@codiac.io/codiac-cli 1.3.254 → 1.3.256

package/dist/commands/imageRegistry/edit.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const core_1 = require("@oclif/core");
+const contracts_1 = require("../../apis/codiac-api/contracts");
+const command_base_exec_tenant_1 = require("../../command-base-exec-tenant");
+const prettify_1 = require("../../prettify");
+const cloud_resource_configurator_factory_1 = require("../../uilogic/cloud-resource-configurator-factory");
+const cloud_provider_contextualizer_1 = require("../../uilogic/cloud-provider-contextualizer");
+const image_registry_contextualizer_1 = require("../../uilogic/image-registry-contextualizer");
+const image_contextualizer_1 = require("../../uilogic/image-contextualizer");
+const registry_resolver_1 = require("../../uilogic/registry-resolver");
+/**
+ * Edits the mutable attributes of an existing container-registry reference.
+ *
+ * WHY this exists: `imageRegistry capture` is create-only (it throws if the code already
+ * exists), so a fat-fingered registry url had no in-CLI fix — you had to `forget` and
+ * re-`capture`, which orphans every asset that referenced the old code. This command
+ * updates the record in place, keeping the code (the join key assets resolve against)
+ * stable so those assets keep resolving.
+ *
+ * The `code`, `provider`, and `type` are the record's identity and the relay's client
+ * selector, so they are immutable here; a change to any of those is a different registry
+ * (capture a new one). Only `url` and the private/public flag are editable.
+ *
+ * NOTE: assets carry a denormalized copy of `image.registry` from create time, and the
+ * deploy path reads that copy — so after fixing a registry url here, existing assets also
+ * need `cod asset edit --registry <code>` to re-resolve their embedded reference.
+ */
+class ImageRegistryEdit extends command_base_exec_tenant_1.CommandBaseExecTenant {
+    bootstrap() {
+        super.bootstrap();
+        cloud_provider_contextualizer_1.CloudProviderContextualizer.bootstrap(this.ioc);
+        this.ioc.bind(image_registry_contextualizer_1.ImageRegistryContextualizer).toSelf();
+        this.ioc.bind(image_contextualizer_1.ImageContextualizer).toSelf();
+    }
+    // --------------------------------------------------------------------
+    // Lazy-loaded properties
+    get uiRegistry() {
+        if (this._uiRegistry_backer === undefined) {
+            this._uiRegistry_backer = this.ioc.get(image_registry_contextualizer_1.ImageRegistryContextualizer);
+        }
+        return this._uiRegistry_backer;
+    }
+    // --------------------------------------------------------------------
+    captureArgs() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const { flags } = yield this.parse(ImageRegistryEdit);
+            // partial.code identifies WHICH registry (immutable); partial.url / pullRequiresAuth
+            // carry the requested edits. private is only assigned when the user passed a --private
+            // or --no-private, so an omitted flag leaves the stored value untouched.
+            let partial = {};
+            if (flags.registry)
+                partial.code = flags.registry;
+            if (flags.url)
+                partial.url = flags.url.trim();
+            if (flags.private !== undefined)
+                partial.pullRequiresAuth = flags.private;
+            return [partial, false];
+        });
+    }
+    buildCandidate_silently(partial, _rootMap) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.code)
+                throw new Error("A registry code must be set (use --registry <code> to identify the registry to edit; run `cod imageRegistry list` for codes).");
+            const all = yield this._codiacApi.ImageRegistry.readMany({ all: true }, { throwNotFound: false });
+            const existing = (0, registry_resolver_1.resolveRegistryByCodeOrThrow)(all !== null && all !== void 0 ? all : [], partial.code, "--registry");
+            return this.applyEdits(existing, partial);
+        });
+    }
+    buildCandidate_interactively(partial, _takeDefaults, _rootMap) {
+        var _a;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            cloud_resource_configurator_factory_1.RegistryConfiguratorFactory.bootstrap(this.ioc);
+            const all = yield this._codiacApi.ImageRegistry.readMany({ all: true }, { throwNotFound: false });
+            if (!all || all.length === 0)
+                throw new Error("Cannot edit: no image registries are defined yet.");
+            // Resolve the target: honor --registry if given & valid, otherwise let the user pick.
+            let existing = partial.code ? all.find(r => r.code === partial.code) : undefined;
+            if (!existing) {
+                existing = yield this.uiRegistry.promptForExistingRegistry(contracts_1.PackageType.container, false, all);
+            }
+            if (!existing)
+                throw new Error("No registry selected.");
+            this._ui.userMessage(`Editing ${existing.type} image registry ${this._styler.bold(this._styler.hilite(existing.code))} ${this._styler.dim(`(current url: ${existing.url})`)}`);
+            // URL — default to the current value so pressing enter leaves it unchanged.
+            if (partial.url === undefined) {
+                partial.url = yield this._ui.prompt("url", "Registry url:", true, existing.url);
+            }
+            // Private/public — default to the current value.
+            if (partial.pullRequiresAuth === undefined) {
+                partial.pullRequiresAuth = yield this._ui.promptConfirm("private", "Requires authentication to pull (private)?", (_a = existing.pullRequiresAuth) !== null && _a !== void 0 ? _a : true);
+            }
+            const candidate = this.applyEdits(existing, partial);
+            this._ui.userMessage("About to save:");
+            this._ui.userMessage((0, prettify_1.prettify)(candidate));
+            const confirmed = yield this._ui.promptConfirm("confirm", "Save changes?", false);
+            if (!confirmed)
+                return undefined;
+            return candidate;
+        });
+    }
+    /** Overlays the requested edits onto the existing record, keeping every other field intact.
+     *  Throws if the caller asked for no change at all. */
+    applyEdits(existing, partial) {
+        const candidate = Object.assign({}, existing);
+        let changed = false;
+        if (partial.url !== undefined && partial.url.length > 0 && partial.url !== existing.url) {
+            candidate.url = partial.url;
+            changed = true;
+        }
+        if (partial.pullRequiresAuth !== undefined && partial.pullRequiresAuth !== existing.pullRequiresAuth) {
+            candidate.pullRequiresAuth = partial.pullRequiresAuth;
+            changed = true;
+        }
+        if (!changed)
+            throw new Error(`Nothing to edit for [${existing.code}]. Provide --url and/or --private/--no-private with a value different from the current one.`);
+        return candidate;
+    }
+    buildCommandString(candidate, cmd) {
+        cmd.push("--registry", candidate.code);
+        cmd.push("--url", candidate.url);
+        cmd.push(candidate.pullRequiresAuth === false ? "--no-private" : "--private");
+        cmd.push("--silent");
+        return cmd;
+    }
+    executeTask(candidate) {
+        var _a;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const result = yield this._codiacApi.ImageRegistry.tryUpdate(candidate);
+            if (result.success) {
+                this._ui.userMessage(`Successfully updated ${candidate.type} image registry [${this._styler.hilite(candidate.code)}] — url: ${this._styler.hilite(candidate.url)}`);
+            }
+            else if (result.error) {
+                this._ui.userMessage(`${this._styler.colorCritical("Error")} updating ${candidate.type} image registry [${candidate.code}]: ${result.error.name} ${(_a = result.error.message) !== null && _a !== void 0 ? _a : result.error.stack}`);
+                throw result.error;
+            }
+            else {
+                this._ui.userMessage(`Failed to update image registry [${candidate.code}]. Check logs for details.`);
+            }
+        });
+    }
+}
+exports.default = ImageRegistryEdit;
+ImageRegistryEdit.description = 'Changes the mutable attributes (url, private/public) of an existing container registry reference. The code, provider, and type are immutable.';
+ImageRegistryEdit.aliases = [];
+ImageRegistryEdit.examples = [
+    { description: "Edit a registry interactively (select it, then change its url).", command: "<%= config.bin %> <%= command.id %>" },
+    { description: "Correct a registry's url (identified by its Codiac code, not its url).", command: "<%= config.bin %> <%= command.id %> --registry devCodiacContainers --url newname.azurecr.io --silent" },
+    { description: "Flip a registry to public (no pull authentication).", command: "<%= config.bin %> <%= command.id %> --registry 'Other|ghcr' --no-private --silent" },
+    { description: "Render the equivalent silent command without executing it.", command: "<%= config.bin %> <%= command.id %> --registry devCodiacContainers --url newname.azurecr.io --to-script" },
+];
+ImageRegistryEdit.flags = {
+    help: core_1.Flags.help({ char: 'h' }),
+    registry: core_1.Flags.string({ char: 'r', required: false, description: "The Codiac code identifying the registry to edit (NOT its url). Run `cod imageRegistry list` to see codes." }),
+    url: core_1.Flags.string({ char: 'u', required: false, description: "The corrected container registry url." }),
+    private: core_1.Flags.boolean({ allowNo: true, description: 'Whether pulling from this registry requires authentication. Pass --private or --no-private only to change it; omit to leave it unchanged.' }),
+    silent: core_1.Flags.boolean({ exclusive: ["echo", "to-script"], description: 'Executes without any user interaction; fails on missing or invalid arguments.' }),
+    echo: core_1.Flags.boolean({ exclusive: ["to-script", "silent"], description: 'Renders the equivalent non-interactive command for future use before executing.' }),
+    "to-script": core_1.Flags.boolean({ exclusive: ["echo", "silent"], description: 'Renders the equivalent non-interactive command without executing it.' }),
+};
+ImageRegistryEdit.args = {};
+//# sourceMappingURL=edit.js.map

package/dist/commands/imageRegistry/edit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit.js","sourceRoot":"","sources":["../../../src/commands/imageRegistry/edit.ts"],"names":[],"mappings":";;;AAAA,sCAA6C;AAE7C,+DAAyG;AAEzG,6EAAuE;AACvE,6CAA0C;AAC1C,2GAAgG;AAChG,+FAA0F;AAC1F,+FAA0F;AAC1F,6EAAyE;AACzE,uEAA+E;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAqB,iBAAkB,SAAQ,gDAAoC;IAyBvE,SAAS;QACjB,KAAK,CAAC,SAAS,EAAE,CAAC;QAClB,2DAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2B,CAAC,CAAC,MAAM,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAmB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAGD,uEAAuE;IACvE,yBAAyB;IAEzB,IAAc,UAAU;QACtB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE;YACzC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,2DAA2B,CAAC,CAAC;SACrE;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAGD,uEAAuE;IAG1D,WAAW;;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAEtD,qFAAqF;YACrF,uFAAuF;YACvF,yEAAyE;YACzE,IAAI,OAAO,GAA2B,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClD,IAAI,KAAK,CAAC,GAAG;gBAAE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1E,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;KAAA;IAGY,uBAAuB,CAAC,OAA+B,EAAE,QAAiB;;YACrF,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,+HAA+H,CAAC,CAAC;YAEpK,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAClG,MAAM,QAAQ,GAAG,IAAA,gDAA4B,EAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAErF,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;KAAA;IAGY,4BAA4B,CAAC,OAA+B,EAAE,aAAsB,EAAE,QAAiB;;;YAClH,iEAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEhD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAClG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAEnG,sFAAsF;YACtF,IAAI,QAAQ,GAA8B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,IAAI,CAAC,QAAQ,EAAE;gBACb,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,uBAAe,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;aACnG;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAExD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,QAAQ,CAAC,IAAI,mBAAmB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YAE/K,4EAA4E;YAC5E,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE;gBAC7B,OAAO,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;aACjF;YACD,iDAAiD;YACjD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE;gBAC1C,OAAO,CAAC,gBAAgB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,4CAA4C,EAAE,MAAA,QAAQ,CAAC,gBAAgB,mCAAI,IAAI,CAAC,CAAC;aACrJ;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAErD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAA,mBAAQ,EAAC,SAAS,CAAC,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;YAClF,IAAI,CAAC,SAAS;gBAAE,OAAO,SAAS,CAAC;YAEjC,OAAO,SAAS,CAAC;;KAClB;IAGD;2DACuD;IAC/C,UAAU,CAAC,QAAuB,EAAE,OAA+B;QACzE,MAAM,SAAS,qBAAuB,QAAQ,CAAE,CAAC;QACjD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE;YACvF,SAAS,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;YAC5B,OAAO,GAAG,IAAI,CAAC;SAChB;QACD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE;YACpG,SAAS,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACtD,OAAO,GAAG,IAAI,CAAC;SAChB;QAED,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,IAAI,6FAA6F,CAAC,CAAC;QAClK,OAAO,SAAS,CAAC;IACnB,CAAC;IAGM,kBAAkB,CAAC,SAAwB,EAAE,GAAa;QAC/D,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAGY,WAAW,CAAC,SAAwB;;;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACxE,IAAI,MAAM,CAAC,OAAO,EAAE;gBAClB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,wBAAwB,SAAS,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACrK;iBAAM,IAAI,MAAM,CAAC,KAAK,EAAE;gBACvB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,SAAS,CAAC,IAAI,oBAAoB,SAAS,CAAC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,MAAA,MAAM,CAAC,KAAK,CAAC,OAAO,mCAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACjM,MAAM,MAAM,CAAC,KAAK,CAAC;aACpB;iBAAM;gBACL,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,oCAAoC,SAAS,CAAC,IAAI,4BAA4B,CAAC,CAAC;aACtG;;KACF;;AAjJH,oCAmJC;AAlJQ,6BAAW,GAAG,+IAA+I,CAAC;AAC9J,yBAAO,GAAG,EAAE,CAAC;AAEb,0BAAQ,GAAsB;IACnC,EAAE,WAAW,EAAE,iEAAiE,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAClI,EAAE,WAAW,EAAE,wEAAwE,EAAE,OAAO,EAAE,sGAAsG,EAAE;IAC1M,EAAE,WAAW,EAAE,qDAAqD,EAAE,OAAO,EAAE,mFAAmF,EAAE;IACpK,EAAE,WAAW,EAAE,4DAA4D,EAAE,OAAO,EAAE,yGAAyG,EAAE;CAClM,CAAC;AAEK,uBAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC/B,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,4GAA4G,EAAE,CAAC;IACjL,GAAG,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IACvG,OAAO,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,2IAA2I,EAAE,CAAC;IAEnM,MAAM,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,+EAA+E,EAAE,CAAC;IACzJ,IAAI,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,iFAAiF,EAAE,CAAC;IAC3J,WAAW,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,sEAAsE,EAAE,CAAC;CACnJ,CAAC;AAEK,sBAAI,GAAG,EAAE,CAAC"}

package/dist/uilogic/registry-resolver.d.ts

@@ -0,0 +1,21 @@
+import { ImageRegistry } from '../apis/codiac-api/contracts';
+/**
+ * Resolves an image registry from a pre-fetched list by its Codiac **code**, throwing a
+ * message that steers the user back on track when the lookup fails.
+ *
+ * WHY this exists: `-r`/`--registry` (and `--chart-repo`) match `ImageRegistry.code`
+ * (e.g. `devCodiacContainers`, `DockerHub|codiacimages`), NOT the registry URL. Users
+ * routinely paste the URL (`devcodiaccontainers.azurecr.io`) and get a bare "not found"
+ * that reads like the registry was never registered at all. When the miss looks like a
+ * pasted URL, we detect the registry it actually belongs to and name its code instead.
+ *
+ * Callers pass the full registry list (a single `readMany({ all: true })`) so the by-URL
+ * suggestion can be computed without a second round-trip.
+ *
+ * @param all        Every registry reference for the tenant (from `ImageRegistry.readMany`).
+ * @param codeHint   The value the user supplied to `--registry` / `--chart-repo`.
+ * @param flagLabel  The flag name to name in the error (e.g. `--registry`, `--chart-repo`).
+ * @returns The matching `ImageRegistry`.
+ * @throws If no registry has that code (message suggests the right code when the hint is a URL).
+ */
+export declare function resolveRegistryByCodeOrThrow(all: ImageRegistry[], codeHint: string, flagLabel: string): ImageRegistry;

package/dist/uilogic/registry-resolver.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRegistryByCodeOrThrow = void 0;
+/**
+ * Resolves an image registry from a pre-fetched list by its Codiac **code**, throwing a
+ * message that steers the user back on track when the lookup fails.
+ *
+ * WHY this exists: `-r`/`--registry` (and `--chart-repo`) match `ImageRegistry.code`
+ * (e.g. `devCodiacContainers`, `DockerHub|codiacimages`), NOT the registry URL. Users
+ * routinely paste the URL (`devcodiaccontainers.azurecr.io`) and get a bare "not found"
+ * that reads like the registry was never registered at all. When the miss looks like a
+ * pasted URL, we detect the registry it actually belongs to and name its code instead.
+ *
+ * Callers pass the full registry list (a single `readMany({ all: true })`) so the by-URL
+ * suggestion can be computed without a second round-trip.
+ *
+ * @param all        Every registry reference for the tenant (from `ImageRegistry.readMany`).
+ * @param codeHint   The value the user supplied to `--registry` / `--chart-repo`.
+ * @param flagLabel  The flag name to name in the error (e.g. `--registry`, `--chart-repo`).
+ * @returns The matching `ImageRegistry`.
+ * @throws If no registry has that code (message suggests the right code when the hint is a URL).
+ */
+function resolveRegistryByCodeOrThrow(all, codeHint, flagLabel) {
+    const found = (all !== null && all !== void 0 ? all : []).find(r => r.code === codeHint);
+    if (found)
+        return found;
+    // Miss. Did they paste a URL instead of a code? Match against known registry urls,
+    // tolerating a missing scheme (index.docker.io vs https://index.docker.io).
+    const bare = codeHint.replace(/^[a-z]+:\/\//i, "");
+    const byUrl = (all !== null && all !== void 0 ? all : []).find(r => {
+        var _a;
+        const rBare = ((_a = r.url) !== null && _a !== void 0 ? _a : "").replace(/^[a-z]+:\/\//i, "");
+        return r.url === codeHint || rBare === bare || (bare.length > 3 && rBare.includes(bare));
+    });
+    const lead = `No image registry has code [${codeHint}]. The ${flagLabel} flag takes the registry CODE, not its URL.`;
+    const tail = byUrl
+        ? ` That looks like a URL — did you mean code [${byUrl.code}] (its url is ${byUrl.url})?`
+        : ` Run \`cod imageRegistry list\` to see the available codes (e.g. 'devCodiacContainers', not 'devcodiaccontainers.azurecr.io').`;
+    throw new Error(lead + tail);
+}
+exports.resolveRegistryByCodeOrThrow = resolveRegistryByCodeOrThrow;
+//# sourceMappingURL=registry-resolver.js.map

package/dist/uilogic/registry-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-resolver.js","sourceRoot":"","sources":["../../src/uilogic/registry-resolver.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,4BAA4B,CAAC,GAAoB,EAAE,QAAgB,EAAE,SAAiB;IACpG,MAAM,KAAK,GAAG,CAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,mFAAmF;IACnF,4EAA4E;IAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;QACjC,MAAM,KAAK,GAAG,CAAC,MAAA,CAAC,CAAC,GAAG,mCAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,+BAA+B,QAAQ,UAAU,SAAS,6CAA6C,CAAC;IACrH,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC,+CAA+C,KAAK,CAAC,IAAI,iBAAiB,KAAK,CAAC,GAAG,IAAI;QACzF,CAAC,CAAC,gIAAgI,CAAC;IACrI,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAC/B,CAAC;AAjBD,oEAiBC"}

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.254",
+  "version": "1.3.256",
   "commands": {
     "branch": {
       "id": "branch",
@@ -2017,6 +2017,10 @@
         {
           "description": "Remove a deploy condition so the asset always deploys.",
           "command": "<%= config.bin %> <%= command.id %> -e myEnterprise -n my-api --remove-deploy-condition --silent"
+        },
+        {
+          "description": "Re-point an asset at a corrected registry (by its Codiac code, not its url).",
+          "command": "<%= config.bin %> <%= command.id %> -e myEnterprise -n my-api --registry devCodiacContainers --silent"
         }
       ],
       "flags": {
@@ -2044,6 +2048,14 @@
           "required": false,
           "multiple": false
         },
+        "registry": {
+          "name": "registry",
+          "type": "option",
+          "char": "r",
+          "description": "Re-point this asset at a different container registry, given by its Codiac registry CODE (run `cod imageRegistry list`; NOT the registry url). Re-resolves the asset's embedded registry reference — use this after correcting a registry url so the asset picks up the fix.",
+          "required": false,
+          "multiple": false
+        },
         "deploy-condition": {
           "name": "deploy-condition",
           "type": "option",
@@ -7445,6 +7457,96 @@
       },
       "args": {}
     },
+    "imageRegistry:edit": {
+      "id": "imageRegistry:edit",
+      "description": "Changes the mutable attributes (url, private/public) of an existing container registry reference. The code, provider, and type are immutable.",
+      "strict": true,
+      "pluginName": "@codiac.io/codiac-cli",
+      "pluginAlias": "@codiac.io/codiac-cli",
+      "pluginType": "core",
+      "aliases": [],
+      "hiddenAliases": [],
+      "examples": [
+        {
+          "description": "Edit a registry interactively (select it, then change its url).",
+          "command": "<%= config.bin %> <%= command.id %>"
+        },
+        {
+          "description": "Correct a registry's url (identified by its Codiac code, not its url).",
+          "command": "<%= config.bin %> <%= command.id %> --registry devCodiacContainers --url newname.azurecr.io --silent"
+        },
+        {
+          "description": "Flip a registry to public (no pull authentication).",
+          "command": "<%= config.bin %> <%= command.id %> --registry 'Other|ghcr' --no-private --silent"
+        },
+        {
+          "description": "Render the equivalent silent command without executing it.",
+          "command": "<%= config.bin %> <%= command.id %> --registry devCodiacContainers --url newname.azurecr.io --to-script"
+        }
+      ],
+      "flags": {
+        "help": {
+          "name": "help",
+          "type": "boolean",
+          "char": "h",
+          "description": "Show CLI help.",
+          "allowNo": false
+        },
+        "registry": {
+          "name": "registry",
+          "type": "option",
+          "char": "r",
+          "description": "The Codiac code identifying the registry to edit (NOT its url). Run `cod imageRegistry list` to see codes.",
+          "required": false,
+          "multiple": false
+        },
+        "url": {
+          "name": "url",
+          "type": "option",
+          "char": "u",
+          "description": "The corrected container registry url.",
+          "required": false,
+          "multiple": false
+        },
+        "private": {
+          "name": "private",
+          "type": "boolean",
+          "description": "Whether pulling from this registry requires authentication. Pass --private or --no-private only to change it; omit to leave it unchanged.",
+          "allowNo": true
+        },
+        "silent": {
+          "name": "silent",
+          "type": "boolean",
+          "description": "Executes without any user interaction; fails on missing or invalid arguments.",
+          "allowNo": false,
+          "exclusive": [
+            "echo",
+            "to-script"
+          ]
+        },
+        "echo": {
+          "name": "echo",
+          "type": "boolean",
+          "description": "Renders the equivalent non-interactive command for future use before executing.",
+          "allowNo": false,
+          "exclusive": [
+            "to-script",
+            "silent"
+          ]
+        },
+        "to-script": {
+          "name": "to-script",
+          "type": "boolean",
+          "description": "Renders the equivalent non-interactive command without executing it.",
+          "allowNo": false,
+          "exclusive": [
+            "echo",
+            "silent"
+          ]
+        }
+      },
+      "args": {}
+    },
     "imageRegistry:forget": {
       "id": "imageRegistry:forget",
       "description": "Removes the reference to the given container registry for the tenant.  Does NOT delete the registry itself.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@codiac.io/codiac-cli",
   "description": "Local command line interface for managing enterprise assets and environments.",
-  "version": "1.3.254",
+  "version": "1.3.256",
   "author": "Codiac",
   "bin": {
     "codiac": "./bin/run",

package/skill/references/cli-reference.md

@@ -33,7 +33,7 @@ Top-level: `branch`, `build`, `cli`, `commit`, `deploy`, `dep`, `identity`, `ini
 - **filestore**: `capture`, `forget`, `list`
 - **host**: `map`, `list`, `view`, `delete`
 - **identity**: `list`, `delete`
-- **imageRegistry**: `capture`, `forget`, `list`; `pullSecret set/unset`
+- **imageRegistry**: `capture`, `edit`, `forget`, `list`; `pullSecret set/unset`  *(`-r`/`--registry` and `--chart-repo` take the registry **code**, e.g. `devCodiacContainers`, NOT its url; `edit` fixes an existing registry's url in place)*
 - **images**: `add`, `list`, `patch`, `remove`, `version`, `version bump`
 - **import**: `cluster`
 - **kit**: `create`

package/skill/references/concepts.md

@@ -74,9 +74,32 @@ Lifecycle:
 4. Inspect/operate: `cod asset list`, `cod asset view` (logs/term/exec/env/config/status),
    `cod asset undeploy`, `cod asset recycle`.
 
-**Image registries — policy:** never AWS ECR. Images live in **Docker Hub** or **Azure
-Container Registry (ACR)**. Registries are captured as first-class objects
-(`cod imageRegistry ...`, `cod secretStore ...` for pull secrets).
+**Image registries.** Never AWS ECR — images live in **Docker Hub** or **Azure Container
+Registry (ACR)** (plus generic OCI registries like ghcr/quay/Harbor via provider `other`).
+A registry is a first-class object with two fields you must **not** conflate:
+
+- **`code`** — the Codiac identifier you reference everywhere: `-r`/`--registry` on
+  `asset create`, `--chart-repo`, `asset edit --registry`. Its shape depends on how it was
+  captured — Azure ACR → the resource name (`devCodiacContainers`); Docker Hub →
+  `DockerHub|<org>` (`DockerHub|codiacimages`); generic OCI → `Other|<label>` (`Other|ghcr`);
+  Helm repo → `helm|<provider>|<name>` (`helm|artifactHub|hermes-agent`).
+- **`url`** — the registry endpoint (`devCodiacContainers.azurecr.io`, `index.docker.io`).
+
+`-r`/`--registry` matches the **code**, never the url. Passing the url
+(`devCodiacContainers.azurecr.io`) fails with *"No image registry has code […]"* — which
+reads like it was never registered. **Always `cod imageRegistry list` first** to read the
+exact code.
+
+Managing them: `cod imageRegistry capture` (add — create-only; it *throws* if the code already
+exists), `cod imageRegistry edit` (fix an existing registry's **url** or private/public in
+place — `code`/`provider`/`type` are immutable), `cod imageRegistry forget` (drop the
+reference), `cod imageRegistry list`, and `cod imageRegistry pullSecret set/unset` for auth.
+`cod secretStore ...` holds the pull secrets themselves.
+
+**Gotcha — assets snapshot their registry.** An asset stores a *copy* of `image.registry`
+(url included) at create time, and the deploy path reads that copy, not the registry record.
+So after `cod imageRegistry edit` corrects a url, already-created assets still carry the old
+one — run `cod asset edit --registry <code>` on each to re-resolve its embedded reference.
 
 The `type` of an asset (`helm` vs `service`) changes which config `targetFile`s apply (see §3):
 `[helm]` values for charts, `[env]`/`[footprint]`/etc. for services.