@mevdragon/vidfarm-devcli 0.2.7 → 0.2.8

package/dist/src/app.js

@@ -23,6 +23,8 @@ const templateSources = new TemplateSourceService();
 const API_PREFIX = "/api/v1";
 const USER_PREFIX = `${API_PREFIX}/user`;
 const TEMPLATES_PREFIX = `${API_PREFIX}/templates`;
+const ADMIN_TEMPLATES_PREFIX = `${API_PREFIX}/admin/templates`;
+const ADMIN_CUSTOMERS_PREFIX = `${API_PREFIX}/admin/customers`;
 const SESSION_COOKIE = "vidfarm_session";
 const app = new Hono();
 const otpRequestSchema = z.object({
@@ -45,6 +47,20 @@ const adminCreateUserSchema = z.object({
     password: z.string().min(8),
     name: z.string().optional()
 });
+const adminProvisionUserSchema = z.object({
+    email: z.string().email().optional(),
+    username: z.string().email().optional(),
+    password: z.string().min(8),
+    name: z.string().optional()
+}).refine((value) => Boolean(value.email || value.username), {
+    message: "Provide email or username."
+});
+const adminCustomerAccessSchema = z.object({
+    email: z.string().email(),
+    is_developer: z.boolean().optional(),
+    is_paid_plan: z.boolean().optional(),
+    name: z.string().optional()
+}).refine((value) => value.is_developer !== undefined || value.is_paid_plan !== undefined || value.name !== undefined, { message: "Provide at least one of is_developer, is_paid_plan, or name." });
 const providerKeySchema = z.object({
     provider: z.enum(["openai", "gemini", "openrouter", "perplexity"]),
     label: z.string().optional(),
@@ -67,6 +83,13 @@ const developerPreviewPresignSchema = z.object({
     content_type: z.string().trim().min(1).max(255).optional(),
     directory: z.string().trim().max(500).optional()
 });
+const developerTemplateArtifactPresignSchema = z.object({
+    commit_sha: z.string().trim().min(7).max(255)
+});
+const developerTemplateArtifactPublishSchema = z.object({
+    commit_sha: z.string().trim().min(7).max(255),
+    artifact_sha256: z.string().trim().regex(/^[0-9a-f]{64}$/i, "artifact_sha256 must be a SHA-256 hex digest.")
+});
 const templateSourceStatusSchema = z.enum(["pending_review", "approved", "rejected", "disabled"]);
 const templateReleaseStatusSchema = z.enum(["imported", "pending_approval", "approved", "rejected", "failed", "active"]);
 const listJobsQuerySchema = z.object({
@@ -585,9 +608,7 @@ app.post(`${API_PREFIX}/admin/auth/whitelist`, async (c) => {
             email: normalizedEmail,
             name: existing?.name ?? null,
             defaultWebhookUrl: existing?.defaultWebhookUrl ?? null,
-            isDeveloper: existing?.isDeveloper
-                || config.adminEmails.includes(normalizedEmail)
-                || config.developerEmails.includes(normalizedEmail),
+            isDeveloper: existing?.isDeveloper || config.adminEmails.includes(normalizedEmail),
             isPaidPlan: true
         });
     });
@@ -608,6 +629,213 @@ app.post(`${API_PREFIX}/admin/auth/users`, async (c) => {
     });
     return c.json({ customer }, 201);
 });
+app.post(`${API_PREFIX}/admin/auth/provision-user-account`, async (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const parsed = adminProvisionUserSchema.parse(await c.req.json());
+    const email = (parsed.email ?? parsed.username ?? "").trim().toLowerCase();
+    const existing = database.getCustomerByEmail(email);
+    const customer = auth.createPasswordUser({
+        email,
+        password: parsed.password,
+        name: parsed.name ?? null
+    });
+    const apiKey = getVisibleApiKey(customer.id);
+    return c.json({
+        customer,
+        credentials: {
+            email,
+            password: parsed.password,
+            api_key: apiKey
+        },
+        action: existing ? "updated" : "created"
+    }, existing ? 200 : 201);
+});
+app.post(`${ADMIN_CUSTOMERS_PREFIX}/access`, async (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const parsed = adminCustomerAccessSchema.parse(await c.req.json());
+    const existing = database.getCustomerByEmail(parsed.email);
+    const customer = database.setCustomerAccessByEmail({
+        email: parsed.email,
+        isDeveloper: parsed.is_developer,
+        isPaidPlan: parsed.is_paid_plan,
+        name: parsed.name
+    });
+    return c.json({
+        customer,
+        action: existing ? "updated" : "created"
+    }, existing ? 200 : 201);
+});
+app.get(`${ADMIN_TEMPLATES_PREFIX}/sources`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const status = c.req.query("status");
+    const parsedStatus = status ? templateSourceStatusSchema.parse(status) : undefined;
+    return c.json({ sources: templateSources.listSources(parsedStatus) });
+});
+app.get(`${ADMIN_TEMPLATES_PREFIX}/releases`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const status = c.req.query("status");
+    const parsedStatus = status ? templateReleaseStatusSchema.parse(status) : undefined;
+    return c.json({
+        releases: templateSources.listReleases({
+            templateId: c.req.query("template_id") || undefined,
+            status: parsedStatus
+        })
+    });
+});
+app.get(`${ADMIN_TEMPLATES_PREFIX}/review-queue`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    return c.json({
+        pending_sources: templateSources.listSources("pending_review"),
+        pending_releases: templateSources.listReleases({ status: "pending_approval" })
+    });
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/sources/register`, async (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    try {
+        const body = z.object({
+            template_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i, "template_id must be a UUIDv4."),
+            slug_id: z.string().min(3).regex(/^[a-z0-9_]+$/i, "slug_id must contain only letters, numbers, and underscores."),
+            repo_url: z.string().url(),
+            branch: z.string().min(1).default("production"),
+            template_module_path: z.string().regex(/(^src\/template\.ts$|(^|\/)vidfarm_template_[^/]+\/src\/template\.ts$)/i, "template_module_path must point at src/template.ts for a standalone template repo, or at a template entrypoint inside a folder that starts with vidfarm_template_, for example templates/vidfarm_template_example/src/template.ts."),
+            skill_path: z.string().min(1).optional(),
+            install_command: z.string().min(1).default("npm install"),
+            build_command: z.string().min(1).default("npm run build")
+        }).parse(await c.req.json());
+        const registration = await templateSources.registerSource({
+            templateId: body.template_id,
+            slugId: body.slug_id,
+            repoUrl: body.repo_url,
+            branch: body.branch,
+            templateModulePath: body.template_module_path,
+            skillPath: body.skill_path,
+            installCommand: body.install_command,
+            buildCommand: body.build_command
+        });
+        return c.json({
+            source: registration.source,
+            registration_action: registration.action,
+            sync: registration.sync
+        }, registration.action === "created" ? 201 : 200);
+    }
+    catch (error) {
+        if (error instanceof TemplateSourceAlreadyRegisteredError) {
+            return c.json({
+                error: error.message,
+                registration_status: error.existingSource.status,
+                existing_source: error.existingSource,
+                conflict_field: error.conflictField
+            }, 409);
+        }
+        const message = error instanceof Error ? error.message : "Unable to register template source.";
+        const status = /already exists/i.test(message) ? 409 : 400;
+        return c.json({ error: message }, status);
+    }
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/sources/:sourceId/approve`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    return c.json({ source: templateSources.approveSource({ sourceId: c.req.param("sourceId") }) });
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/sources/:sourceId/reject`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    return c.json({ source: templateSources.rejectSource({ sourceId: c.req.param("sourceId") }) });
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/sources/:sourceId/import`, async (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const body = z.object({
+        commit_sha: z.string().min(7).optional(),
+        artifact_manifest_key: z.string().min(1).optional()
+    }).parse(await c.req.json().catch(() => ({})));
+    const release = await templateSources.importRelease({
+        sourceId: c.req.param("sourceId"),
+        commitSha: body.commit_sha ?? null,
+        artifactManifestKey: body.artifact_manifest_key ?? null
+    });
+    return c.json({ release }, 201);
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/releases/:releaseId/approve`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    return c.json({ release: templateSources.approveRelease({ releaseId: c.req.param("releaseId") }) });
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/releases/:releaseId/reject`, (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    return c.json({ release: templateSources.rejectRelease({ releaseId: c.req.param("releaseId") }) });
+});
+app.post(`${ADMIN_TEMPLATES_PREFIX}/releases/:releaseId/activate`, async (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const { release, template } = await templateSources.activateRelease({
+        releaseId: c.req.param("releaseId")
+    });
+    templateRegistry.registerRuntimeTemplate(template);
+    return c.json({
+        release,
+        template: {
+            id: template.id,
+            version: template.version,
+            description: template.about.description
+        }
+    });
+});
 app.post(`${USER_PREFIX}/request-otp`, async (c) => {
     const body = otpRequestSchema.parse(await c.req.json());
     await auth.requestOtp(body.email);
@@ -650,7 +878,7 @@ function requireDeveloper(c) {
 function templatePublishingAdminError() {
     return {
         error: "Admin access required.",
-        detail: "Reviewing, importing, approving, or activating a registered template source is platform-managed. Third-party developers only push to GitHub and register/update the source metadata."
+        detail: "Reviewing, importing, approving, or activating a registered template source is platform-managed. Third-party developers can register/update source metadata and publish an exact GitHub commit for review, but only platform admins can approve or activate releases."
     };
 }
 function requireSuperagency(c) {
@@ -799,7 +1027,9 @@ function serializeTemplateAbout(c, template) {
         viral_dna: template.about.viral_dna,
         visual_dna: template.about.visual_dna,
         preview_media: template.about.preview_media.map((entry) => resolveTemplateAboutMediaUrl(c, template.id, entry)),
-        link_to_original: template.about.link_to_original
+        link_to_original: template.about.link_to_original,
+        proposal_generator: template.about.proposal_generator,
+        sample_prompts: template.about.sample_prompts
     };
 }
 function resolveTemplateAboutMediaUrl(c, templateId, entry) {
@@ -1014,6 +1244,36 @@ app.post(`${USER_PREFIX}/me/developer/preview-media/presign`, async (c) => {
         return c.json({ error: error instanceof Error ? error.message : "Unable to create preview upload URL." }, 400);
     }
 });
+app.post(`${TEMPLATES_PREFIX}/sources/:sourceId/artifacts/presign`, async (c) => {
+    try {
+        requireDeveloper(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    try {
+        const body = developerTemplateArtifactPresignSchema.parse(await c.req.json());
+        const artifact = await templateSources.createDeveloperArtifactUpload({
+            sourceId: c.req.param("sourceId"),
+            commitSha: body.commit_sha
+        });
+        return c.json({
+            artifact_key: artifact.artifactKey,
+            artifact_manifest_key: artifact.manifestKey,
+            upload: {
+                method: artifact.upload.method,
+                url: artifact.upload.url,
+                headers: artifact.upload.headers,
+                expires_in_seconds: artifact.upload.expiresIn
+            }
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Unable to prepare template artifact upload.";
+        const status = /not found/i.test(message) ? 404 : 400;
+        return c.json({ error: message }, status);
+    }
+});
 app.get(`${USER_PREFIX}/me/jobs`, (c) => {
     const query = listJobsQuerySchema.parse({
         template_id: c.req.query("template_id"),
@@ -1071,7 +1331,7 @@ app.post(`${TEMPLATES_PREFIX}/sources`, async (c) => {
             slug_id: z.string().min(3).regex(/^[a-z0-9_]+$/i, "slug_id must contain only letters, numbers, and underscores."),
             repo_url: z.string().url(),
             branch: z.string().min(1).default("production"),
-            template_module_path: z.string().regex(/(^|\/)vidfarm_template_[^/]+\/src\/template\.ts$/i, "template_module_path must point at a template entrypoint inside a folder that starts with vidfarm_template_, for example templates/vidfarm_template_example/src/template.ts."),
+            template_module_path: z.string().regex(/(^src\/template\.ts$|(^|\/)vidfarm_template_[^/]+\/src\/template\.ts$)/i, "template_module_path must point at src/template.ts for a standalone template repo, or at a template entrypoint inside a folder that starts with vidfarm_template_, for example templates/vidfarm_template_example/src/template.ts."),
             skill_path: z.string().min(1).optional(),
             install_command: z.string().min(1).default("npm install"),
             build_command: z.string().min(1).default("npm run build")
@@ -1094,7 +1354,7 @@ app.post(`${TEMPLATES_PREFIX}/sources`, async (c) => {
                 completed: true,
                 responsibility_boundary: "third_party_developer_done",
                 message: "Template source registration is complete. Your responsibility stops at GitHub push plus source registration metadata. Importing, activating, and making the template live/public are platform-admin steps.",
-                next_step_for_platform: "A Vidfarm admin can now import this source from the registered branch head or a chosen commit SHA."
+                next_step_for_platform: "A Vidfarm admin can now import this source from the registered branch head or a chosen commit SHA, or the developer can publish an exact commit SHA for review."
             }
         }, registration.action === "created" ? 201 : 200);
     }
@@ -1112,6 +1372,40 @@ app.post(`${TEMPLATES_PREFIX}/sources`, async (c) => {
         return c.json({ error: message }, status);
     }
 });
+app.post(`${TEMPLATES_PREFIX}/sources/:sourceId/publish`, async (c) => {
+    let customer;
+    try {
+        customer = requireDeveloper(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    try {
+        const body = developerTemplateArtifactPublishSchema.parse(await c.req.json());
+        const result = await templateSources.publishArtifactRelease({
+            sourceId: c.req.param("sourceId"),
+            commitSha: body.commit_sha,
+            artifactSha256: body.artifact_sha256,
+            signedBy: customer.email
+        });
+        return c.json({
+            source: result.source,
+            release: result.release,
+            publish_action: result.publishAction,
+            developer_handoff: {
+                completed: true,
+                responsibility_boundary: "third_party_developer_done",
+                message: "The exact GitHub commit has been submitted for platform review.",
+                next_step_for_platform: "A Vidfarm admin reviews the certification result, approves the release, and activates it."
+            }
+        }, result.publishAction === "created" ? 201 : 200);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Unable to publish template update.";
+        const status = /not found/i.test(message) ? 404 : 400;
+        return c.json({ error: message }, status);
+    }
+});
 app.get(`${TEMPLATES_PREFIX}/releases`, (c) => {
     try {
         requireAdmin(c);
@@ -1166,11 +1460,13 @@ app.post(`${TEMPLATES_PREFIX}/sources/:sourceId/import`, async (c) => {
         return c.json(templatePublishingAdminError(), 403);
     }
     const body = z.object({
-        commit_sha: z.string().min(7).optional()
+        commit_sha: z.string().min(7).optional(),
+        artifact_manifest_key: z.string().min(1).optional()
     }).parse(await c.req.json().catch(() => ({})));
     const release = await templateSources.importRelease({
         sourceId: c.req.param("sourceId"),
-        commitSha: body.commit_sha ?? null
+        commitSha: body.commit_sha ?? null,
+        artifactManifestKey: body.artifact_manifest_key ?? null
     });
     return c.json({ release }, 201);
 });

package/dist/src/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { execFile } from "node:child_process";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import os from "node:os";
 import path from "node:path";
 import { parseArgs } from "node:util";
@@ -41,6 +41,10 @@ async function main() {
         await runRegisterSourceHostedCommand(process.argv.slice(3));
         return;
     }
+    if (command === "publish-update-hosted") {
+        await runPublishUpdateHostedCommand(process.argv.slice(3));
+        return;
+    }
     if (command === "register-source-prod") {
         await runRegisterSourceProdCommand(process.argv.slice(3));
         return;
@@ -368,7 +372,39 @@ async function runGenerateTemplateCommand(argv) {
         site_name: siteName,
         research: stagedInputs,
         template_dna_module: moduleSync,
-        dna_analysis_runs: dnaRuns
+        dna_analysis_runs: dnaRuns,
+        required_template_contract: {
+            template_fields: [
+                "id",
+                "slugId",
+                "version",
+                "about.title",
+                "about.description",
+                "about.viral_dna",
+                "about.visual_dna",
+                "about.preview_media",
+                "about.link_to_original",
+                "about.proposal_generator",
+                "about.sample_prompts",
+                "configSchema",
+            ],
+            operation_fields: [
+                "operations.<name>.workflow",
+                "operations.<name>.smokeTestPayload",
+                "jobs.<workflow>",
+            ],
+            files: [
+                "src/template.ts",
+                "SKILL.md",
+            ],
+        },
+        next_steps: [
+            "Review src/template.ts and replace the starter proposal_generator with template-specific proposal instructions.",
+            "Review src/template.ts and replace the starter sample_prompts with prompts that fit the new format.",
+            "If DNA analysis was skipped or the source research changed, run analyze-viral-dna and analyze-visual-dna.",
+            "Update SKILL.md so the usage examples match the template's real operations and payloads.",
+            `Run validate-template against ${slugId} and launch at least one real local job before treating the template as ready.`,
+        ],
     }, null, 2));
 }
 async function runRegisterSourceProdCommand(argv) {
@@ -402,6 +438,45 @@ async function runRegisterSourceHostedCommand(argv) {
         next_step: "Platform admin reviews the source, imports a release, approves it, and activates it."
     }, null, 2));
 }
+async function runPublishUpdateHostedCommand(argv) {
+    const input = parseProdTemplateCommandArgs(argv, {
+        envFile: ".env",
+        baseUrl: process.env.VIDFARM_BASE_URL ?? "https://vidfarm.cloud.zoomgtm.com",
+        activate: false
+    });
+    if (!input.commitSha) {
+        throw new Error("publish-update-hosted requires --commit-sha.");
+    }
+    const registration = await registerSourceViaApi(input);
+    const artifact = await packageTemplateArtifact(input.repoDir, input.commitSha);
+    const presign = await postProdTemplateApi(input, `/api/v1/templates/sources/${registration.source.id}/artifacts/presign`, {
+        method: "POST",
+        body: JSON.stringify({
+            commit_sha: input.commitSha
+        })
+    });
+    await uploadArtifactArchive(presign, artifact.buffer);
+    const payload = await postProdTemplateApi(input, `/api/v1/templates/sources/${registration.source.id}/publish`, {
+        method: "POST",
+        body: JSON.stringify({
+            commit_sha: input.commitSha,
+            artifact_sha256: artifact.sha256
+        })
+    });
+    console.log(JSON.stringify({
+        mode: "hosted-publish-update",
+        base_url: input.baseUrl,
+        source: payload.source,
+        release: payload.release,
+        artifact: {
+            artifact_key: presign.artifact_key,
+            artifact_manifest_key: presign.artifact_manifest_key,
+            sha256: artifact.sha256
+        },
+        publish_action: payload.publish_action,
+        developer_handoff: payload.developer_handoff ?? null
+    }, null, 2));
+}
 async function runImportSourceProdCommand(argv) {
     const input = parseProdTemplateCommandArgs(argv, {
         envFile: ".env.production",
@@ -486,7 +561,37 @@ async function runCopyReferenceTemplateCommand(argv) {
         template_dir: destinationDir,
         template_id: "4c7a7e1a-7f35-4f30-9f86-9c8a63c7f2db",
         slug_id: "template_0000",
-        rewritten: false
+        rewritten: false,
+        required_template_contract: {
+            template_fields: [
+                "id",
+                "slugId",
+                "version",
+                "about.title",
+                "about.description",
+                "about.viral_dna",
+                "about.visual_dna",
+                "about.preview_media",
+                "about.link_to_original",
+                "about.proposal_generator",
+                "about.sample_prompts",
+                "configSchema",
+            ],
+            operation_fields: [
+                "operations.<name>.workflow",
+                "operations.<name>.smokeTestPayload",
+                "jobs.<workflow>",
+            ],
+            files: [
+                "src/template.ts",
+                "SKILL.md",
+            ],
+        },
+        next_steps: [
+            "Treat src/template.ts as the canonical entrypoint and review the required about metadata before copying patterns into a new template.",
+            "Use the starter proposal_generator and sample_prompts as placeholders only; rewrite them for the real format you are building.",
+            "Keep the template-local SKILL.md aligned with the operations and payloads in code.",
+        ],
     }, null, 2));
 }
 async function runAnalyzeTemplateDnaCommand(mode, argv) {
@@ -613,7 +718,7 @@ async function runSessionCommand(argv) {
         starter_style_options: {
             fonts: STARTER_TEMPLATE_FONT_OPTIONS,
             text_background_colors: STARTER_TEMPLATE_TEXT_BACKGROUND_COLOR_OPTIONS,
-            starter_template_file: "templates/template_0000/src/style-options.ts"
+            starter_template_file: "templates/vidfarm_template_0000/src/style-options.ts"
         },
         headers: {
             "vidfarm-api-key": session.apiKey,
@@ -700,8 +805,8 @@ function toProjectName(folderName) {
 }
 function resolveStarterTemplateDir() {
     const candidates = [
-        path.resolve(import.meta.dirname, "..", "templates", "template_0000"),
-        path.resolve(import.meta.dirname, "..", "..", "templates", "template_0000")
+        path.resolve(import.meta.dirname, "..", "templates", "vidfarm_template_0000"),
+        path.resolve(import.meta.dirname, "..", "..", "templates", "vidfarm_template_0000")
     ];
     for (const candidate of candidates) {
         if (existsSync(candidate)) {
@@ -723,6 +828,7 @@ function parseProdTemplateCommandArgs(argv, defaults) {
             "install-command": { type: "string", default: "npm install" },
             "build-command": { type: "string", default: "npm run build" },
             "commit-sha": { type: "string" },
+            "repo-dir": { type: "string", default: "." },
             "env-file": { type: "string", default: defaults.envFile },
             "base-url": { type: "string", default: defaults.baseUrl },
             "api-key": { type: "string" },
@@ -752,6 +858,7 @@ function parseProdTemplateCommandArgs(argv, defaults) {
         installCommand: parsed.values["install-command"],
         buildCommand: parsed.values["build-command"],
         commitSha: parsed.values["commit-sha"] ?? undefined,
+        repoDir: path.resolve(process.cwd(), parsed.values["repo-dir"]),
         envFile: parsed.values["env-file"],
         baseUrl: normalizeBaseUrl(parsed.values["base-url"]),
         apiKey,
@@ -810,6 +917,35 @@ async function postProdTemplateApi(input, pathname, init) {
     }
     return payload;
 }
+async function packageTemplateArtifact(repoDir, commitSha) {
+    const tempDir = mkdtempSync(path.join(os.tmpdir(), "vidfarm-template-artifact-"));
+    const repoRoot = (await execFileAsync("git", ["-C", repoDir, "rev-parse", "--show-toplevel"])).stdout.trim();
+    const artifactPath = path.join(tempDir, "template-source.tar.gz");
+    try {
+        await execFileAsync("git", ["-C", repoRoot, "archive", "--format=tar.gz", `--output=${artifactPath}`, commitSha], {
+            cwd: repoRoot
+        });
+        const buffer = readFileSync(artifactPath);
+        return {
+            buffer,
+            sha256: createHash("sha256").update(buffer).digest("hex")
+        };
+    }
+    finally {
+        rmSync(tempDir, { recursive: true, force: true });
+    }
+}
+async function uploadArtifactArchive(presign, buffer) {
+    const response = await fetch(presign.upload.url, {
+        method: presign.upload.method,
+        headers: presign.upload.headers,
+        body: new Uint8Array(buffer)
+    });
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        throw new Error(body || `Artifact upload failed with ${response.status}.`);
+    }
+}
 function loadEnvFile(envFile) {
     const resolved = path.resolve(process.cwd(), envFile);
     if (!existsSync(resolved)) {

package/dist/src/config.js

@@ -32,6 +32,7 @@ const schema = z.object({
     GEMINI_API_KEY: z.string().optional(),
     PERPLEXITY_API_KEY: z.string().optional(),
     SUPERAGENCY_KEY: z.string().optional(),
+    ARTIFACT_SIGNING_SECRET: z.string().optional(),
     REMOTION_REGION: z.string().default("us-east-1"),
     REMOTION_BUCKET_NAME: z.string().optional(),
     REMOTION_SITE_NAME: z.string().optional(),
@@ -43,7 +44,6 @@ const schema = z.object({
     REMOTION_MODE: z.enum(["auto", "mock", "local", "lambda"]).default("auto"),
     MOCK_PROVIDER_RESPONSES: z.string().optional(),
     VIDFARM_ADMIN_EMAILS: z.string().default(""),
-    VIDFARM_DEVELOPER_EMAILS: z.string().default(""),
     VIDFARM_GITHUB_TOKEN: z.string().optional(),
     GITHUB_TOKEN: z.string().optional(),
     TEMPLATE_SOURCE_ROOT: z.string().default("./data/template-sources")
@@ -60,6 +60,7 @@ export const config = {
     VIDFARM_DATA_DIR: dataDir,
     TEMPLATE_SOURCE_ROOT: templateSourceRoot,
     PUBLIC_BASE_URL: publicBaseUrl,
+    ARTIFACT_SIGNING_SECRET: parsed.ARTIFACT_SIGNING_SECRET || parsed.SUPERAGENCY_KEY || "",
     isProduction: parsed.NODE_ENV === "production",
     mockProviders: parsed.MOCK_PROVIDER_RESPONSES === "true" ||
         (parsed.MOCK_PROVIDER_RESPONSES == null && parsed.NODE_ENV !== "production"),
@@ -68,8 +69,4 @@ export const config = {
         .split(",")
         .map((value) => value.trim().toLowerCase())
         .filter(Boolean),
-    developerEmails: parsed.VIDFARM_DEVELOPER_EMAILS
-        .split(",")
-        .map((value) => value.trim().toLowerCase())
-        .filter(Boolean)
 };

package/dist/src/context.js

@@ -176,6 +176,14 @@ export function createTemplateJobContext(input) {
                     ...request
                 });
             },
+            async generateSpeech(request) {
+                return input.providers.generateSpeech({
+                    customerId: input.customer.id,
+                    jobId: input.job.id,
+                    workerId: input.workerId,
+                    ...request
+                });
+            },
             async generateImage(request) {
                 return input.providers.generateImage({
                     customerId: input.customer.id,
@@ -191,6 +199,14 @@ export function createTemplateJobContext(input) {
                     workerId: input.workerId,
                     ...request
                 });
+            },
+            async transcribeSpeech(request) {
+                return input.providers.transcribeSpeech({
+                    customerId: input.customer.id,
+                    jobId: input.job.id,
+                    workerId: input.workerId,
+                    ...request
+                });
             }
         },
         remotion: {