@spinabot/brigade 0.1.2 → 1.0.1

package/dist/storage/local/blob-store.js

@@ -0,0 +1,87 @@
+// src/storage/local/blob-store.ts
+//
+// LocalBlobStore — content-addressed byte store under
+// `<stateDir>/blobs/<sha256[:2]>/<sha256[2:]>` (sharded so a single dir
+// doesn't accumulate tens of thousands of entries on heavy media use).
+// Implements `BlobStore`.
+//
+// In filesystem mode this is a fresh helper layer: there's no existing
+// shared blob storage today (channels write media into their own dirs, org
+// writes chart PNGs into its own cache). PR8 + PR13 use this for backing
+// content-addressed storage when they need it; primitive code that wants
+// "give me bytes for this hash" calls through here.
+//
+// Locator format: `sha256:<hex>` so callers carry an opaque string that's
+// portable across modes (convex mode rewrites the same locator over a
+// Convex File Storage id internally).
+import * as fs from "node:fs";
+import * as fsAsync from "node:fs/promises";
+import * as path from "node:path";
+import { createHash } from "node:crypto";
+import { resolveStateDir } from "../../config/paths.js";
+function resolveBlobsRoot() {
+    return path.join(resolveStateDir(), "blobs");
+}
+function pathForHash(sha256) {
+    // Defensive: ensure we never traverse outside the blobs dir.
+    if (!/^[0-9a-f]{64}$/i.test(sha256)) {
+        throw new Error(`LocalBlobStore: invalid sha256 "${sha256}" (must be 64 lowercase hex chars)`);
+    }
+    const lower = sha256.toLowerCase();
+    return path.join(resolveBlobsRoot(), lower.slice(0, 2), lower.slice(2));
+}
+export class LocalBlobStore {
+    _stateDir;
+    constructor(_stateDir) {
+        this._stateDir = _stateDir;
+    }
+    async put(bytes, _opts) {
+        const sha = createHash("sha256").update(bytes).digest("hex");
+        const target = pathForHash(sha);
+        // Idempotent — if the content-addressed file already exists, skip the
+        // write. sha256 collisions don't happen in practice; same hash means
+        // same bytes by construction.
+        if (fs.existsSync(target)) {
+            return { sha256: sha, url: `sha256:${sha}` };
+        }
+        await fsAsync.mkdir(path.dirname(target), { recursive: true });
+        const tmp = `${target}.tmp.${process.pid}.${Date.now().toString(36)}`;
+        await fsAsync.writeFile(tmp, Buffer.from(bytes));
+        await fsAsync.rename(tmp, target);
+        // File-permissions hardening on POSIX — blobs may carry private media,
+        // so the same 0o600 discipline the auth files use applies here.
+        if (process.platform !== "win32") {
+            try {
+                await fsAsync.chmod(target, 0o600);
+            }
+            catch {
+                // Best-effort — some filesystems (FAT32, network mounts) reject chmod.
+            }
+        }
+        return { sha256: sha, url: `sha256:${sha}` };
+    }
+    async get(sha256) {
+        const target = pathForHash(sha256);
+        try {
+            const bytes = await fsAsync.readFile(target);
+            return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return null;
+            throw err;
+        }
+    }
+    async delete(sha256) {
+        const target = pathForHash(sha256);
+        try {
+            await fsAsync.unlink(target);
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return;
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=blob-store.js.map

package/dist/storage/local/blob-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.js","sourceRoot":"","sources":["../../../src/storage/local/blob-store.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,sDAAsD;AACtD,wEAAwE;AACxE,uEAAuE;AACvE,0BAA0B;AAC1B,EAAE;AACF,uEAAuE;AACvE,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AACzE,oDAAoD;AACpD,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,sCAAsC;AAEtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIxD,SAAS,gBAAgB;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IAClC,6DAA6D;IAC7D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,oCAAoC,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,cAAc;IACG;IAA7B,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CACR,KAAiB,EACjB,KAAgC;QAEhC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,sEAAsE;QACtE,qEAAqE;QACrE,8BAA8B;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,uEAAuE;QACvE,gEAAgE;QAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACR,uEAAuE;YACxE,CAAC;QACF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7C,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YAC7D,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;CACD"}

package/dist/storage/local/channel-store.d.ts

@@ -0,0 +1,107 @@
+import type { ChannelStore, PairingRequest, WhatsAppAuthHandle } from "../store.js";
+export declare class LocalChannelStore implements ChannelStore {
+    private readonly _stateDir;
+    private readonly blobs;
+    constructor(_stateDir: string);
+    listAllowedSenders(args: {
+        channelId: string;
+        accountId?: string | null;
+        group?: boolean;
+    }): Promise<string[]>;
+    addAllowedSender(args: {
+        channelId: string;
+        accountId?: string | null;
+        senderId: string;
+        group?: boolean;
+    }): Promise<boolean>;
+    removeAllowedSender(args: {
+        channelId: string;
+        accountId?: string | null;
+        senderId: string;
+        group?: boolean;
+    }): Promise<boolean>;
+    /** Local mode never hydrates an access cache — the filesystem functions
+     *  read their JSON files directly. Empty keeps boot uniform. */
+    listAllAccessRows(): Promise<Array<{
+        channelId: string;
+        accountId: string;
+        kind: "allow-from" | "group-allow-from" | "pairing";
+        senderId: string;
+        senderName?: string;
+        code?: string;
+        createdAt: string;
+        lastSeenAt: string;
+    }>>;
+    /** No-op locally — the access-control module already wrote the JSON file
+     *  before the dispatcher would ever consider reconciling. */
+    reconcileAccessRows(_args: {
+        channelId: string;
+        accountId?: string | null;
+        kind: "allow-from" | "group-allow-from" | "pairing";
+        rows: Array<{
+            senderId: string;
+            senderName?: string;
+            code?: string;
+            createdAt: string;
+            lastSeenAt: string;
+        }>;
+    }): Promise<void>;
+    loadWhatsAppAuth(_accountId: string): Promise<{
+        creds: string | null;
+        keys: Array<{
+            keyType: string;
+            keyId: string;
+            valueJson: string;
+        }>;
+    }>;
+    writeWhatsAppCreds(_accountId: string, _credsJson: string): Promise<void>;
+    writeWhatsAppKeys(_accountId: string, _entries: Array<{
+        keyType: string;
+        keyId: string;
+        valueJson: string | null;
+    }>): Promise<void>;
+    clearWhatsAppAuth(_accountId: string): Promise<void>;
+    listPendingPairings(args: {
+        channelId: string;
+        accountId?: string | null;
+    }): Promise<PairingRequest[]>;
+    upsertPairingRequest(args: {
+        channelId: string;
+        accountId?: string | null;
+        senderId: string;
+        senderName?: string;
+    }): Promise<{
+        code: string;
+        isNew: boolean;
+    }>;
+    approvePairing(args: {
+        channelId: string;
+        accountId?: string | null;
+        code: string;
+    }): Promise<PairingRequest | null>;
+    revokePairing(args: {
+        channelId: string;
+        accountId?: string | null;
+        code: string;
+    }): Promise<boolean>;
+    openWhatsAppAuthDir(args: {
+        accountId: string;
+    }): Promise<WhatsAppAuthHandle>;
+    readLidReverseMapping(_args: {
+        accountId: string;
+        lidDigits: string;
+    }): Promise<string | null>;
+    putInboundMedia(args: {
+        channelId: string;
+        accountId?: string;
+        messageId: string;
+        index: number;
+        mimeType: string;
+        bytes: Buffer;
+    }): Promise<{
+        ref: string;
+        size: number;
+    }>;
+    eraseAccount(channelId: string, _accountId: string): Promise<void>;
+}
+//# sourceMappingURL=channel-store.d.ts.map

package/dist/storage/local/channel-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-store.d.ts","sourceRoot":"","sources":["../../../src/storage/local/channel-store.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EACX,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,MAAM,aAAa,CAAC;AAErB,qBAAa,iBAAkB,YAAW,YAAY;IAGzC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAFtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;gBAEV,SAAS,EAAE,MAAM;IAWxC,kBAAkB,CAAC,IAAI,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAOf,gBAAgB,CAAC,IAAI,EAAE;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAOd,mBAAmB,CAAC,IAAI,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAOpB;oEACgE;IAC1D,iBAAiB,IAAI,OAAO,CACjC,KAAK,CAAC;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,SAAS,CAAC;QACpD,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC,CACF;IAID;iEAC6D;IACvD,mBAAmB,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,SAAS,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC;YACX,QAAQ,EAAE,MAAM,CAAC;YACjB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,EAAE,MAAM,CAAC;YAClB,UAAU,EAAE,MAAM,CAAC;SACnB,CAAC,CAAC;KACH,GAAG,OAAO,CAAC,IAAI,CAAC;IASX,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QACnD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACnE,CAAC;IAMI,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMzE,iBAAiB,CACtB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,GAC3E,OAAO,CAAC,IAAI,CAAC;IAMV,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpD,mBAAmB,CAAC,IAAI,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAKvB,oBAAoB,CAAC,IAAI,EAAE;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IASvC,cAAc,CAAC,IAAI,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAK5B,aAAa,CAAC,IAAI,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,OAAO,CAAC;IAQd,mBAAmB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAS7E,qBAAqB,CAAC,KAAK,EAAE;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAYpB,eAAe,CAAC,IAAI,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBpC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQxE"}

package/dist/storage/local/channel-store.js

@@ -0,0 +1,147 @@
+// src/storage/local/channel-store.ts
+//
+// LocalChannelStore — filesystem-mode wrapper around
+// `agents/channels/access-control/store.ts` + `agents/channels/whatsapp/*`.
+// Implements `ChannelStore`.
+//
+// WhatsApp Baileys auth: FILESYSTEM mode uses the multi-file auth dir
+// (real directory with creds.json + signal keys). CONVEX mode does NOT —
+// auth rides the whatsappAuthCreds/whatsappAuthKeys tables via
+// useConvexAuthState (the old both-modes carve-out is retired). `openWhatsApp-
+// AuthDir` returns a handle carrying the resolved path so callers
+// (the Baileys adapter) can keep using its FS-native multi-file auth API.
+//
+// PR13 scope:
+//   ✓ allow-from / group-allow-from CRUD     — wraps access-control/store.ts
+//   ✓ pairing CRUD                            — wraps access-control/store.ts
+//   ✓ openWhatsAppAuthDir                     — wraps account-config.ts
+//   ✓ readLidReverseMapping                   — DEFERRED (no upstream API)
+//   ✓ putInboundMedia                         — content-addressed via BlobStore
+//   ✓ eraseAccount                            — wraps eraseAccessState
+import { addAllowFrom, addGroupAllowFrom, approvePairingCode, eraseAccessState, readAllowFrom, readGroupAllowFrom, readPendingPairings, removeAllowFrom, removeGroupAllowFrom, revokePairingCode, upsertPairingRequest, } from "../../agents/channels/access-control/store.js";
+import { resolveWhatsAppAccountAuthDir } from "../../agents/channels/whatsapp/account-config.js";
+import { LocalBlobStore } from "./blob-store.js";
+import { NotImplementedYet } from "../store.js";
+export class LocalChannelStore {
+    _stateDir;
+    blobs;
+    constructor(_stateDir) {
+        this._stateDir = _stateDir;
+        // Channel media is content-addressed via the same blob store
+        // other subsystems (org chart cache, etc.) use. Keeps `<stateDir>/blobs/`
+        // the single home for arbitrary bytes regardless of producer.
+        this.blobs = new LocalBlobStore(_stateDir);
+    }
+    // ---------------------------------------------------------------------
+    // allow-from / group-allow-from
+    // ---------------------------------------------------------------------
+    async listAllowedSenders(args) {
+        const acct = args.accountId ?? null;
+        return args.group
+            ? readGroupAllowFrom(args.channelId, acct)
+            : readAllowFrom(args.channelId, acct);
+    }
+    async addAllowedSender(args) {
+        const acct = args.accountId ?? null;
+        return args.group
+            ? addGroupAllowFrom(args.channelId, args.senderId, acct)
+            : addAllowFrom(args.channelId, args.senderId, acct);
+    }
+    async removeAllowedSender(args) {
+        const acct = args.accountId ?? null;
+        return args.group
+            ? removeGroupAllowFrom(args.channelId, args.senderId, acct)
+            : removeAllowFrom(args.channelId, args.senderId, acct);
+    }
+    /** Local mode never hydrates an access cache — the filesystem functions
+     *  read their JSON files directly. Empty keeps boot uniform. */
+    async listAllAccessRows() {
+        return [];
+    }
+    /** No-op locally — the access-control module already wrote the JSON file
+     *  before the dispatcher would ever consider reconciling. */
+    async reconcileAccessRows(_args) {
+        // Filesystem mode persists via the access-control module itself.
+    }
+    // ---------------------------------------------------------------------
+    // Baileys auth — filesystem mode uses useMultiFileAuthState against the
+    // auth dir; these store methods only exist for the convex adapter.
+    // ---------------------------------------------------------------------
+    async loadWhatsAppAuth(_accountId) {
+        throw new NotImplementedYet("channels.loadWhatsAppAuth (filesystem mode uses useMultiFileAuthState)");
+    }
+    async writeWhatsAppCreds(_accountId, _credsJson) {
+        throw new NotImplementedYet("channels.writeWhatsAppCreds (filesystem mode uses useMultiFileAuthState)");
+    }
+    async writeWhatsAppKeys(_accountId, _entries) {
+        throw new NotImplementedYet("channels.writeWhatsAppKeys (filesystem mode uses useMultiFileAuthState)");
+    }
+    async clearWhatsAppAuth(_accountId) {
+        throw new NotImplementedYet("channels.clearWhatsAppAuth (filesystem mode uses useMultiFileAuthState)");
+    }
+    // ---------------------------------------------------------------------
+    // Pairing
+    // ---------------------------------------------------------------------
+    async listPendingPairings(args) {
+        const result = readPendingPairings(args.channelId, args.accountId ?? null);
+        return result;
+    }
+    async upsertPairingRequest(args) {
+        return upsertPairingRequest({
+            channelId: args.channelId,
+            ...(args.accountId !== undefined ? { accountId: args.accountId } : {}),
+            senderId: args.senderId,
+            ...(args.senderName !== undefined ? { senderName: args.senderName } : {}),
+        });
+    }
+    async approvePairing(args) {
+        const result = approvePairingCode(args.channelId, args.code, args.accountId ?? null);
+        return result;
+    }
+    async revokePairing(args) {
+        return revokePairingCode(args.channelId, args.code, args.accountId ?? null);
+    }
+    // ---------------------------------------------------------------------
+    // WhatsApp Baileys auth dir (STAYS LOCAL in both modes)
+    // ---------------------------------------------------------------------
+    async openWhatsAppAuthDir(args) {
+        // Baileys uses `useMultiFileAuthState(dir)` — needs a real directory.
+        // We surface the resolved path so the adapter can hand it to Baileys
+        // directly. Convex mode reuses the same shape; the auth dir is one of
+        // the five Phase 2 carve-outs that stay on disk regardless of mode.
+        const path = resolveWhatsAppAccountAuthDir(args.accountId);
+        return { path, accountId: args.accountId };
+    }
+    async readLidReverseMapping(_args) {
+        // No public LID-reverse lookup helper today — the Baileys adapter
+        // owns it internally. PR13 stops short of exposing it; PR14 (sessions)
+        // or a follow-up audit will surface the reader when channels need
+        // cross-account translation.
+        throw new NotImplementedYet("channels.readLidReverseMapping (needs Baileys-side reader)");
+    }
+    // ---------------------------------------------------------------------
+    // Inbound media — content-addressed via the shared BlobStore
+    // ---------------------------------------------------------------------
+    async putInboundMedia(args) {
+        // Store the bytes content-addressed so duplicates (forwarded media,
+        // re-sent messages) dedupe automatically. The ref is the BlobStore
+        // locator (`sha256:<hex>`); channel-side metadata (sender, conv,
+        // timestamp) is the caller's responsibility — filesystem mode keeps
+        // metadata in the existing channel state files, convex mode (PR16)
+        // rows it into `channelMediaBlob`.
+        const { sha256, url } = await this.blobs.put(new Uint8Array(args.bytes.buffer, args.bytes.byteOffset, args.bytes.byteLength), { contentType: args.mimeType });
+        // Suppress the unused-warning on sha256 in callsites that don't need
+        // both fields; the destructure is for symmetry with the blob store.
+        void sha256;
+        return { ref: url, size: args.bytes.byteLength };
+    }
+    async eraseAccount(channelId, _accountId) {
+        // `eraseAccessState` clears the channel's allow-from + pairing files.
+        // The Baileys auth dir + media blobs are intentionally LEFT IN PLACE —
+        // the operator can delete those manually if they want a clean wipe,
+        // but `eraseAccount` is a graceful "logout, keep history" operation.
+        // (A full-wipe variant would be a separate `purgeAccount` method.)
+        eraseAccessState(channelId);
+    }
+}
+//# sourceMappingURL=channel-store.js.map

package/dist/storage/local/channel-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-store.js","sourceRoot":"","sources":["../../../src/storage/local/channel-store.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,qDAAqD;AACrD,4EAA4E;AAC5E,6BAA6B;AAC7B,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,+DAA+D;AAC/D,+EAA+E;AAC/E,kEAAkE;AAClE,0EAA0E;AAC1E,EAAE;AACF,cAAc;AACd,6EAA6E;AAC7E,8EAA8E;AAC9E,wEAAwE;AACxE,2EAA2E;AAC3E,gFAAgF;AAChF,uEAAuE;AAEvE,OAAO,EACN,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AAEjG,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOhD,MAAM,OAAO,iBAAiB;IAGA;IAFZ,KAAK,CAAiB;IAEvC,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;QAC7C,6DAA6D;QAC7D,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,wEAAwE;IACxE,gCAAgC;IAChC,wEAAwE;IAExE,KAAK,CAAC,kBAAkB,CAAC,IAIxB;QACA,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK;YAChB,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;YAC1C,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAKtB;QACA,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK;YAChB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;YACxD,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAKzB;QACA,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK;YAChB,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC3D,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED;oEACgE;IAChE,KAAK,CAAC,iBAAiB;QAYtB,OAAO,EAAE,CAAC;IACX,CAAC;IAED;iEAC6D;IAC7D,KAAK,CAAC,mBAAmB,CAAC,KAWzB;QACA,iEAAiE;IAClE,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,wEAAwE;IAExE,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QAIxC,MAAM,IAAI,iBAAiB,CAC1B,wEAAwE,CACxE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,UAAkB,EAAE,UAAkB;QAC9D,MAAM,IAAI,iBAAiB,CAC1B,0EAA0E,CAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,UAAkB,EAClB,QAA6E;QAE7E,MAAM,IAAI,iBAAiB,CAC1B,yEAAyE,CACzE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAkB;QACzC,MAAM,IAAI,iBAAiB,CAC1B,yEAAyE,CACzE,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,UAAU;IACV,wEAAwE;IAExE,KAAK,CAAC,mBAAmB,CAAC,IAGzB;QACA,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QAC3E,OAAO,MAAqC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAK1B;QACA,OAAO,oBAAoB,CAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAIpB;QACA,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QACrF,OAAO,MAA0C,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAInB;QACA,OAAO,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,wDAAwD;IACxD,wEAAwE;IAExE,KAAK,CAAC,mBAAmB,CAAC,IAA2B;QACpD,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,IAAI,GAAG,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAmC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAG3B;QACA,kEAAkE;QAClE,uEAAuE;QACvE,kEAAkE;QAClE,6BAA6B;QAC7B,MAAM,IAAI,iBAAiB,CAAC,4DAA4D,CAAC,CAAC;IAC3F,CAAC;IAED,wEAAwE;IACxE,6DAA6D;IAC7D,wEAAwE;IAExE,KAAK,CAAC,eAAe,CAAC,IAOrB;QACA,oEAAoE;QACpE,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,mEAAmE;QACnE,mCAAmC;QACnC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAC/E,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAC9B,CAAC;QACF,qEAAqE;QACrE,oEAAoE;QACpE,KAAK,MAAM,CAAC;QACZ,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,UAAkB;QACvD,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;CACD"}

package/dist/storage/local/config-store.d.ts

@@ -0,0 +1,23 @@
+import { type BrigadeConfig } from "../../config/io.js";
+import type { ConfigStore, RevToken, Unsub, WriteResult } from "../store.js";
+export declare class LocalConfigStore implements ConfigStore {
+    private readonly _stateDir;
+    constructor(_stateDir: string);
+    read(): Promise<{
+        value: BrigadeConfig;
+        rev: RevToken;
+    }>;
+    write(cfg: BrigadeConfig, opts?: {
+        expectedRev?: RevToken;
+    }): Promise<WriteResult>;
+    mutate(fn: (current: BrigadeConfig) => BrigadeConfig | Promise<BrigadeConfig>): Promise<BrigadeConfig>;
+    subscribe(cb: (cfg: BrigadeConfig, rev: RevToken) => void): Unsub;
+    listBackups(): Promise<Array<{
+        slot: number;
+        sha256: string;
+        mtimeMs: number;
+        bytes: number;
+    }>>;
+    restoreBackup(_slot: number): Promise<BrigadeConfig>;
+}
+//# sourceMappingURL=config-store.d.ts.map

package/dist/storage/local/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../../src/storage/local/config-store.ts"],"names":[],"mappings":"AAaA,OAAO,EACN,KAAK,aAAa,EAIlB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EACL,WAAW,EACX,MAAM,aAAa,CAAC;AAwBrB,qBAAa,gBAAiB,YAAW,WAAW;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM;IAExC,IAAI,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,aAAa,CAAC;QAAC,GAAG,EAAE,QAAQ,CAAA;KAAE,CAAC;IAKxD,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAoBlF,MAAM,CACX,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GACpE,OAAO,CAAC,aAAa,CAAC;IAQzB,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,KAAK,IAAI,GAAG,KAAK;IAgB3D,WAAW,IAAI,OAAO,CAC3B,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CACvE;IAOK,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAK1D"}

package/dist/storage/local/config-store.js

@@ -0,0 +1,98 @@
+// src/storage/local/config-store.ts
+//
+// LocalConfigStore — the filesystem-mode wrapper around `config/io.ts`.
+// Implements `ConfigStore` from `../store.ts`.
+//
+// Behaviour rule (additive Phase-2 discipline): every method calls today's
+// existing functions byte-for-byte. No new write paths, no atomicity changes.
+// The existing locking + .bak rotation + `${VAR}` resolution all keep
+// working unchanged. All 2,154 existing tests pass.
+import { createHash } from "node:crypto";
+import { existsSync, statSync } from "node:fs";
+import { resolveConfigPath } from "../../config/paths.js";
+import { mutateConfigAtomic, readConfigOrInit, writeConfigSafe, } from "../../config/io.js";
+import { watchFile } from "./file-watcher.js";
+/** Build a `RevToken` from a freshly-read file's content + mtime. The hash
+ *  is deterministic from the on-disk bytes, so two readers that observe the
+ *  same file get the same RevToken. */
+function revFromConfig(cfg) {
+    const hash = createHash("sha256");
+    hash.update(JSON.stringify(cfg));
+    try {
+        const cfgPath = resolveConfigPath();
+        if (existsSync(cfgPath)) {
+            const st = statSync(cfgPath);
+            hash.update(":");
+            hash.update(String(st.mtimeMs));
+            hash.update(":");
+            hash.update(String(st.size));
+        }
+    }
+    catch {
+        // Pre-create state — mtime/size unavailable; the content hash alone
+        // is still a stable rev. Fall through.
+    }
+    return hash.digest("hex");
+}
+export class LocalConfigStore {
+    _stateDir;
+    constructor(_stateDir) {
+        this._stateDir = _stateDir;
+    }
+    async read() {
+        const value = readConfigOrInit();
+        return { value, rev: revFromConfig(value) };
+    }
+    async write(cfg, opts) {
+        // Opt-in OCC: when an expectedRev is supplied, refuse to write if the
+        // on-disk file has drifted since the caller's read. Without an
+        // expectedRev, behave as a plain write (the existing config-io path
+        // has its own safe-rotation invariants).
+        if (opts?.expectedRev) {
+            const current = readConfigOrInit();
+            const currentRev = revFromConfig(current);
+            if (currentRev !== opts.expectedRev) {
+                // Pull in ConflictError lazily to avoid an import cycle when
+                // store.ts later re-exports types via this module.
+                const { ConflictError } = await import("../store.js");
+                throw new ConflictError(opts.expectedRev, currentRev);
+            }
+        }
+        writeConfigSafe(cfg);
+        const writtenAt = Date.now();
+        return { rev: revFromConfig(cfg), writtenAt };
+    }
+    async mutate(fn) {
+        // Delegates to the existing serialised read-modify-write path. The
+        // underlying `mutateConfigAtomic` already owns proper-lockfile +
+        // atomic-rename semantics; we just adapt the return value.
+        const next = await mutateConfigAtomic(async (current) => fn(current));
+        return next;
+    }
+    subscribe(cb) {
+        // fs.watch on brigade.json with the standard 500 ms debounce — same
+        // pattern the gateway hot-reload watcher (core/server.ts) uses. On
+        // change we re-read + recompute the rev, then fan out to the caller.
+        // Read failures are swallowed (best-effort listener); a malformed
+        // mid-write file simply skips that callback firing.
+        return watchFile(resolveConfigPath(), () => {
+            try {
+                const value = readConfigOrInit();
+                cb(value, revFromConfig(value));
+            }
+            catch {
+                // Read failed (file mid-write, permissions, etc.) — skip.
+            }
+        });
+    }
+    async listBackups() {
+        // The .bak rotation lives in config/io.ts but isn't exported as a
+        // listing helper today. PR2 scope: keep the surface present and
+        // empty; a real lister lands when `brigade doctor` needs it.
+        return [];
+    }
+    async restoreBackup(_slot) {
+        throw new Error("LocalConfigStore.restoreBackup is not wired yet — restore by hand-copying ~/.brigade/brigade.json.bak.<N> over brigade.json");
+    }
+}
+//# sourceMappingURL=config-store.js.map

package/dist/storage/local/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../../src/storage/local/config-store.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,wEAAwE;AACxE,+CAA+C;AAC/C,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,sEAAsE;AACtE,oDAAoD;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAEN,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,GACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAS9C;;uCAEuC;AACvC,SAAS,aAAa,CAAC,GAAkB;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,oEAAoE;QACpE,uCAAuC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAa,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,gBAAgB;IACC;IAA7B,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,IAAI;QACT,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAkB,EAAE,IAAiC;QAChE,sEAAsE;QACtE,+DAA+D;QAC/D,oEAAoE;QACpE,yCAAyC;QACzC,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrC,6DAA6D;gBAC7D,mDAAmD;gBACnD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBACtD,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACvD,CAAC;QACF,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CACX,EAAsE;QAEtE,mEAAmE;QACnE,iEAAiE;QACjE,2DAA2D;QAC3D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,SAAS,CAAC,EAA+C;QACxD,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,oDAAoD;QACpD,OAAO,SAAS,CAAC,iBAAiB,EAAE,EAAE,GAAG,EAAE;YAC1C,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;gBACjC,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACR,0DAA0D;YAC3D,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW;QAGhB,kEAAkE;QAClE,gEAAgE;QAChE,6DAA6D;QAC7D,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa;QAChC,MAAM,IAAI,KAAK,CACd,6HAA6H,CAC7H,CAAC;IACH,CAAC;CACD"}

package/dist/storage/local/cron-store.d.ts

@@ -0,0 +1,30 @@
+import type { CronJob, CronJobState, CronRunLogEntry, CronStore, ReadCronRunLogOpts, Unsub } from "../store.js";
+export declare class LocalCronStore implements CronStore {
+    private readonly _stateDir;
+    constructor(_stateDir: string);
+    listJobs(filter?: {
+        enabled?: boolean;
+        query?: string;
+        ownerOnly?: boolean;
+    }): Promise<CronJob[]>;
+    getJob(jobId: string): Promise<CronJob | null>;
+    insertJob(job: CronJob): Promise<void>;
+    updateJob(jobId: string, mutate: (job: CronJob) => CronJob): Promise<CronJob>;
+    deleteJob(jobId: string): Promise<boolean>;
+    markJobRunning(jobId: string, runningAtMs: number): Promise<boolean>;
+    recordJobOutcome(jobId: string, patch: {
+        state: Partial<CronJobState>;
+        deleteAfterApply: boolean;
+    }): Promise<CronJob | null>;
+    appendRunLog(entry: CronRunLogEntry): Promise<void>;
+    listRunLog(jobId: string, opts: ReadCronRunLogOpts): Promise<CronRunLogEntry[]>;
+    listIsolatedCronSessions(_agentId: string): Promise<Array<{
+        sessionKey: string;
+        sessionId: string;
+        lastUsedAt: string;
+    }>>;
+    deleteIsolatedCronSession(_agentId: string, _sessionKey: string): Promise<void>;
+    withMutation<T>(work: () => Promise<T>): Promise<T>;
+    subscribe(cb: (jobs: CronJob[]) => void): Unsub;
+}
+//# sourceMappingURL=cron-store.d.ts.map

package/dist/storage/local/cron-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-store.d.ts","sourceRoot":"","sources":["../../../src/storage/local/cron-store.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EACX,OAAO,EACP,YAAY,EACZ,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,KAAK,EACL,MAAM,aAAa,CAAC;AAarB,qBAAa,cAAe,YAAW,SAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM;IAExC,QAAQ,CAAC,MAAM,CAAC,EAAE;QACvB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAyBhB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAM9C,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAYtC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB7E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1C,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBpE,gBAAgB,CACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,GAChE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAmBpB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAU/E,wBAAwB,CAC7B,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAO1E,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/E,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIzD,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,KAAK;CAa/C"}