Autotomy CLI

The MIT-licensed command-line client for installing, checking, and maintaining an Autotomy Expo project with your coding agent.

This repository contains the public CLI, its validated wire formats, generic local policy interpreter, agent integrations, and tests. Autotomy's hosted account and billing service, paid policy content, release recipes, and application source are distributed separately.

Availability

Hosted setup is pending configuration as of October 29, 2026. Publishing this source does not mean account login, checkout, signed Starter downloads, or Pro operations are available. Those commands require the Autotomy service to be configured and enabled. An unavailable or unauthorized operation fails explicitly.

The source builds independently today. npm publication is a separate release step; if autotomy@1.0.0 is not available in the registry yet, use the local build below. The public CLI's MIT license grants no account entitlement or hosted-service access.

Build and verify

Use Node.js 22.20 or later and pnpm 10.33.2.

git clone https://github.com/LabLambWorks/autotomy-cli.git
cd autotomy-cli
npx --yes pnpm@10.33.2 install --frozen-lockfile
npx --yes pnpm@10.33.2 check
npx --yes pnpm@10.33.2 build
npx --yes pnpm@10.33.2 smoke
node cli/dist/index.js --help

The smoke test packs the real npm tarball, installs it offline in a clean temporary consumer, and runs its version, help, and structured doctor output. CI repeats the checks on Linux, macOS, and Windows. Building and testing use synthetic local fixtures and do not need a paid account.

Using the client

Once the npm package and hosted service are available:

npx autotomy@1.0.0 login
npx autotomy@1.0.0 init my-app

An unchanged Autotomy Lite checkout can use npx autotomy@1.0.0 install. Account authorization and purchase happen in the browser. Never paste passwords, payment details, or session tokens into an agent conversation.

Command	Access
doctor, --help, --version	Public local inspection.
check	Runs an installed Foundation's own checks; no Pro subscription required.
login, logout, whoami	Hosted account connection and session management.
init, install	Signed Starter downloads require ownership; existing project integration is managed locally.
audit, upgrade expo --to <SDK>, hooks on	Require active Pro and a configured service.
hooks off, hooks status, update	Manage existing agent integration.

Expo upgrades produce a plan and an agent prompt. They do not modify app source. Codex, Claude Code, and Cursor integrations preserve unrelated instructions and hooks.

Read the CLI guide for all commands, automation output, credential storage, installation boundaries, and local test overrides.

Repository layout

• cli/ — public npm package and self-contained synthetic tests.
• packages/contracts/ — validated artifact, account, capability, and policy formats plus the command catalog.
• release/keys/ — public verification keys pinned in the client; no signing secrets.
• verification/ — isolated npm consumer verification.

The policy interpreter validates signed declarative data and evaluates it locally. Repository source stays on your machine. Paid policies and migration evidence are downloaded only after authorization; this repository includes test fixtures, not production policy content.

License

The code in this repository is MIT licensed. The npm bundle includes Zod; its license is reproduced in third-party notices. Hosted services and separately distributed artifacts have their own access and licensing terms.