agent-fuse — a safety fuse for AI coding agents

AI coding agents are fast, tireless, and occasionally decide to "fix" things by deleting them.Claude Code, Cursor, and Codex don't just write text. They run real commands in your terminal, with your permissions. When an agent hits an error and decides to "clean things up," it can run rm -rf, drop a table, or tear down infrastructure — with no hesitation, because it thinks it's helping. Telling it "please be careful" in a prompt is not a safeguard. A prompt is a request, and agents forget mid-task.agent-fuse is a physical fuse in that circuit. It runs as a PreToolUse hook. Before your agent executes any shell command, the fuse reads it and decides:BLOCK — irreversible damage is denied outright (rm -rf /, DROP TABLE, gcloud ... delete, terraform destroy).ASK — risky-but-sometimes-intended commands pause for your OK (git push --force, DELETE without WHERE, kubectl delete, curl ... | bash).ALLOW — normal work passes straight through (git status, npm install).It decides on the command itself, not on the agent's mood.What you get: agent_fuse.py — the fuse. One file, zero dependencies (Python 3.8+). - rules.json — a curated ruleset of ~20 destructive patterns, drawn from real incidents. - install.sh — a safe installer that backs up your settings, merges instead of overwriting, and is idempotent. - README with setup and how to add your own rules. Why pay when you could write it yourself? The hard part isn't the hook — it's the curated danger dictionary and the safe installer, already done. You get protected in 30 seconds instead of an afternoon, and the ruleset keeps getting updated as new footguns appear. Free ruleset updates included.Privacy: no network, no telemetry. The command text never leaves your machine. And you don't have to take my word for it — the code is one readable file, so you can verify that yourself.Honest limitations: it matches command text with curated patterns. It stops the overwhelmingly common accidents, but deliberately obfuscated commands can slip past. It is a seatbelt, not a bulletproof vest — and not a replacement for backups. Version 0.1 targets Claude Code's Bash tool; Cursor and Codex support are on the roadmap.Requirements: Claude Code (with hooks support) and Python 3.8+ (preinstalled on macOS and Linux).

Found on Devadex — the discovery index for independent software the big search engines bury. More from gumroad.

Report this listing