rdc 0.2.0

Added

• Capabilities. Grants can limit an identity to view, input and/or clipboard.
  Config accepts plain strings (full control), inline tables
  { who = "...", can = [...] } inside allow, or [[serve.grant]] blocks; the CLI accepts
  --allow who=view,clipboard. Missing capability → 403 forbidden. whoami reports caps.
• Audit log. One JSON line per authorized request or rejection (host, identity and
  capability denials included) with identity, action summary, outcome and duration. Mode 0600,
  size-rotated, configurable under [serve.audit]. New rdc audit command to read it.
• rdc doctor prints the configured grants and the audit log path.

Changed

• --allow and [serve].allow entries are now grants; existing plain-string configs behave
  exactly as before (full control).

Install

Download the archive for your platform below, verify it against SHA256SUMS
(sha256sum -c SHA256SUMS), and put rdc on your PATH. Each archive also contains the
documentation, the agent skill and the third-party license bundle. Setup guides:
docs/install.md.

Unsigned binaries

These binaries are not code-signed or notarized.

• macOS: Gatekeeper refuses the raw download, and permissions granted to an unsigned
  binary are lost on every upgrade. Build on the Mac and sign with your own identity via
  scripts/macos/bundle-and-sign.sh; see
  docs/setup-macos.md. The
  unsigned binary is fine for the client side (rdc -t …, rdc mcp).
• Windows: SmartScreen warns on first run. "More info" → "Run anyway", or build from source.
• Linux: no signature checks apply.

Full Changelog: v0.1.0...v0.2.0