@moejay/pi-secure 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -10,16 +10,16 @@ Private secret entry, stdout capture, local reveal/copy, and redacted shell exec
10
10
 
11
11
  Requires Node.js 22.19+ and Pi 1.4+; interactive terminal mode is required for private entry and local reveal/copy. Shell execution supports macOS and Linux, not native Windows.
12
12
 
13
- Install from GitHub now:
13
+ Install from npm:
14
14
 
15
15
  ```sh
16
- pi install git:github.com/moejay/pi-secure
16
+ pi install npm:@moejay/pi-secure
17
17
  ```
18
18
 
19
- After the first npm release (not published yet):
19
+ Or install from GitHub:
20
20
 
21
21
  ```sh
22
- pi install npm:@moejay/pi-secure
22
+ pi install git:github.com/moejay/pi-secure
23
23
  ```
24
24
 
25
25
  Restart or `/reload` after installing. Reload clears in-memory secrets. For local development, use `pi -e ./index.ts` or `pi install /absolute/path/to/pi-secure`.
@@ -95,7 +95,7 @@ npm run check
95
95
  npm pack --dry-run --ignore-scripts
96
96
  ```
97
97
 
98
- The package ships source directly, with no build step or runtime dependencies beyond Pi. CI checks Node 22 and 24. See [RELEASING.md](RELEASING.md) for the disabled-by-default OIDC publishing workflow and human setup checkpoint.
98
+ The package ships source directly, with no build step or runtime dependencies beyond Pi. CI checks Node 22 and 24. See [RELEASING.md](RELEASING.md) for the manually approved OIDC publishing workflow and release checklist.
99
99
 
100
100
  ## License
101
101
 
package/RELEASING.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  ## Current state
4
4
 
5
- The npm workflow is deliberately disabled by default. No npm credential belongs in this repo, GitHub secrets, chat, or an agent tool argument.
5
+ Version 0.1.0 was bootstrapped manually with 2FA. Subsequent releases use manually dispatched GitHub OIDC publishing, gated by the `NPM_PUBLISH_ENABLED` repository variable and the protected `npm` environment. No npm credential belongs in this repo, GitHub secrets, chat, or an agent tool argument.
6
6
 
7
7
  - Package: `@moejay/pi-secure`
8
8
  - Repository: `moejay/pi-secure`
package/package.json CHANGED
@@ -1,18 +1,49 @@
1
1
  {
2
2
  "name": "@moejay/pi-secure",
3
- "version": "0.1.0",
3
+ "version": "0.1.1",
4
4
  "type": "module",
5
5
  "description": "Request secrets privately and use them in subprocesses without putting values in Pi transcripts.",
6
- "keywords": ["pi-package", "pi-extension", "secrets", "security", "privacy", "credentials", "clipboard", "developer-tools"],
6
+ "keywords": [
7
+ "pi-package",
8
+ "pi-extension",
9
+ "secrets",
10
+ "security",
11
+ "privacy",
12
+ "credentials",
13
+ "clipboard",
14
+ "developer-tools"
15
+ ],
7
16
  "license": "MIT",
8
17
  "author": "moejay",
9
- "repository": { "type": "git", "url": "git+https://github.com/moejay/pi-secure.git" },
18
+ "repository": {
19
+ "type": "git",
20
+ "url": "git+https://github.com/moejay/pi-secure.git"
21
+ },
10
22
  "homepage": "https://moejay.github.io/pi-secure/",
11
- "bugs": { "url": "https://github.com/moejay/pi-secure/issues" },
12
- "engines": { "node": ">=22.19.0" },
13
- "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/" },
14
- "files": ["index.ts", "secure.mjs", "clipboard.mjs", "README.md", "SECURITY.md", "RELEASING.md", "LICENSE"],
15
- "pi": { "extensions": ["./index.ts"] },
23
+ "bugs": {
24
+ "url": "https://github.com/moejay/pi-secure/issues"
25
+ },
26
+ "engines": {
27
+ "node": ">=22.19.0"
28
+ },
29
+ "publishConfig": {
30
+ "access": "public",
31
+ "registry": "https://registry.npmjs.org/"
32
+ },
33
+ "files": [
34
+ "index.ts",
35
+ "secure.mjs",
36
+ "clipboard.mjs",
37
+ "README.md",
38
+ "SECURITY.md",
39
+ "RELEASING.md",
40
+ "LICENSE"
41
+ ],
42
+ "pi": {
43
+ "extensions": [
44
+ "./index.ts"
45
+ ]
46
+ },
16
47
  "scripts": {
17
48
  "test": "node --test",
18
49
  "typecheck": "tsc --noEmit",