@substrat-run/cli 0.44.0 → 0.46.0

package/dist/cli.js

@@ -20,24 +20,27 @@
  * (in the console) still gates serving.
  */
 import { bindConnectionScope, listConnectionBindings } from './connections.js';
-import { join } from 'node:path';
+import { join, resolve as resolvePath } from 'node:path';
 import { createInterface } from 'node:readline';
 import { loadConfig, saveConfig, resolveAuth } from './config.js';
 import { browserLogin } from './login.js';
 import { push, readVerticalMeta, nextVersion, previewVersion, pinTenant, assertLayerRules, assertSchedulesAreSwept, checkPermissionSurface, deployConfigIfAny, formatDeclaredModel, formatPermissionSurface, readDeclaredModel, } from './push.js';
 import { printVersions } from './versions.js';
 import { checkOutboundDeclared } from './outbound-scan.js';
-import { exportBreakLines, promote } from './promote.js';
+import { exportBreakLines, parseReviewToken, promote } from './promote.js';
 import { setListing, requestPublish } from './listing.js';
-import { isReleaseSha, packedFilesOf, packStoreKindDir, rollBackStoreKind, sourceCommitOf, rollOutStoreKind, storeKindStatus, storeKindStatusLines, uploadStoreKindRelease } from './store-kind.js';
+import { isReleaseSha, packedFilesOf, packStoreDriverDir, rebuildStoreDriver, rollBackStoreDriver, sourceCommitOf, rollOutStoreDriver, storeDriverRebuildLines, storeDriverStatus, storeDriverStatusLines, uploadStoreDriverRelease } from './store-driver.js';
 import { fetchWhoami } from './whoami.js';
 import { planeFor } from './plane.js';
+import { dataLossCheckRequired, formatDataLossCheck } from './data-loss-check.js';
 import { cliVersion, warnIfDistStale } from './version.js';
 import { pullScope, restoreScope, resolveTenantId, adoptScopeServing, adoptVerticalServing, provisionScope, rebindScopeVertical, bindScopeVersion, scopeStatus } from './scope.js';
 import { printInstalls } from './installs.js';
 import { createPreview, deletePreview, listPreviews, formatPreviewLogin, formatPreviews, parseTtlHours } from './preview.js';
 import { writeCiWorkflow, detectDefaultBranch, nextStepsMessage } from './init.js';
 import { writeModelView } from './model.js';
+import { CannotRun, changesetCommand } from './changeset.js';
+import { syncConceptFile } from './concept.js';
 import { listVerticalHostnames, bindSurfaceHostname, bindScopeHostname, unbindHostname, verifyHostname, formatHostnames, formatDnsRecords, } from './hostnames.js';
 const argv = process.argv.slice(2);
 /** `--name value` → value, else undefined. */
@@ -107,12 +110,25 @@ Usage:
                                                defineScopeSweeperDO are refused — they
                                                would never fire; --allow-unswept-schedules
                                                pushes them anyway
+                                               Authored migrations are replayed against a
+                                               populated in-memory scope through the
+                                               vertical's own kernel's data-loss fence;
+                                               one that would lose undeclared data is
+                                               refused (declare it: moves / discards).
+                                               A check skipped (no node:sqlite, Node
+                                               < 22.13) or incomplete (a migration that
+                                               cannot run on made-up rows, or runs past
+                                               30 s) is a warning;
+                                               --require-data-loss-check (or
+                                               SUBSTRAT_REQUIRE_DATA_LOSS_CHECK=1/true/yes)
+                                               makes it a refusal
                                                A host the code names as a literal that
                                                package.json substrat.outbound does not
                                                declare is warned about with the line to add
                                                (best effort); --strict makes it an error
   substrat push     [dir] --check [--json]     run the push's LOCAL gate and stop: the layer
-                                               rules, the entity model this tree would ship
+                                               rules, the data-loss migration replay, the
+                                               entity model this tree would ship
                                                (or a note that it would ship none), then the
                                                declared permission surface — resolve
                                                "substrat": { "permissions" }, import it,
@@ -124,13 +140,19 @@ Usage:
                                                the registry as data instead of prose
   substrat promote  <slug> --version <versionId>
                     [--ack-permissions] [--ack-migrations] [--ack-export-break]  (prod is the only channel)
+                    [--review <token>]           the review the acks answer, as the refusal printed it
   substrat publish  <slug>                    request listing on the public marketplace (staff reviews)
-  substrat store-kind upload --kind <kind> --dir <dir> --entry <kind_x/…/module.py> [--commit <sha>]
-                                              store a release of a scope-store kind (staff, signed in)
-  substrat store-kind rollout --kind <kind> --sha256 <sha256>
+  substrat store-driver upload --driver <driver> --dir <dir> --entry <driver_x/…/module.py> [--commit <sha>]
+                                              store a release of a scope-store driver (staff, signed in)
+  substrat store-driver rollout --driver <driver> --sha256 <sha256>
                                               canary a stored, pinned release, then roll it out
-  substrat store-kind rollback --kind <kind>  return to the previous good release
-  substrat store-kind status --kind <kind>    a kind's current release and rollouts
+  substrat store-driver rollback --driver <driver>  return to the previous good release
+  substrat store-driver status --driver <driver>    a driver's current release and rollouts
+  substrat store-driver rebuild --driver <driver> [--deploy-finished]
+                                              rebuild every script of the driver now, at
+                                              the release it runs (after a key is revoked);
+                                              --deploy-finished attests no control-plane
+                                              deploy is rolling out
   substrat unpublish <slug>                   remove from the public marketplace (staff)
   substrat versions <slug>                    list a vertical's versions + channels
   substrat installs <slug>                    list this workspace's installs of a vertical
@@ -147,6 +169,7 @@ Usage:
                                               Requires its existing scoped landing grant.
                                               Planima: --organization-id <id|null>, --currency,
                                               --horizon-years, --from-year and --to-year.
+                                              Microsoft 365: --folder <channel folder's drive path>.
   substrat connection bindings <id>          read the connection's configured landing targets
   substrat scope restore <scopeId> --file <backup>
                                               load a backup into an existing hosted scope,
@@ -180,8 +203,10 @@ Usage:
                                               lineage's serving script, data carried;
                                               the old copy is deleted once the move is
                                               confirmed, so snapshot first to keep a way
-                                              back (staff; --ack-migrations to cross a
-                                              differing migration surface;
+                                              back (staff, or a workspace for its own
+                                              scope; --ack-migrations with the
+                                              --review token its refusal prints, to
+                                              cross a differing migration surface;
                                               --abandon-data for a source script that
                                               predates /internal/export — directory-only
                                               flip, then re-provision the scope)
@@ -206,7 +231,8 @@ Usage:
                                               re-forks from prod. --ttl is the GC backstop
                                               (default 72h; 'none' pins the preview until deleted).
                                               Takes push's own overrides too: --skip-lint,
-                                              --allow-unserved-ui and --allow-unswept-schedules
+                                              --allow-unserved-ui, --allow-unswept-schedules
+                                              and --require-data-loss-check
   substrat preview delete --tag <tag> [--slug <s>]  reap a preview (idempotent)
   substrat preview ls [--slug <s>]            list a vertical's active previews
   substrat model view [dir|model.json]        render the entity model as a self-contained
@@ -215,6 +241,20 @@ Usage:
                                               open it in a browser. Reads the checked-in
                                               model.json, so it needs no login and no push.
                                               Writes a temp file unless --out places it
+  substrat changeset [dir] [--base <ref>]     write a .changeset file whose bump is COMPUTED
+                    [--summary <text>]        from the diff of model.json, openapi.json and
+                    [--check] [--json]        PERMISSIONS.md against the merge-base: removed
+                                              or narrowed → major, added → minor, docs → patch;
+                                              permission changes are flagged for review.
+                                              --check refuses a changeset declaring less than
+                                              the computed bump (exit 1); --json prints the
+                                              classification. --base defaults to the
+                                              changesets baseBranch on origin
+  substrat concept sync [dir] [--check]       rewrite the generated regions of spec/concept.md —
+                                              roles and permissions, the entity diagram, one state
+                                              diagram per lifecycle — from model.json and
+                                              PERMISSIONS.md. Idempotent; --check writes nothing
+                                              and exits 1 when the file is stale
   substrat init --ci github [dir]             write .github/workflows/substrat-deploy.yml —
                     [--branch <b>] [--path <packageDir>] [--release trunk|changesets]
                     [--out <path>] [--force]
@@ -245,7 +285,9 @@ so '--promote prod' is a complete deploy. Once a vertical is LISTED on the marke
 pushes land PENDING and prod promotion + admission are a staff decision again. A promotion
 that changes the permission or migration surface is refused until the change is
 acknowledged (--ack-permissions / --ack-migrations) — the refusal prints the permission
-diff and each new migration's SQL; read them first. For a non-prod environment, run the version against a copy of the data with 'substrat preview
+diff and each new migration's SQL; read them first. It also prints a --review token: the
+acknowledgement answers that review, and is refused if prod moved since it was read (a
+migration acknowledgement is refused without one). For a non-prod environment, run the version against a copy of the data with 'substrat preview
 create' — dev/staging channels were retired (#509).
 
 Auth resolves: explicit --token/SUBSTRAT_SERVICE_TOKEN → stored browser session →
@@ -373,7 +415,10 @@ async function cmdPush() {
     // rules above have already run, which makes `substrat push --check` the whole local gate.
     // Every failure throws (main() prints it and exits non-zero) — that is the gate.
     if (argv.includes('--check')) {
-        const surface = await checkPermissionSurface(dir);
+        const surface = await checkPermissionSurface(dir, {
+            require: dataLossCheckRequired(argv),
+            log: jsonCheck ? console.error : console.log,
+        });
         // The schedule check (#1646) the push would make — `--check` is the whole local gate, so
         // a vertical whose schedules nothing would run is refused here too. A tree with no deploy
         // config has no bindings to judge; the push itself names that refusal.
@@ -448,6 +493,8 @@ async function cmdPush() {
         // does not scan the same tree twice.
         skipLint: argv.includes('--skip-lint'),
         linted,
+        // A data-loss replay (#2321) that was skipped or incomplete is a loud warning; this makes it a refusal.
+        requireDataLossCheck: dataLossCheckRequired(argv),
         envSpec: meta.envSpec,
         ownerGrants: meta.ownerGrants,
         entitlements: meta.entitlements,
@@ -463,6 +510,7 @@ async function cmdPush() {
         controlPlaneUrl, authHeader: header,
     });
     console.log(`✓ pushed ${v.verticalSlug ?? slug}. version ${v.id} (${version}) is ${v.admission}; deploymentRef=${v.deploymentRef}`);
+    console.log(`  ${formatDataLossCheck(v.dataLoss)}`);
     // Advisory, same spirit as the permission-surface gate: a bound surface the new
     // version stopped declaring keeps serving, but probably not what its users expect.
     for (const w of v.warnings ?? [])
@@ -520,7 +568,14 @@ async function cmdPromote() {
     const channel = flag('channel') ?? 'prod';
     const version = flag('version');
     if (!slug || slug.startsWith('--') || !version) {
-        console.error('usage: substrat promote <slug> --version <versionId> [--ack-permissions] [--ack-migrations] [--ack-export-break]');
+        console.error('usage: substrat promote <slug> --version <versionId> [--ack-permissions] [--ack-migrations] [--ack-export-break] [--review <token>]');
+        process.exit(1);
+    }
+    // #2333: the review the acknowledgements answer, as a refusal printed it.
+    const reviewFlag = flag('review');
+    const review = reviewFlag === undefined ? undefined : parseReviewToken(reviewFlag);
+    if (review === null) {
+        console.error('--review takes the token a refused promote printed (<base>:<digest>)');
         process.exit(1);
     }
     const { controlPlaneUrl, header, as } = resolveAuth({ cp: flag('cp'), token: flag('token'), tenant: flag('tenant') });
@@ -530,8 +585,11 @@ async function cmdPromote() {
             ...(argv.includes('--ack-permissions') ? { permissionChange: true } : {}),
             ...(argv.includes('--ack-migrations') ? { migrationChange: true } : {}),
             ...(argv.includes('--ack-export-break') ? { exportBreak: true } : {}),
+            ...(review ? { review } : {}),
         }
-        : undefined;
+        : review
+            ? { review }
+            : undefined;
     const ch = await promote({ controlPlaneUrl, header, slug, channel, versionId: version, acknowledge });
     console.log(`✓ ${slug} → ${ch.channel} now points at ${ch.versionId}`);
     if (ch.exportBreaks) {
@@ -563,55 +621,73 @@ function reportStoreBackfill(result) {
             '  scope with `substrat scope provision <scopeId>`; `substrat scope status` shows the gap.');
     }
 }
-const STORE_KIND_USAGE = [
-    'usage: substrat store-kind upload   --kind <kind> --dir <dir> --entry <kind_x/…/module.py> [--commit <sha>]',
-    '       substrat store-kind rollout  --kind <kind> --sha256 <sha256>',
-    '       substrat store-kind rollback --kind <kind>',
-    '       substrat store-kind status   --kind <kind>',
+const STORE_DRIVER_USAGE = [
+    'usage: substrat store-driver upload   --driver <driver> --dir <dir> --entry <driver_x/…/module.py> [--commit <sha>]',
+    '       substrat store-driver rollout  --driver <driver> --sha256 <sha256>',
+    '       substrat store-driver rollback --driver <driver>',
+    '       substrat store-driver status   --driver <driver>',
+    '       substrat store-driver rebuild  --driver <driver> [--deploy-finished]',
 ];
-async function cmdStoreKind() {
+async function cmdStoreDriver() {
     const sub = argv[1];
-    const kind = flag('kind');
-    if (!['upload', 'rollout', 'rollback', 'status'].includes(sub ?? '') || !kind) {
-        for (const line of STORE_KIND_USAGE)
+    if (argv.includes('--kind')) {
+        console.error('--kind was renamed --driver');
+        process.exit(1);
+    }
+    const driver = flag('driver');
+    if (!['upload', 'rollout', 'rollback', 'status', 'rebuild'].includes(sub ?? '') || !driver) {
+        for (const line of STORE_DRIVER_USAGE)
             console.error(line);
         process.exit(1);
     }
     const sha256 = flag('sha256');
     if (sub === 'rollout' && !isReleaseSha(sha256)) {
-        console.error('a rollout names the release by --sha256 <64 lowercase hex>, as `store-kind upload` printed it');
-        for (const line of STORE_KIND_USAGE)
+        console.error('a rollout names the release by --sha256 <64 lowercase hex>, as `store-driver upload` printed it');
+        for (const line of STORE_DRIVER_USAGE)
             console.error(line);
         process.exit(1);
     }
     const { controlPlaneUrl, header, as } = resolveAuth({ cp: flag('cp'), token: flag('token'), tenant: flag('tenant') });
     console.log(`authenticating with ${as}`);
     console.log(`control plane ${controlPlaneUrl}`);
-    const plane = { controlPlaneUrl, header, kind };
+    const plane = { controlPlaneUrl, header, driver };
     if (sub === 'status') {
-        const view = await storeKindStatus(plane);
-        for (const line of storeKindStatusLines(kind, view))
+        const view = await storeDriverStatus(plane);
+        for (const line of storeDriverStatusLines(driver, view))
+            console.log(line);
+        return;
+    }
+    if (sub === 'rebuild') {
+        const { pass, rebuild } = await rebuildStoreDriver({ ...plane, deployFinished: argv.includes('--deploy-finished') });
+        console.log(`✓ ${driver} rebuild: ${pass.outcome}, ${pass.walked.length} script(s) walked, ${pass.uploaded.length} uploaded this run`);
+        for (const line of storeDriverRebuildLines(rebuild))
             console.log(line);
+        if (pass.outcome === 'paused')
+            console.log('  scripts remain: run the same command again to continue');
+        if (pass.outcome === 'held')
+            console.log('  a rollout or rollback holds the driver: run it again once that ends');
+        if (pass.outcome === 'busy')
+            console.log('  another pass is rebuilding the driver: run `store-driver status` to follow it');
         return;
     }
     if (sub === 'upload') {
         const dir = flag('dir');
         const entry = flag('entry');
         if (!dir || !entry) {
-            for (const line of STORE_KIND_USAGE)
+            for (const line of STORE_DRIVER_USAGE)
                 console.error(line);
             process.exit(1);
         }
-        const body = packStoreKindDir(dir, entry, flag('commit') ?? sourceCommitOf(dir, packedFilesOf(dir)));
-        const { release, pinned } = await uploadStoreKindRelease({ ...plane, body });
-        console.log(`✓ stored ${kind} ${release.sha256} (commit ${release.sourceCommit})`);
-        console.log(pinned ? '  pinned: roll it out with `substrat store-kind rollout`' : '  not pinned yet: it runs once a reviewed change pins this sha256 and commit');
+        const body = packStoreDriverDir(dir, entry, flag('commit') ?? sourceCommitOf(dir, packedFilesOf(dir)));
+        const { release, pinned } = await uploadStoreDriverRelease({ ...plane, body });
+        console.log(`✓ stored ${driver} ${release.sha256} (commit ${release.sourceCommit})`);
+        console.log(pinned ? '  pinned: roll it out with `substrat store-driver rollout`' : '  not pinned yet: it runs once a reviewed change pins this sha256 and commit');
         return;
     }
     const result = sub === 'rollback'
-        ? await rollBackStoreKind(plane)
-        : await rollOutStoreKind({ ...plane, sha256: sha256 });
-    console.log(`✓ ${kind} ${result.rollout.action} to ${result.rollout.sha256}: ${result.rollout.state} (${result.moved.length} vertical(s) this run)`);
+        ? await rollBackStoreDriver(plane)
+        : await rollOutStoreDriver({ ...plane, sha256: sha256 });
+    console.log(`✓ ${driver} ${result.rollout.action} to ${result.rollout.sha256}: ${result.rollout.state} (${result.moved.length} vertical(s) this run)`);
     if (!result.complete)
         console.log('  verticals remain: run the same command again to continue');
 }
@@ -641,7 +717,7 @@ async function cmdConnection() {
     const sub = argv[1];
     const connectionId = argv[2];
     if (!connectionId || connectionId.startsWith('--') || !['bind', 'bindings'].includes(sub ?? '')) {
-        throw new Error('usage: substrat connection bind <id> --scope <id> --operation <module/operation> --permission <key> [--organization-id <id|null>] [--currency SEK] [--horizon-years 50] [--from-year <year> --to-year <year>] [--tenant <id-or-slug>]\n       substrat connection bindings <id> [--tenant <id-or-slug>]');
+        throw new Error('usage: substrat connection bind <id> --scope <id> --operation <module/operation> --permission <key> [--organization-id <id|null>] [--currency SEK] [--horizon-years 50] [--from-year <year> --to-year <year>] [--folder <drive path>] [--tenant <id-or-slug>]\n       substrat connection bindings <id> [--tenant <id-or-slug>]');
     }
     const { controlPlaneUrl, header } = resolveAuth({ cp: flag('cp'), token: flag('token'), tenant: flag('tenant') });
     const tenantId = await resolveTenantId(controlPlaneUrl, header, flag('tenant') ?? process.env.SUBSTRAT_TENANT ?? loadConfig().defaultTenant);
@@ -672,6 +748,7 @@ async function cmdConnection() {
         ...(flag('currency') === undefined ? {} : { currency: flag('currency') }),
         ...(flag('horizon-years') === undefined ? {} : { horizonYears: numberFlag('horizon-years') }),
         ...(fromYear === undefined || toYear === undefined ? {} : { window: { fromYear, toYear } }),
+        ...(flag('folder') === undefined ? {} : { folder: flag('folder') }),
     };
     console.log(JSON.stringify(await bindConnectionScope({ ...opts, scopeId, input }), null, 2));
 }
@@ -686,7 +763,7 @@ async function cmdScope() {
         '       substrat scope adopt-serving --vertical <slug> [--ack-export-break]\n' +
         '       substrat scope bind <scopeId> --version <versionId> [--snapshot] [--ack-export-break] [--tenant <id-or-slug>]\n' +
         '       substrat scope domain <scopeId> --domain <fqdn> [--surface app] [--canonical] [--tenant <id-or-slug>]\n' +
-        '       substrat scope rebind <scopeId> --to <vertical> [--ack-migrations] [--abandon-data] [--ack-export-break] [--tenant <id-or-slug>]';
+        '       substrat scope rebind <scopeId> --to <vertical> [--ack-migrations] [--review <token>] [--abandon-data] [--ack-export-break] [--tenant <id-or-slug>]';
     const known = sub === 'pull' || sub === 'restore' || sub === 'status' || sub === 'provision' ||
         sub === 'adopt-serving' || sub === 'bind' || sub === 'domain' || sub === 'rebind';
     // adopt-serving --vertical takes no positional scopeId; every other form requires one.
@@ -761,11 +838,19 @@ async function cmdScope() {
             console.error(usage);
             process.exit(1);
         }
+        // #2347: the review the migration acknowledgement answers, as a refusal printed it.
+        const reviewFlag = flag('review');
+        const review = reviewFlag === undefined ? undefined : parseReviewToken(reviewFlag);
+        if (review === null) {
+            console.error('--review takes the token a refused rebind printed (<base>:<digest>)');
+            process.exit(1);
+        }
         await rebindScopeVertical({
             controlPlaneUrl, header, tenantId, scopeId: scope,
             vertical: to, ackMigrations: argv.includes('--ack-migrations'),
             abandonData: argv.includes('--abandon-data'),
             ackExportBreak: argv.includes('--ack-export-break'),
+            ...(review ? { review } : {}),
         });
         return;
     }
@@ -943,6 +1028,8 @@ async function cmdPreview() {
             allowUnservedUi: argv.includes('--allow-unserved-ui'),
             // …and the same schedule check (#1646): a preview's schedules need a sweeper too.
             allowUnsweptSchedules: argv.includes('--allow-unswept-schedules'),
+            // …and the same data-loss replay (#2321), which a preview's migrations meet too.
+            requireDataLossCheck: dataLossCheckRequired(argv),
             linted,
             envSpec: meta.envSpec,
             ownerGrants: meta.ownerGrants,
@@ -1078,6 +1165,62 @@ async function cmdModel() {
     console.log(`✓ ${entities} ${entities === 1 ? 'entity' : 'entities'} rendered — open it in a browser:`);
     console.log(file);
 }
+/**
+ * `substrat changeset [dir] [--base <ref>] [--summary <text>] [--check] [--json]` — the bump,
+ * computed from the artifacts of record rather than chosen (#2364). No control plane and no
+ * auth: it reads the checked-in artifacts at the merge-base and in the working tree.
+ */
+function cmdChangeset() {
+    const usage = 'usage: substrat changeset [dir] [--base <ref>] [--summary <text>] [--check] [--json]';
+    for (const f of ['base', 'summary']) {
+        const v = flag(f);
+        if (argv.includes(`--${f}`) && (!v || v.startsWith('--'))) {
+            console.error(`${usage}\n\n--${f} needs a value.`);
+            process.exit(1);
+        }
+    }
+    const booleans = ['check', 'json'];
+    const dir = resolvePath(positional(0, booleans) ?? '.');
+    try {
+        const r = changesetCommand(dir, {
+            ...(flag('base') ? { base: flag('base') } : {}),
+            ...(flag('summary') ? { summary: flag('summary') } : {}),
+            check: argv.includes('--check'),
+            json: argv.includes('--json'),
+        });
+        for (const l of r.out)
+            console.log(l);
+        for (const l of r.err)
+            console.error(l);
+        if (r.code !== 0)
+            process.exit(r.code);
+    }
+    catch (err) {
+        if (err instanceof CannotRun) {
+            console.error(`error: ${err.message}`);
+            process.exit(2);
+        }
+        throw err;
+    }
+}
+/**
+ * `substrat concept sync [dir] [--check]` — keep `spec/concept.md`'s generated regions true.
+ * Offline like `model view`: it reads the checked-in `model.json` and `PERMISSIONS.md`.
+ */
+async function cmdConcept() {
+    if (argv[1] !== 'sync') {
+        console.error('usage: substrat concept sync [dir] [--check]' +
+            (argv[1] && !argv[1].startsWith('--') ? `\n\n'concept ${argv[1]}' is not a subcommand — 'sync' is the only one.` : ''));
+        process.exit(1);
+    }
+    const check = argv.includes('--check');
+    const { file, changed } = syncConceptFile(positional(1, ['check']) ?? '.', { check });
+    if (check && changed) {
+        console.error(`✗ ${file} is stale — run \`substrat concept sync\``);
+        process.exit(1);
+    }
+    console.log(changed ? `✓ rewrote the generated sections of ${file}` : `✓ ${file} is up to date`);
+}
 async function cmdWhoami() {
     const { controlPlaneUrl, header } = resolveAuth({ cp: flag('cp'), token: flag('token'), tenant: flag('tenant') });
     const { user, tenants } = await fetchWhoami(controlPlaneUrl, header);
@@ -1109,8 +1252,13 @@ async function main() {
             return cmdPromote();
         case 'publish':
             return cmdPublish();
+        case 'store-driver':
+            return cmdStoreDriver();
         case 'store-kind':
-            return cmdStoreKind();
+            // Renamed with the concept (K-53): a store's code is its driver. Nothing to alias, since no
+            // driver was ever registered for the old command to have acted on.
+            console.error('`substrat store-kind` was renamed `substrat store-driver`, and its --kind flag --driver');
+            process.exit(1);
         case 'unpublish':
             return cmdUnpublish();
         case 'whoami':
@@ -1128,6 +1276,10 @@ async function main() {
             return cmdInit();
         case 'model':
             return cmdModel();
+        case 'changeset':
+            return cmdChangeset();
+        case 'concept':
+            return cmdConcept();
         case 'version':
         case '--version':
         case '-v':