cli-guard is a security-boundary framework for urfave/cli v3 applications, designed to sit between AI agents (or any semi-trusted automation) and the host system, featuring:

• argv validation rejecting shell metacharacters before they reach execve
• append-only JSONL audit log with lumberjack rotation
• read / write / delete scope tokens, validated per verb
• best-effort RepoRoot stamping that records each audit row's git toplevel (empty outside any repo)
• clean+synced gate refusing repo-shaped verbs on a dirty tree
• per-repo command allowlist loaded from per-repo YAML config files (e.g. .<app>/<app>.yaml)
• thin pass-through wrapper for embedding existing CLIs as audited subcommands
• per-invocation CONNECT proxy with consumer-supplied egress allowlist
• public exit-code taxonomy for orchestrators

The repository also ships specgen, an installable no-code driver that turns KDL policy plus committed locks into standalone guarded CLIs without hand-written Go. It discovers .specgen/ and can generate, lock, check skew, build, and run. An explicit --skills-out path also renders a concise native agent skill plus a lazy command index from the merged command tree.

Homebrew users on macOS or Linux can install from the coilyco tap:

brew tap coilyco-flight-deck/tap https://forgejo.coilysiren.me/coilyco-flight-deck/homebrew-tap.git
brew install coilyco-flight-deck/tap/specgen

Scoop users on Windows can install from the coilyco bucket:

scoop bucket add coilyco https://forgejo.coilysiren.me/coilyco-flight-deck/scoop-bucket.git
scoop install coilyco/specgen

Tagged Forgejo releases also publish raw specgen binaries for Linux, macOS, and Windows on amd64 and arm64, plus SHA256SUMS. Go users can install directly:

GOPRIVATE=forgejo.coilysiren.me go install forgejo.coilysiren.me/coilyco-flight-deck/cli-guard/cmd/specgen@vX.Y.Z

specgen --version reports both the installed driver version and the cli-guard module ref that lock will freeze by default. The driver invokes the Go toolchain when it resolves locks and builds generated CLIs.

See the specgen guide, docs/FEATURES.md for a feature inventory, and examples/ for runnable demos one per primitive. make docs-serve renders the documentation and CLI reference locally. Other development verbs also run through the Makefile.

If you found a bug or have a feature request, create a new issue. Participation in this community is governed by the Code of Conduct. Security disclosures go through SECURITY.md.

Sibling repo: cli-mcp.

See LICENSE.

• AGENTS.md - agent-facing operating rules.
• docs/FEATURES.md - inventory of what ships today.

Cross-reference convention from the shared repo-pointer rule in the agentic-os docs.