actor-ts 0.9.1 → 0.11.0

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStore.js

@@ -1,10 +1,11 @@
 import { JournalError } from '../JournalTypes.js';
-import { encodeBody, decodeBody } from '../object-storage/BodyCodec.js';
+import { DEFAULT_MAX_DECOMPRESSED_BYTES, encodeBody, decodeBody } from '../object-storage/BodyCodec.js';
 import { activeEncryptKey, isVersionedKeyShape, resolveDecryptSubkey, } from '../object-storage/Encryption.js';
 import { ObjectStorageConcurrencyError, } from '../object-storage/ObjectStorageBackend.js';
-import { resolveCompression, resolveEncryption, } from '../object-storage/PluginConfig.js';
+import { resolveCompression, resolveEncryption, resolveIntegrity, } from '../object-storage/PluginConfig.js';
 import { DurableStateConcurrencyError, } from '../DurableStateStore.js';
 import { none, some } from '../../util/Option.js';
+import { ObjectStorageDurableStateStoreOptionsValidator } from './ObjectStorageDurableStateStoreOptions.js';
 /**
  * DurableState backed by any `ObjectStorageBackend`.  Each
  * `persistenceId` lives at the single key
@@ -29,12 +30,22 @@ export class ObjectStorageDurableStateStore {
     prefix;
     compression;
     encryption;
+    integrity;
+    requireIntegrity;
+    maxDecompressedBytes;
     etagCache = new Map();
-    constructor(opts) {
-        this.backend = opts.backend;
-        this.prefix = opts.prefix ?? '';
-        this.compression = opts.compression;
-        this.encryption = opts.encryption;
+    constructor(options) {
+        const resolvedOptions = options;
+        if (resolvedOptions.backend === undefined)
+            throw new Error('ObjectStorageDurableStateStore: backend is required (call withBackend()).');
+        new ObjectStorageDurableStateStoreOptionsValidator().validate(resolvedOptions);
+        this.backend = resolvedOptions.backend;
+        this.prefix = resolvedOptions.prefix ?? '';
+        this.compression = resolvedOptions.compression;
+        this.encryption = resolvedOptions.encryption;
+        this.integrity = resolvedOptions.integrity;
+        this.requireIntegrity = resolvedOptions.requireIntegrity ?? false;
+        this.maxDecompressedBytes = resolvedOptions.maxDecompressedBytes ?? DEFAULT_MAX_DECOMPRESSED_BYTES;
     }
     async load(pid, options) {
         const fetched = await this.backend.get(this.keyFor(pid));
@@ -43,8 +54,32 @@ export class ObjectStorageDurableStateStore {
         // Per-call encryption (from the actor) wins over the plugin default.
         const encryption = options?.encryption
             ?? resolveEncryption(this.encryption, pid, { mode: 'none' });
+        const integrity = options?.integrity
+            ?? resolveIntegrity(this.integrity, pid, { mode: 'none' });
+        if (this.requireIntegrity && integrity.mode !== 'hmac-sha256') {
+            throw new JournalError(`ObjectStorageDurableStateStore.load: requireIntegrity=true demands `
+                + `an integrity config with mode='hmac-sha256' (pid=${pid}).`);
+        }
         const subKeyFor = resolveDecryptSubkey(encryption, pid);
-        const decoded = await decodeBody(fetched.value.body, subKeyFor ? { encryption: { subKeyFor } } : undefined);
+        const decodeOpts = {
+            ...(subKeyFor ? { encryption: { subKeyFor } } : {}),
+            ...(integrity.mode === 'hmac-sha256'
+                ? {
+                    integrity: {
+                        integrityKey: integrity.integrityKey,
+                        requireIntegrity: this.requireIntegrity,
+                    },
+                }
+                : {}),
+            maxOutputBytes: this.maxDecompressedBytes,
+        };
+        let decoded;
+        try {
+            decoded = await decodeBody(fetched.value.body, decodeOpts);
+        }
+        catch (e) {
+            throw new JournalError(`ObjectStorageDurableStateStore.load: integrity / decode failure for ${pid}`, e);
+        }
         let parsed;
         try {
             parsed = JSON.parse(utf8Decoder.decode(decoded.payload));
@@ -52,6 +87,9 @@ export class ObjectStorageDurableStateStore {
         catch (e) {
             throw new JournalError(`ObjectStorageDurableStateStore.load: malformed JSON for ${pid}`, e);
         }
+        // Cache AFTER decode succeeds (integrity check inside decodeBody).
+        // Before #116 we cached before parsing; an attacker could tamper
+        // with the revision in the body and the cache would trust it.
         this.etagCache.set(pid, { etag: fetched.value.etag, revision: parsed.revision });
         return some({
             persistenceId: pid,
@@ -70,6 +108,8 @@ export class ObjectStorageDurableStateStore {
             ?? resolveCompression(this.compression, pid, { algorithm: 'gzip' });
         const encryption = options?.encryption
             ?? resolveEncryption(this.encryption, pid, { mode: 'none' });
+        const integrity = options?.integrity
+            ?? resolveIntegrity(this.integrity, pid, { mode: 'none' });
         const now = Date.now();
         const newRevision = expectedRevision + 1;
         const json = JSON.stringify({ revision: newRevision, state, timestamp: now });
@@ -77,12 +117,16 @@ export class ObjectStorageDurableStateStore {
         const stampVersion = active && isVersionedKeyShape(encryption);
         const body = await encodeBody(utf8.encode(json), {
             compression: compression.algorithm,
+            compressionLevel: compression.level,
             encryption: active
                 ? {
                     subKey: active.subKey,
                     ...(stampVersion ? { keyVersion: active.keyVersion } : {}),
                 }
                 : undefined,
+            ...(integrity.mode === 'hmac-sha256'
+                ? { integrity: { integrityKey: integrity.integrityKey } }
+                : {}),
         });
         const cached = this.etagCache.get(pid);
         // If we have a cached snapshot and its revision doesn't match what the

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"ObjectStorageDurableStateStore.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,GAE9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAKlB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,4BAA4B,GAG7B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAe,MAAM,sBAAsB,CAAC;AAE/D;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AActC,MAAM,OAAO,8BAA8B;IACxB,OAAO,CAAuB;IAC9B,MAAM,CAAS;IACf,WAAW,CAAsD;IACjE,UAAU,CAAoD;IAC9D,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,YAAY,IAA2C;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,OAA4B;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAClC,qEAAqE;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,EAClB,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;QACF,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,2DAA2D,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;YACV,aAAa,EAAE,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,GAAW,EACX,gBAAwB,EACxB,KAAQ,EACR,OAA4B;QAE5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CAAC,6EAA6E,gBAAgB,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW;eACnC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC/C,WAAW,EAAE,WAAW,CAAC,SAAS;YAClC,UAAU,EAAE,MAAM;gBAChB,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,uEAAuE;QACvE,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAClE,MAAM,WAAW,GAAoB,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,KAAK,OAAO,CAAC,CAAE,uCAAuC;QAEtD,IAAI,gBAAgB,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,WAAW;YACX,gEAAgE;YAChE,mCAAmC;YACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QACpD,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;QAE5E,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAC5D,WAAW,EAAE,kBAAkB;gBAC/B,eAAe,EAAE,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS;gBACrF,OAAO,EAAE,gBAAgB;gBACzB,WAAW;gBACX,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ;oBACzC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;wBACnE,CAAC,CAAC,SAAS;aACf,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,6BAA6B,EAAE,CAAC;gBAC/C,mEAAmE;gBACnE,kDAAkD;gBAClD,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAEpE,MAAM,CAAC,GAAW;QACxB,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"ObjectStorageDurableStateStore.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACxG,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,GAE9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GAOjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,4BAA4B,GAG7B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAe,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,8CAA8C,EAAE,MAAM,4CAA4C,CAAC;AAG5G;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAOtC,MAAM,OAAO,8BAA8B;IACxB,OAAO,CAAuB;IAC9B,MAAM,CAAS;IACf,WAAW,CAAsD;IACjE,UAAU,CAAoD;IAC9D,SAAS,CAAkD;IAC3D,gBAAgB,CAAU;IAC1B,oBAAoB,CAAS;IAC7B,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,YAAY,OAA8C;QACxD,MAAM,eAAe,GAAI,OAAqD,CAAC;QAC/E,IAAI,eAAe,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACxI,IAAI,8CAA8C,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;QAC3C,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAClE,IAAI,CAAC,oBAAoB,GAAG,eAAe,CAAC,oBAAoB,IAAI,8BAA8B,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,OAA4B;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAClC,qEAAqE;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS;eAC/B,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC9D,MAAM,IAAI,YAAY,CACpB,qEAAqE;kBACnE,oDAAoD,GAAG,IAAI,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,UAAU,GAA2D;YACzE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa;gBAClC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;qBACxC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,cAAc,EAAE,IAAI,CAAC,oBAAoB;SAC1C,CAAC;QACF,IAAI,OAA6D,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,YAAY,CACpB,uEAAuE,GAAG,EAAE,EAC5E,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,2DAA2D,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,mEAAmE;QACnE,iEAAiE;QACjE,8DAA8D;QAC9D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;YACV,aAAa,EAAE,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,GAAW,EACX,gBAAwB,EACxB,KAAQ,EACR,OAA4B;QAE5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CAAC,6EAA6E,gBAAgB,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW;eACnC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU;eACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS;eAC/B,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC/C,WAAW,EAAE,WAAW,CAAC,SAAS;YAClC,gBAAgB,EAAE,WAAW,CAAC,KAAK;YACnC,UAAU,EAAE,MAAM;gBAChB,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;gBACH,CAAC,CAAC,SAAS;YACb,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa;gBAClC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,uEAAuE;QACvE,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAClE,MAAM,WAAW,GAAoB,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,KAAK,OAAO,CAAC,CAAE,uCAAuC;QAEtD,IAAI,gBAAgB,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,WAAW;YACX,gEAAgE;YAChE,mCAAmC;YACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QACpD,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;QAE5E,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAC5D,WAAW,EAAE,kBAAkB;gBAC/B,eAAe,EAAE,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS;gBACrF,OAAO,EAAE,gBAAgB;gBACzB,WAAW;gBACX,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ;oBACzC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;wBACnE,CAAC,CAAC,SAAS;aACf,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,6BAA6B,EAAE,CAAC;gBAC/C,mEAAmE;gBACnE,kDAAkD;gBAClD,MAAM,IAAI,4BAA4B,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAEpE,MAAM,CAAC,GAAW;QACxB,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC3C,CAAC;CACF"}

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.d.ts

@@ -0,0 +1,83 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import { OptionsValidator } from '../../util/OptionsValidator.js';
+import type { ObjectStorageBackend } from '../object-storage/ObjectStorageBackend.js';
+import type { CompressionConfig, CompressionResolver, EncryptionConfig, EncryptionResolver, IntegrityConfig, IntegrityResolver } from '../object-storage/PluginConfig.js';
+export interface ObjectStorageDurableStateStoreOptionsType {
+    readonly backend: ObjectStorageBackend;
+    readonly prefix?: string;
+    readonly compression?: CompressionConfig | CompressionResolver;
+    readonly encryption?: EncryptionConfig | EncryptionResolver;
+    /**
+     * Opt-in HMAC-SHA256 integrity protection over each body (#116).
+     * Closes a tamper-in-place gap on unencrypted bodies: without this,
+     * an attacker with write access to the backend bucket can flip the
+     * `revision` field in the JSON and bypass CAS.  Default `{ mode: 'none' }`
+     * is back-compat (no integrity tag); set `{ mode: 'hmac-sha256',
+     * integrityKey }` to protect new writes and verify reads.
+     *
+     * Legacy bodies without the integrity flag still decode cleanly —
+     * tag is opt-in.  Migrate by reading-then-writing once integrity is
+     * enabled.
+     */
+    readonly integrity?: IntegrityConfig | IntegrityResolver;
+    /**
+     * When set with an `integrity` config, decode rejects bodies that
+     * DON'T carry an integrity tag.  Use after a deployment has been
+     * fully migrated so an attacker can't downgrade by re-writing a
+     * body without the tag.
+     */
+    readonly requireIntegrity?: boolean;
+    /**
+     * Cap on the decompressed size of a stored body in bytes — the
+     * decompression-bomb guard on read (security audit #3).  Default 512 MiB
+     * (`DEFAULT_MAX_DECOMPRESSED_BYTES`); `Infinity` opts out.  Raise it to
+     * restore a legitimately large state blob, or lower it for a tighter bound.
+     */
+    readonly maxDecompressedBytes?: number;
+}
+/**
+ * Fluent builder for {@link ObjectStorageDurableStateStoreOptionsType}.  The
+ * `backend` is required:
+ *
+ *     new ObjectStorageDurableStateStore(
+ *       ObjectStorageDurableStateStoreOptions.create().withBackend(backend).withPrefix('prod/'),
+ *     )
+ */
+export declare class ObjectStorageDurableStateStoreOptionsBuilder extends OptionsBuilder<ObjectStorageDurableStateStoreOptionsType> {
+    /** Start a fresh builder.  Equivalent to `new ObjectStorageDurableStateStoreOptionsBuilder()`. */
+    static create(): ObjectStorageDurableStateStoreOptionsBuilder;
+    /** The underlying storage layer (S3 / Filesystem / …). */
+    withBackend(backend: ObjectStorageBackend): this;
+    /** Key prefix prepended before the persistenceId.  Default: ''. */
+    withPrefix(prefix: string): this;
+    /** Compression — flat config or per-pid resolver.  Default: gzip. */
+    withCompression(compression: CompressionConfig | CompressionResolver): this;
+    /** Encryption — flat config or per-pid resolver.  Default: none. */
+    withEncryption(encryption: EncryptionConfig | EncryptionResolver): this;
+    /** Opt-in HMAC-SHA256 integrity protection over each body (#116).  Default: none. */
+    withIntegrity(integrity: IntegrityConfig | IntegrityResolver): this;
+    /** Reject reads of bodies lacking an integrity tag — post-migration downgrade protection. */
+    withRequireIntegrity(requireIntegrity?: boolean): this;
+    /**
+     * Cap on the decompressed body size (bytes) — decompression-bomb guard
+     * (#3).  Default 512 MiB; `Infinity` opts out.
+     */
+    withMaxDecompressedBytes(bytes: number): this;
+}
+/**
+ * Validates {@link ObjectStorageDurableStateStoreOptionsType} — currently the
+ * decompression cap, which admits `Infinity` (opt-out) that the generic
+ * `positiveInt` helper rejects, so the rule is bespoke.
+ */
+export declare class ObjectStorageDurableStateStoreOptionsValidator extends OptionsValidator<ObjectStorageDurableStateStoreOptionsType> {
+    constructor();
+    protected rules(s: Partial<ObjectStorageDurableStateStoreOptionsType>): void;
+}
+/**
+ * Accepted input for the object-storage durable-state-store constructor: the fluent
+ * {@link ObjectStorageDurableStateStoreOptionsBuilder} OR a plain {@link ObjectStorageDurableStateStoreOptionsType} object.
+ */
+export type ObjectStorageDurableStateStoreOptions = ObjectStorageDurableStateStoreOptionsBuilder | Partial<ObjectStorageDurableStateStoreOptionsType>;
+/** Value alias so `ObjectStorageDurableStateStoreOptions.create()` / `new ObjectStorageDurableStateStoreOptions()` resolve to the builder. */
+export declare const ObjectStorageDurableStateStoreOptions: typeof ObjectStorageDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=ObjectStorageDurableStateStoreOptions.d.ts.map

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObjectStorageDurableStateStoreOptions.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EAClB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,GAAG,kBAAkB,CAAC;IAC5D;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,GAAG,iBAAiB,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,qBAAa,4CAA6C,SAAQ,cAAc,CAAC,yCAAyC,CAAC;IACzH,kGAAkG;IAClG,MAAM,CAAC,MAAM,IAAI,4CAA4C;IAI7D,0DAA0D;IAC1D,WAAW,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAIhD,mEAAmE;IACnE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC,qEAAqE;IACrE,eAAe,CAAC,WAAW,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,IAAI;IAI3E,oEAAoE;IACpE,cAAc,CAAC,UAAU,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,IAAI;IAIvE,qFAAqF;IACrF,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,iBAAiB,GAAG,IAAI;IAInE,6FAA6F;IAC7F,oBAAoB,CAAC,gBAAgB,UAAO,GAAG,IAAI;IAInD;;;OAGG;IACH,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG9C;AAED;;;;GAIG;AACH,qBAAa,8CAA+C,SAAQ,gBAAgB,CAAC,yCAAyC,CAAC;;IAI7H,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,yCAAyC,CAAC,GAAG,IAAI;CAS7E;AAED;;;GAGG;AACH,MAAM,MAAM,qCAAqC,GAAG,4CAA4C,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AACtJ,8IAA8I;AAC9I,eAAO,MAAM,qCAAqC,qDAA+C,CAAC"}

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.js

@@ -0,0 +1,67 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import { OptionsValidator } from '../../util/OptionsValidator.js';
+/**
+ * Fluent builder for {@link ObjectStorageDurableStateStoreOptionsType}.  The
+ * `backend` is required:
+ *
+ *     new ObjectStorageDurableStateStore(
+ *       ObjectStorageDurableStateStoreOptions.create().withBackend(backend).withPrefix('prod/'),
+ *     )
+ */
+export class ObjectStorageDurableStateStoreOptionsBuilder extends OptionsBuilder {
+    /** Start a fresh builder.  Equivalent to `new ObjectStorageDurableStateStoreOptionsBuilder()`. */
+    static create() {
+        return new ObjectStorageDurableStateStoreOptionsBuilder();
+    }
+    /** The underlying storage layer (S3 / Filesystem / …). */
+    withBackend(backend) {
+        return this.set('backend', backend);
+    }
+    /** Key prefix prepended before the persistenceId.  Default: ''. */
+    withPrefix(prefix) {
+        return this.set('prefix', prefix);
+    }
+    /** Compression — flat config or per-pid resolver.  Default: gzip. */
+    withCompression(compression) {
+        return this.set('compression', compression);
+    }
+    /** Encryption — flat config or per-pid resolver.  Default: none. */
+    withEncryption(encryption) {
+        return this.set('encryption', encryption);
+    }
+    /** Opt-in HMAC-SHA256 integrity protection over each body (#116).  Default: none. */
+    withIntegrity(integrity) {
+        return this.set('integrity', integrity);
+    }
+    /** Reject reads of bodies lacking an integrity tag — post-migration downgrade protection. */
+    withRequireIntegrity(requireIntegrity = true) {
+        return this.set('requireIntegrity', requireIntegrity);
+    }
+    /**
+     * Cap on the decompressed body size (bytes) — decompression-bomb guard
+     * (#3).  Default 512 MiB; `Infinity` opts out.
+     */
+    withMaxDecompressedBytes(bytes) {
+        return this.set('maxDecompressedBytes', bytes);
+    }
+}
+/**
+ * Validates {@link ObjectStorageDurableStateStoreOptionsType} — currently the
+ * decompression cap, which admits `Infinity` (opt-out) that the generic
+ * `positiveInt` helper rejects, so the rule is bespoke.
+ */
+export class ObjectStorageDurableStateStoreOptionsValidator extends OptionsValidator {
+    constructor() {
+        super('ObjectStorageDurableStateStoreOptions');
+    }
+    rules(s) {
+        const { maxDecompressedBytes } = s;
+        if (maxDecompressedBytes !== undefined && maxDecompressedBytes !== Infinity &&
+            (typeof maxDecompressedBytes !== 'number' || !Number.isInteger(maxDecompressedBytes) || maxDecompressedBytes < 1)) {
+            this.fail('maxDecompressedBytes', 'must be a positive integer or Infinity', maxDecompressedBytes);
+        }
+    }
+}
+/** Value alias so `ObjectStorageDurableStateStoreOptions.create()` / `new ObjectStorageDurableStateStoreOptions()` resolve to the builder. */
+export const ObjectStorageDurableStateStoreOptions = ObjectStorageDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=ObjectStorageDurableStateStoreOptions.js.map

package/dist/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ObjectStorageDurableStateStoreOptions.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/ObjectStorageDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AA6ClE;;;;;;;GAOG;AACH,MAAM,OAAO,4CAA6C,SAAQ,cAAyD;IACzH,kGAAkG;IAClG,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,4CAA4C,EAAE,CAAC;IAC5D,CAAC;IAED,0DAA0D;IAC1D,WAAW,CAAC,OAA6B;QACvC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,mEAAmE;IACnE,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,qEAAqE;IACrE,eAAe,CAAC,WAAoD;QAClE,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,cAAc,CAAC,UAAiD;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,qFAAqF;IACrF,aAAa,CAAC,SAA8C;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,6FAA6F;IAC7F,oBAAoB,CAAC,gBAAgB,GAAG,IAAI;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,KAAa;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,8CAA+C,SAAQ,gBAA2D;IAC7H;QACE,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACjD,CAAC;IACS,KAAK,CAAC,CAAqD;QACnE,MAAM,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACnC,IACE,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,KAAK,QAAQ;YACvE,CAAC,OAAO,oBAAoB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,GAAG,CAAC,CAAC,EACjH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,wCAAwC,EAAE,oBAAoB,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;CACF;AAOD,8IAA8I;AAC9I,MAAM,CAAC,MAAM,qCAAqC,GAAG,4CAA4C,CAAC"}

package/dist/persistence/durable-state-stores/PostgresDurableStateStore.d.ts

@@ -0,0 +1,38 @@
+import { type DurableStateRecord, type DurableStateStore } from '../DurableStateStore.js';
+import type { PersistenceOptions } from '../PersistenceOptions.js';
+import { type Option } from '../../util/Option.js';
+import type { PostgresDurableStateStoreOptions } from './PostgresDurableStateStoreOptions.js';
+/**
+ * DurableStateStore backed by PostgreSQL (`pg`) — the first SQL-based
+ * durable-state store (SQLite / Cassandra ship journal + snapshot only).
+ *
+ * One row per `persistence_id`, rewritten in place.  Optimistic
+ * concurrency via the `revision` column:
+ *
+ *   - `expectedRevision === 0` → `INSERT … ON CONFLICT DO NOTHING`; zero
+ *     rows affected means the row already exists → conflict.
+ *   - `expectedRevision > 0`   → `UPDATE … WHERE revision = expected`;
+ *     zero rows affected means the stored revision diverged → conflict.
+ *
+ * On conflict the current revision is read back and reported in the
+ * `DurableStateConcurrencyError`.  `PersistenceOptions` are ignored
+ * (JSON-text payload, like the other SQL stores).
+ */
+export declare class PostgresDurableStateStore implements DurableStateStore {
+    private readonly options;
+    private readonly table;
+    private readonly autoCreate;
+    private pool;
+    private initPromise;
+    private closed;
+    constructor(options?: PostgresDurableStateStoreOptions);
+    upsert<S>(persistenceId: string, expectedRevision: number, state: S, _options?: PersistenceOptions): Promise<DurableStateRecord<S>>;
+    load<S>(persistenceId: string, _options?: PersistenceOptions): Promise<Option<DurableStateRecord<S>>>;
+    delete(persistenceId: string): Promise<void>;
+    close(): Promise<void>;
+    /** Read the current revision for conflict reporting; 0 if the row is gone. */
+    private currentRevision;
+    private ensureOpen;
+    private init;
+}
+//# sourceMappingURL=PostgresDurableStateStore.d.ts.map

package/dist/persistence/durable-state-stores/PostgresDurableStateStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDurableStateStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/PostgresDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAM/D,OAAO,KAAK,EAAE,gCAAgC,EAAwC,MAAM,uCAAuC,CAAC;AAQpI;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,GAAE,gCAAqC;IAOpD,MAAM,CAAC,CAAC,EACZ,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,CAAC,EACR,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAwC3B,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAgBrG,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,8EAA8E;YAChE,eAAe;YASf,UAAU;YAQV,IAAI;CAcnB"}

package/dist/persistence/durable-state-stores/PostgresDurableStateStore.js

@@ -0,0 +1,121 @@
+import { DurableStateConcurrencyError, } from '../DurableStateStore.js';
+import { JournalError } from '../JournalTypes.js';
+import { none, some } from '../../util/Option.js';
+import { assertSafeIdentifier, buildPgPool, } from '../journals/PostgresClient.js';
+/**
+ * DurableStateStore backed by PostgreSQL (`pg`) — the first SQL-based
+ * durable-state store (SQLite / Cassandra ship journal + snapshot only).
+ *
+ * One row per `persistence_id`, rewritten in place.  Optimistic
+ * concurrency via the `revision` column:
+ *
+ *   - `expectedRevision === 0` → `INSERT … ON CONFLICT DO NOTHING`; zero
+ *     rows affected means the row already exists → conflict.
+ *   - `expectedRevision > 0`   → `UPDATE … WHERE revision = expected`;
+ *     zero rows affected means the stored revision diverged → conflict.
+ *
+ * On conflict the current revision is read back and reported in the
+ * `DurableStateConcurrencyError`.  `PersistenceOptions` are ignored
+ * (JSON-text payload, like the other SQL stores).
+ */
+export class PostgresDurableStateStore {
+    options;
+    table;
+    autoCreate;
+    pool = null;
+    initPromise = null;
+    closed = false;
+    constructor(options = {}) {
+        const resolvedOptions = options;
+        this.options = resolvedOptions;
+        this.table = assertSafeIdentifier(resolvedOptions.table ?? 'durable_state', 'durable-state table');
+        this.autoCreate = resolvedOptions.autoCreateTables ?? true;
+    }
+    async upsert(persistenceId, expectedRevision, state, _options) {
+        if (!Number.isInteger(expectedRevision) || expectedRevision < 0) {
+            throw new JournalError(`PostgresDurableStateStore.upsert: expectedRevision must be a non-negative integer, got ${expectedRevision}`);
+        }
+        const pool = await this.ensureOpen();
+        const now = Date.now();
+        const newRevision = expectedRevision + 1;
+        const payload = JSON.stringify(state);
+        try {
+            if (expectedRevision === 0) {
+                const res = await pool.query(`INSERT INTO ${this.table}(persistence_id, revision, payload, timestamp) VALUES ($1, $2, $3, $4)
+           ON CONFLICT (persistence_id) DO NOTHING`, [persistenceId, newRevision, payload, now]);
+                if ((res.rowCount ?? 0) === 0) {
+                    throw new DurableStateConcurrencyError(persistenceId, expectedRevision, await this.currentRevision(pool, persistenceId));
+                }
+            }
+            else {
+                const res = await pool.query(`UPDATE ${this.table} SET revision = $1, payload = $2, timestamp = $3 WHERE persistence_id = $4 AND revision = $5`, [newRevision, payload, now, persistenceId, expectedRevision]);
+                if ((res.rowCount ?? 0) === 0) {
+                    throw new DurableStateConcurrencyError(persistenceId, expectedRevision, await this.currentRevision(pool, persistenceId));
+                }
+            }
+            return { persistenceId, revision: newRevision, state, timestamp: now };
+        }
+        catch (e) {
+            if (e instanceof DurableStateConcurrencyError)
+                throw e;
+            throw new JournalError(`PostgresDurableStateStore.upsert failed: ${e.message}`, e);
+        }
+    }
+    async load(persistenceId, _options) {
+        const pool = await this.ensureOpen();
+        const res = await pool.query(`SELECT revision, payload, timestamp FROM ${this.table} WHERE persistence_id = $1`, [persistenceId]);
+        const row = res.rows[0];
+        if (!row)
+            return none;
+        return some({
+            persistenceId,
+            revision: Number(row.revision),
+            state: JSON.parse(row.payload),
+            timestamp: Number(row.timestamp),
+        });
+    }
+    async delete(persistenceId) {
+        const pool = await this.ensureOpen();
+        await pool.query(`DELETE FROM ${this.table} WHERE persistence_id = $1`, [persistenceId]);
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        try {
+            await this.pool?.end();
+        }
+        catch { /* ignore */ }
+        this.pool = null;
+    }
+    /* --------------------------- internals -------------------------------- */
+    /** Read the current revision for conflict reporting; 0 if the row is gone. */
+    async currentRevision(pool, pid) {
+        const res = await pool.query(`SELECT revision FROM ${this.table} WHERE persistence_id = $1`, [pid]);
+        const row = res.rows[0];
+        return row ? Number(row.revision) : 0;
+    }
+    async ensureOpen() {
+        if (this.closed)
+            throw new JournalError('PostgresDurableStateStore is closed');
+        if (this.pool)
+            return this.pool;
+        if (!this.initPromise)
+            this.initPromise = this.init();
+        await this.initPromise;
+        return this.pool;
+    }
+    async init() {
+        const pool = await buildPgPool(this.options);
+        if (this.autoCreate) {
+            await pool.query(`CREATE TABLE IF NOT EXISTS ${this.table} (
+           persistence_id TEXT PRIMARY KEY,
+           revision       BIGINT NOT NULL,
+           payload        TEXT NOT NULL,
+           timestamp      BIGINT NOT NULL
+         )`);
+        }
+        this.pool = pool;
+    }
+}
+//# sourceMappingURL=PostgresDurableStateStore.js.map

package/dist/persistence/durable-state-stores/PostgresDurableStateStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDurableStateStore.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/PostgresDurableStateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,GAG7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAe,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EACL,oBAAoB,EACpB,WAAW,GAEZ,MAAM,+BAA+B,CAAC;AASvC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,yBAAyB;IACnB,OAAO,CAAuC;IAC9C,KAAK,CAAS;IACd,UAAU,CAAU;IAE7B,IAAI,GAAsB,IAAI,CAAC;IAC/B,WAAW,GAAyB,IAAI,CAAC;IACzC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,UAA4C,EAAE;QACxD,MAAM,eAAe,GAAI,OAAgD,CAAC;QAC1E,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,eAAe,CAAC,KAAK,IAAI,eAAe,EAAE,qBAAqB,CAAC,CAAC;QACnG,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,MAAM,CACV,aAAqB,EACrB,gBAAwB,EACxB,KAAQ,EACR,QAA6B;QAE7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CACpB,0FAA0F,gBAAgB,EAAE,CAC7G,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAC1B,eAAe,IAAI,CAAC,KAAK;mDACgB,EACzC,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAC3C,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,4BAA4B,CACpC,aAAa,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CACjF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAC1B,UAAU,IAAI,CAAC,KAAK,8FAA8F,EAClH,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAC7D,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,4BAA4B,CACpC,aAAa,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CACjF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,4BAA4B;gBAAE,MAAM,CAAC,CAAC;YACvD,MAAM,IAAI,YAAY,CAAC,4CAA6C,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,aAAqB,EAAE,QAA6B;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAC1B,4CAA4C,IAAI,CAAC,KAAK,4BAA4B,EAClF,CAAC,aAAa,CAAC,CAChB,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAoC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,IAAI,CAAC;YACV,aAAa;YACb,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAM;YACnC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,4BAA4B,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,4EAA4E;IAE5E,8EAA8E;IACtE,KAAK,CAAC,eAAe,CAAC,IAAgB,EAAE,GAAW;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAC1B,wBAAwB,IAAI,CAAC,KAAK,4BAA4B,EAC9D,CAAC,GAAG,CAAC,CACN,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAA8C,CAAC;QACrE,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,qCAAqC,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,CAAC,WAAW,CAAC;QACvB,OAAO,IAAI,CAAC,IAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CACd,8BAA8B,IAAI,CAAC,KAAK;;;;;WAKrC,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/persistence/durable-state-stores/PostgresDurableStateStoreOptions.d.ts

@@ -0,0 +1,38 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import type { PgPoolLike, PostgresConnection } from '../journals/PostgresClient.js';
+export interface PostgresDurableStateStoreOptionsType extends PostgresConnection {
+    /** Table name.  Default: `durable_state`. */
+    readonly table?: string;
+    /** Run `CREATE TABLE IF NOT EXISTS` on first use.  Default: true. */
+    readonly autoCreateTables?: boolean;
+}
+/**
+ * Fluent builder for {@link PostgresDurableStateStoreOptionsType}:
+ *
+ *     new PostgresDurableStateStore(PostgresDurableStateStoreOptions.create().withUrl('postgres://…').withTable('state'))
+ *
+ * The connection fields (`withUrl` / `withPoolConfig` / `withPool`) come
+ * from the shared {@link PostgresConnection} mixin.
+ */
+export declare class PostgresDurableStateStoreOptionsBuilder extends OptionsBuilder<PostgresDurableStateStoreOptionsType> {
+    /** Start a fresh builder.  Equivalent to `new PostgresDurableStateStoreOptionsBuilder()`. */
+    static create(): PostgresDurableStateStoreOptionsBuilder;
+    /** Connection string, e.g. `postgres://user:pass@host:5432/db`. */
+    withUrl(url: string): this;
+    /** Extra node-postgres `Pool` config, merged over `{ connectionString: url }`. */
+    withPoolConfig(poolConfig: Record<string, unknown>): this;
+    /** Pre-built pool — bypasses the lazy `pg` import; share it across stores. */
+    withPool(pool: PgPoolLike): this;
+    /** Table name.  Default: `durable_state`. */
+    withTable(table: string): this;
+    /** Run `CREATE TABLE IF NOT EXISTS` on first use.  Default: true. */
+    withAutoCreateTables(autoCreateTables: boolean): this;
+}
+/**
+ * Accepted input for the Postgres durable-state-store constructor: the fluent
+ * {@link PostgresDurableStateStoreOptionsBuilder} OR a plain {@link PostgresDurableStateStoreOptionsType} object.
+ */
+export type PostgresDurableStateStoreOptions = PostgresDurableStateStoreOptionsBuilder | Partial<PostgresDurableStateStoreOptionsType>;
+/** Value alias so `PostgresDurableStateStoreOptions.create()` / `new PostgresDurableStateStoreOptions()` resolve to the builder. */
+export declare const PostgresDurableStateStoreOptions: typeof PostgresDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=PostgresDurableStateStoreOptions.d.ts.map

package/dist/persistence/durable-state-stores/PostgresDurableStateStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDurableStateStoreOptions.d.ts","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/PostgresDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEpF,MAAM,WAAW,oCAAqC,SAAQ,kBAAkB;IAC9E,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,qBAAa,uCAAwC,SAAQ,cAAc,CAAC,oCAAoC,CAAC;IAC/G,6FAA6F;IAC7F,MAAM,CAAC,MAAM,IAAI,uCAAuC;IAIxD,mEAAmE;IACnE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI1B,kFAAkF;IAClF,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIzD,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAIhC,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9B,qEAAqE;IACrE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,GAAG,IAAI;CAGtD;AAED;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG,uCAAuC,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;AACvI,oIAAoI;AACpI,eAAO,MAAM,gCAAgC,gDAA0C,CAAC"}

package/dist/persistence/durable-state-stores/PostgresDurableStateStoreOptions.js

@@ -0,0 +1,38 @@
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+/**
+ * Fluent builder for {@link PostgresDurableStateStoreOptionsType}:
+ *
+ *     new PostgresDurableStateStore(PostgresDurableStateStoreOptions.create().withUrl('postgres://…').withTable('state'))
+ *
+ * The connection fields (`withUrl` / `withPoolConfig` / `withPool`) come
+ * from the shared {@link PostgresConnection} mixin.
+ */
+export class PostgresDurableStateStoreOptionsBuilder extends OptionsBuilder {
+    /** Start a fresh builder.  Equivalent to `new PostgresDurableStateStoreOptionsBuilder()`. */
+    static create() {
+        return new PostgresDurableStateStoreOptionsBuilder();
+    }
+    /** Connection string, e.g. `postgres://user:pass@host:5432/db`. */
+    withUrl(url) {
+        return this.set('url', url);
+    }
+    /** Extra node-postgres `Pool` config, merged over `{ connectionString: url }`. */
+    withPoolConfig(poolConfig) {
+        return this.set('poolConfig', poolConfig);
+    }
+    /** Pre-built pool — bypasses the lazy `pg` import; share it across stores. */
+    withPool(pool) {
+        return this.set('pool', pool);
+    }
+    /** Table name.  Default: `durable_state`. */
+    withTable(table) {
+        return this.set('table', table);
+    }
+    /** Run `CREATE TABLE IF NOT EXISTS` on first use.  Default: true. */
+    withAutoCreateTables(autoCreateTables) {
+        return this.set('autoCreateTables', autoCreateTables);
+    }
+}
+/** Value alias so `PostgresDurableStateStoreOptions.create()` / `new PostgresDurableStateStoreOptions()` resolve to the builder. */
+export const PostgresDurableStateStoreOptions = PostgresDurableStateStoreOptionsBuilder;
+//# sourceMappingURL=PostgresDurableStateStoreOptions.js.map

package/dist/persistence/durable-state-stores/PostgresDurableStateStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresDurableStateStoreOptions.js","sourceRoot":"","sources":["../../../src/persistence/durable-state-stores/PostgresDurableStateStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAU9D;;;;;;;GAOG;AACH,MAAM,OAAO,uCAAwC,SAAQ,cAAoD;IAC/G,6FAA6F;IAC7F,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,uCAAuC,EAAE,CAAC;IACvD,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAC,GAAW;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,kFAAkF;IAClF,cAAc,CAAC,UAAmC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,8EAA8E;IAC9E,QAAQ,CAAC,IAAgB;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,6CAA6C;IAC7C,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,qEAAqE;IACrE,oBAAoB,CAAC,gBAAyB;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IACxD,CAAC;CACF;AAOD,oIAAoI;AACpI,MAAM,CAAC,MAAM,gCAAgC,GAAG,uCAAuC,CAAC"}