@einsia/agent-git 0.1.1 → 0.2.0

package/CHANGELOG.md

@@ -6,6 +6,103 @@ Every notable change to agit, the AgentGit CLI, by release. The format follows
 its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 `@einsia/agent-git` npm package ships this file.
 
+## [0.2.0] - 2026-09-16
+
+### Added
+
+- **Daemon peers and Cloud tunnels.** `agitd` manages local harness sessions while
+  independent SSH or Cloud tunnel workers transport peer messages. Controllers can
+  discover and operate sessions on another executor through the same peer protocol.
+  Peer hosting is available on Linux and macOS. Cloud connections require a Hub
+  with peer relay support enabled.
+- **Independent control and inbound access.** A local controller can connect to
+  another device while its own inbound access stays disabled. Cloud admission and
+  executor session permissions are enforced separately. Adapters can constrain
+  requests to a lower role, enforced by the executor when a queued write runs.
+- **More native conversation sources.** Discover and import OpenClaw, Hermes and
+  WorkBuddy sessions, with runtime-specific setup and transcript handling.
+- **Large session files.** Stage binary deliverables with `agit file add --lfs`;
+  verify payloads during upload and download before publishing or materializing them.
+- **Local and scoped search.** Search saved local history without Hub requests, or
+  limit remote session searches to an organization or the current code origin.
+- **Optional automatic publishing.** Configure `push.auto` per user or repository
+  to publish settled turns, while keeping explicit publication available.
+- **Usage statistics controls.** Inspect collection with `agit telemetry`, disable
+  it with `agit telemetry disable` or `DO_NOT_TRACK=1`, and preview the field policy.
+  Setup discloses the default-on choice; a recorded opt-out is preserved. See the
+  [collection and privacy details](docs/telemetry.md).
+
+### Changed
+
+- **Use `agit run` for saved sources.** `agit open` is removed. Update scripts to
+  use `agit run owner/repo@ref`; `agit resume` still continues a selected session.
+- Review a frozen publication in an interactive agent before pushing, including
+  explicit handling of credential findings.
+- Status includes bounded native session details, shared files, merge progress and
+  project metadata without unbounded transcript scans.
+- Interactive startup can offer to install an available update after confirmation.
+  Non-interactive update notices go to stderr and preserve JSON output.
+- Repository secret dictionaries keep their encryption keys in local Git metadata,
+  avoiding repeated Keychain prompts after migration. Neither the dictionary nor
+  its key is uploaded by push.
+
+### Fixed
+
+- Recover from expired CLI credentials and retry browser sign-in choices without
+  losing the selected Hub or repository.
+- Keep session discovery and native watch preparation responsive, hide internal
+  runtime sessions, and preserve transcript identity across polling and replay.
+- Correlate canonical Codex user history and prevent duplicate Claude prompts.
+- Preserve native Codex session titles and recover remote session history reliably.
+- Keep controller requests, tunnel failures and harness failures within their
+  ownership boundaries, with bounded queues and diagnostic logs for recovery.
+- Support Hub SOCKS proxies and preserve Windows browser launch, process ownership
+  and named-pipe behavior.
+- Scope installed AgentGit skills to explicit session operations and retire legacy
+  home-directory instructions without replacing unrelated user content.
+
+## [0.1.2] - 2026-09-12
+
+### Added
+
+- **Session files with explicit staging.** Use `agit file` to add, inspect, commit,
+  retrieve and link deliverables in a selected branch without changing its conversation
+  VIEW. File staging remains separate from automatic turn settlement.
+- **Windows x64 distribution.** Install the native Windows CLI through npm or
+  download the executable from the GitHub Release, including remote-control support.
+- **More remote-control workflows.** Connect existing Codex conversations through
+  the native inbox, use OpenCode remote control and transcript snapshots, and navigate
+  between connected machines and their workspaces.
+- **Richer history inspection.** Inspect saved VIEWs and LOGs, raw native JSONL and
+  archived evidence; compare semantic prefixes and unsettled native turns with `diff`.
+- **Scoped search and integrity checks.** Search authenticated repository scopes,
+  inspect incomplete-result diagnostics, and run bounded, read-only `doctor` checks.
+- **Safer import and review.** Choose native-session lineage explicitly, preview and
+  name sessions interactively, and review committed VIEWs with guarded scan remedies.
+
+### Changed
+
+- **Explicit session targeting.** Use `owner/repo@branch` or `AGIT_SESSION` for
+  automation. Interactive commands offer target selection; `agit switch` and implicit
+  workspace targeting are removed. Update scripts that depended on those defaults.
+- **Structured agent output.** JSON output includes typed recovery actions, while
+  human output identifies verified targets and quiet mode suppresses progress output.
+- Merge-agent exploration remains available as archived evidence and visible session
+  history without adding that exploration to the merged VIEW.
+
+### Fixed
+
+- Preserve Codex fork history, portable provider metadata, mixed-runtime sharing and
+  paired tool evidence during capture, resume and export.
+- Preserve reference, network, authentication, policy and cancellation error categories;
+  bind credentials to the selected Hub and validate setup before applying changes.
+- Keep failed remote API turns responsive, preserve shared-message authors and native
+  execution feedback, and support HTTP CONNECT proxies between `agitd` and the Hub.
+- Validate imports before adoption, prevent duplicate runtime claims, guard resume
+  against tracking divergence, and preserve private-publication checks.
+- Avoid repository-wide migration scans on clean stores and skip tags already present
+  on a verified remote during push.
+
 ## [0.1.1] - 2026-09-04
 
 ### Added
@@ -65,5 +162,7 @@ First public release.
   per-platform packages for Linux and macOS on x64 and arm64, and GitHub Release
   artifacts with `SHA256SUMS`.
 
+[0.2.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.2.0
+[0.1.2]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.2
 [0.1.1]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.1
 [0.1.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.0

package/README.md

@@ -11,13 +11,24 @@ cleaned up at any moment. `agit` puts snapshots and versions on top of them,
 so "that conversation last Wednesday that finally cracked the bug" becomes
 something you can find, continue, and hand to a teammate.
 
+```text
+agit                              choose a session to continue
+agit new                          choose a repo and name a fresh conversation
+agit import                       choose an existing runtime conversation to adopt
+agit log                          choose a session and browse its history
+agit push                         choose a saved session to publish
+agit share                        choose a session and review link settings
+agit run owner/repo@ref           open a saved source, forking when needed
 ```
-agit import <session> -n <agent>   adopt an existing claude / codex / opencode / cursor session and record its first version
-agit commit <agent>                record another version (snapshot of the session's full current content)
-agit push <agent>                  publish to the hub, get a link
-agit clone <owner>/<agent>         fetch (with git history) and pick up right away; --mine creates a copy under your name
-agit upgrade                       upgrade the CLI itself to the latest release the hub announces
-```
+
+These bare commands open their interfaces in a human terminal. `agit resume`
+continues the same session and never forks; `agit run` can start a new writable
+session from a tag, historical point or another author's source.
+
+Inside an adopted agent session, `agit commit` saves completed turns and
+`agit push` publishes that session. For scripts, pass the target explicitly,
+for example `agit push owner/repo@branch --json`. Directory branch pins do not
+choose targets for `commit`, `push` or `share`.
 
 On user-facing startup, `agit` checks for a newer release at most once a day and prints a
 reminder to stderr; it never upgrades automatically. JSON/quiet/CI and internal hook/MCP paths
@@ -27,12 +38,18 @@ Adopting and recording the first version are one command — the in-between
 state ("linked, but unversioned") means nothing to anyone. To mark a session
 without versioning it (e.g. offline), pass `--link-only`.
 
-`agit clone` is **read-only by default**: nothing is created in your name,
-`origin` points at the source, the session is installed into your runtime and
-you can `agit commit` locally as usual. When you decide to take over, use
-`--mine` — that creates your copy on the hub, repoints `origin` at it, and
-remembers the source as `upstream`. Running `agit push` from a read-only
-checkout offers exactly that.
+Use a full native session ID and an explicit runtime and destination for lineage discovery.
+The terminal offers verified local bases, independent import, or cancellation. Noninteractive
+calls return choices without writing; pass `--onto <ref>` or `--independent` to select a path.
+`--propose-lineage` prints a read-only report without adopting the session.
+Inspecting lineage in an existing repository requires NUL-framed Git worktree output,
+normally available in Git 2.36 or newer. An unsupported Git reports `git_worktree_format`;
+explicit `--onto`, `--independent`, and `--link-only` imports retain their ordinary checks.
+
+`agit clone` fetches repository history locally. Use `agit run` or `agit resume`
+to start a runtime. A clone is **read-only by default** on the Hub: nothing is
+created in your name and `origin` points at the source. `agit clone --mine`
+creates your copy, repoints `origin` and remembers the source as `upstream`.
 
 The full command list is in `agit --help`.
 
@@ -49,9 +66,13 @@ agit --version
 
 Both routes install a prebuilt binary — no Rust toolchain required. npm
 picks the platform sub-package matching your `os`/`cpu`; on platforms with no
-prebuilt binary (e.g. Windows) running `agit` prints the source-build recipe.
+prebuilt binary (e.g. FreeBSD) running `agit` prints the source-build recipe.
 Details and environment variables: [`npm/README.md`](npm/README.md).
 
+Windows x64 packages include the local RC daemon. Its control channel uses a local named
+pipe restricted to the current Windows user. RC state requires a private, user-owned
+directory; shared or redirected RC paths are rejected.
+
 pnpm (v10+) does not run dependency install scripts by default, so the
 automatic `agit setup` is skipped there — run `agit setup` once yourself
 after installing.
@@ -84,7 +105,7 @@ the binary to `~/.local/bin/agit`. Common flags:
 ```
 
 To build a binary whose built-in hub is the staging deployment, set the build-time default
-explicitly. Runtime `AGIT_HUB_URL` and `agit config set hub.url ...` still take precedence:
+explicitly. Runtime `AGIT_HUB_URL` and `agit config hub.url ...` still take precedence:
 
 ```sh
 AGIT_DEFAULT_HUB_URL=https://staging.agent-git.com cargo build --release --locked
@@ -139,10 +160,15 @@ The section becomes the GitHub Release body (`scripts/release-notes.mjs` extract
 `release.yml`, with repository-relative links pinned to the release tag) and ships inside
 the `@einsia/agent-git` package.
 
-Pushing the tag runs the whole chain — binaries first, npm right after:
+After the source release commit passes CI and is synchronized to GitHub `main`,
+verify the mirrored files and create the tag in that GitHub checkout. The mirror
+rewrites commit IDs, so the source repository's SHA is not the release SHA.
+Pushing the tag to GitHub runs the whole chain — binaries first, npm right after:
 
 ```sh
-git tag agit-v0.1.0 && git push origin agit-v0.1.0   # release.yml builds, smoke-tests, attaches artifacts
+# Run from the verified Einsia/agent-git GitHub mirror checkout.
+git tag agit-v0.1.0
+git push git@github.com:Einsia/agent-git.git refs/tags/agit-v0.1.0
 ```
 
 Distribution to users runs through the npm registry: each target ships as a

package/npm/README.md

@@ -40,6 +40,7 @@ The hub (**AgentGit**) is not in this package; it deploys separately.
 | Linux | aarch64/arm64 | `@einsia/agent-git-linux-arm64`   |
 | macOS | x86_64        | `@einsia/agent-git-darwin-x64`    |
 | macOS | arm64         | `@einsia/agent-git-darwin-arm64`  |
+| Windows | x86_64      | `@einsia/agent-git-win32-x64`    |
 
 **Linux binaries are musl static-linked — no glibc floor.** Verified on Alpine,
 Amazon Linux 2 (glibc 2.26), Debian 11/12, Ubuntu 20.04–24.04, x86_64 and
@@ -48,7 +49,7 @@ arm64. No more `libc.so.6: version 'GLIBC_2.xx' not found`.
 On macOS, if Node runs under Rosetta (it reports itself as x64) the installer
 detects it and installs the arm64 build.
 
-Unsupported platforms (including Windows) get no prebuilt binary: running
+Unsupported operating system and architecture pairs get no prebuilt binary: running
 `agit` prints build-from-source instructions. On WSL, the Linux binary works.
 
 ## Failure behavior
@@ -73,3 +74,9 @@ Unsupported platforms (including Windows) get no prebuilt binary: running
 `agit upgrade` asks the hub for the latest CLI version and downloads the
 platform package tarball straight from the npm registry, verified against the
 registry's SRI (sha512) before anything is replaced.
+
+Windows packages contain `agit.exe`. The `create-agit` installer writes it to
+`%USERPROFILE%\.local\bin`; add that directory to your user PATH if the installer
+reports that it is missing. Windows source builds need Rust and the MSVC C/C++
+toolchain. The local RC daemon uses a current-user Windows named pipe and private
+RC state. It refuses shared or redirected RC paths instead of changing their permissions.

package/npm/lib/platform.js

@@ -10,13 +10,13 @@ const { spawnSync } = require('child_process');
 //
 // Linux is musl static linking: a gnu artifact built on ubuntu:24.04 locks in
 // GLIBC_2.39 and nothing starts on older distributions; musl's static-pie has
-// no interpreter, so it has no glibc floor. No win32: the release pipeline
-// produces no windows artifacts.
+// no interpreter, so it has no glibc floor.
 const KEYS = {
   'linux/x64': 'linux-x64',
   'linux/arm64': 'linux-arm64',
   'darwin/x64': 'darwin-x64',
   'darwin/arm64': 'darwin-arm64',
+  'win32/x64': 'win32-x64',
 };
 
 // Platform key → Rust target triple (CI names artifact archives by triple).
@@ -25,6 +25,7 @@ const TRIPLES = {
   'linux-arm64': 'aarch64-unknown-linux-musl',
   'darwin-x64': 'x86_64-apple-darwin',
   'darwin-arm64': 'aarch64-apple-darwin',
+  'win32-x64': 'x86_64-pc-windows-msvc',
 };
 
 function packageName(key) {
@@ -42,8 +43,7 @@ function realArch(nodePlatform, nodeArch) {
   return !r.error && r.status === 0 && (r.stdout || '').trim() === '1' ? 'arm64' : arch;
 }
 
-// Returns this machine's platform key; an unsupported platform (win32, for
-// example) returns null and the caller picks the wording.
+// Unsupported operating system and architecture pairs have no platform key.
 function packageKey(nodePlatform, nodeArch) {
   const platform = nodePlatform || process.platform;
   const arch = nodeArch === undefined ? realArch() : nodeArch;

package/npm/lib/run.js

@@ -21,7 +21,7 @@ function run() {
 
   if (!bin) {
     // npm skipped the optional dep for this os/cpu = this platform has no
-    // prebuilt artifact (win32, freebsd, ...). This block is often everything
+    // prebuilt artifact (freebsd, ...). This block is often everything
     // the user sees, so on its own it has to say why there is no binary and
     // which command fixes it.
     log.error(`no prebuilt agit binary for ${process.platform}/${process.arch}.`);
@@ -37,7 +37,10 @@ function run() {
     process.exit(127);
   }
 
-  const r = spawnSync(bin, process.argv.slice(2), { stdio: 'inherit' });
+  const r = spawnSync(bin, process.argv.slice(2), {
+    stdio: 'inherit',
+    env: { ...process.env, AGIT_INSTALL_CHANNEL: 'npm_global' },
+  });
   if (r.error) {
     log.error(`failed to start ${bin}: ${r.error.message}`);
     process.exit(1);

package/npm/postinstall.js

@@ -42,15 +42,25 @@ function main() {
   }
   if (!bin) return; // unsupported platform: the shim gives full instructions on the next command.
 
-  const check = spawnSync(bin, ['--version'], { encoding: 'utf8' });
+  const env = { ...process.env, AGIT_TELEMETRY_DEFER: '1', AGIT_INSTALL_CHANNEL: 'npm_global' };
+  const check = spawnSync(bin, ['--version'], { encoding: 'utf8', env });
   if (check.error || check.status !== 0) {
     log.warn(`installed binary does not run: ${bin}`);
     log.warn((check.stderr || check.error?.message || `exit ${check.status}`).trim());
     return;
   }
 
+  // npx create-agit owns its durable-copy receipt and passes the browser acquisition key.
+  if (process.env.npm_command !== 'exec') {
+    const receiptArgs = ['--internal-install-completed'];
+    if (!truthy(process.env.npm_config_foreground_scripts)) receiptArgs.push('--defer-notice');
+    spawnSync(bin, receiptArgs, {
+      stdio: ['ignore', 'inherit', 'inherit'],
+      env: { ...process.env, AGIT_INSTALL_CHANNEL: 'npm_global' },
+    });
+  }
   if (truthy(process.env.AGIT_SKIP_SETUP)) return;
-  const setup = spawnSync(bin, ['setup'], { stdio: 'inherit' });
+  const setup = spawnSync(bin, ['setup'], { stdio: 'inherit', env });
   if (setup.status !== 0) {
     log.warn('`agit setup` did not fully succeed — re-run it any time; the CLI itself is installed.');
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,9 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.1.1",
-    "@einsia/agent-git-linux-arm64": "0.1.1",
-    "@einsia/agent-git-darwin-x64": "0.1.1",
-    "@einsia/agent-git-darwin-arm64": "0.1.1"
+    "@einsia/agent-git-linux-x64": "0.2.0",
+    "@einsia/agent-git-linux-arm64": "0.2.0",
+    "@einsia/agent-git-darwin-x64": "0.2.0",
+    "@einsia/agent-git-darwin-arm64": "0.2.0",
+    "@einsia/agent-git-win32-x64": "0.2.0"
   }
 }