Tyler J King
63a6c0c520
feat: gsh human mode — interactive governed shell with reedline
...
Phase 3 / Sprint 2 finish line.
Human mode: reedline REPL with governed prompt.
[governed] tyler@gsh:~$
Mode detection:
--exec "cmd" → machine mode (unchanged)
--ungoverned --exec "cmd" → ungoverned machine (unchanged)
(no --exec, TTY attached) → human mode (NEW)
(no --exec, no TTY) → error
Command classification per-keystroke (libgsh/classifier.rs):
Free: ls, cat, grep, echo, cd, git, ssh, curl — zero overhead
Governed: binaries in corpus dir — via org-ops wrapper, CR posted
Ungoverned: not in corpus but on PATH — warn + execute
Denied: corpus manifest but removed — killswitch active
Session lifecycle:
Start: validate AC, post SESSION_STARTED CR, print banner
Active: classify each command, governed ops post lightweight CRs
End: print summary (governed/free/denied/ungoverned), post SESSION_ENDED CR
Banner: principal, corpus, session ID, expiry, risk level
Prompt coloring from risk level:
Baseline/Standard: green [governed]
Elevated: yellow [elevated]
High/Critical: red [HIGH]
New modules:
libgsh/classifier.rs — command classification against corpus (4 tests)
libgsh/session.rs — session state tracking
gsh/human.rs — reedline REPL, prompt, banner, summary
Machine mode: zero changes (regression tested).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 15:44:34 -04:00
Tyler J King
919d8accde
refactor: extract libgsh from monolith
...
Phase 2 of the WSL2 jumphost build.
Workspace: gsh/ (binary) + libgsh/ (library).
libgsh modules:
ac.rs — AC validation (R-22 single-use, R-23 corpus match, expiry)
cr.rs — CR construction + broker posting + inline AC request
corpus.rs — Corpus directory gate (killswitch)
config.rs — GshConfig from environment
registry.rs — Filesystem-based consumed AC registry
gsh/src/main.rs: CLI only (~170 lines).
Clap args, mode detection, calls libgsh, formats output.
11 unit tests in libgsh:
ac: valid AC, expired, corpus mismatch, replay, missing context_id
cr: broker URL formatting
corpus: ungoverned skip, missing dir, command name extraction
registry: consume and check
config: default corpus_cid
Zero behavior change. Same JSON output, same exit codes,
same flags, same env vars, same broker interaction.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 09:31:50 -04:00
