Agentflow v8.4.15

Agentflow keeps owner conversation and live recovery in a configured notebook; advanced rules load only on demand.

stream(branch/worktree) is an owner/session feature workspace, usually a branch/worktree with adjacent notebook and configuration. Non-code notebook-only requests may use a stream file and root pointer without branching, even with Git. Ordinary notebooks support no-Git folders; new-feature: requires Git. External workers use disposable no-remote clones; internal/host work uses actual tools and recorded ownership.

For releases, update version and heading together: major/minor/patch for breaking changes/features/fixes. This file supplies the release version. Follow repository release instructions; task commits are not releases. For a correction to an already-published release, first fetch and inspect the public branch and treat its current version and files as authoritative; never infer them from a private development checkout. A same-version public correction must preserve newer public files and verify the exact remote commit after pushing.

Incident citations explain failures. Approved redesigns may replace obsolete remedies; preserve hazard checks and history.

Start here

Already-launched looper workers follow their supplied plan directly, not this host startup/closeout protocol.

1. The host supplies the complete Agentflow skill directory as <active-agentflow-skill-dir>. Read the skill from that path. If the host does not supply a complete path, stop with one clear message; never guess a home-directory installation or probe a shell function.

2. The first and only startup call uses this canonical startup command with the exact owner message on standard input: node <active-agentflow-skill-dir>/scripts/agf.js start --repo <repo> --host <safe-id> [--host-family <known-family>] --message-stdin --json. Never make an empty or probe startup call; retry may see setup as foreign. Keep owner text outside shell syntax; close stdin. Never use a pseudo-terminal or tty: true. For shell tools, use a single-quoted heredoc: append <<'AGF_INPUT', the exact message, and a bare AGF_INPUT line. Never wait for stdin or create an input file. An explicit safe ID takes precedence over inherited markers; missing or conflicting automatic identity requires an explicit safe ID, never a guess. — I-077.

   Git is optional; <repo> is the working project folder. With git.state: unavailable, continue there; never require another path or run git init. Commits, pushes, worktrees, and Git evidence are inapplicable. Use local closeout with owner capture, validation, tests, and host review.