@cursor/bdk 0.2.6 → 0.2.7

package/dist/files-backends/cursor-hosted.js

@@ -1,51 +1,14 @@
 /**
- * Cursor-managed durable files for hosted agents — the backend that puts
- * `ctx.host.files` bytes in an Agent Store on S3.
+ * Cursor-managed durable files for hosted agents.
  *
- * One credential throughout: the engine's pod `CURSOR_API_KEY`. It authorizes
- * every call, and the bytes then move between this process and presigned S3
- * URLs. File contents never transit the control plane, so a large artifact
- * costs S3 bandwidth rather than backend memory.
+ * Requests use the control-plane proxy and deployment pod credential, which
+ * scopes access to the deployment. Authors access these files through
+ * `ctx.host.files`; Cursor manages the storage bindings, so do not add their
+ * names to `hosting.secretNames`.
  *
- * By default everything goes through the public API under
- * `/v0/agent-serve-files`, the same surface any API-key holder gets — a
- * self-hosted deployment, a CI job, or a customer script can drive the same
- * store with the same requests. Cursor-managed v2 pods can instead be pinned
- * (per deployment, at task-time bind) onto the engine-facing factory store API
- * under `/internal/agentsdk/store`: same host, same credential, same stores
- * and S3 objects, but flush-shaped — one control-plane request settles a whole
- * `putMany` batch or a conditional delete, where `/v0` costs a presign POST
- * plus stat GETs and a delete POST. The pin fails safe: an absent or
- * unrecognized protocol value, or a source id that maps to neither deployment
- * store role, keeps `/v0`.
- *
- * Two things follow. There is no Agent Store token: a token narrows an identity
- * to one store and one capability, which is what a caller that cannot hold a
- * credential needs (an in-pod FUSE daemon). This process holds the credential
- * the token would be minted from, so a token bought a round trip, an expiry to
- * manage, and a second auth path, and no privilege reduction. And there is no
- * direct call to the store service: the API layer owns the policy, and the
- * engine never addresses it.
- *
- * There is also no store lookup. Every request names this deployment's file
- * store by the `agentStoreSourceId` the deploy pipeline pinned into the pod
- * env as `AGENT_SERVE_STORE_SOURCE_ID` — provisioning the store at the same
- * time, so by boot the store exists and the id resolves. The id is an
- * address, not a credential: the server maps it to a store and authorizes
- * every call against the deployment's own live service account, so holding
- * it grants nothing, and this process never learns a store id it could use
- * to ask for anyone else's.
- *
- * Locally, point `CURSOR_API_BASE_URL` at a backend that serves
- * `/v0/agent-serve-files` and use a deployment SA key; off hosting the
- * local-disk sink is the default instead.
- *
- * Writes are conditional. The store rejects unconditional writes, so every
- * `put` first learns the current etag: `new` for a path we believe is absent,
- * `etag` to replace what we last observed. A raced write comes back 412 and
- * surfaces as {@link FileConflictError}, which is why this backend reports
- * `etags: true` and `host.files.capabilities.conflictDetection` is honestly
- * true.
+ * Writes use conditional etags. A raced write surfaces as
+ * {@link FileConflictError}, and the backend reports
+ * `host.files.capabilities.conflictDetection`.
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
@@ -64,51 +27,25 @@ import { resolveCursorApiBaseUrl, resolveCursorApiFetch, resolveCursorApiKey, }
 import { resolveDeploymentStoreSourceIdSync, resolveFrameworkStoreSourceIdSync, resolveStoreProtocolSync, storeProtocolEnablesFactoryFlush, } from "../internal/cursor/hosted-store-secrets.js";
 import { createAgentStorePresignedUrlValidatorForBackend } from "./agent-store-presigned-url.js";
 const AGENT_SERVE_FILES_PATH = "/v0/agent-serve-files";
-/**
- * Engine-facing store API on the factory service — same host, different path
- * family. Selected per pod by the task-bound protocol pin
- * ({@link resolveStoreProtocolSync}); the server resolves the deployment and
- * its stores from the pod credential, so requests carry a store *role*
- * (`deployment` | `framework`), never a store id. One flush request replaces
- * the presign POST plus the stat GETs and delete POST a turn costs on `/v0`.
- */
+/** Managed endpoint for batched file operations. */
 const AGENTSDK_STORE_PATH = "/internal/agentsdk/store";
 /**
- * Pinned by the deploy pipeline for every Cursor-managed deployment — which
- * provisions the file store it names in the same step — and reserved from
- * user secrets. Its presence is the signal that a durable store exists and
- * the hosted control plane is reachable; a deployment without one (no
- * service account yet) has no store, and this backend is not selected.
+ * Platform-managed identifier for the author-facing file store. Do not add
+ * it to `hosting.secretNames`.
  */
 export const AGENT_SERVE_STORE_SOURCE_ID_ENV_VAR = "AGENT_SERVE_STORE_SOURCE_ID";
 /**
- * The deployment's **framework-level** file store, distinct from the
- * user-level store above. The user store carries author-facing bytes
- * (`ctx.host.files`, skills, memory, artifacts) and is browsable and
- * mountable; the framework store carries engine-owned session state —
- * session records, event transcripts, hosted-execution run logs,
- * continuation index, and the SDK conversation mirror — and is never
- * exposed to authors or models.
- * Provisioned by the v2 deploy pipeline alongside the user store; v1
- * deployments have only the user store.
+ * Platform-managed identifier for framework-owned state. Authors and models
+ * cannot access this storage through `host.files` or `host.kv`.
  */
 export const AGENT_SERVE_FRAMEWORK_STORE_SOURCE_ID_ENV_VAR = "AGENT_SERVE_FRAMEWORK_STORE_SOURCE_ID";
 /** Cap on the per-process etag cache; a miss costs a lookup, not correctness. */
 const MAX_REMEMBERED_ETAGS = 1000;
 /** Bounded directory page for point lookups. */
 const DIRECTORY_PAGE_SIZE = 1000;
-/**
- * Paths per presign call in {@link FileSink.getMany}, matching the factory
- * `/read` route's server-side `MAX_READ_PATHS`. The whole point of the batch:
- * the factory wire's per-deployment rate limiter counts requests, not files,
- * so a restore that used to spend N `/read` calls now spends ceil(N/100).
- */
+/** Paths requested in each {@link FileSink.getMany} batch. */
 const READ_PRESIGN_BATCH_MAX = 100;
-/**
- * Concurrent presigned-URL downloads inside one {@link FileSink.getMany}
- * batch — the S3 fan-out, not the control-plane call count. Matches the
- * conversation mirror's historical `HYDRATE_DOWNLOAD_CONCURRENCY`.
- */
+/** Concurrent downloads inside one {@link FileSink.getMany} batch. */
 const GET_MANY_DOWNLOAD_CONCURRENCY = 8;
 /** Stop paging a pathological directory rather than scanning forever. */
 const MAX_DIRECTORY_PAGES = 20;
@@ -121,28 +58,23 @@ const MAX_LIST_WALK_PAGES = 1000;
 /**
  * True on Cursor-managed hosting with a provisioned file store.
  *
- * Keyed on the store source id alone, deliberately: the credential is not part
- * of the test. If it were, a missing or regressed `CURSOR_API_KEY` would
- * silently select pod-local disk on a hosted pod and accept writes that vanish
- * with the pod. Instead the store is detected, and a missing credential fails
- * loudly when the sink is used.
+ * Availability depends on the storage binding rather than the credential.
+ * A missing credential therefore fails loudly instead of selecting local
+ * storage for a managed deployment.
  */
 export function isCursorHostedFilesAvailable(env = process.env) {
     return resolveDeploymentStoreSourceIdSync(env) !== undefined;
 }
 /**
- * Local `serve`/`run` with a personal `CURSOR_API_KEY` can address
- * `/v0/agent-serve-files/user`. Hosted deployments have a store source id
- * and must not take this path — they own the deployment store instead.
+ * True when local commands can use the signed-in user's file store. Managed
+ * deployments always use their deployment-scoped store instead.
  */
 export function isCursorUserStoreFilesAvailable(env = process.env) {
     var _a;
     if (isCursorHostedFilesAvailable(env)) {
         return false;
     }
-    // Vitest inherits the developer's shell. User-store sync writes durable
-    // keys; skip it in the test runner so `pnpm test` cannot poison
-    // `agent-serve/<agent>/skills/` on the caller's USER store.
+    // Avoid durable writes from credentials inherited by a test process.
     if (env.VITEST === "true") {
         return false;
     }
@@ -152,9 +84,7 @@ export function isCursorUserStoreFilesAvailable(env = process.env) {
 /**
  * Cursor-hosted {@link FileSink}, selected on Cursor-managed hosting.
  *
- * Stateless apart from the etag cache below: every request names this
- * deployment's store by its pinned source id, so there is nothing to
- * resolve, hold, or invalidate.
+ * Stateless apart from its bounded etag cache.
  */
 export function cursorHostedFiles(options = {}) {
     /**
@@ -176,12 +106,8 @@ export function cursorHostedFiles(options = {}) {
     /**
      * Run `call` against this deployment's files.
      *
-     * No network call and nothing cached: the store source id and protocol pin
-     * come from the environment (or task-bound files) and the server maps them
-     * on every request. Resolved per call rather than once at construction so a
-     * misconfigured environment fails where the operation is, not where the
-     * sink was created — and so a protocol pin bound after serve start takes
-     * effect without a restart.
+     * Storage bindings and transport selection are resolved for each operation
+     * so platform updates do not require recreating the sink.
      */
     function withFiles(call) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -190,10 +116,8 @@ export function cursorHostedFiles(options = {}) {
             const sourceId = resolveStoreSourceId(options);
             const protocol = (_b = (_a = options.resolveStoreProtocol) === null || _a === void 0 ? void 0 : _a.call(options)) !== null && _b !== void 0 ? _b : resolveStoreProtocolSync();
             if (storeProtocolEnablesFactoryFlush(protocol)) {
-                // The factory API addresses stores by role, so map the pinned source id
-                // back to the role it was pinned from. A source id matching neither (a
-                // local-dev override) has no role there and stays on `/v0`, as does any
-                // protocol value this runtime does not recognize.
+                // The batched transport addresses managed stores by role. An unknown
+                // store or transport stays on the compatibility path.
                 if (sourceId === resolveFrameworkStoreSourceIdSync()) {
                     return yield call({ wire: "flush", store: "framework" });
                 }
@@ -243,7 +167,7 @@ export function cursorHostedFiles(options = {}) {
             return Object.assign({ body: new Uint8Array(yield response.arrayBuffer()) }, (etag === undefined ? {} : { etag }));
         });
     }
-    /** One page of the paginated per-directory listing. */
+    /** One page of a directory listing. */
     function directoryPage(files, directory, pageToken) {
         return __awaiter(this, void 0, void 0, function* () {
             if (files.wire === "flush") {
@@ -259,7 +183,7 @@ export function cursorHostedFiles(options = {}) {
             return yield storeGet(options, files.path(`?${query.toString()}`));
         });
     }
-    /** The unscoped whole-store listing, on whichever wire the target rides. */
+    /** The unscoped whole-store listing. */
     function unscopedListing(files) {
         return __awaiter(this, void 0, void 0, function* () {
             if (files.wire === "flush") {
@@ -390,10 +314,8 @@ export function cursorHostedFiles(options = {}) {
         });
     }
     /**
-     * The shared presign for one upload attempt: a `/v0` upload POST, or one
-     * flush request whose put outcomes are reshaped into the same instruction
-     * list (an outcome without a `url` — an oversize refusal — surfaces exactly
-     * like a `/v0` multipart answer: no single-part instruction for that key).
+     * Resolve upload instructions for one attempt. A response without a URL
+     * reports that the file cannot use the single-part upload path.
      */
     function presignUploads(files, specs) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -418,9 +340,9 @@ export function cursorHostedFiles(options = {}) {
     }
     /**
      * One presign call covering every spec, then parallel presigned PUTs.
-     * Outcomes are per spec: a 412 ("conflict") or a failed PUT for one key
-     * never disturbs its batch siblings. Only the presign itself is shared —
-     * a presign error throws and fails the whole attempt.
+     * Outcomes are per spec: a conflict or failed upload for one key never
+     * disturbs its batch siblings. Resolving the instructions is shared, so
+     * that request failing rejects the whole attempt.
      */
     function attemptUploads(files, specs) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -548,11 +470,7 @@ export function cursorHostedFiles(options = {}) {
         }
         // Unconditional write to a key this process has never observed:
         // create-only first, learning the current etag only on conflict. Most
-        // such writes are brand-new keys (session-event chunks mint a fresh key
-        // per flush), and the old stat-before-every-put shape made the
-        // precondition lookup the single largest source of `agent-serve-files`
-        // list traffic — every fresh pod re-listed a directory per key before
-        // its first write.
+        // such writes are new, so avoid a read before every first write.
         return { precondition: { new: true }, cachedEtagUsed: false };
     }
     return {
@@ -622,10 +540,7 @@ export function cursorHostedFiles(options = {}) {
             return __awaiter(this, void 0, void 0, function* () {
                 return yield withFiles((files) => __awaiter(this, void 0, void 0, function* () {
                     var _a, _b;
-                    // Presigning a read of a path the store has no live object for — never
-                    // written, or deleted and now holding a tombstone — is a 404 on `/v0`
-                    // and an absent entry on the flush wire. Either is absence, which
-                    // `read()` reports as undefined, not a failure.
+                    // A path with no live object is absent, not a storage failure.
                     let presigned;
                     try {
                         presigned =
@@ -660,12 +575,8 @@ export function cursorHostedFiles(options = {}) {
                 const bodies = yield withFiles((files) => __awaiter(this, void 0, void 0, function* () {
                     var _a;
                     if (files.wire !== "flush") {
-                        // `/v0` presigns 404 the whole batch when any path is absent, so a
-                        // batched call cannot tell one missing key from a failed request.
-                        // Bounded per-key gets keep the `/v0` absence semantics exact; the
-                        // batch win belongs to the flush wire, whose contract is "an absent
-                        // path is an absent entry" — and whose per-deployment rate limiter
-                        // is the reason to spend fewer requests in the first place.
+                        // This transport cannot distinguish one missing key from a failed
+                        // batch, so preserve exact absence semantics with bounded reads.
                         return yield mapBounded([...keys], GET_MANY_DOWNLOAD_CONCURRENCY, (key) => __awaiter(this, void 0, void 0, function* () {
                             var _a, _b;
                             const presigned = yield storePost(options, files.path("/download"), { paths: [key] }).catch((error) => {
@@ -833,23 +744,11 @@ export function cursorHostedFiles(options = {}) {
     };
 }
 /**
- * Refuse a presigned URL that does not target this backend's agent-stores
- * bucket.
+ * Refuse an upload or download URL outside trusted storage hosts.
  *
- * The URL arrives from BCS over TLS, so this is defense in depth rather than
- * a live hole — but the engine pod can reach link-local metadata and other
- * allowlisted egress hosts, so a BCS bug or compromise returning a foreign
- * address would otherwise steer file bytes somewhere the caller never chose.
- * Same pin as the sibling sync client: production backends allow only the
- * agent-stores bucket hosts, playground its bucket, and a local dev backend
- * additionally admits loopback http for LocalStack.
- *
- * `CURSOR_HOSTED_FILES_DEV_PRESIGN_HOSTS` (comma-separated hostnames) admits
- * extra https hosts. A laptop backend hosting agents on a shared cluster
- * fronts its LocalStack with a public tunnel and exports this in the pod's
- * start script; production start scripts never set it. Read once at module
- * load, so authored agent code sharing this process cannot widen the list
- * by mutating `process.env` later.
+ * This prevents a malformed service response from redirecting file bytes to
+ * another reachable host. Development additions are fixed at process start
+ * so authored agent code cannot widen the allowlist.
  */
 function assertPresignedUrlSafe(options, raw) {
     let url;
@@ -874,11 +773,8 @@ function assertPresignedUrlSafe(options, raw) {
     return url.toString();
 }
 /**
- * The file store this engine's deployment owns. Every request names it, so
- * the server resolves the store row and this process never handles a store id.
- *
- * Fails loudly rather than defaulting: with no source id there is no store to
- * address, and writing somewhere else silently is worse than not writing.
+ * Resolve the deployment-scoped file store. A missing binding fails instead
+ * of silently writing to another location.
  */
 function resolveStoreSourceId(options) {
     var _a, _b;
@@ -893,11 +789,7 @@ const DEV_PRESIGN_HOSTS = new Set(((_a = process.env.CURSOR_HOSTED_FILES_DEV_PRE
     .split(",")
     .map(host => host.trim().toLowerCase())
     .filter(host => host.length > 0));
-/**
- * Public agent-serve-files API call. The pod credential is the whole authorization:
- * the API forwards this caller's identity to the store service, which checks it
- * against the store's live owner. There is no second, narrower credential.
- */
+/** Send a file request with the deployment pod credential. */
 function storePost(options, path, body) {
     return __awaiter(this, void 0, void 0, function* () {
         return yield postJson(options, `${resolveCursorApiBaseUrl(options)}${AGENT_SERVE_FILES_PATH}${path}`, body);
@@ -908,13 +800,7 @@ function storeGet(options, path) {
         return yield sendJson(options, `${resolveCursorApiBaseUrl(options)}${AGENT_SERVE_FILES_PATH}${path}`, "GET");
     });
 }
-/**
- * Factory store API call — same base URL and pod credential as
- * {@link storePost}, different path family. The server resolves the
- * deployment (and the addressed store role) from the credential. The
- * domain-call lane one path family deeper is NOT here: it belongs to the
- * store API client (`../internal/cursor/store-api-client.ts`).
- */
+/** Send a batched file request with the deployment pod credential. */
 function flushPost(options, path, body) {
     return __awaiter(this, void 0, void 0, function* () {
         return yield postJson(options, `${resolveCursorApiBaseUrl(options)}${AGENTSDK_STORE_PATH}${path}`, body);
@@ -968,7 +854,7 @@ function describeError(parsed, status) {
     }
     return `HTTP ${status}`;
 }
-/** S3 returns quoted etags; the store compares them unquoted. */
+/** Normalize quoted etags before comparison. */
 function normalizeEtag(raw) {
     if (raw === null) {
         return undefined;

package/dist/files.d.ts

@@ -77,7 +77,7 @@ export interface FileSink {
     }): Promise<FileSinkPutResult | void>;
     /**
      * Write several values in one round trip where the backend can (one
-     * presign call instead of one per key). Optional — callers fall back to
+     * request instead of one per key). Optional; callers fall back to
      * sequential {@link put}. Outcomes are settled per entry, index-aligned
      * with the input: one key's conflict or failure never rejects its batch
      * siblings. Per-key semantics (preconditions, conflict errors, etag
@@ -94,10 +94,10 @@ export interface FileSink {
     get(key: string): Promise<FileSinkBody | Uint8Array | undefined>;
     /**
      * Read several values in few round trips where the backend can (one
-     * presign call per batch instead of one per key). Optional — callers fall
+     * request per batch instead of one per key). Optional; callers fall
      * back to bounded per-key {@link get}. The result is index-aligned with
      * `keys`; a miss is `undefined`, matching {@link get}. Any transport or
-     * download failure rejects the whole call — a partial result is never
+     * download failure rejects the whole call; a partial result is never
      * returned, so a caller cannot mistake a failed batch for absence.
      */
     getMany?(keys: readonly string[]): Promise<Array<FileSinkBody | Uint8Array | undefined>>;
@@ -137,29 +137,14 @@ export declare const fileKeys: {
     readonly sessionPrefix: (agent: string, sessionId: string) => string;
 };
 /**
- * Public `/v0/agent-serve-files/:sourceId` alias for the caller's USER store.
- * Mirrors `AGENT_SERVE_USER_STORE_FILES_SOURCE_ID` in `@anysphere/constants`
- * (not a dependency of this published package).
+ * Stable identifier for the signed-in user's file store.
  */
 export declare const AGENT_SERVE_USER_STORE_FILES_SOURCE_ID = "user";
-/**
- * Store-root prefix for Agent Serve data on a USER store. Mirrors
- * `AGENT_SERVE_USER_STORE_KEY_PREFIX` in `@anysphere/constants`.
- */
+/** Store-root prefix for agent data in a user file store. */
 export declare const AGENT_SERVE_USER_STORE_KEY_PREFIX = "agent-serve";
 /**
- * Framework-owned keys for state that lives on the deployment's Agent Store
- * but is not author `host.files` data: artifact rows and payloads, authored
- * skills and workspace seeds synced for cloud turns, and the cross-session
- * memory journal. Kept out of `files/` so author listings never see
- * framework rows.
- *
- * Skills sit at store-root `skills/<name>/…` so exec-daemon's
- * `--agent-store-skills-dir` walk finds them the same way it finds user-store
- * skills. Workspace seeds sit at store-root `workspace/…` so the mount path
- * the first cloud prompt names stays short. Per-turn `workspaceFiles` sit at
- * `sessions/<sessionId>/workspace/…` on that same shared mount. Memory and
- * artifacts stay under {@link STORAGE_KEY_ROOT}.
+ * Framework-owned keys for artifacts, skills, workspace seeds, memory, and
+ * conversation checkpoints. They stay outside author `host.files` listings.
  */
 declare function createAgentStoreKeys(root: string): {
     readonly artifactRow: (agent: string, id: string) => string;
@@ -185,17 +170,9 @@ declare function createAgentStoreKeys(root: string): {
 export type AgentStoreKeys = ReturnType<typeof createAgentStoreKeys>;
 export declare const agentStoreKeys: AgentStoreKeys;
 export declare const agentSdkAgentStoreKeys: AgentStoreKeys;
-/**
- * Deployment store FUSE mount on cloud-runtime VMs. Mirrors
- * `AGENT_STORE_MOUNT_ROOT` / `AGENT_SERVE_DEPLOYMENT_STORE_MOUNT_NAME` in
- * `@anysphere/constants` (not a dependency of this published package).
- */
+/** Mounted path for deployment files when the host exposes one. */
 export declare const DEPLOYMENT_STORE_MOUNT_PATH = "/cursor/stores/deployment";
-/**
- * USER store FUSE mount on personal-key cloud-runtime VMs. Mirrors
- * `AGENT_STORE_MOUNT_ROOT` / `AGENT_STORE_USER_MOUNT_NAME` in
- * `@anysphere/constants`.
- */
+/** Mounted path for user files when the host exposes one. */
 export declare const USER_STORE_MOUNT_PATH = "/cursor/stores/user";
 /** Errors raised by the file surface. Thrown by sinks and by the framework. */
 export declare class FileConflictError extends Error {

package/dist/files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAQH,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;OAKG;IACH,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACpC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACrC;;;;;;;OAOG;IACH,OAAO,CAAC,CACN,OAAO,EAAE,KAAK,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,UAAU,CAAC;QACjB,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KACvC,CAAC,GACD,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,0CAA0C;IAC1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC,CAAC;IACjE;;;;;;;OAOG;IACH,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;IACzF,0CAA0C;IAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,4DAA4D;IAC5D,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/C,wFAAwF;IACxF,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACvD;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAMD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,QAAQ;aACnB,UAAU,UAAU,MAAM,QAAQ,MAAM,KAAG,MAAM;aAEjD,mBAAmB,UAAU,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAG,MAAM;aAE7E,OAAO,UAAU,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAG,MAAM;aAEjE,gBAAgB,UAAU,MAAM,KAAG,MAAM;aACzC,aAAa,UAAU,MAAM,aAAa,MAAM,KAAG,MAAM;CAEjD,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,SAAS,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,iCAAiC,gBAAgB,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AACH,iBAAS,oBAAoB,CAAC,IAAI,EAAE,MAAM;aAEtC,WAAW,UAAU,MAAM,MAAM,MAAM,KAAG,MAAM;aAEhD,iBAAiB,UAAU,MAAM,KAAG,MAAM;aAC1C,eAAe,UAAU,MAAM,MAAM,MAAM,KAAG,MAAM;aAEpD,SAAS,cAAc,MAAM,WAAW,MAAM,iBAAgB,MAAM,KAAe,MAAM;aAEzF,YAAY,QAAM,MAAM;IACxB,kGAAkG;aAClG,gBAAgB,UAAU,MAAM,KAAG,MAAM;aAEzC,aAAa,YAAY,MAAM,oBAAmB,MAAM,KAAkB,MAAM;aAEhF,eAAe,QAAM,MAAM;IAC3B,2EAA2E;aAC3E,mBAAmB,UAAU,MAAM,KAAG,MAAM;aAE5C,sBAAsB,cAAc,MAAM,KAAG,MAAM;IACnD,iFAAiF;aACjF,0BAA0B,UAAU,MAAM,aAAa,MAAM,KAAG,MAAM;aAEtE,SAAS,UAAU,MAAM,KAAG,MAAM;aAClC,aAAa,UAAU,MAAM,KAAG,MAAM;aACtC,oBAAoB,UAAU,MAAM,SAAS,MAAM,KAAG,MAAM;aAK5D,oBAAoB,UAAU,MAAM,cAAc,MAAM,KAAG,MAAM;aAEjE,gBAAgB,UAAU,MAAM,cAAc,MAAM,UAAU,MAAM,KAAG,MAAM;EAGhF;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,eAAO,MAAM,cAAc,EAAE,cAAuD,CAAC;AACrF,eAAO,MAAM,sBAAsB,EAAE,cACY,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,8BAA8B,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAE3D,+EAA+E;AAC/E,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,GAAG,EAAE,MAAM;IADtB,YACW,GAAG,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,EAcnD;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,sDAAsD;AACtD,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,sDAAsD;AACtD,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,4CAA4C;AAC5C,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAH3B,YACW,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAI1B;CACF"}
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAQH,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;OAKG;IACH,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACpC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACrC;;;;;;;OAOG;IACH,OAAO,CAAC,CACN,OAAO,EAAE,KAAK,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,UAAU,CAAC;QACjB,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KACvC,CAAC,GACD,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,0CAA0C;IAC1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC,CAAC;IACjE;;;;;;;OAOG;IACH,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;IACzF,0CAA0C;IAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,4DAA4D;IAC5D,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/C,wFAAwF;IACxF,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACvD;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAMD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,QAAQ;aACnB,UAAU,UAAU,MAAM,QAAQ,MAAM,KAAG,MAAM;aAEjD,mBAAmB,UAAU,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAG,MAAM;aAE7E,OAAO,UAAU,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAG,MAAM;aAEjE,gBAAgB,UAAU,MAAM,KAAG,MAAM;aACzC,aAAa,UAAU,MAAM,aAAa,MAAM,KAAG,MAAM;CAEjD,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,sCAAsC,SAAS,CAAC;AAE7D,6DAA6D;AAC7D,eAAO,MAAM,iCAAiC,gBAAgB,CAAC;AAE/D;;;GAGG;AACH,iBAAS,oBAAoB,CAAC,IAAI,EAAE,MAAM;aAEtC,WAAW,UAAU,MAAM,MAAM,MAAM,KAAG,MAAM;aAEhD,iBAAiB,UAAU,MAAM,KAAG,MAAM;aAC1C,eAAe,UAAU,MAAM,MAAM,MAAM,KAAG,MAAM;aAEpD,SAAS,cAAc,MAAM,WAAW,MAAM,iBAAgB,MAAM,KAAe,MAAM;aAEzF,YAAY,QAAM,MAAM;IACxB,kGAAkG;aAClG,gBAAgB,UAAU,MAAM,KAAG,MAAM;aAEzC,aAAa,YAAY,MAAM,oBAAmB,MAAM,KAAkB,MAAM;aAEhF,eAAe,QAAM,MAAM;IAC3B,2EAA2E;aAC3E,mBAAmB,UAAU,MAAM,KAAG,MAAM;aAE5C,sBAAsB,cAAc,MAAM,KAAG,MAAM;IACnD,iFAAiF;aACjF,0BAA0B,UAAU,MAAM,aAAa,MAAM,KAAG,MAAM;aAEtE,SAAS,UAAU,MAAM,KAAG,MAAM;aAClC,aAAa,UAAU,MAAM,KAAG,MAAM;aACtC,oBAAoB,UAAU,MAAM,SAAS,MAAM,KAAG,MAAM;aAG5D,oBAAoB,UAAU,MAAM,cAAc,MAAM,KAAG,MAAM;aAEjE,gBAAgB,UAAU,MAAM,cAAc,MAAM,UAAU,MAAM,KAAG,MAAM;EAGhF;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,eAAO,MAAM,cAAc,EAAE,cAAuD,CAAC;AACrF,eAAO,MAAM,sBAAsB,EAAE,cACY,CAAC;AAElD,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,8BAA8B,CAAC;AAEvE,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAE3D,+EAA+E;AAC/E,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,GAAG,EAAE,MAAM;IADtB,YACW,GAAG,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,EAcnD;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,sDAAsD;AACtD,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,sDAAsD;AACtD,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,4CAA4C;AAC5C,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAH3B,YACW,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAI1B;CACF"}

package/dist/files.js

@@ -48,29 +48,14 @@ export const fileKeys = {
     sessionPrefix: (agent, sessionId) => `${STORAGE_KEY_ROOT}/${agent}/files/sessions/${sessionId}/`,
 };
 /**
- * Public `/v0/agent-serve-files/:sourceId` alias for the caller's USER store.
- * Mirrors `AGENT_SERVE_USER_STORE_FILES_SOURCE_ID` in `@anysphere/constants`
- * (not a dependency of this published package).
+ * Stable identifier for the signed-in user's file store.
  */
 export const AGENT_SERVE_USER_STORE_FILES_SOURCE_ID = "user";
-/**
- * Store-root prefix for Agent Serve data on a USER store. Mirrors
- * `AGENT_SERVE_USER_STORE_KEY_PREFIX` in `@anysphere/constants`.
- */
+/** Store-root prefix for agent data in a user file store. */
 export const AGENT_SERVE_USER_STORE_KEY_PREFIX = "agent-serve";
 /**
- * Framework-owned keys for state that lives on the deployment's Agent Store
- * but is not author `host.files` data: artifact rows and payloads, authored
- * skills and workspace seeds synced for cloud turns, and the cross-session
- * memory journal. Kept out of `files/` so author listings never see
- * framework rows.
- *
- * Skills sit at store-root `skills/<name>/…` so exec-daemon's
- * `--agent-store-skills-dir` walk finds them the same way it finds user-store
- * skills. Workspace seeds sit at store-root `workspace/…` so the mount path
- * the first cloud prompt names stays short. Per-turn `workspaceFiles` sit at
- * `sessions/<sessionId>/workspace/…` on that same shared mount. Memory and
- * artifacts stay under {@link STORAGE_KEY_ROOT}.
+ * Framework-owned keys for artifacts, skills, workspace seeds, memory, and
+ * conversation checkpoints. They stay outside author `host.files` listings.
  */
 function createAgentStoreKeys(root) {
     return {
@@ -91,26 +76,16 @@ function createAgentStoreKeys(root) {
         memoryDir: (agent) => `${root}/${agent}/memory`,
         memoryJournal: (agent) => `${root}/${agent}/memory/journal.jsonl`,
         memoryJournalRotated: (agent, stamp) => `${root}/${agent}/memory/journal-${stamp}.jsonl`,
-        // SDK conversation mirror (the runner's SQLite store, exported through the
-        // store APIs): one manifest per SDK agent id plus its content-addressed
-        // checkpoint blobs. See internal/conversation-mirror.ts.
+        // One conversation manifest plus its content-addressed checkpoint blobs.
         conversationManifest: (agent, sdkAgentId) => `${root}/${agent}/conversations/${encodeURIComponent(sdkAgentId)}/manifest.json`,
         conversationBlob: (agent, sdkAgentId, blobId) => `${root}/${agent}/conversations/${encodeURIComponent(sdkAgentId)}/blobs/${encodeURIComponent(blobId)}`,
     };
 }
 export const agentStoreKeys = createAgentStoreKeys(STORAGE_KEY_ROOT);
 export const agentSdkAgentStoreKeys = createAgentStoreKeys(AGENTSDK_STORAGE_KEY_ROOT);
-/**
- * Deployment store FUSE mount on cloud-runtime VMs. Mirrors
- * `AGENT_STORE_MOUNT_ROOT` / `AGENT_SERVE_DEPLOYMENT_STORE_MOUNT_NAME` in
- * `@anysphere/constants` (not a dependency of this published package).
- */
+/** Mounted path for deployment files when the host exposes one. */
 export const DEPLOYMENT_STORE_MOUNT_PATH = "/cursor/stores/deployment";
-/**
- * USER store FUSE mount on personal-key cloud-runtime VMs. Mirrors
- * `AGENT_STORE_MOUNT_ROOT` / `AGENT_STORE_USER_MOUNT_NAME` in
- * `@anysphere/constants`.
- */
+/** Mounted path for user files when the host exposes one. */
 export const USER_STORE_MOUNT_PATH = "/cursor/stores/user";
 /** Errors raised by the file surface. Thrown by sinks and by the framework. */
 export class FileConflictError extends Error {

package/dist/internal/artifacts-store.d.ts

@@ -2,10 +2,8 @@
  * Durable artifact rows and payloads behind `ctx.artifacts`
  * ({@link ArtifactsApi}).
  *
- * On Cursor-managed hosting rows and file payloads live on the deployment's
- * Agent Store (the same store behind `ctx.host.files`, so they survive
- * deploys and are visible on cloud VMs under the store mount); otherwise
- * they land under `--state-root/artifacts` on local disk.
+ * Cursor-managed hosting preserves artifacts across deployment replacement.
+ * Self-hosted agents store them under `--state-root/artifacts`.
  */
 import { type FileSink } from "../files.js";
 import type { ArtifactListFilter, ArtifactPage, ArtifactPageOptions, ArtifactRecord, ArtifactsConfig, ArtifactTagInput } from "../types.js";
@@ -22,8 +20,8 @@ export interface CreateArtifactsStoreOptions {
     sink?: FileSink;
     /**
      * Whether `tag` enforces {@link ArtifactsConfig.max} by listing and
-     * deleting. Default true. Hosted architecture v2 passes false: the
-     * installation store is allowed to grow, and a tag must not list the prefix.
+     * deleting. Default true. Managed architecture v2 passes false so tagging
+     * never performs a full artifact listing.
      */
     enforceCap?: () => boolean;
 }
@@ -60,7 +58,7 @@ export declare class ArtifactsStore {
     list(filter?: ArtifactListFilter): Promise<ArtifactRecord[]>;
     /**
      * Bounded cursor pagination, newest-updated first. On a store whose
-     * listing tracks mtimes (the hosted Agent Store), a page hydrates only
+     * listing tracks mtimes, a page hydrates only
      * the rows it examines — roughly `limit` bodies, never the whole store.
      * Row-body order is the listing's mtime order (upserts rewrite the row,
      * so mtime tracks `updatedAt`; same argument as eviction). The
@@ -68,15 +66,15 @@ export declare class ArtifactsStore {
      * exactly by `updatedAt`.
      *
      * `matches` is a host-side *visibility* predicate composed with the
-     * public filter — the engine passes session-ownership through it. Its
+     * public filter. The engine passes session ownership through it. Its
      * presence forces the exact hydrated lane: the metadata lane's cursor
-     * and its short-page continuation are derived from every row in the
-     * store, and handing them to a caller who may not see every row is a
+     * and short-page continuation include hidden records. Returning them to a
+     * caller who cannot see those records would create a
      * side channel (existence, count within the scan budget, boundary
      * mtimes and cohort depths of hidden rows) that the pre-pagination
      * filtered list never had. The exact lane's cursor names only a record
      * the caller received, and continues only while more *visible* records
-     * remain — at the pre-pagination cost (hydrate all rows, bounded).
+     * remain, at the bounded cost of hydrating the full set.
      */
     page(options?: ArtifactPageOptions & {
         matches?: (record: ArtifactRecord) => boolean;
@@ -106,21 +104,11 @@ export declare class ArtifactsStore {
     /**
      * Trim toward the retention cap from listing metadata alone. Past the
      * cap this runs on every new-row insert, so it must not hydrate row
-     * bodies: on the Agent Store that is one read per row (~`max` reads per
-     * insert, forever, since eviction trims right back to the cap) — the
-     * 2026-09-18 read storm on the security-reviewer deployment. The store
-     * listing carries last-modified metadata, and a row is rewritten on
-     * every upsert, so listing mtime orders rows the same way their
-     * `updatedAt` does.
+     * bodies. The listing carries last-modified metadata, and each upsert
+     * rewrites its row, so listing mtime orders rows like `updatedAt`.
      *
-     * Deletes are capped per pass: eviction runs inside `tag()`'s per-pod
-     * chain, so its wall time is tag latency for every queued caller. A
-     * store far past the cap (evictions failed during the 2026-09-19 read
-     * throttling and the backlog grew unchecked) must drain amortized
-     * across inserts, not wedge one insert deleting the whole backlog — on
-     * 2026-09-20 an uncapped pass held security-reviewer tags for hours and
-     * tripled review stage durations. Steady state (excess of 1) is
-     * unaffected.
+     * Deletes are capped per pass so a store far past the cap drains across
+     * inserts instead of delaying one insert for the entire backlog.
      */
     private evictPastCap;
     /** The `excess` oldest row ids, cheapest available ordering first. */

package/dist/internal/artifacts-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-store.d.ts","sourceRoot":"","sources":["../../src/internal/artifacts-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAK5D,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,gBAAgB,EAEjB,MAAM,aAAa,CAAC;AAGrB,2EAA2E;AAC3E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAqE9C,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC;CAC5B;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAuC;IAEvD,YAAY,OAAO,EAAE,2BAA2B,EAY/C;IAED,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAIpD;YAEa,aAAa;IA0C3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAEnD;IAED,sEAAsE;IACtE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAEtD;IAED;;;;OAIG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGjE;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACG,IAAI,CACR,OAAO,CAAC,EAAE,mBAAmB,GAAG;QAC9B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC;KAC/C,GACA,OAAO,CAAC,YAAY,CAAC,CAyBvB;IAED;;;;;OAKG;YACW,gBAAgB;IA0F9B;;;;;;OAMG;YACW,eAAe;IAmC7B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IA8B1B;;;;;;;;;;;;;;;;;;OAkBG;YACW,YAAY;IAkB1B,sEAAsE;YACxD,YAAY;CAsB3B;AAED,kEAAkE;AAClE,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,cAGC;CACF;AAyDD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKpD"}
+{"version":3,"file":"artifacts-store.d.ts","sourceRoot":"","sources":["../../src/internal/artifacts-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAK5D,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,gBAAgB,EAEjB,MAAM,aAAa,CAAC;AAGrB,2EAA2E;AAC3E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AA4D9C,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC;CAC5B;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAuC;IAEvD,YAAY,OAAO,EAAE,2BAA2B,EAY/C;IAED,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAIpD;YAEa,aAAa;IA0C3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAEnD;IAED,sEAAsE;IACtE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAEtD;IAED;;;;OAIG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGjE;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACG,IAAI,CACR,OAAO,CAAC,EAAE,mBAAmB,GAAG;QAC9B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC;KAC/C,GACA,OAAO,CAAC,YAAY,CAAC,CAyBvB;IAED;;;;;OAKG;YACW,gBAAgB;IAyF9B;;;;;;OAMG;YACW,eAAe;IAmC7B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IA8B1B;;;;;;;;OAQG;YACW,YAAY;IAkB1B,sEAAsE;YACxD,YAAY;CAqB3B;AAED,kEAAkE;AAClE,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,cAGC;CACF;AAyDD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKpD"}