Arcjet Files

[!NOTE] Guard agent helpers now call Guard even when one of your callbacks fails. If a callback you pass to a helper (rules, metadata, action, sessionId, actor or inputs) throws or returns a value the helper can't use, the helper leaves that value out, calls Guard anyway, and your onGuardError setting decides what happens next, just as when Guard is unavailable. Previously the failure skipped Guard, so remote policy and rate limits never saw the call. If your callbacks return the right types, nothing changes for you.

Guard labels can now use uppercase ASCII letters, so getWeather.invoked is a valid label.

1.14.1 (2026-10-06)

🪲 Bug Fixes

• guard: accept uppercase ASCII in a guard label (#6312) (fc9ef92)
• guard: call Guard when a policy callback throws or returns a value it cannot use (#6308) (a3d7f45)
• guard: call Guard when an actor or inputs callback fails (#6310) (084a6df)
• guard: read the Eve approval responder from response.principal (#6305) (1b531e2)
• guard: record Eve subagent calls from the task events Eve 0.69 introduced (#6306) (2ca5663)
• guard: record the capture when an after-hook's action or metadata callback fails (#6311) (084a6df)

📚 Tests

• guard: read Eve task and agent listeners through a typed accessor (#6309) (50f687a)