Step 1: Install the CLI

curl -fsSL https://a2ainfrastructure.com/install.sh | bash

Or install via npm:

npm install -g tyga-cli

Optionally configure Gate 2 with your API key:

export A2A_API_KEY="a2a_your_key_here"

Step 2: Add the safety layer

Prefix any command with tyga to screen it before execution:

# Gate 1: local firewall evaluation (free, no API key needed)
tyga ls -la /tmp
tyga df -h
tyga cat /var/log/syslog

# Gate 2: remote evaluation + OCSF audit (requires API key)
tyga --gate2 kubectl get pods

# Pipeline mode: run inside a sandboxed container
tyga --pipeline "pip install numpy && python train.py"

Blocked command:

$ tyga rm -rf /
BLOCKED by safety shield (Gate 1)
  Command: rm -rf /
  Pattern: rm[[:space:]]+-rf[[:space:]]+/
# Exit code 1 — command was never executed

Allowed command:

$ tyga ls -la
# Runs normally — Gate 1 passed, command executes
total 48
drwxr-xr-x  12 user staff  384 May  1 10:00 .
...

Step 3: Verify

# Quick check that the firewall is working
tyga echo "hello world"    # ALLOWED
tyga rm -rf /              # BLOCKED
tyga --version             # tyga-cli v1.x.x