@agentwares/agentguard 0.1.4 → 0.1.6

package/llms.txt

@@ -2,6 +2,10 @@
 
 > MCP policy proxy for AI agents: hard spend limits, destructive-action gating with approvals, kill switch, scoped agent keys, dry-run writes with mutation diffs, semantic loop breaker, blast-radius caps, hash-chained audit log. CLI `npx @agentwares/agentguard`; SDK `@agentwares/agentguard-sdk`. No LLM calls, no phone-home, no account.
 
+Set up: `npx -y @agentwares/agentguard init` in the project directory writes agentguard.yaml (dry-run) and routes the project's MCP servers through the proxy. The same command ships as a Claude Code plugin (`/plugin marketplace add agentwares/agentguard`, then `/plugin install agentguard@agentwares`) and a Gemini CLI extension (`gemini extensions install https://github.com/agentwares/agentguard`).
+
+Started with no agentguard.yaml (an editor install button, a registry install, the repo's Dockerfile), the proxy fronts no servers and serves three read-only tools of its own: `agentguard_get_status` (what it guards, caps used and remaining, kill switch, pending approvals), `agentguard_get_report` (what a run did, or would have done in dry-run) and `agentguard_verify_audit_log` (the hash chain). With upstreams configured, the agent sees only the upstreams' tools.
+
 ## Links
 
 - [README (install in 60 seconds)](https://github.com/agentwares/agentguard/tree/main/apps/agentguard-cli#readme)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentwares/agentguard",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "MCP policy proxy for AI agents: hard spend limits, destructive-action gating with approvals, a kill switch, scoped credentials, dry-run writes with mutation diffs, loop breaker, blast-radius caps and a hash-chained audit log. No LLM calls, no phone-home, no account.",
   "license": "MIT",
   "type": "module",
@@ -18,6 +18,7 @@
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
     "server.json",
     "llms.txt"
   ],
@@ -43,7 +44,11 @@
     "audit-log",
     "claude-code",
     "cursor",
-    "guardrails"
+    "guardrails",
+    "mcp-server",
+    "mcp-gateway",
+    "mcp-security",
+    "human-in-the-loop"
   ],
   "engines": {
     "node": ">=20"
@@ -57,7 +62,7 @@
     "conformance": "node scripts/conformance.mjs"
   },
   "dependencies": {
-    "@agentwares/agentguard-core": "workspace:^",
+    "@agentwares/agentguard-core": "^0.1.3",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "yaml": "^2.9.0",
     "zod": "^4.5.4"

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.agentwares/agentguard",
   "description": "MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.",
-  "version": "0.1.3",
+  "version": "0.1.6",
   "repository": {
     "url": "https://github.com/agentwares/agentguard",
     "source": "github",
@@ -15,7 +15,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@agentwares/agentguard",
-      "version": "0.1.3",
+      "version": "0.1.6",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"
@@ -23,7 +23,7 @@
       "environmentVariables": [
         {
           "name": "AGENTGUARD_CONFIG",
-          "description": "Path to agentguard.yaml (default ./agentguard.yaml)",
+          "description": "Path to agentguard.yaml (default ./agentguard.yaml). If unset and that file does not exist, agentguard serves only its own read-only tools: agentguard_get_status, agentguard_get_report, agentguard_verify_audit_log",
           "isRequired": false,
           "format": "filepath"
         },