Catalog›OKF bundles›Developer tools›Ix Cli SpecificationICIx Cli SpecificationIndex of artifacts in this directory. Open site Project Open in the app JSON README (API)# Ix Cli Specification## Contents* [Functional](./functional/index.md) - Functional artifacts.* [Non Functional](./non-functional/index.md) - Non Functional artifacts.* [Reviews](./reviews/index.md) - Reviews artifacts.* [Stakeholder](./stakeholder/index.md) - Stakeholder artifacts.* [Usecase](./usecase/index.md) - Usecase artifacts.* [Runtime Plugin Platform Plan](./runtime-plugin-platform-plan.md)* [Spec](./spec.md)READMELoading documentation…# ix-cli [](https://discord.gg/k8DVhuYBR2) The Agent IX command-line tool (`ix`). Hosts pluggable command groups contributed by other repos in the Agent IX ecosystem. ## Workflows `ix workflow` is preinstalled via two cooperating plugins: - `@agent-ix/workflow-cli-plugin` — the command surface (host). - `@agent-ix/workflow-definitions` — the first workflow contributor, shipping `spec-analysis`, `coding-loop`, `project-planning`. Third parties can ship their own workflows either as an `ix` plugin (npm package, loaded by adding to `oclif.plugins`) or as an agent skill (a directory with `def.yaml` + optional `scripts/invariants.js`, loaded via `ix workflow create --path <dir>`). For the full usage guide — authoring walkthroughs, command reference, end-to-end example, concepts, and the `WorkflowPlugin` contract — see the [ix-agent-skills README](https://github.com/agent-ix/ix-cli/blob/HEAD/../ix-agent-skills/README.md). ## Local auth `ix local auth` manages the identity service on your local `ix-local` cluster: admin seed, user invites, password resets, and the operator-scoped kubeconfig that backs every subsequent admin operation. See [`docs/auth.md`](https://github.com/agent-ix/ix-cli/blob/HEAD/docs/auth.md) for the full subcommand reference, the breaking change to `auth invite`, and the recovery cookbook. ### Operator privilege lifecycle After `ix local init` finishes seeding the admin user, **downgrade from cluster-admin to the operator-scoped kubeconfig**: ```bash ix local auth kubeconfig issue --output ~/.kube/ix-local.yaml export KUBECONFIG=~/.kube/ix-local.yaml ``` This binds your shell to the `system:serviceaccount:system:ix-cli-admin` ServiceAccount provisioned by identity FR-034. Every subsequent `ix local auth *` operation runs under that narrow grant (`pods/exec` on `auth/identity-*`, nothing else). Cluster-admin only reappears for Helm upgrade or break-glass recovery. Full lifecycle, two trust zones, and recovery matrix: [`docs/auth.md`](https://github.com/agent-ix/ix-cli/blob/HEAD/docs/auth.md) and the canonical [`auth/docs/operator-lifecycle.md`](https://github.com/agent-ix/ix-cli/blob/HEAD/../auth/docs/operator-lifecycle.md). Normative reference: `auth/spec/functional/FR-008-bootstrap-invite-process.md` §Operator Privilege Lifecycle. DetailsTypeOKF bundlesTopicDeveloper toolsPublisheragent-ixSourceokf_githubCategoryDataVersion0.1Last updateNov 9, 20266 days agoProject statusActiveLanguageTypeScriptLicenseAGPL-3.0AddedSep 8, 20262 months agoUpdatedSep 8, 20262 months agoSource idagent-ix/ix-cli:spec/index.mdMoreMore okf bundles on Developer toolsAll from agent-ixA–Z index
