Skip to main content

Synopsis

Description

Validates the manifest, then bundles the manifest and all referenced assets into a ZIP-based .vibeapp archive. Optionally embeds seed data as the app’s initial state and encrypts the output.

Arguments

Options

Examples

Seed data

The --seed-data directory is embedded as signed _vibe_initial_state/<name>.tar.gz entries. Each subdirectory of the seed data directory becomes one entry. This is used to ship apps with pre-populated databases or sample files.

Encryption

Encrypted packages use AES-256-GCM with Argon2id key derivation. The inner package structure is preserved intact; encryption is applied as an outer wrapper. See Package Encryption for full details.

Notes

  • Manifest validation runs automatically; packaging fails if the manifest is invalid
  • Encrypted packages can still be signed: vibe sign myapp.vibeapp --key signing.key --password-file pw.txt