Skip to content

v4.2.0

Choose a tag to compare

View all tags
@cyyever cyyever released this 18 Mar 13:55
· 49 commits to main since this release
v4.2.0
a7ba8ea
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

libcrust CGO FFI — Full daemon functionality is now embeddable via CGO for native GUI apps (macOS menubar,
iOS). Includes agent detection, config patching, MCP wrapping, hook evaluation, event streaming, and
protection lifecycle management.

AI Agent Detection — New crust agents CLI command scans running processes to detect AI coding agents (Claude
Code, Cursor, Windsurf, Codex, Aider, etc.) and shows their protection status.

Fast Hook Evaluation — Claude Code PreToolUse hooks now evaluate via a raw TCP socket to the running daemon,
eliminating ~4s cold-start rule engine initialization.

Features

  • libcrust: embed full daemon functionality via CGO FFI (#92)
  • libcrust: add agent detection, patching, and MCP wrap FFI exports (#95)
  • libcrust: auto-protect lifecycle with HTTP proxy + Claude Code hooks
  • libcrust: fast hook evaluation via running instance TCP socket
  • libcrust: initialize plugin registry with sandbox plugin (#101)
  • agents: AI agent process detection with crust agents CLI (#93)
  • events: SSE event stream + libcrust CGO wrapper (#88)
  • api: expose plugin stats via GET /api/security/plugins (#89)
  • stats: 24h sliding-window stats from SQLite, server-side blocked filtering (#99)
  • build: add GetCommit/GetBuildDate CGO exports for version display (#100)
  • build: add gen-ffi-schema tool for Go/Rust FFI mismatch detection

Bug Fixes

  • daemon: defer agent config restore, signal registration race, stale eval port (#98)
  • hooks: target settings.json instead of removed hooks.json; seed stats from SQLite on startup
  • hooks: fix idempotency check — marker must match .exe suffix
  • agentdetect: show Claude Code as protected when hook is installed
  • registry: accurate patch status for missing agent configs (#96)
  • metrics: include hook counters in Reset(), fix TUI shimmer on first data fetch (#98)
  • context: add timeouts to all background database operations (#99)
  • freebsd: process detection, platform guards, and CI race detector (#97)
  • ci: FreeBSD build support for agentdetect process scanning (#94)
  • fuzz: correct SSE event oracle, disable DNS resolution during fuzz runs (#90, #91)

Refactoring

  • Replace HTTP eval endpoint with raw TCP socket for lower latency
Assets 2
Loading