@ucsandman/legcli 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -1,7 +1,49 @@
 # Changelog
 
+## 0.9.0 (2026-09-16)
+
+- **The portable harness (`leg harness`), off by default.** A hand-off can now
+  carry the working environment with the task: the source agent's global rules
+  (imports inlined), identity, hooks, skills, subagents, slash commands, MCP
+  servers and permissions, rendered into the destination client's own files as
+  far as it can represent them, with every dropped item explained.
+  `leg harness enable` detects clients, captures, shows the plan and writes
+  only after consent; `status`, `inspect`, `check`, `explain`, `diff`,
+  `history` and `doctor` are read-only; `sync`, `capture`, `source`, `policy`
+  and `disable` are the writes. Policies `warn`, `sync` and `strict` decide
+  what an unattended hand-off may do; strict refuses a destination it cannot
+  make safe and tries the next option. Every written file carries
+  `GENERATED by Leg harness`, lives in a marked region or owned key inside
+  files you also own, is backed up before an overwrite and skipped when
+  hand-edited. Credentials never move (`${NAME}` references). The session
+  record, its timeline (`harness`, `harness_blocked`), the card ledger and the
+  board (a chip on the row, a **Harness** section in the drawer) show what
+  transferred. Source changes are fingerprinted so an unchanged environment
+  costs a few stat calls at a hand-off. Docs: `docs/harness.md`.
+- **Engine.** The capture, bundle and apply engine is the Agnostic AI port
+  engine (MIT), vendored byte for byte under `src/harness/vendor/agnostic-ai/`
+  with its upstream commit and per-file hashes pinned; `npm test` refuses a
+  local edit. Attribution in `NOTICE`.
+- **Existing installs are unchanged.** No client file is touched until
+  `leg harness enable`; `preferences.json` gains a `harness` key that reads as
+  off when absent.
+
+## 0.8.1 (2026-09-16)
+
+- **Antigravity CLI (`agy`) workspace trust in worktrees and repos.** Leg writes
+  the folder trust record to `~/.gemini/antigravity-cli/settings.json`'s
+  `trustedWorkspaces` for both the repo root and the worktree directory, with
+  exact Windows drive and separator normalization matching Go's `runtime.memequal`
+  check so `leg agy` runs completely unattended without interactive trust prompts.
+- **Board server resolution in worktrees.** Fixed board asset resolution when
+  Leg is executed from within a git worktree.
+
 ## 0.8.0 (2026-09-16)
 
+- **The product is called Leg.** Website, CLI help, board logs and onboarding
+  copy say **Leg**; the command is `leg`; `legcli.com` is the domain, not the
+  product name. `leg up` prefixes lines with `[leg]`. Historical changelog
+  entries keep the previous name.
 - **Grok is a supervised and handoff agent.** `leg grok` starts Grok the same
   way `leg claude`, `leg codex` and `leg agy` start those agents: board
   alongside, usage tracking, and a live context handoff bundle. At the limit
@@ -11,6 +53,9 @@
   and agy, `--ask-for-approval never` for Codex, `--always-approve` for Grok).
   Opt out with `--no-auto-approve`, `LEG_AUTO_APPROVE=0` /
   `LEG_NO_AUTO_APPROVE=1`, or `"auto_approve": false` in `preferences.json`.
+- **`leg-agents` is the unscoped alias installer.** It pins the same version of
+  `@ucsandman/legcli` and exposes the same `leg` binary. CI publishes both
+  packages together; `npm test` fails if their versions drift.
 
 ## 0.7.0 (2026-09-15)
 

package/NOTICE

@@ -2,3 +2,11 @@ Portions of this software (src/runner.mjs, src/ledger.mjs, src/git-snapshot.mjs
 and their tests) were ported on 2026-09-10 from a private ucsandman repository
 (team tooling) under the MIT license; that code is included here under the Leg License Agreement (see LICENSE), which its author also holds. Telegram delivery, chat identifiers,
 and machine-specific paths were removed in the port.
+
+The portable-harness engine under src/harness/vendor/agnostic-ai/ is the
+Agnostic AI port engine (https://github.com/ucsandman/Agnostic-AI), copyright
+(c) 2026 Wes Sander, included byte for byte under the MIT License, whose full
+text is in src/harness/vendor/agnostic-ai/LICENSE. That copy is not
+relicensed: it stays MIT, and its upstream commit and per-file hashes are
+recorded in src/harness/vendor/agnostic-ai/UPSTREAM.json. Leg's own
+harness code (src/harness/*.mjs) is under the Leg License Agreement.