@codiac.io/codiac-cli 1.3.254 → 1.3.255

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.254",
+  "version": "1.3.255",
   "commands": {
     "branch": {
       "id": "branch",
@@ -2017,6 +2017,10 @@
         {
           "description": "Remove a deploy condition so the asset always deploys.",
           "command": "<%= config.bin %> <%= command.id %> -e myEnterprise -n my-api --remove-deploy-condition --silent"
+        },
+        {
+          "description": "Re-point an asset at a corrected registry (by its Codiac code, not its url).",
+          "command": "<%= config.bin %> <%= command.id %> -e myEnterprise -n my-api --registry devCodiacContainers --silent"
         }
       ],
       "flags": {
@@ -2044,6 +2048,14 @@
           "required": false,
           "multiple": false
         },
+        "registry": {
+          "name": "registry",
+          "type": "option",
+          "char": "r",
+          "description": "Re-point this asset at a different container registry, given by its Codiac registry CODE (run `cod imageRegistry list`; NOT the registry url). Re-resolves the asset's embedded registry reference — use this after correcting a registry url so the asset picks up the fix.",
+          "required": false,
+          "multiple": false
+        },
         "deploy-condition": {
           "name": "deploy-condition",
           "type": "option",
@@ -7445,6 +7457,96 @@
       },
       "args": {}
     },
+    "imageRegistry:edit": {
+      "id": "imageRegistry:edit",
+      "description": "Changes the mutable attributes (url, private/public) of an existing container registry reference. The code, provider, and type are immutable.",
+      "strict": true,
+      "pluginName": "@codiac.io/codiac-cli",
+      "pluginAlias": "@codiac.io/codiac-cli",
+      "pluginType": "core",
+      "aliases": [],
+      "hiddenAliases": [],
+      "examples": [
+        {
+          "description": "Edit a registry interactively (select it, then change its url).",
+          "command": "<%= config.bin %> <%= command.id %>"
+        },
+        {
+          "description": "Correct a registry's url (identified by its Codiac code, not its url).",
+          "command": "<%= config.bin %> <%= command.id %> --registry devCodiacContainers --url newname.azurecr.io --silent"
+        },
+        {
+          "description": "Flip a registry to public (no pull authentication).",
+          "command": "<%= config.bin %> <%= command.id %> --registry 'Other|ghcr' --no-private --silent"
+        },
+        {
+          "description": "Render the equivalent silent command without executing it.",
+          "command": "<%= config.bin %> <%= command.id %> --registry devCodiacContainers --url newname.azurecr.io --to-script"
+        }
+      ],
+      "flags": {
+        "help": {
+          "name": "help",
+          "type": "boolean",
+          "char": "h",
+          "description": "Show CLI help.",
+          "allowNo": false
+        },
+        "registry": {
+          "name": "registry",
+          "type": "option",
+          "char": "r",
+          "description": "The Codiac code identifying the registry to edit (NOT its url). Run `cod imageRegistry list` to see codes.",
+          "required": false,
+          "multiple": false
+        },
+        "url": {
+          "name": "url",
+          "type": "option",
+          "char": "u",
+          "description": "The corrected container registry url.",
+          "required": false,
+          "multiple": false
+        },
+        "private": {
+          "name": "private",
+          "type": "boolean",
+          "description": "Whether pulling from this registry requires authentication. Pass --private or --no-private only to change it; omit to leave it unchanged.",
+          "allowNo": true
+        },
+        "silent": {
+          "name": "silent",
+          "type": "boolean",
+          "description": "Executes without any user interaction; fails on missing or invalid arguments.",
+          "allowNo": false,
+          "exclusive": [
+            "echo",
+            "to-script"
+          ]
+        },
+        "echo": {
+          "name": "echo",
+          "type": "boolean",
+          "description": "Renders the equivalent non-interactive command for future use before executing.",
+          "allowNo": false,
+          "exclusive": [
+            "to-script",
+            "silent"
+          ]
+        },
+        "to-script": {
+          "name": "to-script",
+          "type": "boolean",
+          "description": "Renders the equivalent non-interactive command without executing it.",
+          "allowNo": false,
+          "exclusive": [
+            "echo",
+            "silent"
+          ]
+        }
+      },
+      "args": {}
+    },
     "imageRegistry:forget": {
       "id": "imageRegistry:forget",
       "description": "Removes the reference to the given container registry for the tenant.  Does NOT delete the registry itself.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@codiac.io/codiac-cli",
   "description": "Local command line interface for managing enterprise assets and environments.",
-  "version": "1.3.254",
+  "version": "1.3.255",
   "author": "Codiac",
   "bin": {
     "codiac": "./bin/run",

package/skill/references/cli-reference.md

@@ -33,7 +33,7 @@ Top-level: `branch`, `build`, `cli`, `commit`, `deploy`, `dep`, `identity`, `ini
 - **filestore**: `capture`, `forget`, `list`
 - **host**: `map`, `list`, `view`, `delete`
 - **identity**: `list`, `delete`
-- **imageRegistry**: `capture`, `forget`, `list`; `pullSecret set/unset`
+- **imageRegistry**: `capture`, `edit`, `forget`, `list`; `pullSecret set/unset`  *(`-r`/`--registry` and `--chart-repo` take the registry **code**, e.g. `devCodiacContainers`, NOT its url; `edit` fixes an existing registry's url in place)*
 - **images**: `add`, `list`, `patch`, `remove`, `version`, `version bump`
 - **import**: `cluster`
 - **kit**: `create`

package/skill/references/concepts.md

@@ -74,9 +74,32 @@ Lifecycle:
 4. Inspect/operate: `cod asset list`, `cod asset view` (logs/term/exec/env/config/status),
    `cod asset undeploy`, `cod asset recycle`.
 
-**Image registries — policy:** never AWS ECR. Images live in **Docker Hub** or **Azure
-Container Registry (ACR)**. Registries are captured as first-class objects
-(`cod imageRegistry ...`, `cod secretStore ...` for pull secrets).
+**Image registries.** Never AWS ECR — images live in **Docker Hub** or **Azure Container
+Registry (ACR)** (plus generic OCI registries like ghcr/quay/Harbor via provider `other`).
+A registry is a first-class object with two fields you must **not** conflate:
+
+- **`code`** — the Codiac identifier you reference everywhere: `-r`/`--registry` on
+  `asset create`, `--chart-repo`, `asset edit --registry`. Its shape depends on how it was
+  captured — Azure ACR → the resource name (`devCodiacContainers`); Docker Hub →
+  `DockerHub|<org>` (`DockerHub|codiacimages`); generic OCI → `Other|<label>` (`Other|ghcr`);
+  Helm repo → `helm|<provider>|<name>` (`helm|artifactHub|hermes-agent`).
+- **`url`** — the registry endpoint (`devCodiacContainers.azurecr.io`, `index.docker.io`).
+
+`-r`/`--registry` matches the **code**, never the url. Passing the url
+(`devCodiacContainers.azurecr.io`) fails with *"No image registry has code […]"* — which
+reads like it was never registered. **Always `cod imageRegistry list` first** to read the
+exact code.
+
+Managing them: `cod imageRegistry capture` (add — create-only; it *throws* if the code already
+exists), `cod imageRegistry edit` (fix an existing registry's **url** or private/public in
+place — `code`/`provider`/`type` are immutable), `cod imageRegistry forget` (drop the
+reference), `cod imageRegistry list`, and `cod imageRegistry pullSecret set/unset` for auth.
+`cod secretStore ...` holds the pull secrets themselves.
+
+**Gotcha — assets snapshot their registry.** An asset stores a *copy* of `image.registry`
+(url included) at create time, and the deploy path reads that copy, not the registry record.
+So after `cod imageRegistry edit` corrects a url, already-created assets still carry the old
+one — run `cod asset edit --registry <code>` on each to re-resolve its embedded reference.
 
 The `type` of an asset (`helm` vs `service`) changes which config `targetFile`s apply (see §3):
 `[helm]` values for charts, `[env]`/`[footprint]`/etc. for services.