sphica 0.5.3 → 0.5.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
3
3
  "name": "sphica",
4
- "version": "0.5.3",
4
+ "version": "0.5.4",
5
5
  "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
6
6
  "author": {
7
7
  "name": "iroha924",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sphica",
3
- "version": "0.5.3",
3
+ "version": "0.5.4",
4
4
  "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
5
5
  "author": {
6
6
  "name": "iroha924",
package/README.md CHANGED
@@ -196,8 +196,8 @@ Everything else runs inside Claude Code and Codex, through the `/sphica:*` comma
196
196
 
197
197
  Report vulnerabilities privately as described in [SECURITY.md](https://github.com/iroha924/sphica/blob/main/SECURITY.md).
198
198
 
199
- Each release is built by GitHub Actions from a tag on the head of a pull request whose CI has passed, and staged on npm.
200
- The maintainer checks its SHA-512 checksum and provenance, then approves publication with two-factor authentication.
199
+ Each release is built by GitHub Actions from a tag on the head of a pull request whose CI has passed.
200
+ It is published only after the maintainer approves the release environment on GitHub, and it reaches npm through trusted publishing, with no stored token.
201
201
  The [npm page](https://www.npmjs.com/package/sphica#provenance) links to the workflow and the commit each release was built from.
202
202
 
203
203
  Dependabot opens weekly pull requests to update the GitHub Actions used in CI, and Renovate opens monthly ones for the npm dependencies bundled into the package.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sphica",
3
- "version": "0.5.3",
3
+ "version": "0.5.4",
4
4
  "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
5
5
  "license": "MIT",
6
6
  "type": "module",