@ai-dossier/cli 0.4.1 → 0.5.0

package/dist/config.js

@@ -2,20 +2,27 @@
 /**
  * Configuration management for Dossier CLI
  * Handles reading and writing user preferences to ~/.dossier/config.json
+ * and multi-registry configuration.
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_CONFIG = exports.CONFIG_FILE = exports.CONFIG_DIR = void 0;
+exports.DEFAULT_REGISTRY_URL = exports.DEFAULT_CONFIG = exports.CONFIG_FILE = exports.CONFIG_DIR = void 0;
 exports.ensureConfigDir = ensureConfigDir;
 exports.loadConfig = loadConfig;
 exports.saveConfig = saveConfig;
 exports.getConfig = getConfig;
 exports.setConfig = setConfig;
+exports.loadProjectConfig = loadProjectConfig;
+exports.resolveRegistries = resolveRegistries;
+exports.resolveWriteRegistry = resolveWriteRegistry;
+exports.resolveRegistryByName = resolveRegistryByName;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
+const DEFAULT_REGISTRY_URL = 'https://dossier-registry.vercel.app';
+exports.DEFAULT_REGISTRY_URL = DEFAULT_REGISTRY_URL;
 const CONFIG_DIR = node_path_1.default.join(node_os_1.default.homedir(), '.dossier');
 exports.CONFIG_DIR = CONFIG_DIR;
 const CONFIG_FILE = node_path_1.default.join(CONFIG_DIR, 'config.json');
@@ -47,8 +54,8 @@ function loadConfig() {
         // Merge with defaults to ensure all keys exist
         return { ...DEFAULT_CONFIG, ...config };
     }
-    catch (_error) {
-        console.error('⚠️  Warning: Could not read config file, using defaults');
+    catch (error) {
+        console.error(`⚠️  Warning: Could not read config file (${error.message}), using defaults`);
         return { ...DEFAULT_CONFIG };
     }
 }
@@ -84,4 +91,127 @@ function setConfig(key, value) {
     config[key] = value;
     return saveConfig(config);
 }
+/**
+ * Load project-level .dossierrc.json by walking up from cwd.
+ */
+function loadProjectConfig() {
+    let dir = process.cwd();
+    const root = node_path_1.default.parse(dir).root;
+    while (dir !== root) {
+        const rcFile = node_path_1.default.join(dir, '.dossierrc.json');
+        if (node_fs_1.default.existsSync(rcFile)) {
+            try {
+                return JSON.parse(node_fs_1.default.readFileSync(rcFile, 'utf8'));
+            }
+            catch {
+                console.error(`⚠️  Warning: Invalid .dossierrc.json at ${rcFile}`);
+                return null;
+            }
+        }
+        dir = node_path_1.default.dirname(dir);
+    }
+    return null;
+}
+/**
+ * Resolve all configured registries, merging user + project config.
+ * Resolution priority:
+ *   1. CLI --registry flag (handled by caller)
+ *   2. DOSSIER_REGISTRY_URL env var → virtual "env" registry
+ *   3. Project-level .dossierrc.json
+ *   4. User-level ~/.dossier/config.json
+ *   5. Hardcoded default (public registry)
+ */
+/**
+ * Internal: resolve registries from pre-loaded configs (avoids redundant file reads).
+ */
+function resolveRegistriesFromConfig(userConfig, projectConfig) {
+    // Merge registries: project overlays user (project wins on name conflicts)
+    const merged = {};
+    if (userConfig.registries) {
+        for (const [name, entry] of Object.entries(userConfig.registries)) {
+            merged[name] = entry;
+        }
+    }
+    if (projectConfig?.registries) {
+        for (const [name, entry] of Object.entries(projectConfig.registries)) {
+            if (name in merged) {
+                // Project config cannot override user-configured registries (credential exfiltration vector)
+                continue;
+            }
+            merged[name] = entry;
+        }
+    }
+    // DOSSIER_REGISTRY_URL env var creates a virtual "env" registry
+    const envUrl = process.env.DOSSIER_REGISTRY_URL;
+    if (envUrl) {
+        merged.env = { url: envUrl };
+    }
+    // If no registries configured at all, use hardcoded default
+    if (Object.keys(merged).length === 0) {
+        return [{ name: 'public', url: DEFAULT_REGISTRY_URL }];
+    }
+    return Object.entries(merged).map(([name, entry]) => ({
+        name,
+        url: entry.url,
+        readonly: entry.readonly,
+    }));
+}
+function resolveRegistries() {
+    return resolveRegistriesFromConfig(loadConfig(), loadProjectConfig());
+}
+/**
+ * Resolve which single registry to use for write operations.
+ * Priority: --registry flag > defaultRegistry (project > user) > first registry
+ */
+function resolveWriteRegistry(registryFlag) {
+    const userConfig = loadConfig();
+    const projectConfig = loadProjectConfig();
+    const registries = resolveRegistriesFromConfig(userConfig, projectConfig);
+    if (registryFlag) {
+        const found = registries.find((r) => r.name === registryFlag);
+        if (!found) {
+            const names = registries.map((r) => r.name).join(', ');
+            throw new Error(`Registry '${registryFlag}' not found. Available: ${names}. Run 'dossier config --list-registries' to see configured registries.`);
+        }
+        if (found.readonly) {
+            throw new Error(`Registry '${registryFlag}' is read-only`);
+        }
+        return found;
+    }
+    const defaultName = projectConfig?.defaultRegistry || userConfig.defaultRegistry;
+    if (defaultName) {
+        const found = registries.find((r) => r.name === defaultName);
+        if (found) {
+            if (found.readonly) {
+                throw new Error(`Default registry '${defaultName}' is read-only`);
+            }
+            return found;
+        }
+    }
+    // Find first registry marked as default
+    for (const reg of registries) {
+        const allConfigs = { ...userConfig.registries, ...projectConfig?.registries };
+        const entry = allConfigs[reg.name];
+        if (entry?.default && !reg.readonly) {
+            return reg;
+        }
+    }
+    // Fall back to first non-readonly registry
+    const writable = registries.find((r) => !r.readonly);
+    if (writable)
+        return writable;
+    throw new Error('No writable registry configured. All registries are read-only.');
+}
+/**
+ * Resolve a single registry by name (for auth commands).
+ */
+function resolveRegistryByName(name) {
+    const registries = resolveRegistries();
+    const found = registries.find((r) => r.name === name);
+    if (!found) {
+        const names = registries.map((r) => r.name).join(', ');
+        throw new Error(`Registry '${name}' not found. Available: ${names}`);
+    }
+    return found;
+}
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAsFD,0CAAe;AACf,gCAAU;AACV,gCAAU;AACV,8BAAS;AACT,8BAAS;AAxFX,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAS7B,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AA8ErD,gCAAU;AA7EZ,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AA8EvD,kCAAW;AA5Eb,MAAM,cAAc,GAAkB;IACpC,UAAU,EAAE,MAAM;IAClB,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,IAAI;CACf,CAAC;AAyEA,wCAAc;AAvEhB;;GAEG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,UAAU,GAAG,iBAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAqB;IACvC,IAAI,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,iBAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AAuPD,0CAAe;AACf,gCAAU;AACV,gCAAU;AACV,8BAAS;AACT,8BAAS;AACT,8CAAiB;AACjB,8CAAiB;AACjB,oDAAoB;AACpB,sDAAqB;AA7PvB,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAuB7B,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AAwOjE,oDAAoB;AAtOtB,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAmOrD,gCAAU;AAlOZ,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAmOvD,kCAAW;AAjOb,MAAM,cAAc,GAAkB;IACpC,UAAU,EAAE,MAAM;IAClB,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,IAAI;CACf,CAAC;AA8NA,wCAAc;AA5NhB;;GAEG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,UAAU,GAAG,iBAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,4CAA6C,KAAe,CAAC,OAAO,mBAAmB,CACxF,CAAC;QACF,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAqB;IACvC,IAAI,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,iBAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,mBAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAElC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACjD,IAAI,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH;;GAEG;AACH,SAAS,2BAA2B,CAClC,UAAyB,EACzB,aAAmC;IAEnC,2EAA2E;IAC3E,MAAM,MAAM,GAAkC,EAAE,CAAC;IAEjD,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,UAAU,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBACnB,6FAA6F;gBAC7F,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,4DAA4D;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,2BAA2B,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,YAAqB;IACjD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,2BAA2B,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAE1E,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,2BAA2B,KAAK,wEAAwE,CAClI,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,aAAa,YAAY,gBAAgB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,EAAE,eAAe,IAAI,UAAU,CAAC,eAAe,CAAC;IAEjF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC7D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,WAAW,gBAAgB,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,GAAG,aAAa,EAAE,UAAU,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/credentials.d.ts

@@ -1,6 +1,7 @@
 /**
  * Credential storage for Dossier registry authentication.
- * Stores credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Stores per-registry credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Auto-migrates old flat format to keyed-by-registry format.
  */
 export interface Credentials {
     token: string;
@@ -10,21 +11,25 @@ export interface Credentials {
 }
 declare const CREDENTIALS_FILE: string;
 /**
- * Save credentials to file with secure permissions (0600).
+ * Save credentials for a specific registry.
  */
-declare function saveCredentials(credentials: Credentials): void;
+declare function saveCredentials(credentials: Credentials, registryName?: string): void;
 /**
- * Load credentials from file or DOSSIER_REGISTRY_TOKEN env var.
- * The env var takes precedence when set.
+ * Load credentials for a specific registry.
+ * Falls back to "public" for backward compatibility.
  */
-declare function loadCredentials(): Credentials | null;
+declare function loadCredentials(registryName?: string): Credentials | null;
 /**
- * Delete the credentials file.
+ * Delete credentials for a specific registry, or all if no name given.
  */
-declare function deleteCredentials(): boolean;
+declare function deleteCredentials(registryName?: string): boolean;
 /**
  * Check if credentials are expired.
  */
 declare function isExpired(credentials: Pick<Credentials, 'expiresAt'>): boolean;
-export { CREDENTIALS_FILE, saveCredentials, loadCredentials, deleteCredentials, isExpired };
+/**
+ * List all registries that have stored credentials.
+ */
+declare function listCredentialRegistries(): string[];
+export { CREDENTIALS_FILE, saveCredentials, loadCredentials, deleteCredentials, isExpired, listCredentialRegistries, };
 //# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,QAAA,MAAM,gBAAgB,QAA4C,CAAC;AAWnE;;GAEG;AACH,iBAAS,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CASvD;AAED;;;GAGG;AACH,iBAAS,eAAe,IAAI,WAAW,GAAG,IAAI,CAwC7C;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,OAAO,CAMpC;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,OAAO,CAUvE;AAED,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,QAAA,MAAM,gBAAgB,QAA4C,CAAC;AA8GnE;;GAEG;AACH,iBAAS,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,SAAW,GAAG,IAAI,CAIhF;AAED;;;GAGG;AACH,iBAAS,eAAe,CAAC,YAAY,SAAW,GAAG,WAAW,GAAG,IAAI,CAGpE;AAED;;GAEG;AACH,iBAAS,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAiBzD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,OAAO,CASvE;AAED;;GAEG;AACH,iBAAS,wBAAwB,IAAI,MAAM,EAAE,CAG5C;AAED,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,wBAAwB,GACzB,CAAC"}

package/dist/credentials.js

@@ -1,7 +1,8 @@
 "use strict";
 /**
  * Credential storage for Dossier registry authentication.
- * Stores credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Stores per-registry credentials at ~/.dossier/credentials.json with secure file permissions.
+ * Auto-migrates old flat format to keyed-by-registry format.
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
@@ -12,83 +13,145 @@ exports.saveCredentials = saveCredentials;
 exports.loadCredentials = loadCredentials;
 exports.deleteCredentials = deleteCredentials;
 exports.isExpired = isExpired;
+exports.listCredentialRegistries = listCredentialRegistries;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const config_1 = require("./config");
 const CREDENTIALS_FILE = node_path_1.default.join(config_1.CONFIG_DIR, 'credentials.json');
 exports.CREDENTIALS_FILE = CREDENTIALS_FILE;
 /**
- * Ensure the config directory exists.
+ * Read and parse the credentials file, returning the raw JSON.
  */
-function ensureConfigDir() {
-    if (!node_fs_1.default.existsSync(config_1.CONFIG_DIR)) {
-        node_fs_1.default.mkdirSync(config_1.CONFIG_DIR, { recursive: true, mode: 0o700 });
+function readCredentialsFile() {
+    if (!node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
+        return null;
+    }
+    try {
+        // Verify file permissions haven't been loosened
+        const stats = node_fs_1.default.statSync(CREDENTIALS_FILE);
+        const otherPerms = stats.mode & 0o077;
+        if (otherPerms !== 0) {
+            console.error(`⚠️  Warning: ${CREDENTIALS_FILE} has insecure permissions (${(stats.mode & 0o777).toString(8)}). ` +
+                `Expected 0600. Credentials may have been compromised. Fixing permissions.`);
+            node_fs_1.default.chmodSync(CREDENTIALS_FILE, 0o600);
+        }
+        return JSON.parse(node_fs_1.default.readFileSync(CREDENTIALS_FILE, 'utf8'));
+    }
+    catch (error) {
+        console.error(`⚠️  Warning: Could not parse credentials file ${CREDENTIALS_FILE} (${error.message})`);
+        return null;
     }
 }
 /**
- * Save credentials to file with secure permissions (0600).
+ * Detect whether the credentials file uses old flat format.
+ * Old format has `token` and `username` at the top level.
  */
-function saveCredentials(credentials) {
-    ensureConfigDir();
-    const data = {
-        token: credentials.token,
-        username: credentials.username,
-        orgs: credentials.orgs || [],
-        expires_at: credentials.expiresAt || null,
-    };
-    node_fs_1.default.writeFileSync(CREDENTIALS_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
+function isOldFormat(data) {
+    return typeof data.token === 'string' && typeof data.username === 'string';
 }
 /**
- * Load credentials from file or DOSSIER_REGISTRY_TOKEN env var.
- * The env var takes precedence when set.
+ * Load the full credentials store, auto-migrating old format if needed.
  */
-function loadCredentials() {
+function loadCredentialsStore() {
+    // Check env var first — creates virtual credentials for "env" registry
     const envToken = process.env.DOSSIER_REGISTRY_TOKEN;
+    const raw = readCredentialsFile();
+    const store = {};
+    if (raw) {
+        if (isOldFormat(raw)) {
+            // Auto-migrate: flat → keyed by "public"
+            store.public = {
+                token: raw.token,
+                username: raw.username,
+                orgs: raw.orgs || [],
+                expiresAt: raw.expires_at || null,
+            };
+            // Write back migrated format
+            saveCredentialsStore(store);
+        }
+        else {
+            // New format: each key is a registry name
+            for (const [name, value] of Object.entries(raw)) {
+                const entry = value;
+                if (entry && typeof entry.token === 'string' && typeof entry.username === 'string') {
+                    store[name] = {
+                        token: entry.token,
+                        username: entry.username,
+                        orgs: entry.orgs || [],
+                        expiresAt: entry.expires_at || entry.expiresAt || null,
+                    };
+                }
+            }
+        }
+    }
     if (envToken) {
-        return {
+        store.env = {
             token: envToken,
             username: process.env.DOSSIER_REGISTRY_USER || 'token-auth',
             orgs: process.env.DOSSIER_REGISTRY_ORGS ? process.env.DOSSIER_REGISTRY_ORGS.split(',') : [],
             expiresAt: null,
         };
     }
-    if (!node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
-        return null;
+    return store;
+}
+/**
+ * Save the full credentials store to file.
+ */
+function saveCredentialsStore(store) {
+    (0, config_1.ensureConfigDir)();
+    const data = {};
+    for (const [name, creds] of Object.entries(store)) {
+        if (name === 'env')
+            continue; // Don't persist env-var credentials
+        data[name] = {
+            token: creds.token,
+            username: creds.username,
+            orgs: creds.orgs || [],
+            expires_at: creds.expiresAt || null,
+        };
     }
     try {
-        // Verify file permissions haven't been loosened
-        const stats = node_fs_1.default.statSync(CREDENTIALS_FILE);
-        const otherPerms = stats.mode & 0o077;
-        if (otherPerms !== 0) {
-            console.error(`⚠️  Warning: ${CREDENTIALS_FILE} has insecure permissions (${(stats.mode & 0o777).toString(8)}). ` +
-                `Expected 0600. Credentials may have been compromised. Fixing permissions.`);
-            node_fs_1.default.chmodSync(CREDENTIALS_FILE, 0o600);
-        }
-        const raw = node_fs_1.default.readFileSync(CREDENTIALS_FILE, 'utf8');
-        const data = JSON.parse(raw);
-        if (!data.token || !data.username) {
-            return null;
-        }
-        return {
-            token: data.token,
-            username: data.username,
-            orgs: data.orgs || [],
-            expiresAt: data.expires_at || null,
-        };
+        node_fs_1.default.writeFileSync(CREDENTIALS_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
     }
-    catch {
-        return null;
+    catch (error) {
+        throw new Error(`Failed to save credentials to ${CREDENTIALS_FILE}: ${error.message}`);
     }
 }
 /**
- * Delete the credentials file.
+ * Save credentials for a specific registry.
  */
-function deleteCredentials() {
-    if (node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
-        node_fs_1.default.unlinkSync(CREDENTIALS_FILE);
-        return true;
+function saveCredentials(credentials, registryName = 'public') {
+    const store = loadCredentialsStore();
+    store[registryName] = credentials;
+    saveCredentialsStore(store);
+}
+/**
+ * Load credentials for a specific registry.
+ * Falls back to "public" for backward compatibility.
+ */
+function loadCredentials(registryName = 'public') {
+    const store = loadCredentialsStore();
+    return store[registryName] || null;
+}
+/**
+ * Delete credentials for a specific registry, or all if no name given.
+ */
+function deleteCredentials(registryName) {
+    if (!registryName) {
+        // Delete entire file (backward compat)
+        if (node_fs_1.default.existsSync(CREDENTIALS_FILE)) {
+            node_fs_1.default.unlinkSync(CREDENTIALS_FILE);
+            return true;
+        }
+        return false;
     }
-    return false;
+    const store = loadCredentialsStore();
+    if (!(registryName in store)) {
+        return false;
+    }
+    delete store[registryName];
+    saveCredentialsStore(store);
+    return true;
 }
 /**
  * Check if credentials are expired.
@@ -97,12 +160,17 @@ function isExpired(credentials) {
     if (!credentials.expiresAt) {
         return false;
     }
-    try {
-        const expires = new Date(credentials.expiresAt);
-        return Date.now() > expires.getTime();
-    }
-    catch {
-        return false;
+    const expires = new Date(credentials.expiresAt);
+    if (Number.isNaN(expires.getTime())) {
+        return true;
     }
+    return Date.now() > expires.getTime();
+}
+/**
+ * List all registries that have stored credentials.
+ */
+function listCredentialRegistries() {
+    const store = loadCredentialsStore();
+    return Object.keys(store);
 }
 //# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AA8GwB,0CAAe;AAAE,0CAAe;AAAE,8CAAiB;AAAE,8BAAS;AA5GzF,sDAAyB;AACzB,0DAA6B;AAC7B,qCAAsC;AAStC,MAAM,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CAAC,mBAAU,EAAE,kBAAkB,CAAC,CAAC;AAiG1D,4CAAgB;AA/FzB;;GAEG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,mBAAU,CAAC,EAAE,CAAC;QAC/B,iBAAE,CAAC,SAAS,CAAC,mBAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,WAAwB;IAC/C,eAAe,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI;KAC1C,CAAC;IACF,iBAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,YAAY;YAC3D,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3F,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,gDAAgD;QAChD,MAAM,KAAK,GAAG,iBAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CACX,gBAAgB,gBAAgB,8BAA8B,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBACjG,2EAA2E,CAC9E,CAAC;YACF,iBAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;SACnC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,IAAI,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,WAA2C;IAC5D,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AA6LD,0CAAe;AACf,0CAAe;AACf,8CAAiB;AACjB,8BAAS;AACT,4DAAwB;AA/L1B,sDAAyB;AACzB,0DAA6B;AAC7B,qCAAuD;AAWvD,MAAM,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CAAC,mBAAU,EAAE,kBAAkB,CAAC,CAAC;AA6KjE,4CAAgB;AA3KlB;;GAEG;AACH,SAAS,mBAAmB;IAC1B,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,gDAAgD;QAChD,MAAM,KAAK,GAAG,iBAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CACX,gBAAgB,gBAAgB,8BAA8B,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBACjG,2EAA2E,CAC9E,CAAC;YACF,iBAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,iDAAiD,gBAAgB,KAAM,KAAe,CAAC,OAAO,GAAG,CAClG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAA6B;IAChD,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB;IAC3B,uEAAuE;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAEpD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAqB,EAAE,CAAC;IAEnC,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,yCAAyC;YACzC,KAAK,CAAC,MAAM,GAAG;gBACb,KAAK,EAAE,GAAG,CAAC,KAAe;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAkB;gBAChC,IAAI,EAAG,GAAG,CAAC,IAAiB,IAAI,EAAE;gBAClC,SAAS,EAAG,GAAG,CAAC,UAAqB,IAAI,IAAI;aAC9C,CAAC;YACF,6BAA6B;YAC7B,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,KAAK,GAAG,KAAgC,CAAC;gBAC/C,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACnF,KAAK,CAAC,IAAI,CAAC,GAAG;wBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,IAAI,EAAG,KAAK,CAAC,IAAiB,IAAI,EAAE;wBACpC,SAAS,EAAG,KAAK,CAAC,UAAqB,IAAK,KAAK,CAAC,SAAoB,IAAI,IAAI;qBAC/E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,GAAG;YACV,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,YAAY;YAC3D,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3F,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,KAAuB;IACnD,IAAA,wBAAe,GAAE,CAAC;IAClB,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,KAAK,KAAK;YAAE,SAAS,CAAC,oCAAoC;QAClE,IAAI,CAAC,IAAI,CAAC,GAAG;YACX,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,iBAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iCAAiC,gBAAgB,KAAM,KAAe,CAAC,OAAO,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,WAAwB,EAAE,YAAY,GAAG,QAAQ;IACxE,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,KAAK,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC;IAClC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,YAAY,GAAG,QAAQ;IAC9C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,YAAqB;IAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,uCAAuC;QACvC,IAAI,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3B,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,WAA2C;IAC5D,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB;IAC/B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/help.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Custom grouped help formatter for Commander.
+ * Groups commands by category instead of a flat list.
+ */
+import type { Command, Help } from 'commander';
+export declare function formatHelpGrouped(cmd: Command, helper: Help): string;
+//# sourceMappingURL=help.d.ts.map

package/dist/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAc/C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,MAAM,CA4EpE"}

package/dist/help.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Custom grouped help formatter for Commander.
+ * Groups commands by category instead of a flat list.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatHelpGrouped = formatHelpGrouped;
+const CATEGORIES = [
+    { name: 'Getting Started', commands: ['init', 'create', 'from-file'] },
+    { name: 'Verify & Run', commands: ['verify', 'run', 'validate', 'lint', 'format'] },
+    {
+        name: 'Registry',
+        commands: ['search', 'list', 'info', 'get', 'pull', 'export', 'publish', 'remove'],
+    },
+    { name: 'Skills', commands: ['install-skill', 'skill-export'] },
+    { name: 'Security', commands: ['sign', 'checksum', 'keys'] },
+    { name: 'Auth & Config', commands: ['login', 'logout', 'whoami', 'config', 'cache'] },
+];
+function formatHelpGrouped(cmd, helper) {
+    const termWidth = helper.padWidth(cmd, helper);
+    const helpWidth = helper.helpWidth || 80;
+    const itemIndentWidth = 2;
+    const itemSeparatorWidth = 2;
+    function formatItem(term, description) {
+        if (description) {
+            const fullText = `${term.padEnd(termWidth + itemSeparatorWidth)}${description}`;
+            return helper.wrap(fullText, helpWidth - itemIndentWidth, termWidth + itemSeparatorWidth);
+        }
+        return term;
+    }
+    function formatList(items) {
+        return items.join('\n').replace(/^/gm, ' '.repeat(itemIndentWidth));
+    }
+    let output = '';
+    // Usage
+    output += `Usage: ${helper.commandUsage(cmd)}\n\n`;
+    // Description
+    const desc = helper.commandDescription(cmd);
+    if (desc) {
+        output += `${desc}\n\n`;
+    }
+    // Build command map from visible commands
+    const visibleCommands = helper.visibleCommands(cmd);
+    const commandMap = new Map();
+    for (const sub of visibleCommands) {
+        commandMap.set(sub.name(), sub);
+    }
+    // Grouped commands by category
+    const categorized = new Set();
+    for (const category of CATEGORIES) {
+        const items = [];
+        for (const name of category.commands) {
+            const sub = commandMap.get(name);
+            if (sub) {
+                items.push(formatItem(helper.subcommandTerm(sub), helper.subcommandDescription(sub)));
+                categorized.add(name);
+            }
+        }
+        if (items.length > 0) {
+            output += `${category.name}:\n`;
+            output += `${formatList(items)}\n\n`;
+        }
+    }
+    // "Other" catch-all for uncategorized visible commands (e.g. help)
+    const otherItems = [];
+    for (const sub of visibleCommands) {
+        if (!categorized.has(sub.name())) {
+            otherItems.push(formatItem(helper.subcommandTerm(sub), helper.subcommandDescription(sub)));
+        }
+    }
+    if (otherItems.length > 0) {
+        output += 'Other:\n';
+        output += `${formatList(otherItems)}\n\n`;
+    }
+    // Options
+    const optionItems = [];
+    for (const opt of helper.visibleOptions(cmd)) {
+        optionItems.push(formatItem(helper.optionTerm(opt), helper.optionDescription(opt)));
+    }
+    if (optionItems.length > 0) {
+        output += 'Options:\n';
+        output += `${formatList(optionItems)}\n\n`;
+    }
+    return output;
+}
+//# sourceMappingURL=help.js.map

package/dist/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAgBH,8CA4EC;AAxFD,MAAM,UAAU,GAAgD;IAC9D,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE;IACtE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;IACnF;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;KACnF;IACD,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE;IAC/D,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;IAC5D,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;CACtF,CAAC;AAEF,SAAgB,iBAAiB,CAAC,GAAY,EAAE,MAAY;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACzC,MAAM,eAAe,GAAG,CAAC,CAAC;IAC1B,MAAM,kBAAkB,GAAG,CAAC,CAAC;IAE7B,SAAS,UAAU,CAAC,IAAY,EAAE,WAAmB;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,kBAAkB,CAAC,GAAG,WAAW,EAAE,CAAC;YAChF,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,eAAe,EAAE,SAAS,GAAG,kBAAkB,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,UAAU,CAAC,KAAe;QACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,QAAQ;IACR,MAAM,IAAI,UAAU,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;IAEnD,cAAc;IACd,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC;IAC1B,CAAC;IAED,0CAA0C;IAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,+BAA+B;IAC/B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,EAAE,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACtF,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC;YAChC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAAC;QACrB,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;IAC5C,CAAC;IAED,UAAU;IACV,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,YAAY,CAAC;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/helpers.d.ts

@@ -7,28 +7,20 @@ import { RECOMMENDED_FIELDS, REQUIRED_FIELDS, VALID_RISK_LEVELS, VALID_STATUSES
 export declare const CLI_ROOT: string;
 /** The bin/ directory */
 export declare const BIN_DIR: string;
-/** Repository root (parent of cli/) */
-export declare const REPO_ROOT: string;
 /** Official KMS keys that require CI/CD signing (not direct CLI use) */
 export declare const OFFICIAL_KMS_KEYS: string[];
 export { RECOMMENDED_FIELDS, REQUIRED_FIELDS, VALID_RISK_LEVELS, VALID_STATUSES };
 export interface VerificationOptions {
     skipChecksum?: boolean;
     skipAllChecks?: boolean;
-    skipAuthorCheck?: boolean;
-    skipDossierCheck?: boolean;
-    skipRiskAssessment?: boolean;
-    skipReview?: boolean;
     force?: boolean;
     noPrompt?: boolean;
-    reviewDossier?: string;
 }
 export interface VerificationStage {
     stage: number;
     name: string;
     passed?: boolean;
     skipped?: boolean;
-    demo?: boolean;
 }
 export interface VerificationResult {
     passed: boolean;
@@ -129,11 +121,19 @@ export declare function parseDossierMetadataFromContent(content: string, filePat
  */
 export declare function parseDossierMetadataLocal(filePath: string): DossierMetadata;
 /**
- * Verify a dossier file using the verify script (quick check).
+ * Verify a dossier file (quick check using the TS module directly).
  */
-export declare function verifyDossierQuick(filePath: string): boolean;
+export declare function verifyDossierQuick(filePath: string): Promise<boolean>;
 /**
  * Format output as table.
  */
 export declare function formatTable(dossiers: DossierMetadata[], showPath?: boolean): string;
+/**
+ * Print registry errors to stderr in a consistent format.
+ * Used across commands when multi-registry lookups partially or fully fail.
+ */
+export declare function printRegistryErrors(errors: ReadonlyArray<{
+    registry: string;
+    error: string;
+}>, style?: 'indent' | 'warning'): void;
 //# sourceMappingURL=helpers.d.ts.map