@nestm/storage 0.1.0-alpha.6 → 0.1.0-alpha.8

package/dist/files-sdk/fs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/files-sdk/fs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAyC,MAAM,cAAc,CAAC;AAEzE,OAAO,EACL,oBAAoB,GAGrB,MAAM,wBAAwB,CAAC;AAShC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA+B;IAE/B,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAC7D,OAAO,oBAAoB,CAAC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC","sourcesContent":["import { fs, type FsAdapter, type FsAdapterOptions } from 'files-sdk/fs';\n\nimport {\n  createFilesSdkDriver,\n  type FilesSdkDriverOptions,\n  type FilesSdkStorageDriver,\n} from '../files-sdk.driver.js';\n\nexport interface FsStorageDriverOptions extends Omit<\n  FilesSdkDriverOptions<FsAdapter>,\n  'adapter'\n> {\n  adapter: FsAdapterOptions;\n}\n\n/**\n * Creates the files-sdk filesystem driver from the storage package's own\n * dependency context. The adapter reaches only `node:fs`, so this entry point\n * adds no native SDK to the install — unlike every object-store provider, it is\n * always available.\n *\n * The adapter keeps a `<key>.meta.json` sidecar beside each body to carry the\n * content type, ETag, and custom metadata that a filesystem has nowhere else to\n * put. Sidecars never surface as keys: `list` and `search` skip them, and\n * uploading a key that ends in `.meta.json` fails closed rather than colliding\n * with one.\n */\nexport function createFsStorageDriver(\n  options: FsStorageDriverOptions,\n): FilesSdkStorageDriver<FsAdapter> {\n  const { adapter: adapterOptions, ...filesOptions } = options;\n  return createFilesSdkDriver({ ...filesOptions, adapter: fs(adapterOptions) });\n}\n\nexport { fs, mapFsError } from 'files-sdk/fs';\nexport type { FsAdapter, FsAdapterOptions } from 'files-sdk/fs';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/files-sdk/fs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,IAAI,WAAW,EAAc,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAUvC,OAAO,EAAE,EAAE,EAAyC,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EACL,oBAAoB,GAQrB,MAAM,wBAAwB,CAAC;AAgBhC,MAAM,cAAc,GAAG,YAAY,CAAC;AACpC,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AAgBtC,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACnE,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,GAAW,EACX,SAAoD;IAEpD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GACR,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS;QACjD,CAAC,CAAC,gBAAgB,CAAC,SAAS;QAC5B,CAAC,CAAC,UAAU,KAAK,QAAQ;YACvB,CAAC,CAAC,gBAAgB,CAAC,QAAQ;YAC3B,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,OAAO;gBACjD,CAAC,CAAC,gBAAgB,CAAC,YAAY;gBAC/B,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC;IACpC,OAAO,IAAI,YAAY,CAAC,cAAc,SAAS,gBAAgB,GAAG,IAAI,EAAE;QACtE,IAAI;QACJ,GAAG;QACH,SAAS;QACT,SAAS,EACP,IAAI,KAAK,gBAAgB,CAAC,SAAS;YACnC,IAAI,KAAK,gBAAgB,CAAC,QAAQ;YAClC,IAAI,KAAK,gBAAgB,CAAC,YAAY;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,OAAe;IACjD,MAAM,IAAI,YAAY,CAAC,mCAAmC,OAAO,GAAG,EAAE;QACpE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB;QACvC,GAAG;QACH,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,aAAa,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,aAAa,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACzE,EACD,CAAC;QACD,aAAa,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvD,aAAa,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,aAAa,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,YAAY,CACrB,2BAA2B,GAAG,4BAA4B,EAC1D;QACE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB;QACvC,GAAG;QACH,SAAS,EAAE,IAAI;KAChB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE;QAC9B,IAAI,EAAE,gBAAgB,CAAC,aAAa;QACpC,GAAG;QACH,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,YAAY,CAAC,wCAAwC,GAAG,IAAI,EAAE;QACtE,IAAI,EAAE,gBAAgB,CAAC,QAAQ;QAC/B,GAAG;QACH,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,YAAY,CAAC,mBAAmB,GAAG,kBAAkB,EAAE;QAC/D,IAAI,EAAE,gBAAgB,CAAC,SAAS;QAChC,GAAG;QACH,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,OAAgC;IACjD,MAAM,aAAa,GACjB,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,MAAM,EACJ,OAAO,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,KAAK,SAAS;gBAC3B,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACxD,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAyB,EAAE,GAAW;IAC1D,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GACZ,OAAO,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI;QACvC,OAAO,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,MAAM,IAAI,YAAY,CACpB,QAAQ;QACN,CAAC,CAAC,sCAAsC,GAAG,IAAI;QAC/C,CAAC,CAAC,wCAAwC,GAAG,IAAI,EACnD;QACE,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO;QACpE,GAAG;QACH,SAAS,EAAE,IAAI;QACf,QAAQ;KACT,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,aAAa,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,QAA2B,EAC3B,GAAW,EACX,MAAe,EACf,OAAyB;IAEzB,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3B,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,IAAW,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACzC,MAAM,UAAU,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,aAAa,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,aAAa,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrB,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,IAAY,EACZ,GAAW;IAEX,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,QAAe,CAAC;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,aAAa,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,IAAW,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC/D,aAAa,CACX,GAAG,EACH,IAAI;gBACF,CAAC,CAAC,sCAAsC;gBACxC,CAAC,CAAC,qCAAqC,CAC1C,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YAC7B,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,GAAG,cAAc,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC;QAC9B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,GAAW;IACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,MAAM,EACN,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAC9C,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,uCAAuC,GAAG,IAAI,EAAE;gBACrE,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,GAAG;gBACH,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;YACnB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC;YAC1B,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC;YAC3B,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,uCAAuC,GAAG,IAAI,EAAE;gBACrE,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,GAAG;gBACH,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,MAAmB,CAAC;QACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,uCAAuC,GAAG,IAAI,EAAE;gBACrE,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,GAAG;gBACH,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAU;IAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;QAChC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU,EAAE,QAA4B;IAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,YAAY,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAsB,EACtB,KAAiB;IAEjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACzC,KAAK,EACL,MAAM,EACN,KAAK,CAAC,UAAU,GAAG,MAAM,CAC1B,CAAC;QACF,MAAM,IAAI,YAAY,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAAiB;IAIvC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,MAAM,EACN,WAAW,CAAC,OAAO;QACjB,WAAW,CAAC,MAAM;QAClB,WAAW,CAAC,QAAQ;QACpB,WAAW,CAAC,UAAU,EACxB,KAAK,CACN,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAA0B;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,GAAW,EACX,IAAU,EACV,OAAwC,EACxC,OAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GACb,UAAU,EAAE,UAAU,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,OAAO,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC;QACT,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3B,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxB,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC;YAC7B,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3B,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;YACxB,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAI,IAAmC,CAAC,SAAS,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAClC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACzB,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC/B,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAClD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,OAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,CACZ,MAAM,CAAC,MAAM,EACb,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAClD,CAAC;QACF,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE9D,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,SAAgC;IAEhC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACxE,IAAI,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,CAAC;IACf,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;QACV,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAe;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,CAChB,GAAW,EACX,SAAgC,EACf,EAAE,CACnB,cAAc,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,CACpB,KAAa,EACb,MAAc,EACd,SAAgC,EACf,EAAE;QACnB,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CACvC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,YAAY,CACpB,4EAA4E,EAC5E;gBACE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB;gBACvC,GAAG,EAAE,KAAK;gBACV,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,IAAI;aAChB,CACF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnD,QAAQ,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC9C,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QACnC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CACpB,4EAA4E,EAC5E;gBACE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB;gBACvC,GAAG,EAAE,KAAK;gBACV,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,IAAI;aAChB,CACF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CACjB,KAAc,EACd,KAAa,EACb,GAAW,EACX,SAAoD,EAC9C,EAAE;QACR,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,GAAG,KAAK,oCAAoC,EAAE;gBACnE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB;gBACvC,GAAG;gBACH,SAAS;gBACT,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACtD,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACvD,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAChD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9D,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpE,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC;YACxC,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;SACd,CAAC;QACF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9C,KAAK,CAAC,QAAQ,CACZ,GAAW,EACX,OAAyB;YAEzB,MAAM,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,mBAAmB,CACvB,GAAW,EACX,OAAsC;YAEtC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,YAAY,CACpB,2DAA2D,EAC3D;oBACE,IAAI,EAAE,gBAAgB,CAAC,aAAa;oBACpC,GAAG;oBACH,SAAS,EAAE,UAAU;oBACrB,SAAS,EAAE,IAAI;iBAChB,CACF,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;gBAC/B,IAAI,MAAkC,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;oBACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;oBACrC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,IAAI,EACJ,QAAQ,EACR,GAAG,EACH,KAAK,EACL,OAAO,CACR,CAAC;oBACF,MAAM,WAAW,GAAG,QAAQ,GAAG,cAAc,CAAC;oBAC9C,IACE,CAAC,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS;wBACzD,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS,EAC5D,CAAC;wBACD,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACpD,IACE,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;wBACpC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,IAAI,EACvC,CAAC;wBACD,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;oBACD,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC3B,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CACrB,QAAQ,EACR,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAC9C,CAAC;oBACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;wBACvC,aAAa,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;oBAC7D,CAAC;oBACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;oBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;oBACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;oBACnE,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;wBACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;wBACrB,MAAM,GAAG,SAAS,CAAC;wBACnB,OAAO;4BACL,IAAI,EAAE,IAAI,cAAc,CAAa;gCACnC,KAAK,CAAC,UAAU;oCACd,UAAU,CAAC,KAAK,EAAE,CAAC;gCACrB,CAAC;6BACF,CAAC;4BACF,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,GAAG;4BACH,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;4BAC5C,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI;gCACpC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE;6BAClC,CAAC;4BACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;4BACxB,IAAI,EAAE,CAAC;yBACR,CAAC;oBACJ,CAAC;oBACD,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC;wBACzC,SAAS,EAAE,IAAI;wBACf,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;qBACnD,CAAC,CAAC;oBACH,MAAM,GAAG,SAAS,CAAC;oBACnB,OAAO;wBACL,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAA+B;wBAC9D,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,GAAG;wBACH,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;wBAC5C,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI;4BACpC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE;yBAClC,CAAC;wBACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;wBACxB,IAAI;qBACL,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC7C,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAA0B;YAClD,MAAM,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,OAA0B;YAChD,MAAM,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAqB;YAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,iBAAiB,CACrB,GAAW,EACX,OAAwC;YAExC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpE,OAAO,SAAS,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;gBAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;oBACrC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,IAAI,EACJ,QAAQ,EACR,GAAG,EACH,KAAK,EACL,OAAO,CACR,CAAC;oBACF,MAAM,WAAW,GAAG,QAAQ,GAAG,cAAc,CAAC;oBAC9C,IACE,CAAC,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS;wBACzD,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS,EAC5D,CAAC;wBACD,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;wBAC5C,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;oBAED,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC3B,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;oBACzD,IACE,CAAC,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS;wBACzD,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS;wBAC5D,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI;4BACxC,OAAO,CAAC,SAAS,CAAC,IAAI,EACxB,CAAC;wBACD,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;oBACD,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;oBAChC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,cAAsB,EACtB,OAAgC;YAEhC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YACxC,IACE,WAAW,KAAK,SAAS;gBACzB,CAAC,OAAO,WAAW,KAAK,QAAQ;oBAC9B,WAAW,KAAK,IAAI;oBACpB,CAAC,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,YAAY,CACpB,iDAAiD,EACjD;oBACE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB;oBACvC,GAAG,EAAE,cAAc;oBACnB,SAAS,EAAE,MAAM;oBACjB,SAAS,EAAE,IAAI;iBAChB,CACF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACrC,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,WAAW,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBACpC,UAAU,CACR,WAAW,CAAC,IAAI,EAChB,kBAAkB,EAClB,cAAc,EACd,MAAM,CACP,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,IAAI,YAAY,CACpB,2DAA2D,EAC3D;oBACE,IAAI,EAAE,gBAAgB,CAAC,aAAa;oBACpC,GAAG,EAAE,SAAS;oBACd,SAAS,EAAE,MAAM;oBACjB,SAAS,EAAE,IAAI;iBAChB,CACF,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzD,IAAI,QAA4B,CAAC;gBACjC,IAAI,WAA+B,CAAC;gBACpC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM,mBAAmB,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;oBAC3D,MAAM,UAAU,GAAG,MAAM,aAAa,CACpC,IAAI,EACJ,cAAc,EACd,SAAS,EACT,KAAK,EACL,OAAO,CACR,CAAC;oBACF,MAAM,iBAAiB,GAAG,UAAU,GAAG,cAAc,CAAC;oBACtD,IACE,CAAC,MAAM,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,KAAK,SAAS;wBACjE,CAAC,MAAM,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;4BACxD,SAAS,EACX,CAAC;wBACD,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACtB,CAAC;oBACD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;oBACtE,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;wBAChC,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,EACzC,CAAC;wBACD,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACtB,CAAC;oBAED,MAAM,eAAe,GAAG,MAAM,aAAa,CACzC,IAAI,EACJ,mBAAmB,EACnB,cAAc,EACd,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM,sBAAsB,GAAG,eAAe,GAAG,cAAc,CAAC;oBAChE,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;wBAClD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CACrC,eAAe,EACf,cAAc,CACf,CAAC;wBACF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACxC,sBAAsB,EACtB,cAAc,CACf,CAAC;wBACF,IAAI,OAAO,CAAC,WAAW,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gCAChD,QAAQ,CAAC,cAAc,CAAC,CAAC;4BAC3B,CAAC;4BACD,OAAO;wBACT,CAAC;wBACD,IAAI,OAAO,CAAC,WAAW,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;4BAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gCAChD,QAAQ,CAAC,cAAc,CAAC,CAAC;4BAC3B,CAAC;4BACD,IACE,CAAC,MAAM,WAAW,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;iCACxD,IAAI,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,EACpC,CAAC;gCACD,QAAQ,CAAC,cAAc,CAAC,CAAC;4BAC3B,CAAC;wBACH,CAAC;oBACH,CAAC,CAAC;oBACF,MAAM,iBAAiB,EAAE,CAAC;oBAE1B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;oBAC7D,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC5B,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvB,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;oBACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAChC,WAAW,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;wBAC9D,GAAG,aAAa;wBAChB,YAAY;qBACb,CAAC,CAAC;oBAEH,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACjC,IACE,CAAC,MAAM,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,KAAK,SAAS;wBACjE,CAAC,MAAM,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;4BACxD,SAAS;wBACX,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;4BAC/B,CAAC,MAAM,WAAW,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI;gCACpD,OAAO,CAAC,UAAU,CAAC,EACvB,CAAC;wBACD,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACtB,CAAC;oBACD,MAAM,iBAAiB,EAAE,CAAC;oBAC1B,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;oBAC5C,QAAQ,GAAG,SAAS,CAAC;oBACrB,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;oBACtD,WAAW,GAAG,SAAS,CAAC;gBAC1B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACjD,CAAC;wBAAS,CAAC;oBACT,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAClD,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,iBAAiB,CACrB,GAAW,EACX,IAAU,EACV,OAAwC;YAExC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,SAAS,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;gBAC/B,IAAI,QAA4B,CAAC;gBACjC,IAAI,WAA+B,CAAC;gBACpC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;wBACnE,iBAAiB,CACf,GAAG,EACH,+DAA+D,CAChE,CAAC;oBACJ,CAAC;oBACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAClC,iBAAiB,CACf,GAAG,EACH,kEAAkE,CACnE,CAAC;oBACJ,CAAC;oBAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;oBACrC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,IAAI,EACJ,QAAQ,EACR,GAAG,EACH,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM,WAAW,GAAG,QAAQ,GAAG,cAAc,CAAC;oBAC9C,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBAC/D,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACrE,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACxC,IAAI,YAAY,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;4BAChE,QAAQ,CAAC,GAAG,CAAC,CAAC;wBAChB,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,IAAI,YAAY,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;4BAChE,QAAQ,CAAC,GAAG,CAAC,CAAC;wBAChB,CAAC;wBACD,IACE,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI;4BAC1C,OAAO,CAAC,SAAS,CAAC,IAAI,EACtB,CAAC;4BACD,QAAQ,CAAC,GAAG,CAAC,CAAC;wBAChB,CAAC;oBACH,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtB,GAAG,EACH,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC;oBACF,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAChC,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;oBAClE,WAAW,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;wBACvD,WAAW;wBACX,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,YAAY;wBACZ,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI;4BACxC,YAAY,EAAE,OAAO,CAAC,YAAY;yBACnC,CAAC;wBACF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI;4BACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;qBACH,CAAC,CAAC;oBAEH,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC3B,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;oBACzD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBAC9D,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACpE,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACxC,IAAI,WAAW,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;4BAC9D,QAAQ,CAAC,GAAG,CAAC,CAAC;wBAChB,CAAC;oBACH,CAAC;yBAAM,IACL,WAAW,KAAK,SAAS;wBACzB,cAAc,KAAK,SAAS;wBAC5B,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI;4BACxC,OAAO,CAAC,SAAS,CAAC,IAAI,EACxB,CAAC;wBACD,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;oBAED,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBACrC,QAAQ,GAAG,SAAS,CAAC;oBACrB,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oBAC3C,WAAW,GAAG,SAAS,CAAC;oBACxB,OAAO;wBACL,WAAW;wBACX,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,GAAG;wBACH,YAAY,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;wBACpC,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC7C,CAAC;wBAAS,CAAC;oBACT,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAClD,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KAMuD,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA+B;IAE/B,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAC7D,OAAO,oBAAoB,CAAC;QAC1B,GAAG,YAAY;QACf,OAAO,EAAE,yBAAyB,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;KACvD,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC","sourcesContent":["import { createHash, randomUUID } from 'node:crypto';\nimport { constants as fsConstants, type Stats } from 'node:fs';\nimport * as fsp from 'node:fs/promises';\nimport path from 'node:path';\nimport { Readable } from 'node:stream';\n\nimport type {\n  Body,\n  DownloadOptions,\n  ListOptions,\n  ListResult,\n  OperationOptions,\n  StoredFile,\n} from 'files-sdk';\nimport { fs, type FsAdapter, type FsAdapterOptions } from 'files-sdk/fs';\n\nimport { StorageError, StorageErrorCode } from '../../storage.error.js';\nimport {\n  isCanonicalStorageEtag,\n  normalizeProviderStorageEtag,\n} from '../../storage-etag.js';\nimport type {\n  StorageConditionalDeleteOptions,\n  StorageConditionalReadOptions,\n  StorageConditionalUploadOptions,\n  StorageObject,\n  StorageOperationOptions,\n  StoragePromotionOptions,\n  StorageUploadResult,\n} from '../../storage.types.js';\nimport {\n  createFilesSdkDriver,\n  type FilesSdkConditionalCopyAdapter,\n  type FilesSdkConditionalDeleteAdapter,\n  type FilesSdkConditionalReadAdapter,\n  type FilesSdkConditionalUploadAdapter,\n  type FilesSdkDriverOptions,\n  type FilesSdkPhysicalKeyAdapter,\n  type FilesSdkStorageDriver,\n} from '../files-sdk.driver.js';\n\nexport interface FsStorageDriverOptions extends Omit<\n  FilesSdkDriverOptions<FsAdapter>,\n  'adapter'\n> {\n  adapter: FsAdapterOptions;\n}\n\nexport type FsStorageAdapter = FsAdapter &\n  FilesSdkConditionalCopyAdapter &\n  FilesSdkConditionalDeleteAdapter &\n  FilesSdkConditionalReadAdapter &\n  FilesSdkConditionalUploadAdapter &\n  FilesSdkPhysicalKeyAdapter;\n\nconst SIDECAR_SUFFIX = '.meta.json';\nconst TEMP_SUFFIX = '.fls-part';\nconst MAX_SIDECAR_BYTES = 1024 * 1024;\n\ninterface FsSidecar {\n  contentType: string;\n  cacheControl?: string;\n  metadata?: Record<string, string>;\n  etag: string;\n  lastModified: number;\n}\n\ninterface OperationRuntime {\n  signal: AbortSignal | undefined;\n  timeoutSignal: AbortSignal | undefined;\n  callerSignal: AbortSignal | undefined;\n}\n\nfunction fsErrorCode(error: unknown): string | undefined {\n  if (typeof error === 'object' && error !== null && 'code' in error) {\n    return typeof error.code === 'string' ? error.code : undefined;\n  }\n  return undefined;\n}\n\nfunction storageFsError(\n  error: unknown,\n  key: string,\n  operation: 'copy' | 'delete' | 'download' | 'upload',\n): StorageError {\n  if (error instanceof StorageError) {\n    return error;\n  }\n  const systemCode = fsErrorCode(error);\n  const code =\n    systemCode === 'ENOENT' || systemCode === 'ENOTDIR'\n      ? StorageErrorCode.NOT_FOUND\n      : systemCode === 'EEXIST'\n        ? StorageErrorCode.CONFLICT\n        : systemCode === 'EACCES' || systemCode === 'EPERM'\n          ? StorageErrorCode.UNAUTHORIZED\n          : StorageErrorCode.PROVIDER;\n  return new StorageError(`Filesystem ${operation} failed for \"${key}\".`, {\n    code,\n    key,\n    operation,\n    permanent:\n      code === StorageErrorCode.NOT_FOUND ||\n      code === StorageErrorCode.CONFLICT ||\n      code === StorageErrorCode.UNAUTHORIZED,\n  });\n}\n\nfunction invalidFsPath(key: string, message: string): never {\n  throw new StorageError(`Invalid filesystem storage key: ${message}.`, {\n    code: StorageErrorCode.INVALID_ARGUMENT,\n    key,\n    permanent: true,\n  });\n}\n\nfunction strictSegments(key: string): string[] {\n  if (key.length === 0 || key.includes('\\0')) {\n    invalidFsPath(key, 'the key is empty or contains a null byte');\n  }\n  if (path.isAbsolute(key) || key.includes('\\\\')) {\n    invalidFsPath(key, 'only relative POSIX paths are accepted');\n  }\n  const segments = key.split('/');\n  if (\n    segments.some(\n      (segment) => segment.length === 0 || segment === '.' || segment === '..',\n    )\n  ) {\n    invalidFsPath(key, 'empty, dot, and parent segments are not accepted');\n  }\n  if (segments.some((segment) => /[. ]$/u.test(segment))) {\n    invalidFsPath(key, 'segments ending in a dot or space are not accepted');\n  }\n  const leaf = segments.at(-1)?.toLowerCase() ?? '';\n  if (leaf.endsWith(SIDECAR_SUFFIX) || leaf.endsWith(TEMP_SUFFIX)) {\n    invalidFsPath(key, 'the final segment uses a reserved adapter suffix');\n  }\n  return segments;\n}\n\nfunction symlinkError(key: string): StorageError {\n  return new StorageError(\n    `Filesystem storage key \"${key}\" crosses a symbolic link.`,\n    {\n      code: StorageErrorCode.INVALID_ARGUMENT,\n      key,\n      permanent: true,\n    },\n  );\n}\n\nfunction unsupportedUpload(key: string, message: string): never {\n  throw new StorageError(message, {\n    code: StorageErrorCode.NOT_SUPPORTED,\n    key,\n    operation: 'upload',\n    permanent: true,\n  });\n}\n\nfunction conflict(key: string): never {\n  throw new StorageError(`Conditional mutation conflicted for \"${key}\".`, {\n    code: StorageErrorCode.CONFLICT,\n    key,\n    permanent: true,\n  });\n}\n\nfunction notFound(key: string): never {\n  throw new StorageError(`Storage object \"${key}\" was not found.`, {\n    code: StorageErrorCode.NOT_FOUND,\n    key,\n    permanent: true,\n  });\n}\n\nfunction runtimeOf(options: StorageOperationOptions): OperationRuntime {\n  const timeoutSignal =\n    options.timeout === undefined || options.timeout <= 0\n      ? undefined\n      : AbortSignal.timeout(options.timeout);\n  return {\n    callerSignal: options.signal,\n    signal:\n      options.signal === undefined\n        ? timeoutSignal\n        : timeoutSignal === undefined\n          ? options.signal\n          : AbortSignal.any([options.signal, timeoutSignal]),\n    timeoutSignal,\n  };\n}\n\nfunction assertActive(runtime: OperationRuntime, key: string): void {\n  if (runtime.signal?.aborted !== true) {\n    return;\n  }\n  const timedOut =\n    runtime.timeoutSignal?.aborted === true &&\n    runtime.callerSignal?.aborted !== true;\n  throw new StorageError(\n    timedOut\n      ? `Filesystem mutation timed out for \"${key}\".`\n      : `Filesystem mutation was aborted for \"${key}\".`,\n    {\n      aborted: true,\n      code: timedOut ? StorageErrorCode.TIMEOUT : StorageErrorCode.ABORTED,\n      key,\n      permanent: true,\n      timedOut,\n    },\n  );\n}\n\nasync function ensureRoot(root: string, key: string): Promise<void> {\n  await fsp.mkdir(root, { mode: 0o700, recursive: true });\n  const stat = await fsp.lstat(root);\n  if (stat.isSymbolicLink()) {\n    throw symlinkError(key);\n  }\n  if (!stat.isDirectory()) {\n    invalidFsPath(key, 'the configured root is not a directory');\n  }\n}\n\nasync function ensureParents(\n  root: string,\n  segments: readonly string[],\n  key: string,\n  create: boolean,\n  runtime: OperationRuntime,\n): Promise<string> {\n  await ensureRoot(root, key);\n  let current = root;\n  for (const segment of segments.slice(0, -1)) {\n    assertActive(runtime, key);\n    current = path.join(current, segment);\n    let stat: Stats;\n    try {\n      stat = await fsp.lstat(current);\n    } catch (error) {\n      if (fsErrorCode(error) !== 'ENOENT') {\n        throw error;\n      }\n      if (!create) {\n        notFound(key);\n      }\n      try {\n        await fsp.mkdir(current, { mode: 0o700 });\n      } catch (mkdirError) {\n        if (fsErrorCode(mkdirError) !== 'EEXIST') {\n          throw mkdirError;\n        }\n      }\n      stat = await fsp.lstat(current);\n    }\n    if (stat.isSymbolicLink()) {\n      throw symlinkError(key);\n    }\n    if (!stat.isDirectory()) {\n      invalidFsPath(key, 'a parent segment is not a directory');\n    }\n  }\n  return path.join(root, ...segments);\n}\n\nasync function regularFileOrMissing(\n  target: string,\n  key: string,\n): Promise<Stats | undefined> {\n  try {\n    const stat = await fsp.lstat(target);\n    if (stat.isSymbolicLink()) {\n      throw symlinkError(key);\n    }\n    if (!stat.isFile()) {\n      invalidFsPath(key, 'an object path is not a regular file');\n    }\n    if (stat.nlink !== 1) {\n      invalidFsPath(key, 'hard-linked object files are not accepted');\n    }\n    return stat;\n  } catch (error) {\n    if (fsErrorCode(error) === 'ENOENT') {\n      return undefined;\n    }\n    throw error;\n  }\n}\n\nasync function assertSymlinkFreeReadPath(\n  root: string,\n  key: string,\n): Promise<void> {\n  const segments = strictSegments(key);\n  let rootStat: Stats;\n  try {\n    rootStat = await fsp.lstat(root);\n  } catch (error) {\n    if (fsErrorCode(error) === 'ENOENT') {\n      return;\n    }\n    throw error;\n  }\n  if (rootStat.isSymbolicLink()) {\n    throw symlinkError(key);\n  }\n  if (!rootStat.isDirectory()) {\n    invalidFsPath(key, 'the configured root is not a directory');\n  }\n\n  let current = root;\n  for (const [index, segment] of segments.entries()) {\n    current = path.join(current, segment);\n    let stat: Stats;\n    try {\n      stat = await fsp.lstat(current);\n    } catch (error) {\n      if (fsErrorCode(error) === 'ENOENT') {\n        return;\n      }\n      throw error;\n    }\n    if (stat.isSymbolicLink()) {\n      throw symlinkError(key);\n    }\n    const leaf = index === segments.length - 1;\n    if ((!leaf && !stat.isDirectory()) || (leaf && !stat.isFile())) {\n      invalidFsPath(\n        key,\n        leaf\n          ? 'an object path is not a regular file'\n          : 'a parent segment is not a directory',\n      );\n    }\n    if (leaf && stat.nlink !== 1) {\n      invalidFsPath(key, 'hard-linked object files are not accepted');\n    }\n  }\n\n  const sidecar = await regularFileOrMissing(current + SIDECAR_SUFFIX, key);\n  if (sidecar?.isSymbolicLink()) {\n    throw symlinkError(key);\n  }\n}\n\nasync function readSidecar(target: string, key: string): Promise<FsSidecar> {\n  const handle = await fsp.open(\n    target,\n    fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW,\n  );\n  try {\n    const stat = await handle.stat();\n    if (!stat.isFile() || stat.size > MAX_SIDECAR_BYTES) {\n      throw new StorageError(`Filesystem metadata is invalid for \"${key}\".`, {\n        code: StorageErrorCode.PROVIDER,\n        key,\n        permanent: true,\n      });\n    }\n    const parsed: unknown = JSON.parse(await handle.readFile('utf8'));\n    if (\n      typeof parsed !== 'object' ||\n      parsed === null ||\n      !('etag' in parsed) ||\n      typeof parsed.etag !== 'string' ||\n      !('contentType' in parsed) ||\n      typeof parsed.contentType !== 'string' ||\n      !('lastModified' in parsed) ||\n      typeof parsed.lastModified !== 'number'\n    ) {\n      throw new StorageError(`Filesystem metadata is invalid for \"${key}\".`, {\n        code: StorageErrorCode.PROVIDER,\n        key,\n        permanent: true,\n      });\n    }\n    const sidecar = parsed as FsSidecar;\n    const etag = normalizeProviderStorageEtag(sidecar.etag);\n    if (etag === undefined) {\n      throw new StorageError(`Filesystem metadata is invalid for \"${key}\".`, {\n        code: StorageErrorCode.PROVIDER,\n        key,\n        permanent: true,\n      });\n    }\n    return { ...sidecar, etag };\n  } finally {\n    await handle.close();\n  }\n}\n\nfunction bodyBytes(body: Body): Uint8Array | undefined {\n  if (typeof body === 'string') {\n    return new TextEncoder().encode(body);\n  }\n  if (body instanceof Uint8Array) {\n    return body;\n  }\n  if (body instanceof ArrayBuffer) {\n    return new Uint8Array(body);\n  }\n  if (ArrayBuffer.isView(body)) {\n    return new Uint8Array(body.buffer, body.byteOffset, body.byteLength);\n  }\n  return undefined;\n}\n\nfunction defaultContentType(body: Body, override: string | undefined): string {\n  if (override !== undefined) {\n    return override;\n  }\n  if (typeof body === 'string') {\n    return 'text/plain; charset=utf-8';\n  }\n  if (body instanceof Blob && body.type.length > 0) {\n    return body.type;\n  }\n  return 'application/octet-stream';\n}\n\nasync function writeAll(\n  handle: fsp.FileHandle,\n  bytes: Uint8Array,\n): Promise<void> {\n  let offset = 0;\n  while (offset < bytes.byteLength) {\n    const { bytesWritten } = await handle.write(\n      bytes,\n      offset,\n      bytes.byteLength - offset,\n    );\n    offset += bytesWritten;\n  }\n}\n\nfunction tempPath(directory: string): string {\n  return path.join(directory, `.nestm-${randomUUID()}${TEMP_SUFFIX}`);\n}\n\nasync function openTemp(directory: string): Promise<{\n  handle: fsp.FileHandle;\n  path: string;\n}> {\n  const target = tempPath(directory);\n  const handle = await fsp.open(\n    target,\n    fsConstants.O_CREAT |\n      fsConstants.O_EXCL |\n      fsConstants.O_WRONLY |\n      fsConstants.O_NOFOLLOW,\n    0o600,\n  );\n  return { handle, path: target };\n}\n\nasync function removeTemp(target: string | undefined): Promise<void> {\n  if (target === undefined) {\n    return;\n  }\n  try {\n    await fsp.unlink(target);\n  } catch (error) {\n    if (fsErrorCode(error) !== 'ENOENT') {\n      throw error;\n    }\n  }\n}\n\nasync function stageBody(\n  directory: string,\n  key: string,\n  body: Body,\n  options: StorageConditionalUploadOptions,\n  runtime: OperationRuntime,\n): Promise<{ etag: string; path: string; size: number }> {\n  const staged = await openTemp(directory);\n  const hash = createHash('sha256');\n  let size = 0;\n  const knownBytes = bodyBytes(body);\n  const knownSize =\n    knownBytes?.byteLength ?? (body instanceof Blob ? body.size : undefined);\n  options.onProgress?.({\n    loaded: 0,\n    ...(knownSize !== undefined && { total: knownSize }),\n  });\n  try {\n    if (knownBytes !== undefined) {\n      assertActive(runtime, key);\n      await writeAll(staged.handle, knownBytes);\n      hash.update(knownBytes);\n      size = knownBytes.byteLength;\n      options.onProgress?.({ loaded: size, total: size });\n    } else if (body instanceof Blob) {\n      const bytes = new Uint8Array(await body.arrayBuffer());\n      assertActive(runtime, key);\n      await writeAll(staged.handle, bytes);\n      hash.update(bytes);\n      size = bytes.byteLength;\n      options.onProgress?.({ loaded: size, total: size });\n    } else {\n      const reader = (body as ReadableStream<Uint8Array>).getReader();\n      try {\n        while (true) {\n          assertActive(runtime, key);\n          const chunk = await reader.read();\n          if (chunk.done) {\n            break;\n          }\n          await writeAll(staged.handle, chunk.value);\n          hash.update(chunk.value);\n          size += chunk.value.byteLength;\n          options.onProgress?.({ loaded: size });\n        }\n      } catch (error) {\n        await reader.cancel(error).catch(() => undefined);\n        throw error;\n      } finally {\n        reader.releaseLock();\n      }\n    }\n    await staged.handle.sync();\n    await staged.handle.close();\n    return {\n      etag: hash.digest('hex'),\n      path: staged.path,\n      size,\n    };\n  } catch (error) {\n    await staged.handle.close().catch(() => undefined);\n    await removeTemp(staged.path).catch(() => undefined);\n    throw error;\n  }\n}\n\nasync function stageSidecar(\n  directory: string,\n  sidecar: FsSidecar,\n): Promise<string> {\n  const staged = await openTemp(directory);\n  try {\n    await writeAll(\n      staged.handle,\n      new TextEncoder().encode(JSON.stringify(sidecar)),\n    );\n    await staged.handle.sync();\n    await staged.handle.close();\n    return staged.path;\n  } catch (error) {\n    await staged.handle.close().catch(() => undefined);\n    await removeTemp(staged.path).catch(() => undefined);\n    throw error;\n  }\n}\n\nconst CONDITIONAL_FS_TAILS = new Map<string, Promise<void>>();\n\nasync function serializeFsKey<Result>(\n  lockKey: string,\n  operation: () => Promise<Result>,\n): Promise<Result> {\n  const previous = CONDITIONAL_FS_TAILS.get(lockKey) ?? Promise.resolve();\n  let release = (): void => undefined;\n  const gate = new Promise<void>((resolve) => {\n    release = resolve;\n  });\n  const tail = previous.then(() => gate);\n  CONDITIONAL_FS_TAILS.set(lockKey, tail);\n  await previous;\n  try {\n    return await operation();\n  } finally {\n    release();\n    if (CONDITIONAL_FS_TAILS.get(lockKey) === tail) {\n      CONDITIONAL_FS_TAILS.delete(lockKey);\n    }\n  }\n}\n\n/**\n * Adds symlink-defended reads and process-local exact conditional operations\n * to a files-sdk fs adapter.\n *\n * The configured root must be dedicated to this driver: no other process and\n * no unconditional filesystem writer may mutate it concurrently. Each call\n * rejects symlinks in the existing key path and uses exclusive same-directory\n * temporary files plus atomic renames, but Node has no portable `openat2`\n * equivalent that could make those checks safe against a hostile concurrent\n * tree rewrite. This is a CAS implementation for an exclusively-owned local\n * workspace, not a host-filesystem sandbox. Body and metadata sidecars are two\n * files, so a process crash between their renames can still require cleanup.\n */\nexport function withFsConditionalMutation(base: FsAdapter): FsStorageAdapter {\n  const root = path.resolve(base.root);\n  const download = base.download.bind(base);\n  const exists = base.exists.bind(base);\n  const head = base.head.bind(base);\n  const list = base.list.bind(base);\n  const serialize = <Result>(\n    key: string,\n    operation: () => Promise<Result>,\n  ): Promise<Result> =>\n    serializeFsKey(`${root}\\0${key.normalize('NFC').toLowerCase()}`, operation);\n  const serializePair = <Result>(\n    first: string,\n    second: string,\n    operation: () => Promise<Result>,\n  ): Promise<Result> => {\n    const identity = (key: string): string =>\n      key.normalize('NFC').toLowerCase();\n    if (identity(first) === identity(second)) {\n      throw new StorageError(\n        'Conditional filesystem copy requires distinct source and destination keys.',\n        {\n          code: StorageErrorCode.INVALID_ARGUMENT,\n          key: first,\n          operation: 'copy',\n          permanent: true,\n        },\n      );\n    }\n    const ordered = [first, second].sort((left, right) =>\n      identity(left).localeCompare(identity(right)),\n    );\n    const [headKey, tailKey] = ordered;\n    if (headKey === undefined || tailKey === undefined) {\n      throw new StorageError(\n        'Conditional filesystem copy requires distinct source and destination keys.',\n        {\n          code: StorageErrorCode.INVALID_ARGUMENT,\n          key: first,\n          operation: 'copy',\n          permanent: true,\n        },\n      );\n    }\n    return serialize(headKey, () => serialize(tailKey, operation));\n  };\n  const assertEtag = (\n    value: unknown,\n    label: string,\n    key: string,\n    operation: 'copy' | 'delete' | 'download' | 'upload',\n  ): void => {\n    if (!isCanonicalStorageEtag(value)) {\n      throw new StorageError(`${label} must be a canonical storage ETag.`, {\n        code: StorageErrorCode.INVALID_ARGUMENT,\n        key,\n        operation,\n        permanent: true,\n      });\n    }\n  };\n\n  return Object.assign(base, {\n    conditionalCreate: Object.freeze({ resultEtag: true }),\n    conditionalReplace: Object.freeze({ resultEtag: true }),\n    conditionalDelete: Object.freeze({ etag: true }),\n    conditionalRead: Object.freeze({ etag: true, version: false }),\n    conditionalCopySource: Object.freeze({ etag: true, version: false }),\n    conditionalCopyDestination: Object.freeze({\n      atomicWithSource: true,\n      create: true,\n      replace: true,\n    }),\n    physicalKey: Object.freeze({ maxBytes: 4096 }),\n    async download(\n      key: string,\n      options?: DownloadOptions,\n    ): Promise<StoredFile> {\n      await assertSymlinkFreeReadPath(root, key);\n      return download(key, options);\n    },\n    async downloadConditional(\n      key: string,\n      options: StorageConditionalReadOptions,\n    ): Promise<StorageObject> {\n      if (options.condition.etag !== undefined) {\n        assertEtag(options.condition.etag, 'condition.etag', key, 'download');\n      }\n      if (options.condition.version !== undefined) {\n        throw new StorageError(\n          'The filesystem provider has no immutable object versions.',\n          {\n            code: StorageErrorCode.NOT_SUPPORTED,\n            key,\n            operation: 'download',\n            permanent: true,\n          },\n        );\n      }\n      return serialize(key, async () => {\n        let handle: fsp.FileHandle | undefined;\n        try {\n          const runtime = runtimeOf(options);\n          const segments = strictSegments(key);\n          const bodyPath = await ensureParents(\n            root,\n            segments,\n            key,\n            false,\n            runtime,\n          );\n          const sidecarPath = bodyPath + SIDECAR_SUFFIX;\n          if (\n            (await regularFileOrMissing(bodyPath, key)) === undefined ||\n            (await regularFileOrMissing(sidecarPath, key)) === undefined\n          ) {\n            notFound(key);\n          }\n          const sidecar = await readSidecar(sidecarPath, key);\n          if (\n            options.condition.etag !== undefined &&\n            sidecar.etag !== options.condition.etag\n          ) {\n            conflict(key);\n          }\n          assertActive(runtime, key);\n          handle = await fsp.open(\n            bodyPath,\n            fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW,\n          );\n          const stat = await handle.stat();\n          if (!stat.isFile() || stat.nlink !== 1) {\n            invalidFsPath(key, 'an object path is not a regular file');\n          }\n          const start = options.range?.start ?? 0;\n          const requestedEnd = options.range?.end ?? Math.max(0, stat.size - 1);\n          const end = Math.min(requestedEnd, Math.max(0, stat.size - 1));\n          const size = start >= stat.size ? 0 : Math.max(0, end - start + 1);\n          if (size === 0) {\n            await handle.close();\n            handle = undefined;\n            return {\n              body: new ReadableStream<Uint8Array>({\n                start(controller) {\n                  controller.close();\n                },\n              }),\n              contentType: sidecar.contentType,\n              etag: sidecar.etag,\n              key,\n              lastModified: new Date(sidecar.lastModified),\n              ...(sidecar.metadata !== undefined && {\n                metadata: { ...sidecar.metadata },\n              }),\n              name: path.basename(key),\n              size: 0,\n            };\n          }\n          const nodeStream = handle.createReadStream({\n            autoClose: true,\n            ...(options.range !== undefined && { end, start }),\n          });\n          handle = undefined;\n          return {\n            body: Readable.toWeb(nodeStream) as ReadableStream<Uint8Array>,\n            contentType: sidecar.contentType,\n            etag: sidecar.etag,\n            key,\n            lastModified: new Date(sidecar.lastModified),\n            ...(sidecar.metadata !== undefined && {\n              metadata: { ...sidecar.metadata },\n            }),\n            name: path.basename(key),\n            size,\n          };\n        } catch (error) {\n          await handle?.close().catch(() => undefined);\n          throw storageFsError(error, key, 'download');\n        }\n      });\n    },\n    async exists(key: string, options?: OperationOptions): Promise<boolean> {\n      await assertSymlinkFreeReadPath(root, key);\n      return exists(key, options);\n    },\n    async head(key: string, options?: OperationOptions): Promise<StoredFile> {\n      await assertSymlinkFreeReadPath(root, key);\n      return head(key, options);\n    },\n    async list(options?: ListOptions): Promise<ListResult> {\n      const result = await list(options);\n      for (const item of result.items) {\n        await assertSymlinkFreeReadPath(root, item.key);\n      }\n      return result;\n    },\n    async deleteConditional(\n      key: string,\n      options: StorageConditionalDeleteOptions,\n    ): Promise<void> {\n      assertEtag(options.condition.etag, 'condition.etag', key, 'delete');\n      return serialize(key, async () => {\n        const runtime = runtimeOf(options);\n        try {\n          const segments = strictSegments(key);\n          const bodyPath = await ensureParents(\n            root,\n            segments,\n            key,\n            false,\n            runtime,\n          );\n          const sidecarPath = bodyPath + SIDECAR_SUFFIX;\n          if (\n            (await regularFileOrMissing(bodyPath, key)) === undefined ||\n            (await regularFileOrMissing(sidecarPath, key)) === undefined\n          ) {\n            notFound(key);\n          }\n          const sidecar = await readSidecar(sidecarPath, key);\n          if (sidecar.etag !== options.condition.etag) {\n            conflict(key);\n          }\n\n          assertActive(runtime, key);\n          await ensureParents(root, segments, key, false, runtime);\n          if (\n            (await regularFileOrMissing(bodyPath, key)) === undefined ||\n            (await regularFileOrMissing(sidecarPath, key)) === undefined ||\n            (await readSidecar(sidecarPath, key)).etag !==\n              options.condition.etag\n          ) {\n            conflict(key);\n          }\n          await fsp.unlink(bodyPath);\n          try {\n            await fsp.unlink(sidecarPath);\n          } catch (error) {\n            throw storageFsError(error, key, 'delete');\n          }\n        } catch (error) {\n          throw storageFsError(error, key, 'delete');\n        }\n      });\n    },\n    async promote(\n      sourceKey: string,\n      destinationKey: string,\n      options: StoragePromotionOptions,\n    ): Promise<void> {\n      const destination = options.destination;\n      if (\n        destination !== undefined &&\n        (typeof destination !== 'object' ||\n          destination === null ||\n          (destination.type !== 'create' && destination.type !== 'replace'))\n      ) {\n        throw new StorageError(\n          'destination.type must be \"create\" or \"replace\".',\n          {\n            code: StorageErrorCode.INVALID_ARGUMENT,\n            key: destinationKey,\n            operation: 'copy',\n            permanent: true,\n          },\n        );\n      }\n      if (options.sourceEtag !== undefined) {\n        assertEtag(options.sourceEtag, 'sourceEtag', sourceKey, 'copy');\n      }\n      if (destination?.type === 'replace') {\n        assertEtag(\n          destination.etag,\n          'destination.etag',\n          destinationKey,\n          'copy',\n        );\n      }\n      if (options.sourceVersion !== undefined) {\n        throw new StorageError(\n          'The filesystem provider has no immutable object versions.',\n          {\n            code: StorageErrorCode.NOT_SUPPORTED,\n            key: sourceKey,\n            operation: 'copy',\n            permanent: true,\n          },\n        );\n      }\n      return serializePair(sourceKey, destinationKey, async () => {\n        let bodyTemp: string | undefined;\n        let sidecarTemp: string | undefined;\n        const runtime = runtimeOf(options);\n        try {\n          const sourceSegments = strictSegments(sourceKey);\n          const destinationSegments = strictSegments(destinationKey);\n          const sourcePath = await ensureParents(\n            root,\n            sourceSegments,\n            sourceKey,\n            false,\n            runtime,\n          );\n          const sourceSidecarPath = sourcePath + SIDECAR_SUFFIX;\n          if (\n            (await regularFileOrMissing(sourcePath, sourceKey)) === undefined ||\n            (await regularFileOrMissing(sourceSidecarPath, sourceKey)) ===\n              undefined\n          ) {\n            notFound(sourceKey);\n          }\n          const sourceSidecar = await readSidecar(sourceSidecarPath, sourceKey);\n          if (\n            options.sourceEtag !== undefined &&\n            sourceSidecar.etag !== options.sourceEtag\n          ) {\n            conflict(sourceKey);\n          }\n\n          const destinationPath = await ensureParents(\n            root,\n            destinationSegments,\n            destinationKey,\n            true,\n            runtime,\n          );\n          const destinationSidecarPath = destinationPath + SIDECAR_SUFFIX;\n          const assertDestination = async (): Promise<void> => {\n            const body = await regularFileOrMissing(\n              destinationPath,\n              destinationKey,\n            );\n            const sidecar = await regularFileOrMissing(\n              destinationSidecarPath,\n              destinationKey,\n            );\n            if (options.destination?.type === 'create') {\n              if (body !== undefined || sidecar !== undefined) {\n                conflict(destinationKey);\n              }\n              return;\n            }\n            if (options.destination?.type === 'replace') {\n              if (body === undefined || sidecar === undefined) {\n                notFound(destinationKey);\n              }\n              if (\n                (await readSidecar(destinationSidecarPath, destinationKey))\n                  .etag !== options.destination.etag\n              ) {\n                conflict(destinationKey);\n              }\n            }\n          };\n          await assertDestination();\n\n          const staged = await openTemp(path.dirname(destinationPath));\n          await staged.handle.close();\n          bodyTemp = staged.path;\n          await fsp.copyFile(sourcePath, bodyTemp);\n          const lastModified = Date.now();\n          sidecarTemp = await stageSidecar(path.dirname(destinationPath), {\n            ...sourceSidecar,\n            lastModified,\n          });\n\n          assertActive(runtime, sourceKey);\n          if (\n            (await regularFileOrMissing(sourcePath, sourceKey)) === undefined ||\n            (await regularFileOrMissing(sourceSidecarPath, sourceKey)) ===\n              undefined ||\n            (options.sourceEtag !== undefined &&\n              (await readSidecar(sourceSidecarPath, sourceKey)).etag !==\n                options.sourceEtag)\n          ) {\n            conflict(sourceKey);\n          }\n          await assertDestination();\n          await fsp.rename(bodyTemp, destinationPath);\n          bodyTemp = undefined;\n          await fsp.rename(sidecarTemp, destinationSidecarPath);\n          sidecarTemp = undefined;\n        } catch (error) {\n          throw storageFsError(error, sourceKey, 'copy');\n        } finally {\n          await removeTemp(bodyTemp).catch(() => undefined);\n          await removeTemp(sidecarTemp).catch(() => undefined);\n        }\n      });\n    },\n    async uploadConditional(\n      key: string,\n      body: Body,\n      options: StorageConditionalUploadOptions,\n    ): Promise<StorageUploadResult> {\n      if (options.condition.type === 'replace') {\n        assertEtag(options.condition.etag, 'condition.etag', key, 'upload');\n      }\n      return serialize(key, async () => {\n        let bodyTemp: string | undefined;\n        let sidecarTemp: string | undefined;\n        const runtime = runtimeOf(options);\n        try {\n          if (options.multipart !== undefined && options.multipart !== false) {\n            unsupportedUpload(\n              key,\n              'Conditional filesystem uploads do not support multipart mode.',\n            );\n          }\n          if (options.control !== undefined) {\n            unsupportedUpload(\n              key,\n              'Conditional filesystem uploads do not support resumable control.',\n            );\n          }\n\n          const segments = strictSegments(key);\n          const bodyPath = await ensureParents(\n            root,\n            segments,\n            key,\n            true,\n            runtime,\n          );\n          const sidecarPath = bodyPath + SIDECAR_SUFFIX;\n          const existingBody = await regularFileOrMissing(bodyPath, key);\n          const existingSidecar = await regularFileOrMissing(sidecarPath, key);\n          if (options.condition.type === 'create') {\n            if (existingBody !== undefined || existingSidecar !== undefined) {\n              conflict(key);\n            }\n          } else {\n            if (existingBody === undefined || existingSidecar === undefined) {\n              notFound(key);\n            }\n            if (\n              (await readSidecar(sidecarPath, key)).etag !==\n              options.condition.etag\n            ) {\n              conflict(key);\n            }\n          }\n\n          const staged = await stageBody(\n            path.dirname(bodyPath),\n            key,\n            body,\n            options,\n            runtime,\n          );\n          bodyTemp = staged.path;\n          const lastModified = Date.now();\n          const contentType = defaultContentType(body, options.contentType);\n          sidecarTemp = await stageSidecar(path.dirname(bodyPath), {\n            contentType,\n            etag: staged.etag,\n            lastModified,\n            ...(options.cacheControl !== undefined && {\n              cacheControl: options.cacheControl,\n            }),\n            ...(options.metadata !== undefined && {\n              metadata: options.metadata,\n            }),\n          });\n\n          assertActive(runtime, key);\n          await ensureParents(root, segments, key, false, runtime);\n          const currentBody = await regularFileOrMissing(bodyPath, key);\n          const currentSidecar = await regularFileOrMissing(sidecarPath, key);\n          if (options.condition.type === 'create') {\n            if (currentBody !== undefined || currentSidecar !== undefined) {\n              conflict(key);\n            }\n          } else if (\n            currentBody === undefined ||\n            currentSidecar === undefined ||\n            (await readSidecar(sidecarPath, key)).etag !==\n              options.condition.etag\n          ) {\n            conflict(key);\n          }\n\n          await fsp.rename(bodyTemp, bodyPath);\n          bodyTemp = undefined;\n          await fsp.rename(sidecarTemp, sidecarPath);\n          sidecarTemp = undefined;\n          return {\n            contentType,\n            etag: staged.etag,\n            key,\n            lastModified: new Date(lastModified),\n            size: staged.size,\n          };\n        } catch (error) {\n          throw storageFsError(error, key, 'upload');\n        } finally {\n          await removeTemp(bodyTemp).catch(() => undefined);\n          await removeTemp(sidecarTemp).catch(() => undefined);\n        }\n      });\n    },\n  } satisfies FilesSdkConditionalCopyAdapter &\n    FilesSdkConditionalDeleteAdapter &\n    FilesSdkConditionalReadAdapter &\n    FilesSdkConditionalUploadAdapter &\n    FilesSdkPhysicalKeyAdapter &\n    Pick<FsAdapter, 'download' | 'exists' | 'head' | 'list'>);\n}\n\n/**\n * Creates the files-sdk filesystem driver from the storage package's own\n * dependency context. The adapter reaches only `node:fs`, so this entry point\n * adds no native SDK to the install — unlike every object-store provider, it is\n * always available.\n *\n * The adapter keeps a `<key>.meta.json` sidecar beside each body to carry the\n * content type, ETag, and custom metadata that a filesystem has nowhere else to\n * put. Sidecars never surface as keys: `list` and `search` skip them, and\n * uploading a key that ends in `.meta.json` fails closed rather than colliding\n * with one.\n *\n * Conditional mutations additionally require an exclusively-owned root. See\n * {@link withFsConditionalMutation}; use an OS sandbox as well when running an\n * agent that has direct shell or filesystem tools.\n */\nexport function createFsStorageDriver(\n  options: FsStorageDriverOptions,\n): FilesSdkStorageDriver<FsStorageAdapter> {\n  const { adapter: adapterOptions, ...filesOptions } = options;\n  return createFilesSdkDriver({\n    ...filesOptions,\n    adapter: withFsConditionalMutation(fs(adapterOptions)),\n  });\n}\n\nexport { fs, mapFsError } from 'files-sdk/fs';\nexport type { FsAdapter, FsAdapterOptions } from 'files-sdk/fs';\n"]}

package/dist/files-sdk/index.d.ts

@@ -1,3 +1,3 @@
-export { FilesSdkStorageDriver, createFilesSdkDriver, type FilesSdkConditionalCopyAdapter, type FilesSdkSignedUploadPolicyAdapter, type FilesSdkSignedDownloadPolicyAdapter, type FilesSdkDriverOptions, } from './files-sdk.driver.js';
+export { FilesSdkStorageDriver, createFilesSdkDriver, type FilesSdkConditionalCopyAdapter, type FilesSdkConditionalDeleteAdapter, type FilesSdkConditionalReadAdapter, type FilesSdkConditionalUploadAdapter, type FilesSdkPhysicalKeyAdapter, type FilesSdkSignedUploadPolicyAdapter, type FilesSdkSignedDownloadPolicyAdapter, type FilesSdkDriverOptions, } from './files-sdk.driver.js';
 export type { Adapter as FilesSdkAdapter, FilesHooks as FilesSdkHooks, FilesPlugin as FilesSdkPlugin, } from 'files-sdk';
 //# sourceMappingURL=index.d.ts.map

package/dist/files-sdk/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/files-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,8BAA8B,EACnC,KAAK,iCAAiC,EACtC,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,OAAO,IAAI,eAAe,EAC1B,UAAU,IAAI,aAAa,EAC3B,WAAW,IAAI,cAAc,GAC9B,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/files-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,OAAO,IAAI,eAAe,EAC1B,UAAU,IAAI,aAAa,EAC3B,WAAW,IAAI,cAAc,GAC9B,MAAM,WAAW,CAAC"}

package/dist/files-sdk/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/files-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAKrB,MAAM,uBAAuB,CAAC","sourcesContent":["export {\n  FilesSdkStorageDriver,\n  createFilesSdkDriver,\n  type FilesSdkConditionalCopyAdapter,\n  type FilesSdkSignedUploadPolicyAdapter,\n  type FilesSdkSignedDownloadPolicyAdapter,\n  type FilesSdkDriverOptions,\n} from './files-sdk.driver.js';\n\nexport type {\n  Adapter as FilesSdkAdapter,\n  FilesHooks as FilesSdkHooks,\n  FilesPlugin as FilesSdkPlugin,\n} from 'files-sdk';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/files-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GASrB,MAAM,uBAAuB,CAAC","sourcesContent":["export {\n  FilesSdkStorageDriver,\n  createFilesSdkDriver,\n  type FilesSdkConditionalCopyAdapter,\n  type FilesSdkConditionalDeleteAdapter,\n  type FilesSdkConditionalReadAdapter,\n  type FilesSdkConditionalUploadAdapter,\n  type FilesSdkPhysicalKeyAdapter,\n  type FilesSdkSignedUploadPolicyAdapter,\n  type FilesSdkSignedDownloadPolicyAdapter,\n  type FilesSdkDriverOptions,\n} from './files-sdk.driver.js';\n\nexport type {\n  Adapter as FilesSdkAdapter,\n  FilesHooks as FilesSdkHooks,\n  FilesPlugin as FilesSdkPlugin,\n} from 'files-sdk';\n"]}

package/dist/files-sdk/provider/index.d.ts

@@ -2,6 +2,7 @@ import type { Adapter } from 'files-sdk';
 import { type LoadFilesOptions } from 'files-sdk/loader';
 import { type EnvVar, type Provider, type ProviderSlug } from 'files-sdk/providers';
 import { type FilesSdkDriverOptions, type FilesSdkStorageDriver } from '../files-sdk.driver.js';
+import type { S3ProviderProfile } from '../s3/index.js';
 /** Slug of a storage provider this package can build a driver for. */
 export type StorageProviderName = ProviderSlug;
 /**
@@ -18,6 +19,8 @@ export interface ProviderStorageDriverOptions extends Omit<FilesSdkDriverOptions
     /** Which provider to build. Validate untrusted input with {@link isStorageProvider}. */
     provider: StorageProviderName;
     config?: StorageProviderConfig;
+    /** Verified operation profile for the `s3` slug, especially custom endpoints. */
+    s3ProviderProfile?: S3ProviderProfile;
 }
 /**
  * Builds a {@link FilesSdkStorageDriver} for a provider named at runtime,
@@ -26,11 +29,12 @@ export interface ProviderStorageDriverOptions extends Omit<FilesSdkDriverOptions
  * `'r2'`, `'fs'`, …) and installs one native SDK, instead of the application
  * hard-coding a driver per backend.
  *
- * The `s3` slug additionally gets the conditional-promotion and signed-policy
- * capabilities {@link createS3StorageDriver} attaches; every other provider
- * exposes exactly what its adapter declares. Import
- * `@nestm/storage/files-sdk/s3` directly when the provider is known at build
- * time and the extra indirection buys nothing.
+ * The `s3` slug additionally gets the exact verified provider profile and
+ * signed-policy capabilities {@link createS3StorageDriver} attaches. Providers
+ * not backed by the AWS S3 SDK expose what their adapter declares;
+ * noncanonical S3-backed providers default to an unverified, read-only profile.
+ * Import `@nestm/storage/files-sdk/s3` directly when the provider is known at
+ * build time and the extra indirection buys nothing.
  *
  * @throws StorageError `INVALID_ARGUMENT` for an unknown slug, and whatever the
  * adapter reports (mapped) when required config or credentials are missing.

package/dist/files-sdk/provider/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/files-sdk/provider/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAC;AAEhC,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAE/C;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAEvE,MAAM,WAAW,4BAA6B,SAAQ,IAAI,CACxD,qBAAqB,CAAC,OAAO,CAAC,EAC9B,SAAS,CACV;IACC,wFAAwF;IACxF,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAWhC;AAoCD,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB,CAE7E;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,IAAI,SAAS,QAAQ,EAAE,CAE1D;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAErE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAED,6EAA6E;AAC7E,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE;AAED,YAAY,EACV,MAAM,IAAI,qBAAqB,EAC/B,QAAQ,IAAI,mBAAmB,GAChC,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/files-sdk/provider/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAa,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGnE,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAE/C;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAEvE,MAAM,WAAW,4BAA6B,SAAQ,IAAI,CACxD,qBAAqB,CAAC,OAAO,CAAC,EAC9B,SAAS,CACV;IACC,wFAAwF;IACxF,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAoBhC;AA+ED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB,CAE7E;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,IAAI,SAAS,QAAQ,EAAE,CAE1D;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAErE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAED,6EAA6E;AAC7E,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE;AAED,YAAY,EACV,MAAM,IAAI,qBAAqB,EAC/B,QAAQ,IAAI,mBAAmB,GAChC,MAAM,qBAAqB,CAAC"}

package/dist/files-sdk/provider/index.js

@@ -2,6 +2,7 @@ import { loadFiles } from 'files-sdk/loader';
 import { PROVIDER_NAMES, getProvider, getSecretEnvVars, listEnvVars, } from 'files-sdk/providers';
 import { StorageError, StorageErrorCode } from '../../storage.error.js';
 import { createFilesSdkDriver, mapFilesSdkError, } from '../files-sdk.driver.js';
+import { recordS3ConstructionMetadata } from '../s3/construction-metadata.js';
 /**
  * Builds a {@link FilesSdkStorageDriver} for a provider named at runtime,
  * importing that provider's adapter — and only that one — on demand. A
@@ -9,27 +10,49 @@ import { createFilesSdkDriver, mapFilesSdkError, } from '../files-sdk.driver.js'
  * `'r2'`, `'fs'`, …) and installs one native SDK, instead of the application
  * hard-coding a driver per backend.
  *
- * The `s3` slug additionally gets the conditional-promotion and signed-policy
- * capabilities {@link createS3StorageDriver} attaches; every other provider
- * exposes exactly what its adapter declares. Import
- * `@nestm/storage/files-sdk/s3` directly when the provider is known at build
- * time and the extra indirection buys nothing.
+ * The `s3` slug additionally gets the exact verified provider profile and
+ * signed-policy capabilities {@link createS3StorageDriver} attaches. Providers
+ * not backed by the AWS S3 SDK expose what their adapter declares;
+ * noncanonical S3-backed providers default to an unverified, read-only profile.
+ * Import `@nestm/storage/files-sdk/s3` directly when the provider is known at
+ * build time and the extra indirection buys nothing.
  *
  * @throws StorageError `INVALID_ARGUMENT` for an unknown slug, and whatever the
  * adapter reports (mapped) when required config or credentials are missing.
  */
 export async function createProviderStorageDriver(options) {
-    const { provider, config, ...filesOptions } = options;
+    const { provider, config, s3ProviderProfile, ...filesOptions } = options;
     if (!isStorageProvider(provider)) {
         throw unknownProvider(provider);
     }
     // `loadFiles` owns the slug → adapter mapping and keeps the import lazy; the
     // client it returns is discarded so the caller's own driver options (prefix,
     // hooks, plugins, readonly, retries) apply to the instance the bridge builds.
-    const adapter = await resolveAdapter(provider, config);
-    return createFilesSdkDriver({ ...filesOptions, adapter });
+    if (s3ProviderProfile !== undefined && provider !== 's3') {
+        throw new StorageError('s3ProviderProfile can only be used with the "s3" provider.', { code: StorageErrorCode.INVALID_ARGUMENT, permanent: true });
+    }
+    const adapter = await resolveAdapter(provider, config, s3ProviderProfile);
+    return createFilesSdkDriver({
+        ...filesOptions,
+        adapter,
+    });
+}
+function isS3BackedAdapter(adapter) {
+    try {
+        const raw = adapter.raw;
+        if (typeof raw !== 'object' || raw === null)
+            return false;
+        const candidate = raw;
+        return (typeof candidate.send === 'function' &&
+            typeof candidate.config === 'object' &&
+            candidate.config !== null &&
+            candidate.config.serviceId === 'S3');
+    }
+    catch {
+        return false;
+    }
 }
-async function resolveAdapter(provider, config) {
+async function resolveAdapter(provider, config, s3ProviderProfile) {
     let resolved;
     try {
         resolved = await loadFiles({ ...config, provider });
@@ -38,15 +61,37 @@ async function resolveAdapter(provider, config) {
         throw mapFilesSdkError(error);
     }
     const { adapter } = resolved.files;
-    if (provider !== 's3') {
+    if (provider === 'fs') {
+        const { withFsConditionalMutation } = await import('../fs/index.js');
+        return withFsConditionalMutation(adapter);
+    }
+    if (!isS3BackedAdapter(adapter)) {
         return adapter;
     }
-    // Built by `s3(...)`, so its `raw` is an S3Client and the promotion path
-    // holds. The S3-compatible wrappers keep only what they declare themselves.
+    // Every AWS-SDK-backed wrapper gets fail-closed S3 provenance and endpoint
+    // hardening. Only the canonical `s3` slug may infer native AWS or accept an
+    // explicit verified profile; named compatibles remain unverified/read-only.
     const { withS3Capabilities } = await import('../s3/index.js');
-    return withS3Capabilities(adapter, {
-        ...(config?.publicBaseUrl !== undefined && {
-            publicBaseUrl: config.publicBaseUrl,
+    const configJsonPublicBaseUrl = config?.configJson?.publicBaseUrl;
+    const publicBaseUrl = config?.publicBaseUrl ??
+        (typeof configJsonPublicBaseUrl === 'string'
+            ? configJsonPublicBaseUrl
+            : undefined);
+    const s3Adapter = adapter;
+    recordS3ConstructionMetadata(s3Adapter.raw, {
+        publicBaseUrlConfigured: provider !== 's3' ||
+            config?.publicBaseUrl !== undefined ||
+            configJsonPublicBaseUrl !== undefined,
+    });
+    return withS3Capabilities(s3Adapter, {
+        ...(typeof config?.endpoint === 'string' && {
+            endpoint: config.endpoint,
+        }),
+        ...(publicBaseUrl !== undefined && {
+            publicBaseUrl,
+        }),
+        ...(s3ProviderProfile !== undefined && {
+            providerProfile: s3ProviderProfile,
         }),
     });
 }

package/dist/files-sdk/provider/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/files-sdk/provider/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAyB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EACL,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,WAAW,GAIZ,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAyBhC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAqC;IAErC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IACtD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,oBAAoB,CAAC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAA6B,EAC7B,MAAyC;IAEzC,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9D,OAAO,kBAAkB,CACvB,OAAmD,EACnD;QACE,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS,IAAI;YACzC,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;KACH,CACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,IAAI,YAAY,CACrB,6BAA6B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACvG,EAAE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAC7D,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAC1C,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gCAAgC,CAAC,IAAY;IAC3D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC","sourcesContent":["import type { Adapter } from 'files-sdk';\nimport { loadFiles, type LoadFilesOptions } from 'files-sdk/loader';\nimport {\n  PROVIDER_NAMES,\n  getProvider,\n  getSecretEnvVars,\n  listEnvVars,\n  type EnvVar,\n  type Provider,\n  type ProviderSlug,\n} from 'files-sdk/providers';\n\nimport { StorageError, StorageErrorCode } from '../../storage.error.js';\nimport {\n  createFilesSdkDriver,\n  mapFilesSdkError,\n  type FilesSdkDriverOptions,\n  type FilesSdkStorageDriver,\n} from '../files-sdk.driver.js';\n\n/** Slug of a storage provider this package can build a driver for. */\nexport type StorageProviderName = ProviderSlug;\n\n/**\n * Flat, provider-specific settings — `bucket` and `region` for an object store,\n * `root` for the filesystem, `accountName` and `container` for Azure, and so\n * on. Every provider reads what it needs and ignores the rest, so one config\n * shape serves a deployment that switches providers by name.\n *\n * Credentials may be omitted for any provider whose SDK resolves its own chain\n * (an IAM role, Application Default Credentials, a shared profile).\n */\nexport type StorageProviderConfig = Omit<LoadFilesOptions, 'provider'>;\n\nexport interface ProviderStorageDriverOptions extends Omit<\n  FilesSdkDriverOptions<Adapter>,\n  'adapter'\n> {\n  /** Which provider to build. Validate untrusted input with {@link isStorageProvider}. */\n  provider: StorageProviderName;\n  config?: StorageProviderConfig;\n}\n\n/**\n * Builds a {@link FilesSdkStorageDriver} for a provider named at runtime,\n * importing that provider's adapter — and only that one — on demand. A\n * deployment selects its store with a string (`'s3'`, `'gcs'`, `'azure'`,\n * `'r2'`, `'fs'`, …) and installs one native SDK, instead of the application\n * hard-coding a driver per backend.\n *\n * The `s3` slug additionally gets the conditional-promotion and signed-policy\n * capabilities {@link createS3StorageDriver} attaches; every other provider\n * exposes exactly what its adapter declares. Import\n * `@nestm/storage/files-sdk/s3` directly when the provider is known at build\n * time and the extra indirection buys nothing.\n *\n * @throws StorageError `INVALID_ARGUMENT` for an unknown slug, and whatever the\n * adapter reports (mapped) when required config or credentials are missing.\n */\nexport async function createProviderStorageDriver(\n  options: ProviderStorageDriverOptions,\n): Promise<FilesSdkStorageDriver> {\n  const { provider, config, ...filesOptions } = options;\n  if (!isStorageProvider(provider)) {\n    throw unknownProvider(provider);\n  }\n\n  // `loadFiles` owns the slug → adapter mapping and keeps the import lazy; the\n  // client it returns is discarded so the caller's own driver options (prefix,\n  // hooks, plugins, readonly, retries) apply to the instance the bridge builds.\n  const adapter = await resolveAdapter(provider, config);\n  return createFilesSdkDriver({ ...filesOptions, adapter });\n}\n\nasync function resolveAdapter(\n  provider: StorageProviderName,\n  config: StorageProviderConfig | undefined,\n): Promise<Adapter> {\n  let resolved;\n  try {\n    resolved = await loadFiles({ ...config, provider });\n  } catch (error) {\n    throw mapFilesSdkError(error);\n  }\n  const { adapter } = resolved.files;\n  if (provider !== 's3') {\n    return adapter;\n  }\n  // Built by `s3(...)`, so its `raw` is an S3Client and the promotion path\n  // holds. The S3-compatible wrappers keep only what they declare themselves.\n  const { withS3Capabilities } = await import('../s3/index.js');\n  return withS3Capabilities(\n    adapter as Parameters<typeof withS3Capabilities>[0],\n    {\n      ...(config?.publicBaseUrl !== undefined && {\n        publicBaseUrl: config.publicBaseUrl,\n      }),\n    },\n  );\n}\n\nfunction unknownProvider(provider: string): StorageError {\n  return new StorageError(\n    `Unknown storage provider: ${JSON.stringify(provider)}. Known providers: ${PROVIDER_NAMES.join(', ')}.`,\n    { code: StorageErrorCode.INVALID_ARGUMENT, permanent: true },\n  );\n}\n\n/** Narrows an untrusted string — an env var, a config file — to a known slug. */\nexport function isStorageProvider(value: string): value is StorageProviderName {\n  return getProvider(value) !== undefined;\n}\n\n/** Every provider that can be named, sorted by slug. */\nexport function listStorageProviders(): readonly Provider[] {\n  return PROVIDER_NAMES.flatMap((slug) => getProvider(slug) ?? []);\n}\n\n/** One provider's display name, description, native SDKs, and env contract. */\nexport function getStorageProvider(slug: string): Provider | undefined {\n  return getProvider(slug);\n}\n\n/**\n * Every environment variable a provider reads, flattened across required, all\n * credential modes, and optional. Useful for validating a deployment's config\n * before the first upload rather than at it.\n */\nexport function listStorageProviderEnvVars(slug: string): EnvVar[] {\n  return listEnvVars(slug);\n}\n\n/** The subset of {@link listStorageProviderEnvVars} that carries secrets. */\nexport function listStorageProviderSecretEnvVars(slug: string): EnvVar[] {\n  return getSecretEnvVars(slug);\n}\n\nexport type {\n  EnvVar as StorageProviderEnvVar,\n  Provider as StorageProviderInfo,\n} from 'files-sdk/providers';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/files-sdk/provider/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAyB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EACL,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,WAAW,GAIZ,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AA2B9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAqC;IAErC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IACzE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,iBAAiB,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,YAAY,CACpB,4DAA4D,EAC5D,EAAE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1E,OAAO,oBAAoB,CAAC;QAC1B,GAAG,YAAY;QACf,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,SAAS,GAAG,GAGjB,CAAC;QACF,OAAO,CACL,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;YACpC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;YACpC,SAAS,CAAC,MAAM,KAAK,IAAI;YACxB,SAAS,CAAC,MAA2C,CAAC,SAAS,KAAK,IAAI,CAC1E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAA6B,EAC7B,MAAyC,EACzC,iBAAgD;IAEhD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,OAAO,yBAAyB,CAC9B,OAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9D,MAAM,uBAAuB,GAAG,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC;IAClE,MAAM,aAAa,GACjB,MAAM,EAAE,aAAa;QACrB,CAAC,OAAO,uBAAuB,KAAK,QAAQ;YAC1C,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,SAAS,GAAG,OAAmD,CAAC;IACtE,4BAA4B,CAAC,SAAS,CAAC,GAAG,EAAE;QAC1C,uBAAuB,EACrB,QAAQ,KAAK,IAAI;YACjB,MAAM,EAAE,aAAa,KAAK,SAAS;YACnC,uBAAuB,KAAK,SAAS;KACxC,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC,SAAS,EAAE;QACnC,GAAG,CAAC,OAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ,IAAI;YAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI;YACjC,aAAa;SACd,CAAC;QACF,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI;YACrC,eAAe,EAAE,iBAAiB;SACnC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,IAAI,YAAY,CACrB,6BAA6B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACvG,EAAE,IAAI,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAC7D,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAC1C,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gCAAgC,CAAC,IAAY;IAC3D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC","sourcesContent":["import type { Adapter } from 'files-sdk';\nimport { loadFiles, type LoadFilesOptions } from 'files-sdk/loader';\nimport {\n  PROVIDER_NAMES,\n  getProvider,\n  getSecretEnvVars,\n  listEnvVars,\n  type EnvVar,\n  type Provider,\n  type ProviderSlug,\n} from 'files-sdk/providers';\n\nimport { StorageError, StorageErrorCode } from '../../storage.error.js';\nimport {\n  createFilesSdkDriver,\n  mapFilesSdkError,\n  type FilesSdkDriverOptions,\n  type FilesSdkStorageDriver,\n} from '../files-sdk.driver.js';\nimport type { S3Adapter, S3ProviderProfile } from '../s3/index.js';\nimport { recordS3ConstructionMetadata } from '../s3/construction-metadata.js';\n\n/** Slug of a storage provider this package can build a driver for. */\nexport type StorageProviderName = ProviderSlug;\n\n/**\n * Flat, provider-specific settings — `bucket` and `region` for an object store,\n * `root` for the filesystem, `accountName` and `container` for Azure, and so\n * on. Every provider reads what it needs and ignores the rest, so one config\n * shape serves a deployment that switches providers by name.\n *\n * Credentials may be omitted for any provider whose SDK resolves its own chain\n * (an IAM role, Application Default Credentials, a shared profile).\n */\nexport type StorageProviderConfig = Omit<LoadFilesOptions, 'provider'>;\n\nexport interface ProviderStorageDriverOptions extends Omit<\n  FilesSdkDriverOptions<Adapter>,\n  'adapter'\n> {\n  /** Which provider to build. Validate untrusted input with {@link isStorageProvider}. */\n  provider: StorageProviderName;\n  config?: StorageProviderConfig;\n  /** Verified operation profile for the `s3` slug, especially custom endpoints. */\n  s3ProviderProfile?: S3ProviderProfile;\n}\n\n/**\n * Builds a {@link FilesSdkStorageDriver} for a provider named at runtime,\n * importing that provider's adapter — and only that one — on demand. A\n * deployment selects its store with a string (`'s3'`, `'gcs'`, `'azure'`,\n * `'r2'`, `'fs'`, …) and installs one native SDK, instead of the application\n * hard-coding a driver per backend.\n *\n * The `s3` slug additionally gets the exact verified provider profile and\n * signed-policy capabilities {@link createS3StorageDriver} attaches. Providers\n * not backed by the AWS S3 SDK expose what their adapter declares;\n * noncanonical S3-backed providers default to an unverified, read-only profile.\n * Import `@nestm/storage/files-sdk/s3` directly when the provider is known at\n * build time and the extra indirection buys nothing.\n *\n * @throws StorageError `INVALID_ARGUMENT` for an unknown slug, and whatever the\n * adapter reports (mapped) when required config or credentials are missing.\n */\nexport async function createProviderStorageDriver(\n  options: ProviderStorageDriverOptions,\n): Promise<FilesSdkStorageDriver> {\n  const { provider, config, s3ProviderProfile, ...filesOptions } = options;\n  if (!isStorageProvider(provider)) {\n    throw unknownProvider(provider);\n  }\n\n  // `loadFiles` owns the slug → adapter mapping and keeps the import lazy; the\n  // client it returns is discarded so the caller's own driver options (prefix,\n  // hooks, plugins, readonly, retries) apply to the instance the bridge builds.\n  if (s3ProviderProfile !== undefined && provider !== 's3') {\n    throw new StorageError(\n      's3ProviderProfile can only be used with the \"s3\" provider.',\n      { code: StorageErrorCode.INVALID_ARGUMENT, permanent: true },\n    );\n  }\n  const adapter = await resolveAdapter(provider, config, s3ProviderProfile);\n  return createFilesSdkDriver({\n    ...filesOptions,\n    adapter,\n  });\n}\n\nfunction isS3BackedAdapter(adapter: Adapter): adapter is S3Adapter {\n  try {\n    const raw = adapter.raw;\n    if (typeof raw !== 'object' || raw === null) return false;\n    const candidate = raw as {\n      readonly config?: unknown;\n      readonly send?: unknown;\n    };\n    return (\n      typeof candidate.send === 'function' &&\n      typeof candidate.config === 'object' &&\n      candidate.config !== null &&\n      (candidate.config as { readonly serviceId?: unknown }).serviceId === 'S3'\n    );\n  } catch {\n    return false;\n  }\n}\n\nasync function resolveAdapter(\n  provider: StorageProviderName,\n  config: StorageProviderConfig | undefined,\n  s3ProviderProfile: S3ProviderProfile | undefined,\n): Promise<Adapter> {\n  let resolved;\n  try {\n    resolved = await loadFiles({ ...config, provider });\n  } catch (error) {\n    throw mapFilesSdkError(error);\n  }\n  const { adapter } = resolved.files;\n  if (provider === 'fs') {\n    const { withFsConditionalMutation } = await import('../fs/index.js');\n    return withFsConditionalMutation(\n      adapter as Parameters<typeof withFsConditionalMutation>[0],\n    );\n  }\n  if (!isS3BackedAdapter(adapter)) {\n    return adapter;\n  }\n  // Every AWS-SDK-backed wrapper gets fail-closed S3 provenance and endpoint\n  // hardening. Only the canonical `s3` slug may infer native AWS or accept an\n  // explicit verified profile; named compatibles remain unverified/read-only.\n  const { withS3Capabilities } = await import('../s3/index.js');\n  const configJsonPublicBaseUrl = config?.configJson?.publicBaseUrl;\n  const publicBaseUrl =\n    config?.publicBaseUrl ??\n    (typeof configJsonPublicBaseUrl === 'string'\n      ? configJsonPublicBaseUrl\n      : undefined);\n  const s3Adapter = adapter as Parameters<typeof withS3Capabilities>[0];\n  recordS3ConstructionMetadata(s3Adapter.raw, {\n    publicBaseUrlConfigured:\n      provider !== 's3' ||\n      config?.publicBaseUrl !== undefined ||\n      configJsonPublicBaseUrl !== undefined,\n  });\n  return withS3Capabilities(s3Adapter, {\n    ...(typeof config?.endpoint === 'string' && {\n      endpoint: config.endpoint,\n    }),\n    ...(publicBaseUrl !== undefined && {\n      publicBaseUrl,\n    }),\n    ...(s3ProviderProfile !== undefined && {\n      providerProfile: s3ProviderProfile,\n    }),\n  });\n}\n\nfunction unknownProvider(provider: string): StorageError {\n  return new StorageError(\n    `Unknown storage provider: ${JSON.stringify(provider)}. Known providers: ${PROVIDER_NAMES.join(', ')}.`,\n    { code: StorageErrorCode.INVALID_ARGUMENT, permanent: true },\n  );\n}\n\n/** Narrows an untrusted string — an env var, a config file — to a known slug. */\nexport function isStorageProvider(value: string): value is StorageProviderName {\n  return getProvider(value) !== undefined;\n}\n\n/** Every provider that can be named, sorted by slug. */\nexport function listStorageProviders(): readonly Provider[] {\n  return PROVIDER_NAMES.flatMap((slug) => getProvider(slug) ?? []);\n}\n\n/** One provider's display name, description, native SDKs, and env contract. */\nexport function getStorageProvider(slug: string): Provider | undefined {\n  return getProvider(slug);\n}\n\n/**\n * Every environment variable a provider reads, flattened across required, all\n * credential modes, and optional. Useful for validating a deployment's config\n * before the first upload rather than at it.\n */\nexport function listStorageProviderEnvVars(slug: string): EnvVar[] {\n  return listEnvVars(slug);\n}\n\n/** The subset of {@link listStorageProviderEnvVars} that carries secrets. */\nexport function listStorageProviderSecretEnvVars(slug: string): EnvVar[] {\n  return getSecretEnvVars(slug);\n}\n\nexport type {\n  EnvVar as StorageProviderEnvVar,\n  Provider as StorageProviderInfo,\n} from 'files-sdk/providers';\n"]}

package/dist/files-sdk/s3/construction-metadata.d.ts

@@ -0,0 +1,7 @@
+export interface S3ConstructionMetadata {
+    /** Whether URL generation bypasses signing through a configured public origin. */
+    readonly publicBaseUrlConfigured: boolean;
+}
+export declare function recordS3ConstructionMetadata(raw: object, metadata: S3ConstructionMetadata): void;
+export declare function getS3ConstructionMetadata(raw: object): Readonly<S3ConstructionMetadata> | undefined;
+//# sourceMappingURL=construction-metadata.d.ts.map

package/dist/files-sdk/s3/construction-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"construction-metadata.d.ts","sourceRoot":"","sources":["../../../src/files-sdk/s3/construction-metadata.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,kFAAkF;IAClF,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;CAC3C;AAOD,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,sBAAsB,GAC/B,IAAI,CASN;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,GACV,QAAQ,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAE9C"}

package/dist/files-sdk/s3/construction-metadata.js

@@ -0,0 +1,13 @@
+const constructionMetadata = new WeakMap();
+export function recordS3ConstructionMetadata(raw, metadata) {
+    const existing = constructionMetadata.get(raw);
+    if (existing !== undefined &&
+        existing.publicBaseUrlConfigured !== metadata.publicBaseUrlConfigured) {
+        throw new TypeError('S3 adapter construction metadata cannot be changed.');
+    }
+    constructionMetadata.set(raw, Object.freeze({ ...metadata }));
+}
+export function getS3ConstructionMetadata(raw) {
+    return constructionMetadata.get(raw);
+}
+//# sourceMappingURL=construction-metadata.js.map

package/dist/files-sdk/s3/construction-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"construction-metadata.js","sourceRoot":"","sources":["../../../src/files-sdk/s3/construction-metadata.ts"],"names":[],"mappings":"AAKA,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAGrC,CAAC;AAEJ,MAAM,UAAU,4BAA4B,CAC1C,GAAW,EACX,QAAgC;IAEhC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/C,IACE,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,uBAAuB,KAAK,QAAQ,CAAC,uBAAuB,EACrE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,GAAW;IAEX,OAAO,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC","sourcesContent":["export interface S3ConstructionMetadata {\n  /** Whether URL generation bypasses signing through a configured public origin. */\n  readonly publicBaseUrlConfigured: boolean;\n}\n\nconst constructionMetadata = new WeakMap<\n  object,\n  Readonly<S3ConstructionMetadata>\n>();\n\nexport function recordS3ConstructionMetadata(\n  raw: object,\n  metadata: S3ConstructionMetadata,\n): void {\n  const existing = constructionMetadata.get(raw);\n  if (\n    existing !== undefined &&\n    existing.publicBaseUrlConfigured !== metadata.publicBaseUrlConfigured\n  ) {\n    throw new TypeError('S3 adapter construction metadata cannot be changed.');\n  }\n  constructionMetadata.set(raw, Object.freeze({ ...metadata }));\n}\n\nexport function getS3ConstructionMetadata(\n  raw: object,\n): Readonly<S3ConstructionMetadata> | undefined {\n  return constructionMetadata.get(raw);\n}\n"]}

package/dist/files-sdk/s3/index.d.ts

@@ -1,25 +1,54 @@
-import { type S3Adapter, type S3AdapterOptions } from 'files-sdk/s3';
-import { type FilesSdkConditionalCopyAdapter, type FilesSdkDriverOptions, type FilesSdkSignedUploadPolicyAdapter, type FilesSdkSignedDownloadPolicyAdapter, type FilesSdkStorageDriver } from '../files-sdk.driver.js';
+import { mapS3Error, type S3Adapter, type S3AdapterOptions } from 'files-sdk/s3';
+import type { StorageCapabilities } from '../../storage.types.js';
+import { type FilesSdkConditionalCopyAdapter, type FilesSdkConditionalDeleteAdapter, type FilesSdkConditionalReadAdapter, type FilesSdkConditionalUploadAdapter, type FilesSdkDriverOptions, type FilesSdkPhysicalKeyAdapter, type FilesSdkSignedUploadPolicyAdapter, type FilesSdkSignedDownloadPolicyAdapter, type FilesSdkStorageDriver } from '../files-sdk.driver.js';
 export interface S3StorageDriverOptions extends Omit<FilesSdkDriverOptions<S3Adapter>, 'adapter'> {
     adapter: S3AdapterOptions;
+    /**
+     * Exact, conformance-verified provider behavior. Native AWS S3 uses the
+     * built-in AWS profile when no endpoint override is present; an explicit
+     * native profile may only narrow that immutable ceiling. Endpoint overrides
+     * without an explicit profile force the whole driver read-only.
+     */
+    providerProfile?: S3ProviderProfile;
 }
-export type S3StorageAdapter = S3Adapter & FilesSdkConditionalCopyAdapter & FilesSdkSignedDownloadPolicyAdapter & FilesSdkSignedUploadPolicyAdapter;
+type S3ProfileCapabilities = Pick<StorageCapabilities, 'conditionalCreate' | 'conditionalReplace' | 'conditionalDelete' | 'conditionalRead' | 'conditionalCopySource' | 'conditionalCopyDestination' | 'conditionalMultipartCompletion' | 'physicalKey' | 'signedUploadPolicy'>;
+declare const verifiedS3ProviderProfile: unique symbol;
+export interface S3ProviderProfileInput extends S3ProfileCapabilities {
+    /** Stable profile identity for configuration, diagnostics, and audit. */
+    readonly name: string;
+    /** Every S3-compatible profile must declare its complete-key byte budget. */
+    readonly physicalKey: NonNullable<S3ProfileCapabilities['physicalKey']>;
+    /** Constraints the provider proves; omission defaults both claims to false. */
+    readonly signedUploadPolicy?: NonNullable<S3ProfileCapabilities['signedUploadPolicy']>;
+}
+/** A validated profile created by {@link defineS3ProviderProfile}. */
+export type S3ProviderProfile = Readonly<Omit<S3ProviderProfileInput, 'signedUploadPolicy'> & {
+    readonly signedUploadPolicy: NonNullable<S3ProfileCapabilities['signedUploadPolicy']>;
+}> & {
+    readonly [verifiedS3ProviderProfile]: true;
+};
+/** Validates and deeply freezes an explicitly verified S3-compatible profile. */
+export declare function defineS3ProviderProfile(profile: S3ProviderProfileInput): S3ProviderProfile;
+export declare const AWS_S3_PROVIDER_PROFILE: S3ProviderProfile;
+export declare const CLOUDFLARE_R2_PROVIDER_PROFILE: S3ProviderProfile;
+type S3StorageAdapterBase = S3Adapter & FilesSdkPhysicalKeyAdapter & FilesSdkSignedDownloadPolicyAdapter & FilesSdkSignedUploadPolicyAdapter;
+export type S3StorageAdapter = S3StorageAdapterBase & Partial<FilesSdkConditionalCopyAdapter & FilesSdkConditionalDeleteAdapter & FilesSdkConditionalReadAdapter & FilesSdkConditionalUploadAdapter>;
+/** Constructs the upstream S3 adapter while retaining security-relevant metadata. */
+export declare function s3(options: S3AdapterOptions): S3Adapter;
 /**
- * Adds the S3-only capabilities to an adapter already built by `s3(...)`: an
- * ETag/version-conditional server-side promotion, and the signed upload and
- * download policies the bridge advertises through `capabilities`.
- *
- * Exported so the provider factory can apply them to the adapter `loadFiles`
- * resolved for the `s3` slug instead of re-deriving {@link S3AdapterOptions}
- * from flat provider config. It expects an adapter whose `raw` is an `S3Client`
- * — pass one built by `s3(...)`, not an S3-compatible wrapper.
+ * Adds only the exact operations declared by one verified provider profile.
+ * Each raw adapter may be decorated once so capability state cannot depend on
+ * profile application order. A native AWS SDK endpoint also bounds every
+ * explicit profile by the built-in AWS capability ceiling.
  */
-export declare function withS3Capabilities(base: S3Adapter, options?: Pick<S3AdapterOptions, 'publicBaseUrl'>): S3StorageAdapter;
+export declare function withS3Capabilities(base: S3Adapter, options?: Pick<S3AdapterOptions, 'endpoint' | 'publicBaseUrl'> & {
+    providerProfile?: S3ProviderProfile;
+}): S3StorageAdapter;
 /**
  * Creates the files-sdk S3 driver from the storage package's own dependency
- * context and adds an ETag/version-conditional server-side promotion.
+ * context and exposes only the operations in its verified provider profile.
  */
 export declare function createS3StorageDriver(options: S3StorageDriverOptions): FilesSdkStorageDriver<S3StorageAdapter>;
-export { mapS3Error, s3 } from 'files-sdk/s3';
+export { mapS3Error };
 export type { S3Adapter, S3AdapterOptions, S3Sdk } from 'files-sdk/s3';
 //# sourceMappingURL=index.d.ts.map

package/dist/files-sdk/s3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/files-sdk/s3/index.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAEL,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,iCAAiC,EACtC,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,EAE3B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAClD,qBAAqB,CAAC,SAAS,CAAC,EAChC,SAAS,CACV;IACC,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GACtC,8BAA8B,GAC9B,mCAAmC,GACnC,iCAAiC,CAAC;AA6DpC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,EACf,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAM,GACpD,gBAAgB,CAkElB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,GAC9B,qBAAqB,CAAC,gBAAgB,CAAC,CAMzC;AAED,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/files-sdk/s3/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,UAAU,EAEV,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAEV,mBAAmB,EAQpB,MAAM,wBAAwB,CAAC;AAUhC,OAAO,EAKL,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,EAE3B,MAAM,wBAAwB,CAAC;AAMhC,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAClD,qBAAqB,CAAC,SAAS,CAAC,EAChC,SAAS,CACV;IACC,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,iBAAiB,CAAC;CACrC;AAED,KAAK,qBAAqB,GAAG,IAAI,CAC/B,mBAAmB,EACjB,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,uBAAuB,GACvB,4BAA4B,GAC5B,gCAAgC,GAChC,aAAa,GACb,oBAAoB,CACvB,CAAC;AAEF,QAAA,MAAM,yBAAyB,eAAsC,CAAC;AAGtE,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;IACxE,+EAA+E;IAC/E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,WAAW,CACvC,qBAAqB,CAAC,oBAAoB,CAAC,CAC5C,CAAC;CACH;AAED,sEAAsE;AACtE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CACtC,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,GAAG;IACnD,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CACtC,qBAAqB,CAAC,oBAAoB,CAAC,CAC5C,CAAC;CACH,CACF,GAAG;IACF,QAAQ,CAAC,CAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC;CAC5C,CAAC;AAWF,iFAAiF;AACjF,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,sBAAsB,GAC9B,iBAAiB,CA4KnB;AA0ID,eAAO,MAAM,uBAAuB,mBAelC,CAAC;AAEH,eAAO,MAAM,8BAA8B,mBAQzC,CAAC;AAQH,KAAK,oBAAoB,GAAG,SAAS,GACnC,0BAA0B,GAC1B,mCAAmC,GACnC,iCAAiC,CAAC;AAEpC,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GACjD,OAAO,CACL,8BAA8B,GAC5B,gCAAgC,GAChC,8BAA8B,GAC9B,gCAAgC,CACnC,CAAC;AAwlBJ,qFAAqF;AACrF,wBAAgB,EAAE,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAOvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,EACf,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,eAAe,CAAC,GAAG;IAC9D,eAAe,CAAC,EAAE,iBAAiB,CAAC;CAChC,GACL,gBAAgB,CAqalB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,GAC9B,qBAAqB,CAAC,gBAAgB,CAAC,CAazC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC;AACtB,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC"}