
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
Filesystem-routed commands for local projects and user-global tools.
@async/cli treats command directories as the CLI surface. A command such as:
cli gh pull
maps to a command directory like:
.cli/gh/pull/script.ts
The v1 contract is defined in SPEC.md. The package implements local and
user-global command discovery, command resolution, script execution,
machine-readable listing, --which, --new, --mv, context-file pointers,
help, and version output.
pnpm add -D @async/cli
The package declares two equivalent binaries:
cli
async-cli
cli discovers local .cli/ overlays from the current working directory upward
to the nearest Git root, then appends the user-global command tree. Use
ASYNC_CLI_GLOBAL_ROOT to replace the user-global tree and
ASYNC_CLI_PROJECT_ROOT to pin project-root behavior in tests or controlled
launchers.
cli help
cli help gh
cli --list
cli --list --json
cli --which gh pull
cli --new gh pr
cli --new gh pr --root
cli --mv gh pull
cli --mv gh pull --to local
cli --agents
cli --agents --write
cli --agents --check
cli --agents --claude --write
cli --version
Command scripts run from the caller's original working directory. .js and
.mjs scripts run directly with Node; .ts and .mts scripts use Node 24
native type stripping.
pnpm run build
pnpm test
pnpm run pack:check
pnpm run release:check
Maintainers who want the shell to prefer this checkout over an npm-installed copy can link the local binaries:
pnpm run local:link
pnpm run local:status
pnpm run local:unlink
FAQs
Filesystem-routed project and user-global commands for Async workspaces.
The npm package @async/cli receives a total of 0 weekly downloads. As such, @async/cli popularity was classified as not popular.
We found that @async/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.