@rebasepro/server 0.25.0-canary.ge06257e → 0.25.1

package/dist/{GCSStorageController-CAKa_EFW.js → GCSStorageController-CRd9bFrc.js}

@@ -3,9 +3,9 @@ import __rebaseProcess from "process";
 globalThis.process ??= __rebaseProcess;
 __rebaseCreateRequire(import.meta.url);
 import { n as __exportAll } from "./rolldown-runtime-dW7B1o5h.js";
-import { t as ApiError } from "./errors-CHSJYpoy.js";
+import { t as ApiError } from "./errors-OMWkKSH-.js";
 import { c as listingPrefix, s as folderKey } from "./keys-COzQ2aE8.js";
-import { n as bufferWebStream, o as webStreamFrom, r as bytesView, t as validateUploadedFile } from "./upload-validation-pXcDy_EQ.js";
+import { n as bufferWebStream, o as webStreamFrom, r as bytesView, t as validateUploadedFile } from "./upload-validation-Bgo626uY.js";
 //#region src/storage/GCSStorageController.ts
 var GCSStorageController_exports = /* @__PURE__ */ __exportAll({ GCSStorageController: () => GCSStorageController });
 var gcsModule = null;
@@ -399,4 +399,4 @@ function misconfiguredOr(error, bucket) {
 //#endregion
 export { GCSStorageController_exports as n, GCSStorageController as t };
 
-//# sourceMappingURL=GCSStorageController-CAKa_EFW.js.map
+//# sourceMappingURL=GCSStorageController-CRd9bFrc.js.map

package/dist/{GCSStorageController-CAKa_EFW.js.map → GCSStorageController-CRd9bFrc.js.map}

@@ -1 +1 @@
-{"version":3,"file":"GCSStorageController-CAKa_EFW.js","names":[],"sources":["../src/storage/GCSStorageController.ts"],"sourcesContent":["/**\n * Google Cloud Storage controller (works with GCS and Firebase Storage)\n *\n * The `@google-cloud/storage` package is loaded lazily so it remains an\n * optional peer dependency — users who don't need GCS never pay for the\n * import cost or need it installed.\n */\n\nimport type { FileMetadata } from \"@google-cloud/storage\";\nimport {\n    StorageController,\n    GCSStorageConfig,\n    DEFAULT_MAX_FILE_SIZE,\n    type StoredObjectInfo,\n    type StoredObjectRange,\n    type PutObjectOptions,\n    type StoredObjectStream\n} from \"./types\";\nimport { folderKey, listingPrefix } from \"./keys\";\nimport { bufferWebStream, bytesView, webStreamFrom } from \"./streams\";\nimport { ApiError } from \"../api/errors\";\nimport { validateUploadedFile } from \"./upload-validation\";\nimport {\n    UploadFileProps,\n    UploadFileResult,\n    DownloadConfig,\n    DownloadMetadata,\n    StorageListResult,\n    StorageReference\n} from \"@rebasepro/types\";\n\n// ---------------------------------------------------------------------------\n// Lazy import of @google-cloud/storage\n// ---------------------------------------------------------------------------\n\nlet gcsModule: typeof import(\"@google-cloud/storage\") | null = null;\n\nasync function loadGCS(): Promise<typeof import(\"@google-cloud/storage\")> {\n    if (gcsModule) return gcsModule;\n    try {\n        gcsModule = await import(\"@google-cloud/storage\");\n        return gcsModule;\n    } catch {\n        throw new Error(\n            \"Google Cloud Storage is required for the GCS storage controller. \" +\n            \"Install it with: pnpm add @google-cloud/storage\"\n        );\n    }\n}\n\n// ---------------------------------------------------------------------------\n// GCSStorageController\n// ---------------------------------------------------------------------------\n\n/**\n * Google Cloud Storage implementation of `StorageController`.\n *\n * Works with standard GCS buckets **and** Firebase Storage buckets\n * (e.g. `\"my-project.appspot.com\"`).\n */\nexport class GCSStorageController implements StorageController {\n    private config: GCSStorageConfig;\n    private client: InstanceType<typeof import(\"@google-cloud/storage\").Storage> | null = null;\n\n    constructor(config: GCSStorageConfig) {\n        this.config = config;\n    }\n\n    // ------------------------------------------------------------------\n    // Lazy client initialisation\n    // ------------------------------------------------------------------\n\n    private async getClient(): Promise<InstanceType<typeof import(\"@google-cloud/storage\").Storage>> {\n        if (this.client) return this.client;\n        const { Storage } = await loadGCS();\n        this.client = new Storage({\n            projectId: this.config.projectId,\n            keyFilename: this.config.keyFilename,\n            credentials: this.config.credentials\n        });\n        return this.client;\n    }\n\n    // ------------------------------------------------------------------\n    // StorageController interface\n    // ------------------------------------------------------------------\n\n    getType(): \"gcs\" {\n        return \"gcs\";\n    }\n\n    /**\n     * The configured bucket, and the logical `default` that maps to it.\n     * @see S3StorageController.knownBuckets\n     */\n    knownBuckets(): string[] {\n        return [\"default\", this.config.bucket];\n    }\n\n    async putObject({\n        file,\n        key,\n        metadata,\n        bucket\n    }: UploadFileProps, options?: PutObjectOptions): Promise<UploadFileResult> {\n        if (options?.uploadLimits !== false) this.validateFile(file);\n\n        const usedBucket = this.getBucket(bucket);\n        const client = await this.getClient();\n        const gcsFile = client.bucket(usedBucket).file(key);\n\n        // Streamed from the file a chunk at a time. Read into one buffer first,\n        // it was held whole (twice, with the copy) for the length of the\n        // upload. Handed over as a function so the client can open it again to\n        // retry, which it does not do for a stream it was given once.\n        await gcsFile.save(() => byteChunks(file), {\n            contentType: file.type,\n            metadata: metadata ? { metadata: this.flattenMetadata(metadata) } : undefined\n        }).catch((error: unknown) => { throw misconfiguredOr(error, usedBucket); });\n\n        return {\n            key,\n            bucket: usedBucket,\n            storageUrl: `gs://${usedBucket}/${key}`\n        };\n    }\n\n    /**\n     * Read the object's metadata and nothing else — no signing.\n     *\n     * Signing needs a private key. With `keyFilename` or `credentials` the\n     * client has one; on Cloud Run, GKE or GCE it has only the metadata\n     * server's token, and falls back to the IAM Credentials `signBlob` API,\n     * which the runtime account may call on itself only when it holds\n     * `iam.serviceAccounts.signBlob` there. That is not a default grant.\n     */\n    async getMetadata(key: string, bucket?: string): Promise<DownloadMetadata | null> {\n        // Handle gs:// and s3:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const client = await this.getClient();\n            const [fileMetadata] = await client.bucket(resolvedBucket).file(resolvedPath).getMetadata();\n\n            return {\n                bucket: resolvedBucket,\n                fullPath: resolvedPath,\n                name: resolvedPath.split(\"/\").pop() || resolvedPath,\n                size: Number(fileMetadata.size) || 0,\n                contentType: fileMetadata.contentType || \"application/octet-stream\",\n                customMetadata: (fileMetadata.metadata as Record<string, string> | undefined) || {}\n            };\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) {\n                return null;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async getSignedUrl(key: string, bucket?: string): Promise<DownloadConfig> {\n        // Metadata first, to check existence and populate the response.\n        const metadata = await this.getMetadata(key, bucket);\n        if (!metadata) {\n            return {\n                url: null,\n                fileNotFound: true\n            };\n        }\n\n        const client = await this.getClient();\n        // Good for an hour. Server-side callers only: no route hands it out.\n        const [url] = await client.bucket(metadata.bucket).file(metadata.fullPath).getSignedUrl({\n            action: \"read\",\n            expires: Date.now() + 3600 * 1000\n        });\n\n        return {\n            url,\n            metadata\n        };\n    }\n\n    /**\n     * The object's bytes, type and version — all three of ONE generation.\n     *\n     * Described first, then read pinned to the generation described, as\n     * {@link getObjectStream} reads. It used to download and then ask for the\n     * metadata: an overwrite between the two calls answered the old bytes\n     * under the new generation's `updated`, and that `lastModified` keys the\n     * routes' `ETag` and transform cache, so the stale bytes — or a rendition\n     * of them — were served as current. A pinned read of a generation replaced\n     * since it was described fails, and the object is described again.\n     */\n    async getObject(key: string, bucket?: string): Promise<File | null> {\n        for (let attempt = 1; ; attempt++) {\n            const located = await this.locate(key, bucket);\n            if (!located) return null;\n\n            let contents: Buffer;\n            try {\n                contents = await this.readDecompressed(located);\n            } catch (error: unknown) {\n                // Replaced or deleted since it was described. Three\n                // overwrites inside one read is a write loop, not a race.\n                if (isNotFoundError(error) && attempt < 3) continue;\n                if (isNotFoundError(error)) {\n                    throw new Error(`The object \"${located.key}\" changed on every read; try again.`);\n                }\n                throw misconfiguredOr(error, located.bucket);\n            }\n\n            const contentType = located.meta.contentType || \"application/octet-stream\";\n            // The object's own version — see `S3StorageController.getObject`.\n            const updated = typeof located.meta.updated === \"string\" ? Date.parse(located.meta.updated) : NaN;\n            return new File([bytesView(contents)], located.key.split(\"/\").pop() || located.key, {\n                type: contentType,\n                lastModified: Number.isNaN(updated) ? undefined : updated\n            });\n        }\n    }\n\n    /**\n     * The bucket and key a call addresses: a `gs://` or `s3://` URL names its\n     * own bucket, anything else is a key in the given (or configured) bucket.\n     */\n    private resolveLocation(key: string, bucket?: string): { bucket: string; key: string } {\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const withoutProtocol = key.substring(match[0].length);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                return { bucket: withoutProtocol.substring(0, firstSlash), key: withoutProtocol.substring(firstSlash + 1) };\n            }\n        }\n        return { bucket: this.getBucket(bucket), key };\n    }\n\n    /** The object's metadata and where it lives, or `null` when there is no such object. */\n    private async locate(key: string, bucket?: string): Promise<{ bucket: string; key: string; meta: FileMetadata } | null> {\n        const location = this.resolveLocation(key, bucket);\n        const client = await this.getClient();\n        try {\n            const [meta] = await client.bucket(location.bucket).file(location.key).getMetadata();\n            return { ...location, meta };\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /**\n     * The generation just described, so an overwrite between describing an\n     * object and reading it fails the read instead of sending the new bytes\n     * under the old size and version.\n     */\n    private async pinnedFile(located: { bucket: string; key: string; meta: FileMetadata }) {\n        const client = await this.getClient();\n        const generation = located.meta.generation;\n        return client.bucket(located.bucket).file(located.key, generation !== undefined ? { generation } : {});\n    }\n\n    /**\n     * An object stored gzip-encoded (`gsutil cp -z`) is decompressed on the way\n     * out, so its stored size is not the size served and a range of the one is\n     * not a range of the other. Such an object is read whole, as every object\n     * used to be; nothing this server writes is stored that way.\n     */\n    private async readDecompressed(located: { bucket: string; key: string; meta: FileMetadata }): Promise<Buffer> {\n        const [contents] = await (await this.pinnedFile(located)).download();\n        return contents;\n    }\n\n    /** See {@link StorageController.statObject}. One metadata request; no body is read. */\n    async statObject(key: string, bucket?: string): Promise<StoredObjectInfo | null> {\n        const located = await this.locate(key, bucket);\n        if (!located) return null;\n        const info = storedObjectInfo(located.meta);\n        if (located.meta.contentEncoding === \"gzip\") {\n            return { ...info, size: (await this.readDecompressed(located)).byteLength };\n        }\n        return info;\n    }\n\n    /**\n     * See {@link StorageController.getObjectStream}. One metadata request, then\n     * a read of exactly the requested bytes, handed on as they arrive.\n     *\n     * The metadata comes first, not after the download as `getObject` has it:\n     * it is what pins the read to one generation.\n     */\n    async getObjectStream(\n        key: string,\n        options?: { bucket?: string; range?: StoredObjectRange }\n    ): Promise<StoredObjectStream | null> {\n        const located = await this.locate(key, options?.bucket);\n        if (!located) return null;\n        const info = storedObjectInfo(located.meta);\n        const range = options?.range;\n\n        if (located.meta.contentEncoding === \"gzip\") {\n            const contents = await this.readDecompressed(located);\n            const inRange = range && range.end < contents.byteLength && range.start <= range.end;\n            return {\n                ...info,\n                size: contents.byteLength,\n                stream: bufferWebStream(inRange ? contents.subarray(range.start, range.end + 1) : contents),\n                ...(inRange ? { range } : {})\n            };\n        }\n\n        const file = await this.pinnedFile(located);\n        return {\n            ...info,\n            // Opened on the first read: nothing is requested from the bucket\n            // for a stream the caller ends up not reading.\n            stream: webStreamFrom(() => file.createReadStream(range ? { start: range.start, end: range.end } : {})),\n            ...(range ? { range } : {})\n        };\n    }\n\n    async deleteObject(key: string, bucket?: string): Promise<void> {\n        // Handle gs:// and s3:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        const client = await this.getClient();\n        const gcsFile = client.bucket(resolvedBucket).file(resolvedPath);\n\n        // Not `ignoreNotFound`: the client ignores every 404 with it, a missing\n        // bucket's included, so a typo in the bucket name deleted \"successfully\".\n        try {\n            await gcsFile.delete();\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) return;\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async listObjects(prefix: string, options?: {\n        bucket?: string;\n        maxResults?: number;\n        pageToken?: string;\n    }): Promise<StorageListResult> {\n        const resolvedBucket = this.getBucket(options?.bucket);\n        const client = await this.getClient();\n        const gcsBucket = client.bucket(resolvedBucket);\n\n        // Fetch files (objects) matching the prefix\n        const folderPrefix = listingPrefix(prefix);\n        const [listed, , filesApiResponse] = await gcsBucket.getFiles({\n            prefix: folderPrefix,\n            delimiter: \"/\",\n            maxResults: options?.maxResults ?? 1000,\n            pageToken: options?.pageToken,\n            autoPaginate: false\n        }).catch((error: unknown) => { throw misconfiguredOr(error, resolvedBucket); });\n\n        // The folder's own marker object is not something in the folder —\n        // see `S3StorageController.listObjects`.\n        const files = listed.filter(file => file.name !== folderPrefix);\n        const items: StorageReference[] = files.map(file => ({\n            bucket: resolvedBucket,\n            fullPath: file.name,\n            name: file.name.split(\"/\").pop() || \"\",\n            // Each listed object arrives with its full metadata, so a folder\n            // can be shown without a metadata request per file.\n            ...listedFacts(file.metadata),\n            parent: null as never,\n            root: null as never,\n            toString: () => `gs://${resolvedBucket}/${file.name}`\n        }));\n\n        // Common prefixes (folder-like entries) come from the API response\n        const apiPrefixes: string[] =\n            (filesApiResponse as Record<string, unknown> | undefined)?.prefixes as string[] ?? [];\n\n        const prefixes: StorageReference[] = apiPrefixes.map(p => {\n            // Without the trailing slash GCS puts on a common prefix, so a\n            // `fullPath` from a listing is a key any controller accepts.\n            const folder = folderKey(p);\n            return {\n                bucket: resolvedBucket,\n                fullPath: folder,\n                name: folder.split(\"/\").pop() || \"\",\n                parent: null as never,\n                root: null as never,\n                toString: () => `gs://${resolvedBucket}/${folder}`\n            };\n        });\n\n        // The next page token is returned on the query object (second element)\n        const nextPageToken =\n            (filesApiResponse as Record<string, unknown> | undefined)?.nextPageToken as string | undefined;\n\n        return {\n            items,\n            prefixes,\n            nextPageToken\n        };\n    }\n\n    // ------------------------------------------------------------------\n    // Private helpers\n    // ------------------------------------------------------------------\n\n    /** See {@link StorageController.maxFileSize}. */\n    maxFileSize(): number {\n        return this.config.maxFileSize ?? DEFAULT_MAX_FILE_SIZE;\n    }\n\n    /**\n     * Validate file before upload\n     */\n    private validateFile(file: File): void {\n        validateUploadedFile(file, this.maxFileSize(), this.config.allowedMimeTypes);\n    }\n\n    /**\n     * Get the bucket name — either from parameter or config.\n     */\n    private getBucket(bucket?: string): string {\n        // \"default\" is a logical bucket name used by local storage;\n        // for GCS it should resolve to the configured bucket.\n        if (!bucket || bucket === \"default\") return this.config.bucket;\n        return bucket;\n    }\n\n    /**\n     * Flatten nested metadata to string values (GCS custom metadata requirement)\n     */\n    private flattenMetadata(metadata: Record<string, unknown>): Record<string, string> {\n        const flattened: Record<string, string> = {};\n        for (const [key, value] of Object.entries(metadata)) {\n            if (typeof value === \"string\") {\n                flattened[key] = value;\n            } else if (value !== undefined && value !== null) {\n                flattened[key] = JSON.stringify(value);\n            }\n        }\n        return flattened;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// Error helpers\n// ---------------------------------------------------------------------------\n\n/** A file's bytes, a chunk at a time — what `File.save` pipes from. */\nasync function* byteChunks(file: Blob): AsyncGenerator<Uint8Array> {\n    const reader = file.stream().getReader();\n    try {\n        for (;;) {\n            const { done, value } = await reader.read();\n            if (done) return;\n            yield value;\n        }\n    } finally {\n        reader.releaseLock();\n    }\n}\n\n/** What a listing entry says about its object, from the metadata the listing carried. */\nfunction listedFacts(meta: FileMetadata | undefined): Pick<StorageReference, \"size\" | \"updated\" | \"contentType\"> {\n    if (!meta) return {};\n    const size = meta.size === undefined ? NaN : Number(meta.size);\n    return {\n        ...(Number.isFinite(size) ? { size } : {}),\n        ...(typeof meta.updated === \"string\" ? { updated: meta.updated } : {}),\n        ...(typeof meta.contentType === \"string\" && meta.contentType ? { contentType: meta.contentType } : {})\n    };\n}\n\n/** What `statObject` reports, from an object's metadata. */\nfunction storedObjectInfo(meta: FileMetadata): StoredObjectInfo {\n    // The object's own version — see `S3StorageController.getObject`.\n    const updated = typeof meta.updated === \"string\" ? Date.parse(meta.updated) : NaN;\n    return {\n        size: Number(meta.size) || 0,\n        contentType: meta.contentType || \"application/octet-stream\",\n        lastModified: Number.isNaN(updated) ? Date.now() : updated\n    };\n}\n\n/**\n * Check whether an error represents a 404 / Not Found from the GCS client.\n */\nfunction isNotFoundError(error: unknown): boolean {\n    if (typeof error !== \"object\" || error === null) return false;\n    // A missing bucket is a 404 too. Read as a missing object, a typo in the\n    // bucket name made every file \"not found\" and every delete a success.\n    if (isMissingBucketError(error)) return false;\n    const err = error as Record<string, unknown>;\n    if (err[\"code\"] === 404) return true;\n    if (typeof err[\"message\"] === \"string\" && /not found/i.test(err[\"message\"])) return true;\n    return false;\n}\n\n/** GCS's answer for a bucket that does not exist: a 404 whose message says so. */\nfunction isMissingBucketError(error: object): boolean {\n    return \"message\" in error && typeof error.message === \"string\" && /bucket does not exist/i.test(error.message);\n}\n\n/**\n * A provider error that says this deployment's storage is misconfigured — the\n * bucket does not exist, or the credentials may not use it — as a\n * `502 STORAGE_MISCONFIGURED` naming the bucket; or the error as it was.\n *\n * These used to reach the caller as a bare 500 \"Internal Server Error\".\n */\nfunction misconfiguredOr(error: unknown, bucket: string): unknown {\n    if (typeof error !== \"object\" || error === null) return error;\n    if (isMissingBucketError(error)) {\n        return new ApiError(502, \"STORAGE_MISCONFIGURED\",\n            `The storage bucket \"${bucket}\" does not exist. Check the bucket name this source is configured with (GCS_BUCKET, or GCS_BUCKET__<KEY> for a named source).`,\n            { bucket, reason: \"NoSuchBucket\" });\n    }\n    if (\"code\" in error && (error.code === 401 || error.code === 403)) {\n        return new ApiError(502, \"STORAGE_MISCONFIGURED\",\n            `The storage provider refused this deployment's credentials for bucket \"${bucket}\". Check the service account and its permissions on the bucket.`,\n            { bucket, reason: \"AccessDenied\" });\n    }\n    return error;\n}\n"],"mappings":";;;;;;;;;;AAmCA,IAAI,YAA2D;AAE/D,eAAe,UAA2D;CACtE,IAAI,WAAW,OAAO;CACtB,IAAI;EACA,YAAY,MAAM,OAAO;EACzB,OAAO;CACX,QAAQ;EACJ,MAAM,IAAI,MACN,kHAEJ;CACJ;AACJ;;;;;;;AAYA,IAAa,uBAAb,MAA+D;CAC3D;CACA,SAAsF;CAEtF,YAAY,QAA0B;EAClC,KAAK,SAAS;CAClB;CAMA,MAAc,YAAmF;EAC7F,IAAI,KAAK,QAAQ,OAAO,KAAK;EAC7B,MAAM,EAAE,YAAY,MAAM,QAAQ;EAClC,KAAK,SAAS,IAAI,QAAQ;GACtB,WAAW,KAAK,OAAO;GACvB,aAAa,KAAK,OAAO;GACzB,aAAa,KAAK,OAAO;EAC7B,CAAC;EACD,OAAO,KAAK;CAChB;CAMA,UAAiB;EACb,OAAO;CACX;;;;;CAMA,eAAyB;EACrB,OAAO,CAAC,WAAW,KAAK,OAAO,MAAM;CACzC;CAEA,MAAM,UAAU,EACZ,MACA,KACA,UACA,UACgB,SAAuD;EACvE,IAAI,SAAS,iBAAiB,OAAO,KAAK,aAAa,IAAI;EAE3D,MAAM,aAAa,KAAK,UAAU,MAAM;EAQxC,OANgB,MADK,KAAK,UAAU,EAAA,CACb,OAAO,UAAU,CAAC,CAAC,KAAK,GAMzC,CAAA,CAAQ,WAAW,WAAW,IAAI,GAAG;GACvC,aAAa,KAAK;GAClB,UAAU,WAAW,EAAE,UAAU,KAAK,gBAAgB,QAAQ,EAAE,IAAI,KAAA;EACxE,CAAC,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,UAAU;EAAG,CAAC;EAE1E,OAAO;GACH;GACA,QAAQ;GACR,YAAY,QAAQ,WAAW,GAAG;EACtC;CACJ;;;;;;;;;;CAWA,MAAM,YAAY,KAAa,QAAmD;EAE9E,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GAEA,MAAM,CAAC,gBAAgB,OAAM,MADR,KAAK,UAAU,EAAA,CACA,OAAO,cAAc,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,YAAY;GAE1F,OAAO;IACH,QAAQ;IACR,UAAU;IACV,MAAM,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IACvC,MAAM,OAAO,aAAa,IAAI,KAAK;IACnC,aAAa,aAAa,eAAe;IACzC,gBAAiB,aAAa,YAAmD,CAAC;GACtF;EACJ,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GACrB,OAAO;GAEX,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,aAAa,KAAa,QAA0C;EAEtE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,MAAM;EACnD,IAAI,CAAC,UACD,OAAO;GACH,KAAK;GACL,cAAc;EAClB;EAKJ,MAAM,CAAC,OAAO,OAAM,MAFC,KAAK,UAAU,EAAA,CAET,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,QAAQ,CAAC,CAAC,aAAa;GACpF,QAAQ;GACR,SAAS,KAAK,IAAI,IAAI,OAAO;EACjC,CAAC;EAED,OAAO;GACH;GACA;EACJ;CACJ;;;;;;;;;;;;CAaA,MAAM,UAAU,KAAa,QAAuC;EAChE,KAAK,IAAI,UAAU,IAAK,WAAW;GAC/B,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM;GAC7C,IAAI,CAAC,SAAS,OAAO;GAErB,IAAI;GACJ,IAAI;IACA,WAAW,MAAM,KAAK,iBAAiB,OAAO;GAClD,SAAS,OAAgB;IAGrB,IAAI,gBAAgB,KAAK,KAAK,UAAU,GAAG;IAC3C,IAAI,gBAAgB,KAAK,GACrB,MAAM,IAAI,MAAM,eAAe,QAAQ,IAAI,oCAAoC;IAEnF,MAAM,gBAAgB,OAAO,QAAQ,MAAM;GAC/C;GAEA,MAAM,cAAc,QAAQ,KAAK,eAAe;GAEhD,MAAM,UAAU,OAAO,QAAQ,KAAK,YAAY,WAAW,KAAK,MAAM,QAAQ,KAAK,OAAO,IAAI;GAC9F,OAAO,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,KAAK;IAChF,MAAM;IACN,cAAc,OAAO,MAAM,OAAO,IAAI,KAAA,IAAY;GACtD,CAAC;EACL;CACJ;;;;;CAMA,gBAAwB,KAAa,QAAkD;EACnF,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,kBAAkB,IAAI,UAAU,MAAM,EAAE,CAAC,MAAM;GACrD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GACb,OAAO;IAAE,QAAQ,gBAAgB,UAAU,GAAG,UAAU;IAAG,KAAK,gBAAgB,UAAU,aAAa,CAAC;GAAE;EAElH;EACA,OAAO;GAAE,QAAQ,KAAK,UAAU,MAAM;GAAG;EAAI;CACjD;;CAGA,MAAc,OAAO,KAAa,QAAsF;EACpH,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,CAAC,QAAQ,MAAM,OAAO,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,YAAY;GACnF,OAAO;IAAE,GAAG;IAAU;GAAK;EAC/B,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GAAG,OAAO;GACnC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;;;;;CAOA,MAAc,WAAW,SAA8D;EACnF,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,aAAa,QAAQ,KAAK;EAChC,OAAO,OAAO,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,QAAQ,KAAK,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC,CAAC;CACzG;;;;;;;CAQA,MAAc,iBAAiB,SAA+E;EAC1G,MAAM,CAAC,YAAY,OAAO,MAAM,KAAK,WAAW,OAAO,EAAA,CAAG,SAAS;EACnE,OAAO;CACX;;CAGA,MAAM,WAAW,KAAa,QAAmD;EAC7E,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM;EAC7C,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,OAAO,iBAAiB,QAAQ,IAAI;EAC1C,IAAI,QAAQ,KAAK,oBAAoB,QACjC,OAAO;GAAE,GAAG;GAAM,OAAO,MAAM,KAAK,iBAAiB,OAAO,EAAA,CAAG;EAAW;EAE9E,OAAO;CACX;;;;;;;;CASA,MAAM,gBACF,KACA,SACkC;EAClC,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,SAAS,MAAM;EACtD,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,OAAO,iBAAiB,QAAQ,IAAI;EAC1C,MAAM,QAAQ,SAAS;EAEvB,IAAI,QAAQ,KAAK,oBAAoB,QAAQ;GACzC,MAAM,WAAW,MAAM,KAAK,iBAAiB,OAAO;GACpD,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,cAAc,MAAM,SAAS,MAAM;GACjF,OAAO;IACH,GAAG;IACH,MAAM,SAAS;IACf,QAAQ,gBAAgB,UAAU,SAAS,SAAS,MAAM,OAAO,MAAM,MAAM,CAAC,IAAI,QAAQ;IAC1F,GAAI,UAAU,EAAE,MAAM,IAAI,CAAC;GAC/B;EACJ;EAEA,MAAM,OAAO,MAAM,KAAK,WAAW,OAAO;EAC1C,OAAO;GACH,GAAG;GAGH,QAAQ,oBAAoB,KAAK,iBAAiB,QAAQ;IAAE,OAAO,MAAM;IAAO,KAAK,MAAM;GAAI,IAAI,CAAC,CAAC,CAAC;GACtG,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;EAC7B;CACJ;CAEA,MAAM,aAAa,KAAa,QAAgC;EAE5D,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAGA,MAAM,WAAU,MADK,KAAK,UAAU,EAAA,CACb,OAAO,cAAc,CAAC,CAAC,KAAK,YAAY;EAI/D,IAAI;GACA,MAAM,QAAQ,OAAO;EACzB,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GAAG;GAC5B,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,YAAY,QAAgB,SAIH;EAC3B,MAAM,iBAAiB,KAAK,UAAU,SAAS,MAAM;EAErD,MAAM,aAAY,MADG,KAAK,UAAU,EAAA,CACX,OAAO,cAAc;EAG9C,MAAM,eAAe,cAAc,MAAM;EACzC,MAAM,CAAC,UAAU,oBAAoB,MAAM,UAAU,SAAS;GAC1D,QAAQ;GACR,WAAW;GACX,YAAY,SAAS,cAAc;GACnC,WAAW,SAAS;GACpB,cAAc;EAClB,CAAC,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,cAAc;EAAG,CAAC;EAuC9E,OAAO;GACH,OApCU,OAAO,QAAO,SAAQ,KAAK,SAAS,YAChB,CAAA,CAAM,KAAI,UAAS;IACjD,QAAQ;IACR,UAAU,KAAK;IACf,MAAM,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IAGpC,GAAG,YAAY,KAAK,QAAQ;IAC5B,QAAQ;IACR,MAAM;IACN,gBAAgB,QAAQ,eAAe,GAAG,KAAK;GACnD,EAyBI;GACA,WAtBC,kBAA0D,YAAwB,CAAC,EAAA,CAEvC,KAAI,MAAK;IAGtD,MAAM,SAAS,UAAU,CAAC;IAC1B,OAAO;KACH,QAAQ;KACR,UAAU;KACV,MAAM,OAAO,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACjC,QAAQ;KACR,MAAM;KACN,gBAAgB,QAAQ,eAAe,GAAG;IAC9C;GACJ,CAQI;GACA,eALC,kBAA0D;EAM/D;CACJ;;CAOA,cAAsB;EAClB,OAAO,KAAK,OAAO,eAAA;CACvB;;;;CAKA,aAAqB,MAAkB;EACnC,qBAAqB,MAAM,KAAK,YAAY,GAAG,KAAK,OAAO,gBAAgB;CAC/E;;;;CAKA,UAAkB,QAAyB;EAGvC,IAAI,CAAC,UAAU,WAAW,WAAW,OAAO,KAAK,OAAO;EACxD,OAAO;CACX;;;;CAKA,gBAAwB,UAA2D;EAC/E,MAAM,YAAoC,CAAC;EAC3C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAC9C,IAAI,OAAO,UAAU,UACjB,UAAU,OAAO;OACd,IAAI,UAAU,KAAA,KAAa,UAAU,MACxC,UAAU,OAAO,KAAK,UAAU,KAAK;EAG7C,OAAO;CACX;AACJ;;AAOA,gBAAgB,WAAW,MAAwC;CAC/D,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC,UAAU;CACvC,IAAI;EACA,SAAS;GACL,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,MAAM;EACV;CACJ,UAAU;EACN,OAAO,YAAY;CACvB;AACJ;;AAGA,SAAS,YAAY,MAA4F;CAC7G,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,MAAM,OAAO,KAAK,SAAS,KAAA,IAAY,MAAM,OAAO,KAAK,IAAI;CAC7D,OAAO;EACH,GAAI,OAAO,SAAS,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;EACxC,GAAI,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;EACpE,GAAI,OAAO,KAAK,gBAAgB,YAAY,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;CACxG;AACJ;;AAGA,SAAS,iBAAiB,MAAsC;CAE5D,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,MAAM,KAAK,OAAO,IAAI;CAC9E,OAAO;EACH,MAAM,OAAO,KAAK,IAAI,KAAK;EAC3B,aAAa,KAAK,eAAe;EACjC,cAAc,OAAO,MAAM,OAAO,IAAI,KAAK,IAAI,IAAI;CACvD;AACJ;;;;AAKA,SAAS,gBAAgB,OAAyB;CAC9C,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CAGxD,IAAI,qBAAqB,KAAK,GAAG,OAAO;CACxC,MAAM,MAAM;CACZ,IAAI,IAAI,YAAY,KAAK,OAAO;CAChC,IAAI,OAAO,IAAI,eAAe,YAAY,aAAa,KAAK,IAAI,UAAU,GAAG,OAAO;CACpF,OAAO;AACX;;AAGA,SAAS,qBAAqB,OAAwB;CAClD,OAAO,aAAa,SAAS,OAAO,MAAM,YAAY,YAAY,yBAAyB,KAAK,MAAM,OAAO;AACjH;;;;;;;;AASA,SAAS,gBAAgB,OAAgB,QAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,IAAI,qBAAqB,KAAK,GAC1B,OAAO,IAAI,SAAS,KAAK,yBACrB,uBAAuB,OAAO,gIAC9B;EAAE;EAAQ,QAAQ;CAAe,CAAC;CAE1C,IAAI,UAAU,UAAU,MAAM,SAAS,OAAO,MAAM,SAAS,MACzD,OAAO,IAAI,SAAS,KAAK,yBACrB,0EAA0E,OAAO,kEACjF;EAAE;EAAQ,QAAQ;CAAe,CAAC;CAE1C,OAAO;AACX"}
+{"version":3,"file":"GCSStorageController-CRd9bFrc.js","names":[],"sources":["../src/storage/GCSStorageController.ts"],"sourcesContent":["/**\n * Google Cloud Storage controller (works with GCS and Firebase Storage)\n *\n * The `@google-cloud/storage` package is loaded lazily so it remains an\n * optional peer dependency — users who don't need GCS never pay for the\n * import cost or need it installed.\n */\n\nimport type { FileMetadata } from \"@google-cloud/storage\";\nimport {\n    StorageController,\n    GCSStorageConfig,\n    DEFAULT_MAX_FILE_SIZE,\n    type StoredObjectInfo,\n    type StoredObjectRange,\n    type PutObjectOptions,\n    type StoredObjectStream\n} from \"./types\";\nimport { folderKey, listingPrefix } from \"./keys\";\nimport { bufferWebStream, bytesView, webStreamFrom } from \"./streams\";\nimport { ApiError } from \"../api/errors\";\nimport { validateUploadedFile } from \"./upload-validation\";\nimport {\n    UploadFileProps,\n    UploadFileResult,\n    DownloadConfig,\n    DownloadMetadata,\n    StorageListResult,\n    StorageReference\n} from \"@rebasepro/types\";\n\n// ---------------------------------------------------------------------------\n// Lazy import of @google-cloud/storage\n// ---------------------------------------------------------------------------\n\nlet gcsModule: typeof import(\"@google-cloud/storage\") | null = null;\n\nasync function loadGCS(): Promise<typeof import(\"@google-cloud/storage\")> {\n    if (gcsModule) return gcsModule;\n    try {\n        gcsModule = await import(\"@google-cloud/storage\");\n        return gcsModule;\n    } catch {\n        throw new Error(\n            \"Google Cloud Storage is required for the GCS storage controller. \" +\n            \"Install it with: pnpm add @google-cloud/storage\"\n        );\n    }\n}\n\n// ---------------------------------------------------------------------------\n// GCSStorageController\n// ---------------------------------------------------------------------------\n\n/**\n * Google Cloud Storage implementation of `StorageController`.\n *\n * Works with standard GCS buckets **and** Firebase Storage buckets\n * (e.g. `\"my-project.appspot.com\"`).\n */\nexport class GCSStorageController implements StorageController {\n    private config: GCSStorageConfig;\n    private client: InstanceType<typeof import(\"@google-cloud/storage\").Storage> | null = null;\n\n    constructor(config: GCSStorageConfig) {\n        this.config = config;\n    }\n\n    // ------------------------------------------------------------------\n    // Lazy client initialisation\n    // ------------------------------------------------------------------\n\n    private async getClient(): Promise<InstanceType<typeof import(\"@google-cloud/storage\").Storage>> {\n        if (this.client) return this.client;\n        const { Storage } = await loadGCS();\n        this.client = new Storage({\n            projectId: this.config.projectId,\n            keyFilename: this.config.keyFilename,\n            credentials: this.config.credentials\n        });\n        return this.client;\n    }\n\n    // ------------------------------------------------------------------\n    // StorageController interface\n    // ------------------------------------------------------------------\n\n    getType(): \"gcs\" {\n        return \"gcs\";\n    }\n\n    /**\n     * The configured bucket, and the logical `default` that maps to it.\n     * @see S3StorageController.knownBuckets\n     */\n    knownBuckets(): string[] {\n        return [\"default\", this.config.bucket];\n    }\n\n    async putObject({\n        file,\n        key,\n        metadata,\n        bucket\n    }: UploadFileProps, options?: PutObjectOptions): Promise<UploadFileResult> {\n        if (options?.uploadLimits !== false) this.validateFile(file);\n\n        const usedBucket = this.getBucket(bucket);\n        const client = await this.getClient();\n        const gcsFile = client.bucket(usedBucket).file(key);\n\n        // Streamed from the file a chunk at a time. Read into one buffer first,\n        // it was held whole (twice, with the copy) for the length of the\n        // upload. Handed over as a function so the client can open it again to\n        // retry, which it does not do for a stream it was given once.\n        await gcsFile.save(() => byteChunks(file), {\n            contentType: file.type,\n            metadata: metadata ? { metadata: this.flattenMetadata(metadata) } : undefined\n        }).catch((error: unknown) => { throw misconfiguredOr(error, usedBucket); });\n\n        return {\n            key,\n            bucket: usedBucket,\n            storageUrl: `gs://${usedBucket}/${key}`\n        };\n    }\n\n    /**\n     * Read the object's metadata and nothing else — no signing.\n     *\n     * Signing needs a private key. With `keyFilename` or `credentials` the\n     * client has one; on Cloud Run, GKE or GCE it has only the metadata\n     * server's token, and falls back to the IAM Credentials `signBlob` API,\n     * which the runtime account may call on itself only when it holds\n     * `iam.serviceAccounts.signBlob` there. That is not a default grant.\n     */\n    async getMetadata(key: string, bucket?: string): Promise<DownloadMetadata | null> {\n        // Handle gs:// and s3:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const client = await this.getClient();\n            const [fileMetadata] = await client.bucket(resolvedBucket).file(resolvedPath).getMetadata();\n\n            return {\n                bucket: resolvedBucket,\n                fullPath: resolvedPath,\n                name: resolvedPath.split(\"/\").pop() || resolvedPath,\n                size: Number(fileMetadata.size) || 0,\n                contentType: fileMetadata.contentType || \"application/octet-stream\",\n                customMetadata: (fileMetadata.metadata as Record<string, string> | undefined) || {}\n            };\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) {\n                return null;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async getSignedUrl(key: string, bucket?: string): Promise<DownloadConfig> {\n        // Metadata first, to check existence and populate the response.\n        const metadata = await this.getMetadata(key, bucket);\n        if (!metadata) {\n            return {\n                url: null,\n                fileNotFound: true\n            };\n        }\n\n        const client = await this.getClient();\n        // Good for an hour. Server-side callers only: no route hands it out.\n        const [url] = await client.bucket(metadata.bucket).file(metadata.fullPath).getSignedUrl({\n            action: \"read\",\n            expires: Date.now() + 3600 * 1000\n        });\n\n        return {\n            url,\n            metadata\n        };\n    }\n\n    /**\n     * The object's bytes, type and version — all three of ONE generation.\n     *\n     * Described first, then read pinned to the generation described, as\n     * {@link getObjectStream} reads. It used to download and then ask for the\n     * metadata: an overwrite between the two calls answered the old bytes\n     * under the new generation's `updated`, and that `lastModified` keys the\n     * routes' `ETag` and transform cache, so the stale bytes — or a rendition\n     * of them — were served as current. A pinned read of a generation replaced\n     * since it was described fails, and the object is described again.\n     */\n    async getObject(key: string, bucket?: string): Promise<File | null> {\n        for (let attempt = 1; ; attempt++) {\n            const located = await this.locate(key, bucket);\n            if (!located) return null;\n\n            let contents: Buffer;\n            try {\n                contents = await this.readDecompressed(located);\n            } catch (error: unknown) {\n                // Replaced or deleted since it was described. Three\n                // overwrites inside one read is a write loop, not a race.\n                if (isNotFoundError(error) && attempt < 3) continue;\n                if (isNotFoundError(error)) {\n                    throw new Error(`The object \"${located.key}\" changed on every read; try again.`);\n                }\n                throw misconfiguredOr(error, located.bucket);\n            }\n\n            const contentType = located.meta.contentType || \"application/octet-stream\";\n            // The object's own version — see `S3StorageController.getObject`.\n            const updated = typeof located.meta.updated === \"string\" ? Date.parse(located.meta.updated) : NaN;\n            return new File([bytesView(contents)], located.key.split(\"/\").pop() || located.key, {\n                type: contentType,\n                lastModified: Number.isNaN(updated) ? undefined : updated\n            });\n        }\n    }\n\n    /**\n     * The bucket and key a call addresses: a `gs://` or `s3://` URL names its\n     * own bucket, anything else is a key in the given (or configured) bucket.\n     */\n    private resolveLocation(key: string, bucket?: string): { bucket: string; key: string } {\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const withoutProtocol = key.substring(match[0].length);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                return { bucket: withoutProtocol.substring(0, firstSlash), key: withoutProtocol.substring(firstSlash + 1) };\n            }\n        }\n        return { bucket: this.getBucket(bucket), key };\n    }\n\n    /** The object's metadata and where it lives, or `null` when there is no such object. */\n    private async locate(key: string, bucket?: string): Promise<{ bucket: string; key: string; meta: FileMetadata } | null> {\n        const location = this.resolveLocation(key, bucket);\n        const client = await this.getClient();\n        try {\n            const [meta] = await client.bucket(location.bucket).file(location.key).getMetadata();\n            return { ...location, meta };\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /**\n     * The generation just described, so an overwrite between describing an\n     * object and reading it fails the read instead of sending the new bytes\n     * under the old size and version.\n     */\n    private async pinnedFile(located: { bucket: string; key: string; meta: FileMetadata }) {\n        const client = await this.getClient();\n        const generation = located.meta.generation;\n        return client.bucket(located.bucket).file(located.key, generation !== undefined ? { generation } : {});\n    }\n\n    /**\n     * An object stored gzip-encoded (`gsutil cp -z`) is decompressed on the way\n     * out, so its stored size is not the size served and a range of the one is\n     * not a range of the other. Such an object is read whole, as every object\n     * used to be; nothing this server writes is stored that way.\n     */\n    private async readDecompressed(located: { bucket: string; key: string; meta: FileMetadata }): Promise<Buffer> {\n        const [contents] = await (await this.pinnedFile(located)).download();\n        return contents;\n    }\n\n    /** See {@link StorageController.statObject}. One metadata request; no body is read. */\n    async statObject(key: string, bucket?: string): Promise<StoredObjectInfo | null> {\n        const located = await this.locate(key, bucket);\n        if (!located) return null;\n        const info = storedObjectInfo(located.meta);\n        if (located.meta.contentEncoding === \"gzip\") {\n            return { ...info, size: (await this.readDecompressed(located)).byteLength };\n        }\n        return info;\n    }\n\n    /**\n     * See {@link StorageController.getObjectStream}. One metadata request, then\n     * a read of exactly the requested bytes, handed on as they arrive.\n     *\n     * The metadata comes first, not after the download as `getObject` has it:\n     * it is what pins the read to one generation.\n     */\n    async getObjectStream(\n        key: string,\n        options?: { bucket?: string; range?: StoredObjectRange }\n    ): Promise<StoredObjectStream | null> {\n        const located = await this.locate(key, options?.bucket);\n        if (!located) return null;\n        const info = storedObjectInfo(located.meta);\n        const range = options?.range;\n\n        if (located.meta.contentEncoding === \"gzip\") {\n            const contents = await this.readDecompressed(located);\n            const inRange = range && range.end < contents.byteLength && range.start <= range.end;\n            return {\n                ...info,\n                size: contents.byteLength,\n                stream: bufferWebStream(inRange ? contents.subarray(range.start, range.end + 1) : contents),\n                ...(inRange ? { range } : {})\n            };\n        }\n\n        const file = await this.pinnedFile(located);\n        return {\n            ...info,\n            // Opened on the first read: nothing is requested from the bucket\n            // for a stream the caller ends up not reading.\n            stream: webStreamFrom(() => file.createReadStream(range ? { start: range.start, end: range.end } : {})),\n            ...(range ? { range } : {})\n        };\n    }\n\n    async deleteObject(key: string, bucket?: string): Promise<void> {\n        // Handle gs:// and s3:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        const client = await this.getClient();\n        const gcsFile = client.bucket(resolvedBucket).file(resolvedPath);\n\n        // Not `ignoreNotFound`: the client ignores every 404 with it, a missing\n        // bucket's included, so a typo in the bucket name deleted \"successfully\".\n        try {\n            await gcsFile.delete();\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) return;\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async listObjects(prefix: string, options?: {\n        bucket?: string;\n        maxResults?: number;\n        pageToken?: string;\n    }): Promise<StorageListResult> {\n        const resolvedBucket = this.getBucket(options?.bucket);\n        const client = await this.getClient();\n        const gcsBucket = client.bucket(resolvedBucket);\n\n        // Fetch files (objects) matching the prefix\n        const folderPrefix = listingPrefix(prefix);\n        const [listed, , filesApiResponse] = await gcsBucket.getFiles({\n            prefix: folderPrefix,\n            delimiter: \"/\",\n            maxResults: options?.maxResults ?? 1000,\n            pageToken: options?.pageToken,\n            autoPaginate: false\n        }).catch((error: unknown) => { throw misconfiguredOr(error, resolvedBucket); });\n\n        // The folder's own marker object is not something in the folder —\n        // see `S3StorageController.listObjects`.\n        const files = listed.filter(file => file.name !== folderPrefix);\n        const items: StorageReference[] = files.map(file => ({\n            bucket: resolvedBucket,\n            fullPath: file.name,\n            name: file.name.split(\"/\").pop() || \"\",\n            // Each listed object arrives with its full metadata, so a folder\n            // can be shown without a metadata request per file.\n            ...listedFacts(file.metadata),\n            parent: null as never,\n            root: null as never,\n            toString: () => `gs://${resolvedBucket}/${file.name}`\n        }));\n\n        // Common prefixes (folder-like entries) come from the API response\n        const apiPrefixes: string[] =\n            (filesApiResponse as Record<string, unknown> | undefined)?.prefixes as string[] ?? [];\n\n        const prefixes: StorageReference[] = apiPrefixes.map(p => {\n            // Without the trailing slash GCS puts on a common prefix, so a\n            // `fullPath` from a listing is a key any controller accepts.\n            const folder = folderKey(p);\n            return {\n                bucket: resolvedBucket,\n                fullPath: folder,\n                name: folder.split(\"/\").pop() || \"\",\n                parent: null as never,\n                root: null as never,\n                toString: () => `gs://${resolvedBucket}/${folder}`\n            };\n        });\n\n        // The next page token is returned on the query object (second element)\n        const nextPageToken =\n            (filesApiResponse as Record<string, unknown> | undefined)?.nextPageToken as string | undefined;\n\n        return {\n            items,\n            prefixes,\n            nextPageToken\n        };\n    }\n\n    // ------------------------------------------------------------------\n    // Private helpers\n    // ------------------------------------------------------------------\n\n    /** See {@link StorageController.maxFileSize}. */\n    maxFileSize(): number {\n        return this.config.maxFileSize ?? DEFAULT_MAX_FILE_SIZE;\n    }\n\n    /**\n     * Validate file before upload\n     */\n    private validateFile(file: File): void {\n        validateUploadedFile(file, this.maxFileSize(), this.config.allowedMimeTypes);\n    }\n\n    /**\n     * Get the bucket name — either from parameter or config.\n     */\n    private getBucket(bucket?: string): string {\n        // \"default\" is a logical bucket name used by local storage;\n        // for GCS it should resolve to the configured bucket.\n        if (!bucket || bucket === \"default\") return this.config.bucket;\n        return bucket;\n    }\n\n    /**\n     * Flatten nested metadata to string values (GCS custom metadata requirement)\n     */\n    private flattenMetadata(metadata: Record<string, unknown>): Record<string, string> {\n        const flattened: Record<string, string> = {};\n        for (const [key, value] of Object.entries(metadata)) {\n            if (typeof value === \"string\") {\n                flattened[key] = value;\n            } else if (value !== undefined && value !== null) {\n                flattened[key] = JSON.stringify(value);\n            }\n        }\n        return flattened;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// Error helpers\n// ---------------------------------------------------------------------------\n\n/** A file's bytes, a chunk at a time — what `File.save` pipes from. */\nasync function* byteChunks(file: Blob): AsyncGenerator<Uint8Array> {\n    const reader = file.stream().getReader();\n    try {\n        for (;;) {\n            const { done, value } = await reader.read();\n            if (done) return;\n            yield value;\n        }\n    } finally {\n        reader.releaseLock();\n    }\n}\n\n/** What a listing entry says about its object, from the metadata the listing carried. */\nfunction listedFacts(meta: FileMetadata | undefined): Pick<StorageReference, \"size\" | \"updated\" | \"contentType\"> {\n    if (!meta) return {};\n    const size = meta.size === undefined ? NaN : Number(meta.size);\n    return {\n        ...(Number.isFinite(size) ? { size } : {}),\n        ...(typeof meta.updated === \"string\" ? { updated: meta.updated } : {}),\n        ...(typeof meta.contentType === \"string\" && meta.contentType ? { contentType: meta.contentType } : {})\n    };\n}\n\n/** What `statObject` reports, from an object's metadata. */\nfunction storedObjectInfo(meta: FileMetadata): StoredObjectInfo {\n    // The object's own version — see `S3StorageController.getObject`.\n    const updated = typeof meta.updated === \"string\" ? Date.parse(meta.updated) : NaN;\n    return {\n        size: Number(meta.size) || 0,\n        contentType: meta.contentType || \"application/octet-stream\",\n        lastModified: Number.isNaN(updated) ? Date.now() : updated\n    };\n}\n\n/**\n * Check whether an error represents a 404 / Not Found from the GCS client.\n */\nfunction isNotFoundError(error: unknown): boolean {\n    if (typeof error !== \"object\" || error === null) return false;\n    // A missing bucket is a 404 too. Read as a missing object, a typo in the\n    // bucket name made every file \"not found\" and every delete a success.\n    if (isMissingBucketError(error)) return false;\n    const err = error as Record<string, unknown>;\n    if (err[\"code\"] === 404) return true;\n    if (typeof err[\"message\"] === \"string\" && /not found/i.test(err[\"message\"])) return true;\n    return false;\n}\n\n/** GCS's answer for a bucket that does not exist: a 404 whose message says so. */\nfunction isMissingBucketError(error: object): boolean {\n    return \"message\" in error && typeof error.message === \"string\" && /bucket does not exist/i.test(error.message);\n}\n\n/**\n * A provider error that says this deployment's storage is misconfigured — the\n * bucket does not exist, or the credentials may not use it — as a\n * `502 STORAGE_MISCONFIGURED` naming the bucket; or the error as it was.\n *\n * These used to reach the caller as a bare 500 \"Internal Server Error\".\n */\nfunction misconfiguredOr(error: unknown, bucket: string): unknown {\n    if (typeof error !== \"object\" || error === null) return error;\n    if (isMissingBucketError(error)) {\n        return new ApiError(502, \"STORAGE_MISCONFIGURED\",\n            `The storage bucket \"${bucket}\" does not exist. Check the bucket name this source is configured with (GCS_BUCKET, or GCS_BUCKET__<KEY> for a named source).`,\n            { bucket, reason: \"NoSuchBucket\" });\n    }\n    if (\"code\" in error && (error.code === 401 || error.code === 403)) {\n        return new ApiError(502, \"STORAGE_MISCONFIGURED\",\n            `The storage provider refused this deployment's credentials for bucket \"${bucket}\". Check the service account and its permissions on the bucket.`,\n            { bucket, reason: \"AccessDenied\" });\n    }\n    return error;\n}\n"],"mappings":";;;;;;;;;;AAmCA,IAAI,YAA2D;AAE/D,eAAe,UAA2D;CACtE,IAAI,WAAW,OAAO;CACtB,IAAI;EACA,YAAY,MAAM,OAAO;EACzB,OAAO;CACX,QAAQ;EACJ,MAAM,IAAI,MACN,kHAEJ;CACJ;AACJ;;;;;;;AAYA,IAAa,uBAAb,MAA+D;CAC3D;CACA,SAAsF;CAEtF,YAAY,QAA0B;EAClC,KAAK,SAAS;CAClB;CAMA,MAAc,YAAmF;EAC7F,IAAI,KAAK,QAAQ,OAAO,KAAK;EAC7B,MAAM,EAAE,YAAY,MAAM,QAAQ;EAClC,KAAK,SAAS,IAAI,QAAQ;GACtB,WAAW,KAAK,OAAO;GACvB,aAAa,KAAK,OAAO;GACzB,aAAa,KAAK,OAAO;EAC7B,CAAC;EACD,OAAO,KAAK;CAChB;CAMA,UAAiB;EACb,OAAO;CACX;;;;;CAMA,eAAyB;EACrB,OAAO,CAAC,WAAW,KAAK,OAAO,MAAM;CACzC;CAEA,MAAM,UAAU,EACZ,MACA,KACA,UACA,UACgB,SAAuD;EACvE,IAAI,SAAS,iBAAiB,OAAO,KAAK,aAAa,IAAI;EAE3D,MAAM,aAAa,KAAK,UAAU,MAAM;EAQxC,OANgB,MADK,KAAK,UAAU,EAAA,CACb,OAAO,UAAU,CAAC,CAAC,KAAK,GAMzC,CAAA,CAAQ,WAAW,WAAW,IAAI,GAAG;GACvC,aAAa,KAAK;GAClB,UAAU,WAAW,EAAE,UAAU,KAAK,gBAAgB,QAAQ,EAAE,IAAI,KAAA;EACxE,CAAC,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,UAAU;EAAG,CAAC;EAE1E,OAAO;GACH;GACA,QAAQ;GACR,YAAY,QAAQ,WAAW,GAAG;EACtC;CACJ;;;;;;;;;;CAWA,MAAM,YAAY,KAAa,QAAmD;EAE9E,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GAEA,MAAM,CAAC,gBAAgB,OAAM,MADR,KAAK,UAAU,EAAA,CACA,OAAO,cAAc,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,YAAY;GAE1F,OAAO;IACH,QAAQ;IACR,UAAU;IACV,MAAM,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IACvC,MAAM,OAAO,aAAa,IAAI,KAAK;IACnC,aAAa,aAAa,eAAe;IACzC,gBAAiB,aAAa,YAAmD,CAAC;GACtF;EACJ,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GACrB,OAAO;GAEX,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,aAAa,KAAa,QAA0C;EAEtE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,MAAM;EACnD,IAAI,CAAC,UACD,OAAO;GACH,KAAK;GACL,cAAc;EAClB;EAKJ,MAAM,CAAC,OAAO,OAAM,MAFC,KAAK,UAAU,EAAA,CAET,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,QAAQ,CAAC,CAAC,aAAa;GACpF,QAAQ;GACR,SAAS,KAAK,IAAI,IAAI,OAAO;EACjC,CAAC;EAED,OAAO;GACH;GACA;EACJ;CACJ;;;;;;;;;;;;CAaA,MAAM,UAAU,KAAa,QAAuC;EAChE,KAAK,IAAI,UAAU,IAAK,WAAW;GAC/B,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM;GAC7C,IAAI,CAAC,SAAS,OAAO;GAErB,IAAI;GACJ,IAAI;IACA,WAAW,MAAM,KAAK,iBAAiB,OAAO;GAClD,SAAS,OAAgB;IAGrB,IAAI,gBAAgB,KAAK,KAAK,UAAU,GAAG;IAC3C,IAAI,gBAAgB,KAAK,GACrB,MAAM,IAAI,MAAM,eAAe,QAAQ,IAAI,oCAAoC;IAEnF,MAAM,gBAAgB,OAAO,QAAQ,MAAM;GAC/C;GAEA,MAAM,cAAc,QAAQ,KAAK,eAAe;GAEhD,MAAM,UAAU,OAAO,QAAQ,KAAK,YAAY,WAAW,KAAK,MAAM,QAAQ,KAAK,OAAO,IAAI;GAC9F,OAAO,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,KAAK;IAChF,MAAM;IACN,cAAc,OAAO,MAAM,OAAO,IAAI,KAAA,IAAY;GACtD,CAAC;EACL;CACJ;;;;;CAMA,gBAAwB,KAAa,QAAkD;EACnF,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,kBAAkB,IAAI,UAAU,MAAM,EAAE,CAAC,MAAM;GACrD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GACb,OAAO;IAAE,QAAQ,gBAAgB,UAAU,GAAG,UAAU;IAAG,KAAK,gBAAgB,UAAU,aAAa,CAAC;GAAE;EAElH;EACA,OAAO;GAAE,QAAQ,KAAK,UAAU,MAAM;GAAG;EAAI;CACjD;;CAGA,MAAc,OAAO,KAAa,QAAsF;EACpH,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,CAAC,QAAQ,MAAM,OAAO,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,YAAY;GACnF,OAAO;IAAE,GAAG;IAAU;GAAK;EAC/B,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GAAG,OAAO;GACnC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;;;;;CAOA,MAAc,WAAW,SAA8D;EACnF,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,aAAa,QAAQ,KAAK;EAChC,OAAO,OAAO,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,QAAQ,KAAK,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC,CAAC;CACzG;;;;;;;CAQA,MAAc,iBAAiB,SAA+E;EAC1G,MAAM,CAAC,YAAY,OAAO,MAAM,KAAK,WAAW,OAAO,EAAA,CAAG,SAAS;EACnE,OAAO;CACX;;CAGA,MAAM,WAAW,KAAa,QAAmD;EAC7E,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM;EAC7C,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,OAAO,iBAAiB,QAAQ,IAAI;EAC1C,IAAI,QAAQ,KAAK,oBAAoB,QACjC,OAAO;GAAE,GAAG;GAAM,OAAO,MAAM,KAAK,iBAAiB,OAAO,EAAA,CAAG;EAAW;EAE9E,OAAO;CACX;;;;;;;;CASA,MAAM,gBACF,KACA,SACkC;EAClC,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,SAAS,MAAM;EACtD,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,OAAO,iBAAiB,QAAQ,IAAI;EAC1C,MAAM,QAAQ,SAAS;EAEvB,IAAI,QAAQ,KAAK,oBAAoB,QAAQ;GACzC,MAAM,WAAW,MAAM,KAAK,iBAAiB,OAAO;GACpD,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,cAAc,MAAM,SAAS,MAAM;GACjF,OAAO;IACH,GAAG;IACH,MAAM,SAAS;IACf,QAAQ,gBAAgB,UAAU,SAAS,SAAS,MAAM,OAAO,MAAM,MAAM,CAAC,IAAI,QAAQ;IAC1F,GAAI,UAAU,EAAE,MAAM,IAAI,CAAC;GAC/B;EACJ;EAEA,MAAM,OAAO,MAAM,KAAK,WAAW,OAAO;EAC1C,OAAO;GACH,GAAG;GAGH,QAAQ,oBAAoB,KAAK,iBAAiB,QAAQ;IAAE,OAAO,MAAM;IAAO,KAAK,MAAM;GAAI,IAAI,CAAC,CAAC,CAAC;GACtG,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;EAC7B;CACJ;CAEA,MAAM,aAAa,KAAa,QAAgC;EAE5D,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAGA,MAAM,WAAU,MADK,KAAK,UAAU,EAAA,CACb,OAAO,cAAc,CAAC,CAAC,KAAK,YAAY;EAI/D,IAAI;GACA,MAAM,QAAQ,OAAO;EACzB,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GAAG;GAC5B,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,YAAY,QAAgB,SAIH;EAC3B,MAAM,iBAAiB,KAAK,UAAU,SAAS,MAAM;EAErD,MAAM,aAAY,MADG,KAAK,UAAU,EAAA,CACX,OAAO,cAAc;EAG9C,MAAM,eAAe,cAAc,MAAM;EACzC,MAAM,CAAC,UAAU,oBAAoB,MAAM,UAAU,SAAS;GAC1D,QAAQ;GACR,WAAW;GACX,YAAY,SAAS,cAAc;GACnC,WAAW,SAAS;GACpB,cAAc;EAClB,CAAC,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,cAAc;EAAG,CAAC;EAuC9E,OAAO;GACH,OApCU,OAAO,QAAO,SAAQ,KAAK,SAAS,YAChB,CAAA,CAAM,KAAI,UAAS;IACjD,QAAQ;IACR,UAAU,KAAK;IACf,MAAM,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IAGpC,GAAG,YAAY,KAAK,QAAQ;IAC5B,QAAQ;IACR,MAAM;IACN,gBAAgB,QAAQ,eAAe,GAAG,KAAK;GACnD,EAyBI;GACA,WAtBC,kBAA0D,YAAwB,CAAC,EAAA,CAEvC,KAAI,MAAK;IAGtD,MAAM,SAAS,UAAU,CAAC;IAC1B,OAAO;KACH,QAAQ;KACR,UAAU;KACV,MAAM,OAAO,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACjC,QAAQ;KACR,MAAM;KACN,gBAAgB,QAAQ,eAAe,GAAG;IAC9C;GACJ,CAQI;GACA,eALC,kBAA0D;EAM/D;CACJ;;CAOA,cAAsB;EAClB,OAAO,KAAK,OAAO,eAAA;CACvB;;;;CAKA,aAAqB,MAAkB;EACnC,qBAAqB,MAAM,KAAK,YAAY,GAAG,KAAK,OAAO,gBAAgB;CAC/E;;;;CAKA,UAAkB,QAAyB;EAGvC,IAAI,CAAC,UAAU,WAAW,WAAW,OAAO,KAAK,OAAO;EACxD,OAAO;CACX;;;;CAKA,gBAAwB,UAA2D;EAC/E,MAAM,YAAoC,CAAC;EAC3C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAC9C,IAAI,OAAO,UAAU,UACjB,UAAU,OAAO;OACd,IAAI,UAAU,KAAA,KAAa,UAAU,MACxC,UAAU,OAAO,KAAK,UAAU,KAAK;EAG7C,OAAO;CACX;AACJ;;AAOA,gBAAgB,WAAW,MAAwC;CAC/D,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC,UAAU;CACvC,IAAI;EACA,SAAS;GACL,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,MAAM;EACV;CACJ,UAAU;EACN,OAAO,YAAY;CACvB;AACJ;;AAGA,SAAS,YAAY,MAA4F;CAC7G,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,MAAM,OAAO,KAAK,SAAS,KAAA,IAAY,MAAM,OAAO,KAAK,IAAI;CAC7D,OAAO;EACH,GAAI,OAAO,SAAS,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;EACxC,GAAI,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;EACpE,GAAI,OAAO,KAAK,gBAAgB,YAAY,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;CACxG;AACJ;;AAGA,SAAS,iBAAiB,MAAsC;CAE5D,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,MAAM,KAAK,OAAO,IAAI;CAC9E,OAAO;EACH,MAAM,OAAO,KAAK,IAAI,KAAK;EAC3B,aAAa,KAAK,eAAe;EACjC,cAAc,OAAO,MAAM,OAAO,IAAI,KAAK,IAAI,IAAI;CACvD;AACJ;;;;AAKA,SAAS,gBAAgB,OAAyB;CAC9C,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CAGxD,IAAI,qBAAqB,KAAK,GAAG,OAAO;CACxC,MAAM,MAAM;CACZ,IAAI,IAAI,YAAY,KAAK,OAAO;CAChC,IAAI,OAAO,IAAI,eAAe,YAAY,aAAa,KAAK,IAAI,UAAU,GAAG,OAAO;CACpF,OAAO;AACX;;AAGA,SAAS,qBAAqB,OAAwB;CAClD,OAAO,aAAa,SAAS,OAAO,MAAM,YAAY,YAAY,yBAAyB,KAAK,MAAM,OAAO;AACjH;;;;;;;;AASA,SAAS,gBAAgB,OAAgB,QAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,IAAI,qBAAqB,KAAK,GAC1B,OAAO,IAAI,SAAS,KAAK,yBACrB,uBAAuB,OAAO,gIAC9B;EAAE;EAAQ,QAAQ;CAAe,CAAC;CAE1C,IAAI,UAAU,UAAU,MAAM,SAAS,OAAO,MAAM,SAAS,MACzD,OAAO,IAAI,SAAS,KAAK,yBACrB,0EAA0E,OAAO,kEACjF;EAAE;EAAQ,QAAQ;CAAe,CAAC;CAE1C,OAAO;AACX"}

package/dist/{S3StorageController-Kt-LJpf3.js → S3StorageController-D00EFa5P.js}

@@ -3,9 +3,9 @@ import __rebaseProcess from "process";
 globalThis.process ??= __rebaseProcess;
 __rebaseCreateRequire(import.meta.url);
 import { n as __exportAll } from "./rolldown-runtime-dW7B1o5h.js";
-import { t as ApiError } from "./errors-CHSJYpoy.js";
+import { t as ApiError } from "./errors-OMWkKSH-.js";
 import { c as listingPrefix, s as folderKey } from "./keys-COzQ2aE8.js";
-import { o as webStreamFrom, t as validateUploadedFile } from "./upload-validation-pXcDy_EQ.js";
+import { o as webStreamFrom, t as validateUploadedFile } from "./upload-validation-Bgo626uY.js";
 //#region src/storage/S3StorageController.ts
 var S3StorageController_exports = /* @__PURE__ */ __exportAll({ S3StorageController: () => S3StorageController });
 var _s3Module;
@@ -477,4 +477,4 @@ function isByteIterable(value) {
 //#endregion
 export { S3StorageController_exports as n, S3StorageController as t };
 
-//# sourceMappingURL=S3StorageController-Kt-LJpf3.js.map
+//# sourceMappingURL=S3StorageController-D00EFa5P.js.map

package/dist/{S3StorageController-Kt-LJpf3.js.map → S3StorageController-D00EFa5P.js.map}

@@ -1 +1 @@
-{"version":3,"file":"S3StorageController-Kt-LJpf3.js","names":[],"sources":["../src/storage/S3StorageController.ts"],"sourcesContent":["/**\n * S3-compatible storage controller (works with AWS S3 and MinIO)\n */\n\nimport type { S3Client as S3ClientType, } from \"@aws-sdk/client-s3\";\nimport {\n    DEFAULT_MAX_FILE_SIZE,\n    S3StorageConfig,\n    StorageController,\n    type StoredObjectInfo,\n    type StoredObjectRange,\n    type PutObjectOptions,\n    type StoredObjectStream\n} from \"./types\";\nimport { folderKey, listingPrefix } from \"./keys\";\nimport { webStreamFrom } from \"./streams\";\nimport { ApiError } from \"../api/errors\";\nimport { validateUploadedFile } from \"./upload-validation\";\nimport {\n    DownloadConfig,\n    DownloadMetadata,\n    StorageListResult,\n    StorageReference,\n    UploadFileProps,\n    UploadFileResult\n} from \"@rebasepro/types\";\n\nlet _s3Module: typeof import(\"@aws-sdk/client-s3\") | undefined;\nlet _presignerModule: typeof import(\"@aws-sdk/s3-request-presigner\") | undefined;\n\nasync function loadS3() {\n    if (!_s3Module) {\n        try {\n            _s3Module = await import(\"@aws-sdk/client-s3\");\n        } catch {\n            throw new Error(\n                \"@aws-sdk/client-s3 is required for S3 storage. \" +\n                \"Install it: pnpm add @aws-sdk/client-s3 @aws-sdk/s3-request-presigner\"\n            );\n        }\n    }\n    return _s3Module;\n}\n\nasync function loadPresigner() {\n    if (!_presignerModule) {\n        try {\n            _presignerModule = await import(\"@aws-sdk/s3-request-presigner\");\n        } catch {\n            throw new Error(\n                \"@aws-sdk/s3-request-presigner is required for S3 storage. \" +\n                \"Install it: pnpm add @aws-sdk/client-s3 @aws-sdk/s3-request-presigner\"\n            );\n        }\n    }\n    return _presignerModule;\n}\n\n/** Files up to this size are one `PutObject`; larger ones are uploaded in parts of (at least) this size. */\nconst MULTIPART_PART_SIZE = 8 * 1024 * 1024;\n/** S3's limit on the parts of one upload. */\nconst MAX_MULTIPART_PARTS = 10_000;\n\n/**\n * S3-compatible storage implementation\n * Works with AWS S3 and MinIO (with forcePathStyle option)\n */\nexport class S3StorageController implements StorageController {\n    private config: S3StorageConfig;\n    private _client: S3ClientType | undefined;\n\n    constructor(config: S3StorageConfig) {\n        this.config = config;\n    }\n\n    /**\n     * Lazily create and cache the S3 client on first use\n     */\n    private async getClient(): Promise<S3ClientType> {\n        if (!this._client) {\n            const s3 = await loadS3();\n            this._client = new s3.S3Client({\n                region: this.config.region || \"us-east-1\",\n                endpoint: this.config.endpoint,\n                forcePathStyle: this.config.forcePathStyle ?? !!this.config.endpoint, // Auto-enable for custom endpoints (MinIO)\n                credentials: {\n                    accessKeyId: this.config.accessKeyId,\n                    secretAccessKey: this.config.secretAccessKey\n                }\n            });\n        }\n        return this._client;\n    }\n\n    getType(): \"s3\" {\n        return \"s3\";\n    }\n\n    /**\n     * The configured bucket, and the logical `default` that maps to it.\n     *\n     * Any other name went straight to S3 as a bucket name, so the request\n     * parameter was a way to address *any* bucket the deployment's credentials\n     * can reach — and a mistyped one came back as \"file not found\".\n     */\n    knownBuckets(): string[] {\n        return [\"default\", this.config.bucket];\n    }\n\n    /** See {@link StorageController.maxFileSize}. */\n    maxFileSize(): number {\n        return this.config.maxFileSize ?? DEFAULT_MAX_FILE_SIZE;\n    }\n\n    /**\n     * Validate file before upload\n     */\n    private validateFile(file: File): void {\n        validateUploadedFile(file, this.maxFileSize(), this.config.allowedMimeTypes);\n    }\n\n    /**\n     * Get the bucket name - either from parameter or config\n     */\n    private getBucket(bucket?: string): string {\n        // \"default\" is a logical bucket name used by local storage;\n        // for S3 it should resolve to the configured bucket.\n        if (!bucket || bucket === \"default\") return this.config.bucket;\n        return bucket;\n    }\n\n    async putObject({\n        file,\n        key,\n        metadata,\n        bucket\n    }: UploadFileProps, options?: PutObjectOptions): Promise<UploadFileResult> {\n        if (options?.uploadLimits !== false) this.validateFile(file);\n\n        const usedBucket = this.getBucket(bucket);\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        const target = {\n            Bucket: usedBucket,\n            Key: key,\n            ContentType: file.type,\n            Metadata: metadata ? this.flattenMetadata(metadata) : undefined\n        };\n\n        if (file.size <= MULTIPART_PART_SIZE) {\n            // One request from one buffer, as always: a small file is no bigger\n            // than a part. `Buffer.from(arrayBuffer)` is a view, not a copy.\n            await client.send(new s3.PutObjectCommand({ ...target, Body: Buffer.from(await file.arrayBuffer()) }))\n                .catch((error: unknown) => { throw misconfiguredOr(error, usedBucket); });\n        } else {\n            await this.putMultipart(target, file);\n        }\n\n        return {\n            key,\n            bucket: usedBucket,\n            storageUrl: `s3://${usedBucket}/${key}`\n        };\n    }\n\n    /**\n     * Upload a large file in parts, one part in memory at a time.\n     *\n     * Reading the whole file into one buffer held it twice over (the\n     * `arrayBuffer()`, then the SDK's view and the multipart parser's copy\n     * before it), and `PutObject` stops at 5 GB regardless. A slice of a\n     * `File` reads only that range — from disk, for the disk-backed files TUS\n     * and backups hand over — so memory is one part whatever the file's size.\n     * A failure aborts the upload: no partial object appears at the key, and\n     * no orphaned parts are kept (and billed).\n     */\n    private async putMultipart(\n        target: { Bucket: string; Key: string; ContentType: string; Metadata?: Record<string, string> },\n        file: Blob\n    ): Promise<void> {\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        // At most 10,000 parts: a part grows past 8 MiB only beyond 80 GB.\n        const partSize = Math.max(MULTIPART_PART_SIZE, Math.ceil(file.size / MAX_MULTIPART_PARTS));\n        const { UploadId } = await client.send(new s3.CreateMultipartUploadCommand(target))\n            .catch((error: unknown) => { throw misconfiguredOr(error, target.Bucket); });\n        if (!UploadId) throw new Error(`S3 did not start a multipart upload for ${target.Key}.`);\n        const { Bucket, Key } = target;\n        try {\n            const parts: { ETag?: string; PartNumber: number }[] = [];\n            for (let offset = 0, PartNumber = 1; offset < file.size; offset += partSize, PartNumber++) {\n                const Body = Buffer.from(await file.slice(offset, Math.min(offset + partSize, file.size)).arrayBuffer());\n                const { ETag } = await client.send(new s3.UploadPartCommand({ Bucket, Key, UploadId, PartNumber, Body }));\n                parts.push({ ETag, PartNumber });\n            }\n            await client.send(new s3.CompleteMultipartUploadCommand({ Bucket, Key, UploadId, MultipartUpload: { Parts: parts } }));\n        } catch (error: unknown) {\n            await client.send(new s3.AbortMultipartUploadCommand({ Bucket, Key, UploadId })).catch(() => undefined);\n            throw misconfiguredOr(error, Bucket);\n        }\n    }\n\n    /**\n     * Flatten nested metadata to string values (S3 requirement)\n     */\n    private flattenMetadata(metadata: Record<string, unknown>): Record<string, string> {\n        const flattened: Record<string, string> = {};\n        for (const [key, value] of Object.entries(metadata)) {\n            if (typeof value === \"string\") {\n                flattened[key] = value;\n            } else if (value !== undefined && value !== null) {\n                flattened[key] = JSON.stringify(value);\n            }\n        }\n        return flattened;\n    }\n\n    async getSignedUrl(key: string, bucket?: string): Promise<DownloadConfig> {\n        // Handle s3:// and gs:// URLs for backward compatibility\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const s3 = await loadS3();\n            const presigner = await loadPresigner();\n            const client = await this.getClient();\n\n            // First check if the object exists and get metadata\n            const headCommand = new s3.HeadObjectCommand({\n                Bucket: resolvedBucket,\n                Key: resolvedPath\n            });\n\n            const headResult = await client.send(headCommand);\n\n            // Generate a signed URL\n            const getCommand = new s3.GetObjectCommand({\n                Bucket: resolvedBucket,\n                Key: resolvedPath\n            });\n\n            // Good for an hour. Server-side callers only: no route hands it out.\n            const url = await presigner.getSignedUrl(client, getCommand, { expiresIn: 3600 });\n\n            const metadata: DownloadMetadata = {\n                bucket: resolvedBucket,\n                fullPath: resolvedPath,\n                name: resolvedPath.split(\"/\").pop() || resolvedPath,\n                size: headResult.ContentLength || 0,\n                contentType: headResult.ContentType || \"application/octet-stream\",\n                customMetadata: headResult.Metadata || {}\n            };\n\n            return {\n                url,\n                metadata\n            };\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) {\n                return {\n                    url: null,\n                    fileNotFound: true\n                };\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async getObject(key: string, bucket?: string): Promise<File | null> {\n        // Handle s3:// and gs:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const s3 = await loadS3();\n            const client = await this.getClient();\n\n            const command = new s3.GetObjectCommand({\n                Bucket: resolvedBucket,\n                Key: resolvedPath\n            });\n\n            const response = await client.send(command);\n\n            if (!response.Body) {\n                return null;\n            }\n\n            // Convert stream to buffer\n            const chunks: Uint8Array[] = [];\n            for await (const chunk of response.Body as AsyncIterable<Uint8Array>) {\n                chunks.push(chunk);\n            }\n            const buffer = Buffer.concat(chunks);\n\n            const contentType = response.ContentType || \"application/octet-stream\";\n            const fileName = resolvedPath.split(\"/\").pop() || resolvedPath;\n\n            const blob = new Blob([buffer], { type: contentType });\n            // The object's own version. Left out, `File` stamps `Date.now()`,\n            // and the routes build the `ETag`, `Last-Modified` and the\n            // transform cache key from this — so every read was a new version:\n            // no 304, no cache hit, and a fresh rendition written per request.\n            return new File([blob], fileName, {\n                type: contentType,\n                lastModified: response.LastModified?.getTime()\n            });\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) {\n                return null;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    /**\n     * The bucket and key a call addresses: an `s3://` or `gs://` URL names its\n     * own bucket, anything else is a key in the given (or configured) bucket.\n     */\n    private resolveLocation(key: string, bucket?: string): { bucket: string; key: string } {\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const withoutProtocol = key.substring(match[0].length);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                return { bucket: withoutProtocol.substring(0, firstSlash), key: withoutProtocol.substring(firstSlash + 1) };\n            }\n        }\n        return { bucket: this.getBucket(bucket), key };\n    }\n\n    /**\n     * See {@link StorageController.getMetadata}. One `HeadObject`. Without it,\n     * `GET /metadata/*` fell back to `getSignedUrl`, which signed a URL per\n     * call — ~134 µs of CPU — only for the route to throw it away.\n     */\n    async getMetadata(key: string, bucket?: string): Promise<DownloadMetadata | null> {\n        const location = this.resolveLocation(key, bucket);\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        try {\n            const head = await client.send(new s3.HeadObjectCommand({ Bucket: location.bucket, Key: location.key }));\n            return {\n                bucket: location.bucket,\n                fullPath: location.key,\n                name: location.key.split(\"/\").pop() || location.key,\n                size: head.ContentLength || 0,\n                contentType: head.ContentType || \"application/octet-stream\",\n                customMetadata: head.Metadata || {}\n            };\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /** See {@link StorageController.statObject}. One `HeadObject`; no body is read. */\n    async statObject(key: string, bucket?: string): Promise<StoredObjectInfo | null> {\n        const location = this.resolveLocation(key, bucket);\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        try {\n            const head = await client.send(new s3.HeadObjectCommand({ Bucket: location.bucket, Key: location.key }));\n            return {\n                size: head.ContentLength ?? 0,\n                contentType: head.ContentType || \"application/octet-stream\",\n                // The object's version — see `getObject` on why a missing one\n                // must not become a stable value.\n                lastModified: head.LastModified?.getTime() ?? Date.now()\n            };\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /**\n     * See {@link StorageController.getObjectStream}. One `GetObject`, with a\n     * `Range` when one is asked for, so only those bytes leave the bucket; the\n     * body is handed on as it arrives rather than collected first.\n     */\n    async getObjectStream(\n        key: string,\n        options?: { bucket?: string; range?: StoredObjectRange }\n    ): Promise<StoredObjectStream | null> {\n        const location = this.resolveLocation(key, options?.bucket);\n        const range = options?.range;\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        let response;\n        try {\n            response = await client.send(new s3.GetObjectCommand({\n                Bucket: location.bucket,\n                Key: location.key,\n                ...(range ? { Range: `bytes=${range.start}-${range.end}` } : {})\n            }));\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) return null;\n            // The object shrank below the range since it was described. Read\n            // it whole: the caller serves a whole object as a 200, which HTTP\n            // allows for any range request.\n            if (range && isS3RangeNotSatisfiable(error)) return this.getObjectStream(key, { bucket: options?.bucket });\n            throw misconfiguredOr(error, location.bucket);\n        }\n        const body = response.Body;\n        if (!body) return null;\n\n        // A ranged answer says the whole object's size after the slash of its\n        // `Content-Range`. A store that ignored the `Range` sent no\n        // `Content-Range` and the whole object, which is what this then says.\n        const total = range ? /\\/(\\d+)\\s*$/.exec(response.ContentRange ?? \"\")?.[1] : undefined;\n        const served = range && total !== undefined ? range : undefined;\n        return {\n            stream: isByteIterable(body) ? webStreamFrom(body) : body.transformToWebStream(),\n            size: total !== undefined ? Number(total) : response.ContentLength ?? 0,\n            contentType: response.ContentType || \"application/octet-stream\",\n            lastModified: response.LastModified?.getTime() ?? Date.now(),\n            ...(served ? { range: served } : {})\n        };\n    }\n\n    async deleteObject(key: string, bucket?: string): Promise<void> {\n        // Handle s3:// and gs:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        const s3 = await loadS3();\n        const client = await this.getClient();\n\n        const command = new s3.DeleteObjectCommand({\n            Bucket: resolvedBucket,\n            Key: resolvedPath\n        });\n\n        // Deleting something that is already gone is the outcome the caller\n        // wanted, so it is not an error. AWS itself answers DeleteObject with\n        // 204 for a key that never existed, but S3-compatible backends (MinIO,\n        // Ceph, R2 in some configurations) do raise NoSuchKey — and the local\n        // controller has always returned quietly in this case. Without this,\n        // which of those a deployment happens to run decides whether\n        // `DELETE /api/storage/:path` on a stale reference is a 200 or a 500.\n        try {\n            await client.send(command);\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) {\n                return;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async listObjects(prefix: string, options?: {\n        bucket?: string;\n        maxResults?: number;\n        pageToken?: string;\n    }): Promise<StorageListResult> {\n        const resolvedBucket = this.getBucket(options?.bucket);\n\n        const s3 = await loadS3();\n        const client = await this.getClient();\n\n        const folderPrefix = listingPrefix(prefix);\n        const command = new s3.ListObjectsV2Command({\n            Bucket: resolvedBucket,\n            Prefix: folderPrefix,\n            MaxKeys: options?.maxResults ?? 1000,\n            ContinuationToken: options?.pageToken,\n            Delimiter: \"/\" // This gives us folder-like behavior\n        });\n\n        const response = await client.send(command)\n            .catch((error: unknown) => { throw misconfiguredOr(error, resolvedBucket); });\n\n        // The folder's own marker — the zero-byte `folder/` object that\n        // `POST /folder` writes — is in `Contents` when the listed prefix is\n        // that folder. It is how the folder exists, not something in it, and\n        // listed it is an entry with an empty name. Local storage has no such\n        // object to list.\n        const objects = (response.Contents || []).filter(obj => obj.Key !== folderPrefix);\n        const items: StorageReference[] = objects.map(obj => ({\n            bucket: resolvedBucket,\n            fullPath: obj.Key || \"\",\n            name: (obj.Key || \"\").split(\"/\").pop() || \"\",\n            // What the listing already carries, so a folder can be shown\n            // without a HEAD per file. ListObjectsV2 has no content type.\n            ...(typeof obj.Size === \"number\" ? { size: obj.Size } : {}),\n            ...(obj.LastModified instanceof Date ? { updated: obj.LastModified.toISOString() } : {}),\n            parent: null as never,\n            root: null as never,\n            toString: () => `s3://${resolvedBucket}/${obj.Key}`\n        }));\n\n        const prefixes: StorageReference[] = (response.CommonPrefixes || []).map(common => {\n            // Without the trailing slash S3 puts on a common prefix, so a\n            // `fullPath` from a listing is a key any controller accepts.\n            const folder = folderKey(common.Prefix || \"\");\n            return {\n                bucket: resolvedBucket,\n                fullPath: folder,\n                name: folder.split(\"/\").pop() || \"\",\n                parent: null as never,\n                root: null as never,\n                toString: () => `s3://${resolvedBucket}/${folder}`\n            };\n        });\n\n        return {\n            items,\n            prefixes,\n            nextPageToken: response.NextContinuationToken\n        };\n    }\n}\n\n/** The error name and HTTP status an SDK error carries, read without assuming its shape. */\nfunction s3ErrorFacts(error: unknown): { name?: string; status?: number } {\n    if (typeof error !== \"object\" || error === null) return {};\n    const name = \"name\" in error && typeof error.name === \"string\" ? error.name : undefined;\n    const meta = \"$metadata\" in error ? error.$metadata : undefined;\n    const status = typeof meta === \"object\" && meta !== null && \"httpStatusCode\" in meta && typeof meta.httpStatusCode === \"number\"\n        ? meta.httpStatusCode\n        : undefined;\n    return { name, status };\n}\n\n/**\n * A missing object, as `GetObject` (`NoSuchKey`) and `HeadObject` (`NotFound`, no body) report it.\n *\n * Not a missing bucket, which is a 404 too: read as a missing object, a typo in\n * `S3_BUCKET` made every file of the deployment \"not found\", and a delete\n * report success. (A `HeadObject` on a missing bucket carries no error name, so\n * that one call still cannot tell the two apart.)\n */\nfunction isS3NotFound(error: unknown): boolean {\n    const { name, status } = s3ErrorFacts(error);\n    if (name === \"NoSuchBucket\") return false;\n    return name === \"NoSuchKey\" || name === \"NotFound\" || status === 404;\n}\n\n/** What S3 answers when the deployment's configuration, not the request, is wrong. */\nconst MISCONFIGURATION_ERRORS = new Set([\"NoSuchBucket\", \"AccessDenied\", \"InvalidAccessKeyId\", \"SignatureDoesNotMatch\"]);\n\n/**\n * A provider error that says this deployment's storage is misconfigured, as a\n * `502 STORAGE_MISCONFIGURED` naming the bucket — or the error as it was.\n *\n * These used to reach the caller as a bare 500 \"Internal Server Error\", with\n * nothing to say the bucket or its credentials were the problem.\n */\nfunction misconfiguredOr(error: unknown, bucket: string): unknown {\n    const { name } = s3ErrorFacts(error);\n    if (!name || !MISCONFIGURATION_ERRORS.has(name)) return error;\n    return new ApiError(\n        502,\n        \"STORAGE_MISCONFIGURED\",\n        name === \"NoSuchBucket\"\n            ? `The storage bucket \"${bucket}\" does not exist. Check the bucket name this source is configured with (S3_BUCKET, or S3_BUCKET__<KEY> for a named source).`\n            : `The storage provider refused this deployment's credentials for bucket \"${bucket}\" (${name}). Check the access key and its permissions on the bucket.`,\n        { bucket, reason: name }\n    );\n}\n\nfunction isS3RangeNotSatisfiable(error: unknown): boolean {\n    const { name, status } = s3ErrorFacts(error);\n    return name === \"InvalidRange\" || status === 416;\n}\n\n/** A Node response body — what the SDK hands over on Node — rather than a browser one. */\nfunction isByteIterable(value: unknown): value is AsyncIterable<Uint8Array> {\n    return typeof value === \"object\" && value !== null && Symbol.asyncIterator in value;\n}\n"],"mappings":";;;;;;;;;;AA2BA,IAAI;AACJ,IAAI;AAEJ,eAAe,SAAS;CACpB,IAAI,CAAC,WACD,IAAI;EACA,YAAY,MAAM,OAAO;CAC7B,QAAQ;EACJ,MAAM,IAAI,MACN,sHAEJ;CACJ;CAEJ,OAAO;AACX;AAEA,eAAe,gBAAgB;CAC3B,IAAI,CAAC,kBACD,IAAI;EACA,mBAAmB,MAAM,OAAO;CACpC,QAAQ;EACJ,MAAM,IAAI,MACN,iIAEJ;CACJ;CAEJ,OAAO;AACX;;AAGA,IAAM,sBAAsB,IAAI,OAAO;;AAEvC,IAAM,sBAAsB;;;;;AAM5B,IAAa,sBAAb,MAA8D;CAC1D;CACA;CAEA,YAAY,QAAyB;EACjC,KAAK,SAAS;CAClB;;;;CAKA,MAAc,YAAmC;EAC7C,IAAI,CAAC,KAAK,SAAS;GACf,MAAM,KAAK,MAAM,OAAO;GACxB,KAAK,UAAU,IAAI,GAAG,SAAS;IAC3B,QAAQ,KAAK,OAAO,UAAU;IAC9B,UAAU,KAAK,OAAO;IACtB,gBAAgB,KAAK,OAAO,kBAAkB,CAAC,CAAC,KAAK,OAAO;IAC5D,aAAa;KACT,aAAa,KAAK,OAAO;KACzB,iBAAiB,KAAK,OAAO;IACjC;GACJ,CAAC;EACL;EACA,OAAO,KAAK;CAChB;CAEA,UAAgB;EACZ,OAAO;CACX;;;;;;;;CASA,eAAyB;EACrB,OAAO,CAAC,WAAW,KAAK,OAAO,MAAM;CACzC;;CAGA,cAAsB;EAClB,OAAO,KAAK,OAAO,eAAA;CACvB;;;;CAKA,aAAqB,MAAkB;EACnC,qBAAqB,MAAM,KAAK,YAAY,GAAG,KAAK,OAAO,gBAAgB;CAC/E;;;;CAKA,UAAkB,QAAyB;EAGvC,IAAI,CAAC,UAAU,WAAW,WAAW,OAAO,KAAK,OAAO;EACxD,OAAO;CACX;CAEA,MAAM,UAAU,EACZ,MACA,KACA,UACA,UACgB,SAAuD;EACvE,IAAI,SAAS,iBAAiB,OAAO,KAAK,aAAa,IAAI;EAE3D,MAAM,aAAa,KAAK,UAAU,MAAM;EACxC,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,SAAS;GACX,QAAQ;GACR,KAAK;GACL,aAAa,KAAK;GAClB,UAAU,WAAW,KAAK,gBAAgB,QAAQ,IAAI,KAAA;EAC1D;EAEA,IAAI,KAAK,QAAQ,qBAGb,MAAM,OAAO,KAAK,IAAI,GAAG,iBAAiB;GAAE,GAAG;GAAQ,MAAM,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;EAAE,CAAC,CAAC,CAAC,CACjG,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,UAAU;EAAG,CAAC;OAE5E,MAAM,KAAK,aAAa,QAAQ,IAAI;EAGxC,OAAO;GACH;GACA,QAAQ;GACR,YAAY,QAAQ,WAAW,GAAG;EACtC;CACJ;;;;;;;;;;;;CAaA,MAAc,aACV,QACA,MACa;EACb,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,MAAM,WAAW,KAAK,IAAI,qBAAqB,KAAK,KAAK,KAAK,OAAO,mBAAmB,CAAC;EACzF,MAAM,EAAE,aAAa,MAAM,OAAO,KAAK,IAAI,GAAG,6BAA6B,MAAM,CAAC,CAAC,CAC9E,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,OAAO,MAAM;EAAG,CAAC;EAC/E,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,2CAA2C,OAAO,IAAI,EAAE;EACvF,MAAM,EAAE,QAAQ,QAAQ;EACxB,IAAI;GACA,MAAM,QAAiD,CAAC;GACxD,KAAK,IAAI,SAAS,GAAG,aAAa,GAAG,SAAS,KAAK,MAAM,UAAU,UAAU,cAAc;IACvF,MAAM,OAAO,OAAO,KAAK,MAAM,KAAK,MAAM,QAAQ,KAAK,IAAI,SAAS,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACvG,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,IAAI,GAAG,kBAAkB;KAAE;KAAQ;KAAK;KAAU;KAAY;IAAK,CAAC,CAAC;IACxG,MAAM,KAAK;KAAE;KAAM;IAAW,CAAC;GACnC;GACA,MAAM,OAAO,KAAK,IAAI,GAAG,+BAA+B;IAAE;IAAQ;IAAK;IAAU,iBAAiB,EAAE,OAAO,MAAM;GAAE,CAAC,CAAC;EACzH,SAAS,OAAgB;GACrB,MAAM,OAAO,KAAK,IAAI,GAAG,4BAA4B;IAAE;IAAQ;IAAK;GAAS,CAAC,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;GACtG,MAAM,gBAAgB,OAAO,MAAM;EACvC;CACJ;;;;CAKA,gBAAwB,UAA2D;EAC/E,MAAM,YAAoC,CAAC;EAC3C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAC9C,IAAI,OAAO,UAAU,UACjB,UAAU,OAAO;OACd,IAAI,UAAU,KAAA,KAAa,UAAU,MACxC,UAAU,OAAO,KAAK,UAAU,KAAK;EAG7C,OAAO;CACX;CAEA,MAAM,aAAa,KAAa,QAA0C;EAEtE,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GACA,MAAM,KAAK,MAAM,OAAO;GACxB,MAAM,YAAY,MAAM,cAAc;GACtC,MAAM,SAAS,MAAM,KAAK,UAAU;GAGpC,MAAM,cAAc,IAAI,GAAG,kBAAkB;IACzC,QAAQ;IACR,KAAK;GACT,CAAC;GAED,MAAM,aAAa,MAAM,OAAO,KAAK,WAAW;GAGhD,MAAM,aAAa,IAAI,GAAG,iBAAiB;IACvC,QAAQ;IACR,KAAK;GACT,CAAC;GAcD,OAAO;IACH,KAAA,MAZc,UAAU,aAAa,QAAQ,YAAY,EAAE,WAAW,KAAK,CAAC;IAa5E,UAAA;KAVA,QAAQ;KACR,UAAU;KACV,MAAM,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACvC,MAAM,WAAW,iBAAiB;KAClC,aAAa,WAAW,eAAe;KACvC,gBAAgB,WAAW,YAAY,CAAC;IAKxC;GACJ;EACJ,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAClB,OAAO;IACH,KAAK;IACL,cAAc;GAClB;GAEJ,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,UAAU,KAAa,QAAuC;EAEhE,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GACA,MAAM,KAAK,MAAM,OAAO;GACxB,MAAM,SAAS,MAAM,KAAK,UAAU;GAEpC,MAAM,UAAU,IAAI,GAAG,iBAAiB;IACpC,QAAQ;IACR,KAAK;GACT,CAAC;GAED,MAAM,WAAW,MAAM,OAAO,KAAK,OAAO;GAE1C,IAAI,CAAC,SAAS,MACV,OAAO;GAIX,MAAM,SAAuB,CAAC;GAC9B,WAAW,MAAM,SAAS,SAAS,MAC/B,OAAO,KAAK,KAAK;GAErB,MAAM,SAAS,OAAO,OAAO,MAAM;GAEnC,MAAM,cAAc,SAAS,eAAe;GAC5C,MAAM,WAAW,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;GAElD,MAAM,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,MAAM,YAAY,CAAC;GAKrD,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU;IAC9B,MAAM;IACN,cAAc,SAAS,cAAc,QAAQ;GACjD,CAAC;EACL,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAClB,OAAO;GAEX,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;;;;;CAMA,gBAAwB,KAAa,QAAkD;EACnF,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,kBAAkB,IAAI,UAAU,MAAM,EAAE,CAAC,MAAM;GACrD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GACb,OAAO;IAAE,QAAQ,gBAAgB,UAAU,GAAG,UAAU;IAAG,KAAK,gBAAgB,UAAU,aAAa,CAAC;GAAE;EAElH;EACA,OAAO;GAAE,QAAQ,KAAK,UAAU,MAAM;GAAG;EAAI;CACjD;;;;;;CAOA,MAAM,YAAY,KAAa,QAAmD;EAC9E,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,OAAO,MAAM,OAAO,KAAK,IAAI,GAAG,kBAAkB;IAAE,QAAQ,SAAS;IAAQ,KAAK,SAAS;GAAI,CAAC,CAAC;GACvG,OAAO;IACH,QAAQ,SAAS;IACjB,UAAU,SAAS;IACnB,MAAM,SAAS,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS;IAChD,MAAM,KAAK,iBAAiB;IAC5B,aAAa,KAAK,eAAe;IACjC,gBAAgB,KAAK,YAAY,CAAC;GACtC;EACJ,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAAG,OAAO;GAChC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;CAGA,MAAM,WAAW,KAAa,QAAmD;EAC7E,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,OAAO,MAAM,OAAO,KAAK,IAAI,GAAG,kBAAkB;IAAE,QAAQ,SAAS;IAAQ,KAAK,SAAS;GAAI,CAAC,CAAC;GACvG,OAAO;IACH,MAAM,KAAK,iBAAiB;IAC5B,aAAa,KAAK,eAAe;IAGjC,cAAc,KAAK,cAAc,QAAQ,KAAK,KAAK,IAAI;GAC3D;EACJ,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAAG,OAAO;GAChC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;;;;;CAOA,MAAM,gBACF,KACA,SACkC;EAClC,MAAM,WAAW,KAAK,gBAAgB,KAAK,SAAS,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;EACJ,IAAI;GACA,WAAW,MAAM,OAAO,KAAK,IAAI,GAAG,iBAAiB;IACjD,QAAQ,SAAS;IACjB,KAAK,SAAS;IACd,GAAI,QAAQ,EAAE,OAAO,SAAS,MAAM,MAAM,GAAG,MAAM,MAAM,IAAI,CAAC;GAClE,CAAC,CAAC;EACN,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAAG,OAAO;GAIhC,IAAI,SAAS,wBAAwB,KAAK,GAAG,OAAO,KAAK,gBAAgB,KAAK,EAAE,QAAQ,SAAS,OAAO,CAAC;GACzG,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;EACA,MAAM,OAAO,SAAS;EACtB,IAAI,CAAC,MAAM,OAAO;EAKlB,MAAM,QAAQ,QAAQ,cAAc,KAAK,SAAS,gBAAgB,EAAE,CAAC,GAAG,KAAK,KAAA;EAC7E,MAAM,SAAS,SAAS,UAAU,KAAA,IAAY,QAAQ,KAAA;EACtD,OAAO;GACH,QAAQ,eAAe,IAAI,IAAI,cAAc,IAAI,IAAI,KAAK,qBAAqB;GAC/E,MAAM,UAAU,KAAA,IAAY,OAAO,KAAK,IAAI,SAAS,iBAAiB;GACtE,aAAa,SAAS,eAAe;GACrC,cAAc,SAAS,cAAc,QAAQ,KAAK,KAAK,IAAI;GAC3D,GAAI,SAAS,EAAE,OAAO,OAAO,IAAI,CAAC;EACtC;CACJ;CAEA,MAAM,aAAa,KAAa,QAAgC;EAE5D,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,MAAM,UAAU,IAAI,GAAG,oBAAoB;GACvC,QAAQ;GACR,KAAK;EACT,CAAC;EASD,IAAI;GACA,MAAM,OAAO,KAAK,OAAO;EAC7B,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAClB;GAEJ,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,YAAY,QAAgB,SAIH;EAC3B,MAAM,iBAAiB,KAAK,UAAU,SAAS,MAAM;EAErD,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,MAAM,eAAe,cAAc,MAAM;EACzC,MAAM,UAAU,IAAI,GAAG,qBAAqB;GACxC,QAAQ;GACR,QAAQ;GACR,SAAS,SAAS,cAAc;GAChC,mBAAmB,SAAS;GAC5B,WAAW;EACf,CAAC;EAED,MAAM,WAAW,MAAM,OAAO,KAAK,OAAO,CAAC,CACtC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,cAAc;EAAG,CAAC;EAmChF,OAAO;GACH,QA7Ba,SAAS,YAAY,CAAC,EAAA,CAAG,QAAO,QAAO,IAAI,QAAQ,YAClC,CAAA,CAAQ,KAAI,SAAQ;IAClD,QAAQ;IACR,UAAU,IAAI,OAAO;IACrB,OAAO,IAAI,OAAO,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IAG1C,GAAI,OAAO,IAAI,SAAS,WAAW,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACzD,GAAI,IAAI,wBAAwB,OAAO,EAAE,SAAS,IAAI,aAAa,YAAY,EAAE,IAAI,CAAC;IACtF,QAAQ;IACR,MAAM;IACN,gBAAgB,QAAQ,eAAe,GAAG,IAAI;GAClD,EAiBI;GACA,WAhBkC,SAAS,kBAAkB,CAAC,EAAA,CAAG,KAAI,WAAU;IAG/E,MAAM,SAAS,UAAU,OAAO,UAAU,EAAE;IAC5C,OAAO;KACH,QAAQ;KACR,UAAU;KACV,MAAM,OAAO,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACjC,QAAQ;KACR,MAAM;KACN,gBAAgB,QAAQ,eAAe,GAAG;IAC9C;GACJ,CAII;GACA,eAAe,SAAS;EAC5B;CACJ;AACJ;;AAGA,SAAS,aAAa,OAAoD;CACtE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,CAAC;CACzD,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAA;CAC9E,MAAM,OAAO,eAAe,QAAQ,MAAM,YAAY,KAAA;CAItD,OAAO;EAAE;EAAM,QAHA,OAAO,SAAS,YAAY,SAAS,QAAQ,oBAAoB,QAAQ,OAAO,KAAK,mBAAmB,WACjH,KAAK,iBACL,KAAA;CACgB;AAC1B;;;;;;;;;AAUA,SAAS,aAAa,OAAyB;CAC3C,MAAM,EAAE,MAAM,WAAW,aAAa,KAAK;CAC3C,IAAI,SAAS,gBAAgB,OAAO;CACpC,OAAO,SAAS,eAAe,SAAS,cAAc,WAAW;AACrE;;AAGA,IAAM,0CAA0B,IAAI,IAAI;CAAC;CAAgB;CAAgB;CAAsB;AAAuB,CAAC;;;;;;;;AASvH,SAAS,gBAAgB,OAAgB,QAAyB;CAC9D,MAAM,EAAE,SAAS,aAAa,KAAK;CACnC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,IAAI,IAAI,GAAG,OAAO;CACxD,OAAO,IAAI,SACP,KACA,yBACA,SAAS,iBACH,uBAAuB,OAAO,+HAC9B,0EAA0E,OAAO,KAAK,KAAK,6DACjG;EAAE;EAAQ,QAAQ;CAAK,CAC3B;AACJ;AAEA,SAAS,wBAAwB,OAAyB;CACtD,MAAM,EAAE,MAAM,WAAW,aAAa,KAAK;CAC3C,OAAO,SAAS,kBAAkB,WAAW;AACjD;;AAGA,SAAS,eAAe,OAAoD;CACxE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,iBAAiB;AAClF"}
+{"version":3,"file":"S3StorageController-D00EFa5P.js","names":[],"sources":["../src/storage/S3StorageController.ts"],"sourcesContent":["/**\n * S3-compatible storage controller (works with AWS S3 and MinIO)\n */\n\nimport type { S3Client as S3ClientType, } from \"@aws-sdk/client-s3\";\nimport {\n    DEFAULT_MAX_FILE_SIZE,\n    S3StorageConfig,\n    StorageController,\n    type StoredObjectInfo,\n    type StoredObjectRange,\n    type PutObjectOptions,\n    type StoredObjectStream\n} from \"./types\";\nimport { folderKey, listingPrefix } from \"./keys\";\nimport { webStreamFrom } from \"./streams\";\nimport { ApiError } from \"../api/errors\";\nimport { validateUploadedFile } from \"./upload-validation\";\nimport {\n    DownloadConfig,\n    DownloadMetadata,\n    StorageListResult,\n    StorageReference,\n    UploadFileProps,\n    UploadFileResult\n} from \"@rebasepro/types\";\n\nlet _s3Module: typeof import(\"@aws-sdk/client-s3\") | undefined;\nlet _presignerModule: typeof import(\"@aws-sdk/s3-request-presigner\") | undefined;\n\nasync function loadS3() {\n    if (!_s3Module) {\n        try {\n            _s3Module = await import(\"@aws-sdk/client-s3\");\n        } catch {\n            throw new Error(\n                \"@aws-sdk/client-s3 is required for S3 storage. \" +\n                \"Install it: pnpm add @aws-sdk/client-s3 @aws-sdk/s3-request-presigner\"\n            );\n        }\n    }\n    return _s3Module;\n}\n\nasync function loadPresigner() {\n    if (!_presignerModule) {\n        try {\n            _presignerModule = await import(\"@aws-sdk/s3-request-presigner\");\n        } catch {\n            throw new Error(\n                \"@aws-sdk/s3-request-presigner is required for S3 storage. \" +\n                \"Install it: pnpm add @aws-sdk/client-s3 @aws-sdk/s3-request-presigner\"\n            );\n        }\n    }\n    return _presignerModule;\n}\n\n/** Files up to this size are one `PutObject`; larger ones are uploaded in parts of (at least) this size. */\nconst MULTIPART_PART_SIZE = 8 * 1024 * 1024;\n/** S3's limit on the parts of one upload. */\nconst MAX_MULTIPART_PARTS = 10_000;\n\n/**\n * S3-compatible storage implementation\n * Works with AWS S3 and MinIO (with forcePathStyle option)\n */\nexport class S3StorageController implements StorageController {\n    private config: S3StorageConfig;\n    private _client: S3ClientType | undefined;\n\n    constructor(config: S3StorageConfig) {\n        this.config = config;\n    }\n\n    /**\n     * Lazily create and cache the S3 client on first use\n     */\n    private async getClient(): Promise<S3ClientType> {\n        if (!this._client) {\n            const s3 = await loadS3();\n            this._client = new s3.S3Client({\n                region: this.config.region || \"us-east-1\",\n                endpoint: this.config.endpoint,\n                forcePathStyle: this.config.forcePathStyle ?? !!this.config.endpoint, // Auto-enable for custom endpoints (MinIO)\n                credentials: {\n                    accessKeyId: this.config.accessKeyId,\n                    secretAccessKey: this.config.secretAccessKey\n                }\n            });\n        }\n        return this._client;\n    }\n\n    getType(): \"s3\" {\n        return \"s3\";\n    }\n\n    /**\n     * The configured bucket, and the logical `default` that maps to it.\n     *\n     * Any other name went straight to S3 as a bucket name, so the request\n     * parameter was a way to address *any* bucket the deployment's credentials\n     * can reach — and a mistyped one came back as \"file not found\".\n     */\n    knownBuckets(): string[] {\n        return [\"default\", this.config.bucket];\n    }\n\n    /** See {@link StorageController.maxFileSize}. */\n    maxFileSize(): number {\n        return this.config.maxFileSize ?? DEFAULT_MAX_FILE_SIZE;\n    }\n\n    /**\n     * Validate file before upload\n     */\n    private validateFile(file: File): void {\n        validateUploadedFile(file, this.maxFileSize(), this.config.allowedMimeTypes);\n    }\n\n    /**\n     * Get the bucket name - either from parameter or config\n     */\n    private getBucket(bucket?: string): string {\n        // \"default\" is a logical bucket name used by local storage;\n        // for S3 it should resolve to the configured bucket.\n        if (!bucket || bucket === \"default\") return this.config.bucket;\n        return bucket;\n    }\n\n    async putObject({\n        file,\n        key,\n        metadata,\n        bucket\n    }: UploadFileProps, options?: PutObjectOptions): Promise<UploadFileResult> {\n        if (options?.uploadLimits !== false) this.validateFile(file);\n\n        const usedBucket = this.getBucket(bucket);\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        const target = {\n            Bucket: usedBucket,\n            Key: key,\n            ContentType: file.type,\n            Metadata: metadata ? this.flattenMetadata(metadata) : undefined\n        };\n\n        if (file.size <= MULTIPART_PART_SIZE) {\n            // One request from one buffer, as always: a small file is no bigger\n            // than a part. `Buffer.from(arrayBuffer)` is a view, not a copy.\n            await client.send(new s3.PutObjectCommand({ ...target, Body: Buffer.from(await file.arrayBuffer()) }))\n                .catch((error: unknown) => { throw misconfiguredOr(error, usedBucket); });\n        } else {\n            await this.putMultipart(target, file);\n        }\n\n        return {\n            key,\n            bucket: usedBucket,\n            storageUrl: `s3://${usedBucket}/${key}`\n        };\n    }\n\n    /**\n     * Upload a large file in parts, one part in memory at a time.\n     *\n     * Reading the whole file into one buffer held it twice over (the\n     * `arrayBuffer()`, then the SDK's view and the multipart parser's copy\n     * before it), and `PutObject` stops at 5 GB regardless. A slice of a\n     * `File` reads only that range — from disk, for the disk-backed files TUS\n     * and backups hand over — so memory is one part whatever the file's size.\n     * A failure aborts the upload: no partial object appears at the key, and\n     * no orphaned parts are kept (and billed).\n     */\n    private async putMultipart(\n        target: { Bucket: string; Key: string; ContentType: string; Metadata?: Record<string, string> },\n        file: Blob\n    ): Promise<void> {\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        // At most 10,000 parts: a part grows past 8 MiB only beyond 80 GB.\n        const partSize = Math.max(MULTIPART_PART_SIZE, Math.ceil(file.size / MAX_MULTIPART_PARTS));\n        const { UploadId } = await client.send(new s3.CreateMultipartUploadCommand(target))\n            .catch((error: unknown) => { throw misconfiguredOr(error, target.Bucket); });\n        if (!UploadId) throw new Error(`S3 did not start a multipart upload for ${target.Key}.`);\n        const { Bucket, Key } = target;\n        try {\n            const parts: { ETag?: string; PartNumber: number }[] = [];\n            for (let offset = 0, PartNumber = 1; offset < file.size; offset += partSize, PartNumber++) {\n                const Body = Buffer.from(await file.slice(offset, Math.min(offset + partSize, file.size)).arrayBuffer());\n                const { ETag } = await client.send(new s3.UploadPartCommand({ Bucket, Key, UploadId, PartNumber, Body }));\n                parts.push({ ETag, PartNumber });\n            }\n            await client.send(new s3.CompleteMultipartUploadCommand({ Bucket, Key, UploadId, MultipartUpload: { Parts: parts } }));\n        } catch (error: unknown) {\n            await client.send(new s3.AbortMultipartUploadCommand({ Bucket, Key, UploadId })).catch(() => undefined);\n            throw misconfiguredOr(error, Bucket);\n        }\n    }\n\n    /**\n     * Flatten nested metadata to string values (S3 requirement)\n     */\n    private flattenMetadata(metadata: Record<string, unknown>): Record<string, string> {\n        const flattened: Record<string, string> = {};\n        for (const [key, value] of Object.entries(metadata)) {\n            if (typeof value === \"string\") {\n                flattened[key] = value;\n            } else if (value !== undefined && value !== null) {\n                flattened[key] = JSON.stringify(value);\n            }\n        }\n        return flattened;\n    }\n\n    async getSignedUrl(key: string, bucket?: string): Promise<DownloadConfig> {\n        // Handle s3:// and gs:// URLs for backward compatibility\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const s3 = await loadS3();\n            const presigner = await loadPresigner();\n            const client = await this.getClient();\n\n            // First check if the object exists and get metadata\n            const headCommand = new s3.HeadObjectCommand({\n                Bucket: resolvedBucket,\n                Key: resolvedPath\n            });\n\n            const headResult = await client.send(headCommand);\n\n            // Generate a signed URL\n            const getCommand = new s3.GetObjectCommand({\n                Bucket: resolvedBucket,\n                Key: resolvedPath\n            });\n\n            // Good for an hour. Server-side callers only: no route hands it out.\n            const url = await presigner.getSignedUrl(client, getCommand, { expiresIn: 3600 });\n\n            const metadata: DownloadMetadata = {\n                bucket: resolvedBucket,\n                fullPath: resolvedPath,\n                name: resolvedPath.split(\"/\").pop() || resolvedPath,\n                size: headResult.ContentLength || 0,\n                contentType: headResult.ContentType || \"application/octet-stream\",\n                customMetadata: headResult.Metadata || {}\n            };\n\n            return {\n                url,\n                metadata\n            };\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) {\n                return {\n                    url: null,\n                    fileNotFound: true\n                };\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async getObject(key: string, bucket?: string): Promise<File | null> {\n        // Handle s3:// and gs:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const s3 = await loadS3();\n            const client = await this.getClient();\n\n            const command = new s3.GetObjectCommand({\n                Bucket: resolvedBucket,\n                Key: resolvedPath\n            });\n\n            const response = await client.send(command);\n\n            if (!response.Body) {\n                return null;\n            }\n\n            // Convert stream to buffer\n            const chunks: Uint8Array[] = [];\n            for await (const chunk of response.Body as AsyncIterable<Uint8Array>) {\n                chunks.push(chunk);\n            }\n            const buffer = Buffer.concat(chunks);\n\n            const contentType = response.ContentType || \"application/octet-stream\";\n            const fileName = resolvedPath.split(\"/\").pop() || resolvedPath;\n\n            const blob = new Blob([buffer], { type: contentType });\n            // The object's own version. Left out, `File` stamps `Date.now()`,\n            // and the routes build the `ETag`, `Last-Modified` and the\n            // transform cache key from this — so every read was a new version:\n            // no 304, no cache hit, and a fresh rendition written per request.\n            return new File([blob], fileName, {\n                type: contentType,\n                lastModified: response.LastModified?.getTime()\n            });\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) {\n                return null;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    /**\n     * The bucket and key a call addresses: an `s3://` or `gs://` URL names its\n     * own bucket, anything else is a key in the given (or configured) bucket.\n     */\n    private resolveLocation(key: string, bucket?: string): { bucket: string; key: string } {\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const withoutProtocol = key.substring(match[0].length);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                return { bucket: withoutProtocol.substring(0, firstSlash), key: withoutProtocol.substring(firstSlash + 1) };\n            }\n        }\n        return { bucket: this.getBucket(bucket), key };\n    }\n\n    /**\n     * See {@link StorageController.getMetadata}. One `HeadObject`. Without it,\n     * `GET /metadata/*` fell back to `getSignedUrl`, which signed a URL per\n     * call — ~134 µs of CPU — only for the route to throw it away.\n     */\n    async getMetadata(key: string, bucket?: string): Promise<DownloadMetadata | null> {\n        const location = this.resolveLocation(key, bucket);\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        try {\n            const head = await client.send(new s3.HeadObjectCommand({ Bucket: location.bucket, Key: location.key }));\n            return {\n                bucket: location.bucket,\n                fullPath: location.key,\n                name: location.key.split(\"/\").pop() || location.key,\n                size: head.ContentLength || 0,\n                contentType: head.ContentType || \"application/octet-stream\",\n                customMetadata: head.Metadata || {}\n            };\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /** See {@link StorageController.statObject}. One `HeadObject`; no body is read. */\n    async statObject(key: string, bucket?: string): Promise<StoredObjectInfo | null> {\n        const location = this.resolveLocation(key, bucket);\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        try {\n            const head = await client.send(new s3.HeadObjectCommand({ Bucket: location.bucket, Key: location.key }));\n            return {\n                size: head.ContentLength ?? 0,\n                contentType: head.ContentType || \"application/octet-stream\",\n                // The object's version — see `getObject` on why a missing one\n                // must not become a stable value.\n                lastModified: head.LastModified?.getTime() ?? Date.now()\n            };\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /**\n     * See {@link StorageController.getObjectStream}. One `GetObject`, with a\n     * `Range` when one is asked for, so only those bytes leave the bucket; the\n     * body is handed on as it arrives rather than collected first.\n     */\n    async getObjectStream(\n        key: string,\n        options?: { bucket?: string; range?: StoredObjectRange }\n    ): Promise<StoredObjectStream | null> {\n        const location = this.resolveLocation(key, options?.bucket);\n        const range = options?.range;\n        const s3 = await loadS3();\n        const client = await this.getClient();\n        let response;\n        try {\n            response = await client.send(new s3.GetObjectCommand({\n                Bucket: location.bucket,\n                Key: location.key,\n                ...(range ? { Range: `bytes=${range.start}-${range.end}` } : {})\n            }));\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) return null;\n            // The object shrank below the range since it was described. Read\n            // it whole: the caller serves a whole object as a 200, which HTTP\n            // allows for any range request.\n            if (range && isS3RangeNotSatisfiable(error)) return this.getObjectStream(key, { bucket: options?.bucket });\n            throw misconfiguredOr(error, location.bucket);\n        }\n        const body = response.Body;\n        if (!body) return null;\n\n        // A ranged answer says the whole object's size after the slash of its\n        // `Content-Range`. A store that ignored the `Range` sent no\n        // `Content-Range` and the whole object, which is what this then says.\n        const total = range ? /\\/(\\d+)\\s*$/.exec(response.ContentRange ?? \"\")?.[1] : undefined;\n        const served = range && total !== undefined ? range : undefined;\n        return {\n            stream: isByteIterable(body) ? webStreamFrom(body) : body.transformToWebStream(),\n            size: total !== undefined ? Number(total) : response.ContentLength ?? 0,\n            contentType: response.ContentType || \"application/octet-stream\",\n            lastModified: response.LastModified?.getTime() ?? Date.now(),\n            ...(served ? { range: served } : {})\n        };\n    }\n\n    async deleteObject(key: string, bucket?: string): Promise<void> {\n        // Handle s3:// and gs:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(s3|gs):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        const s3 = await loadS3();\n        const client = await this.getClient();\n\n        const command = new s3.DeleteObjectCommand({\n            Bucket: resolvedBucket,\n            Key: resolvedPath\n        });\n\n        // Deleting something that is already gone is the outcome the caller\n        // wanted, so it is not an error. AWS itself answers DeleteObject with\n        // 204 for a key that never existed, but S3-compatible backends (MinIO,\n        // Ceph, R2 in some configurations) do raise NoSuchKey — and the local\n        // controller has always returned quietly in this case. Without this,\n        // which of those a deployment happens to run decides whether\n        // `DELETE /api/storage/:path` on a stale reference is a 200 or a 500.\n        try {\n            await client.send(command);\n        } catch (error: unknown) {\n            if (isS3NotFound(error)) {\n                return;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async listObjects(prefix: string, options?: {\n        bucket?: string;\n        maxResults?: number;\n        pageToken?: string;\n    }): Promise<StorageListResult> {\n        const resolvedBucket = this.getBucket(options?.bucket);\n\n        const s3 = await loadS3();\n        const client = await this.getClient();\n\n        const folderPrefix = listingPrefix(prefix);\n        const command = new s3.ListObjectsV2Command({\n            Bucket: resolvedBucket,\n            Prefix: folderPrefix,\n            MaxKeys: options?.maxResults ?? 1000,\n            ContinuationToken: options?.pageToken,\n            Delimiter: \"/\" // This gives us folder-like behavior\n        });\n\n        const response = await client.send(command)\n            .catch((error: unknown) => { throw misconfiguredOr(error, resolvedBucket); });\n\n        // The folder's own marker — the zero-byte `folder/` object that\n        // `POST /folder` writes — is in `Contents` when the listed prefix is\n        // that folder. It is how the folder exists, not something in it, and\n        // listed it is an entry with an empty name. Local storage has no such\n        // object to list.\n        const objects = (response.Contents || []).filter(obj => obj.Key !== folderPrefix);\n        const items: StorageReference[] = objects.map(obj => ({\n            bucket: resolvedBucket,\n            fullPath: obj.Key || \"\",\n            name: (obj.Key || \"\").split(\"/\").pop() || \"\",\n            // What the listing already carries, so a folder can be shown\n            // without a HEAD per file. ListObjectsV2 has no content type.\n            ...(typeof obj.Size === \"number\" ? { size: obj.Size } : {}),\n            ...(obj.LastModified instanceof Date ? { updated: obj.LastModified.toISOString() } : {}),\n            parent: null as never,\n            root: null as never,\n            toString: () => `s3://${resolvedBucket}/${obj.Key}`\n        }));\n\n        const prefixes: StorageReference[] = (response.CommonPrefixes || []).map(common => {\n            // Without the trailing slash S3 puts on a common prefix, so a\n            // `fullPath` from a listing is a key any controller accepts.\n            const folder = folderKey(common.Prefix || \"\");\n            return {\n                bucket: resolvedBucket,\n                fullPath: folder,\n                name: folder.split(\"/\").pop() || \"\",\n                parent: null as never,\n                root: null as never,\n                toString: () => `s3://${resolvedBucket}/${folder}`\n            };\n        });\n\n        return {\n            items,\n            prefixes,\n            nextPageToken: response.NextContinuationToken\n        };\n    }\n}\n\n/** The error name and HTTP status an SDK error carries, read without assuming its shape. */\nfunction s3ErrorFacts(error: unknown): { name?: string; status?: number } {\n    if (typeof error !== \"object\" || error === null) return {};\n    const name = \"name\" in error && typeof error.name === \"string\" ? error.name : undefined;\n    const meta = \"$metadata\" in error ? error.$metadata : undefined;\n    const status = typeof meta === \"object\" && meta !== null && \"httpStatusCode\" in meta && typeof meta.httpStatusCode === \"number\"\n        ? meta.httpStatusCode\n        : undefined;\n    return { name, status };\n}\n\n/**\n * A missing object, as `GetObject` (`NoSuchKey`) and `HeadObject` (`NotFound`, no body) report it.\n *\n * Not a missing bucket, which is a 404 too: read as a missing object, a typo in\n * `S3_BUCKET` made every file of the deployment \"not found\", and a delete\n * report success. (A `HeadObject` on a missing bucket carries no error name, so\n * that one call still cannot tell the two apart.)\n */\nfunction isS3NotFound(error: unknown): boolean {\n    const { name, status } = s3ErrorFacts(error);\n    if (name === \"NoSuchBucket\") return false;\n    return name === \"NoSuchKey\" || name === \"NotFound\" || status === 404;\n}\n\n/** What S3 answers when the deployment's configuration, not the request, is wrong. */\nconst MISCONFIGURATION_ERRORS = new Set([\"NoSuchBucket\", \"AccessDenied\", \"InvalidAccessKeyId\", \"SignatureDoesNotMatch\"]);\n\n/**\n * A provider error that says this deployment's storage is misconfigured, as a\n * `502 STORAGE_MISCONFIGURED` naming the bucket — or the error as it was.\n *\n * These used to reach the caller as a bare 500 \"Internal Server Error\", with\n * nothing to say the bucket or its credentials were the problem.\n */\nfunction misconfiguredOr(error: unknown, bucket: string): unknown {\n    const { name } = s3ErrorFacts(error);\n    if (!name || !MISCONFIGURATION_ERRORS.has(name)) return error;\n    return new ApiError(\n        502,\n        \"STORAGE_MISCONFIGURED\",\n        name === \"NoSuchBucket\"\n            ? `The storage bucket \"${bucket}\" does not exist. Check the bucket name this source is configured with (S3_BUCKET, or S3_BUCKET__<KEY> for a named source).`\n            : `The storage provider refused this deployment's credentials for bucket \"${bucket}\" (${name}). Check the access key and its permissions on the bucket.`,\n        { bucket, reason: name }\n    );\n}\n\nfunction isS3RangeNotSatisfiable(error: unknown): boolean {\n    const { name, status } = s3ErrorFacts(error);\n    return name === \"InvalidRange\" || status === 416;\n}\n\n/** A Node response body — what the SDK hands over on Node — rather than a browser one. */\nfunction isByteIterable(value: unknown): value is AsyncIterable<Uint8Array> {\n    return typeof value === \"object\" && value !== null && Symbol.asyncIterator in value;\n}\n"],"mappings":";;;;;;;;;;AA2BA,IAAI;AACJ,IAAI;AAEJ,eAAe,SAAS;CACpB,IAAI,CAAC,WACD,IAAI;EACA,YAAY,MAAM,OAAO;CAC7B,QAAQ;EACJ,MAAM,IAAI,MACN,sHAEJ;CACJ;CAEJ,OAAO;AACX;AAEA,eAAe,gBAAgB;CAC3B,IAAI,CAAC,kBACD,IAAI;EACA,mBAAmB,MAAM,OAAO;CACpC,QAAQ;EACJ,MAAM,IAAI,MACN,iIAEJ;CACJ;CAEJ,OAAO;AACX;;AAGA,IAAM,sBAAsB,IAAI,OAAO;;AAEvC,IAAM,sBAAsB;;;;;AAM5B,IAAa,sBAAb,MAA8D;CAC1D;CACA;CAEA,YAAY,QAAyB;EACjC,KAAK,SAAS;CAClB;;;;CAKA,MAAc,YAAmC;EAC7C,IAAI,CAAC,KAAK,SAAS;GACf,MAAM,KAAK,MAAM,OAAO;GACxB,KAAK,UAAU,IAAI,GAAG,SAAS;IAC3B,QAAQ,KAAK,OAAO,UAAU;IAC9B,UAAU,KAAK,OAAO;IACtB,gBAAgB,KAAK,OAAO,kBAAkB,CAAC,CAAC,KAAK,OAAO;IAC5D,aAAa;KACT,aAAa,KAAK,OAAO;KACzB,iBAAiB,KAAK,OAAO;IACjC;GACJ,CAAC;EACL;EACA,OAAO,KAAK;CAChB;CAEA,UAAgB;EACZ,OAAO;CACX;;;;;;;;CASA,eAAyB;EACrB,OAAO,CAAC,WAAW,KAAK,OAAO,MAAM;CACzC;;CAGA,cAAsB;EAClB,OAAO,KAAK,OAAO,eAAA;CACvB;;;;CAKA,aAAqB,MAAkB;EACnC,qBAAqB,MAAM,KAAK,YAAY,GAAG,KAAK,OAAO,gBAAgB;CAC/E;;;;CAKA,UAAkB,QAAyB;EAGvC,IAAI,CAAC,UAAU,WAAW,WAAW,OAAO,KAAK,OAAO;EACxD,OAAO;CACX;CAEA,MAAM,UAAU,EACZ,MACA,KACA,UACA,UACgB,SAAuD;EACvE,IAAI,SAAS,iBAAiB,OAAO,KAAK,aAAa,IAAI;EAE3D,MAAM,aAAa,KAAK,UAAU,MAAM;EACxC,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,SAAS;GACX,QAAQ;GACR,KAAK;GACL,aAAa,KAAK;GAClB,UAAU,WAAW,KAAK,gBAAgB,QAAQ,IAAI,KAAA;EAC1D;EAEA,IAAI,KAAK,QAAQ,qBAGb,MAAM,OAAO,KAAK,IAAI,GAAG,iBAAiB;GAAE,GAAG;GAAQ,MAAM,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;EAAE,CAAC,CAAC,CAAC,CACjG,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,UAAU;EAAG,CAAC;OAE5E,MAAM,KAAK,aAAa,QAAQ,IAAI;EAGxC,OAAO;GACH;GACA,QAAQ;GACR,YAAY,QAAQ,WAAW,GAAG;EACtC;CACJ;;;;;;;;;;;;CAaA,MAAc,aACV,QACA,MACa;EACb,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,MAAM,WAAW,KAAK,IAAI,qBAAqB,KAAK,KAAK,KAAK,OAAO,mBAAmB,CAAC;EACzF,MAAM,EAAE,aAAa,MAAM,OAAO,KAAK,IAAI,GAAG,6BAA6B,MAAM,CAAC,CAAC,CAC9E,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,OAAO,MAAM;EAAG,CAAC;EAC/E,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,2CAA2C,OAAO,IAAI,EAAE;EACvF,MAAM,EAAE,QAAQ,QAAQ;EACxB,IAAI;GACA,MAAM,QAAiD,CAAC;GACxD,KAAK,IAAI,SAAS,GAAG,aAAa,GAAG,SAAS,KAAK,MAAM,UAAU,UAAU,cAAc;IACvF,MAAM,OAAO,OAAO,KAAK,MAAM,KAAK,MAAM,QAAQ,KAAK,IAAI,SAAS,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACvG,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,IAAI,GAAG,kBAAkB;KAAE;KAAQ;KAAK;KAAU;KAAY;IAAK,CAAC,CAAC;IACxG,MAAM,KAAK;KAAE;KAAM;IAAW,CAAC;GACnC;GACA,MAAM,OAAO,KAAK,IAAI,GAAG,+BAA+B;IAAE;IAAQ;IAAK;IAAU,iBAAiB,EAAE,OAAO,MAAM;GAAE,CAAC,CAAC;EACzH,SAAS,OAAgB;GACrB,MAAM,OAAO,KAAK,IAAI,GAAG,4BAA4B;IAAE;IAAQ;IAAK;GAAS,CAAC,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;GACtG,MAAM,gBAAgB,OAAO,MAAM;EACvC;CACJ;;;;CAKA,gBAAwB,UAA2D;EAC/E,MAAM,YAAoC,CAAC;EAC3C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAC9C,IAAI,OAAO,UAAU,UACjB,UAAU,OAAO;OACd,IAAI,UAAU,KAAA,KAAa,UAAU,MACxC,UAAU,OAAO,KAAK,UAAU,KAAK;EAG7C,OAAO;CACX;CAEA,MAAM,aAAa,KAAa,QAA0C;EAEtE,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GACA,MAAM,KAAK,MAAM,OAAO;GACxB,MAAM,YAAY,MAAM,cAAc;GACtC,MAAM,SAAS,MAAM,KAAK,UAAU;GAGpC,MAAM,cAAc,IAAI,GAAG,kBAAkB;IACzC,QAAQ;IACR,KAAK;GACT,CAAC;GAED,MAAM,aAAa,MAAM,OAAO,KAAK,WAAW;GAGhD,MAAM,aAAa,IAAI,GAAG,iBAAiB;IACvC,QAAQ;IACR,KAAK;GACT,CAAC;GAcD,OAAO;IACH,KAAA,MAZc,UAAU,aAAa,QAAQ,YAAY,EAAE,WAAW,KAAK,CAAC;IAa5E,UAAA;KAVA,QAAQ;KACR,UAAU;KACV,MAAM,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACvC,MAAM,WAAW,iBAAiB;KAClC,aAAa,WAAW,eAAe;KACvC,gBAAgB,WAAW,YAAY,CAAC;IAKxC;GACJ;EACJ,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAClB,OAAO;IACH,KAAK;IACL,cAAc;GAClB;GAEJ,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,UAAU,KAAa,QAAuC;EAEhE,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GACA,MAAM,KAAK,MAAM,OAAO;GACxB,MAAM,SAAS,MAAM,KAAK,UAAU;GAEpC,MAAM,UAAU,IAAI,GAAG,iBAAiB;IACpC,QAAQ;IACR,KAAK;GACT,CAAC;GAED,MAAM,WAAW,MAAM,OAAO,KAAK,OAAO;GAE1C,IAAI,CAAC,SAAS,MACV,OAAO;GAIX,MAAM,SAAuB,CAAC;GAC9B,WAAW,MAAM,SAAS,SAAS,MAC/B,OAAO,KAAK,KAAK;GAErB,MAAM,SAAS,OAAO,OAAO,MAAM;GAEnC,MAAM,cAAc,SAAS,eAAe;GAC5C,MAAM,WAAW,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;GAElD,MAAM,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,MAAM,YAAY,CAAC;GAKrD,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU;IAC9B,MAAM;IACN,cAAc,SAAS,cAAc,QAAQ;GACjD,CAAC;EACL,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAClB,OAAO;GAEX,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;;;;;CAMA,gBAAwB,KAAa,QAAkD;EACnF,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,kBAAkB,IAAI,UAAU,MAAM,EAAE,CAAC,MAAM;GACrD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GACb,OAAO;IAAE,QAAQ,gBAAgB,UAAU,GAAG,UAAU;IAAG,KAAK,gBAAgB,UAAU,aAAa,CAAC;GAAE;EAElH;EACA,OAAO;GAAE,QAAQ,KAAK,UAAU,MAAM;GAAG;EAAI;CACjD;;;;;;CAOA,MAAM,YAAY,KAAa,QAAmD;EAC9E,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,OAAO,MAAM,OAAO,KAAK,IAAI,GAAG,kBAAkB;IAAE,QAAQ,SAAS;IAAQ,KAAK,SAAS;GAAI,CAAC,CAAC;GACvG,OAAO;IACH,QAAQ,SAAS;IACjB,UAAU,SAAS;IACnB,MAAM,SAAS,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS;IAChD,MAAM,KAAK,iBAAiB;IAC5B,aAAa,KAAK,eAAe;IACjC,gBAAgB,KAAK,YAAY,CAAC;GACtC;EACJ,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAAG,OAAO;GAChC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;CAGA,MAAM,WAAW,KAAa,QAAmD;EAC7E,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,OAAO,MAAM,OAAO,KAAK,IAAI,GAAG,kBAAkB;IAAE,QAAQ,SAAS;IAAQ,KAAK,SAAS;GAAI,CAAC,CAAC;GACvG,OAAO;IACH,MAAM,KAAK,iBAAiB;IAC5B,aAAa,KAAK,eAAe;IAGjC,cAAc,KAAK,cAAc,QAAQ,KAAK,KAAK,IAAI;GAC3D;EACJ,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAAG,OAAO;GAChC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;;;;;CAOA,MAAM,gBACF,KACA,SACkC;EAClC,MAAM,WAAW,KAAK,gBAAgB,KAAK,SAAS,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;EACJ,IAAI;GACA,WAAW,MAAM,OAAO,KAAK,IAAI,GAAG,iBAAiB;IACjD,QAAQ,SAAS;IACjB,KAAK,SAAS;IACd,GAAI,QAAQ,EAAE,OAAO,SAAS,MAAM,MAAM,GAAG,MAAM,MAAM,IAAI,CAAC;GAClE,CAAC,CAAC;EACN,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAAG,OAAO;GAIhC,IAAI,SAAS,wBAAwB,KAAK,GAAG,OAAO,KAAK,gBAAgB,KAAK,EAAE,QAAQ,SAAS,OAAO,CAAC;GACzG,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;EACA,MAAM,OAAO,SAAS;EACtB,IAAI,CAAC,MAAM,OAAO;EAKlB,MAAM,QAAQ,QAAQ,cAAc,KAAK,SAAS,gBAAgB,EAAE,CAAC,GAAG,KAAK,KAAA;EAC7E,MAAM,SAAS,SAAS,UAAU,KAAA,IAAY,QAAQ,KAAA;EACtD,OAAO;GACH,QAAQ,eAAe,IAAI,IAAI,cAAc,IAAI,IAAI,KAAK,qBAAqB;GAC/E,MAAM,UAAU,KAAA,IAAY,OAAO,KAAK,IAAI,SAAS,iBAAiB;GACtE,aAAa,SAAS,eAAe;GACrC,cAAc,SAAS,cAAc,QAAQ,KAAK,KAAK,IAAI;GAC3D,GAAI,SAAS,EAAE,OAAO,OAAO,IAAI,CAAC;EACtC;CACJ;CAEA,MAAM,aAAa,KAAa,QAAgC;EAE5D,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,MAAM,UAAU,IAAI,GAAG,oBAAoB;GACvC,QAAQ;GACR,KAAK;EACT,CAAC;EASD,IAAI;GACA,MAAM,OAAO,KAAK,OAAO;EAC7B,SAAS,OAAgB;GACrB,IAAI,aAAa,KAAK,GAClB;GAEJ,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,YAAY,QAAgB,SAIH;EAC3B,MAAM,iBAAiB,KAAK,UAAU,SAAS,MAAM;EAErD,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,MAAM,eAAe,cAAc,MAAM;EACzC,MAAM,UAAU,IAAI,GAAG,qBAAqB;GACxC,QAAQ;GACR,QAAQ;GACR,SAAS,SAAS,cAAc;GAChC,mBAAmB,SAAS;GAC5B,WAAW;EACf,CAAC;EAED,MAAM,WAAW,MAAM,OAAO,KAAK,OAAO,CAAC,CACtC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,cAAc;EAAG,CAAC;EAmChF,OAAO;GACH,QA7Ba,SAAS,YAAY,CAAC,EAAA,CAAG,QAAO,QAAO,IAAI,QAAQ,YAClC,CAAA,CAAQ,KAAI,SAAQ;IAClD,QAAQ;IACR,UAAU,IAAI,OAAO;IACrB,OAAO,IAAI,OAAO,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IAG1C,GAAI,OAAO,IAAI,SAAS,WAAW,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACzD,GAAI,IAAI,wBAAwB,OAAO,EAAE,SAAS,IAAI,aAAa,YAAY,EAAE,IAAI,CAAC;IACtF,QAAQ;IACR,MAAM;IACN,gBAAgB,QAAQ,eAAe,GAAG,IAAI;GAClD,EAiBI;GACA,WAhBkC,SAAS,kBAAkB,CAAC,EAAA,CAAG,KAAI,WAAU;IAG/E,MAAM,SAAS,UAAU,OAAO,UAAU,EAAE;IAC5C,OAAO;KACH,QAAQ;KACR,UAAU;KACV,MAAM,OAAO,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACjC,QAAQ;KACR,MAAM;KACN,gBAAgB,QAAQ,eAAe,GAAG;IAC9C;GACJ,CAII;GACA,eAAe,SAAS;EAC5B;CACJ;AACJ;;AAGA,SAAS,aAAa,OAAoD;CACtE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,CAAC;CACzD,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAA;CAC9E,MAAM,OAAO,eAAe,QAAQ,MAAM,YAAY,KAAA;CAItD,OAAO;EAAE;EAAM,QAHA,OAAO,SAAS,YAAY,SAAS,QAAQ,oBAAoB,QAAQ,OAAO,KAAK,mBAAmB,WACjH,KAAK,iBACL,KAAA;CACgB;AAC1B;;;;;;;;;AAUA,SAAS,aAAa,OAAyB;CAC3C,MAAM,EAAE,MAAM,WAAW,aAAa,KAAK;CAC3C,IAAI,SAAS,gBAAgB,OAAO;CACpC,OAAO,SAAS,eAAe,SAAS,cAAc,WAAW;AACrE;;AAGA,IAAM,0CAA0B,IAAI,IAAI;CAAC;CAAgB;CAAgB;CAAsB;AAAuB,CAAC;;;;;;;;AASvH,SAAS,gBAAgB,OAAgB,QAAyB;CAC9D,MAAM,EAAE,SAAS,aAAa,KAAK;CACnC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,IAAI,IAAI,GAAG,OAAO;CACxD,OAAO,IAAI,SACP,KACA,yBACA,SAAS,iBACH,uBAAuB,OAAO,+HAC9B,0EAA0E,OAAO,KAAK,KAAK,6DACjG;EAAE;EAAQ,QAAQ;CAAK,CAC3B;AACJ;AAEA,SAAS,wBAAwB,OAAyB;CACtD,MAAM,EAAE,MAAM,WAAW,aAAa,KAAK;CAC3C,OAAO,SAAS,kBAAkB,WAAW;AACjD;;AAGA,SAAS,eAAe,OAAoD;CACxE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,iBAAiB;AAClF"}

package/dist/api/closed-database.d.ts

@@ -0,0 +1,25 @@
+/** Forget when the closed-database line was last said. @internal For tests only. */
+export declare function _resetClosedDatabaseWarningForTests(): void;
+/**
+ * The database that refused the connection because it is closed to new ones
+ * (`ALLOW_CONNECTIONS false`), or null.
+ *
+ * Postgres says it as `database "x" is not currently accepting connections`,
+ * SQLSTATE 55000. That code also covers statements the database judged
+ * (`lastval is not yet defined in this session`), so the sentence is what is
+ * matched — through Drizzle's `cause` and a dual-stack `AggregateError`. The
+ * driver's CLI reads it the same way (`closedDatabaseName` in
+ * `@rebasepro/server-postgres`'s `cli-errors.ts`).
+ */
+export declare function closedDatabaseName(error: unknown, depth?: number): string | null;
+/**
+ * The operator's line for a closed database, at most once a minute, when
+ * `error` is one: which database, that nothing is lost, and what opens it. `true`
+ * when it was one — said now or within the minute — so the caller says nothing
+ * more general about it.
+ *
+ * Nothing in a development database closes one but `rebase db branch create
+ * --force`, which closes its source for the copy; one stopped part-way leaves
+ * it closed, and every `rebase db branch` command opens it again first.
+ */
+export declare function warnIfDatabaseClosed(error: unknown): boolean;

package/dist/api/errors.d.ts

@@ -3,16 +3,12 @@ import type { HonoEnv } from "./types.js";
 /**
  * The schema-drift remedy, in the words that work on *this* database.
  *
- * The three copies of this message hard-coded `Run \`pnpm db:push\``, and on a
- * stock scaffold — where the managed PGlite database is the default — that
- * command answers `✗ rebase db push does not work on the managed development
- * database.` and exits 1. So the one instruction the server gave when a
- * developer's schema had drifted was a command their project refuses.
- *
- * Atlas plans a push by diffing against a second, empty database, and PGlite
- * serves exactly one — which is why it cannot run there, and why the remedy
- * has to know which database is under this run. There, boot applies additive
- * changes, so restarting `rebase dev` *is* the fix.
+ * On the managed development database boot applies additive changes, so
+ * restarting `rebase dev` is the first fix there, and `rebase db push` — which
+ * plans against a throwaway database of its own — applies what boot leaves
+ * alone. Elsewhere the push or the migrations are the fix, and a deployed
+ * runtime applies the schema at boot, so the remedy has to know which database
+ * is under this run.
  *
  * `REBASE_DEV_DATABASE_KIND` is set by the CLI from the database it resolved,
  * the same variable `rebase schema generate`'s closing line already branches