@stigmer/server 3.22.1 → 3.23.1-dev.20260923075205

package/dist/domain/skill/transfer/handler.js

@@ -2,6 +2,7 @@ import { SKILL_ARTIFACTS_PATH_PREFIX } from "../../../transport/constants.js";
 import { DOWNLOAD_KEY_PREFIX, UPLOADS_SEGMENT } from "../constants.js";
 import { ArtifactNotFoundError } from "../storage/artifact-storage.js";
 import { SizeMismatchError, SlotConsumedError, SlotUnknownError, } from "./slots.js";
+import { stagingKeyOf } from "./staging.js";
 /**
  * Renders the capability URL for a minted reference against the lane's
  * externally-reachable base URL.
@@ -9,9 +10,13 @@ import { SizeMismatchError, SlotConsumedError, SlotUnknownError, } from "./slots
 export function uploadUrl(baseUrl, ref) {
     return `${trimTrailingSlash(baseUrl)}${SKILL_ARTIFACTS_PATH_PREFIX}${UPLOADS_SEGMENT}${ref}`;
 }
-/** Renders the download URL for an artifact storage key. */
-export function downloadUrl(baseUrl, storageKey) {
-    return `${trimTrailingSlash(baseUrl)}${SKILL_ARTIFACTS_PATH_PREFIX}/${storageKey}`;
+/**
+ * The lane's download origin: the local skill driver's serve URL, so that
+ * `${serveUrl}/${storageKey}` (LocalArtifactStorage.getSignedUrl's shape)
+ * is exactly the GET route this handler dispatches.
+ */
+export function transferServeUrl(baseUrl) {
+    return `${trimTrailingSlash(baseUrl)}${SKILL_ARTIFACTS_PATH_PREFIX}`;
 }
 function trimTrailingSlash(url) {
     return url.endsWith("/") ? url.slice(0, -1) : url;
@@ -51,17 +56,23 @@ async function handleUpload(request, response, slots, ref, logger) {
         writeText(response, 405, "method not allowed");
         return;
     }
+    // Deliberately one shape for "malformed", "never existed" and "expired":
+    // distinguishing them would let an unauthorized caller probe which
+    // tokens were once valid.
+    const unknown = () => writeText(response, 404, "upload reference unknown or expired — request a new upload URL");
+    const key = stagingKeyOf(ref);
+    if (key === undefined) {
+        unknown();
+        return;
+    }
     try {
-        await slots.receive(ref, request);
+        await slots.receive(key, request);
         response.statusCode = 204;
         response.end();
     }
     catch (error) {
         if (error instanceof SlotUnknownError) {
-            // Deliberately the same shape for "never existed" and "expired":
-            // distinguishing them would let an unauthorized caller probe which
-            // tokens were once valid.
-            writeText(response, 404, "upload reference unknown or expired — request a new upload URL");
+            unknown();
         }
         else if (error instanceof SlotConsumedError) {
             writeText(response, 409, "upload reference already used — request a new upload URL");

package/dist/domain/skill/transfer/handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/handler.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAE9E,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,GAAW;IACpD,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,2BAA2B,GAAG,eAAe,GAAG,GAAG,EAAE,CAAC;AAC/F,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,UAAkB;IAC7D,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,2BAA2B,IAAI,UAAU,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,SAA+B,EAC/B,MAAc;IAEd,OAAO,CAAC,OAAoB,EAAE,QAAsB,EAAQ,EAAE;QAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACtD,mEAAmE;YACnE,mEAAmE;YACnE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAEhE,uEAAuE;QACvE,gEAAgE;QAChE,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7D,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,iBAAiB,EAAE;gBACxD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC/C,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CACvD,kBAAkB,CAAC,QAAQ,CAAC,CAC7B,CAAC;YACF,OAAO;QACT,CAAC;QAED,cAAc,CACZ,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EACvB,MAAM,CACP,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAoB,EACpB,QAAsB,EACtB,KAAkB,EAClB,GAAW,EACX,MAAc;IAEd,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,iEAAiE;YACjE,mEAAmE;YACnE,0BAA0B;YAC1B,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,gEAAgE,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YAC9C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,0DAA0D,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YAC9C,SAAS,CACP,QAAQ,EACR,GAAG,EACH,GAAG,KAAK,CAAC,OAAO,uEAAuE,CACxF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,GAAG;gBACH,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAoB,EACpB,QAAsB,EACtB,SAA+B,EAC/B,GAAW,EACX,MAAc;IAEd,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC7C,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,QAAsB,EAAE,MAAc,EAAE,IAAY;IACrE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/handler.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAE9E,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,GAAW;IACpD,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,2BAA2B,GAAG,eAAe,GAAG,GAAG,EAAE,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,2BAA2B,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,SAA+B,EAC/B,MAAc;IAEd,OAAO,CAAC,OAAoB,EAAE,QAAsB,EAAQ,EAAE;QAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACtD,mEAAmE;YACnE,mEAAmE;YACnE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAEhE,uEAAuE;QACvE,gEAAgE;QAChE,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7D,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,iBAAiB,EAAE;gBACxD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC/C,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CACvD,kBAAkB,CAAC,QAAQ,CAAC,CAC7B,CAAC;YACF,OAAO;QACT,CAAC;QAED,cAAc,CACZ,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EACvB,MAAM,CACP,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAoB,EACpB,QAAsB,EACtB,KAAkB,EAClB,GAAW,EACX,MAAc;IAEd,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,mEAAmE;IACnE,0BAA0B;IAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,gEAAgE,CAAC,CAAC;IAE7F,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;aAAM,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YAC9C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,0DAA0D,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YAC9C,SAAS,CACP,QAAQ,EACR,GAAG,EACH,GAAG,KAAK,CAAC,OAAO,uEAAuE,CACxF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,GAAG;gBACH,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAoB,EACpB,QAAsB,EACtB,SAA+B,EAC/B,GAAW,EACX,MAAc;IAEd,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC7C,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,QAAsB,EAAE,MAAc,EAAE,IAAY;IACrE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/domain/skill/transfer/slots.d.ts

@@ -7,72 +7,57 @@ export declare class SlotUnknownError extends Error {
 export declare class SlotConsumedError extends Error {
     constructor();
 }
-/** Go errSlotEmpty — minted but never (successfully) uploaded to. */
-export declare class SlotEmptyError extends Error {
-    constructor();
-}
-/** Go errSizeMismatch — the body disagreed with the minted declaration. */
+/** Go errSizeMismatch — the body disagreed with the reserved declaration. */
 export declare class SizeMismatchError extends Error {
     constructor(received: number, declared: number);
 }
 export declare class UploadSlots {
-    private readonly slots;
-    private readonly stagingDir;
+    private readonly root;
+    private readonly stagingPrefix;
     private readonly ttlMs;
     private readonly maxSize;
+    private readonly slots;
+    private readonly stagingDir;
     /** Injectable for expiry tests, mirroring Go's `now` field. */
     private readonly now;
     /**
-     * Creates the registry and prepares the staging directory. Any file
-     * already present is an orphan from a previous process (the registry
-     * that knew about it died with that process), so the directory is
-     * emptied — this is also the crash-recovery story for uploads that
-     * never reached their push.
+     * Creates the registry over `root` (the local blob driver's root) and
+     * prepares the staging directory `root/stagingPrefix`. Any file already
+     * present is an orphan from a previous process (the registry that knew
+     * about it died with that process), so the directory is emptied — this
+     * is also the crash-recovery story for uploads that never reached their
+     * push.
      */
-    constructor(stagingDir: string, ttlMs: number, maxSize: number, now?: () => number);
+    constructor(root: string, stagingPrefix: string, ttlMs: number, maxSize: number, now?: () => number);
     /**
-     * Reserves an upload slot for an artifact of declaredSize bytes and
-     * returns its single-use reference + TTL. The caller has already
+     * Reserves an upload slot for an artifact of declaredSize bytes at the
+     * staging key; returns the TTL granted. The caller has already
      * authorized the request and validated declaredSize against the skill
-     * size limit; this guard is the registry's own invariant.
+     * size limit; the bound here is the registry's own invariant.
      */
-    mint(declaredSize: number): {
-        ref: string;
+    reserve(key: string, declaredSize: number): {
         ttlMs: number;
     };
     /**
      * Streams an upload's body into the slot's staging file. The body must
-     * match the size declared at mint time exactly: a shorter body means a
+     * match the size declared at reservation exactly: a shorter body means a
      * truncated transfer, a longer one means the client lied — both reject
      * rather than staging bytes that would fail (or worse, surprise)
-     * validation later. The staged file only becomes consumable once this
-     * resolves.
-     */
-    receive(ref: string, body: Readable): Promise<void>;
-    /**
-     * Returns the staged bytes for ref and retires the slot — an upload
-     * reference is strictly single-use. Push calls this when it sees
-     * artifact_upload_ref; whatever happens downstream (validation failure
-     * included), the slot is gone and the client must re-mint to retry.
+     * validation later. The staged file only becomes readable through the
+     * driver once this resolves.
      */
-    consume(ref: string): Promise<Uint8Array>;
+    receive(key: string, body: Readable): Promise<void>;
     /**
-     * Drops expired slots and their staged files. Called from mint, which
-     * bounds the registry: it can hold at most the slots minted within one
+     * Drops expired slots and their staged files. Called from reserve, which
+     * bounds the registry: it can hold at most the slots reserved within one
      * TTL window.
      */
     private sweep;
     /**
-     * The staging file name for a reference. Public since O5: the local
-     * driver's presigned-PUT arm maps refs onto driver staging keys
-     * (boot/compose.ts), and that mapping must come from HERE — a
-     * re-declared "<ref>.zip" in the composition would drift from stagePath
-     * with nothing to catch it.
-     */
-    stagedFileName(ref: string): string;
-    /**
-     * Maps a reference to its staging file. refs are server-generated hex
-     * (never client-supplied paths), so simple joining is safe.
+     * Maps a staging key to its file: the key resolved under the driver's
+     * root, which is how the driver's download(key) will look for it. The
+     * key must carry the staging prefix and a plain hex file name — anything
+     * else is a caller bug, refused before it touches the filesystem.
      */
     private stagePath;
 }

package/dist/domain/skill/transfer/slots.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slots.d.ts","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/slots.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAI5C,4DAA4D;AAC5D,qBAAa,gBAAiB,SAAQ,KAAK;;CAK1C;AAED,+DAA+D;AAC/D,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,qEAAqE;AACrE,qBAAa,cAAe,SAAQ,KAAK;;CAKxC;AAED,2EAA2E;AAC3E,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAI/C;AAQD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC;;;;;;OAMG;gBAED,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,MAAiB;IAU9B;;;;;OAKG;IACH,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAc1D;;;;;;;OAOG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA6CzD;;;;;OAKG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuB/C;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAUb;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,OAAO,CAAC,SAAS;CAGlB"}
+{"version":3,"file":"slots.d.ts","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/slots.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,4DAA4D;AAC5D,qBAAa,gBAAiB,SAAQ,KAAK;;CAK1C;AAED,+DAA+D;AAC/D,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,6EAA6E;AAC7E,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM/C;AAgBD,qBAAa,WAAW;IAepB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAjB1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC;;;;;;;OAOG;gBAEgB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EAChC,GAAG,GAAE,MAAM,MAAiB;IAQ9B;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAmB7D;;;;;;;OAOG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDzD;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAUb;;;;;OAKG;IACH,OAAO,CAAC,SAAS;CAUlB"}

package/dist/domain/skill/transfer/slots.js

@@ -1,9 +1,18 @@
 /**
- * Skill artifact upload slots — ports pkg/domain/skill/transfer/slots.go.
- * The in-memory registry of single-use upload capabilities plus the
- * staging directory their bytes land in (#675).
+ * Skill artifact upload slots — the local blob driver's staging mechanism,
+ * ported from pkg/domain/skill/transfer/slots.go: an in-memory registry of
+ * single-use upload capabilities plus the staging files their bytes land
+ * in (#675).
  *
- * In-memory is deliberate: the OSS server is single-instance (the same
+ * A slot is keyed by the STAGING KEY the domain names (`skills/staging/
+ * <hex>.zip`, transfer/staging.ts), and its file is that key resolved
+ * under the blob driver's root — so the driver's own download(key) reads
+ * what the lane received and its delete(key) retires the bytes, exactly
+ * as a bucket driver's would. The registry therefore knows nothing of
+ * consumption: it reserves, receives, and sweeps; the domain reads and
+ * deletes through the driver, one path for every backend.
+ *
+ * In-memory is deliberate: the local driver is single-instance (the same
  * assumption the in-process router transport and SQLite store already
  * make), and a slot is worthless across restarts anyway — its bytes live
  * in the staging directory, which is swept on boot.
@@ -11,17 +20,14 @@
  * Sentinel error classes replace Go's sentinel error values so the HTTP
  * handler maps registry failures onto honest status codes without string
  * matching; their message texts are Go's, verbatim (they ride wire-visible
- * copy: push's "artifact_upload_ref not usable: %v" and the handler's 400
- * body).
+ * copy: the handler's 404, 409 and 400 bodies).
  *
  * Proven by __tests__/slots.test.ts (injected clock for expiry) and the
  * conformance suite's transfer-lane tests.
  */
-import { randomBytes } from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { pipeline } from "node:stream/promises";
-import { REF_BYTE_LEN, REF_PREFIX } from "../constants.js";
 /** Go errSlotUnknown — never existed, expired, or swept. */
 export class SlotUnknownError extends Error {
     constructor() {
@@ -36,71 +42,79 @@ export class SlotConsumedError extends Error {
         this.name = "SlotConsumedError";
     }
 }
-/** Go errSlotEmpty — minted but never (successfully) uploaded to. */
-export class SlotEmptyError extends Error {
-    constructor() {
-        super("upload reference has no uploaded bytes");
-        this.name = "SlotEmptyError";
-    }
-}
-/** Go errSizeMismatch — the body disagreed with the minted declaration. */
+/** Go errSizeMismatch — the body disagreed with the reserved declaration. */
 export class SizeMismatchError extends Error {
     constructor(received, declared) {
         super(`upload size mismatch: received ${received} bytes, declared ${declared}`);
         this.name = "SizeMismatchError";
     }
 }
+/**
+ * The one file-name shape a staging key may carry past its prefix: the
+ * domain's hex reference plus the archive suffix. Keys are server-minted,
+ * never client-supplied, so this is an invariant check, not input
+ * validation — a violation is a programming error and throws.
+ */
+const STAGED_FILE_NAME = /^[0-9a-f]+\.zip$/;
 export class UploadSlots {
-    slots = new Map();
-    stagingDir;
+    root;
+    stagingPrefix;
     ttlMs;
     maxSize;
+    slots = new Map();
+    stagingDir;
     /** Injectable for expiry tests, mirroring Go's `now` field. */
     now;
     /**
-     * Creates the registry and prepares the staging directory. Any file
-     * already present is an orphan from a previous process (the registry
-     * that knew about it died with that process), so the directory is
-     * emptied — this is also the crash-recovery story for uploads that
-     * never reached their push.
+     * Creates the registry over `root` (the local blob driver's root) and
+     * prepares the staging directory `root/stagingPrefix`. Any file already
+     * present is an orphan from a previous process (the registry that knew
+     * about it died with that process), so the directory is emptied — this
+     * is also the crash-recovery story for uploads that never reached their
+     * push.
      */
-    constructor(stagingDir, ttlMs, maxSize, now = Date.now) {
-        fs.rmSync(stagingDir, { recursive: true, force: true });
-        fs.mkdirSync(stagingDir, { recursive: true, mode: 0o700 });
-        this.stagingDir = stagingDir;
+    constructor(root, stagingPrefix, ttlMs, maxSize, now = Date.now) {
+        this.root = root;
+        this.stagingPrefix = stagingPrefix;
         this.ttlMs = ttlMs;
         this.maxSize = maxSize;
+        this.stagingDir = path.join(root, stagingPrefix);
+        fs.rmSync(this.stagingDir, { recursive: true, force: true });
+        fs.mkdirSync(this.stagingDir, { recursive: true, mode: 0o700 });
         this.now = now;
     }
     /**
-     * Reserves an upload slot for an artifact of declaredSize bytes and
-     * returns its single-use reference + TTL. The caller has already
+     * Reserves an upload slot for an artifact of declaredSize bytes at the
+     * staging key; returns the TTL granted. The caller has already
      * authorized the request and validated declaredSize against the skill
-     * size limit; this guard is the registry's own invariant.
+     * size limit; the bound here is the registry's own invariant.
      */
-    mint(declaredSize) {
+    reserve(key, declaredSize) {
         if (declaredSize <= 0 || declaredSize > this.maxSize) {
             throw new Error(`declared size ${declaredSize} outside (0, ${this.maxSize}]`);
         }
-        const ref = REF_PREFIX + randomBytes(REF_BYTE_LEN).toString("hex");
+        this.stagePath(key);
+        if (this.slots.has(key)) {
+            throw new Error(`staging key ${key} is already reserved`);
+        }
         this.sweep();
-        this.slots.set(ref, {
+        this.slots.set(key, {
             declaredSize,
             expiresAtMs: this.now() + this.ttlMs,
             uploaded: false,
         });
-        return { ref, ttlMs: this.ttlMs };
+        return { ttlMs: this.ttlMs };
     }
     /**
      * Streams an upload's body into the slot's staging file. The body must
-     * match the size declared at mint time exactly: a shorter body means a
+     * match the size declared at reservation exactly: a shorter body means a
      * truncated transfer, a longer one means the client lied — both reject
      * rather than staging bytes that would fail (or worse, surprise)
-     * validation later. The staged file only becomes consumable once this
-     * resolves.
+     * validation later. The staged file only becomes readable through the
+     * driver once this resolves.
      */
-    async receive(ref, body) {
-        const slot = this.slots.get(ref);
+    async receive(key, body) {
+        const slot = this.slots.get(key);
         if (slot === undefined || this.now() > slot.expiresAtMs) {
             throw new SlotUnknownError();
         }
@@ -108,9 +122,16 @@ export class UploadSlots {
             throw new SlotConsumedError();
         }
         const declared = slot.declaredSize;
-        const filePath = this.stagePath(ref);
+        const filePath = this.stagePath(key);
         let written = 0;
         try {
+            // The driver's delete(key) prunes directories it empties, so the
+            // staging directory may be gone between two uploads; recreate it
+            // rather than fail the second one.
+            await fs.promises.mkdir(path.dirname(filePath), {
+                recursive: true,
+                mode: 0o700,
+            });
             // Consume at most declared+1 bytes: seeing the extra byte proves the
             // body exceeds the declaration without buffering an unbounded stream
             // (Go's io.LimitReader(declared+1) + written != declared check).
@@ -128,7 +149,7 @@ export class UploadSlots {
         }
         // Re-check after the write: the slot may have expired mid-upload
         // (Go re-checks under the lock for the same reason).
-        const current = this.slots.get(ref);
+        const current = this.slots.get(key);
         if (current === undefined || this.now() > current.expiresAtMs) {
             await fs.promises.rm(filePath, { force: true });
             throw new SlotUnknownError();
@@ -136,62 +157,34 @@ export class UploadSlots {
         current.uploaded = true;
     }
     /**
-     * Returns the staged bytes for ref and retires the slot — an upload
-     * reference is strictly single-use. Push calls this when it sees
-     * artifact_upload_ref; whatever happens downstream (validation failure
-     * included), the slot is gone and the client must re-mint to retry.
-     */
-    async consume(ref) {
-        const slot = this.slots.get(ref);
-        if (slot === undefined || this.now() > slot.expiresAtMs) {
-            throw new SlotUnknownError();
-        }
-        if (!slot.uploaded) {
-            throw new SlotEmptyError();
-        }
-        this.slots.delete(ref);
-        const filePath = this.stagePath(ref);
-        try {
-            const data = await fs.promises.readFile(filePath);
-            return data;
-        }
-        catch (error) {
-            throw new Error(`failed to read staged artifact: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        finally {
-            await fs.promises.rm(filePath, { force: true });
-        }
-    }
-    /**
-     * Drops expired slots and their staged files. Called from mint, which
-     * bounds the registry: it can hold at most the slots minted within one
+     * Drops expired slots and their staged files. Called from reserve, which
+     * bounds the registry: it can hold at most the slots reserved within one
      * TTL window.
      */
     sweep() {
         const nowMs = this.now();
-        for (const [ref, slot] of this.slots) {
+        for (const [key, slot] of this.slots) {
             if (nowMs > slot.expiresAtMs) {
-                this.slots.delete(ref);
-                fs.rmSync(this.stagePath(ref), { force: true });
+                this.slots.delete(key);
+                fs.rmSync(this.stagePath(key), { force: true });
             }
         }
     }
     /**
-     * The staging file name for a reference. Public since O5: the local
-     * driver's presigned-PUT arm maps refs onto driver staging keys
-     * (boot/compose.ts), and that mapping must come from HERE — a
-     * re-declared "<ref>.zip" in the composition would drift from stagePath
-     * with nothing to catch it.
+     * Maps a staging key to its file: the key resolved under the driver's
+     * root, which is how the driver's download(key) will look for it. The
+     * key must carry the staging prefix and a plain hex file name — anything
+     * else is a caller bug, refused before it touches the filesystem.
      */
-    stagedFileName(ref) {
-        return `${ref}.zip`;
-    }
-    /**
-     * Maps a reference to its staging file. refs are server-generated hex
-     * (never client-supplied paths), so simple joining is safe.
-     */
-    stagePath(ref) {
-        return path.join(this.stagingDir, this.stagedFileName(ref));
+    stagePath(key) {
+        if (!key.startsWith(this.stagingPrefix)) {
+            throw new Error(`staging key ${key} is outside ${this.stagingPrefix}`);
+        }
+        const fileName = key.slice(this.stagingPrefix.length);
+        if (!STAGED_FILE_NAME.test(fileName)) {
+            throw new Error(`staging key ${key} does not name a staged archive`);
+        }
+        return path.join(this.root, key);
     }
 }
 /**

package/dist/domain/skill/transfer/slots.js.map

@@ -1 +1 @@
-{"version":3,"file":"slots.js","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/slots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE3D,4DAA4D;AAC5D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC;QACE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,QAAgB,EAAE,QAAgB;QAC5C,KAAK,CAAC,kCAAkC,QAAQ,oBAAoB,QAAQ,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAQD,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChC,UAAU,CAAS;IACnB,KAAK,CAAS;IACd,OAAO,CAAS;IACjC,+DAA+D;IAC9C,GAAG,CAAe;IAEnC;;;;;;OAMG;IACH,YACE,UAAkB,EAClB,KAAa,EACb,OAAe,EACf,MAAoB,IAAI,CAAC,GAAG;QAE5B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,YAAoB;QACvB,IAAI,YAAY,IAAI,CAAC,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,gBAAgB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,YAAY;YACZ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK;YACpC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAc;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,qEAAqE;YACrE,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,QAAQ,CACZ,IAAI,EACJ,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC7B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC,CAAC,EACF,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,iEAAiE;QACjE,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9D,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,GAAW;QACxB,OAAO,GAAG,GAAG,MAAM,CAAC;IACtB,CAAC;IAED;;;OAGG;IACK,SAAS,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,KAAa,EACb,OAAgC;IAEhC,OAAO,KAAK,SAAS,CAAC,EAAE,MAA6B;QACnD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC/E,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"slots.js","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/slots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,4DAA4D;AAC5D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,QAAgB,EAAE,QAAgB;QAC5C,KAAK,CACH,kCAAkC,QAAQ,oBAAoB,QAAQ,EAAE,CACzE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAQD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,MAAM,OAAO,WAAW;IAeH;IACA;IACA;IACA;IAjBF,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChC,UAAU,CAAS;IACpC,+DAA+D;IAC9C,GAAG,CAAe;IAEnC;;;;;;;OAOG;IACH,YACmB,IAAY,EACZ,aAAqB,EACrB,KAAa,EACb,OAAe,EAChC,MAAoB,IAAI,CAAC,GAAG;QAJX,SAAI,GAAJ,IAAI,CAAQ;QACZ,kBAAa,GAAb,aAAa,CAAQ;QACrB,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAQ;QAGhC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACjD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,GAAW,EAAE,YAAoB;QACvC,IAAI,YAAY,IAAI,CAAC,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,iBAAiB,YAAY,gBAAgB,IAAI,CAAC,OAAO,GAAG,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,sBAAsB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,YAAY;YACZ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK;YACpC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAc;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,iEAAiE;YACjE,mCAAmC;YACnC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAC9C,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,qEAAqE;YACrE,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,QAAQ,CACZ,IAAI,EACJ,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC7B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC,CAAC,EACF,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,iEAAiE;QACjE,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9D,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACK,KAAK;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,SAAS,CAAC,GAAW;QAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,eAAe,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,iCAAiC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,KAAa,EACb,OAAgC;IAEhC,OAAO,KAAK,SAAS,CAAC,EACpB,MAA6B;QAE7B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GACT,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACnE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/skill/transfer/staging.d.ts

@@ -0,0 +1,48 @@
+import type { ArtifactStorage } from "../../../artifactstorage/artifact-storage.js";
+import type { Logger } from "../../../boot/logger.js";
+/** A fresh upload reference: the prefix and 128 random bits, hex. */
+export declare function newUploadRef(): string;
+/**
+ * The staging key a reference's bytes land under, or undefined when the
+ * reference is not one this server could have minted. Refs arrive from
+ * clients (the push request, the lane's URL path), so the shape is
+ * checked before it becomes a storage key.
+ */
+export declare function stagingKeyOf(ref: string): string | undefined;
+/**
+ * The reference for a staging key this module minted. Keys reach here from
+ * the domain's own mint, never from a client, so a foreign shape is a
+ * programming error and throws.
+ */
+export declare function uploadRefOf(stagingKey: string): string;
+/** What createArtifactUploadUrl hands the client. */
+export interface StagedUpload {
+    /** The single-use reference the push presents. */
+    readonly ref: string;
+    /** Accepts one HTTP PUT of exactly the declared byte count. */
+    readonly url: string;
+    /** How long the reference and the URL stay valid. */
+    readonly ttlMs: number;
+}
+/** What getArtifactDownloadUrl hands the client. */
+export interface DownloadCapability {
+    readonly url: string;
+    /** The floor of the URL's validity (DOWNLOAD_URL_TTL_MS). */
+    readonly ttlMs: number;
+}
+/** The staging port both archive kinds (skills, plugins) push through. */
+export interface ArchiveStaging {
+    /** Mints a reference and the URL its bytes are PUT to. */
+    mint(declaredSizeBytes: number): Promise<StagedUpload>;
+    /**
+     * Reads the staged bytes for a reference and retires it. Throws
+     * SlotUnknownError when the driver holds nothing under the reference;
+     * any other failure is the driver's and propagates as an infrastructure
+     * fault.
+     */
+    consume(ref: string): Promise<Uint8Array>;
+    /** A time-limited download URL for a stored archive key. */
+    downloadUrl(storageKey: string): Promise<DownloadCapability>;
+}
+export declare function newArchiveStaging(driver: ArtifactStorage, logger: Logger): ArchiveStaging;
+//# sourceMappingURL=staging.d.ts.map

package/dist/domain/skill/transfer/staging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging.d.ts","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/staging.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAEpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AA4BtD,qEAAqE;AACrE,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK5D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAMtD;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,4DAA4D;IAC5D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC9D;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,GACb,cAAc,CA8DhB"}