@einsia/agent-git 0.1.2 → 0.2.1

package/CHANGELOG.md

@@ -6,6 +6,100 @@ Every notable change to agit, the AgentGit CLI, by release. The format follows
 its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 `@einsia/agent-git` npm package ships this file.
 
+## [0.2.1] - 2026-09-17
+
+### Added
+
+- **Native Windows peer remote control.** Windows supports the same controller,
+  executor and Cloud tunnel protocol as Linux and macOS, using a current-user
+  named pipe for local owner RPC.
+- **Bundled Git and Git LFS.** Official distribution binaries include their Git
+  runtime, so session version control does not require a separate Git installation.
+
+### Changed
+
+- **Owner-only Cloud access by default.** Run `agit login`, then
+  `agit rc start --detach`. Startup registers the device and enables remote control
+  for the signed-in owner, without a separate enrollment command. Use the same Hub
+  account in Web Workspaces or the desktop app. This does not grant public access.
+- **Remove the paired RC transport.** Startup and device management use peer/Cloud
+  only. Users of the paired default in 0.2.0 must upgrade; the existing Linux 0.2.0
+  peer/Cloud protocol remains supported. Server retirement follows verification of
+  the new Windows and Linux release artifacts.
+- Reuse Cloud HTTP connections, overlap admission checks with tunnel setup, and
+  race resolved TCP addresses to avoid waiting on a slow address before trying another.
+- Reduce repeated repository checks and keep repository preparation and background
+  metadata work off the native session command loop. Record startup phase timings
+  without logging prompt contents.
+
+### Fixed
+
+- Prevent detached Windows daemon helpers from opening console windows; release
+  inherited caller pipes when starting in the background.
+- Preserve tunnel failure details and renew Cloud authority without repeatedly
+  reconnecting healthy idle sessions.
+- Recover a revoked device registration when its owner explicitly starts RC again;
+  background reconnects do not undo revocation.
+- Read history and goals from fresh Codex sessions before a transcript file exists,
+  and isolate history readers from snapshot capture and session control.
+- Preserve native history identity and snapshot consistency, and protect generated
+  session observations with repository secret rules before settlement.
+
+## [0.2.0] - 2026-09-16
+
+### Added
+
+- **Daemon peers and Cloud tunnels.** `agitd` manages local harness sessions while
+  independent SSH or Cloud tunnel workers transport peer messages. Controllers can
+  discover and operate sessions on another executor through the same peer protocol.
+  Peer hosting is available on Linux and macOS. Cloud connections require a Hub
+  with peer relay support enabled.
+- **Independent control and inbound access.** A local controller can connect to
+  another device while its own inbound access stays disabled. Cloud admission and
+  executor session permissions are enforced separately. Adapters can constrain
+  requests to a lower role, enforced by the executor when a queued write runs.
+- **More native conversation sources.** Discover and import OpenClaw, Hermes and
+  WorkBuddy sessions, with runtime-specific setup and transcript handling.
+- **Large session files.** Stage binary deliverables with `agit file add --lfs`;
+  verify payloads during upload and download before publishing or materializing them.
+- **Local and scoped search.** Search saved local history without Hub requests, or
+  limit remote session searches to an organization or the current code origin.
+- **Optional automatic publishing.** Configure `push.auto` per user or repository
+  to publish settled turns, while keeping explicit publication available.
+- **Usage statistics controls.** Inspect collection with `agit telemetry`, disable
+  it with `agit telemetry disable` or `DO_NOT_TRACK=1`, and preview the field policy.
+  Setup discloses the default-on choice; a recorded opt-out is preserved. See the
+  [collection and privacy details](docs/telemetry.md).
+
+### Changed
+
+- **Use `agit run` for saved sources.** `agit open` is removed. Update scripts to
+  use `agit run owner/repo@ref`; `agit resume` still continues a selected session.
+- Review a frozen publication in an interactive agent before pushing, including
+  explicit handling of credential findings.
+- Status includes bounded native session details, shared files, merge progress and
+  project metadata without unbounded transcript scans.
+- Interactive startup can offer to install an available update after confirmation.
+  Non-interactive update notices go to stderr and preserve JSON output.
+- Repository secret dictionaries keep their encryption keys in local Git metadata,
+  avoiding repeated Keychain prompts after migration. Neither the dictionary nor
+  its key is uploaded by push.
+
+### Fixed
+
+- Recover from expired CLI credentials and retry browser sign-in choices without
+  losing the selected Hub or repository.
+- Keep session discovery and native watch preparation responsive, hide internal
+  runtime sessions, and preserve transcript identity across polling and replay.
+- Correlate canonical Codex user history and prevent duplicate Claude prompts.
+- Preserve native Codex session titles and recover remote session history reliably.
+- Keep controller requests, tunnel failures and harness failures within their
+  ownership boundaries, with bounded queues and diagnostic logs for recovery.
+- Support Hub SOCKS proxies and preserve Windows browser launch, process ownership
+  and named-pipe behavior.
+- Scope installed AgentGit skills to explicit session operations and retire legacy
+  home-directory instructions without replacing unrelated user content.
+
 ## [0.1.2] - 2026-09-12
 
 ### Added
@@ -107,6 +201,8 @@ First public release.
   per-platform packages for Linux and macOS on x64 and arm64, and GitHub Release
   artifacts with `SHA256SUMS`.
 
+[0.2.1]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.2.1
+[0.2.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.2.0
 [0.1.2]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.2
 [0.1.1]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.1
 [0.1.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.0

package/README.md

@@ -18,13 +18,12 @@ agit import                       choose an existing runtime conversation to ado
 agit log                          choose a session and browse its history
 agit push                         choose a saved session to publish
 agit share                        choose a session and review link settings
-agit open owner/repo@ref           open a saved source, forking when needed
+agit run owner/repo@ref           open a saved source, forking when needed
 ```
 
 These bare commands open their interfaces in a human terminal. `agit resume`
-continues the same session and never forks; `agit open` can start a new writable
-session from a tag, historical point or another author's source. `agit run`
-remains a compatibility alias for `open`.
+continues the same session and never forks; `agit run` can start a new writable
+session from a tag, historical point or another author's source.
 
 Inside an adopted agent session, `agit commit` saves completed turns and
 `agit push` publishes that session. For scripts, pass the target explicitly,
@@ -47,7 +46,7 @@ Inspecting lineage in an existing repository requires NUL-framed Git worktree ou
 normally available in Git 2.36 or newer. An unsupported Git reports `git_worktree_format`;
 explicit `--onto`, `--independent`, and `--link-only` imports retain their ordinary checks.
 
-`agit clone` fetches repository history locally. Use `agit open` or `agit resume`
+`agit clone` fetches repository history locally. Use `agit run` or `agit resume`
 to start a runtime. A clone is **read-only by default** on the Hub: nothing is
 created in your name and `origin` points at the source. `agit clone --mine`
 creates your copy, repoints `origin` and remembers the source as `upstream`.
@@ -70,9 +69,10 @@ picks the platform sub-package matching your `os`/`cpu`; on platforms with no
 prebuilt binary (e.g. FreeBSD) running `agit` prints the source-build recipe.
 Details and environment variables: [`npm/README.md`](npm/README.md).
 
-Windows x64 packages include the local RC daemon. Its control channel uses a local named
-pipe restricted to the current Windows user. RC state requires a private, user-owned
-directory; shared or redirected RC paths are rejected.
+Windows x64 packages include the native peer RC daemon. On Windows, Linux and macOS, run
+`agit login` followed by `agit rc start --detach` to register the device and allow your own
+account to control it from Workspaces. Windows owner RPC uses a local named pipe restricted
+to the current user. RC state requires a private, user-owned directory.
 
 pnpm (v10+) does not run dependency install scripts by default, so the
 automatic `agit setup` is skipped there — run `agit setup` once yourself
@@ -82,8 +82,10 @@ The Linux artifact is **musl static-linked**, so no minimum glibc — the
 release pipeline runs every Linux binary inside an Alpine / Amazon Linux /
 Debian / Ubuntu container matrix before publishing.
 
-You also need **git >= 2.28** (repo init uses `git init --initial-branch`).
-Ubuntu 20.04 ships 2.25 — the installer prints a warning.
+Prebuilt binaries include Git and Git LFS, extracted into a private cache on first
+use. Your shell PATH and global Git configuration stay unchanged. Source builds
+use system Git; `AGIT_USE_SYSTEM_GIT=1` selects it in a prebuilt binary too.
+See [runtime configuration and source prerequisites](docs/01_setup.md).
 
 > Do not install `@einsia/agentgit` (no hyphen) — that is the pre-rewrite
 > CLI; its protocol does not match this branch and it will not work.
@@ -161,10 +163,15 @@ The section becomes the GitHub Release body (`scripts/release-notes.mjs` extract
 `release.yml`, with repository-relative links pinned to the release tag) and ships inside
 the `@einsia/agent-git` package.
 
-Pushing the tag runs the whole chain — binaries first, npm right after:
+After the source release commit passes CI and is synchronized to GitHub `main`,
+verify the mirrored files and create the tag in that GitHub checkout. The mirror
+rewrites commit IDs, so the source repository's SHA is not the release SHA.
+Pushing the tag to GitHub runs the whole chain — binaries first, npm right after:
 
 ```sh
-git tag agit-v0.1.0 && git push origin agit-v0.1.0   # release.yml builds, smoke-tests, attaches artifacts
+# Run from the verified Einsia/agent-git GitHub mirror checkout.
+git tag agit-v0.1.0
+git push git@github.com:Einsia/agent-git.git refs/tags/agit-v0.1.0
 ```
 
 Distribution to users runs through the npm registry: each target ships as a

package/npm/README.md

@@ -26,6 +26,13 @@ the platform sub-package matching your `os`/`cpu` via `optionalDependencies`
 that execs that binary with argv/stdio/exit-code forwarded, and `postinstall`
 runs `agit setup` once to wire skills, hooks, MCP and AGENTS.md.
 
+The executable contains Git and Git LFS. On first use it extracts them under
+`$AGIT_HOME/git-runtime` (default `~/.agit/git-runtime`), with no runtime download.
+Only AgentGit's child processes use that private runtime; your shell PATH and
+global Git configuration are unchanged. Copying or upgrading the single executable
+also carries its Git runtime. External credential helpers and extensions may still
+need your local tools; `AGIT_USE_SYSTEM_GIT=1` uses your system Git installation.
+
 pnpm (v10+) blocks dependency install scripts unless approved, so under pnpm
 the automatic `agit setup` does not run — run it once yourself after
 installing (or `pnpm approve-builds -g` and reinstall).
@@ -68,6 +75,7 @@ Unsupported operating system and architecture pairs get no prebuilt binary: runn
 | `AGIT_FORCE_INSTALL` | Also run postinstall inside the source checkout (CI smoke tests). |
 | `AGIT_HUB_URL`   | Point the CLI at another hub (default `https://agent-git.com`).  |
 | `AGIT_NPM_REGISTRY` | Registry `agit upgrade` downloads platform packages from.        |
+| `AGIT_USE_SYSTEM_GIT` | Set to `1` to use system Git and Git LFS instead of the bundled runtime. |
 
 ## Upgrading
 

package/npm/lib/run.js

@@ -37,7 +37,10 @@ function run() {
     process.exit(127);
   }
 
-  const r = spawnSync(bin, process.argv.slice(2), { stdio: 'inherit' });
+  const r = spawnSync(bin, process.argv.slice(2), {
+    stdio: 'inherit',
+    env: { ...process.env, AGIT_INSTALL_CHANNEL: 'npm_global' },
+  });
   if (r.error) {
     log.error(`failed to start ${bin}: ${r.error.message}`);
     process.exit(1);

package/npm/postinstall.js

@@ -42,15 +42,25 @@ function main() {
   }
   if (!bin) return; // unsupported platform: the shim gives full instructions on the next command.
 
-  const check = spawnSync(bin, ['--version'], { encoding: 'utf8' });
+  const env = { ...process.env, AGIT_TELEMETRY_DEFER: '1', AGIT_INSTALL_CHANNEL: 'npm_global' };
+  const check = spawnSync(bin, ['--version'], { encoding: 'utf8', env });
   if (check.error || check.status !== 0) {
     log.warn(`installed binary does not run: ${bin}`);
     log.warn((check.stderr || check.error?.message || `exit ${check.status}`).trim());
     return;
   }
 
+  // npx create-agit owns its durable-copy receipt and passes the browser acquisition key.
+  if (process.env.npm_command !== 'exec') {
+    const receiptArgs = ['--internal-install-completed'];
+    if (!truthy(process.env.npm_config_foreground_scripts)) receiptArgs.push('--defer-notice');
+    spawnSync(bin, receiptArgs, {
+      stdio: ['ignore', 'inherit', 'inherit'],
+      env: { ...process.env, AGIT_INSTALL_CHANNEL: 'npm_global' },
+    });
+  }
   if (truthy(process.env.AGIT_SKIP_SETUP)) return;
-  const setup = spawnSync(bin, ['setup'], { stdio: 'inherit' });
+  const setup = spawnSync(bin, ['setup'], { stdio: 'inherit', env });
   if (setup.status !== 0) {
     log.warn('`agit setup` did not fully succeed — re-run it any time; the CLI itself is installed.');
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,10 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.1.2",
-    "@einsia/agent-git-linux-arm64": "0.1.2",
-    "@einsia/agent-git-darwin-x64": "0.1.2",
-    "@einsia/agent-git-darwin-arm64": "0.1.2",
-    "@einsia/agent-git-win32-x64": "0.1.2"
+    "@einsia/agent-git-linux-x64": "0.2.1",
+    "@einsia/agent-git-linux-arm64": "0.2.1",
+    "@einsia/agent-git-darwin-x64": "0.2.1",
+    "@einsia/agent-git-darwin-arm64": "0.2.1",
+    "@einsia/agent-git-win32-x64": "0.2.1"
   }
 }