Skip to content

AntiAgent v0.4.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Oct 01:42
· 13 commits to main since this release
v0.4.2
854e214

Summary

Introduced Antigravity Conversation Artifact & Brain Directory Auto-Approval (Closes #3). AntiAgent now treats Antigravity's current per-conversation artifactDirectoryPath as an agent-owned write area. Routine file mutations (write_to_file, replace_file_content, delete_file) targeting inside that directory are deterministically auto-approved with zero confirmation prompts and without disrupting prompt queue interaction states. Sibling conversations, sensitive files (.env, credentials, system roots), and external filesystem paths remain strictly protected under workspace boundary guards.

Architectural & Functional Highlights

Area / Component Improvement
Runtime Trusted Artifact Containment (engine/heuristics/fs_guard.py) Added canonical-path containment verification (_is_inside_roots, _is_path_contained) for trusted artifact paths distinct from workspace roots. Correctly rejects path traversal (conv-a/../conv-b), prefix collisions (conv-a-malicious), and POSIX symlink escapes while preserving Windows case-insensitivity.
Deterministic Heuristic Auto-Approval (engine/heuristics/fs_guard.py) Evaluates file mutation tools (write_to_file, replace_file_content, delete_file) targeting inside trusted_artifact_paths immediately after sensitive target checks, returning DECISION_ALLOW deterministically before outside-workspace rules and before LLM supervisor invocation.
Antigravity PreToolUse Hook Integration (hook.py) Authoritatively passes artifactDirectoryPath from Antigravity's runtime payload into AntiAgentEvaluator and FSGuard. Ensures interaction state machine stays in RUNNING with pending_approval = False on auto-approved artifact mutations.
Safety Invariant Prioritization Strict evaluation hierarchy guarantees that credential files (.env, SSH keys, SAM, registry hives) and protected system paths (/etc, /System, /Windows) are checked FIRST and always flagged for confirmation, even if placed inside an artifact directory.
User & Environment Control (config.py) Added auto_approve_artifact_writes: bool = True with environment override ANTIAGENT_AUTO_APPROVE_ARTIFACT_WRITES. Untrusted repositories cannot declare arbitrary write roots via .antiagent.json.

Verification Proof

  • All 323 unit tests passed (python3 -m unittest discover tests) with 0 failures and 0 errors.
  • Added comprehensive unit, evaluator, hook contract, and Windows path containment test suite in tests/test_artifact_directory.py (18 tests).
  • Verified sensitive target check precedence, traversal rejection, sibling conversation isolation, and symlink escape rejection.
  • Closes GitHub Issue #3.

📥 Which download is right for you?

Package Operating System Description
AntiAgent.dmg macOS Recommended for Mac. Drag-and-drop installer to /Applications.
AntiAgent-Windows.zip Windows (Public Beta) Recommended for Windows (Beta). Extract and double-click AntiAgent.bat.
AntiAgent.pkg macOS Standard auto-launching installer package for enterprise / MDM.
AntiAgent.zip macOS Standalone portable .app bundle archive.

ℹ️ Windows Support (Public Beta): The Windows standalone app mode is currently in Public Beta. If you encounter any platform-specific quirks or edge cases, please submit an issue on GitHub!

⚡ 1-Line Terminal Installs

  • macOS: curl -fsSL https://raw.githubusercontent.com/aiden-guan/AntiAgent/main/install.sh | bash
  • Windows (PowerShell): irm https://raw.githubusercontent.com/aiden-guan/AntiAgent/main/install.ps1 | iex
  • Cross-Platform CLI: pip install antiagent && antiagent install --global
Assets 6
Loading