meridianjs 0.2.5 → 0.2.7

package/dist/providers/s3/adapter.js

@@ -0,0 +1,206 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { ResponseNormalizer } from "../../core/normalizer.js";
+import { IdempotencyLevel, MeridianError, SDK_VERSION } from "../../core/types.js";
+import { S3PaginationStrategy } from "./pagination.js";
+import { signSigV4 } from "./sigv4.js";
+function extractXmlField(xml, tag) {
+    const match = xml.match(new RegExp(`<${tag}>([^<]*)</${tag}>`));
+    return match?.[1] ?? null;
+}
+/**
+ * The auth token carries SigV4 credentials JSON-encoded (see `authStrategy`).
+ * Falls back to treating an opaque token string as the access key ID — this
+ * keeps `buildRequest` resilient to non-JSON tokens (e.g. generic contract
+ * tests that pass a placeholder string) without producing a usable signature.
+ */
+function parseSigV4Credentials(token) {
+    try {
+        return JSON.parse(token);
+    }
+    catch {
+        return { accessKeyId: token, secretAccessKey: "", region: "us-east-1", service: "s3" };
+    }
+}
+/** Parses S3/R2's XML error body into a plain object, when present. */
+function parseS3ErrorXml(body) {
+    if (typeof body !== "string" || !body.includes("<Error>")) {
+        return typeof body === "object" && body !== null ? body : undefined;
+    }
+    const result = {};
+    const code = extractXmlField(body, "Code");
+    const message = extractXmlField(body, "Message");
+    const requestId = extractXmlField(body, "RequestId");
+    const resource = extractXmlField(body, "Resource");
+    if (code !== null)
+        result.Code = code;
+    if (message !== null)
+        result.Message = message;
+    if (requestId !== null)
+        result.RequestId = requestId;
+    if (resource !== null)
+        result.Resource = resource;
+    return result;
+}
+/**
+ * S3-compatible object storage (AWS S3, Cloudflare R2, and other S3-API stores)
+ * authenticates every request with AWS Signature Version 4 — there's no bearer
+ * token or static API key header. Each call is signed in `buildRequest` using
+ * the access key / secret key (and, for R2, region `"auto"`) supplied via
+ * `auth.custom`. Responses are XML, not JSON; pagination and error parsing
+ * extract the handful of fields they need from that XML directly.
+ *
+ * Configure with `auth.username`/`auth.password` (access key / secret key) and
+ * `auth.custom = { region, endpoint?, sessionToken? }`. For R2, set
+ * `auth.custom.region = "auto"` and `auth.custom.endpoint` to your account's
+ * `https://<account_id>.r2.cloudflarestorage.com` URL (or pass it as `baseUrl`
+ * in the provider config).
+ */
+export class S3Adapter {
+    baseUrl;
+    constructor(baseUrl = "https://s3.amazonaws.com/") {
+        this.baseUrl = baseUrl;
+    }
+    buildRequest(input) {
+        const { endpoint, options, authToken, baseUrl } = input;
+        const effectiveBaseUrl = baseUrl ?? this.baseUrl;
+        const url = new URL(endpoint.replace(/^\//, ""), effectiveBaseUrl);
+        if (options.query) {
+            for (const [key, value] of Object.entries(options.query)) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        const credentials = parseSigV4Credentials(authToken.token);
+        const method = options.method ?? "GET";
+        let body;
+        const baseHeaders = {
+            "User-Agent": `Meridian-SDK/${SDK_VERSION}`,
+            ...options.headers,
+        };
+        if (options.body && method !== "GET" && method !== "HEAD") {
+            body = typeof options.body === "string" ? options.body : JSON.stringify(options.body);
+            baseHeaders["Content-Type"] ??= "application/octet-stream";
+        }
+        const signed = signSigV4(body !== undefined
+            ? { method, url, headers: baseHeaders, body, credentials }
+            : { method, url, headers: baseHeaders, credentials });
+        const built = { url: url.toString(), method, headers: signed.headers };
+        if (body !== undefined) {
+            built.body = body;
+        }
+        return built;
+    }
+    parseResponse(raw) {
+        const rateLimitInfo = this.rateLimitPolicy(raw.headers);
+        const paginationStrategy = this.paginationStrategy();
+        const paginationInfo = ResponseNormalizer.extractPaginationInfo(raw, paginationStrategy);
+        return ResponseNormalizer.normalize(raw, "s3", rateLimitInfo, paginationInfo, [], "1.0.0");
+    }
+    parseError(raw) {
+        if (raw instanceof Error) {
+            const msg = raw.message.toLowerCase();
+            if (msg.includes("fetch") ||
+                msg.includes("network") ||
+                msg.includes("econnreset") ||
+                msg.includes("etimedout") ||
+                msg.includes("enotfound") ||
+                msg.includes("timeout")) {
+                return this.createMeridianError("network", true, "Network request failed. Check your connection and try again.", { originalError: raw.message });
+            }
+        }
+        if (typeof raw === "object" &&
+            raw !== null &&
+            "status" in raw &&
+            typeof raw.status === "number") {
+            return this.parseHttpError(raw);
+        }
+        return this.createMeridianError("provider", false, "An unexpected error occurred", { raw });
+    }
+    parseHttpError(error) {
+        const { status } = error;
+        const errorBody = parseS3ErrorXml(error.body);
+        const errorMessage = errorBody?.Message;
+        const metadata = { code: errorBody?.Code, requestId: errorBody?.RequestId };
+        if (status === 401 || status === 403) {
+            return this.createMeridianError("auth", false, errorMessage ??
+                "Authentication failed. Check your access key ID, secret access key, and signing region.", metadata, undefined, status);
+        }
+        if (status === 404) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Bucket or object not found.", metadata, undefined, 404);
+        }
+        if (status === 409 || status === 412 || status === 422) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", metadata, undefined, status);
+        }
+        if (status === 429 || (status === 503 && errorBody?.Code === "SlowDown")) {
+            return this.createMeridianError("rate_limit", true, errorMessage ?? "Request rate exceeded. Please slow down and retry.", metadata, undefined, status);
+        }
+        if (status === 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", metadata, undefined, 400);
+        }
+        if (status >= 500) {
+            return this.createMeridianError("provider", true, errorMessage ?? `S3 API returned error ${status}. This may be temporary.`, metadata, undefined, status);
+        }
+        if (status >= 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? `Request failed with status ${status}.`, metadata, undefined, status);
+        }
+        return this.createMeridianError("provider", false, `Unexpected response status ${status}.`, metadata, undefined, status);
+    }
+    async authStrategy(config) {
+        const accessKeyId = config.username ?? config.apiKey ?? config.clientId;
+        const secretAccessKey = config.password ?? config.apiSecret ?? config.clientSecret;
+        const region = config.custom?.region ?? "us-east-1";
+        const sessionToken = config.custom?.sessionToken ?? config.refreshToken;
+        if (!accessKeyId || !secretAccessKey) {
+            throw this.createMeridianError("auth", false, "S3 authentication requires an access key ID and secret access key. " +
+                "Set auth.username (access key ID) + auth.password (secret access key), " +
+                'and optionally auth.custom = { region, sessionToken } (use region: "auto" for R2).', {}, undefined, 401);
+        }
+        const credentials = {
+            accessKeyId,
+            secretAccessKey,
+            region,
+            service: "s3",
+            ...(sessionToken ? { sessionToken } : {}),
+        };
+        return { token: JSON.stringify(credentials) };
+    }
+    rateLimitPolicy(_headers) {
+        // S3 does not publish rate-limit headers; it signals throttling via 503 SlowDown.
+        return {
+            limit: 100,
+            remaining: 100,
+            reset: new Date(Date.now() + 60_000),
+        };
+    }
+    paginationStrategy() {
+        return new S3PaginationStrategy();
+    }
+    getIdempotencyConfig() {
+        return {
+            defaultSafeOperations: new Set(["GET", "HEAD", "OPTIONS"]),
+            operationOverrides: new Map([["PUT", IdempotencyLevel.IDEMPOTENT]]),
+        };
+    }
+    /**
+     * Verifies an S3 Event Notification delivered via SNS/EventBridge webhook —
+     * an HMAC-SHA256 digest of the raw request body, hex-encoded, keyed by a
+     * shared secret configured on the destination (S3 itself does not sign
+     * notifications; this supports the common "shared secret" relay pattern).
+     */
+    verifyWebhook(payload, signature, secret) {
+        const expected = createHmac("sha256", secret).update(payload).digest("hex");
+        try {
+            const a = Buffer.from(expected);
+            const b = Buffer.from(signature);
+            if (a.length !== b.length)
+                return false;
+            return timingSafeEqual(a, b);
+        }
+        catch {
+            return false;
+        }
+    }
+    createMeridianError(category, retryable, message, metadata, retryAfter, status) {
+        return new MeridianError(message, category, "s3", retryable, "", metadata, retryAfter, status);
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/providers/s3/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/providers/s3/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAa9D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAyB,SAAS,EAAE,MAAM,YAAY,CAAC;AAS9D,SAAS,eAAe,CAAC,GAAW,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAqB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC/C,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IACrD,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,SAAS;IACZ,OAAO,CAAS;IAExB,YAAY,OAAO,GAAG,2BAA2B;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,KAAmB;QAC9B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxD,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEnE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QAEvC,IAAI,IAAwB,CAAC;QAC7B,MAAM,WAAW,GAA2B;YAC1C,YAAY,EAAE,gBAAgB,WAAW,EAAE;YAC3C,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtF,WAAW,CAAC,cAAc,CAAC,KAAK,0BAA0B,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CACtB,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;YAC1D,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CACvD,CAAC;QAEF,MAAM,KAAK,GAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACrF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,GAAgB;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzF,OAAO,kBAAkB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7F,CAAC;IAED,UAAU,CAAC,GAAY;QACrB,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,CAAC;gBACD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,SAAS,EACT,IAAI,EACJ,8DAA8D,EAC9D,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,QAAQ,IAAI,GAAG;YACf,OAAQ,GAA+B,CAAC,MAAM,KAAK,QAAQ,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACxB,GAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IAEO,cAAc,CAAC,KAItB;QACC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,SAAS,EAAE,OAAO,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAE5E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,mBAAmB,CAC7B,MAAM,EACN,KAAK,EACL,YAAY;gBACV,yFAAyF,EAC3F,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,6BAA6B,EAC7C,QAAQ,EACR,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,IAAI,EACJ,YAAY,IAAI,oDAAoD,EACpE,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,QAAQ,EACR,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,IAAI,EACJ,YAAY,IAAI,yBAAyB,MAAM,0BAA0B,EACzE,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,8BAA8B,MAAM,GAAG,EACvD,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,KAAK,EACL,8BAA8B,MAAM,GAAG,EACvC,QAAQ,EACR,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAkB;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC;QACxE,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;QAExE,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,mBAAmB,CAC5B,MAAM,EACN,KAAK,EACL,qEAAqE;gBACnE,yEAAyE;gBACzE,oFAAoF,EACtF,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAqB;YACpC,WAAW;YACX,eAAe;YACf,MAAM;YACN,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,eAAe,CAAC,QAAiB;QAC/B,kFAAkF;QAClF,OAAO;YACL,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,oBAAoB,EAAE,CAAC;IACpC,CAAC;IAED,oBAAoB;QAClB,OAAO;YACL,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,kBAAkB,EAAE,IAAI,GAAG,CAA2B,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;SAC9F,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,OAAwB,EAAE,SAAiB,EAAE,MAAc;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,QAAmC,EACnC,SAAkB,EAClB,OAAe,EACf,QAAkC,EAClC,UAAiB,EACjB,MAAe;QAEf,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjG,CAAC;CACF"}

package/dist/providers/s3/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+export * from "./sigv4.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/s3/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/s3/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/providers/s3/index.js

@@ -0,0 +1,4 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+export * from "./sigv4.js";
+//# sourceMappingURL=index.js.map

package/dist/providers/s3/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/s3/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/providers/s3/pagination.d.ts

@@ -0,0 +1,18 @@
+import type { PaginationStrategy, RawResponse, RequestOptions } from "../../core/types.js";
+/**
+ * S3 / R2's `ListObjectsV2` returns XML with `IsTruncated` and, when there are
+ * more results, a `NextContinuationToken` — fed back as the `continuation-token`
+ * query parameter. The SDK's HTTP layer hands us the raw XML string as the body
+ * for non-JSON responses.
+ */
+export declare class S3PaginationStrategy implements PaginationStrategy {
+    extractCursor(response: RawResponse): string | null;
+    extractTotal(response: RawResponse): number | null;
+    hasNext(response: RawResponse): boolean;
+    buildNextRequest(endpoint: string, options: RequestOptions, cursor: string): {
+        endpoint: string;
+        options: RequestOptions;
+    };
+    private bodyAsXml;
+}
+//# sourceMappingURL=pagination.d.ts.map

package/dist/providers/s3/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../src/providers/s3/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAY3F;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAMnD,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IASlD,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO;IAMvC,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GACb;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE;IAahD,OAAO,CAAC,SAAS;CAMlB"}

package/dist/providers/s3/pagination.js

@@ -0,0 +1,58 @@
+/**
+ * Extracts a top-level XML element's text content via a narrow regex match.
+ * S3's ListObjectsV2 response is flat enough (no nested elements share these
+ * tag names) that a full XML parser isn't warranted here.
+ */
+function extractXmlField(xml, tag) {
+    const match = xml.match(new RegExp(`<${tag}>([^<]*)</${tag}>`));
+    return match?.[1] ?? null;
+}
+/**
+ * S3 / R2's `ListObjectsV2` returns XML with `IsTruncated` and, when there are
+ * more results, a `NextContinuationToken` — fed back as the `continuation-token`
+ * query parameter. The SDK's HTTP layer hands us the raw XML string as the body
+ * for non-JSON responses.
+ */
+export class S3PaginationStrategy {
+    extractCursor(response) {
+        const xml = this.bodyAsXml(response);
+        if (!xml)
+            return null;
+        return extractXmlField(xml, "NextContinuationToken");
+    }
+    extractTotal(response) {
+        const xml = this.bodyAsXml(response);
+        if (!xml)
+            return null;
+        const keyCount = extractXmlField(xml, "KeyCount");
+        if (keyCount === null)
+            return null;
+        const parsed = Number.parseInt(keyCount, 10);
+        return Number.isNaN(parsed) ? null : parsed;
+    }
+    hasNext(response) {
+        const xml = this.bodyAsXml(response);
+        if (!xml)
+            return false;
+        return extractXmlField(xml, "IsTruncated") === "true";
+    }
+    buildNextRequest(endpoint, options, cursor) {
+        return {
+            endpoint,
+            options: {
+                ...options,
+                query: {
+                    ...options.query,
+                    "continuation-token": cursor,
+                },
+            },
+        };
+    }
+    bodyAsXml(response) {
+        if (typeof response.body === "string" && response.body.includes("<ListBucketResult")) {
+            return response.body;
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=pagination.js.map

package/dist/providers/s3/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../src/providers/s3/pagination.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IAC/B,aAAa,CAAC,QAAqB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,eAAe,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACvD,CAAC;IAED,YAAY,CAAC,QAAqB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,QAAqB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,OAAO,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,MAAM,CAAC;IACxD,CAAC;IAED,gBAAgB,CACd,QAAgB,EAChB,OAAuB,EACvB,MAAc;QAEd,OAAO;YACL,QAAQ;YACR,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,KAAK,EAAE;oBACL,GAAG,OAAO,CAAC,KAAK;oBAChB,oBAAoB,EAAE,MAAM;iBAC7B;aACF;SACF,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,QAAqB;QACrC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACrF,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/providers/s3/sigv4.d.ts

@@ -0,0 +1,29 @@
+export interface SigV4Credentials {
+    accessKeyId: string;
+    secretAccessKey: string;
+    region: string;
+    service?: string;
+    sessionToken?: string;
+}
+export interface SigV4SignInput {
+    method: string;
+    url: URL;
+    headers: Record<string, string>;
+    body?: string;
+    credentials: SigV4Credentials;
+    /** Override the signing instant — primarily for deterministic tests. */
+    date?: Date;
+}
+export interface SigV4SignedRequest {
+    headers: Record<string, string>;
+}
+/**
+ * Signs a request per AWS Signature Version 4 (the scheme used by S3, R2, and
+ * other S3-compatible object stores). Returns the headers to attach — including
+ * `Authorization`, `x-amz-date`, `x-amz-content-sha256`, and `host` — that make
+ * the request authenticate as the given credentials.
+ *
+ * Reference: https://docs.aws.amazon.com/general/latest/gr/sigv4-create-canonical-request.html
+ */
+export declare function signSigV4(input: SigV4SignInput): SigV4SignedRequest;
+//# sourceMappingURL=sigv4.d.ts.map

package/dist/providers/s3/sigv4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sigv4.d.ts","sourceRoot":"","sources":["../../../src/providers/s3/sigv4.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,gBAAgB,CAAC;IAC9B,wEAAwE;IACxE,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AA4DD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,kBAAkB,CAuDnE"}

package/dist/providers/s3/sigv4.js

@@ -0,0 +1,101 @@
+import { createHash, createHmac } from "node:crypto";
+const UNRESERVED = /^[A-Za-z0-9\-_.~]$/;
+/** AWS's "URI encode" — percent-encodes everything outside the unreserved set. */
+function uriEncode(value, encodeSlash = true) {
+    let out = "";
+    for (const ch of Buffer.from(value, "utf-8")) {
+        const c = String.fromCharCode(ch);
+        if (UNRESERVED.test(c) || (c === "/" && !encodeSlash)) {
+            out += c;
+        }
+        else {
+            out += `%${ch.toString(16).toUpperCase().padStart(2, "0")}`;
+        }
+    }
+    return out;
+}
+function canonicalUri(pathname) {
+    if (!pathname || pathname === "")
+        return "/";
+    return pathname
+        .split("/")
+        .map((segment) => uriEncode(segment, false))
+        .join("/");
+}
+function canonicalQueryString(url) {
+    const params = [];
+    url.searchParams.forEach((value, key) => params.push([key, value]));
+    params.sort(([ak, av], [bk, bv]) => ak === bk ? (av < bv ? -1 : av > bv ? 1 : 0) : ak < bk ? -1 : 1);
+    return params.map(([k, v]) => `${uriEncode(k)}=${uriEncode(v)}`).join("&");
+}
+function sha256Hex(data) {
+    return createHash("sha256").update(data, "utf-8").digest("hex");
+}
+function hmac(key, data) {
+    return createHmac("sha256", key).update(data, "utf-8").digest();
+}
+function signingKey(secretAccessKey, dateStamp, region, service) {
+    const kDate = hmac(`AWS4${secretAccessKey}`, dateStamp);
+    const kRegion = hmac(kDate, region);
+    const kService = hmac(kRegion, service);
+    return hmac(kService, "aws4_request");
+}
+function amzDate(date) {
+    const iso = date.toISOString().replace(/[:-]|\.\d{3}/g, "");
+    return { amzDate: iso, dateStamp: iso.slice(0, 8) };
+}
+/**
+ * Signs a request per AWS Signature Version 4 (the scheme used by S3, R2, and
+ * other S3-compatible object stores). Returns the headers to attach — including
+ * `Authorization`, `x-amz-date`, `x-amz-content-sha256`, and `host` — that make
+ * the request authenticate as the given credentials.
+ *
+ * Reference: https://docs.aws.amazon.com/general/latest/gr/sigv4-create-canonical-request.html
+ */
+export function signSigV4(input) {
+    const { method, url, body, credentials } = input;
+    const service = credentials.service ?? "s3";
+    const date = input.date ?? new Date();
+    const { amzDate: amzDateStr, dateStamp } = amzDate(date);
+    const payloadHash = sha256Hex(body ?? "");
+    const headers = {
+        ...input.headers,
+        host: url.host,
+        "x-amz-date": amzDateStr,
+        "x-amz-content-sha256": payloadHash,
+    };
+    if (credentials.sessionToken) {
+        headers["x-amz-security-token"] = credentials.sessionToken;
+    }
+    const headerEntries = Object.entries(headers)
+        .map(([k, v]) => [k.toLowerCase(), v.trim().replace(/\s+/g, " ")])
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    const canonicalHeaders = headerEntries.map(([k, v]) => `${k}:${v}\n`).join("");
+    const signedHeaders = headerEntries.map(([k]) => k).join(";");
+    const canonicalRequest = [
+        method.toUpperCase(),
+        canonicalUri(url.pathname),
+        canonicalQueryString(url),
+        canonicalHeaders,
+        signedHeaders,
+        payloadHash,
+    ].join("\n");
+    const credentialScope = `${dateStamp}/${credentials.region}/${service}/aws4_request`;
+    const stringToSign = [
+        "AWS4-HMAC-SHA256",
+        amzDateStr,
+        credentialScope,
+        sha256Hex(canonicalRequest),
+    ].join("\n");
+    const key = signingKey(credentials.secretAccessKey, dateStamp, credentials.region, service);
+    const signature = createHmac("sha256", key).update(stringToSign, "utf-8").digest("hex");
+    const authorization = `AWS4-HMAC-SHA256 Credential=${credentials.accessKeyId}/${credentialScope}, ` +
+        `SignedHeaders=${signedHeaders}, Signature=${signature}`;
+    return {
+        headers: {
+            ...headers,
+            Authorization: authorization,
+        },
+    };
+}
+//# sourceMappingURL=sigv4.js.map

package/dist/providers/s3/sigv4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sigv4.js","sourceRoot":"","sources":["../../../src/providers/s3/sigv4.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwBrD,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,kFAAkF;AAClF,SAAS,SAAS,CAAC,KAAa,EAAE,WAAW,GAAG,IAAI;IAClD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7C,OAAO,QAAQ;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;SAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAQ;IACpC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CACjC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,GAAoB,EAAE,IAAY;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,UAAU,CACjB,eAAuB,EACvB,SAAiB,EACjB,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,IAAU;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,OAAO,GAA2B;QACtC,GAAG,KAAK,CAAC,OAAO;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,UAAU;QACxB,sBAAsB,EAAE,WAAW;KACpC,CAAC;IACF,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,sBAAsB,CAAC,GAAG,WAAW,CAAC,YAAY,CAAC;IAC7D,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAqB,CAAC;SACrF,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpD,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE9D,MAAM,gBAAgB,GAAG;QACvB,MAAM,CAAC,WAAW,EAAE;QACpB,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1B,oBAAoB,CAAC,GAAG,CAAC;QACzB,gBAAgB;QAChB,aAAa;QACb,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,eAAe,GAAG,GAAG,SAAS,IAAI,WAAW,CAAC,MAAM,IAAI,OAAO,eAAe,CAAC;IACrF,MAAM,YAAY,GAAG;QACnB,kBAAkB;QAClB,UAAU;QACV,eAAe;QACf,SAAS,CAAC,gBAAgB,CAAC;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,eAAe,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExF,MAAM,aAAa,GACjB,+BAA+B,WAAW,CAAC,WAAW,IAAI,eAAe,IAAI;QAC7E,iBAAiB,aAAa,eAAe,SAAS,EAAE,CAAC;IAE3D,OAAO;QACL,OAAO,EAAE;YACP,GAAG,OAAO;YACV,aAAa,EAAE,aAAa;SAC7B;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/sentry/adapter.d.ts

@@ -0,0 +1,29 @@
+import type { AdapterInput, AuthConfig, AuthToken, BuiltRequest, IdempotencyConfig, NormalizedResponse, PaginationStrategy, ProviderAdapter, RateLimitInfo, RawResponse } from "../../core/types.js";
+import { MeridianError } from "../../core/types.js";
+/**
+ * Sentry's REST API (`/api/0/`) authenticates with a bearer auth token
+ * (internal integration token or personal API token) and uses RFC 5988
+ * `Link`-header cursor pagination. Rate limiting is communicated via 429s
+ * with a `Retry-After` header (and, on the SaaS product, `X-Sentry-Rate-Limit-*`).
+ */
+export declare class SentryAdapter implements ProviderAdapter {
+    private baseUrl;
+    constructor(baseUrl?: string);
+    buildRequest(input: AdapterInput): BuiltRequest;
+    parseResponse(raw: RawResponse): NormalizedResponse;
+    parseError(raw: unknown): MeridianError;
+    private parseHttpError;
+    authStrategy(config: AuthConfig): Promise<AuthToken>;
+    rateLimitPolicy(headers: Headers): RateLimitInfo;
+    paginationStrategy(): PaginationStrategy;
+    getIdempotencyConfig(): IdempotencyConfig;
+    /**
+     * Verifies a Sentry integration-platform webhook using the `Sentry-Hook-Signature`
+     * header — an HMAC-SHA256 digest of the raw request body keyed by the
+     * integration's client secret.
+     */
+    verifyWebhook(payload: string | Buffer, signature: string, secret: string): boolean;
+    private createMeridianError;
+    private extractRetryAfter;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/providers/sentry/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/providers/sentry/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,WAAW,EACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAyB,aAAa,EAAe,MAAM,qBAAqB,CAAC;AASxF;;;;;GAKG;AACH,qBAAa,aAAc,YAAW,eAAe;IACnD,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,SAA6B;IAIhD,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY;IA+B/C,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,kBAAkB;IAOnD,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa;IAkCvC,OAAO,CAAC,cAAc;IAiGhB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAkB1D,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa;IAYhD,kBAAkB,IAAI,kBAAkB;IAIxC,oBAAoB,IAAI,iBAAiB;IAOzC;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAYnF,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,iBAAiB;CAY1B"}