agentgov

The developer-laptop CLI for AgentGov.

Wraps Claude Code to bind sessions to work items and enforce governance from a signed policy snapshot. Runs alongside agentgov-gateway (the local proxy) — this CLI handles login, device registration, session wrapping, work-item binding, and diagnostics.

Part of the AgentGov project — see github.com/deepakahu/agentGov for the full monorepo.

Install

# Both distributions, always together: the CLI and the gateway ship separately
# and a version skew between them is not detectable from the CLI side.
pip install -U agentgov-cli agentgov-gateway

First-time setup

# Attach this machine to your AgentGov control tower
agentgov login --tower https://your-agentgov.vercel.app

# Register this device (generates an X25519 keypair, gets a gtw_ token)
agentgov register-device --name "$(hostname)"

# Drop Claude Code hooks + statusline + slash command into ~/.claude/
agentgov install

# Start the gateway (background)
agentgov-gateway &

Every day

# Run Claude Code through the governed gateway
agentgov wrap claude

# Bind the current session to a work item
# (or use the /workitem slash command inside Claude Code)
agentgov workitem PROJ-1234

Diagnose

agentgov status    # what's my current binding, tokens, quota
agentgov doctor    # is everything wired correctly

Commands

• agentgov login — attach this machine to a user in the control tower
• agentgov register-device — generate device keypair + register with tower
• agentgov install — drop client assets into ~/.claude/
• agentgov wrap <cmd> — wrap claude (or another command) in a governed session
• agentgov workitem <ref> — bind the current session to a work item
• agentgov status — show current binding + totals
• agentgov doctor — diagnose the installation

License

Apache-2.0