refactor: cleanup auths init by removing registration, adding auto signers file to repo, remove intel mac builds

Author: bordumb

.github/workflows/publish-node.yml

@@ -119,48 +119,9 @@ jobs:
         working-directory: packages/auths-node
         run: pnpm test
 
-  universal-macos:
-    name: Universal macOS binary
-    needs: [build]
-    runs-on: macos-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-
-      - name: Install pnpm
-        run: npm install -g pnpm
-
-      - name: Install dependencies
-        working-directory: packages/auths-node
-        run: pnpm install
-
-      - uses: actions/download-artifact@v4
-        with:
-          name: bindings-aarch64-apple-darwin
-          path: packages/auths-node/artifacts
-
-      - uses: actions/download-artifact@v4
-        with:
-          name: bindings-x86_64-apple-darwin
-          path: packages/auths-node/artifacts
-
-      - name: Build universal binary
-        working-directory: packages/auths-node
-        run: |
-          pnpm artifacts
-          pnpm universal
-
-      - uses: actions/upload-artifact@v4
-        with:
-          name: bindings-universal-apple-darwin
-          path: packages/auths-node/auths.darwin-universal.node
-
   publish:
     name: Publish to npm
-    needs: [build, test, universal-macos]
+    needs: [build, test]
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v') || (github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'npm')
     permissions:

crates/auths-cli/src/commands/init/gather.rs

@@ -43,7 +43,7 @@ pub(crate) fn gather_developer_config(
         .with_conflict_policy(conflict_policy)
         .with_git_signing_scope(git_scope);
 
-    if !cmd.skip_registration {
+    if cmd.register {
         builder = builder.with_registration(&cmd.registry);
     }
 

crates/auths-cli/src/commands/init/mod.rs

@@ -12,6 +12,7 @@ mod prompts;
 use anyhow::{Result, anyhow};
 use clap::{Args, ValueEnum};
 use std::io::IsTerminal;
+use std::path::PathBuf;
 use std::sync::Arc;
 
 use auths_core::PrefilledPassphraseProvider;
@@ -29,6 +30,7 @@ use crate::config::CliConfig;
 use crate::factories::storage::build_auths_context;
 use crate::ux::format::Output;
 
+use super::signers::{SignersSyncArgs, handle_sync};
 use display::{
     display_agent_dry_run, display_agent_result, display_ci_result, display_developer_result,
 };
@@ -118,13 +120,13 @@ pub struct InitCommand {
     #[clap(long)]
     pub dry_run: bool,
 
-    /// Registry URL for automatic identity registration
+    /// Registry URL for identity registration
     #[clap(long, default_value = DEFAULT_REGISTRY_URL)]
     pub registry: String,
 
-    /// Skip automatic registry registration during setup
+    /// Register identity with the Auths Registry after creation
     #[clap(long)]
-    pub skip_registration: bool,
+    pub register: bool,
 
     /// Scaffold a GitHub Actions workflow using the auths attest-action
     #[clap(long)]
@@ -240,7 +242,7 @@ fn run_developer_setup(
 
     // PLATFORM VERIFICATION
     guide.section("Platform Verification");
-    let proof_url = if interactive && !cmd.skip_registration {
+    let proof_url = if interactive && cmd.register {
         out.print_info("Claim your Developer Passport");
         out.newline();
         match prompt_platform_verification(
@@ -267,13 +269,28 @@ fn run_developer_setup(
     offer_shell_completions(interactive, out)?;
     write_allowed_signers(&result.key_alias, out)?;
 
+    // Also write repo-local .auths/allowed_signers if we're inside a git repo,
+    // so `auths verify` works immediately without extra flags.
+    if let Ok(output) = std::process::Command::new("git")
+        .args(["rev-parse", "--show-toplevel"])
+        .output()
+        && output.status.success()
+    {
+        let root = PathBuf::from(String::from_utf8_lossy(&output.stdout).trim());
+        let repo_signers = root.join(".auths").join("allowed_signers");
+        let _ = handle_sync(&SignersSyncArgs {
+            repo: "~/.auths".into(),
+            output_file: Some(repo_signers),
+        });
+    }
+
     // REGISTRATION & DISPLAY
     guide.section("Registration & Summary");
     let registered = submit_registration(
         &get_auths_repo_path()?,
         &cmd.registry,
         proof_url,
-        cmd.skip_registration,
+        !cmd.register, // skip unless --register is explicitly passed
         out,
     );
     display_developer_result(out, &result, registered.as_deref());
@@ -390,7 +407,7 @@ mod tests {
             force: false,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         assert!(!cmd.interactive);
@@ -400,7 +417,7 @@ mod tests {
         assert!(!cmd.force);
         assert!(!cmd.dry_run);
         assert_eq!(cmd.registry, "https://auths-registry.fly.dev");
-        assert!(!cmd.skip_registration);
+        assert!(!cmd.register);
         assert!(!cmd.github_action);
     }
 
@@ -414,7 +431,7 @@ mod tests {
             force: true,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         assert!(cmd.non_interactive);
@@ -446,7 +463,7 @@ mod tests {
             force: false,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         assert!(!resolve_interactive(&cmd).unwrap());
@@ -462,7 +479,7 @@ mod tests {
             force: false,
             dry_run: false,
             registry: DEFAULT_REGISTRY_URL.to_string(),
-            skip_registration: false,
+            register: false,
             github_action: false,
         };
         // Auto-detect returns is_terminal() — result depends on environment

crates/auths-cli/src/commands/signers.rs

@@ -208,7 +208,7 @@ fn handle_remove(args: &SignersRemoveArgs) -> Result<()> {
     Ok(())
 }
 
-fn handle_sync(args: &SignersSyncArgs) -> Result<()> {
+pub(crate) fn handle_sync(args: &SignersSyncArgs) -> Result<()> {
     let repo_path = expand_tilde(&args.repo)?;
     let storage = RegistryAttestationStorage::new(&repo_path);
 

packages/auths-mobile-swift/build-xcframework.sh

@@ -21,7 +21,6 @@ fi
 echo "Checking Rust targets..."
 TARGETS=(
     "aarch64-apple-darwin"      # macOS Apple Silicon
-    "x86_64-apple-darwin"       # macOS Intel
     "aarch64-apple-ios"         # iOS device
     "aarch64-apple-ios-sim"     # iOS Simulator (Apple Silicon)
     "x86_64-apple-ios"          # iOS Simulator (Intel)

packages/auths-node/package.json

@@ -18,7 +18,6 @@
   "napi": {
     "binaryName": "auths",
     "targets": [
-      "x86_64-apple-darwin",
       "aarch64-apple-darwin",
       "x86_64-unknown-linux-gnu",
       "aarch64-unknown-linux-gnu",

packages/auths-verifier-swift/build-xcframework.sh

@@ -20,7 +20,6 @@ fi
 echo "Checking Rust targets..."
 TARGETS=(
     "aarch64-apple-darwin"      # macOS Apple Silicon
-    "x86_64-apple-darwin"       # macOS Intel
     "aarch64-apple-ios"         # iOS device
     "aarch64-apple-ios-sim"     # iOS Simulator (Apple Silicon)
     "x86_64-apple-ios"          # iOS Simulator (Intel)

scripts/.github/workflows/ci.yml

@@ -31,8 +31,6 @@ jobs:
             target: x86_64-unknown-linux-gnu
           - os: macos-latest
             target: aarch64-apple-darwin
-          # - os: macos-13
-          #   target: x86_64-apple-darwin
           - os: windows-latest
             target: x86_64-pc-windows-msvc
     runs-on: ${{ matrix.os }}