ZelC — Download | Rocheston Cybersecurity Programming Language

Installation

Install in 30 Seconds

      
# One-line install (macOS / Linux)
curl -sSL https://rocheston.com/zelc/zelc-releases/install | bash

# Or manual install
tar -xzf zelc-1.2-macos-arm64.tar.gz
sudo mv zelc /usr/local/bin/zelc
zelc --version
ZelC 1.2 (Maple) - Rocheston Proprietary
    

💻

macOS 12+

Apple Silicon or Intel

🐧

Linux

glibc 2.17+ (any modern distro)

🐳

Docker

Any platform via container

Linux Packages

Install with APT (Ubuntu 24.04+)

ZelC is available through the official Rocheston APT repository for Ubuntu 24.04 and later. This gives you a native package-managed installation with simpler upgrades, cleaner system integration, and an easier way to keep ZelC up to date.

sudo mkdir -p /etc/apt/keyrings curl -fsSL https://www.rocheston.com/zelc/zelc-releases/apt/zelc.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/zelc.gpg echo "deb [signed-by=/etc/apt/keyrings/zelc.gpg] https://www.rocheston.com/zelc/zelc-releases/apt stable main" | sudo tee /etc/apt/sources.list.d/zelc.list > /dev/null sudo apt update sudo apt install zelc # Verify zelc --version

Why use APT? Trusted Linux workflow, straightforward upgrades, and clean deployment across workstations, labs, classrooms, and engineering environments.

# Upgrade ZelC later sudo apt update sudo apt upgrade

Built with 💛 by Haja Mo.

CLI Reference

Commands & Switches

Command	Description
`zelc`	Launch interactive REPL terminal
`zelc run <file.zelc>`	Compile and execute a ZelC playbook
`zelc run --dry-run <file>`	Execute with all actions in simulation mode
`zelc run --json <file>`	Output results as structured JSON
`zelc guard <file.zelc>`	Safety analysis: kinetic violations, taint tracking, type errors
`zelc fmt <files...>`	Format ZelC source files (2-space indent, consistent style)
`zelc fmt --check <files>`	Check formatting without modifying (exit 1 if changes needed)
`zelc test <file.zelc>`	Run check blocks in simulation mode with mock adapters
`zelc init <name>`	Create new ZelC project with zelc.toml, src/, tests/
`zelc pkg install <name>`	Install package from Rocheston registry
`zelc pkg list`	List installed packages
`zelc doc gen --output <dir>`	Generate HTML documentation site
`zelc doc gen --source <dir>`	Specify source directory for doc generation
`zelc export evidence --format json`	Export evidence log from last run
`zelc lsp`	Start Language Server Protocol server (for VS Code)
`zelc playground`	Launch web-based ZelC Playground on port 8080
`zelc daemon`	Start Zelfire SOC daemon (event processor)
`zelc rosecoin-dev`	Start local Rosecoin blockchain simulator
`zelc --version`	Print version: ZelC 1.2 (Maple)
`zelc --verbose <cmd>`	Print compilation stages during execution
`zelc --no-color <cmd>`	Disable colored terminal output

Interactive Terminal

REPL Commands

Run zelc with no arguments to launch the interactive terminal.

Command	Description
`:help`	Show available REPL commands
`:clear`	Reset all state and variables
`:evidence`	Show current evidence log
`:export json`	Export evidence to JSON
`:load <file.zelc>`	Load and execute a playbook file
`:ast <statement>`	Show the AST for a statement
`:tokens <statement>`	Show the token stream
`:quit`	Exit the REPL
`Ctrl+C`	Cancel current input
`Ctrl+D`	Exit
`Tab`	Tab completion for keywords
`↑ / ↓`	Navigate command history
`Ctrl+R`	Reverse search through history

Getting Started

Quick Start

1

Create a Project

Initialize a new ZelC project with standard layout.

zelc init my-soc-playbooks
cd my-soc-playbooks

# Edit integrations/ to configure your security tools:
#   integrations/firewall.toml      -- Palo Alto, Fortinet, iptables, etc.
#   integrations/edr.toml           -- CrowdStrike, Defender, SentinelOne, etc.
#   integrations/aws.toml           -- AWS credentials and services
#   integrations/notifications.toml -- Slack, Teams, Email, PagerDuty
#   ... and more

2

Write a Playbook

Edit src/main.zelc with your security logic.

-- src/main.zelc
check BruteForceShield
  keep threshold = 12

  when bruteforce_login
    alert critical "🚨 Attack detected"

    do
      firewall block ip event.source_ip
      evidence record "Containment" details {
        ip: event.source_ip,
        action: "blocked"
      }
    end
  end
end

3

Safety Check

Verify kinetic safety and taint tracking.

zelc guard src/main.zelc
✅ Playbook is safe
  Kinetic actions: 1 (all inside do blocks)
  Taint warnings: 0
  Type errors: 0

4

Run It

Execute and see evidence generated automatically.

zelc run src/main.zelc
🚨 Alert: Attack detected
🛡️ firewall block ip 1.2.3.4
📝 Evidence: Containment [sha256:a3f2...]
✅ Check BruteForceShield passed

Language Preview

ZelC Syntax at a Glance

-- ZelC uses -- for comments (not // or /* */) -- File extension: .zelc -- Variables set count = 0 -- mutable variable keep MAX_RETRIES = 3 -- immutable constant change count = count + 1 -- mutate existing -- Conditional logic when risk_score > 90 alert critical message "High risk detected" otherwise alert low message "Normal operations" end -- Kinetic actions (MUST be inside do...end) do firewall block ip "1.2.3.4" for 2 hours edr isolate host "endpoint-07" iam revoke sessions user_id aws rotate keys end -- Evidence is first-class evidence record "Containment" details { host: "endpoint-07", action: "isolated" } -- Blockchain anchoring rosecoin anchor evidence_pack "latest" -- AI-powered analysis set analysis = aina explain event raw_logs set risk = aina risk_score user_activity -- Emoji Visual Mode (optional) 🛡️ do ⛔ block ip event.source_ip 📝 evidence record "Blocked" details { ip: event.source_ip } ⛓️ rosecoin anchor evidence_pack "threat" end

Verification

SHA-256 Checksums

Verify your download integrity:

shasum -a 256 zelc-1.2-*.tar.gz

File	SHA-256
zelc-1.2-macos-arm64.tar.gz	01a2981efdda72f3502efbb58203559cd6e2bc6cbd2a32e78beb3a40d866f551
zelc-1.2-linux-x86_64.tar.gz	394161b2b7d8731d47b2283adfdacb96941db3541e40c69fb3b565f29c885b6a

Download ZelC