@zuzjs/flare-admin 0.1.3 → 0.1.5

package/dist/index.d.cts

@@ -12,6 +12,10 @@ interface FlareAdminConfig {
      * Keep in an environment variable — NEVER expose to the browser.
      */
     adminKey: string;
+    /** Optional gRPC endpoint, e.g. "127.0.0.1:5051". */
+    grpcUrl?: string;
+    /** Transport preference for supported operations. */
+    transport?: "auto" | "http" | "grpc";
     /** Default token TTL, e.g. "24h" */
     defaultTtl?: string;
     /**
@@ -89,6 +93,322 @@ interface FlareAdminNotifications {
         tokens: AdminPushToken[];
     }>;
 }
+interface AdminStorageServer {
+    id: string;
+    name: string;
+    kind: string;
+    endpoint: string;
+    bucket: string;
+    region: string;
+    prefix?: string;
+    dataDir?: string;
+    forcePathStyle?: boolean;
+    frozen?: boolean;
+    readOnly?: boolean;
+    createdAt?: unknown;
+    updatedAt?: unknown;
+}
+interface AdminStorageServerInput {
+    name: string;
+    kind?: string;
+    endpoint?: string;
+    bucket: string;
+    region?: string;
+    accessKey?: string;
+    secretKey?: string;
+    prefix?: string;
+    dataDir?: string;
+    forcePathStyle?: boolean;
+    frozen?: boolean;
+    readOnly?: boolean;
+}
+interface AdminStorageServerPatchInput {
+    name?: string;
+    endpoint?: string;
+    bucket?: string;
+    region?: string;
+    accessKey?: string;
+    secretKey?: string;
+    prefix?: string;
+    dataDir?: string;
+    forcePathStyle?: boolean;
+    frozen?: boolean;
+    readOnly?: boolean;
+}
+interface AdminStorageUploadInput {
+    serverId: string;
+    path: string;
+    contentBase64: string;
+    contentType?: string;
+    encrypt?: boolean;
+}
+interface AdminStorageDownloadInput {
+    serverId: string;
+    path: string;
+    decrypt?: boolean;
+}
+interface AdminStorageDeleteInput {
+    serverId: string;
+    path: string;
+}
+interface AdminStorageObjectResult {
+    ok: boolean;
+    path: string;
+    key: string;
+    encrypted?: boolean;
+    size?: number;
+    contentBase64?: string;
+    contentType?: string;
+}
+declare enum AdminStorageSignedAction {
+    Upload = "upload",
+    Download = "download",
+    Delete = "delete",
+    Edit = "edit"
+}
+interface AdminStorageSignedUrlInput {
+    bucket: string;
+    key: string;
+    action: AdminStorageSignedAction;
+    expiresInSeconds?: number;
+    sizeBytes?: number;
+    contentType?: string;
+    encrypt?: boolean;
+    decrypt?: boolean;
+    forceDownload?: boolean;
+    allowedOrigins?: string[];
+    embedOnly?: boolean;
+}
+interface AdminStorageSignedUrlResult {
+    ok: boolean;
+    action: AdminStorageSignedAction;
+    method: "PUT" | "PATCH" | "GET" | "DELETE";
+    token: string;
+    urlPath: string;
+    url: string;
+    expiresInSeconds?: number;
+    expiresAt: number;
+    forceDownload?: boolean;
+    allowedOrigins?: string[];
+    embedOnly?: boolean;
+}
+interface AdminGetObjectUrlInput {
+    bucket: string;
+    key: string;
+    decrypt?: boolean;
+    expiresInSeconds?: number;
+    forceDownload?: boolean;
+    allowedOrigins?: string[];
+    embedOnly?: boolean;
+}
+interface AdminDownloadObjectInput extends AdminGetObjectUrlInput {
+    filename?: string;
+    openInNewTab?: boolean;
+}
+interface AdminDownloadObjectResult {
+    ok: boolean;
+    url: string;
+    filename: string;
+    triggered: boolean;
+}
+interface AdminStorageAwsConfig {
+    kind: string;
+    endpoint: string;
+    region: string;
+    bucket: string;
+    prefix?: string;
+    dataDir?: string;
+    forcePathStyle?: boolean;
+    accessKeyId: string;
+    secretAccessKey: string;
+}
+interface AdminStorageRulesPolicy {
+    maxEntries?: number;
+    maxAgeDays?: number;
+}
+interface AdminStorageRulesHistoryResult {
+    history: unknown[];
+    policy: AdminStorageRulesPolicy;
+    restoreEvents: unknown[];
+}
+interface FlareAdminStorage {
+    servers(): Promise<AdminStorageServer[]>;
+    createServer(input: AdminStorageServerInput): Promise<{
+        ok: boolean;
+        serverId: string;
+    }>;
+    patchServer(serverId: string, input: AdminStorageServerPatchInput): Promise<{
+        ok: boolean;
+        serverId: string;
+    }>;
+    deleteServer(serverId: string): Promise<{
+        ok: boolean;
+        serverId: string;
+        removedObjects: number;
+    }>;
+    awsConfig(serverId: string): Promise<AdminStorageAwsConfig>;
+    uploadObject(input: AdminStorageUploadInput): Promise<AdminStorageObjectResult>;
+    downloadObject(input: AdminStorageDownloadInput): Promise<AdminStorageObjectResult>;
+    deleteObject(input: AdminStorageDeleteInput | AdminDeleteObjectsInput): Promise<AdminStorageObjectResult | {
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+    createSignedUrl(input: AdminStorageSignedUrlInput): Promise<AdminStorageSignedUrlResult>;
+    setRules(input: {
+        rules?: Record<string, unknown>;
+        rulesDsl?: string;
+        rulesHistoryPolicy?: AdminStorageRulesPolicy;
+    }): Promise<{
+        id: string;
+    }>;
+    validateRules(rulesDsl: string): Promise<{
+        valid: boolean;
+        diagnostics: unknown[];
+        rulesCount: number;
+    }>;
+    rulesHistory(): Promise<AdminStorageRulesHistoryResult>;
+    restoreRules(historyId: string): Promise<{
+        id: string;
+        rulesText: string;
+    }>;
+    createBucket(name: string, options?: AdminStorageBucketInput): Promise<AdminStorageBucket>;
+    listBuckets(): Promise<AdminStorageBucket[]>;
+    deleteBucket(name: string): Promise<{
+        ok: boolean;
+        removedObjects: number;
+    }>;
+    deleteBuckets(names: string[]): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+    getBucketLocation(name: string): Promise<{
+        bucket: string;
+        kind: string;
+        region?: string;
+        endpoint?: string;
+    }>;
+    putObject(input: AdminPutObjectInput): Promise<AdminPutObjectResult>;
+    getObject(input: AdminGetObjectInput): Promise<AdminGetObjectResult>;
+    getObjectUrl(input: AdminGetObjectUrlInput): Promise<string>;
+    downloadObject(input: AdminDownloadObjectInput): Promise<AdminDownloadObjectResult>;
+    headObject(input: AdminHeadObjectInput): Promise<AdminStorageObjectMeta>;
+    headObjects(input: AdminHeadObjectsInput): Promise<AdminStorageObjectMeta[]>;
+    listObjects(input: AdminListObjectsInput): Promise<AdminListObjectsResult>;
+    copyObject(input: AdminCopyObjectInput): Promise<{
+        ok: boolean;
+    }>;
+    copyObjects(inputs: AdminCopyObjectInput[]): Promise<{
+        ok: boolean;
+        errors: Record<string, string>;
+    }>;
+    deleteObjects(input: AdminDeleteObjectsInput): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+}
+interface AdminStorageBucket {
+    id: string;
+    name: string;
+    bucket: string;
+    kind: string;
+    region?: string;
+    endpoint?: string;
+    prefix?: string;
+    frozen?: boolean;
+    readOnly?: boolean;
+    createdAt?: unknown;
+    updatedAt?: unknown;
+}
+interface AdminStorageBucketInput {
+    kind?: string;
+    prefix?: string;
+    region?: string;
+    endpoint?: string;
+    accessKey?: string;
+    secretKey?: string;
+    dataDir?: string;
+    forcePathStyle?: boolean;
+}
+interface AdminStorageObjectMeta {
+    key: string;
+    bucket: string;
+    size: number;
+    contentType: string;
+    encrypted: boolean;
+    createdAt?: unknown;
+    updatedAt?: unknown;
+}
+interface AdminPutObjectInput {
+    bucket: string;
+    key: string;
+    body?: string | Uint8Array | ArrayBuffer | Buffer;
+    /** Pre-encoded base64 body. Mutually exclusive with `body`. Always uses base64 path. */
+    contentBase64?: string;
+    contentType?: string;
+    /** Encrypt at rest with AES-256-GCM. Defaults to true. */
+    encrypt?: boolean;
+    /**
+     * Max payload bytes for the base64-over-JSON upload path.
+     * Payloads larger than this are uploaded via a signed URL (raw binary PUT).
+     * Default: 4 MiB.
+     */
+    base64MaxBytes?: number;
+}
+interface AdminPutObjectResult {
+    ok: boolean;
+    bucket: string;
+    key: string;
+    size: number;
+    encrypted: boolean;
+}
+interface AdminGetObjectInput {
+    bucket: string;
+    key: string;
+    decrypt?: boolean;
+}
+interface AdminGetObjectResult {
+    ok: boolean;
+    bucket: string;
+    key: string;
+    contentBase64: string;
+    contentType: string;
+    size: number;
+    encrypted: boolean;
+}
+interface AdminHeadObjectInput {
+    bucket: string;
+    key: string;
+}
+interface AdminHeadObjectsInput {
+    bucket: string;
+    keys: string[];
+}
+interface AdminListObjectsInput {
+    bucket: string;
+    prefix?: string;
+    limit?: number;
+    cursor?: string;
+}
+interface AdminListObjectsResult {
+    bucket: string;
+    objects: AdminStorageObjectMeta[];
+    count: number;
+    hasMore: boolean;
+    cursor?: string;
+}
+interface AdminCopyObjectInput {
+    sourceBucket: string;
+    sourceKey: string;
+    destBucket: string;
+    destKey: string;
+}
+interface AdminDeleteObjectsInput {
+    bucket: string;
+    keys: string[];
+}
 type QueryOperator = "==" | "!=" | "<" | "<=" | ">" | ">=" | "in" | "not-in" | "array-contains" | "array-contains-any" | "elem-match" | "like" | "not-like" | "contains" | "exists" | "not-exists";
 interface WhereFilter {
     field: string;
@@ -454,6 +774,104 @@ declare class FlareAdminNotificationsService implements FlareAdminNotifications
     }>;
 }
 
+declare class FlareAdminStorageService {
+    private readonly cfg;
+    constructor(cfg: Required<FlareAdminConfig>);
+    private base;
+    private get headers();
+    protected jsonRequest<T>(method: string, path: string, body?: unknown): Promise<T>;
+    request<T>(method: string, path: string, body?: unknown): Promise<T>;
+    servers(): Promise<AdminStorageServer[]>;
+    createServer(input: AdminStorageServerInput): Promise<{
+        ok: boolean;
+        serverId: string;
+    }>;
+    patchServer(serverId: string, input: AdminStorageServerPatchInput): Promise<{
+        ok: boolean;
+        serverId: string;
+    }>;
+    deleteServer(serverId: string): Promise<{
+        ok: boolean;
+        serverId: string;
+        removedObjects: number;
+    }>;
+    awsConfig(serverId: string): Promise<AdminStorageAwsConfig>;
+    uploadObject(input: AdminStorageUploadInput): Promise<AdminStorageObjectResult>;
+    downloadObject(input: AdminStorageDownloadInput): Promise<AdminStorageObjectResult>;
+    deleteObject(input: AdminStorageDeleteInput): Promise<AdminStorageObjectResult>;
+    createSignedUrl(input: AdminStorageSignedUrlInput): Promise<AdminStorageSignedUrlResult>;
+    setRules(input: {
+        rules?: Record<string, unknown>;
+        rulesDsl?: string;
+        rulesHistoryPolicy?: AdminStorageRulesPolicy;
+    }): Promise<{
+        id: string;
+    }>;
+    validateRules(rulesDsl: string): Promise<{
+        valid: boolean;
+        diagnostics: unknown[];
+        rulesCount: number;
+    }>;
+    rulesHistory(): Promise<AdminStorageRulesHistoryResult>;
+    restoreRules(historyId: string): Promise<{
+        id: string;
+        rulesText: string;
+    }>;
+}
+/**
+ * S3-compatible admin storage service.
+ * Works with bucket names; resolves server IDs internally.
+ */
+declare class FlareAdminStorageS3 {
+    private readonly _svc;
+    private readonly _bucketCache;
+    private _bucketListLoaded;
+    private _bucketListPromise;
+    constructor(svc: FlareAdminStorageService);
+    private _ensureBuckets;
+    private _loadBuckets;
+    private _invalidateCache;
+    private _resolveBucketId;
+    createBucket(name: string, options?: AdminStorageBucketInput): Promise<AdminStorageBucket>;
+    listBuckets(): Promise<AdminStorageBucket[]>;
+    deleteBucket(name: string): Promise<{
+        ok: boolean;
+        removedObjects: number;
+    }>;
+    deleteBuckets(names: string[]): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+    getBucketLocation(name: string): Promise<{
+        bucket: string;
+        kind: string;
+        region?: string;
+        endpoint?: string;
+    }>;
+    putObject(input: AdminPutObjectInput): Promise<AdminPutObjectResult>;
+    getObject(input: AdminGetObjectInput): Promise<AdminGetObjectResult>;
+    getObjectUrl(input: AdminGetObjectUrlInput): Promise<string>;
+    downloadObject(input: AdminDownloadObjectInput): Promise<AdminDownloadObjectResult>;
+    headObject(input: AdminHeadObjectInput): Promise<AdminStorageObjectMeta>;
+    headObjects(input: AdminHeadObjectsInput): Promise<AdminStorageObjectMeta[]>;
+    listObjects(input: AdminListObjectsInput): Promise<AdminListObjectsResult>;
+    copyObject(input: AdminCopyObjectInput): Promise<{
+        ok: boolean;
+    }>;
+    copyObjects(inputs: AdminCopyObjectInput[]): Promise<{
+        ok: boolean;
+        errors: Record<string, string>;
+    }>;
+    deleteObject(input: AdminStorageDeleteInput): Promise<AdminStorageObjectResult>;
+    deleteObjects(input: AdminDeleteObjectsInput): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+    createSignedUrl(input: AdminStorageSignedUrlInput): Promise<AdminStorageSignedUrlResult>;
+}
+
 type AdminRealtimeSubscriber$1 = {
     subscribe: (collection: string, docId: string | undefined, structuredQuery: StructuredQuery | undefined, callback: AdminSnapshotCallback, options?: AdminSubscribeOptions) => AdminSubscriptionHandle;
 };
@@ -652,6 +1070,20 @@ declare class FlareAdminWsConnection {
     private _handle;
 }
 
+/**
+ * Sentinel value that asks flare-node to write the current server timestamp.
+ *
+ * Usage:
+ *   await admin.db().collection("posts").doc(id).update({ updatedAt: ServerTimeStamp })
+ */
+declare const ServerTimeStamp: "ServerTimeStamp";
+/**
+ * Object form of the same sentinel for payloads that prefer structured values.
+ */
+declare const ServerTimeStampField: {
+    readonly $serverTimestamp: true;
+};
+
 /**
  * @zuzjs/flare-admin
  *
@@ -704,6 +1136,8 @@ declare class FlareAdminApp {
     private _db?;
     private _conn?;
     private _notifications?;
+    private _storage?;
+    private _storageS3?;
     /**
      * Access the auth service.
      *
@@ -761,6 +1195,54 @@ declare class FlareAdminApp {
      * Access push notification management APIs.
      */
     notifications(): FlareAdminNotifications;
+    private storageService;
+    storage(): FlareAdminStorageS3;
+    /**
+     * S3-compatible storage service. Works with bucket names; no server IDs needed.
+     * Bucket is auto-created on putObject() if it doesn't exist.
+     *
+     * @example
+     *   await admin.s3().putObject({ bucket: 'avatars', key: 'alice.png', body: buffer });
+     *   const { contentBase64 } = await admin.s3().getObject({ bucket: 'avatars', key: 'alice.png' });
+     */
+    s3(): FlareAdminStorageS3;
+    createSignedUrl(input: AdminStorageSignedUrlInput): Promise<AdminStorageSignedUrlResult>;
+    createBucket(name: string, options?: AdminStorageBucketInput): Promise<AdminStorageBucket>;
+    listBuckets(): Promise<AdminStorageBucket[]>;
+    deleteBucket(name: string): Promise<{
+        ok: boolean;
+        removedObjects: number;
+    }>;
+    deleteBuckets(names: string[]): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+    getBucketLocation(name: string): Promise<{
+        bucket: string;
+        kind: string;
+        region?: string;
+        endpoint?: string;
+    }>;
+    putObject(input: AdminPutObjectInput): Promise<AdminPutObjectResult>;
+    getObject(input: AdminGetObjectInput): Promise<AdminGetObjectResult>;
+    getObjectUrl(input: AdminGetObjectUrlInput): Promise<string>;
+    downloadObject(input: AdminDownloadObjectInput): Promise<AdminDownloadObjectResult>;
+    headObject(input: AdminHeadObjectInput): Promise<AdminStorageObjectMeta>;
+    headObjects(input: AdminHeadObjectsInput): Promise<AdminStorageObjectMeta[]>;
+    listObjects(input: AdminListObjectsInput): Promise<AdminListObjectsResult>;
+    copyObject(input: AdminCopyObjectInput): Promise<{
+        ok: boolean;
+    }>;
+    copyObjects(inputs: AdminCopyObjectInput[]): Promise<{
+        ok: boolean;
+        errors: Record<string, string>;
+    }>;
+    deleteObjects(input: AdminDeleteObjectsInput): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
 }
 /**
  * Initialize a FlareAdmin app instance.
@@ -816,5 +1298,6 @@ declare function connection(name?: string): FlareAdminConnection;
  * Equivalent to `getApp().notifications()`.
  */
 declare function notifications(name?: string): FlareAdminNotifications;
+declare function storage(name?: string): FlareAdminStorageS3;
 
-export { AdminCollectionReference, type AdminDocAddedCallback, type AdminDocChangedCallback, type AdminDocDeletedCallback, type AdminDocUpdatedCallback, AdminDocumentReference, AdminLiveCollectionReference, AdminLiveDocumentReference, type AdminPushSendInput, type AdminPushSendResult, type AdminPushToken, type AdminSnapshotCallback, type AdminSnapshotData, type AdminSubscriptionError, type AdminSubscriptionErrorCallback, type AdminSubscriptionHandle, type AggregateFunction, type AggregateSpec, type AnyFilter, type CreateCustomTokenOptions, type CursorValue, FlareAdminApp, type FlareAdminAuth, FlareAdminAuthService, type FlareAdminConfig, FlareAdminConnection, type FlareAdminDb, FlareAdminDbService, type FlareAdminNotifications, FlareAdminNotificationsService, FlareAdminWsConnection, type GroupByClause, type HavingClause, type JoinClause, type OrFilter, type OrderByClause, type QueryOperator, type StructuredQuery, type VectorSearchClause, type WhereCondition, type WhereFilter, auth, connectApp, connection, db, getApp, notifications };
+export { AdminCollectionReference, type AdminCopyObjectInput, type AdminDeleteObjectsInput, type AdminDocAddedCallback, type AdminDocChangedCallback, type AdminDocDeletedCallback, type AdminDocUpdatedCallback, AdminDocumentReference, type AdminDownloadObjectInput, type AdminDownloadObjectResult, type AdminGetObjectInput, type AdminGetObjectResult, type AdminGetObjectUrlInput, type AdminHeadObjectInput, type AdminHeadObjectsInput, type AdminListObjectsInput, type AdminListObjectsResult, AdminLiveCollectionReference, AdminLiveDocumentReference, type AdminPushSendInput, type AdminPushSendResult, type AdminPushToken, type AdminPutObjectInput, type AdminPutObjectResult, type AdminSnapshotCallback, type AdminSnapshotData, type AdminStorageAwsConfig, type AdminStorageBucket, type AdminStorageBucketInput, type AdminStorageDeleteInput, type AdminStorageDownloadInput, type AdminStorageObjectMeta, type AdminStorageObjectResult, type AdminStorageRulesHistoryResult, type AdminStorageRulesPolicy, type AdminStorageServer, type AdminStorageServerInput, type AdminStorageServerPatchInput, AdminStorageSignedAction, type AdminStorageSignedUrlInput, type AdminStorageSignedUrlResult, type AdminStorageUploadInput, type AdminSubscriptionError, type AdminSubscriptionErrorCallback, type AdminSubscriptionHandle, type AggregateFunction, type AggregateSpec, type AnyFilter, type CreateCustomTokenOptions, type CursorValue, FlareAdminApp, type FlareAdminAuth, FlareAdminAuthService, type FlareAdminConfig, FlareAdminConnection, type FlareAdminDb, FlareAdminDbService, type FlareAdminNotifications, FlareAdminNotificationsService, type FlareAdminStorage, FlareAdminStorageS3, FlareAdminWsConnection, type GroupByClause, type HavingClause, type JoinClause, type OrFilter, type OrderByClause, type QueryOperator, ServerTimeStamp, ServerTimeStampField, type StructuredQuery, type VectorSearchClause, type WhereCondition, type WhereFilter, auth, connectApp, connection, db, getApp, notifications, storage };

package/dist/index.d.ts

@@ -39,18 +39,21 @@
  *     .orderBy("createdAt", "desc")
  *     .onSnapshot((snap) => console.log(snap));
  */
-export type { AdminDocAddedCallback, AdminDocChangedCallback, AdminDocDeletedCallback, AdminDocUpdatedCallback, AdminPushSendInput, AdminPushSendResult, AdminPushToken, AdminSnapshotCallback, AdminSnapshotData, AdminSubscriptionError, AdminSubscriptionErrorCallback, AdminSubscriptionHandle, AggregateFunction, AggregateSpec, AnyFilter, CreateCustomTokenOptions, CursorValue, FlareAdminAuth, FlareAdminConfig, FlareAdminDb, FlareAdminNotifications, GroupByClause, HavingClause, JoinClause, OrderByClause, OrFilter, QueryOperator, StructuredQuery, VectorSearchClause, WhereCondition, WhereFilter } from "./types";
+export { AdminStorageSignedAction } from "./types";
+export type { AdminCopyObjectInput, AdminDeleteObjectsInput, AdminDocAddedCallback, AdminDocChangedCallback, AdminDocDeletedCallback, AdminDocUpdatedCallback, AdminDownloadObjectInput, AdminDownloadObjectResult, AdminGetObjectInput, AdminGetObjectResult, AdminGetObjectUrlInput, AdminHeadObjectInput, AdminHeadObjectsInput, AdminListObjectsInput, AdminListObjectsResult, AdminPushSendInput, AdminPushSendResult, AdminPushToken, AdminPutObjectInput, AdminPutObjectResult, AdminSnapshotCallback, AdminSnapshotData, AdminStorageAwsConfig, AdminStorageBucket, AdminStorageBucketInput, AdminStorageDeleteInput, AdminStorageDownloadInput, AdminStorageObjectMeta, AdminStorageObjectResult, AdminStorageRulesHistoryResult, AdminStorageRulesPolicy, AdminStorageServer, AdminStorageServerInput, AdminStorageServerPatchInput, AdminStorageSignedUrlInput, AdminStorageSignedUrlResult, AdminStorageUploadInput, AdminSubscriptionError, AdminSubscriptionErrorCallback, AdminSubscriptionHandle, AggregateFunction, AggregateSpec, AnyFilter, CreateCustomTokenOptions, CursorValue, FlareAdminAuth, FlareAdminConfig, FlareAdminDb, FlareAdminNotifications, FlareAdminStorage, GroupByClause, HavingClause, JoinClause, OrderByClause, OrFilter, QueryOperator, StructuredQuery, VectorSearchClause, WhereCondition, WhereFilter } from "./types";
 export { AdminCollectionReference } from "./db/Collection";
 export { AdminDocumentReference } from "./db/Document";
 export { FlareAdminDbService } from "./db/index";
 export { FlareAdminAuthService } from "./lib/auth";
 export { FlareAdminNotificationsService } from "./lib/notifications";
+export { FlareAdminStorageS3 } from "./lib/storage";
 export { FlareAdminConnection } from "./realtime/Connection";
 export { AdminLiveCollectionReference } from "./realtime/LiveCollection";
 export { AdminLiveDocumentReference } from "./realtime/LiveDocument";
 export { FlareAdminWsConnection } from "./realtime/WsConnection";
+import { FlareAdminStorageS3 } from "./lib/storage";
 import { FlareAdminConnection } from "./realtime/Connection";
-import { FlareAdminAuth, FlareAdminConfig, FlareAdminDb, FlareAdminNotifications } from "./types";
+import { AdminCopyObjectInput, AdminDeleteObjectsInput, AdminDownloadObjectInput, AdminDownloadObjectResult, AdminGetObjectInput, AdminGetObjectResult, AdminGetObjectUrlInput, AdminHeadObjectInput, AdminHeadObjectsInput, AdminListObjectsInput, AdminListObjectsResult, AdminPutObjectInput, AdminPutObjectResult, AdminStorageBucket, AdminStorageBucketInput, AdminStorageObjectMeta, AdminStorageSignedUrlInput, AdminStorageSignedUrlResult, FlareAdminAuth, FlareAdminConfig, FlareAdminDb, FlareAdminNotifications } from "./types";
 /**
  * A FlareAdmin application instance.
  * Create one with `connectApp()` and keep it as a module-level singleton.
@@ -61,6 +64,8 @@ export declare class FlareAdminApp {
     private _db?;
     private _conn?;
     private _notifications?;
+    private _storage?;
+    private _storageS3?;
     /**
      * Access the auth service.
      *
@@ -118,6 +123,54 @@ export declare class FlareAdminApp {
      * Access push notification management APIs.
      */
     notifications(): FlareAdminNotifications;
+    private storageService;
+    storage(): FlareAdminStorageS3;
+    /**
+     * S3-compatible storage service. Works with bucket names; no server IDs needed.
+     * Bucket is auto-created on putObject() if it doesn't exist.
+     *
+     * @example
+     *   await admin.s3().putObject({ bucket: 'avatars', key: 'alice.png', body: buffer });
+     *   const { contentBase64 } = await admin.s3().getObject({ bucket: 'avatars', key: 'alice.png' });
+     */
+    s3(): FlareAdminStorageS3;
+    createSignedUrl(input: AdminStorageSignedUrlInput): Promise<AdminStorageSignedUrlResult>;
+    createBucket(name: string, options?: AdminStorageBucketInput): Promise<AdminStorageBucket>;
+    listBuckets(): Promise<AdminStorageBucket[]>;
+    deleteBucket(name: string): Promise<{
+        ok: boolean;
+        removedObjects: number;
+    }>;
+    deleteBuckets(names: string[]): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
+    getBucketLocation(name: string): Promise<{
+        bucket: string;
+        kind: string;
+        region?: string;
+        endpoint?: string;
+    }>;
+    putObject(input: AdminPutObjectInput): Promise<AdminPutObjectResult>;
+    getObject(input: AdminGetObjectInput): Promise<AdminGetObjectResult>;
+    getObjectUrl(input: AdminGetObjectUrlInput): Promise<string>;
+    downloadObject(input: AdminDownloadObjectInput): Promise<AdminDownloadObjectResult>;
+    headObject(input: AdminHeadObjectInput): Promise<AdminStorageObjectMeta>;
+    headObjects(input: AdminHeadObjectsInput): Promise<AdminStorageObjectMeta[]>;
+    listObjects(input: AdminListObjectsInput): Promise<AdminListObjectsResult>;
+    copyObject(input: AdminCopyObjectInput): Promise<{
+        ok: boolean;
+    }>;
+    copyObjects(inputs: AdminCopyObjectInput[]): Promise<{
+        ok: boolean;
+        errors: Record<string, string>;
+    }>;
+    deleteObjects(input: AdminDeleteObjectsInput): Promise<{
+        ok: boolean;
+        deleted: string[];
+        errors: Record<string, string>;
+    }>;
 }
 /**
  * Initialize a FlareAdmin app instance.
@@ -173,3 +226,5 @@ export declare function connection(name?: string): FlareAdminConnection;
  * Equivalent to `getApp().notifications()`.
  */
 export declare function notifications(name?: string): FlareAdminNotifications;
+export declare function storage(name?: string): FlareAdminStorageS3;
+export * from "./serverTimestamp";