@ctlflow/fleet 0.1.8 → 0.1.10

package/docs/commands.md

@@ -42,6 +42,9 @@ fleet remove research
 Add registers an explicit directory or instance. New identities need owner
 approval. Start automatically resumes the full saved native histories. Missing
 or broken established history is an error, not permission to create a new one.
+An already approved roster resumes using its saved controller authority, without
+enrollment or overwriting owner-edited wake rules. Use explicit `fleet enroll`
+while stopped to propose changed coordination defaults for owner review.
 Local start starts or reuses the configured controller. Status/list/show/test,
 contexts, attachment and registry edits never start it. Stop ends addressed
 listeners and owned Codex processes. Instance removal retires its fleet registration;

package/docs/configuration.md

@@ -61,12 +61,22 @@ cwd. It defaults to that instance's private workarea. It must be canonical, owne
 and not writable by other users; existing project modes are not tightened.
 Private state remains in the workarea, passed separately to the native adapter as
 `stateDirectory`. The adapter's private native home retains the managed histories
-and intended provider configuration/authentication, without overwriting or
+and intended provider configuration, without overwriting or
 importing the project's `.codex/config.toml`, history or coding session. Role
 instructions, administrator setup instructions and the pinned Crossfire skill
 are delivered via native developer instructions on both create and resume;
 external cwd does not rely on private workarea ancestor skill discovery.
 
+Every native start/resume, including automatic wake and recovery, atomically
+recopies the current host Codex `auth.json` from `CODEX_HOME` (default `~/.codex`).
+Sign in with `codex login` on the controller host before resuming. Changing that
+host login changes the provider account used on subsequent activations, not the
+agent's Matrix identity or saved conversation. Already-running engines retain
+their current login until stopped/resumed. Preflight checks the host login and
+does not rewrite running agents. Invalid or unsafe source files fail before
+startup; absence removes the stale file copy rather than reusing it. Native
+environment-only provider authentication does not require a file login.
+
 Default project setup generates this same roster with one `project` definition,
 the chosen project as `workspace` and a stable private workarea. Definitions
 without `workspace` keep their original private cwd; this is one configuration
@@ -134,8 +144,10 @@ Omitting the whole block requests an explicit person-only selection for the
 actual configured owner and no invitation delegation. Each selected person can
 include their currently owned agents. Multiple entries combine; individual
 agents require `include_agents = false`. Use `wake_senders = []` for no entries.
-Changed policies require owner review on stop/start; unchanged restarts preserve
-manual room-specific edits. Configuration grants no room membership or native power.
+Changed coordination policies require explicit `fleet enroll` while stopped and
+owner review. Ordinary restarts validate existing identities and preserve live
+wake rules and manual room-specific edits. Configuration grants no room membership
+or native power.
 - [Fields, selected identities, approval and removal rules](https://github.com/control-flow-project/crossfire/blob/main/services/fleetd/docs/coordination.md)
 
 | Field | Accepted values | When omitted |

package/docs/operations.md

@@ -4,7 +4,9 @@
 
 `fleet enroll FLEET` reviews the complete roster of an already registered,
 stopped fleet. It uses the same enrollment and owner-approval flow as start,
-but never starts/resets native sessions or enables message delivery. An active
+when start introduces new or renamed identities. Ordinary resume of an approved
+roster does not request enrollment or overwrite owner-edited coordination policy.
+Enroll never starts/resets native sessions or enables message delivery. An active
 fleet or per-agent enrollment target is rejected. Inspect `fleet show FLEET`
 after completion; starting later remains a separate explicit resume.
 

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@ctlflow/fleet",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "private": false,
   "publishConfig": { "access": "public" },
   "type": "module",
-  "devDependencies": { "@ctlflow/crossfire-test-support": "0.1.8" },
+  "devDependencies": { "@ctlflow/crossfire-test-support": "0.1.10" },
   "bin": { "fleet": "./dist/bin/fleet.mjs" },
   "files": ["dist/bin", "docs", "README.md"],
   "exports": { "./executable": "./dist/bin/fleet.mjs", "./package.json": "./package.json" },
-  "dependencies": { "@ctlflow/fleetd": "0.1.8" },
+  "dependencies": { "@ctlflow/fleetd": "0.1.10" },
   "engines": {
     "node": ">=26.0.0",
     "npm": ">=11.17.0"