@ggui-ai/cli 0.1.0-rc.1

package/dist/auth-store.d.ts

@@ -0,0 +1,67 @@
+/**
+ * v1 on-disk document. Bumped on breaking changes; loaders that
+ * encounter `version > 1` should refuse to read and prompt the user
+ * to upgrade the CLI.
+ */
+export interface AuthSessionDocument {
+    readonly version: 1;
+    /** API endpoint these tokens are bound to (origin only, no path). */
+    readonly endpoint: string;
+    /** Cognito sub of the authenticated user. */
+    readonly userId: string;
+    /** Stable session id grouping access + refresh on the server. */
+    readonly sessionId: string;
+    /** `cli_at_*` bearer. Send as `Authorization: Bearer <accessToken>`. */
+    readonly accessToken: string;
+    /** Unix epoch SECONDS — used to decide when to proactively refresh. */
+    readonly accessExpiresAt: number;
+    /** `cli_rt_*` bearer. Used by /v1/auth/refresh. */
+    readonly refreshToken: string;
+    /** Unix epoch SECONDS — past this, the user must `ggui login` again. */
+    readonly refreshExpiresAt: number;
+    /** Free-form label the CLI provided at login (e.g. host name). */
+    readonly clientName: string;
+    /** ISO 8601 timestamp of when this document was written. */
+    readonly writtenAt: string;
+}
+/** Resolution of the API endpoint, with explicit precedence. */
+export interface ResolvedEndpoint {
+    readonly url: string;
+    readonly source: 'env' | 'auth.json' | 'default';
+}
+/**
+ * Resolve which endpoint a command should use.
+ *
+ * Precedence:
+ *   1. `GGUI_API_URL` env var — operator override (dev / sandbox testing).
+ *   2. `~/.ggui/auth.json#endpoint` — captured at last `ggui login`.
+ *   3. `https://api.ggui.ai` — production default.
+ *
+ * Used by `ggui login` (where there's no auth.json yet) and by every
+ * authenticated command (where auth.json holds the canonical value).
+ */
+export declare function resolveEndpoint(): ResolvedEndpoint;
+/**
+ * Load the auth.json document. Returns null if missing OR malformed
+ * (unknown version, missing fields, parse error). Callers print
+ * "ggui login" prompt on null rather than crash.
+ */
+export declare function tryLoadAuthSession(): AuthSessionDocument | null;
+/**
+ * Stricter loader — throws with a friendly message for the
+ * authenticated-command path. CLI surfaces the message + exit 1.
+ */
+export declare function loadAuthSession(): AuthSessionDocument;
+/**
+ * Atomically write the document with mode `0o600`. Uses the
+ * write-temp + rename pattern so a crash mid-write doesn't leave a
+ * partial document.
+ */
+export declare function saveAuthSession(doc: AuthSessionDocument): void;
+/**
+ * Delete the auth.json file. No-op if missing. Used by `ggui logout`.
+ */
+export declare function deleteAuthSession(): {
+    deleted: boolean;
+};
+//# sourceMappingURL=auth-store.d.ts.map

package/dist/auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../src/auth-store.ts"],"names":[],"mappings":"AAoCA;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;CAClD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,CAUlD;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,mBAAmB,GAAG,IAAI,CAiB/D;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,mBAAmB,CAQrD;AAmBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CA2B9D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAKxD"}

package/dist/auth-store.js

@@ -0,0 +1,150 @@
+/**
+ * `~/.ggui/auth.json` reader / writer for the OSS `ggui` CLI.
+ *
+ * The file is written by `ggui login` after a successful device-flow
+ * exchange against `api.ggui.ai` (S2 endpoints). All authenticated
+ * subcommands (`whoami`, `keys *`) read it via {@link loadAuthSession}.
+ *
+ * On-disk shape is `AuthSessionDocument` v1 — a small JSON document
+ * with the access + refresh bearers, their expiry timestamps, the
+ * userId the tokens are bound to, and the API endpoint used at login
+ * time. Mode `0o600` is enforced on every write — the tokens are
+ * bearer secrets equivalent to a short-lived password.
+ *
+ * This file is distinct from `~/.ggui/credentials.json` (BYOK
+ * provider keys, see `paths.ts`). The two coexist; one stores
+ * provider-API keys for local generation, the other stores ggui.ai
+ * session bearers for hosted-key management.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { getAuthFile, getConfigDir } from './paths.js';
+/**
+ * Default endpoint URL — `api.ggui.ai` once Route53 + ACM land (S6).
+ * Until then the operator overrides via `GGUI_API_URL` env to point
+ * at the deployed exec-api URL surfaced in `amplify_outputs.json`.
+ */
+const DEFAULT_API_URL = 'https://api.ggui.ai';
+/**
+ * Resolve which endpoint a command should use.
+ *
+ * Precedence:
+ *   1. `GGUI_API_URL` env var — operator override (dev / sandbox testing).
+ *   2. `~/.ggui/auth.json#endpoint` — captured at last `ggui login`.
+ *   3. `https://api.ggui.ai` — production default.
+ *
+ * Used by `ggui login` (where there's no auth.json yet) and by every
+ * authenticated command (where auth.json holds the canonical value).
+ */
+export function resolveEndpoint() {
+    const envOverride = process.env['GGUI_API_URL'];
+    if (envOverride && envOverride.length > 0) {
+        return { url: stripTrailingSlash(envOverride), source: 'env' };
+    }
+    const session = tryLoadAuthSession();
+    if (session) {
+        return { url: stripTrailingSlash(session.endpoint), source: 'auth.json' };
+    }
+    return { url: DEFAULT_API_URL, source: 'default' };
+}
+function stripTrailingSlash(url) {
+    return url.endsWith('/') ? url.slice(0, -1) : url;
+}
+/**
+ * Load the auth.json document. Returns null if missing OR malformed
+ * (unknown version, missing fields, parse error). Callers print
+ * "ggui login" prompt on null rather than crash.
+ */
+export function tryLoadAuthSession() {
+    const path = getAuthFile();
+    if (!existsSync(path))
+        return null;
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!isAuthSessionDocument(parsed))
+        return null;
+    return parsed;
+}
+/**
+ * Stricter loader — throws with a friendly message for the
+ * authenticated-command path. CLI surfaces the message + exit 1.
+ */
+export function loadAuthSession() {
+    const session = tryLoadAuthSession();
+    if (!session) {
+        throw new Error('No active ggui session. Run `ggui login` first.');
+    }
+    return session;
+}
+function isAuthSessionDocument(x) {
+    if (typeof x !== 'object' || x === null)
+        return false;
+    const r = x;
+    return (r['version'] === 1 &&
+        typeof r['endpoint'] === 'string' &&
+        typeof r['userId'] === 'string' &&
+        typeof r['sessionId'] === 'string' &&
+        typeof r['accessToken'] === 'string' &&
+        typeof r['accessExpiresAt'] === 'number' &&
+        typeof r['refreshToken'] === 'string' &&
+        typeof r['refreshExpiresAt'] === 'number' &&
+        typeof r['clientName'] === 'string' &&
+        typeof r['writtenAt'] === 'string');
+}
+/**
+ * Atomically write the document with mode `0o600`. Uses the
+ * write-temp + rename pattern so a crash mid-write doesn't leave a
+ * partial document.
+ */
+export function saveAuthSession(doc) {
+    const dir = getConfigDir();
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    else {
+        chmodSync(dir, 0o700);
+    }
+    const target = getAuthFile();
+    const tmp = `${target}.tmp-${process.pid}-${Date.now()}`;
+    // Write JSON pretty-printed for human-readable inspection.
+    writeFileSync(tmp, `${JSON.stringify(doc, null, 2)}\n`, {
+        encoding: 'utf8',
+        mode: 0o600,
+    });
+    // chmod the tmp file in case the writeFileSync mode arg was ignored
+    // by the platform (Windows tolerates 0o600 silently as 0o666).
+    try {
+        chmodSync(tmp, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+    renameSync(tmp, target);
+    try {
+        chmodSync(target, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+}
+/**
+ * Delete the auth.json file. No-op if missing. Used by `ggui logout`.
+ */
+export function deleteAuthSession() {
+    const path = getAuthFile();
+    if (!existsSync(path))
+        return { deleted: false };
+    unlinkSync(path);
+    return { deleted: true };
+}

package/dist/auth-whoami.d.ts

@@ -0,0 +1,3 @@
+export declare const WHOAMI_HELP = "ggui whoami \u2014 print the authenticated user\n\nUsage:\n  ggui whoami\n\nReads the local session from ~/.ggui/auth.json and calls /v1/me.\n";
+export declare function runWhoamiCommand(args: readonly string[]): Promise<number>;
+//# sourceMappingURL=auth-whoami.d.ts.map

package/dist/auth-whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-whoami.d.ts","sourceRoot":"","sources":["../src/auth-whoami.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,WAAW,mJAMvB,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC/E"}

package/dist/auth-whoami.js

@@ -0,0 +1,52 @@
+/**
+ * `ggui whoami` — print the authenticated user's profile.
+ *
+ * Reads `~/.ggui/auth.json`, calls GET /v1/me with the access bearer,
+ * and pretty-prints the result. On 401, the api-client transparently
+ * refreshes via /v1/auth/refresh; if that also fails the user gets
+ * a "Run `ggui login` again" message and exit 1.
+ */
+import { ApiError, getMe } from './api-client.js';
+import { tryLoadAuthSession } from './auth-store.js';
+export const WHOAMI_HELP = `ggui whoami — print the authenticated user
+
+Usage:
+  ggui whoami
+
+Reads the local session from ~/.ggui/auth.json and calls /v1/me.
+`;
+export async function runWhoamiCommand(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        process.stdout.write(WHOAMI_HELP);
+        return 0;
+    }
+    const session = tryLoadAuthSession();
+    if (!session) {
+        process.stderr.write(`Not signed in. Run \`ggui login\` first.\n`);
+        return 1;
+    }
+    try {
+        const me = await getMe();
+        process.stdout.write(`User ID:        ${me.userId}\n`);
+        process.stdout.write(`Session ID:     ${me.sessionId}\n`);
+        if (me.clientName) {
+            process.stdout.write(`Client:         ${me.clientName}\n`);
+        }
+        const expiresAt = new Date(me.accessExpiresAt * 1000).toISOString();
+        process.stdout.write(`Access expires: ${expiresAt}\n`);
+        process.stdout.write(`Endpoint:       ${session.endpoint}\n`);
+        return 0;
+    }
+    catch (err) {
+        if (err instanceof ApiError) {
+            process.stderr.write(`ggui whoami: ${err.code}: ${err.message}\n`);
+        }
+        else if (err instanceof Error) {
+            process.stderr.write(`ggui whoami: ${err.message}\n`);
+        }
+        else {
+            process.stderr.write(`ggui whoami: unknown error\n`);
+        }
+        return 1;
+    }
+}

package/dist/blueprint-command.d.ts

@@ -0,0 +1,3 @@
+export declare const BLUEPRINT_HELP = "ggui blueprint \u2014 author + manage marketplace blueprints\n\nUsage:\n  ggui blueprint <subcommand> [options]\n\nSubcommands:\n  create       Scaffold a new blueprint repo.\n  publish      Build, sign, and push the blueprint in CWD to a marketplace registry.\n  install      Fetch, verify, and materialize a blueprint locally.\n  uninstall    Remove a locally-installed blueprint (reverse of install).\n  search       Search the marketplace registry for blueprints.\n\nRun `ggui blueprint <subcommand> --help` for subcommand-specific options.\n";
+export declare function runBlueprintCommand(args: readonly string[]): Promise<number>;
+//# sourceMappingURL=blueprint-command.d.ts.map

package/dist/blueprint-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-command.d.ts","sourceRoot":"","sources":["../src/blueprint-command.ts"],"names":[],"mappings":"AA6CA,eAAO,MAAM,cAAc,uiBAa1B,CAAC;AAEF,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CAsBjB"}

package/dist/blueprint-command.js

@@ -0,0 +1,203 @@
+/**
+ * `ggui blueprint <create|publish|install|search>` — kind-discriminated
+ * sibling of `gadget-command.ts`.
+ *
+ * - `create`  — scaffold a new blueprint repo (TSX + contract stub)
+ * - `publish` — build, sign, and push to a registry; manifest-kind
+ *               mismatch errors with a friendly redirect.
+ * - `install` — fetch, verify, and materialize a blueprint into
+ *               `.ggui/installed-blueprints/<id>/`.
+ * - `search`  — query the registry, hard-locked to `kind=blueprint`.
+ *
+ * A thin router that passes `kind: 'blueprint'` to the shared
+ * `internal/artifact-*` implementations. Per-kind state (scaffolders,
+ * help text) lives in sibling files; the rest is shared.
+ */
+import { BLUEPRINT_CREATE_HELP, parseBlueprintCreateFlags, runBlueprintCreate, } from './blueprint-create.js';
+import { buildPublishHelp, parseArtifactPublishFlags, runArtifactPublish, } from './internal/artifact-publish.js';
+import { buildInstallHelp, parseArtifactInstallFlags, runArtifactInstall, } from './internal/artifact-install.js';
+import { buildUninstallHelp, parseArtifactUninstallFlags, runArtifactUninstall, } from './internal/artifact-uninstall.js';
+import { buildSearchHelp, parseArtifactSearchFlags, runArtifactSearch, } from './internal/artifact-search.js';
+const KIND = 'blueprint';
+export const BLUEPRINT_HELP = `ggui blueprint — author + manage marketplace blueprints
+
+Usage:
+  ggui blueprint <subcommand> [options]
+
+Subcommands:
+  create       Scaffold a new blueprint repo.
+  publish      Build, sign, and push the blueprint in CWD to a marketplace registry.
+  install      Fetch, verify, and materialize a blueprint locally.
+  uninstall    Remove a locally-installed blueprint (reverse of install).
+  search       Search the marketplace registry for blueprints.
+
+Run \`ggui blueprint <subcommand> --help\` for subcommand-specific options.
+`;
+export async function runBlueprintCommand(args) {
+    const [sub, ...rest] = args;
+    if (!sub || sub === '--help' || sub === '-h') {
+        process.stdout.write(BLUEPRINT_HELP);
+        return sub ? 0 : 2;
+    }
+    switch (sub) {
+        case 'create':
+            return runCreate(rest);
+        case 'publish':
+            return runPublish(rest);
+        case 'install':
+            return runInstall(rest);
+        case 'uninstall':
+            return runUninstall(rest);
+        case 'search':
+            return runSearch(rest);
+        default:
+            process.stderr.write(`ggui blueprint: unknown subcommand "${sub}"\n\n`);
+            process.stderr.write(BLUEPRINT_HELP);
+            return 2;
+    }
+}
+/* -------------------------------------------------------------------------- */
+/* create                                                                     */
+/* -------------------------------------------------------------------------- */
+async function runCreate(args) {
+    const parsed = parseBlueprintCreateFlags(args);
+    if (parsed.error === '__help__') {
+        process.stdout.write(BLUEPRINT_CREATE_HELP);
+        return 0;
+    }
+    if (parsed.error) {
+        process.stderr.write(`ggui blueprint create: ${parsed.error}\n\n`);
+        process.stderr.write(BLUEPRINT_CREATE_HELP);
+        return 2;
+    }
+    if (!parsed.flags) {
+        process.stderr.write(`ggui blueprint create: failed to parse flags\n`);
+        return 2;
+    }
+    const result = await runBlueprintCreate(parsed.flags, { cwd: process.cwd() });
+    return renderCreateResult(result);
+}
+function renderCreateResult(result) {
+    if (!result.ok) {
+        process.stderr.write(`ggui blueprint create: ${result.message}\n`);
+        return 1;
+    }
+    process.stdout.write(`\n`);
+    process.stdout.write(`Scaffolded blueprint at ${result.targetDir}\n\n`);
+    process.stdout.write(`Files written:\n`);
+    for (const f of result.files) {
+        process.stdout.write(`  - ${f}\n`);
+    }
+    process.stdout.write(`\n`);
+    process.stdout.write(`Identifier:  ${result.manifest.scope}/${result.manifest.name}@${result.manifest.version}\n`);
+    process.stdout.write(`\nNext steps:\n`);
+    process.stdout.write(`  cd ${result.targetDir}\n`);
+    process.stdout.write(`  pnpm install\n`);
+    process.stdout.write(`  # implement the component in src/blueprint.tsx, then:\n`);
+    process.stdout.write(`  ggui blueprint publish\n\n`);
+    return 0;
+}
+/* -------------------------------------------------------------------------- */
+/* publish                                                                    */
+/* -------------------------------------------------------------------------- */
+async function runPublish(args) {
+    const flags = parseArtifactPublishFlags(args);
+    if (flags.help) {
+        process.stdout.write(buildPublishHelp(KIND));
+        return 0;
+    }
+    if (flags.error) {
+        process.stderr.write(`ggui blueprint publish: ${flags.error}\n`);
+        return 2;
+    }
+    const result = await runArtifactPublish({
+        kind: KIND,
+        ...(flags.registry !== undefined ? { registry: flags.registry } : {}),
+        dryRun: flags.dryRun,
+        ...(flags.key !== undefined ? { key: flags.key } : {}),
+        ...(flags.auth !== undefined ? { auth: flags.auth } : {}),
+    });
+    return result.exitCode;
+}
+/* -------------------------------------------------------------------------- */
+/* install                                                                    */
+/* -------------------------------------------------------------------------- */
+async function runInstall(args) {
+    const parsed = parseArtifactInstallFlags(KIND, args);
+    if ('error' in parsed) {
+        if (parsed.error === '__help__') {
+            process.stdout.write(buildInstallHelp(KIND));
+            return 0;
+        }
+        process.stderr.write(`ggui blueprint install: ${parsed.error}\n\n`);
+        process.stderr.write(buildInstallHelp(KIND));
+        return 2;
+    }
+    return runArtifactInstall(parsed, {
+        cwd: process.cwd(),
+        env: process.env,
+        fetch: globalThis.fetch.bind(globalThis),
+    });
+}
+/* -------------------------------------------------------------------------- */
+/* uninstall                                                                  */
+/* -------------------------------------------------------------------------- */
+async function runUninstall(args) {
+    const parsed = parseArtifactUninstallFlags(KIND, args);
+    if ('error' in parsed) {
+        if (parsed.error === '__help__') {
+            process.stdout.write(buildUninstallHelp(KIND));
+            return 0;
+        }
+        process.stderr.write(`ggui blueprint uninstall: ${parsed.error}\n\n`);
+        process.stderr.write(buildUninstallHelp(KIND));
+        return 2;
+    }
+    const result = await runArtifactUninstall(parsed, {
+        cwd: process.cwd(),
+    });
+    return result.exitCode;
+}
+/* -------------------------------------------------------------------------- */
+/* search                                                                     */
+/* -------------------------------------------------------------------------- */
+async function runSearch(args) {
+    const parsed = parseArtifactSearchFlags(KIND, args);
+    if (parsed.error === '__help__') {
+        process.stdout.write(buildSearchHelp(KIND));
+        return 0;
+    }
+    if (parsed.error) {
+        process.stderr.write(`ggui blueprint search: ${parsed.error}\n\n`);
+        process.stderr.write(buildSearchHelp(KIND));
+        return 2;
+    }
+    if (!parsed.flags) {
+        process.stderr.write(`ggui blueprint search: failed to parse flags\n`);
+        return 2;
+    }
+    const result = await runArtifactSearch(parsed.flags, {
+        cwd: process.cwd(),
+        env: { GGUI_REGISTRY: process.env['GGUI_REGISTRY'] },
+        fetch: globalThis.fetch.bind(globalThis),
+    });
+    return renderSearchResult(result, parsed.flags.json === true);
+}
+function renderSearchResult(result, json) {
+    if (!result.ok) {
+        process.stderr.write(`ggui blueprint search: ${result.message}\n`);
+        return 1;
+    }
+    if (json) {
+        process.stdout.write(`${result.json}\n`);
+        return 0;
+    }
+    if (result.response.results.length === 0) {
+        process.stderr.write('No blueprints found matching the supplied criteria.\n');
+        return 0;
+    }
+    for (const line of result.lines) {
+        process.stdout.write(`${line}\n`);
+    }
+    return 0;
+}

package/dist/blueprint-create.d.ts

@@ -0,0 +1,71 @@
+import { type BlueprintManifest } from '@ggui-ai/artifact-manifest';
+/**
+ * Flag bundle accepted by {@link runBlueprintCreate}. Mirrors the CLI's
+ * positional + flag surface; pulled out so `blueprint-command.ts` can
+ * build it from `process.argv` and tests can build it from object literals.
+ */
+export interface BlueprintCreateFlags {
+    /** Positional `<scope>/<name>`. Validated in {@link runBlueprintCreate}. */
+    readonly scopeName: string;
+    /**
+     * Target directory. Defaults to the `name` portion of `scopeName`
+     * (i.e. `@my-org/login-form` → `./login-form`). Resolved relative
+     * to `cwd` at write time.
+     */
+    readonly dir?: string;
+    /** Optional one-line `description` for the manifest. */
+    readonly description?: string;
+    /** Manifest `visibility`. Defaults to {@link DEFAULT_VISIBILITY}. */
+    readonly visibility?: BlueprintManifest['visibility'];
+}
+export interface ParsedBlueprintCreateFlags {
+    readonly flags?: BlueprintCreateFlags;
+    /** `'__help__'` for `--help`; other strings = usage error. */
+    readonly error?: string;
+}
+/**
+ * Parse the `ggui blueprint create` flag tail. Returns a discriminated
+ * `{error}` vs. successful flags so the caller doesn't throw on user
+ * input.
+ */
+export declare function parseBlueprintCreateFlags(args: readonly string[]): ParsedBlueprintCreateFlags;
+/**
+ * Build + validate the {@link BlueprintManifest} BEFORE any write.
+ * A template regression that drifts (e.g. drops `source`) blows up
+ * here, before any file lands on disk, so authors don't see a corrupt
+ * scaffold.
+ */
+export declare function buildScaffoldManifest(args: {
+    scope: string;
+    name: string;
+    visibility: BlueprintManifest['visibility'];
+    description?: string;
+    source: string;
+}): BlueprintManifest;
+/** Top-level scaffolder result — mirror of `GadgetCreateResult`. */
+export interface BlueprintCreateSuccess {
+    readonly ok: true;
+    /** Absolute path to the scaffolded blueprint directory. */
+    readonly targetDir: string;
+    /** Files written, relative to `targetDir`. */
+    readonly files: readonly string[];
+    /** Resolved manifest — useful for callers that want to chain on it. */
+    readonly manifest: BlueprintManifest;
+}
+export interface BlueprintCreateFailure {
+    readonly ok: false;
+    readonly code: 'invalid-scope-name' | 'invalid-name' | 'target-not-empty' | 'manifest-invalid' | 'fs-error';
+    readonly message: string;
+}
+export type BlueprintCreateResult = BlueprintCreateSuccess | BlueprintCreateFailure;
+/**
+ * Run the blueprint scaffold end-to-end. Resolves the target dir,
+ * builds + validates the manifest, writes files. Returns a structured
+ * result so the CLI driver can render copy + exit code without
+ * re-deriving paths.
+ */
+export declare function runBlueprintCreate(flags: BlueprintCreateFlags, options: {
+    cwd: string;
+}): Promise<BlueprintCreateResult>;
+export declare const BLUEPRINT_CREATE_HELP = "ggui blueprint create \u2014 scaffold a new blueprint repo\n\nUsage:\n  ggui blueprint create <scope/name> [options]\n\nArguments:\n  <scope/name>     Required. `@my-org/login-form` style identifier.\n                   The scope (with leading `@`) becomes the manifest's\n                   `scope`; the segment after `/` becomes the `name`\n                   (must match `^[a-z0-9][a-z0-9_-]{0,63}$`).\n\nOptions:\n  --dir <path>             Target directory. Defaults to `./<name>`.\n  --description <text>     One-line description threaded into the\n                           manifest + README.\n  --visibility <p>         `public` (default, sigstore-signed) or\n                           `private` (Ed25519-signed, org-only).\n  --help, -h               Show this help.\n\nOutput:\n  <dir>/ggui.blueprint.json   Strict-schema manifest (validated before write).\n  <dir>/package.json          Workspace shell.\n  <dir>/src/blueprint.tsx     Default-exported React component stub.\n  <dir>/src/contract.ts       Matching `DataContract` stub.\n  <dir>/README.md             One-paragraph orientation.\n\nAfter scaffold:\n  cd <dir> && pnpm install\n  # implement the component in src/blueprint.tsx, then:\n  ggui blueprint publish     # publishes to the resolved registry.\n";
+//# sourceMappingURL=blueprint-create.d.ts.map

package/dist/blueprint-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-create.d.ts","sourceRoot":"","sources":["../src/blueprint-create.ts"],"names":[],"mappings":"AA2BA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AASpC;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,0BAA0B,CA0D5B;AAkED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,iBAAiB,CAepB;AAED,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,IAAI,EACT,oBAAoB,GACpB,cAAc,GACd,kBAAkB,GAClB,kBAAkB,GAClB,UAAU,CAAC;IACf,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAiFpF;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAwIhC;AAED,eAAO,MAAM,qBAAqB,owCA8BjC,CAAC"}