Provide managed generated artifact storage

2026-08-02 12:38:15 +02:00
parent 359c4e9570
commit b993d8e31a
6 changed files with 228 additions and 2 deletions
@@ -0,0 +1,16 @@
+# Generated Artifact Store
+
+Files implements Core's optional `files.artifact_store` capability for modules
+that generate deterministic output without owning file storage.
+
+The producer supplies bytes, filename, content type, destination folder,
+optional idempotency key, and bounded non-secret provenance. Files applies the
+actor's `files:file:upload` permission, tenant/user ownership, path rules,
+versioning, configured blob backend, and conflict behavior. An idempotency key
+is represented as source provenance so an unchanged retry does not create an
+unrelated file version.
+
+The response contains only file/version identifiers, display path, media type,
+size, digest, and storage provenance. Producers must not put credentials,
+tokens, or rendered plaintext into metadata. Storing an artifact proves Files
+accepted it; it does not prove printing, mailing, or any other external effect.