runbrief 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +25 -3
  2. package/dist/cli.js +1324 -625
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -13,13 +13,13 @@ name used in the install command.
13
13
  Claude Code:
14
14
 
15
15
  ```sh
16
- claude mcp add --transport stdio --scope user brief -- npx -y runbrief@0.1.2
16
+ claude mcp add --transport stdio --scope user brief -- npx -y runbrief@0.1.3
17
17
  ```
18
18
 
19
19
  Codex:
20
20
 
21
21
  ```sh
22
- codex mcp add brief -- npx -y runbrief@0.1.2
22
+ codex mcp add brief -- npx -y runbrief@0.1.3
23
23
  ```
24
24
 
25
25
  Generic MCP configuration:
@@ -29,7 +29,10 @@ Generic MCP configuration:
29
29
  "mcpServers": {
30
30
  "brief": {
31
31
  "command": "npx",
32
- "args": ["-y", "runbrief@0.1.2"]
32
+ "args": ["-y", "runbrief@0.1.3"],
33
+ "env": {
34
+ "BRIEF_CONNECTOR_DISTRIBUTION": "package"
35
+ }
33
36
  }
34
37
  }
35
38
  }
@@ -73,3 +76,22 @@ Local use does not require an account. The default connected mode syncs derived
73
76
  metadata and proof, not raw source text. Workspace owners and admins can export
74
77
  hosted workspace data; owners can delete a workspace without deleting repo-local
75
78
  `.brief` files, their authentication account, or other workspaces.
79
+
80
+ ## Connected setup without shared keys
81
+
82
+ The Brief web app creates a browser-authorized setup by default. The copied MCP
83
+ config contains a short-lived, single-use enrollment code, not a reusable API
84
+ key. On its first start, the connector exchanges that code over HTTPS and
85
+ stores the resulting credential at `~/.config/runbrief/credentials.json` (or
86
+ `BRIEF_CREDENTIALS_FILE`) with mode `0600`. The code cannot be reused or moved
87
+ to another machine after redemption.
88
+
89
+ To remove the local credential and pair again:
90
+
91
+ ```bash
92
+ npx -y runbrief@0.1.3 cloud-logout
93
+ ```
94
+
95
+ The explicit `BRIEF_API_URL` + `BRIEF_API_KEY` environment path remains as an
96
+ approved legacy or CI fallback. Do not put either value in chat, tickets,
97
+ repository files, or hosted-agent prompts.