clash 0.5.4

Command Line Agent Safety Harness — permission policies for coding agents
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

//! Interactive policy editor TUI.
//!
//! Launches a ratatui-based terminal UI for browsing and editing policy.json.
//! Uses the Elm Architecture (TEA) pattern: `Model -> update(Msg) -> view(Model)`.

pub mod app;
pub mod includes_view;
pub mod inline_form;
pub mod sandbox_view;
pub mod settings_view;
pub mod tea;
pub mod test_panel;
pub mod tool_registry;
pub mod tree_view;
pub mod walkthrough;
pub mod widgets;

use std::path::Path;

use anyhow::{Context, Result};
use crossterm::cursor::Show;
use crossterm::event::{DisableMouseCapture, EnableMouseCapture};
use crossterm::execute;
use crossterm::terminal::{
    EnterAlternateScreen, LeaveAlternateScreen, disable_raw_mode, enable_raw_mode,
};
use ratatui::Terminal;
use ratatui::backend::CrosstermBackend;

use crate::policy_loader;

/// Restore the terminal to its normal state.
///
/// Idempotent — safe to call even if the terminal was never fully initialised.
/// Ignores errors so it works as best-effort cleanup in panic hooks.
pub(crate) fn restore_terminal() {
    let _ = disable_raw_mode();
    let _ = execute!(
        std::io::stdout(),
        LeaveAlternateScreen,
        DisableMouseCapture,
        Show
    );
}

/// Launch the interactive policy editor TUI.
pub fn run(path: &Path) -> Result<()> {
    run_with_options(path, false, false)
}

/// Launch the TUI with options.
pub fn run_with_options(path: &Path, show_test_panel: bool, onboarding: bool) -> Result<()> {
    let manifest = policy_loader::read_manifest(path)
        .with_context(|| format!("failed to read {}", path.display()))?;

    let mut app = app::App::new(path.to_path_buf(), manifest)?;
    if show_test_panel {
        app.show_test_panel();
    }
    if onboarding {
        app.start_walkthrough();
    }

    // Install a panic hook that restores the terminal so the user isn't left
    // with an unusable shell if the TUI panics.
    let original_hook = std::panic::take_hook();
    std::panic::set_hook(Box::new(move |info| {
        restore_terminal();
        original_hook(info);
    }));

    let result = setup_and_run(&mut app);

    // Restore the previous panic hook now that the TUI is done.
    let _ = std::panic::take_hook();

    result
}

/// Set up the terminal, run the TUI, and always restore before returning.
fn setup_and_run(app: &mut app::App) -> Result<()> {
    enable_raw_mode()?;

    // Once raw mode is active we must restore no matter what, so run the rest
    // inside a closure — any early `?` returns land here, not the caller.
    let result = (|| {
        let mut stdout = std::io::stdout();
        execute!(stdout, EnterAlternateScreen, EnableMouseCapture)?;
        let backend = CrosstermBackend::new(stdout);
        let mut terminal = Terminal::new(backend)?;
        app.run(&mut terminal)
    })();

    // Always restore, whether the app succeeded or returned an error.
    restore_terminal();

    result
}