demo / hello

hello - cli-guard examples/audit

NAME

hello - print a greeting

SYNOPSIS

hello

DESCRIPTION

Audited greeting verb. Demonstrates verb.Wrap composing every cli-guard primitive on a single Action.

Examples:

# default scope: cwd's git toplevel
cd /path/to/some/repo
demo hello world
# hello, world

# explicit scope
demo --commit-scope=/path/to/repo hello world

# empty name accepted - defaults to "world"
demo hello
# hello, world

# rejected by policy.ValidateArg (shell metacharacter)
demo hello 'world; whoami'
# policy: shell metacharacter rejected: arg positional[0] contains ';' at index 5

The audit row produced on a passing call includes:

{"ts":"2026-...","verb":"hello","argv":["hello","world"],"cwd":"...","scope":"...","exit":0}

On a rejected call the row records exit=2 and the policy reason in the envelope. An agent reading the log can reconstruct intent without parsing stderr.

Usage:

hello [GLOBAL OPTIONS] [command [COMMAND OPTIONS]] [ARGUMENTS...]