@baldaworks/acprun 0.1.8 → 0.1.10

package/README.md

@@ -7,9 +7,9 @@
 [![npm version](https://img.shields.io/npm/v/%40baldaworks%2Facprun)](https://www.npmjs.com/package/@baldaworks/acprun)
 [![License: MIT](https://img.shields.io/github/license/baldaworks/acprun)](LICENSE)
 
-## Universal agent runner and registry client for the Agent Client Protocol (ACP)
+## ACP Registry client and agent runner
 
-`acprun` is a CLI tool, runner, and Go library for discovering, resolving, and running agents published in the [Agent Client Protocol (ACP) Registry](https://agentclientprotocol.com).
+`acprun` is a CLI for discovering, inspecting, resolving, and running agents published in the [Agent Client Protocol (ACP) Registry](https://agentclientprotocol.com). It supports native binaries, `npx`, and `uvx`.
 
 It transparently handles distribution resolution across:
 - **Binary Archives**: Detects host OS and CPU architecture (`linux-x86_64`, `linux-aarch64`, `darwin-aarch64`, `darwin-x86_64`, `windows-x86_64`, `windows-aarch64`), downloads `.zip` or `.tar.gz` archives, validates optional SHA256 integrity checksums, safely extracts to local user cache (with strict Zip Slip protection), sets `0755` executable permissions, and builds the command vector.
@@ -21,13 +21,15 @@ It transparently handles distribution resolution across:
 
 ## Installation and quick start
 
+Install `acprun` through npm or as a Go binary.
+
 ### npm package (recommended)
 
 For repeated direct shell use, install the npm launcher globally:
 
 ```bash
 npm install --global @baldaworks/acprun@latest
-acprun --version
+acprun version
 ```
 
 For one-shot execution without global installation, run the complete `npx` command:
@@ -42,6 +44,8 @@ npx --yes @baldaworks/acprun@latest list
 go install github.com/baldaworks/acprun/cmd/acprun@latest
 ```
 
+These packages install the `acprun` CLI. When running an agent, `acprun` selects that agent's binary, `npx`, or `uvx` distribution from the Registry.
+
 ---
 
 ## One-shot agent execution
@@ -168,7 +172,27 @@ acprun cache clean --manifests-only
 
 ## Distribution
 
-The npm distribution uses CGO-disabled native executables for macOS and Linux on AMD64/ARM64 and Windows AMD64/ARM64 behind the [`@baldaworks/acprun`](https://www.npmjs.com/package/@baldaworks/acprun) launcher.
+The npm distribution uses CGO-disabled native executables for macOS and Linux on AMD64/ARM64 and Windows AMD64/ARM64 behind the [`@baldaworks/acprun`](https://www.npmjs.com/package/@baldaworks/acprun) launcher and six scoped platform packages.
+
+Description, keywords, and MIT license metadata are defined in `.omnidist/omnidist.yaml` and included in the npm launcher.
+
+### Release setup
+
+Tag-triggered releases stage and verify the npm packages before publishing and attach native binaries to the GitHub release. npm publishing uses GitHub Actions OIDC through omnidist's `publish-auth: trusted` mode. The publish job has `id-token: write`; no npm publishing secret is required.
+
+Sign in locally through npm web authentication with an account that has 2FA enabled and write access to the launcher and its six platform packages. Inspect the trusted-publisher plan, then apply it through omnidist:
+
+```bash
+npx -y npm@11.16.0 login --auth-type=web --registry=https://registry.npmjs.org
+npx -y @omnidist/omnidist@latest npm trust
+npx -y @omnidist/omnidist@latest npm trust --apply
+```
+
+The plan covers all seven packages and grants publishing access to `baldaworks/acprun` using the workflow filename `omnidist-release.yml`. Complete any browser/2FA prompts from npm. Local web authentication is used to configure trust; GitHub Actions obtains its own short-lived OIDC credentials for releases. See [npm trusted publishing](https://docs.npmjs.com/trusted-publishers/) and the [npm trust prerequisites](https://docs.npmjs.com/cli/v11/commands/npm-trust/).
+
+npm requires a package to exist before its trusted publisher can be configured. A new package name therefore needs its initial publication through omnidist using local web authentication before applying the trust plan. Keep credentials outside the repository.
+
+A failed upload can leave some npm packages published. Retain the release logs and inspect registry state before retrying; omnidist 0.2.0 publishes platform packages first and does not skip existing versions, so replaying a partially published release can fail.
 
 ---
 

package/package.json

@@ -2,7 +2,7 @@
   "bin": {
     "acprun": "acprun.js"
   },
-  "description": "Meta package for acprun",
+  "description": "CLI to discover, inspect, resolve, and run agents from the Agent Client Protocol (ACP) Registry using native binaries, npx, or uvx",
   "engines": {
     "node": "\u003e=16"
   },
@@ -11,15 +11,31 @@
     "README.md",
     "LICENSE"
   ],
-  "license": "SEE LICENSE IN LICENSE",
+  "keywords": [
+    "acp",
+    "agent-client-protocol",
+    "ai-agents",
+    "coding-agents",
+    "agent-runner",
+    "agent-registry",
+    "registry",
+    "cli",
+    "npx",
+    "uvx"
+  ],
+  "license": "MIT",
   "name": "@baldaworks/acprun",
   "optionalDependencies": {
-    "@baldaworks/acprun-darwin-arm64": "0.1.8",
-    "@baldaworks/acprun-darwin-x64": "0.1.8",
-    "@baldaworks/acprun-linux-arm64": "0.1.8",
-    "@baldaworks/acprun-linux-x64": "0.1.8",
-    "@baldaworks/acprun-win32-arm64": "0.1.8",
-    "@baldaworks/acprun-win32-x64": "0.1.8"
+    "@baldaworks/acprun-darwin-arm64": "0.1.10",
+    "@baldaworks/acprun-darwin-x64": "0.1.10",
+    "@baldaworks/acprun-linux-arm64": "0.1.10",
+    "@baldaworks/acprun-linux-x64": "0.1.10",
+    "@baldaworks/acprun-win32-arm64": "0.1.10",
+    "@baldaworks/acprun-win32-x64": "0.1.10"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/baldaworks/acprun.git"
   },
-  "version": "0.1.8"
+  "version": "0.1.10"
 }