@vitronai/alethia 0.3.14 → 0.3.16

package/README.md

@@ -116,21 +116,44 @@ Destructive actions (delete, purchase, transfer) are **blocked by default** unde
 
 ## Demos
 
-Ready-to-use demo pages ship in the `demo/` folder:
+Ready-to-use demo pages ship in the `demo/` folder. Start with the Claude Code demo:
 
-| Demo | Scenario |
-|---|---|
-| `incident-response.html` | Defense / SOC — triage active cyber incident |
-| `threat-intel.html` | Intelligence / CTI — APT tracking, IOC blocking |
-| `crypto-readiness.html` | Cybersecurity / PQC — post-quantum migration |
-| `agent-oversight.html` | AI Safety — autonomous agent monitoring, kill switch |
-| `admin-panel.html` | Defense / Classified — TS/SCI admin panel |
-| `financial-dashboard.html` | Finance / Trading — risk monitor, compliance checks |
+### Claude Code: verify a generated app
+
+`claude-code-app.html` simulates a task manager that Claude Code would scaffold. Paste this into Claude Code:
+
+**Step 1** — sign in and add a task:
+```
+Use alethia_tell to navigate to file:///PATH/demo/claude-code-app.html. Assert "TaskFlow" is visible and "Generated by Claude Code" is visible. Type dev@company.com into the "you@company.com" field. Type Engineering into the "Your team name" field. Click Sign in. Assert "Signed in as" is visible. Type "Deploy to production" into the "Add a new task" field. Click Add. Assert "Deploy to production" is visible.
+```
+
+**Step 2** — try to delete (EA1 blocks it):
+```
+Use alethia_tell to click Delete and report what EA1 decides.
+```
+
+**Step 3** — sign out:
+```
+Use alethia_tell to click Sign out. Assert "Sign in" is visible.
+```
 
+Replace `PATH` with the actual path:
 ```bash
-ls $(npm root -g)/@vitronai/alethia/demo/
+ls $(npm root -g)/@vitronai/alethia/demo/claude-code-app.html
 ```
 
+### More scenarios
+
+| Demo | Scenario |
+|---|---|
+| `claude-code-app.html` | AI coding agents: sign in, dashboard, CRUD, EA1 blocks delete |
+| `incident-response.html` | Defense / SOC: triage active cyber incident |
+| `threat-intel.html` | Intelligence / CTI: APT tracking, IOC blocking |
+| `crypto-readiness.html` | Cybersecurity / PQC: post-quantum migration |
+| `agent-oversight.html` | AI Safety: autonomous agent monitoring, kill switch |
+| `admin-panel.html` | Defense / Classified: TS/SCI admin panel |
+| `financial-dashboard.html` | Finance / Trading: risk monitor, compliance checks |
+
 Full prompts for each demo: [`demo/README.md`](./demo/README.md)
 
 ---

package/demo/README.md

@@ -9,21 +9,17 @@ The core use case. Claude Code generates an app, Alethia verifies it works.
 `claude-code-app.html` simulates a task manager that Claude Code would scaffold. The prompt below runs a full verification flow: sign in, check the dashboard, add a task, complete a task, try to delete one (EA1 blocks it), and sign out.
 
 ```
-Use alethia_tell to navigate to file:///PATH/demo/claude-code-app.html.
-Assert "TaskFlow" is visible and "Generated by Claude Code" is visible.
-Type dev@company.com into the email field.
-Type testing123 into the password field.
-Click Sign in.
-Assert "Signed in as" is visible.
-Assert "Active" is visible and "Completed" is visible.
-Type "Deploy to production" into the Add a new task field.
-Click Add.
-Assert "Deploy to production" is visible.
-Click the first task checkbox.
-Assert "Completed" shows 1.
-Try to click Delete on the first task and report what EA1 decides.
-Click Sign out.
-Assert "Sign in" is visible.
+Step 1 — sign in and add a task:
+
+Use alethia_tell to navigate to file:///PATH/demo/claude-code-app.html. Assert "TaskFlow" is visible and "Generated by Claude Code" is visible. Type dev@company.com into the "you@company.com" field. Type Engineering into the "Your team name" field. Click Sign in. Assert "Signed in as" is visible. Assert "Active" is visible and "Completed" is visible. Type "Deploy to production" into the "Add a new task" field. Click Add. Assert "Deploy to production" is visible.
+
+Step 2 — try to delete (EA1 blocks it):
+
+Use alethia_tell to click Delete and report what EA1 decides.
+
+Step 3 — sign out:
+
+Use alethia_tell to click Sign out. Assert "Sign in" is visible.
 ```
 
 This is the loop: agent builds, Alethia verifies, EA1 guards. Every step returns structured results, a page snapshot (~200 tokens), and a signed audit trail.

package/demo/claude-code-app.html

@@ -83,8 +83,8 @@
         <input type="email" id="email" placeholder="you@company.com" />
       </div>
       <div class="field">
-        <label for="password">Password</label>
-        <input type="password" id="password" placeholder="Enter password" />
+        <label for="team">Team</label>
+        <input type="text" id="team" placeholder="Your team name" />
       </div>
       <button class="btn btn-primary" id="signin-btn" onclick="handleSignIn()">Sign in</button>
       <p class="error-msg" id="error-msg">Invalid email or password.</p>
@@ -145,9 +145,9 @@
   <script>
     function handleSignIn() {
       var email = document.getElementById('email').value.trim();
-      var pw = document.getElementById('password').value;
+      var team = document.getElementById('team').value.trim();
       var err = document.getElementById('error-msg');
-      if (!email || !pw) { err.style.display = 'block'; err.textContent = 'Please fill in all fields.'; return; }
+      if (!email || !team) { err.style.display = 'block'; err.textContent = 'Please fill in all fields.'; return; }
       if (!email.includes('@')) { err.style.display = 'block'; err.textContent = 'Invalid email address.'; return; }
       err.style.display = 'none';
       document.getElementById('auth').classList.add('hidden');
@@ -160,7 +160,7 @@
       document.getElementById('dashboard').classList.remove('active');
       document.getElementById('auth').classList.remove('hidden');
       document.getElementById('email').value = '';
-      document.getElementById('password').value = '';
+      document.getElementById('team').value = '';
     }
 
     function addTask() {

package/dist/index.js

@@ -62,7 +62,7 @@ const debug = (...args) => {
 // ---------------------------------------------------------------------------
 // Auto-install: download, verify, extract, and spawn the headless runtime
 // ---------------------------------------------------------------------------
-const RUNTIME_VERSION = '0.1.0-alpha.7';
+const RUNTIME_VERSION = '0.1.0-alpha.8';
 const RUNTIME_DIR = join(homedir(), '.alethia', 'runtime');
 const RUNTIME_MARKER = join(RUNTIME_DIR, '.installed');
 const GITHUB_RELEASE_BASE = `https://github.com/vitron-ai/alethia/releases/download/v${RUNTIME_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vitronai/alethia",
-  "version": "0.3.14",
+  "version": "0.3.16",
   "description": "MIT-licensed MCP bridge to the Alethia runtime — the patent-pending zero-IPC E2E test runtime built for AI agents. 45x faster than Playwright. Local-first, zero telemetry. WCAG + NIST 800-53 compliance audits built in. Auto-installs on first use.",
   "type": "module",
   "main": "dist/index.js",