@stroq/cli 0.1.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +14 -4
  2. package/dist/index.js +2257 -242
  3. package/dist/index.js.map +1 -1
  4. package/package.json +1 -1
package/README.md CHANGED
@@ -1,4 +1,13 @@
1
- # stroq
1
+ <p align="center">
2
+ <img src="https://raw.githubusercontent.com/AGGIB/Stroq/main/docs/assets/logo.svg" alt="Stroq" width="280">
3
+ </p>
4
+
5
+ <p align="center">
6
+ <a href="https://github.com/AGGIB/Stroq/actions/workflows/ci.yml"><img src="https://github.com/AGGIB/Stroq/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
7
+ <a href="https://www.npmjs.com/package/@stroq/cli"><img src="https://img.shields.io/npm/v/%40stroq%2Fcli?logo=npm&logoColor=white&label=npm&color=cb3837" alt="npm version"></a>
8
+ <a href="https://www.npmjs.com/package/@stroq/cli"><img src="https://img.shields.io/npm/dm/%40stroq%2Fcli?label=downloads&color=0b7285" alt="npm downloads"></a>
9
+ <a href="https://github.com/AGGIB/Stroq/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-blue.svg" alt="License: Apache 2.0"></a>
10
+ </p>
2
11
 
3
12
  **Local action firewall for AI coding agents.** Stroq scans what your agent reads (files, web pages, MCP tool results, command output) for indirect prompt injection, taints the session when it finds instruction-like text, and deterministically blocks the dangerous follow-up actions an injected agent would take — outbound network commands, secret access, external git pushes, encoded execution, self-tampering. Everything runs locally; nothing is sent to a cloud.
4
13
 
@@ -24,11 +33,12 @@ Prefer a persistent install? `npm install -g @stroq/cli` installs the `stroq` co
24
33
  | `stroq doctor` | Check Node version, rules, hooks, self-test |
25
34
  | `stroq log [--count 20]` | Show recent audit entries |
26
35
  | `stroq verify` | Verify the audit hash chain |
27
- | `stroq untaint [--session <id>] [--all]` | Clear a false-positive session's taint, or every session's |
36
+ | `stroq untaint [--session <id>] [--all]` | Clear a false-positive session's taint and provenance, or every session's |
37
+ | `stroq why [--seq <n>]` | Explain the most recent denied/asked action: rule, provenance, taint |
28
38
 
29
39
  ## Learn more
30
40
 
31
- - Full documentation, architecture, and the demo: [github.com/AGGIB/stroq](https://github.com/AGGIB/stroq#readme)
32
- - Report a security issue or a bypass: [SECURITY.md](https://github.com/AGGIB/stroq/blob/main/SECURITY.md)
41
+ - Full documentation, architecture, and the demo: [github.com/AGGIB/Stroq](https://github.com/AGGIB/Stroq#readme)
42
+ - Report a security issue or a bypass: [SECURITY.md](https://github.com/AGGIB/Stroq/blob/main/SECURITY.md)
33
43
 
34
44
  License: Apache-2.0.