Package Exports

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@arikernel/cli) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

Ari Kernel CLI

Security runtime for AI agents. Intercepts every tool call, enforces capability tokens, tracks data provenance, detects multi-step attack patterns, and produces tamper-evident audit logs.

Part of the Ari Kernel project.

Install

Global (recommended)

npm install -g @arikernel/cli

Then run the full forensic demo:

arikernel simulate prompt-injection
arikernel trace --latest
arikernel replay --latest --step

npx (no install)

npx arikernel --help
npx arikernel init

Local dev

git clone https://github.com/petermanrique101-sys/AriKernel.git
cd AriKernel
pnpm install
pnpm build
pnpm ari --help

Commands

Command	Description
`arikernel simulate [type]`	Run attack simulations (prompt-injection, data-exfiltration, tool-escalation)
`arikernel trace [runId]`	Display security execution trace from audit log
`arikernel replay [runId]`	Replay a recorded session step by step
`arikernel run`	Start the firewall in run mode
`arikernel policy <file>`	Validate a policy YAML file
`arikernel init`	Generate a starter `arikernel.policy.yaml`

All forensic commands default to ./arikernel-audit.db. Override with --db <path>.

Tip: If --latest picks a stale run, delete arikernel-audit.db and re-simulate.

Requirements

Node.js >= 20

npm package

The package is published as @arikernel/cli. The bin field ensures the command is arikernel:

npm install -g @arikernel/cli
arikernel --help

Publish checklist

Ensure you are logged in to npm: npm whoami
Ensure the arikernel package name is available: npm view arikernel (should 404)
Build all packages from the repo root: pnpm build
Run tests: pnpm test

Publish workspace packages in dependency order:

pnpm --filter @arikernel/core publish --no-git-checks
pnpm --filter @arikernel/taint-tracker publish --no-git-checks
pnpm --filter @arikernel/policy-engine publish --no-git-checks
pnpm --filter @arikernel/tool-executors publish --no-git-checks
pnpm --filter @arikernel/audit-log publish --no-git-checks
pnpm --filter @arikernel/runtime publish --no-git-checks
pnpm --filter @arikernel/attack-sim publish --no-git-checks

Publish the CLI last:

pnpm --filter @arikernel/cli publish --no-git-checks

Verify global install works:

npm install -g arikernel
arikernel --help

--no-git-checks is needed because pnpm replaces workspace:* with real versions at publish time regardless of git state. Remove it once you have a proper release workflow with changeset or similar.

License

Apache-2.0