hallpass-client 0.4.0 → 0.5.0

package/README.md

@@ -4,13 +4,12 @@ The Node.js and TypeScript client for [hallpass](https://github.com/roee-hersh/h
 your AI agent acts for a user, ask the system that owns the resource whether that user may do it.
 
 ```sh
-npm install https://github.com/roee-hersh/hallpass/releases/download/v0.4.0/hallpass-client-node.tgz
+npm install hallpass-client
 ```
 
-Every [release](https://github.com/roee-hersh/hallpass/releases) carries the package. Pin a version
-as above rather than using `latest/download`: npm records the tarball's checksum in
-`package-lock.json`, so a URL whose content changes with each release would fail `npm ci` later.
-The package name is `hallpass-client`, so imports read `from "hallpass-client"`.
+It is on [npm](https://www.npmjs.com/package/hallpass-client). Its version matches the hallpass
+release, so in a project pin the one you run (`npm install hallpass-client@0.4.0`). From 0.4.1 on,
+the hallpass release workflow publishes it with npm provenance.
 
 It needs a running hallpass service. The client has no dependencies; it uses Node's built-in `fetch`
 (Node 18.17 or later). It ships as an ES module with type declarations.
@@ -49,4 +48,4 @@ await hp.require(...);  // rejects with PermissionDenied unless allow
 ```
 
 Framework examples: [examples/agent-ts](https://github.com/roee-hersh/hallpass/tree/main/examples/agent-ts).
-The guide: [docs/agents.md](https://github.com/roee-hersh/hallpass/blob/main/docs/agents.md).
+The guide: [docs/guides/agent-tools.md](https://github.com/roee-hersh/hallpass/blob/main/docs/guides/agent-tools.md).

package/dist/index.d.ts

@@ -22,7 +22,7 @@
  *
  * The user comes from the application, never from the tool's arguments.
  *
- * Install it from a hallpass release (see sdk/node/README.md). This is the TypeScript
+ * Install it with `npm install hallpass-client`. This is the TypeScript
  * counterpart of the Python package (sdk/python) and follows the same
  * contract; the tests in examples/agent-ts/hallpass_client.test.ts spell it
  * out.

package/dist/index.js

@@ -22,7 +22,7 @@
  *
  * The user comes from the application, never from the tool's arguments.
  *
- * Install it from a hallpass release (see sdk/node/README.md). This is the TypeScript
+ * Install it with `npm install hallpass-client`. This is the TypeScript
  * counterpart of the Python package (sdk/python) and follows the same
  * contract; the tests in examples/agent-ts/hallpass_client.test.ts spell it
  * out.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hallpass-client",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Check with hallpass whether a user may do something before your AI agent does it for them.",
   "keywords": [
     "ai-agents",