stratal 0.0.18 → 0.0.20

package/dist/signed-url-BQPbv2In.mjs

@@ -0,0 +1,74 @@
+//#region src/router/signed-url.ts
+/**
+* Import a signing key for HMAC-SHA256.
+*/
+async function importKey(secret) {
+	const encoder = new TextEncoder();
+	return crypto.subtle.importKey("raw", encoder.encode(secret), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign", "verify"]);
+}
+/**
+* Encode an ArrayBuffer as base64url (URL-safe base64).
+*/
+function toBase64Url(buffer) {
+	const bytes = new Uint8Array(buffer);
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+/**
+* Sign a URL with HMAC-SHA256.
+*
+* Appends `signature` and optionally `expires` query parameters.
+* The signature covers the pathname + search (excluding the signature params themselves).
+*
+* @param url - Full URL or path to sign
+* @param secret - HMAC secret key (e.g., from env.APP_SECRET)
+* @param options - Optional expiration
+* @returns URL string with `signature` (and `expires`) query params appended
+*/
+async function signUrl(url, secret, options) {
+	const parsedUrl = new URL(url, "https://placeholder.local");
+	const key = await importKey(secret);
+	if (options?.expiresIn) {
+		const expires = Math.floor(Date.now() / 1e3) + options.expiresIn;
+		parsedUrl.searchParams.set("expires", String(expires));
+	}
+	const dataToSign = `${parsedUrl.pathname}?${parsedUrl.searchParams.toString()}`;
+	const encoder = new TextEncoder();
+	const signature = toBase64Url(await crypto.subtle.sign("HMAC", key, encoder.encode(dataToSign)));
+	parsedUrl.searchParams.set("signature", signature);
+	return url.startsWith("http") ? parsedUrl.toString() : `${parsedUrl.pathname}?${parsedUrl.searchParams.toString()}`;
+}
+/**
+* Verify a signed URL using `crypto.subtle.verify()` (timing-attack-safe).
+*
+* @param url - Full URL or path with signature query param
+* @param secret - HMAC secret key (same key used for signing)
+* @returns true if signature is valid and not expired
+*/
+async function verifySignedUrl(url, secret) {
+	const parsedUrl = new URL(url, "https://placeholder.local");
+	const signature = parsedUrl.searchParams.get("signature");
+	if (!signature) return false;
+	const expires = parsedUrl.searchParams.get("expires");
+	if (expires) {
+		const expiryTime = parseInt(expires, 10);
+		if (isNaN(expiryTime) || Math.floor(Date.now() / 1e3) > expiryTime) return false;
+	}
+	parsedUrl.searchParams.delete("signature");
+	const dataToVerify = `${parsedUrl.pathname}?${parsedUrl.searchParams.toString()}`;
+	const base64 = signature.replace(/-/g, "+").replace(/_/g, "/");
+	const binaryStr = atob(base64);
+	const signatureBytes = new Uint8Array(binaryStr.length);
+	for (let i = 0; i < binaryStr.length; i++) signatureBytes[i] = binaryStr.charCodeAt(i);
+	const key = await importKey(secret);
+	const encoder = new TextEncoder();
+	return crypto.subtle.verify("HMAC", key, signatureBytes, encoder.encode(dataToVerify));
+}
+//#endregion
+export { verifySignedUrl as n, signUrl as t };
+
+//# sourceMappingURL=signed-url-BQPbv2In.mjs.map

package/dist/signed-url-BQPbv2In.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-url-BQPbv2In.mjs","names":[],"sources":["../src/router/signed-url.ts"],"sourcesContent":["/**\n * Signed URL utilities using HMAC-SHA256 via Web Crypto API.\n *\n * Follows the Cloudflare Workers signing pattern:\n * https://developers.cloudflare.com/workers/examples/signing-requests/\n *\n * Uses `crypto.subtle.verify()` for timing-attack-safe comparison.\n */\n\n/**\n * Options for signing a URL.\n */\nexport interface SignedUrlOptions {\n  /** Time-to-live in seconds. URL expires after this duration. */\n  expiresIn?: number\n}\n\n/**\n * Import a signing key for HMAC-SHA256.\n */\nasync function importKey(secret: string): Promise<CryptoKey> {\n  const encoder = new TextEncoder()\n  return crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign', 'verify']\n  )\n}\n\n/**\n * Encode an ArrayBuffer as base64url (URL-safe base64).\n */\nfunction toBase64Url(buffer: ArrayBuffer): string {\n  const bytes = new Uint8Array(buffer)\n  let binary = ''\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte)\n  }\n  return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\n\n/**\n * Sign a URL with HMAC-SHA256.\n *\n * Appends `signature` and optionally `expires` query parameters.\n * The signature covers the pathname + search (excluding the signature params themselves).\n *\n * @param url - Full URL or path to sign\n * @param secret - HMAC secret key (e.g., from env.APP_SECRET)\n * @param options - Optional expiration\n * @returns URL string with `signature` (and `expires`) query params appended\n */\nexport async function signUrl(url: string, secret: string, options?: SignedUrlOptions): Promise<string> {\n  const parsedUrl = new URL(url, 'https://placeholder.local')\n  const key = await importKey(secret)\n\n  // Add expiry if specified\n  if (options?.expiresIn) {\n    const expires = Math.floor(Date.now() / 1000) + options.expiresIn\n    parsedUrl.searchParams.set('expires', String(expires))\n  }\n\n  // Sign: pathname + sorted search params (without signature)\n  const dataToSign = `${parsedUrl.pathname}?${parsedUrl.searchParams.toString()}`\n  const encoder = new TextEncoder()\n  const signatureBuffer = await crypto.subtle.sign('HMAC', key, encoder.encode(dataToSign))\n  const signature = toBase64Url(signatureBuffer)\n\n  parsedUrl.searchParams.set('signature', signature)\n  // Return just the path + query for relative URLs, full URL for absolute\n  return url.startsWith('http') ? parsedUrl.toString() : `${parsedUrl.pathname}?${parsedUrl.searchParams.toString()}`\n}\n\n/**\n * Verify a signed URL using `crypto.subtle.verify()` (timing-attack-safe).\n *\n * @param url - Full URL or path with signature query param\n * @param secret - HMAC secret key (same key used for signing)\n * @returns true if signature is valid and not expired\n */\nexport async function verifySignedUrl(url: string, secret: string): Promise<boolean> {\n  const parsedUrl = new URL(url, 'https://placeholder.local')\n  const signature = parsedUrl.searchParams.get('signature')\n  if (!signature) return false\n\n  // Check expiry\n  const expires = parsedUrl.searchParams.get('expires')\n  if (expires) {\n    const expiryTime = parseInt(expires, 10)\n    if (isNaN(expiryTime) || Math.floor(Date.now() / 1000) > expiryTime) {\n      return false\n    }\n  }\n\n  // Reconstruct the data that was signed (without signature param)\n  parsedUrl.searchParams.delete('signature')\n  const dataToVerify = `${parsedUrl.pathname}?${parsedUrl.searchParams.toString()}`\n\n  // Decode base64url signature\n  const base64 = signature.replace(/-/g, '+').replace(/_/g, '/')\n  const binaryStr = atob(base64)\n  const signatureBytes = new Uint8Array(binaryStr.length)\n  for (let i = 0; i < binaryStr.length; i++) {\n    signatureBytes[i] = binaryStr.charCodeAt(i)\n  }\n\n  const key = await importKey(secret)\n  const encoder = new TextEncoder()\n\n  // Use crypto.subtle.verify() for timing-attack-safe comparison\n  return crypto.subtle.verify('HMAC', key, signatureBytes, encoder.encode(dataToVerify))\n}\n"],"mappings":";;;;AAoBA,eAAe,UAAU,QAAoC;CAC3D,MAAM,UAAU,IAAI,aAAa;AACjC,QAAO,OAAO,OAAO,UACnB,OACA,QAAQ,OAAO,OAAO,EACtB;EAAE,MAAM;EAAQ,MAAM;EAAW,EACjC,OACA,CAAC,QAAQ,SAAS,CACnB;;;;;AAMH,SAAS,YAAY,QAA6B;CAChD,MAAM,QAAQ,IAAI,WAAW,OAAO;CACpC,IAAI,SAAS;AACb,MAAK,MAAM,QAAQ,MACjB,WAAU,OAAO,aAAa,KAAK;AAErC,QAAO,KAAK,OAAO,CAAC,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,GAAG;;;;;;;;;;;;;AAchF,eAAsB,QAAQ,KAAa,QAAgB,SAA6C;CACtG,MAAM,YAAY,IAAI,IAAI,KAAK,4BAA4B;CAC3D,MAAM,MAAM,MAAM,UAAU,OAAO;AAGnC,KAAI,SAAS,WAAW;EACtB,MAAM,UAAU,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK,GAAG,QAAQ;AACxD,YAAU,aAAa,IAAI,WAAW,OAAO,QAAQ,CAAC;;CAIxD,MAAM,aAAa,GAAG,UAAU,SAAS,GAAG,UAAU,aAAa,UAAU;CAC7E,MAAM,UAAU,IAAI,aAAa;CAEjC,MAAM,YAAY,YAAY,MADA,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,WAAW,CAAC,CAC3C;AAE9C,WAAU,aAAa,IAAI,aAAa,UAAU;AAElD,QAAO,IAAI,WAAW,OAAO,GAAG,UAAU,UAAU,GAAG,GAAG,UAAU,SAAS,GAAG,UAAU,aAAa,UAAU;;;;;;;;;AAUnH,eAAsB,gBAAgB,KAAa,QAAkC;CACnF,MAAM,YAAY,IAAI,IAAI,KAAK,4BAA4B;CAC3D,MAAM,YAAY,UAAU,aAAa,IAAI,YAAY;AACzD,KAAI,CAAC,UAAW,QAAO;CAGvB,MAAM,UAAU,UAAU,aAAa,IAAI,UAAU;AACrD,KAAI,SAAS;EACX,MAAM,aAAa,SAAS,SAAS,GAAG;AACxC,MAAI,MAAM,WAAW,IAAI,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK,GAAG,WACvD,QAAO;;AAKX,WAAU,aAAa,OAAO,YAAY;CAC1C,MAAM,eAAe,GAAG,UAAU,SAAS,GAAG,UAAU,aAAa,UAAU;CAG/E,MAAM,SAAS,UAAU,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI;CAC9D,MAAM,YAAY,KAAK,OAAO;CAC9B,MAAM,iBAAiB,IAAI,WAAW,UAAU,OAAO;AACvD,MAAK,IAAI,IAAI,GAAG,IAAI,UAAU,QAAQ,IACpC,gBAAe,KAAK,UAAU,WAAW,EAAE;CAG7C,MAAM,MAAM,MAAM,UAAU,OAAO;CACnC,MAAM,UAAU,IAAI,aAAa;AAGjC,QAAO,OAAO,OAAO,OAAO,QAAQ,KAAK,gBAAgB,QAAQ,OAAO,aAAa,CAAC"}

package/dist/{smtp.provider-CAwpvzvD.mjs → smtp.provider-w0Ve52Xg.mjs}

@@ -1,5 +1,5 @@
 import { EmailSmtpConnectionFailedError, SmtpConfigurationMissingError, SmtpHostMissingError } from "./email/index.mjs";
-import { t as BaseEmailProvider } from "./base-email.provider-Cuw4OAB0.mjs";
+import { t as BaseEmailProvider } from "./base-email.provider-CfQCA08m.mjs";
 import * as nodemailer from "nodemailer";
 import { Readable } from "stream";
 //#region src/email/providers/smtp.provider.ts
@@ -72,4 +72,4 @@ var SmtpProvider = class extends BaseEmailProvider {
 //#endregion
 export { SmtpProvider };
 
-//# sourceMappingURL=smtp.provider-CAwpvzvD.mjs.map
+//# sourceMappingURL=smtp.provider-w0Ve52Xg.mjs.map

package/dist/{smtp.provider-CAwpvzvD.mjs.map → smtp.provider-w0Ve52Xg.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"smtp.provider-CAwpvzvD.mjs","names":[],"sources":["../src/email/providers/smtp.provider.ts"],"sourcesContent":["import type { Transporter } from 'nodemailer'\nimport * as nodemailer from 'nodemailer'\nimport type SMTPTransport from 'nodemailer/lib/smtp-transport'\nimport { Readable } from 'stream'\nimport type { ResolvedEmailAttachment, ResolvedEmailMessage } from '../contracts'\nimport type { EmailModuleOptions } from '../email.module'\nimport { EmailSmtpConnectionFailedError, SmtpConfigurationMissingError, SmtpHostMissingError } from '../errors'\nimport { BaseEmailProvider } from './base-email.provider'\nimport type { EmailSendResult } from './email-provider.interface'\n\n/**\n * SMTP Email Provider\n *\n * Implementation of IEmailProvider using SMTP/nodemailer\n * Supports any SMTP server configured via SMTP_URL\n */\nexport class SmtpProvider extends BaseEmailProvider {\n  private readonly transporter: Transporter<SMTPTransport.SentMessageInfo>\n  private readonly defaultFrom: { name: string; email: string }\n\n  constructor(\n    private readonly options: EmailModuleOptions\n  ) {\n    super()\n\n    // Validate SMTP configuration\n    if (!this.options.smtp) {\n      throw new SmtpConfigurationMissingError()\n    }\n\n    if (!this.options.smtp.host) {\n      throw new SmtpHostMissingError()\n    }\n\n    // Create nodemailer transporter\n    this.transporter = nodemailer.createTransport({\n      host: this.options.smtp.host,\n      port: this.options.smtp.port,\n      secure: this.options.smtp.secure,\n      auth: this.options.smtp.username && this.options.smtp.password\n        ? {\n          user: this.options.smtp.username,\n          pass: this.options.smtp.password,\n        }\n        : undefined,\n    })\n\n    this.defaultFrom = this.options.from\n  }\n\n  async send(message: ResolvedEmailMessage): Promise<EmailSendResult> {\n    try {\n      const from = message.from\n        ? `${message.from.name} <${message.from.email}>`\n        : `${this.defaultFrom.name} <${this.defaultFrom.email}>`\n\n      const info = await this.transporter.sendMail({\n        from,\n        to: Array.isArray(message.to) ? message.to.join(', ') : message.to,\n        subject: message.subject,\n        html: message.html,\n        text: message.text,\n        replyTo: message.replyTo,\n        cc: message.cc?.join(', '),\n        bcc: message.bcc?.join(', '),\n        attachments: message.attachments?.map(attachment => ({\n          filename: attachment.filename,\n          content: this.toNodeStream(attachment.content),\n          contentType: attachment.contentType,\n        })),\n      })\n\n      return {\n        messageId: info.messageId,\n        accepted: true,\n        metadata: {\n          provider: 'smtp',\n          response: info.response,\n        },\n      }\n    } catch {\n      throw new EmailSmtpConnectionFailedError(\n        this.options.smtp?.host ?? '',\n        this.options.smtp?.port ?? 587\n      )\n    }\n  }\n\n  /**\n   * Convert attachment content to Node.js stream format\n   *\n   * Nodemailer expects Node.js Readable streams, not web ReadableStream.\n   * Buffer is passed through as-is since nodemailer supports it directly.\n   */\n  private toNodeStream(content: ResolvedEmailAttachment['content']): Buffer | Readable {\n    if (Buffer.isBuffer(content)) {\n      return content\n    }\n    // Convert web ReadableStream to Node.js Readable\n    return Readable.fromWeb(content as Parameters<typeof Readable.fromWeb>[0])\n  }\n}\n"],"mappings":";;;;;;;;;;;AAgBA,IAAa,eAAb,cAAkC,kBAAkB;CAClD;CACA;CAEA,YACE,SACA;AACA,SAAO;AAFU,OAAA,UAAA;AAKjB,MAAI,CAAC,KAAK,QAAQ,KAChB,OAAM,IAAI,+BAA+B;AAG3C,MAAI,CAAC,KAAK,QAAQ,KAAK,KACrB,OAAM,IAAI,sBAAsB;AAIlC,OAAK,cAAc,WAAW,gBAAgB;GAC5C,MAAM,KAAK,QAAQ,KAAK;GACxB,MAAM,KAAK,QAAQ,KAAK;GACxB,QAAQ,KAAK,QAAQ,KAAK;GAC1B,MAAM,KAAK,QAAQ,KAAK,YAAY,KAAK,QAAQ,KAAK,WAClD;IACA,MAAM,KAAK,QAAQ,KAAK;IACxB,MAAM,KAAK,QAAQ,KAAK;IACzB,GACC,KAAA;GACL,CAAC;AAEF,OAAK,cAAc,KAAK,QAAQ;;CAGlC,MAAM,KAAK,SAAyD;AAClE,MAAI;GACF,MAAM,OAAO,QAAQ,OACjB,GAAG,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,MAAM,KAC5C,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,YAAY,MAAM;GAExD,MAAM,OAAO,MAAM,KAAK,YAAY,SAAS;IAC3C;IACA,IAAI,MAAM,QAAQ,QAAQ,GAAG,GAAG,QAAQ,GAAG,KAAK,KAAK,GAAG,QAAQ;IAChE,SAAS,QAAQ;IACjB,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,SAAS,QAAQ;IACjB,IAAI,QAAQ,IAAI,KAAK,KAAK;IAC1B,KAAK,QAAQ,KAAK,KAAK,KAAK;IAC5B,aAAa,QAAQ,aAAa,KAAI,gBAAe;KACnD,UAAU,WAAW;KACrB,SAAS,KAAK,aAAa,WAAW,QAAQ;KAC9C,aAAa,WAAW;KACzB,EAAE;IACJ,CAAC;AAEF,UAAO;IACL,WAAW,KAAK;IAChB,UAAU;IACV,UAAU;KACR,UAAU;KACV,UAAU,KAAK;KAChB;IACF;UACK;AACN,SAAM,IAAI,+BACR,KAAK,QAAQ,MAAM,QAAQ,IAC3B,KAAK,QAAQ,MAAM,QAAQ,IAC5B;;;;;;;;;CAUL,aAAqB,SAAgE;AACnF,MAAI,OAAO,SAAS,QAAQ,CAC1B,QAAO;AAGT,SAAO,SAAS,QAAQ,QAAkD"}
+{"version":3,"file":"smtp.provider-w0Ve52Xg.mjs","names":[],"sources":["../src/email/providers/smtp.provider.ts"],"sourcesContent":["import type { Transporter } from 'nodemailer'\nimport * as nodemailer from 'nodemailer'\nimport type SMTPTransport from 'nodemailer/lib/smtp-transport'\nimport { Readable } from 'stream'\nimport type { ResolvedEmailAttachment, ResolvedEmailMessage } from '../contracts'\nimport type { EmailModuleOptions } from '../email.module'\nimport { EmailSmtpConnectionFailedError, SmtpConfigurationMissingError, SmtpHostMissingError } from '../errors'\nimport { BaseEmailProvider } from './base-email.provider'\nimport type { EmailSendResult } from './email-provider.interface'\n\n/**\n * SMTP Email Provider\n *\n * Implementation of IEmailProvider using SMTP/nodemailer\n * Supports any SMTP server configured via SMTP_URL\n */\nexport class SmtpProvider extends BaseEmailProvider {\n  private readonly transporter: Transporter<SMTPTransport.SentMessageInfo>\n  private readonly defaultFrom: { name: string; email: string }\n\n  constructor(\n    private readonly options: EmailModuleOptions\n  ) {\n    super()\n\n    // Validate SMTP configuration\n    if (!this.options.smtp) {\n      throw new SmtpConfigurationMissingError()\n    }\n\n    if (!this.options.smtp.host) {\n      throw new SmtpHostMissingError()\n    }\n\n    // Create nodemailer transporter\n    this.transporter = nodemailer.createTransport({\n      host: this.options.smtp.host,\n      port: this.options.smtp.port,\n      secure: this.options.smtp.secure,\n      auth: this.options.smtp.username && this.options.smtp.password\n        ? {\n          user: this.options.smtp.username,\n          pass: this.options.smtp.password,\n        }\n        : undefined,\n    })\n\n    this.defaultFrom = this.options.from\n  }\n\n  async send(message: ResolvedEmailMessage): Promise<EmailSendResult> {\n    try {\n      const from = message.from\n        ? `${message.from.name} <${message.from.email}>`\n        : `${this.defaultFrom.name} <${this.defaultFrom.email}>`\n\n      const info = await this.transporter.sendMail({\n        from,\n        to: Array.isArray(message.to) ? message.to.join(', ') : message.to,\n        subject: message.subject,\n        html: message.html,\n        text: message.text,\n        replyTo: message.replyTo,\n        cc: message.cc?.join(', '),\n        bcc: message.bcc?.join(', '),\n        attachments: message.attachments?.map(attachment => ({\n          filename: attachment.filename,\n          content: this.toNodeStream(attachment.content),\n          contentType: attachment.contentType,\n        })),\n      })\n\n      return {\n        messageId: info.messageId,\n        accepted: true,\n        metadata: {\n          provider: 'smtp',\n          response: info.response,\n        },\n      }\n    } catch {\n      throw new EmailSmtpConnectionFailedError(\n        this.options.smtp?.host ?? '',\n        this.options.smtp?.port ?? 587\n      )\n    }\n  }\n\n  /**\n   * Convert attachment content to Node.js stream format\n   *\n   * Nodemailer expects Node.js Readable streams, not web ReadableStream.\n   * Buffer is passed through as-is since nodemailer supports it directly.\n   */\n  private toNodeStream(content: ResolvedEmailAttachment['content']): Buffer | Readable {\n    if (Buffer.isBuffer(content)) {\n      return content\n    }\n    // Convert web ReadableStream to Node.js Readable\n    return Readable.fromWeb(content as unknown as Parameters<typeof Readable.fromWeb>[0])\n  }\n}\n"],"mappings":";;;;;;;;;;;AAgBA,IAAa,eAAb,cAAkC,kBAAkB;CAClD;CACA;CAEA,YACE,SACA;AACA,SAAO;AAFU,OAAA,UAAA;AAKjB,MAAI,CAAC,KAAK,QAAQ,KAChB,OAAM,IAAI,+BAA+B;AAG3C,MAAI,CAAC,KAAK,QAAQ,KAAK,KACrB,OAAM,IAAI,sBAAsB;AAIlC,OAAK,cAAc,WAAW,gBAAgB;GAC5C,MAAM,KAAK,QAAQ,KAAK;GACxB,MAAM,KAAK,QAAQ,KAAK;GACxB,QAAQ,KAAK,QAAQ,KAAK;GAC1B,MAAM,KAAK,QAAQ,KAAK,YAAY,KAAK,QAAQ,KAAK,WAClD;IACA,MAAM,KAAK,QAAQ,KAAK;IACxB,MAAM,KAAK,QAAQ,KAAK;IACzB,GACC,KAAA;GACL,CAAC;AAEF,OAAK,cAAc,KAAK,QAAQ;;CAGlC,MAAM,KAAK,SAAyD;AAClE,MAAI;GACF,MAAM,OAAO,QAAQ,OACjB,GAAG,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,MAAM,KAC5C,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,YAAY,MAAM;GAExD,MAAM,OAAO,MAAM,KAAK,YAAY,SAAS;IAC3C;IACA,IAAI,MAAM,QAAQ,QAAQ,GAAG,GAAG,QAAQ,GAAG,KAAK,KAAK,GAAG,QAAQ;IAChE,SAAS,QAAQ;IACjB,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,SAAS,QAAQ;IACjB,IAAI,QAAQ,IAAI,KAAK,KAAK;IAC1B,KAAK,QAAQ,KAAK,KAAK,KAAK;IAC5B,aAAa,QAAQ,aAAa,KAAI,gBAAe;KACnD,UAAU,WAAW;KACrB,SAAS,KAAK,aAAa,WAAW,QAAQ;KAC9C,aAAa,WAAW;KACzB,EAAE;IACJ,CAAC;AAEF,UAAO;IACL,WAAW,KAAK;IAChB,UAAU;IACV,UAAU;KACR,UAAU;KACV,UAAU,KAAK;KAChB;IACF;UACK;AACN,SAAM,IAAI,+BACR,KAAK,QAAQ,MAAM,QAAQ,IAC3B,KAAK,QAAQ,MAAM,QAAQ,IAC5B;;;;;;;;;CAUL,aAAqB,SAAgE;AACnF,MAAI,OAAO,SAAS,QAAQ,CAC1B,QAAO;AAGT,SAAO,SAAS,QAAQ,QAA6D"}

package/dist/storage/index.d.mts

@@ -1,5 +1,6 @@
-import { d as ApplicationError, fn as AsyncModuleOptions, mn as DynamicModule } from "../index-BrmS34sa.mjs";
-import { _ as StorageEntry, a as uploadResultSchema, c as getPresignedUrlInputSchema, d as fileExistsInputSchema, f as DownloadResult, g as StorageConfig, h as PresignedUrlConfig, i as UploadResult, l as presignedUrlResultSchema, m as deleteFileInputSchema, n as StreamingBlobPayloadInputTypes, o as GetPresignedUrlInput, p as DeleteFileInput, r as UploadOptions, s as PresignedUrlResult, t as IStorageProvider, u as FileExistsInput } from "../storage-provider.interface-YRtyYBxV.mjs";
+import { V as RouterContext, d as ApplicationError, gn as AsyncModuleOptions, vn as DynamicModule } from "../index-D0US0X14.mjs";
+import { t as StratalEnv } from "../env-D1rcZ8_r.mjs";
+import { _ as StorageEntry, a as uploadResultSchema, c as getPresignedUrlInputSchema, d as fileExistsInputSchema, f as DownloadResult, g as StorageConfig, h as PresignedUrlConfig, i as UploadResult, l as presignedUrlResultSchema, m as deleteFileInputSchema, n as StreamingBlobPayloadInputTypes, o as GetPresignedUrlInput, p as DeleteFileInput, r as UploadOptions, s as PresignedUrlResult, t as IStorageProvider, u as FileExistsInput, v as StorageRouteConfig } from "../storage-provider.interface-Bd6vA4ak.mjs";
 
 //#region src/storage/storage.module.d.ts
 /**
@@ -11,13 +12,10 @@ declare class StorageModule {
   /**
    * Configure StorageModule with static options
    *
-   * @param options - Storage configuration options
-   * @returns Dynamic module with storage infrastructure
-   *
    * @example
    * ```typescript
    * StorageModule.forRoot({
-   *   storage: [{ disk: 'uploads', provider: 's3', ... }],
+   *   storage: [{ disk: 'uploads', binding: 'MY_BUCKET', root: 'uploads' }],
    *   defaultStorageDisk: 'uploads',
    *   presignedUrl: { defaultExpiry: 3600, maxExpiry: 86400 }
    * })
@@ -29,9 +27,6 @@ declare class StorageModule {
    *
    * Use when configuration depends on other services.
    *
-   * @param options - Async configuration with factory and inject tokens
-   * @returns Dynamic module with storage infrastructure
-   *
    * @example
    * ```typescript
    * StorageModule.forRootAsync({
@@ -62,14 +57,15 @@ declare const STORAGE_TOKENS: {
 /**
  * Storage Manager Service
  * Manages multiple storage providers (one per disk)
- * Handles lazy initialization and caching of S3Clients
+ * Handles lazy initialization and caching of R2 providers
  */
 declare class StorageManagerService {
   private readonly options;
+  private readonly env;
   private readonly providers;
   private readonly creationPromises;
   private readonly diskConfigs;
-  constructor(options: StorageConfig);
+  constructor(options: StorageConfig, env: StratalEnv);
   /**
    * Initialize disk configurations from options
    */
@@ -82,8 +78,8 @@ declare class StorageManagerService {
    */
   getProvider(diskName: string): Promise<IStorageProvider>;
   /**
-   * Create a provider instance based on configuration
-   * Dynamically imports S3StorageProvider to avoid loading AWS SDK at module evaluation time
+   * Create an R2 provider instance
+   * Dynamically imports R2StorageProvider to support code splitting
    * @param config - Storage entry configuration
    * @returns Storage provider instance
    */
@@ -240,6 +236,27 @@ declare class StorageService {
   }, disk?: string): Promise<UploadResult>;
 }
 //#endregion
+//#region src/storage/controllers/storage.controller.d.ts
+/**
+ * Storage Controller
+ *
+ * Auto-registered controller that proxies R2 operations behind signed URLs.
+ * Signature verification is applied via VerifySignatureMiddleware on the module's
+ * configureRoutes() method.
+ *
+ * Routes:
+ * - GET    /storage/:disk/*  → download file
+ * - PUT    /storage/:disk/*  → upload file
+ * - DELETE /storage/:disk/*  → delete file
+ */
+declare class StorageController {
+  private readonly storage;
+  constructor(storage: StorageService);
+  download(ctx: RouterContext): Promise<Response>;
+  upload(ctx: RouterContext): Promise<Response>;
+  destroy(ctx: RouterContext): Promise<Response>;
+}
+//#endregion
 //#region src/storage/errors/disk-not-configured.error.d.ts
 declare class DiskNotConfiguredError extends ApplicationError {
   constructor(disk: string);
@@ -270,9 +287,14 @@ declare class PresignedUrlInvalidExpiryError extends ApplicationError {
   constructor(expiresIn: number, min: number, max: number);
 }
 //#endregion
-//#region src/storage/errors/storage-provider-not-supported.error.d.ts
-declare class StorageProviderNotSupportedError extends ApplicationError {
-  constructor(provider: string);
+//#region src/storage/errors/r2-binding-not-found.error.d.ts
+declare class R2BindingNotFoundError extends ApplicationError {
+  constructor(binding: string);
+}
+//#endregion
+//#region src/storage/errors/r2-presigned-url-secret-missing.error.d.ts
+declare class R2PresignedUrlSecretMissingError extends ApplicationError {
+  constructor();
 }
 //#endregion
 //#region src/storage/errors/storage-response-body-missing.error.d.ts
@@ -280,5 +302,5 @@ declare class StorageResponseBodyMissingError extends ApplicationError {
   constructor(path: string);
 }
 //#endregion
-export { DeleteFileInput, DiskNotConfiguredError, DownloadResult, FileExistsInput, FileNotFoundError, FileTooLargeError, GetPresignedUrlInput, type IStorageProvider, InvalidDiskError, InvalidFileTypeError, type PresignedUrlConfig, PresignedUrlInvalidExpiryError, PresignedUrlResult, STORAGE_TOKENS, type StorageConfig, type StorageEntry, StorageManagerService, StorageModule, StorageProviderNotSupportedError, StorageResponseBodyMissingError, StorageService, type StreamingBlobPayloadInputTypes, UploadOptions, UploadResult, deleteFileInputSchema, fileExistsInputSchema, getPresignedUrlInputSchema, presignedUrlResultSchema, uploadResultSchema };
+export { DeleteFileInput, DiskNotConfiguredError, DownloadResult, FileExistsInput, FileNotFoundError, FileTooLargeError, GetPresignedUrlInput, type IStorageProvider, InvalidDiskError, InvalidFileTypeError, type PresignedUrlConfig, PresignedUrlInvalidExpiryError, PresignedUrlResult, R2BindingNotFoundError, R2PresignedUrlSecretMissingError, STORAGE_TOKENS, type StorageConfig, StorageController, type StorageEntry, StorageManagerService, StorageModule, StorageResponseBodyMissingError, type StorageRouteConfig, StorageService, type StreamingBlobPayloadInputTypes, UploadOptions, UploadResult, deleteFileInputSchema, fileExistsInputSchema, getPresignedUrlInputSchema, presignedUrlResultSchema, uploadResultSchema };
 //# sourceMappingURL=index.d.mts.map

package/dist/storage/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/storage/storage.module.ts","../../src/storage/storage.tokens.ts","../../src/storage/services/storage-manager.service.ts","../../src/storage/services/storage.service.ts","../../src/storage/errors/disk-not-configured.error.ts","../../src/storage/errors/file-not-found.error.ts","../../src/storage/errors/file-too-large.error.ts","../../src/storage/errors/invalid-disk.error.ts","../../src/storage/errors/invalid-file-type.error.ts","../../src/storage/errors/presigned-url-invalid-expiry.error.ts","../../src/storage/errors/storage-provider-not-supported.error.ts","../../src/storage/errors/storage-response-body-missing.error.ts"],"mappings":";;;;;;AAoBA;;KAFY,oBAAA,GAAuB,aAAA;AAAA,cAMtB,aAAA;EAgBoC;;;;;;;;;;;;;;;EAAA,OAAxC,OAAA,CAAQ,OAAA,EAAS,oBAAA,GAAuB,aAAA;EA6BsC;;;;ACjEvF;;;;;;;;;;;;ACQA;;;;EFyDuF,OAA9E,YAAA,CAAa,OAAA,EAAS,kBAAA,CAAmB,oBAAA,IAAwB,aAAA;AAAA;;;;;;;cCjE7D,cAAA;EAAA;;;;;;;;ADcb;;;cELa,qBAAA;EAAA,iBAOQ,OAAA;EAAA,iBANF,SAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,WAAA;cAIE,OAAA,EAAS,aAAA;EFoBmB;;;EAAA,QEZvC,qBAAA;EFyC6E;;;;;;EE7B/E,WAAA,CAAY,QAAA,WAAmB,OAAA,CAAQ,gBAAA;EF6BhB;;;;;;EAAA,QEWf,cAAA;;;AD5EhB;;;EC8FE,aAAA,CAAc,QAAA,WAAmB,YAAA;;;;;;EAajC,OAAA,CAAQ,QAAA;;;AAnGV;;EA2GE,iBAAA,CAAA;AAAA;;;AFrGF;;;;;AAEA;;;;;;;;;AAFA,cGSa,cAAA;EAAA,mBAGU,cAAA,EAAgB,qBAAA;EAAA,mBAEhB,OAAA,EAAS,aAAA;cAFT,cAAA,EAAgB,qBAAA,EAEhB,OAAA,EAAS,aAAA;EHQiB;;;;;;;;EGGzC,MAAA,CACJ,IAAA,EAAM,8BAAA,EACN,YAAA,UACA,OAAA,EAAS,aAAA,EACT,IAAA,YACC,OAAA,CAAQ,YAAA;;;AF5Cb;;;;EE0DQ,QAAA,CAAS,YAAA,UAAsB,IAAA,YAAgB,OAAA,CAAQ,cAAA;;;;;;EAavD,MAAA,CAAO,YAAA,UAAsB,IAAA,YAAgB,OAAA;;AD/DrD;;;;;EC6EQ,MAAA,CAAO,YAAA,UAAsB,IAAA,YAAgB,OAAA;EDSlB;;;;;;;ECM3B,uBAAA,CACJ,YAAA,UACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;EDxFiB;;;;;;;ECmGtB,qBAAA,CACJ,YAAA,UACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;EDzBX;;;;;;;ECoCM,qBAAA,CACJ,YAAA,UACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;;;;AAhHb;;;;;YA4HkB,eAAA,CACd,YAAA,UACA,MAAA,qCACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;EA3HmB;;;;;EAAA,UAyIpB,WAAA,CAAY,IAAA;EA3G+B;;;;;;EAAA,UA2H3C,aAAA,CAAc,YAAA,UAAsB,QAAA;EA/CnC;;;;;;;EAAA,UAmED,2BAAA,CAA4B,IAAA;EA4DnC;;;;;EAAA,UA3CO,iBAAA,CAAkB,SAAA;EA9LE;;;;EAiN9B,iBAAA,CAAA;EAjNqB;;;;;;;;;;;;;;;EAoOf,aAAA,CACJ,IAAA,EAAM,8BAAA,EACN,YAAA,UACA,OAAA,EAAS,IAAA,CAAK,aAAA;IAA2B,IAAA;EAAA,GACzC,IAAA,YACC,OAAA,CAAQ,YAAA;AAAA;;;cCvQA,sBAAA,SAA+B,gBAAA;cAC9B,IAAA;AAAA;;;cCAD,iBAAA,SAA0B,gBAAA;cACzB,IAAA;AAAA;;;cCDD,iBAAA,SAA0B,gBAAA;cACzB,IAAA,UAAc,OAAA;AAAA;;;cCDf,gBAAA,SAAyB,gBAAA;cACxB,IAAA;AAAA;;;cCDD,oBAAA,SAA6B,gBAAA;cAC5B,QAAA;AAAA;;;cCDD,8BAAA,SAAuC,gBAAA;cACtC,SAAA,UAAmB,GAAA,UAAa,GAAA;AAAA;;;cCDjC,gCAAA,SAAyC,gBAAA;cACxC,QAAA;AAAA;;;cCDD,+BAAA,SAAwC,gBAAA;cACvC,IAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/storage/storage.module.ts","../../src/storage/storage.tokens.ts","../../src/storage/services/storage-manager.service.ts","../../src/storage/services/storage.service.ts","../../src/storage/controllers/storage.controller.ts","../../src/storage/errors/disk-not-configured.error.ts","../../src/storage/errors/file-not-found.error.ts","../../src/storage/errors/file-too-large.error.ts","../../src/storage/errors/invalid-disk.error.ts","../../src/storage/errors/invalid-file-type.error.ts","../../src/storage/errors/presigned-url-invalid-expiry.error.ts","../../src/storage/errors/r2-binding-not-found.error.ts","../../src/storage/errors/r2-presigned-url-secret-missing.error.ts","../../src/storage/errors/storage-response-body-missing.error.ts"],"mappings":";;;;;;;;AAoBA;KAFY,oBAAA,GAAuB,aAAA;AAAA,cAQtB,aAAA;EAaa;;;;;;;;;;;;EAAA,OAAjB,OAAA,CAAQ,OAAA,EAAS,oBAAA,GAAuB,aAAA;EA0BC;;;;;;;;AC7DlD;;;;;;;;;ED6DkD,OAAzC,YAAA,CAAa,OAAA,EAAS,kBAAA,CAAmB,oBAAA,IAAwB,aAAA;AAAA;;;;;;;cC7D7D,cAAA;EAAA;;;;;;;;ADcb;;;cEHa,qBAAA;EAAA,iBAOQ,OAAA;EAAA,iBAEA,GAAA;EAAA,iBARF,SAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,WAAA;cAIE,OAAA,EAAS,aAAA,EAET,GAAA,EAAK,UAAA;EFyCwB;;;EAAA,QEjCxC,qBAAA;EFiC6E;;;;;;EErB/E,WAAA,CAAY,QAAA,WAAmB,OAAA,CAAQ,gBAAA;EFqBG;;;;;;EAAA,QEmBlC,cAAA;;ADhFhB;;;;EC8FE,aAAA,CAAc,QAAA,WAAmB,YAAA;;;;;;EAajC,OAAA,CAAQ,QAAA;;AAjGV;;;EAyGE,iBAAA,CAAA;AAAA;;;;AFrGF;;;;;AAEA;;;;;;;;cGOa,cAAA;EAAA,mBAGU,cAAA,EAAgB,qBAAA;EAAA,mBAEhB,OAAA,EAAS,aAAA;cAFT,cAAA,EAAgB,qBAAA,EAEhB,OAAA,EAAS,aAAA;EHOf;;;;;;;;EGIT,MAAA,CACJ,IAAA,EAAM,8BAAA,EACN,YAAA,UACA,OAAA,EAAS,aAAA,EACT,IAAA,YACC,OAAA,CAAQ,YAAA;;;;AF5Cb;;;EE0DQ,QAAA,CAAS,YAAA,UAAsB,IAAA,YAAgB,OAAA,CAAQ,cAAA;;;;;;EAavD,MAAA,CAAO,YAAA,UAAsB,IAAA,YAAgB,OAAA;;;AD7DrD;;;;EC2EQ,MAAA,CAAO,YAAA,UAAsB,IAAA,YAAgB,OAAA;ED7CN;;;;;;;EC4DvC,uBAAA,CACJ,YAAA,UACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;ED3FM;;;;;;;ECsGX,qBAAA,CACJ,YAAA,UACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;ED/EL;;;;;;;EC0FA,qBAAA,CACJ,YAAA,UACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;ED3BX;;;;;;;;EAAA,UCuCgB,eAAA,CACd,YAAA,UACA,MAAA,qCACA,SAAA,WACA,IAAA,YACC,OAAA,CAAQ,kBAAA;EAhIc;;;;;EAAA,UA8If,WAAA,CAAY,IAAA;EA7Hd;;;;;;EAAA,UA6IE,aAAA,CAAc,YAAA,UAAsB,QAAA;EAhGK;;;;;;;EAAA,UAoHzC,2BAAA,CAA4B,IAAA;EAlDnC;;;;;EAAA,UAmEO,iBAAA,CAAkB,SAAA;EA0ClB;;;;EAxBV,iBAAA,CAAA;EAhN8B;;;;;;;;;;;;;;;EAmOxB,aAAA,CACJ,IAAA,EAAM,8BAAA,EACN,YAAA,UACA,OAAA,EAAS,IAAA,CAAK,aAAA;IAA2B,IAAA;EAAA,GACzC,IAAA,YACC,OAAA,CAAQ,YAAA;AAAA;;;;;;AHtPb;;;;;AAEA;;;;cIMa,iBAAA;EAAA,iBAGQ,OAAA;cAAA,OAAA,EAAS,cAAA;EAItB,QAAA,CAAS,GAAA,EAAK,aAAA,GAAgB,OAAA,CAAQ,QAAA;EAoBtC,MAAA,CAAO,GAAA,EAAK,aAAA,GAAgB,OAAA,CAAQ,QAAA;EAiBpC,OAAA,CAAQ,GAAA,EAAK,aAAA,GAAgB,OAAA,CAAQ,QAAA;AAAA;;;cCpEhC,sBAAA,SAA+B,gBAAA;cAC9B,IAAA;AAAA;;;cCAD,iBAAA,SAA0B,gBAAA;cACzB,IAAA;AAAA;;;cCDD,iBAAA,SAA0B,gBAAA;cACzB,IAAA,UAAc,OAAA;AAAA;;;cCDf,gBAAA,SAAyB,gBAAA;cACxB,IAAA;AAAA;;;cCDD,oBAAA,SAA6B,gBAAA;cAC5B,QAAA;AAAA;;;cCDD,8BAAA,SAAuC,gBAAA;cACtC,SAAA,UAAmB,GAAA,UAAa,GAAA;AAAA;;;cCFjC,sBAAA,SAA+B,gBAAA;cAC9B,OAAA;AAAA;;;cCDD,gCAAA,SAAyC,gBAAA;EAAA,WAAA,CAAA;AAAA;;;cCCzC,+BAAA,SAAwC,gBAAA;cACvC,IAAA;AAAA"}

package/dist/storage/index.mjs

@@ -1,3 +1,3 @@
-import { a as InvalidDiskError, c as DiskNotConfiguredError, i as InvalidFileTypeError, n as StorageProviderNotSupportedError, o as FileTooLargeError, r as PresignedUrlInvalidExpiryError, s as FileNotFoundError, t as StorageResponseBodyMissingError } from "../errors-B7hCnXgB.mjs";
-import { a as deleteFileInputSchema, c as StorageManagerService, i as fileExistsInputSchema, l as STORAGE_TOKENS, n as getPresignedUrlInputSchema, o as StorageModule, r as presignedUrlResultSchema, s as StorageService, t as uploadResultSchema } from "../storage-CJ-QOwNv.mjs";
-export { DiskNotConfiguredError, FileNotFoundError, FileTooLargeError, InvalidDiskError, InvalidFileTypeError, PresignedUrlInvalidExpiryError, STORAGE_TOKENS, StorageManagerService, StorageModule, StorageProviderNotSupportedError, StorageResponseBodyMissingError, StorageService, deleteFileInputSchema, fileExistsInputSchema, getPresignedUrlInputSchema, presignedUrlResultSchema, uploadResultSchema };
+import { a as InvalidFileTypeError, c as FileNotFoundError, i as PresignedUrlInvalidExpiryError, l as DiskNotConfiguredError, n as R2PresignedUrlSecretMissingError, o as InvalidDiskError, r as R2BindingNotFoundError, s as FileTooLargeError, t as StorageResponseBodyMissingError } from "../errors-Da3Pz2X7.mjs";
+import { a as deleteFileInputSchema, c as StorageService, i as fileExistsInputSchema, l as StorageManagerService, n as getPresignedUrlInputSchema, o as StorageController, r as presignedUrlResultSchema, s as StorageModule, t as uploadResultSchema, u as STORAGE_TOKENS } from "../storage-1zw-6Yiz.mjs";
+export { DiskNotConfiguredError, FileNotFoundError, FileTooLargeError, InvalidDiskError, InvalidFileTypeError, PresignedUrlInvalidExpiryError, R2BindingNotFoundError, R2PresignedUrlSecretMissingError, STORAGE_TOKENS, StorageController, StorageManagerService, StorageModule, StorageResponseBodyMissingError, StorageService, deleteFileInputSchema, fileExistsInputSchema, getPresignedUrlInputSchema, presignedUrlResultSchema, uploadResultSchema };

package/dist/storage/providers/index.d.mts

@@ -1,6 +1,7 @@
-import { _ as StorageEntry, f as DownloadResult, i as UploadResult, n as StreamingBlobPayloadInputTypes, r as UploadOptions, s as PresignedUrlResult, t as IStorageProvider } from "../../storage-provider.interface-YRtyYBxV.mjs";
+import { t as StratalEnv } from "../../env-D1rcZ8_r.mjs";
+import { _ as StorageEntry, f as DownloadResult, i as UploadResult, n as StreamingBlobPayloadInputTypes, r as UploadOptions, s as PresignedUrlResult, t as IStorageProvider, v as StorageRouteConfig } from "../../storage-provider.interface-Bd6vA4ak.mjs";
 
-//#region src/storage/providers/s3-multipart-provider.interface.d.ts
+//#region src/storage/providers/multipart-provider.interface.d.ts
 /**
  * Options for creating a multipart upload
  */
@@ -9,16 +10,14 @@ interface CreateMultipartOptions {
   contentType?: string;
   /** Cache control header */
   cacheControl?: string;
-  /** Custom S3 metadata */
+  /** Custom metadata */
   metadata?: Record<string, string>;
-  /** S3 object tagging (key=value format) */
-  tagging?: string;
 }
 /**
  * Result of creating a multipart upload
  */
 interface CreateMultipartResult {
-  /** S3 upload ID for subsequent part uploads */
+  /** Upload ID for subsequent part uploads */
   uploadId: string;
   /** Object key */
   key: string;
@@ -27,7 +26,7 @@ interface CreateMultipartResult {
  * Result of uploading a part
  */
 interface UploadPartResult {
-  /** ETag returned by S3 */
+  /** ETag returned by the storage provider */
   etag: string;
   /** Part number */
   partNumber: number;
@@ -45,7 +44,7 @@ interface CompletedPart {
  * Result of completing a multipart upload
  */
 interface CompleteMultipartResult {
-  /** S3 location URL */
+  /** Location URL */
   location?: string;
   /** Object key */
   key: string;
@@ -121,13 +120,12 @@ interface DeleteObjectsResult {
   }[];
 }
 /**
- * S3-specific storage provider interface with multipart upload support
+ * Storage provider interface with multipart upload support
  *
- * Extends the generic IStorageProvider with S3 multipart upload operations.
- * This interface is S3-specific - other providers (GCS, local) would have
- * their own resumable upload interfaces if needed.
+ * Extends the generic IStorageProvider with multipart upload operations
+ * needed by resumable upload protocols like TUS.
  */
-interface IS3MultipartProvider extends IStorageProvider {
+interface IMultipartProvider extends IStorageProvider {
   /**
    * Create a multipart upload
    * @param key - Object key
@@ -160,6 +158,7 @@ interface IS3MultipartProvider extends IStorageProvider {
   abortMultipartUpload(key: string, uploadId: string): Promise<void>;
   /**
    * List parts of a multipart upload
+   * Requires s3Compat configuration on the storage entry
    * @param key - Object key
    * @param uploadId - Upload ID
    * @param partNumberMarker - Optional marker for pagination
@@ -168,6 +167,7 @@ interface IS3MultipartProvider extends IStorageProvider {
   listParts(key: string, uploadId: string, partNumberMarker?: string): Promise<ListPartsResult>;
   /**
    * List all in-progress multipart uploads
+   * Requires s3Compat configuration on the storage entry
    * @param keyMarker - Optional key marker for pagination
    * @param uploadIdMarker - Optional upload ID marker for pagination
    * @returns List of uploads
@@ -188,86 +188,46 @@ interface IS3MultipartProvider extends IStorageProvider {
    */
   deleteObjects(keys: string[]): Promise<DeleteObjectsResult>;
   /**
-   * Get the bucket name
-   * @returns Bucket name from configuration
+   * Get the bucket/binding name
+   * @returns Bucket or binding name from configuration
    */
   getBucket(): string;
 }
 //#endregion
-//#region src/storage/providers/s3-storage.provider.d.ts
+//#region src/storage/providers/r2-storage.provider.d.ts
 /**
- * S3 Storage Provider
- * Implements storage operations using AWS SDK for S3-compatible storage
- * Works with AWS S3, Cloudflare R2, MinIO, and other S3-compatible services
+ * R2 Storage Provider
+ * Implements storage operations using native Cloudflare R2 bindings
  *
- * Implements IS3MultipartProvider for multipart upload support needed by TUS
+ * Implements IMultipartProvider for multipart upload support needed by TUS.
+ * Tracks multipart upload metadata using companion R2 objects so that
+ * listParts/listMultipartUploads work in all environments (local, test, prod).
  */
-declare class S3StorageProvider implements IS3MultipartProvider {
-  private readonly client;
-  private readonly presigningClient;
+declare class R2StorageProvider implements IMultipartProvider {
+  private readonly config;
   private readonly bucket;
-  private readonly disk;
-  constructor(config: StorageEntry);
+  private readonly env;
+  private readonly routeBasePath;
+  constructor(config: StorageEntry, bucket: R2Bucket, env: StratalEnv, routeConfig?: StorageRouteConfig);
   upload(body: StreamingBlobPayloadInputTypes, path: string, options: UploadOptions): Promise<UploadResult>;
   download(path: string): Promise<DownloadResult>;
   delete(path: string): Promise<void>;
   exists(path: string): Promise<boolean>;
   getPresignedUrl(path: string, method: 'GET' | 'PUT' | 'DELETE' | 'HEAD', expiresIn: number): Promise<PresignedUrlResult>;
-  /**
-   * Chunked upload for streaming data without known size
-   * Uses @aws-sdk/lib-storage for multipart upload handling
-   *
-   * Benefits:
-   * - Handles unknown Content-Length automatically
-   * - Automatic retry on transient failures
-   * - Cleanup of partial uploads on error
-   * - Works with S3-compatible storage (R2, MinIO, RustFS)
-   *
-   * @param body - Content to upload (stream or buffer)
-   * @param path - Full path including disk root
-   * @param options - Upload options (mimeType required, size optional)
-   * @returns Upload result with metadata
-   */
   chunkedUpload(body: StreamingBlobPayloadInputTypes, path: string, options: Omit<UploadOptions, 'size'> & {
     size?: number;
   }): Promise<UploadResult>;
-  /**
-   * Get the bucket name
-   */
   getBucket(): string;
-  /**
-   * Get object metadata without downloading the body
-   */
   headObject(key: string): Promise<HeadObjectResult | null>;
-  /**
-   * Delete multiple objects in a single request
-   */
   deleteObjects(keys: string[]): Promise<DeleteObjectsResult>;
-  /**
-   * Create a multipart upload
-   */
   createMultipartUpload(key: string, options?: CreateMultipartOptions): Promise<CreateMultipartResult>;
-  /**
-   * Upload a part to an existing multipart upload
-   */
   uploadPart(key: string, uploadId: string, partNumber: number, body: Uint8Array): Promise<UploadPartResult>;
-  /**
-   * Complete a multipart upload
-   */
   completeMultipartUpload(key: string, uploadId: string, parts: CompletedPart[]): Promise<CompleteMultipartResult>;
-  /**
-   * Abort a multipart upload
-   */
   abortMultipartUpload(key: string, uploadId: string): Promise<void>;
-  /**
-   * List parts of a multipart upload
-   */
-  listParts(key: string, uploadId: string, partNumberMarker?: string): Promise<ListPartsResult>;
-  /**
-   * List all in-progress multipart uploads
-   */
-  listMultipartUploads(keyMarker?: string, uploadIdMarker?: string): Promise<ListMultipartUploadsResult>;
+  listParts(_key: string, uploadId: string, partNumberMarker?: string): Promise<ListPartsResult>;
+  listMultipartUploads(keyMarker?: string, _uploadIdMarker?: string): Promise<ListMultipartUploadsResult>;
+  private cleanupTrackingObjects;
 }
 //#endregion
-export { CompleteMultipartResult, CompletedPart, CreateMultipartOptions, CreateMultipartResult, DeleteObjectsResult, HeadObjectResult, IS3MultipartProvider, IStorageProvider, ListMultipartUploadsResult, ListPartsResult, MultipartUploadInfo, PartInfo, S3StorageProvider, StreamingBlobPayloadInputTypes, UploadPartResult };
+export { CompleteMultipartResult, CompletedPart, CreateMultipartOptions, CreateMultipartResult, DeleteObjectsResult, HeadObjectResult, IMultipartProvider, IStorageProvider, ListMultipartUploadsResult, ListPartsResult, MultipartUploadInfo, PartInfo, R2StorageProvider, StreamingBlobPayloadInputTypes, UploadPartResult };
 //# sourceMappingURL=index.d.mts.map

package/dist/storage/providers/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../../src/storage/providers/s3-multipart-provider.interface.ts","../../../src/storage/providers/s3-storage.provider.ts"],"mappings":";;;;;AAKA;UAAiB,sBAAA;;EAEf,WAAA;EAAA;EAEA,YAAA;EAEA;EAAA,QAAA,GAAW,MAAA;EAEX;EAAA,OAAA;AAAA;AAMF;;;AAAA,UAAiB,qBAAA;EAIZ;EAFH,QAAA;EAQ+B;EAN/B,GAAA;AAAA;;AAgBF;;UAViB,gBAAA;EAYf;EAVA,IAAA;EAkBe;EAhBf,UAAA;AAAA;;;AA0BF;UApBiB,aAAA;;EAEf,IAAA;EAoBA;EAlBA,UAAA;AAAA;;;AA4BF;UAtBiB,uBAAA;;EAEf,QAAA;EAsBA;EApBA,GAAA;AAAA;;;;UAMe,QAAA;EAwBmB;EAtBlC,UAAA;EA4BgB;EA1BhB,IAAA;EAwBA;EAtBA,IAAA;AAAA;;;AA8BF;UAxBiB,eAAA;;EAEf,KAAA,EAAO,QAAA;EAwBP;EAtBA,WAAA;EAwBA;EAtBA,oBAAA;AAAA;;;AAgCF;UA1BiB,mBAAA;;EAEf,GAAA;EA0BA;EAxBA,QAAA;EA4BA;EA1BA,SAAA,GAAY,IAAA;AAAA;;AAgCd;;UA1BiB,0BAAA;EA0BmB;EAxBlC,OAAA,EAAS,mBAAA;EA4BT;EA1BA,WAAA;EA4BE;EA1BF,aAAA;EA2BS;EAzBT,kBAAA;AAAA;;;;UAMe,gBAAA;EA4CZ;EA1CH,IAAA;EAyDW;EAvDX,WAAA;EAmES;EAjET,QAAA,GAAW,MAAA;AAAA;;;;UAMI,mBAAA;EA2FZ;EAzFH,OAAA;EAqGyB;EAnGzB,MAAA;IACE,GAAA;IACA,IAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWa,oBAAA,SAA6B,gBAAA;EA0B1C;;;;;;EAfF,qBAAA,CACE,GAAA,UACA,OAAA,GAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAyBT;;;;;;;;EAfF,UAAA,CACE,GAAA,UACA,QAAA,UACA,UAAA,UACA,IAAA,EAAM,UAAA,GACL,OAAA,CAAQ,gBAAA;EAoB0C;;;;;;;EAXrD,uBAAA,CACE,GAAA,UACA,QAAA,UACA,KAAA,EAAO,aAAA,KACN,OAAA,CAAQ,uBAAA;EA6BT;;;;;EAtBF,oBAAA,CAAqB,GAAA,UAAa,QAAA,WAAmB,OAAA;EAoC5B;;;;;;;EA3BzB,SAAA,CACE,GAAA,UACA,QAAA,UACA,gBAAA,YACC,OAAA,CAAQ,eAAA;EAyCF;;;;ACxMX;;EDuKE,oBAAA,CACE,SAAA,WACA,cAAA,YACC,OAAA,CAAQ,0BAAA;ECpKS;;;;;;EDgLpB,UAAA,CAAW,GAAA,WAAc,OAAA,CAAQ,gBAAA;ECxGL;;;;;;EDgH5B,aAAA,CAAc,IAAA,aAAiB,OAAA,CAAQ,mBAAA;ECrC5B;;;;ED+CX,SAAA;AAAA;;;;;;;;;;cCxMW,iBAAA,YAA6B,oBAAA;EAAA,iBACvB,MAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,MAAA;EAAA,iBACA,IAAA;cAEL,MAAA,EAAQ,YAAA;EAuBd,MAAA,CACJ,IAAA,EAAM,8BAAA,EACN,IAAA,UACA,OAAA,EAAS,aAAA,GACR,OAAA,CAAQ,YAAA;EAuBL,QAAA,CAAS,IAAA,WAAe,OAAA,CAAQ,cAAA;EAsBhC,MAAA,CAAO,IAAA,WAAe,OAAA;EAStB,MAAA,CAAO,IAAA,WAAe,OAAA;EAetB,eAAA,CACJ,IAAA,UACA,MAAA,qCACA,SAAA,WACC,OAAA,CAAQ,kBAAA;EDnHD;AAMZ;;;;;AAUA;;;;;AAUA;;;;ECoIQ,aAAA,CACJ,IAAA,EAAM,8BAAA,EACN,IAAA,UACA,OAAA,EAAS,IAAA,CAAK,aAAA;IAA2B,IAAA;EAAA,IACxC,OAAA,CAAQ,YAAA;EDlIP;;AAMN;ECwKE,SAAA,CAAA;;;;EAOM,UAAA,CAAW,GAAA,WAAc,OAAA,CAAQ,gBAAA;ED3KvC;;;EC4LM,aAAA,CAAc,IAAA,aAAiB,OAAA,CAAQ,mBAAA;EDpL9B;;;EC+MT,qBAAA,CACJ,GAAA,UACA,OAAA,GAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EDhNX;;;ECqOM,UAAA,CACJ,GAAA,UACA,QAAA,UACA,UAAA,UACA,IAAA,EAAM,UAAA,GACL,OAAA,CAAQ,gBAAA;EDtOK;;AAMlB;ECqPQ,uBAAA,CACJ,GAAA,UACA,QAAA,UACA,KAAA,EAAO,aAAA,KACN,OAAA,CAAQ,uBAAA;;;;EAwBL,oBAAA,CAAqB,GAAA,UAAa,QAAA,WAAmB,OAAA;ED7Q3D;;;EC0RM,SAAA,CACJ,GAAA,UACA,QAAA,UACA,gBAAA,YACC,OAAA,CAAQ,eAAA;ED1RO;AAMpB;;EC4SQ,oBAAA,CACJ,SAAA,WACA,cAAA,YACC,OAAA,CAAQ,0BAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../src/storage/providers/multipart-provider.interface.ts","../../../src/storage/providers/r2-storage.provider.ts"],"mappings":";;;;;;;UAKiB,sBAAA;EAAsB;EAErC,WAAA;EAIiB;EAFjB,YAAA;EAAA;EAEA,QAAA,GAAW,MAAA;AAAA;;;AAMb;UAAiB,qBAAA;;EAEf,QAAA;EAEG;EAAH,GAAA;AAAA;;;;UAMe,gBAAA;EAUa;EAR5B,IAAA;EAUA;EARA,UAAA;AAAA;;;;UAMe,aAAA;EAoBA;EAlBf,IAAA;;EAEA,UAAA;AAAA;;;;UAMe,uBAAA;EAsBA;EApBf,QAAA;;EAEA,GAAA;AAAA;;;;UAMe,QAAA;EAkBK;EAhBpB,UAAA;EAsBkC;EApBlC,IAAA;EA0BgB;EAxBhB,IAAA;AAAA;;;;UAMe,eAAA;EAwBA;EAtBf,KAAA,EAAO,QAAA;;EAEP,WAAA;EAsBA;EApBA,oBAAA;AAAA;;;;UAMe,mBAAA;EA0BA;EAxBf,GAAA;;EAEA,QAAA;EAwBA;EAtBA,SAAA,GAAY,IAAA;AAAA;;;;UAMG,0BAAA;EA0BmB;EAxBlC,OAAA,EAAS,mBAAA;EAwByB;EAtBlC,WAAA;EA0BA;EAxBA,aAAA;EA0BE;EAxBF,kBAAA;AAAA;;AAmCF;;UA7BiB,gBAAA;EA0CH;EAxCZ,IAAA;EAyCG;EAvCH,WAAA;EAsDW;EApDX,QAAA,GAAW,MAAA;AAAA;;;;UAMI,mBAAA;EAgFZ;EA9EH,OAAA;EA0FG;EAxFH,MAAA;IACE,GAAA;IACA,IAAA;IACA,OAAA;EAAA;AAAA;;;;;;;UAUa,kBAAA,SAA2B,gBAAA;EAc/B;;;;;;EAHX,qBAAA,CACE,GAAA,UACA,OAAA,GAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAeR;;;;;;;;EALH,UAAA,CACE,GAAA,UACA,QAAA,UACA,UAAA,UACA,IAAA,EAAM,UAAA,GACL,OAAA,CAAQ,gBAAA;EAoBX;;;;;;;EAXA,uBAAA,CACE,GAAA,UACA,QAAA,UACA,KAAA,EAAO,aAAA,KACN,OAAA,CAAQ,uBAAA;EAqBR;;;;;EAdH,oBAAA,CAAqB,GAAA,UAAa,QAAA,WAAmB,OAAA;EA0B1C;;;;;;;;EAhBX,SAAA,CACE,GAAA,UACA,QAAA,UACA,gBAAA,YACC,OAAA,CAAQ,eAAA;EA0CX;;;;;;AClNF;EDiLE,oBAAA,CACE,SAAA,WACA,cAAA,YACC,OAAA,CAAQ,0BAAA;;;;;;;EAYX,UAAA,CAAW,GAAA,WAAc,OAAA,CAAQ,gBAAA;EChLtB;;;;;;EDwLX,aAAA,CAAc,IAAA,aAAiB,OAAA,CAAQ,mBAAA;EChIpC;;;;ED0IH,SAAA;AAAA;;;;;;;;;;;cClNW,iBAAA,YAA6B,kBAAA;EAAA,iBAIrB,MAAA;EAAA,iBACA,MAAA;EAAA,iBACA,GAAA;EAAA,iBALF,aAAA;cAGE,MAAA,EAAQ,YAAA,EACR,MAAA,EAAQ,QAAA,EACR,GAAA,EAAK,UAAA,EACtB,WAAA,GAAc,kBAAA;EAKV,MAAA,CACJ,IAAA,EAAM,8BAAA,EACN,IAAA,UACA,OAAA,EAAS,aAAA,GACR,OAAA,CAAQ,YAAA;EAuBL,QAAA,CAAS,IAAA,WAAe,OAAA,CAAQ,cAAA;EAoBhC,MAAA,CAAO,IAAA,WAAe,OAAA;EAItB,MAAA,CAAO,IAAA,WAAe,OAAA;EAKtB,eAAA,CACJ,IAAA,UACA,MAAA,qCACA,SAAA,WACC,OAAA,CAAQ,kBAAA;EAmBL,aAAA,CACJ,IAAA,EAAM,8BAAA,EACN,IAAA,UACA,OAAA,EAAS,IAAA,CAAK,aAAA;IAA2B,IAAA;EAAA,IACxC,OAAA,CAAQ,YAAA;EAwEX,SAAA,CAAA;EAIM,UAAA,CAAW,GAAA,WAAc,OAAA,CAAQ,gBAAA;EAYjC,aAAA,CAAc,IAAA,aAAiB,OAAA,CAAQ,mBAAA;EAavC,qBAAA,CACJ,GAAA,UACA,OAAA,GAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAsBL,UAAA,CACJ,GAAA,UACA,QAAA,UACA,UAAA,UACA,IAAA,EAAM,UAAA,GACL,OAAA,CAAQ,gBAAA;EAiBL,uBAAA,CACJ,GAAA,UACA,QAAA,UACA,KAAA,EAAO,aAAA,KACN,OAAA,CAAQ,uBAAA;EAgBL,oBAAA,CAAqB,GAAA,UAAa,QAAA,WAAmB,OAAA;EAOrD,SAAA,CACJ,IAAA,UACA,QAAA,UACA,gBAAA,YACC,OAAA,CAAQ,eAAA;EA4BL,oBAAA,CACJ,SAAA,WACA,eAAA,YACC,OAAA,CAAQ,0BAAA;EAAA,QAiCG,sBAAA;AAAA"}

package/dist/storage/providers/index.mjs

@@ -1,2 +1,2 @@
-import { t as S3StorageProvider } from "../../s3-storage.provider-BAhHDMI3.mjs";
-export { S3StorageProvider };
+import { t as R2StorageProvider } from "../../r2-storage.provider-Co6F0ZYV.mjs";
+export { R2StorageProvider };