@dk/hipp 0.1.35 → 0.1.36

package/README.md

@@ -140,10 +140,10 @@ npx @dk/hipp -- --access public --tag beta
 HIPP provides out-of-band verification to prove package integrity:
 
 ```bash
-npx @dk/hipp verify                       # auto-detect: local hipp repo → published version, else @dk/hipp
-npx @dk/hipp verify --self                # always verifies @dk/hipp itself
-npx @dk/hipp verify @scope/package         # verifies latest of a package
-npx @dk/hipp verify @scope/package@1.0.0   # verifies specific version
+npx @dk/hipp --verify                       # auto-detect: local hipp repo → published version, else @dk/hipp
+npx @dk/hipp --verify --self                # always verifies @dk/hipp itself
+npx @dk/hipp --verify @scope/package         # verifies latest of a package
+npx @dk/hipp --verify @scope/package@1.0.0   # verifies specific version
 ```
 
 ### How Verification Works
@@ -273,21 +273,21 @@ PERFORMANCE OF THIS SOFTWARE.
 Verify this package with [@dk/hipp](https://www.npmjs.com/package/@dk/hipp):
 
 ```bash
-npx @dk/hipp verify @dk/hipp@0.1.35
+npx @dk/hipp --verify @dk/hipp@0.1.36
 ```
 
 ```json
 {
   "origin": "git@github.com:dmytri/hipp.git",
-  "tag": "v0.1.35",
-  "revision": "1867eb114a7c672dd23da33d6b6b4375077faf4d",
-  "hash": "8a48b6de8cdfd06b93177720f9701b77dc96263b20c10902a8b5780f5941489a",
-  "signature": "R5wbqWXbsV4269e78lDuN92FyWkWk0L4jSsQgLQSVc1/vOis/IKWA+UFMxdIKOfThczLLNm98YDpcu4QEITNBA==",
+  "tag": "v0.1.36",
+  "revision": "e3190c19274fd1dcf9c9f8d4f3a0af842214e4b7",
+  "hash": "af45dd66df7b54705c7c0c2a5e3bd24222727bc34668e2d89c8079175cdd1df4",
+  "signature": "hFkmTxDeTNHOhvvVlySj2Amg5Wq2vuFR1fJzBU0d4Th5ixMvkbpdLcYiHu719sZVAWsUycnu56pH2rXZCvN+BA==",
   "name": "Dmytri Kleiner",
   "email": "dev@dmytri.to",
   "npm": "11.12.1",
   "node": "v25.8.2",
   "git": "git version 2.47.3",
-  "hipp": "0.1.35"
+  "hipp": "0.1.36"
 }
 ```

package/hipp.js

@@ -564,7 +564,7 @@ async function runVerify(packageSpec) {
         stagedReadme = stagedReadme.trimEnd() + '\n\n## Verify\n\n' +
           'Verify this package with [@dk/hipp](https://www.npmjs.com/package/@dk/hipp):\n\n' +
           '```bash\n' +
-          `npx @dk/hipp verify ${pkgName}@${tagVersion}\n` +
+          `npx @dk/hipp --verify ${pkgName}@${tagVersion}\n` +
           '```\n\n' +
           '```json\n' + JSON.stringify(manifest, null, 2) + '\n```\n';
         fs.writeFileSync(stagedReadmePath, stagedReadme);
@@ -746,7 +746,7 @@ async function run() {
     stagedReadme = stagedReadme.trimEnd() + '\n\n## Verify\n\n' +
       'Verify this package with [@dk/hipp](https://www.npmjs.com/package/@dk/hipp):\n\n' +
       '```bash\n' +
-      `npx @dk/hipp verify ${pkg.name}@${version}\n` +
+      `npx @dk/hipp --verify ${pkg.name}@${version}\n` +
       '```\n\n' +
       '```json\n' + JSON.stringify(manifestJson, null, 2) + '\n```\n';
     fs.writeFileSync(stagedReadmePath, stagedReadme);
@@ -787,8 +787,8 @@ async function run() {
   }
 }
 
-const isVerify = process.argv.includes('verify');
-const verifyIndex = process.argv.indexOf('verify');
+const isVerify = process.argv.includes('--verify');
+const verifyIndex = process.argv.indexOf('--verify');
 const packageSpec = verifyIndex !== -1 ? process.argv[verifyIndex + 1] : null;
 
 if (isVerify) {
@@ -817,8 +817,8 @@ if (isVerify) {
 
 Usage:
   npx hipp [options] [-- npm-options]
-  npx hipp verify [@package[@version]]
-  npx hipp verify --self
+  npx hipp --verify [@package[@version]]
+  npx hipp --verify --self
 
   Without arguments: in a hipp repo (package.json version 0.0.0 or matching
   a semver tag on HEAD), verifies the published package at that version.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dk/hipp",
-  "version": "0.1.35",
+  "version": "0.1.36",
   "description": "High Integrity Package Publisher",
   "main": "hipp.js",
   "bin": {