@ai-dossier/cli 0.3.0 → 0.4.2

package/dist/commands/whoami.js

@@ -1,28 +1,131 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerWhoamiCommand = registerWhoamiCommand;
+const config_1 = require("../config");
 const credentials_1 = require("../credentials");
 function registerWhoamiCommand(program) {
     program
         .command('whoami')
         .description('Show current registry user')
-        .action(() => {
-        const credentials = (0, credentials_1.loadCredentials)();
-        if (!credentials) {
-            console.log('\nℹ️  Not logged in');
-            console.log('   Run `dossier login` to authenticate\n');
-            process.exit(1);
-        }
-        if ((0, credentials_1.isExpired)(credentials)) {
-            console.log('\n⚠️  Credentials expired');
-            console.log('   Run `dossier login` to re-authenticate\n');
-            process.exit(1);
+        .option('--registry <name>', 'Show credentials for a specific registry')
+        .option('--json', 'Output as JSON')
+        .action((options) => {
+        if (options.registry) {
+            showSingleRegistry(options.registry, options.json);
         }
+        else {
+            const credRegistries = (0, credentials_1.listCredentialRegistries)();
+            if (credRegistries.length === 0) {
+                if (options.json) {
+                    console.log(JSON.stringify({ logged_in: false, error: 'Not logged in', code: 'not_logged_in' }, null, 2));
+                }
+                else {
+                    console.log('\nℹ️  Not logged in');
+                    console.log('   Run `dossier login` to authenticate\n');
+                }
+                process.exit(1);
+            }
+            // Show all registries with credentials
+            if (credRegistries.length === 1) {
+                showSingleRegistry(credRegistries[0], options.json);
+            }
+            else {
+                showAllRegistries(credRegistries, options.json);
+            }
+        }
+    });
+}
+function showSingleRegistry(registryName, json) {
+    const credentials = (0, credentials_1.loadCredentials)(registryName);
+    if (!credentials) {
+        if (json) {
+            console.log(JSON.stringify({
+                logged_in: false,
+                registry: registryName,
+                error: 'Not logged in',
+                code: 'not_logged_in',
+            }, null, 2));
+        }
+        else {
+            console.log(`\nℹ️  Not logged in to registry '${registryName}'`);
+            console.log(`   Run \`dossier login --registry ${registryName}\` to authenticate\n`);
+        }
+        process.exit(1);
+    }
+    if ((0, credentials_1.isExpired)(credentials)) {
+        if (json) {
+            console.log(JSON.stringify({
+                logged_in: false,
+                registry: registryName,
+                error: 'Credentials expired',
+                code: 'expired',
+            }, null, 2));
+        }
+        else {
+            console.log(`\n⚠️  Credentials expired for registry '${registryName}'`);
+            console.log(`   Run \`dossier login --registry ${registryName}\` to re-authenticate\n`);
+        }
+        process.exit(1);
+    }
+    if (json) {
+        console.log(JSON.stringify({
+            logged_in: true,
+            registry: registryName,
+            username: credentials.username,
+            orgs: credentials.orgs,
+        }, null, 2));
+    }
+    else {
+        const allRegistries = (0, config_1.resolveRegistries)();
         console.log(`\n👤 ${credentials.username}`);
+        if (allRegistries.length > 1) {
+            console.log(`   Registry: ${registryName}`);
+        }
         if (credentials.orgs.length > 0) {
             console.log(`   Organizations: ${credentials.orgs.join(', ')}`);
         }
         console.log('');
-    });
+    }
+}
+function showAllRegistries(registryNames, json) {
+    const entries = [];
+    for (const name of registryNames) {
+        const creds = (0, credentials_1.loadCredentials)(name);
+        if (!creds) {
+            entries.push({ registry: name, logged_in: false });
+        }
+        else if ((0, credentials_1.isExpired)(creds)) {
+            entries.push({ registry: name, logged_in: false, expired: true, username: creds.username });
+        }
+        else {
+            entries.push({
+                registry: name,
+                logged_in: true,
+                username: creds.username,
+                orgs: creds.orgs,
+            });
+        }
+    }
+    if (json) {
+        console.log(JSON.stringify({ registries: entries }, null, 2));
+    }
+    else {
+        console.log('\n👤 Registry Credentials:\n');
+        for (const e of entries) {
+            if (e.logged_in) {
+                console.log(`   ${e.registry}: ${e.username}`);
+                if (e.orgs && e.orgs.length > 0) {
+                    console.log(`     Organizations: ${e.orgs.join(', ')}`);
+                }
+            }
+            else if (e.expired) {
+                console.log(`   ${e.registry}: ${e.username} (expired)`);
+            }
+            else {
+                console.log(`   ${e.registry}: not logged in`);
+            }
+        }
+        console.log('');
+    }
 }
 //# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -1 +1 @@
-{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":";;AAGA,sDAwBC;AA1BD,gDAA4D;AAE5D,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,WAAW,GAAG,IAAA,6BAAe,GAAE,CAAC;QACtC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,IAAA,uBAAS,EAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":";;AAIA,sDAmCC;AAtCD,sCAA8C;AAC9C,gDAAsF;AAEtF,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;SACvE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,OAA8C,EAAE,EAAE;QACzD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,IAAA,sCAAwB,GAAE,CAAC;YAClD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,EACnE,IAAI,EACJ,CAAC,CACF,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;oBACnC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,uCAAuC;YACvC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB,EAAE,IAAc;IAC9D,MAAM,WAAW,GAAG,IAAA,6BAAe,EAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,eAAe;gBACtB,IAAI,EAAE,eAAe;aACtB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oCAAoC,YAAY,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,qCAAqC,YAAY,sBAAsB,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAA,uBAAS,EAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,qBAAqB;gBAC5B,IAAI,EAAE,SAAS;aAChB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,2CAA2C,YAAY,GAAG,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,qCAAqC,YAAY,yBAAyB,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,IAAI,EAAE,WAAW,CAAC,IAAI;SACvB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,IAAA,0BAAiB,GAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,aAAuB,EAAE,IAAc;IAChE,MAAM,OAAO,GAMR,EAAE,CAAC;IAER,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAA,6BAAe,EAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,IAAA,uBAAS,EAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/C,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,iBAAiB,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -1,13 +1,27 @@
 /**
  * Configuration management for Dossier CLI
  * Handles reading and writing user preferences to ~/.dossier/config.json
+ * and multi-registry configuration.
  */
+export interface RegistryEntry {
+    url: string;
+    default?: boolean;
+    readonly?: boolean;
+}
 export interface DossierConfig {
     defaultLlm: string;
     theme: string;
     auditLog: boolean;
+    registries?: Record<string, RegistryEntry>;
+    defaultRegistry?: string;
     [key: string]: unknown;
 }
+export interface ResolvedRegistry {
+    name: string;
+    url: string;
+    readonly?: boolean;
+}
+declare const DEFAULT_REGISTRY_URL = "https://dossier-registry.vercel.app";
 declare const CONFIG_DIR: string;
 declare const CONFIG_FILE: string;
 declare const DEFAULT_CONFIG: DossierConfig;
@@ -31,5 +45,28 @@ declare function getConfig(key: string): unknown;
  * Set a specific config value
  */
 declare function setConfig(key: string, value: unknown): boolean;
-export { ensureConfigDir, loadConfig, saveConfig, getConfig, setConfig, CONFIG_DIR, CONFIG_FILE, DEFAULT_CONFIG, };
+/**
+ * Load project-level .dossierrc.json by walking up from cwd.
+ */
+declare function loadProjectConfig(): DossierConfig | null;
+/**
+ * Resolve all configured registries, merging user + project config.
+ * Resolution priority:
+ *   1. CLI --registry flag (handled by caller)
+ *   2. DOSSIER_REGISTRY_URL env var → virtual "env" registry
+ *   3. Project-level .dossierrc.json
+ *   4. User-level ~/.dossier/config.json
+ *   5. Hardcoded default (public registry)
+ */
+declare function resolveRegistries(): ResolvedRegistry[];
+/**
+ * Resolve which single registry to use for write operations.
+ * Priority: --registry flag > defaultRegistry (project > user) > first registry
+ */
+declare function resolveWriteRegistry(registryFlag?: string): ResolvedRegistry;
+/**
+ * Resolve a single registry by name (for auth commands).
+ */
+declare function resolveRegistryByName(name: string): ResolvedRegistry;
+export { ensureConfigDir, loadConfig, saveConfig, getConfig, setConfig, loadProjectConfig, resolveRegistries, resolveWriteRegistry, resolveRegistryByName, CONFIG_DIR, CONFIG_FILE, DEFAULT_CONFIG, DEFAULT_REGISTRY_URL, };
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,QAAA,MAAM,UAAU,QAAsC,CAAC;AACvD,QAAA,MAAM,WAAW,QAAuC,CAAC;AAEzD,QAAA,MAAM,cAAc,EAAE,aAIrB,CAAC;AAEF;;GAEG;AACH,iBAAS,eAAe,IAAI,IAAI,CAI/B;AAED;;GAEG;AACH,iBAAS,UAAU,IAAI,aAAa,CAenC;AAED;;GAEG;AACH,iBAAS,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAYlD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGvC;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAIvD;AAED,OAAO,EACL,eAAe,EACf,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,UAAU,EACV,WAAW,EACX,cAAc,GACf,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,QAAA,MAAM,oBAAoB,wCAAwC,CAAC;AAEnE,QAAA,MAAM,UAAU,QAAsC,CAAC;AACvD,QAAA,MAAM,WAAW,QAAuC,CAAC;AAEzD,QAAA,MAAM,cAAc,EAAE,aAIrB,CAAC;AAEF;;GAEG;AACH,iBAAS,eAAe,IAAI,IAAI,CAI/B;AAED;;GAEG;AACH,iBAAS,UAAU,IAAI,aAAa,CAenC;AAED;;GAEG;AACH,iBAAS,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAYlD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGvC;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAIvD;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,aAAa,GAAG,IAAI,CAiBjD;AAED;;;;;;;;GAQG;AACH,iBAAS,iBAAiB,IAAI,gBAAgB,EAAE,CAuC/C;AAED;;;GAGG;AACH,iBAAS,oBAAoB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,gBAAgB,CA4CrE;AAED;;GAEG;AACH,iBAAS,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAQ7D;AAED,OAAO,EACL,eAAe,EACf,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,cAAc,EACd,oBAAoB,GACrB,CAAC"}

package/dist/config.js

@@ -2,20 +2,27 @@
 /**
  * Configuration management for Dossier CLI
  * Handles reading and writing user preferences to ~/.dossier/config.json
+ * and multi-registry configuration.
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_CONFIG = exports.CONFIG_FILE = exports.CONFIG_DIR = void 0;
+exports.DEFAULT_REGISTRY_URL = exports.DEFAULT_CONFIG = exports.CONFIG_FILE = exports.CONFIG_DIR = void 0;
 exports.ensureConfigDir = ensureConfigDir;
 exports.loadConfig = loadConfig;
 exports.saveConfig = saveConfig;
 exports.getConfig = getConfig;
 exports.setConfig = setConfig;
+exports.loadProjectConfig = loadProjectConfig;
+exports.resolveRegistries = resolveRegistries;
+exports.resolveWriteRegistry = resolveWriteRegistry;
+exports.resolveRegistryByName = resolveRegistryByName;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
+const DEFAULT_REGISTRY_URL = 'https://dossier-registry.vercel.app';
+exports.DEFAULT_REGISTRY_URL = DEFAULT_REGISTRY_URL;
 const CONFIG_DIR = node_path_1.default.join(node_os_1.default.homedir(), '.dossier');
 exports.CONFIG_DIR = CONFIG_DIR;
 const CONFIG_FILE = node_path_1.default.join(CONFIG_DIR, 'config.json');
@@ -84,4 +91,124 @@ function setConfig(key, value) {
     config[key] = value;
     return saveConfig(config);
 }
+/**
+ * Load project-level .dossierrc.json by walking up from cwd.
+ */
+function loadProjectConfig() {
+    let dir = process.cwd();
+    const root = node_path_1.default.parse(dir).root;
+    while (dir !== root) {
+        const rcFile = node_path_1.default.join(dir, '.dossierrc.json');
+        if (node_fs_1.default.existsSync(rcFile)) {
+            try {
+                return JSON.parse(node_fs_1.default.readFileSync(rcFile, 'utf8'));
+            }
+            catch {
+                console.error(`⚠️  Warning: Invalid .dossierrc.json at ${rcFile}`);
+                return null;
+            }
+        }
+        dir = node_path_1.default.dirname(dir);
+    }
+    return null;
+}
+/**
+ * Resolve all configured registries, merging user + project config.
+ * Resolution priority:
+ *   1. CLI --registry flag (handled by caller)
+ *   2. DOSSIER_REGISTRY_URL env var → virtual "env" registry
+ *   3. Project-level .dossierrc.json
+ *   4. User-level ~/.dossier/config.json
+ *   5. Hardcoded default (public registry)
+ */
+function resolveRegistries() {
+    const userConfig = loadConfig();
+    const projectConfig = loadProjectConfig();
+    // Merge registries: project overlays user (project wins on name conflicts)
+    const merged = {};
+    if (userConfig.registries) {
+        for (const [name, entry] of Object.entries(userConfig.registries)) {
+            merged[name] = entry;
+        }
+    }
+    if (projectConfig?.registries) {
+        for (const [name, entry] of Object.entries(projectConfig.registries)) {
+            if (name in merged) {
+                // Project config cannot override user-configured registries (credential exfiltration vector)
+                continue;
+            }
+            merged[name] = entry;
+        }
+    }
+    // DOSSIER_REGISTRY_URL env var creates a virtual "env" registry
+    const envUrl = process.env.DOSSIER_REGISTRY_URL;
+    if (envUrl) {
+        merged.env = { url: envUrl };
+    }
+    // If no registries configured at all, use hardcoded default
+    if (Object.keys(merged).length === 0) {
+        return [{ name: 'public', url: DEFAULT_REGISTRY_URL }];
+    }
+    return Object.entries(merged).map(([name, entry]) => ({
+        name,
+        url: entry.url,
+        readonly: entry.readonly,
+    }));
+}
+/**
+ * Resolve which single registry to use for write operations.
+ * Priority: --registry flag > defaultRegistry (project > user) > first registry
+ */
+function resolveWriteRegistry(registryFlag) {
+    const registries = resolveRegistries();
+    if (registryFlag) {
+        const found = registries.find((r) => r.name === registryFlag);
+        if (!found) {
+            const names = registries.map((r) => r.name).join(', ');
+            throw new Error(`Registry '${registryFlag}' not found. Available: ${names}`);
+        }
+        if (found.readonly) {
+            throw new Error(`Registry '${registryFlag}' is read-only`);
+        }
+        return found;
+    }
+    // Check defaultRegistry in project config first, then user config
+    const projectConfig = loadProjectConfig();
+    const userConfig = loadConfig();
+    const defaultName = projectConfig?.defaultRegistry || userConfig.defaultRegistry;
+    if (defaultName) {
+        const found = registries.find((r) => r.name === defaultName);
+        if (found) {
+            if (found.readonly) {
+                throw new Error(`Default registry '${defaultName}' is read-only`);
+            }
+            return found;
+        }
+    }
+    // Find first registry marked as default
+    for (const reg of registries) {
+        const allConfigs = { ...userConfig.registries, ...projectConfig?.registries };
+        const entry = allConfigs[reg.name];
+        if (entry?.default && !reg.readonly) {
+            return reg;
+        }
+    }
+    // Fall back to first non-readonly registry
+    const writable = registries.find((r) => !r.readonly);
+    if (writable)
+        return writable;
+    throw new Error('No writable registry configured. All registries are read-only.');
+}
+/**
+ * Resolve a single registry by name (for auth commands).
+ */
+function resolveRegistryByName(name) {
+    const registries = resolveRegistries();
+    const found = registries.find((r) => r.name === name);
+    if (!found) {
+        const names = registries.map((r) => r.name).join(', ');
+        throw new Error(`Registry '${name}' not found. Available: ${names}`);
+    }
+    return found;
+}
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAsFD,0CAAe;AACf,gCAAU;AACV,gCAAU;AACV,8BAAS;AACT,8BAAS;AAxFX,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAS7B,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AA8ErD,gCAAU;AA7EZ,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AA8EvD,kCAAW;AA5Eb,MAAM,cAAc,GAAkB;IACpC,UAAU,EAAE,MAAM;IAClB,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,IAAI;CACf,CAAC;AAyEA,wCAAc;AAvEhB;;GAEG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,UAAU,GAAG,iBAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAqB;IACvC,IAAI,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,iBAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AA6OD,0CAAe;AACf,gCAAU;AACV,gCAAU;AACV,8BAAS;AACT,8BAAS;AACT,8CAAiB;AACjB,8CAAiB;AACjB,oDAAoB;AACpB,sDAAqB;AAnPvB,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAuB7B,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AA8NjE,oDAAoB;AA5NtB,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAyNrD,gCAAU;AAxNZ,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAyNvD,kCAAW;AAvNb,MAAM,cAAc,GAAkB;IACpC,UAAU,EAAE,MAAM;IAClB,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,IAAI;CACf,CAAC;AAoNA,wCAAc;AAlNhB;;GAEG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,UAAU,GAAG,iBAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAqB;IACvC,IAAI,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,iBAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,mBAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAElC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACjD,IAAI,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAE1C,2EAA2E;IAC3E,MAAM,MAAM,GAAkC,EAAE,CAAC;IAEjD,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,UAAU,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBACnB,6FAA6F;gBAC7F,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,4DAA4D;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,YAAqB;IACjD,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IAEvC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,aAAa,YAAY,2BAA2B,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,aAAa,YAAY,gBAAgB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kEAAkE;IAClE,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,aAAa,EAAE,eAAe,IAAI,UAAU,CAAC,eAAe,CAAC;IAEjF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC7D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,WAAW,gBAAgB,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,GAAG,aAAa,EAAE,UAAU,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/credentials.d.ts

@@ -1,6 +1,7 @@
 /**
  * Credential storage for Dossier registry authentication.
- * Stores credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Stores per-registry credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Auto-migrates old flat format to keyed-by-registry format.
  */
 export interface Credentials {
     token: string;
@@ -10,20 +11,25 @@ export interface Credentials {
 }
 declare const CREDENTIALS_FILE: string;
 /**
- * Save credentials to file with secure permissions (0600).
+ * Save credentials for a specific registry.
  */
-declare function saveCredentials(credentials: Credentials): void;
+declare function saveCredentials(credentials: Credentials, registryName?: string): void;
 /**
- * Load credentials from file.
+ * Load credentials for a specific registry.
+ * Falls back to "public" for backward compatibility.
  */
-declare function loadCredentials(): Credentials | null;
+declare function loadCredentials(registryName?: string): Credentials | null;
 /**
- * Delete the credentials file.
+ * Delete credentials for a specific registry, or all if no name given.
  */
-declare function deleteCredentials(): boolean;
+declare function deleteCredentials(registryName?: string): boolean;
 /**
  * Check if credentials are expired.
  */
 declare function isExpired(credentials: Pick<Credentials, 'expiresAt'>): boolean;
-export { CREDENTIALS_FILE, saveCredentials, loadCredentials, deleteCredentials, isExpired };
+/**
+ * List all registries that have stored credentials.
+ */
+declare function listCredentialRegistries(): string[];
+export { CREDENTIALS_FILE, saveCredentials, loadCredentials, deleteCredentials, isExpired, listCredentialRegistries, };
 //# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,QAAA,MAAM,gBAAgB,QAA4C,CAAC;AAWnE;;GAEG;AACH,iBAAS,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CASvD;AAED;;GAEG;AACH,iBAAS,eAAe,IAAI,WAAW,GAAG,IAAI,CA8B7C;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,OAAO,CAMpC;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,OAAO,CAUvE;AAED,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,QAAA,MAAM,gBAAgB,QAA4C,CAAC;AA8GnE;;GAEG;AACH,iBAAS,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,SAAW,GAAG,IAAI,CAIhF;AAED;;;GAGG;AACH,iBAAS,eAAe,CAAC,YAAY,SAAW,GAAG,WAAW,GAAG,IAAI,CAGpE;AAED;;GAEG;AACH,iBAAS,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAiBzD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,OAAO,CASvE;AAED;;GAEG;AACH,iBAAS,wBAAwB,IAAI,MAAM,EAAE,CAG5C;AAED,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,wBAAwB,GACzB,CAAC"}

package/dist/credentials.js

@@ -1,7 +1,8 @@
 "use strict";
 /**
  * Credential storage for Dossier registry authentication.
- * Stores credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Stores per-registry credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Auto-migrates old flat format to keyed-by-registry format.
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
@@ -12,6 +13,7 @@ exports.saveCredentials = saveCredentials;
 exports.loadCredentials = loadCredentials;
 exports.deleteCredentials = deleteCredentials;
 exports.isExpired = isExpired;
+exports.listCredentialRegistries = listCredentialRegistries;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const config_1 = require("./config");
@@ -26,22 +28,9 @@ function ensureConfigDir() {
     }
 }
 /**
- * Save credentials to file with secure permissions (0600).
+ * Read and parse the credentials file, returning the raw JSON.
  */
-function saveCredentials(credentials) {
-    ensureConfigDir();
-    const data = {
-        token: credentials.token,
-        username: credentials.username,
-        orgs: credentials.orgs || [],
-        expires_at: credentials.expiresAt || null,
-    };
-    node_fs_1.default.writeFileSync(CREDENTIALS_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
-}
-/**
- * Load credentials from file.
- */
-function loadCredentials() {
+function readCredentialsFile() {
     if (!node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
         return null;
     }
@@ -54,31 +43,117 @@ function loadCredentials() {
                 `Expected 0600. Credentials may have been compromised. Fixing permissions.`);
             node_fs_1.default.chmodSync(CREDENTIALS_FILE, 0o600);
         }
-        const raw = node_fs_1.default.readFileSync(CREDENTIALS_FILE, 'utf8');
-        const data = JSON.parse(raw);
-        if (!data.token || !data.username) {
-            return null;
-        }
-        return {
-            token: data.token,
-            username: data.username,
-            orgs: data.orgs || [],
-            expiresAt: data.expires_at || null,
-        };
+        return JSON.parse(node_fs_1.default.readFileSync(CREDENTIALS_FILE, 'utf8'));
     }
     catch {
         return null;
     }
 }
 /**
- * Delete the credentials file.
+ * Detect whether the credentials file uses old flat format.
+ * Old format has `token` and `username` at the top level.
  */
-function deleteCredentials() {
-    if (node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
-        node_fs_1.default.unlinkSync(CREDENTIALS_FILE);
-        return true;
+function isOldFormat(data) {
+    return typeof data.token === 'string' && typeof data.username === 'string';
+}
+/**
+ * Load the full credentials store, auto-migrating old format if needed.
+ */
+function loadCredentialsStore() {
+    // Check env var first — creates virtual credentials for "env" registry
+    const envToken = process.env.DOSSIER_REGISTRY_TOKEN;
+    const raw = readCredentialsFile();
+    const store = {};
+    if (raw) {
+        if (isOldFormat(raw)) {
+            // Auto-migrate: flat → keyed by "public"
+            store.public = {
+                token: raw.token,
+                username: raw.username,
+                orgs: raw.orgs || [],
+                expiresAt: raw.expires_at || null,
+            };
+            // Write back migrated format
+            saveCredentialsStore(store);
+        }
+        else {
+            // New format: each key is a registry name
+            for (const [name, value] of Object.entries(raw)) {
+                const entry = value;
+                if (entry && typeof entry.token === 'string' && typeof entry.username === 'string') {
+                    store[name] = {
+                        token: entry.token,
+                        username: entry.username,
+                        orgs: entry.orgs || [],
+                        expiresAt: entry.expires_at || entry.expiresAt || null,
+                    };
+                }
+            }
+        }
+    }
+    if (envToken) {
+        store.env = {
+            token: envToken,
+            username: process.env.DOSSIER_REGISTRY_USER || 'token-auth',
+            orgs: process.env.DOSSIER_REGISTRY_ORGS ? process.env.DOSSIER_REGISTRY_ORGS.split(',') : [],
+            expiresAt: null,
+        };
+    }
+    return store;
+}
+/**
+ * Save the full credentials store to file.
+ */
+function saveCredentialsStore(store) {
+    ensureConfigDir();
+    const data = {};
+    for (const [name, creds] of Object.entries(store)) {
+        if (name === 'env')
+            continue; // Don't persist env-var credentials
+        data[name] = {
+            token: creds.token,
+            username: creds.username,
+            orgs: creds.orgs || [],
+            expires_at: creds.expiresAt || null,
+        };
+    }
+    node_fs_1.default.writeFileSync(CREDENTIALS_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
+}
+/**
+ * Save credentials for a specific registry.
+ */
+function saveCredentials(credentials, registryName = 'public') {
+    const store = loadCredentialsStore();
+    store[registryName] = credentials;
+    saveCredentialsStore(store);
+}
+/**
+ * Load credentials for a specific registry.
+ * Falls back to "public" for backward compatibility.
+ */
+function loadCredentials(registryName = 'public') {
+    const store = loadCredentialsStore();
+    return store[registryName] || null;
+}
+/**
+ * Delete credentials for a specific registry, or all if no name given.
+ */
+function deleteCredentials(registryName) {
+    if (!registryName) {
+        // Delete entire file (backward compat)
+        if (node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
+            node_fs_1.default.unlinkSync(CREDENTIALS_FILE);
+            return true;
+        }
+        return false;
+    }
+    const store = loadCredentialsStore();
+    if (!(registryName in store)) {
+        return false;
     }
-    return false;
+    delete store[registryName];
+    saveCredentialsStore(store);
+    return true;
 }
 /**
  * Check if credentials are expired.
@@ -87,12 +162,17 @@ function isExpired(credentials) {
     if (!credentials.expiresAt) {
         return false;
     }
-    try {
-        const expires = new Date(credentials.expiresAt);
-        return Date.now() > expires.getTime();
-    }
-    catch {
-        return false;
+    const expires = new Date(credentials.expiresAt);
+    if (Number.isNaN(expires.getTime())) {
+        return true;
     }
+    return Date.now() > expires.getTime();
+}
+/**
+ * List all registries that have stored credentials.
+ */
+function listCredentialRegistries() {
+    const store = loadCredentialsStore();
+    return Object.keys(store);
 }
 //# sourceMappingURL=credentials.js.map