@motherbase/client 1.2.8 → 1.4.0

package/dist/session.js

@@ -1,3 +1,11 @@
+import { normalizeSession } from './compat.js';
+/**
+ * The key every built-in storage adapter defaults to, for both the cookie and
+ * localStorage. Defined once: it is a contract between the browser half of an
+ * app and the server half, and a second copy of the literal is how the two
+ * drift apart. Re-exported from `cookie.ts` and from the package root.
+ */
+export const SESSION_COOKIE_KEY = 'motherbase.session';
 /** In-memory adapter. Safe everywhere (SSR, tests); does not survive reloads. */
 export function memoryStorage() {
     let current = null;
@@ -12,7 +20,7 @@ export function memoryStorage() {
  * Browser localStorage adapter. Falls back to memory when localStorage is
  * unavailable (SSR, private mode), so it never throws on import or use.
  */
-export function localStorageStorage(key = 'motherbase.session') {
+export function localStorageStorage(key = SESSION_COOKIE_KEY) {
     const ls = typeof globalThis !== 'undefined' ? globalThis.localStorage : undefined;
     if (!ls)
         return memoryStorage();
@@ -36,6 +44,39 @@ export function localStorageStorage(key = 'motherbase.session') {
         },
     };
 }
+/**
+ * Wrap a supabase-js style key/value store (localStorage, React Native's
+ * AsyncStorage, a cookie shim) as a session adapter.
+ *
+ * This is what lets `createClient(url, key, { auth: { storage: AsyncStorage } })`
+ * work verbatim on a ported app. A value that will not parse is treated as no
+ * session rather than thrown: a corrupt entry must not brick every launch.
+ */
+export function keyValueStorage(store, key = SESSION_COOKIE_KEY) {
+    return {
+        get: async () => {
+            const raw = await store.getItem(key);
+            if (!raw)
+                return null;
+            try {
+                return JSON.parse(raw);
+            }
+            catch {
+                return null;
+            }
+        },
+        set: async (s) => {
+            if (s)
+                await store.setItem(key, JSON.stringify(s));
+            else
+                await store.removeItem(key);
+        },
+    };
+}
+/** Tell the two adapter shapes apart: supabase-js's is a key/value store. */
+export function isKeyValueStorage(value) {
+    return typeof value.getItem === 'function';
+}
 /**
  * Holds the live session in memory, mirrors it to a storage adapter, and
  * notifies listeners of auth changes. The in-memory copy is the source of truth
@@ -52,7 +93,19 @@ export class SessionStore {
     async hydrate() {
         if (this.hydrated)
             return this.current;
-        this.current = (await this.storage.get()) ?? null;
+        // A session read back from storage was written by an older version (or by
+        // the server half of an SSR app), so it is normalised on the way in too:
+        // the aliases must not depend on which code path produced the session.
+        const loaded = await this.storage.get();
+        // Re-check AFTER the await. `hydrate()` is started but not awaited by
+        // `onAuthStateChange`, so a `set()` can land while this one is still
+        // reading storage, and `loaded` is then a snapshot from before that write.
+        // Assigning it anyway is a lost update, and it presents as the opposite of
+        // a storage bug: `setSession()` resolves with "Invalid session" because the
+        // token it just stored was wiped out from under the request that used it.
+        if (this.hydrated)
+            return this.current;
+        this.current = normalizeSession(loaded);
         this.hydrated = true;
         return this.current;
     }
@@ -60,9 +113,9 @@ export class SessionStore {
         return this.current;
     }
     async set(session, event) {
-        this.current = session;
+        this.current = normalizeSession(session);
         this.hydrated = true;
-        await this.storage.set(session);
+        await this.storage.set(this.current);
         this.emit(event);
     }
     /** Replace only the tokens, keeping the existing user (used after refresh). */

package/dist/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAEA,iFAAiF;AACjF,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,GAAmB,IAAI,CAAC;IACnC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO;QAClB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAG,oBAAoB;IAC5D,MAAM,EAAE,GAAG,OAAO,UAAU,KAAK,WAAW,CAAC,CAAC,CAAE,UAAyC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,IAAI,CAAC,EAAE;QAAE,OAAO,aAAa,EAAE,CAAC;IAChC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACrC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAKvB,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;QAJnD,YAAO,GAAmB,IAAI,CAAC;QACtB,cAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;QAC7C,aAAQ,GAAG,KAAK,CAAC;IAEqC,CAAC;IAE/D,mDAAmD;IACnD,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAuB,EAAE,KAAgB;QACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,YAAoB;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACnF,CAAC;IAED,SAAS,CAAC,QAAsB;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,IAAI,CAAC,KAAgB;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAS/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,iFAAiF;AACjF,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,GAAmB,IAAI,CAAC;IACnC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO;QAClB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAG,kBAAkB;IAC1D,MAAM,EAAE,GAAG,OAAO,UAAU,KAAK,WAAW,CAAC,CAAC,CAAE,UAAyC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,IAAI,CAAC,EAAE;QAAE,OAAO,aAAa,EAAE,CAAC;IAChC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACrC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAA6B,EAAE,GAAG,GAAG,kBAAkB;IACrF,OAAO;QACL,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACf,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;gBAC9C,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAC/B,KAAqD;IAErD,OAAO,OAAQ,KAAgC,CAAC,OAAO,KAAK,UAAU,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAKvB,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;QAJnD,YAAO,GAAmB,IAAI,CAAC;QACtB,cAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;QAC7C,aAAQ,GAAG,KAAK,CAAC;IAEqC,CAAC;IAE/D,mDAAmD;IACnD,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACvC,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAExC,sEAAsE;QACtE,qEAAqE;QACrE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAEvC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAuB,EAAE,KAAgB;QACjD,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,YAAoB;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACnF,CAAC;IAED,SAAS,CAAC,QAAsB;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,IAAI,CAAC,KAAgB;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/storage.d.ts

@@ -3,7 +3,7 @@ import type { FileObject, FileVisibility, MotherbaseResponse, StorageRemoveRespo
 export interface UploadOptions {
     /** Object visibility. Defaults to the backend's default (private). */
     visibility?: FileVisibility;
-    /** Passed through to the backend as the content type hint. */
+    /** Content type stored with the object. Overrides what the file itself declares. */
     contentType?: string;
     upsert?: boolean;
 }
@@ -15,6 +15,29 @@ export interface UploadResult {
     /** `bucket/key`. */
     fullPath: string;
 }
+/** A bucket, in the supabase-js shape. `id` is the slug. */
+export interface BucketInfo {
+    id: string;
+    name: string;
+    owner: string;
+    public: boolean;
+    created_at: string | null;
+    updated_at: string | null;
+}
+/** One object's metadata, in the supabase-js `info()` shape. */
+export interface ObjectInfo {
+    name: string;
+    id: string;
+    version: string | null;
+    bucket_id: string;
+    created_at: string | null;
+    updated_at: string | null;
+    last_accessed_at: string | null;
+    size: number;
+    content_type: string | null;
+    cache_control: string | null;
+    metadata: Record<string, unknown>;
+}
 export interface ListOptions {
     limit?: number;
     offset?: number;
@@ -28,7 +51,11 @@ export declare class StorageBucket {
     private readonly http;
     private readonly baseUrl;
     private readonly bucket;
-    constructor(http: HttpClient, baseUrl: string, bucket: string);
+    /** Used only by `uploadToSignedUrl`, which PUTs straight to object storage. */
+    private readonly fetchImpl;
+    constructor(http: HttpClient, baseUrl: string, bucket: string, 
+    /** Used only by `uploadToSignedUrl`, which PUTs straight to object storage. */
+    fetchImpl: typeof fetch);
     /**
      * Route for one object. A bare uuid is treated as a file id (the pre-path
      * addressing form, which existing callers have stored); anything else is a
@@ -36,6 +63,41 @@ export declare class StorageBucket {
      */
     private objectPath;
     upload(path: string, file: UploadInput, options?: UploadOptions): Promise<MotherbaseResponse<UploadResult>>;
+    /**
+     * Upload several objects, a few at a time, reporting progress per file.
+     *
+     * Uploading a folder is the common case and `Promise.all` is the common
+     * mistake: a hundred parallel multipart posts saturate the connection, and
+     * the server rate limiter answers 429 to the tail of them. Four at a time
+     * finishes sooner in practice and fails less.
+     *
+     * One failing file does not cancel the rest. The result reports every entry
+     * in the order it was given, each with its own error or `null`, so the caller
+     * can retry exactly what failed.
+     *
+     * ponytail: progress is per file, not per byte. Byte-level progress needs
+     * XMLHttpRequest, which does not exist outside a browser; if a progress bar
+     * has to move within one large file, that is the upgrade path.
+     */
+    uploadMany(files: Array<{
+        path: string;
+        file: UploadInput;
+        options?: UploadOptions;
+    }>, options?: {
+        /** Uploads in flight at once. Default 4. */
+        concurrency?: number;
+        /** Called after each file settles, with how many have settled so far. */
+        onProgress?: (progress: {
+            completed: number;
+            total: number;
+            path: string;
+            error: string | null;
+        }) => void;
+    }): Promise<MotherbaseResponse<Array<{
+        path: string;
+        data: UploadResult | null;
+        error: string | null;
+    }>>>;
     download(path: string): Promise<MotherbaseResponse<Blob>>;
     remove(paths: string[]): Promise<MotherbaseResponse<StorageRemoveResponse[]>>;
     /** Objects under a prefix, in the Supabase response shape. */
@@ -48,25 +110,130 @@ export declare class StorageBucket {
     };
     /**
      * A download URL for the object, valid for `expiresIn` seconds (default 3600,
-     * maximum 7 days — the AWS SigV4 ceiling; anything outside that is a `400`).
+     * maximum 7 days: the AWS SigV4 ceiling; anything outside that is a `400`).
      *
      * `expiresAt` reports when the URL actually stops working, and is `null` when
      * nothing expires: a public object's URL is permanent, and a private object on
      * the `local` storage driver resolves to the authenticated streaming endpoint,
      * which is bound to the session rather than to a clock and so cannot be handed
-     * to a third party at all. Check it rather than assuming `expiresIn` applied —
+     * to a third party at all. Check it rather than assuming `expiresIn` applied,
      * that assumption is exactly what this used to get wrong, silently.
      */
     createSignedUrl(path: string, expiresIn?: number): Promise<MotherbaseResponse<{
         signedUrl: string;
         expiresAt: string | null;
     }>>;
+    /**
+     * Sign several objects in one call.
+     *
+     * There is no batch endpoint behind this: it signs each key and reports per
+     * entry, exactly as supabase-js does, so one missing object yields one entry
+     * with an `error` rather than failing the whole batch.
+     */
+    createSignedUrls(paths: string[], expiresIn?: number): Promise<MotherbaseResponse<Array<{
+        path: string;
+        signedUrl: string | null;
+        error: string | null;
+    }>>>;
+    /**
+     * Replace the object at `path`. In supabase-js `update` is `upload` with
+     * upsert forced on, and the same is true here.
+     */
+    update(path: string, file: UploadInput, options?: UploadOptions): Promise<MotherbaseResponse<UploadResult>>;
+    /** Copy an object to another key in this bucket. */
+    copy(from: string, to: string, options?: {
+        upsert?: boolean;
+    }): Promise<MotherbaseResponse<{
+        path: string;
+    }>>;
+    /** Move an object to another key in this bucket (copy, then delete the source). */
+    move(from: string, to: string, options?: {
+        upsert?: boolean;
+    }): Promise<MotherbaseResponse<{
+        path: string;
+    }>>;
+    private transfer;
+    /** One object's metadata, without downloading it. */
+    info(path: string): Promise<MotherbaseResponse<ObjectInfo>>;
+    /**
+     * Whether an object exists and this caller can read it.
+     *
+     * A 404 is the answer `false`, not a failure. Anything else (a 403, a network
+     * error) is reported as an error rather than as "no": treating an
+     * authorization failure as absence is how a UI ends up offering to create
+     * something that is already there.
+     */
+    exists(path: string): Promise<MotherbaseResponse<boolean>>;
+    /**
+     * Mint a URL the browser can PUT the bytes to directly, skipping this server.
+     *
+     * Unlike supabase-js this needs the file's `size` and content type up front:
+     * the upload is reserved against the bucket quota and the signature is bound
+     * to that exact length, which is what stops a signed URL from becoming an
+     * unbounded write. Pair it with `uploadToSignedUrl`.
+     *
+     * Requires the S3 driver; the local driver has no presigned uploads.
+     */
+    createSignedUploadUrl(path: string, options: {
+        size: number;
+        contentType?: string;
+        visibility?: FileVisibility;
+    }): Promise<MotherbaseResponse<{
+        signedUrl: string;
+        token: string;
+        path: string;
+    }>>;
+    /**
+     * Upload to a URL from `createSignedUploadUrl`: PUT the bytes to storage,
+     * then tell the server the object landed. The finalise step is what makes the
+     * row readable, so a PUT that succeeds and a finalise that fails leaves the
+     * reservation to expire rather than a half-visible object.
+     */
+    uploadToSignedUrl(path: string, token: string, file: Blob, options?: {
+        contentType?: string;
+    }): Promise<MotherbaseResponse<UploadResult>>;
 }
 /** Supabase-compatible storage client: `client.storage.from(bucket)`. */
 export declare class StorageClient {
     private readonly http;
     private readonly baseUrl;
-    constructor(http: HttpClient, baseUrl: string);
+    private readonly fetchImpl;
+    constructor(http: HttpClient, baseUrl: string, fetchImpl: typeof fetch);
     from(bucket: string): StorageBucket;
+    /**
+     * Bucket administration, supabase-js shaped.
+     *
+     * Every method here needs a SECRET project API key, which is the same rule
+     * Supabase applies (bucket administration is a service-role operation). With
+     * a publishable key they resolve with a 401 error, so keep them in server
+     * code and setup scripts, never in a browser bundle.
+     */
+    listBuckets(): Promise<MotherbaseResponse<BucketInfo[]>>;
+    getBucket(id: string): Promise<MotherbaseResponse<BucketInfo>>;
+    createBucket(id: string, options?: {
+        public?: boolean;
+        name?: string;
+    }): Promise<MotherbaseResponse<BucketInfo>>;
+    updateBucket(id: string, options: {
+        public?: boolean;
+        name?: string;
+    }): Promise<MotherbaseResponse<BucketInfo>>;
+    /** Delete every object in the bucket, keeping the bucket itself. */
+    emptyBucket(id: string): Promise<MotherbaseResponse<{
+        emptied: boolean;
+        removed: number;
+    }>>;
+    /**
+     * Delete the bucket. A bucket that still holds objects is a `409` unless
+     * `force` is set, which queues a background deletion of its contents: an
+     * accidental `deleteBucket` must not be able to destroy a project's files in
+     * one unqualified call.
+     */
+    deleteBucket(id: string, options?: {
+        force?: boolean;
+    }): Promise<MotherbaseResponse<{
+        deleted: boolean;
+    }>>;
+    private bucketCall;
 }
 //# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EAErB,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAC;CACpF;AAaD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAQZ,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IA0BtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IASzD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAqBnF,8DAA8D;IACxD,IAAI,CAAC,MAAM,SAAK,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;IAoB7F,2FAA2F;IAC3F,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;IAS3D;;;;;;;;;;OAUG;IACG,eAAe,CACnB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAWhF;AAED,yEAAyE;AACzE,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAc,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAA1C,IAAI,EAAE,UAAU,EAAmB,OAAO,EAAE,MAAM;IAE/E,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa;CAGpC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EAErB,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,4DAA4D;AAC5D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAKD,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAC;CACpF;AAaD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAJT,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAC/B,+EAA+E;IAC9D,SAAS,EAAE,OAAO,KAAK;IAG1C;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAWZ,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAgC5C;;;;;;;;;;;;;;;OAeG;IACG,UAAU,CACd,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC,EAC1E,OAAO,GAAE;QACP,4CAA4C;QAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,yEAAyE;QACzE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,KAAK,IAAI,CAAC;KACtG,GACL,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAyBlG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IASzD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAqBnF,8DAA8D;IACxD,IAAI,CAAC,MAAM,SAAK,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;IAoB7F,2FAA2F;IAC3F,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;IAS3D;;;;;;;;;;OAUG;IACG,eAAe,CACnB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAY/E;;;;;;OAMG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EAAE,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAUvG;;;OAGG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAIrH,oDAAoD;IAC9C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAIvH,mFAAmF;IAC7E,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;YAIzG,QAAQ;IAiBtB,qDAAqD;IAC/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IASjE;;;;;;;OAOG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAOhE;;;;;;;;;OASG;IACG,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GAC3E,OAAO,CAAC,kBAAkB,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAwBlF;;;;;OAKG;IACG,iBAAiB,CACrB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,IAAI,EACV,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GACrC,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;CAyB7C;AAED,yEAAyE;AACzE,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAFT,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,OAAO,KAAK;IAG1C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa;IAInC;;;;;;;OAOG;IACG,WAAW,IAAI,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;IASxD,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAI9D,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAIpH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAIrH,oEAAoE;IAC9D,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAYjG;;;;;OAKG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;YAatG,UAAU;CAQzB"}

package/dist/storage.js

@@ -1,5 +1,7 @@
 import { toError } from './http.js';
 import { HTTP_ROUTES, contractPath } from '@motherbase/contracts';
+/** Bucket administration lives one level up from an object route. */
+const BUCKET_ROUTE = `${HTTP_ROUTES.files}/bucket`;
 /**
  * Supabase-compatible storage bucket handle over the authenticated
  * `/api/files` endpoints.
@@ -11,10 +13,13 @@ import { HTTP_ROUTES, contractPath } from '@motherbase/contracts';
  */
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export class StorageBucket {
-    constructor(http, baseUrl, bucket) {
+    constructor(http, baseUrl, bucket, 
+    /** Used only by `uploadToSignedUrl`, which PUTs straight to object storage. */
+    fetchImpl) {
         this.http = http;
         this.baseUrl = baseUrl;
         this.bucket = bucket;
+        this.fetchImpl = fetchImpl;
     }
     /**
      * Route for one object. A bare uuid is treated as a file id (the pre-path
@@ -23,6 +28,9 @@ export class StorageBucket {
      */
     objectPath(pathOrId, kind) {
         if (UUID.test(pathOrId)) {
+            if (kind === 'object-info') {
+                throw new Error('info() addresses objects by path. Pass the key you uploaded under, not a file id.');
+            }
             return contractPath.file(pathOrId, kind === 'object-url' ? 'url' : 'raw');
         }
         const key = pathOrId.split('/').map(encodeURIComponent).join('/');
@@ -32,7 +40,13 @@ export class StorageBucket {
         try {
             const form = new FormData();
             if (typeof Blob !== 'undefined' && file instanceof Blob) {
-                form.append('file', file, path);
+                // `contentType` used to be documented as a hint and then dropped on the
+                // floor: the server reads the mime type off the multipart part, so the
+                // only way to honour it is to retype the blob. `slice()` with a type is
+                // the retyping that does not copy the bytes, which matters at upload
+                // sizes.
+                const body = options.contentType ? file.slice(0, file.size, options.contentType) : file;
+                form.append('file', body, path);
             }
             else {
                 form.append('file', file);
@@ -57,6 +71,45 @@ export class StorageBucket {
             return { data: null, error: toError(err) };
         }
     }
+    /**
+     * Upload several objects, a few at a time, reporting progress per file.
+     *
+     * Uploading a folder is the common case and `Promise.all` is the common
+     * mistake: a hundred parallel multipart posts saturate the connection, and
+     * the server rate limiter answers 429 to the tail of them. Four at a time
+     * finishes sooner in practice and fails less.
+     *
+     * One failing file does not cancel the rest. The result reports every entry
+     * in the order it was given, each with its own error or `null`, so the caller
+     * can retry exactly what failed.
+     *
+     * ponytail: progress is per file, not per byte. Byte-level progress needs
+     * XMLHttpRequest, which does not exist outside a browser; if a progress bar
+     * has to move within one large file, that is the upgrade path.
+     */
+    async uploadMany(files, options = {}) {
+        const total = files.length;
+        const concurrency = Math.max(1, Math.min(options.concurrency ?? 4, total || 1));
+        const results = new Array(total);
+        let next = 0;
+        let completed = 0;
+        // A shared cursor rather than fixed slices: one slow file would otherwise
+        // hold up its whole slice while other workers sit idle.
+        const worker = async () => {
+            for (;;) {
+                const index = next++;
+                if (index >= total)
+                    return;
+                const entry = files[index];
+                const { data, error } = await this.upload(entry.path, entry.file, entry.options);
+                results[index] = { path: entry.path, data: data ?? null, error: error?.message ?? null };
+                completed += 1;
+                options.onProgress?.({ completed, total, path: entry.path, error: error?.message ?? null });
+            }
+        };
+        await Promise.all(Array.from({ length: concurrency }, worker));
+        return { data: results, error: null };
+    }
     async download(path) {
         try {
             const res = await this.http.requestRaw(this.objectPath(path, 'object'));
@@ -115,13 +168,13 @@ export class StorageBucket {
     }
     /**
      * A download URL for the object, valid for `expiresIn` seconds (default 3600,
-     * maximum 7 days — the AWS SigV4 ceiling; anything outside that is a `400`).
+     * maximum 7 days: the AWS SigV4 ceiling; anything outside that is a `400`).
      *
      * `expiresAt` reports when the URL actually stops working, and is `null` when
      * nothing expires: a public object's URL is permanent, and a private object on
      * the `local` storage driver resolves to the authenticated streaming endpoint,
      * which is bound to the session rather than to a clock and so cannot be handed
-     * to a third party at all. Check it rather than assuming `expiresIn` applied —
+     * to a third party at all. Check it rather than assuming `expiresIn` applied,
      * that assumption is exactly what this used to get wrong, silently.
      */
     async createSignedUrl(path, expiresIn) {
@@ -134,15 +187,205 @@ export class StorageBucket {
             return { data: null, error: toError(err) };
         }
     }
+    /**
+     * Sign several objects in one call.
+     *
+     * There is no batch endpoint behind this: it signs each key and reports per
+     * entry, exactly as supabase-js does, so one missing object yields one entry
+     * with an `error` rather than failing the whole batch.
+     */
+    async createSignedUrls(paths, expiresIn) {
+        const results = await Promise.all(paths.map(async (path) => {
+            const { data, error } = await this.createSignedUrl(path, expiresIn);
+            return { path, signedUrl: data?.signedUrl ?? null, error: error?.message ?? null };
+        }));
+        return { data: results, error: null };
+    }
+    /**
+     * Replace the object at `path`. In supabase-js `update` is `upload` with
+     * upsert forced on, and the same is true here.
+     */
+    async update(path, file, options = {}) {
+        return this.upload(path, file, { ...options, upsert: true });
+    }
+    /** Copy an object to another key in this bucket. */
+    async copy(from, to, options = {}) {
+        return this.transfer('copy', from, to, options);
+    }
+    /** Move an object to another key in this bucket (copy, then delete the source). */
+    async move(from, to, options = {}) {
+        return this.transfer('move', from, to, options);
+    }
+    async transfer(action, from, to, options) {
+        try {
+            const res = await this.http.request(`${HTTP_ROUTES.files}/${action}`, { method: 'POST', body: { bucket: this.bucket, from, to, upsert: options.upsert === true } });
+            return { data: { path: res.fullPath ?? `${this.bucket}/${to}` }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /** One object's metadata, without downloading it. */
+    async info(path) {
+        try {
+            const res = await this.http.request(this.objectPath(path, 'object-info'));
+            return { data: res, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * Whether an object exists and this caller can read it.
+     *
+     * A 404 is the answer `false`, not a failure. Anything else (a 403, a network
+     * error) is reported as an error rather than as "no": treating an
+     * authorization failure as absence is how a UI ends up offering to create
+     * something that is already there.
+     */
+    async exists(path) {
+        const { data, error } = await this.info(path);
+        if (data)
+            return { data: true, error: null };
+        if (error?.status === 404)
+            return { data: false, error: null };
+        return { data: null, error: error ?? { message: 'Unknown storage error' } };
+    }
+    /**
+     * Mint a URL the browser can PUT the bytes to directly, skipping this server.
+     *
+     * Unlike supabase-js this needs the file's `size` and content type up front:
+     * the upload is reserved against the bucket quota and the signature is bound
+     * to that exact length, which is what stops a signed URL from becoming an
+     * unbounded write. Pair it with `uploadToSignedUrl`.
+     *
+     * Requires the S3 driver; the local driver has no presigned uploads.
+     */
+    async createSignedUploadUrl(path, options) {
+        try {
+            const res = await this.http.request(`${HTTP_ROUTES.files}/presign`, {
+                method: 'POST',
+                body: {
+                    bucket: this.bucket,
+                    path,
+                    size: options.size,
+                    mime: options.contentType,
+                    visibility: options.visibility,
+                },
+            });
+            // supabase-js's `token` is opaque to the caller and is handed straight
+            // back to uploadToSignedUrl, so it carries what finalisation needs.
+            const token = JSON.stringify({ url: res.uploadUrl, id: res.file.id });
+            return { data: { signedUrl: res.uploadUrl, token, path }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * Upload to a URL from `createSignedUploadUrl`: PUT the bytes to storage,
+     * then tell the server the object landed. The finalise step is what makes the
+     * row readable, so a PUT that succeeds and a finalise that fails leaves the
+     * reservation to expire rather than a half-visible object.
+     */
+    async uploadToSignedUrl(path, token, file, options = {}) {
+        let parsed;
+        try {
+            parsed = JSON.parse(token);
+        }
+        catch {
+            return { data: null, error: { message: 'Invalid upload token. Use the token from createSignedUploadUrl().' } };
+        }
+        if (!parsed.url || !parsed.id) {
+            return { data: null, error: { message: 'Invalid upload token. Use the token from createSignedUploadUrl().' } };
+        }
+        try {
+            const put = await this.fetchImpl(parsed.url, {
+                method: 'PUT',
+                body: file,
+                headers: { 'Content-Type': options.contentType ?? file.type ?? 'application/octet-stream' },
+            });
+            if (!put.ok) {
+                return { data: null, error: { message: `Upload failed with status ${put.status}`, status: put.status } };
+            }
+            await this.http.request(`${contractPath.file(parsed.id)}/finalize`, { method: 'POST' });
+            return { data: { path, id: parsed.id, fullPath: `${this.bucket}/${path}` }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
 }
 /** Supabase-compatible storage client: `client.storage.from(bucket)`. */
 export class StorageClient {
-    constructor(http, baseUrl) {
+    constructor(http, baseUrl, fetchImpl) {
         this.http = http;
         this.baseUrl = baseUrl;
+        this.fetchImpl = fetchImpl;
     }
     from(bucket) {
-        return new StorageBucket(this.http, this.baseUrl, bucket);
+        return new StorageBucket(this.http, this.baseUrl, bucket, this.fetchImpl);
+    }
+    /**
+     * Bucket administration, supabase-js shaped.
+     *
+     * Every method here needs a SECRET project API key, which is the same rule
+     * Supabase applies (bucket administration is a service-role operation). With
+     * a publishable key they resolve with a 401 error, so keep them in server
+     * code and setup scripts, never in a browser bundle.
+     */
+    async listBuckets() {
+        try {
+            const res = await this.http.request(BUCKET_ROUTE);
+            return { data: res.buckets, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    async getBucket(id) {
+        return this.bucketCall(`${BUCKET_ROUTE}/${encodeURIComponent(id)}`);
+    }
+    async createBucket(id, options = {}) {
+        return this.bucketCall(BUCKET_ROUTE, 'POST', { id, name: options.name, public: options.public === true });
+    }
+    async updateBucket(id, options) {
+        return this.bucketCall(`${BUCKET_ROUTE}/${encodeURIComponent(id)}`, 'PUT', options);
+    }
+    /** Delete every object in the bucket, keeping the bucket itself. */
+    async emptyBucket(id) {
+        try {
+            const res = await this.http.request(`${BUCKET_ROUTE}/${encodeURIComponent(id)}/empty`, { method: 'POST' });
+            return { data: res, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * Delete the bucket. A bucket that still holds objects is a `409` unless
+     * `force` is set, which queues a background deletion of its contents: an
+     * accidental `deleteBucket` must not be able to destroy a project's files in
+     * one unqualified call.
+     */
+    async deleteBucket(id, options = {}) {
+        try {
+            const query = options.force ? '?force=true' : '';
+            const res = await this.http.request(`${BUCKET_ROUTE}/${encodeURIComponent(id)}${query}`, { method: 'DELETE' });
+            return { data: res, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    async bucketCall(path, method = 'GET', body) {
+        try {
+            const res = await this.http.request(path, { method, body });
+            return { data: res, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
     }
 }
 //# sourceMappingURL=storage.js.map