Agentctl, a local control plane for coding agents

AI Agents & Assistants

Track releases GitHub

Go Latest v0.1.2 · 10d ago Security brief →

Features

Gates a small set of risky actions (install, run code, access secrets, write files, call external APIs)
Records a trace for every decision in JSONL format
Replays prior sessions against a different policy

Recent releases

View all 5 releases →

No immediate action

v0.1.2 Breaking risk 10d

COMMAND column replaces REASON

Open

No immediate action

v0.1.1 Mixed 11d

COMMAND column + verdict fix

Open

v0.1.0 Breaking risk 1mo

⚠ Upgrade required

Migrate any existing repository‑local `agentctl.policy.yaml` to the new global location at `~/.agentctl/policy.yaml`.
Adjust workflows that previously used the embedded HTTP server or web UI to use the new terminal UI (`agentctl ui`).
Update integrations that depended on generated SDK clients to use alternative mechanisms.

Breaking changes

Removed repo-local `agentctl.policy.yaml` configuration.
Removed the HTTP server and embedded web UI.
Removed generated SDK clients.

Notable features

`agentctl attach` / `agentctl detach` for configuring Claude Code and Codex integrations.
`agentctl doctor` to verify policy loading, trace store, and approval status.
`agentctl ui` terminal UI for recent traces and pending approvals.

Full changelog

Added

agentctl attach / agentctl detach — configure Claude Code and Codex
integrations and lazily bootstrap ~/.agentctl/.
agentctl doctor — verify policy loading, trace and approval stores, and
per-agent integration status.
agentctl ui — a terminal UI for recent traces and pending approvals.
Policy hardening — request workspace context, write_file
block_patterns, access_secret.max_ttl, and explicit deny-all semantics
for call_external_api.allowed_domains: [].

Changed

agentctl now uses a single global policy file at
~/.agentctl/policy.yaml, with traces and approvals stored alongside it.
Claude Code and Codex setup now lead with the attach workflow instead of
manual config editing.
The module and contributor baseline are now Go 1.26.2.

Removed

Repo-local agentctl.policy.yaml configuration.
The HTTP server, embedded web UI, generated SDK clients, and VS Code
extension.

Changelog

Features

cb94a6092dbefc89aa4828a783e18992bbf46ade feat: add Codex config.toml adapter to pkg/attach
4c96dd66a17bc27b9152ab0e03328724aa243855 feat: add Workspace context, write_file block_patterns, max_ttl enforcement
bf3e9eb19fe32aa428d4efb10573c1a8a2757556 feat: add pkg/attach — Claude Code settings.json adapter
6577eaa6dae43ae19d16be2df56afab6574a26bc feat: add pkg/config — Paths struct and policy loading
23fd87235c4be7e1eed592d5ca49241f2553c6b5 feat: add v1 control enforcement CLI and terminal UI

Other

09b406c66bfc2b1d9c682e6748b6e3167591e29a Merge pull request #10 from chocks/chore/release-v0.1.0-clean
1905b48415e7b64f81310082652d682c6060b419 Merge pull request #9 from chocks/feat/v1-control-enforcement
6c044c07fd6a83d071c13362585f75921a7f1751 build: bump module to go 1.26.2
6565d4207143d430ee9136539a179cb56caa825c chore(release): prepare v0.1.0
a10fb29da38bf2d7f7037301ffecf5bb522b445a refactor: wire config.Paths through all commands
596427bd9dea3ab47530d378aad6a94fb422af89 test: update integration and MCP tests for config.Paths

View release on GitHub

v0.0.2 New feature 1mo

Notable features

Release notes injected from matching `[ ]` section in CHANGELOG.md into GitHub Release header
Auto-generated commit changelog grouped into Features, Bug fixes, and Other sections

Full changelog

Changed

Release notes for each tagged release are now sourced from the matching
[<version>] section in CHANGELOG.md and injected into the GitHub Release
header.
The auto-generated commit changelog now groups commits into Features,
Bug fixes, and Other sections.

Changelog

Features

8d889a353883e8a5de7587b1192d2db5cbaff77d feat(release): inject release notes from CHANGELOG.md, group commit changelog

Other

5888b2ccadc2bde2bb36460f7b92220c0fd1634f Merge pull request #7 from chocks/feat/release-notes-from-changelog
b216223a1dcef4391a26a9bf385e078fc0c5c46b Merge pull request #8 from chocks/chore/release-v0.0.2
af61a662ad996cff9b589c9bb5653437e1cb47fd chore(release): prepare v0.0.2

View release on GitHub

v0.0.1 New feature 1mo

Notable features

Add Claude Code hook adapter

Full changelog

Changelog

ec31abb8fdfd9ff23963f64e6336d96d5d3a933a Add Claude Code hook adapter and fix three code-review issues
fdd6648e979bbbbc57c66402a6ed16573febe698 Expand policy tests, fix filepath stdlib usage, add style guide ref
ec2b8d56a907d93a5d670b3c3c8f9c51c59534e5 Merge pull request #1 from chocks/claude/agentctl-tool-integration-PhvVx
1607c070cacc47f355a08da86f4bae70b61b8f53 Merge pull request #2 from chocks/claude/agentctl-mcp-server
d8e76f5c953a5b87508d75fb585a41423b497f33 Merge pull request #3 from chocks/claude/agentctl-vscode-extension
787f24fab38f7afc52003d7ec4273279961a43e1 Merge pull request #4 from chocks/claude/agentctl-quality
2416104786e348a083e2a8cc51f91b9852a07e7b Merge pull request #5 from chocks/docs/readme-agent-install
dafaf5e2d17bfe7103a6091d1e916052ced63536 Merge pull request #6 from chocks/build/go-install-support
e4cf370f0bbda01ba148d6e91bd77998c428e33f build: fix module path and add release pipeline
0f196bf96355e56e2b84e1a96cc27b7598b02a5d feat(v0.3): approval wait endpoint, JS SDK waitForApproval, claude-code docs
16efacd9ac8e90ac8f2096da9bc777acb45188b6 feat(v0.4): VS Code extension — approvals panel, trace viewer, server lifecycle
43268cc3dfa0c2ee1717f743e4e32ebbc1fc0977 feat: add API auth and multi-user context
9f1a448c412784ccc488fc6114dc925f90d2db52 feat: add Node integration wrapper example
feb18a96e78d4739cfc232620faab3ea83a5a5ab feat: add approval workflow for escalations
08dad65cd2bec50bf2cbecc94d592fd3d557b7a2 feat: add high-level JavaScript client package
aca57524191dc650891f72b81e69fc9a1c5551fc feat: add high-level Python client package
35c77cbae39ab06717d7bcf35c87d4da2590f38d feat: add local agentctl HTTP server
ba42fc22ba4cb79085ee7f1dfe44808a909a2339 feat: add local trace and replay UI
da2276d709867bf6d07674f0abac517a09897d4a feat: add schema-first SDK contract and tests
4f161fe0c3ee850be4b5c3cbc25ac5b7adc6dde6 feat: generate JS and Python SDKs
9758d7cdafb33d9bd2f914dd50580e0c69f0c649 fix: resolve merge conflicts and fix module path in new files
a6351600a019b01ac1a12f6192327717052f00de fix: store traces in agentctl home
260f7158b9b79c194a02a4c760b8bd6d64c11f7b fix: use v2 config key for golangci-lint issues
041ff59009d2c531b1615b635d78540994252f75 refactor: quality pass — DRY helpers, scanner buffer, filter fix, filter tests
3f1107ffd31d7d574bb57218e9220ce3f6c66497 v0.3: add MCP server (agentctl mcp)