firebase-admin-edge 1.1.1 → 3.0.0

package/dist/storage/storage-checksum.js

@@ -0,0 +1,312 @@
+import { FirebaseEdgeError } from '../auth/errors.js';
+import { StorageMd5 } from './storage-md5.js';
+const table = Uint32Array.from({ length: 256 }, (_, index) => {
+    let crc = index;
+    for (let bit = 0; bit < 8; bit++) {
+        crc = (crc >>> 1) ^ (crc & 1 ? 0x82f63b78 : 0);
+    }
+    return crc >>> 0;
+});
+/** @internal Adapt SDK validators and combine a resumed prefix with the suffix CRC. */
+export function createStorageCrc32c(generator, initial) {
+    const prefix = new StorageCrc32c(initial);
+    if (generator === undefined) {
+        return prefix;
+    }
+    if (typeof generator !== 'function') {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'crc32cGenerator must be a function.'
+        });
+    }
+    const validator = generator();
+    if (!validator ||
+        typeof validator.update !== 'function' ||
+        typeof validator.toString !== 'function' ||
+        typeof validator.validate !== 'function') {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'crc32cGenerator must return a CRC32C validator.'
+        });
+    }
+    let length = 0;
+    return {
+        update(bytes) {
+            validator.update(bytes);
+            length += bytes.length;
+        },
+        digest() {
+            const digest = validator.toString();
+            validateStorageCrc32c(digest);
+            if (!validator.validate(digest)) {
+                throw new FirebaseEdgeError({
+                    code: 'storage/checksum-mismatch',
+                    message: 'The custom CRC32C validator rejected its digest.'
+                });
+            }
+            if (initial === undefined) {
+                return digest;
+            }
+            return combineStorageCrc32c(prefix.digest(), digest, length);
+        }
+    };
+}
+/** Apply the Castagnoli zero-byte operator to concatenate two finalized CRCs. */
+function combineStorageCrc32c(prefix, suffix, length) {
+    const decode = (value) => {
+        const bytes = Uint8Array.from(atob(value), (character) => character.charCodeAt(0));
+        return new DataView(bytes.buffer).getUint32(0);
+    };
+    const multiply = (matrix, vector) => {
+        let result = 0;
+        let index = 0;
+        while (vector !== 0) {
+            if (vector & 1) {
+                result ^= matrix[index];
+            }
+            vector >>>= 1;
+            index++;
+        }
+        return result >>> 0;
+    };
+    let matrix = Uint32Array.from({ length: 32 }, (_, index) => {
+        const value = (2 ** index) >>> 0;
+        return ((value >>> 8) ^ table[value & 255]) >>> 0;
+    });
+    let crc = decode(prefix);
+    while (length > 0) {
+        if (length % 2 === 1) {
+            crc = multiply(matrix, crc);
+        }
+        length = Math.floor(length / 2);
+        matrix = matrix.map((value) => multiply(matrix, value));
+    }
+    const result = (crc ^ decode(suffix)) >>> 0;
+    return btoa(String.fromCharCode(result >>> 24, (result >>> 16) & 255, (result >>> 8) & 255, result & 255));
+}
+/** @internal Incremental CRC32C shared by streamed downloads and uploads. */
+export class StorageCrc32c {
+    crc = 0xffffffff;
+    constructor(initial) {
+        if (initial === undefined) {
+            return;
+        }
+        if (typeof initial === 'string') {
+            validateStorageCrc32c(initial);
+            const bytes = Uint8Array.from(atob(initial), (value) => value.charCodeAt(0));
+            this.crc = new DataView(bytes.buffer).getUint32(0) ^ 0xffffffff;
+            return;
+        }
+        if (!Number.isInteger(initial) ||
+            initial < -0x80000000 ||
+            initial > 0xffffffff) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'resumeCRC32C must be a 32-bit CRC32C or its base64 digest.'
+            });
+        }
+        this.crc = initial ^ 0xffffffff;
+    }
+    update(bytes) {
+        for (const byte of bytes) {
+            this.crc = (this.crc >>> 8) ^ table[(this.crc ^ byte) & 255];
+        }
+    }
+    digest() {
+        const result = (this.crc ^ 0xffffffff) >>> 0;
+        return btoa(String.fromCharCode(result >>> 24, (result >>> 16) & 255, (result >>> 8) & 255, result & 255));
+    }
+    toString() {
+        return this.digest();
+    }
+    validate(value) {
+        return this.digest() === value;
+    }
+}
+/** Compute a Cloud Storage CRC32C (base64, big-endian) using web-native input types. */
+export async function calculateStorageCrc32c(input, generator) {
+    return calculateStorageChecksum(input, 'crc32c', generator);
+}
+/** Compute the base64 MD5 used for Cloud Storage object integrity validation. */
+export async function calculateStorageMd5(input) {
+    return calculateStorageChecksum(input, 'md5');
+}
+async function calculateStorageChecksum(input, algorithm, generator) {
+    const blob = storageUploadBlob(input);
+    const checksum = algorithm === 'md5' ? new StorageMd5() : createStorageCrc32c(generator);
+    const reader = blob.stream().getReader();
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done) {
+                break;
+            }
+            checksum.update(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return checksum.digest();
+}
+/** @internal Centralize byte sizing and UTF-8 conversion for progress and checksums. */
+export function storageUploadBlob(input) {
+    if (typeof input !== 'string' &&
+        !(input instanceof Blob) &&
+        !(input instanceof ArrayBuffer) &&
+        !(input instanceof Uint8Array)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Invalid upload data.'
+        });
+    }
+    return input instanceof Blob ? input : new Blob([input]);
+}
+/** @internal Detect checksum mismatches even when the service accepted the upload. */
+export function verifyStorageUpload(checksum, metadata, md5Hash) {
+    if (md5Hash !== undefined && metadata.md5Hash !== md5Hash) {
+        throw new FirebaseEdgeError({
+            code: metadata.md5Hash
+                ? 'storage/checksum-mismatch'
+                : 'storage/checksum-unavailable',
+            message: 'The accepted upload could not be verified against the expected MD5.'
+        }, {
+            context: {
+                name: metadata.name,
+                bucket: metadata.bucket,
+                generation: metadata.generation,
+                expectedMd5: md5Hash,
+                actualMd5: metadata.md5Hash
+            }
+        });
+    }
+    if (checksum === undefined || metadata.crc32c === checksum) {
+        return;
+    }
+    throw new FirebaseEdgeError({
+        code: metadata.crc32c
+            ? 'storage/checksum-mismatch'
+            : 'storage/checksum-unavailable',
+        message: 'The accepted upload could not be verified against the expected CRC32C.'
+    }, {
+        context: {
+            name: metadata.name,
+            bucket: metadata.bucket,
+            generation: metadata.generation,
+            expectedCrc32c: checksum,
+            actualCrc32c: metadata.crc32c
+        }
+    });
+}
+/** @internal Require a canonical base64-encoded four-byte CRC32C. */
+export function validateStorageCrc32c(value) {
+    if (typeof value !== 'string' ||
+        !/^[A-Za-z0-9+/]{5}[AQgw]==$/.test(value)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'crc32c must be a base64-encoded four-byte checksum.'
+        });
+    }
+}
+/** @internal Require canonical base64 representing a 16-byte MD5 digest. */
+export function validateStorageMd5(value) {
+    if (typeof value !== 'string' ||
+        !/^[A-Za-z0-9+/]{21}[AQgw]==$/.test(value)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'md5Hash must be a base64-encoded 16-byte checksum.'
+        });
+    }
+}
+/** @internal Validate downloaded bytes against the whole-object response checksum. */
+export async function verifyStorageDownload(bytes, response, algorithm = 'crc32c', generator) {
+    const hash = storageResponseChecksum(response, algorithm);
+    const actual = await calculateStorageChecksum(bytes, algorithm, generator);
+    if (actual !== hash) {
+        throw new FirebaseEdgeError({
+            code: 'storage/checksum-mismatch',
+            message: `Downloaded bytes do not match the Storage ${algorithm} checksum.`
+        });
+    }
+}
+/** @internal Reject responses for which a whole-object checksum cannot be verified. */
+function storageResponseChecksum(response, algorithm = 'crc32c') {
+    const hash = response.headers
+        .get('x-goog-hash')
+        ?.split(',')
+        .map((value) => value.trim())
+        .find((value) => value.startsWith(`${algorithm}=`))
+        ?.slice(algorithm.length + 1);
+    if (response.status === 206 ||
+        response.headers.has('content-encoding') ||
+        !hash) {
+        throw new FirebaseEdgeError({
+            code: 'storage/checksum-unavailable',
+            message: `Checksum verification requires a full, unencoded response with a ${algorithm} header.`
+        });
+    }
+    return hash;
+}
+/** @internal Preserve backpressure and report integrity errors when the stream reaches EOF. */
+export function verifyStorageStream(response, algorithm = 'crc32c', generator) {
+    let expected;
+    let checksum;
+    try {
+        expected = storageResponseChecksum(response, algorithm);
+        checksum =
+            algorithm === 'md5'
+                ? new StorageMd5()
+                : createStorageCrc32c(generator);
+    }
+    catch (cause) {
+        void response.body?.cancel().catch(() => { });
+        throw cause;
+    }
+    if (!response.body) {
+        throw new FirebaseEdgeError({
+            code: 'storage/checksum-unavailable',
+            message: 'The response has no readable body.'
+        });
+    }
+    const reader = response.body.getReader();
+    const body = new ReadableStream({
+        async pull(controller) {
+            try {
+                const { done, value } = await reader.read();
+                if (!done) {
+                    checksum.update(value);
+                    controller.enqueue(value);
+                    return;
+                }
+                reader.releaseLock();
+                if (checksum.digest() !== expected) {
+                    controller.error(new FirebaseEdgeError({
+                        code: 'storage/checksum-mismatch',
+                        message: `Downloaded bytes do not match the Storage ${algorithm} checksum.`
+                    }));
+                    return;
+                }
+                controller.close();
+            }
+            catch (cause) {
+                await reader.cancel(cause).catch(() => { });
+                reader.releaseLock();
+                controller.error(cause);
+            }
+        },
+        async cancel(reason) {
+            try {
+                await reader.cancel(reason);
+            }
+            finally {
+                reader.releaseLock();
+            }
+        }
+    }, { highWaterMark: 0 });
+    return new Response(body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers: response.headers
+    });
+}
+//# sourceMappingURL=storage-checksum.js.map

package/dist/storage/storage-checksum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-checksum.js","sourceRoot":"","sources":["../../src/storage/storage-checksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAM9C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;IACzD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;QAC/B,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC;AAUH,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAC/B,SAAoC,EACpC,OAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,qCAAqC;SACjD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC;IAC9B,IACI,CAAC,SAAS;QACV,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU;QACtC,OAAO,SAAS,CAAC,QAAQ,KAAK,UAAU;QACxC,OAAO,SAAS,CAAC,QAAQ,KAAK,UAAU,EAC1C,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,iDAAiD;SAC7D,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;QACH,MAAM,CAAC,KAAK;YACR,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,MAAM;YACF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;YACpC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,iBAAiB,CAAC;oBACxB,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,kDAAkD;iBAC9D,CAAC,CAAC;YACP,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,MAAM,CAAC;YAClB,CAAC;YACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;KACJ,CAAC;AACN,CAAC;AAED,iFAAiF;AACjF,SAAS,oBAAoB,CACzB,MAAc,EACd,MAAc,EACd,MAAc;IAEd,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CACrD,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAC1B,CAAC;QACF,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAmB,EAAE,MAAc,EAAE,EAAE;QACrD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC;YAClB,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,IAAI,MAAM,CAAC,KAAK,CAAE,CAAC;YAC7B,CAAC;YACD,MAAM,MAAM,CAAC,CAAC;YACd,KAAK,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAE,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,GAAG,CAAC,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,IAAI,CACP,MAAM,CAAC,YAAY,CACf,MAAM,KAAK,EAAE,EACb,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,GAAG,EACrB,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,GAAG,EACpB,MAAM,GAAG,GAAG,CACf,CACJ,CAAC;AACN,CAAC;AAED,6EAA6E;AAC7E,MAAM,OAAO,aAAa;IACd,GAAG,GAAG,UAAU,CAAC;IAEzB,YAAY,OAAyB;QACjC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACX,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CACnD,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CACtB,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;YAChE,OAAO;QACX,CAAC;QACD,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;YAC1B,OAAO,GAAG,CAAC,UAAU;YACrB,OAAO,GAAG,UAAU,EACtB,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EACH,4DAA4D;aACnE,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,OAAO,GAAG,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,KAAiB;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAE,CAAC;QAClE,CAAC;IACL,CAAC;IAED,MAAM;QACF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,IAAI,CACP,MAAM,CAAC,YAAY,CACf,MAAM,KAAK,EAAE,EACb,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,GAAG,EACrB,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,GAAG,EACpB,MAAM,GAAG,GAAG,CACf,CACJ,CAAC;IACN,CAAC;IAED,QAAQ;QACJ,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IAED,QAAQ,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,CAAC;IACnC,CAAC;CACJ;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,KAAwB,EACxB,SAAoC;IAEpC,OAAO,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,KAAwB;IAExB,OAAO,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,wBAAwB,CACnC,KAAwB,EACxB,SAA2B,EAC3B,SAAoC;IAEpC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GACV,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC;QACD,SAAS,CAAC;YACN,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACP,MAAM;YACV,CAAC;YACD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;YAAS,CAAC;QACP,MAAM,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACtD,IACI,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC;QACxB,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;QAC/B,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAChC,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,sBAAsB;SAClC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAC/B,QAA4B,EAC5B,QAA6B,EAC7B,OAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QACxD,MAAM,IAAI,iBAAiB,CACvB;YACI,IAAI,EAAE,QAAQ,CAAC,OAAO;gBAClB,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,8BAA8B;YACpC,OAAO,EACH,qEAAqE;SAC5E,EACD;YACI,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,WAAW,EAAE,OAAO;gBACpB,SAAS,EAAE,QAAQ,CAAC,OAAO;aAC9B;SACJ,CACJ,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO;IACX,CAAC;IACD,MAAM,IAAI,iBAAiB,CACvB;QACI,IAAI,EAAE,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,8BAA8B;QACpC,OAAO,EACH,wEAAwE;KAC/E,EACD;QACI,OAAO,EAAE;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,QAAQ,CAAC,MAAM;SAChC;KACJ,CACJ,CAAC;AACN,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAChD,IACI,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAC3C,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,qDAAqD;SACjE,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC7C,IACI,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAC5C,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,oDAAoD;SAChE,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,KAA8B,EAC9B,QAAkB,EAClB,YAA8B,QAAQ,EACtC,SAAoC;IAEpC,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,6CAA6C,SAAS,YAAY;SAC9E,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,SAAS,uBAAuB,CAC5B,QAAkB,EAClB,YAA8B,QAAQ;IAEtC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO;SACxB,GAAG,CAAC,aAAa,CAAC;QACnB,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;QACnD,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClC,IACI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,CAAC,IAAI,EACP,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,oEAAoE,SAAS,UAAU;SACnG,CAAC,CAAC;IACP,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAC/B,QAAkB,EAClB,YAA8B,QAAQ,EACtC,SAAoC;IAEpC,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAkD,CAAC;IACvD,IAAI,CAAC;QACD,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,QAAQ;YACJ,SAAS,KAAK,KAAK;gBACf,CAAC,CAAC,IAAI,UAAU,EAAE;gBAClB,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,oCAAoC;SAChD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,cAAc,CAC3B;QACI,KAAK,CAAC,IAAI,CAAC,UAAU;YACjB,IAAI,CAAC;gBACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACR,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC1B,OAAO;gBACX,CAAC;gBACD,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACjC,UAAU,CAAC,KAAK,CACZ,IAAI,iBAAiB,CAAC;wBAClB,IAAI,EAAE,2BAA2B;wBACjC,OAAO,EAAE,6CAA6C,SAAS,YAAY;qBAC9E,CAAC,CACL,CAAC;oBACF,OAAO;gBACX,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC3C,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACf,IAAI,CAAC;gBACD,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;oBAAS,CAAC;gBACP,MAAM,CAAC,WAAW,EAAE,CAAC;YACzB,CAAC;QACL,CAAC;KACJ,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACvB,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC5B,CAAC,CAAC;AACP,CAAC"}

package/dist/storage/storage-endpoints.d.ts

@@ -0,0 +1,14 @@
+import type { StorageFileMetadata, StorageOperation, StorageResponses } from './storage-types.js';
+/** @internal Validate before requesting credentials. */
+export declare function validateStorageOperation(bucket: string | undefined, operation: StorageOperation): asserts bucket is string;
+/** @internal Storage needs raw media bodies and binary responses rather than restFetch's JSON/text conversion. */
+export declare function storageRequest<K extends StorageOperation['kind']>(bucket: string, accessToken: string, request: StorageOperation & {
+    kind: K;
+}, fetch: typeof globalThis.fetch): Promise<StorageResponses[K]>;
+/** @internal Shared media/JSON transport and error mapping. */
+export declare function storageFetch(url: string, init: RequestInit, fetch: typeof globalThis.fetch, acceptedStatuses?: number[], notFoundCode?: string): Promise<Response>;
+/** @internal Validate the JSON envelope before interpreting it. */
+export declare function readStorageObject(response: Response): Promise<Record<string, unknown>>;
+/** @internal Preserve API integer strings and additional metadata fields. */
+export declare function parseStorageMetadata(data: unknown): StorageFileMetadata;
+//# sourceMappingURL=storage-endpoints.d.ts.map

package/dist/storage/storage-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-endpoints.d.ts","sourceRoot":"","sources":["../../src/storage/storage-endpoints.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACR,mBAAmB,EAGnB,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,oBAAoB,CAAC;AAE5B,wDAAwD;AACxD,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,SAAS,EAAE,gBAAgB,GAC5B,OAAO,CAAC,MAAM,IAAI,MAAM,CAsV1B;AAED,kHAAkH;AAClH,wBAAsB,cAAc,CAAC,CAAC,SAAS,gBAAgB,CAAC,MAAM,CAAC,EACnE,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,GAAG;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,EACvC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,GAC/B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAqQ9B;AAuBD,+DAA+D;AAC/D,wBAAsB,YAAY,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,EAC9B,gBAAgB,GAAE,MAAM,EAAO,EAC/B,YAAY,SAAqB,qBAiCpC;AAED,mEAAmE;AACnE,wBAAsB,iBAAiB,CACnC,QAAQ,EAAE,QAAQ,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAalC;AAgND,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,CAmBvE"}