@ggui-ai/cli 0.6.3 → 0.8.0

package/dist/internal/artifact-install.js

@@ -18,10 +18,15 @@
  *
  *   GET <registry>/pkg/<scope>/<name>/<version>
  *     200: { manifest, bundleUrl?, bundleSri?, signatureUrl?, compiledBytes?, publishedAt, publishedBy }
- *     403: { error: 'forbidden', message }   — private artifact (JWT not yet threaded)
  *     404: { error: 'not_found', message }   — artifactId/version unknown
+ *          OR a private artifact the caller may not read: the registry
+ *          answers both identically so existence never leaks. Install
+ *          sends no credentials, so every private row lands here — the
+ *          404 diagnosis carries that education.
  *     410: { manifest, …, publishedAt, publishedBy } — yanked (body shape = ReadPkgResponse)
- *     other 4xx/5xx: { error, message }
+ *     other 4xx/5xx: { error, message } — the registry itself never
+ *          answers a read with 403; one can only arrive from a WAF or
+ *          proxy in front of it and is reported as a bare status
  *
  *   GET <bundleUrl>  → raw esbuild output (presigned S3)
  *   GET <signatureUrl> → JSON-encoded {@link Ed25519Signature}
@@ -62,21 +67,10 @@ import { dirname, join } from 'node:path';
 import { sha384 } from '@noble/hashes/sha512.js';
 import { manifestToRegistryEntry, parseArtifactManifest, } from '@ggui-ai/artifact-manifest';
 import { canonicalJson, derivePublicKeyId, isGadgetSignature, verifyBundleEd25519, verifyBundleSigstore, } from '@ggui-ai/gadget-signing';
+import { FATAL_CATALOG_LINT_CODES, lintGadgetCatalog, resolveAppGadgets, strictGadgetDescriptorSchema, } from '@ggui-ai/protocol';
 import { READ_ERROR_CODES } from '@ggui-ai/registry-core';
-import { findGguiJson, readGguiJson, writeGguiJson, } from './ggui-json.js';
-/* -------------------------------------------------------------------------- */
-/* Defaults                                                                   */
-/* -------------------------------------------------------------------------- */
-/**
- * Fallback registry URL when neither `--registry`, `GGUI_REGISTRY`,
- * nor a `ggui.json#registry` field is set.
- *
- * Defaults to the PRODUCTION marketplace registry — an install with no
- * explicit config must reach the real registry, not a sandbox/dev host. The
- * `--registry` flag and the `GGUI_REGISTRY` env var always take precedence
- * (point them at `<env>.registry.sandbox.ggui.ai` for non-prod testing).
- */
-const DEFAULT_REGISTRY_URL = 'https://registry.ggui.ai';
+import { FIND_MAX_DEPTH, findGguiJson, readGadgetsFromGguiJson, readGguiJson, writeGguiJson, } from './ggui-json.js';
+import { DEFAULT_REGISTRY_URL, resolveRegistryUrl } from './registry-url.js';
 /**
  * Build verb-specific help text. Takes the `kind` so the rendered
  * lines say `ggui gadget install` / `ggui blueprint install` rather
@@ -98,9 +92,9 @@ Arguments:
                             side SemVer rule (no \`latest\`, no ranges).
 
 Options:
-  --registry <url>          Override the registry URL. Three-layer
-                            resolution: flag > ggui.json#registry >
-                            GGUI_REGISTRY env > default
+  --registry <url>          Override the registry URL. Resolution:
+                            flag > GGUI_REGISTRY env >
+                            ggui.json#registry > default
                             (\`${DEFAULT_REGISTRY_URL}\`).
   --no-prompt               Skip interactive prompts for any
                             \`publicEnv\` keys the gadget's manifest
@@ -284,59 +278,6 @@ function decodeBase64(s) {
         return undefined;
     }
 }
-/**
- * Resolve the registry URL the install should target.
- *
- * Precedence: `--registry` flag > `ggui.json#registry` > env var >
- * built-in {@link DEFAULT_REGISTRY_URL}. Mirrors publish + search's
- * three-layer chain, with the addition of a hardcoded fallback so an
- * install with no manifest still works against the sandbox registry
- * (consumers without a project yet shouldn't have to type
- * `--registry=…` every call).
- *
- * Returns the URL with any trailing `/` stripped so route concat below
- * (e.g. `${url}/pkg/…`) doesn't double-slash.
- */
-function resolveRegistry(args) {
-    const candidates = [];
-    if (args.flag !== undefined && args.flag.length > 0) {
-        candidates.push({ raw: args.flag, source: '--registry' });
-    }
-    else {
-        const registryField = args.gguiJson?.['registry'];
-        if (typeof registryField === 'string' && registryField.length > 0) {
-            candidates.push({ raw: registryField, source: 'ggui.json#registry' });
-        }
-        else {
-            const envValue = args.env?.['GGUI_REGISTRY'];
-            if (typeof envValue === 'string' && envValue.length > 0) {
-                candidates.push({ raw: envValue, source: 'GGUI_REGISTRY' });
-            }
-            else {
-                candidates.push({ raw: DEFAULT_REGISTRY_URL, source: '(default)' });
-            }
-        }
-    }
-    const picked = candidates[0];
-    let parsed;
-    try {
-        parsed = new URL(picked.raw);
-    }
-    catch {
-        return {
-            error: `registry URL is malformed (${picked.source}): ${picked.raw}`,
-        };
-    }
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-        return {
-            error: `registry URL must be http(s) (${picked.source}): ${picked.raw}`,
-        };
-    }
-    let serialized = parsed.toString();
-    while (serialized.endsWith('/'))
-        serialized = serialized.slice(0, -1);
-    return { url: serialized };
-}
 /**
  * Decompose `@scope/name` into its `scope` + `name` parts so the
  * read-handler URL `/pkg/{scope}/{name}/{version}` can be composed.
@@ -457,7 +398,7 @@ export async function runArtifactInstall(flags, deps = {}) {
     // ---- step 2: find ggui.json ----
     const gguiPath = findGguiJson(cwd);
     if (gguiPath === null) {
-        stderr(`${verb}: no ggui.json found in ${cwd} or any ancestor (up to 8 levels).\n`);
+        stderr(`${verb}: no ggui.json found in ${cwd} or any ancestor (up to ${FIND_MAX_DEPTH} levels).\n`);
         return 2;
     }
     const loaded = readGguiJson(gguiPath);
@@ -467,13 +408,16 @@ export async function runArtifactInstall(flags, deps = {}) {
     }
     const gguiJson = loaded.value;
     // ---- step 3: resolve registry URL ----
-    const registryRes = resolveRegistry({
+    // Shared resolver (`./registry-url.ts`), READ-verb posture: flag →
+    // GGUI_REGISTRY env → nearest ggui.json#registry → public default.
+    const registryRes = resolveRegistryUrl({
         ...(flags.registry !== undefined ? { flag: flags.registry } : {}),
-        gguiJson,
-        env,
+        cwd,
+        env: { GGUI_REGISTRY: env['GGUI_REGISTRY'] },
+        defaultUrl: DEFAULT_REGISTRY_URL,
     });
-    if ('error' in registryRes) {
-        stderr(`${verb}: ${registryRes.error}\n`);
+    if (!registryRes.ok) {
+        stderr(`${verb}: ${registryRes.message}\n`);
         return 1;
     }
     const registryUrl = registryRes.url;
@@ -492,33 +436,47 @@ export async function runArtifactInstall(flags, deps = {}) {
         stderr(`${verb}: network error fetching registry: ${err instanceof Error ? err.message : String(err)}\n`);
         return 1;
     }
-    let pkgBody;
-    try {
-        pkgBody = await pkgRes.json();
-    }
-    catch (err) {
-        stderr(`${verb}: registry returned ${pkgRes.status} with non-JSON body: ${err instanceof Error ? err.message : String(err)}\n`);
-        return 1;
-    }
+    // Status checks BEFORE any body parse — a WAF/proxy in front of the
+    // registry may answer 404/410 with an HTML or empty body, and the
+    // status-specific diagnostics must still fire. Only the paths that
+    // actually consume the body parse it.
     if (pkgRes.status === 404) {
-        stderr(`${verb}: package ${flags.artifactId}@${flags.version} not found\n`);
+        // The registry answers an unauthorized private read with the
+        // SAME not-found shape as a true miss (no existence signal), so
+        // the CLI cannot tell "missing" from "private and not yours" —
+        // one message covers both honestly.
+        stderr(`${verb}: package ${flags.artifactId}@${flags.version} not found ` +
+            `(or not visible: private artifacts answer as not-found, and the CLI sends install requests without credentials — only public artifacts are installable).\n`);
         return 1;
     }
     if (pkgRes.status === 410) {
         stderr(`${verb}: ${flags.artifactId}@${flags.version} was yanked; choose a different version\n`);
         return 1;
     }
-    if (pkgRes.status === 403) {
-        stderr(`${verb}: ${flags.artifactId}@${flags.version} is private — log in with \`ggui auth login\` (JWT auth for install is not yet supported)\n`);
-        return 1;
-    }
     if (!pkgRes.ok) {
-        const detail = isReadErrorBody(pkgBody)
-            ? ` (${pkgBody.error}: ${pkgBody.message})`
-            : '';
+        // Structured registry error bodies carry `(code: message)` detail;
+        // a non-JSON body (proxy error page) degrades to the bare status.
+        let detail = '';
+        try {
+            const errBody = await pkgRes.json();
+            if (isReadErrorBody(errBody)) {
+                detail = ` (${errBody.error}: ${errBody.message})`;
+            }
+        }
+        catch {
+            // Non-JSON error body — the status line is all we can report.
+        }
         stderr(`${verb}: registry returned ${pkgRes.status}${detail}\n`);
         return 1;
     }
+    let pkgBody;
+    try {
+        pkgBody = await pkgRes.json();
+    }
+    catch (err) {
+        stderr(`${verb}: registry returned ${pkgRes.status} with non-JSON body: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
     if (!isReadPkgResponse(pkgBody)) {
         stderr(`${verb}: registry response did not match ReadPkgResponse shape\n`);
         return 1;
@@ -700,11 +658,61 @@ export async function runArtifactInstall(flags, deps = {}) {
             ...(readPkg.bundleUrl !== undefined ? { bundleUrl: readPkg.bundleUrl } : {}),
             ...(readPkg.bundleSri !== undefined ? { bundleSri: readPkg.bundleSri } : {}),
         });
+        // Write-boundary validation (gadget catalog foundations,
+        // 2026-08-09): the composed row is checked BEFORE it touches the
+        // in-memory catalog. The manifest schema and the descriptor schema
+        // are separate validators (e.g. manifest `connect[]` entries are
+        // free-form strings while descriptor `connect[]` entries must be
+        // full URLs), so a manifest that parsed clean can still compose to
+        // a row the catalog schema rejects.
+        const composedCheck = strictGadgetDescriptorSchema.safeParse(entry);
+        if (!composedCheck.success) {
+            stderr(`${verb}: composed descriptor failed validation: ${formatZodIssues(composedCheck.error)}\n`);
+            return 1;
+        }
         const writeRes = appendGadget(gguiJson, entry);
         if ('error' in writeRes) {
             stderr(`${verb}: ${writeRes.error}\n`);
             return 1;
         }
+        // Post-append catalog lint — any fatal `lintGadgetCatalog` code
+        // aborts the install BEFORE `writeGguiJson`, so a failing install
+        // leaves ggui.json untouched. Two sequential checks, each
+        // reporting paths in its OWN array: first the declared array
+        // (duplicate package, immutable-bundle mutation), then the
+        // RESOLVED union with the first-party stdlib floor (a gadget
+        // re-exporting a stdlib export name is only a collision
+        // post-union — installing it would break every later generation).
+        const postAppendRead = readGadgetsFromGguiJson(gguiJson);
+        if (!postAppendRead.ok) {
+            // The freshly composed row was already validated above, so the
+            // offending row predates this install.
+            stderr(`${verb}: ${postAppendRead.error} (This entry was already present before this install — nothing was written.)\n`);
+            return 1;
+        }
+        const postAppend = postAppendRead.gadgets;
+        const declaredFatal = lintGadgetCatalog(postAppend).filter((w) => FATAL_CATALOG_LINT_CODES.has(w.code));
+        if (declaredFatal.length > 0) {
+            stderr(`${verb}: install would corrupt the gadget catalog:\n${declaredFatal
+                .map((w) => `  ${w.code} ${w.path}: ${w.message}`)
+                .join('\n')}\n`);
+            return 1;
+        }
+        const resolvedFatal = lintGadgetCatalog(resolveAppGadgets(postAppend)).filter((w) => FATAL_CATALOG_LINT_CODES.has(w.code));
+        if (resolvedFatal.length > 0) {
+            stderr(`${verb}: install would corrupt the RESOLVED gadget catalog (declared extensions + the first-party stdlib floor):\n${resolvedFatal
+                .map((w) => `  ${w.code} ${w.path}: ${w.message}`)
+                .join('\n')}\n`);
+            return 1;
+        }
+        // Version-replace notice — rows are keyed by package, so
+        // installing any version replaces the existing row. When the
+        // versions differ (upgrade OR downgrade), say what was replaced;
+        // a silent downgrade is data loss the operator should see.
+        if (writeRes.replacedVersion !== undefined &&
+            writeRes.replacedVersion !== entry.version) {
+            stdout(`replaced: ${entry.package} ${writeRes.replacedVersion} → ${entry.version}\n`);
+        }
         // Required public-env keys. Gadget's `requires[]` lists the
         // `GGUI_PUBLIC_APP_*` keys the wrapper reads via getPublicEnv().
         // Prompt for each (or skip silently under --no-prompt).
@@ -770,9 +778,10 @@ export async function runArtifactInstall(flags, deps = {}) {
  * via `resolveAppGadgets` in `@ggui-ai/protocol` — so declaring an
  * extension never drops stdlib hooks from the generated UI.
  *
- * Idempotent on `(scope, name, version)` — re-running install on the
- * same identifier replaces the existing row rather than adding a
- * duplicate.
+ * Idempotent per PACKAGE — the catalog holds at most one descriptor
+ * per package (`LINT_GADGET_DUPLICATE_PACKAGE` is fatal); re-installing
+ * ANY version of an already-declared package replaces the package's
+ * row. A version upgrade is a replace, never a second row.
  */
 function appendGadget(gguiJson, entry) {
     const app = gguiJson['app'];
@@ -797,24 +806,42 @@ function appendGadget(gguiJson, entry) {
     if (!Array.isArray(libs)) {
         return { error: 'ggui.json#app.gadgets must be an array' };
     }
-    // Idempotent replace by `(package, version)` — a gadget descriptor
-    // is a PACKAGE, and `(package, version)` is its frozen registry
-    // identity tuple. Re-installing the same package version replaces
-    // the existing row rather than adding a duplicate.
+    // Idempotent replace by `package` ALONE — an app's catalog holds at
+    // most ONE descriptor per package (the wire references a package by
+    // name and the server resolves exactly one descriptor; two rows for
+    // one package trip the fatal `LINT_GADGET_DUPLICATE_PACKAGE` lint).
+    // Re-installing any version of an already-declared package replaces
+    // its row, so a version upgrade never accumulates the older row.
     const existingIdx = libs.findIndex((e) => {
         if (e === null || typeof e !== 'object')
             return false;
         const cand = e;
-        return cand.package === entry.package && cand.version === entry.version;
+        return cand.package === entry.package;
     });
     if (existingIdx >= 0) {
+        const prior = libs[existingIdx];
+        const replacedVersion = typeof prior.version === 'string' ? prior.version : undefined;
         libs[existingIdx] = entry;
+        return {
+            ok: true,
+            ...(replacedVersion !== undefined ? { replacedVersion } : {}),
+        };
     }
-    else {
-        libs.push(entry);
-    }
+    libs.push(entry);
     return { ok: true };
 }
+/**
+ * Format a zod error's issues as a one-line `path: message` list for
+ * stderr diagnostics.
+ */
+function formatZodIssues(error) {
+    return error.issues
+        .map((issue) => `${issue.path.join('.')}: ${issue.message}`)
+        .join('; ');
+}
+// The post-append catalog read routes through the package's ONE
+// gadget-catalog reader — `readGadgetsFromGguiJson` in
+// `./ggui-json.ts`, shared with the `ggui deploy` config push.
 /* -------------------------------------------------------------------------- */
 /* publicEnv prompts                                                          */
 /* -------------------------------------------------------------------------- */

package/dist/internal/artifact-publish.d.ts

@@ -7,29 +7,18 @@ import type { ArtifactKind } from '@ggui-ai/registry-core';
  * match. */
 export type { ArtifactKind };
 /**
- * Shape of the resolved options the publish core consumes. Built from
- * argv by {@link parseArtifactPublishFlags} so the core function is
- * dependency-injectable for tests.
+ * Shape of the resolved options the publish core consumes. Extends the
+ * flag subset of {@link ParsedPublishFlags} (via
+ * {@link PublishFlagOptions}) so the parser and the core cannot drift:
+ * a flag added to the parser lands in this type automatically, and
+ * routers forward the whole parsed object via
+ * {@link publishOptionsFromFlags} instead of hand-copying fields —
+ * hand-copying is exactly how `--identity-token` was silently dropped
+ * once.
  */
-export interface ArtifactPublishOptions {
+export interface ArtifactPublishOptions extends PublishFlagOptions {
     /** CLI verb the operator typed — enforced against the manifest kind. */
     readonly kind: ArtifactKind;
-    /** Override the registry URL — highest precedence. */
-    readonly registry?: string;
-    /** Skip the actual POST; run everything else. */
-    readonly dryRun: boolean;
-    /** Override the private-key path. */
-    readonly key?: string;
-    /**
-     * OIDC identity token for sigstore signing (public gadgets only).
-     * Mirrors cosign's `--identity-token` flag. If absent the CLI falls
-     * back through `GGUI_OIDC_TOKEN` → GH-Actions ambient → interactive.
-     * Ignored for private-gadget publishes (which sign with Ed25519).
-     */
-    readonly identityToken?: string;
-    /** Auth strategy + bearer token. `auth === undefined` → the stored
-     * `ggui login` session. */
-    readonly auth?: AuthFlags;
     /** Starting directory; defaults to `process.cwd()`. */
     readonly cwd?: string;
     /**
@@ -72,6 +61,9 @@ export interface PublishSuccess {
 export type PublishError = {
     readonly code: 'no_registry_resolved';
     readonly message: string;
+} | {
+    readonly code: 'invalid_registry';
+    readonly message: string;
 } | {
     readonly code: 'manifest_missing';
     readonly message: string;
@@ -122,15 +114,39 @@ export interface ConformanceIssue {
  * Returned by {@link parseArtifactPublishFlags}.
  */
 export interface ParsedPublishFlags {
+    /** Override the registry URL — highest precedence. */
     readonly registry?: string;
+    /** Skip the actual POST; run everything else. */
     readonly dryRun: boolean;
+    /** Override the private-key path. */
     readonly key?: string;
-    /** Parsed `--identity-token <jwt>` flag (sigstore / public gadgets). */
+    /**
+     * OIDC identity token for sigstore signing (public artifacts only).
+     * Mirrors cosign's `--identity-token` flag. If absent the CLI falls
+     * back through `GGUI_OIDC_TOKEN` → GH-Actions ambient → interactive.
+     * Ignored for private publishes (which sign with Ed25519).
+     */
     readonly identityToken?: string;
+    /** Auth strategy + bearer token. `auth === undefined` → the stored
+     * `ggui login` session. */
     readonly auth?: AuthFlags;
     readonly help: boolean;
     readonly error?: string;
 }
+/**
+ * The subset of {@link ParsedPublishFlags} the publish core consumes —
+ * everything except the parse-control fields (`help` / `error`).
+ * {@link ArtifactPublishOptions} extends this type, so parser and core
+ * stay structurally coupled by the compiler.
+ */
+export type PublishFlagOptions = Omit<ParsedPublishFlags, 'help' | 'error'>;
+/**
+ * Project a parsed flag bundle onto the options the publish core
+ * consumes. THE way routers hand flags to {@link runArtifactPublish} —
+ * forwarding the whole object means a future flag cannot be silently
+ * dropped in a router's hand-written spread.
+ */
+export declare function publishOptionsFromFlags(flags: ParsedPublishFlags): PublishFlagOptions;
 /**
  * Build verb-specific help text. Takes the `kind` so the rendered
  * lines say `ggui gadget publish` / `ggui blueprint publish` rather
@@ -155,20 +171,6 @@ export declare function parseArtifactPublishFlags(args: readonly string[]): Pars
  * surfaces a friendly redirect at step 2 + exits non-zero.
  */
 export declare function runArtifactPublish(opts: ArtifactPublishOptions): Promise<PublishResult>;
-interface RegistryResolution {
-    readonly ok: true;
-    readonly url: string;
-    readonly source: 'flag' | 'env' | 'ggui.json';
-}
-interface RegistryUnresolved {
-    readonly ok: false;
-    readonly message: string;
-}
-export declare function resolveRegistryUrl(opts: {
-    readonly flag?: string;
-    readonly env: NodeJS.ProcessEnv;
-    readonly cwd: string;
-}): RegistryResolution | RegistryUnresolved;
 /** Which credential the publish flow is sending to the registry.
  * Drives the 401 diagnostics — a rejected `ggui login` session points
  * the operator at the session/bearer split; a rejected bearer token

package/dist/internal/artifact-publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-publish.d.ts","sourceRoot":"","sources":["../../src/internal/artifact-publish.ts"],"names":[],"mappings":"AAiGA,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;YAIY;AACZ,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;+BAC2B;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;kEACkE;AAClE,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IACE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qHAAqH;IACrH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;CAAE,GACpH;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACzH;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAgC3D;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CAsErF;AAMD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAmQxB;AAMD,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;CAC/C;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GAAG,kBAAkB,GAAG,kBAAkB,CAsC1C;AA8MD;;;wDAGwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,aAAa,GAAG,qBAAqB,CAAA;KAAE,CAAC,CAAC;CACxF;AAkBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,CA6DpC"}
+{"version":3,"file":"artifact-publish.d.ts","sourceRoot":"","sources":["../../src/internal/artifact-publish.ts"],"names":[],"mappings":"AAgGA,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;YAIY;AACZ,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;kEACkE;AAClE,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IACE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qHAAqH;IACrH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;CAAE,GACpH;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACzH;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;+BAC2B;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,kBAAkB,GACxB,kBAAkB,CAGpB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAgC3D;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CA6ErF;AAMD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAiRxB;AA6ID;;;wDAGwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,aAAa,GAAG,qBAAqB,CAAA;KAAE,CAAC,CAAC;CACxF;AAkBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,CA6DpC"}

package/dist/internal/artifact-publish.js

@@ -58,8 +58,7 @@
  */
 import { build as esbuild } from 'esbuild';
 import { existsSync, readFileSync } from 'node:fs';
-import { dirname, isAbsolute, join, resolve } from 'node:path';
-import { URL } from 'node:url';
+import { dirname, isAbsolute, join } from 'node:path';
 import { GGUI_BLUEPRINT_JSON_FILENAME, GGUI_GADGET_JSON_FILENAME, parseBlueprintManifest, parseGadgetManifest, } from '@ggui-ai/artifact-manifest';
 import { canonicalJson, derivePublicKeyId, generateEd25519Keypair, publicKeyFromPrivate, signBundleEd25519, signBundleSigstore, } from '@ggui-ai/gadget-signing';
 import { PROTOCOL_VERSION } from '@ggui-ai/protocol';
@@ -69,6 +68,17 @@ import { saveAuthSession, tryLoadAuthSession, } from '../auth-store.js';
 import { ApiError, postAuthRefresh } from '../api-client.js';
 import { getPrivateKeyPath, hasKeypair, readPrivateKey, scopeOf, writePrivateKey, } from './key-store.js';
 import { acquireAuthToken, parseAuthFlags, AUTH_HELP_FRAGMENT, } from './auth-strategy.js';
+import { resolveRegistryUrl } from './registry-url.js';
+/**
+ * Project a parsed flag bundle onto the options the publish core
+ * consumes. THE way routers hand flags to {@link runArtifactPublish} —
+ * forwarding the whole object means a future flag cannot be silently
+ * dropped in a router's hand-written spread.
+ */
+export function publishOptionsFromFlags(flags) {
+    const { help: _help, error: _error, ...options } = flags;
+    return options;
+}
 /**
  * Build verb-specific help text. Takes the `kind` so the rendered
  * lines say `ggui gadget publish` / `ggui blueprint publish` rather
@@ -166,7 +176,12 @@ export function parseArtifactPublishFlags(args) {
                 value = rest[i + 1];
                 i += 1;
             }
-            if (typeof value !== 'string' || value.length === 0) {
+            // Leading `--` means the "value" is actually the next flag —
+            // `--identity-token --dry-run` must not swallow `--dry-run` as
+            // the token (JWTs never start with `--`).
+            if (typeof value !== 'string' ||
+                value.length === 0 ||
+                value.startsWith('--')) {
                 return { dryRun, help, error: '--identity-token requires a value' };
             }
             identityToken = value;
@@ -205,10 +220,23 @@ export async function runArtifactPublish(opts) {
     const now = opts.now ?? (() => Math.floor(Date.now() / 1000));
     const fetchImpl = opts.fetch ?? globalThis.fetch.bind(globalThis);
     // ---- step 1: resolve registry URL ----
-    const registryRes = resolveRegistryUrl({ flag: opts.registry, env: process.env, cwd });
+    // Shared resolver (`./registry-url.ts`), WRITE-verb posture: flag →
+    // GGUI_REGISTRY env → nearest ggui.json#registry, and NO default —
+    // operators must opt into a publish target explicitly.
+    const registryRes = resolveRegistryUrl({
+        ...(opts.registry !== undefined ? { flag: opts.registry } : {}),
+        env: process.env,
+        cwd,
+    });
     if (!registryRes.ok) {
         stderr(`${verb}: ${registryRes.message}\n`);
-        return { ok: false, exitCode: 1, error: { code: 'no_registry_resolved', message: registryRes.message } };
+        // Preserve the resolver's code split (mirrors search + keys
+        // register): "nothing configured" and "configured but unusable"
+        // are different operator problems.
+        const error = registryRes.code === 'no-registry'
+            ? { code: 'no_registry_resolved', message: registryRes.message }
+            : { code: 'invalid_registry', message: registryRes.message };
+        return { ok: false, exitCode: 1, error };
     }
     const registryUrl = registryRes.url;
     stdout(`registry: ${registryUrl} (${registryRes.source})\n`);
@@ -445,98 +473,6 @@ export async function runArtifactPublish(opts) {
         },
     };
 }
-export function resolveRegistryUrl(opts) {
-    if (opts.flag && opts.flag.length > 0) {
-        if (!isValidUrl(opts.flag)) {
-            return {
-                ok: false,
-                message: `--registry value is not a valid URL: ${opts.flag}`,
-            };
-        }
-        return { ok: true, url: stripTrailingSlash(opts.flag), source: 'flag' };
-    }
-    const envValue = opts.env['GGUI_REGISTRY'];
-    if (envValue && envValue.length > 0) {
-        if (!isValidUrl(envValue)) {
-            return {
-                ok: false,
-                message: `GGUI_REGISTRY is not a valid URL: ${envValue}`,
-            };
-        }
-        return { ok: true, url: stripTrailingSlash(envValue), source: 'env' };
-    }
-    const ggui = findAndReadGguiJsonRegistry(opts.cwd);
-    if (ggui.found) {
-        if (!isValidUrl(ggui.registry)) {
-            return {
-                ok: false,
-                message: `ggui.json#registry at ${ggui.path} is not a valid URL: ${ggui.registry}`,
-            };
-        }
-        return { ok: true, url: stripTrailingSlash(ggui.registry), source: 'ggui.json' };
-    }
-    return {
-        ok: false,
-        message: 'no registry resolved. Set one of:\n' +
-            '  --registry <url>\n' +
-            '  GGUI_REGISTRY env var\n' +
-            '  "registry": "<url>" in the nearest ggui.json',
-    };
-}
-/**
- * Walk up from `startDir` looking for the nearest `ggui.json` with a
- * top-level `registry` string field. Returns the first match.
- *
- * This is intentionally hand-rolled (not via `@ggui-ai/project-config`)
- * because the schema there has not grown a typed `registry` field yet;
- * until it does, the field is read opportunistically without forcing a
- * parallel schema migration.
- */
-function findAndReadGguiJsonRegistry(startDir) {
-    let dir = resolve(startDir);
-    for (let i = 0; i <= 16; i++) {
-        const candidate = join(dir, 'ggui.json');
-        if (existsSync(candidate)) {
-            const raw = readFileSync(candidate, 'utf8');
-            let parsed;
-            try {
-                parsed = JSON.parse(raw);
-            }
-            catch {
-                // Malformed — fall through; the operator's `ggui serve` will
-                // raise a friendlier error than we can synthesize here.
-                return { found: false };
-            }
-            const registry = extractRegistryField(parsed);
-            if (typeof registry === 'string' && registry.length > 0) {
-                return { found: true, registry, path: candidate };
-            }
-            return { found: false };
-        }
-        const parent = dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    return { found: false };
-}
-function extractRegistryField(x) {
-    if (typeof x !== 'object' || x === null)
-        return undefined;
-    return x.registry;
-}
-function isValidUrl(s) {
-    try {
-        const u = new URL(s);
-        return u.protocol === 'http:' || u.protocol === 'https:';
-    }
-    catch {
-        return false;
-    }
-}
-function stripTrailingSlash(s) {
-    return s.endsWith('/') ? s.slice(0, -1) : s;
-}
 function loadManifest(cwd) {
     const gadgetPath = join(cwd, GGUI_GADGET_JSON_FILENAME);
     const blueprintPath = join(cwd, GGUI_BLUEPRINT_JSON_FILENAME);