actor-ts 0.9.0

package/dist/persistence/migration/validatedAdapter.d.ts

@@ -0,0 +1,48 @@
+import type { EventAdapter, SnapshotAdapter } from './Adapter.js';
+import type { Codec } from './Codec.js';
+/**
+ * Wrap an existing `EventAdapter` / `SnapshotAdapter` with a
+ * {@link Codec} that validates the payload on every write and
+ * read (#6).  The codec runs **after** the inner adapter on the
+ * write path (so versioned wire shapes — produced by `defaultsAdapter`,
+ * `migratingAdapter`, etc — are validated against the wire schema)
+ * and **before** the inner adapter on the read path (so corrupted /
+ * mistyped wire data fails before any upcaster runs).
+ *
+ *   const adapter = validatedEventAdapter(
+ *     defaultsAdapter<DepositedV2>({
+ *       manifest: 'BankAccount.Deposited',
+ *       currentVersion: 2,
+ *       defaults: { 1: { currency: 'USD' } },
+ *     }),
+ *     zodCodec(DepositedV2WireSchema),
+ *   );
+ *
+ * Errors thrown by the codec on encode become `PersistError`s in
+ * the actor's outbox; on decode they bubble up as `MigrationError`s
+ * with the manifest + version of the offending record so log
+ * output points at the exact failure.
+ */
+/** Shape of error reasons surfaced from this wrapper. */
+export interface ValidatedAdapterOptions {
+    /**
+     * Override how the wire payload is shown in the validation
+     * error.  Defaults to `JSON.stringify(payload).slice(0, 200)` —
+     * truncated so big payloads don't flood the error log.
+     */
+    readonly previewWire?: (wire: unknown) => string;
+}
+/**
+ * Wrap an `EventAdapter` to run the codec on every read/write.
+ * The inner adapter still owns version mapping (upcasters,
+ * defaults, downcast for rolling deploys); the codec adds payload-
+ * shape validation on top.
+ */
+export declare function validatedEventAdapter<E, J>(inner: EventAdapter<E, J>, codec: Codec<J>, opts?: ValidatedAdapterOptions): EventAdapter<E, J>;
+/**
+ * Snapshot variant of {@link validatedEventAdapter}.  Same shape;
+ * `SnapshotAdapter` differs from `EventAdapter` only in name (for
+ * call-site clarity).
+ */
+export declare function validatedSnapshotAdapter<S, J>(inner: SnapshotAdapter<S, J>, codec: Codec<J>, opts?: ValidatedAdapterOptions): SnapshotAdapter<S, J>;
+//# sourceMappingURL=validatedAdapter.d.ts.map

package/dist/persistence/migration/validatedAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validatedAdapter.d.ts","sourceRoot":"","sources":["../../../src/persistence/migration/validatedAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAiB,eAAe,EAAe,MAAM,cAAc,CAAC;AAC9F,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGxC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,yDAAyD;AACzD,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,CAAC,EACxC,KAAK,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EACf,IAAI,GAAE,uBAA4B,GACjC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAiBpB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,CAAC,EAC3C,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,EAC5B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EACf,IAAI,GAAE,uBAA4B,GACjC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAiBvB"}

package/dist/persistence/migration/validatedAdapter.js

@@ -0,0 +1,86 @@
+import { MigrationError } from './Envelope.js';
+/**
+ * Wrap an `EventAdapter` to run the codec on every read/write.
+ * The inner adapter still owns version mapping (upcasters,
+ * defaults, downcast for rolling deploys); the codec adds payload-
+ * shape validation on top.
+ */
+export function validatedEventAdapter(inner, codec, opts = {}) {
+    return {
+        manifest: (event) => inner.manifest(event),
+        toJournal: (event) => {
+            const out = inner.toJournal(event);
+            const validated = runEncode(codec, out.payload, out.manifest, out.version, opts);
+            return { manifest: out.manifest, version: out.version, payload: validated };
+        },
+        fromJournal: (stored) => {
+            const validated = runDecode(codec, stored, opts);
+            return inner.fromJournal({
+                manifest: stored.manifest,
+                version: stored.version,
+                payload: validated,
+            });
+        },
+    };
+}
+/**
+ * Snapshot variant of {@link validatedEventAdapter}.  Same shape;
+ * `SnapshotAdapter` differs from `EventAdapter` only in name (for
+ * call-site clarity).
+ */
+export function validatedSnapshotAdapter(inner, codec, opts = {}) {
+    return {
+        manifest: (state) => inner.manifest(state),
+        toJournal: (state) => {
+            const out = inner.toJournal(state);
+            const validated = runEncode(codec, out.payload, out.manifest, out.version, opts);
+            return { manifest: out.manifest, version: out.version, payload: validated };
+        },
+        fromJournal: (stored) => {
+            const validated = runDecode(codec, stored, opts);
+            return inner.fromJournal({
+                manifest: stored.manifest,
+                version: stored.version,
+                payload: validated,
+            });
+        },
+    };
+}
+/* ----------------------------- internals ------------------------------ */
+function runEncode(codec, payload, manifest, version, opts) {
+    try {
+        return codec.encode(payload);
+    }
+    catch (err) {
+        throw new MigrationError(`validatedAdapter: codec '${codec.name ?? 'anonymous'}' rejected encode for `
+            + `${manifest}@v${version}: ${err.message ?? String(err)} `
+            + `[input=${preview(payload, opts)}]`, manifest, version);
+    }
+}
+function runDecode(codec, stored, opts) {
+    try {
+        return codec.decode(stored.payload);
+    }
+    catch (err) {
+        throw new MigrationError(`validatedAdapter: codec '${codec.name ?? 'anonymous'}' rejected decode for `
+            + `${stored.manifest}@v${stored.version}: ${err.message ?? String(err)} `
+            + `[wire=${preview(stored.payload, opts)}]`, stored.manifest, stored.version);
+    }
+}
+function preview(wire, opts) {
+    if (opts.previewWire) {
+        try {
+            return opts.previewWire(wire);
+        }
+        catch { /* fall through */ }
+    }
+    let s;
+    try {
+        s = JSON.stringify(wire);
+    }
+    catch {
+        s = String(wire);
+    }
+    return s.length > 200 ? `${s.slice(0, 200)}…` : s;
+}
+//# sourceMappingURL=validatedAdapter.js.map

package/dist/persistence/migration/validatedAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validatedAdapter.js","sourceRoot":"","sources":["../../../src/persistence/migration/validatedAdapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAoC/C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,KAAe,EACf,OAAgC,EAAE;IAElC,OAAO;QACL,QAAQ,EAAE,CAAC,KAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,WAAW,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA4B,EAC5B,KAAe,EACf,OAAgC,EAAE;IAElC,OAAO;QACL,QAAQ,EAAE,CAAC,KAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,WAAW,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAChB,KAAe,EAAE,OAAU,EAAE,QAAgB,EAAE,OAAe,EAC9D,IAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAM,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,KAAK,CAAC,IAAI,IAAI,WAAW,wBAAwB;cAC3E,GAAG,QAAQ,KAAK,OAAO,KAAM,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;cACpE,UAAU,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EACrC,QAAQ,EAAE,OAAO,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,KAAe,EAAE,MAAmB,EAAE,IAA6B;IAEnE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAM,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,KAAK,CAAC,IAAI,IAAI,WAAW,wBAAwB;cAC3E,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,KAAM,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;cAClF,SAAS,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAC3C,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAa,EAAE,IAA6B;IAC3D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IACjC,MAAM,CAAC;QAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/persistence/migration/wrapLegacy.d.ts

@@ -0,0 +1,83 @@
+import type { Journal } from '../Journal.js';
+import type { PersistentEvent } from '../JournalTypes.js';
+import type { SnapshotStore } from '../SnapshotStore.js';
+import type { JournalEnvelope } from './Adapter.js';
+/**
+ * One-shot migration helpers for repos adopting the schema-evolution
+ * envelope after-the-fact (#9).  An actor that ships a fresh
+ * `EventAdapter` against an existing journal whose events are NOT
+ * envelope-wrapped throws `MigrationError` on the first replay,
+ * because the envelope layer expects `{_v, _t, _e}` markers and the
+ * legacy data has none.
+ *
+ * The fix is a one-time rewrite: walk the journal, wrap every raw
+ * event in `{ _v: 1, _t: <manifest>, _e: <event> }`, write back.  This
+ * file ships the primitives:
+ *
+ *   - `wrapEventAsEnvelope(event, manifestFor)` — pure, idempotent;
+ *     events that already look like envelopes are passed through.
+ *   - `wrapStateAsEnvelope(state, manifestFor)` — same shape for
+ *     snapshots / durable-state values.
+ *   - `migrateInMemoryJournal(journal, manifestFor)` — reference
+ *     bulk-rewriter for the in-process journal.  Preserves sequence
+ *     numbers + timestamps + tags; the only thing that changes is the
+ *     `event` payload.
+ *   - `migrateSnapshotStore(store, pids, manifestFor)` — same idea
+ *     for snapshots.  Iterates `pids` (callers source them — usually
+ *     `await journal.persistenceIds()`).
+ *
+ * Cassandra / SQLite / S3 journals all need a journal-specific
+ * SQL/CQL/object-list path; users write a few lines of glue using
+ * `wrapEventAsEnvelope` as the per-row primitive.  Shipping a
+ * generic CLI for every backend would be a maintenance trap.
+ */
+/**
+ * Wrap a single domain event as a `JournalEnvelope` at version 1
+ * (idempotent — events that already look like envelopes are returned
+ * unchanged).  `manifestFor` derives the stable `_t` discriminator
+ * from the event itself.  Override `version` if your codebase
+ * already shipped some envelopes at a higher version and you want
+ * the migration to start from there.
+ */
+export declare function wrapEventAsEnvelope<E>(event: E, manifestFor: (e: E) => string, version?: number): JournalEnvelope<E>;
+/** Same shape as {@link wrapEventAsEnvelope}, separate name for clarity. */
+export declare function wrapStateAsEnvelope<S>(state: S, manifestFor: (s: S) => string, version?: number): JournalEnvelope<S>;
+export interface MigrationResult {
+    /** Total entries inspected. */
+    readonly inspected: number;
+    /** Entries that were rewritten (raw → envelope). */
+    readonly wrapped: number;
+    /** Entries that were already enveloped and left untouched. */
+    readonly skipped: number;
+}
+/**
+ * Bulk-rewrite every event in a {@link Journal} that exposes the
+ * `_remapForMigration` hook (the in-memory journal does; for other
+ * backends you write a few lines of journal-specific glue).  Returns
+ * a count of inspected / wrapped / skipped entries — re-running on a
+ * fully-migrated journal is a no-op (`wrapped === 0`).
+ */
+export declare function migrateInMemoryJournal<E>(journal: Journal, manifestFor: (e: E) => string, opts?: {
+    readonly version?: number;
+}): Promise<MigrationResult>;
+/**
+ * Walk a {@link SnapshotStore} for every `pid` in `pids`, load the
+ * latest snapshot, and re-save it as an enveloped value if it isn't
+ * one already.  Older snapshots in `keepN` history get the same
+ * treatment via repeated `loadBefore` calls until exhausted.
+ *
+ * Note: this rewrites snapshots **at the same `seq`** by overwriting
+ * — most snapshot-store impls upsert by key (`<pid>/<seq>.json`) so
+ * a re-save lands on the existing record without changing the seq.
+ */
+export declare function migrateSnapshotStore<S>(store: SnapshotStore, pids: ReadonlyArray<string>, manifestFor: (s: S) => string, opts?: {
+    readonly version?: number;
+}): Promise<MigrationResult>;
+/**
+ * Convenience: pretty-print a migration summary suitable for the CLI
+ * one-liner most users will write — `console.log(formatMigrationResult(...))`
+ * after the bulk call.
+ */
+export declare function formatMigrationResult(prefix: string, result: MigrationResult): string;
+export type { PersistentEvent };
+//# sourceMappingURL=wrapLegacy.d.ts.map

package/dist/persistence/migration/wrapLegacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapLegacy.d.ts","sourceRoot":"","sources":["../../../src/persistence/migration/wrapLegacy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,KAAK,EAAE,CAAC,EACR,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,EAC7B,OAAO,SAAI,GACV,eAAe,CAAC,CAAC,CAAC,CAGpB;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,KAAK,EAAE,CAAC,EACR,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,EAC7B,OAAO,SAAI,GACV,eAAe,CAAC,CAAC,CAAC,CAGpB;AAID,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAqBD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,EAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAID;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,EAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAID;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,MAAM,CAErF;AAID,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/dist/persistence/migration/wrapLegacy.js

@@ -0,0 +1,126 @@
+import { isEnvelope } from './Envelope.js';
+/**
+ * One-shot migration helpers for repos adopting the schema-evolution
+ * envelope after-the-fact (#9).  An actor that ships a fresh
+ * `EventAdapter` against an existing journal whose events are NOT
+ * envelope-wrapped throws `MigrationError` on the first replay,
+ * because the envelope layer expects `{_v, _t, _e}` markers and the
+ * legacy data has none.
+ *
+ * The fix is a one-time rewrite: walk the journal, wrap every raw
+ * event in `{ _v: 1, _t: <manifest>, _e: <event> }`, write back.  This
+ * file ships the primitives:
+ *
+ *   - `wrapEventAsEnvelope(event, manifestFor)` — pure, idempotent;
+ *     events that already look like envelopes are passed through.
+ *   - `wrapStateAsEnvelope(state, manifestFor)` — same shape for
+ *     snapshots / durable-state values.
+ *   - `migrateInMemoryJournal(journal, manifestFor)` — reference
+ *     bulk-rewriter for the in-process journal.  Preserves sequence
+ *     numbers + timestamps + tags; the only thing that changes is the
+ *     `event` payload.
+ *   - `migrateSnapshotStore(store, pids, manifestFor)` — same idea
+ *     for snapshots.  Iterates `pids` (callers source them — usually
+ *     `await journal.persistenceIds()`).
+ *
+ * Cassandra / SQLite / S3 journals all need a journal-specific
+ * SQL/CQL/object-list path; users write a few lines of glue using
+ * `wrapEventAsEnvelope` as the per-row primitive.  Shipping a
+ * generic CLI for every backend would be a maintenance trap.
+ */
+/* ---------------------------- pure wrappers ---------------------------- */
+/**
+ * Wrap a single domain event as a `JournalEnvelope` at version 1
+ * (idempotent — events that already look like envelopes are returned
+ * unchanged).  `manifestFor` derives the stable `_t` discriminator
+ * from the event itself.  Override `version` if your codebase
+ * already shipped some envelopes at a higher version and you want
+ * the migration to start from there.
+ */
+export function wrapEventAsEnvelope(event, manifestFor, version = 1) {
+    if (isEnvelope(event))
+        return event;
+    return { _v: version, _t: manifestFor(event), _e: event };
+}
+/** Same shape as {@link wrapEventAsEnvelope}, separate name for clarity. */
+export function wrapStateAsEnvelope(state, manifestFor, version = 1) {
+    if (isEnvelope(state))
+        return state;
+    return { _v: version, _t: manifestFor(state), _e: state };
+}
+/**
+ * Bulk-rewrite every event in a {@link Journal} that exposes the
+ * `_remapForMigration` hook (the in-memory journal does; for other
+ * backends you write a few lines of journal-specific glue).  Returns
+ * a count of inspected / wrapped / skipped entries — re-running on a
+ * fully-migrated journal is a no-op (`wrapped === 0`).
+ */
+export async function migrateInMemoryJournal(journal, manifestFor, opts = {}) {
+    if (typeof journal._remapForMigration !== 'function') {
+        throw new Error('migrateInMemoryJournal: journal does not expose _remapForMigration. '
+            + 'Use the per-row `wrapEventAsEnvelope` primitive with a backend-specific '
+            + 'rewrite path (SQL UPDATE / S3 PUT / CQL UPDATE).');
+    }
+    const migratable = journal;
+    const version = opts.version ?? 1;
+    const pids = await journal.persistenceIds();
+    let inspected = 0;
+    let wrapped = 0;
+    let skipped = 0;
+    for (const pid of pids) {
+        // Read first to count + decide; the `_remapForMigration` call
+        // does the actual rewrite in place.
+        const events = await journal.read(pid, 0);
+        inspected += events.length;
+        for (const e of events) {
+            if (isEnvelope(e.event))
+                skipped += 1;
+            else
+                wrapped += 1;
+        }
+        await migratable._remapForMigration(pid, (e) => wrapEventAsEnvelope(e, manifestFor, version));
+    }
+    return { inspected, wrapped, skipped };
+}
+/* ------------------------ snapshot-store helpers ----------------------- */
+/**
+ * Walk a {@link SnapshotStore} for every `pid` in `pids`, load the
+ * latest snapshot, and re-save it as an enveloped value if it isn't
+ * one already.  Older snapshots in `keepN` history get the same
+ * treatment via repeated `loadBefore` calls until exhausted.
+ *
+ * Note: this rewrites snapshots **at the same `seq`** by overwriting
+ * — most snapshot-store impls upsert by key (`<pid>/<seq>.json`) so
+ * a re-save lands on the existing record without changing the seq.
+ */
+export async function migrateSnapshotStore(store, pids, manifestFor, opts = {}) {
+    const version = opts.version ?? 1;
+    let inspected = 0;
+    let wrapped = 0;
+    let skipped = 0;
+    for (const pid of pids) {
+        const latest = await store.loadLatest(pid);
+        if (latest.isNone())
+            continue;
+        inspected += 1;
+        const snapshot = latest.value;
+        if (isEnvelope(snapshot.state)) {
+            skipped += 1;
+            continue;
+        }
+        const wrappedState = wrapStateAsEnvelope(snapshot.state, manifestFor, version);
+        await store.save(pid, snapshot.sequenceNr, wrappedState);
+        wrapped += 1;
+    }
+    return { inspected, wrapped, skipped };
+}
+/* ------------------------------ shape glue ----------------------------- */
+/**
+ * Convenience: pretty-print a migration summary suitable for the CLI
+ * one-liner most users will write — `console.log(formatMigrationResult(...))`
+ * after the bulk call.
+ */
+export function formatMigrationResult(prefix, result) {
+    return `${prefix}: ${result.wrapped} wrapped, ${result.skipped} already enveloped, ${result.inspected} inspected`;
+}
+//# sourceMappingURL=wrapLegacy.js.map

package/dist/persistence/migration/wrapLegacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapLegacy.js","sourceRoot":"","sources":["../../../src/persistence/migration/wrapLegacy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,6EAA6E;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,WAA6B,EAC7B,OAAO,GAAG,CAAC;IAEX,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,WAA6B,EAC7B,OAAO,GAAG,CAAC;IAEX,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAgCD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,WAA6B,EAC7B,OAAsC,EAAE;IAExC,IAAI,OAAQ,OAAqC,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CACb,sEAAsE;cACpE,0EAA0E;cAC1E,kDAAkD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAoC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,8DAA8D;QAC9D,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAyB,GAAG,EAAE,CAAC,CAAC,CAAC;QAClE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC;;gBACjC,OAAO,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,UAAU,CAAC,kBAAkB,CACjC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAoB,EACpB,IAA2B,EAC3B,WAA6B,EAC7B,OAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAI,GAAG,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,SAAS,IAAI,CAAC,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,mBAAmB,CAAI,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,KAAK,CAAC,IAAI,CAAqB,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAuB;IAC3E,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,uBAAuB,MAAM,CAAC,SAAS,YAAY,CAAC;AACpH,CAAC"}

package/dist/persistence/object-storage/BodyCodec.d.ts

@@ -0,0 +1,88 @@
+import { type CompressionAlgo } from './Compression.js';
+/**
+ * Wire-format for snapshot / durable-state bodies stored in object storage.
+ *
+ *   Bytes 0..3   : MAGIC          "ATS1"  (actor-ts persistence v1)
+ *   Byte  4      : flags          bit0..1 = compression: 0=none, 1=gzip, 2=zstd
+ *                                  bit2     = encrypted
+ *                                  bit3     = key-versioned (#8 — master-key rotation)
+ *   Byte  5      : keyVersion     (0..255)  — only when bit3 set
+ *   Bytes ...    : AES-GCM IV     (12 bytes — only when bit2 set, immediately
+ *                                   after the keyVersion byte if present, else
+ *                                   immediately after flags)
+ *   Bytes ...    : payload        (compressed/encrypted JSON)
+ *
+ * A size-conservative header (5 bytes for unencrypted; 17 for encrypted
+ * legacy / 18 for encrypted with explicit version) keeps small snapshots
+ * cheap in S3 storage; compressing the JSON before encryption is
+ * intentional (encryption defeats compression, so the order matters and
+ * is fixed by the format).
+ *
+ * **Backwards compatibility.**  Encrypted bodies written before rotation
+ * support shipped (#8) have bit3 unset and no keyVersion byte — the
+ * decoder treats them as version 0, which transparently maps to either
+ * the legacy single-key `masterKey` config or `masterKeys.active.version
+ * === 0`.  Mixing old and new bodies in one bucket is therefore safe.
+ */
+export declare const ATS1_MAGIC: Uint8Array<ArrayBuffer>;
+export declare const COMPRESSION_NONE = 0;
+export declare const COMPRESSION_GZIP = 1;
+export declare const COMPRESSION_ZSTD = 2;
+export declare const FLAG_ENCRYPTED = 4;
+/** When set with FLAG_ENCRYPTED, the byte after `flags` is a 0..255 key version. */
+export declare const FLAG_KEY_VERSIONED = 8;
+export interface EncodeOptions {
+    readonly compression?: CompressionAlgo;
+    /**
+     * When set, the body is encrypted with AES-256-GCM using the supplied
+     * 32-byte subkey (typically derived per-pid via HKDF — see
+     * `Encryption.deriveSubkey`).  Compression runs first so encryption
+     * doesn't fight with compression's information theory; the IV is
+     * generated fresh per call and embedded in the manifest header.
+     *
+     * `keyVersion` (0..255) is embedded in the manifest so decrypt can
+     * pick the matching master key from a `MasterKeyRing` (#8).  Omit
+     * it for the legacy single-key path — the decoder treats omitted
+     * keys as "version 0".
+     */
+    readonly encryption?: {
+        readonly subKey: Uint8Array;
+        readonly keyVersion?: number;
+    };
+}
+/**
+ * Subkey resolver — given the version byte the manifest carries, return
+ * the subkey to decrypt with.  For a single-key config the resolver
+ * ignores the version and always returns the same subkey; for a
+ * keyring it dispatches.  Returning `null` means "I don't have a key
+ * for that version" — the codec then throws a clear error.
+ */
+export type SubKeyResolver = (keyVersion: number) => Promise<Uint8Array | null>;
+export interface DecodeOptions {
+    /**
+     * Required when the body is encrypted — callers either supply a
+     * single subkey (legacy single-key shape) or a resolver that
+     * dispatches on the manifest's key version.  If absent on an
+     * encrypted body, `decodeBody` rejects.
+     */
+    readonly encryption?: {
+        readonly subKey: Uint8Array;
+    } | {
+        readonly subKeyFor: SubKeyResolver;
+    };
+}
+export interface DecodedBody {
+    readonly compression: CompressionAlgo;
+    readonly encrypted: boolean;
+    /** 0..255 when the body carried a key-version manifest, else `undefined`. */
+    readonly keyVersion?: number;
+    readonly payload: Uint8Array;
+}
+/**
+ * Encode a JSON-stringified payload with the framing above.  Returns a
+ * fresh `Uint8Array` ready to ship to the backend.
+ */
+export declare function encodeBody(jsonBytes: Uint8Array, opts?: EncodeOptions): Promise<Uint8Array>;
+/** Decode a body produced by `encodeBody` back into the plaintext payload. */
+export declare function decodeBody(framed: Uint8Array, opts?: DecodeOptions): Promise<DecodedBody>;
+//# sourceMappingURL=BodyCodec.d.ts.map

package/dist/persistence/object-storage/BodyCodec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BodyCodec.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGvE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,UAAU,yBAA2C,CAAC;AAEnE,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,cAAc,IAAQ,CAAC;AACpC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,IAAS,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0CrG;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8DnG"}

package/dist/persistence/object-storage/BodyCodec.js

@@ -0,0 +1,171 @@
+import { match } from 'ts-pattern';
+import { compressorFor } from './Compression.js';
+import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.js';
+/**
+ * Wire-format for snapshot / durable-state bodies stored in object storage.
+ *
+ *   Bytes 0..3   : MAGIC          "ATS1"  (actor-ts persistence v1)
+ *   Byte  4      : flags          bit0..1 = compression: 0=none, 1=gzip, 2=zstd
+ *                                  bit2     = encrypted
+ *                                  bit3     = key-versioned (#8 — master-key rotation)
+ *   Byte  5      : keyVersion     (0..255)  — only when bit3 set
+ *   Bytes ...    : AES-GCM IV     (12 bytes — only when bit2 set, immediately
+ *                                   after the keyVersion byte if present, else
+ *                                   immediately after flags)
+ *   Bytes ...    : payload        (compressed/encrypted JSON)
+ *
+ * A size-conservative header (5 bytes for unencrypted; 17 for encrypted
+ * legacy / 18 for encrypted with explicit version) keeps small snapshots
+ * cheap in S3 storage; compressing the JSON before encryption is
+ * intentional (encryption defeats compression, so the order matters and
+ * is fixed by the format).
+ *
+ * **Backwards compatibility.**  Encrypted bodies written before rotation
+ * support shipped (#8) have bit3 unset and no keyVersion byte — the
+ * decoder treats them as version 0, which transparently maps to either
+ * the legacy single-key `masterKey` config or `masterKeys.active.version
+ * === 0`.  Mixing old and new bodies in one bucket is therefore safe.
+ */
+export const ATS1_MAGIC = new Uint8Array([0x41, 0x54, 0x53, 0x31]); // "ATS1"
+export const COMPRESSION_NONE = 0b00;
+export const COMPRESSION_GZIP = 0b01;
+export const COMPRESSION_ZSTD = 0b10;
+export const FLAG_ENCRYPTED = 0b100;
+/** When set with FLAG_ENCRYPTED, the byte after `flags` is a 0..255 key version. */
+export const FLAG_KEY_VERSIONED = 0b1000;
+/**
+ * Encode a JSON-stringified payload with the framing above.  Returns a
+ * fresh `Uint8Array` ready to ship to the backend.
+ */
+export async function encodeBody(jsonBytes, opts = {}) {
+    const algo = opts.compression ?? 'none';
+    const subKey = opts.encryption?.subKey;
+    const keyVersion = opts.encryption?.keyVersion;
+    // Step 1: compress (if requested).  Encryption-after-compression
+    // because compression-after-encryption would defeat compression
+    // (ciphertext is high-entropy) AND it's the order that protects
+    // against CRIME-style side channels.
+    const compressed = await compressorFor(algo).compress(jsonBytes);
+    // Step 2: encrypt (if requested).  IV goes into the manifest.
+    if (subKey) {
+        if (keyVersion !== undefined) {
+            if (!Number.isInteger(keyVersion) || keyVersion < 0 || keyVersion > 255) {
+                throw new Error(`BodyCodec: keyVersion must be an integer in [0, 255], got ${keyVersion}`);
+            }
+        }
+        const iv = randomIv();
+        const ciphertext = await aesGcmEncrypt(subKey, iv, compressed);
+        const versioned = keyVersion !== undefined;
+        let flags = encodeCompression(algo) | FLAG_ENCRYPTED;
+        if (versioned)
+            flags |= FLAG_KEY_VERSIONED;
+        const headerLen = ATS1_MAGIC.length + 1 + (versioned ? 1 : 0) + IV_LENGTH;
+        const out = new Uint8Array(headerLen + ciphertext.length);
+        out.set(ATS1_MAGIC, 0);
+        out[4] = flags;
+        let offset = 5;
+        if (versioned) {
+            out[offset] = keyVersion;
+            offset += 1;
+        }
+        out.set(iv, offset);
+        offset += IV_LENGTH;
+        out.set(ciphertext, offset);
+        return out;
+    }
+    // Step 3 (no encryption): build the plain framed body.
+    const flags = encodeCompression(algo);
+    const out = new Uint8Array(ATS1_MAGIC.length + 1 + compressed.length);
+    out.set(ATS1_MAGIC, 0);
+    out[4] = flags;
+    out.set(compressed, 5);
+    return out;
+}
+/** Decode a body produced by `encodeBody` back into the plaintext payload. */
+export async function decodeBody(framed, opts = {}) {
+    if (framed.length < 5 || !magicMatches(framed)) {
+        throw new Error('BodyCodec: unrecognised body — expected ATS1 magic bytes.');
+    }
+    const flags = framed[4];
+    const compression = decodeCompression(flags);
+    const encrypted = (flags & FLAG_ENCRYPTED) !== 0;
+    const versioned = (flags & FLAG_KEY_VERSIONED) !== 0;
+    let payload;
+    let keyVersion;
+    if (encrypted) {
+        if (!opts.encryption) {
+            throw new Error('BodyCodec: body is encrypted but no subKey/resolver was supplied for decoding.');
+        }
+        let offset = 5;
+        if (versioned) {
+            if (framed.length < 6) {
+                throw new Error('BodyCodec: encrypted body claims key-versioned but is shorter than the version byte requires.');
+            }
+            keyVersion = framed[5];
+            offset = 6;
+        }
+        if (framed.length < offset + IV_LENGTH) {
+            throw new Error('BodyCodec: encrypted body is shorter than the manifest IV requires.');
+        }
+        const iv = framed.subarray(offset, offset + IV_LENGTH);
+        const ciphertext = framed.subarray(offset + IV_LENGTH);
+        // Resolve the subkey: prefer the resolver path (versioned), fall
+        // back to the legacy single-subkey field.  An unversioned body
+        // dispatched against a resolver is treated as version 0 — that's
+        // the implicit version the legacy single-key shape always carried.
+        const enc = opts.encryption;
+        let subKey;
+        if ('subKeyFor' in enc) {
+            subKey = await enc.subKeyFor(keyVersion ?? 0);
+            if (!subKey) {
+                throw new Error(`BodyCodec: no master key registered for version ${keyVersion ?? 0} — `
+                    + `add it to the keyring's \`retired\` list to decrypt historical blobs.`);
+            }
+        }
+        else {
+            subKey = enc.subKey;
+        }
+        const compressedPlaintext = await aesGcmDecrypt(subKey, iv, ciphertext);
+        payload = await compressorFor(compression).decompress(compressedPlaintext);
+    }
+    else {
+        const compressedSlice = framed.subarray(5);
+        payload = await compressorFor(compression).decompress(compressedSlice);
+    }
+    return {
+        compression,
+        encrypted,
+        ...(keyVersion !== undefined ? { keyVersion } : {}),
+        payload,
+    };
+}
+/* ----------------------------- internals -------------------------------- */
+function magicMatches(buf) {
+    return buf[0] === ATS1_MAGIC[0]
+        && buf[1] === ATS1_MAGIC[1]
+        && buf[2] === ATS1_MAGIC[2]
+        && buf[3] === ATS1_MAGIC[3];
+}
+function encodeCompression(algo) {
+    // Exhaustive — adding a new CompressionAlgo variant forces this site.
+    return match(algo)
+        .with('none', () => COMPRESSION_NONE)
+        .with('gzip', () => COMPRESSION_GZIP)
+        .with('zstd', () => COMPRESSION_ZSTD)
+        .exhaustive();
+}
+function decodeCompression(flags) {
+    // Decoding the bit-pattern back to the typed union — input is a
+    // number (constrained 0..3 by the caller's bitmask), so the default
+    // throw stays as runtime guard for bad/legacy bytes.  Cannot use
+    // `match().exhaustive()` here because the input type is `number`,
+    // not a closed union.
+    switch (flags & 0b11) {
+        case COMPRESSION_NONE: return 'none';
+        case COMPRESSION_GZIP: return 'gzip';
+        case COMPRESSION_ZSTD: return 'zstd';
+        default:
+            throw new Error(`BodyCodec: unknown compression flags ${(flags & 0b11).toString(2)}`);
+    }
+}
+//# sourceMappingURL=BodyCodec.js.map

package/dist/persistence/object-storage/BodyCodec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BodyCodec.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAgDzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAqB,EAAE,OAAsB,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC;IAE/C,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,qCAAqC;IACrC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEjE,8DAA8D;IAC9D,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;QAC3C,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;QACrD,IAAI,SAAS;YAAE,KAAK,IAAI,kBAAkB,CAAC;QAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAW,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;QAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;QACpB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uDAAuD;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,OAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAErD,IAAI,OAAmB,CAAC;IACxB,IAAI,UAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;YACnH,CAAC;YACD,UAAU,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACxB,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAEvD,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAEyB,CAAC;QAC3C,IAAI,MAAyB,CAAC;QAC9B,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mDAAmD,UAAU,IAAI,CAAC,KAAK;sBACrE,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,sBAAsB;IACtB,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC;YACE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}