@protobase/server 0.30.0 → 0.30.2

package/dist/admin-options.d.ts

@@ -15,7 +15,7 @@ export type AdminOptions = {
   basePath?: string;
   /**
    * The app's publishable and secret keys, with which supabase-js calls the PostgREST-compatible `/rest/v1` and the
-   * Realtime-compatible `/realtime/v1` (see `ApiKeysOptions`); default `PROTOBASE_PUBLISHABLE_KEY` and
+   * Realtime-compatible `/realtime/v1` and the Storage-compatible `/storage/v1` (see `ApiKeysOptions`); default `PROTOBASE_PUBLISHABLE_KEY` and
    * `PROTOBASE_SECRET_KEY`. Without either, or with `false`, the app serves neither.
    */
   apiKeys?: ApiKeysOptions | false;

package/dist/api-keys/caller-settings.js

@@ -0,0 +1,27 @@
+//#region src/api-keys/caller-settings.ts
+/**
+* The transaction settings a request admitted by key (`/rest/v1`, `/storage/v1`) runs with, as Supabase's PostgREST
+* sets them: `role`, which is `SET LOCAL ROLE`, to `anon` or `authenticated`, and the caller's claims in `request.jwt.claims` and its user in
+* `request.jwt.claim.sub`, which `auth.uid()`, `auth.role()` and `auth.jwt()` read. The `role` claim names the
+* database role, as on Supabase, whatever the token's own says. The app's role, of the secret key, sets no role: the
+* connection's own owns the tables. A signed-in user is the actor change capture records, when `actorSetting` is set.
+*/
+const callerSettings = (caller, actorSetting) => {
+	const role = caller.role === "app" ? "service_role" : caller.role;
+	const sub = caller.role === "authenticated" ? caller.claims.sub : void 0;
+	const actor = sub === void 0 ? void 0 : {
+		id: sub,
+		roles: []
+	};
+	return {
+		...caller.role !== "app" && { role: caller.role },
+		"request.jwt.claims": JSON.stringify({
+			...caller.claims,
+			role
+		}),
+		...sub !== void 0 && { "request.jwt.claim.sub": sub },
+		...actor && actorSetting && { [actorSetting]: JSON.stringify(actor) }
+	};
+};
+//#endregion
+export { callerSettings };

package/dist/create-admin.d.ts

@@ -72,7 +72,7 @@ export type CreateAdminInput = {
   formsDifficulty?: Difficulty;
   /** @internal The users comments name, mention and mail, which tests fake; from `auth` otherwise. */
   commentUsers?: CommentUsers;
-  /** @internal Verifies a user's token on `/rest/v1` and `/realtime/v1` and gives its claims, which tests fake; those `/auth/v1` signs otherwise. */
+  /** @internal Verifies a user's token on `/rest/v1`, `/realtime/v1` and `/storage/v1` and gives its claims, which tests fake; those `/auth/v1` signs otherwise. */
   verifyToken?: (token: string) => Promise<JWTPayload>;
   /**
    * The host's WebSocket upgrade, such as `@hono/node-server`'s, with which an app with keys and live resources serves

package/dist/create-admin.js

@@ -17,6 +17,7 @@ import { apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { jwtVerifier } from "./auth/jwt.js";
 import { realtimeApp } from "./realtime/realtime-app.js";
 import { restRoutes } from "./rest/rest-routes.js";
+import { storageRoutes } from "./storage/storage-routes.js";
 import { readAppName } from "./app-name.js";
 import { goTruePath } from "./gotrue/keys.js";
 import { authBasePath } from "./better-auth/auth-base-path.js";
@@ -139,11 +140,13 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		pages: pageModels.map((entry) => entry.name)
 	});
 	const apiKeys = apiKeySettings(options.apiKeys, globalThis.process?.env ?? {});
+	const servesKeys = Boolean(apiKeys.publishable || apiKeys.secret);
 	const files = createFilesRuntime({
 		...filesOptions && { options: filesOptions },
 		env: globalThis.process?.env ?? {},
 		models: registry.entries.map((entry) => entry.model),
-		systemPath
+		systemPath,
+		storage: servesKeys
 	});
 	const table = webhooksOptions && webhookTable(webhooksOptions, auth);
 	const withAi = withAiFields || hasAiActions(viewModels);
@@ -286,7 +289,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		report
 	});
 	if (appModels.some((model) => model.live)) app.route(systemPath || "/", guarded((live) => void live.route("/", liveRoutes(feed, (session) => visibleNotices(deps, session))), withAnonymous(authenticate, options.roles)));
-	if (apiKeys.publishable || apiKeys.secret) {
+	if (servesKeys) {
 		const verify = verifyToken ?? (auth ? jwtVerifier(goTrueTokens({ auth })) : () => Promise.reject(unauthorized("This app signs no user tokens")));
 		const caller = apiKeyCaller({
 			keys: apiKeys,
@@ -304,6 +307,21 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 			caller,
 			report
 		}));
+		if (files?.storage) {
+			const storage = {
+				db,
+				statementTimeoutMs: deps.statementTimeoutMs,
+				...deps.actorSetting && { actorSetting: deps.actorSetting },
+				store: files.providers[files.storage.provider].store,
+				signer: files.signer,
+				maxBytes: files.storage.maxBytes,
+				caller
+			};
+			app.route("/storage/v1", storageRoutes({
+				deps: storage,
+				report
+			}));
+		}
 	}
 	app.route(basePath, api);
 	app.route(`${deps.systemPath}/meta`, metaApp);

package/dist/files/download.js

@@ -7,6 +7,7 @@ import { fetchRecord } from "../records.js";
 import { readTransaction } from "../transactions.js";
 //#region src/files/download.ts
 const gone = () => notFound("There is no such file");
+/** One `bytes=start-end` range, inclusive; `undefined` for none, `false` for one that cannot be served. */
 const rangeOf = (header, size) => {
 	if (!header) return void 0;
 	const match = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
@@ -106,4 +107,4 @@ const serveFile = async (deps, request, provider, path) => {
 	});
 };
 //#endregion
-export { serveFile };
+export { rangeOf, serveFile };

package/dist/files/limits.d.ts

@@ -5,6 +5,11 @@ export type FileLimits = {
   maxBytes?: number | string;
   maxFiles?: number;
 };
+/** What `store` holds, in bytes and files, leaving out its own `.cleanup/` entries. */
+export declare const storeUsage: (store: FileStore) => Promise<{
+  bytes: number;
+  files: number;
+}>;
 /**
  * `store` refusing a file with `507` once it would hold more than `maxBytes` or `maxFiles`. Only files count, not the
  * store's own `.cleanup/` entries. What the store holds is counted with `list` on the first upload and again when the

package/dist/files/limits.js

@@ -4,6 +4,14 @@ import { parseSize } from "@protobase/schema/internal";
 //#region src/files/limits.ts
 /** How long a count of what a store holds is trusted before it is taken again. */
 const recountMs = 3e5;
+/** What `store` holds, in bytes and files, leaving out its own `.cleanup/` entries. */
+const storeUsage = async (store) => {
+	const files = (await store.list("")).filter((object) => isFilePath(object.path));
+	return {
+		bytes: files.reduce((sum, object) => sum + object.size, 0),
+		files: files.length
+	};
+};
 const limitReached = () => new HttpProblem(507, "storage-full", "Insufficient Storage", "The file storage is full; delete files to make room");
 var LimitReached = class extends Error {};
 const checkedFiles = (value) => {
@@ -27,10 +35,8 @@ const limitedFileStore = (store, limits, now = Date.now) => {
 	};
 	const usage = async () => {
 		if (counted && now() - counted.at < 3e5) return counted;
-		const files = (await store.list("")).filter((object) => isFilePath(object.path));
 		counted = {
-			bytes: files.reduce((sum, object) => sum + object.size, 0),
-			files: files.length,
+			...await storeUsage(store),
 			at: now()
 		};
 		return counted;
@@ -76,4 +82,4 @@ const limitedFileStore = (store, limits, now = Date.now) => {
 	};
 };
 //#endregion
-export { limitedFileStore, recountMs };
+export { limitedFileStore, recountMs, storeUsage };

package/dist/files/local-files.js

@@ -1,6 +1,7 @@
 import { HttpProblem } from "../problem.js";
 import { parseDuration } from "./duration.js";
 import { limitedFileStore } from "./limits.js";
+import { parseSize } from "@protobase/schema/internal";
 //#region src/files/local-files.ts
 const node = async () => ({
 	fs: await import("node:fs/promises"),
@@ -99,7 +100,8 @@ const localFiles = ({ dir, public: isPublic = false, publicUrl, retention, maxBy
 	}),
 	public: isPublic || publicUrl !== void 0,
 	...publicUrl !== void 0 && { publicUrl: publicUrl.replace(/\/$/, "") },
-	...retention !== void 0 && { retention: parseDuration(retention, "retention") }
+	...retention !== void 0 && { retention: parseDuration(retention, "retention") },
+	...maxBytes !== void 0 && { maxBytes: parseSize(maxBytes) }
 });
 //#endregion
 export { localFileStore, localFiles };

package/dist/files/options.d.ts

@@ -22,5 +22,14 @@ export type FilesOptions = {
    * public files from: `['images.example.com']`. Images from any other host load with `referrerPolicy="no-referrer"`.
    */
   trustedHosts?: string[];
+  /**
+   * Where `supabase.storage` keeps the bytes of its objects, which the app serves at `/storage/v1` when it has an API key
+   * (see `apiKeys`): `provider` names one of the providers, default `private`, and `maxFileSize` caps every upload, as
+   * `50 MB` (the default) or a number of bytes; a bucket's own limit can only be lower. `false` serves no `/storage/v1`.
+   */
+  storage?: {
+    provider?: string;
+    maxFileSize?: number | string;
+  } | false;
 };
 //#endregion

package/dist/files/runtime.js

@@ -1,21 +1,29 @@
 import { fileColumns, runCleanup } from "./cleanup-runner.js";
 import { storageCleanupSchedule } from "./cleanup-schedule.js";
 import { resolveProviders, retentionOf } from "./providers.js";
+import { storageProviderName } from "./storage-provider.js";
 import { createSigner } from "./signer.js";
 import { trustedImageHosts } from "./trusted-hosts.js";
+import { parseSize } from "@protobase/schema/internal";
 //#region src/files/runtime.ts
 /** How long an upload ticket stays usable, so a form left open still saves. */
 const ticketSeconds = 86400;
 const imageFields = (models) => models.flatMap((model) => Object.values(model.fields).flatMap(({ name, file }) => file && (file.variants || file.original || file.placeholder !== void 0) ? [`${model.name}.${name}`] : []));
 /**
-* The runtime, when a resource has a file field or the config names providers. It fails at startup when a field's
+* The runtime, when a resource has a file field, the config names providers or the app serves `/storage/v1`. It fails at startup when a field's
 * provider is not configured, nothing signs uploads, or a field makes image variants or placeholders without sharp.
 */
-const createFilesRuntime = ({ options = {}, env, models, systemPath }) => {
-	const used = [...new Set(models.flatMap((model) => Object.values(model.fields).flatMap((field) => field.file ? [field.file.provider] : [])))];
+const createFilesRuntime = ({ options = {}, env, models, systemPath, storage: servesStorage = false }) => {
+	const storageName = servesStorage ? storageProviderName(options) : void 0;
+	const storage = storageName && options.storage !== false ? {
+		provider: storageName,
+		maxBytes: parseSize(options.storage?.maxFileSize ?? "50 MB")
+	} : void 0;
+	const fieldProviders = models.flatMap((model) => Object.values(model.fields).flatMap((field) => field.file ? [field.file.provider] : []));
+	const used = [.../* @__PURE__ */ new Set([...fieldProviders, ...storage ? [storage.provider] : []])];
 	if (used.length === 0 && !options.providers) return void 0;
 	const secret = options.secret ?? env.PROTOBASE_FILES_SECRET ?? env.BETTER_AUTH_SECRET;
-	if (!secret) throw new Error("File fields need a secret to sign uploads: set BETTER_AUTH_SECRET, PROTOBASE_FILES_SECRET or files.secret");
+	if (!secret) throw new Error("File fields and /storage/v1 need a secret to sign uploads: set BETTER_AUTH_SECRET, PROTOBASE_FILES_SECRET or files.secret");
 	const images = imageFields(models);
 	if (images.length > 0 && !options.sharp) throw new Error(`${images.join(", ")} make image variants or placeholders, which need sharp: add it to the project (bun add sharp), then import sharp from 'sharp' in the config and pass files: { sharp }`);
 	const providers = resolveProviders(options, env, used);
@@ -28,7 +36,8 @@ const createFilesRuntime = ({ options = {}, env, models, systemPath }) => {
 		path: `${systemPath}/files`,
 		columns: fileColumns(models),
 		trustedHosts: trustedImageHosts(providers, options.trustedHosts),
-		...options.sharp && { sharp: options.sharp }
+		...options.sharp && { sharp: options.sharp },
+		...storage && { storage }
 	};
 };
 /** Runs the scheduled deletes that are due (see `runCleanup`). */

package/dist/files/s3-files.js

@@ -1,6 +1,7 @@
 import { contentDisposition, servedType } from "./media-types.js";
 import { parseDuration } from "./duration.js";
 import { limitedFileStore } from "./limits.js";
+import { parseSize } from "@protobase/schema/internal";
 //#region src/files/s3-files.ts
 const codeOf = (error) => error instanceof Error ? error.code : void 0;
 /** A store in a bucket, under `prefix`. Downloads get presigned links, so their bytes never pass through the app. */
@@ -106,7 +107,8 @@ const s3Files = (options) => {
 		}),
 		public: isPublic || publicUrl !== void 0,
 		...publicUrl !== void 0 && { publicUrl: `${publicUrl.replace(/\/$/, "")}${folder === "" ? "" : `/${folder}`}` },
-		...retention !== void 0 && { retention: parseDuration(retention, "retention") }
+		...retention !== void 0 && { retention: parseDuration(retention, "retention") },
+		...maxBytes !== void 0 && { maxBytes: parseSize(maxBytes) }
 	};
 };
 //#endregion

package/dist/files/storage-provider.d.ts

@@ -0,0 +1,12 @@
+import { FileProvider } from "./store.js";
+import { FilesOptions } from "./options.js";
+//#region src/files/storage-provider.d.ts
+/**
+ * The provider `/storage/v1` keeps object bytes in, as the app resolves it from the config and the environment, for a
+ * command that writes them, such as `protobase import supabase`. Fails when `files.storage` is `false`.
+ */
+export declare const storageProvider: (options: FilesOptions, env: Record<string, string | undefined>) => {
+  name: string;
+  provider: FileProvider;
+};
+//#endregion

package/dist/files/storage-provider.js

@@ -0,0 +1,18 @@
+import { resolveProviders } from "./providers.js";
+//#region src/files/storage-provider.ts
+/** The provider `/storage/v1` keeps object bytes in: `files.storage.provider`, default `private`. */
+const storageProviderName = (options) => options.storage === false ? void 0 : options.storage?.provider ?? "private";
+/**
+* The provider `/storage/v1` keeps object bytes in, as the app resolves it from the config and the environment, for a
+* command that writes them, such as `protobase import supabase`. Fails when `files.storage` is `false`.
+*/
+const storageProvider = (options, env) => {
+	const name = storageProviderName(options);
+	if (!name) throw new Error("files.storage is false in protobase.config.ts, so the app keeps no Storage objects");
+	return {
+		name,
+		provider: resolveProviders(options, env, [name])[name]
+	};
+};
+//#endregion
+export { storageProvider, storageProviderName };

package/dist/files/store.d.ts

@@ -42,5 +42,7 @@ export type FileProvider = {
   publicUrl?: string;
   /** Milliseconds between a file leaving its row and its bytes being deleted; default `files.retention` (0 when public). */
   retention?: number;
+  /** The most bytes its store takes (see `limitedFileStore`); unset for no limit. */
+  maxBytes?: number;
 };
 //#endregion

package/dist/index.d.ts

@@ -86,10 +86,12 @@ import { startErrorReporting } from "./error-reporting/error-reporter.js";
 import { FunctionEnv, PublicFunctionEnv, functionApp } from "./functions/function-app.js";
 import { SignatureOptions, StandardWebhookOptions, verifySignature, verifyStandardWebhook } from "./functions/verify-signature.js";
 import { requireEnv } from "./functions/require-env.js";
-import { FileLimits, limitedFileStore } from "./files/limits.js";
+import { FileLimits, limitedFileStore, storeUsage } from "./files/limits.js";
 import { LocalFilesOptions, localFileStore, localFiles } from "./files/local-files.js";
 import { StoreFileInput, storeFile } from "./files/store-file.js";
 import { S3Bucket, S3FilesOptions, S3ListPage, S3Object, s3FileStore, s3Files } from "./files/s3-files.js";
+import { storageProvider } from "./files/storage-provider.js";
+import { objectKey } from "./storage/object-key.js";
 import { FileCleanupInput, createFileCleanup } from "./files/file-cleanup.js";
 import { FileObject, FileVariantObject } from "./files/present.js";
 import { FileRef, formatUri, variantPath } from "./files/uri.js";
@@ -100,4 +102,4 @@ import { isSchedule } from "./jobs/schedule.js";
 import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type MemberInput, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type MemberInput, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, objectKey, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/index.js

@@ -21,6 +21,7 @@ import { webauthnPath } from "./better-auth/origins.js";
 import { apiKeySettings, apiKeyVariables } from "./api-keys/api-key-settings.js";
 import { apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { jwtAuthenticator, jwtVerifier } from "./auth/jwt.js";
+import { objectKey } from "./storage/object-key.js";
 import { defaultAppName } from "./app-name.js";
 import { defaultSignInPolicy, signInPolicyMethods } from "./better-auth/sign-in-policy.js";
 import { parseRoles } from "./better-auth/parse-roles.js";
@@ -40,9 +41,10 @@ import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { subscription } from "./webhooks/subscription.js";
 import { errorReportingSettings, errorReportingVariable } from "./error-reporting/error-reporting-settings.js";
 import { storageCleanupSchedule } from "./files/cleanup-schedule.js";
-import { limitedFileStore } from "./files/limits.js";
+import { limitedFileStore, storeUsage } from "./files/limits.js";
 import { localFileStore, localFiles } from "./files/local-files.js";
 import { s3FileStore, s3Files } from "./files/s3-files.js";
+import { storageProvider } from "./files/storage-provider.js";
 import { isBackgroundWork, runInBackground } from "./background-work.js";
 import { mapSettings, mapStyleUrl, mapStyleVariable } from "./maps/map-settings.js";
 import { beforeSignInPluginsVariable, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable } from "./plugins/plugin-settings.js";
@@ -75,4 +77,4 @@ import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/p
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, objectKey, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/storage/bucket-routes.js

@@ -0,0 +1,78 @@
+import { isDatabaseError } from "../error-handler.js";
+import { deleteBucket, findBucket, insertBucket, listBuckets, updateBucket } from "./bucket-sql.js";
+import { bucketNotEmpty, bucketNotFound, invalidRequest } from "./storage-error.js";
+import { checkedBucketId, objectKey } from "./object-key.js";
+import { deleteBucketObjects } from "./object-sql.js";
+import { asCaller } from "./storage-db.js";
+import { jsonBody } from "./storage-context.js";
+import { ownerOf } from "./write-object.js";
+import { Hono } from "hono";
+import { parseSize } from "@protobase/schema/internal";
+//#region src/storage/bucket-routes.ts
+const bucketJson = (bucket) => ({
+	...bucket,
+	type: "STANDARD"
+});
+const sizeLimit = (value) => {
+	if (value === null) return null;
+	if (typeof value === "number" && Number.isSafeInteger(value) && value > 0) return value;
+	if (typeof value === "string" && /^\s*\d+(\.\d+)?\s*(b|kb|mb|gb)?\s*$/i.test(value)) return parseSize(value);
+	throw invalidRequest("file_size_limit must be a number of bytes or a size such as 1MB");
+};
+const bucketWrite = (body) => {
+	const types = body.allowed_mime_types;
+	if (types !== void 0 && types !== null && !(Array.isArray(types) && types.every((type) => typeof type === "string"))) throw invalidRequest("allowed_mime_types must be a list of media types");
+	if (body.public !== void 0 && typeof body.public !== "boolean") throw invalidRequest("public must be true or false");
+	return {
+		...body.public !== void 0 && { public: body.public },
+		...body.file_size_limit !== void 0 && { file_size_limit: sizeLimit(body.file_size_limit) },
+		...types !== void 0 && { allowed_mime_types: types }
+	};
+};
+/** `supabase.storage`'s bucket calls, each as the caller, so the restored `storage.buckets` policies decide. */
+const bucketRoutes = (deps) => {
+	const app = new Hono();
+	app.get("/bucket", async (c) => c.json((await asCaller(deps, await deps.caller(c.req.raw), true, listBuckets)).map(bucketJson)));
+	app.get("/bucket/:id", async (c) => {
+		const id = checkedBucketId(c.req.param("id"));
+		const bucket = await asCaller(deps, await deps.caller(c.req.raw), true, (trx) => findBucket(trx, id));
+		if (!bucket) throw bucketNotFound();
+		return c.json(bucketJson(bucket));
+	});
+	app.post("/bucket", async (c) => {
+		const body = await jsonBody(c);
+		const name = checkedBucketId(typeof body.name === "string" ? body.name : "");
+		const id = typeof body.id === "string" ? checkedBucketId(body.id) : name;
+		const caller = await deps.caller(c.req.raw);
+		await asCaller(deps, caller, false, (trx) => insertBucket(trx, {
+			id,
+			name,
+			owner: ownerOf(caller),
+			...bucketWrite(body)
+		}));
+		return c.json({ name: id });
+	});
+	app.put("/bucket/:id", async (c) => {
+		const id = checkedBucketId(c.req.param("id"));
+		const write = bucketWrite(await jsonBody(c));
+		if (!await asCaller(deps, await deps.caller(c.req.raw), false, (trx) => updateBucket(trx, id, write))) throw bucketNotFound();
+		return c.json({ message: "Successfully updated" });
+	});
+	app.post("/bucket/:id/empty", async (c) => {
+		const id = checkedBucketId(c.req.param("id"));
+		const deleted = await asCaller(deps, await deps.caller(c.req.raw), false, (trx) => deleteBucketObjects(trx, id));
+		for (const row of deleted) await deps.store.delete(await objectKey(row.bucket_id, row.name, row.version));
+		return c.json({ message: "Successfully emptied" });
+	});
+	app.delete("/bucket/:id", async (c) => {
+		const id = checkedBucketId(c.req.param("id"));
+		if (!await asCaller(deps, await deps.caller(c.req.raw), false, (trx) => deleteBucket(trx, id)).catch((error) => {
+			if (isDatabaseError(error) && error.code === "23503") throw bucketNotEmpty();
+			throw error;
+		})) throw bucketNotFound();
+		return c.json({ message: "Successfully deleted" });
+	});
+	return app;
+};
+//#endregion
+export { bucketRoutes };

package/dist/storage/bucket-sql.js

@@ -0,0 +1,29 @@
+import { sql } from "kysely";
+//#region src/storage/bucket-sql.ts
+const columns = sql`id, name, owner, owner_id, public, file_size_limit::float8 as file_size_limit, allowed_mime_types, created_at, updated_at`;
+/** The bucket `id`, as the transaction's role may see it. */
+const findBucket = async (trx, id) => {
+	const { rows } = await sql`select ${columns} from storage.buckets where id = ${id}`.execute(trx);
+	return rows[0];
+};
+/** Every bucket the transaction's role may see, by name. */
+const listBuckets = async (trx) => (await sql`select ${columns} from storage.buckets order by name collate "C"`.execute(trx)).rows;
+/** Adds a bucket; RLS refuses it with 42501, a taken id or name with 23505. */
+const insertBucket = async (trx, bucket) => {
+	await sql`
+    insert into storage.buckets (id, name, owner_id, public, file_size_limit, allowed_mime_types)
+    values (${bucket.id}, ${bucket.name}, ${bucket.owner}, ${bucket.public ?? false}, ${bucket.file_size_limit ?? null}, ${bucket.allowed_mime_types ?? null})`.execute(trx);
+};
+/** Changes the bucket `id`; whether the transaction's role could. */
+const updateBucket = async (trx, id, write) => {
+	const sets = Object.entries(write).filter(([, value]) => value !== void 0).map(([column, value]) => sql`${sql.ref(column)} = ${value}`);
+	if (sets.length === 0) return await findBucket(trx, id) !== void 0;
+	return (await sql`update storage.buckets set ${sql.join(sets)} where id = ${id}`.execute(trx)).numAffectedRows === 1n;
+};
+/** Deletes the bucket `id`; whether the transaction's role could. A bucket that still has objects fails with 23503. */
+const deleteBucket = async (trx, id) => {
+	await sql`select set_config('storage.allow_delete_query', 'true', true)`.execute(trx);
+	return (await sql`delete from storage.buckets where id = ${id}`.execute(trx)).numAffectedRows === 1n;
+};
+//#endregion
+export { deleteBucket, findBucket, insertBucket, listBuckets, updateBucket };

package/dist/storage/list-sql.js

@@ -0,0 +1,29 @@
+import { sql } from "kysely";
+//#region src/storage/list-sql.ts
+const likeEscaped = (text) => text.replace(/[\\%_]/g, (char) => `\\${char}`);
+/**
+* One level of `bucket` below the folder `prefix` (`''` for the top, else ending in `/`), as the transaction's role may
+* see it: the objects directly in it and the folders that hold objects deeper down, whose names start with `search`
+* (case-insensitive). Folders sort with the objects by name; by any other column they come first, as in Supabase.
+*/
+const listFolder = async (trx, bucket, query) => {
+	const start = [...query.prefix].length + 1;
+	const order = sql.raw(query.order === "desc" ? "desc" : "asc");
+	const { rows } = await sql`
+    with level as (
+      select split_part(substr(name, ${start}), '/', 1) as entry, strpos(substr(name, ${start}), '/') > 0 as folder, id, updated_at, created_at, last_accessed_at, metadata
+      from storage.objects
+      where bucket_id = ${bucket} and name like ${`${likeEscaped(query.prefix)}%`} and substr(name, ${start}) ilike ${`${likeEscaped(query.search)}%`}
+    ), entries as (
+      select distinct on (entry) entry as name, folder, case when folder then null else id end as id,
+        case when folder then null else updated_at end as updated_at, case when folder then null else created_at end as created_at,
+        case when folder then null else last_accessed_at end as last_accessed_at, case when folder then null else metadata end as metadata
+      from level order by entry, folder desc
+    )
+    select name, id, updated_at, created_at, last_accessed_at, metadata from entries
+    order by ${query.column === "name" ? sql`name collate "C" ${order}` : sql`folder desc, ${sql.ref(query.column)} ${order} nulls last, name collate "C"`}
+    limit ${query.limit} offset ${query.offset}`.execute(trx);
+	return rows;
+};
+//#endregion
+export { listFolder };

package/dist/storage/move-copy.js

@@ -0,0 +1,63 @@
+import { accessDenied, alreadyExists, objectNotFound } from "./storage-error.js";
+import { objectKey } from "./object-key.js";
+import { findObject, renameObject } from "./object-sql.js";
+import { asApp, asCaller, becomeCaller } from "./storage-db.js";
+import { ownerOf, writeObject } from "./write-object.js";
+//#region src/storage/move-copy.ts
+/** The object as the caller may see it, else 404 `NoSuchKey`. */
+const visibleObject = async (deps, caller, at) => {
+	const row = await asCaller(deps, caller, true, (trx) => findObject(trx, at.bucket, at.name));
+	if (!row) throw objectNotFound();
+	return row;
+};
+const copyBytes = async (store, row, key) => {
+	const body = await store.read(await objectKey(row.bucket_id, row.name, row.version));
+	if (!body) throw objectNotFound();
+	return store.put(key, body);
+};
+/**
+* Copies an object the caller may see to `to`, with its type, cache control and metadata, as a new object the caller
+* must be allowed to write there (see `writeObject`); `upsert` lets it replace one.
+*/
+const copyObject = async (deps, caller, from, to, upsert) => {
+	const source = await visibleObject(deps, caller, from);
+	return writeObject(deps, {
+		...to,
+		caller,
+		owner: ownerOf(caller),
+		upsert
+	}, {
+		type: source.metadata?.mimetype ?? "application/octet-stream",
+		cacheControl: source.metadata?.cacheControl ?? "max-age=3600",
+		userMetadata: source.user_metadata,
+		store: (key) => copyBytes(deps.store, source, key)
+	});
+};
+/**
+* Moves an object the caller may see to `to`: its bytes are copied under a new version, then its row is renamed as the
+* caller, so the update policies decide on the old and the new name. When that fails, the copy is deleted; once it
+* commits, the old bytes are.
+*/
+const moveObject = async (deps, caller, from, to) => {
+	const source = await visibleObject(deps, caller, from);
+	const version = crypto.randomUUID();
+	const key = await objectKey(to.bucket, to.name, version);
+	await copyBytes(deps.store, source, key);
+	await asApp(deps, async (trx) => {
+		if (!await findObject(trx, from.bucket, from.name, true)) throw objectNotFound();
+		if (await findObject(trx, to.bucket, to.name, true)) throw alreadyExists();
+		await becomeCaller(trx, deps, caller);
+		if (!await renameObject(trx, from, {
+			...to,
+			version,
+			owner: ownerOf(caller)
+		})) throw accessDenied();
+	}).catch(async (error) => {
+		await deps.store.delete(key);
+		throw error;
+	});
+	await deps.store.delete(await objectKey(source.bucket_id, source.name, source.version));
+	return source.id;
+};
+//#endregion
+export { copyObject, moveObject, visibleObject };

package/dist/storage/multipart.js

@@ -0,0 +1,47 @@
+//#region src/storage/multipart.ts
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const indexOf = (haystack, needle, from) => {
+	for (let at = haystack.indexOf(needle[0], from); at !== -1 && at + needle.length <= haystack.length; at = haystack.indexOf(needle[0], at + 1)) {
+		let index = 1;
+		while (index < needle.length && haystack[at + index] === needle[index]) index += 1;
+		if (index === needle.length) return at;
+	}
+	return -1;
+};
+/** The boundary of a `multipart/form-data` Content-Type, else `undefined`. */
+const boundaryOf = (contentType) => /;\s*boundary=(?:"([^"]+)"|([^;\s]+))/i.exec(contentType)?.slice(1).find(Boolean);
+const headerValue = (headers, name) => new RegExp(`^${name}:\\s*(.*)$`, "im").exec(headers)?.[1]?.trim();
+const parameter = (disposition, name) => new RegExp(`;\\s*${name}="([^"]*)"`, "i").exec(disposition)?.[1];
+/**
+* The parts of a whole `multipart/form-data` body, every one kept, also a file part with an empty field name, as
+* storage-js sends a `Blob`: Bun's `formData()` drops it. Undefined when the body does not parse.
+*/
+const multipartParts = (bytes, boundary) => {
+	const delimiter = encoder.encode(`--${boundary}`);
+	const next = encoder.encode(`\r\n--${boundary}`);
+	const parts = [];
+	let at = indexOf(bytes, delimiter, 0);
+	if (at === -1) return void 0;
+	at += delimiter.length;
+	while (decoder.decode(bytes.subarray(at, at + 2)) !== "--") {
+		if (decoder.decode(bytes.subarray(at, at + 2)) !== "\r\n") return void 0;
+		const headersEnd = indexOf(bytes, encoder.encode("\r\n\r\n"), at + 2);
+		const end = headersEnd === -1 ? -1 : indexOf(bytes, next, headersEnd + 4);
+		if (end === -1) return void 0;
+		const headers = decoder.decode(bytes.subarray(at + 2, headersEnd));
+		const disposition = headerValue(headers, "content-disposition") ?? "";
+		const filename = parameter(disposition, "filename");
+		const type = headerValue(headers, "content-type");
+		parts.push({
+			name: parameter(disposition, "name") ?? "",
+			...filename !== void 0 && { filename },
+			...type && { type },
+			body: bytes.subarray(headersEnd + 4, end)
+		});
+		at = end + next.length;
+	}
+	return parts;
+};
+//#endregion
+export { boundaryOf, multipartParts };