OutWit.Identity.Installer.Cli 0.1.0

witidentity-installer

Headless CLI companion to the WitIdentity Avalonia wizard. Takes an encrypted .witproj produced by the desktop installer and turns it into a ready-to-deploy deployment archive — without any UI dependency.

The tool ships as a global .NET tool so CI pipelines can run it without installing the desktop wizard.

Install

dotnet tool install -g OutWit.Identity.Installer.Cli

Usage

# Preferred for CI — password from env var.
export WITIDENTITY_PROJECT_PASSWORD=hunter2
witidentity-installer build tenant.witproj -o ./out/tenant.zip

# Local dev — password as literal argument (leaks into process list).
witidentity-installer build tenant.witproj -o tenant.zip --password hunter2

# Pipe password from a secret manager.
op read op://vault/witproj/password | witidentity-installer build tenant.witproj -o tenant.zip --password-stdin

Commands

Password sources

In priority order:

1. --password <value> — argument; leaks into ps, local dev only
2. --password-stdin — read one line from stdin; good for piping from secret managers
3. $WITIDENTITY_PROJECT_PASSWORD — env var; recommended for CI

If none are set, the tool exits with USAGE_ERROR.

Exit codes

CI scripts can branch on these codes — e.g. exit 4 means rotate the password secret, exit 2 means the project file fell behind a wizard schema change.

Example GitHub Actions step

- name: Build deployment archive
  env:
    WITIDENTITY_PROJECT_PASSWORD: ${{ secrets.WITPROJ_PASSWORD }}
  run: |
    dotnet tool install -g OutWit.Identity.Installer.Cli
    witidentity-installer build deploy/tenant.witproj -o ./out/tenant.zip

- name: Upload archive
  uses: actions/upload-artifact@v4
  with:
    name: deployment-archive
    path: ./out/tenant.zip