CLI Reference

Craik exposes the craik command.

Command Groups

craik

Governed agent-runtime substrate for case files, policy, receipts, and providers.

craik [OPTIONS] COMMAND [ARGS]...

Options:

• --version: Print the installed Craik version and exit.; default false
• -z, --one-shot: Run one quiet one-shot prompt and exit. Pass '-' to read the prompt from stdin.
• --allow-argv-prompt: Acknowledge that argv prompts are visible in local process listings and shell history.; default false
• --tui: Launch the keyboard-first terminal UI.; default false
• --no-tui: Force the plain shell even when running in an interactive terminal.; default false
• -n, --name: Operator-visible shell session name.

craik agent

Launch and manage persistent Craik agent sessions.

craik agent COMMAND [ARGS]...

craik agent launch

Launch a foreground persistent agent session control record.

craik agent launch [OPTIONS]

Options:

• --session-id: Explicit persistent agent session id.
• --project-id: Project scope for the persistent agent.
• --provider-id: Provider runtime id for the session.; default provider_openai
• --model-id: Provider model id requested for the session.
• --auth-profile-id: Credential profile id used by the session.
• --policy-envelope-id: Policy envelope governing the session.
• --endpoint-url: Local endpoint URL when a foreground loop exposes one.
• --name, -n: Operator-visible session display name.

craik agent list

List persisted persistent agent sessions.

craik agent list

craik agent prompt

Send one provider-backed prompt to an active persistent agent session.

craik agent prompt [OPTIONS] SESSION_ID PROMPT

Options:

• --max-iterations: Maximum provider loop iterations.; default 5
• --allow-fixture-action, --no-allow-fixture-action: Grant the deterministic fixture shell action used by provider tests.; default true
• --provider-token-budget: Optional provider token budget.

craik agent recover

Mark or perform a persistent agent recovery transition.

craik agent recover [OPTIONS] SESSION_ID

Options:

• --reason: Failure reason: auth_expired, provider_unavailable, sandbox_failed, stale_endpoint.
• --action: Recovery action: reconnect or resume.
• --detail: Redacted operator recovery detail.

craik agent rename

Rename a persistent agent session.

craik agent rename [OPTIONS] SESSION_ID NAME

craik agent restart

Restart a stopped or failed persistent agent session.

craik agent restart [OPTIONS] SESSION_ID

Options:

• --reason: Operator-visible lifecycle reason.; default restarted by operator
• --endpoint-url: Replacement endpoint URL when one is exposed.

craik agent status

Inspect one persistent agent session.

craik agent status [OPTIONS] SESSION_ID

craik agent stop

Stop an active persistent agent session.

craik agent stop [OPTIONS] SESSION_ID

Options:

• --reason: Operator-visible lifecycle reason.; default stopped by operator

craik agent-message

Send and receive agent mailbox messages.

craik agent-message COMMAND [ARGS]...

craik agent-message receive

Mark an agent mailbox message as received and append a receipt.

craik agent-message receive [OPTIONS] MESSAGE_ID

Options:

• --received-by: Receiving agent id.

craik agent-message send

Send a receipt-backed message from one authenticated run/role to another agent.

craik agent-message send [OPTIONS]

Options:

• --task-id: Task id for the message.
• --from-agent: Authenticated sender id.
• --to-agent: Recipient agent id.
• --subject: Message subject.
• --body: Message body.
• --run-id: Sender run id used to authenticate from-agent.
• --kind: Message kind.; default request
• --from-role-id: Sender role id.
• --from-role-kind: Sender role kind.
• --to-role-id: Recipient role id.
• --to-role-kind: Recipient role kind.
• --handoff-id: Related handoff id.

craik approvals

Review and decide pending approval requests.

craik approvals COMMAND [ARGS]...

craik approvals approve

Approve one request and emit a decision receipt.

craik approvals approve [OPTIONS] APPROVAL_ID

Options:

• --reason: Approval reason.

craik approvals deny

Deny one request and emit an actionable decision receipt.

craik approvals deny [OPTIONS] APPROVAL_ID

Options:

• --reason: Denial reason.

craik approvals list

List approval requests.

craik approvals list [OPTIONS]

Options:

• --include-resolved: Include resolved approval records.; default false

craik approvals show

Show one approval request.

craik approvals show [OPTIONS] APPROVAL_ID

craik attach

Attach a file reference to the active session.

craik attach [OPTIONS] PATH

craik auth

Manage provider credential profiles.

craik auth COMMAND [ARGS]...

craik auth add

Add or replace an auth profile.

craik auth add [OPTIONS] PROFILE_ID

Options:

• --kind: Credential kind for this profile.
• --env-var: Environment variable containing an API key.
• --ref: Secret reference for secret-ref profiles.
• --manager: Secret manager for secret-ref profiles.
• --secrets-root: Root directory for file secret references.
• --base-url: Provider base URL for this profile.
• --allow-local-base-url: Allow loopback HTTP provider URLs.; default false

craik auth approve

Approve first live use of an auth profile for a run.

craik auth approve [OPTIONS] PROFILE_ID

Options:

• --run: Run id requesting first credential use.
• --approved-by: Operator or approver recording approval.; default operator:local

craik auth grant

Grant an operator subject or group access to an auth profile.

craik auth grant [OPTIONS] PROFILE_ID

Options:

• --to-subject: Operator subject authorized for this profile.
• --to-group: Operator group authorized for this profile.
• --granted-by: Operator or approver recording the grant.; default operator:local

craik auth list

List configured auth profiles.

craik auth list

craik auth login

Capture and cache provider credentials in local credential storage.

craik auth login [OPTIONS] PROVIDER

Options:

• --no-browser: Do not launch provider/browser setup.; default false
• --mode: Login mode: api-key or oauth.
• --profile-id: Auth profile id to create.
• --env-var: Environment variable containing the provider key.
• --secret-ref: Secret reference instead of an environment variable.
• --base-url: Provider base URL for local-compatible providers.
• --project-id: GCP project id for Gemini/Vertex OAuth profiles.
• --service-account: Service-account JSON file for Gemini/Vertex OAuth profiles.
• --allow-local-base-url: Allow loopback HTTP provider URLs.; default false
• --dry-run: Validate and print redacted setup without writing state.; default false
• --json: Print a redacted JSON result.; default false

craik auth logout

Remove a provider auth profile and cached credential.

craik auth logout [OPTIONS] PROVIDER

Options:

• --profile: Auth profile id to remove.

craik auth migrate-from-env

Migrate env-var API-key profiles into cached credential storage.

craik auth migrate-from-env [OPTIONS]

Options:

• --dry-run, --apply: Preview migration by default.; default true
• -y, --yes: Consent to all eligible profile migrations.; default false

craik auth migrate-secrets

Preview migration from file/env references into a secure backend.

craik auth migrate-secrets [OPTIONS]

Options:

• --dry-run, --apply: Preview migration by default.; default true

craik auth remove

Remove an auth profile.

craik auth remove [OPTIONS] PROFILE_ID

craik auth setup

Guided setup for provider authentication profiles.

craik auth setup [OPTIONS] PROVIDER

Options:

• --profile-id: Auth profile id to create.
• --env-var: Environment variable containing the API key.
• --secret-ref: Secret reference instead of an environment variable.
• --secret-manager: Secret manager for --secret-ref.; default env
• --secrets-root: Root directory for file secret references.
• --base-url: Provider base URL.
• --allow-local-base-url: Allow loopback HTTP provider URLs.; default false
• --pool, --no-pool: Create or update the default credential pool.; default true
• --dry-run: Validate and print redacted setup without writing state.; default false

craik auth status

Show auth profile health and last-use status.

craik auth status

craik auth storage

Inspect and migrate credential storage posture.

craik auth storage COMMAND [ARGS]...

craik auth storage status

Show credential storage backend posture without printing secrets.

craik auth storage status

craik auth test

Check whether an auth profile can resolve credential material.

craik auth test [OPTIONS] PROFILE_ID

craik case

Build and inspect Craik case files.

craik case COMMAND [ARGS]...

craik case build

Build and persist a deterministic case file for a task.

craik case build [OPTIONS] TASK_ID

Options:

• --max-tokens: Approximate context budget.; default 24000
• --github, --no-github: Load read-only GitHub context.; default true
• --discovery-include: One-off context discovery include override. May be repeated.
• --discovery-exclude: One-off context discovery exclude override. May be repeated.

craik case show

Show one persisted case file by case id or task id.

craik case show [OPTIONS] CASE_OR_TASK_ID

craik channels

Configure and inspect real channel adapters.

craik channels COMMAND [ARGS]...

craik channels doctor

Show redacted channel adapter diagnostics.

craik channels doctor [OPTIONS] SERVICE

craik channels fixture-schema

Print the expected inbound fixture JSON shape for a channel service.

craik channels fixture-schema [OPTIONS] SERVICE

craik channels list

List supported real channel adapters.

craik channels list

craik channels normalize-fixture

Normalize a provider event fixture without contacting the provider.

craik channels normalize-fixture [OPTIONS] SERVICE RAW_JSON

craik channels respond-fixture

Build a redacted outbound response fixture and delivery receipt.

craik channels respond-fixture [OPTIONS] SERVICE EVENT_ID RESPONSE_ID SUMMARY

Options:

• --delivered, --failed: default true

craik channels setup

Persist channel adapter setup artifacts and show a redacted setup plan.

craik channels setup [OPTIONS] SERVICE

craik chat

Launch the Craik agent shell or run one conversational prompt.

craik chat [OPTIONS]

Options:

• -q, --prompt: Run one prompt; pass '-' to read stdin.
• --allow-argv-prompt: Acknowledge argv prompt exposure in process listings and shell history.; default false

craik compact

Manually compact the current conversation (coming in v0.14.0).

craik compact

craik connect

Connect to external services.

craik connect COMMAND [ARGS]...

craik connect stigmem

Detect Stigmem backend compatibility.

craik connect stigmem [OPTIONS]

Options:

• --url: Stigmem node URL.
• --api-key: Bearer API key. Prefer CRAIK_STIGMEM_API_KEY.
• --timeout: Request timeout in seconds.; default 5.0

craik contradictions

Manage local contradiction reports.

craik contradictions COMMAND [ARGS]...

craik contradictions list

List local contradiction reports.

craik contradictions list [OPTIONS]

Options:

• --task-id: Only include reports for this task.
• --status: Only include reports with this status.

craik contradictions open

Open and persist a local contradiction report.

craik contradictions open [OPTIONS]

Options:

• --summary: Contradiction summary.
• --fact: Conflicting fact id or statement. Repeat at least twice.
• --task-id: Task associated with this contradiction.
• --affected-artifact: Affected artifact path or id.
• --evidence-id: Supporting evidence id.
• --owner: Owner responsible for resolution.
• --proposed-resolution: Proposed resolution.
• --stigmem-conflict-id: Optional future Stigmem conflict id.

craik contradictions show

Show one local contradiction report and linked evidence.

craik contradictions show [OPTIONS] REPORT_ID

craik cost

Show provider token usage and cost accounting state.

craik cost

craik dashboard

Run the authenticated local dashboard.

craik dashboard [OPTIONS]

Options:

• --host: Dashboard bind host. Defaults to local only.; default 127.0.0.1
• --port: default 8787
• --auth-token: Dashboard bearer token; defaults to operator session.
• --allow-unsafe-dashboard-bind: Allow binding the dashboard outside localhost.; default false
• --dry-run: Print dashboard launch metadata without serving.; default false

craik delegation

Pause and resolve human delegation points.

craik delegation COMMAND [ARGS]...

craik delegation pause

Pause a run by opening a receipted human delegation.

craik delegation pause [OPTIONS] RUN_ID

Options:

• --summary: Delegation summary.
• --decision: Decision requested from the human operator.
• --kind: Delegation kind: approval, clarification, escalation, or ownership_transfer.; default clarification
• --owner: Delegation owner.

craik delegation resolve

Resolve or cancel a human delegation and link the decision receipt to its run.

craik delegation resolve [OPTIONS] DELEGATION_ID

Options:

• --resolution: Human resolution text.
• --operator-subject: Resolver operator subject.
• --operator-issuer: Resolver operator issuer.
• --outcome: accepted, rejected, or cancelled.; default accepted

craik demo

Run built-in Craik demos.

craik demo COMMAND [ARGS]...

craik demo persistent-agent

Run the deterministic persistent agent launch demo.

craik demo persistent-agent [OPTIONS]

Options:

• --repo-path: Path inside the Git repository for the demo.; default .
• --project-name: Project name to register for the demo.; default Persistent Agent Demo
• --provider-id: Provider id to exercise. Repeat to override the default provider set.
• --allow-live: Allow the demo to use live provider transport.; default false
• --keep-artifacts: Keep demo agent session artifacts after exit.; default false

craik demo stigmem-docs

Run the Stigmem documentation reconciliation demo.

craik demo stigmem-docs [OPTIONS]

Options:

• --repo-path: Path inside the Stigmem Git repository.; default .
• --project-name: Project name to register for the demo.; default Stigmem
• --stigmem-url: Stigmem node URL.
• --stigmem-api-key: Bearer API key. Prefer CRAIK_STIGMEM_API_KEY.
• --github, --no-github: Load read-only GitHub context.; default true
• --provider-id: Provider id to exercise through the deterministic demo runner. Repeat to override the default OpenAI and Anthropic run.
• --provider: Run one provider-backed demo path and surface model findings. Set CRAIK_LIVE=1 for live transport; otherwise fixture transport is used.
• --max-tokens: Approximate case-file context budget.; default 24000

craik desktop

Inspect and launch desktop companion MVP actions.

craik desktop COMMAND [ARGS]...

craik desktop action

Show the command backing one desktop companion action.

craik desktop action [OPTIONS] ACTION_ID

craik desktop menu

List desktop companion tray/menu actions.

craik desktop menu

craik desktop notify-approval

Render a desktop approval notification fixture.

craik desktop notify-approval [OPTIONS] APPROVAL_ID CAPABILITY TARGET

Options:

• --risk: Approval risk summary.; default operator review required
• --policy: Policy profile or envelope.; default strict
• --retry-path: Retry path after decision.; default retry the blocked command after approval

craik desktop status

Show desktop companion status, dashboard link, and gateway/provider health.

craik desktop status

craik desktop update-check

Show the desktop companion update-check payload.

craik desktop update-check

craik doctor

Run diagnostics for local and gateway readiness.

craik doctor [OPTIONS]

Options:

• --fix: Plan or apply narrow supported fixes.; default false
• --dry-run, --apply: Preview fixes without writing state, or apply supported safe fixes.; default true
• --yes: Confirm unsafe fix actions such as public-bind rebinding.; default false
• --json: Print the diagnostic report as JSON.; default false

craik fork

Fork the active persistent session.

craik fork

craik gateway

Run and inspect the local gateway daemon.

craik gateway COMMAND [ARGS]...

craik gateway doctor

Run gateway-focused diagnostics.

craik gateway doctor

craik gateway install

Generate a user-service definition for the local gateway.

craik gateway install [OPTIONS]

Options:

• --backend: Service backend: systemd, launchd, or windows-plan.
• --executable-path: Override resolved craik binary path.
• --log-path: Override gateway log path in generated service unit.
• --dry-run: Print generated service unit without writing it.; default false
• --output: Write unit to PATH instead of default location; '-' for stdout.

craik gateway logs

Show recent gateway log lines.

craik gateway logs [OPTIONS]

Options:

• --tail: default 50

craik gateway restart

Request a gateway restart by stopping the current lifecycle state.

craik gateway restart

craik gateway start

Run the foreground gateway daemon until interrupted.

craik gateway start

craik gateway status

Show gateway config, runtime state, pid, bind, and stale-pid status.

craik gateway status

craik gateway stop

Request gateway stop and recover stale pid state.

craik gateway stop [OPTIONS]

Options:

• --signal-process: Send SIGTERM to the recorded pid before marking the gateway stopped.; default false

craik gateway uninstall

Remove generated gateway service definitions.

craik gateway uninstall

craik graph

Export Craik work graphs.

craik graph COMMAND [ARGS]...

craik graph export

Export the local work graph as deterministic JSON.

craik graph export [OPTIONS]

Options:

• --task-id: Only export graph objects for this task.

craik handoff

Create and inspect Craik handoffs.

craik handoff COMMAND [ARGS]...

craik handoff create

Create a structured handoff for a task.

craik handoff create [OPTIONS] TASK_ID

Options:

• --summary: Handoff summary.
• --agent: Agent identity.; default agent:local
• --status: Status: completed, incomplete, blocked, or failed.; default completed
• --completed-action: Completed action. May be repeated.
• --file-changed: Changed file. May be repeated.
• --artifact: Artifact path or id. May be repeated.
• --command-run: Command run. May be repeated.
• --test-run: Validation run. May be repeated.
• --risk: Residual risk. May be repeated.
• --next-step: Next step. May be repeated.
• --policy-exception: Policy exception or fail-open note.
• --self-audit-note: Self-audit note. May be repeated.
• --markdown: Print Markdown instead of JSON.; default false
• --allow-blocked-exit: Persist the handoff despite a blocked exit-discipline check.; default false
• --blocked-exit-rationale: Required with --allow-blocked-exit.

craik handoff list

List persisted handoffs.

craik handoff list

craik handoff show

Show one persisted handoff by handoff id or task id.

craik handoff show [OPTIONS] HANDOFF_OR_TASK_ID

Options:

• --markdown: Print Markdown instead of JSON.; default false

craik home

Inspect and initialize Craik local state paths.

craik home COMMAND [ARGS]...

craik home init

Create Craik local state directories.

craik home init

craik home show

Print resolved Craik local state paths without creating directories.

craik home show

craik insights

Show high-level runtime activity insights.

craik insights

craik instructions

Manage runtime instruction distillation.

craik instructions COMMAND [ARGS]...

craik instructions approve

Approve a distilled instruction and make it governing.

craik instructions approve [OPTIONS] ITEM_ID

Options:

• --rationale: Approval rationale.; default ``
• --override: Approve a stale or contradicted item intentionally.; default false
• --override-rationale: Required rationale for override approval.

craik instructions ingest

Ingest registered instruction sources into reviewable proposals.

craik instructions ingest [OPTIONS]

Options:

• --project: Project id or name. Defaults when one project exists.
• --json, --table: Print JSON instead of a table.; default false

craik instructions list

List distilled instruction proposals.

craik instructions list [OPTIONS]

Options:

• --status: Filter by proposed, governing, rejected, superseded, or stale.
• --source: Filter by instruction source id.
• --category: Filter by distillation category.
• --json, --table: Print JSON instead of a table.; default false

craik instructions register

Register an instruction source idempotently and print its receipt.

craik instructions register [OPTIONS] KIND PATH

Options:

• --project: Project id or name. Defaults when one project exists.
• --owner: Owning team or operator. Defaults to active operator.

craik instructions reject

Reject a distilled instruction with an auditable receipt.

craik instructions reject [OPTIONS] ITEM_ID

Options:

• --rationale: Rejection rationale.; default ``

craik instructions show

Show one distilled instruction with provenance and freshness.

craik instructions show [OPTIONS] ITEM_ID

craik intent

Inspect task intent locks.

craik intent COMMAND [ARGS]...

craik intent show

Show one persisted intent lock by intent lock id or task id.

craik intent show [OPTIONS] INTENT_OR_TASK_ID

craik knowledge

Capture v0.5 runtime knowledge records.

craik knowledge COMMAND [ARGS]...

craik knowledge context-request

Persist a context request that blocks continuation until fulfilled.

craik knowledge context-request [OPTIONS] TASK_ID

Options:

• --question: Requested context.
• --needed-for: Why this context is needed.
• --kind: Context source kind.; default user_input
• --project: Project id.
• --unknown-id: Linked unknown id.

craik knowledge fulfill-context-request

Fulfill a context request and link the operator receipt.

craik knowledge fulfill-context-request [OPTIONS] REQUEST_ID

craik knowledge negative

Persist evidence-backed negative knowledge.

craik knowledge negative [OPTIONS]

Options:

• --statement: Negative knowledge statement.
• --scope: Scope of the assertion.
• --evidence-id: Evidence id. May be repeated.
• --trust-class: Trust class.; default observed
• --project: Project id.
• --task: Task id.
• --contradicted-fact: Existing positive assertion contradicted.

craik knowledge resolve-context-debt

Resolve a context debt record and link the operator receipt.

craik knowledge resolve-context-debt [OPTIONS] DEBT_ID

Options:

• --summary: Resolution summary.

craik knowledge resolve-unknown

Resolve an unknown and link the operator receipt.

craik knowledge resolve-unknown [OPTIONS] UNKNOWN_ID

Options:

• --answer: Resolution answer.

craik knowledge scratchpad

Persist an expiring scratchpad note.

craik knowledge scratchpad [OPTIONS] TASK_ID

Options:

• --note: Temporary note to persist.
• --project: Project id.
• --evidence-id: Evidence id. May be repeated.

craik knowledge trap

Persist an evidence-backed known trap.

craik knowledge trap [OPTIONS]

Options:

• --kind: Trap kind.
• --statement: Trap statement.
• --avoidance: Avoidance guidance.
• --evidence-id: Evidence id. May be repeated.
• --project: Project id.
• --task: Task id.

craik knowledge unknown

Persist an unresolved unknown.

craik knowledge unknown [OPTIONS] TASK_ID

Options:

• --question: Unknown question.
• --next-action: Action needed.
• --needed-resolution: Resolution source, such as user_input.; default user_input
• --project: Project id.
• --evidence-id: Evidence id. May be repeated.

craik login

Authenticate the local operator with OIDC device-code flow.

craik login [OPTIONS]

Options:

• --issuer: OIDC issuer URL. Defaults to CRAIK_OIDC_ISSUER.
• --client-id: OIDC client id. Defaults to CRAIK_OIDC_CLIENT_ID.; default ``
• --audience: Optional OIDC audience value.
• --max-wait-seconds: Maximum device-code polling duration.; default 600

craik logout

Clear the active operator session.

craik logout [OPTIONS]

Options:

• --issuer: OIDC issuer URL for best-effort revocation.
• --client-id: OIDC client id for best-effort revocation.; default ``

craik mcp

Inspect MCP server and client compatibility.

craik mcp COMMAND [ARGS]...

craik mcp client

Import and export redacted MCP client config.

craik mcp client COMMAND [ARGS]...

craik mcp client export

Export MCP client config in redacted JSON form.

craik mcp client export [OPTIONS]

Options:

• --path: Craik MCP client config JSON path.

craik mcp client import

Import MCP client config and print redacted Craik metadata.

craik mcp client import [OPTIONS]

Options:

• --path: MCP client config JSON path.

craik mcp server

Expose Craik MCP server compatibility surfaces.

craik mcp server COMMAND [ARGS]...

craik mcp server handle

Handle MCP JSON-RPC compatibility requests over JSON lines.

craik mcp server handle [OPTIONS]

Options:

• --request-json: Single JSON-RPC request. Defaults to newline-delimited JSON on stdin.
• --include-write-tools: Enable gated write tools for this request.; default false

craik mcp server manifest

Print the Craik MCP server compatibility manifest.

craik mcp server manifest [OPTIONS]

Options:

• --include-write-tools: Include gated write tools in the manifest.; default false

craik memory

Create and review local memory proposals.

craik memory COMMAND [ARGS]...

craik memory approve

Approve a local memory proposal for local search.

craik memory approve [OPTIONS] PROPOSAL_ID

Options:

• --decided-by: Reviewer identity.; default user:local
• --reason: Decision reason.; default Evidence reviewed.

craik memory diff

Print a run-scoped memory diff for local proposal activity.

craik memory diff [OPTIONS] TASK_ID

craik memory list

List local memory proposals.

craik memory list [OPTIONS]

Options:

• --task-id: Only include proposals for this task id.
• --status: Only include proposals with this status.

craik memory preview

Preview local memory impact before promotion or direct writes.

craik memory preview [OPTIONS] TASK_ID

craik memory propose

Create a reviewable local memory proposal.

craik memory propose [OPTIONS] TASK_ID

Options:

• --entity: Fact entity.
• --relation: Fact relation.
• --value: Fact value.
• --source: Fact source.
• --evidence-source: Evidence source supporting the proposal.
• --evidence-locator: Evidence locator supporting the proposal.
• --evidence-summary: Evidence summary supporting the proposal.
• --confidence: Fact confidence.; default 0.8
• --scope: Memory scope: local, team, company, or public.; default local
• --trust-class: Trust class: observed, reported, inferred, policy, external, or stale-risk.; default observed
• --operation: Operation: add, update, or invalidate.; default add

craik memory reject

Reject a local memory proposal.

craik memory reject [OPTIONS] PROPOSAL_ID

Options:

• --decided-by: Reviewer identity.; default user:local
• --reason: Decision reason.; default Rejected during review.

craik memory search

Search approved local memory facts.

craik memory search [OPTIONS] QUERY

craik memory show

Show one local memory proposal.

craik memory show [OPTIONS] PROPOSAL_ID

craik migrate

Inspect and dry-run adjacent runtime migrations.

craik migrate COMMAND [ARGS]...

craik migrate import

Run an adjacent runtime import dry-run or explicitly apply importable records.

craik migrate import [OPTIONS]

Options:

• --source: Adjacent runtime source path.
• --kind: Migration source kind.; default agent-runtime
• --dry-run, --apply: Preview import actions without writing state.; default true
• --json: Emit machine-readable JSON output.; default false
• --yes: Apply without an interactive confirmation prompt.; default false
• --include-records: Comma-separated source record ids to apply; defaults to all importable records.
• --include-secrets: Acknowledge secret-bearing records; secret values are still not copied.; default false

craik migrate inspect

Inspect an adjacent runtime source without mutating it.

craik migrate inspect [OPTIONS]

Options:

• --source: Adjacent runtime source path.
• --kind: Migration source kind.; default agent-runtime
• --json: Emit machine-readable JSON output.; default false

craik migrate plan

Plan an adjacent runtime migration without mutating source or Craik state.

craik migrate plan [OPTIONS]

Options:

• --source: Adjacent runtime source path.
• --kind: Migration source kind.; default agent-runtime
• --json: Emit machine-readable JSON output.; default false

craik migrate report

Render a safe-to-share adjacent runtime migration report.

craik migrate report [OPTIONS]

Options:

• --source: Adjacent runtime source path.
• --kind: Migration source kind.; default agent-runtime
• --json: Emit machine-readable JSON output.; default false
• --locale: Locale for text output. Defaults to CRAIK_LOCALE.

craik model

Inspect and select active model routing.

craik model COMMAND [ARGS]...

craik model alias

List, add, or remove model aliases.

craik model alias [OPTIONS] ACTION

Options:

• --name
• --target

craik model fallback

List, add, remove, or clear model fallback order.

craik model fallback [OPTIONS] ACTION

Options:

• --model

craik model list

List configured provider/model choices and local presets.

craik model list

craik model probe

Probe model readiness without sending live prompts.

craik model probe

craik model set

Set the active model as <provider>/<model>.

craik model set [OPTIONS] MODEL

Options:

• --display-name: Human-readable model profile label.
• --backend: Backend preference for this profile.; default provider
• --reasoning-effort: Provider reasoning effort option.
• --service-tier: Provider service tier option.
• --temperature: Provider temperature option.
• --max-output-tokens: Provider output token limit.
• --option: Provider-specific profile option as key=value.

craik model status

Show active model state and readiness.

craik model status

craik note

Add an operator note to the active session.

craik note [OPTIONS] TEXT

craik onboard

Print runner-readable onboarding context for a project.

craik onboard [OPTIONS]

Options:

• --project: Registered project id or name to onboard.
• --policy-profile: Policy profile: strict, trusted-local, or automation.; default strict
• --trusted-local-fail-open: Explicitly opt in to trusted-local fail-open semantics.; default false
• --max-recent-handoffs: Recent handoffs to include.; default 5

craik operator

Inspect read-only operator surface state.

craik operator COMMAND [ARGS]...

craik operator budget

Print the read-only budget and quota view.

craik operator budget [OPTIONS]

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik operator contradictions

Print the read-only contradiction inbox.

craik operator contradictions [OPTIONS]

Options:

• --project: Only include reports in this project scope.
• --task-id: Only include reports for this task.
• --status: Only include reports with status open, resolved, or ignored.
• --all: Include reports owned by other operators.; default false
• --json, --view: Print JSON instead of the operator view.; default false

craik operator delegations

Print the read-only delegation queue.

craik operator delegations [OPTIONS]

Options:

• --project: Only include records in this project scope.
• --task-id: Only include delegation points for this task.
• --status: Only include delegation points with this status.
• --all: Include delegation points owned by other operators.; default false
• --json, --view: Print JSON instead of the operator view.; default false

craik operator evidence

Print the read-only evidence and assumption view.

craik operator evidence [OPTIONS]

Options:

• --project: Only include records in this project scope.
• --task-id: Only include assumptions and scoped evidence for this task.
• --json, --view: Print JSON instead of the operator view.; default false

craik operator handoff

Print the read-only handoff viewer.

craik operator handoff [OPTIONS] HANDOFF_OR_TASK_ID

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik operator instructions

Print the read-only instruction distillation view.

craik operator instructions [OPTIONS]

Options:

• --project: Only include records in this project scope.
• --json, --view: Print JSON instead of the operator view.; default false

craik operator memory-impact

Print the read-only memory impact preview view.

craik operator memory-impact [OPTIONS] PREVIEW_ID

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik operator overview

Print the read-only operator surface overview.

craik operator overview [OPTIONS]

Options:

• --project: Only include records in this project scope.
• --section: Only print one operator surface section.
• --json, --view: Print JSON instead of the operator view.; default false

craik operator quality

Print the read-only quality gate view.

craik operator quality [OPTIONS]

Options:

• --project: Only include records in this project scope.
• --json, --view: Print JSON instead of the operator view.; default false

craik operator receipt

Print the read-only receipt viewer.

craik operator receipt [OPTIONS] RECEIPT_ID

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik operator run-delta

Print the read-only run delta and recovery view.

craik operator run-delta [OPTIONS] DELTA_ID_OR_RUN_ID_OR_TASK_ID

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik operator run-deltas

Print the read-only run delta and recovery view.

craik operator run-deltas [OPTIONS] DELTA_ID_OR_RUN_ID_OR_TASK_ID

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik operator traps

Print the read-only known traps and negative knowledge view.

craik operator traps [OPTIONS]

Options:

• --project: Only include records in this project scope.
• --task-id: Only include records for this task.
• --json, --view: Print JSON instead of the operator view.; default false

craik operator work-graph

Print the read-only work graph explorer.

craik operator work-graph [OPTIONS]

Options:

• --task-id: Only include graph objects for this task.
• --json, --view: Print JSON instead of the operator view.; default false

craik plugins

Install and govern runtime plugins.

craik plugins COMMAND [ARGS]...

craik plugins grant

Grant plugin capability authority.

craik plugins grant [OPTIONS] PLUGIN_ID

Options:

• --operation: Operation. May repeat.
• --target: Target path. May repeat.
• --expiry: ISO-8601 expiry.
• --task: Task id.
• --policy: Policy envelope id.
• --evidence: Evidence id. May repeat.
• --capability: Capability name.; default plugin.operation
• --id: Grant id.
• --repo: Repository target.
• --reason: Grant reason.; default Approved from CLI.

craik plugins grants

Inspect plugin grants.

craik plugins grants COMMAND [ARGS]...

craik plugins grants list

List plugin capability grants.

craik plugins grants list [OPTIONS]

Options:

• --plugin: Plugin descriptor id.

craik plugins install

Install a plugin descriptor manifest.

craik plugins install [OPTIONS] PATH

craik plugins probation

Review plugin probation records.

craik plugins probation COMMAND [ARGS]...

craik plugins probation review

Decide a plugin probation review.

craik plugins probation review [OPTIONS] PROBATION_ID

Options:

• --evidence: Evidence id. May repeat.
• --decide: pass or fail.
• --rationale: Review rationale.; default Reviewed from CLI.

craik plugins receipts

Inspect plugin receipts.

craik plugins receipts COMMAND [ARGS]...

craik plugins receipts list

List plugin receipts.

craik plugins receipts list [OPTIONS]

Options:

• --plugin: Plugin descriptor id.

craik policy

Inspect Craik policy profiles.

craik policy COMMAND [ARGS]...

craik policy show

Print a generated policy envelope.

craik policy show [OPTIONS]

Options:

• --task-id: Task id for the envelope.; default task_preview
• --actor: Actor for the envelope.; default agent:preview
• --profile: Policy profile: strict, trusted-local, or automation.; default strict
• --trusted-local-fail-open: Explicitly opt in to trusted-local fail-open semantics.; default false
• --include-receipt: Include the fail-open receipt when applicable.; default false

craik policy test

Run policy regression checks required for release gates.

craik policy test

craik profile

Manage local Craik profiles and personas.

craik profile COMMAND [ARGS]...

craik profile create

Create a local Craik profile.

craik profile create [OPTIONS] NAME

Options:

• --description: default ``

craik profile delete

Delete a local Craik profile.

craik profile delete [OPTIONS] NAME

Options:

• --yes: Confirm profile deletion.; default false

craik profile export

Export profile settings without secrets.

craik profile export

craik profile import

Import profile settings from a redacted JSON export.

craik profile import [OPTIONS] PATH

craik profile list

List local Craik profiles.

craik profile list

craik profile rename

Rename a local Craik profile.

craik profile rename [OPTIONS] OLD NEW

craik profile show

Show one local Craik profile.

craik profile show [OPTIONS]

Options:

• --name

craik profile use

Set the active local Craik profile.

craik profile use [OPTIONS] NAME

craik project

Register and inspect Craik projects.

craik project COMMAND [ARGS]...

craik project add

Register a Git project.

craik project add [OPTIONS] PATH

Options:

• --name: Project name. Defaults to the repository directory name.
• --docs-path: Documentation path to include. May be repeated.
• --immutable-path: Immutable path to include. May be repeated.
• --discovery-include: Context discovery include override. May be repeated.
• --discovery-exclude: Context discovery exclude override. May be repeated.

craik project list

List registered projects.

craik project list

craik project show

Show one registered project by id or name.

craik project show [OPTIONS] PROJECT

craik prompt

Compile runner-ready prompts from Craik runtime state.

craik prompt COMMAND [ARGS]...

craik prompt compile

Compile a deterministic policy-aware prompt for a task and runner.

craik prompt compile [OPTIONS] TASK_ID

Options:

• --runner: Runner id from craik runners matrix.
• --expected-output-schema: Expected output schema. May repeat.

craik provider

Inspect and select model providers.

craik provider COMMAND [ARGS]...

craik provider certification

Print the provider certification matrix as JSON.

craik provider certification [OPTIONS]

Options:

• --provider-id: Provider id to inspect. Prints all when omitted.

craik provider list

Print registered model providers as JSON.

craik provider list

craik provider local-health

Check a local OpenAI-compatible endpoint without loading provider credentials.

craik provider local-health [OPTIONS] PRESET_ID

Options:

• --base-url: Override the preset base URL for this check.
• --timeout-seconds: Local endpoint health check timeout.; default 2.0

craik provider local-presets

Print local model routing presets as JSON.

craik provider local-presets

craik provider select

Print a redacted provider selection payload.

craik provider select [OPTIONS] PROVIDER_ID

Options:

• --mode: Provider mode to select.; default chat
• --policy-envelope-id: Policy envelope linked to this selection.
• --receipt-id: Receipt id linked to this selection.

craik provider show

Print one model provider as JSON.

craik provider show [OPTIONS] PROVIDER_ID

craik quota

Show provider quota references and runtime quota state.

craik quota

craik receipt

Inspect persisted capability receipts.

craik receipt COMMAND [ARGS]...

craik receipt list

Print persisted capability receipts as JSON.

craik receipt list [OPTIONS]

Options:

• --task-id: Only include receipts for this task id.
• --policy-id: Only include receipts linked to this policy envelope.
• --handoff-id: Only include receipts linked to this handoff.

craik receipt show

Print one capability receipt by id as JSON.

craik receipt show [OPTIONS] RECEIPT_ID

craik receipt verify

Verify a receipt JSON file without trusting the producing runtime.

craik receipt verify [OPTIONS] PATH

Options:

• --public-key: HMAC key material path for verification.
• --auto-discover: Discover the local Craik HMAC key from CRAIK_HOME.; default false
• --side-log-base: Directory containing shell side-log files.

craik receipts

Inspect persisted capability receipts.

craik receipts COMMAND [ARGS]...

craik receipts list

Print persisted capability receipts as JSON.

craik receipts list [OPTIONS]

Options:

• --task-id: Only include receipts for this task id.
• --policy-id: Only include receipts linked to this policy envelope.
• --handoff-id: Only include receipts linked to this handoff.

craik receipts show

Print one capability receipt by id as JSON.

craik receipts show [OPTIONS] RECEIPT_ID

craik receipts verify

Verify a receipt JSON file without trusting the producing runtime.

craik receipts verify [OPTIONS] PATH

Options:

• --public-key: HMAC key material path for verification.
• --auto-discover: Discover the local Craik HMAC key from CRAIK_HOME.; default false
• --side-log-base: Directory containing shell side-log files.

craik redo

Redo the latest replayable agent turn when available.

craik redo

craik references

Inspect and verify reference integrations.

craik references COMMAND [ARGS]...

craik references list

List reference integrations.

craik references list

craik references verify

Verify that a reference integration is present and valid.

craik references verify [OPTIONS] INTEGRATION_ID

craik rename

Set the operator-visible shell session name.

craik rename [OPTIONS] NAME

craik review

Capture reviewable critic and red-team findings.

craik review COMMAND [ARGS]...

craik review critic

Persist a reviewable runtime critic finding.

craik review critic [OPTIONS] TASK_ID

Options:

• --finding-type: Critic finding type.
• --summary: Finding summary.
• --rationale: Finding rationale.
• --severity: Finding severity.; default medium
• --project: Project id.
• --artifact: Affected artifact. May be repeated.
• --evidence-id: Evidence id. May be repeated.
• --proposed-action: Proposed action. May be repeated.

craik review red-team

Persist a reviewable red-team finding.

craik review red-team [OPTIONS] TASK_ID

Options:

• --finding-type: Red-team finding type.
• --summary: Finding summary.
• --attack-path: Attack path.
• --severity: Finding severity.; default high
• --project: Project id.
• --artifact: Affected artifact. May be repeated.
• --evidence-id: Evidence id. May be repeated.
• --proposed-action: Proposed action. May be repeated.
• --blocking, --non-blocking: Whether this is a blocking finding.; default false

craik run

Execute, inspect, and recover single-agent task runs.

craik run COMMAND [ARGS]...

craik run cancel

Cancel a non-terminal run by persisting an interrupted stop state.

craik run cancel [OPTIONS] RUN_ID_OR_TASK_ID

Options:

• --reason: Reason recorded on the interrupted run.; default cancelled by operator

craik run delta

Show what changed since the previous usable handoff or resume point.

craik run delta [OPTIONS] DELTA_ID_OR_RUN_ID_OR_TASK_ID

Options:

• --json, --view: Print JSON instead of the operator view.; default false

craik run execute

Execute a deterministic provider-backed MVP runner path for a task.

craik run execute [OPTIONS] TASK_ID

Options:

• --provider-id: Configured provider runner id. Use provider list to inspect options.; default provider_openai
• --allow-fixture-action, --no-allow-fixture-action: Grant the deterministic fixture shell action required by the MVP loop. This records a governed receipt; it does not execute arbitrary shell.; default true
• --max-iterations: Maximum single-agent loop iterations.; default 5
• --role: Specialist role kind to dispatch for this run.
• --role-runner: Override the default runner for the selected role.

craik run inspect

Inspect one persisted task run and linked local state.

craik run inspect [OPTIONS] RUN_ID_OR_TASK_ID

Options:

• --include-outputs, --no-include-outputs: Include full captured output payloads.; default false

craik run list

List persisted task runs.

craik run list [OPTIONS]

Options:

• --task-id: Only include runs for this task id.

craik run prompt

Execute a raw prompt through the audited Gateway run path.

craik run prompt [OPTIONS] PROMPT

craik run recover

Print a deterministic recovery plan for an interrupted run.

craik run recover [OPTIONS] RUN_ID_OR_TASK_ID

Options:

• --dry-run: Print recovery plan without writing new state.; default false
• --reason: Reason for recovery.

craik run resume

Resume an interrupted provider-backed run from durable phase boundaries.

craik run resume [OPTIONS] RUN_ID_OR_TASK_ID

Options:

• --provider-id: Override the provider runner id recorded on the interrupted run.
• --allow-fixture-action, --no-allow-fixture-action: Grant the deterministic fixture shell action required by the MVP loop.; default true
• --max-iterations: Maximum single-agent loop iterations.; default 5

craik run show

Show one persisted task run and linked local state.

craik run show [OPTIONS] RUN_ID_OR_TASK_ID

Options:

• --include-outputs, --no-include-outputs: Include full captured output payloads.; default false

craik runners

Inspect runner capabilities and trust profiles.

craik runners COMMAND [ARGS]...

craik runners matrix

Print runner capability matrix entries as JSON.

craik runners matrix [OPTIONS]

Options:

• --runner: Runner id to inspect. Prints all runners when omitted.

craik schema

Inspect Craik runtime contract schemas.

craik schema COMMAND [ARGS]...

craik schema list

List known Craik contract schemas.

craik schema list

craik schema show

Print a contract JSON Schema by name.

craik schema show [OPTIONS] NAME

craik scope-change

Decide pending scope-change protocol requests.

craik scope-change COMMAND [ARGS]...

craik scope-change decide

Resolve a pending scope-change request through the explicit protocol.

craik scope-change decide [OPTIONS] REQUEST_ID

Options:

• --decision: Decision: expand, sibling, handoff, or denied.
• --rationale: Decision rationale.
• --decided-by: Operator or agent deciding.
• --run-id: Paused run id to resume or update.
• --sibling-title: Title for a sibling task decision.
• --handoff-id: Handoff id for a handoff decision.

craik session

Inspect and manage persistent Craik sessions.

craik session COMMAND [ARGS]...

craik session delete

Mark a session as stopped; raw record deletion is intentionally not supported.

craik session delete [OPTIONS] SESSION_ID

Options:

• --yes: Confirm session deletion.; default false

craik session export

Export one redacted persistent session.

craik session export [OPTIONS] SESSION_ID

craik session export-portable

Export one persistent session in portable v0.12.0 format.

craik session export-portable [OPTIONS] SESSION_ID

craik session import-portable

Parse a portable session or adjacent transcript without executing tools.

craik session import-portable [OPTIONS]

Options:

• --path: Craik or adjacent transcript JSON path.

craik session list

List persistent agent sessions.

craik session list

craik session prune

Preview pruning stopped sessions; destructive deletion is not performed.

craik session prune [OPTIONS]

Options:

• --yes: Confirm pruning stopped sessions.; default false

craik session rename

Assign a display name to a persistent session.

craik session rename [OPTIONS] SESSION_ID NAME

craik session resume

Print resume guidance for one persistent session.

craik session resume [OPTIONS] SESSION_ID

craik session show

Show one persistent agent session.

craik session show [OPTIONS] SESSION_ID

craik setup

Initialize local state and write non-secret gateway setup output.

craik setup [OPTIONS]

Options:

• --project-id: Optional project id for gateway configuration.
• --enable-gateway, --disable-gateway: Enable or disable the persisted gateway configuration.; default false
• --gateway-bind-host: Gateway bind host. Defaults to local only.; default 127.0.0.1
• --gateway-port: Gateway port.; default 8765
• --policy-envelope-id: Policy envelope for gateway authority.
• --allow-insecure-public-gateway: Explicitly allow a public gateway bind without TLS termination.; default false

craik share

Share the current transcript (coming in v0.13.0).

craik share

craik skills

Install and inspect governed skill packages.

craik skills COMMAND [ARGS]...

craik skills disable

Disable a skill registry entry.

craik skills disable [OPTIONS] ENTRY_ID

craik skills enable

Enable a skill registry entry.

craik skills enable [OPTIONS] ENTRY_ID

craik skills eval

Report replay/eval readiness for skill promotion gates.

craik skills eval [OPTIONS]

Options:

• --package-id

craik skills history

Show skill package and learning-loop receipt history.

craik skills history

craik skills install

Install a skill package manifest.

craik skills install [OPTIONS] PATH

craik skills list

List installed skill packages.

craik skills list [OPTIONS]

Options:

• --scope: Optional registry scope: project or global.

craik skills promote

Preview a skill promotion decision; promotion remains approval-gated.

craik skills promote [OPTIONS] PROPOSAL_ID

Options:

• --dry-run, --apply: default true

craik skills proposals

List reviewable learning-loop proposal sources.

craik skills proposals

craik skills rollback

Preview rollback posture for a skill package.

craik skills rollback [OPTIONS] PACKAGE_ID

Options:

• --dry-run, --apply: default true

craik skills show

Show one installed skill package.

craik skills show [OPTIONS] PACKAGE_ID

craik skills telemetry

Summarize redacted skill invocation telemetry inputs.

craik skills telemetry

craik slash

Dispatch one slash command for tests and shell integrations.

craik slash [OPTIONS] COMMAND

craik status

Show progressive setup readiness for shell and runtime actions.

craik status

craik task

Create and inspect Craik tasks.

craik task COMMAND [ARGS]...

craik task create

Create a task request for a registered project.

craik task create [OPTIONS]

Options:

• --title: Task title.
• --objective: Task objective.
• --project: Registered project id or name.
• --requested-by: Requester identity to store on the task.; default user:local
• --priority: Priority: low, normal, high, or urgent.; default normal
• --mode: Mode: plan, review, implement, or verify.; default implement
• --constraint: Task constraint. May be repeated.
• --accepted-interpretation: Accepted interpretation of the request.
• --in-scope: In-scope work. May be repeated.
• --out-of-scope: Out-of-scope work. May be repeated.
• --allowed-autonomy: Autonomous action allowed. May be repeated.
• --stop-condition: Condition that should stop execution.
• --scope-change-rule: Rule for handling scope changes.
• --expected-output: Expected output. May be repeated.

craik task resume

Consume a handoff into a new task, case file, and pending run.

craik task resume [OPTIONS]

Options:

• --from-handoff: Source handoff id or source task id to consume.
• --auth-profile-id: Consumer auth profile for the new run.
• --operator-subject: Consumer operator subject for the new run.
• --operator-issuer: Consumer operator issuer for the new run.
• --title: Follow-up task title.
• --objective: Follow-up task objective.
• --requested-by: Requester identity to store on the task.; default user:local
• --priority: Priority: low, normal, high, or urgent.; default normal
• --mode: Mode: plan, review, implement, or verify.; default implement
• --runner: Runner id assigned to the pending run.; default fixture
• --runner-mode: Runner mode: fixture, prompt-handoff, or live.; default fixture
• --max-iterations: Maximum run iterations.; default 5
• --allow-identity-continuation: Explicitly allow the consumer to reuse the producer identity.; default false
• --identity-continuation-rationale: Required rationale when explicitly reusing producer identity.

craik theme

Inspect or set the terminal UI theme.

craik theme [OPTIONS]

Options:

• --theme

craik tui

Launch the keyboard-first terminal UI.

craik tui [OPTIONS]

Options:

• -n, --name: Operator-visible shell session name.

craik tui-backend

Run the backend protocol used by TUI clients.

craik tui-backend [OPTIONS]

Options:

• --jsonl: Run the local Gateway session over JSONL stdio.; default false
• -n, --name: Operator-visible backend session name.

craik update

Print safe update guidance without modifying the installation.

craik update [OPTIONS]

Options:

• --check: Check for update guidance without changing installation.; default false

craik usage

Show provider, approval, and session usage summary.

craik usage

craik version

Print the installed Craik version.

craik version

craik who

Show active operator identity and auth scope.

craik who

craik whoami

Print the active operator identity.

craik whoami