Mint a short-lived signed target to upload to path (direct-to-storage).
The destination object path (relative to the disk root/bucket).
Optionaloptions: TemporaryUploadUrlOptions
Expiry and the content type/length to bind into the signature.
The signed upload target (url, method, required headers, expiry).
Mint a short-lived signed URL to download path.
The object path (relative to the disk root/bucket).
Optionaloptions: TemporaryUrlOptions
Expiry and response-header overrides.
The signed download URL.
Optional capability implemented by drivers that can mint short-lived signed URLs (object stores: S3/R2/OSS/COS, GCS, Azure Blob). It lets a client upload straight to storage and download private objects without proxying bytes through the app. Local/agnostic code should feature-detect with supportsSignedUrls rather than assume a driver implements it.