@ctlflow/fleet 0.1.9 → 0.1.11

package/dist/bin/fleet.mjs

@@ -4184,6 +4184,7 @@ var fleetView = object({
   directory: text(4096),
   revision: integer(),
   controller,
+  resumeInstanceKeys: nullable(list(name, 100)),
   phase,
   instances: list(instanceView, 100),
   error: nullable(text(4096)),

package/docs/configuration.md

@@ -61,12 +61,22 @@ cwd. It defaults to that instance's private workarea. It must be canonical, owne
 and not writable by other users; existing project modes are not tightened.
 Private state remains in the workarea, passed separately to the native adapter as
 `stateDirectory`. The adapter's private native home retains the managed histories
-and intended provider configuration/authentication, without overwriting or
+and intended provider configuration, without overwriting or
 importing the project's `.codex/config.toml`, history or coding session. Role
 instructions, administrator setup instructions and the pinned Crossfire skill
 are delivered via native developer instructions on both create and resume;
 external cwd does not rely on private workarea ancestor skill discovery.
 
+Every native start/resume, including automatic wake and recovery, atomically
+recopies the current host Codex `auth.json` from `CODEX_HOME` (default `~/.codex`).
+Sign in with `codex login` on the controller host before resuming. Changing that
+host login changes the provider account used on subsequent activations, not the
+agent's Matrix identity or saved conversation. Already-running engines retain
+their current login until stopped/resumed. Preflight checks the host login and
+does not rewrite running agents. Invalid or unsafe source files fail before
+startup; absence removes the stale file copy rather than reusing it. Native
+environment-only provider authentication does not require a file login.
+
 Default project setup generates this same roster with one `project` definition,
 the chosen project as `workspace` and a stable private workarea. Definitions
 without `workspace` keep their original private cwd; this is one configuration

package/docs/sessions.md

@@ -2,8 +2,8 @@
 
 ## Management
 
-Open a fleet's **Agents** tab: the agents table comes first, followed by the
-fleet-wide **Native sessions** controls. For one agent, open its **Session** tab.
+Open a fleet's **Sessions** tab for fleet-wide controls. Its **Agents** tab keeps
+the agent list separate. For one agent, open its **Session** tab.
 The fleet owner and administrators can request:
 
 | Action | Native execution | History and delivery |
@@ -12,8 +12,13 @@ The fleet owner and administrators can request:
 | Stop session(s) | Close the selected listeners and owned engines. | Retain native histories, accounts, permissions and unread positions. The controller remains connected. |
 | Start with fresh history | Stop selected agents, prepare private exports and restart with fresh model contexts. | Archive old bindings; retain identity, credentials, permissions, Matrix messages and configured parameters. Confirmation is required. |
 
-Fleet scope means all enrolled agents in that fleet; agent scope means only the
-selected agent. Fresh-history confirmation names the scope and explains that model
+Fleet Stop remembers the enabled agents. Fleet Resume restores that selection and
+any already enabled agents, leaving deliberately stopped agents off. Repeated Stop
+while stopped retains the selection; individual Stop removes its member. An empty
+saved selection resumes nobody. Initial fleet startup without a saved selection
+or active intent starts its configured roster. Fresh history still targets every
+agent in the confirmed fleet scope; agent scope means only the selected agent.
+Fresh-history confirmation names the scope and explains that model
 context is being replaced. Cancelling confirmation submits nothing. Stopping also
 confirms that running operating-system commands are not frozen for later continuation.
 
@@ -40,7 +45,8 @@ listener activity and history availability separately. `fleet agent contexts`
 reads saved context IDs while sleeping or stopped without waking a process.
 Attachment requires a live native endpoint; GET never launches one. Use Resume
 sessions or `fleet agent start` to wake a sleeping native engine for a terminal
-without changing its binding or sending a model prompt.
+without changing its binding. Idle histories receive no model prompt; interrupted
+work receives the continuation instruction described below.
 
 Orderly daemon shutdown preserves desired activation. Starting the same daemon
 root after a reboot restores active bindings with retained histories; explicitly
@@ -61,6 +67,16 @@ needed. The runtime retains its full conversation context even though controller
 RPC responses omit old turn payloads. Missing or broken established bindings cause
 a visible failure; they never silently fall back to new history.
 
+Working histories and unanswered questions/approvals have a private unfinished-work
+checkpoint. After Stop, daemon restart or native recovery, their exact saved history
+receives: "Your saved session was restarted... If your previous task is unfinished
+and still authorized, resume that task." The notice is not a new assignment and
+does not approve a pending decision. It retains the task's original reply
+destination; room-isolated histories stay isolated. Idle/sleeping contexts receive
+no synthetic prompt. Native delivery receipts prevent duplicate notices on retries,
+but an interrupted operating-system command is terminated, not frozen, and external
+effects are not guaranteed exactly once. The agent must check completed work first.
+
 Only an explicit flag selects fresh history:
 
 ```sh

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@ctlflow/fleet",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "private": false,
   "publishConfig": { "access": "public" },
   "type": "module",
-  "devDependencies": { "@ctlflow/crossfire-test-support": "0.1.9" },
+  "devDependencies": { "@ctlflow/crossfire-test-support": "0.1.11" },
   "bin": { "fleet": "./dist/bin/fleet.mjs" },
   "files": ["dist/bin", "docs", "README.md"],
   "exports": { "./executable": "./dist/bin/fleet.mjs", "./package.json": "./package.json" },
-  "dependencies": { "@ctlflow/fleetd": "0.1.9" },
+  "dependencies": { "@ctlflow/fleetd": "0.1.11" },
   "engines": {
     "node": ">=26.0.0",
     "npm": ">=11.17.0"