Skip to content

Releases: greenhost87/agent-command-guard

Release list

v1.1.0

v1.1.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Aug 14:20
v1.1.0
f12bba5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.1.0

Policy configuration is now externalized and overridable without forking the binary.

Policy config

  • Policy tables moved from main.go into embedded config/policy.json, loaded at init via a hand-rolled JSON parser in policy.go (~6 µs/process, no measurable e2e regression).
  • ACG_POLICY_CONFIG is an overlay (union + disable via - prefix / clear via []), not a full replacement.
  • Default config/policy.json is self-protected from agent edits outside this repo (protected_paths + cwd gate).

Docs & tooling

  • README policy section rewritten: hard allow/deny vs macOS osascript install confirmation; Go 1.27 requirement.
  • policy_bench_test.go micro-benchmarks on the production loadMergedPolicyConfig path; notes in docs/config-extraction-experiments.md.

Install / upgrade

go run ./cmd/install

Or download agent-command-guard-1.1.0.tgz and run bun package/dist/install-cli.js.

Full changelog: v1.0.0...v1.1.0

Assets 4
Loading

v1.0.0 — Agent Command Guard

v1.0.0 — Agent Command Guard

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Aug 09:36
v1.0.0
6f5d19c

Agent Command Guard v1.0.0

First stable release of Agent Command Guard — an opinionated command-policy guard for coding agents (Codex, Cursor, Pi). It inspects shell commands before execution via harness hooks and blocks risky patterns: inline interpreters (node -e, python3 -c, bash -c), command substitution, heredocs, pipe-to-interpreter, deletion outside the workspace, remote transfer, destructive git commands, and more.

Heuristic guard, not a sandbox. Text inspection only — not a security boundary.

Install

Bootstrap without checkout:

curl -fsSL https://raw.githubusercontent.com/greenhost87/agent-command-guard/main/install.sh | bash

Or from source:

./install.sh                 # all harnesses (Codex, Cursor, Pi)

Assets

  • agent-command-guard-1.0.0-darwin-arm64 — prebuilt macOS arm64 binary; the bootstrap installer downloads it automatically.
  • agent-command-guard-1.0.0.tgz — package tarball with sources (bootstrap-compatible layout).

Notes

  • Requires Go 1.26+ to build; Bun 1.4+ only for the Pi adapter.
  • Install-confirmation prompts (osascript) are macOS-only; other platforms fail closed.
  • Full policy details in README.md and main.go / cursor.go.

Full Changelog: https://github.com/greenhost87/agent-command-guard/commits/v1.0.0

Loading