ryk v0.2.19

What's Changed

• Put core_engine on the real test gates by @christopherkarani in #140
• fix(opencode): show ryk host in vanilla OpenCode TUI by @christopherkarani in #141
• Peel shell_eval into cwd, synth, and fm siblings by @christopherkarani in #143
• fix(cli): expand env-node shebang so ryk pi survives OS sandbox attach by @christopherkarani in #142
• fix(pi): stop TUI crashes on decision cards and sandbox mkdir EPERM by @christopherkarani in #156
• fix(start): Claude smoke, probe smokes, leftover hosts by @christopherkarani in #158
• fix(opencode): show TUI toast when ryk blocks a command by @christopherkarani in #157
• fix(mcp): close notifications/ prefix fail-open in the policy proxy by @christopherkarani in #160
• fix(agent-hook): fail closed on empty stdin for bare ryk by @christopherkarani in #159
• fix: Windows doctor panic and ryk run AccessDenied (#147) by @christopherkarani in #148
• fix(security): ignore allow-once store unless OS sandbox is active by @christopherkarani in #161
• fix(security): realpath-reject workspace-planted user allowlist.toml by @christopherkarani in #151
• fix: deny force-equivalent git push on classify and shell_engine by @christopherkarani in #152
• Expand hook host matrix to all 8 supported envelopes by @christopherkarani in #162
• fix(cli): rebase #150 glanceable surface onto current main by @christopherkarani in #163
• perf(hook): cheaper hot path without a 5ms SLA by @christopherkarani in #164
• docs: real OpenCode deny GIF on the README hero by @christopherkarani in #165
• fix(ryk-pi): borderless blocked-command cards (no untested Box) by @christopherkarani in #167
• fix: force-push Why points at fast-forward git push, not lease by @christopherkarani in #178
• fix: launch Hermes under ryk; honor RYK_BIN/PATH source-build discovery by @christopherkarani in #173
• fix(cli): override only top-level policy mode on ryk init by @christopherkarani in #179
• perf: strip ReleaseSafe ryk and DCE product DebugAllocator by @christopherkarani in #184
• chore: move Mac FM steward Swift source to ryk-fm-steward by @christopherkarani in #183
• perf: gzip-embed oracle packs and inflate fail-closed by @christopherkarani in #185
• fix(windows): open audit log for resync by @onatozmenn in #186
• perf: slim PCRE2 without UCD and add -Dhttp TLS omit by @christopherkarani in #188
• perf: split TUI barrel so -Dtui=false drops vaxis by @christopherkarani in #187
• fix: unblock Linux CI gates and drop billed macOS runners by @christopherkarani in #190
• fix(ux): say Session, not Always, for TTY ask (#146) by @christopherkarani in #191
• fix(hook): list grok in ryk hook --help by @christopherkarani in #192
• fix: ryk start banner names written policy posture (#144) by @christopherkarani in #193
• refactor(cli): rename rust_visibility to feed_visibility by @christopherkarani in #182
• docs: P4 binary-size measurement — flags-only, no ryk-dev split by @christopherkarani in #189
• Add honest localhost Terminal view (supersedes #154) by @christopherkarani in #168

New Contributors

• @onatozmenn made their first contribution in #186

Full Changelog: v0.2.18...v0.2.19