@stacksjs/ts-cloud 0.2.15 → 0.2.17

package/dist/aws/client.d.ts

@@ -29,7 +29,45 @@ export interface AWSClientConfig {
     retryDelay?: number;
     cacheEnabled?: boolean;
     defaultCacheTTL?: number;
+    /**
+     * Override the S3 endpoint host for S3-compatible providers (Backblaze B2,
+     * Hetzner Object Storage). Host only, no scheme — e.g.
+     * `s3.us-west-004.backblazeb2.com` or `fsn1.your-objectstorage.com`.
+     * When omitted, the standard AWS S3 endpoint is used.
+     */
+    endpoint?: string;
+    /**
+     * Force path-style addressing (bucket in the path) instead of
+     * virtual-hosted style (bucket in the host). Defaults to virtual-hosted,
+     * which AWS, Backblaze B2 and Hetzner all support.
+     */
+    forcePathStyle?: boolean;
 }
+/**
+ * Resolve the S3 (or S3-compatible) host and canonical request path.
+ *
+ * Supports AWS S3 plus S3-compatible providers (Backblaze B2, Hetzner Object
+ * Storage) by allowing an endpoint override and path- vs virtual-hosted-style
+ * addressing. With no `endpoint` and no `forcePathStyle` the result is byte-for-byte
+ * identical to the previous AWS-only behavior, so existing callers are unaffected.
+ *
+ * The returned `path` is used for BOTH the request URL and the SigV4 canonical
+ * URI, so the signature always matches the wire request.
+ */
+export declare function resolveS3Endpoint(options: {
+    region: string;
+    /** Original request path, e.g. '/key', '/bucket/key' or '/'. */
+    path: string;
+    /** Bucket name when the request is bucket-scoped (virtual-hosted eligible). */
+    bucket?: string;
+    /** Endpoint host override, e.g. 's3.us-west-004.backblazeb2.com'. */
+    endpoint?: string;
+    /** Force path-style addressing (bucket in path) instead of virtual-hosted. */
+    forcePathStyle?: boolean;
+}): {
+    host: string;
+    path: string;
+};
 export interface AWSError extends Error {
     code?: string;
     statusCode?: number;

package/dist/aws/cloudfront.d.ts

@@ -207,6 +207,11 @@ export declare class CloudFrontClient {
      * CloudFront requires specific XML structures - this method handles the complex nesting
      */
     private buildDistributionConfigXml;
+    /**
+     * Allow POST/PUT/PATCH/DELETE on the default cache behavior (and API cache behaviors).
+     * Required when CloudFront fronts a Bun/Node app on EC2 instead of a static S3 site.
+     */
+    ensureDynamicHttpMethods(distributionId: string): Promise<boolean>;
     /**
      * Add aliases to a distribution
      */

package/dist/aws/index.d.ts

@@ -3,6 +3,7 @@
  * Direct API calls for AWS services (no SDK dependencies)
  */
 export * from './client';
+export * from '../object-storage';
 export * from './cloudformation';
 export * from './cost-explorer';
 export * from './ec2';

package/dist/aws/s3.d.ts

@@ -35,6 +35,29 @@ export interface S3Object {
     Size: number;
     ETag?: string;
 }
+/**
+ * Options for configuring an {@link S3Client} against AWS S3 or an
+ * S3-compatible provider (Backblaze B2, Hetzner Object Storage).
+ */
+export interface S3ClientOptions {
+    /**
+     * Endpoint host override (no scheme) for S3-compatible providers, e.g.
+     * `s3.us-west-004.backblazeb2.com` or `fsn1.your-objectstorage.com`.
+     */
+    endpoint?: string;
+    /** Force path-style addressing instead of virtual-hosted. Defaults to virtual-hosted. */
+    forcePathStyle?: boolean;
+    /**
+     * Explicit credentials. When set, these take precedence over profile/env
+     * resolution — used by S3-compatible providers whose keys live in
+     * provider-specific env vars rather than the AWS chain.
+     */
+    credentials?: {
+        accessKeyId: string;
+        secretAccessKey: string;
+        sessionToken?: string;
+    };
+}
 /**
  * S3 client using direct API calls
  */
@@ -42,12 +65,23 @@ export declare class S3Client {
     private client;
     private region;
     private explicitProfile?;
-    constructor(region?: string, profile?: string);
+    private endpoint?;
+    private forcePathStyle?;
+    private explicitCredentials?;
+    constructor(region?: string, profile?: string, options?: S3ClientOptions);
     /**
-     * Get AWS credentials (used by presigned URL / bucket-policy paths that bypass AWSClient.request).
-     * Honors the same explicit-vs-implicit profile semantics as the constructor.
+     * Get credentials (used by presigned URL / bucket-policy paths that bypass AWSClient.request).
+     * Explicit credentials win; otherwise honors the same explicit-vs-implicit profile
+     * semantics as the constructor.
      */
     private getCredentials;
+    /** Base S3 endpoint host (no bucket): the provider endpoint or AWS default. */
+    private s3BaseHost;
+    /**
+     * Virtual-hosted-style host for a bucket. In path-style mode the bucket lives
+     * in the request path instead, so this returns the bare base host.
+     */
+    private s3VirtualHost;
     /**
      * List all S3 buckets in the account
      */

package/dist/aws/ses.d.ts

@@ -2,6 +2,7 @@
  * AWS SES (Simple Email Service) Operations
  * Direct API calls without AWS SDK dependency
  */
+import type { AWSCredentials } from './client';
 export interface EmailIdentity {
     IdentityType?: 'EMAIL_ADDRESS' | 'DOMAIN' | 'MANAGED_DOMAIN';
     IdentityName?: string;
@@ -28,7 +29,15 @@ export interface SendEmailResult {
 export declare class SESClient {
     private client;
     private region;
-    constructor(region?: string);
+    /**
+     * @param region - AWS region (defaults to `us-east-1`)
+     * @param credentials - Optional explicit credentials. When omitted, AWSClient
+     *   falls back to the env-var chain (`AWS_ACCESS_KEY_ID`, etc.) and then to
+     *   `~/.aws/credentials`. Pass explicit creds when the caller has them
+     *   under a non-default config key (e.g. `services.ses.credentials`) so a
+     *   per-service identity doesn't have to overload the global env vars.
+     */
+    constructor(region?: string, credentials?: AWSCredentials);
     /**
      * Create email identity (domain or email address)
      * Uses SES v2 API