@mevdragon/vidfarm-devcli 0.2.6 → 0.2.8

package/dist/src/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { execFile } from "node:child_process";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import os from "node:os";
 import path from "node:path";
 import { parseArgs } from "node:util";
@@ -37,6 +37,18 @@ async function main() {
         await runImportSourceProdCommand(process.argv.slice(3));
         return;
     }
+    if (command === "register-source-hosted") {
+        await runRegisterSourceHostedCommand(process.argv.slice(3));
+        return;
+    }
+    if (command === "publish-update-hosted") {
+        await runPublishUpdateHostedCommand(process.argv.slice(3));
+        return;
+    }
+    if (command === "register-source-prod") {
+        await runRegisterSourceProdCommand(process.argv.slice(3));
+        return;
+    }
     if (command === "deploy-template-cycle") {
         await runDeployTemplateCycleCommand(process.argv.slice(3));
         return;
@@ -249,14 +261,17 @@ async function runImportSourceCommand(argv) {
         sourceId: registration.source.id,
         commitSha: parsed.values["commit-sha"] ?? null
     });
+    let sourceRecord = registration.source;
     let activated = null;
     if (parsed.values.activate) {
+        sourceRecord = sources.approveSource({ sourceId: registration.source.id });
+        sources.approveRelease({ releaseId: release.id });
         const result = await sources.activateRelease({ releaseId: release.id });
         templateRegistry.registerRuntimeTemplate(result.template);
         activated = result.release;
     }
     console.log(JSON.stringify({
-        source: registration.source,
+        source: sourceRecord,
         registration_action: registration.action,
         sync: registration.sync,
         release,
@@ -357,20 +372,121 @@ async function runGenerateTemplateCommand(argv) {
         site_name: siteName,
         research: stagedInputs,
         template_dna_module: moduleSync,
-        dna_analysis_runs: dnaRuns
+        dna_analysis_runs: dnaRuns,
+        required_template_contract: {
+            template_fields: [
+                "id",
+                "slugId",
+                "version",
+                "about.title",
+                "about.description",
+                "about.viral_dna",
+                "about.visual_dna",
+                "about.preview_media",
+                "about.link_to_original",
+                "about.proposal_generator",
+                "about.sample_prompts",
+                "configSchema",
+            ],
+            operation_fields: [
+                "operations.<name>.workflow",
+                "operations.<name>.smokeTestPayload",
+                "jobs.<workflow>",
+            ],
+            files: [
+                "src/template.ts",
+                "SKILL.md",
+            ],
+        },
+        next_steps: [
+            "Review src/template.ts and replace the starter proposal_generator with template-specific proposal instructions.",
+            "Review src/template.ts and replace the starter sample_prompts with prompts that fit the new format.",
+            "If DNA analysis was skipped or the source research changed, run analyze-viral-dna and analyze-visual-dna.",
+            "Update SKILL.md so the usage examples match the template's real operations and payloads.",
+            `Run validate-template against ${slugId} and launch at least one real local job before treating the template as ready.`,
+        ],
+    }, null, 2));
+}
+async function runRegisterSourceProdCommand(argv) {
+    const input = parseProdTemplateCommandArgs(argv, {
+        envFile: ".env.production",
+        baseUrl: "https://vidfarm.cloud.zoomgtm.com",
+        activate: false
+    });
+    const registration = await registerSourceViaApi(input);
+    console.log(JSON.stringify({
+        mode: "prod-register-source",
+        base_url: input.baseUrl,
+        source: registration.source,
+        registration_action: registration.registration_action,
+        sync: registration.sync ?? null
+    }, null, 2));
+}
+async function runRegisterSourceHostedCommand(argv) {
+    const input = parseProdTemplateCommandArgs(argv, {
+        envFile: ".env",
+        baseUrl: process.env.VIDFARM_BASE_URL ?? "https://vidfarm.cloud.zoomgtm.com",
+        activate: false
+    });
+    const registration = await registerSourceViaApi(input);
+    console.log(JSON.stringify({
+        mode: "hosted-register-source",
+        base_url: input.baseUrl,
+        source: registration.source,
+        registration_action: registration.registration_action,
+        sync: registration.sync ?? null,
+        next_step: "Platform admin reviews the source, imports a release, approves it, and activates it."
+    }, null, 2));
+}
+async function runPublishUpdateHostedCommand(argv) {
+    const input = parseProdTemplateCommandArgs(argv, {
+        envFile: ".env",
+        baseUrl: process.env.VIDFARM_BASE_URL ?? "https://vidfarm.cloud.zoomgtm.com",
+        activate: false
+    });
+    if (!input.commitSha) {
+        throw new Error("publish-update-hosted requires --commit-sha.");
+    }
+    const registration = await registerSourceViaApi(input);
+    const artifact = await packageTemplateArtifact(input.repoDir, input.commitSha);
+    const presign = await postProdTemplateApi(input, `/api/v1/templates/sources/${registration.source.id}/artifacts/presign`, {
+        method: "POST",
+        body: JSON.stringify({
+            commit_sha: input.commitSha
+        })
+    });
+    await uploadArtifactArchive(presign, artifact.buffer);
+    const payload = await postProdTemplateApi(input, `/api/v1/templates/sources/${registration.source.id}/publish`, {
+        method: "POST",
+        body: JSON.stringify({
+            commit_sha: input.commitSha,
+            artifact_sha256: artifact.sha256
+        })
+    });
+    console.log(JSON.stringify({
+        mode: "hosted-publish-update",
+        base_url: input.baseUrl,
+        source: payload.source,
+        release: payload.release,
+        artifact: {
+            artifact_key: presign.artifact_key,
+            artifact_manifest_key: presign.artifact_manifest_key,
+            sha256: artifact.sha256
+        },
+        publish_action: payload.publish_action,
+        developer_handoff: payload.developer_handoff ?? null
     }, null, 2));
 }
 async function runImportSourceProdCommand(argv) {
     const input = parseProdTemplateCommandArgs(argv, {
         envFile: ".env.production",
-        stackName: "VidfarmProdStack",
+        baseUrl: "https://vidfarm.cloud.zoomgtm.com",
         activate: true
     });
     const result = await importSourceIntoProd(input);
     console.log(JSON.stringify({
         mode: "prod-import-source",
-        stack_name: input.stackName,
-        instance_id: result.instanceId,
+        base_url: input.baseUrl,
         source: result.payload.source,
         release: result.payload.release,
         activated_release: result.payload.activated_release ?? null
@@ -379,9 +495,13 @@ async function runImportSourceProdCommand(argv) {
 async function runDeployTemplateCycleCommand(argv) {
     const input = parseProdTemplateCommandArgs(argv, {
         envFile: ".env.production",
+        baseUrl: "https://vidfarm.cloud.zoomgtm.com",
         stackName: "VidfarmProdStack",
         activate: true
     });
+    if (!input.stackName) {
+        throw new Error("deploy-template-cycle requires --stack-name.");
+    }
     const importResult = await importSourceIntoProd(input);
     const currentImage = await getProdCurrentImage({
         stackName: input.stackName,
@@ -399,7 +519,6 @@ async function runDeployTemplateCycleCommand(argv) {
     console.log(JSON.stringify({
         mode: "deploy-template-cycle",
         stack_name: input.stackName,
-        instance_id: importResult.instanceId,
         release: importResult.payload.activated_release ?? importResult.payload.release,
         restart_image: currentImage.image
     }, null, 2));
@@ -442,7 +561,37 @@ async function runCopyReferenceTemplateCommand(argv) {
         template_dir: destinationDir,
         template_id: "4c7a7e1a-7f35-4f30-9f86-9c8a63c7f2db",
         slug_id: "template_0000",
-        rewritten: false
+        rewritten: false,
+        required_template_contract: {
+            template_fields: [
+                "id",
+                "slugId",
+                "version",
+                "about.title",
+                "about.description",
+                "about.viral_dna",
+                "about.visual_dna",
+                "about.preview_media",
+                "about.link_to_original",
+                "about.proposal_generator",
+                "about.sample_prompts",
+                "configSchema",
+            ],
+            operation_fields: [
+                "operations.<name>.workflow",
+                "operations.<name>.smokeTestPayload",
+                "jobs.<workflow>",
+            ],
+            files: [
+                "src/template.ts",
+                "SKILL.md",
+            ],
+        },
+        next_steps: [
+            "Treat src/template.ts as the canonical entrypoint and review the required about metadata before copying patterns into a new template.",
+            "Use the starter proposal_generator and sample_prompts as placeholders only; rewrite them for the real format you are building.",
+            "Keep the template-local SKILL.md aligned with the operations and payloads in code.",
+        ],
     }, null, 2));
 }
 async function runAnalyzeTemplateDnaCommand(mode, argv) {
@@ -569,7 +718,7 @@ async function runSessionCommand(argv) {
         starter_style_options: {
             fonts: STARTER_TEMPLATE_FONT_OPTIONS,
             text_background_colors: STARTER_TEMPLATE_TEXT_BACKGROUND_COLOR_OPTIONS,
-            starter_template_file: "templates/template_0000/src/style-options.ts"
+            starter_template_file: "templates/vidfarm_template_0000/src/style-options.ts"
         },
         headers: {
             "vidfarm-api-key": session.apiKey,
@@ -656,8 +805,8 @@ function toProjectName(folderName) {
 }
 function resolveStarterTemplateDir() {
     const candidates = [
-        path.resolve(import.meta.dirname, "..", "templates", "template_0000"),
-        path.resolve(import.meta.dirname, "..", "..", "templates", "template_0000")
+        path.resolve(import.meta.dirname, "..", "templates", "vidfarm_template_0000"),
+        path.resolve(import.meta.dirname, "..", "..", "templates", "vidfarm_template_0000")
     ];
     for (const candidate of candidates) {
         if (existsSync(candidate)) {
@@ -679,7 +828,10 @@ function parseProdTemplateCommandArgs(argv, defaults) {
             "install-command": { type: "string", default: "npm install" },
             "build-command": { type: "string", default: "npm run build" },
             "commit-sha": { type: "string" },
+            "repo-dir": { type: "string", default: "." },
             "env-file": { type: "string", default: defaults.envFile },
+            "base-url": { type: "string", default: defaults.baseUrl },
+            "api-key": { type: "string" },
             "stack-name": { type: "string", default: defaults.stackName }
         }
     });
@@ -691,6 +843,11 @@ function parseProdTemplateCommandArgs(argv, defaults) {
         throw new Error("Command requires --template-id, --slug-id, --repo-url, and --template-module-path.");
     }
     deriveTemplateRootDirFromModulePath(templateModulePath);
+    loadEnvFile(parsed.values["env-file"]);
+    const apiKey = parsed.values["api-key"] ?? process.env.VIDFARM_API_KEY;
+    if (!apiKey) {
+        throw new Error("Missing Vidfarm API key. Pass --api-key or set VIDFARM_API_KEY in the selected env file.");
+    }
     return {
         templateId,
         slugId,
@@ -701,57 +858,93 @@ function parseProdTemplateCommandArgs(argv, defaults) {
         installCommand: parsed.values["install-command"],
         buildCommand: parsed.values["build-command"],
         commitSha: parsed.values["commit-sha"] ?? undefined,
+        repoDir: path.resolve(process.cwd(), parsed.values["repo-dir"]),
         envFile: parsed.values["env-file"],
-        stackName: parsed.values["stack-name"],
+        baseUrl: normalizeBaseUrl(parsed.values["base-url"]),
+        apiKey,
+        stackName: parsed.values["stack-name"] || undefined,
         activate: defaults.activate
     };
 }
 async function importSourceIntoProd(input) {
-    loadEnvFile(input.envFile);
-    const instanceId = await resolveStackOutput(input.stackName, "VidfarmInstanceId");
-    const containerScript = buildContainerImportCommand(input);
-    const hostScript = [
-        "set -euo pipefail",
-        `sudo docker exec -e GITHUB_TOKEN=${shellQuote(resolveGithubToken())} vidfarm /bin/bash -lc ${shellQuote(containerScript)}`
-    ].join("\n");
-    const stdout = await runSsmScript({
-        instanceId,
-        comment: `Vidfarm import ${input.slugId}`,
-        script: hostScript
+    const registration = await registerSourceViaApi(input);
+    const source = await postProdTemplateApi(input, `/api/v1/templates/sources/${registration.source.id}/approve`, { method: "POST" });
+    const releaseResponse = await postProdTemplateApi(input, `/api/v1/templates/sources/${registration.source.id}/import`, {
+        method: "POST",
+        body: JSON.stringify({
+            commit_sha: input.commitSha ?? undefined
+        })
     });
+    const approvedRelease = await postProdTemplateApi(input, `/api/v1/templates/releases/${releaseResponse.release.id}/approve`, { method: "POST" });
+    const activatedRelease = input.activate
+        ? await postProdTemplateApi(input, `/api/v1/templates/releases/${releaseResponse.release.id}/activate`, { method: "POST" })
+        : null;
     return {
-        instanceId,
-        payload: extractLastJson(stdout)
+        payload: {
+            source: source.source,
+            release: approvedRelease.release,
+            activated_release: activatedRelease?.release ?? null
+        }
     };
 }
-function buildContainerImportCommand(input) {
-    const args = [
-        "node",
-        "/app/dist/src/cli.js",
-        "import-source",
-        "--template-id", input.templateId,
-        "--slug-id", input.slugId,
-        "--repo-url", input.repoUrl,
-        "--branch", input.branch,
-        "--template-module-path", input.templateModulePath,
-        "--skill-path", input.skillPath,
-        "--install-command", input.installCommand,
-        "--build-command", input.buildCommand
-    ];
-    if (input.commitSha) {
-        args.push("--commit-sha", input.commitSha);
-    }
-    if (!input.activate) {
-        throw new Error("Non-activating prod import is not implemented.");
-    }
-    const lines = [
-        "set -euo pipefail",
-        "if [ -n \"${GITHUB_TOKEN:-}\" ]; then",
-        "  git config --global url.\"https://x-access-token:${GITHUB_TOKEN}@github.com/\".insteadOf \"https://github.com/\"",
-        "fi",
-        args.map(shellQuote).join(" ")
-    ];
-    return lines.join("\n");
+async function registerSourceViaApi(input) {
+    return postProdTemplateApi(input, "/api/v1/templates/sources", {
+        method: "POST",
+        body: JSON.stringify({
+            template_id: input.templateId,
+            slug_id: input.slugId,
+            repo_url: input.repoUrl,
+            branch: input.branch,
+            template_module_path: input.templateModulePath,
+            skill_path: input.skillPath,
+            install_command: input.installCommand,
+            build_command: input.buildCommand
+        })
+    });
+}
+async function postProdTemplateApi(input, pathname, init) {
+    const response = await fetch(`${input.baseUrl}${pathname}`, {
+        ...init,
+        headers: {
+            "content-type": "application/json",
+            "vidfarm-api-key": input.apiKey,
+            ...(init.headers ?? {})
+        }
+    });
+    const payload = await response.json().catch(() => ({}));
+    if (!response.ok) {
+        throw new Error(typeof payload.error === "string" ? payload.error : `Request failed with ${response.status}.`);
+    }
+    return payload;
+}
+async function packageTemplateArtifact(repoDir, commitSha) {
+    const tempDir = mkdtempSync(path.join(os.tmpdir(), "vidfarm-template-artifact-"));
+    const repoRoot = (await execFileAsync("git", ["-C", repoDir, "rev-parse", "--show-toplevel"])).stdout.trim();
+    const artifactPath = path.join(tempDir, "template-source.tar.gz");
+    try {
+        await execFileAsync("git", ["-C", repoRoot, "archive", "--format=tar.gz", `--output=${artifactPath}`, commitSha], {
+            cwd: repoRoot
+        });
+        const buffer = readFileSync(artifactPath);
+        return {
+            buffer,
+            sha256: createHash("sha256").update(buffer).digest("hex")
+        };
+    }
+    finally {
+        rmSync(tempDir, { recursive: true, force: true });
+    }
+}
+async function uploadArtifactArchive(presign, buffer) {
+    const response = await fetch(presign.upload.url, {
+        method: presign.upload.method,
+        headers: presign.upload.headers,
+        body: new Uint8Array(buffer)
+    });
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        throw new Error(body || `Artifact upload failed with ${response.status}.`);
+    }
 }
 function loadEnvFile(envFile) {
     const resolved = path.resolve(process.cwd(), envFile);
@@ -823,12 +1016,6 @@ function inferUploadContentType(fileName) {
             return "application/octet-stream";
     }
 }
-function resolveGithubToken() {
-    return process.env.VIDFARM_GITHUB_TOKEN
-        ?? process.env.GITHUB_TOKEN
-        ?? process.env.GH_TOKEN
-        ?? "";
-}
 async function resolveStackOutput(stackName, outputKey) {
     const { stdout } = await runLocalCommand("aws", [
         "cloudformation",

package/dist/src/config.js

@@ -32,6 +32,7 @@ const schema = z.object({
     GEMINI_API_KEY: z.string().optional(),
     PERPLEXITY_API_KEY: z.string().optional(),
     SUPERAGENCY_KEY: z.string().optional(),
+    ARTIFACT_SIGNING_SECRET: z.string().optional(),
     REMOTION_REGION: z.string().default("us-east-1"),
     REMOTION_BUCKET_NAME: z.string().optional(),
     REMOTION_SITE_NAME: z.string().optional(),
@@ -43,7 +44,8 @@ const schema = z.object({
     REMOTION_MODE: z.enum(["auto", "mock", "local", "lambda"]).default("auto"),
     MOCK_PROVIDER_RESPONSES: z.string().optional(),
     VIDFARM_ADMIN_EMAILS: z.string().default(""),
-    VIDFARM_DEVELOPER_EMAILS: z.string().default(""),
+    VIDFARM_GITHUB_TOKEN: z.string().optional(),
+    GITHUB_TOKEN: z.string().optional(),
     TEMPLATE_SOURCE_ROOT: z.string().default("./data/template-sources")
 });
 const parsed = schema.parse(process.env);
@@ -58,6 +60,7 @@ export const config = {
     VIDFARM_DATA_DIR: dataDir,
     TEMPLATE_SOURCE_ROOT: templateSourceRoot,
     PUBLIC_BASE_URL: publicBaseUrl,
+    ARTIFACT_SIGNING_SECRET: parsed.ARTIFACT_SIGNING_SECRET || parsed.SUPERAGENCY_KEY || "",
     isProduction: parsed.NODE_ENV === "production",
     mockProviders: parsed.MOCK_PROVIDER_RESPONSES === "true" ||
         (parsed.MOCK_PROVIDER_RESPONSES == null && parsed.NODE_ENV !== "production"),
@@ -66,8 +69,4 @@ export const config = {
         .split(",")
         .map((value) => value.trim().toLowerCase())
         .filter(Boolean),
-    developerEmails: parsed.VIDFARM_DEVELOPER_EMAILS
-        .split(",")
-        .map((value) => value.trim().toLowerCase())
-        .filter(Boolean)
 };

package/dist/src/context.js

@@ -176,6 +176,14 @@ export function createTemplateJobContext(input) {
                     ...request
                 });
             },
+            async generateSpeech(request) {
+                return input.providers.generateSpeech({
+                    customerId: input.customer.id,
+                    jobId: input.job.id,
+                    workerId: input.workerId,
+                    ...request
+                });
+            },
             async generateImage(request) {
                 return input.providers.generateImage({
                     customerId: input.customer.id,
@@ -191,6 +199,14 @@ export function createTemplateJobContext(input) {
                     workerId: input.workerId,
                     ...request
                 });
+            },
+            async transcribeSpeech(request) {
+                return input.providers.transcribeSpeech({
+                    customerId: input.customer.id,
+                    jobId: input.job.id,
+                    workerId: input.workerId,
+                    ...request
+                });
             }
         },
         remotion: {

package/dist/src/db.js

@@ -1,5 +1,6 @@
 import Database from "better-sqlite3";
 import { config } from "./config.js";
+import { createId } from "./lib/ids.js";
 import { parseJson, stringifyJson } from "./lib/json.js";
 import { nowIso } from "./lib/time.js";
 const db = new Database(config.VIDFARM_DB_PATH);
@@ -192,6 +193,8 @@ create table if not exists template_releases (
   checkout_path text not null,
   skill_path text not null,
   module_path text not null,
+  artifact_manifest_key text,
+  artifact_key text,
   status text not null,
   certification_report_json text,
   activated_at text,
@@ -235,6 +238,23 @@ db.exec(`
   where slug_id is null or trim(slug_id) = '';
 `);
 db.exec(`create unique index if not exists idx_template_sources_slug_id on template_sources(slug_id);`);
+db.exec(`
+  update template_sources
+  set status = 'approved'
+  where status = 'active';
+`);
+db.exec(`
+  update template_releases
+  set status = 'pending_approval'
+  where status = 'certified';
+`);
+const templateReleaseColumns = db.prepare(`pragma table_info(template_releases)`).all();
+if (!templateReleaseColumns.some((column) => column.name === "artifact_manifest_key")) {
+    db.exec(`alter table template_releases add column artifact_manifest_key text;`);
+}
+if (!templateReleaseColumns.some((column) => column.name === "artifact_key")) {
+    db.exec(`alter table template_releases add column artifact_key text;`);
+}
 db.exec(`drop index if exists idx_job_events_job_time;`);
 db.exec(`drop table if exists job_events;`);
 function mapJob(row) {
@@ -288,6 +308,8 @@ function mapTemplateRelease(row) {
         checkoutPath: String(row.checkout_path),
         skillPath: String(row.skill_path),
         modulePath: String(row.module_path),
+        artifactManifestKey: row.artifact_manifest_key ? String(row.artifact_manifest_key) : null,
+        artifactKey: row.artifact_key ? String(row.artifact_key) : null,
         status: row.status,
         certificationReport: parseJson(row.certification_report_json, null),
         activatedAt: row.activated_at ? String(row.activated_at) : null,
@@ -390,6 +412,21 @@ export const database = {
       where id = ?
     `).run(isPaidPlan ? 1 : 0, nowIso(), customerId);
     },
+    setCustomerAccessByEmail(input) {
+        const normalizedEmail = input.email.trim().toLowerCase();
+        const existing = this.getCustomerByEmail(normalizedEmail);
+        return this.upsertCustomer({
+            id: existing?.id ?? createId("cus"),
+            email: normalizedEmail,
+            name: input.name === undefined ? (existing?.name ?? null) : input.name,
+            defaultWebhookUrl: existing?.defaultWebhookUrl ?? null,
+            isDeveloper: input.isDeveloper === undefined ? (existing?.isDeveloper ?? false) : input.isDeveloper,
+            isPaidPlan: input.isPaidPlan === undefined ? (existing?.isPaidPlan ?? false) : input.isPaidPlan,
+            about: existing?.about ?? null,
+            groupchatUrl: existing?.groupchatUrl ?? null,
+            flockposterApiKey: existing?.flockposterApiKey ?? null
+        });
+    },
     updateCustomerProfile(input) {
         db.prepare(`
       update customers
@@ -895,23 +932,28 @@ export const database = {
     `).get(repoUrl, branch, templateModulePath);
         return row ? mapTemplateSource(row) : null;
     },
-    listTemplateSources() {
-        return db.prepare(`select * from template_sources order by template_id asc`).all().map(mapTemplateSource);
+    listTemplateSources(status) {
+        const rows = status
+            ? db.prepare(`select * from template_sources where status = ? order by created_at asc`).all(status)
+            : db.prepare(`select * from template_sources order by created_at asc`).all();
+        return rows.map(mapTemplateSource);
     },
     createTemplateRelease(record) {
         const timestamp = nowIso();
         db.prepare(`
       insert into template_releases (
-        id, source_id, template_id, branch, commit_sha, checkout_path, skill_path, module_path, status,
+        id, source_id, template_id, branch, commit_sha, checkout_path, skill_path, module_path, artifact_manifest_key, artifact_key, status,
         certification_report_json, activated_at, created_at, updated_at
       ) values (
-        @id, @source_id, @template_id, @branch, @commit_sha, @checkout_path, @skill_path, @module_path, @status,
+        @id, @source_id, @template_id, @branch, @commit_sha, @checkout_path, @skill_path, @module_path, @artifact_manifest_key, @artifact_key, @status,
         @certification_report_json, @activated_at, @created_at, @updated_at
       )
       on conflict(source_id, commit_sha) do update set
         checkout_path = excluded.checkout_path,
         skill_path = excluded.skill_path,
         module_path = excluded.module_path,
+        artifact_manifest_key = excluded.artifact_manifest_key,
+        artifact_key = excluded.artifact_key,
         status = excluded.status,
         certification_report_json = excluded.certification_report_json,
         activated_at = excluded.activated_at,
@@ -925,6 +967,8 @@ export const database = {
             checkout_path: record.checkoutPath,
             skill_path: record.skillPath,
             module_path: record.modulePath,
+            artifact_manifest_key: record.artifactManifestKey ?? null,
+            artifact_key: record.artifactKey ?? null,
             status: record.status,
             certification_report_json: stringifyJson(record.certificationReport ?? null),
             activated_at: record.activatedAt ?? null,
@@ -951,10 +995,16 @@ export const database = {
     `).get(sourceId);
         return row ? mapTemplateRelease(row) : null;
     },
-    listTemplateReleases(templateId) {
-        const rows = templateId
-            ? db.prepare(`select * from template_releases where template_id = ? order by created_at desc`).all(templateId)
-            : db.prepare(`select * from template_releases order by created_at desc`).all();
+    listTemplateReleases(input) {
+        const templateId = input?.templateId;
+        const status = input?.status;
+        const rows = templateId && status
+            ? db.prepare(`select * from template_releases where template_id = ? and status = ? order by created_at desc`).all(templateId, status)
+            : templateId
+                ? db.prepare(`select * from template_releases where template_id = ? order by created_at desc`).all(templateId)
+                : status
+                    ? db.prepare(`select * from template_releases where status = ? order by created_at desc`).all(status)
+                    : db.prepare(`select * from template_releases order by created_at desc`).all();
         return rows.map(mapTemplateRelease);
     },
     getActiveTemplateReleases() {
@@ -979,12 +1029,16 @@ export const database = {
             updated_at: nowIso()
         });
     },
-    clearActiveTemplateReleases(templateId) {
+    clearActiveTemplateReleases(templateId, fallbackStatus = "approved") {
         db.prepare(`
       update template_releases
-      set status = case when status = 'active' then 'certified' else status end,
-          updated_at = ?
-      where template_id = ?
-    `).run(nowIso(), templateId);
+      set status = case when status = 'active' then @fallback_status else status end,
+          updated_at = @updated_at
+      where template_id = @template_id
+    `).run({
+            fallback_status: fallbackStatus,
+            updated_at: nowIso(),
+            template_id: templateId
+        });
     }
 };