securenow 8.0.2 → 8.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/NPM_README.md +11 -1
  2. package/README.md +3 -3
  3. package/SKILL-API.md +4 -4
  4. package/SKILL-CLI.md +237 -229
  5. package/app-config.js +1 -1
  6. package/cli/credentials.js +1 -1
  7. package/cli/security.js +467 -374
  8. package/cli.js +430 -418
  9. package/mcp/catalog.js +1 -1
  10. package/nextjs.js +3 -2
  11. package/nuxt-server-plugin.mjs +3 -2
  12. package/otel-defaults.js +30 -2
  13. package/package.json +1 -1
  14. package/tracing.js +3 -2
package/app-config.js CHANGED
@@ -419,7 +419,7 @@ function withCredentialDefaults(credentials) {
419
419
  out.config = mergeMissing(out.config, DEFAULT_CONFIG);
420
420
  out._securenow = mergeMissing(out._securenow, {
421
421
  schemaVersion: CONFIG_SCHEMA_VERSION,
422
- note: 'Local SecureNow credentials and secure SDK defaults. This file may contain secrets; keep .securenow/ in .gitignore.',
422
+ note: 'Local SecureNow credentials and secure SDK defaults. This file may contain secrets.',
423
423
  precedence: 'The same credentials file works in local development and production. SDK runtime config is read from credentials JSON only.',
424
424
  explanations: CONFIG_EXPLANATIONS,
425
425
  });
package/cli/credentials.js CHANGED
@@ -39,7 +39,7 @@ function buildRuntimeCredentials(options = {}) {
39
39
  },
40
40
  _securenow: {
41
41
  ...(creds._securenow || {}),
42
- note: 'Runtime SecureNow credentials and SDK defaults. Mount or copy this JSON as .securenow/credentials.json or .securenow/credentials.<environment>.json in production. Do not commit it.',
42
+ note: 'Runtime SecureNow credentials and SDK defaults. Mount or copy this JSON as .securenow/credentials.json or .securenow/credentials.<environment>.json in production.',
43
43
  routing: 'Telemetry is sent to the default SecureNow ingestion gateway. The gateway routes by app.key, so runtime credentials do not expose per-instance collector URLs.',
44
44
  runtimeOnly: 'This file intentionally omits CLI OAuth fields: token, email, and expiresAt.',
45
45
  production: 'Production can use this same file shape instead of environment variables.',