mandible
A TUI manual for every command-line tool you have
Install • How it works • Coverage • Safety • Keys • Configuration
man tells you about one command. --help tells you about one invocation. Neither
lets you explore a tool you don't already know.
$ mandible docker
A tree of every command, subcommand and flag on the left. The selected one's documentation on the right. Fuzzy search over all of it.
[!TIP] Anything on your
PATHworks here,mandibleincluded.
Install
cargo install mandible
Or grab a binary. These links always point at the newest release:
| Platform | Download |
|---|---|
| Linux x86_64 | mandible-x86_64-unknown-linux-gnu.tar.gz |
| Linux arm64 | mandible-aarch64-unknown-linux-gnu.tar.gz |
| macOS Apple Silicon | mandible-aarch64-apple-darwin.tar.gz |
| macOS Intel | mandible-x86_64-apple-darwin.tar.gz |
.deb and .rpm packages are attached to every
release, and each archive ships a
.sha256 beside it.
How it works
There is no per-tool logic anywhere in this project. No if tool == "docker", no
vendored catalogue of hand-written definitions. That approach is convenient for a
week and unmaintainable ever after. It is always slightly out of date, and it is
wrong in ways you cannot see from the outside.
The insight it runs on instead: help text isn't written by hand, it's generated, and only a small closed set of generators exists. mandible works out which framework produced a tool's output, then applies that framework's grammar.
clap v2 · clap v3/v4 · cobra · urfave/cli · Go stdlib flag · argparse · click
docopt · GNU argp/getopt_long · busybox · commander · yargs · oclif · picocli
System.CommandLine · Symfony Console · OptionParser/Thor · BSD-terse
Fix the argparse grammar and you have improved every Python CLI ever written. A catalogue entry improved exactly one tool, until it went stale.
Identification reads the binary itself before it reads any text. The string
spf13/cobra appears 583 times inside docker. Which section headings a tool
prints can change between releases; the library it links against does not.
Four sources, merged per field
| Source | What it gives |
|---|---|
--help text |
Universal. Every tool has it, and it is always current |
| Completion scripts | <tool> completion zsh, parsed with a real shell grammar. Never executed |
| Native protocols | cobra's __complete, clap's completion env. Structured data straight from the tool |
| Your overrides | ~/.config/mandible/overrides/<tool>.toml, highest authority |
Every field remembers where it came from, so a merge can take structure from one source and prose from another without showing you a trust badge that lies.
[!NOTE] When it can't parse something, it says so. A tool matching no known grammar is shown verbatim: the author's own text, untouched, labelled
unparsed. Inventing structure a reader cannot tell is wrong is worse than admitting defeat. Tools that parsed badly carry a visible low-confidence warning.
Neither of those covers the failure that matters most: a grammar that produces a
confident, well-formed, wrong tree, which looks exactly like a correct one. So
t shows the tool's own --help output for whatever is selected, and you
can settle it yourself in a second rather than taking a confidence score on trust.
Speed
Startup does no extraction at all. The interface is on screen immediately and the
tree fills in behind it on a bounded background pool, showing ⋯ loading where it
hasn't arrived yet.
There is deliberately no cache. A cache cannot see docker gaining a plugin or
git gaining an alias from ~/.gitconfig, and being confidently stale is worse
than being fast.
Is it actually universal?
That claim is measured, not asserted. cargo xtask coverage runs the pipeline against
every executable on your PATH and scores each one: sources used, framework detected,
nodes, flags, percentage described.
It also carries a structure-sanity column, which exists because a coverage number
alone can be gamed by the very failure it should catch. %described once reported a
tool as fine at 100% while 39 of its 40 subcommands had been fabricated out of wrapped
prose. A metric that improves when the tool gets worse is worse than no metric.
CI gates every change against a fixed tool list, and sweeps the whole PATH
separately for the broad picture.
Safety
mandible finds out what a tool does by running it: docker --help,
git rebase --help. Running other people's programs to read their documentation
deserves some care.
[!WARNING] Some programs are never run at all.
kill,pkill,killall,fuser,reboot,shutdownand their relatives exist to terminate things. There is no safe way to ask them for help, because mandible's questions take the shapepkill something --help, and topkillthat first word is a process to kill rather than a subcommand. So it doesn't ask. Useman pkillfor those.
Everything else is asked only in a few fixed, harmless ways: --help, -h,
<tool> help, and the completion commands some tools support. mandible never passes
an argument that could name a file to write to, never runs a tool bare, and gives up
on anything that hangs.
Whatever a tool writes goes somewhere disposable. Some programs create files just
because you asked for help. Running mysql_secure_installation --help drops a MySQL
config file into your home directory containing a blank database password. So every
probe runs with its home, temp, config and working directories pointed at a throwaway
folder that is deleted straight afterwards.
All of these rules live in a single module, and a test fails the build if any other part of the codebase learns how to launch a program.
[!NOTE] Full isolation would need OS-level sandboxing, which mandible does not yet do.
spec.md§6 states plainly what is and isn't covered.
Keys
? lists every binding and the footer keeps the important ones on screen, so this
section is deliberately short: arrows or hjkl to move, / to search, Tab
between panes, y to copy the selected flag, q to quit.
Search is the part that is not self-evident, because its two modes answer
different questions. names matches command names literally, so every row you see
contains what you typed. everything searches flags, summaries and descriptions
fuzzily, so gco finds checkout. / opens the first, and pressing it again
switches to the second.
Configuration
Overrides
Anything mandible gets wrong about a tool, you can correct locally. Drop a TOML file
at ~/.config/mandible/overrides/<tool>.toml:
= "my better one-line description"
[[]]
= "verbose"
= "v"
= "a description that actually explains it"
[[]]
= ["build"]
= "corrections apply to subcommands too"
These are yours and are never committed to this repository.
[!TIP] An override fixes a tool for you today. Consider also opening an issue: the real fix belongs in a framework grammar, where it improves every tool built with that framework at once.
Environment
| Variable | Effect |
|---|---|
NO_COLOR |
Disable colour. TERM=dumb and piped output do the same |
MANDIBLE_ASCII=1 |
Force the ASCII glyph set, for terminals that mangle Unicode |
MANDIBLE_CONFIG_DIR |
Override the config directory outright |
MANDIBLE_LOG |
Tracing filter, written to stderr |
Diagnostics
$ mandible --doctor gh
framework: cobra (from artifact)
nodes: 29
flags: 2 (100.0% described)
--doctor reports which framework was identified, which sources contributed, and how
much of the tool was understood. It turns "mandible is wrong about tool X" into "the
cobra grammar mishandles Y", which is a bug someone can actually fix.
Documentation
spec.md |
Design authority: the source model, the safety policy, and the measurement behind every non-obvious decision |
AGENTS.md |
The invariants table. Every entry names the failure it prevents |
Platforms
Linux and macOS, on both x86_64 and arm64. Windows is not supported. The process
containment described above relies on POSIX process groups, and native Windows tools
use conventions (/?, PowerShell's own help system) that this project does not yet
speak.