Open advanced maintenance tools
Use this only for operator governance, raw upload/release recovery, audit review, retention work, or protected publication controls that remain outside the simplified model manager.
Internal Operator Portal
Library Admin
Use one guided portal for normal Library catalog work: draft entries, uploads, validation, release selection, publication prep, and operator review without touching raw backend records.
Environment
Unknown
Session
Not Started
Operator
Unverified
Live Browse
Compatibility-Safe
Live Release
Unknown
System details, access mode, and package contract
Portal State
Setup Required
Access Mode
Bootstrap Allowlist
Target Release
Unknown
Live Target
No Live Target
Use Catalog Workspace for the normal catalog onboarding path.
Operators
Owner-Managed Lifecycle
Operator lifecycle remains owner-only. This surface manages invited, active, suspended,
and revoked operator records without widening into audit filtering or retention work.
Registry Operators
| Access Email | Role | Status | Scope | Revision | Updated |
|---|
Catalog Workspace Guide
Guided Draft Flow
Stay in Catalog Workspace for the normal draft path. Move in order: choose the draft, save details, add validated files, choose the draft release, then hand off to Publish.
Current Draft
No draft selected
Select an existing draft or start a new one. The rest of Catalog Workspace follows that current draft context.
Next Move
Start a new draft
Save the first draft once to create the durable catalog context that uploads and release selection depend on.
Step 1
Choose Or Start Draft
Pick the draft entry you are working on here. If you are starting fresh, use New Entry and then save the first draft once to unlock uploads and release selection.
| Catalog Package | Draft Voice | Draft Policy | Live Policy | Draft Release | Live Release | Draft Sync | Publish Prep |
|---|
Step 2
Save Draft Details
Save draft details first. File uploads and release choices stay secondary until the draft itself is saved. Recovery-only controls stay secondary.
Detailed draft vs live diagnostics
Draft State
Select an entry to inspect draft state.
Live State
Select an entry to inspect live state.
Authoring Readiness
Select an entry to inspect draft authoring readiness.
Publication Integration
Select an entry to inspect live publication readiness.
Replacement Validation
Select an entry to inspect replacement-target state.
Draft Vs Live Differences
Select an entry to inspect draft-vs-live differences.
Step 4
Choose Draft Release
After the package is validated, choose the draft release here. This still stays in draft prep and does not change the live customer version.
Choosing the current draft release updates draft prep only. It does not change the live
customer version in this lane.
Validated packages exist for this entry. Use the ready package link here first. Manual
release creation stays recovery-only. Technical action: validated-package autowire.
Recovery only: manual draft release creation
Manual release creation is recovery-only. The normal forward path is Upload Center validation plus the validated-package autowire action.
Selected Entry Releases
| Release ID | Version | Artifact | Source | Identity | Object Key | Created |
|---|
Step 3
Add Files And Validation
Use Upload Center as the normal path for package, artwork, and preview files. Every upload stays tied to the current saved draft entry.
Uploads add files only. They do not save draft details or choose the draft release for
you in this slice.
Fixed curated-package contract: 350 MiB archive / 350 MiB uncompressed via signed
direct-to-R2 multipart. The current runtime upload and validation paths now both match
that ceiling, and the repo-owned Keepcalm-class lifecycle proof closes this path before
release-lane R2 resumes real curated package onboarding.
Selected Draft Entry
none
Create or select a draft entry to unlock uploads.
Create or save the draft entry first. Upload sessions are always scoped to an existing
catalog_package_id.
Recent Upload Sessions
| Asset Kind | Original Filename | Upload State | Validation | Uploaded Size | Failure / Detail | Updated | Action |
|---|
Uploaded Assets
| Asset Kind | Filename | Validation State | Validation Detail | Size | Object Key | Draft Attachment | Latest Validation | Superseded By | Action |
|---|
Validated Packages
| Validation State | Package Version | Provider Artifact | Manifest Fingerprint | Payload Fingerprint | Signature Result | Readiness | Attached Release | Draft Release Link | Validated At |
|---|
Step 5
Prepare, Activate, Or Roll Back Safely
Publish prepares the next release candidate only. It does not switch the live public
target on its own.
Next Safe Move
Connect first
Publish stays secondary until the protected admin session is ready.
Step 1
Prepare Release Candidate
Prepare the next release candidate only after Catalog Workspace is ready.
Step 2
Activate Live Release
Activate only the prepared release approved for the live switch window.
Recovery Only
Rollback
Roll back only to restore the last known-good live target after operator approval.
Release details and publication history
Use this detail view for release lines, publication history, snapshot pointers, and rollback-ready publication review after the guided action cards above.
| Publication ID | Status | Release Mode | Release Line | Live Browse | Release Prep State | Live Now | Rollback Ready | Published By | Published At | Current Snapshot | Prepared Snapshot |
|---|
Retention Review
Reference-Safe Cleanup Controls
Cleanup eligibility is now backend-owned. This surface only reviews the canonical
retention class, blocking reasons, and break-glass holds for assets, validated packages,
and immutable release package history.
| Kind | Target | Class | Eligible | References | Blocking Reasons | Hold | Actions |
|---|
Use the bounded retention filters to inspect cleanup eligibility before any destructive action.
Audit Trail
Recent Actions
| Created | Actor | Role | Action | Target | Change Summary | Reason |
|---|