@calimero-network/registry-cli 1.7.0 → 1.9.0

package/README.md

@@ -184,7 +184,7 @@ calimero-registry apps create --file app-manifest.json
 
 # Create with inline data
 calimero-registry apps create \
-  --name "My SSApp" \
+  --name "My self-sovereign application" \
   --description "A smart contract application" \
   --version "1.0.0" \
   --developer-id "developer-id"

package/dist/index.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { Command } from 'commander';
 import chalk6 from 'chalk';
+import { createRequire } from 'module';
 import ora6 from 'ora';
 import { table } from 'table';
 import axios from 'axios';
@@ -12,9 +13,9 @@ import fastify from 'fastify';
 import cors from '@fastify/cors';
 import * as tar from 'tar';
 
-var SSAppRegistryClient = class {
+var CalimeroRegistryClient = class {
   /**
-   * Creates a new SSApp Registry client instance.
+   * Creates a new Calimero Registry client instance.
    *
    * @param config - Configuration options for the client
    * @param config.baseURL - Base URL for the API (default: 'http://localhost:8082')
@@ -24,10 +25,10 @@ var SSAppRegistryClient = class {
    * @example
    * ```typescript
    * // Basic configuration
-   * const client = new SSAppRegistryClient();
+   * const client = new CalimeroRegistryClient();
    *
    * // Custom configuration
-   * const client = new SSAppRegistryClient({
+   * const client = new CalimeroRegistryClient({
    *   baseURL: 'https://api.calimero.network',
    *   timeout: 30000,
    *   headers: {
@@ -656,12 +657,12 @@ var LocalDataStore = class {
     );
   }
   // Manifest management (V2 / Bundles)
-  getBundleManifest(pkg, version) {
-    const key = `${pkg}/${version}`;
+  getBundleManifest(pkg, version2) {
+    const key = `${pkg}/${version2}`;
     return this.data.bundleManifests.get(key);
   }
-  setBundleManifest(pkg, version, manifest) {
-    const key = `${pkg}/${version}`;
+  setBundleManifest(pkg, version2, manifest) {
+    const key = `${pkg}/${version2}`;
     this.data.bundleManifests.set(key, manifest);
     this.saveData();
   }
@@ -779,11 +780,11 @@ var LocalArtifactServer = class {
     }
   }
   // Copy artifact to local storage
-  async copyArtifactToLocal(sourcePath, appId, version, filename) {
+  async copyArtifactToLocal(sourcePath, appId, version2, filename) {
     if (!fs9.existsSync(sourcePath)) {
       throw new Error(`Source file not found: ${sourcePath}`);
     }
-    const appVersionDir = path7.join(this.artifactsDir, appId, version);
+    const appVersionDir = path7.join(this.artifactsDir, appId, version2);
     if (!fs9.existsSync(appVersionDir)) {
       fs9.mkdirSync(appVersionDir, { recursive: true });
     }
@@ -794,8 +795,8 @@ var LocalArtifactServer = class {
     return targetPath;
   }
   // Serve artifact by app ID, version, and filename
-  async serveArtifact(appId, version, filename) {
-    const artifactPath = path7.join(this.artifactsDir, appId, version, filename);
+  async serveArtifact(appId, version2, filename) {
+    const artifactPath = path7.join(this.artifactsDir, appId, version2, filename);
     if (!fs9.existsSync(artifactPath)) {
       throw new Error(`Artifact not found: ${artifactPath}`);
     }
@@ -828,9 +829,9 @@ var LocalArtifactServer = class {
     return crypto.createHash("sha256").update(fileBuffer).digest("hex");
   }
   // Get artifact URL for local serving
-  getArtifactUrl(appId, version, filename) {
+  getArtifactUrl(appId, version2, filename) {
     const baseUrl = `http://${this.config.getPublicHost()}:${this.config.getPort()}`;
-    return `${baseUrl}/artifacts/${appId}/${version}/${filename}`;
+    return `${baseUrl}/artifacts/${appId}/${version2}/${filename}`;
   }
   // Get artifact URL by hash
   getArtifactUrlByHash(hash) {
@@ -925,7 +926,7 @@ var LocalArtifactServer = class {
 };
 var RemoteRegistryClient = class {
   constructor(baseURL, timeout) {
-    this.client = new SSAppRegistryClient({
+    this.client = new CalimeroRegistryClient({
       baseURL,
       timeout
     });
@@ -1029,7 +1030,7 @@ function createRegistryClient(useLocal, baseURL, timeout) {
     );
   }
 }
-var appsCommand = new Command("apps").description("Manage SSApp applications").addCommand(
+var appsCommand = new Command("apps").description("Manage self-sovereign applications").addCommand(
   new Command("list").description("List all applications").option("-n, --name <name>", "Filter by application name").action(async (options, command) => {
     const globalOpts = command.parent?.parent?.opts();
     const useLocal = globalOpts?.local || false;
@@ -1086,10 +1087,10 @@ var appsCommand = new Command("apps").description("Manage SSApp applications").a
       }
       const tableData = [
         ["Version", "CID", "Yanked"],
-        ...versions.map((version) => [
-          version.semver,
-          version.cid.substring(0, 12) + "...",
-          version.yanked ? chalk6.red("Yes") : chalk6.green("No")
+        ...versions.map((version2) => [
+          version2.semver,
+          version2.cid.substring(0, 12) + "...",
+          version2.yanked ? chalk6.red("Yes") : chalk6.green("No")
         ])
       ];
       console.log(table(tableData));
@@ -1102,7 +1103,7 @@ var appsCommand = new Command("apps").description("Manage SSApp applications").a
     }
   })
 ).addCommand(
-  new Command("manifest").description("Get manifest for a specific application version").argument("<appId>", "Application ID").argument("<version>", "Application version").action(async (appId, version, options, command) => {
+  new Command("manifest").description("Get manifest for a specific application version").argument("<appId>", "Application ID").argument("<version>", "Application version").action(async (appId, version2, options, command) => {
     const globalOpts = command.parent?.parent?.opts();
     const useLocal = globalOpts?.local || false;
     const client = createRegistryClient(
@@ -1111,10 +1112,10 @@ var appsCommand = new Command("apps").description("Manage SSApp applications").a
       parseInt(globalOpts?.timeout || "10000")
     );
     const spinner2 = ora6(
-      `Fetching manifest for ${appId}@${version}...`
+      `Fetching manifest for ${appId}@${version2}...`
     ).start();
     try {
-      const manifest = await client.getAppManifest(appId, version);
+      const manifest = await client.getAppManifest(appId, version2);
       spinner2.succeed("Manifest fetched successfully");
       console.log(chalk6.blue("\nApplication Manifest:"));
       console.log(JSON.stringify(manifest, null, 2));
@@ -1170,7 +1171,7 @@ var appsCommand = new Command("apps").description("Manage SSApp applications").a
 var developersCommand = new Command("developers").description("Manage developer profiles").addCommand(
   new Command("get").description("Get developer profile information").argument("<pubkey>", "Developer public key").action(async (pubkey, options, command) => {
     const globalOpts = command.parent?.parent?.opts();
-    const client = new SSAppRegistryClient({
+    const client = new CalimeroRegistryClient({
       baseURL: globalOpts?.url || "http://localhost:8082",
       timeout: parseInt(globalOpts?.timeout || "10000")
     });
@@ -1208,7 +1209,7 @@ var developersCommand = new Command("developers").description("Manage developer
 ).addCommand(
   new Command("create").description("Create a new developer profile").argument("<pubkey>", "Developer public key").argument("<display-name>", "Display name for the developer").option("-w, --website <url>", "Developer website URL").option("-p, --proofs <proofs>", "JSON string of proofs array").action(async (pubkey, displayName, options, command) => {
     const globalOpts = command.parent?.parent?.opts();
-    const client = new SSAppRegistryClient({
+    const client = new CalimeroRegistryClient({
       baseURL: globalOpts?.url || "http://localhost:8082",
       timeout: parseInt(globalOpts?.timeout || "10000")
     });
@@ -1250,20 +1251,20 @@ var developersCommand = new Command("developers").description("Manage developer
   })
 );
 var attestationsCommand = new Command("attestations").description("Manage application attestations").addCommand(
-  new Command("get").description("Get attestation for a specific application version").argument("<pubkey>", "Developer public key").argument("<name>", "Application name").argument("<version>", "Application version").action(async (pubkey, name, version, options, command) => {
+  new Command("get").description("Get attestation for a specific application version").argument("<pubkey>", "Developer public key").argument("<name>", "Application name").argument("<version>", "Application version").action(async (pubkey, name, version2, options, command) => {
     const globalOpts = command.parent?.parent?.opts();
-    const client = new SSAppRegistryClient({
+    const client = new CalimeroRegistryClient({
       baseURL: globalOpts?.url || "http://localhost:8082",
       timeout: parseInt(globalOpts?.timeout || "10000")
     });
     const spinner2 = ora6(
-      `Fetching attestation for ${name}@${version}...`
+      `Fetching attestation for ${name}@${version2}...`
     ).start();
     try {
       const attestation = await client.getAttestation(
         pubkey,
         name,
-        version
+        version2
       );
       spinner2.succeed("Attestation fetched successfully");
       console.log(chalk6.blue("\nAttestation:"));
@@ -1281,7 +1282,7 @@ var attestationsCommand = new Command("attestations").description("Manage applic
     }
   })
 );
-var healthCommand = new Command("health").description("Check the health of the SSApp Registry API").action(async (options, command) => {
+var healthCommand = new Command("health").description("Check the health of the Calimero Registry API").action(async (options, command) => {
   const globalOpts = command.parent?.opts();
   const useLocal = globalOpts?.local || false;
   const client = createRegistryClient(
@@ -1456,11 +1457,11 @@ var LocalRegistryServer = class {
     this.server.get(
       "/artifacts/:appId/:version/:filename",
       async (request, reply) => {
-        const { appId, version, filename } = request.params;
+        const { appId, version: version2, filename } = request.params;
         try {
           const artifactData = await this.artifactServer.serveArtifact(
             appId,
-            version,
+            version2,
             filename
           );
           reply.header("Content-Type", "application/octet-stream");
@@ -1515,13 +1516,13 @@ var LocalRegistryServer = class {
     });
     this.server.get("/api/v2/bundles", async (request, reply) => {
       const query = request.query;
-      const { package: pkg, version, developer } = query;
-      if (pkg && version) {
-        const manifest = this.dataStore.getBundleManifest(pkg, version);
+      const { package: pkg, version: version2, developer } = query;
+      if (pkg && version2) {
+        const manifest = this.dataStore.getBundleManifest(pkg, version2);
         if (!manifest) {
           return reply.code(404).send({
             error: "bundle_not_found",
-            message: `Bundle ${pkg}@${version} not found`
+            message: `Bundle ${pkg}@${version2} not found`
           });
         }
         return [manifest];
@@ -1562,12 +1563,12 @@ var LocalRegistryServer = class {
     this.server.get(
       "/api/v2/bundles/:package/:version",
       async (request, reply) => {
-        const { package: pkg, version } = request.params;
-        const manifest = this.dataStore.getBundleManifest(pkg, version);
+        const { package: pkg, version: version2 } = request.params;
+        const manifest = this.dataStore.getBundleManifest(pkg, version2);
         if (!manifest) {
           return reply.code(404).send({
             error: "manifest_not_found",
-            message: `Manifest not found for ${pkg}@${version}`
+            message: `Manifest not found for ${pkg}@${version2}`
           });
         }
         return manifest;
@@ -1888,7 +1889,7 @@ var RemoteConfig = class {
 };
 
 // src/commands/bundle.ts
-var bundleCommand = new Command("bundle").description("Manage application bundles (V2)").addCommand(createCreateCommand()).addCommand(createPushCommand()).addCommand(createGetCommand());
+var bundleCommand = new Command("bundle").description("Manage application bundles (V2)").addCommand(createCreateCommand()).addCommand(createPushCommand()).addCommand(createGetCommand()).addCommand(createEditCommand());
 function createCreateCommand() {
   return new Command("create").description("Create an MPK bundle from a WASM file").argument("<wasm-file>", "Path to the WASM file").argument("[package]", "Package name (e.g. com.calimero.myapp)").argument("[version]", "Version (e.g. 1.0.0)").option(
     "-m, --manifest <path>",
@@ -1940,7 +1941,7 @@ Note:
   - ABI can be provided via --abi flag or manifest.abi field (file path string)
   - ABI file will be included in the bundle and referenced in the manifest
 `
-  ).action(async (wasmFile, pkg, version, options) => {
+  ).action(async (wasmFile, pkg, version2, options) => {
     try {
       let manifestConfig = {};
       if (options.manifest) {
@@ -1969,7 +1970,7 @@ Note:
         }
       }
       const finalPackage = pkg || manifestConfig.package;
-      const finalVersion = version || manifestConfig.version;
+      const finalVersion = version2 || manifestConfig.version;
       const finalOutput = options.output || manifestConfig.output;
       const finalName = options.name || manifestConfig.name;
       const finalDescription = options.description || manifestConfig.description;
@@ -2276,16 +2277,16 @@ Note:
   });
 }
 function createGetCommand() {
-  return new Command("get").description("Get bundle manifest").argument("<package>", "Package name (e.g. com.calimero.kv)").argument("<version>", "Version (e.g. 1.0.0)").option("--local", "Use local registry", true).action(async (pkg, version, options) => {
+  return new Command("get").description("Get bundle manifest").argument("<package>", "Package name (e.g. com.calimero.kv)").argument("<version>", "Version (e.g. 1.0.0)").option("--local", "Use local registry", true).action(async (pkg, version2, options) => {
     try {
       if (options.local) {
         const config = new LocalConfig();
         const store = new LocalDataStore(config);
-        const manifest = store.getBundleManifest(pkg, version);
+        const manifest = store.getBundleManifest(pkg, version2);
         if (manifest) {
           console.log(JSON.stringify(manifest, null, 2));
         } else {
-          console.error(`\u274C Manifest not found: ${pkg}@${version}`);
+          console.error(`\u274C Manifest not found: ${pkg}@${version2}`);
           process.exit(1);
         }
       } else {
@@ -2298,6 +2299,157 @@ function createGetCommand() {
     }
   });
 }
+function createEditCommand() {
+  return new Command("edit").description(
+    "Edit package metadata (name, description, author, links). Use --remote to talk to the registry. Either supply --manifest (signed manifest file to PATCH) or use options to fetch, modify, and output a manifest for you to sign."
+  ).argument("<package>", "Package name (e.g. com.calimero.myapp)").argument("<version>", "Version (e.g. 1.0.0)").option("--remote", "Use remote registry (required for edit)").option("--url <registry-url>", "Registry URL (overrides config)").option("--api-key <key>", "API key for remote (overrides config and env)").option(
+    "--manifest <path>",
+    "Path to signed manifest to PATCH (if omitted, GET + apply options + write file + instructions)"
+  ).option(
+    "-o, --output <path>",
+    "Where to write modified manifest when not using --manifest (default: manifest.json)"
+  ).option("--name <name>", "Set metadata.name").option("--description <description>", "Set metadata.description").option("--author <author>", 'Set metadata.author (use "" to clear)').option("--frontend <url>", "Set links.frontend").option("--github <url>", "Set links.github").option("--docs <url>", "Set links.docs").addHelpText(
+    "after",
+    `
+Examples:
+  # 1) Get current manifest, apply edits, write manifest.json and show sign instructions:
+  $ calimero-registry bundle edit com.calimero.myapp 1.0.0 --remote --name "New Name" --description "New desc" -o manifest.json
+
+  # 2) After signing with mero-sign, PATCH the signed manifest:
+  $ calimero-registry bundle edit com.calimero.myapp 1.0.0 --remote --manifest signed-manifest.json
+
+  # 3) With custom registry URL:
+  $ calimero-registry bundle edit com.calimero.myapp 1.0.0 --remote --url https://apps.calimero.network --manifest signed-manifest.json
+`
+  ).action(async (pkg, version2, options) => {
+    try {
+      if (!options.remote) {
+        console.error(
+          "\u274C Edit requires --remote (editing is only supported against the remote registry)."
+        );
+        process.exit(1);
+      }
+      const remoteConfig = new RemoteConfig();
+      const registryUrl = options.url || process.env.CALIMERO_REGISTRY_URL || remoteConfig.getRegistryUrl();
+      const apiKey = options.apiKey || process.env.CALIMERO_API_KEY || remoteConfig.getApiKey();
+      const baseUrl = registryUrl.replace(/\/$/, "");
+      const bundleUrl = `${baseUrl}/api/v2/bundles/${encodeURIComponent(pkg)}/${encodeURIComponent(version2)}`;
+      const headers = {
+        "Content-Type": "application/json"
+      };
+      if (apiKey) headers["Authorization"] = `Bearer ${apiKey}`;
+      if (options.manifest) {
+        const manifestPath = path7.resolve(options.manifest);
+        if (!fs9.existsSync(manifestPath)) {
+          console.error(`\u274C Manifest file not found: ${options.manifest}`);
+          process.exit(1);
+        }
+        const raw = fs9.readFileSync(manifestPath, "utf8");
+        let manifest2;
+        try {
+          manifest2 = JSON.parse(raw);
+        } catch {
+          console.error(
+            `\u274C Invalid JSON in manifest file: ${options.manifest}`
+          );
+          process.exit(1);
+        }
+        if (manifest2.package !== pkg || manifest2.appVersion !== version2) {
+          console.error(
+            `\u274C Manifest package/version (${manifest2.package}@${manifest2.appVersion}) does not match command args (${pkg}@${version2}).`
+          );
+          process.exit(1);
+        }
+        const res2 = await fetch(bundleUrl, {
+          method: "PATCH",
+          headers,
+          body: JSON.stringify(manifest2)
+        });
+        const text = await res2.text();
+        let body;
+        try {
+          body = JSON.parse(text);
+        } catch {
+          body = { message: text };
+        }
+        if (res2.ok) {
+          console.log("\u2705 Bundle metadata updated.");
+          console.log(`   Package: ${body.package || pkg}`);
+          console.log(`   Version: ${body.version || version2}`);
+        } else {
+          console.error(
+            `\u274C PATCH failed (${res2.status}): ${body.error ?? body.message ?? text}`
+          );
+          process.exit(1);
+        }
+        return;
+      }
+      const res = await fetch(bundleUrl, { method: "GET", headers });
+      if (!res.ok) {
+        const t2 = await res.text();
+        let err;
+        try {
+          err = JSON.parse(t2);
+        } catch {
+          err = { message: t2 };
+        }
+        console.error(
+          `\u274C GET failed (${res.status}): ${err.error ?? err.message ?? t2}`
+        );
+        process.exit(1);
+      }
+      const manifest = await res.json();
+      if (manifest.package !== pkg || manifest.appVersion !== version2) {
+        console.error(
+          "\u274C Response manifest package/version does not match URL."
+        );
+        process.exit(1);
+      }
+      if (options.name !== void 0) {
+        if (!manifest.metadata)
+          manifest.metadata = { name: "", description: "", author: "" };
+        manifest.metadata.name = options.name;
+      }
+      if (options.description !== void 0) {
+        if (!manifest.metadata)
+          manifest.metadata = { name: "", description: "", author: "" };
+        manifest.metadata.description = options.description;
+      }
+      if (options.author !== void 0) {
+        if (!manifest.metadata)
+          manifest.metadata = { name: "", description: "", author: "" };
+        manifest.metadata.author = options.author;
+      }
+      if (options.frontend !== void 0) {
+        if (!manifest.links) manifest.links = {};
+        manifest.links.frontend = options.frontend;
+      }
+      if (options.github !== void 0) {
+        if (!manifest.links) manifest.links = {};
+        manifest.links.github = options.github;
+      }
+      if (options.docs !== void 0) {
+        if (!manifest.links) manifest.links = {};
+        manifest.links.docs = options.docs;
+      }
+      const outputPath = path7.resolve(options.output || "manifest.json");
+      fs9.writeFileSync(outputPath, JSON.stringify(manifest, null, 2));
+      console.log(`\u2705 Wrote modified manifest to: ${outputPath}`);
+      console.log("");
+      console.log("Next steps:");
+      console.log("  1. Sign the manifest with mero-sign:");
+      console.log(`     mero-sign sign ${outputPath} --key your-key.json`);
+      console.log("  2. PATCH the signed manifest:");
+      console.log(
+        `     calimero-registry bundle edit '${pkg}' '${version2}' --remote --manifest signed-manifest.json`
+      );
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      console.error("\u274C Edit failed:", message);
+      process.exit(1);
+    }
+  });
+}
 async function pushToRemote(bundlePath, manifest, registryUrl, apiKey) {
   try {
     console.log(`\u{1F4E4} Pushing to remote registry: ${registryUrl}`);
@@ -2322,12 +2474,10 @@ async function pushToRemote(bundlePath, manifest, registryUrl, apiKey) {
     if (manifest.wasm) {
       payload.wasm = manifest.wasm;
     }
-    if (manifest.abi) {
+    if (manifest.abi !== void 0) {
       payload.abi = manifest.abi;
     }
-    if (manifest.migrations && manifest.migrations.length > 0) {
-      payload.migrations = manifest.migrations;
-    }
+    payload.migrations = manifest.migrations ?? [];
     if (manifest.links) {
       payload.links = manifest.links;
     }
@@ -2337,6 +2487,9 @@ async function pushToRemote(bundlePath, manifest, registryUrl, apiKey) {
     if (manifest.minRuntimeVersion != null && String(manifest.minRuntimeVersion).trim()) {
       payload.minRuntimeVersion = String(manifest.minRuntimeVersion).trim();
     }
+    if (manifest.signerId) {
+      payload.signerId = manifest.signerId;
+    }
     const headers = {
       "Content-Type": "application/json"
     };
@@ -2392,10 +2545,10 @@ async function pushToRemote(bundlePath, manifest, registryUrl, apiKey) {
     throw error;
   }
 }
-async function verifyRemotePush(registryUrl, packageName, version) {
+async function verifyRemotePush(registryUrl, packageName, version2) {
   try {
     console.log("\u{1F50D} Verifying upload to remote registry...");
-    const verifyUrl = `${registryUrl.replace(/\/$/, "")}/api/v2/bundles/${packageName}/${version}`;
+    const verifyUrl = `${registryUrl.replace(/\/$/, "")}/api/v2/bundles/${packageName}/${version2}`;
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), 1e4);
     try {
@@ -2660,10 +2813,12 @@ function createConfigResetCommand() {
 }
 
 // src/index.ts
+var require2 = createRequire(import.meta.url);
+var { version } = require2("../package.json");
 var program = new Command();
 program.name("calimero-registry").description(
   "Calimero Network App Registry CLI - Command-line interface for the App Registry"
-).version("1.0.0");
+).version(version);
 program.addHelpText(
   "after",
   `