@axisagent/cli 0.1.0 → 0.1.1

package/dist/cli.js

@@ -23,13 +23,36 @@ function printHelp() {
 Commands:
   list [--chain Base] [--json]
   inspect <skill-id> [--json]
-  install <skill-id> [--target .axis/skills]
-  scan <skill-dir>
+  install <skill-id> [--target .axis/skills] [--scan] [--json]
+  scan <skill-dir> [--json]
   validate
   connect [--pair AXIS-4821] [--api https://api.axisagent.xyz] [--once]
   serve [--port 8788]
 `);
 }
+function severityIcon(severity) {
+    if (severity === "safe")
+        return "OK";
+    if (severity === "warning")
+        return "REVIEW";
+    return "BLOCKED";
+}
+function formatScanReport(skillDir, result) {
+    const lines = [
+        `Axis Scan ${result.ok ? "passed" : "blocked"}`,
+        `Path: ${skillDir}`,
+        ""
+    ];
+    if (result.policy) {
+        lines.push("Policy", `  Skill: ${result.policy.id ?? "unknown"}`, `  Risk: ${result.policy.risk ?? "unknown"}`, `  Mode: ${result.policy.executionMode ?? "unknown"}`, `  Approval: ${result.policy.requiresApproval ? "required" : "not required"}`, `  Wallet write: ${result.policy.walletWrite ? "declared" : "none"}`, `  Max spend: ${result.policy.maxSpendUsd == null ? "none" : `$${result.policy.maxSpendUsd}`}`, `  Permissions: ${(result.policy.permissions ?? []).join(", ") || "none"}`, "");
+    }
+    lines.push("Checks");
+    for (const finding of result.findings) {
+        lines.push(`  [${severityIcon(finding.severity)}] ${finding.label}: ${finding.value}`);
+    }
+    lines.push("", "Next", result.ok ? "  Return to Axis and review the Axis Check before execution." : "  Fix blocked checks before using this skill.", "  Never approve wallet or market actions without reading the preview.");
+    return lines.join("\n");
+}
 async function run() {
     if (command === "help" || command === "--help" || command === "-h") {
         printHelp();
@@ -64,17 +87,36 @@ async function run() {
         const target = resolve(userCwd, getOption("--target", ".axis/skills") ?? ".axis/skills");
         await mkdir(target, { recursive: true });
         const result = await writeSkillPackage(id, target);
-        console.log(`Installed ${result.skill.id}`);
+        const scan = hasFlag("--scan") ? await scanSkillPackage(result.skillDir) : null;
+        if (hasFlag("--json")) {
+            console.log(JSON.stringify({ installed: result.skill.id, path: result.skillDir, files: result.files, scan }, null, 2));
+            if (scan && !scan.ok)
+                process.exitCode = 1;
+            return;
+        }
+        console.log(`Axis Install complete`);
+        console.log(`Skill: ${result.skill.id}`);
         console.log(`Path: ${result.skillDir}`);
         console.log(`Files: ${result.files.join(", ")}`);
+        if (scan) {
+            console.log("");
+            console.log(formatScanReport(result.skillDir, scan));
+            if (!scan.ok)
+                process.exitCode = 1;
+        }
+        else {
+            console.log("");
+            console.log(`Next: npx @axisagent/cli scan ${result.skillDir}`);
+        }
         return;
     }
     if (command === "scan") {
         const target = args[1];
         if (!target)
             throw new Error("Missing skill directory.");
-        const result = await scanSkillPackage(resolve(userCwd, target));
-        console.log(JSON.stringify(result, null, 2));
+        const skillDir = resolve(userCwd, target);
+        const result = await scanSkillPackage(skillDir);
+        console.log(hasFlag("--json") ? JSON.stringify(result, null, 2) : formatScanReport(skillDir, result));
         if (!result.ok)
             process.exitCode = 1;
         return;

package/dist/packageWriter.d.ts

@@ -1,3 +1,20 @@
+export type ScanResult = {
+    ok: boolean;
+    findings: Array<{
+        label: string;
+        severity: "safe" | "warning" | "blocked";
+        value: string;
+    }>;
+    policy?: {
+        id?: string;
+        risk?: string;
+        executionMode?: string;
+        permissions?: string[];
+        requiresApproval?: boolean;
+        walletWrite?: boolean;
+        maxSpendUsd?: number | null;
+    };
+};
 export declare function writeSkillPackage(skillId: string, targetDir: string): Promise<{
     skill: {
         id: string;
@@ -31,11 +48,4 @@ export declare function writeSkillPackage(skillId: string, targetDir: string): P
     skillDir: string;
     files: string[];
 }>;
-export declare function scanSkillPackage(skillDir: string): Promise<{
-    ok: boolean;
-    findings: {
-        label: string;
-        severity: "safe" | "warning" | "blocked";
-        value: string;
-    }[];
-}>;
+export declare function scanSkillPackage(skillDir: string): Promise<ScanResult>;

package/dist/packageWriter.js

@@ -43,6 +43,15 @@ export async function scanSkillPackage(skillDir) {
     }
     return {
         ok: findings.every((finding) => finding.severity !== "blocked"),
-        findings
+        findings,
+        policy: {
+            id: policyJson.id,
+            risk: policyJson.risk,
+            executionMode: policyJson.executionMode,
+            permissions: policyJson.permissions ?? [],
+            requiresApproval: policyJson.policy?.requiresApproval,
+            walletWrite: policyJson.policy?.walletWrite,
+            maxSpendUsd: policyJson.policy?.maxSpendUsd
+        }
     };
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@axisagent/cli",
   "private": false,
-  "version": "0.1.0",
+  "version": "0.1.1",
   "type": "module",
   "description": "Local Axis runtime, skill registry, policy validator, and CLI.",
   "license": "MIT",