@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.5

package/dist/cli/commands/forge.smoke.support.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The legs every operational Forge smoke shares (`forge smoke merge`,
+ * `forge smoke ai-review`, and the Premium registry smoke): one platform
+ * request leg, one git step, a scratch directory on the handed runtime's
+ * filesystem, and the best-effort cleanups.
+ *
+ * Failures are typed and value-free. Server text, git's stderr and anything
+ * else forge did not write ride only as a redacted `cause`, with the step's own
+ * credentials (a clone URL's userinfo, a token) removed by value. Cleanup
+ * failures are reported once on the handed runtime's logger or carried in the
+ * smoke outcome when that logger cannot report them.
+ */
+import { type FileSystemTemporaryDirectory } from '@vibesdotdev/filesystem';
+import { CapabilityError, type VibesRuntime } from '@vibesdotdev/kernel';
+import { type SmokeCleanupFailure, type SmokeRepositoryCleanup } from '../../schemas/forge-smoke.ts';
+export type { SmokeCleanupFailure, SmokeRepositoryCleanup };
+import { type FetchLike, type ForgeRequestSpec } from '../lib/transport.ts';
+import type { ExecLike } from '../lib/ssh-keygen.ts';
+/** A cleanup-owned scratch directory: flat files, and a physical path for child processes. */
+export type SmokeScratch = FileSystemTemporaryDirectory;
+/** Opens one scratch directory; the smoke cleans it up when it finishes. */
+export type OpenSmokeScratch = () => Promise<SmokeScratch>;
+/**
+ * Scratch directories on the handed runtime's host filesystem (the unbound
+ * adapter: scratch space is the host's, not the workspace's). A host without
+ * the `temporary-directory` capability refuses typed.
+ */
+export declare function runtimeSmokeScratch(runtime: VibesRuntime): OpenSmokeScratch;
+/**
+ * One platform request leg of a smoke. A failed response is
+ * `forge-smoke-step-failed` with the step named in `details`; the typed
+ * response failure rides as its cause.
+ */
+export declare function smokeLeg<T>(runtime: VibesRuntime, step: string, spec: ForgeRequestSpec, origin?: string, fetchImpl?: FetchLike): Promise<T>;
+/**
+ * One git step of a smoke, run in `cwd`. A non-zero exit is
+ * `forge-smoke-git-failed`; git's stderr rides as the redacted cause with
+ * `secrets` (for example a clone URL's credentials) removed by value.
+ */
+export declare function smokeGit(exec: ExecLike, cwd: string, args: readonly string[], secrets?: readonly string[]): Promise<void>;
+/**
+ * A failed smoke stays the primary failure; cleanup reports are attached only
+ * when a logger could not report them.
+ */
+export declare function smokeFailureWithCleanup(failure: CapabilityError, cleanupFailures: readonly SmokeCleanupFailure[]): CapabilityError;
+/**
+ * Best-effort cleanup of a smoke's test repository. The result records whether
+ * the platform confirmed deletion and preserves a value-free failure receipt
+ * whether or not the handed runtime can log it.
+ */
+export declare function deleteSmokeRepository(runtime: VibesRuntime, repoId: string, origin: string | undefined, outcome: SmokeRepositoryCleanup, fetchImpl?: FetchLike): Promise<void>;
+/** Best-effort removal of a smoke's scratch directory with an explicit failure receipt. */
+export declare function cleanupSmokeScratch(runtime: VibesRuntime, scratch: SmokeScratch): Promise<SmokeCleanupFailure | undefined>;
+//# sourceMappingURL=forge.smoke.support.d.ts.map

package/dist/cli/commands/forge.smoke.support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.support.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGN,KAAK,4BAA4B,EACjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,eAAe,EAIf,KAAK,YAAY,EACjB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAGN,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;AAC5D,OAAO,EAAoB,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,8FAA8F;AAC9F,MAAM,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAExD,4EAA4E;AAC5E,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,gBAAgB,CAG3E;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC/B,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,SAAS,GACnB,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,SAAS,MAAM,EAAO,GAC7B,OAAO,CAAC,IAAI,CAAC,CAUf;AA0CD;;;GAGG;AACH,wBAAgB,uBAAuB,CACtC,OAAO,EAAE,eAAe,EACxB,eAAe,EAAE,SAAS,mBAAmB,EAAE,GAC7C,eAAe,CAWjB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,sBAAsB,EAC/B,SAAS,CAAC,EAAE,SAAS,GACnB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED,2FAA2F;AAC3F,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAe1C"}

package/dist/cli/commands/forge.smoke.support.js

@@ -0,0 +1,153 @@
+/**
+ * The legs every operational Forge smoke shares (`forge smoke merge`,
+ * `forge smoke ai-review`, and the Premium registry smoke): one platform
+ * request leg, one git step, a scratch directory on the handed runtime's
+ * filesystem, and the best-effort cleanups.
+ *
+ * Failures are typed and value-free. Server text, git's stderr and anything
+ * else forge did not write ride only as a redacted `cause`, with the step's own
+ * credentials (a clone URL's userinfo, a token) removed by value. Cleanup
+ * failures are reported once on the handed runtime's logger or carried in the
+ * smoke outcome when that logger cannot report them.
+ */
+import { createTemporaryDirectoryChecked, resolveFileSystemAdapter } from '@vibesdotdev/filesystem';
+import { CapabilityError, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { redactedCause } from "../../failures.js";
+import { forgeResponseFailure } from "../../request.js";
+import { SmokeCleanupFailureSchema, SmokeRepositoryCleanupSchema } from "../../schemas/forge-smoke.js";
+import { sendForgeRequest } from "../lib/transport.js";
+/**
+ * Scratch directories on the handed runtime's host filesystem (the unbound
+ * adapter: scratch space is the host's, not the workspace's). A host without
+ * the `temporary-directory` capability refuses typed.
+ */
+export function runtimeSmokeScratch(runtime) {
+    return async () => createTemporaryDirectoryChecked(await resolveFileSystemAdapter(runtime, { binding: false }));
+}
+/**
+ * One platform request leg of a smoke. A failed response is
+ * `forge-smoke-step-failed` with the step named in `details`; the typed
+ * response failure rides as its cause.
+ */
+export async function smokeLeg(runtime, step, spec, origin, fetchImpl) {
+    const res = await sendForgeRequest(runtime, spec, fetchImpl, { originOverride: origin });
+    if (res.ok)
+        return res.data;
+    const failure = forgeResponseFailure(res);
+    throw new CapabilityError(`Forge smoke step failed: ${step}.`, failure.code, {
+        reason: 'forge-smoke-step-failed',
+        retryable: failure.retryable,
+        details: { step, status: res.status },
+        cause: failure
+    });
+}
+/**
+ * One git step of a smoke, run in `cwd`. A non-zero exit is
+ * `forge-smoke-git-failed`; git's stderr rides as the redacted cause with
+ * `secrets` (for example a clone URL's credentials) removed by value.
+ */
+export async function smokeGit(exec, cwd, args, secrets = []) {
+    const res = await exec('git', ['-C', cwd, ...args]);
+    if (res.code === 0)
+        return;
+    const subcommand = args[0] ?? 'git';
+    throw new CapabilityError(`A git step of the Forge smoke failed (git ${subcommand}).`, 'UNAVAILABLE', {
+        reason: 'forge-smoke-git-failed',
+        retryable: false,
+        details: { subcommand, exitCode: res.code },
+        cause: redactedCause(res.stderr, secrets)
+    });
+}
+function cleanupFailureKind(failure) {
+    return failure.code?.toLowerCase() ?? failure.name;
+}
+/**
+ * The `forge-cli` logger is loaded only when cleanup has something to report.
+ * Logging is optional; its failure is represented in the cleanup outcome so a
+ * smoke caller can still surface the cleanup failure.
+ */
+async function smokeCleanupLogger(runtime) {
+    const { getLogger } = await import('@vibesdotdev/logging');
+    return getLogger('forge-cli', runtime);
+}
+async function reportCleanupFailure(runtime, failure, message, context) {
+    const report = await settle(async () => {
+        const logger = await smokeCleanupLogger(runtime);
+        logger.warn(message, {
+            ...context,
+            reason: failure.reason,
+            failureKind: failure.failureKind,
+            failureFacts: failure.failureFacts
+        });
+    });
+    if (report.ok)
+        return SmokeCleanupFailureSchema.parse({ ...failure, reported: true });
+    const loggerFailureFacts = valueFreeFailure(report.cause);
+    return SmokeCleanupFailureSchema.parse({
+        ...failure,
+        reported: false,
+        loggerFailureKind: cleanupFailureKind(loggerFailureFacts),
+        loggerFailureFacts
+    });
+}
+/**
+ * A failed smoke stays the primary failure; cleanup reports are attached only
+ * when a logger could not report them.
+ */
+export function smokeFailureWithCleanup(failure, cleanupFailures) {
+    const unreported = cleanupFailures.filter((cleanupFailure) => !cleanupFailure.reported);
+    if (unreported.length === 0)
+        return failure;
+    return new CapabilityError(failure.message, failure.code, {
+        reason: failure.reason,
+        retryable: failure.retryable,
+        recoveryHint: failure.recoveryHint,
+        details: { ...failure.details, cleanupFailures: unreported },
+        cause: failure
+    });
+}
+/**
+ * Best-effort cleanup of a smoke's test repository. The result records whether
+ * the platform confirmed deletion and preserves a value-free failure receipt
+ * whether or not the handed runtime can log it.
+ */
+export async function deleteSmokeRepository(runtime, repoId, origin, outcome, fetchImpl) {
+    outcome.failures = SmokeRepositoryCleanupSchema.parse(outcome).failures;
+    outcome.deleted = false;
+    let reason = 'request-failed';
+    let failureKind = 'error';
+    let failureFacts;
+    const request = await settle(() => sendForgeRequest(runtime, { method: 'DELETE', path: `/api/repositories/${encodeURIComponent(repoId)}` }, fetchImpl, { originOverride: origin }));
+    if (request.ok) {
+        outcome.deleted = request.value.ok;
+        if (request.value.ok)
+            return;
+        reason = 'request-rejected';
+        failureKind = `http-${request.value.status}`;
+    }
+    else {
+        failureFacts = valueFreeFailure(request.cause);
+        failureKind = cleanupFailureKind(failureFacts);
+    }
+    const failure = await reportCleanupFailure(runtime, {
+        operation: 'repository-delete',
+        reason,
+        failureKind,
+        failureFacts
+    }, 'smoke: test repository delete failed', { repoId });
+    outcome.failures.push(failure);
+}
+/** Best-effort removal of a smoke's scratch directory with an explicit failure receipt. */
+export async function cleanupSmokeScratch(runtime, scratch) {
+    const cleanup = await settle(() => scratch.cleanup());
+    if (cleanup.ok)
+        return undefined;
+    const failureFacts = valueFreeFailure(cleanup.cause);
+    return reportCleanupFailure(runtime, {
+        operation: 'scratch-directory',
+        reason: 'cleanup-failed',
+        failureKind: cleanupFailureKind(failureFacts),
+        failureFacts
+    }, 'smoke: scratch directory cleanup failed');
+}
+//# sourceMappingURL=forge.smoke.support.js.map

package/dist/cli/commands/forge.smoke.support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.support.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,+BAA+B,EAC/B,wBAAwB,EAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,eAAe,EACf,MAAM,EACN,gBAAgB,EAGhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACN,yBAAyB,EACzB,4BAA4B,EAG5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,gBAAgB,EAAyC,MAAM,qBAAqB,CAAC;AAS9F;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqB;IACxD,OAAO,KAAK,IAAI,EAAE,CACjB,+BAA+B,CAAC,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,OAAqB,EACrB,IAAY,EACZ,IAAsB,EACtB,MAAe,EACf,SAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAI,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC5B,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,eAAe,CAAC,4BAA4B,IAAI,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE;QAC5E,MAAM,EAAE,yBAAyB;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;QACrC,KAAK,EAAE,OAAO;KACd,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,IAAc,EACd,GAAW,EACX,IAAuB,EACvB,UAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACpC,MAAM,IAAI,eAAe,CAAC,6CAA6C,UAAU,IAAI,EAAE,aAAa,EAAE;QACrG,MAAM,EAAE,wBAAwB;QAChC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE;QAC3C,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;KACzC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAyB;IACpD,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAqB,EACrB,OAA8C,EAC9C,OAAe,EACf,OAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;YACpB,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;SAClC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACtC,GAAG,OAAO;QACV,QAAQ,EAAE,KAAK;QACf,iBAAiB,EAAE,kBAAkB,CAAC,kBAAkB,CAAC;QACzD,kBAAkB;KAClB,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACtC,OAAwB,EACxB,eAA+C;IAE/C,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE5C,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACzD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE;QAC5D,KAAK,EAAE,OAAO;KACd,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAAqB,EACrB,MAAc,EACd,MAA0B,EAC1B,OAA+B,EAC/B,SAAqB;IAErB,OAAO,CAAC,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACxE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;IACxB,IAAI,MAAM,GAAkC,gBAAgB,CAAC;IAC7D,IAAI,WAAW,GAAG,OAAO,CAAC;IAC1B,IAAI,YAA0C,CAAC;IAE/C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CACjC,gBAAgB,CACf,OAAO,EACP,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,EAC7E,SAAS,EACT,EAAE,cAAc,EAAE,MAAM,EAAE,CAC1B,CACD,CAAC;IACF,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO;QAC7B,MAAM,GAAG,kBAAkB,CAAC;QAC5B,WAAW,GAAG,QAAQ,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;SAAM,CAAC;QACP,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,WAAW,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,OAAO,EACP;QACC,SAAS,EAAE,mBAAmB;QAC9B,MAAM;QACN,WAAW;QACX,YAAY;KACZ,EACD,sCAAsC,EACtC,EAAE,MAAM,EAAE,CACV,CAAC;IACF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAqB,EACrB,OAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,oBAAoB,CAC1B,OAAO,EACP;QACC,SAAS,EAAE,mBAAmB;QAC9B,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,kBAAkB,CAAC,YAAY,CAAC;QAC7C,YAAY;KACZ,EACD,yCAAyC,CACzC,CAAC;AACH,CAAC"}

package/dist/cli/commands/forge.ssh-key.add.command.descriptor.d.ts

@@ -0,0 +1,30 @@
+export declare const sshKeyAddCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "forge.ssh-key.add";
+    readonly name: "add";
+    readonly description: "Register an SSH public key for git auth (ssh-ed25519 only)";
+    readonly group: "forge.ssh-key";
+    readonly arguments: [{
+        readonly name: "name";
+        readonly description: "A label for the key, e.g. \"laptop\" (1-120 chars)";
+        readonly required: true;
+    }];
+    readonly options: [{
+        readonly flags: "--key <path>";
+        readonly description: "Path to the PUBLIC key file (default: ~/.ssh/id_ed25519.pub)";
+    }, {
+        readonly flags: "--public-key <line>";
+        readonly description: "Inline `ssh-ed25519 AAAA... comment` line (overrides --key)";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 10;
+    readonly examples: [{
+        readonly command: "vibes forge ssh-key add laptop";
+        readonly description: "Register ~/.ssh/id_ed25519.pub under the label \"laptop\"";
+        readonly expectExit: 0;
+    }];
+};
+export default sshKeyAddCommandDescriptor;
+//# sourceMappingURL=forge.ssh-key.add.command.descriptor.d.ts.map

package/dist/cli/commands/forge.ssh-key.add.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.add.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.add.command.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCrC,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/cli/commands/forge.ssh-key.add.command.descriptor.js

@@ -0,0 +1,38 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const sshKeyAddCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'forge.ssh-key.add',
+    name: 'add',
+    description: 'Register an SSH public key for git auth (ssh-ed25519 only)',
+    group: 'forge.ssh-key',
+    arguments: [
+        {
+            name: 'name',
+            description: 'A label for the key, e.g. "laptop" (1-120 chars)',
+            required: true
+        }
+    ],
+    options: [
+        {
+            flags: '--key <path>',
+            description: 'Path to the PUBLIC key file (default: ~/.ssh/id_ed25519.pub)'
+        },
+        {
+            flags: '--public-key <line>',
+            description: 'Inline `ssh-ed25519 AAAA... comment` line (overrides --key)'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 10,
+    examples: [
+        {
+            command: 'vibes forge ssh-key add laptop',
+            description: 'Register ~/.ssh/id_ed25519.pub under the label "laptop"',
+            expectExit: 0
+        }
+    ]
+});
+export default sshKeyAddCommandDescriptor;
+//# sourceMappingURL=forge.ssh-key.add.command.descriptor.js.map

package/dist/cli/commands/forge.ssh-key.add.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.add.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.add.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;IAC5D,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,4DAA4D;IACzE,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,kDAAkD;YAC/D,QAAQ,EAAE,IAAI;SACd;KACD;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,8DAA8D;SAC3E;QACD;YACC,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,6DAA6D;SAC1E;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,gCAAgC;YACzC,WAAW,EAAE,yDAAyD;YACtE,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/cli/commands/forge.ssh-key.add.command.impl.d.ts

@@ -0,0 +1,19 @@
+import type { CommandContext } from '@vibesdotdev/cli';
+/** The arguments `forge ssh-key add` reads. */
+export interface SshKeyAddArgs {
+    name?: string;
+}
+/** The options `forge ssh-key add` reads, as the CLI hands them. */
+export type SshKeyAddOptions = Readonly<{
+    key?: string;
+    publicKey?: string;
+    json?: boolean;
+    format?: string;
+    output?: string;
+}>;
+export declare function execute(args: SshKeyAddArgs, opts: SshKeyAddOptions, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=forge.ssh-key.add.command.impl.d.ts.map

package/dist/cli/commands/forge.ssh-key.add.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.add.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.add.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAkBvD,+CAA+C;AAC/C,MAAM,WAAW,aAAa;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oEAAoE;AACpE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAcH,wBAAsB,OAAO,CAC5B,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Bf;;;;AAED,wBAA2B"}

package/dist/cli/commands/forge.ssh-key.add.command.impl.js

@@ -0,0 +1,51 @@
+/**
+ * `vibes forge ssh-key add <name>` — register an SSH public key.
+ *
+ * Reads the PUBLIC key (default ~/.ssh/id_ed25519.pub, override --key, or inline
+ * --public-key) and POSTs it to the owner-scoped /api/account/ssh-keys route. The
+ * server validates ssh-ed25519 (400 on a bad key) and dedupes by fingerprint
+ * (409). The private key is never read or sent.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { sendForgeRequest } from "../lib/transport.js";
+import { forgeResponseFailure } from "../../request.js";
+import { commandUI, printJson, printSuccess, wantsJson } from "../lib/output.js";
+import { keyPathBase, resolvePublicKeyPath, readPublicKeyFile } from "../lib/ssh-key-source.js";
+const SshKeyAddArgsSchema = z.object({ name: z.string().trim().catch('') });
+/** Each option on its own: a malformed one never gates the others. */
+const SshKeyAddOptionsSchema = z.object({
+    key: z.string().optional().catch(undefined),
+    // Commander stores `--public-key <line>` under the camelCase attribute
+    // `publicKey`, not the literal hyphenated string (verified against the
+    // real Option/action pipeline in cli/src/surface/register-commands.ts;
+    // this flag silently fell through to file-lookup before this fix).
+    publicKey: z.string().trim().min(1).optional().catch(undefined)
+});
+export async function execute(args, opts, context) {
+    const { runtime } = context;
+    const ui = commandUI(context);
+    const parsedArgs = SshKeyAddArgsSchema.safeParse(args);
+    const name = parsedArgs.success ? parsedArgs.data.name : '';
+    if (!name) {
+        throw new CapabilityError('Usage: vibes forge ssh-key add <name> [--key <path> | --public-key <line>]', 'INVALID_INPUT', { reason: 'command-usage', retryable: false });
+    }
+    const parsedOptions = SshKeyAddOptionsSchema.safeParse(opts);
+    const options = parsedOptions.success ? parsedOptions.data : {};
+    const publicKey = options.publicKey ?? (await readPublicKeyFile(resolvePublicKeyPath(options.key, keyPathBase(runtime)), runtime));
+    const res = await sendForgeRequest(runtime, {
+        method: 'POST',
+        path: '/api/account/ssh-keys',
+        body: { name, publicKey }
+    });
+    if (!res.ok)
+        throw forgeResponseFailure(res);
+    const { result } = res.data;
+    if (wantsJson(opts)) {
+        printJson(ui, result);
+        return;
+    }
+    printSuccess(ui, `Registered SSH key "${result.name}" (${result.fingerprint})`);
+}
+export default { execute };
+//# sourceMappingURL=forge.ssh-key.add.command.impl.js.map

package/dist/cli/commands/forge.ssh-key.add.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.add.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.add.command.impl.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAgBhG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE5E,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC3C,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,mEAAmE;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,IAAmB,EACnB,IAAsB,EACtB,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACxB,4EAA4E,EAC5E,eAAe,EACf,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAC7C,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,MAAM,SAAS,GACd,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAElH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAuB,OAAO,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAC5B,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtB,OAAO;IACR,CAAC;IACD,YAAY,CAAC,EAAE,EAAE,uBAAuB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;AACjF,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/commands/forge.ssh-key.list.command.descriptor.d.ts

@@ -0,0 +1,20 @@
+export declare const sshKeyListCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "forge.ssh-key.list";
+    readonly name: "list";
+    readonly description: "List the SSH public keys registered for the acting account";
+    readonly group: "forge.ssh-key";
+    readonly arguments: [];
+    readonly options: [];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 20;
+    readonly examples: [{
+        readonly command: "vibes forge ssh-key list";
+        readonly description: "List your registered SSH keys (name + fingerprint)";
+        readonly expectExit: 0;
+    }];
+};
+export default sshKeyListCommandDescriptor;
+//# sourceMappingURL=forge.ssh-key.list.command.descriptor.d.ts.map

package/dist/cli/commands/forge.ssh-key.list.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.list.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.list.command.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;CAmBtC,CAAC;AAEH,eAAe,2BAA2B,CAAC"}

package/dist/cli/commands/forge.ssh-key.list.command.descriptor.js

@@ -0,0 +1,23 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const sshKeyListCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'forge.ssh-key.list',
+    name: 'list',
+    description: 'List the SSH public keys registered for the acting account',
+    group: 'forge.ssh-key',
+    arguments: [],
+    options: [],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 20,
+    examples: [
+        {
+            command: 'vibes forge ssh-key list',
+            description: 'List your registered SSH keys (name + fingerprint)',
+            expectExit: 0
+        }
+    ]
+});
+export default sshKeyListCommandDescriptor;
+//# sourceMappingURL=forge.ssh-key.list.command.descriptor.js.map

package/dist/cli/commands/forge.ssh-key.list.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.list.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.list.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;IAC7D,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,4DAA4D;IACzE,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,0BAA0B;YACnC,WAAW,EAAE,oDAAoD;YACjE,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,2BAA2B,CAAC"}

package/dist/cli/commands/forge.ssh-key.list.command.impl.d.ts

@@ -0,0 +1,15 @@
+import type { CommandContext } from '@vibesdotdev/cli';
+/** `forge ssh-key list` takes no arguments. */
+export type SshKeyListArgs = Readonly<Record<string, never>>;
+/** The options `forge ssh-key list` reads, as the CLI hands them. */
+export type SshKeyListOptions = Readonly<{
+    json?: boolean;
+    format?: string;
+    output?: string;
+}>;
+export declare function execute(_args: SshKeyListArgs, opts: SshKeyListOptions, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=forge.ssh-key.list.command.impl.d.ts.map

package/dist/cli/commands/forge.ssh-key.list.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.list.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.list.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcvD,+CAA+C;AAC/C,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE7D,qEAAqE;AACrE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE/F,wBAAsB,OAAO,CAC5B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAuBf;;;;AAED,wBAA2B"}

package/dist/cli/commands/forge.ssh-key.list.command.impl.js

@@ -0,0 +1,32 @@
+/**
+ * `vibes forge ssh-key list` — list the acting owner's registered SSH keys.
+ *
+ * The server scopes the list to the acting account/org; the CLI renders name +
+ * fingerprint + id. Public keys are public, but the list is owner-scoped (you only
+ * ever see your own).
+ */
+import { sendForgeRequest } from "../lib/transport.js";
+import { forgeResponseFailure } from "../../request.js";
+import { commandUI, printJson, renderTable, wantsJson } from "../lib/output.js";
+export async function execute(_args, opts, context) {
+    const { runtime } = context;
+    const ui = commandUI(context);
+    const res = await sendForgeRequest(runtime, {
+        method: 'GET',
+        path: '/api/account/ssh-keys'
+    });
+    if (!res.ok)
+        throw forgeResponseFailure(res);
+    const keys = res.data.results ?? [];
+    if (wantsJson(opts)) {
+        printJson(ui, keys);
+        return;
+    }
+    renderTable(ui, keys, [
+        { header: 'NAME', width: 20, value: (k) => k.name },
+        { header: 'FINGERPRINT', width: 52, value: (k) => k.fingerprint },
+        { header: 'ID', width: 36, value: (k) => k.id }
+    ], 'No SSH keys registered for the active account.');
+}
+export default { execute };
+//# sourceMappingURL=forge.ssh-key.list.command.impl.js.map

package/dist/cli/commands/forge.ssh-key.list.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.list.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.list.command.impl.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQhF,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,KAAqB,EACrB,IAAuB,EACvB,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAqB,OAAO,EAAE;QAC/D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,uBAAuB;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpB,OAAO;IACR,CAAC;IACD,WAAW,CACV,EAAE,EACF,IAAI,EACJ;QACC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACnD,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;QACjE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;KAC/C,EACD,gDAAgD,CAChD,CAAC;AACH,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/commands/forge.ssh-key.remove.command.descriptor.d.ts

@@ -0,0 +1,24 @@
+export declare const sshKeyRemoveCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "forge.ssh-key.remove";
+    readonly name: "remove";
+    readonly description: "Remove a registered SSH key by id, fingerprint, or name";
+    readonly group: "forge.ssh-key";
+    readonly arguments: [{
+        readonly name: "key";
+        readonly description: "The key id, its SHA256:... fingerprint, or its label";
+        readonly required: true;
+    }];
+    readonly options: [];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 30;
+    readonly examples: [{
+        readonly command: "vibes forge ssh-key remove laptop";
+        readonly description: "Remove the SSH key labelled \"laptop\"";
+        readonly expectExit: 0;
+    }];
+};
+export default sshKeyRemoveCommandDescriptor;
+//# sourceMappingURL=forge.ssh-key.remove.command.descriptor.d.ts.map

package/dist/cli/commands/forge.ssh-key.remove.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.remove.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.remove.command.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;CAyBxC,CAAC;AAEH,eAAe,6BAA6B,CAAC"}

package/dist/cli/commands/forge.ssh-key.remove.command.descriptor.js

@@ -0,0 +1,29 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const sshKeyRemoveCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'forge.ssh-key.remove',
+    name: 'remove',
+    description: 'Remove a registered SSH key by id, fingerprint, or name',
+    group: 'forge.ssh-key',
+    arguments: [
+        {
+            name: 'key',
+            description: 'The key id, its SHA256:... fingerprint, or its label',
+            required: true
+        }
+    ],
+    options: [],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 30,
+    examples: [
+        {
+            command: 'vibes forge ssh-key remove laptop',
+            description: 'Remove the SSH key labelled "laptop"',
+            expectExit: 0
+        }
+    ]
+});
+export default sshKeyRemoveCommandDescriptor;
+//# sourceMappingURL=forge.ssh-key.remove.command.descriptor.js.map

package/dist/cli/commands/forge.ssh-key.remove.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.remove.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.remove.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;IAC/D,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,yDAAyD;IACtE,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,sDAAsD;YACnE,QAAQ,EAAE,IAAI;SACd;KACD;IACD,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,mCAAmC;YAC5C,WAAW,EAAE,sCAAsC;YACnD,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,6BAA6B,CAAC"}

package/dist/cli/commands/forge.ssh-key.remove.command.impl.d.ts

@@ -0,0 +1,17 @@
+import type { CommandContext } from '@vibesdotdev/cli';
+/** The arguments `forge ssh-key remove` reads. */
+export interface SshKeyRemoveArgs {
+    key?: string;
+}
+/** The options `forge ssh-key remove` reads, as the CLI hands them. */
+export type SshKeyRemoveOptions = Readonly<{
+    json?: boolean;
+    format?: string;
+    output?: string;
+}>;
+export declare function execute(args: SshKeyRemoveArgs, opts: SshKeyRemoveOptions, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=forge.ssh-key.remove.command.impl.d.ts.map

package/dist/cli/commands/forge.ssh-key.remove.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.remove.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.remove.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAkBvD,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,uEAAuE;AACvE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAIjG,wBAAsB,OAAO,CAC5B,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Bf;;;;AAED,wBAA2B"}

package/dist/cli/commands/forge.ssh-key.remove.command.impl.js

@@ -0,0 +1,48 @@
+/**
+ * `vibes forge ssh-key remove <key>` — remove a registered SSH key.
+ *
+ * Resolves `<key>` (id | SHA256: fingerprint | name) to its id by listing the
+ * owner's keys and matching, then DELETEs /api/account/ssh-keys/[id]. The server
+ * is owner-guarded (a foreign id is a 404, never a probe), so the CLI never
+ * re-checks ownership.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { sendForgeRequest } from "../lib/transport.js";
+import { forgeResponseFailure } from "../../request.js";
+import { commandUI, printJson, printSuccess, wantsJson } from "../lib/output.js";
+import { matchSshKey } from "../lib/ssh-key-source.js";
+const SshKeyRemoveArgsSchema = z.object({ key: z.string().trim().catch('') });
+export async function execute(args, opts, context) {
+    const { runtime } = context;
+    const ui = commandUI(context);
+    const parsed = SshKeyRemoveArgsSchema.safeParse(args);
+    const ref = parsed.success ? parsed.data.key : '';
+    if (!ref) {
+        throw new CapabilityError('Usage: vibes forge ssh-key remove <id | fingerprint | name>', 'INVALID_INPUT', {
+            reason: 'command-usage',
+            retryable: false
+        });
+    }
+    // Resolve the ref → id via the owner-scoped list (then DELETE by id).
+    const list = await sendForgeRequest(runtime, {
+        method: 'GET',
+        path: '/api/account/ssh-keys'
+    });
+    if (!list.ok)
+        throw forgeResponseFailure(list);
+    const id = matchSshKey(ref, list.data.results ?? []);
+    const res = await sendForgeRequest(runtime, {
+        method: 'DELETE',
+        path: `/api/account/ssh-keys/${encodeURIComponent(id)}`
+    });
+    if (!res.ok)
+        throw forgeResponseFailure(res);
+    if (wantsJson(opts)) {
+        printJson(ui, { removed: true, id });
+        return;
+    }
+    printSuccess(ui, `Removed SSH key ${ref} (${id})`);
+}
+export default { execute };
+//# sourceMappingURL=forge.ssh-key.remove.command.impl.js.map

package/dist/cli/commands/forge.ssh-key.remove.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.ssh-key.remove.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.ssh-key.remove.command.impl.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAUvD,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,IAAsB,EACtB,IAAyB,EACzB,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,eAAe,CAAC,6DAA6D,EAAE,eAAe,EAAE;YACzG,MAAM,EAAE,eAAe;YACvB,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAqB,OAAO,EAAE;QAChE,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,uBAAuB;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAU,OAAO,EAAE;QACpD,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,yBAAyB,kBAAkB,CAAC,EAAE,CAAC,EAAE;KACvD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO;IACR,CAAC;IACD,YAAY,CAAC,EAAE,EAAE,mBAAmB,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}