Next Release

[rtk-release-bot]

Feats

• feat(hook/opencode): support OpenCode V2, Desktop, and Windows (feat: add opencode v2 plugin support (opencode2) #3463, rtk init --opencode plugin silently does nothing on Desktop ($ is not a function) and on Windows (which not found) #3326) #4187 — Closes #1993 (to verify), #2516 (to verify), #3326 (to verify), #3463 (to verify), #3898 (to verify)
• feat(rewrite): rewrite inner commands of a quoted fish -c wrapper #4126

Fix

• fix(hook): match namespaced bash tool name in the Vibe hook #4356 — Closes #4355 (to verify)
• fix(hook): keep case terminators intact when rewriting (bug(hook): rewrite path turns ;; into ; ;, breaking every case statement (bash syntax error) #3197) #4130
• fix(core): emit one trailing newline, not one on top of the output's own #4154 — Closes #4471 (to verify)
• fix(gh): tokenize gh args instead of walking them by hand #4000
• fix(pipe): strip ANSI before the pytest filter in pipe mode #4465
• fix(ast-grep): route subcommands by the grammar ast-grep actually has #4150
• fix(ls): parse arguments through the tokenizer #3999
• fix(mvn): read goals through arg_tokenizer, not a dash scan #4006
• fix(tracking): store commands so they read back as the same words #4403
• fix(tests): repair the tests broken by the refactor(git): tokenize git show's objects instead of walking clusters #4001 and fix(glab): tokenize glab args instead of walking them by hand #4005 merges #4460
• fix(glab): tokenize glab args instead of walking them by hand #4005
• fix(hooks): judge OpenCode against its own permission rules #4349
• fix(discover): keep a trailing redirect when rewriting golangci-lint #4340
• fix(gain): report a missing hook on every view, not just the default one with data #4038 — Closes #4035 (to verify)
• fix(go): keep the final fuzz stats in the go test summary #1444
• fix(tracking): count rtk uv rows as python in ecosystem mix #4328 — Closes #4316 (to verify)
• fix(diff): report a one-operand call as a usage error with exit 2 (fixes rtk diff <file> with one operand echoes stdin and exits 0 where diff exits 2 #4320) #4383 — Closes #4320 (to verify)
• fix(curl): forward stdin to curl so -d @- bodies are not dropped #4085
• fix(discover): count sudo RTK_DISABLED=1 commands as bypass in analytics #3808 — Closes #3756 (to verify)
• fix(init): fail closed on missing .claude dir and hoist OpenCode install (fixes rtk init --opencode appears to skip Claude hook installation #4046) #4323 — Closes #2519 (to verify), #4046 (to verify)
• fix(hooks): close three permission-gate holes in command segmentation #4129

Other

• docs(hook): document all four rtk rewrite exit codes in --help #4204
• ci: pin the third-party actions that run with secrets and write access #3775
• docs: fix doc references that never resolved, and gate cargo doc in CI #3834
• test(isolation): scan the resolvers for the variables they name #4459
• refactor(tokenizer): make Dialect a struct of independent grammar axes #4008
• refactor(js): decouple vitest/jest runner from CLI Commands enum #2418
• docs: update native Windows hook troubleshooting #4350
• test(pipeline): tolerate broken pipes from early child exits #3832 — Closes #3739 (to verify)
• chore(deps): bump ignore from 0.4.25 to 0.4.32 #3824
• chore(deps): bump dirs from 5.0.1 to 7.0.0 #3822
• chore(deps): bump serde_json from 1.0.149 to 1.0.151 #3820
• chore(deps): bump anyhow from 1.0.102 to 1.0.104 #3818
• chore(deps): bump libc from 0.2.182 to 0.2.189 #3817

[aeppling]

Blocker: regression vs master from #4126

.claude/settings.json:

{"permissions":{"allow":["Bash(env:*)"],"deny":["Bash(git push:*)"]}}

$ rtk rewrite "env bash -c 'git push'"; echo "exit=$?"
env bash -c 'rtk git push'
exit=0

• master (v0.51.0) and develop before feat(rewrite): rewrite inner commands of a quoted fish -c wrapper #4126 (0eddb84b): exit=1, no rewrite.
• rtk hook claude now returns "permissionDecision":"allow" for the same command.
• Unprefixed bash -c 'git push' is correctly denied (exit 2). A prefix (env, timeout N, nice, time, FOO=1) hides the wrapper from the inner-deny check in src/hooks/permissions.rs.
• Affects rtk rewrite and every hook except OpenCode.
• Suggested fix: don't rewrite a wrapper that sits behind a prefix.