sdlc-agent-4-enterprise-server 1.55.3 → 1.55.8

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.55.3-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.55.8-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>

package/dist/config/ContentProxy.d.ts

@@ -30,5 +30,26 @@ export interface ContentProxyOverride {
     /** Disable the adapter entirely for this tool. */
     enabled?: boolean;
 }
-/** Empty by default — convention detection covers every current exporter. */
+/**
+ * Artifact output roots — the dedicated sinks for orphaned artifact files
+ * (SA4E-380 F-01/F-05). Shared single source for OI-14 (immediate cleanup +
+ * read confinement) and OI-15 (periodic sweep). The raw OS temp root and the
+ * agent workspace are NEVER roots.
+ *
+ * Resolution order:
+ *  1. `ARTIFACT_OUTPUT_ROOTS` env override — `path.delimiter`-separated list
+ *     (operator trust; see SA-08 for the recommended defense-in-depth checks).
+ *  2. Defaults: the dedicated `%TEMP%/sa4e-artifacts` sink, the workspace
+ *     `tmp/artifacts` directory, and the markdown-exporter child's own
+ *     artifact home (F-01: without it every local-path read fails confinement).
+ */
+export declare function artifactOutputRoots(env?: NodeJS.ProcessEnv): readonly string[];
+/**
+ * F-01 containment: is `candidate` (already realpath-canonicalised by the
+ * caller) located inside `root`? Compares with `path.relative` — case-folded
+ * on win32, cross-device resolves to an absolute path → rejected. Separator
+ * boundary is honoured (`<root>-evil` is NOT inside `<root>`).
+ */
+export declare function isPathWithinRoot(root: string, candidate: string): boolean;
+/** Per-tool escape hatch for tools that defy the naming/description convention. */
 export declare const CONTENT_PROXY_OVERRIDES: Record<string, ContentProxyOverride>;

package/dist/config/ContentProxy.js

@@ -11,6 +11,8 @@
  *
  * Overrides exist only for tools that do not follow the convention.
  */
+import * as os from 'os';
+import * as path from 'path';
 /** Tool-name prefixes whose result is a file written by the child server. */
 export const FILE_TOOL_NAME_PREFIXES = ['export_', 'render_', 'generate_'];
 /** Description fallback: "Convert ... to PDF/DOCX/…" (target must be a file format). */
@@ -31,6 +33,50 @@ export const CONTENT_PARAM_ALIASES = [
 export const NON_CONTENT_PARAM = /^(content_base64|.*_base64|file_path|.*_path|path|url|uri|dir|.*_id|id|name|.*_name|key|.*_key|token|secret|password|mime|.*_type|type|format|mode|encoding)$/i;
 /** Maximum artifact size inlined as base64 (mirrors the extension pre-read cap). */
 export const MAX_ARTIFACT_BYTES = 25 * 1024 * 1024;
-/** Empty by default — convention detection covers every current exporter. */
+/**
+ * Artifact output roots — the dedicated sinks for orphaned artifact files
+ * (SA4E-380 F-01/F-05). Shared single source for OI-14 (immediate cleanup +
+ * read confinement) and OI-15 (periodic sweep). The raw OS temp root and the
+ * agent workspace are NEVER roots.
+ *
+ * Resolution order:
+ *  1. `ARTIFACT_OUTPUT_ROOTS` env override — `path.delimiter`-separated list
+ *     (operator trust; see SA-08 for the recommended defense-in-depth checks).
+ *  2. Defaults: the dedicated `%TEMP%/sa4e-artifacts` sink, the workspace
+ *     `tmp/artifacts` directory, and the markdown-exporter child's own
+ *     artifact home (F-01: without it every local-path read fails confinement).
+ */
+export function artifactOutputRoots(env = process.env) {
+    const override = parseArtifactRootsEnv(env.ARTIFACT_OUTPUT_ROOTS);
+    if (override)
+        return override;
+    const workspace = path.resolve(process.cwd());
+    const childHome = process.platform === 'win32'
+        ? path.join(process.env.LOCALAPPDATA ?? '', 'markdown-exporter-mcp', 'artifacts')
+        : path.join(process.env.HOME ?? os.homedir(), '.cache', 'markdown-exporter-mcp', 'artifacts');
+    return [
+        path.join(os.tmpdir(), 'sa4e-artifacts'),
+        path.join(workspace, 'tmp', 'artifacts'),
+        path.resolve(childHome),
+    ];
+}
+/** SA-08 surface: parse the env override; empty/garbage → fall back to defaults. */
+function parseArtifactRootsEnv(raw) {
+    if (!raw)
+        return undefined;
+    const roots = raw.split(path.delimiter).map((s) => s.trim()).filter(Boolean);
+    return roots.length ? roots : undefined;
+}
+/**
+ * F-01 containment: is `candidate` (already realpath-canonicalised by the
+ * caller) located inside `root`? Compares with `path.relative` — case-folded
+ * on win32, cross-device resolves to an absolute path → rejected. Separator
+ * boundary is honoured (`<root>-evil` is NOT inside `<root>`).
+ */
+export function isPathWithinRoot(root, candidate) {
+    const rel = path.relative(path.resolve(root), path.resolve(candidate));
+    return rel === '' || (rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel));
+}
+/** Per-tool escape hatch for tools that defy the naming/description convention. */
 export const CONTENT_PROXY_OVERRIDES = {};
 //# sourceMappingURL=ContentProxy.js.map

package/dist/config/ContentProxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"ContentProxy.js","sourceRoot":"","sources":["../../src/config/ContentProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,gEAAgE,CAAC;AAExG,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,gKAAgK,CAAC;AAEnK,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAyC,EAAE,CAAC"}
+{"version":3,"file":"ContentProxy.js","sourceRoot":"","sources":["../../src/config/ContentProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,gEAAgE,CAAC;AAExG,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,gKAAgK,CAAC;AAEnK,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYnD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GACb,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,uBAAuB,EAAE,WAAW,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,WAAW,CAAC,CAAC;IAClG,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAyC,EAAE,CAAC"}

package/dist/modules/orchestration/artifact-cleanup/CleanupSweep.d.ts

@@ -0,0 +1,60 @@
+/**
+ * CleanupSweep — OI-15 periodic orphan reaper (TDD §9.2, BRD STORY 3 RD-8).
+ *
+ * Safety net for artifacts that escaped immediate cleanup (OI-14): crashes,
+ * power loss, permission errors. Per tick it scans ONLY the dedicated
+ * ARTIFACT_OUTPUT_ROOTS (SECURITY-REVIEW approval condition 2 — never the raw
+ * OS temp root, never the agent workspace). Roots are dedicated artifact
+ * sinks, so EVERY regular non-symlink file older than the TTL is swept —
+ * including job-dir nesting (`<root>/<job>/file`, how markdown-exporter
+ * writes) and arbitrary names (`STP-v1-SA4E-380.docx`); filename prefixes
+ * are NOT a criterion. Directories, symlinks, young files and anything
+ * outside the roots are always kept. Job directories emptied by the sweep
+ * are removed too. Each run is hard-bounded by maxRunMs and logs one
+ * summary line `{ removed, failed, skipped, durationMs }` with basenames only.
+ *
+ * Lifecycle: started/stopped next to the health monitor (OrchestrationModule);
+ * `enabled: false` never starts a timer.
+ */
+import type { Logger } from 'pino';
+import { type ArtifactCleanupConfig } from './cleanup-config.js';
+export interface SweepResult {
+    removed: number;
+    failed: number;
+    skipped: number;
+    durationMs: number;
+    /** True when the tick stopped early because maxRunMs elapsed (UT-48). */
+    bounded: boolean;
+}
+export interface CleanupSweepDeps {
+    /** Overrides loaded on top of the env-derived config (tests, ops). */
+    config?: Partial<ArtifactCleanupConfig>;
+    /** Scan roots override (tests); defaults to the configured artifact roots. */
+    roots?: readonly string[];
+    /** Deletion hook override (tests); defaults to fs.unlinkSync. */
+    removeFile?: (filePath: string) => void;
+}
+export declare class CleanupSweep {
+    private readonly logger;
+    private readonly config;
+    private readonly roots;
+    private readonly removeFile;
+    private timer?;
+    constructor(logger: Logger, deps?: CleanupSweepDeps);
+    /** Start the interval timer; no-op when disabled or already running. */
+    start(): void;
+    /** Stop the timer (idempotent). */
+    stop(): void;
+    /** Run one bounded sweep tick across all configured roots. */
+    runOnce(): SweepResult;
+    /** @returns false when the maxRunMs deadline was reached mid-scan. */
+    private scanRoot;
+    /** @returns false when the maxRunMs deadline was reached mid-scan. */
+    private scanJobDir;
+    private removeDirIfEmpty;
+    private sweepEntry;
+    /** Inside dedicated roots every regular non-symlink file qualifies — the
+     *  confinement boundary is the safety criterion, not the file name. */
+    private isCandidate;
+    private runTick;
+}

package/dist/modules/orchestration/artifact-cleanup/CleanupSweep.js

@@ -0,0 +1,159 @@
+/**
+ * CleanupSweep — OI-15 periodic orphan reaper (TDD §9.2, BRD STORY 3 RD-8).
+ *
+ * Safety net for artifacts that escaped immediate cleanup (OI-14): crashes,
+ * power loss, permission errors. Per tick it scans ONLY the dedicated
+ * ARTIFACT_OUTPUT_ROOTS (SECURITY-REVIEW approval condition 2 — never the raw
+ * OS temp root, never the agent workspace). Roots are dedicated artifact
+ * sinks, so EVERY regular non-symlink file older than the TTL is swept —
+ * including job-dir nesting (`<root>/<job>/file`, how markdown-exporter
+ * writes) and arbitrary names (`STP-v1-SA4E-380.docx`); filename prefixes
+ * are NOT a criterion. Directories, symlinks, young files and anything
+ * outside the roots are always kept. Job directories emptied by the sweep
+ * are removed too. Each run is hard-bounded by maxRunMs and logs one
+ * summary line `{ removed, failed, skipped, durationMs }` with basenames only.
+ *
+ * Lifecycle: started/stopped next to the health monitor (OrchestrationModule);
+ * `enabled: false` never starts a timer.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { artifactOutputRoots } from '../../../config/ContentProxy.js';
+import { loadArtifactCleanupConfig } from './cleanup-config.js';
+export class CleanupSweep {
+    logger;
+    config;
+    roots;
+    removeFile;
+    timer;
+    constructor(logger, deps = {}) {
+        this.logger = logger.child({ component: 'CleanupSweep' });
+        this.config = { ...loadArtifactCleanupConfig(), ...deps.config };
+        this.roots = deps.roots ?? artifactOutputRoots();
+        this.removeFile = deps.removeFile ?? ((filePath) => fs.unlinkSync(filePath));
+    }
+    /** Start the interval timer; no-op when disabled or already running. */
+    start() {
+        if (!this.config.enabled || this.timer)
+            return;
+        this.timer = setInterval(() => this.runTick(), this.config.intervalMs);
+        this.timer.unref?.();
+        this.logger.info({ intervalMs: this.config.intervalMs, ttlMs: this.config.ttlMs, roots: this.roots.length }, 'Artifact cleanup sweep started');
+    }
+    /** Stop the timer (idempotent). */
+    stop() {
+        if (!this.timer)
+            return;
+        clearInterval(this.timer);
+        this.timer = undefined;
+        this.logger.info('Artifact cleanup sweep stopped');
+    }
+    /** Run one bounded sweep tick across all configured roots. */
+    runOnce() {
+        const startedAt = Date.now();
+        const deadline = startedAt + this.config.maxRunMs;
+        const now = Date.now();
+        const result = { removed: 0, failed: 0, skipped: 0, durationMs: 0, bounded: false };
+        for (const root of this.roots) {
+            if (!this.scanRoot(root, now, deadline, result)) {
+                result.bounded = true;
+                break;
+            }
+        }
+        result.durationMs = Date.now() - startedAt;
+        this.logger.info({ removed: result.removed, failed: result.failed, skipped: result.skipped, durationMs: result.durationMs }, 'Artifact cleanup sweep tick completed');
+        if (result.bounded)
+            this.logger.warn({ maxRunMs: this.config.maxRunMs }, 'Artifact cleanup sweep stopped at maxRunMs bound');
+        return result;
+    }
+    /** @returns false when the maxRunMs deadline was reached mid-scan. */
+    scanRoot(root, now, deadline, result) {
+        let entries;
+        try {
+            entries = fs.readdirSync(root, { withFileTypes: true });
+        }
+        catch (err) {
+            this.logger.debug({ err }, 'Artifact cleanup sweep skipped unreadable root');
+            return true;
+        }
+        for (const entry of entries) {
+            if (Date.now() >= deadline)
+                return false;
+            if (entry.isDirectory() && !entry.isSymbolicLink()) {
+                // Child job dirs nest one level: <root>/<job>/<artifact>. Sweep their
+                // files, then remove the dir when the sweep emptied it.
+                const jobDir = path.join(root, entry.name);
+                if (!this.scanJobDir(jobDir, now, deadline, result))
+                    return false;
+                this.removeDirIfEmpty(jobDir, result);
+            }
+            else {
+                this.sweepEntry(root, entry, now, result);
+            }
+        }
+        return true;
+    }
+    /** @returns false when the maxRunMs deadline was reached mid-scan. */
+    scanJobDir(jobDir, now, deadline, result) {
+        let entries;
+        try {
+            entries = fs.readdirSync(jobDir, { withFileTypes: true });
+        }
+        catch (err) {
+            this.logger.debug({ err }, 'Artifact cleanup sweep skipped unreadable job dir');
+            return true;
+        }
+        for (const entry of entries) {
+            if (Date.now() >= deadline)
+                return false;
+            this.sweepEntry(jobDir, entry, now, result);
+        }
+        return true;
+    }
+    removeDirIfEmpty(jobDir, result) {
+        try {
+            const remaining = fs.readdirSync(jobDir);
+            if (remaining.length === 0) {
+                fs.rmdirSync(jobDir);
+                result.removed += 1;
+            }
+        }
+        catch {
+            // Non-empty or locked job dir stays — the next tick re-evaluates.
+        }
+    }
+    sweepEntry(dir, entry, now, result) {
+        const filePath = path.join(dir, entry.name);
+        if (!this.isCandidate(entry)) {
+            result.skipped += 1;
+            return;
+        }
+        try {
+            const stat = fs.lstatSync(filePath);
+            if (now - stat.mtimeMs <= this.config.ttlMs) {
+                result.skipped += 1;
+                return;
+            }
+            this.removeFile(filePath);
+            result.removed += 1;
+        }
+        catch (err) {
+            result.failed += 1;
+            this.logger.warn({ artifact: entry.name, err }, 'Artifact cleanup sweep failed to remove file');
+        }
+    }
+    /** Inside dedicated roots every regular non-symlink file qualifies — the
+     *  confinement boundary is the safety criterion, not the file name. */
+    isCandidate(entry) {
+        return entry.isFile() && !entry.isSymbolicLink();
+    }
+    runTick() {
+        try {
+            this.runOnce();
+        }
+        catch (err) {
+            this.logger.error({ err }, 'Artifact cleanup sweep tick failed');
+        }
+    }
+}
+//# sourceMappingURL=CleanupSweep.js.map

package/dist/modules/orchestration/artifact-cleanup/CleanupSweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CleanupSweep.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/artifact-cleanup/CleanupSweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAA8B,MAAM,qBAAqB,CAAC;AAoB5F,MAAM,OAAO,YAAY;IACN,MAAM,CAAS;IACf,MAAM,CAAwB;IAC9B,KAAK,CAAoB;IACzB,UAAU,CAA6B;IAChD,KAAK,CAAkB;IAE/B,YAAY,MAAc,EAAE,OAAyB,EAAE;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,yBAAyB,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACjE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,wEAAwE;IACxE,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAC/C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAC1F,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACrD,CAAC;IAED,8DAA8D;IAC9D,OAAO;QACL,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAEjG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBACtB,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAC1G,uCAAuC,CACxC,CAAC;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,kDAAkD,CAAC,CAAC;QAC7H,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sEAAsE;IAC9D,QAAQ,CAAC,IAAY,EAAE,GAAW,EAAE,QAAgB,EAAE,MAAmB;QAC/E,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gDAAgD,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACzC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBACnD,sEAAsE;gBACtE,wDAAwD;gBACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAClE,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IAC9D,UAAU,CAAC,MAAc,EAAE,GAAW,EAAE,QAAgB,EAAE,MAAmB;QACnF,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,mDAAmD,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,MAAmB;QAC1D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACrB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAW,EAAE,KAAgB,EAAE,GAAW,EAAE,MAAmB;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC5C,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,8CAA8C,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED;2EACuE;IAC/D,WAAW,CAAC,KAAgB;QAClC,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;IACnD,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;CACF"}

package/dist/modules/orchestration/artifact-cleanup/artifact-roots.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Artifact root helpers shared by OI-14 (immediate cleanup, content proxy) and
+ * OI-15 (periodic sweep). SECURITY-REVIEW F-01/F-05: local artifact access is
+ * confined to the dedicated ARTIFACT_OUTPUT_ROOTS — a path whose real location
+ * (symlinks resolved) falls outside them is never read and never deleted.
+ */
+/**
+ * F-01 — true only when the candidate's real path (fs.realpathSync, so symlink
+ * and `..` tricks are resolved away) sits inside one of the artifact roots.
+ * A missing path (ENOENT) or unreadable chain is not within the roots.
+ */
+export declare function isWithinArtifactRoots(candidate: string, roots?: readonly string[]): boolean;
+/** OI-15 — artifact file-name pattern: `export_*`, `render_*`, `generate_*`. */
+export declare function isArtifactFileName(name: string): boolean;

package/dist/modules/orchestration/artifact-cleanup/artifact-roots.js

@@ -0,0 +1,38 @@
+/**
+ * Artifact root helpers shared by OI-14 (immediate cleanup, content proxy) and
+ * OI-15 (periodic sweep). SECURITY-REVIEW F-01/F-05: local artifact access is
+ * confined to the dedicated ARTIFACT_OUTPUT_ROOTS — a path whose real location
+ * (symlinks resolved) falls outside them is never read and never deleted.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { FILE_TOOL_NAME_PREFIXES, artifactOutputRoots, isPathWithinRoot, } from '../../../config/ContentProxy.js';
+/**
+ * F-01 — true only when the candidate's real path (fs.realpathSync, so symlink
+ * and `..` tricks are resolved away) sits inside one of the artifact roots.
+ * A missing path (ENOENT) or unreadable chain is not within the roots.
+ */
+export function isWithinArtifactRoots(candidate, roots = artifactOutputRoots()) {
+    let real;
+    try {
+        real = fs.realpathSync(candidate);
+    }
+    catch {
+        return false;
+    }
+    return roots.some((root) => isPathWithinRoot(resolveRoot(root), real));
+}
+/** OI-15 — artifact file-name pattern: `export_*`, `render_*`, `generate_*`. */
+export function isArtifactFileName(name) {
+    const lower = name.toLowerCase();
+    return FILE_TOOL_NAME_PREFIXES.some((prefix) => lower.startsWith(prefix));
+}
+function resolveRoot(root) {
+    try {
+        return fs.realpathSync(root);
+    }
+    catch {
+        return path.resolve(root);
+    }
+}
+//# sourceMappingURL=artifact-roots.js.map

package/dist/modules/orchestration/artifact-cleanup/artifact-roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-roots.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/artifact-cleanup/artifact-roots.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,QAA2B,mBAAmB,EAAE;IAEhD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/modules/orchestration/artifact-cleanup/cleanup-config.d.ts

@@ -0,0 +1,23 @@
+/**
+ * OI-15 — cleanup sweep configuration (TDD §9.2).
+ *
+ * BRD config keys → environment variables (backend reads config via env, the
+ * platform's existing pattern):
+ *   artifact.cleanup.enabled    → ARTIFACT_CLEANUP_ENABLED    (default true)
+ *   artifact.cleanup.intervalMs → ARTIFACT_CLEANUP_INTERVAL_MS (default 300_000)
+ *   artifact.cleanup.ttlMs      → ARTIFACT_CLEANUP_TTL_MS      (default 600_000)
+ *   artifact.cleanup.maxRunMs   → ARTIFACT_CLEANUP_MAX_RUN_MS  (default 30_000)
+ */
+export interface ArtifactCleanupConfig {
+    /** Master switch — false never starts the sweep timer. */
+    enabled: boolean;
+    /** Sweep cadence (timer-based). */
+    intervalMs: number;
+    /** Minimum file age before a matching artifact counts as orphaned. */
+    ttlMs: number;
+    /** Hard bound per sweep run; overrun → stop the tick and log. */
+    maxRunMs: number;
+}
+export declare const ARTIFACT_CLEANUP_DEFAULTS: Readonly<ArtifactCleanupConfig>;
+/** Load the cleanup config from the given environment (defaults when unset). */
+export declare function loadArtifactCleanupConfig(env?: NodeJS.ProcessEnv): ArtifactCleanupConfig;

package/dist/modules/orchestration/artifact-cleanup/cleanup-config.js

@@ -0,0 +1,35 @@
+/**
+ * OI-15 — cleanup sweep configuration (TDD §9.2).
+ *
+ * BRD config keys → environment variables (backend reads config via env, the
+ * platform's existing pattern):
+ *   artifact.cleanup.enabled    → ARTIFACT_CLEANUP_ENABLED    (default true)
+ *   artifact.cleanup.intervalMs → ARTIFACT_CLEANUP_INTERVAL_MS (default 300_000)
+ *   artifact.cleanup.ttlMs      → ARTIFACT_CLEANUP_TTL_MS      (default 600_000)
+ *   artifact.cleanup.maxRunMs   → ARTIFACT_CLEANUP_MAX_RUN_MS  (default 30_000)
+ */
+export const ARTIFACT_CLEANUP_DEFAULTS = Object.freeze({
+    enabled: true,
+    intervalMs: 300_000,
+    ttlMs: 600_000,
+    maxRunMs: 30_000,
+});
+/** Load the cleanup config from the given environment (defaults when unset). */
+export function loadArtifactCleanupConfig(env = process.env) {
+    return {
+        enabled: boolEnv(env['ARTIFACT_CLEANUP_ENABLED'], ARTIFACT_CLEANUP_DEFAULTS.enabled),
+        intervalMs: intEnv(env['ARTIFACT_CLEANUP_INTERVAL_MS'], ARTIFACT_CLEANUP_DEFAULTS.intervalMs),
+        ttlMs: intEnv(env['ARTIFACT_CLEANUP_TTL_MS'], ARTIFACT_CLEANUP_DEFAULTS.ttlMs),
+        maxRunMs: intEnv(env['ARTIFACT_CLEANUP_MAX_RUN_MS'], ARTIFACT_CLEANUP_DEFAULTS.maxRunMs),
+    };
+}
+function boolEnv(value, fallback) {
+    if (value === undefined || value === '')
+        return fallback;
+    return value === '1' || value.toLowerCase() === 'true';
+}
+function intEnv(value, fallback) {
+    const parsed = Number.parseInt(value ?? '', 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+//# sourceMappingURL=cleanup-config.js.map

package/dist/modules/orchestration/artifact-cleanup/cleanup-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-config.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/artifact-cleanup/cleanup-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,MAAM,CAAC,MAAM,CAAC;IACtF,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,OAAO;IACnB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,MAAM;CACjB,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,yBAAyB,CAAC,OAAO,CAAC;QACpF,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,yBAAyB,CAAC,UAAU,CAAC;QAC7F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC,KAAK,CAAC;QAC9E,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,yBAAyB,CAAC,QAAQ,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB,EAAE,QAAiB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACzD,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACzD,CAAC;AAED,SAAS,MAAM,CAAC,KAAyB,EAAE,QAAgB;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC"}

package/dist/modules/orchestration/artifact-cleanup/delete-artifact.d.ts

@@ -0,0 +1,21 @@
+/**
+ * OI-14 — delete-after-inline for local artifacts (TDD §9.1).
+ *
+ * Contract: after the backend has fully materialised an artifact's bytes, the
+ * source file is deleted. Best-effort with identity verification (F-06):
+ *  - the file is re-stat'ed and only unlinked when inode/size/mtime still match
+ *    the pre-read snapshot, so a concurrently replaced file is never deleted;
+ *  - ENOENT counts as success (already gone);
+ *  - any other failure is logged as a warning and never fails the tool call —
+ *    the bytes are already delivered and the periodic sweep (OI-15) retries.
+ */
+import * as fs from 'fs';
+/** Minimal pino-shaped logger so this module stays decoupled from wiring. */
+export interface CleanupLog {
+    warn(obj: unknown, msg?: string): void;
+}
+/**
+ * Delete the artifact at `filePath` after a successful read. `before` is the
+ * stat snapshot taken immediately before the read (F-06 identity check).
+ */
+export declare function deleteArtifactAfterRead(filePath: string, before: fs.Stats, log?: CleanupLog): void;

package/dist/modules/orchestration/artifact-cleanup/delete-artifact.js

@@ -0,0 +1,42 @@
+/**
+ * OI-14 — delete-after-inline for local artifacts (TDD §9.1).
+ *
+ * Contract: after the backend has fully materialised an artifact's bytes, the
+ * source file is deleted. Best-effort with identity verification (F-06):
+ *  - the file is re-stat'ed and only unlinked when inode/size/mtime still match
+ *    the pre-read snapshot, so a concurrently replaced file is never deleted;
+ *  - ENOENT counts as success (already gone);
+ *  - any other failure is logged as a warning and never fails the tool call —
+ *    the bytes are already delivered and the periodic sweep (OI-15) retries.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+/**
+ * Delete the artifact at `filePath` after a successful read. `before` is the
+ * stat snapshot taken immediately before the read (F-06 identity check).
+ */
+export function deleteArtifactAfterRead(filePath, before, log) {
+    try {
+        const after = fs.lstatSync(filePath);
+        if (!identityMatches(before, after)) {
+            warn(log, { artifact: path.basename(filePath) }, 'Artifact changed during read; skipped cleanup');
+            return;
+        }
+        fs.unlinkSync(filePath);
+    }
+    catch (err) {
+        if (err?.code === 'ENOENT')
+            return; // already gone — success per TDD §9.1
+        warn(log, { artifact: path.basename(filePath), err }, 'Artifact cleanup failed after inline');
+    }
+}
+function identityMatches(before, after) {
+    return after.ino === before.ino && after.size === before.size && after.mtimeMs === before.mtimeMs;
+}
+function warn(log, obj, msg) {
+    if (log)
+        log.warn(obj, msg);
+    else
+        console.warn(`[artifact-cleanup] ${msg}`, obj);
+}
+//# sourceMappingURL=delete-artifact.js.map

package/dist/modules/orchestration/artifact-cleanup/delete-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-artifact.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/artifact-cleanup/delete-artifact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAO7B;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,MAAgB,EAAE,GAAgB;IAC1F,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,+CAA+C,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,sCAAsC;QAC1E,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,sCAAsC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAgB,EAAE,KAAe;IACxD,OAAO,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;AACpG,CAAC;AAED,SAAS,IAAI,CAAC,GAA2B,EAAE,GAAY,EAAE,GAAW;IAClE,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAa,EAAE,GAAG,CAAC,CAAC;;QACjC,OAAO,CAAC,IAAI,CAAC,sBAAsB,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC"}

package/dist/modules/orchestration/content-proxy/artifact-source.d.ts

@@ -11,11 +11,19 @@
  * live on another machine. That case is reported as a tool error by the caller,
  * never silently downgraded to a path.
  */
+import * as fs from 'fs';
 export interface ArtifactDeps {
     /** Read a resource from the child server (works across hosts). */
     readResource?: (uri: string) => Promise<Buffer | null>;
     /** Fetch an http(s) URL. Overridable for tests; defaults to global fetch. */
     fetchUrl?: (url: string) => Promise<Buffer | null>;
+    /**
+     * OI-14 local-read cleanup hook. Receives the absolute path and the
+     * pre-read stat; the default (no hook) deletes the artifact after its
+     * bytes are inlined. Only local reads invoke it — resource/URL/blob
+     * resolutions never do (UT-46).
+     */
+    cleanup?: (filePath: string, stat: fs.Stats) => void;
 }
 export interface FetchedArtifact {
     buffer: Buffer;