falcon_mdf 0.6.0

//! Creation of MF4 files from scratch.
//!
//! The reader side of this crate is complete for 4.11 and was audited block by
//! block against the standard; the writer emits a subset of that same format:
//! one or more channel groups per data group, records sorted by time, and — when the
//! caller hands over validity — the invalidation bits the reader decodes.
//!
//! Within a record a channel is written **in its own type**: an integer of its
//! own width and signedness, a 32- or 64-bit float, a fixed-length string, or a
//! fixed-width byte run. Pushing everything through `f64` would quietly lose
//! the low bits of any integer past 2^53 and would misdescribe the channel to
//! every reader that looks at `cn_data_type`.
//!
//! A channel may also carry a **conversion** — a `##CC` block — so that raw
//! counts read back as the physical quantity they stand for. The types this
//! writer emits are listed on [`WriteGroup::add_channel_typed_with`]; one it
//! cannot emit is refused by name rather than dropped, since a channel written
//! without the conversion it was given would read back as raw counts labelled
//! with a physical unit.
//!
//! A file may be written **compressed**: with
//! [`Mf4Writer::set_compression`] each group's records go out as a `##DZ`
//! deflate block behind the `##HL`/`##DL` pair the standard puts in front of
//! one. The reader side already decodes six zip types; this writes the one
//! every MDF tool understands.
//!
//! Still not written: modifying an existing file.
//!
//! Every group carries an implicit `Time` master channel (seconds, float64),
//! so a group written with `n` channels reads back with `n + 1`.

use std::io::Write;
use std::path::Path;

use crate::blocks::conversion::{Conversion, TableEntry};
use crate::blocks::ChannelType;
use crate::error::{Mf4Error, Result};
use crate::model::SignalValues;

const ID_SIZE: u64 = 64;
const HD_SIZE: u64 = 104;
const FH_SIZE: u64 = 56;
const DG_SIZE: u64 = 64;
const CG_SIZE: u64 = 104;
const CN_SIZE: u64 = 160;
const DT_HEADER_SIZE: u64 = 24;
const SD_HEADER_SIZE: u64 = 24;
const CC_HEADER_SIZE: u64 = 24;
const HL_SIZE: u64 = 40;
/// One `##DL` with the equal-length flag set and a single data link.
const DL_SIZE: u64 = 56;
const DZ_HEADER_SIZE: u64 = 48;
/// Width of the implicit time master, which is always a float64.
const SAMPLE_BYTES: u64 = 8;

/// Flag bit 1 of `cn_flags`: the channel has an invalidation bit.
const CN_FLAG_INVALIDATION_BIT: u32 = 0x0002;
/// Flag bit 14 of `cn_flags`: variable length signal data offset.
const CN_FLAG_VLSD_OFFSET: u32 = 0x4000;

/// Which `##DZ` codec the writer emits.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
pub enum WriteCodec {
    /// Deflate (zlib) compression (zip type 0).
    #[default]
    Deflate,
    /// Transposed Deflate compression (zip type 1).
    TransposedDeflate,
    /// LZ4 frame compression (zip type 4).
    #[cfg(feature = "lz4")]
    Lz4,
    /// Transposed LZ4 frame compression (zip type 5).
    #[cfg(feature = "lz4")]
    TransposedLz4,
}

impl WriteCodec {
    fn zip_type(self) -> u8 {
        match self {
            WriteCodec::Deflate => 0,
            WriteCodec::TransposedDeflate => 1,
            #[cfg(feature = "lz4")]
            WriteCodec::Lz4 => 4,
            #[cfg(feature = "lz4")]
            WriteCodec::TransposedLz4 => 5,
        }
    }

    fn is_transposed(self) -> bool {
        match self {
            WriteCodec::Deflate => false,
            WriteCodec::TransposedDeflate => true,
            #[cfg(feature = "lz4")]
            WriteCodec::Lz4 => false,
            #[cfg(feature = "lz4")]
            WriteCodec::TransposedLz4 => true,
        }
    }
}

/// An MF4 file under construction.
///
/// Channel groups can each have their own data group (via [`Mf4Writer::add_group`])
/// or share a data group with sibling groups (via [`Mf4Writer::add_group_in`]),
/// with their records sorted by time.
#[derive(Debug, Default)]
pub struct Mf4Writer {
    start_time_ns: i64,
    compress: bool,
    codec: WriteCodec,
    groups: Vec<WriteGroup>,
    next_dg_id: usize,
}

/// How to handle information the editable writer cannot preserve.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum RewriteMode {
    /// Return every omission or substitution alongside the editable data.
    BestEffort,
    /// Reject any omission or substitution before returning a writer.
    Strict,
}

/// A located omission or substitution encountered while importing a file.
#[derive(Debug, Clone, PartialEq, Eq)]
pub struct RewriteIssue {
    /// Data-group, channel-group, channel indices, when channel-specific.
    pub location: Option<(usize, usize, usize)>,
    /// The source label, or a file/group metadata label.
    pub name: String,
    /// What could not be preserved and why.
    pub reason: String,
}

/// Information lost or substituted by an editable rewrite. A clean report
/// describes semantic preservation, not identical block offsets or compression.
#[derive(Debug, Default, Clone)]
pub struct RewriteReport {
    /// Every known unsupported source item, in source order.
    pub issues: Vec<RewriteIssue>,
}

impl RewriteReport {
    /// Whether the import preserved all represented source information.
    pub fn is_lossless(&self) -> bool {
        self.issues.is_empty()
    }

    fn note(
        &mut self,
        location: Option<(usize, usize, usize)>,
        name: &str,
        reason: impl Into<String>,
    ) {
        self.issues.push(RewriteIssue {
            location,
            name: name.into(),
            reason: reason.into(),
        });
    }
}

/// One channel group: a shared time axis and the channels sampled on it.
#[derive(Debug, Default)]
pub struct WriteGroup {
    times: Vec<f64>,
    channels: Vec<WriteChannel>,
    pub(crate) dg_id: usize,
}

/// One channel within a [`WriteGroup`].
#[derive(Debug, Clone)]
pub struct WriteChannel {
    pub(crate) name: String,
    pub(crate) unit: String,
    pub(crate) comment: String,
    pub(crate) values: SignalValues,
    pub(crate) valid: Option<Vec<bool>>,
    pub(crate) conversion: Option<Conversion>,
    pub(crate) format: SampleFormat,
    pub(crate) is_vlsd: bool,
    pub(crate) array_shape: Option<Vec<u64>>,
}

impl WriteChannel {
    /// Returns the channel name.
    pub fn name(&self) -> &str {
        &self.name
    }

    /// Sets the channel name.
    pub fn set_name(&mut self, name: impl Into<String>) {
        self.name = name.into();
    }

    /// Returns the channel engineering unit.
    pub fn unit(&self) -> &str {
        &self.unit
    }

    /// Sets the channel engineering unit.
    pub fn set_unit(&mut self, unit: impl Into<String>) {
        self.unit = unit.into();
    }

    /// Returns the channel comment / description.
    pub fn comment(&self) -> &str {
        &self.comment
    }

    /// Sets the channel comment / description.
    pub fn set_comment(&mut self, comment: impl Into<String>) {
        self.comment = comment.into();
    }

    /// Returns the channel's conversion rule, if any.
    pub fn conversion(&self) -> Option<&Conversion> {
        self.conversion.as_ref()
    }

    /// Sets or removes the channel's conversion rule.
    pub fn set_conversion(&mut self, conversion: Option<Conversion>) -> Result<()> {
        if let Some(c) = &conversion {
            if !c.is_identity() {
                CcPlan::of(c, &self.name)?;
            }
        }
        self.conversion = conversion;
        Ok(())
    }

    /// Returns true if this channel is written as a variable-length (VLSD) channel.
    pub fn is_vlsd(&self) -> bool {
        self.is_vlsd
    }

    /// Sets whether this channel is written as a variable-length (VLSD) channel.
    pub fn set_vlsd(&mut self, is_vlsd: bool) -> Result<()> {
        self.format = SampleFormat::of(&self.values, &self.name, is_vlsd)?;
        self.is_vlsd = is_vlsd;
        Ok(())
    }

    /// Returns true if this channel is an array channel.
    pub fn is_array(&self) -> bool {
        self.array_shape.is_some()
    }

    /// Returns the array channel's shape, if any.
    pub fn array_shape(&self) -> Option<&[u64]> {
        self.array_shape.as_deref()
    }

    /// Sets or removes the array channel's shape.
    pub fn set_array_shape(&mut self, shape: Option<Vec<u64>>) -> Result<()> {
        if let Some(s) = &shape {
            if s.is_empty() || s.contains(&0) {
                return Err(Mf4Error::write_error(format!(
                    "channel '{}' cannot be given invalid array shape {s:?}; dimensions must be non-empty and non-zero",
                    self.name
                )));
            }
            let total: u64 = s
                .iter()
                .copied()
                .try_fold(1u64, |acc, d| acc.checked_mul(d))
                .ok_or_else(|| {
                    Mf4Error::write_error(format!(
                        "channel '{}' shape {s:?} overflows element count",
                        self.name
                    ))
                })?;
            if let SignalValues::Array {
                elements_per_sample,
                ..
            } = &self.values
            {
                if *elements_per_sample as u64 != total {
                    return Err(Mf4Error::write_error(format!(
                        "channel '{}' shape {s:?} implies {total} elements per sample, but channel values has {elements_per_sample}",
                        self.name
                    )));
                }
            } else {
                return Err(Mf4Error::write_error(format!(
                    "channel '{}' holds {} samples, which cannot have an array shape; use SignalValues::Array",
                    self.name,
                    self.values.kind()
                )));
            }
        }
        self.array_shape = shape;
        Ok(())
    }

    /// Returns the channel's sample values.
    pub fn values(&self) -> &SignalValues {
        &self.values
    }

    /// Sets the channel's sample values.
    pub fn set_values(&mut self, values: SignalValues) -> Result<()> {
        if values.len() != self.values.len() {
            return Err(Mf4Error::write_error(format!(
                "new values length ({}) does not match current channel length ({})",
                values.len(),
                self.values.len()
            )));
        }
        let format = SampleFormat::of(&values, &self.name, self.is_vlsd)?;
        if let Some(shape) = &self.array_shape {
            let total: u64 = shape.iter().copied().product();
            if format.elements_per_sample as u64 != total {
                return Err(Mf4Error::write_error(format!(
                    "new values elements per sample ({}) does not match channel array shape {:?} ({total})",
                    format.elements_per_sample,
                    shape
                )));
            }
        }
        self.format = format;
        self.values = values;
        Ok(())
    }

    /// Returns the channel's validity flags, if any.
    pub fn valid(&self) -> Option<&[bool]> {
        self.valid.as_deref()
    }

    /// Sets or removes the channel's validity flags.
    pub fn set_valid(&mut self, valid: Option<Vec<bool>>) -> Result<()> {
        if let Some(v) = &valid {
            if v.len() != self.values.len() {
                return Err(Mf4Error::write_error(format!(
                    "validity flags length ({}) does not match channel values length ({})",
                    v.len(),
                    self.values.len()
                )));
            }
        }
        self.valid = valid;
        Ok(())
    }

    /// Returns the number of samples in this channel.
    pub fn len(&self) -> usize {
        self.values.len()
    }

    /// Returns true if this channel has no samples.
    pub fn is_empty(&self) -> bool {
        self.values.is_empty()
    }
}

/// How one channel's samples sit in a record.
#[derive(Debug, Clone, Copy)]
pub(crate) struct SampleFormat {
    /// The `cn_data_type` code the CN block declares.
    pub(crate) data_type: u8,
    /// Bytes each element occupies.
    pub(crate) width: u32,
    /// Total bytes this channel occupies per record (`width * elements_per_sample`).
    pub(crate) record_width: u32,
    /// Whether this channel is written as a variable-length (VLSD) channel.
    pub(crate) is_vlsd: bool,
    /// Number of elements per sample (1 for scalars).
    pub(crate) elements_per_sample: usize,
}

impl SampleFormat {
    /// Works out how a channel's samples are stored, or refuses a kind this
    /// writer has no record layout for.
    ///
    /// Refusing is the point: writing a complex number or a ragged array as
    /// something else would produce a file that reads back as a measurement it
    /// never was.
    fn of(values: &SignalValues, name: &str, is_vlsd: bool) -> Result<Self> {
        if is_vlsd {
            let data_type = match values {
                SignalValues::Str(_) => 7,
                SignalValues::VarBytes { .. } | SignalValues::Bytes { .. } => 10,
                other => {
                    return Err(Mf4Error::write_error(format!(
                        "channel '{name}' holds {} samples, which cannot be written as variable-length; \
                         VLSD channels must hold strings (Str) or byte arrays (VarBytes, Bytes)",
                        other.kind()
                    )))
                }
            };
            return Ok(SampleFormat {
                data_type,
                width: 8,
                record_width: 8,
                is_vlsd: true,
                elements_per_sample: 1,
            });
        }

        // cn_data_type codes: 0 unsigned LE, 2 signed LE, 4 float LE,
        // 7 UTF-8 string, 10 byte array.
        let (data_type, width, record_width, elements_per_sample) = match values {
            SignalValues::U8(_) => (0, 1, 1, 1),
            SignalValues::U16(_) => (0, 2, 2, 1),
            SignalValues::U32(_) => (0, 4, 4, 1),
            SignalValues::U64(_) => (0, 8, 8, 1),
            SignalValues::I8(_) => (2, 1, 1, 1),
            SignalValues::I16(_) => (2, 2, 2, 1),
            SignalValues::I32(_) => (2, 4, 4, 1),
            SignalValues::I64(_) => (2, 8, 8, 1),
            SignalValues::F32(_) => (4, 4, 4, 1),
            SignalValues::F64(_) => (4, 8, 8, 1),
            SignalValues::Str(v) => {
                let width = v.iter().map(|s| s.len()).max().unwrap_or(0).max(1);
                let w = u32::try_from(width).map_err(|_| too_wide(name, width))?;
                (7, w, w, 1)
            }
            SignalValues::Bytes { width, .. } => {
                let w = u32::try_from((*width).max(1)).map_err(|_| too_wide(name, *width))?;
                (10, w, w, 1)
            }
            SignalValues::Array {
                elements_per_sample,
                ..
            } => {
                if *elements_per_sample == 0 {
                    return Err(Mf4Error::write_error(format!(
                        "channel '{name}' has an empty array shape (0 elements per sample)"
                    )));
                }
                let elem_width = 8u32;
                let rec_width = u32::try_from(*elements_per_sample * 8)
                    .map_err(|_| too_wide(name, *elements_per_sample * 8))?;
                (4, elem_width, rec_width, *elements_per_sample)
            }
            other => {
                return Err(Mf4Error::write_error(format!(
                    "channel '{name}' holds {} samples, which this writer has no record \
                     layout for; it writes integers, floats, fixed-length strings, \
                     fixed-width byte runs, and fixed-size arrays (use add_channel_vlsd for variable-length samples)",
                    other.kind()
                )))
            }
        };
        Ok(SampleFormat {
            data_type,
            width,
            record_width,
            is_vlsd: false,
            elements_per_sample,
        })
    }

    /// Appends sample `index`, padded or truncated to exactly `record_width` bytes.
    fn encode(&self, values: &SignalValues, index: usize, out: &mut Vec<u8>) {
        let width = self.record_width as usize;
        let before = out.len();
        match values {
            SignalValues::U8(v) => out.push(v[index]),
            SignalValues::U16(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::U32(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::U64(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::I8(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::I16(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::I32(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::I64(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::F32(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::F64(v) => out.extend_from_slice(&v[index].to_le_bytes()),
            SignalValues::Str(v) => out.extend_from_slice(v[index].as_bytes()),
            SignalValues::Bytes { data, width: w } => {
                out.extend_from_slice(&data[index * w..(index + 1) * w])
            }
            SignalValues::Array {
                values,
                elements_per_sample,
            } => {
                let start = index * elements_per_sample;
                let end = start + elements_per_sample;
                if end <= values.len() {
                    for &val in &values[start..end] {
                        out.extend_from_slice(&val.to_le_bytes());
                    }
                }
            }
            // `SampleFormat::of` refused every other kind before this ran.
            _ => {}
        }
        // Strings and anything under-filled are padded to the full record width.
        out.resize(before + width, 0);
    }
}

fn vlsd_sample_bytes(values: &SignalValues, index: usize) -> &[u8] {
    match values {
        SignalValues::Str(v) => v[index].as_bytes(),
        SignalValues::VarBytes { data, starts } => &data[starts[index]..starts[index + 1]],
        SignalValues::Bytes { data, width } => &data[index * width..(index + 1) * width],
        _ => &[],
    }
}

fn build_sd_data(values: &SignalValues) -> (Vec<u8>, Vec<u64>) {
    let n = values.len();
    let mut sd_data = Vec::new();
    let mut offsets = Vec::with_capacity(n);
    for i in 0..n {
        let sample = vlsd_sample_bytes(values, i);
        let offset = sd_data.len() as u64;
        offsets.push(offset);
        sd_data.extend_from_slice(&(sample.len() as u32).to_le_bytes());
        sd_data.extend_from_slice(sample);
    }
    (sd_data, offsets)
}

fn too_wide(name: &str, width: usize) -> Mf4Error {
    Mf4Error::write_error(format!(
        "channel '{name}' has samples of {width} bytes, more than a record can describe"
    ))
}

impl Mf4Writer {
    /// A new, empty file, stamped with the current time as its start time.
    pub fn new() -> Self {
        let start_time_ns = std::time::SystemTime::now()
            .duration_since(std::time::UNIX_EPOCH)
            .map(|d| i64::try_from(d.as_nanos()).unwrap_or(i64::MAX))
            .unwrap_or(0);
        Self {
            start_time_ns,
            compress: false,
            codec: WriteCodec::default(),
            groups: Vec::new(),
            next_dg_id: 0,
        }
    }

    /// A new, empty file with an explicit start time, in nanoseconds since the
    /// Unix epoch. Deterministic output for tests, and for re-exporting a file
    /// under its original timestamp.
    pub fn with_start_time_ns(start_time_ns: i64) -> Self {
        Self {
            start_time_ns,
            compress: false,
            codec: WriteCodec::default(),
            groups: Vec::new(),
            next_dg_id: 0,
        }
    }

    /// Whether to deflate each group's records into a `##DZ` block.
    ///
    /// Off by default. Compression costs write time and makes the file opaque
    /// to anything that reads bytes rather than blocks; it is worth it for the
    /// long, slowly-varying channels a logger produces, and rarely worth it for
    /// a handful of samples.
    pub fn set_compression(&mut self, on: bool) {
        self.compress = on;
    }

    /// Sets the compression codec to use when compression is enabled.
    pub fn set_codec(&mut self, codec: WriteCodec) {
        self.codec = codec;
    }

    /// Returns the configured compression codec.
    pub fn codec(&self) -> WriteCodec {
        self.codec
    }

    /// Adds a channel group sampled at `times` (seconds). The records are
    /// sorted by time on write, so `times` need not be ordered — but every
    /// timestamp must be orderable, and NaN is not.
    pub fn add_group(&mut self, times: &[f64]) -> Result<&mut WriteGroup> {
        if times.iter().any(|t| t.is_nan()) {
            return Err(Mf4Error::write_error(
                "a group's time axis contains NaN, which has no place in the order records are sorted by",
            ));
        }
        let dg_id = self.next_dg_id;
        self.next_dg_id += 1;
        self.groups.push(WriteGroup {
            times: times.to_vec(),
            channels: Vec::new(),
            dg_id,
        });
        Ok(self.groups.last_mut().expect("just pushed"))
    }

    /// Adds a channel group that shares a data group with `sibling`, so their
    /// records interleave behind a record ID.
    pub fn add_group_in(&mut self, sibling: usize, times: &[f64]) -> Result<&mut WriteGroup> {
        if sibling >= self.groups.len() {
            return Err(Mf4Error::write_error(format!(
                "sibling group index {sibling} is out of range (writer has {} groups)",
                self.groups.len()
            )));
        }
        if times.iter().any(|t| t.is_nan()) {
            return Err(Mf4Error::write_error(
                "a group's time axis contains NaN, which has no place in the order records are sorted by",
            ));
        }
        let dg_id = self.groups[sibling].dg_id;
        self.groups.push(WriteGroup {
            times: times.to_vec(),
            channels: Vec::new(),
            dg_id,
        });
        Ok(self.groups.last_mut().expect("just pushed"))
    }

    /// Returns the start time of the measurement in nanoseconds since the Unix epoch.
    pub fn start_time_ns(&self) -> i64 {
        self.start_time_ns
    }

    /// Sets the start time of the measurement in nanoseconds since the Unix epoch.
    pub fn set_start_time_ns(&mut self, start_time_ns: i64) {
        self.start_time_ns = start_time_ns;
    }

    /// Returns true if data blocks are configured to be deflated.
    pub fn is_compressed(&self) -> bool {
        self.compress
    }

    /// Returns an immutable slice of channel groups in the file.
    pub fn groups(&self) -> &[WriteGroup] {
        &self.groups
    }

    /// Returns a mutable slice of channel groups in the file.
    pub fn groups_mut(&mut self) -> &mut [WriteGroup] {
        &mut self.groups
    }

    /// Returns a reference to the group at `index`, or `None` if out of bounds.
    pub fn group(&self, index: usize) -> Option<&WriteGroup> {
        self.groups.get(index)
    }

    /// Returns a mutable reference to the group at `index`, or `None` if out of bounds.
    pub fn group_mut(&mut self, index: usize) -> Option<&mut WriteGroup> {
        self.groups.get_mut(index)
    }

    /// Removes and returns the group at `index`.
    pub fn remove_group(&mut self, index: usize) -> WriteGroup {
        self.groups.remove(index)
    }

    /// Retains only the groups specified by the predicate.
    pub fn retain_groups<F: FnMut(&WriteGroup) -> bool>(&mut self, mut f: F) {
        self.groups.retain(|g| f(g));
    }

    /// Imports editable data, logging every omission. Use
    /// [`Self::from_file_with_report`] for a machine-readable report or strict
    /// preservation. An unusable present master is never replaced by indices.
    pub fn from_file(file: &crate::Mf4File) -> Result<Self> {
        let (writer, report) = Self::from_file_with_report(file, RewriteMode::BestEffort)?;
        for issue in report.issues {
            log::warn!(
                "rewrite {:?} '{}': {}",
                issue.location,
                issue.name,
                issue.reason
            );
        }
        Ok(writer)
    }

    /// Imports supported typed data, raw conversions, units and invalidation,
    /// reporting every omitted channel and metadata item. Strict mode returns
    /// an error if the report is nonempty, so callers cannot accidentally save
    /// a partially preserved file. No output file is created by this method.
    pub fn from_file_with_report(
        file: &crate::Mf4File,
        mode: RewriteMode,
    ) -> Result<(Self, RewriteReport)> {
        let mut writer = Mf4Writer::with_start_time_ns(file.start_time().timestamp_ns);
        let mut report = RewriteReport::default();
        if !file.comment().is_empty() {
            report.note(
                None,
                "file comment",
                "not represented by the editable writer",
            );
        }
        for entry in file.file_history() {
            report.note(
                None,
                "file history",
                format!(
                    "history entry replaced by new writer history: {}",
                    entry.comment
                ),
            );
        }
        for entry in file.attachments() {
            report.note(None, &entry.file_name, "attachment omitted");
        }
        for entry in file.events() {
            report.note(None, &entry.name, "event omitted");
        }
        for entry in file.channel_hierarchy() {
            report.note(
                None,
                &entry.name,
                "channel hierarchy and descendants omitted",
            );
        }
        for (dg_idx, dg) in file.data_groups().iter().enumerate() {
            if !dg.comment.is_empty() {
                report.note(
                    None,
                    &format!("data group {dg_idx}"),
                    "data-group comment omitted",
                );
            }
            let mut first_group_idx = None;
            for (cg_idx, cg) in dg.channel_groups.iter().enumerate() {
                if !cg.acquisition_name.is_empty() || !cg.comment.is_empty() || cg.source.is_some()
                {
                    report.note(
                        None,
                        &format!("group {dg_idx}.{cg_idx}"),
                        "acquisition name, comment or source metadata omitted",
                    );
                }
                let master = cg.master_channel();
                let times = if let Some(master) = master {
                    match file.channel_timestamps(master) {
                        Ok(times) => times,
                        Err(error) => {
                            for ch in &cg.channels {
                                report.note(
                                    Some((dg_idx, cg_idx, ch.index)),
                                    &ch.name,
                                    format!("group omitted: {error}"),
                                );
                            }
                            continue;
                        }
                    }
                } else {
                    report.note(
                        None,
                        &format!("group {dg_idx}.{cg_idx}"),
                        "masterless group receives a sample-index master",
                    );
                    (0..cg.sample_count).map(|i| i as f64).collect()
                };
                if let Some(master) = master {
                    report.note(Some((dg_idx, cg_idx, master.index)), &master.name,
                        "master is rewritten as physical f64 Time [s]; raw representation, conversion, synchronization and metadata are not preserved");
                }
                let index = writer.groups.len();
                let group = match first_group_idx {
                    Some(sibling) => writer.add_group_in(sibling, &times)?,
                    None => {
                        first_group_idx = Some(index);
                        writer.add_group(&times)?
                    }
                };
                for ch in &cg.channels {
                    if ch.is_master() {
                        continue;
                    }
                    let location = Some((dg_idx, cg_idx, ch.index));
                    let imported = (|| -> Result<()> {
                        if let Some(reason) = ch.unreadable() {
                            return Err(Mf4Error::write_error(reason.to_string()));
                        }
                        let sig = file.signal(ch)?;
                        let raw_vals = sig.raw_values()?;
                        let is_vlsd = ch.channel_type == ChannelType::VariableLength;
                        let conv = (!ch.conversion.is_identity()).then(|| ch.conversion.clone());
                        group.add_channel_internal(
                            &ch.name,
                            &ch.unit,
                            &ch.comment,
                            raw_vals,
                            sig.validity().as_deref(),
                            conv,
                            is_vlsd,
                            ch.array_shape.clone(),
                        )?;
                        Ok(())
                    })();
                    match imported {
                        Err(error) => {
                            report.note(location, &ch.name, format!("channel omitted: {error}"))
                        }
                        Ok(()) => {
                            if ch.source.is_some()
                                || ch.min_value.is_some()
                                || ch.max_value.is_some()
                            {
                                report.note(
                                    location,
                                    &ch.name,
                                    "source or declared range metadata omitted",
                                );
                            }
                        }
                    }
                }
            }
        }
        if mode == RewriteMode::Strict && !report.is_lossless() {
            return Err(Mf4Error::write_error(format!(
                "strict rewrite rejected {} issues: {}",
                report.issues.len(),
                report
                    .issues
                    .iter()
                    .map(|i| format!("{:?} '{}': {}", i.location, i.name, i.reason))
                    .collect::<Vec<_>>()
                    .join("; ")
            )));
        }
        Ok((writer, report))
    }

    /// Writes the file to `out`.
    pub fn write<W: Write>(&self, out: &mut W) -> Result<()> {
        let fh_text = format!("created by falcon_mdf {}", env!("CARGO_PKG_VERSION"));

        // Collect data groups in order of first appearance of each dg_id.
        let mut dg_groups: Vec<(usize, Vec<usize>)> = Vec::new();
        for (group_idx, group) in self.groups.iter().enumerate() {
            if let Some((_, list)) = dg_groups.iter_mut().find(|(id, _)| *id == group.dg_id) {
                list.push(group_idx);
            } else {
                dg_groups.push((group.dg_id, vec![group_idx]));
            }
        }

        // Built before any offset is assigned: a compressed block's size is
        // not known until it has been compressed, and every link after it
        // depends on that size.
        let payloads: Vec<Payload> = dg_groups
            .iter()
            .map(|(_, group_indices)| {
                let groups: Vec<&WriteGroup> =
                    group_indices.iter().map(|&idx| &self.groups[idx]).collect();
                Payload::build(&groups, self.compress, self.codec)
            })
            .collect::<Result<_>>()?;

        // Pass 1: every block's offset, so links can point forward. Blocks are
        // laid out in emission order: ID, HD, FH, its text, then per data group
        // the DG, then for each channel group the CG, one CN (plus name and unit texts)
        // per channel, any ##SD / ##CA blocks, and finally the DT payload block.
        // The master channel is implicit and comes first in every group.
        // The HD block is found by position (offset 64), so nothing links to
        // it and it needs no offset variable.
        let mut next = ID_SIZE + HD_SIZE;
        let fh_off = next;
        next += FH_SIZE;
        let fh_tx_off = next;
        next += tx_size(&fh_text);

        let layouts: Vec<DataGroupLayout> = dg_groups
            .iter()
            .zip(&payloads)
            .map(|((_dg_id, group_indices), payload)| {
                let dg_off = next;
                next += DG_SIZE;

                let group_count = group_indices.len();
                let rec_id_size: u8 = if group_count > 1 { 1 } else { 0 };

                let mut cgs = Vec::with_capacity(group_count);
                for (cg_idx, &group_idx) in group_indices.iter().enumerate() {
                    let group = &self.groups[group_idx];
                    let record_id = if group_count > 1 {
                        (cg_idx + 1) as u64
                    } else {
                        0
                    };
                    let cg_off = next;
                    next += CG_SIZE;

                    let inval_bits = inval_bit_indices(group);
                    let offsets = byte_offsets(group);
                    let mut channels = Vec::with_capacity(group.channels.len() + 1);
                    channels.push(ChannelLayout::master(next));
                    next += channels[0].size;
                    for (index, channel) in group.channels.iter().enumerate() {
                        let (flags, bit) = match inval_bits[index] {
                            Some(bit) => (CN_FLAG_INVALIDATION_BIT, bit),
                            None => (0, 0),
                        };
                        let layout = ChannelLayout::new(next, offsets[index], channel, flags, bit)?;
                        next += layout.size;
                        channels.push(layout);
                    }
                    cgs.push(CgLayout {
                        cg_off,
                        record_id,
                        group_idx,
                        channels,
                    });
                }

                let dt_off = next;
                next += payload.size();
                Ok(DataGroupLayout {
                    dg_off,
                    rec_id_size,
                    cgs,
                    dt_off,
                })
            })
            .collect::<Result<Vec<_>>>()?;

        // Pass 2: emit, in the same order the offsets were assigned.
        write_id(out)?;
        write_hd(
            out,
            layouts.first().map(|l| l.dg_off).unwrap_or(0),
            fh_off,
            self.start_time_ns,
        )?;
        write_fh(out, fh_tx_off, self.start_time_ns)?;
        write_tx(out, &fh_text)?;
        for (dg_idx, (layout, payload)) in layouts.iter().zip(&payloads).enumerate() {
            let dg_next = layouts.get(dg_idx + 1).map(|l| l.dg_off).unwrap_or(0);
            let cg_first = layout.cgs.first().map(|cg| cg.cg_off).unwrap_or(0);
            write_dg(out, dg_next, cg_first, layout.dt_off, layout.rec_id_size)?;
            for (cg_idx, cg_layout) in layout.cgs.iter().enumerate() {
                let group = &self.groups[cg_layout.group_idx];
                let cg_next = layout.cgs.get(cg_idx + 1).map(|c| c.cg_off).unwrap_or(0);
                write_cg(
                    out,
                    group,
                    cg_layout.channels[0].cn_off,
                    cg_next,
                    cg_layout.record_id,
                )?;
                for (channel_index, channel_layout) in cg_layout.channels.iter().enumerate() {
                    let cn_next = cg_layout
                        .channels
                        .get(channel_index + 1)
                        .map(|c| c.cn_off)
                        .unwrap_or(0);
                    write_cn(out, channel_layout, cn_next)?;
                    write_tx(out, &channel_layout.name)?;
                    if !channel_layout.unit.is_empty() {
                        write_tx(out, &channel_layout.unit)?;
                    }
                    if !channel_layout.comment.is_empty() {
                        write_tx(out, &channel_layout.comment)?;
                    }
                    if let Some((cc_off, plan)) = &channel_layout.cc {
                        write_cc(out, *cc_off, plan)?;
                        for text in plan.refs.iter().flatten() {
                            write_tx(out, text)?;
                        }
                    }
                    if let Some((_, shape, stride)) = &channel_layout.ca {
                        write_ca(out, shape, *stride)?;
                    }
                    if let Some((_, sd_data)) = &channel_layout.sd {
                        write_sd(out, sd_data)?;
                    }
                }
            }
            write_payload(out, layout.dt_off, payload)?;
        }
        Ok(())
    }

    /// Writes the file to a path, creating or truncating it.
    pub fn write_to_file<P: AsRef<Path>>(&self, path: P) -> Result<()> {
        let file = std::fs::File::create(path)?;
        let mut out = std::io::BufWriter::new(file);
        self.write(&mut out)?;
        out.flush()?;
        Ok(())
    }
}

impl WriteGroup {
    /// Returns the shared time axis for this group.
    pub fn times(&self) -> &[f64] {
        &self.times
    }

    /// Sets the time axis for this group.
    pub fn set_times(&mut self, times: &[f64]) -> Result<()> {
        if times.iter().any(|t| t.is_nan()) {
            return Err(Mf4Error::write_error(
                "time axis contains NaN, which cannot be ordered",
            ));
        }
        for ch in &self.channels {
            if ch.values.len() != times.len() {
                return Err(Mf4Error::write_error(format!(
                    "channel '{}' has {} values, but new time axis has {}",
                    ch.name,
                    ch.values.len(),
                    times.len()
                )));
            }
        }
        self.times = times.to_vec();
        Ok(())
    }

    /// Returns an immutable slice of channels in this group.
    pub fn channels(&self) -> &[WriteChannel] {
        &self.channels
    }

    /// Returns a mutable slice of channels in this group.
    pub fn channels_mut(&mut self) -> &mut [WriteChannel] {
        &mut self.channels
    }

    /// Finds a channel by name.
    pub fn find_channel(&self, name: &str) -> Option<&WriteChannel> {
        self.channels.iter().find(|c| c.name == name)
    }

    /// Finds a channel by name mutably.
    pub fn find_channel_mut(&mut self, name: &str) -> Option<&mut WriteChannel> {
        self.channels.iter_mut().find(|c| c.name == name)
    }

    /// Removes a channel by index.
    pub fn remove_channel(&mut self, index: usize) -> WriteChannel {
        self.channels.remove(index)
    }

    /// Removes a channel by name, returning it if found.
    pub fn remove_channel_by_name(&mut self, name: &str) -> Option<WriteChannel> {
        let idx = self.channels.iter().position(|c| c.name == name)?;
        Some(self.channels.remove(idx))
    }

    /// Retains only the channels specified by the predicate.
    pub fn retain_channels<F: FnMut(&WriteChannel) -> bool>(&mut self, mut f: F) {
        self.channels.retain(|c| f(c));
    }

    /// Adds a `f64` channel whose samples are all valid. `values` must have one
    /// entry per timestamp of the group.
    pub fn add_channel(&mut self, name: &str, unit: &str, values: &[f64]) -> Result<()> {
        self.add_channel_with_validity(name, unit, values, None)
    }

    /// Adds a `f64` channel together with the per-sample validity the file
    /// should carry: `valid[i] == false` writes the invalidation bit for that
    /// sample, and readers gap it out exactly as they would for a logged file.
    pub fn add_channel_with_validity(
        &mut self,
        name: &str,
        unit: &str,
        values: &[f64],
        valid: Option<&[bool]>,
    ) -> Result<()> {
        self.add_channel_typed_with(name, unit, SignalValues::F64(values.to_vec()), valid, None)
    }

    /// Adds a channel written in its own type.
    ///
    /// An integer keeps its width and signedness, a float keeps its precision,
    /// and text is written as a fixed-length string as wide as its longest
    /// sample. Nothing is routed through `f64` on the way out.
    pub fn add_channel_typed(
        &mut self,
        name: &str,
        unit: &str,
        values: SignalValues,
    ) -> Result<()> {
        self.add_channel_typed_with(name, unit, values, None, None)
    }

    /// Adds a channel with everything the writer can attach to one: its own
    /// sample type, per-sample validity, and a conversion.
    ///
    /// # Conversions
    ///
    /// A `##CC` block is written for [`Conversion::Linear`],
    /// [`Conversion::Rational`], [`Conversion::Algebraic`],
    /// [`Conversion::TableInterpolated`], [`Conversion::TableLookup`] and
    /// [`Conversion::ValueToText`] whose entries are plain labels. Passing
    /// [`Conversion::None`], or an identity linear rule, writes no block at
    /// all, which is what a channel whose raw values are already physical
    /// should say.
    ///
    /// # Errors
    ///
    /// Refuses, by name, a conversion this writer cannot express — the
    /// remaining table types, a nested conversion inside a text table, and any
    /// rule the reader itself could not evaluate. Writing the channel without
    /// its conversion instead would produce raw counts labelled with a physical
    /// unit, which reads as a plausible wrong measurement rather than a missing
    /// one.
    ///
    /// Refuses a sample kind that has no fixed-width record layout: arrays,
    /// variable-length byte runs, complex numbers and CANopen times.
    pub fn add_channel_typed_with(
        &mut self,
        name: &str,
        unit: &str,
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
    ) -> Result<()> {
        self.add_channel_full(name, unit, "", values, valid, conversion)
    }

    /// Adds a channel with all configurable fields: name, unit, comment, values,
    /// validity mask, and conversion rule.
    pub fn add_channel_full(
        &mut self,
        name: &str,
        unit: &str,
        comment: &str,
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
    ) -> Result<()> {
        self.add_channel_internal(name, unit, comment, values, valid, conversion, false, None)
    }

    /// Adds a variable-length (VLSD) UTF-8 string channel.
    pub fn add_channel_vlsd_str(
        &mut self,
        name: &str,
        unit: &str,
        strings: &[impl AsRef<str>],
    ) -> Result<()> {
        let vals: Vec<String> = strings.iter().map(|s| s.as_ref().to_string()).collect();
        self.add_channel_vlsd(name, unit, SignalValues::Str(vals))
    }

    /// Adds a variable-length (VLSD) byte array channel from byte slices.
    pub fn add_channel_vlsd_bytes(
        &mut self,
        name: &str,
        unit: &str,
        byte_slices: &[&[u8]],
    ) -> Result<()> {
        let mut data = Vec::new();
        let mut starts = Vec::with_capacity(byte_slices.len() + 1);
        starts.push(0);
        for s in byte_slices {
            data.extend_from_slice(s);
            starts.push(data.len());
        }
        self.add_channel_vlsd(name, unit, SignalValues::VarBytes { data, starts })
    }

    /// Adds a variable-length (VLSD) channel.
    pub fn add_channel_vlsd(&mut self, name: &str, unit: &str, values: SignalValues) -> Result<()> {
        self.add_channel_vlsd_with(name, unit, values, None, None)
    }

    /// Adds a variable-length (VLSD) channel with validity flags and conversion.
    pub fn add_channel_vlsd_with(
        &mut self,
        name: &str,
        unit: &str,
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
    ) -> Result<()> {
        self.add_channel_vlsd_full(name, unit, "", values, valid, conversion)
    }

    /// Adds a variable-length (VLSD) channel with all configurable metadata.
    pub fn add_channel_vlsd_full(
        &mut self,
        name: &str,
        unit: &str,
        comment: &str,
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
    ) -> Result<()> {
        self.add_channel_internal(name, unit, comment, values, valid, conversion, true, None)
    }

    /// Adds a fixed-shape array channel.
    pub fn add_channel_array(
        &mut self,
        name: &str,
        unit: &str,
        shape: &[u64],
        values: SignalValues,
    ) -> Result<()> {
        self.add_channel_array_with(name, unit, shape, values, None, None)
    }

    /// Adds a fixed-shape array channel with validity flags and conversion.
    pub fn add_channel_array_with(
        &mut self,
        name: &str,
        unit: &str,
        shape: &[u64],
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
    ) -> Result<()> {
        self.add_channel_array_full(name, unit, "", shape, values, valid, conversion)
    }

    /// Adds a fixed-shape array channel with all configurable metadata.
    #[allow(clippy::too_many_arguments)]
    pub fn add_channel_array_full(
        &mut self,
        name: &str,
        unit: &str,
        comment: &str,
        shape: &[u64],
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
    ) -> Result<()> {
        if shape.is_empty() || shape.contains(&0) {
            return Err(Mf4Error::write_error(format!(
                "array channel '{name}' has invalid shape {shape:?}; dimensions must be non-empty and non-zero"
            )));
        }
        let total: u64 = shape
            .iter()
            .copied()
            .try_fold(1u64, |acc, d| acc.checked_mul(d))
            .ok_or_else(|| {
                Mf4Error::write_error(format!(
                    "array channel '{name}' shape {shape:?} overflows element count"
                ))
            })?;
        if let SignalValues::Array {
            elements_per_sample,
            ..
        } = &values
        {
            if *elements_per_sample as u64 != total {
                return Err(Mf4Error::write_error(format!(
                    "array channel '{name}' declared shape {shape:?} implies {total} elements per sample, but values has {elements_per_sample}"
                )));
            }
        } else {
            return Err(Mf4Error::write_error(format!(
                "channel '{name}' holds {} samples, which cannot be written as an array channel; use SignalValues::Array",
                values.kind()
            )));
        }
        self.add_channel_internal(
            name,
            unit,
            comment,
            values,
            valid,
            conversion,
            false,
            Some(shape.to_vec()),
        )
    }

    #[allow(clippy::too_many_arguments)]
    pub(crate) fn add_channel_internal(
        &mut self,
        name: &str,
        unit: &str,
        comment: &str,
        values: SignalValues,
        valid: Option<&[bool]>,
        conversion: Option<Conversion>,
        is_vlsd: bool,
        array_shape: Option<Vec<u64>>,
    ) -> Result<()> {
        if values.len() != self.times.len() {
            return Err(Mf4Error::write_error(format!(
                "channel '{name}' has {} values but the group's time axis has {}",
                values.len(),
                self.times.len()
            )));
        }
        let valid = match valid {
            None => None,
            Some(valid) => {
                if valid.len() != self.times.len() {
                    return Err(Mf4Error::write_error(format!(
                        "channel '{name}' has {} validity flags but the group's time axis has {}",
                        valid.len(),
                        self.times.len()
                    )));
                }
                Some(valid.to_vec())
            }
        };
        let format = SampleFormat::of(&values, name, is_vlsd)?;
        let is_vlsd = format.is_vlsd;
        let array_shape = match (array_shape, &values) {
            (Some(shape), _) => Some(shape),
            (
                None,
                SignalValues::Array {
                    elements_per_sample,
                    ..
                },
            ) => Some(vec![*elements_per_sample as u64]),
            (None, _) => None,
        };
        let conversion = match conversion {
            Some(c) if !matches!(c, Conversion::None) => {
                CcPlan::of(&c, name)?;
                Some(c)
            }
            _ => None,
        };
        self.channels.push(WriteChannel {
            name: name.to_string(),
            unit: unit.to_string(),
            comment: comment.to_string(),
            values,
            valid,
            conversion,
            format,
            is_vlsd,
            array_shape,
        });
        Ok(())
    }
}

/// The `##CC` block a conversion needs: its type code, its `cc_val` numbers,
/// and the texts its `cc_ref` links point at.
#[derive(Debug)]
struct CcPlan {
    cc_type: u8,
    values: Vec<f64>,
    /// One entry per `cc_ref` link; `None` writes a null link.
    refs: Vec<Option<String>>,
}

impl CcPlan {
    /// Plans the block for a conversion, or refuses one this writer cannot
    /// express.
    ///
    /// Returns `None` for a rule that needs no block: a channel whose raw
    /// values are already physical carries a null `cc_conversion` link rather
    /// than an identity block.
    fn of(conversion: &Conversion, name: &str) -> Result<Option<Self>> {
        let refused = |what: &str| {
            Err(Mf4Error::write_error(format!(
                "channel '{name}' carries {what}, which this writer cannot express; \
                 writing the channel without it would return raw counts labelled as \
                 physical values"
            )))
        };
        Ok(match conversion {
            Conversion::None => None,
            Conversion::Linear { offset, factor } if *offset == 0.0 && *factor == 1.0 => None,
            Conversion::Linear { offset, factor } => Some(CcPlan {
                cc_type: 1,
                values: vec![*offset, *factor],
                refs: Vec::new(),
            }),
            Conversion::Rational { coefficients } => Some(CcPlan {
                cc_type: 2,
                values: coefficients.to_vec(),
                refs: Vec::new(),
            }),
            Conversion::Algebraic { formula, .. } => Some(CcPlan {
                cc_type: 3,
                values: Vec::new(),
                refs: vec![Some(formula.clone())],
            }),
            Conversion::TableInterpolated { keys, values }
            | Conversion::TableLookup { keys, values } => {
                if keys.is_empty() || keys.len() != values.len() {
                    return refused(
                        "a conversion table with no entries, or with more keys than values",
                    );
                }
                let cc_type = if matches!(conversion, Conversion::TableInterpolated { .. }) {
                    4
                } else {
                    5
                };
                // Stored interleaved: key, value, key, value.
                let mut interleaved = Vec::with_capacity(keys.len() * 2);
                for (k, v) in keys.iter().zip(values) {
                    interleaved.push(*k);
                    interleaved.push(*v);
                }
                Some(CcPlan {
                    cc_type,
                    values: interleaved,
                    refs: Vec::new(),
                })
            }
            Conversion::ValueToText {
                keys,
                entries,
                default,
            } => {
                if keys.len() != entries.len() {
                    return refused("a value-to-text table with more keys than entries");
                }
                let mut refs = Vec::with_capacity(entries.len() + 1);
                for entry in entries {
                    match entry {
                        TableEntry::Text(t) => refs.push(Some(t.clone())),
                        TableEntry::Nested(_) => {
                            return refused("a value-to-text table with a nested conversion")
                        }
                    }
                }
                // The trailing reference is the default; a null link means a
                // value that matches no key has no label.
                refs.push(match default {
                    Some(TableEntry::Text(t)) => Some(t.clone()),
                    Some(TableEntry::Nested(_)) => {
                        return refused("a value-to-text table with a nested default")
                    }
                    None => None,
                });
                Some(CcPlan {
                    cc_type: 7,
                    values: keys.clone(),
                    refs,
                })
            }
            Conversion::Unsupported { kind, .. } => {
                return refused(&format!(
                    "a conversion of type {kind:?}, which the reader \
                     itself could not evaluate"
                ))
            }
            other => return refused(&format!("a conversion of kind {other:?}")),
        })
    }

    /// Bytes this block occupies, not counting the texts it points at.
    fn size(&self) -> u64 {
        CC_HEADER_SIZE + (4 + self.refs.len() as u64) * 8 + 24 + self.values.len() as u64 * 8
    }
}

/// Where one channel's blocks land, and what its CN block must say about the
/// record layout.
///
/// A channel's blocks are laid out as one contiguous region: the CN, its name
/// and unit texts, then — where there is one — the conversion block and the
/// texts it references, and for a VLSD channel its ##SD data block. Keeping them
/// together is what lets `size` be the whole of a channel's footprint, so the
/// next channel's offset is just the running total.
#[derive(Debug)]
struct ChannelLayout {
    cn_off: u64,
    size: u64,
    name: String,
    unit: String,
    comment: String,
    byte_offset: u32,
    flags: u32,
    inval_bit_pos: u32,
    data_type: u8,
    bit_count: u32,
    channel_type: u8,
    /// The conversion block to emit, and where it lands.
    cc: Option<(u64, CcPlan)>,
    /// The CA block for an array channel: (ca_off, shape, stride).
    ca: Option<(u64, Vec<u64>, i32)>,
    /// The SD block for a VLSD channel: (sd_off, sd_data).
    sd: Option<(u64, Vec<u8>)>,
}

impl ChannelLayout {
    /// The implicit time master: a float64 at the front of every record.
    fn master(offset: u64) -> Self {
        ChannelLayout {
            cn_off: offset,
            size: CN_SIZE + tx_size("Time") + tx_size("s"),
            name: "Time".to_string(),
            unit: "s".to_string(),
            comment: String::new(),
            byte_offset: 0,
            flags: 0,
            inval_bit_pos: 0,
            data_type: 4,
            bit_count: 64,
            channel_type: 2,
            cc: None,
            ca: None,
            sd: None,
        }
    }

    fn new(
        offset: u64,
        byte_offset: u32,
        channel: &WriteChannel,
        flags: u32,
        inval_bit_pos: u32,
    ) -> Result<Self> {
        let mut size = CN_SIZE + tx_size(&channel.name);
        if !channel.unit.is_empty() {
            size += tx_size(&channel.unit);
        }
        if !channel.comment.is_empty() {
            size += tx_size(&channel.comment);
        }
        let cc = match &channel.conversion {
            None => None,
            Some(c) => CcPlan::of(c, &channel.name)?.map(|plan| {
                let cc_off = offset + size;
                size += plan.size();
                for text in plan.refs.iter().flatten() {
                    size += tx_size(text);
                }
                (cc_off, plan)
            }),
        };
        let ca = if let Some(shape) = &channel.array_shape {
            let ca_off = offset + size;
            let ca_sz = 48 + (shape.len() as u64) * 8;
            size += ca_sz;
            Some((ca_off, shape.clone(), channel.format.width as i32))
        } else {
            None
        };
        let (sd, channel_type, flags) = if channel.is_vlsd {
            let (sd_data, _) = build_sd_data(&channel.values);
            let sd_off = offset + size;
            size += SD_HEADER_SIZE + sd_data.len() as u64;
            (Some((sd_off, sd_data)), 1, flags | CN_FLAG_VLSD_OFFSET)
        } else {
            (None, 0, flags)
        };
        Ok(ChannelLayout {
            cn_off: offset,
            size,
            name: channel.name.clone(),
            unit: channel.unit.clone(),
            comment: channel.comment.clone(),
            byte_offset,
            flags,
            inval_bit_pos,
            data_type: channel.format.data_type,
            bit_count: channel.format.width * 8,
            channel_type,
            cc,
            ca,
            sd,
        })
    }

    /// Where this channel's unit text lands, or 0 when it has none.
    fn unit_off(&self) -> u64 {
        if self.unit.is_empty() {
            0
        } else {
            self.cn_off + CN_SIZE + tx_size(&self.name)
        }
    }

    /// Where this channel's comment text lands, or 0 when it has none.
    fn comment_off(&self) -> u64 {
        if self.comment.is_empty() {
            0
        } else {
            let mut off = self.cn_off + CN_SIZE + tx_size(&self.name);
            if !self.unit.is_empty() {
                off += tx_size(&self.unit);
            }
            off
        }
    }

    /// Where this channel's conversion block lands, or 0 when it has none.
    fn cc_off(&self) -> u64 {
        self.cc.as_ref().map(|(off, _)| *off).unwrap_or(0)
    }

    /// Where this channel's CA block lands, or 0 when it is not an array channel.
    fn ca_off(&self) -> u64 {
        self.ca.as_ref().map(|(off, _, _)| *off).unwrap_or(0)
    }

    /// Where this channel's SD data block lands, or 0 when it is not a VLSD channel.
    fn sd_off(&self) -> u64 {
        self.sd.as_ref().map(|(off, _)| *off).unwrap_or(0)
    }
}

/// A group's records, laid out and ready to write.
#[derive(Debug)]
enum Payload {
    /// A plain `##DT` block.
    Plain(Vec<u8>),
    /// A `##DZ` compressed block, behind the `##HL`/`##DL` pair.
    Compressed {
        zip_type: u8,
        zip_parameter: u32,
        /// Length of the records before compression, which the DZ block must
        /// state so a reader can size its output buffer.
        original_len: u64,
        /// The compressed stream.
        data: Vec<u8>,
    },
}

impl Payload {
    /// Builds a data group's records, compressing them when asked.
    fn build(groups: &[&WriteGroup], compress: bool, codec: WriteCodec) -> Result<Self> {
        let raw = record_bytes_multi(groups);
        if !compress {
            return Ok(Payload::Plain(raw));
        }

        if groups.len() > 1 && codec.is_transposed() {
            return Err(Mf4Error::write_error(format!(
                "transposed compression codec {codec:?} requires a uniform record size, but this data group interleaves {} channel groups",
                groups.len()
            )));
        }

        let col_size = if groups.len() == 1 {
            record_size(groups[0]) as usize
        } else {
            0
        };
        let (transposed, zip_parameter) = if codec.is_transposed() {
            (Some(transpose(&raw, col_size)), col_size as u32)
        } else {
            (None, 0u32)
        };
        let slice_to_compress = transposed.as_deref().unwrap_or(&raw);

        let compressed_bytes = match codec {
            WriteCodec::Deflate | WriteCodec::TransposedDeflate => {
                use flate2::write::ZlibEncoder;
                use flate2::Compression;
                // Seeded at half the input: the compressed stream grows into
                // the Vec incrementally, and starting empty re-copies the
                // bytes written so far at every doubling.
                let mut encoder = ZlibEncoder::new(
                    Vec::with_capacity(slice_to_compress.len() / 2),
                    Compression::default(),
                );
                encoder.write_all(slice_to_compress)?;
                encoder
                    .finish()
                    .map_err(|e| Mf4Error::Compression(e.to_string()))?
            }
            #[cfg(feature = "lz4")]
            WriteCodec::Lz4 | WriteCodec::TransposedLz4 => {
                use lz4_flex::frame::FrameEncoder;
                let mut encoder = FrameEncoder::new(Vec::new());
                encoder.write_all(slice_to_compress)?;
                encoder
                    .finish()
                    .map_err(|e| Mf4Error::Compression(e.to_string()))?
            }
        };
        // The transposed copy is dead once the encoder has consumed it.
        // Dropping it here rather than at function exit means peak memory
        // during compression is raw + transposed + compressed, and raw +
        // compressed afterwards — not all three until the caller is done.
        drop(transposed);

        Ok(Payload::Compressed {
            zip_type: codec.zip_type(),
            zip_parameter,
            original_len: raw.len() as u64,
            data: compressed_bytes,
        })
    }

    /// Bytes this payload occupies in the file, blocks included.
    fn size(&self) -> u64 {
        match self {
            Payload::Plain(data) => DT_HEADER_SIZE + data.len() as u64,
            Payload::Compressed { data, .. } => {
                HL_SIZE + DL_SIZE + DZ_HEADER_SIZE + data.len() as u64
            }
        }
    }
}

#[derive(Debug)]
struct CgLayout {
    cg_off: u64,
    record_id: u64,
    group_idx: usize,
    channels: Vec<ChannelLayout>,
}

#[derive(Debug)]
struct DataGroupLayout {
    dg_off: u64,
    rec_id_size: u8,
    cgs: Vec<CgLayout>,
    dt_off: u64,
}

/// The sample order for a group: indices into `times`, sorted. `total_cmp`
/// needs no NaN special case — `add_group` already refused NaN timestamps.
fn sorted_order(times: &[f64]) -> Vec<usize> {
    let mut order: Vec<usize> = (0..times.len()).collect();
    order.sort_by(|&a, &b| times[a].total_cmp(&times[b]));
    order
}

/// Bytes of samples per record: the float64 master, then each channel at its
/// own width. Not every channel is eight bytes any more, so this is a sum
/// rather than a product — reading it as one would place every channel after
/// the first at the wrong offset.
fn data_bytes(group: &WriteGroup) -> u64 {
    SAMPLE_BYTES
        + group
            .channels
            .iter()
            .map(|c| u64::from(c.format.record_width))
            .sum::<u64>()
}

/// Bytes per record: the samples, then the invalidation area — one bit per
/// channel that carries validity, packed.
fn record_size(group: &WriteGroup) -> u64 {
    data_bytes(group) + u64::from(inval_bytes(group))
}

/// The byte offset of each channel within a record, in channel order, after
/// the master.
fn byte_offsets(group: &WriteGroup) -> Vec<u32> {
    let mut next = SAMPLE_BYTES as u32;
    group
        .channels
        .iter()
        .map(|c| {
            let at = next;
            next += c.format.record_width;
            at
        })
        .collect()
}

fn inval_bytes(group: &WriteGroup) -> u32 {
    let bits = group.channels.iter().filter(|c| c.valid.is_some()).count();
    bits.div_ceil(8) as u32
}

/// The invalidation bit index of each value channel, in channel order; `None`
/// for channels written as wholly valid.
fn inval_bit_indices(group: &WriteGroup) -> Vec<Option<u32>> {
    let mut next_bit = 0u32;
    group
        .channels
        .iter()
        .map(|c| {
            if c.valid.is_some() {
                let bit = next_bit;
                next_bit += 1;
                Some(bit)
            } else {
                None
            }
        })
        .collect()
}

fn tx_size(text: &str) -> u64 {
    24 + text.len() as u64 + 1
}

fn block_header(buf: &mut Vec<u8>, id: &[u8; 4], length: u64, link_count: u64) {
    buf.extend_from_slice(id);
    buf.extend_from_slice(&[0u8; 4]);
    buf.extend_from_slice(&length.to_le_bytes());
    buf.extend_from_slice(&link_count.to_le_bytes());
}

fn push_link(buf: &mut Vec<u8>, target: u64) {
    buf.extend_from_slice(&target.to_le_bytes());
}

fn write_id(out: &mut impl Write) -> Result<()> {
    let mut buf = vec![0u8; ID_SIZE as usize];
    buf[0..8].copy_from_slice(b"MDF     ");
    buf[8..16].copy_from_slice(b"4.11    ");
    buf[16..24].copy_from_slice(b"falcon  ");
    buf[28..30].copy_from_slice(&411u16.to_le_bytes());
    out.write_all(&buf)?;
    Ok(())
}

fn write_hd(out: &mut impl Write, dg_first: u64, fh_first: u64, start_time_ns: i64) -> Result<()> {
    let mut buf = Vec::with_capacity(HD_SIZE as usize);
    block_header(&mut buf, b"##HD", HD_SIZE, 6);
    push_link(&mut buf, dg_first);
    push_link(&mut buf, fh_first);
    push_link(&mut buf, 0); // ch_first
    push_link(&mut buf, 0); // at_first
    push_link(&mut buf, 0); // ev_first
    push_link(&mut buf, 0); // md_comment
    buf.extend_from_slice(&start_time_ns.to_le_bytes());
    buf.extend_from_slice(&0i16.to_le_bytes()); // tz offset
    buf.extend_from_slice(&0i16.to_le_bytes()); // dst offset
    buf.push(0); // time class: local PC time
    buf.push(0); // flags
    buf.push(0); // reserved
    buf.push(0); // reserved
    buf.extend_from_slice(&0f64.to_le_bytes()); // start angle
    buf.extend_from_slice(&0f64.to_le_bytes()); // start distance
    out.write_all(&buf)?;
    Ok(())
}

fn write_fh(out: &mut impl Write, md_comment: u64, time_ns: i64) -> Result<()> {
    let mut buf = Vec::with_capacity(FH_SIZE as usize);
    block_header(&mut buf, b"##FH", FH_SIZE, 2);
    push_link(&mut buf, 0); // fh_next
    push_link(&mut buf, md_comment);
    buf.extend_from_slice(&(time_ns.max(0) as u64).to_le_bytes());
    buf.extend_from_slice(&0i16.to_le_bytes());
    buf.extend_from_slice(&0i16.to_le_bytes());
    buf.push(0); // time flags
    buf.extend_from_slice(&[0u8; 3]); // reserved
    out.write_all(&buf)?;
    Ok(())
}

fn write_tx(out: &mut impl Write, text: &str) -> Result<()> {
    let length = tx_size(text);
    let mut buf = Vec::with_capacity(length as usize);
    block_header(&mut buf, b"##TX", length, 0);
    buf.extend_from_slice(text.as_bytes());
    buf.push(0);
    out.write_all(&buf)?;
    Ok(())
}

fn write_dg(
    out: &mut impl Write,
    dg_next: u64,
    cg_first: u64,
    data: u64,
    rec_id_size: u8,
) -> Result<()> {
    let mut buf = Vec::with_capacity(DG_SIZE as usize);
    block_header(&mut buf, b"##DG", DG_SIZE, 4);
    push_link(&mut buf, dg_next);
    push_link(&mut buf, cg_first);
    push_link(&mut buf, data);
    push_link(&mut buf, 0); // md_comment
    buf.push(rec_id_size); // rec_id_size: 0 when one CG, 1 when multiple CGs
    buf.extend_from_slice(&[0u8; 7]); // reserved
    out.write_all(&buf)?;
    Ok(())
}

fn write_cg(
    out: &mut impl Write,
    group: &WriteGroup,
    cn_first: u64,
    cg_next: u64,
    record_id: u64,
) -> Result<()> {
    let mut buf = Vec::with_capacity(CG_SIZE as usize);
    block_header(&mut buf, b"##CG", CG_SIZE, 6);
    push_link(&mut buf, cg_next);
    push_link(&mut buf, cn_first);
    push_link(&mut buf, 0); // tx_acq_name
    push_link(&mut buf, 0); // si_acq_source
    push_link(&mut buf, 0); // sr_first
    push_link(&mut buf, 0); // md_comment
    buf.extend_from_slice(&record_id.to_le_bytes()); // record_id (u64 value, not a link)
    buf.extend_from_slice(&(group.times.len() as u64).to_le_bytes());
    buf.extend_from_slice(&0u16.to_le_bytes()); // flags
    buf.extend_from_slice(&0u16.to_le_bytes()); // path separator
    buf.extend_from_slice(&[0u8; 4]); // reserved
    buf.extend_from_slice(&(data_bytes(group) as u32).to_le_bytes());
    buf.extend_from_slice(&inval_bytes(group).to_le_bytes());
    out.write_all(&buf)?;
    Ok(())
}

/// Writes one CN block.
fn write_cn(out: &mut impl Write, layout: &ChannelLayout, cn_next: u64) -> Result<()> {
    let mut buf = Vec::with_capacity(CN_SIZE as usize);
    block_header(&mut buf, b"##CN", CN_SIZE, 8);
    push_link(&mut buf, cn_next);
    push_link(&mut buf, layout.ca_off()); // composition: link to ##CA block
    push_link(&mut buf, layout.cn_off + CN_SIZE); // tx_name
    push_link(&mut buf, 0); // si_source
    push_link(&mut buf, layout.cc_off()); // cc_conversion, 0 when already physical
    push_link(&mut buf, layout.sd_off()); // cn_data, 0 or offset of ##SD block
    push_link(&mut buf, layout.unit_off());
    push_link(&mut buf, layout.comment_off());

    buf.push(layout.channel_type);
    buf.push(if layout.channel_type == 2 { 1 } else { 0 }); // sync_type: 1 for master, 0 for other
    buf.push(layout.data_type);
    buf.push(0); // bit offset within the byte: samples are byte-aligned
    buf.extend_from_slice(&layout.byte_offset.to_le_bytes());
    buf.extend_from_slice(&layout.bit_count.to_le_bytes());
    buf.extend_from_slice(&layout.flags.to_le_bytes());
    buf.extend_from_slice(&layout.inval_bit_pos.to_le_bytes());
    buf.push(0); // precision
    buf.push(0); // reserved
    buf.extend_from_slice(&0u16.to_le_bytes()); // attachment count
    for _ in 0..6 {
        buf.extend_from_slice(&0f64.to_le_bytes());
    }
    out.write_all(&buf)?;
    Ok(())
}

/// Writes one CA (Channel Array) block.
fn write_ca(out: &mut impl Write, shape: &[u64], stride: i32) -> Result<()> {
    let ndim = shape.len() as u16;
    let length = 48 + (ndim as u64) * 8;
    let mut buf = Vec::with_capacity(length as usize);
    block_header(&mut buf, b"##CA", length, 1);
    push_link(&mut buf, 0); // ca_composition = 0 (parent channel describes element)
    buf.push(0); // ca_type: 0 = Array
    buf.push(0); // ca_storage: 0 = CN template
    buf.extend_from_slice(&ndim.to_le_bytes());
    buf.extend_from_slice(&0u32.to_le_bytes()); // flags: 0 (fixed size, row-major)
    buf.extend_from_slice(&stride.to_le_bytes()); // ca_byte_offset_base: element stride in bytes
    buf.extend_from_slice(&0u32.to_le_bytes()); // ca_invalidation_bit_base: 0
    for &d in shape {
        buf.extend_from_slice(&d.to_le_bytes());
    }
    out.write_all(&buf)?;
    Ok(())
}

fn write_sd(out: &mut impl Write, data: &[u8]) -> Result<()> {
    let length = SD_HEADER_SIZE + data.len() as u64;
    let mut buf = Vec::with_capacity(SD_HEADER_SIZE as usize);
    block_header(&mut buf, b"##SD", length, 0);
    out.write_all(&buf)?;
    out.write_all(data)?;
    Ok(())
}

/// Writes one CC block, followed by nothing — the texts it links to are
/// emitted by the caller, directly after it, in `refs` order.
fn write_cc(out: &mut impl Write, cc_off: u64, plan: &CcPlan) -> Result<()> {
    let length = plan.size();
    let mut buf = Vec::with_capacity(length as usize);
    block_header(&mut buf, b"##CC", length, 4 + plan.refs.len() as u64);
    push_link(&mut buf, 0); // tx_name
    push_link(&mut buf, 0); // md_unit: the channel carries the unit
    push_link(&mut buf, 0); // md_comment
    push_link(&mut buf, 0); // cc_inverse

    // Each referenced text sits after the block, one after another, so its
    // offset is the running total of the ones before it.
    let mut text_off = cc_off
        + CC_HEADER_SIZE
        + (4 + plan.refs.len() as u64) * 8
        + 24
        + plan.values.len() as u64 * 8;
    for text in &plan.refs {
        match text {
            Some(t) => {
                push_link(&mut buf, text_off);
                text_off += tx_size(t);
            }
            None => push_link(&mut buf, 0),
        }
    }

    buf.push(plan.cc_type);
    buf.push(0); // precision, not stated
    buf.extend_from_slice(&0u16.to_le_bytes()); // flags: no physical range
    buf.extend_from_slice(&(plan.refs.len() as u16).to_le_bytes());
    buf.extend_from_slice(&(plan.values.len() as u16).to_le_bytes());
    buf.extend_from_slice(&0f64.to_le_bytes()); // phy_range_min
    buf.extend_from_slice(&0f64.to_le_bytes()); // phy_range_max
    for v in &plan.values {
        buf.extend_from_slice(&v.to_le_bytes());
    }
    debug_assert_eq!(
        buf.len() as u64,
        length,
        "CC block size must match its header"
    );
    out.write_all(&buf)?;
    Ok(())
}

/// One group's records, sorted by time, each channel in its own type, with the
/// invalidation area appended.
fn record_bytes(group: &WriteGroup) -> Vec<u8> {
    let size = record_size(group);
    let mut buf = Vec::with_capacity(group.times.len() * size as usize);

    // Callers almost always append samples in time order. One linear scan
    // confirms that and skips both the O(n log n) sort and the indirection
    // of gathering through an index vector; only a genuinely shuffled axis
    // pays for `sorted_order`.
    let order;
    let indices: &mut dyn Iterator<Item = usize> =
        if group.times.is_sorted_by(|a, b| a.total_cmp(b).is_le()) {
            &mut (0..group.times.len())
        } else {
            order = sorted_order(&group.times);
            &mut order.into_iter()
        };
    let inval_bits = inval_bit_indices(group);
    let inval_len = inval_bytes(group) as usize;
    let mut inval = vec![0u8; inval_len];

    let vlsd_offsets: Vec<Option<Vec<u64>>> = group
        .channels
        .iter()
        .map(|c| {
            if c.is_vlsd {
                let (_, offsets) = build_sd_data(&c.values);
                Some(offsets)
            } else {
                None
            }
        })
        .collect();

    for index in indices {
        buf.extend_from_slice(&group.times[index].to_le_bytes());
        for (channel_idx, channel) in group.channels.iter().enumerate() {
            if let Some(offsets) = &vlsd_offsets[channel_idx] {
                buf.extend_from_slice(&offsets[index].to_le_bytes());
            } else {
                channel.format.encode(&channel.values, index, &mut buf);
            }
        }
        if inval_len > 0 {
            inval.fill(0);
            for (channel, bit) in group.channels.iter().zip(&inval_bits) {
                let Some(bit) = bit else { continue };
                let valid = channel.valid.as_ref().expect("a bit implies validity");
                if !valid[index] {
                    // Bit set means invalid; readers report the sample valid
                    // when the bit is clear.
                    inval[(bit / 8) as usize] |= 1 << (bit % 8);
                }
            }
            buf.extend_from_slice(&inval);
        }
    }
    buf
}

/// Builds interleaved records for multiple channel groups sharing a data group,
/// prefixed by their 1-byte record ID, sorted by master timestamp across the
/// whole data group.
///
/// When `groups` contains only a single group, delegates to [`record_bytes`]
/// to emit the un-prefixed sorted record layout.
fn record_bytes_multi(groups: &[&WriteGroup]) -> Vec<u8> {
    if groups.is_empty() {
        return Vec::new();
    }
    if groups.len() == 1 {
        return record_bytes(groups[0]);
    }

    struct SampleRef {
        time: f64,
        group_idx: usize,
        sample_idx: usize,
    }

    let mut samples = Vec::new();
    let mut total_capacity: usize = 0;
    for (group_idx, group) in groups.iter().enumerate() {
        let rec_len = 1 + record_size(group) as usize;
        total_capacity += group.times.len() * rec_len;
        for (sample_idx, &time) in group.times.iter().enumerate() {
            samples.push(SampleRef {
                time,
                group_idx,
                sample_idx,
            });
        }
    }

    samples.sort_by(|a, b| {
        a.time
            .total_cmp(&b.time)
            .then_with(|| a.group_idx.cmp(&b.group_idx))
            .then_with(|| a.sample_idx.cmp(&b.sample_idx))
    });

    let inval_bits: Vec<Vec<Option<u32>>> = groups.iter().map(|g| inval_bit_indices(g)).collect();
    let inval_lens: Vec<usize> = groups.iter().map(|g| inval_bytes(g) as usize).collect();

    let vlsd_offsets: Vec<Vec<Option<Vec<u64>>>> = groups
        .iter()
        .map(|g| {
            g.channels
                .iter()
                .map(|c| {
                    if c.is_vlsd {
                        let (_, offsets) = build_sd_data(&c.values);
                        Some(offsets)
                    } else {
                        None
                    }
                })
                .collect()
        })
        .collect();

    let mut buf = Vec::with_capacity(total_capacity);
    let mut inval_scratch: Vec<Vec<u8>> = inval_lens.iter().map(|&len| vec![0u8; len]).collect();

    for sample in samples {
        let group = groups[sample.group_idx];
        let record_id = (sample.group_idx + 1) as u8;
        buf.push(record_id);
        buf.extend_from_slice(&sample.time.to_le_bytes());

        for (channel_idx, channel) in group.channels.iter().enumerate() {
            if let Some(offsets) = &vlsd_offsets[sample.group_idx][channel_idx] {
                buf.extend_from_slice(&offsets[sample.sample_idx].to_le_bytes());
            } else {
                channel
                    .format
                    .encode(&channel.values, sample.sample_idx, &mut buf);
            }
        }

        let inval_len = inval_lens[sample.group_idx];
        if inval_len > 0 {
            let inval = &mut inval_scratch[sample.group_idx];
            inval.fill(0);
            for (channel, bit) in group.channels.iter().zip(&inval_bits[sample.group_idx]) {
                let Some(bit) = bit else { continue };
                let valid = channel.valid.as_ref().expect("a bit implies validity");
                if !valid[sample.sample_idx] {
                    inval[(bit / 8) as usize] |= 1 << (bit % 8);
                }
            }
            buf.extend_from_slice(inval);
        }
    }

    buf
}

/// Forward byte transposition for columnar data blocks.
///
/// Transposes bytes in column-major order given the record size (`column_size`).
/// If `raw.len()` is not an exact multiple of `column_size`, only the full
/// `lines * column_size` bytes are transposed and the remainder is copied
/// through unchanged, matching [`Mf4File::un_transpose`](crate::Mf4File::un_transpose).
pub fn transpose(raw: &[u8], column_size: usize) -> Vec<u8> {
    if column_size == 0 {
        return raw.to_vec();
    }
    let lines = raw.len() / column_size;
    if lines == 0 {
        return raw.to_vec();
    }
    let prefix_len = lines * column_size;
    let mut result = vec![0u8; raw.len()];
    // Row-major walk of the source with the destination index advancing by
    // addition — the flat-index version paid a division, a modulo and a
    // multiply per byte of the payload.
    for line in 0..lines {
        let mut dst = line;
        for &byte in &raw[line * column_size..][..column_size] {
            result[dst] = byte;
            dst += lines;
        }
    }
    result[prefix_len..].copy_from_slice(&raw[prefix_len..]);
    result
}

/// Writes a group's records, as a plain `##DT` or as `##HL`/`##DL`/`##DZ`.
///
/// `at` is where the first of those blocks lands, which the DL needs in order
/// to link to the DZ that follows it.
fn write_payload(out: &mut impl Write, at: u64, payload: &Payload) -> Result<()> {
    match payload {
        Payload::Plain(data) => {
            let mut buf = Vec::with_capacity(DT_HEADER_SIZE as usize);
            block_header(&mut buf, b"##DT", DT_HEADER_SIZE + data.len() as u64, 0);
            out.write_all(&buf)?;
            out.write_all(data)?;
        }
        Payload::Compressed {
            zip_type,
            zip_parameter,
            original_len,
            data,
        } => {
            let dl_off = at + HL_SIZE;
            let dz_off = dl_off + DL_SIZE;

            // ##HL: says up front which zip type the list below uses, so a
            // reader need not open a DZ to find out.
            let mut buf = Vec::with_capacity(HL_SIZE as usize);
            block_header(&mut buf, b"##HL", HL_SIZE, 1);
            push_link(&mut buf, dl_off);
            buf.extend_from_slice(&0u16.to_le_bytes()); // hl_flags
            buf.push(*zip_type); // hl_zip_type
            buf.extend_from_slice(&[0u8; 5]); // reserved
            out.write_all(&buf)?;

            // ##DL: one entry, so the equal-length form is the shorter one and
            // its length is the whole of the uncompressed data.
            let mut buf = Vec::with_capacity(DL_SIZE as usize);
            block_header(&mut buf, b"##DL", DL_SIZE, 2);
            push_link(&mut buf, 0); // dl_dl_next
            push_link(&mut buf, dz_off);
            buf.push(0x01); // dl_flags: equal length
            buf.extend_from_slice(&[0u8; 3]); // reserved
            buf.extend_from_slice(&1u32.to_le_bytes()); // dl_count
            buf.extend_from_slice(&original_len.to_le_bytes());
            out.write_all(&buf)?;

            // ##DZ.
            let mut buf = Vec::with_capacity(DZ_HEADER_SIZE as usize);
            block_header(&mut buf, b"##DZ", DZ_HEADER_SIZE + data.len() as u64, 0);
            buf.extend_from_slice(b"DT"); // the block type this stands in for
            buf.push(*zip_type); // dz_zip_type
            buf.push(0); // reserved
            buf.extend_from_slice(&zip_parameter.to_le_bytes()); // dz_zip_parameter
            buf.extend_from_slice(&original_len.to_le_bytes());
            buf.extend_from_slice(&(data.len() as u64).to_le_bytes());
            out.write_all(&buf)?;
            out.write_all(data)?;
        }
    }
    Ok(())
}