actor-ts 0.9.0 → 0.10.0

package/dist/persistence/journals/SqliteJournalOptions.d.ts

@@ -0,0 +1,41 @@
+import type { SqliteDriver } from '../../runtime/sqlite/index.js';
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+export interface SqliteJournalOptionsType {
+    /** File path (absolute or relative) or ":memory:" for an ephemeral DB. */
+    readonly path?: string;
+    /** Table name for events.  Default: `events`. */
+    readonly eventsTable?: string;
+    /** If true, opens the DB with WAL mode enabled. */
+    readonly wal?: boolean;
+    /**
+     * Explicit driver — useful for tests or when you want to pin a
+     * specific SQLite backend.  Default: auto-detect via `getSqliteDriver()`
+     * (Bun → `bun:sqlite`, Node → `better-sqlite3`).
+     */
+    readonly driver?: SqliteDriver;
+}
+/**
+ * Fluent builder for {@link SqliteJournalOptionsType}:
+ *
+ *     new SqliteJournal(SqliteJournalOptions.create().withPath(':memory:').withWal(true))
+ */
+export declare class SqliteJournalOptionsBuilder extends OptionsBuilder<SqliteJournalOptionsType> {
+    /** Start a fresh builder.  Equivalent to `new SqliteJournalOptionsBuilder()`. */
+    static create(): SqliteJournalOptionsBuilder;
+    /** File path (absolute or relative) or ":memory:" for an ephemeral DB. */
+    withPath(path: string): this;
+    /** Table name for events.  Default: `events`. */
+    withEventsTable(eventsTable: string): this;
+    /** If true, opens the DB with WAL mode enabled. */
+    withWal(wal?: boolean): this;
+    /** Explicit driver — pin a specific SQLite backend (defaults to auto-detect). */
+    withDriver(driver: SqliteDriver): this;
+}
+/**
+ * Accepted input for any SQLite-journal constructor: the fluent
+ * {@link SqliteJournalOptionsBuilder} OR a plain {@link SqliteJournalOptionsType} object.
+ */
+export type SqliteJournalOptions = SqliteJournalOptionsBuilder | Partial<SqliteJournalOptionsType>;
+/** Value alias so `SqliteJournalOptions.create()` / `new SqliteJournalOptions()` resolve to the builder. */
+export declare const SqliteJournalOptions: typeof SqliteJournalOptionsBuilder;
+//# sourceMappingURL=SqliteJournalOptions.d.ts.map

package/dist/persistence/journals/SqliteJournalOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqliteJournalOptions.d.ts","sourceRoot":"","sources":["../../../src/persistence/journals/SqliteJournalOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,cAAc,CAAC,wBAAwB,CAAC;IACvF,iFAAiF;IACjF,MAAM,CAAC,MAAM,IAAI,2BAA2B;IAI5C,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI5B,iDAAiD;IACjD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAI1C,mDAAmD;IACnD,OAAO,CAAC,GAAG,UAAO,GAAG,IAAI;IAIzB,iFAAiF;IACjF,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;CAGvC;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,2BAA2B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACnG,4GAA4G;AAC5G,eAAO,MAAM,oBAAoB,oCAA8B,CAAC"}

package/dist/persistence/journals/SqliteJournalOptions.js

@@ -0,0 +1,31 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+/**
+ * Fluent builder for {@link SqliteJournalOptionsType}:
+ *
+ *     new SqliteJournal(SqliteJournalOptions.create().withPath(':memory:').withWal(true))
+ */
+export class SqliteJournalOptionsBuilder extends OptionsBuilder {
+    /** Start a fresh builder.  Equivalent to `new SqliteJournalOptionsBuilder()`. */
+    static create() {
+        return new SqliteJournalOptionsBuilder();
+    }
+    /** File path (absolute or relative) or ":memory:" for an ephemeral DB. */
+    withPath(path) {
+        return this.set('path', path);
+    }
+    /** Table name for events.  Default: `events`. */
+    withEventsTable(eventsTable) {
+        return this.set('eventsTable', eventsTable);
+    }
+    /** If true, opens the DB with WAL mode enabled. */
+    withWal(wal = true) {
+        return this.set('wal', wal);
+    }
+    /** Explicit driver — pin a specific SQLite backend (defaults to auto-detect). */
+    withDriver(driver) {
+        return this.set('driver', driver);
+    }
+}
+/** Value alias so `SqliteJournalOptions.create()` / `new SqliteJournalOptions()` resolve to the builder. */
+export const SqliteJournalOptions = SqliteJournalOptionsBuilder;
+//# sourceMappingURL=SqliteJournalOptions.js.map

package/dist/persistence/journals/SqliteJournalOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqliteJournalOptions.js","sourceRoot":"","sources":["../../../src/persistence/journals/SqliteJournalOptions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAiB9D;;;;GAIG;AACH,MAAM,OAAO,2BAA4B,SAAQ,cAAwC;IACvF,iFAAiF;IACjF,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,2BAA2B,EAAE,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAC1E,QAAQ,CAAC,IAAY;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,iDAAiD;IACjD,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,mDAAmD;IACnD,OAAO,CAAC,GAAG,GAAG,IAAI;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,iFAAiF;IACjF,UAAU,CAAC,MAAoB;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;CACF;AAOD,4GAA4G;AAC5G,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC"}

package/dist/persistence/object-storage/BodyCodec.d.ts

@@ -6,11 +6,16 @@ import { type CompressionAlgo } from './Compression.js';
  *   Byte  4      : flags          bit0..1 = compression: 0=none, 1=gzip, 2=zstd
  *                                  bit2     = encrypted
  *                                  bit3     = key-versioned (#8 — master-key rotation)
+ *                                  bit4     = integrity HMAC tag appended (#116)
  *   Byte  5      : keyVersion     (0..255)  — only when bit3 set
  *   Bytes ...    : AES-GCM IV     (12 bytes — only when bit2 set, immediately
  *                                   after the keyVersion byte if present, else
  *                                   immediately after flags)
  *   Bytes ...    : payload        (compressed/encrypted JSON)
+ *   Bytes ...    : HMAC tag       (16 bytes — only when bit4 set, suffixed
+ *                                   after the payload; HMAC covers every
+ *                                   byte BEFORE the tag, including the
+ *                                   manifest header)
  *
  * A size-conservative header (5 bytes for unencrypted; 17 for encrypted
  * legacy / 18 for encrypted with explicit version) keeps small snapshots
@@ -23,6 +28,11 @@ import { type CompressionAlgo } from './Compression.js';
  * decoder treats them as version 0, which transparently maps to either
  * the legacy single-key `masterKey` config or `masterKeys.active.version
  * === 0`.  Mixing old and new bodies in one bucket is therefore safe.
+ *
+ * Same back-compat story for integrity (#116): bodies written before
+ * bit4 landed have it unset and decode without an HMAC check.  Callers
+ * who want to refuse legacy bodies after a migration can pass
+ * `requireIntegrity: true` on decode to enforce.
  */
 export declare const ATS1_MAGIC: Uint8Array<ArrayBuffer>;
 export declare const COMPRESSION_NONE = 0;
@@ -31,8 +41,17 @@ export declare const COMPRESSION_ZSTD = 2;
 export declare const FLAG_ENCRYPTED = 4;
 /** When set with FLAG_ENCRYPTED, the byte after `flags` is a 0..255 key version. */
 export declare const FLAG_KEY_VERSIONED = 8;
+/** When set, the last {@link HMAC_TAG_LENGTH} bytes are an HMAC-SHA256 over the rest. */
+export declare const FLAG_INTEGRITY_HMAC = 16;
 export interface EncodeOptions {
     readonly compression?: CompressionAlgo;
+    /**
+     * Algorithm-specific compression level (gzip 0–9, zstd 1–22) passed
+     * through to the compressor.  Out-of-range values are clamped;
+     * `undefined` uses the impl default.  Not recorded on the wire — the
+     * manifest stores only the algorithm, and decode never needs the level.
+     */
+    readonly compressionLevel?: number;
     /**
      * When set, the body is encrypted with AES-256-GCM using the supplied
      * 32-byte subkey (typically derived per-pid via HKDF — see
@@ -49,6 +68,18 @@ export interface EncodeOptions {
         readonly subKey: Uint8Array;
         readonly keyVersion?: number;
     };
+    /**
+     * Opt-in HMAC-SHA256 integrity (#116).  When set, the codec computes
+     * an HMAC over the framed body (everything up to the tag) and appends
+     * the truncated 16-byte tag.  `FLAG_INTEGRITY_HMAC` is set in the
+     * manifest.  Encrypted bodies don't need this for confidentiality
+     * (AES-GCM's auth tag already covers ciphertext), but it ties the
+     * manifest bytes to the body — useful as defense-in-depth against
+     * a manifest-flip attack.
+     */
+    readonly integrity?: {
+        readonly integrityKey: Uint8Array;
+    };
 }
 /**
  * Subkey resolver — given the version byte the manifest carries, return
@@ -70,6 +101,18 @@ export interface DecodeOptions {
     } | {
         readonly subKeyFor: SubKeyResolver;
     };
+    /**
+     * When the manifest carries `FLAG_INTEGRITY_HMAC`, the codec verifies
+     * the appended HMAC tag against this key.  Mismatch throws — body
+     * has been tampered.  Setting `requireIntegrity: true` AND providing
+     * a key forces the codec to also REJECT bodies that DON'T carry the
+     * flag (use after a migration to ensure no legacy/unprotected
+     * bodies slip through).
+     */
+    readonly integrity?: {
+        readonly integrityKey: Uint8Array;
+        readonly requireIntegrity?: boolean;
+    };
 }
 export interface DecodedBody {
     readonly compression: CompressionAlgo;

package/dist/persistence/object-storage/BodyCodec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BodyCodec.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGvE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,UAAU,yBAA2C,CAAC;AAEnE,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,cAAc,IAAQ,CAAC;AACpC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,IAAS,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0CrG;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8DnG"}
+{"version":3,"file":"BodyCodec.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,eAAO,MAAM,UAAU,yBAA2C,CAAC;AAEnE,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,cAAc,IAAQ,CAAC;AACpC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,IAAS,CAAC;AACzC,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,KAAU,CAAC;AAE3C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpF;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAA;KAAE,CAAC;CAC5D;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;KAAE,CAAC;IAC3C;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;QAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwDrG;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8FnG"}

package/dist/persistence/object-storage/BodyCodec.js

@@ -1,6 +1,7 @@
 import { match } from 'ts-pattern';
 import { compressorFor } from './Compression.js';
 import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.js';
+import { constantTimeEqual, HMAC_TAG_LENGTH, hmacSha256 } from './Integrity.js';
 /**
  * Wire-format for snapshot / durable-state bodies stored in object storage.
  *
@@ -8,11 +9,16 @@ import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.
  *   Byte  4      : flags          bit0..1 = compression: 0=none, 1=gzip, 2=zstd
  *                                  bit2     = encrypted
  *                                  bit3     = key-versioned (#8 — master-key rotation)
+ *                                  bit4     = integrity HMAC tag appended (#116)
  *   Byte  5      : keyVersion     (0..255)  — only when bit3 set
  *   Bytes ...    : AES-GCM IV     (12 bytes — only when bit2 set, immediately
  *                                   after the keyVersion byte if present, else
  *                                   immediately after flags)
  *   Bytes ...    : payload        (compressed/encrypted JSON)
+ *   Bytes ...    : HMAC tag       (16 bytes — only when bit4 set, suffixed
+ *                                   after the payload; HMAC covers every
+ *                                   byte BEFORE the tag, including the
+ *                                   manifest header)
  *
  * A size-conservative header (5 bytes for unencrypted; 17 for encrypted
  * legacy / 18 for encrypted with explicit version) keeps small snapshots
@@ -25,6 +31,11 @@ import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.
  * decoder treats them as version 0, which transparently maps to either
  * the legacy single-key `masterKey` config or `masterKeys.active.version
  * === 0`.  Mixing old and new bodies in one bucket is therefore safe.
+ *
+ * Same back-compat story for integrity (#116): bodies written before
+ * bit4 landed have it unset and decode without an HMAC check.  Callers
+ * who want to refuse legacy bodies after a migration can pass
+ * `requireIntegrity: true` on decode to enforce.
  */
 export const ATS1_MAGIC = new Uint8Array([0x41, 0x54, 0x53, 0x31]); // "ATS1"
 export const COMPRESSION_NONE = 0b00;
@@ -33,6 +44,8 @@ export const COMPRESSION_ZSTD = 0b10;
 export const FLAG_ENCRYPTED = 0b100;
 /** When set with FLAG_ENCRYPTED, the byte after `flags` is a 0..255 key version. */
 export const FLAG_KEY_VERSIONED = 0b1000;
+/** When set, the last {@link HMAC_TAG_LENGTH} bytes are an HMAC-SHA256 over the rest. */
+export const FLAG_INTEGRITY_HMAC = 0b10000;
 /**
  * Encode a JSON-stringified payload with the framing above.  Returns a
  * fresh `Uint8Array` ready to ship to the backend.
@@ -41,12 +54,14 @@ export async function encodeBody(jsonBytes, opts = {}) {
     const algo = opts.compression ?? 'none';
     const subKey = opts.encryption?.subKey;
     const keyVersion = opts.encryption?.keyVersion;
+    const integrityKey = opts.integrity?.integrityKey;
     // Step 1: compress (if requested).  Encryption-after-compression
     // because compression-after-encryption would defeat compression
     // (ciphertext is high-entropy) AND it's the order that protects
     // against CRIME-style side channels.
-    const compressed = await compressorFor(algo).compress(jsonBytes);
+    const compressed = await compressorFor(algo).compress(jsonBytes, opts.compressionLevel);
     // Step 2: encrypt (if requested).  IV goes into the manifest.
+    let bodyBeforeIntegrity;
     if (subKey) {
         if (keyVersion !== undefined) {
             if (!Number.isInteger(keyVersion) || keyVersion < 0 || keyVersion > 255) {
@@ -59,27 +74,42 @@ export async function encodeBody(jsonBytes, opts = {}) {
         let flags = encodeCompression(algo) | FLAG_ENCRYPTED;
         if (versioned)
             flags |= FLAG_KEY_VERSIONED;
+        if (integrityKey)
+            flags |= FLAG_INTEGRITY_HMAC;
         const headerLen = ATS1_MAGIC.length + 1 + (versioned ? 1 : 0) + IV_LENGTH;
-        const out = new Uint8Array(headerLen + ciphertext.length);
-        out.set(ATS1_MAGIC, 0);
-        out[4] = flags;
+        bodyBeforeIntegrity = new Uint8Array(headerLen + ciphertext.length);
+        bodyBeforeIntegrity.set(ATS1_MAGIC, 0);
+        bodyBeforeIntegrity[4] = flags;
         let offset = 5;
         if (versioned) {
-            out[offset] = keyVersion;
+            bodyBeforeIntegrity[offset] = keyVersion;
             offset += 1;
         }
-        out.set(iv, offset);
+        bodyBeforeIntegrity.set(iv, offset);
         offset += IV_LENGTH;
-        out.set(ciphertext, offset);
+        bodyBeforeIntegrity.set(ciphertext, offset);
+    }
+    else {
+        // Step 3 (no encryption): build the plain framed body.
+        let flags = encodeCompression(algo);
+        if (integrityKey)
+            flags |= FLAG_INTEGRITY_HMAC;
+        bodyBeforeIntegrity = new Uint8Array(ATS1_MAGIC.length + 1 + compressed.length);
+        bodyBeforeIntegrity.set(ATS1_MAGIC, 0);
+        bodyBeforeIntegrity[4] = flags;
+        bodyBeforeIntegrity.set(compressed, 5);
+    }
+    // Step 4 (optional): append the HMAC-SHA256 integrity tag (#116).
+    // Covers the manifest header + payload — any tampering of either
+    // invalidates the tag.
+    if (integrityKey) {
+        const tag = await hmacSha256(integrityKey, bodyBeforeIntegrity);
+        const out = new Uint8Array(bodyBeforeIntegrity.length + tag.length);
+        out.set(bodyBeforeIntegrity, 0);
+        out.set(tag, bodyBeforeIntegrity.length);
         return out;
     }
-    // Step 3 (no encryption): build the plain framed body.
-    const flags = encodeCompression(algo);
-    const out = new Uint8Array(ATS1_MAGIC.length + 1 + compressed.length);
-    out.set(ATS1_MAGIC, 0);
-    out[4] = flags;
-    out.set(compressed, 5);
-    return out;
+    return bodyBeforeIntegrity;
 }
 /** Decode a body produced by `encodeBody` back into the plaintext payload. */
 export async function decodeBody(framed, opts = {}) {
@@ -90,6 +120,34 @@ export async function decodeBody(framed, opts = {}) {
     const compression = decodeCompression(flags);
     const encrypted = (flags & FLAG_ENCRYPTED) !== 0;
     const versioned = (flags & FLAG_KEY_VERSIONED) !== 0;
+    const hasIntegrity = (flags & FLAG_INTEGRITY_HMAC) !== 0;
+    // Integrity check FIRST — before we trust any other manifest byte
+    // beyond `flags` (which we already used to know the tag is there).
+    // The HMAC tag is the last 16 bytes; verifying it proves the rest of
+    // the body wasn't tampered with, including bytes the decode path
+    // hasn't even read yet (#116).
+    let bodyForRest = framed;
+    if (hasIntegrity) {
+        if (framed.length < 5 + HMAC_TAG_LENGTH) {
+            throw new Error('BodyCodec: integrity-tagged body is shorter than the HMAC tag requires.');
+        }
+        if (!opts.integrity?.integrityKey) {
+            throw new Error('BodyCodec: body carries FLAG_INTEGRITY_HMAC but no integrityKey was supplied for decoding.');
+        }
+        const sigOffset = framed.length - HMAC_TAG_LENGTH;
+        const expected = framed.subarray(sigOffset);
+        const signed = framed.subarray(0, sigOffset);
+        const actual = await hmacSha256(opts.integrity.integrityKey, signed);
+        if (!constantTimeEqual(actual, expected)) {
+            throw new Error('BodyCodec: integrity check failed — body tampered or wrong integrity key.');
+        }
+        bodyForRest = signed;
+    }
+    else if (opts.integrity?.requireIntegrity) {
+        throw new Error('BodyCodec: body has no integrity tag but requireIntegrity=true was set.  '
+            + 'Body was either written before integrity was enabled, or is being injected '
+            + 'as part of a downgrade attack.');
+    }
     let payload;
     let keyVersion;
     if (encrypted) {
@@ -98,17 +156,17 @@ export async function decodeBody(framed, opts = {}) {
         }
         let offset = 5;
         if (versioned) {
-            if (framed.length < 6) {
+            if (bodyForRest.length < 6) {
                 throw new Error('BodyCodec: encrypted body claims key-versioned but is shorter than the version byte requires.');
             }
-            keyVersion = framed[5];
+            keyVersion = bodyForRest[5];
             offset = 6;
         }
-        if (framed.length < offset + IV_LENGTH) {
+        if (bodyForRest.length < offset + IV_LENGTH) {
             throw new Error('BodyCodec: encrypted body is shorter than the manifest IV requires.');
         }
-        const iv = framed.subarray(offset, offset + IV_LENGTH);
-        const ciphertext = framed.subarray(offset + IV_LENGTH);
+        const iv = bodyForRest.subarray(offset, offset + IV_LENGTH);
+        const ciphertext = bodyForRest.subarray(offset + IV_LENGTH);
         // Resolve the subkey: prefer the resolver path (versioned), fall
         // back to the legacy single-subkey field.  An unversioned body
         // dispatched against a resolver is treated as version 0 — that's
@@ -129,7 +187,7 @@ export async function decodeBody(framed, opts = {}) {
         payload = await compressorFor(compression).decompress(compressedPlaintext);
     }
     else {
-        const compressedSlice = framed.subarray(5);
+        const compressedSlice = bodyForRest.subarray(5);
         payload = await compressorFor(compression).decompress(compressedSlice);
     }
     return {

package/dist/persistence/object-storage/BodyCodec.js.map

@@ -1 +1 @@
-{"version":3,"file":"BodyCodec.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAgDzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAqB,EAAE,OAAsB,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC;IAE/C,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,qCAAqC;IACrC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEjE,8DAA8D;IAC9D,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;QAC3C,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;QACrD,IAAI,SAAS;YAAE,KAAK,IAAI,kBAAkB,CAAC;QAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAW,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;QAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;QACpB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uDAAuD;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,OAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAErD,IAAI,OAAmB,CAAC;IACxB,IAAI,UAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;YACnH,CAAC;YACD,UAAU,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACxB,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAEvD,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAEyB,CAAC;QAC3C,IAAI,MAAyB,CAAC;QAC9B,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mDAAmD,UAAU,IAAI,CAAC,KAAK;sBACrE,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,sBAAsB;IACtB,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC;YACE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}
+{"version":3,"file":"BodyCodec.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AA6E3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAqB,EAAE,OAAsB,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;IAElD,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,qCAAqC;IACrC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAExF,8DAA8D;IAC9D,IAAI,mBAA+B,CAAC;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;QAC3C,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;QACrD,IAAI,SAAS;YAAE,KAAK,IAAI,kBAAkB,CAAC;QAC3C,IAAI,YAAY;YAAE,KAAK,IAAI,mBAAmB,CAAC;QAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QAC1E,mBAAmB,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACpE,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvC,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,UAAW,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;QAAC,CAAC;QAC1E,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC;QACpB,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,uDAAuD;QACvD,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,YAAY;YAAE,KAAK,IAAI,mBAAmB,CAAC;QAC/C,mBAAmB,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChF,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvC,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,kEAAkE;IAClE,iEAAiE;IACjE,uBAAuB;IACvB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,OAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,CAAC,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAEzD,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,iEAAiE;IACjE,+BAA+B;IAC/B,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,WAAW,GAAG,MAAM,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2EAA2E;cACzE,6EAA6E;cAC7E,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,UAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;YACnH,CAAC;YACD,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;YAC7B,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAE5D,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAEyB,CAAC;QAC3C,IAAI,MAAyB,CAAC;QAC9B,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mDAAmD,UAAU,IAAI,CAAC,KAAK;sBACrE,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,sBAAsB;IACtB,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC;YACE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}

package/dist/persistence/object-storage/Compression.d.ts

@@ -1,17 +1,31 @@
 /**
- * Per-snapshot compression.  Three modes:
+ * Per-body compression.  Three modes:
  *   - `none` — store raw bytes.  Right choice for already-compressed payloads
  *     or very small ones where overhead beats savings.
  *   - `gzip` — `node:zlib` everywhere (Bun, Node, Deno).  No extra deps.
- *   - `zstd` — preferred for large state blobs.  Tries native runtime
- *     support first (Node ≥22.15 or Bun); falls back to the optional
- *     `fzstd` peer dependency.  If neither is available and the user
- *     selected `zstd`, the very first compress / decompress call throws
- *     a clear "install fzstd" error.
+ *     Optional level 0–9 (default 6).
+ *   - `zstd` — preferred for large state blobs.  Optional level 1–22
+ *     (default 3).
+ *
+ * Runtime support differs by DIRECTION:
+ *   - COMPRESS (write): native only — Bun (`Bun.zstdCompressSync`) or
+ *     Node ≥22.15 (`zlib.zstdCompressSync`).  There is NO pure-JS
+ *     fallback for writing: `fzstd` is decompress-only (it exposes no
+ *     `compress`).  Selecting `zstd` on a runtime without native support
+ *     throws a clear error — eagerly at plugin-init via
+ *     `probeCompressionAvailability`, not cryptically on first write.
+ *   - DECOMPRESS (read): native first, then the optional `fzstd` peer-dep
+ *     so a non-native runtime can still READ zstd bodies written
+ *     elsewhere.  `fzstd` caps the back-reference window at 2^25 (32 MB)
+ *     and may reject ultra-level (≥20) frames.
+ *
+ * The level is an encoder-only setting — it never travels on the wire and
+ * decompression doesn't need it, so changing it requires no migration.
  */
 export type CompressionAlgo = 'none' | 'gzip' | 'zstd';
 export interface Compressor {
-    compress(input: Uint8Array): Promise<Uint8Array>;
+    /** `level` is algorithm-specific and clamped; `undefined` → impl default.  Ignored by `none`. */
+    compress(input: Uint8Array, level?: number): Promise<Uint8Array>;
     decompress(input: Uint8Array): Promise<Uint8Array>;
 }
 /** Get a `Compressor` for the requested algorithm.  Cached per-algorithm. */

package/dist/persistence/object-storage/Compression.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Compression.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/Compression.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACpD;AAoGD,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,UAAU,CAO/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvF;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C"}
+{"version":3,"file":"Compression.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/Compression.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACpD;AAoID,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,UAAU,CAO/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAWvF;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,IAAI,IAAI,CAI5C"}

package/dist/persistence/object-storage/Compression.js

@@ -5,61 +5,87 @@ const gzipLazy = Lazy.of(async () => {
     const name = 'node:zlib';
     const zlib = (await import(name));
     return {
-        gzip: async (input) => zlib.gzipSync(input),
+        gzip: async (input, level) => zlib.gzipSync(input, level !== undefined ? { level: clampGzipLevel(level) } : undefined),
         gunzip: async (input) => zlib.gunzipSync(input),
     };
 });
 const gzipCompressor = {
-    async compress(input) { return (await gzipLazy.get()).gzip(input); },
+    async compress(input, level) { return (await gzipLazy.get()).gzip(input, level); },
     async decompress(input) { return (await gzipLazy.get()).gunzip(input); },
 };
-const zstdLazy = Lazy.of(async () => {
-    // 1. Bun: `Bun.zstdCompressSync` / `zstdDecompressSync` (added in Bun 1.1).
+/**
+ * zstd COMPRESS resolution — native only.  Bun (`Bun.zstdCompressSync`)
+ * then Node ≥22.15 (`zlib.zstdCompressSync`).  Deliberately NO `fzstd`
+ * fallback: fzstd is decompress-only (exposes no `compress`), so a
+ * runtime without native zstd cannot WRITE zstd — we throw a clear error
+ * here instead of the cryptic `fzstd.compress is not a function` the
+ * combined resolver used to produce on first write.
+ *
+ * Level spelling differs by runtime — Bun takes `{ level }`, Node takes
+ * `{ params: { [ZSTD_c_compressionLevel]: N } }` — but the 1..22 scale
+ * (default 3) is the same.
+ */
+const zstdCompressLazy = Lazy.of(async () => {
     const bun = globalThis.Bun;
-    if (bun?.zstdCompressSync && bun.zstdDecompressSync) {
+    if (bun?.zstdCompressSync) {
         const compressFn = bun.zstdCompressSync;
-        const decompressFn = bun.zstdDecompressSync;
-        return {
-            compress: async (i) => compressFn(i),
-            decompress: async (i) => decompressFn(i),
-            source: 'bun-native',
-        };
+        return async (i, level) => compressFn(i, level !== undefined ? { level: clampZstdLevel(level) } : undefined);
     }
-    // 2. Node 22.15+: `zlib.zstdCompressSync` / `zstdDecompressSync`.
     try {
         const zlibName = 'node:zlib';
         const zlib = (await import(zlibName));
-        if (zlib.zstdCompressSync && zlib.zstdDecompressSync) {
+        if (zlib.zstdCompressSync) {
             const compressFn = zlib.zstdCompressSync;
+            const levelParam = zlib.constants?.ZSTD_c_compressionLevel;
+            return async (i, level) => level !== undefined && levelParam !== undefined
+                ? compressFn(i, { params: { [levelParam]: clampZstdLevel(level) } })
+                : compressFn(i);
+        }
+    }
+    catch { /* node:zlib unavailable — fall through to the error */ }
+    throw new Error('zstd compression requires native runtime support — Bun (zstdCompressSync) '
+        + 'or Node ≥22.15 (zlib.zstdCompressSync).  The optional `fzstd` peer '
+        + 'dependency can only DECOMPRESS, so it cannot write zstd bodies.  '
+        + "Either run on a native-zstd runtime, or use compression: { algorithm: "
+        + "'gzip' } which works everywhere.");
+});
+/**
+ * zstd DECOMPRESS resolution — native first (Bun, Node ≥22.15), then the
+ * pure-JS `fzstd` peer-dep so a runtime without native zstd can still
+ * READ zstd bodies written elsewhere.  Note fzstd caps the back-reference
+ * window at 2^25 (32 MB) and may fail on ultra-level (≥20) frames — see
+ * `CompressionConfig.level`.
+ */
+const zstdDecompressLazy = Lazy.of(async () => {
+    const bun = globalThis.Bun;
+    if (bun?.zstdDecompressSync) {
+        const decompressFn = bun.zstdDecompressSync;
+        return async (i) => decompressFn(i);
+    }
+    try {
+        const zlibName = 'node:zlib';
+        const zlib = (await import(zlibName));
+        if (zlib.zstdDecompressSync) {
             const decompressFn = zlib.zstdDecompressSync;
-            return {
-                compress: async (i) => compressFn(i),
-                decompress: async (i) => decompressFn(i),
-                source: 'node-zlib',
-            };
+            return async (i) => decompressFn(i);
         }
     }
     catch { /* node:zlib unavailable — fall through to fzstd */ }
-    // 3. fzstd peer-dep — pure JS, cross-runtime, ~14 KB.
     try {
         const fzstdName = 'fzstd';
         const fzstd = (await import(fzstdName));
-        return {
-            compress: async (i) => fzstd.compress(i),
-            decompress: async (i) => fzstd.decompress(i),
-            source: 'fzstd',
-        };
+        return async (i) => fzstd.decompress(i);
     }
     catch (e) {
-        throw new Error('No zstd implementation available.  Either upgrade to Bun 1.1+ / '
+        throw new Error('No zstd decompressor available.  Either upgrade to Bun 1.1+ / '
             + 'Node 22.15+, or install the `fzstd` peer dependency: '
             + '`npm install fzstd`.\nOriginal error: '
             + (e instanceof Error ? e.message : String(e)));
     }
 });
 const zstdCompressor = {
-    async compress(input) { return (await zstdLazy.get()).compress(input); },
-    async decompress(input) { return (await zstdLazy.get()).decompress(input); },
+    async compress(input, level) { return (await zstdCompressLazy.get())(input, level); },
+    async decompress(input) { return (await zstdDecompressLazy.get())(input); },
 };
 /* ------------------------------- public --------------------------------- */
 const noneCompressor = {
@@ -88,12 +114,36 @@ export async function probeCompressionAvailability(algo) {
     await match(algo)
         .with('none', async () => undefined)
         .with('gzip', async () => { await gzipLazy.get(); })
-        .with('zstd', async () => { await zstdLazy.get(); })
+        // Probe the COMPRESS path: configuring `zstd` expresses write intent,
+        // and compress is the strictly stronger capability (a runtime that can
+        // compress can always decompress; an fzstd-only runtime can decompress
+        // but NOT write).  Probing compress surfaces "selected zstd but can't
+        // write it here" eagerly at plugin-init rather than on first persist.
+        .with('zstd', async () => { await zstdCompressLazy.get(); })
         .exhaustive();
 }
 /** Test hook — clear cached lazy implementations. */
 export function resetCompressionCache() {
     gzipLazy.reset();
-    zstdLazy.reset();
+    zstdCompressLazy.reset();
+    zstdDecompressLazy.reset();
+}
+/* ------------------------------- levels --------------------------------- */
+/** Clamp a gzip level into zlib's valid 0–9 range; non-finite → default 6. */
+function clampGzipLevel(level) {
+    if (!Number.isFinite(level))
+        return 6;
+    return Math.max(0, Math.min(9, Math.trunc(level)));
+}
+/**
+ * Clamp a zstd level into the portable 1–22 range; non-finite → default 3.
+ * (Node also accepts negative "fast" levels, but Bun's floor is 1 — we
+ * pin the public range to the intersection so a config is portable across
+ * runtimes.)
+ */
+function clampZstdLevel(level) {
+    if (!Number.isFinite(level))
+        return 3;
+    return Math.max(1, Math.min(22, Math.trunc(level)));
 }
 //# sourceMappingURL=Compression.js.map

package/dist/persistence/object-storage/Compression.js.map

@@ -1 +1 @@
-{"version":3,"file":"Compression.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/Compression.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAqB1C,8EAA8E;AAE9E,MAAM,QAAQ,GAGR,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;IACvB,MAAM,IAAI,GAAG,WAAW,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAG/B,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,KAAiB,EAAuB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5E,MAAM,EAAE,KAAK,EAAE,KAAiB,EAAuB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;KACjF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAe;IACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC;AAUF,MAAM,QAAQ,GAA4B,IAAI,CAAC,EAAE,CAAoB,KAAK,IAAI,EAAE;IAC9E,4EAA4E;IAC5E,MAAM,GAAG,GAAI,UAGT,CAAC,GAAG,CAAC;IACT,IAAI,GAAG,EAAE,gBAAgB,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAC5C,OAAO;YACL,QAAQ,EAAE,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YACrE,UAAU,EAAE,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAGnC,CAAC;QACF,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACzC,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC;YAC7C,OAAO;gBACL,QAAQ,EAAE,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBACrE,UAAU,EAAE,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;gBACzE,MAAM,EAAE,WAAW;aACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IAE/D,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAGrC,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzE,UAAU,EAAE,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7E,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kEAAkE;cAChE,uDAAuD;cACvD,wCAAwC;cACxC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAe;IACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC;AAEF,8EAA8E;AAE9E,MAAM,cAAc,GAAe;IACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC;IACvC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC;CAC1C,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC;SAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC;SAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC;SAClC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAqB;IACtE,MAAM,KAAK,CAAC,IAAI,CAAC;SACd,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;SACnC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;SACnD,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;SACnD,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,qBAAqB;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}
+{"version":3,"file":"Compression.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/Compression.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAmC1C,8EAA8E;AAE9E,MAAM,QAAQ,GAGR,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;IACvB,MAAM,IAAI,GAAG,WAAW,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAG/B,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,KAAiB,EAAE,KAAc,EAAuB,EAAE,CACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,EAAE,KAAK,EAAE,KAAiB,EAAuB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;KACjF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAe;IACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC;AAOF;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAkC,IAAI,CAAC,EAAE,CAA0B,KAAK,IAAI,EAAE;IAClG,MAAM,GAAG,GAAI,UAET,CAAC,GAAG,CAAC;IACT,IAAI,GAAG,EAAE,gBAAgB,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACxC,OAAO,KAAK,EAAE,CAAa,EAAE,KAAc,EAAuB,EAAE,CAClE,UAAU,CAAC,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAGnC,CAAC;QACF,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC;YAC3D,OAAO,KAAK,EAAE,CAAa,EAAE,KAAc,EAAuB,EAAE,CAClE,KAAK,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;gBAC7C,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACpE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,uDAAuD,CAAC,CAAC;IAEnE,MAAM,IAAI,KAAK,CACb,4EAA4E;UAC1E,qEAAqE;UACrE,mEAAmE;UACnE,wEAAwE;UACxE,kCAAkC,CACrC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAoC,IAAI,CAAC,EAAE,CAA4B,KAAK,IAAI,EAAE;IACxG,MAAM,GAAG,GAAI,UAET,CAAC,GAAG,CAAC;IACT,IAAI,GAAG,EAAE,kBAAkB,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAC5C,OAAO,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAEnC,CAAC;QACF,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC;YAC7C,OAAO,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAErC,CAAC;QACF,OAAO,KAAK,EAAE,CAAa,EAAuB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,gEAAgE;cAC9D,uDAAuD;cACvD,wCAAwC;cACxC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAe;IACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,OAAO,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACrF,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC5E,CAAC;AAEF,8EAA8E;AAE9E,MAAM,cAAc,GAAe;IACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC;IACvC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC;CAC1C,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC;SAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC;SAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC;SAClC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAqB;IACtE,MAAM,KAAK,CAAC,IAAI,CAAC;SACd,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;SACnC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;SACrE,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;SAC3D,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,qBAAqB;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,kBAAkB,CAAC,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAE9E,8EAA8E;AAC9E,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC"}