totopo 3.4.0-rc-1 → 3.4.0

package/README.md

@@ -106,9 +106,9 @@ Each workspace has a git mode (set via **Manage Workspace > Git mode**) that con
 
 | Mode | Local mutations | Remote (push/pull/fetch/clone) |
 |---|---|---|
-| **strict** *(default for new workspaces)* | Blocked — a read-only `git` wrapper allows inspection (`status`, `log`, `diff`, `blame`, `show`, etc.) and rejects mutations (`commit`, `add`, `reset`, `checkout`, etc.) | Blocked at the gitconfig protocol layer |
-| **local** *(default for workspaces upgraded from earlier versions)* | Allowed | Blocked at the gitconfig protocol layer |
-| **unrestricted** | Allowed | Allowed — totopo enforces no git-specific restrictions |
+| **local** *(default)* | Allowed | Blocked at the gitconfig protocol layer |
+| **strict** | Blocked — a read-only `git` wrapper allows inspection (`status`, `log`, `diff`, `blame`, `show`, etc.) and rejects mutations (`commit`, `add`, `reset`, `checkout`, etc.) | Blocked at the gitconfig protocol layer |
+| **unrestricted** | Allowed | Allowed |
 
 The active mode is recorded per workspace in `.lock`, exposed inside the container as `TOTOPO_GIT_MODE`, and reflected in the agent context so each session knows what is permitted. Switching modes recreates the container on the next session.
 

package/dist/commands/dev.js

@@ -278,7 +278,7 @@ export async function run(packageDir, ctx, options) {
     }
     const hasGit = existsSync(join(workspaceDir, ".git"));
     // --- Git mode (per-workspace, host-side .lock) ---------------------------------------------------------------------------------------
-    const gitMode = readGitMode(ctx.workspaceId) ?? GIT_MODE.strict;
+    const gitMode = readGitMode(ctx.workspaceId) ?? GIT_MODE.local;
     // --- Start container -----------------------------------------------------------------------------------------------------------------
     const containerOpts = {
         containerName,

package/dist/commands/workspace.js

@@ -121,19 +121,19 @@ async function removeShadowPatterns(ctx) {
 }
 // --- Git mode menu -----------------------------------------------------------------------------------------------------------------------
 async function gitModeMenu(ctx) {
-    const current = readGitMode(ctx.workspaceId) ?? GIT_MODE.strict;
-    note("Strict        — read-only local, no remote (recommended)\n" +
-        "Local         — local mutations allowed; remote blocked\n" +
+    const current = readGitMode(ctx.workspaceId) ?? GIT_MODE.local;
+    note("Local         — local mutations allowed; remote blocked\n" +
+        "Strict        — read-only; mutations and remote blocked\n" +
         "Unrestricted  — no totopo-enforced restrictions", "Git mode");
     const choice = await select({
         message: "Git mode:",
         options: [
             {
-                value: GIT_MODE.strict,
-                label: "Strict",
-                hint: current === GIT_MODE.strict ? "current · recommended" : "recommended",
+                value: GIT_MODE.local,
+                label: "Local",
+                hint: current === GIT_MODE.local ? "current · default" : "default",
             },
-            { value: GIT_MODE.local, label: "Local", ...(current === GIT_MODE.local ? { hint: "current" } : {}) },
+            { value: GIT_MODE.strict, label: "Strict", ...(current === GIT_MODE.strict ? { hint: "current" } : {}) },
             {
                 value: GIT_MODE.unrestricted,
                 label: "Unrestricted",
@@ -203,7 +203,7 @@ async function resetTotopoYaml(ctx) {
 // --- Manage Workspace submenu ------------------------------------------------------------------------------------------------------------
 export async function run(ctx) {
     while (true) {
-        const currentGitMode = readGitMode(ctx.workspaceId) ?? GIT_MODE.strict;
+        const currentGitMode = readGitMode(ctx.workspaceId) ?? GIT_MODE.local;
         const options = [
             { value: "git-mode", label: "Git mode", hint: `current: ${currentGitMode}` },
             { value: "shadow-paths", label: "Shadow paths", hint: "manage shadow patterns" },

package/dist/lib/agent-context.js

@@ -86,7 +86,7 @@ function renderTemplate(template, vars) {
 /**
  * Assembles the agent context markdown injected into each supported agent's config dir at session start.
  */
-export function buildAgentContextDocs(hasGit, shadowPatterns, gitMode = GIT_MODE.strict) {
+export function buildAgentContextDocs(hasGit, shadowPatterns, gitMode = GIT_MODE.local) {
     const gitSection = loadTemplate(hasGit ? `git-mode-${gitMode}` : "git-unavailable");
     const shadowSection = shadowPatterns && shadowPatterns.length > 0
         ? renderTemplate(loadTemplate("shadow-paths"), {

package/dist/lib/migrate-to-latest.js

@@ -391,12 +391,11 @@ function migrateRemoveLastCliUpdate() {
     }
 }
 /**
- * Pre-v3.4.0: Add the git_mode field to .lock files. Existing workspaces are kept on
- * git_mode=local to preserve their behavior; new workspaces created via initWorkspaceDir
- * default to git_mode=strict instead. Idempotent - skips files that already have the field.
- * Prints a one-time clack note() when any workspace was newly migrated, so users discover
- * the new feature without rediscovering it on every subsequent startup. Returns the count
- * for testing purposes; the registered Migration entry ignores it.
+ * Pre-v3.4.0: Add the git_mode=local field to .lock files. Local is the default, so this
+ * is a cosmetic write that makes the field visible on disk; runtime behavior is unchanged
+ * for existing workspaces. Idempotent - skips files that already have the field. Prints a
+ * one-time clack note() when any workspace was newly migrated so users discover the new
+ * feature. Returns the count for testing purposes; the registered Migration entry ignores it.
  */
 export function migrateAddGitMode() {
     const baseDir = getWorkspacesBaseDir();
@@ -418,7 +417,7 @@ export function migrateAddGitMode() {
         }
     }
     if (migrated > 0) {
-        note(`totopo v3.4.0 introduces git modes for workspaces.\nYour existing workspace${migrated > 1 ? "s have" : " has"} been kept on 'local' (today's behavior — local commits allowed, remote blocked).\nA new 'strict' mode is available (read-only, recommended for new agent sessions).\nSwitch via the totopo menu > Manage Workspace > Git mode.`, "Git modes");
+        note(`totopo v3.4.0 introduces git modes for workspaces.\nDefault is 'local' (previous behavior — local commits allowed, remote blocked).\nTwo opt-in modes are available: 'strict' (read-only, all mutations blocked) and 'unrestricted' (no totopo-enforced restrictions).\nSwitch via the totopo menu > Manage Workspace > Git mode.`, "Git modes");
     }
     return migrated;
 }

package/dist/lib/workspace-identity.js

@@ -54,7 +54,7 @@ function parseLockFile(workspaceId) {
         return {
             workspaceRoot: partial.workspaceRoot,
             activeProfile: partial.activeProfile ?? PROFILE.default,
-            gitMode: partial.gitMode ?? GIT_MODE.strict,
+            gitMode: partial.gitMode ?? GIT_MODE.local,
         };
     }
     catch {
@@ -78,7 +78,7 @@ export function writeLockFile(workspaceId, workspaceRoot) {
     writeLockFileInternal(workspaceId, {
         workspaceRoot,
         activeProfile: existing?.activeProfile ?? PROFILE.default,
-        gitMode: existing?.gitMode ?? GIT_MODE.strict,
+        gitMode: existing?.gitMode ?? GIT_MODE.local,
     });
 }
 /** Read the active profile name. Returns null if lock file is missing. */
@@ -92,13 +92,13 @@ export function writeActiveProfile(workspaceId, profile) {
         return;
     writeLockFileInternal(workspaceId, { ...existing, activeProfile: profile });
 }
-/** Read the active git mode. Returns null if lock file is missing. Coerces unknown values to strict. */
+/** Read the active git mode. Returns null if lock file is missing. Coerces unknown values to local. */
 export function readGitMode(workspaceId) {
     const parsed = parseLockFile(workspaceId);
     if (!parsed)
         return null;
     const value = parsed.gitMode;
-    return GIT_MODES.includes(value) ? value : GIT_MODE.strict;
+    return GIT_MODES.includes(value) ? value : GIT_MODE.local;
 }
 /** Write the active git mode. Preserves workspace root path and active profile. */
 export function writeGitMode(workspaceId, gitMode) {
@@ -109,7 +109,7 @@ export function writeGitMode(workspaceId, gitMode) {
 }
 // --- Workspace directory initialization --------------------------------------------------------------------------------------------------
 /** Initialize ~/.totopo/workspaces/<workspace_id>/ with lock file and subdirs. */
-export function initWorkspaceDir(workspaceId, workspaceRoot, activeProfile = PROFILE.default, gitMode = GIT_MODE.strict) {
+export function initWorkspaceDir(workspaceId, workspaceRoot, activeProfile = PROFILE.default, gitMode = GIT_MODE.local) {
     const dir = getWorkspaceDir(workspaceId);
     mkdirSync(join(dir, AGENTS_DIR), { recursive: true });
     mkdirSync(join(dir, SHADOWS_DIR), { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totopo",
-  "version": "3.4.0-rc-1",
+  "version": "3.4.0",
   "description": "Run AI coding agents safely in your local codebase",
   "type": "module",
   "bin": {

package/templates/startup-git-mode.mjs

@@ -129,7 +129,7 @@ function verifyRemoteBlocked(gitMode, ok, fail, skip) {
  * through the main startup script's section formatting and error counter.
  */
 export function checkGitMode({ ok, fail, skip, run, isRoot }) {
-    const gitMode = VALID_GIT_MODES.includes(process.env.TOTOPO_GIT_MODE) ? process.env.TOTOPO_GIT_MODE : GIT_MODE.strict;
+    const gitMode = VALID_GIT_MODES.includes(process.env.TOTOPO_GIT_MODE) ? process.env.TOTOPO_GIT_MODE : GIT_MODE.local;
     const protocolValue = gitMode === GIT_MODE.unrestricted ? "always" : "never";
 
     if (isRoot) {