fix: update package description test, add OIDC publish note, fix VHS tape

Author: itsflaid

AGENTS.md

@@ -50,9 +50,15 @@ internal scripts, anything not bundled into the npm tarball):
   the user to confirm the change is publish-worthy and which bump level
   applies (`patch` / `minor` / `major`).
 - Only after explicit user confirmation: run `npm version <level>` in
-  `packages/cli`, then `git push --follow-tags`.
+  `packages/cli`, then `git push --follow-tags` with the `v*.*.*` tag.
 - Passing verification gates is not authorization to publish — always
   wait for the user's go-ahead on this step specifically.
+- Publishing to npm is done exclusively via GitHub Actions using npm
+  Trusted Publishing (OIDC). Do **not** run `npm publish` manually
+  from a local terminal — it requires 2FA and is not the configured
+  publish path. Pushing a `v*.*.*` tag to `origin` triggers the
+  `publish.yml` workflow, which handles build, test, and npm publish
+  via OIDC. Monitor results in the GitHub Actions tab.
 
 
 ## Relevant Skills

assets/devmap-demo.tape

@@ -1,19 +1,12 @@
 Output assets/devmap-demo.gif
 Set Width 1200
 Set Height 600
-Set Shell bash
 Set FontSize 16
 
-Type "cd examples/todo-app"
+Type "devmap --version"
 Enter
-Sleep 500ms
+Sleep 1s
 
-Type "devmap doctor"
-Enter
-Sleep 2s
-
-Clear
-
-Type "devmap analyze --json | head -20"
+Type "devmap --help"
 Enter
 Sleep 2s

packages/cli/test/package-distribution.test.ts

@@ -26,7 +26,7 @@ test("npm package metadata supports npx devmap with a minimal tarball", async ()
   assert.match(packageJson.version ?? "", /^\d+\.\d+\.\d+(?:-.+)?$/);
   assert.equal(
     packageJson.description,
-    "CLI that maps codebases into a persistent, reusable context layer for humans and AI agents."
+    "CLI that maps codebases into a reusable context layer for developers and AI agents."
   );
   assert.equal(packageJson.bin?.devmap, "./dist/index.js");
   assert.equal(packageJson.engines?.node, ">=22.12");