receipts-cli 0.1.3 → 0.1.4

package/README.md

@@ -1,5 +1,7 @@
 # receipts
 
+[![npm](https://img.shields.io/npm/v/receipts-cli)](https://www.npmjs.com/package/receipts-cli)
+
 **Agents need receipts.**
 
 Your AI coding agent just told you it fixed the bug. Did it?
@@ -74,11 +76,24 @@ ship as adapters.
 
 ## Install
 
-Two independent paths - use either or both.
+Two halves - the **agent adapter** (your agent produces receipts) and the **PR enforcer**
+(they get checked). Use either alone or both. Set up per repo, step by step:
+
+**1. Add the plugin** - teaches your Claude Code agent the Seven Gates:
+```bash
+claude plugin marketplace add shaheershoaib/receipts
+claude plugin install receipts
+```
 
-**Enforce it at the PR (any agent):**
+**2. Configure the repo** - detects your stack + deploy target, confirms, writes `receipts.config.json`:
+```bash
+npx receipts-cli init
+# or run the latest unreleased from source: npx github:shaheershoaib/receipts init
+```
+
+**3. Enforce at the PR** - re-runs each fix-claim's receipt (RED on the base commit, GREEN on the fix). Add `.github/workflows/receipts.yml`:
 ```yaml
-# .github/workflows/receipts.yml  (full template: enforcer/example-workflow.yml)
+# full template: enforcer/example-workflow.yml
 on: pull_request
 jobs:
   receipts:
@@ -90,19 +105,6 @@ jobs:
       - uses: shaheershoaib/receipts/enforcer@main
 ```
 
-**Teach your agent to pass it (Claude Code):**
-```bash
-claude plugin marketplace add shaheershoaib/receipts
-claude plugin install receipts
-```
-
-**Configure it for your project (any stack, any platform):**
-```bash
-npx receipts-cli init   # detects your stack + deploy target, confirms, writes receipts.config.json
-# not published to npm yet? run it straight from the repo, no install:
-# npx github:shaheershoaib/receipts init
-```
-
 It works across any repo because the gate *logic* ships generic and only the project
 *plumbing* (how to test, where it deploys, what marks a fix-claim) is detected per
 project. See [enforcer/GENERALIZATION.md](enforcer/GENERALIZATION.md) for how,
@@ -118,12 +120,22 @@ Built and working today:
 - the Seven Gates spec (`spec/SEVEN-GATES.md`)
 - the focused `seven-gates` agent skill + two Stop-hook backstops (the Claude Code adapter)
 - the `trajectory-kb` memory MCP
-- `receipts init` - detects stack + deploy target, confirms, writes `receipts.config.json`
+- `receipts init` - detects stack + deploy target, confirms, writes `receipts.config.json`; published to npm as [`receipts-cli`](https://www.npmjs.com/package/receipts-cli) (`npx receipts-cli init`)
 - the **CI enforcer** (`enforcer/`) - the red->green re-verification at the PR, as a GitHub Action
 
 Next: `verify.live_drive` for symptoms a test can't express (drive the deployed app),
 and an `examples/` demo of a caught wrong-fix.
 
+## Releasing (maintainer)
+
+`receipts-cli` is on npm. To cut a new version:
+
+1. Bump `version` in `package.json` (and `plugin/.claude-plugin/plugin.json` too if the plugin itself changed).
+2. If you edited `plugin/mcp/trajectory-kb/index.js`, rebuild the bundled MCP server: `cd plugin/mcp/trajectory-kb && npm run build`, then commit the regenerated `server.bundle.mjs`.
+3. `npm publish`.
+
+npm requires an auth token to publish **even with no 2FA** on the account. One-time: create a **Granular Access Token** (npmjs.com -> Access Tokens) with **Packages and scopes = Read and write, "All packages"** (Organizations = No access; no org needed), then `npm config set //registry.npmjs.org/:_authToken=<TOKEN>`. (Classic "Automation" tokens also work where the account still offers them.)
+
 ## License
 
 MIT. (The verification discipline should be free and everywhere.)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "receipts-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Verification gates for AI-written code - re-prove an agent's fix before you trust it.",
   "bin": {
     "receipts": "bin/receipts.js"