npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@keydris/cli

v0.1.14

Published

Governed, per-session identity and brokered egress for AI agents

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

jeetkumarjeetkumara-keydrisa-keydrisaviral-keydrisaviral-keydris

Keywords

aiagentclicodexclaudesecurityspiffe

Readme

@keydris/cli

Authority before action. npm distribution for the native Keydris CLI.

npm install --global @keydris/cli --foreground-scripts
keydris init

The JavaScript package is a launcher. npm installs the matching native Keydris binary for the current operating system and architecture as an optional dependency. The complete proxy, identity, Claude Code, and OpenAI Codex implementation remains in the native binary.

Do not install with --omit=optional; that omits the platform binary. A global installation is recommended when using the long-running keydris proxy.

The install writes the channel defaults to ~/.keydris.toml, backing up an existing file as ~/.keydris.toml.bak. Stable releases use the stable config; prereleases use the dev config. Set KEYDRIS_NO_CONFIG=1 to leave an existing config unchanged. npm's --ignore-scripts option skips this config step.

The package performs no privileged work during installation. Trust-store changes happen only when explicitly requested through keydris init --trust-store.

Use --foreground-scripts to see the native binary and configuration checks. npm owns download progress; Keydris shows real setup stages in keydris init. If lifecycle scripts were disabled, init creates missing configuration without replacing an existing file. KEYDRIS_NO_CONFIG=1 also disables this fallback.

The CLI respects NO_COLOR and supports --color auto|always|never. Use keydris status to check readiness and keydris reset --dry-run to preview a reset.

Interactive CLI banners show the ASCII logo in #F8F7F4. Set KEYDRIS_LOGO_COLOR=default for the terminal's own foreground on light themes.

On Windows with WSL2, install using Linux Node/npm inside your distribution (node -p 'process.platform' must print linux). Install and run the agent, Keydris and proxy there too. Keep certificates and state in the Linux home; do not reuse native Windows state. Claude's Linux sandbox requires bubblewrap and socat; keydris doctor checks these and namespace availability. WSL1 and detected mixed Windows/Linux execution are rejected with recovery guidance. After WSL shuts down, run keydris proxy up before reopening agent sessions.

VS Code integrated terminals use the normal agent launch commands: claude or keydris codex after onboarding. For WSL, open the folder with VS Code's WSL extension and run setup in that terminal. Sidebar integration is separate.

keydris init installs a bundled keydris-authority skill and a short session briefing explaining delegated authority, approvals and denials. Guidance is embedded in the native binary; no additional download is needed. Read it with keydris skill or keydris skill --brief. Rerun init after upgrades to refresh the installed copy. Existing and user-edited skill files are preserved.