@proofofwork-agency/toolpin 0.2.4 → 0.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/tui/views/panels.js +2 -2
- package/dist/version.js +1 -1
- package/docs/how-to/catch-drift-in-ci.md +6 -6
- package/package.json +1 -1
package/README.md
CHANGED
package/dist/tui/views/panels.js
CHANGED
|
@@ -509,7 +509,7 @@ export function Footer({ state, width }) {
|
|
|
509
509
|
const copyright = "© 2026 Proofofwork Agency · https://github.com/proofofwork-agency/toolpin";
|
|
510
510
|
const copyrightWidth = Math.min(copyright.length, Math.max(0, width - 8));
|
|
511
511
|
const hintWidth = Math.max(10, width - copyrightWidth - 8);
|
|
512
|
-
return (_jsxs(Box, { paddingX: 2, marginTop: 1, flexShrink: 0, flexDirection: "column", children: [
|
|
512
|
+
return (_jsxs(Box, { paddingX: 2, marginTop: 1, flexShrink: 0, flexDirection: "column", children: [_jsxs(Box, { width: Math.max(1, width - 4), justifyContent: "space-between", marginTop: 1, marginBottom: 1, children: [_jsx(Box, { width: hintWidth, children: _jsx(Text, { wrap: "truncate", children: hints.map(([keyName, label], index) => (_jsxs(React.Fragment, { children: [index > 0 ? _jsx(Text, { color: CHROME, children: " | " }) : null, _jsx(Text, { bold: true, color: "white", children: keyName }), _jsxs(Text, { color: MUTED, children: [":", label] })] }, keyName))) }) }), _jsx(Text, { color: CHROME, wrap: "truncate", children: truncate(copyright, copyrightWidth) })] }), _jsx(Box, { width: Math.max(1, width - 4), justifyContent: "flex-end", children: _jsx(TrustStateLegend, { width: Math.max(1, width - 4) }) })] }));
|
|
513
513
|
}
|
|
514
514
|
export function TrustStateLegend({ width }) {
|
|
515
515
|
const compact = width < 118;
|
|
@@ -526,7 +526,7 @@ export function TrustStateLegend({ width }) {
|
|
|
526
526
|
{ label: "UNVERIFIED", color: ERR, text: "weak evidence" },
|
|
527
527
|
{ label: "BLOCKED", color: ERR, text: "stop" },
|
|
528
528
|
];
|
|
529
|
-
return (_jsxs(
|
|
529
|
+
return (_jsxs(Box, { flexDirection: "column", alignItems: "flex-end", marginTop: 1, marginBottom: 1, children: [_jsx(Text, { color: CHROME, children: "trust legend" }), _jsx(Box, { marginTop: 1, marginBottom: 1, flexDirection: compact ? "column" : "row", alignItems: "flex-end", children: items.map((item, index) => (_jsxs(Box, { marginLeft: index > 0 && !compact ? 2 : 0, marginTop: compact && index > 0 ? 1 : 0, children: [_jsx(Box, { marginRight: 1, children: _jsx(Text, { color: item.color, children: "\u2593" }) }), _jsx(Text, { bold: true, color: item.color, children: item.label }), _jsxs(Text, { color: MUTED, children: [" ", item.text] })] }, item.label))) })] }));
|
|
530
530
|
}
|
|
531
531
|
function EmptyPanel({ title }) {
|
|
532
532
|
return (_jsxs(Box, { flexDirection: "column", backgroundColor: SURFACE, paddingX: 2, paddingY: 1, flexGrow: 1, children: [_jsx(ModalTitle, { title: title.toLowerCase(), file: "empty" }), _jsx(Text, { color: MUTED, children: "No server selected. Search and select a server first." })] }));
|
package/dist/version.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
export const TOOLPIN_VERSION = "0.2.
|
|
1
|
+
export const TOOLPIN_VERSION = "0.2.5";
|
|
@@ -41,7 +41,7 @@ jobs:
|
|
|
41
41
|
runs-on: ubuntu-latest
|
|
42
42
|
steps:
|
|
43
43
|
- uses: actions/checkout@v4
|
|
44
|
-
- uses: proofofwork-agency/toolpin@v0.2.
|
|
44
|
+
- uses: proofofwork-agency/toolpin@v0.2.5
|
|
45
45
|
with:
|
|
46
46
|
file: mcp-lock.json
|
|
47
47
|
live: "true"
|
|
@@ -100,7 +100,7 @@ toolpin lock digest --file mcp-lock.json
|
|
|
100
100
|
Use it in CI:
|
|
101
101
|
|
|
102
102
|
```yaml
|
|
103
|
-
- uses: proofofwork-agency/toolpin@v0.2.
|
|
103
|
+
- uses: proofofwork-agency/toolpin@v0.2.5
|
|
104
104
|
with:
|
|
105
105
|
file: mcp-lock.json
|
|
106
106
|
live: "true"
|
|
@@ -122,7 +122,7 @@ toolpin lock verify-signature --policy .toolpin/policy.json --key public.pem --f
|
|
|
122
122
|
Then in CI:
|
|
123
123
|
|
|
124
124
|
```yaml
|
|
125
|
-
- uses: proofofwork-agency/toolpin@v0.2.
|
|
125
|
+
- uses: proofofwork-agency/toolpin@v0.2.5
|
|
126
126
|
with:
|
|
127
127
|
file: mcp-lock.json
|
|
128
128
|
live: "true"
|
|
@@ -139,7 +139,7 @@ trust root are controlled outside the PR path.
|
|
|
139
139
|
To enforce a non-default policy path:
|
|
140
140
|
|
|
141
141
|
```yaml
|
|
142
|
-
- uses: proofofwork-agency/toolpin@v0.2.
|
|
142
|
+
- uses: proofofwork-agency/toolpin@v0.2.5
|
|
143
143
|
with:
|
|
144
144
|
policy: security/toolpin-policy.json
|
|
145
145
|
```
|
|
@@ -147,7 +147,7 @@ To enforce a non-default policy path:
|
|
|
147
147
|
To make CI skip policy enforcement explicitly:
|
|
148
148
|
|
|
149
149
|
```yaml
|
|
150
|
-
- uses: proofofwork-agency/toolpin@v0.2.
|
|
150
|
+
- uses: proofofwork-agency/toolpin@v0.2.5
|
|
151
151
|
with:
|
|
152
152
|
no-policy: "true"
|
|
153
153
|
```
|
|
@@ -156,7 +156,7 @@ To re-run verification before comparing locked plans, use the stricter CI
|
|
|
156
156
|
posture:
|
|
157
157
|
|
|
158
158
|
```yaml
|
|
159
|
-
- uses: proofofwork-agency/toolpin@v0.2.
|
|
159
|
+
- uses: proofofwork-agency/toolpin@v0.2.5
|
|
160
160
|
with:
|
|
161
161
|
live: "true"
|
|
162
162
|
verify: "true"
|