@runveric/cli 0.1.2 → 0.2.0

package/dist/runveric.mjs

@@ -212,13 +212,17 @@ var require_wire_identity = __commonJS({
     Object.defineProperty(exports, "__esModule", {
       value: true
     });
-    exports.PROBLEM_TYPE_BASE = exports.RUNNER_PROTOCOL_VERSION = exports.PACKAGE_WORK_ITEM_VERSION = exports.ACTION_MANIFEST_API_VERSION = exports.PACKAGE_EXECUTION_PROTOCOL_VERSION = exports.PACKAGE_RESULT_PROTOCOL_VERSION = void 0;
+    exports.PROBLEM_TYPE_BASE = exports.CATALOG_ARTIFACT_MEDIA_TYPE = exports.CATALOG_ACTION_ARTIFACT_SCHEMA_V1 = exports.CATALOG_RELEASE_SCHEMA_V1 = exports.EVIDENCE_PACK_SCHEMA_VERSION = exports.RUNNER_PROTOCOL_VERSION = exports.PACKAGE_WORK_ITEM_VERSION = exports.ACTION_MANIFEST_API_VERSION = exports.PACKAGE_EXECUTION_PROTOCOL_VERSION = exports.PACKAGE_RESULT_PROTOCOL_VERSION = void 0;
     exports.problemType = problemType;
     exports.PACKAGE_RESULT_PROTOCOL_VERSION = "runveric.dev/package-result/v1";
     exports.PACKAGE_EXECUTION_PROTOCOL_VERSION = "runveric.dev/package-execution/v1";
     exports.ACTION_MANIFEST_API_VERSION = "runveric.dev/action/v1";
     exports.PACKAGE_WORK_ITEM_VERSION = "runveric.dev/package-work-item/v1";
     exports.RUNNER_PROTOCOL_VERSION = "runveric.dev/runner-channel/v2";
+    exports.EVIDENCE_PACK_SCHEMA_VERSION = "runveric.dev/evidence-pack/v1";
+    exports.CATALOG_RELEASE_SCHEMA_V1 = "runveric.dev/catalog-release/v1";
+    exports.CATALOG_ACTION_ARTIFACT_SCHEMA_V1 = "runveric.dev/catalog-action/v1";
+    exports.CATALOG_ARTIFACT_MEDIA_TYPE = "application/vnd.runveric.catalog-artifact+json";
     exports.PROBLEM_TYPE_BASE = "https://runveric.dev/errors";
     function problemType(slug) {
       return `${exports.PROBLEM_TYPE_BASE}/${slug}`;
@@ -301,6 +305,13 @@ var require_permissions = __commonJS({
     Object.defineProperty(exports, "__esModule", {
       value: true
     });
+    exports.PLATFORM_PERMISSIONS = void 0;
+    exports.PLATFORM_PERMISSIONS = [
+      // Which catalog release is live for every workspace (docs/121). Pinning one changes what EVERY
+      // workspace can run, so it is neither `policy:manage` (one workspace's own governance) nor
+      // `catalog:read` (the right to browse).
+      "catalog:release"
+    ];
   }
 });
 
@@ -443,6 +454,41 @@ var require_groups = __commonJS({
   }
 });
 
+// ../contracts/dist/catalog-policy.js
+var require_catalog_policy = __commonJS({
+  "../contracts/dist/catalog-policy.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.CATALOG_RULE_EFFECTS = exports.CATALOG_DEFAULT_MODE_WHEN_UNSET = exports.CATALOG_DEFAULT_MODES = void 0;
+    exports.effectiveCatalogAccess = effectiveCatalogAccess;
+    var CATALOG_DEFAULT_MODE_SET = {
+      allow_all: true,
+      deny_all: true
+    };
+    exports.CATALOG_DEFAULT_MODES = Object.keys(CATALOG_DEFAULT_MODE_SET);
+    exports.CATALOG_DEFAULT_MODE_WHEN_UNSET = "allow_all";
+    var CATALOG_RULE_EFFECT_SET = {
+      allow: true,
+      deny: true
+    };
+    exports.CATALOG_RULE_EFFECTS = Object.keys(CATALOG_RULE_EFFECT_SET);
+    var RULE_ACCESS = {
+      allow: "allowed",
+      deny: "blocked"
+    };
+    var UNRULED_ACCESS = {
+      allow_all: "allowed",
+      deny_all: "blocked"
+    };
+    function effectiveCatalogAccess(defaultMode, rule) {
+      return rule !== null ? RULE_ACCESS[rule] : UNRULED_ACCESS[defaultMode];
+    }
+    __name(effectiveCatalogAccess, "effectiveCatalogAccess");
+  }
+});
+
 // ../contracts/dist/catalog.js
 var require_catalog = __commonJS({
   "../contracts/dist/catalog.js"(exports) {
@@ -558,6 +604,315 @@ var require_catalog = __commonJS({
   }
 });
 
+// ../contracts/dist/catalog-release.js
+var require_catalog_release = __commonJS({
+  "../contracts/dist/catalog-release.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.ARTIFACT_DIGEST_PATTERN = exports.ARTIFACT_REPOSITORY_PATTERN = exports.CATALOG_ACTION_ARTIFACT_SCHEMA_VERSIONS = exports.CATALOG_RELEASE_SCHEMA_VERSIONS = void 0;
+    var wire_identity_1 = require_wire_identity();
+    exports.CATALOG_RELEASE_SCHEMA_VERSIONS = [
+      wire_identity_1.CATALOG_RELEASE_SCHEMA_V1
+    ];
+    exports.CATALOG_ACTION_ARTIFACT_SCHEMA_VERSIONS = [
+      wire_identity_1.CATALOG_ACTION_ARTIFACT_SCHEMA_V1
+    ];
+    exports.ARTIFACT_REPOSITORY_PATTERN = /^[a-z0-9][a-z0-9.-]*(:[0-9]+)?(\/[a-z0-9][a-z0-9._-]*)+$/;
+    exports.ARTIFACT_DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;
+  }
+});
+
+// ../contracts/dist/action-repository.js
+var require_action_repository = __commonJS({
+  "../contracts/dist/action-repository.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.ACTION_REPOSITORY_PREFIX = void 0;
+    exports.actionKeyRefusal = actionKeyRefusal;
+    exports.isActionKey = isActionKey;
+    exports.actionRepositoryName = actionRepositoryName;
+    exports.actionKeyOf = actionKeyOf;
+    exports.actionPackageRefusal = actionPackageRefusal3;
+    exports.ACTION_REPOSITORY_PREFIX = "action-";
+    var WORD = /^[a-z][a-z0-9]*$/;
+    var VERB = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)*$/;
+    function actionKeyRefusal(key) {
+      const shape = "an action key is <provider>.<resource>.<verb>: provider and resource are one lowercase word (a-z, then a-z or 0-9), the verb is camelCase with no two capitals in a row \u2014 so the key maps to exactly one repository name and back.";
+      const segments = key.split(".");
+      if (segments.length !== 3) {
+        return `"${key}" is not an action key: it has ${segments.length} dot-separated segment(s), not 3; ${shape}`;
+      }
+      const [provider, resource, verb] = segments;
+      const not = /* @__PURE__ */ __name((what) => `"${key}" is not an action key: ${what}; ${shape}`, "not");
+      if (!WORD.test(provider)) return not(`its provider "${provider}" is not one lowercase word`);
+      if (!WORD.test(resource)) return not(`its resource "${resource}" is not one lowercase word`);
+      if (!VERB.test(verb)) return not(`its verb "${verb}" is not camelCase without two capitals in a row`);
+      return null;
+    }
+    __name(actionKeyRefusal, "actionKeyRefusal");
+    function isActionKey(key) {
+      return actionKeyRefusal(key) === null;
+    }
+    __name(isActionKey, "isActionKey");
+    var kebab = /* @__PURE__ */ __name((verb) => verb.replace(/[A-Z]/g, (capital) => `-${capital.toLowerCase()}`), "kebab");
+    function actionRepositoryName(key) {
+      const refusal = actionKeyRefusal(key);
+      if (refusal !== null) throw new Error(refusal);
+      const [provider, resource, verb] = key.split(".");
+      return `${exports.ACTION_REPOSITORY_PREFIX}${provider}-${resource}-${kebab(verb)}`;
+    }
+    __name(actionRepositoryName, "actionRepositoryName");
+    function actionKeyOf(name) {
+      if (!name.startsWith(exports.ACTION_REPOSITORY_PREFIX)) return null;
+      const [provider, resource, first2, ...rest] = name.slice(exports.ACTION_REPOSITORY_PREFIX.length).split("-");
+      if (provider === void 0 || resource === void 0 || first2 === void 0) return null;
+      const verb = first2 + rest.map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join("");
+      const key = `${provider}.${resource}.${verb}`;
+      return isActionKey(key) && actionRepositoryName(key) === name ? key : null;
+    }
+    __name(actionKeyOf, "actionKeyOf");
+    function actionPackageRefusal3(key, artifactRef) {
+      const keyRefusal = actionKeyRefusal(key);
+      if (keyRefusal !== null) return `${keyRefusal} No package can carry it.`;
+      const cut = artifactRef.lastIndexOf("/");
+      const named = artifactRef.slice(cut + 1);
+      const expected = actionRepositoryName(key);
+      if (named === expected) return null;
+      return `action "${key}" is published only from a package named "${expected}" (${artifactRef.slice(0, cut + 1)}${expected}), not "${named}". An action's package carries its key's name, so an artifact cannot claim an identity its package does not carry.`;
+    }
+    __name(actionPackageRefusal3, "actionPackageRefusal");
+  }
+});
+
+// ../contracts/dist/catalog-release-spec.js
+var require_catalog_release_spec = __commonJS({
+  "../contracts/dist/catalog-release-spec.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.CatalogReleaseSpecError = void 0;
+    exports.splitArtifactReference = splitArtifactReference;
+    exports.parseCatalogReleaseSpec = parseCatalogReleaseSpec2;
+    var CatalogReleaseSpecError = class CatalogReleaseSpecError extends Error {
+      static {
+        __name(this, "CatalogReleaseSpecError");
+      }
+      constructor(message) {
+        super(message);
+        this.name = "CatalogReleaseSpecError";
+      }
+    };
+    exports.CatalogReleaseSpecError = CatalogReleaseSpecError;
+    function splitArtifactReference(reference) {
+      const at = reference.indexOf("@");
+      if (at <= 0 || at === reference.length - 1) return null;
+      return {
+        artifactRef: reference.slice(0, at),
+        digest: reference.slice(at + 1)
+      };
+    }
+    __name(splitArtifactReference, "splitArtifactReference");
+    var isMapping2 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isMapping");
+    function parseCatalogReleaseSpec2(value) {
+      if (!isMapping2(value)) {
+        throw new CatalogReleaseSpecError("release.yaml is not a mapping of `version` and `actions`.");
+      }
+      const unknown = Object.keys(value).filter((key) => key !== "version" && key !== "actions");
+      if (unknown.length > 0) {
+        throw new CatalogReleaseSpecError(`release.yaml carries ${unknown.map((key) => `"${key}"`).join(", ")}; it has exactly two fields, \`version\` and \`actions\`.`);
+      }
+      const { version: version2, actions } = value;
+      if (typeof version2 !== "string" || version2.trim().length === 0) {
+        throw new CatalogReleaseSpecError(`release.yaml's version is ${JSON.stringify(version2 ?? null)}, not a label. Write it as a quoted string \u2014 version: "2026.10.1" \u2014 because YAML reads an unquoted 2026.10 as a number.`);
+      }
+      if (actions === null || actions === void 0 || isMapping2(actions) && Object.keys(actions).length === 0) {
+        throw new CatalogReleaseSpecError("release.yaml declares no action. An empty release is refused: pinned, it would declare a catalog with nothing in it.");
+      }
+      if (!isMapping2(actions)) {
+        throw new CatalogReleaseSpecError("release.yaml's actions is not a mapping of action key to <repository>@<digest>.");
+      }
+      return {
+        version: version2,
+        actions: Object.entries(actions).map(([key, reference]) => {
+          const split = typeof reference === "string" ? splitArtifactReference(reference) : null;
+          if (split === null) {
+            throw new CatalogReleaseSpecError(`release.yaml's ${key} is ${JSON.stringify(reference)}, not <repository>@<digest>.`);
+          }
+          return {
+            key,
+            ...split
+          };
+        })
+      };
+    }
+    __name(parseCatalogReleaseSpec2, "parseCatalogReleaseSpec");
+  }
+});
+
+// ../contracts/dist/catalog-lock.js
+var require_catalog_lock = __commonJS({
+  "../contracts/dist/catalog-lock.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.CatalogLockError = exports.CATALOG_LOCK_FILE = exports.CATALOG_LOCK_SCHEMA_V1 = void 0;
+    exports.parseCatalogLock = parseCatalogLock;
+    exports.catalogLockText = catalogLockText;
+    exports.authoredElsewhere = authoredElsewhere;
+    var action_repository_1 = require_action_repository();
+    var catalog_release_1 = require_catalog_release();
+    exports.CATALOG_LOCK_SCHEMA_V1 = "runveric.catalog-lock/v1";
+    exports.CATALOG_LOCK_FILE = "release.lock.json";
+    var CatalogLockError = class CatalogLockError extends Error {
+      static {
+        __name(this, "CatalogLockError");
+      }
+      constructor(message) {
+        super(message);
+        this.name = "CatalogLockError";
+      }
+    };
+    exports.CatalogLockError = CatalogLockError;
+    var SHA256_HEX = /^[0-9a-f]{64}$/;
+    function objectAt(path, value, keys) {
+      if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new CatalogLockError(`${path} is not an object.`);
+      }
+      const unknown = Object.keys(value).filter((key) => !keys.includes(key));
+      if (unknown.length > 0) {
+        throw new CatalogLockError(`${path} carries ${unknown.map((key) => `"${key}"`).join(", ")}, which a lock does not have. A lock is written by catalog:vendor and never edited; re-vendor instead.`);
+      }
+      return value;
+    }
+    __name(objectAt, "objectAt");
+    function stringAt(path, value, pattern, expected) {
+      if (typeof value !== "string" || value.length === 0) {
+        throw new CatalogLockError(`${path} is not a non-empty string.`);
+      }
+      if (pattern !== void 0 && !pattern.test(value)) {
+        throw new CatalogLockError(`${path} is "${value}", which is not ${expected}.`);
+      }
+      return value;
+    }
+    __name(stringAt, "stringAt");
+    function parseCatalogLock(value) {
+      const root = objectAt("the lock", value, [
+        "schemaVersion",
+        "release",
+        "actions"
+      ]);
+      if (root.schemaVersion !== exports.CATALOG_LOCK_SCHEMA_V1) {
+        throw new CatalogLockError(`the lock declares schemaVersion ${JSON.stringify(root.schemaVersion)}; this build reads ${exports.CATALOG_LOCK_SCHEMA_V1} only.`);
+      }
+      const release = objectAt("release", root.release, [
+        "artifactRef",
+        "digest",
+        "version"
+      ]);
+      const lock = {
+        schemaVersion: exports.CATALOG_LOCK_SCHEMA_V1,
+        release: {
+          artifactRef: stringAt("release.artifactRef", release.artifactRef, catalog_release_1.ARTIFACT_REPOSITORY_PATTERN, "a registry repository"),
+          digest: stringAt("release.digest", release.digest, catalog_release_1.ARTIFACT_DIGEST_PATTERN, "a sha256 digest"),
+          version: stringAt("release.version", release.version)
+        },
+        actions: []
+      };
+      if (!Array.isArray(root.actions) || root.actions.length === 0) {
+        throw new CatalogLockError("actions is not a non-empty array. A release names at least one action.");
+      }
+      root.actions.forEach((entry, index) => {
+        const path = `actions[${index}]`;
+        const action = objectAt(path, entry, [
+          "key",
+          "artifactRef",
+          "digest",
+          "manifestSha256",
+          "provenance"
+        ]);
+        const key = stringAt(`${path}.key`, action.key);
+        const artifactRef = stringAt(`${path}.artifactRef`, action.artifactRef, catalog_release_1.ARTIFACT_REPOSITORY_PATTERN, "a registry repository");
+        const misnamed = (0, action_repository_1.actionPackageRefusal)(key, artifactRef);
+        if (misnamed !== null) throw new CatalogLockError(`${path}: ${misnamed}`);
+        const previous = lock.actions[lock.actions.length - 1];
+        if (previous !== void 0 && !(previous.key < key)) {
+          throw new CatalogLockError(`${path}.key "${key}" follows "${previous.key}": a lock names each action once, sorted by key.`);
+        }
+        const provenance2 = objectAt(`${path}.provenance`, action.provenance, [
+          "repository",
+          "commit"
+        ]);
+        lock.actions.push({
+          key,
+          artifactRef,
+          digest: stringAt(`${path}.digest`, action.digest, catalog_release_1.ARTIFACT_DIGEST_PATTERN, "a sha256 digest"),
+          manifestSha256: stringAt(`${path}.manifestSha256`, action.manifestSha256, SHA256_HEX, "64 lowercase hex characters"),
+          provenance: {
+            repository: stringAt(`${path}.provenance.repository`, provenance2.repository),
+            commit: stringAt(`${path}.provenance.commit`, provenance2.commit)
+          }
+        });
+      });
+      return lock;
+    }
+    __name(parseCatalogLock, "parseCatalogLock");
+    function catalogLockText(lock) {
+      const ordered = {
+        schemaVersion: lock.schemaVersion,
+        release: {
+          artifactRef: lock.release.artifactRef,
+          digest: lock.release.digest,
+          version: lock.release.version
+        },
+        actions: [
+          ...lock.actions
+        ].sort((a, b) => a.key < b.key ? -1 : a.key > b.key ? 1 : 0).map((action) => ({
+          key: action.key,
+          artifactRef: action.artifactRef,
+          digest: action.digest,
+          manifestSha256: action.manifestSha256,
+          provenance: {
+            repository: action.provenance.repository,
+            commit: action.provenance.commit
+          }
+        }))
+      };
+      return `${JSON.stringify(ordered, null, 2)}
+`;
+    }
+    __name(catalogLockText, "catalogLockText");
+    function authoredElsewhere(lock, key) {
+      const namespace = lock.release.artifactRef.slice(0, lock.release.artifactRef.lastIndexOf("/"));
+      const organisation = namespace.slice(namespace.lastIndexOf("/") + 1);
+      return `${key} is authored in ${organisation}/${(0, action_repository_1.actionRepositoryName)(key)} \u2014 change it there, publish, assemble, vendor`;
+    }
+    __name(authoredElsewhere, "authoredElsewhere");
+  }
+});
+
+// ../contracts/dist/catalog-manifest-placeholders.js
+var require_catalog_manifest_placeholders = __commonJS({
+  "../contracts/dist/catalog-manifest-placeholders.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.MANIFEST_PLACEHOLDER_PATTERN = exports.MANIFEST_PLACEHOLDERS = void 0;
+    var brand_1 = require_brand();
+    exports.MANIFEST_PLACEHOLDERS = {
+      BRAND_SHORT_NAME: brand_1.BRAND_SHORT_NAME,
+      BRAND_NAME: brand_1.BRAND_NAME
+    };
+    exports.MANIFEST_PLACEHOLDER_PATTERN = /\{\{\s*([A-Za-z_][A-Za-z0-9_]*)\s*\}\}/g;
+  }
+});
+
 // ../contracts/dist/change-control.js
 var require_change_control = __commonJS({
   "../contracts/dist/change-control.js"(exports) {
@@ -857,8 +1212,8 @@ var require_package_provenance = __commonJS({
       pair.accepted,
       pair.revoked
     ]);
-    function poolProvenanceAuditAction(provenance, accepted) {
-      const pair = exports.POOL_PROVENANCE_AUDIT_ACTIONS[provenance];
+    function poolProvenanceAuditAction(provenance2, accepted) {
+      const pair = exports.POOL_PROVENANCE_AUDIT_ACTIONS[provenance2];
       return accepted ? pair.accepted : pair.revoked;
     }
     __name(poolProvenanceAuditAction, "poolProvenanceAuditAction");
@@ -1286,7 +1641,7 @@ var require_validation = __commonJS({
     Object.defineProperty(exports, "__esModule", {
       value: true
     });
-    exports.TARGET_COMPARISON_KINDS = exports.TARGETS_NO_SCOPE = exports.TARGETS_NOT_COUNTED = exports.TARGET_COUNT_ABSENCES = void 0;
+    exports.TARGET_COMPARISON_KINDS = exports.DECISION_CODES = exports.REFUSAL_CODES = exports.CHECK_LEVELS = exports.TARGETS_NO_SCOPE = exports.TARGETS_NOT_COUNTED = exports.TARGET_COUNT_ABSENCES = void 0;
     exports.isTargetCountAbsence = isTargetCountAbsence;
     exports.singleTarget = singleTarget;
     exports.noTargetsResolved = noTargetsResolved;
@@ -1296,6 +1651,9 @@ var require_validation = __commonJS({
     exports.eligibleTargetCount = eligibleTargetCount;
     exports.targetsValidationCheck = targetsValidationCheck;
     exports.targetSummaryOf = targetSummaryOf;
+    exports.isCheckLevel = isCheckLevel;
+    exports.isRefusalCode = isRefusalCode;
+    exports.isDecisionCode = isDecisionCode;
     exports.scopeFailureDetail = scopeFailureDetail;
     exports.targetsUnavailableFrom = targetsUnavailableFrom;
     exports.compareTargets = compareTargets;
@@ -1412,6 +1770,38 @@ var require_validation = __commonJS({
       return exports.TARGETS_NOT_COUNTED;
     }
     __name(targetSummaryOf, "targetSummaryOf");
+    exports.CHECK_LEVELS = [
+      "info",
+      "warn",
+      "error"
+    ];
+    function isCheckLevel(value) {
+      return typeof value === "string" && exports.CHECK_LEVELS.includes(value);
+    }
+    __name(isCheckLevel, "isCheckLevel");
+    exports.REFUSAL_CODES = [
+      "disk.notUnattached",
+      "disk.locked",
+      "disk.shared",
+      "disk.inRecoveryPlan",
+      "disk.keyUnusable",
+      "disk.unverifiable"
+    ];
+    function isRefusalCode(value) {
+      return typeof value === "string" && exports.REFUSAL_CODES.includes(value);
+    }
+    __name(isRefusalCode, "isRefusalCode");
+    exports.DECISION_CODES = [
+      "disk.recentlyDetached",
+      "disk.customerKey",
+      "disk.customerKeyUnverified",
+      "disk.guestEncrypted",
+      "disk.noSnapshot"
+    ];
+    function isDecisionCode(value) {
+      return typeof value === "string" && exports.DECISION_CODES.includes(value);
+    }
+    __name(isDecisionCode, "isDecisionCode");
     function scopeFailureDetail(error) {
       const raw = error instanceof Error ? error.message : String(error);
       const oneLine = raw.replace(/\s+/g, " ").trim().replace(/[.!]+$/, "");
@@ -1482,7 +1872,7 @@ var require_execution = __commonJS({
     Object.defineProperty(exports, "__esModule", {
       value: true
     });
-    exports.ACCEPTING_A_PROVENANCE_IS_NOT_A_CAPABILITY = exports.RUNNER_PACKAGE_RUNTIME_NOT_PINNED = exports.CONNECTOR_UNAVAILABLE_MESSAGE = exports.ACTION_RUNNABILITY_CAUSE_KINDS = exports.EXECUTION_LOG_ACTIVITY_PHRASE = exports.EXECUTION_LOG_CONNECTION_PHRASE = exports.EXECUTION_LOG_STREAM_PHASES = exports.EXECUTION_LOG_ACTIVITIES = exports.targetsValidationCheck = exports.targetSummarySentence = exports.targetSummaryOf = exports.targetSummaryLabel = exports.targetsUnavailableFrom = exports.targetsUnavailable = exports.targetComparisonSentence = exports.targetComparisonLevel = exports.targetComparisonLabel = exports.TARGETS_NOT_COUNTED = exports.TARGETS_NO_SCOPE = exports.TARGET_COUNT_ABSENCES = exports.TARGET_COMPARISON_KINDS = exports.singleTarget = exports.scopeFailureDetail = exports.noTargetsResolved = exports.isTargetCountAbsence = exports.eligibleTargetCount = exports.compareTargets = exports.SUBSCRIPTION_ID_FIELD_RENAMED = void 0;
+    exports.ACCEPTING_A_PROVENANCE_IS_NOT_A_CAPABILITY = exports.RUNNER_PACKAGE_RUNTIME_NOT_PINNED = exports.CONNECTOR_UNAVAILABLE_MESSAGE = exports.ACTION_RUNNABILITY_CAUSE_KINDS = exports.EXECUTION_LOG_ACTIVITY_PHRASE = exports.EXECUTION_LOG_CONNECTION_PHRASE = exports.EXECUTION_LOG_STREAM_PHASES = exports.EXECUTION_LOG_ACTIVITIES = exports.targetsValidationCheck = exports.targetSummarySentence = exports.targetSummaryOf = exports.targetSummaryLabel = exports.targetsUnavailableFrom = exports.targetsUnavailable = exports.targetComparisonSentence = exports.targetComparisonLevel = exports.targetComparisonLabel = exports.TARGETS_NOT_COUNTED = exports.TARGETS_NO_SCOPE = exports.TARGET_COUNT_ABSENCES = exports.TARGET_COMPARISON_KINDS = exports.singleTarget = exports.scopeFailureDetail = exports.noTargetsResolved = exports.isTargetCountAbsence = exports.eligibleTargetCount = exports.compareTargets = exports.REFUSAL_CODES = exports.isRefusalCode = exports.isDecisionCode = exports.isCheckLevel = exports.DECISION_CODES = exports.CHECK_LEVELS = exports.SUBSCRIPTION_ID_FIELD_RENAMED = void 0;
     exports.executionLogStreamSentence = executionLogStreamSentence;
     exports.actionRunnabilityCopy = actionRunnabilityCopy;
     exports.actionRunnabilityHeadline = actionRunnabilityHeadline;
@@ -1493,6 +1883,42 @@ var require_execution = __commonJS({
     var brand_1 = require_brand();
     exports.SUBSCRIPTION_ID_FIELD_RENAMED = "`subscriptionId` is not accepted on this route. It named an `azure_subscription.id` while this route has always resolved a `connection_scope.id`. The two were the same value while one shim gave a scope the registry row's id; a scope discovered since has an id of its own, and the registry id is either nobody's scope or another connector's. Send `connectionScopeId` \u2014 the value `ExecutionDto.connectionScopeId` reports for a run.";
     var validation_1 = require_validation();
+    Object.defineProperty(exports, "CHECK_LEVELS", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return validation_1.CHECK_LEVELS;
+      }, "get")
+    });
+    Object.defineProperty(exports, "DECISION_CODES", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return validation_1.DECISION_CODES;
+      }, "get")
+    });
+    Object.defineProperty(exports, "isCheckLevel", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return validation_1.isCheckLevel;
+      }, "get")
+    });
+    Object.defineProperty(exports, "isDecisionCode", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return validation_1.isDecisionCode;
+      }, "get")
+    });
+    Object.defineProperty(exports, "isRefusalCode", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return validation_1.isRefusalCode;
+      }, "get")
+    });
+    Object.defineProperty(exports, "REFUSAL_CODES", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return validation_1.REFUSAL_CODES;
+      }, "get")
+    });
     Object.defineProperty(exports, "compareTargets", {
       enumerable: true,
       get: /* @__PURE__ */ __name(function() {
@@ -1634,6 +2060,7 @@ var require_execution = __commonJS({
     }
     __name(executionLogStreamSentence, "executionLogStreamSentence");
     var ACTION_RUNNABILITY_CAUSE_KIND_SET = {
+      catalog_blocked: true,
       connector_unregistered: true,
       package: true,
       runner_pool: true,
@@ -1643,8 +2070,12 @@ var require_execution = __commonJS({
     };
     exports.ACTION_RUNNABILITY_CAUSE_KINDS = Object.keys(ACTION_RUNNABILITY_CAUSE_KIND_SET);
     exports.CONNECTOR_UNAVAILABLE_MESSAGE = "This action is not yet available to run.";
+    var CATALOG_BLOCKED_CAUSE = "This workspace does not permit this action.";
+    var CATALOG_BLOCKED_REMEDY = "An administrator of this workspace decides which catalog actions may run here, and can allow it.";
     function actionRunnabilityCopy(cause) {
       switch (cause.kind) {
+        case "catalog_blocked":
+          return `${CATALOG_BLOCKED_CAUSE} ${CATALOG_BLOCKED_REMEDY}`;
         case "package":
           return (0, packages_2.actionUnrunnableCopy)(cause.detail);
         case "runner_pool": {
@@ -1676,7 +2107,7 @@ var require_execution = __commonJS({
     }
     __name(describeRoutingPlaces, "describeRoutingPlaces");
     function runnerPoolClauses(cause) {
-      const provenance = cause.provenance ? `is ${packages_1.PACKAGE_PROVENANCE_CLAUSES[cause.provenance]}` : (
+      const provenance2 = cause.provenance ? `is ${packages_1.PACKAGE_PROVENANCE_CLAUSES[cause.provenance]}` : (
         // every other value this sentence could take is a claim about where bytes came from.
         "has no recorded provenance"
       );
@@ -1694,7 +2125,7 @@ var require_execution = __commonJS({
          * credential it acts with. A refusal that dropped those would be telling an admin the
          * decision no longer matters.
          */
-        cause: `${provenance}, and would run on the private runner pool "${cause.poolName}", because that is where runs using this connection execute \u2014 on a machine you own, in a container that shares its host's kernel and acts with this connection's credential.`,
+        cause: `${provenance2}, and would run on the private runner pool "${cause.poolName}", because that is where runs using this connection execute \u2014 on a machine you own, in a container that shares its host's kernel and acts with this connection's credential.`,
         remedy: `${acceptedClause(cause.accepts)} ${POOL_CONSENT_REMEDY}`
       };
     }
@@ -1733,6 +2164,8 @@ var require_execution = __commonJS({
     var POOL_CONSENT_REMEDY = `${brand_1.BRAND_SHORT_NAME} does not vouch for what runs on your machines \u2014 the owner of this pool does. An administrator can accept this provenance under Settings \u2192 Runners, and until they do, nothing of this provenance will be sent there. Built-in actions still run in that pool.`;
     function actionRunnabilityHeadline(cause) {
       switch (cause.kind) {
+        case "catalog_blocked":
+          return "this workspace does not permit its action \u2014 an administrator of this workspace can allow it";
         case "package":
           return (0, packages_2.actionUnrunnableHeadline)(cause.detail);
         case "runner_pool":
@@ -1750,6 +2183,8 @@ var require_execution = __commonJS({
     __name(actionRunnabilityHeadline, "actionRunnabilityHeadline");
     function actionRunnabilityRefusal(cause) {
       switch (cause.kind) {
+        case "catalog_blocked":
+          return `${CATALOG_BLOCKED_CAUSE} ${CATALOG_BLOCKED_REMEDY} Nothing was started.`;
         case "package":
           return (0, packages_2.actionUnrunnableRefusal)(cause.detail, cause);
         case "runner_pool": {
@@ -1774,6 +2209,80 @@ var require_execution = __commonJS({
   }
 });
 
+// ../contracts/dist/decisions.js
+var require_decisions = __commonJS({
+  "../contracts/dist/decisions.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.DECISION_ACKNOWLEDGEMENT = void 0;
+    exports.recordedDecisionsOf = recordedDecisionsOf;
+    exports.raisedDecisionCodes = raisedDecisionCodes;
+    exports.decisionMismatch = decisionMismatch;
+    exports.decisionMismatchSentence = decisionMismatchSentence;
+    var validation_1 = require_validation();
+    function recordedDecisionsOf(stored) {
+      if (!Array.isArray(stored)) return [];
+      const read = [];
+      for (const entry of stored) {
+        if (typeof entry !== "object" || entry === null) continue;
+        const { code, acknowledgedBy, acknowledgedAt } = entry;
+        if (!(0, validation_1.isDecisionCode)(code)) continue;
+        if (typeof acknowledgedBy !== "string" || acknowledgedBy.length === 0) continue;
+        if (typeof acknowledgedAt !== "string" || Number.isNaN(Date.parse(acknowledgedAt))) continue;
+        if (read.some((decision) => decision.code === code)) continue;
+        read.push({
+          code,
+          acknowledgedBy,
+          acknowledgedAt
+        });
+      }
+      return read;
+    }
+    __name(recordedDecisionsOf, "recordedDecisionsOf");
+    function raisedDecisionCodes(checks) {
+      const raised = [];
+      for (const check of checks) {
+        if (check.decision && !raised.includes(check.decision)) raised.push(check.decision);
+      }
+      return raised;
+    }
+    __name(raisedDecisionCodes, "raisedDecisionCodes");
+    function decisionMismatch(raised, acknowledged) {
+      const unacknowledged = raised.filter((code) => !acknowledged.includes(code));
+      const notRaised = acknowledged.filter((code) => !raised.includes(code));
+      return unacknowledged.length === 0 && notRaised.length === 0 ? null : {
+        unacknowledged,
+        notRaised
+      };
+    }
+    __name(decisionMismatch, "decisionMismatch");
+    function decisionMismatchSentence(mismatch) {
+      const parts = [];
+      if (mismatch.unacknowledged.length > 0) {
+        parts.push(`the plan raised ${quoteCodes(mismatch.unacknowledged)}, which ${mismatch.unacknowledged.length === 1 ? "was" : "were"} not acknowledged`);
+      }
+      if (mismatch.notRaised.length > 0) {
+        parts.push(`${quoteCodes(mismatch.notRaised)} ${mismatch.notRaised.length === 1 ? "was" : "were"} acknowledged but the plan does not raise ${mismatch.notRaised.length === 1 ? "it" : "them"}`);
+      }
+      return `This run was not submitted: ${parts.join(", and ")}. The checks were run again at submit and decide what needs acknowledging \u2014 review the plan and submit again.`;
+    }
+    __name(decisionMismatchSentence, "decisionMismatchSentence");
+    function quoteCodes(codes) {
+      return codes.map((code) => `"${code}"`).join(", ");
+    }
+    __name(quoteCodes, "quoteCodes");
+    exports.DECISION_ACKNOWLEDGEMENT = {
+      "disk.recentlyDetached": "Delete it even though it was detached recently",
+      "disk.customerKey": "Delete it \u2014 restoring later depends on this key staying enabled",
+      "disk.customerKeyUnverified": "Delete it without confirmation that the key is enabled",
+      "disk.guestEncrypted": "Delete it \u2014 restoring later depends on the guest's encryption secrets",
+      "disk.noSnapshot": "Delete it with no snapshot \u2014 this cannot be undone"
+    };
+  }
+});
+
 // ../contracts/dist/execution-site.js
 var require_execution_site = __commonJS({
   "../contracts/dist/execution-site.js"(exports) {
@@ -1858,7 +2367,13 @@ var require_resources = __commonJS({
     Object.defineProperty(exports, "__esModule", {
       value: true
     });
-    exports.DISCOVERY_TYPE_PATTERN = exports.DISCOVERABLE_RESOURCE_TYPES = exports.DISCOVERY_VOCABULARY = void 0;
+    exports.DISCOVERY_TYPE_PATTERN = exports.LEGACY_DISCOVERY_PROVIDER = exports.DISCOVERY_VOCABULARY = void 0;
+    exports.discoveryTypesOf = discoveryTypesOf;
+    exports.declaredDiscoveryTypes = declaredDiscoveryTypes;
+    exports.liveDiscoveryTypes = liveDiscoveryTypes;
+    exports.canonicalDiscoveryId = canonicalDiscoveryId;
+    exports.resolveDiscoveryType = resolveDiscoveryType;
+    exports.isSecretReference = isSecretReference;
     exports.parseDiscoveryType = parseDiscoveryType;
     exports.formatDiscoveryType = formatDiscoveryType;
     exports.discoveryTypeSpec = discoveryTypeSpec;
@@ -1874,16 +2389,20 @@ var require_resources = __commonJS({
       resourceGroup: {
         requires: [],
         routable: false,
-        identity: null
+        identity: null,
+        secretRef: false
       },
       // ROUTABLE BUT NOT NAMABLE, and the two are different questions. A rule matches a vault by
       // its NAME and its tags, which discovery supplies; an ARM vault id needs the resource group
       // this vocabulary never asks for (`requires` is empty so vaults list subscription-wide). See
       // `identity` on the spec above — null is the honest answer, not an omission.
+      // NOT a secret reference: a vault CONTAINS secrets, and naming one reveals nothing a run
+      // could read. The secret inside it is the reference (`keyVaultSecret` below).
       keyVault: {
         requires: [],
         routable: true,
-        identity: null
+        identity: null,
+        secretRef: false
       },
       // ★ A DATA-PLANE URI, NOT AN ARM PATH, AND IT IS WHAT DISCOVERY ALREADY RETURNS. The Key
       // Vault SDK reports `SecretProperties.id` as `https://<vault>.vault.azure.net/secrets/<name>`
@@ -1895,27 +2414,33 @@ var require_resources = __commonJS({
           "vault"
         ],
         routable: true,
-        identity: "https://{vault}.vault.azure.net/secrets/{name}"
+        identity: "https://{vault}.vault.azure.net/secrets/{name}",
+        // ★ THE ONE TYPE TODAY WHOSE VALUE POINTS AT A SECRET (docs/122 §3.5). The parameter holds
+        // the secret's NAME within its vault; nothing in the platform ever reads the value behind it.
+        secretRef: true
       },
       // A catalogue value. Nothing is reached by naming a region.
       location: {
         requires: [],
         routable: false,
-        identity: null
+        identity: null,
+        secretRef: false
       },
       managedDisk: {
         requires: [
           "resourceGroup"
         ],
         routable: true,
-        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/disks/{name}"
+        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/disks/{name}",
+        secretRef: false
       },
       sqlServer: {
         requires: [
           "resourceGroup"
         ],
         routable: true,
-        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Sql/servers/{name}"
+        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Sql/servers/{name}",
+        secretRef: false
       },
       sqlDatabase: {
         requires: [
@@ -1923,7 +2448,8 @@ var require_resources = __commonJS({
           "server"
         ],
         routable: true,
-        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Sql/servers/{server}/databases/{name}"
+        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Sql/servers/{server}/databases/{name}",
+        secretRef: false
       },
       // The one type where LISTING and IDENTIFYING are different questions. It lists
       // SUBSCRIPTION-WIDE when no resource group is given (`virtualMachines.listAll()`,
@@ -1943,7 +2469,8 @@ var require_resources = __commonJS({
           "resourceGroup"
         ],
         routable: true,
-        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/virtualMachines/{name}"
+        identity: "/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/virtualMachines/{name}",
+        secretRef: false
       },
       // The sizes ONE machine can actually be resized to right now — not the region's SKU
       // catalogue. `requires` is genuinely both fields' answer here: the safe set cannot be
@@ -1957,16 +2484,53 @@ var require_resources = __commonJS({
           "vm"
         ],
         routable: false,
-        identity: null
+        identity: null,
+        secretRef: false
       }
     };
-    exports.DISCOVERY_VOCABULARY = {
+    var DECLARED_DISCOVERY = {
       azure: AZURE_DISCOVERY_TYPES,
       aws: {},
       gcp: {},
       terraform: {}
     };
-    exports.DISCOVERABLE_RESOURCE_TYPES = Object.keys(AZURE_DISCOVERY_TYPES);
+    exports.DISCOVERY_VOCABULARY = DECLARED_DISCOVERY;
+    exports.LEGACY_DISCOVERY_PROVIDER = "azure";
+    function discoveryTypesOf(provider) {
+      return Object.keys(exports.DISCOVERY_VOCABULARY[provider]).map((type) => formatDiscoveryType(provider, type));
+    }
+    __name(discoveryTypesOf, "discoveryTypesOf");
+    function declaredDiscoveryTypes() {
+      return enums_1.PROVIDERS.flatMap(discoveryTypesOf);
+    }
+    __name(declaredDiscoveryTypes, "declaredDiscoveryTypes");
+    function liveDiscoveryTypes(registered) {
+      const providers = new Set(registered);
+      return enums_1.PROVIDERS.filter((provider) => providers.has(provider)).flatMap(discoveryTypesOf);
+    }
+    __name(liveDiscoveryTypes, "liveDiscoveryTypes");
+    function canonicalDiscoveryId(value) {
+      const parsed = parseDiscoveryType(value.trim(), exports.LEGACY_DISCOVERY_PROVIDER);
+      return parsed ? formatDiscoveryType(parsed.provider, parsed.type) : null;
+    }
+    __name(canonicalDiscoveryId, "canonicalDiscoveryId");
+    function resolveDiscoveryType(value) {
+      const parsed = parseDiscoveryType(value.trim(), exports.LEGACY_DISCOVERY_PROVIDER);
+      if (!parsed) return null;
+      const spec = discoveryTypeSpec(parsed.provider, parsed.type);
+      if (!spec) return null;
+      return {
+        id: formatDiscoveryType(parsed.provider, parsed.type),
+        provider: parsed.provider,
+        type: parsed.type,
+        spec
+      };
+    }
+    __name(resolveDiscoveryType, "resolveDiscoveryType");
+    function isSecretReference(discover) {
+      return discover ? resolveDiscoveryType(discover)?.spec.secretRef === true : false;
+    }
+    __name(isSecretReference, "isSecretReference");
     exports.DISCOVERY_TYPE_PATTERN = /^(?:([a-z][a-z0-9]*)\/)?([a-z][a-zA-Z0-9]{0,63})$/;
     function parseDiscoveryType(value, fallbackProvider) {
       const match = exports.DISCOVERY_TYPE_PATTERN.exec(value);
@@ -1990,7 +2554,9 @@ var require_resources = __commonJS({
     }
     __name(formatDiscoveryType, "formatDiscoveryType");
     function discoveryTypeSpec(provider, type) {
-      return exports.DISCOVERY_VOCABULARY[provider]?.[type];
+      if (!Object.prototype.hasOwnProperty.call(exports.DISCOVERY_VOCABULARY, provider)) return void 0;
+      const vocabulary = exports.DISCOVERY_VOCABULARY[provider];
+      return Object.prototype.hasOwnProperty.call(vocabulary, type) ? vocabulary[type] : void 0;
     }
     __name(discoveryTypeSpec, "discoveryTypeSpec");
     function dependsOnLookup(keys, dependsOn) {
@@ -2291,6 +2857,28 @@ var require_runs = __commonJS({
   }
 });
 
+// ../contracts/dist/evidence-pack.js
+var require_evidence_pack = __commonJS({
+  "../contracts/dist/evidence-pack.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", {
+      value: true
+    });
+    exports.EVIDENCE_EXPORTED_AUDIT_ACTION = exports.EVIDENCE_DIGEST_HEADER = void 0;
+    exports.evidencePackFilename = evidencePackFilename;
+    exports.EVIDENCE_DIGEST_HEADER = "X-Evidence-Digest";
+    exports.EVIDENCE_EXPORTED_AUDIT_ACTION = "operation.evidence_exported";
+    function evidencePackFilename(operationKey, from, to) {
+      return `${operationKey}-evidence-${compactInstant(from)}-${compactInstant(to)}.json`;
+    }
+    __name(evidencePackFilename, "evidencePackFilename");
+    function compactInstant(iso) {
+      return iso.replace(/\.\d+(?=Z|[+-]\d{2}:?\d{2}$)/, "").replace(/[-:]/g, "");
+    }
+    __name(compactInstant, "compactInstant");
+  }
+});
+
 // ../contracts/dist/package-egress.js
 var require_package_egress = __commonJS({
   "../contracts/dist/package-egress.js"(exports) {
@@ -2555,9 +3143,9 @@ var require_runners = __commonJS({
       authored: false
     };
     exports.RUNNER_POOL_DEFAULT_ACCEPTS_PROVENANCE = package_provenance_1.PACKAGE_PROVENANCE_KINDS.filter((kind) => exports.RUNNER_POOL_ACCEPTS_PROVENANCE_BY_DEFAULT[kind]);
-    function poolAcceptsProvenance(accepts, provenance) {
-      if (provenance === null) return false;
-      return accepts.includes(provenance);
+    function poolAcceptsProvenance(accepts, provenance2) {
+      if (provenance2 === null) return false;
+      return accepts.includes(provenance2);
     }
     __name(poolAcceptsProvenance, "poolAcceptsProvenance");
     function containerNameFor(runnerName) {
@@ -3385,11 +3973,11 @@ var require_workspace_domain = __commonJS({
       "held_elsewhere"
     ];
     exports.DOMAIN_VERIFICATION_RECORD_PREFIX = "runveric-domain-verification=";
-    function domainVerificationRecord(domain, token) {
+    function domainVerificationRecord(domain, token2) {
       return {
         name: domain,
         type: "TXT",
-        value: `${exports.DOMAIN_VERIFICATION_RECORD_PREFIX}${token}`
+        value: `${exports.DOMAIN_VERIFICATION_RECORD_PREFIX}${token2}`
       };
     }
     __name(domainVerificationRecord, "domainVerificationRecord");
@@ -3572,9 +4160,16 @@ var require_dist = __commonJS({
     __exportStar(require_tenant_users(), exports);
     __exportStar(require_invitations(), exports);
     __exportStar(require_groups(), exports);
+    __exportStar(require_catalog_policy(), exports);
     __exportStar(require_catalog(), exports);
+    __exportStar(require_catalog_release(), exports);
+    __exportStar(require_action_repository(), exports);
+    __exportStar(require_catalog_release_spec(), exports);
+    __exportStar(require_catalog_lock(), exports);
+    __exportStar(require_catalog_manifest_placeholders(), exports);
     __exportStar(require_change_control(), exports);
     __exportStar(require_execution(), exports);
+    __exportStar(require_decisions(), exports);
     __exportStar(require_execution_site(), exports);
     __exportStar(require_run_placement(), exports);
     __exportStar(require_connections(), exports);
@@ -3585,6 +4180,7 @@ var require_dist = __commonJS({
     __exportStar(require_scheduling(), exports);
     __exportStar(require_operations(), exports);
     __exportStar(require_runs(), exports);
+    __exportStar(require_evidence_pack(), exports);
     __exportStar(require_package_tier(), exports);
     __exportStar(require_package_provenance(), exports);
     __exportStar(require_packages(), exports);
@@ -5095,7 +5691,7 @@ var require_authoring_lint = __commonJS({
         if (!isRecord(permission) || !Array.isArray(permission.actions)) return;
         permission.actions.forEach((action, actionIndex) => {
           if (typeof action !== "string" || action.includes("*")) return;
-          if (permissionTokens(action).some((token) => haystack.includes(token))) return;
+          if (permissionTokens(action).some((token2) => haystack.includes(token2))) return;
           findings.push({
             severity: "warning",
             rule: "package/permission-possibly-unused",
@@ -6941,67 +7537,7 @@ var require_dist2 = __commonJS({
 });
 
 // package.json
-var version = "0.1.2";
-
-// src/check.ts
-var import_action_manifest = __toESM(require_dist2());
-import { resolve } from "path";
-
-// src/package-dir.ts
-import { readdir, readFile, stat } from "fs/promises";
-import { join, relative, sep } from "path";
-var IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([
-  ".git",
-  ".runveric",
-  "node_modules",
-  ".venv",
-  "__pycache__",
-  ".DS_Store"
-]);
-var MAX_FILES = 2e3;
-var MAX_TOTAL_BYTES = 16 * 1024 * 1024;
-var PackageDirectoryError = class extends Error {
-  static {
-    __name(this, "PackageDirectoryError");
-  }
-};
-async function readPackageDirectory(root) {
-  const properties = await stat(root).catch(() => null);
-  if (!properties?.isDirectory()) {
-    throw new PackageDirectoryError(`${root} is not a directory.`);
-  }
-  const files = /* @__PURE__ */ new Map();
-  let totalBytes = 0;
-  const walk = /* @__PURE__ */ __name(async (directory) => {
-    for (const entry of await readdir(directory, {
-      withFileTypes: true
-    })) {
-      if (IGNORED_DIRECTORIES.has(entry.name)) continue;
-      const full = join(directory, entry.name);
-      if (entry.isDirectory()) {
-        await walk(full);
-        continue;
-      }
-      if (!entry.isFile()) continue;
-      if (files.size >= MAX_FILES) {
-        throw new PackageDirectoryError(`This directory holds more than ${MAX_FILES} files. That is almost certainly not a single action package \u2014 run this from the package directory itself.`);
-      }
-      const contents = await readFile(full);
-      totalBytes += contents.byteLength;
-      if (totalBytes > MAX_TOTAL_BYTES) {
-        throw new PackageDirectoryError(`This directory holds more than ${MAX_TOTAL_BYTES / (1024 * 1024)}MB. An action package is source, not artifacts \u2014 add build output to .gitignore.`);
-      }
-      files.set(toPackagePath(root, full), contents);
-    }
-  }, "walk");
-  await walk(root);
-  return files;
-}
-__name(readPackageDirectory, "readPackageDirectory");
-function toPackagePath(root, full) {
-  return relative(root, full).split(sep).join("/");
-}
-__name(toPackagePath, "toPackagePath");
+var version = "0.2.0";
 
 // src/report.ts
 var useColour = process.stdout.isTTY === true && !process.env.NO_COLOR;
@@ -7110,10 +7646,515 @@ function printResult(result) {
 }
 __name(printResult, "printResult");
 
-// src/check.ts
+// src/catalog/publish-action.ts
+var import_contracts2 = __toESM(require_dist());
+import { readFileSync } from "fs";
+import { dirname, resolve } from "path";
+import { parse as parseYaml } from "yaml";
+
+// src/catalog/artifact.ts
 var import_contracts = __toESM(require_dist());
+import { execFileSync } from "child_process";
+import { createHash } from "crypto";
+function parseRepository(ref, flag) {
+  if (!import_contracts.ARTIFACT_REPOSITORY_PATTERN.test(ref)) {
+    throw new Error(`${flag} "${ref}" is not a bare registry repository (host[:port]/path, lowercase, no scheme, no tag, no digest). A catalog artifact is addressed by digest; tags are for humans.`);
+  }
+  const cut = ref.indexOf("/");
+  return {
+    ref,
+    host: ref.slice(0, cut),
+    path: ref.slice(cut + 1),
+    namespace: ref.slice(0, ref.lastIndexOf("/"))
+  };
+}
+__name(parseRepository, "parseRepository");
+var isDigest = /* @__PURE__ */ __name((value) => import_contracts.ARTIFACT_DIGEST_PATTERN.test(value), "isDigest");
+var TAG_PATTERN = /^[A-Za-z0-9_][A-Za-z0-9._-]{0,127}$/;
+function requireTag(tag, origin2) {
+  if (!TAG_PATTERN.test(tag)) {
+    throw new Error(`${origin2} gives the tag "${tag}", which a registry cannot hold: letters, digits, "_", "." and "-", starting with a letter, digit or "_", at most 128 characters. Pass --tag.`);
+  }
+}
+__name(requireTag, "requireTag");
+var LOOPBACK = /^(localhost|127\.0\.0\.1|\[::1\])(:[0-9]+)?$/;
+var origin = /* @__PURE__ */ __name((host) => `${LOOPBACK.test(host) ? "http" : "https"}://${host}`, "origin");
+var sha256 = /* @__PURE__ */ __name((bytes) => `sha256:${createHash("sha256").update(bytes).digest("hex")}`, "sha256");
+var EMPTY_CONFIG = Buffer.from("{}");
+var EMPTY_CONFIG_DESCRIPTOR = {
+  mediaType: "application/vnd.oci.empty.v1+json",
+  digest: sha256(EMPTY_CONFIG),
+  size: EMPTY_CONFIG.length
+};
+var OCI_MANIFEST = "application/vnd.oci.image.manifest.v1+json";
+function provenance(flags, dir) {
+  const git = /* @__PURE__ */ __name((...args) => {
+    try {
+      return execFileSync("git", [
+        "-C",
+        dir,
+        ...args
+      ], {
+        encoding: "utf8",
+        stdio: [
+          "ignore",
+          "pipe",
+          "ignore"
+        ]
+      }).trim();
+    } catch {
+      return "";
+    }
+  }, "git");
+  const actions = process.env.GITHUB_SERVER_URL && process.env.GITHUB_REPOSITORY ? `${process.env.GITHUB_SERVER_URL}/${process.env.GITHUB_REPOSITORY}` : "";
+  const repository = flags.repository ?? (actions || git("remote", "get-url", "origin"));
+  const commit = flags.commit ?? (process.env.GITHUB_SHA || git("rev-parse", "HEAD"));
+  if (!repository || !commit) {
+    throw new Error("Provenance is required and could not be determined. Pass --repository <url> and --commit <sha> (in GitHub Actions, GITHUB_REPOSITORY and GITHUB_SHA supply them).");
+  }
+  return {
+    repository,
+    commit,
+    publishedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+__name(provenance, "provenance");
+function buildArtifact(document) {
+  const documentBytes = Buffer.from(`${JSON.stringify(document, null, 2)}
+`);
+  const manifest = {
+    schemaVersion: 2,
+    mediaType: OCI_MANIFEST,
+    artifactType: import_contracts.CATALOG_ARTIFACT_MEDIA_TYPE,
+    config: EMPTY_CONFIG_DESCRIPTOR,
+    layers: [
+      {
+        mediaType: import_contracts.CATALOG_ARTIFACT_MEDIA_TYPE,
+        digest: sha256(documentBytes),
+        size: documentBytes.length
+      }
+    ],
+    /*
+    * ★ SOURCE AND REVISION ARE FOR THE REGISTRY, NOT THE RESOLVER (docs/127 A.1). GHCR connects
+    * a package to its repository through `org.opencontainers.image.source`, and that link is what
+    * lets the repository's workflow token keep publishing to the package its first run created.
+    * The resolver reads none of these — the document's own provenance is the record — so an
+    * artifact published without them still resolves.
+    */
+    annotations: {
+      "org.opencontainers.image.created": document.provenance.publishedAt,
+      "org.opencontainers.image.source": document.provenance.repository,
+      "org.opencontainers.image.revision": document.provenance.commit
+    }
+  };
+  const manifestBytes = Buffer.from(JSON.stringify(manifest));
+  return {
+    documentBytes,
+    manifestBytes,
+    manifestDigest: sha256(manifestBytes)
+  };
+}
+__name(buildArtifact, "buildArtifact");
+function basicCredential() {
+  const pat = process.env.GHCR_TOKEN;
+  if (pat) return Buffer.from(`x:${pat}`).toString("base64");
+  const workflow = process.env.GITHUB_TOKEN;
+  if (workflow) return Buffer.from(`${process.env.GITHUB_ACTOR || "x"}:${workflow}`).toString("base64");
+  return void 0;
+}
+__name(basicCredential, "basicCredential");
+var tokens = /* @__PURE__ */ new Map();
+async function token(repository, challenge) {
+  const field = /* @__PURE__ */ __name((name) => new RegExp(`${name}="([^"]*)"`).exec(challenge ?? "")?.[1], "field");
+  const realm = field("realm");
+  if (!realm) throw new Error(`${repository.host} asked for credentials without a Bearer challenge.`);
+  const url = new URL(realm);
+  const service = field("service");
+  if (service) url.searchParams.set("service", service);
+  url.searchParams.set("scope", `repository:${repository.path}:pull,push`);
+  const credential = basicCredential();
+  const answer = await fetch(url, {
+    headers: credential ? {
+      Authorization: `Basic ${credential}`
+    } : {}
+  });
+  if (!answer.ok) {
+    throw new Error(`${repository.host} refused a push token for ${repository.path}: HTTP ${answer.status}` + (credential ? "." : " \u2014 set GHCR_TOKEN to a token with write:packages, or in a workflow GITHUB_TOKEN with packages: write."));
+  }
+  const body = await answer.json();
+  const value = body.token ?? body.access_token ?? "";
+  tokens.set(repository.path, value);
+  return value;
+}
+__name(token, "token");
+async function call(repository, method, path, { headers = {}, body } = {}) {
+  const url = path.startsWith("http") ? path : `${origin(repository.host)}/v2/${repository.path}/${path}`;
+  const send = /* @__PURE__ */ __name((bearer) => fetch(url, {
+    method,
+    body,
+    redirect: "follow",
+    headers: {
+      ...headers,
+      ...bearer ? {
+        Authorization: `Bearer ${bearer}`
+      } : {}
+    }
+  }), "send");
+  let answer = await send(tokens.get(repository.path));
+  if (answer.status === 401) answer = await send(await token(repository, answer.headers.get("www-authenticate")));
+  return answer;
+}
+__name(call, "call");
+async function pushBlob(repository, bytes) {
+  const digest = sha256(bytes);
+  if ((await call(repository, "HEAD", `blobs/${digest}`)).ok) return digest;
+  const started = await call(repository, "POST", "blobs/uploads/");
+  if (started.status !== 202) throw new Error(`${repository.host} refused an upload: HTTP ${started.status}`);
+  const location = new URL(started.headers.get("location") ?? "", `${origin(repository.host)}/`);
+  location.searchParams.set("digest", digest);
+  const put = await call(repository, "PUT", location.toString(), {
+    headers: {
+      "Content-Type": "application/octet-stream",
+      "Content-Length": String(bytes.length)
+    },
+    body: bytes
+  });
+  if (put.status !== 201) throw new Error(`${repository.host} rejected blob ${digest}: HTTP ${put.status} ${await put.text()}`);
+  return digest;
+}
+__name(pushBlob, "pushBlob");
+async function manifestExists(repository, digest) {
+  const answer = await call(repository, "HEAD", `manifests/${digest}`, {
+    headers: {
+      Accept: OCI_MANIFEST
+    }
+  });
+  return answer.ok;
+}
+__name(manifestExists, "manifestExists");
+async function pushArtifact(repository, artifact, tag) {
+  await pushBlob(repository, EMPTY_CONFIG);
+  await pushBlob(repository, artifact.documentBytes);
+  for (const reference of [
+    artifact.manifestDigest,
+    tag
+  ]) {
+    const put = await call(repository, "PUT", `manifests/${reference}`, {
+      headers: {
+        "Content-Type": OCI_MANIFEST
+      },
+      body: artifact.manifestBytes
+    });
+    if (put.status !== 201) {
+      throw new Error(`${repository.host} rejected the manifest (${reference}): HTTP ${put.status} ${await put.text()}`);
+    }
+  }
+  const asked = await call(repository, "HEAD", `manifests/${tag}`, {
+    headers: {
+      Accept: OCI_MANIFEST
+    }
+  });
+  const reported = asked.headers.get("docker-content-digest");
+  if (!asked.ok || !reported) {
+    throw new Error(`${repository.host} could not say what :${tag} resolves to (HTTP ${asked.status}).`);
+  }
+  if (reported !== artifact.manifestDigest) {
+    throw new Error(`${repository.host} reports :${tag} as ${reported}, but the bytes sent hash to ${artifact.manifestDigest}. Something re-encoded the manifest; nothing printed here would name what is stored. Refusing to report a digest.`);
+  }
+  return reported;
+}
+__name(pushArtifact, "pushArtifact");
+var defaultTag = /* @__PURE__ */ __name(() => (/* @__PURE__ */ new Date()).toISOString().replace(/[-:]/g, "").replace(/\..*$/, "").toLowerCase(), "defaultTag");
+
+// src/catalog/flags.ts
+function parseCatalogFlags(argv, known, repeated = []) {
+  const single = {};
+  const many = {};
+  for (let index = 0; index < argv.length; index += 1) {
+    const argument = argv[index];
+    const separator = argument.indexOf("=");
+    const name = separator === -1 ? argument.slice(2) : argument.slice(2, separator);
+    if (!argument.startsWith("--") || !known.includes(name)) throw new Error(`Unknown argument: ${argument}`);
+    let value;
+    if (separator !== -1) {
+      value = argument.slice(separator + 1);
+    } else {
+      value = argv[index + 1];
+      index += 1;
+    }
+    if (value === void 0 || value === "" || value.startsWith("--")) throw new Error(`--${name} needs a value.`);
+    if (repeated.includes(name)) (many[name] ??= []).push(value);
+    else single[name] = value;
+  }
+  return {
+    single,
+    many
+  };
+}
+__name(parseCatalogFlags, "parseCatalogFlags");
+
+// src/catalog/publish-action.ts
+var PUBLISH_ACTION_USAGE = "runveric catalog publish-action --manifest <file.yaml> --to <registry>/<namespace>/<repository>\n                                [--tag <tag>] [--repository <source url>] [--commit <sha>]";
+var isMapping = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isMapping");
+async function runPublishAction(argv) {
+  const { single: flags } = parseCatalogFlags(argv, [
+    "manifest",
+    "to",
+    "tag",
+    "repository",
+    "commit"
+  ]);
+  if (!flags.manifest || !flags.to) throw new Error("--manifest and --to are required.");
+  const repository = parseRepository(flags.to, "--to");
+  const path = resolve(flags.manifest);
+  const manifest = readFileSync(path, "utf8");
+  let parsed;
+  try {
+    parsed = parseYaml(manifest);
+  } catch (cause) {
+    throw new Error(`${flags.manifest} is not valid YAML. (${cause instanceof Error ? cause.message : String(cause)})`);
+  }
+  const fields = isMapping(parsed) ? parsed : {};
+  const key = typeof fields.key === "string" && fields.key.length > 0 ? fields.key : null;
+  if (key === null) throw new Error(`${flags.manifest} declares no top-level \`key:\` \u2014 is it a catalog manifest?`);
+  const misnamed = (0, import_contracts2.actionPackageRefusal)(key, repository.ref);
+  if (misnamed !== null) throw new Error(`--to: ${misnamed}`);
+  let tag;
+  if (fields.declares === "definition+version") {
+    const version2 = typeof fields.version === "string" ? fields.version : null;
+    if (version2 === null) throw new Error(`${flags.manifest} declares "definition+version" and no version:.`);
+    if (flags.tag !== void 0 && flags.tag !== version2) {
+      throw new Error(`${flags.manifest} declares version ${version2}, and the tag is ${flags.tag}. Tag the commit ${version2}, or change version: in ${flags.manifest} first.`);
+    }
+    tag = version2;
+  } else {
+    tag = flags.tag ?? defaultTag();
+  }
+  requireTag(tag, flags.tag !== void 0 ? "--tag" : `${flags.manifest}'s version`);
+  const artifact = buildArtifact({
+    schemaVersion: import_contracts2.CATALOG_ACTION_ARTIFACT_SCHEMA_V1,
+    manifest,
+    provenance: provenance(flags, dirname(path))
+  });
+  const digest = await pushArtifact(repository, artifact, tag);
+  process.stderr.write(`\u2713 ${key} published to ${repository.ref}:${tag}
+`);
+  process.stderr.write(`  the registry reports ${digest} \u2014 the digest a release must name.
+`);
+  process.stdout.write(`${key}=${repository.ref}@${digest}
+`);
+}
+__name(runPublishAction, "runPublishAction");
+
+// src/catalog/publish-release.ts
+var import_contracts3 = __toESM(require_dist());
+import { readFileSync as readFileSync2 } from "fs";
+import { parse as parseYaml2 } from "yaml";
+var PUBLISH_RELEASE_USAGE = "runveric catalog publish-release (--from <release.yaml> | --action <key>=<repository>@<digest> \u2026)\n                                 --to <registry>/<namespace>/<repository> [--version <label>]\n                                 [--tag <tag>] [--repository <source url>] [--commit <sha>]";
+function entriesFromFlags(values) {
+  return values.map((value) => {
+    const match = /^([^=]+)=([^@]+)@(.+)$/.exec(value);
+    if (!match) throw new Error(`--action "${value}" is not <key>=<repository>@<digest>.`);
+    const [, key = "", artifactRef = "", digest = ""] = match;
+    return {
+      key,
+      artifactRef,
+      digest,
+      label: `--action ${key}`
+    };
+  });
+}
+__name(entriesFromFlags, "entriesFromFlags");
+function specFromFile(path) {
+  let value;
+  try {
+    value = parseYaml2(readFileSync2(path, "utf8"));
+  } catch (cause) {
+    throw new Error(`--from ${path} could not be read as YAML. (${cause instanceof Error ? cause.message : String(cause)})`);
+  }
+  const spec = (0, import_contracts3.parseCatalogReleaseSpec)(value);
+  return {
+    version: spec.version,
+    entries: spec.actions.map((action) => ({
+      ...action,
+      label: `${path}'s ${action.key}`
+    }))
+  };
+}
+__name(specFromFile, "specFromFile");
+async function runPublishRelease(argv) {
+  const { single: flags, many } = parseCatalogFlags(argv, [
+    "to",
+    "version",
+    "action",
+    "from",
+    "tag",
+    "repository",
+    "commit"
+  ], [
+    "action"
+  ]);
+  const actionFlags = many.action ?? [];
+  if (flags.from !== void 0 && actionFlags.length > 0) {
+    throw new Error("--from and --action are alternatives: name the release's actions in release.yaml or as flags, not both.");
+  }
+  if (flags.from !== void 0 && flags.version !== void 0) {
+    throw new Error("--version is read from release.yaml when --from is given; pass one or the other.");
+  }
+  if (!flags.to || flags.from === void 0 && (!flags.version || actionFlags.length === 0)) {
+    throw new Error("--to and either --from, or --version and at least one --action, are required.");
+  }
+  const release = parseRepository(flags.to, "--to");
+  const { version: version2, entries } = flags.from !== void 0 ? specFromFile(flags.from) : {
+    version: flags.version,
+    entries: entriesFromFlags(actionFlags)
+  };
+  const tag = flags.tag ?? (flags.from !== void 0 ? version2 : defaultTag());
+  requireTag(tag, flags.tag !== void 0 ? "--tag" : `${flags.from}'s version`);
+  const seen = /* @__PURE__ */ new Set();
+  const actions = entries.map((entry) => {
+    if (seen.has(entry.key)) throw new Error(`${entry.label} names "${entry.key}" twice.`);
+    seen.add(entry.key);
+    const repository = parseRepository(entry.artifactRef, entry.label);
+    if (repository.namespace !== release.namespace) {
+      throw new Error(`${entry.label} lives in "${repository.namespace}", outside the release's namespace "${release.namespace}". The server refuses a release that sends it to another host or org.`);
+    }
+    if (!isDigest(entry.digest)) {
+      throw new Error(`${entry.label}: "${entry.digest}" is not a digest. A release names artifacts by digest only.`);
+    }
+    const misnamed = (0, import_contracts3.actionPackageRefusal)(entry.key, entry.artifactRef);
+    if (misnamed !== null) throw new Error(`${entry.label}: ${misnamed}`);
+    return {
+      ...entry,
+      repository
+    };
+  });
+  for (const action of actions) {
+    if (!await manifestExists(action.repository, action.digest)) {
+      throw new Error(`${action.artifactRef}@${action.digest} (${action.key}) is not in the registry.`);
+    }
+  }
+  const artifact = buildArtifact({
+    schemaVersion: import_contracts3.CATALOG_RELEASE_SCHEMA_V1,
+    version: version2,
+    provenance: provenance(flags, process.cwd()),
+    actions: actions.map(({ key, artifactRef, digest: digest2 }) => ({
+      key,
+      artifactRef,
+      digest: digest2
+    }))
+  });
+  const digest = await pushArtifact(release, artifact, tag);
+  process.stderr.write(`\u2713 catalog release ${version2} (${actions.length} action artifact(s)) published to ${release.ref}:${tag}
+`);
+  process.stderr.write(`  the registry reports ${digest} \u2014 the digest to plan and pin.
+`);
+  process.stdout.write(`${release.ref}@${digest}
+`);
+}
+__name(runPublishRelease, "runPublishRelease");
+
+// src/catalog/index.ts
+var CATALOG_USAGE = `runveric catalog \u2014 publish first-party catalog artifacts (docs/127)
+
+  ${PUBLISH_ACTION_USAGE}
+      Publish one action's manifest, verbatim, as an artifact. stdout: <key>=<repository>@<digest>
+
+  ${PUBLISH_RELEASE_USAGE}
+      Publish a release naming each action artifact by digest. stdout: <repository>@<digest>
+
+  Credentials: GHCR_TOKEN (write:packages), or in a workflow GITHUB_TOKEN with packages: write.
+  Provenance: --repository/--commit, else GITHUB_SERVER_URL/GITHUB_REPOSITORY and GITHUB_SHA, else git.`;
+var SUBCOMMANDS = {
+  "publish-action": runPublishAction,
+  "publish-release": runPublishRelease
+};
+async function runCatalog(argv) {
+  const [subcommand, ...rest] = argv;
+  if (subcommand === void 0 || subcommand === "--help" || rest.includes("--help")) {
+    process.stdout.write(`${CATALOG_USAGE}
+`);
+    return subcommand === void 0 ? 1 : 0;
+  }
+  const run3 = SUBCOMMANDS[subcommand];
+  if (run3 === void 0) {
+    printError(`\u2717 "catalog ${subcommand}" is not a command. There are two: ${Object.keys(SUBCOMMANDS).join(", ")}.`);
+    return 1;
+  }
+  try {
+    await run3(rest);
+    return 0;
+  } catch (error) {
+    printError(`\u2717 ${error instanceof Error ? error.message : String(error)}`);
+    return 1;
+  }
+}
+__name(runCatalog, "runCatalog");
+
+// src/check.ts
+var import_action_manifest = __toESM(require_dist2());
+import { resolve as resolve2 } from "path";
+
+// src/package-dir.ts
+import { readdir, readFile, stat } from "fs/promises";
+import { join, relative, sep } from "path";
+var IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([
+  ".git",
+  ".runveric",
+  "node_modules",
+  ".venv",
+  "__pycache__",
+  ".DS_Store"
+]);
+var MAX_FILES = 2e3;
+var MAX_TOTAL_BYTES = 16 * 1024 * 1024;
+var PackageDirectoryError = class extends Error {
+  static {
+    __name(this, "PackageDirectoryError");
+  }
+};
+async function readPackageDirectory(root) {
+  const properties = await stat(root).catch(() => null);
+  if (!properties?.isDirectory()) {
+    throw new PackageDirectoryError(`${root} is not a directory.`);
+  }
+  const files = /* @__PURE__ */ new Map();
+  let totalBytes = 0;
+  const walk = /* @__PURE__ */ __name(async (directory) => {
+    for (const entry of await readdir(directory, {
+      withFileTypes: true
+    })) {
+      if (IGNORED_DIRECTORIES.has(entry.name)) continue;
+      const full = join(directory, entry.name);
+      if (entry.isDirectory()) {
+        await walk(full);
+        continue;
+      }
+      if (!entry.isFile()) continue;
+      if (files.size >= MAX_FILES) {
+        throw new PackageDirectoryError(`This directory holds more than ${MAX_FILES} files. That is almost certainly not a single action package \u2014 run this from the package directory itself.`);
+      }
+      const contents = await readFile(full);
+      totalBytes += contents.byteLength;
+      if (totalBytes > MAX_TOTAL_BYTES) {
+        throw new PackageDirectoryError(`This directory holds more than ${MAX_TOTAL_BYTES / (1024 * 1024)}MB. An action package is source, not artifacts \u2014 add build output to .gitignore.`);
+      }
+      files.set(toPackagePath(root, full), contents);
+    }
+  }, "walk");
+  await walk(root);
+  return files;
+}
+__name(readPackageDirectory, "readPackageDirectory");
+function toPackagePath(root, full) {
+  return relative(root, full).split(sep).join("/");
+}
+__name(toPackagePath, "toPackagePath");
+
+// src/check.ts
+var import_contracts4 = __toESM(require_dist());
 async function runCheck(options) {
-  const directory = resolve(options.directory ?? ".");
+  const directory = resolve2(options.directory ?? ".");
   let files;
   try {
     files = await readPackageDirectory(directory);
@@ -7135,7 +8176,7 @@ async function runCheck(options) {
     print(style.red("This package would be REFUSED at import."));
   } else if (report.lintBlocked) {
     print();
-    print(style.red("This package would be ACCEPTED at import \u2014 and then misbehave.") + ` The errors above are not things ${import_contracts.BRAND_SHORT_NAME} checks; they are things that go wrong at run time, silently.`);
+    print(style.red("This package would be ACCEPTED at import \u2014 and then misbehave.") + ` The errors above are not things ${import_contracts4.BRAND_SHORT_NAME} checks; they are things that go wrong at run time, silently.`);
   }
   if (report.advisoryCount > 0) {
     print();
@@ -7155,11 +8196,11 @@ async function runCheck(options) {
 __name(runCheck, "runCheck");
 
 // src/init.ts
-var import_contracts2 = __toESM(require_dist());
+var import_contracts5 = __toESM(require_dist());
 var import_action_manifest2 = __toESM(require_dist2());
 import { mkdir, writeFile } from "fs/promises";
 import { createInterface } from "readline/promises";
-import { dirname, join as join2, resolve as resolve2 } from "path";
+import { dirname as dirname2, join as join2, resolve as resolve3 } from "path";
 async function runInit(options) {
   const interactive = process.stdin.isTTY === true && options.yes !== true;
   const ask = interactive ? prompter() : null;
@@ -7171,7 +8212,7 @@ async function runInit(options) {
     const interpreter = await resolveInterpreter(options.interpreter, ask);
     if (!interpreter) return 1;
     const author = options.author?.trim() || await ask?.("Author", id.split("/")[0]) || id.split("/")[0];
-    const directory = resolve2(options.directory ?? id.split("/")[1] ?? "action");
+    const directory = resolve3(options.directory ?? id.split("/")[1] ?? "action");
     const files = (0, import_action_manifest2.scaffoldActionPackage)({
       id,
       name,
@@ -7181,7 +8222,7 @@ async function runInit(options) {
     });
     for (const [path, contents] of files) {
       const target = join2(directory, path);
-      await mkdir(dirname(target), {
+      await mkdir(dirname2(target), {
         recursive: true
       });
       await writeFile(target, contents, {
@@ -7224,9 +8265,9 @@ async function resolveId(supplied, ask) {
 }
 __name(resolveId, "resolveId");
 async function resolveInterpreter(supplied, ask) {
-  const value = supplied?.trim() || await ask?.(`Interpreter (${import_contracts2.PACKAGE_INTERPRETERS.join(" / ")})`, "bash") || "bash";
+  const value = supplied?.trim() || await ask?.(`Interpreter (${import_contracts5.PACKAGE_INTERPRETERS.join(" / ")})`, "bash") || "bash";
   if (!isInterpreter(value)) {
-    printError(style.red(`"${value}" is not an interpreter ${import_contracts2.BRAND_SHORT_NAME} runs.`) + ` The runner image ships ${import_contracts2.PACKAGE_INTERPRETERS.join(", ")}.`);
+    printError(style.red(`"${value}" is not an interpreter ${import_contracts5.BRAND_SHORT_NAME} runs.`) + ` The runner image ships ${import_contracts5.PACKAGE_INTERPRETERS.join(", ")}.`);
     return null;
   }
   return value;
@@ -7247,7 +8288,7 @@ function prompter() {
 }
 __name(prompter, "prompter");
 function isInterpreter(value) {
-  return import_contracts2.PACKAGE_INTERPRETERS.includes(value);
+  return import_contracts5.PACKAGE_INTERPRETERS.includes(value);
 }
 __name(isInterpreter, "isInterpreter");
 function titleCase(value) {
@@ -7257,8 +8298,8 @@ __name(titleCase, "titleCase");
 
 // src/publish.ts
 var import_action_manifest3 = __toESM(require_dist2());
-var import_contracts3 = __toESM(require_dist());
-import { resolve as resolve3 } from "path";
+var import_contracts6 = __toESM(require_dist());
+import { resolve as resolve4 } from "path";
 
 // src/renamed-variable.ts
 function renamedVariableRefusal(current, retired, env = process.env) {
@@ -7269,15 +8310,15 @@ function renamedVariableRefusal(current, retired, env = process.env) {
 __name(renamedVariableRefusal, "renamedVariableRefusal");
 
 // src/publish.ts
-var TOKEN_ENV = import_contracts3.AUTHORING_CLI_ENV.token;
-var URL_ENV = import_contracts3.AUTHORING_CLI_ENV.url;
+var TOKEN_ENV = import_contracts6.AUTHORING_CLI_ENV.token;
+var URL_ENV = import_contracts6.AUTHORING_CLI_ENV.url;
 async function runPublish(options) {
-  const directory = resolve3(options.directory ?? ".");
+  const directory = resolve4(options.directory ?? ".");
   const baseUrl = (options.to ?? process.env[URL_ENV] ?? "").trim().replace(/\/+$/, "");
-  const token = (options.token ?? process.env[TOKEN_ENV] ?? "").trim();
+  const token2 = (options.token ?? process.env[TOKEN_ENV] ?? "").trim();
   const stale = [
-    options.to === void 0 ? renamedVariableRefusal(URL_ENV, import_contracts3.RETIRED_AUTHORING_CLI_ENV.url) : null,
-    options.token === void 0 ? renamedVariableRefusal(TOKEN_ENV, import_contracts3.RETIRED_AUTHORING_CLI_ENV.token) : null
+    options.to === void 0 ? renamedVariableRefusal(URL_ENV, import_contracts6.RETIRED_AUTHORING_CLI_ENV.url) : null,
+    options.token === void 0 ? renamedVariableRefusal(TOKEN_ENV, import_contracts6.RETIRED_AUTHORING_CLI_ENV.token) : null
   ].filter((sentence) => sentence !== null);
   if (stale.length > 0) {
     for (const sentence of stale) printError(style.red(sentence));
@@ -7287,8 +8328,8 @@ async function runPublish(options) {
     printError(style.red("Where to?") + ` Pass --to https://your-runveric.example.com, or set ${URL_ENV}.`);
     return 1;
   }
-  if (!token) {
-    printError(style.red(`Publishing needs ${import_contracts3.BRAND_ARTICLE} ${import_contracts3.BRAND_SHORT_NAME} access token.`) + ` Set ${TOKEN_ENV}, or pass --token. (init, check and test need no account at all.)`);
+  if (!token2) {
+    printError(style.red(`Publishing needs ${import_contracts6.BRAND_ARTICLE} ${import_contracts6.BRAND_SHORT_NAME} access token.`) + ` Set ${TOKEN_ENV}, or pass --token. (init, check and test need no account at all.)`);
     return 1;
   }
   let files;
@@ -7308,7 +8349,7 @@ async function runPublish(options) {
       errors: report.errorCount,
       warnings: report.warningCount
     });
-    printError(style.red("\nNot published.") + (report.validation.ok ? ` ${import_contracts3.BRAND_SHORT_NAME} would accept this, but the problems above make it misbehave at run time. Fix them, or pass --force if you disagree.` : " Fix the errors above and publish again."));
+    printError(style.red("\nNot published.") + (report.validation.ok ? ` ${import_contracts6.BRAND_SHORT_NAME} would accept this, but the problems above make it misbehave at run time. Fix them, or pass --force if you disagree.` : " Fix the errors above and publish again."));
     return 1;
   }
   if (report.advisoryCount > 0) {
@@ -7335,7 +8376,7 @@ async function runPublish(options) {
       method: "POST",
       headers: {
         "content-type": "application/json",
-        authorization: `Bearer ${token}`
+        authorization: `Bearer ${token2}`
       },
       body
     });
@@ -7355,7 +8396,7 @@ Publish refused (${response.status}).`));
   try {
     version2 = JSON.parse(text);
   } catch {
-    printError(style.red(`${import_contracts3.BRAND_SHORT_NAME} accepted the package but returned a response we cannot read.`));
+    printError(style.red(`${import_contracts6.BRAND_SHORT_NAME} accepted the package but returned a response we cannot read.`));
     return 1;
   }
   print();
@@ -7364,7 +8405,7 @@ Publish refused (${response.status}).`));
   print(`  content digest ${version2.contentDigest}`);
   print(`  tier           ${version2.tier} ${style.grey(`(${version2.provenance})`)}`);
   print();
-  print(style.grey(`It is an immutable version now. Adopt it in ${import_contracts3.BRAND_SHORT_NAME} to put it in the catalog \u2014 publishing does not adopt, so nobody can run it until somebody chooses to.`));
+  print(style.grey(`It is an immutable version now. Adopt it in ${import_contracts6.BRAND_SHORT_NAME} to put it in the catalog \u2014 publishing does not adopt, so nobody can run it until somebody chooses to.`));
   print();
   return 0;
 }
@@ -7376,11 +8417,11 @@ function formatProblem(text) {
   } catch {
     return `  ${text}`;
   }
-  const problem = (0, import_contracts3.parseProblemDocument)(parsed);
+  const problem = (0, import_contracts6.parseProblemDocument)(parsed);
   if (!problem) return `  ${text}`;
   const lines = [];
   if (problem.detail) lines.push(`  ${problem.detail}`);
-  for (const error of (0, import_contracts3.problemFieldErrors)(problem)) {
+  for (const error of (0, import_contracts6.problemFieldErrors)(problem)) {
     lines.push(error.field ? `  ${style.bold(error.field)}: ${error.message}` : `  ${error.message}`);
   }
   return lines.length > 0 ? lines.join("\n") : `  ${text}`;
@@ -7388,12 +8429,12 @@ function formatProblem(text) {
 __name(formatProblem, "formatProblem");
 
 // src/runner-image.ts
-var import_contracts4 = __toESM(require_dist());
+var import_contracts7 = __toESM(require_dist());
 import { execFile } from "child_process";
 import { promisify } from "util";
 var run = promisify(execFile);
 var LOCAL_RUNNER_IMAGE = "runveric-package-runner:local";
-var RUNNER_IMAGE_ENV = import_contracts4.AUTHORING_CLI_ENV.runnerImage;
+var RUNNER_IMAGE_ENV = import_contracts7.AUTHORING_CLI_ENV.runnerImage;
 var RenamedVariableError = class extends Error {
   static {
     __name(this, "RenamedVariableError");
@@ -7410,7 +8451,7 @@ function resolveRunnerImage(flag) {
     reference: configured,
     origin: "environment"
   };
-  const stale = renamedVariableRefusal(RUNNER_IMAGE_ENV, import_contracts4.RETIRED_AUTHORING_CLI_ENV.runnerImage);
+  const stale = renamedVariableRefusal(RUNNER_IMAGE_ENV, import_contracts7.RETIRED_AUTHORING_CLI_ENV.runnerImage);
   if (stale) throw new RenamedVariableError(stale);
   return {
     reference: LOCAL_RUNNER_IMAGE,
@@ -7425,7 +8466,7 @@ function runnerImageNote(image) {
     case "environment":
       return `from ${RUNNER_IMAGE_ENV}`;
     case "local-build":
-      return `locally built \u2014 NOT the image your ${import_contracts4.BRAND_SHORT_NAME} runs; set ${RUNNER_IMAGE_ENV} to match it`;
+      return `locally built \u2014 NOT the image your ${import_contracts7.BRAND_SHORT_NAME} runs; set ${RUNNER_IMAGE_ENV} to match it`;
   }
 }
 __name(runnerImageNote, "runnerImageNote");
@@ -7442,7 +8483,7 @@ async function assertDockerAvailable() {
       "{{.Server.Version}}"
     ]);
   } catch {
-    throw new DockerMissingError(`Docker is not available. \`runveric test\` runs your package in the real ${import_contracts4.BRAND_SHORT_NAME} runner image, which needs a container runtime \u2014 install Docker Desktop (or start it), then try again. \`runveric check\` needs nothing and still works.`);
+    throw new DockerMissingError(`Docker is not available. \`runveric test\` runs your package in the real ${import_contracts7.BRAND_SHORT_NAME} runner image, which needs a container runtime \u2014 install Docker Desktop (or start it), then try again. \`runveric check\` needs nothing and still works.`);
   }
 }
 __name(assertDockerAvailable, "assertDockerAvailable");
@@ -7465,7 +8506,7 @@ var import_action_manifest4 = __toESM(require_dist2());
 import { spawn } from "child_process";
 import { mkdir as mkdir2, mkdtemp, readFile as readFile2, rm, stat as stat2, writeFile as writeFile2 } from "fs/promises";
 import { tmpdir } from "os";
-import { dirname as dirname2, join as join3, resolve as resolve4 } from "path";
+import { dirname as dirname3, join as join3, resolve as resolve5 } from "path";
 import { StringDecoder } from "string_decoder";
 
 // src/azure-credential.ts
@@ -7488,7 +8529,7 @@ async function acquireAzureCredential() {
   if (!account.id || !account.tenantId) {
     throw new AzureCredentialError("`az account show` returned no subscription. Run `az login` and `az account set --subscription <id>` first.");
   }
-  const token = await azJson([
+  const token2 = await azJson([
     "account",
     "get-access-token",
     "--resource",
@@ -7496,11 +8537,11 @@ async function acquireAzureCredential() {
     "--output",
     "json"
   ]);
-  if (!token.accessToken) {
+  if (!token2.accessToken) {
     throw new AzureCredentialError("`az account get-access-token` returned no access token.");
   }
   return {
-    token: token.accessToken,
+    token: token2.accessToken,
     // The identical names the credential adapter puts in a lease, so a package reads the same
     // environment here and in production.
     env: {
@@ -7535,7 +8576,7 @@ ${message.trim()}`);
 __name(azJson, "azJson");
 
 // src/test.ts
-var import_contracts5 = __toESM(require_dist());
+var import_contracts8 = __toESM(require_dist());
 var PHASES = [
   "validate",
   "run",
@@ -7549,10 +8590,10 @@ var CONTAINER = {
   creds: "/runveric/creds"
 };
 async function runTest(options) {
-  const directory = resolve4(options.directory ?? ".");
+  const directory = resolve5(options.directory ?? ".");
   const phase = options.phase ?? "run";
   if (!PHASES.includes(phase)) {
-    printError(style.red(`"${options.phase}" is not a phase.`) + ` ${import_contracts5.BRAND_SHORT_NAME} runs ${PHASES.join(", ")} \u2014 one at a time, so you can read each one's result.`);
+    printError(style.red(`"${options.phase}" is not a phase.`) + ` ${import_contracts8.BRAND_SHORT_NAME} runs ${PHASES.join(", ")} \u2014 one at a time, so you can read each one's result.`);
     return 1;
   }
   let files;
@@ -7624,9 +8665,9 @@ async function runTest(options) {
     print(`  runner image   ${image.reference} ${style.grey(`(${runnerImageNote(image)})`)}`);
     print(`  interpreter    ${interpreter}@${manifest.runtime.version}`);
     print(`  entrypoint     ${entrypoint}${import_action_manifest4.PACKAGE_INTERPRETER_LAUNCH[interpreter].entryFile}`);
-    print(`  identity       ${credential ? `${credential.account.name} ${style.grey(`\u2014 YOUR access, not ${import_contracts5.BRAND_SHORT_NAME}'s brokered least-privilege identity`)}` : style.grey("none (--no-credential)")}`);
+    print(`  identity       ${credential ? `${credential.account.name} ${style.grey(`\u2014 YOUR access, not ${import_contracts8.BRAND_SHORT_NAME}'s brokered least-privilege identity`)}` : style.grey("none (--no-credential)")}`);
     if (manifest.requiresNetwork) {
-      print(`  network        ${style.yellow("open")} ${style.grey(`\u2014 your allowlist (${(manifest.egressAllowlist ?? []).join(", ")}) is NOT enforced here; ${import_contracts5.BRAND_SHORT_NAME} enforces it`)}`);
+      print(`  network        ${style.yellow("open")} ${style.grey(`\u2014 your allowlist (${(manifest.egressAllowlist ?? []).join(", ")}) is NOT enforced here; ${import_contracts8.BRAND_SHORT_NAME} enforces it`)}`);
     } else {
       print(`  network        ${style.grey("none \u2014 this package declares requiresNetwork: false")}`);
     }
@@ -7728,13 +8769,13 @@ async function materialize(workspace, input) {
   })));
   for (const [path, contents] of input.files) {
     const target = join3(layout.packageRoot, path);
-    await mkdir2(dirname2(target), {
+    await mkdir2(dirname3(target), {
       recursive: true
     });
     await writeFile2(target, contents);
   }
   const context = {
-    protocolVersion: import_contracts5.PACKAGE_EXECUTION_PROTOCOL_VERSION,
+    protocolVersion: import_contracts8.PACKAGE_EXECUTION_PROTOCOL_VERSION,
     // A recognisable id rather than a random uuid: it appears in the package's own log lines,
     // and "local-test" tells the reader instantly that this was not a real run.
     executionId: "local-test",
@@ -7760,7 +8801,7 @@ async function runContainer(options) {
   const launch = import_action_manifest4.PACKAGE_INTERPRETER_LAUNCH[options.interpreter];
   const script = `${CONTAINER.packageRoot}/${options.entrypoint}${launch.entryFile}`;
   const environment = {
-    RUNVERIC_PROTOCOL_VERSION: import_contracts5.PACKAGE_RESULT_PROTOCOL_VERSION,
+    RUNVERIC_PROTOCOL_VERSION: import_contracts8.PACKAGE_RESULT_PROTOCOL_VERSION,
     RUNVERIC_PHASE: options.phase,
     RUNVERIC_CONTEXT_FILE: `${CONTAINER.input}/context.json`,
     RUNVERIC_PARAMETERS_FILE: `${CONTAINER.input}/parameters.json`,
@@ -7887,13 +8928,13 @@ function emitLine(line, stderr, onEvent) {
 __name(emitLine, "emitLine");
 async function reportOutcome(options) {
   if (options.exit.timedOut) {
-    printError(style.red("\nThe package did not finish within 15 minutes and was killed.") + ` ${import_contracts5.BRAND_SHORT_NAME} enforces the \`executionTimeout\` in your manifest; this is the local ceiling.`);
+    printError(style.red("\nThe package did not finish within 15 minutes and was killed.") + ` ${import_contracts8.BRAND_SHORT_NAME} enforces the \`executionTimeout\` in your manifest; this is the local ceiling.`);
     return 1;
   }
   const exists = await stat2(options.resultPath).catch(() => null);
   if (!exists?.isFile() || exists.size === 0) {
     printError(style.red("\nThe package wrote no result.") + `
-  result.json is the only channel ${import_contracts5.BRAND_SHORT_NAME} reads. Exiting ${options.exit.code ?? "with a signal"} without writing $RUNVERIC_RESULT_FILE is a FAILED run, whatever the script printed.
+  result.json is the only channel ${import_contracts8.BRAND_SHORT_NAME} reads. Exiting ${options.exit.code ?? "with a signal"} without writing $RUNVERIC_RESULT_FILE is a FAILED run, whatever the script printed.
   Write it as the last thing your script does, on every path \u2014 including the ones that fail.`);
     return 1;
   }
@@ -7901,7 +8942,7 @@ async function reportOutcome(options) {
   try {
     parsed = JSON.parse(await readFile2(options.resultPath, "utf8"));
   } catch {
-    printError(style.red("\nresult.json is not valid JSON.") + ` ${import_contracts5.BRAND_SHORT_NAME} refuses the run rather than guessing what the package meant.`);
+    printError(style.red("\nresult.json is not valid JSON.") + ` ${import_contracts8.BRAND_SHORT_NAME} refuses the run rather than guessing what the package meant.`);
     return 1;
   }
   let result;
@@ -7909,14 +8950,14 @@ async function reportOutcome(options) {
     result = (0, import_action_manifest4.validatePackageResult)(parsed, options.phase);
   } catch (error) {
     printError(style.red(`
-${import_contracts5.BRAND_SHORT_NAME} would REFUSE this result.`) + `
+${import_contracts8.BRAND_SHORT_NAME} would REFUSE this result.`) + `
   ${error instanceof Error ? error.message : String(error)}
   This is the same check the control plane runs, so fixing it here fixes it there.`);
     return 1;
   }
   printResult(result);
   if (options.exit.code !== 0) {
-    print(style.yellow(`The package exited ${options.exit.code} but wrote a valid result. ${import_contracts5.BRAND_SHORT_NAME} reads the result, not the exit code \u2014 but a non-zero exit usually means something failed after the result was written.`));
+    print(style.yellow(`The package exited ${options.exit.code} but wrote a valid result. ${import_contracts8.BRAND_SHORT_NAME} reads the result, not the exit code \u2014 but a non-zero exit usually means something failed after the result was written.`));
     print();
   }
   return result.status === "succeeded" ? 0 : 1;
@@ -7925,7 +8966,7 @@ __name(reportOutcome, "reportOutcome");
 async function readJsonFile(path) {
   let source;
   try {
-    source = await readFile2(resolve4(path), "utf8");
+    source = await readFile2(resolve5(path), "utf8");
   } catch {
     throw new Error(`Could not read ${path}.`);
   }
@@ -7943,9 +8984,9 @@ async function readJsonFile(path) {
 __name(readJsonFile, "readJsonFile");
 
 // src/main.ts
-var import_contracts6 = __toESM(require_dist());
+var import_contracts9 = __toESM(require_dist());
 var USAGE = `
-${style.bold("runveric")} \u2014 author ${import_contracts6.BRAND_ARTICLE} ${import_contracts6.BRAND_SHORT_NAME} action, without pushing anything.
+${style.bold("runveric")} \u2014 author ${import_contracts9.BRAND_ARTICLE} ${import_contracts9.BRAND_SHORT_NAME} action, without pushing anything.
 
 ${style.bold("USAGE")}
   runveric <command> [options]
@@ -7953,8 +8994,9 @@ ${style.bold("USAGE")}
 ${style.bold("COMMANDS")}
   init [directory]        Scaffold a working action. It passes check and test immediately.
   check                   Validate the package. Offline \u2014 no account, no cloud, no network.
-  test                    Run one phase in the real ${import_contracts6.BRAND_SHORT_NAME} runner image.
-  publish                 Upload it to ${import_contracts6.BRAND_SHORT_NAME} as an authored version. Needs an account.
+  test                    Run one phase in the real ${import_contracts9.BRAND_SHORT_NAME} runner image.
+  publish                 Upload it to ${import_contracts9.BRAND_SHORT_NAME} as an authored version. Needs an account.
+  catalog <command>       Publish first-party catalog artifacts. Not for authoring: see \`runveric catalog --help\`.
 
 ${style.bold("init")}
   --id <publisher/name>   The action id. Required.
@@ -7977,9 +9019,9 @@ ${style.bold("test")}
   --keep                  Keep the materialized /runveric tree for inspection.
 
 ${style.bold("publish")}
-  --to <url>              Your ${import_contracts6.BRAND_SHORT_NAME} URL. Defaults to $${URL_ENV}.
+  --to <url>              Your ${import_contracts9.BRAND_SHORT_NAME} URL. Defaults to $${URL_ENV}.
   --token <token>         Access token. Defaults to $${TOKEN_ENV}.
-  --force                 Publish despite lint errors. Never bypasses ${import_contracts6.BRAND_SHORT_NAME}'s validation.
+  --force                 Publish despite lint errors. Never bypasses ${import_contracts9.BRAND_SHORT_NAME}'s validation.
 
 ${style.bold("EVERYWHERE")}
   --dir <path>            The package directory. Defaults to the current directory.
@@ -8022,7 +9064,9 @@ __name(parseArgv, "parseArgv");
 var first = /* @__PURE__ */ __name((parsed, name) => parsed.flags.get(name)?.[0], "first");
 var bool = /* @__PURE__ */ __name((parsed, name) => parsed.flags.get(name)?.[0] === "true", "bool");
 async function main() {
-  const parsed = parseArgv(process.argv.slice(2));
+  const argv = process.argv.slice(2);
+  if (argv[0] === "catalog") return runCatalog(argv.slice(1));
+  const parsed = parseArgv(argv);
   if (parsed.flags.has("version")) {
     print(version);
     return 0;
@@ -8090,7 +9134,7 @@ async function main() {
         force: bool(parsed, "force")
       });
     default:
-      printError(style.red(`"${parsed.command}" is not a command.`) + " There are four: init, check, test, publish.");
+      printError(style.red(`"${parsed.command}" is not a command.`) + " There are four: init, check, test, publish \u2014 and catalog, which publishes first-party catalog artifacts.");
       return 1;
   }
 }