agentfootprint 9.24.0 → 9.26.0

package/dist/artifacts/s3Artifacts.js

@@ -0,0 +1,542 @@
+"use strict";
+/**
+ * artifacts/s3Artifacts — the claim-check store in an S3 bucket.
+ *
+ * The third rung of the same ladder: `inMemoryArtifacts` for a test,
+ * `fileArtifacts`/`sqliteArtifacts` for one machine, this for a fleet. Nothing
+ * about the five verbs changes — a tool that stored a dataset against the
+ * in-memory store stores it here by swapping one constructor, because the port
+ * is the contract and this file is only a translation of it.
+ *
+ * Read `objectStore.ts` first: it holds the five laws both object adapters
+ * obey (payload as canonical bytes in the body, ONE metadata entry carrying
+ * the ticket, a checked metadata budget, 404-means-null-everything-else-means-
+ * error, service-time ordering). What is genuinely S3's, and therefore lives
+ * here:
+ *
+ * ── The object key ──────────────────────────────────────────────────────────
+ * `[<prefix>/]<tenant>/<principal>/<conversation>/<ref>` — the scope
+ * partitioned into key segments by `scopePath.ts`, the same percent-encoding
+ * law the directory adapter uses, so a tenant of literally `'..'` is a NAME in
+ * both. A ref alone opens nothing: a wrong scope computes a different key,
+ * S3 answers 404, and the caller reads `null` — one indistinguishable miss,
+ * never a cross-tenant read.
+ *
+ * ── The ticket rides as object metadata, not a sidecar ──────────────────────
+ * `x-amz-meta-af-artifact`, one entry, ASCII JSON. Two reasons this beats a
+ * second `<ref>.meta.json` object: `head()` becomes ONE HeadObject (the port
+ * promises the render-by-ref decision without paying for the payload, and a
+ * sidecar would make it a second GET), and `get()` returns the ticket AND the
+ * bytes in a single GetObject — a sidecar would make every read two round
+ * trips and open a window where one exists and the other does not.
+ *
+ * The cost is S3's cap: **2 KB of user metadata per object**, checked at put
+ * and refused by name. A ticket is small (a ref, a kind, a media type, sizes,
+ * a label); it only reaches 2 KB if the label is prose or `parentRefs` is a
+ * bibliography, and the refusal says which.
+ *
+ * ── What a 404 is allowed to mean here ──────────────────────────────────────
+ * S3 answers 404 for two different sentences: "no such key" and "no such
+ * bucket". Only the first is the port's "no data", so this adapter reads the
+ * CODE and not the status, and only the calls that named one object —
+ * Head/Get/Delete — may read a 404 as `null` at all. A 404 from PutObject or
+ * ListObjectsV2 means the bucket is not there; it goes through the sanitizer
+ * like every other failure, because nothing downstream is waiting to turn it
+ * into `null` and the SDK's text for it contains the object key.
+ *
+ * ── What a listing costs, said plainly ──────────────────────────────────────
+ * `ListObjectsV2` returns keys, sizes and `LastModified` — never user
+ * metadata. So `list()` pages the keys (cheap, 1000 per call), sorts by
+ * `LastModified` (newest first, as the port promises), and issues one
+ * `HeadObject` for each row IT RETURNS — not for the whole scope. An expired
+ * object inside a page is dropped from that page rather than backfilled, so a
+ * page can come back short while more pages remain. That is the honest trade;
+ * an "index object" listing every ticket in a scope would be cheaper and
+ * would be a lost-update race between two writers, which is worse than a
+ * round trip.
+ *
+ * ── Retention, and the operator's bulk tool ─────────────────────────────────
+ * The dials work exactly as everywhere else: `ttlMs` stamps `expiresAt` AT
+ * MINT (stated, never sprung), and budgets evict oldest-first (S3 has no cheap
+ * read-recency, the same statement `fileArtifacts` makes). Two S3-specific
+ * facts:
+ *
+ *   • **Expiry is enforced on READ.** An expired object answers `null` from
+ *     `head`/`get` and is deleted on the way past (a sweep on access), so an
+ *     expired ticket can never be redeemed even if the object is still there.
+ *   • **A put only SCANS the scope when a budget is configured.** With no
+ *     `maxBytesPerScope`/`maxCountPerScope` there is nothing to plan, so a put
+ *     is exactly one `PutObject` — and paying for a full scope listing on
+ *     every write would be a real bill for no answer.
+ *
+ * Which leaves reclamation of storage for artifacts nobody reads again — and
+ * that is what **S3 Lifecycle rules** are for. They are the operator's bulk
+ * tool and this adapter does not create them (a lifecycle rule is a cost and
+ * compliance decision that belongs to your infrastructure). Align them like
+ * this:
+ *
+ * ```jsonc
+ * // Expire objects 7 days after creation, under the store's prefix.
+ * // Keep the rule LONGER than the store's ttlMs, never shorter:
+ * // the store's expiresAt is the promise consumers read on the ticket, and a
+ * // lifecycle rule that deletes first makes a live ticket resolve to null
+ * // BEFORE the time it printed. Longer, and lifecycle is what it should be:
+ * // the backstop that reclaims what the store's own sweep never revisited.
+ * { "Rules": [{ "ID": "agentfootprint-artifacts", "Status": "Enabled",
+ *               "Filter": { "Prefix": "artifacts/" },
+ *               "Expiration": { "Days": 7 } }] }
+ * ```
+ *
+ * ── Lazy peer dependency ────────────────────────────────────────────────────
+ * `@aws-sdk/client-s3` is an OPTIONAL peer dependency, required at
+ * CONSTRUCTION (the sqliteSessions law): importing the barrel costs a browser
+ * bundle nothing, and a missing install refuses where the config was written
+ * rather than at the first put of the first run. Pass `client` to share the
+ * SDK configuration your app already has.
+ *
+ * ── Status ──────────────────────────────────────────────────────────────────
+ * Contract-shaped and tested; awaiting field use. The five commands it
+ * dispatches are pinned by `test/adapters/aws/aws-command-pin.test.ts`; the
+ * behavior is proved against an emulation double that speaks the same five.
+ * No live call has been made from this repository.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.s3Artifacts = void 0;
+const lazyRequire_js_1 = require("../lib/lazyRequire.js");
+const minting_js_1 = require("./minting.js");
+const naming_js_1 = require("./naming.js");
+const objectStore_js_1 = require("./objectStore.js");
+const payload_js_1 = require("./payload.js");
+const retention_js_1 = require("./retention.js");
+const scopePath_js_1 = require("./scopePath.js");
+const streaming_js_1 = require("./streaming.js");
+const types_js_1 = require("./types.js");
+/** S3's user-metadata cap: 2 KB per object, keys and values together. */
+const S3_METADATA_BUDGET = 2 * 1024;
+/** Keys per ListObjectsV2 call. S3's own maximum. */
+const LIST_PAGE_SIZE = 1000;
+/** How many ListObjectsV2 calls one `list()`/sweep may make before it stops
+ *  walking. A scope with a million objects is a retention bug, and spending
+ *  the caller's afternoon proving it is not the answer. */
+const MAX_LIST_CALLS = 20;
+/** Load the peer dep, or refuse by name with the install line. */
+function loadS3Sdk() {
+    try {
+        return (0, lazyRequire_js_1.lazyRequire)('@aws-sdk/client-s3');
+    }
+    catch {
+        throw new Error(`[artifacts] s3Artifacts requires the \`@aws-sdk/client-s3\` package.\n` +
+            `  Install:  npm install @aws-sdk/client-s3\n` +
+            `  It is an OPTIONAL peer dependency, loaded only when you construct this store — ` +
+            `every other artifact adapter (inMemoryArtifacts, fileArtifacts, sqliteArtifacts) needs ` +
+            `nothing installed.`);
+    }
+}
+/**
+ * S3 error codes that are 404 and are NOT about the object: the BUCKET is not
+ * there.
+ *
+ * The status alone cannot carry this. `NoSuchBucket` is a modelled S3
+ * exception with `$metadata.httpStatusCode: 404`, exactly like `NoSuchKey`, so
+ * a check that reads only the status answers "that artifact is missing" for a
+ * store pointed at a bucket that does not exist — an empty scope reported over
+ * a configuration mistake, which is the failure law 4 forbids. Named codes,
+ * not the status, are what separate the two.
+ */
+const NOT_ABOUT_THE_OBJECT = new Set(['NoSuchBucket']);
+/** Is this the SDK's "no such OBJECT"? 404 in any of the spellings S3 uses,
+ *  minus the 404s that are about something else — see law 4 in
+ *  `objectStore.ts`. Everything this rejects is NOT "no data". */
+function isMissingObject(err) {
+    const e = err;
+    if (e === null || typeof e !== 'object')
+        return false;
+    const name = typeof e.name === 'string' ? e.name : '';
+    const code = typeof e.Code === 'string' ? e.Code : '';
+    if (NOT_ABOUT_THE_OBJECT.has(name) || NOT_ABOUT_THE_OBJECT.has(code))
+        return false;
+    if (e.$metadata?.httpStatusCode === 404)
+        return true;
+    return name === 'NotFound' || name === 'NoSuchKey' || code === 'NotFound' || code === 'NoSuchKey';
+}
+/** The bytes of a GetObject body, whichever shape the SDK handed back. */
+async function readBodyBytes(body) {
+    if (body instanceof Uint8Array)
+        return body;
+    const stream = body;
+    if (stream !== null && typeof stream?.transformToByteArray === 'function') {
+        return await stream.transformToByteArray();
+    }
+    throw new Error(`[artifacts] s3Artifacts: GetObject answered with a body this adapter cannot read ` +
+        `(no transformToByteArray). The SDK's response stream mixin is missing — check the ` +
+        `@aws-sdk/client-s3 version.`);
+}
+/** The web stream of a GetObject body, or the bytes wrapped as one. */
+async function readBodyStream(body) {
+    const stream = body;
+    if (stream !== null && typeof stream?.transformToWebStream === 'function') {
+        return stream.transformToWebStream();
+    }
+    return (0, streaming_js_1.bytesAsStream)(await readBodyBytes(body));
+}
+/**
+ * Yield a web stream's chunks while COUNTING them against the declared
+ * length, so a producer that lied about its own payload fails with this
+ * library's sentence rather than as a malformed HTTP request.
+ */
+async function* countedChunks(body, declared) {
+    const reader = body.getReader();
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (value === undefined)
+                continue;
+            total += value.byteLength;
+            if (total > declared) {
+                await reader.cancel();
+                throw new types_js_1.InvalidArtifactError(`s3Artifacts: the streamed payload is longer than the ${declared} bytes it declared. ` +
+                    `The upload was cut off rather than completed under a meta that describes a ` +
+                    `different payload. State the exact byte length.`);
+            }
+            yield value;
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    if (total !== declared) {
+        throw new types_js_1.InvalidArtifactError(`s3Artifacts: the streamed payload ended after ${total} bytes but declared ${declared}. ` +
+            `The upload fails rather than storing a ticket that misdescribes its own payload.`);
+    }
+}
+/**
+ * An artifact store in an S3 bucket.
+ *
+ * @example
+ *   const store = s3Artifacts({ bucket: 'my-agent-artifacts', prefix: 'artifacts' });
+ *   const agent = Agent.create({ provider, artifacts: store });
+ */
+function s3Artifacts(options) {
+    const bucket = (0, objectStore_js_1.assertBucketOption)('s3Artifacts', 'bucket', options.bucket);
+    const root = (0, scopePath_js_1.normalizeKeyRoot)('s3Artifacts', options.prefix);
+    const { retention } = options;
+    (0, retention_js_1.assertRetention)('s3Artifacts', retention);
+    const now = options._now ?? Date.now;
+    // Resolved at CONSTRUCTION: a missing peer dep refuses where the config was
+    // written, not at the first put of the first run.
+    const sdk = options._sdk ?? (options._client ? {} : loadS3Sdk());
+    const client = options._client ?? options.client ?? buildClient(sdk, options.region);
+    const commands = resolveCommands(sdk, options._client !== undefined || options.client !== undefined);
+    const keyFor = (scope, ref) => `${(0, scopePath_js_1.scopeKeyPrefix)(scope, root)}${ref}`;
+    const failure = (0, objectStore_js_1.objectFailurePolicy)('s3Artifacts', isMissingObject);
+    /**
+     * One command, dispatched.
+     *
+     * `meaning` says whether THIS call asked about one object, and so whether a
+     * 404 may travel back raw for the call site to read as `null`. It defaults
+     * to `'not-an-answer'`: a new call site that forgets it gets the sanitizer,
+     * never the leak. Only pass `'missing-object'` where the `catch` that
+     * converts it is a line away.
+     */
+    const send = async (operation, command, meaning = 'not-an-answer') => {
+        try {
+            return await client.send(command);
+        }
+        catch (err) {
+            throw failure(operation, err, meaning);
+        }
+    };
+    /** HeadObject → the ticket, or undefined for missing/foreign/expired.
+     *  Expired objects are swept on the way past. */
+    const liveHead = async (scope, ref) => {
+        if (!(0, naming_js_1.isArtifactRef)(ref))
+            return undefined;
+        const key = keyFor(scope, ref);
+        let output;
+        try {
+            output = (await send('HeadObject', new commands.Head({ Bucket: bucket, Key: key }), 'missing-object'));
+        }
+        catch (err) {
+            if (isMissingObject(err))
+                return undefined;
+            throw err;
+        }
+        const ticket = (0, objectStore_js_1.decodeArtifactMetaValue)((0, objectStore_js_1.readMetadataEntry)(output?.Metadata, objectStore_js_1.ARTIFACT_META_KEY));
+        if (ticket === undefined)
+            return undefined; // not one of ours
+        if ((0, objectStore_js_1.isExpiredMeta)(ticket.meta, now())) {
+            await removeKey(key);
+            return undefined;
+        }
+        return ticket;
+    };
+    const removeKey = async (key) => {
+        try {
+            await send('DeleteObject', new commands.Delete({ Bucket: bucket, Key: key }), 'missing-object');
+        }
+        catch (err) {
+            if (!isMissingObject(err))
+                throw err; // deleting an absence is agreement
+        }
+    };
+    /** Every key in a scope, with the size and creation time S3 reports for
+     *  free on a listing. */
+    const listKeys = async (scope) => {
+        const prefix = (0, scopePath_js_1.scopeKeyPrefix)(scope, root);
+        const rows = [];
+        let token;
+        for (let call = 0; call < MAX_LIST_CALLS; call++) {
+            const output = (await send('ListObjectsV2', new commands.List({
+                Bucket: bucket,
+                Prefix: prefix,
+                MaxKeys: LIST_PAGE_SIZE,
+                ...(token !== undefined && { ContinuationToken: token }),
+            })));
+            for (const object of output?.Contents ?? []) {
+                const key = object.Key;
+                if (typeof key !== 'string')
+                    continue;
+                const ref = key.slice(prefix.length);
+                if (!(0, naming_js_1.isArtifactRef)(ref))
+                    continue; // foreign object in a shared bucket
+                rows.push({
+                    key,
+                    ref,
+                    serviceCreatedAt: toMillis(object.LastModified),
+                    bytes: typeof object.Size === 'number' ? object.Size : 0,
+                });
+            }
+            token = output?.IsTruncated === true ? output.NextContinuationToken : undefined;
+            if (token === undefined)
+                break;
+        }
+        return rows;
+    };
+    return {
+        async put(scope, input) {
+            const at = now();
+            const { meta } = await (0, minting_js_1.prepareArtifact)(input, async (parent) => (await liveHead(scope, parent)) !== undefined, retention, at);
+            const bytes = (0, payload_js_1.canonicalPayloadBytes)(input.data);
+            const shape = (0, payload_js_1.payloadShapeOf)(input.data);
+            const metaValue = (0, objectStore_js_1.encodeArtifactMetaValue)(meta, shape, S3_METADATA_BUDGET, 's3Artifacts');
+            const swept = await applyRetention(scope, meta.bytes, at);
+            await send('PutObject', new commands.Put({
+                Bucket: bucket,
+                Key: keyFor(scope, meta.ref),
+                Body: bytes,
+                ContentType: meta.mediaType,
+                Metadata: { [objectStore_js_1.ARTIFACT_META_KEY]: metaValue },
+            }));
+            return { meta, swept };
+        },
+        async head(scope, ref) {
+            return (await liveHead(scope, ref))?.meta ?? null;
+        },
+        async get(scope, ref) {
+            if (!(0, naming_js_1.isArtifactRef)(ref))
+                return null;
+            const key = keyFor(scope, ref);
+            let output;
+            try {
+                output = (await send('GetObject', new commands.Get({ Bucket: bucket, Key: key }), 'missing-object'));
+            }
+            catch (err) {
+                if (isMissingObject(err))
+                    return null;
+                throw err;
+            }
+            const ticket = (0, objectStore_js_1.decodeArtifactMetaValue)((0, objectStore_js_1.readMetadataEntry)(output?.Metadata, objectStore_js_1.ARTIFACT_META_KEY));
+            if (ticket === undefined)
+                return null;
+            if ((0, objectStore_js_1.isExpiredMeta)(ticket.meta, now())) {
+                await removeKey(key);
+                return null;
+            }
+            const bytes = await readBodyBytes(output.Body);
+            const data = (0, payload_js_1.decodeCanonicalPayload)(ticket.shape, bytes);
+            if (ticket.meta.digest !== undefined) {
+                const actual = await (0, payload_js_1.computeArtifactDigest)(data);
+                if (actual !== ticket.meta.digest) {
+                    throw new types_js_1.ArtifactIntegrityError(ticket.meta.ref, ticket.meta.digest, actual);
+                }
+            }
+            return { meta: ticket.meta, data };
+        },
+        async delete(scope, ref) {
+            if (!(0, naming_js_1.isArtifactRef)(ref))
+                return;
+            await removeKey(keyFor(scope, ref));
+        },
+        async list(scope, listOptions) {
+            const keys = await listKeys(scope);
+            // Order and page over the KEY rows (LastModified is free on a listing);
+            // only the rows this page returns are HEADed for their tickets.
+            const window = (0, objectStore_js_1.pageObjectListing)(keys.map((row) => ({
+                meta: { ref: row.ref },
+                serviceCreatedAt: row.serviceCreatedAt,
+            })), listOptions);
+            const rows = [];
+            for (const stub of window.artifacts) {
+                const ticket = await liveHead(scope, stub.ref);
+                if (ticket !== undefined)
+                    rows.push(ticket.meta);
+            }
+            return { artifacts: rows, ...(window.cursor !== undefined && { cursor: window.cursor }) };
+        },
+        async putStream(scope, input, body) {
+            const at = now();
+            const declared = (0, streaming_js_1.assertStreamBytes)('s3Artifacts', input.bytes);
+            // The streamed payload is bytes by definition: nothing here parses it,
+            // so it reads back as a Uint8Array through get() and as the same bytes
+            // through getStream().
+            const { meta } = await (0, minting_js_1.prepareArtifact)({ ...input, data: new Uint8Array(0) }, async (parent) => (await liveHead(scope, parent)) !== undefined, retention, at);
+            const stated = { ...meta, bytes: declared };
+            const metaValue = (0, objectStore_js_1.encodeArtifactMetaValue)(stated, 'binary', S3_METADATA_BUDGET, 's3Artifacts');
+            const swept = await applyRetention(scope, declared, at);
+            const stream = (0, lazyRequire_js_1.lazyRequire)('node:stream');
+            await send('PutObject', new commands.Put({
+                Bucket: bucket,
+                Key: keyFor(scope, stated.ref),
+                Body: stream.Readable.from(countedChunks(body, declared)),
+                ContentLength: declared,
+                ContentType: stated.mediaType,
+                Metadata: { [objectStore_js_1.ARTIFACT_META_KEY]: metaValue },
+            }));
+            return { meta: stated, swept };
+        },
+        async getStream(scope, ref) {
+            if (!(0, naming_js_1.isArtifactRef)(ref))
+                return null;
+            const key = keyFor(scope, ref);
+            let output;
+            try {
+                output = (await send('GetObject', new commands.Get({ Bucket: bucket, Key: key }), 'missing-object'));
+            }
+            catch (err) {
+                if (isMissingObject(err))
+                    return null;
+                throw err;
+            }
+            const ticket = (0, objectStore_js_1.decodeArtifactMetaValue)((0, objectStore_js_1.readMetadataEntry)(output?.Metadata, objectStore_js_1.ARTIFACT_META_KEY));
+            if (ticket === undefined)
+                return null;
+            if ((0, objectStore_js_1.isExpiredMeta)(ticket.meta, now())) {
+                await removeKey(key);
+                return null;
+            }
+            return { meta: ticket.meta, body: await readBodyStream(output.Body) };
+        },
+    };
+    /**
+     * The retention pass, run at put. Returns what it swept.
+     *
+     * With no budget dials there is nothing to plan, so nothing is listed: a
+     * put stays exactly one PutObject. Expiry still binds — it is enforced at
+     * read, where it cannot be missed, and reclaimed in bulk by the lifecycle
+     * rule in this file's header.
+     */
+    async function applyRetention(scope, incomingBytes, at) {
+        if (retention === undefined ||
+            (retention.maxBytesPerScope === undefined && retention.maxCountPerScope === undefined)) {
+            return [];
+        }
+        const keys = await listKeys(scope);
+        const held = [];
+        for (const row of keys) {
+            const ticket = await liveHead(scope, row.ref);
+            if (ticket === undefined)
+                continue; // missing, foreign, or just swept
+            held.push({
+                ref: ticket.meta.ref,
+                kind: ticket.meta.kind,
+                bytes: ticket.meta.bytes,
+                ...(ticket.meta.expiresAt !== undefined && { expiresAt: ticket.meta.expiresAt }),
+                // No cheap read-recency in an object store: oldest-first is the
+                // stated law, exactly as it is for a directory.
+                lastAccessedAt: ticket.meta.createdAt,
+            });
+        }
+        const plan = (0, retention_js_1.planRetention)(held, incomingBytes, retention, at);
+        if (plan.refusal !== undefined)
+            throw new types_js_1.InvalidArtifactError(plan.refusal);
+        for (const gone of plan.swept)
+            await removeKey(keyFor(scope, gone.ref));
+        return plan.swept;
+    }
+}
+exports.s3Artifacts = s3Artifacts;
+/** `LastModified` as milliseconds, whatever shape it arrived in. */
+function toMillis(value) {
+    if (value instanceof Date)
+        return value.getTime();
+    if (typeof value === 'string') {
+        const parsed = Date.parse(value);
+        return Number.isFinite(parsed) ? parsed : 0;
+    }
+    return 0;
+}
+function buildClient(sdk, region) {
+    if (typeof sdk.S3Client !== 'function') {
+        throw new Error(`[artifacts] s3Artifacts: \`@aws-sdk/client-s3\` is installed but exports no S3Client. ` +
+            `Update the SDK, or pass \`client\` with a pre-built one.`);
+    }
+    return new sdk.S3Client({ ...(region !== undefined && { region }) });
+}
+/**
+ * The five command constructors, resolved once.
+ *
+ * A name this adapter reaches for and the SDK does not export is a REFUSAL,
+ * never a silent `undefined` that fails as "x is not a constructor" three
+ * frames away — the command-name pin exists because this package shipped that
+ * bug three times.
+ */
+function resolveCommands(sdk, injected) {
+    const wanted = [
+        'PutObjectCommand',
+        'GetObjectCommand',
+        'HeadObjectCommand',
+        'DeleteObjectCommand',
+        'ListObjectsV2Command',
+    ];
+    const missing = wanted.filter((name) => typeof sdk[name] !== 'function');
+    if (missing.length > 0) {
+        if (injected && missing.length === wanted.length) {
+            // An injected client with no SDK module: the double owns the wire, and
+            // each command is a plain object stamped with its own operation name.
+            return {
+                Put: shimCommand('PutObject'),
+                Get: shimCommand('GetObject'),
+                Head: shimCommand('HeadObject'),
+                Delete: shimCommand('DeleteObject'),
+                List: shimCommand('ListObjectsV2'),
+            };
+        }
+        throw new Error(`[artifacts] s3Artifacts: \`@aws-sdk/client-s3\` is installed but ${missing.join(', ')} ` +
+            `${missing.length === 1 ? 'was' : 'were'} not found. Update the SDK.`);
+    }
+    /* eslint-disable @typescript-eslint/no-non-null-assertion */
+    return {
+        Put: sdk.PutObjectCommand,
+        Get: sdk.GetObjectCommand,
+        Head: sdk.HeadObjectCommand,
+        Delete: sdk.DeleteObjectCommand,
+        List: sdk.ListObjectsV2Command,
+    };
+    /* eslint-enable @typescript-eslint/no-non-null-assertion */
+}
+/** A stand-in command for an injected client: it carries the operation name
+ *  and the input, so a double sees exactly which call was made. */
+function shimCommand(operation) {
+    return class {
+        static __command = operation;
+        __command = operation;
+        __input;
+        constructor(input) {
+            this.__input = input;
+        }
+    };
+}
+//# sourceMappingURL=s3Artifacts.js.map

package/dist/artifacts/s3Artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3Artifacts.js","sourceRoot":"","sources":["../../src/artifacts/s3Artifacts.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;;;AAEH,0DAAoD;AACpD,6CAA+C;AAC/C,2CAA4C;AAC5C,qDAU0B;AAC1B,6CAMsB;AACtB,iDAKwB;AACxB,iDAAkE;AAClE,iDAAkE;AAClE,yCAaoB;AAEpB,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,CAAC;AAEpC,qDAAqD;AACrD,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;2DAE2D;AAC3D,MAAM,cAAc,GAAG,EAAE,CAAC;AA6C1B,kEAAkE;AAClE,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,OAAO,IAAA,4BAAW,EAAuB,oBAAoB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,8CAA8C;YAC9C,mFAAmF;YACnF,yFAAyF;YACzF,oBAAoB,CACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAE5E;;kEAEkE;AAClE,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAG,GAIF,CAAC;IACT,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW,CAAC;AACpG,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,aAAa,CAAC,IAAa;IACxC,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAmE,CAAC;IACnF,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,EAAE,oBAAoB,KAAK,UAAU,EAAE,CAAC;QAC1E,OAAO,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mFAAmF;QACjF,oFAAoF;QACpF,6BAA6B,CAChC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,cAAc,CAAC,IAAa;IACzC,MAAM,MAAM,GAAG,IAA0E,CAAC;IAC1F,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,EAAE,oBAAoB,KAAK,UAAU,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC,oBAAoB,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,IAAA,4BAAa,EAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,KAAK,SAAS,CAAC,CAAC,aAAa,CAC3B,IAAgC,EAChC,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,+BAAoB,CAC5B,wDAAwD,QAAQ,sBAAsB;oBACpF,6EAA6E;oBAC7E,iDAAiD,CACpD,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,+BAAoB,CAC5B,iDAAiD,KAAK,uBAAuB,QAAQ,IAAI;YACvF,kFAAkF,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,OAA2B;IACrD,MAAM,MAAM,GAAG,IAAA,mCAAkB,EAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAA,+BAAgB,EAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC9B,IAAA,8BAAe,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;IAErC,4EAA4E;IAC5E,kDAAkD;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,eAAe,CAC9B,GAAG,EACH,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAC9D,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,GAAgB,EAAU,EAAE,CAChE,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,IAAA,oCAAmB,EAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAEpE;;;;;;;;OAQG;IACH,MAAM,IAAI,GAAG,KAAK,EAChB,SAAiB,EACjB,OAAgB,EAChB,UAA2B,eAAe,EACxB,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;IAEF;qDACiD;IACjD,MAAM,QAAQ,GAAG,KAAK,EACpB,KAAoB,EACpB,GAAgB,EACkD,EAAE;QACpE,IAAI,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,MAA8C,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAClB,YAAY,EACZ,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAC/C,gBAAgB,CACjB,CAA2C,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,wCAAuB,EAAC,IAAA,kCAAiB,EAAC,MAAM,EAAE,QAAQ,EAAE,kCAAiB,CAAC,CAAC,CAAC;QAC/F,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,CAAC,kBAAkB;QAC9D,IAAI,IAAA,8BAAa,EAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,CACR,cAAc,EACd,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACjD,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC,CAAC,mCAAmC;QAC3E,CAAC;IACH,CAAC,CAAC;IAEF;6BACyB;IACzB,MAAM,QAAQ,GAAG,KAAK,EACpB,KAAoB,EACmE,EAAE;QACzF,MAAM,MAAM,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAiF,EAAE,CAAC;QAC9F,IAAI,KAAyB,CAAC;QAC9B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CACxB,eAAe,EACf,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAChB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,cAAc;gBACvB,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzD,CAAC,CACH,CAIA,CAAC;YACF,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;gBACvB,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,SAAS;gBACtC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,oCAAoC;gBACvE,IAAI,CAAC,IAAI,CAAC;oBACR,GAAG;oBACH,GAAG;oBACH,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC/C,KAAK,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACzD,CAAC,CAAC;YACL,CAAC;YACD,KAAK,GAAG,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK;YACpB,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,4BAAe,EACpC,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS,EAC/D,SAAS,EACT,EAAE,CACH,CAAC;YACF,MAAM,KAAK,GAAG,IAAA,kCAAqB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAA,2BAAc,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,IAAA,wCAAuB,EAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;YAC1F,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,CACR,WAAW,EACX,IAAI,QAAQ,CAAC,GAAG,CAAC;gBACf,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;gBAC5B,IAAI,EAAE,KAAK;gBACX,WAAW,EAAE,IAAI,CAAC,SAAS;gBAC3B,QAAQ,EAAE,EAAE,CAAC,kCAAiB,CAAC,EAAE,SAAS,EAAE;aAC7C,CAAC,CACH,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG;YACnB,OAAO,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;QACpD,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG;YAClB,IAAI,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,MAA8D,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAClB,WAAW,EACX,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAC9C,gBAAgB,CACjB,CAA2D,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,eAAe,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACtC,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,wCAAuB,EACpC,IAAA,kCAAiB,EAAC,MAAM,EAAE,QAAQ,EAAE,kCAAiB,CAAC,CACvD,CAAC;YACF,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,IAAA,8BAAa,EAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBACtC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAAqB,EAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBAClC,MAAM,IAAI,iCAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG;YACrB,IAAI,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC;gBAAE,OAAO;YAChC,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,WAAiC;YACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,wEAAwE;YACxE,gEAAgE;YAChE,MAAM,MAAM,GAAG,IAAA,kCAAiB,EAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACjB,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAkB;gBACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;aACvC,CAAC,CAAC,EACH,WAAW,CACZ,CAAC;YACF,MAAM,IAAI,GAAmB,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5F,CAAC;QAED,KAAK,CAAC,SAAS,CACb,KAAK,EACL,KAA6B,EAC7B,IAAgC;YAEhC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,IAAA,gCAAiB,EAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/D,uEAAuE;YACvE,uEAAuE;YACvE,uBAAuB;YACvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,4BAAe,EACpC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,EACrC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS,EAC/D,SAAS,EACT,EAAE,CACH,CAAC;YACF,MAAM,MAAM,GAAiB,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAA,wCAAuB,EACvC,MAAM,EACN,QAAQ,EACR,kBAAkB,EAClB,aAAa,CACd,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,IAAA,4BAAW,EAA+B,aAAa,CAAC,CAAC;YACxE,MAAM,IAAI,CACR,WAAW,EACX,IAAI,QAAQ,CAAC,GAAG,CAAC;gBACf,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAC9B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACzD,aAAa,EAAE,QAAQ;gBACvB,WAAW,EAAE,MAAM,CAAC,SAAS;gBAC7B,QAAQ,EAAE,EAAE,CAAC,kCAAiB,CAAC,EAAE,SAAS,EAAE;aAC7C,CAAC,CACH,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG;YACxB,IAAI,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,MAA8D,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAClB,WAAW,EACX,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAC9C,gBAAgB,CACjB,CAA2D,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,eAAe,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACtC,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,wCAAuB,EACpC,IAAA,kCAAiB,EAAC,MAAM,EAAE,QAAQ,EAAE,kCAAiB,CAAC,CACvD,CAAC;YACF,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,IAAA,8BAAa,EAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBACtC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,CAAC;KACF,CAAC;IAEF;;;;;;;OAOG;IACH,KAAK,UAAU,cAAc,CAC3B,KAAoB,EACpB,aAAqB,EACrB,EAAU;QAEV,IACE,SAAS,KAAK,SAAS;YACvB,CAAC,SAAS,CAAC,gBAAgB,KAAK,SAAS,IAAI,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC,EACtF,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,GAAkB,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS,CAAC,kCAAkC;YACtE,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChF,gEAAgE;gBAChE,gDAAgD;gBAChD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;aACtC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,4BAAa,EAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,+BAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;AACH,CAAC;AAzTD,kCAyTC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAC,KAAgC;IAChD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAyB,EAAE,MAA0B;IACxE,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,wFAAwF;YACtF,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,GAAyB,EACzB,QAAiB;IAQjB,MAAM,MAAM,GAAG;QACb,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,qBAAqB;QACrB,sBAAsB;KACd,CAAC;IACX,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,uEAAuE;YACvE,sEAAsE;YACtE,OAAO;gBACL,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC;gBAC7B,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC;gBAC7B,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;gBAC/B,MAAM,EAAE,WAAW,CAAC,cAAc,CAAC;gBACnC,IAAI,EAAE,WAAW,CAAC,eAAe,CAAC;aACnC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oEAAoE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACvF,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,6BAA6B,CACxE,CAAC;IACJ,CAAC;IACD,6DAA6D;IAC7D,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,gBAAiB;QAC1B,GAAG,EAAE,GAAG,CAAC,gBAAiB;QAC1B,IAAI,EAAE,GAAG,CAAC,iBAAkB;QAC5B,MAAM,EAAE,GAAG,CAAC,mBAAoB;QAChC,IAAI,EAAE,GAAG,CAAC,oBAAqB;KAChC,CAAC;IACF,4DAA4D;AAC9D,CAAC;AAED;mEACmE;AACnE,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO;QACL,MAAM,CAAU,SAAS,GAAG,SAAS,CAAC;QAC7B,SAAS,GAAG,SAAS,CAAC;QACtB,OAAO,CAAU;QAC1B,YAAY,KAAc;YACxB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/artifacts/scopePath.js

@@ -0,0 +1,87 @@
+"use strict";
+/**
+ * artifacts/scopePath — the ONE owner of "a scope becomes path segments".
+ *
+ * Every durable adapter partitions its storage by the scope tuple, and every
+ * one of them takes CALLER STRINGS (`tenant`, `principal`, `conversationId`)
+ * and turns them into names inside a hierarchy: directories on a filesystem,
+ * key prefixes in an object store. That is a traversal surface, and it must
+ * be closed the same way in all of them — one encoding, one place, so a
+ * hostile tenant cannot be inert on disk and a navigation hop in a bucket.
+ *
+ * The law, unchanged from the directory adapter that first stated it
+ * (9.21.0), now shared rather than copied:
+ *
+ *   • encode from the FIELD, never from a joined namespace — a tenant
+ *     containing `/` must not become two segments;
+ *   • `encodeURIComponent` leaves `.` alone, so dots are encoded too:
+ *     a tenant of literally `'..'` would otherwise survive as a real
+ *     parent-directory hop (`%2E%2E` is a NAME);
+ *   • an empty or absent field collapses to `_`, mirroring
+ *     `identityNamespace`'s stable layout, so "no tenant" is one shape and
+ *     not two.
+ *
+ * After this, `..`, `/` and `\` arrive as data and land as literals. The
+ * adapters assert `isArtifactRef` on the last segment anyway, because
+ * "cannot happen" is a claim, not a defence.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeKeyRoot = exports.scopeKeyPrefix = exports.scopeSegments = exports.scopeSegment = void 0;
+/** One RAW tuple field → one inert path/key segment. */
+function scopeSegment(raw) {
+    return encodeURIComponent(raw === undefined || raw === '' ? '_' : raw).replace(/\./g, '%2E');
+}
+exports.scopeSegment = scopeSegment;
+/** The three encoded segments of a scope, in the fixed tenant/principal/
+ *  conversation order every adapter lays out. */
+function scopeSegments(scope) {
+    return [
+        scopeSegment(scope.tenant),
+        scopeSegment(scope.principal),
+        scopeSegment(scope.conversationId),
+    ];
+}
+exports.scopeSegments = scopeSegments;
+/**
+ * The object-key prefix for one scope: `[<root>/]<tenant>/<principal>/<conversation>/`.
+ *
+ * Trailing slash included on purpose — it is what makes a prefix listing
+ * exact. Without it, scope `c` would also list scope `c2`'s keys, which is
+ * the isolation bug this whole module exists to prevent.
+ */
+function scopeKeyPrefix(scope, root) {
+    const head = root === undefined || root === '' ? '' : `${root}/`;
+    return `${head}${scopeSegments(scope).join('/')}/`;
+}
+exports.scopeKeyPrefix = scopeKeyPrefix;
+/**
+ * Validate an operator-supplied key ROOT at construction (the prefix a bucket
+ * is shared under). It is not caller data — an operator writes it — so it is
+ * not encoded; it is CHECKED, and refused where it would be ambiguous.
+ *
+ * @param adapter the factory name, for the refusal's first word.
+ * @param root    the raw option, or undefined.
+ * @returns the normalized root (no leading/trailing `/`), or undefined.
+ */
+function normalizeKeyRoot(adapter, root) {
+    if (root === undefined)
+        return undefined;
+    if (typeof root !== 'string' || root.trim() === '') {
+        throw new TypeError(`[artifacts] ${adapter}({ prefix: ${JSON.stringify(root)} }) is not a key prefix. ` +
+            `Give it a path segment (e.g. 'artifacts'), or omit the option — absent means the ` +
+            `scope layout starts at the root of the bucket.`);
+    }
+    if (root.includes('..')) {
+        throw new TypeError(`[artifacts] ${adapter}({ prefix: ${JSON.stringify(root)} }) contains '..'. Object keys ` +
+            `are flat strings and '..' is not a hop here, but a prefix that reads like one is a ` +
+            `misunderstanding waiting to be acted on. Name the prefix literally.`);
+    }
+    const trimmed = root.replace(/^\/+/, '').replace(/\/+$/, '');
+    if (trimmed === '') {
+        throw new TypeError(`[artifacts] ${adapter}({ prefix: ${JSON.stringify(root)} }) is only slashes. Name a ` +
+            `prefix, or omit the option.`);
+    }
+    return trimmed;
+}
+exports.normalizeKeyRoot = normalizeKeyRoot;
+//# sourceMappingURL=scopePath.js.map

package/dist/artifacts/scopePath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopePath.js","sourceRoot":"","sources":["../../src/artifacts/scopePath.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAIH,wDAAwD;AACxD,SAAgB,YAAY,CAAC,GAAuB;IAClD,OAAO,kBAAkB,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC;AAFD,oCAEC;AAED;iDACiD;AACjD,SAAgB,aAAa,CAAC,KAAoB;IAChD,OAAO;QACL,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1B,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7B,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC;KACnC,CAAC;AACJ,CAAC;AAND,sCAMC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,KAAoB,EAAE,IAAa;IAChE,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;IACjE,OAAO,GAAG,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACrD,CAAC;AAHD,wCAGC;AAED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAAC,OAAe,EAAE,IAAwB;IACxE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CACjB,eAAe,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2BAA2B;YACjF,mFAAmF;YACnF,gDAAgD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CACjB,eAAe,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iCAAiC;YACvF,qFAAqF;YACrF,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CACjB,eAAe,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAA8B;YACpF,6BAA6B,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAxBD,4CAwBC"}