aflock-tui

Terminal UI for inspecting aflock sessions, replaying Claude Code sessions against policies, and live-watching agent sessions.

Download Latest GitHub 
bash <(curl -s https://raw.githubusercontent.com/manzil-infinity180/aflock-tui/main/install.sh)

Part of the aflock ecosystem — cryptographically signed policies for constrained AI agent execution

Features

🔍
Session Browser
Browse all aflock sessions. Inspect metrics, agent identity, tool calls, cost, and token usage at a glance.
🔒
Attestation Decoder
Decode DSSE envelopes, view in-toto statements, inspect raw payloads. Three views: structured, decoded, raw.
🔑
JWT Viewer
Decode JWT auth tokens — header, claims, SPIFFE ID, agent identity hash, expiry.
▶
Replay Validator
Replay recorded Claude sessions against any aflock policy. See ALLOW/DENY/ASK per action with matched rules.
📈
Summary Dashboard
Tool breakdown, decision timeline, deny/ask lists. Press s in replay mode.
🔴
Live Watch
Live-tail a Claude session as the agent runs. See policy decisions appear in real-time with --live auto-discovery.

Usage

Browse Sessions

Navigate sessions with j/k, press Enter to inspect, Tab to switch tabs, a for attestations, t for JWT.

aflock-tui

Replay Validator

Replay a Claude session against a policy. Uses aflock replay --format json under the hood.

aflock-tui replay session.jsonl .aflock

Live Watch

Auto-discovers the most recent Claude session and tails it live. Run in one terminal, Claude Code in another.

aflock-tui watch --live .aflock

Install

One-line install

bash <(curl -s https://raw.githubusercontent.com/manzil-infinity180/aflock-tui/main/install.sh)

Go install

go install github.com/manzil-infinity180/aflock-tui@latest

Build from source

git clone https://github.com/manzil-infinity180/aflock-tui.git
cd aflock-tui
go build -o aflock-tui .

Supply Chain Security

Every release is signed with Sigstore cosign (keyless, GitHub OIDC) and includes SPDX SBOMs generated by syft. Select your platform to get the verify command:

cosign verify-blob \
  --bundle aflock-tui_0.1.0_darwin_arm64.tar.gz.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "github.com/manzil-infinity180/aflock-tui" \
  aflock-tui_0.1.0_darwin_arm64.tar.gz
Cosign signed SPDX SBOM SHA256 checksums GitHub OIDC

Related Projects

aflock
Cryptographically signed policies for constrained AI agent execution. SPIFFE identity, in-toto attestations, Rego evaluators.
aflock-replay
Browser-based replay UI. Real aflock evaluator via WebAssembly, 100% client-side.
witness
Supply chain attestation framework by TestifySec. aflock's attestation model is inspired by witness.