@drakulavich/oura-cli 0.2.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/README.md +12 -0
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -6,6 +6,17 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
6
6
|
|
|
7
7
|
## [Unreleased]
|
|
8
8
|
|
|
9
|
+
## [0.2.1] - 2026-05-13
|
|
10
|
+
|
|
11
|
+
### Added
|
|
12
|
+
- `CONTRIBUTING.md` — local setup, PR expectations, release flow (#1, item 13).
|
|
13
|
+
- `README.md` "Security" section — token storage, env exposure, telemetry
|
|
14
|
+
statement (#1, items 19 & 20).
|
|
15
|
+
|
|
16
|
+
### Changed
|
|
17
|
+
- `describe.test.ts` — replaced per-element `.toContain` loops with sorted
|
|
18
|
+
`.toEqual` for clearer diff on failure (#1, item 12).
|
|
19
|
+
|
|
9
20
|
## [0.2.0] - 2026-05-13
|
|
10
21
|
|
|
11
22
|
### Changed
|
|
@@ -86,6 +97,7 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
86
97
|
- Local SQLite cache at `~/.oura-cli/oura.db`.
|
|
87
98
|
- Auth via `oura-cli login`, `OURA_TOKEN`, `OURA_TOKEN_PATH`, or `~/.oura-token`.
|
|
88
99
|
|
|
100
|
+
[0.2.1]: https://github.com/drakulavich/oura-cli/releases/tag/v0.2.1
|
|
89
101
|
[0.2.0]: https://github.com/drakulavich/oura-cli/releases/tag/v0.2.0
|
|
90
102
|
[0.1.3]: https://github.com/drakulavich/oura-cli/releases/tag/v0.1.3
|
|
91
103
|
[0.1.2]: https://github.com/drakulavich/oura-cli/releases/tag/v0.1.2
|
package/README.md
CHANGED
|
@@ -132,6 +132,18 @@ Runtime: [Bun](https://bun.sh). Storage: built-in `bun:sqlite`. CLI parsing: [Co
|
|
|
132
132
|
| Timezone | `--tz` | `OURA_TZ` | system timezone, else `UTC` |
|
|
133
133
|
| Output format | `--format` | | auto-detect (TTY → table) |
|
|
134
134
|
|
|
135
|
+
## Security
|
|
136
|
+
|
|
137
|
+
This tool reads your personal health data — handle the access token with care.
|
|
138
|
+
|
|
139
|
+
- `~/.oura-token` is written with `0600` permissions on POSIX (`chmod 0600` in `oura-cli login`). On Windows the file is written but ACL hardening is left to you.
|
|
140
|
+
- `OURA_TOKEN` as an environment variable is convenient for CI and containers, but it appears in `ps auxe`, heap dumps, and core dumps. Prefer the file-based path for interactive use.
|
|
141
|
+
- `--token <pat>` is the least safe option: the value lands in your shell history. Avoid it outside of throw-away scripts.
|
|
142
|
+
- Token revocation is done at <https://cloud.ouraring.com/personal-access-tokens>, not via this CLI.
|
|
143
|
+
- API responses are truncated to 200 chars and `Bearer`/`"token":"…"` patterns are redacted before being printed in error messages.
|
|
144
|
+
|
|
145
|
+
oura-cli performs **no telemetry**. The only outbound network traffic is your authenticated Oura Cloud API calls.
|
|
146
|
+
|
|
135
147
|
## Integrations
|
|
136
148
|
|
|
137
149
|
- **OpenClaw** — drop into your LLM agent as an [OpenClaw skill](https://github.com/openclaw/openclaw). `oura-cli manifest` and `oura-cli healthcheck` report back in the tool-registry shape, so the agent can discover the binary and audit its DB health automatically.
|
package/dist/index.js
CHANGED
package/package.json
CHANGED