artifactpass 0.1.0-rc.2

package/dist/deployment/migrations/0001-artifacts.sql

@@ -0,0 +1,23 @@
+CREATE TABLE artifacts (
+  id TEXT PRIMARY KEY NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('staging', 'active', 'cleanup_pending')),
+  object_key TEXT NOT NULL UNIQUE,
+  derived_object_key TEXT,
+  filename TEXT NOT NULL,
+  mime_type TEXT NOT NULL,
+  byte_size INTEGER NOT NULL CHECK (byte_size >= 0),
+  sha256 TEXT NOT NULL,
+  share_token_hash TEXT NOT NULL UNIQUE,
+  created_at INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL,
+  extraction_status TEXT NOT NULL,
+  extractor TEXT,
+  extractor_version TEXT,
+  page_count INTEGER,
+  extraction_reason TEXT,
+  cleanup_attempts INTEGER NOT NULL DEFAULT 0,
+  last_cleanup_error TEXT
+);
+
+CREATE INDEX artifacts_status_expires_at_idx ON artifacts (status, expires_at);
+

package/dist/deployment/migrations/0002-identity.sql

@@ -0,0 +1,33 @@
+CREATE TABLE device_authorizations (
+  id TEXT PRIMARY KEY NOT NULL,
+  device_code_hash TEXT NOT NULL UNIQUE,
+  user_code_hash TEXT NOT NULL UNIQUE,
+  code_challenge TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'consumed')),
+  created_at INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL,
+  next_poll_at INTEGER NOT NULL,
+  poll_attempts INTEGER NOT NULL DEFAULT 0 CHECK (poll_attempts >= 0),
+  identity_subject TEXT,
+  identity_email TEXT,
+  approved_at INTEGER,
+  consumed_at INTEGER
+);
+
+CREATE INDEX device_authorizations_expires_at_idx
+  ON device_authorizations (expires_at);
+
+CREATE TABLE agent_tokens (
+  id TEXT PRIMARY KEY NOT NULL,
+  token_hash TEXT NOT NULL UNIQUE,
+  identity_subject TEXT NOT NULL,
+  identity_email TEXT NOT NULL,
+  scope TEXT NOT NULL CHECK (scope = 'artifact:create'),
+  created_at INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL,
+  revoked_at INTEGER
+);
+
+CREATE INDEX agent_tokens_expires_at_idx
+  ON agent_tokens (expires_at);
+

package/dist/deployment/migrations/0003-request-rate-limits.sql

@@ -0,0 +1,9 @@
+CREATE TABLE request_rate_limits (
+  bucket_key TEXT PRIMARY KEY NOT NULL,
+  window_start INTEGER NOT NULL,
+  request_count INTEGER NOT NULL CHECK (request_count >= 0),
+  expires_at INTEGER NOT NULL
+);
+
+CREATE INDEX request_rate_limits_expires_at_idx
+  ON request_rate_limits (expires_at);

package/dist/deployment/migrations/0004-device-token-replay.sql

@@ -0,0 +1 @@
+ALTER TABLE device_authorizations ADD COLUMN agent_token_id TEXT;

package/dist/deployment/migrations/0005-publication-idempotency.sql

@@ -0,0 +1,7 @@
+ALTER TABLE artifacts ADD COLUMN publisher_id TEXT;
+ALTER TABLE artifacts ADD COLUMN publication_attempt TEXT;
+ALTER TABLE artifacts ADD COLUMN payload_commitment TEXT;
+
+CREATE UNIQUE INDEX artifacts_publisher_attempt_unique
+ON artifacts (publisher_id, publication_attempt)
+WHERE publisher_id IS NOT NULL AND publication_attempt IS NOT NULL;

package/dist/deployment/migrations/0006-pdf-provenance.sql

@@ -0,0 +1,16 @@
+ALTER TABLE artifacts ADD COLUMN legacy_derived_object_key TEXT;
+ALTER TABLE artifacts ADD COLUMN pdf_trust_status TEXT NOT NULL DEFAULT 'not_applicable';
+ALTER TABLE artifacts ADD COLUMN pdf_trust_reason TEXT;
+ALTER TABLE artifacts ADD COLUMN pdf_provenance_receipt TEXT;
+
+UPDATE artifacts
+SET legacy_derived_object_key = derived_object_key,
+    derived_object_key = NULL,
+    extraction_status = 'unavailable',
+    extractor = NULL,
+    extractor_version = NULL,
+    page_count = NULL,
+    extraction_reason = 'Legacy PDF extraction is not agent-readable.',
+    pdf_trust_status = 'human_only',
+    pdf_trust_reason = 'legacy'
+WHERE mime_type = 'application/pdf';

package/dist/deployment/storage-lifecycle.json

@@ -0,0 +1,17 @@
+{
+  "rules": [
+    {
+      "id": "delete-artifact-objects-after-two-days",
+      "enabled": true,
+      "conditions": {
+        "prefix": "artifacts/"
+      },
+      "deleteObjectsTransition": {
+        "condition": {
+          "type": "Age",
+          "maxAge": 172800
+        }
+      }
+    }
+  ]
+}

package/dist/deployment/wrangler-template.json

@@ -0,0 +1,103 @@
+{
+  "configPath": "/Users/lorde/Documents/exploration-1/lordebuilds.artifacts.share/apps/artifact-service/wrangler.jsonc",
+  "userConfigPath": "/Users/lorde/Documents/exploration-1/lordebuilds.artifacts.share/apps/artifact-service/wrangler.jsonc",
+  "topLevelName": "lordebuilds-artifacts-share",
+  "definedEnvironments": [],
+  "compatibility_date": "2026-08-16",
+  "compatibility_flags": [],
+  "jsx_factory": "React.createElement",
+  "jsx_fragment": "React.Fragment",
+  "rules": [
+    {
+      "type": "ESModule",
+      "globs": [
+        "**/*.js",
+        "**/*.mjs"
+      ]
+    }
+  ],
+  "name": "lordebuilds-artifacts-share",
+  "main": "./index.js",
+  "triggers": {
+    "crons": [
+      "* * * * *"
+    ]
+  },
+  "assets": {
+    "binding": "ASSETS",
+    "run_worker_first": [
+      "/health",
+      "/upload",
+      "/connect/*",
+      "/api/*",
+      "/a/*"
+    ],
+    "directory": "./client"
+  },
+  "vars": {
+    "ALLOWED_EXPIRY_SECONDS": "900,1800,3600,43200,86400",
+    "MAX_ARTIFACT_BYTES": "26214400",
+    "MAX_EXPIRY_SECONDS": "86400"
+  },
+  "durable_objects": {
+    "bindings": []
+  },
+  "workflows": [],
+  "migrations": [],
+  "exports": {},
+  "kv_namespaces": [],
+  "cloudchamber": {},
+  "send_email": [],
+  "queues": {
+    "producers": [],
+    "consumers": []
+  },
+  "r2_buckets": [
+    {
+      "binding": "ARTIFACTS",
+      "bucket_name": "lordebuilds-artifacts-share"
+    }
+  ],
+  "d1_databases": [
+    {
+      "binding": "ARTIFACT_DB",
+      "database_name": "lordebuilds-artifacts-share",
+      "database_id": "00000000-0000-0000-0000-000000000000",
+      "migrations_dir": "./migrations"
+    }
+  ],
+  "vectorize": [],
+  "ai_search_namespaces": [],
+  "ai_search": [],
+  "agent_memory": [],
+  "hyperdrive": [],
+  "services": [],
+  "analytics_engine_datasets": [],
+  "dispatch_namespaces": [],
+  "mtls_certificates": [],
+  "pipelines": [],
+  "secrets_store_secrets": [],
+  "artifacts": [],
+  "unsafe_hello_world": [],
+  "flagship": [],
+  "worker_loaders": [],
+  "ratelimits": [],
+  "vpc_services": [],
+  "vpc_networks": [],
+  "logfwdr": {
+    "bindings": []
+  },
+  "python_modules": {
+    "exclude": [
+      "**/*.pyc"
+    ]
+  },
+  "dev": {
+    "ip": "localhost",
+    "local_protocol": "http",
+    "upstream_protocol": "http",
+    "enable_containers": true,
+    "generate_types": false
+  },
+  "no_bundle": true
+}

package/dist/install-receipt-v1.schema.json

@@ -0,0 +1,101 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://artifactpass.com/schemas/install-receipt-v1.json",
+  "title": "ArtifactPass install receipt v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "receipt_version",
+    "product",
+    "product_version",
+    "operation_id",
+    "status",
+    "profile",
+    "origin",
+    "workspace_roots",
+    "adapters",
+    "portable_bundle",
+    "mcp",
+    "skills",
+    "credential",
+    "migration",
+    "outcomes",
+    "restart_required",
+    "rollback",
+    "receipt_path"
+  ],
+  "properties": {
+    "receipt_version": { "const": 1 },
+    "product": { "const": "ArtifactPass" },
+    "product_version": { "type": "string", "minLength": 1 },
+    "operation_id": { "type": "string", "minLength": 1 },
+    "status": { "enum": ["success", "failed"] },
+    "profile": { "type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,30}[a-z0-9])?$" },
+    "origin": { "type": "string", "format": "uri" },
+    "workspace_roots": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "adapters": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "enum": ["codex", "claude"] }
+    },
+    "portable_bundle": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sha256", "host_registration"],
+      "properties": {
+        "sha256": { "type": "string", "pattern": "^(?:[a-f0-9]{64})?$" },
+        "host_registration": { "enum": ["installed", "manual-required", "not-reached"] },
+        "mcp_config": { "type": "string", "minLength": 1 },
+        "skills_directory": { "type": "string", "minLength": 1 }
+      }
+    },
+    "mcp": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["negotiated", "tools", "representative_invocation"],
+      "properties": {
+        "negotiated": { "type": "boolean" },
+        "tools": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "enum": ["publish_artifact", "read_artifact"] }
+        },
+        "representative_invocation": { "type": "boolean" }
+      }
+    },
+    "skills": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["verified", "names"],
+      "properties": {
+        "verified": { "type": "boolean" },
+        "names": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "enum": ["read-shared-artifact", "share-artifact"] }
+        }
+      }
+    },
+    "credential": { "enum": ["reused", "created", "rotated", "none", "not-reached"] },
+    "migration": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["actions", "legacy_preserved"],
+      "properties": {
+        "actions": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "legacy_preserved": { "type": "boolean" }
+      }
+    },
+    "outcomes": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "restart_required": { "type": "boolean" },
+    "rollback": { "enum": ["not-required", "complete"] },
+    "failed_stage": { "enum": ["preflight", "bundle", "connection", "verified", "receipt", "committed"] },
+    "resumed_from": { "type": "string", "minLength": 1 },
+    "receipt_path": { "type": "string", "minLength": 1 }
+  }
+}

package/dist/install-receipt.schema.json

@@ -0,0 +1,107 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://artifactpass.com/schemas/install-receipt-v2.json",
+  "title": "ArtifactPass install receipt v2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "receipt_version",
+    "product",
+    "product_version",
+    "operation_id",
+    "status",
+    "profile",
+    "origin",
+    "workspace_roots",
+    "adapters",
+    "portable_bundle",
+    "mcp",
+    "skills",
+    "credential",
+    "migration",
+    "outcomes",
+    "restart_required",
+    "rollback",
+    "receipt_path"
+  ],
+  "properties": {
+    "receipt_version": { "const": 2 },
+    "product": { "const": "ArtifactPass" },
+    "product_version": { "type": "string", "minLength": 1 },
+    "operation_id": { "type": "string", "minLength": 1 },
+    "status": { "enum": ["success", "failed"] },
+    "profile": { "type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,30}[a-z0-9])?$" },
+    "origin": { "type": "string", "format": "uri" },
+    "workspace_roots": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "adapters": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "enum": ["codex", "claude"] }
+    },
+    "portable_bundle": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sha256", "host_registration"],
+      "properties": {
+        "sha256": { "type": "string", "pattern": "^(?:[a-f0-9]{64})?$" },
+        "host_registration": { "enum": ["installed", "manual-required", "not-reached"] },
+        "mcp_config": { "type": "string", "minLength": 1 },
+        "skills_directory": { "type": "string", "minLength": 1 }
+      }
+    },
+    "mcp": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["negotiated", "tools", "representative_invocation"],
+      "properties": {
+        "negotiated": { "type": "boolean" },
+        "tools": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "enum": ["publish_artifact", "read_artifact"] }
+        },
+        "representative_invocation": { "type": "boolean" }
+      }
+    },
+    "skills": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["verified", "names"],
+      "properties": {
+        "verified": { "type": "boolean" },
+        "names": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "enum": ["read-shared-artifact", "share-artifact"] }
+        }
+      }
+    },
+    "credential": { "enum": ["reused", "created", "rotated", "none", "not-reached"] },
+    "migration": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["actions", "legacy_preserved"],
+      "properties": {
+        "actions": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "legacy_preserved": { "type": "boolean" }
+      }
+    },
+    "outcomes": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "restart_required": { "type": "boolean" },
+    "rollback": { "enum": ["not-required", "complete", "incomplete"] },
+    "rollback_failures": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "failed_stage": { "enum": ["preflight", "bundle", "connection", "verified", "receipt", "committed"] },
+    "resumed_from": { "type": "string", "minLength": 1 },
+    "receipt_path": { "type": "string", "minLength": 1 }
+  }
+}

package/dist/marketplace/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "artifactpass",
+  "interface": {
+    "displayName": "ArtifactPass"
+  },
+  "plugins": [
+    {
+      "name": "artifactpass",
+      "source": {
+        "source": "local",
+        "path": "./plugins/artifactpass"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Productivity"
+    }
+  ]
+}

package/dist/marketplace/.claude-plugin/marketplace.json

@@ -0,0 +1,17 @@
+{
+  "name": "artifactpass",
+  "owner": {
+    "name": "Lorde Builds"
+  },
+  "metadata": {
+    "description": "Publishes a file from an explicitly allowed workspace through ArtifactPass and reads supported shared artifacts in bounded chunks."
+  },
+  "plugins": [
+    {
+      "name": "artifactpass",
+      "source": "./plugins/artifactpass",
+      "description": "Share local Markdown, HTML, and PDF artifacts through a private temporary link.",
+      "category": "Productivity"
+    }
+  ]
+}

package/dist/marketplace/plugins/artifactpass/.claude-plugin/mcp.json

@@ -0,0 +1,10 @@
+{
+  "mcpServers": {
+    "artifactpass": {
+      "command": "node",
+      "args": [
+        "${CLAUDE_PLUGIN_ROOT}/dist/cli.mjs"
+      ]
+    }
+  }
+}

package/dist/marketplace/plugins/artifactpass/.claude-plugin/plugin.json

@@ -0,0 +1,12 @@
+{
+  "name": "artifactpass",
+  "version": "0.1.0-rc.2",
+  "displayName": "ArtifactPass",
+  "description": "Share local Markdown, HTML, and PDF artifacts through a private temporary link.",
+  "author": {
+    "name": "Lorde Builds"
+  },
+  "homepage": "https://github.com/lordelogos/lordebuilds.artifact.pass",
+  "skills": "./skills/",
+  "mcpServers": "./.claude-plugin/mcp.json"
+}

package/dist/marketplace/plugins/artifactpass/.codex-plugin/plugin.json

@@ -0,0 +1,23 @@
+{
+  "name": "artifactpass",
+  "version": "0.1.0-rc.2",
+  "description": "Share local Markdown, HTML, and PDF artifacts through a private temporary link.",
+  "author": {
+    "name": "Lorde Builds"
+  },
+  "homepage": "https://github.com/lordelogos/lordebuilds.artifact.pass",
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "ArtifactPass",
+    "shortDescription": "Share local Markdown, HTML, and PDF artifacts through a private temporary link.",
+    "longDescription": "Publishes a file from an explicitly allowed workspace through ArtifactPass and reads supported shared artifacts in bounded chunks.",
+    "developerName": "Lorde Builds",
+    "category": "Productivity",
+    "capabilities": [
+      "MCP server",
+      "Skills"
+    ],
+    "defaultPrompt": "Share a supported local artifact or read an ArtifactPass link."
+  },
+  "mcpServers": "./.mcp.json"
+}

package/dist/marketplace/plugins/artifactpass/.mcp.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "artifactpass": {
+      "command": "node",
+      "args": [
+        "./dist/cli.mjs"
+      ],
+      "cwd": "."
+    }
+  }
+}