@zucker-framework/storage 1.0.0 → 1.0.5

package/README.md

@@ -0,0 +1,19 @@
+# Storage
+
+## WebDAV streaming and directory APIs (unreleased)
+
+`WebDavStorage.uploadStream(readable, key, { contentType?, signal? })` streams through a bounded Node Transform to the WebDAV SDK without collecting the file. It counts bytes, awaits both the source pipeline and remote response, and aborts/destroys the streams on source failure, remote failure, setup failure or cancellation. Failed remote writes may leave a partial remote object: the provider does not promise atomic overwrite or delete a previous object on failure. Consumers retain recovery/commit policy.
+
+`download(key, { signal? })` checks stat is a file and returns `{ stream: Readable, size }` using the SDK's real read stream (no buffer conversion). Abort destroys the stream. Callers must consume or destroy returned streams and handle stream errors; a resolved download call does not mean all bytes have arrived.
+
+**Type compatibility:** `FileManager.download().stream` is now honestly typed as Node `Readable`, not an `fs.ReadStream` (WebDAV/S3 streams have no file descriptor/path). `FileManager.uploadStream` accepts `Readable`. Consumers using filesystem-specific stream properties must migrate. This is a public type-contract breaking correction; release/version it accordingly. Local and S3 streaming implementations are not changed by this WebDAV work.
+
+`list(prefix, { deep: false, includeDirectories: true, missing: 'throw' })` requests shallow entries including directories and propagates missing-directory errors for host fallback. Defaults preserve recursive files-only enumeration and empty-on-404 behavior. `WebDavEntry` includes the original `filename`, `basename`, `lastmod`, `type`, as well as generic `key`, `size`, `lastModified`, `contentType`.
+
+`ensureDirectory(key)` is public, recursively creates missing parents and coalesces concurrent uncancelled creation. All public keys retain base-path traversal protection. Cancellation-owned upload directory operations use their own SDK signal rather than sharing another caller's cancellation.
+
+Credentials remain required by default. Explicit `allowAnonymous: true` permits missing credentials for hosts that deliberately allow unauthenticated WebDAV endpoints; URL remains mandatory. This opt-in does not read environment variables or change host authentication policy. Storage logs never include credentials or endpoint URLs.
+
+The host owns URL-to-key normalization, public URL settings, tenant ownership, disk fallback/recovery paths and error disclosure. No in-memory fallback or product environment configuration is introduced.
+
+Verification includes SDK mocks and the actual installed WebDAV SDK against a local synthetic HTTP server. Neither demonstrates real infrastructure permissions, durability or remote cancellation cleanup.

package/dist/index.d.mts

@@ -1,3 +1,4 @@
+import { Readable } from 'node:stream';
 import { ReadStream } from 'fs';
 import { OnModuleDestroy, Type, DynamicModule, InjectionToken, OptionalFactoryDependency } from '@nestjs/common';
 
@@ -18,6 +19,10 @@ interface UploadResult {
 }
 interface FileInfo {
     key: string;
+    /** Available when the provider exposes filesystem entries (e.g. WebDAV). */
+    type?: 'file' | 'directory';
+    filename?: string;
+    basename?: string;
     size: number;
     lastModified: Date;
     contentType?: string;
@@ -126,9 +131,9 @@ interface FileManager {
     readonly providerType: StorageProviderType;
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions): Promise<UploadResult>;
     download(key: string): Promise<{
-        stream: ReadStream;
+        stream: Readable;
         size: number;
     }>;
     delete(key: string): Promise<void>;
@@ -149,7 +154,7 @@ interface FileManager {
      * @param position 起始偏移量（字节）
      */
     downloadRange?(key: string, position: number, length?: number): Promise<{
-        stream: ReadStream;
+        stream: Readable;
         size: number;
     }>;
     /**
@@ -228,7 +233,7 @@ declare class LocalFileStorage implements FileManager {
     });
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, _options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions): Promise<UploadResult>;
     download(key: string): Promise<{
         stream: ReadStream;
         size: number;
@@ -294,9 +299,9 @@ declare class S3Storage implements FileManager, OnModuleDestroy {
     onModuleDestroy(): void;
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions): Promise<UploadResult>;
     download(key: string): Promise<{
-        stream: ReadStream;
+        stream: Readable;
         size: number;
     }>;
     delete(key: string): Promise<void>;
@@ -309,11 +314,19 @@ declare class S3Storage implements FileManager, OnModuleDestroy {
     move(sourceKey: string, destKey: string): Promise<void>;
 }
 
+interface WebDavEntry extends FileInfo {
+    type: 'file' | 'directory';
+    filename: string;
+    basename: string;
+    lastmod: string;
+}
 interface WebDavStorageOptions {
     /** WebDAV 服务地址，如 https://nextcloud.example.com/remote.php/dav/files/user */
     url: string;
-    username: string;
-    password: string;
+    username?: string;
+    password?: string;
+    /** Explicit opt-in for endpoints/consumer policies allowing missing credentials. Default false. */
+    allowAnonymous?: boolean;
     /** 公开访问 URL 前缀（可选） */
     publicUrl?: string;
     /** 基础路径前缀（可选，默认 '/'） */
@@ -332,23 +345,33 @@ declare class WebDavStorage implements FileManager {
     private getClient;
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
-    download(key: string): Promise<{
-        stream: ReadStream;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions & {
+        signal?: AbortSignal;
+    }): Promise<UploadResult>;
+    download(key: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        stream: Readable;
         size: number;
     }>;
     delete(key: string): Promise<void>;
     exists(key: string): Promise<boolean>;
     getPublicUrl(key: string): Promise<string>;
     getDownloadUrl(key: string): Promise<string>;
-    list(prefix: string): Promise<FileInfo[]>;
+    list(prefix: string, options?: {
+        deep?: boolean;
+        includeDirectories?: boolean;
+        missing?: 'empty' | 'throw';
+    }): Promise<WebDavEntry[]>;
     getFileInfo(key: string): Promise<FileInfo | undefined>;
     copy(sourceKey: string, destKey: string): Promise<void>;
     move(sourceKey: string, destKey: string): Promise<void>;
     /**
      * 递归创建目录
      */
-    private ensureDirectory;
+    /** Accepts a storage key, with the same traversal protection as upload. */
+    ensureDirectory(key: string): Promise<void>;
+    private ensureRemoteDirectory;
     private createDirectoryIfMissing;
     private resolvePath;
     private stripBasePath;
@@ -424,10 +447,108 @@ declare class ZuckerStorageModule {
     private static createAsyncProviders;
 }
 
+interface StorageUrlHydrationOptions {
+    /** The application must establish ownership before allowing a key to be signed. */
+    allowedStorageKeys: ReadonlySet<string>;
+    getDownloadUrl: (key: string) => Promise<string>;
+    storageKeyField: string;
+    urlFields: readonly string[];
+}
+/**
+ * Clone a JSON-like response graph and resolve only authorized object keys.
+ * Dates/class instances pass through. Signatures are deduplicated within this
+ * call, never cached between requests. A signing failure rejects the whole call;
+ * generated URLs never mutate the source graph that might later be persisted.
+ */
+declare function hydrateStorageUrls<T>(value: T, options: StorageUrlHydrationOptions): Promise<T>;
+
+/** Disabled storage preserves startup availability while all data operations remain explicit. */
+declare class UnavailableFileManager implements FileManager {
+    readonly providerType: StorageProviderType;
+    private readonly message;
+    constructor(providerType: StorageProviderType, message?: string);
+    isConfigured(): boolean;
+    private unavailable;
+    upload(_buffer: Buffer, _key: string, _options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(_stream: Readable, _key: string, _options?: UploadOptions): Promise<UploadResult>;
+    download(_key: string): Promise<{
+        stream: Readable;
+        size: number;
+    }>;
+    delete(_key: string): Promise<void>;
+    exists(_key: string): Promise<boolean>;
+    getPublicUrl(_key: string): Promise<string>;
+    getDownloadUrl(_key: string): Promise<string>;
+    list(_prefix: string): Promise<FileInfo[]>;
+}
+
+interface DownloadedStorageObject {
+    body: Buffer;
+    reportedSize: number;
+}
+interface BufferedObjectStore<TMimeType extends string = string> {
+    read(key: string): Promise<DownloadedStorageObject>;
+    exists(key: string): Promise<boolean>;
+    write(key: string, body: Buffer, options: {
+        contentType: TMimeType;
+        metadata: Record<string, string>;
+        private: true;
+    }): Promise<{
+        size: number;
+    }>;
+}
+type StorageTransferErrorCode = 'STORAGE_NOT_CONFIGURED' | 'OBJECT_SIZE_OUT_OF_BOUNDS' | 'SOURCE_SIZE_MISMATCH' | 'TARGET_SIZE_CONFLICT' | 'TARGET_MIME_CONFLICT' | 'TARGET_HASH_CONFLICT' | 'UPLOAD_SIZE_MISMATCH';
+declare class StorageTransferError extends Error {
+    readonly code: StorageTransferErrorCode;
+    constructor(code: StorageTransferErrorCode);
+}
+type StorageTransferErrorFactory = (code: StorageTransferErrorCode) => Error;
+interface VerifiedStorageMetadata<TMimeType extends string = string> {
+    sha256: string;
+    size: number;
+    mimeType: TMimeType;
+}
+/** Compare every byte via SHA-256, with explicit size and MIME conflict reasons. */
+declare function verifyStoredObject<TMimeType extends string>(object: DownloadedStorageObject, expected: VerifiedStorageMetadata<TMimeType>, detectMimeType: (body: Buffer) => TMimeType, errorFactory?: StorageTransferErrorFactory): void;
+interface VerifiedObjectTransferOptions<TMimeType extends string> {
+    source: DownloadedStorageObject;
+    target: BufferedObjectStore<TMimeType>;
+    destinationKey: string;
+    mode: 'dry-run' | 'apply';
+    allowUpload: boolean;
+    detectMimeType: (body: Buffer) => TMimeType;
+    errorFactory?: StorageTransferErrorFactory;
+}
+/**
+ * Copy a bounded source buffer into a private destination, verify existing data
+ * before reuse and round-trip every upload before reporting success. Dry-run and
+ * disallowed uploads never write. This does not delete sources or commit metadata.
+ */
+declare function transferVerifiedObject<TMimeType extends string>(options: VerifiedObjectTransferOptions<TMimeType>): Promise<VerifiedStorageMetadata<TMimeType> & {
+    targetDisposition: 'planned' | 'uploaded' | 'reused';
+}>;
+
+/** Bounded in-memory transfer adapter over the existing FileManager contract. */
+declare class BufferedFileManagerStore implements BufferedObjectStore {
+    private readonly manager;
+    private readonly maxObjectBytes;
+    private readonly errorFactory;
+    constructor(manager: FileManager, maxObjectBytes: number, errorFactory?: StorageTransferErrorFactory);
+    read(key: string): Promise<DownloadedStorageObject>;
+    exists(key: string): Promise<boolean>;
+    write(key: string, body: Buffer, options: {
+        contentType: string;
+        metadata: Record<string, string>;
+        private: true;
+    }): Promise<{
+        size: number;
+    }>;
+}
+
 declare enum StorageProvider {
     LOCAL = "LOCAL",
     S3 = "S3",
     WEBDAV = "WEBDAV"
 }
 
-export { type ChunkUploadState, DANGEROUS_EXTENSIONS, FILE_MANAGER, type FileInfo, FileLifecycleManager, type FileLifecyclePolicy, type FileManager, type FileMetadata, type FileUploadValidation, type LifecycleResult, LocalFileStorage, type PosixFilePermissions, type S3ObjectAclMode, S3Storage, type S3StorageOptions, type S3UploadUrlMode, type StorageModuleAsyncOptions, type StorageModuleOptions, type StorageModuleOptionsFactory, StorageProvider, type StorageProviderType, type UploadOptions, type UploadResult, WebDavStorage, type WebDavStorageOptions, ZuckerStorageModule, generateDateBasedKey, isFileDenied, isSafeOriginalFileName, sanitizeFileName };
+export { BufferedFileManagerStore, type BufferedObjectStore, type ChunkUploadState, DANGEROUS_EXTENSIONS, type DownloadedStorageObject, FILE_MANAGER, type FileInfo, FileLifecycleManager, type FileLifecyclePolicy, type FileManager, type FileMetadata, type FileUploadValidation, type LifecycleResult, LocalFileStorage, type PosixFilePermissions, type S3ObjectAclMode, S3Storage, type S3StorageOptions, type S3UploadUrlMode, type StorageModuleAsyncOptions, type StorageModuleOptions, type StorageModuleOptionsFactory, StorageProvider, type StorageProviderType, StorageTransferError, type StorageTransferErrorCode, type StorageTransferErrorFactory, type StorageUrlHydrationOptions, UnavailableFileManager, type UploadOptions, type UploadResult, type VerifiedObjectTransferOptions, type VerifiedStorageMetadata, type WebDavEntry, WebDavStorage, type WebDavStorageOptions, ZuckerStorageModule, generateDateBasedKey, hydrateStorageUrls, isFileDenied, isSafeOriginalFileName, sanitizeFileName, transferVerifiedObject, verifyStoredObject };

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+import { Readable } from 'node:stream';
 import { ReadStream } from 'fs';
 import { OnModuleDestroy, Type, DynamicModule, InjectionToken, OptionalFactoryDependency } from '@nestjs/common';
 
@@ -18,6 +19,10 @@ interface UploadResult {
 }
 interface FileInfo {
     key: string;
+    /** Available when the provider exposes filesystem entries (e.g. WebDAV). */
+    type?: 'file' | 'directory';
+    filename?: string;
+    basename?: string;
     size: number;
     lastModified: Date;
     contentType?: string;
@@ -126,9 +131,9 @@ interface FileManager {
     readonly providerType: StorageProviderType;
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions): Promise<UploadResult>;
     download(key: string): Promise<{
-        stream: ReadStream;
+        stream: Readable;
         size: number;
     }>;
     delete(key: string): Promise<void>;
@@ -149,7 +154,7 @@ interface FileManager {
      * @param position 起始偏移量（字节）
      */
     downloadRange?(key: string, position: number, length?: number): Promise<{
-        stream: ReadStream;
+        stream: Readable;
         size: number;
     }>;
     /**
@@ -228,7 +233,7 @@ declare class LocalFileStorage implements FileManager {
     });
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, _options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions): Promise<UploadResult>;
     download(key: string): Promise<{
         stream: ReadStream;
         size: number;
@@ -294,9 +299,9 @@ declare class S3Storage implements FileManager, OnModuleDestroy {
     onModuleDestroy(): void;
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions): Promise<UploadResult>;
     download(key: string): Promise<{
-        stream: ReadStream;
+        stream: Readable;
         size: number;
     }>;
     delete(key: string): Promise<void>;
@@ -309,11 +314,19 @@ declare class S3Storage implements FileManager, OnModuleDestroy {
     move(sourceKey: string, destKey: string): Promise<void>;
 }
 
+interface WebDavEntry extends FileInfo {
+    type: 'file' | 'directory';
+    filename: string;
+    basename: string;
+    lastmod: string;
+}
 interface WebDavStorageOptions {
     /** WebDAV 服务地址，如 https://nextcloud.example.com/remote.php/dav/files/user */
     url: string;
-    username: string;
-    password: string;
+    username?: string;
+    password?: string;
+    /** Explicit opt-in for endpoints/consumer policies allowing missing credentials. Default false. */
+    allowAnonymous?: boolean;
     /** 公开访问 URL 前缀（可选） */
     publicUrl?: string;
     /** 基础路径前缀（可选，默认 '/'） */
@@ -332,23 +345,33 @@ declare class WebDavStorage implements FileManager {
     private getClient;
     isConfigured(): boolean;
     upload(buffer: Buffer, key: string, options?: UploadOptions): Promise<UploadResult>;
-    uploadStream(stream: ReadStream, key: string, options?: UploadOptions): Promise<UploadResult>;
-    download(key: string): Promise<{
-        stream: ReadStream;
+    uploadStream(stream: Readable, key: string, options?: UploadOptions & {
+        signal?: AbortSignal;
+    }): Promise<UploadResult>;
+    download(key: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        stream: Readable;
         size: number;
     }>;
     delete(key: string): Promise<void>;
     exists(key: string): Promise<boolean>;
     getPublicUrl(key: string): Promise<string>;
     getDownloadUrl(key: string): Promise<string>;
-    list(prefix: string): Promise<FileInfo[]>;
+    list(prefix: string, options?: {
+        deep?: boolean;
+        includeDirectories?: boolean;
+        missing?: 'empty' | 'throw';
+    }): Promise<WebDavEntry[]>;
     getFileInfo(key: string): Promise<FileInfo | undefined>;
     copy(sourceKey: string, destKey: string): Promise<void>;
     move(sourceKey: string, destKey: string): Promise<void>;
     /**
      * 递归创建目录
      */
-    private ensureDirectory;
+    /** Accepts a storage key, with the same traversal protection as upload. */
+    ensureDirectory(key: string): Promise<void>;
+    private ensureRemoteDirectory;
     private createDirectoryIfMissing;
     private resolvePath;
     private stripBasePath;
@@ -424,10 +447,108 @@ declare class ZuckerStorageModule {
     private static createAsyncProviders;
 }
 
+interface StorageUrlHydrationOptions {
+    /** The application must establish ownership before allowing a key to be signed. */
+    allowedStorageKeys: ReadonlySet<string>;
+    getDownloadUrl: (key: string) => Promise<string>;
+    storageKeyField: string;
+    urlFields: readonly string[];
+}
+/**
+ * Clone a JSON-like response graph and resolve only authorized object keys.
+ * Dates/class instances pass through. Signatures are deduplicated within this
+ * call, never cached between requests. A signing failure rejects the whole call;
+ * generated URLs never mutate the source graph that might later be persisted.
+ */
+declare function hydrateStorageUrls<T>(value: T, options: StorageUrlHydrationOptions): Promise<T>;
+
+/** Disabled storage preserves startup availability while all data operations remain explicit. */
+declare class UnavailableFileManager implements FileManager {
+    readonly providerType: StorageProviderType;
+    private readonly message;
+    constructor(providerType: StorageProviderType, message?: string);
+    isConfigured(): boolean;
+    private unavailable;
+    upload(_buffer: Buffer, _key: string, _options?: UploadOptions): Promise<UploadResult>;
+    uploadStream(_stream: Readable, _key: string, _options?: UploadOptions): Promise<UploadResult>;
+    download(_key: string): Promise<{
+        stream: Readable;
+        size: number;
+    }>;
+    delete(_key: string): Promise<void>;
+    exists(_key: string): Promise<boolean>;
+    getPublicUrl(_key: string): Promise<string>;
+    getDownloadUrl(_key: string): Promise<string>;
+    list(_prefix: string): Promise<FileInfo[]>;
+}
+
+interface DownloadedStorageObject {
+    body: Buffer;
+    reportedSize: number;
+}
+interface BufferedObjectStore<TMimeType extends string = string> {
+    read(key: string): Promise<DownloadedStorageObject>;
+    exists(key: string): Promise<boolean>;
+    write(key: string, body: Buffer, options: {
+        contentType: TMimeType;
+        metadata: Record<string, string>;
+        private: true;
+    }): Promise<{
+        size: number;
+    }>;
+}
+type StorageTransferErrorCode = 'STORAGE_NOT_CONFIGURED' | 'OBJECT_SIZE_OUT_OF_BOUNDS' | 'SOURCE_SIZE_MISMATCH' | 'TARGET_SIZE_CONFLICT' | 'TARGET_MIME_CONFLICT' | 'TARGET_HASH_CONFLICT' | 'UPLOAD_SIZE_MISMATCH';
+declare class StorageTransferError extends Error {
+    readonly code: StorageTransferErrorCode;
+    constructor(code: StorageTransferErrorCode);
+}
+type StorageTransferErrorFactory = (code: StorageTransferErrorCode) => Error;
+interface VerifiedStorageMetadata<TMimeType extends string = string> {
+    sha256: string;
+    size: number;
+    mimeType: TMimeType;
+}
+/** Compare every byte via SHA-256, with explicit size and MIME conflict reasons. */
+declare function verifyStoredObject<TMimeType extends string>(object: DownloadedStorageObject, expected: VerifiedStorageMetadata<TMimeType>, detectMimeType: (body: Buffer) => TMimeType, errorFactory?: StorageTransferErrorFactory): void;
+interface VerifiedObjectTransferOptions<TMimeType extends string> {
+    source: DownloadedStorageObject;
+    target: BufferedObjectStore<TMimeType>;
+    destinationKey: string;
+    mode: 'dry-run' | 'apply';
+    allowUpload: boolean;
+    detectMimeType: (body: Buffer) => TMimeType;
+    errorFactory?: StorageTransferErrorFactory;
+}
+/**
+ * Copy a bounded source buffer into a private destination, verify existing data
+ * before reuse and round-trip every upload before reporting success. Dry-run and
+ * disallowed uploads never write. This does not delete sources or commit metadata.
+ */
+declare function transferVerifiedObject<TMimeType extends string>(options: VerifiedObjectTransferOptions<TMimeType>): Promise<VerifiedStorageMetadata<TMimeType> & {
+    targetDisposition: 'planned' | 'uploaded' | 'reused';
+}>;
+
+/** Bounded in-memory transfer adapter over the existing FileManager contract. */
+declare class BufferedFileManagerStore implements BufferedObjectStore {
+    private readonly manager;
+    private readonly maxObjectBytes;
+    private readonly errorFactory;
+    constructor(manager: FileManager, maxObjectBytes: number, errorFactory?: StorageTransferErrorFactory);
+    read(key: string): Promise<DownloadedStorageObject>;
+    exists(key: string): Promise<boolean>;
+    write(key: string, body: Buffer, options: {
+        contentType: string;
+        metadata: Record<string, string>;
+        private: true;
+    }): Promise<{
+        size: number;
+    }>;
+}
+
 declare enum StorageProvider {
     LOCAL = "LOCAL",
     S3 = "S3",
     WEBDAV = "WEBDAV"
 }
 
-export { type ChunkUploadState, DANGEROUS_EXTENSIONS, FILE_MANAGER, type FileInfo, FileLifecycleManager, type FileLifecyclePolicy, type FileManager, type FileMetadata, type FileUploadValidation, type LifecycleResult, LocalFileStorage, type PosixFilePermissions, type S3ObjectAclMode, S3Storage, type S3StorageOptions, type S3UploadUrlMode, type StorageModuleAsyncOptions, type StorageModuleOptions, type StorageModuleOptionsFactory, StorageProvider, type StorageProviderType, type UploadOptions, type UploadResult, WebDavStorage, type WebDavStorageOptions, ZuckerStorageModule, generateDateBasedKey, isFileDenied, isSafeOriginalFileName, sanitizeFileName };
+export { BufferedFileManagerStore, type BufferedObjectStore, type ChunkUploadState, DANGEROUS_EXTENSIONS, type DownloadedStorageObject, FILE_MANAGER, type FileInfo, FileLifecycleManager, type FileLifecyclePolicy, type FileManager, type FileMetadata, type FileUploadValidation, type LifecycleResult, LocalFileStorage, type PosixFilePermissions, type S3ObjectAclMode, S3Storage, type S3StorageOptions, type S3UploadUrlMode, type StorageModuleAsyncOptions, type StorageModuleOptions, type StorageModuleOptionsFactory, StorageProvider, type StorageProviderType, StorageTransferError, type StorageTransferErrorCode, type StorageTransferErrorFactory, type StorageUrlHydrationOptions, UnavailableFileManager, type UploadOptions, type UploadResult, type VerifiedObjectTransferOptions, type VerifiedStorageMetadata, type WebDavEntry, WebDavStorage, type WebDavStorageOptions, ZuckerStorageModule, generateDateBasedKey, hydrateStorageUrls, isFileDenied, isSafeOriginalFileName, sanitizeFileName, transferVerifiedObject, verifyStoredObject };