@nestm/storage 0.1.0-alpha.0 → 0.1.0-alpha.10

package/dist/files-sdk/files-sdk.driver.js

@@ -1,29 +1,609 @@
 import { Readable } from 'node:stream';
-import { Files, FilesError, } from 'files-sdk';
-import { StorageError, StorageErrorCode } from '../storage.error.js';
+import { Files, FilesError, handlers, } from 'files-sdk';
+import { StorageError, StorageErrorCode, isStorageError, } from '../storage.error.js';
+import { isCanonicalStorageEtag, normalizeProviderStorageEtag, } from '../storage-etag.js';
 import { getFilesSdkUploadControl } from '../storage-upload-control.js';
-function mapFilesError(error) {
-    if (error instanceof StorageError) {
-        return error;
+/**
+ * Detects caller policy that must not be bypassed by NestM-only conditional
+ * fallbacks that Files SDK cannot represent (versions, multipart completion,
+ * or a copy with only one side conditioned).
+ */
+function hasCallerFilesOperationPolicy(options) {
+    const hooks = options.hooks;
+    return ((options.plugins?.length ?? 0) > 0 ||
+        typeof hooks?.onAction === 'function' ||
+        typeof hooks?.onError === 'function' ||
+        typeof hooks?.onRetry === 'function' ||
+        (options.receipts !== undefined && options.receipts !== false));
+}
+const FILES_SDK_S3_RESERVED_EXTENSION_KEYS = [
+    'conditionalCopyDestination',
+    'conditionalCopySource',
+    'conditionalCreate',
+    'conditionalDelete',
+    'conditionalMultipartCompletion',
+    'conditionalRead',
+    'conditionalReplace',
+    'deleteConditional',
+    'downloadConditional',
+    'physicalKey',
+    'promote',
+    'signedDownloadPolicy',
+    'signedUploadPolicy',
+    'uploadConditional',
+];
+const FILES_SDK_S3_AUTHORITY_KEYS = [
+    ...FILES_SDK_S3_RESERVED_EXTENSION_KEYS,
+    'bucket',
+    'conditional',
+    'copy',
+    'delete',
+    'deleteMany',
+    'download',
+    'exists',
+    'head',
+    'list',
+    'move',
+    'reportsUploadProgress',
+    'resumableUpload',
+    'signedUploadUrl',
+    'signedUrl',
+    'supportsCacheControl',
+    'supportsDelimiter',
+    'supportsMetadata',
+    'supportsRange',
+    'supportsServerSideCopy',
+    'upload',
+    'url',
+];
+const s3AdapterProvenance = new WeakMap();
+const undecoratedS3Adapters = new WeakSet();
+const s3AdapterAuthority = new WeakMap();
+const s3MethodAuthority = new WeakMap();
+const s3AuthorityState = new WeakMap();
+const conflictingS3Authority = Symbol('conflictingS3Authority');
+function adapterRawObject(adapter) {
+    try {
+        const raw = adapter.raw;
+        return (typeof raw === 'object' && raw !== null) ||
+            typeof raw === 'function'
+            ? raw
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function s3AdapterAuthorityTokenOf(adapter) {
+    let resolved = s3AdapterAuthority.get(adapter);
+    const consider = (token) => {
+        if (token === undefined)
+            return true;
+        if (resolved !== undefined && resolved !== token)
+            return false;
+        resolved = token;
+        return true;
+    };
+    try {
+        const candidate = adapter;
+        for (const key of FILES_SDK_S3_AUTHORITY_KEYS) {
+            if (!(key in candidate))
+                continue;
+            const value = candidate[key];
+            if (typeof value === 'function' &&
+                !consider(s3MethodAuthority.get(value))) {
+                return conflictingS3Authority;
+            }
+        }
+        return resolved;
+    }
+    catch {
+        return conflictingS3Authority;
+    }
+}
+function bindS3AdapterAuthorityMethods(adapter, token) {
+    const candidate = adapter;
+    for (const key of FILES_SDK_S3_AUTHORITY_KEYS) {
+        if (!(key in candidate))
+            continue;
+        const value = candidate[key];
+        if (typeof value !== 'function')
+            continue;
+        const existing = s3MethodAuthority.get(value);
+        if (existing !== undefined && existing !== token) {
+            throw new TypeError('S3 adapter methods have conflicting authority.');
+        }
+        s3MethodAuthority.set(value, token);
+    }
+}
+function attachS3AdapterAuthority(adapter, raw) {
+    const existing = s3AdapterAuthorityTokenOf(adapter);
+    if (existing === conflictingS3Authority) {
+        throw new TypeError('S3 adapter authority is inconsistent.');
+    }
+    const token = existing ?? Object.freeze({});
+    const state = s3AuthorityState.get(token);
+    if (state !== undefined && state.raw !== raw) {
+        throw new TypeError('S3 adapter authority raw client cannot be changed.');
+    }
+    if (state === undefined)
+        s3AuthorityState.set(token, { raw });
+    s3AdapterAuthority.set(adapter, token);
+    bindS3AdapterAuthorityMethods(adapter, token);
+    return token;
+}
+function setS3AdapterProvenance(target, adapter, provenance) {
+    const existing = s3AdapterProvenanceOfRaw(target);
+    if (existing !== undefined) {
+        if (existing.provenance !== provenance ||
+            mismatchedS3Authority(adapter, existing.surface) !== undefined) {
+            throw new TypeError('S3 adapter provenance cannot be changed.');
+        }
+        s3AdapterProvenance.set(target, existing);
+        return existing;
+    }
+    const record = Object.freeze({
+        provenance,
+        surface: s3AuthoritySnapshot(adapter),
+    });
+    s3AdapterProvenance.set(target, record);
+    return record;
+}
+function s3AdapterProvenanceOfRaw(raw) {
+    return s3AdapterProvenance.get(raw);
+}
+function s3AuthoritySnapshot(adapter) {
+    const candidate = adapter;
+    return Object.freeze(Object.fromEntries(FILES_SDK_S3_AUTHORITY_KEYS.map((key) => {
+        const present = key in candidate;
+        return [
+            key,
+            Object.freeze({
+                present,
+                value: present ? candidate[key] : undefined,
+            }),
+        ];
+    })));
+}
+function mismatchedS3Authority(adapter, snapshot) {
+    const candidate = adapter;
+    try {
+        return FILES_SDK_S3_AUTHORITY_KEYS.find((key) => {
+            const present = key in candidate;
+            const expected = snapshot[key];
+            return (present !== expected.present ||
+                !Object.is(present ? candidate[key] : undefined, expected.value));
+        });
+    }
+    catch {
+        return FILES_SDK_S3_AUTHORITY_KEYS[0];
+    }
+}
+/** Rejects adapters already carrying reserved storage S3 extensions. */
+export function assertFilesSdkS3AdapterHasNoReservedExtensions(adapter) {
+    const reserved = filesSdkS3ReservedExtensionOf(adapter);
+    if (reserved !== undefined) {
+        throw new TypeError(`S3 adapter already defines reserved extension "${reserved}".`);
+    }
+}
+function filesSdkS3ReservedExtensionOf(adapter) {
+    const candidate = adapter;
+    try {
+        return FILES_SDK_S3_RESERVED_EXTENSION_KEYS.find((key) => key in candidate);
+    }
+    catch {
+        return FILES_SDK_S3_RESERVED_EXTENSION_KEYS[0];
+    }
+}
+/** Records that an S3 adapter was constructed but not provider-decorated. */
+export function markFilesSdkS3AdapterUndecorated(adapter) {
+    const raw = adapterRawObject(adapter);
+    if (raw === undefined) {
+        throw new TypeError('S3 adapter must expose an object raw client.');
+    }
+    attachS3AdapterAuthority(adapter, raw);
+    undecoratedS3Adapters.add(raw);
+}
+/** Records the provider verification state of one decorated S3 adapter. */
+export function markFilesSdkS3AdapterProvenance(adapter, provenance) {
+    const raw = adapterRawObject(adapter);
+    if (raw === undefined) {
+        throw new TypeError('S3 adapter must expose an object raw client.');
+    }
+    markFilesSdkS3RawClientProvenance(raw, adapter, provenance);
+}
+/** Records final provider verification state on one stable raw S3 client. */
+export function markFilesSdkS3RawClientProvenance(raw, adapter, provenance) {
+    const authority = attachS3AdapterAuthority(adapter, raw);
+    const record = setS3AdapterProvenance(raw, adapter, provenance);
+    s3AuthorityState.set(authority, { raw, record });
+    bindS3AdapterAuthorityMethods(adapter, authority);
+}
+function isUndecoratedS3Raw(raw) {
+    return undecoratedS3Adapters.has(raw);
+}
+function isStructuralS3Raw(raw) {
+    try {
+        const candidate = raw;
+        return (typeof candidate.send === 'function' &&
+            typeof candidate.config === 'object' &&
+            candidate.config !== null &&
+            candidate.config.serviceId === 'S3');
+    }
+    catch {
+        return false;
+    }
+}
+function conditionalCopyAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('promote' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    const source = candidate.conditionalCopySource;
+    const destination = candidate.conditionalCopyDestination;
+    if ((source === undefined && destination === undefined) ||
+        (source !== undefined &&
+            (typeof source.etag !== 'boolean' ||
+                typeof source.version !== 'boolean' ||
+                (source.requiresDestinationPredicate !== undefined &&
+                    typeof source.requiresDestinationPredicate !== 'boolean'))) ||
+        (destination !== undefined &&
+            (typeof destination.create !== 'boolean' ||
+                typeof destination.replace !== 'boolean' ||
+                (destination.requiresSourcePredicate !== undefined &&
+                    typeof destination.requiresSourcePredicate !== 'boolean') ||
+                typeof destination.atomicWithSource !== 'boolean')) ||
+        typeof candidate.promote !== 'function') {
+        return undefined;
+    }
+    return candidate;
+}
+function conditionalCopyCapabilities(direct, pipeline) {
+    const directSource = direct?.conditionalCopySource !== undefined &&
+        (direct.conditionalCopySource.etag || direct.conditionalCopySource.version)
+        ? direct.conditionalCopySource
+        : undefined;
+    const directDestination = direct?.conditionalCopyDestination !== undefined &&
+        (direct.conditionalCopyDestination.create ||
+            direct.conditionalCopyDestination.replace)
+        ? direct.conditionalCopyDestination
+        : undefined;
+    const pipelineSupported = pipeline.sourceEtag &&
+        pipeline.atomicSourceDestination &&
+        (pipeline.destinationCreate || pipeline.destinationReplace);
+    const pipelineCapabilities = pipelineSupported
+        ? {
+            source: {
+                etag: true,
+                requiresDestinationPredicate: true,
+                version: false,
+            },
+            destination: {
+                atomicWithSource: true,
+                create: pipeline.destinationCreate,
+                replace: pipeline.destinationReplace,
+                requiresSourcePredicate: true,
+            },
+        }
+        : {};
+    if (directSource === undefined && directDestination === undefined) {
+        return pipelineCapabilities;
+    }
+    if (!pipelineSupported) {
+        return {
+            ...(directSource !== undefined && { source: { ...directSource } }),
+            ...(directDestination !== undefined && {
+                destination: { ...directDestination },
+            }),
+        };
+    }
+    // Never splice unrelated one-sided direct declarations onto the paired
+    // Files surface. Without both direct halves there is no coherent route for
+    // the cross-product the public capability model would otherwise imply.
+    if (directSource === undefined || directDestination === undefined) {
+        return {
+            ...(directSource !== undefined && { source: { ...directSource } }),
+            ...(directDestination !== undefined && {
+                destination: { ...directDestination },
+            }),
+        };
+    }
+    const sourcePredicates = [
+        ...(directSource.etag || pipeline.sourceEtag ? ['etag'] : []),
+        ...(directSource.version ? ['version'] : []),
+    ];
+    const destinationPredicates = [
+        ...(directDestination.create || pipeline.destinationCreate
+            ? ['create']
+            : []),
+        ...(directDestination.replace || pipeline.destinationReplace
+            ? ['replace']
+            : []),
+    ];
+    const supportsDirectSourceAlone = (predicate) => directSource[predicate] &&
+        directSource.requiresDestinationPredicate !== true;
+    const supportsDirectDestinationAlone = (predicate) => directDestination[predicate] &&
+        directDestination.requiresSourcePredicate !== true;
+    const sourceAlone = sourcePredicates.map(supportsDirectSourceAlone);
+    const destinationAlone = destinationPredicates.map(supportsDirectDestinationAlone);
+    // One shared dependency flag cannot express a union where only some source
+    // or destination predicate kinds require their counterpart.
+    if ((sourceAlone.some(Boolean) && !sourceAlone.every(Boolean)) ||
+        (destinationAlone.some(Boolean) && !destinationAlone.every(Boolean))) {
+        return {
+            source: { ...directSource },
+            destination: { ...directDestination },
+        };
+    }
+    const everyPairIsAtomic = sourcePredicates.every((source) => destinationPredicates.every((destination) => {
+        const throughPipeline = source === 'etag' &&
+            (destination === 'create'
+                ? pipeline.destinationCreate
+                : pipeline.destinationReplace);
+        const throughDirect = directSource[source] &&
+            directDestination[destination] &&
+            directDestination.atomicWithSource;
+        return throughPipeline || throughDirect;
+    }));
+    if (!everyPairIsAtomic) {
+        return {
+            source: { ...directSource },
+            destination: { ...directDestination },
+        };
+    }
+    return {
+        source: {
+            etag: sourcePredicates.includes('etag'),
+            ...(sourceAlone.every((supported) => !supported) && {
+                requiresDestinationPredicate: true,
+            }),
+            version: sourcePredicates.includes('version'),
+        },
+        destination: {
+            atomicWithSource: true,
+            create: destinationPredicates.includes('create'),
+            replace: destinationPredicates.includes('replace'),
+            ...(destinationAlone.every((supported) => !supported) && {
+                requiresSourcePredicate: true,
+            }),
+        },
+    };
+}
+function conditionalUploadAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('uploadConditional' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    const create = candidate.conditionalCreate;
+    const replace = candidate.conditionalReplace;
+    const multipart = candidate.conditionalMultipartCompletion;
+    if ((create === undefined && replace === undefined) ||
+        (create !== undefined && typeof create.resultEtag !== 'boolean') ||
+        (replace !== undefined && typeof replace.resultEtag !== 'boolean') ||
+        (multipart !== undefined &&
+            (typeof multipart.create !== 'boolean' ||
+                typeof multipart.replace !== 'boolean')) ||
+        typeof candidate.uploadConditional !== 'function') {
+        return undefined;
+    }
+    return candidate;
+}
+function conditionalDeleteAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('conditionalDelete' in adapter) ||
+        !('deleteConditional' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    if (candidate.conditionalDelete === undefined ||
+        typeof candidate.conditionalDelete.etag !== 'boolean' ||
+        typeof candidate.deleteConditional !== 'function') {
+        return undefined;
+    }
+    return candidate;
+}
+function conditionalReadAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('conditionalRead' in adapter) ||
+        !('downloadConditional' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    if (candidate.conditionalRead === undefined ||
+        typeof candidate.conditionalRead.etag !== 'boolean' ||
+        typeof candidate.conditionalRead.version !== 'boolean' ||
+        typeof candidate.downloadConditional !== 'function') {
+        return undefined;
+    }
+    return candidate;
+}
+function physicalKeyAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('physicalKey' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    const maxBytes = candidate.physicalKey?.maxBytes;
+    if (!Number.isSafeInteger(maxBytes) || (maxBytes ?? 0) <= 0) {
+        return undefined;
+    }
+    return candidate;
+}
+function signedUploadPolicyAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('signedUploadPolicy' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    const capability = candidate.signedUploadPolicy;
+    if (capability === undefined ||
+        typeof capability.contentType !== 'boolean' ||
+        typeof capability.sizeRange !== 'boolean') {
+        return undefined;
+    }
+    return candidate;
+}
+function signedDownloadPolicyAdapterOf(adapter) {
+    if (typeof adapter !== 'object' ||
+        adapter === null ||
+        !('signedDownloadPolicy' in adapter)) {
+        return undefined;
+    }
+    const candidate = adapter;
+    const capability = candidate.signedDownloadPolicy;
+    if (capability === undefined || typeof capability.expiresIn !== 'boolean') {
+        return undefined;
+    }
+    return candidate;
+}
+function isFilesErrorCode(value) {
+    return (value === 'NotFound' ||
+        value === 'Unauthorized' ||
+        value === 'Conflict' ||
+        value === 'ReadOnly' ||
+        value === 'Provider');
+}
+function isFilesErrorLike(error) {
+    if (error instanceof FilesError) {
+        return true;
+    }
+    if (!(error instanceof Error)) {
+        return false;
+    }
+    try {
+        return (error.name === 'FilesError' &&
+            typeof error.message === 'string' &&
+            'code' in error &&
+            isFilesErrorCode(error.code) &&
+            'aborted' in error &&
+            typeof error.aborted === 'boolean' &&
+            'timedOut' in error &&
+            typeof error.timedOut === 'boolean' &&
+            'permanent' in error &&
+            typeof error.permanent === 'boolean' &&
+            (!('applied' in error) || typeof error.applied === 'boolean') &&
+            (!('appliedEtag' in error) || typeof error.appliedEtag === 'string'));
+    }
+    catch {
+        return false;
+    }
+}
+function unwrapFilesError(error) {
+    const seen = new Set();
+    let current = error;
+    while (current.code === 'Provider' &&
+        !current.aborted &&
+        !current.timedOut &&
+        !current.permanent &&
+        current.applied !== true &&
+        isFilesErrorLike(current.cause) &&
+        current.message === current.cause.message &&
+        !seen.has(current.cause)) {
+        seen.add(current);
+        current = current.cause;
+    }
+    return current;
+}
+const PUBLIC_PROVIDER_ERROR_MESSAGES = Object.freeze({
+    [StorageErrorCode.NOT_FOUND]: 'Storage provider object was not found.',
+    [StorageErrorCode.UNAUTHORIZED]: 'Storage provider operation was unauthorized.',
+    [StorageErrorCode.CONFLICT]: 'Storage provider operation conflicted with current state.',
+    [StorageErrorCode.READ_ONLY]: 'Storage provider is read-only.',
+    [StorageErrorCode.INVALID_ARGUMENT]: 'Storage provider rejected an invalid argument.',
+    [StorageErrorCode.NOT_SUPPORTED]: 'Storage provider operation is not supported.',
+    [StorageErrorCode.ABORTED]: 'Storage provider operation was aborted.',
+    [StorageErrorCode.TIMEOUT]: 'Storage provider operation timed out.',
+    [StorageErrorCode.LIMIT_EXCEEDED]: 'Storage provider operation exceeded a limit.',
+    [StorageErrorCode.PROVIDER]: 'Storage provider operation failed.',
+});
+function sanitizedStorageError(error) {
+    return new StorageError(PUBLIC_PROVIDER_ERROR_MESSAGES[error.code], {
+        aborted: error.aborted,
+        applied: error.applied,
+        ...(isCanonicalStorageEtag(error.appliedEtag) && {
+            appliedEtag: error.appliedEtag,
+        }),
+        code: error.code,
+        permanent: error.permanent,
+        timedOut: error.timedOut,
+    });
+}
+function filesErrorCodeOfStorage(error) {
+    switch (error.code) {
+        case StorageErrorCode.NOT_FOUND:
+            return 'NotFound';
+        case StorageErrorCode.UNAUTHORIZED:
+            return 'Unauthorized';
+        case StorageErrorCode.CONFLICT:
+            return error.permanent ? 'Conflict' : 'Provider';
+        case StorageErrorCode.READ_ONLY:
+            return 'ReadOnly';
+        default:
+            return 'Provider';
     }
-    if (!(error instanceof FilesError)) {
-        return new StorageError(error instanceof Error ? error.message : String(error), {
-            cause: error,
+}
+/** Converts NestM adapter failures before they enter the Files retry pipeline. */
+export function mapStorageErrorToFilesSdkError(error) {
+    if (error instanceof FilesError)
+        return error;
+    if (!isStorageError(error))
+        return FilesError.wrap(error);
+    const sanitized = sanitizedStorageError(error);
+    return new FilesError(filesErrorCodeOfStorage(sanitized), sanitized.message, sanitized, {
+        aborted: sanitized.aborted,
+        applied: sanitized.applied,
+        ...(isCanonicalStorageEtag(sanitized.appliedEtag) && {
+            appliedEtag: sanitized.appliedEtag,
+        }),
+        permanent: sanitized.permanent,
+        timedOut: sanitized.timedOut,
+    });
+}
+export function mapFilesSdkError(error) {
+    if (isStorageError(error))
+        return sanitizedStorageError(error);
+    if (!isFilesErrorLike(error)) {
+        return new StorageError('Storage provider operation failed.', {
             code: StorageErrorCode.PROVIDER,
         });
     }
-    if (error.cause instanceof StorageError) {
-        return error.cause;
+    const filesError = unwrapFilesError(error);
+    if (filesError.code === 'Provider' &&
+        !filesError.aborted &&
+        !filesError.timedOut &&
+        isStorageError(filesError.cause) &&
+        filesError.message === filesError.cause.message) {
+        const storageCause = filesError.cause;
+        return new StorageError(PUBLIC_PROVIDER_ERROR_MESSAGES[storageCause.code], {
+            aborted: filesError.aborted || storageCause.aborted,
+            applied: filesError.applied === true || storageCause.applied,
+            ...(isCanonicalStorageEtag(filesError.appliedEtag)
+                ? { appliedEtag: filesError.appliedEtag }
+                : isCanonicalStorageEtag(storageCause.appliedEtag)
+                    ? { appliedEtag: storageCause.appliedEtag }
+                    : {}),
+            code: storageCause.code,
+            permanent: filesError.permanent || storageCause.permanent,
+            timedOut: filesError.timedOut || storageCause.timedOut,
+        });
     }
     let code;
-    if (error.timedOut) {
+    if (filesError.timedOut) {
         code = StorageErrorCode.TIMEOUT;
     }
-    else if (error.aborted) {
+    else if (filesError.aborted) {
         code = StorageErrorCode.ABORTED;
     }
     else {
-        switch (error.code) {
+        switch (filesError.code) {
             case 'NotFound':
                 code = StorageErrorCode.NOT_FOUND;
                 break;
@@ -37,18 +617,21 @@ function mapFilesError(error) {
                 code = StorageErrorCode.READ_ONLY;
                 break;
             case 'Provider':
-                code = /(?:not supported|does not support|unsupported)/iu.test(error.message)
+                code = /(?:not supported|does not support|unsupported)/iu.test(filesError.message)
                     ? StorageErrorCode.NOT_SUPPORTED
                     : StorageErrorCode.PROVIDER;
                 break;
         }
     }
-    return new StorageError(error.message, {
-        aborted: error.aborted,
-        cause: error.cause ?? error,
+    return new StorageError(PUBLIC_PROVIDER_ERROR_MESSAGES[code], {
+        aborted: filesError.aborted,
+        applied: filesError.applied === true,
+        ...(isCanonicalStorageEtag(filesError.appliedEtag) && {
+            appliedEtag: filesError.appliedEtag,
+        }),
         code,
-        permanent: error.permanent,
-        timedOut: error.timedOut,
+        permanent: filesError.permanent,
+        timedOut: filesError.timedOut,
     });
 }
 function mapRetryOptions(retries) {
@@ -60,7 +643,37 @@ function mapRetryOptions(retries) {
         ...(retries.backoff !== undefined && {
             backoff: ({ attempt, error }) => retries.backoff?.({
                 attempt,
-                error: mapFilesError(error),
+                error: mapFilesSdkError(error),
+            }) ?? 0,
+        }),
+    };
+}
+function storageRetryOptions(retries) {
+    if (retries === undefined || typeof retries === 'number') {
+        return retries;
+    }
+    return {
+        max: retries.max,
+        ...(retries.backoff !== undefined && {
+            backoff: ({ attempt, error }) => retries.backoff?.({
+                attempt,
+                error: new FilesError(error.code === StorageErrorCode.NOT_FOUND
+                    ? 'NotFound'
+                    : error.code === StorageErrorCode.UNAUTHORIZED
+                        ? 'Unauthorized'
+                        : error.code === StorageErrorCode.CONFLICT
+                            ? 'Conflict'
+                            : error.code === StorageErrorCode.READ_ONLY
+                                ? 'ReadOnly'
+                                : 'Provider', error.message, error, {
+                    aborted: error.aborted,
+                    applied: error.applied,
+                    ...(isCanonicalStorageEtag(error.appliedEtag) && {
+                        appliedEtag: error.appliedEtag,
+                    }),
+                    permanent: error.permanent,
+                    timedOut: error.timedOut,
+                }),
             }) ?? 0,
         }),
     };
@@ -114,7 +727,7 @@ function normalizeDownloadStream(source) {
                 await activeReader.cancel(reason);
             }
             catch (error) {
-                throw mapFilesError(error);
+                throw mapFilesSdkError(error);
             }
             finally {
                 release();
@@ -137,7 +750,7 @@ function normalizeDownloadStream(source) {
             }
             catch (error) {
                 release();
-                controller.error(mapFilesError(error));
+                controller.error(mapFilesSdkError(error));
             }
         },
     });
@@ -166,6 +779,22 @@ function uploadOptions(options) {
         }),
     };
 }
+function conditionalUploadOptions(options) {
+    return {
+        ...operationOptions(options),
+        ...(options.cacheControl !== undefined && {
+            cacheControl: options.cacheControl,
+        }),
+        condition: options.condition,
+        ...(options.contentType !== undefined && {
+            contentType: options.contentType,
+        }),
+        ...(options.metadata !== undefined && { metadata: options.metadata }),
+        ...(options.onProgress !== undefined && {
+            onProgress: options.onProgress,
+        }),
+    };
+}
 function downloadOptions(options) {
     return {
         ...operationOptions(options),
@@ -227,10 +856,42 @@ function signedUploadOptions(options) {
         ...(options.minSize !== undefined && { minSize: options.minSize }),
     };
 }
-function metadataOf(file) {
+function providerEtag(value, key, operation) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const etag = normalizeProviderStorageEtag(value);
+    if (etag === undefined) {
+        throw new StorageError('Storage adapter returned an invalid ETag.', {
+            code: StorageErrorCode.PROVIDER,
+            key,
+            operation,
+            permanent: true,
+        });
+    }
+    return etag;
+}
+function invalidConditionalEtag(label, key, operation) {
+    return new StorageError(`${label} must be a canonical storage ETag.`, {
+        code: StorageErrorCode.INVALID_ARGUMENT,
+        key,
+        operation,
+        permanent: true,
+    });
+}
+function invalidConditionalArgument(message, key, operation) {
+    return new StorageError(message, {
+        code: StorageErrorCode.INVALID_ARGUMENT,
+        key,
+        operation,
+        permanent: true,
+    });
+}
+function metadataOf(file, operation) {
+    const etag = providerEtag(file.etag, file.key, operation);
     return {
         contentType: file.type,
-        ...(file.etag !== undefined && { etag: file.etag }),
+        ...(etag !== undefined && { etag }),
         key: file.key,
         ...(file.lastModified !== undefined && {
             lastModified: new Date(file.lastModified),
@@ -243,9 +904,10 @@ function metadataOf(file) {
     };
 }
 function uploadResultOf(result) {
+    const etag = providerEtag(result.etag, result.key, 'upload');
     return {
         contentType: result.contentType,
-        ...(result.etag !== undefined && { etag: result.etag }),
+        ...(etag !== undefined && { etag }),
         key: result.key,
         ...(result.lastModified !== undefined && {
             lastModified: new Date(result.lastModified),
@@ -253,64 +915,726 @@ function uploadResultOf(result) {
         size: result.size,
     };
 }
+function conditionalUploadResultOf(result) {
+    try {
+        return uploadResultOf(result);
+    }
+    catch (error) {
+        if (!isStorageError(error))
+            throw error;
+        throw new StorageError(error.message, {
+            applied: true,
+            code: error.code,
+            permanent: error.permanent,
+        });
+    }
+}
+function directConditionalUploadResultOf(result, logicalKey, physicalKey) {
+    let etag;
+    try {
+        etag = providerEtag(result.etag, logicalKey, 'upload');
+    }
+    catch (error) {
+        if (!isStorageError(error))
+            throw error;
+        throw new StorageError(error.message, {
+            applied: true,
+            code: error.code,
+            key: logicalKey,
+            operation: 'upload',
+            permanent: true,
+        });
+    }
+    if (result.key !== physicalKey) {
+        throw new StorageError('Storage adapter returned an unexpected conditional upload key.', {
+            applied: true,
+            ...(etag !== undefined && { appliedEtag: etag }),
+            code: StorageErrorCode.PROVIDER,
+            key: logicalKey,
+            operation: 'upload',
+            permanent: true,
+        });
+    }
+    return {
+        ...result,
+        ...(etag === undefined ? {} : { etag }),
+        key: logicalKey,
+    };
+}
+function storageObjectOf(file) {
+    return {
+        ...metadataOf(file, 'download'),
+        body: normalizeDownloadStream(file.stream()),
+    };
+}
+function normalizeFilesSdkPrefix(prefix) {
+    if (prefix === undefined)
+        return '';
+    if (typeof prefix !== 'string') {
+        throw new StorageError('prefix must be a string.', {
+            code: StorageErrorCode.INVALID_ARGUMENT,
+            permanent: true,
+        });
+    }
+    const normalized = prefix.replaceAll(/^\/+|(?<!\/)\/+$/gu, '');
+    if (normalized.length === 0 || normalized.includes('\0')) {
+        throw new StorageError('prefix must be a non-empty string without null bytes.', {
+            code: StorageErrorCode.INVALID_ARGUMENT,
+            permanent: true,
+        });
+    }
+    if (normalized.split('/').some((segment) => segment === '.' || segment === '..')) {
+        throw new StorageError('prefix must not contain . or .. path segments.', {
+            code: StorageErrorCode.INVALID_ARGUMENT,
+            permanent: true,
+        });
+    }
+    return normalized;
+}
+function physicalPluginKey(prefix, key) {
+    if (typeof key !== 'string' || key.length === 0) {
+        throw new StorageError('The final plugin key must be a non-empty string.', {
+            code: StorageErrorCode.INVALID_ARGUMENT,
+            permanent: true,
+        });
+    }
+    if (key.includes('\0')) {
+        throw new StorageError('The final plugin key must not contain null bytes.', {
+            code: StorageErrorCode.INVALID_ARGUMENT,
+            key,
+            permanent: true,
+        });
+    }
+    const normalized = key.replace(/^\/+/u, '');
+    if (normalized.split('/').some((segment) => segment === '.' || segment === '..')) {
+        throw new StorageError('The final plugin key must not contain . or .. path segments.', {
+            code: StorageErrorCode.INVALID_ARGUMENT,
+            key,
+            permanent: true,
+        });
+    }
+    return {
+        logicalKey: key,
+        physicalKey: prefix.length === 0 ? key : `${prefix}/${normalized}`,
+    };
+}
+function assertPhysicalPluginBudget(physicalKey, maxBytes, logicalKey) {
+    if (maxBytes === undefined ||
+        new TextEncoder().encode(physicalKey).byteLength <= maxBytes) {
+        return;
+    }
+    throw new StorageError(`The combined storage prefix and key exceed the provider's ${maxBytes}-byte physical-key limit.`, {
+        code: StorageErrorCode.LIMIT_EXCEEDED,
+        ...(logicalKey !== undefined && { key: logicalKey }),
+        permanent: true,
+    });
+}
+function physicalKeyGuardPlugin(prefix, maxBytes) {
+    const assertKey = (key) => {
+        const resolved = physicalPluginKey(prefix, key);
+        assertPhysicalPluginBudget(resolved.physicalKey, maxBytes, resolved.logicalKey);
+        return resolved.logicalKey;
+    };
+    const assertListOptions = (options) => {
+        if (options !== undefined &&
+            (typeof options !== 'object' || options === null)) {
+            throw new StorageError('The final plugin list options must be an object.', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        const listPrefix = options
+            ?.prefix;
+        if (listPrefix === undefined || listPrefix === '') {
+            if (prefix.length > 0) {
+                assertPhysicalPluginBudget(`${prefix}/`, maxBytes);
+            }
+            return options === undefined
+                ? undefined
+                : (() => {
+                    const { prefix: _prefix, ...rest } = options;
+                    return Object.freeze({
+                        ...rest,
+                        ...(listPrefix === '' && { prefix: listPrefix }),
+                    });
+                })();
+        }
+        if (typeof listPrefix !== 'string') {
+            throw new StorageError('The final plugin list prefix must be a string.', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        const resolved = physicalPluginKey(prefix, listPrefix);
+        assertPhysicalPluginBudget(resolved.physicalKey, maxBytes, resolved.logicalKey);
+        return Object.freeze({
+            ...options,
+            prefix: resolved.logicalKey,
+        });
+    };
+    return {
+        name: '@nestm/storage/physical-key-guard',
+        wrap: handlers({
+            copy: (operation, next) => {
+                const from = assertKey(operation.from);
+                const to = assertKey(operation.to);
+                return next(Object.freeze({ ...operation, from, to }));
+            },
+            delete: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+            download: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+            exists: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+            head: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+            list: (operation, next) => {
+                const options = assertListOptions(operation.options);
+                return next(Object.freeze({
+                    ...operation,
+                    ...(options !== undefined && { options }),
+                }));
+            },
+            move: (operation, next) => {
+                const from = assertKey(operation.from);
+                const to = assertKey(operation.to);
+                return next(Object.freeze({ ...operation, from, to }));
+            },
+            signedUploadUrl: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+            upload: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+            url: (operation, next) => {
+                const key = assertKey(operation.key);
+                return next(Object.freeze({ ...operation, key }));
+            },
+        }),
+    };
+}
 export class FilesSdkStorageDriver {
     #files;
     #name;
+    #conditionalCopy;
+    #conditionalDelete;
+    #conditionalRead;
+    #conditionalUpload;
+    #directConditionalFallbackBlocked;
+    #physicalKey;
+    #prefix;
+    #readOnly;
+    #retries;
+    #signal;
+    #timeout;
+    #signedUploadPolicy;
+    #signedDownloadPolicy;
     constructor(options) {
-        this.#files = new Files(options);
-        this.#name = options.adapter.name;
+        const raw = adapterRawObject(options.adapter);
+        const rawProvenance = raw === undefined ? undefined : s3AdapterProvenanceOfRaw(raw);
+        const authorityToken = s3AdapterAuthorityTokenOf(options.adapter);
+        const authorityState = typeof authorityToken === 'object'
+            ? s3AuthorityState.get(authorityToken)
+            : undefined;
+        const authorityInvalid = authorityToken === conflictingS3Authority ||
+            (authorityState !== undefined &&
+                (authorityState.record === undefined ||
+                    raw === undefined ||
+                    (raw !== authorityState.raw &&
+                        rawProvenance !== authorityState.record)));
+        const s3Provenance = authorityState?.record ?? rawProvenance;
+        if (authorityInvalid ||
+            (s3Provenance === undefined &&
+                raw !== undefined &&
+                (isUndecoratedS3Raw(raw) || isStructuralS3Raw(raw)))) {
+            throw new StorageError('Raw S3 adapters must be configured with withS3Capabilities() or createS3StorageDriver().', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        const mismatchedAuthority = s3Provenance === undefined
+            ? undefined
+            : mismatchedS3Authority(options.adapter, s3Provenance.surface);
+        if (mismatchedAuthority !== undefined) {
+            throw new StorageError(`S3 adapter authority "${mismatchedAuthority}" does not match its verified provider profile.`, {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        const adapterForFiles = s3Provenance === undefined
+            ? options.adapter
+            : Object.freeze({ ...options.adapter });
+        const copiedAuthorityMismatch = s3Provenance === undefined
+            ? undefined
+            : mismatchedS3Authority(adapterForFiles, s3Provenance.surface);
+        if (copiedAuthorityMismatch !== undefined) {
+            throw new StorageError(`S3 adapter authority "${copiedAuthorityMismatch}" changed while it was being bound.`, {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        const readOnly = options.readonly === true || s3Provenance?.provenance === 'unverified';
+        // Evaluate caller policy before appending NestM's internal key guard below.
+        this.#directConditionalFallbackBlocked =
+            hasCallerFilesOperationPolicy(options);
+        // Files retains the hooks object by reference. Snapshot it so an initially
+        // inactive object cannot be mutated after this compatibility decision and
+        // start observing only ordinary operations.
+        const hooks = options.hooks === undefined
+            ? undefined
+            : Object.freeze({ ...options.hooks });
+        this.#physicalKey = physicalKeyAdapterOf(adapterForFiles);
+        const guardedPrefix = normalizeFilesSdkPrefix(options.prefix);
+        const plugins = [
+            ...(options.plugins ?? []),
+            physicalKeyGuardPlugin(guardedPrefix, this.#physicalKey?.physicalKey.maxBytes),
+        ];
+        this.#files = new Files({
+            ...options,
+            adapter: adapterForFiles,
+            ...(hooks !== undefined && { hooks }),
+            plugins,
+            readonly: readOnly,
+        });
+        this.#name = adapterForFiles.name;
+        this.#conditionalCopy = conditionalCopyAdapterOf(adapterForFiles);
+        this.#conditionalDelete = conditionalDeleteAdapterOf(adapterForFiles);
+        this.#conditionalRead = conditionalReadAdapterOf(adapterForFiles);
+        this.#conditionalUpload = conditionalUploadAdapterOf(adapterForFiles);
+        this.#prefix = this.#files.prefix;
+        if (guardedPrefix !== this.#prefix) {
+            throw new StorageError('Storage prefix normalization was inconsistent.', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        this.#assertPhysicalKeyBudget(this.#prefix);
+        this.#readOnly = readOnly;
+        this.#retries = storageRetryOptions(options.retries);
+        this.#signal = options.signal;
+        this.#timeout = options.timeout;
+        this.#signedUploadPolicy = signedUploadPolicyAdapterOf(adapterForFiles);
+        this.#signedDownloadPolicy = signedDownloadPolicyAdapterOf(adapterForFiles);
     }
     get name() {
         return this.#name;
     }
     get capabilities() {
         const capabilities = this.#files.capabilities;
+        const conditional = capabilities.conditional;
+        const directFallbackAllowed = !this.#directConditionalFallbackBlocked;
+        const directCopy = directFallbackAllowed
+            ? this.#conditionalCopy
+            : undefined;
+        const pipelineCopy = conditional.copy;
+        const copyCapabilities = conditionalCopyCapabilities(directCopy, pipelineCopy);
+        const conditionalCopySource = copyCapabilities.source;
+        const conditionalCopyDestination = copyCapabilities.destination;
+        const directDelete = directFallbackAllowed
+            ? this.#conditionalDelete
+            : undefined;
+        const directRead = directFallbackAllowed
+            ? this.#conditionalRead
+            : undefined;
+        const directUpload = directFallbackAllowed
+            ? this.#conditionalUpload
+            : undefined;
+        const conditionalReadEtag = conditional.exactRead || directRead?.conditionalRead.etag === true;
+        const conditionalReadVersion = directRead?.conditionalRead.version === true;
         return {
             cacheControl: capabilities.cacheControl,
             delimiter: capabilities.delimiter,
             metadata: capabilities.metadata,
             rangeRead: capabilities.rangeRead,
-            resumableUpload: capabilities.multipart,
-            serverSideCopy: capabilities.serverSideCopy,
+            resumableUpload: !this.#readOnly && capabilities.multipart,
+            serverSideCopy: !this.#readOnly && capabilities.serverSideCopy,
+            ...(!this.#readOnly &&
+                conditionalCopySource !== undefined && {
+                conditionalCopySource,
+            }),
+            ...(!this.#readOnly &&
+                conditionalCopyDestination !== undefined && {
+                conditionalCopyDestination,
+            }),
+            ...(!this.#readOnly &&
+                (conditional.delete ||
+                    directDelete?.conditionalDelete.etag === true) && {
+                conditionalDelete: { etag: true },
+            }),
+            ...((conditionalReadEtag || conditionalReadVersion) && {
+                conditionalRead: {
+                    etag: conditionalReadEtag,
+                    version: conditionalReadVersion,
+                },
+            }),
+            ...(!this.#readOnly &&
+                (conditional.create ||
+                    directUpload?.conditionalCreate !== undefined) && {
+                conditionalCreate: {
+                    resultEtag: conditional.create ||
+                        directUpload?.conditionalCreate?.resultEtag === true,
+                },
+            }),
+            ...(!this.#readOnly &&
+                (conditional.replace ||
+                    directUpload?.conditionalReplace !== undefined) && {
+                conditionalReplace: {
+                    resultEtag: conditional.replace ||
+                        directUpload?.conditionalReplace?.resultEtag === true,
+                },
+            }),
+            ...(!this.#readOnly &&
+                directUpload?.conditionalMultipartCompletion !== undefined && {
+                conditionalMultipartCompletion: {
+                    ...directUpload.conditionalMultipartCompletion,
+                },
+            }),
+            ...(this.#physicalKey !== undefined && {
+                physicalKey: { ...this.#physicalKey.physicalKey },
+            }),
             signedDownload: { ...capabilities.signedUrl },
-            signedUpload: 'runtime',
-            nativeUploadProgress: capabilities.uploadProgress,
+            ...(this.#signedDownloadPolicy !== undefined && {
+                signedDownloadPolicy: {
+                    ...this.#signedDownloadPolicy.signedDownloadPolicy,
+                },
+            }),
+            signedUpload: this.#readOnly ? false : 'runtime',
+            ...(this.#signedUploadPolicy !== undefined &&
+                !this.#readOnly && {
+                signedUploadPolicy: {
+                    ...this.#signedUploadPolicy.signedUploadPolicy,
+                },
+            }),
+            nativeUploadProgress: !this.#readOnly && capabilities.uploadProgress,
         };
     }
     async upload(key, body, options) {
+        this.#assertLogicalKey(key);
         return this.#call(async () => uploadResultOf(await this.#files.upload(key, mapBody(body), uploadOptions(options))));
     }
+    uploadConditional(key, body, options) {
+        const condition = options
+            ?.condition;
+        if (typeof condition !== 'object' ||
+            condition === null ||
+            !('type' in condition) ||
+            (condition.type !== 'create' && condition.type !== 'replace')) {
+            return Promise.reject(invalidConditionalArgument('condition.type must be "create" or "replace".', key, 'upload'));
+        }
+        if (condition.type === 'replace' &&
+            !isCanonicalStorageEtag('etag' in condition ? condition.etag : undefined)) {
+            return Promise.reject(invalidConditionalEtag('condition.etag', key, 'upload'));
+        }
+        this.#assertLogicalKey(key);
+        if (this.#readOnly) {
+            return Promise.reject(new StorageError(`Cannot call uploadConditional() on a read-only storage adapter.`, {
+                code: StorageErrorCode.READ_ONLY,
+                key,
+                operation: 'upload',
+                permanent: true,
+            }));
+        }
+        const adapter = this.#conditionalUpload;
+        const capability = condition.type === 'create'
+            ? adapter?.conditionalCreate
+            : adapter?.conditionalReplace;
+        const multipartRequested = options.multipart !== undefined && options.multipart !== false;
+        const controlRequested = options.control !== undefined;
+        const pipelineSupported = !multipartRequested &&
+            !controlRequested &&
+            (condition.type === 'create'
+                ? this.#files.capabilities.conditional.create
+                : this.#files.capabilities.conditional.replace);
+        if (pipelineSupported) {
+            return this.#call(async () => conditionalUploadResultOf(await this.#files.upload(key, mapBody(body), conditionalUploadOptions(options))));
+        }
+        const multipartSupported = !multipartRequested ||
+            (condition.type === 'create'
+                ? adapter?.conditionalMultipartCompletion?.create === true
+                : adapter?.conditionalMultipartCompletion?.replace === true);
+        const directFallbackSupported = adapter !== undefined && capability !== undefined && multipartSupported;
+        if (directFallbackSupported && this.#directConditionalFallbackBlocked) {
+            return Promise.reject(this.#conditionalFallbackPolicyError(key, 'upload'));
+        }
+        if (!directFallbackSupported) {
+            return Promise.reject(new StorageError(`Storage adapter "${this.#name}" does not support conditional upload.`, {
+                code: StorageErrorCode.NOT_SUPPORTED,
+                key,
+                operation: 'upload',
+                permanent: true,
+            }));
+        }
+        const mergedOptions = this.#conditionalOptions(options);
+        return this.#call(async () => {
+            const physicalKey = this.#path(key);
+            const result = await adapter.uploadConditional(physicalKey, mapBody(body), mergedOptions);
+            return directConditionalUploadResultOf(result, key, physicalKey);
+        });
+    }
     async download(key, options) {
+        this.#assertLogicalKey(key);
         return this.#call(async () => {
             const file = await this.#files.download(key, downloadOptions(options));
             return {
-                ...metadataOf(file),
+                ...metadataOf(file, 'download'),
                 body: normalizeDownloadStream(file.stream()),
             };
         });
     }
+    downloadConditional(key, options) {
+        const condition = options
+            ?.condition;
+        if (typeof condition !== 'object' || condition === null) {
+            return Promise.reject(invalidConditionalArgument('conditional read requires a condition object.', key, 'download'));
+        }
+        const etag = 'etag' in condition ? condition.etag : undefined;
+        const version = 'version' in condition ? condition.version : undefined;
+        if (etag !== undefined && !isCanonicalStorageEtag(etag)) {
+            return Promise.reject(invalidConditionalEtag('condition.etag', key, 'download'));
+        }
+        if (version !== undefined &&
+            (typeof version !== 'string' || version.length === 0)) {
+            return Promise.reject(invalidConditionalArgument('condition.version must be a non-empty string.', key, 'download'));
+        }
+        if (etag === undefined && version === undefined) {
+            return Promise.reject(invalidConditionalArgument('conditional read requires an etag, version, or both.', key, 'download'));
+        }
+        this.#assertLogicalKey(key);
+        const pipelineSupported = etag !== undefined &&
+            version === undefined &&
+            this.#files.capabilities.conditional.exactRead;
+        if (pipelineSupported) {
+            return this.#call(async () => storageObjectOf(await this.#files.download(key, {
+                ...downloadOptions(options),
+                condition: { etag },
+            })));
+        }
+        const adapter = this.#conditionalRead;
+        const directFallbackSupported = adapter !== undefined &&
+            (etag === undefined || adapter.conditionalRead.etag) &&
+            (version === undefined || adapter.conditionalRead.version);
+        if (directFallbackSupported && this.#directConditionalFallbackBlocked) {
+            return Promise.reject(this.#conditionalFallbackPolicyError(key, 'download'));
+        }
+        if (!directFallbackSupported) {
+            return Promise.reject(new StorageError(`Storage adapter "${this.#name}" does not support conditional read.`, {
+                code: StorageErrorCode.NOT_SUPPORTED,
+                key,
+                operation: 'download',
+                permanent: true,
+            }));
+        }
+        return this.#call(async () => {
+            const physicalKey = this.#path(key);
+            const object = await adapter.downloadConditional(physicalKey, this.#conditionalOptions(options));
+            if (object.key !== physicalKey) {
+                await object.body.cancel().catch(() => undefined);
+                throw new StorageError('Storage adapter returned an unexpected conditional download key.', {
+                    code: StorageErrorCode.PROVIDER,
+                    key,
+                    operation: 'download',
+                    permanent: true,
+                });
+            }
+            let etag;
+            try {
+                etag = providerEtag(object.etag, key, 'download');
+            }
+            catch (error) {
+                await object.body.cancel(error).catch(() => undefined);
+                throw error;
+            }
+            return {
+                ...object,
+                body: normalizeDownloadStream(object.body),
+                ...(etag === undefined ? {} : { etag }),
+                key,
+                name: key.split('/').at(-1) ?? key,
+            };
+        });
+    }
     async head(key, options) {
-        return this.#call(async () => metadataOf(await this.#files.head(key, operationOptions(options))));
+        this.#assertLogicalKey(key);
+        return this.#call(async () => metadataOf(await this.#files.head(key, operationOptions(options)), 'head'));
     }
     exists(key, options) {
+        this.#assertLogicalKey(key);
         return this.#call(() => this.#files.exists(key, operationOptions(options)));
     }
     delete(key, options) {
+        this.#assertLogicalKey(key);
         return this.#call(async () => {
             await this.#files.delete(key, operationOptions(options));
         });
     }
+    deleteConditional(key, options) {
+        const condition = options
+            ?.condition;
+        if (typeof condition !== 'object' || condition === null) {
+            return Promise.reject(invalidConditionalArgument('conditional delete requires a condition object.', key, 'delete'));
+        }
+        const etag = 'etag' in condition ? condition.etag : undefined;
+        if (!isCanonicalStorageEtag(etag)) {
+            return Promise.reject(invalidConditionalEtag('condition.etag', key, 'delete'));
+        }
+        this.#assertLogicalKey(key);
+        if (this.#readOnly) {
+            return Promise.reject(new StorageError(`Cannot call deleteConditional() on a read-only storage adapter.`, {
+                code: StorageErrorCode.READ_ONLY,
+                key,
+                operation: 'delete',
+                permanent: true,
+            }));
+        }
+        if (this.#files.capabilities.conditional.delete) {
+            return this.#call(() => this.#files.delete(key, {
+                ...operationOptions(options),
+                condition: options.condition,
+            }));
+        }
+        const adapter = this.#conditionalDelete;
+        const directFallbackSupported = adapter !== undefined && adapter.conditionalDelete.etag;
+        if (directFallbackSupported && this.#directConditionalFallbackBlocked) {
+            return Promise.reject(this.#conditionalFallbackPolicyError(key, 'delete'));
+        }
+        if (!directFallbackSupported) {
+            return Promise.reject(new StorageError(`Storage adapter "${this.#name}" does not support conditional delete.`, {
+                code: StorageErrorCode.NOT_SUPPORTED,
+                key,
+                operation: 'delete',
+                permanent: true,
+            }));
+        }
+        const mergedOptions = this.#conditionalOptions(options);
+        return this.#call(() => adapter.deleteConditional(this.#path(key), mergedOptions));
+    }
     copy(sourceKey, destinationKey, options) {
+        this.#assertLogicalKey(sourceKey);
+        this.#assertLogicalKey(destinationKey);
         return this.#call(() => this.#files.copy(sourceKey, destinationKey, operationOptions(options)));
     }
     move(sourceKey, destinationKey, options) {
+        this.#assertLogicalKey(sourceKey);
+        this.#assertLogicalKey(destinationKey);
         return this.#call(() => this.#files.move(sourceKey, destinationKey, operationOptions(options)));
     }
+    promote(sourceKey, destinationKey, options) {
+        if (typeof options !== 'object' || options === null) {
+            return Promise.reject(invalidConditionalArgument('promote requires an options object with a precondition.', sourceKey, 'promote'));
+        }
+        const destination = options.destination;
+        if (destination !== undefined &&
+            (typeof destination !== 'object' ||
+                destination === null ||
+                (destination.type !== 'create' && destination.type !== 'replace'))) {
+            return Promise.reject(new StorageError('destination.type must be "create" or "replace".', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                key: destinationKey,
+                operation: 'promote',
+                permanent: true,
+            }));
+        }
+        if (options.sourceVersion !== undefined &&
+            (typeof options.sourceVersion !== 'string' ||
+                options.sourceVersion.length === 0)) {
+            return Promise.reject(invalidConditionalArgument('sourceVersion must be a non-empty string.', sourceKey, 'promote'));
+        }
+        if (options.sourceEtag === undefined &&
+            options.sourceVersion === undefined &&
+            destination === undefined) {
+            return Promise.reject(invalidConditionalArgument('promote requires a source or destination precondition.', sourceKey, 'promote'));
+        }
+        if (options.sourceEtag !== undefined &&
+            !isCanonicalStorageEtag(options.sourceEtag)) {
+            return Promise.reject(invalidConditionalEtag('sourceEtag', sourceKey, 'promote'));
+        }
+        if (destination?.type === 'replace' &&
+            !isCanonicalStorageEtag(destination.etag)) {
+            return Promise.reject(invalidConditionalEtag('destination.etag', destinationKey, 'promote'));
+        }
+        this.#assertLogicalKey(sourceKey);
+        this.#assertLogicalKey(destinationKey);
+        if (this.#readOnly) {
+            return Promise.reject(new StorageError(`Cannot call promote() on a read-only storage adapter.`, {
+                code: StorageErrorCode.READ_ONLY,
+                key: sourceKey,
+                operation: 'promote',
+                permanent: true,
+            }));
+        }
+        const pipelineCopy = this.#files.capabilities.conditional.copy;
+        const pipelineDestinationSupported = destination?.type === 'create'
+            ? pipelineCopy.destinationCreate
+            : destination?.type === 'replace'
+                ? pipelineCopy.destinationReplace
+                : false;
+        const pipelineSupported = options.sourceEtag !== undefined &&
+            options.sourceVersion === undefined &&
+            destination !== undefined &&
+            pipelineCopy.sourceEtag &&
+            pipelineCopy.atomicSourceDestination &&
+            pipelineDestinationSupported;
+        if (pipelineSupported) {
+            return this.#call(() => this.#files.copy(sourceKey, destinationKey, {
+                ...operationOptions(options),
+                condition: {
+                    destination,
+                    source: { etag: options.sourceEtag },
+                },
+            }));
+        }
+        const adapter = this.#conditionalCopy;
+        const directFallbackSupported = adapter !== undefined &&
+            (options.sourceEtag === undefined ||
+                adapter.conditionalCopySource?.etag === true) &&
+            (options.sourceVersion === undefined ||
+                adapter.conditionalCopySource?.version === true) &&
+            (options.sourceEtag === undefined && options.sourceVersion === undefined
+                ? true
+                : options.destination !== undefined ||
+                    adapter.conditionalCopySource?.requiresDestinationPredicate !==
+                        true) &&
+            (options.destination?.type !== 'create' ||
+                adapter.conditionalCopyDestination?.create === true) &&
+            (options.destination?.type !== 'replace' ||
+                adapter.conditionalCopyDestination?.replace === true) &&
+            (options.destination === undefined ||
+                options.sourceEtag !== undefined ||
+                options.sourceVersion !== undefined ||
+                adapter.conditionalCopyDestination?.requiresSourcePredicate !== true) &&
+            (options.destination === undefined ||
+                (options.sourceEtag === undefined &&
+                    options.sourceVersion === undefined) ||
+                adapter.conditionalCopyDestination?.atomicWithSource === true);
+        if (directFallbackSupported && this.#directConditionalFallbackBlocked) {
+            return Promise.reject(this.#conditionalFallbackPolicyError(sourceKey, 'promote'));
+        }
+        if (!directFallbackSupported) {
+            return Promise.reject(new StorageError(`Storage adapter "${this.#name}" does not support conditional promotion.`, {
+                code: StorageErrorCode.NOT_SUPPORTED,
+                key: sourceKey,
+                operation: 'promote',
+                permanent: true,
+            }));
+        }
+        return this.#call(() => adapter.promote(this.#path(sourceKey), this.#path(destinationKey), this.#conditionalOptions(options)));
+    }
     async list(options) {
+        this.#assertListPhysicalPrefix(options?.prefix);
         return this.#call(async () => {
             const result = await this.#files.list(listOptions(options));
             return {
-                items: result.items.map(metadataOf),
+                items: result.items.map((file) => metadataOf(file, 'list')),
                 ...(result.cursor !== undefined && { cursor: result.cursor }),
                 ...(result.prefixes !== undefined && {
                     prefixes: [...result.prefixes],
@@ -324,17 +1648,19 @@ export class FilesSdkStorageDriver {
     async *#search(pattern, options) {
         try {
             for await (const file of this.#files.search(pattern, searchOptions(options))) {
-                yield metadataOf(file);
+                yield metadataOf(file, 'search');
             }
         }
         catch (error) {
-            throw mapFilesError(error);
+            throw mapFilesSdkError(error);
         }
     }
     signDownload(key, options) {
+        this.#assertLogicalKey(key);
         return this.#call(() => this.#files.url(key, signedDownloadOptions(options)));
     }
     signUpload(key, options) {
+        this.#assertLogicalKey(key);
         return this.#call(() => this.#files.signedUploadUrl(key, signedUploadOptions(options)));
     }
     async #call(operation) {
@@ -342,9 +1668,83 @@ export class FilesSdkStorageDriver {
             return await operation();
         }
         catch (error) {
-            throw mapFilesError(error);
+            throw mapFilesSdkError(error);
         }
     }
+    #path(key) {
+        if (typeof key !== 'string' || key.length === 0) {
+            throw new StorageError('key must be a non-empty string.', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                permanent: true,
+            });
+        }
+        if (key.includes('\0')) {
+            throw new StorageError('key must not contain null bytes.', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                key,
+                permanent: true,
+            });
+        }
+        const normalized = key.replace(/^\/+/u, '');
+        if (normalized
+            .split('/')
+            .some((segment) => segment === '.' || segment === '..')) {
+            throw new StorageError('key must not contain . or .. path segments.', {
+                code: StorageErrorCode.INVALID_ARGUMENT,
+                key,
+                permanent: true,
+            });
+        }
+        const physicalKey = this.#prefix.length === 0 ? key : `${this.#prefix}/${normalized}`;
+        this.#assertPhysicalKeyBudget(physicalKey, key);
+        return physicalKey;
+    }
+    #assertLogicalKey(key) {
+        this.#path(key);
+    }
+    #assertListPhysicalPrefix(prefix) {
+        if (prefix !== undefined && prefix.length > 0) {
+            this.#assertLogicalKey(prefix);
+            return;
+        }
+        if (this.#prefix.length > 0) {
+            this.#assertPhysicalKeyBudget(`${this.#prefix}/`);
+        }
+    }
+    #physicalKeyExceedsBudget(physicalKey) {
+        const maxBytes = this.#physicalKey?.physicalKey.maxBytes;
+        return (maxBytes !== undefined &&
+            new TextEncoder().encode(physicalKey).byteLength > maxBytes);
+    }
+    #assertPhysicalKeyBudget(physicalKey, logicalKey) {
+        const maxBytes = this.#physicalKey?.physicalKey.maxBytes;
+        if (maxBytes === undefined || !this.#physicalKeyExceedsBudget(physicalKey))
+            return;
+        throw new StorageError(`The combined storage prefix and key exceed the provider's ${maxBytes}-byte physical-key limit.`, {
+            code: StorageErrorCode.LIMIT_EXCEEDED,
+            ...(logicalKey !== undefined && { key: logicalKey }),
+            permanent: true,
+        });
+    }
+    #conditionalFallbackPolicyError(key, operation) {
+        return new StorageError('This conditional form requires a NestM adapter fallback and is unavailable while Files SDK plugins, hooks, or receipts are configured.', {
+            code: StorageErrorCode.NOT_SUPPORTED,
+            key,
+            operation,
+            permanent: true,
+        });
+    }
+    #conditionalOptions(options) {
+        return {
+            ...options,
+            ...(options.retries === undefined &&
+                this.#retries !== undefined && { retries: this.#retries }),
+            ...(options.signal === undefined &&
+                this.#signal !== undefined && { signal: this.#signal }),
+            ...(options.timeout === undefined &&
+                this.#timeout !== undefined && { timeout: this.#timeout }),
+        };
+    }
 }
 export function createFilesSdkDriver(options) {
     return new FilesSdkStorageDriver(options);