agentwheel 0.19.9 → 0.20.0

package/AGENT.md

@@ -41,8 +41,8 @@ agentwheel install --fleet example-fleet --profile daily --dry-run
 `--user`, `--local`, and `--fleet <fleet-id>` select separate desired-state scopes. Named fleets
 are optional. Do not merge scopes or assume a fleet has priority over user or local state.
 
-Register and inspect a schema-v3 fleet only after its canonical root, matching `fleetId`, and
-required packages exist:
+Register and inspect a fleet using schema v3 or newer only after its canonical root, matching
+`fleetId`, and required packages exist:
 
 ```bash
 agentwheel fleet register example-fleet --root /srv/agentwheel/fleets/example-fleet --required-package core-agent-pack
@@ -60,7 +60,7 @@ agentwheel fleet normalize example-fleet --from user --package core-agent-pack -
 agentwheel fleet normalize example-fleet --from user --recover
 ```
 
-Named fleets require a schema-v3-capable CLI. Upgrade Agentwheel first and verify
+Named fleets require a CLI that supports schema v3 or newer. Upgrade Agentwheel first and verify
 `agentwheel fleet --help` before creating, registering, reading, or planning fleet state. Do not
 downgrade the config, strip fleet fields, or run a planning/mutation command with the old CLI.
 

package/README.md

@@ -383,7 +383,7 @@ agentwheel fleet normalize example-fleet --from user --recover
 Recovery restores the source side from a pending normalization journal after verifying that the
 recorded configs, manifests, and graph locks have not changed outside the transaction.
 
-Configuration with named fleets requires a schema-v3-capable Agentwheel CLI. Upgrade the CLI first,
+Named fleets use workspace schema v3 or newer and require a compatible Agentwheel CLI. Upgrade the CLI first,
 verify `agentwheel --version` and `agentwheel fleet --help`, then create the fleet config and
 register it. Do not edit the config to an older schema or run an older CLI against it.
 
@@ -408,6 +408,31 @@ reserved for configured agents.
 
 Flow: **author + workspace → `install` → runtime**.
 
+## Governed mutations
+
+Workspace schema v4 can require a full mutation reason, durable receipts, and automatic
+commit-after-verify revisioning for Agentwheel's mutating commands. Revision providers can use the
+built-in exact-path Git implementation or a strict JSON command whose absolute entrypoint is
+SHA-256 pinned. Runtime output remains generated state; only declared and verified repository paths
+are eligible for a commit.
+
+```bash
+agentwheel install --reason "Install the reviewed artifact set"
+agentwheel mutation list
+agentwheel mutation show <operation-id>
+agentwheel mutation finalize <operation-id>
+agentwheel mutation recover-runtime <operation-id>
+```
+
+See [the v1 revision-provider specification](docs/specs/revision-provider-v1.md) for configuration,
+the JSON protocol, crash recovery, and fail-closed boundaries.
+
+Provider-owned drafts are recorded as `owned-but-unpublished`, including their stack, branch,
+projected draft tip, and integration control commit. Agentwheel never publishes them and does not
+invent a publication command; inspect the durable record and follow the provider's separately
+documented, authorized workflow. An active-active provider check may deliberately remain blocked
+until then.
+
 ## Packages
 
 A package is a git repo or folder with an OpenPack manifest and a canonical layout:
@@ -610,7 +635,8 @@ OpenPack packages can depend on other packages and compose shared markdown fragm
   resolve.
 - **Offline & frozen installs.** `--offline` guarantees zero network; `--frozen-lock` hard-fails if
   resolution would differ from the lock.
-- **Introspection.** `agentwheel deps tree` prints the resolved graph; `agentwheel deps why
+- **Introspection.** `agentwheel deps tree` prints the resolved graph (source resolution may refresh
+  incidental local caches but does not recover runtime journals or persist trust); `agentwheel deps why
   <selector>` explains why an artifact is installed.
 
 ### Meta-packages (packs)

package/dist/apply-7HJQQOCI.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import {
+  applyCombinedInstallPlan,
+  applyInstallPlan,
+  recoverPendingApply,
+  uninstall
+} from "./chunk-USHT7FGV.js";
+import "./chunk-HOYIIUL5.js";
+import "./chunk-7VPI5J5Y.js";
+export {
+  applyCombinedInstallPlan,
+  applyInstallPlan,
+  recoverPendingApply,
+  uninstall
+};

package/dist/{chunk-UQLRZV5W.js → chunk-7VPI5J5Y.js}

@@ -1,9 +1,5 @@
 #!/usr/bin/env node
 
-// src/source/identify.ts
-import { homedir } from "os";
-import { resolve } from "path";
-
 // src/utils/fs.ts
 import { createHash } from "crypto";
 import {
@@ -97,7 +93,7 @@ async function withFilesystemLock(lockPath, timeoutMs, fn, description = "cache"
       if (Date.now() - started > timeoutMs) {
         throw new Error(`Timed out waiting for ${description} lock at ${lockPath}`);
       }
-      await new Promise((resolve2) => setTimeout(resolve2, 50));
+      await new Promise((resolve) => setTimeout(resolve, 50));
     }
   }
   try {
@@ -110,29 +106,6 @@ function isAlreadyExists(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "EEXIST";
 }
 
-// src/source/identify.ts
-function inferSourceDriverName(source) {
-  if (source.startsWith("clawhub:")) return "clawhub";
-  if (source.startsWith("mcp-registry:")) return "mcp-registry";
-  if (source.startsWith("skillkit:")) return "skillkit";
-  if (source.startsWith("vercel:")) return "vercel-skills";
-  return source.startsWith("github:") || source.startsWith("git:") ? "git" : "local";
-}
-async function isExplicitSource(source) {
-  if (source.startsWith("github:") || source.startsWith("git:") || source.startsWith("skillkit:") || source.startsWith("vercel:") || source.startsWith("mcp-registry:") || source.startsWith("clawhub:")) {
-    return true;
-  }
-  if (source === "." || source === ".." || source.startsWith("./") || source.startsWith("../") || source.startsWith("/") || source.startsWith("~/")) {
-    return true;
-  }
-  return pathExists(resolveLocalPath(source));
-}
-function resolveLocalPath(source) {
-  if (source === "~") return homedir();
-  if (source.startsWith("~/")) return resolve(homedir(), source.slice(2));
-  return resolve(source);
-}
-
 export {
   pathExists,
   hashPath,
@@ -141,7 +114,5 @@ export {
   atomicCopy,
   writeJsonAtomic,
   withFilesystemLock,
-  isAlreadyExists,
-  inferSourceDriverName,
-  isExplicitSource
+  isAlreadyExists
 };

package/dist/chunk-EMDIG24I.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+import {
+  pathExists
+} from "./chunk-7VPI5J5Y.js";
+
+// src/source/identify.ts
+import { homedir } from "os";
+import { resolve } from "path";
+function inferSourceDriverName(source) {
+  if (source.startsWith("clawhub:")) return "clawhub";
+  if (source.startsWith("mcp-registry:")) return "mcp-registry";
+  if (source.startsWith("skillkit:")) return "skillkit";
+  if (source.startsWith("vercel:")) return "vercel-skills";
+  return source.startsWith("github:") || source.startsWith("git:") ? "git" : "local";
+}
+async function isExplicitSource(source) {
+  if (source.startsWith("github:") || source.startsWith("git:") || source.startsWith("skillkit:") || source.startsWith("vercel:") || source.startsWith("mcp-registry:") || source.startsWith("clawhub:")) {
+    return true;
+  }
+  if (source === "." || source === ".." || source.startsWith("./") || source.startsWith("../") || source.startsWith("/") || source.startsWith("~/")) {
+    return true;
+  }
+  return pathExists(resolveLocalPath(source));
+}
+function resolveLocalPath(source) {
+  if (source === "~") return homedir();
+  if (source.startsWith("~/")) return resolve(homedir(), source.slice(2));
+  return resolve(source);
+}
+
+export {
+  inferSourceDriverName,
+  isExplicitSource
+};