Skip to content

CmdWarden 0.8.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Sep 16:40
· 81 commits to main since this release
v0.8.0
1334d0a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What is new in 0.8.0

  • Two commands to the first block. winget install BasantPandey.CmdWarden, then cw setup. No .NET install and no admin prompt: CmdWarden carries its own runtime (#64, #65).
  • cw setup enrolls your terminal, hardens the tools it finds, wires Claude Code, Cursor, and Codex, and shows a real card. cw try shows the card at any time with a fake secret (#65).
  • Codex support in the policy hook, the leak guard, and the MCP server, and the Codex sandbox accounts (#66).
  • .env guard. cw env import moves the values into the vault. cw inject --env-file .env -- <cmd> gives them back with one card (#67).
  • Fewer cards. New policy files let low-risk writes run. "Allow for session" is the default button. The tray counts the cards of today (#68).
  • Masked output. cw inject shows [CmdWarden: NAME] in place of each value (#69).
  • cw protect turns on the secret protections of Claude Code and Codex (#70).
  • Self-protection. The hook stops cw commands that turn protection off. New trust page (#71).

CmdWarden 0.8.0

Make AI coding agents ask before they use your CLI secrets on Windows.

Install

Way Command or file
winget winget install BasantPandey.CmdWarden (when the winget catalog has this version)
Setup zip Download CmdWarden.0.8.0-setup.zip, extract it, double-click install.cmd
Portable zip Extract CmdWarden.0.8.0-win-x64.zip and run cw.exe
dotnet tool Download CmdWarden.0.8.0.nupkg to a folder, then dotnet tool install -g CmdWarden --add-source <folder> (needs the .NET 10 SDK)

The winget package, the setup zip, and the portable zip carry their own .NET runtime. No .NET install and no admin prompt.

Then run cw setup. It sets up everything and shows a real Approval Gate card.

Signature

This release is not signed yet: Windows SmartScreen may warn. Compare the sha256 of the zip with this page. A signed release shows Valid here:

Get-ChildItem "$env:LOCALAPPDATA\CmdWarden\app" -Recurse -Include cw.exe, CmdWarden.*.exe |
  Get-AuthenticodeSignature | Format-Table Status, Path

Update and remove

cw update installs the newest release after a sha256 check. A winget install updates with winget upgrade BasantPandey.CmdWarden.
cw uninstall removes CmdWarden and every change it made.

Assets 6
Loading