arai: Instructions file for Claude Code

CLAUDE.md — Arai

Arai is a Rust CLI that enforces AI coding assistant instruction files (CLAUDE.md, AGENTS.md, .cursorrules, etc.) via native hooks (Claude Code, Grok Build, and Codex as of v1.1.2). Current crate version is in Cargo.toml.

Commands

cargo build                    # Build
cargo test                     # Run tests
cargo install --path .         # Install lean binary
cargo install --path . --features enrich  # Install with ONNX enrichment
cargo run -- init              # Test init flow (Claude + Grok + Codex hook files)
cargo run -- init --pre-commit # Also install .git/hooks/pre-commit (check-diff --cached)
cargo run -- deinit            # Remove Arai hook registrations, leave other handlers
cargo run -- check-diff --cached  # Match the staged git diff against guardrails
cargo run -- guardrails        # List guardrails
cargo run -- status            # Show enforcement status
cargo run -- why "git push --force origin main"  # Explain matches (dry-run)
cargo run -- scan --code       # Re-scan with AST code graph
cargo run -- scan --enrich-llm # Enrich rules via LLM
cargo run -- add "Never X"     # Add a manual rule
cargo run -- audit             # Tail the local firing log (today)
cargo run -- audit --json      # JSONL stream
cargo run -- audit --verify    # Verify SHA-256 hash chain across all day-buckets
cargo run -- audit --event=Compliance   # Compliance verdicts (Pre/Post correlation)
cargo run -- audit --outcome=ignored    # Rules the model ran despite a Pre-firing
cargo run -- audit --rule alembic       # Filter audit by rule subject/predicate/object
cargo run -- audit --verify             # Walk hash chain across every day-bucket
cargo run -- audit --ship               # Ship pending day-buckets to [ship] url from config
cargo run -- audit --ship https://collector.example.com/arai  # One-off collector URL
cargo run -- audit --purge --older=90 --dry-run   # Plan a 90-day retention sweep
cargo run -- audit --purge --project=old-proj     # Full wipe of one project's audit
cargo run -- stats             # Aggregate the audit log (top rules, tools, days, compliance)
cargo run -- stats --by-rule   # Just the per-rule compliance ratios
cargo run -- severity          # List active severity overrides
cargo run -- severity alembic block      # Pin a rule's severity for incremental rollout
cargo run -- severity --reset alembic    # Drop the override, fall back to classification
cargo run -- diff CLAUDE.md    # Preview rule-set delta vs. live store, no writes
cargo run -- lint CLAUDE.md    # Parse a file and preview extracted rules, no DB writes
cargo run -- test scenarios/alembic-migration.json  # Replay the canonical scenario
cargo run -- record --since=1h # Build scenarios from recent audit entries
cargo run -- trust --add <url> # Approve a URL for arai:extends
cargo run -- trust --add <url> --bearer-env ARAI_EXTENDS_TOKEN  # Private source: send bearer from env var
cargo run -- disable 42        # Silence a rule by triple-id (survives rescan)
cargo run -- enable 42         # Re-enable a previously disabled rule
cargo run -- canonicalize      # Extract recognised rules into ./arai.toml
cargo run -- sync              # Write arai.toml into existing per-tool instruction files
cargo run -- migrate           # Move legacy ~/.arai → ~/.taniwha/arai (prompted, default no)
cargo run -- migrate --yes     # Non-interactive migration (for scripts)
cargo run -- mcp               # Run the MCP server on stdio (blocks on stdin)
echo '{"tool_name":"Bash","tool_input":{"command":"git push"}}' | cargo run -- guardrails --match-stdin
ARAI_DENY_MODE=off cargo run -- guardrails --match-stdin  # Advise-only (no deny)