@cloudbitmaps/core 0.1.0-rc.0

package/dist/s3/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/drivers/s3/keys.ts","../../src/drivers/s3/s3-errors.ts","../../src/drivers/s3/cold.ts","../../src/drivers/s3/registry.ts"],"names":["res","ListObjectsV2Command","GetObjectCommand","PutObjectCommand"],"mappings":";;;;;;;;AAcA,IAAM,MAAA,GAAS,OAAA;AACf,IAAM,eAAA,GAAkB,MAAA;AAGxB,SAAS,WAAW,MAAA,EAAoC;AACtD,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,EAAA;AACjC,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,YAAA,EAAc,EAAE,CAAA;AAC/C,EAAA,OAAO,OAAA,KAAY,EAAA,GAAK,EAAA,GAAK,CAAA,EAAG,OAAO,CAAA,CAAA,CAAA;AACzC;AAOO,SAAS,kBAAkB,MAAA,EAAgD;AAChF,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,KAAA,MAAW,MAAM,MAAA,EAAQ;AACvB,IAAA,IAAI,EAAA,CAAG,UAAA,CAAW,CAAC,CAAA,GAAI,EAAA,EAAM;AAC3B,MAAA,MAAM,IAAI,gBAAgB,4CAA4C,CAAA;AAAA,IACxE;AAAA,EACF;AACA,EAAA,KAAA,MAAW,OAAA,IAAW,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACvC,IAAA,IAAI,OAAA,KAAY,GAAA,IAAO,OAAA,KAAY,IAAA,EAAM;AACvC,MAAA,MAAM,IAAI,eAAA;AAAA,QACR,CAAA,mDAAA,EAAsD,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,OAC9E;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAMO,SAAS,mBAAA,CAAoB,QAA4B,GAAA,EAAyB;AACvF,EAAA,kBAAA,CAAmB,GAAG,CAAA;AACtB,EAAA,OAAO,CAAA,EAAG,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG,aAAA,CAAc,GAAA,CAAI,SAAS,CAAC,CAAA,UAAA,EAAa,GAAA,CAAI,OAAO,CAAA,CAAA,CAAA;AACrF;AAGO,SAAS,aAAA,CAAc,QAA4B,GAAA,EAAqB;AAC7E,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,GAAA,CAAI,UAAU,CAAA,IAAK,GAAA,CAAI,aAAa,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,+CAAA,EAAkD,GAAA,CAAI,UAAU,CAAA,CAAE,CAAA;AAAA,EAC9F;AACA,EAAA,OAAO,CAAA,EAAG,oBAAoB,MAAA,EAAQ,GAAG,CAAC,CAAA,EAAG,GAAA,CAAI,UAAU,CAAA,EAAG,MAAM,CAAA,CAAA;AACtE;AAQO,SAAS,eAAe,MAAA,EAAoC;AACjE,EAAA,OAAO,CAAA,EAAG,UAAA,CAAW,MAAM,CAAC,CAAA,SAAA,CAAA;AAC9B;AAGO,SAAS,iBAAA,CAAkB,QAA4B,GAAA,EAAyB;AACrF,EAAA,kBAAA,CAAmB,GAAG,CAAA;AACtB,EAAA,OAAO,CAAA,EAAG,cAAA,CAAe,MAAM,CAAC,CAAA,EAAG,aAAA,CAAc,GAAA,CAAI,SAAS,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,OAAO,GAAG,eAAe,CAAA,CAAA;AAClG;AAGO,SAAS,kBAAA,CAAmB,QAA4B,SAAA,EAA4B;AACzF,EAAA,MAAM,IAAA,GAAO,eAAe,MAAM,CAAA;AAClC,EAAA,OAAO,SAAA,KAAc,SAAY,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,EAAG,aAAA,CAAc,SAAS,CAAC,CAAA,CAAA,CAAA;AAC5E;AAOO,SAAS,gBAAA,CAAiB,QAA4B,SAAA,EAAsC;AACjG,EAAA,MAAM,IAAA,GAAO,eAAe,MAAM,CAAA;AAClC,EAAA,IAAI,CAAC,SAAA,CAAU,UAAA,CAAW,IAAI,CAAA,IAAK,CAAC,SAAA,CAAU,QAAA,CAAS,eAAe,CAAA,EAAG,OAAO,IAAA;AAChF,EAAA,MAAM,IAAA,GAAO,UAAU,KAAA,CAAM,IAAA,CAAK,QAAQ,SAAA,CAAU,MAAA,GAAS,gBAAgB,MAAM,CAAA;AACnF,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC9B,EAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,IAAA;AACtB,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAClC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA;AACpC,EAAA,IAAI,QAAQ,MAAA,KAAW,CAAA,IAAK,QAAQ,QAAA,CAAS,GAAG,GAAG,OAAO,IAAA;AAC1D,EAAA,MAAM,SAAA,GAAY,MAAA,KAAW,iBAAA,GAAoB,MAAA,GAAY,MAAA;AAC7D,EAAA,MAAM,GAAA,GAAkB,EAAE,OAAA,EAAS,SAAA,EAAU;AAC7C,EAAA,IAAI;AACF,IAAA,kBAAA,CAAmB,GAAG,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,sBAAA,CAAuB,eAAuB,SAAA,EAAkC;AAC9F,EAAA,IAAI,CAAC,SAAA,CAAU,UAAA,CAAW,aAAa,CAAA,IAAK,CAAC,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA;AAChF,EAAA,MAAM,MAAA,GAAS,UAAU,KAAA,CAAM,aAAA,CAAc,QAAQ,SAAA,CAAU,MAAA,GAAS,OAAO,MAAM,CAAA;AACrF,EAAA,IAAI,CAAC,gBAAA,CAAiB,IAAA,CAAK,MAAM,GAAG,OAAO,IAAA;AAC3C,EAAA,MAAM,UAAA,GAAa,OAAO,MAAM,CAAA;AAChC,EAAA,OAAO,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA,GAAI,UAAA,GAAa,IAAA;AACzD;;;ACzGO,SAAS,qBAAqB,GAAA,EAAuB;AAC1D,EAAA,OAAO,UAAU,GAAG,CAAA,KAAM,oBAAA,IAAwB,UAAA,CAAW,GAAG,CAAA,KAAM,GAAA;AACxE;AASO,SAAS,sBAAsB,GAAA,EAAuB;AAC3D,EAAA,OACE,oBAAA,CAAqB,GAAG,CAAA,IACxB,SAAA,CAAU,GAAG,CAAA,KAAM,4BAAA,IACnB,UAAA,CAAW,GAAG,CAAA,KAAM,GAAA;AAExB;AAGO,SAAS,WAAW,GAAA,EAAuB;AAChD,EAAA,MAAM,IAAA,GAAO,UAAU,GAAG,CAAA;AAC1B,EAAA,OAAO,SAAS,WAAA,IAAe,IAAA,KAAS,UAAA,IAAc,UAAA,CAAW,GAAG,CAAA,KAAM,GAAA;AAC5E;AAGO,SAAS,eAAe,GAAA,EAAuB;AACpD,EAAA,OAAO,UAAU,GAAG,CAAA,KAAM,cAAA,IAAkB,UAAA,CAAW,GAAG,CAAA,KAAM,GAAA;AAClE;AAOO,SAAS,YAAY,GAAA,EAAuB;AAEjD,EAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,IAAK,UAAA,CAAW,GAAG,CAAA,IAAK,cAAA,CAAe,GAAG,CAAA,EAAG,OAAO,KAAA;AACjF,EAAA,OACE,SAAA,CAAU,GAAG,CAAA,KAAM,UAAA,IACnB,YAAA,CAAa,GAAG,CAAA,IAChB,kBAAA,CAAmB,GAAG,CAAA,IACtB,cAAA,CAAe,GAAG,CAAA;AAEtB;AAMO,SAAS,sBAAsB,YAAA,EAAsD;AAC1F,EAAA,IAAI,YAAA,KAAiB,QAAW,OAAO,MAAA;AACvC,EAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,IAAA,CAAK,YAAY,CAAA;AAC7C,EAAA,IAAI,KAAA,KAAU,MAAM,OAAO,MAAA;AAC3B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,OAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA,GAAI,KAAA,GAAQ,MAAA;AAC/C;;;ACbA,IAAM,aAAA,GAAgB,IAAI,IAAA,GAAO,IAAA;AAEjC,IAAM,YAAA,GAAe,GAAA;AAmBd,IAAM,eAAN,MAA0C;AAAA,EAC9B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,cAAA;AAAA,EACA,SAAA;AAAA,EAEjB,YAAY,OAAA,EAA8B;AACxC,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,MAAA,GAAS,iBAAA,CAAkB,OAAA,CAAQ,MAAM,CAAA;AAC9C,IAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,CAAI,OAAA,CAAQ,aAAa,aAAA,EAAe,CAAA,GAAI,OAAO,IAAI,CAAA;AAGlF,IAAA,IAAA,CAAK,cAAA,GAAiB,OAAA,CAAQ,cAAA,IAAkB,aAAA,GAAgB,YAAA;AAChE,IAAA,IAAA,CAAK,SAAA,GAAY,KAAK,GAAA,CAAI,aAAA,EAAe,KAAK,IAAA,CAAK,IAAA,CAAK,cAAA,GAAiB,YAAY,CAAC,CAAA;AAAA,EACxF;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,OAAO,EAAE,SAAA,EAAW,IAAA,EAAM,gBAAgB,IAAA,CAAK,cAAA,EAAgB,gBAAgB,IAAA,EAAK;AAAA,EACtF;AAAA,EAEA,MAAM,YAAA,CACJ,GAAA,EACA,KAAA,EAC2C;AAC3C,IAAA,MAAM,SAAA,GAAY,aAAA,CAAc,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAChD,IAAA,MAAM,OAAO,IAAI,eAAA;AAAA,MACf,IAAA,CAAK,MAAA;AAAA,MACL,IAAA,CAAK,MAAA;AAAA,MACL,SAAA;AAAA,MACA,IAAA,CAAK,SAAA;AAAA,MACL,IAAA,CAAK;AAAA,KACP;AACA,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,IAAI,CAAA;AAChB,MAAA,OAAO,MAAM,KAAK,MAAA,EAAO;AAAA,IAC3B,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAK,KAAA,EAAM;AAGjB,MAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,EAAG;AAC9B,QAAA,MAAM,IAAI,kBAAA;AAAA,UACR,CAAA,wCAAA,EAA2C,GAAA,CAAI,OAAO,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,IAAK,oBAAA,CAAqB,GAAG,CAAA,IAAK,eAAA,CAAgB,GAAG,CAAA,EAAG;AAC/E,QAAA,MAAM,GAAA;AAAA,MACR;AACA,MAAA,MAAM,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,QAAA,CAAS,GAAA,EAAa,MAAA,EAAgB,MAAA,EAAqC;AAC/E,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,IAAK,SAAS,CAAA,EAAG;AACtF,MAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,qBAAA,EAAwB,MAAM,CAAA,QAAA,EAAW,MAAM,CAAA,CAAE,CAAA;AAAA,IAC7E;AACA,IAAA,MAAM,SAAA,GAAY,aAAA,CAAc,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAChD,IAAA,IAAI,MAAA,KAAW,CAAA,EAAG,OAAO,IAAI,WAAW,CAAC,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,QAC5B,IAAI,gBAAA,CAAiB;AAAA,UACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,UACb,GAAA,EAAK,SAAA;AAAA,UACL,OAAO,CAAA,MAAA,EAAS,MAAM,CAAA,CAAA,EAAI,MAAA,GAAS,SAAS,CAAC,CAAA;AAAA,SAC9C;AAAA,OACH;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEpC,MAAA,IAAI,KAAA,CAAM,WAAW,MAAA,EAAQ;AAC3B,QAAA,MAAM,IAAI,eAAA;AAAA,UACR,UAAU,MAAM,CAAA,EAAA,EAAK,SAAS,MAAM,CAAA,qBAAA,EAAwB,MAAM,MAAM,CAAA,EAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,KAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAA,CAAK,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAAA,IAClC;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,CAAQ,GAAA,EAAa,QAAA,EAAgE;AACzF,IAAA,MAAM,SAAA,GAAY,aAAA,CAAc,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAChD,IAAA,IAAI,YAAY,CAAA,EAAG;AAEjB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,UAC7B,IAAI,kBAAkB,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,GAAA,EAAK,WAAW;AAAA,SAC/D;AACA,QAAA,OAAO,EAAE,OAAO,IAAI,UAAA,CAAW,CAAC,CAAA,EAAG,IAAA,EAAM,IAAA,CAAK,aAAA,IAAiB,CAAA,EAAE;AAAA,MACnE,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,IAAA,CAAK,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAAA,MAClC;AAAA,IACF;AACA,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,QAC5B,IAAI,gBAAA,CAAiB,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,SAAA,EAAW,KAAA,EAAO,CAAA,OAAA,EAAU,QAAQ,CAAA,CAAA,EAAI;AAAA,OAC3F;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACpC,MAAA,IAAI,IAAA,GAAO,qBAAA,CAAsB,GAAA,CAAI,YAAY,CAAA;AACjD,MAAA,IAAI,SAAS,KAAA,CAAA,EAAW;AAItB,QAAA,IAAI,KAAA,CAAM,WAAW,QAAA,EAAU;AAC7B,UAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,YAC7B,IAAI,kBAAkB,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,GAAA,EAAK,WAAW;AAAA,WAC/D;AACA,UAAA,IAAA,GAAO,IAAA,CAAK,iBAAiB,KAAA,CAAM,MAAA;AAAA,QACrC,CAAA,MAAO;AACL,UAAA,IAAA,GAAO,KAAA,CAAM,MAAA;AAAA,QACf;AAAA,MACF;AACA,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAA,CAAK,YAAA,CAAa,GAAA,EAAK,GAAG,CAAA;AAAA,IAClC;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,GAAA,EAA4B;AAEvC,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,QAChB,IAAI,mBAAA,CAAoB,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,aAAA,CAAc,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA,EAAG;AAAA,OACvF;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,OAAO,KAAK,GAAA,EAAwC;AAClD,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AACnD,IAAA,IAAI,KAAA;AACJ,IAAA,GAAG;AACD,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,GAAA,GAAM,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,UACtB,IAAI,oBAAA,CAAqB;AAAA,YACvB,QAAQ,IAAA,CAAK,MAAA;AAAA,YACb,MAAA,EAAQ,MAAA;AAAA,YACR,iBAAA,EAAmB;AAAA,WACpB;AAAA,SACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,QAAA,IAAY,EAAC,EAAG;AACpC,QAAA,IAAI,GAAA,CAAI,QAAQ,MAAA,EAAW;AAC3B,QAAA,MAAM,UAAA,GAAa,sBAAA,CAAuB,MAAA,EAAQ,GAAA,CAAI,GAAG,CAAA;AACzD,QAAA,IAAI,eAAe,IAAA,EAAM;AACvB,UAAA,MAAM,EAAE,SAAA,EAAW,GAAA,CAAI,WAAW,OAAA,EAAS,GAAA,CAAI,SAAS,UAAA,EAAW;AAAA,QACrE;AAAA,MACF;AACA,MAAA,KAAA,GAAQ,GAAA,CAAI,WAAA,KAAgB,IAAA,GAAO,GAAA,CAAI,qBAAA,GAAwB,MAAA;AAAA,IACjE,SAAS,KAAA,KAAU,MAAA;AAAA,EACrB;AAAA;AAAA,EAGQ,YAAA,CAAa,KAAc,GAAA,EAAsB;AACvD,IAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG,OAAO,GAAA;AACnC,IAAA,IAAI,UAAA,CAAW,GAAG,CAAA,EAAG;AACnB,MAAA,OAAO,IAAI,cAAc,CAAA,oBAAA,EAAuB,GAAA,CAAI,OAAO,CAAA,CAAA,EAAI,GAAA,CAAI,UAAU,CAAA,CAAE,CAAA;AAAA,IACjF;AAGA,IAAA,IAAI,cAAA,CAAe,GAAG,CAAA,EAAG;AACvB,MAAA,OAAO,IAAI,gBAAgB,CAAA,wBAAA,EAA2B,GAAA,CAAI,OAAO,CAAA,CAAA,EAAI,GAAA,CAAI,UAAU,CAAA,CAAE,CAAA;AAAA,IACvF;AACA,IAAA,OAAO,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,SAAS,GAAA,EAAuB;AACtC,IAAA,IAAI,WAAA,CAAY,GAAG,CAAA,EAAG;AACpB,MAAA,OAAO,IAAI,cAAA;AAAA,QACT,CAAA,oBAAA,EAAwB,GAAA,EAAkC,IAAA,IAAQ,SAAS,CAAA,CAAA;AAAA,QAC3E,EAAE,OAAO,GAAA;AAAI,OACf;AAAA,IACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACF;AAGA,SAAS,WAAA,CAAY,OAA8B,KAAA,EAA2B;AAC5E,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAK,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,IAAA,GAAA,CAAI,GAAA,CAAI,GAAG,MAAM,CAAA;AACjB,IAAA,MAAA,IAAU,CAAA,CAAE,MAAA;AAAA,EACd;AACA,EAAA,OAAO,GAAA;AACT;AASA,IAAM,kBAAN,MAA0C;AAAA,EASxC,WAAA,CACmB,MAAA,EACA,MAAA,EACA,SAAA,EACA,WACA,cAAA,EACjB;AALiB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,GAAA,cAAA;AAAA,EAChB;AAAA,EALgB,MAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,cAAA;AAAA,EAbF,IAAA,GAAa,WAAW,QAAQ,CAAA;AAAA,EAChC,UAAwB,EAAC;AAAA,EAClC,UAAA,GAAa,CAAA;AAAA,EACb,KAAA,GAAQ,CAAA;AAAA,EACR,QAAA;AAAA,EACA,UAAA,GAAa,CAAA;AAAA,EACJ,QAA4D,EAAC;AAAA,EAU9E,MAAM,MAAM,KAAA,EAAkC;AAC5C,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,IAAA,CAAK,SAAS,KAAA,CAAM,MAAA;AACpB,IAAA,IAAI,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,cAAA,EAAgB;AAEpC,MAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,8BAAA,EAAiC,IAAA,CAAK,cAAc,CAAA,CAAE,CAAA;AAAA,IAClF;AACA,IAAA,IAAA,CAAK,IAAA,CAAK,OAAO,KAAK,CAAA;AACtB,IAAA,IAAA,CAAK,OAAA,CAAQ,KAAK,KAAK,CAAA;AACvB,IAAA,IAAA,CAAK,cAAc,KAAA,CAAM,MAAA;AACzB,IAAA,IAAI,KAAK,UAAA,IAAc,IAAA,CAAK,SAAA,EAAW,MAAM,KAAK,SAAA,EAAU;AAAA,EAC9D;AAAA;AAAA,EAGA,MAAc,SAAA,GAA2B;AACvC,IAAA,IAAI,IAAA,CAAK,aAAa,MAAA,EAAW;AAC/B,MAAA,MAAMA,IAAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,QAC5B,IAAI,6BAA6B,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,GAAA,EAAK,IAAA,CAAK,SAAA,EAAW;AAAA,OAC/E;AACA,MAAA,IAAIA,IAAAA,CAAI,aAAa,MAAA,EAAW;AAC9B,QAAA,MAAM,IAAI,eAAe,+CAA+C,CAAA;AAAA,MAC1E;AACA,MAAA,IAAA,CAAK,WAAWA,IAAAA,CAAI,QAAA;AAAA,IACtB;AACA,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,KAAK,UAAU,CAAA;AACtD,IAAA,IAAA,CAAK,QAAQ,MAAA,GAAS,CAAA;AACtB,IAAA,IAAA,CAAK,UAAA,GAAa,CAAA;AAClB,IAAA,IAAA,CAAK,UAAA,IAAc,CAAA;AACnB,IAAA,IAAI,IAAA,CAAK,aAAa,YAAA,EAAc;AAGlC,MAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,iCAAA,EAAoC,YAAY,CAAA,WAAA,CAAa,CAAA;AAAA,IACzF;AACA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC5B,IAAI,iBAAA,CAAkB;AAAA,QACpB,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,KAAK,IAAA,CAAK,SAAA;AAAA,QACV,UAAU,IAAA,CAAK,QAAA;AAAA,QACf,YAAY,IAAA,CAAK,UAAA;AAAA,QACjB,IAAA,EAAM;AAAA,OACP;AAAA,KACH;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,IAAI,IAAA,EAAM,UAAA,EAAY,IAAA,CAAK,UAAA,EAAY,CAAA;AAAA,EACjE;AAAA;AAAA,EAGA,MAAM,MAAA,GAAoD;AACxD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AACrC,IAAA,IAAI,IAAA,CAAK,aAAa,MAAA,EAAW;AAC/B,MAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,QAChB,IAAI,gBAAA,CAAiB;AAAA,UACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,UACb,KAAK,IAAA,CAAK,SAAA;AAAA,UACV,IAAA,EAAM,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,KAAK,UAAU,CAAA;AAAA,UAC/C,WAAA,EAAa;AAAA;AAAA,SACd;AAAA,OACH;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,KAAA,EAAO,MAAA,EAAO;AAAA,IACpC;AACA,IAAA,IAAI,IAAA,CAAK,UAAA,GAAa,CAAA,EAAG,MAAM,KAAK,SAAA,EAAU;AAC9C,IAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,MAChB,IAAI,8BAAA,CAA+B;AAAA,QACjC,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,KAAK,IAAA,CAAK,SAAA;AAAA,QACV,UAAU,IAAA,CAAK,QAAA;AAAA,QACf,eAAA,EAAiB,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAM;AAAA,QACrC,WAAA,EAAa;AAAA;AAAA,OACd;AAAA,KACH;AACA,IAAA,IAAA,CAAK,QAAA,GAAW,MAAA;AAChB,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,KAAA,EAAO,MAAA,EAAO;AAAA,EACpC;AAAA;AAAA;AAAA,EAIA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,IAAA,CAAK,aAAa,MAAA,EAAW;AACjC,IAAA,MAAM,KAAK,IAAA,CAAK,QAAA;AAChB,IAAA,IAAA,CAAK,QAAA,GAAW,MAAA;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,QAChB,IAAI,2BAAA,CAA4B,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAA,CAAK,SAAA,EAAW,QAAA,EAAU,EAAA,EAAI;AAAA,OAC5F;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF,CAAA;AAMA,eAAe,QAAQ,IAAA,EAAiD;AACtE,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,MAAM,IAAI,cAAc,qCAAqC,CAAA;AAAA,EAC/D;AACA,EAAA,OAAO,KAAK,oBAAA,EAAqB;AACnC;AC9UA,IAAM,aAAA,GAAgB,IAAI,IAAA,GAAO,IAAA;AAEjC,IAAM,mBAAA,GAAsB,CAAA;AAE5B,IAAM,qBAAA,GAAwB,EAAA;AAgBvB,IAAM,mBAAN,MAAkD;AAAA,EACtC,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,GAAA;AAAA,EAEjB,YAAY,OAAA,EAAkC;AAC5C,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,MAAA,GAAS,iBAAA,CAAkB,OAAA,CAAQ,MAAM,CAAA;AAC9C,IAAA,IAAA,CAAK,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,MAAc,KAAK,GAAA,EAAI,CAAA;AAAA,EACpD;AAAA,EAEA,YAAA,GAAwB;AACtB,IAAA,OAAO,EAAE,YAAY,IAAA,EAAK;AAAA,EAC5B;AAAA,EAEA,MAAM,IAAI,GAAA,EAAiD;AACzD,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,kBAAkB,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAC,CAAA;AACtE,IAAA,OAAO,WAAW,CAAC,OAAA,CAAQ,IAAI,OAAA,GAAU,OAAA,CAAQ,IAAI,MAAA,GAAS,IAAA;AAAA,EAChE;AAAA,EAEA,MAAM,MAAA,CAAO,GAAA,EAAiB,MAAA,EAAsD;AAClF,IAAA,yBAAA,CAA0B,MAAM,CAAA;AAChC,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAC9C,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,IAAI,OAAA,KAAY,IAAA,IAAQ,CAAC,OAAA,CAAQ,IAAI,OAAA,EAAS;AAC5C,MAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,wCAAA,EAA2C,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,IACvF;AAEA,IAAA,MAAM,KAAA,GAAQ,OAAO,OAAA,GAAU,iBAAA,CAAkB,QAAQ,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA;AAC5E,IAAA,MAAM,GAAA,GAAwB;AAAA,MAC5B,OAAA,EAAS,KAAA;AAAA,MACT,QAAQ,aAAA,CAAc,GAAA,EAAK,QAAQ,IAAA,CAAK,GAAA,IAAO,KAAK;AAAA,KACtD;AAGA,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,GAAA,EAAK,GAAA,EAAK,OAAA,GAAU,EAAE,OAAA,EAAS,OAAA,CAAQ,IAAA,EAAK,GAAI,EAAE,WAAA,EAAa,KAAK,CAAA;AACtF,IAAA,OAAO,EAAE,KAAA,EAAM;AAAA,EACjB;AAAA,EAEA,MAAM,cAAA,CACJ,GAAA,EACA,QAAA,EACA,KAAA,EAC2B;AAC3B,IAAA,qBAAA,CAAsB,KAAK,CAAA;AAC3B,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAC9C,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,IAAI,OAAA,KAAY,QAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,KAAA,KAAU,QAAA,EAAU;AACpF,MAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,oCAAA,EAAuC,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,IACnF;AACA,IAAA,MAAM,QAAQ,MAAA,CAAO,iBAAA,CAAkB,QAAQ,GAAA,CAAI,MAAM,IAAI,CAAC,CAAA;AAC9D,IAAA,MAAM,GAAA,GAAwB;AAAA,MAC5B,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,mBAAmB,OAAA,CAAQ,GAAA,CAAI,QAAQ,KAAA,EAAO,IAAA,CAAK,GAAA,EAAI,EAAG,KAAK;AAAA,KACzE;AAEA,IAAA,MAAM,IAAA,CAAK,OAAO,GAAA,EAAK,GAAA,EAAK,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAM,CAAA;AACrD,IAAA,OAAO,EAAE,KAAA,EAAM;AAAA,EACjB;AAAA,EAEA,OAAO,KAAK,SAAA,EAAmD;AAC7D,IAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA;AACxD,IAAA,IAAI,KAAA;AACJ,IAAA,GAAG;AACD,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,GAAA,GAAM,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,UACtB,IAAIC,oBAAAA,CAAqB;AAAA,YACvB,QAAQ,IAAA,CAAK,MAAA;AAAA,YACb,MAAA,EAAQ,MAAA;AAAA,YACR,iBAAA,EAAmB;AAAA,WACpB;AAAA,SACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,MACzB;AAKA,MAAA,MAAM,IAAA,GAAA,CAAQ,IAAI,QAAA,IAAY,IAC3B,GAAA,CAAI,CAAC,QAAQ,GAAA,CAAI,GAAG,EACpB,MAAA,CAAO,CAAC,MAAmB,CAAA,KAAM,MAAA,IAAa,iBAAiB,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA,KAAM,IAAI,CAAA;AAC1F,MAAA,MAAM,OAAO,MAAM,kBAAA;AAAA,QAAmB,IAAA;AAAA,QAAM,qBAAA;AAAA,QAAuB,CAAC,GAAA,KAClE,IAAA,CAAK,OAAA,CAAQ,GAAG;AAAA,OAClB;AACA,MAAA,KAAA,MAAW,WAAW,IAAA,EAAM;AAC1B,QAAA,IAAI,WAAW,CAAC,OAAA,CAAQ,IAAI,OAAA,EAAS,MAAM,QAAQ,GAAA,CAAI,MAAA;AAAA,MACzD;AACA,MAAA,KAAA,GAAQ,GAAA,CAAI,WAAA,KAAgB,IAAA,GAAO,GAAA,CAAI,qBAAA,GAAwB,MAAA;AAAA,IACjE,SAAS,KAAA,KAAU,MAAA;AAAA,EACrB;AAAA,EAEA,MAAM,OAAO,GAAA,EAAgC;AAC3C,IAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAI9C,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,mBAAA,EAAqB,OAAA,EAAA,EAAW;AAC9D,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACtC,MAAA,IAAI,OAAA,KAAY,IAAA,IAAQ,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS;AAC7C,MAAA,MAAM,QAAQ,MAAA,CAAO,iBAAA,CAAkB,QAAQ,GAAA,CAAI,MAAM,IAAI,CAAC,CAAA;AAC9D,MAAA,MAAM,GAAA,GAAwB;AAAA,QAC5B,OAAA,EAAS,IAAA;AAAA,QACT,MAAA,EAAQ,EAAE,GAAG,OAAA,CAAQ,GAAA,CAAI,QAAQ,KAAA,EAAO,SAAA,EAAW,IAAA,CAAK,GAAA,EAAI;AAAE,OAChE;AACA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,OAAO,GAAA,EAAK,GAAA,EAAK,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAM,CAAA;AACrD,QAAA;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,oBAAA,CAAqB,GAAG,CAAA,EAAG;AAC/B,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF;AACA,IAAA,MAAM,IAAI,kBAAA;AAAA,MACR,CAAA,yCAAA,EAA4C,IAAI,OAAO,CAAA,cAAA;AAAA,KACzD;AAAA,EACF;AAAA;AAAA,EAGA,MAAc,QACZ,SAAA,EACyD;AACzD,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAIC,gBAAAA,CAAiB,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,SAAA,EAAW,CAAC,CAAA;AAAA,IAC5F,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,IAAA;AAC5B,MAAA,MAAM,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,IACzB;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,aAAA,IAAiB,CAAA,IAAK,aAAA,EAAe;AAC5C,MAAA,MAAM,IAAI,cAAA;AAAA,QACR,CAAA,gBAAA,EAAmB,GAAA,CAAI,aAAa,CAAA,cAAA,EAAiB,aAAa,CAAA,CAAA;AAAA,OACpE;AAAA,IACF;AACA,IAAA,IAAI,GAAA,CAAI,SAAS,MAAA,EAAW;AAC1B,MAAA,MAAM,IAAI,cAAA,CAAe,CAAA,mCAAA,EAAsC,SAAS,CAAA,CAAE,CAAA;AAAA,IAC5E;AACA,IAAA,MAAM,KAAA,GAAQ,MACZ,GAAA,CAAI,IAAA,CACJ,oBAAA,EAAqB;AACvB,IAAA,IAAI,KAAA,CAAM,SAAS,aAAA,EAAe;AAChC,MAAA,MAAM,IAAI,cAAA,CAAe,CAAA,gBAAA,EAAmB,MAAM,MAAM,CAAA,cAAA,EAAiB,aAAa,CAAA,CAAA,CAAG,CAAA;AAAA,IAC3F;AACA,IAAA,MAAM,GAAA,GAAM,sBAAsB,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,SAAS,CAAA;AAChF,IAAA,IAAI,IAAI,IAAA,KAAS,MAAA,IAAa,GAAA,CAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AAEnD,MAAA,MAAM,IAAI,cAAA;AAAA,QACR,8DAA8D,SAAS,CAAA;AAAA,OACzE;AAAA,IACF;AACA,IAAA,OAAO,EAAE,GAAA,EAAK,IAAA,EAAM,GAAA,CAAI,IAAA,EAAK;AAAA,EAC/B;AAAA;AAAA,EAGA,MAAc,MAAA,CACZ,SAAA,EACA,GAAA,EACA,IAAA,EACe;AACf,IAAA,MAAM,OAAO,MAAA,CAAO,IAAA,CAAK,yBAAA,CAA0B,GAAG,GAAG,MAAM,CAAA;AAC/D,IAAA,IAAI,IAAA,CAAK,SAAS,aAAA,EAAe;AAG/B,MAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,gBAAA,EAAmB,KAAK,MAAM,CAAA,cAAA,EAAiB,aAAa,CAAA,CAAA,CAAG,CAAA;AAAA,IAC3F;AACA,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,QAChB,IAAIC,gBAAAA,CAAiB;AAAA,UACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,UACb,GAAA,EAAK,SAAA;AAAA,UACL,IAAA;AAAA,UACA,WAAA,EAAa,kBAAA;AAAA,UACb,WAAA,EAAa,aAAA,IAAiB,IAAA,GAAO,IAAA,CAAK,WAAA,GAAc,KAAA,CAAA;AAAA,UACxD,OAAA,EAAS,SAAA,IAAa,IAAA,GAAO,IAAA,CAAK,OAAA,GAAU,KAAA;AAAA,SAC7C;AAAA,OACH;AAAA,IACF,SAAS,GAAA,EAAK;AAEZ,MAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,EAAG;AAC9B,QAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,0BAAA,EAA6B,SAAS,CAAA,CAAE,CAAA;AAAA,MACvE;AACA,MAAA,MAAM,IAAA,CAAK,SAAS,GAAG,CAAA;AAAA,IACzB;AAAA,EACF;AAAA;AAAA,EAGQ,SAAS,GAAA,EAAuB;AACtC,IAAA,IAAI,WAAA,CAAY,GAAG,CAAA,EAAG;AACpB,MAAA,OAAO,IAAI,cAAA;AAAA,QACT,CAAA,oBAAA,EAAwB,GAAA,EAAkC,IAAA,IAAQ,SAAS,CAAA,CAAA;AAAA,QAC3E,EAAE,OAAO,GAAA;AAAI,OACf;AAAA,IACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["/**\n * Logical-ref → S3 object-key mapping for {@link S3ColdDriver}.\n *\n * Pure string logic with no SDK dependency, so it's unit-testable without S3/MinIO. Mirrors the LocalFs\n * layout (`<namespace>/segments/<segment>.<gen>.crbm`) under an optional caller prefix, and re-validates\n * names at the boundary (defense in depth, even though the engine already validates — S2). The default\n * (absent) namespace maps to `_default`, which can't collide with a real namespace (the grammar forbids a\n * leading underscore).\n */\nimport { ValidationError } from '@/core/errors';\nimport { validateSegmentRef } from '@/core/validate';\nimport type { GenKey, SegmentRef } from '@/core/ports';\nimport { DEFAULT_NAMESPACE, namespacePart } from '../_shared/keys';\n\nconst SUFFIX = '.crbm';\nconst REGISTRY_SUFFIX = '.reg';\n\n/** Normalize an optional caller prefix to either `''` or `trimmed/` (no leading/trailing slashes). */\nfunction prefixPart(prefix: string | undefined): string {\n  if (prefix === undefined) return '';\n  const trimmed = prefix.replace(/^\\/+|\\/+$/g, '');\n  return trimmed === '' ? '' : `${trimmed}/`;\n}\n\n/**\n * Validate the caller-supplied key prefix (trusted config, but make it a real containment boundary):\n * reject control characters and `.`/`..` path segments so a prefix can't traverse out of its intended space.\n * Returns it unchanged (the key builders normalize slashes). Shared by the S3 cold + registry drivers.\n */\nexport function normalizeS3Prefix(prefix: string | undefined): string | undefined {\n  if (prefix === undefined) return undefined;\n  for (const ch of prefix) {\n    if (ch.charCodeAt(0) < 0x20) {\n      throw new ValidationError('prefix must not contain control characters');\n    }\n  }\n  for (const segment of prefix.split('/')) {\n    if (segment === '.' || segment === '..') {\n      throw new ValidationError(\n        `prefix must not contain \".\" or \"..\" path segments: ${JSON.stringify(prefix)}`,\n      );\n    }\n  }\n  return prefix;\n}\n\n/**\n * The S3 key prefix shared by all of a segment's generations: `<prefix><ns>/segments/<segment>.`. Used\n * both as the `ListObjectsV2` prefix and as the string stripped by {@link parseGenerationFromKey}.\n */\nexport function segmentObjectPrefix(prefix: string | undefined, ref: SegmentRef): string {\n  validateSegmentRef(ref);\n  return `${prefixPart(prefix)}${namespacePart(ref.namespace)}/segments/${ref.segment}.`;\n}\n\n/** The full S3 key of one `.crbm` generation: `<segmentPrefix><gen>.crbm`. */\nexport function coldObjectKey(prefix: string | undefined, key: GenKey): string {\n  if (!Number.isInteger(key.generation) || key.generation < 0) {\n    throw new ValidationError(`generation must be a non-negative integer; got ${key.generation}`);\n  }\n  return `${segmentObjectPrefix(prefix, key)}${key.generation}${SUFFIX}`;\n}\n\n// ─── Registry keys ({@link S3RegistryDriver}) ───────────────────────────────────────────────────────────\n// Registry objects live under a **registry-first** prefix (`<prefix>registry/<ns>/<segment>.reg`) — separate\n// from the namespace-first cold layout — so discovery is a single `ListObjectsV2` over `registry/` (all\n// namespaces) or `registry/<ns>/` (one), never entangled with the `.crbm` payload objects.\n\n/** The S3 key prefix under which every registry object lives: `<prefix>registry/`. */\nexport function registryPrefix(prefix: string | undefined): string {\n  return `${prefixPart(prefix)}registry/`;\n}\n\n/** The full S3 key of one segment's registry object: `<prefix>registry/<ns>/<segment>.reg`. */\nexport function registryObjectKey(prefix: string | undefined, ref: SegmentRef): string {\n  validateSegmentRef(ref);\n  return `${registryPrefix(prefix)}${namespacePart(ref.namespace)}/${ref.segment}${REGISTRY_SUFFIX}`;\n}\n\n/** The `ListObjectsV2` prefix for discovery: registry-wide, or scoped to one namespace. */\nexport function registryListPrefix(prefix: string | undefined, namespace?: string): string {\n  const base = registryPrefix(prefix);\n  return namespace === undefined ? base : `${base}${namespacePart(namespace)}/`;\n}\n\n/**\n * Parse a `<prefix>registry/<ns>/<segment>.reg` key back to its {@link SegmentRef}, or `null` if it doesn't\n * match (a stray/foreign object under the prefix, or one whose parsed ref fails the name grammar). `_default`\n * maps back to the absent namespace; a segment name can't contain `/`, so the split is unambiguous.\n */\nexport function parseRegistryKey(prefix: string | undefined, objectKey: string): SegmentRef | null {\n  const base = registryPrefix(prefix);\n  if (!objectKey.startsWith(base) || !objectKey.endsWith(REGISTRY_SUFFIX)) return null;\n  const rest = objectKey.slice(base.length, objectKey.length - REGISTRY_SUFFIX.length);\n  const slash = rest.indexOf('/');\n  if (slash < 0) return null;\n  const nsPart = rest.slice(0, slash);\n  const segment = rest.slice(slash + 1);\n  if (segment.length === 0 || segment.includes('/')) return null;\n  const namespace = nsPart === DEFAULT_NAMESPACE ? undefined : nsPart;\n  const ref: SegmentRef = { segment, namespace };\n  try {\n    validateSegmentRef(ref); // reject a hostile/foreign key that isn't a valid ref\n  } catch {\n    return null;\n  }\n  return ref;\n}\n\n/**\n * Parse a generation number out of a full object key, given its segment prefix, or `null` if it doesn't\n * match. Canonical decimal only — no leading zeros (so `…s.07.crbm` can't alias `…s.7.crbm`) and within\n * safe-integer range. This also rejects a *different* segment whose name merely shares the prefix (e.g. a\n * key for segment `s.x` won't parse under segment `s`'s prefix, since its middle isn't all digits).\n */\nexport function parseGenerationFromKey(segmentPrefix: string, objectKey: string): number | null {\n  if (!objectKey.startsWith(segmentPrefix) || !objectKey.endsWith(SUFFIX)) return null;\n  const middle = objectKey.slice(segmentPrefix.length, objectKey.length - SUFFIX.length);\n  if (!/^(0|[1-9]\\d*)$/.test(middle)) return null;\n  const generation = Number(middle);\n  return Number.isSafeInteger(generation) ? generation : null;\n}\n","/**\n * Pure helpers for classifying S3 SDK errors + parsing response headers (Phase 3c; transient class 4b).\n *\n * Kept SDK-free and side-effect-free (they only read structural shapes — `err.name`,\n * `$metadata.httpStatusCode`, a `Content-Range` string) so the subtle S3-specific translation logic is\n * unit-testable without a live MinIO/S3 or even the AWS SDK. Shared AWS shapes come from `_shared/aws-errors`.\n */\nimport {\n  errorName,\n  httpStatus,\n  isNetworkOrTimeout,\n  isSdkRetryable,\n  isServerSide,\n} from '../_shared/aws-errors';\n\n/** A conditional `If-None-Match: *` PUT lost the write-once race (the object already existed). */\nexport function isPreconditionFailed(err: unknown): boolean {\n  return errorName(err) === 'PreconditionFailed' || httpStatus(err) === 412;\n}\n\n/**\n * A conditional write (`If-None-Match: *` / `If-Match: <etag>`) lost the race — **either** outcome S3 uses:\n * the precondition evaluated false (`412 PreconditionFailed`), **or** S3 rejected concurrent conditional\n * writes to the same key to prevent a lost update (`409 ConditionalRequestConflict`, which AWS documents and\n * asks you to retry). Both mean \"you lost; re-read and retry\" — so both must map to `WriteConflictError` and\n * route through the caller's OCC path, never a blind transient retry (which would just replay a doomed PUT).\n */\nexport function isConditionalConflict(err: unknown): boolean {\n  return (\n    isPreconditionFailed(err) ||\n    errorName(err) === 'ConditionalRequestConflict' ||\n    httpStatus(err) === 409\n  );\n}\n\n/** The object / generation does not exist (GetObject → `NoSuchKey`, HeadObject → `NotFound`; both 404). */\nexport function isNotFound(err: unknown): boolean {\n  const name = errorName(err);\n  return name === 'NoSuchKey' || name === 'NotFound' || httpStatus(err) === 404;\n}\n\n/** A range request started past EOF (HTTP 416). */\nexport function isInvalidRange(err: unknown): boolean {\n  return errorName(err) === 'InvalidRange' || httpStatus(err) === 416;\n}\n\n/**\n * A transient S3 fault that is safe to retry: throttling (`SlowDown` / 503), any 5xx, a dropped/timed-out\n * connection, or anything the SDK itself marks retryable. Excludes the deterministic outcomes above\n * (412/404/416) — those are caller-meaningful and must never be retried/reclassified.\n */\nexport function isTransient(err: unknown): boolean {\n  // A conditional-write conflict (412/409) is caller-meaningful OCC, not a blind-retryable transient.\n  if (isConditionalConflict(err) || isNotFound(err) || isInvalidRange(err)) return false;\n  return (\n    errorName(err) === 'SlowDown' ||\n    isServerSide(err) ||\n    isNetworkOrTimeout(err) ||\n    isSdkRetryable(err)\n  );\n}\n\n/**\n * Parse the total object size out of a `Content-Range: bytes <start>-<end>/<total>` header, or `undefined`\n * if absent/unparseable/unsafe. The total is the part after the final `/`.\n */\nexport function totalFromContentRange(contentRange: string | undefined): number | undefined {\n  if (contentRange === undefined) return undefined;\n  const match = /\\/(\\d+)\\s*$/.exec(contentRange);\n  if (match === null) return undefined;\n  const total = Number(match[1]);\n  return Number.isSafeInteger(total) ? total : undefined;\n}\n","/**\n * `S3ColdDriver` — an {@link IColdDriver} over S3-compatible object storage (Phase 3c).\n *\n * Works with AWS S3 and any compatible backend (MinIO, etc.) via the official `@aws-sdk/client-s3`, which\n * is an **optional peer dependency** — only consumers of `cloud-roaring/s3` install it. The client is\n * **injected** (dependency injection): the driver owns no credential/region/endpoint logic, so it's thin,\n * testable against MinIO (point a client at its endpoint), and reuses the caller's existing client.\n *\n * Generations are write-once immutable objects: a conditional `PutObject` with `If-None-Match: *` makes the\n * publish atomic — a second write to the same key fails with `WriteConflictError`, never a silent overwrite\n * (C13), the cloud analogue of the LocalFs atomic `link`. **This requires a backend that honors\n * `If-None-Match: *`** (AWS S3 — GA Aug 2024; recent MinIO): a backend that silently ignored the\n * precondition would break write-once immutability. **Writes stream (Phase 4f):** the object is uploaded in\n * constant memory — a small object is a single conditional `PutObject`; a large one is a **multipart upload**\n * (parts flushed as the codec writes, freed as they go) finished with a conditional `CompleteMultipartUpload`,\n * so the daemon's footprint stays ~one part regardless of segment size, up to the advertised `maxObjectBytes`\n * (default `partBytes × 10,000` — S3's per-upload part limit). Drivers may use `node:crypto`; only `core/`\n * is bound by the determinism lint.\n */\nimport { createHash, type Hash } from 'node:crypto';\nimport {\n  AbortMultipartUploadCommand,\n  CompleteMultipartUploadCommand,\n  CreateMultipartUploadCommand,\n  DeleteObjectCommand,\n  GetObjectCommand,\n  HeadObjectCommand,\n  ListObjectsV2Command,\n  PutObjectCommand,\n  UploadPartCommand,\n  type S3Client,\n} from '@aws-sdk/client-s3';\nimport type { BlobSink } from '@/core/blob';\nimport {\n  NotFoundError,\n  TransientError,\n  ValidationError,\n  WriteConflictError,\n  isNotFoundError,\n  isValidationError,\n  isWriteConflictError,\n} from '@/core/errors';\nimport type { ColdCaps, GenKey, IColdDriver, SegmentRef } from '@/core/ports';\nimport {\n  coldObjectKey,\n  normalizeS3Prefix,\n  parseGenerationFromKey,\n  segmentObjectPrefix,\n} from './keys';\nimport {\n  isConditionalConflict,\n  isInvalidRange,\n  isNotFound,\n  isTransient,\n  totalFromContentRange,\n} from './s3-errors';\n\n/** Part size for multipart uploads. ≥ the S3 5 MiB minimum; an object that fits in one part uses a single\n * conditional PUT instead (no multipart overhead, strongest write-once). Peak write memory ≈ one part. */\nconst S3_PART_BYTES = 8 * 1024 * 1024;\n/** S3 hard limit: a multipart upload has at most 10,000 parts. This × the part size is the real object ceiling. */\nconst S3_MAX_PARTS = 10_000;\n\nexport interface S3ColdDriverOptions {\n  /** A constructed S3 client (point its `endpoint` at MinIO for local/integration use). */\n  readonly client: S3Client;\n  /** Target bucket (must already exist). */\n  readonly bucket: string;\n  /** Optional key prefix under which all objects live (e.g. `cloudroaring/`). */\n  readonly prefix?: string;\n  /**\n   * Largest object this driver will write/advertise. Default = `partBytes × 10,000` (≈ 80 GiB at the default\n   * 8 MiB part) — the honest ceiling reachable within S3's 10,000-part limit. Set it higher and `partBytes`\n   * auto-grows so 10,000 parts still cover it (raising peak write memory to ~one part); up to the 5 TiB S3 max.\n   */\n  readonly maxObjectBytes?: number;\n  /** Multipart part size in bytes (default 8 MiB; clamped to the S3 5 MiB minimum). Tunes peak write memory. */\n  readonly partBytes?: number;\n}\n\nexport class S3ColdDriver implements IColdDriver {\n  private readonly client: S3Client;\n  private readonly bucket: string;\n  private readonly prefix: string | undefined;\n  private readonly maxObjectBytes: number;\n  private readonly partBytes: number;\n\n  constructor(options: S3ColdDriverOptions) {\n    this.client = options.client;\n    this.bucket = options.bucket;\n    this.prefix = normalizeS3Prefix(options.prefix);\n    const requestedPart = Math.max(options.partBytes ?? S3_PART_BYTES, 5 * 1024 * 1024);\n    // Default the object cap to what the requested part size can actually cover within S3's 10,000-part limit;\n    // if a larger cap is requested, grow the part size to keep it reachable (so the advertised cap is honest).\n    this.maxObjectBytes = options.maxObjectBytes ?? requestedPart * S3_MAX_PARTS;\n    this.partBytes = Math.max(requestedPart, Math.ceil(this.maxObjectBytes / S3_MAX_PARTS));\n  }\n\n  capabilities(): ColdCaps {\n    return { rangeRead: true, maxObjectBytes: this.maxObjectBytes, conditionalPut: true };\n  }\n\n  async putImmutable(\n    key: GenKey,\n    write: (sink: BlobSink) => Promise<void>,\n  ): Promise<{ size: number; sha256: string }> {\n    const objectKey = coldObjectKey(this.prefix, key); // validates ref + generation\n    const sink = new S3MultipartSink(\n      this.client,\n      this.bucket,\n      objectKey,\n      this.partBytes,\n      this.maxObjectBytes,\n    );\n    try {\n      await write(sink);\n      return await sink.finish();\n    } catch (err) {\n      await sink.abort(); // best-effort cleanup of any in-flight multipart upload\n      // A lost conditional-write race — the precondition failed (412) or S3 rejected concurrent conditional\n      // writes to the key (409) — is the write-once conflict, never a silent overwrite.\n      if (isConditionalConflict(err)) {\n        throw new WriteConflictError(\n          `generation already exists (write-once): ${key.segment}.${key.generation}`,\n        );\n      }\n      if (isValidationError(err) || isWriteConflictError(err) || isNotFoundError(err)) {\n        throw err;\n      }\n      throw this.mapError(err);\n    }\n  }\n\n  async getRange(key: GenKey, offset: number, length: number): Promise<Uint8Array> {\n    if (!Number.isInteger(offset) || !Number.isInteger(length) || offset < 0 || length < 0) {\n      throw new ValidationError(`invalid range offset=${offset} length=${length}`);\n    }\n    const objectKey = coldObjectKey(this.prefix, key);\n    if (length === 0) return new Uint8Array(0);\n    try {\n      const res = await this.client.send(\n        new GetObjectCommand({\n          Bucket: this.bucket,\n          Key: objectKey,\n          Range: `bytes=${offset}-${offset + length - 1}`,\n        }),\n      );\n      const bytes = await collect(res.Body);\n      // A short read means the range ran past EOF — treat as out-of-bounds, never a partial result.\n      if (bytes.length !== length) {\n        throw new ValidationError(\n          `range [${offset}, ${offset + length}) out of bounds (got ${bytes.length}B)`,\n        );\n      }\n      return bytes;\n    } catch (err) {\n      throw this.mapReadError(err, key);\n    }\n  }\n\n  async getTail(key: GenKey, maxBytes: number): Promise<{ bytes: Uint8Array; size: number }> {\n    const objectKey = coldObjectKey(this.prefix, key);\n    if (maxBytes <= 0) {\n      // No tail bytes wanted — just resolve the size via a HEAD.\n      try {\n        const head = await this.client.send(\n          new HeadObjectCommand({ Bucket: this.bucket, Key: objectKey }),\n        );\n        return { bytes: new Uint8Array(0), size: head.ContentLength ?? 0 };\n      } catch (err) {\n        throw this.mapReadError(err, key);\n      }\n    }\n    try {\n      const res = await this.client.send(\n        new GetObjectCommand({ Bucket: this.bucket, Key: objectKey, Range: `bytes=-${maxBytes}` }),\n      );\n      const bytes = await collect(res.Body);\n      let size = totalFromContentRange(res.ContentRange);\n      if (size === undefined) {\n        // A spec-compliant backend omits Content-Range only on a 200 (whole object), where bytes.length\n        // IS the size. If the body is exactly maxBytes we can't rule out a clamped partial from a\n        // non-compliant backend — confirm the true size with a HEAD rather than trust a possibly-short read.\n        if (bytes.length === maxBytes) {\n          const head = await this.client.send(\n            new HeadObjectCommand({ Bucket: this.bucket, Key: objectKey }),\n          );\n          size = head.ContentLength ?? bytes.length;\n        } else {\n          size = bytes.length;\n        }\n      }\n      return { bytes, size };\n    } catch (err) {\n      throw this.mapReadError(err, key);\n    }\n  }\n\n  async delete(key: GenKey): Promise<void> {\n    // Idempotent: S3 DeleteObject succeeds even if the key is absent (GC may race / retry).\n    try {\n      await this.client.send(\n        new DeleteObjectCommand({ Bucket: this.bucket, Key: coldObjectKey(this.prefix, key) }),\n      );\n    } catch (err) {\n      throw this.mapError(err);\n    }\n  }\n\n  async *list(ref: SegmentRef): AsyncIterable<GenKey> {\n    const prefix = segmentObjectPrefix(this.prefix, ref); // validates ref\n    let token: string | undefined;\n    do {\n      let res;\n      try {\n        res = await this.client.send(\n          new ListObjectsV2Command({\n            Bucket: this.bucket,\n            Prefix: prefix,\n            ContinuationToken: token,\n          }),\n        );\n      } catch (err) {\n        throw this.mapError(err);\n      }\n      for (const obj of res.Contents ?? []) {\n        if (obj.Key === undefined) continue;\n        const generation = parseGenerationFromKey(prefix, obj.Key);\n        if (generation !== null) {\n          yield { namespace: ref.namespace, segment: ref.segment, generation };\n        }\n      }\n      token = res.IsTruncated === true ? res.NextContinuationToken : undefined;\n    } while (token !== undefined);\n  }\n\n  /** Map S3 read errors to the driver vocabulary; pass everything else through {@link mapError}. */\n  private mapReadError(err: unknown, key: GenKey): unknown {\n    if (isValidationError(err)) return err;\n    if (isNotFound(err)) {\n      return new NotFoundError(`no such generation: ${key.segment}.${key.generation}`);\n    }\n    // A fully out-of-range request (start past EOF) — the BlobReader contract treats range errors as\n    // ValidationError, never a short/empty read.\n    if (isInvalidRange(err)) {\n      return new ValidationError(`range out of bounds for ${key.segment}.${key.generation}`);\n    }\n    return this.mapError(err);\n  }\n\n  /**\n   * Reclassify a transient S3 fault (throttle/5xx/dropped connection) as a retryable {@link TransientError}\n   * so the retry decorator can ride it out; everything else propagates unchanged. The final fallback at every\n   * `client.send` site, so callers and the decorator only ever see typed errors.\n   */\n  private mapError(err: unknown): unknown {\n    if (isTransient(err)) {\n      return new TransientError(\n        `transient S3 fault: ${(err as { name?: string } | null)?.name ?? 'unknown'}`,\n        { cause: err },\n      );\n    }\n    return err;\n  }\n}\n\n/** Concatenate a list of byte chunks of known total length into one buffer. */\nfunction concatBytes(parts: readonly Uint8Array[], total: number): Uint8Array {\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const p of parts) {\n    out.set(p, offset);\n    offset += p.length;\n  }\n  return out;\n}\n\n/**\n * Streaming {@link BlobSink} that uploads one S3 object in **constant memory** (Phase 4f). It buffers at most\n * one part: as the codec writes, full parts are flushed via `UploadPart` and freed. A small object that never\n * reaches one part is committed as a single conditional `PutObject`; a larger one is finished with a\n * conditional `CompleteMultipartUpload` — **both enforce write-once** via `If-None-Match: *`. SHA-256 is hashed\n * incrementally. On any error the caller invokes {@link abort} to clean up the in-flight multipart upload.\n */\nclass S3MultipartSink implements BlobSink {\n  private readonly hash: Hash = createHash('sha256');\n  private readonly pending: Uint8Array[] = [];\n  private pendingLen = 0;\n  private total = 0;\n  private uploadId: string | undefined;\n  private partNumber = 0;\n  private readonly parts: { ETag: string | undefined; PartNumber: number }[] = [];\n\n  constructor(\n    private readonly client: S3Client,\n    private readonly bucket: string,\n    private readonly objectKey: string,\n    private readonly partBytes: number,\n    private readonly maxObjectBytes: number,\n  ) {}\n\n  async write(bytes: Uint8Array): Promise<void> {\n    if (bytes.length === 0) return;\n    this.total += bytes.length;\n    if (this.total > this.maxObjectBytes) {\n      // Fail fast + typed, rather than a late opaque S3 error (and abort the in-flight upload via the caller).\n      throw new ValidationError(`object exceeds maxObjectBytes ${this.maxObjectBytes}`);\n    }\n    this.hash.update(bytes);\n    this.pending.push(bytes);\n    this.pendingLen += bytes.length;\n    if (this.pendingLen >= this.partBytes) await this.flushPart();\n  }\n\n  /** Upload the buffered bytes (≥ one part) as a single part, freeing them. Starts the upload on first call. */\n  private async flushPart(): Promise<void> {\n    if (this.uploadId === undefined) {\n      const res = await this.client.send(\n        new CreateMultipartUploadCommand({ Bucket: this.bucket, Key: this.objectKey }),\n      );\n      if (res.UploadId === undefined) {\n        throw new TransientError('S3 CreateMultipartUpload returned no UploadId');\n      }\n      this.uploadId = res.UploadId;\n    }\n    const body = concatBytes(this.pending, this.pendingLen);\n    this.pending.length = 0;\n    this.pendingLen = 0;\n    this.partNumber += 1;\n    if (this.partNumber > S3_MAX_PARTS) {\n      // Unreachable for valid input (the maxObjectBytes byte-cap, sized to ≤ S3_MAX_PARTS parts, fires first) —\n      // a typed guard so the S3 hard limit is never a raw 400.\n      throw new ValidationError(`multipart upload exceeded the S3 ${S3_MAX_PARTS}-part limit`);\n    }\n    const res = await this.client.send(\n      new UploadPartCommand({\n        Bucket: this.bucket,\n        Key: this.objectKey,\n        UploadId: this.uploadId,\n        PartNumber: this.partNumber,\n        Body: body,\n      }),\n    );\n    this.parts.push({ ETag: res.ETag, PartNumber: this.partNumber });\n  }\n\n  /** Commit the object: a single conditional PUT if it fit in one part, else complete the multipart upload. */\n  async finish(): Promise<{ size: number; sha256: string }> {\n    const sha256 = this.hash.digest('hex');\n    if (this.uploadId === undefined) {\n      await this.client.send(\n        new PutObjectCommand({\n          Bucket: this.bucket,\n          Key: this.objectKey,\n          Body: concatBytes(this.pending, this.pendingLen),\n          IfNoneMatch: '*', // write-once\n        }),\n      );\n      return { size: this.total, sha256 };\n    }\n    if (this.pendingLen > 0) await this.flushPart(); // the final part may be < partBytes (allowed)\n    await this.client.send(\n      new CompleteMultipartUploadCommand({\n        Bucket: this.bucket,\n        Key: this.objectKey,\n        UploadId: this.uploadId,\n        MultipartUpload: { Parts: this.parts },\n        IfNoneMatch: '*', // write-once: fail if the object already exists\n      }),\n    );\n    this.uploadId = undefined; // completed — nothing left to abort\n    return { size: this.total, sha256 };\n  }\n\n  /** Best-effort cleanup of an in-flight multipart upload after an error (a leaked MPU is reaped by a bucket\n   * lifecycle rule; never a correctness issue). No-op if nothing was started or it already completed. */\n  async abort(): Promise<void> {\n    if (this.uploadId === undefined) return;\n    const id = this.uploadId;\n    this.uploadId = undefined;\n    try {\n      await this.client.send(\n        new AbortMultipartUploadCommand({ Bucket: this.bucket, Key: this.objectKey, UploadId: id }),\n      );\n    } catch {\n      // swallow — best-effort\n    }\n  }\n}\n\n/**\n * Collect an S3 response body into a `Uint8Array`. `transformToByteArray` is added at runtime to the SDK's\n * Node stream by `@aws-sdk`'s sdk-stream-mixin, so the structural cast is sound on Node.\n */\nasync function collect(body: GetObjectCommandBody): Promise<Uint8Array> {\n  if (body === undefined) {\n    throw new NotFoundError('S3 GetObject returned an empty body');\n  }\n  return body.transformToByteArray();\n}\n\n/** The S3 `GetObject` Body type, narrowed to the part we use (`transformToByteArray`). */\ntype GetObjectCommandBody = { transformToByteArray(): Promise<Uint8Array> } | undefined;\n","/**\n * `S3RegistryDriver` — an {@link IRegistryDriver} over S3-compatible object storage (Phase 7).\n *\n * Lets a **read-mostly deployment run on S3 alone** — cold `.crbm` generations + the registry in one bucket,\n * no DynamoDB. One tiny JSON object per segment at `<prefix>registry/<ns>/<segment>.reg` holding the\n * `{ deleted, record }` envelope (the same shape LocalFs persists). The OCC token is a monotonic counter,\n * advanced on every mutation and even across a `delete` (which **tombstones** rather than removes the object)\n * so a deleted-then-recreated row never re-issues an old token (ABA-safe) — identical semantics to the\n * LocalFs + DynamoDB registries, so it passes the same conformance suite.\n *\n * **The atomic swap is offloaded to S3's conditional writes** (GA Nov 2024): `create` uses `If-None-Match: *`\n * (write-once, or `If-Match` over a tombstone), and `compareAndSwap`/`delete` use `If-Match: <etag>` so a\n * concurrent writer between our read and our PUT loses with a `412` → {@link WriteConflictError}. No in-process\n * lock is needed (unlike LocalFs) — the ETag precondition fences writers *across processes*. Reads are\n * strongly consistent (S3, since 2020), satisfying the registry's `strongRead` contract. The client is\n * **injected**, exactly like {@link S3ColdDriver}.\n *\n * **Deployment requirements** (a backend/policy that violates these silently corrupts the registry):\n * - The backend **must honor `If-Match`** (AWS S3; recent MinIO). One that returns ETags but ignores the\n *   precondition degrades compare-and-swap to last-write-wins → lost `currentGen` swaps. Verified against real\n *   S3 semantics by the MinIO integration lane.\n * - The IAM principal needs **`s3:ListBucket`** on the bucket. Without it, `GetObject` on a missing key returns\n *   `403` (not `404`), so the \"absent segment → `null`\" contract (and `create`'s bootstrap read) breaks — and\n *   `list()` needs it regardless.\n * - **Do not apply an S3 lifecycle-expiration rule to the `registry/` prefix.** `delete` tombstones (keeps the\n *   object with an advanced counter) for ABA-safety; expiring a tombstone would let a recreate reset the token\n *   to 0 and re-issue a stale one.\n */\nimport {\n  GetObjectCommand,\n  ListObjectsV2Command,\n  PutObjectCommand,\n  type S3Client,\n} from '@aws-sdk/client-s3';\nimport {\n  IntegrityError,\n  TransientError,\n  ValidationError,\n  WriteConflictError,\n  isWriteConflictError,\n} from '@/core/errors';\nimport type {\n  IRegistryDriver,\n  NewRegistryRecord,\n  RegCaps,\n  RegistryPatch,\n  RegistryRecord,\n  SegmentRef,\n  Token,\n} from '@/core/ports';\nimport {\n  applyRegistryPatch,\n  parseRegistryEnvelope,\n  recordFromNew,\n  registryCounterOf,\n  serializeRegistryEnvelope,\n  validateNewRegistryRecord,\n  validateRegistryPatch,\n  type RegistryEnvelope,\n} from '../_shared/registry';\nimport { normalizeS3Prefix, parseRegistryKey, registryListPrefix, registryObjectKey } from './keys';\nimport { isConditionalConflict, isNotFound, isTransient } from './s3-errors';\nimport { mapWithConcurrency } from '@/core/concurrency';\n\n/** Defensive cap on a single registry object read from storage, before allocation (rows are tiny; ~1 KB). */\nconst MAX_ROW_BYTES = 1 * 1024 * 1024;\n/** Bounded retry for `delete`'s read→tombstone under cross-process contention (converges; then fails typed). */\nconst MAX_DELETE_ATTEMPTS = 8;\n/** In-flight `readRow` GETs per `list()` page — turns the serial N+1 into one LIST + bounded parallel GETs. */\nconst LIST_READ_CONCURRENCY = 16;\n\n/** A conditional-write precondition: exactly one of write-once (`If-None-Match: *`) or CAS (`If-Match: etag`). */\ntype PutCondition = { readonly ifNoneMatch: '*' } | { readonly ifMatch: string };\n\nexport interface S3RegistryDriverOptions {\n  /** A constructed S3 client (point its `endpoint` at MinIO for local/integration use). */\n  readonly client: S3Client;\n  /** Target bucket (must already exist). */\n  readonly bucket: string;\n  /** Optional key prefix under which all registry objects live (e.g. `cloudroaring/`). */\n  readonly prefix?: string;\n  /** Injected clock for `createdAt`/`updatedAt`; defaults to `Date.now`. */\n  readonly now?: () => number;\n}\n\nexport class S3RegistryDriver implements IRegistryDriver {\n  private readonly client: S3Client;\n  private readonly bucket: string;\n  private readonly prefix: string | undefined;\n  private readonly now: () => number;\n\n  constructor(options: S3RegistryDriverOptions) {\n    this.client = options.client;\n    this.bucket = options.bucket;\n    this.prefix = normalizeS3Prefix(options.prefix);\n    this.now = options.now ?? ((): number => Date.now());\n  }\n\n  capabilities(): RegCaps {\n    return { strongRead: true };\n  }\n\n  async get(ref: SegmentRef): Promise<RegistryRecord | null> {\n    const current = await this.readRow(registryObjectKey(this.prefix, ref));\n    return current && !current.env.deleted ? current.env.record : null;\n  }\n\n  async create(ref: SegmentRef, record: NewRegistryRecord): Promise<{ token: Token }> {\n    validateNewRegistryRecord(record);\n    const key = registryObjectKey(this.prefix, ref);\n    const current = await this.readRow(key);\n    if (current !== null && !current.env.deleted) {\n      throw new WriteConflictError(`registry row already exists for segment ${ref.segment}`);\n    }\n    // Advance across a tombstone so a recreate never re-issues an old token (ABA-safe).\n    const token = String(current ? registryCounterOf(current.env.record) + 1 : 0);\n    const env: RegistryEnvelope = {\n      deleted: false,\n      record: recordFromNew(ref, record, this.now(), token),\n    };\n    // Write-once when truly absent; overwrite the tombstone under its ETag when recreating. Either way a\n    // concurrent create loses with a 412 → WriteConflictError.\n    await this.putRow(key, env, current ? { ifMatch: current.etag } : { ifNoneMatch: '*' });\n    return { token };\n  }\n\n  async compareAndSwap(\n    ref: SegmentRef,\n    expected: Token,\n    patch: RegistryPatch,\n  ): Promise<{ token: Token }> {\n    validateRegistryPatch(patch);\n    const key = registryObjectKey(this.prefix, ref);\n    const current = await this.readRow(key);\n    if (current === null || current.env.deleted || current.env.record.token !== expected) {\n      throw new WriteConflictError(`OCC token mismatch for registry row ${ref.segment}`);\n    }\n    const token = String(registryCounterOf(current.env.record) + 1);\n    const env: RegistryEnvelope = {\n      deleted: false,\n      record: applyRegistryPatch(current.env.record, patch, this.now(), token),\n    };\n    // If-Match on the ETag we read fences a concurrent writer between our read and this PUT (412 → conflict).\n    await this.putRow(key, env, { ifMatch: current.etag });\n    return { token };\n  }\n\n  async *list(namespace?: string): AsyncIterable<RegistryRecord> {\n    const prefix = registryListPrefix(this.prefix, namespace);\n    let token: string | undefined;\n    do {\n      let res;\n      try {\n        res = await this.client.send(\n          new ListObjectsV2Command({\n            Bucket: this.bucket,\n            Prefix: prefix,\n            ContinuationToken: token,\n          }),\n        );\n      } catch (err) {\n        throw this.mapError(err);\n      }\n      // Registry keys in this page (skipping stray/foreign objects). `readRow` is one GET each — a serial\n      // await-in-loop made `list()` O(N) sequential round-trips (the N+1). Fan them out with a bounded pool:\n      // one LIST + up to `LIST_READ_CONCURRENCY` parallel GETs per page, order-preserving so the yielded\n      // stream stays deterministic.\n      const keys = (res.Contents ?? [])\n        .map((obj) => obj.Key)\n        .filter((k): k is string => k !== undefined && parseRegistryKey(this.prefix, k) !== null);\n      const rows = await mapWithConcurrency(keys, LIST_READ_CONCURRENCY, (key) =>\n        this.readRow(key),\n      );\n      for (const current of rows) {\n        if (current && !current.env.deleted) yield current.env.record;\n      }\n      token = res.IsTruncated === true ? res.NextContinuationToken : undefined;\n    } while (token !== undefined);\n  }\n\n  async delete(ref: SegmentRef): Promise<void> {\n    const key = registryObjectKey(this.prefix, ref);\n    // Tombstone (advance the counter) rather than remove the object — keeps the token monotonic for\n    // ABA-safety. Retry the read→tombstone on a cross-process race (a concurrent write bumps the ETag → 412);\n    // it converges, then fails typed rather than silently leaving the row live.\n    for (let attempt = 0; attempt < MAX_DELETE_ATTEMPTS; attempt++) {\n      const current = await this.readRow(key);\n      if (current === null || current.env.deleted) return; // idempotent — already gone\n      const token = String(registryCounterOf(current.env.record) + 1);\n      const env: RegistryEnvelope = {\n        deleted: true,\n        record: { ...current.env.record, token, updatedAt: this.now() },\n      };\n      try {\n        await this.putRow(key, env, { ifMatch: current.etag });\n        return;\n      } catch (err) {\n        if (isWriteConflictError(err)) continue; // raced — re-read and re-tombstone\n        throw err;\n      }\n    }\n    throw new WriteConflictError(\n      `registry delete: contention tombstoning \"${ref.segment}\" — retry`,\n    );\n  }\n\n  /** GET + parse a registry object, returning its envelope + ETag (for a later If-Match), or null if absent. */\n  private async readRow(\n    objectKey: string,\n  ): Promise<{ env: RegistryEnvelope; etag: string } | null> {\n    let res;\n    try {\n      res = await this.client.send(new GetObjectCommand({ Bucket: this.bucket, Key: objectKey }));\n    } catch (err) {\n      if (isNotFound(err)) return null;\n      throw this.mapError(err);\n    }\n    if ((res.ContentLength ?? 0) > MAX_ROW_BYTES) {\n      throw new IntegrityError(\n        `registry object ${res.ContentLength}B exceeds cap ${MAX_ROW_BYTES}B`,\n      );\n    }\n    if (res.Body === undefined) {\n      throw new IntegrityError(`registry object has an empty body: ${objectKey}`);\n    }\n    const bytes = await (\n      res.Body as { transformToByteArray(): Promise<Uint8Array> }\n    ).transformToByteArray();\n    if (bytes.length > MAX_ROW_BYTES) {\n      throw new IntegrityError(`registry object ${bytes.length}B exceeds cap ${MAX_ROW_BYTES}B`);\n    }\n    const env = parseRegistryEnvelope(Buffer.from(bytes).toString('utf8'), objectKey);\n    if (res.ETag === undefined || res.ETag.length === 0) {\n      // The ETag is the OCC fence for CAS; a backend that omits it can't be used safely as a registry.\n      throw new IntegrityError(\n        `registry object has no ETag (needed for compare-and-swap): ${objectKey}`,\n      );\n    }\n    return { env, etag: res.ETag };\n  }\n\n  /** Conditional PUT of an envelope; maps a `412` precondition failure to {@link WriteConflictError}. */\n  private async putRow(\n    objectKey: string,\n    env: RegistryEnvelope,\n    cond: PutCondition,\n  ): Promise<void> {\n    const Body = Buffer.from(serializeRegistryEnvelope(env), 'utf8');\n    if (Body.length > MAX_ROW_BYTES) {\n      // Belt-and-braces: the governance/DEK fields are already capped by validate*, so this can't fire for\n      // valid input — but never write a row that would later be unreadable.\n      throw new ValidationError(`registry object ${Body.length}B exceeds cap ${MAX_ROW_BYTES}B`);\n    }\n    try {\n      await this.client.send(\n        new PutObjectCommand({\n          Bucket: this.bucket,\n          Key: objectKey,\n          Body,\n          ContentType: 'application/json',\n          IfNoneMatch: 'ifNoneMatch' in cond ? cond.ifNoneMatch : undefined,\n          IfMatch: 'ifMatch' in cond ? cond.ifMatch : undefined,\n        }),\n      );\n    } catch (err) {\n      // A lost conditional-write race (412 precondition, or 409 concurrent-conflict) is an OCC conflict.\n      if (isConditionalConflict(err)) {\n        throw new WriteConflictError(`registry OCC conflict for ${objectKey}`);\n      }\n      throw this.mapError(err);\n    }\n  }\n\n  /** Reclassify a transient S3 fault as a retryable {@link TransientError}; pass everything else through. */\n  private mapError(err: unknown): unknown {\n    if (isTransient(err)) {\n      return new TransientError(\n        `transient S3 fault: ${(err as { name?: string } | null)?.name ?? 'unknown'}`,\n        { cause: err },\n      );\n    }\n    return err;\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,172 @@
+{
+  "name": "@cloudbitmaps/core",
+  "version": "0.1.0-rc.0",
+  "description": "The codec-agnostic cloud engine behind the @cloudbitmaps family: tiered storage (RAM → warm KV → cold object store), chunk-skipping intersection, the .crbm format, crash-safe compaction, encryption-at-rest, and every storage driver.",
+  "keywords": [
+    "roaring",
+    "bitmap",
+    "roaring-bitmap",
+    "roaring-bitmaps",
+    "croaring",
+    "bitset",
+    "compressed-bitmap",
+    "lambda",
+    "nodejs",
+    "typescript",
+    "set",
+    "set-intersection",
+    "s3",
+    "dynamodb",
+    "gcs",
+    "azure",
+    "postgres",
+    "redis",
+    "mongodb",
+    "cassandra",
+    "mysql",
+    "mariadb",
+    "serverless",
+    "tiered-storage",
+    "scale-to-zero",
+    "segmentation",
+    "audience",
+    "cloud"
+  ],
+  "license": "Apache-2.0",
+  "author": "Sharvil Kadam",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cloudbitmaps/cloudbitmaps.git"
+  },
+  "homepage": "https://github.com/cloudbitmaps/cloudbitmaps#readme",
+  "bugs": {
+    "url": "https://github.com/cloudbitmaps/cloudbitmaps/issues"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./s3": {
+      "types": "./dist/s3/index.d.ts",
+      "import": "./dist/s3/index.js",
+      "require": "./dist/s3/index.cjs"
+    },
+    "./dynamodb": {
+      "types": "./dist/dynamodb/index.d.ts",
+      "import": "./dist/dynamodb/index.js",
+      "require": "./dist/dynamodb/index.cjs"
+    },
+    "./gcs": {
+      "types": "./dist/gcs/index.d.ts",
+      "import": "./dist/gcs/index.js",
+      "require": "./dist/gcs/index.cjs"
+    },
+    "./azure": {
+      "types": "./dist/azure/index.d.ts",
+      "import": "./dist/azure/index.js",
+      "require": "./dist/azure/index.cjs"
+    },
+    "./postgres": {
+      "types": "./dist/postgres/index.d.ts",
+      "import": "./dist/postgres/index.js",
+      "require": "./dist/postgres/index.cjs"
+    },
+    "./redis": {
+      "types": "./dist/redis/index.d.ts",
+      "import": "./dist/redis/index.js",
+      "require": "./dist/redis/index.cjs"
+    },
+    "./mongodb": {
+      "types": "./dist/mongodb/index.d.ts",
+      "import": "./dist/mongodb/index.js",
+      "require": "./dist/mongodb/index.cjs"
+    },
+    "./cassandra": {
+      "types": "./dist/cassandra/index.d.ts",
+      "import": "./dist/cassandra/index.js",
+      "require": "./dist/cassandra/index.cjs"
+    },
+    "./mysql": {
+      "types": "./dist/mysql/index.d.ts",
+      "import": "./dist/mysql/index.js",
+      "require": "./dist/mysql/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@aws-sdk/client-dynamodb": "^3",
+    "@aws-sdk/client-s3": "^3",
+    "@azure/storage-blob": "^12",
+    "@google-cloud/storage": "^7",
+    "cassandra-driver": "^4",
+    "ioredis": "^5",
+    "mongodb": "^6",
+    "mysql2": "^3",
+    "pg": "^8"
+  },
+  "peerDependenciesMeta": {
+    "@aws-sdk/client-dynamodb": {
+      "optional": true
+    },
+    "@aws-sdk/client-s3": {
+      "optional": true
+    },
+    "@azure/storage-blob": {
+      "optional": true
+    },
+    "@google-cloud/storage": {
+      "optional": true
+    },
+    "cassandra-driver": {
+      "optional": true
+    },
+    "ioredis": {
+      "optional": true
+    },
+    "mongodb": {
+      "optional": true
+    },
+    "mysql2": {
+      "optional": true
+    },
+    "pg": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@aws-sdk/client-dynamodb": "^3.1075.0",
+    "@aws-sdk/client-s3": "^3.1075.0",
+    "@azure/storage-blob": "^12",
+    "@google-cloud/storage": "^7.0.0",
+    "cassandra-driver": "^4",
+    "ioredis": "^5",
+    "mongodb": "^6",
+    "mysql2": "^3.23.1",
+    "pg": "^8",
+    "@types/pg": "^8",
+    "@types/node": "^22.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.5.0"
+  },
+  "scripts": {
+    "build": "tsup"
+  }
+}