@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.10

package/dist/storage/config/storage-connection-test.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-connection-test.service.js","sourceRoot":"","sources":["../../../src/storage/config/storage-connection-test.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAE5D,4CAAmD;AAGnD,yEAA4E;AAQnE,yGARA,6CAAwB,OAQA;AAFjC,6EAAwG;AAIxG,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,iDAAiD;AACjD,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,oCAAoC;AACpC,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,uCAAuC;AACvC,EAAE;AACF,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,gFAAgF;AAChF,8CAA8C;AAC9C,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,sEAAsE;AACtE,gFAAgF;AAEhF;;;;GAIG;AAEI,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAIK;IACzB;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;IAExE,YAC4C,MAAqB,EAC9C,UAAoC;QADX,WAAM,GAAN,MAAM,CAAe;QAC9C,eAAU,GAAV,UAAU,CAA0B;IACpD,CAAC;IAEJ;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CACR,KAA6B,EAC7B,WAAmB;QAEnB,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAkE,CAAC,CAAC;QAEnH,IAAI,OAAgC,CAAC;QAErC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,gEAAgE;YAChE,OAAO,GAAG;gBACR,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC9H,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,CAAC,EAAE,gCAAgC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5H,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,QAAmC,EACnC,OAAgC,EAChC,WAAiB,EACjB,WAAmB;QAEnB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QACtC,MAAM,MAAM,GAA6B,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9E,GAAG,KAAK;YACR,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;SACzD,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC7B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACrI,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAEjF,MAAM,MAAM,GAAG,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,OAAO,OAAO,EAAE,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;QAE1H,MAAM,MAAM,GAAgC;YAC1C,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM;YACN,iBAAiB,EAAE,QAAQ;YAC3B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;SACvC,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAClC,IAAI,EAAE;gBACJ,WAAW;gBACX,MAAM,EAAE,qBAAqB;gBAC7B,UAAU,EAAE,iBAAiB;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,6EAA6E;gBAC7E,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO;oBACP,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;iBACgC;aACtC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2CAA2C,WAAW,GAAG;gBACvD,aAAa,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,MAAM,IAAI,QAAQ,KAAK;gBACrE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;oBAChD,CAAC,CAAC,MAAM;yBACH,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;yBAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC3C,IAAI,CAAC,GAAG,CAAC;oBACd,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACtB,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAhHY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;6CACK,qDAAwB;GAL5C,4BAA4B,CAgHxC"}

package/dist/storage/config/storage-driver-context.d.ts

@@ -0,0 +1,36 @@
+import type { Logger } from '@nestjs/common';
+import type { ConfigService } from '@nestjs/config';
+import type { StorageDriverContext, StorageDriverSettings } from '../drivers/storage-driver';
+/**
+ * The multipart part size the deployment is configured for (`storage.partSize`).
+ *
+ * @param config - the application configuration.
+ * @stability experimental
+ */
+export declare function storagePartSize(config: Pick<ConfigService, 'get'>): number;
+/**
+ * This deployment's own origin (`APP_URL`, normalised to scheme, host and port),
+ * for a driver that sets a CORS rule. Normalised because that is what the CORS
+ * specification compares: `https://app.example.com/` with a trailing slash
+ * matches nothing, silently. A value that is not a URL is returned unchanged,
+ * so the bad value is in front of the administrator in the response rather
+ * than hidden behind an exception.
+ *
+ * @param config - the application configuration.
+ * @stability experimental
+ */
+export declare function storageAppOrigin(config: Pick<ConfigService, 'get'>): string;
+/**
+ * The context of a driver operation.
+ *
+ * @param input - the driver's settings, its secret resolver, a logger and the configuration.
+ * @returns the context.
+ * @stability experimental
+ */
+export declare function storageDriverContext(input: {
+    settings: StorageDriverSettings;
+    secret(name: string): Promise<string | null>;
+    logger: Logger;
+    config: Pick<ConfigService, 'get'>;
+}): StorageDriverContext;
+//# sourceMappingURL=storage-driver-context.d.ts.map

package/dist/storage/config/storage-driver-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-driver-context.d.ts","sourceRoot":"","sources":["../../../src/storage/config/storage-driver-context.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAG7F;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,CAQ3E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;CACpC,GAAG,oBAAoB,CAQvB"}

package/dist/storage/config/storage-driver-context.js

@@ -0,0 +1,61 @@
+"use strict";
+// =============================================================================
+// Building the context every storage driver operation receives (PP-14.7, #925)
+// =============================================================================
+//
+// One place that turns "this driver, these settings, this secret resolver" into
+// the `StorageDriverContext` a driver's `build`, `testConnection`, `provision`,
+// `listKeys` and `purge` are called with, so the provider that serves requests,
+// the admin test and the provisioning route cannot disagree about it.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storagePartSize = storagePartSize;
+exports.storageAppOrigin = storageAppOrigin;
+exports.storageDriverContext = storageDriverContext;
+const storage_options_1 = require("../storage.options");
+/**
+ * The multipart part size the deployment is configured for (`storage.partSize`).
+ *
+ * @param config - the application configuration.
+ * @stability experimental
+ */
+function storagePartSize(config) {
+    return config.get('storage.partSize', storage_options_1.DEFAULT_STORAGE_PART_SIZE_BYTES);
+}
+/**
+ * This deployment's own origin (`APP_URL`, normalised to scheme, host and port),
+ * for a driver that sets a CORS rule. Normalised because that is what the CORS
+ * specification compares: `https://app.example.com/` with a trailing slash
+ * matches nothing, silently. A value that is not a URL is returned unchanged,
+ * so the bad value is in front of the administrator in the response rather
+ * than hidden behind an exception.
+ *
+ * @param config - the application configuration.
+ * @stability experimental
+ */
+function storageAppOrigin(config) {
+    const appUrl = config.get('appUrl') ?? '';
+    try {
+        return new URL(appUrl).origin;
+    }
+    catch {
+        return appUrl;
+    }
+}
+/**
+ * The context of a driver operation.
+ *
+ * @param input - the driver's settings, its secret resolver, a logger and the configuration.
+ * @returns the context.
+ * @stability experimental
+ */
+function storageDriverContext(input) {
+    return {
+        settings: input.settings,
+        secret: input.secret,
+        logger: input.logger,
+        partSize: storagePartSize(input.config),
+        appOrigin: storageAppOrigin(input.config),
+    };
+}
+//# sourceMappingURL=storage-driver-context.js.map

package/dist/storage/config/storage-driver-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-driver-context.js","sourceRoot":"","sources":["../../../src/storage/config/storage-driver-context.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,sEAAsE;AACtE,gFAAgF;;AAchF,0CAEC;AAaD,4CAQC;AASD,oDAaC;AArDD,wDAAqE;AAErE;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,MAAkC;IAChE,OAAO,MAAM,CAAC,GAAG,CAAS,kBAAkB,EAAE,iDAA+B,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAAC,MAAkC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAS,QAAQ,CAAC,IAAI,EAAE,CAAC;IAElD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,KAKpC;IACC,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC"}

package/dist/storage/config/storage-not-configured.error.d.ts

@@ -0,0 +1,70 @@
+import { ServiceUnavailableException } from '@nestjs/common';
+/**
+ * Where an administrator fixes this.
+ *
+ * Named in the `remedy` of every instance, because "storage is not configured"
+ * without a destination is a support ticket. Kept as a constant so the settings
+ * page can move without leaving a wrong path in an error body that is the only
+ * instruction some operators will ever see.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_SETTINGS_PATH = "/admin/settings/storage";
+/**
+ * Why storage could not be used. Reported verbatim; never inferred.
+ *
+ * @stability experimental
+ */
+export type StorageNotConfiguredReason = 
+/** The configuration is incomplete — `details.missing` says which fields. */
+'storage_not_configured'
+/**
+ * A SYNCHRONOUS question (`getBucket()`) has no answer: no settings read has
+ * succeeded in this process yet, or the one that did named no bucket.
+ * Distinct from the above because it cannot list missing fields — the caller
+ * never got far enough to check any — and because one of its two causes (an
+ * unreadable settings row at startup) clears itself.
+ */
+ | 'storage_bucket_unknown';
+/**
+ * Thrown by `ResolvingStorageProvider` when this deployment has no usable
+ * object storage.
+ *
+ * Constructed through the two named factories rather than directly, so the
+ * `reason` and the `remedy` cannot be paired up wrongly at a call site.
+ *
+ * @stability experimental
+ */
+export declare class StorageNotConfiguredError extends ServiceUnavailableException {
+    constructor(message: string, details: {
+        reason: StorageNotConfiguredReason;
+        remedy: string;
+        provider?: string;
+        missing?: string[];
+    });
+    /**
+     * The ordinary case: the settings row (and/or the credential store) is not
+     * filled in.
+     *
+     * The missing FIELD NAMES are in the body on purpose. An administrator who is
+     * told only "storage is not configured" reloads a form that looks complete —
+     * because the one empty field is the secret access key, which by design
+     * cannot be displayed. Naming the fields is what makes that state
+     * diagnosable, and a field name carries nothing an attacker did not already
+     * know from the public settings schema.
+     */
+    static missing(provider: string, missing: string[]): StorageNotConfiguredError;
+    /**
+     * The narrow case: something asked, synchronously, which bucket is in use,
+     * and this process does not know.
+     *
+     * Only `getBucket()` can raise this — see the long comment on that method in
+     * `ResolvingStorageProvider`. It is deliberately NOT reported as the same
+     * thing as an incomplete configuration, because it has two causes with
+     * different remedies (no bucket saved, or a settings row that was unreadable
+     * when this process started) and it cannot tell them apart. Naming both in
+     * the remedy is more use than picking one and being wrong half the time.
+     */
+    static unresolved(): StorageNotConfiguredError;
+}
+//# sourceMappingURL=storage-not-configured.error.d.ts.map

package/dist/storage/config/storage-not-configured.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-not-configured.error.d.ts","sourceRoot":"","sources":["../../../src/storage/config/storage-not-configured.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AA8C7D;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,0BAA0B;AACpC,6EAA6E;AAC3E,wBAAwB;AAC1B;;;;;;GAMG;GACD,wBAAwB,CAAC;AAE7B;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,SAAQ,2BAA2B;gBAEtE,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QACP,MAAM,EAAE,0BAA0B,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB;IAKH;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAAO,CACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EAAE,GAChB,yBAAyB;IAiB5B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,UAAU,IAAI,yBAAyB;CAc/C"}

package/dist/storage/config/storage-not-configured.error.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageNotConfiguredError = exports.STORAGE_SETTINGS_PATH = void 0;
+const common_1 = require("@nestjs/common");
+// =============================================================================
+// StorageNotConfiguredError — what a call gets when there is no storage (#373)
+// =============================================================================
+//
+// Making storage runtime-configurable creates a state that could not exist when
+// it came from the environment: a RUNNING, HEALTHY API with nowhere to put a
+// file. A fresh deployment is in that state from its first boot until an
+// administrator fills in the form, and every deployment returns to it the
+// moment somebody clears the bucket field. This is the answer every storage
+// call gives in it.
+//
+// WHY 503 AND NOT 500. The request is not broken and neither is the server: the
+// work is genuinely unavailable right now, and an administrator filling in one
+// form makes the identical request succeed with nothing about the caller having
+// changed. That is the same distinction `NodeSecretBrokerService.assertUsable`
+// draws for an unusable credential broker, and this type deliberately copies
+// its body shape — `{ message, details: { reason, remedy } }` — so the two
+// "this deployment has not been set up for that yet" refusals read alike to
+// whoever is on the receiving end.
+//
+// WHY 503 AND NOT 501/409/422. 501 says the server does not implement this,
+// which is false and is not retryable. 409 says the request conflicts with
+// state, which invites a client to change the request. 422 says the input can
+// never work — a worker node that believed it would burn its whole attempt
+// budget in the minute before somebody saved the settings page. 503 says "not
+// now", which is the truth, and is the one status a queue, a browser and a
+// health check all already know how to wait on.
+//
+// WHY IT EXTENDS AN HTTP EXCEPTION AT ALL, in a file under `storage/config`.
+// The alternative — a plain `Error` subclass mapped to a status by each caller
+// — puts the mapping in nine consumer modules, none of which asked to know
+// about storage configuration, and every one of which would otherwise let it
+// surface as a 500. `HttpExceptionFilter` already renders this correctly with
+// no consumer change at all, which is precisely the constraint #373 part 2
+// works under: NO CONSUMER OF `STORAGE_PROVIDER` CHANGES.
+//
+// ⚠ NOTHING HERE MAY CARRY A VALUE. The details name FIELDS ('bucket',
+// 'secretAccessKey') and never their contents — this body reaches an
+// unauthenticated caller on some paths (the public avatar route), and a
+// diagnostic that quoted the configuration would be an information leak in the
+// one place nobody thinks to check.
+// =============================================================================
+/**
+ * Where an administrator fixes this.
+ *
+ * Named in the `remedy` of every instance, because "storage is not configured"
+ * without a destination is a support ticket. Kept as a constant so the settings
+ * page can move without leaving a wrong path in an error body that is the only
+ * instruction some operators will ever see.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_SETTINGS_PATH = '/admin/settings/storage';
+/**
+ * Thrown by `ResolvingStorageProvider` when this deployment has no usable
+ * object storage.
+ *
+ * Constructed through the two named factories rather than directly, so the
+ * `reason` and the `remedy` cannot be paired up wrongly at a call site.
+ *
+ * @stability experimental
+ */
+class StorageNotConfiguredError extends common_1.ServiceUnavailableException {
+    constructor(message, details) {
+        super({ message, details });
+    }
+    /**
+     * The ordinary case: the settings row (and/or the credential store) is not
+     * filled in.
+     *
+     * The missing FIELD NAMES are in the body on purpose. An administrator who is
+     * told only "storage is not configured" reloads a form that looks complete —
+     * because the one empty field is the secret access key, which by design
+     * cannot be displayed. Naming the fields is what makes that state
+     * diagnosable, and a field name carries nothing an attacker did not already
+     * know from the public settings schema.
+     */
+    static missing(provider, missing) {
+        return new StorageNotConfiguredError(`Object storage is not configured for this deployment: the ${provider} ` +
+            `configuration is missing ${missing.join(', ')}. Files cannot be stored ` +
+            `or served until it is complete.`, {
+            reason: 'storage_not_configured',
+            remedy: `An administrator must complete the storage configuration at ` +
+                `${exports.STORAGE_SETTINGS_PATH} (the secret access key is saved there too, ` +
+                `and is never displayed once stored).`,
+            provider,
+            missing,
+        });
+    }
+    /**
+     * The narrow case: something asked, synchronously, which bucket is in use,
+     * and this process does not know.
+     *
+     * Only `getBucket()` can raise this — see the long comment on that method in
+     * `ResolvingStorageProvider`. It is deliberately NOT reported as the same
+     * thing as an incomplete configuration, because it has two causes with
+     * different remedies (no bucket saved, or a settings row that was unreadable
+     * when this process started) and it cannot tell them apart. Naming both in
+     * the remedy is more use than picking one and being wrong half the time.
+     */
+    static unresolved() {
+        return new StorageNotConfiguredError('The active object storage bucket is unknown to this process: either no ' +
+            'bucket is configured, or the storage settings could not be read at ' +
+            'startup.', {
+            reason: 'storage_bucket_unknown',
+            remedy: `Check that storage is configured at ${exports.STORAGE_SETTINGS_PATH}. If it ` +
+                `is, the settings row was unreadable at startup — confirm the database ` +
+                `is reachable; the settings are re-read on the next storage operation.`,
+        });
+    }
+}
+exports.StorageNotConfiguredError = StorageNotConfiguredError;
+//# sourceMappingURL=storage-not-configured.error.js.map

package/dist/storage/config/storage-not-configured.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-not-configured.error.js","sourceRoot":"","sources":["../../../src/storage/config/storage-not-configured.error.ts"],"names":[],"mappings":";;;AAAA,2CAA6D;AAG7D,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,4EAA4E;AAC5E,oBAAoB;AACpB,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,mCAAmC;AACnC,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,gDAAgD;AAChD,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,0DAA0D;AAC1D,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,wEAAwE;AACxE,+EAA+E;AAC/E,oCAAoC;AACpC,gFAAgF;AAEhF;;;;;;;;;GASG;AACU,QAAA,qBAAqB,GAAG,yBAAyB,CAAC;AAmB/D;;;;;;;;GAQG;AACH,MAAa,yBAA0B,SAAQ,oCAA2B;IACxE,YACE,OAAe,EACf,OAKC;QAED,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAAO,CACZ,QAAgB,EAChB,OAAiB;QAEjB,OAAO,IAAI,yBAAyB,CAClC,6DAA6D,QAAQ,GAAG;YACtE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;YACzE,iCAAiC,EACnC;YACE,MAAM,EAAE,wBAAwB;YAChC,MAAM,EACJ,8DAA8D;gBAC9D,GAAG,6BAAqB,8CAA8C;gBACtE,sCAAsC;YACxC,QAAQ;YACR,OAAO;SACR,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,yBAAyB,CAClC,yEAAyE;YACvE,qEAAqE;YACrE,UAAU,EACZ;YACE,MAAM,EAAE,wBAAwB;YAChC,MAAM,EACJ,uCAAuC,6BAAqB,UAAU;gBACtE,wEAAwE;gBACxE,uEAAuE;SAC1E,CACF,CAAC;IACJ,CAAC;CACF;AArED,8DAqEC"}

package/dist/storage/config/storage-settings-compat.d.ts

@@ -0,0 +1,44 @@
+import { LEGACY_STORAGE_FLAT_FIELDS } from '@marinoscar/platform-contract/storage';
+/** One driver's settings record. */
+export type DriverSettings = Record<string, unknown>;
+/** The `drivers` record: driver id to its settings. */
+export type DriversRecord = Record<string, DriverSettings>;
+/** The legacy flat field names. */
+export type LegacyField = (typeof LEGACY_STORAGE_FLAT_FIELDS)[number];
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** The legacy flat fields present in `source`, whatever their value. */
+export declare function legacyFieldsOf(source: Record<string, unknown>): Partial<Record<LegacyField, unknown>>;
+/** The part of the legacy fields `id`'s `settingsSchema` declares. */
+export declare function legacyFieldsFor(id: string, flat: Partial<Record<LegacyField, unknown>>): DriverSettings;
+/** The 400 for a driver id nobody registered. */
+export declare function unknownDriverRejection(id: string, registeredIds?: readonly string[]): never;
+/** The 400 for a `drivers` write the registry refuses. */
+export declare function driverRejection(error: unknown): never;
+/** The 400 for a flat field and `drivers.<provider>` naming one setting with two values. */
+export declare function conflictingFields(provider: string, fields: string[]): never;
+export declare function sameValue(a: unknown, b: unknown): boolean;
+/** The flat fields `legacy` and the entry `entry` both name, with different values. */
+export declare function conflictsBetween(legacy: DriverSettings, entry: DriverSettings | undefined): string[];
+/**
+ * The settings of driver `id` a submitted admin body describes: the stored
+ * ones, then the legacy flat aliases, then `drivers.<id>` (`null` there resets
+ * the driver to its defaults), parsed with the driver's own schema. Used by the
+ * connection test and the provisioning route, which act on the SUBMITTED,
+ * unsaved configuration.
+ *
+ * @param id - a registered driver id.
+ * @param stored - the driver's stored settings, if any.
+ * @param input - the request body (`drivers` and the flat aliases).
+ * @throws BadRequestException when the aliases and `drivers.<id>` disagree, or the settings do not parse.
+ */
+export declare function submittedDriverSettings(id: string, stored: DriverSettings | undefined, input: Record<string, unknown>): DriverSettings;
+/**
+ * The secrets a submitted admin body carries for driver `id`, by declared
+ * name: `secrets.<id>.<name>`, or `secretAccessKey` for the built-ins' secret.
+ * A blank value is absent (blank preserves the stored one).
+ *
+ * @param id - a registered driver id.
+ * @param input - the request body.
+ */
+export declare function submittedSecretValues(id: string, input: Record<string, unknown>): Record<string, string>;
+//# sourceMappingURL=storage-settings-compat.d.ts.map

package/dist/storage/config/storage-settings-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-settings-compat.d.ts","sourceRoot":"","sources":["../../../src/storage/config/storage-settings-compat.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAKnF,oCAAoC;AACpC,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrD,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAC3D,mCAAmC;AACnC,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAMrG;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,GAAG,cAAc,CAIvG;AAED,iDAAiD;AACjD,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,GAAE,SAAS,MAAM,EAA4B,GAAG,KAAK,CAKpH;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAerD;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAO3E;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,EAAE,CAGpG;AAGD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CActI;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxG"}

package/dist/storage/config/storage-settings-compat.js

@@ -0,0 +1,135 @@
+"use strict";
+// =============================================================================
+// Storage settings: the legacy flat fields and their 400s (PP-14.7, #925)
+// =============================================================================
+//
+// The `storage` namespace stores `{ provider, drivers }`. Before drivers were
+// pluggable it stored six flat fields (`bucket`, `region`, `endpoint`,
+// `accountId`, `accessKeyId`, `forcePathStyle`); they are still accepted on a
+// stored row, a PUT, a PATCH and on the admin routes as aliases of the active
+// built-in driver's settings. These pure helpers are the ONE place that folds
+// them into `drivers.<provider>` and refuses the ambiguous case, so the
+// settings namespace and the admin routes cannot disagree.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRecord = isRecord;
+exports.legacyFieldsOf = legacyFieldsOf;
+exports.legacyFieldsFor = legacyFieldsFor;
+exports.unknownDriverRejection = unknownDriverRejection;
+exports.driverRejection = driverRejection;
+exports.conflictingFields = conflictingFields;
+exports.sameValue = sameValue;
+exports.conflictsBetween = conflictsBetween;
+exports.submittedDriverSettings = submittedDriverSettings;
+exports.submittedSecretValues = submittedSecretValues;
+const common_1 = require("@nestjs/common");
+const storage_1 = require("@marinoscar/platform-contract/storage");
+const index_1 = require("../../core/index");
+const storage_driver_1 = require("../drivers/storage-driver");
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** The legacy flat fields present in `source`, whatever their value. */
+function legacyFieldsOf(source) {
+    const picked = {};
+    for (const field of storage_1.LEGACY_STORAGE_FLAT_FIELDS) {
+        if (source[field] !== undefined)
+            picked[field] = source[field];
+    }
+    return picked;
+}
+/** The part of the legacy fields `id`'s `settingsSchema` declares. */
+function legacyFieldsFor(id, flat) {
+    if (!storage_driver_1.storageDriverKind.has(id))
+        return {};
+    const shape = storage_driver_1.storageDriverKind.get(id).settingsSchema.shape;
+    return Object.fromEntries(Object.entries(flat).filter(([field]) => field in shape));
+}
+/** The 400 for a driver id nobody registered. */
+function unknownDriverRejection(id, registeredIds = storage_driver_1.storageDriverKind.ids()) {
+    throw new common_1.BadRequestException({
+        message: `Unknown storage driver "${id}". Registered: ${registeredIds.join(', ') || '(none)'}.`,
+        details: { reason: 'STORAGE_UNKNOWN_DRIVER', driver: id },
+    });
+}
+/** The 400 for a `drivers` write the registry refuses. */
+function driverRejection(error) {
+    if (error instanceof index_1.PluggableUnknownError) {
+        return unknownDriverRejection(error.id, error.registeredIds);
+    }
+    if (error instanceof index_1.PluggableSettingsError) {
+        throw new common_1.BadRequestException({
+            message: `The settings for storage driver "${error.id}" are not valid: ${error.message}`,
+            details: {
+                reason: 'STORAGE_DRIVER_SETTINGS_INVALID',
+                driver: error.id,
+                fields: [...new Set(error.issues.map((issue) => String(issue.path[0] ?? '')))].filter(Boolean),
+            },
+        });
+    }
+    throw error;
+}
+/** The 400 for a flat field and `drivers.<provider>` naming one setting with two values. */
+function conflictingFields(provider, fields) {
+    throw new common_1.BadRequestException({
+        message: `The storage setting(s) ${fields.join(', ')} are given both as top-level fields and in drivers.${provider} ` +
+            'with different values. Send them once (drivers is the current shape; the top-level fields are the legacy alias).',
+        details: { reason: 'STORAGE_CONFLICTING_SETTINGS', driver: provider, fields },
+    });
+}
+function sameValue(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+/** The flat fields `legacy` and the entry `entry` both name, with different values. */
+function conflictsBetween(legacy, entry) {
+    if (!entry)
+        return [];
+    return Object.keys(legacy).filter((field) => entry[field] !== undefined && !sameValue(entry[field], legacy[field]));
+}
+/**
+ * The settings of driver `id` a submitted admin body describes: the stored
+ * ones, then the legacy flat aliases, then `drivers.<id>` (`null` there resets
+ * the driver to its defaults), parsed with the driver's own schema. Used by the
+ * connection test and the provisioning route, which act on the SUBMITTED,
+ * unsaved configuration.
+ *
+ * @param id - a registered driver id.
+ * @param stored - the driver's stored settings, if any.
+ * @param input - the request body (`drivers` and the flat aliases).
+ * @throws BadRequestException when the aliases and `drivers.<id>` disagree, or the settings do not parse.
+ */
+function submittedDriverSettings(id, stored, input) {
+    const flat = legacyFieldsFor(id, legacyFieldsOf(input));
+    const drivers = isRecord(input.drivers) ? input.drivers : {};
+    const named = drivers[id];
+    const conflicts = conflictsBetween(flat, isRecord(named) ? named : undefined);
+    if (conflicts.length > 0)
+        conflictingFields(id, conflicts);
+    const base = named === null ? {} : (stored ?? {});
+    try {
+        return storage_driver_1.storageDriverKind.parseSettings(id, { ...base, ...flat, ...(isRecord(named) ? named : {}) });
+    }
+    catch (error) {
+        return driverRejection(error);
+    }
+}
+/**
+ * The secrets a submitted admin body carries for driver `id`, by declared
+ * name: `secrets.<id>.<name>`, or `secretAccessKey` for the built-ins' secret.
+ * A blank value is absent (blank preserves the stored one).
+ *
+ * @param id - a registered driver id.
+ * @param input - the request body.
+ */
+function submittedSecretValues(id, input) {
+    const declared = storage_driver_1.storageDriverKind.get(id).secrets ?? [];
+    const bySecrets = isRecord(input.secrets) && isRecord(input.secrets[id]) ? input.secrets[id] : {};
+    const values = {};
+    for (const spec of declared) {
+        const candidate = bySecrets[spec.name] ?? (spec.name === 'secretAccessKey' ? input.secretAccessKey : undefined);
+        if (typeof candidate === 'string' && candidate.length > 0)
+            values[spec.name] = candidate;
+    }
+    return values;
+}
+//# sourceMappingURL=storage-settings-compat.js.map

package/dist/storage/config/storage-settings-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-settings-compat.js","sourceRoot":"","sources":["../../../src/storage/config/storage-settings-compat.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AACxE,2DAA2D;AAC3D,gFAAgF;;AAehF,4BAEC;AAGD,wCAMC;AAGD,0CAIC;AAGD,wDAKC;AAGD,0CAeC;AAGD,8CAOC;AAED,8BAEC;AAGD,4CAGC;AAeD,0DAcC;AAUD,sDAWC;AA/HD,2CAAqD;AACrD,mEAAmF;AAEnF,4CAAiF;AACjF,8DAA8D;AAS9D,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,wEAAwE;AACxE,SAAgB,cAAc,CAAC,MAA+B;IAC5D,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,oCAA0B,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAgB,eAAe,CAAC,EAAU,EAAE,IAA2C;IACrF,IAAI,CAAC,kCAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,kCAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC;IAC7D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,iDAAiD;AACjD,SAAgB,sBAAsB,CAAC,EAAU,EAAE,gBAAmC,kCAAiB,CAAC,GAAG,EAAE;IAC3G,MAAM,IAAI,4BAAmB,CAAC;QAC5B,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG;QAC/F,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE,EAAE;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,SAAgB,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,6BAAqB,EAAE,CAAC;QAC3C,OAAO,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,YAAY,8BAAsB,EAAE,CAAC;QAC5C,MAAM,IAAI,4BAAmB,CAAC;YAC5B,OAAO,EAAE,oCAAoC,KAAK,CAAC,EAAE,oBAAoB,KAAK,CAAC,OAAO,EAAE;YACxF,OAAO,EAAE;gBACP,MAAM,EAAE,iCAAiC;gBACzC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChB,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC/F;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,MAAgB;IAClE,MAAM,IAAI,4BAAmB,CAAC;QAC5B,OAAO,EACL,0BAA0B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,QAAQ,GAAG;YAC5G,kHAAkH;QACpH,OAAO,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC9E,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,SAAS,CAAC,CAAU,EAAE,CAAU;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,SAAgB,gBAAgB,CAAC,MAAsB,EAAE,KAAiC;IACxF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AAGD;;;;;;;;;;;GAWG;AACH,SAAgB,uBAAuB,CAAC,EAAU,EAAE,MAAkC,EAAE,KAA8B;IACpH,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,OAAO,kCAAiB,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,EAAU,EAAE,KAA8B;IAC9E,MAAM,QAAQ,GAAG,kCAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IACzD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/H,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChH,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3F,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/storage/config/storage-submission.service.d.ts

@@ -0,0 +1,46 @@
+import { ConfigService } from '@nestjs/config';
+import { CredentialsService } from '../../credentials/index';
+import { SystemSettingsService } from '../../settings/index';
+import { type StorageDriverContext, type StorageDriverDefinition, type StorageDriverLocation } from '../drivers/storage-driver';
+import '../drivers/builtin-storage-drivers';
+/**
+ * A submitted configuration, ready to hand to a driver.
+ *
+ * @stability experimental
+ */
+export interface PreparedStorageSubmission {
+    /** The driver the body names. */
+    driver: StorageDriverDefinition<any>;
+    /** Its settings: stored, then aliases, then `drivers.<id>`, parsed by the driver. */
+    settings: Record<string, unknown>;
+    /** The context to call the driver with. */
+    ctx: StorageDriverContext;
+    /** Where the settings point. */
+    location: StorageDriverLocation;
+    /** Whether a declared secret was left blank, so the stored one was used. */
+    usedStoredSecret: boolean;
+    /** Replaces every secret value this call has resolved (so far) in `text` with `[redacted]`. */
+    redact(text: string): string;
+}
+/**
+ * Resolves the driver, settings and secrets of a SUBMITTED, unsaved storage configuration (the body of `POST /test` and `POST /bucket`), so the two routes cannot disagree about what that configuration is.
+ *
+ * @stability experimental
+ */
+export declare class StorageSubmissionService {
+    private readonly credentials;
+    private readonly systemSettings;
+    private readonly config;
+    private readonly logger;
+    constructor(credentials: CredentialsService, systemSettings: SystemSettingsService, config: ConfigService);
+    /**
+     * Resolves the body's driver, settings and secrets.
+     *
+     * @param input - the request body of `POST /test` or `POST /bucket`.
+     * @throws BadRequestException (400) for an unregistered driver, settings the driver refuses, or an alias contradicting `drivers`.
+     */
+    prepare(input: {
+        provider: string;
+    } & Record<string, unknown>): Promise<PreparedStorageSubmission>;
+}
+//# sourceMappingURL=storage-submission.service.d.ts.map

package/dist/storage/config/storage-submission.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-submission.service.d.ts","sourceRoot":"","sources":["../../../src/storage/config/storage-submission.service.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AAQnC,OAAO,oCAAoC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACrC,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,2CAA2C;IAC3C,GAAG,EAAE,oBAAoB,CAAC;IAC1B,gCAAgC;IAChC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,4EAA4E;IAC5E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,+FAA+F;IAC/F,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,qBACa,wBAAwB;IAIjC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;gBAGjD,WAAW,EAAE,kBAAkB,EAC/B,cAAc,EAAE,qBAAqB,EACrC,MAAM,EAAE,aAAa;IAGxC;;;;;OAKG;IACG,OAAO,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAiCzG"}