@voltro/plugin-storage 0.86.0 → 0.87.0

package/dist/index.js

@@ -1,80 +1,128 @@
-import { storageObjectNamespace as e } from "./storageNamespaces.js";
-import { STORAGE_REFERENCE_CATALOGUE_TABLE as t, ensureStorageReferenceCatalogue as n, storageReferenceCatalogueTable as r } from "./referenceCatalogue.js";
-import { STORAGE_BLOBS_TABLE as i, STORAGE_GRANTS_TABLE as a, STORAGE_REFS_TABLE as o, STORAGE_USAGE_TABLE as s, _voltroStorageBlobsTable as c, _voltroStorageGrantsTable as l, _voltroStorageRefsTable as u, _voltroStorageUsageTable as d } from "./table.js";
-import { assignStorageReferenceInstancesInTransaction as f, requireStorageReferenceOwnership as ee } from "./storageReferenceInstances.js";
-import { StorageAccessDenied as te, StorageError as p, StorageRejected as ne, StorageScanRejected as re, StorageService as m } from "./types.js";
-import { storageObjectLifecycleTables as h } from "./objectLifecycle.js";
-import { assignStorageObjectNamespacesInTransaction as g, requireStorageObjectNamespaces as _ } from "./storageObjectNamespaces.js";
-import { bytesToStream as v, collectStream as y, concatBytes as b, fromNodeReadable as x, getObjectStream as S, putObjectStream as ie, toNodeReadable as C } from "./streamBridge.js";
-import { storageEnv as w } from "./env.js";
-import { azureProvider as T, clearStorageBuffer as E, databaseProvider as D, filesystemProvider as O, memoryProvider as k, readStorageBuffer as ae, s3Provider as A } from "./providers.js";
-import { createTransformCache as oe } from "./transformCache.js";
-import { editImage as j, parseTransformParams as se, transformCached as ce, transformFallbackReason as le, transformImage as ue, transformKey as de } from "./transform.js";
-import { hashPassword as M, verifyPassword as fe } from "./access.js";
-import { resolveStorageSecret as pe, signFinalizeTicket as me, signGrant as he, signMultipartTicket as ge, signResumableTicket as _e, signUploadTicket as N, verifyFinalizeTicket as ve, verifyGrant as ye, verifyMultipartTicket as P, verifyResumableTicket as be, verifyUploadTicket as F } from "./grant.js";
-import { checkLimits as I, contentTypeAllowed as L, sniffMatches as R } from "./constraints.js";
-import { fetchIngestBody as z } from "./ingest.js";
-import { buildStorageService as xe, dataStoreGrantStore as Se, dataStoreRefStore as Ce, memoryGrantStore as we, memoryRefStore as B, refMatchesListQuery as V, storageServiceLayer as Te } from "./service.js";
-import { makeStorageObjectMetadata as Ee, storagePutIntentsTable as De } from "./objectMetadata.js";
-import { abortMultipartUploadDescriptor as Oe, beginMultipartUploadDescriptor as ke, beginResumableUploadDescriptor as Ae, completeMultipartUploadDescriptor as je, finalizeUploadDescriptor as Me, ingestUrlDescriptor as Ne, listGrantsDescriptor as Pe, listRefsDescriptor as Fe, mintPresignedUploadDescriptor as Ie, mintUploadTicketDescriptor as Le, mintUploadUrlDescriptor as Re, mintUrlDescriptor as ze, revokeDescriptor as Be, shareDescriptor as Ve, signMultipartPartDescriptor as He, storageRpcClientImports as Ue, uploadDescriptor as We } from "./rpc.js";
-import { clamavScanner as Ge, encodeInstream as Ke, parseClamavResponse as qe } from "./scanners.js";
-import { ffmpegTranscoder as Je } from "./transcodeVideo.js";
-import { assetRef as Ye, withStorage as Xe } from "./assetRef.js";
-import { decodeDataUri as Ze, putAvatar as Qe } from "./avatar.js";
-import { durabilityNotice as $e, pathDurability as et } from "./pathDurability.js";
-import { createHash as tt, randomUUID as H } from "node:crypto";
-import { Effect as U, Schema as W, Stream as nt } from "effect";
-import { processIdentity as rt } from "@voltro/protocol/identity";
-import { StorageAccessPolicySchema as it, definePlugin as at, pluginInstanceName as G } from "@voltro/protocol";
-import { readCookie as ot, resolveSessionSecret as st, verifySession as ct } from "@voltro/protocol/session";
+import { appStorageRouter as e, makeStorageDestinationRouter as t } from "./storageRouting.js";
+import { storageByteSecurityHeaders as n } from "./byteSecurity.js";
+import { existingFilesystemObjectNamespace as r, storageObjectNamespace as i } from "./storageNamespaces.js";
+import { STORAGE_REFERENCE_CATALOGUE_TABLE as a, ensureStorageReferenceCatalogue as o, storageReferenceCatalogueTable as s } from "./referenceCatalogue.js";
+import { STORAGE_BLOBS_TABLE as c, STORAGE_GRANTS_TABLE as l, STORAGE_REFS_TABLE as u, STORAGE_USAGE_TABLE as d, _voltroStorageBlobsTable as ee, _voltroStorageGrantsTable as f, _voltroStorageRefsTable as p, _voltroStorageUsageTable as m } from "./table.js";
+import { assignStorageReferenceInstancesInTransaction as h, requireStorageReferenceOwnership as te } from "./storageReferenceInstances.js";
+import { StorageAccessDenied as ne, StorageError as g, StorageRejected as re, StorageScanRejected as ie, StorageService as _, storageAddressIdentity as ae, storageRefAddress as v } from "./types.js";
+import { storageObjectLifecycleTables as oe } from "./objectLifecycle.js";
+import { assignStorageObjectNamespacesInTransaction as y, requireStorageObjectNamespaces as se } from "./storageObjectNamespaces.js";
+import { bytesToStream as b, collectStream as x, concatBytes as S, fromNodeReadable as C, getObjectStream as ce, putObjectStream as w, toNodeReadable as T } from "./streamBridge.js";
+import { storageEnv as E } from "./env.js";
+import { azureProvider as D, clearStorageBuffer as O, databaseProvider as k, filesystemProvider as A, memoryProvider as j, memoryProviderWithState as M, readStorageBuffer as N, s3Provider as P } from "./providers.js";
+import { createTransformCache as le } from "./transformCache.js";
+import { editImage as ue, parseTransformParams as de, transformCached as fe, transformFallbackReason as pe, transformImage as me, transformKey as he } from "./transform.js";
+import { hashPassword as F, verifyPassword as I } from "./access.js";
+import { resolveStorageSecret as L, signFinalizeTicket as ge, signGrant as R, signMultipartTicket as _e, signResumableTicket as ve, signUploadTicket as z, verifyFinalizeTicket as ye, verifyGrant as be, verifyMultipartTicket as B, verifyResumableTicket as xe, verifyUploadTicket as Se } from "./grant.js";
+import { checkLimits as V, contentTypeAllowed as Ce, sniffMatches as we } from "./constraints.js";
+import { fetchIngestBody as H } from "./ingest.js";
+import { buildStorageService as Te, dataStoreGrantStore as Ee, dataStoreRefStore as De, memoryGrantStore as Oe, memoryRefStore as ke, refMatchesListQuery as Ae, storageServiceLayer as je } from "./service.js";
+import { makeStorageObjectMetadata as Me, storagePutIntentsTable as Ne } from "./objectMetadata.js";
+import { retainedCaptureTables as Pe } from "./retainedCapture.js";
+import { StorageCustody as Fe, storageCustodyLayer as Ie } from "./custody.js";
+import { abortMultipartUploadDescriptor as Le, beginMultipartUploadDescriptor as Re, beginResumableUploadDescriptor as ze, completeMultipartUploadDescriptor as Be, finalizeUploadDescriptor as Ve, ingestUrlDescriptor as He, listGrantsDescriptor as Ue, listRefsDescriptor as We, mintPresignedUploadDescriptor as Ge, mintUploadTicketDescriptor as Ke, mintUploadUrlDescriptor as qe, mintUrlDescriptor as Je, revokeDescriptor as Ye, shareDescriptor as Xe, signMultipartPartDescriptor as Ze, storageRpcClientImports as Qe, uploadDescriptor as $e } from "./rpc.js";
+import { clamavScanner as U, encodeInstream as W, parseClamavResponse as G } from "./scanners.js";
+import { ffmpegTranscoder as K } from "./transcodeVideo.js";
+import { assetRef as et, withStorage as tt } from "./assetRef.js";
+import { decodeDataUri as nt, putAvatar as rt } from "./avatar.js";
+import { durabilityNotice as it, pathDurability as at } from "./pathDurability.js";
+import { connectStorage as ot, withStorageKeyPrefix as st } from "./connection.js";
+import { StorageAddress as ct, forwardStorageProvider as lt, isStorageKey as ut, storageAddressIdentity as dt } from "@voltro/kv/storage";
+import { Effect as q, Layer as ft, Schema as J, Stream as pt } from "effect";
+import { createHash as mt, randomUUID as ht } from "node:crypto";
+import { authoredError as gt } from "@voltro/database";
+import { processIdentity as _t } from "@voltro/protocol/identity";
+import { StorageAccessPolicySchema as vt, definePlugin as yt, effectiveScopes as bt, pluginInstanceName as xt } from "@voltro/protocol";
+import { readCookie as St, resolveSessionSecrets as Ct, verifySessionKeyed as wt } from "@voltro/protocol/session";
+import { ifRangeAllowsRange as Tt, parseByteRange as Et } from "@voltro/runtime/http-range";
 //#region src/index.ts
-var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
-	K = e;
-}, dt = () => K ?? q({}), ft = () => K === void 0 ? w.read("STORAGE_PROVIDER") === void 0 ? void 0 : q({}) : K, q = (e) => {
+var Dt = E.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", Ot = (e) => {
+	let t = e.filter((e) => e.capabilities?.storageProvider !== void 0);
+	if (t.length > 1) throw new g({
+		provider: "storage",
+		message: "Storage destination is ambiguous; installed instances: " + t.map((e) => e.name).sort().join(", "),
+		transient: !1
+	});
+	return t.length === 1 ? t[0].capabilities.storageProvider() : void 0;
+}, kt = (e) => {
+	let t = Ot(e);
+	return t === void 0 || Y.has(t) ? void 0 : t;
+}, Y = /* @__PURE__ */ new WeakSet(), At = (e) => {
+	if (Y.has(e) && process.env.NODE_ENV === "production") throw gt("storage: no provider is configured in this production process — `storagePlugin()` has no `provider` and STORAGE_PROVIDER is unset, so storage would fall back to process memory, which no other replica or later process can see. Set STORAGE_PROVIDER (s3 | minio | azure | filesystem | database) for every process that reaches storage, migrate jobs included, or pass `provider: 'memory'` to choose memory deliberately.");
+	return e;
+}, jt = (e) => {
+	let t = Ot(e);
+	if (t === void 0) throw new g({
+		provider: "storage",
+		message: "This app has no configured storage destination",
+		transient: !1
+	});
+	return At(t);
+}, X = (e) => {
 	if (e.provider && typeof e.provider == "object") return e.provider;
-	let t = (e.provider ?? w.read("STORAGE_PROVIDER") ?? "memory").toLowerCase(), n = w.read("S3_BUCKET", e.bucket) ?? w.read("STORAGE_BUCKET") ?? "voltro";
-	switch (t) {
+	let t = e.provider ?? E.read("STORAGE_PROVIDER");
+	if (t === void 0) {
+		let t = X({
+			...e,
+			provider: "memory"
+		});
+		return Y.add(t), t;
+	}
+	let n = t.toLowerCase(), r = E.read("S3_BUCKET", e.bucket) ?? E.read("STORAGE_BUCKET") ?? "voltro";
+	switch (n) {
 		case "s3":
 		case "minio": {
-			let r = w.read("S3_REGION", e.region) ?? w.read("AWS_REGION"), i = w.read("S3_ENDPOINT", e.endpoint) ?? w.read("MINIO_ENDPOINT"), a = w.read("S3_ACCESS_KEY_ID", e.accessKeyId) ?? w.read("AWS_ACCESS_KEY_ID"), o = w.read("S3_SECRET_ACCESS_KEY", e.secretAccessKey) ?? w.read("AWS_SECRET_ACCESS_KEY"), s = w.read("STORAGE_CDN_URL", e.cdnBaseUrl), c = {
-				bucket: n,
-				name: t,
-				...r ? { region: r } : {},
+			let t = E.read("S3_REGION", e.region) ?? E.read("AWS_REGION"), i = E.read("S3_ENDPOINT", e.endpoint) ?? E.read("MINIO_ENDPOINT"), a = E.read("S3_ACCESS_KEY_ID", e.accessKeyId) ?? E.read("AWS_ACCESS_KEY_ID"), o = E.read("S3_SECRET_ACCESS_KEY", e.secretAccessKey) ?? E.read("AWS_SECRET_ACCESS_KEY"), s = E.read("STORAGE_CDN_URL", e.cdnBaseUrl), c = {
+				bucket: r,
+				name: n,
+				...t ? { region: t } : {},
 				...i ? { endpoint: i } : {},
 				...a ? { accessKeyId: a } : {},
 				...o ? { secretAccessKey: o } : {},
 				...s ? { cdnBaseUrl: s } : {},
 				...e.publicAcl === void 0 ? {} : { publicAcl: e.publicAcl },
-				...t === "minio" || w.read("S3_FORCE_PATH_STYLE") === "1" ? { forcePathStyle: !0 } : {}
+				...n === "minio" || E.read("S3_FORCE_PATH_STYLE") === "1" ? { forcePathStyle: !0 } : {}
 			};
-			return A(c);
+			return P(c);
 		}
 		case "azure": {
-			let t = w.read("AZURE_STORAGE_ACCOUNT", e.accountName), r = w.read("AZURE_STORAGE_KEY", e.accountKey), i = w.read("AZURE_STORAGE_CONNECTION_STRING", e.connectionString), a = w.read("AZURE_STORAGE_ENDPOINT", e.endpoint), o = w.read("STORAGE_CDN_URL", e.cdnBaseUrl), s = {
-				container: w.read("AZURE_STORAGE_CONTAINER", e.bucket) ?? n,
+			let t = E.read("AZURE_STORAGE_ACCOUNT", e.accountName), n = E.read("AZURE_STORAGE_KEY", e.accountKey), i = E.read("AZURE_STORAGE_CONNECTION_STRING", e.connectionString), a = E.read("AZURE_STORAGE_ENDPOINT", e.endpoint), o = E.read("STORAGE_CDN_URL", e.cdnBaseUrl), s = {
+				container: E.read("AZURE_STORAGE_CONTAINER", e.bucket) ?? r,
 				...t ? { accountName: t } : {},
-				...r ? { accountKey: r } : {},
+				...n ? { accountKey: n } : {},
 				...i ? { connectionString: i } : {},
 				...a ? { endpoint: a } : {},
 				...o ? { cdnBaseUrl: o } : {}
 			};
-			return T(s);
+			return D(s);
 		}
-		case "database": return D();
-		case "filesystem": return O({ root: w.read("STORAGE_ROOT", e.root) ?? ".voltro-storage" });
-		default: return k(e.name ?? "default");
+		case "database": return k();
+		case "filesystem": return A({ root: E.read("STORAGE_ROOT", e.root) ?? ".voltro-storage" });
+		case "memory": return M(/* @__PURE__ */ new Map());
+		default: throw new g({
+			provider: "storage",
+			message: "Unknown storage provider; choose memory, filesystem, database, s3, minio or azure",
+			transient: !1
+		});
 	}
-}, pt = (e) => {
-	let t = "stored files (uploads, renditions) and their reads", n = "provider 'database' or 'filesystem' keeps the bytes inside the installation";
+}, Mt = (e) => {
+	let t = "stored files (uploads, renditions) and their reads";
+	if (e.connection !== void 0) return [{
+		destination: `runtime:the app-owned ${e.connection} connection`,
+		purpose: t,
+		data: ["files"],
+		disable: "remove the storage connection binding"
+	}];
+	let n = "provider 'database' or 'filesystem' keeps the bytes inside the installation";
 	if (e.provider && typeof e.provider == "object") return [{
 		destination: `runtime:the '${e.provider.name}' storage provider`,
 		purpose: t,
 		data: ["files"],
 		disable: n
 	}];
-	let r = (e.provider ?? w.read("STORAGE_PROVIDER") ?? "memory").toLowerCase();
+	let r = (e.provider ?? E.read("STORAGE_PROVIDER") ?? "memory").toLowerCase();
 	if (r === "s3" || r === "minio") {
-		let r = w.read("S3_ENDPOINT", e.endpoint) ?? w.read("MINIO_ENDPOINT"), i = w.read("S3_REGION", e.region) ?? w.read("AWS_REGION") ?? "us-east-1";
+		let r = E.read("S3_ENDPOINT", e.endpoint) ?? E.read("MINIO_ENDPOINT"), i = E.read("S3_REGION", e.region) ?? E.read("AWS_REGION") ?? "us-east-1";
 		return [{
 			destination: r ?? `s3.${i}.amazonaws.com`,
 			purpose: t,
@@ -83,7 +131,7 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 		}];
 	}
 	if (r === "azure") {
-		let r = w.read("AZURE_STORAGE_ENDPOINT", e.endpoint), i = w.read("AZURE_STORAGE_ACCOUNT", e.accountName);
+		let r = E.read("AZURE_STORAGE_ENDPOINT", e.endpoint), i = E.read("AZURE_STORAGE_ACCOUNT", e.accountName);
 		return [{
 			destination: r ?? (i === void 0 ? "runtime:the Azure storage connection string" : `${i}.blob.core.windows.net`),
 			purpose: t,
@@ -92,11 +140,11 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 		}];
 	}
 	return [];
-}, mt = (e) => {
+}, Nt = (e) => {
 	if (e !== void 0) return e;
-	let t = w.read("STORAGE_ALLOWED_ORIGINS");
+	let t = E.read("STORAGE_ALLOWED_ORIGINS");
 	return t ? t.trim() === "*" ? "*" : t.split(",").map((e) => e.trim()).filter(Boolean) : [];
-}, J = (e, t) => {
+}, Pt = (e, t) => {
 	if (!e || t !== "*" && !t.includes(e)) return {};
 	let n = {
 		"access-control-allow-origin": t === "*" ? "*" : e,
@@ -106,7 +154,7 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 		vary: "Origin"
 	};
 	return t !== "*" && (n["access-control-allow-credentials"] = "true"), n;
-}, ht = (e) => ({
+}, Ft = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	ownerId: e.ownerId,
@@ -129,29 +177,29 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 	caption: e.caption ?? null,
 	derivedFrom: e.derivedFrom ?? null,
 	kind: e.kind ?? null
-}), Y = () => new p({
+}), It = () => new g({
 	provider: "storage",
 	message: "not permitted to administer sharing for this object",
 	transient: !1,
 	status: 403
-}), X = (e, t, n) => {
+}), Lt = (e, t, n) => {
 	let r = n.request.subject;
-	return (r.scopes ?? []).includes("admin:full") ? U.void : e.head(t, { tenantId: r.tenantId ?? null }).pipe(U.catch(() => U.fail(Y())), U.flatMap((e) => {
+	return bt(r).includes("admin:full") ? q.void : e.head(t, { tenantId: r.tenantId ?? null }).pipe(q.catch(() => q.fail(It())), q.flatMap((e) => {
 		let t = e?.ownerId;
-		return t != null && t === r.id ? U.void : U.fail(Y());
+		return t != null && t === r.id ? q.void : q.fail(It());
 	}));
-}, gt = () => new p({
+}, Rt = () => new g({
 	provider: "storage",
 	message: "an upload needs an identified caller: this request carries no subject, and the app has not set `anonymousUploads: true` on storagePlugin. The ticket attributes the object to whoever minted it — with no subject there is nobody to attribute it to, so the finalized object would carry no owner and no tenant and no later owner check, tenant filter or quota could reach it.",
 	transient: !1,
 	status: 401
 }), Z = (e, t) => {
 	let n = e.request.subject.id ?? null, r = e.request.subject.tenantId ?? null;
-	return n === null && !t ? U.fail(gt()) : U.succeed({
+	return n === null && !t ? q.fail(Rt()) : q.succeed({
 		id: n,
 		tenantId: r
 	});
-}, _t = (e, t) => e !== null && e !== (t ?? null), Q = (e) => ({
+}, zt = (e, t) => e !== null && e !== (t ?? null), Bt = (e) => ({
 	id: e.id,
 	refId: e.refId,
 	principalType: e.principalType,
@@ -160,32 +208,79 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 	createdAt: e.createdAt.toISOString(),
 	expiresAt: e.expiresAt ? e.expiresAt.toISOString() : null,
 	createdBy: e.createdBy
-}), $ = "@voltro/plugin-storage", vt = (e = {}) => G({
-	base: $,
+}), Q = "@voltro/plugin-storage", Vt = (e = {}) => xt({
+	base: Q,
 	alias: e.alias,
 	instance: e.name
-}), yt = (e) => e.reason === "too-large" ? 413 : e.reason === "operation-identity-reused" || e.reason === "operation-store-unbound" || e.reason === "claim-not-held" ? 409 : 415, bt = (e = {}) => {
-	let t = G({
-		base: $,
+}), Ht = (e) => e.reason === "too-large" ? 413 : e.reason === "operation-identity-reused" || e.reason === "operation-store-unbound" || e.reason === "claim-not-held" ? 409 : 415, Ut = (e = {}) => {
+	let r = xt({
+		base: Q,
 		alias: e.alias,
 		instance: e.name
-	}), r = t === $ ? "/_voltro/storage" : `/_voltro/storage/i/${Buffer.from(t).toString("hex")}`, i = q(e);
-	ut(i);
-	let a = w.read("S3_BUCKET", e.bucket) ?? w.read("STORAGE_BUCKET") ?? "voltro", o = w.read("VOLTRO_PUBLIC_URL", e.publicBaseUrl), s = mt(e.allowedOrigins), c = e.limits?.maxBytes, l = e.anonymousUploads === !0, u = 5242880, d = 21600, f = e.refStore === void 0 || e.refStore === "memory", m = e.grantStore === void 0 || e.grantStore === "memory", h = (t, n) => U.gen(function* () {
-		let r = (e) => W.decodeUnknownEffect(it)(e, { onExcessProperty: "error" }).pipe(U.mapError(() => new p({
+	}), i = r === Q ? "/_voltro/storage" : `/_voltro/storage/i/${Buffer.from(r).toString("hex")}`, a = [
+		"provider",
+		"bucket",
+		"region",
+		"endpoint",
+		"accessKeyId",
+		"secretAccessKey",
+		"root",
+		"accountName",
+		"accountKey",
+		"connectionString",
+		"cdnBaseUrl"
+	].some((t) => e[t] !== void 0);
+	if (e.connection !== void 0 && a) throw Error("Storage selects either a named connection or direct transport options");
+	let s = e.connection !== void 0 || !a;
+	if (e.connection === void 0 && typeof e.provider != "object" && ![
+		"memory",
+		"filesystem",
+		"database",
+		"s3",
+		"minio",
+		"azure"
+	].includes((e.provider ?? E.read("STORAGE_PROVIDER") ?? "memory").toLowerCase())) throw new g({
+		provider: "storage",
+		message: "Unknown storage provider; choose memory, filesystem, database, s3, minio or azure",
+		transient: !1
+	});
+	let c = E.read("S3_BUCKET", e.bucket) ?? E.read("STORAGE_BUCKET") ?? "voltro", l = a ? X(e) : void 0, u = () => (l === void 0 && (l = X(e)), l), d = l, ee = e.connection, f, p = !1, m = s ? lt(() => {
+		if (d === void 0) {
+			if (ee !== void 0) throw new g({
+				provider: "storage",
+				message: "Named storage requires a bound tenant-aware destination",
+				transient: !1
+			});
+			d = u();
+		}
+		return d;
+	}) : d;
+	e.provider === void 0 && e.connection === void 0 && E.read("STORAGE_PROVIDER") === void 0 && Y.add(m);
+	let h = e.connection ?? c, _ = t({
+		selected: () => h,
+		directDestination: e.connection === void 0 ? c : void 0,
+		directProvider: u,
+		registry: () => f
+	}), oe = (e, t) => q.gen(function* () {
+		if (f = e, ee = t, p = !1, h = t ?? c, t === void 0) return;
+		if (Y.delete(m), e === void 0) throw Error("Named storage requires the app connection registry");
+		let n = yield* e.validate(t);
+		p = n.tenantScoped, d = n.tenantScoped ? void 0 : yield* e.storage(t);
+	}), y = E.read("VOLTRO_PUBLIC_URL", e.publicBaseUrl), b = Nt(e.allowedOrigins), x = e.limits?.maxBytes, S = e.anonymousUploads === !0, C = 5242880, ce = 21600, w = e.refStore === void 0 || e.refStore === "memory", T = e.grantStore === void 0 || e.grantStore === "memory", D = (t, n) => q.gen(function* () {
+		let r = (e) => J.decodeUnknownEffect(vt)(e, { onExcessProperty: "error" }).pipe(q.mapError(() => new g({
 			provider: "storage",
 			message: "Invalid upload access policy",
 			transient: !1,
 			status: 400
 		}))), i = t.access === void 0 ? void 0 : yield* r(t.access), a = t.visibility ?? "private";
-		if (i !== void 0 && a === "public") return yield* U.fail(new p({
+		if (i !== void 0 && a === "public") return yield* q.fail(new g({
 			provider: "storage",
 			message: "An access policy requires a private upload",
 			transient: !1,
 			status: 400
 		}));
 		let o = e.uploadAccess;
-		if (i !== void 0 && typeof o != "function") return yield* U.fail(new p({
+		if (i !== void 0 && typeof o != "function") return yield* q.fail(new g({
 			provider: "storage",
 			message: "Requested upload access requires an uploadAccess authorization function on storagePlugin",
 			transient: !1,
@@ -197,46 +292,55 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			visibility: a,
 			contentType: t.contentType
 		}) : a === "private" ? o : void 0, c = s === void 0 ? void 0 : yield* r(s);
-		return a === "public" ? c !== void 0 && c.length > 0 ? yield* U.fail(new p({
+		return a === "public" ? c !== void 0 && c.length > 0 ? yield* q.fail(new g({
 			provider: "storage",
 			message: "A public upload cannot carry an access policy",
 			transient: !1,
 			status: 400
 		})) : {} : c === void 0 ? {} : { access: c };
-	}), g = { current: f ? B() : e.refStore }, v = { current: m ? we() : e.grantStore }, y = { current: void 0 }, b = {
+	}), O = { current: w ? ke() : e.refStore }, k = { current: T ? Oe() : e.grantStore }, A = { current: void 0 }, j = { current: void 0 }, M = {
 		get catalogueId() {
-			return g.current.catalogueId;
+			return O.current.catalogueId;
 		},
-		insert: (e) => g.current.insert(e),
-		getById: (e) => g.current.getById(e),
-		delete: (e) => g.current.delete(e),
-		statistics: () => g.current.statistics(),
-		listRecent: (e) => g.current.listRecent(e),
-		countByKey: (e, t) => g.current.countByKey(e, t),
-		usageByTenant: (e) => g.current.usageByTenant(e),
-		consumeUsage: (e, t, n) => g.current.consumeUsage(e, t, n),
-		releaseUsage: (e, t) => g.current.releaseUsage(e, t),
-		listByDerivedFrom: (e) => g.current.listByDerivedFrom(e),
-		listRefs: (e) => g.current.listRefs(e),
+		insert: (e) => O.current.insert(e),
+		getById: (e) => O.current.getById(e),
+		delete: (e) => O.current.delete(e),
+		statistics: () => O.current.statistics(),
+		listRecent: (e) => O.current.listRecent(e),
+		countByAddress: (e) => O.current.countByAddress(e),
+		listObjectReferences: () => O.current.listObjectReferences(),
+		hasObjectReservation: (e, t) => O.current.hasObjectReservation?.(e, t) ?? q.succeed(!1),
+		usageByTenant: (e) => O.current.usageByTenant(e),
+		consumeUsage: (e, t, n) => O.current.consumeUsage(e, t, n),
+		releaseUsage: (e, t) => O.current.releaseUsage(e, t),
+		listByDerivedFrom: (e) => O.current.listByDerivedFrom(e),
+		listRefs: (e) => O.current.listRefs(e),
 		get setVisibility() {
-			return g.current.setVisibility;
+			return O.current.setVisibility;
 		},
-		get countPublicByKey() {
-			return g.current.countPublicByKey;
+		get countPublicByAddress() {
+			return O.current.countPublicByAddress;
 		}
-	}, x = {
-		insert: (e) => v.current.insert(e),
-		delete: (e) => v.current.delete(e),
-		getById: (e) => v.current.getById(e),
-		listByRef: (e) => v.current.listByRef(e),
-		deleteByRef: (e) => v.current.deleteByRef(e)
-	}, S = {
-		httpPath: r,
-		storageInstance: t,
-		provider: i,
-		refStore: b,
-		grantStore: x,
-		bucket: a,
+	}, N = {
+		insert: (e) => k.current.insert(e),
+		delete: (e) => k.current.delete(e),
+		getById: (e) => k.current.getById(e),
+		listByRef: (e) => k.current.listByRef(e),
+		deleteByRef: (e) => k.current.deleteByRef(e)
+	}, P, ue = {
+		httpPath: i,
+		storageInstance: r,
+		provider: m,
+		refStore: M,
+		grantStore: N,
+		get bucket() {
+			return h;
+		},
+		destinations: _,
+		resolveObjectReference: (e) => P !== void 0 && e.storageInstance !== void 0 ? P({
+			storageInstance: e.storageInstance,
+			address: v(e)
+		}) : _.resolve(v(e)),
 		...e.tenantPrefix === void 0 ? {} : { tenantPrefix: e.tenantPrefix },
 		...e.attempts === void 0 ? {} : { attempts: e.attempts },
 		...e.urlExpiresInSec === void 0 ? {} : { urlExpiresInSec: e.urlExpiresInSec },
@@ -247,16 +351,28 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 		...e.videoProbe === void 0 ? {} : { videoProbe: e.videoProbe },
 		...e.transcode === void 0 ? {} : { transcode: e.transcode },
 		...e.autoTranscode === void 0 ? {} : { autoTranscode: e.autoTranscode },
-		...o ? { publicBaseUrl: o } : {},
+		...y ? { publicBaseUrl: y } : {},
 		...e.normalizeImages === void 0 ? {} : { normalizeImages: e.normalizeImages },
 		...e.quota === void 0 ? {} : { quota: e.quota },
-		objects: () => y.current
-	}, ie = Te(S), C = xe(S), T = (e) => C.uploadTicketScope().pipe(U.flatMap((t) => t === e.writeScope ? U.void : U.fail(new p({
+		objects: () => A.current
+	}, fe = ft.merge(je(ue), Ie({
+		selection: {
+			...e.alias === void 0 ? {} : { alias: e.alias },
+			...e.name === void 0 ? {} : { name: e.name }
+		},
+		bucket: h,
+		provider: m,
+		store: () => j.current,
+		...e.quota === void 0 ? {} : { quota: e.quota }
+	})), F = Te(ue), I = (e) => F.uploadTicketScope({
+		tenantId: e.tenant,
+		destination: e.destination
+	}).pipe(q.flatMap((t) => t === e.writeScope ? q.void : q.fail(new g({
 		provider: "storage",
 		message: "Upload ticket belongs to another storage destination",
 		transient: !1,
 		status: 409
-	})))), E = (e, t) => U.runPromise(T(e).pipe(U.match({
+	})))), L = (e, t) => q.runPromise(I(e).pipe(q.match({
 		onSuccess: () => null,
 		onFailure: (e) => ({
 			status: e.status ?? 503,
@@ -264,56 +380,36 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			contentType: "text/plain",
 			headers: t
 		})
-	}))), D = `${r}/`, O = (e) => U.runPromise(e.pipe(U.catch(() => U.succeed(null)))), k = (e, t) => {
-		if (!e) return "invalid";
-		let n = /^bytes=(\d*)-(\d*)$/.exec(e.trim());
-		if (!n) return "invalid";
-		let r = n[1] ?? "", i = n[2] ?? "";
-		if (r === "" && i === "") return "invalid";
-		if (r === "") {
-			let e = Number(i);
-			return !Number.isFinite(e) || e <= 0 ? "invalid" : t === 0 ? "unsatisfiable" : {
-				start: Math.max(0, t - e),
-				endInclusive: t - 1
-			};
-		}
-		let a = Number(r);
-		if (!Number.isFinite(a)) return "invalid";
-		if (t > 0 && a >= t) return "unsatisfiable";
-		let o = i === "" ? Math.max(0, t - 1) : Math.min(Number(i), Math.max(0, t - 1));
-		return !Number.isFinite(o) || o < a ? "invalid" : {
-			start: a,
-			endInclusive: o
-		};
-	}, ae = e.publicCacheSeconds === void 0 ? "public, max-age=31536000, immutable" : `public, max-age=${Math.max(0, Math.floor(e.publicCacheSeconds))}`, A = /^(?:image\/(?!svg)|video\/|audio\/|application\/pdf(?:;|$)|text\/plain(?:;|$))/i, j = (e) => ({
-		"x-content-type-options": "nosniff",
-		"content-disposition": A.test(e) ? "inline" : "attachment"
-	}), ce = oe(), M = async (e, t, n, r) => {
-		if (n) {
-			let r, i = await ce.getOrCreate(de(JSON.stringify([e.id, e.checksum]), e.contentType, n), async () => {
-				let t = await O(C.get(e.id));
-				return t ? (r = t.bytes, ue(t.bytes, e.contentType, n)) : null;
+	}))), R = `${i}/`, V = (e) => q.runPromise(e.pipe(q.catch(() => q.succeed(null)))), Ce = e.publicCacheSeconds === void 0 ? "public, max-age=31536000, immutable" : `public, max-age=${Math.max(0, Math.floor(e.publicCacheSeconds))}`, we = le(), H = async (e, t, r, i, a) => {
+		if (r) {
+			let i, a = await we.getOrCreate(he(JSON.stringify([
+				ae(v(e)),
+				e.id,
+				e.checksum
+			]), e.contentType, r), async () => {
+				let t = await V(F.get(e.id));
+				return t ? (i = t.bytes, me(t.bytes, e.contentType, r)) : null;
 			}).catch(() => null);
-			if (!i && r === void 0 && (r = (await O(C.get(e.id)))?.bytes), !i && r === void 0) return {
+			if (!a && i === void 0 && (i = (await V(F.get(e.id)))?.bytes), !a && i === void 0) return {
 				status: 404,
 				body: "not found",
 				contentType: "text/plain"
 			};
-			let a = i ? i.bytes : r, o = i ? i.contentType : e.contentType, s = await le(e.contentType, i !== null);
+			let o = a ? a.bytes : i, s = a ? a.contentType : e.contentType, c = await pe(e.contentType, a !== null);
 			return {
 				status: 200,
-				body: a,
-				contentType: o,
+				body: o,
+				contentType: s,
 				headers: {
-					...j(o),
+					...n(s),
 					"cache-control": t,
 					"accept-ranges": "none",
-					...s === null ? {} : { "x-voltro-transform": `original; reason=${s}` }
+					...c === null ? {} : { "x-voltro-transform": `original; reason=${c}` }
 				}
 			};
 		}
-		let i = r === void 0 ? "invalid" : k(r, e.size);
-		if (i === "unsatisfiable") return {
+		let o = Tt(a, {}) ? Et(i, e.size) : { _tag: "ignored" };
+		if (o._tag === "unsatisfiable") return {
 			status: 416,
 			body: "range not satisfiable",
 			contentType: "text/plain",
@@ -322,17 +418,20 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				"accept-ranges": "bytes"
 			}
 		};
-		if (i !== "invalid") {
-			let n = await O(C.getRange(e.id, i));
-			return n ? {
+		if (o._tag === "satisfiable") {
+			let r = await V(F.getRange(e.id, {
+				start: o.start,
+				endInclusive: o.end
+			}));
+			return r ? {
 				status: 206,
-				body: n.bytes,
+				body: r.bytes,
 				contentType: e.contentType,
 				headers: {
-					...j(e.contentType),
+					...n(e.contentType),
 					"cache-control": t,
 					"accept-ranges": "bytes",
-					"content-range": `bytes ${i.start}-${i.endInclusive}/${n.totalSize}`
+					"content-range": `bytes ${o.start}-${o.end}/${r.totalSize}`
 				}
 			} : {
 				status: 404,
@@ -340,69 +439,81 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				contentType: "text/plain"
 			};
 		}
-		let a = await O(C.getStream(e.id));
-		return a ? {
+		let s = await V(F.getStream(e.id));
+		return s ? {
 			status: 200,
 			contentType: e.contentType,
 			headers: {
-				...j(e.contentType),
+				...n(e.contentType),
 				"cache-control": t,
 				"accept-ranges": "bytes"
 			},
 			byteStream: {
 				contentLength: e.size,
-				stream: () => nt.toReadableStream(a.stream)
+				stream: () => pt.toReadableStream(s.stream)
 			}
 		} : {
 			status: 404,
 			body: "not found",
 			contentType: "text/plain"
 		};
-	}, fe = async (e) => {
-		let t = e.path.startsWith(D) ? e.path.slice(D.length).split("/")[0] ?? "" : "";
+	}, Ae = async (e) => {
+		let t = e.path.startsWith(R) ? e.path.slice(R.length).split("/")[0] ?? "" : "";
 		if (!t) return {
 			status: 404,
 			body: "not found",
 			contentType: "text/plain"
 		};
-		let n = await O(C.head(t));
+		let n = await V(F.head(t));
 		if (!n) return {
 			status: 404,
 			body: "not found",
 			contentType: "text/plain"
 		};
-		let a = se(e.query), o = e.headers.range, s = n.derivedFrom == null ? null : await O(C.head(n.derivedFrom));
+		let r = de(e.query), a = e.headers.range, o = e.headers["if-range"], s = n.derivedFrom == null ? null : await V(F.head(n.derivedFrom));
 		if (n.derivedFrom != null && s === null) return {
 			status: 404,
 			body: "not found",
 			contentType: "text/plain"
 		};
 		if (n.visibility === "public" && (s === null || s.visibility === "public")) {
-			let e = i.publicUrl?.(n.key) ?? null;
-			return e && !a ? {
+			let e = await V(_.resolve(v(n)));
+			if (!e) return {
+				status: 503,
+				body: "storage destination unavailable",
+				contentType: "text/plain"
+			};
+			let t = e.publicUrl?.(n.key) ?? null;
+			return t && !r ? {
 				status: 302,
 				headers: {
-					location: e,
+					location: t,
 					"cache-control": "public, max-age=300"
 				}
-			} : M(n, ae, a, o);
+			} : H(n, Ce, r, a, o);
 		}
 		let c = !1, l = e.query ? new URLSearchParams(e.query).get("t") : null;
 		if (l) {
-			let e = ye(l);
-			c = !!e && (e.refId === t || s !== null && e.refId === s.id) && e.audience === r;
+			let e = be(l);
+			c = !!e && (e.refId === t || s !== null && e.refId === s.id) && e.audience === i;
 		}
 		if (!c) {
-			let t = ot(e.headers.cookie, lt), r = t ? ct(t, st()) : null;
-			r && (c = await O(C.checkAccess(n, r)) === !0);
+			let t = St(e.headers.cookie, Dt), r = t ? wt(t, Ct())?.subject ?? null : null;
+			r && (c = await V(F.checkAccess(n, r)) === !0);
 		}
 		if (!c) return {
 			status: 403,
 			body: "forbidden",
 			contentType: "text/plain"
 		};
-		if (i.presigns && !a) {
-			let e = await O(i.getUrl(n.key, 300));
+		let u = await V(_.resolve(v(n)));
+		if (!u) return {
+			status: 503,
+			body: "storage destination unavailable",
+			contentType: "text/plain"
+		};
+		if (u.presigns && !r) {
+			let e = await V(u.getUrl(n.key, 300));
 			if (e && /^https?:/.test(e)) return {
 				status: 302,
 				headers: {
@@ -411,12 +522,12 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				}
 			};
 		}
-		return M(n, "private, no-store", a, o);
-	}, pe = {
+		return H(n, "private, no-store", r, a, o);
+	}, Ne = {
 		method: "GET",
-		path: r,
+		path: i,
 		handle: async (e) => {
-			let t = await fe(e), n = J(e.headers.origin, s);
+			let t = await Ae(e), n = Pt(e.headers.origin, b);
 			return Object.keys(n).length === 0 ? t : {
 				...t,
 				headers: {
@@ -425,47 +536,48 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				}
 			};
 		}
-	}, he = {
+	}, Pe = {
 		method: "*",
-		path: `${r}/upload`,
+		path: `${i}/upload`,
 		originGuard: "exempt",
 		handle: async (e) => {
-			let n = J(e.headers.origin, s);
+			let t = Pt(e.headers.origin, b);
 			if (e.method === "OPTIONS") return {
 				status: 204,
-				headers: n
+				headers: t
 			};
 			if (e.method !== "POST") return {
 				status: 405,
 				body: "method not allowed",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
-			let r = e.query ? new URLSearchParams(e.query).get("ticket") : null, i = r ? F(r) : null;
-			if (!i || i.instance !== t) return {
+			let n = e.query ? new URLSearchParams(e.query).get("ticket") : null, i = n ? Se(n) : null;
+			if (!i || i.instance !== r) return {
 				status: 401,
 				body: "invalid or expired upload ticket",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
-			let a = await E(i, n);
+			let a = await L(i, t);
 			if (a) return a;
 			if (e.rawBody.length === 0) return {
 				status: 400,
 				body: "empty body",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
 			if (i.max && e.rawBody.length > i.max) return {
 				status: 413,
 				body: "payload too large",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
-			let o = await U.runPromise(C.put({
+			let o = await q.runPromise(F.put({
 				bytes: e.rawBody,
 				contentType: i.ct,
 				tenantId: i.tenant,
+				destination: i.destination,
 				ownerId: i.sub,
 				visibility: i.vis,
 				...i.access === void 0 ? {} : { access: i.access },
@@ -475,21 +587,21 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				...i.tags === void 0 ? {} : { tags: i.tags },
 				...i.alt === void 0 ? {} : { alt: i.alt },
 				...i.caption === void 0 ? {} : { caption: i.caption }
-			}).pipe(U.flatMap((e) => C.getUrl(e.id).pipe(U.map((t) => ({
+			}).pipe(q.flatMap((e) => F.getUrl(e.id).pipe(q.map((t) => ({
 				kind: "ok",
 				ref: e,
 				url: t
-			})))), U.catchTags({
-				StorageRejected: (e) => U.succeed({
+			})))), q.catchTags({
+				StorageRejected: (e) => q.succeed({
 					kind: "rejected",
-					status: yt(e),
+					status: Ht(e),
 					detail: e.detail
 				}),
-				StorageScanRejected: (e) => U.succeed({
+				StorageScanRejected: (e) => q.succeed({
 					kind: "scan",
 					threat: e.threat
 				}),
-				StorageError: (e) => U.succeed({
+				StorageError: (e) => q.succeed({
 					kind: "error",
 					message: e.message,
 					status: e.status ?? 500
@@ -504,48 +616,49 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					size: o.ref.size
 				}),
 				contentType: "application/json",
-				headers: n
+				headers: t
 			} : o.kind === "rejected" ? {
 				status: o.status,
 				body: o.detail,
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			} : o.kind === "scan" ? {
 				status: 422,
 				body: `rejected: ${o.threat}`,
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			} : {
 				status: o.status,
 				body: o.message,
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
 		}
-	}, I = {
+	}, Fe = {
 		method: "*",
-		path: `${r}/upload/resumable`,
+		path: `${i}/upload/resumable`,
 		originGuard: "exempt",
 		handle: async (e) => {
-			let n = J(e.headers.origin, s);
+			let t = Pt(e.headers.origin, b);
 			if (e.method === "OPTIONS") return {
 				status: 204,
-				headers: n
+				headers: t
 			};
-			let r = new URLSearchParams(e.query || ""), i = be(r.get("token") ?? "");
-			if (!i || i.instance !== t) return {
+			let n = new URLSearchParams(e.query || ""), i = xe(n.get("token") ?? "");
+			if (!i || i.instance !== r) return {
 				status: 401,
 				body: "invalid or expired resumable token",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
-			let a = await E(i, n);
+			let a = await L(i, t);
 			if (a) return a;
 			if (e.method === "GET" || e.method === "HEAD") {
-				let e = await U.runPromise(C.resumableStatus({
+				let e = await q.runPromise(F.resumableStatus({
 					uploadId: i.id,
-					tenantId: i.tenant
-				}).pipe(U.match({
+					tenantId: i.tenant,
+					destination: i.destination
+				}).pipe(q.match({
 					onFailure: (e) => ({ error: e.message }),
 					onSuccess: (e) => e
 				})));
@@ -553,13 +666,13 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					status: 500,
 					body: e.error,
 					contentType: "text/plain",
-					headers: n
+					headers: t
 				} : {
 					status: 200,
 					body: JSON.stringify(e),
 					contentType: "application/json",
 					headers: {
-						...n,
+						...t,
 						"upload-offset": String(e.offset)
 					}
 				};
@@ -568,28 +681,30 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				status: 405,
 				body: "method not allowed",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
-			let o = Number(r.get("index"));
+			let o = Number(n.get("index"));
 			if (!Number.isInteger(o) || o < 0) return {
 				status: 400,
 				body: "missing/invalid chunk index",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
 			if (e.rawBody.length === 0) return {
 				status: 400,
 				body: "empty chunk",
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
-			let c = r.get("final") === "1", l = await U.runPromise(C.putResumableChunk({
+			let s = n.get("final") === "1", c = await q.runPromise(F.putResumableChunk({
 				uploadId: i.id,
 				tenantId: i.tenant,
+				destination: i.destination,
 				index: o,
 				bytes: e.rawBody
-			}).pipe(U.flatMap(() => c ? C.finalizeResumable({
+			}).pipe(q.flatMap(() => s ? F.finalizeResumable({
 				uploadId: i.id,
+				destination: i.destination,
 				count: o + 1,
 				contentType: i.ct,
 				tenantId: i.tenant,
@@ -600,111 +715,120 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 				...i.tags === void 0 ? {} : { tags: i.tags },
 				...i.alt === void 0 ? {} : { alt: i.alt },
 				...i.caption === void 0 ? {} : { caption: i.caption }
-			}).pipe(U.flatMap((e) => C.getUrl(e.id).pipe(U.map((t) => ({
+			}).pipe(q.flatMap((e) => F.getUrl(e.id).pipe(q.map((t) => ({
 				kind: "done",
 				ref: e,
 				url: t
-			}))))) : U.succeed({ kind: "chunk" })), U.catchTags({
-				StorageRejected: (e) => U.succeed({
+			}))))) : q.succeed({ kind: "chunk" })), q.catchTags({
+				StorageRejected: (e) => q.succeed({
 					kind: "rejected",
-					status: yt(e),
+					status: Ht(e),
 					detail: e.detail
 				}),
-				StorageScanRejected: (e) => U.succeed({
+				StorageScanRejected: (e) => q.succeed({
 					kind: "scan",
 					threat: e.threat
 				}),
-				StorageError: (e) => U.succeed({
+				StorageError: (e) => q.succeed({
 					kind: "error",
 					message: e.message,
 					status: e.status ?? 500
 				})
 			})));
-			return l.kind === "chunk" ? {
+			return c.kind === "chunk" ? {
 				status: 204,
 				headers: {
-					...n,
+					...t,
 					"upload-offset": String(o + 1)
 				}
-			} : l.kind === "done" ? {
+			} : c.kind === "done" ? {
 				status: 201,
 				body: JSON.stringify({
-					id: l.ref.id,
-					url: l.url,
-					contentType: l.ref.contentType,
-					size: l.ref.size
+					id: c.ref.id,
+					url: c.url,
+					contentType: c.ref.contentType,
+					size: c.ref.size
 				}),
 				contentType: "application/json",
-				headers: n
-			} : l.kind === "rejected" ? {
-				status: l.status,
-				body: l.detail,
+				headers: t
+			} : c.kind === "rejected" ? {
+				status: c.status,
+				body: c.detail,
 				contentType: "text/plain",
-				headers: n
-			} : l.kind === "scan" ? {
+				headers: t
+			} : c.kind === "scan" ? {
 				status: 422,
-				body: `rejected: ${l.threat}`,
+				body: `rejected: ${c.threat}`,
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			} : {
-				status: l.status,
-				body: l.message,
+				status: c.status,
+				body: c.message,
 				contentType: "text/plain",
-				headers: n
+				headers: t
 			};
 		}
-	}, L = (e) => ({
+	}, U = (e) => ({
 		kind: "json",
 		data: e
-	}), R = (e, t) => ({
+	}), W = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), z = (e, t) => {
+	}), G = (e, t) => {
 		try {
 			return new URL(e, "http://localhost").searchParams.get(t);
 		} catch {
 			return null;
 		}
-	}, V = U.gen(function* () {
-		return {
-			catalogueId: yield* b.catalogueId,
-			objectNamespace: yield* i.objectNamespace,
-			storageInstance: t
+	}, K = q.gen(function* () {
+		let e = yield* M.catalogueId;
+		return p ? {
+			catalogueId: e,
+			storageInstance: r,
+			tenantScoped: !0
+		} : {
+			catalogueId: e,
+			objectNamespace: yield* m.objectNamespace,
+			storageInstance: r
 		};
-	}), De = [
+	}), et = [
 		{
 			method: "POST",
 			path: "/upload-ticket",
 			description: "Authorize a binary upload with explicit tenant and owner attribution",
-			handler: (n) => U.gen(function* () {
-				let i = W.String.pipe(W.check(W.makeFilter((e) => e.trim().length > 0))), a = yield* W.decodeUnknownEffect(W.fromJsonString(W.Struct({
-					operationId: W.optional(i.pipe(W.check(W.isMaxLength(200)))),
-					tenantId: W.NullOr(i),
-					ownerId: W.NullOr(i),
-					key: i.pipe(W.check(W.isMaxLength(1024))),
-					contentType: i.pipe(W.check(W.isMaxLength(255)), W.check(W.makeFilter((e) => !/[\r\n]/.test(e)))),
-					size: W.Number.pipe(W.check(W.isInt()), W.check(W.isGreaterThan(0)), W.check(W.makeFilter(Number.isSafeInteger))),
-					visibility: W.optional(W.Literals(["public", "private"]))
-				})))(n.body).pipe(U.mapError(() => new p({
+			handler: (t) => q.gen(function* () {
+				let n = J.String.pipe(J.check(J.makeFilter((e) => e.trim().length > 0))), a = yield* J.decodeUnknownEffect(J.fromJsonString(J.Struct({
+					operationId: J.optional(n.pipe(J.check(J.isMaxLength(200)))),
+					tenantId: J.NullOr(n),
+					ownerId: J.NullOr(n),
+					key: n.pipe(J.check(J.isMaxLength(1024))),
+					contentType: n.pipe(J.check(J.isMaxLength(255)), J.check(J.makeFilter((e) => !/[\r\n]/.test(e)))),
+					size: J.Number.pipe(J.check(J.isInt()), J.check(J.isGreaterThan(0)), J.check(J.makeFilter(Number.isSafeInteger))),
+					visibility: J.optional(J.Literals(["public", "private"]))
+				})))(t.body).pipe(q.mapError(() => new g({
 					provider: "inspect",
 					message: "Provide explicit tenantId and ownerId (or null), key, contentType and a positive file size",
 					transient: !1,
 					status: 400
 				})));
-				if (a.operationId !== void 0 && y.current === void 0) return R(409, "Durable uploads require a bound operation store with default reference and grant stores");
-				if (c !== void 0 && a.size > c) return R(413, "File exceeds the configured upload limit");
-				let o = a.operationId ?? (y.current === void 0 ? void 0 : H()), s = o === void 0 ? void 0 : "inspect-upload:" + tt("sha256").update(JSON.stringify([t, o])).digest("hex"), l = a.visibility !== "public" && Array.isArray(e.uploadAccess) ? yield* W.decodeUnknownEffect(it)(e.uploadAccess, { onExcessProperty: "error" }).pipe(U.mapError(() => new p({
+				if (a.operationId !== void 0 && A.current === void 0) return W(409, "Durable uploads require a bound operation store with default reference and grant stores");
+				if (x !== void 0 && a.size > x) return W(413, "File exceeds the configured upload limit");
+				let o = yield* _.select(a.tenantId), s = a.operationId ?? (A.current === void 0 ? void 0 : ht()), c = s === void 0 ? void 0 : "inspect-upload:" + mt("sha256").update(JSON.stringify([r, s])).digest("hex"), l = a.visibility !== "public" && Array.isArray(e.uploadAccess) ? yield* J.decodeUnknownEffect(vt)(e.uploadAccess, { onExcessProperty: "error" }).pipe(q.mapError(() => new g({
 					provider: "storage",
 					message: "Invalid upload access policy",
 					transient: !1,
 					status: 400
-				}))) : void 0, u = yield* C.uploadTicketScope(), d = N({
+				}))) : void 0, u = yield* F.uploadTicketScope({
+					tenantId: a.tenantId,
+					destination: o.destination
+				}), d = z({
 					writeScope: u,
-					instance: t,
-					issuerReplicaId: rt().replicaId,
+					instance: r,
+					destination: o.destination,
+					issuerReplicaId: _t().replicaId,
 					...l === void 0 ? {} : { access: l },
-					...s === void 0 ? {} : { operationId: s },
+					...c === void 0 ? {} : { operationId: c },
 					sub: a.ownerId,
 					tenant: a.tenantId,
 					ct: a.contentType,
@@ -712,33 +836,33 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					vis: a.visibility ?? "private",
 					max: a.size
 				}, 300);
-				return L({
-					uploadPath: `${r}/upload?ticket=${encodeURIComponent(d)}`,
+				return U({
+					uploadPath: `${i}/upload?ticket=${encodeURIComponent(d)}`,
 					expiresInSec: 300,
 					maxBytes: a.size,
-					...o === void 0 ? {} : { operationId: o }
+					...s === void 0 ? {} : { operationId: s }
 				});
-			}).pipe(U.catch((e) => U.succeed(R(e.status ?? 500, e.message))))
+			}).pipe(q.catch((e) => q.succeed(W(e.status ?? 500, e.message))))
 		},
 		{
 			method: "GET",
 			path: "/download",
 			description: "Stream a stored file as an attachment for authorized inspect readers",
-			handler: (e) => U.gen(function* () {
-				let t = z(e.url, "refId");
-				if (!t?.trim()) return R(400, "A non-empty refId is required");
-				let { ref: n, stream: r } = yield* C.getStream(t), i = n.key.split("/").pop() || n.id, a = encodeURIComponent(i).replace(/[!'()*]/g, (e) => `%${e.charCodeAt(0).toString(16).toUpperCase()}`);
+			handler: (e) => q.gen(function* () {
+				let t = G(e.url, "refId");
+				if (!t?.trim()) return W(400, "A non-empty refId is required");
+				let { ref: n, stream: r } = yield* F.getStream(t), i = n.key.split("/").pop() || n.id, a = encodeURIComponent(i).replace(/[!'()*]/g, (e) => `%${e.charCodeAt(0).toString(16).toUpperCase()}`);
 				return {
 					kind: "bytes",
 					contentType: n.contentType,
 					byteStream: {
-						stream: () => nt.toReadableStream(r),
+						stream: () => pt.toReadableStream(r),
 						contentLength: n.size,
 						contentDisposition: `attachment; filename="download"; filename*=UTF-8''${a}`
 					},
 					headers: { "cache-control": "no-store" }
 				};
-			}).pipe(U.catch((e) => U.succeed(R(e.status ?? 500, e.message))))
+			}).pipe(q.catch((e) => q.succeed(W(e.status ?? 500, e.message))))
 		},
 		{
 			method: "GET",
@@ -746,8 +870,8 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			scope: "process",
 			description: "Searchable storage refs, newest first, paginated",
 			handler: (e) => {
-				let t = Number(z(e.url, "offset") ?? 0), n = Number.isSafeInteger(t) && t >= 0 ? t : 0, r = (z(e.url, "search") ?? "").trim().slice(0, 200);
-				return b.listRefs({
+				let t = Number(G(e.url, "offset") ?? 0), n = Number.isSafeInteger(t) && t >= 0 ? t : 0, r = (G(e.url, "search") ?? "").trim().slice(0, 200);
+				return M.listRefs({
 					tenantId: void 0,
 					ownerId: void 0,
 					folder: void 0,
@@ -756,15 +880,15 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					search: r,
 					limit: 51,
 					offset: n
-				}).pipe(U.flatMap((e) => V.pipe(U.map((t) => L({
+				}).pipe(q.flatMap((e) => K.pipe(q.map((t) => U({
 					source: t,
-					refs: e.slice(0, 50).map(ht),
+					refs: e.slice(0, 50).map(Ft),
 					page: {
 						search: r,
 						offset: n,
 						nextOffset: e.length > 50 ? n + 50 : null
 					}
-				})))), U.catch((e) => U.succeed(R(500, e.message))));
+				})))), q.catch((e) => q.succeed(W(500, e.message))));
 			}
 		},
 		{
@@ -772,12 +896,12 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			path: "/stats",
 			scope: "process",
 			description: "Object count + total bytes per tenant + visibility split",
-			handler: () => b.statistics().pipe(U.flatMap((e) => V.pipe(U.map((t) => L({
+			handler: () => M.statistics().pipe(q.flatMap((e) => K.pipe(q.map((t) => U({
 				source: t,
-				provider: i.name,
-				bucket: a,
+				provider: p ? "tenant-scoped" : m.name,
+				bucket: h,
 				...e
-			})))), U.catch((e) => U.succeed(R(500, e.message))))
+			})))), q.catch((e) => q.succeed(W(500, e.message))))
 		},
 		{
 			method: "GET",
@@ -785,196 +909,202 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			scope: "process",
 			description: "Grants for a ref (?refId=…)",
 			handler: (e) => {
-				let t = z(e.url, "refId");
-				return t ? x.listByRef(t).pipe(U.map((e) => L({ grants: e.map(Q) })), U.catch((e) => U.succeed(R(500, e.message)))) : U.succeed(R(400, "refId query param required"));
+				let t = G(e.url, "refId");
+				return t ? N.listByRef(t).pipe(q.map((e) => U({ grants: e.map(Bt) })), q.catch((e) => q.succeed(W(500, e.message)))) : q.succeed(W(400, "refId query param required"));
 			}
 		},
 		{
 			method: "POST",
 			path: "/share",
 			description: "Grant a principal access to a ref",
-			handler: (e) => U.gen(function* () {
-				let t = yield* W.decodeUnknownEffect(W.fromJsonString(W.Struct({
-					refId: W.String.pipe(W.check(W.makeFilter((e) => e.trim().length > 0))),
-					principalType: W.Literals([
+			handler: (e) => q.gen(function* () {
+				let t = yield* J.decodeUnknownEffect(J.fromJsonString(J.Struct({
+					refId: J.String.pipe(J.check(J.makeFilter((e) => e.trim().length > 0))),
+					principalType: J.Literals([
 						"user",
 						"group",
 						"apiKey"
 					]),
-					principalId: W.String.pipe(W.check(W.makeFilter((e) => e.trim().length > 0))),
-					permission: W.optional(W.Literals(["read", "write"])),
-					expiresInDays: W.optional(W.Number.pipe(W.check(W.isFinite()), W.check(W.isGreaterThan(0))))
-				})))(e.body).pipe(U.mapError(() => new p({
+					principalId: J.String.pipe(J.check(J.makeFilter((e) => e.trim().length > 0))),
+					permission: J.optional(J.Literals(["read", "write"])),
+					expiresInDays: J.optional(J.Number.pipe(J.check(J.isFinite()), J.check(J.isGreaterThan(0))))
+				})))(e.body).pipe(q.mapError(() => new g({
 					provider: "inspect",
 					message: "Invalid share input: provide refId, principalType, principalId, read/write permission and a positive finite expiry if set",
 					transient: !1,
 					status: 400
 				}))), n = t.expiresInDays === void 0 ? null : new Date(Date.now() + t.expiresInDays * 864e5);
-				if (n !== null && !Number.isFinite(n.getTime())) return R(400, "Expiry exceeds the supported date range");
-				let r = yield* C.grant({
+				if (n !== null && !Number.isFinite(n.getTime())) return W(400, "Expiry exceeds the supported date range");
+				let r = yield* F.grant({
 					refId: t.refId,
 					principalType: t.principalType,
 					principalId: t.principalId,
 					...t.permission ? { permission: t.permission } : {},
 					expiresAt: n
 				});
-				return L({ grant: Q(r) });
-			}).pipe(U.catch((e) => U.succeed(R(e.status ?? 500, e.message ?? "share failed"))))
+				return U({ grant: Bt(r) });
+			}).pipe(q.catch((e) => q.succeed(W(e.status ?? 500, e.message ?? "share failed"))))
 		},
 		{
 			method: "POST",
 			path: "/delete",
 			description: "Delete an object reference and its grants; release unreferenced bytes",
-			handler: (e) => U.gen(function* () {
-				let t = yield* W.decodeUnknownEffect(W.fromJsonString(W.Struct({ refId: W.String.pipe(W.check(W.makeFilter((e) => e.trim().length > 0))) })))(e.body).pipe(U.mapError(() => new p({
+			handler: (e) => q.gen(function* () {
+				let t = yield* J.decodeUnknownEffect(J.fromJsonString(J.Struct({ refId: J.String.pipe(J.check(J.makeFilter((e) => e.trim().length > 0))) })))(e.body).pipe(q.mapError(() => new g({
 					provider: "inspect",
 					message: "A non-empty refId is required",
 					transient: !1,
 					status: 400
 				})));
-				return yield* C.delete(t.refId), L({ ok: !0 });
-			}).pipe(U.catch((e) => U.succeed(R(e.status ?? 500, e.message))))
+				return yield* F.delete(t.refId), U({ ok: !0 });
+			}).pipe(q.catch((e) => q.succeed(W(e.status ?? 500, e.message))))
 		},
 		{
 			method: "POST",
 			path: "/revoke",
 			description: "Revoke a grant by id",
-			handler: (e) => U.gen(function* () {
-				let t = yield* W.decodeUnknownEffect(W.fromJsonString(W.Struct({ grantId: W.String.pipe(W.check(W.makeFilter((e) => e.trim().length > 0))) })))(e.body).pipe(U.mapError(() => new p({
+			handler: (e) => q.gen(function* () {
+				let t = yield* J.decodeUnknownEffect(J.fromJsonString(J.Struct({ grantId: J.String.pipe(J.check(J.makeFilter((e) => e.trim().length > 0))) })))(e.body).pipe(q.mapError(() => new g({
 					provider: "inspect",
 					message: "A non-empty grantId is required",
 					transient: !1,
 					status: 400
 				})));
-				return yield* C.revoke(t.grantId), L({ ok: !0 });
-			}).pipe(U.catch((e) => U.succeed(R(e.status ?? 500, e.message ?? "revoke failed"))))
+				return yield* F.revoke(t.grantId), U({ ok: !0 });
+			}).pipe(q.catch((e) => q.succeed(W(e.status ?? 500, e.message ?? "revoke failed"))))
 		}
-	], Ge = [
+	], tt = [
 		{
-			...ze,
+			...Je,
 			execute: (e, t) => {
 				let n = e;
-				return C.mintUrl(n.id, t.request.subject, {
+				return F.mintUrl(n.id, t.request.subject, {
 					...n.password === void 0 ? {} : { password: n.password },
 					...n.expiresInSec === void 0 ? {} : { expiresInSec: n.expiresInSec }
-				}).pipe(U.map((e) => ({ url: e })));
+				}).pipe(q.map((e) => ({ url: e })));
 			}
 		},
 		{
-			...Re,
+			...qe,
 			execute: (e, t) => {
 				let n = e;
-				return C.mintUploadUrl({
+				return F.mintUploadUrl({
 					key: n.key,
 					contentType: n.contentType,
 					tenantId: t.request.subject.tenantId,
 					...n.expiresInSec === void 0 ? {} : { expiresInSec: n.expiresInSec }
-				}).pipe(U.map((e) => ({ url: e })));
+				}).pipe(q.map((e) => ({ url: e })));
 			}
 		},
 		{
-			...Le,
-			execute: (e, n) => {
-				let i = e;
-				return Z(n, l).pipe(U.flatMap((e) => h(i, n.request.subject).pipe(U.map((t) => ({
+			...Ke,
+			execute: (e, t) => {
+				let n = e;
+				return Z(t, S).pipe(q.flatMap((e) => D(n, t.request.subject).pipe(q.map((t) => ({
 					writer: e,
 					policy: t
-				})))), U.flatMap((e) => i.operationId !== void 0 && y.current === void 0 ? U.fail(new p({
+				})))), q.flatMap((e) => n.operationId !== void 0 && A.current === void 0 ? q.fail(new g({
 					provider: "storage",
 					message: "Durable uploads require a bound operation store with default reference and grant stores",
 					transient: !1,
 					status: 409
-				})) : U.succeed(e)), U.flatMap(({ writer: e, policy: n }) => C.uploadTicketScope().pipe(U.map((a) => {
-					let s = i.expiresInSec ?? 900, l = i.operationId ?? (y.current === void 0 ? void 0 : H()), u = l === void 0 ? void 0 : "client-upload:" + tt("sha256").update(JSON.stringify([
-						t,
+				})) : q.succeed(e)), q.flatMap(({ writer: e, policy: t }) => _.select(e.tenantId).pipe(q.flatMap((a) => F.uploadTicketScope({
+					tenantId: e.tenantId,
+					destination: a.destination
+				}).pipe(q.map((o) => {
+					let s = n.expiresInSec ?? 900, c = n.operationId ?? (A.current === void 0 ? void 0 : ht()), l = c === void 0 ? void 0 : "client-upload:" + mt("sha256").update(JSON.stringify([
+						r,
 						e.tenantId,
 						e.id,
-						l
-					])).digest("hex"), d = N({
-						writeScope: a,
-						instance: t,
-						...u === void 0 ? {} : { operationId: u },
+						c
+					])).digest("hex"), u = z({
+						writeScope: o,
+						instance: r,
+						destination: a.destination,
+						...l === void 0 ? {} : { operationId: l },
 						sub: e.id,
 						tenant: e.tenantId,
-						ct: i.contentType,
-						vis: i.visibility ?? "private",
-						...n,
-						...i.key === void 0 ? {} : { key: i.key },
-						...i.folder === void 0 ? {} : { folder: i.folder },
-						...i.tags === void 0 ? {} : { tags: i.tags },
-						...i.alt === void 0 ? {} : { alt: i.alt },
-						...i.caption === void 0 ? {} : { caption: i.caption },
-						...c === void 0 ? {} : { max: c }
+						ct: n.contentType,
+						vis: n.visibility ?? "private",
+						...t,
+						...n.key === void 0 ? {} : { key: n.key },
+						...n.folder === void 0 ? {} : { folder: n.folder },
+						...n.tags === void 0 ? {} : { tags: n.tags },
+						...n.alt === void 0 ? {} : { alt: n.alt },
+						...n.caption === void 0 ? {} : { caption: n.caption },
+						...x === void 0 ? {} : { max: x }
 					}, s);
 					return {
-						uploadUrl: `${o ? o.replace(/\/+$/, "") : ""}${r}/upload?ticket=${encodeURIComponent(d)}`,
+						uploadUrl: `${y ? y.replace(/\/+$/, "") : ""}${i}/upload?ticket=${encodeURIComponent(u)}`,
 						expiresInSec: s,
-						...l === void 0 ? {} : { operationId: l }
+						...c === void 0 ? {} : { operationId: c }
 					};
-				}))));
+				}))))));
 			}
 		},
 		{
-			...Ie,
-			execute: (e, n) => {
-				let r = e;
-				return Z(n, l).pipe(U.flatMap((e) => h(r, n.request.subject).pipe(U.map((t) => ({
+			...Ge,
+			execute: (e, t) => {
+				let n = e;
+				return Z(t, S).pipe(q.flatMap((e) => D(n, t.request.subject).pipe(q.map((t) => ({
 					writer: e,
 					policy: t
-				})))), U.flatMap(({ writer: e, policy: n }) => C.uploadTicketScope().pipe(U.flatMap((i) => C.mintPresignedUpload({
-					contentType: r.contentType,
+				})))), q.flatMap(({ writer: e, policy: t }) => F.mintPresignedUpload({
+					contentType: n.contentType,
 					tenantId: e.tenantId,
-					...r.expiresInSec === void 0 ? {} : { expiresInSec: r.expiresInSec }
-				}).pipe(U.map((a) => {
-					let o = me({
-						writeScope: i,
-						instance: t,
-						key: a.key,
+					...n.expiresInSec === void 0 ? {} : { expiresInSec: n.expiresInSec }
+				}).pipe(q.map((i) => {
+					let a = ge({
+						writeScope: i.writeScope,
+						instance: r,
+						destination: i.destination,
+						key: i.key,
 						sub: e.id,
 						tenant: e.tenantId,
-						ct: r.contentType,
-						vis: r.visibility ?? "private",
-						...n,
-						...r.folder === void 0 ? {} : { folder: r.folder },
-						...r.tags === void 0 ? {} : { tags: r.tags },
-						...r.alt === void 0 ? {} : { alt: r.alt },
-						...r.caption === void 0 ? {} : { caption: r.caption },
-						...c === void 0 ? {} : { max: c }
-					}, a.expiresInSec);
+						ct: n.contentType,
+						vis: n.visibility ?? "private",
+						...t,
+						...n.folder === void 0 ? {} : { folder: n.folder },
+						...n.tags === void 0 ? {} : { tags: n.tags },
+						...n.alt === void 0 ? {} : { alt: n.alt },
+						...n.caption === void 0 ? {} : { caption: n.caption },
+						...x === void 0 ? {} : { max: x }
+					}, i.expiresInSec);
 					return {
-						uploadUrl: a.uploadUrl,
-						finalizeToken: o,
-						expiresInSec: a.expiresInSec
+						uploadUrl: i.uploadUrl,
+						finalizeToken: a,
+						expiresInSec: i.expiresInSec
 					};
-				}))))));
+				}))));
 			}
 		},
 		{
-			...Me,
-			execute: (e, n) => {
-				let r = ve(e.finalizeToken);
-				return !r || r.instance !== t ? U.fail(new p({
+			...Ve,
+			execute: (e, t) => {
+				let n = ye(e.finalizeToken);
+				return !n || n.instance !== r ? q.fail(new g({
 					provider: "storage",
 					message: "invalid or expired finalize token",
 					transient: !1,
 					status: 401
-				})) : _t(r.sub, n.request.subject.id) ? U.fail(new p({
+				})) : zt(n.sub, t.request.subject.id) ? q.fail(new g({
 					provider: "storage",
 					message: "finalize token belongs to another subject",
 					transient: !1,
 					status: 403
-				})) : T(r).pipe(U.flatMap(() => C.finalizeUpload({
-					key: r.key,
-					contentType: r.ct,
-					tenantId: r.tenant,
-					ownerId: r.sub,
-					visibility: r.vis,
-					...r.access === void 0 ? {} : { access: r.access },
-					...r.folder === void 0 ? {} : { folder: r.folder },
-					...r.tags === void 0 ? {} : { tags: r.tags },
-					...r.alt === void 0 ? {} : { alt: r.alt },
-					...r.caption === void 0 ? {} : { caption: r.caption }
-				}).pipe(U.flatMap((e) => C.getUrl(e.id).pipe(U.map((t) => ({
+				})) : I(n).pipe(q.flatMap(() => F.finalizeUpload({
+					destination: n.destination,
+					key: n.key,
+					contentType: n.ct,
+					tenantId: n.tenant,
+					ownerId: n.sub,
+					visibility: n.vis,
+					...n.access === void 0 ? {} : { access: n.access },
+					...n.folder === void 0 ? {} : { folder: n.folder },
+					...n.tags === void 0 ? {} : { tags: n.tags },
+					...n.alt === void 0 ? {} : { alt: n.alt },
+					...n.caption === void 0 ? {} : { caption: n.caption }
+				}).pipe(q.flatMap((e) => F.getUrl(e.id).pipe(q.map((t) => ({
 					id: e.id,
 					url: t,
 					contentType: e.contentType,
@@ -985,112 +1115,120 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			}
 		},
 		{
-			...Ae,
-			execute: (e, n) => {
-				let i = e;
-				return Z(n, l).pipe(U.flatMap((e) => h(i, n.request.subject).pipe(U.map((t) => ({
+			...ze,
+			execute: (e, t) => {
+				let n = e;
+				return Z(t, S).pipe(q.flatMap((e) => D(n, t.request.subject).pipe(q.map((t) => ({
 					writer: e,
 					policy: t
-				})))), U.flatMap(({ writer: e, policy: n }) => C.uploadTicketScope().pipe(U.map((a) => {
-					let s = i.expiresInSec ?? d, l = H(), f = i.chunkSize && i.chunkSize > 0 ? i.chunkSize : u;
+				})))), q.flatMap(({ writer: e, policy: t }) => _.select(e.tenantId).pipe(q.flatMap((a) => F.uploadTicketScope({
+					tenantId: e.tenantId,
+					destination: a.destination
+				}).pipe(q.map((o) => {
+					let s = n.expiresInSec ?? ce, c = ht(), l = n.chunkSize && n.chunkSize > 0 ? n.chunkSize : C;
 					return {
-						uploadId: l,
-						resumableToken: _e({
-							writeScope: a,
-							instance: t,
-							id: l,
+						uploadId: c,
+						resumableToken: ve({
+							writeScope: o,
+							instance: r,
+							destination: a.destination,
+							id: c,
 							sub: e.id,
 							tenant: e.tenantId,
-							ct: i.contentType,
-							vis: i.visibility ?? "private",
-							...n,
-							size: i.size,
-							...i.folder === void 0 ? {} : { folder: i.folder },
-							...i.tags === void 0 ? {} : { tags: i.tags },
-							...i.alt === void 0 ? {} : { alt: i.alt },
-							...i.caption === void 0 ? {} : { caption: i.caption },
-							...c === void 0 ? {} : { max: c }
+							ct: n.contentType,
+							vis: n.visibility ?? "private",
+							...t,
+							size: n.size,
+							...n.folder === void 0 ? {} : { folder: n.folder },
+							...n.tags === void 0 ? {} : { tags: n.tags },
+							...n.alt === void 0 ? {} : { alt: n.alt },
+							...n.caption === void 0 ? {} : { caption: n.caption },
+							...x === void 0 ? {} : { max: x }
 						}, s),
-						uploadUrl: `${o ? o.replace(/\/+$/, "") : ""}${r}/upload/resumable`,
-						chunkSize: f,
+						uploadUrl: `${y ? y.replace(/\/+$/, "") : ""}${i}/upload/resumable`,
+						chunkSize: l,
 						expiresInSec: s
 					};
-				}))));
+				}))))));
 			}
 		},
 		{
-			...ke,
-			execute: (e, n) => {
-				let r = e, i = r.expiresInSec ?? d;
-				return Z(n, l).pipe(U.flatMap((e) => h(r, n.request.subject).pipe(U.map((t) => ({
+			...Re,
+			execute: (e, t) => {
+				let n = e, i = n.expiresInSec ?? ce;
+				return Z(t, S).pipe(q.flatMap((e) => D(n, t.request.subject).pipe(q.map((t) => ({
 					writer: e,
 					policy: t
-				})))), U.flatMap(({ writer: e, policy: n }) => C.uploadTicketScope().pipe(U.flatMap((a) => C.beginMultipartUpload({
-					contentType: r.contentType,
+				})))), q.flatMap(({ writer: e, policy: t }) => F.beginMultipartUpload({
+					contentType: n.contentType,
 					tenantId: e.tenantId,
-					visibility: r.visibility ?? "private",
+					visibility: n.visibility ?? "private",
 					expiresInSec: i
-				}).pipe(U.map((o) => ({
-					multipartToken: ge({
-						writeScope: a,
-						instance: t,
-						key: o.key,
-						uploadId: o.uploadId,
+				}).pipe(q.map((a) => ({
+					multipartToken: _e({
+						writeScope: a.writeScope,
+						instance: r,
+						destination: a.destination,
+						key: a.key,
+						uploadId: a.uploadId,
 						sub: e.id,
 						tenant: e.tenantId,
-						ct: r.contentType,
-						vis: r.visibility ?? "private",
-						...n,
-						size: r.size,
-						...r.folder === void 0 ? {} : { folder: r.folder },
-						...r.tags === void 0 ? {} : { tags: r.tags },
-						...r.alt === void 0 ? {} : { alt: r.alt },
-						...r.caption === void 0 ? {} : { caption: r.caption }
+						ct: n.contentType,
+						vis: n.visibility ?? "private",
+						...t,
+						size: n.size,
+						...n.folder === void 0 ? {} : { folder: n.folder },
+						...n.tags === void 0 ? {} : { tags: n.tags },
+						...n.alt === void 0 ? {} : { alt: n.alt },
+						...n.caption === void 0 ? {} : { caption: n.caption }
 					}, i),
-					partSize: r.partSize && r.partSize >= u ? r.partSize : u,
+					partSize: n.partSize && n.partSize >= C ? n.partSize : C,
 					expiresInSec: i
-				})))))));
+				})))));
 			}
 		},
 		{
-			...He,
+			...Ze,
 			execute: (e) => {
-				let n = e, r = P(n.multipartToken);
-				return !r || r.instance !== t ? U.fail(new p({
+				let t = e, n = B(t.multipartToken);
+				return !n || n.instance !== r ? q.fail(new g({
 					provider: "storage",
 					message: "invalid or expired multipart token",
 					transient: !1,
 					status: 401
-				})) : !Number.isInteger(n.partNumber) || n.partNumber < 1 ? U.fail(new p({
+				})) : !Number.isInteger(t.partNumber) || t.partNumber < 1 ? q.fail(new g({
 					provider: "storage",
 					message: "partNumber must be a positive integer",
 					transient: !1,
 					status: 400
-				})) : T(r).pipe(U.flatMap(() => C.signMultipartPart({
-					key: r.key,
-					uploadId: r.uploadId,
-					partNumber: n.partNumber
-				}).pipe(U.map((e) => ({ url: e })))));
+				})) : I(n).pipe(q.flatMap(() => F.signMultipartPart({
+					key: n.key,
+					destination: n.destination,
+					tenantId: n.tenant,
+					uploadId: n.uploadId,
+					partNumber: t.partNumber
+				}).pipe(q.map((e) => ({ url: e })))));
 			}
 		},
 		{
-			...je,
-			execute: (e, n) => {
-				let r = e, i = P(r.multipartToken);
-				return !i || i.instance !== t ? U.fail(new p({
+			...Be,
+			execute: (e, t) => {
+				let n = e, i = B(n.multipartToken);
+				return !i || i.instance !== r ? q.fail(new g({
 					provider: "storage",
 					message: "invalid or expired multipart token",
 					transient: !1,
 					status: 401
-				})) : _t(i.sub, n.request.subject.id) ? U.fail(new p({
+				})) : zt(i.sub, t.request.subject.id) ? q.fail(new g({
 					provider: "storage",
 					message: "multipart token belongs to another subject",
 					transient: !1,
 					status: 403
-				})) : T(i).pipe(U.flatMap(() => C.completeMultipart({
+				})) : I(i).pipe(q.flatMap(() => F.completeMultipart({
+					destination: i.destination,
 					key: i.key,
 					uploadId: i.uploadId,
-					parts: r.parts,
+					parts: n.parts,
 					contentType: i.ct,
 					tenantId: i.tenant,
 					ownerId: i.sub,
@@ -1100,7 +1238,7 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					...i.tags === void 0 ? {} : { tags: i.tags },
 					...i.alt === void 0 ? {} : { alt: i.alt },
 					...i.caption === void 0 ? {} : { caption: i.caption }
-				}).pipe(U.flatMap((e) => C.getUrl(e.id).pipe(U.map((t) => ({
+				}).pipe(q.flatMap((e) => F.getUrl(e.id).pipe(q.map((t) => ({
 					id: e.id,
 					url: t,
 					size: e.size
@@ -1108,28 +1246,30 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 			}
 		},
 		{
-			...Oe,
+			...Le,
 			execute: (e) => {
-				let n = P(e.multipartToken);
-				return !n || n.instance !== t ? U.fail(new p({
+				let t = B(e.multipartToken);
+				return !t || t.instance !== r ? q.fail(new g({
 					provider: "storage",
 					message: "invalid or expired multipart token",
 					transient: !1,
 					status: 401
-				})) : T(n).pipe(U.flatMap(() => C.abortMultipart({
-					key: n.key,
-					uploadId: n.uploadId
-				}).pipe(U.as({ ok: !0 }))));
+				})) : I(t).pipe(q.flatMap(() => F.abortMultipart({
+					key: t.key,
+					destination: t.destination,
+					tenantId: t.tenant,
+					uploadId: t.uploadId
+				}).pipe(q.as({ ok: !0 }))));
 			}
 		},
 		{
-			...We,
+			...$e,
 			execute: (e, t) => {
 				let n = e, r = new Uint8Array(Buffer.from(n.bytesBase64, "base64"));
-				return Z(t, l).pipe(U.flatMap((e) => h(n, t.request.subject).pipe(U.map((t) => ({
+				return Z(t, S).pipe(q.flatMap((e) => D(n, t.request.subject).pipe(q.map((t) => ({
 					writer: e,
 					policy: t
-				})))), U.flatMap(({ writer: e, policy: t }) => C.put({
+				})))), q.flatMap(({ writer: e, policy: t }) => F.put({
 					bytes: r,
 					...t,
 					contentType: n.contentType,
@@ -1138,17 +1278,17 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					...n.visibility ? { visibility: n.visibility } : {},
 					...n.key ? { key: n.key } : {},
 					...n.password ? { password: n.password } : {}
-				})), U.flatMap((e) => C.getUrl(e.id).pipe(U.map((t) => ({
+				})), q.flatMap((e) => F.getUrl(e.id).pipe(q.map((t) => ({
 					id: e.id,
 					url: t
 				})))));
 			}
 		},
 		{
-			...Ne,
+			...He,
 			execute: (e, t) => {
 				let n = e;
-				return Z(t, l).pipe(U.flatMap((e) => C.ingestUrl(n.url, {
+				return Z(t, S).pipe(q.flatMap((e) => F.ingestUrl(n.url, {
 					tenantId: e.tenantId,
 					ownerId: e.id,
 					...n.visibility ? { visibility: n.visibility } : {},
@@ -1157,45 +1297,45 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					...n.alt === void 0 ? {} : { alt: n.alt },
 					...n.caption === void 0 ? {} : { caption: n.caption },
 					...n.key === void 0 ? {} : { key: n.key }
-				})), U.flatMap((e) => C.getUrl(e.id).pipe(U.map((t) => ({
+				})), q.flatMap((e) => F.getUrl(e.id).pipe(q.map((t) => ({
 					id: e.id,
 					url: t
 				})))));
 			}
 		},
 		{
-			...Ve,
+			...Xe,
 			execute: (e, t) => {
 				let n = e, r = n.expiresInDays ? new Date(Date.now() + n.expiresInDays * 864e5) : null;
-				return X(C, n.refId, t).pipe(U.flatMap(() => C.grant({
+				return Lt(F, n.refId, t).pipe(q.flatMap(() => F.grant({
 					refId: n.refId,
 					principalType: n.principalType,
 					principalId: n.principalId,
 					...n.permission ? { permission: n.permission } : {},
 					expiresAt: r,
 					createdBy: t.request.subject.id
-				})), U.map((e) => ({ grantId: e.id })));
+				})), q.map((e) => ({ grantId: e.id })));
 			}
 		},
 		{
-			...Be,
+			...Ye,
 			execute: (e, t) => {
 				let n = e;
-				return C.getGrant(n.grantId).pipe(U.flatMap((e) => e === null ? U.fail(Y()) : X(C, e.refId, t)), U.flatMap(() => C.revoke(n.grantId)), U.map(() => ({ ok: !0 })));
+				return F.getGrant(n.grantId).pipe(q.flatMap((e) => e === null ? q.fail(It()) : Lt(F, e.refId, t)), q.flatMap(() => F.revoke(n.grantId)), q.map(() => ({ ok: !0 })));
 			}
 		},
 		{
-			...Pe,
+			...Ue,
 			execute: (e, t) => {
 				let n = e;
-				return X(C, n.refId, t).pipe(U.flatMap(() => C.listGrants(n.refId)), U.map((e) => ({ grants: e.map(Q) })));
+				return Lt(F, n.refId, t).pipe(q.flatMap(() => F.listGrants(n.refId)), q.map((e) => ({ grants: e.map(Bt) })));
 			}
 		},
 		{
-			...Fe,
+			...We,
 			execute: (e, t) => {
 				let n = e;
-				return C.listRefs({
+				return F.listRefs({
 					tenantId: t.request.subject.tenantId,
 					...n.folder === void 0 ? {} : { folder: n.folder },
 					...n.tags === void 0 ? {} : { tags: n.tags },
@@ -1203,121 +1343,154 @@ var lt = w.read("VOLTRO_SESSION_COOKIE") ?? "voltro:session", K, ut = (e) => {
 					...n.includeDerived === void 0 ? {} : { includeDerived: n.includeDerived },
 					...n.limit === void 0 ? {} : { limit: n.limit },
 					...n.offset === void 0 ? {} : { offset: n.offset }
-				}).pipe(U.map((e) => ({
-					refs: e.refs.map(ht),
+				}).pipe(q.map((e) => ({
+					refs: e.refs.map(Ft),
 					nextOffset: e.nextOffset
 				})));
 			}
 		}
-	];
-	return at({
-		name: G({
-			base: $,
+	], nt = yt({
+		name: xt({
+			base: Q,
 			alias: e.alias,
 			instance: e.name
 		}),
-		baseName: $,
+		baseName: Q,
 		description: "File storage — StorageService over S3 / MinIO / filesystem / memory. Public objects served direct from bucket/CDN; private objects gated by an access policy + per-object grants. Checksums, tenant key-prefixing, _voltro_storage_refs + _voltro_storage_grants, retry.",
 		permissions: [
 			"network:outbound:*",
 			"inspect:read",
 			"inspect:write"
 		],
-		declaredEnv: w.declared,
-		egress: pt(e),
-		services: ie,
-		inspectEndpoints: De,
+		declaredEnv: E.declared,
+		egress: Mt(e),
+		services: fe,
+		inspectEndpoints: et,
 		httpRoutes: [
-			pe,
-			he,
-			I
+			Ne,
+			Pe,
+			Fe
 		],
-		routes: Ge,
-		rpcClientDescriptors: Ue,
+		routes: tt,
+		rpcClientDescriptors: Qe,
 		errorSchemas: [
 			{
-				schema: p,
+				schema: g,
 				import: {
 					module: "@voltro/plugin-storage/errors",
 					name: "StorageError"
 				}
 			},
 			{
-				schema: te,
+				schema: ne,
 				import: {
 					module: "@voltro/plugin-storage/errors",
 					name: "StorageAccessDenied"
 				}
 			},
 			{
-				schema: ne,
+				schema: re,
 				import: {
 					module: "@voltro/plugin-storage/errors",
 					name: "StorageRejected"
 				}
 			},
 			{
-				schema: re,
+				schema: ie,
 				import: {
 					module: "@voltro/plugin-storage/errors",
 					name: "StorageScanRejected"
 				}
 			}
 		],
-		capabilities: { mediaPersist: {
-			put: async ({ bytes: e, mediaType: t, tenantId: n, operationId: r, ownerId: i, visibility: a, tags: o }) => {
-				let s = await U.runPromise(C.put({
-					bytes: e,
-					contentType: t,
-					tenantId: n,
-					kind: "media",
-					...i === void 0 ? {} : { ownerId: i },
-					...a === void 0 ? {} : { visibility: a },
-					...o === void 0 ? {} : { tags: o },
-					...y.current === void 0 ? {} : { operationId: r }
-				}));
-				return {
-					url: await U.runPromise(C.getUrl(s.id, { tenantId: n })),
-					refId: s.id
-				};
+		...s ? { needs: { connections: [{
+			kind: "storage",
+			role: "objects",
+			optional: e.connection === void 0
+		}] } } : {},
+		...e.connection === void 0 ? {} : { connectionBindings: { objects: e.connection } },
+		capabilities: {
+			storageProvider: () => m,
+			storageDestinations: {
+				router: _,
+				directDestination: e.connection === void 0 ? c : void 0,
+				registry: () => f
 			},
-			ingestUrl: async ({ url: e, tenantId: t, operationId: n, ownerId: r, visibility: i, tags: a }) => {
-				let o = await U.runPromise(C.ingestUrl(e, {
-					tenantId: t,
-					...r === void 0 ? {} : { ownerId: r },
-					...i === void 0 ? {} : { visibility: i },
-					...a === void 0 ? {} : { tags: a },
-					...y.current === void 0 ? {} : { operationId: n }
-				}));
-				return {
-					url: await U.runPromise(C.getUrl(o.id, { tenantId: t })),
-					refId: o.id
-				};
+			mediaPersist: {
+				put: async ({ bytes: e, mediaType: t, tenantId: n, operationId: r, ownerId: i, visibility: a, tags: o }) => {
+					let s = await q.runPromise(F.put({
+						bytes: e,
+						contentType: t,
+						tenantId: n,
+						kind: "media",
+						...i === void 0 ? {} : { ownerId: i },
+						...a === void 0 ? {} : { visibility: a },
+						...o === void 0 ? {} : { tags: o },
+						...A.current === void 0 ? {} : { operationId: r }
+					}));
+					return {
+						url: await q.runPromise(F.getUrl(s.id, { tenantId: n })),
+						refId: s.id
+					};
+				},
+				ingestUrl: async ({ url: e, tenantId: t, operationId: n, ownerId: r, visibility: i, tags: a }) => {
+					let o = await q.runPromise(F.ingestUrl(e, {
+						tenantId: t,
+						...r === void 0 ? {} : { ownerId: r },
+						...i === void 0 ? {} : { visibility: i },
+						...a === void 0 ? {} : { tags: a },
+						...A.current === void 0 ? {} : { operationId: n }
+					}));
+					return {
+						url: await q.runPromise(F.getUrl(o.id, { tenantId: t })),
+						refId: o.id
+					};
+				}
 			}
-		} },
-		bindDataStore: async (e) => {
-			let r = await U.runPromise(i.objectNamespace);
-			(f || m) && await ee(e), (f || m) && await _(e), f && await n(e), f && (g.current = Ce(e, {
-				storageInstance: t,
-				objectNamespace: r
-			})), m && (v.current = Se(e, {
-				storageInstance: t,
-				objectNamespace: r
-			})), f && m && (y.current = Ee(e, {
-				storageInstance: t,
-				objectNamespace: r
-			})), i.bindDataStore?.(e);
 		},
-		onActivate: (t) => U.sync(() => {
-			let n = !!o || !!w.read("STORAGE_CDN_URL", e.cdnBaseUrl);
-			t.logger.info(`storage: provider=${i.name} presign=${i.presigns ? "yes" : "no"} publicUrl=${n ? "yes" : "no"} transforms=yes`, {
-				provider: i.name,
-				bucket: a,
-				refStore: f ? "memory" : "custom"
-			}), i.name === "memory" && process.env.NODE_ENV !== "test" && t.logger.warn("storage: provider=memory — uploads are IN-MEMORY and LOST on restart. Set STORAGE_PROVIDER (filesystem / s3 / r2 / azure / gcs) for anything but throwaway dev. (Empty/placeholder storage env silently falls back to memory.)"), !n && !i.presigns && t.logger.warn("storage: no VOLTRO_PUBLIC_URL / STORAGE_CDN_URL and this provider can't presign — serve URLs are RELATIVE and will not resolve cross-origin (browser <img> / server-to-server AI fetches). Set VOLTRO_PUBLIC_URL to this api's absolute base URL.");
+		bindDataStore: async (t, n) => {
+			let i = s ? n?.connectionReference?.("objects", "storage") || e.connection : void 0;
+			await q.runPromise(oe(n?.connectionRegistry, i)), P = n?.storageReferenceProvider;
+			let a = {
+				storageInstance: r,
+				resolveNamespace: (e) => _.resolve(e).pipe(q.flatMap((e) => e.objectNamespace))
+			};
+			At(m), (w || T) && await te(t), (w || T) && await se(t), (w || !p && m.name === "database") && await o(t), w && (O.current = De(t, a)), T && (k.current = Ee(t, a)), w && T && (A.current = Me(t, a), j.current = t), p || m.bindDataStore?.(t);
+		},
+		onActivate: (t) => q.gen(function* () {
+			let n = s ? t.connectionReference?.("objects", "storage") || e.connection : void 0;
+			if (yield* oe(t.connectionRegistry, n), p) {
+				t.logger.info("storage: tenant-scoped named destination; resolved per request", { destination: h });
+				return;
+			}
+			let r = !!y || !!E.read("STORAGE_CDN_URL", e.cdnBaseUrl);
+			t.logger.info(`storage: provider=${m.name} presign=${m.presigns ? "yes" : "no"} publicUrl=${r ? "yes" : "no"} transforms=yes`, {
+				provider: m.name,
+				bucket: h,
+				refStore: w ? "memory" : "custom"
+			}), m.name === "memory" && process.env.NODE_ENV !== "test" && t.logger.warn("storage: provider=memory — uploads are IN-MEMORY and LOST on restart. Set STORAGE_PROVIDER to filesystem, s3, minio, azure or database and configure a durable destination."), !r && !m.presigns && t.logger.warn("storage: no VOLTRO_PUBLIC_URL / STORAGE_CDN_URL and this provider can't presign — serve URLs are RELATIVE and will not resolve cross-origin (browser <img> / server-to-server AI fetches). Set VOLTRO_PUBLIC_URL to this api's absolute base URL.");
 		}),
-		onDeactivate: () => U.void
+		onDeactivate: () => q.void
+	});
+	return $.set(nt, () => A.current === void 0 ? void 0 : {
+		service: F,
+		metadata: A.current,
+		bucket: h
+	}), nt;
+}, $ = /* @__PURE__ */ new WeakMap(), Wt = (e) => {
+	let t = e.filter((e) => $.has(e));
+	if (t.length !== 1) throw new g({
+		provider: "storage",
+		message: t.length ? "Storage objects are ambiguous; installed instances: " + t.map((e) => e.name).sort().join(", ") : "This app has no Storage plugin",
+		transient: !1
+	});
+	let n = $.get(t[0])();
+	if (n === void 0) throw new g({
+		provider: "storage",
+		message: "Storage objects need a bound data store with the default reference and grant stores",
+		transient: !1
 	});
+	return n;
 };
 //#endregion
-export { i as STORAGE_BLOBS_TABLE, a as STORAGE_GRANTS_TABLE, t as STORAGE_REFERENCE_CATALOGUE_TABLE, o as STORAGE_REFS_TABLE, s as STORAGE_USAGE_TABLE, te as StorageAccessDenied, p as StorageError, ne as StorageRejected, re as StorageScanRejected, m as StorageService, c as _voltroStorageBlobsTable, l as _voltroStorageGrantsTable, u as _voltroStorageRefsTable, d as _voltroStorageUsageTable, dt as appStorageProvider, Ye as assetRef, g as assignStorageObjectNamespacesInTransaction, f as assignStorageReferenceInstancesInTransaction, T as azureProvider, xe as buildStorageService, v as bytesToStream, I as checkLimits, Ge as clamavScanner, E as clearStorageBuffer, y as collectStream, b as concatBytes, ft as configuredStorageProvider, L as contentTypeAllowed, Se as dataStoreGrantStore, Ce as dataStoreRefStore, D as databaseProvider, Ze as decodeDataUri, $e as durabilityNotice, j as editImage, Ke as encodeInstream, n as ensureStorageReferenceCatalogue, z as fetchIngestBody, Je as ffmpegTranscoder, O as filesystemProvider, x as fromNodeReadable, S as getObjectStream, M as hashPassword, Ee as makeStorageObjectMetadata, we as memoryGrantStore, k as memoryProvider, B as memoryRefStore, qe as parseClamavResponse, se as parseTransformParams, et as pathDurability, Qe as putAvatar, ie as putObjectStream, ae as readStorageBuffer, V as refMatchesListQuery, _ as requireStorageObjectNamespaces, q as resolveStorageProvider, pe as resolveStorageSecret, A as s3Provider, ut as setActiveStorageProvider, me as signFinalizeTicket, he as signGrant, ge as signMultipartTicket, _e as signResumableTicket, N as signUploadTicket, R as sniffMatches, pt as storageEgressOf, vt as storageInstanceName, h as storageObjectLifecycleTables, e as storageObjectNamespace, bt as storagePlugin, De as storagePutIntentsTable, r as storageReferenceCatalogueTable, Te as storageServiceLayer, C as toNodeReadable, ce as transformCached, le as transformFallbackReason, ue as transformImage, ve as verifyFinalizeTicket, ye as verifyGrant, P as verifyMultipartTicket, fe as verifyPassword, be as verifyResumableTicket, F as verifyUploadTicket, Xe as withStorage };
+export { c as STORAGE_BLOBS_TABLE, l as STORAGE_GRANTS_TABLE, a as STORAGE_REFERENCE_CATALOGUE_TABLE, u as STORAGE_REFS_TABLE, d as STORAGE_USAGE_TABLE, ne as StorageAccessDenied, ct as StorageAddress, Fe as StorageCustody, g as StorageError, re as StorageRejected, ie as StorageScanRejected, _ as StorageService, ee as _voltroStorageBlobsTable, f as _voltroStorageGrantsTable, p as _voltroStorageRefsTable, m as _voltroStorageUsageTable, Wt as appStorageObjects, jt as appStorageProvider, e as appStorageRouter, et as assetRef, y as assignStorageObjectNamespacesInTransaction, h as assignStorageReferenceInstancesInTransaction, D as azureProvider, Te as buildStorageService, b as bytesToStream, V as checkLimits, U as clamavScanner, O as clearStorageBuffer, x as collectStream, S as concatBytes, kt as configuredStorageProvider, ot as connectStorage, Ce as contentTypeAllowed, Ee as dataStoreGrantStore, De as dataStoreRefStore, k as databaseProvider, nt as decodeDataUri, it as durabilityNotice, ue as editImage, W as encodeInstream, o as ensureStorageReferenceCatalogue, r as existingFilesystemObjectNamespace, H as fetchIngestBody, K as ffmpegTranscoder, A as filesystemProvider, C as fromNodeReadable, ce as getObjectStream, F as hashPassword, ut as isStorageKey, t as makeStorageDestinationRouter, Me as makeStorageObjectMetadata, Oe as memoryGrantStore, j as memoryProvider, ke as memoryRefStore, G as parseClamavResponse, de as parseTransformParams, at as pathDurability, rt as putAvatar, w as putObjectStream, N as readStorageBuffer, Ae as refMatchesListQuery, se as requireStorageObjectNamespaces, X as resolveStorageProvider, L as resolveStorageSecret, Pe as retainedCaptureTables, P as s3Provider, ge as signFinalizeTicket, R as signGrant, _e as signMultipartTicket, ve as signResumableTicket, z as signUploadTicket, we as sniffMatches, dt as storageAddressIdentity, n as storageByteSecurityHeaders, Mt as storageEgressOf, Vt as storageInstanceName, oe as storageObjectLifecycleTables, i as storageObjectNamespace, Ut as storagePlugin, Ne as storagePutIntentsTable, v as storageRefAddress, s as storageReferenceCatalogueTable, je as storageServiceLayer, T as toNodeReadable, fe as transformCached, pe as transformFallbackReason, me as transformImage, ye as verifyFinalizeTicket, be as verifyGrant, B as verifyMultipartTicket, I as verifyPassword, xe as verifyResumableTicket, Se as verifyUploadTicket, tt as withStorage, st as withStorageKeyPrefix };