@akasecurity/cli 0.8.0 → 0.8.1

package/README.md

@@ -0,0 +1,65 @@
+# @akasecurity/cli — `aka`
+
+[![npm](https://img.shields.io/npm/v/@akasecurity/cli?style=flat-square&labelColor=232F3E&color=00E0B8)](https://www.npmjs.com/package/@akasecurity/cli)
+[![Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-232F3E?style=flat-square)](https://github.com/akasecurity/ai-tc/blob/main/LICENSE)
+
+The `aka` command-line tool for **[AI Traffic Control](https://github.com/akasecurity/ai-tc)** (`ai-tc`) — an open-source, local-first control plane for coding agents. It inspects and governs the traffic of an agent session (prompts, tool calls, responses, file reads), scans each event against your rule packs, and records everything to a local SQLite store at `~/.aka/data/aka.db`.
+
+Everything runs on your machine. There's no account, no backend, and nothing leaves your computer to be scanned.
+
+## Install
+
+```bash
+npm install -g @akasecurity/cli
+```
+
+Or use the bootstrap installer (checks for Node, then installs):
+
+```bash
+# macOS / Linux
+curl -fsSL https://raw.githubusercontent.com/akasecurity/ai-tc/cli-latest/tools/installer/install.sh | sh
+
+# Windows (PowerShell)
+irm https://raw.githubusercontent.com/akasecurity/ai-tc/cli-latest/tools/installer/install.ps1 | iex
+```
+
+Requires **Node.js 24+** (the CLI uses the built-in `node:sqlite`).
+
+## Quick start
+
+```bash
+aka init         # scaffold the local store at ~/.aka
+aka dashboard    # open the local web dashboard over your store
+```
+
+## What it does
+
+| Command          | What it does                                                     |
+| ---------------- | ---------------------------------------------------------------- |
+| `aka init`       | Create the local store and settings under `~/.aka`.              |
+| `aka dashboard`  | Launch the local web dashboard (findings, policies, exceptions). |
+| `aka scan`       | Scan working-tree source files for security flaws.               |
+| `aka detections` | List installed detection packs and available updates.            |
+| `aka exception`  | Manage exact-value exceptions that let a specific match through. |
+| `aka stats`      | Show detection activity and token/cost summaries from the store. |
+| `aka plugins`    | Optional hub to install agent plugins (e.g. Claude Code).        |
+
+Run `aka --help` for the full command list.
+
+## The Claude Code plugin
+
+The CLI gives you the dashboard, store, and scanning. To actually **intercept** a Claude Code session you also need the AKA plugin, which installs from the Claude Code plugin marketplace (not npm). With the CLI installed:
+
+```bash
+aka plugins install claude-code
+```
+
+This drives Claude Code to add the plugin for you (or prints the `/plugin` commands to run). See the [installation guide](https://akasecurity.github.io/ai-tc-docs/getting-started/installation/) for both components.
+
+## Docs
+
+Full documentation, architecture, and the built-in detection catalog live at **[akasecurity.github.io/ai-tc-docs](https://akasecurity.github.io/ai-tc-docs/)**.
+
+## License
+
+[Apache-2.0](https://github.com/akasecurity/ai-tc/blob/main/LICENSE)

package/dist/cli.js

@@ -554,10 +554,10 @@ var AGENT_PLUGINS = [
     name: "Claude Code",
     sourceTool: "claude-code",
     description: "Hooks Claude Code sessions to detect + redact sensitive data in prompts, responses, and file writes.",
-    npmPackage: "@akasecurity/plugin-claude-code",
-    pluginName: "aka",
-    marketplace: "ai-tc",
-    marketplaceSource: "akasecurity/ai-tc"
+    npmPackage: "@akasecurity/ai-tc-claude-code",
+    pluginName: "ai-tc",
+    marketplace: "akasecurity",
+    marketplaceSource: "akasecurity/marketplace"
   }
 ];
 function findAgent(id) {
@@ -26387,50 +26387,14 @@ async function runException(argv, io = terminalPrompter()) {
 }
 
 // src/commands/init.ts
-import { existsSync as existsSync8, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync9, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "fs";
 import { join as join14 } from "path";
-import { parseArgs as parseArgs5 } from "util";
-async function runInit(argv) {
-  const { values } = parseArgs5({ args: argv, options: HOME_OPTION });
-  const home = homeBase(values.home);
-  ensureLayoutDirSync(home);
-  const settings = settingsDir(home);
-  ensureLayoutDirSync(settings);
-  const settingsFile = join14(settings, "settings.json");
-  const settingsCreated = !existsSync8(settingsFile);
-  if (settingsCreated) {
-    const tmp = `${settingsFile}.tmp`;
-    writeFileSync6(tmp, `${JSON.stringify(defaultWorkspaceSettings(), null, 2)}
-`, {
-      mode: DATA_FILE_MODE
-    });
-    renameSync5(tmp, settingsFile);
-  }
-  const db = openLocalDatabase(dataDir(home));
-  let policyCount;
-  let packCount;
-  let updatesAvailable;
-  try {
-    db.installedPacks.recordInventory(bundledDetections(), cliRecordedBy());
-    policyCount = (await db.policies.readPolicies()).length;
-    packCount = (await db.installedPacks.counts()).packs;
-    updatesAvailable = (await db.detections.listDetections({ filter: "all" })).counts.updates;
-  } finally {
-    db.close();
-  }
-  process.stdout.write(
-    `\u2713 Initialized AKA at ${home}
-  settings: ${settingsFile}${settingsCreated ? "" : " (kept existing)"}
-  database: ${dbPath(home)}
-  seeded ${String(policyCount)} default policies, ${String(packCount)} detection pack(s)
-` + (updatesAvailable > 0 ? `  \u2B06 ${String(updatesAvailable)} detection pack update(s) available \u2014 review with \`aka detections\`, apply with \`aka detections update --all\`
-` : "")
-  );
-}
+import * as readline from "readline/promises";
+import { parseArgs as parseArgs6 } from "util";
 
 // src/commands/plugins.ts
-import { existsSync as existsSync9 } from "fs";
-import { parseArgs as parseArgs6 } from "util";
+import { existsSync as existsSync8 } from "fs";
+import { parseArgs as parseArgs5 } from "util";
 function runPlugins(argv) {
   const [sub, ...rest] = argv;
   if (!sub || sub === "list") return listPlugins(rest);
@@ -26443,10 +26407,10 @@ function runPlugins(argv) {
   process.exitCode = 1;
 }
 async function listPlugins(argv) {
-  const { values } = parseArgs6({ args: argv, options: HOME_OPTION });
+  const { values } = parseArgs5({ args: argv, options: HOME_OPTION });
   const home = homeBase(values.home);
   const active = /* @__PURE__ */ new Set();
-  if (existsSync9(dbPath(home))) {
+  if (existsSync8(dbPath(home))) {
     const db = openLocalDatabase(dataDir(home));
     try {
       const recent = await db.findings.recentFindings({ limit: 1e3 });
@@ -26471,7 +26435,7 @@ async function listPlugins(argv) {
   out.write("Update:   aka update            (or: aka check-updates)\n");
 }
 function installPlugin(argv) {
-  const { positionals } = parseArgs6({ args: argv, options: HOME_OPTION, allowPositionals: true });
+  const { positionals } = parseArgs5({ args: argv, options: HOME_OPTION, allowPositionals: true });
   const id = positionals[0];
   if (!id) {
     process.stderr.write("aka plugins install: missing <agent> (try: aka plugins list)\n");
@@ -26528,6 +26492,84 @@ Then run \`aka init\` to set up the local store.
   }
 }
 
+// src/commands/init.ts
+async function runInit(argv) {
+  const { values } = parseArgs6({
+    args: argv,
+    options: { ...HOME_OPTION, yes: { type: "boolean", short: "y" } }
+  });
+  const home = homeBase(values.home);
+  ensureLayoutDirSync(home);
+  const settings = settingsDir(home);
+  ensureLayoutDirSync(settings);
+  const settingsFile = join14(settings, "settings.json");
+  const settingsCreated = !existsSync9(settingsFile);
+  if (settingsCreated) {
+    const tmp = `${settingsFile}.tmp`;
+    writeFileSync6(tmp, `${JSON.stringify(defaultWorkspaceSettings(), null, 2)}
+`, {
+      mode: DATA_FILE_MODE
+    });
+    renameSync5(tmp, settingsFile);
+  }
+  const db = openLocalDatabase(dataDir(home));
+  let policyCount;
+  let packCount;
+  let updatesAvailable;
+  try {
+    db.installedPacks.recordInventory(bundledDetections(), cliRecordedBy());
+    policyCount = (await db.policies.readPolicies()).length;
+    packCount = (await db.installedPacks.counts()).packs;
+    updatesAvailable = (await db.detections.listDetections({ filter: "all" })).counts.updates;
+  } finally {
+    db.close();
+  }
+  process.stdout.write(
+    `\u2713 Initialized AKA at ${home}
+  settings: ${settingsFile}${settingsCreated ? "" : " (kept existing)"}
+  database: ${dbPath(home)}
+  seeded ${String(policyCount)} default policies, ${String(packCount)} detection pack(s)
+` + (updatesAvailable > 0 ? `  \u2B06 ${String(updatesAvailable)} detection pack update(s) available \u2014 review with \`aka detections\`, apply with \`aka detections update --all\`
+` : "")
+  );
+  await offerPluginInstall(values.yes === true);
+}
+async function offerPluginInstall(autoYes) {
+  const agent = findAgent("claude-code");
+  const ref = agent ? pluginRef(agent) : void 0;
+  if (!agent || !ref) return;
+  if (installedPluginVersions().has(ref)) return;
+  const out = process.stdout;
+  if (!autoYes) {
+    if (!process.stdin.isTTY) {
+      out.write(
+        `
+No Claude Code plugin detected. Install it via the marketplace:
+  /plugin marketplace add ${agent.marketplaceSource ?? ""}
+  /plugin install ${ref}
+Or re-run \`aka init --yes\` to install it automatically.
+`
+      );
+      return;
+    }
+    if (!await confirm(`
+Install the AKA Claude Code plugin now (via the marketplace)? [y/N] `)) {
+      out.write("Skipped. Install anytime with `aka plugins install claude-code`.\n");
+      return;
+    }
+  }
+  await runPlugins(["install", "claude-code"]);
+}
+async function confirm(question) {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = (await rl.question(question)).trim().toLowerCase();
+    return answer === "y" || answer === "yes";
+  } finally {
+    rl.close();
+  }
+}
+
 // src/commands/scan.ts
 import { parseArgs as parseArgs7 } from "util";
 function severityRank(s) {
@@ -27335,7 +27377,7 @@ async function runTui(argv) {
 }
 
 // src/commands/update.ts
-import * as readline from "readline/promises";
+import * as readline2 from "readline/promises";
 import { parseArgs as parseArgs10 } from "util";
 async function runUpdate(argv) {
   const { values, positionals } = parseArgs10({
@@ -27385,7 +27427,7 @@ async function runUpdate(argv) {
       out.write("Re-run with --yes to apply (no interactive terminal detected).\n");
       return;
     }
-    if (!await confirm("Apply these updates? [y/N] ")) {
+    if (!await confirm2("Apply these updates? [y/N] ")) {
       out.write("Aborted \u2014 nothing changed.\n");
       return;
     }
@@ -27404,8 +27446,8 @@ async function runUpdate(argv) {
   }
   if (anyFailed) process.exitCode = 1;
 }
-async function confirm(question) {
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+async function confirm2(question) {
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
   try {
     const answer = (await rl.question(question)).trim().toLowerCase();
     return answer === "y" || answer === "yes";

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@akasecurity/cli",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "AI Traffic Control — local-first CLI to inspect and govern AI agent traffic on your machine",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/akasecurity/ai-tc.git",
@@ -39,13 +40,13 @@
     "typescript": "^5.8.0",
     "vitest": "^4.1.10",
     "@akasecurity/dashboard-ui": "0.8.0",
-    "@akasecurity/eslint-config": "0.8.0",
     "@akasecurity/detections": "0.8.0",
+    "@akasecurity/eslint-config": "0.8.0",
     "@akasecurity/local-ops": "0.8.0",
-    "@akasecurity/persistence": "0.8.0",
-    "@akasecurity/web-ui": "0.8.0",
     "@akasecurity/plugin-sdk": "0.8.0",
-    "@akasecurity/schema": "0.8.0"
+    "@akasecurity/schema": "0.8.0",
+    "@akasecurity/persistence": "0.8.0",
+    "@akasecurity/web-ui": "0.8.0"
   },
   "scripts": {
     "dev": "tsx src/cli.ts",

package/web-ui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-tc",
   "private": true,
-  "version": "0.8.0",
+  "version": "0.8.1",
   "packageManager": "pnpm@10.30.1",
   "type": "module",
   "engines": {

package/web-ui/web-ui/.next/BUILD_ID

@@ -1 +1 @@
-v339u67-B5AsSrzDBfv22
+X9C7-HlMI5zAQEKfIW_6e

package/web-ui/web-ui/.next/app-build-manifest.json

@@ -39,28 +39,28 @@
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/data-shares/page-485a76552d6dbabd.js"
+      "static/chunks/app/(app)/data-shares/page-548fa0d3dee6e829.js"
     ],
-    "/(app)/exceptions/new/page": [
+    "/(app)/activity/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
-      "static/chunks/338-78876603768c14bb.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/exceptions/new/page-e8498a1e48943abf.js"
+      "static/chunks/app/(app)/activity/page-f6b1b344709ee48e.js"
     ],
-    "/(app)/activity/page": [
+    "/(app)/exceptions/[id]/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
+      "static/chunks/338-78876603768c14bb.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/activity/page-f6b1b344709ee48e.js"
+      "static/chunks/app/(app)/exceptions/[id]/page-56ec5c05f347108a.js"
     ],
-    "/(app)/exceptions/[id]/page": [
+    "/(app)/exceptions/new/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
@@ -68,16 +68,17 @@
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/338-78876603768c14bb.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/exceptions/[id]/page-452be710e9e05ad5.js"
+      "static/chunks/app/(app)/exceptions/new/page-cb33dc32fd3648bf.js"
     ],
-    "/(app)/policies/page": [
+    "/(app)/exceptions/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
+      "static/chunks/338-78876603768c14bb.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/policies/page-a73f4fb185479b19.js"
+      "static/chunks/app/(app)/exceptions/page-b6fbc540ef0a50f8.js"
     ],
     "/(app)/findings/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
@@ -88,7 +89,7 @@
       "static/chunks/561-3a19cd28d2b941fa.js",
       "static/chunks/app/(app)/findings/page-94eb9d838ae00222.js"
     ],
-    "/(app)/exceptions/page": [
+    "/(app)/scan/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
@@ -96,17 +97,16 @@
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/338-78876603768c14bb.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/exceptions/page-1b841b6a60708c6d.js"
+      "static/chunks/app/(app)/scan/page-0d43a6b2acafe349.js"
     ],
-    "/(app)/scan/page": [
+    "/(app)/policies/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
-      "static/chunks/338-78876603768c14bb.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/scan/page-158ed3ad2cee998b.js"
+      "static/chunks/app/(app)/policies/page-a73f4fb185479b19.js"
     ],
     "/(app)/inventory/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
@@ -115,34 +115,34 @@
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/inventory/page-dd61001da0f891d3.js"
+      "static/chunks/app/(app)/inventory/page-89cf3ac5a30e76a0.js"
     ],
-    "/(app)/settings/page": [
+    "/(app)/security/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/settings/page-b9fba600c590896d.js"
+      "static/chunks/app/(app)/security/page-2675f7fb69829b71.js"
     ],
-    "/(app)/security/page": [
+    "/(app)/updates/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/security/page-2675f7fb69829b71.js"
+      "static/chunks/app/(app)/updates/page-b9607b5e2e8700d6.js"
     ],
-    "/(app)/updates/page": [
+    "/(app)/settings/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
       "static/chunks/813c9d6d-dc0a9294021710c1.js",
       "static/chunks/496-a8b6c34560896a23.js",
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/updates/page-241fdcbac6e942aa.js"
+      "static/chunks/app/(app)/settings/page-2cf02a09402cfb4d.js"
     ],
     "/(app)/detections/page": [
       "static/chunks/webpack-14166b28d6557de1.js",
@@ -151,7 +151,7 @@
       "static/chunks/main-app-23de550d13c8bec1.js",
       "static/chunks/24-b20c857178647805.js",
       "static/chunks/561-3a19cd28d2b941fa.js",
-      "static/chunks/app/(app)/detections/page-8030433ea5c099fa.js"
+      "static/chunks/app/(app)/detections/page-0bfa1f371b65b5ad.js"
     ]
   }
 }

package/web-ui/web-ui/.next/app-path-routes-manifest.json

@@ -3,16 +3,16 @@
   "/icon.svg/route": "/icon.svg",
   "/page": "/",
   "/(app)/data-shares/page": "/data-shares",
-  "/(app)/exceptions/new/page": "/exceptions/new",
   "/(app)/activity/page": "/activity",
   "/(app)/exceptions/[id]/page": "/exceptions/[id]",
-  "/(app)/policies/page": "/policies",
-  "/(app)/findings/page": "/findings",
+  "/(app)/exceptions/new/page": "/exceptions/new",
   "/(app)/exceptions/page": "/exceptions",
+  "/(app)/findings/page": "/findings",
   "/(app)/scan/page": "/scan",
+  "/(app)/policies/page": "/policies",
   "/(app)/inventory/page": "/inventory",
-  "/(app)/settings/page": "/settings",
   "/(app)/security/page": "/security",
   "/(app)/updates/page": "/updates",
+  "/(app)/settings/page": "/settings",
   "/(app)/detections/page": "/detections"
 }

package/web-ui/web-ui/.next/build-manifest.json

@@ -5,8 +5,8 @@
   "devFiles": [],
   "ampDevFiles": [],
   "lowPriorityFiles": [
-    "static/v339u67-B5AsSrzDBfv22/_buildManifest.js",
-    "static/v339u67-B5AsSrzDBfv22/_ssgManifest.js"
+    "static/X9C7-HlMI5zAQEKfIW_6e/_buildManifest.js",
+    "static/X9C7-HlMI5zAQEKfIW_6e/_ssgManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/webpack-14166b28d6557de1.js",

package/web-ui/web-ui/.next/prerender-manifest.json

@@ -83,8 +83,8 @@
   "dynamicRoutes": {},
   "notFoundRoutes": [],
   "preview": {
-    "previewModeId": "1048fa6b1a02e520280e964e3be83829",
-    "previewModeSigningKey": "7f408aa12fef32a53d71b5c602d7c2e93d17c67d02eab7071b34e908e6194019",
-    "previewModeEncryptionKey": "7ebfe5926a83e25c333ddf5e2d99ad2cfd0e74b8424a592cfe25fb4970aab1fb"
+    "previewModeId": "d66736362409713162de3a642f464f95",
+    "previewModeSigningKey": "5d6d5267953a01552658391e640b133717a44f5438b64f1d5371c93ec2b1cbe2",
+    "previewModeEncryptionKey": "8aff86254474fb4462a6d1bf78ba2713a98a52e9c10891375db1f1fafc2375ad"
   }
 }