{
  "markdown": "# ix-cli\n\nThe Agent IX command-line tool (`ix`). Hosts pluggable command groups\ncontributed by other repos in the Agent IX ecosystem.\n\n## Workflows\n\n`ix workflow` is preinstalled via two cooperating plugins:\n\n- `@agent-ix/workflow-cli-plugin` — the command surface (host).\n- `@agent-ix/workflow-definitions` — the first workflow contributor,\n  shipping `spec-analysis`, `coding-loop`, `project-planning`.\n\nThird parties can ship their own workflows either as an `ix` plugin (npm\npackage, loaded by adding to `oclif.plugins`) or as an agent skill (a\ndirectory with `def.yaml` + optional `scripts/invariants.js`, loaded via\n`ix workflow create --path <dir>`).\n\nFor the full usage guide — authoring walkthroughs, command reference,\nend-to-end example, concepts, and the `WorkflowPlugin` contract — see\nthe [ix-agent-skills README](../ix-agent-skills/README.md).\n\n## Local auth\n\n`ix local auth` manages the identity service on your local `ix-local`\ncluster: admin seed, user invites, password resets, and the\noperator-scoped kubeconfig that backs every subsequent admin operation.\n\nSee [`docs/auth.md`](docs/auth.md) for the full subcommand reference,\nthe breaking change to `auth invite`, and the recovery cookbook.\n\n### Operator privilege lifecycle\n\nAfter `ix local init` finishes seeding the admin user, **downgrade from\ncluster-admin to the operator-scoped kubeconfig**:\n\n```bash\nix local auth kubeconfig issue --output ~/.kube/ix-local.yaml\nexport KUBECONFIG=~/.kube/ix-local.yaml\n```\n\nThis binds your shell to the `system:serviceaccount:system:ix-cli-admin`\nServiceAccount provisioned by identity FR-034. Every subsequent\n`ix local auth *` operation runs under that narrow grant\n(`pods/exec` on `auth/identity-*`, nothing else). Cluster-admin only\nreappears for Helm upgrade or break-glass recovery.\n\nFull lifecycle, two trust zones, and recovery matrix:\n[`docs/auth.md`](docs/auth.md) and the canonical\n[`auth/docs/operator-lifecycle.md`](../auth/docs/operator-lifecycle.md).\nNormative reference: `auth/spec/functional/FR-008-bootstrap-invite-process.md`\n§Operator Privilege Lifecycle.\n",
  "bytes": 2089,
  "sha": "5097842fe6caf520dcce3b91a86414023104bf2f0832abf1064f726c1e6f4256",
  "repo_slug": "agent-ix/ix-cli",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/okf_agent_ix_ix_cli_spec_index_md_94de60b0/readme"
}