+  config: ResolvedAzureConfig;
+  beginCopy: (input: {
+    readonly sourceUrl: Redacted.Redacted<string>;
+    readonly destinationKey: string;
+    readonly sourceIfMatch?: string;
+    readonly condition?: WriteCondition;
+  }) => Effect.Effect<{
+    _tag: "Started";
+    copyId: string;
+    ref: {
+      storeId: string;
+      key: string;
+    };
+  }, StorageError, never>;
+  pollCopy: (input: {
+    readonly ref: ObjectRef;
+    readonly copyId: string;
+  }) => Effect.Effect<{
+    _tag: "Completed";
+    metadata: {
+      readonly contentType?: string | undefined;
+      readonly contentEncoding?: string | undefined;
+      readonly contentLanguage?: string | undefined;
+      readonly contentDisposition?: string | undefined;
+      readonly cacheControl?: string | undefined;
+      readonly customMetadata?: {
+        readonly [x: string]: string;
+      } | undefined;
+      readonly ref: {
+        readonly storeId: string;
+        readonly key: string;
+        readonly version?: {
+          readonly _tag: "S3Version";
+          readonly id: string;
+        } | {
+          readonly _tag: "GcsGeneration";
+          readonly id: string;
+          readonly metageneration?: string | undefined;
+        } | {
+          readonly _tag: "AzureVersion";
+          readonly id: string;
+        } | {
+          readonly _tag: "AzureSnapshot";
+          readonly id: string;
+        } | {
+          readonly _tag: "OpaqueVersion";
+          readonly provider: string;
+          readonly id: string;
+        } | undefined;
+      };
+      readonly size?: number | undefined;
+      readonly etag?: string | undefined;
+      readonly lastModified?: import("effect/DateTime").Utc | undefined;
+      readonly checksums?: readonly {
+        readonly algorithm: string;
+        readonly encoding: "base64" | "hex";
+        readonly scope: "composite" | "full-object";
+        readonly value: string;
+        readonly partCount?: number | undefined;
+      }[] | undefined;
+      readonly storageClass?: string | undefined;
+    };
+    status?: never;
+  } | {
+    metadata?: never;
+    _tag: "Failed";
+    status: "aborted" | "failed";
+  } | {
+    metadata?: never;
+    _tag: "Pending";
+    status: string;
+  }, StorageError, never>;
+  cancelCopy: (input: {
+    readonly ref: ObjectRef;
+    readonly copyId: string;
+  }) => Effect.Effect<void, StorageError, never>;
+  acquireLease: (input: {
+    readonly ref: ObjectRef;
+    readonly durationSeconds: number;
+    readonly proposedId?: Redacted.Redacted<string>;
+  }) => Effect.Effect<Redacted.Redacted<string>, StorageError, never>;
+  renewLease: (input: {
+    readonly ref: ObjectRef;
+    readonly leaseId: Redacted.Redacted<string>;
+  }) => Effect.Effect<void, StorageError, never>;
+  releaseLease: (input: {
+    readonly ref: ObjectRef;
+    readonly leaseId: Redacted.Redacted<string>;
+  }) => Effect.Effect<void, StorageError, never>;
+  blocks: BlockUploads;
+}>;
+export declare class AzureStorage extends AzureStorage_base {
+  static readonly make: (input: AzureConfig) => Effect.Effect<{
+    provider: string;
+    storeId: string;
+    capabilities: StorageCapabilities;
+    put: <E = never, R = never>(request: PutRequest<E, R>) => Effect.Effect<ObjectMetadata, StorageError | E, R>;
+    get: (request: GetRequest) => Effect.Effect<GetResult, StorageError, import("effect/Scope").Scope>;
+    head: (request: HeadRequest) => Effect.Effect<ObjectMetadata, StorageError>;
+    delete: (request: DeleteRequest) => Effect.Effect<void, StorageError>;
+    listPage: (request?: ListRequest) => Effect.Effect<ListPage, StorageError>;
+    client: ContainerClient;
+    config: ResolvedAzureConfig;
+    beginCopy: (input: {
+      readonly sourceUrl: Redacted.Redacted<string>;
+      readonly destinationKey: string;
+      readonly sourceIfMatch?: string;
+      readonly condition?: WriteCondition;
+    }) => Effect.Effect<{
+      _tag: "Started";
+      copyId: string;
+      ref: {
+        storeId: string;
+        key: string;
+      };
+    }, StorageError, never>;
+    pollCopy: (input: {
+      readonly ref: ObjectRef;
+      readonly copyId: string;
+    }) => Effect.Effect<{
+      _tag: "Completed";
+      metadata: {
+        readonly contentType?: string | undefined;
+        readonly contentEncoding?: string | undefined;
+        readonly contentLanguage?: string | undefined;
+        readonly contentDisposition?: string | undefined;
+        readonly cacheControl?: string | undefined;
+        readonly customMetadata?: {
+          readonly [x: string]: string;
+        } | undefined;
+        readonly ref: {
+          readonly storeId: string;
+          readonly key: string;
+          readonly version?: {
+            readonly _tag: "S3Version";
+            readonly id: string;
+          } | {
+            readonly _tag: "GcsGeneration";
+            readonly id: string;
+            readonly metageneration?: string | undefined;
+          } | {
+            readonly _tag: "AzureVersion";
+            readonly id: string;
+          } | {
+            readonly _tag: "AzureSnapshot";
+            readonly id: string;
+          } | {
+            readonly _tag: "OpaqueVersion";
+            readonly provider: string;
+            readonly id: string;
+          } | undefined;
+        };
+        readonly size?: number | undefined;
+        readonly etag?: string | undefined;
+        readonly lastModified?: import("effect/DateTime").Utc | undefined;
+        readonly checksums?: readonly {
+          readonly algorithm: string;
+          readonly encoding: "base64" | "hex";
+          readonly scope: "composite" | "full-object";
+          readonly value: string;
+          readonly partCount?: number | undefined;
+        }[] | undefined;
+        readonly storageClass?: string | undefined;
+      };
+      status?: never;
+    } | {
+      metadata?: never;
+      _tag: "Failed";
+      status: "aborted" | "failed";
+    } | {
+      metadata?: never;
+      _tag: "Pending";
+      status: string;
+    }, StorageError, never>;
+    cancelCopy: (input: {
+      readonly ref: ObjectRef;
+      readonly copyId: string;
+    }) => Effect.Effect<void, StorageError, never>;
+    acquireLease: (input: {
+      readonly ref: ObjectRef;
+      readonly durationSeconds: number;
+      readonly proposedId?: Redacted.Redacted<string>;
+    }) => Effect.Effect<Redacted.Redacted<string>, StorageError, never>;
+    renewLease: (input: {
+      readonly ref: ObjectRef;
+      readonly leaseId: Redacted.Redacted<string>;
+    }) => Effect.Effect<void, StorageError, never>;
+    releaseLease: (input: {
+      readonly ref: ObjectRef;
+      readonly leaseId: Redacted.Redacted<string>;
+    }) => Effect.Effect<void, StorageError, never>;
+    blocks: BlockUploads;
+  }, StorageError, never>;
+  static readonly makeClient: (client: ContainerClient, input: AzureConfig, policy: {
+    readonly sdkRetries: "disabled";
+  }) => Effect.Effect<{
+    provider: string;
+    storeId: string;
+    capabilities: StorageCapabilities;
+    put: <E = never, R = never>(request: PutRequest<E, R>) => Effect.Effect<ObjectMetadata, StorageError | E, R>;
+    get: (request: GetRequest) => Effect.Effect<GetResult, StorageError, import("effect/Scope").Scope>;
+    head: (request: HeadRequest) => Effect.Effect<ObjectMetadata, StorageError>;
+    delete: (request: DeleteRequest) => Effect.Effect<void, StorageError>;
+    listPage: (request?: ListRequest) => Effect.Effect<ListPage, StorageError>;
+    client: ContainerClient;
+    config: ResolvedAzureConfig;
+    beginCopy: (input: {
+      readonly sourceUrl: Redacted.Redacted<string>;
+      readonly destinationKey: string;
+      readonly sourceIfMatch?: string;
+      readonly condition?: WriteCondition;
+    }) => Effect.Effect<{
+      _tag: "Started";
+      copyId: string;
+      ref: {
+        storeId: string;
+        key: string;
+      };
+    }, StorageError, never>;
+    pollCopy: (input: {
+      readonly ref: ObjectRef;
+      readonly copyId: string;
+    }) => Effect.Effect<{
+      _tag: "Completed";
+      metadata: {
+        readonly contentType?: string | undefined;
+        readonly contentEncoding?: string | undefined;
+        readonly contentLanguage?: string | undefined;
+        readonly contentDisposition?: string | undefined;
+        readonly cacheControl?: string | undefined;
+        readonly customMetadata?: {
+          readonly [x: string]: string;
+        } | undefined;
+        readonly ref: {
+          readonly storeId: string;
+          readonly key: string;
+          readonly version?: {
+            readonly _tag: "S3Version";
+            readonly id: string;
+          } | {
+            readonly _tag: "GcsGeneration";
+            readonly id: string;
+            readonly metageneration?: string | undefined;
+          } | {
+            readonly _tag: "AzureVersion";
+            readonly id: string;
+          } | {
+            readonly _tag: "AzureSnapshot";
+            readonly id: string;
+          } | {
+            readonly _tag: "OpaqueVersion";
+            readonly provider: string;
+            readonly id: string;
+          } | undefined;
+        };
+        readonly size?: number | undefined;
+        readonly etag?: string | undefined;
+        readonly lastModified?: import("effect/DateTime").Utc | undefined;
+        readonly checksums?: readonly {
+          readonly algorithm: string;
+          readonly encoding: "base64" | "hex";
+          readonly scope: "composite" | "full-object";
+          readonly value: string;
+          readonly partCount?: number | undefined;
+        }[] | undefined;
+        readonly storageClass?: string | undefined;
+      };
+      status?: never;
+    } | {
+      metadata?: never;
+      _tag: "Failed";
+      status: "aborted" | "failed";
+    } | {
+      metadata?: never;
+      _tag: "Pending";
+      status: string;
+    }, StorageError, never>;
+    cancelCopy: (input: {
+      readonly ref: ObjectRef;
+      readonly copyId: string;
+    }) => Effect.Effect<void, StorageError, never>;
+    acquireLease: (input: {
+      readonly ref: ObjectRef;
+      readonly durationSeconds: number;
+      readonly proposedId?: Redacted.Redacted<string>;
+    }) => Effect.Effect<Redacted.Redacted<string>, StorageError, never>;
+    renewLease: (input: {
+      readonly ref: ObjectRef;
+      readonly leaseId: Redacted.Redacted<string>;
+    }) => Effect.Effect<void, StorageError, never>;
+    releaseLease: (input: {
+      readonly ref: ObjectRef;
+      readonly leaseId: Redacted.Redacted<string>;
+    }) => Effect.Effect<void, StorageError, never>;
+    blocks: BlockUploads;
+  }, StorageError, never>;
+  static layer(config: AzureConfig): Layer.Layer<AzureStorage | Storage | TransferDriver, StorageError, never>;
+  static layerClient(client: ContainerClient, config: AzureConfig, policy: {
+    readonly sdkRetries: "disabled";
+  }): Layer.Layer<AzureStorage | Storage | TransferDriver, StorageError, never>;
+  static publicUrls(baseUrl?: string): Layer.Layer<StoragePublicUrls, StorageError, AzureStorage>;
+}
+export type { AzureConfig };
+//# sourceMappingURL=azure.d.ts.map

package/dist/azure.js

@@ -0,0 +1,77 @@
+import { storageError } from "./core/errors.js";
+import { Storage } from "./core/storage.js";
+import { TransferDriver } from "./transfers/dependencies.js";
+import { StoragePublicUrls } from "./core/capabilities.js";
+import { makePublicUrls } from "./internal/public-urls.js";
+import { resolveConfig } from "./providers/azure/config.js";
+import { validateKey } from "./providers/azure/validation.js";
+import { writeMetadata } from "./providers/azure/mapping.js";
+import { blockUploads } from "./providers/azure/blocks.js";
+import { nativeOperations } from "./providers/azure/native.js";
+import { primitives } from "./providers/azure/primitives.js";
+import { Context, Effect, Layer, Redacted } from "effect";
+import { ContainerClient } from "@azure/storage-blob";
+
+// src/providers/azure/index.ts
+function assemble(connection) {
+	return {
+		...primitives(connection),
+		...connection,
+		...nativeOperations(connection),
+		blocks: blockUploads(connection)
+	};
+}
+function services(storage) {
+	const driver = {
+		storage,
+		maximumObjectBytes: 4e3 * 1024 ** 2 * 5e4,
+		maximumSingleUploadBytes: 256 * 1024 ** 2,
+		transportOverheadBytes: 1024 ** 2,
+		blocks: storage.blocks,
+		validateUpload: ({ key, headers }) => validateKey(key, "upload", true).pipe(Effect.andThen(writeMetadata(headers)), Effect.asVoid),
+		reconcile: ({ key, operationId, size }) => storage.head({ key }).pipe(Effect.map((observed) => observed.size === size && observed.customMetadata?.["effect-storage-operation"] === operationId ? observed : void 0), Effect.catchReason("StorageError", "NotFound", () => Effect.succeed(void 0)))
+	};
+	return Context.make(Storage, storage).pipe(Context.add(AzureStorage, storage), Context.add(TransferDriver, driver));
+}
+var AzureStorage = class AzureStorage extends Context.Service()("@effect-kit/storage/azure/AzureStorage") {
+	static make = Effect.fnUntraced(function* (input) {
+		return assemble({
+			config: yield* resolveConfig(input),
+			client: yield* Effect.try({
+				try: () => new ContainerClient(Redacted.isRedacted(input.containerUrl) ? Redacted.value(input.containerUrl) : input.containerUrl, input.credential, {
+					retryOptions: { maxTries: 1 },
+					keepAliveOptions: { enable: true }
+				}),
+				catch: () => storageError("make", "azure", {
+					_tag: "InvalidConfiguration",
+					field: "client"
+				})
+			})
+		});
+	});
+	static makeClient = Effect.fnUntraced(function* (client, input, policy) {
+		const config = yield* resolveConfig(input);
+		const url = new URL(client.url);
+		url.search = "";
+		if (!input.storeId || input.credential || url.href.replace(/\/$/u, "") !== config.containerUrl || policy?.sdkRetries !== "disabled") return yield* storageError("makeClient", "azure", {
+			_tag: "InvalidConfiguration",
+			field: "client.policy"
+		});
+		return assemble({
+			config,
+			client
+		});
+	});
+	static layer(config) {
+		return Layer.effectContext(Effect.map(AzureStorage.make(config), services));
+	}
+	static layerClient(client, config, policy) {
+		return Layer.effectContext(Effect.map(AzureStorage.makeClient(client, config, policy), services));
+	}
+	static publicUrls(baseUrl) {
+		return Layer.effect(StoragePublicUrls, Effect.flatMap(AzureStorage, (storage) => makePublicUrls(storage, baseUrl ?? `${storage.config.containerUrl}/`)));
+	}
+};
+
+export { AzureStorage };
+//# sourceMappingURL=azure.js.map

package/dist/azure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure.js","names":[],"sources":["../src/providers/azure/index.ts"],"sourcesContent":["import { Context, Effect, Layer, Redacted } from \"effect\";\n\nimport { ContainerClient } from \"@azure/storage-blob\";\n\nimport { StoragePublicUrls } from \"../../core/capabilities.js\";\nimport { storageError } from \"../../core/errors.js\";\nimport { Storage } from \"../../core/storage.js\";\nimport { makePublicUrls } from \"../../internal/public-urls.js\";\nimport { TransferDriver } from \"../../transfers/dependencies.js\";\nimport type { TransferEndpoint } from \"../../transfers/models.js\";\nimport { blockUploads } from \"./blocks.js\";\nimport { resolveConfig } from \"./config.js\";\nimport type { AzureConfig, AzureConnection } from \"./config.js\";\nimport { writeMetadata } from \"./mapping.js\";\nimport { nativeOperations } from \"./native.js\";\nimport { primitives } from \"./primitives.js\";\nimport { validateKey } from \"./validation.js\";\n\nexport type { AzureConfig } from \"./config.js\";\nfunction assemble(connection: AzureConnection) {\n  return {\n    ...primitives(connection),\n    ...connection,\n    ...nativeOperations(connection),\n    blocks: blockUploads(connection),\n  };\n}\nexport type AzureStorageService = ReturnType<typeof assemble>;\nfunction services(storage: AzureStorageService) {\n  const driver: TransferEndpoint = {\n    storage,\n    maximumObjectBytes: 4000 * 1024 ** 2 * 50_000,\n    maximumSingleUploadBytes: 256 * 1024 ** 2,\n    transportOverheadBytes: 1024 ** 2,\n    blocks: storage.blocks,\n    validateUpload: ({ key, headers }) =>\n      validateKey(key, \"upload\", true).pipe(Effect.andThen(writeMetadata(headers)), Effect.asVoid),\n    reconcile: ({ key, operationId, size }) =>\n      storage.head({ key }).pipe(\n        Effect.map((observed) =>\n          observed.size === size &&\n          observed.customMetadata?.[\"effect-storage-operation\"] === operationId\n            ? observed\n            : undefined,\n        ),\n        Effect.catchReason(\"StorageError\", \"NotFound\", () => Effect.succeed(undefined)),\n      ),\n  };\n  return Context.make(Storage, storage).pipe(\n    Context.add(AzureStorage, storage),\n    Context.add(TransferDriver, driver),\n  );\n}\nexport class AzureStorage extends Context.Service<AzureStorage, AzureStorageService>()(\n  \"@effect-kit/storage/azure/AzureStorage\",\n) {\n  static readonly make = Effect.fnUntraced(function* (input: AzureConfig) {\n    const config = yield* resolveConfig(input);\n    const client = yield* Effect.try({\n      try: () =>\n        new ContainerClient(\n          Redacted.isRedacted(input.containerUrl)\n            ? Redacted.value(input.containerUrl)\n            : input.containerUrl,\n          input.credential,\n          { retryOptions: { maxTries: 1 }, keepAliveOptions: { enable: true } },\n        ),\n      catch: () => storageError(\"make\", \"azure\", { _tag: \"InvalidConfiguration\", field: \"client\" }),\n    });\n    return assemble({ config, client });\n  });\n  static readonly makeClient = Effect.fnUntraced(function* (\n    client: ContainerClient,\n    input: AzureConfig,\n    policy: { readonly sdkRetries: \"disabled\" },\n  ) {\n    const config = yield* resolveConfig(input);\n    const url = new URL(client.url);\n    url.search = \"\";\n    if (\n      !input.storeId ||\n      input.credential ||\n      url.href.replace(/\\/$/u, \"\") !== config.containerUrl ||\n      policy?.sdkRetries !== \"disabled\"\n    )\n      return yield* storageError(\"makeClient\", \"azure\", {\n        _tag: \"InvalidConfiguration\",\n        field: \"client.policy\",\n      });\n    return assemble({ config, client });\n  });\n  static layer(config: AzureConfig) {\n    return Layer.effectContext(Effect.map(AzureStorage.make(config), services));\n  }\n  static layerClient(\n    client: ContainerClient,\n    config: AzureConfig,\n    policy: { readonly sdkRetries: \"disabled\" },\n  ) {\n    return Layer.effectContext(\n      Effect.map(AzureStorage.makeClient(client, config, policy), services),\n    );\n  }\n  static publicUrls(baseUrl?: string) {\n    return Layer.effect(\n      StoragePublicUrls,\n      Effect.flatMap(AzureStorage, (storage) =>\n        makePublicUrls(storage, baseUrl ?? `${storage.config.containerUrl}/`),\n      ),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,SAAS,SAAS,YAA6B;CAC7C,OAAO;EACL,GAAG,WAAW,UAAU;EACxB,GAAG;EACH,GAAG,iBAAiB,UAAU;EAC9B,QAAQ,aAAa,UAAU;CACjC;AACF;AAEA,SAAS,SAAS,SAA8B;CAC9C,MAAM,SAA2B;EAC/B;EACA,oBAAoB,MAAO,QAAQ,IAAI;EACvC,0BAA0B,MAAM,QAAQ;EACxC,wBAAwB,QAAQ;EAChC,QAAQ,QAAQ;EAChB,iBAAiB,EAAE,KAAK,cACtB,YAAY,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,OAAO,QAAQ,cAAc,OAAO,CAAC,GAAG,OAAO,MAAM;EAC7F,YAAY,EAAE,KAAK,aAAa,WAC9B,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KACpB,OAAO,KAAK,aACV,SAAS,SAAS,QAClB,SAAS,iBAAiB,gCAAgC,cACtD,WACA,MACN,GACA,OAAO,YAAY,gBAAgB,kBAAkB,OAAO,QAAQ,MAAS,CAAC,CAChF;CACJ;CACA,OAAO,QAAQ,KAAK,SAAS,OAAO,CAAC,CAAC,KACpC,QAAQ,IAAI,cAAc,OAAO,GACjC,QAAQ,IAAI,gBAAgB,MAAM,CACpC;AACF;AACA,IAAa,eAAb,MAAa,qBAAqB,QAAQ,QAA2C,CAAC,CACpF,wCACF,CAAC,CAAC;CACA,OAAgB,OAAO,OAAO,WAAW,WAAW,OAAoB;EAatE,OAAO,SAAS;GAAE,eAZI,cAAc,KAAK;GAYf,eAXJ,OAAO,IAAI;IAC/B,WACE,IAAI,gBACF,SAAS,WAAW,MAAM,YAAY,IAClC,SAAS,MAAM,MAAM,YAAY,IACjC,MAAM,cACV,MAAM,YACN;KAAE,cAAc,EAAE,UAAU,EAAE;KAAG,kBAAkB,EAAE,QAAQ,KAAK;IAAE,CACtE;IACF,aAAa,aAAa,QAAQ,SAAS;KAAE,MAAM;KAAwB,OAAO;IAAS,CAAC;GAC9F,CAAC;EACgC,CAAC;CACpC,CAAC;CACD,OAAgB,aAAa,OAAO,WAAW,WAC7C,QACA,OACA,QACA;EACA,MAAM,SAAS,OAAO,cAAc,KAAK;EACzC,MAAM,MAAM,IAAI,IAAI,OAAO,GAAG;EAC9B,IAAI,SAAS;EACb,IACE,CAAC,MAAM,WACP,MAAM,cACN,IAAI,KAAK,QAAQ,QAAQ,EAAE,MAAM,OAAO,gBACxC,QAAQ,eAAe,YAEvB,OAAO,OAAO,aAAa,cAAc,SAAS;GAChD,MAAM;GACN,OAAO;EACT,CAAC;EACH,OAAO,SAAS;GAAE;GAAQ;EAAO,CAAC;CACpC,CAAC;CACD,OAAO,MAAM,QAAqB;EAChC,OAAO,MAAM,cAAc,OAAO,IAAI,aAAa,KAAK,MAAM,GAAG,QAAQ,CAAC;CAC5E;CACA,OAAO,YACL,QACA,QACA,QACA;EACA,OAAO,MAAM,cACX,OAAO,IAAI,aAAa,WAAW,QAAQ,QAAQ,MAAM,GAAG,QAAQ,CACtE;CACF;CACA,OAAO,WAAW,SAAkB;EAClC,OAAO,MAAM,OACX,mBACA,OAAO,QAAQ,eAAe,YAC5B,eAAe,SAAS,WAAW,GAAG,QAAQ,OAAO,aAAa,EAAE,CACtE,CACF;CACF;AACF"}