JARVIS Artifact Store
Internal JARVIS service that stores binary artifacts and returns stable artifact references. This is a JARVIS-only contract (not part of the ARP Standard).
Requirements
- Python >= 3.11
Install
python3 -m pip install -e .
Run
python3 -m pip install -e .
arp-jarvis-artifactstore
[!TIP] Use
bash src/scripts/dev_server.sh --host ... --port ... --reloadfor dev convenience.
Configuration
Environment variables:
JARVIS_ARTIFACT_DIR(default./artifacts/)JARVIS_ARTIFACT_MAX_SIZE_MB(optional guardrail)ARP_AUTH_*(JWT auth settings, shared across JARVIS services)
Auth is enabled by default (JWT). To disable for local dev, set ARP_AUTH_PROFILE=dev-insecure
or ARP_AUTH_MODE=disabled. Health/version endpoints are always exempt.
If no ARP_AUTH_* env vars are set, the service defaults to the dev Keycloak issuer.
API (v0.3.7)
Health/version:
GET /v1/healthGET /v1/version
Artifacts:
POST /v1/artifacts->ArtifactRefGET /v1/artifacts/{artifact_id}(raw bytes)HEAD /v1/artifacts/{artifact_id}(metadata headers)GET /v1/artifacts/{artifact_id}/metadata->ArtifactRef
Notes
- Filesystem storage by default.
- Metadata is tracked in a small SQLite index under the artifact directory.
1 maintainer
Metadata
1 maintainer
Release files for arp-jarvis-artifactstore 0.3.8
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| arp_jarvis_artifactstore-0.3.8.tar.gz | 7.8 kB | With provenance | Details for arp_jarvis_artifactstore-0.3.8.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| arp_jarvis_artifactstore-0.3.8-py3-none-any.whl | Python 3 | none | any | Details for arp_jarvis_artifactstore-0.3.8-py3-none-any.whl |
Total release size: 16.6 kB
Release files / arp_jarvis_artifactstore-0.3.8.tar.gz
| Download URL | arp_jarvis_artifactstore-0.3.8.tar.gz |
|---|---|
| Size | 7.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0b746a218159e93ed5e9ad48ee63b06b9665eaab807b38f1b07e882e126f3f9d
|
|
BLAKE2b-256 checksum How to use checksums |
316090b74ed00f2f5131709a403ae9494341965943f52c88465df47f295e3e40
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jan 4, 2026.
Transparency logRelease files / arp_jarvis_artifactstore-0.3.8-py3-none-any.whl
| Download URL | arp_jarvis_artifactstore-0.3.8-py3-none-any.whl |
|---|---|
| Size | 8.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
50290d67c4f6c3d895bfb7f347111920c6b368350477dd48d07ae56534b8dc00
|
|
BLAKE2b-256 checksum How to use checksums |
a1b85e7e5fe79eb0460371f83573e5000910158363694333a6d60c431640b68d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jan 4, 2026.
Transparency logSecurity for arp-jarvis-artifactstore 0.3.8
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for arp_jarvis_artifactstore-0.3.8.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jan 4, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
