@secretstash/cli 0.1.5 → 0.1.9

package/README.md

@@ -32,13 +32,38 @@ brew install secretstash/tap/sstash
 
 ### Authentication
 
+The CLI uses browser-based authentication by default, supporting passkeys, OAuth (GitHub/Google), and 2FA:
+
+```bash
+# Login via browser (opens browser window)
+sstash login
+
+# This will:
+# 1. Generate a session code
+# 2. Open your default browser to complete authentication
+# 3. Wait for you to sign in (passkey, OAuth, or email/password)
+# 4. Automatically complete CLI authentication
+
+# Check who you're logged in as
+sstash whoami
+
+# Logout
+sstash logout
+```
+
+#### Service Token Authentication (CI/CD)
+
+For automated workflows, use service tokens instead of browser authentication:
+
 ```bash
-# Login to SecretStash
-sstash auth login
+# Set service token as environment variable
+export SECRETSTASH_TOKEN=stk_your-service-token
+
+# Or login with token directly
+sstash login --token stk_your-service-token
 
-# Login with service token (for CI/CD)
-export SECRETSTASH_TOKEN=your-service-token
-sstash auth status
+# Verify token works
+sstash teams
 ```
 
 ### Working with Secrets
@@ -285,25 +310,51 @@ For CI/CD and automated workflows, use service tokens instead of user credential
 
 ## Commands Reference
 
+### Authentication
+| Command | Description |
+|---------|-------------|
+| `sstash login` | Authenticate via browser (passkeys, OAuth, 2FA) |
+| `sstash login --token <token>` | Authenticate with service token |
+| `sstash logout` | Clear authentication |
+| `sstash whoami` | Show current user/token info |
+| `sstash 2fa setup` | Set up two-factor authentication |
+| `sstash register` | Create a new SecretStash account |
+
+### Secrets
 | Command | Description |
 |---------|-------------|
-| `sstash auth login` | Authenticate with SecretStash |
-| `sstash auth logout` | Clear authentication |
-| `sstash auth status` | Show authentication status |
 | `sstash pull` | Pull secrets from SecretStash |
 | `sstash push` | Push secrets to SecretStash |
-| `sstash list` | List secrets in an environment |
-| `sstash get <key>` | Get a specific secret |
-| `sstash set <key>=<value>` | Set a specific secret |
-| `sstash delete <key>` | Delete a specific secret |
+| `sstash secrets list` | List secrets in an environment |
+| `sstash secrets get <key>` | Get a specific secret |
+| `sstash secrets set <key>=<value>` | Set a specific secret |
+| `sstash secrets delete <key>` | Delete a specific secret |
+| `sstash secrets history <key>` | View version history for a secret |
+| `sstash secrets rollback <key>` | Rollback to a previous version |
+| `sstash secrets tag <key> <tag>` | Add a tag to a secret |
+| `sstash secrets untag <key> <tag>` | Remove a tag from a secret |
+| `sstash secrets expiring` | List secrets expiring soon |
 | `sstash run` | Run a command with secrets injected |
 | `sstash diff` | Compare local and remote secrets |
-| `sstash projects list` | List available projects |
-| `sstash projects use <name>` | Switch project context |
-| `sstash environments list` | List environments |
+
+### Organization
+| Command | Description |
+|---------|-------------|
+| `sstash teams` | List teams |
+| `sstash teams use <slug>` | Switch team context |
+| `sstash projects` | List projects in current team |
+| `sstash projects use <slug>` | Switch project context |
+| `sstash environments` | List environments in current project |
 | `sstash environments create <name>` | Create a new environment |
-| `sstash teams list` | List teams |
-| `sstash teams switch <name>` | Switch team context |
+
+### Tags & Shares
+| Command | Description |
+|---------|-------------|
+| `sstash tags` | List tags in current team |
+| `sstash tags create <name>` | Create a new tag |
+| `sstash share create <key>` | Create a share link for a secret |
+| `sstash share list` | List active share links |
+| `sstash share revoke <id>` | Revoke a share link |
 
 Use `sstash --help` or `sstash <command> --help` for detailed usage information.