VibeGuard

A Rust CLI for coding-agent rules, native hooks, and installation diagnostics.

Website · 中文 · Runtime contract · Rule reference · Contributing

V2 embeds 75 scoped review topics for explicit lookup. Installation does not inject rules or lookup instructions into the host's prompt. The library covers scope, facts, errors, security, workflow, Rust, Python, Go, and TypeScript.

Native Bash hooks reject a small set of destructive command spellings and record the latest observed outcome. An optional Git pre-push hook checks actual commit ancestry. The host owns permissions, sandboxing, tool execution, and the agent loop.

DeepSeek Harness users can load the DSH Bash adapter. It calls this Rust runtime, routes policy blocks through DSH's native approval, and fails closed when the pre-call runtime fails.

Install from a release archive

Download the archive for your OS and CPU from Releases, extract it, and open a terminal in the extracted directory. macOS, Linux and WSL are supported; choose a Linux archive for WSL. No Rust toolchain or source checkout is required for this path. Run:

./vibeguard-runtime install codex --dry-run
./vibeguard-runtime install codex
# Or select Claude Code:
./vibeguard-runtime install claude
# Or select Grok:
./vibeguard-runtime install grok

The archive contains the executable, this README and LICENSE. install --dry-run validates current inputs and shows planned file changes, hook commands and persistent setup locks without writing files. It preserves unrelated handlers and user guidance; a disabled host remains disabled. Preview does not prove write access or active protection. Installation copies the executable to ~/.vibeguard/bin/vibeguard-runtime. Restart the selected host and review its native hook trust settings. Check or remove that integration with:

~/.vibeguard/bin/vibeguard-runtime status codex
~/.vibeguard/bin/vibeguard-runtime uninstall codex

Use claude or grok instead of codex for those hosts. Uninstall retains the shared executable. Earlier release assets follow their own version's instructions.

Build and install from source

Source builds require Git and the Rust toolchain pinned in rust-toolchain.toml. Native installation supports macOS, Linux, and WSL. Native Windows installation is not implemented; the portable CLI and JSON protocol are tested in Windows CI.

git clone https://github.com/majiayu000/vibeguard.git
cd vibeguard
bash setup.sh --help
bash setup.sh install codex --dry-run
bash setup.sh install codex
# Or select Claude Code:
bash setup.sh install claude
# Or select Grok:
bash setup.sh install grok

setup.sh builds the checked-out source and forwards arguments. Without arguments it prints help; it does not install automatically. Install copies the binary to ~/.vibeguard/bin/vibeguard-runtime and registers the selected integration. Installation removes an existing owned vibeguard-core block while preserving surrounding user instructions; it does not create an instruction file. Restart the host and review its native hook trust settings.