Deduplicate artifact bytes and deliver files by authenticated hash

tests/unit/native-hosts.test.ts

@@ -64,7 +64,10 @@ describe('native host enrollment and scoped authentication', () => {
         const api = await enrolled();
         const { db } = await import('../../src/lib/server/db/index.js');
         const payload = { files: [{ path: 'plugins/fixture.dll', contentBase64: Buffer.alloc(8 * 1024 ** 2, 42).toString('base64') }] };
-        const bytes = Buffer.from(JSON.stringify(payload));
+        const { putFileBlob } = await import('../../src/lib/server/db/file-blobs.js');
+        const hash = putFileBlob(Buffer.from(payload.files[0].contentBase64, 'base64'));
+        // Launch preparation transfers bytes separately and serializes only references.
+        const bytes = Buffer.from(JSON.stringify({ files: [{ path: payload.files[0].path, contentSha256: hash }] }));
         const options = { instanceId: 'immutable-instance', generation: 1, idempotencyKey: 'large-launch' };
         const parse = JSON.parse;
         const parsing = vi.spyOn(JSON, 'parse').mockImplementation((value, reviver) => {
@@ -115,8 +118,8 @@ describe('native host enrollment and scoped authentication', () => {
             { payload: string; last_delivered_at: string | null };
         expect(stored.payload).toBe(JSON.stringify(routing));
         expect(stored.last_delivered_at).not.toBeNull();
-        expect(db().prepare('SELECT length(CAST(payload AS BLOB)) AS bytes FROM ec_host_operation_payloads WHERE operation_id=?').get(launch.id))
-            .toEqual({ bytes: bytes.length });
+        const saved = db().prepare('SELECT length(CAST(payload AS BLOB)) AS bytes FROM ec_host_operation_payloads WHERE operation_id=?').get(launch.id) as { bytes: number };
+        expect(saved.bytes).toBeLessThan(1024);
         expect(api.getHostOperationPayload(api.host.id, launch.id)).toEqual(bytes);
         expect(api.getHostOperationPayload(api.host.id, inline.id).toString('utf8')).toBe(JSON.stringify(inline.payload));
         expect(db().prepare('SELECT 1 FROM ec_host_operation_payloads WHERE operation_id=?').get(inline.id)).toBeUndefined();