agit-v0.1.1

Added

• A terminal interface for people. agit, agit resume, agit new, agit log,
  agit import, agit init and agit config open a full-screen interface when run in
  an interactive terminal without their key argument: browse sessions, repositories,
  the timeline and conversation content; name and adopt sessions that are not tracked
  yet; an init wizard and a config editor; hand the terminal to Claude Code or
  Codex and come back to refreshed lists. Pipes, CI, scripts and agent sessions keep
  the existing output, and --no-tui, AGIT_TUI=0 or any machine-output flag
  (--json, -q, -y) turns it off. See docs/07_tui.md.
• Update check. On user-facing startup agit checks, at most once a day, whether the
  hub announces a newer release and prints a reminder; agit upgrade installs it.
  Nothing upgrades on its own.
• A file keystore for machines without a credential store. On an SSH login or a CI
  runner no Secret Service answers, so the secret-filter key had nowhere to go and the
  first agit commit whose transcript carried a heuristic finding failed with "cannot
  open the operating-system credential store". agit config secrets.keystore file (or
  AGIT_SECRETS_KEYSTORE=file) keeps the key in a private file under
  $AGIT_HOME/keystore/ instead. Unix only, chosen explicitly and never a silent
  fallback; its protection is the file mode, so a backup of $AGIT_HOME carries the key
  along with the global vault — the boundary is drawn in
  docs/05_global_secret_filter.md.
• agit doctor reports the secret keystore. It probes the configured store the way
  a commit uses it and unlocks the vault if one exists, so a machine that cannot hold
  the key shows up at setup time rather than at the first commit that finds a secret.

Fixed

• agit fork of a sealed branch no longer produces a sealed branch: the seal marker is
  branch-local and is dropped when the fork gets its identity (issue 23).
• Codex sessions under a custom CODEX_HOME are discovered and settled, and the
  SessionStart and Stop hooks locate the session and settle it correctly.
• Missing local branches, phantom origin branches, the log limit's performance, and
  cursor restoration after leaving the interface.
• When the OS credential store is unavailable, the error names both remedies — install
  and configure a credential store, or select the file keystore. Every other keyring
  error keeps its own meaning.
• Hints are highlighted in bright magenta so they stand out from ordinary output.

Internal

• The GitHub mirror job clears stale replace refs before planting the graft, so a reused
  runner checkout no longer aborts the mirror.

Full Changelog: agit-v0.1.0...agit-v0.1.1