@absolutejs/voice 0.0.22-beta.223 → 0.0.22-beta.224

package/README.md

@@ -2761,6 +2761,12 @@ app.use(
 				directory: '.voice-runtime/observability-exports',
 				kind: 'file',
 				label: 'Local customer-owned observability archive'
+			},
+			{
+				bucket: process.env.VOICE_OBSERVABILITY_EXPORT_S3_BUCKET,
+				keyPrefix: 'voice/observability-exports',
+				kind: 's3',
+				label: 'S3 customer-owned observability archive'
 			}
 		],
 		artifacts: [
@@ -2798,7 +2804,7 @@ const exportReport = await buildVoiceObservabilityExport({
 });
 ```
 
-The route helper exposes JSON at `/api/voice/observability-export`, an artifact index at `/api/voice/observability-export/artifacts`, per-artifact downloads at `/api/voice/observability-export/artifacts/:artifactId`, delivery at `POST /api/voice/observability-export/deliveries`, Markdown at `/voice/observability-export.md`, and HTML at `/voice/observability-export`. Path-backed artifacts are hashed with SHA-256 by default, include byte size and freshness metadata, and can fail the export when required evidence is missing or stale. File delivery writes `manifest.json`, `artifact-index.json`, and artifact files into a customer-owned archive directory; webhook delivery posts the manifest and artifact index to a buyer-owned collector, SIEM bridge, or warehouse endpoint. Failed trace/audit deliveries fail the export report, pending deliveries warn, and every trace/audit envelope includes the linked operations-record URL when one is configured. This is the primitive to use when customers ask how voice evidence leaves the app without going through a hosted vendor dashboard.
+The route helper exposes JSON at `/api/voice/observability-export`, an artifact index at `/api/voice/observability-export/artifacts`, per-artifact downloads at `/api/voice/observability-export/artifacts/:artifactId`, delivery at `POST /api/voice/observability-export/deliveries`, Markdown at `/voice/observability-export.md`, and HTML at `/voice/observability-export`. Path-backed artifacts are hashed with SHA-256 by default, include byte size and freshness metadata, and can fail the export when required evidence is missing or stale. File delivery writes `manifest.json`, `artifact-index.json`, and artifact files into a customer-owned archive directory; webhook delivery posts the manifest and artifact index to a buyer-owned collector, SIEM bridge, or warehouse endpoint; S3 delivery writes the same manifest, index, and artifact files through Bun's native S3 client. Failed trace/audit deliveries fail the export report, pending deliveries warn, and every trace/audit envelope includes the linked operations-record URL when one is configured. This is the primitive to use when customers ask how voice evidence leaves the app without going through a hosted vendor dashboard.
 
 Pass the same report into production readiness when export health should block deploys:
 

package/dist/index.js

@@ -24988,6 +24988,14 @@ var safeArtifactFileName = (artifact) => {
   const extension = artifact.contentType === "image/png" ? ".png" : artifact.contentType?.includes("markdown") ? ".md" : artifact.contentType?.includes("json") ? ".json" : "";
   return `${artifact.id.replace(/[^a-z0-9_.-]/gi, "-")}${extension}`;
 };
+var normalizeExportS3KeyPrefix = (prefix) => prefix?.trim().replace(/^\/+|\/+$/g, "") ?? "voice/observability-exports";
+var joinS3Key = (...parts) => parts.map((part) => part.trim().replace(/^\/+|\/+$/g, "")).filter(Boolean).join("/");
+var writeS3Object = async (input) => {
+  const file = input.client.file(input.key, input.options);
+  await file.write(input.value, {
+    type: input.contentType
+  });
+};
 var inferContentType = (artifact) => {
   if (artifact.contentType) {
     return artifact.contentType;
@@ -25352,6 +25360,50 @@ var deliverVoiceObservabilityExport = async (options) => {
           target
         };
       }
+      if (destination.kind === "s3") {
+        const keyPrefix = normalizeExportS3KeyPrefix(destination.keyPrefix);
+        const rootKey = joinS3Key(keyPrefix, runId);
+        const client = destination.client ?? new Bun.S3Client(destination);
+        const s3Options = destination;
+        await writeS3Object({
+          client,
+          contentType: "application/json",
+          key: joinS3Key(rootKey, "manifest.json"),
+          options: s3Options,
+          value: manifest
+        });
+        await writeS3Object({
+          client,
+          contentType: "application/json",
+          key: joinS3Key(rootKey, "artifact-index.json"),
+          options: s3Options,
+          value: index
+        });
+        if (destination.includeArtifacts !== false) {
+          for (const artifact of options.report.artifacts) {
+            if (!artifact.path) {
+              continue;
+            }
+            await writeS3Object({
+              client,
+              contentType: artifact.contentType ?? inferContentType(artifact),
+              key: joinS3Key(rootKey, "artifacts", safeArtifactFileName(artifact)),
+              options: s3Options,
+              value: await readFile2(stripArtifactPathAnchor(artifact.path))
+            });
+          }
+        }
+        return {
+          artifactCount: destination.includeArtifacts === false ? 0 : options.report.artifacts.filter((artifact) => artifact.path).length,
+          deliveredAt: Date.now(),
+          destinationId,
+          destinationKind: destination.kind,
+          label,
+          manifestBytes: byteLength(manifest),
+          status: "delivered",
+          target: destination.bucket ? `s3://${destination.bucket}/${rootKey}` : rootKey
+        };
+      }
       const controller = new AbortController;
       const timeout = setTimeout(() => controller.abort(), destination.timeoutMs ?? 1e4);
       try {
@@ -25396,7 +25448,7 @@ var deliverVoiceObservabilityExport = async (options) => {
         label,
         manifestBytes: byteLength(manifest),
         status: "failed",
-        target: destination.kind === "file" ? destination.directory : destination.url
+        target: destination.kind === "file" ? destination.directory : destination.kind === "s3" ? destination.bucket ? `s3://${destination.bucket}/${normalizeExportS3KeyPrefix(destination.keyPrefix)}` : normalizeExportS3KeyPrefix(destination.keyPrefix) : destination.url
       };
     }
   }));

package/dist/observabilityExport.d.ts

@@ -1,4 +1,5 @@
 import { Elysia } from 'elysia';
+import type { S3Client, S3Options } from 'bun';
 import { type VoiceAuditSinkDeliveryQueueSummary, type VoiceAuditSinkDeliveryRecord, type VoiceAuditSinkDeliveryStore } from './auditSinks';
 import type { VoiceAuditEventStore, VoiceAuditEventType } from './audit';
 import { type VoiceOperationsRecord } from './operationsRecord';
@@ -113,7 +114,15 @@ export type VoiceObservabilityExportDeliveryDestination = {
     includeArtifacts?: boolean;
     kind: 'file';
     label?: string;
-} | {
+} | (S3Options & {
+    bucket?: string;
+    client?: Pick<S3Client, 'file'>;
+    id?: string;
+    includeArtifacts?: boolean;
+    keyPrefix?: string;
+    kind: 's3';
+    label?: string;
+}) | {
     fetch?: typeof fetch;
     headers?: Record<string, string>;
     id?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@absolutejs/voice",
-	"version": "0.0.22-beta.223",
+	"version": "0.0.22-beta.224",
 	"description": "Voice primitives and Elysia plugin for AbsoluteJS",
 	"repository": {
 		"type": "git",