Agentic Coding Flywheel Setup Files

ACFS v0.9.0

ACFS is installed with curl | bash, so this release is the script itself, not a set of binaries: there are intentionally no downloadable assets. The deliverable is that this tag installs.

57 commits since v0.8.0 (2026-08-25 through 2026-09-04). Installer-only release, like every ACFS release: the deliverable is that this tag installs. Pinned install: curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/v0.9.0/install.sh" | bash -s -- --yes --mode vibe --ref v0.9.0.

Update & service reliability

• acfs services repairs partial sessions (GH [#381], [#382], [#383]) -- start on an existing acfs-svc session relaunches only the panes whose process is not running (acfs services repair is the same operation under its own name), restart preflights every managed binary against the post-install smoke checks before stopping anything and named services restart independently (acfs services restart cass), managed binaries are resolved from the ACFS install directories as well as PATH, and running-binary drift (a live service still executing a replaced, deleted inode) is detected from /proc/<pid>/exe and reported by services status, services drift, acfs doctor and the end of acfs update (7c4e3462)
• Per-tool holds, post-install rollback and partial-failure exit codes (GH [#357]) -- acfs hold <tool> --reason R [--version X] [--expiry D] [--owner O], acfs unhold <tool> and acfs holds; a fresh install that fails its smoke check is rolled back to the retained .prev binary with a backoff that --force overrides; acfs doctor reports every hold and every rolled-back tool; acfs update exits 0 / 1 / 2 for success / total failure / partial failure (00be20a9, 7c102849)
• Per-tool smoke probes with a headless-safe fallback chain (GH [#378]) -- --version then --help then version, with per-tool overrides for fsfs, mdwb and pfr; a binary that executes but rejects every probe is unsupported and kept, only a broken verdict (timeout, cannot execute, signal, traceback) rolls back (4567aad8)
• Agent Mail liveness (3 s) and readiness (10 s) probes are split and "alive, readiness slow" is reported distinctly (GH [#362]) (b8292ff8); the custom MCP Agent Mail update block honours holds (GH [#377])
• minisign is provisioned on upgraded hosts (GH [#375]) because the mcp_agent_mail >= 0.3.31 and caam >= 0.1.18 installers verify release signatures and fail closed without it; acfs doctor reports it under Core tools (0a1a6b66, b6036d09, 705dd024)
• acfs update is serialized with a per-UID flock on a deterministic lock path, guarded for sourced contexts (GH [#347]) (045d0400, ccfa1c87, aa923d6d)
• refresh_checksums no longer clobbers a tracked checksums.yaml on git-checkout installs (GH [#364]) and replaced local acfs.zshrc edits are flagged (GH [#359]) (2fda8528); acfs changelog --since 30d parses durations instead of crashing (GH [#376])
• Manual service lifecycle and the nightly control-plane boundary are documented; acfs doctor detects checkout-vs-runtime skew (GH [#360]) (e5807b7b); the atuin daemon socket check and the managed-loader atuin init land (GH [#359]) (0c645fde)

Installer

• --only / --only-phase / --skip are enforced on the legacy Arch paths, SRPS auto-skips off apt (GH [#350]) and nvm's npm-prefix exit 11 no longer fails a successful node install (GH [#351]) (b4a9f9dc)
• Stack-phase success is no longer reported when --only modules fail (GH [#373]) (d88e6280); TERM survives the sanitized verified-installer environment (GH [#370]); CARGO_TARGET_DIR is resolved in the four cargo-build-and-cp installs (GH [#371]); the base package batch provisions libsqlite3-dev (GH [#372]) and minisign
• Antigravity's default model is Gemini 3.8 Flash (High) -- agy-locked, agy_model_guard.sh, the manifest launcher settings, the ntm config template, acfs info, the docs and the web copy all move from 3.7 (3b66d00d, cd1c7854)
• atuin's daemon socket is pinned under ~/.local/share/atuin/ (GH [#358]), the atuin guard reads /proc/$PPID/comm instead of forking ps twice per command (GH [#359]), the cosign check is version-aware (GH [#367]) and the checksum monitor accepts bun's bunx hardlink (GH [#355]) (03ade8da)
• Support bundles redact identity paths so real bundles pass the fail-closed gate (GH [#369]) (5b2f1a78); bun wrappers and the monitor put the pinned Bun on the clean-environment PATH (93d07d81, 2788aa16)

Release gate & checksums

• VERSION must equal install.sh's ACFS_VERSION -- scripts/release-doctor.sh gates on it after v0.8.0 shipped with a stale VERSION (GH [#352]) (81ac331c)
• scripts/check-manifest-drift.sh --fix regenerates, commits and pushes drifted generated checksums and no longer refuses a clean tree (25a9638f, 18a84749)
• Installer pins re-verified against live upstream: twelve in one sweep (GH [#374]), cass / grok / fmd (GH [#361], [#366]), sbh after its asset renaming, atuin / br / dcg / mcp_agent_mail, and the web manifest provenance hash kept in sync (0a1a6b66, babca45c, 8975eb4a, cbd80302)
• Checksum monitor: the monitor host's pinned Bun is tracked (1.3.8 -> 1.4.0), umask-002 checkouts and clean clones survive, distro-managed coreutils targets are accepted, and validator namerefs no longer shadow the caller's arrays (dc57e05e, 4be857be, f631dba9, fbe6b4b4)

Web (apps/web)

• UI/UX audit follow-through: light-mode dark islands, accessibility names, targets and scroll regions, honest claims, guide heading levels, a transition-all sweep, the wizard's Linux skip and mobile dock, and manifest types (57e590ac, e53341b9, d8f2c0dc)
• Setup wizard flow, step validation and command-card ergonomics; OS selection, accounts wizard and the coordination diagram; glossary, troubleshooting, workflow and tool deep-dive pages (eeda34b5, 0623e3c8, 4eb87304)
• The lesson sidebar stays visible and remembers its scroll position (GH [#356]); wizard screenshots ship with the site instead of 404ing raw URLs (GH [#363]); Fragment keys, an intersection observer for the terminal and SVG hydration precision (b9448756, 1d053cfd, 86a3dc25)

Verification

• scripts/release-doctor.sh --full --network=check: pass (branch policy, VERSION == ACFS_VERSION, ShellCheck, manifest/generated/checksum drift contract, web type-check, lint and production build).
• scripts/check-manifest-drift.sh --fix regenerated scripts/generated/internal_checksums.sh for the ACFS_VERSION bump in the release commit, so the v0.7.0 integrity failure cannot recur.
• Antigravity contract: tests/unit/test_agy_install.sh 37/37; web unit tests, type-check and lint clean.

Pinned install: curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/v0.9.0/install.sh" | bash -s -- --yes --mode vibe --ref v0.9.0

Full changelog: https://github.com/Dicklesworthstone/agentic_coding_flywheel_setup/blob/main/CHANGELOG.md