$npx -y skills add Dicklesworthstone/agent_flywheel_clawdbot_skills_and_integrations --skill slbSimultaneous Launch Button - Two-person rule for destructive commands in multi-agent workflows. Risk-tiered classification, command hash binding, 5 execution gates, client-side execution with environment inheritance. Go CLI.
| 1 | # SLB — Simultaneous Launch Button |
| 2 | |
| 3 | A Go CLI that implements a **two-person rule** for running potentially destructive commands from AI coding agents. When an agent wants to run something risky (e.g., `rm -rf`, `git push --force`, `kubectl delete`, `DROP TABLE`), SLB requires peer review and explicit approval before execution. |
| 4 | |
| 5 | ## Why This Exists |
| 6 | |
| 7 | Coding agents can get tunnel vision, hallucinate, or misunderstand context. A second reviewer (ideally with a different model/tooling) catches mistakes before they become irreversible. |
| 8 | |
| 9 | SLB is built for **multi-agent workflows** where many agent terminals run in parallel and a single bad command could destroy work, data, or infrastructure. |
| 10 | |
| 11 | ## Critical Design: Client-Side Execution |
| 12 | |
| 13 | **Commands run in YOUR shell environment**, not on a server. The daemon is a NOTARY (verifies approvals), not an executor. This means commands inherit: |
| 14 | |
| 15 | - AWS_PROFILE, AWS_ACCESS_KEY_ID |
| 16 | - KUBECONFIG |
| 17 | - Activated virtualenvs |
| 18 | - SSH_AUTH_SOCK |
| 19 | - Database connection strings |
| 20 | |
| 21 | ## Risk Tiers |
| 22 | |
| 23 | | Tier | Approvals | Auto-approve | Examples | |
| 24 | |------|-----------|--------------|----------| |
| 25 | | **CRITICAL** | 2+ | Never | `rm -rf /`, `DROP DATABASE`, `terraform destroy`, `git push --force` | |
| 26 | | **DANGEROUS** | 1 | Never | `rm -rf ./build`, `git reset --hard`, `kubectl delete`, `DROP TABLE` | |
| 27 | | **CAUTION** | 0 | After 30s | `rm file.txt`, `git branch -d`, `npm uninstall` | |
| 28 | | **SAFE** | 0 | Immediately | `rm *.log`, `git stash`, `kubectl delete pod` | |
| 29 | |
| 30 | ## Quick Start |
| 31 | |
| 32 | ### Installation |
| 33 | |
| 34 | ```bash |
| 35 | # One-liner |
| 36 | curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/slb/main/scripts/install.sh | bash |
| 37 | |
| 38 | # Or with go install |
| 39 | go install github.com/Dicklesworthstone/slb/cmd/slb@latest |
| 40 | ``` |
| 41 | |
| 42 | ### Initialize a Project |
| 43 | |
| 44 | ```bash |
| 45 | cd /path/to/project |
| 46 | slb init |
| 47 | ``` |
| 48 | |
| 49 | Creates `.slb/` directory with: |
| 50 | - `state.db` - SQLite database (source of truth) |
| 51 | - `config.toml` - Project configuration |
| 52 | - `pending/` - JSON files for pending requests |
| 53 | - `logs/` - Execution logs |
| 54 | |
| 55 | ### Basic Workflow |
| 56 | |
| 57 | ```bash |
| 58 | # 1. Start a session (as an AI agent) |
| 59 | slb session start --agent "GreenLake" --program "claude-code" --model "opus" |
| 60 | # Returns: session_id and session_key |
| 61 | |
| 62 | # 2. Run a dangerous command (blocks until approved) |
| 63 | slb run "rm -rf ./build" --reason "Clean build artifacts" --session-id <id> |
| 64 | |
| 65 | # 3. Another agent reviews and approves |
| 66 | slb pending # See what's waiting |
| 67 | slb review <request-id> # View full details |
| 68 | slb approve <request-id> --session-id <reviewer-id> --comment "Looks safe" |
| 69 | |
| 70 | # 4. Original command executes automatically after approval |
| 71 | ``` |
| 72 | |
| 73 | ## Commands Reference |
| 74 | |
| 75 | ### Session Management |
| 76 | |
| 77 | ```bash |
| 78 | slb session start --agent <name> --program <prog> --model <model> |
| 79 | slb session end --session-id <id> |
| 80 | slb session resume --agent <name> --create-if-missing # Resume after crash |
| 81 | slb session list # Show active sessions |
| 82 | slb session heartbeat --session-id <id> # Keep session alive |
| 83 | slb session gc --threshold 2h # Clean stale sessions |
| 84 | ``` |
| 85 | |
| 86 | ### Request & Run |
| 87 | |
| 88 | ```bash |
| 89 | # Primary command (atomic: check, request, wait, execute) |
| 90 | slb run "<command>" --reason "..." --session-id <id> |
| 91 | |
| 92 | # Plumbing commands |
| 93 | slb request "<command>" --reason "..." # Create request only |
| 94 | slb status <request-id> --wait # Check/wait for status |
| 95 | slb pending --all-projects # List pending requests |
| 96 | slb cancel <request-id> # Cancel own request |
| 97 | ``` |
| 98 | |
| 99 | ### Review & Approve |
| 100 | |
| 101 | ```bash |
| 102 | slb review <request-id> # Show full details |
| 103 | slb approve <request-id> --session-id <id> --comment "..." |
| 104 | slb reject <request-id> --session-id <id> --reason "..." |
| 105 | ``` |
| 106 | |
| 107 | ### Execution |
| 108 | |
| 109 | ```bash |
| 110 | slb execute <request-id> # Execute approved request |
| 111 | slb emergency-execute "<cmd>" --reason "..." # Human override (logged) |
| 112 | slb rollback <request-id> # Rollback if captured |
| 113 | ``` |
| 114 | |
| 115 | ### Pattern Management |
| 116 | |
| 117 | ```bash |
| 118 | slb patterns list --tier critical # List patterns by tier |
| 119 | slb patterns test "<command>" # Check what tier a command gets |
| 120 | slb patterns add --tier dangerous "<pattern>" # Add runtime pattern |
| 121 | ``` |
| 122 | |
| 123 | ### Daemon & TUI |
| 124 | |
| 125 | ```bash |
| 126 | slb daemon start --foreground # Start background daemon |
| 127 | slb daemon stop # Stop daemon |
| 128 | slb daemon status # Check daemon status |
| 129 | slb tui # Launch interactive TUI |
| 130 | slb watch --session-id <id> --json # Stream events (NDJSON) |
| 131 | ``` |
| 132 | |
| 133 | ### Claude Code Hook |
| 134 | |
| 135 | ```bash |
| 136 | slb hook install # Install PreToolUse hook |
| 137 | slb hook status # Check installation |
| 138 | slb hook |