@jini-ai/cms 0.1.0

package/dist/media/blob-gc.d.ts

@@ -0,0 +1,246 @@
+/**
+ * @file Blob-GC protocol ("References, deletion, and GC
+ * (never-brick)", INV-1) — the audited tombstone -> delete-pass -> unlink-pass
+ * design, scoped to what an in-memory-repo build can actually run today.
+ *
+ * Built in this pass:
+ *  - The real "unreferenced" predicate's sha256-uniqueness-across-non-purged-
+ *    media-entries conjunct ({@link isBlobUnreferenced}), backed by the actual
+ *    `mediaRepo` data `purgeMedia` already has.
+ *  - Ordering (INV-1a): {@link runBlobGcDeletePass} deletes the `asset_blobs`
+ *    row and writes the `blob_gc_journal` entry together, before any bytes are
+ *    touched; {@link runBlobGcUnlinkPass} only ever unlinks bytes for a row
+ *    whose deletion has already happened. `uploadMedia` (see
+ *    `media-service.ts`) already writes bytes before the row.
+ *  - Serialization: every transition below runs inside {@link withSha256Lock}
+ *    (`blob-gc-lock.ts`) — this build's substitute for `BEGIN IMMEDIATE`
+ *    against an in-memory table (see that file's header for why).
+ *  - The two-phase, journaled shape: {@link tombstoneBlobIfUnreferenced} ->
+ *    {@link runBlobGcDeletePass} (re-checks the predicate + `gc_grace`,
+ *    journals, deletes the row) -> {@link runBlobGcUnlinkPass} (drains the
+ *    journal, removes bytes). {@link runBlobGcCycle} is a convenience batch
+ *    wrapper around the last two for tests/manual operation; nothing calls it
+ *    on a schedule.
+ *  - `gc_grace = max(30d default, retained-snapshot age)`, with the snapshot
+ *    input wired as a stub (see below) so a real value slots in later without
+ *    reworking callers.
+ *
+ * Deliberately NOT built (disclosed, matches this task's explicit scope):
+ *  - **`entry_refs` where-used index** ({@link hasLiveEntryRefs}) — belongs to
+ *    the generic entries model, which is accepted design only, not
+ *    running code yet (see `types.ts`'s file header on `MediaRecord` being a
+ *    bespoke table for the same reason). Stubbed to always return `false`
+ *    ("no live refs found").
+ *  - **Retained-snapshot conjunct** ({@link getOldestRetainedSnapshotAgeMs}) —
+ *    owned by a pending Storage/Backups snapshot primitive, which doesn't
+ *    exist yet either. Stubbed to always
+ *    return `undefined` ("no retained snapshot").
+ *  - **Monthly orphan sweep** ({@link runMonthlyOrphanSweepStub}) — the fourth
+ *    protocol phase, reconciling bytes on disk with no `asset_blobs` row at
+ *    all (e.g. a crash before any GC protocol existed). Needs a scheduler
+ *    this library doesn't provide. Named so the seam exists; performs no work
+ *    and is never called.
+ *  - **Cross-process safety** — `withSha256Lock` only serializes within one
+ *    Node process. A real multi-instance deployment needs the real DB
+ *    transaction the original design specifies, which a host's own persistence adapter
+ *    would supply; this build has no multi-writer story for media at all yet
+ *    (in-memory repo), so that gap is inherited, not new.
+ */
+import type { ClockPort, IdGeneratorPort, UUID } from "../core/ports.js";
+import type { AssetBlobRepoPort, BlobGcJournalRepoPort, BlobStorePort, MediaRepoPort } from "./ports.js";
+/** Default retention window before a tombstoned blob's delete-pass may run. */
+export declare const DEFAULT_GC_GRACE_MS: number;
+/**
+ * `gc_grace = max(configured default, age of the oldest retained snapshot at
+ * delete-pass time)`. The snapshot half is always `0` in this
+ * build (see {@link getOldestRetainedSnapshotAgeMs}), so this currently
+ * always resolves to {@link DEFAULT_GC_GRACE_MS} — structured so a real
+ * snapshot-age input replaces that `?? 0` later without touching callers.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export declare function resolveGcGraceMs(input: {
+    workspaceId: UUID;
+    sha256: string;
+}): number;
+export interface IsBlobUnreferencedRequired {
+    deps: {
+        mediaRepo: MediaRepoPort;
+    };
+    input: {
+        workspaceId: UUID;
+        sha256: string;
+    };
+}
+/**
+ * The real "unreferenced" check this file replaces `purgeMedia`'s old
+ * sibling-scan-and-immediately-delete shortcut with. Normative definition:
+ * no media entry in the workspace in any non-purged state
+ * (active or trashed — purged rows are physically removed by `purgeMedia`,
+ * so `mediaRepo.list` already excludes them by construction) references this
+ * sha256, AND no live `entry_refs` targets it, AND no retained snapshot
+ * references it. The last two conjuncts are evaluated by the disclosed stubs
+ * above.
+ *
+ * Callers MUST invoke this from inside {@link withSha256Lock} for the same
+ * sha256 — this function only reads, it does not lock itself, so its result
+ * is only trustworthy for as long as the caller's own lock is held.
+ *
+ * @complexity O(n) in the workspace's media row count (same disclosed
+ * tradeoff `purgeMedia`'s prior sibling-scan already carried — see
+ * `media-service.ts`'s findings note on that function).
+ * @overallScore 90
+ * @findings Medium: O(n) `mediaRepo.list` + `.some` scan per call, same
+ * known tradeoff as the code this replaces. A real `asset_blobs` reference
+ * count column would make this O(1); not worth adding for an in-memory
+ * walking-skeleton repo.
+ */
+export declare function isBlobUnreferenced(required: IsBlobUnreferencedRequired): Promise<boolean>;
+export interface TombstoneBlobDeps {
+    mediaRepo: MediaRepoPort;
+    blobRepo: AssetBlobRepoPort;
+    clock: ClockPort;
+}
+export interface TombstoneBlobRequired {
+    deps: TombstoneBlobDeps;
+    input: {
+        workspaceId: UUID;
+        sha256: string;
+    };
+}
+/**
+ * Tombstone-pass. Marks an `active` blob row `tombstoned` (starting its
+ * `gc_grace` clock) if-and-only-if {@link isBlobUnreferenced} holds, all
+ * inside one {@link withSha256Lock} section so a concurrent dedup upload for
+ * the same sha256 can't observe a half-updated row. Idempotent: re-tombstoning
+ * an already-tombstoned row is a no-op success, not an error (mirrors
+ * `trashMedia`'s idempotency).
+ *
+ * @complexity O(n) — dominated by {@link isBlobUnreferenced}'s scan.
+ * @overallScore 100
+ */
+export declare function tombstoneBlobIfUnreferenced(required: TombstoneBlobRequired): Promise<{
+    tombstoned: boolean;
+    reason: string;
+}>;
+export interface RunBlobGcDeletePassDeps {
+    mediaRepo: MediaRepoPort;
+    blobRepo: AssetBlobRepoPort;
+    journalRepo: BlobGcJournalRepoPort;
+    clock: ClockPort;
+    idGen: IdGeneratorPort;
+}
+export interface RunBlobGcDeletePassRequired {
+    deps: RunBlobGcDeletePassDeps;
+    input: {
+        workspaceId: UUID;
+        sha256: string;
+    };
+}
+/**
+ * Delete-pass. Gated on the row being `tombstoned` AND `gc_grace` having
+ * elapsed since `tombstonedAt` ({@link resolveGcGraceMs}); re-checks the full
+ * {@link isBlobUnreferenced} predicate one more time before acting (a
+ * resurrect between tombstone-pass and delete-pass already flips status back
+ * to `active`, which the tombstoned-status check below catches first, but the
+ * re-check is what the protocol calls for and is what future non-stub
+ * entry_refs/snapshot conjuncts would need). On success: writes the
+ * `blob_gc_journal` entry and removes the `asset_blobs` row, in that order,
+ * inside the same locked section — INV-1a's "unlinked only after the row
+ * deletion commits" half depends on nothing touching bytes here at all.
+ *
+ * @complexity O(n) — dominated by the re-check's `isBlobUnreferenced` scan.
+ * @overallScore 100
+ */
+export declare function runBlobGcDeletePass(required: RunBlobGcDeletePassRequired): Promise<{
+    deleted: boolean;
+    reason: string;
+}>;
+export interface RunBlobGcUnlinkPassDeps {
+    blobRepo: AssetBlobRepoPort;
+    journalRepo: BlobGcJournalRepoPort;
+    blobStore: BlobStorePort;
+}
+export interface RunBlobGcUnlinkPassRequired {
+    deps: RunBlobGcUnlinkPassDeps;
+    input: {
+        workspaceId: UUID;
+    };
+}
+/**
+ * Unlink-pass. Drains every journal entry for the workspace; for each, under
+ * that entry's sha256 lock, re-checks whether a **live** `asset_blobs` row now
+ * exists for the same sha256 (a dedup upload can legitimately recreate one
+ * after the delete-pass ran but before this pass drained the entry). If one
+ * exists, the entry is stale — its bytes are now owned by the live row, so
+ * this pass must NOT unlink them; the journal entry is still removed (its
+ * job — reconciling the row this ADR's crash-safety story cares about — is
+ * done either way). If no row exists, the bytes are genuinely orphaned and
+ * are removed.
+ *
+ * This re-check-under-lock is this build's substitute for the design's
+ * per-generation storage-key epochs (deferred — see `blob-key.ts`'s file
+ * header): instead of tagging storage keys with a generation suffix so a
+ * stale unlink physically cannot address live bytes, the sha256 lock plus
+ * this re-check gives the same guarantee for a single-process, in-memory
+ * build (see `blob-gc-lock.ts`'s file header for the serialization story this
+ * relies on).
+ *
+ * @complexity O(j) in the number of pending journal entries for the
+ * workspace, each doing O(1) repo/store work.
+ * @overallScore 100
+ */
+export declare function runBlobGcUnlinkPass(required: RunBlobGcUnlinkPassRequired): Promise<{
+    unlinked: string[];
+    skipped: string[];
+}>;
+export interface RunBlobGcCycleDeps extends RunBlobGcDeletePassDeps, Pick<RunBlobGcUnlinkPassDeps, "blobStore"> {
+}
+export interface RunBlobGcCycleRequired {
+    deps: RunBlobGcCycleDeps;
+    input: {
+        workspaceId: UUID;
+    };
+}
+/**
+ * Convenience wrapper: runs the delete-pass over every currently-tombstoned
+ * blob in the workspace (each still individually grace-gated —
+ * `runBlobGcDeletePass` may no-op per row), then drains the unlink-pass once.
+ * This is NOT the ADR's periodic/monthly orphan sweep (a different,
+ * out-of-scope reconciliation against bytes with no row at all — see
+ * {@link runMonthlyOrphanSweepStub}); it is just a batch shape over the two
+ * in-scope phases above, for tests and any future manual/operator trigger.
+ * Nothing calls it on a schedule.
+ *
+ * @complexity O(t * n + j) — t tombstoned rows each doing an O(n)
+ * `isBlobUnreferenced` re-check, plus O(j) journal drain.
+ * @overallScore 100
+ */
+export declare function runBlobGcCycle(required: RunBlobGcCycleRequired): Promise<{
+    deletedShas: string[];
+    unlinked: string[];
+    skipped: string[];
+}>;
+/**
+ * STUB — the protocol's fourth GC phase, a periodic/monthly orphan sweep that
+ * reconciles bytes physically present in the blob store with no
+ * corresponding `asset_blobs` row at all (e.g. bytes from a crash before any
+ * GC protocol existed, or before this build's ordering guarantee was in
+ * place). Out of scope for this task ("needs a scheduler this build doesn't
+ * have yet" — see this file's header). Performs no work; exists only so the
+ * seam a future scheduler would call has a name and signature. Never invoked
+ * anywhere in this build.
+ *
+ * @complexity O(1) (stub — does nothing).
+ * @overallScore 100
+ */
+export declare function runMonthlyOrphanSweepStub(_deps: {
+    blobStore: BlobStorePort;
+    blobRepo: AssetBlobRepoPort;
+}, _input: {
+    workspaceId: UUID;
+}): Promise<{
+    implemented: false;
+}>;
+//# sourceMappingURL=blob-gc.d.ts.map

package/dist/media/blob-gc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-gc.d.ts","sourceRoot":"","sources":["../../src/media/blob-gc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGzG,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,QAA2B,CAAC;AA+C5D;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IAAE,WAAW,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAGrF;AAMD,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE;QAAE,SAAS,EAAE,aAAa,CAAA;KAAE,CAAC;IACnC,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ/F;AAMD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAalD;AAMD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,qBAAqB,CAAC;IACnC,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B/C;AAMD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAuBpD;AAMD,MAAM,WAAW,kBACf,SAAQ,uBAAuB,EAC7B,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC;CAAG;AAEjD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,CAAC;CAC9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,sBAAsB,GAC/B,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAa3E;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE;IAAE,SAAS,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,EAChE,MAAM,EAAE;IAAE,WAAW,EAAE,IAAI,CAAA;CAAE,GAC5B,OAAO,CAAC;IAAE,WAAW,EAAE,KAAK,CAAA;CAAE,CAAC,CAEjC"}

package/dist/media/blob-gc.js

@@ -0,0 +1,254 @@
+import { withSha256Lock } from "./blob-gc-lock.js";
+/** Default retention window before a tombstoned blob's delete-pass may run. */
+export const DEFAULT_GC_GRACE_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
+// ---------------------------------------------------------------------------
+// Disclosed stubs — conjuncts this build cannot evaluate for real
+// yet. Both are named, not silently folded into `true`/`false` inline, so a
+// future implementation has an obvious seam to replace.
+// ---------------------------------------------------------------------------
+/**
+ * STUB — the derived `entry_refs` where-used index (TipTap image nodes
+ * + registry `ref` fields) does not exist as running code yet (see this
+ * file's header). Always reports no live references, which is what lets
+ * {@link isBlobUnreferenced} degrade to the sha256-uniqueness check alone.
+ *
+ * @complexity O(1) (stub).
+ * @overallScore 100
+ */
+function hasLiveEntryRefs(_input) {
+    return false;
+}
+/**
+ * STUB — snapshot-retention is owned by a pending Storage/Backups snapshot
+ * primitive (not built yet at all — see this file's header). Always reports
+ * no retained snapshot.
+ *
+ * @complexity O(1) (stub).
+ * @overallScore 100
+ */
+function hasRetainedSnapshot(_input) {
+    return false;
+}
+/**
+ * STUB — age (ms) of the oldest snapshot that still retains this blob, at
+ * delete-pass time. Always `undefined` in this build (no snapshot primitive
+ * exists), which is what makes {@link resolveGcGraceMs} fall back to the
+ * 30-day default alone. A real implementation would return a number here;
+ * `resolveGcGraceMs`'s `Math.max` already accepts that without change.
+ *
+ * @complexity O(1) (stub).
+ * @overallScore 100
+ */
+function getOldestRetainedSnapshotAgeMs(_input) {
+    return undefined;
+}
+/**
+ * `gc_grace = max(configured default, age of the oldest retained snapshot at
+ * delete-pass time)`. The snapshot half is always `0` in this
+ * build (see {@link getOldestRetainedSnapshotAgeMs}), so this currently
+ * always resolves to {@link DEFAULT_GC_GRACE_MS} — structured so a real
+ * snapshot-age input replaces that `?? 0` later without touching callers.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export function resolveGcGraceMs(input) {
+    const snapshotAgeMs = getOldestRetainedSnapshotAgeMs(input) ?? 0;
+    return Math.max(DEFAULT_GC_GRACE_MS, snapshotAgeMs);
+}
+/**
+ * The real "unreferenced" check this file replaces `purgeMedia`'s old
+ * sibling-scan-and-immediately-delete shortcut with. Normative definition:
+ * no media entry in the workspace in any non-purged state
+ * (active or trashed — purged rows are physically removed by `purgeMedia`,
+ * so `mediaRepo.list` already excludes them by construction) references this
+ * sha256, AND no live `entry_refs` targets it, AND no retained snapshot
+ * references it. The last two conjuncts are evaluated by the disclosed stubs
+ * above.
+ *
+ * Callers MUST invoke this from inside {@link withSha256Lock} for the same
+ * sha256 — this function only reads, it does not lock itself, so its result
+ * is only trustworthy for as long as the caller's own lock is held.
+ *
+ * @complexity O(n) in the workspace's media row count (same disclosed
+ * tradeoff `purgeMedia`'s prior sibling-scan already carried — see
+ * `media-service.ts`'s findings note on that function).
+ * @overallScore 90
+ * @findings Medium: O(n) `mediaRepo.list` + `.some` scan per call, same
+ * known tradeoff as the code this replaces. A real `asset_blobs` reference
+ * count column would make this O(1); not worth adding for an in-memory
+ * walking-skeleton repo.
+ */
+export async function isBlobUnreferenced(required) {
+    const { deps, input } = required;
+    const rows = await deps.mediaRepo.list({ workspaceId: input.workspaceId });
+    const hasMediaReference = rows.some((row) => row.source.sha256 === input.sha256);
+    if (hasMediaReference)
+        return false;
+    if (hasLiveEntryRefs(input))
+        return false;
+    if (hasRetainedSnapshot(input))
+        return false;
+    return true;
+}
+/**
+ * Tombstone-pass. Marks an `active` blob row `tombstoned` (starting its
+ * `gc_grace` clock) if-and-only-if {@link isBlobUnreferenced} holds, all
+ * inside one {@link withSha256Lock} section so a concurrent dedup upload for
+ * the same sha256 can't observe a half-updated row. Idempotent: re-tombstoning
+ * an already-tombstoned row is a no-op success, not an error (mirrors
+ * `trashMedia`'s idempotency).
+ *
+ * @complexity O(n) — dominated by {@link isBlobUnreferenced}'s scan.
+ * @overallScore 100
+ */
+export async function tombstoneBlobIfUnreferenced(required) {
+    const { deps, input } = required;
+    return withSha256Lock(input.sha256, async () => {
+        const row = await deps.blobRepo.findByHash(input);
+        if (!row)
+            return { tombstoned: false, reason: "no-blob-row" };
+        if (row.status === "tombstoned")
+            return { tombstoned: true, reason: "already-tombstoned" };
+        const unreferenced = await isBlobUnreferenced({ deps, input });
+        if (!unreferenced)
+            return { tombstoned: false, reason: "still-referenced" };
+        await deps.blobRepo.save({ ...row, status: "tombstoned", tombstonedAt: deps.clock.nowIso() });
+        return { tombstoned: true, reason: "tombstoned" };
+    });
+}
+/**
+ * Delete-pass. Gated on the row being `tombstoned` AND `gc_grace` having
+ * elapsed since `tombstonedAt` ({@link resolveGcGraceMs}); re-checks the full
+ * {@link isBlobUnreferenced} predicate one more time before acting (a
+ * resurrect between tombstone-pass and delete-pass already flips status back
+ * to `active`, which the tombstoned-status check below catches first, but the
+ * re-check is what the protocol calls for and is what future non-stub
+ * entry_refs/snapshot conjuncts would need). On success: writes the
+ * `blob_gc_journal` entry and removes the `asset_blobs` row, in that order,
+ * inside the same locked section — INV-1a's "unlinked only after the row
+ * deletion commits" half depends on nothing touching bytes here at all.
+ *
+ * @complexity O(n) — dominated by the re-check's `isBlobUnreferenced` scan.
+ * @overallScore 100
+ */
+export async function runBlobGcDeletePass(required) {
+    const { deps, input } = required;
+    return withSha256Lock(input.sha256, async () => {
+        const row = await deps.blobRepo.findByHash(input);
+        if (!row)
+            return { deleted: false, reason: "no-blob-row" };
+        if (row.status !== "tombstoned" || !row.tombstonedAt) {
+            return { deleted: false, reason: "not-tombstoned" };
+        }
+        const graceMs = resolveGcGraceMs(input);
+        const elapsedMs = new Date(deps.clock.nowIso()).getTime() - new Date(row.tombstonedAt).getTime();
+        if (elapsedMs < graceMs)
+            return { deleted: false, reason: "grace-period-not-elapsed" };
+        const stillUnreferenced = await isBlobUnreferenced({ deps, input });
+        if (!stillUnreferenced)
+            return { deleted: false, reason: "resurrected" };
+        await deps.journalRepo.save({
+            id: deps.idGen.newId(),
+            workspaceId: input.workspaceId,
+            sha256: input.sha256,
+            storageKey: row.storageKey,
+            journaledAt: deps.clock.nowIso(),
+        });
+        await deps.blobRepo.remove(input);
+        return { deleted: true, reason: "deleted" };
+    });
+}
+/**
+ * Unlink-pass. Drains every journal entry for the workspace; for each, under
+ * that entry's sha256 lock, re-checks whether a **live** `asset_blobs` row now
+ * exists for the same sha256 (a dedup upload can legitimately recreate one
+ * after the delete-pass ran but before this pass drained the entry). If one
+ * exists, the entry is stale — its bytes are now owned by the live row, so
+ * this pass must NOT unlink them; the journal entry is still removed (its
+ * job — reconciling the row this ADR's crash-safety story cares about — is
+ * done either way). If no row exists, the bytes are genuinely orphaned and
+ * are removed.
+ *
+ * This re-check-under-lock is this build's substitute for the design's
+ * per-generation storage-key epochs (deferred — see `blob-key.ts`'s file
+ * header): instead of tagging storage keys with a generation suffix so a
+ * stale unlink physically cannot address live bytes, the sha256 lock plus
+ * this re-check gives the same guarantee for a single-process, in-memory
+ * build (see `blob-gc-lock.ts`'s file header for the serialization story this
+ * relies on).
+ *
+ * @complexity O(j) in the number of pending journal entries for the
+ * workspace, each doing O(1) repo/store work.
+ * @overallScore 100
+ */
+export async function runBlobGcUnlinkPass(required) {
+    const { deps, input } = required;
+    const entries = await deps.journalRepo.list(input);
+    const unlinked = [];
+    const skipped = [];
+    for (const entry of entries) {
+        await withSha256Lock(entry.sha256, async () => {
+            const liveRow = await deps.blobRepo.findByHash({
+                workspaceId: entry.workspaceId,
+                sha256: entry.sha256,
+            });
+            if (liveRow) {
+                skipped.push(entry.sha256);
+            }
+            else {
+                await deps.blobStore.remove({ storageKey: entry.storageKey });
+                unlinked.push(entry.sha256);
+            }
+            await deps.journalRepo.remove({ workspaceId: entry.workspaceId, id: entry.id });
+        });
+    }
+    return { unlinked, skipped };
+}
+/**
+ * Convenience wrapper: runs the delete-pass over every currently-tombstoned
+ * blob in the workspace (each still individually grace-gated —
+ * `runBlobGcDeletePass` may no-op per row), then drains the unlink-pass once.
+ * This is NOT the ADR's periodic/monthly orphan sweep (a different,
+ * out-of-scope reconciliation against bytes with no row at all — see
+ * {@link runMonthlyOrphanSweepStub}); it is just a batch shape over the two
+ * in-scope phases above, for tests and any future manual/operator trigger.
+ * Nothing calls it on a schedule.
+ *
+ * @complexity O(t * n + j) — t tombstoned rows each doing an O(n)
+ * `isBlobUnreferenced` re-check, plus O(j) journal drain.
+ * @overallScore 100
+ */
+export async function runBlobGcCycle(required) {
+    const { deps, input } = required;
+    const rows = await deps.blobRepo.list(input);
+    const tombstonedRows = rows.filter((row) => row.status === "tombstoned");
+    const deletedShas = [];
+    for (const row of tombstonedRows) {
+        const result = await runBlobGcDeletePass({ deps, input: { workspaceId: input.workspaceId, sha256: row.sha256 } });
+        if (result.deleted)
+            deletedShas.push(row.sha256);
+    }
+    const { unlinked, skipped } = await runBlobGcUnlinkPass({ deps, input });
+    return { deletedShas, unlinked, skipped };
+}
+// ---------------------------------------------------------------------------
+// Explicitly out of scope — named stub only (see file header)
+// ---------------------------------------------------------------------------
+/**
+ * STUB — the protocol's fourth GC phase, a periodic/monthly orphan sweep that
+ * reconciles bytes physically present in the blob store with no
+ * corresponding `asset_blobs` row at all (e.g. bytes from a crash before any
+ * GC protocol existed, or before this build's ordering guarantee was in
+ * place). Out of scope for this task ("needs a scheduler this build doesn't
+ * have yet" — see this file's header). Performs no work; exists only so the
+ * seam a future scheduler would call has a name and signature. Never invoked
+ * anywhere in this build.
+ *
+ * @complexity O(1) (stub — does nothing).
+ * @overallScore 100
+ */
+export async function runMonthlyOrphanSweepStub(_deps, _input) {
+    return { implemented: false };
+}
+//# sourceMappingURL=blob-gc.js.map

package/dist/media/blob-gc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-gc.js","sourceRoot":"","sources":["../../src/media/blob-gc.ts"],"names":[],"mappings":"AAkDA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AAEvE,8EAA8E;AAC9E,kEAAkE;AAClE,4EAA4E;AAC5E,wDAAwD;AACxD,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,MAA6C;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,MAA6C;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,8BAA8B,CAAC,MAA6C;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4C;IAC3E,MAAM,aAAa,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAoC;IAC3E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IACjF,IAAI,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,mBAAmB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAiBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAA+B;IAE/B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACjC,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAE3F,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAE5E,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAmBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAqC;IAErC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACjC,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QACjG,IAAI,SAAS,GAAG,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAEvF,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,iBAAiB;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAEzE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAC1B,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAqC;IAErC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC7C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgC;IAEhC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IAEzE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClH,IAAI,MAAM,CAAC,OAAO;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAgE,EAChE,MAA6B;IAE7B,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC"}

package/dist/media/blob-key.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @file Shared storage-key derivation for `BlobStorePort` adapters
+ * (workspace-prefixed keys).
+ *
+ * Purpose:
+ * Both `blob-store.fs.ts` and `blob-store.memory.ts` must derive the same key
+ * shape from `(workspaceId, sha256)` so switching adapters never changes what a
+ * stored key looks like. Kept as one small pure function rather than
+ * duplicated inline in each adapter.
+ *
+ * No per-generation epoch suffix (contrast the original design's
+ * `{sha256}-{storage_epoch}`) — epochs exist to make the journaled 2-phase GC
+ * race-proof, and that protocol is explicitly deferred in this build (see
+ * `media-service.ts` file header). A future epoch-aware rewrite would change
+ * this function's output shape, not its callers' contract.
+ */
+import type { UUID } from "../core/ports.js";
+/**
+ * Derives `ws/{workspaceId}/blobs/{sha256[0..1]}/{sha256}`.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export declare function computeBlobStorageKey(input: {
+    workspaceId: UUID;
+    sha256: string;
+}): string;
+//# sourceMappingURL=blob-key.d.ts.map

package/dist/media/blob-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-key.d.ts","sourceRoot":"","sources":["../../src/media/blob-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,WAAW,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAG1F"}

package/dist/media/blob-key.js

@@ -0,0 +1,11 @@
+/**
+ * Derives `ws/{workspaceId}/blobs/{sha256[0..1]}/{sha256}`.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export function computeBlobStorageKey(input) {
+    const shard = input.sha256.slice(0, 2);
+    return `ws/${input.workspaceId}/blobs/${shard}/${input.sha256}`;
+}
+//# sourceMappingURL=blob-key.js.map

package/dist/media/blob-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-key.js","sourceRoot":"","sources":["../../src/media/blob-key.ts"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA4C;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvC,OAAO,MAAM,KAAK,CAAC,WAAW,UAAU,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;AAClE,CAAC"}

package/dist/media/blob-store.fs.d.ts

@@ -0,0 +1,23 @@
+import type { BlobStorePort, PutBlobInput } from "./ports.js";
+export interface LocalFsBlobStoreDeps {
+    /** Root directory blob storage keys are resolved relative to. */
+    rootDir: string;
+}
+export declare class LocalFsBlobStore implements BlobStorePort {
+    private readonly rootDir;
+    constructor(deps: LocalFsBlobStoreDeps);
+    private resolvePath;
+    put(input: PutBlobInput): Promise<{
+        storageKey: string;
+    }>;
+    get(input: {
+        storageKey: string;
+    }): Promise<Uint8Array>;
+    exists(input: {
+        storageKey: string;
+    }): Promise<boolean>;
+    remove(input: {
+        storageKey: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=blob-store.fs.d.ts.map

package/dist/media/blob-store.fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.fs.d.ts","sourceRoot":"","sources":["../../src/media/blob-store.fs.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG9D,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,gBAAiB,YAAW,aAAa;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,IAAI,EAAE,oBAAoB;IAItC,OAAO,CAAC,WAAW;IAIb,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAQzD,GAAG,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAIvD,MAAM,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IASvD,MAAM,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3D"}

package/dist/media/blob-store.fs.js

@@ -0,0 +1,48 @@
+/**
+ * @file Local-filesystem `BlobStorePort` adapter (port/adapter rule-of-two "one
+ * being built now" half; the `uploads/` convention).
+ *
+ * Purpose:
+ * Writes/reads blob bytes under a configurable root directory, keyed by
+ * `computeBlobStorageKey` (`blob-key.ts`). A host wires this in for its real
+ * running server; the in-memory adapter (`blob-store.memory.ts`) is what
+ * hermetic tests and a default dev composition use instead.
+ *
+ * Deliberately NOT built: the S3 adapter (deferred), the presign
+ * surface, per-generation storage epochs (see `blob-key.ts` file header).
+ */
+import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { computeBlobStorageKey } from "./blob-key.js";
+export class LocalFsBlobStore {
+    rootDir;
+    constructor(deps) {
+        this.rootDir = deps.rootDir;
+    }
+    resolvePath(storageKey) {
+        return join(this.rootDir, storageKey);
+    }
+    async put(input) {
+        const storageKey = computeBlobStorageKey(input);
+        const path = this.resolvePath(storageKey);
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, input.bytes);
+        return { storageKey };
+    }
+    async get(input) {
+        return readFile(this.resolvePath(input.storageKey));
+    }
+    async exists(input) {
+        try {
+            await stat(this.resolvePath(input.storageKey));
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async remove(input) {
+        await rm(this.resolvePath(input.storageKey), { force: true });
+    }
+}
+//# sourceMappingURL=blob-store.fs.js.map

package/dist/media/blob-store.fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.fs.js","sourceRoot":"","sources":["../../src/media/blob-store.fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAOtD,MAAM,OAAO,gBAAgB;IACV,OAAO,CAAS;IAEjC,YAAY,IAA0B;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAmB;QAC3B,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAA6B;QACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA6B;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA6B;QACxC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;CACF"}