@fevex/core 0.1.0-alpha.3 → 0.1.0-alpha.5

package/README.md

@@ -568,6 +568,31 @@ Hosts pass authenticated `ExecutionContext` separately to `handler(request,
 SSE response never cancels its run. Cancellation is explicit through
 `client.cancelRun(run.id)`.
 
+Artifacts use the same handler:
+
+```ts
+const handler = createFevexHttpHandler({
+  fevex: app,
+  artifacts: artifactStore,       // FileSystemArtifactStore or S3ArtifactStore
+  artifactCatalog: artifactCatalog, // optional; enables listing by run
+  authorizeArtifact(access) {
+    return access.context?.actor?.id === 'alice';
+  },
+});
+```
+
+Routes:
+
+- `GET /v1/artifacts/:id` streams the bytes with `content-type`,
+  `content-length`, `content-disposition`, `etag` and artifact headers.
+- `HEAD /v1/artifacts/:id` returns the same metadata without a body.
+- `DELETE /v1/artifacts/:id` deletes bytes and catalog metadata.
+- `GET /v1/runs/:runId/artifacts?limit=100` lists descriptors for a run.
+
+The client exposes `getArtifact`, `listArtifacts` and `deleteArtifact`. Keep the
+bucket private; the handler authorizes the request and streams the bytes, or a
+host can use the descriptor to mint a short-lived signed URL.
+
 ## Approvals and durable runs
 
 Tools can declare risk, approval, idempotency, retries and credential names.
@@ -652,6 +677,28 @@ underlying work. External systems must enforce the supplied idempotency key to
 make keyed retries safe. Repeated tool call IDs are rejected within a run before
 Fevex repeats an effect.
 
+### Deadlines, admission and retention
+
+Set `deadlineMs` on a run request to cap wall-clock time. An expired deadline
+cancels the run with `run.cancelled` reason `timeout`; resuming or recovering
+after the absolute deadline persists that cancellation instead of continuing.
+
+`createFevex({ admission })` limits concurrent top-level runs globally or per
+tenant. The default tenant key is a non-empty `context.attributes.tenantId`;
+`tenantKey` and `authorize` support host-specific quotas. Counts are local to
+one runtime process.
+
+`createFevex({ limits: { maxEventsPerRun } })` caps non-control events per run.
+Pause, resume, approval, elicitation, wait and terminal events are always
+persisted so a run can always reach a durable state; use retention for a total
+storage cap.
+
+Terminal runs can be purged with `app.purgeRuns({ before, statuses, limit })`.
+SQLite and PostgreSQL implement the retention capability; custom stores can add
+`purgeRuns` to opt in. The API deletes only terminal runs and sessions left
+without runs; active work is untouched. Artifact retention and per-event payload
+byte limits remain host policies.
+
 ## Observability
 
 Add trace exporters to the application configuration; agent definitions stay
@@ -871,12 +918,128 @@ Context providers are lazy per run. Memory is a replaceable store; the built-in
 store is in-memory substring search, not embeddings, vector search or durable
 storage.
 
+## Artifacts
+
+`@fevex/core/artifacts` stores large or binary outputs as references. Runs,
+events and prompts carry an `ArtifactDescriptor`; bytes stay in an
+`ArtifactStore`.
+
+```ts
+import {
+  FileSystemArtifactStore,
+  InMemoryArtifactStore,
+  S3ArtifactStore,
+  type S3ObjectClient,
+} from '@fevex/core/artifacts';
+
+const artifacts = new FileSystemArtifactStore({
+  rootDir: '.fevex/artifacts',
+  maxBytes: 10 * 1024 * 1024,
+});
+
+const descriptor = await artifacts.put(
+  {
+    filename: 'report.pdf',
+    mimeType: 'application/pdf',
+    bytes,
+  },
+  { tenantId: 'acme', runId: 'run-1' },
+);
+
+const stored = await artifacts.get(descriptor.artifactId, { tenantId: 'acme' });
+```
+
+Use `InMemoryArtifactStore` for tests. For S3, R2, MinIO or another
+S3-compatible service, wrap its SDK with the small `S3ObjectClient` interface;
+Fevex does not ship an object-storage SDK:
+
+```ts
+const client: S3ObjectClient = {
+  async putObject({ key, body, contentType }) {
+    await s3.send(new PutObjectCommand({
+      Bucket,
+      Key: key,
+      Body: body,
+      ContentType: contentType,
+    }));
+  },
+  async getObject({ key }) {
+    try {
+      const result = await s3.send(new GetObjectCommand({ Bucket, Key: key }));
+      return new Uint8Array(await result.Body!.transformToByteArray());
+    } catch (error) {
+      if ((error as { name?: string }).name === 'NoSuchKey') return null;
+      throw error;
+    }
+  },
+  async deleteObject({ key }) {
+    await s3.send(new DeleteObjectCommand({ Bucket, Key: key }));
+  },
+};
+
+const artifacts = new S3ArtifactStore({ client, prefix: 'fevex' });
+```
+
+The bucket should stay private. The host authorizes the actor and serves a
+short-lived signed URL or streams the bytes; do not expose bucket URLs to the
+model. This subpath is local-first: use the filesystem store for development and
+single-node deployments, and the S3-compatible store for multi-instance
+production.
+
+For a queryable metadata index, compose the byte store with a catalog:
+
+```ts
+import { CatalogedArtifactStore, FileSystemArtifactStore } from '@fevex/core/artifacts';
+import { createSQLiteArtifactCatalog } from '@fevex/sqlite';
+
+const catalog = createSQLiteArtifactCatalog({ filename: '.fevex/artifacts.db' });
+const artifacts = new CatalogedArtifactStore({
+  store: new FileSystemArtifactStore({ rootDir: '.fevex/artifacts' }),
+  catalog,
+});
+
+const records = await artifacts.list({ runId: 'run-1' }, { tenantId: 'acme' });
+await artifacts.deleteByRun('run-1', { tenantId: 'acme' });
+```
+
+`@fevex/postgres` exposes the same catalog contract with
+`createPostgresArtifactCatalog`. The catalog stores only metadata; bytes stay in
+the filesystem or object storage.
+
+Pass the store to `createFevex` to expose it to tools as `context.artifacts`:
+
+```ts
+const save = defineTool({
+  name: 'save_report',
+  async execute(_input, context) {
+    return context.artifacts!.put({
+      filename: 'report.txt',
+      mimeType: 'text/plain',
+      bytes: new TextEncoder().encode('report'),
+    });
+  },
+});
+
+createFevex({
+  models,
+  agents,
+  tools: [save],
+  artifacts,
+});
+```
+
+The runtime injects `runId`, `sessionId`, tenant and actor into every artifact
+call. Each successful `put` emits `artifact.created` with the descriptor before
+`tool.completed`; a tool that writes and then fails still leaves the event and
+the artifact available.
+
 ## Public Exports
 
 | Import | Purpose |
 | --- | --- |
 | `@fevex/core` | Common runtime, definitions and contracts |
 | `@fevex/core/agents` | Agent definitions |
+| `@fevex/core/artifacts` | Artifact descriptors, local stores and S3-compatible adapter |
 | `@fevex/core/channels` | Channel adapters and message handling |
 | `@fevex/core/knowledge` | Context providers, skills and memory contracts |
 | `@fevex/core/models` | Provider-neutral model contracts |
@@ -959,5 +1122,23 @@ limit for the initial SSE read and every subsequent read. Full pages drain
 without the polling delay; short pages wait for `pollIntervalMs`. Stream demand
 controls progress, so a slow consumer retains at most one page plus the stream's
 single queued frame, rather than buffering the run's entire history. Disconnecting
-cancels polling. This bounds event counts, not the byte size of an individual event;
-per-event payload limits and data retention remain host responsibilities.
+cancels polling. `maxConnections` caps concurrent SSE streams. This bounds event
+counts, not the byte size of an individual event; per-event payload limits remain
+host responsibilities. Use `purgeRuns` for configurable retention of terminal
+runs.
+
+### Run model identity
+
+Agent runs retain the effective `modelName` and a `modelMetadata` snapshot when
+the gateway supplies metadata. Traces and cost calculators use this identity,
+including per-request model overrides, after terminal checkpoint cleanup and
+across pause/resume. These fields are optional for older stored runs; resuming
+an older run fills them from its checkpoint's resolved model.
+
+### Local sandbox limits
+
+The local development sandbox sends `SIGTERM` on timeout or cancellation, then
+`SIGKILL` after 100 ms if the process has not closed. Cancellation rejects with
+the caller's reason after process cleanup. Output limits apply separately to
+stdout and stderr in UTF-8 bytes, omitting an incomplete trailing character.
+This subprocess control does not provide operating-system isolation.

package/dist/agents/index.d.mts

@@ -1,2 +1,2 @@
-import { n as AgentLimits, r as defineAgent, t as AgentDefinition } from "../index-Dx_LotWZ.mjs";
+import { n as AgentLimits, r as defineAgent, t as AgentDefinition } from "../index-CGmHXV31.mjs";
 export { AgentDefinition, AgentLimits, defineAgent };

package/dist/artifacts/index.d.mts

@@ -0,0 +1,2 @@
+import { A as ArtifactError, C as FileSystemArtifactStore, D as ArtifactCatalog, E as CatalogedArtifactStoreOptions, F as ArtifactStore, I as ArtifactStoreContext, L as ArtifactWrite, M as ArtifactId, N as ArtifactQuery, O as ArtifactContent, P as ArtifactRecord, R as artifactTenantId, S as InMemoryArtifactCatalog, T as CatalogedArtifactStore, _ as S3ArtifactStore, b as InMemoryArtifactStore, j as ArtifactErrorCode, k as ArtifactDescriptor, v as S3ArtifactStoreOptions, w as FileSystemArtifactStoreOptions, x as InMemoryArtifactStoreOptions, y as S3ObjectClient, z as assertArtifactId } from "../types-BDVUoAU6.mjs";
+export { ArtifactCatalog, ArtifactContent, ArtifactDescriptor, ArtifactError, ArtifactErrorCode, ArtifactId, ArtifactQuery, ArtifactRecord, ArtifactStore, ArtifactStoreContext, ArtifactWrite, CatalogedArtifactStore, CatalogedArtifactStoreOptions, FileSystemArtifactStore, FileSystemArtifactStoreOptions, InMemoryArtifactCatalog, InMemoryArtifactStore, InMemoryArtifactStoreOptions, S3ArtifactStore, S3ArtifactStoreOptions, S3ObjectClient, artifactTenantId, assertArtifactId };

package/dist/artifacts/index.mjs

@@ -0,0 +1,2 @@
+import { a as CatalogedArtifactStore, c as assertArtifactId, i as FileSystemArtifactStore, n as InMemoryArtifactStore, o as ArtifactError, r as InMemoryArtifactCatalog, s as artifactTenantId, t as S3ArtifactStore } from "../artifacts-gUzemET7.mjs";
+export { ArtifactError, CatalogedArtifactStore, FileSystemArtifactStore, InMemoryArtifactCatalog, InMemoryArtifactStore, S3ArtifactStore, artifactTenantId, assertArtifactId };

package/dist/artifacts-gUzemET7.mjs

@@ -0,0 +1,440 @@
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+//#region src/artifacts/artifacts.ts
+var ArtifactError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.name = "ArtifactError";
+		this.code = code;
+	}
+};
+const TENANT_PATTERN = /^[A-Za-z0-9._-]{1,128}$/u;
+const ARTIFACT_ID_PATTERN = /^[A-Za-z0-9_-]{8,128}$/u;
+/** Resolves and validates the tenant scope used by stores and catalogs. */
+function artifactTenantId(context) {
+	const tenantId = context?.tenantId ?? "default";
+	if (typeof tenantId !== "string" || !TENANT_PATTERN.test(tenantId) || tenantId === "." || tenantId === "..") throw new ArtifactError("ARTIFACT_INVALID_CONTEXT", "Artifact tenantId must contain only letters, numbers, dot, underscore or hyphen");
+	return tenantId;
+}
+/** Validates an artifact id before using it in a query or storage key. */
+function assertArtifactId(artifactId) {
+	if (typeof artifactId !== "string" || !ARTIFACT_ID_PATTERN.test(artifactId)) throw new ArtifactError("ARTIFACT_INVALID_ID", "Artifact id is not valid");
+}
+//#endregion
+//#region src/artifacts/internal.ts
+const DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
+const MIME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*$/;
+function resolveLimits(options = {}) {
+	const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+	if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact maxBytes must be a non-negative integer");
+	if (options.retentionMs !== void 0 && (!Number.isFinite(options.retentionMs) || options.retentionMs < 0)) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact retentionMs must be a non-negative number");
+	return {
+		...options,
+		maxBytes
+	};
+}
+function assertArtifactWrite(input, limits) {
+	if (!input || typeof input !== "object") throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact write input must be an object");
+	if (typeof input.filename !== "string" || input.filename.trim().length === 0 || input.filename.length > 255 || /[\\/\0]/u.test(input.filename)) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact filename must be a non-empty display name without path separators");
+	if (typeof input.mimeType !== "string" || !MIME_PATTERN.test(input.mimeType)) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact mimeType must be a valid MIME type");
+	if (!(input.bytes instanceof Uint8Array)) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact bytes must be a Uint8Array");
+	if (input.bytes.byteLength > (limits.maxBytes ?? DEFAULT_MAX_BYTES)) throw new ArtifactError("ARTIFACT_TOO_LARGE", `Artifact exceeds the ${limits.maxBytes ?? DEFAULT_MAX_BYTES} byte limit`);
+	if (limits.allowedMimeTypes !== void 0 && !limits.allowedMimeTypes.some((mimeType) => mimeType.toLowerCase() === input.mimeType.toLowerCase())) throw new ArtifactError("ARTIFACT_MIME_UNSUPPORTED", `Artifact MIME type "${input.mimeType}" is not allowed`);
+	if (input.expiresAt !== void 0 && Number.isNaN(Date.parse(input.expiresAt))) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact expiresAt must be a valid ISO date");
+	if (input.metadata !== void 0 && !isJsonObject(input.metadata)) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact metadata must be a JSON object");
+}
+function createDescriptor(input, limits) {
+	const artifactId = randomUUID();
+	const createdAt = (/* @__PURE__ */ new Date()).toISOString();
+	const expiresAt = input.expiresAt ?? (limits.retentionMs === void 0 ? void 0 : new Date(Date.now() + limits.retentionMs).toISOString());
+	return {
+		artifactId,
+		uri: `artifact://${artifactId}`,
+		filename: input.filename,
+		mimeType: input.mimeType,
+		size: input.bytes.byteLength,
+		sha256: createHash("sha256").update(input.bytes).digest("hex"),
+		createdAt,
+		...expiresAt === void 0 ? {} : { expiresAt },
+		...input.metadata === void 0 ? {} : { metadata: structuredClone(input.metadata) }
+	};
+}
+function assertNotAborted(context) {
+	context?.signal?.throwIfAborted();
+}
+function isExpired$1(descriptor) {
+	return descriptor.expiresAt !== void 0 && Date.parse(descriptor.expiresAt) <= Date.now();
+}
+function copyBytes(bytes) {
+	return new Uint8Array(bytes);
+}
+function parseDescriptor(value) {
+	let parsed;
+	try {
+		parsed = JSON.parse(value);
+	} catch {
+		throw new ArtifactError("ARTIFACT_CORRUPT", "Artifact metadata is not valid JSON");
+	}
+	if (!isJsonObject(parsed) || typeof parsed.artifactId !== "string" || typeof parsed.uri !== "string" || typeof parsed.filename !== "string" || typeof parsed.mimeType !== "string" || typeof parsed.size !== "number" || typeof parsed.sha256 !== "string" || typeof parsed.createdAt !== "string") throw new ArtifactError("ARTIFACT_CORRUPT", "Artifact metadata is malformed");
+	return parsed;
+}
+function isJsonObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//#endregion
+//#region src/artifacts/cataloged-artifact-store.ts
+/**
+* Composes a byte store with a queryable metadata catalog.
+*
+* `put` writes bytes first and then indexes metadata. If indexing fails, the
+* bytes are deleted so the catalog never points at a half-written artifact.
+*/
+var CatalogedArtifactStore = class {
+	#store;
+	#catalog;
+	constructor(options) {
+		this.#store = options.store;
+		this.#catalog = options.catalog;
+	}
+	async put(input, context) {
+		const descriptor = await this.#store.put(input, context);
+		try {
+			await this.#catalog.save(this.#record(descriptor, context), context);
+		} catch (error) {
+			await this.#store.delete?.(descriptor.artifactId, context);
+			throw error;
+		}
+		return descriptor;
+	}
+	async get(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		if (!await this.#catalog.get(artifactId, context)) return null;
+		const content = await this.#store.get(artifactId, context);
+		if (!content) throw new ArtifactError("ARTIFACT_CORRUPT", `Artifact "${artifactId}" is indexed but its bytes are missing`);
+		return content;
+	}
+	async head(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		return (await this.#catalog.get(artifactId, context))?.descriptor ?? null;
+	}
+	async delete(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const existed = await this.#catalog.get(artifactId, context) !== null;
+		await this.#catalog.delete(artifactId, context);
+		await this.#store.delete?.(artifactId, context);
+		return existed;
+	}
+	async list(query = {}, context) {
+		assertNotAborted(context);
+		return this.#catalog.list(query, context);
+	}
+	async deleteByRun(runId, context) {
+		assertNotAborted(context);
+		if (typeof runId !== "string" || runId.length === 0) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact runId must be non-empty");
+		let deleted = 0;
+		for (;;) {
+			const records = await this.#catalog.list({
+				runId,
+				includeExpired: true,
+				limit: 100
+			}, context);
+			if (records.length === 0) break;
+			for (const record of records) {
+				await this.delete(record.descriptor.artifactId, context);
+				deleted += 1;
+			}
+		}
+		return deleted;
+	}
+	#record(descriptor, context) {
+		return {
+			descriptor,
+			tenantId: artifactTenantId(context),
+			...context?.runId === void 0 ? {} : { runId: context.runId },
+			...context?.sessionId === void 0 ? {} : { sessionId: context.sessionId },
+			...context?.actor?.id === void 0 ? {} : { actorId: context.actor.id }
+		};
+	}
+};
+//#endregion
+//#region src/artifacts/file-system-artifact-store.ts
+/**
+* Local filesystem artifact store.
+*
+* Layout:
+*   <rootDir>/tenants/<tenantId>/artifacts/<artifactId>
+*   <rootDir>/tenants/<tenantId>/artifacts/<artifactId>.json
+*
+* Bytes are written before metadata, and both use an atomic rename. This is
+* intended for local development and single-node deployments; use
+* `S3ArtifactStore` for multi-instance production.
+*/
+var FileSystemArtifactStore = class {
+	#rootDir;
+	#limits;
+	constructor(options) {
+		if (typeof options.rootDir !== "string" || !options.rootDir.trim()) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact rootDir must be non-empty");
+		this.#rootDir = resolve(options.rootDir);
+		this.#limits = resolveLimits(options);
+	}
+	async put(input, context) {
+		assertNotAborted(context);
+		assertArtifactWrite(input, this.#limits);
+		const tenantId = artifactTenantId(context);
+		const descriptor = createDescriptor(input, this.#limits);
+		const dataPath = this.#dataPath(tenantId, descriptor.artifactId);
+		const metadataPath = `${dataPath}.json`;
+		await mkdir(join(this.#rootDir, "tenants", tenantId, "artifacts"), { recursive: true });
+		await writeAtomic(dataPath, input.bytes);
+		try {
+			await writeAtomic(metadataPath, JSON.stringify(descriptor));
+		} catch (error) {
+			await remove(dataPath);
+			throw error;
+		}
+		return structuredClone(descriptor);
+	}
+	async get(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const descriptor = await this.#readDescriptor(artifactTenantId(context), artifactId);
+		if (!descriptor || isExpired$1(descriptor)) return null;
+		try {
+			return {
+				descriptor,
+				bytes: copyBytes(await readFile(this.#dataPath(artifactTenantId(context), artifactId)))
+			};
+		} catch (error) {
+			if (isNotFound(error)) return null;
+			throw error;
+		}
+	}
+	async head(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const descriptor = await this.#readDescriptor(artifactTenantId(context), artifactId);
+		return descriptor && !isExpired$1(descriptor) ? descriptor : null;
+	}
+	async delete(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const tenantId = artifactTenantId(context);
+		const dataPath = this.#dataPath(tenantId, artifactId);
+		const existed = await this.#readDescriptor(tenantId, artifactId) !== null;
+		await remove(dataPath);
+		await remove(`${dataPath}.json`);
+		return existed;
+	}
+	async #readDescriptor(tenantId, artifactId) {
+		try {
+			return parseDescriptor(await readFile(`${this.#dataPath(tenantId, artifactId)}.json`, "utf8"));
+		} catch (error) {
+			if (isNotFound(error)) return null;
+			throw error;
+		}
+	}
+	#dataPath(tenantId, artifactId) {
+		return join(this.#rootDir, "tenants", tenantId, "artifacts", artifactId);
+	}
+};
+async function writeAtomic(path, data) {
+	const temporary = `${path}.${randomUUID()}.tmp`;
+	try {
+		await writeFile(temporary, data);
+		await rename(temporary, path);
+	} catch (error) {
+		await remove(temporary);
+		throw error;
+	}
+}
+async function remove(path) {
+	try {
+		await unlink(path);
+	} catch (error) {
+		if (!isNotFound(error)) throw error;
+	}
+}
+function isNotFound(error) {
+	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+}
+//#endregion
+//#region src/artifacts/in-memory-artifact-catalog.ts
+/** Volatile artifact metadata catalog for tests and local development. */
+var InMemoryArtifactCatalog = class {
+	#records = /* @__PURE__ */ new Map();
+	async save(record, context) {
+		const tenantId = artifactTenantId(context);
+		if (record.tenantId !== tenantId) throw new ArtifactError("ARTIFACT_INVALID_CONTEXT", "Artifact record tenant does not match the store context");
+		assertArtifactId(record.descriptor.artifactId);
+		this.#records.set(key$1(tenantId, record.descriptor.artifactId), structuredClone(record));
+	}
+	async get(artifactId, context) {
+		assertArtifactId(artifactId);
+		const record = this.#records.get(key$1(artifactTenantId(context), artifactId));
+		return record && !isExpired(record) ? structuredClone(record) : null;
+	}
+	async list(query = {}, context) {
+		const tenantId = artifactTenantId(context);
+		const limit = query.limit ?? 100;
+		if (!Number.isSafeInteger(limit) || limit < 1) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact query limit must be a positive integer");
+		return [...this.#records.values()].filter((record) => record.tenantId === tenantId && (query.includeExpired || !isExpired(record)) && (query.runId === void 0 || record.runId === query.runId) && (query.sessionId === void 0 || record.sessionId === query.sessionId) && (query.actorId === void 0 || record.actorId === query.actorId) && (query.mimeType === void 0 || record.descriptor.mimeType === query.mimeType)).sort((left, right) => right.descriptor.createdAt.localeCompare(left.descriptor.createdAt) || right.descriptor.artifactId.localeCompare(left.descriptor.artifactId)).slice(0, Math.min(limit, 1e3)).map((record) => structuredClone(record));
+	}
+	async delete(artifactId, context) {
+		assertArtifactId(artifactId);
+		return this.#records.delete(key$1(artifactTenantId(context), artifactId));
+	}
+	async deleteByRun(runId, context) {
+		if (typeof runId !== "string" || runId.length === 0) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "Artifact runId must be non-empty");
+		const tenantId = artifactTenantId(context);
+		let deleted = 0;
+		for (const [recordKey, record] of this.#records) if (record.tenantId === tenantId && record.runId === runId) {
+			this.#records.delete(recordKey);
+			deleted += 1;
+		}
+		return deleted;
+	}
+};
+function key$1(tenantId, artifactId) {
+	return `${tenantId}:${artifactId}`;
+}
+function isExpired(record) {
+	return record.descriptor.expiresAt !== void 0 && Date.parse(record.descriptor.expiresAt) <= Date.now();
+}
+//#endregion
+//#region src/artifacts/in-memory-artifact-store.ts
+/** Volatile artifact store for tests and local development. */
+var InMemoryArtifactStore = class {
+	#records = /* @__PURE__ */ new Map();
+	#limits;
+	constructor(options = {}) {
+		this.#limits = resolveLimits(options);
+	}
+	async put(input, context) {
+		assertNotAborted(context);
+		assertArtifactWrite(input, this.#limits);
+		const tenantId = artifactTenantId(context);
+		const descriptor = createDescriptor(input, this.#limits);
+		this.#records.set(key(tenantId, descriptor.artifactId), {
+			tenantId,
+			descriptor: structuredClone(descriptor),
+			bytes: copyBytes(input.bytes)
+		});
+		return structuredClone(descriptor);
+	}
+	async get(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const record = this.#records.get(key(artifactTenantId(context), artifactId));
+		if (!record || isExpired$1(record.descriptor)) return null;
+		return {
+			descriptor: structuredClone(record.descriptor),
+			bytes: copyBytes(record.bytes)
+		};
+	}
+	async head(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const record = this.#records.get(key(artifactTenantId(context), artifactId));
+		return record && !isExpired$1(record.descriptor) ? structuredClone(record.descriptor) : null;
+	}
+	async delete(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		return this.#records.delete(key(artifactTenantId(context), artifactId));
+	}
+};
+function key(tenantId, artifactId) {
+	return `${tenantId}:${artifactId}`;
+}
+//#endregion
+//#region src/artifacts/s3-artifact-store.ts
+/**
+* Artifact store for S3-compatible object storage (S3, R2, MinIO, GCS via an
+* S3 gateway, and similar).
+*
+* Bytes are stored at `<prefix>/<tenant>/artifacts/<artifactId>` and metadata
+* in a `.json` sidecar next to them. The bucket should stay private; the host
+* serves downloads through its authenticated API or short-lived signed URLs.
+*/
+var S3ArtifactStore = class {
+	#client;
+	#prefix;
+	#limits;
+	constructor(options) {
+		if (!options.client) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "S3 artifact client is required");
+		this.#client = options.client;
+		this.#prefix = normalizePrefix(options.prefix ?? "fevex");
+		this.#limits = resolveLimits(options);
+	}
+	async put(input, context) {
+		assertNotAborted(context);
+		assertArtifactWrite(input, this.#limits);
+		const descriptor = createDescriptor(input, this.#limits);
+		const dataKey = this.#key(artifactTenantId(context), descriptor.artifactId);
+		const metadataKey = `${dataKey}.json`;
+		await this.#client.putObject({
+			key: dataKey,
+			body: copyBytes(input.bytes),
+			contentType: descriptor.mimeType
+		});
+		try {
+			await this.#client.putObject({
+				key: metadataKey,
+				body: new TextEncoder().encode(JSON.stringify(descriptor)),
+				contentType: "application/json"
+			});
+		} catch (error) {
+			await this.#client.deleteObject({ key: dataKey });
+			throw error;
+		}
+		return structuredClone(descriptor);
+	}
+	async get(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const descriptor = await this.#readDescriptor(artifactTenantId(context), artifactId);
+		if (!descriptor || isExpired$1(descriptor)) return null;
+		const bytes = await this.#client.getObject({ key: this.#key(artifactTenantId(context), artifactId) });
+		if (!bytes) throw new ArtifactError("ARTIFACT_CORRUPT", `Artifact "${artifactId}" metadata exists without bytes`);
+		return {
+			descriptor,
+			bytes: copyBytes(bytes)
+		};
+	}
+	async head(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const descriptor = await this.#readDescriptor(artifactTenantId(context), artifactId);
+		return descriptor && !isExpired$1(descriptor) ? descriptor : null;
+	}
+	async delete(artifactId, context) {
+		assertNotAborted(context);
+		assertArtifactId(artifactId);
+		const tenantId = artifactTenantId(context);
+		const dataKey = this.#key(tenantId, artifactId);
+		const existed = await this.#readDescriptor(tenantId, artifactId) !== null;
+		await this.#client.deleteObject({ key: dataKey });
+		await this.#client.deleteObject({ key: `${dataKey}.json` });
+		return existed;
+	}
+	async #readDescriptor(tenantId, artifactId) {
+		const metadata = await this.#client.getObject({ key: `${this.#key(tenantId, artifactId)}.json` });
+		return metadata ? parseDescriptor(new TextDecoder().decode(metadata)) : null;
+	}
+	#key(tenantId, artifactId) {
+		return `${this.#prefix}/${tenantId}/artifacts/${artifactId}`;
+	}
+};
+function normalizePrefix(prefix) {
+	if (typeof prefix !== "string") throw new ArtifactError("ARTIFACT_INVALID_INPUT", "S3 artifact prefix must be a string");
+	const normalized = prefix.replace(/^\/+|\/+$/gu, "");
+	if (normalized.length === 0 || normalized.split("/").some((segment) => segment.length === 0 || segment === "." || segment === "..")) throw new ArtifactError("ARTIFACT_INVALID_INPUT", "S3 artifact prefix is not valid");
+	return normalized;
+}
+//#endregion
+export { CatalogedArtifactStore as a, assertArtifactId as c, FileSystemArtifactStore as i, InMemoryArtifactStore as n, ArtifactError as o, InMemoryArtifactCatalog as r, artifactTenantId as s, S3ArtifactStore as t };

package/dist/channels/index.d.mts

@@ -1,2 +1,2 @@
-import { a as ChannelEvent, c as ChannelMessage, d as ChannelRunOptions, f as ChannelRunResult, i as ChannelError, l as ChannelOutput, n as ChannelAdapter, o as ChannelEventType, r as ChannelContext, s as ChannelFailurePhase, t as handleChannelInput, u as ChannelRunEvent } from "../index-Bgcxgy66.mjs";
-export { ChannelAdapter, ChannelContext, ChannelError, ChannelEvent, ChannelEventType, ChannelFailurePhase, ChannelMessage, ChannelOutput, ChannelRunEvent, ChannelRunOptions, ChannelRunResult, handleChannelInput };
+import { a as ChannelDeliveryOptions, c as ChannelEvent, d as ChannelMessage, f as ChannelOutput, h as ChannelRunResult, i as ChannelContext, l as ChannelEventType, m as ChannelRunOptions, n as handleChannelInput, o as ChannelElicitationContext, p as ChannelRunEvent, r as ChannelAdapter, s as ChannelError, t as deliverChannelRun, u as ChannelFailurePhase } from "../index--_LdSEuF.mjs";
+export { ChannelAdapter, ChannelContext, ChannelDeliveryOptions, ChannelElicitationContext, ChannelError, ChannelEvent, ChannelEventType, ChannelFailurePhase, ChannelMessage, ChannelOutput, ChannelRunEvent, ChannelRunOptions, ChannelRunResult, deliverChannelRun, handleChannelInput };