enact-cli 1.0.10 → 1.0.11

package/README.md

@@ -7,9 +7,10 @@ Official CLI for the Enact Protocol - package, secure, and discover AI tools.
 - 🔍 **Search & Discovery** - Find AI tools in the Enact ecosystem
 - ⚡ **Execute Tools** - Run tools directly with secure execution
 - 📦 **Publishing** - Publish your own tools to the registry
-- 🔐 **Security** - Cryptographic signing and verification
+- 🔐 **Security** - **Mandatory cryptographic signing and verification** for all tool execution
 - 🎯 **MCP Integration** - Full Model Context Protocol support
 - 🚀 **Direct Library** - Use as a library in your applications
+- 🌐 **Environment Manager** - Web-based interface for managing environment variables
 
 ## Installation
 
@@ -61,13 +62,46 @@ enact exec author/tool-name --input '{"key": "value"}'
 
 ### MCP Server Usage
 ```bash
-# Start the comprehensive MCP server
+# Start the comprehensive MCP server (includes web-based environment manager)
 enact-mcp-server
 
 # Start the MCP server  
 enact-mcp
 ```
 
+#### Environment Manager Web Interface
+
+The MCP server includes a built-in web interface for managing environment variables:
+
+- **URL**: `http://localhost:5555` (when MCP server is running)
+- **Features**: Package-based environment variable management
+- **File Structure**: `~/.enact/env/{namespace}/.env`
+
+See [ENVIRONMENT_MANAGER.md](./ENVIRONMENT_MANAGER.md) for detailed usage instructions.
+
+## Security
+
+🔐 **Mandatory Signature Verification** - All tools must be cryptographically signed and verified before execution.
+
+**Verification Policies:**
+- `permissive` - Require 1+ valid signatures (default)
+- `enterprise` - Require author + reviewer signatures
+- `paranoid` - Require author + reviewer + approver signatures
+
+**Example Usage:**
+```bash
+# Tools are automatically verified before execution
+enact exec my-org/secure-tool
+
+# Use strict enterprise policy
+enact exec critical-tool --verify-policy enterprise
+
+# Sign your own tools
+enact sign sign my-tool.yaml --role author
+```
+
+📋 **See [MANDATORY_SIGNATURE_VERIFICATION.md](./MANDATORY_SIGNATURE_VERIFICATION.md) for complete security documentation.**
+
 ### Library Usage
 ```typescript
 import { executeToolByName, searchTools } from 'enact-cli/dist/lib/enact-direct.js';