@xenosystem/agent-cli 0.5.20 → 0.5.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +15 -15
- package/README.md +88 -88
- package/dist/index.js +1457 -1457
- package/dist/metafile-esm.json +1 -1
- package/package.json +6 -5
- package/scripts/install.ps1 +18 -18
package/LICENSE
CHANGED
|
@@ -1,15 +1,15 @@
|
|
|
1
|
-
Copyright (c) 2026 XENO Corporation
|
|
2
|
-
All rights reserved.
|
|
3
|
-
|
|
4
|
-
This software and the accompanying documentation are proprietary and
|
|
5
|
-
confidential. No license or other right is granted to use, copy, modify,
|
|
6
|
-
merge, publish, distribute, sublicense, sell, reverse engineer, create
|
|
7
|
-
derivative works from, or otherwise exploit this software or any portion of it
|
|
8
|
-
without prior written permission from XENO Corporation.
|
|
9
|
-
|
|
10
|
-
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
11
|
-
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
12
|
-
FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR TITLE. IN NO EVENT
|
|
13
|
-
SHALL XENO CORPORATION OR ITS LICENSORS BE LIABLE FOR ANY CLAIM, DAMAGES, OR
|
|
14
|
-
OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING
|
|
15
|
-
FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OF THE SOFTWARE.
|
|
1
|
+
Copyright (c) 2026 XENO Corporation
|
|
2
|
+
All rights reserved.
|
|
3
|
+
|
|
4
|
+
This software and the accompanying documentation are proprietary and
|
|
5
|
+
confidential. No license or other right is granted to use, copy, modify,
|
|
6
|
+
merge, publish, distribute, sublicense, sell, reverse engineer, create
|
|
7
|
+
derivative works from, or otherwise exploit this software or any portion of it
|
|
8
|
+
without prior written permission from XENO Corporation.
|
|
9
|
+
|
|
10
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
11
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
12
|
+
FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR TITLE. IN NO EVENT
|
|
13
|
+
SHALL XENO CORPORATION OR ITS LICENSORS BE LIABLE FOR ANY CLAIM, DAMAGES, OR
|
|
14
|
+
OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING
|
|
15
|
+
FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OF THE SOFTWARE.
|
package/README.md
CHANGED
|
@@ -1,88 +1,88 @@
|
|
|
1
|
-
# XENO Agent CLI
|
|
2
|
-
|
|
3
|
-
Production terminal AI agent CLI from XENO Corporation.
|
|
4
|
-
|
|
5
|
-
## Runtime Ownership
|
|
6
|
-
|
|
7
|
-
The current ownership level is release-audited and may be lower than the terminal P2 program target. Node is an external host through P2, self-contained release assets embed Node.js or Bun, and the TypeScript/npm development toolchain remains third-party infrastructure. Runtime and toolchain replacement are not roadmap items. The package must not be described as fully proprietary, entirely Xeno-owned, free of third-party runtime code, or built by an owned toolchain. The packaged policy and engineering clean-room controls are in `ownership/`.
|
|
8
|
-
|
|
9
|
-
Execution security uses the exact levels `policy-only`, `process-hardened`, and `contained`. Windows process hardening is trusted-workspace defense in depth and does not isolate filesystem reads or network access. Unavailable contained or untrusted execution fails closed. The SDK/CLI ship reviewed, digest-pinned MXC 0.7.0 native assets without the Microsoft JavaScript wrapper or its runtime transitives. Standalone candidates embed only their target-native adapter and require an executable-bound signed sidecar before they can report certified containment. Certified archives also carry the corresponding third-party notices and participate in one source-bound five-target candidate set. See [CLI Execution Security](../../docs/SECURITY_BOUNDARIES.md).
|
|
10
|
-
|
|
11
|
-
## Install
|
|
12
|
-
|
|
13
|
-
```bash
|
|
14
|
-
curl -fsSL https://unpkg.com/@xenosystem/agent-cli@latest/scripts/install.sh | sh
|
|
15
|
-
```
|
|
16
|
-
|
|
17
|
-
PowerShell:
|
|
18
|
-
|
|
19
|
-
```powershell
|
|
20
|
-
irm https://unpkg.com/@xenosystem/agent-cli@latest/scripts/install.ps1 | iex
|
|
21
|
-
```
|
|
22
|
-
|
|
23
|
-
Or install directly:
|
|
24
|
-
|
|
25
|
-
```bash
|
|
26
|
-
npm install -g @xenosystem/agent-cli
|
|
27
|
-
```
|
|
28
|
-
|
|
29
|
-
## Use
|
|
30
|
-
|
|
31
|
-
Keybindings are versioned, user-owned, conflict-validated, and shared across the TUI and attached terminals. Run `xeno keybindings list`, `xeno keybindings validate`, or `/keybindings`; the full contract is documented in [../../docs/KEYBINDINGS.md](../../docs/KEYBINDINGS.md).
|
|
32
|
-
|
|
33
|
-
The runtime inspector explains everything the CLI will load and permit without activating extensions or exposing credentials. Run `xeno environment`, `xeno environment --safe-mode`, `xeno environment --json`, or `/environment`; see [../../docs/RUNTIME_ENVIRONMENT_INSPECTOR.md](../../docs/RUNTIME_ENVIRONMENT_INSPECTOR.md).
|
|
34
|
-
|
|
35
|
-
```bash
|
|
36
|
-
xeno chat
|
|
37
|
-
xeno run "summarize this repo"
|
|
38
|
-
xeno app-server --http
|
|
39
|
-
xeno remote validate --json
|
|
40
|
-
xeno specs init my-feature --title "My feature"
|
|
41
|
-
xeno review --production --staged
|
|
42
|
-
xeno index build
|
|
43
|
-
xeno control-room watch
|
|
44
|
-
xeno share list
|
|
45
|
-
xeno providers catalog
|
|
46
|
-
xeno hosted environment list
|
|
47
|
-
xeno hosted trigger list
|
|
48
|
-
xeno hosted events workspace:<workspace-id>
|
|
49
|
-
xeno hosted run message <run-id> "Continue after verification"
|
|
50
|
-
xeno hosted run controls <run-id>
|
|
51
|
-
xeno hosted run artifacts <run-id>
|
|
52
|
-
xeno hosted handoff pull <run-id> --out .xeno/handoffs/hosted-to-cli.json
|
|
53
|
-
xeno oracle "Should this change ship?" --primary primary --critics critic-a,critic-b
|
|
54
|
-
xeno librarian "Where is auth enforced?" --repo owner/project --connection research
|
|
55
|
-
xeno forge issues --repo owner/project
|
|
56
|
-
xeno recipes run release-check --dry-run
|
|
57
|
-
xeno plugin suggest --marketplace
|
|
58
|
-
```
|
|
59
|
-
|
|
60
|
-
Assistant is the default runtime profile. Use `xeno --agent swe`,
|
|
61
|
-
`xeno run --agent reviewer "<task>"`, `xeno agents profiles`, or
|
|
62
|
-
`xeno agents profile devops` to select or inspect an enforceable specialist
|
|
63
|
-
profile. See [Agent Profiles](../../docs/AGENT_PROFILES.md).
|
|
64
|
-
|
|
65
|
-
Durable specs store requirements, design, task dependencies, risks, acceptance criteria, approvals, execution evidence, and drift reports under the shared Artifact Protocol. Production review runs independent specialist and verifier calls and persists a typed review report; model confidence without reproduction remains explicitly unverified. See [Spec Workflows](../../docs/SPEC_WORKFLOWS.md) and [Production Review](../../docs/PRODUCTION_REVIEW.md).
|
|
66
|
-
|
|
67
|
-
Persistent repository intelligence combines bounded source chunks, symbols, imports, lexical search, optional exact-model semantic vectors, Git provenance, tests, documentation links, and freshness evidence while leaving current direct reads authoritative. The Agent Control Room projects durable agents, tasks, approvals, artifacts, monitors, goals, notifications, usage, and public activity into a hash-bound terminal supervisor. See [Repository Intelligence](../../docs/REPOSITORY_INTELLIGENCE.md) and [Agent Control Room](../../docs/AGENT_CONTROL_ROOM.md).
|
|
68
|
-
|
|
69
|
-
Secure shares are signed, redacted, expiring, capability-bound, and read-only. Session handoffs request authority but cannot grant it, while provider connections store only credential reference names and use capability-driven routing. See [Secure Sharing and Session Handoff](../../docs/SECURE_SHARING_HANDOFF.md) and [Provider Onboarding](../../docs/PROVIDER_ONBOARDING.md).
|
|
70
|
-
|
|
71
|
-
Hosted environments bind an exact manifest checksum and OCI digest; triggers are idempotent and event replay is hash-chain verified. Protocol-v2 adapters add durable redacted messages, exact-scope approval/rejection, acknowledgement history, Artifact Protocol evidence, and typed Git/PR results. `xeno hosted handoff push` continues local work remotely, and `xeno hosted handoff pull` verifies the connected service issuer before saving a private return document. Hosted execution fails closed unless the backend has a candidate-certified adapter. See [Hosted Fleet and Cross-Device Handoff](../../docs/HOSTED_FLEET.md).
|
|
72
|
-
|
|
73
|
-
Oracle, Librarian, Forge browsing, Recipes, automatic Git mutation checkpoints,
|
|
74
|
-
clipboard-image paste, OS-owned voice dictation, plugin signing/locking, and
|
|
75
|
-
repository-aware plugin suggestions are documented in
|
|
76
|
-
[Advanced Agent Surfaces](../../docs/ADVANCED_AGENT_SURFACES.md). These features
|
|
77
|
-
retain their Artifact Protocol, provider, privacy, and release boundaries; none
|
|
78
|
-
of the source-complete hosted adapters imply that a public fleet is deployed.
|
|
79
|
-
|
|
80
|
-
Interactive prompts soft-wrap and grow to six terminal rows while preserving the exact submitted text. `Up` and `Down` navigate wrapped rows before prompt history, and the file-panel assistant shares the same grapheme-safe cursor and editing behavior. The temporary `XENO_INPUT_SOFT_WRAP=0` process setting restores the single-row horizontal viewport for rollback.
|
|
81
|
-
|
|
82
|
-
Markdown source labels are clickable in supported interactive terminals and keep their full visible URL in redirected output or when `XENO_DISABLE_TERMINAL_LINKS=1` is set.
|
|
83
|
-
|
|
84
|
-
Background child sessions notify their parent automatically when they complete, fail, stop, or need input. Headless runs use the same bounded queue; `XENO_AGENT_NOTIFICATIONS=0` disables automatic delivery without deleting queued records.
|
|
85
|
-
|
|
86
|
-
Foreground model-authored Bash commands are managed operations: Ctrl+B promotes the same process, the footer shows live operation activity, bounded TaskOutput waits do not consume model turns, and awaited completion resumes once from a durable checkpoint. Use `/processes` to inspect, attach, stop, or explicitly detach tasks.
|
|
87
|
-
|
|
88
|
-
Docs: https://xenostudio.ai
|
|
1
|
+
# XENO Agent CLI
|
|
2
|
+
|
|
3
|
+
Production terminal AI agent CLI from XENO Corporation.
|
|
4
|
+
|
|
5
|
+
## Runtime Ownership
|
|
6
|
+
|
|
7
|
+
The current ownership level is release-audited and may be lower than the terminal P2 program target. Node is an external host through P2, self-contained release assets embed Node.js or Bun, and the TypeScript/npm development toolchain remains third-party infrastructure. Runtime and toolchain replacement are not roadmap items. The package must not be described as fully proprietary, entirely Xeno-owned, free of third-party runtime code, or built by an owned toolchain. The packaged policy and engineering clean-room controls are in `ownership/`.
|
|
8
|
+
|
|
9
|
+
Execution security uses the exact levels `policy-only`, `process-hardened`, and `contained`. Windows process hardening is trusted-workspace defense in depth and does not isolate filesystem reads or network access. Unavailable contained or untrusted execution fails closed. The SDK/CLI ship reviewed, digest-pinned MXC 0.7.0 native assets without the Microsoft JavaScript wrapper or its runtime transitives. Standalone candidates embed only their target-native adapter and require an executable-bound signed sidecar before they can report certified containment. Certified archives also carry the corresponding third-party notices and participate in one source-bound five-target candidate set. See [CLI Execution Security](../../docs/SECURITY_BOUNDARIES.md).
|
|
10
|
+
|
|
11
|
+
## Install
|
|
12
|
+
|
|
13
|
+
```bash
|
|
14
|
+
curl -fsSL https://unpkg.com/@xenosystem/agent-cli@latest/scripts/install.sh | sh
|
|
15
|
+
```
|
|
16
|
+
|
|
17
|
+
PowerShell:
|
|
18
|
+
|
|
19
|
+
```powershell
|
|
20
|
+
irm https://unpkg.com/@xenosystem/agent-cli@latest/scripts/install.ps1 | iex
|
|
21
|
+
```
|
|
22
|
+
|
|
23
|
+
Or install directly:
|
|
24
|
+
|
|
25
|
+
```bash
|
|
26
|
+
npm install -g @xenosystem/agent-cli
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
## Use
|
|
30
|
+
|
|
31
|
+
Keybindings are versioned, user-owned, conflict-validated, and shared across the TUI and attached terminals. Run `xeno keybindings list`, `xeno keybindings validate`, or `/keybindings`; the full contract is documented in [../../docs/KEYBINDINGS.md](../../docs/KEYBINDINGS.md).
|
|
32
|
+
|
|
33
|
+
The runtime inspector explains everything the CLI will load and permit without activating extensions or exposing credentials. Run `xeno environment`, `xeno environment --safe-mode`, `xeno environment --json`, or `/environment`; see [../../docs/RUNTIME_ENVIRONMENT_INSPECTOR.md](../../docs/RUNTIME_ENVIRONMENT_INSPECTOR.md).
|
|
34
|
+
|
|
35
|
+
```bash
|
|
36
|
+
xeno chat
|
|
37
|
+
xeno run "summarize this repo"
|
|
38
|
+
xeno app-server --http
|
|
39
|
+
xeno remote validate --json
|
|
40
|
+
xeno specs init my-feature --title "My feature"
|
|
41
|
+
xeno review --production --staged
|
|
42
|
+
xeno index build
|
|
43
|
+
xeno control-room watch
|
|
44
|
+
xeno share list
|
|
45
|
+
xeno providers catalog
|
|
46
|
+
xeno hosted environment list
|
|
47
|
+
xeno hosted trigger list
|
|
48
|
+
xeno hosted events workspace:<workspace-id>
|
|
49
|
+
xeno hosted run message <run-id> "Continue after verification"
|
|
50
|
+
xeno hosted run controls <run-id>
|
|
51
|
+
xeno hosted run artifacts <run-id>
|
|
52
|
+
xeno hosted handoff pull <run-id> --out .xeno/handoffs/hosted-to-cli.json
|
|
53
|
+
xeno oracle "Should this change ship?" --primary primary --critics critic-a,critic-b
|
|
54
|
+
xeno librarian "Where is auth enforced?" --repo owner/project --connection research
|
|
55
|
+
xeno forge issues --repo owner/project
|
|
56
|
+
xeno recipes run release-check --dry-run
|
|
57
|
+
xeno plugin suggest --marketplace
|
|
58
|
+
```
|
|
59
|
+
|
|
60
|
+
Assistant is the default runtime profile. Use `xeno --agent swe`,
|
|
61
|
+
`xeno run --agent reviewer "<task>"`, `xeno agents profiles`, or
|
|
62
|
+
`xeno agents profile devops` to select or inspect an enforceable specialist
|
|
63
|
+
profile. See [Agent Profiles](../../docs/AGENT_PROFILES.md).
|
|
64
|
+
|
|
65
|
+
Durable specs store requirements, design, task dependencies, risks, acceptance criteria, approvals, execution evidence, and drift reports under the shared Artifact Protocol. Production review runs independent specialist and verifier calls and persists a typed review report; model confidence without reproduction remains explicitly unverified. See [Spec Workflows](../../docs/SPEC_WORKFLOWS.md) and [Production Review](../../docs/PRODUCTION_REVIEW.md).
|
|
66
|
+
|
|
67
|
+
Persistent repository intelligence combines bounded source chunks, symbols, imports, lexical search, optional exact-model semantic vectors, Git provenance, tests, documentation links, and freshness evidence while leaving current direct reads authoritative. The Agent Control Room projects durable agents, tasks, approvals, artifacts, monitors, goals, notifications, usage, and public activity into a hash-bound terminal supervisor. See [Repository Intelligence](../../docs/REPOSITORY_INTELLIGENCE.md) and [Agent Control Room](../../docs/AGENT_CONTROL_ROOM.md).
|
|
68
|
+
|
|
69
|
+
Secure shares are signed, redacted, expiring, capability-bound, and read-only. Session handoffs request authority but cannot grant it, while provider connections store only credential reference names and use capability-driven routing. See [Secure Sharing and Session Handoff](../../docs/SECURE_SHARING_HANDOFF.md) and [Provider Onboarding](../../docs/PROVIDER_ONBOARDING.md).
|
|
70
|
+
|
|
71
|
+
Hosted environments bind an exact manifest checksum and OCI digest; triggers are idempotent and event replay is hash-chain verified. Protocol-v2 adapters add durable redacted messages, exact-scope approval/rejection, acknowledgement history, Artifact Protocol evidence, and typed Git/PR results. `xeno hosted handoff push` continues local work remotely, and `xeno hosted handoff pull` verifies the connected service issuer before saving a private return document. Hosted execution fails closed unless the backend has a candidate-certified adapter. See [Hosted Fleet and Cross-Device Handoff](../../docs/HOSTED_FLEET.md).
|
|
72
|
+
|
|
73
|
+
Oracle, Librarian, Forge browsing, Recipes, automatic Git mutation checkpoints,
|
|
74
|
+
clipboard-image paste, OS-owned voice dictation, plugin signing/locking, and
|
|
75
|
+
repository-aware plugin suggestions are documented in
|
|
76
|
+
[Advanced Agent Surfaces](../../docs/ADVANCED_AGENT_SURFACES.md). These features
|
|
77
|
+
retain their Artifact Protocol, provider, privacy, and release boundaries; none
|
|
78
|
+
of the source-complete hosted adapters imply that a public fleet is deployed.
|
|
79
|
+
|
|
80
|
+
Interactive prompts soft-wrap and grow to six terminal rows while preserving the exact submitted text. `Up` and `Down` navigate wrapped rows before prompt history, and the file-panel assistant shares the same grapheme-safe cursor and editing behavior. The temporary `XENO_INPUT_SOFT_WRAP=0` process setting restores the single-row horizontal viewport for rollback.
|
|
81
|
+
|
|
82
|
+
Markdown source labels are clickable in supported interactive terminals and keep their full visible URL in redirected output or when `XENO_DISABLE_TERMINAL_LINKS=1` is set.
|
|
83
|
+
|
|
84
|
+
Background child sessions notify their parent automatically when they complete, fail, stop, or need input. Headless runs use the same bounded queue; `XENO_AGENT_NOTIFICATIONS=0` disables automatic delivery without deleting queued records.
|
|
85
|
+
|
|
86
|
+
Foreground model-authored Bash commands are managed operations: Ctrl+B promotes the same process, the footer shows live operation activity, bounded TaskOutput waits do not consume model turns, and awaited completion resumes once from a durable checkpoint. Use `/processes` to inspect, attach, stop, or explicitly detach tasks.
|
|
87
|
+
|
|
88
|
+
Docs: https://xenostudio.ai
|