ai-rulez weekly downloads statistics

The standards-compliant lifecycle tool for agentic governance

Documentation · Quick Start · Examples

What it is

ai-rulez is a standards-compliant lifecycle tool for agent knowledge and capabilities. You keep rules, context, skills, agents, commands, hooks, permissions and MCP servers in one source of truth, .ai-rulez/, and ai-rulez takes them through the whole lifecycle:

Most tools in this space stop at "turn my rules into markdown." ai-rulez treats agent knowledge like software you ship: versioned, linted, locked, signed and audited, with an organization policy layer that enforces a floor no repository can loosen.

• One source, 52 targets. Author once in .ai-rulez/; generate native files for every harness your team uses instead of hand-copying rules across tools. • A real lock file. ai-rulez.lock pins remote includes, installed skills and authored content the way go.sum or package-lock.json pin dependencies. • Supply-chain-grade trust. Sigstore signing, in-toto/DSSE attestations, CycloneDX/SPDX SBOMs and reviewer approvals, so "what prompt is actually running in production" has a verifiable answer. • Org-wide policy, not just repo config. A central policy sets tighten-only floors; verify and CI gates enforce it everywhere.

Features

The table covers the implemented capabilities. The CLI reference lists every command and flag; standards below distinguishes supported formats from partial integrations.

| Feature | What it does | Commands / configuration | Docs |

| Content authoring | Manage rules, context, skills with scripts and references, agents, commands and code-review checks. | init, add, edit, show, list, remove | Configuration, Skills, Checks | | Open-standard sources | Use .ai-rulez/ as an OKF bundle, or author in AGENTS.md and .agents/ without generation overwriting that source. Convert a pre-OKF content tree in place. | source = "agents", migrate okf, export okf, import okf, okf validate | OKF, Agents source | | Domains, profiles and roles | Organize content by domain, select domains by profile, and compose roles that filter items and control skill modes. | domain, profile, roles, --profile, --role | Domains and profiles, Roles | | Configuration layers and local overrides | Merge named TOML layers, a developer's local overlay and user-level settings; inspect the effective local changes. | config layers, local, config..toml, --no-local | Layers, Local configuration | | Shared includes and skill installation | Reuse local or Git content, choose merge precedence, install individual skills and load skill sources with pinned revisions or version ranges. | include, skill install/list/remove/update, includes, installed_skills, skill_sources | Includes, Installed skills | | Builtin content | Select bundled domains and individual guidance items, or exclude items from a selected pack. | builtins list/show, builtins | Builtin domains | | Import and migration | Convert existing harness files and supported third-party layouts with a lossiness report; migrate a 4.x configuration to v5. | convert, migrate v5 | Conversion, Migration | | Native generation | Render the file layouts, frontmatter and settings of 52 built-in harnesses, including Claude Code, Cursor, Codex, Copilot and Gemini CLI. | generate, presets | Harness matrix | | Custom presets | Define templates or provider-backed presets for an additional harness and its supported content and settings. | presets inline tables, provider specs | Custom presets, Provider-backed presets | | Hooks, permissions and MCP settings | Translate shared hooks, allow/deny rules and MCP server definitions to each harness's supported native settings; report unsupported translations. | hooks, permissions, mcp_servers | Settings, Permissions | | Remote-session setup | A SessionStart hook (on by default for Claude Code) that runs ai-rulez generate when a cloud session starts. | [session_start], session-start | Remote sessions | | Generated-file guard | Install a supported harness's PreToolUse hook to block agent edits to generated files. | [guard] generated = true, guard | Guard | | User scope and monorepos | Generate user-level assistant configuration, watch source changes, or process nested project roots with ordered reports. | generate --user, generate --watch, generate/validate --recursive | User scope, Monorepos | | Drift, cleanup and diagnostics | Preview a generation plan, detect output drift, remove generated files and diagnose configuration, locks, tools and MCP placeholders. | generate --dry-run/--emit-plan/--check, clean, doctor | CLI reference, Architecture | | Plugin and marketplace authoring | Bundle runtime-specific plugins and marketplace indexes, including multi-plugin definitions, Agent Plugins and opt-in Pi packages. | generate --plugin, plugin, plugins_authoring, marketplaces_authoring | Plugins, Agent Plugins | | Discovery and documentation formats | Generate AGENTS.md and llms.txt; emit ARD manifests and experimental MCP Server Cards. | agents_md, llms-txt preset, publish --emit, publish emit | AGENTS.md, llms.txt, ARD, MCP Server Cards | | Release artifacts and publishing | Build reproducible archives, manifests and checksums, optionally sign them, verify a dist directory and explicitly upload to GitHub releases, npm or OCI. | publish, publish verify, --to, --execute --yes | Publishing | | Static validation and security scanning | Check config, content, scripts and conventional harness files with stable AR codes, without requiring an ai-rulez config. Scope by paths, globs or Git changes; use fixes, suppressions, baselines and JSON/SARIF reports. | validate, scan, --strict, --path, --glob, --outputs, --changed | Validation and security rules, Harness traps | | External scanners | Run configured scanner programs with explicit execution/egress controls and merge their findings into validation reports. | lint.external, scanners list/doctor, validate/scan --external | Scanner integrations | | Repository verifiers | Run…

Description from the npm listing.