agentwheel 0.22.0 → 0.22.1

package/README.md

@@ -139,6 +139,25 @@ refused unless `--carry-drift` is passed: the dry-run prints the runtime hash, t
 `--expected-runtime-hash <sha256>`, and the manifest keeps the recorded hash so the next install
 still reports the drift. Merge and managed-block entries never carry drift.
 
+Qualify a Fleet-owned source with `--from-fleet <id>` together with its exact
+`--from-workspace-root`; use `--to-fleet <id>` for a Fleet-owned destination. Both IDs must
+be registered at the specified roots. These options qualify ownership, whereas `--fleet`
+selects the governing workspace. `--from-fleet` cannot be combined with
+`--from-unknown-owner`. For example, preview returning one entry to its original plain owner:
+
+```bash
+agentwheel ownership handoff skills/example-skill --local --agent local-codex --installation-type user \
+  --source-state-key codex.user.existing-state \
+  --from-workspace-root /fleet/control --from-fleet example-fleet \
+  --to-workspace-root /original/workspace --dry-run
+```
+
+Reverse handoffs require a fresh reviewed plan against the post-handoff state; they do not
+reuse old manifest revisions or erase audit history. For run-as targets, also pass the reviewed
+`--plan-digest` and `--expected-inventory-revision` when applying. The qualified old/new owner
+identities are included in the native plan, its digest and the audit. Each handoff changes the
+inventory revision, so review subsequent operations against their exact intermediate states.
+
 Use `--source-state-key <exact-key>` when an existing source manifest must be selected explicitly.
 This is a command-local equivalent of a named agent's `stateKey`; it does not edit agent configuration,
 move state files, or reconstruct graph locks. The key must be canonical and match the selected adapter

package/dist/index.js

@@ -32400,6 +32400,7 @@ init_adapter();
 init_transaction();
 init_transport();
 import { resolve as resolve40 } from "path";
+init_workspace();
 var unknownWorkspaceOwner = "workspace:unknown";
 async function planArtifactOwnershipHandoff(request) {
   return validateOwnershipHandoff(request, request.transport ?? localTransport);
@@ -32461,6 +32462,11 @@ async function applyArtifactOwnershipHandoff(request) {
   }
 }
 async function validateOwnershipHandoff(request, transport) {
+  if (request.fromFleetId !== void 0 && (request.fromWorkspaceRoot === void 0 || request.fromUnknownOwner === true)) {
+    throw new Error("A source fleet requires fromWorkspaceRoot and cannot be combined with fromUnknownOwner.");
+  }
+  if (request.fromFleetId !== void 0) fleetIdSchema.parse(request.fromFleetId);
+  if (request.toFleetId !== void 0) fleetIdSchema.parse(request.toFleetId);
   const endpoint = ownershipRunAsEndpoint(transport, request.targetRoot);
   if (request.expectedHash) assertSha256(request.expectedHash, "expected artifact hash");
   if (request.expectedRevision) assertSha256(request.expectedRevision, "expected manifest revision");
@@ -32488,7 +32494,7 @@ async function validateOwnershipHandoff(request, transport) {
     );
   }
   const entry = matches[0];
-  const fromOwner = request.fromUnknownOwner === true ? unknownWorkspaceOwner : workspaceOwnerForRoot(request.fromWorkspaceRoot);
+  const fromOwner = request.fromUnknownOwner === true ? unknownWorkspaceOwner : workspaceOwnerForRoot(request.fromWorkspaceRoot, request.fromFleetId);
   const toOwner = workspaceOwnerForRoot(request.toWorkspaceRoot, request.toFleetId);
   if (fromOwner === toOwner) throw new Error("Ownership handoff requires different workspace roots.");
   if (entry.workspaceOwner !== fromOwner) {
@@ -37371,13 +37377,28 @@ ownershipCommand.command("release-claim").description("release one exact plain o
   console.log(`Plan digest: ${result.planDigest}`);
   if (!options.apply) console.log("Apply with this same scope and reason plus --apply --plan-digest, --expected-source-revision and --expected-inventory-revision from this plan.");
 });
-ownershipCommand.command("handoff").description("transfer one managed artifact between Agentwheel workspace roots").argument("<selector>", "exact artifact selector in type/name form").option("--from-workspace-root <path>", "current owning workspace root").option("--from-unknown-owner", "hand off an artifact recorded as workspace:unknown", false).requiredOption("--to-workspace-root <path>", "new owning workspace root").option("--source-state-key <key>", "explicit source install-manifest state key for this handoff only").option("--to-fleet <id>", "qualify the new owner with a registered fleet id").option("--expected-hash <sha256>", "expected recorded artifact hash; required when applying").option("--expected-revision <sha256>", "expected install manifest revision; required when applying").option("--plan-digest <sha256>", "reviewed plan digest; required for run-as handoff").option("--expected-inventory-revision <sha256>", "reviewed full inventory revision; required for run-as handoff").option("--carry-drift", "accept a file or directory whose runtime differs from the recorded hash; the recorded hash is kept", false).option("--expected-runtime-hash <sha256>", "expected drifted runtime hash; required when applying with --carry-drift").option("--adapter <adapter>", "built-in adapter").option("-i, --installation-type <type>", "installation type (for example local or user)").option("--user", "use the user workspace", false).option("--local", "use the nearest local workspace", false).option("--fleet <id>", "use one registered named fleet").option("--adapter-config <path>", "adapter JSON/JSONC file").option("--adapter-module <path>", "local programmatic adapter module").option("--allow-adapter-code", "allow loading local adapter code", false).option("-t, --target-root <path>", "runtime/project root").option("--agent <name>", "named agent from merged config").option("--profile <name>", "workspace runtime profile (must resolve to one target)").option("--dry-run", "validate all preconditions without writing the manifest", false).option("--json", "print the complete deterministic ownership handoff plan", false).action(async (selector, options) => {
+ownershipCommand.command("handoff").description("transfer one managed artifact between Agentwheel workspace roots").argument("<selector>", "exact artifact selector in type/name form").option("--from-workspace-root <path>", "current owning workspace root").option("--from-fleet <id>", "qualify the current owner with a registered fleet id").option("--from-unknown-owner", "hand off an artifact recorded as workspace:unknown", false).requiredOption("--to-workspace-root <path>", "new owning workspace root").option("--source-state-key <key>", "explicit source install-manifest state key for this handoff only").option("--to-fleet <id>", "qualify the new owner with a registered fleet id").option("--expected-hash <sha256>", "expected recorded artifact hash; required when applying").option("--expected-revision <sha256>", "expected install manifest revision; required when applying").option("--plan-digest <sha256>", "reviewed plan digest; required for run-as handoff").option("--expected-inventory-revision <sha256>", "reviewed full inventory revision; required for run-as handoff").option("--carry-drift", "accept a file or directory whose runtime differs from the recorded hash; the recorded hash is kept", false).option("--expected-runtime-hash <sha256>", "expected drifted runtime hash; required when applying with --carry-drift").option("--adapter <adapter>", "built-in adapter").option("-i, --installation-type <type>", "installation type (for example local or user)").option("--user", "use the user workspace", false).option("--local", "use the nearest local workspace", false).option("--fleet <id>", "use one registered named fleet").option("--adapter-config <path>", "adapter JSON/JSONC file").option("--adapter-module <path>", "local programmatic adapter module").option("--allow-adapter-code", "allow loading local adapter code", false).option("-t, --target-root <path>", "runtime/project root").option("--agent <name>", "named agent from merged config").option("--profile <name>", "workspace runtime profile (must resolve to one target)").option("--dry-run", "validate all preconditions without writing the manifest", false).option("--json", "print the complete deterministic ownership handoff plan", false).action(async (selector, options) => {
   if (!options.dryRun && (!options.expectedHash || !options.expectedRevision)) {
     throw new Error("Applying an ownership handoff requires --expected-hash and --expected-revision from a reviewed --dry-run.");
   }
   if (Boolean(options.fromWorkspaceRoot) === (options.fromUnknownOwner === true)) {
     throw new Error("Ownership handoff requires exactly one of --from-workspace-root or --from-unknown-owner.");
   }
+  if (options.fromFleet !== void 0 && (!options.fromWorkspaceRoot || options.fromUnknownOwner)) {
+    throw new Error("--from-fleet requires --from-workspace-root and cannot be combined with --from-unknown-owner.");
+  }
+  const fromWorkspaceRoot = options.fromWorkspaceRoot === void 0 ? void 0 : normalizeCliPath(options.fromWorkspaceRoot);
+  const toWorkspaceRoot = normalizeCliPath(options.toWorkspaceRoot);
+  for (const [id, root, label] of [
+    [options.fromFleet, fromWorkspaceRoot, "Source"],
+    [options.toFleet, toWorkspaceRoot, "Destination"]
+  ]) {
+    if (id === void 0) continue;
+    const fleet = await showRegisteredFleet(id);
+    if (resolve48(fleet.root) !== resolve48(root)) {
+      throw new Error(`${label} fleet '${id}' is registered at ${fleet.root}, not ${root}.`);
+    }
+  }
   const normalizedOptions = normalizeRuntimeScopeOptions(options);
   const targets = await resolveCliTargets(normalizedOptions);
   if (targets.length !== 1) {
@@ -37401,13 +37422,6 @@ ownershipCommand.command("handoff").description("transfer one managed artifact b
       "Migrate the target state before ownership handoff by running a full agentwheel install for this target."
     );
   }
-  const toWorkspaceRoot = normalizeCliPath(options.toWorkspaceRoot);
-  if (options.toFleet) {
-    const fleet = await showRegisteredFleet(options.toFleet);
-    if (resolve48(fleet.root) !== resolve48(toWorkspaceRoot)) {
-      throw new Error(`Destination fleet '${options.toFleet}' is registered at ${fleet.root}, not ${toWorkspaceRoot}.`);
-    }
-  }
   const request = {
     workspaceRoot: await workspaceRootFromOptions(normalizedOptions),
     reason: options.reason,
@@ -37419,7 +37433,7 @@ ownershipCommand.command("handoff").description("transfer one managed artifact b
     adapter: adapter.name,
     artifactType,
     artifactName,
-    ...options.fromUnknownOwner === true ? { fromUnknownOwner: true } : { fromWorkspaceRoot: normalizeCliPath(options.fromWorkspaceRoot) },
+    ...options.fromUnknownOwner === true ? { fromUnknownOwner: true } : { fromWorkspaceRoot, fromFleetId: options.fromFleet },
     toWorkspaceRoot,
     toFleetId: options.toFleet,
     expectedHash: options.expectedHash,

package/openpack.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "name": "NestDevLab/agentwheel",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "provides": [
     { "type": "skills", "path": "skills" }
   ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentwheel",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "description": "Weave skills, rules, and instructions across every AI agent.",
   "type": "module",
   "license": "MIT",

package/skills/agentwheel/SKILL.md

@@ -5,7 +5,7 @@ allowed-tools: [Bash]
 license: MIT
 metadata:
   author: NestDevLab
-  version: "0.22.0"
+  version: "0.22.1"
 ---
 
 # agentwheel

package/skills/agentwheel-discovery/SKILL.md

@@ -5,7 +5,7 @@ allowed-tools: [Bash]
 license: MIT
 metadata:
   author: NestDevLab
-  version: "0.22.0"
+  version: "0.22.1"
 ---
 
 # Agentwheel Discovery