v1.4.1

Fixed

• agent-ready update and update --check now report "up to date" and exit 0 when no release has passed the minimum release age yet. Before, they failed with exit 1, which happened to every v1.4.0 install in its first 24 hours. (#28)

Install or upgrade

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.4.1/bootstrap.sh | AGENT_READY_REF=v1.4.1 bash

From v1.4.0, agent-ready update picks up this release once it has been public for 24 hours, or right away with agent-ready update v1.4.1.

v1.4.0

One command to keep agent-ready current, and verified release downloads.

New

• agent-ready update: moves to the newest release that has been public for at least 24 hours (AGENT_READY_MIN_RELEASE_AGE changes this) and repeats your original install from the receipt. It never adds agents you did not select and does not upgrade tools unless you pass --upgrade-tools. Also takes --check (exits 10 when an update is available), --dry-run, an explicit vX.Y.Z (downgrades included), and --force.
• A local agent-ready command after a release install: versions are kept side by side under ~/.local/share/agent-ready/versions/, with a single launcher in ~/.local/bin. Adds status, doctor, an offline rollback, and uninstall.
• The install receipt at ~/.config/agent-ready/receipt records the agents, languages, and tool mode you chose.
• Release archives are verified against the SHA-256 digest GitHub records before anything inside them runs, and they ship with build provenance (gh attestation verify).

Safer configuration

• Every managed block now carries a version and hash header. A local edit inside a block stops the run unless you pass --force.
• All targets are checked before the first write, and --dry-run shows what would change.
• uninstall removes only agent-ready's blocks, its Cursor hook entry, and its own state. Tools are left installed, and the exact command to remove each one is printed.

Upgrading from v1.3.0 or earlier

Run the pinned install command below once. Later updates are just agent-ready update. Older installs have no receipt, so the first install from v1.4.0 auto-detects your agents.

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.4.0/bootstrap.sh | AGENT_READY_REF=v1.4.0 bash

Full change: #26

v1.3.0

v1.3.0 — osv-scanner, timeout on macOS, and silent-failure guards

This release comes from what agents actually did in real Claude Code and Codex
sessions: the commands they reached for and lacked, and the habits that made a
failed step look successful.

What changed

• osv-scanner (#23). One command checks every ecosystem's lockfiles against
  the OSV database: osv-scanner scan source -r .. Agents had been checking
  dependencies by hand with trivy, govulncheck, grype, and raw OSV API queries.
  It is installed from Homebrew, or on Linux from its release binary, verified
  against the GitHub SHA-256 digest like every other tool.
• timeout on macOS (#23). command not found: timeout appeared in 386
  sessions, rising every month, and agents fell back to perl -e alarm. The
  Brewfile installs GNU coreutils on macOS only. When no timeout is on PATH,
  the installer links ~/.local/bin/timeout to gtimeout; it never replaces an
  existing file. Linux already ships timeout.
• JSON edits (#23). jq cannot edit in place, so agents rewrote JSON through
  Python. The routing now says yq -i edits JSON too.
• Silent-failure guards (#24). Two routing lines:
  • Builds and tests piped into tail/head return tail's exit code 0. A
    failing go test ./... 2>&1 | tail -3 && git commit still commits, and the
    failing test's name and message are cut. In real sessions this pipe was
    chained into git commit or git push 49 times. rtk already condenses
    cargo/go/pytest/vitest/tsc output and keeps the real exit code.
  • When the text to replace is missing, a script's str.replace and sd
    change nothing and exit 0. The agent's own edit tool fails instead.
• verify.sh adds two scenarios: a vulnerable Go pin that only osv-scanner
  catches, and timeout stopping a hung command with exit 124.

The shared routing block is now 544 tokens (o200k).

Install

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.3.0/bootstrap.sh | AGENT_READY_REF=v1.3.0 bash

Upgrade

Re-run the v1.3.0 command to install the new tools and refresh the managed
instruction blocks, or add --upgrade to also update installed tools.

Notes

• macOS and Linux; Windows through WSL2.
• Install commands stay pinned to this immutable tag; moving main URLs are not
  documented.

v1.2.1

v1.2.1 — Linux release fallback and corrected routing

This release fixes Linux installs without Homebrew while an upstream release is
missing its Linux build, and corrects the routing instructions agents read on
every prompt.

What changed

• Release fallback (#19). When a tool's latest GitHub release has no asset
  for this platform, install-binaries.sh uses the newest stable release among
  the last 30 that has it and says which one. The SHA-256 digest check is
  unchanged; drafts and prereleases are skipped; with no matching release the
  install still fails. This unblocks installs today: ast-grep 0.51.1 was
  published with only its macOS x86_64 archive, so v1.2.0 stops at ast-grep on
  Linux.
• No duplicate instructions (#18). codegraph install writes its own
  CodeGraph section for Claude Code, Codex, Gemini CLI, and OpenCode, so their
  agent-ready block leaves out the Code graph line when codegraph is
  installed. OpenCode installs now call
  rtk init -g --opencode --hook-only --no-patch, which no longer writes
  Claude Code's RTK.md, an @RTK.md import, or a Claude hook.
• Corrected tool facts (#21). Every routing line was checked against the
  installed tools:
  • rtk bypass replaces the deprecated rtk proxy.
  • sd -F is used for literal replacement, because sd patterns are regexes.
  • The difftastic diff runs without the rtk prefix, which would replace its
    output with rtk's own diff.
  • The CodeGraph line explains that source is always read from disk, and that
    the "changed since sync" mark is about callers.
• Clearer triggers (#22). The routing names the ast-grep rewrite flags
  (-r '<new>' -U) and says when mdq, difft, and hyperfine apply: one
  section of a long Markdown file, formatting noise that may hide a logic
  change, and comparing commands.

The shared routing block is now 422 tokens (o200k), and every line names a
command that does what the text says.

Install

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.2.1/bootstrap.sh | AGENT_READY_REF=v1.2.1 bash

Upgrade

Re-run the v1.2.1 command to refresh the managed instruction blocks, or add
--upgrade to also update installed tools.

Notes

• macOS and Linux; Windows through WSL2.
• Install commands stay pinned to this immutable tag; moving main URLs are not
  documented.

v1.2.0

v1.2.0 — CodeGraph

This release adds CodeGraph to the base install: a local graph of symbols,
calls, and imports that answers structural questions in one call instead of a
grep-and-read loop.

What changed

• codegraph is installed on macOS and Linux from its self-contained release
  bundle (about 60 MB to download, 280 MB unpacked). The SHA-256 digest GitHub
  records for the asset is verified before unpacking; versions live under
  ~/.local/share/agent-ready/codegraph/versions/, and only the launcher is
  linked into ~/.local/bin.
• --upgrade updates Agent Ready's copy and prunes older versions. A
  codegraph installed with npm or upstream's script is not replaced.
• MCP wiring is delegated to
  codegraph install --yes --target=… --location=global --no-permissions,
  after the managed instruction blocks are validated. Anonymous usage telemetry
  is then disabled.
• The shared routing block gains one line for structural questions. It applies
  only when a .codegraph/ index exists, does not index repositories on its
  own, and says when to trust the returned source.
• verify.sh asserts the CodeGraph scenario (two real callers against four
  textual matches); test-install.sh covers release selection, digest
  mismatch, upgrade, user-install isolation, MCP delegation, and the routing
  length.

Install

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.2.0/bootstrap.sh | AGENT_READY_REF=v1.2.0 bash

Then run codegraph init once per project you want covered. The installer does
not index repositories.

Upgrade

Run the same pinned command with --upgrade, or re-run the v1.2.0 command.

Notes

• macOS and Linux; Windows through WSL2.
• Install commands stay pinned to this immutable tag; moving main URLs are not
  documented.

v1.1.0

Added

• Linux without Homebrew. On Linux the 15 tools now come from each project's latest GitHub release: every download is verified against the SHA-256 digest GitHub records for it before unpacking, and binaries go to ~/.local/bin — no sudo, and it works as root in containers. Homebrew is still used where it is installed; --binaries opts out of it. Go support builds gopls with go install. --upgrade downloads only tools with a newer release. (#13)
• Support for Grok Build, OpenCode, Qwen Code, Cline CLI, Kilo Code, Crush, and goose. (#11)

Changed

• verify.sh proves each tool on a realistic scenario against the alternative an agent would use, and fails when a claim stops holding. (#12, #14)
• CI also installs from release binaries on x86_64 and arm64 and in a root-only container, and runs daily against the latest tool releases. (#13)

Install

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.1.0/bootstrap.sh | AGENT_READY_REF=v1.1.0 bash

v1.0.2

Fixed

• Fresh Cursor-only installs now create the target ~/.cursor directory before RTK writes its hook.
• Cursor setup remains isolated from ~/.claude.
• The regression now starts with neither Cursor nor Claude configuration present.

Install

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.0.2/bootstrap.sh | AGENT_READY_REF=v1.0.2 bash

v1.0.1

Fixed

• Cursor setup now configures RTK and agent-ready hooks without creating or modifying ~/.claude.
• Added a regression check for Cursor-only installations with no Claude configuration.

Changed

• Added the repository hero image and social preview.
• Updated the GitHub Actions checkout dependency.

Install

curl -fsSL https://raw.githubusercontent.com/Dankosik/agent-ready/v1.0.1/bootstrap.sh | AGENT_READY_REF=v1.0.1 bash

v1.0.0

First immutable release of agent-ready.

• version-pinned installation for macOS, Linux, and WSL2
• generic and Go-specific installers
• opt-in Homebrew upgrades
• full-history secret scanning and pinned GitHub Actions
• protected, signed, CI-gated releases