webclaw/packages
Valerio d497c5ee97 fix(create-webclaw): add files allowlist so npm never ships secrets
npm pack was bundling packages/create-webclaw/.mcpregistry_*_token (the
mcp-publisher credential files) into the tarball because the package had no
'files' field and npm did not honor the repo-root .gitignore. Restrict the
published package to index.mjs + README.md (matches @webclaw/mcp).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-22 12:08:32 +02:00
..
create-webclaw fix(create-webclaw): add files allowlist so npm never ships secrets 2026-07-22 12:08:32 +02:00
webclaw-mcp fix(mcp): rename @webclaw/mcp bin to avoid npx PATH shadowing 2026-07-22 08:53:29 +02:00