@chainpatrol/cli 0.3.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +63 -0
  2. package/package.json +8 -8
package/CHANGELOG.md ADDED
@@ -0,0 +1,63 @@
1
+ # @chainpatrol/cli
2
+
3
+ ## 0.3.1
4
+
5
+ ### Patch Changes
6
+
7
+ - ea3c3dc: Switch the release pipeline from `changeset publish` to
8
+ `yarn workspaces foreach -A --no-private npm publish --tolerate-republish`
9
+ followed by `changeset tag`. `yarn npm publish` expands Yarn 4's
10
+ `catalog:` and `workspace:` protocols to concrete versions at pack time,
11
+ so the published `package.json` no longer leaks `"react": "catalog:"`
12
+ and `"zod": "catalog:"` (which npm cannot resolve — `npm i -g
13
+ @chainpatrol/cli` was previously failing with `EUNSUPPORTEDPROTOCOL`).
14
+
15
+ `--tolerate-republish` makes the publish step idempotent on re-runs.
16
+ `changeset tag` continues to create per-package git tags after a
17
+ successful publish, so the rest of the release flow (and tag-driven
18
+ workflows like extension uploads) is unchanged.
19
+
20
+ ## 0.3.0
21
+
22
+ ### Minor Changes
23
+
24
+ - fb27d31: Add version awareness to the CLI, plus an Organization HealthCheck Guide
25
+ in the Claude Code skill:
26
+ - Skill now includes an Organization HealthCheck Guide walking through the
27
+ full detection → reviewing → blocklisting → takedowns pipeline, so the
28
+ assistant can proactively look for what may be wrong for a given org
29
+ (config gaps, detection spikes/drops, review backlogs, auto-approve
30
+ spikes, Google Safe Browsing errors, stuck or cancelled takedowns,
31
+ automated takedowns disabled for too long, etc.). Skill description
32
+ expanded so phrasings like "org healthcheck", "audit my org", or
33
+ "what's wrong with org X" trigger the skill.
34
+ - Embed a `version` field in the Claude Code skill frontmatter (matches the
35
+ CLI package version) so the installed skill can be diffed against the
36
+ bundled one.
37
+ - On every command, run two lightweight version checks (skill freshness +
38
+ npm registry freshness) in parallel with the command, and print a one-line
39
+ stderr nudge if either is out of date. First-time users with no skill
40
+ installed are prompted to run `chainpatrol setup`.
41
+ - The npm check is throttled to once per 24 hours, capped at a 1.5s timeout,
42
+ and skipped in JSON / quiet modes. Set `CHAINPATROL_NO_UPDATE_CHECK=1` to
43
+ silence both checks.
44
+ - Fix the `--version` flag to read from `package.json` (was hardcoded to
45
+ `0.1.0`).
46
+
47
+ ## 0.2.2
48
+
49
+ ### Patch Changes
50
+
51
+ - bump patch to test publishing workflow
52
+
53
+ ## 0.2.1
54
+
55
+ ### Patch Changes
56
+
57
+ - bump ink version
58
+
59
+ ## 0.2.0
60
+
61
+ ### Minor Changes
62
+
63
+ - 32986bf: Various improvements and fixes to the ChainPatrol CLI.
package/package.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "name": "@chainpatrol/cli",
3
3
  "description": "The official ChainPatrol CLI — terminal interface for threat detection",
4
4
  "author": "Umar Ahmed <umar@chainpatrol.io>",
5
- "version": "0.3.0",
5
+ "version": "0.3.1",
6
6
  "license": "UNLICENSED",
7
7
  "homepage": "https://chainpatrol.com/docs/cli",
8
8
  "keywords": [
@@ -36,16 +36,16 @@
36
36
  "ink": "^7.0.1",
37
37
  "meow": "^14.1.0",
38
38
  "open": "^11.0.0",
39
- "react": "catalog:",
40
- "zod": "catalog:"
39
+ "react": "^19.2.4",
40
+ "zod": "^3.25.76"
41
41
  },
42
42
  "devDependencies": {
43
- "@types/react": "catalog:",
43
+ "@types/react": "^19.2.7",
44
44
  "ink-testing-library": "^4.0.0",
45
45
  "msw": "^2.0.0",
46
46
  "tsup": "^8.5.0",
47
- "tsx": "catalog:",
48
- "typescript": "catalog:",
49
- "vitest": "catalog:"
47
+ "tsx": "^4.19.4",
48
+ "typescript": "6.0.2",
49
+ "vitest": "^3.2.4"
50
50
  }
51
- }
51
+ }