UplApi
uplim.api.v1.InternalPortalService
postGetBucketServingConfig
Serving configuration (CORS / policy / privacy) for a bucket. Read on the worker's hot path; cached briefly.
postListObjectsForS3
ListObjectsV2 backing query: flat (recursive) or directory-mode listing over a bucket's uploads in lexicographic S3-key order with keyset pagination. Same trust model and internal-token guard as ResolvePortalRequest.
postPutBucketServingConfigForS3
Backs the S3 Put/DeleteBucketCors and Put/DeleteBucketPolicy APIs. Requires an ADMIN grant on the bucket for the verified access key.
postResolvePortalRequest
Resolve one portal/S3 request to a serve/deny decision. Never returns a Connect error for ordinary not-found/denied outcomes — those are the `denied` result — so the worker can map them per protocol (portal 404 vs S3 XML NoSuchKey/AccessDenied).