objectstore

type AzureCredentials struct {
	// ConnectionString is a full Azure Storage connection string. It carries its
	// own account name, key, and endpoint, so Config.AccountName is not required
	// when it is set. Also the simplest way to target the Azurite emulator.
	ConnectionString string

	// AccountKey is the storage account shared key, used with Config.AccountName.
	AccountKey string

	// SASToken authorizes requests via a shared access signature appended to the
	// service URL; the client is otherwise unauthenticated.
	SASToken string
}

type Backend string

type Bucket interface {
	ReadAll(ctx context.Context, key string) ([]byte, error)
	WriteAll(ctx context.Context, key string, p []byte, opts *blob.WriterOptions) error
	Download(ctx context.Context, key string, w io.Writer, opts *blob.ReaderOptions) error
	Upload(ctx context.Context, key string, r io.Reader, opts *blob.WriterOptions) error

	NewReader(ctx context.Context, key string, opts *blob.ReaderOptions) (*Reader, error)
	NewRangeReader(ctx context.Context, key string, offset, length int64, opts *blob.ReaderOptions) (*Reader, error)
	NewWriter(ctx context.Context, key string, opts *blob.WriterOptions) (*Writer, error)

	Copy(ctx context.Context, dstKey, srcKey string, opts *blob.CopyOptions) error
	Delete(ctx context.Context, key string) error
	Exists(ctx context.Context, key string) (bool, error)
	Attributes(ctx context.Context, key string) (*blob.Attributes, error)
	SignedURL(ctx context.Context, key string, opts *blob.SignedURLOptions) (string, error)
	IsAccessible(ctx context.Context) (bool, error)

	List(opts *blob.ListOptions) *ListIterator
	ListPage(ctx context.Context, pageToken []byte, pageSize int, opts *blob.ListOptions) ([]*blob.ListObject, []byte, error)

	As(i any) bool
	ErrorAs(err error, i any) bool
	Close() error
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	Name      string
	Namespace string
	Subsystem string

	Backend    Backend
	BucketName string

	// S3 and S3-compatible backends. Endpoint overrides the default service
	// URL (S3-compatibles, emulators); PathStyle forces path-style addressing.
	Region        string
	Endpoint      string
	PathStyle     bool
	S3Credentials *S3Credentials

	// GCS backends. UniverseDomain selects a non-default universe (sovereign
	// clouds); Endpoint (above) may point at an emulator.
	UniverseDomain string
	GCSCredentials *GCSCredentials

	// Azure Blob backends. AccountName identifies the storage account (not
	// required when AzureCredentials.ConnectionString is set). StorageDomain
	// overrides the default blob.core.windows.net (sovereign clouds) or points at
	// an emulator host such as "127.0.0.1:10000". Protocol defaults to "https";
	// set it to "http" for an emulator served over plain HTTP. AzureEmulator
	// selects local-emulator (Azurite) addressing; leave it false for real Azure.
	AccountName      string
	StorageDomain    string
	Protocol         string
	AzureEmulator    bool
	AzureCredentials *AzureCredentials

	Tracer     *trace.Tracer
	Registerer prometheus.Registerer
	Logger     *slog.Logger
}

type GCSCredentials struct {
	// JSON is the raw service-account key JSON. When empty (or GCSCredentials
	// is nil), the SDK falls back to Application Default Credentials (Workload
	// Identity, metadata server, GOOGLE_APPLICATION_CREDENTIALS).
	JSON []byte
}

type ListIterator struct {
	// contains filtered or unexported fields
}

type Option func(*clientOptions)

type Reader struct {
	*blob.Reader
	// contains filtered or unexported fields
}

type S3Credentials struct {
	AccessKeyID     string
	SecretAccessKey string
	SessionToken    string // optional; STS / temporary credentials
}

type Writer struct {
	*blob.Writer
	// contains filtered or unexported fields
}