agent-yes 1.261.1 → 1.262.0

package/dist/{SUPPORTED_CLIS-CUP5ABMb.js → SUPPORTED_CLIS-BFLGbQmm.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-d15cc3u7.js";
-import "./ts-BeFjrOhc.js";
+import "./versionChecker-D-WLKAN6.js";
+import "./ts-BqaOPFCQ.js";
 import "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-pwp7Vb7o.js";
 import "./pidStore-DfSm1jog.js";
 import "./messageLog-BYFwioFY.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DGlkS83_.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CjKxvhlh.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-DGlkS83_.js → SUPPORTED_CLIS-CjKxvhlh.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-BeFjrOhc.js";
+import { t as CLIS_CONFIG } from "./ts-BqaOPFCQ.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DGlkS83_.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-CjKxvhlh.js.map

package/dist/{agentShare-tL6j9Em4.js → agentShare-LEETLOm1.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { I as resolveOne } from "./subcommands-BSdA19Nv.js";
+import { I as resolveOne } from "./subcommands-Zk3brdKt.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import { a as startShare } from "./share-B-e_9WBx.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-tL6j9Em4.js.map
+//# sourceMappingURL=agentShare-LEETLOm1.js.map

package/dist/{callback-JJh1_Zzp.js → callback-CB3UjryF.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { I as resolveOne } from "./subcommands-BSdA19Nv.js";
+import { I as resolveOne } from "./subcommands-Zk3brdKt.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Cg3Ye0ZS.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-DCPbGttS.js");
+		const { resolveLocalServeUrl } = await import("./serve-DhtgWGZB.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-JJh1_Zzp.js.map
+//# sourceMappingURL=callback-CB3UjryF.js.map

package/dist/{callback-BfJqf5hh.js → callback-lqCCgSy1.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import "./subcommands-BSdA19Nv.js";
+import "./subcommands-Zk3brdKt.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import "./callbackCore-Cg3Ye0ZS.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-JJh1_Zzp.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CB3UjryF.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-d15cc3u7.js";
-import { r as getRustBinary } from "./rustBinary-BBzI-0gG.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-D-WLKAN6.js";
+import { r as getRustBinary } from "./rustBinary-_qRGhAa5.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-C5qaj8cS.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-D6O9uRvN.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -305,7 +305,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CUP5ABMb.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BFLGbQmm.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -356,7 +356,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CUP5ABMb.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BFLGbQmm.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-d15cc3u7.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-BeFjrOhc.js";
+import "./versionChecker-D-WLKAN6.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-BqaOPFCQ.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-pwp7Vb7o.js";

package/dist/{notifyDaemon-C1HL2AKc.js → notifyDaemon-P6Q7Eo_B.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { $ as liveWatchers, J as appendEvent, N as renderLogTailLines, Q as listInboxParents, X as hostId, Y as gcInboxes, et as readInbox, it as notifyDir, l as deriveLiveState, nt as daemonLockDir, rt as daemonLockOwnerPath, tt as shouldStealLock, v as isPidAlive, w as listRecords } from "./subcommands-BSdA19Nv.js";
+import { $ as liveWatchers, J as appendEvent, N as renderLogTailLines, Q as listInboxParents, X as hostId, Y as gcInboxes, et as readInbox, it as notifyDir, l as deriveLiveState, nt as daemonLockDir, rt as daemonLockOwnerPath, tt as shouldStealLock, v as isPidAlive, w as listRecords } from "./subcommands-Zk3brdKt.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -836,4 +836,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-C1HL2AKc.js.map
+//# sourceMappingURL=notifyDaemon-P6Q7Eo_B.js.map

package/dist/{rustBinary-BBzI-0gG.js → rustBinary-_qRGhAa5.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-d15cc3u7.js";
+import { r as getInstalledPackage } from "./versionChecker-D-WLKAN6.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -243,4 +243,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { findTrayLauncher as n, getRustBinary as r, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-BBzI-0gG.js.map
+//# sourceMappingURL=rustBinary-_qRGhAa5.js.map

package/dist/{schedule-DCR7zeRi.js → schedule-ChAdx2h6.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-d15cc3u7.js";
-import "./ts-BeFjrOhc.js";
+import "./versionChecker-D-WLKAN6.js";
+import "./ts-BqaOPFCQ.js";
 import "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-pwp7Vb7o.js";
 import "./pidStore-DfSm1jog.js";
 import "./messageLog-BYFwioFY.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DGlkS83_.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CjKxvhlh.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-Bxuk_MOq.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-vhOBffJ3.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DCR7zeRi.js.map
+//# sourceMappingURL=schedule-ChAdx2h6.js.map

package/dist/{serve-DCPbGttS.js → serve-DhtgWGZB.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-d15cc3u7.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-BBzI-0gG.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-BeFjrOhc.js";
+import { r as getInstalledPackage } from "./versionChecker-D-WLKAN6.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-_qRGhAa5.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-BqaOPFCQ.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,17 +11,17 @@ import { r as recordInbox } from "./messageLog-BYFwioFY.js";
 import { t as pgidForWrapper } from "./reaper-C4BvNylH.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DGlkS83_.js";
-import { A as readPtysize, F as renderRawLogLines, I as resolveOne, M as recentReadEdges, N as renderLogTailLines, O as readLogForRender, P as renderRawLog, S as isUserTyping, V as snapshotStatus, Z as isTransientLockMkdirError, at as TYPING_BADGE, d as extractBadges, j as recentMessageEdges, k as readNotes, m as extractTaskCounts, p as extractNeedsInput, q as writeToIpc, s as controlCodeFromName, u as deriveLiveStatus, w as listRecords } from "./subcommands-BSdA19Nv.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CjKxvhlh.js";
+import { A as readPtysize, F as renderRawLogLines, I as resolveOne, M as recentReadEdges, N as renderLogTailLines, O as readLogForRender, P as renderRawLog, S as isUserTyping, V as snapshotStatus, Z as isTransientLockMkdirError, at as TYPING_BADGE, d as extractBadges, j as recentMessageEdges, k as readNotes, m as extractTaskCounts, p as extractNeedsInput, q as writeToIpc, s as controlCodeFromName, u as deriveLiveStatus, w as listRecords } from "./subcommands-Zk3brdKt.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Cg3Ye0ZS.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-JJh1_Zzp.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CB3UjryF.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-Bxuk_MOq.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-vhOBffJ3.js";
-import { i as importProvisionModule } from "./ws-C7dDiQPE.js";
+import { i as importProvisionModule } from "./ws-Vy3mBjNm.js";
 import { r as spawnRejectionReason } from "./spawnGate-D-68B907.js";
-import { i as launchTray } from "./trayApp-DO9sPIPo.js";
+import { i as launchTray } from "./trayApp-DtThjl0_.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -675,6 +675,33 @@ function originOwnerRepo(cwd) {
 		return null;
 	}
 }
+async function runCapture(argv, opts) {
+	try {
+		const child = Bun.spawn(argv, {
+			cwd: opts?.cwd,
+			env: freshAgentEnv(),
+			stdin: "ignore",
+			stdout: "pipe",
+			stderr: "pipe"
+		});
+		const timeoutMs = opts?.timeoutMs ?? 15e3;
+		const code = await Promise.race([child.exited, new Promise((r) => setTimeout(() => r(124), timeoutMs))]);
+		if (code === 124) child.kill();
+		const [stdout, stderr] = await Promise.all([new Response(child.stdout).text(), new Response(child.stderr).text()]);
+		return {
+			ok: code === 0,
+			stdout,
+			stderr
+		};
+	} catch (e) {
+		return {
+			ok: false,
+			stdout: "",
+			stderr: e.message
+		};
+	}
+}
+let ghRepoListMemo = null;
 async function runProvisionHook(cwd, koho) {
 	const hook = getProvisionHook();
 	if (!hook) return { ran: false };
@@ -2368,7 +2395,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-xrWDKWNS.js");
+			const ws = await import("./ws-mG4yeZu8.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2388,7 +2415,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-xrWDKWNS.js");
+			const ws = await import("./ws-mG4yeZu8.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2409,6 +2436,147 @@ Options:
 				return new Response(`git status failed: ${e.message}`, { status: 502 });
 			}
 		}
+		if (req.method === "GET" && p === "/api/ws/repos") {
+			const ws = await import("./ws-mG4yeZu8.js");
+			try {
+				await ws.loadProvision();
+			} catch (e) {
+				return new Response(e.message, { status: 501 });
+			}
+			let wsRoot;
+			let workspaces;
+			try {
+				({wsRoot, workspaces} = await ws.collectWorkspaces());
+			} catch (e) {
+				return new Response(`workspace walk failed: ${e.message}`, { status: 500 });
+			}
+			const byRepo = /* @__PURE__ */ new Map();
+			for (const w of workspaces) {
+				const key = `${w.owner}/${w.repo}`;
+				const entry = byRepo.get(key) ?? {
+					owner: w.owner,
+					repo: w.repo,
+					local: true,
+					branches: []
+				};
+				entry.branches.push({
+					name: w.branch,
+					path: w.path
+				});
+				byRepo.set(key, entry);
+			}
+			const gh = { ok: false };
+			let ghRepos = [];
+			const memo = ghRepoListMemo;
+			if (memo && performance.now() - memo.t < 6e4) {
+				gh.ok = memo.ok;
+				if (memo.error) gh.error = memo.error;
+				ghRepos = memo.repos;
+			} else {
+				const r = await runCapture([
+					"gh",
+					"repo",
+					"list",
+					"--limit",
+					"200",
+					"--json",
+					"nameWithOwner"
+				], { timeoutMs: 1e4 });
+				if (r.ok) try {
+					ghRepos = JSON.parse(r.stdout).map((x) => x.nameWithOwner);
+					gh.ok = true;
+				} catch {
+					gh.error = "gh returned unparseable JSON";
+				}
+				else gh.error = (r.stderr.trim() || "gh unavailable").slice(0, 200);
+				ghRepoListMemo = {
+					t: performance.now(),
+					ok: gh.ok,
+					repos: ghRepos,
+					error: gh.error
+				};
+			}
+			for (const nameWithOwner of ghRepos) {
+				const [owner, repo] = nameWithOwner.split("/");
+				if (owner && repo && !byRepo.has(nameWithOwner)) byRepo.set(nameWithOwner, {
+					owner,
+					repo,
+					local: false,
+					branches: []
+				});
+			}
+			const repos = [...byRepo.values()].sort((a, b) => a.local !== b.local ? a.local ? -1 : 1 : `${a.owner}/${a.repo}`.localeCompare(`${b.owner}/${b.repo}`));
+			return Response.json({
+				schema: ws.WS_JSON_SCHEMA,
+				wsRoot,
+				repos,
+				gh
+			});
+		}
+		if (req.method === "GET" && p === "/api/ws/branches") {
+			const repoParam = url.searchParams.get("repo") ?? "";
+			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
+			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
+			const [, owner, repo] = m;
+			const ws = await import("./ws-mG4yeZu8.js");
+			let prov;
+			try {
+				prov = await ws.loadProvision();
+			} catch (e) {
+				return new Response(e.message, { status: 501 });
+			}
+			const wsRoot = prov.resolveWsRoot(getProvisionRoot());
+			const localByBranch = /* @__PURE__ */ new Map();
+			try {
+				for (const w of await ws.walkWorkspaces(wsRoot)) if (w.owner === owner && w.repo === repo) localByBranch.set(w.branch, w.path);
+			} catch {}
+			let remote = [];
+			let source = "";
+			let error;
+			const anchor = localByBranch.values().next().value;
+			if (anchor) {
+				const r = await runCapture([
+					"git",
+					"-C",
+					anchor,
+					"ls-remote",
+					"--heads",
+					"origin"
+				]);
+				if (r.ok) {
+					remote = [...r.stdout.matchAll(/\trefs\/heads\/(.+)/g)].map((x) => x[1].trim());
+					source = "ls-remote";
+				} else error = (r.stderr.trim() || "git ls-remote failed").slice(0, 200);
+			}
+			if (!source) {
+				const r = await runCapture([
+					"gh",
+					"api",
+					`repos/${owner}/${repo}/branches`,
+					"--paginate",
+					"--jq",
+					".[].name"
+				]);
+				if (r.ok) {
+					remote = r.stdout.split("\n").map((s) => s.trim()).filter(Boolean);
+					source = "gh";
+					error = void 0;
+				} else if (!error) error = (r.stderr.trim() || "gh unavailable").slice(0, 200);
+			}
+			const branches = [...new Set([...remote, ...localByBranch.keys()])].sort((a, b) => a.localeCompare(b)).map((name) => ({
+				name,
+				remote: remote.includes(name),
+				provisioned: localByBranch.has(name),
+				...localByBranch.has(name) ? { path: localByBranch.get(name) } : {}
+			}));
+			return Response.json({
+				schema: ws.WS_JSON_SCHEMA,
+				repo: `${owner}/${repo}`,
+				source: source || "local-only",
+				branches,
+				...error ? { error } : {}
+			});
+		}
 		if (req.method === "GET" && p === "/api/notes") {
 			const notes = await readNotes();
 			return Response.json(Object.fromEntries(notes));
@@ -3034,10 +3202,11 @@ Options:
 				try {
 					const wsRoot = getProvisionRoot();
 					result = await prov.provision(spec, wsRoot ? { wsRoot } : void 0);
+					if (!result?.ok && body.create === true && result?.reason === "branch-not-found" && typeof prov.createBranch === "function") result = await prov.createBranch(spec, wsRoot ? { wsRoot } : void 0);
 				} catch (e) {
 					return new Response(`provision failed: ${e.message}`, { status: 502 });
 				}
-				if (!result?.ok) return new Response(result?.error ?? "provision failed", { status: 502 });
+				if (!result?.ok) return new Response((result?.error ?? "provision failed") + (result?.reason === "branch-not-found" && body.create !== true ? "\n(branch missing on the remote — retry with create:true to branch off the default)" : ""), { status: 502 });
 				cwd = result.folder;
 				provisioned = {
 					action: result.action,
@@ -3145,7 +3314,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-tL6j9Em4.js");
+				const { createScopedShare } = await import("./agentShare-LEETLOm1.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3160,12 +3329,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-tL6j9Em4.js");
+			const { listShares } = await import("./agentShare-LEETLOm1.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-tL6j9Em4.js");
+			const { revokeShare } = await import("./agentShare-LEETLOm1.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3467,7 +3636,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-tL6j9Em4.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-LEETLOm1.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3480,4 +3649,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-DCPbGttS.js.map
+//# sourceMappingURL=serve-DhtgWGZB.js.map

package/dist/{setup-DO75Uqec.js → setup-BlJRaODn.js}

@@ -40,7 +40,7 @@ async function cmdSetup(rest) {
 	} catch {}
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-DCPbGttS.js");
+	const { cmdServe } = await import("./serve-DhtgWGZB.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -50,4 +50,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-DO75Uqec.js.map
+//# sourceMappingURL=setup-BlJRaODn.js.map

package/dist/{subcommands-C5qaj8cS.js → subcommands-D6O9uRvN.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { A as readPtysize, B as runSubcommand, C as lastStdinAt, D as readAgentPtysize, E as menuSelectKeys, F as renderRawLogLines, G as waitForLogQuiet, H as stdinActivityPath, I as resolveOne, K as writeKeysPaced, L as resolveReadWindow, M as recentReadEdges, N as renderLogTailLines, O as readLogForRender, P as renderRawLog, R as resolveResumeArgs, S as isUserTyping, T as matchKeyword, U as stopTipForCli, V as snapshotStatus, W as submitAndConfirm, _ as isExitRequest, a as backoffWhileTyping, b as isSubcommand, c as cursorAbs, d as extractBadges, f as extractMenu, g as isAgentStuck, h as finalizedLines, i as TYPING_WINDOW_MS, j as recentMessageEdges, k as readNotes, l as deriveLiveState, m as extractTaskCounts, n as MAX_RENDER_BYTES, o as cmdHelp, p as extractNeedsInput, q as writeToIpc, r as READ_PAGE_DEFAULT, s as controlCodeFromName, t as GRACEFUL_EXIT_COMMANDS, u as deriveLiveStatus, v as isPidAlive, w as listRecords, x as isUnknownManagerToken, y as isSlashCommand, z as restartHintLines } from "./subcommands-BSdA19Nv.js";
+import { A as readPtysize, B as runSubcommand, C as lastStdinAt, D as readAgentPtysize, E as menuSelectKeys, F as renderRawLogLines, G as waitForLogQuiet, H as stdinActivityPath, I as resolveOne, K as writeKeysPaced, L as resolveReadWindow, M as recentReadEdges, N as renderLogTailLines, O as readLogForRender, P as renderRawLog, R as resolveResumeArgs, S as isUserTyping, T as matchKeyword, U as stopTipForCli, V as snapshotStatus, W as submitAndConfirm, _ as isExitRequest, a as backoffWhileTyping, b as isSubcommand, c as cursorAbs, d as extractBadges, f as extractMenu, g as isAgentStuck, h as finalizedLines, i as TYPING_WINDOW_MS, j as recentMessageEdges, k as readNotes, l as deriveLiveState, m as extractTaskCounts, n as MAX_RENDER_BYTES, o as cmdHelp, p as extractNeedsInput, q as writeToIpc, r as READ_PAGE_DEFAULT, s as controlCodeFromName, t as GRACEFUL_EXIT_COMMANDS, u as deriveLiveStatus, v as isPidAlive, w as listRecords, x as isUnknownManagerToken, y as isSlashCommand, z as restartHintLines } from "./subcommands-Zk3brdKt.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 

package/dist/{subcommands-BSdA19Nv.js → subcommands-Zk3brdKt.js}

@@ -1402,35 +1402,35 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-CXIqdFAy.js");
+				const { cmdTerm } = await import("./terminal-BVWhnQUf.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-BFpPQNzh.js");
+				const { cmdWidget } = await import("./widget-CJyd9t8k.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-BFpPQNzh.js");
+				const { cmdMint } = await import("./widget-CJyd9t8k.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-DCPbGttS.js");
+				const { cmdServe } = await import("./serve-DhtgWGZB.js");
 				return cmdServe(rest);
 			}
 			case "tray": {
-				const { cmdTray } = await import("./trayApp-CpnLyvEB.js");
+				const { cmdTray } = await import("./trayApp-C6U7Hghi.js");
 				return cmdTray(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-DO75Uqec.js");
+				const { cmdSetup } = await import("./setup-BlJRaODn.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-xrWDKWNS.js");
+				const { cmdWs } = await import("./ws-mG4yeZu8.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-DCR7zeRi.js");
+				const { cmdSchedule } = await import("./schedule-ChAdx2h6.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1442,7 +1442,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-BfJqf5hh.js");
+				const { cmdCallback } = await import("./callback-lqCCgSy1.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -3956,7 +3956,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DCPbGttS.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DhtgWGZB.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -4666,7 +4666,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-C1HL2AKc.js");
+		const { ensureDaemon } = await import("./notifyDaemon-P6Q7Eo_B.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4740,7 +4740,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-C1HL2AKc.js");
+	const daemon = await import("./notifyDaemon-P6Q7Eo_B.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4767,4 +4767,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { liveWatchers as $, readPtysize as A, runSubcommand as B, lastStdinAt as C, readAgentPtysize as D, menuSelectKeys as E, renderRawLogLines as F, waitForLogQuiet as G, stdinActivityPath as H, resolveOne as I, appendEvent as J, writeKeysPaced as K, resolveReadWindow as L, recentReadEdges as M, renderLogTailLines as N, readLogForRender as O, renderRawLog as P, listInboxParents as Q, resolveResumeArgs as R, isUserTyping as S, matchKeyword as T, stopTipForCli as U, snapshotStatus as V, submitAndConfirm as W, hostId as X, gcInboxes as Y, isTransientLockMkdirError as Z, isExitRequest as _, backoffWhileTyping as a, TYPING_BADGE as at, isSubcommand as b, cursorAbs as c, extractBadges as d, readInbox as et, extractMenu as f, isAgentStuck as g, finalizedLines as h, TYPING_WINDOW_MS as i, notifyDir as it, recentMessageEdges as j, readNotes as k, deriveLiveState as l, extractTaskCounts as m, MAX_RENDER_BYTES as n, daemonLockDir as nt, cmdHelp as o, extractNeedsInput as p, writeToIpc as q, READ_PAGE_DEFAULT as r, daemonLockOwnerPath as rt, controlCodeFromName as s, GRACEFUL_EXIT_COMMANDS as t, shouldStealLock as tt, deriveLiveStatus as u, isPidAlive as v, listRecords as w, isUnknownManagerToken as x, isSlashCommand as y, restartHintLines as z };
-//# sourceMappingURL=subcommands-BSdA19Nv.js.map
+//# sourceMappingURL=subcommands-Zk3brdKt.js.map

package/dist/{terminal-CXIqdFAy.js → terminal-BVWhnQUf.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-DCPbGttS.js");
+	const { mintScopedTermToken } = await import("./serve-DhtgWGZB.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-CXIqdFAy.js.map
+//# sourceMappingURL=terminal-BVWhnQUf.js.map

package/dist/trayApp-C6U7Hghi.js

@@ -0,0 +1,5 @@
+import "./versionChecker-D-WLKAN6.js";
+import "./rustBinary-_qRGhAa5.js";
+import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-DtThjl0_.js";
+
+export { cmdTray };

package/dist/{trayApp-DO9sPIPo.js → trayApp-DtThjl0_.js}

@@ -1,4 +1,4 @@
-import { n as findTrayLauncher } from "./rustBinary-BBzI-0gG.js";
+import { n as findTrayLauncher } from "./rustBinary-_qRGhAa5.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -97,4 +97,4 @@ async function cmdTray(args) {
 
 //#endregion
 export { trayHiddenMarker as a, launchTray as i, hasDesktop as n, isTrayHidden as r, cmdTray as t };
-//# sourceMappingURL=trayApp-DO9sPIPo.js.map
+//# sourceMappingURL=trayApp-DtThjl0_.js.map

package/dist/{ts-BeFjrOhc.js → ts-BqaOPFCQ.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-d15cc3u7.js";
+import { r as getInstalledPackage } from "./versionChecker-D-WLKAN6.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-BQRW614S.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -2181,4 +2181,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, permissionBadge as c, answerAsk as i, AgentContext as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t, CLAUDE_SESSION_PIN_ENV as u };
-//# sourceMappingURL=ts-BeFjrOhc.js.map
+//# sourceMappingURL=ts-BqaOPFCQ.js.map

package/dist/{versionChecker-d15cc3u7.js → versionChecker-D-WLKAN6.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.261.1";
+var version = "1.262.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-d15cc3u7.js.map
+//# sourceMappingURL=versionChecker-D-WLKAN6.js.map

package/dist/{widget-BFpPQNzh.js → widget-CJyd9t8k.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DCPbGttS.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DhtgWGZB.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-DCPbGttS.js");
+	const { mintScopedTermToken } = await import("./serve-DhtgWGZB.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-BFpPQNzh.js.map
+//# sourceMappingURL=widget-CJyd9t8k.js.map

package/dist/{ws-C7dDiQPE.js → ws-Vy3mBjNm.js}

@@ -1,4 +1,4 @@
-import { w as listRecords } from "./subcommands-BSdA19Nv.js";
+import { w as listRecords } from "./subcommands-Zk3brdKt.js";
 import { a as getProvisionRoot } from "./workspaceConfig-Bxuk_MOq.js";
 import { existsSync } from "fs";
 import { lstat, opendir } from "fs/promises";
@@ -426,4 +426,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { isPathInside as a, walkWorkspaces as c, importProvisionModule as i, workspaceStatus as l, cmdWs as n, loadProvision as o, collectWorkspaces as r, resolveOperand as s, WS_JSON_SCHEMA as t };
-//# sourceMappingURL=ws-C7dDiQPE.js.map
+//# sourceMappingURL=ws-Vy3mBjNm.js.map

package/dist/{ws-xrWDKWNS.js → ws-mG4yeZu8.js}

@@ -3,9 +3,9 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import "./subcommands-BSdA19Nv.js";
+import "./subcommands-Zk3brdKt.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
-import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-C7dDiQPE.js";
+import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-Vy3mBjNm.js";
 
-export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
+export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, walkWorkspaces, workspaceStatus };

package/lab/ui/index.html

@@ -7982,6 +7982,7 @@ my.translate = async (text, lang) => {
         const res = await target.tx.post("/api/spawn", {
           cli: spec.cli || "claude",
           from: spec.from || undefined,
+          create: spec.create || undefined,
           fork: spec.fork || undefined,
           cwd: spec.cwd || undefined,
           prompt: spec.prompt || undefined,
@@ -8105,6 +8106,8 @@ my.translate = async (text, lang) => {
       ${hostRow}
       <div class="nfield"><label>Working dir</label><input id="nf-cwd" list="nf-cwd-list" value="${esc(cwd)}" placeholder="(host default — ignored when Spawn from is set)" spellcheck="false" autocapitalize="off" /><datalist id="nf-cwd-list">${cwdOptions(target ? target.id : "")}</datalist></div>
       <div class="nfield"><label>CLI</label><select id="nf-cli">${cliOptions(null, preferredCli)}</select></div>
+      <div class="nfield"><label>Provision repo — optional</label><select id="nf-repo"><option value="" selected>(none — use working dir or spawn-from)</option></select></div>
+      <div class="nfield" id="nf-branch-row" style="display:none"><label>Branch</label><input id="nf-branch" list="nf-branch-list" placeholder="(repo default) — pick one, or type a new name to create it" spellcheck="false" autocapitalize="off" /><datalist id="nf-branch-list"></datalist><div class="lhint" id="nf-branch-hint" style="display:none"></div></div>
       <div class="nfield"><label>Spawn from — optional</label><input id="nf-from" placeholder="github URL / owner/repo@branch — provisions a worktree" spellcheck="false" autocapitalize="off" /></div>
       <div class="nfield"><label>Prompt — optional</label><textarea id="nf-prompt" rows="3" placeholder="initial message to send the agent…"></textarea></div>
       <div class="lrow">
@@ -8122,8 +8125,95 @@ my.translate = async (text, lang) => {
           const dl = $("nf-cwd-list");
           if (dl) dl.innerHTML = cwdOptions(ev.target.value);
           showHook(sources.get(ev.target.value));
+          loadRepoPicker(sources.get(ev.target.value));
+        });
+        $("nf-repo")?.addEventListener("change", () => {
+          const repo = $("nf-repo").value;
+          const row = $("nf-branch-row");
+          if (row) row.style.display = repo ? "" : "none";
+          if (repo) loadBranchPicker(spawnTarget($("newform").dataset.room), repo);
+          else nfRemoteBranches = null;
+        });
+        $("nf-branch-row")?.addEventListener("input", (ev) => {
+          if (ev.target.id === "nf-branch") updateBranchHint();
         });
         showHook(target);
+        loadRepoPicker(target);
+      }
+
+      // ---- provisioning picker (repo → branch) for the New-agent form -------
+      // Data comes from the target host's /api/ws/repos and /api/ws/branches.
+      // Both are best-effort on the server (gh may be unauthenticated); here a
+      // fetch failure just leaves the pickers empty — the free-text "Spawn
+      // from" field still works.
+      let nfRemoteBranches = null; // Set of remote branch names for the picked repo
+      function loadRepoPicker(target) {
+        const selEl = $("nf-repo");
+        if (!selEl || !target?.tx?.fetchJSON) return;
+        const forId = target.id;
+        target.tx
+          .fetchJSON("/api/ws/repos")
+          .then((d) => {
+            // a slow answer for a host the user switched away from must not
+            // paint the new host's repo list (same guard as showHook)
+            if ($("newform").dataset.room !== forId) return;
+            const cur = selEl.value;
+            const repos = (d && d.repos) || [];
+            selEl.innerHTML =
+              `<option value="">(none — use working dir or spawn-from)</option>` +
+              repos
+                .map((r) => {
+                  const full = `${r.owner}/${r.repo}`;
+                  return `<option value="${esc(full)}"${full === cur ? " selected" : ""}>${esc(full)}${r.local ? "" : " (gh)"}</option>`;
+                })
+                .join("");
+          })
+          .catch(() => {});
+      }
+      function loadBranchPicker(target, repo) {
+        const dl = $("nf-branch-list");
+        const hint = $("nf-branch-hint");
+        nfRemoteBranches = null;
+        if (dl) dl.innerHTML = "";
+        if (hint) {
+          hint.textContent = "fetching branches…";
+          hint.style.display = "";
+        }
+        if (!target?.tx?.fetchJSON) return;
+        const want = repo;
+        target.tx
+          .fetchJSON("/api/ws/branches?repo=" + encodeURIComponent(repo))
+          .then((d) => {
+            if ($("nf-repo")?.value !== want) return; // user picked another repo meanwhile
+            const branches = (d && d.branches) || [];
+            nfRemoteBranches = new Set(branches.filter((b) => b.remote).map((b) => b.name));
+            if (dl)
+              dl.innerHTML = branches
+                .map(
+                  (b) =>
+                    `<option value="${esc(b.name)}">${b.provisioned ? "provisioned" : b.remote ? "remote" : "local"}</option>`,
+                )
+                .join("");
+            updateBranchHint(d && d.error);
+          })
+          .catch(() => {
+            if (hint) hint.textContent = "branch list unavailable — type a branch name";
+          });
+      }
+      function updateBranchHint(fetchError) {
+        const hint = $("nf-branch-hint");
+        if (!hint) return;
+        const br = ($("nf-branch")?.value || "").trim();
+        if (nfRemoteBranches == null) {
+          if (fetchError) hint.textContent = `branch list unavailable (${fetchError})`;
+          return;
+        }
+        if (br && !nfRemoteBranches.has(br)) {
+          hint.textContent = `“${br}” is not on the remote — a new branch will be created off the default`;
+        } else {
+          hint.textContent = `${nfRemoteBranches.size} remote branches — empty = repo default; a new name creates a branch`;
+        }
+        hint.style.display = "";
       }
 
       // Surface whether the target host runs a spawn hook (a trusted local command
@@ -8168,10 +8258,26 @@ my.translate = async (text, lang) => {
         try {
           localStorage.setItem(LAST_CLI_KEY, cli);
         } catch {}
+        // The repo/branch pickers win over the free-text "Spawn from" field:
+        // picked repo [+ branch] → a `from` spec; a branch name that isn't on
+        // the remote asks the server to create it (create:true, ws new --create).
+        let from = $("nf-from")?.value.trim() || "";
+        let create = false;
+        const pickedRepo = $("nf-repo")?.value || "";
+        if (pickedRepo) {
+          const br = ($("nf-branch")?.value || "").trim();
+          from = br ? `${pickedRepo}@${br}` : pickedRepo;
+          // Unknown remote list (fetch failed) → still send create: the server
+          // only uses it after the branch turns out missing, so it's harmless
+          // for existing branches and saves an un-actionable 502 for new ones.
+          create = !!(br && (!nfRemoteBranches || !nfRemoteBranches.has(br)));
+        }
         const spec = {
           cli,
-          from: $("nf-from")?.value.trim() || "",
-          cwd: $("nf-cwd").value.trim(),
+          from,
+          create,
+          // a provision spec decides the cwd server-side — don't send a stale one
+          cwd: from ? "" : $("nf-cwd").value.trim(),
           prompt: $("nf-prompt").value,
         };
         const room = $("newform").dataset.room || undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.261.1",
+  "version": "1.262.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -532,6 +532,43 @@ function originOwnerRepo(cwd: string): { owner: string; repo: string } | null {
   }
 }
 
+// Run a host command and capture its output — used by the /api/ws/repos and
+// /api/ws/branches listing endpoints (git ls-remote / gh). Runs under the
+// recovered login-shell env (freshAgentEnv) because the oxmgr/launchd daemon's
+// raw PATH lacks Homebrew/bun, so `git`/`gh` would otherwise be missing — the
+// same reason runProvisionHook does this. Never throws; a timeout kills the
+// child and reports ok:false.
+async function runCapture(
+  argv: string[],
+  opts?: { cwd?: string; timeoutMs?: number },
+): Promise<{ ok: boolean; stdout: string; stderr: string }> {
+  try {
+    const child = Bun.spawn(argv, {
+      cwd: opts?.cwd,
+      env: freshAgentEnv(),
+      stdin: "ignore",
+      stdout: "pipe",
+      stderr: "pipe",
+    });
+    const timeoutMs = opts?.timeoutMs ?? 15_000;
+    const code = await Promise.race([
+      child.exited,
+      new Promise<number>((r) => setTimeout(() => r(124), timeoutMs)),
+    ]);
+    if (code === 124) child.kill();
+    const [stdout, stderr] = await Promise.all([
+      new Response(child.stdout).text(),
+      new Response(child.stderr).text(),
+    ]);
+    return { ok: code === 0, stdout, stderr };
+  } catch (e) {
+    return { ok: false, stdout: "", stderr: (e as Error).message };
+  }
+}
+
+// 60s memo for /api/ws/repos' gh side (see the endpoint for why).
+let ghRepoListMemo: { t: number; ok: boolean; repos: string[]; error?: string } | null = null;
+
 type ProvisionHookResult =
   | { ran: false }
   | { ran: true; ok: boolean; code: number | null; detail: string };
@@ -3062,6 +3099,159 @@ export async function cmdServe(rest: string[]): Promise<number> {
       }
     }
 
+    // GET /api/ws/repos — the repos this host can provision from: every
+    // owner/repo already present under the workspace layout (with its
+    // provisioned branches), plus — best-effort — the repos `gh repo list` can
+    // see with this host's auth. gh being missing/unauthenticated must never
+    // fail the endpoint (two-account gh setups break routinely); the UI gets
+    // `gh.ok=false` + a short reason and still renders the local repos.
+    if (req.method === "GET" && p === "/api/ws/repos") {
+      const ws = await import("./ws.ts");
+      try {
+        await ws.loadProvision();
+      } catch (e) {
+        return new Response((e as Error).message, { status: 501 });
+      }
+      let wsRoot: string;
+      let workspaces: Awaited<ReturnType<typeof ws.collectWorkspaces>>["workspaces"];
+      try {
+        ({ wsRoot, workspaces } = await ws.collectWorkspaces());
+      } catch (e) {
+        return new Response(`workspace walk failed: ${(e as Error).message}`, { status: 500 });
+      }
+      const byRepo = new Map<
+        string,
+        { owner: string; repo: string; local: boolean; branches: { name: string; path: string }[] }
+      >();
+      for (const w of workspaces) {
+        const key = `${w.owner}/${w.repo}`;
+        const entry = byRepo.get(key) ?? { owner: w.owner, repo: w.repo, local: true, branches: [] };
+        entry.branches.push({ name: w.branch, path: w.path });
+        byRepo.set(key, entry);
+      }
+      // gh repo list is slow (network + up to 10s timeout) and the UI hits this
+      // endpoint on every form open / host switch — memoize the gh side briefly.
+      const gh: { ok: boolean; error?: string } = { ok: false };
+      let ghRepos: string[] = [];
+      const memo = ghRepoListMemo;
+      if (memo && performance.now() - memo.t < 60_000) {
+        gh.ok = memo.ok;
+        if (memo.error) gh.error = memo.error;
+        ghRepos = memo.repos;
+      } else {
+        const r = await runCapture(
+          ["gh", "repo", "list", "--limit", "200", "--json", "nameWithOwner"],
+          { timeoutMs: 10_000 },
+        );
+        if (r.ok) {
+          try {
+            ghRepos = (JSON.parse(r.stdout) as { nameWithOwner: string }[]).map(
+              (x) => x.nameWithOwner,
+            );
+            gh.ok = true;
+          } catch {
+            gh.error = "gh returned unparseable JSON";
+          }
+        } else {
+          gh.error = (r.stderr.trim() || "gh unavailable").slice(0, 200);
+        }
+        ghRepoListMemo = { t: performance.now(), ok: gh.ok, repos: ghRepos, error: gh.error };
+      }
+      for (const nameWithOwner of ghRepos) {
+        const [owner, repo] = nameWithOwner.split("/");
+        if (owner && repo && !byRepo.has(nameWithOwner))
+          byRepo.set(nameWithOwner, { owner, repo, local: false, branches: [] });
+      }
+      const repos = [...byRepo.values()].sort((a, b) =>
+        // provisioned repos first, then alphabetical — the picker's natural order
+        a.local !== b.local
+          ? a.local
+            ? -1
+            : 1
+          : `${a.owner}/${a.repo}`.localeCompare(`${b.owner}/${b.repo}`),
+      );
+      return Response.json({ schema: ws.WS_JSON_SCHEMA, wsRoot, repos, gh });
+    }
+
+    // GET /api/ws/branches?repo=<owner>/<repo> — the branches a provision of
+    // that repo could target. Remote branches come from `git ls-remote --heads
+    // origin` run inside an existing local checkout (uses that checkout's
+    // credentials), falling back to `gh api .../branches` when the repo has no
+    // local checkout yet. Local-only branches (provisioned but never pushed)
+    // are merged in. The repo param is strictly validated and passed as argv —
+    // these endpoints are reachable with just a share token.
+    if (req.method === "GET" && p === "/api/ws/branches") {
+      const repoParam = url.searchParams.get("repo") ?? "";
+      const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
+      // "." / ".." pass the charset but would traverse the `gh api repos/…` URL
+      if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..")
+        return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
+      const [, owner, repo] = m as unknown as [string, string, string];
+      const ws = await import("./ws.ts");
+      let prov: Awaited<ReturnType<typeof ws.loadProvision>>;
+      try {
+        prov = await ws.loadProvision();
+      } catch (e) {
+        return new Response((e as Error).message, { status: 501 });
+      }
+      const wsRoot = prov.resolveWsRoot(getProvisionRoot());
+      // Provisioned local checkouts of this repo (branch → path).
+      const localByBranch = new Map<string, string>();
+      try {
+        for (const w of await ws.walkWorkspaces(wsRoot)) {
+          if (w.owner === owner && w.repo === repo) localByBranch.set(w.branch, w.path);
+        }
+      } catch {
+        /* no local checkouts is fine */
+      }
+      let remote: string[] = [];
+      let source = "";
+      let error: string | undefined;
+      const anchor = localByBranch.values().next().value as string | undefined;
+      if (anchor) {
+        const r = await runCapture(["git", "-C", anchor, "ls-remote", "--heads", "origin"]);
+        if (r.ok) {
+          remote = [...r.stdout.matchAll(/\trefs\/heads\/(.+)/g)].map((x) => x[1]!.trim());
+          source = "ls-remote";
+        } else {
+          error = (r.stderr.trim() || "git ls-remote failed").slice(0, 200);
+        }
+      }
+      if (!source) {
+        const r = await runCapture([
+          "gh",
+          "api",
+          `repos/${owner}/${repo}/branches`,
+          "--paginate",
+          "--jq",
+          ".[].name",
+        ]);
+        if (r.ok) {
+          remote = r.stdout.split("\n").map((s) => s.trim()).filter(Boolean);
+          source = "gh";
+          error = undefined;
+        } else if (!error) {
+          error = (r.stderr.trim() || "gh unavailable").slice(0, 200);
+        }
+      }
+      const names = [...new Set([...remote, ...localByBranch.keys()])].sort((a, b) =>
+        a.localeCompare(b),
+      );
+      const branches = names.map((name) => ({
+        name,
+        remote: remote.includes(name),
+        provisioned: localByBranch.has(name),
+        ...(localByBranch.has(name) ? { path: localByBranch.get(name)! } : {}),
+      }));
+      return Response.json({
+        schema: ws.WS_JSON_SCHEMA,
+        repo: `${owner}/${repo}`,
+        source: source || "local-only",
+        branches,
+        ...(error ? { error } : {}),
+      });
+    }
+
     // GET /api/notes
     if (req.method === "GET" && p === "/api/notes") {
       const notes = await readNotes();
@@ -3833,6 +4023,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
         from?: string;
         prompt?: string;
         yes?: boolean;
+        create?: boolean;
         fork?: { fromCwd?: string; branch?: string };
       };
       try {
@@ -3978,7 +4169,11 @@ export async function cmdServe(rest: string[]): Promise<number> {
           provision: (
             spec: Spec,
             opts?: { wsRoot?: string },
-          ) => Promise<{ ok: boolean; folder: string; action: string; error?: string }>;
+          ) => Promise<{ ok: boolean; folder: string; action: string; error?: string; reason?: string }>;
+          createBranch?: (
+            spec: Spec,
+            opts?: { wsRoot?: string },
+          ) => Promise<{ ok: boolean; folder: string; action: string; error?: string; reason?: string }>;
         };
         try {
           prov = (await importProvisionModule()) as typeof prov;
@@ -4029,14 +4224,32 @@ export async function cmdServe(rest: string[]): Promise<number> {
             { status: 403 },
           );
         }
-        let result: { ok: boolean; folder: string; action: string; error?: string };
+        let result: { ok: boolean; folder: string; action: string; error?: string; reason?: string };
         try {
           const wsRoot = getProvisionRoot();
           result = await prov.provision(spec, wsRoot ? { wsRoot } : undefined);
+          // `create:true` = the "ay ws new --create" semantics: when the branch
+          // doesn't exist on the remote, branch it off the default locally.
+          // Runs INSIDE the hook/allowlist gate above — same repo, same risk.
+          if (
+            !result?.ok &&
+            body.create === true &&
+            result?.reason === "branch-not-found" &&
+            typeof prov.createBranch === "function"
+          ) {
+            result = await prov.createBranch(spec, wsRoot ? { wsRoot } : undefined);
+          }
         } catch (e) {
           return new Response(`provision failed: ${(e as Error).message}`, { status: 502 });
         }
-        if (!result?.ok) return new Response(result?.error ?? "provision failed", { status: 502 });
+        if (!result?.ok)
+          return new Response(
+            (result?.error ?? "provision failed") +
+              (result?.reason === "branch-not-found" && body.create !== true
+                ? "\n(branch missing on the remote — retry with create:true to branch off the default)"
+                : ""),
+            { status: 502 },
+          );
         cwd = result.folder;
         provisioned = { action: result.action, folder: result.folder };
       } else {

package/dist/trayApp-CpnLyvEB.js

@@ -1,5 +0,0 @@
-import "./versionChecker-d15cc3u7.js";
-import "./rustBinary-BBzI-0gG.js";
-import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-DO9sPIPo.js";
-
-export { cmdTray };