Skip to content

AgentSmith 0.5.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Oct 20:34
v0.5.0
610914b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AgentSmith 0.5.0 makes the always-loaded rules about 40% shorter and closes the installer-safety
issue #50. It also adds checks that show whether your rules actually take effect, and guards for
unattended runs.

Highlights

  • Leaner rules. The core and the software-dev profile drop from about 5,800 to about 3,350
    words. Generic coding advice that current models follow unprompted is gone. Consent, secrets,
    identity, authority and the trust gates stay. The static-context budget is now 480 lines /
    ~7,800 tokens (#64).

  • Installer safety. Uninstall restores only what AgentSmith wrote and never deletes a file it
    did not create. Install refuses, before writing anything, any destination that leads out of its
    folder through a link (#50, #61).

  • Project-owned profiles. --profile project:<name> reads .agentsmith/profiles/<name>.md in
    your project (#61).

  • agentsmith doctor finds rules that cannot take effect (#62):

    • a rulebook loaded twice, or a legacy one in ~/AGENTS.md;
    • a skill that cites a missing file;
    • a plugin named but not enabled;
    • a shell hook that rewrites command output;
    • a profile-only install missing core rules.

    It also shows how often each shipped hook fired in the last 30 days.

  • Evaluation reports cost next to quality, with a no-instructions arm for head-to-head runs
    (#62).

  • Guards for autonomous runs (#63):

    • a repository kill switch (.harness/AUTONOMY_PAUSED);
    • a sandbox preflight before anything is created;
    • status --all-terminal (exit 0/1/2) to run before Git metadata changes;
    • a spec check that requires committed research and an independent review.

Behaviour changes

  • A project install keeps Claude's permission mode in the project's .claude/settings.json, never
    in your user settings.
    • It refuses --safety trusted for Claude, because Claude Code ignores bypassPermissions in
      project settings.
    • An existing project install made with --safety trusted for Claude stops at update plan
      with that message, before any file changes.
  • Check your user settings after updating a project install from v0.4.0. v0.4.0 project
    installs also wrote Claude's mode into ~/.claude/settings.json and did not record the value
    they replaced, so the update cannot restore it. Check permissions.defaultMode there.
  • A project CLAUDE.md now imports @AGENTS.md instead of carrying a second full copy of the
    rules. Your own text outside the managed block is kept exactly.
  • agentsmith verify fails when it ran no phase, for example --only with a filter that matches
    nothing.
  • prepare refuses blank or placeholder role models.
  • An accepted spec with schema: 2 must name its research, route and review receipt.
  • Internal commands no longer appear in agentsmith --help; they still work.
  • Evaluation results use schema v3.

Updating

Follow docs/23-updating-existing-installations.md.
The v0.4.0 → v0.5.0 update was exercised for project and global installs before release.

Downloads

Five standalone archives and SHA256SUMS, with build attestations. The builds are not
code-signed. Check the hash, and verify with
gh attestation verify <file> --repo PromptPartner/agentsmith --signer-workflow PromptPartner/agentsmith/.github/workflows/standalone.yml --source-ref refs/tags/v0.5.0.

Known issues that remain open are listed in KNOWN-ISSUES.md.

Assets 8
Loading