@swarmcraftai/cli 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to the SwarmCraft CLI are documented in this file.
 
+## 0.4.1
+
+- Conceals passwords, authenticator codes, and recovery codes during interactive login instead of echoing secret input in the terminal.
+- Completes enrolled MFA in the same login attempt, with an explicit recovery-code fallback that does not require placing credentials in command arguments.
+- Refreshes the generated Deep Discovery guidance for exception-first review, coverage-based prototyping, source gathering, product disposition, and temporary replacement integrations.
+
 ## 0.4.0
 
 - Seeds a collaborative plan-first workflow that turns approved phases into SwarmCraft tasks while keeping planning and implementation as explicit, reviewable steps.

package/README.md

@@ -4,7 +4,7 @@ SwarmCraft CLI prepares a local repository for a SwarmCraft project board and ru
 
 Use it to authenticate with SwarmCraft, list available projects, seed workspace guidance files, materialize task packets, run one-shot implementation passes, resume or inspect runs, and create support bundles.
 
-Deep Discovery uses the provider-neutral `@swarmcraft/discovery-package-contract` for exact-text packaging, canonical hashing, and local validation. The CLI never asks an AI provider to generate transport JSON or tasks and never contains SwarmCraft's private seven-slice compiler.
+Deep Discovery uses the provider-neutral `@swarmcraft/discovery-package-contract` for exact-text packaging, canonical hashing, and local validation. The CLI never asks an AI provider to generate transport JSON or tasks and never contains SwarmCraft's private server-side catalogue compiler.
 
 ## Package Shape
 
@@ -87,6 +87,8 @@ swarmcraft status --run <run-id> --workspace <path> --delegation <delegation-id>
 swarmcraft delegation end --delegation <delegation-id>
 ```
 
+Interactive login conceals password input. When MFA is enrolled, the same command securely prompts for the current authenticator code and offers a recovery-code fallback; secrets do not need to be placed in the command line.
+
 `swarmcraft init` validates the workspace git state, seeds the shared SwarmCraft repo guidance files, materializes non-done task packets, links those packets back to SwarmCraft, and prints the next commands.
 
 The task contract is a clean cutover from the earlier project-ticket format. Upgrade the API, CLI, and VS Code extension together; old `ticketId` packet files and `--ticket` flags are not accepted. Preserve any owner-authored notes, remove the retired generated packet files, and run `swarmcraft init` again to materialize current `taskId` packets from the board.