@einsia/agent-git 0.2.15 → 0.2.17

package/CHANGELOG.md

@@ -8,6 +8,93 @@ its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 
 ## [Unreleased]
 
+## [0.2.17] - 2026-10-02
+
+### Added
+
+- Remote control on the web can send messages into a Claude Code session that is
+  running in another process, such as the Claude desktop app or the `claude` CLI,
+  through Claude Code's cross-session messaging (Claude Code 2.1.224 or later). The
+  running session stays the only writer of its transcript: a message sent during a
+  turn is read between tool calls, and an idle session starts a new turn with it.
+  In bypass-permissions mode, the device owner's messages go through a relay that
+  agit's Claude Code Stop hook (installed by `agit setup`) starts once a turn ends
+  in that mode; Claude Code holds everyone else's messages, and the owner's while
+  no relay runs, for approval on the machine. Only a workspace owner may send
+  messages to a session whose transcript shows it has ever run in
+  bypass-permissions mode, or records no permission mode at all.
+
+### Fixed
+
+- `agit push <owner/repo@branch> --to <existing repository>` (and `agit project sync`
+  copies of sessions claimed elsewhere) no longer push the source repository's
+  `main` file line. The destination keeps its own `main`; before, the copy failed
+  as a rejected non-fast-forward, or fast-forwarded the destination's shared files
+  to the source's. A destination the push creates still receives the source's `main`.
+- A Claude Code prompt whose record starts with a runtime-injected block, such as the
+  worktree reminder the desktop app puts ahead of a session's first message, is
+  kept as the turn's prompt instead of being dropped with the injection, whether
+  the reminder is a separate text block or leads the same string. Such a session
+  lost its opening prompt, and one with a single prompt had no turn to save or
+  upload.
+- Remote control publishes a turn that finished while the device's sign-in had
+  lapsed as soon as authentication recovers, instead of waiting for the next turn.
+- Opening a device from the web no longer stalls when the device's first discovery
+  reply is lost: the controller retries the read-only discovery once.
+
+## [0.2.16] - 2026-10-02
+
+### Added
+
+- Each settled commit records the runtime's own name for the session in
+  `session/meta.json` as `title`: the latest Claude Code title (`custom-title`,
+  falling back to an older transcript's `summary`) or the Codex thread name from
+  `session_index.jsonl`. A rename appears from the next settlement on. The
+  `agit: unnamed` and `agit <owner/repo@branch>` placeholders that agit's own
+  SessionStart hook assigns are not recorded. The title is protected like other
+  metadata observations and is not part of encrypted metadata projection.
+
+### Changed
+
+- Privacy processing runs in a bounded local worker. Detected secrets receive
+  reversible placeholders when their originals can be saved. Incomplete scans
+  keep completed replacements; unavailable storage, scan failures and timeouts
+  skip the affected privacy work and let conversation operations continue.
+- Signed-in accounts obtain an automatically generated cloud dictionary key.
+  Without a usable key, mappings remain in private local pending storage. Push,
+  login and fetch schedule encrypted dictionary synchronization independently;
+  another signed-in device can restore mappings after synchronization succeeds.
+- Local default, global user and repository user rules share one policy path.
+  Explicit blocks override allows, and allows override heuristic findings.
+  Recovery records survive rule changes without becoming permanent block rules.
+- Uploads require no secret-finding review or cloud privacy-policy resolution.
+  Existing Git history is preserved. LFS payloads are outside privacy processing;
+  their authorization, availability and integrity checks remain in place.
+- This release requires the matching backend update to remove older server
+  privacy gates. A skipped local transformation may retain original sensitive
+  content, and pending dictionaries become recoverable on other devices only
+  after successful encrypted synchronization.
+
+- Project Stop hooks start session uploads in a background process and return
+  immediately. Project status reports the resulting upload state.
+
+### Fixed
+
+- Automatic project binding installs hooks for available runtimes that support
+  them; other runtime sessions remain publishable through project sync.
+
+- Live output preserves every emitted fragment and the remaining stream tail
+  when local privacy processing is unavailable.
+- Legacy native message identifiers stored as secret placeholders can be restored
+  without changing unmasked carrier identities.
+
+- `agit project sync` publishes a session that another repository already claims, such
+  as one started from a desktop RC project, as a separate copy of that claim's branch
+  in the project repository, instead of failing with "session already belongs to another
+  repository". The original claim and the RC project's own publication target are
+  unchanged; each later sync refreshes the copy. `--history none` keeps excluding such
+  earlier sessions.
+
 ## [0.2.15] - 2026-10-01
 
 ### Changed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.2.15",
+  "version": "0.2.17",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,10 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.2.15",
-    "@einsia/agent-git-linux-arm64": "0.2.15",
-    "@einsia/agent-git-darwin-x64": "0.2.15",
-    "@einsia/agent-git-darwin-arm64": "0.2.15",
-    "@einsia/agent-git-win32-x64": "0.2.15"
+    "@einsia/agent-git-linux-x64": "0.2.17",
+    "@einsia/agent-git-linux-arm64": "0.2.17",
+    "@einsia/agent-git-darwin-x64": "0.2.17",
+    "@einsia/agent-git-darwin-arm64": "0.2.17",
+    "@einsia/agent-git-win32-x64": "0.2.17"
   }
 }