v2.0.3: Native Windows Runtime & Cross-Platform GitOps

What's New in v2.0.3

Sprawl CLI v2.0.3 brings 100% native runtime compatibility to Windows 10/11, eliminating the need for WSL, Docker, or external virtualization, while maintaining full parity on macOS and Linux.

🚀 Key Highlights

• Native Windows 10/11 Runtime: Runs out of the box in Windows Terminal, PowerShell (5.1+ and 7+), and CMD.
• One-Liner Production Installers:
  • Windows (PowerShell): irm https://sprawl.software/install.ps1 | iex
  • macOS & Linux (Bash): curl -sL https://sprawl.software/install.sh | bash
• Zero-Trust Directory Containment: Strict MCP filesystem boundaries supporting drive letters (C:\, D:\) and UNC paths with sub-2ms verification.
• Symlink Fallback Engine: Automatic degradation to verified file copy on non-admin / non-developer mode corporate machines.
• Interactive TUI & Numbered Fallback: Native msvcrt keyboard input with automatic fallback to numbered prompts for non-VT terminal environments.
• Universal IDE Compilation: Compile central GitOps rules into .cursorrules, VS Code, Windsurf, and Claude Code natively across all operating systems.
• Zero Cloud Dependencies: 100% local execution using standard libraries. Zero outbound telemetry or credential leaks.

📦 Installation

Windows (PowerShell):

irm https://sprawl.software/install.ps1 | iex

macOS & Linux:

curl -sL https://sprawl.software/install.sh | bash

Cross-Platform (pipx):

pipx install git+https://github.com/sprawl-software/sprawl-cli.git

📚 Documentation

• Windows Quickstart Guide
• Sprawl Documentation
• Website

---

License: BSL 1.1 - Free forever for up to 5 developers.

v2.0.2: Path Normalization & Console UTF-8

Sprawl CLI v2.0.2: Path Normalization & Console UTF-8

This release focuses on platform standardization and cross-platform terminal robustness across Linux, macOS, and preliminary Windows support.

---

🔧 Fixes & Platform Normalization

• Windows Console UTF-8 Configuration: Configured explicit UTF-8 stdout/stderr stream wrapping on Windows terminals to prevent charmap encoding errors when rendering Sovereign Violet banners and Unicode status ticks.
• Short Path (8.3) Handling: Added path canonicalization logic to resolve Windows 8.3 short paths (e.g., RUNNER~1) during directory comparisons and clean-room testing.
• Workspace Path Normalization: Standardized relative and absolute path resolution across POSIX and Windows filesystem boundaries, ensuring uniform manifest generation.
• Cross-Platform CI Matrix: Expanded GitHub Actions automated test suite to run against Ubuntu, macOS, and Windows runners in parallel.

---

📦 Installation

pipx install git+https://github.com/sprawl-software/sprawl-cli.git@v2.0.2

v2.0.1: Security & Supply Chain Hardening

Sprawl CLI v2.0.1: Security & Supply Chain Hardening

This release incorporates comprehensive security enhancements, addressing 100% of findings from the internal security and engineering audit.

---

🛡️ Security Fixes & Hardening

• Path Containment Escape Patch: Patched a critical boundary escape where sibling directories sharing a prefix (e.g., /mount vs /mount-secrets) could bypass path containment in workspace_fs.py. Both mount root and workspace root guards now enforce strict boundaries using os.sep-appended comparisons.
• Atomic File Renames: Replaced direct file write operations with atomic temporary file writes and renames to prevent state corruption during sudden process interruptions.
• Symlink Target Containment Validation: Added pre-flight realpath validation to ensure symlinks generated during sprawl bind cannot escape the designated workspace boundary.
• Subprocess Execution Timeouts: Enforced strict timeout boundaries across all background Git operations and CLI diagnostics to prevent indefinite terminal hangs on restricted enterprise networks.
• Automated CI Security Scans: Integrated automated Bandit AST security scanning (bandit -c pyproject.toml) into the GitHub Actions CI pipeline, enforcing zero unresolved High/Medium security alerts on main.

---

📦 Installation

pipx install git+https://github.com/sprawl-software/sprawl-cli.git@v2.0.1

v2.0.0: Clean Room Architecture Foundation

Sprawl CLI v2.0.0: Clean Room Architecture Foundation

Note on Versioning: Sprawl CLI v2.0.0 marks the official Clean Room rewrite and public foundation of the Sprawl developer ecosystem, replacing earlier private prototype monoliths (MS-1.0 CLI Core and MS-1.5 Distribution Gate) with a strict, standard-library-only architecture.

---

🚀 Key Capabilities

1. Zero External Dependencies (Stdlib-First Architecture)

• Built entirely on the Python 3.10+ standard library.
• Zero third-party runtime package dependencies, eliminating supply-chain vulnerabilities, C-extension compilation issues, and installation friction.

2. Universal Rules Harvesting (sprawl graft)

• Automatically scans local repositories for legacy coding rules (.cursorrules, .clinerules, .windsurfrules, .github/copilot-instructions.md, CLAUDE.md, AGENT.md, DESIGN.md) and .github/prompts/ directories.
• Converts existing rules into versioned, local-only rules without upstream DNA drift or merge conflicts.

3. Dynamic MCP Directory Mounts (sprawl-workspace-fs)

• Provides model-context isolation using the @alias/ namespace.
• Prevents rogue agents from traversing out-of-bounds directories on developer machines via stdio-based MCP path validation.

4. Out-of-Band State & Containment Plane (~/.sprawl/)

• All operational state, sync registries, and machine keys remain completely isolated from AI agent traversal in ~/.sprawl/, ensuring the agent cannot tamper with system-level security boundaries.

5. Interactive Console TUI

• Built-in terminal interface for selective IDE binding across 14+ supported AI editors and agents (Cursor, VS Code Copilot, Claude Code, Cline, Windsurf, Aider, OpenHands).

---

📦 Installation

pipx install git+https://github.com/sprawl-software/sprawl-cli.git@v2.0.0