@lunora/storage 1.0.0-alpha.35 → 1.0.0-alpha.37

package/README.md

@@ -34,7 +34,7 @@
 
 ---
 
-R2-backed file storage for Lunora. Wraps a Cloudflare `R2Bucket` binding with a typed API (`upload`/`store`, `download`, `delete`, `list`, `getMetadata`, multipart), worker-signed URLs for app-gated access, and native S3 presigned URLs for direct-to-R2 transfer.
+R2-backed file storage for Lunora. Wraps a Cloudflare `R2Bucket` binding with a typed API (`upload`/`store`, `download`, `head`, `delete`, `list`, `getMetadata`, multipart), worker-signed URLs for app-gated access, and native S3 presigned URLs for direct-to-R2 transfer.
 
 Part of the [Lunora](https://github.com/anolilab/lunora) framework — a type-safe, real-time backend on Cloudflare Workers + Durable Objects with a Vite-first DX.
 

package/dist/index.d.mts

@@ -131,10 +131,10 @@ interface Storage {
   }) => Promise<string>;
   /**
    * Read a stored object's metadata (size, content-type, sha256, upload time,
-   * custom metadata) without fetching its body. Returns `null` when the object
-   * is absent. Backed by an R2 HEAD (`bucket.head`) when available, falling
-   * back to a 0-length ranged `get()` otherwise. Mirrors Convex's
-   * `ctx.storage.getMetadata`.
+   * custom metadata) without fetching its body, as a flat serializable shape.
+   * Returns `null` when the object is absent. A projection of
+   * {@link Storage.head}, so it makes the same single body-free read. Mirrors
+   * Convex's `ctx.storage.getMetadata`.
    */
   getMetadata: (key: string) => Promise<ObjectMetadata | null>;
   /**
@@ -147,6 +147,19 @@ interface Storage {
   getPresignedUrl: (key: string, options?: PresignedUrlOptions) => Promise<string>;
   getSignedUrl: (key: string, options?: SignedUrlOptions) => Promise<string>;
   getUrl: (key: string) => string;
+  /**
+   * Read an object's R2 metadata WITHOUT its body — `size` (the full object
+   * size), `etag`, `httpMetadata`, `checksums`, plus the `sha256`/`sha256Base64`
+   * projection `download()` adds. Returns `null` when the object is absent.
+   *
+   * Backed by an R2 HEAD when the binding exposes one, falling back to a
+   * 0-length ranged `get()` otherwise. Prefer this over `download()` whenever
+   * only the metadata is wanted — notably to resolve a `Range` header, where a
+   * plain `download()` starts a full-object body transfer that is then thrown
+   * away. {@link Storage.getMetadata} is the flat, serializable projection of
+   * the same read.
+   */
+  head: (key: string) => Promise<R2ObjectLike | null>;
   list: (prefix?: string, options?: ListOptions) => Promise<{
     cursor?: string;
     objects: R2ObjectLike[];

package/dist/index.d.ts

@@ -131,10 +131,10 @@ interface Storage {
   }) => Promise<string>;
   /**
    * Read a stored object's metadata (size, content-type, sha256, upload time,
-   * custom metadata) without fetching its body. Returns `null` when the object
-   * is absent. Backed by an R2 HEAD (`bucket.head`) when available, falling
-   * back to a 0-length ranged `get()` otherwise. Mirrors Convex's
-   * `ctx.storage.getMetadata`.
+   * custom metadata) without fetching its body, as a flat serializable shape.
+   * Returns `null` when the object is absent. A projection of
+   * {@link Storage.head}, so it makes the same single body-free read. Mirrors
+   * Convex's `ctx.storage.getMetadata`.
    */
   getMetadata: (key: string) => Promise<ObjectMetadata | null>;
   /**
@@ -147,6 +147,19 @@ interface Storage {
   getPresignedUrl: (key: string, options?: PresignedUrlOptions) => Promise<string>;
   getSignedUrl: (key: string, options?: SignedUrlOptions) => Promise<string>;
   getUrl: (key: string) => string;
+  /**
+   * Read an object's R2 metadata WITHOUT its body — `size` (the full object
+   * size), `etag`, `httpMetadata`, `checksums`, plus the `sha256`/`sha256Base64`
+   * projection `download()` adds. Returns `null` when the object is absent.
+   *
+   * Backed by an R2 HEAD when the binding exposes one, falling back to a
+   * 0-length ranged `get()` otherwise. Prefer this over `download()` whenever
+   * only the metadata is wanted — notably to resolve a `Range` header, where a
+   * plain `download()` starts a full-object body transfer that is then thrown
+   * away. {@link Storage.getMetadata} is the flat, serializable projection of
+   * the same read.
+   */
+  head: (key: string) => Promise<R2ObjectLike | null>;
   list: (prefix?: string, options?: ListOptions) => Promise<{
     cursor?: string;
     objects: R2ObjectLike[];

package/dist/index.mjs

@@ -1 +1 @@
-import{createBucketStorage as o}from"./packem_shared/createBucketStorage-BE3H6x-j.mjs";import{createStorage as i,scopeKey as d}from"./packem_shared/createStorage-BDkhOvFd.mjs";import{buildPresignedUrl as g}from"./packem_shared/buildPresignedUrl-c7XqGHZV.mjs";import{buildSignedUrl as p,verifySignedUrl as a}from"./packem_shared/buildSignedUrl-BoKdsDat.mjs";export{g as buildPresignedUrl,p as buildSignedUrl,o as createBucketStorage,i as createStorage,d as scopeKey,a as verifySignedUrl};
+import{createBucketStorage as o}from"./packem_shared/createBucketStorage-BE3H6x-j.mjs";import{createStorage as i,scopeKey as d}from"./packem_shared/createStorage-CucDv4aP.mjs";import{buildPresignedUrl as g}from"./packem_shared/buildPresignedUrl-BpGOczQ6.mjs";import{buildSignedUrl as p,verifySignedUrl as a}from"./packem_shared/buildSignedUrl-Cpw9-kvk.mjs";export{g as buildPresignedUrl,p as buildSignedUrl,o as createBucketStorage,i as createStorage,d as scopeKey,a as verifySignedUrl};

package/dist/packem_shared/{buildPresignedUrl-c7XqGHZV.mjs → buildPresignedUrl-BpGOczQ6.mjs}

@@ -1,4 +1,4 @@
-import{LunoraError as H}from"@lunora/errors";import{a as y,v as R}from"./internal-DygIXcGI.mjs";const $="auto",E="s3",g="AWS4-HMAC-SHA256",x=10080*60,K=900,d=new TextEncoder,z=(t,e)=>t[0]<e[0]?-1:t[0]>e[0]?1:0,i=t=>encodeURIComponent(t).replaceAll(/[!'()*]/gu,e=>`%${e.codePointAt(0)?.toString(16).toUpperCase()??""}`),C=t=>t.split("/").map(e=>i(e)).join("/"),X=async t=>y(await crypto.subtle.digest("SHA-256",d.encode(t))),c=async(t,e)=>{const n=await crypto.subtle.importKey("raw",t,{hash:"SHA-256",name:"HMAC"},!1,["sign"]);return crypto.subtle.sign("HMAC",n,d.encode(e))},O=async(t,e)=>{const n=await c(d.encode(`AWS4${t}`),e),a=await c(n,$),s=await c(a,E);return c(s,"aws4_request")},v=t=>{const e=t.jurisdiction===void 0?"":`${t.jurisdiction}.`;return`${t.accountId}.${e}r2.cloudflarestorage.com`},T=t=>{const e=`${t.toISOString().replaceAll(/[:-]/gu,"").slice(0,15)}Z`;return{amzDate:e,dateStamp:e.slice(0,8)}},N=async t=>{const{credentials:e,key:n}=t,a=t.method??"GET";let s=K;if(t.expiresInSeconds!==void 0){s=Math.floor(t.expiresInSeconds);const o=R(s,x);if(o!==void 0)throw new H("VALIDATION_ERROR",`@lunora/storage: ${o}`)}const l=v(e),w=new Date(t.now?.()??Date.now()),{amzDate:u,dateStamp:S}=T(w),A=`${S}/${$}/${E}/aws4_request`,m=`/${i(e.bucket)}/${C(n)}`,p=[["X-Amz-Algorithm",g],["X-Amz-Credential",`${e.accessKeyId}/${A}`],["X-Amz-Date",u],["X-Amz-Expires",s.toString()],["X-Amz-SignedHeaders","host"]].map(([o,r])=>[i(o),i(r)]).toSorted(z).map(([o,r])=>`${o}=${r}`).join("&"),h=[a,m,p,`host:${l}
+import{LunoraError as H}from"@lunora/errors";import{a as y,v as R}from"./internal-FPCXOi7X.mjs";const $="auto",E="s3",g="AWS4-HMAC-SHA256",x=10080*60,K=900,d=new TextEncoder,z=(t,e)=>t[0]<e[0]?-1:t[0]>e[0]?1:0,i=t=>encodeURIComponent(t).replaceAll(/[!'()*]/gu,e=>`%${e.codePointAt(0)?.toString(16).toUpperCase()??""}`),C=t=>t.split("/").map(e=>i(e)).join("/"),X=async t=>y(await crypto.subtle.digest("SHA-256",d.encode(t))),c=async(t,e)=>{const n=await crypto.subtle.importKey("raw",t,{hash:"SHA-256",name:"HMAC"},!1,["sign"]);return crypto.subtle.sign("HMAC",n,d.encode(e))},O=async(t,e)=>{const n=await c(d.encode(`AWS4${t}`),e),a=await c(n,$),s=await c(a,E);return c(s,"aws4_request")},v=t=>{const e=t.jurisdiction===void 0?"":`${t.jurisdiction}.`;return`${t.accountId}.${e}r2.cloudflarestorage.com`},T=t=>{const e=`${t.toISOString().replaceAll(/[:-]/gu,"").slice(0,15)}Z`;return{amzDate:e,dateStamp:e.slice(0,8)}},N=async t=>{const{credentials:e,key:n}=t,a=t.method??"GET";let s=K;if(t.expiresInSeconds!==void 0){s=Math.floor(t.expiresInSeconds);const o=R(s,x);if(o!==void 0)throw new H("VALIDATION_ERROR",`@lunora/storage: ${o}`)}const l=v(e),w=new Date(t.now?.()??Date.now()),{amzDate:u,dateStamp:S}=T(w),A=`${S}/${$}/${E}/aws4_request`,m=`/${i(e.bucket)}/${C(n)}`,p=[["X-Amz-Algorithm",g],["X-Amz-Credential",`${e.accessKeyId}/${A}`],["X-Amz-Date",u],["X-Amz-Expires",s.toString()],["X-Amz-SignedHeaders","host"]].map(([o,r])=>[i(o),i(r)]).toSorted(z).map(([o,r])=>`${o}=${r}`).join("&"),h=[a,m,p,`host:${l}
 `,"host","UNSIGNED-PAYLOAD"].join(`
 `),I=[g,u,A,await X(h)].join(`
 `),D=await O(e.secretAccessKey,S),f=y(await c(D,I));return`https://${l}${m}?${p}&X-Amz-Signature=${f}`};export{N as buildPresignedUrl};

package/dist/packem_shared/{buildSignedUrl-BoKdsDat.mjs → buildSignedUrl-Cpw9-kvk.mjs}

@@ -1,4 +1,4 @@
-import{LunoraError as h}from"@lunora/errors";import{i as U,b as p,e as u,s as R,t as b,f as S,c as $,v as w,M as L}from"./internal-DygIXcGI.mjs";const T=/^\//,v=(e,s,n,t,o)=>{const a=`${e}
+import{LunoraError as h}from"@lunora/errors";import{i as U,b as p,e as u,s as R,t as b,f as S,c as $,v as w,M as L}from"./internal-FPCXOi7X.mjs";const T=/^\//,v=(e,s,n,t,o)=>{const a=`${e}
 ${s.toLowerCase()}
 ${n}
 ${String(t)}`;return o===void 0?a:`${a}

package/dist/packem_shared/createStorage-CucDv4aP.mjs

@@ -0,0 +1 @@
+import{LunoraError as n}from"@lunora/errors";import{t as A,h as U,a as T}from"./internal-FPCXOi7X.mjs";import{buildPresignedUrl as p}from"./buildPresignedUrl-BpGOczQ6.mjs";import{buildSignedUrl as b}from"./buildSignedUrl-Cpw9-kvk.mjs";const w=1024,L=1e3,M=100,I=e=>{const a=new Uint8Array(e);let i="";for(const u of a)i+=String.fromCodePoint(u);return btoa(i)},S=e=>{const a=e.checksums?.sha256;if(a===void 0)return e;const i=T(a),u=I(a);return new Proxy(e,{get(l,s){if(s==="sha256")return i;if(s==="sha256Base64")return u;const d=Reflect.get(l,s,l);return typeof d=="function"?d.bind(l):d},has(l,s){return s==="sha256"||s==="sha256Base64"||Reflect.has(l,s)}})},E=e=>{const a=e.checksums?.sha256;return{contentType:e.httpMetadata?.contentType,customMetadata:e.customMetadata,key:e.key,sha256:a===void 0?void 0:T(a),size:e.size,uploaded:e.uploaded===void 0?void 0:e.uploaded.getTime()}},R=e=>{const a=e.checksums?.sha256;return{checksums:e.checksums,customMetadata:e.customMetadata,etag:e.etag,httpEtag:e.httpEtag,httpMetadata:e.httpMetadata,key:e.key,sha256:a===void 0?void 0:T(a),sha256Base64:a===void 0?void 0:I(a),size:e.size,uploaded:e.uploaded}},N=(e,a)=>{let i=0;const u=s=>s instanceof ArrayBuffer||ArrayBuffer.isView(s)?s.byteLength:void 0,l=new TransformStream({transform(s,d){const m=u(s);if(m===void 0){d.error(new Error("@lunora/storage: stream chunk is not a byte chunk; cannot enforce maxSize"));return}if(i+=m,i>a){d.error(new Error(`@lunora/storage: stream body exceeds maxSize (> ${String(a)} bytes)`));return}d.enqueue(s)}});return e.pipeThrough(l)},c=e=>{if(typeof e!="string"||e.length===0)throw new n("VALIDATION_ERROR","@lunora/storage: key must be a non-empty string");if(e.length>w)throw new n("VALIDATION_ERROR",`@lunora/storage: key exceeds ${String(w)}-byte limit`);if(e.includes("\0"))throw new n("VALIDATION_ERROR","@lunora/storage: key contains NUL byte");if(U(e))throw new n("VALIDATION_ERROR","@lunora/storage: key contains a control character (including CR/LF)");if(e.startsWith("/"))throw new n("VALIDATION_ERROR","@lunora/storage: key must not start with `/`");if(e.split("/").includes(".."))throw new n("VALIDATION_ERROR","@lunora/storage: key contains a `..` path component")},x=e=>{if(e.allowedContentTypes!==void 0){if(e.contentType===void 0)throw new n("VALIDATION_ERROR","@lunora/storage: contentType is required when allowedContentTypes is set");if(!e.allowedContentTypes.includes(e.contentType))throw new n("VALIDATION_ERROR",`@lunora/storage: contentType "${e.contentType}" not in allowedContentTypes`)}},C=(e,a)=>{c(e),c(a);const u=`${e.endsWith("/")?e.slice(0,-1):e}/${a}`;if(u.length>w)throw new n("VALIDATION_ERROR",`@lunora/storage: scoped key exceeds ${String(w)}-byte limit`);return u},P=e=>{if(!e.bucket)throw new n("INTERNAL","@lunora/storage: `bucket` is required");const a=async(r,t,o={})=>{c(r),x(o);let f=t;if(typeof o.maxSize=="number"){let h;if(t instanceof ArrayBuffer?h=t.byteLength:t instanceof Blob&&(h=t.size),h!==void 0&&h>o.maxSize)throw new n("PAYLOAD_TOO_LARGE",`@lunora/storage: body exceeds maxSize (${String(h)} > ${String(o.maxSize)})`);t instanceof ReadableStream&&(f=N(t,o.maxSize))}const g=await e.bucket.put(r,f,{customMetadata:o.customMetadata,httpMetadata:o.contentType?{contentType:o.contentType}:void 0,...o.sha256===void 0?{}:{sha256:o.sha256}});return{etag:g.etag,httpEtag:g.httpEtag??`"${g.etag}"`,key:g.key}},i=async(r,t={})=>{c(r);const o=await(t.range?e.bucket.get(r,{range:t.range}):e.bucket.get(r));return o&&S(o)},u=async r=>{c(r),await e.bucket.delete(r)},l=async r=>{c(r);const t=e.bucket.head?await e.bucket.head(r):await e.bucket.get(r,{range:{length:0}});return t&&R(t)},s=async r=>{const t=await l(r);return t&&E(t)},d=async(r,t={})=>{if(r?.includes("\0"))throw new n("VALIDATION_ERROR","@lunora/storage: prefix contains NUL byte");const o=t.limit??M,f=Math.min(Math.max(1,Math.floor(o)),L),g=await e.bucket.list({cursor:t.cursor,delimiter:t.delimiter,limit:f,prefix:r});return{cursor:g.cursor,objects:g.objects.map(h=>R(h)),truncated:g.truncated}},m=r=>{if(!e.publicBaseUrl)throw new n("INTERNAL","@lunora/storage: `publicBaseUrl` is required for getUrl()");c(r);const t=r.split("/").map(o=>encodeURIComponent(o)).join("/");return`${A(e.publicBaseUrl)}/${t}`},y=async(r,t={})=>{if(!e.publicBaseUrl)throw new n("INTERNAL","@lunora/storage: `publicBaseUrl` is required for getSignedUrl()");if(!e.signingSecret)throw new n("INTERNAL","@lunora/storage: `signingSecret` is required for getSignedUrl()");return c(r),b({baseUrl:e.publicBaseUrl,contentType:t.contentType,expiresInSeconds:t.expiresInSeconds,key:r,method:t.method,secret:e.signingSecret})};return{createMultipartUpload:async(r,t={})=>{if(c(r),!e.bucket.createMultipartUpload)throw new n("INTERNAL","@lunora/storage: bucket binding does not support multipart uploads (createMultipartUpload)");return e.bucket.createMultipartUpload(r,{customMetadata:t.customMetadata,httpMetadata:t.contentType?{contentType:t.contentType}:void 0})},delete:u,download:i,generateUploadUrl:async(r,t={})=>y(r,{contentType:t.contentType,expiresInSeconds:t.expiresInSeconds,method:"PUT"}),getMetadata:s,getPresignedUrl:async(r,t={})=>{if(!e.s3)throw new n("INTERNAL","@lunora/storage: `s3` credentials are required for getPresignedUrl() — pass { accountId, accessKeyId, secretAccessKey, bucket }");return c(r),p({credentials:e.s3,expiresInSeconds:t.expiresInSeconds,key:r,method:t.method})},getSignedUrl:y,getUrl:m,head:l,list:d,resumeMultipartUpload:(r,t)=>{if(c(r),typeof t!="string"||t.length===0)throw new n("VALIDATION_ERROR","@lunora/storage: resumeMultipartUpload requires a non-empty uploadId");if(!e.bucket.resumeMultipartUpload)throw new n("INTERNAL","@lunora/storage: bucket binding does not support multipart uploads (resumeMultipartUpload)");return e.bucket.resumeMultipartUpload(r,t)},store:a,upload:a}};export{P as createStorage,C as scopeKey};

package/dist/packem_shared/internal-FPCXOi7X.mjs

@@ -0,0 +1 @@
+const y=(t,e)=>{if(t.size<e)return;const n=t.keys().next().value;n!==void 0&&t.delete(n)},d=(t,e,n,s)=>{const o=t.get(e);if(o!==void 0)return o;y(t,s);const r=n().catch(l=>{throw t.get(e)===r&&t.delete(e),l});return t.set(e,r),r},c=new TextEncoder,A=10080*60,h=/^[a-z][a-z0-9+\-.]*:\/\//i,u=Array.from({length:32},(t,e)=>e),a=new RegExp(`[${u.map(t=>String.fromCodePoint(t)).join("")}]`,"u"),f=t=>{const e=String.fromCodePoint(...t);return btoa(e).replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},p=t=>{const e=t.replaceAll("-","+").replaceAll("_","/")+"===".slice((t.length+3)%4),n=atob(e),s=new Uint8Array(n.length);for(let o=0;o<n.length;o+=1)s[o]=n.codePointAt(o)??0;return s},C=64,S=new Map,i=async t=>d(S,t,async()=>crypto.subtle.importKey("raw",c.encode(t),{hash:"SHA-256",name:"HMAC"},!1,["sign","verify"]),C),E=t=>{try{return new URL(t).host}catch{return t.replace(h,"").split("/")[0]??""}},_=t=>{if(a.test(t))throw new TypeError("hmac-url: value must not contain control characters (including CR/LF)")},w=t=>a.test(t),g=/^\/+$/u,b=t=>g.test(t),m=(t,e)=>{if(!Number.isFinite(t)||t<=0)return"expiresInSeconds must be a positive finite number";if(t>e){const n=` (${String(e/86400)} days)`;return`expiresInSeconds must not exceed ${String(e)} seconds${n}`}},H=async(t,e)=>{const n=await i(t),s=await crypto.subtle.sign("HMAC",n,c.encode(e));return f(new Uint8Array(s))},R=async(t,e,n)=>{const s=await i(t);return crypto.subtle.verify("HMAC",s,n,c.encode(e))},x=t=>{const e=new Uint8Array(t);let n="";for(const s of e)n+=s.toString(16).padStart(2,"0");return n},O=t=>{let e=t.length;for(;e>0&&t[e-1]==="/";)e-=1;return t.slice(0,e)};export{A as M,x as a,_ as b,R as c,E as e,p as f,w as h,b as i,H as s,O as t,m as v};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/storage",
-  "version": "1.0.0-alpha.35",
+  "version": "1.0.0-alpha.37",
   "description": "R2-backed storage for Lunora: typed buckets and signed URLs",
   "keywords": [
     "cloudflare",
@@ -50,8 +50,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.22",
-    "@lunora/platform": "1.0.0-alpha.16",
+    "@lunora/errors": "1.0.0-alpha.23",
+    "@lunora/platform": "1.0.0-alpha.17",
     "@visulima/storage": "2.0.0",
     "aws4fetch": "1.0.20"
   },

package/dist/packem_shared/createStorage-BDkhOvFd.mjs

@@ -1 +0,0 @@
-import{LunoraError as s}from"@lunora/errors";import{t as I,h as A,a as T}from"./internal-DygIXcGI.mjs";import{buildPresignedUrl as U}from"./buildPresignedUrl-c7XqGHZV.mjs";import{buildSignedUrl as p}from"./buildSignedUrl-BoKdsDat.mjs";const w=1024,L=1e3,b=100,R=e=>{const a=new Uint8Array(e);let i="";for(const u of a)i+=String.fromCodePoint(u);return btoa(i)},M=e=>{const a=e.checksums?.sha256;if(a===void 0)return e;const i=T(a),u=R(a);return new Proxy(e,{get(l,o){if(o==="sha256")return i;if(o==="sha256Base64")return u;const d=Reflect.get(l,o,l);return typeof d=="function"?d.bind(l):d},has(l,o){return o==="sha256"||o==="sha256Base64"||Reflect.has(l,o)}})},y=e=>{const a=e.checksums?.sha256;return{contentType:e.httpMetadata?.contentType,customMetadata:e.customMetadata,key:e.key,sha256:a===void 0?void 0:T(a),size:e.size,uploaded:e.uploaded===void 0?void 0:e.uploaded.getTime()}},S=e=>{const a=e.checksums?.sha256;return{checksums:e.checksums,customMetadata:e.customMetadata,etag:e.etag,httpEtag:e.httpEtag,httpMetadata:e.httpMetadata,key:e.key,sha256:a===void 0?void 0:T(a),sha256Base64:a===void 0?void 0:R(a),size:e.size,uploaded:e.uploaded}},E=(e,a)=>{let i=0;const u=o=>o instanceof ArrayBuffer||ArrayBuffer.isView(o)?o.byteLength:void 0,l=new TransformStream({transform(o,d){const m=u(o);if(m===void 0){d.error(new Error("@lunora/storage: stream chunk is not a byte chunk; cannot enforce maxSize"));return}if(i+=m,i>a){d.error(new Error(`@lunora/storage: stream body exceeds maxSize (> ${String(a)} bytes)`));return}d.enqueue(o)}});return e.pipeThrough(l)},c=e=>{if(typeof e!="string"||e.length===0)throw new s("VALIDATION_ERROR","@lunora/storage: key must be a non-empty string");if(e.length>w)throw new s("VALIDATION_ERROR",`@lunora/storage: key exceeds ${String(w)}-byte limit`);if(e.includes("\0"))throw new s("VALIDATION_ERROR","@lunora/storage: key contains NUL byte");if(A(e))throw new s("VALIDATION_ERROR","@lunora/storage: key contains a control character (including CR/LF)");if(e.startsWith("/"))throw new s("VALIDATION_ERROR","@lunora/storage: key must not start with `/`");if(e.split("/").includes(".."))throw new s("VALIDATION_ERROR","@lunora/storage: key contains a `..` path component")},N=e=>{if(e.allowedContentTypes!==void 0){if(e.contentType===void 0)throw new s("VALIDATION_ERROR","@lunora/storage: contentType is required when allowedContentTypes is set");if(!e.allowedContentTypes.includes(e.contentType))throw new s("VALIDATION_ERROR",`@lunora/storage: contentType "${e.contentType}" not in allowedContentTypes`)}},$=(e,a)=>{c(e),c(a);const u=`${e.endsWith("/")?e.slice(0,-1):e}/${a}`;if(u.length>w)throw new s("VALIDATION_ERROR",`@lunora/storage: scoped key exceeds ${String(w)}-byte limit`);return u},C=e=>{if(!e.bucket)throw new s("INTERNAL","@lunora/storage: `bucket` is required");const a=async(r,t,n={})=>{c(r),N(n);let f=t;if(typeof n.maxSize=="number"){let h;if(t instanceof ArrayBuffer?h=t.byteLength:t instanceof Blob&&(h=t.size),h!==void 0&&h>n.maxSize)throw new s("PAYLOAD_TOO_LARGE",`@lunora/storage: body exceeds maxSize (${String(h)} > ${String(n.maxSize)})`);t instanceof ReadableStream&&(f=E(t,n.maxSize))}const g=await e.bucket.put(r,f,{customMetadata:n.customMetadata,httpMetadata:n.contentType?{contentType:n.contentType}:void 0,...n.sha256===void 0?{}:{sha256:n.sha256}});return{etag:g.etag,httpEtag:g.httpEtag??`"${g.etag}"`,key:g.key}},i=async(r,t={})=>{c(r);const n=await(t.range?e.bucket.get(r,{range:t.range}):e.bucket.get(r));return n&&M(n)},u=async r=>{c(r),await e.bucket.delete(r)},l=async r=>{if(c(r),e.bucket.head){const n=await e.bucket.head(r);return n&&y(n)}const t=await e.bucket.get(r,{range:{length:0}});return t&&y(t)},o=async(r,t={})=>{if(r?.includes("\0"))throw new s("VALIDATION_ERROR","@lunora/storage: prefix contains NUL byte");const n=t.limit??b,f=Math.min(Math.max(1,Math.floor(n)),L),g=await e.bucket.list({cursor:t.cursor,delimiter:t.delimiter,limit:f,prefix:r});return{cursor:g.cursor,objects:g.objects.map(h=>S(h)),truncated:g.truncated}},d=r=>{if(!e.publicBaseUrl)throw new s("INTERNAL","@lunora/storage: `publicBaseUrl` is required for getUrl()");c(r);const t=r.split("/").map(n=>encodeURIComponent(n)).join("/");return`${I(e.publicBaseUrl)}/${t}`},m=async(r,t={})=>{if(!e.publicBaseUrl)throw new s("INTERNAL","@lunora/storage: `publicBaseUrl` is required for getSignedUrl()");if(!e.signingSecret)throw new s("INTERNAL","@lunora/storage: `signingSecret` is required for getSignedUrl()");return c(r),p({baseUrl:e.publicBaseUrl,contentType:t.contentType,expiresInSeconds:t.expiresInSeconds,key:r,method:t.method,secret:e.signingSecret})};return{createMultipartUpload:async(r,t={})=>{if(c(r),!e.bucket.createMultipartUpload)throw new s("INTERNAL","@lunora/storage: bucket binding does not support multipart uploads (createMultipartUpload)");return e.bucket.createMultipartUpload(r,{customMetadata:t.customMetadata,httpMetadata:t.contentType?{contentType:t.contentType}:void 0})},delete:u,download:i,generateUploadUrl:async(r,t={})=>m(r,{contentType:t.contentType,expiresInSeconds:t.expiresInSeconds,method:"PUT"}),getMetadata:l,getPresignedUrl:async(r,t={})=>{if(!e.s3)throw new s("INTERNAL","@lunora/storage: `s3` credentials are required for getPresignedUrl() — pass { accountId, accessKeyId, secretAccessKey, bucket }");return c(r),U({credentials:e.s3,expiresInSeconds:t.expiresInSeconds,key:r,method:t.method})},getSignedUrl:m,getUrl:d,list:o,resumeMultipartUpload:(r,t)=>{if(c(r),typeof t!="string"||t.length===0)throw new s("VALIDATION_ERROR","@lunora/storage: resumeMultipartUpload requires a non-empty uploadId");if(!e.bucket.resumeMultipartUpload)throw new s("INTERNAL","@lunora/storage: bucket binding does not support multipart uploads (resumeMultipartUpload)");return e.bucket.resumeMultipartUpload(r,t)},store:a,upload:a}};export{C as createStorage,$ as scopeKey};

package/dist/packem_shared/internal-DygIXcGI.mjs

@@ -1 +0,0 @@
-const l=(t,e)=>{if(t.size<e)return;const n=t.keys().next().value;n!==void 0&&t.delete(n)},c=new TextEncoder,S=10080*60,y=/^[a-z][a-z0-9+\-.]*:\/\//i,d=Array.from({length:32},(t,e)=>e),a=new RegExp(`[${d.map(t=>String.fromCodePoint(t)).join("")}]`,"u"),h=t=>{const e=String.fromCodePoint(...t);return btoa(e).replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},f=t=>{const e=t.replaceAll("-","+").replaceAll("_","/")+"===".slice((t.length+3)%4),n=atob(e),s=new Uint8Array(n.length);for(let o=0;o<n.length;o+=1)s[o]=n.codePointAt(o)??0;return s},u=64,r=new Map,i=async t=>{const e=r.get(t);if(e)return e;l(r,u);const n=crypto.subtle.importKey("raw",c.encode(t),{hash:"SHA-256",name:"HMAC"},!1,["sign","verify"]);return r.set(t,n),n},p=t=>{try{return new URL(t).host}catch{return t.replace(y,"").split("/")[0]??""}},A=t=>{if(a.test(t))throw new TypeError("hmac-url: value must not contain control characters (including CR/LF)")},g=t=>a.test(t),C=/^\/+$/u,E=t=>C.test(t),_=(t,e)=>{if(!Number.isFinite(t)||t<=0)return"expiresInSeconds must be a positive finite number";if(t>e){const n=` (${String(e/86400)} days)`;return`expiresInSeconds must not exceed ${String(e)} seconds${n}`}},m=async(t,e)=>{const n=await i(t),s=await crypto.subtle.sign("HMAC",n,c.encode(e));return h(new Uint8Array(s))},w=async(t,e,n)=>{const s=await i(t);return crypto.subtle.verify("HMAC",s,n,c.encode(e))},b=t=>{const e=new Uint8Array(t);let n="";for(const s of e)n+=s.toString(16).padStart(2,"0");return n},H=t=>{let e=t.length;for(;e>0&&t[e-1]==="/";)e-=1;return t.slice(0,e)};export{S as M,b as a,A as b,w as c,p as e,f,g as h,E as i,m as s,H as t,_ as v};