actor-ts 0.9.1 → 0.11.0

package/dist/persistence/migration/defaultsAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaultsAdapter.js","sourceRoot":"","sources":["../../../src/persistence/migration/defaultsAdapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AA+B/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAmB,IAA4B;IAC5E,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC;IAC9D,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ;QAC7B,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE,CAAC,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,cAAc;gBAC3C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAM;SACvD,CAAC;QACF,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAM;KAC7E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAmB,IAA4B;IACpF,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC;IAC9D,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ;QAC7B,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE,CAAC,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,cAAc;gBAC3C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAM;SACvD,CAAC;QACF,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAM;KAC7E,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,SAAS,YAAY,CAAI,IAA4B;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,0BAA0B,IAAI,CAAC,cAAc,GAAG;kBAC9F,qEAAqE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,gEAAgE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,YAAY,iCAAiC,IAAI,CAAC,cAAc,EAAE,CACxG,CAAC;QACJ,CAAC;QACD,oEAAoE;QACpE,+DAA+D;QAC/D,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,YAAY,uCAAuC;sBACtF,sCAAsC,IAAI,CAAC,cAAc,sBAAsB,CAAC,GAAG,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAI,MAAmB,EAAE,IAA4B;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CACtB,8CAA8C,IAAI,CAAC,QAAQ,WAAW,MAAM,CAAC,QAAQ,GAAG,EACxF,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,cAAc,CACtB,qBAAqB,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,OAAO,QAAQ,IAAI,CAAC,cAAc,EAAE,EAC1F,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,MAAM,CAAC,OAAkC,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAwC,CAAC;QACrE,IAAI,IAAI;YAAE,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,OAAU,EAAE,IAA4B,EAAE,aAAqB;IAE/D,IAAI,OAAO,GAAG,EAAE,GAAI,OAAmC,EAAE,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAwC,CAAC;QACvE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"defaultsAdapter.js","sourceRoot":"","sources":["../../../src/persistence/migration/defaultsAdapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AA+B/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAmB,IAA4B;IAC5E,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC;IAC9D,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ;QAC7B,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE,CAAC,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,cAAc;gBAC3C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAM;SACvD,CAAC;QACF,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAM;KAC7E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAmB,IAA4B;IACpF,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC;IAC9D,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ;QAC7B,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE,CAAC,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,cAAc;gBAC3C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAM;SACvD,CAAC;QACF,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAM;KAC7E,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,SAAS,YAAY,CAAI,IAA4B;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,iEAAiE,GAAG,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,0BAA0B,IAAI,CAAC,cAAc,GAAG;kBAC9F,qEAAqE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,gEAAgE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,YAAY,iCAAiC,IAAI,CAAC,cAAc,EAAE,CACxG,CAAC;QACJ,CAAC;QACD,oEAAoE;QACpE,+DAA+D;QAC/D,KAAK,IAAI,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,YAAY,uCAAuC;sBACtF,sCAAsC,IAAI,CAAC,cAAc,sBAAsB,OAAO,GAAG,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAI,MAAmB,EAAE,IAA4B;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CACtB,8CAA8C,IAAI,CAAC,QAAQ,WAAW,MAAM,CAAC,QAAQ,GAAG,EACxF,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,cAAc,CACtB,qBAAqB,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,OAAO,QAAQ,IAAI,CAAC,cAAc,EAAE,EAC1F,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,MAAM,CAAC,OAAkC,CAAC;IACxD,KAAK,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAwC,CAAC;QAC3E,IAAI,IAAI;YAAE,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,OAAU,EAAE,IAA4B,EAAE,aAAqB;IAE/D,IAAI,OAAO,GAAG,EAAE,GAAI,OAAmC,EAAE,CAAC;IAC1D,KAAK,IAAI,OAAO,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,OAAO,IAAI,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAwC,CAAC;QAC7E,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/persistence/migration/validatedAdapter.js

@@ -74,13 +74,13 @@ function preview(wire, opts) {
         }
         catch { /* fall through */ }
     }
-    let s;
+    let serialized;
     try {
-        s = JSON.stringify(wire);
+        serialized = JSON.stringify(wire);
     }
     catch {
-        s = String(wire);
+        serialized = String(wire);
     }
-    return s.length > 200 ? `${s.slice(0, 200)}…` : s;
+    return serialized.length > 200 ? `${serialized.slice(0, 200)}…` : serialized;
 }
 //# sourceMappingURL=validatedAdapter.js.map

package/dist/persistence/migration/validatedAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"validatedAdapter.js","sourceRoot":"","sources":["../../../src/persistence/migration/validatedAdapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAoC/C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,KAAe,EACf,OAAgC,EAAE;IAElC,OAAO;QACL,QAAQ,EAAE,CAAC,KAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,WAAW,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA4B,EAC5B,KAAe,EACf,OAAgC,EAAE;IAElC,OAAO;QACL,QAAQ,EAAE,CAAC,KAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,WAAW,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAChB,KAAe,EAAE,OAAU,EAAE,QAAgB,EAAE,OAAe,EAC9D,IAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAM,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,KAAK,CAAC,IAAI,IAAI,WAAW,wBAAwB;cAC3E,GAAG,QAAQ,KAAK,OAAO,KAAM,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;cACpE,UAAU,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EACrC,QAAQ,EAAE,OAAO,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,KAAe,EAAE,MAAmB,EAAE,IAA6B;IAEnE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAM,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,KAAK,CAAC,IAAI,IAAI,WAAW,wBAAwB;cAC3E,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,KAAM,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;cAClF,SAAS,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAC3C,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAa,EAAE,IAA6B;IAC3D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IACjC,MAAM,CAAC;QAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"validatedAdapter.js","sourceRoot":"","sources":["../../../src/persistence/migration/validatedAdapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAoC/C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,KAAe,EACf,OAAgC,EAAE;IAElC,OAAO;QACL,QAAQ,EAAE,CAAC,KAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,WAAW,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA4B,EAC5B,KAAe,EACf,OAAgC,EAAE;IAElC,OAAO;QACL,QAAQ,EAAE,CAAC,KAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,KAAQ,EAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,WAAW,EAAE,CAAC,MAAmB,EAAK,EAAE;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,WAAW,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAChB,KAAe,EAAE,OAAU,EAAE,QAAgB,EAAE,OAAe,EAC9D,IAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAM,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,KAAK,CAAC,IAAI,IAAI,WAAW,wBAAwB;cAC3E,GAAG,QAAQ,KAAK,OAAO,KAAM,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;cACpE,UAAU,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EACrC,QAAQ,EAAE,OAAO,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,KAAe,EAAE,MAAmB,EAAE,IAA6B;IAEnE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAM,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,KAAK,CAAC,IAAI,IAAI,WAAW,wBAAwB;cAC3E,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,KAAM,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;cAClF,SAAS,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAC3C,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAa,EAAE,IAA6B;IAC3D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC1C,MAAM,CAAC;QAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IACpC,OAAO,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/E,CAAC"}

package/dist/persistence/migration/wrapLegacy.js

@@ -72,8 +72,8 @@ export async function migrateInMemoryJournal(journal, manifestFor, opts = {}) {
         // does the actual rewrite in place.
         const events = await journal.read(pid, 0);
         inspected += events.length;
-        for (const e of events) {
-            if (isEnvelope(e.event))
+        for (const persistedEvent of events) {
+            if (isEnvelope(persistedEvent.event))
                 skipped += 1;
             else
                 wrapped += 1;

package/dist/persistence/migration/wrapLegacy.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrapLegacy.js","sourceRoot":"","sources":["../../../src/persistence/migration/wrapLegacy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,6EAA6E;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,WAA6B,EAC7B,OAAO,GAAG,CAAC;IAEX,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,WAA6B,EAC7B,OAAO,GAAG,CAAC;IAEX,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAgCD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,WAA6B,EAC7B,OAAsC,EAAE;IAExC,IAAI,OAAQ,OAAqC,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CACb,sEAAsE;cACpE,0EAA0E;cAC1E,kDAAkD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAoC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,8DAA8D;QAC9D,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAyB,GAAG,EAAE,CAAC,CAAC,CAAC;QAClE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC;;gBACjC,OAAO,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,UAAU,CAAC,kBAAkB,CACjC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAoB,EACpB,IAA2B,EAC3B,WAA6B,EAC7B,OAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAI,GAAG,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,SAAS,IAAI,CAAC,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,mBAAmB,CAAI,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,KAAK,CAAC,IAAI,CAAqB,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAuB;IAC3E,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,uBAAuB,MAAM,CAAC,SAAS,YAAY,CAAC;AACpH,CAAC"}
+{"version":3,"file":"wrapLegacy.js","sourceRoot":"","sources":["../../../src/persistence/migration/wrapLegacy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,6EAA6E;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,WAA6B,EAC7B,OAAO,GAAG,CAAC;IAEX,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,WAA6B,EAC7B,OAAO,GAAG,CAAC;IAEX,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAgCD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,WAA6B,EAC7B,OAAsC,EAAE;IAExC,IAAI,OAAQ,OAAqC,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CACb,sEAAsE;cACpE,0EAA0E;cAC1E,kDAAkD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAoC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,8DAA8D;QAC9D,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAyB,GAAG,EAAE,CAAC,CAAC,CAAC;QAClE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,MAAM,cAAc,IAAI,MAAM,EAAE,CAAC;YACpC,IAAI,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC;;gBAC9C,OAAO,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,UAAU,CAAC,kBAAkB,CACjC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAoB,EACpB,IAA2B,EAC3B,WAA6B,EAC7B,OAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAI,GAAG,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,SAAS,IAAI,CAAC,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,mBAAmB,CAAI,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,KAAK,CAAC,IAAI,CAAqB,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAuB;IAC3E,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,uBAAuB,MAAM,CAAC,SAAS,YAAY,CAAC;AACpH,CAAC"}

package/dist/persistence/object-storage/BodyCodec.d.ts

@@ -6,11 +6,16 @@ import { type CompressionAlgo } from './Compression.js';
  *   Byte  4      : flags          bit0..1 = compression: 0=none, 1=gzip, 2=zstd
  *                                  bit2     = encrypted
  *                                  bit3     = key-versioned (#8 — master-key rotation)
+ *                                  bit4     = integrity HMAC tag appended (#116)
  *   Byte  5      : keyVersion     (0..255)  — only when bit3 set
  *   Bytes ...    : AES-GCM IV     (12 bytes — only when bit2 set, immediately
  *                                   after the keyVersion byte if present, else
  *                                   immediately after flags)
  *   Bytes ...    : payload        (compressed/encrypted JSON)
+ *   Bytes ...    : HMAC tag       (16 bytes — only when bit4 set, suffixed
+ *                                   after the payload; HMAC covers every
+ *                                   byte BEFORE the tag, including the
+ *                                   manifest header)
  *
  * A size-conservative header (5 bytes for unencrypted; 17 for encrypted
  * legacy / 18 for encrypted with explicit version) keeps small snapshots
@@ -23,6 +28,11 @@ import { type CompressionAlgo } from './Compression.js';
  * decoder treats them as version 0, which transparently maps to either
  * the legacy single-key `masterKey` config or `masterKeys.active.version
  * === 0`.  Mixing old and new bodies in one bucket is therefore safe.
+ *
+ * Same back-compat story for integrity (#116): bodies written before
+ * bit4 landed have it unset and decode without an HMAC check.  Callers
+ * who want to refuse legacy bodies after a migration can pass
+ * `requireIntegrity: true` on decode to enforce.
  */
 export declare const ATS1_MAGIC: Uint8Array<ArrayBuffer>;
 export declare const COMPRESSION_NONE = 0;
@@ -31,8 +41,24 @@ export declare const COMPRESSION_ZSTD = 2;
 export declare const FLAG_ENCRYPTED = 4;
 /** When set with FLAG_ENCRYPTED, the byte after `flags` is a 0..255 key version. */
 export declare const FLAG_KEY_VERSIONED = 8;
+/** When set, the last {@link HMAC_TAG_LENGTH} bytes are an HMAC-SHA256 over the rest. */
+export declare const FLAG_INTEGRITY_HMAC = 16;
+/**
+ * Default cap on the decompressed size of a stored body (512 MiB).  Bounds a
+ * decompression bomb on read (security audit #3) — a real snapshot /
+ * durable-state blob is far smaller.  Override per-decode via
+ * {@link DecodeOptions.maxOutputBytes} (`Infinity` opts out).
+ */
+export declare const DEFAULT_MAX_DECOMPRESSED_BYTES: number;
 export interface EncodeOptions {
     readonly compression?: CompressionAlgo;
+    /**
+     * Algorithm-specific compression level (gzip 0–9, zstd 1–22) passed
+     * through to the compressor.  Out-of-range values are clamped;
+     * `undefined` uses the impl default.  Not recorded on the wire — the
+     * manifest stores only the algorithm, and decode never needs the level.
+     */
+    readonly compressionLevel?: number;
     /**
      * When set, the body is encrypted with AES-256-GCM using the supplied
      * 32-byte subkey (typically derived per-pid via HKDF — see
@@ -49,6 +75,18 @@ export interface EncodeOptions {
         readonly subKey: Uint8Array;
         readonly keyVersion?: number;
     };
+    /**
+     * Opt-in HMAC-SHA256 integrity (#116).  When set, the codec computes
+     * an HMAC over the framed body (everything up to the tag) and appends
+     * the truncated 16-byte tag.  `FLAG_INTEGRITY_HMAC` is set in the
+     * manifest.  Encrypted bodies don't need this for confidentiality
+     * (AES-GCM's auth tag already covers ciphertext), but it ties the
+     * manifest bytes to the body — useful as defense-in-depth against
+     * a manifest-flip attack.
+     */
+    readonly integrity?: {
+        readonly integrityKey: Uint8Array;
+    };
 }
 /**
  * Subkey resolver — given the version byte the manifest carries, return
@@ -70,6 +108,25 @@ export interface DecodeOptions {
     } | {
         readonly subKeyFor: SubKeyResolver;
     };
+    /**
+     * When the manifest carries `FLAG_INTEGRITY_HMAC`, the codec verifies
+     * the appended HMAC tag against this key.  Mismatch throws — body
+     * has been tampered.  Setting `requireIntegrity: true` AND providing
+     * a key forces the codec to also REJECT bodies that DON'T carry the
+     * flag (use after a migration to ensure no legacy/unprotected
+     * bodies slip through).
+     */
+    readonly integrity?: {
+        readonly integrityKey: Uint8Array;
+        readonly requireIntegrity?: boolean;
+    };
+    /**
+     * Cap on the decompressed payload size in bytes.  Defaults to
+     * {@link DEFAULT_MAX_DECOMPRESSED_BYTES}; pass `Infinity` to disable.
+     * Guards against a decompression bomb in a tampered / hostile stored body
+     * (security audit #3).
+     */
+    readonly maxOutputBytes?: number;
 }
 export interface DecodedBody {
     readonly compression: CompressionAlgo;

package/dist/persistence/object-storage/BodyCodec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BodyCodec.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGvE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,UAAU,yBAA2C,CAAC;AAEnE,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,cAAc,IAAQ,CAAC;AACpC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,IAAS,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0CrG;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8DnG"}
+{"version":3,"file":"BodyCodec.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,eAAO,MAAM,UAAU,yBAA2C,CAAC;AAEnE,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AACrC,eAAO,MAAM,cAAc,IAAQ,CAAC;AACpC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,IAAS,CAAC;AACzC,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,KAAU,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAEhE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpF;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAA;KAAE,CAAC;CAC5D;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;KAAE,CAAC;IAC3C;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;QAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwDrG;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CA+FnG"}

package/dist/persistence/object-storage/BodyCodec.js

@@ -1,6 +1,7 @@
 import { match } from 'ts-pattern';
 import { compressorFor } from './Compression.js';
 import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.js';
+import { constantTimeEqual, HMAC_TAG_LENGTH, hmacSha256 } from './Integrity.js';
 /**
  * Wire-format for snapshot / durable-state bodies stored in object storage.
  *
@@ -8,11 +9,16 @@ import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.
  *   Byte  4      : flags          bit0..1 = compression: 0=none, 1=gzip, 2=zstd
  *                                  bit2     = encrypted
  *                                  bit3     = key-versioned (#8 — master-key rotation)
+ *                                  bit4     = integrity HMAC tag appended (#116)
  *   Byte  5      : keyVersion     (0..255)  — only when bit3 set
  *   Bytes ...    : AES-GCM IV     (12 bytes — only when bit2 set, immediately
  *                                   after the keyVersion byte if present, else
  *                                   immediately after flags)
  *   Bytes ...    : payload        (compressed/encrypted JSON)
+ *   Bytes ...    : HMAC tag       (16 bytes — only when bit4 set, suffixed
+ *                                   after the payload; HMAC covers every
+ *                                   byte BEFORE the tag, including the
+ *                                   manifest header)
  *
  * A size-conservative header (5 bytes for unencrypted; 17 for encrypted
  * legacy / 18 for encrypted with explicit version) keeps small snapshots
@@ -25,6 +31,11 @@ import { aesGcmDecrypt, aesGcmEncrypt, IV_LENGTH, randomIv } from './Encryption.
  * decoder treats them as version 0, which transparently maps to either
  * the legacy single-key `masterKey` config or `masterKeys.active.version
  * === 0`.  Mixing old and new bodies in one bucket is therefore safe.
+ *
+ * Same back-compat story for integrity (#116): bodies written before
+ * bit4 landed have it unset and decode without an HMAC check.  Callers
+ * who want to refuse legacy bodies after a migration can pass
+ * `requireIntegrity: true` on decode to enforce.
  */
 export const ATS1_MAGIC = new Uint8Array([0x41, 0x54, 0x53, 0x31]); // "ATS1"
 export const COMPRESSION_NONE = 0b00;
@@ -33,6 +44,15 @@ export const COMPRESSION_ZSTD = 0b10;
 export const FLAG_ENCRYPTED = 0b100;
 /** When set with FLAG_ENCRYPTED, the byte after `flags` is a 0..255 key version. */
 export const FLAG_KEY_VERSIONED = 0b1000;
+/** When set, the last {@link HMAC_TAG_LENGTH} bytes are an HMAC-SHA256 over the rest. */
+export const FLAG_INTEGRITY_HMAC = 0b10000;
+/**
+ * Default cap on the decompressed size of a stored body (512 MiB).  Bounds a
+ * decompression bomb on read (security audit #3) — a real snapshot /
+ * durable-state blob is far smaller.  Override per-decode via
+ * {@link DecodeOptions.maxOutputBytes} (`Infinity` opts out).
+ */
+export const DEFAULT_MAX_DECOMPRESSED_BYTES = 512 * 1024 * 1024;
 /**
  * Encode a JSON-stringified payload with the framing above.  Returns a
  * fresh `Uint8Array` ready to ship to the backend.
@@ -41,12 +61,14 @@ export async function encodeBody(jsonBytes, opts = {}) {
     const algo = opts.compression ?? 'none';
     const subKey = opts.encryption?.subKey;
     const keyVersion = opts.encryption?.keyVersion;
+    const integrityKey = opts.integrity?.integrityKey;
     // Step 1: compress (if requested).  Encryption-after-compression
     // because compression-after-encryption would defeat compression
     // (ciphertext is high-entropy) AND it's the order that protects
     // against CRIME-style side channels.
-    const compressed = await compressorFor(algo).compress(jsonBytes);
+    const compressed = await compressorFor(algo).compress(jsonBytes, opts.compressionLevel);
     // Step 2: encrypt (if requested).  IV goes into the manifest.
+    let bodyBeforeIntegrity;
     if (subKey) {
         if (keyVersion !== undefined) {
             if (!Number.isInteger(keyVersion) || keyVersion < 0 || keyVersion > 255) {
@@ -59,27 +81,42 @@ export async function encodeBody(jsonBytes, opts = {}) {
         let flags = encodeCompression(algo) | FLAG_ENCRYPTED;
         if (versioned)
             flags |= FLAG_KEY_VERSIONED;
+        if (integrityKey)
+            flags |= FLAG_INTEGRITY_HMAC;
         const headerLen = ATS1_MAGIC.length + 1 + (versioned ? 1 : 0) + IV_LENGTH;
-        const out = new Uint8Array(headerLen + ciphertext.length);
-        out.set(ATS1_MAGIC, 0);
-        out[4] = flags;
+        bodyBeforeIntegrity = new Uint8Array(headerLen + ciphertext.length);
+        bodyBeforeIntegrity.set(ATS1_MAGIC, 0);
+        bodyBeforeIntegrity[4] = flags;
         let offset = 5;
         if (versioned) {
-            out[offset] = keyVersion;
+            bodyBeforeIntegrity[offset] = keyVersion;
             offset += 1;
         }
-        out.set(iv, offset);
+        bodyBeforeIntegrity.set(iv, offset);
         offset += IV_LENGTH;
-        out.set(ciphertext, offset);
+        bodyBeforeIntegrity.set(ciphertext, offset);
+    }
+    else {
+        // Step 3 (no encryption): build the plain framed body.
+        let flags = encodeCompression(algo);
+        if (integrityKey)
+            flags |= FLAG_INTEGRITY_HMAC;
+        bodyBeforeIntegrity = new Uint8Array(ATS1_MAGIC.length + 1 + compressed.length);
+        bodyBeforeIntegrity.set(ATS1_MAGIC, 0);
+        bodyBeforeIntegrity[4] = flags;
+        bodyBeforeIntegrity.set(compressed, 5);
+    }
+    // Step 4 (optional): append the HMAC-SHA256 integrity tag (#116).
+    // Covers the manifest header + payload — any tampering of either
+    // invalidates the tag.
+    if (integrityKey) {
+        const tag = await hmacSha256(integrityKey, bodyBeforeIntegrity);
+        const out = new Uint8Array(bodyBeforeIntegrity.length + tag.length);
+        out.set(bodyBeforeIntegrity, 0);
+        out.set(tag, bodyBeforeIntegrity.length);
         return out;
     }
-    // Step 3 (no encryption): build the plain framed body.
-    const flags = encodeCompression(algo);
-    const out = new Uint8Array(ATS1_MAGIC.length + 1 + compressed.length);
-    out.set(ATS1_MAGIC, 0);
-    out[4] = flags;
-    out.set(compressed, 5);
-    return out;
+    return bodyBeforeIntegrity;
 }
 /** Decode a body produced by `encodeBody` back into the plaintext payload. */
 export async function decodeBody(framed, opts = {}) {
@@ -90,6 +127,35 @@ export async function decodeBody(framed, opts = {}) {
     const compression = decodeCompression(flags);
     const encrypted = (flags & FLAG_ENCRYPTED) !== 0;
     const versioned = (flags & FLAG_KEY_VERSIONED) !== 0;
+    const hasIntegrity = (flags & FLAG_INTEGRITY_HMAC) !== 0;
+    // Integrity check FIRST — before we trust any other manifest byte
+    // beyond `flags` (which we already used to know the tag is there).
+    // The HMAC tag is the last 16 bytes; verifying it proves the rest of
+    // the body wasn't tampered with, including bytes the decode path
+    // hasn't even read yet (#116).
+    let bodyForRest = framed;
+    if (hasIntegrity) {
+        if (framed.length < 5 + HMAC_TAG_LENGTH) {
+            throw new Error('BodyCodec: integrity-tagged body is shorter than the HMAC tag requires.');
+        }
+        if (!opts.integrity?.integrityKey) {
+            throw new Error('BodyCodec: body carries FLAG_INTEGRITY_HMAC but no integrityKey was supplied for decoding.');
+        }
+        const sigOffset = framed.length - HMAC_TAG_LENGTH;
+        const expected = framed.subarray(sigOffset);
+        const signed = framed.subarray(0, sigOffset);
+        const actual = await hmacSha256(opts.integrity.integrityKey, signed);
+        if (!constantTimeEqual(actual, expected)) {
+            throw new Error('BodyCodec: integrity check failed — body tampered or wrong integrity key.');
+        }
+        bodyForRest = signed;
+    }
+    else if (opts.integrity?.requireIntegrity) {
+        throw new Error('BodyCodec: body has no integrity tag but requireIntegrity=true was set.  '
+            + 'Body was either written before integrity was enabled, or is being injected '
+            + 'as part of a downgrade attack.');
+    }
+    const maxOut = opts.maxOutputBytes ?? DEFAULT_MAX_DECOMPRESSED_BYTES;
     let payload;
     let keyVersion;
     if (encrypted) {
@@ -98,17 +164,17 @@ export async function decodeBody(framed, opts = {}) {
         }
         let offset = 5;
         if (versioned) {
-            if (framed.length < 6) {
+            if (bodyForRest.length < 6) {
                 throw new Error('BodyCodec: encrypted body claims key-versioned but is shorter than the version byte requires.');
             }
-            keyVersion = framed[5];
+            keyVersion = bodyForRest[5];
             offset = 6;
         }
-        if (framed.length < offset + IV_LENGTH) {
+        if (bodyForRest.length < offset + IV_LENGTH) {
             throw new Error('BodyCodec: encrypted body is shorter than the manifest IV requires.');
         }
-        const iv = framed.subarray(offset, offset + IV_LENGTH);
-        const ciphertext = framed.subarray(offset + IV_LENGTH);
+        const iv = bodyForRest.subarray(offset, offset + IV_LENGTH);
+        const ciphertext = bodyForRest.subarray(offset + IV_LENGTH);
         // Resolve the subkey: prefer the resolver path (versioned), fall
         // back to the legacy single-subkey field.  An unversioned body
         // dispatched against a resolver is treated as version 0 — that's
@@ -126,11 +192,11 @@ export async function decodeBody(framed, opts = {}) {
             subKey = enc.subKey;
         }
         const compressedPlaintext = await aesGcmDecrypt(subKey, iv, ciphertext);
-        payload = await compressorFor(compression).decompress(compressedPlaintext);
+        payload = await compressorFor(compression).decompress(compressedPlaintext, maxOut);
     }
     else {
-        const compressedSlice = framed.subarray(5);
-        payload = await compressorFor(compression).decompress(compressedSlice);
+        const compressedSlice = bodyForRest.subarray(5);
+        payload = await compressorFor(compression).decompress(compressedSlice, maxOut);
     }
     return {
         compression,

package/dist/persistence/object-storage/BodyCodec.js.map

@@ -1 +1 @@
-{"version":3,"file":"BodyCodec.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAgDzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAqB,EAAE,OAAsB,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC;IAE/C,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,qCAAqC;IACrC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEjE,8DAA8D;IAC9D,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;QAC3C,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;QACrD,IAAI,SAAS;YAAE,KAAK,IAAI,kBAAkB,CAAC;QAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAW,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;QAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;QACpB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uDAAuD;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,OAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAErD,IAAI,OAAmB,CAAC;IACxB,IAAI,UAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;YACnH,CAAC;YACD,UAAU,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACxB,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAEvD,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAEyB,CAAC;QAC3C,IAAI,MAAyB,CAAC;QAC9B,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mDAAmD,UAAU,IAAI,CAAC,KAAK;sBACrE,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,sBAAsB;IACtB,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC;YACE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}
+{"version":3,"file":"BodyCodec.js","sourceRoot":"","sources":["../../../src/persistence/object-storage/BodyCodec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAoFhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAqB,EAAE,OAAsB,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;IAElD,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,qCAAqC;IACrC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAExF,8DAA8D;IAC9D,IAAI,mBAA+B,CAAC;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;QAC3C,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;QACrD,IAAI,SAAS;YAAE,KAAK,IAAI,kBAAkB,CAAC;QAC3C,IAAI,YAAY;YAAE,KAAK,IAAI,mBAAmB,CAAC;QAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QAC1E,mBAAmB,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACpE,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvC,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,UAAW,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;QAAC,CAAC;QAC1E,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC;QACpB,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,uDAAuD;QACvD,IAAI,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,YAAY;YAAE,KAAK,IAAI,mBAAmB,CAAC;QAC/C,mBAAmB,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChF,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvC,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,kEAAkE;IAClE,iEAAiE;IACjE,uBAAuB;IACvB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,OAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,CAAC,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAEzD,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,iEAAiE;IACjE,+BAA+B;IAC/B,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,WAAW,GAAG,MAAM,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2EAA2E;cACzE,6EAA6E;cAC7E,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,8BAA8B,CAAC;IACrE,IAAI,OAAmB,CAAC;IACxB,IAAI,UAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;YACnH,CAAC;YACD,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;YAC7B,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAE5D,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAEyB,CAAC;QAC3C,IAAI,MAAyB,CAAC;QAC9B,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mDAAmD,UAAU,IAAI,CAAC,KAAK;sBACrE,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;WACxB,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,sEAAsE;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC;SACpC,UAAU,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,sBAAsB;IACtB,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;QACrC;YACE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}

package/dist/persistence/object-storage/Compression.d.ts

@@ -1,18 +1,38 @@
 /**
- * Per-snapshot compression.  Three modes:
+ * Per-body compression.  Three modes:
  *   - `none` — store raw bytes.  Right choice for already-compressed payloads
  *     or very small ones where overhead beats savings.
  *   - `gzip` — `node:zlib` everywhere (Bun, Node, Deno).  No extra deps.
- *   - `zstd` — preferred for large state blobs.  Tries native runtime
- *     support first (Node ≥22.15 or Bun); falls back to the optional
- *     `fzstd` peer dependency.  If neither is available and the user
- *     selected `zstd`, the very first compress / decompress call throws
- *     a clear "install fzstd" error.
+ *     Optional level 0–9 (default 6).
+ *   - `zstd` — preferred for large state blobs.  Optional level 1–22
+ *     (default 3).
+ *
+ * Runtime support differs by DIRECTION:
+ *   - COMPRESS (write): native only — Bun (`Bun.zstdCompressSync`) or
+ *     Node ≥22.15 (`zlib.zstdCompressSync`).  There is NO pure-JS
+ *     fallback for writing: `fzstd` is decompress-only (it exposes no
+ *     `compress`).  Selecting `zstd` on a runtime without native support
+ *     throws a clear error — eagerly at plugin-init via
+ *     `probeCompressionAvailability`, not cryptically on first write.
+ *   - DECOMPRESS (read): native first, then the optional `fzstd` peer-dep
+ *     so a non-native runtime can still READ zstd bodies written
+ *     elsewhere.  `fzstd` caps the back-reference window at 2^25 (32 MB)
+ *     and may reject ultra-level (≥20) frames.
+ *
+ * The level is an encoder-only setting — it never travels on the wire and
+ * decompression doesn't need it, so changing it requires no migration.
  */
 export type CompressionAlgo = 'none' | 'gzip' | 'zstd';
 export interface Compressor {
-    compress(input: Uint8Array): Promise<Uint8Array>;
-    decompress(input: Uint8Array): Promise<Uint8Array>;
+    /** `level` is algorithm-specific and clamped; `undefined` → impl default.  Ignored by `none`. */
+    compress(input: Uint8Array, level?: number): Promise<Uint8Array>;
+    /**
+     * Decompress `input`.  `maxOutputBytes`, when set and finite, bounds the
+     * decompressed size to defeat a decompression bomb (security audit #3):
+     * gzip enforces it at allocation time via zlib's `maxOutputLength`; the
+     * other paths assert the size once decoded.  Exceeding it throws.
+     */
+    decompress(input: Uint8Array, maxOutputBytes?: number): Promise<Uint8Array>;
 }
 /** Get a `Compressor` for the requested algorithm.  Cached per-algorithm. */
 export declare function compressorFor(algo: CompressionAlgo): Compressor;

package/dist/persistence/object-storage/Compression.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Compression.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/Compression.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACpD;AAoGD,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,UAAU,CAO/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvF;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C"}
+{"version":3,"file":"Compression.d.ts","sourceRoot":"","sources":["../../../src/persistence/object-storage/Compression.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7E;AAkKD,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,UAAU,CAO/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAWvF;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,IAAI,IAAI,CAI5C"}