ztd

Zero Trust Dev — disposable isolated VMs for untrusted dev work

Options

  -h, --help   help for ztd

SEE ALSO

  • ztd attach - Reattach to the guest agent’s tmux session (bash scripts/run-agent.sh attach)
  • ztd audit - Export a run’s audit record to .ztd/runs/ (bash scripts/audit.sh)
  • ztd auth - Sync the operator’s Claude Code login into the guest (bash scripts/auth-sync.sh)
  • ztd cattle - One-shot up→auth→skills→commands→run (bash scripts/cattle.sh)
  • ztd check - Run the host-side preflight (bash scripts/check-requirements.sh)
  • ztd commands - Provision/pull the guest agent’s ~/.claude/commands (bash scripts/agent-sync.sh commands)
  • ztd config - Print the resolved ztd configuration
  • ztd down - Tear down the VM (discards the ephemeral key + transient git remote on success)
  • ztd fetch - Fetch the guest’s commits into the operator’s checkout (bash scripts/fetch-remote.sh)
  • ztd init - Scaffold this project’s .ztd/ztd.toml (the single config file)
  • ztd ip - Print the VM’s IP address
  • ztd list:orphans - List orphaned VMs/resources not tracked by state
  • ztd logs - Follow guest cloud-init/provisioning output
  • ztd mount - SSHFS-mount a remote guest’s repo (bash scripts/mount-remote.sh mount)
  • ztd plan - Show the Terraform plan for the VM
  • ztd purge - Destroy all ztd-managed resources
  • ztd reset - Recreate the VM (down+up; keeps the ephemeral key)
  • ztd run - Launch the agent in a guest tmux session (bash scripts/run-agent.sh run)
  • ztd setup - Install the persistent Docker→libvirt forwarding fix (–transient, –undo)
  • ztd skills - Provision/pull the guest agent’s ~/.claude/skills (bash scripts/agent-sync.sh skills)
  • ztd ssh - Shell into the VM (ephemeral key)
  • ztd status - Report the ztd VM’s status (–watch for a live readiness dashboard)
  • ztd test - Run the full acceptance suite for the current backend (bash scripts/smoke-test[-proxmox|-ec2].sh)
  • ztd test:config - Run the VM-free config-loader unit test (bash scripts/test-config.sh)
  • ztd tunnel - Forward a VM port to localhost (default 8080; e.g. ztd tunnel 8080)
  • ztd unmount - Unmount a remote guest’s repo (bash scripts/mount-remote.sh unmount)
  • ztd up - Boot the VM (generates the ephemeral guest key first)
  • ztd validate - Validate the Terraform configuration
  • ztd version - Print the ztd version