@panorama-industries/effect-vercel-blob 0.0.0 → 0.2.0

package/dist/internal/blob-request.js

@@ -0,0 +1,291 @@
+import { ApiUnexpectedResponse, VercelApiError, vercelApiErrorFromHttpClientError, vercelApiTransientRetry, } from "@panorama-industries/effect-vercel-core";
+import { Clock, Data, Duration, Effect, Fiber, Option, Queue, Random, Redacted, Ref, Schema, Stream, } from "effect";
+import { HttpBody, HttpClient, HttpClientRequest } from "effect/http";
+import { BlobAuth } from "../contracts/blob-config.js";
+import { blobErrorFromHttpResponse, isRetryableBlobError } from "./blob-errors.js";
+import { storeIdFromReadWriteToken } from "./store-id.js";
+/** Settings for server-side services, read from `BlobConfig`. */
+export const blobRequestSettings = (config, httpClient) => ({
+    httpClient,
+    apiUrl: config.apiUrl,
+    apiVersion: config.apiVersion,
+    retries: config.retries,
+    sendContentLength: config.sendContentLength,
+    headers: config.headers,
+});
+/** Constructors and matchers for {@link BlobRequestAuth}. */
+export const BlobRequestAuth = Data.taggedEnum();
+/**
+ * The per-call auth of server-side services. `ReadWrite` uses its token. `Oidc` evaluates
+ * `VercelOidc.token` on every call; when it is unavailable and `BlobConfig.readWriteToken` is set,
+ * the call uses that token and its store id instead, as the SDK falls through to
+ * `BLOB_READ_WRITE_TOKEN`. Otherwise it fails with the `OidcTokenUnavailable`.
+ */
+export const serverBlobAuth = (config, oidc) => {
+    const fallback = Option.flatMap(config.readWriteToken, (token) => Option.map(storeIdFromReadWriteToken(Redacted.value(token)), (storeId) => BlobRequestAuth.Bearer({ token, storeId })));
+    return BlobAuth.$match(config.auth, {
+        ReadWrite: ({ token, storeId }) => Effect.succeed(BlobRequestAuth.Bearer({ token, storeId })),
+        Oidc: ({ storeId }) => oidc.token.pipe(Effect.map((token) => BlobRequestAuth.Bearer({ token, storeId })), Effect.catchTag("OidcTokenUnavailable", (error) => Option.match(fallback, {
+            onNone: () => Effect.fail(error),
+            onSome: Effect.succeed,
+        }))),
+    });
+};
+/** Size of the chunks a progress-tracked body is sent in, as the SDK's `CHUNK_SIZE`. */
+export const progressChunkSize = 64 * 1024;
+const concatBytes = (a, b) => {
+    const result = new Uint8Array(a.length + b.length);
+    result.set(a);
+    result.set(b, a.length);
+    return result;
+};
+/**
+ * Regroup a byte stream into chunks of exactly `size` bytes, the last one possibly smaller, like
+ * the SDK's `createChunkTransformStream`. Empty input chunks produce nothing.
+ */
+export const chunkBytes = (size) => (stream) => Stream.mapAccum(stream, () => new Uint8Array(0), (pending, chunk) => {
+    let buffer = pending.length === 0 ? chunk : concatBytes(pending, chunk);
+    const out = [];
+    while (buffer.length >= size) {
+        out.push(buffer.slice(0, size));
+        buffer = buffer.subarray(size);
+    }
+    return [buffer, out];
+}, { onHalt: (buffer) => (buffer.length > 0 ? [buffer.slice()] : []) });
+const textEncoder = new TextEncoder();
+const isBlob = (body) => typeof globalThis.Blob !== "undefined" && body instanceof globalThis.Blob;
+const isStreamBody = (body) => Stream.isStream(body);
+/**
+ * Bytes a body will send when known up front, as the SDK's `computeBodyLength`: UTF-8 length of a
+ * string, byte length, `Blob` size; 0 for a stream.
+ */
+export const bodyLength = (body) => {
+    if (typeof body === "string")
+        return textEncoder.encode(body).byteLength;
+    if (body instanceof Uint8Array)
+        return body.byteLength;
+    if (isBlob(body))
+        return body.size;
+    return 0;
+};
+/** A body as a stream of bytes. A `Blob` that cannot be read is a defect. */
+export const bodyStream = (body) => {
+    if (typeof body === "string")
+        return Stream.succeed(textEncoder.encode(body));
+    if (body instanceof Uint8Array)
+        return Stream.succeed(body);
+    if (isBlob(body)) {
+        return Stream.fromReadableStream({
+            evaluate: () => body.stream(),
+            onError: (cause) => cause,
+        }).pipe(Stream.orDie);
+    }
+    return body;
+};
+const isNodeProcess = () => {
+    if (typeof navigator !== "undefined" && navigator.product === "ReactNative")
+        return true;
+    const process = globalThis.process;
+    if (process === undefined)
+        return false;
+    if (process.type === "renderer" || process.type === "worker")
+        return false;
+    return process.versions?.node !== undefined;
+};
+/**
+ * Whether `fetch` can stream a request body here, detected like the SDK's
+ * `supportsRequestStreams`: always on Node; never against `http://localhost` (no HTTP/2); otherwise
+ * when `Request` reads the `duplex` option and does not type a stream body (Chromium, Edge
+ * runtimes, not Safari or Firefox).
+ */
+export const supportsRequestStreams = (apiUrl) => {
+    if (isNodeProcess())
+        return true;
+    if (apiUrl.startsWith("http://localhost"))
+        return false;
+    try {
+        let duplexAccessed = false;
+        const init = {
+            body: new ReadableStream(),
+            method: "POST",
+            get duplex() {
+                duplexAccessed = true;
+                return "half";
+            },
+        };
+        const hasContentType = new Request(apiUrl, init).headers.has("Content-Type");
+        return duplexAccessed && !hasContentType;
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * Throttle progress events like `throttleit`, which the SDK wraps `onUploadProgress` in: the first
+ * event after a quiet interval is reported at once, later ones at most once per `interval`, and the
+ * latest event of an interval is reported when it ends (earlier ones are dropped).
+ *
+ * The interval starts now, as if an event had just been reported (callers report 0 % first). Call
+ * `stop` before the final 100 % event, which callers report directly so it is never delayed.
+ * Without an interval (or a zero one), events are reported immediately.
+ */
+export const uploadProgressThrottle = Effect.fnUntraced(function* (onUploadProgress, interval) {
+    if (interval === undefined || Duration.isZero(Duration.fromInputUnsafe(interval))) {
+        return { report: onUploadProgress, stop: Effect.void };
+    }
+    const latest = yield* Queue.sliding(1);
+    const fiber = yield* Effect.forkChild(Effect.sleep(interval).pipe(Effect.andThen(Effect.forever(Queue.take(latest).pipe(Effect.flatMap(onUploadProgress), Effect.andThen(Effect.sleep(interval)))))));
+    return {
+        report: (progress) => Effect.asVoid(Queue.offer(latest, progress)),
+        stop: Fiber.interrupt(fiber),
+    };
+});
+const unexpectedResponse = (operation, status, message) => new VercelApiError({
+    operation,
+    errorCode: Option.none(),
+    reason: new ApiUnexpectedResponse({ message, status }),
+});
+const withoutTracePropagation = Effect.provideService(HttpClient.TracerPropagationEnabled, false);
+/**
+ * Build the {@link BlobRequester} that every service uses for Blob API calls.
+ *
+ * Requests carry no `traceparent`/`b3` headers (the SDK sends none, and browsers would need CORS
+ * approval for them); the HTTP client still records a span per attempt.
+ */
+export const blobRequester = (settings) => {
+    const baseUrl = settings.apiUrl.href.replace(/\/+$/, "");
+    const streamsSupported = settings.streamRequestBodies ?? supportsRequestStreams(settings.apiUrl.href);
+    const client = settings.httpClient;
+    const requestUrl = (path, auth) => {
+        const url = `${baseUrl}${path}`;
+        return BlobRequestAuth.$match(auth, {
+            Bearer: () => url,
+            Presigned: ({ payload }) => {
+                const presigned = new URL(url);
+                for (const [key, value] of Object.entries(payload.params)) {
+                    presigned.searchParams.set(key, value);
+                }
+                presigned.searchParams.set("vercel-blob-delegation", payload.delegationToken);
+                presigned.searchParams.set("vercel-blob-signature", payload.signature);
+                return presigned.toString();
+            },
+        });
+    };
+    const call = Effect.fnUntraced(function* (call) {
+        const { operation } = call;
+        const auth = yield* call.auth;
+        const url = requestUrl(call.path, auth);
+        const now = yield* Clock.currentTimeMillis;
+        const random = yield* Random.next;
+        const requestId = `${auth.storeId}:${now}:${random.toString(16).slice(2)}`;
+        const body = call.json === undefined ? call.body : JSON.stringify(call.json);
+        const onUploadProgress = call.onUploadProgress;
+        const sendBodyLength = onUploadProgress !== undefined || settings.sendContentLength;
+        const totalLength = body !== undefined && sendBodyLength ? bodyLength(body) : 0;
+        const streamBody = body !== undefined && isStreamBody(body);
+        const context = yield* Effect.context();
+        const bodyFailure = yield* Ref.make(Option.none());
+        const totalLoaded = yield* Ref.make(0);
+        const userStream = (stream) => stream.pipe(Stream.tapError((error) => Ref.set(bodyFailure, Option.some(error))), Stream.provideContext(context));
+        const headersFor = (attempt) => ({
+            "x-api-blob-request-id": requestId,
+            "x-vercel-blob-store-id": auth.storeId,
+            "x-api-blob-request-attempt": String(attempt),
+            "x-api-version": settings.apiVersion,
+            ...(sendBodyLength ? { "x-content-length": String(totalLength) } : {}),
+            ...BlobRequestAuth.$match(auth, {
+                Bearer: ({ token }) => ({ authorization: `Bearer ${Redacted.value(token)}` }),
+                Presigned: () => ({}),
+            }),
+            ...settings.headers,
+            ...(call.json === undefined ? {} : { "content-type": "application/json" }),
+            ...call.headers,
+        });
+        // A streamed body is sent untyped, like the SDK's `ReadableStream` bodies.
+        const streamedBody = (stream) => (request) => request.pipe(HttpClientRequest.setBody(HttpBody.stream(stream)), HttpClientRequest.removeHeader("content-type"));
+        const withBody = (reporter) => Effect.gen(function* () {
+            if (body === undefined) {
+                return (request) => request;
+            }
+            if (!streamsSupported) {
+                const bytes = streamBody
+                    ? (yield* Stream.runCollect(Stream.provideContext(body, context))).reduce(concatBytes, new Uint8Array(0))
+                    : undefined;
+                yield* Ref.set(totalLoaded, bytes === undefined ? totalLength : bytes.length);
+                return HttpClientRequest.setBody(HttpBody.raw(bytes ?? body));
+            }
+            if (reporter !== undefined) {
+                const loaded = yield* Ref.make(0);
+                const source = streamBody
+                    ? userStream(body)
+                    : bodyStream(body);
+                const tracked = source.pipe(chunkBytes(progressChunkSize), Stream.tap((chunk) => Effect.gen(function* () {
+                    const sent = yield* Ref.updateAndGet(loaded, (n) => n + chunk.length);
+                    yield* Ref.set(totalLoaded, sent);
+                    const total = totalLength !== 0 ? totalLength : sent;
+                    const percentage = totalLength > 0 ? Number(((sent / total) * 100).toFixed(2)) : 0;
+                    if (percentage === 100 && totalLength > 0)
+                        return;
+                    yield* reporter.report({ loaded: sent, total, percentage });
+                })));
+                return streamedBody(tracked);
+            }
+            if (streamBody) {
+                return streamedBody(userStream(body));
+            }
+            return HttpClientRequest.setBody(HttpBody.raw(body));
+        });
+        const failTransport = (error) => Effect.flatMap(Ref.get(bodyFailure), Option.match({
+            onNone: () => vercelApiErrorFromHttpClientError(error, { operation }),
+            onSome: (failure) => Effect.fail(failure),
+        }));
+        const attempts = yield* Ref.make(0);
+        const attempt = (reporter) => Effect.gen(function* () {
+            const index = yield* Ref.getAndUpdate(attempts, (n) => n + 1);
+            const setBody = yield* withBody(reporter);
+            const request = HttpClientRequest.make(call.method)(url).pipe(setBody, HttpClientRequest.setHeaders(headersFor(index)));
+            const response = yield* client
+                .execute(request)
+                .pipe(Effect.catchTag("HttpClientError", failTransport));
+            if (response.status >= 200 && response.status < 300) {
+                return response;
+            }
+            return yield* blobErrorFromHttpResponse(response, {
+                operation,
+                locator: call.locator ?? call.path,
+                domainErrors: call.domainErrors,
+            });
+        }).pipe(Effect.retry(vercelApiTransientRetry({
+            maxAttempts: streamBody ? 1 : settings.retries + 1,
+            baseDelay: "1 second",
+            isRetryable: isRetryableBlobError,
+        })));
+        const response = onUploadProgress === undefined
+            ? yield* attempt(undefined)
+            : yield* Effect.gen(function* () {
+                yield* onUploadProgress({ loaded: 0, total: totalLength, percentage: 0 });
+                const reporter = yield* uploadProgressThrottle(onUploadProgress, call.progressInterval);
+                const response = yield* attempt(reporter).pipe(Effect.ensuring(reporter.stop));
+                const loaded = yield* Ref.get(totalLoaded);
+                yield* onUploadProgress({ loaded, total: loaded, percentage: 100 });
+                return response;
+            });
+        if (call.response === undefined) {
+            yield* Effect.ignore(response.arrayBuffer);
+            return undefined;
+        }
+        const json = yield* response.json.pipe(Effect.mapError((error) => unexpectedResponse(operation, response.status, error.message)));
+        return yield* Schema.decodeUnknownEffect(call.response)(json).pipe(Effect.mapError((error) => unexpectedResponse(operation, response.status, `Unexpected response body: ${error.message}`)));
+    });
+    const fetch = (request) => client
+        .execute(HttpClientRequest.get(request.url).pipe(HttpClientRequest.setHeaders({
+        authorization: `Bearer ${Redacted.value(request.token)}`,
+        ...request.headers,
+    })))
+        .pipe(Effect.catchTag("HttpClientError", (error) => vercelApiErrorFromHttpClientError(error, { operation: request.operation })), withoutTracePropagation);
+    return {
+        call: (request) => withoutTracePropagation(call(request)),
+        fetch,
+    };
+};
+//# sourceMappingURL=blob-request.js.map

package/dist/internal/blob-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-request.js","sourceRoot":"","sources":["../../src/internal/blob-request.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,EACR,GAAG,EACH,MAAM,EACN,MAAM,GACP,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAWtE,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAgC1D,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAA6B,EAC7B,UAAiC,EACZ,EAAE,CAAC,CAAC;IACzB,UAAU;IACV,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;IAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;CACxB,CAAC,CAAC;AAiBH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAmB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAA6B,EAC7B,IAA2B,EAC2B,EAAE;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CACvE,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC3C,CACF,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAClC,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CACb,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EACjE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CACH,CACF;KACJ,CAAC,CAAC;AACL,CAAC,CAAC;AAoHF,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,WAAW,GAAG,CAAC,CAAa,EAAE,CAAa,EAAc,EAAE;IAC/D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GACrB,CAAC,IAAY,EAAE,EAAE,CACjB,CAAO,MAAuC,EAAmC,EAAE,CACjF,MAAM,CAAC,QAAQ,CACb,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EACvB,CAAC,OAAmB,EAAE,KAAiB,EAAE,EAAE;IACzC,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAU,CAAC;AAChC,CAAC,EACD,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CACpE,CAAC;AAEN,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,MAAM,GAAG,CAAC,IAAa,EAA2B,EAAE,CACxD,OAAO,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,UAAU,CAAC,IAAI,CAAC;AAE5E,MAAM,YAAY,GAAG,CAAO,IAAoB,EAA2C,EAAE,CAC3F,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAO,IAAoB,EAAU,EAAE;IAC/D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;IACzE,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAO,IAAoB,EAAmC,EAAE;IACxF,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,kBAAkB,CAAC;YAC/B,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;YAC7B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;SAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,GAAY,EAAE;IAClC,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACzF,MAAM,OAAO,GACX,UAGD,CAAC,OAAO,CAAC;IACV,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3E,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,KAAK,SAAS,CAAC;AAC9C,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAAW,EAAE;IAChE,IAAI,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACH,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,IAAI,cAAc,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,IAAI,MAAM;gBACR,cAAc,GAAG,IAAI,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,IAAmB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5F,OAAO,cAAc,IAAI,CAAC,cAAc,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAUF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC/D,gBAAkC,EAClC,QAAoC;IAEpC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACzB,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACrB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAChC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CACvC,CACF,CACF,CACF,CACF,CAAC;IACF,OAAO;QACL,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;KAC7B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAE,OAAe,EAAE,EAAE,CAChF,IAAI,cAAc,CAAC;IACjB,SAAS;IACT,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;IACxB,MAAM,EAAE,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;CACvD,CAAC,CAAC;AAEL,MAAM,uBAAuB,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAElG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAA6B,EAAiB,EAAE;IAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,gBAAgB,GACpB,QAAQ,CAAC,mBAAmB,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IAEnC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE;QACjE,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG;YACjB,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1D,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACzC,CAAC;gBACD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBAC9E,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC9B,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAOtC,IAAqC;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3E,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,MAAM,cAAc,GAAG,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,iBAAiB,CAAC;QACpF,MAAM,WAAW,GAAG,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAK,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAK,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,UAAU,GAAG,CAAC,MAAuC,EAA6B,EAAE,CACxF,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACpE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CACF,CAAC;QAEjC,MAAM,UAAU,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,CAAC;YAC/D,uBAAuB,EAAE,SAAS;YAClC,wBAAwB,EAAE,IAAI,CAAC,OAAO;YACtC,4BAA4B,EAAE,MAAM,CAAC,OAAO,CAAC;YAC7C,eAAe,EAAE,QAAQ,CAAC,UAAU;YACpC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC9B,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAC7E,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;aACtB,CAAC;YACF,GAAG,QAAQ,CAAC,OAAO;YACnB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YAC1E,GAAG,IAAI,CAAC,OAAO;SAChB,CAAC,CAAC;QAEH,2EAA2E;QAC3E,MAAM,YAAY,GAChB,CAAC,MAAiC,EAAE,EAAE,CAAC,CAAC,OAA4C,EAAE,EAAE,CACtF,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAClD,iBAAiB,CAAC,YAAY,CAAC,cAAc,CAAC,CAC/C,CAAC;QAEN,MAAM,QAAQ,GAAG,CACf,QAA4C,EAI5C,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,UAAU;oBACtB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CACrE,WAAW,EACX,IAAI,UAAU,CAAC,CAAC,CAAC,CAClB;oBACH,CAAC,CAAC,SAAS,CAAC;gBACd,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9E,OAAO,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,UAAU;oBACvB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;oBAClB,CAAC,CAAE,UAAU,CAAC,IAAI,CAA+B,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,UAAU,CAAC,iBAAiB,CAAC,EAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;oBACtE,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBAClC,MAAM,KAAK,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;oBACrD,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnF,IAAI,UAAU,KAAK,GAAG,IAAI,WAAW,GAAG,CAAC;wBAAE,OAAO;oBAClD,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC9D,CAAC,CAAC,CACH,CACF,CAAC;gBACF,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEL,MAAM,aAAa,GAAG,CAAC,KAAsC,EAAE,EAAE,CAC/D,MAAM,CAAC,OAAO,CACZ,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC;YACX,MAAM,EAAE,GAAG,EAAE,CAAC,iCAAiC,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC;YACrE,MAAM,EAAE,CAAC,OAAO,EAA4C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SACpF,CAAC,CACH,CAAC;QAEJ,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,QAA4C,EAAE,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3D,OAAO,EACP,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAChD,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;iBAC3B,OAAO,CAAC,OAAO,CAAC;iBAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;YAC3D,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,yBAAyB,CAAC,QAAQ,EAAE;gBAChD,SAAS;gBACT,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI;gBAClC,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CACV,uBAAuB,CAAC;YACtB,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC;YAClD,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,oBAAoB;SAClC,CAAC,CACH,CACF,CAAC;QAEJ,MAAM,QAAQ,GACZ,gBAAgB,KAAK,SAAS;YAC5B,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3B,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC3C,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC,CAAC;QAET,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC3C,OAAO,SAAc,CAAC;QACxB,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAC1F,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,kBAAkB,CAChB,SAAS,EACT,QAAQ,CAAC,MAAM,EACf,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAC7C,CACF,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,CAAC,OAAyB,EAAE,EAAE,CAC1C,MAAM;SACH,OAAO,CACN,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CACrC,iBAAiB,CAAC,UAAU,CAAC;QAC3B,aAAa,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxD,GAAG,OAAO,CAAC,OAAO;KACnB,CAAC,CACH,CACF;SACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3C,iCAAiC,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAC3E,EACD,uBAAuB,CACxB,CAAC;IAEN,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,KAAK;KACN,CAAC;AACJ,CAAC,CAAC"}

package/dist/internal/callback.d.ts

@@ -0,0 +1,70 @@
+import type { VercelSystemEnv } from "@panorama-industries/effect-vercel-core";
+import { Effect, Option } from "effect";
+/** Header that carries the signature of an upload-completed callback. */
+export declare const callbackSignatureHeader = "x-vercel-signature";
+/** The SDK's warning when an upload route has `onUploadCompleted` but no callback URL. */
+export declare const callbackUrlUndeterminedWarning = "onUploadCompleted provided but no callbackUrl could be determined. Please provide a callbackUrl in onBeforeGenerateToken or set the VERCEL_BLOB_CALLBACK_URL environment variable.";
+/** The SDK's warning when an upload route returns a callback URL but has no `onUploadCompleted`. */
+export declare const callbackUrlUnhandledWarning = "callbackUrl was provided but onUploadCompleted is not defined. The callback will not be handled.";
+/**
+ * Path and query of a request URL, absolute or relative, as the SDK's `getPathFromRequestUrl`.
+ *
+ * @returns None when the URL cannot be parsed.
+ */
+export declare const requestPath: (url: string) => Option.Option<string>;
+/**
+ * Where the store should send the upload-completed callback of this route when the route gave no
+ * URL, as the SDK's `getCallbackUrl`, in order: `callbackBaseUrl` (`VERCEL_BLOB_CALLBACK_URL`) plus
+ * the request's path and query; on Vercel, the branch URL, else the deployment URL, of a preview, or
+ * the production URL of production. Logs the SDK's warning when the request URL cannot be parsed or
+ * the code runs neither with a callback base URL nor on Vercel.
+ *
+ * @param requestUrl - The request's original URL, absolute or a path.
+ */
+export declare const deriveCallbackUrl: (args: {
+    readonly requestUrl: string;
+    readonly callbackBaseUrl: Option.Option<string>;
+    readonly env: VercelSystemEnv["Service"];
+}) => Effect.Effect<Option.Option<string>, never, never>;
+/**
+ * The callback URL to sign into an upload, as `handleUpload` and `handleUploadPresigned` choose it:
+ * the route's URL, else (with `onUploadCompleted`) the derived one. Without `onUploadCompleted`, a
+ * route URL is kept and the SDK's warning logged, since nothing will handle the callback.
+ *
+ * @param derive - {@link deriveCallbackUrl} for this request; run only when needed.
+ */
+export declare const resolveCallbackUrl: <E, R>(args: {
+    readonly provided: string | undefined;
+    readonly handlesCallback: boolean;
+    readonly derive: Effect.Effect<Option.Option<string>, E, R>;
+}) => Effect.Effect<Option.Option<string>, E, R>;
+/**
+ * The text a callback signature covers: the body re-serialized as `JSON.stringify(JSON.parse(body))`,
+ * as the SDK signs the parsed body.
+ *
+ * @returns None when the body is not JSON.
+ */
+export declare const parseCallbackBody: (body: string) => Option.Option<{
+    readonly json: unknown;
+    readonly normalized: string;
+}>;
+/**
+ * Whether `signatureHex` is the HMAC-SHA256 (hex) of `body` keyed by the store's read-write token,
+ * as `handleUpload` verifies `x-vercel-signature`. Compared in constant time by Web Crypto `verify`;
+ * a signature that is not hex never verifies.
+ */
+export declare const verifyHmacCallbackSignature: (readWriteToken: string, signatureHex: string, body: string) => Effect.Effect<boolean, never, never>;
+/**
+ * DER bytes of a PEM `-----BEGIN PUBLIC KEY-----` (SPKI) block, as the SDK's
+ * `publicKeyDerFromPem`.
+ *
+ * @returns None when there is no such block or its content is not base64.
+ */
+export declare const publicKeyDerFromPem: (pem: string) => Option.Option<Uint8Array>;
+/**
+ * Whether `signatureHex` is an Ed25519 signature of `body` by the key in `publicKeyPem` (SPKI PEM,
+ * `BLOB_WEBHOOK_PUBLIC_KEY`), as `handleUploadPresigned` verifies `x-vercel-signature`. The
+ * signature must be 128 hex characters; a key that cannot be imported never verifies.
+ */
+export declare const verifyEd25519CallbackSignature: (publicKeyPem: string, signatureHex: string, body: string) => Effect.Effect<boolean, never, never>;
+//# sourceMappingURL=callback.d.ts.map

package/dist/internal/callback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.d.ts","sourceRoot":"","sources":["../../src/internal/callback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE/E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AAQhD,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D,0FAA0F;AAC1F,eAAO,MAAM,8BAA8B,uLAC2I,CAAC;AAEvL,oGAAoG;AACpG,eAAO,MAAM,2BAA2B,qGAC4D,CAAC;AAErG;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAS,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAO7D,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB;yBACP,MAAM;8BACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;kBACjC,eAAe,CAAC,SAAS,CAAC;wDA0BxC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAAgC,CAAC,EAAE,CAAC;uBAC9C,MAAM,GAAG,SAAS;8BACX,OAAO;qBAChB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gDAU3D,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,SACtB,MAAM,KACX,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAOvE,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,sGA0BtC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAAS,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAOzE,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,oGA4BzC,CAAC"}

package/dist/internal/callback.js

@@ -0,0 +1,141 @@
+import { Effect, Option, Result } from "effect";
+import { Base64, Hex } from "effect/encoding";
+/*
+ * Upload-completed callbacks, as the SDK's `client.ts` handles them: where the store sends them
+ * (`getCallbackUrl`) and how their `x-vercel-signature` is verified.
+ */
+/** Header that carries the signature of an upload-completed callback. */
+export const callbackSignatureHeader = "x-vercel-signature";
+/** The SDK's warning when an upload route has `onUploadCompleted` but no callback URL. */
+export const callbackUrlUndeterminedWarning = "onUploadCompleted provided but no callbackUrl could be determined. Please provide a callbackUrl in onBeforeGenerateToken or set the VERCEL_BLOB_CALLBACK_URL environment variable.";
+/** The SDK's warning when an upload route returns a callback URL but has no `onUploadCompleted`. */
+export const callbackUrlUnhandledWarning = "callbackUrl was provided but onUploadCompleted is not defined. The callback will not be handled.";
+/**
+ * Path and query of a request URL, absolute or relative, as the SDK's `getPathFromRequestUrl`.
+ *
+ * @returns None when the URL cannot be parsed.
+ */
+export const requestPath = (url) => {
+    const base = "https://dummy.com";
+    if (!URL.canParse(url, base)) {
+        return Option.none();
+    }
+    const parsed = new URL(url, base);
+    return Option.some(parsed.pathname + parsed.search);
+};
+/**
+ * Where the store should send the upload-completed callback of this route when the route gave no
+ * URL, as the SDK's `getCallbackUrl`, in order: `callbackBaseUrl` (`VERCEL_BLOB_CALLBACK_URL`) plus
+ * the request's path and query; on Vercel, the branch URL, else the deployment URL, of a preview, or
+ * the production URL of production. Logs the SDK's warning when the request URL cannot be parsed or
+ * the code runs neither with a callback base URL nor on Vercel.
+ *
+ * @param requestUrl - The request's original URL, absolute or a path.
+ */
+export const deriveCallbackUrl = Effect.fnUntraced(function* (args) {
+    const path = requestPath(args.requestUrl);
+    if (Option.isNone(path)) {
+        yield* Effect.logWarning(callbackUrlUndeterminedWarning);
+        return Option.none();
+    }
+    if (Option.isSome(args.callbackBaseUrl)) {
+        return Option.some(`${args.callbackBaseUrl.value}${path.value}`);
+    }
+    const { env } = args;
+    if (!env.isVercel) {
+        yield* Effect.logWarning(callbackUrlUndeterminedWarning);
+        return Option.none();
+    }
+    const onHost = (host) => `https://${host}${path.value}`;
+    if (Option.contains(env.target, "preview")) {
+        const previewHost = Option.orElse(env.branchUrl, () => env.url);
+        if (Option.isSome(previewHost)) {
+            return Option.some(onHost(previewHost.value));
+        }
+    }
+    if (Option.contains(env.target, "production")) {
+        return Option.map(env.projectProductionUrl, onHost);
+    }
+    return Option.none();
+});
+/**
+ * The callback URL to sign into an upload, as `handleUpload` and `handleUploadPresigned` choose it:
+ * the route's URL, else (with `onUploadCompleted`) the derived one. Without `onUploadCompleted`, a
+ * route URL is kept and the SDK's warning logged, since nothing will handle the callback.
+ *
+ * @param derive - {@link deriveCallbackUrl} for this request; run only when needed.
+ */
+export const resolveCallbackUrl = Effect.fnUntraced(function* (args) {
+    let callbackUrl = Option.filter(Option.fromUndefinedOr(args.provided), (url) => url !== "");
+    if (args.handlesCallback && Option.isNone(callbackUrl)) {
+        callbackUrl = yield* args.derive;
+    }
+    if (!args.handlesCallback && Option.isSome(callbackUrl)) {
+        yield* Effect.logWarning(callbackUrlUnhandledWarning);
+    }
+    return callbackUrl;
+});
+/**
+ * The text a callback signature covers: the body re-serialized as `JSON.stringify(JSON.parse(body))`,
+ * as the SDK signs the parsed body.
+ *
+ * @returns None when the body is not JSON.
+ */
+export const parseCallbackBody = (body) => {
+    try {
+        const json = JSON.parse(body);
+        return Option.some({ json, normalized: JSON.stringify(json) });
+    }
+    catch {
+        return Option.none();
+    }
+};
+const utf8 = new TextEncoder();
+/**
+ * Whether `signatureHex` is the HMAC-SHA256 (hex) of `body` keyed by the store's read-write token,
+ * as `handleUpload` verifies `x-vercel-signature`. Compared in constant time by Web Crypto `verify`;
+ * a signature that is not hex never verifies.
+ */
+export const verifyHmacCallbackSignature = Effect.fnUntraced(function* (readWriteToken, signatureHex, body) {
+    const signature = Result.getSuccess(Hex.decode(signatureHex));
+    if (Option.isNone(signature)) {
+        return false;
+    }
+    const key = yield* Effect.promise(() => globalThis.crypto.subtle.importKey("raw", utf8.encode(readWriteToken), { name: "HMAC", hash: "SHA-256" }, false, ["verify"]));
+    return yield* Effect.promise(() => globalThis.crypto.subtle.verify("HMAC", key, Uint8Array.from(signature.value), utf8.encode(body)));
+});
+/**
+ * DER bytes of a PEM `-----BEGIN PUBLIC KEY-----` (SPKI) block, as the SDK's
+ * `publicKeyDerFromPem`.
+ *
+ * @returns None when there is no such block or its content is not base64.
+ */
+export const publicKeyDerFromPem = (pem) => {
+    const match = /-----BEGIN PUBLIC KEY-----([^-]*)-----END PUBLIC KEY-----/s.exec(pem.trim());
+    const base64 = match?.[1]?.replace(/\s+/g, "");
+    if (!base64) {
+        return Option.none();
+    }
+    return Result.getSuccess(Base64.decode(base64));
+};
+const ed25519SignatureHex = /^[0-9a-fA-F]{128}$/;
+/**
+ * Whether `signatureHex` is an Ed25519 signature of `body` by the key in `publicKeyPem` (SPKI PEM,
+ * `BLOB_WEBHOOK_PUBLIC_KEY`), as `handleUploadPresigned` verifies `x-vercel-signature`. The
+ * signature must be 128 hex characters; a key that cannot be imported never verifies.
+ */
+export const verifyEd25519CallbackSignature = Effect.fnUntraced(function* (publicKeyPem, signatureHex, body) {
+    if (!ed25519SignatureHex.test(signatureHex)) {
+        return false;
+    }
+    const der = publicKeyDerFromPem(publicKeyPem);
+    const signature = Result.getSuccess(Hex.decode(signatureHex));
+    if (Option.isNone(der) || Option.isNone(signature)) {
+        return false;
+    }
+    return yield* Effect.tryPromise(async () => {
+        const key = await globalThis.crypto.subtle.importKey("spki", Uint8Array.from(der.value), { name: "Ed25519" }, false, ["verify"]);
+        return globalThis.crypto.subtle.verify("Ed25519", key, Uint8Array.from(signature.value), utf8.encode(body));
+    }).pipe(Effect.orElseSucceed(() => false));
+});
+//# sourceMappingURL=callback.js.map

package/dist/internal/callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.js","sourceRoot":"","sources":["../../src/internal/callback.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;GAGG;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,8BAA8B,GACzC,oLAAoL,CAAC;AAEvL,oGAAoG;AACpG,MAAM,CAAC,MAAM,2BAA2B,GACtC,kGAAkG,CAAC;AAErG;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAW,EAAyB,EAAE;IAChE,MAAM,IAAI,GAAG,mBAAmB,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAI7D;IACC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,IAAI,EAAU,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,IAAI,EAAU,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAU,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAQ,IAIpE;IACC,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,WAAW,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAAY,EAC4D,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EACpE,cAAsB,EACtB,YAAoB,EACpB,IAAY;IAEZ,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CACrC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAChC,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAC3B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CACF,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAChC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC7B,MAAM,EACN,GAAG,EACH,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAClB,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAA6B,EAAE;IAC5E,MAAM,KAAK,GAAG,4DAA4D,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EACvE,YAAoB,EACpB,YAAoB,EACpB,IAAY;IAEZ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAClD,MAAM,EACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACpC,SAAS,EACT,GAAG,EACH,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC"}

package/dist/internal/client-token.d.ts

@@ -0,0 +1,65 @@
+import { Effect, Option, Schema } from "effect";
+/** Prefix of every client token. */
+export declare const clientTokenPrefix = "vercel_blob_client_";
+/** How long a client token generated without `validUntil` stays valid, as the SDK: 30 seconds. */
+export declare const defaultClientTokenLifetimeMillis = 30000;
+/**
+ * Fields of a client token's JSON, already in wire form (`validUntil` in epoch milliseconds), in
+ * the order they are serialized. `undefined` values are omitted, as `JSON.stringify` omits them.
+ */
+export type ClientTokenFields = Readonly<Record<string, unknown>>;
+/**
+ * The JSON a client token encodes, as the SDK serializes it: the fields in their order, with
+ * `allowOverwrite: true` appended when `ifMatch` is set and `allowOverwrite` is not, and
+ * `validUntil` defaulted to `defaultValidUntil` (kept in place when the fields have it).
+ *
+ * Callers reject `ifMatch` with `allowOverwrite: false` first; see {@link contradictsIfMatch}.
+ */
+export declare const clientTokenPayloadJson: (fields: ClientTokenFields, defaultValidUntil: number) => string;
+/** The SDK's message for an `ifMatch` with `allowOverwrite: false`, which it refuses to sign. */
+export declare const ifMatchContradictionMessage = "ifMatch and allowOverwrite: false are contradictory. ifMatch is used for conditional overwrites, which requires allowOverwrite to be true.";
+/** Whether the fields set `ifMatch` together with `allowOverwrite: false`, which the SDK rejects. */
+export declare const contradictsIfMatch: (fields: ClientTokenFields) => boolean;
+/** HMAC-SHA256 of `data` keyed by `secret` (both UTF-8), as lowercase hex. */
+export declare const hmacSha256Hex: (secret: string, data: string) => Effect.Effect<string, never, never>;
+/**
+ * Sign a client token's JSON with the store's read-write token.
+ *
+ * @param payloadJson - The token's JSON, from {@link clientTokenPayloadJson}.
+ * @returns `vercel_blob_client_<storeId>_<base64("<hex HMAC>.<base64 payloadJson>")>`.
+ */
+export declare const signClientToken: (readWriteToken: string, storeId: string & import("effect/Brand").Brand<"StoreId">, payloadJson: string) => Effect.Effect<string & import("effect/Brand").Brand<"ClientToken">, never, never>;
+/** `onUploadCompleted` as a client token carries it. */
+export declare const ClientTokenCallback: Schema.Struct<{
+    readonly callbackUrl: Schema.String;
+    readonly tokenPayload: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+}>;
+/** The JSON a client token encodes, as the SDK's `DecodedClientTokenPayload`. */
+export declare const ClientTokenPayload: Schema.Struct<{
+    readonly pathname: Schema.String;
+    /** Expiry in epoch milliseconds. */
+    readonly validUntil: Schema.Number;
+    readonly onUploadCompleted: Schema.optionalKey<Schema.Struct<{
+        readonly callbackUrl: Schema.String;
+        readonly tokenPayload: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+    }>>;
+    readonly maximumSizeInBytes: Schema.optionalKey<Schema.Number>;
+    readonly allowedContentTypes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly addRandomSuffix: Schema.optionalKey<Schema.Boolean>;
+    readonly allowOverwrite: Schema.optionalKey<Schema.Boolean>;
+    readonly cacheControlMaxAge: Schema.optionalKey<Schema.Number>;
+    readonly ifMatch: Schema.optionalKey<Schema.String>;
+    /** Set by upload routes, which copy the route's `tokenPayload` into the token as the SDK does. */
+    readonly tokenPayload: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+}>;
+/** The JSON a client token encodes. */
+export type ClientTokenPayload = typeof ClientTokenPayload.Type;
+/**
+ * Read the JSON a client token encodes without verifying its signature, as the SDK's
+ * `getPayloadFromClientToken`: the fifth `_`-separated segment is base64 of `<hmac>.<base64 JSON>`.
+ * Works in browsers.
+ *
+ * @returns None when the token does not have that shape or its JSON is not a client token payload.
+ */
+export declare const getPayloadFromClientToken: (clientToken: string) => Option.Option<ClientTokenPayload>;
+//# sourceMappingURL=client-token.d.ts.map

package/dist/internal/client-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-token.d.ts","sourceRoot":"","sources":["../../src/internal/client-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AAcxD,oCAAoC;AACpC,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD,kGAAkG;AAClG,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,WACzB,iBAAiB,qBACN,MAAM,KACxB,MAMF,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,2BAA2B,+IACsG,CAAC;AAE/I,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,WAAY,iBAAiB,KAAG,OACG,CAAC;AAInE,8EAA8E;AAC9E,eAAO,MAAM,aAAa,uEAcxB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,eAAe,+LAU1B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,mBAAmB;;;EAG9B,CAAC;AAEH,iFAAiF;AACjF,eAAO,MAAM,kBAAkB;;IAE7B,oCAAoC;;;;;;;;;;;;IASpC,kGAAkG;;EAElG,CAAC;AAEH,uCAAuC;AACvC,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAOhE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,gBAAiB,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAK7F,CAAC"}