teapot-coding-agent 0.11.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -182,6 +182,10 @@ description: Steps to cut a release safely
182
182
  reusable procedure — `files` bundles helper scripts next to `SKILL.md`
183
183
  (made executable automatically), and `load_skill` lists them as runnable
184
184
  workspace paths. Available from the next turn, forever.
185
+ - Bundled skill: [`skills/qa-adversarial`](skills/qa-adversarial/SKILL.md) —
186
+ seven adversarial QA personas. Copy it into
187
+ `~/.config/teapot-coding-agent/skills/` (global) or a workspace's
188
+ `skills/` folder to enable it.
185
189
 
186
190
  ### Session log format (JSONL)
187
191
 
@@ -245,7 +249,8 @@ limits (RLIMIT_* / cgroups) have a natural insertion point in
245
249
  `src/agent/tools.ts:runShell`.
246
250
 
247
251
  **LAN exposure**: the API has no auth by default (localhost-first tool). To
248
- expose it beyond localhost, set `TEAPOT_API_TOKEN=<secret>` every `/api/*`
252
+ expose it beyond localhost, set `TEAPOT_API_TOKEN=<secret>` (env wins) or a
253
+ `password` field in the config — every `/api/*`
249
254
  route then requires `Authorization: Bearer <secret>` (WebSocket handshakes
250
255
  accept `?token=<secret>`). In the web UI, open
251
256
  `http://host:7788/#token=<secret>` once; the token is stored locally and