Skip to main content

CLI command reference

Stable check and policy commands

termyte check

Evaluate command text without executing it. Writes a stable check event.
termyte check [--json] "<command>"
A block decision exits nonzero.

termyte policy presets

List available built-in YAML policy presets.
termyte policy presets [--json]

termyte policy show

Show built-in, global, and repository YAML policy layers and effective rules.
termyte policy show [--json]

termyte policy test

Evaluate YAML policy without execution, user memory, or a check-log write.
termyte policy test [--json] "<command>"

termyte policy global add

Compile and optionally save a supported plain-English global rule.
termyte policy global add "<rule>" [--dry-run|--yes]

termyte policy local add

Compile and optionally save a supported plain-English repository rule.
termyte policy local add "<rule>" [--dry-run|--yes]

Stable logs and user memory

termyte logs

Show stable check events.
termyte logs [--blocked] [--warned] [--agent <agent>] [--today] [--json]

termyte memory

Show repository-local exact safe and unsafe command patterns.
termyte memory [--json]

termyte mark-safe

Store a redacted exact command pattern as safe.
termyte mark-safe "<command>"
Safe memory does not weaken stronger decisions.

termyte mark-unsafe

Store a redacted exact command pattern as unsafe.
termyte mark-unsafe "<command>"
An exact unsafe match can upgrade allow to warn.

Agent and execution commands

termyte run <agent>

Launch a supported agent in limited mode.
termyte run [--dry-run] [--profile <profile>] <agent> [...args]
Supported names: codex, claude, claudecode, and aider.

termyte run -- <command>

Evaluate and execute one command through the experimental SQLite runtime.
termyte run [--dry-run] -- <command>
Warnings ask for approval. Blocks do not execute.

termyte allow-once

Apply a one-time runtime override, except for hard-critical resolved targets.
termyte allow-once -- <command>

termyte shell

Start the experimental governed shell or command session.
termyte shell
termyte shell -- <command>

termyte inspect

Inspect the experimental runtime decision without execution.
termyte inspect [--json] -- <command>

termyte replay

Show the experimental SQLite runtime timeline.
termyte replay [--json]

Runtime policy commands

termyte policies

Show active SQLite runtime block and warn lists.
termyte policies [--json]

Runtime policy management

termyte policies status [--json]
termyte policies defaults [--json]
termyte policies reset
termyte policies set [--block <patterns...>] [--warn <patterns...>]
termyte policies add <block|warn> <patterns...>
termyte policies remove <block|warn> <patterns...>
termyte policies export [--file <path>]
termyte policies import <path>
termyte policies validate <path>
See policy reference.

Diagnostics and benchmark

termyte doctor

Check local system, workspace, policy, shell runtime, tools, and package readiness.
termyte doctor [--json]

termyte bench

Run the stable 1,200-case governance benchmark or the 230-case compatibility suite.
termyte bench [--json]
termyte bench --legacy [--json]