agent-yes 1.261.1 → 1.262.0-beta.626.1

package/dist/{SUPPORTED_CLIS-DGlkS83_.js → SUPPORTED_CLIS-DkxoCLoz.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-BeFjrOhc.js";
+import { t as CLIS_CONFIG } from "./ts-B22KR56R.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DGlkS83_.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-DkxoCLoz.js.map

package/dist/{SUPPORTED_CLIS-CUP5ABMb.js → SUPPORTED_CLIS-aLwUciKl.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-d15cc3u7.js";
-import "./ts-BeFjrOhc.js";
+import "./versionChecker-D-TKJ1Y-.js";
+import "./ts-B22KR56R.js";
 import "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-pwp7Vb7o.js";
 import "./pidStore-DfSm1jog.js";
 import "./messageLog-BYFwioFY.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DGlkS83_.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DkxoCLoz.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-tL6j9Em4.js → agentShare-DRmd4F95.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { I as resolveOne } from "./subcommands-BSdA19Nv.js";
+import { L as resolveOne } from "./subcommands-BQXIfCNL.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import { a as startShare } from "./share-B-e_9WBx.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-tL6j9Em4.js.map
+//# sourceMappingURL=agentShare-DRmd4F95.js.map

package/dist/{callback-BfJqf5hh.js → callback-BYn4x_b3.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import "./subcommands-BSdA19Nv.js";
+import "./subcommands-BQXIfCNL.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import "./callbackCore-Cg3Ye0ZS.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-JJh1_Zzp.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-c7Oe2vIh.js";
 
 export { cmdCallback };

package/dist/{callback-JJh1_Zzp.js → callback-c7Oe2vIh.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { I as resolveOne } from "./subcommands-BSdA19Nv.js";
+import { L as resolveOne } from "./subcommands-BQXIfCNL.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Cg3Ye0ZS.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-DCPbGttS.js");
+		const { resolveLocalServeUrl } = await import("./serve-JL6zFz3h.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-JJh1_Zzp.js.map
+//# sourceMappingURL=callback-c7Oe2vIh.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-d15cc3u7.js";
-import { r as getRustBinary } from "./rustBinary-BBzI-0gG.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-D-TKJ1Y-.js";
+import { r as getRustBinary } from "./rustBinary-pyF9zGmg.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-C5qaj8cS.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-DOwbpkzb.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -305,7 +305,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CUP5ABMb.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-aLwUciKl.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -356,7 +356,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CUP5ABMb.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-aLwUciKl.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-d15cc3u7.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-BeFjrOhc.js";
+import "./versionChecker-D-TKJ1Y-.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-B22KR56R.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-pwp7Vb7o.js";

package/dist/{notifyDaemon-C1HL2AKc.js → notifyDaemon-DOtETcLA.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { $ as liveWatchers, J as appendEvent, N as renderLogTailLines, Q as listInboxParents, X as hostId, Y as gcInboxes, et as readInbox, it as notifyDir, l as deriveLiveState, nt as daemonLockDir, rt as daemonLockOwnerPath, tt as shouldStealLock, v as isPidAlive, w as listRecords } from "./subcommands-BSdA19Nv.js";
+import { $ as listInboxParents, P as renderLogTailLines, T as listRecords, X as gcInboxes, Y as appendEvent, Z as hostId, at as notifyDir, et as liveWatchers, it as daemonLockOwnerPath, nt as shouldStealLock, rt as daemonLockDir, tt as readInbox, u as deriveLiveState, y as isPidAlive } from "./subcommands-BQXIfCNL.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -836,4 +836,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-C1HL2AKc.js.map
+//# sourceMappingURL=notifyDaemon-DOtETcLA.js.map

package/dist/{rustBinary-BBzI-0gG.js → rustBinary-pyF9zGmg.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-d15cc3u7.js";
+import { r as getInstalledPackage } from "./versionChecker-D-TKJ1Y-.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -243,4 +243,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { findTrayLauncher as n, getRustBinary as r, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-BBzI-0gG.js.map
+//# sourceMappingURL=rustBinary-pyF9zGmg.js.map

package/dist/{schedule-DCR7zeRi.js → schedule-vg7zrUe9.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-d15cc3u7.js";
-import "./ts-BeFjrOhc.js";
+import "./versionChecker-D-TKJ1Y-.js";
+import "./ts-B22KR56R.js";
 import "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-pwp7Vb7o.js";
 import "./pidStore-DfSm1jog.js";
 import "./messageLog-BYFwioFY.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DGlkS83_.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DkxoCLoz.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-Bxuk_MOq.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-vhOBffJ3.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DCR7zeRi.js.map
+//# sourceMappingURL=schedule-vg7zrUe9.js.map

package/dist/{serve-DCPbGttS.js → serve-JL6zFz3h.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-d15cc3u7.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-BBzI-0gG.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-BeFjrOhc.js";
+import { r as getInstalledPackage } from "./versionChecker-D-TKJ1Y-.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-pyF9zGmg.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-B22KR56R.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,17 +11,17 @@ import { r as recordInbox } from "./messageLog-BYFwioFY.js";
 import { t as pgidForWrapper } from "./reaper-C4BvNylH.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DGlkS83_.js";
-import { A as readPtysize, F as renderRawLogLines, I as resolveOne, M as recentReadEdges, N as renderLogTailLines, O as readLogForRender, P as renderRawLog, S as isUserTyping, V as snapshotStatus, Z as isTransientLockMkdirError, at as TYPING_BADGE, d as extractBadges, j as recentMessageEdges, k as readNotes, m as extractTaskCounts, p as extractNeedsInput, q as writeToIpc, s as controlCodeFromName, u as deriveLiveStatus, w as listRecords } from "./subcommands-BSdA19Nv.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DkxoCLoz.js";
+import { A as readNotes, C as isUserTyping, F as renderRawLog, H as snapshotStatus, I as renderRawLogLines, J as writeToIpc, L as resolveOne, M as recentMessageEdges, N as recentReadEdges, P as renderLogTailLines, Q as isTransientLockMkdirError, T as listRecords, c as controlCodeFromName, d as deriveLiveStatus, f as extractBadges, h as extractTaskCounts, j as readPtysize, k as readLogForRender, m as extractNeedsInput, ot as TYPING_BADGE } from "./subcommands-BQXIfCNL.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Cg3Ye0ZS.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-JJh1_Zzp.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-c7Oe2vIh.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-Bxuk_MOq.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-vhOBffJ3.js";
-import { i as importProvisionModule } from "./ws-C7dDiQPE.js";
+import { i as importProvisionModule } from "./ws-B--sMrM-.js";
 import { r as spawnRejectionReason } from "./spawnGate-D-68B907.js";
-import { i as launchTray } from "./trayApp-DO9sPIPo.js";
+import { i as launchTray } from "./trayApp-B-LpxjEo.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -675,6 +675,63 @@ function originOwnerRepo(cwd) {
 		return null;
 	}
 }
+async function runCapture(argv, opts) {
+	try {
+		const child = Bun.spawn(argv, {
+			cwd: opts?.cwd,
+			env: freshAgentEnv(),
+			stdin: "ignore",
+			stdout: "pipe",
+			stderr: "pipe"
+		});
+		const timeoutMs = opts?.timeoutMs ?? 15e3;
+		const code = await Promise.race([child.exited, new Promise((r) => setTimeout(() => r(124), timeoutMs))]);
+		if (code === 124) child.kill();
+		const [stdout, stderr] = await Promise.all([new Response(child.stdout).text(), new Response(child.stderr).text()]);
+		return {
+			ok: code === 0,
+			stdout,
+			stderr
+		};
+	} catch (e) {
+		return {
+			ok: false,
+			stdout: "",
+			stderr: e.message
+		};
+	}
+}
+function parseGitUrl(s) {
+	let host = "";
+	let pathPart = "";
+	const scp = /^git@([^:/\s]+):([^\s]+?)(?:\.git)?\/?$/.exec(s);
+	if (scp) {
+		host = scp[1];
+		pathPart = scp[2];
+	} else {
+		let u;
+		try {
+			u = new URL(s);
+		} catch {
+			return null;
+		}
+		if (!/^(https?|ssh|git)$/.test(u.protocol.replace(":", ""))) return null;
+		host = u.hostname;
+		pathPart = u.pathname.replace(/^\/+|\/+$/g, "").replace(/\.git$/, "");
+	}
+	if (/(^|\.)github\.com$/i.test(host)) return null;
+	const segs = pathPart.split("/").filter(Boolean);
+	if (segs.length < 2) return null;
+	const owner = segs[segs.length - 2];
+	const repo = segs[segs.length - 1].replace(/\.git$/, "");
+	if (!owner || !repo || owner === "." || owner === ".." || repo === "." || repo === "..") return null;
+	return {
+		url: s.replace(/\/+$/, ""),
+		owner,
+		repo
+	};
+}
+let ghRepoListMemo = null;
 async function runProvisionHook(cwd, koho) {
 	const hook = getProvisionHook();
 	if (!hook) return { ran: false };
@@ -2368,7 +2425,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-xrWDKWNS.js");
+			const ws = await import("./ws-D6hRfHBF.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2388,7 +2445,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-xrWDKWNS.js");
+			const ws = await import("./ws-D6hRfHBF.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2409,6 +2466,147 @@ Options:
 				return new Response(`git status failed: ${e.message}`, { status: 502 });
 			}
 		}
+		if (req.method === "GET" && p === "/api/ws/repos") {
+			const ws = await import("./ws-D6hRfHBF.js");
+			try {
+				await ws.loadProvision();
+			} catch (e) {
+				return new Response(e.message, { status: 501 });
+			}
+			let wsRoot;
+			let workspaces;
+			try {
+				({wsRoot, workspaces} = await ws.collectWorkspaces());
+			} catch (e) {
+				return new Response(`workspace walk failed: ${e.message}`, { status: 500 });
+			}
+			const byRepo = /* @__PURE__ */ new Map();
+			for (const w of workspaces) {
+				const key = `${w.owner}/${w.repo}`;
+				const entry = byRepo.get(key) ?? {
+					owner: w.owner,
+					repo: w.repo,
+					local: true,
+					branches: []
+				};
+				entry.branches.push({
+					name: w.branch,
+					path: w.path
+				});
+				byRepo.set(key, entry);
+			}
+			const gh = { ok: false };
+			let ghRepos = [];
+			const memo = ghRepoListMemo;
+			if (memo && performance.now() - memo.t < 6e4) {
+				gh.ok = memo.ok;
+				if (memo.error) gh.error = memo.error;
+				ghRepos = memo.repos;
+			} else {
+				const r = await runCapture([
+					"gh",
+					"repo",
+					"list",
+					"--limit",
+					"200",
+					"--json",
+					"nameWithOwner"
+				], { timeoutMs: 1e4 });
+				if (r.ok) try {
+					ghRepos = JSON.parse(r.stdout).map((x) => x.nameWithOwner);
+					gh.ok = true;
+				} catch {
+					gh.error = "gh returned unparseable JSON";
+				}
+				else gh.error = (r.stderr.trim() || "gh unavailable").slice(0, 200);
+				ghRepoListMemo = {
+					t: performance.now(),
+					ok: gh.ok,
+					repos: ghRepos,
+					error: gh.error
+				};
+			}
+			for (const nameWithOwner of ghRepos) {
+				const [owner, repo] = nameWithOwner.split("/");
+				if (owner && repo && !byRepo.has(nameWithOwner)) byRepo.set(nameWithOwner, {
+					owner,
+					repo,
+					local: false,
+					branches: []
+				});
+			}
+			const repos = [...byRepo.values()].sort((a, b) => a.local !== b.local ? a.local ? -1 : 1 : `${a.owner}/${a.repo}`.localeCompare(`${b.owner}/${b.repo}`));
+			return Response.json({
+				schema: ws.WS_JSON_SCHEMA,
+				wsRoot,
+				repos,
+				gh
+			});
+		}
+		if (req.method === "GET" && p === "/api/ws/branches") {
+			const repoParam = url.searchParams.get("repo") ?? "";
+			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
+			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
+			const [, owner, repo] = m;
+			const ws = await import("./ws-D6hRfHBF.js");
+			let prov;
+			try {
+				prov = await ws.loadProvision();
+			} catch (e) {
+				return new Response(e.message, { status: 501 });
+			}
+			const wsRoot = prov.resolveWsRoot(getProvisionRoot());
+			const localByBranch = /* @__PURE__ */ new Map();
+			try {
+				for (const w of await ws.walkWorkspaces(wsRoot)) if (w.owner === owner && w.repo === repo) localByBranch.set(w.branch, w.path);
+			} catch {}
+			let remote = [];
+			let source = "";
+			let error;
+			const anchor = localByBranch.values().next().value;
+			if (anchor) {
+				const r = await runCapture([
+					"git",
+					"-C",
+					anchor,
+					"ls-remote",
+					"--heads",
+					"origin"
+				]);
+				if (r.ok) {
+					remote = [...r.stdout.matchAll(/\trefs\/heads\/(.+)/g)].map((x) => x[1].trim());
+					source = "ls-remote";
+				} else error = (r.stderr.trim() || "git ls-remote failed").slice(0, 200);
+			}
+			if (!source) {
+				const r = await runCapture([
+					"gh",
+					"api",
+					`repos/${owner}/${repo}/branches`,
+					"--paginate",
+					"--jq",
+					".[].name"
+				]);
+				if (r.ok) {
+					remote = r.stdout.split("\n").map((s) => s.trim()).filter(Boolean);
+					source = "gh";
+					error = void 0;
+				} else if (!error) error = (r.stderr.trim() || "gh unavailable").slice(0, 200);
+			}
+			const branches = [...new Set([...remote, ...localByBranch.keys()])].sort((a, b) => a.localeCompare(b)).map((name) => ({
+				name,
+				remote: remote.includes(name),
+				provisioned: localByBranch.has(name),
+				...localByBranch.has(name) ? { path: localByBranch.get(name) } : {}
+			}));
+			return Response.json({
+				schema: ws.WS_JSON_SCHEMA,
+				repo: `${owner}/${repo}`,
+				source: source || "local-only",
+				branches,
+				...error ? { error } : {}
+			});
+		}
 		if (req.method === "GET" && p === "/api/notes") {
 			const notes = await readNotes();
 			return Response.json(Object.fromEntries(notes));
@@ -3005,6 +3203,118 @@ Options:
 					action: result.action,
 					folder: result.folder
 				};
+			} else if (from && parseGitUrl(from)) {
+				const gitSrc = parseGitUrl(from);
+				const branch = typeof body.branch === "string" ? body.branch.trim() : "";
+				const badBranch = (b) => b.startsWith("-") || b.split("/").some((s) => !s || s === "." || s === "..");
+				if (branch && badBranch(branch)) return new Response(`invalid branch name: ${branch}`, { status: 400 });
+				const gitHook = await runProvisionHook(getProvisionRoot() ?? homedir(), {
+					KOHO_ACTION: "from",
+					KOHO_SOURCE: from,
+					KOHO_OWNER: gitSrc.owner,
+					KOHO_REPO: gitSrc.repo,
+					KOHO_BRANCH: branch,
+					KOHO_WS_ROOT: getProvisionRoot() ?? ""
+				});
+				if (gitHook.ran) {
+					if (!gitHook.ok) return new Response(`provision hook denied '${gitSrc.owner}/${gitSrc.repo}' (exit ${gitHook.code})` + (gitHook.detail ? `:\n${gitHook.detail}` : ""), { status: 403 });
+				} else if (!isProvisionAllowed(gitSrc.owner, gitSrc.repo)) return new Response(`provisioning '${gitSrc.owner}/${gitSrc.repo}' is not allowed — add the owner to provisionAllowlist in ~/.agent-yes/config.json (or "*" to allow all), or set a provisionHook to gate it yourself`, { status: 403 });
+				const wsRootDir = getProvisionRoot() ?? path.join(homedir(), "ws");
+				const base = path.join(wsRootDir, gitSrc.owner, gitSrc.repo, "tree");
+				const destFor = (b) => path.join(base, b);
+				if (branch && existsSync(path.join(destFor(branch), ".git"))) {
+					cwd = destFor(branch);
+					provisioned = {
+						action: "existing",
+						folder: cwd
+					};
+				} else {
+					const tmp = path.join(base, `.clone-${process.pid}-${Date.now().toString(36)}`);
+					try {
+						await mkdir(base, { recursive: true });
+					} catch (e) {
+						return new Response(`cannot create ${base}: ${e.message}`, { status: 500 });
+					}
+					const cloneMs = 3e5;
+					let created = false;
+					let r = await runCapture(branch ? [
+						"git",
+						"clone",
+						"--branch",
+						branch,
+						"--",
+						gitSrc.url,
+						tmp
+					] : [
+						"git",
+						"clone",
+						"--",
+						gitSrc.url,
+						tmp
+					], { timeoutMs: cloneMs });
+					if (!r.ok && branch && body.create === true) {
+						await rm(tmp, {
+							recursive: true,
+							force: true
+						}).catch(() => {});
+						r = await runCapture([
+							"git",
+							"clone",
+							"--",
+							gitSrc.url,
+							tmp
+						], { timeoutMs: cloneMs });
+						if (r.ok) {
+							const co = await runCapture([
+								"git",
+								"-C",
+								tmp,
+								"checkout",
+								"-b",
+								branch
+							]);
+							if (!co.ok) r = co;
+							else created = true;
+						}
+					}
+					if (!r.ok) {
+						await rm(tmp, {
+							recursive: true,
+							force: true
+						}).catch(() => {});
+						return new Response(`git clone failed: ${(r.stderr.trim() || "unknown").slice(0, 500)}` + (branch && body.create !== true ? "\n(if the branch doesn't exist yet, retry with create:true)" : ""), { status: 502 });
+					}
+					const head = await runCapture([
+						"git",
+						"-C",
+						tmp,
+						"rev-parse",
+						"--abbrev-ref",
+						"HEAD"
+					]);
+					let actual = branch || (head.ok ? head.stdout.trim() : "") || "main";
+					if (badBranch(actual)) actual = "main";
+					const dest = destFor(actual);
+					if (existsSync(dest)) await rm(tmp, {
+						recursive: true,
+						force: true
+					}).catch(() => {});
+					else try {
+						await mkdir(path.dirname(dest), { recursive: true });
+						await rename(tmp, dest);
+					} catch (e) {
+						await rm(tmp, {
+							recursive: true,
+							force: true
+						}).catch(() => {});
+						return new Response(`cannot place checkout at ${dest}: ${e.message}`, { status: 500 });
+					}
+					cwd = dest;
+					provisioned = {
+						action: created ? "cloned+new-branch" : "cloned",
+						folder: dest
+					};
+				}
 			} else if (from) {
 				let prov;
 				try {
@@ -3034,10 +3344,11 @@ Options:
 				try {
 					const wsRoot = getProvisionRoot();
 					result = await prov.provision(spec, wsRoot ? { wsRoot } : void 0);
+					if (!result?.ok && body.create === true && result?.reason === "branch-not-found" && typeof prov.createBranch === "function") result = await prov.createBranch(spec, wsRoot ? { wsRoot } : void 0);
 				} catch (e) {
 					return new Response(`provision failed: ${e.message}`, { status: 502 });
 				}
-				if (!result?.ok) return new Response(result?.error ?? "provision failed", { status: 502 });
+				if (!result?.ok) return new Response((result?.error ?? "provision failed") + (result?.reason === "branch-not-found" && body.create !== true ? "\n(branch missing on the remote — retry with create:true to branch off the default)" : ""), { status: 502 });
 				cwd = result.folder;
 				provisioned = {
 					action: result.action,
@@ -3145,7 +3456,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-tL6j9Em4.js");
+				const { createScopedShare } = await import("./agentShare-DRmd4F95.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3160,12 +3471,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-tL6j9Em4.js");
+			const { listShares } = await import("./agentShare-DRmd4F95.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-tL6j9Em4.js");
+			const { revokeShare } = await import("./agentShare-DRmd4F95.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3467,7 +3778,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-tL6j9Em4.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-DRmd4F95.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3480,4 +3791,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-DCPbGttS.js.map
+//# sourceMappingURL=serve-JL6zFz3h.js.map

package/dist/{setup-DO75Uqec.js → setup-CFktAWaF.js}

@@ -40,7 +40,7 @@ async function cmdSetup(rest) {
 	} catch {}
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-DCPbGttS.js");
+	const { cmdServe } = await import("./serve-JL6zFz3h.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -50,4 +50,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-DO75Uqec.js.map
+//# sourceMappingURL=setup-CFktAWaF.js.map