@ai-agent-forge/agent-forge 0.86.7 → 0.88.0

package/CHANGELOG.md

@@ -2,6 +2,51 @@
 
 ## [Unreleased]
 
+## [0.88.0] - 2026-10-03
+
+### Breaking Changes
+
+- Compaction toggle retirement, batch 2 of the feature-switch removal program (user ruling 2026-10-03, 决策记录 D-060 裁决 15 / D-079): the settings key `compaction.enabled`, the RPC command `set_auto_compaction`, and the `autoCompactionEnabled` field of the `get_state` response are removed — automatic compaction now applies unconditionally, and manual `/compact` plus the RPC `compact` command are unchanged. Stale keys in settings files are silently ignored per the existing lenient settings contract. The session/facade members `setAutoCompactionEnabled`/`isAutoCompactionEnabled` (`AgentSession`, `CodingAgentFacadeV1`) and the TUI settings-selector "Auto-compact" row are removed with it.
+- Feature-switch removal batch 2, block B (same user ruling, 决策记录 D-079): the settings keys `retry.enabled`, `enableSkillCommands`, and `failover.enabled` are removed and the features apply unconditionally — agent-level auto-retry always runs, skills always register as `/skill:name` completion commands, and the `failover` node installs whenever it has a valid candidate list. The RPC command `set_auto_retry` (rpc-types/rpc-mode/rpc-client), the facade member `setAutoRetryEnabled`, the session members `autoRetryEnabled`/`setAutoRetryEnabled`, and the TUI settings-selector "Skill commands" row are removed with `retry.enabled`/`enableSkillCommands`. Numeric retry keys (`maxRetries`/`baseDelayMs`/`maxAgentDelayMs`/`retry.provider.*`) and the RPC `abort_retry` command (aborting a running retry is not a switch) are unchanged. A stale `failover.enabled` key logs a removal warning and is then ignored — the node still parses and installs from its remaining fields; fail-fast was deliberately avoided because the sdk.ts install-site catch would degrade a throw into the whole failover not installing. Stale settings keys are silently ignored per the existing lenient settings contract; the legacy `skills` object migration drops the `enableSkillCommands` flag instead of promoting it. The pi-ai `RetryPolicy` shape and `AgentHarnessOptions.retry` (library-layer APIs, not product switches) are unchanged — the settings aggregate fills `enabled: true` to satisfy the required library field.
+- Removed the `apiKey` field from models.json provider configs. Secrets now live exclusively in auth.json (via `/login`); loading a models.json containing an `apiKey` fails with guidance to migrate the key to auth.json (same value syntax: literal, `$ENV_VAR`, `!command`). Plugin runtime-provided API keys and CLI `--api-key` are unaffected. The `AuthStatus.source` values `models_json_key`/`models_json_command` are removed as well: extension-provided literal or command keys report `fallback` (env-backed ones keep reporting `environment`), visible through `getProviderAuthStatus` and the login selector.
+- Feature-switch removal batch 2, block C (same user ruling, 决策记录 D-079): the `-name` removal syntax of the `defaultTools` setting is retired — the list supports plain-name whitelists (replace the inherited selection) and `+name` additions only. A stale `-name` entry is silently ignored per the lenient settings contract, and a project list containing one no longer layers as modifiers but replaces the global list. Two behavior changes are breaking: all-modifier lists lose their removal effect (`["-bash"]` previously removed bash from the defaults, now the entry is ignored and the defaults stay `[read,bash,edit,write]`; `["-bash","+powershell"]` was `[read,edit,write,powershell]`, now `[read,bash,edit,write,powershell]`), and a project list with a `-` entry (e.g. `["-codemode","+tool_search"]` over global `["read","bash","+codemode"]`) is now `[read,bash,edit,write,tool_search]` where it previously layered to `[read,bash,tool_search]`. Mixed lists like `["-bash","grep"]` resolve the same as before. Suite tool surfaces use an independent whitelist parser and are unaffected.
+- Removed the `"fork"` value from the `doubleEscapeAction` setting (iron law: `/fork` keeps its command as the single entry point; value ruling 2026-10-03): the double-escape gesture now offers `"tree"` (default) and `"none"` only, and a stored `"fork"` value reads as `"tree"` per the lenient settings contract. Fork from a previous message stays available via the `/fork` command.
+
+### Added
+
+- MCP user documentation (2026-10-03): new [docs/mcp.md](docs/mcp.md) documents the `mcp.json` configuration surface end to end — project-level vs user-level files, suite `associations.mcp` filtering, stdio (`command`/`args`) and remote HTTP (`url`/`headers`) server entries, `deferredTools` with `tool_search` activation, the never-fatal startup diagnostics, and the JSON-response-only HTTP limitation (SSE-streamed responses are not consumed) — and is registered in the docs navigation; the README and `docs/usage.md` now link to it instead of leaving "No core MCP" without an entry point. Documentation only; no behavior change.
+
+### Fixed
+
+- The startup plugin bootstrap now respects the offline posture and announces first-run installs (设计 `插件独立分发与启动装配设计.md` §4.4, 2026-10-03, 0.87.0 release forensics): `AGENT_FORGE_OFFLINE` truthy skips the whole bootstrap immediately with one `bootstrap_skipped_offline` info diagnostic (`skipped: "offline"` on the result) — offline installs cannot succeed and previously burned 36 measured seconds walking the per-plugin failure chain on a fresh agent dir over a slow registry. And a fresh install's first network bootstrap now prints one stderr progress line (`First run: installing {count} factory plugins…`, i18n-wrapped, injected `onPendingInstalls` hook on the core loop) before the silent install window that users read as a hang. Online-posture bootstrap tests declare `AGENT_FORGE_OFFLINE=0` explicitly.
+- Fixed the MCP `deferredTools: true` activation chain end to end (two broken links, both present since the feature landed, found during the MCP pool materializer forensics): `createAgentSession` dropped `deferredToolPluginIds` — the option was not declared on `CreateAgentSessionOptions`, so the MCP pool's deferred server ids passed by `createAgentSessionFromServices` reached nothing; and newly loaded capability plugins had all their tools merged into the active set on the explicit-activation path without consulting the deferred set. Deferred-server tools now register but stay out of the default prompt-visible set until `tool_search` or an explicit activation names them, as designed (docs/mcp.md).
+- `agent-forge auth check --no-refresh --credentials` no longer prints a stored command-backed key (`!command`) as if it were the credential: the side-effect-free read path never executes the command, so the unresolved value is now reported as `credential_not_available` (exit 1, JSON reason on `--json`) instead of emitting the raw command string. Rerun without `--no-refresh` to execute the command and emit the resolved key; the stored command-backed key is also not executed in any other `--no-refresh` path.
+- The Esc interrupt-grading status line now goes through `t()` (设计 `docs/design/国际化与本地化.md` 批次⑪, 2026-10-03): `{count} subagents still running · /stop-agents stops all (Esc only stops the current turn)` was the interactive mode's last runtime-hardcoded zh-CN string, so en users saw Chinese on interrupt while background subagents were still running. zh-CN wording is unchanged via the interactive-mode domain dictionary; en passes the key through; singular/plural split keys preserve English grammar per the batch-10 rule.
+
+### Removed
+
+- microcompact, the opt-in cheap tool-result elision relief before LLM summarization (2026-10-01 G/H seat verdict: net-negative — enabled group cache hit 30.6% vs 44.6% disabled, cache-miss input 548K vs 399K, no savings in full-compaction count, retrieval-detail loss): the `extensions/microcompact.ts` module, the `compaction.microcompactEnabled` setting, the per-model-request cooldown, and the host relief landing paths are deleted. The generic `SessionEntryProjection` public channel stays (third-party equivalence tests moved to `test/compaction-entry-projection.test.ts`).
+- The compaction summary self-critique pass (`compaction.summarySelfCritique`, never proven worth double summary cost by seat data): the critique round and its prompt are deleted; summary generation is single-pass again (first draft is the final summary).
+- Removed the zero-production-consumer legacy assembly layer `src/server/create-harness.ts` and its exports (`createCodingAgentHarness`, `buildCodingAgentHarnessSystemPrompt`, `CodingAgentHarnessTool`, related option types); the server/RPC production path does not go through it (kernel physical boundary declaration §3.2 migration gate M2, 2026-10-03).
+
+## [0.87.0] - 2026-10-02
+### Added
+
+- i18n mechanism, batch 1 of the full-localization program (设计 `docs/design/国际化与本地化.md`, experimental): `t(key, params?)` in `src/core/i18n/` treats English source strings as dictionary keys — zh-CN looks up the aggregated domain dictionaries and falls back to the English key verbatim on miss; `en` passes through without lookup; `{name}` placeholders interpolate on all paths and missing params keep the placeholder instead of throwing. Language resolves as `AGENT_FORGE_I18N_LANG` env > injected value (`setI18nLanguage`) > default `zh-CN`; the new `ui.language` setting (`"zh-CN"` | `"en"`, default `"zh-CN"`, `getUiLanguage()`/`setUiLanguage()`) is the persistence face the host injects from. Vitest runs pin the language to `en` so the existing English-text assertions stay untouched.
+- Full zh-CN localization of user-visible strings, batches 2-8 of the program: ~1,000 user-facing English strings across the interactive TUI (status hints, dialog titles/options, selector and component labels, `/help` `/hotkeys` `/session` tables, startup banner, footer), the CLI (`--help` and auth-command help, flag/option/environment descriptions, suite lifecycle and session errors, print-mode fallbacks), core-layer user-visible runtime errors (config/auth/network/file-IO/session-corruption throws, ~165 entries; plugin-developer contract errors deliberately excluded pending batch 9), and the 48 keybinding descriptions (translated at the agent-forge rendering channel — the tui registry data is untouched). The host wires the language through: interactive mode injects it at construction and on `/reload` (`applyRuntimeSettings`), the CLI bootstrap injects it before any output, and `/settings` gains an "Interface language" row that switches immediately without a restart. Wrapped strings degrade to the English key verbatim wherever a dictionary entry is missing, so upstream-synced new strings stay visible. tui-builtin copy (`Find transcript`/`No matches`/`Copied!`/`Copy failed`) moved to injectable labels (default English) instead of a reverse package dependency, and the tui-mirror harness gains an `i18n-zh-smoke` scenario asserting Chinese rendering fits the terminal width (CJK double-width aware); the mirror CLI runner pins `en` like vitest so existing scenario assertions are unaffected. Singular/plural message pairs stay split keys so English grammar holds for count=1 in every path (retry attempts, background subagents, compaction times, cache misses, queued messages). A final re-review sweep (batch 10) closed the batch-boundary gaps: the interactive-auth login/logout flow, /metrics and /doctor output labels, the plugin confirm dialog, external-editor handoff notice, theme-load fallback notice, serve-mode console lines, and the OAuth manual-code prompt are now wrapped too (61-entry tui-interactive-misc domain plus cli/core-errors additions); a full key-to-dictionary audit across all 1,032 t() call-site keys leaves only 9 deliberate fallbacks (argument-hint syntax tokens, data markers, a pure {title}/{message} skeleton). Batch 9 then wrapped the remaining ~1,200 developer-facing contract and internal throws across core/extensions (17 files), the core root layer, plugins/ecosystem, profile, durable, host, utils, and the remaining CLI diagnostics (about 1,160 new dictionary entries across four core-contract domains (a final sweep closed 35 stragglers the three parallel batches' self-checks missed); 2,152 total keys audited, same 9 fallbacks, translatable throws now zero). Machine-matched messages that behavior depends on (the installer plugin-installation series, cancelled/aborted/timeout prefixes, the authHeader sentinel, Unknown-option prefixes, snapshot-validation prefixes) stay English and are registered as explicit non-goals in the design doc, alongside all non-agent-forge workspace packages (plugin-sdk/ai/agent/server contract faces, 361 throws), ErrorEnvelope commandError payloads, and generated stdio-plugin source. The upstream-sync rulebook (docs/upgrade/README.md) gains principle 8: ported user-visible copy must realign t() keys, with dictionary misses falling back to English until backfilled.
+- Suite custom orientation persona (设计 `docs/design/方案系统设计.md` §6.3): user suites can set `"orientation": "custom"` in suite.json and own their persona text via `<agentDir>/suites/<id>/persona.md` — read verbatim (BOM stripped, not trimmed) and injected exactly like the two builtin personas (missing file degrades to an empty prompt with a dangling diagnostic, never a silent fallback to a builtin persona; the context-budget `personaChars` accounting follows the resolved text). Builtin suites stay locked to `assistant`/`coding` and `FACTORY_CONTENTS_VERSION` is unchanged; schemaVersion stays 1.
+- Queued-message management (D-078, 设计 `docs/design/决策记录.md` D-078 + `docs/design/稳定门面统一入口设计.md` §3.1 #90-91): the new `/queue-list` builtin command (single entry point, no keybinding) opens a queue manager listing the steering and follow-up queues — entries are reordered with alt+up / alt+down, deleted with delete, or recalled to the editor with enter; escape closes the selector (those three are in-component keys of the selector, not feature triggers). The backing public API is index-based and spans three layers: `Agent` gains `peekSteeringQueue()`/`peekFollowUpQueue()` (snapshot shallow copies) plus `reorderQueuedMessages()`/`removeQueuedMessage()` (stale indices during streaming drains return `false`/`null` instead of throwing); `AgentSession.reorderQueuedMessages()`/`removeQueuedMessageAt()` treat the `_steeringMessages`/`_followUpMessages` text copies as the source of truth, sync the agent queue at the same index on success, emit `queue_update`, and leave both layers untouched on failure; the facade forwards both members verbatim. `sendCustomMessage` with `deliverAs: "steer"`/`"followUp"` now also records the display text into the matching text copy, closing the gap where the agent queue held a message the text copy did not (the two layers stay isomorphic, which the index semantics rely on). The tui-mirror harness gains a `queue-manager` scenario for the selector.
+
+### Changed
+
+- Factory default suite flips from `assistant` to `coding` (user ruling 2026-10-02: the product is a coding agent — README "专注编写代码的 AI Agent", npm "Interactive coding agent CLI" — so the no-configuration default must not land on the companion-style assistant persona). A session with no explicit suite source (CLI `--suite` / `AGENT_FORGE_SUITE` / project settings / global settings) now resolves to the coding orientation persona (rigor-first engineering) with the `code` memory strategy; the assistant suite stays available as the explicit-switch fallback, both suites keep the identical 8-tool surface and capability set, and `FACTORY_CONTENTS_VERSION` is unchanged (declarations did not change — no `--suite-reset` upgrade proposal). Environments with an explicit suite configuration are unaffected; existing assistant-domain memories stay in the assistant domain (suiteId isolation is unchanged).
+- Background delegation settlements are written back to the main session immediately as a persisted, TUI-visible custom message instead of the old request-time digest injection (user ruling 2026-10-02, D-060 ruling 12: delegated work must be accepted by the parent, no config switch). When a background subagent task settles, the host sink turns the settlement line into one `agent-task-settled` custom message (content: `Background subagent task <taskId> settled: <status>` plus guidance to read the full result with `subagent_result` and review it) delivered via `sendCustomMessage({ deliverAs: "followUp", triggerTurn: true })`: while the parent is streaming the message rides the follow-up queue (drained this turn, current turn not preempted), and when the parent is idle the same call atomically triggers an acceptance turn. The retired mechanism — the in-memory `backgroundDigest` buffer (20-entry cap, oldest dropped) plus the one-shot `transformContext` injection on the next model round — lost settlements across process restarts, was invisible in the TUI, and left an idle parent waiting forever. Multiple simultaneous settlements each get their own message (the first triggers the idle turn, the rest queue through the streaming branch); a write-back failure only logs a host warn and never affects the task; settlements after the session is disposed are skipped (no orphan turns); the `agent.task.settled@1` lifecycle dispatch is unchanged.
+
+### Fixed
+
+- Read-only tool surface no longer promises file editing in the system prompt (设计 `docs/design/提示词设计宪法.md` §6 2026-10-02): `buildSystemPrompt()` unconditionally opened with "…editing or creating files", contradicting sessions narrowed via `--tools read,grep,find,ls` — observed the model burning minutes improvising workarounds with read-only tools when asked to make changes. When no known mutating tool is active (`MUTATING_TOOL_NAMES`: write/edit/bash/powershell/process_exec/workspace_write/test_run/formatter_linter_check/desktop_execute/image_edit — extend the set when new mutating capability tools ship), the intro now states the non-mutating scope and a work rule reframes execution requests as change-plan requests (exact files/edits/verification; delivering the plan completes the task) — wording sourced from the prompt-reference baseline `OpenAI/Codex/plan_mode.md`. The `customPrompt` branch is untouched. Verified end-to-end: the same narrowed session asked to "fix it directly" now reads once and returns a concrete change plan instead of looping on read tools.
+- Stale default keybindings in the English docs: `usage.md`/`README.md` claimed `Alt+Enter`/`Alt+Up` for follow-up queueing and dequeue, `terminal-setup.md` claimed `Ctrl+Q`/`Alt+Q`/`Alt+P`, and `quickstart.md`/`README.md` claimed `Ctrl+L`/`Ctrl+P`/`Shift+Tab` — all of these shipped defaults were cleared by the single-entry-point rulings (2026-10-01, cf. 0.86.7 `/queue`/`/dequeue` entry). The docs now describe the command entries (`/queue`, `/dequeue`, `/model`, `/thinking`, `/scoped-models`) and point at `keybindings.json` for rebinding.
+
 ## [0.86.7] - 2026-10-02
 ### Added
 

package/README.md

@@ -68,7 +68,7 @@ agent-forge
 
 ## Providers & Models
 
-Agent Forge 为已配置 provider 维护可用模型目录；运行 `agent-forge update --models` 可手动刷新。通过订阅（`/login`）或 API key 认证后，可用 `/model`（或 Ctrl+L）选择模型；在模型选择器中按 Ctrl+S 可保存启动默认值。
+Agent Forge 为已配置 provider 维护可用模型目录；运行 `agent-forge update --models` 可手动刷新。通过订阅（`/login`）或 API key 认证后，可用 `/model` 选择模型；在模型选择器中按 Ctrl+S 可保存启动默认值。
 
 **Subscriptions:**
 - Anthropic Claude Pro/Max
@@ -152,7 +152,7 @@ Type `/` in the editor to trigger commands. [Extensions](#extensions) can regist
 | [`/llama`](docs/llama-cpp.md) | Download, load, and unload llama.cpp router models |
 | `/model` | Switch models; Ctrl+S in the picker saves the startup default |
 | `/thinking` | Switch thinking level; Ctrl+S in the picker saves the startup default |
-| `/scoped-models` | Enable/disable models for Ctrl+P cycling |
+| `/scoped-models` | Enable/disable models for model cycling (bindable, no default key) |
 | `/settings` | Theme, message delivery, transport, and other preferences |
 | `/resume` | Pick from previous sessions |
 | `/new` | Start a new session |
@@ -183,23 +183,22 @@ See `/hotkeys` for the full list. Customize via `~/.agent-forge/agent/keybinding
 | Ctrl+C twice | Quit |
 | Escape | Cancel/abort |
 | Escape twice | Open `/tree` |
-| Ctrl+L | Open model selector |
-| Ctrl+P / Shift+Ctrl+P | Cycle scoped models forward/backward |
-| Shift+Tab | Cycle thinking level |
 | Ctrl+O | Collapse/expand tool output |
 | Ctrl+T | Collapse/expand thinking blocks |
 | Ctrl+X | Copy the last assistant message; with fullscreen copy-on-select disabled, copy the active text selection |
 
+Model selection, model cycling, and thinking-level cycling are command-only by default (`/model`, `/thinking`, `/scoped-models`); their shipped default keybindings were cleared per the single-entry-point rule and can be re-bound in `~/.agent-forge/agent/keybindings.json` (see [docs/keybindings.md](docs/keybindings.md)).
+
 ### Message Queue
 
 Submit messages while the agent is working:
 
 - **Enter** queues a *steering* message, delivered after the current assistant turn finishes executing its tool calls
-- **Alt+Enter** queues a *follow-up* message, delivered only after the agent finishes all work
+- **`/queue <text>`** queues a *follow-up* message, delivered only after the agent finishes all work
 - **Escape** aborts and restores queued messages to editor
-- **Alt+Up** retrieves queued messages back to editor
+- **`/dequeue`** restores queued messages back to editor
 
-On Windows Terminal, `Alt+Enter` is fullscreen by default. Remap it in [docs/terminal-setup.md](docs/terminal-setup.md) so Agent Forge can receive the follow-up shortcut.
+Follow-up queueing and dequeue are command-only by default (no shipped keybindings); bind `app.message.followUp` / `app.message.dequeue` in [docs/keybindings.md](docs/keybindings.md) if you want keys.
 
 Configure delivery in [settings](docs/settings.md): `steeringMode` and `followUpMode` can be `"one-at-a-time"` (default, waits for response) or `"all"` (delivers all queued at once). `transport` selects provider transport preference (`"sse"`, `"websocket"`, or `"auto"`) for providers that support multiple transports.
 
@@ -327,7 +326,7 @@ Place in `~/.agent-forge/agent/themes/`, `.agent-forge/themes/`, or a plugin pac
 
 ### Plugins
 
-Plugins bundle optional capabilities such as MCP bridges, CLI tools, Skills, Goal/Plan workflows and multi-Agent orchestration. A plugin is self-describing through `plugin.json` and can be installed, disabled, replaced or removed without modifying the core.
+Plugins bundle optional capabilities such as MCP bridges, CLI tools, Skills, Goal/Plan workflows and multi-Agent orchestration. MCP servers themselves are configured in `mcp.json` and materialized as generated plugins; see [docs/mcp.md](docs/mcp.md). A plugin is self-describing through `plugin.json` and can be installed, disabled, replaced or removed without modifying the core.
 
 > **Execution model:** Plugins run with the process capabilities available in `readonly` or `full-control`. The core does not provide approval or trust policy; install a policy plugin when that behavior is required.
 
@@ -419,7 +418,7 @@ await session.prompt("What files are in the current directory?");
 
 Agent Forge 保持可扩展而不规定工作流。其它工具内置的能力都应通过 [插件](#plugins)、[Skills](#skills) 或外部工具接入；这样内核保持最小，工作流由用户塑造。
 
-**No core MCP.** 通过 MCP 插件接入。
+**No core MCP.** 通过 `mcp.json` 配置接入（项目级 `.agent-forge/mcp.json` 与用户级 agent dir，stdio 与 remote HTTP 两种 server 形态）；每个 server 在会话启动时物化为生成的 capability 插件。见 [docs/mcp.md](docs/mcp.md)。
 
 **No core multi-Agent workflow.** 通过插件实现编排与生命周期策略。
 
@@ -483,7 +482,7 @@ cat README.md | agent-forge -p "Summarize this text"
 | `--model <pattern>` | Model pattern or ID (supports `provider/id` and optional `:<thinking>`) |
 | `--api-key <key>` | API key (overrides env vars) |
 | `--thinking <level>` | `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max` |
-| `--models <patterns>` | Comma-separated patterns for Ctrl+P cycling |
+| `--models <patterns>` | Comma-separated patterns for model cycling (bindable, no default key) |
 | `--list-models [search]` | List available models |
 
 ### Session Options

package/dist/artifacts/artifact-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/artifacts/artifact-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAE1E,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,KAAK,EAAE;QACZ,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;KAC3B,GAAG;QAAE,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;KAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG;QACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;KAC3B,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAAC;IACnD,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc,CAAC;CACrF;AAyBD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAAG,eAAe,CA8DlG","sourcesContent":["/**\n * Artifact store (2.6a) — session export artifacts with refs, a bounded\n * read boundary, and an explicit end-of-life.\n *\n * Writers store bytes once and hand out serializable refs (id, session,\n * operation, kind, media type, size). Readers get the bytes only through\n * `read`, which is scoped to the owning session; `stat` exposes metadata\n * only. `endLifecycle` terminates an artifact explicitly: later reads fail\n * with a structured `ended` error and stats report the terminal state —\n * nothing is silently deleted or silently kept alive. Renderers and share\n * transports belong to later slices (2.6b-d).\n */\nimport type { ArtifactRefV1 } from \"../core/agent-capability-contract.ts\";\n\nexport type { ArtifactRefV1 };\n\nexport interface ArtifactStatV1 {\n\treadonly artifactId: string;\n\treadonly sessionId: string;\n\treadonly operationId: string;\n\treadonly kind: string;\n\treadonly mediaType: string;\n\treadonly sizeBytes?: number;\n\treadonly state: \"available\" | \"ended\";\n\treadonly endReason?: string;\n}\n\nexport interface ArtifactStoreV1 {\n\twrite(input: {\n\t\treadonly sessionId: string;\n\t\treadonly operationId: string;\n\t\treadonly kind: string;\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t}): { readonly ref: ArtifactRefV1 };\n\tread(input: { readonly artifactId: string; readonly sessionId: string }): {\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t};\n\tstat(artifactId: string): ArtifactStatV1 | undefined;\n\tlist(sessionId: string): readonly ArtifactStatV1[];\n\tendLifecycle(artifactId: string, input: { readonly reason: string }): ArtifactStatV1;\n}\n\n/** FNV-1a 32-bit over the artifact content — deterministic artifact ids. */\nfunction contentHash(bytes: Uint8Array): string {\n\tlet hash = 0x811c9dc5;\n\tfor (const byte of bytes) {\n\t\thash ^= byte;\n\t\thash = Math.imul(hash, 0x01000193);\n\t}\n\treturn (hash >>> 0).toString(36);\n}\n\nfunction toStat(entry: { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }): ArtifactStatV1 {\n\treturn {\n\t\tartifactId: entry.ref.artifactId,\n\t\tsessionId: entry.ref.sessionId,\n\t\toperationId: entry.ref.operationId,\n\t\tkind: entry.ref.kind,\n\t\tmediaType: entry.ref.mediaType,\n\t\tsizeBytes: entry.ref.sizeBytes,\n\t\tstate: entry.ended ? \"ended\" : \"available\",\n\t\t...(entry.ended ? { endReason: entry.endReason } : {}),\n\t};\n}\n\nexport function createArtifactStore(options: { readonly now?: () => number } = {}): ArtifactStoreV1 {\n\tconst now = options.now ?? (() => Date.now());\n\tconst artifacts = new Map<string, { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }>();\n\tconst sequenceByIdentity = new Map<string, number>();\n\t// Global write counter: guarantees artifact ids are unique across ALL\n\t// (session, operation) identities — identical bytes written by two\n\t// different identities must never collide into one id.\n\tlet globalWriteSequence = 0;\n\n\treturn {\n\t\twrite(input) {\n\t\t\tif (input.bytes.length === 0) throw new Error(\"Artifact bytes must not be empty\");\n\t\t\tconst identity = `${input.sessionId}\\u0000${input.operationId}`;\n\t\t\tconst sequence = (sequenceByIdentity.get(identity) ?? 0) + 1;\n\t\t\tsequenceByIdentity.set(identity, sequence);\n\t\t\tglobalWriteSequence += 1;\n\t\t\tconst artifactId = `art-${contentHash(input.bytes)}-${sequence}-${globalWriteSequence}`;\n\t\t\tconst ref: ArtifactRefV1 = {\n\t\t\t\tartifactId,\n\t\t\t\tsessionId: input.sessionId,\n\t\t\t\toperationId: input.operationId,\n\t\t\t\tkind: input.kind,\n\t\t\t\tmediaType: input.mediaType,\n\t\t\t\tsizeBytes: input.bytes.length,\n\t\t\t\ttruncated: false,\n\t\t\t\tcreatedAt: now(),\n\t\t\t};\n\t\t\tartifacts.set(artifactId, { ref, bytes: input.bytes, ended: false });\n\t\t\treturn { ref };\n\t\t},\n\t\tread(input) {\n\t\t\tconst entry = artifacts.get(input.artifactId);\n\t\t\tif (!entry) throw new Error(`Artifact not found: ${input.artifactId}`);\n\t\t\tif (entry.ref.sessionId !== input.sessionId) {\n\t\t\t\tthrow new Error(`Artifact ${input.artifactId} belongs to a different session`);\n\t\t\t}\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(`Artifact ${input.artifactId} lifecycle has ended: ${entry.endReason ?? \"ended\"}`);\n\t\t\t}\n\t\t\treturn { mediaType: entry.ref.mediaType, bytes: entry.bytes };\n\t\t},\n\t\tstat(artifactId) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\treturn entry === undefined ? undefined : toStat(entry);\n\t\t},\n\t\tlist(sessionId) {\n\t\t\treturn [...artifacts.values()]\n\t\t\t\t.filter((entry) => entry.ref.sessionId === sessionId)\n\t\t\t\t.map((entry) => toStat(entry));\n\t\t},\n\t\tendLifecycle(artifactId, input) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\tif (!entry) throw new Error(`Artifact not found: ${artifactId}`);\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(`Artifact ${artifactId} lifecycle has already ended`);\n\t\t\t}\n\t\t\tentry.ended = true;\n\t\t\tentry.endReason = input.reason;\n\t\t\tentry.bytes = new Uint8Array(0);\n\t\t\treturn toStat(entry);\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/artifacts/artifact-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAG1E,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,KAAK,EAAE;QACZ,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;KAC3B,GAAG;QAAE,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;KAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG;QACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;KAC3B,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAAC;IACnD,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc,CAAC;CACrF;AAyBD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAAG,eAAe,CAqElG","sourcesContent":["/**\n * Artifact store (2.6a) — session export artifacts with refs, a bounded\n * read boundary, and an explicit end-of-life.\n *\n * Writers store bytes once and hand out serializable refs (id, session,\n * operation, kind, media type, size). Readers get the bytes only through\n * `read`, which is scoped to the owning session; `stat` exposes metadata\n * only. `endLifecycle` terminates an artifact explicitly: later reads fail\n * with a structured `ended` error and stats report the terminal state —\n * nothing is silently deleted or silently kept alive. Renderers and share\n * transports belong to later slices (2.6b-d).\n */\nimport type { ArtifactRefV1 } from \"../core/agent-capability-contract.ts\";\nimport { t } from \"../core/i18n/index.ts\";\n\nexport type { ArtifactRefV1 };\n\nexport interface ArtifactStatV1 {\n\treadonly artifactId: string;\n\treadonly sessionId: string;\n\treadonly operationId: string;\n\treadonly kind: string;\n\treadonly mediaType: string;\n\treadonly sizeBytes?: number;\n\treadonly state: \"available\" | \"ended\";\n\treadonly endReason?: string;\n}\n\nexport interface ArtifactStoreV1 {\n\twrite(input: {\n\t\treadonly sessionId: string;\n\t\treadonly operationId: string;\n\t\treadonly kind: string;\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t}): { readonly ref: ArtifactRefV1 };\n\tread(input: { readonly artifactId: string; readonly sessionId: string }): {\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t};\n\tstat(artifactId: string): ArtifactStatV1 | undefined;\n\tlist(sessionId: string): readonly ArtifactStatV1[];\n\tendLifecycle(artifactId: string, input: { readonly reason: string }): ArtifactStatV1;\n}\n\n/** FNV-1a 32-bit over the artifact content — deterministic artifact ids. */\nfunction contentHash(bytes: Uint8Array): string {\n\tlet hash = 0x811c9dc5;\n\tfor (const byte of bytes) {\n\t\thash ^= byte;\n\t\thash = Math.imul(hash, 0x01000193);\n\t}\n\treturn (hash >>> 0).toString(36);\n}\n\nfunction toStat(entry: { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }): ArtifactStatV1 {\n\treturn {\n\t\tartifactId: entry.ref.artifactId,\n\t\tsessionId: entry.ref.sessionId,\n\t\toperationId: entry.ref.operationId,\n\t\tkind: entry.ref.kind,\n\t\tmediaType: entry.ref.mediaType,\n\t\tsizeBytes: entry.ref.sizeBytes,\n\t\tstate: entry.ended ? \"ended\" : \"available\",\n\t\t...(entry.ended ? { endReason: entry.endReason } : {}),\n\t};\n}\n\nexport function createArtifactStore(options: { readonly now?: () => number } = {}): ArtifactStoreV1 {\n\tconst now = options.now ?? (() => Date.now());\n\tconst artifacts = new Map<string, { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }>();\n\tconst sequenceByIdentity = new Map<string, number>();\n\t// Global write counter: guarantees artifact ids are unique across ALL\n\t// (session, operation) identities — identical bytes written by two\n\t// different identities must never collide into one id.\n\tlet globalWriteSequence = 0;\n\n\treturn {\n\t\twrite(input) {\n\t\t\tif (input.bytes.length === 0) throw new Error(\"Artifact bytes must not be empty\");\n\t\t\tconst identity = `${input.sessionId}\\u0000${input.operationId}`;\n\t\t\tconst sequence = (sequenceByIdentity.get(identity) ?? 0) + 1;\n\t\t\tsequenceByIdentity.set(identity, sequence);\n\t\t\tglobalWriteSequence += 1;\n\t\t\tconst artifactId = `art-${contentHash(input.bytes)}-${sequence}-${globalWriteSequence}`;\n\t\t\tconst ref: ArtifactRefV1 = {\n\t\t\t\tartifactId,\n\t\t\t\tsessionId: input.sessionId,\n\t\t\t\toperationId: input.operationId,\n\t\t\t\tkind: input.kind,\n\t\t\t\tmediaType: input.mediaType,\n\t\t\t\tsizeBytes: input.bytes.length,\n\t\t\t\ttruncated: false,\n\t\t\t\tcreatedAt: now(),\n\t\t\t};\n\t\t\tartifacts.set(artifactId, { ref, bytes: input.bytes, ended: false });\n\t\t\treturn { ref };\n\t\t},\n\t\tread(input) {\n\t\t\tconst entry = artifacts.get(input.artifactId);\n\t\t\tif (!entry) throw new Error(t(\"Artifact not found: {artifactId}\", { artifactId: input.artifactId }));\n\t\t\tif (entry.ref.sessionId !== input.sessionId) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\tt(\"Artifact {artifactId} belongs to a different session\", { artifactId: input.artifactId }),\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\tt(\"Artifact {artifactId} lifecycle has ended: {reason}\", {\n\t\t\t\t\t\tartifactId: input.artifactId,\n\t\t\t\t\t\treason: entry.endReason ?? \"ended\",\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn { mediaType: entry.ref.mediaType, bytes: entry.bytes };\n\t\t},\n\t\tstat(artifactId) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\treturn entry === undefined ? undefined : toStat(entry);\n\t\t},\n\t\tlist(sessionId) {\n\t\t\treturn [...artifacts.values()]\n\t\t\t\t.filter((entry) => entry.ref.sessionId === sessionId)\n\t\t\t\t.map((entry) => toStat(entry));\n\t\t},\n\t\tendLifecycle(artifactId, input) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\tif (!entry) throw new Error(t(\"Artifact not found: {artifactId}\", { artifactId }));\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(t(\"Artifact {artifactId} lifecycle has already ended\", { artifactId }));\n\t\t\t}\n\t\t\tentry.ended = true;\n\t\t\tentry.endReason = input.reason;\n\t\t\tentry.bytes = new Uint8Array(0);\n\t\t\treturn toStat(entry);\n\t\t},\n\t};\n}\n"]}

package/dist/artifacts/artifact-store.js

@@ -1,3 +1,4 @@
+import { t } from "../core/i18n/index.js";
 /** FNV-1a 32-bit over the artifact content — deterministic artifact ids. */
 function contentHash(bytes) {
     let hash = 0x811c9dc5;
@@ -52,12 +53,15 @@ export function createArtifactStore(options = {}) {
         read(input) {
             const entry = artifacts.get(input.artifactId);
             if (!entry)
-                throw new Error(`Artifact not found: ${input.artifactId}`);
+                throw new Error(t("Artifact not found: {artifactId}", { artifactId: input.artifactId }));
             if (entry.ref.sessionId !== input.sessionId) {
-                throw new Error(`Artifact ${input.artifactId} belongs to a different session`);
+                throw new Error(t("Artifact {artifactId} belongs to a different session", { artifactId: input.artifactId }));
             }
             if (entry.ended) {
-                throw new Error(`Artifact ${input.artifactId} lifecycle has ended: ${entry.endReason ?? "ended"}`);
+                throw new Error(t("Artifact {artifactId} lifecycle has ended: {reason}", {
+                    artifactId: input.artifactId,
+                    reason: entry.endReason ?? "ended",
+                }));
             }
             return { mediaType: entry.ref.mediaType, bytes: entry.bytes };
         },
@@ -73,9 +77,9 @@ export function createArtifactStore(options = {}) {
         endLifecycle(artifactId, input) {
             const entry = artifacts.get(artifactId);
             if (!entry)
-                throw new Error(`Artifact not found: ${artifactId}`);
+                throw new Error(t("Artifact not found: {artifactId}", { artifactId }));
             if (entry.ended) {
-                throw new Error(`Artifact ${artifactId} lifecycle has already ended`);
+                throw new Error(t("Artifact {artifactId} lifecycle has already ended", { artifactId }));
             }
             entry.ended = true;
             entry.endReason = input.reason;

package/dist/artifacts/artifact-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/artifacts/artifact-store.ts"],"names":[],"mappings":"AA4CA,8EAA4E;AAC5E,SAAS,WAAW,CAAC,KAAiB,EAAU;IAC/C,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,IAAI,CAAC;QACb,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAAA,CACjC;AAED,SAAS,MAAM,CAAC,KAAoF,EAAkB;IACrH,OAAO;QACN,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU;QAChC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;QAC9B,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW;QAClC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI;QACpB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;QAC9B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;QAC1C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAoC,EAAE,EAAmB;IACnG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyF,CAAC;IACnH,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,sEAAsE;IACtE,qEAAmE;IACnE,uDAAuD;IACvD,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAE5B,OAAO;QACN,KAAK,CAAC,KAAK,EAAE;YACZ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClF,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,SAAS,SAAS,KAAK,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,mBAAmB,IAAI,CAAC,CAAC;YACzB,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,IAAI,mBAAmB,EAAE,CAAC;YACxF,MAAM,GAAG,GAAkB;gBAC1B,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;gBAC7B,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,GAAG,EAAE;aAChB,CAAC;YACF,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,GAAG,EAAE,CAAC;QAAA,CACf;QACD,IAAI,CAAC,KAAK,EAAE;YACX,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACvE,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,UAAU,iCAAiC,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,UAAU,yBAAyB,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,CAC9D;QACD,IAAI,CAAC,UAAU,EAAE;YAChB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACvD;QACD,IAAI,CAAC,SAAS,EAAE;YACf,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAA,CAChC;QACD,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;YACjE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,YAAY,UAAU,8BAA8B,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;YAC/B,KAAK,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACrB;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Artifact store (2.6a) — session export artifacts with refs, a bounded\n * read boundary, and an explicit end-of-life.\n *\n * Writers store bytes once and hand out serializable refs (id, session,\n * operation, kind, media type, size). Readers get the bytes only through\n * `read`, which is scoped to the owning session; `stat` exposes metadata\n * only. `endLifecycle` terminates an artifact explicitly: later reads fail\n * with a structured `ended` error and stats report the terminal state —\n * nothing is silently deleted or silently kept alive. Renderers and share\n * transports belong to later slices (2.6b-d).\n */\nimport type { ArtifactRefV1 } from \"../core/agent-capability-contract.ts\";\n\nexport type { ArtifactRefV1 };\n\nexport interface ArtifactStatV1 {\n\treadonly artifactId: string;\n\treadonly sessionId: string;\n\treadonly operationId: string;\n\treadonly kind: string;\n\treadonly mediaType: string;\n\treadonly sizeBytes?: number;\n\treadonly state: \"available\" | \"ended\";\n\treadonly endReason?: string;\n}\n\nexport interface ArtifactStoreV1 {\n\twrite(input: {\n\t\treadonly sessionId: string;\n\t\treadonly operationId: string;\n\t\treadonly kind: string;\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t}): { readonly ref: ArtifactRefV1 };\n\tread(input: { readonly artifactId: string; readonly sessionId: string }): {\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t};\n\tstat(artifactId: string): ArtifactStatV1 | undefined;\n\tlist(sessionId: string): readonly ArtifactStatV1[];\n\tendLifecycle(artifactId: string, input: { readonly reason: string }): ArtifactStatV1;\n}\n\n/** FNV-1a 32-bit over the artifact content — deterministic artifact ids. */\nfunction contentHash(bytes: Uint8Array): string {\n\tlet hash = 0x811c9dc5;\n\tfor (const byte of bytes) {\n\t\thash ^= byte;\n\t\thash = Math.imul(hash, 0x01000193);\n\t}\n\treturn (hash >>> 0).toString(36);\n}\n\nfunction toStat(entry: { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }): ArtifactStatV1 {\n\treturn {\n\t\tartifactId: entry.ref.artifactId,\n\t\tsessionId: entry.ref.sessionId,\n\t\toperationId: entry.ref.operationId,\n\t\tkind: entry.ref.kind,\n\t\tmediaType: entry.ref.mediaType,\n\t\tsizeBytes: entry.ref.sizeBytes,\n\t\tstate: entry.ended ? \"ended\" : \"available\",\n\t\t...(entry.ended ? { endReason: entry.endReason } : {}),\n\t};\n}\n\nexport function createArtifactStore(options: { readonly now?: () => number } = {}): ArtifactStoreV1 {\n\tconst now = options.now ?? (() => Date.now());\n\tconst artifacts = new Map<string, { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }>();\n\tconst sequenceByIdentity = new Map<string, number>();\n\t// Global write counter: guarantees artifact ids are unique across ALL\n\t// (session, operation) identities — identical bytes written by two\n\t// different identities must never collide into one id.\n\tlet globalWriteSequence = 0;\n\n\treturn {\n\t\twrite(input) {\n\t\t\tif (input.bytes.length === 0) throw new Error(\"Artifact bytes must not be empty\");\n\t\t\tconst identity = `${input.sessionId}\\u0000${input.operationId}`;\n\t\t\tconst sequence = (sequenceByIdentity.get(identity) ?? 0) + 1;\n\t\t\tsequenceByIdentity.set(identity, sequence);\n\t\t\tglobalWriteSequence += 1;\n\t\t\tconst artifactId = `art-${contentHash(input.bytes)}-${sequence}-${globalWriteSequence}`;\n\t\t\tconst ref: ArtifactRefV1 = {\n\t\t\t\tartifactId,\n\t\t\t\tsessionId: input.sessionId,\n\t\t\t\toperationId: input.operationId,\n\t\t\t\tkind: input.kind,\n\t\t\t\tmediaType: input.mediaType,\n\t\t\t\tsizeBytes: input.bytes.length,\n\t\t\t\ttruncated: false,\n\t\t\t\tcreatedAt: now(),\n\t\t\t};\n\t\t\tartifacts.set(artifactId, { ref, bytes: input.bytes, ended: false });\n\t\t\treturn { ref };\n\t\t},\n\t\tread(input) {\n\t\t\tconst entry = artifacts.get(input.artifactId);\n\t\t\tif (!entry) throw new Error(`Artifact not found: ${input.artifactId}`);\n\t\t\tif (entry.ref.sessionId !== input.sessionId) {\n\t\t\t\tthrow new Error(`Artifact ${input.artifactId} belongs to a different session`);\n\t\t\t}\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(`Artifact ${input.artifactId} lifecycle has ended: ${entry.endReason ?? \"ended\"}`);\n\t\t\t}\n\t\t\treturn { mediaType: entry.ref.mediaType, bytes: entry.bytes };\n\t\t},\n\t\tstat(artifactId) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\treturn entry === undefined ? undefined : toStat(entry);\n\t\t},\n\t\tlist(sessionId) {\n\t\t\treturn [...artifacts.values()]\n\t\t\t\t.filter((entry) => entry.ref.sessionId === sessionId)\n\t\t\t\t.map((entry) => toStat(entry));\n\t\t},\n\t\tendLifecycle(artifactId, input) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\tif (!entry) throw new Error(`Artifact not found: ${artifactId}`);\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(`Artifact ${artifactId} lifecycle has already ended`);\n\t\t\t}\n\t\t\tentry.ended = true;\n\t\t\tentry.endReason = input.reason;\n\t\t\tentry.bytes = new Uint8Array(0);\n\t\t\treturn toStat(entry);\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/artifacts/artifact-store.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,CAAC,EAAE,MAAM,uBAAuB,CAAC;AAgC1C,8EAA4E;AAC5E,SAAS,WAAW,CAAC,KAAiB,EAAU;IAC/C,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,IAAI,CAAC;QACb,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAAA,CACjC;AAED,SAAS,MAAM,CAAC,KAAoF,EAAkB;IACrH,OAAO;QACN,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU;QAChC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;QAC9B,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW;QAClC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI;QACpB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;QAC9B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;QAC1C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAoC,EAAE,EAAmB;IACnG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyF,CAAC;IACnH,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,sEAAsE;IACtE,qEAAmE;IACnE,uDAAuD;IACvD,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAE5B,OAAO;QACN,KAAK,CAAC,KAAK,EAAE;YACZ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClF,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,SAAS,SAAS,KAAK,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,mBAAmB,IAAI,CAAC,CAAC;YACzB,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,IAAI,mBAAmB,EAAE,CAAC;YACxF,MAAM,GAAG,GAAkB;gBAC1B,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;gBAC7B,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,GAAG,EAAE;aAChB,CAAC;YACF,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,GAAG,EAAE,CAAC;QAAA,CACf;QACD,IAAI,CAAC,KAAK,EAAE;YACX,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,kCAAkC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACrG,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,sDAAsD,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAC3F,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,qDAAqD,EAAE;oBACxD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO;iBAClC,CAAC,CACF,CAAC;YACH,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,CAC9D;QACD,IAAI,CAAC,UAAU,EAAE;YAChB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACvD;QACD,IAAI,CAAC,SAAS,EAAE;YACf,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAA,CAChC;QACD,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,kCAAkC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YACnF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,mDAAmD,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;YAC/B,KAAK,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACrB;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Artifact store (2.6a) — session export artifacts with refs, a bounded\n * read boundary, and an explicit end-of-life.\n *\n * Writers store bytes once and hand out serializable refs (id, session,\n * operation, kind, media type, size). Readers get the bytes only through\n * `read`, which is scoped to the owning session; `stat` exposes metadata\n * only. `endLifecycle` terminates an artifact explicitly: later reads fail\n * with a structured `ended` error and stats report the terminal state —\n * nothing is silently deleted or silently kept alive. Renderers and share\n * transports belong to later slices (2.6b-d).\n */\nimport type { ArtifactRefV1 } from \"../core/agent-capability-contract.ts\";\nimport { t } from \"../core/i18n/index.ts\";\n\nexport type { ArtifactRefV1 };\n\nexport interface ArtifactStatV1 {\n\treadonly artifactId: string;\n\treadonly sessionId: string;\n\treadonly operationId: string;\n\treadonly kind: string;\n\treadonly mediaType: string;\n\treadonly sizeBytes?: number;\n\treadonly state: \"available\" | \"ended\";\n\treadonly endReason?: string;\n}\n\nexport interface ArtifactStoreV1 {\n\twrite(input: {\n\t\treadonly sessionId: string;\n\t\treadonly operationId: string;\n\t\treadonly kind: string;\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t}): { readonly ref: ArtifactRefV1 };\n\tread(input: { readonly artifactId: string; readonly sessionId: string }): {\n\t\treadonly mediaType: string;\n\t\treadonly bytes: Uint8Array;\n\t};\n\tstat(artifactId: string): ArtifactStatV1 | undefined;\n\tlist(sessionId: string): readonly ArtifactStatV1[];\n\tendLifecycle(artifactId: string, input: { readonly reason: string }): ArtifactStatV1;\n}\n\n/** FNV-1a 32-bit over the artifact content — deterministic artifact ids. */\nfunction contentHash(bytes: Uint8Array): string {\n\tlet hash = 0x811c9dc5;\n\tfor (const byte of bytes) {\n\t\thash ^= byte;\n\t\thash = Math.imul(hash, 0x01000193);\n\t}\n\treturn (hash >>> 0).toString(36);\n}\n\nfunction toStat(entry: { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }): ArtifactStatV1 {\n\treturn {\n\t\tartifactId: entry.ref.artifactId,\n\t\tsessionId: entry.ref.sessionId,\n\t\toperationId: entry.ref.operationId,\n\t\tkind: entry.ref.kind,\n\t\tmediaType: entry.ref.mediaType,\n\t\tsizeBytes: entry.ref.sizeBytes,\n\t\tstate: entry.ended ? \"ended\" : \"available\",\n\t\t...(entry.ended ? { endReason: entry.endReason } : {}),\n\t};\n}\n\nexport function createArtifactStore(options: { readonly now?: () => number } = {}): ArtifactStoreV1 {\n\tconst now = options.now ?? (() => Date.now());\n\tconst artifacts = new Map<string, { ref: ArtifactRefV1; bytes: Uint8Array; ended: boolean; endReason?: string }>();\n\tconst sequenceByIdentity = new Map<string, number>();\n\t// Global write counter: guarantees artifact ids are unique across ALL\n\t// (session, operation) identities — identical bytes written by two\n\t// different identities must never collide into one id.\n\tlet globalWriteSequence = 0;\n\n\treturn {\n\t\twrite(input) {\n\t\t\tif (input.bytes.length === 0) throw new Error(\"Artifact bytes must not be empty\");\n\t\t\tconst identity = `${input.sessionId}\\u0000${input.operationId}`;\n\t\t\tconst sequence = (sequenceByIdentity.get(identity) ?? 0) + 1;\n\t\t\tsequenceByIdentity.set(identity, sequence);\n\t\t\tglobalWriteSequence += 1;\n\t\t\tconst artifactId = `art-${contentHash(input.bytes)}-${sequence}-${globalWriteSequence}`;\n\t\t\tconst ref: ArtifactRefV1 = {\n\t\t\t\tartifactId,\n\t\t\t\tsessionId: input.sessionId,\n\t\t\t\toperationId: input.operationId,\n\t\t\t\tkind: input.kind,\n\t\t\t\tmediaType: input.mediaType,\n\t\t\t\tsizeBytes: input.bytes.length,\n\t\t\t\ttruncated: false,\n\t\t\t\tcreatedAt: now(),\n\t\t\t};\n\t\t\tartifacts.set(artifactId, { ref, bytes: input.bytes, ended: false });\n\t\t\treturn { ref };\n\t\t},\n\t\tread(input) {\n\t\t\tconst entry = artifacts.get(input.artifactId);\n\t\t\tif (!entry) throw new Error(t(\"Artifact not found: {artifactId}\", { artifactId: input.artifactId }));\n\t\t\tif (entry.ref.sessionId !== input.sessionId) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\tt(\"Artifact {artifactId} belongs to a different session\", { artifactId: input.artifactId }),\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\tt(\"Artifact {artifactId} lifecycle has ended: {reason}\", {\n\t\t\t\t\t\tartifactId: input.artifactId,\n\t\t\t\t\t\treason: entry.endReason ?? \"ended\",\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn { mediaType: entry.ref.mediaType, bytes: entry.bytes };\n\t\t},\n\t\tstat(artifactId) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\treturn entry === undefined ? undefined : toStat(entry);\n\t\t},\n\t\tlist(sessionId) {\n\t\t\treturn [...artifacts.values()]\n\t\t\t\t.filter((entry) => entry.ref.sessionId === sessionId)\n\t\t\t\t.map((entry) => toStat(entry));\n\t\t},\n\t\tendLifecycle(artifactId, input) {\n\t\t\tconst entry = artifacts.get(artifactId);\n\t\t\tif (!entry) throw new Error(t(\"Artifact not found: {artifactId}\", { artifactId }));\n\t\t\tif (entry.ended) {\n\t\t\t\tthrow new Error(t(\"Artifact {artifactId} lifecycle has already ended\", { artifactId }));\n\t\t\t}\n\t\t\tentry.ended = true;\n\t\t\tentry.endReason = input.reason;\n\t\t\tentry.bytes = new Uint8Array(0);\n\t\t\treturn toStat(entry);\n\t\t},\n\t};\n}\n"]}