s3gateway

type Deps struct {
	// BucketFor resolves (namespace, Bucket name) → the substrate bucket view. ok=false
	// when no such Bucket exists for that namespace (⇒ NoSuchBucket).
	BucketFor func(ns v1.NamespaceName, bucket string) (blob.Bucket, bool)
	// Buckets lists a namespace's Bucket resources; HeadBucket and ListBuckets answer
	// from it, keeping only the Buckets the caller is bound to.
	Buckets func(ctx context.Context, ns v1.NamespaceName) ([]v1.Bucket, error)
	// PDP is the cedar authorizer; every backend op is a PEP on it (s3::read/s3::write).
	PDP authz.Authorizer
	// Master is the node master secret keypairs are derived from (ADR-0085). Required.
	Master []byte
	// External is the optional external-keypair store (the untrusted SigV4 edge); nil ⇒
	// in-platform only.
	External ExternalKeys
	// Listen is the node-private bind address (e.g. 127.0.0.1:9000).
	Listen string
	// MaxUploadBytes caps a single buffered (multipart/put) object; 0 ⇒ defaultMaxUpload.
	MaxUploadBytes int64
	// Logger is the server logger; nil ⇒ slog.Default(). The master secret is NEVER logged.
	Logger *slog.Logger
}

type ExternalKeys interface {
	Lookup(access string) (secret string, namespace string, ok bool)
}

type Keypair struct{ AccessKey, SecretKey string }

type Server struct {
	// contains filtered or unexported fields
}