meridianjs 0.2.4 → 0.2.7

package/dist/providers/datadog/adapter.d.ts

@@ -0,0 +1,30 @@
+import type { AdapterInput, AuthConfig, AuthToken, BuiltRequest, IdempotencyConfig, NormalizedResponse, PaginationStrategy, ProviderAdapter, RateLimitInfo, RawResponse } from "../../core/types.js";
+import { MeridianError } from "../../core/types.js";
+/**
+ * Datadog's API authenticates every request with a pair of headers —
+ * `DD-API-KEY` (account-level) and `DD-APPLICATION-KEY` (user-level, required
+ * for most read endpoints) — rather than a bearer token. Rate limits surface
+ * via `X-RateLimit-Limit` / `-Remaining` / `-Reset` / `-Period` headers, and
+ * v2 search APIs paginate with a `meta.page.after` cursor.
+ */
+export declare class DatadogAdapter implements ProviderAdapter {
+    private baseUrl;
+    constructor(baseUrl?: string);
+    buildRequest(input: AdapterInput): BuiltRequest;
+    parseResponse(raw: RawResponse): NormalizedResponse;
+    parseError(raw: unknown): MeridianError;
+    private parseHttpError;
+    authStrategy(config: AuthConfig): Promise<AuthToken>;
+    rateLimitPolicy(headers: Headers): RateLimitInfo;
+    paginationStrategy(): PaginationStrategy;
+    getIdempotencyConfig(): IdempotencyConfig;
+    /**
+     * Verifies a Datadog webhook signature: an HMAC-SHA256 digest of the raw
+     * request body, hex-encoded, sent in the `X-Datadog-Signature` header and
+     * keyed by the webhook's shared secret.
+     */
+    verifyWebhook(payload: string | Buffer, signature: string, secret: string): boolean;
+    private createMeridianError;
+    private extractRetryAfter;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/providers/datadog/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/providers/datadog/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,WAAW,EACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAyB,aAAa,EAAe,MAAM,qBAAqB,CAAC;AAOxF;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,SAAmC;IAItD,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY;IAkC/C,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,kBAAkB;IAOnD,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa;IAkCvC,OAAO,CAAC,cAAc;IAkGhB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAmB1D,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa;IAchD,kBAAkB,IAAI,kBAAkB;IAIxC,oBAAoB,IAAI,iBAAiB;IAOzC;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAYnF,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,iBAAiB;CAY1B"}

package/dist/providers/datadog/adapter.js

@@ -0,0 +1,163 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { parseRetryAfter } from "../../core/header-parser.js";
+import { ResponseNormalizer } from "../../core/normalizer.js";
+import { MeridianError, SDK_VERSION } from "../../core/types.js";
+import { DatadogPaginationStrategy } from "./pagination.js";
+/**
+ * Datadog's API authenticates every request with a pair of headers —
+ * `DD-API-KEY` (account-level) and `DD-APPLICATION-KEY` (user-level, required
+ * for most read endpoints) — rather than a bearer token. Rate limits surface
+ * via `X-RateLimit-Limit` / `-Remaining` / `-Reset` / `-Period` headers, and
+ * v2 search APIs paginate with a `meta.page.after` cursor.
+ */
+export class DatadogAdapter {
+    baseUrl;
+    constructor(baseUrl = "https://api.datadoghq.com/api/") {
+        this.baseUrl = baseUrl;
+    }
+    buildRequest(input) {
+        const { endpoint, options, authToken, baseUrl } = input;
+        const effectiveBaseUrl = baseUrl ?? this.baseUrl;
+        const url = new URL(endpoint.replace(/^\//, ""), effectiveBaseUrl);
+        if (options.query) {
+            for (const [key, value] of Object.entries(options.query)) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        const [apiKey, appKey] = authToken.token.split("|DD|");
+        const headers = {
+            "User-Agent": `Meridian-SDK/${SDK_VERSION}`,
+            ...options.headers,
+        };
+        if (apiKey)
+            headers["DD-API-KEY"] = apiKey;
+        if (appKey)
+            headers["DD-APPLICATION-KEY"] = appKey;
+        let body;
+        const method = options.method ?? "GET";
+        if (options.body && method !== "GET" && method !== "HEAD") {
+            body = JSON.stringify(options.body);
+            headers["Content-Type"] = "application/json";
+        }
+        const built = { url: url.toString(), method, headers };
+        if (body !== undefined) {
+            built.body = body;
+        }
+        return built;
+    }
+    parseResponse(raw) {
+        const rateLimitInfo = this.rateLimitPolicy(raw.headers);
+        const paginationStrategy = this.paginationStrategy();
+        const paginationInfo = ResponseNormalizer.extractPaginationInfo(raw, paginationStrategy);
+        return ResponseNormalizer.normalize(raw, "datadog", rateLimitInfo, paginationInfo, [], "1.0.0");
+    }
+    parseError(raw) {
+        if (raw instanceof Error) {
+            const msg = raw.message.toLowerCase();
+            if (msg.includes("fetch") ||
+                msg.includes("network") ||
+                msg.includes("econnreset") ||
+                msg.includes("etimedout") ||
+                msg.includes("enotfound") ||
+                msg.includes("timeout")) {
+                return this.createMeridianError("network", true, "Network request failed. Check your connection and try again.", { originalError: raw.message });
+            }
+        }
+        if (typeof raw === "object" &&
+            raw !== null &&
+            "status" in raw &&
+            typeof raw.status === "number") {
+            return this.parseHttpError(raw);
+        }
+        return this.createMeridianError("provider", false, "An unexpected error occurred", { raw });
+    }
+    parseHttpError(error) {
+        const { status, body, headers } = error;
+        const errorBody = body;
+        const errorMessage = errorBody?.errors?.join("; ");
+        if (status === 401) {
+            return this.createMeridianError("auth", false, errorMessage ?? "Authentication failed. Check your Datadog API key.", { datadogErrors: errorBody?.errors }, undefined, 401);
+        }
+        if (status === 403) {
+            return this.createMeridianError("auth", false, errorMessage ??
+                "Permission denied. Check that your Application key has the required scopes.", { datadogErrors: errorBody?.errors }, undefined, 403);
+        }
+        if (status === 404) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Resource not found.", { datadogErrors: errorBody?.errors }, undefined, 404);
+        }
+        if (status === 429) {
+            const retryAfter = this.extractRetryAfter(headers);
+            return this.createMeridianError("rate_limit", true, errorMessage ?? "Rate limit exceeded. Please wait before retrying.", { retryAfter: retryAfter?.toISOString() }, retryAfter, 429);
+        }
+        if (status === 400 || status === 422) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", { datadogErrors: errorBody?.errors }, undefined, status);
+        }
+        if (status >= 500) {
+            return this.createMeridianError("provider", true, errorMessage ?? `Datadog API returned error ${status}. This may be temporary.`, { status }, undefined, status);
+        }
+        if (status >= 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? `Request failed with status ${status}.`, { status }, undefined, status);
+        }
+        return this.createMeridianError("provider", false, `Unexpected response status ${status}.`, { status }, undefined, status);
+    }
+    async authStrategy(config) {
+        const apiKey = config.apiKey ?? config.username;
+        const appKey = config.clientSecret ?? config.apiSecret ?? config.password;
+        if (!apiKey) {
+            throw this.createMeridianError("auth", false, "Datadog authentication requires an API key. Set auth.apiKey (account API key), " +
+                "and optionally auth.apiSecret/auth.clientSecret (Application key) for read endpoints.", {}, undefined, 401);
+        }
+        return { token: appKey ? `${apiKey}|DD|${appKey}` : apiKey };
+    }
+    rateLimitPolicy(headers) {
+        const limit = headers.get("X-RateLimit-Limit");
+        const remaining = headers.get("X-RateLimit-Remaining");
+        const reset = headers.get("X-RateLimit-Reset");
+        return {
+            limit: limit ? Number.parseInt(limit, 10) : 100,
+            remaining: remaining ? Number.parseInt(remaining, 10) : 100,
+            reset: reset
+                ? new Date(Date.now() + Number.parseInt(reset, 10) * 1000)
+                : new Date(Date.now() + 60_000),
+        };
+    }
+    paginationStrategy() {
+        return new DatadogPaginationStrategy();
+    }
+    getIdempotencyConfig() {
+        return {
+            defaultSafeOperations: new Set(["GET", "HEAD", "OPTIONS"]),
+            operationOverrides: new Map(),
+        };
+    }
+    /**
+     * Verifies a Datadog webhook signature: an HMAC-SHA256 digest of the raw
+     * request body, hex-encoded, sent in the `X-Datadog-Signature` header and
+     * keyed by the webhook's shared secret.
+     */
+    verifyWebhook(payload, signature, secret) {
+        const expected = createHmac("sha256", secret).update(payload).digest("hex");
+        try {
+            const a = Buffer.from(expected);
+            const b = Buffer.from(signature);
+            if (a.length !== b.length)
+                return false;
+            return timingSafeEqual(a, b);
+        }
+        catch {
+            return false;
+        }
+    }
+    createMeridianError(category, retryable, message, metadata, retryAfter, status) {
+        return new MeridianError(message, category, "datadog", retryable, "", metadata, retryAfter, status);
+    }
+    extractRetryAfter(headers) {
+        if (!headers)
+            return undefined;
+        const value = headers instanceof Headers
+            ? headers.get("retry-after")
+            : (Object.entries(headers).find(([k]) => k.toLowerCase() === "retry-after")?.[1] ?? null);
+        return parseRetryAfter(value) ?? undefined;
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/providers/datadog/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/providers/datadog/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAa9D,OAAO,EAAyB,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAM5D;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACjB,OAAO,CAAS;IAExB,YAAY,OAAO,GAAG,gCAAgC;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,KAAmB;QAC9B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxD,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEnE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEvD,MAAM,OAAO,GAA2B;YACtC,YAAY,EAAE,gBAAgB,WAAW,EAAE;YAC3C,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QACF,IAAI,MAAM;YAAE,OAAO,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC;QAC3C,IAAI,MAAM;YAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,MAAM,CAAC;QAEnD,IAAI,IAAwB,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,MAAM,KAAK,GAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,GAAgB;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzF,OAAO,kBAAkB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAClG,CAAC;IAED,UAAU,CAAC,GAAY;QACrB,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,CAAC;gBACD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,SAAS,EACT,IAAI,EACJ,8DAA8D,EAC9D,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,QAAQ,IAAI,GAAG;YACf,OAAQ,GAA+B,CAAC,MAAM,KAAK,QAAQ,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACxB,GAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IAEO,cAAc,CAAC,KAItB;QACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxC,MAAM,SAAS,GAAG,IAAoC,CAAC;QACvD,MAAM,YAAY,GAAG,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,MAAM,EACN,KAAK,EACL,YAAY,IAAI,oDAAoD,EACpE,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,MAAM,EACN,KAAK,EACL,YAAY;gBACV,6EAA6E,EAC/E,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,qBAAqB,EACrC,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,IAAI,EACJ,YAAY,IAAI,mDAAmD,EACnE,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EACzC,UAAU,EACV,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EACpC,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,IAAI,EACJ,YAAY,IAAI,8BAA8B,MAAM,0BAA0B,EAC9E,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,8BAA8B,MAAM,GAAG,EACvD,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,KAAK,EACL,8BAA8B,MAAM,GAAG,EACvC,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAkB;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC;QAE1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,mBAAmB,CAC5B,MAAM,EACN,KAAK,EACL,iFAAiF;gBAC/E,uFAAuF,EACzF,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/D,CAAC;IAED,eAAe,CAAC,OAAgB;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAE/C,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG;YAC/C,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG;YAC3D,KAAK,EAAE,KAAK;gBACV,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;gBAC1D,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,yBAAyB,EAAE,CAAC;IACzC,CAAC;IAED,oBAAoB;QAClB,OAAO;YACL,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,kBAAkB,EAAE,IAAI,GAAG,EAA4B;SACxD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,OAAwB,EAAE,SAAiB,EAAE,MAAc;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,QAAmC,EACnC,SAAkB,EAClB,OAAe,EACf,QAAkC,EAClC,UAAiB,EACjB,MAAe;QAEf,OAAO,IAAI,aAAa,CACtB,OAAO,EACP,QAAQ,EACR,SAAS,EACT,SAAS,EACT,EAAE,EACF,QAAQ,EACR,UAAU,EACV,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,OAAqD;QAErD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,MAAM,KAAK,GACT,OAAO,YAAY,OAAO;YACxB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YAC5B,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAE9F,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC7C,CAAC;CACF"}

package/dist/providers/datadog/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/datadog/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/datadog/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/providers/datadog/index.js

@@ -0,0 +1,3 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+//# sourceMappingURL=index.js.map

package/dist/providers/datadog/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/datadog/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/providers/datadog/pagination.d.ts

@@ -0,0 +1,16 @@
+import type { PaginationStrategy, RawResponse, RequestOptions } from "../../core/types.js";
+/**
+ * Datadog's v2 search APIs (Logs, Events, Spans, ...) return a cursor for the
+ * next page at `meta.page.after`, which callers feed back as `page[cursor]`.
+ */
+export declare class DatadogPaginationStrategy implements PaginationStrategy {
+    extractCursor(response: RawResponse): string | null;
+    extractTotal(_response: RawResponse): number | null;
+    hasNext(response: RawResponse): boolean;
+    buildNextRequest(endpoint: string, options: RequestOptions, cursor: string): {
+        endpoint: string;
+        options: RequestOptions;
+    };
+    private readAfterCursor;
+}
+//# sourceMappingURL=pagination.d.ts.map

package/dist/providers/datadog/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../src/providers/datadog/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3F;;;GAGG;AACH,qBAAa,yBAA0B,YAAW,kBAAkB;IAClE,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAKnD,YAAY,CAAC,SAAS,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAKnD,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO;IAIvC,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GACb;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE;IAahD,OAAO,CAAC,eAAe;CAUxB"}

package/dist/providers/datadog/pagination.js

@@ -0,0 +1,41 @@
+/**
+ * Datadog's v2 search APIs (Logs, Events, Spans, ...) return a cursor for the
+ * next page at `meta.page.after`, which callers feed back as `page[cursor]`.
+ */
+export class DatadogPaginationStrategy {
+    extractCursor(response) {
+        const cursor = this.readAfterCursor(response);
+        return cursor ?? null;
+    }
+    extractTotal(_response) {
+        // Datadog search APIs do not return a total result count.
+        return null;
+    }
+    hasNext(response) {
+        return this.readAfterCursor(response) !== null;
+    }
+    buildNextRequest(endpoint, options, cursor) {
+        return {
+            endpoint,
+            options: {
+                ...options,
+                query: {
+                    ...options.query,
+                    "page[cursor]": cursor,
+                },
+            },
+        };
+    }
+    readAfterCursor(response) {
+        if (typeof response.body !== "object" || response.body === null)
+            return null;
+        const body = response.body;
+        const meta = body.meta;
+        const page = meta?.page;
+        if (page && typeof page.after === "string" && page.after.length > 0) {
+            return page.after;
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=pagination.js.map

package/dist/providers/datadog/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../src/providers/datadog/pagination.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IACpC,aAAa,CAAC,QAAqB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED,YAAY,CAAC,SAAsB;QACjC,0DAA0D;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,QAAqB;QAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IACjD,CAAC;IAED,gBAAgB,CACd,QAAgB,EAChB,OAAuB,EACvB,MAAc;QAEd,OAAO;YACL,QAAQ;YACR,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,KAAK,EAAE;oBACL,GAAG,OAAO,CAAC,KAAK;oBAChB,cAAc,EAAE,MAAM;iBACvB;aACF;SACF,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,QAAqB;QAC3C,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA+B,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAA2C,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,EAAE,IAA2C,CAAC;QAC/D,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/providers/s3/adapter.d.ts

@@ -0,0 +1,37 @@
+import type { AdapterInput, AuthConfig, AuthToken, BuiltRequest, IdempotencyConfig, NormalizedResponse, PaginationStrategy, ProviderAdapter, RateLimitInfo, RawResponse } from "../../core/types.js";
+import { MeridianError } from "../../core/types.js";
+/**
+ * S3-compatible object storage (AWS S3, Cloudflare R2, and other S3-API stores)
+ * authenticates every request with AWS Signature Version 4 — there's no bearer
+ * token or static API key header. Each call is signed in `buildRequest` using
+ * the access key / secret key (and, for R2, region `"auto"`) supplied via
+ * `auth.custom`. Responses are XML, not JSON; pagination and error parsing
+ * extract the handful of fields they need from that XML directly.
+ *
+ * Configure with `auth.username`/`auth.password` (access key / secret key) and
+ * `auth.custom = { region, endpoint?, sessionToken? }`. For R2, set
+ * `auth.custom.region = "auto"` and `auth.custom.endpoint` to your account's
+ * `https://<account_id>.r2.cloudflarestorage.com` URL (or pass it as `baseUrl`
+ * in the provider config).
+ */
+export declare class S3Adapter implements ProviderAdapter {
+    private baseUrl;
+    constructor(baseUrl?: string);
+    buildRequest(input: AdapterInput): BuiltRequest;
+    parseResponse(raw: RawResponse): NormalizedResponse;
+    parseError(raw: unknown): MeridianError;
+    private parseHttpError;
+    authStrategy(config: AuthConfig): Promise<AuthToken>;
+    rateLimitPolicy(_headers: Headers): RateLimitInfo;
+    paginationStrategy(): PaginationStrategy;
+    getIdempotencyConfig(): IdempotencyConfig;
+    /**
+     * Verifies an S3 Event Notification delivered via SNS/EventBridge webhook —
+     * an HMAC-SHA256 digest of the raw request body, hex-encoded, keyed by a
+     * shared secret configured on the destination (S3 itself does not sign
+     * notifications; this supports the common "shared secret" relay pattern).
+     */
+    verifyWebhook(payload: string | Buffer, signature: string, secret: string): boolean;
+    private createMeridianError;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/providers/s3/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/providers/s3/adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,WAAW,EACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAoB,aAAa,EAAe,MAAM,qBAAqB,CAAC;AA+CnF;;;;;;;;;;;;;GAaG;AACH,qBAAa,SAAU,YAAW,eAAe;IAC/C,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,SAA8B;IAIjD,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY;IAqC/C,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,kBAAkB;IAOnD,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa;IAkCvC,OAAO,CAAC,cAAc;IAkGhB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IA8B1D,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa;IASjD,kBAAkB,IAAI,kBAAkB;IAIxC,oBAAoB,IAAI,iBAAiB;IAOzC;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAYnF,OAAO,CAAC,mBAAmB;CAU5B"}

package/dist/providers/s3/adapter.js

@@ -0,0 +1,206 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { ResponseNormalizer } from "../../core/normalizer.js";
+import { IdempotencyLevel, MeridianError, SDK_VERSION } from "../../core/types.js";
+import { S3PaginationStrategy } from "./pagination.js";
+import { signSigV4 } from "./sigv4.js";
+function extractXmlField(xml, tag) {
+    const match = xml.match(new RegExp(`<${tag}>([^<]*)</${tag}>`));
+    return match?.[1] ?? null;
+}
+/**
+ * The auth token carries SigV4 credentials JSON-encoded (see `authStrategy`).
+ * Falls back to treating an opaque token string as the access key ID — this
+ * keeps `buildRequest` resilient to non-JSON tokens (e.g. generic contract
+ * tests that pass a placeholder string) without producing a usable signature.
+ */
+function parseSigV4Credentials(token) {
+    try {
+        return JSON.parse(token);
+    }
+    catch {
+        return { accessKeyId: token, secretAccessKey: "", region: "us-east-1", service: "s3" };
+    }
+}
+/** Parses S3/R2's XML error body into a plain object, when present. */
+function parseS3ErrorXml(body) {
+    if (typeof body !== "string" || !body.includes("<Error>")) {
+        return typeof body === "object" && body !== null ? body : undefined;
+    }
+    const result = {};
+    const code = extractXmlField(body, "Code");
+    const message = extractXmlField(body, "Message");
+    const requestId = extractXmlField(body, "RequestId");
+    const resource = extractXmlField(body, "Resource");
+    if (code !== null)
+        result.Code = code;
+    if (message !== null)
+        result.Message = message;
+    if (requestId !== null)
+        result.RequestId = requestId;
+    if (resource !== null)
+        result.Resource = resource;
+    return result;
+}
+/**
+ * S3-compatible object storage (AWS S3, Cloudflare R2, and other S3-API stores)
+ * authenticates every request with AWS Signature Version 4 — there's no bearer
+ * token or static API key header. Each call is signed in `buildRequest` using
+ * the access key / secret key (and, for R2, region `"auto"`) supplied via
+ * `auth.custom`. Responses are XML, not JSON; pagination and error parsing
+ * extract the handful of fields they need from that XML directly.
+ *
+ * Configure with `auth.username`/`auth.password` (access key / secret key) and
+ * `auth.custom = { region, endpoint?, sessionToken? }`. For R2, set
+ * `auth.custom.region = "auto"` and `auth.custom.endpoint` to your account's
+ * `https://<account_id>.r2.cloudflarestorage.com` URL (or pass it as `baseUrl`
+ * in the provider config).
+ */
+export class S3Adapter {
+    baseUrl;
+    constructor(baseUrl = "https://s3.amazonaws.com/") {
+        this.baseUrl = baseUrl;
+    }
+    buildRequest(input) {
+        const { endpoint, options, authToken, baseUrl } = input;
+        const effectiveBaseUrl = baseUrl ?? this.baseUrl;
+        const url = new URL(endpoint.replace(/^\//, ""), effectiveBaseUrl);
+        if (options.query) {
+            for (const [key, value] of Object.entries(options.query)) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        const credentials = parseSigV4Credentials(authToken.token);
+        const method = options.method ?? "GET";
+        let body;
+        const baseHeaders = {
+            "User-Agent": `Meridian-SDK/${SDK_VERSION}`,
+            ...options.headers,
+        };
+        if (options.body && method !== "GET" && method !== "HEAD") {
+            body = typeof options.body === "string" ? options.body : JSON.stringify(options.body);
+            baseHeaders["Content-Type"] ??= "application/octet-stream";
+        }
+        const signed = signSigV4(body !== undefined
+            ? { method, url, headers: baseHeaders, body, credentials }
+            : { method, url, headers: baseHeaders, credentials });
+        const built = { url: url.toString(), method, headers: signed.headers };
+        if (body !== undefined) {
+            built.body = body;
+        }
+        return built;
+    }
+    parseResponse(raw) {
+        const rateLimitInfo = this.rateLimitPolicy(raw.headers);
+        const paginationStrategy = this.paginationStrategy();
+        const paginationInfo = ResponseNormalizer.extractPaginationInfo(raw, paginationStrategy);
+        return ResponseNormalizer.normalize(raw, "s3", rateLimitInfo, paginationInfo, [], "1.0.0");
+    }
+    parseError(raw) {
+        if (raw instanceof Error) {
+            const msg = raw.message.toLowerCase();
+            if (msg.includes("fetch") ||
+                msg.includes("network") ||
+                msg.includes("econnreset") ||
+                msg.includes("etimedout") ||
+                msg.includes("enotfound") ||
+                msg.includes("timeout")) {
+                return this.createMeridianError("network", true, "Network request failed. Check your connection and try again.", { originalError: raw.message });
+            }
+        }
+        if (typeof raw === "object" &&
+            raw !== null &&
+            "status" in raw &&
+            typeof raw.status === "number") {
+            return this.parseHttpError(raw);
+        }
+        return this.createMeridianError("provider", false, "An unexpected error occurred", { raw });
+    }
+    parseHttpError(error) {
+        const { status } = error;
+        const errorBody = parseS3ErrorXml(error.body);
+        const errorMessage = errorBody?.Message;
+        const metadata = { code: errorBody?.Code, requestId: errorBody?.RequestId };
+        if (status === 401 || status === 403) {
+            return this.createMeridianError("auth", false, errorMessage ??
+                "Authentication failed. Check your access key ID, secret access key, and signing region.", metadata, undefined, status);
+        }
+        if (status === 404) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Bucket or object not found.", metadata, undefined, 404);
+        }
+        if (status === 409 || status === 412 || status === 422) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", metadata, undefined, status);
+        }
+        if (status === 429 || (status === 503 && errorBody?.Code === "SlowDown")) {
+            return this.createMeridianError("rate_limit", true, errorMessage ?? "Request rate exceeded. Please slow down and retry.", metadata, undefined, status);
+        }
+        if (status === 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", metadata, undefined, 400);
+        }
+        if (status >= 500) {
+            return this.createMeridianError("provider", true, errorMessage ?? `S3 API returned error ${status}. This may be temporary.`, metadata, undefined, status);
+        }
+        if (status >= 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? `Request failed with status ${status}.`, metadata, undefined, status);
+        }
+        return this.createMeridianError("provider", false, `Unexpected response status ${status}.`, metadata, undefined, status);
+    }
+    async authStrategy(config) {
+        const accessKeyId = config.username ?? config.apiKey ?? config.clientId;
+        const secretAccessKey = config.password ?? config.apiSecret ?? config.clientSecret;
+        const region = config.custom?.region ?? "us-east-1";
+        const sessionToken = config.custom?.sessionToken ?? config.refreshToken;
+        if (!accessKeyId || !secretAccessKey) {
+            throw this.createMeridianError("auth", false, "S3 authentication requires an access key ID and secret access key. " +
+                "Set auth.username (access key ID) + auth.password (secret access key), " +
+                'and optionally auth.custom = { region, sessionToken } (use region: "auto" for R2).', {}, undefined, 401);
+        }
+        const credentials = {
+            accessKeyId,
+            secretAccessKey,
+            region,
+            service: "s3",
+            ...(sessionToken ? { sessionToken } : {}),
+        };
+        return { token: JSON.stringify(credentials) };
+    }
+    rateLimitPolicy(_headers) {
+        // S3 does not publish rate-limit headers; it signals throttling via 503 SlowDown.
+        return {
+            limit: 100,
+            remaining: 100,
+            reset: new Date(Date.now() + 60_000),
+        };
+    }
+    paginationStrategy() {
+        return new S3PaginationStrategy();
+    }
+    getIdempotencyConfig() {
+        return {
+            defaultSafeOperations: new Set(["GET", "HEAD", "OPTIONS"]),
+            operationOverrides: new Map([["PUT", IdempotencyLevel.IDEMPOTENT]]),
+        };
+    }
+    /**
+     * Verifies an S3 Event Notification delivered via SNS/EventBridge webhook —
+     * an HMAC-SHA256 digest of the raw request body, hex-encoded, keyed by a
+     * shared secret configured on the destination (S3 itself does not sign
+     * notifications; this supports the common "shared secret" relay pattern).
+     */
+    verifyWebhook(payload, signature, secret) {
+        const expected = createHmac("sha256", secret).update(payload).digest("hex");
+        try {
+            const a = Buffer.from(expected);
+            const b = Buffer.from(signature);
+            if (a.length !== b.length)
+                return false;
+            return timingSafeEqual(a, b);
+        }
+        catch {
+            return false;
+        }
+    }
+    createMeridianError(category, retryable, message, metadata, retryAfter, status) {
+        return new MeridianError(message, category, "s3", retryable, "", metadata, retryAfter, status);
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/providers/s3/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/providers/s3/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAa9D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAyB,SAAS,EAAE,MAAM,YAAY,CAAC;AAS9D,SAAS,eAAe,CAAC,GAAW,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAqB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC/C,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IACrD,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,SAAS;IACZ,OAAO,CAAS;IAExB,YAAY,OAAO,GAAG,2BAA2B;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,KAAmB;QAC9B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxD,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEnE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QAEvC,IAAI,IAAwB,CAAC;QAC7B,MAAM,WAAW,GAA2B;YAC1C,YAAY,EAAE,gBAAgB,WAAW,EAAE;YAC3C,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtF,WAAW,CAAC,cAAc,CAAC,KAAK,0BAA0B,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CACtB,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;YAC1D,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CACvD,CAAC;QAEF,MAAM,KAAK,GAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACrF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,GAAgB;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzF,OAAO,kBAAkB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7F,CAAC;IAED,UAAU,CAAC,GAAY;QACrB,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,CAAC;gBACD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,SAAS,EACT,IAAI,EACJ,8DAA8D,EAC9D,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,QAAQ,IAAI,GAAG;YACf,OAAQ,GAA+B,CAAC,MAAM,KAAK,QAAQ,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACxB,GAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IAEO,cAAc,CAAC,KAItB;QACC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,SAAS,EAAE,OAAO,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAE5E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,mBAAmB,CAC7B,MAAM,EACN,KAAK,EACL,YAAY;gBACV,yFAAyF,EAC3F,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,6BAA6B,EAC7C,QAAQ,EACR,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,IAAI,EACJ,YAAY,IAAI,oDAAoD,EACpE,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,QAAQ,EACR,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,IAAI,EACJ,YAAY,IAAI,yBAAyB,MAAM,0BAA0B,EACzE,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,8BAA8B,MAAM,GAAG,EACvD,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,KAAK,EACL,8BAA8B,MAAM,GAAG,EACvC,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAkB;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC;QACxE,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;QAExE,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,mBAAmB,CAC5B,MAAM,EACN,KAAK,EACL,qEAAqE;gBACnE,yEAAyE;gBACzE,oFAAoF,EACtF,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAqB;YACpC,WAAW;YACX,eAAe;YACf,MAAM;YACN,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,eAAe,CAAC,QAAiB;QAC/B,kFAAkF;QAClF,OAAO;YACL,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,oBAAoB,EAAE,CAAC;IACpC,CAAC;IAED,oBAAoB;QAClB,OAAO;YACL,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,kBAAkB,EAAE,IAAI,GAAG,CAA2B,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;SAC9F,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,OAAwB,EAAE,SAAiB,EAAE,MAAc;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,QAAmC,EACnC,SAAkB,EAClB,OAAe,EACf,QAAkC,EAClC,UAAiB,EACjB,MAAe;QAEf,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjG,CAAC;CACF"}

package/dist/providers/s3/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+export * from "./sigv4.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/s3/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/s3/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/providers/s3/index.js

@@ -0,0 +1,4 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+export * from "./sigv4.js";
+//# sourceMappingURL=index.js.map

package/dist/providers/s3/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/s3/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/providers/s3/pagination.d.ts

@@ -0,0 +1,18 @@
+import type { PaginationStrategy, RawResponse, RequestOptions } from "../../core/types.js";
+/**
+ * S3 / R2's `ListObjectsV2` returns XML with `IsTruncated` and, when there are
+ * more results, a `NextContinuationToken` — fed back as the `continuation-token`
+ * query parameter. The SDK's HTTP layer hands us the raw XML string as the body
+ * for non-JSON responses.
+ */
+export declare class S3PaginationStrategy implements PaginationStrategy {
+    extractCursor(response: RawResponse): string | null;
+    extractTotal(response: RawResponse): number | null;
+    hasNext(response: RawResponse): boolean;
+    buildNextRequest(endpoint: string, options: RequestOptions, cursor: string): {
+        endpoint: string;
+        options: RequestOptions;
+    };
+    private bodyAsXml;
+}
+//# sourceMappingURL=pagination.d.ts.map

package/dist/providers/s3/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../src/providers/s3/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAY3F;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAMnD,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IASlD,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO;IAMvC,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GACb;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE;IAahD,OAAO,CAAC,SAAS;CAMlB"}