fence
Guardrails for AI coding agents — block catastrophic tool calls before they run. Semantic, agent-neutral, near-zero false positives.
File Explorer
- bug.yml
- config.yml
- detector-gap.yml
- false-positive.yml
- ci.yml
- linear-sync.yml
- npm.yml
- pii.yml
- release.yml
- main.go
- ask.sh
- deny.sh
- inject.sh
- lib.sh
- safe.sh
- secret-read.sh
- ask.gif
- ask.tape
- deny.gif
- deny.tape
- inject.gif
- inject.tape
- safe.gif
- safe.tape
- secret-read.gif
- secret-read.tape
- architecture.md
- cli.md
- registry.md
- rules.md
- threat-model.md
- custom-rules.yaml
- claudecode.go
- claudecode_test.go
- codex.go
- codex_test.go
- opencode.go
- opencode_test.go
- manifest.go
- manifest_test.go
- shell.go
- shell_test.go
- add.go
- check.go
- codex_test.go
- color.go
- hook.go
- hook_test.go
- init.go
- init_test.go
- opencode.go
- opencode_plugin.js
- opencode_test.go
- plugins.go
- plugins_test.go
- registry.go
- registry_test.go
- remove.go
- root.go
- root_test.go
- search.go
- statusline.go
- statusline_test.go
- uninstall.go
- uninstall_test.go
- update.go
- version.go
- recommended.yaml
- engine.go
- engine_test.go
- override_test.go
- policy.go
- provenance_test.go
- resolve.go
- resolve_test.go
- rule.go
- rulepack.go
- rulepack_test.go
- registry.go
- registry_test.go
- seed_test.go
- lockfile.go
- store.go
- store_test.go
- fence.js
- build.mjs
- README.md
- k8s-safety.yaml
- prod-db-guard.yaml
- terraform-safety.yaml
- index.yaml
- .gitignore
- .goreleaser.yaml
- CLAUDE.md
- CONTRIBUTING.md
- go.mod
- go.sum
- LICENSE
- Makefile
- README.md
- SECURITY.md
# Use via CDN
jsDelivrjsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.
Command Glossary
Commands referenced in this DOCs, explained below.
brew install
View Details ▼
brew install
Install a Homebrew formula or cask.
brew install {{formula|cask}}
Install a formula/cask:
brew install {{[-s|--build-from-source]}} {{formula}}
Build and install a formula from source (dependencies will still be installed from bottles):
brew install {{[-n|--dry-run]}} {{formula|cask}}
Download the manifest, print what would be installed but don't actually install anything:
claude
View Details ▼
claude
An agent-based coding tool that understands your code base and helps you code faster through natural language commands.
claude prompt
Execute with prompt:
claude update
Update `claude`:
claude mcp list
Get the list of specified MCP servers:
crontab
View Details ▼
crontab
Schedule cron jobs to run on a time interval for the current user.
crontab -e
[e]dit the crontab file for the current user:
sudo crontab -e -u {{user}}
[e]dit the crontab file for a specific [u]ser:
crontab {{path/to/file}}
Replace the current crontab with the contents of the given file:
git push
View Details ▼
git push
Push commits to a remote repository.
git push
Send local changes in the current branch to its default remote counterpart:
git push {{remote_name}} {{local_branch}}
Send changes from a specific local branch to its remote counterpart:
git push {{[-u|--set-upstream]}} {{remote_name}} {{local_branch}}
Send changes from a specific local branch to its remote counterpart, and set the remote one as the default push/pull target of the local one:
git reset
View Details ▼
git reset
Undo commits or unstage changes by resetting the current Git HEAD to the specified state.
If a path is passed, it works as "unstage"; if a commit hash or branch is passed, it works as "uncommit".
git reset
Unstage everything:
git reset {{path/to/file1 path/to/file2 ...}}
Unstage specific file(s):
git reset {{[-p|--patch]}} {{path/to/file}}
Interactively unstage portions of a file:
npm install
View Details ▼
npm install
Install Node packages.
npm {{[i|install]}}
Install dependencies listed in `package.json`:
npm {{[i|install]}} {{package_name}}@{{version}}
Download a specific version of a package and add it to the list of dependencies in `package.json`:
npm {{[i|install]}} {{package_name}} {{[-D|--save-dev]}}
Download the latest version of a package and add it to the list of dev dependencies in `package.json`:
npm
View Details ▼
npm
JavaScript and Node.js package manager.
Manage Node.js projects and their module dependencies.
Some subcommands such as `install`, `run`, etc. have their own usage documentation.
npm init {{[-y|--yes]}}
Create a `package.json` file with default values (omit `--yes` to do it interactively):
npm {{[i|install]}}
Download all the packages listed as dependencies in `package.json`:
npm {{[i|install]}} {{package_name}}@{{version}}
Download a specific version of a package and add it to the list of dependencies in `package.json`:
pip install
View Details ▼
pip install
Install Python packages.
pip install {{package1 package2 ...}}
Install one or more packages:
pip install {{package1 package2 ...}} {{[-U|--upgrade]}}
Upgrade all specified packages to the latest version, installing any that are not already present:
pip install {{package}}=={{version}}
Install a specific version of a package:
systemctl enable
View Details ▼
systemctl enable
Enable systemd services.
See also: `systemctl revert`.
systemctl enable {{unit}}
Enable a service to run on boot:
systemctl enable {{unit}} --now
Enable a service to run on boot and start it now:
systemctl enable {{unit}} --user
Enable a user unit to run on login:
