termaxa 0.19.4

A cooperative gate for the shell commands AI coding agents run — command previews, automatic backups, allow/ask/deny policy, and audit logging.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

//! `termaxa demo`: the gate on a throwaway project, in twenty seconds.
//!
//! Builds a scratch project under the demo state directory (`~/.termaxa/demo`,
//! where zero-setup `check` runs already keep their log) - twelve files
//! in `scratch/`, a `.env`, the starter policy - and runs the real `check`
//! and `log` subcommands in it through the current executable, with one line
//! of narration before each. Nothing here is a mock: the previews, verdicts
//! and audit lines are the ones a user gets, on a tree that exists. The
//! project is removed afterwards; the audit log stays under the state
//! directory like any other project's.

use anyhow::{Context, Result};
use std::path::Path;
use std::process::Command;

/// The commands the demo checks, with what each one shows.
const STEPS: &[(&str, &str)] = &[
    (
        "A recursive delete: the blast radius is counted before anything runs, and the starter denies it.",
        "rm -rf ./scratch",
    ),
    (
        "A write to .env: a path rule fires whatever the command is spelled like.",
        "echo TOKEN=abc > .env",
    ),
    (
        "A single-file delete: an ask, with the file named and insurance planned before it would run.",
        "rm scratch/f1.txt",
    ),
];

pub fn run() -> Result<i32> {
    let exe = std::env::current_exe().context("cannot find the termaxa binary")?;
    let root = crate::paths::demo_state_dir()?.join(format!("project-{}", crate::audit::now().0));
    build_project(&root)?;
    let result = play(&exe, &root);
    let _ = std::fs::remove_dir_all(&root);
    result
}

fn build_project(root: &Path) -> Result<()> {
    std::fs::create_dir_all(root.join("scratch"))?;
    for i in 1..=12 {
        std::fs::write(
            root.join("scratch").join(format!("f{i}.txt")),
            format!("line {i}\n"),
        )?;
    }
    std::fs::write(root.join(".env"), "API_KEY=not-a-real-key\n")?;
    std::fs::create_dir_all(root.join(".termaxa"))?;
    std::fs::write(
        root.join(".termaxa").join("policy.yaml"),
        crate::init::STARTER_POLICY,
    )?;
    Ok(())
}

fn play(exe: &Path, root: &Path) -> Result<i32> {
    println!();
    println!(
        "{}",
        crate::ui::dim(&format!(
            "termaxa demo — a scratch project at {} (12 files in scratch/, a .env, the starter policy). Removed when this ends.",
            root.display()
        ))
    );
    for (what, command) in STEPS {
        println!();
        println!("{}", crate::ui::dim(&format!("▸ {what}")));
        println!(
            "{}",
            crate::ui::dim(&format!("$ termaxa check \"{command}\""))
        );
        let status = Command::new(exe)
            .args(["check", command])
            .current_dir(root)
            .status()
            .with_context(|| format!("cannot run {} check", exe.display()))?;
        let _ = status;
    }
    println!();
    println!(
        "{}",
        crate::ui::dim("▸ Every verdict is in the record, which the agent cannot rewrite.")
    );
    println!("{}", crate::ui::dim("$ termaxa log"));
    Command::new(exe)
        .arg("log")
        .current_dir(root)
        .status()
        .context("cannot run termaxa log")?;
    println!();
    println!(
        "{}",
        crate::ui::dim(
            "Next: `termaxa init` in a project of yours wires the hook for the agent it finds."
        )
    );
    Ok(0)
}