@substrat-run/cli 0.51.0 → 0.52.0

package/dist/review-archive.js

@@ -0,0 +1,164 @@
+import { execFileSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { gzipSync } from 'node:zlib';
+const BLOCK = 512;
+const MAX_COMPRESSED = 32 * 1024 * 1024;
+const MAX_EXPANDED = 128 * 1024 * 1024;
+const MAX_FILE = 16 * 1024 * 1024;
+const MAX_ENTRIES = 10_000;
+const pathDecoder = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true });
+function git(args, cwd, input) {
+    return execFileSync('git', args, { cwd, input, maxBuffer: MAX_EXPANDED + 1024 * 1024 });
+}
+function putText(block, at, size, value) {
+    const bytes = Buffer.from(value);
+    if (bytes.length > size)
+        throw new Error('archive path is too long for USTAR');
+    block.set(bytes, at);
+}
+function putOctal(block, at, size, value) {
+    const digits = value.toString(8).padStart(size - 1, '0');
+    if (digits.length !== size - 1)
+        throw new Error('archive number is too large');
+    putText(block, at, size, digits);
+    block[at + size - 1] = 0;
+}
+function portablePath(path) {
+    if (!path || /[\x00-\x1f\x7f]/.test(path) || path.includes('\\') ||
+        path.startsWith('/') || /^[a-zA-Z]:/.test(path) ||
+        path.split('/').some((part) => !part || part === '.' || part === '..')) {
+        throw new Error('archive path is not a portable relative path');
+    }
+}
+function pathFields(path) {
+    portablePath(path);
+    if (Buffer.byteLength(path) <= 100)
+        return { name: path, prefix: '' };
+    for (let slash = path.lastIndexOf('/'); slash >= 0; slash = path.lastIndexOf('/', slash - 1)) {
+        if (Buffer.byteLength(path.slice(0, slash)) <= 155 && Buffer.byteLength(path.slice(slash + 1)) <= 100) {
+            return { prefix: path.slice(0, slash), name: path.slice(slash + 1) };
+        }
+    }
+    return null;
+}
+function header(path, mode, size, type = 48) {
+    const block = new Uint8Array(BLOCK);
+    const fields = pathFields(path);
+    if (!fields)
+        throw new Error('internal archive header path is too long');
+    putText(block, 0, 100, fields.name);
+    putOctal(block, 100, 8, mode);
+    putOctal(block, 108, 8, 0);
+    putOctal(block, 116, 8, 0);
+    putOctal(block, 124, 12, size);
+    putOctal(block, 136, 12, 0);
+    block.fill(32, 148, 156);
+    block[156] = type;
+    putText(block, 257, 6, 'ustar');
+    putText(block, 263, 2, '00');
+    putText(block, 345, 155, fields.prefix);
+    let sum = 0;
+    for (const byte of block)
+        sum += byte;
+    putOctal(block, 148, 8, sum);
+    return block;
+}
+function paxPath(path) {
+    const value = `path=${path}\n`;
+    let length = Buffer.byteLength(value) + 2;
+    for (;;) {
+        const record = Buffer.from(`${length} ${value}`);
+        if (record.length === length) {
+            if (length > 1024)
+                throw new Error('archive path extension is too large');
+            return record;
+        }
+        length = record.length;
+    }
+}
+/** The committed tree as canonical USTAR + narrowly scoped PAX paths + gzip. */
+export function reviewArchive(cwd, ref) {
+    const tree = git(['ls-tree', '-r', '-z', ref], cwd);
+    const rows = [];
+    for (let start = 0; start < tree.length;) {
+        const end = tree.indexOf(0, start);
+        if (end < 0)
+            throw new Error('review tree listing is incomplete');
+        rows.push(tree.subarray(start, end));
+        start = end + 1;
+    }
+    if (rows.length === 0 || rows.length > MAX_ENTRIES)
+        throw new Error('archive entry count is out of bounds');
+    const files = rows.map((row) => {
+        const tab = row.indexOf(9);
+        const match = tab < 0 ? null : /^(100644|100755) blob ([0-9a-f]+)$/.exec(row.toString('ascii', 0, tab));
+        if (!match)
+            throw new Error('review tree contains a link, submodule or unsupported entry');
+        const pathBytes = row.subarray(tab + 1);
+        let path;
+        try {
+            path = pathDecoder.decode(pathBytes);
+        }
+        catch {
+            throw new Error(`review tree path has invalid UTF-8 bytes: ${pathBytes.toString('hex')}`);
+        }
+        return { mode: match[1] === '100755' ? 0o755 : 0o644, oid: match[2], path };
+    }).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+    const seen = new Set();
+    for (const file of files) {
+        portablePath(file.path);
+        const folded = file.path.normalize('NFC').toLowerCase();
+        if (seen.has(folded))
+            throw new Error('review tree has colliding paths');
+        seen.add(folded);
+    }
+    const input = Buffer.from(files.map((file) => `${file.oid}\n`).join(''));
+    const batch = git(['cat-file', '--batch'], cwd, input);
+    let at = 0;
+    let expanded = 2 * BLOCK;
+    const blocks = [];
+    for (const [index, file] of files.entries()) {
+        const newline = batch.indexOf(10, at);
+        if (newline < 0)
+            throw new Error('git object batch is incomplete');
+        const line = batch.toString('ascii', at, newline);
+        const match = /^([0-9a-f]+) blob ([0-9]+)$/.exec(line);
+        if (!match || match[1] !== file.oid)
+            throw new Error('git object batch differs from tree');
+        const size = Number(match[2]);
+        if (!Number.isSafeInteger(size) || size > MAX_FILE)
+            throw new Error('review file exceeds the size limit');
+        at = newline + 1;
+        const content = batch.subarray(at, at + size);
+        if (content.byteLength !== size || batch[at + size] !== 10)
+            throw new Error('git object batch is truncated');
+        at += size + 1;
+        const native = pathFields(file.path);
+        if (!native) {
+            const pax = paxPath(file.path);
+            const marker = String(index).padStart(6, '0');
+            blocks.push(header(`PaxHeaders/${marker}`, 0o644, pax.length, 120), pax);
+            if (pax.length % BLOCK)
+                blocks.push(new Uint8Array(BLOCK - pax.length % BLOCK));
+            expanded += BLOCK + Math.ceil(pax.length / BLOCK) * BLOCK;
+        }
+        expanded += BLOCK + Math.ceil(size / BLOCK) * BLOCK;
+        if (expanded > MAX_EXPANDED)
+            throw new Error('review tree exceeds the expanded size limit');
+        blocks.push(header(native ? file.path : `PaxFiles/${String(index).padStart(6, '0')}`, file.mode, size), content);
+        if (size % BLOCK)
+            blocks.push(new Uint8Array(BLOCK - size % BLOCK));
+    }
+    blocks.push(new Uint8Array(2 * BLOCK));
+    const compressed = gzipSync(Buffer.concat(blocks), { level: 9 });
+    if (compressed.byteLength > MAX_COMPRESSED)
+        throw new Error('review archive exceeds the compressed size limit');
+    return { bytes: compressed, sha256: createHash('sha256').update(compressed).digest('hex') };
+}
+/** A staff branch review only describes the committed source. */
+export function assertCleanReviewTree(cwd) {
+    if (git(['status', '--porcelain', '--untracked-files=all'], cwd).byteLength) {
+        throw new Error('commit the branch before uploading it for review');
+    }
+}
+//# sourceMappingURL=review-archive.js.map

package/dist/review-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-archive.js","sourceRoot":"","sources":["../src/review-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/E,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW,EAAE,KAAc;IACtD,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,KAAiB,EAAE,EAAU,EAAE,IAAY,EAAE,KAAa;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/E,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB,EAAE,EAAU,EAAE,IAAY,EAAE,KAAa;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC/E,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtE,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7F,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACtG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,IAAI,GAAG,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzE,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACzB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClB,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAAG,QAAQ,IAAI,IAAI,CAAC;IAC/B,IAAI,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,IAAI,MAAM,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC1E,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1G,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7G,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACzE,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;YAChF,QAAQ,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;QAC5D,CAAC;QACD,QAAQ,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;QACpD,IAAI,QAAQ,GAAG,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC5F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACjH,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,UAAU,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAChH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/source-snapshot.d.ts

@@ -0,0 +1,4 @@
+import { type SourceSnapshot } from '@substrat-run/contracts';
+/** Include workspace manifests and local packages when pushing a monorepo member. */
+export declare function collectSourceSnapshot(directory: string): SourceSnapshot;
+//# sourceMappingURL=source-snapshot.d.ts.map

package/dist/source-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-snapshot.d.ts","sourceRoot":"","sources":["../src/source-snapshot.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwD,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEpH,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CA+EvE"}

package/dist/source-snapshot.js

@@ -0,0 +1,99 @@
+import { execFileSync, execSync } from 'node:child_process';
+import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { excludedSourcePath, sourceSnapshot, SOURCE_BYTES_MAX } from '@substrat-run/contracts';
+/** Include workspace manifests and local packages when pushing a monorepo member. */
+export function collectSourceSnapshot(directory) {
+    const dir = realpathSync.native(resolve(directory));
+    let root = dir;
+    let parent = dir;
+    while (true) {
+        if (existsSync(join(parent, 'pnpm-workspace.yaml'))) {
+            if (!excludedSourcePath(relative(parent, dir).split(sep).join('/')))
+                root = parent;
+            break;
+        }
+        const next = dirname(parent);
+        if (next === parent)
+            break;
+        parent = next;
+    }
+    let included;
+    if (root !== dir) {
+        // Resolve the workspace graph without installing or building anything. Include
+        // nested browser packages as well as the vertical's declared dependencies.
+        // A constant shell command also resolves pnpm.cmd on Windows; no project input is interpolated.
+        const members = JSON.parse(execSync('pnpm -r list --depth -1 --json', { cwd: root, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024, stdio: ['ignore', 'pipe', 'ignore'] }));
+        // Resolve Windows short-name aliases as well as separators before comparing paths.
+        for (const member of members)
+            member.path = realpathSync.native(resolve(member.path));
+        const byName = new Map(members.filter((m) => m.name).map((m) => [m.name, m]));
+        const selected = new Set(members.filter((m) => {
+            const child = relative(dir, m.path);
+            return child === '' || (!isAbsolute(child) && child !== '..' && !child.startsWith(`..${sep}`));
+        }).map((m) => m.path));
+        selected.add(dir);
+        const queue = [...selected];
+        for (const path of queue) {
+            const pkg = JSON.parse(readFileSync(join(path, 'package.json'), 'utf8'));
+            const deps = { ...pkg.dependencies, ...pkg.devDependencies, ...pkg.peerDependencies, ...pkg.optionalDependencies };
+            for (const name of Object.keys(deps)) {
+                const member = byName.get(name);
+                if (member && !selected.has(member.path)) {
+                    selected.add(member.path);
+                    queue.push(member.path);
+                }
+            }
+        }
+        included = [...selected].map((p) => `${relative(root, p).split(sep).join('/')}/`);
+    }
+    let names;
+    const gitExecutable = new Set();
+    try {
+        names = execFileSync('git', ['-C', root, 'ls-files', '--cached', '--others', '--exclude-standard', '-z', '--', '.'], { encoding: 'utf8', maxBuffer: 16 * 1024 * 1024, stdio: ['ignore', 'pipe', 'ignore'] }).split('\0').filter(Boolean);
+        if (process.platform === 'win32') {
+            const modes = execFileSync('git', ['-C', root, 'ls-files', '--stage', '-z', '--', '.'], { encoding: 'utf8', maxBuffer: 16 * 1024 * 1024, stdio: ['ignore', 'pipe', 'ignore'] });
+            for (const entry of modes.split('\0')) {
+                const match = /^100755 [0-9a-f]+ \d\t(.+)$/.exec(entry);
+                if (match)
+                    gitExecutable.add(match[1]);
+            }
+        }
+        // git prints paths relative to cwd; it must never select an ancestor's unrelated files.
+    }
+    catch {
+        const walk = (prefix) => readdirSync(join(root, prefix)).flatMap((name) => {
+            const path = prefix ? `${prefix}/${name}` : name;
+            if (excludedSourcePath(path))
+                return [];
+            const stat = lstatSync(join(root, path));
+            return stat.isDirectory() ? walk(path) : [path];
+        });
+        names = walk('');
+    }
+    const files = [];
+    let bytes = 0;
+    for (const path of [...new Set(names)].sort()) {
+        if (excludedSourcePath(path))
+            continue;
+        if (included && path.includes('/') && !path.startsWith('tools/') && !path.startsWith('scripts/') && !included.some((prefix) => path.startsWith(prefix)))
+            continue;
+        const absolute = join(root, path);
+        if (!existsSync(absolute))
+            continue; // tracked deletion
+        const stat = lstatSync(absolute);
+        if (stat.isSymbolicLink())
+            throw new Error(`source snapshot refuses symlink: ${path}`);
+        if (!stat.isFile())
+            continue;
+        const real = realpathSync.native(absolute);
+        if (!real.startsWith(`${root}${sep}`))
+            throw new Error(`source path escapes the project: ${path}`);
+        bytes += Math.ceil(stat.size / 3) * 4;
+        if (bytes > SOURCE_BYTES_MAX)
+            throw new Error('source snapshot exceeds the upload limit');
+        files.push({ path, base64: readFileSync(real).toString('base64'), executable: process.platform === 'win32' ? gitExecutable.has(path) : Boolean(stat.mode & 0o111) });
+    }
+    return sourceSnapshot.parse({ files, directory: relative(root, dir).split(sep).join('/') || '.' });
+}
+//# sourceMappingURL=source-snapshot.js.map

package/dist/source-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-snapshot.js","sourceRoot":"","sources":["../src/source-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAuB,MAAM,yBAAyB,CAAC;AAEpH,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,IAAI,GAAG,MAAM,CAAC;YACnF,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM;QAC3B,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,QAA8B,CAAC;IACnC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,+EAA+E;QAC/E,2EAA2E;QAC3E,gGAAgG;QAChG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gCAAgC,EAClE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAA2C,CAAC;QAC/I,mFAAmF;QACnF,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA2C,CAAC;YACnH,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,gBAAgB,EAAE,GAAG,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACnH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;YACnG,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAe,CAAC;IACpB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EACjH,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EACpF,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1F,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxD,IAAI,KAAK;oBAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,wFAAwF;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,GAAG,CAAC,MAAc,EAAY,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,kBAAkB,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,IAAI,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QAClK,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,mBAAmB;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QACnG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACvK,CAAC;IACD,OAAO,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;AACrG,CAAC"}

package/dist/store-driver-approval.d.ts

@@ -0,0 +1,33 @@
+import { type StoreDriverApprovalBody, type StoreDriverApprovalResultView, type StoreDriverRevokeResultView, type StoreDriverView } from '@substrat-run/control-plane-client';
+/** CLI backstop: one release walk should not require more than 10,000 page requests. */
+export declare const STORE_DRIVER_REVOKE_MAX_PAGES = 10000;
+/** The same printable, bounded text rule as the approval and revoke routes. Values stay exact. */
+export declare function storeDriverReviewText(value: unknown, field: string): string;
+/** Validate the full body before the client sends it; no text is silently normalised. */
+export declare function validateStoreDriverApproval(value: unknown): StoreDriverApprovalBody;
+export declare function approvalFromFiles(input: {
+    reason: string;
+    sourceReferencesFile: string;
+    isolationReviewFile: string;
+    schema: string;
+    className: string;
+    operations: string[];
+}): StoreDriverApprovalBody;
+export declare function approvalLines(result: StoreDriverApprovalResultView): string[];
+export declare function approvalStatusLines(view: StoreDriverView): string[];
+export declare function uploadApprovalLine(driver: string, sha256: string): string;
+/** Resume every server page; a busy or lost hold can be retried with the same command. */
+export declare function revokeStoreDriverUntilComplete(input: {
+    client: {
+        revokeStoreDriverRelease(driver: string, sha256: string, body: {
+            reason: string;
+            emergency?: boolean;
+        }): Promise<StoreDriverRevokeResultView>;
+    };
+    driver: string;
+    sha256: string;
+    reason: string;
+    emergency: boolean;
+    progress: (line: string) => void;
+}): Promise<StoreDriverRevokeResultView>;
+//# sourceMappingURL=store-driver-approval.d.ts.map

package/dist/store-driver-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-driver-approval.d.ts","sourceRoot":"","sources":["../src/store-driver-approval.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACrB,MAAM,oCAAoC,CAAC;AAU5C,wFAAwF;AACxF,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAapD,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK3E;AAED,yFAAyF;AACzF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CA2DnF;AAUD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,MAAM,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAC1E,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;CACzD,GAAG,uBAAuB,CAQ1B;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,6BAA6B,GAAG,MAAM,EAAE,CAM7E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAMnE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAIzE;AAED,0FAA0F;AAC1F,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,MAAM,EAAE;QAAE,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;KAAE,CAAC;IAC1J,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IACnE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA+BvC"}

package/dist/store-driver-approval.js

@@ -0,0 +1,178 @@
+/** Scriptable, person-only approval commands for already uploaded store-driver releases (D-65). */
+import { readFileSync, statSync } from 'node:fs';
+import { storeCatalogOperation } from '@substrat-run/contracts';
+import { ControlPlaneError, } from '@substrat-run/control-plane-client';
+const nonPrinting = /[\p{Cc}\p{Cf}\u2028\u2029]/u;
+const commitShape = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+const classShape = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const reviewKeys = [
+    'separateScriptPerTenant', 'noOutboundAccess', 'envelopeVerifiedOutsideDriver',
+    'envelopeChecked', 'reservedOperationsChecked', 'noModuleStateChecked',
+];
+const MAX_REVIEW_FILE_BYTES = 128 * 1024;
+/** CLI backstop: one release walk should not require more than 10,000 page requests. */
+export const STORE_DRIVER_REVOKE_MAX_PAGES = 10_000;
+const record = (value, field) => {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        throw new Error(`${field}: expected an object`);
+    return value;
+};
+const exactKeys = (value, keys, field) => {
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key))) {
+        throw new Error(`${field}: expected exactly ${keys.join(', ')}`);
+    }
+};
+/** The same printable, bounded text rule as the approval and revoke routes. Values stay exact. */
+export function storeDriverReviewText(value, field) {
+    if (typeof value !== 'string' || value.length < 1 || value.length > 2048 || value.trim().length === 0 || nonPrinting.test(value)) {
+        throw new Error(`${field}: expected 1–2048 printable characters`);
+    }
+    return value;
+}
+/** Validate the full body before the client sends it; no text is silently normalised. */
+export function validateStoreDriverApproval(value) {
+    const body = record(value, 'approval');
+    exactKeys(body, ['reason', 'sourceReferences', 'isolationReview', 'schema', 'className', 'operations'], 'approval');
+    const reason = storeDriverReviewText(body.reason, 'reason');
+    if (!Array.isArray(body.sourceReferences) || body.sourceReferences.length < 1 || body.sourceReferences.length > 64) {
+        throw new Error('sourceReferences: expected 1–64 repository and commit pairs');
+    }
+    const sourceReferences = body.sourceReferences.map((entry, i) => {
+        const ref = record(entry, `sourceReferences.${i}`);
+        exactKeys(ref, ['repository', 'commit'], `sourceReferences.${i}`);
+        const repository = ref.repository;
+        if (typeof repository !== 'string' || repository.length < 1 || repository.length > 1024 ||
+            !repository.startsWith('https://') || /[\s\\?#]/u.test(repository) || nonPrinting.test(repository)) {
+            throw new Error(`sourceReferences.${i}.repository: expected an HTTPS URL with host and path`);
+        }
+        let url;
+        try {
+            url = new URL(repository);
+        }
+        catch {
+            throw new Error(`sourceReferences.${i}.repository: expected an HTTPS URL with host and path`);
+        }
+        if (url.protocol !== 'https:' || !url.hostname || url.username || url.password || url.search || url.hash ||
+            !url.pathname.split('/').some(Boolean)) {
+            throw new Error(`sourceReferences.${i}.repository: expected an HTTPS URL with host and path`);
+        }
+        if (typeof ref.commit !== 'string' || !commitShape.test(ref.commit)) {
+            throw new Error(`sourceReferences.${i}.commit: expected 40 or 64 lowercase hex characters`);
+        }
+        return { repository, commit: ref.commit };
+    });
+    const review = record(body.isolationReview, 'isolationReview');
+    exactKeys(review, reviewKeys, 'isolationReview');
+    const checked = (key) => {
+        const part = record(review[key], `isolationReview.${key}`);
+        exactKeys(part, ['checked', 'evidence'], `isolationReview.${key}`);
+        if (part.checked !== true)
+            throw new Error(`isolationReview.${key}.checked: expected true`);
+        return { checked: true, evidence: storeDriverReviewText(part.evidence, `isolationReview.${key}.evidence`) };
+    };
+    const met = (key) => {
+        const part = record(review[key], `isolationReview.${key}`);
+        exactKeys(part, ['met', 'evidence'], `isolationReview.${key}`);
+        if (typeof part.met !== 'boolean')
+            throw new Error(`isolationReview.${key}.met: expected a boolean`);
+        return { met: part.met, evidence: storeDriverReviewText(part.evidence, `isolationReview.${key}.evidence`) };
+    };
+    const isolationReview = {
+        separateScriptPerTenant: met('separateScriptPerTenant'),
+        noOutboundAccess: met('noOutboundAccess'),
+        envelopeVerifiedOutsideDriver: met('envelopeVerifiedOutsideDriver'),
+        envelopeChecked: checked('envelopeChecked'),
+        reservedOperationsChecked: checked('reservedOperationsChecked'),
+        noModuleStateChecked: checked('noModuleStateChecked'),
+    };
+    if (typeof body.schema !== 'number' || !Number.isSafeInteger(body.schema) || body.schema < 0) {
+        throw new Error('schema: expected a non-negative integer');
+    }
+    if (typeof body.className !== 'string' || body.className.length > 256 || !classShape.test(body.className)) {
+        throw new Error('className: expected a Python class identifier');
+    }
+    if (!Array.isArray(body.operations) || body.operations.length > 256 ||
+        body.operations.some((name) => typeof name !== 'string' || nonPrinting.test(name) || !storeCatalogOperation.safeParse(name).success)) {
+        throw new Error('operations: expected at most 256 fixed catalog labels');
+    }
+    return { reason, sourceReferences, isolationReview, schema: body.schema, className: body.className, operations: body.operations };
+}
+function readReviewJson(path) {
+    if (statSync(path).size > MAX_REVIEW_FILE_BYTES)
+        throw new Error(`${path}: review JSON exceeds ${MAX_REVIEW_FILE_BYTES} bytes`);
+    const text = readFileSync(path, 'utf8');
+    if (Buffer.byteLength(text) > MAX_REVIEW_FILE_BYTES)
+        throw new Error(`${path}: review JSON exceeds ${MAX_REVIEW_FILE_BYTES} bytes`);
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new Error(`${path}: expected JSON`);
+    }
+}
+export function approvalFromFiles(input) {
+    if (!/^(?:0|[1-9][0-9]*)$/.test(input.schema))
+        throw new Error('schema: expected a non-negative integer');
+    return validateStoreDriverApproval({
+        reason: input.reason,
+        sourceReferences: readReviewJson(input.sourceReferencesFile),
+        isolationReview: readReviewJson(input.isolationReviewFile),
+        schema: Number(input.schema), className: input.className, operations: input.operations,
+    });
+}
+export function approvalLines(result) {
+    const { approval, currentSchema } = result;
+    return [
+        `✓ approved ${approval.driver} ${approval.sha256} (approval ${approval.approvalId})`,
+        `  schema ${approval.schema}; current good schema ${currentSchema ?? 'none'}`,
+    ];
+}
+export function approvalStatusLines(view) {
+    if (!view.approvals)
+        return [];
+    if (view.approvals.length === 0)
+        return ['  approvals: none'];
+    return view.approvals.map((approval) => approval.revokedAt
+        ? `  approval ${approval.approvalId} ${approval.sha256}: revoked ${approval.revokedAt} by ${approval.revokedBy}${approval.revokedEmergency ? ' (emergency)' : ''}; reason: ${approval.revokedReason}`
+        : `  approval ${approval.approvalId} ${approval.sha256}: live, approved ${approval.approvedAt} by ${approval.approvedBy}; schema ${approval.schema}, class ${approval.className}, operations ${approval.operations.join(', ') || 'none'}`);
+}
+export function uploadApprovalLine(driver, sha256) {
+    return `  upload alone does not make these bytes runnable; a staff person approves them with: ` +
+        `substrat store-driver approve --driver ${driver} --sha256 ${sha256} --reason <reason> ` +
+        '--source-references <json-file> --isolation-review <json-file> --schema <n> --class-name <Class> [--operation <name> ...]';
+}
+/** Resume every server page; a busy or lost hold can be retried with the same command. */
+export async function revokeStoreDriverUntilComplete(input) {
+    let pages = 0;
+    let previousRemaining;
+    let unchangedPages = 0;
+    while (true) {
+        if (pages >= STORE_DRIVER_REVOKE_MAX_PAGES) {
+            throw new Error(`revoke walk exceeded the ${STORE_DRIVER_REVOKE_MAX_PAGES}-page CLI limit; run the same command again, or check store-driver status`);
+        }
+        pages += 1;
+        let result;
+        try {
+            result = await input.client.revokeStoreDriverRelease(input.driver, input.sha256, { reason: input.reason, ...(input.emergency ? { emergency: true } : {}) });
+        }
+        catch (error) {
+            if (error instanceof ControlPlaneError && error.status === 409 && /hold|held|busy|rollout or push/i.test(error.message)) {
+                throw new Error(`${error.message}; retry the same store-driver revoke command`);
+            }
+            throw error;
+        }
+        input.progress(result.complete
+            ? `✓ revoked approval ${result.approval.approvalId} for ${input.driver} ${input.sha256}`
+            : `  revoke walk paused: ${result.remaining} script(s) remaining; continuing`);
+        if (result.complete)
+            return result;
+        unchangedPages = previousRemaining !== undefined && result.remaining >= previousRemaining
+            ? unchangedPages + 1
+            : 0;
+        previousRemaining = result.remaining;
+        if (unchangedPages >= 3) {
+            throw new Error(`revoke walk remains at ${result.remaining} script(s) remaining; run the same command again, or check store-driver status`);
+        }
+    }
+}
+//# sourceMappingURL=store-driver-approval.js.map

package/dist/store-driver-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-driver-approval.js","sourceRoot":"","sources":["../src/store-driver-approval.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,iBAAiB,GAKlB,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,WAAW,GAAG,iCAAiC,CAAC;AACtD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,UAAU,GAAG;IACjB,yBAAyB,EAAE,kBAAkB,EAAE,+BAA+B;IAC9E,iBAAiB,EAAE,2BAA2B,EAAE,sBAAsB;CAC9D,CAAC;AACX,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,wFAAwF;AACxF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,KAAa,EAA2B,EAAE;IACxE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IACzH,OAAO,KAAgC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAA8B,EAAE,IAAuB,EAAE,KAAa,EAAQ,EAAE;IACjG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC;AAEF,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,KAAa;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjI,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACvC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACnD,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI;YACnF,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,uDAAuD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,uDAAuD,CAAC,CAAC;QAAC,CAAC;QAC3I,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YACpG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,uDAAuD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,qDAAqD,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC/D,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC3D,SAAS,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,yBAAyB,CAAC,CAAC;QAC5F,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,GAAG,WAAW,CAAC,EAAE,CAAC;IACvH,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC3D,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,0BAA0B,CAAC,CAAC;QACrG,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,GAAG,WAAW,CAAC,EAAE,CAAC;IAC9G,CAAC,CAAC;IACF,MAAM,eAAe,GAAG;QACtB,uBAAuB,EAAE,GAAG,CAAC,yBAAyB,CAAC;QACvD,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACzC,6BAA6B,EAAE,GAAG,CAAC,+BAA+B,CAAC;QACnE,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC;QAC3C,yBAAyB,EAAE,OAAO,CAAC,2BAA2B,CAAC;QAC/D,oBAAoB,EAAE,OAAO,CAAC,sBAAsB,CAAC;KACtD,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;QAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACzI,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAsB,EAAE,CAAC;AAChJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,qBAAqB,QAAQ,CAAC,CAAC;IAChI,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,qBAAqB,QAAQ,CAAC,CAAC;IACpI,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAAC,CAAC;IAC3C,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAGjC;IACC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1G,OAAO,2BAA2B,CAAC;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC5D,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC1D,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;KACvF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqC;IACjE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAC3C,OAAO;QACL,cAAc,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,UAAU,GAAG;QACpF,YAAY,QAAQ,CAAC,MAAM,yBAAyB,aAAa,IAAI,MAAM,EAAE;KAC9E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAqB;IACvD,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS;QACxD,CAAC,CAAC,cAAc,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,aAAa,QAAQ,CAAC,SAAS,OAAO,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,QAAQ,CAAC,aAAa,EAAE;QACrM,CAAC,CAAC,cAAc,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,oBAAoB,QAAQ,CAAC,UAAU,OAAO,QAAQ,CAAC,UAAU,YAAY,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,SAAS,gBAAgB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;AAC/O,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAc;IAC/D,OAAO,wFAAwF;QAC7F,0CAA0C,MAAM,aAAa,MAAM,qBAAqB;QACxF,2HAA2H,CAAC;AAChI,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAIpD;IACC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,iBAAqC,CAAC;IAC1C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,KAAK,IAAI,6BAA6B,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,4BAA4B,6BAA6B,2EAA2E,CAAC,CAAC;QACxJ,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,MAAmC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAC7E,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAC5B,CAAC,CAAC,sBAAsB,MAAM,CAAC,QAAQ,CAAC,UAAU,QAAQ,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE;YACxF,CAAC,CAAC,yBAAyB,MAAM,CAAC,SAAS,kCAAkC,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC;QACnC,cAAc,GAAG,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,iBAAiB;YACvF,CAAC,CAAC,cAAc,GAAG,CAAC;YACpB,CAAC,CAAC,CAAC,CAAC;QACN,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC;QACrC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,SAAS,gFAAgF,CAAC,CAAC;QAC9I,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/store-driver.d.ts

@@ -46,6 +46,7 @@ export declare const uploadStoreDriverRelease: (input: Plane & {
 }) => Promise<{
     release: import("@substrat-run/control-plane-client").StoreDriverReleaseView;
     pinned: boolean;
+    approved?: boolean;
 }>;
 export declare const rollOutStoreDriver: (input: Plane & {
     driver: string;

package/dist/store-driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-driver.d.ts","sourceRoot":"","sources":["../src/store-driver.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAiF,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACvJ,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAelG;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA8D,CAAC;AAI9G;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBnD;AAED,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,QAAS,MAAM,KAAG,MAAM,EAAqE,CAAC;AAEpI;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAgB5E;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,wBAAwB,CAiB7G;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAUpJ;AAED,0GAA0G;AAC1G,eAAO,MAAM,YAAY,UAAW,MAAM,GAAG,SAAS,KAAG,KAAK,IAAI,MAA6D,CAAC;AAEhI,KAAK,KAAK,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAEzE,eAAO,MAAM,wBAAwB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE;;;EACR,CAAC;AAEnG,eAAO,MAAM,kBAAkB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,uFACU,CAAC;AAE/F,eAAO,MAAM,mBAAmB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,uFACY,CAAC;AAElF,eAAO,MAAM,iBAAiB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,6BACS,CAAC;AAE7E,eAAO,MAAM,kBAAkB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE;;;EACqC,CAAC;AAEpI;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,EAAE,CA4BjF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAStF"}
+{"version":3,"file":"store-driver.d.ts","sourceRoot":"","sources":["../src/store-driver.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAiF,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACvJ,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAelG;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA8D,CAAC;AAI9G;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBnD;AAED,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,QAAS,MAAM,KAAG,MAAM,EAAqE,CAAC;AAEpI;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAgB5E;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,wBAAwB,CAiB7G;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAUpJ;AAED,0GAA0G;AAC1G,eAAO,MAAM,YAAY,UAAW,MAAM,GAAG,SAAS,KAAG,KAAK,IAAI,MAA6D,CAAC;AAEhI,KAAK,KAAK,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAEzE,eAAO,MAAM,wBAAwB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE;;;;EACR,CAAC;AAEnG,eAAO,MAAM,kBAAkB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,uFACU,CAAC;AAE/F,eAAO,MAAM,mBAAmB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,uFACY,CAAC;AAElF,eAAO,MAAM,iBAAiB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,6BACS,CAAC;AAE7E,eAAO,MAAM,kBAAkB,UAAW,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE;;;EACqC,CAAC;AAEpI;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,EAAE,CA4BjF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAStF"}

package/dist/store-driver.js

@@ -4,7 +4,7 @@
  * refuses the service token.
  *
  * - `upload` packs the driver's package from `--dir` and stores it. The control plane names the
- *   release by its sha256 and says whether this repo pins it yet; bytes may go up first.
+ *   release by its sha256; a staff person approves those bytes separately.
  * - `rollout --sha256` moves every vertical to a stored, pinned release, after a canary. A big
  *   fleet takes more than one request: the command says so, and running it again continues.
  * - `rollback` returns the driver to the immediately previous good release.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/cli",
-  "version": "0.51.0",
+  "version": "0.52.0",
   "description": "The substrat CLI — authenticated deploy tooling: push a vertical to the platform, manage its versions and channels",
   "license": "Apache-2.0",
   "repository": {
@@ -30,10 +30,10 @@
   "dependencies": {
     "@babel/parser": "^7.29.11",
     "esbuild": "^0.28.2",
-    "@substrat-run/boundary-lint": "^0.8.0",
-    "@substrat-run/contracts": "^0.165.0",
-    "@substrat-run/control-plane-client": "^0.3.16",
-    "@substrat-run/model-view": "^0.6.12"
+    "@substrat-run/contracts": "^0.166.0",
+    "@substrat-run/control-plane-client": "^0.3.17",
+    "@substrat-run/boundary-lint": "^0.8.1",
+    "@substrat-run/model-view": "^0.6.13"
   },
   "devDependencies": {
     "@types/node": "^22.20.5",