@graffiti-garden/implementation-decentralized 0.1.1 → 0.1.3

package/dist/cjs/index.spec.js

@@ -6,6 +6,7 @@ var import_storage_buckets = require("./1-services/3-storage-buckets");
 var import_inboxes = require("./1-services/4-inboxes");
 var import_sessions = require("./3-protocol/1-sessions");
 var import_vitest = require("vitest");
+var import_dag_cbor = require("@ipld/dag-cbor");
 var import_handles = require("./3-protocol/2-handles");
 var import_dids_tests = require("./1-services/2-dids-tests");
 var import_storage_buckets_tests = require("./1-services/3-storage-buckets-tests");
@@ -80,6 +81,94 @@ var import_environment = require("../test/environment");
     () => sessions[0],
     () => sessions[1]
   );
+  (0, import_vitest.test)("OAuth codes require approval from the selected account", async () => {
+    const account = import_environment.decentralizedTestUsers[0];
+    const redirectUri = "https://client.example/callback";
+    const endpoint = "https://localhost:5173/app/oauth/authorize";
+    const cookie = `account_${account.accountId}=${account.token}`;
+    const headers = {
+      Cookie: cookie,
+      "X-Graffiti-Account": String(account.accountId),
+      "Content-Type": "application/json",
+      Origin: "https://localhost:5173"
+    };
+    const request = (scope, requestHeaders = headers) => fetch(endpoint, {
+      method: "POST",
+      headers: requestHeaders,
+      body: JSON.stringify({ redirect_uri: redirectUri, state: "test-state", scope })
+    });
+    const navigation = await fetch(
+      `${endpoint}?account=${account.accountId}&redirect_uri=${encodeURIComponent(redirectUri)}`,
+      { headers: { Cookie: cookie } }
+    );
+    (0, import_vitest.expect)(navigation.status).toBe(404);
+    (0, import_vitest.expect)((await request([account.bucketEndpoint], { Cookie: cookie })).status).toBe(401);
+    (0, import_vitest.expect)((await request([account.bucketEndpoint], {
+      ...headers,
+      Origin: "https://attacker.example"
+    })).status).toBe(403);
+    (0, import_vitest.expect)((await request([import_environment.decentralizedTestUsers[1].bucketEndpoint])).status).toBe(403);
+    const approval = await request([account.bucketEndpoint]);
+    (0, import_vitest.expect)(approval.status).toBe(200);
+    const { redirectUri: callback } = await approval.json();
+    const code = new URL(callback).searchParams.get("code");
+    (0, import_vitest.expect)(code).toBeTruthy();
+    (0, import_vitest.expect)(new URL(callback).searchParams.get("state")).toBe("test-state");
+    const exchange = await fetch("https://localhost:5173/app/oauth/token", {
+      method: "POST",
+      body: new URLSearchParams({ code, redirect_uri: redirectUri })
+    });
+    (0, import_vitest.expect)(exchange.status).toBe(200);
+    (0, import_vitest.expect)((await exchange.json()).access_token).toBeTypeOf("string");
+  });
+  (0, import_vitest.test)("deleting a bucket removes its values and rejects requests to its old URL", async () => {
+    const account = import_environment.decentralizedTestUsers[0];
+    const smallKey = crypto.randomUUID();
+    const largeKey = crypto.randomUUID();
+    const largeValue = new Uint8Array(32 * 1024 + 1).fill(7);
+    const authorization = { Authorization: `Bearer ${account.token}` };
+    for (const [key, value] of [
+      [smallKey, new Uint8Array([1, 2, 3])],
+      [largeKey, largeValue]
+    ]) {
+      const response = await fetch(`${account.bucketEndpoint}/value/${key}`, {
+        method: "PUT",
+        headers: authorization,
+        body: value
+      });
+      (0, import_vitest.expect)(response.status).toBe(201);
+    }
+    const r2Key = `${account.bucketId}/${largeKey}`;
+    (0, import_vitest.expect)(await environment.storedR2ObjectExists(r2Key)).toBe(true);
+    const deletion = await fetch(
+      `https://localhost:5173/app/service-instances/bucket/service/${account.bucketId}`,
+      {
+        method: "DELETE",
+        headers: {
+          Cookie: `account_${account.accountId}=${account.token}`,
+          "X-Graffiti-Account": String(account.accountId)
+        }
+      }
+    );
+    (0, import_vitest.expect)(deletion.status).toBe(200);
+    (0, import_vitest.expect)(await environment.storedR2ObjectExists(r2Key)).toBe(false);
+    for (const key of [smallKey, largeKey]) {
+      const response = await fetch(`${account.bucketEndpoint}/value/${key}`);
+      (0, import_vitest.expect)(response.status).toBe(404);
+    }
+    const batch = await fetch(`${account.bucketEndpoint}/values`, {
+      method: "POST",
+      headers: { "Content-Type": "application/cbor" },
+      body: (0, import_dag_cbor.encode)({ keys: [smallKey, largeKey], maxValueBytes: largeValue.length }).slice()
+    });
+    (0, import_vitest.expect)((0, import_dag_cbor.decode)(await batch.arrayBuffer()).results).toEqual([{ status: 404 }, { status: 404 }]);
+    const putAfterDeletion = await fetch(`${account.bucketEndpoint}/value/${smallKey}`, {
+      method: "PUT",
+      headers: authorization,
+      body: new Uint8Array([4])
+    });
+    (0, import_vitest.expect)(putAfterDeletion.status).toBe(404);
+  });
   async function login(handle) {
     const actor = await handleMethods.handleToActor(handle);
     return await new Promise((resolve, reject) => {

package/dist/cjs/index.spec.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/index.spec.ts"],
-  "sourcesContent": ["import type {\n  GraffitiLoginEvent,\n  GraffitiLogoutEvent,\n  GraffitiSession,\n} from \"@graffiti-garden/api\";\nimport {\n  graffitiCRUDTests,\n  graffitiDiscoverTests,\n  graffitiMediaTests,\n} from \"@graffiti-garden/api/tests\";\nimport { DecentralizedIdentifiers } from \"./1-services/2-dids\";\nimport { Authorization } from \"./1-services/1-authorization\";\nimport { StorageBuckets } from \"./1-services/3-storage-buckets\";\nimport { Inboxes } from \"./1-services/4-inboxes\";\nimport { Sessions } from \"./3-protocol/1-sessions\";\nimport { afterAll, beforeAll, describe } from \"vitest\";\nimport { Handles } from \"./3-protocol/2-handles\";\nimport { didTests } from \"./1-services/2-dids-tests\";\nimport { storageBucketTests } from \"./1-services/3-storage-buckets-tests\";\nimport { inboxTests } from \"./1-services/4-inboxes-tests\";\nimport { stringEncodingTests } from \"./2-primitives/1-string-encoding-tests\";\nimport { contentAddressesTests } from \"./2-primitives/2-content-addresses-tests\";\nimport { channelAttestationTests } from \"./2-primitives/3-channel-attestations-tests\";\nimport { allowedAttestationTests } from \"./2-primitives/4-allowed-attestations-tests\";\nimport { handleTests } from \"./3-protocol/2-handles-tests\";\nimport { objectEncodingTests } from \"./3-protocol/3-object-encoding-tests\";\nimport { GraffitiDecentralized } from \"./3-protocol/4-graffiti\";\nimport {\n  DecentralizedTestEnvironment,\n  decentralizedSharedInbox,\n  decentralizedTestUsers,\n} from \"../test/environment\";\n\ndescribe(\"GraffitiDecentralized Tests\", () => {\n  const environment = new DecentralizedTestEnvironment();\n  const handles = decentralizedTestUsers.map((user) => user.handle);\n  let sessions: GraffitiSession[] = [];\n  let sessionMethods: Sessions;\n  let handleMethods: Handles;\n\n  beforeAll(async () => {\n    await environment.start();\n\n    const dids = new DecentralizedIdentifiers();\n    sessionMethods = new Sessions({\n      dids,\n      authorization: new Authorization(),\n      inboxes: new Inboxes(),\n      storageBuckets: new StorageBuckets(),\n    });\n    handleMethods = new Handles({ dids });\n\n    for (const handle of handles) {\n      sessions.push(await login(handle));\n    }\n  });\n\n  afterAll(async () => {\n    try {\n      for (const session of sessions) {\n        await logout(session.actor);\n      }\n    } finally {\n      await environment.stop();\n    }\n  });\n\n  // Service tests\n  didTests();\n  storageBucketTests(\n    decentralizedTestUsers[0].bucketEndpoint,\n    decentralizedTestUsers[0].token,\n  );\n  inboxTests(\n    decentralizedTestUsers[0].inboxEndpoint,\n    decentralizedTestUsers[0].token,\n  );\n\n  // Primitive tests\n  stringEncodingTests();\n  contentAddressesTests();\n  channelAttestationTests();\n  allowedAttestationTests();\n\n  // Protocol tests\n  handleTests(handles[0]);\n  objectEncodingTests();\n\n  const useGraffiti = () =>\n    new GraffitiDecentralized({\n      defaultInboxEndpoints: [decentralizedSharedInbox],\n    });\n  graffitiCRUDTests(\n    useGraffiti,\n    () => sessions[0],\n    () => sessions[1],\n  );\n  graffitiMediaTests(\n    useGraffiti,\n    () => sessions[0],\n    () => sessions[1],\n  );\n  graffitiDiscoverTests(\n    useGraffiti,\n    () => sessions[0],\n    () => sessions[1],\n  );\n\n  // How to log in/out vvv\n  async function login(handle: string) {\n    const actor = await handleMethods.handleToActor(handle);\n\n    return await new Promise<GraffitiSession>((resolve, reject) => {\n      let timeout: ReturnType<typeof setTimeout>;\n      const cleanup = () => {\n        clearTimeout(timeout);\n        sessionMethods.sessionEvents.removeEventListener(\"login\", listener);\n      };\n      const listener = (e: unknown) => {\n        if (!(e instanceof CustomEvent)) return;\n        const detail = e.detail as GraffitiLoginEvent[\"detail\"];\n        if (detail.session?.actor !== actor) return;\n        cleanup();\n        if (detail.error) {\n          reject(detail.error);\n        } else {\n          resolve(detail.session);\n        }\n      };\n      sessionMethods.sessionEvents.addEventListener(\"login\", listener);\n\n      timeout = setTimeout(\n        () => {\n          cleanup();\n          reject(new Error(\"Authorization timed out\"));\n        },\n        30 * 1000,\n      );\n\n      void sessionMethods.login(actor);\n    });\n  }\n\n  async function logout(actor: string) {\n    return await new Promise<void>((resolve, reject) => {\n      let timeout: ReturnType<typeof setTimeout>;\n      const cleanup = () => {\n        clearTimeout(timeout);\n        sessionMethods.sessionEvents.removeEventListener(\"logout\", listener);\n      };\n      const listener = (e: unknown) => {\n        if (!(e instanceof CustomEvent)) return;\n        const detail = e.detail as GraffitiLogoutEvent[\"detail\"];\n        if (detail.actor !== actor) return;\n        cleanup();\n\n        if (detail.error) {\n          reject(detail.error);\n        } else {\n          resolve();\n        }\n      };\n      sessionMethods.sessionEvents.addEventListener(\"logout\", listener);\n\n      timeout = setTimeout(\n        () => {\n          cleanup();\n          reject(new Error(\"Logout timed out\"));\n        },\n        30 * 1000,\n      );\n\n      void sessionMethods.logout(actor);\n    });\n  }\n});\n"],
-  "mappings": ";AAKA,mBAIO;AACP,kBAAyC;AACzC,2BAA8B;AAC9B,6BAA+B;AAC/B,qBAAwB;AACxB,sBAAyB;AACzB,oBAA8C;AAC9C,qBAAwB;AACxB,wBAAyB;AACzB,mCAAmC;AACnC,2BAA2B;AAC3B,mCAAoC;AACpC,qCAAsC;AACtC,wCAAwC;AACxC,wCAAwC;AACxC,2BAA4B;AAC5B,mCAAoC;AACpC,sBAAsC;AACtC,yBAIO;AAAA,IAEP,wBAAS,+BAA+B,MAAM;AAC5C,QAAM,cAAc,IAAI,gDAA6B;AACrD,QAAM,UAAU,0CAAuB,IAAI,CAAC,SAAS,KAAK,MAAM;AAChE,MAAI,WAA8B,CAAC;AACnC,MAAI;AACJ,MAAI;AAEJ,+BAAU,YAAY;AACpB,UAAM,YAAY,MAAM;AAExB,UAAM,OAAO,IAAI,qCAAyB;AAC1C,qBAAiB,IAAI,yBAAS;AAAA,MAC5B;AAAA,MACA,eAAe,IAAI,mCAAc;AAAA,MACjC,SAAS,IAAI,uBAAQ;AAAA,MACrB,gBAAgB,IAAI,sCAAe;AAAA,IACrC,CAAC;AACD,oBAAgB,IAAI,uBAAQ,EAAE,KAAK,CAAC;AAEpC,eAAW,UAAU,SAAS;AAC5B,eAAS,KAAK,MAAM,MAAM,MAAM,CAAC;AAAA,IACnC;AAAA,EACF,CAAC;AAED,8BAAS,YAAY;AACnB,QAAI;AACF,iBAAW,WAAW,UAAU;AAC9B,cAAM,OAAO,QAAQ,KAAK;AAAA,MAC5B;AAAA,IACF,UAAE;AACA,YAAM,YAAY,KAAK;AAAA,IACzB;AAAA,EACF,CAAC;AAGD,kCAAS;AACT;AAAA,IACE,0CAAuB,CAAC,EAAE;AAAA,IAC1B,0CAAuB,CAAC,EAAE;AAAA,EAC5B;AACA;AAAA,IACE,0CAAuB,CAAC,EAAE;AAAA,IAC1B,0CAAuB,CAAC,EAAE;AAAA,EAC5B;AAGA,wDAAoB;AACpB,4DAAsB;AACtB,iEAAwB;AACxB,iEAAwB;AAGxB,wCAAY,QAAQ,CAAC,CAAC;AACtB,wDAAoB;AAEpB,QAAM,cAAc,MAClB,IAAI,sCAAsB;AAAA,IACxB,uBAAuB,CAAC,2CAAwB;AAAA,EAClD,CAAC;AACH;AAAA,IACE;AAAA,IACA,MAAM,SAAS,CAAC;AAAA,IAChB,MAAM,SAAS,CAAC;AAAA,EAClB;AACA;AAAA,IACE;AAAA,IACA,MAAM,SAAS,CAAC;AAAA,IAChB,MAAM,SAAS,CAAC;AAAA,EAClB;AACA;AAAA,IACE;AAAA,IACA,MAAM,SAAS,CAAC;AAAA,IAChB,MAAM,SAAS,CAAC;AAAA,EAClB;AAGA,iBAAe,MAAM,QAAgB;AACnC,UAAM,QAAQ,MAAM,cAAc,cAAc,MAAM;AAEtD,WAAO,MAAM,IAAI,QAAyB,CAAC,SAAS,WAAW;AAC7D,UAAI;AACJ,YAAM,UAAU,MAAM;AACpB,qBAAa,OAAO;AACpB,uBAAe,cAAc,oBAAoB,SAAS,QAAQ;AAAA,MACpE;AACA,YAAM,WAAW,CAAC,MAAe;AAC/B,YAAI,EAAE,aAAa,aAAc;AACjC,cAAM,SAAS,EAAE;AACjB,YAAI,OAAO,SAAS,UAAU,MAAO;AACrC,gBAAQ;AACR,YAAI,OAAO,OAAO;AAChB,iBAAO,OAAO,KAAK;AAAA,QACrB,OAAO;AACL,kBAAQ,OAAO,OAAO;AAAA,QACxB;AAAA,MACF;AACA,qBAAe,cAAc,iBAAiB,SAAS,QAAQ;AAE/D,gBAAU;AAAA,QACR,MAAM;AACJ,kBAAQ;AACR,iBAAO,IAAI,MAAM,yBAAyB,CAAC;AAAA,QAC7C;AAAA,QACA,KAAK;AAAA,MACP;AAEA,WAAK,eAAe,MAAM,KAAK;AAAA,IACjC,CAAC;AAAA,EACH;AAEA,iBAAe,OAAO,OAAe;AACnC,WAAO,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,UAAI;AACJ,YAAM,UAAU,MAAM;AACpB,qBAAa,OAAO;AACpB,uBAAe,cAAc,oBAAoB,UAAU,QAAQ;AAAA,MACrE;AACA,YAAM,WAAW,CAAC,MAAe;AAC/B,YAAI,EAAE,aAAa,aAAc;AACjC,cAAM,SAAS,EAAE;AACjB,YAAI,OAAO,UAAU,MAAO;AAC5B,gBAAQ;AAER,YAAI,OAAO,OAAO;AAChB,iBAAO,OAAO,KAAK;AAAA,QACrB,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF;AACA,qBAAe,cAAc,iBAAiB,UAAU,QAAQ;AAEhE,gBAAU;AAAA,QACR,MAAM;AACJ,kBAAQ;AACR,iBAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACtC;AAAA,QACA,KAAK;AAAA,MACP;AAEA,WAAK,eAAe,OAAO,KAAK;AAAA,IAClC,CAAC;AAAA,EACH;AACF,CAAC;",
-  "names": []
+  "sourcesContent": ["import type {\n  GraffitiLoginEvent,\n  GraffitiLogoutEvent,\n  GraffitiSession,\n} from \"@graffiti-garden/api\";\nimport {\n  graffitiCRUDTests,\n  graffitiDiscoverTests,\n  graffitiMediaTests,\n} from \"@graffiti-garden/api/tests\";\nimport { DecentralizedIdentifiers } from \"./1-services/2-dids\";\nimport { Authorization } from \"./1-services/1-authorization\";\nimport { StorageBuckets } from \"./1-services/3-storage-buckets\";\nimport { Inboxes } from \"./1-services/4-inboxes\";\nimport { Sessions } from \"./3-protocol/1-sessions\";\nimport { afterAll, beforeAll, describe, expect, test } from \"vitest\";\nimport { decode as dagCborDecode, encode as dagCborEncode } from \"@ipld/dag-cbor\";\nimport { Handles } from \"./3-protocol/2-handles\";\nimport { didTests } from \"./1-services/2-dids-tests\";\nimport { storageBucketTests } from \"./1-services/3-storage-buckets-tests\";\nimport { inboxTests } from \"./1-services/4-inboxes-tests\";\nimport { stringEncodingTests } from \"./2-primitives/1-string-encoding-tests\";\nimport { contentAddressesTests } from \"./2-primitives/2-content-addresses-tests\";\nimport { channelAttestationTests } from \"./2-primitives/3-channel-attestations-tests\";\nimport { allowedAttestationTests } from \"./2-primitives/4-allowed-attestations-tests\";\nimport { handleTests } from \"./3-protocol/2-handles-tests\";\nimport { objectEncodingTests } from \"./3-protocol/3-object-encoding-tests\";\nimport { GraffitiDecentralized } from \"./3-protocol/4-graffiti\";\nimport {\n  DecentralizedTestEnvironment,\n  decentralizedSharedInbox,\n  decentralizedTestUsers,\n} from \"../test/environment\";\n\ndescribe(\"GraffitiDecentralized Tests\", () => {\n  const environment = new DecentralizedTestEnvironment();\n  const handles = decentralizedTestUsers.map((user) => user.handle);\n  let sessions: GraffitiSession[] = [];\n  let sessionMethods: Sessions;\n  let handleMethods: Handles;\n\n  beforeAll(async () => {\n    await environment.start();\n\n    const dids = new DecentralizedIdentifiers();\n    sessionMethods = new Sessions({\n      dids,\n      authorization: new Authorization(),\n      inboxes: new Inboxes(),\n      storageBuckets: new StorageBuckets(),\n    });\n    handleMethods = new Handles({ dids });\n\n    for (const handle of handles) {\n      sessions.push(await login(handle));\n    }\n  });\n\n  afterAll(async () => {\n    try {\n      for (const session of sessions) {\n        await logout(session.actor);\n      }\n    } finally {\n      await environment.stop();\n    }\n  });\n\n  // Service tests\n  didTests();\n  storageBucketTests(\n    decentralizedTestUsers[0].bucketEndpoint,\n    decentralizedTestUsers[0].token,\n  );\n  inboxTests(\n    decentralizedTestUsers[0].inboxEndpoint,\n    decentralizedTestUsers[0].token,\n  );\n\n  // Primitive tests\n  stringEncodingTests();\n  contentAddressesTests();\n  channelAttestationTests();\n  allowedAttestationTests();\n\n  // Protocol tests\n  handleTests(handles[0]);\n  objectEncodingTests();\n\n  const useGraffiti = () =>\n    new GraffitiDecentralized({\n      defaultInboxEndpoints: [decentralizedSharedInbox],\n    });\n  graffitiCRUDTests(\n    useGraffiti,\n    () => sessions[0],\n    () => sessions[1],\n  );\n  graffitiMediaTests(\n    useGraffiti,\n    () => sessions[0],\n    () => sessions[1],\n  );\n  graffitiDiscoverTests(\n    useGraffiti,\n    () => sessions[0],\n    () => sessions[1],\n  );\n\n  test(\"OAuth codes require approval from the selected account\", async () => {\n    const account = decentralizedTestUsers[0];\n    const redirectUri = \"https://client.example/callback\";\n    const endpoint = \"https://localhost:5173/app/oauth/authorize\";\n    const cookie = `account_${account.accountId}=${account.token}`;\n    const headers = {\n      Cookie: cookie,\n      \"X-Graffiti-Account\": String(account.accountId),\n      \"Content-Type\": \"application/json\",\n      Origin: \"https://localhost:5173\",\n    };\n    const request = (scope: string[], requestHeaders: HeadersInit = headers) =>\n      fetch(endpoint, {\n        method: \"POST\",\n        headers: requestHeaders,\n        body: JSON.stringify({ redirect_uri: redirectUri, state: \"test-state\", scope }),\n      });\n\n    const navigation = await fetch(\n      `${endpoint}?account=${account.accountId}&redirect_uri=${encodeURIComponent(redirectUri)}`,\n      { headers: { Cookie: cookie } },\n    );\n    expect(navigation.status).toBe(404);\n\n    expect((await request([account.bucketEndpoint], { Cookie: cookie })).status).toBe(401);\n    expect((await request([account.bucketEndpoint], {\n      ...headers,\n      Origin: \"https://attacker.example\",\n    })).status).toBe(403);\n    expect((await request([decentralizedTestUsers[1].bucketEndpoint])).status).toBe(403);\n\n    const approval = await request([account.bucketEndpoint]);\n    expect(approval.status).toBe(200);\n    const { redirectUri: callback } = await approval.json() as { redirectUri: string };\n    const code = new URL(callback).searchParams.get(\"code\");\n    expect(code).toBeTruthy();\n    expect(new URL(callback).searchParams.get(\"state\")).toBe(\"test-state\");\n\n    const exchange = await fetch(\"https://localhost:5173/app/oauth/token\", {\n      method: \"POST\",\n      body: new URLSearchParams({ code: code!, redirect_uri: redirectUri }),\n    });\n    expect(exchange.status).toBe(200);\n    expect((await exchange.json()).access_token).toBeTypeOf(\"string\");\n  });\n\n  test(\"deleting a bucket removes its values and rejects requests to its old URL\", async () => {\n    const account = decentralizedTestUsers[0];\n    const smallKey = crypto.randomUUID();\n    const largeKey = crypto.randomUUID();\n    const largeValue = new Uint8Array(32 * 1024 + 1).fill(7);\n    const authorization = { Authorization: `Bearer ${account.token}` };\n\n    for (const [key, value] of [\n      [smallKey, new Uint8Array([1, 2, 3])],\n      [largeKey, largeValue],\n    ] as const) {\n      const response = await fetch(`${account.bucketEndpoint}/value/${key}`, {\n        method: \"PUT\",\n        headers: authorization,\n        body: value,\n      });\n      expect(response.status).toBe(201);\n    }\n\n    const r2Key = `${account.bucketId}/${largeKey}`;\n    expect(await environment.storedR2ObjectExists(r2Key)).toBe(true);\n\n    const deletion = await fetch(\n      `https://localhost:5173/app/service-instances/bucket/service/${account.bucketId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          Cookie: `account_${account.accountId}=${account.token}`,\n          \"X-Graffiti-Account\": String(account.accountId),\n        },\n      },\n    );\n    expect(deletion.status).toBe(200);\n\n    expect(await environment.storedR2ObjectExists(r2Key)).toBe(false);\n    for (const key of [smallKey, largeKey]) {\n      const response = await fetch(`${account.bucketEndpoint}/value/${key}`);\n      expect(response.status).toBe(404);\n    }\n    const batch = await fetch(`${account.bucketEndpoint}/values`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/cbor\" },\n      body: dagCborEncode({ keys: [smallKey, largeKey], maxValueBytes: largeValue.length }).slice(),\n    });\n    expect((dagCborDecode(await batch.arrayBuffer()) as { results: { status: number }[] }).results)\n      .toEqual([{ status: 404 }, { status: 404 }]);\n\n    const putAfterDeletion = await fetch(`${account.bucketEndpoint}/value/${smallKey}`, {\n      method: \"PUT\",\n      headers: authorization,\n      body: new Uint8Array([4]),\n    });\n    expect(putAfterDeletion.status).toBe(404);\n  });\n\n  // How to log in/out vvv\n  async function login(handle: string) {\n    const actor = await handleMethods.handleToActor(handle);\n\n    return await new Promise<GraffitiSession>((resolve, reject) => {\n      let timeout: ReturnType<typeof setTimeout>;\n      const cleanup = () => {\n        clearTimeout(timeout);\n        sessionMethods.sessionEvents.removeEventListener(\"login\", listener);\n      };\n      const listener = (e: unknown) => {\n        if (!(e instanceof CustomEvent)) return;\n        const detail = e.detail as GraffitiLoginEvent[\"detail\"];\n        if (detail.session?.actor !== actor) return;\n        cleanup();\n        if (detail.error) {\n          reject(detail.error);\n        } else {\n          resolve(detail.session);\n        }\n      };\n      sessionMethods.sessionEvents.addEventListener(\"login\", listener);\n\n      timeout = setTimeout(\n        () => {\n          cleanup();\n          reject(new Error(\"Authorization timed out\"));\n        },\n        30 * 1000,\n      );\n\n      void sessionMethods.login(actor);\n    });\n  }\n\n  async function logout(actor: string) {\n    return await new Promise<void>((resolve, reject) => {\n      let timeout: ReturnType<typeof setTimeout>;\n      const cleanup = () => {\n        clearTimeout(timeout);\n        sessionMethods.sessionEvents.removeEventListener(\"logout\", listener);\n      };\n      const listener = (e: unknown) => {\n        if (!(e instanceof CustomEvent)) return;\n        const detail = e.detail as GraffitiLogoutEvent[\"detail\"];\n        if (detail.actor !== actor) return;\n        cleanup();\n\n        if (detail.error) {\n          reject(detail.error);\n        } else {\n          resolve();\n        }\n      };\n      sessionMethods.sessionEvents.addEventListener(\"logout\", listener);\n\n      timeout = setTimeout(\n        () => {\n          cleanup();\n          reject(new Error(\"Logout timed out\"));\n        },\n        30 * 1000,\n      );\n\n      void sessionMethods.logout(actor);\n    });\n  }\n});\n"],
+  "mappings": ";AAKA,mBAIO;AACP,kBAAyC;AACzC,2BAA8B;AAC9B,6BAA+B;AAC/B,qBAAwB;AACxB,sBAAyB;AACzB,oBAA4D;AAC5D,sBAAiE;AACjE,qBAAwB;AACxB,wBAAyB;AACzB,mCAAmC;AACnC,2BAA2B;AAC3B,mCAAoC;AACpC,qCAAsC;AACtC,wCAAwC;AACxC,wCAAwC;AACxC,2BAA4B;AAC5B,mCAAoC;AACpC,sBAAsC;AACtC,yBAIO;AAAA,IAEP,wBAAS,+BAA+B,MAAM;AAC5C,QAAM,cAAc,IAAI,gDAA6B;AACrD,QAAM,UAAU,0CAAuB,IAAI,CAAC,SAAS,KAAK,MAAM;AAChE,MAAI,WAA8B,CAAC;AACnC,MAAI;AACJ,MAAI;AAEJ,+BAAU,YAAY;AACpB,UAAM,YAAY,MAAM;AAExB,UAAM,OAAO,IAAI,qCAAyB;AAC1C,qBAAiB,IAAI,yBAAS;AAAA,MAC5B;AAAA,MACA,eAAe,IAAI,mCAAc;AAAA,MACjC,SAAS,IAAI,uBAAQ;AAAA,MACrB,gBAAgB,IAAI,sCAAe;AAAA,IACrC,CAAC;AACD,oBAAgB,IAAI,uBAAQ,EAAE,KAAK,CAAC;AAEpC,eAAW,UAAU,SAAS;AAC5B,eAAS,KAAK,MAAM,MAAM,MAAM,CAAC;AAAA,IACnC;AAAA,EACF,CAAC;AAED,8BAAS,YAAY;AACnB,QAAI;AACF,iBAAW,WAAW,UAAU;AAC9B,cAAM,OAAO,QAAQ,KAAK;AAAA,MAC5B;AAAA,IACF,UAAE;AACA,YAAM,YAAY,KAAK;AAAA,IACzB;AAAA,EACF,CAAC;AAGD,kCAAS;AACT;AAAA,IACE,0CAAuB,CAAC,EAAE;AAAA,IAC1B,0CAAuB,CAAC,EAAE;AAAA,EAC5B;AACA;AAAA,IACE,0CAAuB,CAAC,EAAE;AAAA,IAC1B,0CAAuB,CAAC,EAAE;AAAA,EAC5B;AAGA,wDAAoB;AACpB,4DAAsB;AACtB,iEAAwB;AACxB,iEAAwB;AAGxB,wCAAY,QAAQ,CAAC,CAAC;AACtB,wDAAoB;AAEpB,QAAM,cAAc,MAClB,IAAI,sCAAsB;AAAA,IACxB,uBAAuB,CAAC,2CAAwB;AAAA,EAClD,CAAC;AACH;AAAA,IACE;AAAA,IACA,MAAM,SAAS,CAAC;AAAA,IAChB,MAAM,SAAS,CAAC;AAAA,EAClB;AACA;AAAA,IACE;AAAA,IACA,MAAM,SAAS,CAAC;AAAA,IAChB,MAAM,SAAS,CAAC;AAAA,EAClB;AACA;AAAA,IACE;AAAA,IACA,MAAM,SAAS,CAAC;AAAA,IAChB,MAAM,SAAS,CAAC;AAAA,EAClB;AAEA,0BAAK,0DAA0D,YAAY;AACzE,UAAM,UAAU,0CAAuB,CAAC;AACxC,UAAM,cAAc;AACpB,UAAM,WAAW;AACjB,UAAM,SAAS,WAAW,QAAQ,SAAS,IAAI,QAAQ,KAAK;AAC5D,UAAM,UAAU;AAAA,MACd,QAAQ;AAAA,MACR,sBAAsB,OAAO,QAAQ,SAAS;AAAA,MAC9C,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AACA,UAAM,UAAU,CAAC,OAAiB,iBAA8B,YAC9D,MAAM,UAAU;AAAA,MACd,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM,KAAK,UAAU,EAAE,cAAc,aAAa,OAAO,cAAc,MAAM,CAAC;AAAA,IAChF,CAAC;AAEH,UAAM,aAAa,MAAM;AAAA,MACvB,GAAG,QAAQ,YAAY,QAAQ,SAAS,iBAAiB,mBAAmB,WAAW,CAAC;AAAA,MACxF,EAAE,SAAS,EAAE,QAAQ,OAAO,EAAE;AAAA,IAChC;AACA,8BAAO,WAAW,MAAM,EAAE,KAAK,GAAG;AAElC,+BAAQ,MAAM,QAAQ,CAAC,QAAQ,cAAc,GAAG,EAAE,QAAQ,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG;AACrF,+BAAQ,MAAM,QAAQ,CAAC,QAAQ,cAAc,GAAG;AAAA,MAC9C,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG;AACpB,+BAAQ,MAAM,QAAQ,CAAC,0CAAuB,CAAC,EAAE,cAAc,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG;AAEnF,UAAM,WAAW,MAAM,QAAQ,CAAC,QAAQ,cAAc,CAAC;AACvD,8BAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAChC,UAAM,EAAE,aAAa,SAAS,IAAI,MAAM,SAAS,KAAK;AACtD,UAAM,OAAO,IAAI,IAAI,QAAQ,EAAE,aAAa,IAAI,MAAM;AACtD,8BAAO,IAAI,EAAE,WAAW;AACxB,8BAAO,IAAI,IAAI,QAAQ,EAAE,aAAa,IAAI,OAAO,CAAC,EAAE,KAAK,YAAY;AAErE,UAAM,WAAW,MAAM,MAAM,0CAA0C;AAAA,MACrE,QAAQ;AAAA,MACR,MAAM,IAAI,gBAAgB,EAAE,MAAa,cAAc,YAAY,CAAC;AAAA,IACtE,CAAC;AACD,8BAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAChC,+BAAQ,MAAM,SAAS,KAAK,GAAG,YAAY,EAAE,WAAW,QAAQ;AAAA,EAClE,CAAC;AAED,0BAAK,4EAA4E,YAAY;AAC3F,UAAM,UAAU,0CAAuB,CAAC;AACxC,UAAM,WAAW,OAAO,WAAW;AACnC,UAAM,WAAW,OAAO,WAAW;AACnC,UAAM,aAAa,IAAI,WAAW,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC;AACvD,UAAM,gBAAgB,EAAE,eAAe,UAAU,QAAQ,KAAK,GAAG;AAEjE,eAAW,CAAC,KAAK,KAAK,KAAK;AAAA,MACzB,CAAC,UAAU,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,MACpC,CAAC,UAAU,UAAU;AAAA,IACvB,GAAY;AACV,YAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,cAAc,UAAU,GAAG,IAAI;AAAA,QACrE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR,CAAC;AACD,gCAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAAA,IAClC;AAEA,UAAM,QAAQ,GAAG,QAAQ,QAAQ,IAAI,QAAQ;AAC7C,8BAAO,MAAM,YAAY,qBAAqB,KAAK,CAAC,EAAE,KAAK,IAAI;AAE/D,UAAM,WAAW,MAAM;AAAA,MACrB,+DAA+D,QAAQ,QAAQ;AAAA,MAC/E;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,QAAQ,WAAW,QAAQ,SAAS,IAAI,QAAQ,KAAK;AAAA,UACrD,sBAAsB,OAAO,QAAQ,SAAS;AAAA,QAChD;AAAA,MACF;AAAA,IACF;AACA,8BAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAEhC,8BAAO,MAAM,YAAY,qBAAqB,KAAK,CAAC,EAAE,KAAK,KAAK;AAChE,eAAW,OAAO,CAAC,UAAU,QAAQ,GAAG;AACtC,YAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,cAAc,UAAU,GAAG,EAAE;AACrE,gCAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAAA,IAClC;AACA,UAAM,QAAQ,MAAM,MAAM,GAAG,QAAQ,cAAc,WAAW;AAAA,MAC5D,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,UAAM,gBAAAA,QAAc,EAAE,MAAM,CAAC,UAAU,QAAQ,GAAG,eAAe,WAAW,OAAO,CAAC,EAAE,MAAM;AAAA,IAC9F,CAAC;AACD,kCAAQ,gBAAAC,QAAc,MAAM,MAAM,YAAY,CAAC,EAAwC,OAAO,EAC3F,QAAQ,CAAC,EAAE,QAAQ,IAAI,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAE7C,UAAM,mBAAmB,MAAM,MAAM,GAAG,QAAQ,cAAc,UAAU,QAAQ,IAAI;AAAA,MAClF,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;AAAA,IAC1B,CAAC;AACD,8BAAO,iBAAiB,MAAM,EAAE,KAAK,GAAG;AAAA,EAC1C,CAAC;AAGD,iBAAe,MAAM,QAAgB;AACnC,UAAM,QAAQ,MAAM,cAAc,cAAc,MAAM;AAEtD,WAAO,MAAM,IAAI,QAAyB,CAAC,SAAS,WAAW;AAC7D,UAAI;AACJ,YAAM,UAAU,MAAM;AACpB,qBAAa,OAAO;AACpB,uBAAe,cAAc,oBAAoB,SAAS,QAAQ;AAAA,MACpE;AACA,YAAM,WAAW,CAAC,MAAe;AAC/B,YAAI,EAAE,aAAa,aAAc;AACjC,cAAM,SAAS,EAAE;AACjB,YAAI,OAAO,SAAS,UAAU,MAAO;AACrC,gBAAQ;AACR,YAAI,OAAO,OAAO;AAChB,iBAAO,OAAO,KAAK;AAAA,QACrB,OAAO;AACL,kBAAQ,OAAO,OAAO;AAAA,QACxB;AAAA,MACF;AACA,qBAAe,cAAc,iBAAiB,SAAS,QAAQ;AAE/D,gBAAU;AAAA,QACR,MAAM;AACJ,kBAAQ;AACR,iBAAO,IAAI,MAAM,yBAAyB,CAAC;AAAA,QAC7C;AAAA,QACA,KAAK;AAAA,MACP;AAEA,WAAK,eAAe,MAAM,KAAK;AAAA,IACjC,CAAC;AAAA,EACH;AAEA,iBAAe,OAAO,OAAe;AACnC,WAAO,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,UAAI;AACJ,YAAM,UAAU,MAAM;AACpB,qBAAa,OAAO;AACpB,uBAAe,cAAc,oBAAoB,UAAU,QAAQ;AAAA,MACrE;AACA,YAAM,WAAW,CAAC,MAAe;AAC/B,YAAI,EAAE,aAAa,aAAc;AACjC,cAAM,SAAS,EAAE;AACjB,YAAI,OAAO,UAAU,MAAO;AAC5B,gBAAQ;AAER,YAAI,OAAO,OAAO;AAChB,iBAAO,OAAO,KAAK;AAAA,QACrB,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF;AACA,qBAAe,cAAc,iBAAiB,UAAU,QAAQ;AAEhE,gBAAU;AAAA,QACR,MAAM;AACJ,kBAAQ;AACR,iBAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACtC;AAAA,QACA,KAAK;AAAA,MACP;AAEA,WAAK,eAAe,OAAO,KAAK;AAAA,IAClC,CAAC;AAAA,EACH;AACF,CAAC;",
+  "names": ["dagCborEncode", "dagCborDecode"]
 }

package/dist/esm/1-services/3-storage-buckets-tests.js

@@ -1,7 +1,8 @@
 import { describe, expect, test } from "vitest";
 import { StorageBuckets } from "./3-storage-buckets";
 import { GraffitiErrorUnauthorized } from "./utilities";
-import { GraffitiErrorNotFound } from "@graffiti-garden/api";
+import { GraffitiErrorNotFound, GraffitiErrorTooLarge } from "@graffiti-garden/api";
+import { encode as dagCborEncode, decode as dagCborDecode } from "@ipld/dag-cbor";
 function storageBucketTests(storageBucketEndpoint, storageBucketToken) {
   describe("Storage buckets", async () => {
     const storageBuckets = new StorageBuckets();
@@ -48,6 +49,184 @@ function storageBucketTests(storageBucketEndpoint, storageBucketToken) {
         storageBuckets.get(storageBucketEndpoint, key, bytes.length - 1)
       ).rejects.toThrow();
     });
+    test("overwrites across the small and large storage cutoff", async () => {
+      const key = crypto.randomUUID();
+      const small = new Uint8Array([1, 2, 3]);
+      const large = new Uint8Array(32 * 1024 + 1).fill(42);
+      const otherLarge = new Uint8Array(32 * 1024 + 1).fill(43);
+      await storageBuckets.put(storageBucketEndpoint, key, large, storageBucketToken);
+      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(large);
+      await storageBuckets.put(storageBucketEndpoint, key, otherLarge, storageBucketToken);
+      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(otherLarge);
+      await storageBuckets.put(storageBucketEndpoint, key, small, storageBucketToken);
+      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(small);
+      await storageBuckets.put(storageBucketEndpoint, key, large, storageBucketToken);
+      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(large);
+      await storageBuckets.delete(storageBucketEndpoint, key, storageBucketToken);
+      await expect(storageBuckets.get(storageBucketEndpoint, key)).rejects.toThrow(
+        GraffitiErrorNotFound
+      );
+    });
+    test("batch reads arbitrary keys from one bucket", async () => {
+      const first = crypto.randomUUID();
+      const second = crypto.randomUUID();
+      const missing = crypto.randomUUID();
+      const small = new Uint8Array([1, 2, 3]);
+      const large = new Uint8Array(32 * 1024 + 1).fill(7);
+      await storageBuckets.put(storageBucketEndpoint, first, small, storageBucketToken);
+      await storageBuckets.put(storageBucketEndpoint, second, large, storageBucketToken);
+      try {
+        const response = await fetch(`${storageBucketEndpoint}/values`, {
+          method: "POST",
+          headers: { "Content-Type": "application/cbor" },
+          body: dagCborEncode({
+            keys: [first, missing, second, first],
+            maxValueBytes: small.length
+          }).slice()
+        });
+        expect(response.status).toBe(200);
+        const decoded = dagCborDecode(await response.arrayBuffer());
+        expect(decoded.results.map(({ status }) => status)).toEqual([200, 404, 413, 200]);
+        expect(decoded.results[0].value).toEqual(small);
+        expect(decoded.results[0].etag).toBeTypeOf("string");
+        expect(decoded.results[3].value).toEqual(small);
+        const largeResponse = await fetch(`${storageBucketEndpoint}/values`, {
+          method: "POST",
+          headers: { "Content-Type": "application/cbor" },
+          body: dagCborEncode({
+            keys: [second],
+            maxValueBytes: large.length
+          }).slice()
+        });
+        expect(largeResponse.status).toBe(200);
+        const largeDecoded = dagCborDecode(await largeResponse.arrayBuffer());
+        expect(largeDecoded.results[0].value).toEqual(large);
+        const oversizedResponse = await fetch(`${storageBucketEndpoint}/values`, {
+          method: "POST",
+          headers: { "Content-Type": "application/cbor" },
+          body: dagCborEncode({
+            keys: [first, second],
+            maxValueBytes: 1024 * 1024
+          }).slice()
+        });
+        expect(oversizedResponse.status).toBe(400);
+        const settled = await Promise.allSettled([
+          storageBuckets.get(storageBucketEndpoint, first, small.length),
+          storageBuckets.get(storageBucketEndpoint, missing, small.length),
+          storageBuckets.get(storageBucketEndpoint, second, small.length)
+        ]);
+        expect(settled[0]).toEqual({ status: "fulfilled", value: small });
+        expect(settled[1].status).toBe("rejected");
+        expect(settled[1].reason).toBeInstanceOf(GraffitiErrorNotFound);
+        expect(settled[2].status).toBe("rejected");
+        expect(settled[2].reason).toBeInstanceOf(GraffitiErrorTooLarge);
+        expect(await storageBuckets.get(storageBucketEndpoint, second)).toEqual(large);
+      } finally {
+        await storageBuckets.delete(storageBucketEndpoint, first, storageBucketToken);
+        await storageBuckets.delete(storageBucketEndpoint, second, storageBucketToken);
+      }
+    });
+    test("accepts a full batch of maximum-length Unicode keys", async () => {
+      const key = "\u754C".repeat(255);
+      const body = dagCborEncode({
+        keys: Array(32).fill(key),
+        maxValueBytes: 0
+      }).slice();
+      expect(body.byteLength).toBeGreaterThan(16 * 1024);
+      const response = await fetch(`${storageBucketEndpoint}/values`, {
+        method: "POST",
+        headers: { "Content-Type": "application/cbor" },
+        body
+      });
+      expect(response.status).toBe(200);
+      const decoded = dagCborDecode(await response.arrayBuffer());
+      expect(decoded.results.map(({ status }) => status)).toEqual(Array(32).fill(404));
+    });
+    test("concurrent bounded gets share one batch", async () => {
+      const keys = Array.from({ length: 3 }, () => crypto.randomUUID());
+      const values = keys.map((_, i) => new Uint8Array([i + 1]));
+      for (let i = 0; i < keys.length; i++) {
+        await storageBuckets.put(storageBucketEndpoint, keys[i], values[i], storageBucketToken);
+      }
+      const originalFetch = globalThis.fetch;
+      const calls = [];
+      globalThis.fetch = (input, init) => {
+        const request = new Request(input, init);
+        calls.push(`${request.method} ${request.url}`);
+        return originalFetch(input, init);
+      };
+      try {
+        expect(await Promise.all(keys.map(
+          (key) => storageBuckets.get(storageBucketEndpoint, key, 1)
+        ))).toEqual(values);
+        expect(calls.filter((call) => call === `POST ${storageBucketEndpoint}/values`)).toHaveLength(1);
+        expect(calls.filter((call) => call.includes("/value/"))).toHaveLength(0);
+      } finally {
+        globalThis.fetch = originalFetch;
+        for (const key of keys) {
+          await storageBuckets.delete(storageBucketEndpoint, key, storageBucketToken);
+        }
+      }
+    });
+    test("falls back to GET when a bucket server does not support batches", async () => {
+      const keys = Array.from({ length: 2 }, () => crypto.randomUUID());
+      const value = new Uint8Array([42]);
+      for (const key of keys) {
+        await storageBuckets.put(storageBucketEndpoint, key, value, storageBucketToken);
+      }
+      const originalFetch = globalThis.fetch;
+      let batchAttempts = 0;
+      globalThis.fetch = (input, init) => {
+        const request = new Request(input, init);
+        if (request.method === "POST" && request.url === `${storageBucketEndpoint}/values`) {
+          batchAttempts++;
+          return Promise.resolve(new Response("Not found", { status: 404 }));
+        }
+        return originalFetch(input, init);
+      };
+      try {
+        const legacyBuckets = new StorageBuckets();
+        expect(await Promise.all(keys.map(
+          (key) => legacyBuckets.get(storageBucketEndpoint, key, 1)
+        ))).toEqual([value, value]);
+        expect(await Promise.all(keys.map(
+          (key) => legacyBuckets.get(storageBucketEndpoint, key, 1)
+        ))).toEqual([value, value]);
+        expect(batchAttempts).toBe(1);
+      } finally {
+        globalThis.fetch = originalFetch;
+        for (const key of keys) {
+          await storageBuckets.delete(storageBucketEndpoint, key, storageBucketToken);
+        }
+      }
+    });
+    test("a batch error does not disable batching or fall back to GET", async () => {
+      const originalFetch = globalThis.fetch;
+      let batchAttempts = 0;
+      let getAttempts = 0;
+      globalThis.fetch = (input, init) => {
+        const request = new Request(input, init);
+        if (request.method === "POST") {
+          batchAttempts++;
+          return Promise.resolve(new Response("Batch limit exceeded", { status: 413 }));
+        }
+        getAttempts++;
+        return originalFetch(input, init);
+      };
+      try {
+        const buckets = new StorageBuckets();
+        const readPair = () => Promise.all([
+          buckets.get(storageBucketEndpoint, "a", 1),
+          buckets.get(storageBucketEndpoint, "b", 1)
+        ]);
+        await expect(readPair()).rejects.toThrow("Batch limit exceeded");
+        await expect(readPair()).rejects.toThrow("Batch limit exceeded");
+        expect(batchAttempts).toBe(2);
+        expect(getAttempts).toBe(0);
+      } finally {
+        globalThis.fetch = originalFetch;
+      }
+    });
     test("unauthorized", async () => {
       const key = Math.random().toString(36).substring(2, 15);
       const input = "Hello world";

package/dist/esm/1-services/3-storage-buckets-tests.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/1-services/3-storage-buckets-tests.ts"],
-  "sourcesContent": ["import { describe, expect, test } from \"vitest\";\nimport { StorageBuckets } from \"./3-storage-buckets\";\nimport { GraffitiErrorUnauthorized } from \"./utilities\";\nimport { GraffitiErrorNotFound } from \"@graffiti-garden/api\";\n\nexport function storageBucketTests(\n  storageBucketEndpoint: string,\n  storageBucketToken: string,\n) {\n  describe(\"Storage buckets\", async () => {\n    const storageBuckets = new StorageBuckets();\n\n    test(\"put, get, delete\", async () => {\n      const key = Math.random().toString(36).substring(2, 15);\n      const input = \"Hello world\";\n      const bytes = new TextEncoder().encode(input);\n\n      await expect(\n        storageBuckets.get(storageBucketEndpoint, key),\n      ).rejects.toThrow(GraffitiErrorNotFound);\n\n      await storageBuckets.put(\n        storageBucketEndpoint,\n        key,\n        bytes,\n        storageBucketToken,\n      );\n\n      const resultBytes = await storageBuckets.get(\n        storageBucketEndpoint,\n        key,\n        bytes.length,\n      );\n      const result = new TextDecoder().decode(resultBytes);\n      expect(result).toEqual(input);\n\n      await storageBuckets.delete(\n        storageBucketEndpoint,\n        key,\n        storageBucketToken,\n      );\n\n      await expect(\n        storageBuckets.get(storageBucketEndpoint, key),\n      ).rejects.toThrow(GraffitiErrorNotFound);\n    });\n\n    test(\"get with limit less than object\", async () => {\n      const key = Math.random().toString(36).substring(2, 15);\n      const input = \"Hello world\";\n      const bytes = new TextEncoder().encode(input);\n\n      await storageBuckets.put(\n        storageBucketEndpoint,\n        key,\n        bytes,\n        storageBucketToken,\n      );\n\n      await expect(\n        storageBuckets.get(storageBucketEndpoint, key, bytes.length - 1),\n      ).rejects.toThrow();\n    });\n\n    test(\"unauthorized\", async () => {\n      const key = Math.random().toString(36).substring(2, 15);\n      const input = \"Hello world\";\n      const bytes = new TextEncoder().encode(input);\n\n      await expect(\n        storageBuckets.put(storageBucketEndpoint, key, bytes, \"invalid-token\"),\n      ).rejects.toThrow(GraffitiErrorUnauthorized);\n      await expect(\n        storageBuckets.delete(storageBucketEndpoint, key, \"invalid-token\"),\n      ).rejects.toThrow(GraffitiErrorUnauthorized);\n      await expect(\n        storageBuckets.export(storageBucketEndpoint, \"invalid-token\").next(),\n      ).rejects.toThrow(GraffitiErrorUnauthorized);\n    });\n\n    test(\"export\", async () => {\n      // Put a whole bunch of stuff so the export needs to page\n      const keys = new Set<string>();\n      for (let i = 0; i < 256; i++) {\n        const key = Math.random().toString(36).substring(2, 15);\n        keys.add(key);\n\n        const input = \"Hello world \" + i;\n        const bytes = new TextEncoder().encode(input);\n        await storageBuckets.put(\n          storageBucketEndpoint,\n          key,\n          bytes,\n          storageBucketToken,\n        );\n      }\n\n      // Export\n      const retrievedKeys = new Set<string>();\n      const iterator = storageBuckets.export(\n        storageBucketEndpoint,\n        storageBucketToken,\n      );\n      for await (const result of iterator) {\n        if (keys.has(result.key)) {\n          retrievedKeys.add(result.key);\n        }\n      }\n      expect(retrievedKeys.size).toEqual(keys.size);\n\n      // Delete all the keys\n      for (const key of keys) {\n        await storageBuckets.delete(\n          storageBucketEndpoint,\n          key,\n          storageBucketToken,\n        );\n      }\n    }, 1000000);\n  });\n}\n"],
-  "mappings": "AAAA,SAAS,UAAU,QAAQ,YAAY;AACvC,SAAS,sBAAsB;AAC/B,SAAS,iCAAiC;AAC1C,SAAS,6BAA6B;AAE/B,SAAS,mBACd,uBACA,oBACA;AACA,WAAS,mBAAmB,YAAY;AACtC,UAAM,iBAAiB,IAAI,eAAe;AAE1C,SAAK,oBAAoB,YAAY;AACnC,YAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,YAAM,QAAQ;AACd,YAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAE5C,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,GAAG;AAAA,MAC/C,EAAE,QAAQ,QAAQ,qBAAqB;AAEvC,YAAM,eAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,cAAc,MAAM,eAAe;AAAA,QACvC;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,YAAM,SAAS,IAAI,YAAY,EAAE,OAAO,WAAW;AACnD,aAAO,MAAM,EAAE,QAAQ,KAAK;AAE5B,YAAM,eAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,GAAG;AAAA,MAC/C,EAAE,QAAQ,QAAQ,qBAAqB;AAAA,IACzC,CAAC;AAED,SAAK,mCAAmC,YAAY;AAClD,YAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,YAAM,QAAQ;AACd,YAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAE5C,YAAM,eAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,KAAK,MAAM,SAAS,CAAC;AAAA,MACjE,EAAE,QAAQ,QAAQ;AAAA,IACpB,CAAC;AAED,SAAK,gBAAgB,YAAY;AAC/B,YAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,YAAM,QAAQ;AACd,YAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAE5C,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,KAAK,OAAO,eAAe;AAAA,MACvE,EAAE,QAAQ,QAAQ,yBAAyB;AAC3C,YAAM;AAAA,QACJ,eAAe,OAAO,uBAAuB,KAAK,eAAe;AAAA,MACnE,EAAE,QAAQ,QAAQ,yBAAyB;AAC3C,YAAM;AAAA,QACJ,eAAe,OAAO,uBAAuB,eAAe,EAAE,KAAK;AAAA,MACrE,EAAE,QAAQ,QAAQ,yBAAyB;AAAA,IAC7C,CAAC;AAED,SAAK,UAAU,YAAY;AAEzB,YAAM,OAAO,oBAAI,IAAY;AAC7B,eAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,cAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,aAAK,IAAI,GAAG;AAEZ,cAAM,QAAQ,iBAAiB;AAC/B,cAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,cAAM,eAAe;AAAA,UACnB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAGA,YAAM,gBAAgB,oBAAI,IAAY;AACtC,YAAM,WAAW,eAAe;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AACA,uBAAiB,UAAU,UAAU;AACnC,YAAI,KAAK,IAAI,OAAO,GAAG,GAAG;AACxB,wBAAc,IAAI,OAAO,GAAG;AAAA,QAC9B;AAAA,MACF;AACA,aAAO,cAAc,IAAI,EAAE,QAAQ,KAAK,IAAI;AAG5C,iBAAW,OAAO,MAAM;AACtB,cAAM,eAAe;AAAA,UACnB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,GAAG,GAAO;AAAA,EACZ,CAAC;AACH;",
+  "sourcesContent": ["import { describe, expect, test } from \"vitest\";\nimport { StorageBuckets } from \"./3-storage-buckets\";\nimport { GraffitiErrorUnauthorized } from \"./utilities\";\nimport { GraffitiErrorNotFound, GraffitiErrorTooLarge } from \"@graffiti-garden/api\";\nimport { encode as dagCborEncode, decode as dagCborDecode } from \"@ipld/dag-cbor\";\n\nexport function storageBucketTests(\n  storageBucketEndpoint: string,\n  storageBucketToken: string,\n) {\n  describe(\"Storage buckets\", async () => {\n    const storageBuckets = new StorageBuckets();\n\n    test(\"put, get, delete\", async () => {\n      const key = Math.random().toString(36).substring(2, 15);\n      const input = \"Hello world\";\n      const bytes = new TextEncoder().encode(input);\n\n      await expect(\n        storageBuckets.get(storageBucketEndpoint, key),\n      ).rejects.toThrow(GraffitiErrorNotFound);\n\n      await storageBuckets.put(\n        storageBucketEndpoint,\n        key,\n        bytes,\n        storageBucketToken,\n      );\n\n      const resultBytes = await storageBuckets.get(\n        storageBucketEndpoint,\n        key,\n        bytes.length,\n      );\n      const result = new TextDecoder().decode(resultBytes);\n      expect(result).toEqual(input);\n\n      await storageBuckets.delete(\n        storageBucketEndpoint,\n        key,\n        storageBucketToken,\n      );\n\n      await expect(\n        storageBuckets.get(storageBucketEndpoint, key),\n      ).rejects.toThrow(GraffitiErrorNotFound);\n    });\n\n    test(\"get with limit less than object\", async () => {\n      const key = Math.random().toString(36).substring(2, 15);\n      const input = \"Hello world\";\n      const bytes = new TextEncoder().encode(input);\n\n      await storageBuckets.put(\n        storageBucketEndpoint,\n        key,\n        bytes,\n        storageBucketToken,\n      );\n\n      await expect(\n        storageBuckets.get(storageBucketEndpoint, key, bytes.length - 1),\n      ).rejects.toThrow();\n    });\n\n    test(\"overwrites across the small and large storage cutoff\", async () => {\n      const key = crypto.randomUUID();\n      const small = new Uint8Array([1, 2, 3]);\n      const large = new Uint8Array(32 * 1024 + 1).fill(42);\n      const otherLarge = new Uint8Array(32 * 1024 + 1).fill(43);\n\n      await storageBuckets.put(storageBucketEndpoint, key, large, storageBucketToken);\n      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(large);\n\n      await storageBuckets.put(storageBucketEndpoint, key, otherLarge, storageBucketToken);\n      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(otherLarge);\n\n      await storageBuckets.put(storageBucketEndpoint, key, small, storageBucketToken);\n      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(small);\n\n      await storageBuckets.put(storageBucketEndpoint, key, large, storageBucketToken);\n      expect(await storageBuckets.get(storageBucketEndpoint, key)).toEqual(large);\n\n      await storageBuckets.delete(storageBucketEndpoint, key, storageBucketToken);\n      await expect(storageBuckets.get(storageBucketEndpoint, key)).rejects.toThrow(\n        GraffitiErrorNotFound,\n      );\n    });\n\n    test(\"batch reads arbitrary keys from one bucket\", async () => {\n      const first = crypto.randomUUID();\n      const second = crypto.randomUUID();\n      const missing = crypto.randomUUID();\n      const small = new Uint8Array([1, 2, 3]);\n      const large = new Uint8Array(32 * 1024 + 1).fill(7);\n      await storageBuckets.put(storageBucketEndpoint, first, small, storageBucketToken);\n      await storageBuckets.put(storageBucketEndpoint, second, large, storageBucketToken);\n      try {\n        const response = await fetch(`${storageBucketEndpoint}/values`, {\n          method: \"POST\",\n          headers: { \"Content-Type\": \"application/cbor\" },\n          body: dagCborEncode({\n            keys: [first, missing, second, first],\n            maxValueBytes: small.length,\n          }).slice(),\n        });\n        expect(response.status).toBe(200);\n        const decoded = dagCborDecode(await response.arrayBuffer()) as {\n          results: Array<{ status: number; value?: Uint8Array; etag?: string }>;\n        };\n        expect(decoded.results.map(({ status }) => status)).toEqual([200, 404, 413, 200]);\n        expect(decoded.results[0].value).toEqual(small);\n        expect(decoded.results[0].etag).toBeTypeOf(\"string\");\n        expect(decoded.results[3].value).toEqual(small);\n        const largeResponse = await fetch(`${storageBucketEndpoint}/values`, {\n          method: \"POST\",\n          headers: { \"Content-Type\": \"application/cbor\" },\n          body: dagCborEncode({\n            keys: [second],\n            maxValueBytes: large.length,\n          }).slice(),\n        });\n        expect(largeResponse.status).toBe(200);\n        const largeDecoded = dagCborDecode(await largeResponse.arrayBuffer()) as {\n          results: Array<{ status: number; value?: Uint8Array }>;\n        };\n        expect(largeDecoded.results[0].value).toEqual(large);\n\n        const oversizedResponse = await fetch(`${storageBucketEndpoint}/values`, {\n          method: \"POST\",\n          headers: { \"Content-Type\": \"application/cbor\" },\n          body: dagCborEncode({\n            keys: [first, second],\n            maxValueBytes: 1024 * 1024,\n          }).slice(),\n        });\n        expect(oversizedResponse.status).toBe(400);\n\n        const settled = await Promise.allSettled([\n          storageBuckets.get(storageBucketEndpoint, first, small.length),\n          storageBuckets.get(storageBucketEndpoint, missing, small.length),\n          storageBuckets.get(storageBucketEndpoint, second, small.length),\n        ]);\n        expect(settled[0]).toEqual({ status: \"fulfilled\", value: small });\n        expect(settled[1].status).toBe(\"rejected\");\n        expect((settled[1] as PromiseRejectedResult).reason).toBeInstanceOf(GraffitiErrorNotFound);\n        expect(settled[2].status).toBe(\"rejected\");\n        expect((settled[2] as PromiseRejectedResult).reason).toBeInstanceOf(GraffitiErrorTooLarge);\n        expect(await storageBuckets.get(storageBucketEndpoint, second)).toEqual(large);\n      } finally {\n        await storageBuckets.delete(storageBucketEndpoint, first, storageBucketToken);\n        await storageBuckets.delete(storageBucketEndpoint, second, storageBucketToken);\n      }\n    });\n\n    test(\"accepts a full batch of maximum-length Unicode keys\", async () => {\n      const key = \"\u754C\".repeat(255);\n      const body = dagCborEncode({\n        keys: Array(32).fill(key),\n        maxValueBytes: 0,\n      }).slice();\n      expect(body.byteLength).toBeGreaterThan(16 * 1024);\n      const response = await fetch(`${storageBucketEndpoint}/values`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/cbor\" },\n        body,\n      });\n      expect(response.status).toBe(200);\n      const decoded = dagCborDecode(await response.arrayBuffer()) as {\n        results: Array<{ status: number }>;\n      };\n      expect(decoded.results.map(({ status }) => status)).toEqual(Array(32).fill(404));\n    });\n\n    test(\"concurrent bounded gets share one batch\", async () => {\n      const keys = Array.from({ length: 3 }, () => crypto.randomUUID());\n      const values = keys.map((_, i) => new Uint8Array([i + 1]));\n      for (let i = 0; i < keys.length; i++) {\n        await storageBuckets.put(storageBucketEndpoint, keys[i], values[i], storageBucketToken);\n      }\n      const originalFetch = globalThis.fetch;\n      const calls: string[] = [];\n      globalThis.fetch = (input, init) => {\n        const request = new Request(input, init);\n        calls.push(`${request.method} ${request.url}`);\n        return originalFetch(input, init);\n      };\n      try {\n        expect(await Promise.all(keys.map((key) =>\n          storageBuckets.get(storageBucketEndpoint, key, 1),\n        ))).toEqual(values);\n        expect(calls.filter((call) => call === `POST ${storageBucketEndpoint}/values`)).toHaveLength(1);\n        expect(calls.filter((call) => call.includes(\"/value/\"))).toHaveLength(0);\n      } finally {\n        globalThis.fetch = originalFetch;\n        for (const key of keys) {\n          await storageBuckets.delete(storageBucketEndpoint, key, storageBucketToken);\n        }\n      }\n    });\n\n    test(\"falls back to GET when a bucket server does not support batches\", async () => {\n      const keys = Array.from({ length: 2 }, () => crypto.randomUUID());\n      const value = new Uint8Array([42]);\n      for (const key of keys) {\n        await storageBuckets.put(storageBucketEndpoint, key, value, storageBucketToken);\n      }\n      const originalFetch = globalThis.fetch;\n      let batchAttempts = 0;\n      globalThis.fetch = (input, init) => {\n        const request = new Request(input, init);\n        if (request.method === \"POST\" && request.url === `${storageBucketEndpoint}/values`) {\n          batchAttempts++;\n          return Promise.resolve(new Response(\"Not found\", { status: 404 }));\n        }\n        return originalFetch(input, init);\n      };\n      try {\n        const legacyBuckets = new StorageBuckets();\n        expect(await Promise.all(keys.map((key) =>\n          legacyBuckets.get(storageBucketEndpoint, key, 1),\n        ))).toEqual([value, value]);\n        expect(await Promise.all(keys.map((key) =>\n          legacyBuckets.get(storageBucketEndpoint, key, 1),\n        ))).toEqual([value, value]);\n        expect(batchAttempts).toBe(1);\n      } finally {\n        globalThis.fetch = originalFetch;\n        for (const key of keys) {\n          await storageBuckets.delete(storageBucketEndpoint, key, storageBucketToken);\n        }\n      }\n    });\n\n    test(\"a batch error does not disable batching or fall back to GET\", async () => {\n      const originalFetch = globalThis.fetch;\n      let batchAttempts = 0;\n      let getAttempts = 0;\n      globalThis.fetch = (input, init) => {\n        const request = new Request(input, init);\n        if (request.method === \"POST\") {\n          batchAttempts++;\n          return Promise.resolve(new Response(\"Batch limit exceeded\", { status: 413 }));\n        }\n        getAttempts++;\n        return originalFetch(input, init);\n      };\n      try {\n        const buckets = new StorageBuckets();\n        const readPair = () => Promise.all([\n          buckets.get(storageBucketEndpoint, \"a\", 1),\n          buckets.get(storageBucketEndpoint, \"b\", 1),\n        ]);\n        await expect(readPair()).rejects.toThrow(\"Batch limit exceeded\");\n        await expect(readPair()).rejects.toThrow(\"Batch limit exceeded\");\n        expect(batchAttempts).toBe(2);\n        expect(getAttempts).toBe(0);\n      } finally {\n        globalThis.fetch = originalFetch;\n      }\n    });\n\n    test(\"unauthorized\", async () => {\n      const key = Math.random().toString(36).substring(2, 15);\n      const input = \"Hello world\";\n      const bytes = new TextEncoder().encode(input);\n\n      await expect(\n        storageBuckets.put(storageBucketEndpoint, key, bytes, \"invalid-token\"),\n      ).rejects.toThrow(GraffitiErrorUnauthorized);\n      await expect(\n        storageBuckets.delete(storageBucketEndpoint, key, \"invalid-token\"),\n      ).rejects.toThrow(GraffitiErrorUnauthorized);\n      await expect(\n        storageBuckets.export(storageBucketEndpoint, \"invalid-token\").next(),\n      ).rejects.toThrow(GraffitiErrorUnauthorized);\n    });\n\n    test(\"export\", async () => {\n      // Put a whole bunch of stuff so the export needs to page\n      const keys = new Set<string>();\n      for (let i = 0; i < 256; i++) {\n        const key = Math.random().toString(36).substring(2, 15);\n        keys.add(key);\n\n        const input = \"Hello world \" + i;\n        const bytes = new TextEncoder().encode(input);\n        await storageBuckets.put(\n          storageBucketEndpoint,\n          key,\n          bytes,\n          storageBucketToken,\n        );\n      }\n\n      // Export\n      const retrievedKeys = new Set<string>();\n      const iterator = storageBuckets.export(\n        storageBucketEndpoint,\n        storageBucketToken,\n      );\n      for await (const result of iterator) {\n        if (keys.has(result.key)) {\n          retrievedKeys.add(result.key);\n        }\n      }\n      expect(retrievedKeys.size).toEqual(keys.size);\n\n      // Delete all the keys\n      for (const key of keys) {\n        await storageBuckets.delete(\n          storageBucketEndpoint,\n          key,\n          storageBucketToken,\n        );\n      }\n    }, 1000000);\n  });\n}\n"],
+  "mappings": "AAAA,SAAS,UAAU,QAAQ,YAAY;AACvC,SAAS,sBAAsB;AAC/B,SAAS,iCAAiC;AAC1C,SAAS,uBAAuB,6BAA6B;AAC7D,SAAS,UAAU,eAAe,UAAU,qBAAqB;AAE1D,SAAS,mBACd,uBACA,oBACA;AACA,WAAS,mBAAmB,YAAY;AACtC,UAAM,iBAAiB,IAAI,eAAe;AAE1C,SAAK,oBAAoB,YAAY;AACnC,YAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,YAAM,QAAQ;AACd,YAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAE5C,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,GAAG;AAAA,MAC/C,EAAE,QAAQ,QAAQ,qBAAqB;AAEvC,YAAM,eAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,cAAc,MAAM,eAAe;AAAA,QACvC;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,YAAM,SAAS,IAAI,YAAY,EAAE,OAAO,WAAW;AACnD,aAAO,MAAM,EAAE,QAAQ,KAAK;AAE5B,YAAM,eAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,GAAG;AAAA,MAC/C,EAAE,QAAQ,QAAQ,qBAAqB;AAAA,IACzC,CAAC;AAED,SAAK,mCAAmC,YAAY;AAClD,YAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,YAAM,QAAQ;AACd,YAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAE5C,YAAM,eAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,KAAK,MAAM,SAAS,CAAC;AAAA,MACjE,EAAE,QAAQ,QAAQ;AAAA,IACpB,CAAC;AAED,SAAK,wDAAwD,YAAY;AACvE,YAAM,MAAM,OAAO,WAAW;AAC9B,YAAM,QAAQ,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;AACtC,YAAM,QAAQ,IAAI,WAAW,KAAK,OAAO,CAAC,EAAE,KAAK,EAAE;AACnD,YAAM,aAAa,IAAI,WAAW,KAAK,OAAO,CAAC,EAAE,KAAK,EAAE;AAExD,YAAM,eAAe,IAAI,uBAAuB,KAAK,OAAO,kBAAkB;AAC9E,aAAO,MAAM,eAAe,IAAI,uBAAuB,GAAG,CAAC,EAAE,QAAQ,KAAK;AAE1E,YAAM,eAAe,IAAI,uBAAuB,KAAK,YAAY,kBAAkB;AACnF,aAAO,MAAM,eAAe,IAAI,uBAAuB,GAAG,CAAC,EAAE,QAAQ,UAAU;AAE/E,YAAM,eAAe,IAAI,uBAAuB,KAAK,OAAO,kBAAkB;AAC9E,aAAO,MAAM,eAAe,IAAI,uBAAuB,GAAG,CAAC,EAAE,QAAQ,KAAK;AAE1E,YAAM,eAAe,IAAI,uBAAuB,KAAK,OAAO,kBAAkB;AAC9E,aAAO,MAAM,eAAe,IAAI,uBAAuB,GAAG,CAAC,EAAE,QAAQ,KAAK;AAE1E,YAAM,eAAe,OAAO,uBAAuB,KAAK,kBAAkB;AAC1E,YAAM,OAAO,eAAe,IAAI,uBAAuB,GAAG,CAAC,EAAE,QAAQ;AAAA,QACnE;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,8CAA8C,YAAY;AAC7D,YAAM,QAAQ,OAAO,WAAW;AAChC,YAAM,SAAS,OAAO,WAAW;AACjC,YAAM,UAAU,OAAO,WAAW;AAClC,YAAM,QAAQ,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;AACtC,YAAM,QAAQ,IAAI,WAAW,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC;AAClD,YAAM,eAAe,IAAI,uBAAuB,OAAO,OAAO,kBAAkB;AAChF,YAAM,eAAe,IAAI,uBAAuB,QAAQ,OAAO,kBAAkB;AACjF,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,GAAG,qBAAqB,WAAW;AAAA,UAC9D,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,cAAc;AAAA,YAClB,MAAM,CAAC,OAAO,SAAS,QAAQ,KAAK;AAAA,YACpC,eAAe,MAAM;AAAA,UACvB,CAAC,EAAE,MAAM;AAAA,QACX,CAAC;AACD,eAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAChC,cAAM,UAAU,cAAc,MAAM,SAAS,YAAY,CAAC;AAG1D,eAAO,QAAQ,QAAQ,IAAI,CAAC,EAAE,OAAO,MAAM,MAAM,CAAC,EAAE,QAAQ,CAAC,KAAK,KAAK,KAAK,GAAG,CAAC;AAChF,eAAO,QAAQ,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,KAAK;AAC9C,eAAO,QAAQ,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,QAAQ;AACnD,eAAO,QAAQ,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,KAAK;AAC9C,cAAM,gBAAgB,MAAM,MAAM,GAAG,qBAAqB,WAAW;AAAA,UACnE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,cAAc;AAAA,YAClB,MAAM,CAAC,MAAM;AAAA,YACb,eAAe,MAAM;AAAA,UACvB,CAAC,EAAE,MAAM;AAAA,QACX,CAAC;AACD,eAAO,cAAc,MAAM,EAAE,KAAK,GAAG;AACrC,cAAM,eAAe,cAAc,MAAM,cAAc,YAAY,CAAC;AAGpE,eAAO,aAAa,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,KAAK;AAEnD,cAAM,oBAAoB,MAAM,MAAM,GAAG,qBAAqB,WAAW;AAAA,UACvE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,cAAc;AAAA,YAClB,MAAM,CAAC,OAAO,MAAM;AAAA,YACpB,eAAe,OAAO;AAAA,UACxB,CAAC,EAAE,MAAM;AAAA,QACX,CAAC;AACD,eAAO,kBAAkB,MAAM,EAAE,KAAK,GAAG;AAEzC,cAAM,UAAU,MAAM,QAAQ,WAAW;AAAA,UACvC,eAAe,IAAI,uBAAuB,OAAO,MAAM,MAAM;AAAA,UAC7D,eAAe,IAAI,uBAAuB,SAAS,MAAM,MAAM;AAAA,UAC/D,eAAe,IAAI,uBAAuB,QAAQ,MAAM,MAAM;AAAA,QAChE,CAAC;AACD,eAAO,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,aAAa,OAAO,MAAM,CAAC;AAChE,eAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,UAAU;AACzC,eAAQ,QAAQ,CAAC,EAA4B,MAAM,EAAE,eAAe,qBAAqB;AACzF,eAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,UAAU;AACzC,eAAQ,QAAQ,CAAC,EAA4B,MAAM,EAAE,eAAe,qBAAqB;AACzF,eAAO,MAAM,eAAe,IAAI,uBAAuB,MAAM,CAAC,EAAE,QAAQ,KAAK;AAAA,MAC/E,UAAE;AACA,cAAM,eAAe,OAAO,uBAAuB,OAAO,kBAAkB;AAC5E,cAAM,eAAe,OAAO,uBAAuB,QAAQ,kBAAkB;AAAA,MAC/E;AAAA,IACF,CAAC;AAED,SAAK,uDAAuD,YAAY;AACtE,YAAM,MAAM,SAAI,OAAO,GAAG;AAC1B,YAAM,OAAO,cAAc;AAAA,QACzB,MAAM,MAAM,EAAE,EAAE,KAAK,GAAG;AAAA,QACxB,eAAe;AAAA,MACjB,CAAC,EAAE,MAAM;AACT,aAAO,KAAK,UAAU,EAAE,gBAAgB,KAAK,IAAI;AACjD,YAAM,WAAW,MAAM,MAAM,GAAG,qBAAqB,WAAW;AAAA,QAC9D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C;AAAA,MACF,CAAC;AACD,aAAO,SAAS,MAAM,EAAE,KAAK,GAAG;AAChC,YAAM,UAAU,cAAc,MAAM,SAAS,YAAY,CAAC;AAG1D,aAAO,QAAQ,QAAQ,IAAI,CAAC,EAAE,OAAO,MAAM,MAAM,CAAC,EAAE,QAAQ,MAAM,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,IACjF,CAAC;AAED,SAAK,2CAA2C,YAAY;AAC1D,YAAM,OAAO,MAAM,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,WAAW,CAAC;AAChE,YAAM,SAAS,KAAK,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,eAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,cAAM,eAAe,IAAI,uBAAuB,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,kBAAkB;AAAA,MACxF;AACA,YAAM,gBAAgB,WAAW;AACjC,YAAM,QAAkB,CAAC;AACzB,iBAAW,QAAQ,CAAC,OAAO,SAAS;AAClC,cAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;AACvC,cAAM,KAAK,GAAG,QAAQ,MAAM,IAAI,QAAQ,GAAG,EAAE;AAC7C,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AACA,UAAI;AACF,eAAO,MAAM,QAAQ,IAAI,KAAK;AAAA,UAAI,CAAC,QACjC,eAAe,IAAI,uBAAuB,KAAK,CAAC;AAAA,QAClD,CAAC,CAAC,EAAE,QAAQ,MAAM;AAClB,eAAO,MAAM,OAAO,CAAC,SAAS,SAAS,QAAQ,qBAAqB,SAAS,CAAC,EAAE,aAAa,CAAC;AAC9F,eAAO,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC;AAAA,MACzE,UAAE;AACA,mBAAW,QAAQ;AACnB,mBAAW,OAAO,MAAM;AACtB,gBAAM,eAAe,OAAO,uBAAuB,KAAK,kBAAkB;AAAA,QAC5E;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,mEAAmE,YAAY;AAClF,YAAM,OAAO,MAAM,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,WAAW,CAAC;AAChE,YAAM,QAAQ,IAAI,WAAW,CAAC,EAAE,CAAC;AACjC,iBAAW,OAAO,MAAM;AACtB,cAAM,eAAe,IAAI,uBAAuB,KAAK,OAAO,kBAAkB;AAAA,MAChF;AACA,YAAM,gBAAgB,WAAW;AACjC,UAAI,gBAAgB;AACpB,iBAAW,QAAQ,CAAC,OAAO,SAAS;AAClC,cAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;AACvC,YAAI,QAAQ,WAAW,UAAU,QAAQ,QAAQ,GAAG,qBAAqB,WAAW;AAClF;AACA,iBAAO,QAAQ,QAAQ,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,QACnE;AACA,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AACA,UAAI;AACF,cAAM,gBAAgB,IAAI,eAAe;AACzC,eAAO,MAAM,QAAQ,IAAI,KAAK;AAAA,UAAI,CAAC,QACjC,cAAc,IAAI,uBAAuB,KAAK,CAAC;AAAA,QACjD,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,KAAK,CAAC;AAC1B,eAAO,MAAM,QAAQ,IAAI,KAAK;AAAA,UAAI,CAAC,QACjC,cAAc,IAAI,uBAAuB,KAAK,CAAC;AAAA,QACjD,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,KAAK,CAAC;AAC1B,eAAO,aAAa,EAAE,KAAK,CAAC;AAAA,MAC9B,UAAE;AACA,mBAAW,QAAQ;AACnB,mBAAW,OAAO,MAAM;AACtB,gBAAM,eAAe,OAAO,uBAAuB,KAAK,kBAAkB;AAAA,QAC5E;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,+DAA+D,YAAY;AAC9E,YAAM,gBAAgB,WAAW;AACjC,UAAI,gBAAgB;AACpB,UAAI,cAAc;AAClB,iBAAW,QAAQ,CAAC,OAAO,SAAS;AAClC,cAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;AACvC,YAAI,QAAQ,WAAW,QAAQ;AAC7B;AACA,iBAAO,QAAQ,QAAQ,IAAI,SAAS,wBAAwB,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,QAC9E;AACA;AACA,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AACA,UAAI;AACF,cAAM,UAAU,IAAI,eAAe;AACnC,cAAM,WAAW,MAAM,QAAQ,IAAI;AAAA,UACjC,QAAQ,IAAI,uBAAuB,KAAK,CAAC;AAAA,UACzC,QAAQ,IAAI,uBAAuB,KAAK,CAAC;AAAA,QAC3C,CAAC;AACD,cAAM,OAAO,SAAS,CAAC,EAAE,QAAQ,QAAQ,sBAAsB;AAC/D,cAAM,OAAO,SAAS,CAAC,EAAE,QAAQ,QAAQ,sBAAsB;AAC/D,eAAO,aAAa,EAAE,KAAK,CAAC;AAC5B,eAAO,WAAW,EAAE,KAAK,CAAC;AAAA,MAC5B,UAAE;AACA,mBAAW,QAAQ;AAAA,MACrB;AAAA,IACF,CAAC;AAED,SAAK,gBAAgB,YAAY;AAC/B,YAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,YAAM,QAAQ;AACd,YAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAE5C,YAAM;AAAA,QACJ,eAAe,IAAI,uBAAuB,KAAK,OAAO,eAAe;AAAA,MACvE,EAAE,QAAQ,QAAQ,yBAAyB;AAC3C,YAAM;AAAA,QACJ,eAAe,OAAO,uBAAuB,KAAK,eAAe;AAAA,MACnE,EAAE,QAAQ,QAAQ,yBAAyB;AAC3C,YAAM;AAAA,QACJ,eAAe,OAAO,uBAAuB,eAAe,EAAE,KAAK;AAAA,MACrE,EAAE,QAAQ,QAAQ,yBAAyB;AAAA,IAC7C,CAAC;AAED,SAAK,UAAU,YAAY;AAEzB,YAAM,OAAO,oBAAI,IAAY;AAC7B,eAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,cAAM,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACtD,aAAK,IAAI,GAAG;AAEZ,cAAM,QAAQ,iBAAiB;AAC/B,cAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,cAAM,eAAe;AAAA,UACnB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAGA,YAAM,gBAAgB,oBAAI,IAAY;AACtC,YAAM,WAAW,eAAe;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AACA,uBAAiB,UAAU,UAAU;AACnC,YAAI,KAAK,IAAI,OAAO,GAAG,GAAG;AACxB,wBAAc,IAAI,OAAO,GAAG;AAAA,QAC9B;AAAA,MACF;AACA,aAAO,cAAc,IAAI,EAAE,QAAQ,KAAK,IAAI;AAG5C,iBAAW,OAAO,MAAM;AACtB,cAAM,eAAe;AAAA,UACnB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,GAAG,GAAO;AAAA,EACZ,CAAC;AACH;",
   "names": []
 }

package/dist/esm/1-services/3-storage-buckets.js

@@ -4,9 +4,18 @@ import {
   verifyHTTPSEndpoint
 } from "./utilities";
 import { string, array, object, optional, nullable } from "zod/mini";
-import { decode as dagCborDecode } from "@ipld/dag-cbor";
+import { encode as dagCborEncode, decode as dagCborDecode } from "@ipld/dag-cbor";
+import { GraffitiErrorNotFound, GraffitiErrorTooLarge } from "@graffiti-garden/api";
+const BATCH_KEYS = 32;
+const BATCH_TOTAL_VALUE_BYTES = 1024 * 1024;
+const BATCH_WAIT_MS = 2;
+function batchWidth(maxBytes) {
+  return Math.min(BATCH_KEYS, Math.floor(BATCH_TOTAL_VALUE_BYTES / maxBytes));
+}
 class StorageBuckets {
   getAuthorizationEndpoint = getAuthorizationEndpoint;
+  queues = /* @__PURE__ */ new Map();
+  unsupportedBatchEndpoints = /* @__PURE__ */ new Set();
   async put(storageBucketEndpoint, key, value, authorizationToken) {
     verifyHTTPSEndpoint(storageBucketEndpoint);
     const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;
@@ -31,6 +40,88 @@ class StorageBuckets {
   }
   async get(storageBucketEndpoint, key, maxBytes) {
     verifyHTTPSEndpoint(storageBucketEndpoint);
+    if (maxBytes !== void 0 && Number.isSafeInteger(maxBytes) && maxBytes > 0 && batchWidth(maxBytes) >= 2 && !this.unsupportedBatchEndpoints.has(storageBucketEndpoint)) {
+      return new Promise((resolve, reject) => {
+        let queuesByMaxBytes = this.queues.get(storageBucketEndpoint);
+        if (!queuesByMaxBytes) {
+          queuesByMaxBytes = /* @__PURE__ */ new Map();
+          this.queues.set(storageBucketEndpoint, queuesByMaxBytes);
+        }
+        let queue = queuesByMaxBytes.get(maxBytes);
+        if (!queue) {
+          queue = { requests: [] };
+          queuesByMaxBytes.set(maxBytes, queue);
+        }
+        queue.requests.push({ key, resolve, reject });
+        if (queue.requests.length === batchWidth(maxBytes)) {
+          this.flush(storageBucketEndpoint, maxBytes, queue);
+        } else if (queue.timer === void 0) {
+          queue.timer = setTimeout(
+            () => this.flush(storageBucketEndpoint, maxBytes, queue),
+            BATCH_WAIT_MS
+          );
+        }
+      });
+    }
+    return this.getOne(storageBucketEndpoint, key, maxBytes);
+  }
+  flush(endpoint, maxBytes, queue) {
+    if (queue.timer !== void 0) clearTimeout(queue.timer);
+    const requests = queue.requests;
+    const queuesByMaxBytes = this.queues.get(endpoint);
+    queuesByMaxBytes.delete(maxBytes);
+    if (queuesByMaxBytes.size === 0) this.queues.delete(endpoint);
+    if (requests.length === 1 || this.unsupportedBatchEndpoints.has(endpoint)) {
+      requests.forEach(({ key, resolve, reject }) => {
+        void this.getOne(endpoint, key, maxBytes).then(resolve, reject);
+      });
+    } else {
+      void this.getBatch(endpoint, maxBytes, requests);
+    }
+  }
+  async getBatch(endpoint, maxBytes, requests) {
+    try {
+      const response = await fetch(`${endpoint}/values`, {
+        method: "POST",
+        headers: { "Content-Type": "application/cbor", Accept: "application/cbor" },
+        body: dagCborEncode({
+          keys: requests.map(({ key }) => key),
+          maxValueBytes: maxBytes
+        }).slice()
+      });
+      if (response.status === 404) {
+        this.unsupportedBatchEndpoints.add(endpoint);
+        await Promise.all(requests.map(async ({ key, resolve, reject }) => {
+          try {
+            resolve(await this.getOne(endpoint, key, maxBytes));
+          } catch (error) {
+            reject(error);
+          }
+        }));
+        return;
+      }
+      if (!response.ok) throw new Error(await response.text());
+      const decoded = dagCborDecode(await response.arrayBuffer());
+      if (!decoded || typeof decoded !== "object" || !("results" in decoded) || !Array.isArray(decoded.results) || decoded.results.length !== requests.length) throw new Error("Invalid storage batch response");
+      decoded.results.forEach((result, index) => {
+        const { resolve, reject } = requests[index];
+        if (!result || typeof result !== "object" || !("status" in result)) {
+          reject(new Error("Invalid storage batch result"));
+        } else if (result.status === 200 && "value" in result && result.value instanceof Uint8Array && result.value.byteLength <= maxBytes) {
+          resolve(result.value);
+        } else if (result.status === 404) {
+          reject(new GraffitiErrorNotFound("Value not found"));
+        } else if (result.status === 413) {
+          reject(new GraffitiErrorTooLarge("Value exceeds maximum byte limit"));
+        } else {
+          reject(new Error("Invalid storage batch result"));
+        }
+      });
+    } catch (error) {
+      requests.forEach(({ reject }) => reject(error));
+    }
+  }
+  async getOne(storageBucketEndpoint, key, maxBytes) {
     const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;
     const response = await fetchWithErrorHandling(url);
     const reader = response.body?.getReader();

package/dist/esm/1-services/3-storage-buckets.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/1-services/3-storage-buckets.ts"],
-  "sourcesContent": ["import {\n  fetchWithErrorHandling,\n  getAuthorizationEndpoint,\n  verifyHTTPSEndpoint,\n} from \"./utilities\";\nimport { string, array, object, optional, nullable } from \"zod/mini\";\nimport { decode as dagCborDecode } from \"@ipld/dag-cbor\";\n\nexport class StorageBuckets {\n  getAuthorizationEndpoint = getAuthorizationEndpoint;\n\n  async put(\n    storageBucketEndpoint: string,\n    key: string,\n    value: Uint8Array,\n    authorizationToken: string,\n  ): Promise<void> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;\n\n    await fetchWithErrorHandling(url, {\n      method: \"PUT\",\n      headers: {\n        \"Content-Type\": \"application/octet-stream\",\n        Authorization: `Bearer ${authorizationToken}`,\n      },\n      body: value.slice(),\n    });\n  }\n\n  async delete(\n    storageBucketEndpoint: string,\n    key: string,\n    authorizationToken: string,\n  ): Promise<void> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;\n\n    await fetchWithErrorHandling(url, {\n      method: \"DELETE\",\n      headers: {\n        Authorization: `Bearer ${authorizationToken}`,\n      },\n    });\n  }\n\n  async get(\n    storageBucketEndpoint: string,\n    key: string,\n    maxBytes?: number,\n  ): Promise<Uint8Array> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;\n\n    const response = await fetchWithErrorHandling(url);\n\n    const reader = response.body?.getReader();\n    if (!reader) {\n      throw new Error(\"Failed to read value from storage bucket\");\n    }\n\n    const contentLengthHeader = response.headers.get(\"Content-Length\");\n    const parsedContentLength = contentLengthHeader\n      ? Number(contentLengthHeader)\n      : undefined;\n\n    const hasValidContentLength =\n      !!parsedContentLength &&\n      !!Number.isFinite(parsedContentLength) &&\n      parsedContentLength >= 0;\n\n    // Fast path: Content-Length exists and is valid\n    if (hasValidContentLength) {\n      const contentLength = parsedContentLength!;\n      if (maxBytes !== undefined && contentLength > maxBytes) {\n        throw new Error(\"Value exceeds maximum byte limit\");\n      }\n\n      const out = new Uint8Array(contentLength);\n      let offset = 0;\n      let completed = false;\n\n      try {\n        while (offset <= out.length) {\n          const { done, value } = await reader.read();\n\n          if (done) {\n            completed = true;\n            break;\n          }\n          if (!value || value.length === 0) continue;\n\n          const nextOffset = offset + value.length;\n          if (nextOffset > out.length) {\n            throw new Error(\"Received more data than expected\");\n          }\n\n          out.set(value, offset);\n          offset = nextOffset;\n        }\n      } finally {\n        reader.releaseLock();\n      }\n\n      if (!completed) {\n        throw new Error(\"Failed to read complete value from storage bucket\");\n      }\n\n      return offset === contentLength ? out : out.slice(0, offset);\n    }\n\n    // Fallback path: no (usable) Content-Length\n    const chunks: Uint8Array[] = [];\n    let total = 0;\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n\n        if (done) break;\n        if (!value || value.length === 0) continue;\n\n        total += value.length;\n        if (maxBytes !== undefined && total > maxBytes) {\n          throw new Error(\"Value exceeds maximum byte limit\");\n        }\n\n        // Copy because some implementations reuse the underlying buffer\n        chunks.push(value.slice());\n      }\n    } finally {\n      reader.releaseLock();\n    }\n\n    // Concatenate chunks into one Uint8Array\n    const out = new Uint8Array(total);\n    let offset = 0;\n    for (const c of chunks) {\n      out.set(c, offset);\n      offset += c.length;\n    }\n    return out;\n  }\n\n  async *export(\n    storageBucketEndpoint: string,\n    authorizationToken: string,\n  ): AsyncGenerator<{ key: string }> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/export`;\n\n    let cursor: string | undefined = undefined;\n    while (true) {\n      const response = await fetchWithErrorHandling(\n        cursor ? `${url}?cursor=${encodeURIComponent(cursor)}` : url,\n        {\n          headers: {\n            Authorization: `Bearer ${authorizationToken}`,\n          },\n        },\n      );\n\n      const blob = await response.blob();\n      const cbor = dagCborDecode(await blob.arrayBuffer());\n      const data = ExportSchema.parse(cbor);\n\n      for (const key of data.keys) {\n        yield { key };\n      }\n\n      if (data.cursor) {\n        cursor = data.cursor;\n      } else {\n        break;\n      }\n    }\n  }\n}\n\nconst ExportSchema = object({\n  keys: array(string()),\n  cursor: optional(nullable(string())),\n});\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,QAAQ,OAAO,QAAQ,UAAU,gBAAgB;AAC1D,SAAS,UAAU,qBAAqB;AAEjC,MAAM,eAAe;AAAA,EAC1B,2BAA2B;AAAA,EAE3B,MAAM,IACJ,uBACA,KACA,OACA,oBACe;AACf,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB,UAAU,mBAAmB,GAAG,CAAC;AAErE,UAAM,uBAAuB,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,kBAAkB;AAAA,MAC7C;AAAA,MACA,MAAM,MAAM,MAAM;AAAA,IACpB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OACJ,uBACA,KACA,oBACe;AACf,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB,UAAU,mBAAmB,GAAG,CAAC;AAErE,UAAM,uBAAuB,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,kBAAkB;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,IACJ,uBACA,KACA,UACqB;AACrB,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB,UAAU,mBAAmB,GAAG,CAAC;AAErE,UAAM,WAAW,MAAM,uBAAuB,GAAG;AAEjD,UAAM,SAAS,SAAS,MAAM,UAAU;AACxC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAEA,UAAM,sBAAsB,SAAS,QAAQ,IAAI,gBAAgB;AACjE,UAAM,sBAAsB,sBACxB,OAAO,mBAAmB,IAC1B;AAEJ,UAAM,wBACJ,CAAC,CAAC,uBACF,CAAC,CAAC,OAAO,SAAS,mBAAmB,KACrC,uBAAuB;AAGzB,QAAI,uBAAuB;AACzB,YAAM,gBAAgB;AACtB,UAAI,aAAa,UAAa,gBAAgB,UAAU;AACtD,cAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD;AAEA,YAAMA,OAAM,IAAI,WAAW,aAAa;AACxC,UAAIC,UAAS;AACb,UAAI,YAAY;AAEhB,UAAI;AACF,eAAOA,WAAUD,KAAI,QAAQ;AAC3B,gBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAE1C,cAAI,MAAM;AACR,wBAAY;AACZ;AAAA,UACF;AACA,cAAI,CAAC,SAAS,MAAM,WAAW,EAAG;AAElC,gBAAM,aAAaC,UAAS,MAAM;AAClC,cAAI,aAAaD,KAAI,QAAQ;AAC3B,kBAAM,IAAI,MAAM,kCAAkC;AAAA,UACpD;AAEA,UAAAA,KAAI,IAAI,OAAOC,OAAM;AACrB,UAAAA,UAAS;AAAA,QACX;AAAA,MACF,UAAE;AACA,eAAO,YAAY;AAAA,MACrB;AAEA,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,mDAAmD;AAAA,MACrE;AAEA,aAAOA,YAAW,gBAAgBD,OAAMA,KAAI,MAAM,GAAGC,OAAM;AAAA,IAC7D;AAGA,UAAM,SAAuB,CAAC;AAC9B,QAAI,QAAQ;AAEZ,QAAI;AACF,aAAO,MAAM;AACX,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAE1C,YAAI,KAAM;AACV,YAAI,CAAC,SAAS,MAAM,WAAW,EAAG;AAElC,iBAAS,MAAM;AACf,YAAI,aAAa,UAAa,QAAQ,UAAU;AAC9C,gBAAM,IAAI,MAAM,kCAAkC;AAAA,QACpD;AAGA,eAAO,KAAK,MAAM,MAAM,CAAC;AAAA,MAC3B;AAAA,IACF,UAAE;AACA,aAAO,YAAY;AAAA,IACrB;AAGA,UAAM,MAAM,IAAI,WAAW,KAAK;AAChC,QAAI,SAAS;AACb,eAAW,KAAK,QAAQ;AACtB,UAAI,IAAI,GAAG,MAAM;AACjB,gBAAU,EAAE;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,OACL,uBACA,oBACiC;AACjC,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB;AAEpC,QAAI,SAA6B;AACjC,WAAO,MAAM;AACX,YAAM,WAAW,MAAM;AAAA,QACrB,SAAS,GAAG,GAAG,WAAW,mBAAmB,MAAM,CAAC,KAAK;AAAA,QACzD;AAAA,UACE,SAAS;AAAA,YACP,eAAe,UAAU,kBAAkB;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAM,OAAO,cAAc,MAAM,KAAK,YAAY,CAAC;AACnD,YAAM,OAAO,aAAa,MAAM,IAAI;AAEpC,iBAAW,OAAO,KAAK,MAAM;AAC3B,cAAM,EAAE,IAAI;AAAA,MACd;AAEA,UAAI,KAAK,QAAQ;AACf,iBAAS,KAAK;AAAA,MAChB,OAAO;AACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,eAAe,OAAO;AAAA,EAC1B,MAAM,MAAM,OAAO,CAAC;AAAA,EACpB,QAAQ,SAAS,SAAS,OAAO,CAAC,CAAC;AACrC,CAAC;",
+  "sourcesContent": ["import {\n  fetchWithErrorHandling,\n  getAuthorizationEndpoint,\n  verifyHTTPSEndpoint,\n} from \"./utilities\";\nimport { string, array, object, optional, nullable } from \"zod/mini\";\nimport { encode as dagCborEncode, decode as dagCborDecode } from \"@ipld/dag-cbor\";\nimport { GraffitiErrorNotFound, GraffitiErrorTooLarge } from \"@graffiti-garden/api\";\n\n// All batch-capable bucket servers accept these transport limits.\nconst BATCH_KEYS = 32; // total number of keys in a batch request\nconst BATCH_TOTAL_VALUE_BYTES = 1024 * 1024; // total response limit\n\n// This is a heuristic for how long to wait to fill a batch request\n// before sending it. Just enough waiting to capture a few more requests,\n// but not so long that it adds noticeable latency.\nconst BATCH_WAIT_MS = 2;\n\nfunction batchWidth(maxBytes: number) {\n  return Math.min(BATCH_KEYS, Math.floor(BATCH_TOTAL_VALUE_BYTES / maxBytes));\n}\n\ntype PendingGet = {\n  key: string;\n  resolve: (value: Uint8Array) => void;\n  reject: (reason: unknown) => void;\n};\ntype BatchQueue = { requests: PendingGet[]; timer?: ReturnType<typeof setTimeout> };\n\nexport class StorageBuckets {\n  getAuthorizationEndpoint = getAuthorizationEndpoint;\n  private readonly queues = new Map<string, Map<number, BatchQueue>>();\n  private readonly unsupportedBatchEndpoints = new Set<string>();\n\n  async put(\n    storageBucketEndpoint: string,\n    key: string,\n    value: Uint8Array,\n    authorizationToken: string,\n  ): Promise<void> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;\n\n    await fetchWithErrorHandling(url, {\n      method: \"PUT\",\n      headers: {\n        \"Content-Type\": \"application/octet-stream\",\n        Authorization: `Bearer ${authorizationToken}`,\n      },\n      body: value.slice(),\n    });\n  }\n\n  async delete(\n    storageBucketEndpoint: string,\n    key: string,\n    authorizationToken: string,\n  ): Promise<void> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;\n\n    await fetchWithErrorHandling(url, {\n      method: \"DELETE\",\n      headers: {\n        Authorization: `Bearer ${authorizationToken}`,\n      },\n    });\n  }\n\n  async get(\n    storageBucketEndpoint: string,\n    key: string,\n    maxBytes?: number,\n  ): Promise<Uint8Array> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    if (\n      maxBytes !== undefined &&\n      Number.isSafeInteger(maxBytes) &&\n      maxBytes > 0 &&\n      batchWidth(maxBytes) >= 2 &&\n      !this.unsupportedBatchEndpoints.has(storageBucketEndpoint)\n    ) {\n      return new Promise<Uint8Array>((resolve, reject) => {\n        let queuesByMaxBytes = this.queues.get(storageBucketEndpoint);\n        if (!queuesByMaxBytes) {\n          queuesByMaxBytes = new Map();\n          this.queues.set(storageBucketEndpoint, queuesByMaxBytes);\n        }\n        let queue = queuesByMaxBytes.get(maxBytes);\n        if (!queue) {\n          queue = { requests: [] };\n          queuesByMaxBytes.set(maxBytes, queue);\n        }\n        queue.requests.push({ key, resolve, reject });\n        if (queue.requests.length === batchWidth(maxBytes)) {\n          this.flush(storageBucketEndpoint, maxBytes, queue);\n        } else if (queue.timer === undefined) {\n          queue.timer = setTimeout(\n            () => this.flush(storageBucketEndpoint, maxBytes, queue),\n            BATCH_WAIT_MS,\n          );\n        }\n      });\n    }\n    return this.getOne(storageBucketEndpoint, key, maxBytes);\n  }\n\n  private flush(endpoint: string, maxBytes: number, queue: BatchQueue) {\n    if (queue.timer !== undefined) clearTimeout(queue.timer);\n    const requests = queue.requests;\n    const queuesByMaxBytes = this.queues.get(endpoint)!;\n    queuesByMaxBytes.delete(maxBytes);\n    if (queuesByMaxBytes.size === 0) this.queues.delete(endpoint);\n    if (requests.length === 1 || this.unsupportedBatchEndpoints.has(endpoint)) {\n      requests.forEach(({ key, resolve, reject }) => {\n        void this.getOne(endpoint, key, maxBytes).then(resolve, reject);\n      });\n    } else {\n      void this.getBatch(endpoint, maxBytes, requests);\n    }\n  }\n\n  private async getBatch(endpoint: string, maxBytes: number, requests: PendingGet[]) {\n    try {\n      const response = await fetch(`${endpoint}/values`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/cbor\", Accept: \"application/cbor\" },\n        body: dagCborEncode({\n          keys: requests.map(({ key }) => key),\n          maxValueBytes: maxBytes,\n        }).slice(),\n      });\n      if (response.status === 404) {\n        // An older bucket server has no /values route but still serves GETs.\n        this.unsupportedBatchEndpoints.add(endpoint);\n        await Promise.all(requests.map(async ({ key, resolve, reject }) => {\n          try {\n            resolve(await this.getOne(endpoint, key, maxBytes));\n          } catch (error) {\n            reject(error);\n          }\n        }));\n        return;\n      }\n      if (!response.ok) throw new Error(await response.text());\n      const decoded = dagCborDecode(await response.arrayBuffer());\n      if (\n        !decoded || typeof decoded !== \"object\" ||\n        !(\"results\" in decoded) || !Array.isArray(decoded.results) ||\n        decoded.results.length !== requests.length\n      ) throw new Error(\"Invalid storage batch response\");\n\n      decoded.results.forEach((result: unknown, index: number) => {\n        const { resolve, reject } = requests[index];\n        if (!result || typeof result !== \"object\" || !(\"status\" in result)) {\n          reject(new Error(\"Invalid storage batch result\"));\n        } else if (\n          result.status === 200 && \"value\" in result &&\n          result.value instanceof Uint8Array &&\n          result.value.byteLength <= maxBytes\n        ) {\n          resolve(result.value);\n        } else if (result.status === 404) {\n          reject(new GraffitiErrorNotFound(\"Value not found\"));\n        } else if (result.status === 413) {\n          reject(new GraffitiErrorTooLarge(\"Value exceeds maximum byte limit\"));\n        } else {\n          reject(new Error(\"Invalid storage batch result\"));\n        }\n      });\n    } catch (error) {\n      requests.forEach(({ reject }) => reject(error));\n    }\n  }\n\n  private async getOne(\n    storageBucketEndpoint: string,\n    key: string,\n    maxBytes?: number,\n  ): Promise<Uint8Array> {\n    const url = `${storageBucketEndpoint}/value/${encodeURIComponent(key)}`;\n\n    const response = await fetchWithErrorHandling(url);\n\n    const reader = response.body?.getReader();\n    if (!reader) {\n      throw new Error(\"Failed to read value from storage bucket\");\n    }\n\n    const contentLengthHeader = response.headers.get(\"Content-Length\");\n    const parsedContentLength = contentLengthHeader\n      ? Number(contentLengthHeader)\n      : undefined;\n\n    const hasValidContentLength =\n      !!parsedContentLength &&\n      !!Number.isFinite(parsedContentLength) &&\n      parsedContentLength >= 0;\n\n    // Fast path: Content-Length exists and is valid\n    if (hasValidContentLength) {\n      const contentLength = parsedContentLength!;\n      if (maxBytes !== undefined && contentLength > maxBytes) {\n        throw new Error(\"Value exceeds maximum byte limit\");\n      }\n\n      const out = new Uint8Array(contentLength);\n      let offset = 0;\n      let completed = false;\n\n      try {\n        while (offset <= out.length) {\n          const { done, value } = await reader.read();\n\n          if (done) {\n            completed = true;\n            break;\n          }\n          if (!value || value.length === 0) continue;\n\n          const nextOffset = offset + value.length;\n          if (nextOffset > out.length) {\n            throw new Error(\"Received more data than expected\");\n          }\n\n          out.set(value, offset);\n          offset = nextOffset;\n        }\n      } finally {\n        reader.releaseLock();\n      }\n\n      if (!completed) {\n        throw new Error(\"Failed to read complete value from storage bucket\");\n      }\n\n      return offset === contentLength ? out : out.slice(0, offset);\n    }\n\n    // Fallback path: no (usable) Content-Length\n    const chunks: Uint8Array[] = [];\n    let total = 0;\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n\n        if (done) break;\n        if (!value || value.length === 0) continue;\n\n        total += value.length;\n        if (maxBytes !== undefined && total > maxBytes) {\n          throw new Error(\"Value exceeds maximum byte limit\");\n        }\n\n        // Copy because some implementations reuse the underlying buffer\n        chunks.push(value.slice());\n      }\n    } finally {\n      reader.releaseLock();\n    }\n\n    // Concatenate chunks into one Uint8Array\n    const out = new Uint8Array(total);\n    let offset = 0;\n    for (const c of chunks) {\n      out.set(c, offset);\n      offset += c.length;\n    }\n    return out;\n  }\n\n  async *export(\n    storageBucketEndpoint: string,\n    authorizationToken: string,\n  ): AsyncGenerator<{ key: string }> {\n    verifyHTTPSEndpoint(storageBucketEndpoint);\n    const url = `${storageBucketEndpoint}/export`;\n\n    let cursor: string | undefined = undefined;\n    while (true) {\n      const response = await fetchWithErrorHandling(\n        cursor ? `${url}?cursor=${encodeURIComponent(cursor)}` : url,\n        {\n          headers: {\n            Authorization: `Bearer ${authorizationToken}`,\n          },\n        },\n      );\n\n      const blob = await response.blob();\n      const cbor = dagCborDecode(await blob.arrayBuffer());\n      const data = ExportSchema.parse(cbor);\n\n      for (const key of data.keys) {\n        yield { key };\n      }\n\n      if (data.cursor) {\n        cursor = data.cursor;\n      } else {\n        break;\n      }\n    }\n  }\n}\n\nconst ExportSchema = object({\n  keys: array(string()),\n  cursor: optional(nullable(string())),\n});\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,QAAQ,OAAO,QAAQ,UAAU,gBAAgB;AAC1D,SAAS,UAAU,eAAe,UAAU,qBAAqB;AACjE,SAAS,uBAAuB,6BAA6B;AAG7D,MAAM,aAAa;AACnB,MAAM,0BAA0B,OAAO;AAKvC,MAAM,gBAAgB;AAEtB,SAAS,WAAW,UAAkB;AACpC,SAAO,KAAK,IAAI,YAAY,KAAK,MAAM,0BAA0B,QAAQ,CAAC;AAC5E;AASO,MAAM,eAAe;AAAA,EAC1B,2BAA2B;AAAA,EACV,SAAS,oBAAI,IAAqC;AAAA,EAClD,4BAA4B,oBAAI,IAAY;AAAA,EAE7D,MAAM,IACJ,uBACA,KACA,OACA,oBACe;AACf,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB,UAAU,mBAAmB,GAAG,CAAC;AAErE,UAAM,uBAAuB,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,kBAAkB;AAAA,MAC7C;AAAA,MACA,MAAM,MAAM,MAAM;AAAA,IACpB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OACJ,uBACA,KACA,oBACe;AACf,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB,UAAU,mBAAmB,GAAG,CAAC;AAErE,UAAM,uBAAuB,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,kBAAkB;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,IACJ,uBACA,KACA,UACqB;AACrB,wBAAoB,qBAAqB;AACzC,QACE,aAAa,UACb,OAAO,cAAc,QAAQ,KAC7B,WAAW,KACX,WAAW,QAAQ,KAAK,KACxB,CAAC,KAAK,0BAA0B,IAAI,qBAAqB,GACzD;AACA,aAAO,IAAI,QAAoB,CAAC,SAAS,WAAW;AAClD,YAAI,mBAAmB,KAAK,OAAO,IAAI,qBAAqB;AAC5D,YAAI,CAAC,kBAAkB;AACrB,6BAAmB,oBAAI,IAAI;AAC3B,eAAK,OAAO,IAAI,uBAAuB,gBAAgB;AAAA,QACzD;AACA,YAAI,QAAQ,iBAAiB,IAAI,QAAQ;AACzC,YAAI,CAAC,OAAO;AACV,kBAAQ,EAAE,UAAU,CAAC,EAAE;AACvB,2BAAiB,IAAI,UAAU,KAAK;AAAA,QACtC;AACA,cAAM,SAAS,KAAK,EAAE,KAAK,SAAS,OAAO,CAAC;AAC5C,YAAI,MAAM,SAAS,WAAW,WAAW,QAAQ,GAAG;AAClD,eAAK,MAAM,uBAAuB,UAAU,KAAK;AAAA,QACnD,WAAW,MAAM,UAAU,QAAW;AACpC,gBAAM,QAAQ;AAAA,YACZ,MAAM,KAAK,MAAM,uBAAuB,UAAU,KAAK;AAAA,YACvD;AAAA,UACF;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO,KAAK,OAAO,uBAAuB,KAAK,QAAQ;AAAA,EACzD;AAAA,EAEQ,MAAM,UAAkB,UAAkB,OAAmB;AACnE,QAAI,MAAM,UAAU,OAAW,cAAa,MAAM,KAAK;AACvD,UAAM,WAAW,MAAM;AACvB,UAAM,mBAAmB,KAAK,OAAO,IAAI,QAAQ;AACjD,qBAAiB,OAAO,QAAQ;AAChC,QAAI,iBAAiB,SAAS,EAAG,MAAK,OAAO,OAAO,QAAQ;AAC5D,QAAI,SAAS,WAAW,KAAK,KAAK,0BAA0B,IAAI,QAAQ,GAAG;AACzE,eAAS,QAAQ,CAAC,EAAE,KAAK,SAAS,OAAO,MAAM;AAC7C,aAAK,KAAK,OAAO,UAAU,KAAK,QAAQ,EAAE,KAAK,SAAS,MAAM;AAAA,MAChE,CAAC;AAAA,IACH,OAAO;AACL,WAAK,KAAK,SAAS,UAAU,UAAU,QAAQ;AAAA,IACjD;AAAA,EACF;AAAA,EAEA,MAAc,SAAS,UAAkB,UAAkB,UAAwB;AACjF,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,WAAW;AAAA,QACjD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,oBAAoB,QAAQ,mBAAmB;AAAA,QAC1E,MAAM,cAAc;AAAA,UAClB,MAAM,SAAS,IAAI,CAAC,EAAE,IAAI,MAAM,GAAG;AAAA,UACnC,eAAe;AAAA,QACjB,CAAC,EAAE,MAAM;AAAA,MACX,CAAC;AACD,UAAI,SAAS,WAAW,KAAK;AAE3B,aAAK,0BAA0B,IAAI,QAAQ;AAC3C,cAAM,QAAQ,IAAI,SAAS,IAAI,OAAO,EAAE,KAAK,SAAS,OAAO,MAAM;AACjE,cAAI;AACF,oBAAQ,MAAM,KAAK,OAAO,UAAU,KAAK,QAAQ,CAAC;AAAA,UACpD,SAAS,OAAO;AACd,mBAAO,KAAK;AAAA,UACd;AAAA,QACF,CAAC,CAAC;AACF;AAAA,MACF;AACA,UAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,MAAM,SAAS,KAAK,CAAC;AACvD,YAAM,UAAU,cAAc,MAAM,SAAS,YAAY,CAAC;AAC1D,UACE,CAAC,WAAW,OAAO,YAAY,YAC/B,EAAE,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,OAAO,KACzD,QAAQ,QAAQ,WAAW,SAAS,OACpC,OAAM,IAAI,MAAM,gCAAgC;AAElD,cAAQ,QAAQ,QAAQ,CAAC,QAAiB,UAAkB;AAC1D,cAAM,EAAE,SAAS,OAAO,IAAI,SAAS,KAAK;AAC1C,YAAI,CAAC,UAAU,OAAO,WAAW,YAAY,EAAE,YAAY,SAAS;AAClE,iBAAO,IAAI,MAAM,8BAA8B,CAAC;AAAA,QAClD,WACE,OAAO,WAAW,OAAO,WAAW,UACpC,OAAO,iBAAiB,cACxB,OAAO,MAAM,cAAc,UAC3B;AACA,kBAAQ,OAAO,KAAK;AAAA,QACtB,WAAW,OAAO,WAAW,KAAK;AAChC,iBAAO,IAAI,sBAAsB,iBAAiB,CAAC;AAAA,QACrD,WAAW,OAAO,WAAW,KAAK;AAChC,iBAAO,IAAI,sBAAsB,kCAAkC,CAAC;AAAA,QACtE,OAAO;AACL,iBAAO,IAAI,MAAM,8BAA8B,CAAC;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,eAAS,QAAQ,CAAC,EAAE,OAAO,MAAM,OAAO,KAAK,CAAC;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAc,OACZ,uBACA,KACA,UACqB;AACrB,UAAM,MAAM,GAAG,qBAAqB,UAAU,mBAAmB,GAAG,CAAC;AAErE,UAAM,WAAW,MAAM,uBAAuB,GAAG;AAEjD,UAAM,SAAS,SAAS,MAAM,UAAU;AACxC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAEA,UAAM,sBAAsB,SAAS,QAAQ,IAAI,gBAAgB;AACjE,UAAM,sBAAsB,sBACxB,OAAO,mBAAmB,IAC1B;AAEJ,UAAM,wBACJ,CAAC,CAAC,uBACF,CAAC,CAAC,OAAO,SAAS,mBAAmB,KACrC,uBAAuB;AAGzB,QAAI,uBAAuB;AACzB,YAAM,gBAAgB;AACtB,UAAI,aAAa,UAAa,gBAAgB,UAAU;AACtD,cAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD;AAEA,YAAMA,OAAM,IAAI,WAAW,aAAa;AACxC,UAAIC,UAAS;AACb,UAAI,YAAY;AAEhB,UAAI;AACF,eAAOA,WAAUD,KAAI,QAAQ;AAC3B,gBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAE1C,cAAI,MAAM;AACR,wBAAY;AACZ;AAAA,UACF;AACA,cAAI,CAAC,SAAS,MAAM,WAAW,EAAG;AAElC,gBAAM,aAAaC,UAAS,MAAM;AAClC,cAAI,aAAaD,KAAI,QAAQ;AAC3B,kBAAM,IAAI,MAAM,kCAAkC;AAAA,UACpD;AAEA,UAAAA,KAAI,IAAI,OAAOC,OAAM;AACrB,UAAAA,UAAS;AAAA,QACX;AAAA,MACF,UAAE;AACA,eAAO,YAAY;AAAA,MACrB;AAEA,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,mDAAmD;AAAA,MACrE;AAEA,aAAOA,YAAW,gBAAgBD,OAAMA,KAAI,MAAM,GAAGC,OAAM;AAAA,IAC7D;AAGA,UAAM,SAAuB,CAAC;AAC9B,QAAI,QAAQ;AAEZ,QAAI;AACF,aAAO,MAAM;AACX,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAE1C,YAAI,KAAM;AACV,YAAI,CAAC,SAAS,MAAM,WAAW,EAAG;AAElC,iBAAS,MAAM;AACf,YAAI,aAAa,UAAa,QAAQ,UAAU;AAC9C,gBAAM,IAAI,MAAM,kCAAkC;AAAA,QACpD;AAGA,eAAO,KAAK,MAAM,MAAM,CAAC;AAAA,MAC3B;AAAA,IACF,UAAE;AACA,aAAO,YAAY;AAAA,IACrB;AAGA,UAAM,MAAM,IAAI,WAAW,KAAK;AAChC,QAAI,SAAS;AACb,eAAW,KAAK,QAAQ;AACtB,UAAI,IAAI,GAAG,MAAM;AACjB,gBAAU,EAAE;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,OACL,uBACA,oBACiC;AACjC,wBAAoB,qBAAqB;AACzC,UAAM,MAAM,GAAG,qBAAqB;AAEpC,QAAI,SAA6B;AACjC,WAAO,MAAM;AACX,YAAM,WAAW,MAAM;AAAA,QACrB,SAAS,GAAG,GAAG,WAAW,mBAAmB,MAAM,CAAC,KAAK;AAAA,QACzD;AAAA,UACE,SAAS;AAAA,YACP,eAAe,UAAU,kBAAkB;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAM,OAAO,cAAc,MAAM,KAAK,YAAY,CAAC;AACnD,YAAM,OAAO,aAAa,MAAM,IAAI;AAEpC,iBAAW,OAAO,KAAK,MAAM;AAC3B,cAAM,EAAE,IAAI;AAAA,MACd;AAEA,UAAI,KAAK,QAAQ;AACf,iBAAS,KAAK;AAAA,MAChB,OAAO;AACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,eAAe,OAAO;AAAA,EAC1B,MAAM,MAAM,OAAO,CAAC;AAAA,EACpB,QAAQ,SAAS,SAAS,OAAO,CAAC,CAAC;AACrC,CAAC;",
   "names": ["out", "offset"]
 }

package/dist/esm/1-services/4-inboxes-tests.js

@@ -2,6 +2,7 @@ import { assert, describe, expect, test } from "vitest";
 import { Inboxes, LABELED_MESSAGE_LABEL_KEY } from "./4-inboxes";
 import { GraffitiErrorUnauthorized } from "./utilities";
 import { randomBytes } from "@noble/hashes/utils.js";
+import { encode as dagCborEncode, decode as dagCborDecode } from "@ipld/dag-cbor";
 function inboxTests(inboxEndpoint, inboxToken) {
   describe("Inboxes", async () => {
     const inboxes = new Inboxes();
@@ -107,6 +108,25 @@ function inboxTests(inboxEndpoint, inboxToken) {
           }
         });
       }
+      let cursor;
+      for (const [page, expectedCount] of [10, 100, 101].entries()) {
+        const response = await fetch(
+          `${inboxEndpoint}/query${cursor ? `?cursor=${encodeURIComponent(cursor)}` : ""}`,
+          {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/cbor",
+              Authorization: `Bearer ${inboxToken}`
+            },
+            body: cursor ? void 0 : dagCborEncode({ tags: [tags[1]], schema: {} }).slice()
+          }
+        );
+        expect(response.status).toBe(200);
+        const pageResult = dagCborDecode(new Uint8Array(await response.arrayBuffer()));
+        expect(pageResult.results).toHaveLength(expectedCount);
+        expect(pageResult.hasMore).toBe(page < 2);
+        cursor = pageResult.cursor;
+      }
       const iterator = inboxes.query(
         inboxEndpoint,
         [randomBytes(), tags[1], randomBytes()],