Skip to content

CloudSlash (cs)

CloudSlash is a 100% provider-agnostic optimization and reversibility engine compiled into a single binary (cs).

The core binary contains zero cloud SDKs. Instead, it runs a deterministic mathematical engine over a Universal Resource Graph populated by isolated gRPC plugins—whether those plugins scan AWS, GCP, Kubernetes, Git repositories, PostgreSQL indexes, Linux hosts, or SaaS seats.

1. Quick Start

# Install the single binary
curl -fsSL https://cloudslash.dev/install.sh | bash

# Initialize local workspace & detect plugins
cs init

# Install any universal plugin from the Registry
cs plugin install aws
cs plugin install k8s

# Run a scan or open the interactive Terminal Dashboard
cs scan
cs tui

Run cs scan locally against ambient credentials (e.g. ~/.kube/config, gh auth, Docker socket), or launch cs tui to explore the interactive terminal dashboard.

2. Real CLI Commands

cloudslash and cs are the exact same binary:

Command Purpose
cs init Initialize .cloudslash.yaml, local BadgerDB graph store, and plugin directory
cs scan Stream resources from installed plugins, link dependencies, and evaluate CEL policies
cs tui Launch the interactive 6-mode terminal dashboard (Overview, Detail, Multi-Cloud, S.A.U., Config, Plugins)
cs plan Generate a deterministic execution and S.A.U. reversibility plan
cs remediate Execute approved optimizations through the S.A.U. saga gate
cs revert <id> Atomically unwind a previous remediation using its inverse state manifest
cs diff Compare two snapshots over time to measure new waste, resolved waste, and cost deltas
cs drift Detect live infrastructure drift against the last recorded snapshot
cs chargeback Generate Finance-ready multi-sheet XLSX chargeback reports by team and cost-center
cs audit Produce structured M&A due-diligence and infrastructure spend audits
cs watch Continuously watch cloud accounts for unmanaged changes on an interval
cs plugin Install, list, scaffold (create), test (dev), or sign & publish (publish) plugins
cs policy Validate, test, and inspect CEL governance policy packs
cs login / cs sync Authenticate with CloudSlash Horizon (app.cloudslash.dev) and sync graph snapshots
cs status / cs doctor Inspect local engine health, plugin sockets, and S.A.U. ledger integrity

3. Core Architecture

flowchart LR
    CLI["cs scan / cs tui"] --> Engine["Pure Core Engine (Zero Cloud SDKs)"]
    Engine <-->|gRPC Protobuf| P1["Plugin: AWS / GCP / K8s"]
    Engine <-->|gRPC Protobuf| P2["Plugin: Git / Postgres / Linux"]
    Engine --> Linker["Patricia CIDR Trie & Ghost Linker"]
    Engine --> Math["5D Vector Bin-Packer & Conformal Oracle"]
    Engine --> Policy["CEL PolicyMesh"]
    Engine --> SAU["S.A.U. Topological Unwind Ledger"]
  1. Universal Plugins (Scan + Unwind): Every plugin is a standalone gRPC binary that emits ResourceNode vertices (crn://<plugin>/<scope>/<type>/<id>) and implements ApplyQuarantine / CheckReversibility.
  2. Patricia Trie & 2-Hop Graph Indexing: Resolves cross-domain network containment in \(O(W)\) bitwise time and reachability queries in \(O(|\text{Out}(u)| + |\text{In}(v)|)\).
  3. 5D Vector Bin-Packing & Conformal Oracle: Packs multi-dimensional workloads (\(\text{CPU}, \text{RAM}, \text{GPU}, \text{Net}, \text{IOPS}\)) via cosine alignment and bounds Spot preemption risk with distribution-free conformal intervals.
  4. S.A.U. (Sequential Atomic Unwind): Computes Kahn's topological sort over the transposed dependency graph (\(\text{DAG}^T\)) and records an adjoint rollback manifest before mutating any resource.

4. Build a Universal Plugin in 60 Seconds

Anyone can build a plugin for any system—cloud infrastructure, Git repositories, databases, or SaaS licenses—and publish it to registry.cloudslash.dev:

# 1. Scaffold a local source plugin (or use Plugin Studio for hosted v3)
cs plugin create my-scanner

# 2. Build and install it locally
cd my-scanner
cs plugin dev

# 3. Publish a signed release
cs plugin publish --version=v1.0.0

5. Next Steps