347c88342c
- Created draft documentation for enabling reachability, CLI authentication, EntryTrace heuristics, Go stripped binaries, Java and Python lockfiles, Rust fingerprint enrichment, SAST integration, Windows/macOS analyzer coverage, scanner engine surface, multi-tenancy operations, RLS and data isolation, ABAC overlays, VEX trust model, VEX ops runbook, VEX mapping, scopes and roles, tenancy overview, VEX signatures, contract testing, VEX consensus algorithm, VEX consensus API, VEX consensus console, VEX consensus overview, and VEX issuer directory. - Each document includes a status placeholder, purpose, and open TODOs for future updates.
StellaOps CLI
The stella CLI is the operator-facing Swiss army knife for scans, exports, policy management, offline kit operations, and automation scripting.
Responsibilities
- Deliver deterministic verbs for scan, diff, export, policy, and observability operations.
- Handle interactive and non-interactive authentication via Authority (device code, client credentials).
- Support offline kit workflows including bundle verification and seed installation.
- Expose JSON outputs suitable for CI parity and golden tests.
Key components
StellaOps.Clinative AOT host.- Shared helpers in
StellaOps.Cli.Core. - Restart-time plug-ins under
StellaOps.Cli.Plugins.*.
Integrations & dependencies
- Authority for token exchange.
- Backend APIs (Scanner, Policy, Export Center, Notify).
- Offline kit bundles and local keychain/DPoP storage.
Operational notes
- Deterministic output fixtures under
src/Cli/StellaOps.Cli.Tests. - Versioned command docs in
docs/modules/cli/guides. - Plugin catalogue in
plugins/cli/**(restart-only).
Related resources
- ./guides/20_REFERENCE.md
- ./guides/cli-reference.md
- ./guides/policy.md
Backlog references
- DOCS-CLI-OBS-52-001 / DOCS-CLI-FORENSICS-53-001 in ../../TASKS.md.
- CLI-CORE-41-001 epic in
src/Cli/StellaOps.Cli/TASKS.md.
Current workstreams (Q4 2025)
- Active docs sprint:
docs/implplan/SPRINT_0316_0001_0001_docs_modules_cli.md— normalised sprint naming, doc sync, and upcoming ops/runbook refresh.
Epic alignment
- Epic 2 – Policy Engine & Editor: deliver deterministic policy authoring, simulation, and explain verbs.
- Epic 4 – Policy Studio: integrate registry/promotion workflows, approvals, and lint tooling.
- Epic 6 – Vulnerability Explorer: surface triage and ledger operations.
- Epic 10 – Export Center: orchestrate export requests, verification, and Offline Kit automation.
- Epic 11 – Notifications Studio: manage notification authoring/previews from the command line.