@ossy/cli 1.17.7 → 1.17.9

package/README.md

@@ -37,7 +37,6 @@ The contract for everything the platform can do is the **SDK action POJO** in [`
 | Workflow | `app upload` | Read `resourceTemplates` from `src/config.js` and call `workspaces.import-resource-templates` |
 | Workflow | `app publish` | Upload resource templates and `build/` to the CMS (combines `app upload` + `upload-dir`) |
 | Workflow | `upload-dir <dir> <location>` | Recursively mirror a local directory into the CMS (mkdir + upload per file) |
-| Workflow | `registry ecr-push-credentials` | Call `registry.ecr-push-credentials`, format for `docker login` or GitHub Actions |
 
 If you need an endpoint that no verb wraps, reach for `ossy call` — it's the universal channel.
 
@@ -271,25 +270,6 @@ ossy upload-dir ./assets /projects/2026/assets
 ossy upload-dir ./public /my-folder --api-url http://localhost:3001/api/v0
 ```
 
-## Registry: ecr-push-credentials
-
-Fetch a short-lived ECR password so CI can `docker login` and `docker push` to the workspace's ECR registry.
-
-Wraps the SDK action **`registry.ecr-push-credentials`** and adds: response validation, JSON pretty-printing, and a `--format github-actions` mode that writes `registry`/`username`/`password`/`expires_at` to `$GITHUB_OUTPUT` and emits `::add-mask::<password>` so the secret never appears in logs.
-
-```bash
-ossy registry ecr-push-credentials                      # JSON to stdout
-ossy registry ecr-push-credentials --format github-actions   # writes to $GITHUB_OUTPUT
-```
-
-Auth and workspace are resolved from the usual chain (`-a` flag → `OSSY_API_KEY` → saved credentials; `-w` flag → `OSSY_WORKSPACE_ID` → saved active workspace). The plain dispatcher equivalent is:
-
-```bash
-ossy call registry.ecr-push-credentials
-```
-
-…but you lose the GitHub Actions output formatting and the `::add-mask::` line, so prefer the verb in CI.
-
 ## App: init
 
 Scaffold a new Ossy app:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ossy/cli",
-  "version": "1.17.7",
+  "version": "1.17.9",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ossy-se/packages.git"
@@ -20,8 +20,8 @@
   },
   "dependencies": {
     "@babel/parser": "^7.28.6",
-    "@ossy/app": "^1.17.7",
-    "@ossy/sdk": "^1.17.7",
+    "@ossy/app": "^1.17.9",
+    "@ossy/sdk": "^1.17.9",
     "arg": "^5.0.2",
     "glob": "^10.3.10"
   },
@@ -33,5 +33,5 @@
     "/src",
     "README.md"
   ],
-  "gitHead": "09617a4222cd31cc0e8cf867d42310fa5c73d6cc"
+  "gitHead": "295c9447b738f39dc81a9f250f06acc97efa76b9"
 }

package/src/index.js

@@ -5,7 +5,6 @@ import { fileURLToPath } from 'node:url'
 import * as Auth from './auth/cli.js'
 import * as Call from './call/cli.js'
 import * as App from './app/cli.js'
-import * as Registry from './registry/cli.js'
 import * as UploadDir from './upload-dir/cli.js'
 import * as Workspace from './workspace/cli.js'
 
@@ -30,8 +29,6 @@ Action dispatcher (any Ossy SDK action, no per-action wiring needed):
 
 Workflows (wrap one or more actions with extra ergonomics):
   upload-dir <dir> <loc>  Recursively upload a local directory to the CMS
-  registry <subcommand>   ecr-push-credentials (wraps registry.ecr-push-credentials,
-                          adds --format github-actions and password masking)
 
 Options:
   -h, --help              Show this help, or for a command: ossy <command> --help
@@ -91,17 +88,6 @@ Options:
   -a, --authentication Ossy API JWT (or set OSSY_API_KEY, or run \`ossy auth login\`)
   -w, --workspace-id   Workspace id (or set OSSY_WORKSPACE_ID, or run \`ossy workspace use\`)
   --api-url            Override API base URL
-`,
-  registry: `ossy registry <subcommand>
-  Subcommands:
-    ecr-push-credentials  Fetch a short-lived ECR password for docker login
-                          (wraps the SDK action registry.ecr-push-credentials;
-                          adds --format github-actions and password masking)
-
-Options:
-  -a, --authentication  Ossy API JWT (or set OSSY_API_KEY, or run \`ossy auth login\`)
-  -w, --workspace-id    Workspace id (or set OSSY_WORKSPACE_ID, or run \`ossy workspace use\`)
-  --format              json | github-actions
 `,
 }
 
@@ -142,10 +128,6 @@ const run = async () => {
     await UploadDir.handler(restArgs)
     return
   }
-  if (command === 'registry') {
-    await Registry.handler(restArgs)
-    return
-  }
   if (command === 'app') {
     await App.handler(restArgs)
     return

package/src/registry/cli.js

@@ -1,16 +0,0 @@
-import { ecrPushCredentials } from './ecr-push-credentials.js'
-
-/**
- * @param {string[]} args argv after `registry`
- */
-export async function handler (args) {
-  const [sub, ...rest] = args
-  if (sub === 'ecr-push-credentials') {
-    await ecrPushCredentials(rest)
-    return
-  }
-  console.error(
-    '[@ossy/cli] registry: unknown subcommand. Usage: registry ecr-push-credentials [--format json|github-actions] ...'
-  )
-  process.exit(1)
-}

package/src/registry/ecr-push-credentials.js

@@ -1,109 +0,0 @@
-import arg from 'arg'
-import { appendFileSync } from 'fs'
-import { requireAppAuthentication } from '../app/upload-resource-templates.js'
-import { getAuth, getWorkspaceId } from '../state.js'
-
-const DEFAULT_API_URL = 'https://api.ossy.se/api/v0'
-
-/**
- * POST /registry/ecr/push-credentials and print docker/registry fields.
- *
- * @param {string[]} options argv after `registry ecr-push-credentials`
- */
-export async function ecrPushCredentials (options) {
-  const parsed = arg(
-    {
-      '--authentication': String,
-      '-a': '--authentication',
-      '--workspace-id': String,
-      '-w': '--workspace-id',
-      '--api-url': String,
-      '--format': String,
-    },
-    { argv: options }
-  )
-
-  let token
-  try {
-    token = requireAppAuthentication(
-      getAuth({ flag: parsed['--authentication'] }),
-      'registry ecr-push-credentials'
-    )
-  } catch (e) {
-    console.error(e?.message || '[@ossy/cli] registry ecr-push-credentials: need --authentication (-a), OSSY_API_KEY, or `ossy auth login`')
-    process.exit(1)
-  }
-
-  const workspaceId = getWorkspaceId({ flag: parsed['--workspace-id'] })
-  if (!workspaceId) {
-    console.error('[@ossy/cli] registry ecr-push-credentials: pass --workspace-id (-w), set OSSY_WORKSPACE_ID, or run `ossy workspace use <id>`')
-    process.exit(1)
-  }
-
-  const apiUrl = (parsed['--api-url'] || process.env.OSSY_API_URL || DEFAULT_API_URL).replace(/\/$/, '')
-  const format = parsed['--format'] || 'json'
-
-  const res = await fetch(`${apiUrl}/registry/ecr/push-credentials`, {
-    method: 'POST',
-    headers: {
-      authorization: token,
-      workspaceId,
-      'content-type': 'application/json',
-    },
-    body: '{}',
-  })
-
-  const text = await res.text()
-  let data
-  try {
-    data = JSON.parse(text)
-  } catch {
-    console.error(`[@ossy/cli] registry ecr-push-credentials: non-JSON response (${res.status})`)
-    console.error(text)
-    process.exit(1)
-  }
-
-  if (!res.ok) {
-    console.error(`[@ossy/cli] registry ecr-push-credentials: HTTP ${res.status}`)
-    console.error(text)
-    process.exit(1)
-  }
-
-  const { registry, username, password, expiresAt } = data
-  if (
-    typeof registry !== 'string' ||
-    !registry ||
-    typeof username !== 'string' ||
-    !username ||
-    typeof password !== 'string' ||
-    !password
-  ) {
-    console.error('[@ossy/cli] registry ecr-push-credentials: invalid response (expected registry, username, password)')
-    console.error(JSON.stringify(data))
-    process.exit(1)
-  }
-
-  if (format === 'github-actions') {
-    const out = process.env.GITHUB_OUTPUT
-    if (!out) {
-      console.error('[@ossy/cli] registry ecr-push-credentials: --format github-actions requires GITHUB_OUTPUT')
-      process.exit(1)
-    }
-    console.log(`::add-mask::${password}`)
-    appendFileSync(out, `registry=${registry}\n`, 'utf8')
-    appendFileSync(out, `username=${username}\n`, 'utf8')
-    appendFileSync(out, `password=${password}\n`, 'utf8')
-    if (expiresAt != null) {
-      appendFileSync(out, `expires_at=${String(expiresAt)}\n`, 'utf8')
-    }
-    return
-  }
-
-  if (format === 'json') {
-    console.log(JSON.stringify({ registry, username, password, expiresAt }, null, 2))
-    return
-  }
-
-  console.error(`[@ossy/cli] registry ecr-push-credentials: unknown --format ${format} (use json or github-actions)`)
-  process.exit(1)
-}