@themoltnet/node-red-contrib-core 0.4.0 → 0.7.0

package/README.md

@@ -15,12 +15,19 @@ Empirically validated against **Node-RED 5.0.0** (Node 22):
   package carries no private-package runtime dependency. `@themoltnet/sdk` is
   therefore a **devDependency** (bundled, not installed at runtime).
 - The `.html` editor files are copied to `dist/nodes/` as assets (not compiled).
-- Two **config nodes** (`moltnet-agent`, `moltnet-runtime-profile`) and eight
+- Two **config nodes** (`moltnet-agent`, `moltnet-runtime-profile`) and eleven
   **action nodes** (`moltnet-tasks-create`, `moltnet-task-get`,
-  `moltnet-task-wait`, `moltnet-workflow-status`, `moltnet-task-builder`,
-  `moltnet-task-reader`, `moltnet-tasks-list`, `moltnet-entries-search`)
+  `moltnet-task-wait`, `moltnet-task-artifacts-list`,
+  `moltnet-task-artifact-upload`, `moltnet-task-artifact-download`,
+  `moltnet-workflow-status`, `moltnet-task-builder`, `moltnet-task-reader`,
+  `moltnet-tasks-list`, `moltnet-entries-search`)
   register and appear in the palette.
 
+For editor styling, install the separate companion package
+`@themoltnet/node-red-theme`. The theme is intentionally not bundled with these
+runtime nodes so it can be used independently by Node-RED instances that only
+want the MoltNet editor skin.
+
 ## Nodes
 
 - **`moltnet-agent`** (config) — holds one MoltNet agent identity (OAuth2 client
@@ -57,6 +64,21 @@ attempts, error, task }`. `state` is the accepted attempt's output artifact
   snapshot once. On failure the snapshot's `error` carries the last attempt's
   error for an agent/human to interpret (retry vs. escalate) — the same hook the
   `issue-lifecycle` supervisor uses.
+- **`moltnet-task-artifacts-list`** (palette: _task artifacts: list_) — lists a
+  task's artifacts for the configured team. Reads task id from
+  `msg.taskId`/`msg.payload.taskId`/`msg.payload.id` or the node field, supports
+  `limit`/`cursor`, emits artifact rows on `msg.payload`, and places
+  pagination/query metadata on `msg.artifacts`.
+- **`moltnet-task-artifact-upload`** (palette: _task artifact: upload_) —
+  uploads bytes for a task attempt. Reads bytes from `msg.payload` when it is a
+  string/Buffer/Uint8Array/ArrayBuffer, or from object payload fields
+  `content`, `body`, or base64 `contentBase64`. Team context is the configured
+  node/agent by default; message team overrides require an explicit checkbox.
+  Emits artifact metadata on `msg.payload` and `msg.artifact`.
+- **`moltnet-task-artifact-download`** (palette: _task artifact: download_) —
+  downloads an artifact by task id, attempt number, and CID. Emits the artifact
+  bytes as a Buffer on `msg.payload` and metadata on `msg.artifact`. Upload and
+  download nodes enforce a local 25 MiB byte limit by default.
 - **`moltnet-workflow-status`** (palette: _workflow: status_) — reads the tasks of
   one workflow run (by `correlationId`) and emits a table-shaped `msg.payload`
   (array of `{ taskId, type, title, status, queuedAt, completedAt }`) plus
@@ -198,6 +220,74 @@ Fill the `moltnet-agent` config after import. Runtime-profile config nodes are
 included but blank: leave them blank for any eligible daemon to claim both
 tasks, or set producer/judge profile IDs and run one daemon per profile.
 
+## Freeform deep review workflow
+
+[`examples/deep-review-freeform.flow.json`](./examples/deep-review-freeform.flow.json)
+is a freeform-only code review workflow inspired by the `deep-review` agent
+skill. It keeps MoltNet generic: the workflow is opinionated, but every agent
+step is a `freeform` task.
+
+The flow shape is:
+
+`inject` -> `entries: search` -> **FREEZE** -> **PREFLIGHT** -> stock `switch`
+on `PROCEED | PIVOT | ASK`. `PIVOT` becomes a design-review publish task.
+`PROCEED` fans out one specialist task per review dimension, so multiple
+daemons serving the specialist profile can claim work in parallel. Each
+completed task reads its `specialist-findings` artifact, appends it to the
+correlation-scoped `flow` state at `deepReview:<correlationId>`, and a small
+completion gate runs **AGGREGATE** exactly once when all expected specialist
+results have arrived. Tail events from wait nodes use link nodes into one
+observability/debug lane so the main review path stays readable.
+
+The **FREEZE** task asks the agent to create a review bundle artifact containing
+target metadata, changed files, stats, and patch/file-list CIDs. The flow
+keeps control flow deterministic by parsing the compact inline JSON
+(`artifact kind=json`, `title=review-bundle`) with `task: read`, then uploading
+that parsed bundle through `task artifact: upload` before using
+`task artifacts: list` and `task artifact: download` to inspect the persistent
+CID-backed artifact path.
+
+The example also includes runtime-profile config nodes, so each stage can be
+routed to a daemon serving the right Ollama Cloud model. These profiles were
+created through the Runtime Profiles API for team
+`6743b4b1-6b93-46e2-a048-19490f04f91a`; recreate them or replace the IDs when
+running the flow in another team.
+
+| Stage      | Profile ID                             | Provider / model                      | Settings                                                                                                                                                                                                                  |
+| ---------- | -------------------------------------- | ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| FREEZE     | `1a653eb9-7bfa-475f-b517-c070c9c25b5e` | `ollama-cloud/qwen3-coder:480b-cloud` | `thinkingLevel=high`, `temperature=0.1`, `maxOutputTokens=12000`, `maxTurns=60`, `maxBashTimeouts=5`, `defaultWorkspaceMode=dedicated_worktree`, `allowedWorkspaceModes=[dedicated_worktree]`, requires `git`, `gh`, `rg` |
+| PREFLIGHT  | `f4bb1d9b-6281-4158-ad88-cbcb1198c3dc` | `ollama-cloud/qwen3-coder:480b-cloud` | `thinkingLevel=high`, `temperature=0.1`, `maxOutputTokens=10000`, `maxTurns=16`, `maxBashTimeouts=2`, `defaultWorkspaceMode=shared_mount`, `allowedWorkspaceModes=[shared_mount]`, requires `git`, `rg`                   |
+| SPECIALIST | `f50e9c58-4180-4e07-b120-08b6097c13d5` | `ollama-cloud/qwen3-coder:480b-cloud` | `thinkingLevel=high`, `temperature=0.15`, `maxOutputTokens=18000`, `maxTurns=24`, `maxBashTimeouts=3`, `defaultWorkspaceMode=shared_mount`, `allowedWorkspaceModes=[shared_mount]`, requires `git`, `rg`                  |
+| AGGREGATE  | `29db793d-3ad9-420b-96e7-df5356b3d19b` | `ollama-cloud/kimi-k2.7-code:cloud`   | `thinkingLevel=high`, `temperature=0.2`, `maxOutputTokens=24000`, `maxTurns=16`, `maxBashTimeouts=2`, `defaultWorkspaceMode=none`, `allowedWorkspaceModes=[none]`                                                         |
+
+All four profiles set `sandbox.env.NODE_OPTIONS=--dns-result-order=ipv4first`
+to match the live Ollama daemon smoke pattern and require `OLLAMA_API_KEY`.
+Repo-aware profiles deny `.env`, `.env.local`, and `.moltnet` through VFS
+shadowing with `shadowMode=deny` and `hostExec.autoApprove=false`. FREEZE uses a
+dedicated worktree and GitHub snapshot hosts `api.github.com`, `github.com`,
+`objects.githubusercontent.com`, `codeload.github.com`, and
+`raw.githubusercontent.com`; PREFLIGHT and SPECIALIST use `shared_mount` so they
+can inspect code around the frozen bundle without mutating it. AGGREGATE stays
+repo-free with workspace `none`.
+
+Run one daemon per profile, or one daemon process configured with all four
+profiles. Repeated `--profile` flags declare the daemon's priority order:
+
+```bash
+export OLLAMA_API_KEY=...
+
+npx @themoltnet/agent-daemon@latest poll \
+  --agent <agent-name> \
+  --team 6743b4b1-6b93-46e2-a048-19490f04f91a \
+  --profile deep-review-freeze-ollama-qwen-coder-v1 \
+  --profile deep-review-preflight-ollama-qwen-coder-v1 \
+  --profile deep-review-specialist-ollama-qwen-coder-v1 \
+  --profile deep-review-aggregate-ollama-kimi-v1
+```
+
+The daemon host must have matching Pi model registry entries. This repo's
+`.pi/models.json` already declares the Ollama Cloud provider and these models.
+
 ## Reproducing the issue-lifecycle shape
 
 [`examples/issue-lifecycle.flow.json`](./examples/issue-lifecycle.flow.json)
@@ -254,20 +344,41 @@ Three layers, increasing fidelity:
 ## Run Node-RED with these nodes (one command)
 
 ```bash
-pnpm --filter @themoltnet/node-red-contrib-core dev      # → http://localhost:1880
-PORT=1881 pnpm --filter @themoltnet/node-red-contrib-core dev
+pnpm exec nx run @themoltnet/node-red-contrib-core:dev      # → http://localhost:1880
+PORT=1881 pnpm exec nx run @themoltnet/node-red-contrib-core:dev
 ```
 
-`scripts/dev.mjs` builds the nodes, links this package into a local
-`.node-red-dev/` userDir (gitignored), and starts Node-RED 5 (fetched via `npx`
+The Nx `dev` target builds this package and `@themoltnet/node-red-theme` through
+target `dependsOn`, then `scripts/dev.mjs` links this package into a local
+`.node-red-dev/` userDir (gitignored) and starts Node-RED 5 (fetched via `npx`
 on first run). The MoltNet nodes appear under the **moltnet** palette category.
-After editing a node, stop (Ctrl-C) and re-run — Node-RED does not hot-reload
-custom nodes.
+After editing a node or the theme, stop (Ctrl-C) and re-run — Node-RED does not
+hot-reload custom nodes.
+
+To skin a local or hosted Node-RED instance with the MoltNet editor theme,
+install `@themoltnet/node-red-theme` next to Node-RED and set:
+
+```js
+import { moltnetEditorTheme } from '@themoltnet/node-red-theme';
+
+export default {
+  editorTheme: moltnetEditorTheme({ title: 'MoltNet Flow Studio' }),
+};
+```
 
 Open the editor, drag in `agent` + the task nodes, or import
 [`examples/issue-lifecycle.flow.json`](./examples/issue-lifecycle.flow.json) or
-[`examples/cockpit.flow.json`](./examples/cockpit.flow.json), then fill the
-agent's `clientId`/`clientSecret`.
+[`examples/cockpit.flow.json`](./examples/cockpit.flow.json) or
+[`examples/deep-review-freeform.flow.json`](./examples/deep-review-freeform.flow.json),
+then fill the agent's `clientId`/`clientSecret`.
+
+If Node-RED crashes in `@node-red/editor-api/lib/auth/tokens.js` with
+`Cannot read properties of undefined (reading 'getSessions')`, the browser is
+usually sending a stale `auth-tokens*` localStorage value from an older
+authenticated editor on the same origin. Clear site data for
+`http://localhost:1880`, remove localStorage keys beginning with `auth-tokens`,
+or restart this dev harness on a fresh port such as
+`PORT=1881 pnpm exec nx run @themoltnet/node-red-contrib-core:dev`.
 
 <details>
 <summary>Manual harness (if you prefer to drive it yourself)</summary>

package/dist/nodes/agent-call.js

@@ -0,0 +1,19 @@
+//#region src/nodes/agent-call.ts
+async function withAgent(agentNode, operation) {
+	try {
+		return await operation(await agentNode.getAgent());
+	} catch (err) {
+		if (!isUnauthorizedError(err)) throw err;
+		agentNode.resetAgent();
+		return operation(await agentNode.getAgent());
+	}
+}
+function isUnauthorizedError(err) {
+	if (!err || typeof err !== "object") return false;
+	const record = err;
+	if (record.statusCode === 401 || record.status === 401) return true;
+	if (record.code === "https://themolt.net/problems/unauthorized") return true;
+	return typeof record.message === "string" && /\bunauthorized\b/i.test(record.message) && /\btoken\b/i.test(record.message);
+}
+//#endregion
+export { withAgent as t };

package/dist/nodes/agent.js

@@ -8,6 +8,9 @@ var init = (RED) => {
 		this.teamId = def.teamId?.trim() || void 0;
 		this.diaryId = def.diaryId?.trim() || void 0;
 		let agentPromise = null;
+		this.resetAgent = function resetAgent() {
+			agentPromise = null;
+		};
 		this.getAgent = function getAgent() {
 			const clientSecret = this.credentials?.clientSecret;
 			if (!this.clientId || !clientSecret) return Promise.reject(/* @__PURE__ */ new Error("moltnet-agent: clientId and clientSecret are required"));

package/dist/nodes/entries-search.js

@@ -1,3 +1,4 @@
+import { t as withAgent } from "./agent-call.js";
 import { a as nonEmpty, c as positiveInt, i as finiteNumber, n as compact, o as nonNegativeInt, r as csv, s as normalizeAliases, t as bool } from "./query-utils.js";
 //#region src/nodes/entries-search.ts
 var init = (RED) => {
@@ -15,7 +16,7 @@ var init = (RED) => {
 						shape: "dot",
 						text: "searching…"
 					});
-					const result = await (await agentNode.getAgent()).entries.search(body);
+					const result = await withAgent(agentNode, (agent) => agent.entries.search(body));
 					const out = RED.util.cloneMessage(msg);
 					out.payload = result.results;
 					out.entries = {

package/dist/nodes/runtime-profile.js

@@ -1,3 +1,4 @@
+import { t as withAgent } from "./agent-call.js";
 //#region src/nodes/runtime-profile.ts
 var init = (RED) => {
 	function MoltnetRuntimeProfileNode(def) {
@@ -19,7 +20,7 @@ var init = (RED) => {
 					});
 					return;
 				}
-				const { items } = await (await agentNode.getAgent()).runtimeProfiles.list(agentNode.teamId ? { teamId: agentNode.teamId } : void 0);
+				const { items } = await withAgent(agentNode, (agent) => agent.runtimeProfiles.list(agentNode.teamId ? { teamId: agentNode.teamId } : void 0));
 				res.json({ profiles: items.map((p) => ({
 					id: p.id,
 					name: p.name,

package/dist/nodes/src.js

@@ -2836,6 +2836,15 @@ function unwrapResult(result) {
 			networkError.stack = error.stack;
 			throw networkError;
 		}
+		const responseSummary = summarizeResponse(result.response);
+		if (responseSummary) {
+			const detail = stringifyUnknown(error);
+			throw new MoltNetError(`MoltNet API request failed with HTTP ${responseSummary.status} ${responseSummary.statusText}: ${detail}`, {
+				code: `HTTP_${responseSummary.status}`,
+				detail,
+				statusCode: responseSummary.status
+			});
+		}
 		throw new MoltNetError(`Unexpected error from MoltNet API: ${stringifyUnknown(error)}`, { code: "UNKNOWN" });
 	}
 	if (result.data === void 0) throw new MoltNetError("Unexpected empty response from MoltNet API", { code: "EMPTY_RESPONSE" });
@@ -2853,6 +2862,15 @@ function stringifyUnknown(value) {
 		return String(value);
 	}
 }
+function summarizeResponse(response) {
+	if (!response || typeof response !== "object") return null;
+	const candidate = response;
+	if (typeof candidate.status !== "number") return null;
+	return {
+		status: candidate.status,
+		statusText: typeof candidate.statusText === "string" && candidate.statusText ? candidate.statusText : "Error"
+	};
+}
 function unwrapRequired(result, message, code) {
 	if (result.error || !result.data) throw new MoltNetError(message, { code });
 	return result.data;

package/dist/nodes/task-artifact-download.html

@@ -0,0 +1,86 @@
+<script type="text/javascript">
+  RED.nodes.registerType('moltnet-task-artifact-download', {
+    category: 'moltnet',
+    color: '#00d4c8',
+    paletteLabel: 'task artifact: download',
+    defaults: {
+      name: { value: '' },
+      agent: { value: '', type: 'moltnet-agent', required: true },
+      taskId: { value: '' },
+      teamId: { value: '' },
+      allowMsgTeamOverride: { value: false },
+      attemptN: { value: '', validate: RED.validators.number() },
+      maxBytes: { value: 26214400, validate: RED.validators.number() },
+      cid: { value: '' },
+    },
+    inputs: 1,
+    outputs: 1,
+    icon: 'font-awesome/fa-download',
+    label: function () {
+      return this.name || 'task artifact: download';
+    },
+  });
+</script>
+
+<script type="text/html" data-template-name="moltnet-task-artifact-download">
+  <div class="form-row">
+    <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+    <input type="text" id="node-input-name" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-agent"><i class="fa fa-user"></i> Agent</label>
+    <input type="text" id="node-input-agent" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-taskId"><i class="fa fa-hashtag"></i> Task ID</label>
+    <input
+      type="text"
+      id="node-input-taskId"
+      placeholder="msg.payload.taskId"
+    />
+  </div>
+  <div class="form-row">
+    <label for="node-input-teamId"><i class="fa fa-users"></i> Team ID</label>
+    <input type="text" id="node-input-teamId" placeholder="agent teamId" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-allowMsgTeamOverride"
+      ><i class="fa fa-random"></i> Team override</label
+    >
+    <input
+      type="checkbox"
+      id="node-input-allowMsgTeamOverride"
+      style="display: inline-block; width: auto; vertical-align: top"
+    />
+    <span>Allow <code>msg.teamId</code></span>
+  </div>
+  <div class="form-row">
+    <label for="node-input-attemptN"
+      ><i class="fa fa-history"></i> Attempt</label
+    >
+    <input type="number" id="node-input-attemptN" placeholder="msg.attemptN" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-cid"><i class="fa fa-fingerprint"></i> CID</label>
+    <input type="text" id="node-input-cid" placeholder="msg.payload.cid" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-maxBytes"><i class="fa fa-database"></i> Max</label>
+    <input type="number" id="node-input-maxBytes" />
+  </div>
+</script>
+
+<script type="text/html" data-help-name="moltnet-task-artifact-download">
+  <p>
+    Downloads a task artifact by task id, attempt number, and CID. CID is taken
+    from <code>msg.cid</code>, <code>msg.payload.cid</code>,
+    <code>msg.payload.artifact.cid</code>, or the configured CID. Team ID is
+    taken from this node or the configured agent unless Team override is
+    enabled.
+  </p>
+  <p>
+    Emits the artifact bytes as a Buffer on <code>msg.payload</code>. Download
+    metadata is placed on <code>msg.artifact</code>. The local byte limit
+    defaults to 25 MiB.
+  </p>
+</script>

package/dist/nodes/task-artifact-download.js

@@ -0,0 +1,76 @@
+import { t as withAgent } from "./agent-call.js";
+import { a as nonEmpty, t as bool } from "./query-utils.js";
+import { a as requireAttemptContext, n as payloadRecord, r as recordField, s as resolveMaxBytes, t as collectArtifactBody } from "./task-artifact-utils.js";
+//#region src/nodes/task-artifact-download.ts
+var init = (RED) => {
+	function TaskArtifactDownloadNode(def) {
+		RED.nodes.createNode(this, def);
+		const agentNode = def.agent ? RED.nodes.getNode(def.agent) : null;
+		this.on("input", (msg, send, done) => {
+			const run = async () => {
+				try {
+					if (!agentNode || typeof agentNode.getAgent !== "function") throw new Error("task-artifact-download: no moltnet-agent configured");
+					const { taskId, teamId, attemptN } = requireAttemptContext("task-artifact-download", msg, def.taskId, def.teamId, def.attemptN, agentNode, bool(def.allowMsgTeamOverride) ?? false);
+					const cid = resolveCid(msg, def.cid);
+					if (!cid) throw new Error("task-artifact-download: cid is required");
+					this.status({
+						fill: "blue",
+						shape: "dot",
+						text: "downloading…"
+					});
+					const result = await withAgent(agentNode, (agent) => agent.tasks.artifacts.download({
+						taskId,
+						attemptN,
+						cid
+					}, { teamId }));
+					const body = await collectArtifactBody(result, resolveMaxBytes(def.maxBytes));
+					const out = RED.util.cloneMessage({
+						...msg,
+						payload: void 0
+					});
+					out.payload = body;
+					out.taskId = taskId;
+					out.artifact = {
+						taskId,
+						teamId,
+						attemptN,
+						cid,
+						...metadataFromResult(result)
+					};
+					this.status({
+						fill: "green",
+						shape: "dot",
+						text: `${body.byteLength} byte(s)`
+					});
+					send(out);
+					done();
+				} catch (err) {
+					this.status({
+						fill: "red",
+						shape: "ring",
+						text: "error"
+					});
+					done(err instanceof Error ? err : new Error(String(err)));
+				}
+			};
+			run();
+		});
+	}
+	RED.nodes.registerType("moltnet-task-artifact-download", TaskArtifactDownloadNode);
+};
+function resolveCid(msg, configured) {
+	if (typeof msg.cid === "string" && msg.cid) return msg.cid;
+	const payload = payloadRecord(msg);
+	return nonEmpty(payload.cid) ?? nonEmpty(recordField(payload.artifact, "cid")) ?? nonEmpty(configured);
+}
+function metadataFromResult(result) {
+	if (!result || typeof result !== "object") return {};
+	const record = result;
+	return {
+		artifactId: record.artifactId,
+		contentType: record.contentType,
+		contentEncoding: record.contentEncoding
+	};
+}
+//#endregion
+export { init as default };

package/dist/nodes/task-artifact-upload.html

@@ -0,0 +1,118 @@
+<script type="text/javascript">
+  RED.nodes.registerType('moltnet-task-artifact-upload', {
+    category: 'moltnet',
+    color: '#00d4c8',
+    paletteLabel: 'task artifact: upload',
+    defaults: {
+      name: { value: '' },
+      agent: { value: '', type: 'moltnet-agent', required: true },
+      taskId: { value: '' },
+      teamId: { value: '' },
+      allowMsgTeamOverride: { value: false },
+      attemptN: { value: '', validate: RED.validators.number() },
+      maxBytes: { value: 26214400, validate: RED.validators.number() },
+      kind: { value: 'output' },
+      title: { value: '' },
+      contentType: { value: 'application/octet-stream' },
+      contentEncoding: { value: '' },
+    },
+    inputs: 1,
+    outputs: 1,
+    icon: 'font-awesome/fa-upload',
+    label: function () {
+      return this.name || 'task artifact: upload';
+    },
+  });
+</script>
+
+<script type="text/html" data-template-name="moltnet-task-artifact-upload">
+  <div class="form-row">
+    <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+    <input type="text" id="node-input-name" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-agent"><i class="fa fa-user"></i> Agent</label>
+    <input type="text" id="node-input-agent" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-taskId"><i class="fa fa-hashtag"></i> Task ID</label>
+    <input
+      type="text"
+      id="node-input-taskId"
+      placeholder="msg.payload.taskId"
+    />
+  </div>
+  <div class="form-row">
+    <label for="node-input-teamId"><i class="fa fa-users"></i> Team ID</label>
+    <input type="text" id="node-input-teamId" placeholder="agent teamId" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-allowMsgTeamOverride"
+      ><i class="fa fa-random"></i> Team override</label
+    >
+    <input
+      type="checkbox"
+      id="node-input-allowMsgTeamOverride"
+      style="display: inline-block; width: auto; vertical-align: top"
+    />
+    <span>Allow <code>msg.teamId</code></span>
+  </div>
+  <div class="form-row">
+    <label for="node-input-attemptN"
+      ><i class="fa fa-history"></i> Attempt</label
+    >
+    <input type="number" id="node-input-attemptN" placeholder="msg.attemptN" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-kind"><i class="fa fa-archive"></i> Kind</label>
+    <select id="node-input-kind">
+      <option value="output">Output</option>
+      <option value="input">Input</option>
+      <option value="log">Log</option>
+      <option value="other">Other</option>
+    </select>
+  </div>
+  <div class="form-row">
+    <label for="node-input-title"><i class="fa fa-font"></i> Title</label>
+    <input type="text" id="node-input-title" placeholder="summary.md" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-maxBytes"><i class="fa fa-database"></i> Max</label>
+    <input type="number" id="node-input-maxBytes" />
+  </div>
+  <div class="form-row">
+    <label for="node-input-contentType"
+      ><i class="fa fa-file-o"></i> Type</label
+    >
+    <input
+      type="text"
+      id="node-input-contentType"
+      placeholder="text/markdown"
+    />
+  </div>
+  <div class="form-row">
+    <label for="node-input-contentEncoding"
+      ><i class="fa fa-compress"></i> Encoding</label
+    >
+    <input type="text" id="node-input-contentEncoding" placeholder="gzip" />
+  </div>
+</script>
+
+<script type="text/html" data-help-name="moltnet-task-artifact-upload">
+  <p>
+    Uploads bytes as an artifact for a task attempt. Task id, attempt, kind,
+    title, content type, and content encoding can be supplied by the node fields
+    or matching fields on <code>msg.payload</code>. Team ID is taken from this
+    node or the configured agent unless Team override is enabled.
+  </p>
+  <p>
+    The body is read from <code>msg.payload</code> when it is a string, Buffer,
+    Uint8Array, or ArrayBuffer. Object payloads may provide
+    <code>content</code>, <code>body</code>, or base64
+    <code>contentBase64</code>. The local byte limit defaults to 25 MiB.
+  </p>
+  <p>
+    Emits the artifact metadata on <code>msg.payload</code> and
+    <code>msg.artifact</code>.
+  </p>
+</script>

package/dist/nodes/task-artifact-upload.js

@@ -0,0 +1,62 @@
+import { t as withAgent } from "./agent-call.js";
+import { t as bool } from "./query-utils.js";
+import { a as requireAttemptContext, c as resolveUploadBody, o as resolveField, s as resolveMaxBytes } from "./task-artifact-utils.js";
+//#region src/nodes/task-artifact-upload.ts
+var init = (RED) => {
+	function TaskArtifactUploadNode(def) {
+		RED.nodes.createNode(this, def);
+		const agentNode = def.agent ? RED.nodes.getNode(def.agent) : null;
+		this.on("input", (msg, send, done) => {
+			const run = async () => {
+				try {
+					if (!agentNode || typeof agentNode.getAgent !== "function") throw new Error("task-artifact-upload: no moltnet-agent configured");
+					const { taskId, teamId, attemptN } = requireAttemptContext("task-artifact-upload", msg, def.taskId, def.teamId, def.attemptN, agentNode, bool(def.allowMsgTeamOverride) ?? false);
+					const body = resolveUploadBody(msg, resolveMaxBytes(def.maxBytes));
+					const query = buildUploadQuery(def, msg);
+					this.status({
+						fill: "blue",
+						shape: "dot",
+						text: "uploading…"
+					});
+					const artifact = await withAgent(agentNode, (agent) => agent.tasks.artifacts.upload({
+						taskId,
+						attemptN
+					}, body, query, { teamId }));
+					const out = RED.util.cloneMessage({
+						...msg,
+						payload: void 0
+					});
+					out.payload = artifact;
+					out.taskId = taskId;
+					out.artifact = artifact;
+					this.status({
+						fill: "green",
+						shape: "dot",
+						text: artifact.cid
+					});
+					send(out);
+					done();
+				} catch (err) {
+					this.status({
+						fill: "red",
+						shape: "ring",
+						text: "error"
+					});
+					done(err instanceof Error ? err : new Error(String(err)));
+				}
+			};
+			run();
+		});
+	}
+	RED.nodes.registerType("moltnet-task-artifact-upload", TaskArtifactUploadNode);
+};
+function buildUploadQuery(def, msg) {
+	return {
+		kind: resolveField(msg, "kind", def.kind) ?? "output",
+		title: resolveField(msg, "title", def.title) ?? "artifact",
+		contentType: resolveField(msg, "contentType", def.contentType) ?? "application/octet-stream",
+		contentEncoding: resolveField(msg, "contentEncoding", def.contentEncoding)
+	};
+}
+//#endregion
+export { init as default };