Add npm package README and fix install script issues

- Add README.md for npm package page
- Rename TMPDIR to WORK_DIR in install.sh to avoid shadowing POSIX var
- Use exact PATH entry match in install.ps1 instead of substring check

Author: eric8810

install.ps1

@@ -55,7 +55,8 @@ function Download-And-Install($version) {
 
         # Add to User PATH if not present
         $userPath = [Environment]::GetEnvironmentVariable("Path", "User")
-        if ($userPath -notlike "*$installDir*") {
+        $pathEntries = $userPath -split ";" | Where-Object { $_ -ne "" }
+        if ($installDir -notin $pathEntries) {
             [Environment]::SetEnvironmentVariable("Path", "$userPath;$installDir", "User")
             $env:Path = "$env:Path;$installDir"
             Write-Host "Added $installDir to User PATH" -ForegroundColor Green

install.sh

@@ -56,14 +56,14 @@ download_and_install() {
     ARCHIVE="${BINARY}-${TARGET}.tar.gz"
     URL="https://github.com/${REPO}/releases/download/${VERSION}/${ARCHIVE}"
 
-    TMPDIR="$(mktemp -d)"
-    trap 'rm -rf "$TMPDIR"' EXIT
+    WORK_DIR="$(mktemp -d)"
+    trap 'rm -rf "$WORK_DIR"' EXIT
 
     info "Downloading $URL..."
-    curl -fsSL "$URL" -o "${TMPDIR}/${ARCHIVE}"
+    curl -fsSL "$URL" -o "${WORK_DIR}/${ARCHIVE}"
 
     info "Extracting..."
-    tar xzf "${TMPDIR}/${ARCHIVE}" -C "$TMPDIR"
+    tar xzf "${WORK_DIR}/${ARCHIVE}" -C "$WORK_DIR"
 
     # Determine install directory
     if [ -w "/usr/local/bin" ]; then
@@ -73,7 +73,7 @@ download_and_install() {
         mkdir -p "$INSTALL_DIR"
     fi
 
-    install -m 755 "${TMPDIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
+    install -m 755 "${WORK_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
     info "Installed to ${INSTALL_DIR}/${BINARY}"
 
     # Check if install dir is in PATH

npm/authy-cli/README.md

@@ -0,0 +1,79 @@
+# authy-cli
+
+A CLI secrets store & dispatch tool built for AI agents.
+
+Authy stores encrypted secrets locally and dispatches them to agents with policy-based scoping, short-lived session tokens, and audit logging. No server required.
+
+## Install
+
+```bash
+npx authy-cli --help
+```
+
+Or install globally:
+
+```bash
+npm install -g authy-cli
+authy --help
+```
+
+### Other install methods
+
+```bash
+# Linux/macOS
+curl -fsSL https://raw.githubusercontent.com/eric8810/authy/main/install.sh | sh
+
+# Windows (PowerShell)
+irm https://raw.githubusercontent.com/eric8810/authy/main/install.ps1 | iex
+```
+
+## Quick Start
+
+```bash
+# Initialize a vault with a keyfile
+authy init --generate-keyfile ~/.authy/keys/master.key
+
+# Store a secret (reads from stdin)
+authy store db-url
+
+# Retrieve it
+authy get db-url
+
+# Launch the admin TUI (secrets never touch shell history)
+authy admin --keyfile ~/.authy/keys/master.key
+```
+
+## Agent Workflow
+
+```bash
+# Create a scoped policy
+authy policy create deploy-agent --allow "db-*" --deny "openai-*"
+
+# Create a short-lived session token
+authy session create --scope deploy-agent --ttl 1h
+
+# Agent uses the token to read only allowed secrets
+export AUTHY_TOKEN="authy_v1...."
+export AUTHY_KEYFILE=~/.authy/keys/master.key
+authy get db-url          # works
+authy get openai-api-key  # denied
+
+# Or inject secrets into a subprocess
+authy run --scope deploy-agent -- ./deploy.sh
+```
+
+## Supported Platforms
+
+| Platform | Architecture |
+|----------|-------------|
+| Linux | x64, arm64 |
+| macOS | x64, arm64 |
+| Windows | x64 |
+
+## Documentation
+
+For full documentation, see the [GitHub repository](https://github.com/eric8810/authy).
+
+## License
+
+MIT