actor-ts 0.9.0 → 0.10.0

package/dist/persistence/durable-state-stores/MariaDbDurableStateStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MariaDbDurableStateStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/MariaDbDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAS/D,OAAO,KAAK,EAAE,+BAA+B,EAAuC,MAAM,sCAAsC,CAAC;AAQjI;;;;;;;;;;GAUG;AACH,qBAAa,wBAAyB,YAAW,iBAAiB;IAChE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,OAAO,CAAC,IAAI,CAAgC;IAC5C,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,GAAE,+BAAoC;IAOnD,MAAM,CAAC,CAAC,EACZ,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,CAAC,EACR,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IA2C3B,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAgBrG,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YASd,eAAe;YASf,UAAU;YAQV,IAAI;CAenB"}

package/dist/persistence/durable-state-stores/MariaDbDurableStateStore.js

@@ -0,0 +1,120 @@
+import { DurableStateConcurrencyError, } from '../DurableStateStore.js';
+import { JournalError } from '../JournalTypes.js';
+import { none, some } from '../../util/Option.js';
+import { affectedRowsOf, assertSafeIdentifier, buildMariaDbPool, isDuplicateKeyError, rowsOf, } from '../journals/MariaDbClient.js';
+/**
+ * DurableStateStore backed by MariaDB / MySQL (`mariadb`).  Sibling of
+ * `PostgresDurableStateStore` with the MariaDB dialect for the revision
+ * CAS:
+ *
+ *   - create (expectedRevision 0): plain `INSERT`; a duplicate-key error
+ *     (1062) means the row already exists → conflict.
+ *   - update (expectedRevision > 0): `UPDATE … WHERE revision = expected`;
+ *     `affectedRows === 0` means the stored revision diverged → conflict.
+ *     (revision always changes, so a matched row always reports 1.)
+ */
+export class MariaDbDurableStateStore {
+    settings;
+    table;
+    autoCreate;
+    pool = null;
+    initPromise = null;
+    closed = false;
+    constructor(options = {}) {
+        const s = options;
+        this.settings = s;
+        this.table = assertSafeIdentifier(s.table ?? 'durable_state', 'durable-state table');
+        this.autoCreate = s.autoCreateTables ?? true;
+    }
+    async upsert(persistenceId, expectedRevision, state, _options) {
+        if (!Number.isInteger(expectedRevision) || expectedRevision < 0) {
+            throw new JournalError(`MariaDbDurableStateStore.upsert: expectedRevision must be a non-negative integer, got ${expectedRevision}`);
+        }
+        const pool = await this.ensureOpen();
+        const now = Date.now();
+        const newRevision = expectedRevision + 1;
+        const payload = JSON.stringify(state);
+        try {
+            if (expectedRevision === 0) {
+                try {
+                    await pool.query(`INSERT INTO ${this.table}(persistence_id, revision, payload, timestamp) VALUES (?, ?, ?, ?)`, [persistenceId, newRevision, payload, now]);
+                }
+                catch (e) {
+                    if (isDuplicateKeyError(e)) {
+                        throw new DurableStateConcurrencyError(persistenceId, expectedRevision, await this.currentRevision(pool, persistenceId));
+                    }
+                    throw e;
+                }
+            }
+            else {
+                const res = await pool.query(`UPDATE ${this.table} SET revision = ?, payload = ?, timestamp = ? WHERE persistence_id = ? AND revision = ?`, [newRevision, payload, now, persistenceId, expectedRevision]);
+                if (affectedRowsOf(res) === 0) {
+                    throw new DurableStateConcurrencyError(persistenceId, expectedRevision, await this.currentRevision(pool, persistenceId));
+                }
+            }
+            return { persistenceId, revision: newRevision, state, timestamp: now };
+        }
+        catch (e) {
+            if (e instanceof DurableStateConcurrencyError)
+                throw e;
+            throw new JournalError(`MariaDbDurableStateStore.upsert failed: ${e.message}`, e);
+        }
+    }
+    async load(persistenceId, _options) {
+        const pool = await this.ensureOpen();
+        const rows = rowsOf(await pool.query(`SELECT revision, payload, timestamp FROM ${this.table} WHERE persistence_id = ?`, [persistenceId]));
+        const row = rows[0];
+        if (!row)
+            return none;
+        return some({
+            persistenceId,
+            revision: Number(row.revision),
+            state: JSON.parse(row.payload),
+            timestamp: Number(row.timestamp),
+        });
+    }
+    async delete(persistenceId) {
+        const pool = await this.ensureOpen();
+        await pool.query(`DELETE FROM ${this.table} WHERE persistence_id = ?`, [persistenceId]);
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        try {
+            await this.pool?.end();
+        }
+        catch { /* ignore */ }
+        this.pool = null;
+    }
+    /* --------------------------- internals -------------------------------- */
+    async currentRevision(pool, pid) {
+        const rows = rowsOf(await pool.query(`SELECT revision FROM ${this.table} WHERE persistence_id = ?`, [pid]));
+        const row = rows[0];
+        return row ? Number(row.revision) : 0;
+    }
+    async ensureOpen() {
+        if (this.closed)
+            throw new JournalError('MariaDbDurableStateStore is closed');
+        if (this.pool)
+            return this.pool;
+        if (!this.initPromise)
+            this.initPromise = this.init();
+        await this.initPromise;
+        return this.pool;
+    }
+    async init() {
+        const pool = await buildMariaDbPool(this.settings);
+        if (this.autoCreate) {
+            await pool.query(`CREATE TABLE IF NOT EXISTS ${this.table} (
+           persistence_id VARCHAR(255) NOT NULL,
+           revision       BIGINT NOT NULL,
+           payload        LONGTEXT NOT NULL,
+           timestamp      BIGINT NOT NULL,
+           PRIMARY KEY (persistence_id)
+         )`);
+        }
+        this.pool = pool;
+    }
+}
+//# sourceMappingURL=MariaDbDurableStateStore.js.map

package/dist/persistence/durable-state-stores/MariaDbDurableStateStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MariaDbDurableStateStore.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/MariaDbDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,GAG7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAe,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,GAEP,MAAM,8BAA8B,CAAC;AAStC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAAsC;IAC9C,KAAK,CAAS;IACd,UAAU,CAAU;IAE7B,IAAI,GAA2B,IAAI,CAAC;IACpC,WAAW,GAAyB,IAAI,CAAC;IACzC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,UAA2C,EAAE;QACvD,MAAM,CAAC,GAAI,OAA+C,CAAC;QAC3D,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,KAAK,IAAI,eAAe,EAAE,qBAAqB,CAAC,CAAC;QACrF,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,aAAqB,EACrB,gBAAwB,EACxB,KAAQ,EACR,QAA6B;QAE7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CACpB,yFAAyF,gBAAgB,EAAE,CAC5G,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,KAAK,CACd,eAAe,IAAI,CAAC,KAAK,oEAAoE,EAC7F,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAC3C,CAAC;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3B,MAAM,IAAI,4BAA4B,CACpC,aAAa,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CACjF,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAC1B,UAAU,IAAI,CAAC,KAAK,yFAAyF,EAC7G,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAC7D,CAAC;gBACF,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,4BAA4B,CACpC,aAAa,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CACjF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,4BAA4B;gBAAE,MAAM,CAAC,CAAC;YACvD,MAAM,IAAI,YAAY,CAAC,2CAA4C,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,aAAqB,EAAE,QAA6B;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAClC,4CAA4C,IAAI,CAAC,KAAK,2BAA2B,EACjF,CAAC,aAAa,CAAC,CAChB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAoC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,IAAI,CAAC;YACV,aAAa;YACb,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAM;YACnC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,2BAA2B,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,eAAe,CAAC,IAAqB,EAAE,GAAW;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAClC,wBAAwB,IAAI,CAAC,KAAK,2BAA2B,EAC7D,CAAC,GAAG,CAAC,CACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAuD,CAAC;QAC1E,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,CAAC,WAAW,CAAC;QACvB,OAAO,IAAI,CAAC,IAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CACd,8BAA8B,IAAI,CAAC,KAAK;;;;;;WAMrC,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/persistence/durable-state-stores/MariaDbDurableStateStoreOptions.d.ts

@@ -0,0 +1,38 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import type { MariaDbPoolLike, MariaDbConnection } from '../journals/MariaDbClient.js';
+export interface MariaDbDurableStateStoreOptionsType extends MariaDbConnection {
+    /** Table name.  Default: `durable_state`. */
+    readonly table?: string;
+    /** Run `CREATE TABLE IF NOT EXISTS` on first use.  Default: true. */
+    readonly autoCreateTables?: boolean;
+}
+/**
+ * Fluent builder for {@link MariaDbDurableStateStoreOptionsType}:
+ *
+ *     new MariaDbDurableStateStore(MariaDbDurableStateStoreOptions.create().withPoolConfig({ … }).withTable('state'))
+ *
+ * The connection fields (`withUrl` / `withPoolConfig` / `withPool`) come
+ * from the shared {@link MariaDbConnection} mixin.
+ */
+export declare class MariaDbDurableStateStoreOptionsBuilder extends OptionsBuilder<MariaDbDurableStateStoreOptionsType> {
+    /** Start a fresh builder.  Equivalent to `new MariaDbDurableStateStoreOptionsBuilder()`. */
+    static create(): MariaDbDurableStateStoreOptionsBuilder;
+    /** Connection URI passed straight to `createPool`, e.g. `mariadb://user:pass@host:3306/db`. */
+    withUrl(url: string): this;
+    /** `createPool` config object (host/user/password/database/…); takes precedence over `url`. */
+    withPoolConfig(poolConfig: Record<string, unknown>): this;
+    /** Pre-built pool — shares one pool across the three stores, or injects a fake in tests. */
+    withPool(pool: MariaDbPoolLike): this;
+    /** Table name.  Default: `durable_state`. */
+    withTable(table: string): this;
+    /** Run `CREATE TABLE IF NOT EXISTS` on first use.  Default: true. */
+    withAutoCreateTables(autoCreateTables: boolean): this;
+}
+/**
+ * Accepted input for the MariaDB durable-state-store constructor: the fluent
+ * {@link MariaDbDurableStateStoreOptionsBuilder} OR a plain {@link MariaDbDurableStateStoreOptionsType} object.
+ */
+export type MariaDbDurableStateStoreOptions = MariaDbDurableStateStoreOptionsBuilder | Partial<MariaDbDurableStateStoreOptionsType>;
+/** Value alias so `MariaDbDurableStateStoreOptions.create()` / `new MariaDbDurableStateStoreOptions()` resolve to the builder. */
+export declare const MariaDbDurableStateStoreOptions: typeof MariaDbDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=MariaDbDurableStateStoreOptions.d.ts.map

package/dist/persistence/durable-state-stores/MariaDbDurableStateStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MariaDbDurableStateStoreOptions.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/MariaDbDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEvF,MAAM,WAAW,mCAAoC,SAAQ,iBAAiB;IAC5E,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,qBAAa,sCAAuC,SAAQ,cAAc,CAAC,mCAAmC,CAAC;IAC7G,4FAA4F;IAC5F,MAAM,CAAC,MAAM,IAAI,sCAAsC;IAIvD,+FAA+F;IAC/F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI1B,+FAA+F;IAC/F,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIzD,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAIrC,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9B,qEAAqE;IACrE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,GAAG,IAAI;CAGtD;AAED;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GAAG,sCAAsC,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AACpI,kIAAkI;AAClI,eAAO,MAAM,+BAA+B,+CAAyC,CAAC"}

package/dist/persistence/durable-state-stores/MariaDbDurableStateStoreOptions.js

@@ -0,0 +1,38 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+/**
+ * Fluent builder for {@link MariaDbDurableStateStoreOptionsType}:
+ *
+ *     new MariaDbDurableStateStore(MariaDbDurableStateStoreOptions.create().withPoolConfig({ … }).withTable('state'))
+ *
+ * The connection fields (`withUrl` / `withPoolConfig` / `withPool`) come
+ * from the shared {@link MariaDbConnection} mixin.
+ */
+export class MariaDbDurableStateStoreOptionsBuilder extends OptionsBuilder {
+    /** Start a fresh builder.  Equivalent to `new MariaDbDurableStateStoreOptionsBuilder()`. */
+    static create() {
+        return new MariaDbDurableStateStoreOptionsBuilder();
+    }
+    /** Connection URI passed straight to `createPool`, e.g. `mariadb://user:pass@host:3306/db`. */
+    withUrl(url) {
+        return this.set('url', url);
+    }
+    /** `createPool` config object (host/user/password/database/…); takes precedence over `url`. */
+    withPoolConfig(poolConfig) {
+        return this.set('poolConfig', poolConfig);
+    }
+    /** Pre-built pool — shares one pool across the three stores, or injects a fake in tests. */
+    withPool(pool) {
+        return this.set('pool', pool);
+    }
+    /** Table name.  Default: `durable_state`. */
+    withTable(table) {
+        return this.set('table', table);
+    }
+    /** Run `CREATE TABLE IF NOT EXISTS` on first use.  Default: true. */
+    withAutoCreateTables(autoCreateTables) {
+        return this.set('autoCreateTables', autoCreateTables);
+    }
+}
+/** Value alias so `MariaDbDurableStateStoreOptions.create()` / `new MariaDbDurableStateStoreOptions()` resolve to the builder. */
+export const MariaDbDurableStateStoreOptions = MariaDbDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=MariaDbDurableStateStoreOptions.js.map

package/dist/persistence/durable-state-stores/MariaDbDurableStateStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MariaDbDurableStateStoreOptions.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/MariaDbDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAU9D;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAuC,SAAQ,cAAmD;IAC7G,4FAA4F;IAC5F,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,sCAAsC,EAAE,CAAC;IACtD,CAAC;IAED,+FAA+F;IAC/F,OAAO,CAAC,GAAW;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,+FAA+F;IAC/F,cAAc,CAAC,UAAmC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,4FAA4F;IAC5F,QAAQ,CAAC,IAAqB;QAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,6CAA6C;IAC7C,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,qEAAqE;IACrE,oBAAoB,CAAC,gBAAyB;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IACxD,CAAC;CACF;AAOD,kIAAkI;AAClI,MAAM,CAAC,MAAM,+BAA+B,GAAG,sCAAsC,CAAC"}

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStore.d.ts

@@ -1,21 +1,16 @@
-import { type ObjectStorageBackend } from '../object-storage/ObjectStorageBackend.js';
-import { type CompressionConfig, type CompressionResolver, type EncryptionConfig, type EncryptionResolver } from '../object-storage/PluginConfig.js';
 import { type DurableStateRecord, type DurableStateStore } from '../DurableStateStore.js';
 import type { PersistenceOptions } from '../PersistenceOptions.js';
 import { type Option } from '../../util/Option.js';
-export interface ObjectStorageDurableStateStoreOptions {
-    readonly backend: ObjectStorageBackend;
-    readonly prefix?: string;
-    readonly compression?: CompressionConfig | CompressionResolver;
-    readonly encryption?: EncryptionConfig | EncryptionResolver;
-}
+import type { ObjectStorageDurableStateStoreOptions } from './ObjectStorageDurableStateStoreOptions.js';
 export declare class ObjectStorageDurableStateStore implements DurableStateStore {
     private readonly backend;
     private readonly prefix;
     private readonly compression;
     private readonly encryption;
+    private readonly integrity;
+    private readonly requireIntegrity;
     private readonly etagCache;
-    constructor(opts: ObjectStorageDurableStateStoreOptions);
+    constructor(options: ObjectStorageDurableStateStoreOptions);
     load<S>(pid: string, options?: PersistenceOptions): Promise<Option<DurableStateRecord<S>>>;
     upsert<S>(pid: string, expectedRevision: number, state: S, options?: PersistenceOptions): Promise<DurableStateRecord<S>>;
     delete(pid: string): Promise<void>;

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ObjectStorageDurableStateStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStore.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAuB/D,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,GAAG,kBAAkB,CAAC;CAC7D;AAOD,qBAAa,8BAA+B,YAAW,iBAAiB;IACtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsD;IAClF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoD;IAC/E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;gBAEhD,IAAI,EAAE,qCAAqC;IAOjD,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAyB1F,MAAM,CAAC,CAAC,EACZ,GAAG,EAAE,MAAM,EACX,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAqF3B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,4EAA4E;IAC5E,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMpC,OAAO,CAAC,MAAM;CAGf"}
+{"version":3,"file":"ObjectStorageDurableStateStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStore.ts"],"names":[],"mappings":"AAsBA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,qCAAqC,EAA6C,MAAM,4CAA4C,CAAC;AA4BnJ,qBAAa,8BAA+B,YAAW,iBAAiB;IACtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsD;IAClF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoD;IAC/E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkD;IAC5E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;gBAEhD,OAAO,EAAE,qCAAqC;IAWpD,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAuD1F,MAAM,CAAC,CAAC,EACZ,GAAG,EAAE,MAAM,EACX,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IA2F3B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,4EAA4E;IAC5E,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMpC,OAAO,CAAC,MAAM;CAGf"}

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStore.js

@@ -2,7 +2,7 @@ import { JournalError } from '../JournalTypes.js';
 import { encodeBody, decodeBody } from '../object-storage/BodyCodec.js';
 import { activeEncryptKey, isVersionedKeyShape, resolveDecryptSubkey, } from '../object-storage/Encryption.js';
 import { ObjectStorageConcurrencyError, } from '../object-storage/ObjectStorageBackend.js';
-import { resolveCompression, resolveEncryption, } from '../object-storage/PluginConfig.js';
+import { resolveCompression, resolveEncryption, resolveIntegrity, } from '../object-storage/PluginConfig.js';
 import { DurableStateConcurrencyError, } from '../DurableStateStore.js';
 import { none, some } from '../../util/Option.js';
 /**
@@ -29,12 +29,19 @@ export class ObjectStorageDurableStateStore {
     prefix;
     compression;
     encryption;
+    integrity;
+    requireIntegrity;
     etagCache = new Map();
-    constructor(opts) {
-        this.backend = opts.backend;
-        this.prefix = opts.prefix ?? '';
-        this.compression = opts.compression;
-        this.encryption = opts.encryption;
+    constructor(options) {
+        const s = options;
+        if (s.backend === undefined)
+            throw new Error('ObjectStorageDurableStateStore: backend is required (call withBackend()).');
+        this.backend = s.backend;
+        this.prefix = s.prefix ?? '';
+        this.compression = s.compression;
+        this.encryption = s.encryption;
+        this.integrity = s.integrity;
+        this.requireIntegrity = s.requireIntegrity ?? false;
     }
     async load(pid, options) {
         const fetched = await this.backend.get(this.keyFor(pid));
@@ -43,8 +50,34 @@ export class ObjectStorageDurableStateStore {
         // Per-call encryption (from the actor) wins over the plugin default.
         const encryption = options?.encryption
             ?? resolveEncryption(this.encryption, pid, { mode: 'none' });
+        const integrity = options?.integrity
+            ?? resolveIntegrity(this.integrity, pid, { mode: 'none' });
+        if (this.requireIntegrity && integrity.mode !== 'hmac-sha256') {
+            throw new JournalError(`ObjectStorageDurableStateStore.load: requireIntegrity=true demands `
+                + `an integrity config with mode='hmac-sha256' (pid=${pid}).`);
+        }
         const subKeyFor = resolveDecryptSubkey(encryption, pid);
-        const decoded = await decodeBody(fetched.value.body, subKeyFor ? { encryption: { subKeyFor } } : undefined);
+        let decodeOpts;
+        if (subKeyFor || integrity.mode === 'hmac-sha256') {
+            decodeOpts = {
+                ...(subKeyFor ? { encryption: { subKeyFor } } : {}),
+                ...(integrity.mode === 'hmac-sha256'
+                    ? {
+                        integrity: {
+                            integrityKey: integrity.integrityKey,
+                            requireIntegrity: this.requireIntegrity,
+                        },
+                    }
+                    : {}),
+            };
+        }
+        let decoded;
+        try {
+            decoded = await decodeBody(fetched.value.body, decodeOpts);
+        }
+        catch (e) {
+            throw new JournalError(`ObjectStorageDurableStateStore.load: integrity / decode failure for ${pid}`, e);
+        }
         let parsed;
         try {
             parsed = JSON.parse(utf8Decoder.decode(decoded.payload));
@@ -52,6 +85,9 @@ export class ObjectStorageDurableStateStore {
         catch (e) {
             throw new JournalError(`ObjectStorageDurableStateStore.load: malformed JSON for ${pid}`, e);
         }
+        // Cache AFTER decode succeeds (integrity check inside decodeBody).
+        // Before #116 we cached before parsing; an attacker could tamper
+        // with the revision in the body and the cache would trust it.
         this.etagCache.set(pid, { etag: fetched.value.etag, revision: parsed.revision });
         return some({
             persistenceId: pid,
@@ -70,6 +106,8 @@ export class ObjectStorageDurableStateStore {
             ?? resolveCompression(this.compression, pid, { algorithm: 'gzip' });
         const encryption = options?.encryption
             ?? resolveEncryption(this.encryption, pid, { mode: 'none' });
+        const integrity = options?.integrity
+            ?? resolveIntegrity(this.integrity, pid, { mode: 'none' });
         const now = Date.now();
         const newRevision = expectedRevision + 1;
         const json = JSON.stringify({ revision: newRevision, state, timestamp: now });
@@ -77,12 +115,16 @@ export class ObjectStorageDurableStateStore {
         const stampVersion = active && isVersionedKeyShape(encryption);
         const body = await encodeBody(utf8.encode(json), {
             compression: compression.algorithm,
+            compressionLevel: compression.level,
             encryption: active
                 ? {
                     subKey: active.subKey,
                     ...(stampVersion ? { keyVersion: active.keyVersion } : {}),
                 }
                 : undefined,
+            ...(integrity.mode === 'hmac-sha256'
+                ? { integrity: { integrityKey: integrity.integrityKey } }
+                : {}),
         });
         const cached = this.etagCache.get(pid);
         // If we have a cached snapshot and its revision doesn't match what the

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"ObjectStorageDurableStateStore.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,GAE9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAKlB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,4BAA4B,GAG7B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAe,MAAM,sBAAsB,CAAC;AAE/D;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AActC,MAAM,OAAO,8BAA8B;IACxB,OAAO,CAAuB;IAC9B,MAAM,CAAS;IACf,WAAW,CAAsD;IACjE,UAAU,CAAoD;IAC9D,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,YAAY,IAA2C;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,OAA4B;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAClC,qEAAqE;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,EAClB,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;QACF,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,2DAA2D,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;YACV,aAAa,EAAE,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,GAAW,EACX,gBAAwB,EACxB,KAAQ,EACR,OAA4B;QAE5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CAAC,6EAA6E,gBAAgB,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW;eACnC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC/C,WAAW,EAAE,WAAW,CAAC,SAAS;YAClC,UAAU,EAAE,MAAM;gBAChB,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,uEAAuE;QACvE,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAClE,MAAM,WAAW,GAAoB,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,KAAK,OAAO,CAAC,CAAE,uCAAuC;QAEtD,IAAI,gBAAgB,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,WAAW;YACX,gEAAgE;YAChE,mCAAmC;YACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QACpD,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;QAE5E,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAC5D,WAAW,EAAE,kBAAkB;gBAC/B,eAAe,EAAE,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS;gBACrF,OAAO,EAAE,gBAAgB;gBACzB,WAAW;gBACX,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ;oBACzC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;wBACnE,CAAC,CAAC,SAAS;aACf,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,6BAA6B,EAAE,CAAC;gBAC/C,mEAAmE;gBACnE,kDAAkD;gBAClD,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAEpE,MAAM,CAAC,GAAW;QACxB,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"ObjectStorageDurableStateStore.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,GAE9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GAOjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,4BAA4B,GAG7B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAe,MAAM,sBAAsB,CAAC;AAG/D;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAOtC,MAAM,OAAO,8BAA8B;IACxB,OAAO,CAAuB;IAC9B,MAAM,CAAS;IACf,WAAW,CAAsD;IACjE,UAAU,CAAoD;IAC9D,SAAS,CAAkD;IAC3D,gBAAgB,CAAU;IAC1B,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,YAAY,OAA8C;QACxD,MAAM,CAAC,GAAI,OAAqD,CAAC;QACjE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC1H,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,IAAI,KAAK,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,OAA4B;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAClC,qEAAqE;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS;eAC/B,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC9D,MAAM,IAAI,YAAY,CACpB,qEAAqE;kBACnE,oDAAoD,GAAG,IAAI,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,UAA8E,CAAC;QACnF,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClD,UAAU,GAAG;gBACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa;oBAClC,CAAC,CAAC;wBACE,SAAS,EAAE;4BACT,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;yBACxC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;QACD,IAAI,OAA6D,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,YAAY,CACpB,uEAAuE,GAAG,EAAE,EAC5E,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,2DAA2D,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,mEAAmE;QACnE,iEAAiE;QACjE,8DAA8D;QAC9D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;YACV,aAAa,EAAE,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,GAAW,EACX,gBAAwB,EACxB,KAAQ,EACR,OAA4B;QAE5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CAAC,6EAA6E,gBAAgB,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW;eACnC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS;eAC/B,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC/C,WAAW,EAAE,WAAW,CAAC,SAAS;YAClC,gBAAgB,EAAE,WAAW,CAAC,KAAK;YACnC,UAAU,EAAE,MAAM;gBAChB,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;gBACH,CAAC,CAAC,SAAS;YACb,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa;gBAClC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,uEAAuE;QACvE,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAClE,MAAM,WAAW,GAAoB,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,KAAK,OAAO,CAAC,CAAE,uCAAuC;QAEtD,IAAI,gBAAgB,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,WAAW;YACX,gEAAgE;YAChE,mCAAmC;YACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QACpD,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;QAE5E,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAC5D,WAAW,EAAE,kBAAkB;gBAC/B,eAAe,EAAE,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS;gBACrF,OAAO,EAAE,gBAAgB;gBACzB,WAAW;gBACX,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ;oBACzC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;wBACnE,CAAC,CAAC,SAAS;aACf,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,6BAA6B,EAAE,CAAC;gBAC/C,mEAAmE;gBACnE,kDAAkD;gBAClD,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAEpE,MAAM,CAAC,GAAW;QACxB,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC3C,CAAC;CACF"}

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.d.ts

@@ -0,0 +1,61 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import type { ObjectStorageBackend } from '../object-storage/ObjectStorageBackend.js';
+import type { CompressionConfig, CompressionResolver, EncryptionConfig, EncryptionResolver, IntegrityConfig, IntegrityResolver } from '../object-storage/PluginConfig.js';
+export interface ObjectStorageDurableStateStoreOptionsType {
+    readonly backend: ObjectStorageBackend;
+    readonly prefix?: string;
+    readonly compression?: CompressionConfig | CompressionResolver;
+    readonly encryption?: EncryptionConfig | EncryptionResolver;
+    /**
+     * Opt-in HMAC-SHA256 integrity protection over each body (#116).
+     * Closes a tamper-in-place gap on unencrypted bodies: without this,
+     * an attacker with write access to the backend bucket can flip the
+     * `revision` field in the JSON and bypass CAS.  Default `{ mode: 'none' }`
+     * is back-compat (no integrity tag); set `{ mode: 'hmac-sha256',
+     * integrityKey }` to protect new writes and verify reads.
+     *
+     * Legacy bodies without the integrity flag still decode cleanly —
+     * tag is opt-in.  Migrate by reading-then-writing once integrity is
+     * enabled.
+     */
+    readonly integrity?: IntegrityConfig | IntegrityResolver;
+    /**
+     * When set with an `integrity` config, decode rejects bodies that
+     * DON'T carry an integrity tag.  Use after a deployment has been
+     * fully migrated so an attacker can't downgrade by re-writing a
+     * body without the tag.
+     */
+    readonly requireIntegrity?: boolean;
+}
+/**
+ * Fluent builder for {@link ObjectStorageDurableStateStoreOptionsType}.  The
+ * `backend` is required:
+ *
+ *     new ObjectStorageDurableStateStore(
+ *       ObjectStorageDurableStateStoreOptions.create().withBackend(backend).withPrefix('prod/'),
+ *     )
+ */
+export declare class ObjectStorageDurableStateStoreOptionsBuilder extends OptionsBuilder<ObjectStorageDurableStateStoreOptionsType> {
+    /** Start a fresh builder.  Equivalent to `new ObjectStorageDurableStateStoreOptionsBuilder()`. */
+    static create(): ObjectStorageDurableStateStoreOptionsBuilder;
+    /** The underlying storage layer (S3 / Filesystem / …). */
+    withBackend(backend: ObjectStorageBackend): this;
+    /** Key prefix prepended before the persistenceId.  Default: ''. */
+    withPrefix(prefix: string): this;
+    /** Compression — flat config or per-pid resolver.  Default: gzip. */
+    withCompression(compression: CompressionConfig | CompressionResolver): this;
+    /** Encryption — flat config or per-pid resolver.  Default: none. */
+    withEncryption(encryption: EncryptionConfig | EncryptionResolver): this;
+    /** Opt-in HMAC-SHA256 integrity protection over each body (#116).  Default: none. */
+    withIntegrity(integrity: IntegrityConfig | IntegrityResolver): this;
+    /** Reject reads of bodies lacking an integrity tag — post-migration downgrade protection. */
+    withRequireIntegrity(requireIntegrity?: boolean): this;
+}
+/**
+ * Accepted input for the object-storage durable-state-store constructor: the fluent
+ * {@link ObjectStorageDurableStateStoreOptionsBuilder} OR a plain {@link ObjectStorageDurableStateStoreOptionsType} object.
+ */
+export type ObjectStorageDurableStateStoreOptions = ObjectStorageDurableStateStoreOptionsBuilder | Partial<ObjectStorageDurableStateStoreOptionsType>;
+/** Value alias so `ObjectStorageDurableStateStoreOptions.create()` / `new ObjectStorageDurableStateStoreOptions()` resolve to the builder. */
+export declare const ObjectStorageDurableStateStoreOptions: typeof ObjectStorageDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=ObjectStorageDurableStateStoreOptions.d.ts.map

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObjectStorageDurableStateStoreOptions.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EAClB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,GAAG,kBAAkB,CAAC;IAC5D;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,GAAG,iBAAiB,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,qBAAa,4CAA6C,SAAQ,cAAc,CAAC,yCAAyC,CAAC;IACzH,kGAAkG;IAClG,MAAM,CAAC,MAAM,IAAI,4CAA4C;IAI7D,0DAA0D;IAC1D,WAAW,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAIhD,mEAAmE;IACnE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC,qEAAqE;IACrE,eAAe,CAAC,WAAW,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,IAAI;IAI3E,oEAAoE;IACpE,cAAc,CAAC,UAAU,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,IAAI;IAIvE,qFAAqF;IACrF,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,iBAAiB,GAAG,IAAI;IAInE,6FAA6F;IAC7F,oBAAoB,CAAC,gBAAgB,UAAO,GAAG,IAAI;CAGpD;AAED;;;GAGG;AACH,MAAM,MAAM,qCAAqC,GAAG,4CAA4C,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AACtJ,8IAA8I;AAC9I,eAAO,MAAM,qCAAqC,qDAA+C,CAAC"}

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.js

@@ -0,0 +1,42 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+/**
+ * Fluent builder for {@link ObjectStorageDurableStateStoreOptionsType}.  The
+ * `backend` is required:
+ *
+ *     new ObjectStorageDurableStateStore(
+ *       ObjectStorageDurableStateStoreOptions.create().withBackend(backend).withPrefix('prod/'),
+ *     )
+ */
+export class ObjectStorageDurableStateStoreOptionsBuilder extends OptionsBuilder {
+    /** Start a fresh builder.  Equivalent to `new ObjectStorageDurableStateStoreOptionsBuilder()`. */
+    static create() {
+        return new ObjectStorageDurableStateStoreOptionsBuilder();
+    }
+    /** The underlying storage layer (S3 / Filesystem / …). */
+    withBackend(backend) {
+        return this.set('backend', backend);
+    }
+    /** Key prefix prepended before the persistenceId.  Default: ''. */
+    withPrefix(prefix) {
+        return this.set('prefix', prefix);
+    }
+    /** Compression — flat config or per-pid resolver.  Default: gzip. */
+    withCompression(compression) {
+        return this.set('compression', compression);
+    }
+    /** Encryption — flat config or per-pid resolver.  Default: none. */
+    withEncryption(encryption) {
+        return this.set('encryption', encryption);
+    }
+    /** Opt-in HMAC-SHA256 integrity protection over each body (#116).  Default: none. */
+    withIntegrity(integrity) {
+        return this.set('integrity', integrity);
+    }
+    /** Reject reads of bodies lacking an integrity tag — post-migration downgrade protection. */
+    withRequireIntegrity(requireIntegrity = true) {
+        return this.set('requireIntegrity', requireIntegrity);
+    }
+}
+/** Value alias so `ObjectStorageDurableStateStoreOptions.create()` / `new ObjectStorageDurableStateStoreOptions()` resolve to the builder. */
+export const ObjectStorageDurableStateStoreOptions = ObjectStorageDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=ObjectStorageDurableStateStoreOptions.js.map

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObjectStorageDurableStateStoreOptions.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAsC9D;;;;;;;GAOG;AACH,MAAM,OAAO,4CAA6C,SAAQ,cAAyD;IACzH,kGAAkG;IAClG,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,4CAA4C,EAAE,CAAC;IAC5D,CAAC;IAED,0DAA0D;IAC1D,WAAW,CAAC,OAA6B;QACvC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,mEAAmE;IACnE,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,qEAAqE;IACrE,eAAe,CAAC,WAAoD;QAClE,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,cAAc,CAAC,UAAiD;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,qFAAqF;IACrF,aAAa,CAAC,SAA8C;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,6FAA6F;IAC7F,oBAAoB,CAAC,gBAAgB,GAAG,IAAI;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IACxD,CAAC;CACF;AAOD,8IAA8I;AAC9I,MAAM,CAAC,MAAM,qCAAqC,GAAG,4CAA4C,CAAC"}

package/dist/persistence/durable-state-stores/PostgresDurableStateStore.d.ts

@@ -0,0 +1,38 @@
+import { type DurableStateRecord, type DurableStateStore } from '../DurableStateStore.js';
+import type { PersistenceOptions } from '../PersistenceOptions.js';
+import { type Option } from '../../util/Option.js';
+import type { PostgresDurableStateStoreOptions } from './PostgresDurableStateStoreOptions.js';
+/**
+ * DurableStateStore backed by PostgreSQL (`pg`) — the first SQL-based
+ * durable-state store (SQLite / Cassandra ship journal + snapshot only).
+ *
+ * One row per `persistence_id`, rewritten in place.  Optimistic
+ * concurrency via the `revision` column:
+ *
+ *   - `expectedRevision === 0` → `INSERT … ON CONFLICT DO NOTHING`; zero
+ *     rows affected means the row already exists → conflict.
+ *   - `expectedRevision > 0`   → `UPDATE … WHERE revision = expected`;
+ *     zero rows affected means the stored revision diverged → conflict.
+ *
+ * On conflict the current revision is read back and reported in the
+ * `DurableStateConcurrencyError`.  `PersistenceOptions` are ignored
+ * (JSON-text payload, like the other SQL stores).
+ */
+export declare class PostgresDurableStateStore implements DurableStateStore {
+    private readonly settings;
+    private readonly table;
+    private readonly autoCreate;
+    private pool;
+    private initPromise;
+    private closed;
+    constructor(options?: PostgresDurableStateStoreOptions);
+    upsert<S>(persistenceId: string, expectedRevision: number, state: S, _options?: PersistenceOptions): Promise<DurableStateRecord<S>>;
+    load<S>(persistenceId: string, _options?: PersistenceOptions): Promise<Option<DurableStateRecord<S>>>;
+    delete(persistenceId: string): Promise<void>;
+    close(): Promise<void>;
+    /** Read the current revision for conflict reporting; 0 if the row is gone. */
+    private currentRevision;
+    private ensureOpen;
+    private init;
+}
+//# sourceMappingURL=PostgresDurableStateStore.d.ts.map

package/dist/persistence/durable-state-stores/PostgresDurableStateStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDurableStateStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/PostgresDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAM/D,OAAO,KAAK,EAAE,gCAAgC,EAAwC,MAAM,uCAAuC,CAAC;AAQpI;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,GAAE,gCAAqC;IAOpD,MAAM,CAAC,CAAC,EACZ,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,CAAC,EACR,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAwC3B,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAgBrG,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,8EAA8E;YAChE,eAAe;YASf,UAAU;YAQV,IAAI;CAcnB"}