ztd
Zero Trust Dev — disposable isolated VMs for untrusted dev work
Options
-h, --help help for ztdSEE ALSO
- ztd attach - Reattach to the guest agent’s tmux session (bash scripts/run-agent.sh attach)
- ztd audit - Export a run’s audit record to .ztd/runs/ (bash scripts/audit.sh)
- ztd auth - Sync the operator’s Claude Code login into the guest (bash scripts/auth-sync.sh)
- ztd cattle - One-shot up→auth→skills→commands→run (bash scripts/cattle.sh)
- ztd check - Run the host-side preflight (bash scripts/check-requirements.sh)
- ztd commands - Provision/pull the guest agent’s ~/.claude/commands (bash scripts/agent-sync.sh commands)
- ztd config - Print the resolved ztd configuration
- ztd down - Tear down the VM (discards the ephemeral key + transient git remote on success)
- ztd fetch - Fetch the guest’s commits into the operator’s checkout (bash scripts/fetch-remote.sh)
- ztd init - Scaffold this project’s .ztd/ztd.toml (the single config file)
- ztd ip - Print the VM’s IP address
- ztd list:orphans - List orphaned VMs/resources not tracked by state
- ztd logs - Follow guest cloud-init/provisioning output
- ztd mount - SSHFS-mount a remote guest’s repo (bash scripts/mount-remote.sh mount)
- ztd plan - Show the Terraform plan for the VM
- ztd purge - Destroy all ztd-managed resources
- ztd reset - Recreate the VM (down+up; keeps the ephemeral key)
- ztd run - Launch the agent in a guest tmux session (bash scripts/run-agent.sh run)
- ztd setup - Install the persistent Docker→libvirt forwarding fix (–transient, –undo)
- ztd skills - Provision/pull the guest agent’s ~/.claude/skills (bash scripts/agent-sync.sh skills)
- ztd ssh - Shell into the VM (ephemeral key)
- ztd status - Report the ztd VM’s status (–watch for a live readiness dashboard)
- ztd test - Run the full acceptance suite for the current backend (bash scripts/smoke-test[-proxmox|-ec2].sh)
- ztd test:config - Run the VM-free config-loader unit test (bash scripts/test-config.sh)
- ztd tunnel - Forward a VM port to localhost (default 8080; e.g. ztd tunnel 8080)
- ztd unmount - Unmount a remote guest’s repo (bash scripts/mount-remote.sh unmount)
- ztd up - Boot the VM (generates the ephemeral guest key first)
- ztd validate - Validate the Terraform configuration
- ztd version - Print the ztd version