@axisagent/cli 0.1.0 → 0.1.2

package/dist/cli.js

@@ -23,13 +23,36 @@ function printHelp() {
 Commands:
   list [--chain Base] [--json]
   inspect <skill-id> [--json]
-  install <skill-id> [--target .axis/skills]
-  scan <skill-dir>
+  install <skill-id> [--target .axis/skills] [--scan] [--json]
+  scan <skill-dir> [--json]
   validate
   connect [--pair AXIS-4821] [--api https://api.axisagent.xyz] [--once]
   serve [--port 8788]
 `);
 }
+function severityIcon(severity) {
+    if (severity === "safe")
+        return "OK";
+    if (severity === "warning")
+        return "REVIEW";
+    return "BLOCKED";
+}
+function formatScanReport(skillDir, result) {
+    const lines = [
+        `Axis Scan ${result.ok ? "passed" : "blocked"}`,
+        `Path: ${skillDir}`,
+        ""
+    ];
+    if (result.policy) {
+        lines.push("Policy", `  Skill: ${result.policy.id ?? "unknown"}`, `  Risk: ${result.policy.risk ?? "unknown"}`, `  Mode: ${result.policy.executionMode ?? "unknown"}`, `  Approval: ${result.policy.requiresApproval ? "required" : "not required"}`, `  Wallet write: ${result.policy.walletWrite ? "declared" : "none"}`, `  Max spend: ${result.policy.maxSpendUsd == null ? "none" : `$${result.policy.maxSpendUsd}`}`, `  Permissions: ${(result.policy.permissions ?? []).join(", ") || "none"}`, "");
+    }
+    lines.push("Checks");
+    for (const finding of result.findings) {
+        lines.push(`  [${severityIcon(finding.severity)}] ${finding.label}: ${finding.value}`);
+    }
+    lines.push("", "Next", result.ok ? "  Return to Axis and review the Axis Check before execution." : "  Fix blocked checks before using this skill.", "  Never approve wallet or market actions without reading the preview.");
+    return lines.join("\n");
+}
 async function run() {
     if (command === "help" || command === "--help" || command === "-h") {
         printHelp();
@@ -64,17 +87,36 @@ async function run() {
         const target = resolve(userCwd, getOption("--target", ".axis/skills") ?? ".axis/skills");
         await mkdir(target, { recursive: true });
         const result = await writeSkillPackage(id, target);
-        console.log(`Installed ${result.skill.id}`);
+        const scan = hasFlag("--scan") ? await scanSkillPackage(result.skillDir) : null;
+        if (hasFlag("--json")) {
+            console.log(JSON.stringify({ installed: result.skill.id, path: result.skillDir, files: result.files, scan }, null, 2));
+            if (scan && !scan.ok)
+                process.exitCode = 1;
+            return;
+        }
+        console.log(`Axis Install complete`);
+        console.log(`Skill: ${result.skill.id}`);
         console.log(`Path: ${result.skillDir}`);
         console.log(`Files: ${result.files.join(", ")}`);
+        if (scan) {
+            console.log("");
+            console.log(formatScanReport(result.skillDir, scan));
+            if (!scan.ok)
+                process.exitCode = 1;
+        }
+        else {
+            console.log("");
+            console.log(`Next: npx @axisagent/cli scan ${result.skillDir}`);
+        }
         return;
     }
     if (command === "scan") {
         const target = args[1];
         if (!target)
             throw new Error("Missing skill directory.");
-        const result = await scanSkillPackage(resolve(userCwd, target));
-        console.log(JSON.stringify(result, null, 2));
+        const skillDir = resolve(userCwd, target);
+        const result = await scanSkillPackage(skillDir);
+        console.log(hasFlag("--json") ? JSON.stringify(result, null, 2) : formatScanReport(skillDir, result));
         if (!result.ok)
             process.exitCode = 1;
         return;

package/dist/packageWriter.d.ts

@@ -1,3 +1,20 @@
+export type ScanResult = {
+    ok: boolean;
+    findings: Array<{
+        label: string;
+        severity: "safe" | "warning" | "blocked";
+        value: string;
+    }>;
+    policy?: {
+        id?: string;
+        risk?: string;
+        executionMode?: string;
+        permissions?: string[];
+        requiresApproval?: boolean;
+        walletWrite?: boolean;
+        maxSpendUsd?: number | null;
+    };
+};
 export declare function writeSkillPackage(skillId: string, targetDir: string): Promise<{
     skill: {
         id: string;
@@ -31,11 +48,4 @@ export declare function writeSkillPackage(skillId: string, targetDir: string): P
     skillDir: string;
     files: string[];
 }>;
-export declare function scanSkillPackage(skillDir: string): Promise<{
-    ok: boolean;
-    findings: {
-        label: string;
-        severity: "safe" | "warning" | "blocked";
-        value: string;
-    }[];
-}>;
+export declare function scanSkillPackage(skillDir: string): Promise<ScanResult>;

package/dist/packageWriter.js

@@ -43,6 +43,15 @@ export async function scanSkillPackage(skillDir) {
     }
     return {
         ok: findings.every((finding) => finding.severity !== "blocked"),
-        findings
+        findings,
+        policy: {
+            id: policyJson.id,
+            risk: policyJson.risk,
+            executionMode: policyJson.executionMode,
+            permissions: policyJson.permissions ?? [],
+            requiresApproval: policyJson.policy?.requiresApproval,
+            walletWrite: policyJson.policy?.walletWrite,
+            maxSpendUsd: policyJson.policy?.maxSpendUsd
+        }
     };
 }

package/dist/relayClient.js

@@ -1,4 +1,4 @@
-import { access, readdir } from "node:fs/promises";
+import { access, mkdir, readdir, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { getRegistryStats } from "./skillRegistry.js";
@@ -73,6 +73,50 @@ async function postJson(url, body, token) {
     }
     return payload;
 }
+function safeTaskFileName(task) {
+    const title = task.title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 64) || "task";
+    return `${new Date(task.createdAt).toISOString().replace(/[:.]/g, "-")}-${title}.md`;
+}
+async function writeTaskInbox(baseDir, task) {
+    const inboxDir = join(baseDir, ".axis", "inbox");
+    await mkdir(inboxDir, { recursive: true });
+    const filePath = join(inboxDir, safeTaskFileName(task));
+    const body = [
+        `# ${task.title}`,
+        "",
+        `- Task: ${task.id}`,
+        `- Kind: ${task.kind}`,
+        `- Target: ${task.targetAgent}`,
+        `- Skill: ${task.skillId ?? "n/a"}`,
+        `- Created: ${task.createdAt}`,
+        "",
+        task.command ? "## Command\n" : "",
+        task.command ? `\`\`\`bash\n${task.command}\n\`\`\`\n` : "",
+        "## Prompt",
+        "",
+        task.prompt,
+        "",
+        "## Axis Rule",
+        "",
+        "Do not execute wallet, API, market, or payment actions until the user approves the Axis review ticket."
+    ].filter(Boolean).join("\n");
+    await writeFile(filePath, body, "utf8");
+    return filePath;
+}
+async function processRelayTasks(baseDir, tasks) {
+    for (const task of tasks) {
+        const filePath = await writeTaskInbox(baseDir, task);
+        console.log("");
+        console.log(`Axis task received: ${task.title}`);
+        console.log(`Target: ${task.targetAgent}`);
+        if (task.command)
+            console.log(`Command: ${task.command}`);
+        console.log(`Inbox: ${filePath}`);
+        console.log("Prompt:");
+        console.log(task.prompt);
+        console.log("");
+    }
+}
 async function createRelayPayload(baseDir, pairingCode) {
     return {
         pairingCode,
@@ -105,5 +149,8 @@ export async function connectRelay(options) {
         const heartbeatPayload = await createRelayPayload(options.baseDir, pairingCode);
         const heartbeat = await postJson(`${apiUrl}/v1/relay/${pairingCode}/heartbeat`, heartbeatPayload, connected.relayToken);
         console.log(`[${heartbeat.session.lastSeenAt}] relay ${heartbeat.session.status}`);
+        if (heartbeat.tasks?.length) {
+            await processRelayTasks(options.baseDir, heartbeat.tasks);
+        }
     }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@axisagent/cli",
   "private": false,
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module",
   "description": "Local Axis runtime, skill registry, policy validator, and CLI.",
   "license": "MIT",