@tearleads/client-sdk 0.1.42 → 0.1.43

package/internal/api-client/routes/blobs/get.js.map

@@ -1 +1 @@
-{"version":3,"file":"get.js","sourceRoot":"","sources":["get.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAsB5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAgC,EAChC,MAAc,EACd,gBAA+B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC9D,UAAgC,EAAE;IAElC,wEAAwE;IACxE,4EAA4E;IAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,wBAAwB,EACxB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EACtB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjC,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,UAAU,MAAM,WAAW;gBACjC,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,QAAQ,MAAM,6CAA6C;aACrE,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,UAAU,CAAC,MAAM,CAAC,GAAG,EACrB,mBAAmB,CAAC,OAAO,CAAC,CAC7B,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAuE,EACvE,QAAkB;IAElB,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC3B,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,IAAI,cAAc,CACvB;QACE,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,EAAE,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAA0E,EAC1E,MAAc,EACd,OAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAClD,qBAAqB,EACrB;QACE,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,EACD,OAAO,CACR,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,iEAAiE;IACjE,uEAAuE;IACvE,iFAAiF;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,IAAI,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,UAAU;QACV,cAAc;QACd,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,0DAA0D;AAC1D,yEAAyE;AACzE,yCAAyC;AACzC,SAAS,0BAA0B,CACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,UAAU;YACd,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  blobWireHeaderKeys,\n  getBlobBytesOperation,\n  getBlobDownloadOperation,\n} from \"@tearleads/validators/operation\";\nimport type { BinaryResponseOperationTransport } from \"../../binaryResponseOperationTransport\";\nimport type { JsonOperationTransport } from \"../../operationTransport\";\nimport type {\n  OperationResponseRequestFn,\n  RequestResultOptions,\n} from \"../../types\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\nexport interface BlobBytesResponse {\n  readonly blobId: string;\n  readonly byteLength: number;\n  readonly encryptedBytes: ReadableStream<Uint8Array>;\n  readonly sha256: string;\n}\n\nexport interface UploadMultipartBlobPartBytesRequest {\n  readonly byteLength: number;\n  readonly encryptedBytes: Blob | BufferSource;\n  readonly sha256: string;\n  readonly uploadId: string;\n}\n\ntype BlobDownloadTransport = Pick<JsonOperationTransport, \"requestResult\"> &\n  Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\"> &\n  Pick<OperationResponseRequestFn, \"reportFailure\">;\n\ntype DownloadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nexport async function getBlobBytes(\n  transport: BlobDownloadTransport,\n  blobId: string,\n  downloadFetch: DownloadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<BlobBytesResponse | null> {\n  // Refresh at most once. R2 expiration errors can appear as CORS/network\n  // failures in browsers, so both rejected fetches and 403s need a fresh URL.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const result = await transport.requestResult(\n      getBlobDownloadOperation,\n      { params: { blobId } },\n      { ...options, reportErrors: false },\n    );\n    if (!result.ok) {\n      if (result.kind === \"http\" && result.status === 404) {\n        return getBlobStream(transport, blobId, options);\n      }\n      result.report();\n      return null;\n    }\n    const descriptor = result.data;\n    if (descriptor.blobId !== blobId) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: \"GET\",\n        path: `/blobs/${blobId}/download`,\n        status: 200,\n        statusText: \"\",\n        message: `Blob ${blobId} download descriptor has the wrong identity`,\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      return getBlobStream(transport, blobId, options);\n    }\n    try {\n      // Never send the application's session or cookies to the object store.\n      // Reject redirects and keep bearer URLs out of referrers and errors.\n      const response = await downloadFetch(\n        descriptor.source.url,\n        storageFetchOptions(options),\n      );\n      if (response.status !== 200) {\n        await response.body?.cancel().catch(() => {});\n        if (response.status === 403) {\n          continue;\n        }\n        break;\n      }\n      return await signedBlobResponse(descriptor, response);\n    } catch {\n      // The downstream SDK still verifies length, hash and authenticated\n      // encryption. An error after streaming begins propagates to that reader.\n    }\n  }\n  // Preserve downloads when storage is unreachable or a native HTTP bridge\n  // cannot use the signed URL. This endpoint checks current access again.\n  // A storage failure alone must not signal that the API is offline.\n  return getBlobStream(transport, blobId, options);\n}\n\nasync function signedBlobResponse(\n  descriptor: Pick<BlobBytesResponse, \"blobId\" | \"byteLength\" | \"sha256\">,\n  response: Response,\n): Promise<BlobBytesResponse> {\n  return {\n    blobId: descriptor.blobId,\n    byteLength: descriptor.byteLength,\n    sha256: descriptor.sha256,\n    encryptedBytes: response.body\n      ? signedDownloadBodyStream(response.body)\n      : bufferedResponseBodyStream(await response.arrayBuffer()),\n  };\n}\n\nfunction signedDownloadBodyStream(\n  stream: ReadableStream<Uint8Array>,\n): ReadableStream<Uint8Array> {\n  const reader = stream.getReader();\n  // Native network errors may contain the bearer URL. Keep failures generic\n  // before downstream readers log them, without buffering or eager reads.\n  return new ReadableStream<Uint8Array>(\n    {\n      async pull(controller) {\n        try {\n          const { done, value } = await reader.read();\n          if (done) {\n            controller.close();\n            reader.releaseLock();\n          } else {\n            controller.enqueue(value);\n          }\n        } catch {\n          controller.error(new Error(\"Blob download interrupted\"));\n          reader.releaseLock();\n        }\n      },\n      async cancel(reason) {\n        try {\n          await reader.cancel(reason);\n        } catch {\n          throw new Error(\"Blob download cancellation failed\");\n        } finally {\n          reader.releaseLock();\n        }\n      },\n    },\n    { highWaterMark: 0 },\n  );\n}\n\nasync function getBlobStream(\n  transport: Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\">,\n  blobId: string,\n  options: RequestResultOptions,\n): Promise<BlobBytesResponse | null> {\n  if (options.signal?.aborted) return null;\n  const result = await transport.requestBinaryResponse(\n    getBlobBytesOperation,\n    {\n      params: { blobId },\n    },\n    options,\n  );\n  if (!result) {\n    return null;\n  }\n\n  const { headers, response } = result;\n  const byteLength = Number(headers[blobWireHeaderKeys.blobByteLength]);\n\n  // On the browser / WKWebView-fetch path the body is streamed, so\n  // `response.body` is a live ReadableStream. Under a native HTTP bridge\n  // (CapacitorHttp — which the Capacitor iOS/Android builds enable so cross-origin\n  // API requests reach the backend at all; the WKWebView's own fetch fails from\n  // the app's https://localhost origin) the response is buffered natively and\n  // `response.body` is null even for a valid 200. So take the bytes either way:\n  // the stream when present, otherwise buffer the response and re-wrap it as a\n  // one-shot ReadableStream so callers keep a single streaming interface. This\n  // does not weaken validation — a truncated or corrupted body is still caught\n  // downstream by the X-Tearleads-Blob-Sha256 integrity check; it only stops a\n  // buffered-but-valid response from being rejected here as malformed.\n  const encryptedBytes =\n    response.body ?? bufferedResponseBodyStream(await response.arrayBuffer());\n\n  return {\n    blobId: headers[blobWireHeaderKeys.blobId],\n    byteLength,\n    encryptedBytes,\n    sha256: headers[blobWireHeaderKeys.blobSha256],\n  };\n}\n\n// Wraps a fully-buffered response body as a single-chunk ReadableStream, so a\n// native HTTP bridge that only exposes the buffered bytes (no WHATWG\n// `response.body` stream) can still satisfy the streaming\n// `BlobBytesResponse.encryptedBytes` contract. An empty buffer yields an\n// immediately-closed, zero-chunk stream.\nfunction bufferedResponseBodyStream(\n  buffer: ArrayBuffer,\n): ReadableStream<Uint8Array> {\n  const bytes = new Uint8Array(buffer);\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      if (bytes.byteLength > 0) {\n        controller.enqueue(bytes);\n      }\n      controller.close();\n    },\n  });\n}\n"]}
+{"version":3,"file":"get.js","sourceRoot":"","sources":["get.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAQzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AA4B5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAgC,EAChC,MAAc,EACd,gBAA+B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC9D,UAAgC,EAAE;IAElC,wEAAwE;IACxE,4EAA4E;IAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,wBAAwB,EACxB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EACtB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjC,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,UAAU,MAAM,WAAW;gBACjC,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,QAAQ,MAAM,6CAA6C;aACrE,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,UAAU,CAAC,MAAM,CAAC,GAAG,EACrB,mBAAmB,CAAC,OAAO,CAAC,CAC7B,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAuE,EACvE,QAAkB;IAElB,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC3B,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,IAAI,cAAc,CACvB;QACE,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,EAAE,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAA0E,EAC1E,MAAc,EACd,OAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAClD,qBAAqB,EACrB;QACE,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,EACD,OAAO,CACR,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,iEAAiE;IACjE,uEAAuE;IACvE,iFAAiF;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,IAAI,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,UAAU;QACV,cAAc;QACd,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,0DAA0D;AAC1D,yEAAyE;AACzE,yCAAyC;AACzC,SAAS,0BAA0B,CACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,UAAU;YACd,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  blobWireHeaderKeys,\n  getBlobBytesOperation,\n  getBlobDownloadOperation,\n} from \"@tearleads/validators/operation\";\nimport type { MultipartBlobPartUploadSource } from \"@tearleads/validators/util\";\nimport type { BinaryResponseOperationTransport } from \"../../binaryResponseOperationTransport\";\nimport type { JsonOperationTransport } from \"../../operationTransport\";\nimport type {\n  OperationResponseRequestFn,\n  RequestResultOptions,\n} from \"../../types\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\nexport interface BlobBytesResponse {\n  readonly blobId: string;\n  readonly byteLength: number;\n  readonly encryptedBytes: ReadableStream<Uint8Array>;\n  readonly sha256: string;\n}\n\nexport interface UploadMultipartBlobPartBytesRequest {\n  readonly byteLength: number;\n  readonly encryptedBytes: Blob | BufferSource;\n  readonly sha256: string;\n  /**\n   * An upload source the stage initiation already issued for this part. The\n   * first attempt uses it instead of authorizing; a failed attempt still\n   * reauthorizes once, exactly as when no source was issued.\n   */\n  readonly source?: MultipartBlobPartUploadSource | undefined;\n  readonly uploadId: string;\n}\n\ntype BlobDownloadTransport = Pick<JsonOperationTransport, \"requestResult\"> &\n  Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\"> &\n  Pick<OperationResponseRequestFn, \"reportFailure\">;\n\ntype DownloadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nexport async function getBlobBytes(\n  transport: BlobDownloadTransport,\n  blobId: string,\n  downloadFetch: DownloadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<BlobBytesResponse | null> {\n  // Refresh at most once. R2 expiration errors can appear as CORS/network\n  // failures in browsers, so both rejected fetches and 403s need a fresh URL.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const result = await transport.requestResult(\n      getBlobDownloadOperation,\n      { params: { blobId } },\n      { ...options, reportErrors: false },\n    );\n    if (!result.ok) {\n      if (result.kind === \"http\" && result.status === 404) {\n        return getBlobStream(transport, blobId, options);\n      }\n      result.report();\n      return null;\n    }\n    const descriptor = result.data;\n    if (descriptor.blobId !== blobId) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: \"GET\",\n        path: `/blobs/${blobId}/download`,\n        status: 200,\n        statusText: \"\",\n        message: `Blob ${blobId} download descriptor has the wrong identity`,\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      return getBlobStream(transport, blobId, options);\n    }\n    try {\n      // Never send the application's session or cookies to the object store.\n      // Reject redirects and keep bearer URLs out of referrers and errors.\n      const response = await downloadFetch(\n        descriptor.source.url,\n        storageFetchOptions(options),\n      );\n      if (response.status !== 200) {\n        await response.body?.cancel().catch(() => {});\n        if (response.status === 403) {\n          continue;\n        }\n        break;\n      }\n      return await signedBlobResponse(descriptor, response);\n    } catch {\n      // The downstream SDK still verifies length, hash and authenticated\n      // encryption. An error after streaming begins propagates to that reader.\n    }\n  }\n  // Preserve downloads when storage is unreachable or a native HTTP bridge\n  // cannot use the signed URL. This endpoint checks current access again.\n  // A storage failure alone must not signal that the API is offline.\n  return getBlobStream(transport, blobId, options);\n}\n\nasync function signedBlobResponse(\n  descriptor: Pick<BlobBytesResponse, \"blobId\" | \"byteLength\" | \"sha256\">,\n  response: Response,\n): Promise<BlobBytesResponse> {\n  return {\n    blobId: descriptor.blobId,\n    byteLength: descriptor.byteLength,\n    sha256: descriptor.sha256,\n    encryptedBytes: response.body\n      ? signedDownloadBodyStream(response.body)\n      : bufferedResponseBodyStream(await response.arrayBuffer()),\n  };\n}\n\nfunction signedDownloadBodyStream(\n  stream: ReadableStream<Uint8Array>,\n): ReadableStream<Uint8Array> {\n  const reader = stream.getReader();\n  // Native network errors may contain the bearer URL. Keep failures generic\n  // before downstream readers log them, without buffering or eager reads.\n  return new ReadableStream<Uint8Array>(\n    {\n      async pull(controller) {\n        try {\n          const { done, value } = await reader.read();\n          if (done) {\n            controller.close();\n            reader.releaseLock();\n          } else {\n            controller.enqueue(value);\n          }\n        } catch {\n          controller.error(new Error(\"Blob download interrupted\"));\n          reader.releaseLock();\n        }\n      },\n      async cancel(reason) {\n        try {\n          await reader.cancel(reason);\n        } catch {\n          throw new Error(\"Blob download cancellation failed\");\n        } finally {\n          reader.releaseLock();\n        }\n      },\n    },\n    { highWaterMark: 0 },\n  );\n}\n\nasync function getBlobStream(\n  transport: Pick<BinaryResponseOperationTransport, \"requestBinaryResponse\">,\n  blobId: string,\n  options: RequestResultOptions,\n): Promise<BlobBytesResponse | null> {\n  if (options.signal?.aborted) return null;\n  const result = await transport.requestBinaryResponse(\n    getBlobBytesOperation,\n    {\n      params: { blobId },\n    },\n    options,\n  );\n  if (!result) {\n    return null;\n  }\n\n  const { headers, response } = result;\n  const byteLength = Number(headers[blobWireHeaderKeys.blobByteLength]);\n\n  // On the browser / WKWebView-fetch path the body is streamed, so\n  // `response.body` is a live ReadableStream. Under a native HTTP bridge\n  // (CapacitorHttp — which the Capacitor iOS/Android builds enable so cross-origin\n  // API requests reach the backend at all; the WKWebView's own fetch fails from\n  // the app's https://localhost origin) the response is buffered natively and\n  // `response.body` is null even for a valid 200. So take the bytes either way:\n  // the stream when present, otherwise buffer the response and re-wrap it as a\n  // one-shot ReadableStream so callers keep a single streaming interface. This\n  // does not weaken validation — a truncated or corrupted body is still caught\n  // downstream by the X-Tearleads-Blob-Sha256 integrity check; it only stops a\n  // buffered-but-valid response from being rejected here as malformed.\n  const encryptedBytes =\n    response.body ?? bufferedResponseBodyStream(await response.arrayBuffer());\n\n  return {\n    blobId: headers[blobWireHeaderKeys.blobId],\n    byteLength,\n    encryptedBytes,\n    sha256: headers[blobWireHeaderKeys.blobSha256],\n  };\n}\n\n// Wraps a fully-buffered response body as a single-chunk ReadableStream, so a\n// native HTTP bridge that only exposes the buffered bytes (no WHATWG\n// `response.body` stream) can still satisfy the streaming\n// `BlobBytesResponse.encryptedBytes` contract. An empty buffer yields an\n// immediately-closed, zero-chunk stream.\nfunction bufferedResponseBodyStream(\n  buffer: ArrayBuffer,\n): ReadableStream<Uint8Array> {\n  const bytes = new Uint8Array(buffer);\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      if (bytes.byteLength > 0) {\n        controller.enqueue(bytes);\n      }\n      controller.close();\n    },\n  });\n}\n"]}

package/internal/api-client/routes/blobs/multipart.js

@@ -1,4 +1,4 @@
-import { completeMultipartBlobStageOperation, getMultipartBlobStageOperation, initiateMultipartBlobStageOperation, isCompleteMultipartBlobStageOperationRequest, isCompleteMultipartBlobStageOperationResponse, isGetMultipartBlobStageOperationResponse, isInitiateMultipartBlobStageOperationRequest, isInitiateMultipartBlobStageOperationResponse, operationRequestPath, } from "../../../validators/operation/index.js";
+import { getMultipartBlobStageOperation, initiateMultipartBlobStageOperation, isGetMultipartBlobStageOperationResponse, isInitiateMultipartBlobStageOperationRequest, isInitiateMultipartBlobStageOperationResponse, operationRequestPath, } from "../../../validators/operation/index.js";
 export const initiateMultipartBlobStage = {
     isRequest: isInitiateMultipartBlobStageOperationRequest,
     isResponse: isInitiateMultipartBlobStageOperationResponse,
@@ -12,14 +12,4 @@ export const getMultipartBlobStage = {
         return operationRequestPath(getMultipartBlobStageOperation, { stageId });
     },
 };
-export const completeMultipartBlobStage = {
-    isRequest: isCompleteMultipartBlobStageOperationRequest,
-    isResponse: isCompleteMultipartBlobStageOperationResponse,
-    method: completeMultipartBlobStageOperation.method,
-    path(stageId) {
-        return operationRequestPath(completeMultipartBlobStageOperation, {
-            stageId,
-        });
-    },
-};
 //# sourceMappingURL=multipart.js.map

package/internal/api-client/routes/blobs/multipart.js.map

@@ -1 +1 @@
-{"version":3,"file":"multipart.js","sourceRoot":"","sources":["multipart.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,4CAA4C,EAC5C,6CAA6C,EAC7C,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAC7C,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS,EAAE,4CAA4C;IACvD,UAAU,EAAE,6CAA6C;IACzD,MAAM,EAAE,mCAAmC,CAAC,MAAM;IAClD,IAAI,EAAE,oBAAoB,CAAC,mCAAmC,EAAE,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,wCAAwC;IACpD,MAAM,EAAE,8BAA8B,CAAC,MAAM;IAC7C,IAAI,CAAC,OAAe;QAClB,OAAO,oBAAoB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS,EAAE,4CAA4C;IACvD,UAAU,EAAE,6CAA6C;IACzD,MAAM,EAAE,mCAAmC,CAAC,MAAM;IAClD,IAAI,CAAC,OAAe;QAClB,OAAO,oBAAoB,CAAC,mCAAmC,EAAE;YAC/D,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import {\n  completeMultipartBlobStageOperation,\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isCompleteMultipartBlobStageOperationRequest,\n  isCompleteMultipartBlobStageOperationResponse,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  operationRequestPath,\n} from \"@tearleads/validators/operation\";\n\nexport const initiateMultipartBlobStage = {\n  isRequest: isInitiateMultipartBlobStageOperationRequest,\n  isResponse: isInitiateMultipartBlobStageOperationResponse,\n  method: initiateMultipartBlobStageOperation.method,\n  path: operationRequestPath(initiateMultipartBlobStageOperation, {}),\n};\n\nexport const getMultipartBlobStage = {\n  isResponse: isGetMultipartBlobStageOperationResponse,\n  method: getMultipartBlobStageOperation.method,\n  path(stageId: string) {\n    return operationRequestPath(getMultipartBlobStageOperation, { stageId });\n  },\n};\n\nexport const completeMultipartBlobStage = {\n  isRequest: isCompleteMultipartBlobStageOperationRequest,\n  isResponse: isCompleteMultipartBlobStageOperationResponse,\n  method: completeMultipartBlobStageOperation.method,\n  path(stageId: string) {\n    return operationRequestPath(completeMultipartBlobStageOperation, {\n      stageId,\n    });\n  },\n};\n"]}
+{"version":3,"file":"multipart.js","sourceRoot":"","sources":["multipart.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,EACnC,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAC7C,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS,EAAE,4CAA4C;IACvD,UAAU,EAAE,6CAA6C;IACzD,MAAM,EAAE,mCAAmC,CAAC,MAAM;IAClD,IAAI,EAAE,oBAAoB,CAAC,mCAAmC,EAAE,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,wCAAwC;IACpD,MAAM,EAAE,8BAA8B,CAAC,MAAM;IAC7C,IAAI,CAAC,OAAe;QAClB,OAAO,oBAAoB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF,CAAC","sourcesContent":["import {\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  operationRequestPath,\n} from \"@tearleads/validators/operation\";\n\nexport const initiateMultipartBlobStage = {\n  isRequest: isInitiateMultipartBlobStageOperationRequest,\n  isResponse: isInitiateMultipartBlobStageOperationResponse,\n  method: initiateMultipartBlobStageOperation.method,\n  path: operationRequestPath(initiateMultipartBlobStageOperation, {}),\n};\n\nexport const getMultipartBlobStage = {\n  isResponse: isGetMultipartBlobStageOperationResponse,\n  method: getMultipartBlobStageOperation.method,\n  path(stageId: string) {\n    return operationRequestPath(getMultipartBlobStageOperation, { stageId });\n  },\n};\n"]}

package/internal/api-client/routes/blobs/multipartUpload.d.ts

@@ -0,0 +1,14 @@
+import type { UploadMultipartBlobPartResponse } from "../../../validators/response/index.js";
+import { type MultipartBlobPartDescriptor } from "../../../validators/util/index.js";
+import type { OperationTransport } from "../../operationTransportFactory.js";
+import type { RequestResultOptions } from "../../types.js";
+import type { UploadMultipartBlobPartBytesRequest } from "./get.js";
+type UploadFetch = (url: string, init: RequestInit) => Promise<Response>;
+/**
+ * Describe an encrypted part the way a stage initiation lists the parts it
+ * will send first: number, exact length, and the Content-MD5 a signed upload
+ * URL binds.
+ */
+export declare function describeMultipartBlobPart(partNumber: number, encryptedBytes: Uint8Array): MultipartBlobPartDescriptor;
+export declare function uploadMultipartBlobPartBytes(transport: OperationTransport, stageId: string, partNumber: number, input: UploadMultipartBlobPartBytesRequest, uploadFetch?: UploadFetch, options?: RequestResultOptions): Promise<UploadMultipartBlobPartResponse | null>;
+export {};

package/internal/api-client/routes/blobs/multipartUpload.js

@@ -1,7 +1,7 @@
 import { md5 } from "@noble/hashes/legacy.js";
 import { bytesToHex } from "../../../crypto/index.js";
 import { authorizeMultipartBlobPartUploadOperation, blobWireHeaderKeys, operationRequestPath, uploadMultipartBlobPartBytesOperation, } from "../../../validators/operation/index.js";
-import { MAX_MULTIPART_BLOB_PART_BYTES } from "../../../validators/util/index.js";
+import { MAX_MULTIPART_BLOB_PART_BYTES, } from "../../../validators/util/index.js";
 import { storageFetchOptions } from "./storageFetchOptions.js";
 function invalidPart(transport, path) {
     transport.reportFailure({
@@ -23,6 +23,21 @@ async function retryStorageStatus(status, attempt) {
     }
     return transient;
 }
+function contentMd5Base64(bytes) {
+    return btoa(String.fromCharCode(...md5(bytes)));
+}
+/**
+ * Describe an encrypted part the way a stage initiation lists the parts it
+ * will send first: number, exact length, and the Content-MD5 a signed upload
+ * URL binds.
+ */
+export function describeMultipartBlobPart(partNumber, encryptedBytes) {
+    return {
+        byteLength: encryptedBytes.byteLength,
+        contentMd5: contentMd5Base64(encryptedBytes),
+        partNumber,
+    };
+}
 async function preparePart(input) {
     // File snapshots mutable buffers and preserves ciphertext across Capacitor's
     // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes
@@ -42,64 +57,100 @@ async function preparePart(input) {
         input.sha256) {
         throw new TypeError("Multipart part SHA-256 does not match its bytes");
     }
-    const contentMd5 = btoa(String.fromCharCode(...md5(new Uint8Array(bytes))));
-    return { file, contentMd5 };
+    return { file, contentMd5: contentMd5Base64(new Uint8Array(bytes)) };
+}
+// Sign just in time for this part. The returned descriptor must name exactly
+// the part, upload, length, and checksum that were requested.
+async function authorizePart(context) {
+    const operation = authorizeMultipartBlobPartUploadOperation;
+    const { input, partNumber, stageId } = context;
+    const result = await context.transport.requestResult(operation, {
+        params: { stageId, partNumber },
+        body: {
+            byteLength: input.byteLength,
+            contentMd5: context.contentMd5,
+            uploadId: input.uploadId,
+        },
+    }, context.options);
+    if (!result.ok)
+        return null;
+    const descriptor = result.data;
+    if (descriptor.stageId !== stageId ||
+        descriptor.uploadId !== input.uploadId ||
+        descriptor.partNumber !== partNumber ||
+        descriptor.byteLength !== input.byteLength ||
+        descriptor.contentMd5 !== context.contentMd5) {
+        context.transport.reportFailure({
+            kind: "shape",
+            method: operation.method,
+            path: context.path,
+            status: 200,
+            statusText: "",
+            message: "Multipart upload descriptor does not match its part",
+        });
+        return null;
+    }
+    return descriptor.source;
+}
+// Parts can wait behind other transfers in the shared pool. An issued URL that
+// is about to lapse would only spend this part's retry on a certain 403, so
+// authorize afresh instead; a skewed clock errs toward authorizing.
+const ISSUED_URL_MIN_REMAINING_MS = 30_000;
+function isUsableIssuedSource(source) {
+    return (source !== undefined &&
+        (source.kind === "api" ||
+            Date.parse(source.expiresAt) - Date.now() > ISSUED_URL_MIN_REMAINING_MS));
+}
+// A capability path for memory/custom stores; S3/R2 never proxy parts.
+function uploadThroughApi(context, file) {
+    const { input } = context;
+    return context.transport.requestBinaryRequest(uploadMultipartBlobPartBytesOperation, {
+        params: { stageId: context.stageId, partNumber: context.partNumber },
+        body: input.encryptedBytes,
+        headers: {
+            [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),
+            [blobWireHeaderKeys.partSha256]: input.sha256,
+            [blobWireHeaderKeys.partUploadId]: input.uploadId,
+        },
+    }, { ...context.options, encodeBody: () => file });
 }
 export async function uploadMultipartBlobPartBytes(transport, stageId, partNumber, input, uploadFetch = (url, init) => fetch(url, init), options = {}) {
     if (options.signal?.aborted)
         return null;
-    const operation = authorizeMultipartBlobPartUploadOperation;
-    const params = { stageId, partNumber };
-    const path = operationRequestPath(operation, params);
+    const path = operationRequestPath(authorizeMultipartBlobPartUploadOperation, {
+        stageId,
+        partNumber,
+    });
     const prepared = await preparePart(input).catch(() => invalidPart(transport, path));
     if (!prepared)
         return null;
     const { file, contentMd5 } = prepared;
-    const body = {
-        byteLength: input.byteLength,
+    const context = {
         contentMd5,
-        uploadId: input.uploadId,
+        input,
+        options,
+        partNumber,
+        path,
+        stageId,
+        transport,
     };
     let status = null;
-    // Sign just in time for each part, not once for the entire file. A network
-    // failure may be an expired URL hidden by R2 CORS, or a lost success response;
-    // reauthorize once and send the same immutable bytes to the same part number.
+    // The first attempt uses the source the stage initiation issued, if any. A
+    // network failure may be an expired URL hidden by R2 CORS, or a lost success
+    // response; reauthorize once and send the same immutable bytes to the same
+    // part number.
     for (let attempt = 0; attempt < 2; attempt += 1) {
         if (options.signal?.aborted)
             return null;
-        const result = await transport.requestResult(operation, { params, body }, options);
-        if (!result.ok)
-            return null;
-        const descriptor = result.data;
-        if (descriptor.stageId !== stageId ||
-            descriptor.uploadId !== input.uploadId ||
-            descriptor.partNumber !== partNumber ||
-            descriptor.byteLength !== input.byteLength ||
-            descriptor.contentMd5 !== contentMd5) {
-            transport.reportFailure({
-                kind: "shape",
-                method: operation.method,
-                path,
-                status: 200,
-                statusText: "",
-                message: "Multipart upload descriptor does not match its part",
-            });
+        const source = attempt === 0 && isUsableIssuedSource(input.source)
+            ? input.source
+            : await authorizePart(context);
+        if (!source)
             return null;
-        }
-        if (descriptor.source.kind === "api") {
-            // A capability path for memory/custom stores; S3/R2 never proxy parts.
-            return transport.requestBinaryRequest(uploadMultipartBlobPartBytesOperation, {
-                params,
-                body: input.encryptedBytes,
-                headers: {
-                    [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),
-                    [blobWireHeaderKeys.partSha256]: input.sha256,
-                    [blobWireHeaderKeys.partUploadId]: input.uploadId,
-                },
-            }, { ...options, encodeBody: () => file });
-        }
+        if (source.kind === "api")
+            return uploadThroughApi(context, file);
         try {
-            const response = await uploadFetch(descriptor.source.url, {
+            const response = await uploadFetch(source.url, {
                 method: "PUT",
                 body: file,
                 headers: {

package/internal/api-client/routes/blobs/multipartUpload.js.map

@@ -1 +1 @@
-{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["multipartUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,kBAAkB,EAClB,oBAAoB,EACpB,qCAAqC,GACtC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAI3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,SAAS,WAAW,CAAC,SAA6B,EAAE,IAAY;IAC9D,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,kEAAkE;KAC5E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IAC/D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAA0C;IACnE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GACR,KAAK,CAAC,cAAc,YAAY,IAAI;QAClC,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE;YACtD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACT,IACE,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU;QAC9B,IAAI,CAAC,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,6BAA6B,EACzC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,IACE,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EACZ,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA6B,EAC7B,OAAe,EACf,UAAkB,EAClB,KAA0C,EAC1C,cAA2B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC1D,UAAgC,EAAE;IAElC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,SAAS,GAAG,yCAAyC,CAAC;IAC5D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACnD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,SAAS,EACT,EAAE,MAAM,EAAE,IAAI,EAAE,EAChB,OAAO,CACR,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IACE,UAAU,CAAC,OAAO,KAAK,OAAO;YAC9B,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACtC,UAAU,CAAC,UAAU,KAAK,UAAU;YACpC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAC1C,UAAU,CAAC,UAAU,KAAK,UAAU,EACpC,CAAC;YACD,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,IAAI;gBACJ,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,uEAAuE;YACvE,OAAO,SAAS,CAAC,oBAAoB,CACnC,qCAAqC,EACrC;gBACE,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,cAAc;gBAC1B,OAAO,EAAE;oBACP,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;oBAChE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM;oBAC7C,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ;iBAClD;aACF,EACD,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBACxD,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACP,cAAc,EAAE,0BAA0B;oBAC1C,aAAa,EAAE,UAAU;iBAC1B;gBACD,GAAG,mBAAmB,CAAC,OAAO,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO;oBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAAE,MAAM;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA6B,EAC7B,IAAY,EACZ,UAAkB,EAClB,MAAqB;IAErB,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,EAAE;QACd,OAAO,EACL,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,kBAAkB,UAAU,gEAAgE;YAC9F,CAAC,CAAC,kBAAkB,UAAU,yBAAyB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,EAAE;KACxG,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { md5 } from \"@noble/hashes/legacy.js\";\nimport { bytesToHex } from \"@tearleads/crypto\";\nimport {\n  authorizeMultipartBlobPartUploadOperation,\n  blobWireHeaderKeys,\n  operationRequestPath,\n  uploadMultipartBlobPartBytesOperation,\n} from \"@tearleads/validators/operation\";\nimport type { UploadMultipartBlobPartResponse } from \"@tearleads/validators/response\";\nimport { MAX_MULTIPART_BLOB_PART_BYTES } from \"@tearleads/validators/util\";\nimport type { OperationTransport } from \"../../operationTransportFactory\";\nimport type { RequestResultOptions } from \"../../types\";\nimport type { UploadMultipartBlobPartBytesRequest } from \"./get\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\ntype UploadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nfunction invalidPart(transport: OperationTransport, path: string) {\n  transport.reportFailure({\n    kind: \"shape\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status: null,\n    statusText: \"\",\n    message: \"Multipart part bytes do not match the declared length or SHA-256\",\n  });\n  return null;\n}\n\nasync function retryStorageStatus(status: number, attempt: number) {\n  if (status === 403) return true;\n  const transient = status === 429 || (status >= 500 && status <= 599);\n  if (transient && attempt === 0) {\n    await new Promise<void>((resolve) => setTimeout(resolve, 250));\n  }\n  return transient;\n}\n\nasync function preparePart(input: UploadMultipartBlobPartBytesRequest) {\n  // File snapshots mutable buffers and preserves ciphertext across Capacitor's\n  // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes\n  // JSON. File's base64 bridge path is byte-for-byte, including non-UTF-8 data.\n  const file =\n    input.encryptedBytes instanceof File\n      ? input.encryptedBytes\n      : new File([input.encryptedBytes], \"encrypted-blob-part\", {\n          type: \"application/octet-stream\",\n        });\n  if (\n    file.size !== input.byteLength ||\n    file.size < 1 ||\n    file.size > MAX_MULTIPART_BLOB_PART_BYTES\n  ) {\n    throw new TypeError(\"Invalid multipart part byte length\");\n  }\n  const bytes = await file.arrayBuffer();\n  if (\n    bytesToHex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes))) !==\n    input.sha256\n  ) {\n    throw new TypeError(\"Multipart part SHA-256 does not match its bytes\");\n  }\n  const contentMd5 = btoa(String.fromCharCode(...md5(new Uint8Array(bytes))));\n  return { file, contentMd5 };\n}\n\nexport async function uploadMultipartBlobPartBytes(\n  transport: OperationTransport,\n  stageId: string,\n  partNumber: number,\n  input: UploadMultipartBlobPartBytesRequest,\n  uploadFetch: UploadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<UploadMultipartBlobPartResponse | null> {\n  if (options.signal?.aborted) return null;\n  const operation = authorizeMultipartBlobPartUploadOperation;\n  const params = { stageId, partNumber };\n  const path = operationRequestPath(operation, params);\n  const prepared = await preparePart(input).catch(() =>\n    invalidPart(transport, path),\n  );\n  if (!prepared) return null;\n  const { file, contentMd5 } = prepared;\n  const body = {\n    byteLength: input.byteLength,\n    contentMd5,\n    uploadId: input.uploadId,\n  };\n  let status: number | null = null;\n  // Sign just in time for each part, not once for the entire file. A network\n  // failure may be an expired URL hidden by R2 CORS, or a lost success response;\n  // reauthorize once and send the same immutable bytes to the same part number.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const result = await transport.requestResult(\n      operation,\n      { params, body },\n      options,\n    );\n    if (!result.ok) return null;\n    const descriptor = result.data;\n    if (\n      descriptor.stageId !== stageId ||\n      descriptor.uploadId !== input.uploadId ||\n      descriptor.partNumber !== partNumber ||\n      descriptor.byteLength !== input.byteLength ||\n      descriptor.contentMd5 !== contentMd5\n    ) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: operation.method,\n        path,\n        status: 200,\n        statusText: \"\",\n        message: \"Multipart upload descriptor does not match its part\",\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      // A capability path for memory/custom stores; S3/R2 never proxy parts.\n      return transport.requestBinaryRequest(\n        uploadMultipartBlobPartBytesOperation,\n        {\n          params,\n          body: input.encryptedBytes,\n          headers: {\n            [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),\n            [blobWireHeaderKeys.partSha256]: input.sha256,\n            [blobWireHeaderKeys.partUploadId]: input.uploadId,\n          },\n        },\n        { ...options, encodeBody: () => file },\n      );\n    }\n    try {\n      const response = await uploadFetch(descriptor.source.url, {\n        method: \"PUT\",\n        body: file,\n        headers: {\n          \"Content-Type\": \"application/octet-stream\",\n          \"Content-MD5\": contentMd5,\n        },\n        ...storageFetchOptions(options),\n      });\n      status = response.status;\n      const etag = response.headers.get(\"ETag\")?.trim();\n      await response.body?.cancel().catch(() => {});\n      if (status === 200 && etag) {\n        return {\n          stageId,\n          uploadId: input.uploadId,\n          part: { byteLength: input.byteLength, partNumber, etag },\n        };\n      }\n      if (!(await retryStorageStatus(status, attempt))) break;\n    } catch {\n      // Never expose a provider exception or body: it may contain the bearer URL.\n      status = null;\n    }\n  }\n  if (options.signal?.aborted) return null;\n  reportStorageFailure(transport, path, partNumber, status);\n  return null;\n}\n\nfunction reportStorageFailure(\n  transport: OperationTransport,\n  path: string,\n  partNumber: number,\n  status: number | null,\n) {\n  transport.reportFailure({\n    kind: \"storage\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status,\n    statusText: \"\",\n    message:\n      status === 200\n        ? `Multipart part ${partNumber} storage response is missing ETag; check storage CORS exposure`\n        : `Multipart part ${partNumber} storage upload failed${status === null ? \"\" : ` (HTTP ${status})`}`,\n  });\n}\n"]}
+{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["multipartUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,kBAAkB,EAClB,oBAAoB,EACpB,qCAAqC,GACtC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,6BAA6B,GAG9B,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,SAAS,WAAW,CAAC,SAA6B,EAAE,IAAY;IAC9D,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,kEAAkE;KAC5E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IAC/D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACzC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,cAA0B;IAE1B,OAAO;QACL,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,UAAU,EAAE,gBAAgB,CAAC,cAAc,CAAC;QAC5C,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAA0C;IACnE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GACR,KAAK,CAAC,cAAc,YAAY,IAAI;QAClC,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE;YACtD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACT,IACE,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU;QAC9B,IAAI,CAAC,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,6BAA6B,EACzC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,IACE,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EACZ,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAYD,6EAA6E;AAC7E,8DAA8D;AAC9D,KAAK,UAAU,aAAa,CAC1B,OAA0B;IAE1B,MAAM,SAAS,GAAG,yCAAyC,CAAC;IAC5D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAClD,SAAS,EACT;QACE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QAC/B,IAAI,EAAE;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;KACF,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IACE,UAAU,CAAC,OAAO,KAAK,OAAO;QAC9B,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACtC,UAAU,CAAC,UAAU,KAAK,UAAU;QACpC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAC1C,UAAU,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAC5C,CAAC;QACD,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC;YAC9B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAE3C,SAAS,oBAAoB,CAC3B,MAAiD;IAEjD,OAAO,CACL,MAAM,KAAK,SAAS;QACpB,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;YACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,2BAA2B,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,gBAAgB,CAAC,OAA0B,EAAE,IAAU;IAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,OAAO,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAC3C,qCAAqC,EACrC;QACE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;QACpE,IAAI,EAAE,KAAK,CAAC,cAAc;QAC1B,OAAO,EAAE;YACP,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;YAChE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM;YAC7C,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ;SAClD;KACF,EACD,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA6B,EAC7B,OAAe,EACf,UAAkB,EAClB,KAA0C,EAC1C,cAA2B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC1D,UAAgC,EAAE;IAElC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,oBAAoB,CAAC,yCAAyC,EAAE;QAC3E,OAAO;QACP,UAAU;KACX,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACnD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,OAAO,GAAsB;QACjC,UAAU;QACV,KAAK;QACL,OAAO;QACP,UAAU;QACV,IAAI;QACJ,OAAO;QACP,SAAS;KACV,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,eAAe;IACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GACV,OAAO,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;YACjD,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACP,cAAc,EAAE,0BAA0B;oBAC1C,aAAa,EAAE,UAAU;iBAC1B;gBACD,GAAG,mBAAmB,CAAC,OAAO,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO;oBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAAE,MAAM;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA6B,EAC7B,IAAY,EACZ,UAAkB,EAClB,MAAqB;IAErB,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,EAAE;QACd,OAAO,EACL,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,kBAAkB,UAAU,gEAAgE;YAC9F,CAAC,CAAC,kBAAkB,UAAU,yBAAyB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,EAAE;KACxG,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { md5 } from \"@noble/hashes/legacy.js\";\nimport { bytesToHex } from \"@tearleads/crypto\";\nimport {\n  authorizeMultipartBlobPartUploadOperation,\n  blobWireHeaderKeys,\n  operationRequestPath,\n  uploadMultipartBlobPartBytesOperation,\n} from \"@tearleads/validators/operation\";\nimport type { UploadMultipartBlobPartResponse } from \"@tearleads/validators/response\";\nimport {\n  MAX_MULTIPART_BLOB_PART_BYTES,\n  type MultipartBlobPartDescriptor,\n  type MultipartBlobPartUploadSource,\n} from \"@tearleads/validators/util\";\nimport type { OperationTransport } from \"../../operationTransportFactory\";\nimport type { RequestResultOptions } from \"../../types\";\nimport type { UploadMultipartBlobPartBytesRequest } from \"./get\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\ntype UploadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nfunction invalidPart(transport: OperationTransport, path: string) {\n  transport.reportFailure({\n    kind: \"shape\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status: null,\n    statusText: \"\",\n    message: \"Multipart part bytes do not match the declared length or SHA-256\",\n  });\n  return null;\n}\n\nasync function retryStorageStatus(status: number, attempt: number) {\n  if (status === 403) return true;\n  const transient = status === 429 || (status >= 500 && status <= 599);\n  if (transient && attempt === 0) {\n    await new Promise<void>((resolve) => setTimeout(resolve, 250));\n  }\n  return transient;\n}\n\nfunction contentMd5Base64(bytes: Uint8Array): string {\n  return btoa(String.fromCharCode(...md5(bytes)));\n}\n\n/**\n * Describe an encrypted part the way a stage initiation lists the parts it\n * will send first: number, exact length, and the Content-MD5 a signed upload\n * URL binds.\n */\nexport function describeMultipartBlobPart(\n  partNumber: number,\n  encryptedBytes: Uint8Array,\n): MultipartBlobPartDescriptor {\n  return {\n    byteLength: encryptedBytes.byteLength,\n    contentMd5: contentMd5Base64(encryptedBytes),\n    partNumber,\n  };\n}\n\nasync function preparePart(input: UploadMultipartBlobPartBytesRequest) {\n  // File snapshots mutable buffers and preserves ciphertext across Capacitor's\n  // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes\n  // JSON. File's base64 bridge path is byte-for-byte, including non-UTF-8 data.\n  const file =\n    input.encryptedBytes instanceof File\n      ? input.encryptedBytes\n      : new File([input.encryptedBytes], \"encrypted-blob-part\", {\n          type: \"application/octet-stream\",\n        });\n  if (\n    file.size !== input.byteLength ||\n    file.size < 1 ||\n    file.size > MAX_MULTIPART_BLOB_PART_BYTES\n  ) {\n    throw new TypeError(\"Invalid multipart part byte length\");\n  }\n  const bytes = await file.arrayBuffer();\n  if (\n    bytesToHex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes))) !==\n    input.sha256\n  ) {\n    throw new TypeError(\"Multipart part SHA-256 does not match its bytes\");\n  }\n  return { file, contentMd5: contentMd5Base64(new Uint8Array(bytes)) };\n}\n\ninterface PartUploadContext {\n  readonly contentMd5: string;\n  readonly input: UploadMultipartBlobPartBytesRequest;\n  readonly options: RequestResultOptions;\n  readonly partNumber: number;\n  readonly path: string;\n  readonly stageId: string;\n  readonly transport: OperationTransport;\n}\n\n// Sign just in time for this part. The returned descriptor must name exactly\n// the part, upload, length, and checksum that were requested.\nasync function authorizePart(\n  context: PartUploadContext,\n): Promise<MultipartBlobPartUploadSource | null> {\n  const operation = authorizeMultipartBlobPartUploadOperation;\n  const { input, partNumber, stageId } = context;\n  const result = await context.transport.requestResult(\n    operation,\n    {\n      params: { stageId, partNumber },\n      body: {\n        byteLength: input.byteLength,\n        contentMd5: context.contentMd5,\n        uploadId: input.uploadId,\n      },\n    },\n    context.options,\n  );\n  if (!result.ok) return null;\n  const descriptor = result.data;\n  if (\n    descriptor.stageId !== stageId ||\n    descriptor.uploadId !== input.uploadId ||\n    descriptor.partNumber !== partNumber ||\n    descriptor.byteLength !== input.byteLength ||\n    descriptor.contentMd5 !== context.contentMd5\n  ) {\n    context.transport.reportFailure({\n      kind: \"shape\",\n      method: operation.method,\n      path: context.path,\n      status: 200,\n      statusText: \"\",\n      message: \"Multipart upload descriptor does not match its part\",\n    });\n    return null;\n  }\n  return descriptor.source;\n}\n\n// Parts can wait behind other transfers in the shared pool. An issued URL that\n// is about to lapse would only spend this part's retry on a certain 403, so\n// authorize afresh instead; a skewed clock errs toward authorizing.\nconst ISSUED_URL_MIN_REMAINING_MS = 30_000;\n\nfunction isUsableIssuedSource(\n  source: MultipartBlobPartUploadSource | undefined,\n): source is MultipartBlobPartUploadSource {\n  return (\n    source !== undefined &&\n    (source.kind === \"api\" ||\n      Date.parse(source.expiresAt) - Date.now() > ISSUED_URL_MIN_REMAINING_MS)\n  );\n}\n\n// A capability path for memory/custom stores; S3/R2 never proxy parts.\nfunction uploadThroughApi(context: PartUploadContext, file: File) {\n  const { input } = context;\n  return context.transport.requestBinaryRequest(\n    uploadMultipartBlobPartBytesOperation,\n    {\n      params: { stageId: context.stageId, partNumber: context.partNumber },\n      body: input.encryptedBytes,\n      headers: {\n        [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),\n        [blobWireHeaderKeys.partSha256]: input.sha256,\n        [blobWireHeaderKeys.partUploadId]: input.uploadId,\n      },\n    },\n    { ...context.options, encodeBody: () => file },\n  );\n}\n\nexport async function uploadMultipartBlobPartBytes(\n  transport: OperationTransport,\n  stageId: string,\n  partNumber: number,\n  input: UploadMultipartBlobPartBytesRequest,\n  uploadFetch: UploadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<UploadMultipartBlobPartResponse | null> {\n  if (options.signal?.aborted) return null;\n  const path = operationRequestPath(authorizeMultipartBlobPartUploadOperation, {\n    stageId,\n    partNumber,\n  });\n  const prepared = await preparePart(input).catch(() =>\n    invalidPart(transport, path),\n  );\n  if (!prepared) return null;\n  const { file, contentMd5 } = prepared;\n  const context: PartUploadContext = {\n    contentMd5,\n    input,\n    options,\n    partNumber,\n    path,\n    stageId,\n    transport,\n  };\n  let status: number | null = null;\n  // The first attempt uses the source the stage initiation issued, if any. A\n  // network failure may be an expired URL hidden by R2 CORS, or a lost success\n  // response; reauthorize once and send the same immutable bytes to the same\n  // part number.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const source =\n      attempt === 0 && isUsableIssuedSource(input.source)\n        ? input.source\n        : await authorizePart(context);\n    if (!source) return null;\n    if (source.kind === \"api\") return uploadThroughApi(context, file);\n    try {\n      const response = await uploadFetch(source.url, {\n        method: \"PUT\",\n        body: file,\n        headers: {\n          \"Content-Type\": \"application/octet-stream\",\n          \"Content-MD5\": contentMd5,\n        },\n        ...storageFetchOptions(options),\n      });\n      status = response.status;\n      const etag = response.headers.get(\"ETag\")?.trim();\n      await response.body?.cancel().catch(() => {});\n      if (status === 200 && etag) {\n        return {\n          stageId,\n          uploadId: input.uploadId,\n          part: { byteLength: input.byteLength, partNumber, etag },\n        };\n      }\n      if (!(await retryStorageStatus(status, attempt))) break;\n    } catch {\n      // Never expose a provider exception or body: it may contain the bearer URL.\n      status = null;\n    }\n  }\n  if (options.signal?.aborted) return null;\n  reportStorageFailure(transport, path, partNumber, status);\n  return null;\n}\n\nfunction reportStorageFailure(\n  transport: OperationTransport,\n  path: string,\n  partNumber: number,\n  status: number | null,\n) {\n  transport.reportFailure({\n    kind: \"storage\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status,\n    statusText: \"\",\n    message:\n      status === 200\n        ? `Multipart part ${partNumber} storage response is missing ETag; check storage CORS exposure`\n        : `Multipart part ${partNumber} storage upload failed${status === null ? \"\" : ` (HTTP ${status})`}`,\n  });\n}\n"]}