
Research
GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.
@auto-engineer/cli
Advanced tools
Command-line interface for Auto Engineer, a tool for building applications with Narrative Driven Development.
Command-line interface for Auto Engineer, a tool for building applications with Narrative Driven Development.
The CLI orchestrates a pipeline-based architecture that loads plugins, starts development servers, and synchronizes files between local development and remote sandboxes. It serves as the primary entry point for running Auto Engineer workflows.
# Global
npm install -g @auto-engineer/cli
# Or via npx
npx @auto-engineer/cli
# Step 1: Create a config file
cat > auto.config.ts << 'EOF'
import { define } from '@auto-engineer/pipeline';
export const plugins = [
'@auto-engineer/narrative',
'@auto-engineer/server-generator-apollo-emmett',
];
export const pipeline = define('my-pipeline')
.on('SchemaExported')
.emit('GenerateServer', (e) => ({
modelPath: e.data.outputPath,
destination: e.data.directory,
}))
.build();
EOF
# Step 2: Start the server
auto start
# Step 3: View the pipeline diagram
auto diagram
auto start
# or simply
auto
auto dispatch GenerateServer --data '{"modelPath": "./schema.json", "destination": "."}'
auto status
auto dispatch MyCommand --host http://localhost:5555 --data '{}'
auto start --port 8080 --config ./ci.config.ts
auto startStart the pipeline server with loaded config (default command).
auto start [options]
| Option | Alias | Type | Default | Description |
|---|---|---|---|---|
--port | -p | number | 5555 | Server port |
--debug | -d | boolean | false | Enable debug mode |
--config | -c | string | auto.config.ts | Path to config file |
auto dispatch <command>Dispatch a command to the pipeline server.
auto dispatch <command> [options]
| Option | Type | Default | Description |
|---|---|---|---|
--data | string | {} | Command data as JSON |
--host | string | localhost | Connect to existing server |
auto statusCheck pipeline server health and registry status.
auto status
auto diagramOpen the pipeline diagram in a browser.
auto diagram
// auto.config.ts
import { define } from '@auto-engineer/pipeline';
export const fileId = 'my-project';
export const plugins = [
'@auto-engineer/narrative',
'@auto-engineer/server-generator-apollo-emmett',
];
export const pipeline = define('my-pipeline')
.on('SchemaExported')
.emit('GenerateServer', (e) => ({
modelPath: e.data.outputPath,
destination: e.data.directory,
}))
.build();
Symptom: No pipeline config found error
Cause: Missing auto.config.ts file in current directory
Solution:
# Create a minimal config
cat > auto.config.ts << 'EOF'
export const plugins = [];
export const pipeline = { nodes: [] };
EOF
Symptom: Server fails to bind to port
Cause: Another process is using the port
Solution:
auto start --port 5556
Symptom: Command handlers not found
Cause: Plugin package not installed or COMMANDS not exported
Solution:
pnpm add @auto-engineer/my-plugin
DEBUG=auto:* auto start
src/
āāā index.ts
āāā file-syncer/
ā āāā index.ts
āāā bin/
āāā auto.js
| Endpoint | Description |
|---|---|
/health | Server health check |
/registry | List registered handlers |
/pipeline | Pipeline state |
/pipeline/diagram | Visual diagram |
/events | SSE stream |
ws://<syncPort> | File sync WebSocket |
| Package | Usage |
|---|---|
@auto-engineer/pipeline | Pipeline server infrastructure |
@auto-engineer/narrative | File discovery for sync |
@auto-engineer/file-store | Virtual file system |
commander | CLI argument parsing |
socket.io | WebSocket communication |
chokidar | File system watching |
FAQs
Command-line interface that starts the Auto Engineer pipeline server, loads plugins, synchronizes local files with remote sandboxes, and optionally exposes a public tunnel.
We found that @auto-engineer/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.

Research
Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.