firebase-admin-edge 1.1.1 → 2.0.0

package/dist/storage/storage-resumable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-resumable.js","sourceRoot":"","sources":["../../src/storage/storage-resumable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACH,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACH,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACvB,MAAM,wBAAwB,CAAC;AAYhC,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACjD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACD,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,gCAAgC;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,IACI,GAAG,CAAC,MAAM,KAAK,gCAAgC;QAC/C,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,IAAI;QACR,CAAC,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1D,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EACpC,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,kDAAkD;SAC9D,CAAC,CAAC;IACP,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAGlC,UAAkB,EAClB,OAA8C,EAC9C,KAA8B;IAE9B,MAAM,SAAS,GAA4B,OAAO,CAAC;IACnD,MAAM,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,GAAG,EACH,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EACxC,KAAK,EACL,CAAC,GAAG,CAAC,CACR,CAAC;QACF,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,SAA8D,CAAC;IAC1E,CAAC;IACD,IACI,SAAS,CAAC,IAAI,KAAK,OAAO;QAC1B,CAAC,CAAC,SAAS,CAAC,OAAO;YACf,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;YACrC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACvC,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,6BAA6B;SACzC,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GACX,SAAS,CAAC,IAAI,KAAK,OAAO;QACtB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS;QAC7B,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;IAC9B,IACI,SAAS,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,EACrD,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,+CAA+C;SAC3D,CAAC,CAAC;IACP,CAAC;IACD,IAAI,IAAI,GAAkB,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,WAAW,SAAS,IAAI,GAAG,EAAE,CAAC;IAC1C,IAAI,OAA2B,CAAC;IAChC,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1C,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC;QACrC,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QACD,IACI,SAAS,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAC1C,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU,EACpD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,gCAAgC;aAC5C,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,kDAAkD;aAC9D,CAAC,CAAC;QACP,CAAC;QACD,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;QAC/D,IACI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACnC,SAAS,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC;YAC5C,CAAC,KAAK,EACR,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EACH,yDAAyD;aAChE,CAAC,CAAC;QACP,CAAC;QACD,IACI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YAC9B,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,SAAS,CAAC;YAChD,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAC3D,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EACH,uFAAuF;aAC9F,CAAC,CAAC;QACP,CAAC;QACD,KAAK;YACD,IAAI,CAAC,IAAI,KAAK,CAAC;gBACX,CAAC,CAAC,WAAW,SAAS,EAAE;gBACxB,CAAC,CAAC,SAAS,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,GAAG,EACH;QACI,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE;YACL,eAAe,EAAE,KAAK;YACtB,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO;gBAC1B,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;oBACnC,SAAS,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI;gBAC5C,aAAa,EAAE;oBACX,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;wBAClC,CAAC,CAAC,UAAU,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE;wBACtC,CAAC,CAAC,SAAS;oBACf,SAAS,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;wBACnC,CAAC,CAAC,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;wBACpC,CAAC,CAAC,SAAS;iBAClB;qBACI,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,GAAG,CAAC;aACjB,CAAC;SACT;QACD,IAAI;KACP,EACD,KAAK,EACL,CAAC,GAAG,CAAC,CACR,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GACP,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IACI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;YAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,GAAG,OAAO,CAAC;YAC/C,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,GAAG,SAAS,CAAC,EACrD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC;aAChD,CAAC,CAAC;QACP,CAAC;QACD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE;gBACtD,gBAAgB,EAAE,UAAU;gBAC5B,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,KAAK;aAClB,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAET,CAAC;IAChC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,mBAAmB,CACf,SAAS,CAAC,OAAO,CAAC,MAAM,EACxB,QAAQ,EACR,SAAS,CAAC,OAAO,CAAC,OAAO,CAC5B,CAAC;QACF,MAAM,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE;YACtD,gBAAgB,EAAE,SAAS,IAAI,OAAQ;YACvC,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;IACP,CAAC;IACD,OAAO;QACH,QAAQ,EAAE,IAAI;QACd,QAAQ;KAC0C,CAAC;AAC3D,CAAC"}

package/dist/storage/storage-retry.d.ts

@@ -0,0 +1,9 @@
+export interface StorageRetryOptions {
+    /** Additional attempts for safe operations. Defaults to 2. */
+    maxRetries?: number;
+    initialDelayMs?: number;
+    maxDelayMs?: number;
+}
+/** @internal Apply bounded exponential backoff only to replayable Storage requests. */
+export declare function createStorageRetryFetch(fetch: typeof globalThis.fetch, options?: StorageRetryOptions): typeof globalThis.fetch;
+//# sourceMappingURL=storage-retry.d.ts.map

package/dist/storage/storage-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-retry.d.ts","sourceRoot":"","sources":["../../src/storage/storage-retry.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAChC,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CACnC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,EAC9B,OAAO,GAAE,mBAAwB,GAClC,OAAO,UAAU,CAAC,KAAK,CAmGzB"}

package/dist/storage/storage-retry.js

@@ -0,0 +1,104 @@
+import { FirebaseEdgeError } from '../auth/errors.js';
+/** @internal Apply bounded exponential backoff only to replayable Storage requests. */
+export function createStorageRetryFetch(fetch, options = {}) {
+    if (!options || typeof options !== 'object' || Array.isArray(options)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Retry options must be an object.'
+        });
+    }
+    const { maxRetries = 2, initialDelayMs = 100, maxDelayMs = 2000 } = options;
+    if (!Number.isInteger(maxRetries) ||
+        maxRetries < 0 ||
+        maxRetries > 10 ||
+        !Number.isFinite(initialDelayMs) ||
+        initialDelayMs < 0 ||
+        !Number.isFinite(maxDelayMs) ||
+        maxDelayMs < initialDelayMs ||
+        maxDelayMs > 60000) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Invalid retry count or delay bounds.'
+        });
+    }
+    return async (input, init) => {
+        // Request objects and streams can be consumed; only retry explicit reusable bodies.
+        if (typeof input !== 'string' && !(input instanceof URL)) {
+            return fetch(input, init);
+        }
+        const url = new URL(input);
+        const method = init?.method?.toUpperCase() ?? 'GET';
+        const headers = new Headers(init?.headers);
+        const reusable = !(init?.body instanceof ReadableStream);
+        const sessionProbe = url.searchParams.has('upload_id') &&
+            method === 'PUT' &&
+            /^bytes \*\/(?:\*|\d+)$/.test(headers.get('Content-Range') ?? '') &&
+            (init?.body === '' || init?.body === undefined);
+        // New object generations can reset metageneration, so POST requires a generation guard.
+        const generationGuard = url.searchParams.has('ifGenerationMatch');
+        const metadataGuard = url.searchParams.has('ifMetagenerationMatch');
+        const guarded = generationGuard ||
+            (metadataGuard &&
+                (method === 'PATCH' ||
+                    (method === 'DELETE' && !url.pathname.includes('/o/'))));
+        const safe = url.origin === 'https://storage.googleapis.com' &&
+            reusable &&
+            (method === 'GET' ||
+                method === 'HEAD' ||
+                sessionProbe ||
+                (guarded &&
+                    !url.searchParams.has('upload_id') &&
+                    ['POST', 'PATCH', 'DELETE'].includes(method) &&
+                    url.searchParams.get('uploadType') !== 'resumable'));
+        for (let attempt = 0;; attempt++) {
+            init?.signal?.throwIfAborted();
+            let response;
+            try {
+                response = await fetch(input, init);
+                if (!safe ||
+                    attempt >= maxRetries ||
+                    ![408, 429, 500, 502, 503, 504].includes(response.status)) {
+                    return response;
+                }
+            }
+            catch (cause) {
+                if (!safe ||
+                    attempt >= maxRetries ||
+                    init?.signal?.aborted ||
+                    !(cause instanceof TypeError)) {
+                    throw cause;
+                }
+            }
+            const retryAfter = response?.headers.get('Retry-After');
+            const retryMs = retryAfter === null || retryAfter === undefined
+                ? 0
+                : /^\d+(?:\.\d+)?$/.test(retryAfter)
+                    ? Number(retryAfter) * 1000
+                    : Math.max(0, Date.parse(retryAfter) - Date.now());
+            // Do not retry earlier than the server requests, or wait beyond the configured bound.
+            if (response && Number.isFinite(retryMs) && retryMs > maxDelayMs) {
+                return response;
+            }
+            await response?.body?.cancel();
+            const delay = Math.min(maxDelayMs, Math.max(Number.isFinite(retryMs) ? retryMs : 0, initialDelayMs * 2 ** attempt * (0.5 + Math.random() * 0.5)));
+            await waitForRetry(delay, init?.signal);
+        }
+    };
+}
+/** @internal Backoff must stop promptly when the request is aborted. */
+function waitForRetry(delay, signal) {
+    signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const abort = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', abort);
+            reject(signal?.reason);
+        };
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', abort);
+            resolve();
+        }, delay);
+        signal?.addEventListener('abort', abort, { once: true });
+    });
+}
+//# sourceMappingURL=storage-retry.js.map

package/dist/storage/storage-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-retry.js","sourceRoot":"","sources":["../../src/storage/storage-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAStD,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CACnC,KAA8B,EAC9B,UAA+B,EAAE;IAEjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,kCAAkC;SAC9C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,cAAc,GAAG,GAAG,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC5E,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC7B,UAAU,GAAG,CAAC;QACd,UAAU,GAAG,EAAE;QACf,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,cAAc,GAAG,CAAC;QAClB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,UAAU,GAAG,cAAc;QAC3B,UAAU,GAAG,KAAK,EACpB,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,sCAAsC;SAClD,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACzB,oFAAoF;QACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,cAAc,CAAC,CAAC;QACzD,MAAM,YAAY,GACd,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;YACjC,MAAM,KAAK,KAAK;YAChB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACjE,CAAC,IAAI,EAAE,IAAI,KAAK,EAAE,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC;QACpD,wFAAwF;QACxF,MAAM,eAAe,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACpE,MAAM,OAAO,GACT,eAAe;YACf,CAAC,aAAa;gBACV,CAAC,MAAM,KAAK,OAAO;oBACf,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GACN,GAAG,CAAC,MAAM,KAAK,gCAAgC;YAC/C,QAAQ;YACR,CAAC,MAAM,KAAK,KAAK;gBACb,MAAM,KAAK,MAAM;gBACjB,YAAY;gBACZ,CAAC,OAAO;oBACJ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;oBAClC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC;QACjE,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAChC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAC/B,IAAI,QAA8B,CAAC;YACnC,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACpC,IACI,CAAC,IAAI;oBACL,OAAO,IAAI,UAAU;oBACrB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC3D,CAAC;oBACC,OAAO,QAAQ,CAAC;gBACpB,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IACI,CAAC,IAAI;oBACL,OAAO,IAAI,UAAU;oBACrB,IAAI,EAAE,MAAM,EAAE,OAAO;oBACrB,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,EAC/B,CAAC;oBACC,MAAM,KAAK,CAAC;gBAChB,CAAC;YACL,CAAC;YACD,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACxD,MAAM,OAAO,GACT,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;gBAC3C,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;oBAClC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI;oBAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,sFAAsF;YACtF,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBAC/D,OAAO,QAAQ,CAAC;YACpB,CAAC;YACD,MAAM,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAClB,UAAU,EACV,IAAI,CAAC,GAAG,CACJ,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EACtC,cAAc,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAC9D,CACJ,CAAC;YACF,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CACjB,KAAa,EACb,MAA2B;IAE3B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,GAAG,EAAE;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC;QACd,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/storage/storage-signed-url.d.ts

@@ -0,0 +1,9 @@
+import type { ServiceAccount } from '../auth/firebase-types.js';
+import type { StorageSignedUrlOptions } from './storage-types.js';
+/** @internal Construct and sign a V4 XML API request using Web Crypto. */
+export declare function signStorageUrl(account: ServiceAccount, bucket: string | undefined, name: string, options: StorageSignedUrlOptions): Promise<string>;
+/** @internal RFC 3986 encoding, including characters left unescaped by encodeURIComponent. */
+export declare function encodeStorageComponent(value: string): string;
+/** @internal V4 uses lowercase hexadecimal for hashes and signatures. */
+export declare function storageHex(bytes: ArrayBuffer): string;
+//# sourceMappingURL=storage-signed-url.d.ts.map

package/dist/storage/storage-signed-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-signed-url.d.ts","sourceRoot":"","sources":["../../src/storage/storage-signed-url.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAGlE,0EAA0E;AAC1E,wBAAsB,cAAc,CAChC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,uBAAuB,GACjC,OAAO,CAAC,MAAM,CAAC,CA6GjB;AAED,8FAA8F;AAC9F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,UAKnD;AAED,yEAAyE;AACzE,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,UAI5C"}

package/dist/storage/storage-signed-url.js

@@ -0,0 +1,96 @@
+import { importPKCS8 } from 'jose';
+import { FirebaseEdgeError } from '../auth/errors.js';
+import { validateStorageOperation } from './storage-endpoints.js';
+/** @internal Construct and sign a V4 XML API request using Web Crypto. */
+export async function signStorageUrl(account, bucket, name, options) {
+    validateStorageOperation(bucket, { kind: 'metadata', name });
+    if (!options ||
+        typeof options !== 'object' ||
+        Array.isArray(options) ||
+        !['read', 'write'].includes(options.action)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Signed URL action must be read or write.'
+        });
+    }
+    const { action, expiresInSeconds = 900, contentType } = options;
+    if (!Number.isInteger(expiresInSeconds) ||
+        expiresInSeconds < 1 ||
+        expiresInSeconds > 604800) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Signed URL lifetime must be an integer between 1 and 604800 seconds.'
+        });
+    }
+    if (contentType !== undefined &&
+        (action !== 'write' ||
+            typeof contentType !== 'string' ||
+            !contentType.trim() ||
+            /[\r\n]/.test(contentType))) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'contentType requires a write URL and a nonempty HTTP header value.'
+        });
+    }
+    if (name.split('/').some((segment) => segment === '.' || segment === '..')) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Signed URL object names cannot contain dot path segments.'
+        });
+    }
+    if (!account?.client_email?.trim() || !account?.private_key?.trim()) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'A service account email and private key are required for URL signing.'
+        });
+    }
+    const timestamp = new Date()
+        .toISOString()
+        .replace(/[-:]/g, '')
+        .replace(/\.\d{3}Z$/, 'Z');
+    const scope = `${timestamp.slice(0, 8)}/auto/storage/goog4_request`;
+    const signedHeaders = contentType === undefined ? 'host' : 'content-type;host';
+    const canonicalHeaders = (contentType === undefined
+        ? ''
+        : `content-type:${contentType.trim().replace(/\s+/g, ' ')}\n`) +
+        'host:storage.googleapis.com\n';
+    const path = `/${encodeStorageComponent(bucket)}/${name.split('/').map(encodeStorageComponent).join('/')}`;
+    const query = Object.entries({
+        'X-Goog-Algorithm': 'GOOG4-RSA-SHA256',
+        'X-Goog-Credential': `${account.client_email}/${scope}`,
+        'X-Goog-Date': timestamp,
+        'X-Goog-Expires': String(expiresInSeconds),
+        'X-Goog-SignedHeaders': signedHeaders
+    })
+        .map(([key, value]) => `${encodeStorageComponent(key)}=${encodeStorageComponent(value)}`)
+        .sort()
+        .join('&');
+    const canonicalRequest = [
+        action === 'read' ? 'GET' : 'PUT',
+        path,
+        query,
+        canonicalHeaders,
+        signedHeaders,
+        'UNSIGNED-PAYLOAD'
+    ].join('\n');
+    const encoder = new TextEncoder();
+    const digest = await crypto.subtle.digest('SHA-256', encoder.encode(canonicalRequest));
+    const stringToSign = [
+        'GOOG4-RSA-SHA256',
+        timestamp,
+        scope,
+        storageHex(digest)
+    ].join('\n');
+    const key = await importPKCS8(account.private_key.replace(/\\n/g, '\n'), 'RS256');
+    const signature = await crypto.subtle.sign('RSASSA-PKCS1-v1_5', key, encoder.encode(stringToSign));
+    return `https://storage.googleapis.com${path}?${query}&X-Goog-Signature=${storageHex(signature)}`;
+}
+/** @internal RFC 3986 encoding, including characters left unescaped by encodeURIComponent. */
+export function encodeStorageComponent(value) {
+    return encodeURIComponent(value).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+/** @internal V4 uses lowercase hexadecimal for hashes and signatures. */
+export function storageHex(bytes) {
+    return Array.from(new Uint8Array(bytes), (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+//# sourceMappingURL=storage-signed-url.js.map

package/dist/storage/storage-signed-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-signed-url.js","sourceRoot":"","sources":["../../src/storage/storage-signed-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,OAAuB,EACvB,MAA0B,EAC1B,IAAY,EACZ,OAAgC;IAEhC,wBAAwB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IACI,CAAC,OAAO;QACR,OAAO,OAAO,KAAK,QAAQ;QAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACtB,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7C,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,0CAA0C;SACtD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChE,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC;QACnC,gBAAgB,GAAG,CAAC;QACpB,gBAAgB,GAAG,MAAM,EAC3B,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,sEAAsE;SAC7E,CAAC,CAAC;IACP,CAAC;IACD,IACI,WAAW,KAAK,SAAS;QACzB,CAAC,MAAM,KAAK,OAAO;YACf,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,WAAW,CAAC,IAAI,EAAE;YACnB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EACjC,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,oEAAoE;SAC3E,CAAC,CAAC;IACP,CAAC;IACD,IACI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EACxE,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,2DAA2D;SACvE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,uEAAuE;SAC9E,CAAC,CAAC;IACP,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE;SACvB,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6BAA6B,CAAC;IACpE,MAAM,aAAa,GACf,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC7D,MAAM,gBAAgB,GAClB,CAAC,WAAW,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gBAAgB,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;QAClE,+BAA+B,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3G,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,kBAAkB,EAAE,kBAAkB;QACtC,mBAAmB,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,EAAE;QACvD,aAAa,EAAE,SAAS;QACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAC1C,sBAAsB,EAAE,aAAa;KACxC,CAAC;SACG,GAAG,CACA,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACb,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CACxE;SACA,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,gBAAgB,GAAG;QACrB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;QACjC,IAAI;QACJ,KAAK;QACL,gBAAgB;QAChB,aAAa;QACb,kBAAkB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,SAAS,EACT,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACnC,CAAC;IACF,MAAM,YAAY,GAAG;QACjB,kBAAkB;QAClB,SAAS;QACT,KAAK;QACL,UAAU,CAAC,MAAM,CAAC;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,MAAM,WAAW,CACzB,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EACzC,OAAO,CACV,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACtC,mBAAmB,EACnB,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAC/B,CAAC;IACF,OAAO,iCAAiC,IAAI,IAAI,KAAK,qBAAqB,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AACtG,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAChD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACpC,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAC1E,CAAC;AACN,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,KAAkB;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACrC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACf,CAAC"}

package/dist/storage/storage-special-endpoints.d.ts

@@ -0,0 +1,10 @@
+/** @internal Accept Admin topic IDs and resource names while building one canonical Pub/Sub resource. */
+export declare function storageNotificationTopic(project: string, topic: string): string;
+import type { StorageSpecialOperation, StorageSpecialResponses } from './storage-special-types.js';
+/** @internal Validate resource identifiers and specialized request bodies before OAuth. */
+export declare function validateSpecialOperation(bucket: string | undefined, project: string, operation: StorageSpecialOperation): void;
+/** @internal Specialized resources share the same auth and error transport as object requests. */
+export declare function specialStorageRequest<K extends StorageSpecialOperation['kind']>(bucket: string | undefined, project: string, token: string, request: StorageSpecialOperation & {
+    kind: K;
+}, fetch: typeof globalThis.fetch): Promise<StorageSpecialResponses[K]>;
+//# sourceMappingURL=storage-special-endpoints.d.ts.map

package/dist/storage/storage-special-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-special-endpoints.d.ts","sourceRoot":"","sources":["../../src/storage/storage-special-endpoints.ts"],"names":[],"mappings":"AAEA,yGAAyG;AACzG,wBAAgB,wBAAwB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACd,MAAM,CAkBR;AAOD,OAAO,KAAK,EACR,uBAAuB,EACvB,uBAAuB,EAC1B,MAAM,4BAA4B,CAAC;AAEpC,2FAA2F;AAC3F,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,uBAAuB,QA+LrC;AAED,kGAAkG;AAClG,wBAAsB,qBAAqB,CACvC,CAAC,SAAS,uBAAuB,CAAC,MAAM,CAAC,EAEzC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,uBAAuB,GAAG;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,EAC9C,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CA8FrC"}