Merge pull request #134 from auths-dev/dev-initRepoAutomation

refactor: make init simpler by auto populating .auths/ in repo and removing registration as default

Author: bordumb

.github/workflows/publish-node.yml

@@ -119,48 +119,9 @@ jobs:
         working-directory: packages/auths-node
         run: pnpm test
 
-  universal-macos:
-    name: Universal macOS binary
-    needs: [build]
-    runs-on: macos-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-
-      - name: Install pnpm
-        run: npm install -g pnpm
-
-      - name: Install dependencies
-        working-directory: packages/auths-node
-        run: pnpm install
-
-      - uses: actions/download-artifact@v4
-        with:
-          name: bindings-aarch64-apple-darwin
-          path: packages/auths-node/artifacts
-
-      - uses: actions/download-artifact@v4
-        with:
-          name: bindings-x86_64-apple-darwin
-          path: packages/auths-node/artifacts
-
-      - name: Build universal binary
-        working-directory: packages/auths-node
-        run: |
-          pnpm artifacts
-          pnpm universal
-
-      - uses: actions/upload-artifact@v4
-        with:
-          name: bindings-universal-apple-darwin
-          path: packages/auths-node/auths.darwin-universal.node
-
   publish:
     name: Publish to npm
-    needs: [build, test, universal-macos]
+    needs: [build, test]
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v') || (github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'npm')
     permissions:

crates/auths-cli/src/commands/init/gather.rs

@@ -43,7 +43,7 @@ pub(crate) fn gather_developer_config(
         .with_conflict_policy(conflict_policy)
         .with_git_signing_scope(git_scope);
 
-    if !cmd.skip_registration {
+    if cmd.register {
         builder = builder.with_registration(&cmd.registry);
     }
 
@@ -134,7 +134,7 @@ pub(crate) fn submit_registration(
     out: &Output,
 ) -> Option<String> {
     if skip {
-        out.print_info("Registration skipped (--skip-registration)");
+        out.print_info("Registration skipped (pass --register to publish to the registry)");
         return None;
     }
 

crates/auths-cli/src/commands/init/mod.rs

@@ -12,6 +12,7 @@ mod prompts;
 use anyhow::{Result, anyhow};
 use clap::{Args, ValueEnum};
 use std::io::IsTerminal;
+use std::path::PathBuf;
 use std::sync::Arc;
 
 use auths_core::PrefilledPassphraseProvider;
@@ -29,6 +30,7 @@ use crate::config::CliConfig;
 use crate::factories::storage::build_auths_context;
 use crate::ux::format::Output;
 
+use super::signers::{SignersSyncArgs, handle_sync};
 use display::{
     display_agent_dry_run, display_agent_result, display_ci_result, display_developer_result,
 };
@@ -118,13 +120,13 @@ pub struct InitCommand {
     #[clap(long)]
     pub dry_run: bool,
 
-    /// Registry URL for automatic identity registration
+    /// Registry URL for identity registration
     #[clap(long, default_value = DEFAULT_REGISTRY_URL)]
     pub registry: String,
 
-    /// Skip automatic registry registration during setup
+    /// Register identity with the Auths Registry after creation
     #[clap(long)]
-    pub skip_registration: bool,
+    pub register: bool,
 
     /// Scaffold a GitHub Actions workflow using the auths attest-action
     #[clap(long)]
@@ -240,7 +242,7 @@ fn run_developer_setup(
 
     // PLATFORM VERIFICATION
     guide.section("Platform Verification");
-    let proof_url = if interactive && !cmd.skip_registration {
+    let proof_url = if interactive && cmd.register {
         out.print_info("Claim your Developer Passport");
         out.newline();
         match prompt_platform_verification(
@@ -267,13 +269,28 @@ fn run_developer_setup(
     offer_shell_completions(interactive, out)?;
     write_allowed_signers(&result.key_alias, out)?;
 
+    // Also write repo-local .auths/allowed_signers if we're inside a git repo,
+    // so `auths verify` works immediately without extra flags.
+    if let Ok(output) = std::process::Command::new("git")
+        .args(["rev-parse", "--show-toplevel"])
+        .output()
+        && output.status.success()
+    {
+        let root = PathBuf::from(String::from_utf8_lossy(&output.stdout).trim());
+        let repo_signers = root.join(".auths").join("allowed_signers");
+        let _ = handle_sync(&SignersSyncArgs {
+            repo: "~/.auths".into(),
+            output_file: Some(repo_signers),
+        });
+    }
+
     // REGISTRATION & DISPLAY
     guide.section("Registration & Summary");
     let registered = submit_registration(
         &get_auths_repo_path()?,
         &cmd.registry,
         proof_url,
-        cmd.skip_registration,
+        !cmd.register, // skip unless --register is explicitly passed
         out,
     );
     display_developer_result(out, &result, registered.as_deref());
@@ -390,7 +407,7 @@ mod tests {
             force: false,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         assert!(!cmd.interactive);
@@ -400,7 +417,7 @@ mod tests {
         assert!(!cmd.force);
         assert!(!cmd.dry_run);
         assert_eq!(cmd.registry, "https://auths-registry.fly.dev");
-        assert!(!cmd.skip_registration);
+        assert!(!cmd.register);
         assert!(!cmd.github_action);
     }
 
@@ -414,7 +431,7 @@ mod tests {
             force: true,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         assert!(cmd.non_interactive);
@@ -446,7 +463,7 @@ mod tests {
             force: false,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         assert!(!resolve_interactive(&cmd).unwrap());
@@ -462,7 +479,7 @@ mod tests {
             force: false,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         // Auto-detect returns is_terminal() — result depends on environment

crates/auths-cli/src/commands/signers.rs

@@ -208,7 +208,7 @@ fn handle_remove(args: &SignersRemoveArgs) -> Result<()> {
     Ok(())
 }
 
-fn handle_sync(args: &SignersSyncArgs) -> Result<()> {
+pub(crate) fn handle_sync(args: &SignersSyncArgs) -> Result<()> {
     let repo_path = expand_tilde(&args.repo)?;
     let storage = RegistryAttestationStorage::new(&repo_path);
 

crates/auths-cli/tests/cases/helpers.rs

@@ -94,13 +94,7 @@ impl TestEnv {
     pub fn init_identity(&self) {
         let output = self
             .cmd("auths")
-            .args([
-                "init",
-                "--non-interactive",
-                "--profile",
-                "developer",
-                "--skip-registration",
-            ])
+            .args(["init", "--non-interactive", "--profile", "developer"])
             .output()
             .unwrap();
         assert!(

crates/auths-cli/tests/cases/init.rs

@@ -78,13 +78,7 @@ fn test_init_happy_path() {
 
     let output = env
         .cmd("auths")
-        .args([
-            "init",
-            "--non-interactive",
-            "--profile",
-            "developer",
-            "--skip-registration",
-        ])
+        .args(["init", "--non-interactive", "--profile", "developer"])
         .output()
         .unwrap();
 

crates/auths-cli/tests/cases/revocation.rs

@@ -19,13 +19,7 @@ fn test_emergency_revoke_device() {
     // Run init and capture device DID from output
     let init_output = env
         .cmd("auths")
-        .args([
-            "init",
-            "--non-interactive",
-            "--profile",
-            "developer",
-            "--skip-registration",
-        ])
+        .args(["init", "--non-interactive", "--profile", "developer"])
         .output()
         .unwrap();
     assert!(init_output.status.success());

docs/cli/commands/primary.md

@@ -18,7 +18,7 @@ Set up your cryptographic identity and Git signing
 | `--force` | — | Force overwrite if identity already exists |
 | `--dry-run` | — | Preview agent configuration without creating files or identities |
 | `--registry <REGISTRY>` | `https://auths-registry.fly.dev` | Registry URL for automatic identity registration |
-| `--skip-registration` | — | Skip automatic registry registration during setup |
+| `--register` | — | Register identity with the Auths Registry after creation |
 | `--json` | — | Emit machine-readable JSON |
 | `-q, --quiet` | — | Suppress non-essential output |
 | `--repo <REPO>` | — | Override the local storage directory (default: ~/.auths) |

docs/guides/identity/profiles.md

@@ -52,7 +52,7 @@ auths init --profile developer --non-interactive --key-alias my-key
 | `--force` | `false` | Overwrite existing identity |
 | `--non-interactive` | `false` | Skip all prompts, use defaults |
 | `--registry` | `https://auths-registry.fly.dev` | Registry URL for identity registration |
-| `--skip-registration` | `false` | Skip automatic registry registration |
+| `--register` | `false` | Register identity with the Auths Registry |
 
 ### CI profile
 

packages/auths-mobile-swift/build-xcframework.sh

@@ -21,7 +21,6 @@ fi
 echo "Checking Rust targets..."
 TARGETS=(
     "aarch64-apple-darwin"      # macOS Apple Silicon
-    "x86_64-apple-darwin"       # macOS Intel
     "aarch64-apple-ios"         # iOS device
     "aarch64-apple-ios-sim"     # iOS Simulator (Apple Silicon)
     "x86_64-apple-ios"          # iOS Simulator (Intel)