prae-cli 0.3.0 → 0.5.0

package/README.md

@@ -33,6 +33,22 @@ engine, and answering it should not require running an agent.
 It also says when no capability claims the named tool, so a reader cannot infer
 coverage that is not there.
 
+### `prae scan <file> [--pack <pack.json>] [--json]`
+
+Inspect a file for credentials the way the gate does before a read: provider
+formats plus entropy, placeholders dropped. Findings name the type, rule,
+line and confidence — structurally never the secret, so the output is safe to
+paste anywhere. With `--pack`, also prints the verdict that pack would reach.
+
+### `prae mcp --root <dir> [--pack <pack.json>] [--ledger <file>]`
+
+Serve gated filesystem access over MCP stdio. Any MCP-capable IDE or agent
+mounts this as its file tool; every `read_file` is inspected before its
+contents are returned, refusals are structured JSON with `"retry": false`,
+and every decision lands in the ledger. Reads are confined to `--root`. With
+no `--pack`, the bundled `secret-catcher` pack mounts. See
+`docs/secret-catcher.md` for client configuration.
+
 ### `prae verify <ledger.jsonl>`
 
 Re-derive every hash in a decision log and report any break. Prints the limit

package/lib/bin.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
-import { t as main } from "./cli-DZ0FPdSr.js";
-import "./src-DGWTvmRZ.js";
-import "./views-CLLfJPWB.js";
+import "./evaluate-BilZez15.js";
+import { t as main } from "./cli-ZfwhJKRw.js";
+import "./src-CXU0_W1P.js";
+import "./views-DalPkBZZ.js";
 
 //#region src/bin.ts
 main(process.argv.slice(2)).catch((error) => {