Routing engine and run ledger foundations under metagit.core.routing with deterministic intent matching (route query), class catalog storage, run evidence records, and promotion policy evaluation with safety ceiling enforcement for mutating classes.
New CLI command groups: metagit route (query, list, show), metagit run (open, close, list), and metagit lane eval for policy-driven tier updates.
MCP parity tools: metagit_route_query and metagit_lane_eval with active-workspace gating and JSON schemas exposed in tools/list.
.metagit.yml schema now supports optional routing configuration (catalog, runs, id_prefix, and promotion policy defaults) used by CLI and MCP routing workflows.
metagit context resume to select the best objective to continue (prefers in_progress, then most recently updated) with optional substring filtering and --json output.
metagit context pause as a low-friction capture command that creates or updates an in_progress objective with quick note fields.
metagit context objective edit for direct field updates (title, status, repos, acceptance, human_notes, agent_notes) without JSON stdin.
metagit context objective set now accepts ADHD-friendly note capture flags (--human-notes, --left-off, --next, --blockers, --notes-file) alongside existing stdin JSON flow.
Objective service now normalizes absolute in-workspace repo references to manifest-relative ./... paths and preserves external absolute paths for portability across machines.
MCP adds metagit_context_resume parity tooling, and docs/skills/modality registry now document the resume/pause workflow.
Config Studio display options (session-only): hide unassigned fields, list headers, element numbering, type labels (all default off); optional bottom YAML preview (default hidden); left chevron tree expand.
New metagit-stamp skill for idempotent non-umbrella manifest stamping on target folders (local or git-backed).
Global CLI -c detects .metagit.yml workspace manifests and loads bundled AppConfig while exposing definition_path on the Click context.
FuzzyFinder non-preview mode uses full-width results (fixes empty project list in metagit nav).
FuzzyFinder quit keys (Ctrl+C, Esc, Ctrl+Q) use priority bindings and treat KeyboardInterrupt as cancel so stuck pickers can exit.
FuzzyFinder get_item_opacity no longer references nonexistent self.config (emptied metagit nav project list for string items).
metagit nav expands ~ in -c manifest paths, homes relative workspace.path to the manifest directory, and honors global -c definition_path.
AppConfig loading and metagit appconfig validate now reject unknown non-schema keys while still normalizing legacy version and default_profile metadata.
Windows nav test coverage now seeds USERPROFILE/HOMEDRIVE/HOMEPATH alongside HOME so Path("~") expansion is deterministic in GitHub Actions.
TUI project/repo pickers now initialize ListView selection index to the first row before focus, fixing Enter-key no-op transitions seen on Windows (ProjectSelectScreen staying active instead of pushing RepoSelectScreen).
Project repo entries now enforce a single locator (path or url, not both), and metagit skill docs were updated to document that exact-one rule.
Regenerated schemas/metagit_config.schema.json and schemas/metagit_appconfig.schema.json after skills/schema sync to keep generated artifacts current.
Graph suggestion and GitNexus group-sync test fixtures now comply with the single-locator repository rule, preventing CI regressions from legacy dual-locator test data.
Cross-project dependency service fixtures now use path-only repos under the single-locator rule while preserving declared/import edge coverage.
Workspace health service fixtures now use path-only repos under the single-locator rule, fixing failing health-check unit coverage.
Additional web/index/search/documentation test fixtures now avoid dual path+url repo definitions so CI reflects the enforced single-locator contract.
Central state plane (RFC-0015): pluggable DocumentStore with memory/local/http adapters and optional DynamoDB/MongoDB extras; extended state app-config and gate/status diagnostics; see docs/reference/central-state-plane.md.
Coordination backend resolution:resolve_backend() routes local and HTTP (as well as memory/DynamoDB/MongoDB) through resolve_document_store() + coord_bundle DocumentStore adapters; legacy local_bundle / remote_bundle remain available for direct callers and contract tests.
Ops whole-document state (Deployment B):OpsWebHandler GET/PUT for objectives/handoffs/approvals (and handoff append) now uses resolve_backend() so DynamoDB/MongoDB/HTTP/memory DocumentStore planes are honored instead of always reading local files.
HTTP handoff append: coord _HandoffsAdapter.append returns the server-normalized body from DocumentStore.append when it includes id (parity with prior RemoteHttpBackend.append_handoff).
Local document store hardening: reject unsafe namespace/key paths, replace locked JSON files atomically, prevent mutations of the derived coordination events document, derive get() bodies and CAS tokens from one byte snapshot, and cold-import without the context/state cycle.
State identity cold imports: organization/workspace identity helpers now live in an independent state module, avoiding the state.base ↔ context package initialization cycle.
Dependency security baseline: require GitPython 3.1.55 and pymdown-extensions 11.0.0 or newer to resolve advisories reported by the pre-push audit.
Manifest-homed workspace root: when -c / --config-path targets a .metagit.yml outside the cwd, relative workspace.path resolves against that manifest’s directory (resolve_workspace_root) for config graph suggest|export, workspace, project, prompt, skills, and gitnexus group sync. JSON suggest output includes workspace_root.
metagit config graph suggest|export: accept a leaf --config-path/-c (overrides the config group's manifest path); suggest gains --verbose for a logger-emitted summary (roots, candidate counts, prune stats) even with --json. GraphSuggestResult.scan_stats aggregates ImportHintScanner walk stats (dirs_pruned, files_skipped_gitignore, files_yielded), de-duplicated by repo path so a workspace repo is counted once no matter how many projects are scanned.
metagit config graph suggest: report-only GraphSuggestResult.stale_manual[] flags active manual graph.relationships entries with no supporting inferred edge in the current scan (deprecated edges excluded; support is matched on endpoints, so a differing relationship type does not flag an edge); graph-discover/graph-maintain prompts, the metagit-graph-maintain skill, and docs/reference/metagit-config.md document the status/provenance lifecycle and the report-only stale_manual review step.
Ignore-aware recursive scanning: new metagit.core.utils.repo_walk.iter_repo_files() always prunes the shared scaffold denylist (SCAFFOLD_PATH_SEGMENTS, moved to metagit.core.utils.scaffold_paths) and honors nested per-directory .gitignore files (git-scoped, pruned during the walk, not post-filtered), including !pattern negations. ImportHintScanner._scan_terraform_modules now uses this walker instead of unbounded Path.rglob("*.tf"), exposing per-scan last_walk_stats; WorkspaceSearchService imports the shared scaffold constant.
Durable graph.relationships:GraphRelationship gains status: Literal["active","deprecated","proposed"] and provenance: Literal["manual","promoted","imported"] (both default consistent with existing manual entries); new graph_validation.validate_graph_relationships() requires a non-blank id and checks from/to endpoints against workspace.projects[].repos. suggest --apply validates the patched document (the exact model that would be written) and reports validation_errors instead of writing on failure.
metagit config validate now exits 1 on invalid graph.relationships. Manifests whose relationships lack an id or reference unknown projects/repos previously validated cleanly. Migration: add id: to existing graph.relationships[] entries and correct any endpoint that does not resolve to a workspace.projects[].repos entry.
metagit config graph suggest default output is a human summary (counts plus a short candidate list) instead of a raw JSON dump, and no longer includes operations. Migration: pass --json for the previous machine-readable payload.
graph.relationships[] are written with the from: alias and explicit status:/provenance:. Manifests previously round-tripped the internal from_endpoint: key, which fails schemas/metagit_config.schema.json. Both spellings still load; re-saving a manifest normalizes it to from:.
iter_repo_files gitignore precedence:.gitignore rules are now evaluated in file order with last-match-wins, and a deeper directory's .gitignore overrides its ancestors' rules — matching git check-ignore instead of letting any ancestor ! negation unconditionally beat a later deny pattern.
metagit config graph suggest --apply: applying to a manifest with no graph: section no longer writes a placeholder example-value relationship that made the following metagit config validate fail. Promotion now issues a single set graph.relationships carrying the complete list, rebuilt from the manifest on disk.
metagit config validate: graph and agent_profile rejections no longer print a misleading "Failed to load metagit configuration file:" line after the real reason.
Terraform import scanning:iter_repo_files filters on suffix before running gitignore checks and caches each directory's ancestor rule chain, removing a large regression on repos with many non-matching files. files_skipped_gitignore / files_skipped_scaffold now count only suffix-matching files.
metagit config example: generate valid values for Literal-typed fields (e.g. graph.relationships[].status/provenance) instead of a placeholder string, so the generated exemplar validates against MetagitConfig.
metagit skills install --scope project / metagit mcp install --scope project: resolve project-local destinations against the nearest git repository root (not a nested cwd), so installs from subdirectories land in .cursor/skills, .claude/skills, etc. at the repo root.
Hermes targeting: honor HERMES_HOME (default ~/.hermes) for --target hermes skills; write MCP into $HERMES_HOME/config.yaml under mcp_servers (not ignored ~/.config/hermes/mcp.json); launch via the installed metagit binary (not uvx metagit-cli) and set METAGIT_AGENT_MODE=true on the Hermes MCP env block.
MCP stdio handshake: speak newline-delimited JSON per the MCP stdio transport spec (accept legacy Content-Length frames on read). Fixes hangs where standard NDJSON clients never received an initialize response.
metagit atlas validate: ship Atlas JSON Schemas under metagit/data/schemas/atlas/ so installed wheels resolve schemas without the repo-root schemas/atlas/ tree (fixes FileNotFoundError on PyPI 0.22.0).
RFC-0014 Metagit Atlas (Phase 0–1 local MVP): repository-local .atlas/ schema and generated evidence with metagit atlas init|generate|validate|status|query|refresh; deterministic inventory, Python symbol, and test discovery; curated entity validation and local query index. MCP, federation, and optional adapters remain deferred.
TUI project → repository path: home screen leads with in-app project then repo selection (auto-skips project pick for single-project manifests) without nested fuzzy finder suspend.
TUI quit/suspend noise: quit bindings use priority action_quit; KeyboardInterrupt during teardown is swallowed; legacy interactive suspend failures notify in-app instead of dumping a traceback.
TUI repository picker: Workspace “Select project → repository” now uses the in-app project/repo screens (no nested fuzzy suspend that appeared to do nothing).
metagit project list: defaults to a workspace-style project catalog (definition/root/counts); use -p/--detail for single-project YAML.
RFC-0010 Semantic Repository Knowledge Graph:SemanticGraphService can declare concept ownership, query concepts by id/name/alias, resolve path owners with ACL pattern overlap semantics, and emit ConceptDeclared events.
RFC-0010 SemanticGraphService: advisory conflicts(repository) hints detect when multiple active ACL claim agents overlap the same semantic concept paths and emit ConceptConflictHint events.
RFC-0010 ACL claim advice:metagit claim check / MCP claim checks now include advisory semantic concept_hints for overlapping concept ownership patterns without turning hints into claim conflicts.
RFC-0010 context events:metagit context events now includes semantic graph lifecycle events with source=semantic.
RFC-0010 semantic CLI:metagit semantic declare|query|owners|conflicts|ingest|seed exposes semantic concept ownership operations, including deterministic ingest hints and the optional seed catalog.
RFC-0010 semantic MCP parity: ACTIVE-gated metagit_semantic_declare|query|owners|conflicts|ingest tools mirror the semantic service and register the semantic_ownership modality markers.
RFC-0010 semantic operator surface: published semantic ownership reference, MkDocs nav entry, and agent quick-reference commands for CLI/MCP use; optional GitNexus import is documented as deferred.
RFC-0011 Merge Orchestrator: local merge requests, JSON queue/store, clean GitPython conflict aborts, conflict records with ACL command hints only, opt-in validator commands, gated promote, and source=merge events.
RFC-0011 merge CLI/MCP parity:metagit merge enqueue|status|integrate|retry|promote plus ACTIVE-gated metagit_merge_enqueue|status|integrate|retry MCP tools share MergeOrchestrator and register the merge_orchestrator modality markers.
RFC-0011 merge operator surface: published merge orchestrator reference, MkDocs nav entry, agent quick-reference commands, bundled skill markers, and ACL series status updates.
Expanded RFC-0010 Semantic Repository Knowledge Graph design decisions and bite-sized TDD implementation plan under docs/superpowers/ (next ACL series MR after 0008/0009).
RFC-0011 merge validators: run opt-in command strings via the platform shell (shell=True) so Unix CI uses /bin/sh and Windows CI uses ComSpec, instead of hardcoding /bin/zsh or /bin/sh.
RFC-0010 SemanticGraphService:declare() now returns validation errors for bad repositories or empty patterns instead of raising, preserving the service T | Exception contract.
Docs CI (mkdocs build --strict): replace relative links from docs/metagit-rewrite-workspace.md to examples/metagit-rewrite/* with GitHub blob URLs so MkDocs no longer aborts on out-of-tree targets.
RFC-0007 Agent Coordination Layer (foundation):metagit branch|lease|worktree|claim CLI groups, MCP tools (metagit_branch_*, metagit_lease_*, metagit_worktree_*, metagit_claim_*), local persistence under .metagit/{branches,leases,worktrees,claims,agents,events}/, isolated checkouts under configurable workspace.worktrees_path (default .worktrees/, env METAGIT_WORKSPACE_WORKTREES_PATH), advisory file claims and repo presence, agent execution manifests on worktree create, ACL events in metagit context events (source=acl), and dispatch-plan acl_commands hints. Docs: docs/reference/agent-coordination.md. Bundled skill metagit-agent-coordination. Agent onboarding indexes (llms.txt, AGENTS.md, docs/cli_reference.md) list ACL commands and MCP tools. Worktrees/campaigns path basenames are reserved project names.
ACL RFC series build specs (0008–0013): design + implementation plan per RFC under docs/superpowers/, indexed by docs/superpowers/specs/2026-07-09-acl-rfc-series-index.md (0008 fuller plan; 0009–0013 phased; 0013 composition-only).
PYTHONPATH shadowing:metagit/__init__.py now prepends the interpreter's own site-packages (sysconfig purelib) before any other imports so a caller-injected PYTHONPATH (e.g. Hermes embedding metagit) cannot load a foreign pydantic and crash with ModuleNotFoundError: pydantic_core._pydantic_core. Does not clear or rewrite the PYTHONPATH env var.
metagit tui: remove the Context & agents command group from the hub menu; fix repository picker RuntimeError: asyncio.run() cannot be called from a running event loop by running nested Textual fuzzy finder apps in a worker thread when the hub already owns an asyncio loop.
Test suite env independence: an autouse fixture now clears METAGIT_AGENT_MODE before each test so a value exported in the caller's shell (common in agent/automation shells) can't disable interactive paths and cause spurious failures in CLI picker and appconfig-display tests. Tests needing the variable set it explicitly.
Campaign schema superset:CampaignDocument gains optional goal, reference_impl, created, and updated fields; campaign new accepts an explicit --repo project/repo (repeatable, frozen set — no query drift) as an alternative to --query, plus --goal and --reference; campaign status surfaces goal/reference.
Legacy overlay compatibility: campaign documents authored before the native schema now load without a rewrite — integer schema_version, status: complete (→ completed), and list-form selection.tags (→ map) are coerced on load. Point native at an existing overlay dir via workspace.campaigns_path / METAGIT_WORKSPACE_CAMPAIGNS_PATH.
agent_profile: structured inheritable blocks on workspace, project, and repo scopes (skills, mcp, rules, vendors, tier, inherit); metagit agent profile show and metagit agent apply; catalog validation in metagit config validate
Native campaigns:metagit campaign list|status|new|validate|set|expand with diffable YAML under configurable workspace.campaigns_path (default _campaigns/ at manifest root)
Multi-agent coordination: handoff claim --ttl, metagit context handoff heartbeat, auto-release of expired claims; campaign/objective filters on metagit context events; objective mr_url and approval_id fields; capability hints on agent dispatch-plan from merged profiles
metagit tui: Textual hub to browse common CLI workflows, run commands, and configure metagit.config.yaml via an interactive wizard (--wizard opens the wizard directly)
metagit tui: Esc/Back navigation on list screens; wizard Back button; correct manifest flags per CLI group (workspace uses --config, not -c); repo picker runs in-process with terminal suspend instead of hanging in a captured subprocess
Ops API session endpoints: GET /v3/ops/session (digest with active_objective_id + repo changes) and POST /v3/ops/session/begin (session bootstrap envelope)
MCP parity tools for objective/session collaboration: metagit_objective_edit (partial objective updates) and metagit_session_digest (current session digest)
PATCH /v3/ops/objectives/{id} now supports partial edits of objective fields (title, acceptance, human_notes, agent_notes, repos, status) while preserving status-only behavior
The web /agents route now includes Templates, Objectives, and Sessions sub-tabs with live refresh controls, collaborative objective editing, and a session digest/begin-session dashboard
The web Objectives panel now supports inline status changes, a toggleable grouped/list layout, and per-row save actions; the CI/CD dashboard now understands SCP/SSH Git remotes and shows safe provider token metadata when the remote API exposes it
metagit project source sync enhancements: include/ignore glob filters, --ensure / --refresh-metadata idempotency, provider topic enrichment into repo tags, default namespaced GitLab naming, --json agent output, --sync post-apply clone, MCP metagit_project_source_sync, metagit workspace import alias, declarative workspace.projects[].sources[] with --from-manifest, and approval-gated reconcile removals. Web parity: Config Studio sources[] editing, Workspace Console manifest sync (POST /v3/ops/source-sync), pending approvals panel, and shared ApprovalResolveOrchestrator.
Modality parity gate:scripts/modality-parity.yml + scripts/check_modality_parity.py (wired into task qa:prepush) enforce declared CLI/MCP/web markers for operator-facing features.
metagit version check: CLI and MCP metagit_version_check compare the installed package to the latest GitHub release (notes) and PyPI; available without an active workspace gate. Use --json or include_notes: false for agent-friendly output.
metagit version upgrade: CLI and MCP metagit_version_upgrade detect the install channel (uv tool, pip, editable) and plan or run a self-update from PyPI. Defaults to dry-run; pass --apply or apply: true to execute. Refuses editable development installs.
Agent onboarding:llms.txt, docs/agents.md, and README/AGENTS.md sections so agents landing on the GitHub repo can install and use Metagit with minimal tokens (context packs, skills, MCP).
metagit-agent-access skill: On-demand optimizer (script + subagent prompt) to scaffold llms.txt, AGENTS.md, and hidden README HTML agent blocks for any repository.
Context packs Phase 2: tier 2 session digest (SessionDigestService), workspace objectives (CLI/MCP/Web), approval queue for mutating ops, and repomix context profiles (bugfix-local, config-edit, cross-repo-impact) via metagit context repomix and task repomix:profile.
Context packs Phase 1: tier 0 workspace map and tier 1 repo cards via metagit context pack, MCP metagit_context_pack / metagit_repo_card, and prompt kind context-pack.
Repomix context profiles:src/metagit/data/context_profiles.yaml bundles scoped globs; RepomixProfileService runs repomix --include/--ignore for a repository directory.
Top-level graph block for manual cross-repo relationships (merged into cross-project dependency maps and graph_export_payload() for GitNexus-style exports).
Per-project dedupe.enabled override on workspace.projects[] in .metagit.yml (overrides app-config workspace.dedupe.enabled for sync and layout under that project).
metagit prompt kind repo-enrich (repo scope): CLI workflow to discover repo metadata (metagit detect, project source sync) and merge into the workspace manifest entry.
Bundled skill metagit-cli: CLI-only shortcuts for agents, including every metagit prompt kind and common catalog/detect/sync commands (no MCP or HTTP API).
workspace.dedupe.enabled defaults to false in app config; enable in metagit.config.yaml or per-project dedupe.enabled in .metagit.yml when canonical checkouts are desired.
load_config() applies environment variable overrides (same as AppConfig.load()), including METAGIT_AGENT_MODE and METAGIT_WORKSPACE_DEDUPE_ENABLED.
metagit config show prints the source .metagit.yml by default (preserves your formatting); use --normalized for a readable model round-trip (| blocks, Unicode not escaped) or --json for agents.
Layered agent_instructions on .metagit.yml (file, workspace, project, repo/path); legacy agent_prompt accepted on load. AgentInstructionsResolver composes stacks for MCP project context (instruction_layers, effective_agent_instructions, per-repo agent_instructions).
MCP metagit_workspace_semantic_search runs GitNexus query per managed repo (requires registry + index) for vector-ranked process results.
MCP metagit_workspace_health_check includes branch age (head_commit_age_days, merge_base_age_days) when check_stale_branches is enabled, with thresholds branch_head_warning_days / branch_head_critical_days / integration_stale_days and summary counters for stale HEAD and integration drift.
MCP Phase 3 workspace intelligence: metagit_workspace_health_check, metagit_workspace_discover, and metagit_project_template_apply (dry-run by default), plus resources metagit://workspace/health and metagit://workspace/context.
MCP metagit_cross_project_dependencies to map declared, import-hint, and shared-config relationships between workspace projects with GitNexus index status per repo.
MCP Phase 1 search/sync improvements: metagit_repo_search filters (status, has_url, sync_enabled, sort), metagit_workspace_search ripgrep-backed hits with repos/paths/exclude/context_lines/intent, and batch metagit_workspace_sync with only_if and dry_run.
MCP project context tools: metagit_project_context_switch, metagit_workspace_state_snapshot, metagit_workspace_state_restore, and metagit_session_update for switching workspace projects with persisted session state under .metagit/sessions/ and git-state snapshots under .metagit/snapshots/.
Managed repository search across .metagit.yml workspace repos: CLI (metagit search / metagit find), MCP tool metagit_repo_search, and local JSON HTTP API (metagit api serve with /v1/repos/search and /v1/repos/resolve).
metagit project repo prune to review and remove sync-folder directories not declared in .metagit.yml (with --dry-run, --include-hidden, and --force to skip prompts).
workspace.ui_ignore_hidden in app config (default true) to hide dot-directories from the repo picker UI.
Removed redundant config.version from application config; use metagit version for the installed package. Legacy version keys in YAML are ignored on load. api_version remains for a future remote API contract (default empty; METAGIT_API_VERSION still applies).
Workspace search: preset names that map to intent globs (e.g. terraform) now pass **/*.tf include globs to ripgrep; if ripgrep returns no hits while a preset or intent is set, the term-based filesystem fallback runs so Ubuntu/CI still gets matches when rg is installed but misbehaves or misparses.
Workspace search fallback without rg matches preset-expanded terms (e.g. preset=terraform) instead of treating the composed | pattern as one literal string; fixes empty results when ripgrep is not installed.
task test now runs uv run pytest so tests use the project virtualenv (fixes ModuleNotFoundError: loguru when pytest was not the venv binary).