@panorama-industries/effect-vercel-blob 0.0.0 → 0.2.0

package/dist/implementation/blob-config-live.d.ts

@@ -0,0 +1,49 @@
+import type { Config } from "effect";
+import { Layer, Redacted } from "effect";
+import type { BlobAccess, StoreId } from "../contracts/blob-domain.ts";
+import { BlobConfig } from "../contracts/blob-config.ts";
+/** Values that replace what {@link BlobConfigLive} reads from the environment. */
+export interface BlobConfigOptions {
+    /**
+     * Read-write token (`vercel_blob_rw_<storeId>_…`). Takes priority over OIDC and
+     * `BLOB_READ_WRITE_TOKEN`, and becomes `readWriteToken`.
+     */
+    readonly token?: string | Redacted.Redacted<string> | undefined;
+    /**
+     * Store to address with the Vercel OIDC token, as `store_<id>` or `<id>`; replaces
+     * `BLOB_STORE_ID`. Ignored when `token` is given.
+     */
+    readonly storeId?: string | undefined;
+    /** Blob API base URL; replaces `VERCEL_BLOB_API_URL`, for an emulator or a test server. */
+    readonly apiUrl?: URL | string | undefined;
+    /** Extra headers for every API request, merged over the environment's. */
+    readonly headers?: Readonly<Record<string, string>> | undefined;
+    /** Retries after the first attempt; replaces `VERCEL_BLOB_RETRIES`. */
+    readonly retries?: number | undefined;
+    /** Where `get` reads a store's blobs; see `BlobConfig.blobBaseUrl`. */
+    readonly blobBaseUrl?: ((storeId: StoreId, access: BlobAccess) => URL) | undefined;
+    /** Ed25519 public key (PEM) for presigned-upload callbacks; replaces `BLOB_WEBHOOK_PUBLIC_KEY`. */
+    readonly webhookPublicKey?: string | undefined;
+    /** Origin for upload-completed callbacks; replaces `VERCEL_BLOB_CALLBACK_URL`. */
+    readonly callbackBaseUrl?: string | undefined;
+}
+/**
+ * Builds {@link BlobConfig} from the environment, with any given values taking precedence.
+ *
+ * Credentials are resolved once, in the SDK's order: the `token` option; else OIDC when a store id
+ * is known (`storeId` option or `BLOB_STORE_ID`), keeping `BLOB_READ_WRITE_TOKEN` as the per-request
+ * fallback; else `BLOB_READ_WRITE_TOKEN`. Variables are trimmed and blank ones ignored.
+ *
+ * Fails with a `ConfigError` when no credentials are found, a read-write token has no store id
+ * (`vercel_blob_rw_<storeId>_…`), the store id, API URL or `VERCEL_BLOB_RETRIES` is invalid.
+ */
+export declare const blobConfigLayer: (options?: BlobConfigOptions) => Layer.Layer<BlobConfig, Config.ConfigError>;
+/**
+ * Reads {@link BlobConfig} from the environment: `BLOB_READ_WRITE_TOKEN`, `BLOB_STORE_ID`,
+ * `VERCEL_BLOB_API_URL`, `VERCEL_BLOB_API_VERSION_OVERRIDE`, `VERCEL_BLOB_RETRIES` (default 10),
+ * `VERCEL_BLOB_USE_X_CONTENT_LENGTH`, `VERCEL_BLOB_PROXY_THROUGH_ALTERNATIVE_API`,
+ * `BLOB_WEBHOOK_PUBLIC_KEY` and `VERCEL_BLOB_CALLBACK_URL`. The API URL, API version and proxy
+ * variables also accept a `NEXT_PUBLIC_` prefix.
+ */
+export declare const BlobConfigLive: Layer.Layer<BlobConfig, Config.ConfigError>;
+//# sourceMappingURL=blob-config-live.d.ts.map

package/dist/implementation/blob-config-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-config-live.d.ts","sourceRoot":"","sources":["../../src/implementation/blob-config-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAU,KAAK,EAAU,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAEvE,OAAO,EAAY,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAKnE,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAEhE;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAC;IAE3C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAEhE,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC,uEAAuE;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC;IAEnF,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C,kFAAkF;IAClF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAgFD;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,aACjB,iBAAiB,KACzB,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CACS,CAAC;AAEvD;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAqB,CAAC"}

package/dist/implementation/blob-config-live.js

@@ -0,0 +1,82 @@
+import { Effect, Layer, Option, Redacted } from "effect";
+import { BlobAuth, BlobConfig } from "../contracts/blob-config.js";
+import { configError, env, requestEnv } from "../internal/env.js";
+import { parseStoreId, storeIdFromReadWriteToken } from "../internal/store-id.js";
+import { defaultBlobBaseUrl } from "../internal/urls.js";
+const noCredentials = configError("No blob credentials found. Pass a `token` option, set `BLOB_READ_WRITE_TOKEN`, or use Vercel " +
+    "OIDC with a `storeId` option or `BLOB_STORE_ID`.");
+const invalidReadWriteToken = (source) => configError(`Invalid ${source}: expected a read-write token of the form vercel_blob_rw_<storeId>_<secret>.`);
+const resolveBlobConfig = Effect.fnUntraced(function* (options) {
+    const { apiUrl, apiVersion, retries, sendContentLength, headers } = yield* requestEnv(options);
+    const envReadWriteToken = Option.map(yield* env("BLOB_READ_WRITE_TOKEN"), (token) => Redacted.make(token));
+    const readWriteStoreId = (token, source) => Option.match(storeIdFromReadWriteToken(Redacted.value(token)), {
+        onNone: () => Effect.fail(invalidReadWriteToken(source)),
+        onSome: Effect.succeed,
+    });
+    if (Option.isSome(envReadWriteToken)) {
+        yield* readWriteStoreId(envReadWriteToken.value, "BLOB_READ_WRITE_TOKEN");
+    }
+    const optionStoreId = Option.filter(Option.map(Option.fromUndefinedOr(options.storeId), (id) => id.trim()), (id) => id !== "");
+    const storeIdInput = Option.isSome(optionStoreId) ? optionStoreId : yield* env("BLOB_STORE_ID");
+    let auth;
+    let readWriteToken = envReadWriteToken;
+    if (options.token !== undefined) {
+        const token = Redacted.isRedacted(options.token) ? options.token : Redacted.make(options.token);
+        auth = BlobAuth.ReadWrite({ token, storeId: yield* readWriteStoreId(token, "token option") });
+        readWriteToken = Option.some(token);
+    }
+    else if (Option.isSome(storeIdInput)) {
+        const storeId = yield* Option.match(parseStoreId(storeIdInput.value), {
+            onNone: () => Effect.fail(configError(`Invalid store id "${storeIdInput.value}": expected store_<id> or <id> without whitespace or "_".`)),
+            onSome: Effect.succeed,
+        });
+        auth = BlobAuth.Oidc({ storeId });
+    }
+    else if (Option.isSome(envReadWriteToken)) {
+        auth = BlobAuth.ReadWrite({
+            token: envReadWriteToken.value,
+            storeId: yield* readWriteStoreId(envReadWriteToken.value, "BLOB_READ_WRITE_TOKEN"),
+        });
+    }
+    else {
+        return yield* Effect.fail(noCredentials);
+    }
+    const webhookPublicKey = Option.isSome(Option.fromUndefinedOr(options.webhookPublicKey))
+        ? Option.fromUndefinedOr(options.webhookPublicKey)
+        : yield* env("BLOB_WEBHOOK_PUBLIC_KEY");
+    const callbackBaseUrl = Option.isSome(Option.fromUndefinedOr(options.callbackBaseUrl))
+        ? Option.fromUndefinedOr(options.callbackBaseUrl)
+        : yield* env("VERCEL_BLOB_CALLBACK_URL");
+    return BlobConfig.of({
+        apiUrl,
+        auth,
+        readWriteToken,
+        apiVersion,
+        retries,
+        sendContentLength,
+        headers,
+        blobBaseUrl: options.blobBaseUrl ?? defaultBlobBaseUrl,
+        webhookPublicKey,
+        callbackBaseUrl,
+    });
+});
+/**
+ * Builds {@link BlobConfig} from the environment, with any given values taking precedence.
+ *
+ * Credentials are resolved once, in the SDK's order: the `token` option; else OIDC when a store id
+ * is known (`storeId` option or `BLOB_STORE_ID`), keeping `BLOB_READ_WRITE_TOKEN` as the per-request
+ * fallback; else `BLOB_READ_WRITE_TOKEN`. Variables are trimmed and blank ones ignored.
+ *
+ * Fails with a `ConfigError` when no credentials are found, a read-write token has no store id
+ * (`vercel_blob_rw_<storeId>_…`), the store id, API URL or `VERCEL_BLOB_RETRIES` is invalid.
+ */
+export const blobConfigLayer = (options = {}) => Layer.effect(BlobConfig, resolveBlobConfig(options));
+/**
+ * Reads {@link BlobConfig} from the environment: `BLOB_READ_WRITE_TOKEN`, `BLOB_STORE_ID`,
+ * `VERCEL_BLOB_API_URL`, `VERCEL_BLOB_API_VERSION_OVERRIDE`, `VERCEL_BLOB_RETRIES` (default 10),
+ * `VERCEL_BLOB_USE_X_CONTENT_LENGTH`, `VERCEL_BLOB_PROXY_THROUGH_ALTERNATIVE_API`,
+ * `BLOB_WEBHOOK_PUBLIC_KEY` and `VERCEL_BLOB_CALLBACK_URL`. The API URL, API version and proxy
+ * variables also accept a `NEXT_PUBLIC_` prefix.
+ */
+export const BlobConfigLive = blobConfigLayer();
+//# sourceMappingURL=blob-config-live.js.map

package/dist/implementation/blob-config-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-config-live.js","sourceRoot":"","sources":["../../src/implementation/blob-config-live.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAIzD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAmCzD,MAAM,aAAa,GAAG,WAAW,CAC/B,+FAA+F;IAC7F,kDAAkD,CACrD,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAE,EAAE,CAC/C,WAAW,CACT,WAAW,MAAM,8EAA8E,CAChG,CAAC;AAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAA0B;IAC/E,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAE/F,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAClF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CACrB,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,KAAgC,EAAE,MAAc,EAAE,EAAE,CAC5E,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE;QAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,EAAE,MAAM,CAAC,OAAO;KACvB,CAAC,CAAC;IACL,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EACtE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAClB,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAEhG,IAAI,IAAc,CAAC;IACnB,IAAI,cAAc,GAAG,iBAAiB,CAAC;IACvC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChG,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;QAC9F,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE;YACpE,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,WAAW,CACT,qBAAqB,YAAY,CAAC,KAAK,2DAA2D,CACnG,CACF;YACH,MAAM,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC;YACxB,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,OAAO,EAAE,KAAK,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtF,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAClD,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACpF,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC;QACjD,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAE3C,OAAO,UAAU,CAAC,EAAE,CAAC;QACnB,MAAM;QACN,IAAI;QACJ,cAAc;QACd,UAAU;QACV,OAAO;QACP,iBAAiB;QACjB,OAAO;QACP,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,kBAAkB;QACtD,gBAAgB;QAChB,eAAe;KAChB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAO,GAAsB,EAAE,EACc,EAAE,CAC/C,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgD,eAAe,EAAE,CAAC"}

package/dist/implementation/blob-live.d.ts

@@ -0,0 +1,16 @@
+import type { Config } from "effect";
+import type { HttpClient } from "effect/http";
+import { Layer } from "effect";
+import type { BlobSignedUrls } from "../contracts/blob-signed-urls.ts";
+import type { BlobStore } from "../contracts/blob-store.ts";
+import type { BlobUploads } from "../contracts/blob-uploads.ts";
+/**
+ * Store, signed URLs and upload routes configured from the Vercel environment
+ * (`BLOB_READ_WRITE_TOKEN`, or the function's OIDC token with `BLOB_STORE_ID`). Provide an
+ * `HttpClient`, e.g. `FetchHttpClient.layer`.
+ *
+ * Compose the individual layers instead to override configuration (`blobConfigLayer`) or to
+ * refresh OIDC tokens in local development (`VercelOidcRefreshingLive`).
+ */
+export declare const BlobLive: Layer.Layer<BlobStore | BlobSignedUrls | BlobUploads, Config.ConfigError, HttpClient.HttpClient>;
+//# sourceMappingURL=blob-live.d.ts.map

package/dist/implementation/blob-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-live.d.ts","sourceRoot":"","sources":["../../src/implementation/blob-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAOhE;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,EAAE,KAAK,CAAC,KAAK,CAChC,SAAS,GAAG,cAAc,GAAG,WAAW,EACxC,MAAM,CAAC,WAAW,EAClB,UAAU,CAAC,UAAU,CAGtB,CAAC"}

package/dist/implementation/blob-live.js

@@ -0,0 +1,16 @@
+import { VercelOidcLive, VercelSystemEnvLive } from "@panorama-industries/effect-vercel-core";
+import { Layer } from "effect";
+import { BlobConfigLive } from "./blob-config-live.js";
+import { BlobSignedUrlsLive } from "./blob-signed-urls-live.js";
+import { BlobStoreLive } from "./blob-store-live.js";
+import { BlobUploadsLive } from "./blob-uploads-live.js";
+/**
+ * Store, signed URLs and upload routes configured from the Vercel environment
+ * (`BLOB_READ_WRITE_TOKEN`, or the function's OIDC token with `BLOB_STORE_ID`). Provide an
+ * `HttpClient`, e.g. `FetchHttpClient.layer`.
+ *
+ * Compose the individual layers instead to override configuration (`blobConfigLayer`) or to
+ * refresh OIDC tokens in local development (`VercelOidcRefreshingLive`).
+ */
+export const BlobLive = Layer.mergeAll(BlobStoreLive, BlobSignedUrlsLive, BlobUploadsLive).pipe(Layer.provide(Layer.mergeAll(BlobConfigLive, VercelOidcLive, VercelSystemEnvLive)));
+//# sourceMappingURL=blob-live.js.map

package/dist/implementation/blob-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-live.js","sourceRoot":"","sources":["../../src/implementation/blob-live.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAM/B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAIjB,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC,IAAI,CACzE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,CACnF,CAAC"}

package/dist/implementation/blob-signed-urls-live.d.ts

@@ -0,0 +1,12 @@
+import { VercelOidc } from "@panorama-industries/effect-vercel-core";
+import { Layer } from "effect";
+import { HttpClient } from "effect/http";
+import { BlobConfig } from "../contracts/blob-config.ts";
+import { BlobSignedUrls } from "../contracts/blob-signed-urls.ts";
+/**
+ * Implements {@link BlobSignedUrls}: `issueSignedToken` calls the Blob API with the server
+ * credentials of `BlobConfig` (OIDC or the read-write token); presigning is local and reads the
+ * current time from `Clock`.
+ */
+export declare const BlobSignedUrlsLive: Layer.Layer<BlobSignedUrls, never, BlobConfig | HttpClient.HttpClient | VercelOidc>;
+//# sourceMappingURL=blob-signed-urls-live.d.ts.map

package/dist/implementation/blob-signed-urls-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-signed-urls-live.d.ts","sourceRoot":"","sources":["../../src/implementation/blob-signed-urls-live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,EAA2B,KAAK,EAAkB,MAAM,QAAQ,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA0BlE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,KAAK,CAC1C,cAAc,EACd,KAAK,EACL,UAAU,GAAG,UAAU,CAAC,UAAU,GAAG,UAAU,CAwEhD,CAAC"}

package/dist/implementation/blob-signed-urls-live.js

@@ -0,0 +1,92 @@
+import { ApiBadRequest, VercelApiError, VercelOidc } from "@panorama-industries/effect-vercel-core";
+import { Clock, DateTime, Effect, Layer, Option, Schema } from "effect";
+import { HttpClient } from "effect/http";
+import { BlobConfig } from "../contracts/blob-config.js";
+import { SignedToken } from "../contracts/blob-domain.js";
+import { BlobPresignFailed } from "../contracts/blob-errors.js";
+import { BlobSignedUrls } from "../contracts/blob-signed-urls.js";
+import { blobRequester, blobRequestSettings, serverBlobAuth } from "../internal/blob-request.js";
+import { presignedApiUrl, presignedBlobUrl, presignPayload } from "../internal/presign.js";
+/** `POST /signed-token`; `validUntil` is in epoch milliseconds. */
+const SignedTokenResponse = Schema.Struct({
+    delegationToken: Schema.String,
+    clientSigningToken: Schema.RedactedFromValue(Schema.String),
+    validUntil: Schema.DateTimeUtcFromMillis,
+}).pipe(Schema.decodeTo(SignedToken));
+/** The JSON body of `POST /signed-token`, with the SDK's keys in the SDK's order. */
+const signedTokenBody = (options) => ({
+    ...(options.pathname === undefined ? {} : { pathname: options.pathname }),
+    ...(options.operations === undefined ? {} : { operations: [...new Set(options.operations)] }),
+    ...(options.validUntil === undefined
+        ? {}
+        : { validUntil: DateTime.toEpochMillis(options.validUntil) }),
+    ...(options.maximumSizeInBytes === undefined
+        ? {}
+        : { maximumSizeInBytes: options.maximumSizeInBytes }),
+    ...(options.allowedContentTypes === undefined
+        ? {}
+        : { allowedContentTypes: options.allowedContentTypes }),
+});
+/**
+ * Implements {@link BlobSignedUrls}: `issueSignedToken` calls the Blob API with the server
+ * credentials of `BlobConfig` (OIDC or the read-write token); presigning is local and reads the
+ * current time from `Clock`.
+ */
+export const BlobSignedUrlsLive = Layer.effect(BlobSignedUrls, Effect.gen(function* () {
+    const config = yield* BlobConfig;
+    const httpClient = yield* HttpClient.HttpClient;
+    const oidc = yield* VercelOidc;
+    const requester = blobRequester(blobRequestSettings(config, httpClient));
+    const issueSignedToken = Effect.fn("BlobSignedUrls.issueSignedToken")(function* (options = {}) {
+        if (options.validUntil !== undefined) {
+            const now = yield* Clock.currentTimeMillis;
+            if (DateTime.toEpochMillis(options.validUntil) <= now) {
+                return yield* new VercelApiError({
+                    operation: "BlobSignedUrls.issueSignedToken",
+                    errorCode: Option.none(),
+                    reason: new ApiBadRequest({
+                        message: "`issueSignedToken`: validUntil must be in the future.",
+                    }),
+                });
+            }
+        }
+        return yield* requester.call({
+            operation: "BlobSignedUrls.issueSignedToken",
+            method: "POST",
+            path: "/signed-token",
+            auth: serverBlobAuth(config, oidc),
+            json: signedTokenBody(options),
+            response: SignedTokenResponse,
+            domainErrors: ["BlobStoreUnavailable", "BlobOidcEnvironmentNotAllowed"],
+        });
+    });
+    const presign = Effect.fn("BlobSignedUrls.presign")(function* (token, options) {
+        return yield* presignPayload(token, options, yield* Clock.currentTimeMillis);
+    });
+    const presignUrl = Effect.fn("BlobSignedUrls.presignUrl")(function* (token, options) {
+        const payload = yield* presignPayload(token, options, yield* Clock.currentTimeMillis);
+        switch (options.operation) {
+            case "get":
+            case "head": {
+                const url = presignedBlobUrl({
+                    pathnameOrUrl: options.pathname,
+                    payload,
+                    access: options.access,
+                    useCache: options.operation === "get" ? options.useCache : undefined,
+                    blobBaseUrl: config.blobBaseUrl,
+                });
+                if (Option.isNone(url)) {
+                    return yield* new BlobPresignFailed({
+                        message: "Delegation token payload is missing `storeId`.",
+                    });
+                }
+                return url.value;
+            }
+            case "put":
+            case "delete":
+                return presignedApiUrl(config.apiUrl, options.pathname, payload);
+        }
+    });
+    return BlobSignedUrls.of({ issueSignedToken, presign, presignUrl });
+}));
+//# sourceMappingURL=blob-signed-urls-live.js.map

package/dist/implementation/blob-signed-urls-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-signed-urls-live.js","sourceRoot":"","sources":["../../src/implementation/blob-signed-urls-live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE3F,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC,MAAM;IAC9B,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,MAAM,CAAC,qBAAqB;CACzC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AAEtC,qFAAqF;AACrF,MAAM,eAAe,GAAG,CAAC,OAAgC,EAA2B,EAAE,CAAC,CAAC;IACtF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;IAC7F,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;IAC/D,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;QAC1C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;QAC3C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;CAC1D,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAI3B,KAAK,CAAC,MAAM,CACd,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzE,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAC7E,OAAO,GAA4B,EAAE;QAErC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC3C,IAAI,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC;oBAC/B,SAAS,EAAE,iCAAiC;oBAC5C,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;oBACxB,MAAM,EAAE,IAAI,aAAa,CAAC;wBACxB,OAAO,EAAE,uDAAuD;qBACjE,CAAC;iBACH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3B,SAAS,EAAE,iCAAiC;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;YAClC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;YAC9B,QAAQ,EAAE,mBAAmB;YAC7B,YAAY,EAAE,CAAC,sBAAsB,EAAE,+BAA+B,CAAC;SACxE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAC3D,KAAmB,EACnB,OAAuB;QAEvB,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EACjE,KAAmB,EACnB,OAAyD;QAEzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtF,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,KAAK,CAAC;YACX,KAAK,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,gBAAgB,CAAC;oBAC3B,aAAa,EAAE,OAAO,CAAC,QAAQ;oBAC/B,OAAO;oBACP,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACpE,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;wBAClC,OAAO,EAAE,gDAAgD;qBAC1D,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,GAAG,CAAC,KAAK,CAAC;YACnB,CAAC;YACD,KAAK,KAAK,CAAC;YACX,KAAK,QAAQ;gBACX,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC,CACH,CAAC"}

package/dist/implementation/blob-store-live.d.ts

@@ -0,0 +1,18 @@
+import { VercelOidc } from "@panorama-industries/effect-vercel-core";
+import { Layer } from "effect";
+import { HttpClient } from "effect/http";
+import { BlobConfig } from "../contracts/blob-config.ts";
+import { BlobStore } from "../contracts/blob-store.ts";
+/**
+ * Implements {@link BlobStore} over the Blob API with the SDK's wire protocol, retries and error
+ * mapping. Requires `BlobConfig`, an `HttpClient`, and `VercelOidc` (evaluated per request when
+ * `BlobConfig.auth` is OIDC).
+ *
+ * `get` reads from the blob's host. A URL locator must pass the SDK's `isAllowedBlobUrl` check (a
+ * `*.blob.vercel-storage.com` host, or the origin of an overridden API URL); any other URL, or a
+ * string that starts with `http(s)://` but does not parse, is a defect, as are an empty `get`
+ * locator and a `putImage` source `URL` that is not http(s). These are programming errors the SDK
+ * throws `BlobError` for.
+ */
+export declare const BlobStoreLive: Layer.Layer<BlobStore, never, BlobConfig | HttpClient.HttpClient | VercelOidc>;
+//# sourceMappingURL=blob-store-live.d.ts.map

package/dist/implementation/blob-store-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store-live.d.ts","sourceRoot":"","sources":["../../src/implementation/blob-store-live.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,UAAU,EAEX,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAA2B,KAAK,EAAkB,MAAM,QAAQ,CAAC;AACxE,OAAO,EAAW,UAAU,EAAE,MAAM,aAAa,CAAC;AA0BlD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAOzD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AA8HvD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,KAAK,CACrC,SAAS,EACT,KAAK,EACL,UAAU,GAAG,UAAU,CAAC,UAAU,GAAG,UAAU,CAyVhD,CAAC"}