/**
 * Same-origin URL that streams an artifact with Range support, for `<video>`, `<audio>`, `<img>`
 * and downloads. The session cookie authorizes it; `download` forces a save instead of inline.
 */
export function artifactUrl(artifactId: string, options: { download?: boolean } = {}): string {
  const path = `/api/artifacts/${encodeURIComponent(artifactId)}`;
  return options.download ? `${path}?download=1` : path;
}