Files
git.stella-ops.org/docs/modules/cli
master 9e5e958d42
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries
- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys.
- Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations.
- Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.
2025-10-31 14:33:05 +02:00
..

StellaOps CLI

The stella CLI is the operator-facing Swiss army knife for scans, exports, policy management, offline kit operations, and automation scripting.

Responsibilities

  • Deliver deterministic verbs for scan, diff, export, policy, and observability operations.
  • Handle interactive and non-interactive authentication via Authority (device code, client credentials).
  • Support offline kit workflows including bundle verification and seed installation.
  • Expose JSON outputs suitable for CI parity and golden tests.

Key components

  • StellaOps.Cli native AOT host.
  • Shared helpers in StellaOps.Cli.Core.
  • Restart-time plug-ins under StellaOps.Cli.Plugins.*.

Integrations & dependencies

  • Authority for token exchange.
  • Backend APIs (Scanner, Policy, Export Center, Notify).
  • Offline kit bundles and local keychain/DPoP storage.

Operational notes

  • Deterministic output fixtures under src/Cli/StellaOps.Cli.Tests.
  • Versioned command docs in docs/modules/cli/guides.
  • Plugin catalogue in plugins/cli/** (restart-only).
  • ./guides/20_REFERENCE.md
  • ./guides/cli-reference.md
  • ./guides/policy.md

Backlog references

  • DOCS-CLI-OBS-52-001 / DOCS-CLI-FORENSICS-53-001 in ../../TASKS.md.
  • CLI-CORE-41-001 epic in src/Cli/StellaOps.Cli/TASKS.md.

Epic alignment

  • Epic 2 Policy Engine & Editor: deliver deterministic policy authoring, simulation, and explain verbs.
  • Epic 4 Policy Studio: integrate registry/promotion workflows, approvals, and lint tooling.
  • Epic 6 Vulnerability Explorer: surface triage and ledger operations.
  • Epic 10 Export Center: orchestrate export requests, verification, and Offline Kit automation.
  • Epic 11 Notifications Studio: manage notification authoring/previews from the command line.