npm install -g @pinata/doorman@0.8.0
New
- Agents can suggest a rule: Doorman's MCP server has a
doorman_propose_rule tool. doorman custom-rules lists suggestions with their ids; doorman custom-rules accept <id> saves one and doorman custom-rules dismiss <id> drops it. Nothing applies until you save it, and a suggestion can only add a rule, never change, switch off or replace one you have (docs/rules.md).
- A guide to rules: modes, severity, security levels, rule packs, exceptions and writing your own rules, with examples (docs/rules.md);
doorman custom-rules --help links to it.
Fixed
- An agent can no longer stand down the guard it is under. Commands that turn Doorman's protection down, answer held calls (
doorman watch, including --stdio) or hide what it recorded are held for you whatever the rules say, however doorman is run, and so is any change to Doorman's data directory, including prefs.json. Before, an agent could leave doorman watch --stdio answering in the background and approve its own held calls, or run doorman guard uninstall, without being held. doorman_check_tool_call gives the same answer.