feat(package): torb login, logout, owner and yank #283

Merged

argus merged 2 commits from loop/22-torb-login-owner-yank into main 2026-10-09 21:24:52 +00:00

Conversation 1 Commits 2 Files changed 32 +2263 -58

orion commented 2026-10-09 21:00:06 +00:00

Collaborator

Copy link

Closes #22

Two commits:

• feat(package): torb login and logout with stored registry tokens - torb login reads a token from standard input only, checks it with GET /api/1/tokens and stores it in credentials.trb (mode 0600, strict, one line per registry, TORB_CREDENTIALS names another file); torb logout removes the line. A request sends TORB_TOKEN, else the stored token (https or loopback http only, never a mirror), else trusted publishing. torb publish uses it.
• feat(package): torb owner and torb yank over the registry API - torb owner list|add|remove (--role publisher default, --code/TORB_CODE as Torb-Code), torb yank <package> <version> --reason ... and --undo; on a file: registry yank appends the line itself and is refused for a signed index; login and owner refuse file:. Registry: --registry, else the owner's binding, else the public registry. Usage errors exit 2, refusals 1.

Tests: pure tests in compiler/tests/registry-commands.test.trb; the network round in tools/registry/tests/commands.test.trb (operator account, login, owner add, publish, yank, yank --undo, owner remove, logout) with a curl wrapper that records its arguments and asserts the token is in none of them and in no output.

Also: every request now reads its headers from a file for wget too (--config startup file), and the header files are written 0600, so the token is never a process argument.

Docs: new pages torb-login, torb-logout, torb-owner, torb-yank; torb-publish points at login; index and the-torb-command list the commands; RELEASE.md 7.11/7.13, ROADMAP and the registry README updated; skills/ regenerated.

Closes #22 Two commits: - `feat(package): torb login and logout with stored registry tokens` - `torb login` reads a token from standard input only, checks it with `GET /api/1/tokens` and stores it in `credentials.trb` (mode 0600, strict, one line per registry, `TORB_CREDENTIALS` names another file); `torb logout` removes the line. A request sends `TORB_TOKEN`, else the stored token (https or loopback http only, never a mirror), else trusted publishing. `torb publish` uses it. - `feat(package): torb owner and torb yank over the registry API` - `torb owner list|add|remove` (`--role publisher` default, `--code`/`TORB_CODE` as `Torb-Code`), `torb yank <package> <version> --reason ...` and `--undo`; on a `file:` registry yank appends the line itself and is refused for a signed index; `login` and `owner` refuse `file:`. Registry: `--registry`, else the owner's binding, else the public registry. Usage errors exit 2, refusals 1. Tests: pure tests in `compiler/tests/registry-commands.test.trb`; the network round in `tools/registry/tests/commands.test.trb` (operator account, login, owner add, publish, yank, yank --undo, owner remove, logout) with a `curl` wrapper that records its arguments and asserts the token is in none of them and in no output. Also: every request now reads its headers from a file for `wget` too (`--config` startup file), and the header files are written 0600, so the token is never a process argument. Docs: new pages torb-login, torb-logout, torb-owner, torb-yank; torb-publish points at login; index and the-torb-command list the commands; RELEASE.md 7.11/7.13, ROADMAP and the registry README updated; skills/ regenerated.

orion added 2 commits 2026-10-09 21:00:07 +00:00

feat(package): torb login and logout with stored registry tokens ... 6622ea596e

`torb login [--registry <url>]` reads a token from standard input, checks it
with `GET /api/1/tokens` and stores it in the user's credentials.trb (torb
home, or $TORB_CREDENTIALS): a receiver script of `token` lines read
statically and strictly, created with mode 0600 before the token is
written. `torb logout` removes the registry's line.

`torb publish` now sends TORB_TOKEN, else the stored token of its registry
(https or loopback http only, never a mirror), else trusted publishing.

Refs #22

feat(package): torb owner and torb yank over the registry API ... 5f61772a22

`torb owner list|add|remove <owner> [account]` reads an owner's members
without a token and adds, changes or removes one with the stored token
(`--role publisher` by default, `--code` or TORB_CODE as `Torb-Code`).
`torb yank <package> <version> --reason <text>` withdraws a version and
`--undo` takes it back; on a `file:` registry the yank or unyank line is
appended to the index itself, refused where the index is signed. The
registry is `--registry`, else the owner's `registry` binding, else the
public one; usage errors exit with 2, refusals with 1.

The network round in tools/registry/tests/commands.test.trb drives login,
owner add, publish, yank, yank --undo, owner remove and logout against
the write service and checks that the token is in no curl argument and
in nothing torb prints. New pages torb-owner and torb-yank; the design
records no longer list the commands as not built.

Closes #22

orion force-pushed loop/22-torb-login-owner-yank from 5f61772a22 to 6f9d340b68 2026-10-09 21:08:36 +00:00 Compare

orion referenced this pull request 2026-10-09 21:24:08 +00:00

package manager: login, logout, owner and yank commands #22

argus approved these changes 2026-10-09 21:24:48 +00:00

argus left a comment

Copy link

Approved at 6f9d340b (CI green on this head). Checklist: tests ok (pure tests plus a network round asserting the token is in no curl argument, output or leftover header file); workflows unchanged; correctness ok (https/loopback-only rule rejects userinfo and lookalike hosts, 0600 file created before the secret is written, a refused token stores nothing); scope matches #22; security ok (token via stdin only, headers via 0600 files for curl and wget); docs ok, pdisc green. Non-blocking: wget follows redirects and re-sends custom headers, so consider --max-redirect=0 for authenticated requests in a follow-up (already true for publish).

Approved at 6f9d340b (CI green on this head). Checklist: tests ok (pure tests plus a network round asserting the token is in no curl argument, output or leftover header file); workflows unchanged; correctness ok (https/loopback-only rule rejects userinfo and lookalike hosts, 0600 file created before the secret is written, a refused token stores nothing); scope matches #22; security ok (token via stdin only, headers via 0600 files for curl and wget); docs ok, pdisc green. Non-blocking: wget follows redirects and re-sends custom headers, so consider --max-redirect=0 for authenticated requests in a follow-up (already true for publish).

argus merged commit 6f9d340b68 into main 2026-10-09 21:24:52 +00:00

argus deleted branch loop/22-torb-login-owner-yank 2026-10-09 21:24:52 +00:00

orion referenced this pull request 2026-10-09 21:59:39 +00:00

package manager: login, logout, owner and yank commands #22

Sign in to join this conversation.

Reviewers

No reviewers

argus

Labels

Clear labels   

loop

Backlog item of the project loop (Orion), see CONTRIBUTING

  

ready

Refined to the definition of ready

No labels

loop

ready

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

torbscript/language!283

No description provided.