pkg-gate 0.1.0 → 0.2.0

package/README.md

@@ -4,6 +4,7 @@ Pre-install security gate for npm lifecycle scripts using TypeSafe System One.
 
 ```bash
 npm install pkg-gate
+export TYPESAFE_API_KEY="ts_..." # get a key at typesafe.ai
 ```
 
 ## Quick start
@@ -21,7 +22,7 @@ if (!report.isSafe()) {
 console.log(report.inspect());
 ```
 
-`pkgGate()` evaluates a package or script against TypeSafe System One. `report.isSafe()` returns a boolean verdict. `report.inspect()` renders the TUI card.
+`pkgGate()` evaluates a package or script against TypeSafe System One. `report.isSafe()` returns a boolean verdict. `report.inspect()` renders the TUI card. Without `TYPESAFE_API_KEY`, it falls back to an offline calibrated simulator.
 
 ## Check local package
 
@@ -100,6 +101,11 @@ npx pkg-gate esbuild --plain
 
 Exit code `0` on allow, `1` on block, `2` on warn. When a warning triggers in an interactive terminal, prompts the user for confirmation.
 
+## Playground
+
+Interactive browser playground with live package evaluation, preset scenarios, and architecture flow:
+https://hemanth.github.io/pkg-gate/
+
 ## Demo
 
 ```bash

package/bin/cli.js

@@ -9,6 +9,7 @@ const helpText = `
     $ pkg-gate [package-name | path | script]
 
   Options
+    --api-key, -k      TypeSafe API key (or set TYPESAFE_API_KEY env var)
     --script, -s       Evaluate a raw shell command string
     --json             Output strictly typed structured JSON
     --plain            Output plain text summary (no TUI boxes)
@@ -36,6 +37,7 @@ async function main() {
     plain: { type: 'boolean' },
     mock: { type: 'boolean' },
     yes: { type: 'boolean', short: 'y' },
+    'api-key': { type: 'string', short: 'k' },
     'block-score': { type: 'string' },
     'warn-score': { type: 'string' },
   };
@@ -86,6 +88,7 @@ async function main() {
 
   try {
     const report = await pkgGate(target, {
+      apiKey: args.values['api-key'] || process.env.TYPESAFE_API_KEY,
       script: args.values.script,
       mock: args.values.mock,
       blockScore: args.values['block-score'] ? parseFloat(args.values['block-score']) : undefined,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pkg-gate",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Pre-install security gate for npm lifecycle scripts using TypeSafe System One.",
   "type": "module",
   "main": "./src/index.js",
@@ -22,7 +22,8 @@
   ],
   "scripts": {
     "test": "node --test test/*.test.js",
-    "demo": "node bin/cli.js test/fixtures/credential-theft.json --mock"
+    "demo": "node bin/cli.js test/fixtures/credential-theft.json --mock",
+    "playground": "npx serve docs"
   },
   "keywords": [
     "typesafe",
@@ -36,6 +37,14 @@
   ],
   "author": "Hemanth HM <hemanth@h3manth.com> (https://h3manth.com)",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hemanth/pkg-gate.git"
+  },
+  "bugs": {
+    "url": "https://github.com/hemanth/pkg-gate/issues"
+  },
+  "homepage": "https://github.com/hemanth/pkg-gate#readme",
   "dependencies": {
     "@typesafe-ai/sdk": "^0.6.0"
   }