@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/artifact/constants.js

@@ -0,0 +1,40 @@
+/**
+ * Artifact domain constants — byte-pinned values and wire copy from
+ * pkg/domain/artifact. The error formats are asserted by the conformance
+ * suite (get NotFound copy, deleted-blob copy) and shown verbatim by
+ * clients — never reword.
+ */
+/** Go kind string on the built resource. */
+export const ARTIFACT_KIND = "Artifact";
+/**
+ * Go maxContentBytes (50 MB): the domain-level content cap →
+ * ResourceExhausted. Sits BEHIND the transport's 10MB message cap, so it
+ * is not wire-assertable from the reference client — the arm stays
+ * unit-level in both editions (the wave-2 S1 amendment).
+ */
+export const MAX_CONTENT_BYTES = 50 * 1024 * 1024;
+/** Go defaultTTLDays: expires_at defaults ~30 days out. */
+export const DEFAULT_TTL_DAYS = 30;
+/** Go permanentTTLMarker: retention.ttl_days = -1 means never expires. */
+export const PERMANENT_TTL_MARKER = -1;
+/**
+ * Go DefaultMaxContentBytes (512 KB): getContent's default/implicit cap,
+ * matching AgentExecutionController.GetArtifactContent so the two
+ * content-read endpoints behave identically from a client's perspective.
+ */
+export const DEFAULT_MAX_CONTENT_BYTES = 512n * 1024n;
+/**
+ * Go downloadURLExpiration (7 days — the R2 maximum). Reported as
+ * ttl_seconds UNCONDITIONALLY, even by the local backend whose URLs never
+ * expire — the ratified P3 wire pin.
+ */
+export const DOWNLOAD_URL_EXPIRATION_MS = 7 * 24 * 60 * 60 * 1000;
+/** Go: status.Errorf(codes.NotFound, "Artifact not found: %s", id). */
+export function artifactNotFoundMessage(artifactId) {
+    return `Artifact not found: ${artifactId}`;
+}
+/** Go: "artifact blob has been deleted: %s" (FailedPrecondition). */
+export function artifactBlobDeletedMessage(artifactId) {
+    return `artifact blob has been deleted: ${artifactId}`;
+}
+//# sourceMappingURL=constants.js.map

package/dist/domain/artifact/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/domain/artifact/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,GAAG,KAAK,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,uBAAuB,UAAU,EAAE,CAAC;AAC7C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC3D,OAAO,mCAAmC,UAAU,EAAE,CAAC;AACzD,CAAC"}

package/dist/domain/artifact/controller.d.ts

@@ -0,0 +1,15 @@
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { ArtifactStorage } from "../../artifactstorage/artifact-storage.js";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { Store } from "../../store/interface.js";
+export interface ArtifactControllerDeps {
+    readonly store: Store;
+    readonly artifactStorage: ArtifactStorage;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+}
+/** Registers both artifact services on the router (routes stage). */
+export declare function registerArtifactServices(router: ConnectRouter, deps: ArtifactControllerDeps): void;
+//# sourceMappingURL=controller.d.ts.map

package/dist/domain/artifact/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/domain/artifact/controller.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AA+BzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAsBjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAYtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,sBAAsB,GAC3B,IAAI,CAYN"}

package/dist/domain/artifact/controller.js

@@ -0,0 +1,468 @@
+/**
+ * Artifact controller — ports pkg/domain/artifact (command + query sides).
+ * Artifact is the execution-output store (T07): a metadata resource in the
+ * generic resources table plus a blob in ArtifactStorage, keyed by the
+ * content's SHA-256 (content-addressable).
+ *
+ * Direct handlers, matching Go: create takes CreateArtifactInput (spec +
+ * content bytes — not a HasMetadata resource), delete is a soft
+ * storage_state transition rather than the hard-delete pipeline; only
+ * get/listByExecution ride pipelines. Proven by
+ * artifact.conformance.test.ts (CONFORMANCE_TARGET=local, incl. the
+ * file-server lane) and __tests__/artifact.test.ts.
+ *
+ * Go tolerates a nil ArtifactStorage (two-phase wiring) and answers
+ * Internal "artifact storage not configured"; the TS composition root
+ * cannot produce that state — the dependency is required, and a missing
+ * one is a compile error (the modeled-not-nullable idiom). The nil-guard
+ * arms are therefore not ported.
+ *
+ * Versus Stigmer Cloud, OSS derives the artifact's org from its source
+ * execution BEST-EFFORT (fabricated ids fall back to an empty org — what
+ * makes the domain standalone-testable), where the multi-tenant edition
+ * requires a real org-carrying source (the wave-2 disclosed edition split).
+ */
+import { createHash } from "node:crypto";
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { Code, ConnectError } from "@connectrpc/connect";
+import { ArtifactSchema, ArtifactStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/artifact/v1/api_pb";
+import { ArtifactCommandController } from "@stigmer/protos/ai/stigmer/agentic/artifact/v1/command_pb";
+import { ArtifactStorageState } from "@stigmer/protos/ai/stigmer/agentic/artifact/v1/enum_pb";
+import { ArtifactDownloadUrlSchema, ArtifactListSchema, GetArtifactContentResponseSchema, } from "@stigmer/protos/ai/stigmer/agentic/artifact/v1/io_pb";
+import { ArtifactQueryController } from "@stigmer/protos/ai/stigmer/agentic/artifact/v1/query_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { IamPermission } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+import { internalError, invalidArgumentError } from "../../pipeline/errors.js";
+import { apiResourceKindKey } from "../../pipeline/interceptors/apiresource.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { authorizeDirect, authorizeResolvedResource, newAuthorizeStep, } from "../../pipeline/steps/authorize.js";
+import { generateId, setAuditFieldsForCreate, setAuditFieldsForUpdate, } from "../../pipeline/steps/defaults.js";
+import { TARGET_RESOURCE_KEY, newLoadTargetStep, } from "../../pipeline/steps/load-target.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { ARTIFACT_KIND, DEFAULT_MAX_CONTENT_BYTES, DEFAULT_TTL_DAYS, DOWNLOAD_URL_EXPIRATION_MS, MAX_CONTENT_BYTES, PERMANENT_TTL_MARKER, artifactBlobDeletedMessage, artifactNotFoundMessage, } from "./constants.js";
+/** Registers both artifact services on the router (routes stage). */
+export function registerArtifactServices(router, deps) {
+    router.service(ArtifactCommandController, {
+        create: (input, ctx) => createArtifact(deps, input, callerIdentityOf(ctx)),
+        delete: (id, ctx) => deleteArtifact(deps, id, callerIdentityOf(ctx)),
+    });
+    router.service(ArtifactQueryController, {
+        get: (id, ctx) => get(deps, id, ctx),
+        listByExecution: (req, ctx) => listByExecution(deps, req, ctx),
+        getDownloadUrl: (id, ctx) => getDownloadUrl(deps, id, callerIdentityOf(ctx)),
+        getContent: (req, ctx) => getContent(deps, req, callerIdentityOf(ctx)),
+    });
+}
+function kindOf(ctx) {
+    return ctx.values.get(apiResourceKindKey);
+}
+/**
+ * Create — Go's direct handler, step for step: validate spec/content/
+ * source, SHA-256 the content (the hex hash IS the blob key), upload,
+ * derive org best-effort, build the resource with an art_ id and the
+ * content-addressed status, persist. The audit-field failure is LOG-ONLY
+ * (Go behavior); the empty-content arm is normally answered by
+ * protovalidate before this code runs, and the 50MB cap sits behind the
+ * transport's 10MB message cap — both arms stay unit-level (the wave-2 S1
+ * amendment names this port as their carrier).
+ */
+async function createArtifact(deps, input, identity) {
+    const spec = input.spec;
+    if (spec === undefined) {
+        throw invalidArgumentError("spec is required");
+    }
+    const content = input.content;
+    if (content.length === 0) {
+        throw invalidArgumentError("content is required");
+    }
+    if (content.length > MAX_CONTENT_BYTES) {
+        throw new ConnectError(`content exceeds maximum size of ${MAX_CONTENT_BYTES} bytes`, Code.ResourceExhausted);
+    }
+    const source = spec.source;
+    if (source === undefined ||
+        (source.workflowExecutionId === "" && source.agentExecutionId === "")) {
+        throw invalidArgumentError("spec.source must include workflow_execution_id or agent_execution_id");
+    }
+    const contentHash = createHash("sha256").update(content).digest("hex");
+    deps.logger.info("creating artifact", {
+        contentHash,
+        contentSize: content.length,
+        contentType: spec.contentType,
+        displayName: spec.displayName,
+    });
+    try {
+        await deps.artifactStorage.upload(contentHash, content, spec.contentType);
+    }
+    catch (error) {
+        deps.logger.error("failed to upload artifact blob", {
+            contentHash,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw internalError(error, "failed to upload artifact content");
+    }
+    const org = await deriveOrgFromSource(deps, source);
+    const artifactId = generateId("art");
+    const artifact = create(ArtifactSchema, {
+        apiVersion: "agentic.stigmer.ai/v1",
+        kind: ARTIFACT_KIND,
+        metadata: {
+            id: artifactId,
+            name: spec.displayName,
+            org,
+        },
+        spec,
+        status: {
+            contentHash,
+            sizeBytes: BigInt(content.length),
+            storageState: ArtifactStorageState.storage_state_stored,
+            expiresAt: computeExpiresAt(spec.retention?.ttlDays),
+        },
+    });
+    // Go: SetAuditFieldsForCreate failure is LOG-ONLY — an artifact write
+    // must not fail over audit stamping.
+    try {
+        setAuditFieldsForCreate(ArtifactSchema, artifact, identity);
+    }
+    catch (error) {
+        deps.logger.error("failed to set audit fields on artifact", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+    try {
+        await deps.store.saveResource(ApiResourceKind.artifact, artifactId, ArtifactSchema, artifact);
+    }
+    catch (error) {
+        deps.logger.error("failed to persist artifact metadata", {
+            artifactId,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw internalError(error, "failed to persist artifact");
+    }
+    deps.logger.info("artifact created successfully", {
+        artifactId,
+        contentHash,
+        sizeBytes: content.length,
+    });
+    return artifact;
+}
+/**
+ * Go deriveOrgFromSource — the wire-layout proxy trick: every Stigmer
+ * resource shares the metadata wire position (field 3 =
+ * ApiResourceMetadata), so the Artifact schema reads metadata.org from any
+ * execution kind without importing execution-specific protos. Best-effort
+ * by design: unknown/fabricated executions fall back to the empty org (the
+ * OSS single-user posture, pinned by the suite).
+ */
+async function deriveOrgFromSource(deps, source) {
+    const lookups = [
+        {
+            id: source.workflowExecutionId,
+            kind: ApiResourceKind.workflow_execution,
+        },
+        { id: source.agentExecutionId, kind: ApiResourceKind.agent_execution },
+    ];
+    for (const lookup of lookups) {
+        if (lookup.id === "") {
+            continue;
+        }
+        try {
+            const proxy = await deps.store.getResource(lookup.kind, lookup.id, ArtifactSchema);
+            const org = proxy.metadata?.org ?? "";
+            if (org !== "") {
+                return org;
+            }
+        }
+        catch {
+            // Best-effort: a missing or unreadable source is not an error.
+        }
+    }
+    return "";
+}
+/** Go computeExpiresAt: 30-day default; -1 permanent; <=0 falls back. */
+function computeExpiresAt(ttlDaysInput) {
+    let ttlDays = ttlDaysInput ?? DEFAULT_TTL_DAYS;
+    if (ttlDays === PERMANENT_TTL_MARKER) {
+        return ""; // never expires
+    }
+    if (ttlDays <= 0) {
+        ttlDays = DEFAULT_TTL_DAYS;
+    }
+    const expires = new Date(Date.now() + ttlDays * 24 * 60 * 60 * 1000);
+    // RFC3339 without fractional seconds — Go time.Format(time.RFC3339)
+    // (the store/lifecycle modules use the same idiom).
+    return expires.toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+/**
+ * Delete — Go's soft delete: a storage_state transition + save, never a
+ * row removal (the metadata row is the audit trail of what an execution
+ * produced; the blob is left for GC). Stamps status_audit only — a status
+ * transition, not a spec change (#540). The response is the STORED
+ * resource, exactly as Go returns it.
+ */
+async function deleteArtifact(deps, id, identity) {
+    const resourceId = id.value;
+    if (resourceId === "") {
+        throw invalidArgumentError("artifact id is required");
+    }
+    const artifact = await loadArtifactOrNotFound(deps, resourceId);
+    // The annotation's can_edit check AFTER the load — the Java
+    // ArtifactDeleteHandler order (load-before-authorize, stigmer#224).
+    // C2 Stage 4.
+    await authorizeDirect(ArtifactCommandController.method.delete, deps.authorizer, identity, id);
+    deps.logger.info("soft-deleting artifact", {
+        artifactId: resourceId,
+        previousState: ArtifactStorageState[artifact.status?.storageState ?? 0],
+    });
+    if (artifact.status === undefined) {
+        artifact.status = create(ArtifactStatusSchema);
+    }
+    artifact.status.storageState = ArtifactStorageState.storage_state_deleted;
+    // Soft-delete is a status transition: stamp status_audit only — cloud
+    // currently stamps neither slot; OSS stays honest rather than copying
+    // that omission (stigmer/stigmer#540). Failure is LOG-ONLY, as in Go.
+    try {
+        setAuditFieldsForUpdate(ArtifactSchema, artifact, "status_audit", identity);
+    }
+    catch (error) {
+        deps.logger.error("failed to set audit fields on artifact delete", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+    try {
+        await deps.store.saveResource(ApiResourceKind.artifact, resourceId, ArtifactSchema, artifact);
+    }
+    catch (error) {
+        deps.logger.error("failed to persist artifact deletion", {
+            artifactId: resourceId,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw internalError(error, "failed to persist artifact deletion");
+    }
+    deps.logger.info("artifact soft-deleted successfully", {
+        artifactId: resourceId,
+    });
+    return artifact;
+}
+/** Get — Go's two-step pipeline (ValidateProto → LoadTarget). */
+async function get(deps, id, ctx) {
+    const reqCtx = new RequestContext(ArtifactQueryController.method.get.input, id, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("artifact-get", deps.logger)
+        .addStep(newAuthorizeStep(ArtifactQueryController.method.get, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, ArtifactSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+const ARTIFACT_LIST_KEY = "artifactList";
+/**
+ * ListByExecution — Go's custom pipeline: an at-least-one-filter check,
+ * then a FULL ListResources scan with an in-memory source filter (the Go
+ * doc comment claims FindAllByField; the CODE full-scans — the port
+ * mirrors the code, the mismatch is disclosed in the PR), unmarshal
+ * failures skipped, TotalPages hardcoded to 1.
+ */
+async function listByExecution(deps, req, ctx) {
+    const reqCtx = new RequestContext(ArtifactQueryController.method.listByExecution.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("artifact-list-by-execution", deps.logger)
+        .addStep(newAuthorizeStep(ArtifactQueryController.method.listByExecution, deps.authorizer))
+        .addStep({
+        name: "ValidateListByExecutionRequest",
+        execute(stepCtx) {
+            const input = stepCtx.input;
+            if (input.workflowExecutionId === "" && input.agentExecutionId === "") {
+                throw invalidArgumentError("workflow_execution_id or agent_execution_id is required");
+            }
+        },
+    })
+        .addStep({
+        name: "AuthorizeParentExecution",
+        async execute(stepCtx) {
+            // The Java ArtifactListByExecutionHandler's hand-rolled gate
+            // (20260830.01 ruling Q8): can_view on the PARENT execution —
+            // "if you can view an execution, you can list its artifacts."
+            // The two-field dispatch (workflow-execution first, the Java
+            // order) is why the declarative annotation cannot express this
+            // lane and the proto carries is_skip_authorization. Deny copy is
+            // the Java handler's byte-pinned error_msg; a nonexistent id
+            // answers NOT_FOUND through the authorizer's probe — the ruled
+            // uniform unknown-id posture (DD-007 addendum), a recorded
+            // divergence from Java's deny-everyone arm on this lane.
+            const input = stepCtx.input;
+            await authorizeResolvedResource(deps.authorizer, stepCtx.callerIdentity, {
+                permission: IamPermission.can_view,
+                resourceKind: input.workflowExecutionId !== ""
+                    ? ApiResourceKind.workflow_execution
+                    : ApiResourceKind.agent_execution,
+                resourceId: input.workflowExecutionId !== ""
+                    ? input.workflowExecutionId
+                    : input.agentExecutionId,
+            }, "unauthorized to list artifacts for this execution");
+        },
+    })
+        .addStep({
+        name: "QueryArtifactsByExecution",
+        async execute(stepCtx) {
+            const input = stepCtx.input;
+            let data;
+            try {
+                data = await deps.store.listResources(ApiResourceKind.artifact);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list artifacts");
+            }
+            const artifacts = [];
+            for (const bytes of data) {
+                let artifact;
+                try {
+                    artifact = fromBinary(ArtifactSchema, bytes);
+                }
+                catch (error) {
+                    deps.logger.warn("failed to unmarshal artifact, skipping", {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    continue;
+                }
+                const source = artifact.spec?.source;
+                if (input.workflowExecutionId !== "" &&
+                    source?.workflowExecutionId === input.workflowExecutionId) {
+                    artifacts.push(artifact);
+                }
+                else if (input.agentExecutionId !== "" &&
+                    source?.agentExecutionId === input.agentExecutionId) {
+                    artifacts.push(artifact);
+                }
+            }
+            stepCtx.set(ARTIFACT_LIST_KEY, create(ArtifactListSchema, { totalPages: 1, entries: artifacts }));
+        },
+    })
+        .build()
+        .execute(reqCtx);
+    const list = reqCtx.get(ARTIFACT_LIST_KEY);
+    if (list === undefined) {
+        throw internalError(new Error("artifact list missing from pipeline context"), "artifact list not found in pipeline context");
+    }
+    return list;
+}
+/**
+ * GetDownloadUrl — Go's direct handler: load, refuse deleted blobs, mint
+ * the storage URL. ttl_seconds reports the 7-day constant UNCONDITIONALLY
+ * (ratified P3): local URLs never actually expire — pinned as the wire
+ * contract, the semantic mismatch disclosed in the wave-2 PR. The empty
+ * download filename keeps the URL inline; attachment disposition is
+ * opt-in only on the AgentExecution artifact download path.
+ */
+async function getDownloadUrl(deps, id, identity) {
+    const resourceId = id.value;
+    if (resourceId === "") {
+        throw invalidArgumentError("artifact id is required");
+    }
+    const artifact = await loadArtifactOrNotFound(deps, resourceId);
+    // The annotation's can_view check AFTER the load — the Java
+    // ArtifactGetDownloadUrlHandler order (load-before-authorize,
+    // stigmer#224). C2 Stage 4.
+    await authorizeDirect(ArtifactQueryController.method.getDownloadUrl, deps.authorizer, identity, id);
+    const contentHash = requireLiveBlob(artifact, resourceId);
+    deps.logger.info("generating download URL for artifact", {
+        artifactId: resourceId,
+        contentHash,
+    });
+    let downloadUrl;
+    try {
+        downloadUrl = await deps.artifactStorage.getSignedUrl(contentHash, DOWNLOAD_URL_EXPIRATION_MS, "");
+    }
+    catch (error) {
+        deps.logger.error("failed to generate download URL for artifact", {
+            artifactId: resourceId,
+            contentHash,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw internalError(error, "failed to generate download URL");
+    }
+    return create(ArtifactDownloadUrlSchema, {
+        url: downloadUrl,
+        ttlSeconds: Math.floor(DOWNLOAD_URL_EXPIRATION_MS / 1000),
+        sizeBytes: artifact.status?.sizeBytes ?? 0n,
+        contentType: artifact.spec?.contentType ?? "",
+    });
+}
+/**
+ * GetContent — Go's direct handler: the artifact bytes in the response
+ * (no CORS concerns for SDK consumers), truncated to max_bytes with the
+ * FULL blob size reported. Default/implicit cap 512KB, matching
+ * AgentExecution.GetArtifactContent so the two content-read endpoints
+ * behave identically.
+ */
+async function getContent(deps, req, identity) {
+    const artifactId = req.artifactId;
+    if (artifactId === "") {
+        throw invalidArgumentError("artifact_id is required");
+    }
+    const artifact = await loadArtifactOrNotFound(deps, artifactId);
+    // The annotation's can_view check AFTER the load — the Java
+    // ArtifactGetContentHandler order (load-before-authorize, stigmer#224).
+    // C2 Stage 4.
+    await authorizeDirect(ArtifactQueryController.method.getContent, deps.authorizer, identity, req);
+    const contentHash = requireLiveBlob(artifact, artifactId);
+    let maxBytes = req.maxBytes;
+    if (maxBytes <= 0n) {
+        maxBytes = DEFAULT_MAX_CONTENT_BYTES;
+    }
+    let data;
+    try {
+        data = await deps.artifactStorage.download(contentHash);
+    }
+    catch (error) {
+        deps.logger.error("failed to download artifact content", {
+            artifactId,
+            contentHash,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw internalError(error, "failed to read artifact content");
+    }
+    const totalSize = BigInt(data.length);
+    let truncated = false;
+    if (totalSize > maxBytes) {
+        data = data.subarray(0, Number(maxBytes));
+        truncated = true;
+    }
+    deps.logger.info("read artifact content", {
+        artifactId,
+        totalSizeBytes: data.length,
+        truncated,
+    });
+    return create(GetArtifactContentResponseSchema, {
+        content: data,
+        contentType: artifact.spec?.contentType ?? "",
+        totalSizeBytes: totalSize,
+        truncated,
+    });
+}
+/** Load by id with the byte-pinned Go NotFound copy. */
+async function loadArtifactOrNotFound(deps, artifactId) {
+    try {
+        return await deps.store.getResource(ApiResourceKind.artifact, artifactId, ArtifactSchema);
+    }
+    catch {
+        // Go answers NotFound for ANY store failure here (status.Errorf on
+        // err != nil), not only missing rows — mirrored.
+        throw new ConnectError(artifactNotFoundMessage(artifactId), Code.NotFound);
+    }
+}
+/**
+ * The shared deleted-blob and missing-hash guards of the two blob-read
+ * surfaces (Go repeats them inline in both handlers).
+ */
+function requireLiveBlob(artifact, artifactId) {
+    if (artifact.status?.storageState === ArtifactStorageState.storage_state_deleted) {
+        throw new ConnectError(artifactBlobDeletedMessage(artifactId), Code.FailedPrecondition);
+    }
+    const contentHash = artifact.status?.contentHash ?? "";
+    if (contentHash === "") {
+        throw internalError(new Error(`artifact has no content hash: ${artifactId}`), `artifact has no content hash: ${artifactId}`);
+    }
+    return contentHash;
+}
+//# sourceMappingURL=controller.js.map

package/dist/domain/artifact/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/domain/artifact/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EACL,cAAc,EACd,oBAAoB,GACrB,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,wDAAwD,CAAC;AAC9F,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,sDAAsD,CAAC;AAU9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAM1E,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAUxB,qEAAqE;AACrE,MAAM,UAAU,wBAAwB,CACtC,MAAqB,EACrB,IAA4B;IAE5B,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE;QACxC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;KACrE,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE;QACtC,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACpC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC9D,cAAc,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAC1B,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjD,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAC3B,IAA4B,EAC5B,KAA0B,EAC1B,QAAwB;IAExB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,oBAAoB,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CACpB,mCAAmC,iBAAiB,QAAQ,EAC5D,IAAI,CAAC,iBAAiB,CACvB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,MAAM,KAAK,SAAS;QACpB,CAAC,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,EACrE,CAAC;QACD,MAAM,oBAAoB,CACxB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;QACpC,WAAW;QACX,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAClD,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,EAAE;QACtC,UAAU,EAAE,uBAAuB;QACnC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE;YACR,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,GAAG;SACJ;QACD,IAAI;QACJ,MAAM,EAAE;YACN,WAAW;YACX,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACjC,YAAY,EAAE,oBAAoB,CAAC,oBAAoB;YACvD,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;SACrD;KACF,CAAC,CAAC;IAEH,sEAAsE;IACtE,qCAAqC;IACrC,IAAI,CAAC;QACH,uBAAuB,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;YAC1D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAC3B,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,EACd,QAAQ,CACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,UAAU;YACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;QAChD,UAAU;QACV,WAAW;QACX,SAAS,EAAE,OAAO,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAA4B,EAC5B,MAAsB;IAEtB,MAAM,OAAO,GAAiD;QAC5D;YACE,EAAE,EAAE,MAAM,CAAC,mBAAmB;YAC9B,IAAI,EAAE,eAAe,CAAC,kBAAkB;SACzC;QACD,EAAE,EAAE,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,eAAe,CAAC,eAAe,EAAE;KACvE,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACxC,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,EAAE,EACT,cAAc,CACf,CAAC;YACF,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,yEAAyE;AACzE,SAAS,gBAAgB,CAAC,YAAgC;IACxD,IAAI,OAAO,GAAG,YAAY,IAAI,gBAAgB,CAAC;IAC/C,IAAI,OAAO,KAAK,oBAAoB,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,gBAAgB;IAC7B,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,GAAG,gBAAgB,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,oEAAoE;IACpE,oDAAoD;IACpD,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAC3B,IAA4B,EAC5B,EAAiB,EACjB,QAAwB;IAExB,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC;IAC5B,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEhE,4DAA4D;IAC5D,oEAAoE;IACpE,cAAc;IACd,MAAM,eAAe,CACnB,yBAAyB,CAAC,MAAM,CAAC,MAAM,EACvC,IAAI,CAAC,UAAU,EACf,QAAQ,EACR,EAAE,CACH,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;QACzC,UAAU,EAAE,UAAU;QACtB,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC;KACxE,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;IACD,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,oBAAoB,CAAC,qBAAqB,CAAC;IAE1E,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,CAAC;QACH,uBAAuB,CAAC,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;YACjE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAC3B,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,EACd,QAAQ,CACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;QACrD,UAAU,EAAE,UAAU;KACvB,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,GAAG,CAChB,IAA4B,EAC5B,EAAc,EACd,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,uBAAuB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EACxC,EAAE,EACF,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,cAAc,EACd,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CACtE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;SACtD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAa,CAAC;AACrD,CAAC;AAED,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,IAA4B,EAC5B,GAAoC,EACpC,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,uBAAuB,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EACpD,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAEf,4BAA4B,EAAE,IAAI,CAAC,MAAM,CAAC;SACzC,OAAO,CACN,gBAAgB,CACd,uBAAuB,CAAC,MAAM,CAAC,eAAe,EAC9C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC;QACP,IAAI,EAAE,gCAAgC;QACtC,OAAO,CAAC,OAAO;YACb,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,EAAE,CAAC;gBACtE,MAAM,oBAAoB,CACxB,yDAAyD,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,0BAA0B;QAChC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,6DAA6D;YAC7D,8DAA8D;YAC9D,8DAA8D;YAC9D,6DAA6D;YAC7D,+DAA+D;YAC/D,iEAAiE;YACjE,6DAA6D;YAC7D,+DAA+D;YAC/D,2DAA2D;YAC3D,yDAAyD;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,MAAM,yBAAyB,CAC7B,IAAI,CAAC,UAAU,EACf,OAAO,CAAC,cAAc,EACtB;gBACE,UAAU,EAAE,aAAa,CAAC,QAAQ;gBAClC,YAAY,EACV,KAAK,CAAC,mBAAmB,KAAK,EAAE;oBAC9B,CAAC,CAAC,eAAe,CAAC,kBAAkB;oBACpC,CAAC,CAAC,eAAe,CAAC,eAAe;gBACrC,UAAU,EACR,KAAK,CAAC,mBAAmB,KAAK,EAAE;oBAC9B,CAAC,CAAC,KAAK,CAAC,mBAAmB;oBAC3B,CAAC,CAAC,KAAK,CAAC,gBAAgB;aAC7B,EACD,mDAAmD,CACpD,CAAC;QACJ,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,2BAA2B;QACjC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,SAAS,GAAe,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,QAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,QAAQ,GAAG,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;wBACzD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACrC,IACE,KAAK,CAAC,mBAAmB,KAAK,EAAE;oBAChC,MAAM,EAAE,mBAAmB,KAAK,KAAK,CAAC,mBAAmB,EACzD,CAAC;oBACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;qBAAM,IACL,KAAK,CAAC,gBAAgB,KAAK,EAAE;oBAC7B,MAAM,EAAE,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,EACnD,CAAC;oBACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;YAED,OAAO,CAAC,GAAG,CACT,iBAAiB,EACjB,MAAM,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAClE,CAAC;QACJ,CAAC;KACF,CAAC;SACD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,6CAA6C,CAAC,EACxD,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAoB,CAAC;AAC9B,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAC3B,IAA4B,EAC5B,EAAc,EACd,QAAwB;IAExB,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC;IAC5B,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEhE,4DAA4D;IAC5D,8DAA8D;IAC9D,4BAA4B;IAC5B,MAAM,eAAe,CACnB,uBAAuB,CAAC,MAAM,CAAC,cAAc,EAC7C,IAAI,CAAC,UAAU,EACf,QAAQ,EACR,EAAE,CACH,CAAC;IAEF,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE1D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;QACvD,UAAU,EAAE,UAAU;QACtB,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CACnD,WAAW,EACX,0BAA0B,EAC1B,EAAE,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;YAChE,UAAU,EAAE,UAAU;YACtB,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,MAAM,CAAC,yBAAyB,EAAE;QACvC,GAAG,EAAE,WAAW;QAChB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACzD,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE;QAC3C,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;KAC9C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,UAAU,CACvB,IAA4B,EAC5B,GAA8B,EAC9B,QAAwB;IAExB,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEhE,4DAA4D;IAC5D,wEAAwE;IACxE,cAAc;IACd,MAAM,eAAe,CACnB,uBAAuB,CAAC,MAAM,CAAC,UAAU,EACzC,IAAI,CAAC,UAAU,EACf,QAAQ,EACR,GAAG,CACJ,CAAC;IAEF,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE1D,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC5B,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACnB,QAAQ,GAAG,yBAAyB,CAAC;IACvC,CAAC;IAED,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,UAAU;YACV,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;QACxC,UAAU;QACV,cAAc,EAAE,IAAI,CAAC,MAAM;QAC3B,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,gCAAgC,EAAE;QAC9C,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;QAC7C,cAAc,EAAE,SAAS;QACzB,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,KAAK,UAAU,sBAAsB,CACnC,IAA4B,EAC5B,UAAkB;IAElB,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACjC,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,CACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAkB,EAAE,UAAkB;IAC7D,IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,KAAK,oBAAoB,CAAC,qBAAqB,EAC5E,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,0BAA0B,CAAC,UAAU,CAAC,EACtC,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;IACvD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,iCAAiC,UAAU,EAAE,CAAC,EACxD,iCAAiC,UAAU,EAAE,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/domain/artifact/file-server.d.ts

@@ -0,0 +1,29 @@
+import type { Logger } from "../../boot/logger.js";
+export interface ArtifactFileServerOptions {
+    /** The artifact root — the base path IS the root (#285). */
+    readonly basePath: string;
+    readonly logger: Logger;
+}
+export interface ArtifactFileServer {
+    /**
+     * Binds <host>:<port> (an explicit port 0 picks ephemeral for tests).
+     * The host is the composition root's call: 127.0.0.1 everywhere by
+     * default (ARTIFACT_HTTP_HOST, DD-013) — download URLs are minted for
+     * the local machine — and 0.0.0.0 only inside the official container
+     * image, where the loopback bind would strand the lane behind the
+     * container boundary (Phase-2 P4).
+     */
+    listen(port: number, host: string): Promise<number>;
+    shutdown(): Promise<void>;
+}
+export declare function createArtifactFileServer(options: ArtifactFileServerOptions): ArtifactFileServer;
+/**
+ * Go warnOnLegacyArtifactLayout: a one-line migration hint when a
+ * pre-#285 store layout is detected (base was a PARENT; artifacts lived at
+ * <base>/artifacts/<key>). Keys off the two subpaths only the OLD layout
+ * produces — <base>/artifacts/attachments and the doubled
+ * <base>/artifacts/artifacts — so it cannot false-positive on a healthy
+ * new-layout install.
+ */
+export declare function warnOnLegacyArtifactLayout(basePath: string, logger: Logger): Promise<void>;
+//# sourceMappingURL=file-server.d.ts.map

package/dist/domain/artifact/file-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-server.d.ts","sourceRoot":"","sources":["../../../src/domain/artifact/file-server.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,kBAAkB,CAsCpB;AAuFD;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAsBf"}