Skip to content

v0.4.0

Choose a tag to compare

View all tags
@kenithphilip kenithphilip released this 21 Apr 19:25
· 19 commits to main since this release
v0.4.0
12580f7

v0.4.0 - Sondera-inspired primitives + coding-agent hooks

Three new defense primitives wired into the proxy, plus SDK adapters for coding agents (Claude Code, Cursor, Copilot, Gemini CLI).

New primitives (require tessera-mesh>=0.4.0)

Information Flow Control (sensitivity labels) - Bell-LaPadula lattice on an axis orthogonal to trust. `HighlyConfidential` content (SSN, AWS keys, private keys) blocks all outbound tools. `Confidential` + injection signal blocks outbound. Two new endpoints, fully orthogonal to taint tracking. Default off.

Destructive operation guard - Explicit pattern deny-list for irreversible ops: `rm -rf /`, `DROP DATABASE`, `terraform destroy`, `git push --force main`, `kubectl delete --all`, lock-file deletion. Configurable BLOCK / WARN severity. Default ON.

Supply chain scanner - Detects pip / npm / cargo / yarn / gem install patterns indicating attacks: command injection in flags, `curl ... | bash`, dependency confusion, typosquatting, credentials in manifests, lock-file regen. MITRE ATT&CK mapped (T1195.x, T1552.001). Default ON.

Coding-agent SDK (NEW market)

`agentmesh.sdk.claude_code` - Claude Code stdin/stdout JSON hooks (PreToolUse, PostToolUse, UserPromptSubmit, SessionStart). Drop into `~/.claude/settings.json`.

`agentmesh.sdk.coding_agent` - Generic adapter for Cursor, Copilot, Gemini CLI with per-agent field-name aliasing. CLI: `python -m agentmesh.sdk.coding_agent --agent cursor --hook pre-tool`.

Tests

  • AgentMesh: 167 passing (was 109), +58 across the new features
  • Tessera: 96 new tests for sensitivity (31), destructive_guard (39), supply_chain (26)

Install

```bash
pip install agentmesh-mesh tessera-mesh
```

Reference

Sondera coding-agent-hooks: github.com/sondera-ai/sondera-coding-agent-hooks

Assets 2
Loading