@einsia/agent-git 0.2.20 → 0.2.24

package/CHANGELOG.md

@@ -8,6 +8,114 @@ its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 
 ## [Unreleased]
 
+## [0.2.24] - 2026-10-21
+
+### Added
+
+- `agit activity` and its MCP tool query a person's saved user and assistant messages
+  over an explicit time range, with optional session selection and JSON pagination.
+  Results are grouped by saved commit, oldest first, and a cursor keeps working while
+  new work is saved. Existing clones are fetched once per query and read locally;
+  other repositories are queried on the Hub without cloning. Encrypted publications
+  use accepted account attribution and publication time, and incompleteness is
+  reported for the whole query. `--assistant last` keeps every user message but only the
+  final assistant reply to each. Requires a Hub supporting activity schema version 3.
+
+### Fixed
+
+- The bundled Linux Git runtime uses the current Alpine builds of expat, c-ares
+  and the CA bundle; the previous builds are no longer published, so release
+  builds could not assemble the runtime.
+- Remote control opens Codex conversations that have been idle long enough for
+  Codex to compress their transcript, and conversations Codex continued in a
+  new transcript segment. Such conversations stayed on "Restoring
+  conversation", returned history errors, and never archived their turns.
+  Restoring a compressed transcript no longer pauses other conversations on the
+  machine.
+- A failed or timed-out remote resume releases the conversation once its
+  processes have exited, instead of keeping it busy until the daemon restarts.
+  A capture binding that cannot be resolved no longer blocks control: the
+  conversation runs, and its turns archive once the binding resolves again.
+- Re-registering a runtime source, or upgrading or removing the Codex program it
+  was registered with, keeps existing conversations controllable and their
+  captures valid.
+- Busy and refusal errors say whether they clear on their own, so clients retry
+  passing conditions silently and show the ones that need a person. A refused
+  cloud connection is answered with its reason instead of being dropped, and
+  subscribing to a paused conversation reports that it needs a resume.
+- Opening history no longer copies the transcript and no longer fails while the
+  runtime is writing to it. Identical history requests share one read, and
+  history of a conversation whose folder was removed stays readable.
+- Archive recovery backs off, parks failures that cannot succeed, and lets a
+  resume take the conversation. A conversation larger than the capture budget
+  is reported once instead of after every turn.
+- The control channel keeps a slow or lagging reader connected, stops reads
+  whose requester has left, evicts idle clients before refusing new ones, and
+  reconnects within seconds after the machine wakes from sleep. A message sent
+  again while its first delivery is in flight reports that delivery as pending
+  and is never run twice.
+- Claude Code conversations whose transcript Claude deleted, or that never
+  received a message, reopen under their own id; one whose archived turns no
+  longer have a transcript points to `agit resume`. Claude Code is found outside
+  the daemon's PATH, bypass mode is not offered where Claude refuses it as root,
+  transcript folders follow Claude's naming for long and non-BMP paths, and a
+  terminal Claude session that cannot be shared says why.
+- A failed `agit clone` suggests asking for the owner's grant only when Git
+  reports an authentication failure; any other failed transfer suggests
+  retrying and, if it fails the same way again, reporting it with the output.
+  `agit fetch <owner/repo>` likewise offers the grant hint only when the Hub
+  refuses access. A reader who already had access was sent to check
+  collaborator grants after an interrupted transfer.
+- `agit project bind --history all`, its `--dry-run` preview and `agit project sync`
+  include Claude Code conversations that open with a large prompt, such as a pasted
+  screenshot, instead of silently leaving them out of the project.
+- `agit project bind --dry-run` refuses a directory that is already bound to
+  another repository, as the bind itself does, instead of previewing a bind that
+  would fail.
+
+## [0.2.22] - 2026-10-07
+
+### Added
+
+- Remote control can attach to a supported native Claude Code conversation so
+  multiple clients can send and steer messages, answer tool approvals and
+  questions, stop the current turn, and change supported models while the native
+  process remains the only transcript writer. The integration is installed by
+  daemon startup and setup. A native process started before installation may
+  need `/reload-plugins` before it accepts remote controls.
+- Fresh native Claude conversations accept remote attachment before their first
+  message. Native tool activity, compaction, questions and supported commands
+  remain visible across reconnects. Only controls confirmed by the runtime are
+  advertised; changing an active permission mode or answering an effort
+  confirmation dialog is not supported by the native integration.
+
+### Fixed
+
+- Bursts of remote conversation events recover from the session journal without
+  closing the control connection or leaving the composer stuck restoring.
+  Operation receipts retain an independent output budget while history catches up.
+- An explicitly refused Codex resume releases its opening reservation after
+  cleanup, so subsequent attachment attempts do not remain permanently busy.
+- Pending remote input cannot block tool approval or interruption. Ordered model
+  changes, process and turn checks, and replayable receipts preserve operation
+  order without repeating a prompt or stopping a later turn after reconnecting.
+- Completed and interrupted native Claude turns are archived into ordinary Agit
+  session history. Upload recovery retains pending publication through daemon
+  replacement and waits until the complete captured prefix is published.
+- Resuming a native conversation honors the explicitly requested authorized
+  project and preserves its existing archive identity.
+- Starting private Git commands from a large resident daemon preserves private
+  file permissions without copying the daemon's memory into each child process.
+
+## [0.2.21] - 2026-10-06
+
+### Fixed
+
+- Manual milestones and runtime stop hooks preserve each completed native
+  continuation when a long-running goal reuses the same user prompt. Settlement
+  extends a retained partial turn without skipping later completions or saving
+  an already retained completion twice.
+
 ## [0.2.20] - 2026-10-06
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.2.20",
+  "version": "0.2.24",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,10 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.2.20",
-    "@einsia/agent-git-linux-arm64": "0.2.20",
-    "@einsia/agent-git-darwin-x64": "0.2.20",
-    "@einsia/agent-git-darwin-arm64": "0.2.20",
-    "@einsia/agent-git-win32-x64": "0.2.20"
+    "@einsia/agent-git-linux-x64": "0.2.24",
+    "@einsia/agent-git-linux-arm64": "0.2.24",
+    "@einsia/agent-git-darwin-x64": "0.2.24",
+    "@einsia/agent-git-darwin-arm64": "0.2.24",
+    "@einsia/agent-git-win32-x64": "0.2.24"
   }
 }