@runcore-sh/runcore 0.1.2

package/dist/core/registry/versions.js

@@ -0,0 +1,101 @@
+/**
+ * Template & Skill Sharing Registry — Version management.
+ *
+ * Handles version listing, comparison, rollback, and compatibility checks
+ * for registry entries. Builds on the version records stored by RegistryStore.
+ */
+import { computeChecksum, compareSemver } from "./publisher.js";
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Get the full version history for a registry entry.
+ */
+export function getVersionHistory(entry, store) {
+    const versions = store.getVersions(entry.id);
+    return {
+        entryId: entry.id,
+        currentVersion: entry.version,
+        versions: versions.map((v) => ({
+            version: v.version,
+            changelog: v.changelog,
+            publishedAt: v.publishedAt,
+        })),
+    };
+}
+/**
+ * Get the content of a specific version for an entry.
+ * Returns null if the version doesn't exist.
+ */
+export function getVersionContent(entryId, version, store) {
+    const ver = store.getVersion(entryId, version);
+    return ver?.content ?? null;
+}
+/**
+ * Check if a specific version exists for an entry.
+ */
+export function hasVersion(entryId, version, store) {
+    return store.getVersion(entryId, version) !== undefined;
+}
+/**
+ * Get the latest version record for an entry.
+ */
+export function getLatestVersion(entryId, store) {
+    const versions = store.getVersions(entryId);
+    if (versions.length === 0)
+        return null;
+    // Already sorted newest first by store.getVersions()
+    return versions[0];
+}
+/**
+ * Verify the integrity of a version's content against its checksum.
+ */
+export function verifyChecksum(version) {
+    return computeChecksum(version.content) === version.checksum;
+}
+/**
+ * Rollback an entry to a previous version.
+ * Updates the entry in-place and persists the change.
+ * Returns the rolled-back entry, or null if the version doesn't exist.
+ */
+export async function rollbackToVersion(entryId, targetVersion, store) {
+    const entry = store.getEntry(entryId);
+    if (!entry)
+        return null;
+    const ver = store.getVersion(entryId, targetVersion);
+    if (!ver)
+        return null;
+    // Verify integrity before rollback
+    if (!verifyChecksum(ver))
+        return null;
+    // Update entry to point at the rolled-back content
+    const updated = {
+        ...entry,
+        version: ver.version,
+        content: ver.content,
+        checksum: ver.checksum,
+        updatedAt: new Date().toISOString(),
+    };
+    await store.saveEntry(updated);
+    return updated;
+}
+/**
+ * Check if an update is available by comparing a local version against the registry.
+ */
+export function isUpdateAvailable(localVersion, entry) {
+    return compareSemver(entry.version, localVersion) > 0;
+}
+/**
+ * List versions newer than a given version.
+ */
+export function getNewerVersions(entryId, sinceVersion, store) {
+    const versions = store.getVersions(entryId);
+    return versions
+        .filter((v) => compareSemver(v.version, sinceVersion) > 0)
+        .map((v) => ({
+        version: v.version,
+        changelog: v.changelog,
+        publishedAt: v.publishedAt,
+    }));
+}
+//# sourceMappingURL=versions.js.map

package/dist/core/registry/versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versions.js","sourceRoot":"","sources":["../../../src/core/registry/versions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAoBhE,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAoB,EACpB,KAAoB;IAEpB,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,cAAc,EAAE,KAAK,CAAC,OAAO;QAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,OAAe,EACf,KAAoB;IAEpB,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAe,EACf,KAAoB;IAEpB,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,KAAoB;IAEpB,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,qDAAqD;IACrD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,OAAO,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,aAAqB,EACrB,KAAoB;IAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,mCAAmC;IACnC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,mDAAmD;IACnD,MAAM,OAAO,GAAkB;QAC7B,GAAG,KAAK;QACR,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,KAAoB;IAEpB,OAAO,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,YAAoB,EACpB,KAAoB;IAEpB,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/credentials/store.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Credentials store — append-only encrypted JSONL persistence for secrets.
+ * Follows ContactStore pattern (src/contacts/store.ts).
+ *
+ * File: brain/vault/credentials.enc.jsonl
+ * Update strategy: append full updated record. On load, last occurrence per id wins.
+ * Values stored directly (encrypted at rest via brain-io).
+ */
+export type CredentialType = "api_key" | "token" | "oauth" | "password" | "secret";
+export interface Credential {
+    id: string;
+    name: string;
+    service: string;
+    type: CredentialType;
+    value: string;
+    envVar?: string;
+    notes?: string;
+    tags: string[];
+    status: "active" | "archived";
+    createdAt: string;
+    updatedAt: string;
+    lastRotatedAt?: string;
+}
+export interface CredentialFilter {
+    type?: CredentialType;
+    status?: "active" | "archived";
+    search?: string;
+}
+/** Mask a secret value: show first 4 + last 4 with **** in between, or •••••••• if short. */
+export declare function maskValue(val: string): string;
+export declare class CredentialStore {
+    private readonly filePath;
+    private cache;
+    private mtime;
+    private lastStaleCheckMs;
+    constructor(brainDir: string);
+    private ensureFile;
+    private checkStale;
+    private load;
+    private invalidate;
+    list(filter?: CredentialFilter): Promise<Credential[]>;
+    get(id: string): Promise<Credential | null>;
+    create(opts: {
+        name: string;
+        service: string;
+        type: CredentialType;
+        value: string;
+        envVar?: string;
+        notes?: string;
+        tags?: string[];
+    }): Promise<Credential>;
+    update(id: string, changes: Partial<Pick<Credential, "name" | "service" | "type" | "value" | "envVar" | "notes" | "tags" | "status" | "lastRotatedAt">>): Promise<Credential | null>;
+    archive(id: string): Promise<Credential | null>;
+    /** Inject credentials with envVar into process.env. Called on startup. */
+    hydrate(): Promise<number>;
+}
+export declare function createCredentialStore(brainDir: string): CredentialStore;
+export declare function getCredentialStore(): CredentialStore | null;
+//# sourceMappingURL=store.d.ts.map

package/dist/credentials/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/credentials/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7C;AAID,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,KAAK,CAAwC;IACrD,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,gBAAgB,CAAK;gBAEjB,QAAQ,EAAE,MAAM;YAMd,UAAU;YAIV,UAAU;YAiBV,IAAI;IA0BlB,OAAO,CAAC,UAAU;IAIZ,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAyBtD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAK3C,MAAM,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,cAAc,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,GAAG,OAAO,CAAC,UAAU,CAAC;IAsBjB,MAAM,CACV,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,CAAC,CAAC,GACnI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAgBvB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMrD,0EAA0E;IACpE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CAYjC;AAMD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAIvE;AAED,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,IAAI,CAE3D"}

package/dist/credentials/store.js

@@ -0,0 +1,178 @@
+/**
+ * Credentials store — append-only encrypted JSONL persistence for secrets.
+ * Follows ContactStore pattern (src/contacts/store.ts).
+ *
+ * File: brain/vault/credentials.enc.jsonl
+ * Update strategy: append full updated record. On load, last occurrence per id wins.
+ * Values stored directly (encrypted at rest via brain-io).
+ */
+import { join } from "node:path";
+import { stat } from "node:fs/promises";
+import { createLogger } from "../utils/logger.js";
+import { readBrainLines, appendBrainLine, ensureBrainJsonl } from "../lib/brain-io.js";
+const log = createLogger("credentials.store");
+const SCHEMA = JSON.stringify({ _schema: "credentials", _version: "1.0" });
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function generateId() {
+    const ts = Date.now();
+    const hex = Math.random().toString(16).slice(2, 10).padEnd(8, "0");
+    return `cred_${ts}_${hex}`;
+}
+/** Mask a secret value: show first 4 + last 4 with **** in between, or •••••••• if short. */
+export function maskValue(val) {
+    if (!val)
+        return "••••••••";
+    if (val.length < 12)
+        return "••••••••";
+    return val.slice(0, 4) + "****" + val.slice(-4);
+}
+// ── Store ────────────────────────────────────────────────────────────────────
+export class CredentialStore {
+    filePath;
+    cache = null;
+    mtime = 0;
+    lastStaleCheckMs = 0;
+    constructor(brainDir) {
+        this.filePath = join(brainDir, "vault", "credentials.enc.jsonl");
+    }
+    // ── File management ──────────────────────────────────────────────────────
+    async ensureFile() {
+        await ensureBrainJsonl(this.filePath, SCHEMA);
+    }
+    async checkStale() {
+        const now = Date.now();
+        if (now - this.lastStaleCheckMs < 5000)
+            return;
+        this.lastStaleCheckMs = now;
+        try {
+            if (this.cache) {
+                const s = await stat(this.filePath);
+                if (s.mtimeMs > this.mtime)
+                    this.cache = null;
+            }
+        }
+        catch {
+            // File may not exist yet
+        }
+    }
+    // ── Load ────────────────────────────────────────────────────────────────
+    async load() {
+        await this.checkStale();
+        if (this.cache)
+            return this.cache;
+        await this.ensureFile();
+        const lines = await readBrainLines(this.filePath);
+        const map = new Map();
+        for (const line of lines) {
+            try {
+                const obj = JSON.parse(line);
+                if (obj._schema)
+                    continue;
+                if (!obj.id)
+                    continue;
+                map.set(obj.id, obj);
+            }
+            catch {
+                continue;
+            }
+        }
+        this.cache = map;
+        try {
+            const s = await stat(this.filePath);
+            this.mtime = s.mtimeMs;
+        }
+        catch { /* ok */ }
+        return map;
+    }
+    invalidate() { this.cache = null; }
+    // ── CRUD ────────────────────────────────────────────────────────────────
+    async list(filter) {
+        const map = await this.load();
+        let creds = Array.from(map.values());
+        if (filter?.type) {
+            creds = creds.filter((c) => c.type === filter.type);
+        }
+        if (filter?.status) {
+            creds = creds.filter((c) => c.status === filter.status);
+        }
+        else {
+            creds = creds.filter((c) => c.status !== "archived");
+        }
+        if (filter?.search) {
+            const q = filter.search.toLowerCase();
+            creds = creds.filter((c) => c.name.toLowerCase().includes(q) ||
+                c.service.toLowerCase().includes(q) ||
+                c.tags.some((t) => t.toLowerCase().includes(q)));
+        }
+        creds.sort((a, b) => a.service.localeCompare(b.service) || a.name.localeCompare(b.name));
+        return creds;
+    }
+    async get(id) {
+        const map = await this.load();
+        return map.get(id) ?? null;
+    }
+    async create(opts) {
+        const now = new Date().toISOString();
+        const cred = {
+            id: generateId(),
+            name: opts.name,
+            service: opts.service,
+            type: opts.type,
+            value: opts.value,
+            envVar: opts.envVar,
+            notes: opts.notes,
+            tags: opts.tags ?? [],
+            status: "active",
+            createdAt: now,
+            updatedAt: now,
+        };
+        await appendBrainLine(this.filePath, JSON.stringify(cred));
+        this.invalidate();
+        log.info(`Created credential ${cred.id}: ${cred.name} (${cred.service})`);
+        return cred;
+    }
+    async update(id, changes) {
+        const existing = await this.get(id);
+        if (!existing)
+            return null;
+        const updated = {
+            ...existing,
+            ...changes,
+            updatedAt: new Date().toISOString(),
+        };
+        await appendBrainLine(this.filePath, JSON.stringify(updated));
+        this.invalidate();
+        log.info(`Updated credential ${id}: ${updated.name}`);
+        return updated;
+    }
+    async archive(id) {
+        return this.update(id, { status: "archived" });
+    }
+    // ── Hydrate ─────────────────────────────────────────────────────────────
+    /** Inject credentials with envVar into process.env. Called on startup. */
+    async hydrate() {
+        const map = await this.load();
+        let count = 0;
+        for (const cred of map.values()) {
+            if (cred.status === "active" && cred.envVar && cred.value) {
+                process.env[cred.envVar] = cred.value;
+                count++;
+            }
+        }
+        if (count > 0)
+            log.info(`Hydrated ${count} credential(s) into process.env`);
+        return count;
+    }
+}
+// ── Singleton ──────────────────────────────────────────────────────────────
+let _store = null;
+export function createCredentialStore(brainDir) {
+    if (_store)
+        return _store;
+    _store = new CredentialStore(brainDir);
+    return _store;
+}
+export function getCredentialStore() {
+    return _store;
+}
+//# sourceMappingURL=store.js.map

package/dist/credentials/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/credentials/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAE9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AA2B3E,gFAAgF;AAEhF,SAAS,UAAU;IACjB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,UAAU,CAAC;IAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,UAAU,CAAC;IACvC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,eAAe;IACT,QAAQ,CAAS;IAC1B,KAAK,GAAmC,IAAI,CAAC;IAC7C,KAAK,GAAG,CAAC,CAAC;IACV,gBAAgB,GAAG,CAAC,CAAC;IAE7B,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACnE,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,UAAU;QACtB,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,gBAAgB,GAAG,IAAI;YAAE,OAAO;QAC/C,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAE5B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAElC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,GAAG,CAAC,OAAO;oBAAE,SAAS;gBAC1B,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,SAAS;gBACtB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAiB,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;QACvB,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEpB,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,UAAU,KAAW,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAEjD,2EAA2E;IAE3E,KAAK,CAAC,IAAI,CAAC,MAAyB;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAErC,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;YACjB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACnC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAChD,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAQZ;QACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAe;YACvB,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,OAAoI;QAEpI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,OAAO,GAAe;YAC1B,GAAG,QAAQ;YACX,GAAG,OAAO;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,2EAA2E;IAE3E,0EAA0E;IAC1E,KAAK,CAAC,OAAO;QACX,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;gBACtC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,iCAAiC,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,8EAA8E;AAE9E,IAAI,MAAM,GAA2B,IAAI,CAAC;AAE1C,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/files/agent-api.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Agent file API — DASH-65.
+ * Helper functions for agents to create, read, and list files.
+ * Agents use these instead of direct FileStore access.
+ */
+import type { FileEntry, FileCategory, FileFilter } from "./types.js";
+import type { FileStore } from "./store.js";
+/**
+ * Initialize agent file API with references to the store and storage root.
+ * Called once by the FileManager during setup.
+ */
+export declare function initAgentFileApi(store: FileStore, storageRoot: string): void;
+/**
+ * Create a file from an agent task.
+ * Writes content to storage/generated/<year>/<month>/ and registers it.
+ */
+export declare function agentCreateFile(opts: {
+    taskId: string;
+    name: string;
+    content: Buffer;
+    mimeType: string;
+    category?: FileCategory;
+    tags?: string[];
+}): Promise<{
+    ok: boolean;
+    file?: FileEntry;
+    message: string;
+}>;
+/**
+ * Read a file's contents by ID.
+ */
+export declare function agentReadFile(fileId: string): Promise<{
+    ok: boolean;
+    data?: Buffer;
+    message: string;
+}>;
+/**
+ * List files matching a filter.
+ */
+export declare function agentListFiles(filter: FileFilter): Promise<{
+    ok: boolean;
+    files?: FileEntry[];
+    message: string;
+}>;
+/**
+ * Format file references for injection into agent prompts.
+ * Returns a markdown section listing available files.
+ */
+export declare function formatFilesForContext(taskId?: string, limit?: number): Promise<string>;
+//# sourceMappingURL=agent-api.d.ts.map

package/dist/files/agent-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-api.d.ts","sourceRoot":"","sources":["../../src/files/agent-api.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAS5C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAG5E;AAWD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA4B9D;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAe5G;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAWvH;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAqBjB"}

package/dist/files/agent-api.js

@@ -0,0 +1,126 @@
+/**
+ * Agent file API — DASH-65.
+ * Helper functions for agents to create, read, and list files.
+ * Agents use these instead of direct FileStore access.
+ */
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { createLogger } from "../utils/logger.js";
+const log = createLogger("files.agent-api");
+// ── Lazy reference to FileManager (set at init) ────────────────────────────
+let _store = null;
+let _storageRoot = null;
+/**
+ * Initialize agent file API with references to the store and storage root.
+ * Called once by the FileManager during setup.
+ */
+export function initAgentFileApi(store, storageRoot) {
+    _store = store;
+    _storageRoot = storageRoot;
+}
+function ensureInit() {
+    if (!_store || !_storageRoot) {
+        throw new Error("Agent file API not initialized — call initAgentFileApi first");
+    }
+    return { store: _store, storageRoot: _storageRoot };
+}
+// ── Agent API functions ─────────────────────────────────────────────────────
+/**
+ * Create a file from an agent task.
+ * Writes content to storage/generated/<year>/<month>/ and registers it.
+ */
+export async function agentCreateFile(opts) {
+    // Deferred import to avoid circular dependency
+    const { FileManager } = await import("./manager.js");
+    const manager = FileManager.getInstance();
+    if (!manager) {
+        return { ok: false, message: "FileManager not initialized" };
+    }
+    try {
+        const result = await manager.upload({
+            buffer: opts.content,
+            originalName: opts.name,
+            mimeType: opts.mimeType,
+            category: opts.category ?? "report",
+            origin: "agent",
+            taskId: opts.taskId,
+            tags: opts.tags,
+            actor: opts.taskId,
+        });
+        if (!result.ok)
+            return { ok: false, message: result.message };
+        log.info("agent created file", { taskId: opts.taskId, fileId: result.file?.id, name: opts.name });
+        return { ok: true, file: result.file, message: "File created" };
+    }
+    catch (err) {
+        log.error("agent file creation failed", { taskId: opts.taskId, error: err.message });
+        return { ok: false, message: `Failed: ${err.message}` };
+    }
+}
+/**
+ * Read a file's contents by ID.
+ */
+export async function agentReadFile(fileId) {
+    const { store, storageRoot } = ensureInit();
+    try {
+        const entry = await store.get(fileId);
+        if (!entry)
+            return { ok: false, message: `File not found: ${fileId}` };
+        if (entry.visibility === "private")
+            return { ok: false, message: "File is private" };
+        const filePath = join(storageRoot, entry.storagePath);
+        const data = await readFile(filePath);
+        await store.logEvent(fileId, "downloaded", "agent");
+        return { ok: true, data, message: "OK" };
+    }
+    catch (err) {
+        return { ok: false, message: `Read failed: ${err.message}` };
+    }
+}
+/**
+ * List files matching a filter.
+ */
+export async function agentListFiles(filter) {
+    const { store } = ensureInit();
+    try {
+        const files = await store.list(filter);
+        // Agents can only see files with "agents" or "shared" visibility
+        const visible = files.filter((f) => f.visibility === "agents" || f.visibility === "shared");
+        return { ok: true, files: visible, message: `Found ${visible.length} files` };
+    }
+    catch (err) {
+        return { ok: false, message: `List failed: ${err.message}` };
+    }
+}
+/**
+ * Format file references for injection into agent prompts.
+ * Returns a markdown section listing available files.
+ */
+export async function formatFilesForContext(taskId, limit) {
+    const { store } = ensureInit();
+    try {
+        const filter = { limit: limit ?? 10 };
+        if (taskId)
+            filter.taskId = taskId;
+        const files = await store.list(filter);
+        const visible = files.filter((f) => f.visibility === "agents" || f.visibility === "shared");
+        if (visible.length === 0)
+            return "";
+        const lines = visible.map((f) => {
+            const size = formatBytes(f.sizeBytes);
+            return `- ${f.id}: "${f.name}" (${f.category}, ${size})`;
+        });
+        return `## Available files\nYou can read files using their ID. Relevant files:\n${lines.join("\n")}`;
+    }
+    catch {
+        return "";
+    }
+}
+function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+//# sourceMappingURL=agent-api.js.map

package/dist/files/agent-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-api.js","sourceRoot":"","sources":["../../src/files/agent-api.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE5C,8EAA8E;AAE9E,IAAI,MAAM,GAAqB,IAAI,CAAC;AACpC,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgB,EAAE,WAAmB;IACpE,MAAM,GAAG,KAAK,CAAC;IACf,YAAY,GAAG,WAAW,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACtD,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAOrC;IACC,+CAA+C;IAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;YACnC,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAE9D,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc;IAChD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAErF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAkB;IACrD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,iEAAiE;QACjE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,OAAO,CAAC,MAAM,QAAQ,EAAE,CAAC;IAChF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAe,EACf,KAAc;IAEd,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAEnC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;QAE5F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,KAAK,IAAI,GAAG,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,OAAO,2EAA2E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACpD,CAAC"}

package/dist/files/compress.d.ts

@@ -0,0 +1,20 @@
+/**
+ * File compression and thumbnail generation — DASH-65.
+ * Uses Node zlib for text compression. Image optimization deferred
+ * until sharp dependency is added (see spec open question #1).
+ * Never throws — returns CompressionResult or null.
+ */
+import type { CompressionResult } from "./types.js";
+/**
+ * Compress a file based on its MIME type.
+ * Returns null if no compression was needed or applicable.
+ */
+export declare function compressFile(storagePath: string, mimeType: string): Promise<CompressionResult | null>;
+/**
+ * Generate a thumbnail for a file.
+ * Currently a no-op placeholder — requires sharp for images and
+ * a PDF renderer for document first-page previews.
+ * Returns the thumbnail path if generated, null otherwise.
+ */
+export declare function generateThumbnail(storagePath: string, mimeType: string, thumbnailDir: string, fileId: string): Promise<string | null>;
+//# sourceMappingURL=compress.d.ts.map

package/dist/files/compress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compress.d.ts","sourceRoot":"","sources":["../../src/files/compress.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAuCpD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAkBnC;AAID;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAcxB"}

package/dist/files/compress.js

@@ -0,0 +1,83 @@
+/**
+ * File compression and thumbnail generation — DASH-65.
+ * Uses Node zlib for text compression. Image optimization deferred
+ * until sharp dependency is added (see spec open question #1).
+ * Never throws — returns CompressionResult or null.
+ */
+import { stat } from "node:fs/promises";
+import { createGzip } from "node:zlib";
+import { pipeline } from "node:stream/promises";
+import { createReadStream, createWriteStream } from "node:fs";
+import { createLogger } from "../utils/logger.js";
+const log = createLogger("files.compress");
+const TEXT_COMPRESS_THRESHOLD = 100 * 1024; // 100 KB
+// ── Text compression (gzip) ─────────────────────────────────────────────────
+/**
+ * Gzip a file if it's text-based and exceeds the threshold.
+ * Creates a .gz companion file alongside the original.
+ */
+async function compressText(filePath) {
+    try {
+        const fileStat = await stat(filePath);
+        if (fileStat.size < TEXT_COMPRESS_THRESHOLD)
+            return null;
+        const gzPath = filePath + ".gz";
+        const gzip = createGzip({ level: 6 });
+        await pipeline(createReadStream(filePath), gzip, createWriteStream(gzPath));
+        const gzStat = await stat(gzPath);
+        const saved = Math.round((1 - gzStat.size / fileStat.size) * 100);
+        log.info("text file compressed", { path: filePath, saved: `${saved}%` });
+        return {
+            originalBytes: fileStat.size,
+            compressedBytes: gzStat.size,
+            saved,
+            action: "gzip-text",
+        };
+    }
+    catch (err) {
+        log.warn("text compression failed", { path: filePath, error: err.message });
+        return null;
+    }
+}
+// ── Main compression entry point ────────────────────────────────────────────
+/**
+ * Compress a file based on its MIME type.
+ * Returns null if no compression was needed or applicable.
+ */
+export async function compressFile(storagePath, mimeType) {
+    const mimeBase = mimeType.split("/")[0];
+    // Text > 100 KB: gzip alongside original
+    if (mimeBase === "text" || mimeType === "application/json" || mimeType === "application/x-yaml") {
+        return compressText(storagePath);
+    }
+    // PNG/JPEG: would use sharp for optimization.
+    // Deferred until sharp is added as a dependency.
+    // For now, log that optimization was skipped.
+    if (mimeType === "image/png" || mimeType === "image/jpeg") {
+        log.debug("image optimization skipped — sharp not installed", { path: storagePath, mime: mimeType });
+        return null;
+    }
+    // WebP, PDF, DOCX/XLSX: no-op (already compressed or risky)
+    return null;
+}
+// ── Thumbnail generation (placeholder) ──────────────────────────────────────
+/**
+ * Generate a thumbnail for a file.
+ * Currently a no-op placeholder — requires sharp for images and
+ * a PDF renderer for document first-page previews.
+ * Returns the thumbnail path if generated, null otherwise.
+ */
+export async function generateThumbnail(storagePath, mimeType, thumbnailDir, fileId) {
+    // Image thumbnails would use sharp to resize to 400px wide WebP
+    // PDF thumbnails would render the first page
+    // Both require sharp as a dependency
+    const mimeBase = mimeType.split("/")[0];
+    if (mimeBase === "image" || mimeType === "application/pdf") {
+        log.debug("thumbnail generation skipped — sharp not installed", {
+            fileId,
+            mime: mimeType,
+        });
+    }
+    return null;
+}
+//# sourceMappingURL=compress.js.map