mirror of
https://github.com/coder/coder.git
synced 2026-09-23 22:20:22 +08:00
Renames the `coder boundary` CLI subcommand to `coder agent-firewall` as part of the Boundaries → Agent Firewall rebrand. `coder boundary` is retained as a hidden, deprecated alias that prints a deprecation notice to stderr before running. Both commands use separate builder functions backed by the same boundary base command and license verification logic. Closes https://linear.app/codercom/issue/AIGOV-236 <details><summary>Implementation notes</summary> **Approach:** Two separate `*serpent.Command` objects (not `Aliases`) so the deprecated `boundary` path can print a stderr warning while `agent-firewall` stays clean. **Changes:** - `enterprise/cli/boundary.go`: Split old `boundary()` into `buildAgentFirewallCmd()` and `buildBoundaryAliasCmd()`. Error messages in `verifyLicense` now reference "agent-firewall". - `enterprise/cli/root.go`: Register both commands. - `cli/root.go`: Update YAML-only option validation bypass for the new command name. - Tests: Rename to `TestAgentFirewallSubcommand`, add `TestBoundaryAlias`, update license verification tests to use `agent-firewall`. - Golden files and CLI reference docs regenerated. - `docs/ai-coder/agent-firewall/version.md` and `docs/manifest.json` updated. </details> > Generated with [Coder Agents](https://coder.com/agents) by @SasSwart
71 lines
2.4 KiB
Markdown
71 lines
2.4 KiB
Markdown
# Version Requirements
|
|
|
|
> [!NOTE]
|
|
> Agent Firewall requires the [AI Governance Add-On](../ai-governance.md).
|
|
> As of Coder v2.32, deployments without the add-on will not be able to
|
|
> access Agent Firewall.
|
|
|
|
## Recommended Versions
|
|
|
|
It's recommended to use **Coder v2.30.0 or newer** and **Claude Code module
|
|
v4.7.0 or newer**.
|
|
|
|
### Coder v2.30.0+
|
|
|
|
Since Coder v2.30.0, Agent Firewall is embedded inside the Coder binary, and
|
|
you don't need to install it separately. The `coder agent-firewall` subcommand is
|
|
available directly from the Coder CLI.
|
|
|
|
### Claude Code Module v4.7.0+
|
|
|
|
Since Claude Code module v4.7.0, the embedded `coder agent-firewall` subcommand is
|
|
used by default. This means you don't need to set `boundary_version`; the
|
|
boundary version is tied to your Coder version.
|
|
|
|
## Compatibility with Older Versions
|
|
|
|
### Using Coder Before v2.30.0 with Claude Code Module v4.7.0+
|
|
|
|
If you're using Coder before v2.30.0 with Claude Code module v4.7.0 or newer,
|
|
the `coder agent-firewall` subcommand isn't available in your Coder installation. In
|
|
this case, you need to:
|
|
|
|
1. Set `use_boundary_directly = true` in your Terraform module configuration
|
|
2. Explicitly set `boundary_version` to specify which Agent Firewall version
|
|
to install
|
|
|
|
Example configuration:
|
|
|
|
```tf
|
|
module "claude-code" {
|
|
source = "dev.registry.coder.com/coder/claude-code/coder"
|
|
version = "4.7.0"
|
|
enable_boundary = true
|
|
use_boundary_directly = true
|
|
boundary_version = "0.6.0"
|
|
}
|
|
```
|
|
|
|
### Using Claude Code Module Before v4.7.0
|
|
|
|
If you're using Claude Code module before v4.7.0, the module expects to use
|
|
Agent Firewall directly. You need to explicitly set `boundary_version` in your
|
|
Terraform configuration:
|
|
|
|
```tf
|
|
module "claude-code" {
|
|
source = "dev.registry.coder.com/coder/claude-code/coder"
|
|
version = "4.6.0"
|
|
enable_boundary = true
|
|
boundary_version = "0.6.0"
|
|
}
|
|
```
|
|
|
|
## Summary
|
|
|
|
| Coder Version | Claude Code Module Version | Configuration Required |
|
|
|---------------|----------------------------|-------------------------------------------------------|
|
|
| v2.30.0+ | v4.7.0+ | No additional configuration needed |
|
|
| < v2.30.0 | v4.7.0+ | `use_boundary_directly = true` and `boundary_version` |
|
|
| Any | < v4.7.0 | `boundary_version` |
|