v0.19.6

Summary

This patch release closes the OSS 0.19.x line with Pro report visibility and robustness fixes for real Windows and local-server usage. It is most relevant for users running Pro alongside OSS, users with paths containing spaces or renames, and anyone exposing the local serve API during testing.

Highlights

• Added agent-guardrails pro report and agent-guardrails pro-report as display-only bridges to the optional Pro go-live report.
• Added top-level goLiveReport in check --json when an installed Pro package enriches the review.
• Hardened changed-file detection with NUL-delimited git parsing for deleted files, paths with spaces, and renames.
• Added bounded JSON request parsing in agent-guardrails serve.
• Added a trusted-network warning for non-loopback serve hosts.
• Consolidated serve error handling into shared ASCII-safe helpers.

Fixes

• Prevents quoted-path corruption in changed-file detection.
• Prevents oversized serve request bodies from buffering without a limit.
• Avoids duplicated local-server endpoint error paths and mojibake-prone error output.

Upgrade Notes

Update normally:

npm update -g agent-guardrails

OSS remains fully functional without Pro. Pro report logic still lives in @agent-guardrails/pro; OSS only renders the optional report when Pro is installed and licensed.