@effect-kit/storage 0.0.0-stage → 0.1.0

package/dist/uploads/verification.js

@@ -0,0 +1,86 @@
+import { failUpload } from "./schema.js";
+import { digestText, sha256 } from "../runtime/portable-hash.js";
+import { Effect, Stream } from "effect";
+
+// src/uploads/verification.ts
+const operationMetadata = (record) => ({ "effect-storage-upload": record.id });
+const pinned = (object) => {
+	if (!object.ref.version && !object.etag) return Effect.fail(failUpload("Unsupported"));
+	return Effect.succeed({
+		ref: object.ref,
+		...object.ref.version ? {} : { condition: {
+			_tag: "IfMatch",
+			etag: object.etag ?? ""
+		} }
+	});
+};
+const verify = Effect.fnUntraced(function* (storage, object, record) {
+	if (object.size !== record.input.file.size) return yield* failUpload("VerificationFailed");
+	return yield* Effect.scoped(Effect.gen(function* () {
+		const selected = yield* pinned(object);
+		const download = yield* storage.get(selected);
+		if (download._tag !== "Object") return yield* failUpload("VerificationFailed");
+		const hash = sha256.create();
+		let bytes = 0;
+		yield* Stream.runForEach(download.body, (chunk) => Effect.gen(function* () {
+			bytes += chunk.length;
+			if (bytes > record.input.file.size) return yield* failUpload("VerificationFailed");
+			hash.update(chunk);
+		}));
+		if (bytes !== record.input.file.size || hash.finish().value !== record.input.file.sha256) return yield* failUpload("VerificationFailed");
+	}));
+});
+const snapshot = Effect.fnUntraced(function* (storage, record) {
+	if (!storage.capabilities.putConditions.includes("create-only")) return yield* failUpload("Unsupported");
+	const existing = yield* storage.head({ key: record.publishedKey }).pipe(Effect.catchReason("StorageError", "NotFound", () => Effect.succeed(void 0)));
+	if (existing) {
+		yield* verify(storage, existing, record);
+		return existing;
+	}
+	const source = yield* storage.head({ key: record.stagingKey });
+	yield* verify(storage, source, record);
+	const object = yield* Effect.scoped(Effect.gen(function* () {
+		const download = yield* storage.get(yield* pinned(source));
+		if (download._tag !== "Object") return yield* failUpload("VerificationFailed");
+		return yield* storage.put({
+			key: record.publishedKey,
+			body: download.body,
+			contentLength: record.input.file.size,
+			maxBytes: record.input.file.size,
+			contentType: record.input.file.contentType,
+			condition: { _tag: "CreateOnly" }
+		});
+	}));
+	const observed = object.ref.version || object.etag ? object : yield* storage.head({ key: record.publishedKey });
+	yield* verify(storage, observed, record);
+	return observed;
+});
+const removeOwned = Effect.fnUntraced(function* (storage, object) {
+	if (object.ref.version) {
+		yield* storage.delete({ ref: object.ref });
+		return true;
+	}
+	if (object.etag && storage.capabilities.deleteConditions.includes("if-match")) {
+		yield* storage.delete({
+			ref: object.ref,
+			condition: {
+				_tag: "IfMatch",
+				etag: object.etag
+			}
+		});
+		return true;
+	}
+	return false;
+});
+const cleanup = Effect.fnUntraced(function* (storage, record) {
+	const stage = yield* storage.head({ key: record.stagingKey }).pipe(Effect.catchReason("StorageError", "NotFound", () => Effect.succeed(void 0)));
+	const stagingCleaned = stage ? yield* removeOwned(storage, stage) : true;
+	if (!["aborted", "rejected"].includes(record.state)) return stagingCleaned;
+	const final = record.object ?? (yield* storage.head({ key: record.publishedKey }).pipe(Effect.catchReason("StorageError", "NotFound", () => Effect.succeed(void 0))));
+	if (!final) return stagingCleaned;
+	yield* verify(storage, final, record);
+	return (yield* removeOwned(storage, final)) && stagingCleaned;
+});
+
+export { cleanup, digestText, operationMetadata, pinned, snapshot, verify };
+//# sourceMappingURL=verification.js.map

package/dist/uploads/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","names":[],"sources":["../../src/uploads/verification.ts"],"sourcesContent":["import { Effect, Stream } from \"effect\";\n\nimport type { ObjectMetadata } from \"../core/object.js\";\nimport type { StorageService } from \"../core/storage.js\";\nimport { sha256 } from \"../runtime/portable-hash.js\";\nimport { failUpload } from \"./schema.js\";\nimport type { UploadRecord } from \"./schema.js\";\n\nexport const operationMetadata = (record: UploadRecord) => ({ \"effect-storage-upload\": record.id });\nexport { digestText } from \"../runtime/portable-hash.js\";\nexport const pinned = (object: ObjectMetadata) => {\n  if (!object.ref.version && !object.etag) return Effect.fail(failUpload(\"Unsupported\"));\n  return Effect.succeed({\n    ref: object.ref,\n    ...(object.ref.version\n      ? {}\n      : { condition: { _tag: \"IfMatch\" as const, etag: object.etag ?? \"\" } }),\n  });\n};\nexport const verify = Effect.fnUntraced(function* (\n  storage: StorageService,\n  object: ObjectMetadata,\n  record: UploadRecord,\n) {\n  if (object.size !== record.input.file.size) return yield* failUpload(\"VerificationFailed\");\n  return yield* Effect.scoped(\n    Effect.gen(function* () {\n      const selected = yield* pinned(object);\n      const download = yield* storage.get(selected);\n      if (download._tag !== \"Object\") return yield* failUpload(\"VerificationFailed\");\n      const hash = sha256.create();\n      let bytes = 0;\n      yield* Stream.runForEach(download.body, (chunk) =>\n        Effect.gen(function* () {\n          bytes += chunk.length;\n          if (bytes > record.input.file.size) return yield* failUpload(\"VerificationFailed\");\n          hash.update(chunk);\n        }),\n      );\n      if (bytes !== record.input.file.size || hash.finish().value !== record.input.file.sha256)\n        return yield* failUpload(\"VerificationFailed\");\n    }),\n  );\n});\nexport const snapshot = Effect.fnUntraced(function* (\n  storage: StorageService,\n  record: UploadRecord,\n) {\n  if (!storage.capabilities.putConditions.includes(\"create-only\"))\n    return yield* failUpload(\"Unsupported\");\n  const existing = yield* storage\n    .head({ key: record.publishedKey })\n    .pipe(Effect.catchReason(\"StorageError\", \"NotFound\", () => Effect.succeed(undefined)));\n  if (existing) {\n    yield* verify(storage, existing, record);\n    return existing;\n  }\n  const source = yield* storage.head({ key: record.stagingKey });\n  yield* verify(storage, source, record);\n  const object = yield* Effect.scoped(\n    Effect.gen(function* () {\n      const download = yield* storage.get(yield* pinned(source));\n      if (download._tag !== \"Object\") return yield* failUpload(\"VerificationFailed\");\n      return yield* storage.put({\n        key: record.publishedKey,\n        body: download.body,\n        contentLength: record.input.file.size,\n        maxBytes: record.input.file.size,\n        contentType: record.input.file.contentType,\n        condition: { _tag: \"CreateOnly\" },\n      });\n    }),\n  );\n  // Some native upload acknowledgements lack a validator. This key is reserved for this\n  // intent and never granted to the browser; pinned full-hash readback proves its bytes.\n  const observed =\n    object.ref.version || object.etag ? object : yield* storage.head({ key: record.publishedKey });\n  yield* verify(storage, observed, record);\n  return observed;\n});\nconst removeOwned = Effect.fnUntraced(function* (storage: StorageService, object: ObjectMetadata) {\n  if (object.ref.version) {\n    yield* storage.delete({ ref: object.ref });\n    return true;\n  }\n  if (object.etag && storage.capabilities.deleteConditions.includes(\"if-match\")) {\n    yield* storage.delete({ ref: object.ref, condition: { _tag: \"IfMatch\", etag: object.etag } });\n    return true;\n  }\n  return false;\n});\nexport const cleanup = Effect.fnUntraced(function* (storage: StorageService, record: UploadRecord) {\n  const stage = yield* storage\n    .head({ key: record.stagingKey })\n    .pipe(Effect.catchReason(\"StorageError\", \"NotFound\", () => Effect.succeed(undefined)));\n  const stagingCleaned = stage ? yield* removeOwned(storage, stage) : true;\n  if (![\"aborted\", \"rejected\"].includes(record.state)) return stagingCleaned;\n  const final =\n    record.object ??\n    (yield* storage\n      .head({ key: record.publishedKey })\n      .pipe(Effect.catchReason(\"StorageError\", \"NotFound\", () => Effect.succeed(undefined))));\n  if (!final) return stagingCleaned;\n  yield* verify(storage, final, record);\n  return (yield* removeOwned(storage, final)) && stagingCleaned;\n});\n"],"mappings":";;;;;AAQA,MAAa,qBAAqB,YAA0B,EAAE,yBAAyB,OAAO,GAAG;AAEjG,MAAa,UAAU,WAA2B;CAChD,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,MAAM,OAAO,OAAO,KAAK,WAAW,aAAa,CAAC;CACrF,OAAO,OAAO,QAAQ;EACpB,KAAK,OAAO;EACZ,GAAI,OAAO,IAAI,UACX,CAAC,IACD,EAAE,WAAW;GAAE,MAAM;GAAoB,MAAM,OAAO,QAAQ;EAAG,EAAE;CACzE,CAAC;AACH;AACA,MAAa,SAAS,OAAO,WAAW,WACtC,SACA,QACA,QACA;CACA,IAAI,OAAO,SAAS,OAAO,MAAM,KAAK,MAAM,OAAO,OAAO,WAAW,oBAAoB;CACzF,OAAO,OAAO,OAAO,OACnB,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO,OAAO,MAAM;EACrC,MAAM,WAAW,OAAO,QAAQ,IAAI,QAAQ;EAC5C,IAAI,SAAS,SAAS,UAAU,OAAO,OAAO,WAAW,oBAAoB;EAC7E,MAAM,OAAO,OAAO,OAAO;EAC3B,IAAI,QAAQ;EACZ,OAAO,OAAO,WAAW,SAAS,OAAO,UACvC,OAAO,IAAI,aAAa;GACtB,SAAS,MAAM;GACf,IAAI,QAAQ,OAAO,MAAM,KAAK,MAAM,OAAO,OAAO,WAAW,oBAAoB;GACjF,KAAK,OAAO,KAAK;EACnB,CAAC,CACH;EACA,IAAI,UAAU,OAAO,MAAM,KAAK,QAAQ,KAAK,OAAO,CAAC,CAAC,UAAU,OAAO,MAAM,KAAK,QAChF,OAAO,OAAO,WAAW,oBAAoB;CACjD,CAAC,CACH;AACF,CAAC;AACD,MAAa,WAAW,OAAO,WAAW,WACxC,SACA,QACA;CACA,IAAI,CAAC,QAAQ,aAAa,cAAc,SAAS,aAAa,GAC5D,OAAO,OAAO,WAAW,aAAa;CACxC,MAAM,WAAW,OAAO,QACrB,KAAK,EAAE,KAAK,OAAO,aAAa,CAAC,CAAC,CAClC,KAAK,OAAO,YAAY,gBAAgB,kBAAkB,OAAO,QAAQ,MAAS,CAAC,CAAC;CACvF,IAAI,UAAU;EACZ,OAAO,OAAO,SAAS,UAAU,MAAM;EACvC,OAAO;CACT;CACA,MAAM,SAAS,OAAO,QAAQ,KAAK,EAAE,KAAK,OAAO,WAAW,CAAC;CAC7D,OAAO,OAAO,SAAS,QAAQ,MAAM;CACrC,MAAM,SAAS,OAAO,OAAO,OAC3B,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO,QAAQ,IAAI,OAAO,OAAO,MAAM,CAAC;EACzD,IAAI,SAAS,SAAS,UAAU,OAAO,OAAO,WAAW,oBAAoB;EAC7E,OAAO,OAAO,QAAQ,IAAI;GACxB,KAAK,OAAO;GACZ,MAAM,SAAS;GACf,eAAe,OAAO,MAAM,KAAK;GACjC,UAAU,OAAO,MAAM,KAAK;GAC5B,aAAa,OAAO,MAAM,KAAK;GAC/B,WAAW,EAAE,MAAM,aAAa;EAClC,CAAC;CACH,CAAC,CACH;CAGA,MAAM,WACJ,OAAO,IAAI,WAAW,OAAO,OAAO,SAAS,OAAO,QAAQ,KAAK,EAAE,KAAK,OAAO,aAAa,CAAC;CAC/F,OAAO,OAAO,SAAS,UAAU,MAAM;CACvC,OAAO;AACT,CAAC;AACD,MAAM,cAAc,OAAO,WAAW,WAAW,SAAyB,QAAwB;CAChG,IAAI,OAAO,IAAI,SAAS;EACtB,OAAO,QAAQ,OAAO,EAAE,KAAK,OAAO,IAAI,CAAC;EACzC,OAAO;CACT;CACA,IAAI,OAAO,QAAQ,QAAQ,aAAa,iBAAiB,SAAS,UAAU,GAAG;EAC7E,OAAO,QAAQ,OAAO;GAAE,KAAK,OAAO;GAAK,WAAW;IAAE,MAAM;IAAW,MAAM,OAAO;GAAK;EAAE,CAAC;EAC5F,OAAO;CACT;CACA,OAAO;AACT,CAAC;AACD,MAAa,UAAU,OAAO,WAAW,WAAW,SAAyB,QAAsB;CACjG,MAAM,QAAQ,OAAO,QAClB,KAAK,EAAE,KAAK,OAAO,WAAW,CAAC,CAAC,CAChC,KAAK,OAAO,YAAY,gBAAgB,kBAAkB,OAAO,QAAQ,MAAS,CAAC,CAAC;CACvF,MAAM,iBAAiB,QAAQ,OAAO,YAAY,SAAS,KAAK,IAAI;CACpE,IAAI,CAAC,CAAC,WAAW,UAAU,CAAC,CAAC,SAAS,OAAO,KAAK,GAAG,OAAO;CAC5D,MAAM,QACJ,OAAO,WACN,OAAO,QACL,KAAK,EAAE,KAAK,OAAO,aAAa,CAAC,CAAC,CAClC,KAAK,OAAO,YAAY,gBAAgB,kBAAkB,OAAO,QAAQ,MAAS,CAAC,CAAC;CACzF,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO,OAAO,SAAS,OAAO,MAAM;CACpC,QAAQ,OAAO,YAAY,SAAS,KAAK,MAAM;AACjD,CAAC"}

package/dist/uploads.d.ts

@@ -0,0 +1,518 @@
+import { GrantResponse, PartRequest, PartsRequest, PublishedObject, UploadActor, UploadError, UploadErrorCode, UploadFile, UploadGrant, UploadId, UploadInput, UploadRecord, UploadRequest, UploadState, UploadStatus, failUpload } from "./uploads/schema.js";
+import { StorageError } from "./core/errors.js";
+import { UploadBody } from "./core/requests.js";
+import { Storage } from "./core/storage.js";
+import "./index.js";
+import { StorageEvent } from "./events.js";
+import { UploadFailure, UploadGrantDriver, UploadGrantDriverService } from "./uploads/driver.js";
+import { UploadAction, UploadDecision, UploadOptions } from "./uploads/policy.js";
+import { UploadStore, UploadStoreOptions } from "./uploads/store.js";
+import { SignedUploadGrants } from "./uploads/signed-driver.js";
+import { Context, Effect, Layer, Redacted } from "effect";
+declare const Uploads_base: Context.ServiceClass<Uploads, "@effect-kit/storage/Uploads", {
+  create: (raw: {
+    readonly actor: UploadActor;
+    readonly idempotencyKey: string;
+    readonly input: UploadInput;
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, StorageError | UploadError, never>;
+  maximumContentBytes: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+  }) => Effect.Effect<number, StorageError | UploadError, never>;
+  status: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, StorageError | UploadError, never>;
+  grant: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+  }) => Effect.Effect<{
+    version: 1;
+    id: string;
+    grant: Redacted.Redacted<{
+      _tag: "SignedRequest";
+      method: "PUT";
+      url: string;
+      headers: {
+        readonly [x: string]: string;
+      };
+      expiresAt: number;
+      partReceipt?: string | undefined;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "PostForm";
+      url: string;
+      fields: {
+        readonly [x: string]: string;
+      };
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Multipart";
+      partBytes: number;
+      checksum?: "sha256" | undefined;
+      expiresAt: number;
+      completed: readonly {
+        readonly partNumber: number;
+        readonly etag: string;
+      }[];
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Blocks";
+      partBytes: number;
+      completed: readonly number[];
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Resumable";
+      protocol: "gcs" | "tus";
+      url: string;
+      headers: {
+        readonly [x: string]: string;
+      };
+      offset: number;
+      chunkBytes: number;
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Proxy";
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    }>;
+  }, UploadFailure, never>;
+  part: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+    readonly partNumber: number;
+    readonly sha256?: string | undefined;
+  }) => Effect.Effect<{
+    version: 1;
+    id: string;
+    grant: Redacted.Redacted<{
+      _tag: "SignedRequest";
+      method: "PUT";
+      url: string;
+      headers: {
+        readonly [x: string]: string;
+      };
+      expiresAt: number;
+      partReceipt?: string | undefined;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "PostForm";
+      url: string;
+      fields: {
+        readonly [x: string]: string;
+      };
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Multipart";
+      partBytes: number;
+      checksum?: "sha256" | undefined;
+      expiresAt: number;
+      completed: readonly {
+        readonly partNumber: number;
+        readonly etag: string;
+      }[];
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Blocks";
+      partBytes: number;
+      completed: readonly number[];
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Resumable";
+      protocol: "gcs" | "tus";
+      url: string;
+      headers: {
+        readonly [x: string]: string;
+      };
+      offset: number;
+      chunkBytes: number;
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    } | {
+      _tag: "Proxy";
+      expiresAt: number;
+      constraints: {
+        readonly kind: string;
+        readonly enforcement: "advisory" | "backend" | "provider";
+        readonly value: string | number;
+      }[];
+    }>;
+  }, UploadFailure, never>;
+  complete: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+    readonly parts?: (typeof PartsRequest.Type)["parts"];
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, UploadFailure, never>;
+  reconcile: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, UploadFailure, never>;
+  observe: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+    readonly event: StorageEvent;
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, UploadFailure, never>;
+  abort: (input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, UploadFailure, never>;
+  content: <E = never, ER = never>(input: {
+    readonly actor: UploadActor;
+    readonly uploadId: string;
+    readonly body: UploadBody<E, ER>;
+  }) => Effect.Effect<{
+    readonly version: 1;
+    readonly id: string;
+    readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+    readonly expiresAt: number;
+    readonly cleanupPending: boolean;
+    readonly result?: unknown;
+  }, E | StorageError | UploadError, ER>;
+}>;
+export declare class Uploads extends Uploads_base {
+  static readonly make: <R>(options: UploadOptions<R>) => Effect.Effect<{
+    create: (raw: {
+      readonly actor: UploadActor;
+      readonly idempotencyKey: string;
+      readonly input: UploadInput;
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, StorageError | UploadError, never>;
+    maximumContentBytes: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+    }) => Effect.Effect<number, StorageError | UploadError, Exclude<R, R>>;
+    status: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, StorageError | UploadError, Exclude<R, R>>;
+    grant: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+    }) => Effect.Effect<{
+      version: 1;
+      id: string;
+      grant: Redacted.Redacted<{
+        _tag: "SignedRequest";
+        method: "PUT";
+        url: string;
+        headers: {
+          readonly [x: string]: string;
+        };
+        expiresAt: number;
+        partReceipt?: string | undefined;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "PostForm";
+        url: string;
+        fields: {
+          readonly [x: string]: string;
+        };
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Multipart";
+        partBytes: number;
+        checksum?: "sha256" | undefined;
+        expiresAt: number;
+        completed: readonly {
+          readonly partNumber: number;
+          readonly etag: string;
+        }[];
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Blocks";
+        partBytes: number;
+        completed: readonly number[];
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Resumable";
+        protocol: "gcs" | "tus";
+        url: string;
+        headers: {
+          readonly [x: string]: string;
+        };
+        offset: number;
+        chunkBytes: number;
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Proxy";
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      }>;
+    }, UploadFailure, never>;
+    part: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+      readonly partNumber: number;
+      readonly sha256?: string | undefined;
+    }) => Effect.Effect<{
+      version: 1;
+      id: string;
+      grant: Redacted.Redacted<{
+        _tag: "SignedRequest";
+        method: "PUT";
+        url: string;
+        headers: {
+          readonly [x: string]: string;
+        };
+        expiresAt: number;
+        partReceipt?: string | undefined;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "PostForm";
+        url: string;
+        fields: {
+          readonly [x: string]: string;
+        };
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Multipart";
+        partBytes: number;
+        checksum?: "sha256" | undefined;
+        expiresAt: number;
+        completed: readonly {
+          readonly partNumber: number;
+          readonly etag: string;
+        }[];
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Blocks";
+        partBytes: number;
+        completed: readonly number[];
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Resumable";
+        protocol: "gcs" | "tus";
+        url: string;
+        headers: {
+          readonly [x: string]: string;
+        };
+        offset: number;
+        chunkBytes: number;
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      } | {
+        _tag: "Proxy";
+        expiresAt: number;
+        constraints: {
+          readonly kind: string;
+          readonly enforcement: "advisory" | "backend" | "provider";
+          readonly value: string | number;
+        }[];
+      }>;
+    }, UploadFailure, never>;
+    complete: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+      readonly parts?: (typeof PartsRequest.Type)["parts"];
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, UploadFailure, never>;
+    reconcile: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, UploadFailure, never>;
+    observe: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+      readonly event: StorageEvent;
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, UploadFailure, never>;
+    abort: (input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, UploadFailure, never>;
+    content: <E = never, ER = never>(input: {
+      readonly actor: UploadActor;
+      readonly uploadId: string;
+      readonly body: UploadBody<E, ER>;
+    }) => Effect.Effect<{
+      readonly version: 1;
+      readonly id: string;
+      readonly state: "aborted" | "initiating" | "published" | "publishing" | "ready" | "rejected" | "reserving" | "uploading" | "verifying";
+      readonly expiresAt: number;
+      readonly cleanupPending: boolean;
+      readonly result?: unknown;
+    }, E | StorageError | UploadError, ER>;
+  }, UploadError, R | Storage | UploadGrantDriver | UploadStore>;
+  static layer<R>(options: UploadOptions<R>): Layer.Layer<Uploads, UploadError, Storage | UploadGrantDriver | UploadStore | Exclude<R, import("effect/Scope").Scope>>;
+}
+export { GrantResponse, PartRequest, PartsRequest, PublishedObject, SignedUploadGrants, type UploadAction, UploadActor, type UploadDecision, UploadError, UploadErrorCode, UploadFile, UploadGrant, UploadGrantDriver, type UploadGrantDriverService, UploadId, UploadInput, type UploadOptions, UploadRecord, UploadRequest, UploadState, UploadStatus, UploadStore, type UploadStoreOptions, failUpload };
+//# sourceMappingURL=uploads.d.ts.map