agit-v0.2.16

Added

• Each settled commit records the runtime's own name for the session in
  session/meta.json as title: the latest Claude Code title (custom-title,
  falling back to an older transcript's summary) or the Codex thread name from
  session_index.jsonl. A rename appears from the next settlement on. The
  agit: unnamed and agit <owner/repo@branch> placeholders that agit's own
  SessionStart hook assigns are not recorded. The title is protected like other
  metadata observations and is not part of encrypted metadata projection.

Changed

• Privacy processing runs in a bounded local worker. Detected secrets receive
  reversible placeholders when their originals can be saved. Incomplete scans
  keep completed replacements; unavailable storage, scan failures and timeouts
  skip the affected privacy work and let conversation operations continue.

• Signed-in accounts obtain an automatically generated cloud dictionary key.
  Without a usable key, mappings remain in private local pending storage. Push,
  login and fetch schedule encrypted dictionary synchronization independently;
  another signed-in device can restore mappings after synchronization succeeds.

• Local default, global user and repository user rules share one policy path.
  Explicit blocks override allows, and allows override heuristic findings.
  Recovery records survive rule changes without becoming permanent block rules.

• Uploads require no secret-finding review or cloud privacy-policy resolution.
  Existing Git history is preserved. LFS payloads are outside privacy processing;
  their authorization, availability and integrity checks remain in place.

• This release requires the matching backend update to remove older server
  privacy gates. A skipped local transformation may retain original sensitive
  content, and pending dictionaries become recoverable on other devices only
  after successful encrypted synchronization.

• Project Stop hooks start session uploads in a background process and return
  immediately. Project status reports the resulting upload state.

Fixed

• Automatic project binding installs hooks for available runtimes that support
  them; other runtime sessions remain publishable through project sync.

• Live output preserves every emitted fragment and the remaining stream tail
  when local privacy processing is unavailable.

• Legacy native message identifiers stored as secret placeholders can be restored
  without changing unmasked carrier identities.

• agit project sync publishes a session that another repository already claims, such
  as one started from a desktop RC project, as a separate copy of that claim's branch
  in the project repository, instead of failing with "session already belongs to another
  repository". The original claim and the RC project's own publication target are
  unchanged; each later sync refreshes the copy. --history none keeps excluding such
  earlier sessions.

Full Changelog: agit-v0.2.15...agit-v0.2.16