@fileway/supabase 0.0.0-stage → 0.5.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Azubuike Golden
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,79 @@
-# Temporary Holding Version
+# @fileway/supabase
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm version](https://img.shields.io/npm/v/@fileway/supabase?style=flat-square)](https://www.npmjs.com/package/@fileway/supabase)
+[![bundle size](https://img.shields.io/bundlephobia/minzip/@fileway/supabase?style=flat-square)](https://bundlephobia.com/package/@fileway/supabase)
+
+**Supabase Storage driver for [Fileway](https://github.com/Goldenhub/fileway).**
+
+Implemented with `fetch` against the Storage REST and TUS APIs: no `supabase-js` required, so it runs on Node.js, Bun, Deno, and edge runtimes.
+
+```bash
+npm install @fileway/supabase
+```
+
+## Usage
+
+```ts
+import { FilewayClient } from "@fileway/core";
+import { SupabaseDriver } from "@fileway/supabase";
+
+// Server side, with a secret (service role) key: full access, bypasses RLS.
+const driver = new SupabaseDriver({
+  url: "https://<project-ref>.supabase.co",
+  key: process.env.SUPABASE_SECRET_KEY,
+  bucket: "avatars",
+});
+
+const client = new FilewayClient({ driver });
+
+const result = await client.upload(stream, {
+  filename: "photo.jpg",
+  metadata: { userId: "42" }, // stored as the object's user metadata
+});
+```
+
+To act as a signed-in user so the bucket's RLS policies apply, pass the anon or publishable key plus the user's access token:
+
+```ts
+new SupabaseDriver({
+  url: "https://<project-ref>.supabase.co",
+  key: process.env.SUPABASE_PUBLISHABLE_KEY,
+  accessToken: session.access_token,
+  bucket: "avatars",
+});
+```
+
+## Config
+
+| Option         | Type     | Description |
+| -------------- | -------- | ----------- |
+| `url`          | `string` | Project URL (required). `https://<ref>.storage.supabase.co` is faster for large uploads |
+| `key`          | `string` | API key (required): secret / service role, or anon / publishable with `accessToken` |
+| `accessToken`  | `string` | A user's JWT, so RLS policies apply |
+| `bucket`       | `string` | Bucket name (required) |
+| `baseUrl`      | `string` | Public base URL for `getUrl` (default: the bucket's public object URL) |
+| `cacheControl` | `number` | `Cache-Control` max-age in seconds (default `3600`) |
+| `maxSizeBytes` | `number` | Reject larger uploads with a `size-exceeded` error |
+
+## Upload strategy
+
+Uploads always overwrite (`x-upsert`) and memory stays bounded whatever the file size:
+
+- **Up to 6 MiB**: one standard upload request.
+- **Known size above 6 MiB**: a resumable TUS upload in 6 MiB chunks (the size Supabase requires). A failed or cancelled upload is terminated.
+- **Unknown size above 6 MiB**: the stream is sent as the body of one standard upload, without buffering it. Supabase limits standard uploads to 5 GB, so pass `size` for larger files.
+
+If the stream ends before or after a declared `size`, the upload throws a validation error and nothing is stored.
+
+## URLs
+
+`getUrl()` returns the public object URL, which only works for public buckets. For private buckets use `getPresignedUrl()` (a Supabase signed URL) or `get()`.
+
+## Upload status
+
+`pathFor` and `head` are implemented, so `client.getUploadStatus()` reports `complete` or `missing`, and lost upload responses are recovered without uploading twice.
+
+## Resources
+
+- [Documentation](https://www.usefileway.dev/docs/drivers/supabase)
+- [License: MIT](https://github.com/Goldenhub/fileway/blob/main/LICENSE)

package/dist/index.cjs

@@ -0,0 +1,394 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  SupabaseDriver: () => SupabaseDriver
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/errors.ts
+function classifySupabaseError(status, body) {
+  let parsed = {};
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+  }
+  const text = `${parsed.error ?? ""} ${parsed.message ?? ""} ${parsed.error === void 0 ? body : ""}`.toLowerCase();
+  const code = Number(parsed.statusCode ?? status);
+  if (text.includes("bucket not found")) return "bucket-not-found";
+  if (text.includes("not found") || text.includes("not_found") || text.includes("no such")) return "not-found";
+  if (text.includes("exceeded the maximum allowed size") || text.includes("payload too large") || code === 413) {
+    return "size-exceeded";
+  }
+  if (code === 401 || code === 403 || text.includes("jwt") || text.includes("unauthorized") || text.includes("row-level security")) {
+    return "auth-failed";
+  }
+  if (code === 429 || text.includes("too many requests")) return "rate-limited";
+  if (code === 404) return "not-found";
+  return "provider-error";
+}
+
+// src/index.ts
+var import_core = require("@fileway/core");
+var randomUUID = () => globalThis.crypto.randomUUID();
+var PROVIDER = "supabase";
+var TUS_CHUNK_SIZE = 6 * 1024 * 1024;
+var TUS_VERSION = "1.0.0";
+var PRESIGN_DEFAULT_EXPIRY = 3600;
+var TOKEN_KEY = "fileway-upload-token";
+var MAX_CHUNK_RESENDS = 3;
+var SupabaseDriver = class {
+  name = "supabase";
+  api;
+  bucket;
+  baseUrl;
+  headers;
+  maxSizeBytes;
+  cacheControl;
+  constructor(config) {
+    if (!config.url || !config.key || !config.bucket) {
+      throw new import_core.StorageError("config", "SupabaseDriver requires url, key and bucket", { provider: PROVIDER });
+    }
+    this.api = `${config.url.replace(/\/+$/, "")}/storage/v1`;
+    this.bucket = config.bucket;
+    this.baseUrl = (config.baseUrl ?? `${this.api}/object/public/${config.bucket}`).replace(/\/+$/, "");
+    const bearer = config.accessToken ?? (config.key.startsWith("eyJ") ? config.key : void 0);
+    this.headers = { apikey: config.key, ...bearer ? { authorization: `Bearer ${bearer}` } : {} };
+    this.maxSizeBytes = config.maxSizeBytes;
+    this.cacheControl = `max-age=${config.cacheControl ?? 3600}`;
+  }
+  async upload(stream, options, context) {
+    (0, import_core.validateUploadOptions)(options);
+    if (this.maxSizeBytes !== void 0 && options.size !== void 0 && options.size > this.maxSizeBytes) {
+      throw new import_core.StorageError("size-exceeded", `file size ${options.size} exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });
+    }
+    const id = options.id ?? randomUUID();
+    const path = this.pathFor({ ...options, id });
+    const contentType = options.mimeType ?? "application/octet-stream";
+    const metadata = { ...options.metadata, ...context?.uploadToken ? { [TOKEN_KEY]: context.uploadToken } : {} };
+    const signal = options.signal;
+    const reader = stream.getReader();
+    let aborted = signal?.aborted ?? false;
+    const onAbort = () => {
+      aborted = true;
+      reader.cancel().catch(() => {
+      });
+    };
+    if (signal && !aborted) signal.addEventListener("abort", onAbort, { once: true });
+    let totalBytes = 0;
+    const read = async () => {
+      const { done, value } = await reader.read();
+      if (aborted) throw (0, import_core.abortError)("upload aborted");
+      if (done) return void 0;
+      totalBytes += value.byteLength;
+      if (this.maxSizeBytes !== void 0 && totalBytes > this.maxSizeBytes) {
+        throw new import_core.StorageError("size-exceeded", `upload exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });
+      }
+      return value;
+    };
+    const checkSize = () => {
+      if (options.size !== void 0 && totalBytes !== options.size) {
+        throw new import_core.ValidationError(`stream delivered ${totalBytes} bytes, expected ${options.size}`);
+      }
+    };
+    let tusUrl;
+    try {
+      let etag;
+      if (options.size !== void 0 && options.size > TUS_CHUNK_SIZE) {
+        tusUrl = await this.createTusUpload(path, options.size, contentType, metadata, signal);
+        let buffer = [];
+        let bufferedLen = 0;
+        let offset = 0;
+        while (true) {
+          const value = await read();
+          if (totalBytes > options.size) checkSize();
+          if (value) {
+            buffer.push(value);
+            bufferedLen += value.byteLength;
+          }
+          while (bufferedLen >= TUS_CHUNK_SIZE || !value && bufferedLen > 0) {
+            if (!value) checkSize();
+            const merged = concatBytes(buffer, bufferedLen);
+            const take = Math.min(TUS_CHUNK_SIZE, bufferedLen);
+            offset = await this.patchTus(tusUrl, merged.subarray(0, take), offset, signal);
+            const rest = merged.subarray(take);
+            buffer = [rest];
+            bufferedLen = rest.byteLength;
+          }
+          if (!value) break;
+        }
+        checkSize();
+      } else {
+        const first = [];
+        let firstLen = 0;
+        let ended = false;
+        while (firstLen <= TUS_CHUNK_SIZE) {
+          const value = await read();
+          if (!value) {
+            ended = true;
+            break;
+          }
+          first.push(value);
+          firstLen += value.byteLength;
+        }
+        const head = concatBytes(first, firstLen);
+        if (ended) {
+          checkSize();
+          etag = await this.standardUpload(path, head, contentType, metadata, signal);
+        } else {
+          checkSize();
+          const bodyError = {};
+          const body = new ReadableStream({
+            start(controller) {
+              controller.enqueue(head);
+            },
+            async pull(controller) {
+              try {
+                const value = await read();
+                if (value) controller.enqueue(value);
+                else controller.close();
+              } catch (err) {
+                bodyError.current = err;
+                controller.error(err);
+              }
+            },
+            cancel(reason) {
+              return reader.cancel(reason);
+            }
+          });
+          try {
+            etag = await this.standardUpload(path, body, contentType, metadata, signal);
+          } catch (err) {
+            if (bodyError.current) throw bodyError.current;
+            throw err;
+          }
+          checkSize();
+        }
+      }
+      return {
+        id,
+        url: `${this.baseUrl}/${(0, import_core.urlEncodePath)(path)}`,
+        path,
+        size: totalBytes,
+        meta: { bucket: this.bucket, ...etag ? { etag } : {} }
+      };
+    } catch (err) {
+      reader.cancel().catch(() => {
+      });
+      if (tusUrl) {
+        await fetch(tusUrl, { method: "DELETE", headers: { ...this.headers, "tus-resumable": TUS_VERSION } }).catch(() => {
+        });
+      }
+      throw err;
+    } finally {
+      signal?.removeEventListener("abort", onAbort);
+    }
+  }
+  /** `POST /object/{bucket}/{path}`, overwriting any existing object. */
+  async standardUpload(path, body, contentType, metadata, signal) {
+    const res = await fetchWithAbort(this.objectUrl("object", path), {
+      method: "POST",
+      headers: {
+        ...this.headers,
+        "content-type": contentType,
+        "cache-control": this.cacheControl,
+        "x-upsert": "true",
+        "x-metadata": base64(JSON.stringify(metadata))
+      },
+      body,
+      // Node's fetch (undici) requires `duplex: "half"` for stream bodies;
+      // other runtimes ignore it.
+      duplex: "half",
+      signal: signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase upload failed", res);
+    return res.headers.get("etag") ?? void 0;
+  }
+  /** Creates a TUS upload and returns its URL. */
+  async createTusUpload(path, size, contentType, metadata, signal) {
+    const endpoint = `${this.api}/upload/resumable`;
+    const uploadMetadata = {
+      bucketName: this.bucket,
+      objectName: path,
+      contentType,
+      cacheControl: this.cacheControl.replace("max-age=", ""),
+      metadata: JSON.stringify(metadata)
+    };
+    const res = await fetchWithAbort(endpoint, {
+      method: "POST",
+      headers: {
+        ...this.headers,
+        "tus-resumable": TUS_VERSION,
+        "upload-length": String(size),
+        "upload-metadata": Object.entries(uploadMetadata).map(([k, v]) => `${k} ${base64(v)}`).join(","),
+        "x-upsert": "true"
+      },
+      signal: signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase resumable upload create failed", res);
+    const location = res.headers.get("location");
+    if (!location) {
+      throw new import_core.StorageError("provider-error", "Supabase resumable upload returned no Location header", { provider: PROVIDER });
+    }
+    return new URL(location, endpoint).href;
+  }
+  /** PATCHes `bytes` at `offset`, resending whatever the server did not store.
+   * Returns the new offset. */
+  async patchTus(url, bytes, offset, signal) {
+    const end = offset + bytes.byteLength;
+    let current = offset;
+    for (let attempt = 0; attempt <= MAX_CHUNK_RESENDS && current < end; attempt++) {
+      const res = await fetchWithAbort(url, {
+        method: "PATCH",
+        headers: {
+          ...this.headers,
+          "tus-resumable": TUS_VERSION,
+          "upload-offset": String(current),
+          "content-type": "application/offset+octet-stream"
+        },
+        body: bytes.subarray(current - offset),
+        signal: signal ?? null
+      });
+      if (!res.ok) throw await supabaseError("Supabase resumable upload chunk failed", res);
+      const next = Number(res.headers.get("upload-offset") ?? end);
+      if (next < current) break;
+      current = next;
+    }
+    if (current < end) {
+      throw new import_core.StorageError("provider-error", "Supabase did not store the uploaded chunk", { provider: PROVIDER });
+    }
+    return current;
+  }
+  /** Deletes the object; a missing object is not an error. */
+  async delete(path, options) {
+    const res = await fetchWithAbort(`${this.api}/object/${encodeURIComponent(this.bucket)}`, {
+      method: "DELETE",
+      headers: { ...this.headers, "content-type": "application/json" },
+      body: JSON.stringify({ prefixes: [path] }),
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase delete failed", res);
+  }
+  async getUrl(path, _options) {
+    return `${this.baseUrl}/${(0, import_core.urlEncodePath)(path)}`;
+  }
+  /** Streams the object. `options.signal` also cancels reading the body. */
+  async get(path, options) {
+    const res = await fetchWithAbort(this.objectUrl("object/authenticated", path), {
+      headers: this.headers,
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase get failed", res);
+    if (!res.body) {
+      throw new import_core.StorageError("provider-error", "Supabase get returned no response body", { provider: PROVIDER });
+    }
+    return res.body;
+  }
+  /** A signed download URL for `path`, valid for `expiresIn` seconds (positive integer, default 3600). */
+  async getPresignedUrl(path, options) {
+    const expiresIn = options?.expiresIn ?? PRESIGN_DEFAULT_EXPIRY;
+    if (!Number.isInteger(expiresIn) || expiresIn < 1) {
+      throw new import_core.ValidationError("expiresIn must be a positive integer number of seconds");
+    }
+    const res = await fetchWithAbort(this.objectUrl("object/sign", path), {
+      method: "POST",
+      headers: { ...this.headers, "content-type": "application/json" },
+      body: JSON.stringify({ expiresIn }),
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase sign failed", res);
+    const { signedURL } = await res.json();
+    if (!signedURL) {
+      throw new import_core.StorageError("provider-error", "Supabase sign returned no signedURL", { provider: PROVIDER });
+    }
+    return `${this.api}${signedURL.startsWith("/") ? "" : "/"}${signedURL}`;
+  }
+  /** The object name an upload with `options.id` is stored under: `<path>/<id>.<ext>`. */
+  pathFor(options) {
+    const ext = options.filename.includes(".") ? options.filename.split(".").pop() : "";
+    const filename = ext ? `${options.id}.${ext}` : options.id;
+    return options.path ? `${options.path}/${filename}` : filename;
+  }
+  /** The object at `path` (`GET /object/info`), or `null` if it does not exist. */
+  async head(path, options) {
+    const res = await fetchWithAbort(this.objectUrl("object/info", path), {
+      headers: this.headers,
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) {
+      const error = await supabaseError("Supabase info failed", res);
+      if (error.code === "not-found") return null;
+      throw error;
+    }
+    const info = await res.json();
+    const name = path.split("/").pop() ?? path;
+    const token = info.metadata?.[TOKEN_KEY];
+    return {
+      id: name.includes(".") ? name.slice(0, name.lastIndexOf(".")) : name,
+      url: `${this.baseUrl}/${(0, import_core.urlEncodePath)(path)}`,
+      path,
+      size: Number(info.size ?? 0),
+      meta: { bucket: this.bucket, ...info.etag ? { etag: info.etag } : {} },
+      ...token ? { uploadToken: token } : {},
+      ...info.last_modified ? { lastModified: new Date(info.last_modified) } : {},
+      ...info.content_type ? { contentType: info.content_type } : {}
+    };
+  }
+  objectUrl(route, path) {
+    return `${this.api}/${route}/${encodeURIComponent(this.bucket)}/${(0, import_core.urlEncodePath)(path)}`;
+  }
+};
+async function fetchWithAbort(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch (err) {
+    if ((0, import_core.isAbortError)(err)) throw err;
+    const cause = err instanceof Error ? err : new Error(String(err));
+    throw new import_core.StorageError("network", `${PROVIDER} network error: ${cause.message}`, { provider: PROVIDER, cause });
+  }
+}
+async function supabaseError(prefix, res) {
+  const body = await res.text().catch(() => "");
+  return new import_core.StorageError(
+    classifySupabaseError(res.status, body),
+    `${prefix}: ${res.status} ${res.statusText}${body ? `: ${body}` : ""}`,
+    { statusCode: res.status, provider: PROVIDER }
+  );
+}
+function base64(value) {
+  let binary = "";
+  for (const byte of new TextEncoder().encode(value)) binary += String.fromCharCode(byte);
+  return btoa(binary);
+}
+function concatBytes(chunks, total) {
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    out.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return out;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SupabaseDriver
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts"],"sourcesContent":["import type { BaseDriver, OperationOptions, PresignedUrlOptions, StoredObject, UploadContext, UploadOptions, UploadResult } from \"@fileway/core\";\nimport { classifySupabaseError } from \"./errors.js\";\nimport { validateUploadOptions, ValidationError, urlEncodePath, abortError, isAbortError, StorageError } from \"@fileway/core\";\n\nconst randomUUID = () => globalThis.crypto.randomUUID();\nconst PROVIDER = \"supabase\";\n\n// Supabase's resumable (TUS) endpoint requires 6 MiB chunks.\nconst TUS_CHUNK_SIZE = 6 * 1024 * 1024;\nconst TUS_VERSION = \"1.0.0\";\nconst PRESIGN_DEFAULT_EXPIRY = 3600;\n// User metadata key carrying FilewayClient's per-upload token.\nconst TOKEN_KEY = \"fileway-upload-token\";\n// How many times a TUS chunk is resent when the server stored only part of it.\nconst MAX_CHUNK_RESENDS = 3;\n\nexport interface SupabaseDriverConfig {\n  /** Project URL, e.g. `https://<ref>.supabase.co` (or the direct storage host\n   * `https://<ref>.storage.supabase.co`, recommended for large uploads). */\n  url: string;\n  /** API key: a secret / service role key on the server, or the anon or\n   * publishable key together with `accessToken`. */\n  key: string;\n  /** A signed-in user's JWT, so the bucket's RLS policies apply. */\n  accessToken?: string;\n  bucket: string;\n  /** Public base URL for `getUrl`. Defaults to the bucket's public object URL. */\n  baseUrl?: string;\n  /** Reject uploads larger than this many bytes with a `size-exceeded` error. */\n  maxSizeBytes?: number;\n  /** `Cache-Control` max-age in seconds for uploaded objects. Default 3600. */\n  cacheControl?: number;\n}\n\nexport type SupabaseMeta = {\n  bucket: string;\n  etag?: string;\n};\n\n/** The `GET /object/info` response (fields this driver reads). */\ninterface ObjectInfo {\n  name?: string;\n  size?: number | null;\n  content_type?: string | null;\n  etag?: string | null;\n  last_modified?: string | null;\n  metadata?: Record<string, string> | null;\n}\n\nexport class SupabaseDriver implements BaseDriver<SupabaseMeta> {\n  readonly name = \"supabase\";\n  private api: string;\n  private bucket: string;\n  private baseUrl: string;\n  private headers: Record<string, string>;\n  private maxSizeBytes: number | undefined;\n  private cacheControl: string;\n\n  constructor(config: SupabaseDriverConfig) {\n    if (!config.url || !config.key || !config.bucket) {\n      throw new StorageError(\"config\", \"SupabaseDriver requires url, key and bucket\", { provider: PROVIDER });\n    }\n    this.api = `${config.url.replace(/\\/+$/, \"\")}/storage/v1`;\n    this.bucket = config.bucket;\n    this.baseUrl = (config.baseUrl ?? `${this.api}/object/public/${config.bucket}`).replace(/\\/+$/, \"\");\n    // New-style keys (sb_secret_..., sb_publishable_...) are not JWTs and go\n    // only in `apikey`; legacy JWT keys and user tokens also go in Authorization.\n    const bearer = config.accessToken ?? (config.key.startsWith(\"eyJ\") ? config.key : undefined);\n    this.headers = { apikey: config.key, ...(bearer ? { authorization: `Bearer ${bearer}` } : {}) };\n    this.maxSizeBytes = config.maxSizeBytes;\n    this.cacheControl = `max-age=${config.cacheControl ?? 3600}`;\n  }\n\n  async upload(\n    stream: ReadableStream<Uint8Array>,\n    options: UploadOptions,\n    context?: UploadContext,\n  ): Promise<UploadResult<SupabaseMeta>> {\n    validateUploadOptions(options);\n    if (this.maxSizeBytes !== undefined && options.size !== undefined && options.size > this.maxSizeBytes) {\n      throw new StorageError(\"size-exceeded\", `file size ${options.size} exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });\n    }\n\n    const id = options.id ?? randomUUID();\n    const path = this.pathFor({ ...options, id });\n    const contentType = options.mimeType ?? \"application/octet-stream\";\n    const metadata = { ...options.metadata, ...(context?.uploadToken ? { [TOKEN_KEY]: context.uploadToken } : {}) };\n    const signal = options.signal;\n\n    const reader = stream.getReader();\n    let aborted = signal?.aborted ?? false;\n    const onAbort = () => {\n      aborted = true;\n      // Cancelling the reader wakes any pending `read()` with `done: true`.\n      reader.cancel().catch(() => {});\n    };\n    if (signal && !aborted) signal.addEventListener(\"abort\", onAbort, { once: true });\n\n    let totalBytes = 0;\n    const read = async (): Promise<Uint8Array | undefined> => {\n      const { done, value } = await reader.read();\n      if (aborted) throw abortError(\"upload aborted\");\n      if (done) return undefined;\n      totalBytes += value.byteLength;\n      if (this.maxSizeBytes !== undefined && totalBytes > this.maxSizeBytes) {\n        throw new StorageError(\"size-exceeded\", `upload exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });\n      }\n      return value;\n    };\n    const checkSize = () => {\n      if (options.size !== undefined && totalBytes !== options.size) {\n        throw new ValidationError(`stream delivered ${totalBytes} bytes, expected ${options.size}`);\n      }\n    };\n\n    let tusUrl: string | undefined;\n    try {\n      let etag: string | undefined;\n\n      if (options.size !== undefined && options.size > TUS_CHUNK_SIZE) {\n        // Known large size: resumable TUS upload, one 6 MiB chunk in memory at a time.\n        tusUrl = await this.createTusUpload(path, options.size, contentType, metadata, signal);\n        let buffer: Uint8Array[] = [];\n        let bufferedLen = 0;\n        let offset = 0;\n        while (true) {\n          const value = await read();\n          if (totalBytes > options.size) checkSize();\n          if (value) {\n            buffer.push(value);\n            bufferedLen += value.byteLength;\n          }\n          while (bufferedLen >= TUS_CHUNK_SIZE || (!value && bufferedLen > 0)) {\n            if (!value) checkSize();\n            const merged = concatBytes(buffer, bufferedLen);\n            const take = Math.min(TUS_CHUNK_SIZE, bufferedLen);\n            offset = await this.patchTus(tusUrl, merged.subarray(0, take), offset, signal);\n            const rest = merged.subarray(take);\n            buffer = [rest];\n            bufferedLen = rest.byteLength;\n          }\n          if (!value) break;\n        }\n        checkSize();\n      } else {\n        // Read the first chunk; if the stream ends inside it, send one buffered request.\n        const first: Uint8Array[] = [];\n        let firstLen = 0;\n        let ended = false;\n        while (firstLen <= TUS_CHUNK_SIZE) {\n          const value = await read();\n          if (!value) {\n            ended = true;\n            break;\n          }\n          first.push(value);\n          firstLen += value.byteLength;\n        }\n        const head = concatBytes(first, firstLen);\n\n        if (ended) {\n          checkSize();\n          etag = await this.standardUpload(path, head, contentType, metadata, signal);\n        } else {\n          // A declared size this small cannot be followed by more data.\n          checkSize();\n          // Unknown size beyond one chunk: stream the rest in a single request,\n          // so memory stays bounded without knowing the total in advance.\n          const bodyError: { current?: unknown } = {};\n          const body = new ReadableStream<Uint8Array>({\n            start(controller) {\n              controller.enqueue(head);\n            },\n            async pull(controller) {\n              try {\n                const value = await read();\n                if (value) controller.enqueue(value);\n                else controller.close();\n              } catch (err) {\n                bodyError.current = err;\n                controller.error(err);\n              }\n            },\n            cancel(reason) {\n              return reader.cancel(reason);\n            },\n          });\n          try {\n            etag = await this.standardUpload(path, body, contentType, metadata, signal);\n          } catch (err) {\n            // A body error (abort, size limit) surfaces as a generic fetch failure.\n            if (bodyError.current) throw bodyError.current;\n            throw err;\n          }\n          checkSize();\n        }\n      }\n\n      return {\n        id,\n        url: `${this.baseUrl}/${urlEncodePath(path)}`,\n        path,\n        size: totalBytes,\n        meta: { bucket: this.bucket, ...(etag ? { etag } : {}) },\n      };\n    } catch (err) {\n      reader.cancel().catch(() => {});\n      if (tusUrl) {\n        // Best-effort: terminate the unfinished TUS upload.\n        await fetch(tusUrl, { method: \"DELETE\", headers: { ...this.headers, \"tus-resumable\": TUS_VERSION } }).catch(() => {});\n      }\n      throw err;\n    } finally {\n      signal?.removeEventListener(\"abort\", onAbort);\n    }\n  }\n\n  /** `POST /object/{bucket}/{path}`, overwriting any existing object. */\n  private async standardUpload(\n    path: string,\n    body: Uint8Array | ReadableStream<Uint8Array>,\n    contentType: string,\n    metadata: Record<string, string>,\n    signal: AbortSignal | undefined,\n  ): Promise<string | undefined> {\n    const res = await fetchWithAbort(this.objectUrl(\"object\", path), {\n      method: \"POST\",\n      headers: {\n        ...this.headers,\n        \"content-type\": contentType,\n        \"cache-control\": this.cacheControl,\n        \"x-upsert\": \"true\",\n        \"x-metadata\": base64(JSON.stringify(metadata)),\n      },\n      body: body as BodyInit,\n      // Node's fetch (undici) requires `duplex: \"half\"` for stream bodies;\n      // other runtimes ignore it.\n      duplex: \"half\",\n      signal: signal ?? null,\n    } as RequestInit);\n    if (!res.ok) throw await supabaseError(\"Supabase upload failed\", res);\n    return res.headers.get(\"etag\") ?? undefined;\n  }\n\n  /** Creates a TUS upload and returns its URL. */\n  private async createTusUpload(\n    path: string,\n    size: number,\n    contentType: string,\n    metadata: Record<string, string>,\n    signal: AbortSignal | undefined,\n  ): Promise<string> {\n    const endpoint = `${this.api}/upload/resumable`;\n    const uploadMetadata = {\n      bucketName: this.bucket,\n      objectName: path,\n      contentType,\n      cacheControl: this.cacheControl.replace(\"max-age=\", \"\"),\n      metadata: JSON.stringify(metadata),\n    };\n    const res = await fetchWithAbort(endpoint, {\n      method: \"POST\",\n      headers: {\n        ...this.headers,\n        \"tus-resumable\": TUS_VERSION,\n        \"upload-length\": String(size),\n        \"upload-metadata\": Object.entries(uploadMetadata)\n          .map(([k, v]) => `${k} ${base64(v)}`)\n          .join(\",\"),\n        \"x-upsert\": \"true\",\n      },\n      signal: signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase resumable upload create failed\", res);\n    const location = res.headers.get(\"location\");\n    if (!location) {\n      throw new StorageError(\"provider-error\", \"Supabase resumable upload returned no Location header\", { provider: PROVIDER });\n    }\n    return new URL(location, endpoint).href;\n  }\n\n  /** PATCHes `bytes` at `offset`, resending whatever the server did not store.\n   * Returns the new offset. */\n  private async patchTus(url: string, bytes: Uint8Array, offset: number, signal: AbortSignal | undefined): Promise<number> {\n    const end = offset + bytes.byteLength;\n    let current = offset;\n    for (let attempt = 0; attempt <= MAX_CHUNK_RESENDS && current < end; attempt++) {\n      const res = await fetchWithAbort(url, {\n        method: \"PATCH\",\n        headers: {\n          ...this.headers,\n          \"tus-resumable\": TUS_VERSION,\n          \"upload-offset\": String(current),\n          \"content-type\": \"application/offset+octet-stream\",\n        },\n        body: bytes.subarray(current - offset) as BodyInit,\n        signal: signal ?? null,\n      });\n      if (!res.ok) throw await supabaseError(\"Supabase resumable upload chunk failed\", res);\n      const next = Number(res.headers.get(\"upload-offset\") ?? end);\n      if (next < current) break;\n      current = next;\n    }\n    if (current < end) {\n      throw new StorageError(\"provider-error\", \"Supabase did not store the uploaded chunk\", { provider: PROVIDER });\n    }\n    return current;\n  }\n\n  /** Deletes the object; a missing object is not an error. */\n  async delete(path: string, options?: OperationOptions): Promise<void> {\n    const res = await fetchWithAbort(`${this.api}/object/${encodeURIComponent(this.bucket)}`, {\n      method: \"DELETE\",\n      headers: { ...this.headers, \"content-type\": \"application/json\" },\n      body: JSON.stringify({ prefixes: [path] }),\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase delete failed\", res);\n  }\n\n  async getUrl(path: string, _options?: OperationOptions): Promise<string> {\n    return `${this.baseUrl}/${urlEncodePath(path)}`;\n  }\n\n  /** Streams the object. `options.signal` also cancels reading the body. */\n  async get(path: string, options?: OperationOptions): Promise<ReadableStream<Uint8Array>> {\n    const res = await fetchWithAbort(this.objectUrl(\"object/authenticated\", path), {\n      headers: this.headers,\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase get failed\", res);\n    if (!res.body) {\n      throw new StorageError(\"provider-error\", \"Supabase get returned no response body\", { provider: PROVIDER });\n    }\n    return res.body;\n  }\n\n  /** A signed download URL for `path`, valid for `expiresIn` seconds (positive integer, default 3600). */\n  async getPresignedUrl(path: string, options?: PresignedUrlOptions): Promise<string> {\n    const expiresIn = options?.expiresIn ?? PRESIGN_DEFAULT_EXPIRY;\n    if (!Number.isInteger(expiresIn) || expiresIn < 1) {\n      throw new ValidationError(\"expiresIn must be a positive integer number of seconds\");\n    }\n    const res = await fetchWithAbort(this.objectUrl(\"object/sign\", path), {\n      method: \"POST\",\n      headers: { ...this.headers, \"content-type\": \"application/json\" },\n      body: JSON.stringify({ expiresIn }),\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase sign failed\", res);\n    const { signedURL } = (await res.json()) as { signedURL?: string };\n    if (!signedURL) {\n      throw new StorageError(\"provider-error\", \"Supabase sign returned no signedURL\", { provider: PROVIDER });\n    }\n    return `${this.api}${signedURL.startsWith(\"/\") ? \"\" : \"/\"}${signedURL}`;\n  }\n\n  /** The object name an upload with `options.id` is stored under: `<path>/<id>.<ext>`. */\n  pathFor(options: UploadOptions & { id: string }): string {\n    const ext = options.filename.includes(\".\") ? options.filename.split(\".\").pop()! : \"\";\n    const filename = ext ? `${options.id}.${ext}` : options.id;\n    return options.path ? `${options.path}/${filename}` : filename;\n  }\n\n  /** The object at `path` (`GET /object/info`), or `null` if it does not exist. */\n  async head(path: string, options?: OperationOptions): Promise<StoredObject<SupabaseMeta> | null> {\n    const res = await fetchWithAbort(this.objectUrl(\"object/info\", path), {\n      headers: this.headers,\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) {\n      const error = await supabaseError(\"Supabase info failed\", res);\n      if (error.code === \"not-found\") return null;\n      throw error;\n    }\n    const info = (await res.json()) as ObjectInfo;\n    const name = path.split(\"/\").pop() ?? path;\n    const token = info.metadata?.[TOKEN_KEY];\n    return {\n      id: name.includes(\".\") ? name.slice(0, name.lastIndexOf(\".\")) : name,\n      url: `${this.baseUrl}/${urlEncodePath(path)}`,\n      path,\n      size: Number(info.size ?? 0),\n      meta: { bucket: this.bucket, ...(info.etag ? { etag: info.etag } : {}) },\n      ...(token ? { uploadToken: token } : {}),\n      ...(info.last_modified ? { lastModified: new Date(info.last_modified) } : {}),\n      ...(info.content_type ? { contentType: info.content_type } : {}),\n    };\n  }\n\n  private objectUrl(route: string, path: string): string {\n    return `${this.api}/${route}/${encodeURIComponent(this.bucket)}/${urlEncodePath(path)}`;\n  }\n}\n\n/** `fetch` that converts non-abort failures into a typed `network` error,\n * while letting aborts (`AbortError`) pass through untouched. */\nasync function fetchWithAbort(url: string | URL, init: RequestInit): Promise<Response> {\n  try {\n    return await fetch(url, init);\n  } catch (err) {\n    if (isAbortError(err)) throw err;\n    const cause = err instanceof Error ? err : new Error(String(err));\n    throw new StorageError(\"network\", `${PROVIDER} network error: ${cause.message}`, { provider: PROVIDER, cause });\n  }\n}\n\nasync function supabaseError(prefix: string, res: Response): Promise<StorageError> {\n  const body = await res.text().catch(() => \"\");\n  return new StorageError(\n    classifySupabaseError(res.status, body),\n    `${prefix}: ${res.status} ${res.statusText}${body ? `: ${body}` : \"\"}`,\n    { statusCode: res.status, provider: PROVIDER },\n  );\n}\n\nfunction base64(value: string): string {\n  let binary = \"\";\n  for (const byte of new TextEncoder().encode(value)) binary += String.fromCharCode(byte);\n  return btoa(binary);\n}\n\nfunction concatBytes(chunks: Uint8Array[], total: number): Uint8Array {\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return out;\n}\n","import type { StorageErrorCode } from \"@fileway/core\";\n\n// Internal: error classification for SupabaseDriver. Not exported from the package.\n\n/**\n * Classifies a Supabase Storage failure. The API often answers 400 with the\n * real status in the JSON body (`{ statusCode: \"404\", error, message }`), so\n * the body is checked before the HTTP status.\n */\nexport function classifySupabaseError(status: number, body: string): StorageErrorCode {\n  let parsed: { statusCode?: string | number; error?: string; message?: string } = {};\n  try {\n    parsed = JSON.parse(body) as typeof parsed;\n  } catch {\n    // Not JSON (e.g. a TUS error); fall through to text and status checks.\n  }\n  const text = `${parsed.error ?? \"\"} ${parsed.message ?? \"\"} ${parsed.error === undefined ? body : \"\"}`.toLowerCase();\n  const code = Number(parsed.statusCode ?? status);\n\n  if (text.includes(\"bucket not found\")) return \"bucket-not-found\";\n  if (text.includes(\"not found\") || text.includes(\"not_found\") || text.includes(\"no such\")) return \"not-found\";\n  if (text.includes(\"exceeded the maximum allowed size\") || text.includes(\"payload too large\") || code === 413) {\n    return \"size-exceeded\";\n  }\n  if (code === 401 || code === 403 || text.includes(\"jwt\") || text.includes(\"unauthorized\") || text.includes(\"row-level security\")) {\n    return \"auth-failed\";\n  }\n  if (code === 429 || text.includes(\"too many requests\")) return \"rate-limited\";\n  if (code === 404) return \"not-found\";\n  return \"provider-error\";\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACSO,SAAS,sBAAsB,QAAgB,MAAgC;AACpF,MAAI,SAA6E,CAAC;AAClF,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AAAA,EAER;AACA,QAAM,OAAO,GAAG,OAAO,SAAS,EAAE,IAAI,OAAO,WAAW,EAAE,IAAI,OAAO,UAAU,SAAY,OAAO,EAAE,GAAG,YAAY;AACnH,QAAM,OAAO,OAAO,OAAO,cAAc,MAAM;AAE/C,MAAI,KAAK,SAAS,kBAAkB,EAAG,QAAO;AAC9C,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,SAAS,EAAG,QAAO;AACjG,MAAI,KAAK,SAAS,mCAAmC,KAAK,KAAK,SAAS,mBAAmB,KAAK,SAAS,KAAK;AAC5G,WAAO;AAAA,EACT;AACA,MAAI,SAAS,OAAO,SAAS,OAAO,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,cAAc,KAAK,KAAK,SAAS,oBAAoB,GAAG;AAChI,WAAO;AAAA,EACT;AACA,MAAI,SAAS,OAAO,KAAK,SAAS,mBAAmB,EAAG,QAAO;AAC/D,MAAI,SAAS,IAAK,QAAO;AACzB,SAAO;AACT;;;AD5BA,kBAA8G;AAE9G,IAAM,aAAa,MAAM,WAAW,OAAO,WAAW;AACtD,IAAM,WAAW;AAGjB,IAAM,iBAAiB,IAAI,OAAO;AAClC,IAAM,cAAc;AACpB,IAAM,yBAAyB;AAE/B,IAAM,YAAY;AAElB,IAAM,oBAAoB;AAmCnB,IAAM,iBAAN,MAAyD;AAAA,EACrD,OAAO;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA8B;AACxC,QAAI,CAAC,OAAO,OAAO,CAAC,OAAO,OAAO,CAAC,OAAO,QAAQ;AAChD,YAAM,IAAI,yBAAa,UAAU,+CAA+C,EAAE,UAAU,SAAS,CAAC;AAAA,IACxG;AACA,SAAK,MAAM,GAAG,OAAO,IAAI,QAAQ,QAAQ,EAAE,CAAC;AAC5C,SAAK,SAAS,OAAO;AACrB,SAAK,WAAW,OAAO,WAAW,GAAG,KAAK,GAAG,kBAAkB,OAAO,MAAM,IAAI,QAAQ,QAAQ,EAAE;AAGlG,UAAM,SAAS,OAAO,gBAAgB,OAAO,IAAI,WAAW,KAAK,IAAI,OAAO,MAAM;AAClF,SAAK,UAAU,EAAE,QAAQ,OAAO,KAAK,GAAI,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG,IAAI,CAAC,EAAG;AAC9F,SAAK,eAAe,OAAO;AAC3B,SAAK,eAAe,WAAW,OAAO,gBAAgB,IAAI;AAAA,EAC5D;AAAA,EAEA,MAAM,OACJ,QACA,SACA,SACqC;AACrC,2CAAsB,OAAO;AAC7B,QAAI,KAAK,iBAAiB,UAAa,QAAQ,SAAS,UAAa,QAAQ,OAAO,KAAK,cAAc;AACrG,YAAM,IAAI,yBAAa,iBAAiB,aAAa,QAAQ,IAAI,yBAAyB,KAAK,YAAY,IAAI,EAAE,UAAU,SAAS,CAAC;AAAA,IACvI;AAEA,UAAM,KAAK,QAAQ,MAAM,WAAW;AACpC,UAAM,OAAO,KAAK,QAAQ,EAAE,GAAG,SAAS,GAAG,CAAC;AAC5C,UAAM,cAAc,QAAQ,YAAY;AACxC,UAAM,WAAW,EAAE,GAAG,QAAQ,UAAU,GAAI,SAAS,cAAc,EAAE,CAAC,SAAS,GAAG,QAAQ,YAAY,IAAI,CAAC,EAAG;AAC9G,UAAM,SAAS,QAAQ;AAEvB,UAAM,SAAS,OAAO,UAAU;AAChC,QAAI,UAAU,QAAQ,WAAW;AACjC,UAAM,UAAU,MAAM;AACpB,gBAAU;AAEV,aAAO,OAAO,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAChC;AACA,QAAI,UAAU,CAAC,QAAS,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAEhF,QAAI,aAAa;AACjB,UAAM,OAAO,YAA6C;AACxD,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,QAAS,WAAM,wBAAW,gBAAgB;AAC9C,UAAI,KAAM,QAAO;AACjB,oBAAc,MAAM;AACpB,UAAI,KAAK,iBAAiB,UAAa,aAAa,KAAK,cAAc;AACrE,cAAM,IAAI,yBAAa,iBAAiB,+BAA+B,KAAK,YAAY,IAAI,EAAE,UAAU,SAAS,CAAC;AAAA,MACpH;AACA,aAAO;AAAA,IACT;AACA,UAAM,YAAY,MAAM;AACtB,UAAI,QAAQ,SAAS,UAAa,eAAe,QAAQ,MAAM;AAC7D,cAAM,IAAI,4BAAgB,oBAAoB,UAAU,oBAAoB,QAAQ,IAAI,EAAE;AAAA,MAC5F;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,UAAI;AAEJ,UAAI,QAAQ,SAAS,UAAa,QAAQ,OAAO,gBAAgB;AAE/D,iBAAS,MAAM,KAAK,gBAAgB,MAAM,QAAQ,MAAM,aAAa,UAAU,MAAM;AACrF,YAAI,SAAuB,CAAC;AAC5B,YAAI,cAAc;AAClB,YAAI,SAAS;AACb,eAAO,MAAM;AACX,gBAAM,QAAQ,MAAM,KAAK;AACzB,cAAI,aAAa,QAAQ,KAAM,WAAU;AACzC,cAAI,OAAO;AACT,mBAAO,KAAK,KAAK;AACjB,2BAAe,MAAM;AAAA,UACvB;AACA,iBAAO,eAAe,kBAAmB,CAAC,SAAS,cAAc,GAAI;AACnE,gBAAI,CAAC,MAAO,WAAU;AACtB,kBAAM,SAAS,YAAY,QAAQ,WAAW;AAC9C,kBAAM,OAAO,KAAK,IAAI,gBAAgB,WAAW;AACjD,qBAAS,MAAM,KAAK,SAAS,QAAQ,OAAO,SAAS,GAAG,IAAI,GAAG,QAAQ,MAAM;AAC7E,kBAAM,OAAO,OAAO,SAAS,IAAI;AACjC,qBAAS,CAAC,IAAI;AACd,0BAAc,KAAK;AAAA,UACrB;AACA,cAAI,CAAC,MAAO;AAAA,QACd;AACA,kBAAU;AAAA,MACZ,OAAO;AAEL,cAAM,QAAsB,CAAC;AAC7B,YAAI,WAAW;AACf,YAAI,QAAQ;AACZ,eAAO,YAAY,gBAAgB;AACjC,gBAAM,QAAQ,MAAM,KAAK;AACzB,cAAI,CAAC,OAAO;AACV,oBAAQ;AACR;AAAA,UACF;AACA,gBAAM,KAAK,KAAK;AAChB,sBAAY,MAAM;AAAA,QACpB;AACA,cAAM,OAAO,YAAY,OAAO,QAAQ;AAExC,YAAI,OAAO;AACT,oBAAU;AACV,iBAAO,MAAM,KAAK,eAAe,MAAM,MAAM,aAAa,UAAU,MAAM;AAAA,QAC5E,OAAO;AAEL,oBAAU;AAGV,gBAAM,YAAmC,CAAC;AAC1C,gBAAM,OAAO,IAAI,eAA2B;AAAA,YAC1C,MAAM,YAAY;AAChB,yBAAW,QAAQ,IAAI;AAAA,YACzB;AAAA,YACA,MAAM,KAAK,YAAY;AACrB,kBAAI;AACF,sBAAM,QAAQ,MAAM,KAAK;AACzB,oBAAI,MAAO,YAAW,QAAQ,KAAK;AAAA,oBAC9B,YAAW,MAAM;AAAA,cACxB,SAAS,KAAK;AACZ,0BAAU,UAAU;AACpB,2BAAW,MAAM,GAAG;AAAA,cACtB;AAAA,YACF;AAAA,YACA,OAAO,QAAQ;AACb,qBAAO,OAAO,OAAO,MAAM;AAAA,YAC7B;AAAA,UACF,CAAC;AACD,cAAI;AACF,mBAAO,MAAM,KAAK,eAAe,MAAM,MAAM,aAAa,UAAU,MAAM;AAAA,UAC5E,SAAS,KAAK;AAEZ,gBAAI,UAAU,QAAS,OAAM,UAAU;AACvC,kBAAM;AAAA,UACR;AACA,oBAAU;AAAA,QACZ;AAAA,MACF;AAEA,aAAO;AAAA,QACL;AAAA,QACA,KAAK,GAAG,KAAK,OAAO,QAAI,2BAAc,IAAI,CAAC;AAAA,QAC3C;AAAA,QACA,MAAM;AAAA,QACN,MAAM,EAAE,QAAQ,KAAK,QAAQ,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG;AAAA,MACzD;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,OAAO,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC9B,UAAI,QAAQ;AAEV,cAAM,MAAM,QAAQ,EAAE,QAAQ,UAAU,SAAS,EAAE,GAAG,KAAK,SAAS,iBAAiB,YAAY,EAAE,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACtH;AACA,YAAM;AAAA,IACR,UAAE;AACA,cAAQ,oBAAoB,SAAS,OAAO;AAAA,IAC9C;AAAA,EACF;AAAA;AAAA,EAGA,MAAc,eACZ,MACA,MACA,aACA,UACA,QAC6B;AAC7B,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,UAAU,IAAI,GAAG;AAAA,MAC/D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG,KAAK;AAAA,QACR,gBAAgB;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,YAAY;AAAA,QACZ,cAAc,OAAO,KAAK,UAAU,QAAQ,CAAC;AAAA,MAC/C;AAAA,MACA;AAAA;AAAA;AAAA,MAGA,QAAQ;AAAA,MACR,QAAQ,UAAU;AAAA,IACpB,CAAgB;AAChB,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,0BAA0B,GAAG;AACpE,WAAO,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EACpC;AAAA;AAAA,EAGA,MAAc,gBACZ,MACA,MACA,aACA,UACA,QACiB;AACjB,UAAM,WAAW,GAAG,KAAK,GAAG;AAC5B,UAAM,iBAAiB;AAAA,MACrB,YAAY,KAAK;AAAA,MACjB,YAAY;AAAA,MACZ;AAAA,MACA,cAAc,KAAK,aAAa,QAAQ,YAAY,EAAE;AAAA,MACtD,UAAU,KAAK,UAAU,QAAQ;AAAA,IACnC;AACA,UAAM,MAAM,MAAM,eAAe,UAAU;AAAA,MACzC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG,KAAK;AAAA,QACR,iBAAiB;AAAA,QACjB,iBAAiB,OAAO,IAAI;AAAA,QAC5B,mBAAmB,OAAO,QAAQ,cAAc,EAC7C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,EACnC,KAAK,GAAG;AAAA,QACX,YAAY;AAAA,MACd;AAAA,MACA,QAAQ,UAAU;AAAA,IACpB,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,2CAA2C,GAAG;AACrF,UAAM,WAAW,IAAI,QAAQ,IAAI,UAAU;AAC3C,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,yBAAa,kBAAkB,yDAAyD,EAAE,UAAU,SAAS,CAAC;AAAA,IAC1H;AACA,WAAO,IAAI,IAAI,UAAU,QAAQ,EAAE;AAAA,EACrC;AAAA;AAAA;AAAA,EAIA,MAAc,SAAS,KAAa,OAAmB,QAAgB,QAAkD;AACvH,UAAM,MAAM,SAAS,MAAM;AAC3B,QAAI,UAAU;AACd,aAAS,UAAU,GAAG,WAAW,qBAAqB,UAAU,KAAK,WAAW;AAC9E,YAAM,MAAM,MAAM,eAAe,KAAK;AAAA,QACpC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,GAAG,KAAK;AAAA,UACR,iBAAiB;AAAA,UACjB,iBAAiB,OAAO,OAAO;AAAA,UAC/B,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,MAAM,SAAS,UAAU,MAAM;AAAA,QACrC,QAAQ,UAAU;AAAA,MACpB,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,0CAA0C,GAAG;AACpF,YAAM,OAAO,OAAO,IAAI,QAAQ,IAAI,eAAe,KAAK,GAAG;AAC3D,UAAI,OAAO,QAAS;AACpB,gBAAU;AAAA,IACZ;AACA,QAAI,UAAU,KAAK;AACjB,YAAM,IAAI,yBAAa,kBAAkB,6CAA6C,EAAE,UAAU,SAAS,CAAC;AAAA,IAC9G;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,OAAO,MAAc,SAA2C;AACpE,UAAM,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,WAAW,mBAAmB,KAAK,MAAM,CAAC,IAAI;AAAA,MACxF,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,SAAS,gBAAgB,mBAAmB;AAAA,MAC/D,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;AAAA,MACzC,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,0BAA0B,GAAG;AAAA,EACtE;AAAA,EAEA,MAAM,OAAO,MAAc,UAA8C;AACvE,WAAO,GAAG,KAAK,OAAO,QAAI,2BAAc,IAAI,CAAC;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAM,IAAI,MAAc,SAAiE;AACvF,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,wBAAwB,IAAI,GAAG;AAAA,MAC7E,SAAS,KAAK;AAAA,MACd,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,uBAAuB,GAAG;AACjE,QAAI,CAAC,IAAI,MAAM;AACb,YAAM,IAAI,yBAAa,kBAAkB,0CAA0C,EAAE,UAAU,SAAS,CAAC;AAAA,IAC3G;AACA,WAAO,IAAI;AAAA,EACb;AAAA;AAAA,EAGA,MAAM,gBAAgB,MAAc,SAAgD;AAClF,UAAM,YAAY,SAAS,aAAa;AACxC,QAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AACjD,YAAM,IAAI,4BAAgB,wDAAwD;AAAA,IACpF;AACA,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,eAAe,IAAI,GAAG;AAAA,MACpE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,SAAS,gBAAgB,mBAAmB;AAAA,MAC/D,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MAClC,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,wBAAwB,GAAG;AAClE,UAAM,EAAE,UAAU,IAAK,MAAM,IAAI,KAAK;AACtC,QAAI,CAAC,WAAW;AACd,YAAM,IAAI,yBAAa,kBAAkB,uCAAuC,EAAE,UAAU,SAAS,CAAC;AAAA,IACxG;AACA,WAAO,GAAG,KAAK,GAAG,GAAG,UAAU,WAAW,GAAG,IAAI,KAAK,GAAG,GAAG,SAAS;AAAA,EACvE;AAAA;AAAA,EAGA,QAAQ,SAAiD;AACvD,UAAM,MAAM,QAAQ,SAAS,SAAS,GAAG,IAAI,QAAQ,SAAS,MAAM,GAAG,EAAE,IAAI,IAAK;AAClF,UAAM,WAAW,MAAM,GAAG,QAAQ,EAAE,IAAI,GAAG,KAAK,QAAQ;AACxD,WAAO,QAAQ,OAAO,GAAG,QAAQ,IAAI,IAAI,QAAQ,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,MAAM,KAAK,MAAc,SAAwE;AAC/F,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,eAAe,IAAI,GAAG;AAAA,MACpE,SAAS,KAAK;AAAA,MACd,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,QAAQ,MAAM,cAAc,wBAAwB,GAAG;AAC7D,UAAI,MAAM,SAAS,YAAa,QAAO;AACvC,YAAM;AAAA,IACR;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,UAAM,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,KAAK;AACtC,UAAM,QAAQ,KAAK,WAAW,SAAS;AACvC,WAAO;AAAA,MACL,IAAI,KAAK,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC,IAAI;AAAA,MAChE,KAAK,GAAG,KAAK,OAAO,QAAI,2BAAc,IAAI,CAAC;AAAA,MAC3C;AAAA,MACA,MAAM,OAAO,KAAK,QAAQ,CAAC;AAAA,MAC3B,MAAM,EAAE,QAAQ,KAAK,QAAQ,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC,EAAG;AAAA,MACvE,GAAI,QAAQ,EAAE,aAAa,MAAM,IAAI,CAAC;AAAA,MACtC,GAAI,KAAK,gBAAgB,EAAE,cAAc,IAAI,KAAK,KAAK,aAAa,EAAE,IAAI,CAAC;AAAA,MAC3E,GAAI,KAAK,eAAe,EAAE,aAAa,KAAK,aAAa,IAAI,CAAC;AAAA,IAChE;AAAA,EACF;AAAA,EAEQ,UAAU,OAAe,MAAsB;AACrD,WAAO,GAAG,KAAK,GAAG,IAAI,KAAK,IAAI,mBAAmB,KAAK,MAAM,CAAC,QAAI,2BAAc,IAAI,CAAC;AAAA,EACvF;AACF;AAIA,eAAe,eAAe,KAAmB,MAAsC;AACrF,MAAI;AACF,WAAO,MAAM,MAAM,KAAK,IAAI;AAAA,EAC9B,SAAS,KAAK;AACZ,YAAI,0BAAa,GAAG,EAAG,OAAM;AAC7B,UAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM,IAAI,yBAAa,WAAW,GAAG,QAAQ,mBAAmB,MAAM,OAAO,IAAI,EAAE,UAAU,UAAU,MAAM,CAAC;AAAA,EAChH;AACF;AAEA,eAAe,cAAc,QAAgB,KAAsC;AACjF,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,SAAO,IAAI;AAAA,IACT,sBAAsB,IAAI,QAAQ,IAAI;AAAA,IACtC,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,IAAI,UAAU,GAAG,OAAO,KAAK,IAAI,KAAK,EAAE;AAAA,IACpE,EAAE,YAAY,IAAI,QAAQ,UAAU,SAAS;AAAA,EAC/C;AACF;AAEA,SAAS,OAAO,OAAuB;AACrC,MAAI,SAAS;AACb,aAAW,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,EAAG,WAAU,OAAO,aAAa,IAAI;AACtF,SAAO,KAAK,MAAM;AACpB;AAEA,SAAS,YAAY,QAAsB,OAA2B;AACpE,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,QAAI,IAAI,OAAO,MAAM;AACrB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,57 @@
+import { BaseDriver, UploadOptions, UploadContext, UploadResult, OperationOptions, PresignedUrlOptions, StoredObject } from '@fileway/core';
+
+interface SupabaseDriverConfig {
+    /** Project URL, e.g. `https://<ref>.supabase.co` (or the direct storage host
+     * `https://<ref>.storage.supabase.co`, recommended for large uploads). */
+    url: string;
+    /** API key: a secret / service role key on the server, or the anon or
+     * publishable key together with `accessToken`. */
+    key: string;
+    /** A signed-in user's JWT, so the bucket's RLS policies apply. */
+    accessToken?: string;
+    bucket: string;
+    /** Public base URL for `getUrl`. Defaults to the bucket's public object URL. */
+    baseUrl?: string;
+    /** Reject uploads larger than this many bytes with a `size-exceeded` error. */
+    maxSizeBytes?: number;
+    /** `Cache-Control` max-age in seconds for uploaded objects. Default 3600. */
+    cacheControl?: number;
+}
+type SupabaseMeta = {
+    bucket: string;
+    etag?: string;
+};
+declare class SupabaseDriver implements BaseDriver<SupabaseMeta> {
+    readonly name = "supabase";
+    private api;
+    private bucket;
+    private baseUrl;
+    private headers;
+    private maxSizeBytes;
+    private cacheControl;
+    constructor(config: SupabaseDriverConfig);
+    upload(stream: ReadableStream<Uint8Array>, options: UploadOptions, context?: UploadContext): Promise<UploadResult<SupabaseMeta>>;
+    /** `POST /object/{bucket}/{path}`, overwriting any existing object. */
+    private standardUpload;
+    /** Creates a TUS upload and returns its URL. */
+    private createTusUpload;
+    /** PATCHes `bytes` at `offset`, resending whatever the server did not store.
+     * Returns the new offset. */
+    private patchTus;
+    /** Deletes the object; a missing object is not an error. */
+    delete(path: string, options?: OperationOptions): Promise<void>;
+    getUrl(path: string, _options?: OperationOptions): Promise<string>;
+    /** Streams the object. `options.signal` also cancels reading the body. */
+    get(path: string, options?: OperationOptions): Promise<ReadableStream<Uint8Array>>;
+    /** A signed download URL for `path`, valid for `expiresIn` seconds (positive integer, default 3600). */
+    getPresignedUrl(path: string, options?: PresignedUrlOptions): Promise<string>;
+    /** The object name an upload with `options.id` is stored under: `<path>/<id>.<ext>`. */
+    pathFor(options: UploadOptions & {
+        id: string;
+    }): string;
+    /** The object at `path` (`GET /object/info`), or `null` if it does not exist. */
+    head(path: string, options?: OperationOptions): Promise<StoredObject<SupabaseMeta> | null>;
+    private objectUrl;
+}
+
+export { SupabaseDriver, type SupabaseDriverConfig, type SupabaseMeta };

package/dist/index.d.ts

@@ -0,0 +1,57 @@
+import { BaseDriver, UploadOptions, UploadContext, UploadResult, OperationOptions, PresignedUrlOptions, StoredObject } from '@fileway/core';
+
+interface SupabaseDriverConfig {
+    /** Project URL, e.g. `https://<ref>.supabase.co` (or the direct storage host
+     * `https://<ref>.storage.supabase.co`, recommended for large uploads). */
+    url: string;
+    /** API key: a secret / service role key on the server, or the anon or
+     * publishable key together with `accessToken`. */
+    key: string;
+    /** A signed-in user's JWT, so the bucket's RLS policies apply. */
+    accessToken?: string;
+    bucket: string;
+    /** Public base URL for `getUrl`. Defaults to the bucket's public object URL. */
+    baseUrl?: string;
+    /** Reject uploads larger than this many bytes with a `size-exceeded` error. */
+    maxSizeBytes?: number;
+    /** `Cache-Control` max-age in seconds for uploaded objects. Default 3600. */
+    cacheControl?: number;
+}
+type SupabaseMeta = {
+    bucket: string;
+    etag?: string;
+};
+declare class SupabaseDriver implements BaseDriver<SupabaseMeta> {
+    readonly name = "supabase";
+    private api;
+    private bucket;
+    private baseUrl;
+    private headers;
+    private maxSizeBytes;
+    private cacheControl;
+    constructor(config: SupabaseDriverConfig);
+    upload(stream: ReadableStream<Uint8Array>, options: UploadOptions, context?: UploadContext): Promise<UploadResult<SupabaseMeta>>;
+    /** `POST /object/{bucket}/{path}`, overwriting any existing object. */
+    private standardUpload;
+    /** Creates a TUS upload and returns its URL. */
+    private createTusUpload;
+    /** PATCHes `bytes` at `offset`, resending whatever the server did not store.
+     * Returns the new offset. */
+    private patchTus;
+    /** Deletes the object; a missing object is not an error. */
+    delete(path: string, options?: OperationOptions): Promise<void>;
+    getUrl(path: string, _options?: OperationOptions): Promise<string>;
+    /** Streams the object. `options.signal` also cancels reading the body. */
+    get(path: string, options?: OperationOptions): Promise<ReadableStream<Uint8Array>>;
+    /** A signed download URL for `path`, valid for `expiresIn` seconds (positive integer, default 3600). */
+    getPresignedUrl(path: string, options?: PresignedUrlOptions): Promise<string>;
+    /** The object name an upload with `options.id` is stored under: `<path>/<id>.<ext>`. */
+    pathFor(options: UploadOptions & {
+        id: string;
+    }): string;
+    /** The object at `path` (`GET /object/info`), or `null` if it does not exist. */
+    head(path: string, options?: OperationOptions): Promise<StoredObject<SupabaseMeta> | null>;
+    private objectUrl;
+}
+
+export { SupabaseDriver, type SupabaseDriverConfig, type SupabaseMeta };

package/dist/index.js

@@ -0,0 +1,367 @@
+// src/errors.ts
+function classifySupabaseError(status, body) {
+  let parsed = {};
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+  }
+  const text = `${parsed.error ?? ""} ${parsed.message ?? ""} ${parsed.error === void 0 ? body : ""}`.toLowerCase();
+  const code = Number(parsed.statusCode ?? status);
+  if (text.includes("bucket not found")) return "bucket-not-found";
+  if (text.includes("not found") || text.includes("not_found") || text.includes("no such")) return "not-found";
+  if (text.includes("exceeded the maximum allowed size") || text.includes("payload too large") || code === 413) {
+    return "size-exceeded";
+  }
+  if (code === 401 || code === 403 || text.includes("jwt") || text.includes("unauthorized") || text.includes("row-level security")) {
+    return "auth-failed";
+  }
+  if (code === 429 || text.includes("too many requests")) return "rate-limited";
+  if (code === 404) return "not-found";
+  return "provider-error";
+}
+
+// src/index.ts
+import { validateUploadOptions, ValidationError, urlEncodePath, abortError, isAbortError, StorageError } from "@fileway/core";
+var randomUUID = () => globalThis.crypto.randomUUID();
+var PROVIDER = "supabase";
+var TUS_CHUNK_SIZE = 6 * 1024 * 1024;
+var TUS_VERSION = "1.0.0";
+var PRESIGN_DEFAULT_EXPIRY = 3600;
+var TOKEN_KEY = "fileway-upload-token";
+var MAX_CHUNK_RESENDS = 3;
+var SupabaseDriver = class {
+  name = "supabase";
+  api;
+  bucket;
+  baseUrl;
+  headers;
+  maxSizeBytes;
+  cacheControl;
+  constructor(config) {
+    if (!config.url || !config.key || !config.bucket) {
+      throw new StorageError("config", "SupabaseDriver requires url, key and bucket", { provider: PROVIDER });
+    }
+    this.api = `${config.url.replace(/\/+$/, "")}/storage/v1`;
+    this.bucket = config.bucket;
+    this.baseUrl = (config.baseUrl ?? `${this.api}/object/public/${config.bucket}`).replace(/\/+$/, "");
+    const bearer = config.accessToken ?? (config.key.startsWith("eyJ") ? config.key : void 0);
+    this.headers = { apikey: config.key, ...bearer ? { authorization: `Bearer ${bearer}` } : {} };
+    this.maxSizeBytes = config.maxSizeBytes;
+    this.cacheControl = `max-age=${config.cacheControl ?? 3600}`;
+  }
+  async upload(stream, options, context) {
+    validateUploadOptions(options);
+    if (this.maxSizeBytes !== void 0 && options.size !== void 0 && options.size > this.maxSizeBytes) {
+      throw new StorageError("size-exceeded", `file size ${options.size} exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });
+    }
+    const id = options.id ?? randomUUID();
+    const path = this.pathFor({ ...options, id });
+    const contentType = options.mimeType ?? "application/octet-stream";
+    const metadata = { ...options.metadata, ...context?.uploadToken ? { [TOKEN_KEY]: context.uploadToken } : {} };
+    const signal = options.signal;
+    const reader = stream.getReader();
+    let aborted = signal?.aborted ?? false;
+    const onAbort = () => {
+      aborted = true;
+      reader.cancel().catch(() => {
+      });
+    };
+    if (signal && !aborted) signal.addEventListener("abort", onAbort, { once: true });
+    let totalBytes = 0;
+    const read = async () => {
+      const { done, value } = await reader.read();
+      if (aborted) throw abortError("upload aborted");
+      if (done) return void 0;
+      totalBytes += value.byteLength;
+      if (this.maxSizeBytes !== void 0 && totalBytes > this.maxSizeBytes) {
+        throw new StorageError("size-exceeded", `upload exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });
+      }
+      return value;
+    };
+    const checkSize = () => {
+      if (options.size !== void 0 && totalBytes !== options.size) {
+        throw new ValidationError(`stream delivered ${totalBytes} bytes, expected ${options.size}`);
+      }
+    };
+    let tusUrl;
+    try {
+      let etag;
+      if (options.size !== void 0 && options.size > TUS_CHUNK_SIZE) {
+        tusUrl = await this.createTusUpload(path, options.size, contentType, metadata, signal);
+        let buffer = [];
+        let bufferedLen = 0;
+        let offset = 0;
+        while (true) {
+          const value = await read();
+          if (totalBytes > options.size) checkSize();
+          if (value) {
+            buffer.push(value);
+            bufferedLen += value.byteLength;
+          }
+          while (bufferedLen >= TUS_CHUNK_SIZE || !value && bufferedLen > 0) {
+            if (!value) checkSize();
+            const merged = concatBytes(buffer, bufferedLen);
+            const take = Math.min(TUS_CHUNK_SIZE, bufferedLen);
+            offset = await this.patchTus(tusUrl, merged.subarray(0, take), offset, signal);
+            const rest = merged.subarray(take);
+            buffer = [rest];
+            bufferedLen = rest.byteLength;
+          }
+          if (!value) break;
+        }
+        checkSize();
+      } else {
+        const first = [];
+        let firstLen = 0;
+        let ended = false;
+        while (firstLen <= TUS_CHUNK_SIZE) {
+          const value = await read();
+          if (!value) {
+            ended = true;
+            break;
+          }
+          first.push(value);
+          firstLen += value.byteLength;
+        }
+        const head = concatBytes(first, firstLen);
+        if (ended) {
+          checkSize();
+          etag = await this.standardUpload(path, head, contentType, metadata, signal);
+        } else {
+          checkSize();
+          const bodyError = {};
+          const body = new ReadableStream({
+            start(controller) {
+              controller.enqueue(head);
+            },
+            async pull(controller) {
+              try {
+                const value = await read();
+                if (value) controller.enqueue(value);
+                else controller.close();
+              } catch (err) {
+                bodyError.current = err;
+                controller.error(err);
+              }
+            },
+            cancel(reason) {
+              return reader.cancel(reason);
+            }
+          });
+          try {
+            etag = await this.standardUpload(path, body, contentType, metadata, signal);
+          } catch (err) {
+            if (bodyError.current) throw bodyError.current;
+            throw err;
+          }
+          checkSize();
+        }
+      }
+      return {
+        id,
+        url: `${this.baseUrl}/${urlEncodePath(path)}`,
+        path,
+        size: totalBytes,
+        meta: { bucket: this.bucket, ...etag ? { etag } : {} }
+      };
+    } catch (err) {
+      reader.cancel().catch(() => {
+      });
+      if (tusUrl) {
+        await fetch(tusUrl, { method: "DELETE", headers: { ...this.headers, "tus-resumable": TUS_VERSION } }).catch(() => {
+        });
+      }
+      throw err;
+    } finally {
+      signal?.removeEventListener("abort", onAbort);
+    }
+  }
+  /** `POST /object/{bucket}/{path}`, overwriting any existing object. */
+  async standardUpload(path, body, contentType, metadata, signal) {
+    const res = await fetchWithAbort(this.objectUrl("object", path), {
+      method: "POST",
+      headers: {
+        ...this.headers,
+        "content-type": contentType,
+        "cache-control": this.cacheControl,
+        "x-upsert": "true",
+        "x-metadata": base64(JSON.stringify(metadata))
+      },
+      body,
+      // Node's fetch (undici) requires `duplex: "half"` for stream bodies;
+      // other runtimes ignore it.
+      duplex: "half",
+      signal: signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase upload failed", res);
+    return res.headers.get("etag") ?? void 0;
+  }
+  /** Creates a TUS upload and returns its URL. */
+  async createTusUpload(path, size, contentType, metadata, signal) {
+    const endpoint = `${this.api}/upload/resumable`;
+    const uploadMetadata = {
+      bucketName: this.bucket,
+      objectName: path,
+      contentType,
+      cacheControl: this.cacheControl.replace("max-age=", ""),
+      metadata: JSON.stringify(metadata)
+    };
+    const res = await fetchWithAbort(endpoint, {
+      method: "POST",
+      headers: {
+        ...this.headers,
+        "tus-resumable": TUS_VERSION,
+        "upload-length": String(size),
+        "upload-metadata": Object.entries(uploadMetadata).map(([k, v]) => `${k} ${base64(v)}`).join(","),
+        "x-upsert": "true"
+      },
+      signal: signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase resumable upload create failed", res);
+    const location = res.headers.get("location");
+    if (!location) {
+      throw new StorageError("provider-error", "Supabase resumable upload returned no Location header", { provider: PROVIDER });
+    }
+    return new URL(location, endpoint).href;
+  }
+  /** PATCHes `bytes` at `offset`, resending whatever the server did not store.
+   * Returns the new offset. */
+  async patchTus(url, bytes, offset, signal) {
+    const end = offset + bytes.byteLength;
+    let current = offset;
+    for (let attempt = 0; attempt <= MAX_CHUNK_RESENDS && current < end; attempt++) {
+      const res = await fetchWithAbort(url, {
+        method: "PATCH",
+        headers: {
+          ...this.headers,
+          "tus-resumable": TUS_VERSION,
+          "upload-offset": String(current),
+          "content-type": "application/offset+octet-stream"
+        },
+        body: bytes.subarray(current - offset),
+        signal: signal ?? null
+      });
+      if (!res.ok) throw await supabaseError("Supabase resumable upload chunk failed", res);
+      const next = Number(res.headers.get("upload-offset") ?? end);
+      if (next < current) break;
+      current = next;
+    }
+    if (current < end) {
+      throw new StorageError("provider-error", "Supabase did not store the uploaded chunk", { provider: PROVIDER });
+    }
+    return current;
+  }
+  /** Deletes the object; a missing object is not an error. */
+  async delete(path, options) {
+    const res = await fetchWithAbort(`${this.api}/object/${encodeURIComponent(this.bucket)}`, {
+      method: "DELETE",
+      headers: { ...this.headers, "content-type": "application/json" },
+      body: JSON.stringify({ prefixes: [path] }),
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase delete failed", res);
+  }
+  async getUrl(path, _options) {
+    return `${this.baseUrl}/${urlEncodePath(path)}`;
+  }
+  /** Streams the object. `options.signal` also cancels reading the body. */
+  async get(path, options) {
+    const res = await fetchWithAbort(this.objectUrl("object/authenticated", path), {
+      headers: this.headers,
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase get failed", res);
+    if (!res.body) {
+      throw new StorageError("provider-error", "Supabase get returned no response body", { provider: PROVIDER });
+    }
+    return res.body;
+  }
+  /** A signed download URL for `path`, valid for `expiresIn` seconds (positive integer, default 3600). */
+  async getPresignedUrl(path, options) {
+    const expiresIn = options?.expiresIn ?? PRESIGN_DEFAULT_EXPIRY;
+    if (!Number.isInteger(expiresIn) || expiresIn < 1) {
+      throw new ValidationError("expiresIn must be a positive integer number of seconds");
+    }
+    const res = await fetchWithAbort(this.objectUrl("object/sign", path), {
+      method: "POST",
+      headers: { ...this.headers, "content-type": "application/json" },
+      body: JSON.stringify({ expiresIn }),
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) throw await supabaseError("Supabase sign failed", res);
+    const { signedURL } = await res.json();
+    if (!signedURL) {
+      throw new StorageError("provider-error", "Supabase sign returned no signedURL", { provider: PROVIDER });
+    }
+    return `${this.api}${signedURL.startsWith("/") ? "" : "/"}${signedURL}`;
+  }
+  /** The object name an upload with `options.id` is stored under: `<path>/<id>.<ext>`. */
+  pathFor(options) {
+    const ext = options.filename.includes(".") ? options.filename.split(".").pop() : "";
+    const filename = ext ? `${options.id}.${ext}` : options.id;
+    return options.path ? `${options.path}/${filename}` : filename;
+  }
+  /** The object at `path` (`GET /object/info`), or `null` if it does not exist. */
+  async head(path, options) {
+    const res = await fetchWithAbort(this.objectUrl("object/info", path), {
+      headers: this.headers,
+      signal: options?.signal ?? null
+    });
+    if (!res.ok) {
+      const error = await supabaseError("Supabase info failed", res);
+      if (error.code === "not-found") return null;
+      throw error;
+    }
+    const info = await res.json();
+    const name = path.split("/").pop() ?? path;
+    const token = info.metadata?.[TOKEN_KEY];
+    return {
+      id: name.includes(".") ? name.slice(0, name.lastIndexOf(".")) : name,
+      url: `${this.baseUrl}/${urlEncodePath(path)}`,
+      path,
+      size: Number(info.size ?? 0),
+      meta: { bucket: this.bucket, ...info.etag ? { etag: info.etag } : {} },
+      ...token ? { uploadToken: token } : {},
+      ...info.last_modified ? { lastModified: new Date(info.last_modified) } : {},
+      ...info.content_type ? { contentType: info.content_type } : {}
+    };
+  }
+  objectUrl(route, path) {
+    return `${this.api}/${route}/${encodeURIComponent(this.bucket)}/${urlEncodePath(path)}`;
+  }
+};
+async function fetchWithAbort(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch (err) {
+    if (isAbortError(err)) throw err;
+    const cause = err instanceof Error ? err : new Error(String(err));
+    throw new StorageError("network", `${PROVIDER} network error: ${cause.message}`, { provider: PROVIDER, cause });
+  }
+}
+async function supabaseError(prefix, res) {
+  const body = await res.text().catch(() => "");
+  return new StorageError(
+    classifySupabaseError(res.status, body),
+    `${prefix}: ${res.status} ${res.statusText}${body ? `: ${body}` : ""}`,
+    { statusCode: res.status, provider: PROVIDER }
+  );
+}
+function base64(value) {
+  let binary = "";
+  for (const byte of new TextEncoder().encode(value)) binary += String.fromCharCode(byte);
+  return btoa(binary);
+}
+function concatBytes(chunks, total) {
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    out.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return out;
+}
+export {
+  SupabaseDriver
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/index.ts"],"sourcesContent":["import type { StorageErrorCode } from \"@fileway/core\";\n\n// Internal: error classification for SupabaseDriver. Not exported from the package.\n\n/**\n * Classifies a Supabase Storage failure. The API often answers 400 with the\n * real status in the JSON body (`{ statusCode: \"404\", error, message }`), so\n * the body is checked before the HTTP status.\n */\nexport function classifySupabaseError(status: number, body: string): StorageErrorCode {\n  let parsed: { statusCode?: string | number; error?: string; message?: string } = {};\n  try {\n    parsed = JSON.parse(body) as typeof parsed;\n  } catch {\n    // Not JSON (e.g. a TUS error); fall through to text and status checks.\n  }\n  const text = `${parsed.error ?? \"\"} ${parsed.message ?? \"\"} ${parsed.error === undefined ? body : \"\"}`.toLowerCase();\n  const code = Number(parsed.statusCode ?? status);\n\n  if (text.includes(\"bucket not found\")) return \"bucket-not-found\";\n  if (text.includes(\"not found\") || text.includes(\"not_found\") || text.includes(\"no such\")) return \"not-found\";\n  if (text.includes(\"exceeded the maximum allowed size\") || text.includes(\"payload too large\") || code === 413) {\n    return \"size-exceeded\";\n  }\n  if (code === 401 || code === 403 || text.includes(\"jwt\") || text.includes(\"unauthorized\") || text.includes(\"row-level security\")) {\n    return \"auth-failed\";\n  }\n  if (code === 429 || text.includes(\"too many requests\")) return \"rate-limited\";\n  if (code === 404) return \"not-found\";\n  return \"provider-error\";\n}\n","import type { BaseDriver, OperationOptions, PresignedUrlOptions, StoredObject, UploadContext, UploadOptions, UploadResult } from \"@fileway/core\";\nimport { classifySupabaseError } from \"./errors.js\";\nimport { validateUploadOptions, ValidationError, urlEncodePath, abortError, isAbortError, StorageError } from \"@fileway/core\";\n\nconst randomUUID = () => globalThis.crypto.randomUUID();\nconst PROVIDER = \"supabase\";\n\n// Supabase's resumable (TUS) endpoint requires 6 MiB chunks.\nconst TUS_CHUNK_SIZE = 6 * 1024 * 1024;\nconst TUS_VERSION = \"1.0.0\";\nconst PRESIGN_DEFAULT_EXPIRY = 3600;\n// User metadata key carrying FilewayClient's per-upload token.\nconst TOKEN_KEY = \"fileway-upload-token\";\n// How many times a TUS chunk is resent when the server stored only part of it.\nconst MAX_CHUNK_RESENDS = 3;\n\nexport interface SupabaseDriverConfig {\n  /** Project URL, e.g. `https://<ref>.supabase.co` (or the direct storage host\n   * `https://<ref>.storage.supabase.co`, recommended for large uploads). */\n  url: string;\n  /** API key: a secret / service role key on the server, or the anon or\n   * publishable key together with `accessToken`. */\n  key: string;\n  /** A signed-in user's JWT, so the bucket's RLS policies apply. */\n  accessToken?: string;\n  bucket: string;\n  /** Public base URL for `getUrl`. Defaults to the bucket's public object URL. */\n  baseUrl?: string;\n  /** Reject uploads larger than this many bytes with a `size-exceeded` error. */\n  maxSizeBytes?: number;\n  /** `Cache-Control` max-age in seconds for uploaded objects. Default 3600. */\n  cacheControl?: number;\n}\n\nexport type SupabaseMeta = {\n  bucket: string;\n  etag?: string;\n};\n\n/** The `GET /object/info` response (fields this driver reads). */\ninterface ObjectInfo {\n  name?: string;\n  size?: number | null;\n  content_type?: string | null;\n  etag?: string | null;\n  last_modified?: string | null;\n  metadata?: Record<string, string> | null;\n}\n\nexport class SupabaseDriver implements BaseDriver<SupabaseMeta> {\n  readonly name = \"supabase\";\n  private api: string;\n  private bucket: string;\n  private baseUrl: string;\n  private headers: Record<string, string>;\n  private maxSizeBytes: number | undefined;\n  private cacheControl: string;\n\n  constructor(config: SupabaseDriverConfig) {\n    if (!config.url || !config.key || !config.bucket) {\n      throw new StorageError(\"config\", \"SupabaseDriver requires url, key and bucket\", { provider: PROVIDER });\n    }\n    this.api = `${config.url.replace(/\\/+$/, \"\")}/storage/v1`;\n    this.bucket = config.bucket;\n    this.baseUrl = (config.baseUrl ?? `${this.api}/object/public/${config.bucket}`).replace(/\\/+$/, \"\");\n    // New-style keys (sb_secret_..., sb_publishable_...) are not JWTs and go\n    // only in `apikey`; legacy JWT keys and user tokens also go in Authorization.\n    const bearer = config.accessToken ?? (config.key.startsWith(\"eyJ\") ? config.key : undefined);\n    this.headers = { apikey: config.key, ...(bearer ? { authorization: `Bearer ${bearer}` } : {}) };\n    this.maxSizeBytes = config.maxSizeBytes;\n    this.cacheControl = `max-age=${config.cacheControl ?? 3600}`;\n  }\n\n  async upload(\n    stream: ReadableStream<Uint8Array>,\n    options: UploadOptions,\n    context?: UploadContext,\n  ): Promise<UploadResult<SupabaseMeta>> {\n    validateUploadOptions(options);\n    if (this.maxSizeBytes !== undefined && options.size !== undefined && options.size > this.maxSizeBytes) {\n      throw new StorageError(\"size-exceeded\", `file size ${options.size} exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });\n    }\n\n    const id = options.id ?? randomUUID();\n    const path = this.pathFor({ ...options, id });\n    const contentType = options.mimeType ?? \"application/octet-stream\";\n    const metadata = { ...options.metadata, ...(context?.uploadToken ? { [TOKEN_KEY]: context.uploadToken } : {}) };\n    const signal = options.signal;\n\n    const reader = stream.getReader();\n    let aborted = signal?.aborted ?? false;\n    const onAbort = () => {\n      aborted = true;\n      // Cancelling the reader wakes any pending `read()` with `done: true`.\n      reader.cancel().catch(() => {});\n    };\n    if (signal && !aborted) signal.addEventListener(\"abort\", onAbort, { once: true });\n\n    let totalBytes = 0;\n    const read = async (): Promise<Uint8Array | undefined> => {\n      const { done, value } = await reader.read();\n      if (aborted) throw abortError(\"upload aborted\");\n      if (done) return undefined;\n      totalBytes += value.byteLength;\n      if (this.maxSizeBytes !== undefined && totalBytes > this.maxSizeBytes) {\n        throw new StorageError(\"size-exceeded\", `upload exceeds maxSizeBytes ${this.maxSizeBytes}`, { provider: PROVIDER });\n      }\n      return value;\n    };\n    const checkSize = () => {\n      if (options.size !== undefined && totalBytes !== options.size) {\n        throw new ValidationError(`stream delivered ${totalBytes} bytes, expected ${options.size}`);\n      }\n    };\n\n    let tusUrl: string | undefined;\n    try {\n      let etag: string | undefined;\n\n      if (options.size !== undefined && options.size > TUS_CHUNK_SIZE) {\n        // Known large size: resumable TUS upload, one 6 MiB chunk in memory at a time.\n        tusUrl = await this.createTusUpload(path, options.size, contentType, metadata, signal);\n        let buffer: Uint8Array[] = [];\n        let bufferedLen = 0;\n        let offset = 0;\n        while (true) {\n          const value = await read();\n          if (totalBytes > options.size) checkSize();\n          if (value) {\n            buffer.push(value);\n            bufferedLen += value.byteLength;\n          }\n          while (bufferedLen >= TUS_CHUNK_SIZE || (!value && bufferedLen > 0)) {\n            if (!value) checkSize();\n            const merged = concatBytes(buffer, bufferedLen);\n            const take = Math.min(TUS_CHUNK_SIZE, bufferedLen);\n            offset = await this.patchTus(tusUrl, merged.subarray(0, take), offset, signal);\n            const rest = merged.subarray(take);\n            buffer = [rest];\n            bufferedLen = rest.byteLength;\n          }\n          if (!value) break;\n        }\n        checkSize();\n      } else {\n        // Read the first chunk; if the stream ends inside it, send one buffered request.\n        const first: Uint8Array[] = [];\n        let firstLen = 0;\n        let ended = false;\n        while (firstLen <= TUS_CHUNK_SIZE) {\n          const value = await read();\n          if (!value) {\n            ended = true;\n            break;\n          }\n          first.push(value);\n          firstLen += value.byteLength;\n        }\n        const head = concatBytes(first, firstLen);\n\n        if (ended) {\n          checkSize();\n          etag = await this.standardUpload(path, head, contentType, metadata, signal);\n        } else {\n          // A declared size this small cannot be followed by more data.\n          checkSize();\n          // Unknown size beyond one chunk: stream the rest in a single request,\n          // so memory stays bounded without knowing the total in advance.\n          const bodyError: { current?: unknown } = {};\n          const body = new ReadableStream<Uint8Array>({\n            start(controller) {\n              controller.enqueue(head);\n            },\n            async pull(controller) {\n              try {\n                const value = await read();\n                if (value) controller.enqueue(value);\n                else controller.close();\n              } catch (err) {\n                bodyError.current = err;\n                controller.error(err);\n              }\n            },\n            cancel(reason) {\n              return reader.cancel(reason);\n            },\n          });\n          try {\n            etag = await this.standardUpload(path, body, contentType, metadata, signal);\n          } catch (err) {\n            // A body error (abort, size limit) surfaces as a generic fetch failure.\n            if (bodyError.current) throw bodyError.current;\n            throw err;\n          }\n          checkSize();\n        }\n      }\n\n      return {\n        id,\n        url: `${this.baseUrl}/${urlEncodePath(path)}`,\n        path,\n        size: totalBytes,\n        meta: { bucket: this.bucket, ...(etag ? { etag } : {}) },\n      };\n    } catch (err) {\n      reader.cancel().catch(() => {});\n      if (tusUrl) {\n        // Best-effort: terminate the unfinished TUS upload.\n        await fetch(tusUrl, { method: \"DELETE\", headers: { ...this.headers, \"tus-resumable\": TUS_VERSION } }).catch(() => {});\n      }\n      throw err;\n    } finally {\n      signal?.removeEventListener(\"abort\", onAbort);\n    }\n  }\n\n  /** `POST /object/{bucket}/{path}`, overwriting any existing object. */\n  private async standardUpload(\n    path: string,\n    body: Uint8Array | ReadableStream<Uint8Array>,\n    contentType: string,\n    metadata: Record<string, string>,\n    signal: AbortSignal | undefined,\n  ): Promise<string | undefined> {\n    const res = await fetchWithAbort(this.objectUrl(\"object\", path), {\n      method: \"POST\",\n      headers: {\n        ...this.headers,\n        \"content-type\": contentType,\n        \"cache-control\": this.cacheControl,\n        \"x-upsert\": \"true\",\n        \"x-metadata\": base64(JSON.stringify(metadata)),\n      },\n      body: body as BodyInit,\n      // Node's fetch (undici) requires `duplex: \"half\"` for stream bodies;\n      // other runtimes ignore it.\n      duplex: \"half\",\n      signal: signal ?? null,\n    } as RequestInit);\n    if (!res.ok) throw await supabaseError(\"Supabase upload failed\", res);\n    return res.headers.get(\"etag\") ?? undefined;\n  }\n\n  /** Creates a TUS upload and returns its URL. */\n  private async createTusUpload(\n    path: string,\n    size: number,\n    contentType: string,\n    metadata: Record<string, string>,\n    signal: AbortSignal | undefined,\n  ): Promise<string> {\n    const endpoint = `${this.api}/upload/resumable`;\n    const uploadMetadata = {\n      bucketName: this.bucket,\n      objectName: path,\n      contentType,\n      cacheControl: this.cacheControl.replace(\"max-age=\", \"\"),\n      metadata: JSON.stringify(metadata),\n    };\n    const res = await fetchWithAbort(endpoint, {\n      method: \"POST\",\n      headers: {\n        ...this.headers,\n        \"tus-resumable\": TUS_VERSION,\n        \"upload-length\": String(size),\n        \"upload-metadata\": Object.entries(uploadMetadata)\n          .map(([k, v]) => `${k} ${base64(v)}`)\n          .join(\",\"),\n        \"x-upsert\": \"true\",\n      },\n      signal: signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase resumable upload create failed\", res);\n    const location = res.headers.get(\"location\");\n    if (!location) {\n      throw new StorageError(\"provider-error\", \"Supabase resumable upload returned no Location header\", { provider: PROVIDER });\n    }\n    return new URL(location, endpoint).href;\n  }\n\n  /** PATCHes `bytes` at `offset`, resending whatever the server did not store.\n   * Returns the new offset. */\n  private async patchTus(url: string, bytes: Uint8Array, offset: number, signal: AbortSignal | undefined): Promise<number> {\n    const end = offset + bytes.byteLength;\n    let current = offset;\n    for (let attempt = 0; attempt <= MAX_CHUNK_RESENDS && current < end; attempt++) {\n      const res = await fetchWithAbort(url, {\n        method: \"PATCH\",\n        headers: {\n          ...this.headers,\n          \"tus-resumable\": TUS_VERSION,\n          \"upload-offset\": String(current),\n          \"content-type\": \"application/offset+octet-stream\",\n        },\n        body: bytes.subarray(current - offset) as BodyInit,\n        signal: signal ?? null,\n      });\n      if (!res.ok) throw await supabaseError(\"Supabase resumable upload chunk failed\", res);\n      const next = Number(res.headers.get(\"upload-offset\") ?? end);\n      if (next < current) break;\n      current = next;\n    }\n    if (current < end) {\n      throw new StorageError(\"provider-error\", \"Supabase did not store the uploaded chunk\", { provider: PROVIDER });\n    }\n    return current;\n  }\n\n  /** Deletes the object; a missing object is not an error. */\n  async delete(path: string, options?: OperationOptions): Promise<void> {\n    const res = await fetchWithAbort(`${this.api}/object/${encodeURIComponent(this.bucket)}`, {\n      method: \"DELETE\",\n      headers: { ...this.headers, \"content-type\": \"application/json\" },\n      body: JSON.stringify({ prefixes: [path] }),\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase delete failed\", res);\n  }\n\n  async getUrl(path: string, _options?: OperationOptions): Promise<string> {\n    return `${this.baseUrl}/${urlEncodePath(path)}`;\n  }\n\n  /** Streams the object. `options.signal` also cancels reading the body. */\n  async get(path: string, options?: OperationOptions): Promise<ReadableStream<Uint8Array>> {\n    const res = await fetchWithAbort(this.objectUrl(\"object/authenticated\", path), {\n      headers: this.headers,\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase get failed\", res);\n    if (!res.body) {\n      throw new StorageError(\"provider-error\", \"Supabase get returned no response body\", { provider: PROVIDER });\n    }\n    return res.body;\n  }\n\n  /** A signed download URL for `path`, valid for `expiresIn` seconds (positive integer, default 3600). */\n  async getPresignedUrl(path: string, options?: PresignedUrlOptions): Promise<string> {\n    const expiresIn = options?.expiresIn ?? PRESIGN_DEFAULT_EXPIRY;\n    if (!Number.isInteger(expiresIn) || expiresIn < 1) {\n      throw new ValidationError(\"expiresIn must be a positive integer number of seconds\");\n    }\n    const res = await fetchWithAbort(this.objectUrl(\"object/sign\", path), {\n      method: \"POST\",\n      headers: { ...this.headers, \"content-type\": \"application/json\" },\n      body: JSON.stringify({ expiresIn }),\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) throw await supabaseError(\"Supabase sign failed\", res);\n    const { signedURL } = (await res.json()) as { signedURL?: string };\n    if (!signedURL) {\n      throw new StorageError(\"provider-error\", \"Supabase sign returned no signedURL\", { provider: PROVIDER });\n    }\n    return `${this.api}${signedURL.startsWith(\"/\") ? \"\" : \"/\"}${signedURL}`;\n  }\n\n  /** The object name an upload with `options.id` is stored under: `<path>/<id>.<ext>`. */\n  pathFor(options: UploadOptions & { id: string }): string {\n    const ext = options.filename.includes(\".\") ? options.filename.split(\".\").pop()! : \"\";\n    const filename = ext ? `${options.id}.${ext}` : options.id;\n    return options.path ? `${options.path}/${filename}` : filename;\n  }\n\n  /** The object at `path` (`GET /object/info`), or `null` if it does not exist. */\n  async head(path: string, options?: OperationOptions): Promise<StoredObject<SupabaseMeta> | null> {\n    const res = await fetchWithAbort(this.objectUrl(\"object/info\", path), {\n      headers: this.headers,\n      signal: options?.signal ?? null,\n    });\n    if (!res.ok) {\n      const error = await supabaseError(\"Supabase info failed\", res);\n      if (error.code === \"not-found\") return null;\n      throw error;\n    }\n    const info = (await res.json()) as ObjectInfo;\n    const name = path.split(\"/\").pop() ?? path;\n    const token = info.metadata?.[TOKEN_KEY];\n    return {\n      id: name.includes(\".\") ? name.slice(0, name.lastIndexOf(\".\")) : name,\n      url: `${this.baseUrl}/${urlEncodePath(path)}`,\n      path,\n      size: Number(info.size ?? 0),\n      meta: { bucket: this.bucket, ...(info.etag ? { etag: info.etag } : {}) },\n      ...(token ? { uploadToken: token } : {}),\n      ...(info.last_modified ? { lastModified: new Date(info.last_modified) } : {}),\n      ...(info.content_type ? { contentType: info.content_type } : {}),\n    };\n  }\n\n  private objectUrl(route: string, path: string): string {\n    return `${this.api}/${route}/${encodeURIComponent(this.bucket)}/${urlEncodePath(path)}`;\n  }\n}\n\n/** `fetch` that converts non-abort failures into a typed `network` error,\n * while letting aborts (`AbortError`) pass through untouched. */\nasync function fetchWithAbort(url: string | URL, init: RequestInit): Promise<Response> {\n  try {\n    return await fetch(url, init);\n  } catch (err) {\n    if (isAbortError(err)) throw err;\n    const cause = err instanceof Error ? err : new Error(String(err));\n    throw new StorageError(\"network\", `${PROVIDER} network error: ${cause.message}`, { provider: PROVIDER, cause });\n  }\n}\n\nasync function supabaseError(prefix: string, res: Response): Promise<StorageError> {\n  const body = await res.text().catch(() => \"\");\n  return new StorageError(\n    classifySupabaseError(res.status, body),\n    `${prefix}: ${res.status} ${res.statusText}${body ? `: ${body}` : \"\"}`,\n    { statusCode: res.status, provider: PROVIDER },\n  );\n}\n\nfunction base64(value: string): string {\n  let binary = \"\";\n  for (const byte of new TextEncoder().encode(value)) binary += String.fromCharCode(byte);\n  return btoa(binary);\n}\n\nfunction concatBytes(chunks: Uint8Array[], total: number): Uint8Array {\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return out;\n}\n"],"mappings":";AASO,SAAS,sBAAsB,QAAgB,MAAgC;AACpF,MAAI,SAA6E,CAAC;AAClF,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AAAA,EAER;AACA,QAAM,OAAO,GAAG,OAAO,SAAS,EAAE,IAAI,OAAO,WAAW,EAAE,IAAI,OAAO,UAAU,SAAY,OAAO,EAAE,GAAG,YAAY;AACnH,QAAM,OAAO,OAAO,OAAO,cAAc,MAAM;AAE/C,MAAI,KAAK,SAAS,kBAAkB,EAAG,QAAO;AAC9C,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,SAAS,EAAG,QAAO;AACjG,MAAI,KAAK,SAAS,mCAAmC,KAAK,KAAK,SAAS,mBAAmB,KAAK,SAAS,KAAK;AAC5G,WAAO;AAAA,EACT;AACA,MAAI,SAAS,OAAO,SAAS,OAAO,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,cAAc,KAAK,KAAK,SAAS,oBAAoB,GAAG;AAChI,WAAO;AAAA,EACT;AACA,MAAI,SAAS,OAAO,KAAK,SAAS,mBAAmB,EAAG,QAAO;AAC/D,MAAI,SAAS,IAAK,QAAO;AACzB,SAAO;AACT;;;AC5BA,SAAS,uBAAuB,iBAAiB,eAAe,YAAY,cAAc,oBAAoB;AAE9G,IAAM,aAAa,MAAM,WAAW,OAAO,WAAW;AACtD,IAAM,WAAW;AAGjB,IAAM,iBAAiB,IAAI,OAAO;AAClC,IAAM,cAAc;AACpB,IAAM,yBAAyB;AAE/B,IAAM,YAAY;AAElB,IAAM,oBAAoB;AAmCnB,IAAM,iBAAN,MAAyD;AAAA,EACrD,OAAO;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA8B;AACxC,QAAI,CAAC,OAAO,OAAO,CAAC,OAAO,OAAO,CAAC,OAAO,QAAQ;AAChD,YAAM,IAAI,aAAa,UAAU,+CAA+C,EAAE,UAAU,SAAS,CAAC;AAAA,IACxG;AACA,SAAK,MAAM,GAAG,OAAO,IAAI,QAAQ,QAAQ,EAAE,CAAC;AAC5C,SAAK,SAAS,OAAO;AACrB,SAAK,WAAW,OAAO,WAAW,GAAG,KAAK,GAAG,kBAAkB,OAAO,MAAM,IAAI,QAAQ,QAAQ,EAAE;AAGlG,UAAM,SAAS,OAAO,gBAAgB,OAAO,IAAI,WAAW,KAAK,IAAI,OAAO,MAAM;AAClF,SAAK,UAAU,EAAE,QAAQ,OAAO,KAAK,GAAI,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG,IAAI,CAAC,EAAG;AAC9F,SAAK,eAAe,OAAO;AAC3B,SAAK,eAAe,WAAW,OAAO,gBAAgB,IAAI;AAAA,EAC5D;AAAA,EAEA,MAAM,OACJ,QACA,SACA,SACqC;AACrC,0BAAsB,OAAO;AAC7B,QAAI,KAAK,iBAAiB,UAAa,QAAQ,SAAS,UAAa,QAAQ,OAAO,KAAK,cAAc;AACrG,YAAM,IAAI,aAAa,iBAAiB,aAAa,QAAQ,IAAI,yBAAyB,KAAK,YAAY,IAAI,EAAE,UAAU,SAAS,CAAC;AAAA,IACvI;AAEA,UAAM,KAAK,QAAQ,MAAM,WAAW;AACpC,UAAM,OAAO,KAAK,QAAQ,EAAE,GAAG,SAAS,GAAG,CAAC;AAC5C,UAAM,cAAc,QAAQ,YAAY;AACxC,UAAM,WAAW,EAAE,GAAG,QAAQ,UAAU,GAAI,SAAS,cAAc,EAAE,CAAC,SAAS,GAAG,QAAQ,YAAY,IAAI,CAAC,EAAG;AAC9G,UAAM,SAAS,QAAQ;AAEvB,UAAM,SAAS,OAAO,UAAU;AAChC,QAAI,UAAU,QAAQ,WAAW;AACjC,UAAM,UAAU,MAAM;AACpB,gBAAU;AAEV,aAAO,OAAO,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAChC;AACA,QAAI,UAAU,CAAC,QAAS,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAEhF,QAAI,aAAa;AACjB,UAAM,OAAO,YAA6C;AACxD,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,QAAS,OAAM,WAAW,gBAAgB;AAC9C,UAAI,KAAM,QAAO;AACjB,oBAAc,MAAM;AACpB,UAAI,KAAK,iBAAiB,UAAa,aAAa,KAAK,cAAc;AACrE,cAAM,IAAI,aAAa,iBAAiB,+BAA+B,KAAK,YAAY,IAAI,EAAE,UAAU,SAAS,CAAC;AAAA,MACpH;AACA,aAAO;AAAA,IACT;AACA,UAAM,YAAY,MAAM;AACtB,UAAI,QAAQ,SAAS,UAAa,eAAe,QAAQ,MAAM;AAC7D,cAAM,IAAI,gBAAgB,oBAAoB,UAAU,oBAAoB,QAAQ,IAAI,EAAE;AAAA,MAC5F;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,UAAI;AAEJ,UAAI,QAAQ,SAAS,UAAa,QAAQ,OAAO,gBAAgB;AAE/D,iBAAS,MAAM,KAAK,gBAAgB,MAAM,QAAQ,MAAM,aAAa,UAAU,MAAM;AACrF,YAAI,SAAuB,CAAC;AAC5B,YAAI,cAAc;AAClB,YAAI,SAAS;AACb,eAAO,MAAM;AACX,gBAAM,QAAQ,MAAM,KAAK;AACzB,cAAI,aAAa,QAAQ,KAAM,WAAU;AACzC,cAAI,OAAO;AACT,mBAAO,KAAK,KAAK;AACjB,2BAAe,MAAM;AAAA,UACvB;AACA,iBAAO,eAAe,kBAAmB,CAAC,SAAS,cAAc,GAAI;AACnE,gBAAI,CAAC,MAAO,WAAU;AACtB,kBAAM,SAAS,YAAY,QAAQ,WAAW;AAC9C,kBAAM,OAAO,KAAK,IAAI,gBAAgB,WAAW;AACjD,qBAAS,MAAM,KAAK,SAAS,QAAQ,OAAO,SAAS,GAAG,IAAI,GAAG,QAAQ,MAAM;AAC7E,kBAAM,OAAO,OAAO,SAAS,IAAI;AACjC,qBAAS,CAAC,IAAI;AACd,0BAAc,KAAK;AAAA,UACrB;AACA,cAAI,CAAC,MAAO;AAAA,QACd;AACA,kBAAU;AAAA,MACZ,OAAO;AAEL,cAAM,QAAsB,CAAC;AAC7B,YAAI,WAAW;AACf,YAAI,QAAQ;AACZ,eAAO,YAAY,gBAAgB;AACjC,gBAAM,QAAQ,MAAM,KAAK;AACzB,cAAI,CAAC,OAAO;AACV,oBAAQ;AACR;AAAA,UACF;AACA,gBAAM,KAAK,KAAK;AAChB,sBAAY,MAAM;AAAA,QACpB;AACA,cAAM,OAAO,YAAY,OAAO,QAAQ;AAExC,YAAI,OAAO;AACT,oBAAU;AACV,iBAAO,MAAM,KAAK,eAAe,MAAM,MAAM,aAAa,UAAU,MAAM;AAAA,QAC5E,OAAO;AAEL,oBAAU;AAGV,gBAAM,YAAmC,CAAC;AAC1C,gBAAM,OAAO,IAAI,eAA2B;AAAA,YAC1C,MAAM,YAAY;AAChB,yBAAW,QAAQ,IAAI;AAAA,YACzB;AAAA,YACA,MAAM,KAAK,YAAY;AACrB,kBAAI;AACF,sBAAM,QAAQ,MAAM,KAAK;AACzB,oBAAI,MAAO,YAAW,QAAQ,KAAK;AAAA,oBAC9B,YAAW,MAAM;AAAA,cACxB,SAAS,KAAK;AACZ,0BAAU,UAAU;AACpB,2BAAW,MAAM,GAAG;AAAA,cACtB;AAAA,YACF;AAAA,YACA,OAAO,QAAQ;AACb,qBAAO,OAAO,OAAO,MAAM;AAAA,YAC7B;AAAA,UACF,CAAC;AACD,cAAI;AACF,mBAAO,MAAM,KAAK,eAAe,MAAM,MAAM,aAAa,UAAU,MAAM;AAAA,UAC5E,SAAS,KAAK;AAEZ,gBAAI,UAAU,QAAS,OAAM,UAAU;AACvC,kBAAM;AAAA,UACR;AACA,oBAAU;AAAA,QACZ;AAAA,MACF;AAEA,aAAO;AAAA,QACL;AAAA,QACA,KAAK,GAAG,KAAK,OAAO,IAAI,cAAc,IAAI,CAAC;AAAA,QAC3C;AAAA,QACA,MAAM;AAAA,QACN,MAAM,EAAE,QAAQ,KAAK,QAAQ,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG;AAAA,MACzD;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,OAAO,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC9B,UAAI,QAAQ;AAEV,cAAM,MAAM,QAAQ,EAAE,QAAQ,UAAU,SAAS,EAAE,GAAG,KAAK,SAAS,iBAAiB,YAAY,EAAE,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACtH;AACA,YAAM;AAAA,IACR,UAAE;AACA,cAAQ,oBAAoB,SAAS,OAAO;AAAA,IAC9C;AAAA,EACF;AAAA;AAAA,EAGA,MAAc,eACZ,MACA,MACA,aACA,UACA,QAC6B;AAC7B,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,UAAU,IAAI,GAAG;AAAA,MAC/D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG,KAAK;AAAA,QACR,gBAAgB;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,YAAY;AAAA,QACZ,cAAc,OAAO,KAAK,UAAU,QAAQ,CAAC;AAAA,MAC/C;AAAA,MACA;AAAA;AAAA;AAAA,MAGA,QAAQ;AAAA,MACR,QAAQ,UAAU;AAAA,IACpB,CAAgB;AAChB,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,0BAA0B,GAAG;AACpE,WAAO,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EACpC;AAAA;AAAA,EAGA,MAAc,gBACZ,MACA,MACA,aACA,UACA,QACiB;AACjB,UAAM,WAAW,GAAG,KAAK,GAAG;AAC5B,UAAM,iBAAiB;AAAA,MACrB,YAAY,KAAK;AAAA,MACjB,YAAY;AAAA,MACZ;AAAA,MACA,cAAc,KAAK,aAAa,QAAQ,YAAY,EAAE;AAAA,MACtD,UAAU,KAAK,UAAU,QAAQ;AAAA,IACnC;AACA,UAAM,MAAM,MAAM,eAAe,UAAU;AAAA,MACzC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG,KAAK;AAAA,QACR,iBAAiB;AAAA,QACjB,iBAAiB,OAAO,IAAI;AAAA,QAC5B,mBAAmB,OAAO,QAAQ,cAAc,EAC7C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,EACnC,KAAK,GAAG;AAAA,QACX,YAAY;AAAA,MACd;AAAA,MACA,QAAQ,UAAU;AAAA,IACpB,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,2CAA2C,GAAG;AACrF,UAAM,WAAW,IAAI,QAAQ,IAAI,UAAU;AAC3C,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,aAAa,kBAAkB,yDAAyD,EAAE,UAAU,SAAS,CAAC;AAAA,IAC1H;AACA,WAAO,IAAI,IAAI,UAAU,QAAQ,EAAE;AAAA,EACrC;AAAA;AAAA;AAAA,EAIA,MAAc,SAAS,KAAa,OAAmB,QAAgB,QAAkD;AACvH,UAAM,MAAM,SAAS,MAAM;AAC3B,QAAI,UAAU;AACd,aAAS,UAAU,GAAG,WAAW,qBAAqB,UAAU,KAAK,WAAW;AAC9E,YAAM,MAAM,MAAM,eAAe,KAAK;AAAA,QACpC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,GAAG,KAAK;AAAA,UACR,iBAAiB;AAAA,UACjB,iBAAiB,OAAO,OAAO;AAAA,UAC/B,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,MAAM,SAAS,UAAU,MAAM;AAAA,QACrC,QAAQ,UAAU;AAAA,MACpB,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,0CAA0C,GAAG;AACpF,YAAM,OAAO,OAAO,IAAI,QAAQ,IAAI,eAAe,KAAK,GAAG;AAC3D,UAAI,OAAO,QAAS;AACpB,gBAAU;AAAA,IACZ;AACA,QAAI,UAAU,KAAK;AACjB,YAAM,IAAI,aAAa,kBAAkB,6CAA6C,EAAE,UAAU,SAAS,CAAC;AAAA,IAC9G;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,OAAO,MAAc,SAA2C;AACpE,UAAM,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,WAAW,mBAAmB,KAAK,MAAM,CAAC,IAAI;AAAA,MACxF,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,SAAS,gBAAgB,mBAAmB;AAAA,MAC/D,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;AAAA,MACzC,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,0BAA0B,GAAG;AAAA,EACtE;AAAA,EAEA,MAAM,OAAO,MAAc,UAA8C;AACvE,WAAO,GAAG,KAAK,OAAO,IAAI,cAAc,IAAI,CAAC;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAM,IAAI,MAAc,SAAiE;AACvF,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,wBAAwB,IAAI,GAAG;AAAA,MAC7E,SAAS,KAAK;AAAA,MACd,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,uBAAuB,GAAG;AACjE,QAAI,CAAC,IAAI,MAAM;AACb,YAAM,IAAI,aAAa,kBAAkB,0CAA0C,EAAE,UAAU,SAAS,CAAC;AAAA,IAC3G;AACA,WAAO,IAAI;AAAA,EACb;AAAA;AAAA,EAGA,MAAM,gBAAgB,MAAc,SAAgD;AAClF,UAAM,YAAY,SAAS,aAAa;AACxC,QAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AACjD,YAAM,IAAI,gBAAgB,wDAAwD;AAAA,IACpF;AACA,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,eAAe,IAAI,GAAG;AAAA,MACpE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,SAAS,gBAAgB,mBAAmB;AAAA,MAC/D,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MAClC,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,cAAc,wBAAwB,GAAG;AAClE,UAAM,EAAE,UAAU,IAAK,MAAM,IAAI,KAAK;AACtC,QAAI,CAAC,WAAW;AACd,YAAM,IAAI,aAAa,kBAAkB,uCAAuC,EAAE,UAAU,SAAS,CAAC;AAAA,IACxG;AACA,WAAO,GAAG,KAAK,GAAG,GAAG,UAAU,WAAW,GAAG,IAAI,KAAK,GAAG,GAAG,SAAS;AAAA,EACvE;AAAA;AAAA,EAGA,QAAQ,SAAiD;AACvD,UAAM,MAAM,QAAQ,SAAS,SAAS,GAAG,IAAI,QAAQ,SAAS,MAAM,GAAG,EAAE,IAAI,IAAK;AAClF,UAAM,WAAW,MAAM,GAAG,QAAQ,EAAE,IAAI,GAAG,KAAK,QAAQ;AACxD,WAAO,QAAQ,OAAO,GAAG,QAAQ,IAAI,IAAI,QAAQ,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,MAAM,KAAK,MAAc,SAAwE;AAC/F,UAAM,MAAM,MAAM,eAAe,KAAK,UAAU,eAAe,IAAI,GAAG;AAAA,MACpE,SAAS,KAAK;AAAA,MACd,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,QAAQ,MAAM,cAAc,wBAAwB,GAAG;AAC7D,UAAI,MAAM,SAAS,YAAa,QAAO;AACvC,YAAM;AAAA,IACR;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,UAAM,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,KAAK;AACtC,UAAM,QAAQ,KAAK,WAAW,SAAS;AACvC,WAAO;AAAA,MACL,IAAI,KAAK,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC,IAAI;AAAA,MAChE,KAAK,GAAG,KAAK,OAAO,IAAI,cAAc,IAAI,CAAC;AAAA,MAC3C;AAAA,MACA,MAAM,OAAO,KAAK,QAAQ,CAAC;AAAA,MAC3B,MAAM,EAAE,QAAQ,KAAK,QAAQ,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC,EAAG;AAAA,MACvE,GAAI,QAAQ,EAAE,aAAa,MAAM,IAAI,CAAC;AAAA,MACtC,GAAI,KAAK,gBAAgB,EAAE,cAAc,IAAI,KAAK,KAAK,aAAa,EAAE,IAAI,CAAC;AAAA,MAC3E,GAAI,KAAK,eAAe,EAAE,aAAa,KAAK,aAAa,IAAI,CAAC;AAAA,IAChE;AAAA,EACF;AAAA,EAEQ,UAAU,OAAe,MAAsB;AACrD,WAAO,GAAG,KAAK,GAAG,IAAI,KAAK,IAAI,mBAAmB,KAAK,MAAM,CAAC,IAAI,cAAc,IAAI,CAAC;AAAA,EACvF;AACF;AAIA,eAAe,eAAe,KAAmB,MAAsC;AACrF,MAAI;AACF,WAAO,MAAM,MAAM,KAAK,IAAI;AAAA,EAC9B,SAAS,KAAK;AACZ,QAAI,aAAa,GAAG,EAAG,OAAM;AAC7B,UAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,UAAM,IAAI,aAAa,WAAW,GAAG,QAAQ,mBAAmB,MAAM,OAAO,IAAI,EAAE,UAAU,UAAU,MAAM,CAAC;AAAA,EAChH;AACF;AAEA,eAAe,cAAc,QAAgB,KAAsC;AACjF,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,SAAO,IAAI;AAAA,IACT,sBAAsB,IAAI,QAAQ,IAAI;AAAA,IACtC,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,IAAI,UAAU,GAAG,OAAO,KAAK,IAAI,KAAK,EAAE;AAAA,IACpE,EAAE,YAAY,IAAI,QAAQ,UAAU,SAAS;AAAA,EAC/C;AACF;AAEA,SAAS,OAAO,OAAuB;AACrC,MAAI,SAAS;AACb,aAAW,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,EAAG,WAAU,OAAO,aAAa,IAAI;AACtF,SAAO,KAAK,MAAM;AACpB;AAEA,SAAS,YAAY,QAAsB,OAA2B;AACpE,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,QAAI,IAAI,OAAO,MAAM;AACrB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,48 @@
 {
   "name": "@fileway/supabase",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.5.0",
+  "license": "MIT",
+  "keywords": [
+    "fileway",
+    "file-upload",
+    "storage",
+    "supabase",
+    "supabase-storage",
+    "tus",
+    "stream"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Goldenhub/fileway.git"
+  },
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "worker": "./dist/index.js",
+      "deno": "./dist/index.js",
+      "bun": "./dist/index.js",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@fileway/core": "0.5.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^1.6.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run"
+  }
 }