This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Summary
AI summaryAdds SSH, SFTP, ProcExec, and ProcKill tools along with several utility improvements.
Full changelog
Quick Start
- Download the binary for your OS below
- Run
agent-tool install(oragent-tool install claude) - Restart your IDE
- Done — all tools work immediately, no permission popups
Or just ask your AI agent:
"Download agent-tool from https://github.com/knewstimek/agent-tool/releases/latest and run
agent-tool install"
Any capable AI coding agent (Claude Code, Codex, etc.) can handle the full download → install → restart flow automatically.
Tip: Add this to your project's CLAUDE.md or AGENTS.md so your agent prefers agent-tool over built-in tools:
Strict mode (for projects with non-UTF-8 files or mixed indentation):
ALWAYS use agent-tool MCP tools (mcp__agent-tool__*) instead of built-in file tools.
Do NOT use built-in Read, Edit, Write, Grep, or Glob — use mcp__agent-tool__read,
mcp__agent-tool__edit, mcp__agent-tool__write, mcp__agent-tool__grep, mcp__agent-tool__glob instead.
Soft mode (general projects):
Prefer agent-tool MCP tools (mcp__agent-tool__*) over built-in file tools when available.
What's New
New Tools
-
SSH — Execute commands on remote servers via SSH
- Password & key-based auth, SSH agent support
- Session pooling (30min idle timeout, max 20 sessions, LRU eviction)
- Host key verification (strict / tofu / none)
- ProxyJump support (IPv4→IPv6 bastion), IPv6 addresses
- Credential masking in error messages
-
SFTP — Transfer files and manage remote filesystems over SSH
- 8 sync operations: upload, download, ls, stat, mkdir, rm, chmod, rename
- Async transfers: upload_async, download_async + status polling + cancel
- Reuses SSH session pool (no extra connections)
- Security: path validation, dangerous path protection, 2 GB transfer limit
- Setuid/setgid bit blocking, recursive delete depth limit (100), symlink skip
- Automatic partial file cleanup on failure
-
ProcExec — Execute commands as new processes
- Foreground, background, or suspended start
- Windows: CREATE_SUSPENDED, Linux: SIGSTOP
- Timeout, environment variables, working directory
-
ProcKill — Kill, suspend, or resume processes by PID or port
- Tree kill, signal selection (kill/term/hup/int/stop/cont)
- Linux zombie process handling, dry_run support
Improvements
- Backup:
dry_runmode — preview backup with directory stats, pattern match counts, and largest files - Glob / ListDir:
relative_pathsoption — returns relative paths to save tokens - Config:
workspacesetting — set default root for glob when no explicit path given - Install: Gemini CLI support added
- FileInfo:
DecodeConsoleOutputnow usesGetACP()for dynamic codepage detection (Windows)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About knewstimek/agent-tool
Encoding-aware, indentation-smart file tools for AI coding agents. 20+ tools including read/edit with automatic encoding detection, smart indentation conversion, SSH, SFTP, process management, and system utilities. Preserves file encoding (UTF-8, EUC-KR, Shift_JIS, etc.) and respects .editorconfig settings.
Related context
Beta — feedback welcome: [email protected]