@einsia/agent-git 0.2.0 → 0.2.2

package/CHANGELOG.md

@@ -6,6 +6,81 @@ Every notable change to agit, the AgentGit CLI, by release. The format follows
 its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 `@einsia/agent-git` npm package ships this file.
 
+## [0.2.2] - 2026-09-19
+
+### Added
+
+- **Shared workspace controllers.** Accept project- and session-scoped authority
+  from the Hub controller, so collaborators can operate a shared session without
+  separate device grants. This requires a Hub with shared controller support;
+  personal peer/Cloud connections retain their existing protocol.
+- Expose native model and reasoning-effort controls through peer remote control.
+- Protect detected secrets automatically with reversible, repository-local
+  placeholders before saving or publishing session content.
+
+### Changed
+
+- Keep native controls responsive while prepared settlement completes, reuse
+  healthy session worktrees and Hub connections, and replace repeated Git child
+  processes with bounded local object reads.
+- Start tunnel transport independently of repository storage and overlap Cloud
+  admission and peer setup to reduce connection overhead.
+- Official Hub usage requires usage statistics; installation attempts and stages
+  are included in the documented collection policy. Other Hubs retain their
+  opt-out controls. See [usage statistics](docs/telemetry.md).
+
+### Fixed
+
+- Keep shared native subscriptions attached to controller authority, isolate each
+  viewer's replay, and suppress duplicate events on Cloud utility routes.
+- Preserve early session events, uncertain command receipt identities, native
+  titles, and saved session identities outside the active catalog.
+- Correct Windows path component handling and directory navigation.
+- Distinguish stale daemon records from reused process IDs, recover stopped
+  daemons after upgrades, and enforce private state permissions under permissive
+  umasks.
+- Preserve fresh native history during model reads and settlement without
+  blocking read-only controls on repository metadata work.
+
+## [0.2.1] - 2026-09-17
+
+### Added
+
+- **Native Windows peer remote control.** Windows supports the same controller,
+  executor and Cloud tunnel protocol as Linux and macOS, using a current-user
+  named pipe for local owner RPC.
+- **Bundled Git and Git LFS.** Official distribution binaries include their Git
+  runtime, so session version control does not require a separate Git installation.
+
+### Changed
+
+- **Owner-only Cloud access by default.** Run `agit login`, then
+  `agit rc start --detach`. Startup registers the device and enables remote control
+  for the signed-in owner, without a separate enrollment command. Use the same Hub
+  account in Web Workspaces or the desktop app. This does not grant public access.
+- **Remove the paired RC transport.** Startup and device management use peer/Cloud
+  only. Users of the paired default in 0.2.0 must upgrade; the existing Linux 0.2.0
+  peer/Cloud protocol remains supported. Server retirement follows verification of
+  the new Windows and Linux release artifacts.
+- Reuse Cloud HTTP connections, overlap admission checks with tunnel setup, and
+  race resolved TCP addresses to avoid waiting on a slow address before trying another.
+- Reduce repeated repository checks and keep repository preparation and background
+  metadata work off the native session command loop. Record startup phase timings
+  without logging prompt contents.
+
+### Fixed
+
+- Prevent detached Windows daemon helpers from opening console windows; release
+  inherited caller pipes when starting in the background.
+- Preserve tunnel failure details and renew Cloud authority without repeatedly
+  reconnecting healthy idle sessions.
+- Recover a revoked device registration when its owner explicitly starts RC again;
+  background reconnects do not undo revocation.
+- Read history and goals from fresh Codex sessions before a transcript file exists,
+  and isolate history readers from snapshot capture and session control.
+- Preserve native history identity and snapshot consistency, and protect generated
+  session observations with repository secret rules before settlement.
+
 ## [0.2.0] - 2026-09-16
 
 ### Added
@@ -162,6 +237,7 @@ First public release.
   per-platform packages for Linux and macOS on x64 and arm64, and GitHub Release
   artifacts with `SHA256SUMS`.
 
+[0.2.1]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.2.1
 [0.2.0]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.2.0
 [0.1.2]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.2
 [0.1.1]: https://github.com/Einsia/agent-git/releases/tag/agit-v0.1.1

package/README.md

@@ -69,9 +69,10 @@ picks the platform sub-package matching your `os`/`cpu`; on platforms with no
 prebuilt binary (e.g. FreeBSD) running `agit` prints the source-build recipe.
 Details and environment variables: [`npm/README.md`](npm/README.md).
 
-Windows x64 packages include the local RC daemon. Its control channel uses a local named
-pipe restricted to the current Windows user. RC state requires a private, user-owned
-directory; shared or redirected RC paths are rejected.
+Windows x64 packages include the native peer RC daemon. On Windows, Linux and macOS, run
+`agit login` followed by `agit rc start --detach` to register the device and allow your own
+account to control it from Workspaces. Windows owner RPC uses a local named pipe restricted
+to the current user. RC state requires a private, user-owned directory.
 
 pnpm (v10+) does not run dependency install scripts by default, so the
 automatic `agit setup` is skipped there — run `agit setup` once yourself
@@ -81,8 +82,10 @@ The Linux artifact is **musl static-linked**, so no minimum glibc — the
 release pipeline runs every Linux binary inside an Alpine / Amazon Linux /
 Debian / Ubuntu container matrix before publishing.
 
-You also need **git >= 2.28** (repo init uses `git init --initial-branch`).
-Ubuntu 20.04 ships 2.25 — the installer prints a warning.
+Prebuilt binaries include Git and Git LFS, extracted into a private cache on first
+use. Your shell PATH and global Git configuration stay unchanged. Source builds
+use system Git; `AGIT_USE_SYSTEM_GIT=1` selects it in a prebuilt binary too.
+See [runtime configuration and source prerequisites](docs/01_setup.md).
 
 > Do not install `@einsia/agentgit` (no hyphen) — that is the pre-rewrite
 > CLI; its protocol does not match this branch and it will not work.
@@ -160,16 +163,15 @@ The section becomes the GitHub Release body (`scripts/release-notes.mjs` extract
 `release.yml`, with repository-relative links pinned to the release tag) and ships inside
 the `@einsia/agent-git` package.
 
-After the source release commit passes CI and is synchronized to GitHub `main`,
-verify the mirrored files and create the tag in that GitHub checkout. The mirror
-rewrites commit IDs, so the source repository's SHA is not the release SHA.
-Pushing the tag to GitHub runs the whole chain — binaries first, npm right after:
+After the source release commit passes CI, merge it into GitLab `main`. Wait for
+that pipeline's development builds and `mirror:github`, then run its manual
+`release:github-tag` job. CI verifies the recorded source-to-mirror mapping and
+creates `agit-v<version>` on the public mirror commit. Release tags are immutable;
+a stale pipeline cannot publish after either `main` moves.
 
-```sh
-# Run from the verified Einsia/agent-git GitHub mirror checkout.
-git tag agit-v0.1.0
-git push git@github.com:Einsia/agent-git.git refs/tags/agit-v0.1.0
-```
+The mirror rewrites commit IDs, so the source SHA is not the release SHA. Do not
+push release tags directly to GitHub. The CI-created tag starts the GitHub Release
+workflow, which builds the binaries and then triggers npm publication.
 
 Distribution to users runs through the npm registry: each target ships as a
 platform sub-package (`@einsia/agent-git-linux-x64` and friends, gated by

package/npm/README.md

@@ -26,6 +26,13 @@ the platform sub-package matching your `os`/`cpu` via `optionalDependencies`
 that execs that binary with argv/stdio/exit-code forwarded, and `postinstall`
 runs `agit setup` once to wire skills, hooks, MCP and AGENTS.md.
 
+The executable contains Git and Git LFS. On first use it extracts them under
+`$AGIT_HOME/git-runtime` (default `~/.agit/git-runtime`), with no runtime download.
+Only AgentGit's child processes use that private runtime; your shell PATH and
+global Git configuration are unchanged. Copying or upgrading the single executable
+also carries its Git runtime. External credential helpers and extensions may still
+need your local tools; `AGIT_USE_SYSTEM_GIT=1` uses your system Git installation.
+
 pnpm (v10+) blocks dependency install scripts unless approved, so under pnpm
 the automatic `agit setup` does not run — run it once yourself after
 installing (or `pnpm approve-builds -g` and reinstall).
@@ -68,6 +75,7 @@ Unsupported operating system and architecture pairs get no prebuilt binary: runn
 | `AGIT_FORCE_INSTALL` | Also run postinstall inside the source checkout (CI smoke tests). |
 | `AGIT_HUB_URL`   | Point the CLI at another hub (default `https://agent-git.com`).  |
 | `AGIT_NPM_REGISTRY` | Registry `agit upgrade` downloads platform packages from.        |
+| `AGIT_USE_SYSTEM_GIT` | Set to `1` to use system Git and Git LFS instead of the bundled runtime. |
 
 ## Upgrading
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,10 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.2.0",
-    "@einsia/agent-git-linux-arm64": "0.2.0",
-    "@einsia/agent-git-darwin-x64": "0.2.0",
-    "@einsia/agent-git-darwin-arm64": "0.2.0",
-    "@einsia/agent-git-win32-x64": "0.2.0"
+    "@einsia/agent-git-linux-x64": "0.2.2",
+    "@einsia/agent-git-linux-arm64": "0.2.2",
+    "@einsia/agent-git-darwin-x64": "0.2.2",
+    "@einsia/agent-git-darwin-arm64": "0.2.2",
+    "@einsia/agent-git-win32-x64": "0.2.2"
   }
 }