@einsia/agent-git 0.2.24 → 0.2.26

package/CHANGELOG.md

@@ -8,6 +8,78 @@ its [GitHub Release](https://github.com/Einsia/agent-git/releases), and the
 
 ## [Unreleased]
 
+## [0.2.26] - 2026-10-25
+
+### Fixed
+
+- The first push of a newly imported session no longer fails with `HTTP 422 provenance_rejected:
+  refs/heads/publication: session/meta.json unreadable (cwd is empty)`. Since 0.2.25 publishes new
+  sessions in plain mode, the Hub verifies every commit of the branch, including the commit that
+  claims it, and that commit recorded an empty working directory. A branch claimed by 0.2.25 keeps
+  its empty claim and still cannot be pushed; import the session into a new branch instead.
+
+## [0.2.25] - 2026-10-25
+
+### Added
+
+- `agit privacy mode OWNER/REPO@BRANCH plain` selects unencrypted publication before a session's
+  first remote registration. The choice follows the logical session across branches, keeps source
+  history unchanged, and is separate from repository visibility. Use `encrypted` to opt into
+  encryption before registration, or omit the mode to inspect the local choice and registered mode.
+
+- `agit privacy policy tool [NAME] --omit true|false` controls calls and results together, with
+  exact tool-name and runtime-qualified overrides. `--reset` removes a named override.
+- `agit privacy policy attachment omit|metadata|original` controls recorded attachments in
+  encrypted public views, privacy exports and shares. Plain push retains its existing path.
+
+### Changed
+
+- New sessions, first imports and independent forks default to plain publication again.
+  0.2.24 created them with encrypted publication by default, which its release notes did not
+  mention. Existing recorded and registered modes are preserved, including those of sessions
+  0.2.24 created. Select `privacy mode OWNER/REPO@BRANCH encrypted` before registration to
+  enable encryption.
+- Privacy projections default to visible tools and original attachments, including when an
+  existing policy omits the new fields. Configure omission explicitly to hide them. Captured
+  file-tool content no longer requires a workspace/include match; explicit and mandatory file
+  exclusions remain effective. Readable text remains sanitized; recorded binary carriers are retained.
+
+### Fixed
+
+- A privacy dictionary upload that the Hub, or a network policy in front of it, refuses is no
+  longer sent again on every push, fetch, clone and login. agit retries it after a delay that
+  starts at 10 minutes and grows to 6 hours, and keeps downloading dictionaries from other
+  devices meanwhile. `agit push` and `agit doctor` say whether a network policy or the Hub
+  refused it; `agit login` retries at once.
+
+- Publication notices distinguish configured hiding, attachment handling, unsupported formats
+  and unverifiable sources. Omitted tools preserve call/result classification instead of opening
+  user turns, and activity summaries exclude both legacy and specific omission notices.
+
+- Encrypted publication restores originals against a frozen dictionary across all batches and
+  resolves evidence references independently of LOG order. Repeated events no longer fail with
+  "hydration has ambiguous evidence provenance" after partial foreground hydration or forward
+  evidence references; unavailable mappings stop preparation before upload.
+
+- Raise the sanitized public projection budget to 64 MiB to match the private ciphertext budget,
+  so large session displays can be published alongside their encrypted originals. The complete
+  envelope remains bounded to 128 MiB.
+
+- `agit push` previews session branches with a long plain history instead of failing with
+  "plain preview exceeds its content budget", and prepares them substantially faster. The
+  preview shows each distinct file version once and an append-only file as the bytes it adds.
+- After a macOS restart, `agit rc status`, `agit upgrade` and daemon startup
+  recognize the control socket a stopped daemon left behind and reclaim it,
+  instead of asking for a manual `agit rc local recover`.
+- Loading earlier messages of a remote conversation whose saved archive could not
+  be applied no longer fails as an expired history snapshot; the page kept
+  spinning on "Loading the latest conversation" while it retried.
+- A conversation taken over from a registered runtime source keeps the name the
+  device shows for it, instead of appearing as an untitled session in its
+  project.
+- Encrypted publication preserves Git authors, committers, timestamps, message encoding and
+  commit messages. Existing published snapshots remain compatible when history continues.
+
 ## [0.2.24] - 2026-10-21
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@einsia/agent-git",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "description": "Version control for agent sessions — the agit CLI plus skills/hooks/MCP wiring for Claude Code, Codex, OpenCode and Cursor. The AgentGit hub deploys separately.",
   "keywords": [
     "agit",
@@ -49,10 +49,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@einsia/agent-git-linux-x64": "0.2.24",
-    "@einsia/agent-git-linux-arm64": "0.2.24",
-    "@einsia/agent-git-darwin-x64": "0.2.24",
-    "@einsia/agent-git-darwin-arm64": "0.2.24",
-    "@einsia/agent-git-win32-x64": "0.2.24"
+    "@einsia/agent-git-linux-x64": "0.2.26",
+    "@einsia/agent-git-linux-arm64": "0.2.26",
+    "@einsia/agent-git-darwin-x64": "0.2.26",
+    "@einsia/agent-git-darwin-arm64": "0.2.26",
+    "@einsia/agent-git-win32-x64": "0.2.26"
   }
 }