@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/cli/lib/transport.js

@@ -0,0 +1,289 @@
+import { getVibesClient } from '@vibesdotdev/kernel/client';
+/**
+ * Forge CLI authentication, environment, and network binding.
+ * Pure request construction and response parsing live in `../../request.ts`.
+ */
+import { serviceEnvironment, serviceOrigin, } from "@vibesdotdev/infra-core/service";
+import * as z from "zod/v4";
+import { CapabilityError, CaughtFailureSchema, isCapabilityError, rootIdentityOf, } from "@vibesdotdev/kernel";
+import { resolveCallerBearer } from "@vibesdotdev/auth/caller-bearer";
+import { describeAppAuthority, resolveAppAuthority, } from "@vibesdotdev/auth/client/app-authority";
+import { attachActiveOrgHeader } from "./active-org-header.js";
+import { captureForgeCliSettings } from "../settings/forge-cli.settings.js";
+import { FORGE_CLI_SETTING_ENV, FORGE_CLI_SMOKE_OPT_IN_ENV } from "../settings/forge.cli.config.descriptor.js";
+import { ForgeJwtMintError, ForgeNotSignedInError, ForgeOriginUnavailableError, buildRequest, forgeHostFetch, forgeResponseFailure, formatForgeRequestFailure, parseResponse, withQuery, } from "../../request.js";
+export { ForgeJwtMintError, ForgeNotSignedInError, ForgeOriginUnavailableError, buildRequest, forgeHostFetch, forgeResponseFailure, formatForgeRequestFailure, parseResponse, withQuery, };
+export { JWT_CACHE_TTL_MS } from "./auth-client.js";
+/** The global config's active org; any other key or shape is no active org. */
+const ActiveOrgConfigSchema = z.object({ activeOrgId: z.string().min(1).optional().catch(undefined) });
+export async function resolveForgeServiceTargets(runtime) {
+    const authOrigin = await forgeServiceOrigin(runtime, "auth");
+    return { environment: await serviceEnvironment(runtime), authOrigin };
+}
+/**
+ * The declared service's origin. A service this runtime does not declare is
+ * `ForgeOriginUnavailableError` (the same `NOT_FOUND` `service-undeclared`
+ * shape), asked of the runtime before reading, so every forge command keeps
+ * its friendly output. The owner's own failures propagate.
+ */
+async function forgeServiceOrigin(runtime, serviceId) {
+    const declared = runtime.hasKind("infra/service")
+        ? await runtime.query("infra/service").withId(serviceId).select()
+        : undefined;
+    if (!declared)
+        throw new ForgeOriginUnavailableError({ serviceId });
+    return (await serviceOrigin(runtime, serviceId)).replace(/\/$/, "");
+}
+/**
+ * The declared `platform` origin in the configured service environment; an
+ * undeclared service fails `NOT_FOUND` `service-undeclared`.
+ */
+export async function resolveForgePlatformOrigin(runtime) {
+    return forgeServiceOrigin(runtime, "platform");
+}
+function looksLikeJwt(token) {
+    return token.split(".").length === 3 && token.length > 20;
+}
+/** Whether `failure` is auth's `not-signed-in` refusal. */
+function isNotSignedIn(failure) {
+    return isCapabilityError(failure) && failure.reason === "not-signed-in";
+}
+/**
+ * The caller's bearer from auth's `resolveCallerBearer` on `runtime` (rc05
+ * §2.2): the device session on an interactive CLI, the published manifest bearer
+ * under `vibes secrets exec --session`, the invocation principal on a request
+ * host. Explicitly enabled operational smokes re-read once after a settle, for
+ * a login that lands while the smoke starts; any other failure, or a second
+ * `not-signed-in`, is thrown as it is.
+ */
+async function callerBearerForRequest(runtime) {
+    const reads = runtime.getEnv(FORGE_CLI_SMOKE_OPT_IN_ENV) === "1" ? 2 : 1;
+    let failure;
+    for (let read = 0; read < reads && (failure === undefined || isNotSignedIn(failure)); read++) {
+        if (failure !== undefined)
+            await settleOperationalSmokeCredentials(runtime);
+        try {
+            return await resolveCallerBearer(runtime);
+        }
+        catch (error) {
+            failure = CaughtFailureSchema.parse(error);
+        }
+    }
+    throw failure;
+}
+/**
+ * The operational-smoke settle. The opt-in is the handed runtime's captured
+ * environment (never `process.env`); the length of the settle is the
+ * `forge.cli` setting `credentialSettleMs`, never a literal at this read site.
+ */
+export async function settleOperationalSmokeCredentials(runtime) {
+    if (runtime.getEnv(FORGE_CLI_SMOKE_OPT_IN_ENV) !== "1")
+        return;
+    const { credentialSettleMs } = await captureForgeCliSettings(runtime);
+    if (credentialSettleMs > 0)
+        await runtime.lifecycle.delay(credentialSettleMs);
+}
+/**
+ * Exchange a stored (non-JWT) session for an app token at the auth origin,
+ * cached per runtime root for {@link JWT_CACHE_TTL_MS} of the runtime's own
+ * monotonic time. A cached token answers only the same session at the same
+ * auth origin. A failed exchange is `ForgeJwtMintError`; the auth server's
+ * answer rides only as its redacted cause.
+ */
+export async function resolveAppJwt(runtime, sessionToken, fetchImpl, authOriginOverride) {
+    if (looksLikeJwt(sessionToken))
+        return sessionToken;
+    const authOrigin = authOriginOverride ?? (await resolveForgeServiceTargets(runtime)).authOrigin;
+    const owner = await getVibesClient('forge.cli-auth', runtime);
+    return owner.resolve(sessionToken, fetchImpl, authOrigin, rootIdentityOf(runtime) !== undefined);
+}
+/** A string request body; any other body kind is not one Forge's auth exchange sends. */
+const StringBodySchema = z.string();
+/** The auth exchange's fetch over a Forge `FetchLike`. */
+function asAuthFetch(fetchImpl) {
+    const authFetch = async (input, init) => {
+        const request = input instanceof Request ? input : null;
+        const url = request?.url ?? String(input);
+        const headers = Object.fromEntries(new Headers(init?.headers ?? request?.headers).entries());
+        const body = StringBodySchema.safeParse(init?.body);
+        const fetchInit = {
+            method: init?.method ?? request?.method ?? "GET",
+            headers,
+        };
+        if (body.success)
+            fetchInit.body = body.data;
+        const response = await fetchImpl(url, fetchInit);
+        if (response instanceof Response)
+            return response;
+        return new Response(await response.text(), {
+            status: response.status,
+            headers: { "content-type": "application/json" },
+        });
+    };
+    return Object.assign(authFetch, { preconnect: fetch.preconnect });
+}
+/**
+ * The forge authority for one request. By default it is the caller's bearer
+ * from auth's `resolveCallerBearer` on the handed runtime, already an app
+ * bearer (the device session exchanges and refreshes the stored login), so it
+ * is presented as is. An explicit `loadCredentials` (the doctor's stored-login
+ * diagnostic) or `authorityResolver` keeps auth's credential-to-app exchange.
+ */
+export async function resolveForgeAuthority(options) {
+    const { authOrigin, environment } = options.targets;
+    const { authorityResolver, loadCredentials } = options;
+    // An injected resolver, else auth's exchange over the explicit loader, else
+    // the caller's bearer.
+    const exchange = authorityResolver ??
+        (loadCredentials ? (request) => resolveAppAuthority({ ...request, loadCredentials }) : undefined);
+    if (!exchange) {
+        const token = await callerBearerForRequest(options.runtime);
+        if (!token)
+            throw new ForgeNotSignedInError();
+        const authority = await describeAppAuthority({
+            type: looksLikeJwt(token) ? "session" : "apiKey",
+            token,
+            environment,
+            source: "auth/caller-bearer",
+        }, authOrigin);
+        return { token, authority, exchanged: false };
+    }
+    const request = {
+        runtime: options.runtime,
+        authOrigin,
+        environment,
+    };
+    if (options.fetchImpl)
+        request.fetchImpl = asAuthFetch(options.fetchImpl);
+    if (loadCredentials) {
+        // The stored login is read once, here: no token is not signed in, the
+        // same fact auth's exchange refuses `credential-missing` for.
+        const credential = await loadCredentials();
+        if (!credential?.token)
+            throw new ForgeNotSignedInError();
+        request.loadCredentials = async () => credential;
+    }
+    return exchange(request);
+}
+function linkAbortSignals(...signals) {
+    const controller = new AbortController();
+    const listeners = signals.filter((signal) => signal !== undefined).map((signal) => {
+        const abort = () => controller.abort(signal.reason);
+        if (signal.aborted)
+            abort();
+        else
+            signal.addEventListener("abort", abort, { once: true });
+        return { signal, abort };
+    });
+    return {
+        signal: controller.signal,
+        dispose() {
+            for (const { signal, abort } of listeners)
+                signal.removeEventListener("abort", abort);
+        },
+    };
+}
+/**
+ * `fetchImpl` bounded by `lifecycle`: each request is a lifecycle-owned wait
+ * that aborts at `timeoutMs` (`TIMEOUT` `forge-request-timeout`) or when the
+ * runtime is disposed, and is joined at disposal.
+ */
+export function withFetchTimeout(fetchImpl, timeoutMs, lifecycle, parentSignal) {
+    return async (url, init) => {
+        try {
+            return await lifecycle.wait(async (signal) => {
+                const linked = linkAbortSignals(signal, parentSignal);
+                try {
+                    return await fetchImpl(url, { ...init, signal: linked.signal });
+                }
+                finally {
+                    linked.dispose();
+                }
+            }, {
+                timeoutMs,
+                reason: "forge-request",
+            });
+        }
+        catch (error) {
+            const failure = CaughtFailureSchema.parse(error);
+            if (!isCapabilityError(failure) || failure.reason !== "wait-timeout")
+                throw failure;
+            throw new CapabilityError("The Forge API request timed out.", "TIMEOUT", {
+                reason: "forge-request-timeout",
+                recoveryHint: `The platform or git host may be busy. Retry shortly, or raise the \`fetchTimeoutMs\` Forge CLI setting (${FORGE_CLI_SETTING_ENV.fetchTimeoutMs}).`,
+                details: { timeoutMs, method: init.method },
+                cause: failure,
+            });
+        }
+    };
+}
+/**
+ * Resolve the targets and authority on `runtime`, build `spec` and send it
+ * through the lifecycle-bounded `fetchImpl`. An override targets another
+ * platform origin; the credential partition and auth origin stay the
+ * configured service environment's (rc04 §2.4).
+ */
+async function sendBuiltForgeRequest(runtime, spec, fetchImpl, options) {
+    const { fetchTimeoutMs } = await captureForgeCliSettings(runtime);
+    const requestTimeoutMs = options?.requestTimeoutMs;
+    const timeoutMs = requestTimeoutMs === undefined
+        ? undefined
+        : Math.min(fetchTimeoutMs, Math.max(1, requestTimeoutMs));
+    const send = async (requestSignal) => {
+        const override = options?.originOverride?.trim();
+        const normalizedOverride = override ? override.replace(/\/$/, "") : undefined;
+        const targets = await resolveForgeServiceTargets(runtime);
+        const origin = normalizedOverride ?? (await resolveForgePlatformOrigin(runtime));
+        const boundedFetch = withFetchTimeout(fetchImpl, fetchTimeoutMs, runtime.lifecycle, requestSignal);
+        const { token } = await resolveForgeAuthority({
+            targets,
+            fetchImpl: boundedFetch,
+            authorityResolver: options?.authorityResolver,
+            runtime,
+        });
+        const { url, init } = buildRequest(spec, origin, token);
+        attachActiveOrgHeader(spec.path, init.headers, await resolveActiveOrgForForge(runtime));
+        const response = requestSignal
+            ? await fetchImpl(url, { ...init, signal: requestSignal })
+            : await boundedFetch(url, init);
+        return { response, text: await response.text(), token };
+    };
+    if (timeoutMs === undefined)
+        return send();
+    try {
+        return await runtime.lifecycle.wait(send, { timeoutMs, reason: "forge-request" });
+    }
+    catch (error) {
+        const failure = CaughtFailureSchema.parse(error);
+        if (!isCapabilityError(failure) || failure.reason !== "wait-timeout")
+            throw failure;
+        throw new CapabilityError("The Forge API request timed out.", "TIMEOUT", {
+            reason: "forge-request-timeout",
+            recoveryHint: `The platform or git host may be busy. Retry shortly, or raise the \`fetchTimeoutMs\` Forge CLI setting (${FORGE_CLI_SETTING_ENV.fetchTimeoutMs}).`,
+            details: { timeoutMs, method: spec.method },
+            cause: failure,
+        });
+    }
+}
+export async function sendForgeRequest(runtime, spec, fetchImpl = forgeHostFetch, options) {
+    const { response, text, token } = await sendBuiltForgeRequest(runtime, spec, fetchImpl, options);
+    return parseResponse(response.status, response.ok, text, [token]);
+}
+/** Like sendForgeRequest, but keeps a successful non-JSON body (CI logs). */
+export async function sendForgeRawRequest(runtime, spec, fetchImpl = forgeHostFetch, options) {
+    const { response, text, token } = await sendBuiltForgeRequest(runtime, spec, fetchImpl, options);
+    if (response.ok)
+        return { ok: true, status: response.status, data: text };
+    return parseResponse(response.status, response.ok, text, [token]);
+}
+/**
+ * The active org from the global config on `runtime`. An absent config or key
+ * is "no active org"; any other failure (unreadable or corrupt config, no path
+ * roots) propagates instead of silently dropping the org header.
+ */
+async function resolveActiveOrgForForge(runtime) {
+    const { loadConfigForScope } = await import('@vibesdotdev/config/services/config');
+    const config = ActiveOrgConfigSchema.safeParse(await loadConfigForScope('global', runtime));
+    return config.success ? (config.data.activeOrgId ?? null) : null;
+}
+//# sourceMappingURL=transport.js.map

package/dist/cli/lib/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/cli/lib/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D;;;GAGG;AAEH,OAAO,EACL,kBAAkB,EAClB,aAAa,GAId,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,GAIf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAGpB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAC/G,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,yBAAyB,EACzB,aAAa,EACb,SAAS,GAMV,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,yBAAyB,EACzB,aAAa,EACb,SAAS,GACV,CAAC;AAGF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAcvG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAqB;IAErB,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAqB,EAAE,SAA8B;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;QAC/C,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAA2C,eAAe,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;QAC3G,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,2BAA2B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAqB;IACpE,OAAO,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;AAC5D,CAAC;AAED,2DAA2D;AAC3D,SAAS,aAAa,CAAC,OAAsB;IAC3C,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,sBAAsB,CAAC,OAAqB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,OAAkC,CAAC;IACvC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7F,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,OAAO,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAAqB;IAC3E,IAAI,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,GAAG;QAAE,OAAO;IAC/D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,kBAAkB,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAqB,EACrB,YAAoB,EACpB,SAAoB,EACpB,kBAAkC;IAElC,IAAI,YAAY,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IAEpD,MAAM,UAAU,GACd,kBAAkB,IAAI,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAE/E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAqB,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC;AACnG,CAAC;AAkBD,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEpC,0DAA0D;AAC1D,SAAS,WAAW,CAAC,SAAoB;IACvC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAkC,EAAE,IAAkB,EAAqB,EAAE;QACpG,MAAM,OAAO,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAChC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CACzD,CAAC;QACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAA6B;YAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,IAAI,KAAK;YAChD,OAAO;SACR,CAAC;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,OAAO,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE;YACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAO3C;IACC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IACpD,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IACvD,4EAA4E;IAC5E,uBAAuB;IACvB,MAAM,QAAQ,GACZ,iBAAiB;QACjB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C;YACE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAChD,KAAK;YACL,WAAW;YACX,MAAM,EAAE,oBAAoB;SAC7B,EACD,UAAU,CACX,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAA0C;QACrD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,WAAW;KACZ,CAAC;IACF,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1E,IAAI,eAAe,EAAE,CAAC;QACpB,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,KAAK;YAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC1D,OAAO,CAAC,eAAe,GAAG,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,OAAuC;IAClE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAyB,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACvG,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;;YACvB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO;YACL,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,SAAS;gBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAoB,EACpB,SAAiB,EACjB,SAA2B,EAC3B,YAA0B;IAE1B,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC,EAAE;gBACD,SAAS;gBACT,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc;gBAAE,MAAM,OAAO,CAAC;YACpF,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,SAAS,EAAE;gBACvE,MAAM,EAAE,uBAAuB;gBAC/B,YAAY,EAAE,2GAA2G,qBAAqB,CAAC,cAAc,IAAI;gBACjK,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC3C,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AASD;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAqB,EACrB,IAAsB,EACtB,SAAoB,EACpB,OAAwC;IAExC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,CAAC;IACnD,MAAM,SAAS,GAAG,gBAAgB,KAAK,SAAS;QAC9C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,KAAK,EAAE,aAA2B,EAA6B,EAAE;QAC5E,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,kBAAkB,IAAI,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnG,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC;YAC5C,OAAO;YACP,SAAS,EAAE,YAAY;YACvB,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;YAC7C,OAAO;SACR,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,qBAAqB,CACnB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,MAAM,wBAAwB,CAAC,OAAO,CAAC,CACxC,CAAC;QACF,MAAM,QAAQ,GAAG,aAAa;YAC5B,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC,CAAC;IAEF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,EAAE,CAAC;IAE3C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM,OAAO,CAAC;QACpF,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,SAAS,EAAE;YACvE,MAAM,EAAE,uBAAuB;YAC/B,YAAY,EAAE,2GAA2G,qBAAqB,CAAC,cAAc,IAAI;YACjK,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YAC3C,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,IAAsB,EACtB,YAAuB,cAAc,EACrC,OAA6B;IAE7B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjG,OAAO,aAAa,CAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,IAAsB,EACtB,YAAuB,cAAc,EACrC,OAA6B;IAE7B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjG,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1E,OAAO,aAAa,CAAS,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CAAC,OAAqB;IAC3D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC"}

package/dist/cli/lib/types.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Wire types for the platform-web repository + deploy-token API, as consumed
+ * by forge-cli. These mirror the server response shapes (see recon apiContract)
+ * — kept local to the CLI so the package depends only on its declared peers.
+ */
+import type { CloneUrlResponse as CanonicalCloneUrlResponse } from '@vibesdotdev/git-operations/repository/clone-transport';
+export interface Repository {
+    id: string;
+    name: string;
+    description?: string | null;
+    ownerType: string;
+    ownerId: string;
+    provider: string;
+    visibility: string;
+    status: string;
+    /** Human-readable status context (e.g. the freeze reason) — nullable on the wire. */
+    statusMessage?: string | null;
+    defaultBranch: string;
+    externalId?: string | null;
+    cloneUrl?: string | null;
+    webUrl?: string | null;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface RepositoryListResponse {
+    results: Repository[];
+}
+export interface RepositoryResponse {
+    result: Repository;
+}
+export interface ResolveResponse {
+    result: {
+        id: string;
+        name: string;
+        defaultBranch: string;
+        visibility: string;
+        provider: string;
+    };
+}
+export interface DeployTokenSummary {
+    id: string;
+    name: string;
+    scopes: string[];
+    repositoryId: string;
+    createdBy?: string | null;
+    createdAt?: string;
+    lastUsedAt?: string | null;
+}
+export interface DeployTokenListResponse {
+    results: DeployTokenSummary[];
+}
+/** Mint response: the plaintext `token` is returned ONCE here, never again. */
+export interface DeployTokenMintResponse {
+    result: DeployTokenSummary;
+    token: string;
+}
+export interface RegistryTokenSummary {
+    id: string;
+    name: string;
+    kind: 'publish' | string;
+    scopes: string[];
+    allowedScopes?: string[];
+    createdBy?: string | null;
+    createdAt?: string;
+    lastUsedAt?: string | null;
+}
+export interface RegistryTokenListResponse {
+    results: RegistryTokenSummary[];
+}
+/** Mint response: the plaintext `token` is returned ONCE here, never again. */
+export interface RegistryTokenMintResponse {
+    result: RegistryTokenSummary;
+    token: string;
+}
+export type CloneUrlResponse = CanonicalCloneUrlResponse;
+/** Session-authorized short-lived HTTPS credential. The token is never persisted. */
+export interface CloneCredentialResponse {
+    result: {
+        username?: string;
+        token: string;
+    } | null;
+}
+/** An owner-scoped SSH public key (no secret content). */
+export interface SshKeySummary {
+    id: string;
+    name: string;
+    publicKey: string;
+    fingerprint: string;
+    keyType: string;
+    createdAt: string;
+    lastUsedAt?: string | null;
+}
+export interface SshKeyListResponse {
+    results: SshKeySummary[];
+}
+/** POST /api/account/ssh-keys → the created key's identity. */
+export interface SshKeyCreateResponse {
+    result: {
+        id: string;
+        name: string;
+        fingerprint: string;
+    };
+}
+/** POST /api/git-auth/challenge → a single-use, short-TTL nonce. */
+export interface GitAuthChallengeResponse {
+    challenge: string;
+    expiresAt: string;
+}
+/** POST /api/git-auth/verify → a 5-minute repo-scoped Basic-auth credential. */
+export interface GitAuthVerifyResponse {
+    username: string;
+    token: string;
+    tokenId: string;
+    expiresAt: string;
+    scopes: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,gBAAgB,IAAI,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AAE5H,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACtC,OAAO,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KACjB,CAAC;CACF;AAED,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,+EAA+E;AAC/E,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACzC,OAAO,EAAE,oBAAoB,EAAE,CAAC;CAChC;AAED,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACzC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAEzD,qFAAqF;AACrF,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE;QACP,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;KACd,GAAG,IAAI,CAAC;CACT;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACpB,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB"}

package/dist/cli/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/cli/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/cli/lib/types.ts"],"names":[],"mappings":""}

package/dist/cli/lib/user-environment.projection.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Durable user-level remint hooks for package-manager clients.
+ *
+ * Files never store a session JWT. New shells remint through `vibes registry env`
+ * so private installs keep working after short-lived app tokens expire.
+ */
+import { type FileSystemAdapterInterface } from '@vibesdotdev/filesystem';
+import { type RuntimeUserEnvironmentHost, type VibesRuntime } from '@vibesdotdev/kernel';
+/**
+ * Interactive shells remint `VIBES_REGISTRY_TOKEN` for private-registry
+ * installs. Non-interactive shells (every agent command) skip it: the remint is
+ * a whole CLI boot per shell, and they rarely install. Nothing is removed; the
+ * token stays one command away for them.
+ */
+export declare const REGISTRY_ENV_REMINT: string;
+/**
+ * User-store snapshots the Windows host clears: the registry token, and the
+ * `VIBES_REGISTRY_JWT` copy older setups wrote before it folded into it.
+ */
+export declare const STALE_REGISTRY_USER_STORE_KEYS: readonly string[];
+export interface UserEnvironmentProjection {
+    envFile: string;
+    envFileReady: boolean;
+    profileReady: boolean;
+    userStoreReady: boolean;
+}
+/** `registry.env` under the runtime's Vibes home (`getPathRoots(runtime).vibesHome`). */
+export declare function registryEnvFilePath(home: string): string;
+export declare function posixProfilePaths(userHome: string): string[];
+export declare function defaultPosixProfilePaths(userHome: string): string[];
+export declare function profileContainsHook(text: string): boolean;
+export declare function mergePosixProfileHook(existing: string): string;
+/** A current remint file: it remints through `vibes registry env` in interactive shells only, and stores no token. */
+export declare function registryEnvFileLooksReady(text: string): boolean;
+export declare function writeRegistryEnvFile(home: string, fs: FileSystemAdapterInterface): Promise<string>;
+export declare function inspectRegistryEnvFile(home: string, fs: FileSystemAdapterInterface): Promise<{
+    path: string;
+    ready: boolean;
+}>;
+export declare function persistPosixProfileHook(userHome: string, fs: FileSystemAdapterInterface): Promise<string[]>;
+export declare function inspectPosixProfileHook(userHome: string, fs: FileSystemAdapterInterface): Promise<boolean>;
+export type UserEnvironmentHost = RuntimeUserEnvironmentHost;
+export declare function projectUserRegistryEnvironment(_token: string, options: {
+    /** The runtime's Vibes home (`getPathRoots(runtime).vibesHome`). */
+    vibesHome: string;
+    /** The runtime's user home (`getPathRoots(runtime).userHome`). */
+    userHome: string;
+    host?: RuntimeUserEnvironmentHost;
+    runtime?: VibesRuntime;
+    fs?: FileSystemAdapterInterface;
+    platform?: string;
+}): Promise<UserEnvironmentProjection>;
+export declare function inspectUserRegistryEnvironment(options: {
+    /** The runtime's Vibes home (`getPathRoots(runtime).vibesHome`). */
+    vibesHome: string;
+    /** The runtime's user home (`getPathRoots(runtime).userHome`). */
+    userHome: string;
+    host?: RuntimeUserEnvironmentHost;
+    runtime?: VibesRuntime;
+    fs?: FileSystemAdapterInterface;
+    platform?: string;
+}): Promise<UserEnvironmentProjection>;
+//# sourceMappingURL=user-environment.projection.d.ts.map

package/dist/cli/lib/user-environment.projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-environment.projection.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/user-environment.projection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAGN,KAAK,0BAA0B,EAC/B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAmB,KAAK,0BAA0B,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAgB1G;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAapB,CAAC;AAEb;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAAmD,CAAC;AAEhH,MAAM,WAAW,yBAAyB;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;CACxB;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAE5D;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAEnE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED,sHAAsH;AACtH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM/D;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,0BAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAKxG;AAED,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,0BAA0B,GAC5B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAQ3C;AAED,wBAAsB,uBAAuB,CAC5C,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,0BAA0B,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC,CAoBnB;AAED,wBAAsB,uBAAuB,CAC5C,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,0BAA0B,GAC5B,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAc7D,wBAAsB,8BAA8B,CACnD,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACR,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,EAAE,CAAC,EAAE,0BAA0B,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,GACC,OAAO,CAAC,yBAAyB,CAAC,CAiCpC;AAED,wBAAsB,8BAA8B,CACnD,OAAO,EAAE;IACR,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,EAAE,CAAC,EAAE,0BAA0B,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,GACC,OAAO,CAAC,yBAAyB,CAAC,CA6BpC"}