agentbundle 0.28.1__tar.gz → 0.29.1__tar.gz

{agentbundle-0.28.1 → agentbundle-0.29.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.28.1
+Version: 0.29.1
 Summary: npm for your coding agent. Install packs of skills, subagents, and hooks into any repo, for every major agent.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
 License: Apache-2.0 OR MIT
@@ -349,15 +349,23 @@ each Claude Code session. It exposes six tools over MCP stdio:
 python3 -m agentbundle.workspace_mcp
 ```
 
+> **Trusted checkout only.** This form runs whichever `agentbundle` is on
+> `sys.path`. If the repo uses an editable install (`pip install -e .`), it
+> runs the local checkout's code. Use only on repos you trust. An isolated
+> spawn mode (`python3 -I -m agentbundle.workspace_mcp`) is planned for
+> Stage 2 and will require a stable non-editable install.
+
 **Inject the session instruction** so the agent knows to use the tools:
 
 ```python
 from agentbundle.workspace_mcp import DEFAULT_SESSION_INSTRUCTION
 ```
 
-Pass `WORKSPACE_MCP_SPEC_PATH` (path to the spec directory) and
-`WORKSPACE_MCP_DISPATCHED_ITEM` (`ini_slug/type:slug`) as environment variables
-when spawning to unlock the git write tools and FSM event tracking.
+Pass exactly one environment variable when spawning to set the session mode:
+`WORKSPACE_MCP_SPEC_PATH` (path to the spec directory) for FSM/work-loop items,
+or `WORKSPACE_MCP_DISPATCHED_ITEM` (`ini_slug/type:slug`) for non-FSM shaping
+items. Setting neither gives discovery-only mode (git writes disabled). Setting
+both is unsupported — only one selects the mode.
 
 ## Credentials
 

{agentbundle-0.28.1 → agentbundle-0.29.1}/README-pypi.md

@@ -327,15 +327,23 @@ each Claude Code session. It exposes six tools over MCP stdio:
 python3 -m agentbundle.workspace_mcp
 ```
 
+> **Trusted checkout only.** This form runs whichever `agentbundle` is on
+> `sys.path`. If the repo uses an editable install (`pip install -e .`), it
+> runs the local checkout's code. Use only on repos you trust. An isolated
+> spawn mode (`python3 -I -m agentbundle.workspace_mcp`) is planned for
+> Stage 2 and will require a stable non-editable install.
+
 **Inject the session instruction** so the agent knows to use the tools:
 
 ```python
 from agentbundle.workspace_mcp import DEFAULT_SESSION_INSTRUCTION
 ```
 
-Pass `WORKSPACE_MCP_SPEC_PATH` (path to the spec directory) and
-`WORKSPACE_MCP_DISPATCHED_ITEM` (`ini_slug/type:slug`) as environment variables
-when spawning to unlock the git write tools and FSM event tracking.
+Pass exactly one environment variable when spawning to set the session mode:
+`WORKSPACE_MCP_SPEC_PATH` (path to the spec directory) for FSM/work-loop items,
+or `WORKSPACE_MCP_DISPATCHED_ITEM` (`ini_slug/type:slug`) for non-FSM shaping
+items. Setting neither gives discovery-only mode (git writes disabled). Setting
+both is unsupported — only one selects the mode.
 
 ## Credentials
 

{agentbundle-0.28.1 → agentbundle-0.29.1}/README.md

@@ -26,6 +26,14 @@ agentbundle install --pack desk-research --scope user
 
 User-scope packs land in your home directory, not the repo — they're yours, not the team's, and they're there in every project you open.
 
+**Try a pack without committing anything** — so the pack is fully live for your session but completely invisible to git:
+
+```bash
+agentbundle install --pack core --scope local
+```
+
+Local-scope packs land at the same paths as a repo install, but every file is registered in `.git/info/exclude` — so `git status` stays clean and nothing gets accidentally committed. Uninstall removes both the files and the exclude entries; the repo returns to exactly the state it was in before. Requires a git working tree. Useful for trialling a pack in a repo you don't own, or testing an update before rolling it out to the team.
+
 The install auto-detects your agent (`--adapter` overrides). Multi-IDE? Install the same pack for each agent at the same scope — they coexist, and the agents that read `.agents/skills/` (codex, cursor, gemini, copilot) share one skill copy instead of fighting over it. To install from a **different** catalogue, pass it as a trailing argument — a git URL or a local path (`agentbundle install --pack core <catalogue>`); a `config set source <catalogue>` makes that the default, and an editable clone (`pip install -e`) defaults to itself.
 
 ## More commands

{agentbundle-0.28.1 → agentbundle-0.29.1}/agentbundle/_data/pack.schema.json

@@ -75,7 +75,7 @@
             "allowed-scopes": {
               "type": "array",
               "minItems": 1,
-              "items": {"enum": ["repo", "user"]}
+              "items": {"enum": ["repo", "user", "local"]}
             },
             "user-scope-hooks": {"type": "boolean"},
             "allowed-adapters": {
@@ -98,7 +98,21 @@
             "properties": {
               "allowed-scopes": {"contains": {"enum": ["repo"]}}
             }
-          }
+          },
+          "allOf": [
+            {
+              "if": {
+                "properties": {
+                  "allowed-scopes": {"contains": {"enum": ["local"]}}
+                }
+              },
+              "then": {
+                "properties": {
+                  "allowed-scopes": {"contains": {"enum": ["repo"]}}
+                }
+              }
+            }
+          ]
         },
         "evals": {
           "type": "object",

{agentbundle-0.28.1 → agentbundle-0.29.1}/agentbundle/cli.py

@@ -33,6 +33,7 @@ import re
 import sys
 from typing import Sequence
 
+from agentbundle.scope import LEGAL_SCOPES
 from agentbundle.version import CLI_VERSION, SPEC_VERSION
 
 # Path-bearing argparse-attribute names. The set is curated rather than
@@ -258,8 +259,8 @@ def _build_parser() -> argparse.ArgumentParser:
     sp.add_argument("--root", default=".")
     sp.add_argument(
         "--scope",
-        choices=("repo", "user"),
-        help="Limit the listing to one scope. Default: both user and repo.",
+        choices=tuple(sorted(LEGAL_SCOPES)),
+        help="Limit the listing to one scope. Default: all scopes (repo, user, local).",
     )
     sp.add_argument(
         "--no-check",
@@ -387,7 +388,7 @@ def _build_parser() -> argparse.ArgumentParser:
         ),
     )
     sp.add_argument("--output", default=".")
-    sp.add_argument("--scope", choices=("repo", "user"))
+    sp.add_argument("--scope", choices=tuple(sorted(LEGAL_SCOPES)))
     sp.add_argument(
         "--force",
         action="store_true",
@@ -627,7 +628,7 @@ def _build_parser() -> argparse.ArgumentParser:
     )
     sp.add_argument("--pack", required=True)
     sp.add_argument("--root", default=".")
-    sp.add_argument("--scope", choices=("repo", "user"))
+    sp.add_argument("--scope", choices=tuple(sorted(LEGAL_SCOPES)))
     sp.add_argument(
         "--adapter",
         choices=_shipped_adapters_choices(),

{agentbundle-0.28.1 → agentbundle-0.29.1}/agentbundle/commands/_common.py

@@ -43,11 +43,15 @@ def resolve_catalogue_uri(args: argparse.Namespace) -> str:
 def resolve_state_path(scope: str, root: Path) -> Path:
     """Return the state-file path for *scope* under *root*.
 
-    ``scope="repo"`` → ``<root>/.agentbundle-state.toml``
-    ``scope="user"`` → ``<root>/.agentbundle/state.toml``
+    ``scope="repo"``  → ``<root>/.agentbundle-state.toml``
+    ``scope="user"``  → ``<root>/.agentbundle/state.toml``
+    ``scope="local"`` → ``<root>/.agentbundle-local-state.toml``
+      (RFC-0080: per-clone, never-committed; never added to .gitignore)
     """
     if scope == "user":
         return root / ".agentbundle" / "state.toml"
+    if scope == "local":
+        return root / ".agentbundle-local-state.toml"
     return root / ".agentbundle-state.toml"