@shomra/agent 0.2.7 → 0.2.9

package/README.md

@@ -1,8 +1,10 @@
 # @shomra/agent
 
-The Shomra AI-security CLI. Discovers the AI tooling on a machine, vets AI
+**The firewall for AI agents**, as a local-first CLI. It sits inside your coding
+agent and CI and blocks dangerous tool-calls, shell commands and data
+exfiltration *before they run* — on your machine, even offline. It also vets AI
 artifacts (MCP configs, Skills, slash commands, hooks, rules files) before they
-install, and enforces a runtime firewall around coding agents and LLM traffic.
+install. Start with a free on-machine scan — no signup.
 
 Zero dependencies — Node ≥ 18 built-ins only.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shomra/agent",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "Shomra — a local-first security scanner and runtime firewall for AI agents, MCP servers, prompts, and models. Gates AI artifacts in your editor and CI.",
   "type": "module",
   "bin": {

package/shomra.mjs

@@ -3052,6 +3052,13 @@ async function cmdToolGuard(flags) {
     process.exit(0); // fail-open (Tier 0 already screened the dangerous patterns)
   }
 
+  if (res && res.hold) {
+    // Human-in-the-loop: the call was BLOCKed but diverted to approval. Don't
+    // hard-deny — ask, so the developer can wait for a reviewer to approve in
+    // Slack/Teams and then retry (an approval opens a short grant window that
+    // lets the identical call through).
+    emitGuardAsk(agent, res.reason || 'Held for approval by Shomra — waiting on a reviewer. Retry once it’s approved.');
+  }
   if (res && res.decision === 'BLOCK') {
     emitGuardDeny(agent, res.reason || 'Blocked by Shomra security policy.');
   }
@@ -3919,7 +3926,7 @@ async function cmdModels(flags, positional) {
 
 function cmdHelp() {
   console.log(`
-${bold(cyan('Shomra'))} ${dim('— AI security agent v' + VERSION)}
+${bold(cyan('Shomra'))} ${dim('— the firewall for AI agents · v' + VERSION)}
 
 ${bold('USAGE')}
   shomra <command> [options]