@aarmos/cli
v0.42.3
Published
Aarmos CLI — run any agent locally, across any protocol (MCP, OpenAPI, deep-link), with a signed AVAR receipt on every execution. Sovereign runtime, universal tool gateway, verifiable governance.
Maintainers
Readme
@aarmos/cli
Run your agent locally, across any protocol, with a signed receipt — in 60 seconds.
Not what you're looking for? If you use the browser PWA at aarmos.io and want it to reach your local files/shell/git, you want
@aarmos/bridgeinstead. This package is the terminal-native agent runtime.
npm i -g @aarmos/cli
aarmos init
aarmos run ./my-agent.jsCommands
| Command | Purpose |
| --- | --- |
| aarmos init | Scaffold policy.aarmos.toml, avar.config.json, local Ed25519 signing key |
| aarmos run <agent> | Run agent under policy — writes AVAR receipt on every execution |
| aarmos proxy | Transparent local HTTP proxy on 127.0.0.1 (any framework enrolls via HTTPS_PROXY) |
| aarmos daemon start\|stop\|status | Manage background proxy daemon |
| aarmos verify <receipt> | Verify an AVAR receipt locally (signatures + hash chain, via @aarmos/avar-core). Works with the daemon stopped. Zero network. |
| aarmos authority init <slug> | Register a stable aarmos://authority/<slug> backed by a workspace publisher key (SPEC-ADDENDUM-1.8) |
| aarmos authority build\|publish | Assemble/emit a signed trust-manifest envelope; publish bumps the monotonic sequence |
| aarmos authority verify <file> | Verify an authority-issued manifest offline (signature + shape only) |
| aarmos authority key rotate | Rotate the signing key backing an authority. The URI and sequence are preserved; subscribers re-pin the new fingerprint. See the runbook. |
| aarmos authority show | Show the authority record, publisher, current fingerprint, and last emitted sequence |
| aarmos governance set\|unset\|show | Configure the governing authority stamped onto emitted receipts (SPEC-ADDENDUM-1.9) |
Guarantees
- C1 — No agent data ever leaves your device via an Aarmos-hosted service.
- C2 — Every execution path writes to the same local AVAR chain.
- C3 — License/team pointers are the only things that touch Aarmos-hosted servers.
- C4 — The daemon and proxy bind 127.0.0.1 only.
See the contract and the compatibility matrix.
License
Apache-2.0 © Aarmatix LLC
