@motir/cli 0.15.1 → 0.17.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/dist/index.js +6982 -3213
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -98,6 +98,7 @@ motir logout [--server <url>] # forget the local credent
|
|
|
98
98
|
|
|
99
99
|
motir auth login [--server <url>] [--token <pat>] # validate + store a PAT
|
|
100
100
|
motir auth status [--server <url>] # server, token prefix, owning user
|
|
101
|
+
motir auth refresh [--server <url>] [--no-browser] # give a `motir login` token current perms
|
|
101
102
|
motir auth logout [--server <url>] # forget the stored token
|
|
102
103
|
|
|
103
104
|
motir link [--server <url>] [--workspace <slug>] [--project <key>] [--repo <name>]
|
|
@@ -636,7 +637,7 @@ tarball as a downloadable artifact without publishing.
|
|
|
636
637
|
**Auth:** the publish step uses **OIDC Trusted Publishing** — no `NPM_TOKEN`
|
|
637
638
|
secret. GitHub mints a short-lived id-token (`id-token: write`) that npm
|
|
638
639
|
exchanges for a one-time publish credential, gated by a Trusted Publisher
|
|
639
|
-
configured on npmjs.com for this package (org `
|
|
640
|
+
configured on npmjs.com for this package (org `motir-co` / repo `motir-core` /
|
|
640
641
|
this workflow filename). Provenance is still requested explicitly with
|
|
641
642
|
`--provenance`, which needs `id-token: write` plus the `repository` field in
|
|
642
643
|
`package.json`.
|