@holdyourvoice/hyv 2.8.8 → 2.8.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,23 @@
2
2
 
3
3
  All notable CLI changes. Also mirrored to [holdyourvoice.com/changelog](https://holdyourvoice.com/changelog) for user-facing releases.
4
4
 
5
+ ## [2.8.10] — 2026-06-12
6
+
7
+ ### Fixed
8
+ - `hyv init` browser login opens Google OAuth again (`assertSafeOAuthUrl` allows `accounts.google.com`)
9
+
10
+ ## [2.8.9] — 2026-06-12
11
+
12
+ ### Improved
13
+ - `hyv fix --in-place` matches batch/watch safeguards: interactive `[y/N]` or `--yes` + `.bak` backup
14
+ - `hyv watch --command fix` ignores self-triggered saves after writing fixes
15
+ - `hyv doctor` checks auth.json permissions, stale `hyv.md` vs `hyv.mdc`, and MCP stdio health
16
+ - Shared `resolveCliEntry()` for MCP setup and stdio probes
17
+ - Auth refresh + destructive-write unit tests
18
+
19
+ ### Changed
20
+ - `dist/` built at publish/prepare — no longer committed to git
21
+
5
22
  ## [2.8.8] — 2026-06-12
6
23
 
7
24
  ### Security
package/README.md CHANGED
@@ -73,7 +73,7 @@ hyv mcp --test # health check (tools, demo pipeline, profile)
73
73
  hyv mcp # start server (stdio)
74
74
  ```
75
75
 
76
- postinstall copies agent rules to `~/.cursor/rules/hyv.md`, `~/.claude/commands/hyv.md`, etc. re-run anytime:
76
+ postinstall copies agent rules to `~/.cursor/rules/hyv.mdc`, `~/.claude/commands/hyv.md`, etc. re-run anytime:
77
77
 
78
78
  ```bash
79
79
  hyv doctor --fix-agents
@@ -112,6 +112,27 @@ github actions:
112
112
  - run: npx @holdyourvoice/hyv@latest scan content/ --fail-on-hit
113
113
  ```
114
114
 
115
+ `--fail-on-hit` exits with code **2** when issues are found (exit 0 = clean). use in CI to block merges on AI-slop.
116
+
117
+ ### destructive in-place writes
118
+
119
+ `fix`, `batch`, and `watch` can rewrite files on disk. they create a `.bak` backup sibling before writing.
120
+
121
+ | command | safeguard |
122
+ |---------|-----------|
123
+ | `hyv fix <file> --in-place` | prompts `[y/N]` locally; use `--yes` in CI |
124
+ | `hyv batch <glob> --fix --in-place` | same — one prompt for the whole batch |
125
+ | `hyv watch <file> --command fix` | same — confirms once at startup |
126
+
127
+ ```bash
128
+ # interactive (local)
129
+ hyv fix draft.md --in-place
130
+
131
+ # non-interactive (CI/scripts)
132
+ hyv fix draft.md --in-place --yes
133
+ hyv batch "posts/**/*.md" --fix --in-place --yes
134
+ ```
135
+
115
136
  ## commands
116
137
 
117
138
  | command | description |
@@ -119,7 +140,9 @@ github actions:
119
140
  | `hyv` | condensed welcome (no args) |
120
141
  | `hyv welcome` / `hyv free` | free demo + capability tour |
121
142
  | `hyv scan <file>` | scan text for AI patterns |
122
- | `hyv fix <file>` | auto-swap fixable patterns |
143
+ | `hyv fix <file>` | auto-swap fixable patterns (`--in-place --yes` for CI) |
144
+ | `hyv batch <glob>` | scan/fix many files (`--fail-on-hit` exits 2) |
145
+ | `hyv watch <file>` | re-scan on save (`--command fix --yes` to auto-fix) |
123
146
  | `hyv check <text>` | quick pass/fail check |
124
147
  | `hyv init` | authenticate with hold your voice |
125
148
  | `hyv new <name>` | create a voice profile |