@warlock.js/core 4.8.1 → 4.9.0

package/esm/storage/storage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storage.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/storage/storage.ts"],"sourcesContent":["import events, { type EventSubscription } from \"@mongez/events\";\nimport fs from \"fs\";\nimport path from \"path\";\nimport type { Readable } from \"stream\";\nimport type { UploadedFile } from \"../http\";\nimport { storageConfig } from \"./config\";\nimport { storageDriverContext } from \"./context/storage-driver-context\";\nimport { DOSpacesDriver } from \"./drivers/do-spaces-driver\";\nimport { LocalDriver } from \"./drivers/local-driver\";\nimport { R2Driver } from \"./drivers/r2-driver\";\nimport { S3Driver } from \"./drivers/s3-driver\";\nimport { ScopedStorage } from \"./scoped-storage\";\nimport { StorageFile } from \"./storage-file\";\nimport { safeFetchToBuffer } from \"./utils/safe-fetch\";\nimport type {\n  CloudStorageDriverContract,\n  CloudStorageDriverOptions,\n  DeleteManyResult,\n  FileVisibility,\n  ListOptions,\n  LocalStorageDriverOptions,\n  PresignedOptions,\n  PresignedUploadOptions,\n  PutFromUrlOptions,\n  PutOptions,\n  R2StorageDriverOptions,\n  ScopedStorageContract,\n  StorageCopyEventPayload,\n  StorageDriverConfig,\n  StorageDriverContract,\n  StorageDriverName,\n  StorageEventHandler,\n  StorageEventPayload,\n  StorageEventType,\n  StorageFileInfo,\n  StorageManagerContract,\n  StoragePutEventPayload,\n  TemporaryTokenValidation,\n} from \"./types\";\n\n/**\n * Storage Manager\n *\n * Provides a unified interface for file storage operations across multiple\n * drivers (local, S3, R2, DigitalOcean Spaces). Extends `ScopedStorage` to\n * inherit all base operations while adding driver management and events.\n *\n * All operations return `StorageFile` instances for a consistent, rich DX.\n *\n * @example\n * ```typescript\n * // Basic usage (uses default driver)\n * const file = await storage.put(buffer, \"uploads/image.jpg\");\n *\n * // With options\n * const file = await storage.put(buffer, \"uploads/image.jpg\", {\n *   mimeType: \"image/jpeg\",\n *   cacheControl: \"max-age=31536000\"\n * });\n *\n * // Using specific driver (also returns StorageFile)\n * const file = await storage.use(\"s3\").put(buffer, \"path/to/file\");\n *\n * // Get raw driver for advanced use\n * const driver = storage.driver(\"s3\");\n * const data = await driver.put(buffer, \"path/to/file\"); // Returns StorageFileData\n *\n * // Stream operations for large files\n * const stream = await storage.getStream(\"large-file.zip\");\n * await storage.putStream(readableStream, \"output/file.zip\");\n *\n * // Batch operations\n * const results = await storage.deleteMany([\"file1.txt\", \"file2.txt\"]);\n *\n * // Event hooks\n * storage.on(\"afterPut\", ({ location, file }) => {\n *   console.log(`Uploaded ${location}`);\n * });\n * ```\n */\nexport class Storage extends ScopedStorage implements StorageManagerContract {\n  /**\n   * Registered drivers (cached instances)\n   * @internal\n   */\n  protected drivers = new Map<string, StorageDriverContract>();\n\n  /**\n   * Driver configurations\n   * @internal\n   */\n  protected configs = new Map<string, StorageDriverConfig>();\n\n  /**\n   * Default driver name\n   * @internal\n   */\n  protected defaultDriverName!: StorageDriverName;\n\n  /**\n   * Whether the storage has been initialized\n   * @internal\n   */\n  private initialized = false;\n\n  /**\n   * Create a new Storage manager instance\n   *\n   * Uses lazy initialization - driver is resolved on first access.\n   */\n  public constructor() {\n    // Temp placeholder - will be replaced on first access\n    super(null as unknown as StorageDriverContract);\n  }\n\n  /**\n   * Ensure storage is initialized (lazy initialization)\n   *\n   * Called automatically on first driver access.\n   */\n  public async init(): Promise<void> {\n    if (this.initialized) return;\n\n    // Mark as initialized FIRST to prevent infinite recursion\n    this.initialized = true;\n\n    // Get default driver name from config\n\n    const defaultName = storageConfig(\"default\", \"local\");\n\n    this.defaultDriverName = defaultName as StorageDriverName;\n    this.loadDriversFromConfig();\n\n    // Now set the actual driver\n    this._driver = this.resolveDriver(this.defaultDriverName);\n  }\n\n  /**\n   * Reset storage defaults\n   */\n  public reset(): void {\n    this.initialized = false;\n    this.drivers.clear();\n    this.configs.clear();\n    this.defaultDriverName = null as unknown as StorageDriverName;\n    this._driver = null as unknown as StorageDriverContract;\n  }\n\n  /**\n   * Get the currently active driver (context-aware in future)\n   *\n   * Currently returns the default driver.\n   * Will be enhanced to check AsyncLocalStorage context for multi-tenant support.\n   *\n   * @returns The active storage driver\n   */\n  public override get activeDriver(): StorageDriverContract {\n    // Check context for tenant-specific driver\n    const contextDriver = storageDriverContext.getDriver();\n\n    if (contextDriver) return contextDriver;\n\n    return this._driver;\n  }\n\n  // ============================================================\n  // Driver Management\n  // ============================================================\n\n  /**\n   * Load drivers from configuration\n   * @internal\n   */\n  protected loadDriversFromConfig(): void {\n    const drivers = storageConfig<Record<string, StorageDriverConfig>>(\"drivers\", {});\n\n    for (const [name, config] of Object.entries(drivers)) {\n      this.configs.set(name, config);\n    }\n  }\n\n  /**\n   * Get a scoped storage for a specific driver\n   *\n   * Returns a `ScopedStorage` instance that wraps the specified driver.\n   * Operations on the returned instance also return `StorageFile` objects.\n   *\n   * @param name - Driver name as defined in configuration\n   * @returns ScopedStorage instance for the specified driver\n   *\n   * @example\n   * ```typescript\n   * // Upload to S3\n   * const s3File = await storage.use(\"s3\").put(buffer, \"images/photo.jpg\");\n   *\n   * // Upload to local\n   * const localFile = await storage.use(\"local\").put(buffer, \"temp/file.txt\");\n   *\n   * // Both return StorageFile with identical API\n   * console.log(s3File.url);\n   * console.log(localFile.url);\n   * ```\n   */\n  public use(name: StorageDriverName): ScopedStorageContract {\n    return new ScopedStorage(this.getDriver(name));\n  }\n\n  /**\n   * Get a raw driver instance\n   *\n   * Returns the underlying driver directly for advanced use cases.\n   * Unlike `use()`, calling methods on the raw driver returns\n   * `StorageFileData` instead of `StorageFile`.\n   *\n   * @param name - Driver name as defined in configuration\n   * @returns Raw driver instance implementing StorageDriverContract\n   *\n   * @example\n   * ```typescript\n   * const driver = storage.getDriver(\"s3\");\n   * const data = await driver.put(buffer, \"path/to/file\");\n   * // data is StorageFileData, not StorageFile\n   * ```\n   */\n  public getDriver(name: StorageDriverName): StorageDriverContract {\n    return this.resolveDriver(name);\n  }\n\n  /**\n   * Get root directory of current driver\n   */\n  public root(apepndedPath?: string): string {\n    const rootPath = this.activeDriver.options?.root || \"\";\n\n    return path.join(rootPath, apepndedPath || \"\");\n  }\n\n  /**\n   * Use a cloud storage driver with extended cloud capabilities\n   *\n   * @param name - Cloud driver name (s3, r2, spaces)\n   * @returns Driver instance implementing CloudStorageDriverContract\n   * @throws Error if driver doesn't support cloud operations\n   *\n   * @example\n   * ```typescript\n   * const cloudDriver = storage.useCloud(\"s3\");\n   * const presignedUrl = await cloudDriver.getPresignedUrl(\"private/doc.pdf\");\n   * ```\n   */\n  public useCloud(name: StorageDriverName): CloudStorageDriverContract {\n    const instance = this.getDriver(name);\n\n    if (!this.isCloudDriver(instance)) {\n      throw new Error(`Driver \"${name}\" does not support cloud operations`);\n    }\n\n    return instance as CloudStorageDriverContract;\n  }\n\n  /**\n   * Register a new driver configuration at runtime\n   *\n   * Allows dynamic driver registration for multi-tenancy or\n   * runtime configuration scenarios.\n   *\n   * @param name - Unique driver name\n   * @param config - Driver configuration\n   * @returns This instance for chaining\n   *\n   * @example\n   * ```typescript\n   * storage.register(\"tenant-s3\", {\n   *   driver: \"s3\",\n   *   bucket: \"tenant-bucket\",\n   *   region: \"us-east-1\",\n   *   accessKeyId: process.env.TENANT_AWS_KEY,\n   *   secretAccessKey: process.env.TENANT_AWS_SECRET\n   * });\n   *\n   * await storage.use(\"tenant-s3\").put(buffer, \"file.txt\");\n   * ```\n   */\n  public register(name: StorageDriverName, config: StorageDriverConfig): this {\n    this.configs.set(name, config);\n    this.drivers.delete(name); // Clear cached instance\n    return this;\n  }\n\n  /**\n   * Set the default driver name\n   *\n   * @param name - Driver name to use as default\n   * @returns This instance for chaining\n   *\n   * @example\n   * ```typescript\n   * storage.setDefault(\"s3\");\n   * await storage.put(buffer, \"file.txt\"); // Now uses S3\n   * ```\n   */\n  public setDefault(name: StorageDriverName): this {\n    this.defaultDriverName = name;\n    this._driver = this.getDriver(name);\n    return this;\n  }\n\n  /**\n   * Check if current driver is a cloud driver\n   *\n   * @returns Promise resolving to true if the current driver supports cloud operations\n   */\n  public async isCloud(): Promise<boolean> {\n    return this.isCloudDriver(this.activeDriver);\n  }\n\n  /**\n   * Check if a driver instance supports cloud operations\n   * @internal\n   */\n  protected isCloudDriver(driver: StorageDriverContract): driver is CloudStorageDriverContract {\n    return \"getPresignedUrl\" in driver;\n  }\n\n  // ============================================================\n  // Event System\n  // ============================================================\n\n  /**\n   * Register an event handler\n   *\n   * Subscribe to storage events for logging, analytics, or side effects.\n   *\n   * @param event - Event type to listen for\n   * @param handler - Handler function\n   * @returns Event subscription for unsubscribing\n   *\n   * @example\n   * ```typescript\n   * // Log all uploads\n   * storage.on(\"afterPut\", ({ location, file }) => {\n   *   console.log(`Uploaded ${file?.size} bytes to ${location}`);\n   * });\n   *\n   * // Track deletions\n   * storage.on(\"afterDelete\", ({ location }) => {\n   *   analytics.track(\"file_deleted\", { path: location });\n   * });\n   * ```\n   */\n  public on<T extends StorageEventPayload = StorageEventPayload>(\n    event: StorageEventType,\n    handler: StorageEventHandler<T>,\n  ): EventSubscription {\n    return events.subscribe(`storage.${event}`, handler);\n  }\n\n  /**\n   * Remove all handlers for an event type\n   *\n   * @param event - Event type to remove handlers for\n   * @returns This instance for chaining\n   *\n   * @example\n   * ```typescript\n   * storage.off(\"afterPut\"); // Remove all afterPut handlers\n   * ```\n   */\n  public off(event: StorageEventType): this {\n    events.off(`storage.${event}`);\n    return this;\n  }\n\n  /**\n   * Emit an event to all registered handlers\n   * @internal\n   */\n  protected async emit<T extends StorageEventPayload>(\n    event: StorageEventType,\n    payload: T,\n  ): Promise<void> {\n    await events.triggerAll(`storage.${event}`, payload);\n  }\n\n  // ============================================================\n  // Overridden Operations with Events\n  // ============================================================\n\n  /**\n   * Store a file in storage\n   *\n   * Extends base `put()` with event emission for beforePut/afterPut hooks.\n   *\n   * @param file - File content as Buffer, string, UploadedFile, or Readable stream\n   * @param location - Destination path\n   * @param options - Storage options (mimeType, cacheControl, etc.)\n   * @returns StorageFile instance with cached metadata\n   */\n  public override async put(\n    file: UploadedFile | Buffer | string | Readable,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFile> {\n    const driver = this.activeDriver;\n    const buffer = await this.toBuffer(file);\n\n    await this.emit<StoragePutEventPayload>(\"beforePut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n      size: buffer.length,\n    });\n\n    const result = await driver.put(buffer, location, options);\n\n    await this.emit<StoragePutEventPayload>(\"afterPut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    if (!result.size) {\n      result.size = buffer.length;\n    }\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * Store a file from a readable stream (for large files)\n   *\n   * Extends base `putStream()` with event emission.\n   *\n   * @param stream - Readable stream\n   * @param location - Destination path\n   * @param options - Storage options\n   * @returns StorageFile instance with cached metadata\n   */\n  public override async putStream(\n    stream: Readable | string,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFile> {\n    const driver = this.activeDriver;\n\n    await this.emit<StoragePutEventPayload>(\"beforePut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n    });\n\n    if (typeof stream === \"string\") {\n      stream = fs.createReadStream(stream);\n    }\n\n    const result = await driver.putStream(stream, location, options);\n\n    await this.emit<StoragePutEventPayload>(\"afterPut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * Store a file from a URL\n   *\n   * Downloads content from the URL and stores it at the specified location.\n   *\n   * The download is SSRF-guarded by default: the URL scheme must be\n   * https/http, the host must not resolve to a private / loopback /\n   * link-local / cloud-metadata address, the body is capped, and the\n   * request times out. Tune or relax via the {@link PutFromUrlOptions}\n   * guard fields.\n   *\n   * @param url - Source URL to download from\n   * @param location - Destination path\n   * @param options - Storage + outbound-download guard options\n   * @returns StorageFile instance with cached metadata\n   *\n   * @example\n   * ```typescript\n   * const file = await storage.putFromUrl(\n   *   \"https://example.com/image.jpg\",\n   *   \"downloads/image.jpg\"\n   * );\n   * ```\n   */\n  public async putFromUrl(\n    url: string,\n    location: string,\n    options?: PutFromUrlOptions,\n  ): Promise<StorageFile> {\n    const { allowPrivateHosts, maxBytes, timeoutMs, allowedSchemes, ...putOptions } =\n      options ?? {};\n\n    const result = await safeFetchToBuffer(url, {\n      allowPrivateHosts,\n      maxBytes,\n      timeoutMs,\n      allowedSchemes,\n    });\n\n    if (!result.ok) {\n      throw new Error(`Failed to fetch file from URL: ${result.statusText}`);\n    }\n\n    if (!result.contentType) {\n      throw new Error(`Failed to fetch file from URL: missing content-type header`);\n    }\n\n    const mimeType = putOptions.mimeType || result.contentType;\n\n    return this.put(result.buffer, location, { ...putOptions, mimeType });\n  }\n\n  /**\n   * Store a file from base64 encoded string\n   *\n   * Decodes base64 content (with optional data URL prefix) and stores it.\n   *\n   * @param base64 - Base64 encoded file content (or data URL)\n   * @param location - Destination path\n   * @param options - Storage options\n   * @returns StorageFile instance with cached metadata\n   *\n   * @example\n   * ```typescript\n   * // From plain base64\n   * const file = await storage.putFromBase64(base64String, \"images/photo.jpg\");\n   *\n   * // From data URL (auto-extracts MIME type)\n   * const file = await storage.putFromBase64(\n   *   \"data:image/png;base64,iVBORw0KGgo...\",\n   *   \"images/photo.png\"\n   * );\n   * ```\n   */\n  public async putFromBase64(\n    base64: string,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFile> {\n    let data = base64;\n    let mimeType = options?.mimeType;\n\n    if (base64.startsWith(\"data:\")) {\n      const match = base64.match(/^data:([^;]+);base64,(.+)$/);\n      if (match) {\n        mimeType = mimeType || match[1];\n        data = match[2];\n      }\n    }\n\n    const buffer = Buffer.from(data, \"base64\");\n    return this.put(buffer, location, { ...options, mimeType });\n  }\n\n  /**\n   * Retrieve file contents as Buffer\n   *\n   * Uses the current driver (with async resolution).\n   *\n   * @param location - File path\n   * @returns Buffer containing file contents\n   */\n  public override async get(location: string): Promise<Buffer> {\n    return this.activeDriver.get(location);\n  }\n\n  /**\n   * Get JSON content from a file\n   *\n   * Downloads and parses JSON file content.\n   *\n   * @param location - File path\n   * @returns Parsed JSON content\n   *\n   * @example\n   * ```typescript\n   * const config = await storage.getJson(\"config/settings.json\");\n   * console.log(config.apiKey);\n   * ```\n   */\n  public async getJson(location: string): Promise<any> {\n    const buffer = await this.get(location);\n    return JSON.parse(buffer.toString());\n  }\n\n  /**\n   * Retrieve a file as a readable stream (for large files)\n   *\n   * @param location - File path\n   * @returns Readable stream of file contents\n   */\n  public override async getStream(location: string): Promise<Readable> {\n    return this.activeDriver.getStream(location);\n  }\n\n  /**\n   * Delete a file\n   *\n   * Extends base `delete()` with event emission.\n   *\n   * @param location - File path or StorageFile\n   * @returns true if deleted, false if not found\n   */\n  public override async delete(location: string | StorageFile): Promise<boolean> {\n    const driver = this.activeDriver;\n    const path = typeof location === \"string\" ? location : location.path;\n\n    await this.emit<StorageEventPayload>(\"beforeDelete\", {\n      driver: driver.name,\n      location: path,\n      timestamp: new Date(),\n    });\n\n    const result = await driver.delete(path);\n\n    await this.emit<StorageEventPayload>(\"afterDelete\", {\n      driver: driver.name,\n      location: path,\n      timestamp: new Date(),\n    });\n\n    return result;\n  }\n\n  /**\n   * Delete multiple files at once\n   *\n   * @param locations - Array of file paths\n   * @returns Array of delete results with status for each file\n   */\n  public override async deleteMany(locations: string[]): Promise<DeleteManyResult[]> {\n    return this.activeDriver.deleteMany(locations);\n  }\n\n  /**\n   * Check if a file exists\n   *\n   * @param location - File path\n   * @returns true if file exists\n   */\n  public override async exists(location: string): Promise<boolean> {\n    return this.activeDriver.exists(location);\n  }\n\n  /**\n   * Copy a file to a new location\n   *\n   * Extends base `copy()` with event emission.\n   *\n   * @param from - Source path or StorageFile\n   * @param to - Destination path\n   * @returns StorageFile instance at destination\n   */\n  public override async copy(from: string | StorageFile, to: string): Promise<StorageFile> {\n    const driver = this.activeDriver;\n    const fromPath = typeof from === \"string\" ? from : from.path;\n\n    await this.emit<StorageCopyEventPayload>(\"beforeCopy\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n    });\n\n    const result = await driver.copy(fromPath, to);\n\n    await this.emit<StorageCopyEventPayload>(\"afterCopy\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * Move a file to a new location\n   *\n   * Extends base `move()` with event emission.\n   *\n   * @param from - Source path or StorageFile\n   * @param to - Destination path\n   * @returns StorageFile instance at destination\n   */\n  public override async move(from: string | StorageFile, to: string): Promise<StorageFile> {\n    const driver = this.activeDriver;\n    const fromPath = typeof from === \"string\" ? from : from.path;\n\n    await this.emit<StorageCopyEventPayload>(\"beforeMove\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n    });\n\n    const result = await driver.move(fromPath, to);\n\n    await this.emit<StorageCopyEventPayload>(\"afterMove\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * List files in a directory\n   *\n   * @param directory - Directory path (defaults to root)\n   * @param options - List options (recursive, limit, etc.)\n   * @returns Array of file information objects\n   */\n  public override async list(\n    directory?: string,\n    options?: ListOptions,\n  ): Promise<StorageFileInfo[]> {\n    return this.activeDriver.list(directory || \"\", options);\n  }\n\n  // ============================================================\n  // Metadata Operations\n  // ============================================================\n\n  /**\n   * Get file metadata without downloading\n   *\n   * @param location - File path\n   * @returns File information object\n   */\n  public override async metadata(location: string): Promise<StorageFileInfo> {\n    return this.activeDriver.metadata(location);\n  }\n\n  /**\n   * Get file size in bytes\n   *\n   * @param location - File path\n   * @returns File size in bytes\n   */\n  public override async size(location: string): Promise<number> {\n    return this.activeDriver.size(location);\n  }\n\n  // ============================================================\n  // Path Operations (Local Driver Only)\n  // ============================================================\n\n  /**\n   * Get the absolute filesystem path for a location\n   *\n   * Only available for local driver.\n   *\n   * @param location - File path\n   * @throws Error if current driver is not a local driver\n   * @returns Absolute filesystem path\n   */\n  public async path(location: string): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!(\"path\" in driver) || typeof driver.path !== \"function\") {\n      throw new Error(\"path() is only available for local storage drivers\");\n    }\n\n    return driver.path(location);\n  }\n\n  // ============================================================\n  // Cloud-Specific Operations\n  // ============================================================\n\n  /**\n   * Get a presigned URL for downloading a file\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @param options - Presigned URL options (expiresIn)\n   * @throws Error if current driver is not a cloud driver\n   * @returns Presigned download URL\n   *\n   * @example\n   * ```typescript\n   * const url = await storage.getPresignedUrl(\"private/document.pdf\", {\n   *   expiresIn: 3600 // 1 hour\n   * });\n   * ```\n   */\n  public async getPresignedUrl(location: string, options?: PresignedOptions): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Presigned URLs are only available for cloud storage drivers\");\n    }\n\n    return driver.getPresignedUrl(location, options);\n  }\n\n  /**\n   * Get a presigned URL for uploading a file directly to cloud storage\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - Destination path\n   * @param options - Upload options (expiresIn, contentType, metadata).\n   *   There is no size cap: a presigned PUT URL cannot enforce one — verify\n   *   the uploaded size server-side or use a presigned POST policy instead.\n   * @throws Error if current driver is not a cloud driver\n   * @returns Presigned upload URL\n   *\n   * @example\n   * ```typescript\n   * const uploadUrl = await storage.getPresignedUploadUrl(\"uploads/file.pdf\", {\n   *   expiresIn: 3600,\n   *   contentType: \"application/pdf\"\n   * });\n   *\n   * // Client can PUT directly to this URL\n   * ```\n   */\n  public async getPresignedUploadUrl(\n    location: string,\n    options?: PresignedUploadOptions,\n  ): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Presigned upload URLs are only available for cloud storage drivers\");\n    }\n\n    return driver.getPresignedUploadUrl(location, options);\n  }\n\n  /**\n   * Get the bucket name for cloud storage\n   *\n   * Only available for cloud drivers.\n   *\n   * @throws Error if current driver is not a cloud driver\n   * @returns Bucket name\n   */\n  public async getBucket(): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Bucket information is only available for cloud storage drivers\");\n    }\n\n    return driver.getBucket();\n  }\n\n  /**\n   * Get the region for cloud storage\n   *\n   * Only available for cloud drivers.\n   *\n   * @throws Error if current driver is not a cloud driver\n   * @returns Region name\n   */\n  public async getRegion(): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Region information is only available for cloud storage drivers\");\n    }\n\n    return driver.getRegion();\n  }\n\n  /**\n   * Set storage class for a file (e.g., STANDARD, GLACIER, etc.)\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @param storageClass - Target storage class\n   * @throws Error if current driver is not a cloud driver\n   */\n  public async setStorageClass(location: string, storageClass: string): Promise<void> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Storage class is only available for cloud storage drivers\");\n    }\n\n    return driver.setStorageClass(location, storageClass);\n  }\n\n  /**\n   * Set file visibility (public or private)\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @param visibility - \"public\" or \"private\"\n   * @throws Error if current driver is not a cloud driver\n   */\n  public async setVisibility(location: string, visibility: FileVisibility): Promise<void> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Visibility is only available for cloud storage drivers\");\n    }\n\n    return driver.setVisibility(location, visibility);\n  }\n\n  /**\n   * Get file visibility\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @throws Error if current driver is not a cloud driver\n   * @returns Current visibility setting\n   */\n  public async getVisibility(location: string): Promise<FileVisibility> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Visibility is only available for cloud storage drivers\");\n    }\n\n    return driver.getVisibility(location);\n  }\n\n  /**\n   * Get a temporary signed URL\n   *\n   * Creates a URL that provides temporary access to the file.\n   *\n   * @param location - File path\n   * @param expiresIn - Seconds until expiration (default: 3600)\n   * @returns Signed URL string\n   */\n  public override async temporaryUrl(location: string, expiresIn?: number): Promise<string> {\n    return this.activeDriver.temporaryUrl(location, expiresIn);\n  }\n\n  /**\n   * Validate a temporary URL token\n   *\n   * For local driver: validates HMAC-signed tokens\n   * For cloud drivers: returns invalid (cloud validates via presigned URL)\n   *\n   * @param token - The token from the temporary URL\n   * @returns Validation result with file info and convenience methods\n   *\n   * @example\n   * ```typescript\n   * const result = await storage.validateTemporaryToken(token);\n   *\n   * if (!result.valid) {\n   *   return response.status(403).send(result.error);\n   * }\n   *\n   * // For local driver - use sendFile for efficiency\n   * if (result.absolutePath) {\n   *   return response.sendFile(result.absolutePath);\n   * }\n   *\n   * // For cloud driver - stream the file\n   * const stream = await result.getStream!();\n   * stream.pipe(response.raw);\n   * ```\n   */\n  public async validateTemporaryToken(token: string): Promise<TemporaryTokenValidation> {\n    // Check if driver supports token validation\n    if (\n      !(\"validateTemporaryToken\" in this.activeDriver) ||\n      typeof this.activeDriver.validateTemporaryToken !== \"function\"\n    ) {\n      // For cloud drivers, temporary URLs are presigned and validated by the cloud provider\n      return {\n        valid: false,\n        error: \"invalid_token\",\n      };\n    }\n\n    return this.activeDriver.validateTemporaryToken(token);\n  }\n\n  // ============================================================\n  // Configuration Parsing\n  // ============================================================\n\n  /**\n   * Parse config into driver-specific options\n   * @internal\n   */\n  protected parseOptions(\n    config: StorageDriverConfig,\n  ): LocalStorageDriverOptions | CloudStorageDriverOptions | R2StorageDriverOptions {\n    const { driver, ...options } = config;\n\n    switch (driver) {\n      case \"local\":\n        return {\n          root: options.root,\n          urlPrefix: options.urlPrefix,\n          signatureKey: options.signatureKey,\n        } satisfies LocalStorageDriverOptions;\n\n      case \"s3\":\n        this.validateCloudConfig(config, \"s3\");\n        return {\n          ...options,\n          bucket: options.bucket!,\n          region: options.region!,\n          accessKeyId: options.accessKeyId!,\n          secretAccessKey: options.secretAccessKey!,\n          endpoint: options.endpoint,\n          urlPrefix: options.urlPrefix,\n        } satisfies CloudStorageDriverOptions;\n\n      case \"r2\":\n        this.validateCloudConfig(config, \"r2\");\n        if (!options.accountId) {\n          throw new Error('R2 driver requires \"accountId\" configuration');\n        }\n\n        return {\n          ...options,\n          region: options.region || \"auto\",\n          bucket: options.bucket!,\n          accessKeyId: options.accessKeyId!,\n          secretAccessKey: options.secretAccessKey!,\n          endpoint: options.endpoint,\n          urlPrefix: options.urlPrefix,\n          accountId: options.accountId,\n          publicDomain: options.publicDomain,\n        } satisfies R2StorageDriverOptions;\n\n      case \"spaces\":\n        this.validateCloudConfig(config, \"spaces\");\n        return {\n          ...options,\n          bucket: options.bucket!,\n          region: options.region!,\n          accessKeyId: options.accessKeyId!,\n          secretAccessKey: options.secretAccessKey!,\n          endpoint: options.endpoint,\n          urlPrefix: options.urlPrefix,\n        } satisfies CloudStorageDriverOptions;\n\n      default:\n        throw new Error(`Unknown driver type: ${driver}`);\n    }\n  }\n\n  /**\n   * Validate cloud driver configuration has required fields\n   * @internal\n   */\n  protected validateCloudConfig(config: StorageDriverConfig, driverName: string): void {\n    const required = [\"bucket\", \"accessKeyId\", \"secretAccessKey\"];\n\n    if (driverName !== \"r2\") {\n      required.push(\"region\");\n    }\n\n    for (const field of required) {\n      if (!config[field as keyof StorageDriverConfig]) {\n        throw new Error(`${driverName.toUpperCase()} driver requires \"${field}\" configuration`);\n      }\n    }\n  }\n\n  /**\n   * Get or create driver instance from cache\n   * @internal\n   */\n  protected resolveDriver(name: string): StorageDriverContract {\n    // Ensure configs are loaded\n\n    if (this.drivers.has(name)) {\n      return this.drivers.get(name)!;\n    }\n\n    const config = this.configs.get(name);\n\n    if (!config) {\n      throw new Error(`Storage driver \"${name}\" is not configured`);\n    }\n\n    const options = this.parseOptions(config);\n    let driver: StorageDriverContract;\n\n    switch (config.driver) {\n      case \"local\":\n        driver = new LocalDriver(options as LocalStorageDriverOptions);\n        break;\n      case \"s3\":\n        driver = new S3Driver(options as CloudStorageDriverOptions);\n        break;\n      case \"r2\":\n        driver = new R2Driver(options as R2StorageDriverOptions);\n        break;\n      case \"spaces\":\n        driver = new DOSpacesDriver(options as CloudStorageDriverOptions);\n        break;\n      default:\n        throw new Error(`Unknown storage driver type: ${config.driver}`);\n    }\n\n    this.drivers.set(name, driver);\n    return driver;\n  }\n\n  /**\n   * Resolve the default driver name (supports async resolver for multi-tenancy)\n   * @internal\n   */\n  protected async resolveDefaultDriver(): Promise<StorageDriverName> {\n    const resolver = storageConfig(\"resolver\");\n\n    if (resolver) {\n      const resolved = await resolver();\n      return resolved || this.defaultDriverName;\n    }\n\n    return this.defaultDriverName;\n  }\n}\n\n/**\n * Singleton storage instance\n *\n * Pre-configured storage manager ready for use throughout the application.\n *\n * @example\n * ```typescript\n * import { storage } from \"@warlock.js/core\";\n *\n * const file = await storage.put(buffer, \"uploads/file.txt\");\n * ```\n */\nexport const storage = new Storage();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,IAAa,UAAb,cAA6B,cAAgD;;;;;;CA8B3E,AAAO,cAAc;EAEnB,MAAM,IAAwC;iCA3B5B,IAAI,IAAmC;iCAMvC,IAAI,IAAiC;qBAYnC;CAUtB;;;;;;CAOA,MAAa,OAAsB;EACjC,IAAI,KAAK,aAAa;EAGtB,KAAK,cAAc;EAInB,MAAM,cAAc,cAAc,WAAW,OAAO;EAEpD,KAAK,oBAAoB;EACzB,KAAK,sBAAsB;EAG3B,KAAK,UAAU,KAAK,cAAc,KAAK,iBAAiB;CAC1D;;;;CAKA,AAAO,QAAc;EACnB,KAAK,cAAc;EACnB,KAAK,QAAQ,MAAM;EACnB,KAAK,QAAQ,MAAM;EACnB,KAAK,oBAAoB;EACzB,KAAK,UAAU;CACjB;;;;;;;;;CAUA,IAAoB,eAAsC;EAExD,MAAM,gBAAgB,qBAAqB,UAAU;EAErD,IAAI,eAAe,OAAO;EAE1B,OAAO,KAAK;CACd;;;;;CAUA,AAAU,wBAA8B;EACtC,MAAM,UAAU,cAAmD,WAAW,CAAC,CAAC;EAEhF,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,OAAO,GACjD,KAAK,QAAQ,IAAI,MAAM,MAAM;CAEjC;;;;;;;;;;;;;;;;;;;;;;;CAwBA,AAAO,IAAI,MAAgD;EACzD,OAAO,IAAI,cAAc,KAAK,UAAU,IAAI,CAAC;CAC/C;;;;;;;;;;;;;;;;;;CAmBA,AAAO,UAAU,MAAgD;EAC/D,OAAO,KAAK,cAAc,IAAI;CAChC;;;;CAKA,AAAO,KAAK,cAA+B;EACzC,MAAM,WAAW,KAAK,aAAa,SAAS,QAAQ;EAEpD,OAAO,KAAK,KAAK,UAAU,gBAAgB,EAAE;CAC/C;;;;;;;;;;;;;;CAeA,AAAO,SAAS,MAAqD;EACnE,MAAM,WAAW,KAAK,UAAU,IAAI;EAEpC,IAAI,CAAC,KAAK,cAAc,QAAQ,GAC9B,MAAM,IAAI,MAAM,WAAW,KAAK,oCAAoC;EAGtE,OAAO;CACT;;;;;;;;;;;;;;;;;;;;;;;;CAyBA,AAAO,SAAS,MAAyB,QAAmC;EAC1E,KAAK,QAAQ,IAAI,MAAM,MAAM;EAC7B,KAAK,QAAQ,OAAO,IAAI;EACxB,OAAO;CACT;;;;;;;;;;;;;CAcA,AAAO,WAAW,MAA+B;EAC/C,KAAK,oBAAoB;EACzB,KAAK,UAAU,KAAK,UAAU,IAAI;EAClC,OAAO;CACT;;;;;;CAOA,MAAa,UAA4B;EACvC,OAAO,KAAK,cAAc,KAAK,YAAY;CAC7C;;;;;CAMA,AAAU,cAAc,QAAqE;EAC3F,OAAO,qBAAqB;CAC9B;;;;;;;;;;;;;;;;;;;;;;;CA4BA,AAAO,GACL,OACA,SACmB;EACnB,OAAO,OAAO,UAAU,WAAW,SAAS,OAAO;CACrD;;;;;;;;;;;;CAaA,AAAO,IAAI,OAA+B;EACxC,OAAO,IAAI,WAAW,OAAO;EAC7B,OAAO;CACT;;;;;CAMA,MAAgB,KACd,OACA,SACe;EACf,MAAM,OAAO,WAAW,WAAW,SAAS,OAAO;CACrD;;;;;;;;;;;CAgBA,MAAsB,IACpB,MACA,UACA,SACsB;EACtB,MAAM,SAAS,KAAK;EACpB,MAAM,SAAS,MAAM,KAAK,SAAS,IAAI;EAEvC,MAAM,KAAK,KAA6B,aAAa;GACnD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM,OAAO;EACf,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,IAAI,QAAQ,UAAU,OAAO;EAEzD,MAAM,KAAK,KAA6B,YAAY;GAClD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,IAAI,CAAC,OAAO,MACV,OAAO,OAAO,OAAO;EAGvB,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;;;;CAYA,MAAsB,UACpB,QACA,UACA,SACsB;EACtB,MAAM,SAAS,KAAK;EAEpB,MAAM,KAAK,KAA6B,aAAa;GACnD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,IAAI,OAAO,WAAW,UACpB,SAAS,GAAG,iBAAiB,MAAM;EAGrC,MAAM,SAAS,MAAM,OAAO,UAAU,QAAQ,UAAU,OAAO;EAE/D,MAAM,KAAK,KAA6B,YAAY;GAClD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;;;;;;;;;;;;;;;;;;CA0BA,MAAa,WACX,KACA,UACA,SACsB;EACtB,MAAM,EAAE,mBAAmB,UAAU,WAAW,gBAAgB,GAAG,eACjE,WAAW,CAAC;EAEd,MAAM,SAAS,MAAM,kBAAkB,KAAK;GAC1C;GACA;GACA;GACA;EACF,CAAC;EAED,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,kCAAkC,OAAO,YAAY;EAGvE,IAAI,CAAC,OAAO,aACV,MAAM,IAAI,MAAM,4DAA4D;EAG9E,MAAM,WAAW,WAAW,YAAY,OAAO;EAE/C,OAAO,KAAK,IAAI,OAAO,QAAQ,UAAU;GAAE,GAAG;GAAY;EAAS,CAAC;CACtE;;;;;;;;;;;;;;;;;;;;;;;CAwBA,MAAa,cACX,QACA,UACA,SACsB;EACtB,IAAI,OAAO;EACX,IAAI,WAAW,SAAS;EAExB,IAAI,OAAO,WAAW,OAAO,GAAG;GAC9B,MAAM,QAAQ,OAAO,MAAM,4BAA4B;GACvD,IAAI,OAAO;IACT,WAAW,YAAY,MAAM;IAC7B,OAAO,MAAM;GACf;EACF;EAEA,MAAM,SAAS,OAAO,KAAK,MAAM,QAAQ;EACzC,OAAO,KAAK,IAAI,QAAQ,UAAU;GAAE,GAAG;GAAS;EAAS,CAAC;CAC5D;;;;;;;;;CAUA,MAAsB,IAAI,UAAmC;EAC3D,OAAO,KAAK,aAAa,IAAI,QAAQ;CACvC;;;;;;;;;;;;;;;CAgBA,MAAa,QAAQ,UAAgC;EACnD,MAAM,SAAS,MAAM,KAAK,IAAI,QAAQ;EACtC,OAAO,KAAK,MAAM,OAAO,SAAS,CAAC;CACrC;;;;;;;CAQA,MAAsB,UAAU,UAAqC;EACnE,OAAO,KAAK,aAAa,UAAU,QAAQ;CAC7C;;;;;;;;;CAUA,MAAsB,OAAO,UAAkD;EAC7E,MAAM,SAAS,KAAK;EACpB,MAAM,OAAO,OAAO,aAAa,WAAW,WAAW,SAAS;EAEhE,MAAM,KAAK,KAA0B,gBAAgB;GACnD,QAAQ,OAAO;GACf,UAAU;GACV,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,OAAO,IAAI;EAEvC,MAAM,KAAK,KAA0B,eAAe;GAClD,QAAQ,OAAO;GACf,UAAU;GACV,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,OAAO;CACT;;;;;;;CAQA,MAAsB,WAAW,WAAkD;EACjF,OAAO,KAAK,aAAa,WAAW,SAAS;CAC/C;;;;;;;CAQA,MAAsB,OAAO,UAAoC;EAC/D,OAAO,KAAK,aAAa,OAAO,QAAQ;CAC1C;;;;;;;;;;CAWA,MAAsB,KAAK,MAA4B,IAAkC;EACvF,MAAM,SAAS,KAAK;EACpB,MAAM,WAAW,OAAO,SAAS,WAAW,OAAO,KAAK;EAExD,MAAM,KAAK,KAA8B,cAAc;GACrD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU,EAAE;EAE7C,MAAM,KAAK,KAA8B,aAAa;GACpD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;;;CAWA,MAAsB,KAAK,MAA4B,IAAkC;EACvF,MAAM,SAAS,KAAK;EACpB,MAAM,WAAW,OAAO,SAAS,WAAW,OAAO,KAAK;EAExD,MAAM,KAAK,KAA8B,cAAc;GACrD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU,EAAE;EAE7C,MAAM,KAAK,KAA8B,aAAa;GACpD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;CASA,MAAsB,KACpB,WACA,SAC4B;EAC5B,OAAO,KAAK,aAAa,KAAK,aAAa,IAAI,OAAO;CACxD;;;;;;;CAYA,MAAsB,SAAS,UAA4C;EACzE,OAAO,KAAK,aAAa,SAAS,QAAQ;CAC5C;;;;;;;CAQA,MAAsB,KAAK,UAAmC;EAC5D,OAAO,KAAK,aAAa,KAAK,QAAQ;CACxC;;;;;;;;;;CAeA,MAAa,KAAK,UAAmC;EACnD,MAAM,SAAS,KAAK;EAEpB,IAAI,EAAE,UAAU,WAAW,OAAO,OAAO,SAAS,YAChD,MAAM,IAAI,MAAM,oDAAoD;EAGtE,OAAO,OAAO,KAAK,QAAQ;CAC7B;;;;;;;;;;;;;;;;;;CAuBA,MAAa,gBAAgB,UAAkB,SAA6C;EAC1F,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,6DAA6D;EAG/E,OAAO,OAAO,gBAAgB,UAAU,OAAO;CACjD;;;;;;;;;;;;;;;;;;;;;;;CAwBA,MAAa,sBACX,UACA,SACiB;EACjB,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,oEAAoE;EAGtF,OAAO,OAAO,sBAAsB,UAAU,OAAO;CACvD;;;;;;;;;CAUA,MAAa,YAA6B;EACxC,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,gEAAgE;EAGlF,OAAO,OAAO,UAAU;CAC1B;;;;;;;;;CAUA,MAAa,YAA6B;EACxC,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,gEAAgE;EAGlF,OAAO,OAAO,UAAU;CAC1B;;;;;;;;;;CAWA,MAAa,gBAAgB,UAAkB,cAAqC;EAClF,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,2DAA2D;EAG7E,OAAO,OAAO,gBAAgB,UAAU,YAAY;CACtD;;;;;;;;;;CAWA,MAAa,cAAc,UAAkB,YAA2C;EACtF,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,wDAAwD;EAG1E,OAAO,OAAO,cAAc,UAAU,UAAU;CAClD;;;;;;;;;;CAWA,MAAa,cAAc,UAA2C;EACpE,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,wDAAwD;EAG1E,OAAO,OAAO,cAAc,QAAQ;CACtC;;;;;;;;;;CAWA,MAAsB,aAAa,UAAkB,WAAqC;EACxF,OAAO,KAAK,aAAa,aAAa,UAAU,SAAS;CAC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BA,MAAa,uBAAuB,OAAkD;EAEpF,IACE,EAAE,4BAA4B,KAAK,iBACnC,OAAO,KAAK,aAAa,2BAA2B,YAGpD,OAAO;GACL,OAAO;GACP,OAAO;EACT;EAGF,OAAO,KAAK,aAAa,uBAAuB,KAAK;CACvD;;;;;CAUA,AAAU,aACR,QACgF;EAChF,MAAM,EAAE,QAAQ,GAAG,YAAY;EAE/B,QAAQ,QAAR;GACE,KAAK,SACH,OAAO;IACL,MAAM,QAAQ;IACd,WAAW,QAAQ;IACnB,cAAc,QAAQ;GACxB;GAEF,KAAK;IACH,KAAK,oBAAoB,QAAQ,IAAI;IACrC,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ;KAChB,QAAQ,QAAQ;KAChB,aAAa,QAAQ;KACrB,iBAAiB,QAAQ;KACzB,UAAU,QAAQ;KAClB,WAAW,QAAQ;IACrB;GAEF,KAAK;IACH,KAAK,oBAAoB,QAAQ,IAAI;IACrC,IAAI,CAAC,QAAQ,WACX,MAAM,IAAI,MAAM,gDAA8C;IAGhE,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ,UAAU;KAC1B,QAAQ,QAAQ;KAChB,aAAa,QAAQ;KACrB,iBAAiB,QAAQ;KACzB,UAAU,QAAQ;KAClB,WAAW,QAAQ;KACnB,WAAW,QAAQ;KACnB,cAAc,QAAQ;IACxB;GAEF,KAAK;IACH,KAAK,oBAAoB,QAAQ,QAAQ;IACzC,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ;KAChB,QAAQ,QAAQ;KAChB,aAAa,QAAQ;KACrB,iBAAiB,QAAQ;KACzB,UAAU,QAAQ;KAClB,WAAW,QAAQ;IACrB;GAEF,SACE,MAAM,IAAI,MAAM,wBAAwB,QAAQ;EACpD;CACF;;;;;CAMA,AAAU,oBAAoB,QAA6B,YAA0B;EACnF,MAAM,WAAW;GAAC;GAAU;GAAe;EAAiB;EAE5D,IAAI,eAAe,MACjB,SAAS,KAAK,QAAQ;EAGxB,KAAK,MAAM,SAAS,UAClB,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,MAAM,GAAG,WAAW,YAAY,EAAE,oBAAoB,MAAM,gBAAgB;CAG5F;;;;;CAMA,AAAU,cAAc,MAAqC;EAG3D,IAAI,KAAK,QAAQ,IAAI,IAAI,GACvB,OAAO,KAAK,QAAQ,IAAI,IAAI;EAG9B,MAAM,SAAS,KAAK,QAAQ,IAAI,IAAI;EAEpC,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,mBAAmB,KAAK,oBAAoB;EAG9D,MAAM,UAAU,KAAK,aAAa,MAAM;EACxC,IAAI;EAEJ,QAAQ,OAAO,QAAf;GACE,KAAK;IACH,SAAS,IAAI,YAAY,OAAoC;IAC7D;GACF,KAAK;IACH,SAAS,IAAI,SAAS,OAAoC;IAC1D;GACF,KAAK;IACH,SAAS,IAAI,SAAS,OAAiC;IACvD;GACF,KAAK;IACH,SAAS,IAAI,eAAe,OAAoC;IAChE;GACF,SACE,MAAM,IAAI,MAAM,gCAAgC,OAAO,QAAQ;EACnE;EAEA,KAAK,QAAQ,IAAI,MAAM,MAAM;EAC7B,OAAO;CACT;;;;;CAMA,MAAgB,uBAAmD;EACjE,MAAM,WAAW,cAAc,UAAU;EAEzC,IAAI,UAEF,OAAO,MADgB,SAAS,KACb,KAAK;EAG1B,OAAO,KAAK;CACd;AACF;;;;;;;;;;;;;AAcA,MAAa,UAAU,IAAI,QAAQ"}
+{"version":3,"file":"storage.mjs","names":[],"sources":["../../../../../../../core/src/storage/storage.ts"],"sourcesContent":["import events, { type EventSubscription } from \"@mongez/events\";\nimport fs from \"fs\";\nimport path from \"path\";\nimport type { Readable } from \"stream\";\nimport type { UploadedFile } from \"../http\";\nimport { storageConfig } from \"./config\";\nimport { storageDriverContext } from \"./context/storage-driver-context\";\nimport { DOSpacesDriver } from \"./drivers/do-spaces-driver\";\nimport { LocalDriver } from \"./drivers/local-driver\";\nimport { R2Driver } from \"./drivers/r2-driver\";\nimport { S3Driver } from \"./drivers/s3-driver\";\nimport { ScopedStorage } from \"./scoped-storage\";\nimport { StorageFile } from \"./storage-file\";\nimport { safeFetchToBuffer } from \"./utils/safe-fetch\";\nimport type {\n  CloudStorageDriverContract,\n  CloudStorageDriverOptions,\n  DeleteManyResult,\n  FileVisibility,\n  ListOptions,\n  LocalStorageDriverOptions,\n  PresignedOptions,\n  PresignedUploadOptions,\n  PutFromUrlOptions,\n  PutOptions,\n  R2StorageDriverOptions,\n  ScopedStorageContract,\n  StorageCopyEventPayload,\n  StorageDriverConfig,\n  StorageDriverContract,\n  StorageDriverName,\n  StorageEventHandler,\n  StorageEventPayload,\n  StorageEventType,\n  StorageFileInfo,\n  StorageManagerContract,\n  StoragePutEventPayload,\n  TemporaryTokenValidation,\n} from \"./types\";\n\n/**\n * Storage Manager\n *\n * Provides a unified interface for file storage operations across multiple\n * drivers (local, S3, R2, DigitalOcean Spaces). Extends `ScopedStorage` to\n * inherit all base operations while adding driver management and events.\n *\n * All operations return `StorageFile` instances for a consistent, rich DX.\n *\n * @example\n * ```typescript\n * // Basic usage (uses default driver)\n * const file = await storage.put(buffer, \"uploads/image.jpg\");\n *\n * // With options\n * const file = await storage.put(buffer, \"uploads/image.jpg\", {\n *   mimeType: \"image/jpeg\",\n *   cacheControl: \"max-age=31536000\"\n * });\n *\n * // Using specific driver (also returns StorageFile)\n * const file = await storage.use(\"s3\").put(buffer, \"path/to/file\");\n *\n * // Get raw driver for advanced use\n * const driver = storage.driver(\"s3\");\n * const data = await driver.put(buffer, \"path/to/file\"); // Returns StorageFileData\n *\n * // Stream operations for large files\n * const stream = await storage.getStream(\"large-file.zip\");\n * await storage.putStream(readableStream, \"output/file.zip\");\n *\n * // Batch operations\n * const results = await storage.deleteMany([\"file1.txt\", \"file2.txt\"]);\n *\n * // Event hooks\n * storage.on(\"afterPut\", ({ location, file }) => {\n *   console.log(`Uploaded ${location}`);\n * });\n * ```\n */\nexport class Storage extends ScopedStorage implements StorageManagerContract {\n  /**\n   * Registered drivers (cached instances)\n   * @internal\n   */\n  protected drivers = new Map<string, StorageDriverContract>();\n\n  /**\n   * Driver configurations\n   * @internal\n   */\n  protected configs = new Map<string, StorageDriverConfig>();\n\n  /**\n   * Default driver name\n   * @internal\n   */\n  protected defaultDriverName!: StorageDriverName;\n\n  /**\n   * Whether the storage has been initialized\n   * @internal\n   */\n  private initialized = false;\n\n  /**\n   * Create a new Storage manager instance\n   *\n   * Uses lazy initialization - driver is resolved on first access.\n   */\n  public constructor() {\n    // Temp placeholder - will be replaced on first access\n    super(null as unknown as StorageDriverContract);\n  }\n\n  /**\n   * Ensure storage is initialized (lazy initialization)\n   *\n   * Called automatically on first driver access.\n   */\n  public async init(): Promise<void> {\n    if (this.initialized) return;\n\n    // Mark as initialized FIRST to prevent infinite recursion\n    this.initialized = true;\n\n    // Get default driver name from config\n\n    const defaultName = storageConfig(\"default\", \"local\");\n\n    this.defaultDriverName = defaultName as StorageDriverName;\n    this.loadDriversFromConfig();\n\n    // Now set the actual driver\n    this._driver = this.resolveDriver(this.defaultDriverName);\n  }\n\n  /**\n   * Reset storage defaults\n   */\n  public reset(): void {\n    this.initialized = false;\n    this.drivers.clear();\n    this.configs.clear();\n    this.defaultDriverName = null as unknown as StorageDriverName;\n    this._driver = null as unknown as StorageDriverContract;\n  }\n\n  /**\n   * Get the currently active driver (context-aware in future)\n   *\n   * Currently returns the default driver.\n   * Will be enhanced to check AsyncLocalStorage context for multi-tenant support.\n   *\n   * @returns The active storage driver\n   */\n  public override get activeDriver(): StorageDriverContract {\n    // Check context for tenant-specific driver\n    const contextDriver = storageDriverContext.getDriver();\n\n    if (contextDriver) return contextDriver;\n\n    return this._driver;\n  }\n\n  // ============================================================\n  // Driver Management\n  // ============================================================\n\n  /**\n   * Load drivers from configuration\n   * @internal\n   */\n  protected loadDriversFromConfig(): void {\n    const drivers = storageConfig<Record<string, StorageDriverConfig>>(\"drivers\", {});\n\n    for (const [name, config] of Object.entries(drivers)) {\n      this.configs.set(name, config);\n    }\n  }\n\n  /**\n   * Get a scoped storage for a specific driver\n   *\n   * Returns a `ScopedStorage` instance that wraps the specified driver.\n   * Operations on the returned instance also return `StorageFile` objects.\n   *\n   * @param name - Driver name as defined in configuration\n   * @returns ScopedStorage instance for the specified driver\n   *\n   * @example\n   * ```typescript\n   * // Upload to S3\n   * const s3File = await storage.use(\"s3\").put(buffer, \"images/photo.jpg\");\n   *\n   * // Upload to local\n   * const localFile = await storage.use(\"local\").put(buffer, \"temp/file.txt\");\n   *\n   * // Both return StorageFile with identical API\n   * console.log(s3File.url);\n   * console.log(localFile.url);\n   * ```\n   */\n  public use(name: StorageDriverName): ScopedStorageContract {\n    return new ScopedStorage(this.getDriver(name));\n  }\n\n  /**\n   * Get a raw driver instance\n   *\n   * Returns the underlying driver directly for advanced use cases.\n   * Unlike `use()`, calling methods on the raw driver returns\n   * `StorageFileData` instead of `StorageFile`.\n   *\n   * @param name - Driver name as defined in configuration\n   * @returns Raw driver instance implementing StorageDriverContract\n   *\n   * @example\n   * ```typescript\n   * const driver = storage.getDriver(\"s3\");\n   * const data = await driver.put(buffer, \"path/to/file\");\n   * // data is StorageFileData, not StorageFile\n   * ```\n   */\n  public getDriver(name: StorageDriverName): StorageDriverContract {\n    return this.resolveDriver(name);\n  }\n\n  /**\n   * Get root directory of current driver\n   */\n  public root(apepndedPath?: string): string {\n    const rootPath = this.activeDriver.options?.root || \"\";\n\n    return path.join(rootPath, apepndedPath || \"\");\n  }\n\n  /**\n   * Use a cloud storage driver with extended cloud capabilities\n   *\n   * @param name - Cloud driver name (s3, r2, spaces)\n   * @returns Driver instance implementing CloudStorageDriverContract\n   * @throws Error if driver doesn't support cloud operations\n   *\n   * @example\n   * ```typescript\n   * const cloudDriver = storage.useCloud(\"s3\");\n   * const presignedUrl = await cloudDriver.getPresignedUrl(\"private/doc.pdf\");\n   * ```\n   */\n  public useCloud(name: StorageDriverName): CloudStorageDriverContract {\n    const instance = this.getDriver(name);\n\n    if (!this.isCloudDriver(instance)) {\n      throw new Error(`Driver \"${name}\" does not support cloud operations`);\n    }\n\n    return instance as CloudStorageDriverContract;\n  }\n\n  /**\n   * Register a new driver configuration at runtime\n   *\n   * Allows dynamic driver registration for multi-tenancy or\n   * runtime configuration scenarios.\n   *\n   * @param name - Unique driver name\n   * @param config - Driver configuration\n   * @returns This instance for chaining\n   *\n   * @example\n   * ```typescript\n   * storage.register(\"tenant-s3\", {\n   *   driver: \"s3\",\n   *   bucket: \"tenant-bucket\",\n   *   region: \"us-east-1\",\n   *   accessKeyId: process.env.TENANT_AWS_KEY,\n   *   secretAccessKey: process.env.TENANT_AWS_SECRET\n   * });\n   *\n   * await storage.use(\"tenant-s3\").put(buffer, \"file.txt\");\n   * ```\n   */\n  public register(name: StorageDriverName, config: StorageDriverConfig): this {\n    this.configs.set(name, config);\n    this.drivers.delete(name); // Clear cached instance\n    return this;\n  }\n\n  /**\n   * Set the default driver name\n   *\n   * @param name - Driver name to use as default\n   * @returns This instance for chaining\n   *\n   * @example\n   * ```typescript\n   * storage.setDefault(\"s3\");\n   * await storage.put(buffer, \"file.txt\"); // Now uses S3\n   * ```\n   */\n  public setDefault(name: StorageDriverName): this {\n    this.defaultDriverName = name;\n    this._driver = this.getDriver(name);\n    return this;\n  }\n\n  /**\n   * Check if current driver is a cloud driver\n   *\n   * @returns Promise resolving to true if the current driver supports cloud operations\n   */\n  public async isCloud(): Promise<boolean> {\n    return this.isCloudDriver(this.activeDriver);\n  }\n\n  /**\n   * Check if a driver instance supports cloud operations\n   * @internal\n   */\n  protected isCloudDriver(driver: StorageDriverContract): driver is CloudStorageDriverContract {\n    return \"getPresignedUrl\" in driver;\n  }\n\n  // ============================================================\n  // Event System\n  // ============================================================\n\n  /**\n   * Register an event handler\n   *\n   * Subscribe to storage events for logging, analytics, or side effects.\n   *\n   * @param event - Event type to listen for\n   * @param handler - Handler function\n   * @returns Event subscription for unsubscribing\n   *\n   * @example\n   * ```typescript\n   * // Log all uploads\n   * storage.on(\"afterPut\", ({ location, file }) => {\n   *   console.log(`Uploaded ${file?.size} bytes to ${location}`);\n   * });\n   *\n   * // Track deletions\n   * storage.on(\"afterDelete\", ({ location }) => {\n   *   analytics.track(\"file_deleted\", { path: location });\n   * });\n   * ```\n   */\n  public on<T extends StorageEventPayload = StorageEventPayload>(\n    event: StorageEventType,\n    handler: StorageEventHandler<T>,\n  ): EventSubscription {\n    return events.subscribe(`storage.${event}`, handler);\n  }\n\n  /**\n   * Remove all handlers for an event type\n   *\n   * @param event - Event type to remove handlers for\n   * @returns This instance for chaining\n   *\n   * @example\n   * ```typescript\n   * storage.off(\"afterPut\"); // Remove all afterPut handlers\n   * ```\n   */\n  public off(event: StorageEventType): this {\n    events.off(`storage.${event}`);\n    return this;\n  }\n\n  /**\n   * Emit an event to all registered handlers\n   * @internal\n   */\n  protected async emit<T extends StorageEventPayload>(\n    event: StorageEventType,\n    payload: T,\n  ): Promise<void> {\n    await events.triggerAll(`storage.${event}`, payload);\n  }\n\n  // ============================================================\n  // Overridden Operations with Events\n  // ============================================================\n\n  /**\n   * Store a file in storage\n   *\n   * Extends base `put()` with event emission for beforePut/afterPut hooks.\n   *\n   * @param file - File content as Buffer, string, UploadedFile, or Readable stream\n   * @param location - Destination path\n   * @param options - Storage options (mimeType, cacheControl, etc.)\n   * @returns StorageFile instance with cached metadata\n   */\n  public override async put(\n    file: UploadedFile | Buffer | string | Readable,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFile> {\n    const driver = this.activeDriver;\n    const buffer = await this.toBuffer(file);\n\n    await this.emit<StoragePutEventPayload>(\"beforePut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n      size: buffer.length,\n    });\n\n    const result = await driver.put(buffer, location, options);\n\n    await this.emit<StoragePutEventPayload>(\"afterPut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    if (!result.size) {\n      result.size = buffer.length;\n    }\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * Store a file from a readable stream (for large files)\n   *\n   * Extends base `putStream()` with event emission.\n   *\n   * @param stream - Readable stream\n   * @param location - Destination path\n   * @param options - Storage options\n   * @returns StorageFile instance with cached metadata\n   */\n  public override async putStream(\n    stream: Readable | string,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFile> {\n    const driver = this.activeDriver;\n\n    await this.emit<StoragePutEventPayload>(\"beforePut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n    });\n\n    if (typeof stream === \"string\") {\n      stream = fs.createReadStream(stream);\n    }\n\n    const result = await driver.putStream(stream, location, options);\n\n    await this.emit<StoragePutEventPayload>(\"afterPut\", {\n      driver: driver.name,\n      location,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * Store a file from a URL\n   *\n   * Downloads content from the URL and stores it at the specified location.\n   *\n   * The download is SSRF-guarded by default: the URL scheme must be\n   * https/http, the host must not resolve to a private / loopback /\n   * link-local / cloud-metadata address, the body is capped, and the\n   * request times out. Tune or relax via the {@link PutFromUrlOptions}\n   * guard fields.\n   *\n   * @param url - Source URL to download from\n   * @param location - Destination path\n   * @param options - Storage + outbound-download guard options\n   * @returns StorageFile instance with cached metadata\n   *\n   * @example\n   * ```typescript\n   * const file = await storage.putFromUrl(\n   *   \"https://example.com/image.jpg\",\n   *   \"downloads/image.jpg\"\n   * );\n   * ```\n   */\n  public async putFromUrl(\n    url: string,\n    location: string,\n    options?: PutFromUrlOptions,\n  ): Promise<StorageFile> {\n    const { allowPrivateHosts, maxBytes, timeoutMs, allowedSchemes, ...putOptions } =\n      options ?? {};\n\n    const result = await safeFetchToBuffer(url, {\n      allowPrivateHosts,\n      maxBytes,\n      timeoutMs,\n      allowedSchemes,\n    });\n\n    if (!result.ok) {\n      throw new Error(`Failed to fetch file from URL: ${result.statusText}`);\n    }\n\n    if (!result.contentType) {\n      throw new Error(`Failed to fetch file from URL: missing content-type header`);\n    }\n\n    const mimeType = putOptions.mimeType || result.contentType;\n\n    return this.put(result.buffer, location, { ...putOptions, mimeType });\n  }\n\n  /**\n   * Store a file from base64 encoded string\n   *\n   * Decodes base64 content (with optional data URL prefix) and stores it.\n   *\n   * @param base64 - Base64 encoded file content (or data URL)\n   * @param location - Destination path\n   * @param options - Storage options\n   * @returns StorageFile instance with cached metadata\n   *\n   * @example\n   * ```typescript\n   * // From plain base64\n   * const file = await storage.putFromBase64(base64String, \"images/photo.jpg\");\n   *\n   * // From data URL (auto-extracts MIME type)\n   * const file = await storage.putFromBase64(\n   *   \"data:image/png;base64,iVBORw0KGgo...\",\n   *   \"images/photo.png\"\n   * );\n   * ```\n   */\n  public async putFromBase64(\n    base64: string,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFile> {\n    let data = base64;\n    let mimeType = options?.mimeType;\n\n    if (base64.startsWith(\"data:\")) {\n      const match = base64.match(/^data:([^;]+);base64,(.+)$/);\n      if (match) {\n        mimeType = mimeType || match[1];\n        data = match[2];\n      }\n    }\n\n    const buffer = Buffer.from(data, \"base64\");\n    return this.put(buffer, location, { ...options, mimeType });\n  }\n\n  /**\n   * Retrieve file contents as Buffer\n   *\n   * Uses the current driver (with async resolution).\n   *\n   * @param location - File path\n   * @returns Buffer containing file contents\n   */\n  public override async get(location: string): Promise<Buffer> {\n    return this.activeDriver.get(location);\n  }\n\n  /**\n   * Get JSON content from a file\n   *\n   * Downloads and parses JSON file content.\n   *\n   * @param location - File path\n   * @returns Parsed JSON content\n   *\n   * @example\n   * ```typescript\n   * const config = await storage.getJson(\"config/settings.json\");\n   * console.log(config.apiKey);\n   * ```\n   */\n  public async getJson(location: string): Promise<any> {\n    const buffer = await this.get(location);\n    return JSON.parse(buffer.toString());\n  }\n\n  /**\n   * Retrieve a file as a readable stream (for large files)\n   *\n   * @param location - File path\n   * @returns Readable stream of file contents\n   */\n  public override async getStream(location: string): Promise<Readable> {\n    return this.activeDriver.getStream(location);\n  }\n\n  /**\n   * Delete a file\n   *\n   * Extends base `delete()` with event emission.\n   *\n   * @param location - File path or StorageFile\n   * @returns true if deleted, false if not found\n   */\n  public override async delete(location: string | StorageFile): Promise<boolean> {\n    const driver = this.activeDriver;\n    const path = typeof location === \"string\" ? location : location.path;\n\n    await this.emit<StorageEventPayload>(\"beforeDelete\", {\n      driver: driver.name,\n      location: path,\n      timestamp: new Date(),\n    });\n\n    const result = await driver.delete(path);\n\n    await this.emit<StorageEventPayload>(\"afterDelete\", {\n      driver: driver.name,\n      location: path,\n      timestamp: new Date(),\n    });\n\n    return result;\n  }\n\n  /**\n   * Delete multiple files at once\n   *\n   * @param locations - Array of file paths\n   * @returns Array of delete results with status for each file\n   */\n  public override async deleteMany(locations: string[]): Promise<DeleteManyResult[]> {\n    return this.activeDriver.deleteMany(locations);\n  }\n\n  /**\n   * Check if a file exists\n   *\n   * @param location - File path\n   * @returns true if file exists\n   */\n  public override async exists(location: string): Promise<boolean> {\n    return this.activeDriver.exists(location);\n  }\n\n  /**\n   * Copy a file to a new location\n   *\n   * Extends base `copy()` with event emission.\n   *\n   * @param from - Source path or StorageFile\n   * @param to - Destination path\n   * @returns StorageFile instance at destination\n   */\n  public override async copy(from: string | StorageFile, to: string): Promise<StorageFile> {\n    const driver = this.activeDriver;\n    const fromPath = typeof from === \"string\" ? from : from.path;\n\n    await this.emit<StorageCopyEventPayload>(\"beforeCopy\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n    });\n\n    const result = await driver.copy(fromPath, to);\n\n    await this.emit<StorageCopyEventPayload>(\"afterCopy\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * Move a file to a new location\n   *\n   * Extends base `move()` with event emission.\n   *\n   * @param from - Source path or StorageFile\n   * @param to - Destination path\n   * @returns StorageFile instance at destination\n   */\n  public override async move(from: string | StorageFile, to: string): Promise<StorageFile> {\n    const driver = this.activeDriver;\n    const fromPath = typeof from === \"string\" ? from : from.path;\n\n    await this.emit<StorageCopyEventPayload>(\"beforeMove\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n    });\n\n    const result = await driver.move(fromPath, to);\n\n    await this.emit<StorageCopyEventPayload>(\"afterMove\", {\n      driver: driver.name,\n      location: to,\n      from: fromPath,\n      to,\n      timestamp: new Date(),\n      file: result,\n    });\n\n    return StorageFile.fromData(result, driver);\n  }\n\n  /**\n   * List files in a directory\n   *\n   * @param directory - Directory path (defaults to root)\n   * @param options - List options (recursive, limit, etc.)\n   * @returns Array of file information objects\n   */\n  public override async list(\n    directory?: string,\n    options?: ListOptions,\n  ): Promise<StorageFileInfo[]> {\n    return this.activeDriver.list(directory || \"\", options);\n  }\n\n  // ============================================================\n  // Metadata Operations\n  // ============================================================\n\n  /**\n   * Get file metadata without downloading\n   *\n   * @param location - File path\n   * @returns File information object\n   */\n  public override async metadata(location: string): Promise<StorageFileInfo> {\n    return this.activeDriver.metadata(location);\n  }\n\n  /**\n   * Get file size in bytes\n   *\n   * @param location - File path\n   * @returns File size in bytes\n   */\n  public override async size(location: string): Promise<number> {\n    return this.activeDriver.size(location);\n  }\n\n  // ============================================================\n  // Path Operations (Local Driver Only)\n  // ============================================================\n\n  /**\n   * Get the absolute filesystem path for a location\n   *\n   * Only available for local driver.\n   *\n   * @param location - File path\n   * @throws Error if current driver is not a local driver\n   * @returns Absolute filesystem path\n   */\n  public async path(location: string): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!(\"path\" in driver) || typeof driver.path !== \"function\") {\n      throw new Error(\"path() is only available for local storage drivers\");\n    }\n\n    return driver.path(location);\n  }\n\n  // ============================================================\n  // Cloud-Specific Operations\n  // ============================================================\n\n  /**\n   * Get a presigned URL for downloading a file\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @param options - Presigned URL options (expiresIn)\n   * @throws Error if current driver is not a cloud driver\n   * @returns Presigned download URL\n   *\n   * @example\n   * ```typescript\n   * const url = await storage.getPresignedUrl(\"private/document.pdf\", {\n   *   expiresIn: 3600 // 1 hour\n   * });\n   * ```\n   */\n  public async getPresignedUrl(location: string, options?: PresignedOptions): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Presigned URLs are only available for cloud storage drivers\");\n    }\n\n    return driver.getPresignedUrl(location, options);\n  }\n\n  /**\n   * Get a presigned URL for uploading a file directly to cloud storage\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - Destination path\n   * @param options - Upload options (expiresIn, contentType, metadata).\n   *   There is no size cap: a presigned PUT URL cannot enforce one — verify\n   *   the uploaded size server-side or use a presigned POST policy instead.\n   * @throws Error if current driver is not a cloud driver\n   * @returns Presigned upload URL\n   *\n   * @example\n   * ```typescript\n   * const uploadUrl = await storage.getPresignedUploadUrl(\"uploads/file.pdf\", {\n   *   expiresIn: 3600,\n   *   contentType: \"application/pdf\"\n   * });\n   *\n   * // Client can PUT directly to this URL\n   * ```\n   */\n  public async getPresignedUploadUrl(\n    location: string,\n    options?: PresignedUploadOptions,\n  ): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Presigned upload URLs are only available for cloud storage drivers\");\n    }\n\n    return driver.getPresignedUploadUrl(location, options);\n  }\n\n  /**\n   * Get the bucket name for cloud storage\n   *\n   * Only available for cloud drivers.\n   *\n   * @throws Error if current driver is not a cloud driver\n   * @returns Bucket name\n   */\n  public async getBucket(): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Bucket information is only available for cloud storage drivers\");\n    }\n\n    return driver.getBucket();\n  }\n\n  /**\n   * Get the region for cloud storage\n   *\n   * Only available for cloud drivers.\n   *\n   * @throws Error if current driver is not a cloud driver\n   * @returns Region name\n   */\n  public async getRegion(): Promise<string> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Region information is only available for cloud storage drivers\");\n    }\n\n    return driver.getRegion();\n  }\n\n  /**\n   * Set storage class for a file (e.g., STANDARD, GLACIER, etc.)\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @param storageClass - Target storage class\n   * @throws Error if current driver is not a cloud driver\n   */\n  public async setStorageClass(location: string, storageClass: string): Promise<void> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Storage class is only available for cloud storage drivers\");\n    }\n\n    return driver.setStorageClass(location, storageClass);\n  }\n\n  /**\n   * Set file visibility (public or private)\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @param visibility - \"public\" or \"private\"\n   * @throws Error if current driver is not a cloud driver\n   */\n  public async setVisibility(location: string, visibility: FileVisibility): Promise<void> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Visibility is only available for cloud storage drivers\");\n    }\n\n    return driver.setVisibility(location, visibility);\n  }\n\n  /**\n   * Get file visibility\n   *\n   * Only available for cloud drivers.\n   *\n   * @param location - File path\n   * @throws Error if current driver is not a cloud driver\n   * @returns Current visibility setting\n   */\n  public async getVisibility(location: string): Promise<FileVisibility> {\n    const driver = this.activeDriver;\n\n    if (!this.isCloudDriver(driver)) {\n      throw new Error(\"Visibility is only available for cloud storage drivers\");\n    }\n\n    return driver.getVisibility(location);\n  }\n\n  /**\n   * Get a temporary signed URL\n   *\n   * Creates a URL that provides temporary access to the file.\n   *\n   * @param location - File path\n   * @param expiresIn - Seconds until expiration (default: 3600)\n   * @returns Signed URL string\n   */\n  public override async temporaryUrl(location: string, expiresIn?: number): Promise<string> {\n    return this.activeDriver.temporaryUrl(location, expiresIn);\n  }\n\n  /**\n   * Validate a temporary URL token\n   *\n   * For local driver: validates HMAC-signed tokens\n   * For cloud drivers: returns invalid (cloud validates via presigned URL)\n   *\n   * @param token - The token from the temporary URL\n   * @returns Validation result with file info and convenience methods\n   *\n   * @example\n   * ```typescript\n   * const result = await storage.validateTemporaryToken(token);\n   *\n   * if (!result.valid) {\n   *   return response.status(403).send(result.error);\n   * }\n   *\n   * // For local driver - use sendFile for efficiency\n   * if (result.absolutePath) {\n   *   return response.sendFile(result.absolutePath);\n   * }\n   *\n   * // For cloud driver - stream the file\n   * const stream = await result.getStream!();\n   * stream.pipe(response.raw);\n   * ```\n   */\n  public async validateTemporaryToken(token: string): Promise<TemporaryTokenValidation> {\n    // Check if driver supports token validation\n    if (\n      !(\"validateTemporaryToken\" in this.activeDriver) ||\n      typeof this.activeDriver.validateTemporaryToken !== \"function\"\n    ) {\n      // For cloud drivers, temporary URLs are presigned and validated by the cloud provider\n      return {\n        valid: false,\n        error: \"invalid_token\",\n      };\n    }\n\n    return this.activeDriver.validateTemporaryToken(token);\n  }\n\n  // ============================================================\n  // Configuration Parsing\n  // ============================================================\n\n  /**\n   * Parse config into driver-specific options\n   * @internal\n   */\n  protected parseOptions(\n    config: StorageDriverConfig,\n  ): LocalStorageDriverOptions | CloudStorageDriverOptions | R2StorageDriverOptions {\n    const { driver, ...options } = config;\n\n    switch (driver) {\n      case \"local\":\n        return {\n          root: options.root,\n          urlPrefix: options.urlPrefix,\n          signatureKey: options.signatureKey,\n        } satisfies LocalStorageDriverOptions;\n\n      case \"s3\":\n        this.validateCloudConfig(config, \"s3\");\n        return {\n          ...options,\n          bucket: options.bucket!,\n          region: options.region!,\n          accessKeyId: options.accessKeyId!,\n          secretAccessKey: options.secretAccessKey!,\n          endpoint: options.endpoint,\n          urlPrefix: options.urlPrefix,\n        } satisfies CloudStorageDriverOptions;\n\n      case \"r2\":\n        this.validateCloudConfig(config, \"r2\");\n        if (!options.accountId) {\n          throw new Error('R2 driver requires \"accountId\" configuration');\n        }\n\n        return {\n          ...options,\n          region: options.region || \"auto\",\n          bucket: options.bucket!,\n          accessKeyId: options.accessKeyId!,\n          secretAccessKey: options.secretAccessKey!,\n          endpoint: options.endpoint,\n          urlPrefix: options.urlPrefix,\n          accountId: options.accountId,\n          publicDomain: options.publicDomain,\n        } satisfies R2StorageDriverOptions;\n\n      case \"spaces\":\n        this.validateCloudConfig(config, \"spaces\");\n        return {\n          ...options,\n          bucket: options.bucket!,\n          region: options.region!,\n          accessKeyId: options.accessKeyId!,\n          secretAccessKey: options.secretAccessKey!,\n          endpoint: options.endpoint,\n          urlPrefix: options.urlPrefix,\n        } satisfies CloudStorageDriverOptions;\n\n      default:\n        throw new Error(`Unknown driver type: ${driver}`);\n    }\n  }\n\n  /**\n   * Validate cloud driver configuration has required fields\n   * @internal\n   */\n  protected validateCloudConfig(config: StorageDriverConfig, driverName: string): void {\n    const required = [\"bucket\", \"accessKeyId\", \"secretAccessKey\"];\n\n    if (driverName !== \"r2\") {\n      required.push(\"region\");\n    }\n\n    for (const field of required) {\n      if (!config[field as keyof StorageDriverConfig]) {\n        throw new Error(`${driverName.toUpperCase()} driver requires \"${field}\" configuration`);\n      }\n    }\n  }\n\n  /**\n   * Get or create driver instance from cache\n   * @internal\n   */\n  protected resolveDriver(name: string): StorageDriverContract {\n    // Ensure configs are loaded\n\n    if (this.drivers.has(name)) {\n      return this.drivers.get(name)!;\n    }\n\n    const config = this.configs.get(name);\n\n    if (!config) {\n      throw new Error(`Storage driver \"${name}\" is not configured`);\n    }\n\n    const options = this.parseOptions(config);\n    let driver: StorageDriverContract;\n\n    switch (config.driver) {\n      case \"local\":\n        driver = new LocalDriver(options as LocalStorageDriverOptions);\n        break;\n      case \"s3\":\n        driver = new S3Driver(options as CloudStorageDriverOptions);\n        break;\n      case \"r2\":\n        driver = new R2Driver(options as R2StorageDriverOptions);\n        break;\n      case \"spaces\":\n        driver = new DOSpacesDriver(options as CloudStorageDriverOptions);\n        break;\n      default:\n        throw new Error(`Unknown storage driver type: ${config.driver}`);\n    }\n\n    this.drivers.set(name, driver);\n    return driver;\n  }\n\n  /**\n   * Resolve the default driver name (supports async resolver for multi-tenancy)\n   * @internal\n   */\n  protected async resolveDefaultDriver(): Promise<StorageDriverName> {\n    const resolver = storageConfig(\"resolver\");\n\n    if (resolver) {\n      const resolved = await resolver();\n      return resolved || this.defaultDriverName;\n    }\n\n    return this.defaultDriverName;\n  }\n}\n\n/**\n * Singleton storage instance\n *\n * Pre-configured storage manager ready for use throughout the application.\n *\n * @example\n * ```typescript\n * import { storage } from \"@warlock.js/core\";\n *\n * const file = await storage.put(buffer, \"uploads/file.txt\");\n * ```\n */\nexport const storage = new Storage();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,IAAa,UAAb,cAA6B,cAAgD;;;;;;CA8B3E,AAAO,cAAc;EAEnB,MAAM,IAAwC;iCA3B5B,IAAI,IAAmC;iCAMvC,IAAI,IAAiC;qBAYnC;CAUtB;;;;;;CAOA,MAAa,OAAsB;EACjC,IAAI,KAAK,aAAa;EAGtB,KAAK,cAAc;EAInB,MAAM,cAAc,cAAc,WAAW,OAAO;EAEpD,KAAK,oBAAoB;EACzB,KAAK,sBAAsB;EAG3B,KAAK,UAAU,KAAK,cAAc,KAAK,iBAAiB;CAC1D;;;;CAKA,AAAO,QAAc;EACnB,KAAK,cAAc;EACnB,KAAK,QAAQ,MAAM;EACnB,KAAK,QAAQ,MAAM;EACnB,KAAK,oBAAoB;EACzB,KAAK,UAAU;CACjB;;;;;;;;;CAUA,IAAoB,eAAsC;EAExD,MAAM,gBAAgB,qBAAqB,UAAU;EAErD,IAAI,eAAe,OAAO;EAE1B,OAAO,KAAK;CACd;;;;;CAUA,AAAU,wBAA8B;EACtC,MAAM,UAAU,cAAmD,WAAW,CAAC,CAAC;EAEhF,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,OAAO,GACjD,KAAK,QAAQ,IAAI,MAAM,MAAM;CAEjC;;;;;;;;;;;;;;;;;;;;;;;CAwBA,AAAO,IAAI,MAAgD;EACzD,OAAO,IAAI,cAAc,KAAK,UAAU,IAAI,CAAC;CAC/C;;;;;;;;;;;;;;;;;;CAmBA,AAAO,UAAU,MAAgD;EAC/D,OAAO,KAAK,cAAc,IAAI;CAChC;;;;CAKA,AAAO,KAAK,cAA+B;EACzC,MAAM,WAAW,KAAK,aAAa,SAAS,QAAQ;EAEpD,OAAO,KAAK,KAAK,UAAU,gBAAgB,EAAE;CAC/C;;;;;;;;;;;;;;CAeA,AAAO,SAAS,MAAqD;EACnE,MAAM,WAAW,KAAK,UAAU,IAAI;EAEpC,IAAI,CAAC,KAAK,cAAc,QAAQ,GAC9B,MAAM,IAAI,MAAM,WAAW,KAAK,oCAAoC;EAGtE,OAAO;CACT;;;;;;;;;;;;;;;;;;;;;;;;CAyBA,AAAO,SAAS,MAAyB,QAAmC;EAC1E,KAAK,QAAQ,IAAI,MAAM,MAAM;EAC7B,KAAK,QAAQ,OAAO,IAAI;EACxB,OAAO;CACT;;;;;;;;;;;;;CAcA,AAAO,WAAW,MAA+B;EAC/C,KAAK,oBAAoB;EACzB,KAAK,UAAU,KAAK,UAAU,IAAI;EAClC,OAAO;CACT;;;;;;CAOA,MAAa,UAA4B;EACvC,OAAO,KAAK,cAAc,KAAK,YAAY;CAC7C;;;;;CAMA,AAAU,cAAc,QAAqE;EAC3F,OAAO,qBAAqB;CAC9B;;;;;;;;;;;;;;;;;;;;;;;CA4BA,AAAO,GACL,OACA,SACmB;EACnB,OAAO,OAAO,UAAU,WAAW,SAAS,OAAO;CACrD;;;;;;;;;;;;CAaA,AAAO,IAAI,OAA+B;EACxC,OAAO,IAAI,WAAW,OAAO;EAC7B,OAAO;CACT;;;;;CAMA,MAAgB,KACd,OACA,SACe;EACf,MAAM,OAAO,WAAW,WAAW,SAAS,OAAO;CACrD;;;;;;;;;;;CAgBA,MAAsB,IACpB,MACA,UACA,SACsB;EACtB,MAAM,SAAS,KAAK;EACpB,MAAM,SAAS,MAAM,KAAK,SAAS,IAAI;EAEvC,MAAM,KAAK,KAA6B,aAAa;GACnD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM,OAAO;EACf,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,IAAI,QAAQ,UAAU,OAAO;EAEzD,MAAM,KAAK,KAA6B,YAAY;GAClD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,IAAI,CAAC,OAAO,MACV,OAAO,OAAO,OAAO;EAGvB,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;;;;CAYA,MAAsB,UACpB,QACA,UACA,SACsB;EACtB,MAAM,SAAS,KAAK;EAEpB,MAAM,KAAK,KAA6B,aAAa;GACnD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,IAAI,OAAO,WAAW,UACpB,SAAS,GAAG,iBAAiB,MAAM;EAGrC,MAAM,SAAS,MAAM,OAAO,UAAU,QAAQ,UAAU,OAAO;EAE/D,MAAM,KAAK,KAA6B,YAAY;GAClD,QAAQ,OAAO;GACf;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;;;;;;;;;;;;;;;;;;CA0BA,MAAa,WACX,KACA,UACA,SACsB;EACtB,MAAM,EAAE,mBAAmB,UAAU,WAAW,gBAAgB,GAAG,eACjE,WAAW,CAAC;EAEd,MAAM,SAAS,MAAM,kBAAkB,KAAK;GAC1C;GACA;GACA;GACA;EACF,CAAC;EAED,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,kCAAkC,OAAO,YAAY;EAGvE,IAAI,CAAC,OAAO,aACV,MAAM,IAAI,MAAM,4DAA4D;EAG9E,MAAM,WAAW,WAAW,YAAY,OAAO;EAE/C,OAAO,KAAK,IAAI,OAAO,QAAQ,UAAU;GAAE,GAAG;GAAY;EAAS,CAAC;CACtE;;;;;;;;;;;;;;;;;;;;;;;CAwBA,MAAa,cACX,QACA,UACA,SACsB;EACtB,IAAI,OAAO;EACX,IAAI,WAAW,SAAS;EAExB,IAAI,OAAO,WAAW,OAAO,GAAG;GAC9B,MAAM,QAAQ,OAAO,MAAM,4BAA4B;GACvD,IAAI,OAAO;IACT,WAAW,YAAY,MAAM;IAC7B,OAAO,MAAM;GACf;EACF;EAEA,MAAM,SAAS,OAAO,KAAK,MAAM,QAAQ;EACzC,OAAO,KAAK,IAAI,QAAQ,UAAU;GAAE,GAAG;GAAS;EAAS,CAAC;CAC5D;;;;;;;;;CAUA,MAAsB,IAAI,UAAmC;EAC3D,OAAO,KAAK,aAAa,IAAI,QAAQ;CACvC;;;;;;;;;;;;;;;CAgBA,MAAa,QAAQ,UAAgC;EACnD,MAAM,SAAS,MAAM,KAAK,IAAI,QAAQ;EACtC,OAAO,KAAK,MAAM,OAAO,SAAS,CAAC;CACrC;;;;;;;CAQA,MAAsB,UAAU,UAAqC;EACnE,OAAO,KAAK,aAAa,UAAU,QAAQ;CAC7C;;;;;;;;;CAUA,MAAsB,OAAO,UAAkD;EAC7E,MAAM,SAAS,KAAK;EACpB,MAAM,OAAO,OAAO,aAAa,WAAW,WAAW,SAAS;EAEhE,MAAM,KAAK,KAA0B,gBAAgB;GACnD,QAAQ,OAAO;GACf,UAAU;GACV,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,OAAO,IAAI;EAEvC,MAAM,KAAK,KAA0B,eAAe;GAClD,QAAQ,OAAO;GACf,UAAU;GACV,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,OAAO;CACT;;;;;;;CAQA,MAAsB,WAAW,WAAkD;EACjF,OAAO,KAAK,aAAa,WAAW,SAAS;CAC/C;;;;;;;CAQA,MAAsB,OAAO,UAAoC;EAC/D,OAAO,KAAK,aAAa,OAAO,QAAQ;CAC1C;;;;;;;;;;CAWA,MAAsB,KAAK,MAA4B,IAAkC;EACvF,MAAM,SAAS,KAAK;EACpB,MAAM,WAAW,OAAO,SAAS,WAAW,OAAO,KAAK;EAExD,MAAM,KAAK,KAA8B,cAAc;GACrD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU,EAAE;EAE7C,MAAM,KAAK,KAA8B,aAAa;GACpD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;;;CAWA,MAAsB,KAAK,MAA4B,IAAkC;EACvF,MAAM,SAAS,KAAK;EACpB,MAAM,WAAW,OAAO,SAAS,WAAW,OAAO,KAAK;EAExD,MAAM,KAAK,KAA8B,cAAc;GACrD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;EACtB,CAAC;EAED,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU,EAAE;EAE7C,MAAM,KAAK,KAA8B,aAAa;GACpD,QAAQ,OAAO;GACf,UAAU;GACV,MAAM;GACN;GACA,2BAAW,IAAI,KAAK;GACpB,MAAM;EACR,CAAC;EAED,OAAO,YAAY,SAAS,QAAQ,MAAM;CAC5C;;;;;;;;CASA,MAAsB,KACpB,WACA,SAC4B;EAC5B,OAAO,KAAK,aAAa,KAAK,aAAa,IAAI,OAAO;CACxD;;;;;;;CAYA,MAAsB,SAAS,UAA4C;EACzE,OAAO,KAAK,aAAa,SAAS,QAAQ;CAC5C;;;;;;;CAQA,MAAsB,KAAK,UAAmC;EAC5D,OAAO,KAAK,aAAa,KAAK,QAAQ;CACxC;;;;;;;;;;CAeA,MAAa,KAAK,UAAmC;EACnD,MAAM,SAAS,KAAK;EAEpB,IAAI,EAAE,UAAU,WAAW,OAAO,OAAO,SAAS,YAChD,MAAM,IAAI,MAAM,oDAAoD;EAGtE,OAAO,OAAO,KAAK,QAAQ;CAC7B;;;;;;;;;;;;;;;;;;CAuBA,MAAa,gBAAgB,UAAkB,SAA6C;EAC1F,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,6DAA6D;EAG/E,OAAO,OAAO,gBAAgB,UAAU,OAAO;CACjD;;;;;;;;;;;;;;;;;;;;;;;CAwBA,MAAa,sBACX,UACA,SACiB;EACjB,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,oEAAoE;EAGtF,OAAO,OAAO,sBAAsB,UAAU,OAAO;CACvD;;;;;;;;;CAUA,MAAa,YAA6B;EACxC,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,gEAAgE;EAGlF,OAAO,OAAO,UAAU;CAC1B;;;;;;;;;CAUA,MAAa,YAA6B;EACxC,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,gEAAgE;EAGlF,OAAO,OAAO,UAAU;CAC1B;;;;;;;;;;CAWA,MAAa,gBAAgB,UAAkB,cAAqC;EAClF,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,2DAA2D;EAG7E,OAAO,OAAO,gBAAgB,UAAU,YAAY;CACtD;;;;;;;;;;CAWA,MAAa,cAAc,UAAkB,YAA2C;EACtF,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,wDAAwD;EAG1E,OAAO,OAAO,cAAc,UAAU,UAAU;CAClD;;;;;;;;;;CAWA,MAAa,cAAc,UAA2C;EACpE,MAAM,SAAS,KAAK;EAEpB,IAAI,CAAC,KAAK,cAAc,MAAM,GAC5B,MAAM,IAAI,MAAM,wDAAwD;EAG1E,OAAO,OAAO,cAAc,QAAQ;CACtC;;;;;;;;;;CAWA,MAAsB,aAAa,UAAkB,WAAqC;EACxF,OAAO,KAAK,aAAa,aAAa,UAAU,SAAS;CAC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BA,MAAa,uBAAuB,OAAkD;EAEpF,IACE,EAAE,4BAA4B,KAAK,iBACnC,OAAO,KAAK,aAAa,2BAA2B,YAGpD,OAAO;GACL,OAAO;GACP,OAAO;EACT;EAGF,OAAO,KAAK,aAAa,uBAAuB,KAAK;CACvD;;;;;CAUA,AAAU,aACR,QACgF;EAChF,MAAM,EAAE,QAAQ,GAAG,YAAY;EAE/B,QAAQ,QAAR;GACE,KAAK,SACH,OAAO;IACL,MAAM,QAAQ;IACd,WAAW,QAAQ;IACnB,cAAc,QAAQ;GACxB;GAEF,KAAK;IACH,KAAK,oBAAoB,QAAQ,IAAI;IACrC,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ;KAChB,QAAQ,QAAQ;KAChB,aAAa,QAAQ;KACrB,iBAAiB,QAAQ;KACzB,UAAU,QAAQ;KAClB,WAAW,QAAQ;IACrB;GAEF,KAAK;IACH,KAAK,oBAAoB,QAAQ,IAAI;IACrC,IAAI,CAAC,QAAQ,WACX,MAAM,IAAI,MAAM,gDAA8C;IAGhE,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ,UAAU;KAC1B,QAAQ,QAAQ;KAChB,aAAa,QAAQ;KACrB,iBAAiB,QAAQ;KACzB,UAAU,QAAQ;KAClB,WAAW,QAAQ;KACnB,WAAW,QAAQ;KACnB,cAAc,QAAQ;IACxB;GAEF,KAAK;IACH,KAAK,oBAAoB,QAAQ,QAAQ;IACzC,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ;KAChB,QAAQ,QAAQ;KAChB,aAAa,QAAQ;KACrB,iBAAiB,QAAQ;KACzB,UAAU,QAAQ;KAClB,WAAW,QAAQ;IACrB;GAEF,SACE,MAAM,IAAI,MAAM,wBAAwB,QAAQ;EACpD;CACF;;;;;CAMA,AAAU,oBAAoB,QAA6B,YAA0B;EACnF,MAAM,WAAW;GAAC;GAAU;GAAe;EAAiB;EAE5D,IAAI,eAAe,MACjB,SAAS,KAAK,QAAQ;EAGxB,KAAK,MAAM,SAAS,UAClB,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,MAAM,GAAG,WAAW,YAAY,EAAE,oBAAoB,MAAM,gBAAgB;CAG5F;;;;;CAMA,AAAU,cAAc,MAAqC;EAG3D,IAAI,KAAK,QAAQ,IAAI,IAAI,GACvB,OAAO,KAAK,QAAQ,IAAI,IAAI;EAG9B,MAAM,SAAS,KAAK,QAAQ,IAAI,IAAI;EAEpC,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,mBAAmB,KAAK,oBAAoB;EAG9D,MAAM,UAAU,KAAK,aAAa,MAAM;EACxC,IAAI;EAEJ,QAAQ,OAAO,QAAf;GACE,KAAK;IACH,SAAS,IAAI,YAAY,OAAoC;IAC7D;GACF,KAAK;IACH,SAAS,IAAI,SAAS,OAAoC;IAC1D;GACF,KAAK;IACH,SAAS,IAAI,SAAS,OAAiC;IACvD;GACF,KAAK;IACH,SAAS,IAAI,eAAe,OAAoC;IAChE;GACF,SACE,MAAM,IAAI,MAAM,gCAAgC,OAAO,QAAQ;EACnE;EAEA,KAAK,QAAQ,IAAI,MAAM,MAAM;EAC7B,OAAO;CACT;;;;;CAMA,MAAgB,uBAAmD;EACjE,MAAM,WAAW,cAAc,UAAU;EAEzC,IAAI,UAEF,OAAO,MADgB,SAAS,KACb,KAAK;EAG1B,OAAO,KAAK;CACd;AACF;;;;;;;;;;;;;AAcA,MAAa,UAAU,IAAI,QAAQ"}

package/esm/storage/types.d.mts

@@ -2,7 +2,7 @@ import { StorageFile } from "./storage-file.mjs";
 import { UploadedFile } from "../http/uploaded-file.mjs";
 import { Readable } from "stream";
 
-//#region ../@warlock.js/core/src/storage/types.d.ts
+//#region ../core/src/storage/types.d.ts
 /**
  * Options for local storage driver
  */

package/esm/storage/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/storage/types.ts"],"mappings":";;;;;;;;KASY,yBAAA;EAAyB;;;;EAKnC,IAAA;EAiBA;;;;AAWY;AAQd;;EA3BE,MAAA;EA2BmC;;;;;;EAnBnC,SAAA;EA8DA;;;;;EAxDA,kBAAA;EAiEmB;AAAA;AAOrB;;EAnEE,YAAA;AAAA;;;;KAQU,yBAAA;EA0EV;;AAAM;EAtEN,MAAA;EA8EyB;;;EA1EzB,MAAA;EAkFA;;;EA9EA,WAAA;EA8FA;;AAAM;EA1FN,eAAA;EAgG8B;;;;EA3F9B,QAAA;EA+HiB;;;;;;;EAtHjB,MAAA;EA0GA;;;;;;;AAYiB;AAMnB;;;EA/GE,SAAA;EAmHA;;;EA9GA,KAAA;IACE,UAAA;IACA,cAAA;IACA,UAAA;IACA,iBAAA;EAAA;AAAA;;AA0IK;AAMT;KAzIY,sBAAA,GAAyB,IAAI,CAAC,yBAAA;;;;EAIxC,SAAA;EAiJA;;;AAIM;EAhJN,YAAA;EAsJ6B;;;;;EAhJ7B,MAAA;AAAA;;;;KAQU,eAAA;EAqKR;;;EAjKF,IAAA;EAuKuB;AAMzB;;EAzKE,GAAA;EAyK4B;;;EArK5B,IAAA;EA8Ka;;;EA1Kb,IAAA;EA0KQ;;;EAtKR,QAAA;EA2KA;;AAAK;EAvKL,MAAA;AAAA;;;AAiLS;KA3KC,oBAAA,GAAuB,eAAA;EAyLD;;;EArLhC,MAAA;EAyLA;;;EArLA,MAAA;EAyLiB;AAWnB;;EAhME,IAAA;EAgMwC;;;EA5LxC,SAAA;EAuMA;;;EAnMA,YAAA;EA6MU;;;EAzMV,YAAA,GAAe,IAAA;EA8Mf;;;EA1MA,eAAA;EAsNA;;;EAlNA,YAAA;EAsN2B;AAQ7B;;EA1NE,QAAA,GAAW,MAAA;AAAA;;;;KAMD,eAAA;EAgOP;AAML;;EAlOE,IAAA;EAkO6B;AAAA;AAU/B;EAxOE,IAAA;;;;EAIA,IAAA;EAoQwB;;;EAhQxB,WAAA;EAoQyB;;;EAhQzB,YAAA,GAAe,IAAI;EAoOX;;;EAhOR,QAAA;EA4OY;;;EAxOZ,IAAA;EAoPA;;;EAhPA,YAAA;EAoPkB;;;EAhPlB,OAAA;AAAA;;;;KAMU,WAAA;EAyPA;;;EArPV,SAAA;EAqP0B;AAa5B;;EA9PE,KAAA;EA0Qe;;;EAtQf,MAAA;EAsQW;;AAAI;EAlQf,MAAA;AAAA;;;;KAMU,mBAAA;EAsQH;;;;EAjQP,WAAA;EA+QU;;;;;;;;;;EAnQV,MAAA,IAAU,YAAA,UAAsB,YAAA;EAqRtB;;;;;;;EA5QV,UAAA,IACE,QAAA,UACA,KAAA,UACA,IAAA,EA7B2B,WAAA;EAwSZ;;;EArQjB,UAAA,GAAa,UAAU;AAAA;;;;KAMb,kBAAA;EAsQA;;;EAlQV,QAAA,EAJ4B,WAAA;EA0Q5B;;;EAjQA,MAAA,EAAQ,KAAA;IAAQ,SAAA;IAAmB,KAAA,EAAO,KAAA;EAAA;;;AA8Qf;EAzQ3B,KAAA;AAAA;;;;KAMU,gBAAA;EAoRV;;;EAhRA,SAAS;AAAA;;;;;;;AA2TG;AAmBd;;;;KAhUY,sBAAA,GAAyB,gBAAA;EAyUzB;;;EArUV,WAAA;EAuU6B;AAK/B;;EAxUE,QAAA,GAAW,MAAM;AAAA;;;;;;;;;KAWP,iBAAA,GAAoB,UAAU;EAqUhB;;;;EAhUxB,iBAAA;EAgVe;;;EA5Uf,QAAA,WAqVuB;EAnVvB,SAAA;EAgWQ;;;EA5VR,cAAA;AAAA;;;;KAMU,UAAA;EAqW2D;;;;EAhWrE,QAAA;EA0X0B;;;EAtX1B,QAAA,GAAW,MAAA;EA6Ye;;;EAzY1B,YAAA;EAgbwB;;;EA5axB,kBAAA;EAgcgC;;;EA5bhC,UAAA,GAAa,cAAc;AAAA;;;;KAQjB,qBAAA;EA4SQ;;;EAxSlB,IAAA;EAqTiB;;;EAjTjB,GAAA;EAmTY;;;EA/SZ,GAAA;AAAA;;;;KAMU,mBAAA;;;;KAUA,wBAAA;EAqTN;;;EAjTJ,KAAA;EA0TU;;;EAtTV,KAAA,GAAQ,mBAAA;EA8TD;;;EA1TP,IAAA;EAkUiC;;;EA9TjC,YAAA;EAqUwC;;;EAjUxC,SAAA,GAAY,IAAA;EAmVZ;;;EA/UA,QAAA;EAwV+B;;;EApV/B,MAAA,GAAS,qBAAA;EA+VmB;;;EA3V5B,OAAA,SAAgB,OAAA,CAAQ,MAAA;EAoWA;;;EAhWxB,SAAA,SAAkB,OAAA,CAAQ,QAAA;AAAA;;;;KAQhB,cAAA;;;;KAOA,gBAAA;;;;KAaA,mBAAA;EA8WV;;;EA1WA,MAAA;EAqXsB;AAAA;AASxB;EA1XE,QAAA;;;;EAIA,SAAA,EAAW,IAAI;AAAA;;;;KAML,sBAAA,GAAyB,mBAAA;EAkYK;;;EA9XxC,IAAA,GAAO,eAAe;EA8YsB;;;EA1Y5C,IAAA;EAuayD;;;EAnazD,QAAA;AAAA;;;;KAMU,uBAAA,GAA0B,mBAAA;EAkWpC;;;EA9VA,IAAA;EA8V8C;;;EA1V9C,EAAA;EA+VA;;;EA3VA,IAAA,GAAO,eAAe;AAAA;;;;KAMZ,mBAAA,WAA8B,mBAAA,GAAsB,mBAAA,KAC9D,OAAA,EAAS,CAAA,YACC,OAAA;;;;KAOA,gBAAA;EA0VV;;;EAtVA,QAAA;EAsVwC;;;EAlVxC,OAAA;EA6VkC;;;EAzVlC,KAAA;AAAA;AAAA,KAKU,iBAAA;;;;;KAMA,mBAAA;EA2WwB;;;EAvWlC,MAAA,EAAQ,iBAAiB;EAiXmB;;;EA1W5C,IAAA;EAkXc;;;EA7Wd,YAAA;EA6WuD;AAWzD;;EAjXE,MAAA;EAgYQ;;;EA5XR,MAAA;EA+XW;;;EA3XX,WAAA;EAgY6E;;;EA5X7E,eAAA;EAsYqC;;;EAlYrC,QAAA;EA4YyC;;;EAxYzC,SAAA;EA4ZoC;;;EArZpC,SAAA;EA+ZsD;;;EA3ZtD,YAAA;AAAA;;;;;;;;;;;;;;;;;UAmBe,qBAAA;;;;;;;;KASL,iBAAA,SAA0B,qBAAA,gCAE5B,qBAAqB;;;;KAKnB,qBAAA;EAgVA;;;EA5UV,OAAA,EAAS,iBAAA;EAiViB;;;EA7U1B,OAAA,EAAS,MAAA,SAAe,mBAAA;EAkVb;;;EA9UX,QAAA,SAAiB,OAAA;AAAA;;;;;;;;UAYF,qBAAA;EAsVN;;;EAAA,SAlVA,IAAA,EAAM,iBAAA;EAuVV;;;EAAA,SAlVI,OAAA,EAAS,IAAA,CAAK,mBAAA;EAuVlB;;;;;;;;EA3UL,GAAA,CACE,IAAA,EAAM,MAAA,GAAS,YAAA,YAAwB,QAAA,EACvC,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,eAAA;EA4U2C;;;;;;;;;;EAhUtD,SAAA,CAAU,MAAA,EAAQ,QAAA,EAAU,QAAA,UAAkB,OAAA,GAAU,UAAA,GAAa,OAAA,CAAQ,eAAA;EA0U1C;AAWrC;;;;;;EA5UE,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;EA4WhB;;;;;;;EAnWf,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;EAgYlC;;;;;;EAxXH,MAAA,CAAO,QAAA,WAAmB,OAAA;EAuUhB;;;;;;EA/TV,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;EAmVzC;;;;;EA5UA,eAAA,CAAgB,aAAA,WAAwB,OAAA;EAoVvB;;;;;;EA5UjB,MAAA,CAAO,QAAA,WAAmB,OAAA;EA+VjB;;;;;;EArVT,GAAA,CAAI,QAAA;EA+VO;;;AAAgB;AAM7B;;;EA5VE,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAqB,OAAA;EAgWzC;;;;;;;EArVX,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;;;;;;;;EASpC,IAAA,CAAK,QAAA,WAAmB,OAAA;;;;;;;;EAWxB,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;;;;;;;;EASxC,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;;;;;;;;EASxC,IAAA,CAAK,SAAA,UAAmB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;;;;;;;;;;EAaxD,WAAA,CAAY,QAAA;;;;;;;;EAWZ,IAAA,EAAM,QAAA;AAAA;;;;;;;UASS,0BAAA,SAAmC,qBAAA;;;;EAIlD,GAAA,CAAI,IAAA,EAAM,MAAA,EAAQ,QAAA,UAAkB,OAAA,GAAU,UAAA,GAAa,OAAA,CAAQ,oBAAA;;;;EAKnE,SAAA,CACE,MAAA,EAAQ,QAAA,EACR,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,oBAAA;;;;EAKX,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,oBAAA;;;;EAKxC,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,oBAAA;;;;;;;;EAWxC,eAAA,CAAgB,QAAA,UAAkB,OAAA,GAAU,gBAAA,GAAmB,OAAA;;;;;;;;EAS/D,qBAAA,CAAsB,QAAA,UAAkB,OAAA,GAAU,sBAAA,GAAyB,OAAA;;;;EAO3E,SAAA;;;;EAKA,SAAA;;;;;;;EAQA,eAAA,CAAgB,QAAA,UAAkB,YAAA,WAAuB,OAAA;;;;;;;EAUzD,aAAA,CAAc,QAAA,UAAkB,UAAA,EAAY,cAAA,GAAiB,OAAA;;;;;;;EAQ7D,aAAA,CAAc,QAAA,WAAmB,OAAA,CAAQ,cAAA;AAAA;;;;;;;;;UAW1B,qBAAA;;;;WAIN,IAAA;;;;;;;;;EAUT,GAAA,CACE,IAAA,EAAM,MAAA,GAAS,YAAA,YAAwB,QAAA,EACvC,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;;;;EAKX,SAAA,CAAU,MAAA,EAAQ,QAAA,EAAU,QAAA,UAAkB,OAAA,GAAU,UAAA,GAAa,OAAA,CAAQ,WAAA;;;;EAK7E,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;;;;EAK/B,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;;;;EAKrC,MAAA,CAAO,QAAA,WAAmB,WAAA,GAAc,OAAA;;;;EAKxC,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;;;;EAKzC,MAAA,CAAO,QAAA,WAAmB,OAAA;;;;EAK1B,GAAA,CAAI,QAAA;;;;EAKJ,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAqB,OAAA;;;;EAKpD,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;;;;EAKpC,IAAA,CAAK,QAAA,WAAmB,OAAA;;;;EAKxB,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;EAKtD,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;EAKtD,IAAA,CAAK,SAAA,WAAoB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;;;;EAKzD,IAAA,CAAK,QAAA,WAAmB,WAAA;AAAA;;;;;;;;;UAWT,sBAAA,SAA+B,qBAAA;;;;;;;;;;EAY9C,GAAA,CAAI,IAAA,EAAM,iBAAA,GAAoB,qBAAA;;;;;;;;;;EAW9B,SAAA,CAAU,IAAA,EAAM,iBAAA,GAAoB,qBAAA;;;;;;;;EASpC,QAAA,CAAS,IAAA,EAAM,iBAAA,EAAmB,MAAA,EAAQ,mBAAA;;;;;;;EAQ1C,UAAA,CAAW,IAAA,EAAM,iBAAA;;;;;;EAOjB,OAAA,IAAW,OAAA;;;;;;;;EAWX,EAAA,WAAa,mBAAA,EACX,KAAA,EAAO,gBAAA,EACP,OAAA,EAAS,mBAAA,CAAoB,CAAA,IAC5B,iBAAA;;;;;;;EAQH,GAAA,CAAI,KAAA,EAAO,gBAAA;AAAA;;;;UAMI,iBAAA;;;;EAIf,WAAW;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../core/src/storage/types.ts"],"mappings":";;;;;;;;KASY,yBAAA;EAAyB;;;;EAKnC,IAAA;EAiBA;;;;AAWY;AAQd;;EA3BE,MAAA;EA2BmC;;;;;;EAnBnC,SAAA;EA8DA;;;;;EAxDA,kBAAA;EAiEmB;AAAA;AAOrB;;EAnEE,YAAA;AAAA;;;;KAQU,yBAAA;EA0EV;;AAAM;EAtEN,MAAA;EA8EyB;;;EA1EzB,MAAA;EAkFA;;;EA9EA,WAAA;EA8FA;;AAAM;EA1FN,eAAA;EAgG8B;;;;EA3F9B,QAAA;EA+HiB;;;;;;;EAtHjB,MAAA;EA0GA;;;;;;;AAYiB;AAMnB;;;EA/GE,SAAA;EAmHA;;;EA9GA,KAAA;IACE,UAAA;IACA,cAAA;IACA,UAAA;IACA,iBAAA;EAAA;AAAA;;AA0IK;AAMT;KAzIY,sBAAA,GAAyB,IAAI,CAAC,yBAAA;;;;EAIxC,SAAA;EAiJA;;;AAIM;EAhJN,YAAA;EAsJ6B;;;;;EAhJ7B,MAAA;AAAA;;;;KAQU,eAAA;EAqKR;;;EAjKF,IAAA;EAuKuB;AAMzB;;EAzKE,GAAA;EAyK4B;;;EArK5B,IAAA;EA8Ka;;;EA1Kb,IAAA;EA0KQ;;;EAtKR,QAAA;EA2KA;;AAAK;EAvKL,MAAA;AAAA;;;AAiLS;KA3KC,oBAAA,GAAuB,eAAA;EAyLD;;;EArLhC,MAAA;EAyLA;;;EArLA,MAAA;EAyLiB;AAWnB;;EAhME,IAAA;EAgMwC;;;EA5LxC,SAAA;EAuMA;;;EAnMA,YAAA;EA6MU;;;EAzMV,YAAA,GAAe,IAAA;EA8Mf;;;EA1MA,eAAA;EAsNA;;;EAlNA,YAAA;EAsN2B;AAQ7B;;EA1NE,QAAA,GAAW,MAAA;AAAA;;;;KAMD,eAAA;EAgOP;AAML;;EAlOE,IAAA;EAkO6B;AAAA;AAU/B;EAxOE,IAAA;;;;EAIA,IAAA;EAoQwB;;;EAhQxB,WAAA;EAoQyB;;;EAhQzB,YAAA,GAAe,IAAI;EAoOX;;;EAhOR,QAAA;EA4OY;;;EAxOZ,IAAA;EAoPA;;;EAhPA,YAAA;EAoPkB;;;EAhPlB,OAAA;AAAA;;;;KAMU,WAAA;EAyPA;;;EArPV,SAAA;EAqP0B;AAa5B;;EA9PE,KAAA;EA0Qe;;;EAtQf,MAAA;EAsQW;;AAAI;EAlQf,MAAA;AAAA;;;;KAMU,mBAAA;EAsQH;;;;EAjQP,WAAA;EA+QU;;;;;;;;;;EAnQV,MAAA,IAAU,YAAA,UAAsB,YAAA;EAqRtB;;;;;;;EA5QV,UAAA,IACE,QAAA,UACA,KAAA,UACA,IAAA,EA7B2B,WAAA;EAwSZ;;;EArQjB,UAAA,GAAa,UAAU;AAAA;;;;KAMb,kBAAA;EAsQA;;;EAlQV,QAAA,EAJ4B,WAAA;EA0Q5B;;;EAjQA,MAAA,EAAQ,KAAA;IAAQ,SAAA;IAAmB,KAAA,EAAO,KAAA;EAAA;;;AA8Qf;EAzQ3B,KAAA;AAAA;;;;KAMU,gBAAA;EAoRV;;;EAhRA,SAAS;AAAA;;;;;;;AA2TG;AAmBd;;;;KAhUY,sBAAA,GAAyB,gBAAA;EAyUzB;;;EArUV,WAAA;EAuU6B;AAK/B;;EAxUE,QAAA,GAAW,MAAM;AAAA;;;;;;;;;KAWP,iBAAA,GAAoB,UAAU;EAqUhB;;;;EAhUxB,iBAAA;EAgVe;;;EA5Uf,QAAA,WAqVuB;EAnVvB,SAAA;EAgWQ;;;EA5VR,cAAA;AAAA;;;;KAMU,UAAA;EAqW2D;;;;EAhWrE,QAAA;EA0X0B;;;EAtX1B,QAAA,GAAW,MAAA;EA6Ye;;;EAzY1B,YAAA;EAgbwB;;;EA5axB,kBAAA;EAgcgC;;;EA5bhC,UAAA,GAAa,cAAc;AAAA;;;;KAQjB,qBAAA;EA4SQ;;;EAxSlB,IAAA;EAqTiB;;;EAjTjB,GAAA;EAmTY;;;EA/SZ,GAAA;AAAA;;;;KAMU,mBAAA;;;;KAUA,wBAAA;EAqTN;;;EAjTJ,KAAA;EA0TU;;;EAtTV,KAAA,GAAQ,mBAAA;EA8TD;;;EA1TP,IAAA;EAkUiC;;;EA9TjC,YAAA;EAqUwC;;;EAjUxC,SAAA,GAAY,IAAA;EAmVZ;;;EA/UA,QAAA;EAwV+B;;;EApV/B,MAAA,GAAS,qBAAA;EA+VmB;;;EA3V5B,OAAA,SAAgB,OAAA,CAAQ,MAAA;EAoWA;;;EAhWxB,SAAA,SAAkB,OAAA,CAAQ,QAAA;AAAA;;;;KAQhB,cAAA;;;;KAOA,gBAAA;;;;KAaA,mBAAA;EA8WV;;;EA1WA,MAAA;EAqXsB;AAAA;AASxB;EA1XE,QAAA;;;;EAIA,SAAA,EAAW,IAAI;AAAA;;;;KAML,sBAAA,GAAyB,mBAAA;EAkYK;;;EA9XxC,IAAA,GAAO,eAAe;EA8YsB;;;EA1Y5C,IAAA;EAuayD;;;EAnazD,QAAA;AAAA;;;;KAMU,uBAAA,GAA0B,mBAAA;EAkWpC;;;EA9VA,IAAA;EA8V8C;;;EA1V9C,EAAA;EA+VA;;;EA3VA,IAAA,GAAO,eAAe;AAAA;;;;KAMZ,mBAAA,WAA8B,mBAAA,GAAsB,mBAAA,KAC9D,OAAA,EAAS,CAAA,YACC,OAAA;;;;KAOA,gBAAA;EA0VV;;;EAtVA,QAAA;EAsVwC;;;EAlVxC,OAAA;EA6VkC;;;EAzVlC,KAAA;AAAA;AAAA,KAKU,iBAAA;;;;;KAMA,mBAAA;EA2WwB;;;EAvWlC,MAAA,EAAQ,iBAAiB;EAiXmB;;;EA1W5C,IAAA;EAkXc;;;EA7Wd,YAAA;EA6WuD;AAWzD;;EAjXE,MAAA;EAgYQ;;;EA5XR,MAAA;EA+XW;;;EA3XX,WAAA;EAgY6E;;;EA5X7E,eAAA;EAsYqC;;;EAlYrC,QAAA;EA4YyC;;;EAxYzC,SAAA;EA4ZoC;;;EArZpC,SAAA;EA+ZsD;;;EA3ZtD,YAAA;AAAA;;;;;;;;;;;;;;;;;UAmBe,qBAAA;;;;;;;;KASL,iBAAA,SAA0B,qBAAA,gCAE5B,qBAAqB;;;;KAKnB,qBAAA;EAgVA;;;EA5UV,OAAA,EAAS,iBAAA;EAiViB;;;EA7U1B,OAAA,EAAS,MAAA,SAAe,mBAAA;EAkVb;;;EA9UX,QAAA,SAAiB,OAAA;AAAA;;;;;;;;UAYF,qBAAA;EAsVN;;;EAAA,SAlVA,IAAA,EAAM,iBAAA;EAuVV;;;EAAA,SAlVI,OAAA,EAAS,IAAA,CAAK,mBAAA;EAuVlB;;;;;;;;EA3UL,GAAA,CACE,IAAA,EAAM,MAAA,GAAS,YAAA,YAAwB,QAAA,EACvC,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,eAAA;EA4U2C;;;;;;;;;;EAhUtD,SAAA,CAAU,MAAA,EAAQ,QAAA,EAAU,QAAA,UAAkB,OAAA,GAAU,UAAA,GAAa,OAAA,CAAQ,eAAA;EA0U1C;AAWrC;;;;;;EA5UE,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;EA4WhB;;;;;;;EAnWf,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;EAgYlC;;;;;;EAxXH,MAAA,CAAO,QAAA,WAAmB,OAAA;EAuUhB;;;;;;EA/TV,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;EAmVzC;;;;;EA5UA,eAAA,CAAgB,aAAA,WAAwB,OAAA;EAoVvB;;;;;;EA5UjB,MAAA,CAAO,QAAA,WAAmB,OAAA;EA+VjB;;;;;;EArVT,GAAA,CAAI,QAAA;EA+VO;;;AAAgB;AAM7B;;;EA5VE,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAqB,OAAA;EAgWzC;;;;;;;EArVX,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;;;;;;;;EASpC,IAAA,CAAK,QAAA,WAAmB,OAAA;;;;;;;;EAWxB,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;;;;;;;;EASxC,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;;;;;;;;EASxC,IAAA,CAAK,SAAA,UAAmB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;;;;;;;;;;EAaxD,WAAA,CAAY,QAAA;;;;;;;;EAWZ,IAAA,EAAM,QAAA;AAAA;;;;;;;UASS,0BAAA,SAAmC,qBAAA;;;;EAIlD,GAAA,CAAI,IAAA,EAAM,MAAA,EAAQ,QAAA,UAAkB,OAAA,GAAU,UAAA,GAAa,OAAA,CAAQ,oBAAA;;;;EAKnE,SAAA,CACE,MAAA,EAAQ,QAAA,EACR,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,oBAAA;;;;EAKX,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,oBAAA;;;;EAKxC,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,oBAAA;;;;;;;;EAWxC,eAAA,CAAgB,QAAA,UAAkB,OAAA,GAAU,gBAAA,GAAmB,OAAA;;;;;;;;EAS/D,qBAAA,CAAsB,QAAA,UAAkB,OAAA,GAAU,sBAAA,GAAyB,OAAA;;;;EAO3E,SAAA;;;;EAKA,SAAA;;;;;;;EAQA,eAAA,CAAgB,QAAA,UAAkB,YAAA,WAAuB,OAAA;;;;;;;EAUzD,aAAA,CAAc,QAAA,UAAkB,UAAA,EAAY,cAAA,GAAiB,OAAA;;;;;;;EAQ7D,aAAA,CAAc,QAAA,WAAmB,OAAA,CAAQ,cAAA;AAAA;;;;;;;;;UAW1B,qBAAA;;;;WAIN,IAAA;;;;;;;;;EAUT,GAAA,CACE,IAAA,EAAM,MAAA,GAAS,YAAA,YAAwB,QAAA,EACvC,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;;;;EAKX,SAAA,CAAU,MAAA,EAAQ,QAAA,EAAU,QAAA,UAAkB,OAAA,GAAU,UAAA,GAAa,OAAA,CAAQ,WAAA;;;;EAK7E,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;;;;EAK/B,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;;;;EAKrC,MAAA,CAAO,QAAA,WAAmB,WAAA,GAAc,OAAA;;;;EAKxC,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;;;;EAKzC,MAAA,CAAO,QAAA,WAAmB,OAAA;;;;EAK1B,GAAA,CAAI,QAAA;;;;EAKJ,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAqB,OAAA;;;;EAKpD,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;;;;EAKpC,IAAA,CAAK,QAAA,WAAmB,OAAA;;;;EAKxB,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;EAKtD,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;EAKtD,IAAA,CAAK,SAAA,WAAoB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;;;;EAKzD,IAAA,CAAK,QAAA,WAAmB,WAAA;AAAA;;;;;;;;;UAWT,sBAAA,SAA+B,qBAAA;;;;;;;;;;EAY9C,GAAA,CAAI,IAAA,EAAM,iBAAA,GAAoB,qBAAA;;;;;;;;;;EAW9B,SAAA,CAAU,IAAA,EAAM,iBAAA,GAAoB,qBAAA;;;;;;;;EASpC,QAAA,CAAS,IAAA,EAAM,iBAAA,EAAmB,MAAA,EAAQ,mBAAA;;;;;;;EAQ1C,UAAA,CAAW,IAAA,EAAM,iBAAA;;;;;;EAOjB,OAAA,IAAW,OAAA;;;;;;;;EAWX,EAAA,WAAa,mBAAA,EACX,KAAA,EAAO,gBAAA,EACP,OAAA,EAAS,mBAAA,CAAoB,CAAA,IAC5B,iBAAA;;;;;;;EAQH,GAAA,CAAI,KAAA,EAAO,gBAAA;AAAA;;;;UAMI,iBAAA;;;;EAIf,WAAW;AAAA"}

package/esm/storage/utils/contain-path.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/storage/utils/contain-path.d.ts
+//#region ../core/src/storage/utils/contain-path.d.ts
 /**
  * Resolve `location` against `root` and assert the result stays *inside*
  * `root` — the local-storage path-traversal guard.

package/esm/storage/utils/contain-path.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"contain-path.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/contain-path.ts"],"mappings":";;AAqBA;;;;AAAgE;;;;;;;;;;;;;iBAAhD,iBAAA,CAAkB,IAAA,UAAc,QAAgB"}
+{"version":3,"file":"contain-path.d.mts","names":[],"sources":["../../../../../../../../core/src/storage/utils/contain-path.ts"],"mappings":";;AAqBA;;;;AAAgE;;;;;;;;;;;;;iBAAhD,iBAAA,CAAkB,IAAA,UAAc,QAAgB"}

package/esm/storage/utils/contain-path.mjs

@@ -1,7 +1,7 @@
 import { StorageError } from "./storage-error.mjs";
 import path from "path";
 
-//#region ../@warlock.js/core/src/storage/utils/contain-path.ts
+//#region ../core/src/storage/utils/contain-path.ts
 /**
 * Resolve `location` against `root` and assert the result stays *inside*
 * `root` — the local-storage path-traversal guard.

package/esm/storage/utils/contain-path.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"contain-path.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/contain-path.ts"],"sourcesContent":["import path from \"path\";\nimport { StorageError } from \"./storage-error\";\n\n/**\n * Resolve `location` against `root` and assert the result stays *inside*\n * `root` — the local-storage path-traversal guard.\n *\n * Without this, a `location` like `../../etc/passwd`, `..\\..\\windows\\...`,\n * an absolute path (`/etc/passwd`, `C:\\secret`), or a prefix breakout could\n * escape the configured storage root and read or clobber arbitrary files on\n * the host.\n *\n * The check compares the relative path from `root` to the resolved target:\n * if it climbs out (`..` prefix) or is itself absolute (different drive /\n * root on Windows), the location is rejected.\n *\n * @param root - Absolute, normalized storage root.\n * @param location - Caller-supplied (already prefix-applied) location.\n * @returns The absolute, contained filesystem path.\n * @throws {StorageError} When the location escapes `root`.\n */\nexport function resolveWithinRoot(root: string, location: string): string {\n  const resolved = path.resolve(root, location);\n  const rel = path.relative(root, resolved);\n\n  if (rel !== \"\" && (rel.startsWith(\"..\") || path.isAbsolute(rel))) {\n    throw new StorageError(\n      `Storage location escapes the storage root: \"${location}\"`,\n      { context: { location, root } },\n    );\n  }\n\n  return resolved;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,kBAAkB,MAAc,UAA0B;CACxE,MAAM,WAAW,KAAK,QAAQ,MAAM,QAAQ;CAC5C,MAAM,MAAM,KAAK,SAAS,MAAM,QAAQ;CAExC,IAAI,QAAQ,OAAO,IAAI,WAAW,IAAI,KAAK,KAAK,WAAW,GAAG,IAC5D,MAAM,IAAI,aACR,+CAA+C,SAAS,IACxD,EAAE,SAAS;EAAE;EAAU;CAAK,EAAE,CAChC;CAGF,OAAO;AACT"}
+{"version":3,"file":"contain-path.mjs","names":[],"sources":["../../../../../../../../core/src/storage/utils/contain-path.ts"],"sourcesContent":["import path from \"path\";\nimport { StorageError } from \"./storage-error\";\n\n/**\n * Resolve `location` against `root` and assert the result stays *inside*\n * `root` — the local-storage path-traversal guard.\n *\n * Without this, a `location` like `../../etc/passwd`, `..\\..\\windows\\...`,\n * an absolute path (`/etc/passwd`, `C:\\secret`), or a prefix breakout could\n * escape the configured storage root and read or clobber arbitrary files on\n * the host.\n *\n * The check compares the relative path from `root` to the resolved target:\n * if it climbs out (`..` prefix) or is itself absolute (different drive /\n * root on Windows), the location is rejected.\n *\n * @param root - Absolute, normalized storage root.\n * @param location - Caller-supplied (already prefix-applied) location.\n * @returns The absolute, contained filesystem path.\n * @throws {StorageError} When the location escapes `root`.\n */\nexport function resolveWithinRoot(root: string, location: string): string {\n  const resolved = path.resolve(root, location);\n  const rel = path.relative(root, resolved);\n\n  if (rel !== \"\" && (rel.startsWith(\"..\") || path.isAbsolute(rel))) {\n    throw new StorageError(\n      `Storage location escapes the storage root: \"${location}\"`,\n      { context: { location, root } },\n    );\n  }\n\n  return resolved;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,kBAAkB,MAAc,UAA0B;CACxE,MAAM,WAAW,KAAK,QAAQ,MAAM,QAAQ;CAC5C,MAAM,MAAM,KAAK,SAAS,MAAM,QAAQ;CAExC,IAAI,QAAQ,OAAO,IAAI,WAAW,IAAI,KAAK,KAAK,WAAW,GAAG,IAC5D,MAAM,IAAI,aACR,+CAA+C,SAAS,IACxD,EAAE,SAAS;EAAE;EAAU;CAAK,EAAE,CAChC;CAGF,OAAO;AACT"}

package/esm/storage/utils/mime.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/storage/utils/mime.d.ts
+//#region ../core/src/storage/utils/mime.d.ts
 /**
  * Get MIME type from file path or extension
  *

package/esm/storage/utils/mime.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"mime.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/mime.ts"],"mappings":";;AAcA;;;;AAAwC;iBAAxB,WAAA,CAAY,IAAY;;;;cAO3B,SAAA;EAAA"}
+{"version":3,"file":"mime.d.mts","names":[],"sources":["../../../../../../../../core/src/storage/utils/mime.ts"],"mappings":";;AAcA;;;;AAAwC;iBAAxB,WAAA,CAAY,IAAY;;;;cAO3B,SAAA;EAAA"}

package/esm/storage/utils/mime.mjs

@@ -1,6 +1,6 @@
 import mime from "mime";
 
-//#region ../@warlock.js/core/src/storage/utils/mime.ts
+//#region ../core/src/storage/utils/mime.ts
 /**
 * MIME type utilities
 *

package/esm/storage/utils/mime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mime.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/mime.ts"],"sourcesContent":["/**\n * MIME type utilities\n *\n * This module wraps the mime package to avoid type conflicts\n * with @types/send which has its own @types/mime dependency.\n */\nimport mime from \"mime\";\n\n/**\n * Get MIME type from file path or extension\n *\n * @param path - File path or extension\n * @returns MIME type or \"application/octet-stream\" if unknown\n */\nexport function getMimeType(path: string): string {\n  return mime.getType(path) || \"application/octet-stream\";\n}\n\n/**\n * Common MIME type constants\n */\nexport const MimeTypes = {\n  // Images\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  gif: \"image/gif\",\n  webp: \"image/webp\",\n  svg: \"image/svg+xml\",\n  ico: \"image/x-icon\",\n\n  // Documents\n  pdf: \"application/pdf\",\n  txt: \"text/plain\",\n  html: \"text/html\",\n  css: \"text/css\",\n  js: \"application/javascript\",\n  json: \"application/json\",\n  xml: \"application/xml\",\n\n  // Archives\n  zip: \"application/zip\",\n  gzip: \"application/gzip\",\n\n  // Media\n  mp3: \"audio/mpeg\",\n  mp4: \"video/mp4\",\n  webm: \"video/webm\",\n  ogg: \"audio/ogg\",\n\n  // Binary\n  binary: \"application/octet-stream\",\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;AAcA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,QAAQ,IAAI,KAAK;AAC/B;;;;AAKA,MAAa,YAAY;CAEvB,MAAM;CACN,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,KAAK;CAGL,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,IAAI;CACJ,MAAM;CACN,KAAK;CAGL,KAAK;CACL,MAAM;CAGN,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CAGL,QAAQ;AACV"}
+{"version":3,"file":"mime.mjs","names":[],"sources":["../../../../../../../../core/src/storage/utils/mime.ts"],"sourcesContent":["/**\n * MIME type utilities\n *\n * This module wraps the mime package to avoid type conflicts\n * with @types/send which has its own @types/mime dependency.\n */\nimport mime from \"mime\";\n\n/**\n * Get MIME type from file path or extension\n *\n * @param path - File path or extension\n * @returns MIME type or \"application/octet-stream\" if unknown\n */\nexport function getMimeType(path: string): string {\n  return mime.getType(path) || \"application/octet-stream\";\n}\n\n/**\n * Common MIME type constants\n */\nexport const MimeTypes = {\n  // Images\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  gif: \"image/gif\",\n  webp: \"image/webp\",\n  svg: \"image/svg+xml\",\n  ico: \"image/x-icon\",\n\n  // Documents\n  pdf: \"application/pdf\",\n  txt: \"text/plain\",\n  html: \"text/html\",\n  css: \"text/css\",\n  js: \"application/javascript\",\n  json: \"application/json\",\n  xml: \"application/xml\",\n\n  // Archives\n  zip: \"application/zip\",\n  gzip: \"application/gzip\",\n\n  // Media\n  mp3: \"audio/mpeg\",\n  mp4: \"video/mp4\",\n  webm: \"video/webm\",\n  ogg: \"audio/ogg\",\n\n  // Binary\n  binary: \"application/octet-stream\",\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;AAcA,SAAgB,YAAY,MAAsB;CAChD,OAAO,KAAK,QAAQ,IAAI,KAAK;AAC/B;;;;AAKA,MAAa,YAAY;CAEvB,MAAM;CACN,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,KAAK;CAGL,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,IAAI;CACJ,MAAM;CACN,KAAK;CAGL,KAAK;CACL,MAAM;CAGN,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CAGL,QAAQ;AACV"}

package/esm/storage/utils/safe-fetch.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/storage/utils/safe-fetch.d.ts
+//#region ../core/src/storage/utils/safe-fetch.d.ts
 /**
  * Options controlling a guarded outbound fetch. Every field is optional;
  * {@link resolveFetchPolicy} fills safe defaults. The defaults are

package/esm/storage/utils/safe-fetch.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"safe-fetch.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/safe-fetch.ts"],"mappings":";;AA0BA;;;;;;KAAY,gBAAA;EAkBV;;;;EAbA,iBAAA;EA2Hc;;;;AAAgC;EArH9C,QAAA,WAgNyB;EA9MzB,SAAA;EA+Mc;;;;EA1Md,cAAA;EA6MA;;;AACE;EAzMF,KAAA,UAAe,KAAK;AAAA;;;;;;;;;;;iBAyGN,qBAAA,CAAsB,EAAU;;AA+GtB;;;;KApBd,eAAA;EACV,MAAA,EAAQ,MAAM;EACd,WAAA;EACA,MAAA;EACA,UAAA;EACA,EAAA;AAAA;;;;;;;;;;iBAYoB,iBAAA,CACpB,MAAA,UACA,OAAA,GAAS,gBAAA,GACR,OAAA,CAAQ,eAAA"}
+{"version":3,"file":"safe-fetch.d.mts","names":[],"sources":["../../../../../../../../core/src/storage/utils/safe-fetch.ts"],"mappings":";;AA0BA;;;;;;KAAY,gBAAA;EAkBV;;;;EAbA,iBAAA;EA2Hc;;;;AAAgC;EArH9C,QAAA,WAgNyB;EA9MzB,SAAA;EA+Mc;;;;EA1Md,cAAA;EA6MA;;;AACE;EAzMF,KAAA,UAAe,KAAK;AAAA;;;;;;;;;;;iBAyGN,qBAAA,CAAsB,EAAU;;AA+GtB;;;;KApBd,eAAA;EACV,MAAA,EAAQ,MAAM;EACd,WAAA;EACA,MAAA;EACA,UAAA;EACA,EAAA;AAAA;;;;;;;;;;iBAYoB,iBAAA,CACpB,MAAA,UACA,OAAA,GAAS,gBAAA,GACR,OAAA,CAAQ,eAAA"}

package/esm/storage/utils/safe-fetch.mjs

@@ -2,7 +2,7 @@ import { StorageError } from "./storage-error.mjs";
 import { lookup } from "node:dns/promises";
 import { isIP } from "node:net";
 
-//#region ../@warlock.js/core/src/storage/utils/safe-fetch.ts
+//#region ../core/src/storage/utils/safe-fetch.ts
 /**
 * SSRF / resource-exhaustion guard for storage's outbound downloads
 * (`putFromUrl`).

package/esm/storage/utils/safe-fetch.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"safe-fetch.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/safe-fetch.ts"],"sourcesContent":["import { lookup } from \"node:dns/promises\";\nimport { isIP } from \"node:net\";\nimport { StorageError } from \"./storage-error\";\n\n/**\n * SSRF / resource-exhaustion guard for storage's outbound downloads\n * (`putFromUrl`).\n *\n * NOTE: this MIRRORS `@warlock.js/ai`'s `src/security/private-ip.ts` and\n * `src/security/outbound-policy.ts`. It is duplicated here intentionally\n * because `@warlock.js/core` cannot depend on `@warlock.js/ai`. Pending\n * extraction of a shared security package, keep the two copies in sync.\n */\n\n/** 50 MiB — default cap on a downloaded body (storage files run larger than AI payloads). */\nconst DEFAULT_MAX_BYTES = 50 * 1024 * 1024;\n/** 30s — default per-request timeout. */\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options controlling a guarded outbound fetch. Every field is optional;\n * {@link resolveFetchPolicy} fills safe defaults. The defaults are\n * deliberately strict (https+http, private-IP deny ON, 30s timeout,\n * 50 MiB cap) so a caller that does not tune them still gets a hardened\n * request.\n */\nexport type SafeFetchOptions = {\n  /**\n   * Whether to ALLOW private / loopback / link-local / metadata hosts.\n   * Default `false` — the SSRF guard is on (private hosts are denied).\n   */\n  allowPrivateHosts?: boolean;\n  /**\n   * Maximum response body size in bytes. A declared `content-length` over\n   * this fails fast; otherwise the body is read with a running cap and the\n   * stream is aborted on overflow. Default `52_428_800` (50 MiB).\n   */\n  maxBytes?: number;\n  /** Per-request timeout in milliseconds. Default `30_000`. */\n  timeoutMs?: number;\n  /**\n   * URL schemes permitted for the request, compared case-insensitively.\n   * Default `[\"https\", \"http\"]`.\n   */\n  allowedSchemes?: string[];\n  /**\n   * Injected `fetch` implementation (for tests or proxies). Defaults to the\n   * global `fetch`.\n   */\n  fetch?: typeof fetch;\n};\n\n/** {@link SafeFetchOptions} with every default resolved — never partial. */\ntype ResolvedFetchPolicy = {\n  allowPrivateHosts: boolean;\n  maxBytes: number;\n  timeoutMs: number;\n  allowedSchemes: string[];\n  fetch: typeof fetch;\n};\n\n/**\n * Fill a {@link SafeFetchOptions} with strict defaults: https+http,\n * private-IP deny on, 30s timeout, 50 MiB cap, global `fetch`.\n */\nfunction resolveFetchPolicy(options: SafeFetchOptions = {}): ResolvedFetchPolicy {\n  return {\n    allowPrivateHosts: options.allowPrivateHosts ?? false,\n    maxBytes: options.maxBytes ?? DEFAULT_MAX_BYTES,\n    timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    allowedSchemes: options.allowedSchemes ?? [\"https\", \"http\"],\n    fetch: options.fetch ?? globalThis.fetch,\n  };\n}\n\n/** Parse a dotted-quad into four octets, or `null` if malformed. */\nfunction parseIpv4(ip: string): [number, number, number, number] | null {\n  const parts = ip.split(\".\");\n  if (parts.length !== 4) {\n    return null;\n  }\n\n  const octets = parts.map((part) => Number(part));\n  if (octets.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) {\n    return null;\n  }\n\n  return octets as [number, number, number, number];\n}\n\nfunction isPrivateIpv4(ip: string): boolean {\n  const octets = parseIpv4(ip);\n  if (!octets) {\n    return true; // unparseable → refuse, fail closed\n  }\n\n  const [a, b] = octets;\n\n  return (\n    a === 0 || // 0.0.0.0/8 \"this network\"\n    a === 10 || // 10.0.0.0/8 private\n    a === 127 || // 127.0.0.0/8 loopback\n    (a === 100 && b >= 64 && b <= 127) || // 100.64.0.0/10 CGNAT\n    (a === 169 && b === 254) || // 169.254.0.0/16 link-local + metadata\n    (a === 172 && b >= 16 && b <= 31) || // 172.16.0.0/12 private\n    (a === 192 && b === 168) || // 192.168.0.0/16 private\n    (a === 192 && b === 0) || // 192.0.0.0/24 + 192.0.2.0/24 (IETF/test)\n    (a === 198 && (b === 18 || b === 19)) || // 198.18.0.0/15 benchmarking\n    (a === 198 && b === 51) || // 198.51.100.0/24 test-net-2\n    (a === 203 && b === 0) || // 203.0.113.0/24 test-net-3\n    a >= 224 // 224.0.0.0/4 multicast + 240.0.0.0/4 reserved + 255.255.255.255\n  );\n}\n\nfunction isPrivateIpv6(ip: string): boolean {\n  const normalized = ip.toLowerCase().split(\"%\")[0]; // drop zone id\n\n  // IPv4-mapped / -embedded (::ffff:a.b.c.d, ::a.b.c.d) — defer to the v4\n  // check on the trailing dotted-quad so an inward-mapped address is caught.\n  const v4 = normalized.match(/(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})$/);\n  if (v4) {\n    return isPrivateIpv4(v4[1]);\n  }\n\n  if (normalized === \"::1\" || normalized === \"::\") {\n    return true; // loopback / unspecified\n  }\n\n  // Expand only the leading group enough to classify the reserved blocks.\n  const firstGroup = normalized.split(\":\")[0];\n  const head = firstGroup === \"\" ? 0 : Number.parseInt(firstGroup, 16);\n\n  // fc00::/7 unique-local (fc.. / fd..)\n  if ((head & 0xfe00) === 0xfc00) {\n    return true;\n  }\n  // fe80::/10 link-local\n  if ((head & 0xffc0) === 0xfe80) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * True when `ip` is a private, loopback, link-local, unique-local,\n * carrier-grade-NAT, unspecified, or otherwise non-public address — the set\n * an SSRF guard must refuse. Accepts IPv4 and IPv6 literals (including\n * IPv4-mapped IPv6 like `::ffff:169.254.169.254`). A non-IP string returns\n * `false` (the caller resolves hostnames via DNS first).\n *\n * The cloud-metadata endpoint `169.254.169.254` is covered by the IPv4\n * link-local range `169.254.0.0/16`.\n */\nexport function isPrivateOrReservedIp(ip: string): boolean {\n  const family = isIP(ip);\n  if (family === 4) {\n    return isPrivateIpv4(ip);\n  }\n  if (family === 6) {\n    return isPrivateIpv6(ip);\n  }\n  return false;\n}\n\n/** Strip the `[ ]` IPv6 brackets `URL.hostname` keeps. */\nfunction stripBrackets(host: string): string {\n  return host.startsWith(\"[\") && host.endsWith(\"]\") ? host.slice(1, -1) : host;\n}\n\n/**\n * Reject when `host` is — or resolves to — a private / reserved address.\n * IP literals are checked directly; hostnames are resolved via DNS and every\n * returned address is checked (a public name pointing inward is caught). A\n * resolution failure fails closed.\n */\nasync function assertHostNotPrivate(host: string, rawUrl: string): Promise<void> {\n  if (isIP(host) !== 0) {\n    if (isPrivateOrReservedIp(host)) {\n      throw new StorageError(\n        `outbound request blocked — \"${host}\" is a private/reserved address`,\n        { context: { url: rawUrl, address: host } },\n      );\n    }\n    return;\n  }\n\n  let addresses: Array<{ address: string }>;\n  try {\n    addresses = await lookup(host, { all: true });\n  } catch (cause) {\n    throw new StorageError(\n      `outbound request blocked — could not resolve host \"${host}\" to verify it is public`,\n      { cause, context: { url: rawUrl, host } },\n    );\n  }\n\n  for (const { address } of addresses) {\n    if (isPrivateOrReservedIp(address)) {\n      throw new StorageError(\n        `outbound request blocked — host \"${host}\" resolves to a private/reserved address (${address})`,\n        { context: { url: rawUrl, host, address } },\n      );\n    }\n  }\n}\n\n/**\n * Validate a URL against the policy BEFORE any network call: scheme\n * allowlist and (when private hosts are not allowed) a DNS resolution that\n * rejects private / loopback / link-local / metadata addresses — the SSRF\n * guard. Returns the parsed `URL` on success; throws {@link StorageError}\n * otherwise.\n */\nasync function assertUrlAllowed(rawUrl: string, policy: ResolvedFetchPolicy): Promise<URL> {\n  let url: URL;\n  try {\n    url = new URL(rawUrl);\n  } catch {\n    throw new StorageError(`outbound request blocked — invalid URL: ${rawUrl}`, {\n      context: { url: rawUrl },\n    });\n  }\n\n  const scheme = url.protocol.replace(/:$/, \"\").toLowerCase();\n  if (!policy.allowedSchemes.some((s) => s.toLowerCase() === scheme)) {\n    throw new StorageError(\n      `outbound request blocked — scheme \"${scheme}\" is not allowed (allowed: ${policy.allowedSchemes.join(\", \")})`,\n      { context: { url: rawUrl, scheme } },\n    );\n  }\n\n  if (!policy.allowPrivateHosts) {\n    const host = stripBrackets(url.hostname);\n    await assertHostNotPrivate(host, rawUrl);\n  }\n\n  return url;\n}\n\n/**\n * Result of {@link safeFetchToBuffer}: the (capped) body plus the response's\n * content-type, so callers can derive a MIME type and enforce a non-empty\n * content-type check.\n */\nexport type SafeFetchResult = {\n  buffer: Buffer;\n  contentType: string | null;\n  status: number;\n  statusText: string;\n  ok: boolean;\n};\n\n/**\n * SSRF-guarded download: validates the URL (scheme allowlist + post-DNS\n * private-IP deny), performs the request with a timeout via\n * `AbortController`, then streams the body with a hard byte cap — aborting\n * the moment the running total exceeds `maxBytes`. A declared\n * `content-length` over the cap fails fast.\n *\n * @throws {StorageError} On a blocked URL, timeout, or oversized body.\n */\nexport async function safeFetchToBuffer(\n  rawUrl: string,\n  options: SafeFetchOptions = {},\n): Promise<SafeFetchResult> {\n  const policy = resolveFetchPolicy(options);\n  const url = await assertUrlAllowed(rawUrl, policy);\n\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(\n      new StorageError(`outbound request timed out after ${policy.timeoutMs}ms`, {\n        context: { url: rawUrl, timeoutMs: policy.timeoutMs },\n      }),\n    );\n  }, policy.timeoutMs);\n\n  try {\n    const response = await policy.fetch(url, { signal: controller.signal });\n\n    const declared = Number(response.headers.get(\"content-length\"));\n    if (Number.isFinite(declared) && declared > policy.maxBytes) {\n      throw new StorageError(\n        `outbound response body too large — declared ${declared} bytes exceeds the ${policy.maxBytes}-byte cap`,\n        { context: { url: rawUrl, declared, maxBytes: policy.maxBytes } },\n      );\n    }\n\n    const buffer = await readBodyCapped(response, policy.maxBytes, rawUrl);\n\n    return {\n      buffer,\n      contentType: response.headers.get(\"content-type\"),\n      status: response.status,\n      statusText: response.statusText,\n      ok: response.ok,\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * Read a response body into a Buffer with a hard byte cap. The stream is\n * read chunk-by-chunk and cancelled the moment the running total exceeds\n * `maxBytes`. Throws {@link StorageError} on overflow.\n */\nasync function readBodyCapped(\n  response: Response,\n  maxBytes: number,\n  rawUrl: string,\n): Promise<Buffer> {\n  if (!response.body) {\n    const arrayBuffer = await response.arrayBuffer();\n    if (arrayBuffer.byteLength > maxBytes) {\n      throw new StorageError(\n        `outbound response body exceeded the ${maxBytes}-byte cap`,\n        { context: { url: rawUrl, maxBytes } },\n      );\n    }\n    return Buffer.from(arrayBuffer);\n  }\n\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n    if (!value) {\n      continue;\n    }\n\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      throw new StorageError(\n        `outbound response body exceeded the ${maxBytes}-byte cap`,\n        { context: { url: rawUrl, maxBytes } },\n      );\n    }\n    chunks.push(value);\n  }\n\n  return Buffer.concat(chunks);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAeA,MAAM,oBAAoB,KAAK,OAAO;;AAEtC,MAAM,qBAAqB;;;;;AAgD3B,SAAS,mBAAmB,UAA4B,CAAC,GAAwB;CAC/E,OAAO;EACL,mBAAmB,QAAQ,qBAAqB;EAChD,UAAU,QAAQ,YAAY;EAC9B,WAAW,QAAQ,aAAa;EAChC,gBAAgB,QAAQ,kBAAkB,CAAC,SAAS,MAAM;EAC1D,OAAO,QAAQ,SAAS,WAAW;CACrC;AACF;;AAGA,SAAS,UAAU,IAAqD;CACtE,MAAM,QAAQ,GAAG,MAAM,GAAG;CAC1B,IAAI,MAAM,WAAW,GACnB,OAAO;CAGT,MAAM,SAAS,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC;CAC/C,IAAI,OAAO,MAAM,MAAM,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,KAAK,IAAI,GAAG,GAC7D,OAAO;CAGT,OAAO;AACT;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,SAAS,UAAU,EAAE;CAC3B,IAAI,CAAC,QACH,OAAO;CAGT,MAAM,CAAC,GAAG,KAAK;CAEf,OACE,MAAM,KACN,MAAM,MACN,MAAM,OACL,MAAM,OAAO,KAAK,MAAM,KAAK,OAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,MAAM,KACnB,MAAM,QAAQ,MAAM,MAAM,MAAM,OAChC,MAAM,OAAO,MAAM,MACnB,MAAM,OAAO,MAAM,KACpB,KAAK;AAET;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;CAI/C,MAAM,KAAK,WAAW,MAAM,uCAAuC;CACnE,IAAI,IACF,OAAO,cAAc,GAAG,EAAE;CAG5B,IAAI,eAAe,SAAS,eAAe,MACzC,OAAO;CAIT,MAAM,aAAa,WAAW,MAAM,GAAG,CAAC,CAAC;CACzC,MAAM,OAAO,eAAe,KAAK,IAAI,OAAO,SAAS,YAAY,EAAE;CAGnE,KAAK,OAAO,WAAY,OACtB,OAAO;CAGT,KAAK,OAAO,WAAY,OACtB,OAAO;CAGT,OAAO;AACT;;;;;;;;;;;AAYA,SAAgB,sBAAsB,IAAqB;CACzD,MAAM,SAAS,KAAK,EAAE;CACtB,IAAI,WAAW,GACb,OAAO,cAAc,EAAE;CAEzB,IAAI,WAAW,GACb,OAAO,cAAc,EAAE;CAEzB,OAAO;AACT;;AAGA,SAAS,cAAc,MAAsB;CAC3C,OAAO,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI;AAC1E;;;;;;;AAQA,eAAe,qBAAqB,MAAc,QAA+B;CAC/E,IAAI,KAAK,IAAI,MAAM,GAAG;EACpB,IAAI,sBAAsB,IAAI,GAC5B,MAAM,IAAI,aACR,+BAA+B,KAAK,kCACpC,EAAE,SAAS;GAAE,KAAK;GAAQ,SAAS;EAAK,EAAE,CAC5C;EAEF;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,OAAO,MAAM,EAAE,KAAK,KAAK,CAAC;CAC9C,SAAS,OAAO;EACd,MAAM,IAAI,aACR,sDAAsD,KAAK,2BAC3D;GAAE;GAAO,SAAS;IAAE,KAAK;IAAQ;GAAK;EAAE,CAC1C;CACF;CAEA,KAAK,MAAM,EAAE,aAAa,WACxB,IAAI,sBAAsB,OAAO,GAC/B,MAAM,IAAI,aACR,oCAAoC,KAAK,4CAA4C,QAAQ,IAC7F,EAAE,SAAS;EAAE,KAAK;EAAQ;EAAM;CAAQ,EAAE,CAC5C;AAGN;;;;;;;;AASA,eAAe,iBAAiB,QAAgB,QAA2C;CACzF,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,MAAM;CACtB,QAAQ;EACN,MAAM,IAAI,aAAa,2CAA2C,UAAU,EAC1E,SAAS,EAAE,KAAK,OAAO,EACzB,CAAC;CACH;CAEA,MAAM,SAAS,IAAI,SAAS,QAAQ,MAAM,EAAE,CAAC,CAAC,YAAY;CAC1D,IAAI,CAAC,OAAO,eAAe,MAAM,MAAM,EAAE,YAAY,MAAM,MAAM,GAC/D,MAAM,IAAI,aACR,sCAAsC,OAAO,6BAA6B,OAAO,eAAe,KAAK,IAAI,EAAE,IAC3G,EAAE,SAAS;EAAE,KAAK;EAAQ;CAAO,EAAE,CACrC;CAGF,IAAI,CAAC,OAAO,mBAEV,MAAM,qBADO,cAAc,IAAI,QACD,GAAG,MAAM;CAGzC,OAAO;AACT;;;;;;;;;;AAwBA,eAAsB,kBACpB,QACA,UAA4B,CAAC,GACH;CAC1B,MAAM,SAAS,mBAAmB,OAAO;CACzC,MAAM,MAAM,MAAM,iBAAiB,QAAQ,MAAM;CAEjD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB;EAC7B,WAAW,MACT,IAAI,aAAa,oCAAoC,OAAO,UAAU,KAAK,EACzE,SAAS;GAAE,KAAK;GAAQ,WAAW,OAAO;EAAU,EACtD,CAAC,CACH;CACF,GAAG,OAAO,SAAS;CAEnB,IAAI;EACF,MAAM,WAAW,MAAM,OAAO,MAAM,KAAK,EAAE,QAAQ,WAAW,OAAO,CAAC;EAEtE,MAAM,WAAW,OAAO,SAAS,QAAQ,IAAI,gBAAgB,CAAC;EAC9D,IAAI,OAAO,SAAS,QAAQ,KAAK,WAAW,OAAO,UACjD,MAAM,IAAI,aACR,+CAA+C,SAAS,qBAAqB,OAAO,SAAS,YAC7F,EAAE,SAAS;GAAE,KAAK;GAAQ;GAAU,UAAU,OAAO;EAAS,EAAE,CAClE;EAKF,OAAO;GACL,cAHmB,eAAe,UAAU,OAAO,UAAU,MAAM;GAInE,aAAa,SAAS,QAAQ,IAAI,cAAc;GAChD,QAAQ,SAAS;GACjB,YAAY,SAAS;GACrB,IAAI,SAAS;EACf;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;;;;;;AAOA,eAAe,eACb,UACA,UACA,QACiB;CACjB,IAAI,CAAC,SAAS,MAAM;EAClB,MAAM,cAAc,MAAM,SAAS,YAAY;EAC/C,IAAI,YAAY,aAAa,UAC3B,MAAM,IAAI,aACR,uCAAuC,SAAS,YAChD,EAAE,SAAS;GAAE,KAAK;GAAQ;EAAS,EAAE,CACvC;EAEF,OAAO,OAAO,KAAK,WAAW;CAChC;CAEA,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CAEZ,SAAS;EACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;EAC1C,IAAI,MACF;EAEF,IAAI,CAAC,OACH;EAGF,SAAS,MAAM;EACf,IAAI,QAAQ,UAAU;GACpB,MAAM,OAAO,OAAO;GACpB,MAAM,IAAI,aACR,uCAAuC,SAAS,YAChD,EAAE,SAAS;IAAE,KAAK;IAAQ;GAAS,EAAE,CACvC;EACF;EACA,OAAO,KAAK,KAAK;CACnB;CAEA,OAAO,OAAO,OAAO,MAAM;AAC7B"}
+{"version":3,"file":"safe-fetch.mjs","names":[],"sources":["../../../../../../../../core/src/storage/utils/safe-fetch.ts"],"sourcesContent":["import { lookup } from \"node:dns/promises\";\nimport { isIP } from \"node:net\";\nimport { StorageError } from \"./storage-error\";\n\n/**\n * SSRF / resource-exhaustion guard for storage's outbound downloads\n * (`putFromUrl`).\n *\n * NOTE: this MIRRORS `@warlock.js/ai`'s `src/security/private-ip.ts` and\n * `src/security/outbound-policy.ts`. It is duplicated here intentionally\n * because `@warlock.js/core` cannot depend on `@warlock.js/ai`. Pending\n * extraction of a shared security package, keep the two copies in sync.\n */\n\n/** 50 MiB — default cap on a downloaded body (storage files run larger than AI payloads). */\nconst DEFAULT_MAX_BYTES = 50 * 1024 * 1024;\n/** 30s — default per-request timeout. */\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options controlling a guarded outbound fetch. Every field is optional;\n * {@link resolveFetchPolicy} fills safe defaults. The defaults are\n * deliberately strict (https+http, private-IP deny ON, 30s timeout,\n * 50 MiB cap) so a caller that does not tune them still gets a hardened\n * request.\n */\nexport type SafeFetchOptions = {\n  /**\n   * Whether to ALLOW private / loopback / link-local / metadata hosts.\n   * Default `false` — the SSRF guard is on (private hosts are denied).\n   */\n  allowPrivateHosts?: boolean;\n  /**\n   * Maximum response body size in bytes. A declared `content-length` over\n   * this fails fast; otherwise the body is read with a running cap and the\n   * stream is aborted on overflow. Default `52_428_800` (50 MiB).\n   */\n  maxBytes?: number;\n  /** Per-request timeout in milliseconds. Default `30_000`. */\n  timeoutMs?: number;\n  /**\n   * URL schemes permitted for the request, compared case-insensitively.\n   * Default `[\"https\", \"http\"]`.\n   */\n  allowedSchemes?: string[];\n  /**\n   * Injected `fetch` implementation (for tests or proxies). Defaults to the\n   * global `fetch`.\n   */\n  fetch?: typeof fetch;\n};\n\n/** {@link SafeFetchOptions} with every default resolved — never partial. */\ntype ResolvedFetchPolicy = {\n  allowPrivateHosts: boolean;\n  maxBytes: number;\n  timeoutMs: number;\n  allowedSchemes: string[];\n  fetch: typeof fetch;\n};\n\n/**\n * Fill a {@link SafeFetchOptions} with strict defaults: https+http,\n * private-IP deny on, 30s timeout, 50 MiB cap, global `fetch`.\n */\nfunction resolveFetchPolicy(options: SafeFetchOptions = {}): ResolvedFetchPolicy {\n  return {\n    allowPrivateHosts: options.allowPrivateHosts ?? false,\n    maxBytes: options.maxBytes ?? DEFAULT_MAX_BYTES,\n    timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    allowedSchemes: options.allowedSchemes ?? [\"https\", \"http\"],\n    fetch: options.fetch ?? globalThis.fetch,\n  };\n}\n\n/** Parse a dotted-quad into four octets, or `null` if malformed. */\nfunction parseIpv4(ip: string): [number, number, number, number] | null {\n  const parts = ip.split(\".\");\n  if (parts.length !== 4) {\n    return null;\n  }\n\n  const octets = parts.map((part) => Number(part));\n  if (octets.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) {\n    return null;\n  }\n\n  return octets as [number, number, number, number];\n}\n\nfunction isPrivateIpv4(ip: string): boolean {\n  const octets = parseIpv4(ip);\n  if (!octets) {\n    return true; // unparseable → refuse, fail closed\n  }\n\n  const [a, b] = octets;\n\n  return (\n    a === 0 || // 0.0.0.0/8 \"this network\"\n    a === 10 || // 10.0.0.0/8 private\n    a === 127 || // 127.0.0.0/8 loopback\n    (a === 100 && b >= 64 && b <= 127) || // 100.64.0.0/10 CGNAT\n    (a === 169 && b === 254) || // 169.254.0.0/16 link-local + metadata\n    (a === 172 && b >= 16 && b <= 31) || // 172.16.0.0/12 private\n    (a === 192 && b === 168) || // 192.168.0.0/16 private\n    (a === 192 && b === 0) || // 192.0.0.0/24 + 192.0.2.0/24 (IETF/test)\n    (a === 198 && (b === 18 || b === 19)) || // 198.18.0.0/15 benchmarking\n    (a === 198 && b === 51) || // 198.51.100.0/24 test-net-2\n    (a === 203 && b === 0) || // 203.0.113.0/24 test-net-3\n    a >= 224 // 224.0.0.0/4 multicast + 240.0.0.0/4 reserved + 255.255.255.255\n  );\n}\n\nfunction isPrivateIpv6(ip: string): boolean {\n  const normalized = ip.toLowerCase().split(\"%\")[0]; // drop zone id\n\n  // IPv4-mapped / -embedded (::ffff:a.b.c.d, ::a.b.c.d) — defer to the v4\n  // check on the trailing dotted-quad so an inward-mapped address is caught.\n  const v4 = normalized.match(/(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})$/);\n  if (v4) {\n    return isPrivateIpv4(v4[1]);\n  }\n\n  if (normalized === \"::1\" || normalized === \"::\") {\n    return true; // loopback / unspecified\n  }\n\n  // Expand only the leading group enough to classify the reserved blocks.\n  const firstGroup = normalized.split(\":\")[0];\n  const head = firstGroup === \"\" ? 0 : Number.parseInt(firstGroup, 16);\n\n  // fc00::/7 unique-local (fc.. / fd..)\n  if ((head & 0xfe00) === 0xfc00) {\n    return true;\n  }\n  // fe80::/10 link-local\n  if ((head & 0xffc0) === 0xfe80) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * True when `ip` is a private, loopback, link-local, unique-local,\n * carrier-grade-NAT, unspecified, or otherwise non-public address — the set\n * an SSRF guard must refuse. Accepts IPv4 and IPv6 literals (including\n * IPv4-mapped IPv6 like `::ffff:169.254.169.254`). A non-IP string returns\n * `false` (the caller resolves hostnames via DNS first).\n *\n * The cloud-metadata endpoint `169.254.169.254` is covered by the IPv4\n * link-local range `169.254.0.0/16`.\n */\nexport function isPrivateOrReservedIp(ip: string): boolean {\n  const family = isIP(ip);\n  if (family === 4) {\n    return isPrivateIpv4(ip);\n  }\n  if (family === 6) {\n    return isPrivateIpv6(ip);\n  }\n  return false;\n}\n\n/** Strip the `[ ]` IPv6 brackets `URL.hostname` keeps. */\nfunction stripBrackets(host: string): string {\n  return host.startsWith(\"[\") && host.endsWith(\"]\") ? host.slice(1, -1) : host;\n}\n\n/**\n * Reject when `host` is — or resolves to — a private / reserved address.\n * IP literals are checked directly; hostnames are resolved via DNS and every\n * returned address is checked (a public name pointing inward is caught). A\n * resolution failure fails closed.\n */\nasync function assertHostNotPrivate(host: string, rawUrl: string): Promise<void> {\n  if (isIP(host) !== 0) {\n    if (isPrivateOrReservedIp(host)) {\n      throw new StorageError(\n        `outbound request blocked — \"${host}\" is a private/reserved address`,\n        { context: { url: rawUrl, address: host } },\n      );\n    }\n    return;\n  }\n\n  let addresses: Array<{ address: string }>;\n  try {\n    addresses = await lookup(host, { all: true });\n  } catch (cause) {\n    throw new StorageError(\n      `outbound request blocked — could not resolve host \"${host}\" to verify it is public`,\n      { cause, context: { url: rawUrl, host } },\n    );\n  }\n\n  for (const { address } of addresses) {\n    if (isPrivateOrReservedIp(address)) {\n      throw new StorageError(\n        `outbound request blocked — host \"${host}\" resolves to a private/reserved address (${address})`,\n        { context: { url: rawUrl, host, address } },\n      );\n    }\n  }\n}\n\n/**\n * Validate a URL against the policy BEFORE any network call: scheme\n * allowlist and (when private hosts are not allowed) a DNS resolution that\n * rejects private / loopback / link-local / metadata addresses — the SSRF\n * guard. Returns the parsed `URL` on success; throws {@link StorageError}\n * otherwise.\n */\nasync function assertUrlAllowed(rawUrl: string, policy: ResolvedFetchPolicy): Promise<URL> {\n  let url: URL;\n  try {\n    url = new URL(rawUrl);\n  } catch {\n    throw new StorageError(`outbound request blocked — invalid URL: ${rawUrl}`, {\n      context: { url: rawUrl },\n    });\n  }\n\n  const scheme = url.protocol.replace(/:$/, \"\").toLowerCase();\n  if (!policy.allowedSchemes.some((s) => s.toLowerCase() === scheme)) {\n    throw new StorageError(\n      `outbound request blocked — scheme \"${scheme}\" is not allowed (allowed: ${policy.allowedSchemes.join(\", \")})`,\n      { context: { url: rawUrl, scheme } },\n    );\n  }\n\n  if (!policy.allowPrivateHosts) {\n    const host = stripBrackets(url.hostname);\n    await assertHostNotPrivate(host, rawUrl);\n  }\n\n  return url;\n}\n\n/**\n * Result of {@link safeFetchToBuffer}: the (capped) body plus the response's\n * content-type, so callers can derive a MIME type and enforce a non-empty\n * content-type check.\n */\nexport type SafeFetchResult = {\n  buffer: Buffer;\n  contentType: string | null;\n  status: number;\n  statusText: string;\n  ok: boolean;\n};\n\n/**\n * SSRF-guarded download: validates the URL (scheme allowlist + post-DNS\n * private-IP deny), performs the request with a timeout via\n * `AbortController`, then streams the body with a hard byte cap — aborting\n * the moment the running total exceeds `maxBytes`. A declared\n * `content-length` over the cap fails fast.\n *\n * @throws {StorageError} On a blocked URL, timeout, or oversized body.\n */\nexport async function safeFetchToBuffer(\n  rawUrl: string,\n  options: SafeFetchOptions = {},\n): Promise<SafeFetchResult> {\n  const policy = resolveFetchPolicy(options);\n  const url = await assertUrlAllowed(rawUrl, policy);\n\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(\n      new StorageError(`outbound request timed out after ${policy.timeoutMs}ms`, {\n        context: { url: rawUrl, timeoutMs: policy.timeoutMs },\n      }),\n    );\n  }, policy.timeoutMs);\n\n  try {\n    const response = await policy.fetch(url, { signal: controller.signal });\n\n    const declared = Number(response.headers.get(\"content-length\"));\n    if (Number.isFinite(declared) && declared > policy.maxBytes) {\n      throw new StorageError(\n        `outbound response body too large — declared ${declared} bytes exceeds the ${policy.maxBytes}-byte cap`,\n        { context: { url: rawUrl, declared, maxBytes: policy.maxBytes } },\n      );\n    }\n\n    const buffer = await readBodyCapped(response, policy.maxBytes, rawUrl);\n\n    return {\n      buffer,\n      contentType: response.headers.get(\"content-type\"),\n      status: response.status,\n      statusText: response.statusText,\n      ok: response.ok,\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * Read a response body into a Buffer with a hard byte cap. The stream is\n * read chunk-by-chunk and cancelled the moment the running total exceeds\n * `maxBytes`. Throws {@link StorageError} on overflow.\n */\nasync function readBodyCapped(\n  response: Response,\n  maxBytes: number,\n  rawUrl: string,\n): Promise<Buffer> {\n  if (!response.body) {\n    const arrayBuffer = await response.arrayBuffer();\n    if (arrayBuffer.byteLength > maxBytes) {\n      throw new StorageError(\n        `outbound response body exceeded the ${maxBytes}-byte cap`,\n        { context: { url: rawUrl, maxBytes } },\n      );\n    }\n    return Buffer.from(arrayBuffer);\n  }\n\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n    if (!value) {\n      continue;\n    }\n\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      throw new StorageError(\n        `outbound response body exceeded the ${maxBytes}-byte cap`,\n        { context: { url: rawUrl, maxBytes } },\n      );\n    }\n    chunks.push(value);\n  }\n\n  return Buffer.concat(chunks);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAeA,MAAM,oBAAoB,KAAK,OAAO;;AAEtC,MAAM,qBAAqB;;;;;AAgD3B,SAAS,mBAAmB,UAA4B,CAAC,GAAwB;CAC/E,OAAO;EACL,mBAAmB,QAAQ,qBAAqB;EAChD,UAAU,QAAQ,YAAY;EAC9B,WAAW,QAAQ,aAAa;EAChC,gBAAgB,QAAQ,kBAAkB,CAAC,SAAS,MAAM;EAC1D,OAAO,QAAQ,SAAS,WAAW;CACrC;AACF;;AAGA,SAAS,UAAU,IAAqD;CACtE,MAAM,QAAQ,GAAG,MAAM,GAAG;CAC1B,IAAI,MAAM,WAAW,GACnB,OAAO;CAGT,MAAM,SAAS,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC;CAC/C,IAAI,OAAO,MAAM,MAAM,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,KAAK,IAAI,GAAG,GAC7D,OAAO;CAGT,OAAO;AACT;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,SAAS,UAAU,EAAE;CAC3B,IAAI,CAAC,QACH,OAAO;CAGT,MAAM,CAAC,GAAG,KAAK;CAEf,OACE,MAAM,KACN,MAAM,MACN,MAAM,OACL,MAAM,OAAO,KAAK,MAAM,KAAK,OAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,MAAM,KACnB,MAAM,QAAQ,MAAM,MAAM,MAAM,OAChC,MAAM,OAAO,MAAM,MACnB,MAAM,OAAO,MAAM,KACpB,KAAK;AAET;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;CAI/C,MAAM,KAAK,WAAW,MAAM,uCAAuC;CACnE,IAAI,IACF,OAAO,cAAc,GAAG,EAAE;CAG5B,IAAI,eAAe,SAAS,eAAe,MACzC,OAAO;CAIT,MAAM,aAAa,WAAW,MAAM,GAAG,CAAC,CAAC;CACzC,MAAM,OAAO,eAAe,KAAK,IAAI,OAAO,SAAS,YAAY,EAAE;CAGnE,KAAK,OAAO,WAAY,OACtB,OAAO;CAGT,KAAK,OAAO,WAAY,OACtB,OAAO;CAGT,OAAO;AACT;;;;;;;;;;;AAYA,SAAgB,sBAAsB,IAAqB;CACzD,MAAM,SAAS,KAAK,EAAE;CACtB,IAAI,WAAW,GACb,OAAO,cAAc,EAAE;CAEzB,IAAI,WAAW,GACb,OAAO,cAAc,EAAE;CAEzB,OAAO;AACT;;AAGA,SAAS,cAAc,MAAsB;CAC3C,OAAO,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI;AAC1E;;;;;;;AAQA,eAAe,qBAAqB,MAAc,QAA+B;CAC/E,IAAI,KAAK,IAAI,MAAM,GAAG;EACpB,IAAI,sBAAsB,IAAI,GAC5B,MAAM,IAAI,aACR,+BAA+B,KAAK,kCACpC,EAAE,SAAS;GAAE,KAAK;GAAQ,SAAS;EAAK,EAAE,CAC5C;EAEF;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,OAAO,MAAM,EAAE,KAAK,KAAK,CAAC;CAC9C,SAAS,OAAO;EACd,MAAM,IAAI,aACR,sDAAsD,KAAK,2BAC3D;GAAE;GAAO,SAAS;IAAE,KAAK;IAAQ;GAAK;EAAE,CAC1C;CACF;CAEA,KAAK,MAAM,EAAE,aAAa,WACxB,IAAI,sBAAsB,OAAO,GAC/B,MAAM,IAAI,aACR,oCAAoC,KAAK,4CAA4C,QAAQ,IAC7F,EAAE,SAAS;EAAE,KAAK;EAAQ;EAAM;CAAQ,EAAE,CAC5C;AAGN;;;;;;;;AASA,eAAe,iBAAiB,QAAgB,QAA2C;CACzF,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,MAAM;CACtB,QAAQ;EACN,MAAM,IAAI,aAAa,2CAA2C,UAAU,EAC1E,SAAS,EAAE,KAAK,OAAO,EACzB,CAAC;CACH;CAEA,MAAM,SAAS,IAAI,SAAS,QAAQ,MAAM,EAAE,CAAC,CAAC,YAAY;CAC1D,IAAI,CAAC,OAAO,eAAe,MAAM,MAAM,EAAE,YAAY,MAAM,MAAM,GAC/D,MAAM,IAAI,aACR,sCAAsC,OAAO,6BAA6B,OAAO,eAAe,KAAK,IAAI,EAAE,IAC3G,EAAE,SAAS;EAAE,KAAK;EAAQ;CAAO,EAAE,CACrC;CAGF,IAAI,CAAC,OAAO,mBAEV,MAAM,qBADO,cAAc,IAAI,QACD,GAAG,MAAM;CAGzC,OAAO;AACT;;;;;;;;;;AAwBA,eAAsB,kBACpB,QACA,UAA4B,CAAC,GACH;CAC1B,MAAM,SAAS,mBAAmB,OAAO;CACzC,MAAM,MAAM,MAAM,iBAAiB,QAAQ,MAAM;CAEjD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB;EAC7B,WAAW,MACT,IAAI,aAAa,oCAAoC,OAAO,UAAU,KAAK,EACzE,SAAS;GAAE,KAAK;GAAQ,WAAW,OAAO;EAAU,EACtD,CAAC,CACH;CACF,GAAG,OAAO,SAAS;CAEnB,IAAI;EACF,MAAM,WAAW,MAAM,OAAO,MAAM,KAAK,EAAE,QAAQ,WAAW,OAAO,CAAC;EAEtE,MAAM,WAAW,OAAO,SAAS,QAAQ,IAAI,gBAAgB,CAAC;EAC9D,IAAI,OAAO,SAAS,QAAQ,KAAK,WAAW,OAAO,UACjD,MAAM,IAAI,aACR,+CAA+C,SAAS,qBAAqB,OAAO,SAAS,YAC7F,EAAE,SAAS;GAAE,KAAK;GAAQ;GAAU,UAAU,OAAO;EAAS,EAAE,CAClE;EAKF,OAAO;GACL,cAHmB,eAAe,UAAU,OAAO,UAAU,MAAM;GAInE,aAAa,SAAS,QAAQ,IAAI,cAAc;GAChD,QAAQ,SAAS;GACjB,YAAY,SAAS;GACrB,IAAI,SAAS;EACf;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;;;;;;AAOA,eAAe,eACb,UACA,UACA,QACiB;CACjB,IAAI,CAAC,SAAS,MAAM;EAClB,MAAM,cAAc,MAAM,SAAS,YAAY;EAC/C,IAAI,YAAY,aAAa,UAC3B,MAAM,IAAI,aACR,uCAAuC,SAAS,YAChD,EAAE,SAAS;GAAE,KAAK;GAAQ;EAAS,EAAE,CACvC;EAEF,OAAO,OAAO,KAAK,WAAW;CAChC;CAEA,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CAEZ,SAAS;EACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;EAC1C,IAAI,MACF;EAEF,IAAI,CAAC,OACH;EAGF,SAAS,MAAM;EACf,IAAI,QAAQ,UAAU;GACpB,MAAM,OAAO,OAAO;GACpB,MAAM,IAAI,aACR,uCAAuC,SAAS,YAChD,EAAE,SAAS;IAAE,KAAK;IAAQ;GAAS,EAAE,CACvC;EACF;EACA,OAAO,KAAK,KAAK;CACnB;CAEA,OAAO,OAAO,OAAO,MAAM;AAC7B"}

package/esm/storage/utils/storage-error.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/storage/utils/storage-error.d.ts
+//#region ../core/src/storage/utils/storage-error.d.ts
 /**
  * Base error for the storage subsystem.
  *

package/esm/storage/utils/storage-error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-error.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/storage-error.ts"],"mappings":";;AAYA;;;;;;;;AAEkB;AAOlB;;KATY,mBAAA;EACV,KAAA;EACA,OAAA,GAAU,MAAM;AAAA;;;;;cAOL,YAAA,SAAqB,KAAA;EASN;;;EAAA,SALV,KAAA;EAOoB;;AAA6B;EAA7B,SAFpB,OAAA,GAAU,MAAA;cAEP,OAAA,UAAiB,OAAA,GAAU,mBAAA;AAAA"}
+{"version":3,"file":"storage-error.d.mts","names":[],"sources":["../../../../../../../../core/src/storage/utils/storage-error.ts"],"mappings":";;AAYA;;;;;;;;AAEkB;AAOlB;;KATY,mBAAA;EACV,KAAA;EACA,OAAA,GAAU,MAAM;AAAA;;;;;cAOL,YAAA,SAAqB,KAAA;EASN;;;EAAA,SALV,KAAA;EAOoB;;AAA6B;EAA7B,SAFpB,OAAA,GAAU,MAAA;cAEP,OAAA,UAAiB,OAAA,GAAU,mBAAA;AAAA"}

package/esm/storage/utils/storage-error.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/storage/utils/storage-error.ts
+//#region ../core/src/storage/utils/storage-error.ts
 /**
 * Error thrown by storage drivers for refused or invalid operations
 * (path-traversal attempts, blocked outbound fetches, oversized downloads).

package/esm/storage/utils/storage-error.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storage-error.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/utils/storage-error.ts"],"sourcesContent":["/**\n * Base error for the storage subsystem.\n *\n * The storage drivers historically threw bare `Error`s. The security\n * guards added to the local and cloud drivers (path-traversal containment,\n * SSRF-guarded `putFromUrl`) need a named, catchable error so callers can\n * branch on `instanceof StorageError` instead of string-matching messages.\n *\n * `context` is a free-form diagnostic bag (offending location, host, URL)\n * mirroring the convention used by `@warlock.js/ai`'s error classes — it is\n * for logs and telemetry, treated as opaque by consumers.\n */\nexport type StorageErrorOptions = {\n  cause?: unknown;\n  context?: Record<string, unknown>;\n};\n\n/**\n * Error thrown by storage drivers for refused or invalid operations\n * (path-traversal attempts, blocked outbound fetches, oversized downloads).\n */\nexport class StorageError extends Error {\n  /**\n   * Optional original thrown value preserved through re-wrapping.\n   */\n  public readonly cause?: unknown;\n\n  /**\n   * Optional free-form diagnostic bag (location, host, url, …).\n   */\n  public readonly context?: Record<string, unknown>;\n\n  public constructor(message: string, options?: StorageErrorOptions) {\n    super(message);\n    this.name = \"StorageError\";\n    this.cause = options?.cause;\n    this.context = options?.context;\n  }\n}\n"],"mappings":";;;;;AAqBA,IAAa,eAAb,cAAkC,MAAM;CAWtC,AAAO,YAAY,SAAiB,SAA+B;EACjE,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,QAAQ,SAAS;EACtB,KAAK,UAAU,SAAS;CAC1B;AACF"}
+{"version":3,"file":"storage-error.mjs","names":[],"sources":["../../../../../../../../core/src/storage/utils/storage-error.ts"],"sourcesContent":["/**\n * Base error for the storage subsystem.\n *\n * The storage drivers historically threw bare `Error`s. The security\n * guards added to the local and cloud drivers (path-traversal containment,\n * SSRF-guarded `putFromUrl`) need a named, catchable error so callers can\n * branch on `instanceof StorageError` instead of string-matching messages.\n *\n * `context` is a free-form diagnostic bag (offending location, host, URL)\n * mirroring the convention used by `@warlock.js/ai`'s error classes — it is\n * for logs and telemetry, treated as opaque by consumers.\n */\nexport type StorageErrorOptions = {\n  cause?: unknown;\n  context?: Record<string, unknown>;\n};\n\n/**\n * Error thrown by storage drivers for refused or invalid operations\n * (path-traversal attempts, blocked outbound fetches, oversized downloads).\n */\nexport class StorageError extends Error {\n  /**\n   * Optional original thrown value preserved through re-wrapping.\n   */\n  public readonly cause?: unknown;\n\n  /**\n   * Optional free-form diagnostic bag (location, host, url, …).\n   */\n  public readonly context?: Record<string, unknown>;\n\n  public constructor(message: string, options?: StorageErrorOptions) {\n    super(message);\n    this.name = \"StorageError\";\n    this.cause = options?.cause;\n    this.context = options?.context;\n  }\n}\n"],"mappings":";;;;;AAqBA,IAAa,eAAb,cAAkC,MAAM;CAWtC,AAAO,YAAY,SAAiB,SAA+B;EACjE,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,QAAQ,SAAS;EACtB,KAAK,UAAU,SAAS;CAC1B;AACF"}

package/esm/tests/start-http-development-server.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/tests/start-http-development-server.d.ts
+//#region ../core/src/tests/start-http-development-server.d.ts
 /**
  * Start the HTTP test server (minimal - no file watching)
  * Call this in Vitest's globalSetup

package/esm/tests/start-http-development-server.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"start-http-development-server.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/tests/start-http-development-server.ts"],"mappings":";;AAyBA;;;iBAAsB,mBAAA,IAAuB,OAAO;AAAA;AAgDpD;;;AAhDoD,iBAgD9B,kBAAA,IAAsB,OAAO;AAAA;AAmBnD;;AAnBmD,iBAmBnC,mBAAA"}
+{"version":3,"file":"start-http-development-server.d.mts","names":[],"sources":["../../../../../../../core/src/tests/start-http-development-server.ts"],"mappings":";;AAyBA;;;iBAAsB,mBAAA,IAAuB,OAAO;AAAA;AAgDpD;;;AAhDoD,iBAgD9B,kBAAA,IAAsB,OAAO;AAAA;AAmBnD;;AAnBmD,iBAmBnC,mBAAA"}

package/esm/tests/start-http-development-server.mjs

@@ -7,7 +7,7 @@ import { warlockConfigManager } from "../warlock-config/warlock-config.manager.m
 import { filesOrchestrator } from "../dev-server/files-orchestrator.mjs";
 import { loadConfigFiles } from "../config/load-config-files.mjs";
 
-//#region ../@warlock.js/core/src/tests/start-http-development-server.ts
+//#region ../core/src/tests/start-http-development-server.ts
 /**
 * HTTP Test Server
 *

package/esm/tests/start-http-development-server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"start-http-development-server.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/tests/start-http-development-server.ts"],"sourcesContent":["/**\r\n * HTTP Test Server\r\n *\r\n * Starts a minimal HTTP server for testing.\r\n * Unlike the full DevelopmentServer, this:\r\n * - Does NOT watch files\r\n * - Does NOT do HMR\r\n * - Only starts connectors needed for HTTP requests\r\n *\r\n * Used in Vitest's globalSetup to start server once for all test workers.\r\n */\r\nimport { Application } from \"../application\";\r\nimport { bootstrap } from \"../bootstrap\";\r\nimport { loadConfigFiles } from \"../config/load-config-files\";\r\nimport { connectorsManager } from \"../connectors/connectors-manager\";\r\nimport { ConnectorLifecyclePhase } from \"../connectors/types\";\r\nimport { filesOrchestrator } from \"../dev-server/files-orchestrator\";\r\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\r\n\r\nlet isServerRunning = false;\r\n\r\n/**\r\n * Start the HTTP test server (minimal - no file watching)\r\n * Call this in Vitest's globalSetup\r\n */\r\nexport async function startHttpTestServer(): Promise<void> {\r\n  if (isServerRunning) {\r\n    console.log(\"[test-server] Server already running, skipping start\");\r\n    return;\r\n  }\r\n\r\n  console.log(\"[test-server] Starting HTTP test server...\");\r\n\r\n  try {\r\n    // Set environment\r\n    Application.setRuntimeStrategy(\"development\");\r\n    Application.setEnvironment(\"test\");\r\n\r\n    // Bootstrap (env, etc.)\r\n    await warlockConfigManager.load();\r\n    await bootstrap();\r\n\r\n    // Initialize file orchestrator (but don't watch)\r\n    await filesOrchestrator.init();\r\n    await filesOrchestrator.initializeAll();\r\n\r\n    // Load config files\r\n    await loadConfigFiles(true);\r\n\r\n    // Early-phase connectors (database, cache, logger, storage, mailer,\r\n    // herald) must start BEFORE app modules load: a module's `main.ts` boot\r\n    // side-effect can query the DB at import time, so the data source has to\r\n    // be registered first. This mirrors the dev/prod boot order (see\r\n    // `cli-commands.manager`, `production-builder`, and `DevelopmentServer`).\r\n    await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);\r\n\r\n    // Load application modules (their boot side-effects now see a live DB).\r\n    await filesOrchestrator.moduleLoader.loadAll();\r\n\r\n    // Late-phase connectors (http, socket) bind after app code has\r\n    // registered its routes and listeners.\r\n    await connectorsManager.startPhase(ConnectorLifecyclePhase.Late);\r\n\r\n    isServerRunning = true;\r\n  } catch (error) {\r\n    throw error;\r\n  }\r\n}\r\n\r\n/**\r\n * Stop the HTTP test server\r\n * Call this in Vitest's globalTeardown\r\n */\r\nexport async function stopHttpTestServer(): Promise<void> {\r\n  if (!isServerRunning) {\r\n    console.log(\"[test-server] No server to stop\");\r\n    return;\r\n  }\r\n\r\n  try {\r\n    await connectorsManager.shutdown();\r\n    isServerRunning = false;\r\n    console.log(\"[test-server] HTTP test server stopped\");\r\n  } catch (error) {\r\n    console.error(\"[test-server] Error stopping HTTP server:\", error);\r\n    throw error;\r\n  }\r\n}\r\n\r\n/**\r\n * Check if test server is running\r\n */\r\nexport function isTestServerRunning(): boolean {\r\n  return isServerRunning;\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmBA,IAAI,kBAAkB;;;;;AAMtB,eAAsB,sBAAqC;CACzD,IAAI,iBAAiB;EACnB,QAAQ,IAAI,sDAAsD;EAClE;CACF;CAEA,QAAQ,IAAI,4CAA4C;CAExD,IAAI;EAEF,YAAY,mBAAmB,aAAa;EAC5C,YAAY,eAAe,MAAM;EAGjC,MAAM,qBAAqB,KAAK;EAChC,MAAM,UAAU;EAGhB,MAAM,kBAAkB,KAAK;EAC7B,MAAM,kBAAkB,cAAc;EAGtC,MAAM,gBAAgB,IAAI;EAO1B,MAAM,kBAAkB,kBAAwC;EAGhE,MAAM,kBAAkB,aAAa,QAAQ;EAI7C,MAAM,kBAAkB,iBAAuC;EAE/D,kBAAkB;CACpB,SAAS,OAAO;EACd,MAAM;CACR;AACF;;;;;AAMA,eAAsB,qBAAoC;CACxD,IAAI,CAAC,iBAAiB;EACpB,QAAQ,IAAI,iCAAiC;EAC7C;CACF;CAEA,IAAI;EACF,MAAM,kBAAkB,SAAS;EACjC,kBAAkB;EAClB,QAAQ,IAAI,wCAAwC;CACtD,SAAS,OAAO;EACd,QAAQ,MAAM,6CAA6C,KAAK;EAChE,MAAM;CACR;AACF;;;;AAKA,SAAgB,sBAA+B;CAC7C,OAAO;AACT"}
+{"version":3,"file":"start-http-development-server.mjs","names":[],"sources":["../../../../../../../core/src/tests/start-http-development-server.ts"],"sourcesContent":["/**\r\n * HTTP Test Server\r\n *\r\n * Starts a minimal HTTP server for testing.\r\n * Unlike the full DevelopmentServer, this:\r\n * - Does NOT watch files\r\n * - Does NOT do HMR\r\n * - Only starts connectors needed for HTTP requests\r\n *\r\n * Used in Vitest's globalSetup to start server once for all test workers.\r\n */\r\nimport { Application } from \"../application\";\r\nimport { bootstrap } from \"../bootstrap\";\r\nimport { loadConfigFiles } from \"../config/load-config-files\";\r\nimport { connectorsManager } from \"../connectors/connectors-manager\";\r\nimport { ConnectorLifecyclePhase } from \"../connectors/types\";\r\nimport { filesOrchestrator } from \"../dev-server/files-orchestrator\";\r\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\r\n\r\nlet isServerRunning = false;\r\n\r\n/**\r\n * Start the HTTP test server (minimal - no file watching)\r\n * Call this in Vitest's globalSetup\r\n */\r\nexport async function startHttpTestServer(): Promise<void> {\r\n  if (isServerRunning) {\r\n    console.log(\"[test-server] Server already running, skipping start\");\r\n    return;\r\n  }\r\n\r\n  console.log(\"[test-server] Starting HTTP test server...\");\r\n\r\n  try {\r\n    // Set environment\r\n    Application.setRuntimeStrategy(\"development\");\r\n    Application.setEnvironment(\"test\");\r\n\r\n    // Bootstrap (env, etc.)\r\n    await warlockConfigManager.load();\r\n    await bootstrap();\r\n\r\n    // Initialize file orchestrator (but don't watch)\r\n    await filesOrchestrator.init();\r\n    await filesOrchestrator.initializeAll();\r\n\r\n    // Load config files\r\n    await loadConfigFiles(true);\r\n\r\n    // Early-phase connectors (database, cache, logger, storage, mailer,\r\n    // herald) must start BEFORE app modules load: a module's `main.ts` boot\r\n    // side-effect can query the DB at import time, so the data source has to\r\n    // be registered first. This mirrors the dev/prod boot order (see\r\n    // `cli-commands.manager`, `production-builder`, and `DevelopmentServer`).\r\n    await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);\r\n\r\n    // Load application modules (their boot side-effects now see a live DB).\r\n    await filesOrchestrator.moduleLoader.loadAll();\r\n\r\n    // Late-phase connectors (http, socket) bind after app code has\r\n    // registered its routes and listeners.\r\n    await connectorsManager.startPhase(ConnectorLifecyclePhase.Late);\r\n\r\n    isServerRunning = true;\r\n  } catch (error) {\r\n    throw error;\r\n  }\r\n}\r\n\r\n/**\r\n * Stop the HTTP test server\r\n * Call this in Vitest's globalTeardown\r\n */\r\nexport async function stopHttpTestServer(): Promise<void> {\r\n  if (!isServerRunning) {\r\n    console.log(\"[test-server] No server to stop\");\r\n    return;\r\n  }\r\n\r\n  try {\r\n    await connectorsManager.shutdown();\r\n    isServerRunning = false;\r\n    console.log(\"[test-server] HTTP test server stopped\");\r\n  } catch (error) {\r\n    console.error(\"[test-server] Error stopping HTTP server:\", error);\r\n    throw error;\r\n  }\r\n}\r\n\r\n/**\r\n * Check if test server is running\r\n */\r\nexport function isTestServerRunning(): boolean {\r\n  return isServerRunning;\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmBA,IAAI,kBAAkB;;;;;AAMtB,eAAsB,sBAAqC;CACzD,IAAI,iBAAiB;EACnB,QAAQ,IAAI,sDAAsD;EAClE;CACF;CAEA,QAAQ,IAAI,4CAA4C;CAExD,IAAI;EAEF,YAAY,mBAAmB,aAAa;EAC5C,YAAY,eAAe,MAAM;EAGjC,MAAM,qBAAqB,KAAK;EAChC,MAAM,UAAU;EAGhB,MAAM,kBAAkB,KAAK;EAC7B,MAAM,kBAAkB,cAAc;EAGtC,MAAM,gBAAgB,IAAI;EAO1B,MAAM,kBAAkB,kBAAwC;EAGhE,MAAM,kBAAkB,aAAa,QAAQ;EAI7C,MAAM,kBAAkB,iBAAuC;EAE/D,kBAAkB;CACpB,SAAS,OAAO;EACd,MAAM;CACR;AACF;;;;;AAMA,eAAsB,qBAAoC;CACxD,IAAI,CAAC,iBAAiB;EACpB,QAAQ,IAAI,iCAAiC;EAC7C;CACF;CAEA,IAAI;EACF,MAAM,kBAAkB,SAAS;EACjC,kBAAkB;EAClB,QAAQ,IAAI,wCAAwC;CACtD,SAAS,OAAO;EACd,QAAQ,MAAM,6CAA6C,KAAK;EAChE,MAAM;CACR;AACF;;;;AAKA,SAAgB,sBAA+B;CAC7C,OAAO;AACT"}

package/esm/tests/test-helpers.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/tests/test-helpers.d.ts
+//#region ../core/src/tests/test-helpers.d.ts
 /**
  * Warlock.js Test Helpers
  *

package/esm/tests/test-helpers.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"test-helpers.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/tests/test-helpers.ts"],"mappings":";;AAWA;;;;AAAgC;AAUhC;;AAVgC,iBAAhB,gBAAA;;;;;iBAUM,WAAA,CAAY,IAAA,UAAc,OAAA,GAAS,WAAA,GAAmB,OAAA,CAAQ,QAAA;;;;iBAgB9D,OAAA,CAAQ,IAAA,UAAc,OAAA,GAAS,WAAA,GAAmB,OAAA,CAAQ,QAAA;;;AAhBY;iBAuBtE,QAAA,CACpB,IAAA,UACA,IAAA,YACA,OAAA,GAAS,WAAA,GACR,OAAA,CAAQ,QAAA;;;;iBAWW,OAAA,CACpB,IAAA,UACA,IAAA,YACA,OAAA,GAAS,WAAA,GACR,OAAA,CAAQ,QAAA;;;;iBAWW,UAAA,CAAW,IAAA,UAAc,OAAA,GAAS,WAAA,GAAmB,OAAA,CAAQ,QAAA;;;;iBAO7D,SAAA,CACpB,IAAA,UACA,IAAA,YACA,OAAA,GAAS,WAAA,GACR,OAAA,CAAQ,QAAA;;AAhD6E;AAOxF;iBAoDsB,iBAAA,IAAqB,QAAA,EAAU,QAAA,GAAW,OAAA,CAAQ,CAAA;;;;iBAOlD,UAAA,IAAc,QAAA,EAAU,QAAA,EAAU,cAAA,YAAuB,OAAA,CAAQ,CAAA"}
+{"version":3,"file":"test-helpers.d.mts","names":[],"sources":["../../../../../../../core/src/tests/test-helpers.ts"],"mappings":";;AAWA;;;;AAAgC;AAUhC;;AAVgC,iBAAhB,gBAAA;;;;;iBAUM,WAAA,CAAY,IAAA,UAAc,OAAA,GAAS,WAAA,GAAmB,OAAA,CAAQ,QAAA;;;;iBAgB9D,OAAA,CAAQ,IAAA,UAAc,OAAA,GAAS,WAAA,GAAmB,OAAA,CAAQ,QAAA;;;AAhBY;iBAuBtE,QAAA,CACpB,IAAA,UACA,IAAA,YACA,OAAA,GAAS,WAAA,GACR,OAAA,CAAQ,QAAA;;;;iBAWW,OAAA,CACpB,IAAA,UACA,IAAA,YACA,OAAA,GAAS,WAAA,GACR,OAAA,CAAQ,QAAA;;;;iBAWW,UAAA,CAAW,IAAA,UAAc,OAAA,GAAS,WAAA,GAAmB,OAAA,CAAQ,QAAA;;;;iBAO7D,SAAA,CACpB,IAAA,UACA,IAAA,YACA,OAAA,GAAS,WAAA,GACR,OAAA,CAAQ,QAAA;;AAhD6E;AAOxF;iBAoDsB,iBAAA,IAAqB,QAAA,EAAU,QAAA,GAAW,OAAA,CAAQ,CAAA;;;;iBAOlD,UAAA,IAAc,QAAA,EAAU,QAAA,EAAU,cAAA,YAAuB,OAAA,CAAQ,CAAA"}

package/esm/tests/test-helpers.mjs

@@ -1,7 +1,7 @@
 import { config } from "../config/config-getter.mjs";
 import "../config/index.mjs";
 
-//#region ../@warlock.js/core/src/tests/test-helpers.ts
+//#region ../core/src/tests/test-helpers.ts
 /**
 * Warlock.js Test Helpers
 *

package/esm/tests/test-helpers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"test-helpers.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/tests/test-helpers.ts"],"sourcesContent":["/**\n * Warlock.js Test Helpers\n *\n * Utilities for testing Warlock.js applications.\n */\n\nimport { config } from \"../config\";\n\n/**\n * Get the test server base URL\n */\nexport function getTestServerUrl(): string {\n  const port = config.key(\"http.port\", 2031);\n  const host = config.key(\"http.host\", \"localhost\");\n  return `http://${host}:${port}`;\n}\n\n/**\n * Simple HTTP request helper for test server\n * Uses native fetch - lightweight, no extra dependencies\n */\nexport async function testRequest(path: string, options: RequestInit = {}): Promise<Response> {\n  const baseUrl = getTestServerUrl();\n  const url = path.startsWith(\"/\") ? `${baseUrl}${path}` : `${baseUrl}/${path}`;\n\n  return fetch(url, {\n    ...options,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      ...options.headers,\n    },\n  });\n}\n\n/**\n * GET request helper\n */\nexport async function testGet(path: string, options: RequestInit = {}): Promise<Response> {\n  return testRequest(path, { ...options, method: \"GET\" });\n}\n\n/**\n * POST request helper\n */\nexport async function testPost(\n  path: string,\n  body?: unknown,\n  options: RequestInit = {},\n): Promise<Response> {\n  return testRequest(path, {\n    ...options,\n    method: \"POST\",\n    body: body ? JSON.stringify(body) : undefined,\n  });\n}\n\n/**\n * PUT request helper\n */\nexport async function testPut(\n  path: string,\n  body?: unknown,\n  options: RequestInit = {},\n): Promise<Response> {\n  return testRequest(path, {\n    ...options,\n    method: \"PUT\",\n    body: body ? JSON.stringify(body) : undefined,\n  });\n}\n\n/**\n * DELETE request helper\n */\nexport async function testDelete(path: string, options: RequestInit = {}): Promise<Response> {\n  return testRequest(path, { ...options, method: \"DELETE\" });\n}\n\n/**\n * PATCH request helper\n */\nexport async function testPatch(\n  path: string,\n  body?: unknown,\n  options: RequestInit = {},\n): Promise<Response> {\n  return testRequest(path, {\n    ...options,\n    method: \"PATCH\",\n    body: body ? JSON.stringify(body) : undefined,\n  });\n}\n\n/**\n * Parse JSON response with type safety\n */\nexport async function parseJsonResponse<T>(response: Response): Promise<T> {\n  return response.json() as Promise<T>;\n}\n\n/**\n * Assert response status and return parsed JSON\n */\nexport async function expectJson<T>(response: Response, expectedStatus = 200): Promise<T> {\n  if (response.status !== expectedStatus) {\n    const text = await response.text();\n    throw new Error(`Expected status ${expectedStatus}, got ${response.status}. Body: ${text}`);\n  }\n  return parseJsonResponse<T>(response);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,mBAA2B;CACzC,MAAM,OAAO,OAAO,IAAI,aAAa,IAAI;CAEzC,OAAO,UADM,OAAO,IAAI,aAAa,WACjB,EAAE,GAAG;AAC3B;;;;;AAMA,eAAsB,YAAY,MAAc,UAAuB,CAAC,GAAsB;CAC5F,MAAM,UAAU,iBAAiB;CACjC,MAAM,MAAM,KAAK,WAAW,GAAG,IAAI,GAAG,UAAU,SAAS,GAAG,QAAQ,GAAG;CAEvE,OAAO,MAAM,KAAK;EAChB,GAAG;EACH,SAAS;GACP,gBAAgB;GAChB,GAAG,QAAQ;EACb;CACF,CAAC;AACH;;;;AAKA,eAAsB,QAAQ,MAAc,UAAuB,CAAC,GAAsB;CACxF,OAAO,YAAY,MAAM;EAAE,GAAG;EAAS,QAAQ;CAAM,CAAC;AACxD;;;;AAKA,eAAsB,SACpB,MACA,MACA,UAAuB,CAAC,GACL;CACnB,OAAO,YAAY,MAAM;EACvB,GAAG;EACH,QAAQ;EACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;CACtC,CAAC;AACH;;;;AAKA,eAAsB,QACpB,MACA,MACA,UAAuB,CAAC,GACL;CACnB,OAAO,YAAY,MAAM;EACvB,GAAG;EACH,QAAQ;EACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;CACtC,CAAC;AACH;;;;AAKA,eAAsB,WAAW,MAAc,UAAuB,CAAC,GAAsB;CAC3F,OAAO,YAAY,MAAM;EAAE,GAAG;EAAS,QAAQ;CAAS,CAAC;AAC3D;;;;AAKA,eAAsB,UACpB,MACA,MACA,UAAuB,CAAC,GACL;CACnB,OAAO,YAAY,MAAM;EACvB,GAAG;EACH,QAAQ;EACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;CACtC,CAAC;AACH;;;;AAKA,eAAsB,kBAAqB,UAAgC;CACzE,OAAO,SAAS,KAAK;AACvB;;;;AAKA,eAAsB,WAAc,UAAoB,iBAAiB,KAAiB;CACxF,IAAI,SAAS,WAAW,gBAAgB;EACtC,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,MAAM,IAAI,MAAM,mBAAmB,eAAe,QAAQ,SAAS,OAAO,UAAU,MAAM;CAC5F;CACA,OAAO,kBAAqB,QAAQ;AACtC"}
+{"version":3,"file":"test-helpers.mjs","names":[],"sources":["../../../../../../../core/src/tests/test-helpers.ts"],"sourcesContent":["/**\n * Warlock.js Test Helpers\n *\n * Utilities for testing Warlock.js applications.\n */\n\nimport { config } from \"../config\";\n\n/**\n * Get the test server base URL\n */\nexport function getTestServerUrl(): string {\n  const port = config.key(\"http.port\", 2031);\n  const host = config.key(\"http.host\", \"localhost\");\n  return `http://${host}:${port}`;\n}\n\n/**\n * Simple HTTP request helper for test server\n * Uses native fetch - lightweight, no extra dependencies\n */\nexport async function testRequest(path: string, options: RequestInit = {}): Promise<Response> {\n  const baseUrl = getTestServerUrl();\n  const url = path.startsWith(\"/\") ? `${baseUrl}${path}` : `${baseUrl}/${path}`;\n\n  return fetch(url, {\n    ...options,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      ...options.headers,\n    },\n  });\n}\n\n/**\n * GET request helper\n */\nexport async function testGet(path: string, options: RequestInit = {}): Promise<Response> {\n  return testRequest(path, { ...options, method: \"GET\" });\n}\n\n/**\n * POST request helper\n */\nexport async function testPost(\n  path: string,\n  body?: unknown,\n  options: RequestInit = {},\n): Promise<Response> {\n  return testRequest(path, {\n    ...options,\n    method: \"POST\",\n    body: body ? JSON.stringify(body) : undefined,\n  });\n}\n\n/**\n * PUT request helper\n */\nexport async function testPut(\n  path: string,\n  body?: unknown,\n  options: RequestInit = {},\n): Promise<Response> {\n  return testRequest(path, {\n    ...options,\n    method: \"PUT\",\n    body: body ? JSON.stringify(body) : undefined,\n  });\n}\n\n/**\n * DELETE request helper\n */\nexport async function testDelete(path: string, options: RequestInit = {}): Promise<Response> {\n  return testRequest(path, { ...options, method: \"DELETE\" });\n}\n\n/**\n * PATCH request helper\n */\nexport async function testPatch(\n  path: string,\n  body?: unknown,\n  options: RequestInit = {},\n): Promise<Response> {\n  return testRequest(path, {\n    ...options,\n    method: \"PATCH\",\n    body: body ? JSON.stringify(body) : undefined,\n  });\n}\n\n/**\n * Parse JSON response with type safety\n */\nexport async function parseJsonResponse<T>(response: Response): Promise<T> {\n  return response.json() as Promise<T>;\n}\n\n/**\n * Assert response status and return parsed JSON\n */\nexport async function expectJson<T>(response: Response, expectedStatus = 200): Promise<T> {\n  if (response.status !== expectedStatus) {\n    const text = await response.text();\n    throw new Error(`Expected status ${expectedStatus}, got ${response.status}. Body: ${text}`);\n  }\n  return parseJsonResponse<T>(response);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,mBAA2B;CACzC,MAAM,OAAO,OAAO,IAAI,aAAa,IAAI;CAEzC,OAAO,UADM,OAAO,IAAI,aAAa,WACjB,EAAE,GAAG;AAC3B;;;;;AAMA,eAAsB,YAAY,MAAc,UAAuB,CAAC,GAAsB;CAC5F,MAAM,UAAU,iBAAiB;CACjC,MAAM,MAAM,KAAK,WAAW,GAAG,IAAI,GAAG,UAAU,SAAS,GAAG,QAAQ,GAAG;CAEvE,OAAO,MAAM,KAAK;EAChB,GAAG;EACH,SAAS;GACP,gBAAgB;GAChB,GAAG,QAAQ;EACb;CACF,CAAC;AACH;;;;AAKA,eAAsB,QAAQ,MAAc,UAAuB,CAAC,GAAsB;CACxF,OAAO,YAAY,MAAM;EAAE,GAAG;EAAS,QAAQ;CAAM,CAAC;AACxD;;;;AAKA,eAAsB,SACpB,MACA,MACA,UAAuB,CAAC,GACL;CACnB,OAAO,YAAY,MAAM;EACvB,GAAG;EACH,QAAQ;EACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;CACtC,CAAC;AACH;;;;AAKA,eAAsB,QACpB,MACA,MACA,UAAuB,CAAC,GACL;CACnB,OAAO,YAAY,MAAM;EACvB,GAAG;EACH,QAAQ;EACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;CACtC,CAAC;AACH;;;;AAKA,eAAsB,WAAW,MAAc,UAAuB,CAAC,GAAsB;CAC3F,OAAO,YAAY,MAAM;EAAE,GAAG;EAAS,QAAQ;CAAS,CAAC;AAC3D;;;;AAKA,eAAsB,UACpB,MACA,MACA,UAAuB,CAAC,GACL;CACnB,OAAO,YAAY,MAAM;EACvB,GAAG;EACH,QAAQ;EACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;CACtC,CAAC;AACH;;;;AAKA,eAAsB,kBAAqB,UAAgC;CACzE,OAAO,SAAS,KAAK;AACvB;;;;AAKA,eAAsB,WAAc,UAAoB,iBAAiB,KAAiB;CACxF,IAAI,SAAS,WAAW,gBAAgB;EACtC,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,MAAM,IAAI,MAAM,mBAAmB,eAAe,QAAQ,SAAS,OAAO,UAAU,MAAM;CAC5F;CACA,OAAO,kBAAqB,QAAQ;AACtC"}

package/esm/tests/vitest-setup.d.mts

@@ -1,5 +1,5 @@
 import { ConnectorName } from "../connectors/types.mjs";
-//#region ../@warlock.js/core/src/tests/vitest-setup.d.ts
+//#region ../core/src/tests/vitest-setup.d.ts
 type TestSetup = {
   connectors?: boolean | ConnectorName[];
 };

package/esm/tests/vitest-setup.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-setup.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/tests/vitest-setup.ts"],"mappings":";;KAmBK,SAAA;EACH,UAAA,aAAuB,aAAa;AAAA;AAR2B;;;AAAA,iBAc3C,SAAA;EAAY;AAAA,GAAqB,SAAA,GAAS,OAAA"}
+{"version":3,"file":"vitest-setup.d.mts","names":[],"sources":["../../../../../../../core/src/tests/vitest-setup.ts"],"mappings":";;KAmBK,SAAA;EACH,UAAA,aAAuB,aAAa;AAAA;AAR2B;;;AAAA,iBAc3C,SAAA;EAAY;AAAA,GAAqB,SAAA,GAAS,OAAA"}

package/esm/tests/vitest-setup.mjs

@@ -8,7 +8,7 @@ import { warlockConfigManager } from "../warlock-config/warlock-config.manager.m
 import { filesOrchestrator } from "../dev-server/files-orchestrator.mjs";
 import { loadConfigFiles } from "../config/load-config-files.mjs";
 
-//#region ../@warlock.js/core/src/tests/vitest-setup.ts
+//#region ../core/src/tests/vitest-setup.ts
 let isSetupComplete = false;
 /**
 * Setup function that runs once per worker thread