tcmts.cli.attest

Types

FoundAttestation type: An attestation found: who wrote it, and where.
Trusted type: Someone, as the registry knows them: their DID, and their handle if it checks out.

attest (cb: Codebase, m: { what: string; kind: string; message: string | undefined; severity: string | und…: `tcm lib attest`: write a review, an advisory or (a release's author's) a yank, about `what`, to the signed-in account's repository.
attestationsFor (cb: Codebase, namespaces: string[], author: string | undefined) => Promise<FoundAttestation[]>: The attestations to show for some code: its author's (theirs alone count as yanks), and those of the people the codebase trusts. One who can't be read is said, and skipped.
printAttestations (found: FoundAttestation[], who: (did: string) => string) => void: Attestations, said a line each: yanks and advisories first.
setTrust (cb: Codebase, o: { add?: string | undefined; rm?: string | undefined; }) => Promise<Trusted[]>: `tcm lib trust`: whose attestations `tcm lib` shows, besides each library's author's: add someone (a handle or DID), or take them off. The list is a file of the codebase, so it's history: a team shares it.

attestationSubject (cb: Codebase, what: string) => Promise<AttestationSubject>: What `what` is, to attest: a library here (its name or mount), a release announced by someone (`@alice.dev/geo@1.2.0`), a release of this codebase (`geo@1.2.0`), or a namespace by its whole hash (`#…`).
attestationsBy (id: Identity, namespaces: Set<string>) => Promise<FoundAttestation[]>: The attestations an account has written about any of `namespaces`, as its repository signs them (`signedRecord`): one its PDS lists that doesn't check out is left out.
attesterNames (cb: Codebase, author?: { did?: string | undefined; handle?: string | undefined; } | undefined) => …: Who wrote something, said: a library's author as its record names them, someone trusted by their handle.
trustPath (cb: Codebase) => string: Where a codebase keeps who it trusts: `<root>.lib.trust`, beside its libraries' record.
trustedIn (cb: Codebase) => Trusted[]: Who a codebase trusts the attestations of, from its history.
writeAttestation (s: OAuthSession, a: Attestation) => Promise<string>: Write an attestation to the signed-in account's repository: its URI.