Governed shell binary — human + machine modes (Rust)
Per-invocation AC is the primitive for single governed ops. Session mode is for scripts, pipelines, and interactive shells. Per-invocation (unchanged): gsh --exec "cmd" → 1 AC + 1 CR per command Session mode (new): eval "$(gsh session-start --scope shell:session)" gsh --exec "cmd1" # reuses session AC gsh --exec "cmd2" eval "$(gsh session-end)" Detection: GSAP_SESSION_AC in environment. Subcommands: session-start, session-end, session-status Known gap: broker currently marks AC consumed after first CR. Session commands 2+ get 404 on CR. This is a broker-side fix (needs session AC type). gsh handles it gracefully. Tested against live fastapi-gsap Spoke on Hetzner. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| src | ||
| .gitignore | ||
| Cargo.lock | ||
| Cargo.toml | ||
| DESIGN.md | ||
| README.md | ||
gsh
gsh — the GCAP governed shell. Human and machine modes. Chronicle-attributed execution.