v0.11.5

Installation

Node.js:

npm install -g @rafter-security/cli@0.11.5

Python:

pip install rafter-cli==0.11.5

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• docs: expand Windsurf integration recipe by @Vritika22Mandapaka in #318
• fix: retry a polling 429 only when Retry-After says when to come back (sable-96ex) by @Rome-1 in #227
• fix(hook): see through rafter's own agent exec — operand is a command; pty wrapper around it is HIGH (sable-lbyp) by @Rome-1 in #248
• release: v0.11.5 by @Rome-1 in #338
• fix(hook): a Write through a symlink to ~/.rafter is refused (sable-rxqr) by @Rome-1 in #340
• Fix dead pointers in agent-facing docs and rules; clean up retired skills on install by @Rome-1 in #305
• feat(telemetry): local-only usage counters and rafter telemetry show by @Rome-1 in #327
• CLI: several paths for secrets, -a after any subcommand, --out for JSON, clearer clean result by @Rome-1 in #307
• feat: rafter-code-review fires on audits; add rafter gates by @Rome-1 in #291
• Agent guidance: review it yourself, close every gate, and don't gate on rafter run locally by @Rome-1 in #306
• agent init/enable: keep locally edited skill, rule and agent files; report what changed per file by @Rome-1 in #313
• fix(risk-rules): a socat reverse shell with a quoted program is critical (sable-gmgh) by @Rome-1 in #342
• Add rafter agent update; report out-of-date installs in status and verify by @Rome-1 in #315
• OpenClaw skill and legacy Cursor rule follow the keep-edited-files policy by @Rome-1 in #316
• Hook keeps installed skills current; flag edited files until reconciled by @Rome-1 in #323
• docs: what the hosted scanner actually does with .rafter.yml ignore rules (sable-u5ij) by @Rome-1 in #232

New Contributors

• @Vritika22Mandapaka made their first contribution in #318

Full Changelog: v0.11.4...v0.11.5