@ctlflow/fleet 0.1.1 → 0.1.2

package/README.md

@@ -37,6 +37,11 @@ saved history; only `--fresh-history` requests replacement. Read-only commands
 never start a controller or wake a native session. `fleet test FLEET` checks
 actual listener/authentication/native readiness without a model turn.
 
+`fleet enroll FLEET` reviews a stopped registered fleet without starting sessions.
+Use it for additional agents or proposed public names while retaining histories.
+Only the human owner approves the exact roster/code; immutable instance keys and
+workareas remain unchanged. See [enrollment operations](docs/operations.md#enroll-without-starting).
+
 Startup creates no chats. Private owner DMs open on first contact, visible output
 or native permission request; additional room membership is explicit.
 

package/dist/bin/fleet.mjs

@@ -4187,7 +4187,7 @@ var target = object({ kind: choice("fleet", "agent", "daemon"), fleetId: optiona
 var operationFields = {
   operationId: identifier,
   target,
-  action: choice("start", "stop", "reset", "update"),
+  action: choice("enroll", "start", "stop", "reset", "update"),
   expectedRevision: integer(),
   releaseDirectory: optional(releaseDirectory)
 };
@@ -5685,7 +5685,7 @@ fleet daemon start [--name NAME] [--root DIRECTORY]
 fleet daemon status|stop|restart --root DIRECTORY
 fleet remote add NAME --ssh USER@HOST --root DIRECTORY
 fleet [--root DIRECTORY | --remote NAME] add DIRECTORY
-fleet [--root DIRECTORY | --remote NAME] list|show|test|start|stop|remove [FLEET]
+fleet [--root DIRECTORY | --remote NAME] list|show|test|enroll|start|stop|remove [FLEET]
 fleet [--root DIRECTORY | --remote NAME] start FLEET [--fresh-history] [--operation-id UUID]
 fleet [--root DIRECTORY | --remote NAME] stop FLEET [--operation-id UUID]
 fleet [--root DIRECTORY | --remote NAME] update FLEET [--operation-id UUID] [--release-directory DIRECTORY]
@@ -5734,7 +5734,7 @@ async function run(argv, signal) {
     ...positionals[0] === "daemon" && positionals[1] === "start" ? ["name"] : [],
     ...positionals[0] === "agent" && positionals[1] === "add" ? ["definition"] : [],
     ...positionals[0] === "agent" && positionals[1] === "attach" ? ["context"] : [],
-    ...["start", "stop", "update"].includes(positionals[0] ?? "") || positionals[0] === "agent" && ["start", "stop", "update"].includes(positionals[1] ?? "") ? ["operation-id"] : [],
+    ...["enroll", "start", "stop", "update"].includes(positionals[0] ?? "") || positionals[0] === "agent" && ["start", "stop", "update"].includes(positionals[1] ?? "") ? ["operation-id"] : [],
     ...positionals[0] === "update" || positionals[0] === "agent" && positionals[1] === "update" ? ["release-directory"] : [],
     ...positionals[0] === "start" || positionals[0] === "agent" && positionals[1] === "start" ? ["fresh-history"] : [],
     ...positionals[0] === "message" ? ["text", "message-id"] : []
@@ -5852,7 +5852,8 @@ async function run(argv, signal) {
       process.stdout.write(pointer.command + "\n");
       return;
     }
-    if (command !== "start" && command !== "stop" && command !== "update") throw new Error(usage);
+    if (command === "enroll" && agentCommand) throw new Error("Use fleet enroll for the stopped whole fleet");
+    if (command !== "enroll" && command !== "start" && command !== "stop" && command !== "update") throw new Error(usage);
     if (command === "update" && remote && !values["release-directory"]) throw new Error("Remote update requires --release-directory with the installed fleetd artifact directory on its computer, or run its installed fleet CLI over SSH");
     const request = {
       operationId: value2(identifier(values["operation-id"] ?? randomUUID3())),

package/docs/operations.md

@@ -1,5 +1,26 @@
 # Fleet operations
 
+## Enroll without starting
+
+`fleet enroll FLEET` reviews the complete roster of an already registered,
+stopped fleet. It uses the same enrollment and owner-approval flow as start,
+but never starts/resets native sessions or enables message delivery. An active
+fleet or per-agent enrollment target is rejected. Inspect `fleet show FLEET`
+after completion; starting later remains a separate explicit resume.
+
+Change an instance's `name` in `runtime.toml` to propose a new registered name.
+Keep its immutable `key`, workarea and saved credentials. The approval page shows
+the old and requested names. Only that active human owner can approve; collision,
+rejection or expiry cannot replace the current name/account. Approved names replace
+old names without aliases. Matrix IDs, grants, rooms and native histories remain
+the same. Existing automatically named owner DMs follow the new display name;
+human conversation titles stay unchanged. No new conversations are created.
+
+Local Crossfire profiles and unread cursors use the immutable instance key.
+The owning storage migration moves previously display-name-keyed state once,
+with an identity-checked durable journal, exclusive listener lock checks and no
+history merging, overwrite or alternate runtime reader. Back up before upgrading.
+
 ## Update and deploy
 
 Use an exact verified public package release after human consent. Before changing

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@ctlflow/fleet",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": false,
   "publishConfig": { "access": "public" },
   "type": "module",
-  "devDependencies": { "@ctlflow/crossfire-test-support": "0.1.1" },
+  "devDependencies": { "@ctlflow/crossfire-test-support": "0.1.2" },
   "bin": { "fleet": "./dist/bin/fleet.mjs" },
   "files": ["dist/bin", "docs", "README.md"],
   "exports": { "./executable": "./dist/bin/fleet.mjs", "./package.json": "./package.json" },
-  "dependencies": { "@ctlflow/fleetd": "0.1.1" },
+  "dependencies": { "@ctlflow/fleetd": "0.1.2" },
   "engines": {
     "node": ">=26.0.0",
     "npm": ">=11.17.0"