@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.5

package/dist/cli/lib/user-environment.projection.js

@@ -0,0 +1,202 @@
+/**
+ * Durable user-level remint hooks for package-manager clients.
+ *
+ * Files never store a session JWT. New shells remint through `vibes registry env`
+ * so private installs keep working after short-lived app tokens expire.
+ */
+import { join, resolveFileSystemAdapter } from '@vibesdotdev/filesystem';
+import { CapabilityError } from '@vibesdotdev/kernel';
+const PROFILE_BEGIN = '# BEGIN managed-by-vibes-auth-setup';
+const PROFILE_END = '# END managed-by-vibes-auth-setup';
+const PROFILE_HOOK = [
+    PROFILE_BEGIN,
+    'if [ -f "${VIBES_HOME:-$HOME/.vibes}/registry.env" ]; then',
+    '  . "${VIBES_HOME:-$HOME/.vibes}/registry.env"',
+    'fi',
+    PROFILE_END,
+    ''
+].join('\n');
+/** The POSIX test for an interactive shell, the only kind the remint runs in. */
+const INTERACTIVE_SHELL_GUARD = 'case $- in';
+/**
+ * Interactive shells remint `VIBES_REGISTRY_TOKEN` for private-registry
+ * installs. Non-interactive shells (every agent command) skip it: the remint is
+ * a whole CLI boot per shell, and they rarely install. Nothing is removed; the
+ * token stays one command away for them.
+ */
+export const REGISTRY_ENV_REMINT = [
+    '# Managed by vibes auth setup. No secret is stored here.',
+    '# Interactive shells export VIBES_REGISTRY_TOKEN for private-registry installs.',
+    '# Non-interactive shells (agents) skip it; before an install there, run:',
+    '#   eval "$(vibes registry env)"',
+    `${INTERACTIVE_SHELL_GUARD}`,
+    '  *i*)',
+    '    if command -v vibes >/dev/null 2>&1; then',
+    '      eval "$(vibes registry env 2>/dev/null)"',
+    '    fi',
+    '    ;;',
+    'esac',
+    ''
+].join('\n');
+/**
+ * User-store snapshots the Windows host clears: the registry token, and the
+ * `VIBES_REGISTRY_JWT` copy older setups wrote before it folded into it.
+ */
+export const STALE_REGISTRY_USER_STORE_KEYS = ['VIBES_REGISTRY_TOKEN', 'VIBES_REGISTRY_JWT'];
+/** `registry.env` under the runtime's Vibes home (`getPathRoots(runtime).vibesHome`). */
+export function registryEnvFilePath(home) {
+    return join(home, 'registry.env');
+}
+export function posixProfilePaths(userHome) {
+    return ['.zprofile', '.bash_profile', '.profile'].map((name) => join(userHome, name));
+}
+export function defaultPosixProfilePaths(userHome) {
+    return [join(userHome, '.zprofile'), join(userHome, '.profile')];
+}
+export function profileContainsHook(text) {
+    return text.includes(PROFILE_BEGIN) && text.includes(PROFILE_END);
+}
+export function mergePosixProfileHook(existing) {
+    if (profileContainsHook(existing))
+        return existing;
+    const trimmed = existing.replace(/\s+$/, '');
+    return `${trimmed}${trimmed ? '\n\n' : ''}${PROFILE_HOOK}`;
+}
+/** A current remint file: it remints through `vibes registry env` in interactive shells only, and stores no token. */
+export function registryEnvFileLooksReady(text) {
+    return (text.includes('vibes registry env') &&
+        text.includes(INTERACTIVE_SHELL_GUARD) &&
+        !/export VIBES_REGISTRY_TOKEN='.+'/.test(text));
+}
+export async function writeRegistryEnvFile(home, fs) {
+    await fs.mkdir(home, { recursive: true });
+    const path = registryEnvFilePath(home);
+    await fs.writeFile(path, REGISTRY_ENV_REMINT, { mode: 0o600 });
+    return path;
+}
+export async function inspectRegistryEnvFile(home, fs) {
+    const path = registryEnvFilePath(home);
+    if (!(await fs.exists(path))) {
+        return { path, ready: false };
+    }
+    const raw = await fs.readFile(path, 'utf8');
+    const text = raw instanceof Uint8Array ? new TextDecoder().decode(raw) : raw;
+    return { path, ready: registryEnvFileLooksReady(text) };
+}
+export async function persistPosixProfileHook(userHome, fs) {
+    const written = [];
+    const targets = new Map();
+    for (const path of defaultPosixProfilePaths(userHome)) {
+        targets.set(path, '');
+    }
+    for (const path of posixProfilePaths(userHome)) {
+        if (await fs.exists(path)) {
+            const raw = await fs.readFile(path, 'utf8');
+            targets.set(path, raw instanceof Uint8Array ? new TextDecoder().decode(raw) : raw);
+        }
+    }
+    for (const [path, text] of targets) {
+        const next = mergePosixProfileHook(text);
+        if (next !== text) {
+            await fs.writeFile(path, next, { mode: 0o644 });
+            written.push(path);
+        }
+    }
+    return written;
+}
+export async function inspectPosixProfileHook(userHome, fs) {
+    const zprofile = join(userHome, '.zprofile');
+    if (!(await fs.exists(zprofile)))
+        return false;
+    const raw = await fs.readFile(zprofile, 'utf8');
+    const text = raw instanceof Uint8Array ? new TextDecoder().decode(raw) : raw;
+    return profileContainsHook(text);
+}
+async function tryHasNamedToken(host) {
+    try {
+        const ready = await host.hasNamedToken();
+        return { ok: true, ready };
+    }
+    catch (error) {
+        return { ok: false, error };
+    }
+}
+export async function projectUserRegistryEnvironment(_token, options) {
+    const fs = options.fs ?? (options.runtime ? await resolveFileSystemAdapter(options.runtime, { binding: false }) : null);
+    if (!fs) {
+        throw new CapabilityError('User registry environment projection requires a runtime or fs adapter.', 'UNAVAILABLE', {
+            reason: 'filesystem-unavailable',
+            retryable: false
+        });
+    }
+    const envFile = await writeRegistryEnvFile(options.vibesHome, fs);
+    // SAFETY: runtime.environment optionally declares getPlatform on platform hosts.
+    const platform = options.platform ?? options.runtime?.environment?.getPlatform?.() ?? 'linux';
+    const userHome = options.userHome;
+    let profileReady = false;
+    if (platform === 'win32') {
+        const host = options.host ?? userEnvironmentHost(options.runtime);
+        await host.persistNamedToken(STALE_REGISTRY_USER_STORE_KEYS);
+        const probe = await tryHasNamedToken(host);
+        profileReady = probe.ok ? probe.ready : false;
+        return {
+            envFile,
+            envFileReady: true,
+            profileReady,
+            userStoreReady: profileReady
+        };
+    }
+    await persistPosixProfileHook(userHome, fs);
+    profileReady = await inspectPosixProfileHook(userHome, fs);
+    return {
+        envFile,
+        envFileReady: true,
+        profileReady,
+        userStoreReady: profileReady
+    };
+}
+export async function inspectUserRegistryEnvironment(options) {
+    const fs = options.fs ?? (options.runtime ? await resolveFileSystemAdapter(options.runtime, { binding: false }) : null);
+    if (!fs) {
+        throw new CapabilityError('User registry environment inspection requires a runtime or fs adapter.', 'UNAVAILABLE', {
+            reason: 'filesystem-unavailable',
+            retryable: false
+        });
+    }
+    const file = await inspectRegistryEnvFile(options.vibesHome, fs);
+    // SAFETY: runtime.environment optionally declares getPlatform on platform hosts.
+    const platform = options.platform ?? options.runtime?.environment?.getPlatform?.() ?? 'linux';
+    if (platform === 'win32') {
+        const host = options.host ?? userEnvironmentHost(options.runtime);
+        const probe = await tryHasNamedToken(host);
+        const profileReady = probe.ok ? probe.ready : false;
+        return {
+            envFile: file.path,
+            envFileReady: file.ready,
+            profileReady,
+            userStoreReady: profileReady
+        };
+    }
+    const profileReady = await inspectPosixProfileHook(options.userHome, fs);
+    return {
+        envFile: file.path,
+        envFileReady: file.ready,
+        profileReady,
+        userStoreReady: profileReady
+    };
+}
+/**
+ * The user-environment store the host environment declares
+ * (`runtime.environment.userEnvironment`). A host without one fails closed.
+ */
+function userEnvironmentHost(runtime) {
+    const host = runtime?.environment?.userEnvironment;
+    if (!host) {
+        throw new CapabilityError('This host declares no user environment store.', 'UNAVAILABLE', {
+            reason: 'user-environment-unavailable',
+            retryable: false
+        });
+    }
+    return host;
+}
+//# sourceMappingURL=user-environment.projection.js.map

package/dist/cli/lib/user-environment.projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-environment.projection.js","sourceRoot":"","sources":["../../../src/cli/lib/user-environment.projection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,IAAI,EACJ,wBAAwB,EAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAsD,MAAM,qBAAqB,CAAC;AAE1G,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAC5D,MAAM,WAAW,GAAG,mCAAmC,CAAC;AACxD,MAAM,YAAY,GAAG;IACpB,aAAa;IACb,4DAA4D;IAC5D,gDAAgD;IAChD,IAAI;IACJ,WAAW;IACX,EAAE;CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,iFAAiF;AACjF,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,0DAA0D;IAC1D,iFAAiF;IACjF,0EAA0E;IAC1E,kCAAkC;IAClC,GAAG,uBAAuB,EAAE;IAC5B,QAAQ;IACR,+CAA+C;IAC/C,gDAAgD;IAChD,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,EAAE;CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsB,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;AAShH,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IACjD,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACxD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACrD,IAAI,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC;AAC5D,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACrD,OAAO,CACN,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACtC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,EAA8B;IACtF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAY,EACZ,EAA8B;IAE9B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,QAAgB,EAChB,EAA8B;IAE9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;IACF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,QAAgB,EAChB,EAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7E,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAID,KAAK,UAAU,gBAAgB,CAAC,IAAgC;IAI/D,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,MAAc,EACd,OASC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxH,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,IAAI,eAAe,CAAC,wEAAwE,EAAE,aAAa,EAAE;YAClH,MAAM,EAAE,wBAAwB;YAChC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAClE,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAK,OAAO,CAAC,OAAO,EAAE,WAA0D,EAAE,WAAW,EAAE,EAAE,IAAI,OAAO,CAAC;IAC9I,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3C,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9C,OAAO;YACN,OAAO;YACP,YAAY,EAAE,IAAI;YAClB,YAAY;YACZ,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,YAAY,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO;QACN,OAAO;QACP,YAAY,EAAE,IAAI;QAClB,YAAY;QACZ,cAAc,EAAE,YAAY;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,OASC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxH,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,IAAI,eAAe,CAAC,wEAAwE,EAAE,aAAa,EAAE;YAClH,MAAM,EAAE,wBAAwB;YAChC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAK,OAAO,CAAC,OAAO,EAAE,WAA0D,EAAE,WAAW,EAAE,EAAE,IAAI,OAAO,CAAC;IAC9I,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACpD,OAAO;YACN,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,YAAY,EAAE,IAAI,CAAC,KAAK;YACxB,YAAY;YACZ,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO;QACN,OAAO,EAAE,IAAI,CAAC,IAAI;QAClB,YAAY,EAAE,IAAI,CAAC,KAAK;QACxB,YAAY;QACZ,cAAc,EAAE,YAAY;KAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAiC;IAC7D,MAAM,IAAI,GAAG,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,+CAA+C,EAAE,aAAa,EAAE;YACzF,MAAM,EAAE,8BAA8B;YACtC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/cli/logging/forge-cli.logger.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { LoggerDescriptor } from '@vibesdotdev/logging';
+declare const descriptor: LoggerDescriptor;
+export default descriptor;
+//# sourceMappingURL=forge-cli.logger.descriptor.d.ts.map

package/dist/cli/logging/forge-cli.logger.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-cli.logger.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/logging/forge-cli.logger.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,QAAA,MAAM,UAAU,EAAE,gBASjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/logging/forge-cli.logger.descriptor.js

@@ -0,0 +1,12 @@
+const descriptor = {
+    kind: 'logging/logger',
+    id: 'forge-cli',
+    name: 'Forge CLI Logger',
+    description: 'Structured operational logging for Forge CLI integrations',
+    namespace: 'forge:cli',
+    runtime: 'cli',
+    sinks: ['console'],
+    level: 'info'
+};
+export default descriptor;
+//# sourceMappingURL=forge-cli.logger.descriptor.js.map

package/dist/cli/logging/forge-cli.logger.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-cli.logger.descriptor.js","sourceRoot":"","sources":["../../../src/cli/logging/forge-cli.logger.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAqB;IACpC,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,2DAA2D;IACxE,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,CAAC,SAAS,CAAC;IAClB,KAAK,EAAE,MAAM;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/plugin.d.ts

@@ -0,0 +1,87 @@
+/**
+ * @vibesdotdev/forge/cli plugin
+ *
+ * Canonical `@vibesdotdev/forge/cli` in-package surface. Registers:
+ *   - the `forge` cli/group (aliased `git` — one tree, two names)
+ *   - the `forge.repo` + `forge.token` subgroups
+ *   - `forge doctor`
+ *   - `forge repo {create,list,delete}`
+ *   - `forge branch-policy {list,set,remove}`
+ *   - `forge collaborator {list,add,remove}`
+ *   - `forge issue {list,get,create,comment}`
+ *   - `forge pr {list,get,create,merge-status,review,merge,close}`
+ *   - `forge pr stack {list,get,create,update,dissolve,restack,merge}`
+ *   - `forge token {mint,list,revoke}`
+ *   - `forge clone` and `forge clone-url`
+ *   - `forge credential-helper` (explicit authenticated Smart HTTPS selection)
+ *   - `forge remote bootstrap`
+ *   - `forge push` (canonical SSH plus exact-ref verification)
+ *   - `forge ssh-key {add,list,remove}`
+ *   - `forge smoke {merge,registry,ai-review}` plus `registry smoke`
+ *     (operational smoke tests; dry-run by default)
+ *   - `registry {setup,env,publish}` and `registry token {create,list,revoke}`
+ *     for packages.vibes.dev (session-backed publish/read plus optional CI tokens)
+ *
+ * The hosted registry pieces — `registry token {create,list,revoke}`,
+ * `registry authority verify`, `forge smoke registry` and `registry smoke` —
+ * keep their descriptors here and register `registerForgePremiumAbsence`
+ * (`UNAVAILABLE` `forge-premium-absent` at priority `-1`). Their implementations
+ * live in the Premium overlay (`@vibesdotdev/forge-premium/plugin`).
+ *   - `ci {status,logs,rerun,cancel}` — run-control over the existing
+ *     platform-web control route. `ci rerun` cancels queued/running first.
+ *
+ * Every command talks to platform-web (e.g. https://platform.vibes.dev) over a
+ * bearer JWT (read from the stored auth credential). platform-web owns the
+ * owner-scoped repository + deploy-token + ssh-key admin API and enforces RBAC
+ * server-side (repo CRUD = owner, clone-url = write, token ops = admin, ssh-key =
+ * owner); the CLI never re-implements authz. Vibes-owned automation and blessed
+ * remotes use canonical `ssh://git@git.vibes.dev/...`; product users may
+ * explicitly select authenticated Smart HTTPS through the credential helper.
+ *
+ * SCOPE: only commands whose platform API routes already exist are registered.
+ * DEFERRED (no platform routes yet — Phase 3): the `split` dogfood driver.
+ *
+ * `dependencies: ['cli', 'platform']` — registered in plugins-infra's cli-surface
+ * block right after `@vibesdotdev/platform/plugin` is ensured, so the `platform`
+ * dependency resolves.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/**
+ * Operational smoke tests are internal tooling, not consumer features. A host
+ * that declares source mode (`qualifiers.dev`) registers them; any other host
+ * keeps them hidden unless an operator opts in with VIBES_FORGE_ENABLE_SMOKES=1
+ * on its captured environment, which lets cut-over smokes use the production
+ * CLI auth/environment path.
+ */
+export declare function shouldRegisterOperationalSmokes(runtime: Pick<RuntimeRef, 'scope' | 'getEnv'>): boolean;
+/**
+ * The reason a command whose implementation lives in the Premium overlay
+ * (`@vibesdotdev/forge-premium`) refuses when the host has not composed it.
+ */
+export declare const FORGE_PREMIUM_ABSENT_REASON = "forge-premium-absent";
+/**
+ * The loader priority of forge's typed absence. The overlay registers its
+ * implementations at the default priority (0), so composing it replaces the
+ * refusal; leaving it out keeps the refusal.
+ */
+export declare const FORGE_PREMIUM_ABSENT_PRIORITY = -1;
+/** The public `registry token` commands whose implementations live in the Premium overlay. */
+export declare const FORGE_PREMIUM_REGISTRY_COMMAND_IDS: readonly ["registry.token.create", "registry.token.list", "registry.token.revoke"];
+/** The operational smokes whose implementations live in the Premium overlay. */
+export declare const FORGE_PREMIUM_SMOKE_COMMAND_IDS: readonly ["registry.authority.verify", "forge.smoke.registry", "registry.smoke"];
+/**
+ * The `cli/command` implementation every Premium-owned command resolves to
+ * when the overlay is absent: a typed `UNAVAILABLE` `forge-premium-absent`,
+ * never an untyped "no implementation".
+ */
+export declare const forgePremiumAbsentCommand: {
+    execute(): Promise<void>;
+};
+/**
+ * Register forge's typed absence for `ids` below the overlay's priority. The
+ * descriptors stay forge's; only the implementation is the overlay's.
+ */
+export declare function registerForgePremiumAbsence(runtime: Pick<RuntimeRef, 'registerLoader'>, ids: readonly string[]): void;
+export declare const forgeCliPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default forgeCliPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/cli/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAKN,KAAK,UAAU,EACf,MAAM,qBAAqB,CAAC;AAgG7B;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC9C,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAC,GAC3C,OAAO,CAIT;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD,8FAA8F;AAC9F,eAAO,MAAM,kCAAkC,oFAIrC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,+BAA+B,kFAIlC,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;eACpB,OAAO,CAAC,IAAI,CAAC;CAW9B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAC3C,GAAG,EAAE,SAAS,MAAM,EAAE,GACpB,IAAI,CASN;AAgBD,eAAO,MAAM,cAAc,6CAySzB,CAAC;AAEH,eAAe,cAAc,CAAC"}