mirror of https://github.com/coder/coder.git synced 2026-06-05 05:58:20 +00:00

Files

T

Sas Swart 52722b800b chore: rename boundary command to agent-firewall (#25889 )

Renames the `coder boundary` CLI subcommand to `coder agent-firewall` as
part of the Boundaries → Agent Firewall rebrand.

`coder boundary` is retained as a hidden, deprecated alias that prints a
deprecation notice to stderr before running. Both commands use separate
builder functions backed by the same boundary base command and license
verification logic.

Closes https://linear.app/codercom/issue/AIGOV-236

<details><summary>Implementation notes</summary>

**Approach:** Two separate `*serpent.Command` objects (not `Aliases`) so
the deprecated `boundary` path can print a stderr warning while
`agent-firewall` stays clean.

**Changes:**
- `enterprise/cli/boundary.go`: Split old `boundary()` into
`buildAgentFirewallCmd()` and `buildBoundaryAliasCmd()`. Error messages
in `verifyLicense` now reference "agent-firewall".
- `enterprise/cli/root.go`: Register both commands.
- `cli/root.go`: Update YAML-only option validation bypass for the new
command name.
- Tests: Rename to `TestAgentFirewallSubcommand`, add
`TestBoundaryAlias`, update license verification tests to use
`agent-firewall`.
- Golden files and CLI reference docs regenerated.
- `docs/ai-coder/agent-firewall/version.md` and `docs/manifest.json`
updated.

</details>

> Generated with [Coder Agents](https://coder.com/agents) by @SasSwart

2026-06-04 11:14:36 +02:00

2.4 KiB

Raw Blame History

Version Requirements

Note

Agent Firewall requires the AI Governance Add-On. As of Coder v2.32, deployments without the add-on will not be able to access Agent Firewall.

Recommended Versions

It's recommended to use Coder v2.30.0 or newer and Claude Code module v4.7.0 or newer.

Coder v2.30.0+

Since Coder v2.30.0, Agent Firewall is embedded inside the Coder binary, and you don't need to install it separately. The coder agent-firewall subcommand is available directly from the Coder CLI.

Claude Code Module v4.7.0+

Since Claude Code module v4.7.0, the embedded coder agent-firewall subcommand is used by default. This means you don't need to set boundary_version; the boundary version is tied to your Coder version.

Compatibility with Older Versions

Using Coder Before v2.30.0 with Claude Code Module v4.7.0+

If you're using Coder before v2.30.0 with Claude Code module v4.7.0 or newer, the coder agent-firewall subcommand isn't available in your Coder installation. In this case, you need to:

Set use_boundary_directly = true in your Terraform module configuration
Explicitly set boundary_version to specify which Agent Firewall version to install

Example configuration:

module "claude-code" {
  source              = "dev.registry.coder.com/coder/claude-code/coder"
  version             = "4.7.0"
  enable_boundary     = true
  use_boundary_directly = true
  boundary_version    = "0.6.0"
}

Using Claude Code Module Before v4.7.0

If you're using Claude Code module before v4.7.0, the module expects to use Agent Firewall directly. You need to explicitly set boundary_version in your Terraform configuration:

module "claude-code" {
  source              = "dev.registry.coder.com/coder/claude-code/coder"
  version             = "4.6.0"
  enable_boundary     = true
  boundary_version    = "0.6.0"
}

Summary

Coder Version	Claude Code Module Version	Configuration Required
v2.30.0+	v4.7.0+	No additional configuration needed
< v2.30.0	v4.7.0+	`use_boundary_directly = true` and `boundary_version`
Any	< v4.7.0	`boundary_version`

2.4 KiB Raw Blame History