Skip to content

CLI Index

Document ID: CLI-INDEX-001
File Path: docs/11-cli/index.md
Version: 1.1.0
Status: Active
Owner: AI Platform Team
Last Updated: 2026-08-01


This document is the central navigation and architecture index for the wovyr command-line interface — the primary terminal client for the Wovyr AI Platform.

The CLI serves developers, operators, and CI/CD. It is both a client of the Platform API (managing remote resources) and a local toolchain (scaffolding projects, building plugins, running workflows locally, diagnostics) — see the CLI Service in C4 Container §4.10.


ModeExamples
Remote managementwovyr agents run, wovyr auth create-key
Local developmentwovyr dev, wovyr plugin new, wovyr workflows run --local
Authoring/buildwovyr plugin build, wovyr plugin sign, wovyr plugin publish
Operationswovyr admin backup, wovyr admin migrate, wovyr kms rotate

The command reference is the authority here — it is generated from the real command tree and diffed in CI, so it can never list a command that doesn’t exist.

The CLI is not at parity with the Platform API, and isn’t trying to be: it covers local development, plugin authoring, and node operations. Managing remote resources (registering agents, submitting workflows, projects, quotas, webhooks, audit) is done through the API or an SDK, not the terminal.


wovyr (Rust binary)
├── command parser + help (clap)
├── credential store (~/.wovyr/credentials.json)
├── auth (bearer token; `auth` mints the server's API keys)
├── HTTP client (REST → the server)
├── local engine (embedded agent/workflow runtime for --local)
└── local stores (~/.wovyr: kms, secrets, memory, workflows, plugins, ...)

The CLI is a single self-contained Rust binary (tech mapping: CLI = Rust).


DocumentResponsibility
installation.mdInstall methods, platforms, updates
configuration.mdState directory, auth, environment variables
commands.mdFull command reference (generated, CI-diffed)
examples.mdTask-oriented recipes and CI usage

  1. Local-first dev — scaffold, build, and run with no remote at all; with no provider key set, runs use a deterministic mock so they work offline.
  2. Secure by default — same authn/authz as every client, no privileged backdoor, and the privileged builtins (shell, fs_write, code_execute) fail closed without an explicit per-run or per-session opt-in (SBX-305).
  3. Generated referencecommands.md comes from the clap tree, so the docs cannot drift from the binary.
  4. Helpful — rich --help on every subcommand.

Deliberately not principles today: full API parity (§2), a machine-readable --output json mode, graded exit codes, and shell completion. See configuration §6.




VersionDateDescription
1.0.02026-06-27Initial CLI Index