rgt v0.5.0

rgt v0.5.0

Complete overhaul of trust, correctness, and observability across the 019–029 findings program.

What's new since v0.4.0

• Installer config preservation (019): never silently destroys existing agent hook/settings content; byte-for-byte additive JSONC/TOML/text merges with backups.
• Update integrity (020): mandatory checksums.txt verification, atomic replace, semver-aware downgrade guard, SHA-256 + GitHub Artifact Attestation verification in-binary.
• Derive/verify hardening (021): cycle-guard on the write path, case-sensitive --operation, safe evalexpr sandbox, DATE_DIFF parent-order enforcement, parent-count bounds.
• Extraction correctness (022): date→number cross-contamination fixed; same-line identical values get distinct node IDs.
• Non-text source capture (023): agent instructions for PDF/Excel/image reporting; explicit rgt record error for binary files.
• Store & graph integrity (024): cycle-guard on writes, non-zero busy_timeout, 128-bit node IDs, transactional hook capture.
• Change-detection hardening (025): forced re-hash, TOCTOU-safe hashing, file-not-found vs. error distinction, dev/ino identity.
• Bash-tool read capture (026): Claude Code/Cursor cat/head/tail/grep/rtk read Bash reads now captured.
• Locale-aware extraction (027): --number-format us|eu|auto, sign + accounting-parentheses handling, malformed-value skipping.
• Init observability (028): rgt doctor, absolute-path hook commands, scoped Claude Code matcher, restart reminder, Copilot CLI dialect pinned.
• Store maintenance (029): PRAGMA user_version schema versioning with fail-fast skew detection, rgt gc [--vacuum], distinct staleness counts.

Install

# macOS (Apple Silicon or Intel)
curl -fsSL https://github.com/rafael-bianchi/rgt/releases/download/v0.5.0/rgt-v0.5.0-aarch64-apple-darwin.tar.gz -o rgt.tar.gz
# Linux (glibc aarch64) or (musl x86_64)
curl -fsSL https://github.com/rafael-bianchi/rgt/releases/download/v0.5.0/rgt-v0.5.0-x86_64-unknown-linux-musl.tar.gz -o rgt.tar.gz
tar -xzf rgt.tar.gz && sudo mv rgt /usr/local/bin/

Release notes / caveats

• Windows binary: built with the MinGW (GNU) toolchain in a Linux container (MSVC requires a Windows host and GitHub Actions is not used for this release); published under the x86_64-pc-windows-msvc asset name so rgt update resolves it. macOS binaries are ad-hoc code-signed.
• Attestation: this release is checksum-verified via checksums.txt but does not carry a Sigstore/GitHub Artifact Attestation bundle (that requires GitHub Actions). Until a future Actions run attaches one, rgt update must be called with --skip-attestation.

rgt v0.4.0

Expand agent hook coverage to all 13 RTK-supported agents: Copilot, Gemini, Mistral Vibe, OpenCode, Pi, Hermes, Cline/Roo Code, Antigravity, and Kilo. Adds the --agent flag, per-agent stdin normalizers, auto-detection, and thin glue plugins/rules files. Also fixes Copilot CLI config path resolution on macOS.