Skip to content

Mandu 0.2.0-beta.7

Choose a tag to compare

View all tags
@tk4n9 tk4n9 released this 19 Oct 14:56
v0.2.0-beta.7
e6b4461

Mandu 0.2.0-beta.7 — public beta

Run Claude Code or Codex next to your real keys and secret files. The AI sees placeholders; you and the programs you allow can use the real values.

Install or update

With Node.js 22.13 or newer:

npm install -g @mandusec/mandu@0.2.0-beta.7
mandu --version
mandu doctor
mandu demo

Alternatively, download install.sh, SHA256SUMS, and the package below into one folder, then run sh install.sh. The installer checks the package checksum and can install a private copy of Node when needed.

Changes since beta.6

  • mandu version reports the running installation, source/build commits, other copies on PATH, and conflicting background services.
  • Credentials whose formats identify their issuing service can go to that service's API over HTTPS in the sign-in header without a separate approval. Other destinations still require your rules or approval.
  • Personal-document recognition includes text-layer PDFs and supported Office files. Claude Code can read a protected PDF's labels with its sensitive values replaced by placeholders.
  • Personal names stay masked in protected documents without unnecessarily masking unrelated text that mentions the same name.
  • The dashboard identifies the file a secret came from and improves history, rule search, notifications, and long-reply navigation.
  • npm-installed copies receive an npm update command; installation and Codex login documentation reflects the current product.

See the changelog for details.

Scope

This is a beta. Linux x64 is the primary supported platform. The package also contains Linux arm64 native binaries; their startup is checked under emulation. macOS remains experimental.

The default secrets mode protects registered credentials and labeled private data. It does not prevent prompt injection or protect data that has not been registered or labeled. Integrity modes remain experimental and disabled by default.

Report suspected security issues privately. For other bugs, include mandu version and mandu doctor output after removing private information.

Artifact

The GitHub download and npm package are the same file.

  • SHA-256: 1ea2ec1e78d804adfd8675ebe9e618cfa47e55daf555785b69113213263842a0
  • Source revision: b1e05f2a9990263298ce19f8f6ffa753bbd89c3a
  • Public snapshot: e6b4461f098c00cb52938ab3f7a7952866f2f24d
Assets 5
Loading