@mrciphersmith/keryx 0.2.40 → 0.2.42
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -0
- package/dist/cli.js +41540 -38902
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -225,6 +225,13 @@ What is in it today:
|
|
|
225
225
|
seven risk classes — read, write, shell, network, credential, delegate,
|
|
226
226
|
destructive — with path and command rules underneath. Shell and destructive
|
|
227
227
|
actions are default-deny and need an explicit approval before they run.
|
|
228
|
+
- **Session permission modes.** `keryx shell --trust`/`--auto`, or `/mode`
|
|
229
|
+
inside a running session, decide whether that approval is asked for at all
|
|
230
|
+
— `ask` (default), `trust` (safe calls run, a destructive one still asks),
|
|
231
|
+
`auto` (nothing asks except a credentials-touching command, which no mode
|
|
232
|
+
ever auto-approves). A session-level layer only: `harness run`/`exec`,
|
|
233
|
+
`keryx serve`, and MCP keep the unconditional policy engine above,
|
|
234
|
+
untouched. See the [permission modes guide](docs/docs/guides/permission-modes.md).
|
|
228
235
|
- **Kernel-enforced containment underneath.** The OS sandbox sits *below* the
|
|
229
236
|
policy engine — Seatbelt on macOS, bubblewrap on Linux — with network off/on,
|
|
230
237
|
and on macOS a loopback domain allowlist, credential masking behind a per-run
|
|
@@ -483,6 +490,7 @@ Full documentation site: **<https://mrciphersmith.github.io/keryx/>**
|
|
|
483
490
|
- **[Workspace & lifecycle](docs/docs/workspace-and-lifecycle.md)** — the `.metaproject/` contract and `init`/`update` lifecycle.
|
|
484
491
|
- **[Limitations](docs/docs/limitations.md)** — known gaps, platform caveats, and what to do instead.
|
|
485
492
|
- **[Shared Agent Context](docs/docs/guides/shared-agent-context.md)** *(experimental)* — local-first work-context layer: FWK overview, proposals, runtime policy guard.
|
|
493
|
+
- **[Permission modes](docs/docs/guides/permission-modes.md)** — `ask`/`trust`/`auto` for the interactive shell: how to set them and exactly where the per-project default is stored.
|
|
486
494
|
- **[Changelog](CHANGELOG.md)** — what has landed since `v0.1.0`.
|
|
487
495
|
|
|
488
496
|
Run `keryx <command> --help` for the live flag surface of any command.
|