CLI Reference¶
Run:
embraion help
for the launcher-owned command catalog, or:
embraion help <command>
for command-specific help.
Project & setup¶
embraion init¶
Create the modular .embraion/ project configuration.
embraion init
embraion init --name MyProject
embraion install¶
Install one host projection.
embraion install --host codex --destination .
Hosts: codex, copilot, claude-code, portable.
Preview without writing:
embraion install --host codex --destination . --dry-run
Installed projections track generated-file hashes. Later installs distinguish safe updates from local conflicts instead of blindly overwriting files.
Existing repositories can select projection components explicitly:
embraion install --host codex --destination . --component skills
embraion install --host codex --destination . --component agents --component skills
Supported components are host-specific: Codex supports config, agents, and skills; GitHub Copilot and Claude Code support agents and skills; Portable uses bundle. Unselected components remain user-owned and are excluded from obsolete-file handling.
embraion projection¶
Preview ownership-aware projection changes:
embraion projection diff --host codex --destination .
embraion projection diff --host codex --destination . --component skills
embraion projection diff --host codex --destination . --json
embraion policy¶
Inspect normalized source, validation, review, and privacy policy:
embraion policy show
embraion policy show --json
embraion update¶
Safely normalize a compatible modular project configuration and change the current project's framework pin.
embraion update
embraion update --framework-version <published-version>
Safe configuration normalization currently targets the installed EmbrAIon launcher version only. To move a project to another published version, install or upgrade/downgrade the launcher to that version first, then run embraion update; this prevents the current launcher from writing configuration for a release contract it does not own.
Before writing, EmbrAIon builds and validates the target configuration for all canonical .embraion/ files. It adds only missing defaults, preserves existing project values, and leaves generated host projections and projection state untouched. Incompatible values or an incomplete legacy layout fail before any configuration file is rewritten.
embraion sync¶
Generate disposable host projections without installing them into a project.
embraion sync --host all --output build/generated --force
Health & runtime¶
embraion doctor¶
Run framework and project diagnostics.
embraion doctor
embraion doctor --json
embraion status¶
Show launcher version, project pin, resolved runtime, cache, and host projections.
embraion status
embraion status --json
embraion validate¶
Validate framework schemas, catalogs, references, localization, and other deterministic contracts.
embraion validate
embraion validate --json
embraion validation¶
List or execute project validation profiles from .embraion/validation.yaml:
embraion validation list
embraion validation list --json
embraion validation run fast
embraion validation run affected --json
embraion validation run full --run-id task-001
validation run executes commands from the project root, persists redacted evidence under .embraion/state/validation/, and exits non-zero when the profile fails. Empty profiles report skipped. Use --fail-fast to stop after the first failing command and --timeout SECONDS for a per-command timeout.
--run-id attaches the profile result to an active structured execution record, so validation evidence does not have to be re-entered manually.
embraion cache¶
Inspect or clean isolated project runtimes.
embraion cache list
embraion cache list --json
embraion cache prune --older-than 90
embraion cache prune --older-than 90 --apply
Pruning is dry-run unless --apply is supplied.
AI execution¶
embraion route¶
Resolve host-default or project-overridden routing. EmbrAIon does not select a model unless the project explicitly overrides the route or role.
embraion route --host codex --route-class substantial --data PRIVATE
embraion route --host codex --route-class substantial --role reviewer --data PRIVATE
The result reports resolution: host-default with model: null when the host should choose automatically, or resolution: project-override when .embraion/routing.yaml supplies a selector.
embraion dispatch¶
Create a bounded privacy-aware execution plan.
embraion dispatch \
--task "Implement feature" \
--role worker \
--host codex \
--route-class bounded-write \
--data PRIVATE \
--access write \
--owned-path "src/**"
embraion context¶
Select project knowledge by task, role, privacy class, and character budget:
embraion context build \
--task "Review architecture boundaries" \
--role architect \
--data PRIVATE \
--max-chars 20000
The saved record stores provenance metadata and hashes, not duplicated knowledge contents.
embraion context show CONTEXT_ID
embraion run¶
Record execution evidence:
embraion run start \
--run-id task-001 \
--task "Implement feature" \
--role worker \
--host codex \
--route-class substantial \
--data PRIVATE \
--access write \
--owned-path "src/**" \
--substantial
embraion run complete task-001 \
--changed-path src/example.py \
--validation fast=passed \
--review passed \
--outcome completed
Completed writable runs enforce owned scope, protected project paths, and substantial-review policy.
embraion session¶
Manage normalized task/session state.
embraion session start --session-id task-001 --task "Implement feature"
embraion session show
embraion session set --state review --validation passed
Engineering controls¶
embraion enforcement¶
Inspect project enforcement:
embraion enforcement status
embraion enforcement status --json
Evaluate the enabled gate against a Git base ref:
embraion enforcement check --base-ref origin/main
embraion enforcement check --base-ref origin/main --run-id task-001 --json
The check rejects mutations of protected sources, requires the configured validation profile to produce a real pass, and enforces review from execution evidence when require-review is enabled.
Install the GitHub Actions CI surface explicitly:
embraion enforcement install \
--surface github-actions \
--validation-profile affected \
--require-review
No enforcement workflow or native hook is installed by init, install, or harness audit. The generated workflow exits non-zero for policy/validation/review failures. To make that check a mandatory merge gate, configure EmbrAIon enforcement as a required status check in the repository branch rules/ruleset.
embraion security¶
Scan for likely secrets and policy drift.
embraion security scan --path . --fail-on high
Redact likely credentials from diagnostic text:
embraion security redact --text "token=..."
embraion harness¶
Audit host agent/skill projection surfaces and report native hook capability metadata:
embraion harness audit --host codex
embraion harness audit --host all
EmbrAIon reports hook availability but does not silently install executable project hooks.
embraion mcp¶
Create a privacy-safe MCP inventory.
embraion mcp inventory
embraion worktree¶
Manage isolated Git worktrees.
embraion worktree list
embraion worktree create ai/my-task
embraion worktree gc
embraion worktree gc --apply
embraion worktree salvage /path/to/worktree
embraion learning¶
Record evidence and manage gated learning candidates.
embraion learning observe \
--id repeated-review-gap \
--kind repeated-failure \
--target-type skill \
--target-id review \
--summary "Repeated review gap"
embraion learning propose repeated-review-gap
embraion learning approve repeated-review-gap
embraion learning promote repeated-review-gap
embraion eval¶
Run behavioral evals and compare baselines.
embraion eval run --case reviewer-readonly --record execution-record.json
embraion eval baseline --reports build/evals --output baseline.json
embraion eval compare --baseline baseline.json --reports build/evals
Help¶
embraion help¶
Show the launcher-owned catalog or nested command help.
embraion help
embraion help cache prune
embraion --help
Exit behavior¶
Commands use non-zero exit codes for failed deterministic checks or invalid operations. Machine-readable output is available where documented through --json.