@lossless.org/objectstorage 10.7.0 → 11.0.0

package/.smartconfig.json

@@ -1,5 +1,5 @@
 {
-  "@git.zone/tsrust": {
+  "@git.zone/rsrepo": {
     "targetsByHost": {
       "linux": [
         "linux_amd64",
@@ -37,12 +37,17 @@
       ]
     }
   },
-  "@git.zone/tstest": {
-    "test": "test/",
-    "concurrency": 1,
-    "timeout": 300,
-    "prepare": {
-      "once": "tsrust --configured-targets"
+  "@git.zone/tsrepo": {
+    "test": {
+      "test": "test/",
+      "concurrency": 1,
+      "timeout": 300,
+      "prepare": {
+        "once": "rsrepo --configured-targets"
+      }
+    },
+    "docs": {
+      "legal": "\n## License and Legal Information\n\nThis repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [license](./license.md) file.\n\n**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.\n\n### Trademarks\n\nThis project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.\n\nUse of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.\n\n### Company Information\n\nTask Venture Capital GmbH  \nRegistered at District Court Bremen HRB 35230 HB, Germany\n\nFor any legal inquiries or further information, please contact us via email at hello@task.vc.\n\nBy using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.\n"
     }
   },
   "@git.zone/cli": {
@@ -108,9 +113,6 @@
       }
     }
   },
-  "@git.zone/tsdoc": {
-    "legal": "\n## License and Legal Information\n\nThis repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [license](./license.md) file.\n\n**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.\n\n### Trademarks\n\nThis project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.\n\nUse of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.\n\n### Company Information\n\nTask Venture Capital GmbH  \nRegistered at District Court Bremen HRB 35230 HB, Germany\n\nFor any legal inquiries or further information, please contact us via email at hello@task.vc.\n\nBy using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.\n"
-  },
   "@ship.zone/szci": {
     "npmGlobalTools": []
   },

package/dist_rust/ruststorage_linux_amd64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "1db5e49ed9857fbea1e3d3298c447129580d273d94b927d92159819ce85c2fd9",
+  "binarySha256": "1980c7bbf44460d25e11566b17e4712b72f5404c112ff7a5afef9a35b162f32c",
   "buildInfo": {
     "projectName": "@lossless.org/objectstorage",
-    "projectVersion": "10.7.0",
-    "gitCommit": "a4a276bb852a2d81a3a8bdedee80fe4748a8b319",
+    "projectVersion": "11.0.0",
+    "gitCommit": "c81d8670c3a4eb21d8b926861ab0276aed7e1344",
     "gitDirty": false,
-    "builtAt": "2026-10-14T01:21:25.465Z",
-    "tsrustVersion": "4.5.1",
+    "builtAt": "2026-11-04T21:59:02.812Z",
+    "tsrustVersion": "1.1.1",
     "binary": "ruststorage",
     "target": "linux_amd64"
   }

package/dist_rust/ruststorage_linux_amd64_musl.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "b0da2b5d3cf5b0ff9d1f07b45042478066f1e9495db903c61a059f2443bbb7e3",
+  "binarySha256": "60d85f23387481dcfa616e86e731da9a8fdbac66c9786e26feaa955aec1e8f91",
   "buildInfo": {
     "projectName": "@lossless.org/objectstorage",
-    "projectVersion": "10.7.0",
-    "gitCommit": "a4a276bb852a2d81a3a8bdedee80fe4748a8b319",
+    "projectVersion": "11.0.0",
+    "gitCommit": "c81d8670c3a4eb21d8b926861ab0276aed7e1344",
     "gitDirty": false,
-    "builtAt": "2026-10-14T01:21:26.644Z",
-    "tsrustVersion": "4.5.1",
+    "builtAt": "2026-11-04T21:59:04.054Z",
+    "tsrustVersion": "1.1.1",
     "binary": "ruststorage",
     "target": "linux_amd64_musl"
   }

package/dist_rust/ruststorage_linux_arm64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "61f0ee887b3a8f69b3c19a86de1264304d69a446bdc85444870a4439978494a5",
+  "binarySha256": "7c067c7d454c697f2f1f2324a70e68d315fd5705584cb22e34e31d1728de7368",
   "buildInfo": {
     "projectName": "@lossless.org/objectstorage",
-    "projectVersion": "10.7.0",
-    "gitCommit": "a4a276bb852a2d81a3a8bdedee80fe4748a8b319",
+    "projectVersion": "11.0.0",
+    "gitCommit": "c81d8670c3a4eb21d8b926861ab0276aed7e1344",
     "gitDirty": false,
-    "builtAt": "2026-10-14T01:21:26.065Z",
-    "tsrustVersion": "4.5.1",
+    "builtAt": "2026-11-04T21:59:03.472Z",
+    "tsrustVersion": "1.1.1",
     "binary": "ruststorage",
     "target": "linux_arm64"
   }

package/dist_rust/ruststorage_linux_arm64_musl.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "c6622111e393261c6858c756f15c69131374bf440c4d5d4b1b8657540bd264cd",
+  "binarySha256": "8978c9b56759428a25399843a2cdbc0f08c56aafc7c315189ba2605ff043a725",
   "buildInfo": {
     "projectName": "@lossless.org/objectstorage",
-    "projectVersion": "10.7.0",
-    "gitCommit": "a4a276bb852a2d81a3a8bdedee80fe4748a8b319",
+    "projectVersion": "11.0.0",
+    "gitCommit": "c81d8670c3a4eb21d8b926861ab0276aed7e1344",
     "gitDirty": false,
-    "builtAt": "2026-10-14T01:21:27.150Z",
-    "tsrustVersion": "4.5.1",
+    "builtAt": "2026-11-04T21:59:04.554Z",
+    "tsrustVersion": "1.1.1",
     "binary": "ruststorage",
     "target": "linux_arm64_musl"
   }

package/dist_rust/ruststorage_macos_amd64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "a61dec7b20e1b2f47a4d23924e997109adfe21f3beef66e0b198b19e0bf29419",
+  "binarySha256": "7fafb5f1a17fabafae190aafe96e6337636c1cab40566715e5ac15af3caed951",
   "buildInfo": {
     "projectName": "@lossless.org/objectstorage",
-    "projectVersion": "10.7.0",
-    "gitCommit": "a4a276bb852a2d81a3a8bdedee80fe4748a8b319",
+    "projectVersion": "11.0.0",
+    "gitCommit": "c81d8670c3a4eb21d8b926861ab0276aed7e1344",
     "gitDirty": false,
-    "builtAt": "2026-10-14T01:32:16.713Z",
-    "tsrustVersion": "4.5.1",
+    "builtAt": "2026-11-04T22:26:30.568Z",
+    "tsrustVersion": "1.1.1",
     "binary": "ruststorage",
     "target": "macos_amd64"
   }

package/dist_rust/ruststorage_macos_arm64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "90ccf74fea89d47d507354bd3fb4673d2b8b33a82bcf714bd8f9a390e45ac25b",
+  "binarySha256": "b0b608cff5a23cfc2e9afb73539e904c0dcc22902cff02a7b178257431a278ca",
   "buildInfo": {
     "projectName": "@lossless.org/objectstorage",
-    "projectVersion": "10.7.0",
-    "gitCommit": "a4a276bb852a2d81a3a8bdedee80fe4748a8b319",
+    "projectVersion": "11.0.0",
+    "gitCommit": "c81d8670c3a4eb21d8b926861ab0276aed7e1344",
     "gitDirty": false,
-    "builtAt": "2026-10-14T01:32:17.538Z",
-    "tsrustVersion": "4.5.1",
+    "builtAt": "2026-11-04T22:26:31.267Z",
+    "tsrustVersion": "1.1.1",
     "binary": "ruststorage",
     "target": "macos_arm64"
   }

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@lossless.org/objectstorage',
-    version: '10.7.0',
+    version: '11.0.0',
     description: 'A Node.js TypeScript package to create a local S3-compatible storage server using mapped local directories for development and testing purposes.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSw2QkFBNkI7SUFDbkMsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLGtKQUFrSjtDQUNoSyxDQUFBIn0=

package/dist_ts/index.d.ts

@@ -54,6 +54,11 @@ export interface ILimitsConfig {
 export interface IMultipartConfig {
     expirationDays?: number;
     cleanupIntervalMinutes?: number;
+    /**
+     * Open multipart uploads that the prefix credentials of one scope (bucket
+     * and prefix) may hold together (default 100). Counted in memory.
+     */
+    maxUploadsPerPrefixScope?: number;
 }
 /**
  * Server configuration
@@ -100,6 +105,11 @@ export interface IStorageConfig {
 export interface IErasureConfig {
     dataShards?: number;
     parityShards?: number;
+    /**
+     * Bytes per erasure-coded chunk, between 1 and 64 MiB (67,108,864 bytes);
+     * startup refuses a value outside that range, because every manifest
+     * refuses a larger chunk. Default 4,194,304 (4 MiB).
+     */
     chunkSizeBytes?: number;
 }
 /**
@@ -107,6 +117,13 @@ export interface IErasureConfig {
  */
 export interface IDriveConfig {
     paths: string[];
+    /**
+     * Accept drive roots that share a device (`st_dev`). Each drive root counts
+     * as one failure domain, so by default startup refuses two drive roots on
+     * one device. Set this only for dev and test clusters whose drive roots are
+     * directories on one filesystem. Default false.
+     */
+    allowSharedDevice?: boolean;
 }
 /**
  * Cluster configuration for distributed mode
@@ -120,6 +137,16 @@ export interface IClusterConfig {
     drives?: IDriveConfig;
     heartbeatIntervalMs?: number;
     heartbeatTimeoutMs?: number;
+    /**
+     * Longest a single GET may run, in milliseconds, from its start to its last
+     * byte, including the client's transfer time. A longer GET is aborted.
+     * Superseded and deleted object generations keep their shards for this
+     * deadline plus the smaller of the deadline and one hour, then cleanup frees
+     * them. Must be the same on every node: a mismatch can abort streams but
+     * never serves wrong bytes. Default 21,600,000 (6 hours); allowed from
+     * 60,000 (1 minute) to 604,800,000 (7 days).
+     */
+    getDeadlineMs?: number;
 }
 /**
  * Configuration as the engine receives it: every section resolved.
@@ -281,6 +308,32 @@ export interface IBucketTenantMetadata {
     region?: string;
     retention?: IBucketRetentionReceipt;
 }
+export interface IPrefixCredentialInput {
+    bucketName: string;
+    /** Unreserved characters (RFC 3986) and `/`; ends with `/`, no leading `/`. */
+    prefix: string;
+    /** First node: lifetime in seconds, 1..43200. */
+    ttlSeconds?: number;
+    /** Fan-out to further nodes: the first node's expiresAt (epoch ms). */
+    expiresAt?: number;
+    /** Supply both together with expiresAt to install an existing credential on another node. */
+    accessKeyId?: string;
+    secretAccessKey?: string;
+    region?: string;
+}
+export interface IPrefixCredentialMetadata {
+    accessKeyId: string;
+    bucketName: string;
+    prefix: string;
+    region: string;
+    /** Epoch ms. */
+    createdAt: number;
+    /** Epoch ms; requests are refused from this instant and admitted ones end at it. */
+    expiresAt: number;
+}
+export interface IPrefixCredential extends IPrefixCredentialMetadata {
+    secretAccessKey: string;
+}
 export interface IBucketRetentionPolicyInput {
     mode: 'compliance';
     policyId: string;
@@ -622,6 +675,10 @@ export interface IObjectStorageHealth {
         enabled: boolean;
         credentialCount: number;
         tenantCredentialCount: number;
+        prefixCredentialCount: number;
+        prefixCredentialTombstoneCount: number;
+        /** False when the prefix credential file is unreadable: every prefix credential is refused. */
+        prefixCredentialStoreAvailable: boolean;
     };
     bucketCount: number;
     objectCount: number;
@@ -641,6 +698,12 @@ export declare class ObjectStorageResourceFenceError extends Error {
     readonly code: TObjectStorageResourceFenceErrorCode;
     constructor(codeArg: TObjectStorageResourceFenceErrorCode, messageArg: string, causeArg?: unknown);
 }
+export declare const objectStorageCredentialErrorCodes: readonly ['ECREDENTIAL_AUTH_DISABLED', 'ECREDENTIAL_INVALID_PREFIX', 'ECREDENTIAL_INVALID_TTL', 'ECREDENTIAL_INVALID_EXPIRY', 'ECREDENTIAL_INVALID_KEY', 'ECREDENTIAL_NO_SUCH_BUCKET', 'ECREDENTIAL_BUCKET_UNAVAILABLE', 'ECREDENTIAL_CONFLICT', 'ECREDENTIAL_REVOKED', 'ECREDENTIAL_NOT_PREFIX', 'ECREDENTIAL_LIMIT', 'ECREDENTIAL_PERSISTENCE', 'ECREDENTIAL_STORE_UNAVAILABLE'];
+export type TObjectStorageCredentialErrorCode = (typeof objectStorageCredentialErrorCodes)[number];
+export declare class ObjectStorageCredentialError extends Error {
+    readonly code: TObjectStorageCredentialErrorCode;
+    constructor(codeArg: TObjectStorageCredentialErrorCode, messageArg: string, causeArg?: unknown);
+}
 export interface IObjectStorageMetrics {
     bucketCount: number;
     objectCount: number;
@@ -694,6 +757,8 @@ export interface IClusterRepairHealth {
     lastDurationMs?: number;
     shardsChecked?: number;
     shardsHealed?: number;
+    /** Pending shards (writes that failed at publication) the last scan left pending. */
+    shardsPending?: number;
     failed?: number;
     lastError?: string;
 }
@@ -713,6 +778,33 @@ export interface IClusterHealth {
     erasure?: IClusterErasureHealth;
     repairs?: IClusterRepairHealth;
 }
+/**
+ * The result of one cluster healing scan, as `ObjectStorage.runHealingScan()`
+ * returns it. Times are milliseconds since the Unix epoch.
+ */
+export interface IClusterHealingScanResult {
+    /** When the scan started; always after the request arrived. */
+    startedAt: number;
+    completedAt: number;
+    durationMs: number;
+    /** Shard placements checked at their drives (placements on offline nodes are not). */
+    shardsChecked: number;
+    /** Shards written: missing placements rebuilt and pending shards completed. */
+    shardsHealed: number;
+    /** Pending shards (writes that failed at publication) this scan left pending. */
+    shardsPending: number;
+    /** Failed checks, rebuilds, writes and manifest stores. */
+    failed: number;
+}
+export interface IRunHealingScanOptions {
+    /**
+     * How long to wait for the scan, in milliseconds. Defaults to the bridge's
+     * request timeout (300,000). The engine cannot cancel a scan: one that
+     * outlasts this keeps running, its result is discarded, and a later call
+     * joins the next scan that starts after it.
+     */
+    timeoutMs?: number;
+}
 /**
  * Main ObjectStorage class - production-ready S3-compatible storage server
  */
@@ -757,6 +849,27 @@ export declare class ObjectStorage {
     getBucketTenantDescriptor(optionsArg: {
         bucketName: string;
     }): Promise<IBucketTenantDescriptor>;
+    /**
+     * Creates a credential confined to one key prefix of one bucket until its
+     * expiry. The first node takes `ttlSeconds`; further nodes of a fan-out take
+     * the first result's `accessKeyId`, `secretAccessKey` and `expiresAt`. The
+     * secret is returned only here and never kept by this instance.
+     */
+    createPrefixCredential(inputArg: IPrefixCredentialInput): Promise<IPrefixCredential>;
+    /**
+     * Revokes a prefix credential on this node. An unknown ID is recorded as
+     * revoked too, so a later create for it is refused; `revoked` is true only
+     * when a live credential was removed.
+     */
+    revokePrefixCredential(optionsArg: {
+        accessKeyId: string;
+    }): Promise<{
+        revoked: boolean;
+    }>;
+    /** Lists this node's live prefix credentials, without secrets. */
+    listPrefixCredentials(optionsArg?: {
+        bucketName?: string;
+    }): Promise<IPrefixCredentialMetadata[]>;
     getBucketRetentionCapability(): Promise<IBucketRetentionCapability>;
     getBucketRetentionReceipt(optionsArg: {
         bucketName: string;
@@ -789,6 +902,18 @@ export declare class ObjectStorage {
      */
     replaceCredentials(credentials: IStorageCredential[]): Promise<void>;
     getClusterHealth(): Promise<IClusterHealth>;
+    /**
+     * Runs a healing scan on this cluster node and resolves with its result.
+     * The scan covers the manifests this node coordinated. The request joins
+     * the next scan that starts after it arrives, never one already running,
+     * and requests that arrive together share one scan. It rejects in
+     * standalone mode, when the scan fails (for example without a majority of
+     * the cluster, or when a bucket's manifests cannot be listed), when 16
+     * requests already wait for a scan to start, and when the engine shuts down
+     * before the scan completes. The engine answers other management calls
+     * while the scan runs.
+     */
+    runHealingScan(optionsArg?: IRunHealingScanOptions): Promise<IClusterHealingScanResult>;
     getHealth(): Promise<IObjectStorageHealth>;
     getMetrics(): Promise<IObjectStorageMetrics>;
     /**