@arcjet/skills 1.12.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,153 @@
+<!-- trunk-ignore-all(markdownlint/MD024) -->
+<!-- trunk-ignore-all(markdownlint/MD001) -->
+
+<a href="https://arcjet.com" target="_arcjet-home">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://arcjet.com/logo/arcjet-dark-lockup-voyage-horizontal.svg">
+    <img src="https://arcjet.com/logo/arcjet-light-lockup-voyage-horizontal.svg" alt="Arcjet Logo" height="128" width="auto">
+  </picture>
+</a>
+
+# `@arcjet/skills`
+
+<p>
+  <a href="https://www.npmjs.com/package/@arcjet/skills">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://img.shields.io/npm/v/%40arcjet%2Fskills?style=flat-square&label=%E2%9C%A6Aj&labelColor=000000&color=5C5866">
+      <img alt="npm badge" src="https://img.shields.io/npm/v/%40arcjet%2Fskills?style=flat-square&label=%E2%9C%A6Aj&labelColor=ECE6F0&color=ECE6F0">
+    </picture>
+  </a>
+</p>
+
+Versioned [Agent Skills](https://agentskills.io) for the Arcjet JavaScript SDK,
+shipped with [TanStack Intent](https://tanstack.com/intent).
+
+- [npm package (`@arcjet/skills`)](https://www.npmjs.com/package/@arcjet/skills)
+- [GitHub source code (`arcjet-skills/` in `arcjet/arcjet-js`)](https://github.com/arcjet/arcjet-js/tree/main/arcjet-skills)
+
+Skills travel with the installed package version. They are not a copy-pasted
+rules file and they are not the model's training cutoff.
+
+The standalone marketplace install (`npx skills add arcjet/skills`) still
+works from [`arcjet/skills`](https://github.com/arcjet/skills). Prefer this
+package when you want skills that match the SDK version in `node_modules`.
+
+## What is this?
+
+A TypeScript package that publishes:
+
+- `skills/*/SKILL.md` — agent guidance, one skill per task
+- `docs/*.md` — the source documentation those skills were derived from
+- a small typed manifest (`skills`, `skillIdentity`) for the shipped leaf names
+
+TanStack Intent discovers the `SKILL.md` files as static files. It does not
+import or execute this package (or any other package) to find them.
+
+## Install
+
+This package is ESM only.
+
+```sh
+npm install @arcjet/skills
+```
+
+Framework adapters that depend on `arcjet` also install this package
+transitively, so a typical `@arcjet/next` app already has the files on disk.
+
+Guard integration skills ship in [`@arcjet/guard`](../arcjet-guard/README.md)
+next to that package's README. Allow both packages if you use Guard.
+
+## Use with TanStack Intent
+
+Intent scans installed dependencies for `skills/**/SKILL.md`. Discovery is
+not trust. Put an explicit allowlist in the **application** `package.json`:
+
+```json
+{
+  "intent": {
+    "skills": ["@arcjet/skills", "@arcjet/guard"],
+    "exclude": []
+  }
+}
+```
+
+`intent.skills` permits packages, not individual skills. Use `intent.exclude`
+to drop a package or one skill (`@arcjet/guard#integrate-arcjet-guard-eve`).
+
+An omitted `intent.skills` key currently surfaces every discovered package
+and prints a deprecation notice. Do not use `"skills": ["*"]` unless you
+accept unvetted skills from the whole tree.
+
+```sh
+npx @tanstack/intent@latest install
+npx @tanstack/intent@latest list
+npx @tanstack/intent@latest load @arcjet/skills#protect
+```
+
+`install` writes loading guidance to `AGENTS.md` (or an existing agent
+config). `list` shows what the allowlist permits. `load` prints one
+`SKILL.md` — load only the skill the current task needs.
+
+| Task | Load |
+| --- | --- |
+| HTTP routes, APIs, middleware | `@arcjet/skills#protect` |
+| Which rules to apply | `@arcjet/skills#choose-protections` |
+| Sign in and write `ARCJET_KEY` | `@arcjet/skills#cli` |
+| MCP server setup | `@arcjet/skills#mcp` |
+| Tool calls, MCP handlers, jobs | `@arcjet/skills#guard` |
+| A specific Guard vendor SDK | `@arcjet/guard#integrate-arcjet-guard-*` |
+
+### Trust model
+
+- Intent reads package metadata and skill files. It does not execute package
+  code to discover or load a skill.
+- The allowlist and exclusions are the trust decision.
+- `intent load` returning content means the file resolved under current
+  policy. It does not mean the skill was relevant or that the model followed
+  it.
+- `npx @tanstack/intent@latest hooks install` can add session catalogs and
+  edit gates for some agents. Treat those hooks as convenience, not a
+  security boundary. They can observe a load command; they cannot prove the
+  agent used the guidance.
+
+## Typed manifest
+
+```ts
+import {
+  PACKAGE_NAME,
+  VERSION,
+  getSkill,
+  skillIdentity,
+  skills,
+} from "@arcjet/skills";
+
+skillIdentity("protect"); // "@arcjet/skills#protect"
+getSkill("cli")?.file; // "skills/cli/SKILL.md"
+```
+
+This list is for this package only. It does not scan other dependencies.
+
+## Maintainers
+
+Skill files live beside the docs they were derived from (`docs/` in this
+package; `README.md` for `@arcjet/guard` skills). Each `SKILL.md` declares
+those paths in `sources`.
+
+```sh
+npx @tanstack/intent@latest validate
+npx @tanstack/intent@latest stale --json
+```
+
+`validate` is required in CI. `stale` is conservative: a changed source is a
+review signal, not proof the skill is wrong. CI fails a pull request when a
+declared source changes and the matching `SKILL.md` does not.
+
+The `tanstack-intent` keyword and the `skills/` `files` entry put the skills
+in the npm tarball so the registry can index them.
+
+## License
+
+[Apache License, Version 2.0][apache-license] © [Arcjet Labs, Inc.][arcjet]
+
+[apache-license]: http://www.apache.org/licenses/LICENSE-2.0
+[arcjet]: https://arcjet.com

package/dist/index.d.ts

@@ -0,0 +1,51 @@
+import { VERSION } from "./version.js";
+//#region src/index.d.ts
+/**
+ * npm package name that TanStack Intent discovers as a skill source.
+ */
+declare const PACKAGE_NAME: "@arcjet/skills";
+/**
+ * Leaf skill names shipped in this package. Each matches
+ * `skills/<name>/SKILL.md`.
+ */
+type SkillName = "choose-protections" | "cli" | "guard" | "mcp" | "protect";
+/**
+ * Static manifest for one shipped skill. Intent reads the `SKILL.md` files
+ * themselves; this export is for TypeScript consumers who want identities
+ * without scanning `node_modules`.
+ */
+interface SkillManifest {
+  readonly name: SkillName;
+  /**
+   * When to load this skill. Kept in sync with the `SKILL.md` description.
+   */
+  readonly description: string;
+  /**
+   * Path to `SKILL.md` relative to the published package root.
+   */
+  readonly file: string;
+  /**
+   * Documentation this skill was derived from, relative to the package root.
+   * Conservative stale checks flag these files when they change.
+   */
+  readonly sources: readonly string[];
+}
+/**
+ * Skills shipped in this package version. Load only the entry that matches
+ * the current task (`@arcjet/skills#<name>`).
+ */
+declare const skills: readonly SkillManifest[];
+/**
+ * Format a TanStack Intent load identity (`@arcjet/skills#protect`).
+ */
+declare function skillIdentity(name: SkillName): string;
+/**
+ * Look up one shipped skill by leaf name.
+ */
+declare function getSkill(name: SkillName): SkillManifest | undefined;
+/**
+ * Package version these skills were published with.
+ */
+declare function skillLibraryVersion(): string;
+//#endregion
+export { PACKAGE_NAME, SkillManifest, SkillName, VERSION, getSkill, skillIdentity, skillLibraryVersion, skills };

package/dist/index.js

@@ -0,0 +1,62 @@
+import { VERSION } from "./version.js";
+//#region src/index.ts
+/**
+* npm package name that TanStack Intent discovers as a skill source.
+*/
+const PACKAGE_NAME = "@arcjet/skills";
+/**
+* Skills shipped in this package version. Load only the entry that matches
+* the current task (`@arcjet/skills#<name>`).
+*/
+const skills = [
+	{
+		name: "protect",
+		description: "Add Arcjet request protection to JavaScript and TypeScript HTTP handlers. Use when protecting Next.js, Express, Fastify, SvelteKit, Remix, Astro, Nuxt, Bun, Deno, NestJS, or Node.js routes with rate limiting, bot detection, Shield, email validation, or sensitive info detection.",
+		file: "skills/protect/SKILL.md",
+		sources: ["docs/protect.md"]
+	},
+	{
+		name: "choose-protections",
+		description: "Choose which Arcjet rules address a security problem. Use when deciding between detectBot, shield, rate limits, detectPromptInjection, sensitiveInfo, validateEmail, filter, or Guard-only content moderation.",
+		file: "skills/choose-protections/SKILL.md",
+		sources: ["docs/choose-protections.md"]
+	},
+	{
+		name: "cli",
+		description: "Connect a project to Arcjet with the CLI: sign in, pick a team and site, and write ARCJET_KEY. Use when bootstrapping Arcjet, listing requests or guards, or managing remote rules from a terminal.",
+		file: "skills/cli/SKILL.md",
+		sources: ["docs/cli.md"]
+	},
+	{
+		name: "mcp",
+		description: "Connect an AI coding client to the Arcjet MCP server at https://api.arcjet.com/mcp. Use when the client has built-in MCP support or the CLI is not available.",
+		file: "skills/mcp/SKILL.md",
+		sources: ["docs/mcp.md"]
+	},
+	{
+		name: "guard",
+		description: "Add Arcjet Guard to non-HTTP JavaScript: agent tool calls, MCP handlers, queue workers, and background jobs. Use when there is no HTTP request object, or when the user asks to guard tools, rate-limit agent actions, or block prompt injection on tool arguments.",
+		file: "skills/guard/SKILL.md",
+		sources: ["docs/guard.md"]
+	}
+];
+/**
+* Format a TanStack Intent load identity (`@arcjet/skills#protect`).
+*/
+function skillIdentity(name) {
+	return `${PACKAGE_NAME}#${name}`;
+}
+/**
+* Look up one shipped skill by leaf name.
+*/
+function getSkill(name) {
+	return skills.find((skill) => skill.name === name);
+}
+/**
+* Package version these skills were published with.
+*/
+function skillLibraryVersion() {
+	return VERSION;
+}
+//#endregion
+export { PACKAGE_NAME, VERSION, getSkill, skillIdentity, skillLibraryVersion, skills };

package/dist/version.d.ts

@@ -0,0 +1,5 @@
+//#region src/version.d.ts
+/** Package version. Updated by the release process. */
+declare const VERSION: string;
+//#endregion
+export { VERSION };

package/dist/version.js

@@ -0,0 +1,5 @@
+//#region src/version.ts
+/** Package version. Updated by the release process. */
+const VERSION = "1.12.0";
+//#endregion
+export { VERSION };

package/docs/choose-protections.md

@@ -0,0 +1,70 @@
+# Choose Arcjet protections
+
+Map a product problem to Arcjet rules. JavaScript and TypeScript SDK names.
+
+## Automated traffic and bot abuse
+
+**Rule:** `detectBot` (request-based only). Pass exactly one of `allow` or
+`deny`. `allow` is a safelist. `deny` blocks listed categories. Empty
+`allow: []` blocks every detected bot. Combine with rate limiting.
+
+Bot rules can also be configured as remote rules via the CLI or MCP server.
+
+## Cost explosion and budget control
+
+**Rules:** `tokenBucket`, `fixedWindow`, `slidingWindow` (request-based and
+Guard).
+
+Token bucket fits variable-cost AI work — set `requested` per call. Fixed
+window is a hard cap at period boundaries. Sliding window avoids boundary
+bursts.
+
+Request-based rate limits default to the client IP. Use
+`characteristics: ["userId"]` to key by something else. Guard rate limits
+always need an explicit `key` and `bucket`.
+
+## Prompt injection
+
+**Rule:** `detectPromptInjection` (request-based and Guard). Use on untrusted
+text before it reaches a model or tool argument, and on tool results that
+fetch untrusted content. The rule is a binary detect — there is no
+`threshold` or `score`.
+
+## Unsafe content
+
+**Rule:** Guard `moderateContent` only (not available on `protect()`). The
+result is `{ detected, billing? }` (`text_units` when present). Check
+`hasFailedOpen()` when evaluation is incomplete.
+
+## Data loss prevention
+
+Detection runs locally. The default WebAssembly backend finds exactly four
+structured types: card numbers, email addresses, phone numbers, and IP
+addresses. Names, addresses, and government or financial identifiers need
+`@arcjet/sensitive-info-rampart` (`rampart()`), which needs a server runtime
+with filesystem access. Listing a Rampart-only entity without that backend
+never matches.
+
+**Rules:** `sensitiveInfo` (request-based) and `localDetectSensitiveInfo`
+(Guard).
+
+## Unauthorized tool invocation
+
+Guard protection with per-tool rate limits and labels. `capture()` records
+that an action happened; it is not a protection rule.
+
+## Common web attacks
+
+**Rule:** `shield` (request-based only). Include it on the shared client as a
+base rule. Omitted `mode` is dry run — pass `LIVE` to enforce.
+
+## Signup abuse
+
+**Rules:** `validateEmail` plus `protectSignup` (request-based only).
+`protectSignup` is one composite rule: bot detection, email validation, and
+rate limiting.
+
+## IP-based filtering
+
+**Rule:** `filter` (request-based only). Can also be a remote rule via CLI or
+MCP.

package/docs/cli.md

@@ -0,0 +1,65 @@
+# Arcjet CLI
+
+The CLI is the preferred way to connect to the Arcjet platform from a terminal.
+
+## Install
+
+```bash
+npx -y @arcjet/cli@latest <command>
+```
+
+For frequent use:
+
+```bash
+npm install -g @arcjet/cli
+# or
+brew install arcjet/tap/arcjet
+# or (macOS Apple Silicon/Intel, Linux x86_64/arm64)
+curl -sSfL https://arcjet.com/cli/install.sh | bash
+```
+
+Or download a release from https://github.com/arcjet/cli/releases.
+
+Verify: `arcjet version`
+
+## Authentication
+
+Most users will not have `ARCJET_TOKEN` set. Use the browser device flow:
+
+```bash
+npx -y @arcjet/cli@latest auth status
+npx -y @arcjet/cli@latest auth login
+```
+
+The CLI prints a one-time code and opens a URL. Do not prompt the user for a
+token. Check `auth status` before continuing.
+
+## Agent flags
+
+- `--output json` — machine-readable JSON
+- `--fields a,b,c` — limit output to listed top-level keys
+
+## Bootstrap a project
+
+```bash
+npx -y @arcjet/cli@latest teams list --output json --fields id,name
+npx -y @arcjet/cli@latest sites list --team-id <team_id> --output json --fields id,name
+# if needed:
+npx -y @arcjet/cli@latest sites create --team-id <team_id> --name "<project>"
+npx -y @arcjet/cli@latest sites get-key --site-id <site_id> --output json --fields key
+```
+
+Write the `key` value to the project's env file as `ARCJET_KEY=ajkey_...`.
+Match existing env-file conventions. Never hardcode the key in source.
+
+## Investigate
+
+- Requests: `requests list` → `requests details` → `requests explain`
+- Guards: `guards list` → `guards explain`
+- Briefing: `briefing --site-id <id>`
+- Remote rules: `rules list` → `rules create` (DRY_RUN) → `analyze dry-run-impact` → `rules promote`
+
+Mutating commands require `--confirm`. Confirm with the user before
+write or delete operations.
+
+Site IDs use `site_` TypeID format. Team IDs use `team_`.