Skip to content

v0.3.1 - Hetzer: Zero-Plaintext Armor & Secret Interceptor for AI Agents

Choose a tag to compare

View all tags
@agunggnn agunggnn released this 06 Sep 05:08
· 10 commits to main since this release
v0.3.1
f84d361

🛡️ What's New in Hetzer v0.3.1

Welcome to the official release of Hetzer! Hetzer is a high-performance, local-first Zero-Plaintext Security Armor & AI Command Plane engineered to shield autonomous AI agents and developer workstations from credential leaks, prompt injections, and accidental Git exposure.

🌟 Key Highlights

  • Zero-Plaintext Contract (secretRef:<id>):
    API keys, passwords, and tokens never exist in plaintext in .env files or Git repositories. Plaintext credentials exist only ephemerally in subprocess RAM upon execution (hetzer exec).
  • Sub-2ms Transparent Secret Sniffer:
    Inspects and replaces raw credentials with secretRef:<id> in real-time before LLM prompts leave your machine, backed by C++ V8 DFA regular expressions and Shannon entropy checks.
  • AES-256-GCM Grimoire Vault:
    SQLite-backed encrypted vault with hardware AES-NI acceleration and unique 12-byte IVs per secret.
  • Git Pre-Commit Guard:
    Installs a lightning-fast pre-commit hook (hetzer hook install) that intercepts git commit and blocks leaked tokens and .env files in under 2 milliseconds.
  • Universal Headless AI Agent Skills (0 RAM, 0 Docker Overhead):
    Instant one-click setup (hetzer skill install) supporting:
    • Hermes Agent
    • Google Antigravity (AGY)
    • OpenCode & CommandCode
    • Cursor IDE
    • Claude Desktop & Code
    • Cline / Roo Code
  • 0 External NPM Dependencies:
    Built 100% using Node.js standard libraries (node:crypto, node:sqlite, node:fs, node:perf_hooks). Zero supply-chain attack surface!
  • GitHub Packages Integration:
    Published directly to GitHub Packages as @agunggnn/hetzer with automated CI/CD workflows.
  • Enterprise & Banking Compliance Ready:
    Documented compliance evaluation for PCI-DSS v4.0, SOC 2 Type II, ISO/IEC 27001:2022, OJK (SEOJK 29/2022), and Bank Indonesia (PBI 23/2021).

📦 Installation

# Via GitHub Packages:
npm install -g @agunggnn/hetzer --registry=https://npm.pkg.github.com

# Or run instantly without installation:
npx @agunggnn/hetzer skill install

# One-line script:
curl -fsSL https://raw.githubusercontent.com/agunggnn/hetzer/main/install.sh | bash
# Windows:
irm https://raw.githubusercontent.com/agunggnn/hetzer/main/install.ps1 | iex

🙏 Acknowledgements

Special thanks to HashiCorp Vault, 1Password CLI, Doppler, TruffleHog, Gitleaks, Model Context Protocol (Anthropic), 9Router, Cognee, and LLM-Guard for inspiring this release.

Assets 2
Loading