Registry stack documentation: machine-readable Markdown.
Index of all pages: https://docs.registrystack.org/dev/llms.txt
Full corpus: https://docs.registrystack.org/dev/llms-full.txt

# bregctl package command reference

> Generated syntax and options for bregctl package.

{/* Generated from Clap command definitions by scripts/generate-cli-reference.mjs. Run npm run generate. */}

Build a deterministic production-profile signing input or publish its externally signed package.

## Contract status

This page is generated from the public Clap command tree for Registry Stack source version `0.30.0` and catalog SHA-256 `2221f17eae216048d4cfaf7f66e3dcd68a250f6f6de4e24b177441819192b475`. Hidden implementation commands are omitted.

## Usage

```text
bregctl package [OPTIONS] --database-id <ID> --test-receipt <ABSOLUTE_FILE> --output <DIRECTORY> <PROJECT>
```

## Constraints

| Condition | Requirement |
| --- | --- |
| `--reviewed-migrations <DIRECTORY>` is present | `--baseline-runtime-config <ABSOLUTE_FILE>` is required. |

## Arguments

| Argument | Always required | Default | Values | Environment | Description |
| --- | --- | --- | --- | --- | --- |
| `<PROJECT>` | Yes | n/a | n/a | n/a | Base Registry Engine project directory. A symbolic link at any component of this path is refused. |

## Options

| Option | Always required | Repeatable | Default | Values | Environment | Description |
| --- | --- | --- | --- | --- | --- | --- |
| `--database-id <ID>` | Yes | No | n/a | n/a | n/a | Stable deployment database identity recorded in the package |
| `--baseline-runtime-config <ABSOLUTE_FILE>` | No | No | n/a | n/a | n/a | Runtime configuration selecting the verified active baseline for a successor. A symbolic link at any component of this path is refused. |
| `--reviewed-migrations <DIRECTORY>` | No | No | n/a | n/a | n/a | Directory containing reviewed migration descriptors and evidence in package layout. Used identically by test and package; requires a verified baseline. A symbolic link at any component of this path is refused. |
| `--signature-threshold <COUNT>` | No | No | `0` | n/a | n/a | Production signature threshold. Local packages require zero |
| `--signature-key-id <KEY_ID>` | No | Yes | n/a | n/a | n/a | Allowed package-signing key id. Repeat once per trust-anchor key |
| `--schema-fingerprint <SHA256>` | No | No | n/a | n/a | n/a | Exact managed-catalog SHA-256 produced by the reviewed PostgreSQL rehearsal. Read from the schema-test receipt when it is not supplied |
| `--test-receipt <ABSOLUTE_FILE>` | Yes | No | n/a | n/a | n/a | Canonical receipt from a successful schema test of this exact candidate. A symbolic link at any component of this path is refused. |
| `--signatures <FILE>` | No | No | n/a | n/a | n/a | JSON document containing externally produced package signatures. A symbolic link at any component of this path is refused. |
| `--output <DIRECTORY>` | Yes | No | n/a | n/a | n/a | New build directory containing signing-input.json and, once approved, package/. A symbolic link at any component of this path is refused. |
| `--format <FORMAT>` | No | No | `human` | `human`, `json` | n/a | Emit the selected command's report in this format |
| `-h, --help` | No | No | n/a | n/a | n/a | Print help |

## Generation contract

Run `npm run generate` from `docs/site` after changing a public command, argument, option, default, environment binding, or help description.