gcs

type Config struct {
	// Bucket is the bucket's name, which must already exist: there is no
	// create-if-missing here, and nothing asks the bucket about itself. The
	// permission-minimal shape #241 made optional for the S3 backend is the only
	// shape this one has, so the deployment identity holds object permissions and
	// nothing bucket-level — deploy/gcp grants roles/storage.objectUser to the
	// processes that write and roles/storage.objectViewer to the one that only
	// reads (#240 slice 2). The cost is that a
	// misspelled bucket or a missing IAM binding surfaces on first use rather
	// than at startup — where it is still named, not swallowed, because absence
	// is checked rather than assumed (see the absence method).
	Bucket string

	// Client overrides the ADC-authenticated client New would build. Tests point
	// it at a fake-GCS container; the caller owns closing it.
	Client *storage.Client
}

type Store struct {
	// contains filtered or unexported fields
}