feat(storage): replay + ring buffer (PR3 of 4)

crates/bubbaloop/Cargo.toml

@@ -87,6 +87,26 @@ toml = "0.8"
 # Camera vision: base64 for encoding grab_frame JPEG responses
 base64 = "0.22"
 
+# Storage: integrity hashing + secret zeroization + async backend trait
+sha2 = "0.10"
+zeroize = { version = "1", features = ["derive"] }
+async-trait = "0.1"
+# Storage: MCAP container read/write (replay + ring-buffer). Matches rosbag2's
+# on-disk format; zstd compression for chunks.
+mcap = "0.24"
+# Storage: S3-compatible backend (R2/AWS/GCS/MinIO), behind the optional `s3`
+# feature so default builds stay lean. Routed through rustls+ring (no aws-lc /
+# cmake); behavior-version is set explicitly in code.
+aws-sdk-s3 = { version = "1", default-features = false, features = [
+    "rt-tokio",
+    "behavior-version-latest",
+], optional = true }
+aws-smithy-http-client = { version = "1", default-features = false, features = [
+    "rustls-ring",
+], optional = true }
+aws-smithy-types = { version = "1", optional = true }
+aws-smithy-runtime-api = { version = "1", optional = true }
+
 # TUI for agent chat REPL
 ratatui = { version = "0.29", default-features = false, features = ["crossterm"] }
 crossterm = { version = "0.28", features = ["event-stream"] }
@@ -102,6 +122,14 @@ tokio-util = { version = "0.7", default-features = true }
 [features]
 default = []
 dashboard = ["dep:rust-embed", "dep:mime_guess", "dep:tokio-tungstenite", "axum/ws"]
+# S3-compatible storage backend (R2/AWS/GCS/MinIO). Optional because aws-sdk-s3
+# is a large dependency tree; enable for cloud uploads.
+s3 = [
+    "dep:aws-sdk-s3",
+    "dep:aws-smithy-http-client",
+    "dep:aws-smithy-types",
+    "dep:aws-smithy-runtime-api",
+]
 test-harness = ["rmcp/client"]
 
 [dev-dependencies]

crates/bubbaloop/src/bin/bubbaloop.rs

@@ -21,7 +21,7 @@ use argh::FromArgs;
 use bubbaloop::cli::launch::LaunchCommand;
 use bubbaloop::cli::{
     AgentCommand, DaemonCommand, DataflowCommand, DebugCommand, LoginCommand, LogoutCommand,
-    MarketplaceCommand, NodeCommand, UpCommand,
+    MarketplaceCommand, NodeCommand, StorageCommand, UpCommand,
 };
 
 /// Bubbaloop - AI-native orchestration for Physical AI
@@ -51,6 +51,7 @@ enum Command {
     Debug(DebugCommand),
     Up(UpCommand),
     Dataflow(DataflowCommand),
+    Storage(StorageCommand),
     InitTls(InitTlsArgs),
 }
 
@@ -437,6 +438,11 @@ async fn main() -> Result<(), Box<dyn std::error::Error>> {
             init_logger("warn,zenoh=warn");
             cmd.run().await?;
         }
+        Some(Command::Storage(cmd)) => {
+            // Pure-local data-plane verbs — no Zenoh/daemon needed.
+            init_logger("info");
+            cmd.run().await?;
+        }
         Some(Command::InitTls(args)) => {
             let cert_dir = args.output_dir.unwrap_or_else(|| {
                 let home =

crates/bubbaloop/src/cli/mod.rs

@@ -13,6 +13,7 @@ pub mod login;
 pub mod marketplace;
 pub mod node;
 pub mod status;
+pub mod storage;
 pub mod system_utils;
 pub mod up;
 pub mod zenoh_session;
@@ -24,4 +25,5 @@ pub use debug::{DebugCommand, DebugError};
 pub use login::{LoginCommand, LogoutCommand};
 pub use marketplace::MarketplaceCommand;
 pub use node::{NodeCommand, NodeError};
+pub use storage::StorageCommand;
 pub use up::UpCommand;