firebase-admin-edge 1.1.1 → 2.0.0

package/dist/storage/storage-reference-signing.js

@@ -0,0 +1,289 @@
+import { importPKCS8 } from 'jose';
+import { FirebaseEdgeError } from '../auth/errors.js';
+import { encodeStorageComponent, storageHex } from './storage-signed-url.js';
+import { validateStorageOperation } from './storage-endpoints.js';
+/** @internal Centralize web-native service-account signing for Admin URLs and POST policies. */
+async function signReferenceValue(account, value, endpoint, remote) {
+    if (endpoint !== undefined) {
+        if (!remote) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'A remote signing transport is required.'
+            });
+        }
+        return remote(value, endpoint);
+    }
+    if (!account.client_email?.trim() || !account.private_key?.trim()) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Service account signing credentials are required.'
+        });
+    }
+    const key = await importPKCS8(account.private_key.replace(/\\n/g, '\n'), 'RS256');
+    return crypto.subtle.sign('RSASSA-PKCS1-v1_5', key, new TextEncoder().encode(value));
+}
+/** @internal URL expiration in Admin is absolute, rather than a relative duration. */
+function referenceExpiration(expires) {
+    const value = new Date(expires).getTime();
+    if (!Number.isFinite(value) || value <= Date.now()) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Expiration must be a valid future date.'
+        });
+    }
+    return Math.floor(value / 1000);
+}
+/** @internal Support Admin V2/V4 signed URL options over the same web signing primitives. */
+export async function signStorageReferenceUrl(account, bucket, name, options, remote) {
+    validateStorageOperation(bucket, name === undefined
+        ? { kind: 'list', options: {} }
+        : { kind: 'metadata', name });
+    if (!options ||
+        !['read', 'write', 'delete', 'resumable', 'list'].includes(options.action) ||
+        (options.action === 'list' && name !== undefined) ||
+        !['v2', 'v4'].includes(options.version ?? 'v2') ||
+        name?.split('/').some((part) => part === '.' || part === '..')) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Invalid signed URL options or path.'
+        });
+    }
+    const expires = referenceExpiration(options.expires);
+    const method = {
+        read: 'GET',
+        list: 'GET',
+        write: 'PUT',
+        delete: 'DELETE',
+        resumable: 'POST'
+    }[options.action];
+    const host = new URL(options.cname ??
+        options.host ??
+        (options.virtualHostedStyle
+            ? `https://${bucket}.storage.googleapis.com`
+            : 'https://storage.googleapis.com'));
+    if (host.protocol !== 'https:' ||
+        host.username ||
+        host.password ||
+        host.search ||
+        host.hash ||
+        host.pathname !== '/') {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'A signing hostname must be an HTTPS origin.'
+        });
+    }
+    const objectPath = name?.split('/').map(encodeStorageComponent).join('/');
+    const resource = `/${encodeStorageComponent(bucket)}${objectPath === undefined ? '' : `/${objectPath}`}`;
+    const path = options.cname || options.virtualHostedStyle
+        ? `/${objectPath ?? ''}`
+        : resource;
+    const headers = new Headers();
+    for (const [key, value] of Object.entries(options.extensionHeaders ?? {})) {
+        if (value !== undefined) {
+            headers.set(key, Array.isArray(value) ? value.join(',') : String(value));
+        }
+    }
+    if (options.action === 'resumable') {
+        headers.set('x-goog-resumable', 'start');
+    }
+    const query = Object.fromEntries(Object.entries(options.queryParams ?? {}).map(([key, value]) => [
+        key,
+        String(value)
+    ]));
+    if (options.responseType) {
+        query['response-content-type'] = options.responseType;
+    }
+    if (options.responseDisposition) {
+        query['response-content-disposition'] = options.responseDisposition;
+    }
+    if (options.promptSaveAs) {
+        query['response-content-disposition'] =
+            `attachment; filename="${options.promptSaveAs.replace(/["\r\n]/g, '')}"`;
+    }
+    if (Object.keys(query).some((key) => /^(x-goog-|googleaccessid$|signature$|expires$)/i.test(key))) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Authentication query parameters are managed by the signer.'
+        });
+    }
+    if ((options.version ?? 'v2') === 'v2') {
+        const canonicalHeaders = Array.from(headers)
+            .sort(([a], [b]) => (a < b ? -1 : 1))
+            .map(([key, value]) => `${key}:${value.trim().replace(/\s+/g, ' ')}\n`)
+            .join('');
+        const signature = await signReferenceValue(account, [
+            method,
+            options.contentMd5 ?? '',
+            options.contentType ?? '',
+            String(expires),
+            canonicalHeaders + resource
+        ].join('\n'), options.signingEndpoint, remote);
+        Object.assign(query, {
+            GoogleAccessId: account.client_email,
+            Expires: String(expires),
+            Signature: btoa(String.fromCharCode(...new Uint8Array(signature)))
+        });
+    }
+    else {
+        const accessible = Math.floor(new Date(options.accessibleAt ?? Date.now()).getTime() / 1000);
+        const duration = expires - accessible;
+        if (!Number.isFinite(accessible) || duration < 1 || duration > 604800) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'V4 URLs require a lifetime of 1 to 604800 seconds.'
+            });
+        }
+        const timestamp = new Date(accessible * 1000)
+            .toISOString()
+            .replace(/[-:]/g, '')
+            .replace(/\.\d{3}Z$/, 'Z');
+        const scope = `${timestamp.slice(0, 8)}/auto/storage/goog4_request`;
+        headers.set('host', host.host);
+        if (options.contentType) {
+            headers.set('content-type', options.contentType);
+        }
+        if (options.contentMd5) {
+            headers.set('content-md5', options.contentMd5);
+        }
+        const entries = Array.from(headers).sort(([a], [b]) => a < b ? -1 : 1);
+        const signedHeaders = entries.map(([key]) => key).join(';');
+        const canonicalHeaders = entries
+            .map(([key, value]) => `${key}:${value.trim().replace(/\s+/g, ' ')}\n`)
+            .join('');
+        Object.assign(query, {
+            'X-Goog-Algorithm': 'GOOG4-RSA-SHA256',
+            'X-Goog-Credential': `${account.client_email}/${scope}`,
+            'X-Goog-Date': timestamp,
+            'X-Goog-Expires': String(duration),
+            'X-Goog-SignedHeaders': signedHeaders
+        });
+        const canonicalQuery = Object.entries(query)
+            .map(([key, value]) => `${encodeStorageComponent(key)}=${encodeStorageComponent(value)}`)
+            .sort()
+            .join('&');
+        const canonicalRequest = [
+            method,
+            path,
+            canonicalQuery,
+            canonicalHeaders,
+            signedHeaders,
+            headers.get('x-goog-content-sha256') ?? 'UNSIGNED-PAYLOAD'
+        ].join('\n');
+        const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(canonicalRequest));
+        const signature = await signReferenceValue(account, ['GOOG4-RSA-SHA256', timestamp, scope, storageHex(digest)].join('\n'), options.signingEndpoint, remote);
+        query['X-Goog-Signature'] = storageHex(signature);
+    }
+    const encodedQuery = Object.entries(query)
+        .map(([key, value]) => `${encodeStorageComponent(key)}=${encodeStorageComponent(value)}`)
+        .sort()
+        .join('&');
+    return `${host.origin}${path}?${encodedQuery}`;
+}
+/** @internal Form-upload policies are signed locally and do not send network requests. */
+export async function signStoragePostPolicy(account, bucket, name, version, options, remote) {
+    validateStorageOperation(bucket, { kind: 'metadata', name });
+    const expires = referenceExpiration(options.expires);
+    const fields = { ...options.fields, key: name };
+    const conditions = [
+        ...(options.conditions ?? []),
+        { bucket },
+        name.includes('${filename}')
+            ? ['starts-with', '$key', name.split('${filename}')[0]]
+            : { key: name }
+    ];
+    if (options.acl) {
+        fields.acl = options.acl;
+    }
+    if (options.successRedirect) {
+        fields.success_action_redirect = options.successRedirect;
+    }
+    if (options.successStatus) {
+        fields.success_action_status = options.successStatus;
+    }
+    for (const [operator, entries] of [
+        ['eq', options.equals],
+        ['starts-with', options.startsWith]
+    ]) {
+        if (!entries?.length) {
+            continue;
+        }
+        const pairs = (typeof entries[0] === 'string' ? [entries] : entries);
+        for (const pair of pairs) {
+            if (pair.length !== 2 ||
+                !pair.every((value) => typeof value === 'string')) {
+                throw new FirebaseEdgeError({
+                    code: 'storage/invalid-argument',
+                    message: 'Policy comparisons require field/value pairs.'
+                });
+            }
+            conditions.push([operator, ...pair]);
+        }
+    }
+    if (options.contentLengthRange) {
+        const { min = 0, max } = options.contentLengthRange;
+        if (!Number.isSafeInteger(min) ||
+            !Number.isSafeInteger(max) ||
+            min < 0 ||
+            max < min) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'Invalid form upload length range.'
+            });
+        }
+        conditions.push(['content-length-range', min, max]);
+    }
+    if (version === 'v4') {
+        if (expires - Math.floor(Date.now() / 1000) > 604800) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'V4 policy expiration cannot exceed seven days.'
+            });
+        }
+        const timestamp = new Date()
+            .toISOString()
+            .replace(/[-:]/g, '')
+            .replace(/\.\d{3}Z$/, 'Z');
+        fields['x-goog-algorithm'] = 'GOOG4-RSA-SHA256';
+        fields['x-goog-credential'] =
+            `${account.client_email}/${timestamp.slice(0, 8)}/auto/storage/goog4_request`;
+        fields['x-goog-date'] = timestamp;
+    }
+    for (const [key, value] of Object.entries(fields)) {
+        if (key !== 'key') {
+            conditions.push({ [key]: value });
+        }
+    }
+    const string = JSON.stringify({
+        expiration: new Date(expires * 1000).toISOString(),
+        conditions
+    });
+    const base64 = btoa(String.fromCharCode(...new TextEncoder().encode(string)));
+    const signature = await signReferenceValue(account, base64, options.signingEndpoint, remote);
+    if (version === 'v2') {
+        return {
+            string,
+            base64,
+            signature: btoa(String.fromCharCode(...new Uint8Array(signature)))
+        };
+    }
+    const origin = options.bucketBoundHostname
+        ? new URL(options.bucketBoundHostname)
+        : new URL(options.virtualHostedStyle
+            ? `https://${bucket}.storage.googleapis.com`
+            : 'https://storage.googleapis.com');
+    if (origin.protocol !== 'https:' || origin.username || origin.password) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Form upload host must use HTTPS.'
+        });
+    }
+    return {
+        url: `${origin.origin}/${options.bucketBoundHostname || options.virtualHostedStyle ? '' : encodeStorageComponent(bucket)}`,
+        fields: {
+            ...fields,
+            policy: base64,
+            'x-goog-signature': storageHex(signature)
+        }
+    };
+}
+//# sourceMappingURL=storage-reference-signing.js.map

package/dist/storage/storage-reference-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-signing.js","sourceRoot":"","sources":["../../src/storage/storage-reference-signing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAMlE,gGAAgG;AAChG,KAAK,UAAU,kBAAkB,CAC7B,OAAuB,EACvB,KAAa,EACb,QAAiB,EACjB,MAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,yCAAyC;aACrD,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,mDAAmD;SAC/D,CAAC,CAAC;IACP,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,WAAW,CACzB,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EACzC,OAAO,CACV,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CACrB,mBAAmB,EACnB,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAClC,CAAC;AACN,CAAC;AAED,sFAAsF;AACtF,SAAS,mBAAmB,CAAC,OAA+B;IACxD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,yCAAyC;SACrD,CAAC,CAAC;IACP,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,OAAuB,EACvB,MAA0B,EAC1B,IAAwB,EACxB,OAA4B,EAC5B,MAA4B;IAE5B,wBAAwB,CACpB,MAAM,EACN,IAAI,KAAK,SAAS;QACd,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CACnC,CAAC;IACF,IACI,CAAC,OAAO;QACR,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CACtD,OAAO,CAAC,MAAM,CACjB;QACD,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QAC/C,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAChE,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,qCAAqC;SACjD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG;QACX,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,MAAM;KACpB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,MAAM,IAAI,GAAG,IAAI,GAAG,CAChB,OAAO,CAAC,KAAK;QACT,OAAO,CAAC,IAAI;QACZ,CAAC,OAAO,CAAC,kBAAkB;YACvB,CAAC,CAAC,WAAW,MAAM,yBAAyB;YAC5C,CAAC,CAAC,gCAAgC,CAAC,CAC9C,CAAC;IACF,IACI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,QAAQ,KAAK,GAAG,EACvB,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,6CAA6C;SACzD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,MAAO,CAAC,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC;IAC1G,MAAM,IAAI,GACN,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,kBAAkB;QACvC,CAAC,CAAC,IAAI,UAAU,IAAI,EAAE,EAAE;QACxB,CAAC,CAAC,QAAQ,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACP,GAAG,EACH,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACzD,CAAC;QACN,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAA2B,MAAM,CAAC,WAAW,CACpD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5D,GAAG;QACH,MAAM,CAAC,KAAK,CAAC;KAChB,CAAC,CACL,CAAC;IACF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,KAAK,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC9B,KAAK,CAAC,8BAA8B,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,KAAK,CAAC,8BAA8B,CAAC;YACjC,yBAAyB,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC;IACjF,CAAC;IACD,IACI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5B,iDAAiD,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9D,EACH,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,4DAA4D;SACnE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;aACvC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACpC,GAAG,CACA,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACb,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CACtD;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,kBAAkB,CACtC,OAAO,EACP;YACI,MAAM;YACN,OAAO,CAAC,UAAU,IAAI,EAAE;YACxB,OAAO,CAAC,WAAW,IAAI,EAAE;YACzB,MAAM,CAAC,OAAO,CAAC;YACf,gBAAgB,GAAG,QAAQ;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,OAAO,CAAC,eAAe,EACvB,MAAM,CACT,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;YACjB,cAAc,EAAE,OAAO,CAAC,YAAY;YACpC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SACrE,CAAC,CAAC;IACP,CAAC;SAAM,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CACzB,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAChE,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,oDAAoD;aAChE,CAAC,CAAC;QACP,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;aACxC,WAAW,EAAE;aACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6BAA6B,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjB,CAAC;QACF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,OAAO;aAC3B,GAAG,CACA,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACb,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CACtD;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;YACjB,kBAAkB,EAAE,kBAAkB;YACtC,mBAAmB,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,EAAE;YACvD,aAAa,EAAE,SAAS;YACxB,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC;YAClC,sBAAsB,EAAE,aAAa;SACxC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aACvC,GAAG,CACA,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACb,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CACxE;aACA,IAAI,EAAE;aACN,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,gBAAgB,GAAG;YACrB,MAAM;YACN,IAAI;YACJ,cAAc;YACd,gBAAgB;YAChB,aAAa;YACb,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,kBAAkB;SAC7D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAC7C,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,kBAAkB,CACtC,OAAO,EACP,CAAC,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAC3D,IAAI,CACP,EACD,OAAO,CAAC,eAAe,EACvB,MAAM,CACT,CAAC;QACF,KAAK,CAAC,kBAAkB,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACrC,GAAG,CACA,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACb,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CACxE;SACA,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,YAAY,EAAE,CAAC;AACnD,CAAC;AAmBD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,OAAuB,EACvB,MAA0B,EAC1B,IAAY,EACZ,OAAoB,EACpB,OAAgC,EAChC,MAA4B;IAE5B,wBAAwB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAA2B,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACxE,MAAM,UAAU,GAAc;QAC1B,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC7B,EAAE,MAAM,EAAE;QACV,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YACxB,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAE,CAAC;YACxD,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE;KACtB,CAAC;IACF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,CAAC,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,CAAC,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI;QAC9B,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACtB,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;KAC7B,EAAE,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACnB,SAAS;QACb,CAAC;QACD,MAAM,KAAK,GAAG,CACV,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CACzC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IACI,IAAI,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EACnD,CAAC;gBACC,MAAM,IAAI,iBAAiB,CAAC;oBACxB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,+CAA+C;iBAC3D,CAAC,CAAC;YACP,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACpD,IACI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;YAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;YAC1B,GAAG,GAAG,CAAC;YACP,GAAI,GAAG,GAAG,EACZ,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,mCAAmC;aAC/C,CAAC,CAAC;QACP,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,gDAAgD;aAC5D,CAAC,CAAC;QACP,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE;aACvB,WAAW,EAAE;aACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;QAChD,MAAM,CAAC,mBAAmB,CAAC;YACvB,GAAG,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6BAA6B,CAAC;QAClF,MAAM,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAClD,UAAU;KACb,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CACf,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,kBAAkB,CACtC,OAAO,EACP,MAAM,EACN,OAAO,CAAC,eAAe,EACvB,MAAM,CACT,CAAC;IACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACH,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SACrE,CAAC;IACN,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB;QACtC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACtC,CAAC,CAAC,IAAI,GAAG,CACH,OAAO,CAAC,kBAAkB;YACtB,CAAC,CAAC,WAAW,MAAM,yBAAyB;YAC5C,CAAC,CAAC,gCAAgC,CACzC,CAAC;IACR,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,kCAAkC;SAC9C,CAAC,CAAC;IACP,CAAC;IACD,OAAO;QACH,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAO,CAAC,EAAE;QAC3H,MAAM,EAAE;YACJ,GAAG,MAAM;YACT,MAAM,EAAE,MAAM;YACd,kBAAkB,EAAE,UAAU,CAAC,SAAS,CAAC;SAC5C;KACJ,CAAC;AACN,CAAC"}

package/dist/storage/storage-reference-types.d.ts

@@ -0,0 +1,76 @@
+import type { StorageListOptions, StorageMetadataUpdate, StorageDownloadOptions, StorageCopyOptions } from './storage-types.js';
+import type { StorageReadOptions } from './storage-types.js';
+import type { StorageUploadStreamOptions } from './storage-upload-stream.js';
+import type { CRC32CValidatorGenerator } from './storage-checksum.js';
+export interface PreconditionOptions {
+    userProject?: string;
+    ifGenerationMatch?: string | number;
+    ifGenerationNotMatch?: string | number;
+    ifMetagenerationMatch?: string | number;
+    ifMetagenerationNotMatch?: string | number;
+}
+export interface FileOptions {
+    crc32cGenerator?: CRC32CValidatorGenerator;
+    generation?: string | number;
+    preconditionOpts?: PreconditionOptions;
+    userProject?: string;
+    encryptionKey?: string | Uint8Array<ArrayBuffer>;
+    kmsKeyName?: string;
+    restoreToken?: string;
+}
+export interface BucketOptions extends Omit<FileOptions, 'encryptionKey' | 'restoreToken'> {
+    softDeleted?: boolean;
+}
+export interface SaveOptions extends Omit<StorageUploadStreamOptions, 'metadata'> {
+    metadata?: StorageMetadataUpdate;
+    preconditionOpts?: PreconditionOptions;
+    resumable?: boolean;
+    validation?: 'crc32c' | 'md5' | boolean;
+    gzip?: boolean | 'auto';
+    timeout?: number;
+    highWaterMark?: number;
+    uri?: string;
+    public?: boolean;
+    private?: boolean;
+    onUploadProgress?: (progress: {
+        bytesWritten: number;
+        contentLength?: number;
+    }) => void | Promise<void>;
+}
+export interface FileReadOptions extends Omit<StorageReadOptions, keyof PreconditionOptions | 'generation'>, PreconditionOptions {
+    generation?: string | number;
+    autoCreate?: boolean;
+    overrideUnlockedRetention?: boolean;
+}
+export interface DownloadOptions extends Omit<StorageDownloadOptions, keyof PreconditionOptions | 'generation'>, FileReadOptions {
+    validation?: 'crc32c' | 'md5' | boolean;
+    destination?: string;
+    decompress?: boolean;
+    encryptionKey?: string | Uint8Array<ArrayBuffer>;
+}
+export interface GetFilesOptions extends StorageListOptions {
+    autoPaginate?: boolean;
+    maxApiCalls?: number;
+}
+export interface CopyOptions extends Omit<StorageCopyOptions, 'metadata'>, StorageMetadataUpdate {
+    preconditionOpts?: PreconditionOptions;
+    destinationKmsKeyName?: string;
+}
+export interface GetSignedUrlOptions {
+    host?: string;
+    signingEndpoint?: string;
+    action: 'read' | 'write' | 'delete' | 'resumable' | 'list';
+    expires: number | string | Date;
+    accessibleAt?: number | string | Date;
+    version?: 'v2' | 'v4';
+    contentType?: string;
+    contentMd5?: string;
+    extensionHeaders?: Record<string, string | string[] | number | undefined>;
+    queryParams?: Record<string, string | number | boolean>;
+    responseDisposition?: string;
+    promptSaveAs?: string;
+    responseType?: string;
+    virtualHostedStyle?: boolean;
+    cname?: string;
+}
+//# sourceMappingURL=storage-reference-types.d.ts.map

package/dist/storage/storage-reference-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-types.d.ts","sourceRoot":"","sources":["../../src/storage/storage-reference-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxC,wBAAwB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9C;AACD,MAAM,WAAW,WAAW;IACxB,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,aACb,SAAQ,IAAI,CAAC,WAAW,EAAE,eAAe,GAAG,cAAc,CAAC;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AACD,MAAM,WAAW,WACb,SAAQ,IAAI,CAAC,0BAA0B,EAAE,UAAU,CAAC;IACpD,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IACxC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AACD,MAAM,WAAW,eACb,SAAQ,IAAI,CAAC,kBAAkB,EAAE,MAAM,mBAAmB,GAAG,YAAY,CAAC,EACtE,mBAAmB;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACvC;AACD,MAAM,WAAW,eACb,SAAQ,IAAI,CACJ,sBAAsB,EACtB,MAAM,mBAAmB,GAAG,YAAY,CAC3C,EACD,eAAe;IACnB,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;CACpD;AACD,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACvD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,WACb,SAAQ,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,EACxC,qBAAqB;IACzB,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC;AACD,MAAM,WAAW,mBAAmB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3D,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/storage/storage-reference-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=storage-reference-types.js.map

package/dist/storage/storage-reference-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-types.js","sourceRoot":"","sources":["../../src/storage/storage-reference-types.ts"],"names":[],"mappings":""}

package/dist/storage/storage-results.d.ts

@@ -0,0 +1,8 @@
+import type { StorageResult } from './storage-types.js';
+/** @internal Adapt composed operations to the package result convention. */
+export declare function storageResult<T>(operation: () => Promise<T>): Promise<StorageResult<T>>;
+/** @internal Unwrap only inside an operation whose boundary restores StorageResult. */
+export declare function storageData<T>({ error, data }: StorageResult<T>): T;
+/** @internal Report unsupported Node-specific features rather than silently ignoring them. */
+export declare function storageUnsupported(feature: string): never;
+//# sourceMappingURL=storage-results.d.ts.map

package/dist/storage/storage-results.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-results.d.ts","sourceRoot":"","sources":["../../src/storage/storage-results.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,4EAA4E;AAC5E,wBAAsB,aAAa,CAAC,CAAC,EACjC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAiB3B;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAKnE;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAKzD"}

package/dist/storage/storage-results.js

@@ -0,0 +1,32 @@
+import { FirebaseEdgeError, ensureError } from '../auth/errors.js';
+/** @internal Adapt composed operations to the package result convention. */
+export async function storageResult(operation) {
+    try {
+        const data = await operation();
+        return { error: null, data };
+    }
+    catch (cause) {
+        const error = cause instanceof FirebaseEdgeError
+            ? cause
+            : new FirebaseEdgeError({
+                code: 'storage/internal-error',
+                message: 'Storage operation failed.'
+            }, { cause: ensureError(cause) });
+        return { error, data: null };
+    }
+}
+/** @internal Unwrap only inside an operation whose boundary restores StorageResult. */
+export function storageData({ error, data }) {
+    if (error) {
+        throw error;
+    }
+    return data;
+}
+/** @internal Report unsupported Node-specific features rather than silently ignoring them. */
+export function storageUnsupported(feature) {
+    throw new FirebaseEdgeError({
+        code: 'storage/unsupported-operation',
+        message: `${feature} is not available in edge runtimes.`
+    });
+}
+//# sourceMappingURL=storage-results.js.map

package/dist/storage/storage-results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-results.js","sourceRoot":"","sources":["../../src/storage/storage-results.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGnE,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,SAA2B;IAE3B,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GACP,KAAK,YAAY,iBAAiB;YAC9B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,iBAAiB,CACjB;gBACI,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,2BAA2B;aACvC,EACD,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAI,EAAE,KAAK,EAAE,IAAI,EAAoB;IAC5D,IAAI,KAAK,EAAE,CAAC;QACR,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAC9C,MAAM,IAAI,iBAAiB,CAAC;QACxB,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,GAAG,OAAO,qCAAqC;KAC3D,CAAC,CAAC;AACP,CAAC"}

package/dist/storage/storage-resumable.d.ts

@@ -0,0 +1,18 @@
+import type { StorageChunkOptions, StorageUploadData, StorageUploadProgress } from './storage-types.js';
+export type StorageSessionOperation = {
+    kind: 'chunk';
+    body: StorageUploadData;
+    options: StorageChunkOptions;
+} | {
+    kind: 'status';
+    totalSize?: number;
+} | {
+    kind: 'cancel';
+};
+/** @internal Session URIs authorize writes, so only send them to the Storage upload endpoint. */
+export declare function validateSessionUri(sessionUri: string): string;
+/** @internal Chunk upload, status probing, and cancellation need no OAuth token. */
+export declare function resumableRequest<K extends StorageSessionOperation['kind']>(sessionUri: string, request: StorageSessionOperation & {
+    kind: K;
+}, fetch: typeof globalThis.fetch): Promise<K extends 'cancel' ? void : StorageUploadProgress>;
+//# sourceMappingURL=storage-resumable.d.ts.map

package/dist/storage/storage-resumable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-resumable.d.ts","sourceRoot":"","sources":["../../src/storage/storage-resumable.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACR,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACxB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,uBAAuB,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzB,iGAAiG;AACjG,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAwB7D;AAED,oFAAoF;AACpF,wBAAsB,gBAAgB,CAClC,CAAC,SAAS,uBAAuB,CAAC,MAAM,CAAC,EAEzC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,uBAAuB,GAAG;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,EAC9C,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,GAC/B,OAAO,CAAC,CAAC,SAAS,QAAQ,GAAG,IAAI,GAAG,qBAAqB,CAAC,CAsK5D"}

package/dist/storage/storage-resumable.js

@@ -0,0 +1,166 @@
+import { FirebaseEdgeError } from '../auth/errors.js';
+import { validateStorageCrc32c, validateStorageMd5, verifyStorageUpload, storageUploadBlob } from './storage-checksum.js';
+import { reportStorageProgress } from './storage-progress.js';
+import { storageFetch, readStorageObject, parseStorageMetadata } from './storage-endpoints.js';
+/** @internal Session URIs authorize writes, so only send them to the Storage upload endpoint. */
+export function validateSessionUri(sessionUri) {
+    let url;
+    try {
+        url = new URL(sessionUri);
+    }
+    catch {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Invalid resumable session URI.'
+        });
+    }
+    if (url.origin !== 'https://storage.googleapis.com' ||
+        url.username ||
+        url.password ||
+        url.hash ||
+        !/^\/upload\/storage\/v1\/b\/[^/]+\/o$/.test(url.pathname) ||
+        !url.searchParams.get('upload_id')) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Expected a Google Storage resumable session URI.'
+        });
+    }
+    return url.toString();
+}
+/** @internal Chunk upload, status probing, and cancellation need no OAuth token. */
+export async function resumableRequest(sessionUri, request, fetch) {
+    const operation = request;
+    const url = validateSessionUri(sessionUri);
+    if (operation.kind === 'cancel') {
+        const response = await storageFetch(url, { method: 'DELETE', redirect: 'manual' }, fetch, [499]);
+        await response.body?.cancel();
+        return undefined;
+    }
+    if (operation.kind === 'chunk' &&
+        (!operation.options ||
+            typeof operation.options !== 'object' ||
+            Array.isArray(operation.options))) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Chunk options are required.'
+        });
+    }
+    const totalSize = operation.kind === 'chunk'
+        ? operation.options.totalSize
+        : operation.totalSize;
+    if (totalSize !== undefined &&
+        (!Number.isSafeInteger(totalSize) || totalSize < 0)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'totalSize must be a nonnegative safe integer.'
+        });
+    }
+    let body = '';
+    let range = `bytes */${totalSize ?? '*'}`;
+    let sentEnd;
+    if (operation.kind === 'chunk') {
+        if (operation.options.md5Hash !== undefined) {
+            validateStorageMd5(operation.options.md5Hash);
+        }
+        const { offset } = operation.options;
+        if (operation.options.crc32c !== undefined) {
+            validateStorageCrc32c(operation.options.crc32c);
+        }
+        if (operation.options.onProgress !== undefined &&
+            typeof operation.options.onProgress !== 'function') {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'onProgress must be a function.'
+            });
+        }
+        if (!Number.isSafeInteger(offset) || offset < 0) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'Chunk offset must be a nonnegative safe integer.'
+            });
+        }
+        body = storageUploadBlob(operation.body);
+        sentEnd = offset + body.size;
+        const final = totalSize !== undefined && sentEnd === totalSize;
+        if ((operation.options.crc32c !== undefined ||
+            operation.options.md5Hash !== undefined) &&
+            !final) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'Send the whole-object CRC32C only with the final chunk.'
+            });
+        }
+        if (!Number.isSafeInteger(sentEnd) ||
+            (totalSize !== undefined && sentEnd > totalSize) ||
+            (!final && (body.size === 0 || body.size % 262144 !== 0))) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'Non-final chunks must be positive multiples of 256 KiB and must not exceed totalSize.'
+            });
+        }
+        range =
+            body.size === 0
+                ? `bytes */${totalSize}`
+                : `bytes ${offset}-${sentEnd - 1}/${totalSize ?? '*'}`;
+    }
+    const response = await storageFetch(url, {
+        method: 'PUT',
+        redirect: 'manual',
+        headers: {
+            'Content-Range': range,
+            ...(operation.kind === 'chunk' &&
+                (operation.options.crc32c !== undefined ||
+                    operation.options.md5Hash !== undefined) && {
+                'X-Goog-Hash': [
+                    operation.options.crc32c !== undefined
+                        ? `crc32c=${operation.options.crc32c}`
+                        : undefined,
+                    operation.options.md5Hash !== undefined
+                        ? `md5=${operation.options.md5Hash}`
+                        : undefined
+                ]
+                    .filter(Boolean)
+                    .join(',')
+            })
+        },
+        body
+    }, fetch, [308]);
+    if (response.status === 308) {
+        const received = response.headers.get('range');
+        const match = received === null ? null : /^bytes=0-(\d+)$/.exec(received);
+        const nextOffset = match ? Number(match[1]) + 1 : 0;
+        if ((received !== null && !match) ||
+            !Number.isSafeInteger(nextOffset) ||
+            (sentEnd !== undefined && nextOffset > sentEnd) ||
+            (totalSize !== undefined && nextOffset > totalSize)) {
+            throw new FirebaseEdgeError({
+                code: 'storage/internal-error',
+                message: 'Invalid resumable upload progress.'
+            });
+        }
+        await response.body?.cancel();
+        if (operation.kind === 'chunk') {
+            await reportStorageProgress(operation.options.onProgress, {
+                bytesTransferred: nextOffset,
+                totalBytes: totalSize,
+                complete: false
+            });
+        }
+        return { complete: false, nextOffset };
+    }
+    const resource = await readStorageObject(response);
+    const metadata = parseStorageMetadata(resource);
+    if (operation.kind === 'chunk') {
+        verifyStorageUpload(operation.options.crc32c, metadata, operation.options.md5Hash);
+        await reportStorageProgress(operation.options.onProgress, {
+            bytesTransferred: totalSize ?? sentEnd,
+            totalBytes: totalSize,
+            complete: true
+        });
+    }
+    return {
+        complete: true,
+        metadata
+    };
+}
+//# sourceMappingURL=storage-resumable.js.map