@einsia/agent-git 0.1.2 → 0.2.0

package/CHANGELOG.md

@@ -6,6 +6,61 @@ Every notable change to agit, the AgentGit CLI, by release. The format follows
 its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 `@einsia/agent-git` npm package ships this file.
 
+## [0.2.0] - 2026-09-16
+
+### Added
+
+- **Daemon peers and Cloud tunnels.** `agitd` manages local harness sessions while
+  independent SSH or Cloud tunnel workers transport peer messages. Controllers can
+  discover and operate sessions on another executor through the same peer protocol.
+  Peer hosting is available on Linux and macOS. Cloud connections require a Hub
+  with peer relay support enabled.
+- **Independent control and inbound access.** A local controller can connect to
+  another device while its own inbound access stays disabled. Cloud admission and
+  executor session permissions are enforced separately. Adapters can constrain
+  requests to a lower role, enforced by the executor when a queued write runs.
+- **More native conversation sources.** Discover and import OpenClaw, Hermes and
+  WorkBuddy sessions, with runtime-specific setup and transcript handling.
+- **Large session files.** Stage binary deliverables with `agit file add --lfs`;
+  verify payloads during upload and download before publishing or materializing them.
+- **Local and scoped search.** Search saved local history without Hub requests, or
+  limit remote session searches to an organization or the current code origin.
+- **Optional automatic publishing.** Configure `push.auto` per user or repository
+  to publish settled turns, while keeping explicit publication available.
+- **Usage statistics controls.** Inspect collection with `agit telemetry`, disable
+  it with `agit telemetry disable` or `DO_NOT_TRACK=1`, and preview the field policy.
+  Setup discloses the default-on choice; a recorded opt-out is preserved. See the
+  [collection and privacy details](docs/telemetry.md).
+
+### Changed
+
+- **Use `agit run` for saved sources.** `agit open` is removed. Update scripts to
+  use `agit run owner/repo@ref`; `agit resume` still continues a selected session.
+- Review a frozen publication in an interactive agent before pushing, including
+  explicit handling of credential findings.
+- Status includes bounded native session details, shared files, merge progress and
+  project metadata without unbounded transcript scans.
+- Interactive startup can offer to install an available update after confirmation.
+  Non-interactive update notices go to stderr and preserve JSON output.
+- Repository secret dictionaries keep their encryption keys in local Git metadata,
+  avoiding repeated Keychain prompts after migration. Neither the dictionary nor
+  its key is uploaded by push.
+
+### Fixed
+
+- Recover from expired CLI credentials and retry browser sign-in choices without
+  losing the selected Hub or repository.
+- Keep session discovery and native watch preparation responsive, hide internal
+  runtime sessions, and preserve transcript identity across polling and replay.
+- Correlate canonical Codex user history and prevent duplicate Claude prompts.
+- Preserve native Codex session titles and recover remote session history reliably.
+- Keep controller requests, tunnel failures and harness failures within their
+  ownership boundaries, with bounded queues and diagnostic logs for recovery.
+- Support Hub SOCKS proxies and preserve Windows browser launch, process ownership
+  and named-pipe behavior.
+- Scope installed AgentGit skills to explicit session operations and retire legacy
+  home-directory instructions without replacing unrelated user content.
+
 ## [0.1.2] - 2026-09-12
 
 ### Added
@@ -107,6 +162,7 @@ First public release.
   per-platform packages for Linux and macOS on x64 and arm64, and GitHub Release
   artifacts with `SHA256SUMS`.
 
+[0.2.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.2.0
 [0.1.2]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.2
 [0.1.1]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.1
 [0.1.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.0

package/README.md

@@ -18,13 +18,12 @@ agit import                       choose an existing runtime conversation to ado
 agit log                          choose a session and browse its history
 agit push                         choose a saved session to publish
 agit share                        choose a session and review link settings
-agit open owner/repo@ref           open a saved source, forking when needed
+agit run owner/repo@ref           open a saved source, forking when needed
 ```
 
 These bare commands open their interfaces in a human terminal. `agit resume`
-continues the same session and never forks; `agit open` can start a new writable
-session from a tag, historical point or another author's source. `agit run`
-remains a compatibility alias for `open`.
+continues the same session and never forks; `agit run` can start a new writable
+session from a tag, historical point or another author's source.
 
 Inside an adopted agent session, `agit commit` saves completed turns and
 `agit push` publishes that session. For scripts, pass the target explicitly,
@@ -47,7 +46,7 @@ Inspecting lineage in an existing repository requires NUL-framed Git worktree ou
 normally available in Git 2.36 or newer. An unsupported Git reports `git_worktree_format`;
 explicit `--onto`, `--independent`, and `--link-only` imports retain their ordinary checks.
 
-`agit clone` fetches repository history locally. Use `agit open` or `agit resume`
+`agit clone` fetches repository history locally. Use `agit run` or `agit resume`
 to start a runtime. A clone is **read-only by default** on the Hub: nothing is
 created in your name and `origin` points at the source. `agit clone --mine`
 creates your copy, repoints `origin` and remembers the source as `upstream`.
@@ -161,10 +160,15 @@ The section becomes the GitHub Release body (`scripts/release-notes.mjs` extract
 `release.yml`, with repository-relative links pinned to the release tag) and ships inside
 the `@einsia/agent-git` package.
 
-Pushing the tag runs the whole chain — binaries first, npm right after:
+After the source release commit passes CI and is synchronized to GitHub `main`,
+verify the mirrored files and create the tag in that GitHub checkout. The mirror
+rewrites commit IDs, so the source repository's SHA is not the release SHA.
+Pushing the tag to GitHub runs the whole chain — binaries first, npm right after:
 
 ```sh
-git tag agit-v0.1.0 && git push origin agit-v0.1.0   # release.yml builds, smoke-tests, attaches artifacts
+# Run from the verified Einsia/agent-git GitHub mirror checkout.
+git tag agit-v0.1.0
+git push git@github.com:Einsia/agent-git.git refs/tags/agit-v0.1.0
 ```
 
 Distribution to users runs through the npm registry: each target ships as a

package/npm/lib/run.js

@@ -37,7 +37,10 @@ function run() {
     process.exit(127);
   }
 
-  const r = spawnSync(bin, process.argv.slice(2), { stdio: 'inherit' });
+  const r = spawnSync(bin, process.argv.slice(2), {
+    stdio: 'inherit',
+    env: { ...process.env, AGIT_INSTALL_CHANNEL: 'npm_global' },
+  });
   if (r.error) {
     log.error(`failed to start ${bin}: ${r.error.message}`);
     process.exit(1);

package/npm/postinstall.js

@@ -42,15 +42,25 @@ function main() {
   }
   if (!bin) return; // unsupported platform: the shim gives full instructions on the next command.
 
-  const check = spawnSync(bin, ['--version'], { encoding: 'utf8' });
+  const env = { ...process.env, AGIT_TELEMETRY_DEFER: '1', AGIT_INSTALL_CHANNEL: 'npm_global' };
+  const check = spawnSync(bin, ['--version'], { encoding: 'utf8', env });
   if (check.error || check.status !== 0) {
     log.warn(`installed binary does not run: ${bin}`);
     log.warn((check.stderr || check.error?.message || `exit ${check.status}`).trim());
     return;
   }
 
+  // npx create-agit owns its durable-copy receipt and passes the browser acquisition key.
+  if (process.env.npm_command !== 'exec') {
+    const receiptArgs = ['--internal-install-completed'];
+    if (!truthy(process.env.npm_config_foreground_scripts)) receiptArgs.push('--defer-notice');
+    spawnSync(bin, receiptArgs, {
+      stdio: ['ignore', 'inherit', 'inherit'],
+      env: { ...process.env, AGIT_INSTALL_CHANNEL: 'npm_global' },
+    });
+  }
   if (truthy(process.env.AGIT_SKIP_SETUP)) return;
-  const setup = spawnSync(bin, ['setup'], { stdio: 'inherit' });
+  const setup = spawnSync(bin, ['setup'], { stdio: 'inherit', env });
   if (setup.status !== 0) {
     log.warn('`agit setup` did not fully succeed — re-run it any time; the CLI itself is installed.');
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,10 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.1.2",
-    "@einsia/agent-git-linux-arm64": "0.1.2",
-    "@einsia/agent-git-darwin-x64": "0.1.2",
-    "@einsia/agent-git-darwin-arm64": "0.1.2",
-    "@einsia/agent-git-win32-x64": "0.1.2"
+    "@einsia/agent-git-linux-x64": "0.2.0",
+    "@einsia/agent-git-linux-arm64": "0.2.0",
+    "@einsia/agent-git-darwin-x64": "0.2.0",
+    "@einsia/agent-git-darwin-arm64": "0.2.0",
+    "@einsia/agent-git-win32-x64": "0.2.0"
   }
 }