wayglass

Zero Trust for code changes.

Wayglass routes every agent change by policy: routine changes go to an agent, consequential ones to a person, and every decision carries its why.

Every command takes –json for agents. Exit codes: 0 ok, 1 error, 2 usage, 3 blocked by policy, 4 needs a human.

Usage

wayglass <command> [flags]

Subcommands

• wayglass login: Store the Worker URL and your Wayglass key
• wayglass init: Create the trunk repo in Artifacts and write .wayglass/policy.yaml
• wayglass intent: Declare and inspect intents (the why before the code)
• wayglass push: Push the intent’s fork and report changed files for overlap checks
• wayglass overlaps: Show open intents whose declared or actual paths overlap
• wayglass propose: Classify the change and let policy decide (exit 3 blocked, 4 needs a human)
• wayglass review: Review changes policy routed to a person (TUI on a terminal)
• wayglass approve: Approve a change routed to you, with a reason
• wayglass reject: Reject a change routed to you, with a reason
• wayglass land: Merge an approved change into the trunk, with its why, and mirror it
• wayglass why: Show the intent, decision and reason behind a line
• wayglass log: Show the audit log: every decision, who made it and why
• wayglass watch: Watch live intents, tags and decisions (TUI on a terminal)
• wayglass policy: Work with .wayglass/policy.yaml
• wayglass session: Hand agent sessions between people and agents
• wayglass version: Print the wayglass version
• wayglass agent: Set up coding agents to work through Wayglass
• wayglass diff: Show an intent’s change (fork base to pushed head) for review
• wayglass doctor: Check git, your login, the Worker, and this project’s trunk
• wayglass keys: Mint, list and revoke per-agent keys (admin key only)

Flags

Flag	Default	Description
--json		print a JSON envelope for agents (no colour, prompts or spinners)