@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.5

package/dist/cli/commands/registry.env.fast-path.js

@@ -0,0 +1,45 @@
+/**
+ * What `vibes registry env` needs to answer without a whole CLI boot.
+ *
+ * Interactive shells run `vibes registry env` from the managed remint
+ * (`user-environment.projection.ts`), so its cost is paid per shell. A full
+ * boot composes every workspace plugin (seconds, ~800 MB); the bearer needs
+ * only the owners below. The host entry boots a subset workspace composition
+ * (every config layer projected as usual, these plugins composed) and calls
+ * {@link registryEnvExportLine}; on any failure it falls through to the full
+ * CLI, whose command is the one contract for refusals and exit codes.
+ */
+import { resolveCallerBearer } from '@vibesdotdev/auth/caller-bearer';
+import { formatRegistryEnvExport } from "../lib/registry-client-config.js";
+/**
+ * The plugins the caller bearer resolves through: logging (the credential
+ * store logs), storage + config + environment + `infra.services` (the stored login and the
+ * environment it is partitioned under), the Vibes service origins (the auth
+ * origin the stored login is exchanged at for the app JWT; without it auth
+ * degrades to the raw stored credential), secrets (the `secrets/store` kind),
+ * and auth with its consumer device-session store and declared dependencies.
+ */
+export const REGISTRY_ENV_FAST_PATH_PLUGINS = Object.freeze([
+    '@vibesdotdev/logging/plugin',
+    '@vibesdotdev/storage/storage.plugin',
+    '@vibesdotdev/storage/adapters/json/plugin',
+    '@vibesdotdev/storage/adapters/localdb/plugin',
+    '@vibesdotdev/config/plugin',
+    '@vibesdotdev/config/environment/environment.plugin',
+    '@vibesdotdev/infra-core/service',
+    '@vibesdotdev/integrations-vibes/services',
+    '@vibesdotdev/docs/plugin',
+    '@vibesdotdev/kernel/client',
+    '@vibesdotdev/secrets/plugin',
+    '@vibesdotdev/auth/plugin',
+    '@vibesdotdev/auth/consumer.plugin'
+]);
+/**
+ * The export line `vibes registry env` writes, or `null` when the caller has
+ * no bearer. Any failure propagates: the caller falls through to the command.
+ */
+export async function registryEnvExportLine(runtime) {
+    const token = await resolveCallerBearer(runtime);
+    return token ? formatRegistryEnvExport(token) : null;
+}
+//# sourceMappingURL=registry.env.fast-path.js.map

package/dist/cli/commands/registry.env.fast-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.env.fast-path.js","sourceRoot":"","sources":["../../../src/cli/commands/registry.env.fast-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC9E,6BAA6B;IAC7B,qCAAqC;IACrC,2CAA2C;IAC3C,8CAA8C;IAC9C,4BAA4B;IAC5B,oDAAoD;IACpD,iCAAiC;IACjC,0CAA0C;IAC1C,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,0BAA0B;IAC1B,mCAAmC;CACnC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB;IAChE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC"}

package/dist/cli/commands/registry.publish.command.descriptor.d.ts

@@ -0,0 +1,51 @@
+export declare const registryPublishCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "registry.publish";
+    readonly name: "publish";
+    readonly description: "Publish one or more package directories to packages.vibes.dev using the signed-in session";
+    readonly group: "registry";
+    readonly arguments: [{
+        readonly name: "paths";
+        readonly description: "Package directories (defaults to the current working directory)";
+        readonly required: false;
+        readonly variadic: true;
+    }];
+    readonly options: [{
+        readonly flags: "--dry-run";
+        readonly description: "Pack and prove the publish without writing to the registry";
+    }, {
+        readonly flags: "--yes";
+        readonly description: "Confirm a real publish";
+    }, {
+        readonly flags: "--output <format>";
+        readonly description: "Output format";
+        readonly choices: ["json", "human"];
+        readonly default: "human";
+    }, {
+        readonly flags: "--release-workspace-manifest <path>";
+        readonly description: "Optional sealed release workspace manifest for a planned closure";
+    }, {
+        readonly flags: "--publish-delay-ms <ms>";
+        readonly description: "Wait between packages when publishing a closure (default: 0)";
+    }, {
+        readonly flags: "--release-contract-version <version>";
+        readonly description: "Registry release workspace wire version (1 during dual-read rollout; 2 after Platform and worker activation)";
+        readonly default: "1";
+        readonly choices: ["1", "2"];
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 1;
+    readonly examples: [{
+        readonly command: "vibes registry publish";
+        readonly description: "Publish the package in the current directory using the signed-in session";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes registry publish --dry-run";
+        readonly description: "Prove the publish without writing to the registry";
+        readonly expectExit: 0;
+    }];
+};
+export default registryPublishCommandDescriptor;
+//# sourceMappingURL=registry.publish.command.descriptor.d.ts.map

package/dist/cli/commands/registry.publish.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.publish.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/registry.publish.command.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmD3C,CAAC;AAEH,eAAe,gCAAgC,CAAC"}

package/dist/cli/commands/registry.publish.command.descriptor.js

@@ -0,0 +1,53 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const registryPublishCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'registry.publish',
+    name: 'publish',
+    description: 'Publish one or more package directories to packages.vibes.dev using the signed-in session',
+    group: 'registry',
+    arguments: [
+        {
+            name: 'paths',
+            description: 'Package directories (defaults to the current working directory)',
+            required: false,
+            variadic: true
+        }
+    ],
+    options: [
+        { flags: '--dry-run', description: 'Pack and prove the publish without writing to the registry' },
+        { flags: '--yes', description: 'Confirm a real publish' },
+        { flags: '--output <format>', description: 'Output format', choices: ['json', 'human'], default: 'human' },
+        {
+            flags: '--release-workspace-manifest <path>',
+            description: 'Optional sealed release workspace manifest for a planned closure'
+        },
+        {
+            flags: '--publish-delay-ms <ms>',
+            description: 'Wait between packages when publishing a closure (default: 0)'
+        },
+        {
+            flags: '--release-contract-version <version>',
+            description: 'Registry release workspace wire version (1 during dual-read rollout; 2 after Platform and worker activation)',
+            default: '1',
+            choices: ['1', '2']
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 1,
+    examples: [
+        {
+            command: 'vibes registry publish',
+            description: 'Publish the package in the current directory using the signed-in session',
+            expectExit: 0
+        },
+        {
+            command: 'vibes registry publish --dry-run',
+            description: 'Prove the publish without writing to the registry',
+            expectExit: 0
+        }
+    ]
+});
+export default registryPublishCommandDescriptor;
+//# sourceMappingURL=registry.publish.command.descriptor.js.map

package/dist/cli/commands/registry.publish.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.publish.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/registry.publish.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,gCAAgC,GAAG,kBAAkB,CAAC;IAClE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,SAAS;IACf,WAAW,EACV,2FAA2F;IAC5F,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,iEAAiE;YAC9E,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;SACd;KACD;IACD,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,4DAA4D,EAAE;QACjG,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE;QACzD,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE;QAC1G;YACC,KAAK,EAAE,qCAAqC;YAC5C,WAAW,EAAE,kEAAkE;SAC/E;QACD;YACC,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,8DAA8D;SAC3E;QACD;YACC,KAAK,EAAE,sCAAsC;YAC7C,WAAW,EACV,8GAA8G;YAC/G,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;SACnB;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,wBAAwB;YACjC,WAAW,EAAE,0EAA0E;YACvF,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,kCAAkC;YAC3C,WAAW,EAAE,mDAAmD;YAChE,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,gCAAgC,CAAC"}

package/dist/cli/commands/registry.publish.command.impl.d.ts

@@ -0,0 +1,56 @@
+import type { CommandContext } from '@vibesdotdev/cli';
+/** The arguments `registry publish` reads: zero or more package paths. */
+export type RegistryPublishArgs = Readonly<{
+    paths?: string | readonly string[];
+}>;
+/** The options `registry publish` forwards, as the CLI hands them. */
+export type RegistryPublishOptions = Readonly<{
+    yes?: boolean;
+    dryRun?: boolean;
+    publishDelayMs?: number | string;
+    releaseWorkspaceManifest?: string;
+    releaseContractVersion?: string;
+    output?: string;
+    format?: string;
+    json?: boolean;
+}>;
+/** What Infra Deploy's publish command is handed. */
+export interface InfraPublishInvocation {
+    args: {
+        paths: string[];
+    };
+    opts: {
+        yes: boolean;
+        dryRun: boolean;
+        publishDelayMs: number | string;
+        releaseWorkspaceManifest: string | undefined;
+        releaseContractVersion: string | undefined;
+        output: string | undefined;
+        format: string | undefined;
+    };
+}
+/** Infra Deploy's `infra-npm.publish` command, as this command calls it. */
+export interface InfraPublish {
+    execute(args: InfraPublishInvocation['args'], opts: InfraPublishInvocation['opts'], context: CommandContext): Promise<void>;
+}
+export type ResolveInfraPublish = () => Promise<InfraPublish>;
+/**
+ * Preserve the user's path kind across the runtime command boundary. Infra
+ * Deploy owns resolution: a relative request resolves against the host's
+ * working directory, and the bound workspace (`runtime/workspace-path`)
+ * selects the publish workspace. Resolving it here would be a second answer.
+ */
+export declare function resolveRegistryPublishPaths(args: RegistryPublishArgs): string[];
+export declare function buildInfraPublishInvocation(packageDirs: readonly string[], opts: RegistryPublishOptions): InfraPublishInvocation;
+/**
+ * Publish through `resolveImpl` (a test replaces Infra Deploy's command there),
+ * handing it this command's context so it runs on the same runtime and UI.
+ * Its failures reach the CLI surface as they are.
+ */
+export declare function publishRegistryPackages(args: RegistryPublishArgs, opts: RegistryPublishOptions, context: CommandContext, resolveImpl: ResolveInfraPublish): Promise<void>;
+export declare function execute(args: RegistryPublishArgs, opts: RegistryPublishOptions, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=registry.publish.command.impl.d.ts.map

package/dist/cli/commands/registry.publish.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.publish.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/registry.publish.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcvD,0EAA0E;AAC1E,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAEnF,sEAAsE;AACtE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC7C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CACf,CAAC,CAAC;AAEH,qDAAqD;AACrD,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1B,IAAI,EAAE;QACL,GAAG,EAAE,OAAO,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;QAChC,wBAAwB,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7C,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;KAC3B,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC5B,OAAO,CACN,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,EACpC,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,EACpC,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;AA+B9D;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAS/E;AAED,wBAAgB,2BAA2B,CAC1C,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,IAAI,EAAE,sBAAsB,GAC1B,sBAAsB,CAaxB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC5C,IAAI,EAAE,mBAAmB,EACzB,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,mBAAmB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,OAAO,CAC5B,IAAI,EAAE,mBAAmB,EACzB,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAEf;;;;AAED,wBAA2B"}

package/dist/cli/commands/registry.publish.command.impl.js

@@ -0,0 +1,78 @@
+/**
+ * `vibes registry publish [paths...]` — publish one or more package directories.
+ *
+ * Auth is the signed-in session. The command delegates to
+ * `cli/command#infra-npm.publish`, which already exchanges that session for
+ * an app JWT and mints a managed Registry lease when the target is
+ * packages.vibes.dev. CI tokens stay available through `vibes registry token`
+ * and `vibes infra npm publish --token-key`.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+/** A command implementation with a callable `execute`, read without trusting it. */
+const InfraPublishSchema = z.custom((value) => z.object({ execute: z.function() }).safeParse(value).success);
+/** Infra Deploy's `infra-npm.publish` command on the handed runtime. */
+function resolveInfraPublish(runtime) {
+    return async () => {
+        const selected = InfraPublishSchema.safeParse(await runtime.query('cli/command').withId('infra-npm.publish').resolve());
+        if (!selected.success) {
+            throw new CapabilityError('Infra Deploy\'s npm publish command is not available on this host.', 'UNAVAILABLE', {
+                reason: 'infra-publish-unavailable',
+                retryable: false
+            });
+        }
+        return selected.data;
+    };
+}
+/** The paths argument as the CLI hands it: a list, one path, or none. */
+const PublishPathsArgsSchema = z.object({
+    paths: z.union([z.array(z.unknown()), z.string()]).optional().catch(undefined)
+});
+/** One package path: any text with a non-blank character, kept as given. */
+const PublishPathSchema = z.string().refine((path) => path.trim().length > 0);
+/**
+ * Preserve the user's path kind across the runtime command boundary. Infra
+ * Deploy owns resolution: a relative request resolves against the host's
+ * working directory, and the bound workspace (`runtime/workspace-path`)
+ * selects the publish workspace. Resolving it here would be a second answer.
+ */
+export function resolveRegistryPublishPaths(args) {
+    const parsed = PublishPathsArgsSchema.safeParse(args);
+    const raw = parsed.success ? parsed.data.paths : undefined;
+    const candidates = raw === undefined ? [] : Array.isArray(raw) ? raw : [raw];
+    const paths = candidates.flatMap((candidate) => {
+        const path = PublishPathSchema.safeParse(candidate);
+        return path.success ? [path.data] : [];
+    });
+    return paths.length > 0 ? paths : ['.'];
+}
+export function buildInfraPublishInvocation(packageDirs, opts) {
+    return {
+        args: { paths: [...packageDirs] },
+        opts: {
+            yes: opts.yes === true,
+            dryRun: opts.dryRun === true,
+            publishDelayMs: opts.publishDelayMs ?? 0,
+            releaseWorkspaceManifest: opts.releaseWorkspaceManifest,
+            releaseContractVersion: opts.releaseContractVersion,
+            output: opts.output,
+            format: opts.format
+        }
+    };
+}
+/**
+ * Publish through `resolveImpl` (a test replaces Infra Deploy's command there),
+ * handing it this command's context so it runs on the same runtime and UI.
+ * Its failures reach the CLI surface as they are.
+ */
+export async function publishRegistryPackages(args, opts, context, resolveImpl) {
+    const packageDirs = resolveRegistryPublishPaths(args);
+    const impl = await resolveImpl();
+    const invocation = buildInfraPublishInvocation(packageDirs, opts);
+    await impl.execute(invocation.args, invocation.opts, context);
+}
+export async function execute(args, opts, context) {
+    return publishRegistryPackages(args, opts, context, resolveInfraPublish(context.runtime));
+}
+export default { execute };
+//# sourceMappingURL=registry.publish.command.impl.js.map

package/dist/cli/commands/registry.publish.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.publish.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/registry.publish.command.impl.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AA0CzE,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACvE,CAAC;AAEF,wEAAwE;AACxE,SAAS,mBAAmB,CAAC,OAAqB;IACjD,OAAO,KAAK,IAAI,EAAE;QACjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAC5C,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CACxE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,oEAAoE,EAAE,aAAa,EAAE;gBAC9G,MAAM,EAAE,2BAA2B;gBACnC,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACtB,CAAC,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC9E,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAyB;IACpE,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,UAAU,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,WAA8B,EAC9B,IAA4B;IAE5B,OAAO;QACN,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;QACjC,IAAI,EAAE;YACL,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;YACxC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;YACvD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACnB;KACD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,IAAyB,EACzB,IAA4B,EAC5B,OAAuB,EACvB,WAAgC;IAEhC,MAAM,WAAW,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,IAAyB,EACzB,IAA4B,EAC5B,OAAuB;IAEvB,OAAO,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/commands/registry.setup.command.descriptor.d.ts

@@ -0,0 +1,27 @@
+export declare const registrySetupCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "registry.setup";
+    readonly name: "setup";
+    readonly description: "Write user-level scoped-registry config that reads VIBES_REGISTRY_TOKEN";
+    readonly group: "registry";
+    readonly arguments: [];
+    readonly options: [{
+        readonly flags: "--check";
+        readonly description: "Report whether user-level registry config and package auth are ready";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 5;
+    readonly examples: [{
+        readonly command: "vibes registry setup";
+        readonly description: "Pin @vibesdotdev to packages.vibes.dev and project signed-in package auth";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes registry setup --check";
+        readonly description: "Check that private package installs can authenticate";
+        readonly expectExit: 0;
+    }];
+};
+export default registrySetupCommandDescriptor;
+//# sourceMappingURL=registry.setup.command.descriptor.d.ts.map

package/dist/cli/commands/registry.setup.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.setup.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/registry.setup.command.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;CA6BzC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/cli/commands/registry.setup.command.descriptor.js

@@ -0,0 +1,33 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const registrySetupCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'registry.setup',
+    name: 'setup',
+    description: 'Write user-level scoped-registry config that reads VIBES_REGISTRY_TOKEN',
+    group: 'registry',
+    arguments: [],
+    options: [
+        {
+            flags: '--check',
+            description: 'Report whether user-level registry config and package auth are ready'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 5,
+    examples: [
+        {
+            command: 'vibes registry setup',
+            description: 'Pin @vibesdotdev to packages.vibes.dev and project signed-in package auth',
+            expectExit: 0
+        },
+        {
+            command: 'vibes registry setup --check',
+            description: 'Check that private package installs can authenticate',
+            expectExit: 0
+        }
+    ]
+});
+export default registrySetupCommandDescriptor;
+//# sourceMappingURL=registry.setup.command.descriptor.js.map

package/dist/cli/commands/registry.setup.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.setup.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/registry.setup.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,kBAAkB,CAAC;IAChE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,yEAAyE;IACtF,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE,EAAE;IACb,OAAO,EAAE;QACR;YACC,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,sEAAsE;SACnF;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,sBAAsB;YAC/B,WAAW,EAAE,2EAA2E;YACxF,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,8BAA8B;YACvC,WAAW,EAAE,sDAAsD;YACnE,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/cli/commands/registry.setup.command.impl.d.ts

@@ -0,0 +1,19 @@
+import type { CommandContext } from '@vibesdotdev/cli';
+import { registryHomes, writeUserRegistryClientConfig } from '../lib/registry-client-config.ts';
+export { registryHomes, writeUserRegistryClientConfig };
+/** `registry setup` takes no arguments. */
+export type RegistrySetupArgs = Readonly<Record<string, never>>;
+/** The options `registry setup` reads, as the CLI hands them. */
+export type RegistrySetupOptions = Readonly<{
+    check?: boolean;
+    quiet?: boolean;
+    json?: boolean;
+    format?: string;
+    output?: string;
+}>;
+export declare function execute(_args: RegistrySetupArgs, opts: RegistrySetupOptions, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=registry.setup.command.impl.d.ts.map

package/dist/cli/commands/registry.setup.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.setup.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/registry.setup.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAmBvD,OAAO,EAGN,aAAa,EACb,6BAA6B,EAC7B,MAAM,kCAAkC,CAAC;AAM1C,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,CAAC;AAwBxD,2CAA2C;AAC3C,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAEhE,iEAAiE;AACjE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAIH,wBAAsB,OAAO,CAC5B,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,oBAAoB,EAC1B,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CA0Ff;;;;AAED,wBAA2B"}

package/dist/cli/commands/registry.setup.command.impl.js

@@ -0,0 +1,118 @@
+/**
+ * `vibes registry setup` — write user-level scoped-registry config and
+ * remint hooks. Files keep env-var indirection. New shells remint through
+ * `vibes registry env`; nothing is bound into this process.
+ */
+import * as z from 'zod/v4';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { commandUI, printJson, printSuccess, printWarning, wantsJson, wantsQuiet } from "../lib/output.js";
+import { REGISTRY_SCOPE, REGISTRY_TOKEN_ENV, registryHomes, writeUserRegistryClientConfig } from "../lib/registry-client-config.js";
+import { inspectRegistryProjection, projectRegistryAfterLogin } from "../lib/registry-projection.js";
+export { registryHomes, writeUserRegistryClientConfig };
+function reportReady(report) {
+    return (report.config.npmrcReady &&
+        report.config.bunfigReady &&
+        report.tokenBound &&
+        report.tokenUsable &&
+        report.registryReachable &&
+        report.userEnvironment.envFileReady &&
+        report.userEnvironment.profileReady &&
+        report.userEnvironment.userStoreReady);
+}
+/** Private package auth is not ready on this machine. */
+function notReady() {
+    return new CapabilityError('Private package auth is not ready. Run: vibes auth setup', 'UNAVAILABLE', {
+        reason: 'registry-auth-not-ready',
+        retryable: false,
+        recoveryHint: 'Run: vibes auth setup'
+    });
+}
+const RegistrySetupOptionsSchema = z.object({ check: z.boolean().optional().catch(undefined) });
+export async function execute(_args, opts, context) {
+    const { runtime } = context;
+    const ui = commandUI(context);
+    const parsedOptions = RegistrySetupOptionsSchema.safeParse(opts);
+    const check = parsedOptions.success && parsedOptions.data.check === true;
+    const homes = registryHomes(runtime);
+    const quiet = wantsQuiet(opts);
+    if (check) {
+        const report = await inspectRegistryProjection(runtime, homes);
+        const ready = reportReady(report);
+        if (quiet) {
+            if (!ready)
+                throw notReady();
+            return;
+        }
+        if (wantsJson(opts)) {
+            printJson(ui, {
+                ok: ready,
+                scope: REGISTRY_SCOPE,
+                registry: await serviceOrigin(context.runtime, 'registry'),
+                tokenEnv: REGISTRY_TOKEN_ENV,
+                tokenBound: report.tokenBound,
+                tokenUsable: report.tokenUsable,
+                registryReachable: report.registryReachable,
+                config: {
+                    npmrc: report.config.npmrc,
+                    bunfig: report.config.bunfig,
+                    ready: report.config.npmrcReady && report.config.bunfigReady
+                },
+                durable: {
+                    envFileReady: report.userEnvironment.envFileReady,
+                    profileReady: report.userEnvironment.profileReady,
+                    userStoreReady: report.userEnvironment.userStoreReady
+                }
+            });
+            if (!ready)
+                requestCLIExit(1);
+            return;
+        }
+        if (ready) {
+            printSuccess(ui, `Private ${REGISTRY_SCOPE} packages are ready on this machine.`);
+            return;
+        }
+        throw notReady();
+    }
+    const report = await projectRegistryAfterLogin({ ...homes, runtime });
+    if (quiet) {
+        if (!report.tokenBound) {
+            throw new CapabilityError(`Pinned ${REGISTRY_SCOPE}, but you are not signed in.`, 'AUTH_REQUIRED', {
+                reason: 'not-signed-in',
+                recoveryHint: 'Run: vibes auth login'
+            });
+        }
+        return;
+    }
+    if (wantsJson(opts)) {
+        printJson(ui, {
+            ok: report.tokenBound && report.config.npmrcReady && report.config.bunfigReady,
+            scope: REGISTRY_SCOPE,
+            registry: await serviceOrigin(context.runtime, 'registry'),
+            tokenEnv: REGISTRY_TOKEN_ENV,
+            tokenBound: report.tokenBound,
+            tokenSource: report.tokenSource,
+            tokenUsable: report.tokenUsable,
+            npmrc: report.config.npmrc,
+            bunfig: report.config.bunfig,
+            durable: {
+                envFile: report.userEnvironment.envFile,
+                envFileReady: report.userEnvironment.envFileReady,
+                profileReady: report.userEnvironment.profileReady,
+                userStoreReady: report.userEnvironment.userStoreReady
+            }
+        });
+        if (!report.tokenBound)
+            requestCLIExit(1);
+        return;
+    }
+    printSuccess(ui, `Pinned ${REGISTRY_SCOPE} to ${await serviceOrigin(context.runtime, 'registry')} in ${report.config.npmrc} and ${report.config.bunfig}.`);
+    if (report.tokenBound) {
+        printSuccess(ui, 'Package auth is ready. New terminals remint it automatically. No secret was written into those config files.');
+        return;
+    }
+    printWarning(ui, `No secret was written. Run vibes auth login so private ${REGISTRY_SCOPE} packages can install.`);
+}
+export default { execute };
+//# sourceMappingURL=registry.setup.command.impl.js.map

package/dist/cli/commands/registry.setup.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.setup.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/registry.setup.command.impl.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EACN,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,UAAU,EACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,6BAA6B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,CAAC;AAExD,SAAS,WAAW,CAAC,MAA6D;IACjF,OAAO,CACN,MAAM,CAAC,MAAM,CAAC,UAAU;QACxB,MAAM,CAAC,MAAM,CAAC,WAAW;QACzB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,iBAAiB;QACxB,MAAM,CAAC,eAAe,CAAC,YAAY;QACnC,MAAM,CAAC,eAAe,CAAC,YAAY;QACnC,MAAM,CAAC,eAAe,CAAC,cAAc,CACrC,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,SAAS,QAAQ;IAChB,OAAO,IAAI,eAAe,CAAC,0DAA0D,EAAE,aAAa,EAAE;QACrG,MAAM,EAAE,yBAAyB;QACjC,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,uBAAuB;KACrC,CAAC,CAAC;AACJ,CAAC;AAcD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAEhG,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,KAAwB,EACxB,IAA0B,EAC1B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IACzE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,KAAK;gBAAE,MAAM,QAAQ,EAAE,CAAC;YAC7B,OAAO;QACR,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,EAAE,EAAE;gBACb,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,cAAc;gBACrB,QAAQ,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;gBAC1D,QAAQ,EAAE,kBAAkB;gBAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,MAAM,EAAE;oBACP,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;oBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;oBAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW;iBAC5D;gBACD,OAAO,EAAE;oBACR,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,YAAY;oBACjD,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,YAAY;oBACjD,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,cAAc;iBACrD;aACD,CAAC,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,cAAc,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO;QACR,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACX,YAAY,CAAC,EAAE,EAAE,WAAW,cAAc,sCAAsC,CAAC,CAAC;YAClF,OAAO;QACR,CAAC;QACD,MAAM,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,IAAI,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,UAAU,cAAc,8BAA8B,EAAE,eAAe,EAAE;gBAClG,MAAM,EAAE,eAAe;gBACvB,YAAY,EAAE,uBAAuB;aACrC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO;IACR,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,EAAE;YACb,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW;YAC9E,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;YAC1D,QAAQ,EAAE,kBAAkB;YAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE;gBACR,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO;gBACvC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,YAAY;gBACjD,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,YAAY;gBACjD,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,cAAc;aACrD;SACD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;IACR,CAAC;IACD,YAAY,CACX,EAAE,EACF,UAAU,cAAc,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CACxI,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,YAAY,CACX,EAAE,EACF,8GAA8G,CAC9G,CAAC;QACF,OAAO;IACR,CAAC;IACD,YAAY,CACX,EAAE,EACF,0DAA0D,cAAc,wBAAwB,CAChG,CAAC;AACH,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/commands/registry.smoke.command.descriptor.d.ts

@@ -0,0 +1,59 @@
+/**
+ * `vibes registry smoke` — discoverable alias for the registry publish→install
+ * round-trip gate also exposed as `vibes forge smoke registry`.
+ *
+ * Secrets leverage: token resolved from secrets store or minted (never in argv/disk).
+ */
+export declare const registrySmokeCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "registry.smoke";
+    readonly name: "smoke";
+    readonly description: "Smoke-test the registry publish/install round-trip (dry-run by default)";
+    readonly group: "registry";
+    readonly options: [{
+        readonly flags: "--json";
+        readonly description: "Emit machine-readable JSON";
+    }, {
+        readonly flags: "--format <format>";
+        readonly description: "Output format (text or json)";
+    }, {
+        readonly flags: "--execute";
+        readonly description: "Actually run the smoke test (default: dry-run plan only)";
+    }, {
+        readonly flags: "--cleanup-package <name>";
+        readonly description: "Delete one orphaned scoped smoke package with an ephemeral minted token";
+    }, {
+        readonly flags: "--keep";
+        readonly description: "Keep the scratch package in the registry after a successful publish/install";
+    }, {
+        readonly flags: "--npm-bin <path>";
+        readonly description: "npm-compatible binary to use for publish/install (default: npm)";
+    }, {
+        readonly flags: "--scope <name>";
+        readonly description: "npm @scope to publish under (default: vibes-smoke)";
+    }, {
+        readonly flags: "--token-key <key>";
+        readonly description: "Secrets-store key name to resolve the publish token from (else mint via platform API)";
+    }, {
+        readonly flags: "--origin <url>";
+        readonly description: "Registry target (default: declared registry service); credentials keep the host service environment";
+    }, {
+        readonly flags: "--platform-origin <url>";
+        readonly description: "Platform origin used to mint a registry token (default: resolved env)";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 20;
+    readonly examples: [{
+        readonly command: "vibes registry smoke";
+        readonly description: "Print the planned registry round-trip steps without publishing";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes registry smoke --execute --token-key VIBES_REGISTRY_TOKEN";
+        readonly description: "Run the full publish → install → delete round-trip using a stored token";
+        readonly expectExit: 0;
+    }];
+};
+export default registrySmokeCommandDescriptor;
+//# sourceMappingURL=registry.smoke.command.descriptor.d.ts.map

package/dist/cli/commands/registry.smoke.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.smoke.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/registry.smoke.command.descriptor.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2CzC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}