@tearleads/client-sdk 0.1.32 → 0.1.34

package/internal/api-client/routes/blobs/get.js.map

@@ -1 +1 @@
-{"version":3,"file":"get.js","sourceRoot":"","sources":["get.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAyBzC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAgC,EAChC,MAAc,EACd,gBAA+B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAE9D,wEAAwE;IACxE,4EAA4E;IAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,wBAAwB,EACxB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EACtB,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjC,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,UAAU,MAAM,WAAW;gBACjC,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,QAAQ,MAAM,6CAA6C;aACrE,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC1D,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,OAAO;gBACjB,cAAc,EAAE,aAAa;aAC9B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc,EAAE,QAAQ,CAAC,IAAI;oBAC3B,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACzC,CAAC,CAAC,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;aAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,IAAI,cAAc,CACvB;QACE,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,EAAE,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAA0E,EAC1E,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,qBAAqB,EAAE;QAC1E,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,iEAAiE;IACjE,uEAAuE;IACvE,iFAAiF;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,IAAI,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,UAAU;QACV,cAAc;QACd,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,0DAA0D;AAC1D,yEAAyE;AACzE,yCAAyC;AACzC,SAAS,0BAA0B,CACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,UAAU;YACd,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  blobWireHeaderKeys,\n  getBlobBytesOperation,\n  getBlobDownloadOperation,\n} from \"@tearleads/validators/operation\";\nimport type { BinaryResponseOperationTransport } from \"../../binaryResponseOperationTransport\";\nimport type { JsonOperationTransport } from \"../../operationTransport\";\nimport type { OperationResponseRequestFn } from \"../../types\";\n\nexport interface BlobBytesResponse {\n  readonly blobId: string;\n  readonly byteLength: number;\n  readonly encryptedBytes: ReadableStream<Uint8Array>;\n  readonly sha256: string;\n}\n\nexport interface UploadMultipartBlobPartBytesRequest {\n  readonly byteLength: number;\n  readonly encryptedBytes: Blob | BufferSource;\n  readonly sha256: string;\n  readonly uploadId: string;\n}\n\ntype BlobDownloadTransport = Pick<JsonOperationTransport, \"requestResult\"> &\n  Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\"> &\n  Pick<OperationResponseRequestFn, \"reportFailure\">;\n\ntype DownloadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nexport async function getBlobBytes(\n  transport: BlobDownloadTransport,\n  blobId: string,\n  downloadFetch: DownloadFetch = (url, init) => fetch(url, init),\n): Promise<BlobBytesResponse | null> {\n  // Refresh at most once. R2 expiration errors can appear as CORS/network\n  // failures in browsers, so both rejected fetches and 403s need a fresh URL.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const result = await transport.requestResult(\n      getBlobDownloadOperation,\n      { params: { blobId } },\n      { reportErrors: false },\n    );\n    if (!result.ok) {\n      if (result.kind === \"http\" && result.status === 404) {\n        return getBlobStream(transport, blobId);\n      }\n      result.report();\n      return null;\n    }\n    const descriptor = result.data;\n    if (descriptor.blobId !== blobId) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: \"GET\",\n        path: `/blobs/${blobId}/download`,\n        status: 200,\n        statusText: \"\",\n        message: `Blob ${blobId} download descriptor has the wrong identity`,\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      return getBlobStream(transport, blobId);\n    }\n    try {\n      // Never send the application's session or cookies to the object store.\n      // Reject redirects and keep bearer URLs out of referrers and errors.\n      const response = await downloadFetch(descriptor.source.url, {\n        cache: \"no-store\",\n        credentials: \"omit\",\n        redirect: \"error\",\n        referrerPolicy: \"no-referrer\",\n      });\n      if (response.status !== 200) {\n        await response.body?.cancel().catch(() => {});\n        if (response.status === 403) {\n          continue;\n        }\n        break;\n      }\n      return {\n        blobId: descriptor.blobId,\n        byteLength: descriptor.byteLength,\n        sha256: descriptor.sha256,\n        encryptedBytes: response.body\n          ? signedDownloadBodyStream(response.body)\n          : bufferedResponseBodyStream(await response.arrayBuffer()),\n      };\n    } catch {\n      // The downstream SDK still verifies length, hash and authenticated\n      // encryption. An error after streaming begins propagates to that reader.\n    }\n  }\n  // Preserve downloads when storage is unreachable or a native HTTP bridge\n  // cannot use the signed URL. This endpoint checks current access again.\n  // A storage failure alone must not signal that the API is offline.\n  return getBlobStream(transport, blobId);\n}\n\nfunction signedDownloadBodyStream(\n  stream: ReadableStream<Uint8Array>,\n): ReadableStream<Uint8Array> {\n  const reader = stream.getReader();\n  // Native network errors may contain the bearer URL. Keep failures generic\n  // before downstream readers log them, without buffering or eager reads.\n  return new ReadableStream<Uint8Array>(\n    {\n      async pull(controller) {\n        try {\n          const { done, value } = await reader.read();\n          if (done) {\n            controller.close();\n            reader.releaseLock();\n          } else {\n            controller.enqueue(value);\n          }\n        } catch {\n          controller.error(new Error(\"Blob download interrupted\"));\n          reader.releaseLock();\n        }\n      },\n      async cancel(reason) {\n        try {\n          await reader.cancel(reason);\n        } catch {\n          throw new Error(\"Blob download cancellation failed\");\n        } finally {\n          reader.releaseLock();\n        }\n      },\n    },\n    { highWaterMark: 0 },\n  );\n}\n\nasync function getBlobStream(\n  transport: Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\">,\n  blobId: string,\n): Promise<BlobBytesResponse | null> {\n  const result = await transport.requestBinaryResponse(getBlobBytesOperation, {\n    params: { blobId },\n  });\n  if (!result) {\n    return null;\n  }\n\n  const { headers, response } = result;\n  const byteLength = Number(headers[blobWireHeaderKeys.blobByteLength]);\n\n  // On the browser / WKWebView-fetch path the body is streamed, so\n  // `response.body` is a live ReadableStream. Under a native HTTP bridge\n  // (CapacitorHttp — which the Capacitor iOS/Android builds enable so cross-origin\n  // API requests reach the backend at all; the WKWebView's own fetch fails from\n  // the app's https://localhost origin) the response is buffered natively and\n  // `response.body` is null even for a valid 200. So take the bytes either way:\n  // the stream when present, otherwise buffer the response and re-wrap it as a\n  // one-shot ReadableStream so callers keep a single streaming interface. This\n  // does not weaken validation — a truncated or corrupted body is still caught\n  // downstream by the X-Tearleads-Blob-Sha256 integrity check; it only stops a\n  // buffered-but-valid response from being rejected here as malformed.\n  const encryptedBytes =\n    response.body ?? bufferedResponseBodyStream(await response.arrayBuffer());\n\n  return {\n    blobId: headers[blobWireHeaderKeys.blobId],\n    byteLength,\n    encryptedBytes,\n    sha256: headers[blobWireHeaderKeys.blobSha256],\n  };\n}\n\n// Wraps a fully-buffered response body as a single-chunk ReadableStream, so a\n// native HTTP bridge that only exposes the buffered bytes (no WHATWG\n// `response.body` stream) can still satisfy the streaming\n// `BlobBytesResponse.encryptedBytes` contract. An empty buffer yields an\n// immediately-closed, zero-chunk stream.\nfunction bufferedResponseBodyStream(\n  buffer: ArrayBuffer,\n): ReadableStream<Uint8Array> {\n  const bytes = new Uint8Array(buffer);\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      if (bytes.byteLength > 0) {\n        controller.enqueue(bytes);\n      }\n      controller.close();\n    },\n  });\n}\n"]}
+{"version":3,"file":"get.js","sourceRoot":"","sources":["get.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAsB5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAgC,EAChC,MAAc,EACd,gBAA+B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC9D,UAAgC,EAAE;IAElC,wEAAwE;IACxE,4EAA4E;IAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,wBAAwB,EACxB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EACtB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjC,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,UAAU,MAAM,WAAW;gBACjC,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,QAAQ,MAAM,6CAA6C;aACrE,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,UAAU,CAAC,MAAM,CAAC,GAAG,EACrB,mBAAmB,CAAC,OAAO,CAAC,CAC7B,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAuE,EACvE,QAAkB;IAElB,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC3B,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,IAAI,cAAc,CACvB;QACE,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,EAAE,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAA0E,EAC1E,MAAc,EACd,OAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAClD,qBAAqB,EACrB;QACE,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,EACD,OAAO,CACR,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,iEAAiE;IACjE,uEAAuE;IACvE,iFAAiF;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,IAAI,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,UAAU;QACV,cAAc;QACd,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,0DAA0D;AAC1D,yEAAyE;AACzE,yCAAyC;AACzC,SAAS,0BAA0B,CACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,UAAU;YACd,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  blobWireHeaderKeys,\n  getBlobBytesOperation,\n  getBlobDownloadOperation,\n} from \"@tearleads/validators/operation\";\nimport type { BinaryResponseOperationTransport } from \"../../binaryResponseOperationTransport\";\nimport type { JsonOperationTransport } from \"../../operationTransport\";\nimport type {\n  OperationResponseRequestFn,\n  RequestResultOptions,\n} from \"../../types\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\nexport interface BlobBytesResponse {\n  readonly blobId: string;\n  readonly byteLength: number;\n  readonly encryptedBytes: ReadableStream<Uint8Array>;\n  readonly sha256: string;\n}\n\nexport interface UploadMultipartBlobPartBytesRequest {\n  readonly byteLength: number;\n  readonly encryptedBytes: Blob | BufferSource;\n  readonly sha256: string;\n  readonly uploadId: string;\n}\n\ntype BlobDownloadTransport = Pick<JsonOperationTransport, \"requestResult\"> &\n  Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\"> &\n  Pick<OperationResponseRequestFn, \"reportFailure\">;\n\ntype DownloadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nexport async function getBlobBytes(\n  transport: BlobDownloadTransport,\n  blobId: string,\n  downloadFetch: DownloadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<BlobBytesResponse | null> {\n  // Refresh at most once. R2 expiration errors can appear as CORS/network\n  // failures in browsers, so both rejected fetches and 403s need a fresh URL.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const result = await transport.requestResult(\n      getBlobDownloadOperation,\n      { params: { blobId } },\n      { ...options, reportErrors: false },\n    );\n    if (!result.ok) {\n      if (result.kind === \"http\" && result.status === 404) {\n        return getBlobStream(transport, blobId, options);\n      }\n      result.report();\n      return null;\n    }\n    const descriptor = result.data;\n    if (descriptor.blobId !== blobId) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: \"GET\",\n        path: `/blobs/${blobId}/download`,\n        status: 200,\n        statusText: \"\",\n        message: `Blob ${blobId} download descriptor has the wrong identity`,\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      return getBlobStream(transport, blobId, options);\n    }\n    try {\n      // Never send the application's session or cookies to the object store.\n      // Reject redirects and keep bearer URLs out of referrers and errors.\n      const response = await downloadFetch(\n        descriptor.source.url,\n        storageFetchOptions(options),\n      );\n      if (response.status !== 200) {\n        await response.body?.cancel().catch(() => {});\n        if (response.status === 403) {\n          continue;\n        }\n        break;\n      }\n      return await signedBlobResponse(descriptor, response);\n    } catch {\n      // The downstream SDK still verifies length, hash and authenticated\n      // encryption. An error after streaming begins propagates to that reader.\n    }\n  }\n  // Preserve downloads when storage is unreachable or a native HTTP bridge\n  // cannot use the signed URL. This endpoint checks current access again.\n  // A storage failure alone must not signal that the API is offline.\n  return getBlobStream(transport, blobId, options);\n}\n\nasync function signedBlobResponse(\n  descriptor: Pick<BlobBytesResponse, \"blobId\" | \"byteLength\" | \"sha256\">,\n  response: Response,\n): Promise<BlobBytesResponse> {\n  return {\n    blobId: descriptor.blobId,\n    byteLength: descriptor.byteLength,\n    sha256: descriptor.sha256,\n    encryptedBytes: response.body\n      ? signedDownloadBodyStream(response.body)\n      : bufferedResponseBodyStream(await response.arrayBuffer()),\n  };\n}\n\nfunction signedDownloadBodyStream(\n  stream: ReadableStream<Uint8Array>,\n): ReadableStream<Uint8Array> {\n  const reader = stream.getReader();\n  // Native network errors may contain the bearer URL. Keep failures generic\n  // before downstream readers log them, without buffering or eager reads.\n  return new ReadableStream<Uint8Array>(\n    {\n      async pull(controller) {\n        try {\n          const { done, value } = await reader.read();\n          if (done) {\n            controller.close();\n            reader.releaseLock();\n          } else {\n            controller.enqueue(value);\n          }\n        } catch {\n          controller.error(new Error(\"Blob download interrupted\"));\n          reader.releaseLock();\n        }\n      },\n      async cancel(reason) {\n        try {\n          await reader.cancel(reason);\n        } catch {\n          throw new Error(\"Blob download cancellation failed\");\n        } finally {\n          reader.releaseLock();\n        }\n      },\n    },\n    { highWaterMark: 0 },\n  );\n}\n\nasync function getBlobStream(\n  transport: Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\">,\n  blobId: string,\n  options: RequestResultOptions,\n): Promise<BlobBytesResponse | null> {\n  if (options.signal?.aborted) return null;\n  const result = await transport.requestBinaryResponse(\n    getBlobBytesOperation,\n    {\n      params: { blobId },\n    },\n    options,\n  );\n  if (!result) {\n    return null;\n  }\n\n  const { headers, response } = result;\n  const byteLength = Number(headers[blobWireHeaderKeys.blobByteLength]);\n\n  // On the browser / WKWebView-fetch path the body is streamed, so\n  // `response.body` is a live ReadableStream. Under a native HTTP bridge\n  // (CapacitorHttp — which the Capacitor iOS/Android builds enable so cross-origin\n  // API requests reach the backend at all; the WKWebView's own fetch fails from\n  // the app's https://localhost origin) the response is buffered natively and\n  // `response.body` is null even for a valid 200. So take the bytes either way:\n  // the stream when present, otherwise buffer the response and re-wrap it as a\n  // one-shot ReadableStream so callers keep a single streaming interface. This\n  // does not weaken validation — a truncated or corrupted body is still caught\n  // downstream by the X-Tearleads-Blob-Sha256 integrity check; it only stops a\n  // buffered-but-valid response from being rejected here as malformed.\n  const encryptedBytes =\n    response.body ?? bufferedResponseBodyStream(await response.arrayBuffer());\n\n  return {\n    blobId: headers[blobWireHeaderKeys.blobId],\n    byteLength,\n    encryptedBytes,\n    sha256: headers[blobWireHeaderKeys.blobSha256],\n  };\n}\n\n// Wraps a fully-buffered response body as a single-chunk ReadableStream, so a\n// native HTTP bridge that only exposes the buffered bytes (no WHATWG\n// `response.body` stream) can still satisfy the streaming\n// `BlobBytesResponse.encryptedBytes` contract. An empty buffer yields an\n// immediately-closed, zero-chunk stream.\nfunction bufferedResponseBodyStream(\n  buffer: ArrayBuffer,\n): ReadableStream<Uint8Array> {\n  const bytes = new Uint8Array(buffer);\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      if (bytes.byteLength > 0) {\n        controller.enqueue(bytes);\n      }\n      controller.close();\n    },\n  });\n}\n"]}

package/internal/api-client/routes/blobs/multipartUpload.js

@@ -0,0 +1,146 @@
+import { md5 } from "@noble/hashes/legacy.js";
+import { bytesToHex } from "../../../crypto/index.js";
+import { authorizeMultipartBlobPartUploadOperation, blobWireHeaderKeys, operationRequestPath, uploadMultipartBlobPartBytesOperation, } from "../../../validators/operation/index.js";
+import { MAX_MULTIPART_BLOB_PART_BYTES } from "../../../validators/util/index.js";
+import { storageFetchOptions } from "./storageFetchOptions.js";
+function invalidPart(transport, path) {
+    transport.reportFailure({
+        kind: "shape",
+        method: authorizeMultipartBlobPartUploadOperation.method,
+        path,
+        status: null,
+        statusText: "",
+        message: "Multipart part bytes do not match the declared length or SHA-256",
+    });
+    return null;
+}
+async function retryStorageStatus(status, attempt) {
+    if (status === 403)
+        return true;
+    const transient = status === 429 || (status >= 500 && status <= 599);
+    if (transient && attempt === 0) {
+        await new Promise((resolve) => setTimeout(resolve, 250));
+    }
+    return transient;
+}
+async function preparePart(input) {
+    // File snapshots mutable buffers and preserves ciphertext across Capacitor's
+    // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes
+    // JSON. File's base64 bridge path is byte-for-byte, including non-UTF-8 data.
+    const file = input.encryptedBytes instanceof File
+        ? input.encryptedBytes
+        : new File([input.encryptedBytes], "encrypted-blob-part", {
+            type: "application/octet-stream",
+        });
+    if (file.size !== input.byteLength ||
+        file.size < 1 ||
+        file.size > MAX_MULTIPART_BLOB_PART_BYTES) {
+        throw new TypeError("Invalid multipart part byte length");
+    }
+    const bytes = await file.arrayBuffer();
+    if (bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes))) !==
+        input.sha256) {
+        throw new TypeError("Multipart part SHA-256 does not match its bytes");
+    }
+    const contentMd5 = btoa(String.fromCharCode(...md5(new Uint8Array(bytes))));
+    return { file, contentMd5 };
+}
+export async function uploadMultipartBlobPartBytes(transport, stageId, partNumber, input, uploadFetch = (url, init) => fetch(url, init), options = {}) {
+    if (options.signal?.aborted)
+        return null;
+    const operation = authorizeMultipartBlobPartUploadOperation;
+    const params = { stageId, partNumber };
+    const path = operationRequestPath(operation, params);
+    const prepared = await preparePart(input).catch(() => invalidPart(transport, path));
+    if (!prepared)
+        return null;
+    const { file, contentMd5 } = prepared;
+    const body = {
+        byteLength: input.byteLength,
+        contentMd5,
+        uploadId: input.uploadId,
+    };
+    let status = null;
+    // Sign just in time for each part, not once for the entire file. A network
+    // failure may be an expired URL hidden by R2 CORS, or a lost success response;
+    // reauthorize once and send the same immutable bytes to the same part number.
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+        if (options.signal?.aborted)
+            return null;
+        const result = await transport.requestResult(operation, { params, body }, options);
+        if (!result.ok)
+            return null;
+        const descriptor = result.data;
+        if (descriptor.stageId !== stageId ||
+            descriptor.uploadId !== input.uploadId ||
+            descriptor.partNumber !== partNumber ||
+            descriptor.byteLength !== input.byteLength ||
+            descriptor.contentMd5 !== contentMd5) {
+            transport.reportFailure({
+                kind: "shape",
+                method: operation.method,
+                path,
+                status: 200,
+                statusText: "",
+                message: "Multipart upload descriptor does not match its part",
+            });
+            return null;
+        }
+        if (descriptor.source.kind === "api") {
+            // A capability path for memory/custom stores; S3/R2 never proxy parts.
+            return transport.requestBinaryRequest(uploadMultipartBlobPartBytesOperation, {
+                params,
+                body: input.encryptedBytes,
+                headers: {
+                    [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),
+                    [blobWireHeaderKeys.partSha256]: input.sha256,
+                    [blobWireHeaderKeys.partUploadId]: input.uploadId,
+                },
+            }, { ...options, encodeBody: () => file });
+        }
+        try {
+            const response = await uploadFetch(descriptor.source.url, {
+                method: "PUT",
+                body: file,
+                headers: {
+                    "Content-Type": "application/octet-stream",
+                    "Content-MD5": contentMd5,
+                },
+                ...storageFetchOptions(options),
+            });
+            status = response.status;
+            const etag = response.headers.get("ETag")?.trim();
+            await response.body?.cancel().catch(() => { });
+            if (status === 200 && etag) {
+                return {
+                    stageId,
+                    uploadId: input.uploadId,
+                    part: { byteLength: input.byteLength, partNumber, etag },
+                };
+            }
+            if (!(await retryStorageStatus(status, attempt)))
+                break;
+        }
+        catch {
+            // Never expose a provider exception or body: it may contain the bearer URL.
+            status = null;
+        }
+    }
+    if (options.signal?.aborted)
+        return null;
+    reportStorageFailure(transport, path, partNumber, status);
+    return null;
+}
+function reportStorageFailure(transport, path, partNumber, status) {
+    transport.reportFailure({
+        kind: "storage",
+        method: authorizeMultipartBlobPartUploadOperation.method,
+        path,
+        status,
+        statusText: "",
+        message: status === 200
+            ? `Multipart part ${partNumber} storage response is missing ETag; check storage CORS exposure`
+            : `Multipart part ${partNumber} storage upload failed${status === null ? "" : ` (HTTP ${status})`}`,
+    });
+}
+//# sourceMappingURL=multipartUpload.js.map

package/internal/api-client/routes/blobs/multipartUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["multipartUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,kBAAkB,EAClB,oBAAoB,EACpB,qCAAqC,GACtC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAI3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,SAAS,WAAW,CAAC,SAA6B,EAAE,IAAY;IAC9D,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,kEAAkE;KAC5E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IAC/D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAA0C;IACnE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GACR,KAAK,CAAC,cAAc,YAAY,IAAI;QAClC,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE;YACtD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACT,IACE,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU;QAC9B,IAAI,CAAC,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,6BAA6B,EACzC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,IACE,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EACZ,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA6B,EAC7B,OAAe,EACf,UAAkB,EAClB,KAA0C,EAC1C,cAA2B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC1D,UAAgC,EAAE;IAElC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,SAAS,GAAG,yCAAyC,CAAC;IAC5D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACnD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,SAAS,EACT,EAAE,MAAM,EAAE,IAAI,EAAE,EAChB,OAAO,CACR,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IACE,UAAU,CAAC,OAAO,KAAK,OAAO;YAC9B,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACtC,UAAU,CAAC,UAAU,KAAK,UAAU;YACpC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAC1C,UAAU,CAAC,UAAU,KAAK,UAAU,EACpC,CAAC;YACD,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,IAAI;gBACJ,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,uEAAuE;YACvE,OAAO,SAAS,CAAC,oBAAoB,CACnC,qCAAqC,EACrC;gBACE,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,cAAc;gBAC1B,OAAO,EAAE;oBACP,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;oBAChE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM;oBAC7C,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ;iBAClD;aACF,EACD,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBACxD,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACP,cAAc,EAAE,0BAA0B;oBAC1C,aAAa,EAAE,UAAU;iBAC1B;gBACD,GAAG,mBAAmB,CAAC,OAAO,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO;oBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAAE,MAAM;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA6B,EAC7B,IAAY,EACZ,UAAkB,EAClB,MAAqB;IAErB,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,EAAE;QACd,OAAO,EACL,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,kBAAkB,UAAU,gEAAgE;YAC9F,CAAC,CAAC,kBAAkB,UAAU,yBAAyB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,EAAE;KACxG,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { md5 } from \"@noble/hashes/legacy.js\";\nimport { bytesToHex } from \"@tearleads/crypto\";\nimport {\n  authorizeMultipartBlobPartUploadOperation,\n  blobWireHeaderKeys,\n  operationRequestPath,\n  uploadMultipartBlobPartBytesOperation,\n} from \"@tearleads/validators/operation\";\nimport type { UploadMultipartBlobPartResponse } from \"@tearleads/validators/response\";\nimport { MAX_MULTIPART_BLOB_PART_BYTES } from \"@tearleads/validators/util\";\nimport type { OperationTransport } from \"../../operationTransportFactory\";\nimport type { RequestResultOptions } from \"../../types\";\nimport type { UploadMultipartBlobPartBytesRequest } from \"./get\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\ntype UploadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nfunction invalidPart(transport: OperationTransport, path: string) {\n  transport.reportFailure({\n    kind: \"shape\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status: null,\n    statusText: \"\",\n    message: \"Multipart part bytes do not match the declared length or SHA-256\",\n  });\n  return null;\n}\n\nasync function retryStorageStatus(status: number, attempt: number) {\n  if (status === 403) return true;\n  const transient = status === 429 || (status >= 500 && status <= 599);\n  if (transient && attempt === 0) {\n    await new Promise<void>((resolve) => setTimeout(resolve, 250));\n  }\n  return transient;\n}\n\nasync function preparePart(input: UploadMultipartBlobPartBytesRequest) {\n  // File snapshots mutable buffers and preserves ciphertext across Capacitor's\n  // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes\n  // JSON. File's base64 bridge path is byte-for-byte, including non-UTF-8 data.\n  const file =\n    input.encryptedBytes instanceof File\n      ? input.encryptedBytes\n      : new File([input.encryptedBytes], \"encrypted-blob-part\", {\n          type: \"application/octet-stream\",\n        });\n  if (\n    file.size !== input.byteLength ||\n    file.size < 1 ||\n    file.size > MAX_MULTIPART_BLOB_PART_BYTES\n  ) {\n    throw new TypeError(\"Invalid multipart part byte length\");\n  }\n  const bytes = await file.arrayBuffer();\n  if (\n    bytesToHex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes))) !==\n    input.sha256\n  ) {\n    throw new TypeError(\"Multipart part SHA-256 does not match its bytes\");\n  }\n  const contentMd5 = btoa(String.fromCharCode(...md5(new Uint8Array(bytes))));\n  return { file, contentMd5 };\n}\n\nexport async function uploadMultipartBlobPartBytes(\n  transport: OperationTransport,\n  stageId: string,\n  partNumber: number,\n  input: UploadMultipartBlobPartBytesRequest,\n  uploadFetch: UploadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<UploadMultipartBlobPartResponse | null> {\n  if (options.signal?.aborted) return null;\n  const operation = authorizeMultipartBlobPartUploadOperation;\n  const params = { stageId, partNumber };\n  const path = operationRequestPath(operation, params);\n  const prepared = await preparePart(input).catch(() =>\n    invalidPart(transport, path),\n  );\n  if (!prepared) return null;\n  const { file, contentMd5 } = prepared;\n  const body = {\n    byteLength: input.byteLength,\n    contentMd5,\n    uploadId: input.uploadId,\n  };\n  let status: number | null = null;\n  // Sign just in time for each part, not once for the entire file. A network\n  // failure may be an expired URL hidden by R2 CORS, or a lost success response;\n  // reauthorize once and send the same immutable bytes to the same part number.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const result = await transport.requestResult(\n      operation,\n      { params, body },\n      options,\n    );\n    if (!result.ok) return null;\n    const descriptor = result.data;\n    if (\n      descriptor.stageId !== stageId ||\n      descriptor.uploadId !== input.uploadId ||\n      descriptor.partNumber !== partNumber ||\n      descriptor.byteLength !== input.byteLength ||\n      descriptor.contentMd5 !== contentMd5\n    ) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: operation.method,\n        path,\n        status: 200,\n        statusText: \"\",\n        message: \"Multipart upload descriptor does not match its part\",\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      // A capability path for memory/custom stores; S3/R2 never proxy parts.\n      return transport.requestBinaryRequest(\n        uploadMultipartBlobPartBytesOperation,\n        {\n          params,\n          body: input.encryptedBytes,\n          headers: {\n            [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),\n            [blobWireHeaderKeys.partSha256]: input.sha256,\n            [blobWireHeaderKeys.partUploadId]: input.uploadId,\n          },\n        },\n        { ...options, encodeBody: () => file },\n      );\n    }\n    try {\n      const response = await uploadFetch(descriptor.source.url, {\n        method: \"PUT\",\n        body: file,\n        headers: {\n          \"Content-Type\": \"application/octet-stream\",\n          \"Content-MD5\": contentMd5,\n        },\n        ...storageFetchOptions(options),\n      });\n      status = response.status;\n      const etag = response.headers.get(\"ETag\")?.trim();\n      await response.body?.cancel().catch(() => {});\n      if (status === 200 && etag) {\n        return {\n          stageId,\n          uploadId: input.uploadId,\n          part: { byteLength: input.byteLength, partNumber, etag },\n        };\n      }\n      if (!(await retryStorageStatus(status, attempt))) break;\n    } catch {\n      // Never expose a provider exception or body: it may contain the bearer URL.\n      status = null;\n    }\n  }\n  if (options.signal?.aborted) return null;\n  reportStorageFailure(transport, path, partNumber, status);\n  return null;\n}\n\nfunction reportStorageFailure(\n  transport: OperationTransport,\n  path: string,\n  partNumber: number,\n  status: number | null,\n) {\n  transport.reportFailure({\n    kind: \"storage\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status,\n    statusText: \"\",\n    message:\n      status === 200\n        ? `Multipart part ${partNumber} storage response is missing ETag; check storage CORS exposure`\n        : `Multipart part ${partNumber} storage upload failed${status === null ? \"\" : ` (HTTP ${status})`}`,\n  });\n}\n"]}

package/internal/api-client/routes/blobs/storageFetchOptions.js

@@ -0,0 +1,11 @@
+/** Keep bearer URLs and application credentials out of object-store requests. */
+export function storageFetchOptions(options) {
+    return {
+        cache: "no-store",
+        credentials: "omit",
+        redirect: "error",
+        referrerPolicy: "no-referrer",
+        ...(options.signal ? { signal: options.signal } : {}),
+    };
+}
+//# sourceMappingURL=storageFetchOptions.js.map

package/internal/api-client/routes/blobs/storageFetchOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storageFetchOptions.js","sourceRoot":"","sources":["storageFetchOptions.ts"],"names":[],"mappings":"AAEA,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,OAA6B;IAE7B,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,aAAa;QAC7B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC","sourcesContent":["import type { RequestResultOptions } from \"../../types\";\n\n/** Keep bearer URLs and application credentials out of object-store requests. */\nexport function storageFetchOptions(\n  options: RequestResultOptions,\n): RequestInit {\n  return {\n    cache: \"no-store\",\n    credentials: \"omit\",\n    redirect: \"error\",\n    referrerPolicy: \"no-referrer\",\n    ...(options.signal ? { signal: options.signal } : {}),\n  };\n}\n"]}

package/internal/api-client/types.d.ts

@@ -21,7 +21,7 @@ export interface RequestResultOptions {
 }
 export type OperationRequestFn = <T>(path: string, validator: (value: unknown) => value is T, method: HttpMethod, body: RequestBody | undefined, options: RequestResultOptions | undefined, failureOperation: HttpOperation) => Promise<T | null>;
 export type OperationRequestResultFn = <T>(path: string, validator: (value: unknown) => value is T, method: HttpMethod, body: RequestBody | undefined, options: RequestResultOptions | undefined, failureOperation: HttpOperation) => Promise<RequestResult<T>>;
-export type RequestFailureKind = "http" | "network" | "json" | "shape" | "cancelled" | "outcome-unknown";
+export type RequestFailureKind = "storage" | "http" | "network" | "json" | "shape" | "cancelled" | "outcome-unknown";
 export interface RequestFailure {
     readonly code?: string | undefined;
     readonly kind: RequestFailureKind;

package/internal/api-client/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  DocumentAttributionRangesQuery,\n  HttpOperation,\n  HttpOperationMethod,\n} from \"@tearleads/validators/operation\";\nimport type {\n  ReferencedPrincipalStateResponse,\n  SyncWatermark,\n} from \"@tearleads/validators/response\";\n\nexport type HttpMethod = HttpOperationMethod;\nexport type RequestBody = BodyInit;\n\nexport interface ListContainerDocumentsOptions {\n  limit?: number;\n  watermark?: SyncWatermark | null;\n}\n\nexport type ListDocumentEditAttributionRangesOptions = Omit<\n  DocumentAttributionRangesQuery,\n  \"cursor\"\n> & {\n  cursor?: DocumentAttributionRangesQuery[\"cursor\"] | null;\n};\n\nexport interface RequestResultOptions {\n  readonly signal?: AbortSignal | undefined;\n  /** Expected target for a declared 402; mismatched response identities fail closed. */\n  readonly expectedPaymentRequiredOrganizationId?: string | undefined;\n  readonly headers?: Record<string, string> | undefined;\n  readonly reportErrors?: boolean | undefined;\n  /** Called after this request or a concurrent request renews the same session. */\n  readonly onSessionRenewed?: (() => void) | undefined;\n  readonly retryOnSessionExpired?: boolean | \"renew-only\" | undefined;\n}\n\nexport type OperationRequestFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<T | null>;\n\nexport type OperationRequestResultFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<RequestResult<T>>;\n\nexport type RequestFailureKind =\n  | \"http\"\n  | \"network\"\n  | \"json\"\n  | \"shape\"\n  | \"cancelled\"\n  | \"outcome-unknown\";\n\nexport interface RequestFailure {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly ok: false;\n  readonly path: string;\n  readonly report: () => void;\n  readonly status: number | null;\n  readonly statusText: string;\n  readonly stalePrincipalHeads?: ReferencedPrincipalStateResponse[] | undefined;\n  /**\n   * With `container_descendant_rekeys_required`, the full owed set, parent-first;\n   * with `container_descendant_rekeys_inaccessible`, its unwritable subset.\n   * A hint, never authority; verify each container before signing for it.\n   */\n  readonly requiredContainerIds?: readonly string[] | undefined;\n}\n\nexport interface RequestSuccess<T> {\n  readonly data: T;\n  readonly ok: true;\n}\n\nexport type RequestResult<T> = RequestFailure | RequestSuccess<T>;\n\nexport interface ResponseRequestValidationFailureInput {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly options?: RequestResultOptions | undefined;\n  readonly path: string;\n  readonly status: number | null;\n  readonly statusText: string;\n}\n\nexport interface OperationResponseRequestFn {\n  (\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: HttpOperation,\n  ): Promise<RequestResult<Response>>;\n  readonly reportFailure: (\n    input: ResponseRequestValidationFailureInput,\n  ) => RequestFailure;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  DocumentAttributionRangesQuery,\n  HttpOperation,\n  HttpOperationMethod,\n} from \"@tearleads/validators/operation\";\nimport type {\n  ReferencedPrincipalStateResponse,\n  SyncWatermark,\n} from \"@tearleads/validators/response\";\n\nexport type HttpMethod = HttpOperationMethod;\nexport type RequestBody = BodyInit;\n\nexport interface ListContainerDocumentsOptions {\n  limit?: number;\n  watermark?: SyncWatermark | null;\n}\n\nexport type ListDocumentEditAttributionRangesOptions = Omit<\n  DocumentAttributionRangesQuery,\n  \"cursor\"\n> & {\n  cursor?: DocumentAttributionRangesQuery[\"cursor\"] | null;\n};\n\nexport interface RequestResultOptions {\n  readonly signal?: AbortSignal | undefined;\n  /** Expected target for a declared 402; mismatched response identities fail closed. */\n  readonly expectedPaymentRequiredOrganizationId?: string | undefined;\n  readonly headers?: Record<string, string> | undefined;\n  readonly reportErrors?: boolean | undefined;\n  /** Called after this request or a concurrent request renews the same session. */\n  readonly onSessionRenewed?: (() => void) | undefined;\n  readonly retryOnSessionExpired?: boolean | \"renew-only\" | undefined;\n}\n\nexport type OperationRequestFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<T | null>;\n\nexport type OperationRequestResultFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<RequestResult<T>>;\n\nexport type RequestFailureKind =\n  | \"storage\"\n  | \"http\"\n  | \"network\"\n  | \"json\"\n  | \"shape\"\n  | \"cancelled\"\n  | \"outcome-unknown\";\n\nexport interface RequestFailure {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly ok: false;\n  readonly path: string;\n  readonly report: () => void;\n  readonly status: number | null;\n  readonly statusText: string;\n  readonly stalePrincipalHeads?: ReferencedPrincipalStateResponse[] | undefined;\n  /**\n   * With `container_descendant_rekeys_required`, the full owed set, parent-first;\n   * with `container_descendant_rekeys_inaccessible`, its unwritable subset.\n   * A hint, never authority; verify each container before signing for it.\n   */\n  readonly requiredContainerIds?: readonly string[] | undefined;\n}\n\nexport interface RequestSuccess<T> {\n  readonly data: T;\n  readonly ok: true;\n}\n\nexport type RequestResult<T> = RequestFailure | RequestSuccess<T>;\n\nexport interface ResponseRequestValidationFailureInput {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly options?: RequestResultOptions | undefined;\n  readonly path: string;\n  readonly status: number | null;\n  readonly statusText: string;\n}\n\nexport interface OperationResponseRequestFn {\n  (\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: HttpOperation,\n  ): Promise<RequestResult<Response>>;\n  readonly reportFailure: (\n    input: ResponseRequestValidationFailureInput,\n  ) => RequestFailure;\n}\n"]}

package/internal/validators/operation/blobDownloads.js

@@ -1,15 +1,9 @@
 import { z } from "zod";
-import { registerJsonSchemaFragment } from "../jsonSchema.js";
 import { ErrorResponseSchema, SessionFailureResponseSchema } from "../response/index.js";
 import { safeNonNegativeIntegerSchema, sha256HexStringSchema, uuidStringSchema, } from "../schema.js";
 import { BlobBytesPathParamsSchema } from "./blobBytes.js";
+import { signedBlobUrlExpirySchema, signedBlobUrlSchema, } from "./blobTransferSchemas.js";
 import { defineJsonOperation } from "./definition.js";
-const downloadUrlSchema = z.url().regex(/^https?:\/\//u);
-const downloadExpirySchema = z.iso.datetime();
-function stringSchemaFragment(schema) {
-    const { $schema: _dialect, ...fragment } = z.toJSONSchema(schema);
-    return registerJsonSchemaFragment(z.custom((value) => schema.safeParse(value).success), fragment);
-}
 export const BlobDownloadResponseSchema = z.strictObject({
     blobId: uuidStringSchema,
     byteLength: safeNonNegativeIntegerSchema,
@@ -18,8 +12,8 @@ export const BlobDownloadResponseSchema = z.strictObject({
         z.strictObject({ kind: z.literal("api") }),
         z.strictObject({
             kind: z.literal("signed-url"),
-            url: stringSchemaFragment(downloadUrlSchema),
-            expiresAt: stringSchemaFragment(downloadExpirySchema),
+            url: signedBlobUrlSchema,
+            expiresAt: signedBlobUrlExpirySchema,
         }),
     ]),
 });

package/internal/validators/operation/blobDownloads.js.map

@@ -1 +1 @@
-{"version":3,"file":"blobDownloads.js","sourceRoot":"","sources":["blobDownloads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AACzD,MAAM,oBAAoB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAE9C,SAAS,oBAAoB,CAAC,MAAyB;IACrD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CAAS,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAC5D,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IACvD,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,4BAA4B;IACxC,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACnC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,CAAC,CAAC,YAAY,CAAC;YACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YAC7B,GAAG,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;YAC5C,SAAS,EAAE,oBAAoB,CAAC,oBAAoB,CAAC;SACtD,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,oBAAoB;IACxB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,yBAAyB;IACjC,IAAI,EAAE,0BAA0B;IAChC,SAAS,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE;CAC/C,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"../jsonSchema\";\nimport { ErrorResponseSchema, SessionFailureResponseSchema } from \"../response\";\nimport {\n  safeNonNegativeIntegerSchema,\n  sha256HexStringSchema,\n  uuidStringSchema,\n} from \"../schema\";\nimport { BlobBytesPathParamsSchema } from \"./blobBytes\";\nimport { defineJsonOperation } from \"./definition\";\n\nconst downloadUrlSchema = z.url().regex(/^https?:\\/\\//u);\nconst downloadExpirySchema = z.iso.datetime();\n\nfunction stringSchemaFragment(schema: z.ZodType<string>) {\n  const { $schema: _dialect, ...fragment } = z.toJSONSchema(schema);\n  return registerJsonSchemaFragment(\n    z.custom<string>((value) => schema.safeParse(value).success),\n    fragment,\n  );\n}\n\nexport const BlobDownloadResponseSchema = z.strictObject({\n  blobId: uuidStringSchema,\n  byteLength: safeNonNegativeIntegerSchema,\n  sha256: sha256HexStringSchema,\n  source: z.discriminatedUnion(\"kind\", [\n    z.strictObject({ kind: z.literal(\"api\") }),\n    z.strictObject({\n      kind: z.literal(\"signed-url\"),\n      url: stringSchemaFragment(downloadUrlSchema),\n      expiresAt: stringSchemaFragment(downloadExpirySchema),\n    }),\n  ]),\n});\n\nexport type BlobDownloadResponse = z.infer<typeof BlobDownloadResponseSchema>;\n\nexport const getBlobDownloadOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: ErrorResponseSchema,\n    409: ErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"blobs.download.get\",\n  method: \"GET\",\n  params: BlobBytesPathParamsSchema,\n  path: \"/blobs/{blobId}/download\",\n  responses: { 200: BlobDownloadResponseSchema },\n});\n"]}
+{"version":3,"file":"blobDownloads.js","sourceRoot":"","sources":["blobDownloads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IACvD,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,4BAA4B;IACxC,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACnC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,CAAC,CAAC,YAAY,CAAC;YACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YAC7B,GAAG,EAAE,mBAAmB;YACxB,SAAS,EAAE,yBAAyB;SACrC,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,oBAAoB;IACxB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,yBAAyB;IACjC,IAAI,EAAE,0BAA0B;IAChC,SAAS,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE;CAC/C,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { ErrorResponseSchema, SessionFailureResponseSchema } from \"../response\";\nimport {\n  safeNonNegativeIntegerSchema,\n  sha256HexStringSchema,\n  uuidStringSchema,\n} from \"../schema\";\nimport { BlobBytesPathParamsSchema } from \"./blobBytes\";\nimport {\n  signedBlobUrlExpirySchema,\n  signedBlobUrlSchema,\n} from \"./blobTransferSchemas\";\nimport { defineJsonOperation } from \"./definition\";\n\nexport const BlobDownloadResponseSchema = z.strictObject({\n  blobId: uuidStringSchema,\n  byteLength: safeNonNegativeIntegerSchema,\n  sha256: sha256HexStringSchema,\n  source: z.discriminatedUnion(\"kind\", [\n    z.strictObject({ kind: z.literal(\"api\") }),\n    z.strictObject({\n      kind: z.literal(\"signed-url\"),\n      url: signedBlobUrlSchema,\n      expiresAt: signedBlobUrlExpirySchema,\n    }),\n  ]),\n});\n\nexport type BlobDownloadResponse = z.infer<typeof BlobDownloadResponseSchema>;\n\nexport const getBlobDownloadOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: ErrorResponseSchema,\n    409: ErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"blobs.download.get\",\n  method: \"GET\",\n  params: BlobBytesPathParamsSchema,\n  path: \"/blobs/{blobId}/download\",\n  responses: { 200: BlobDownloadResponseSchema },\n});\n"]}

package/internal/validators/operation/blobTransferSchemas.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+import { registerJsonSchemaFragment } from "../jsonSchema.js";
+function stringSchemaFragment(schema) {
+    const { $schema: _dialect, ...fragment } = z.toJSONSchema(schema);
+    return registerJsonSchemaFragment(z.custom((value) => schema.safeParse(value).success), fragment);
+}
+export const signedBlobUrlSchema = stringSchemaFragment(z.url().regex(/^https?:\/\//u));
+export const signedBlobUrlExpirySchema = stringSchemaFragment(z.iso.datetime());
+// R2 transport checksum; assembled SHA-256 remains the application authority.
+export const blobPartContentMd5Schema = stringSchemaFragment(z.string().regex(/^[A-Za-z0-9+/]{21}[AQgw]==$/u));
+//# sourceMappingURL=blobTransferSchemas.js.map

package/internal/validators/operation/blobTransferSchemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobTransferSchemas.js","sourceRoot":"","sources":["blobTransferSchemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAE3D,SAAS,oBAAoB,CAAC,MAAyB;IACrD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CAAS,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAC5D,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CACrD,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAC/B,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CACjD,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"../jsonSchema\";\n\nfunction stringSchemaFragment(schema: z.ZodType<string>) {\n  const { $schema: _dialect, ...fragment } = z.toJSONSchema(schema);\n  return registerJsonSchemaFragment(\n    z.custom<string>((value) => schema.safeParse(value).success),\n    fragment,\n  );\n}\n\nexport const signedBlobUrlSchema = stringSchemaFragment(\n  z.url().regex(/^https?:\\/\\//u),\n);\nexport const signedBlobUrlExpirySchema = stringSchemaFragment(z.iso.datetime());\n\n// R2 transport checksum; assembled SHA-256 remains the application authority.\nexport const blobPartContentMd5Schema = stringSchemaFragment(\n  z.string().regex(/^[A-Za-z0-9+/]{21}[AQgw]==$/u),\n);\n"]}

package/internal/validators/operation/index.d.ts

@@ -14,6 +14,7 @@ export { type DocumentSyncPathParams, DocumentSyncPathParamsSchema, documentSync
 export { operationRequestHeaderNames, operationResponseHeaderNames, } from "./headerNames.js";
 export { getHealthOperation, isGetHealthOperationResponse, } from "./health.js";
 export { completeMultipartBlobStageOperation, getMultipartBlobStageOperation, initiateMultipartBlobStageOperation, isCompleteMultipartBlobStageOperationRequest, isCompleteMultipartBlobStageOperationResponse, isGetMultipartBlobStageOperationResponse, isInitiateMultipartBlobStageOperationRequest, isInitiateMultipartBlobStageOperationResponse, type MultipartBlobStagePathParams, MultipartBlobStagePathParamsSchema, } from "./multipartBlobs.js";
+export { authorizeMultipartBlobPartUploadOperation, type MultipartBlobPartUploadRequest, MultipartBlobPartUploadRequestSchema, type MultipartBlobPartUploadResponse, MultipartBlobPartUploadResponseSchema, } from "./multipartPartUploads.js";
 export { claimNativeOrganizationSubscriptionOperation, getOrganizationBillingHistoryOperation, getOrganizationBillingManagementUrlOperation, getOrganizationBillingOperation, getOrganizationNativePurchaseEligibilityOperation, isClaimNativeOrganizationSubscriptionOperationResponse, isGetOrganizationBillingHistoryOperationResponse, isGetOrganizationBillingManagementUrlOperationResponse, isGetOrganizationBillingOperationResponse, isGetOrganizationNativePurchaseEligibilityOperationResponse, isStartOrganizationTrialOperationResponse, type OrganizationBillingNativeClaimPathParams, OrganizationBillingNativeClaimPathParamsSchema, type OrganizationBillingNativeEligibilityQuery, OrganizationBillingNativeEligibilityQuerySchema, type OrganizationBillingPathParams, OrganizationBillingPathParamsSchema, startOrganizationTrialOperation, } from "./organizationBilling.js";
 export { getOrganizationPolicyHistoryOperation } from "./organizationPolicyHistory.js";
 export { createOrganizationGroupOperation, createOrganizationOperation, deleteOrganizationGroupOperation, getOrganizationDataUsageOperation, getOrganizationReadModelOperation, isCreateOrganizationGroupOperationRequest, isCreateOrganizationGroupOperationResponse, isCreateOrganizationOperationRequest, isCreateOrganizationOperationResponse, isDeleteOrganizationGroupOperationResponse, isGetOrganizationDataUsageOperationResponse, isGetOrganizationReadModelOperationResponse, isListOrganizationGroupMembersOperationResponse, isUpdateOrganizationProfileOperationRequest, isUpdateOrganizationProfileOperationResponse, isUpdateOrganizationRosterEntryOperationRequest, isUpdateOrganizationRosterEntryOperationResponse, listOrganizationGroupMembersOperation, type OrganizationGroupPathParams, OrganizationGroupPathParamsSchema, type OrganizationPathParams, OrganizationPathParamsSchema, type OrganizationRosterPathParams, OrganizationRosterPathParamsSchema, updateOrganizationProfileOperation, updateOrganizationRosterEntryOperation, } from "./organizations.js";

package/internal/validators/operation/index.js

@@ -14,6 +14,7 @@ export { DocumentSyncPathParamsSchema, documentSyncOperation, isDocumentSyncOper
 export { operationRequestHeaderNames, operationResponseHeaderNames, } from "./headerNames.js";
 export { getHealthOperation, isGetHealthOperationResponse, } from "./health.js";
 export { completeMultipartBlobStageOperation, getMultipartBlobStageOperation, initiateMultipartBlobStageOperation, isCompleteMultipartBlobStageOperationRequest, isCompleteMultipartBlobStageOperationResponse, isGetMultipartBlobStageOperationResponse, isInitiateMultipartBlobStageOperationRequest, isInitiateMultipartBlobStageOperationResponse, MultipartBlobStagePathParamsSchema, } from "./multipartBlobs.js";
+export { authorizeMultipartBlobPartUploadOperation, MultipartBlobPartUploadRequestSchema, MultipartBlobPartUploadResponseSchema, } from "./multipartPartUploads.js";
 export { claimNativeOrganizationSubscriptionOperation, getOrganizationBillingHistoryOperation, getOrganizationBillingManagementUrlOperation, getOrganizationBillingOperation, getOrganizationNativePurchaseEligibilityOperation, isClaimNativeOrganizationSubscriptionOperationResponse, isGetOrganizationBillingHistoryOperationResponse, isGetOrganizationBillingManagementUrlOperationResponse, isGetOrganizationBillingOperationResponse, isGetOrganizationNativePurchaseEligibilityOperationResponse, isStartOrganizationTrialOperationResponse, OrganizationBillingNativeClaimPathParamsSchema, OrganizationBillingNativeEligibilityQuerySchema, OrganizationBillingPathParamsSchema, startOrganizationTrialOperation, } from "./organizationBilling.js";
 export { getOrganizationPolicyHistoryOperation } from "./organizationPolicyHistory.js";
 export { createOrganizationGroupOperation, createOrganizationOperation, deleteOrganizationGroupOperation, getOrganizationDataUsageOperation, getOrganizationReadModelOperation, isCreateOrganizationGroupOperationRequest, isCreateOrganizationGroupOperationResponse, isCreateOrganizationOperationRequest, isCreateOrganizationOperationResponse, isDeleteOrganizationGroupOperationResponse, isGetOrganizationDataUsageOperationResponse, isGetOrganizationReadModelOperationResponse, isListOrganizationGroupMembersOperationResponse, isUpdateOrganizationProfileOperationRequest, isUpdateOrganizationProfileOperationResponse, isUpdateOrganizationRosterEntryOperationRequest, isUpdateOrganizationRosterEntryOperationResponse, listOrganizationGroupMembersOperation, OrganizationGroupPathParamsSchema, OrganizationPathParamsSchema, OrganizationRosterPathParamsSchema, updateOrganizationProfileOperation, updateOrganizationRosterEntryOperation, } from "./organizations.js";

package/internal/validators/operation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAEL,qCAAqC,EAErC,8BAA8B,EAC9B,2BAA2B,EAE3B,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,uCAAuC,EACvC,0CAA0C,EAC1C,gCAAgC,GACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,kCAAkC,EAClC,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,wBAAwB,GACzB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,0CAA0C,EAC1C,2CAA2C,EAC3C,sCAAsC,EACtC,uCAAuC,EAEvC,8BAA8B,EAC9B,iCAAiC,EACjC,6BAA6B,EAE7B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAEhB,yBAAyB,EAEzB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,+CAA+C,EAE/C,8BAA8B,EAE9B,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,iCAAiC,EACjC,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,0BAA0B,EAE1B,6BAA6B,EAC7B,2BAA2B,EAC3B,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,2CAA2C,EAE3C,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,gDAAgD,EAChD,8CAA8C,GAC/C,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EAQnB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,mCAAmC,EAEnC,oCAAoC,EAEpC,uCAAuC,EACvC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,yCAAyC,EACzC,gDAAgD,EAChD,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAEvB,gCAAgC,EAEhC,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,wCAAwC,EACxC,+BAA+B,EAC/B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,4CAA4C,EAC5C,6CAA6C,EAC7C,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAE7C,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EACtC,4CAA4C,EAC5C,+BAA+B,EAC/B,iDAAiD,EACjD,sDAAsD,EACtD,gDAAgD,EAChD,sDAAsD,EACtD,yCAAyC,EACzC,2DAA2D,EAC3D,yCAAyC,EAEzC,8CAA8C,EAE9C,+CAA+C,EAE/C,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qCAAqC,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,oCAAoC,EACpC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,4CAA4C,EAC5C,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EAErC,iCAAiC,EAEjC,4BAA4B,EAE5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EACtC,2BAA2B,EAC3B,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EACrC,oCAAoC,EACpC,qCAAqC,EAErC,uCAAuC,EAEvC,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,mCAAmC,EAEnC,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,qCAAqC,EACrC,gDAAgD,EAChD,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,EAE3B,yBAAyB,EAEzB,4BAA4B,GAC7B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,qCAAqC,EACrC,4BAA4B,EAC5B,gCAAgC,EAChC,uCAAuC,EACvC,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oCAAoC,EACpC,2BAA2B,EAC3B,iCAAiC,EACjC,2CAA2C,EAC3C,uCAAuC,EACvC,6CAA6C,EAC7C,8CAA8C,EAC9C,oCAAoC,EACpC,qCAAqC,EACrC,2CAA2C,EAE3C,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,yCAAyC,EAEzC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,+CAA+C,EAC/C,8CAA8C,GAC/C,MAAM,qBAAqB,CAAC","sourcesContent":["export { apiVersionHeaderName, parseApiVersion } from \"./apiVersion\";\nexport {\n  type BlobAttachmentBindingPathParams,\n  BlobAttachmentBindingPathParamsSchema,\n  type BlobAttachmentPathParams,\n  BlobAttachmentPathParamsSchema,\n  bindBlobAttachmentOperation,\n  type DocumentAttachmentsPathParams,\n  DocumentAttachmentsPathParamsSchema,\n  detachBlobAttachmentOperation,\n  isBindBlobAttachmentOperationRequest,\n  isBindBlobAttachmentOperationResponse,\n  isDetachBlobAttachmentOperationRequest,\n  isDetachBlobAttachmentOperationResponse,\n  isListDocumentAttachmentsOperationResponse,\n  listDocumentAttachmentsOperation,\n} from \"./attachments\";\nexport {\n  challengeOperation,\n  destroySessionOperation,\n  isChallengeOperationRequest,\n  isChallengeOperationResponse,\n  isDestroySessionOperationResponse,\n  isListSessionsOperationResponse,\n  isLogoutOperationResponse,\n  isRegistrationOperationRequest,\n  isRegistrationOperationResponse,\n  isUserIdentityOperationResponse,\n  isVerifyOperationRequest,\n  isVerifyOperationResponse,\n  isWebSocketTicketOperationResponse,\n  listSessionsOperation,\n  logoutOperation,\n  registerOperation,\n  userIdentityOperation,\n  verifyOperation,\n  webSocketTicketOperation,\n} from \"./auth\";\nexport {\n  billingWebhookWireHeaderKeys,\n  billingWebhookWireHeaderNames,\n  isReceiveRevenueCatWebhookOperationRequest,\n  isReceiveRevenueCatWebhookOperationResponse,\n  isReceiveStripeWebhookOperationRequest,\n  isReceiveStripeWebhookOperationResponse,\n  type RevenueCatWebhookHeaders,\n  RevenueCatWebhookHeadersSchema,\n  receiveRevenueCatWebhookOperation,\n  receiveStripeWebhookOperation,\n  type StripeWebhookHeaders,\n  StripeWebhookHeadersSchema,\n} from \"./billingWebhooks\";\nexport {\n  BinaryBodySchema,\n  type BlobBytesPathParams,\n  BlobBytesPathParamsSchema,\n  type BlobBytesResponseHeaders,\n  BlobBytesResponseHeadersSchema,\n  blobWireHeaderKeys,\n  blobWireHeaderNames,\n  getBlobBytesOperation,\n  isUploadMultipartBlobPartBytesOperationResponse,\n  type MultipartBlobPartHeaders,\n  MultipartBlobPartHeadersSchema,\n  type MultipartBlobPartPathParams,\n  MultipartBlobPartPathParamsSchema,\n  uploadMultipartBlobPartBytesOperation,\n} from \"./blobBytes\";\nexport {\n  type BlobDownloadResponse,\n  BlobDownloadResponseSchema,\n  getBlobDownloadOperation,\n} from \"./blobDownloads\";\nexport {\n  type ContainerMutationPathParams,\n  ContainerMutationPathParamsSchema,\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"./containerMutations\";\nexport {\n  type ContainerKekLogQuery,\n  ContainerKekLogQuerySchema,\n  type ContainerReadPathParams,\n  ContainerReadPathParamsSchema,\n  getContainerKekLogOperation,\n  isGetContainerKekLogOperationResponse,\n  isListContainerDocumentsOperationResponse,\n  isListContainerParentLanesOperationRequest,\n  isListContainerParentLanesOperationResponse,\n  type ListContainerDocumentsQuery,\n  ListContainerDocumentsQuerySchema,\n  listContainerDocumentsOperation,\n  listContainerParentLanesOperation,\n} from \"./containerReads\";\nexport {\n  type ContainerReplacementAuthorizationsResponse,\n  ContainerReplacementAuthorizationsResponseSchema,\n  getContainerReplacementAuthorizationsOperation,\n} from \"./containerReplacement\";\nexport {\n  defineHttpOperation,\n  defineJsonOperation,\n  type HttpOperation,\n  type HttpOperationMediaType,\n  type HttpOperationMethod,\n  type JsonOperation,\n  type JsonOperationMethod,\n  type OperationSchemaInput,\n  type OperationSchemaOutput,\n  operationRequestPath,\n  operationRequestPathForInput,\n  operationRequestPathWithQuery,\n  operationRoutePath,\n  type RuntimeRefinement,\n} from \"./definition\";\nexport {\n  type DocumentAttributionPathParams,\n  DocumentAttributionPathParamsSchema,\n  type DocumentAttributionRangesQuery,\n  DocumentAttributionRangesQuerySchema,\n  type DocumentAttributionRequestHeaders,\n  DocumentAttributionRequestHeadersSchema,\n  documentAttributionWireHeaderKeys,\n  documentAttributionWireHeaderNames,\n  getDocumentAttributionOperation,\n  isGetDocumentAttributionOperationResponse,\n  isListDocumentAttributionRangesOperationResponse,\n  listDocumentAttributionRangesOperation,\n} from \"./documentAttribution\";\nexport {\n  createDocumentOperation,\n  type DocumentMutationPathParams,\n  DocumentMutationPathParamsSchema,\n  type DocumentPurgeProofQuery,\n  DocumentPurgeProofQuerySchema,\n  getDocumentPurgeProofOperation,\n  isCreateDocumentOperationRequest,\n  isCreateDocumentOperationResponse,\n  isDocumentLinkSetMutationOperationRequest,\n  isDocumentLinkSetMutationOperationResponse,\n  isGetDocumentPurgeProofOperationResponse,\n  isPurgeDocumentOperationRequest,\n  isPurgeDocumentOperationResponse,\n  linkDocumentOperation,\n  purgeDocumentOperation,\n  unlinkDocumentOperation,\n} from \"./documentMutations\";\nexport {\n  type DocumentSyncPathParams,\n  DocumentSyncPathParamsSchema,\n  documentSyncOperation,\n  isDocumentSyncOperationRequest,\n  isDocumentSyncOperationResponse,\n} from \"./documentSync\";\nexport {\n  operationRequestHeaderNames,\n  operationResponseHeaderNames,\n} from \"./headerNames\";\nexport {\n  getHealthOperation,\n  isGetHealthOperationResponse,\n} from \"./health\";\nexport {\n  completeMultipartBlobStageOperation,\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isCompleteMultipartBlobStageOperationRequest,\n  isCompleteMultipartBlobStageOperationResponse,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  type MultipartBlobStagePathParams,\n  MultipartBlobStagePathParamsSchema,\n} from \"./multipartBlobs\";\nexport {\n  claimNativeOrganizationSubscriptionOperation,\n  getOrganizationBillingHistoryOperation,\n  getOrganizationBillingManagementUrlOperation,\n  getOrganizationBillingOperation,\n  getOrganizationNativePurchaseEligibilityOperation,\n  isClaimNativeOrganizationSubscriptionOperationResponse,\n  isGetOrganizationBillingHistoryOperationResponse,\n  isGetOrganizationBillingManagementUrlOperationResponse,\n  isGetOrganizationBillingOperationResponse,\n  isGetOrganizationNativePurchaseEligibilityOperationResponse,\n  isStartOrganizationTrialOperationResponse,\n  type OrganizationBillingNativeClaimPathParams,\n  OrganizationBillingNativeClaimPathParamsSchema,\n  type OrganizationBillingNativeEligibilityQuery,\n  OrganizationBillingNativeEligibilityQuerySchema,\n  type OrganizationBillingPathParams,\n  OrganizationBillingPathParamsSchema,\n  startOrganizationTrialOperation,\n} from \"./organizationBilling\";\nexport { getOrganizationPolicyHistoryOperation } from \"./organizationPolicyHistory\";\nexport {\n  createOrganizationGroupOperation,\n  createOrganizationOperation,\n  deleteOrganizationGroupOperation,\n  getOrganizationDataUsageOperation,\n  getOrganizationReadModelOperation,\n  isCreateOrganizationGroupOperationRequest,\n  isCreateOrganizationGroupOperationResponse,\n  isCreateOrganizationOperationRequest,\n  isCreateOrganizationOperationResponse,\n  isDeleteOrganizationGroupOperationResponse,\n  isGetOrganizationDataUsageOperationResponse,\n  isGetOrganizationReadModelOperationResponse,\n  isListOrganizationGroupMembersOperationResponse,\n  isUpdateOrganizationProfileOperationRequest,\n  isUpdateOrganizationProfileOperationResponse,\n  isUpdateOrganizationRosterEntryOperationRequest,\n  isUpdateOrganizationRosterEntryOperationResponse,\n  listOrganizationGroupMembersOperation,\n  type OrganizationGroupPathParams,\n  OrganizationGroupPathParamsSchema,\n  type OrganizationPathParams,\n  OrganizationPathParamsSchema,\n  type OrganizationRosterPathParams,\n  OrganizationRosterPathParamsSchema,\n  updateOrganizationProfileOperation,\n  updateOrganizationRosterEntryOperation,\n} from \"./organizations\";\nexport {\n  type PrincipalPolicyPageQuery,\n  PrincipalPolicyPageQuerySchema,\n} from \"./principalPolicyPageQuery\";\nexport {\n  commitOrganizationGroupPolicyOperation,\n  getPrincipalPolicyOperation,\n  isCommitOrganizationGroupPolicyOperationRequest,\n  isCommitOrganizationGroupPolicyOperationResponse,\n  isGetPrincipalPolicyOperationResponse,\n  isPutPrincipalPolicyOperationRequest,\n  isPutPrincipalPolicyOperationResponse,\n  type OrganizationGroupPolicyPathParams,\n  OrganizationGroupPolicyPathParamsSchema,\n  type PrincipalPolicyPathParams,\n  PrincipalPolicyPathParamsSchema,\n  putPrincipalPolicyOperation,\n} from \"./principals\";\nexport {\n  getProjectionPolicyHistoryOperation,\n  type ProjectionPolicyHistoryQuery,\n  ProjectionPolicyHistoryQuerySchema,\n} from \"./projectionPolicyHistory\";\nexport { protocolOperations } from \"./registry\";\nexport {\n  getRootIdentityOperation,\n  isGetRootIdentityOperationResponse,\n  isListRootIdentitiesOperationResponse,\n  isListRootIdentityOrganizationsOperationResponse,\n  listRootIdentitiesOperation,\n  listRootIdentityOrganizationsOperation,\n  MAX_ROOT_IDENTITY_PAGE_SIZE,\n  type RootIdentitiesQuery,\n  RootIdentitiesQuerySchema,\n  type RootIdentityPathParams,\n  RootIdentityPathParamsSchema,\n} from \"./root\";\nexport {\n  getRootOrganizationDataUsageOperation,\n  getRootOrganizationOperation,\n  listRootDataUsageReportOperation,\n  listRootOrganizationIdentitiesOperation,\n  listRootOrganizationsOperation,\n  type RootOrganizationPageQuery,\n  type RootOrganizationsQuery,\n} from \"./rootOrganizations\";\nexport {\n  cancelStripeSubscriptionOperation,\n  createStripeCheckoutOperation,\n  createStripeCheckoutSessionOperation,\n  createStripePortalOperation,\n  getStripeCheckoutOptionsOperation,\n  isCancelStripeSubscriptionOperationResponse,\n  isCreateStripeCheckoutOperationResponse,\n  isCreateStripeCheckoutSessionOperationRequest,\n  isCreateStripeCheckoutSessionOperationResponse,\n  isCreateStripePortalOperationRequest,\n  isCreateStripePortalOperationResponse,\n  isGetStripeCheckoutOptionsOperationResponse,\n  type StripeCheckoutPathParams,\n  StripeCheckoutPathParamsSchema,\n} from \"./stripeCheckout\";\nexport {\n  type ContainerWriterProjectionPathParams,\n  ContainerWriterProjectionPathParamsSchema,\n  type DocumentWriterProjectionPathParams,\n  DocumentWriterProjectionPathParamsSchema,\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n  isGetContainerWriterProjectionOperationResponse,\n  isGetDocumentWriterProjectionOperationResponse,\n} from \"./writerProjections\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAEL,qCAAqC,EAErC,8BAA8B,EAC9B,2BAA2B,EAE3B,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,uCAAuC,EACvC,0CAA0C,EAC1C,gCAAgC,GACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,kCAAkC,EAClC,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,wBAAwB,GACzB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,0CAA0C,EAC1C,2CAA2C,EAC3C,sCAAsC,EACtC,uCAAuC,EAEvC,8BAA8B,EAC9B,iCAAiC,EACjC,6BAA6B,EAE7B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAEhB,yBAAyB,EAEzB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,+CAA+C,EAE/C,8BAA8B,EAE9B,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,iCAAiC,EACjC,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,0BAA0B,EAE1B,6BAA6B,EAC7B,2BAA2B,EAC3B,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,2CAA2C,EAE3C,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,gDAAgD,EAChD,8CAA8C,GAC/C,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EAQnB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,mCAAmC,EAEnC,oCAAoC,EAEpC,uCAAuC,EACvC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,yCAAyC,EACzC,gDAAgD,EAChD,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAEvB,gCAAgC,EAEhC,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,wCAAwC,EACxC,+BAA+B,EAC/B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,4CAA4C,EAC5C,6CAA6C,EAC7C,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAE7C,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yCAAyC,EAEzC,oCAAoC,EAEpC,qCAAqC,GACtC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EACtC,4CAA4C,EAC5C,+BAA+B,EAC/B,iDAAiD,EACjD,sDAAsD,EACtD,gDAAgD,EAChD,sDAAsD,EACtD,yCAAyC,EACzC,2DAA2D,EAC3D,yCAAyC,EAEzC,8CAA8C,EAE9C,+CAA+C,EAE/C,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qCAAqC,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,oCAAoC,EACpC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,4CAA4C,EAC5C,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EAErC,iCAAiC,EAEjC,4BAA4B,EAE5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EACtC,2BAA2B,EAC3B,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EACrC,oCAAoC,EACpC,qCAAqC,EAErC,uCAAuC,EAEvC,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,mCAAmC,EAEnC,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,qCAAqC,EACrC,gDAAgD,EAChD,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,EAE3B,yBAAyB,EAEzB,4BAA4B,GAC7B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,qCAAqC,EACrC,4BAA4B,EAC5B,gCAAgC,EAChC,uCAAuC,EACvC,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oCAAoC,EACpC,2BAA2B,EAC3B,iCAAiC,EACjC,2CAA2C,EAC3C,uCAAuC,EACvC,6CAA6C,EAC7C,8CAA8C,EAC9C,oCAAoC,EACpC,qCAAqC,EACrC,2CAA2C,EAE3C,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,yCAAyC,EAEzC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,+CAA+C,EAC/C,8CAA8C,GAC/C,MAAM,qBAAqB,CAAC","sourcesContent":["export { apiVersionHeaderName, parseApiVersion } from \"./apiVersion\";\nexport {\n  type BlobAttachmentBindingPathParams,\n  BlobAttachmentBindingPathParamsSchema,\n  type BlobAttachmentPathParams,\n  BlobAttachmentPathParamsSchema,\n  bindBlobAttachmentOperation,\n  type DocumentAttachmentsPathParams,\n  DocumentAttachmentsPathParamsSchema,\n  detachBlobAttachmentOperation,\n  isBindBlobAttachmentOperationRequest,\n  isBindBlobAttachmentOperationResponse,\n  isDetachBlobAttachmentOperationRequest,\n  isDetachBlobAttachmentOperationResponse,\n  isListDocumentAttachmentsOperationResponse,\n  listDocumentAttachmentsOperation,\n} from \"./attachments\";\nexport {\n  challengeOperation,\n  destroySessionOperation,\n  isChallengeOperationRequest,\n  isChallengeOperationResponse,\n  isDestroySessionOperationResponse,\n  isListSessionsOperationResponse,\n  isLogoutOperationResponse,\n  isRegistrationOperationRequest,\n  isRegistrationOperationResponse,\n  isUserIdentityOperationResponse,\n  isVerifyOperationRequest,\n  isVerifyOperationResponse,\n  isWebSocketTicketOperationResponse,\n  listSessionsOperation,\n  logoutOperation,\n  registerOperation,\n  userIdentityOperation,\n  verifyOperation,\n  webSocketTicketOperation,\n} from \"./auth\";\nexport {\n  billingWebhookWireHeaderKeys,\n  billingWebhookWireHeaderNames,\n  isReceiveRevenueCatWebhookOperationRequest,\n  isReceiveRevenueCatWebhookOperationResponse,\n  isReceiveStripeWebhookOperationRequest,\n  isReceiveStripeWebhookOperationResponse,\n  type RevenueCatWebhookHeaders,\n  RevenueCatWebhookHeadersSchema,\n  receiveRevenueCatWebhookOperation,\n  receiveStripeWebhookOperation,\n  type StripeWebhookHeaders,\n  StripeWebhookHeadersSchema,\n} from \"./billingWebhooks\";\nexport {\n  BinaryBodySchema,\n  type BlobBytesPathParams,\n  BlobBytesPathParamsSchema,\n  type BlobBytesResponseHeaders,\n  BlobBytesResponseHeadersSchema,\n  blobWireHeaderKeys,\n  blobWireHeaderNames,\n  getBlobBytesOperation,\n  isUploadMultipartBlobPartBytesOperationResponse,\n  type MultipartBlobPartHeaders,\n  MultipartBlobPartHeadersSchema,\n  type MultipartBlobPartPathParams,\n  MultipartBlobPartPathParamsSchema,\n  uploadMultipartBlobPartBytesOperation,\n} from \"./blobBytes\";\nexport {\n  type BlobDownloadResponse,\n  BlobDownloadResponseSchema,\n  getBlobDownloadOperation,\n} from \"./blobDownloads\";\nexport {\n  type ContainerMutationPathParams,\n  ContainerMutationPathParamsSchema,\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"./containerMutations\";\nexport {\n  type ContainerKekLogQuery,\n  ContainerKekLogQuerySchema,\n  type ContainerReadPathParams,\n  ContainerReadPathParamsSchema,\n  getContainerKekLogOperation,\n  isGetContainerKekLogOperationResponse,\n  isListContainerDocumentsOperationResponse,\n  isListContainerParentLanesOperationRequest,\n  isListContainerParentLanesOperationResponse,\n  type ListContainerDocumentsQuery,\n  ListContainerDocumentsQuerySchema,\n  listContainerDocumentsOperation,\n  listContainerParentLanesOperation,\n} from \"./containerReads\";\nexport {\n  type ContainerReplacementAuthorizationsResponse,\n  ContainerReplacementAuthorizationsResponseSchema,\n  getContainerReplacementAuthorizationsOperation,\n} from \"./containerReplacement\";\nexport {\n  defineHttpOperation,\n  defineJsonOperation,\n  type HttpOperation,\n  type HttpOperationMediaType,\n  type HttpOperationMethod,\n  type JsonOperation,\n  type JsonOperationMethod,\n  type OperationSchemaInput,\n  type OperationSchemaOutput,\n  operationRequestPath,\n  operationRequestPathForInput,\n  operationRequestPathWithQuery,\n  operationRoutePath,\n  type RuntimeRefinement,\n} from \"./definition\";\nexport {\n  type DocumentAttributionPathParams,\n  DocumentAttributionPathParamsSchema,\n  type DocumentAttributionRangesQuery,\n  DocumentAttributionRangesQuerySchema,\n  type DocumentAttributionRequestHeaders,\n  DocumentAttributionRequestHeadersSchema,\n  documentAttributionWireHeaderKeys,\n  documentAttributionWireHeaderNames,\n  getDocumentAttributionOperation,\n  isGetDocumentAttributionOperationResponse,\n  isListDocumentAttributionRangesOperationResponse,\n  listDocumentAttributionRangesOperation,\n} from \"./documentAttribution\";\nexport {\n  createDocumentOperation,\n  type DocumentMutationPathParams,\n  DocumentMutationPathParamsSchema,\n  type DocumentPurgeProofQuery,\n  DocumentPurgeProofQuerySchema,\n  getDocumentPurgeProofOperation,\n  isCreateDocumentOperationRequest,\n  isCreateDocumentOperationResponse,\n  isDocumentLinkSetMutationOperationRequest,\n  isDocumentLinkSetMutationOperationResponse,\n  isGetDocumentPurgeProofOperationResponse,\n  isPurgeDocumentOperationRequest,\n  isPurgeDocumentOperationResponse,\n  linkDocumentOperation,\n  purgeDocumentOperation,\n  unlinkDocumentOperation,\n} from \"./documentMutations\";\nexport {\n  type DocumentSyncPathParams,\n  DocumentSyncPathParamsSchema,\n  documentSyncOperation,\n  isDocumentSyncOperationRequest,\n  isDocumentSyncOperationResponse,\n} from \"./documentSync\";\nexport {\n  operationRequestHeaderNames,\n  operationResponseHeaderNames,\n} from \"./headerNames\";\nexport {\n  getHealthOperation,\n  isGetHealthOperationResponse,\n} from \"./health\";\nexport {\n  completeMultipartBlobStageOperation,\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isCompleteMultipartBlobStageOperationRequest,\n  isCompleteMultipartBlobStageOperationResponse,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  type MultipartBlobStagePathParams,\n  MultipartBlobStagePathParamsSchema,\n} from \"./multipartBlobs\";\nexport {\n  authorizeMultipartBlobPartUploadOperation,\n  type MultipartBlobPartUploadRequest,\n  MultipartBlobPartUploadRequestSchema,\n  type MultipartBlobPartUploadResponse,\n  MultipartBlobPartUploadResponseSchema,\n} from \"./multipartPartUploads\";\nexport {\n  claimNativeOrganizationSubscriptionOperation,\n  getOrganizationBillingHistoryOperation,\n  getOrganizationBillingManagementUrlOperation,\n  getOrganizationBillingOperation,\n  getOrganizationNativePurchaseEligibilityOperation,\n  isClaimNativeOrganizationSubscriptionOperationResponse,\n  isGetOrganizationBillingHistoryOperationResponse,\n  isGetOrganizationBillingManagementUrlOperationResponse,\n  isGetOrganizationBillingOperationResponse,\n  isGetOrganizationNativePurchaseEligibilityOperationResponse,\n  isStartOrganizationTrialOperationResponse,\n  type OrganizationBillingNativeClaimPathParams,\n  OrganizationBillingNativeClaimPathParamsSchema,\n  type OrganizationBillingNativeEligibilityQuery,\n  OrganizationBillingNativeEligibilityQuerySchema,\n  type OrganizationBillingPathParams,\n  OrganizationBillingPathParamsSchema,\n  startOrganizationTrialOperation,\n} from \"./organizationBilling\";\nexport { getOrganizationPolicyHistoryOperation } from \"./organizationPolicyHistory\";\nexport {\n  createOrganizationGroupOperation,\n  createOrganizationOperation,\n  deleteOrganizationGroupOperation,\n  getOrganizationDataUsageOperation,\n  getOrganizationReadModelOperation,\n  isCreateOrganizationGroupOperationRequest,\n  isCreateOrganizationGroupOperationResponse,\n  isCreateOrganizationOperationRequest,\n  isCreateOrganizationOperationResponse,\n  isDeleteOrganizationGroupOperationResponse,\n  isGetOrganizationDataUsageOperationResponse,\n  isGetOrganizationReadModelOperationResponse,\n  isListOrganizationGroupMembersOperationResponse,\n  isUpdateOrganizationProfileOperationRequest,\n  isUpdateOrganizationProfileOperationResponse,\n  isUpdateOrganizationRosterEntryOperationRequest,\n  isUpdateOrganizationRosterEntryOperationResponse,\n  listOrganizationGroupMembersOperation,\n  type OrganizationGroupPathParams,\n  OrganizationGroupPathParamsSchema,\n  type OrganizationPathParams,\n  OrganizationPathParamsSchema,\n  type OrganizationRosterPathParams,\n  OrganizationRosterPathParamsSchema,\n  updateOrganizationProfileOperation,\n  updateOrganizationRosterEntryOperation,\n} from \"./organizations\";\nexport {\n  type PrincipalPolicyPageQuery,\n  PrincipalPolicyPageQuerySchema,\n} from \"./principalPolicyPageQuery\";\nexport {\n  commitOrganizationGroupPolicyOperation,\n  getPrincipalPolicyOperation,\n  isCommitOrganizationGroupPolicyOperationRequest,\n  isCommitOrganizationGroupPolicyOperationResponse,\n  isGetPrincipalPolicyOperationResponse,\n  isPutPrincipalPolicyOperationRequest,\n  isPutPrincipalPolicyOperationResponse,\n  type OrganizationGroupPolicyPathParams,\n  OrganizationGroupPolicyPathParamsSchema,\n  type PrincipalPolicyPathParams,\n  PrincipalPolicyPathParamsSchema,\n  putPrincipalPolicyOperation,\n} from \"./principals\";\nexport {\n  getProjectionPolicyHistoryOperation,\n  type ProjectionPolicyHistoryQuery,\n  ProjectionPolicyHistoryQuerySchema,\n} from \"./projectionPolicyHistory\";\nexport { protocolOperations } from \"./registry\";\nexport {\n  getRootIdentityOperation,\n  isGetRootIdentityOperationResponse,\n  isListRootIdentitiesOperationResponse,\n  isListRootIdentityOrganizationsOperationResponse,\n  listRootIdentitiesOperation,\n  listRootIdentityOrganizationsOperation,\n  MAX_ROOT_IDENTITY_PAGE_SIZE,\n  type RootIdentitiesQuery,\n  RootIdentitiesQuerySchema,\n  type RootIdentityPathParams,\n  RootIdentityPathParamsSchema,\n} from \"./root\";\nexport {\n  getRootOrganizationDataUsageOperation,\n  getRootOrganizationOperation,\n  listRootDataUsageReportOperation,\n  listRootOrganizationIdentitiesOperation,\n  listRootOrganizationsOperation,\n  type RootOrganizationPageQuery,\n  type RootOrganizationsQuery,\n} from \"./rootOrganizations\";\nexport {\n  cancelStripeSubscriptionOperation,\n  createStripeCheckoutOperation,\n  createStripeCheckoutSessionOperation,\n  createStripePortalOperation,\n  getStripeCheckoutOptionsOperation,\n  isCancelStripeSubscriptionOperationResponse,\n  isCreateStripeCheckoutOperationResponse,\n  isCreateStripeCheckoutSessionOperationRequest,\n  isCreateStripeCheckoutSessionOperationResponse,\n  isCreateStripePortalOperationRequest,\n  isCreateStripePortalOperationResponse,\n  isGetStripeCheckoutOptionsOperationResponse,\n  type StripeCheckoutPathParams,\n  StripeCheckoutPathParamsSchema,\n} from \"./stripeCheckout\";\nexport {\n  type ContainerWriterProjectionPathParams,\n  ContainerWriterProjectionPathParamsSchema,\n  type DocumentWriterProjectionPathParams,\n  DocumentWriterProjectionPathParamsSchema,\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n  isGetContainerWriterProjectionOperationResponse,\n  isGetDocumentWriterProjectionOperationResponse,\n} from \"./writerProjections\";\n"]}

package/internal/validators/operation/multipartPartUploads.d.ts

@@ -0,0 +1,179 @@
+import { z } from "zod";
+import { ErrorResponseSchema } from "../response/index.js";
+export declare const MultipartBlobPartUploadRequestSchema: z.ZodObject<{
+    byteLength: z.ZodCustom<number, number>;
+    contentMd5: z.ZodCustom<string, string>;
+    uploadId: z.ZodString;
+}, z.core.$strict>;
+export declare const MultipartBlobPartUploadResponseSchema: z.ZodObject<{
+    byteLength: z.ZodCustom<number, number>;
+    contentMd5: z.ZodCustom<string, string>;
+    partNumber: z.ZodCustom<number, number>;
+    stageId: z.ZodString;
+    uploadId: z.ZodString;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"api">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"signed-url">;
+        url: z.ZodCustom<string, string>;
+        expiresAt: z.ZodCustom<string, string>;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export type MultipartBlobPartUploadRequest = z.infer<typeof MultipartBlobPartUploadRequestSchema>;
+export type MultipartBlobPartUploadResponse = z.infer<typeof MultipartBlobPartUploadResponseSchema>;
+export declare const authorizeMultipartBlobPartUploadOperation: Omit<{
+    readonly auth: "session";
+    readonly body: z.ZodObject<{
+        byteLength: z.ZodCustom<number, number>;
+        contentMd5: z.ZodCustom<string, string>;
+        uploadId: z.ZodString;
+    }, z.core.$strict>;
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 409: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+    };
+    readonly failureStatuses: readonly [400, 401, 403, 404, 409, 500];
+    readonly id: "blobs.multipartStages.parts.authorize";
+    readonly method: "POST";
+    readonly params: z.ZodObject<{
+        partNumber: z.ZodCustom<string | number, string | number>;
+        stageId: z.ZodString;
+    }, z.core.$strict>;
+    readonly path: "/blobs/stages/multipart/{stageId}/parts/{partNumber}/upload";
+    readonly responses: {
+        readonly 200: z.ZodObject<{
+            byteLength: z.ZodCustom<number, number>;
+            contentMd5: z.ZodCustom<string, string>;
+            partNumber: z.ZodCustom<number, number>;
+            stageId: z.ZodString;
+            uploadId: z.ZodString;
+            source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"api">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"signed-url">;
+                url: z.ZodCustom<string, string>;
+                expiresAt: z.ZodCustom<string, string>;
+            }, z.core.$strict>], "kind">;
+        }, z.core.$strict>;
+    };
+}, "failureResponses" | "failureStatuses"> & {
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 409: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+    } & {
+        readonly 503: typeof ErrorResponseSchema;
+    };
+    readonly failureStatuses: readonly [400, 401, 403, 404, 409, 500] | readonly [400, 401, 403, 404, 409, 500, 503];
+};