actradeck 0.6.0 → 0.7.0

package/README.md

@@ -1,9 +1,10 @@
 # actradeck
 
-> Bootstrap CLI for **ActraDeck** — a local-first audit cockpit for coding agents (Claude
-> Code, Codex, …): observe them, redact secrets before they're stored, keep a tamper-evident
-> audit trail, and relay approvals where supported (Claude Code in Attach, Codex in Managed
-> Mode).
+> Put risky Claude Code and Codex actions back in front of a human.
+
+ActraDeck is a local approval and audit cockpit for coding agents. This package gives you
+a zero-side-effect product preview, diagnoses the machine, and verifies the full product
+before handing off to its quickstart.
 
 This package is a **thin, dependency-free bootstrapper**. It does not contain the product —
 the full four-tier stack ships as a **signed GitHub Release** and a **signed GHCR image**.
@@ -15,23 +16,28 @@ The CLI helps you _get to_ a running cockpit and verify what you download.
 - **Fail-closed verification.** `install` checks the release's sha256 checksum _and_ its
   SLSA build provenance before extracting a single file.
 
+## See the safety story first
+
+```sh
+npx actradeck@latest demo
+```
+
+`demo` prints a five-second **synthetic preview** of detect → hold → deny → redact →
+record. It executes no command, writes no file, starts no subprocess, and makes no network
+request. The output then points to the cockpit's 30-second demo, which exercises the real
+ingestion, redaction, projection, and audit pipeline.
+
 ## Usage
 
 ```sh
+npx actradeck@latest demo          # safe synthetic preview; no side effects or network
 npx actradeck@latest doctor        # diagnose: platform / Node / pnpm / git / Docker (offline-safe)
 npx actradeck@latest install       # verify + fetch the latest signed release, then quickstart
 npx actradeck@latest up            # print the Docker cockpit command (prints only; runs nothing)
 npx actradeck@latest version       # your CLI version + whether a newer stable release exists
-npx actradeck@latest conformance < events.jsonl   # (next release) check an adapter's stream vs the contract
+npx actradeck@latest conformance < events.jsonl   # check an adapter's stream vs the contract
 ```
 
-> **`conformance` is not in the published CLI yet.** The four commands above ship in the current
-> published `actradeck`; `conformance` was added after the latest release and lands in the next
-> tagged one (npm publish is USER-GATED — see ADR 0013). To run the checker today, use the from-clone
-> path in the [ingestion contract §8](../../docs/ingestion-contract.md#8-verify-your-adapter-conformance-checker).
-> The canonical, already-signed way to get the full product is the GitHub Release / GHCR image or
-> `scripts/install.sh`.
-
 ### `install`
 
 Resolves the latest stable GitHub Release (or `--version vX.Y.Z`), downloads the source
@@ -40,7 +46,7 @@ provenance (`gh attestation verify`), then extracts and hands off to the repo's
 `scripts/quickstart`.
 
 ```sh
-npx actradeck@latest install --version v0.4.0     # a specific tag
+npx actradeck@latest install --version v0.7.0     # a specific tag
 npx actradeck@latest install --dry-run            # resolve + verify only; change nothing
 npx actradeck@latest install --skip-provenance    # explicit opt-out (checksum still enforced)
 ```
@@ -53,11 +59,8 @@ GitHub CLI.
 ### `conformance`
 
 Validate that a third-party ingestion adapter's event stream satisfies the ActraDeck ingestion
-contract — **without cloning the monorepo**. (Ships in the next release; the currently published
-CLI predates it — run the checker from a clone today, see the
-[ingestion contract §8](../../docs/ingestion-contract.md#8-verify-your-adapter-conformance-checker).)
-Capture your adapter's emitted NormalizedEvents as **JSONL** (one JSON object per line, in emission
-order) and pipe them in:
+contract — **without cloning the monorepo**. Capture your adapter's emitted NormalizedEvents as
+**JSONL** (one JSON object per line, in emission order) and pipe them in:
 
 ```sh
 npx actradeck@latest conformance < events.jsonl      # read JSONL from stdin
@@ -82,10 +85,10 @@ memory, which suits adapter sample streams rather than an unbounded live feed.
 
 ## Environment
 
-| Variable                | Default              | Meaning                                             |
-| ----------------------- | -------------------- | --------------------------------------------------- |
-| `ACTRADECK_REPO`        | `actradeck/actradeck`| `owner/name` (or git URL) to resolve releases from  |
-| `ACTRADECK_INSTALL_DIR` | `~/actradeck`        | where `install` extracts the verified source        |
+| Variable                | Default               | Meaning                                            |
+| ----------------------- | --------------------- | -------------------------------------------------- |
+| `ACTRADECK_REPO`        | `actradeck/actradeck` | `owner/name` (or git URL) to resolve releases from |
+| `ACTRADECK_INSTALL_DIR` | `~/actradeck`         | where `install` extracts the verified source       |
 
 ## License
 

package/dist/cli.js

@@ -3,12 +3,14 @@ import { cmdUp } from "./commands/up.js";
 import { cmdVersion } from "./commands/version.js";
 import { cmdInstall } from "./commands/install.js";
 import { cmdConformance } from "./commands/conformance.js";
-const USAGE = `actradeck — bootstrap CLI for ActraDeck (local-first audit cockpit for coding agents)
+import { cmdDemo } from "./commands/demo.js";
+const USAGE = `actradeck — put risky coding-agent actions back in front of a human
 
 Usage:
   actradeck <command> [options]
 
 Commands:
+  demo        Show a 5-second safety preview. No install, files, subprocesses, or network.
   doctor      Diagnose this machine (platform / Node / pnpm / git / Docker). Offline-safe.
   install     Fetch + VERIFY a signed release (checksum + provenance), then hand off to quickstart.
               --version vX.Y.Z   install a specific release tag (default: latest stable)
@@ -80,6 +82,8 @@ export async function run(deps, argv) {
                 return 0;
             case "doctor":
                 return await cmdDoctor(deps);
+            case "demo":
+                return await cmdDemo(deps);
             case "up":
                 return await cmdUp(deps);
             case "version":

package/dist/commands/demo.d.ts

@@ -0,0 +1,2 @@
+import type { Deps } from "../lib/types.js";
+export declare function cmdDemo(deps: Deps): Promise<number>;

package/dist/commands/demo.js

@@ -0,0 +1,28 @@
+export async function cmdDemo(deps) {
+    deps.io.out(`ActraDeck safety preview
+
+SAFE SIMULATION — no command is executed, no file is changed, and no network call is made.
+
+Claude Code requests:
+  rm -rf ./important-directory
+
+[HIGH RISK] recursive filesystem delete detected
+[HELD]      waiting for a human decision
+[DENIED]    no approval received; safe-side timeout
+
+Agent output contains:
+  GITHUB_TOKEN=[REDACTED:github-token]
+
+[RECORDED]  decision + redacted event added to the replayable audit trail
+
+That is ActraDeck's first job: put risky coding-agent actions back in front of you.
+
+Try the real ingestion -> approval -> redaction -> audit pipeline:
+  docker run --rm -p 127.0.0.1:55400:55400 -v actradeck_pgdata:/data \\
+    ghcr.io/actradeck/actradeck:latest
+  then open http://localhost:55400 and click "Run the 30-second safety demo".
+
+Detection is best-effort, not a sandbox. Read the documented limits:
+  https://github.com/actradeck/actradeck/blob/main/SECURITY.md`);
+    return 0;
+}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "actradeck",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "license": "Apache-2.0",
-  "description": "ActraDeck bootstrap CLI — verify-and-fetch a signed release, diagnose your machine, and hand off to quickstart. A thin, dependency-free wrapper; the full product ships as a signed GitHub Release + GHCR image.",
+  "description": "ActraDeck CLI — preview, install, and verify a local approval and audit cockpit for Claude Code and Codex.",
   "type": "module",
   "repository": {
     "type": "git",
@@ -27,6 +27,11 @@
   "keywords": [
     "actradeck",
     "coding-agent",
+    "claude-code",
+    "codex",
+    "agent-security",
+    "approval-gate",
+    "audit-trail",
     "observability",
     "cli",
     "bootstrap"