Reference

CLI reference

Last updated: 2026-04-30

Every fastpace subcommand. Group headings reflect daily use: Core for what every developer touches, Evidence for what your auditor asks about, Org-scale for cross-repo work.

One-liner help: Every command supports --help. The full per-command help text is also viewable in your terminal — this page is the at-a-glance catalog.

Core

Day-to-day developer commands.

Command	Purpose
`fastpace init`	Bootstrap fastpace in a repo. Writes manifest + .claude/ + audit.log + identity.
`fastpace identity`	Show / rotate / revoke / sign / verify the F0.1 install identity.
`fastpace inventory`	List every agent / runtime / MCP server / hook signed by THIS install (F0.6).
`fastpace verify`	Walk the F0.2 hash-chained audit log; report tamper status. Exit 0 on pass, 1 on break.
`fastpace audit`	Subcommands: verify · coverage · migrate · export-bundle · list-exports. The `coverage` subcommand surfaces the cross-cutting % of AI-attributed commits with complete evidence chain — the Team-tier outcome guarantee.
`fastpace runtimes`	Manage the F1.11 approved-runtime registry (allow-list of model aliases).
`fastpace agents`	List bundled agents + per-agent log filtered from the audit chain (F1.4).
`fastpace grant`	Expand an agent's scope with a logged justification + reviewer (F1.6).
`fastpace exception`	Time-boxed guardrail override with risk-tier classification (F1.8).
`fastpace plugin`	One hook codebase → three vendor plugins. Subcommands: build (generate the Claude Code / Codex / Gemini CLI plugin bundles from the shared hooks) · coverage (hook→native-event matrix) · policy (compile fastpace.policy.yaml → each vendor's native enforcement) · context (project fastpace/context/ → CLAUDE.md / AGENTS.md / GEMINI.md). The vendor-neutral control plane.
`fastpace taps`	F2.6 trusted data taps; signed allow-list of prompt-context sources.
`fastpace sast`	F2.13 SAST / lint required scans (Semgrep + ESLint adapters bundled).
`fastpace bench`	Hook performance benchmark harness; p50 / p95 / p99 latency.
`fastpace me`	F3.5 per-developer dashboard; reliability + corrections + exceptions for THIS install.
`fastpace context`	F3.8 self-healing context refresh; flags stale ADR / architecture references.
`fastpace ui`	Launch the local dashboard server (default :7777).
`fastpace doctor`	Diagnose an install: identity, manifest, hooks, audit chain.
`fastpace status`	One-line install health: project, context level, skills/agents/hooks counts, audit-chain status, license tier.
`fastpace context-score`	Deterministic 6-dimension repo grade (coverage, freshness, vocabulary, decisions, patterns, learnings). Pure JS, no LLM call. CI-friendly.
`fastpace validate`	Lint PRDs / ERDs / execution plans against repo conventions. CI-friendly; exits non-zero on findings.
`fastpace pr-summary`	Generate a PR body from the linked ERD + the run manifests on the branch. Eliminates "wip" PRs.
`fastpace resume`	Print a watch card's state, recent diff, and next gate so you (or your AI agent) pick up exactly where you left off.
`fastpace search`	Local, grep-style full-text search across fastpace/ knowledge (PRDs, ERDs, ADRs, patterns, decisions). No AI, no embeddings — fast and deterministic.
`fastpace why`	Trace a file back to the PRD / ERD / ADR / pattern / commit that produced it. Useful in code review.
`fastpace refs`	Manage external refs (Confluence / Google Docs / web URLs) cached as L2 context. Subcommands: add · list · refresh · auto-discover · oauth.
`fastpace changelog`	Print the bundled CHANGELOG. Optional: filter to entries newer than the version you last ran update against, per repo.
`fastpace update`	Bump the installed @fastpace-ai/fp to the latest npm version + diff the embedded asset bundle into your repo.
`fastpace uninstall`	Remove fastpace from a repo (--all removes the audit log too; default preserves it for replay).
`fastpace integrations`	Health-check + listing for the configured Jira / Linear / Confluence / Google Docs connection. Read-only — use ticket / sync for write ops.
`fastpace ticket`	Direct Jira / Linear ticket ops (create · link · comment · close). Bypass for when the agent flow isn't enough.
`fastpace sync`	Re-run the artifact-write events for a feature so the linked Jira / Linear Initiative + Epics + Stories get refreshed.
`fastpace help`	Show the command catalog.

Evidence

Generate + verify the artifacts auditors ask for.

Command	Purpose
`fastpace reliability`	Print the F2.1 AI reliability score for a window.
`fastpace provenance`	Inspect F2.3 commit-trailer provenance for an AI commit.
`fastpace posture`	Governance posture (F5.3): provenance coverage, audit-chain integrity, reliability, risk, red-team, shadow-AI, and the cross-vendor assistant mix. `--json` feeds the local UI / org dashboard / trust portal. Measures how much AI code is provable & governed, across every tool.
`fastpace verify-provenance`	Five-layer verify: commit → trailer → manifest → signature → audit-link → explanation.
`fastpace aibom`	Generate / show / verify / list F2.4 AI Bills of Materials (CycloneDX-AI flavor).
`fastpace explain`	F2.2 explainability bundles for an AI commit.
`fastpace schema`	Print the F2.12 open audit schema as JSON or markdown.
`fastpace nhi`	F1.5 non-human identity registry export (CSV / JSON).
`fastpace mcp`	Show + check the F1.7 MCP scope mediation policy.
`fastpace attest`	F1.12 sanctioned-install attestation; cosign-style signing.
`fastpace redteam`	F2.7 red-team scenario harness (deterministic, in-process).
`fastpace compliance`	F2.8 Drata / Vanta / Secureframe push of the evidence map.
`fastpace risk`	F2.10 AI risk register, auto-generated.
`fastpace control`	F2.5 continuous control monitoring; reconcile provider state vs ground truth.
`fastpace gate`	F2.9 pre-merge audit gate; CI-ready with --format github.
`fastpace feedback`	F2.14 coach feedback loop; per-policy effectiveness rollup.
`fastpace snapshot`	Pack ADRs + audit.log + manifests + AI-BOMs into one auditor-ready tarball.
`fastpace reviews`	Populate fastpace/reviews/cache.json from a code-host (GitHub / GitLab / Bitbucket). Rolls review-comment attribution into the reliability score.
`fastpace evidence`	F2.5 evidence-request tracker — manage the "auditor asked for X" queue and its fulfillment status.
`fastpace maturity`	F4.12 AI-Native Maturity scorecard. Nine sub-scores rolled into one 0–100 number; auto-updates as the repo grows.
`fastpace roi`	F2.15 ROI dashboard — saved_usd vs cost_usd over a window, per-repo. Honors --window-days.
`fastpace eval`	F3.12 model-evaluation harness; run a deterministic battery against your bundled model alias.

Org-scale

Cross-repo aggregation, policy distribution, broadcasts.

Command	Purpose
`fastpace org`	F1.13 self-hosted org dashboard: build-summary / ingest / rollup.
`fastpace users`	F1.14 RBAC + SCIM provisioning.
`fastpace policy`	F2.11 org-wide policy bundle: publish / pull / verify / apply.
`fastpace webhooks`	F3.10 outbound event bus (Slack / PagerDuty / SIEM).
`fastpace replicate`	F3.11 audit log replication to immutable storage.
`fastpace budgets`	F3.9 per-team monthly budget caps (tokens + USD).
`fastpace airgap`	F3.2 build an air-gapped install bundle for sideload without npm.
`fastpace policy-eval`	F3.3 lightweight policy-DSL evaluator — lint your fastpace/policies/*.fpdsl files and dry-run them against the audit chain.

Licensing

Activate, refresh, and inspect your fastpace Team license + the bearer token used by gated org-dashboard endpoints.

Command	Purpose
`fastpace activate`	Install a fastpace Team license from your activation key. Verifies the bundled-pubkey signature and writes ~/.fastpace/license.json (mode 0600). Also seeds an org-dashboard access token.
`fastpace license`	Subcommands: show · refresh · path. `refresh` re-mints the license against api.fastpace.net and refreshes the access token alongside.
`fastpace token`	Subcommands: show · refresh · path. Print or fetch the bearer token used to authenticate against an org-dashboard with FASTPACE_ORG_REQUIRE_TOKEN=on. 7-day TTL online · 365-day TTL air-gap.
`fastpace cmk`	Customer-managed keys — envelope encryption (X25519 + AES-256-GCM) for fastpace artifacts. Subcommands: init · status · encrypt · decrypt · rotate. KEK pair lives at fastpace/cmk/; sealed envelopes are tamper-evident via the AES-GCM auth tag. Enterprise add-on.
`fastpace outcome`	Signed outcome snapshots — the procurement-ready artifact backing the SLA pricing. Subcommands: snapshot · verify · list. Each snapshot bundles current outcome-metric values + contracted thresholds + signature from your install identity; verifiable offline against the bundled issuer pubkey.

Common patterns

Govern every AI assistant from one source

fastpace plugin build --target all --out ./dist/plugins
fastpace plugin policy --target all
fastpace plugin context --target all --out .

One hook codebase, one fastpace.policy.yaml, and one fastpace/context/ tree generate the guardrails, native policy config, and context file for Claude Code, Codex, and Gemini CLI. Swap the model and your governance, policy, and domain knowledge don't move. Run fastpace posture to see provenance coverage, shadow-AI, and the cross-vendor assistant mix.

Verify before every push

fastpace gate check --format github

Use this in a GitHub Actions job. It runs every required check (provenance, audit_chain, aibom, exceptions) and exits 1 with inline annotations if any fail. See Audit replication for the companion immutable-storage step.

Hand evidence to an auditor

fastpace audit export-bundle

Packs the audit log + identity public keys + a single-file Node verifier + signed manifest into a directory. The auditor runs node verify-offline.js inside it. No fastpace install required on their side.

Air-gapped install

fastpace airgap build

Produces a tarball that installs with ./install-offline.sh — no npm, no internet, just Node 18+. See Air-gapped install.

What did I do this month?

fastpace me --window-days 30

Per-developer slice: reliability score, top corrections by file, exception requests, audit activity, redactions. Filtered by THIS install identity; nothing transmitted off the machine.