@rightkit/release 0.2.133 → 0.2.134

package/installer-storage-doctor.mjs

@@ -72,13 +72,21 @@ function destinationFor(line) {
 }
 
 /** Find repository subdirectories above storage threshold outside managed root. */
-export function findLargeRepositorySubdirectories({ appRoot, managedRoot = resolveManagedRoot(), thresholdBytes = DEFAULT_STORAGE_THRESHOLD_BYTES, ignored = gitIgnored } = {}) {
+export function findLargeRepositorySubdirectories({ appRoot, managedRoot = resolveManagedRoot(), thresholdBytes = DEFAULT_STORAGE_THRESHOLD_BYTES, ignored = gitIgnored, declared = [] } = {}) {
   if (!Number.isFinite(thresholdBytes) || thresholdBytes < 1) throw new TypeError("thresholdBytes must be positive");
   const root = path.resolve(appRoot);
   const ignoredRoot = managedRoot ? path.resolve(managedRoot) : null;
   const findings = [];
   const inside = (candidate, parent) => candidate === parent || candidate.startsWith(`${parent}${path.sep}`);
   const managedIgnored = ignoredRoot && inside(ignoredRoot, root) ? Boolean(ignored(ignoredRoot, root)) : false;
+  // App-declared durable stores (model stores, test fixture roots) are intentional and exempt.
+  // Each needs a reason: config `storage.declaredStores: [{ path, reason }]`, paths relative to the app root.
+  const declaredRoots = (declared ?? []).map((item) => {
+    if (!item?.path || !String(item.reason ?? "").trim()) throw new TypeError("storage.declaredStores entries need path and reason");
+    const resolved = path.resolve(root, item.path);
+    if (!inside(resolved, root) || resolved === root) throw new TypeError(`storage.declaredStores path must be inside the app root: ${item.path}`);
+    return resolved;
+  });
   const walk = (directory) => {
     let total = 0;
     let entries;
@@ -91,6 +99,7 @@ export function findLargeRepositorySubdirectories({ appRoot, managedRoot = resol
       if (stat.isSymbolicLink()) continue;
       if (stat.isDirectory()) {
         if (managedIgnored && inside(file, ignoredRoot)) continue;
+        if (declaredRoots.some((declaredRoot) => inside(file, declaredRoot))) continue;
         total += walk(file);
       } else if (stat.isFile()) total += stat.size;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/release",
-  "version": "0.2.133",
+  "version": "0.2.134",
   "description": "Portable release CLI/SDK with fail-closed public GitHub Releases and private R2 + RightApps distribution.",
   "license": "MIT OR Apache-2.0",
   "type": "module",

package/release.mjs

@@ -210,7 +210,7 @@ if (opts.doctor) {
   });
   const storageFindings = [
     ...installerCopyFindings,
-    ...findLargeRepositorySubdirectories({ appRoot: root, managedRoot, thresholdBytes: Number(process.env.RIGHTKIT_ARTIFACT_STORAGE_THRESHOLD_BYTES ?? DEFAULT_STORAGE_THRESHOLD_BYTES) }),
+    ...findLargeRepositorySubdirectories({ appRoot: root, managedRoot, declared: config.storage?.declaredStores ?? [], thresholdBytes: Number(process.env.RIGHTKIT_ARTIFACT_STORAGE_THRESHOLD_BYTES ?? DEFAULT_STORAGE_THRESHOLD_BYTES) }),
   ];
   if (storageFindings.length) {
     console.log("artifact-storage: report-only storage findings detected:");
@@ -281,8 +281,9 @@ if (opts.platform === "win") {
     });
   }
 } else if (opts.platform === "mac") {
-  const signingFiles = target.sign.prePackageFiles.map((p) => path.resolve(root, p));
   if (runMacPhase("prepackage")) await runCommand(target.prePackage, root);
+  // Resolve after prePackage: with storage governance the artifact may live only in RIGHT_RELEASE_ARTIFACT_DIR.
+  const signingFiles = target.sign.prePackageFiles.map((p) => resolveReleaseArtifactPath(root, p));
   for (const file of signingFiles) await mustExist(file, `missing macOS Developer ID signing artifact: ${file}`);
   if (runMacPhase("sign")) await signMacos(signingFiles, root);
 } else if (nativeAssembly) {

package/rightkit-versions.json

@@ -27,9 +27,9 @@
     "@rightkit/onboarding": "0.2.3",
     "@rightkit/pdf-ui": "0.1.2",
     "@rightkit/platform-ui": "0.1.2",
-    "@rightkit/qa": "0.3.0",
+    "@rightkit/qa": "0.3.1",
     "@rightkit/qa-chrome": "0.1.3",
-    "@rightkit/release": "0.2.133",
+    "@rightkit/release": "0.2.134",
     "@rightkit/settings-ui": "0.2.7",
     "@rightkit/shell": "0.1.0",
     "@rightkit/tauri": "0.1.1",
@@ -156,7 +156,8 @@
       "0.2.129",
       "0.2.130",
       "0.2.131",
-      "0.2.132"
+      "0.2.132",
+      "0.2.133"
     ],
     "@rightkit/qa": [
       "0.1.0",
@@ -164,7 +165,8 @@
       "0.2.1",
       "0.2.2",
       "0.2.3",
-      "0.2.4"
+      "0.2.4",
+      "0.3.0"
     ],
     "@rightkit/app-shell": [
       "0.1.0",
@@ -256,7 +258,7 @@
     "rightkit-pdf": "0.1.0",
     "rightkit-playback": "0.1.1",
     "rightkit-process": "0.3.1",
-    "rightkit-qa": "0.2.10",
+    "rightkit-qa": "0.2.11",
     "rightkit-qts": "0.2.1",
     "rightkit-qts-ggml": "0.1.0",
     "rightkit-qts-ggml-sys": "0.1.0",
@@ -306,7 +308,7 @@
       "rightkit-pdf": "0.1.0",
       "rightkit-playback": "0.1.1",
       "rightkit-process": "0.3.1",
-      "rightkit-qa": "0.2.10",
+      "rightkit-qa": "0.2.11",
       "rightkit-qts": "0.2.1",
       "rightkit-qts-ggml": "0.1.0",
       "rightkit-qts-ggml-sys": "0.1.0",
@@ -335,9 +337,9 @@
       "@rightkit/onboarding": "0.2.3",
       "@rightkit/pdf-ui": "0.1.2",
       "@rightkit/platform-ui": "0.1.2",
-      "@rightkit/qa": "0.3.0",
+      "@rightkit/qa": "0.3.1",
       "@rightkit/qa-chrome": "0.1.3",
-      "@rightkit/release": "0.2.132",
+      "@rightkit/release": "0.2.133",
       "@rightkit/settings-ui": "0.2.7",
       "@rightkit/shell": "0.1.0",
       "@rightkit/tauri": "0.1.1",
@@ -389,7 +391,8 @@
     "rightkit-qa": [
       "0.2.7",
       "0.2.8",
-      "0.2.9"
+      "0.2.9",
+      "0.2.10"
     ],
     "rightkit-sandbox": [
       "0.1.0",