Module storage 

Storage layer: SQLite-backed object store and file store. Port of Go’s pkg/mstore and pkg/filestore.

Re-exports

pub use agent_bundles::agent_picked_bundles;

pub use agent_bundles::format_agent_bundle_block;

pub use agent_bundles::join_startup_blocks;

pub use agent_native_memory_versions::NativeMemoryVersion;

pub use agent_native_memory_versions::NativeMemoryVersionSummary;

pub use bundle_versions::BundleVersion;

pub use bundle_versions::BundleVersionSummary;

pub use agents::AgentDefinition;

pub use agents::InstanceUpdate;

pub use content::AgentContent;

pub use error::StoreError;

pub use history::AgentHistory;

pub use mcp_servers::McpServer;

pub use mcp_servers::McpServerReach;

pub use bundles::format_global_bundle_block;

pub use bundles::global_bundle_sections;

pub use bundles::BundleReseedOutcome;

pub use bundles::GlobalMemorySection;

pub use skills::AgentSkill;

pub use skills::Skill;

Modules

agent_activity_summaries

On-demand, once-per-definition activity summary — see db_agent_activity_summaries in migrations.rs (OBJECT_SCHEMA_VERSION v27) and docs/reports/REPORT_AGENT_PICKER_FIELD_ORDER_SORT_AND_DATA_GAPS_AUDIT_2026_08_24.md §5a.

agent_bundles

An agent’s Bundles list: the bundles picked for it, in order (SPEC_RENAME_KNOWLEDGE_TO_MEMORY_2026_10_06.md §3.6).

agent_credentials

Per-agent M2M Cognito credential for muxbus Tier-4 credential binding. See db_agent_credentials in migrations.rs (SHARED_STORE_SCHEMA_VERSION v4). The relay side is designed in the private cloud repo.

agent_groups

Saved fleet-control target groups — see db_agent_groups in migrations.rs (OBJECT_SCHEMA_VERSION v24) and docs/specs/SPEC_MULTI_AGENT_FLEET_CONTROL_2026_08_20.md.

agent_jekt_keys

Per-agent HMAC-SHA256 signing key for host-tier jekt sender verification. See db_agent_jekt_keys in migrations.rs (OBJECT_SCHEMA_VERSION v18) and docs/specs/SPEC_JEKT_TRUST_LAYER_COMPLETION_2026_08_13.md §2.2.

agent_lan_keys

Per-agent Ed25519 keypair for LAN-tier jekt sender verification. See db_agent_lan_keys in migrations.rs (OBJECT_SCHEMA_VERSION v19) and docs/specs/SPEC_JEKT_LAN_TIER_SIGNING_2026_08_15.md §2.1.

agent_native_memory

Durable, location-consistent mirror of each agent’s native (Claude Code) memory files. See db_agent_native_memory in migrations.rs (SHARED_STORE_SCHEMA_VERSION v6 / OBJECT_SCHEMA_VERSION v14) and docs/specs/SPEC_NATIVE_MEMORY_DURABLE_SYNC_2026_08_07.md for the full design.

agent_native_memory_versions

Append-only version history for native memory content. See db_agent_native_memory_versions in migrations.rs (SHARED_STORE_SCHEMA_VERSION v8 / OBJECT_SCHEMA_VERSION v24 / IDENTITY_STORE_SCHEMA_VERSION v3) and docs/specs/SPEC_MEMORY_VERSION_CONTROL_AND_ARMORY_AUDIT_2026_08_19.md for the full design.

agent_tokens

Per-agent local identity token, keyed by the agent’s UID (db_agents.id).

agent_uid_keys

Identity M4d-2: each agent’s LAN and WAN signing keypairs filed under its UID (db_agents.id), beside the name-keyed tables they are copied from (SPEC_AGENT_IDENTITY_CARRIED_NOT_DERIVED_2026_09_23.md §6.5.10).

agent_wan_keys

Per-agent Ed25519 keypair for general agent-to-agent WAN-tier jekt signing. See db_agent_wan_keys in migrations.rs (OBJECT_SCHEMA_VERSION v36).

agents

Agent subsystem — definitions, instances, and their lifecycle CRUD.

agents_consolidate

Phase 3a — one-shot backfill from db_agent_definitions + db_agent_instances into the new consolidated db_agents table.

background_tasks

Durable registry of declared long-running (run_in_background: true) tasks attached to a block. See db_background_tasks in migrations.rs (OBJECT_SCHEMA_VERSION v20) and docs/status/STATUS_ATTACHED_TASK_AXIS_AND_DEV_LOOP_2026_08_15.md.

bundle_versions

Append-only version history for Global Memory entry content — mirrors agent_native_memory_versions.rs’s shape exactly, adapted for a single bundle_id key instead of that table’s composite (agent_id, filename) (a Bundle’s identity is already a single id). See docs/specs/SPEC_AGENT_FACING_GLOBAL_MEMORY_API_2026_09_15.md Phase 0 — Global Memory (db_bundles) previously had no audit trail at all, only updated_at; this exists specifically because Global Memory is about to gain a write path an agent, not just a human in Memory, can reach.

bundles

Bundles — the agent’s personality and capability stack (provider, model, instructions, context files, MCP servers, skills).

content

Agent-content blobs — per-agent key/value content storage (e.g. the “instructions” panel content).

conversation_trust_grants

Allowlist for a responding agent’s conversation_visibility: trusted_peers mode. See db_conversation_trust_grants in migrations.rs (OBJECT_SCHEMA_VERSION v26) and docs/specs/SPEC_MUXSPECT_CROSS_TIER_CONVERSATION_VISIBILITY_2026_08_21.md Phase B.

cron

Persistent cron job storage — CRUD methods on db_cron_jobs in the global shared store. See docs/specs/SPEC_CRON_LOOP_ROBUSTNESS_2026_06_25.md.

def_registry_mirror

Global agent-definition registry mirror.

error

Error types for the storage layer.

filestore

FileStore: file storage with write-through cache + background flusher. Port of Go’s pkg/filestore/blockstore.go, blockstore_cache.go, blockstore_dbops.go.

history

Agent session history — append-only per-agent entries with date-bucket + LIKE search.

identities

Identity subsystem — accounts and the direct junction that ties them to agents.

jekt_held

Jekts held for an absent agent — SPEC_DURABLE_JEKT_DELIVERY_2026_09_24.md Phase 1. A message to a known agent of this channel that no delivery tier could take is kept here for up to 24 h and replayed when the agent registers. The trust verdicts it was accepted with are explicit columns: on InjectionRequest they are skip_deserializing, so they would not survive a JSON round-trip.

lan_peer_pubkey_pins

Trust-on-first-use pin of a REMOTE agent_id’s LAN public key. See db_lan_peer_pubkey_pins in migrations.rs (OBJECT_SCHEMA_VERSION v20) and docs/specs/SPEC_JEKT_LAN_TIER_SIGNING_2026_08_15.md §2.2.

lan_peer_uid_pins

Trust-on-first-use pin of a REMOTE agent’s UID key, per (name, UID) (identity M4d-6, SPEC_AGENT_IDENTITY_CARRIED_NOT_DERIVED_2026_09_23.md §6.5.10). The LAN v2 counterpart of lan_peer_pubkey_pins.rs, and set only after that name pin matched: UIDs are public, so a pin keyed by UID alone could be squatted by a peer answering for its own name.

managed

The “managed primitive” storage shape shared by standalone Skills and MCP Servers (v1 composable model, SPEC_V1_MCP_SKILLS_PRIMITIVES_2026_06_30.md; bundle-level refs per SPEC_BUNDLE_AS_CONTAINER_V2_2026_08_17.md).

mcp_servers

Standalone MCP Server primitives (v1 composable model).

migrations

SQL schema setup for Store, FileStore, and the saga log.

muxbus

project_instructions

Tracking for what an agent reads as project instructions.

registry_mirror

Cross-version named-agent registry mirror.

skills

Agent skills — reusable capability records attached to an agent definition.

snapshot

Pre-migration snapshots — Increment B.2 lean cut from docs/specs/SPEC_DATA_CHANNELS_2026_05_24.md §3.4.

store

Store: generic OID-based CRUD for StoreObj types. Port of Go’s pkg/mstore/mstore_dbops.go + mstore_dbsetup.go.

viewer_devices

Paired devices: the viewer grants a device receives at pairing, and each agent’s “hide from paired devices” flag. See db_viewer_devices and db_agents.hide_from_devices in migrations.rs (OBJECT_SCHEMA_VERSION v43) and backend::viewer.

wan_identity

The channel-wide WAN identity store, <channel dir>/wan-identity/wan.db (SPEC_WAN_JEKT_VERIFICATION_2026_09_24.md §2.2, step D1).

widget_storage

A widget package’s own key-value store, the storage permission (docs/specs/SPEC_USER_WIDGETS_AND_WIDGET_API_2026_10_09.md §6.3): per package, not per pane, values as JSON text. The limits are the caller’s (backend/widget_access.rs); this module only counts bytes.

work_claims

Work claims: an agent saying “I’m working on this” about a path, branch or topic, so others see it in WhoIsWorkingOn and in overlap notes (docs/specs/SPEC_AGENT_OVERLAP_AWARENESS_2026_10_10.md §3.4).

work_queue

Muxqueue — the universal agent work queue.