@getaegis/cli 0.9.2 → 0.9.4

package/README.md

@@ -5,28 +5,45 @@
 [![Docker](https://img.shields.io/badge/ghcr.io-getaegis%2Faegis-blue?logo=docker)](https://ghcr.io/getaegis/aegis)
 [![License](https://img.shields.io/github/license/getaegis/aegis)](LICENSE)
 
-**Credential isolation for AI agents.**
-
-Aegis sits between your AI agent and the APIs it calls. The agent never sees, stores, or transmits real credentials — Aegis injects them at the network boundary.
-
-```
-┌──────────┐       ┌────────────────────────────┐       ┌──────────────┐
-│ AI Agent │──────▶│         Aegis Gate         │──────▶│  Slack API   │
-│          │       │  localhost:3100/slack/...  │       │              │
-│ (no keys)│◀──────│  inject creds + audit log  │◀──────│ api.slack.com│
-└──────────┘       └────────────────────────────┘       └──────────────┘
-                          │            │
-                   ┌──────┘            └──────┐
-              ┌────▼────┐           ┌─────────▼──┐
-              │  Vault  │           │   Ledger   │
-              │ AES-256 │           │  Audit Log │
-              │ encrypt │           │   SQLite   │
-              └─────────┘           └────────────┘
+**Stop putting API keys where AI agents can read them.**
+
+Aegis is a local-first credential isolation proxy for AI agents. It sits between your agent and the APIs it calls — injecting secrets at the network boundary so the agent never sees, stores, or transmits real credentials.
+
+<p align="center">
+  <img src="docs/assets/demo.gif" alt="Aegis demo" width="720" />
+</p>
+
+## How It Works
+
+```mermaid
+graph LR
+    Agent["🤖 AI Agent<br/><i>No credentials</i>"]
+    Gate["🛡️ Aegis Gate<br/><i>localhost:3100</i>"]
+    Check{"② Domain<br/>allowed?"}
+    API["🌐 Target API<br/><i>slack.com, github.com</i>"]
+    Ledger["📋 Ledger"]
+
+    Agent -->|"① HTTP request<br/>(no auth headers)"| Gate
+    Gate --> Check
+    Check -->|"Yes"| Inject
+    Inject["③ Inject credential"] -->|"Forward over HTTPS"| API
+    API -->|"④ Response"| Gate
+    Gate -->|"⑤ Return response<br/>(credential stripped)"| Agent
+    Check -->|"No"| Block["🚫 Blocked"]
+    Gate -.->|"Log every request"| Ledger
+
+    style Agent fill:#1a1f26,stroke:#C8973E,color:#e8ecef
+    style Gate fill:#1a1f26,stroke:#C8973E,color:#C8973E,stroke-width:2px
+    style Check fill:#1a1f26,stroke:#C8973E,color:#e8ecef
+    style Inject fill:#1a1f26,stroke:#C8973E,color:#e8ecef
+    style API fill:#1a1f26,stroke:#666,color:#e8ecef
+    style Block fill:#1a1f26,stroke:#e74c3c,color:#e74c3c
+    style Ledger fill:#1a1f26,stroke:#C8973E,color:#e8ecef
 ```
 
 ## Why?
 
-AI agents (Claude, GPT, Cursor, custom bots) increasingly need to call APIs — Slack, GitHub, databases, internal tools. The current pattern is dangerous:
+AI agents (Claude, GPT, Cursor, custom bots) increasingly call real APIs — Slack, GitHub, Stripe, databases. The current pattern is dangerous:
 
 1. **Agents see raw API keys** — one prompt injection exfiltrates them
 2. **No domain guard** — a compromised agent can send your Slack token to `evil.com`
@@ -35,48 +52,15 @@ AI agents (Claude, GPT, Cursor, custom bots) increasingly need to call APIs —
 
 Aegis solves all four. Your agent makes HTTP calls through a local proxy. Aegis handles authentication, enforces domain restrictions, and logs everything.
 
-## Prerequisites
-
-- **Node.js ≥ 20** — check with `node -v`
-
 ## Quick Start
 
 ```bash
-# Install globally
+# Install
 npm install -g @getaegis/cli
 
-# Initialize — generates master key, config file, and encrypted vault
+# Initialize (stores master key in OS keychain by default)
 aegis init
-```
-
-By default, `aegis init` stores the master key in your OS keychain (macOS Keychain, Windows Credential Manager, or Linux Secret Service). If no keychain is available, it falls back to a file at `.aegis/.master-key` (mode 0600).
-
-Alternative storage modes:
-
-```bash
-# Store in .env file (for CI/headless environments)
-aegis init --env-file
 
-# Store in aegis.config.yaml (convenient for local dev, not recommended for production)
-aegis init --write-secrets
-
-# Check where your master key is stored
-aegis key where
-```
-
-**Master key resolution order** (highest priority wins):
-
-| Priority | Source | Set by |
-|----------|--------|--------|
-| 1 | `AEGIS_MASTER_KEY` environment variable | `export` in shell |
-| 2 | `.env` file | `aegis init --env-file` |
-| 3 | `aegis.config.yaml` (`vault.master_key`) | `aegis init --write-secrets` |
-| 4 | OS keychain (macOS/Windows/Linux) | `aegis init` (default) |
-| 5 | File fallback (`.aegis/.master-key`) | Auto when no keychain available |
-
-Run `aegis key where` to see which source is active.
-
-```bash
 # Add a credential
 aegis vault add \
   --name slack-bot \
@@ -85,530 +69,165 @@ aegis vault add \
   --domains api.slack.com
 
 # Start the proxy
-aegis gate
-```
-
-Your agent now calls `http://localhost:3100/slack/api/chat.postMessage` — Aegis injects the Bearer token and forwards to `https://api.slack.com`. The agent never sees the token. The request is logged.
+aegis gate --no-agent-auth
 
-```bash
-# Verify it works
+# Test it — Aegis injects the token, forwards to Slack, logs the request
 curl http://localhost:3100/slack/api/auth.test \
   -H "X-Target-Host: api.slack.com"
 ```
 
-## Features
-
-| Feature | Description |
-|---------|-------------|
-| **Encrypted Vault** | AES-256-GCM encrypted credential storage with PBKDF2 key derivation |
-| **HTTP Proxy (Gate)** | Transparent credential injection — agent hits `localhost:3100/{service}/path` |
-| **Domain Guard** | Every outbound request checked against credential allowlists. No bypass. |
-| **Audit Ledger** | Every request (allowed and blocked) logged to SQLite with full context |
-| **Agent Identity** | Per-agent tokens, credential scoping, and rate limits |
-| **Policy Engine** | Declarative YAML policies — method, path, rate-limit, time-of-day restrictions |
-| **Body Inspector** | Outbound request bodies scanned for credential-like patterns |
-| **MCP Server** | Native Model Context Protocol integration for Claude, Cursor, VS Code |
-| **Web Dashboard** | Real-time monitoring UI with WebSocket live feed |
-| **Prometheus Metrics** | `/_aegis/metrics` endpoint for Grafana dashboards |
-| **Webhook Alerts** | HMAC-signed notifications for blocked requests, expiring credentials |
-| **RBAC** | Admin, operator, viewer roles with 16 granular permissions |
-| **Multi-Vault** | Separate vaults for dev/staging/prod with isolated encryption keys |
-| **Shamir's Secret Sharing** | M-of-N key splitting for team master key management |
-| **Cross-Platform Key Storage** | OS keychain by default (macOS Keychain, Windows Credential Manager, Linux Secret Service) with file fallback |
-| **TLS Support** | Optional HTTPS on Gate with cert/key configuration |
-| **Configuration File** | `aegis.config.yaml` with env var overrides and CLI flag overrides |
-
-## MCP Integration
-
-Aegis is a first-class [MCP](https://modelcontextprotocol.io) server. Any MCP-compatible AI agent (Claude Desktop, Cursor, VS Code Copilot) can use Aegis natively — no HTTP calls needed.
-
-```bash
-# Generate config for your AI host
-aegis mcp config claude   # Claude Desktop
-aegis mcp config cursor   # Cursor
-aegis mcp config vscode   # VS Code
-```
-
-Copy the printed JSON into your AI host's MCP config file. The MCP server exposes three tools:
-
-| Tool | Description |
-|------|-------------|
-| `aegis_proxy_request` | Make an authenticated API call (provide service + path, Aegis injects credentials) |
-| `aegis_list_services` | List available services (names only, never secrets) |
-| `aegis_health` | Check Aegis status |
-
-The MCP server replicates the full Gate security pipeline: domain guard, agent auth, body inspection, rate limiting, audit logging.
-
-## Agent Identity & Scoping
-
-Agent authentication is **on by default**. Every request through Gate must include a valid `X-Aegis-Agent` header. Requests without a token get a helpful 401 error with instructions to create an agent.
+### Production Setup (with agent auth)
 
 ```bash
-# Register an agent — token is printed once, save it
-aegis agent add --name "research-bot"
-
-# Grant access to specific credentials only
-aegis agent grant --agent "research-bot" --credential "slack-bot"
+# Create an agent identity
+aegis agent add --name "my-agent"
+# Save the printed token — it's shown once only
 
-# Set per-agent rate limits
-aegis agent set-rate-limit --agent "research-bot" --limit 50/min
+# Grant it access to specific credentials
+aegis agent grant --agent "my-agent" --credential "slack-bot"
 
 # Start Gate (agent auth is on by default)
 aegis gate
 
-# Agent must include its token in every request
+# Agent must include its token
 curl http://localhost:3100/slack/api/auth.test \
   -H "X-Target-Host: api.slack.com" \
   -H "X-Aegis-Agent: aegis_a1b2c3d4..."
-
-# To disable agent auth (not recommended):
-aegis gate --no-agent-auth
-```
-
-Tokens are SHA-256 hashed for storage — they cannot be recovered, only regenerated:
-
-```bash
-aegis agent regenerate --name "research-bot"
-# Old token stops working immediately. New token printed once.
-```
-
-## Policy Engine
-
-Declarative YAML policies control what each agent can do:
-
-```yaml
-# policies/research-bot.yaml
-agent: research-bot
-rules:
-  - service: slack
-    methods: [GET]
-    paths:
-      - /api/conversations.*
-      - /api/users.*
-    rate_limit: 100/hour
-    time_window:
-      start: "09:00"
-      end: "18:00"
-      timezone: "UTC"
-  - service: github
-    methods: [GET, POST]
-    paths:
-      - /repos/myorg/.*
-    rate_limit: 200/hour
-```
-
-```bash
-# Validate policies without starting Gate
-aegis policy validate --policies-dir ./policies
-
-# Dry-run: see what would be allowed/blocked without enforcing
-aegis gate --policies-dir ./policies --policy-mode dry-run
-
-# Enforce policies
-aegis gate --policies-dir ./policies --policy-mode enforce
-```
-
-## Credential Options
-
-When adding a credential, you can configure TTL, scopes, rate limits, and body inspection:
-
-```bash
-aegis vault add \
-  --name github-bot \
-  --service github \
-  --secret "ghp_xxxxxxxxxxxxxxxxxxxx" \
-  --domains api.github.com \
-  --auth-type bearer \
-  --scopes read,write \
-  --ttl 90 \
-  --rate-limit 100/min \
-  --body-inspection block
 ```
 
-| Flag | Default | Description |
-|------|---------|-------------|
-| `--auth-type` | `bearer` | How Aegis injects the credential (see Auth Types below) |
-| `--scopes` | `*` | Comma-separated: `read` (GET/HEAD/OPTIONS), `write` (POST/PUT/PATCH/DELETE), `*` (all) |
-| `--ttl <days>` | *(none)* | Credential expires after this many days |
-| `--rate-limit` | *(none)* | Rate limit: `100/min`, `1000/hour`, `10/sec` |
-| `--body-inspection` | `block` | Scan outbound bodies for credential patterns: `off`, `warn`, `block` |
-| `--header-name` | — | Custom header name (for `--auth-type header`) |
-| `--query-param` | `key` | Query parameter name (for `--auth-type query`) |
-
-Update any field later:
-
-```bash
-aegis vault update --name github-bot --rate-limit 200/min --body-inspection warn
-```
-
-## Auth Types
-
-Aegis supports four credential injection methods:
-
-| Type | Flag | What Aegis Injects |
-|------|------|--------------------|
-| `bearer` | `--auth-type bearer` (default) | `Authorization: Bearer <secret>` |
-| `header` | `--auth-type header --header-name X-API-Key` | `X-API-Key: <secret>` |
-| `basic` | `--auth-type basic` | `Authorization: Basic <base64(secret)>` |
-| `query` | `--auth-type query --query-param api_key` | Appends `?api_key=<secret>` to the URL |
-
-## Configuration
-
-Aegis uses a layered configuration model: **CLI flags** > **environment variables** > **config file** > **built-in defaults**.
-
-```yaml
-# aegis.config.yaml
-gate:
-  port: 3100
-  tls:
-    cert: ./certs/aegis.crt
-    key: ./certs/aegis.key
-  require_agent_auth: true
-  policy_mode: enforce
-  policies_dir: ./policies
-
-vault:
-  name: default
-  data_dir: ./.aegis
-
-observability:
-  log_level: info
-  log_format: json
-  metrics: true
-  dashboard:
-    enabled: true
-    port: 3200
-
-mcp:
-  transport: stdio
-  port: 3300
-
-webhooks:
-  - url: https://your-webhook-endpoint.com/aegis
-    events: [blocked_request, credential_expiry]
-    secret: your-hmac-secret
-```
-
-```bash
-# Validate your config file
-aegis config validate
-
-# Show resolved config (with all overrides applied)
-aegis config show
-```
-
-### Environment Variables
-
-All environment variables override config file settings. CLI flags override both.
-
-| Variable | Default | Description |
-|----------|---------|-------------|
-| `AEGIS_MASTER_KEY` | *(none)* | Master encryption key (from `aegis init`) |
-| `AEGIS_SALT` | *(none)* | Vault encryption salt (auto-generated, stored in `.aegis/vaults.json`) |
-| `AEGIS_VAULT` | `default` | Active vault name |
-| `AEGIS_PORT` | `3100` | Gate proxy listen port |
-| `AEGIS_DATA_DIR` | `./.aegis` | Directory for vault databases and registry |
-| `AEGIS_LOG_LEVEL` | `info` | Log verbosity: `debug`, `info`, `warn`, `error` |
-| `AEGIS_LOG_FORMAT` | `json` | Log output format: `json` or `pretty` |
-| `AEGIS_REQUIRE_AGENT_AUTH` | `true` | Require `X-Aegis-Agent` header on every request (`true`/`false`) |
-| `AEGIS_POLICY_MODE` | `enforce` | Policy enforcement: `enforce`, `dry-run`, or `off` |
-| `AEGIS_POLICIES_DIR` | *(none)* | Directory containing YAML policy files |
-| `AEGIS_METRICS` | `true` | Enable Prometheus metrics endpoint (`true`/`false`) |
-| `AEGIS_USER_TOKEN` | *(none)* | RBAC user token for CLI authentication |
-
-## Webhooks
-
-Get real-time notifications when security events occur:
-
-```bash
-# Add a webhook for blocked requests and expiring credentials
-aegis webhook add \
-  --url https://your-endpoint.com/aegis \
-  --events blocked_request,credential_expiry \
-  --secret your-hmac-signing-secret
-
-# Test delivery
-aegis webhook test --id <webhook-id>
-
-# Check for credentials expiring within 7 days
-aegis webhook check-expiry
-
-# Manage
-aegis webhook list
-aegis webhook remove --id <webhook-id>
-```
-
-Webhook payloads are signed with HMAC-SHA256. Verify the `X-Aegis-Signature` header to authenticate delivery. Five event types: `blocked_request`, `credential_expiry`, `rate_limit_exceeded`, `agent_auth_failure`, `body_inspection`.
+## MCP Integration
 
-## Web Dashboard
+Aegis is a first-class [MCP](https://modelcontextprotocol.io) server. Any MCP-compatible AI agent can use it natively — no HTTP calls needed.
 
-```bash
-# Start the dashboard (launches Gate automatically)
-aegis dashboard
-# → Dashboard: http://localhost:3200
-# → Gate:      http://localhost:3100
+**Before (plaintext key in config):**
+```json
+{
+  "mcpServers": {
+    "slack": {
+      "command": "node",
+      "args": ["slack-mcp-server"],
+      "env": { "SLACK_TOKEN": "xoxb-1234-real-token-here" }
+    }
+  }
+}
 ```
 
-Six views: **Overview** (health + stats), **Request Feed** (WebSocket live updates), **Credentials**, **Agents**, **Users** (RBAC), **Blocked Requests**. Dark theme.
-
-## RBAC (Role-Based Access Control)
-
-Aegis has a built-in user registry with three roles and 16 granular permissions. Once the first user is created, **every CLI command requires authentication** via `AEGIS_USER_TOKEN`.
-
-### Bootstrap Mode
-
-Before any users exist, all commands are unrestricted — this lets you run `aegis init` and `aegis user add` to create the first admin. Once at least one user exists, RBAC locks in.
-
-```bash
-# Create the first admin user (no auth required — bootstrap mode)
-aegis user add --name admin --role admin
-
-# ✓ User added to Aegis
-#   Name:   admin
-#   Role:   admin
-#   API Key (shown ONCE — save it now):
-#   aegis_user_xxxxxxxx-xxxx_xxxxxxxxxxxxxxxx
-#
-#   Use AEGIS_USER_TOKEN=<key> to authenticate CLI commands.
+**After (Aegis — no key visible):**
+```json
+{
+  "mcpServers": {
+    "aegis": {
+      "command": "npx",
+      "args": ["-y", "@getaegis/cli", "mcp", "serve"]
+    }
+  }
+}
 ```
 
-> **Save the token immediately.** Tokens are SHA-256 hashed for storage and **cannot be recovered**. If lost, an admin must regenerate it.
-
-### Authenticating
-
-Set `AEGIS_USER_TOKEN` in your environment:
+Generate the config for your AI host:
 
 ```bash
-export AEGIS_USER_TOKEN=aegis_user_xxxxxxxx-xxxx_xxxxxxxxxxxxxxxx
-
-# Now all commands authenticate against this token
-aegis vault list
-aegis agent list
-aegis ledger show
+aegis mcp config claude   # Claude Desktop
+aegis mcp config cursor   # Cursor
+aegis mcp config vscode   # VS Code
 ```
 
-### Roles & Permissions
-
-| Permission | Admin | Operator | Viewer |
-|------------|:-----:|:--------:|:------:|
-| `vault:read` — list credentials | ✓ | ✓ | ✓ |
-| `vault:write` — add/remove/rotate credentials | ✓ | | |
-| `vault:manage` — create/destroy vaults | ✓ | | |
-| `agent:read` — list agents | ✓ | ✓ | |
-| `agent:write` — add/remove/grant agents | ✓ | ✓ | |
-| `ledger:read` — view audit logs | ✓ | ✓ | ✓ |
-| `ledger:export` — export audit logs | ✓ | ✓ | |
-| `gate:start` — start the proxy | ✓ | ✓ | |
-| `policy:read` — view policies | ✓ | ✓ | |
-| `policy:write` — manage policies | ✓ | | |
-| `webhook:read` — list webhooks | ✓ | ✓ | |
-| `webhook:write` — add/remove webhooks | ✓ | | |
-| `user:read` — list users | ✓ | | |
-| `user:write` — add/remove users | ✓ | | |
-| `dashboard:view` — access the dashboard | ✓ | ✓ | ✓ |
-| `doctor:run` — run health checks | ✓ | ✓ | ✓ |
-
-### Managing Users
-
-```bash
-# Add more users (requires admin role)
-aegis user add --name alice --role operator
-aegis user add --name bob --role viewer
-
-# Change a user's role
-aegis user role --name alice --role admin
-
-# Regenerate a lost token (invalidates the old one immediately)
-aegis user regenerate-token --name alice
-
-# Remove a user
-aegis user remove --name bob --confirm
+The MCP server exposes three tools:
 
-# List all users
-aegis user list
-```
+| Tool | Description |
+|------|-------------|
+| `aegis_proxy_request` | Make an authenticated API call (provide service + path, Aegis injects credentials) |
+| `aegis_list_services` | List available services (names only, never secrets) |
+| `aegis_health` | Check Aegis status |
 
-## Multi-Vault
+The MCP server replicates the full Gate security pipeline: domain guard, agent auth, body inspection, rate limiting, audit logging.
 
-Isolate credentials across environments:
+### Setup Guides
 
-```bash
-aegis vault create --name staging
-aegis vault create --name production
+- [Claude Desktop](docs/guides/claude-desktop.md)
+- [Cursor](docs/guides/cursor.md)
+- [VS Code](docs/guides/vscode.md)
+- [Windsurf](docs/guides/windsurf.md)
+- [Cline](docs/guides/cline.md)
 
-# Add credentials to a specific vault
-AEGIS_VAULT=staging aegis vault add --name slack --service slack ...
+## Features
 
-# List vaults
-aegis vault vaults
+| Feature | Description |
+|---------|-------------|
+| **Encrypted Vault** | AES-256-GCM encrypted credential storage with PBKDF2 key derivation |
+| **HTTP Proxy (Gate)** | Transparent credential injection — agent hits `localhost:3100/{service}/path` |
+| **Domain Guard** | Every outbound request checked against credential allowlists. No bypass |
+| **Audit Ledger** | Every request (allowed and blocked) logged with full context |
+| **Agent Identity** | Per-agent tokens, credential scoping, and rate limits |
+| **Policy Engine** | Declarative YAML policies — method, path, rate-limit, time-of-day restrictions |
+| **Body Inspector** | Outbound request bodies scanned for credential-like patterns |
+| **MCP Server** | Native Model Context Protocol for Claude, Cursor, VS Code, Windsurf, Cline |
+| **Web Dashboard** | Real-time monitoring UI with WebSocket live feed |
+| **Prometheus Metrics** | `/_aegis/metrics` endpoint for Grafana dashboards |
+| **Webhook Alerts** | HMAC-signed notifications for blocked requests, expiring credentials |
+| **RBAC** | Admin, operator, viewer roles with 16 granular permissions |
+| **Multi-Vault** | Separate vaults for dev/staging/prod with isolated encryption keys |
+| **Shamir's Secret Sharing** | M-of-N key splitting for team master key management |
+| **Cross-Platform Key Storage** | OS keychain by default (macOS, Windows, Linux) with file fallback |
+| **TLS Support** | Optional HTTPS on Gate with cert/key configuration |
+| **Configuration File** | `aegis.config.yaml` with env var overrides and CLI flag overrides |
 
-# Destroy a vault and all its credentials
-aegis vault destroy --name staging
-```
+## Example Integrations
 
-Each vault has its own database and encryption salt. Credentials encrypted in one vault cannot be decrypted by another.
+Step-by-step guides with config files and policies included:
 
-## Shamir's Secret Sharing
+- [**Slack Bot**](examples/slack-bot/) — Protect your Slack bot token with domain-restricted proxy access
+- [**GitHub Integration**](examples/github-integration/) — Secure GitHub PAT with per-agent grants and read-only policies
+- [**Stripe Backend**](examples/stripe-backend/) — Isolate Stripe API keys with body inspection and rate limiting
 
-Split the master key across team members so no single person can unlock the vault alone:
+## Security
 
-```bash
-# Split into 5 shares, requiring any 3 to reconstruct
-aegis vault split --shares 5 --threshold 3
+- Published [STRIDE threat model](docs/THREAT_MODEL.md) — 28 threats analysed, 0 critical/high unmitigated findings
+- Full [security architecture](docs/SECURITY_ARCHITECTURE.md) documentation (trust boundaries, crypto pipeline, data flow)
+- AES-256-GCM + ChaCha20-Poly1305 encryption at rest
+- Domain guard enforced on every request — no bypass
+- Agent tokens stored as SHA-256 hashes — cannot be recovered, only regenerated
+- Request body inspection for credential pattern detection
+- Open source (Apache 2.0) — read the code
 
-# Seal the vault (removes the reconstructed key)
-aegis vault seal
+## How Aegis Compares
 
-# Unseal with 3 shares
-aegis vault unseal \
-  --key-share <share-1> \
-  --key-share <share-2> \
-  --key-share <share-3>
-```
+| | `.env` files | Vault/Doppler | Infisical | **Aegis** |
+|---|---|---|---|---|
+| Agent sees raw key | Yes | Yes (after fetch) | Yes (after fetch) | **No — never** |
+| Domain restrictions | No | No | No | **Yes** |
+| MCP-native | No | No | Adding | **Yes** |
+| Local-first | Yes | No | No | **Yes** |
+| Setup | 10 sec | 30+ min | 15+ min | **~2 min** |
 
-## Audit Ledger
+See [full comparison](docs/COMPARISON.md) for detailed breakdowns against each approach.
 
-Every request through Gate is logged — allowed and blocked.
+## Documentation
 
-```bash
-# View recent entries (default: last 20)
-aegis ledger show
-
-# Filter by service, agent, or status
-aegis ledger show --service slack --limit 50
-aegis ledger show --agent research-bot
-aegis ledger show --blocked
-aegis ledger show --system          # Startup/shutdown events
-aegis ledger show --since 2026-03-01
-
-# Request statistics
-aegis ledger stats
-aegis ledger stats --agent research-bot
-aegis ledger stats --since 2026-03-01
-
-# Export (CSV, JSON, or JSON Lines)
-aegis ledger export -f csv
-aegis ledger export -f json -o audit.json
-aegis ledger export -f jsonl --service slack --since 2026-03-01
-```
+| Document | Description |
+|----------|-------------|
+| [Usage Guide](docs/USAGE.md) | Full reference: CLI commands, configuration, RBAC, policies, webhooks, troubleshooting |
+| [Security Architecture](docs/SECURITY_ARCHITECTURE.md) | Trust boundaries, crypto pipeline, data flow diagrams |
+| [Threat Model](docs/THREAT_MODEL.md) | STRIDE analysis — 28 threats, mitigations, residual risks |
+| [Comparison](docs/COMPARISON.md) | Detailed comparison with .env, Vault, Doppler, Infisical |
+| [FAQ](docs/FAQ.md) | Common questions and objections |
+| [Roadmap](docs/ROADMAP.md) | Feature roadmap from v0.1 to v1.0 |
+| [Contributing](CONTRIBUTING.md) | Code style, PR process, architecture overview |
 
-## Health Checks
+## Install
 
 ```bash
-aegis doctor
-```
-
-Runs diagnostics on your Aegis installation:
-- Config file validation
-- Database accessibility and schema
-- Master key correctness (test decrypt)
-- Key storage backend (keychain type and status)
-- Expired or expiring-soon credentials
-
-Returns pass/warn/fail for each check.
-
-## Security Model
-
-- **Encryption at rest** — AES-256-GCM with PBKDF2 key derivation (210,000 iterations, SHA-512, random per-deployment salt)
-- **Cross-platform key storage** — master key stored in OS keychain by default (macOS Keychain, Windows Credential Manager, Linux Secret Service). File fallback for CI/headless
-- **Domain guard** — enforced on every outbound request. No bypass, no override. Wildcards supported (`*.slack.com`)
-- **Credential scopes** — `read` (GET/HEAD/OPTIONS), `write` (POST/PUT/PATCH/DELETE), `*` (all). Enforced at the Gate before any request is forwarded
-- **Header stripping** — agent-supplied `Authorization`, `X-API-Key`, `Proxy-Authorization` headers are removed before injection
-- **Body inspection** — outbound request bodies scanned for credential-like patterns (configurable per credential: `off`, `warn`, `block`)
-- **Hash-only token storage** — agent tokens stored as SHA-256 hashes. Lost tokens are regenerated, never recovered
-- **Audit logging** — every request (allowed and blocked) recorded with full context. Export with `aegis ledger export -f csv`
-- **TLS support** — optional HTTPS on Gate (`aegis gate --tls --cert <path> --key <path>`)
-- **Graceful shutdown** — drains in-flight requests on SIGINT/SIGTERM
-
-See [SECURITY_ARCHITECTURE.md](docs/SECURITY_ARCHITECTURE.md) for the full security design and trust boundaries, and [THREAT_MODEL.md](docs/THREAT_MODEL.md) for the STRIDE threat analysis.
+# npm
+npm install -g @getaegis/cli
 
-## CLI Reference
+# Homebrew
+brew tap getaegis/aegis && brew install aegis
 
-```
-aegis init [--write-secrets]              Initialize Aegis (master key + config)
-aegis gate [--port] [--tls] [--no-agent-auth] [--policies-dir] [--policy-mode]
-                                          Start the HTTP proxy
-aegis dashboard [--port] [--gate-port]    Start the web dashboard + Gate
-
-aegis vault add [--name] [--service] [--secret] [--domains] [--auth-type]
-               [--header-name] [--scopes] [--ttl] [--rate-limit] [--body-inspection]
-                                          Add a credential
-aegis vault list                          List credentials (secrets never shown)
-aegis vault remove --name <name>          Remove a credential
-aegis vault rotate --name <name> --secret <new>
-                                          Rotate a credential's secret
-aegis vault update --name <name> [--domains] [--auth-type] [--header-name]
-               [--scopes] [--rate-limit] [--body-inspection]
-                                          Update credential metadata
-aegis vault create --name <name>          Create a new named vault
-aegis vault vaults                        List all vaults
-aegis vault destroy --name <name>         Delete a vault and its credentials
-aegis vault split [--shares] [--threshold]
-                                          Split master key (Shamir)
-aegis vault seal                          Seal the vault
-aegis vault unseal --key-share <share>... Unseal (provide threshold shares)
-
-aegis agent add --name <name>             Register agent, print token (one-time)
-aegis agent list                          List agents (no tokens shown)
-aegis agent remove --name <name>          Remove agent + cascade-delete grants
-aegis agent regenerate --name <name>      Regenerate token (old one invalidated)
-aegis agent grant --agent <a> --credential <c>
-                                          Grant credential access
-aegis agent revoke --agent <a> --credential <c>
-                                          Revoke credential access
-aegis agent set-rate-limit --agent <a> --limit <rate>
-                                          Set per-agent rate limit
-
-aegis policy validate [--policies-dir]    Validate policy files
-aegis policy test --agent <a> --service <s> --method <m> --path <p>
-                                          Test a request against policies
-aegis policy list [--policies-dir]        List loaded policies
-
-aegis ledger show [--service] [--agent] [--blocked] [--system] [--since] [--limit]
-                                          View audit logs
-aegis ledger stats [--agent] [--since]    Request statistics
-aegis ledger export -f <csv|json|jsonl> [-o file] [--service] [--since]
-                                          Export audit log
-
-aegis webhook add --url <url> --events <types>
-                                          Add a webhook endpoint
-aegis webhook list                        List webhooks
-aegis webhook remove --id <id>            Remove a webhook
-aegis webhook test --id <id>              Send a test payload
-aegis webhook check-expiry                Check for expiring credentials
-
-aegis user add --name <name> --role <role>
-                                          Add RBAC user (admin/operator/viewer)
-aegis user list                           List users
-aegis user remove --name <name>           Remove user
-aegis user role --name <name> --role <role>
-                                          Change user role
-aegis user regenerate-token --name <name> Regenerate user token
-
-aegis mcp serve [--transport] [--port]    Start the MCP server
-aegis mcp config <claude|cursor|vscode>   Generate MCP host config
-
-aegis db backup [--output <path>]         Backup the vault database
-aegis db restore --input <path> [--force] Restore from a backup
-
-aegis config validate                     Validate config file
-aegis config show                         Show resolved configuration
-aegis key where                           Show where the master key is stored
-aegis doctor                              Health check diagnostics
+# Docker
+docker run ghcr.io/getaegis/aegis --help
 ```
 
-## Troubleshooting
-
-| Error | Cause | Fix |
-|-------|-------|-----|
-| `AEGIS_MASTER_KEY is not set` | No master key in config, env, or keychain | Run `aegis key where` to check storage, or `export AEGIS_MASTER_KEY=<key>` |
-| `Invalid master key` | Wrong key for this vault | Check `AEGIS_MASTER_KEY` matches the key from `aegis init` |
-| `Port 3100 is already in use` | Another process on that port | Use `aegis gate --port 3200` or stop the other process |
-| `Database file is corrupted` | SQLite file damaged | Back up `.aegis/` and re-run `aegis init` |
-| `Domain guard: blocked` | Target domain not in credential allowlist | Update domains: `aegis vault update --name <n> --domains <d>` |
-| `Body inspection: blocked` | Request body contains credential-like patterns | Remove sensitive patterns from the body, or set `--body-inspection warn` on the credential |
-| `Authentication required` | RBAC is active (users exist) but no token set | `export AEGIS_USER_TOKEN=<key>` — get a key from your admin or `aegis user regenerate-token` |
-| `Permission denied` | Your RBAC role lacks the required permission | Ask an admin to upgrade your role with `aegis user role` |
+**Requires Node.js ≥ 20** — check with `node -v`
 
 ## Development
 
@@ -617,33 +236,11 @@ git clone https://github.com/getaegis/aegis.git
 cd aegis
 yarn install
 yarn build
-yarn test        
-yarn lint        # Biome linter
-yarn verify      # Biome check + TypeScript typecheck
+yarn test
 ```
 
 See [CONTRIBUTING.md](CONTRIBUTING.md) for code style, PR process, and architecture overview.
 
-### Tech Stack
-
-| Layer | Technology |
-|-------|------------|
-| Language | TypeScript (ES2022, native ESM) |
-| Runtime | Node.js ≥ 20 |
-| Database | SQLite via better-sqlite3-multiple-ciphers (WAL mode, ChaCha20-Poly1305 encryption at rest) |
-| Encryption | AES-256-GCM (field-level), ChaCha20-Poly1305 (full-database), PBKDF2 |
-| Logging | pino (structured JSON, field-level redaction) |
-| Metrics | prom-client (Prometheus) |
-| CLI | Commander.js |
-| MCP | @modelcontextprotocol/sdk |
-| Dashboard | Vite + React 19 + Tailwind CSS v4 |
-| Testing | Vitest |
-| Linting | Biome |
-
-## Roadmap
-
-See [ROADMAP.md](docs/ROADMAP.md) for the full plan from v0.1 to v1.0.
-
 ## License
 
 [Apache 2.0](LICENSE)

package/dist/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAGA,OAAO,QAAQ,MAAM,iCAAiC,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAyC5D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAIxD;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CA2BnD"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAGA,OAAO,QAAQ,MAAM,iCAAiC,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAsD5D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAIxD;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CA2BnD"}

package/dist/db.js

@@ -55,6 +55,17 @@ export function getDb(config) {
     catch (err) {
         const sqliteErr = err;
         if (sqliteErr.code === 'SQLITE_NOTADB') {
+            if (config.masterKey) {
+                // Encrypted databases return SQLITE_NOTADB for both wrong-key and genuine
+                // corruption — we can't distinguish them, so surface both possibilities.
+                throw new Error(`Cannot open database: ${dbPath}\n\n` +
+                    `  Possible causes:\n` +
+                    `  1. Master key mismatch — the key doesn't match the one used to create this vault.\n` +
+                    `     Run: aegis key where   — to check which source is providing the master key.\n` +
+                    `     If .env has AEGIS_MASTER_KEY, it overrides the OS keychain value.\n` +
+                    `  2. Database corruption — the file may be damaged (disk error, incomplete write).\n` +
+                    `     Back up the file and reinitialize with: aegis init`);
+            }
             throw new Error(`Database file is corrupted or not a valid SQLite database: ${dbPath}\n` +
                 `  Back up the file and reinitialize with: aegis init`);
         }

package/dist/db.js.map

@@ -1 +1 @@
-{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,QAAQ,MAAM,iCAAiC,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,IAAY;IACzD,OAAO,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,KAAK,CAAC,MAAmB;IACvC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,MAAc,CAAC;IACnB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,2EAA2E;QAC3E,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhC,uDAAuD;QACvD,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,GAA0C,CAAC;QAC7D,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,8DAA8D,MAAM,IAAI;gBACtE,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC9C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAqB;IAC3C,oEAAoE;IACpE,oEAAoE;IACpE,oDAAoD;IACpD,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAClB,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAC5E,CAAC,CAAC,CAAC;IAEJ,mDAAmD;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACxC,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,aAAa,EAAE,CAAC;AAClB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAgB;IAC9B;QACE,0DAA0D;QAC1D,OAAO,EAAE,CAAC;QACV,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA+FJ;KACF;IACD,6BAA6B;IAC7B,0CAA0C;CAC3C,CAAC"}
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,QAAQ,MAAM,iCAAiC,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,IAAY;IACzD,OAAO,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,KAAK,CAAC,MAAmB;IACvC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,MAAc,CAAC;IACnB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,2EAA2E;QAC3E,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhC,uDAAuD;QACvD,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,GAA0C,CAAC;QAC7D,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,0EAA0E;gBAC1E,yEAAyE;gBACzE,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,MAAM;oBACnC,sBAAsB;oBACtB,uFAAuF;oBACvF,oFAAoF;oBACpF,0EAA0E;oBAC1E,sFAAsF;oBACtF,yDAAyD,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8DAA8D,MAAM,IAAI;gBACtE,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC9C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAqB;IAC3C,oEAAoE;IACpE,oEAAoE;IACpE,oDAAoD;IACpD,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAClB,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAC5E,CAAC,CAAC,CAAC;IAEJ,mDAAmD;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACxC,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,aAAa,EAAE,CAAC;AAClB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAgB;IAC9B;QACE,0DAA0D;QAC1D,OAAO,EAAE,CAAC;QACV,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA+FJ;KACF;IACD,6BAA6B;IAC7B,0CAA0C;CAC3C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getaegis/cli",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "mcpName": "io.github.getaegis/aegis",
   "description": "Credential isolation for AI agents. Store, guard, and record — your agent never sees your API keys.",
   "type": "module",
@@ -61,6 +61,7 @@
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
     "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3",
     "prom-client": "^15.1.3",
     "table": "^6.9.0",
     "ws": "^8.19.0",
@@ -75,7 +76,6 @@
     "autocannon": "^8.0.0",
     "husky": "^9.1.7",
     "lint-staged": "^16.2.7",
-    "pino-pretty": "^13.1.3",
     "release-it": "^19.2.4",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",