agor-live 0.5.0 → 0.5.1

package/dist/core/db/index.d.cts

@@ -1,7 +1,7 @@
 export { and, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
 import bcryptjs from 'bcryptjs';
-import { b as Database, B as BaseRepository } from '../worktrees-DZ3DkdlA.cjs';
-export { A as AmbiguousIdError, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from '../worktrees-DZ3DkdlA.cjs';
+import { b as Database, B as BaseRepository } from '../worktrees-BnZ6TnB3.cjs';
+export { A as AmbiguousIdError, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from '../worktrees-BnZ6TnB3.cjs';
 import { B as BoardComment } from '../board-comment-CaUiaZB5.cjs';
 import { B as BoardID, W as WorktreeID } from '../id-DMqyogFB.cjs';
 import { a as BoardEntityObject, e as Board, d as BoardObject } from '../session-Dl5E0CV3.cjs';
@@ -10,8 +10,8 @@ import { e as Task } from '../task-BIEgT1DK.cjs';
 import { a as User } from '../user-eUuKj7yM.cjs';
 import '../message-BoxZISHg.cjs';
 import 'drizzle-orm/libsql';
-import 'drizzle-orm/sqlite-core';
 import '../agentic-tool-F4yIQb5n.cjs';
+import 'drizzle-orm/sqlite-core';
 
 /**
  * ID Management Utilities

package/dist/core/db/index.d.ts

@@ -1,7 +1,7 @@
 export { and, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
 import bcryptjs from 'bcryptjs';
-import { b as Database, B as BaseRepository } from '../worktrees-Bo5VOy-g.js';
-export { A as AmbiguousIdError, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from '../worktrees-Bo5VOy-g.js';
+import { b as Database, B as BaseRepository } from '../worktrees-BGyg0_jA.js';
+export { A as AmbiguousIdError, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from '../worktrees-BGyg0_jA.js';
 import { B as BoardComment } from '../board-comment-BCrDUioT.js';
 import { B as BoardID, W as WorktreeID } from '../id-DMqyogFB.js';
 import { a as BoardEntityObject, e as Board, d as BoardObject } from '../session-De4TwIM_.js';
@@ -10,8 +10,8 @@ import { e as Task } from '../task-DuIfiUbW.js';
 import { a as User } from '../user-BmL3kFol.js';
 import '../message-DvBzHu7V.js';
 import 'drizzle-orm/libsql';
-import 'drizzle-orm/sqlite-core';
 import '../agentic-tool-BKO8MCeP.js';
+import 'drizzle-orm/sqlite-core';
 
 /**
  * ID Management Utilities

package/dist/core/index.d.cts

@@ -15,7 +15,7 @@ export { ActiveUser, CreateInput, CursorLeaveEvent, CursorMoveEvent, CursorMoved
 export { a as Repo, e as RepoEnvironmentConfig, R as RepoSlug, c as Worktree, b as WorktreeConfig, d as WorktreeEnvironmentInstance, W as WorktreeName } from './repo-Dr--T0wp.cjs';
 export { C as CreateUserInput, b as UpdateUserInput, a as User, U as UserRole } from './user-eUuKj7yM.cjs';
 export { and, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
-export { A as AmbiguousIdError, B as BaseRepository, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, b as Database, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from './worktrees-DZ3DkdlA.cjs';
+export { A as AmbiguousIdError, B as BaseRepository, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, b as Database, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from './worktrees-BnZ6TnB3.cjs';
 export { Id, NullableId, Paginated, Params, Service, ServiceMethods } from '@feathersjs/feathers';
 import 'socket.io-client';
 import 'bcryptjs';

package/dist/core/index.d.ts

@@ -15,7 +15,7 @@ export { ActiveUser, CreateInput, CursorLeaveEvent, CursorMoveEvent, CursorMoved
 export { a as Repo, e as RepoEnvironmentConfig, R as RepoSlug, c as Worktree, b as WorktreeConfig, d as WorktreeEnvironmentInstance, W as WorktreeName } from './repo-BoA8D6Uf.js';
 export { C as CreateUserInput, b as UpdateUserInput, a as User, U as UserRole } from './user-BmL3kFol.js';
 export { and, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
-export { A as AmbiguousIdError, B as BaseRepository, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, b as Database, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from './worktrees-Bo5VOy-g.js';
+export { A as AmbiguousIdError, B as BaseRepository, Q as BoardCommentInsert, P as BoardCommentRow, y as BoardInsert, O as BoardObjectInsert, N as BoardObjectRow, x as BoardRow, d as DEFAULT_DB_PATH, b as Database, a as DatabaseConnectionError, D as DbConfig, E as EntityNotFoundError, J as MCPServerInsert, M as MCPServerRepository, I as MCPServerRow, v as MessageInsert, q as MessageRow, f as MessagesRepository, C as RepoInsert, z as RepoRow, R as RepositoryError, o as SessionInsert, L as SessionMCPServerInsert, S as SessionMCPServerRepository, K as SessionMCPServerRow, g as SessionRepository, n as SessionRow, p as TaskInsert, T as TaskRow, H as UserInsert, U as UserRow, G as WorktreeInsert, W as WorktreeRepository, F as WorktreeRow, l as boardComments, j as boardObjects, h as boards, c as createDatabase, e as createLocalDatabase, i as mcpServers, m as messages, r as repos, k as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from './worktrees-BGyg0_jA.js';
 export { Id, NullableId, Paginated, Params, Service, ServiceMethods } from '@feathersjs/feathers';
 import 'socket.io-client';
 import 'bcryptjs';

package/dist/core/tools/index.d.cts

@@ -1,7 +1,7 @@
 import { d as Message, M as MessageRole } from '../message-BoxZISHg.cjs';
 import { M as MessageID, a as SessionID, T as TaskID } from '../id-DMqyogFB.cjs';
 import { PermissionMode } from '@anthropic-ai/claude-agent-sdk';
-import { f as MessagesRepository, g as SessionRepository, S as SessionMCPServerRepository, M as MCPServerRepository, W as WorktreeRepository } from '../worktrees-DZ3DkdlA.cjs';
+import { f as MessagesRepository, g as SessionRepository, S as SessionMCPServerRepository, M as MCPServerRepository, W as WorktreeRepository } from '../worktrees-BnZ6TnB3.cjs';
 import { PermissionService } from '../permissions/index.cjs';
 import { TokenUsage } from '../utils/pricing.cjs';
 import { T as TaskStatus, e as Task } from '../task-BIEgT1DK.cjs';
@@ -10,8 +10,8 @@ import { P as PermissionMode$1 } from '../session-Dl5E0CV3.cjs';
 export { CODEX_MINI_MODEL, CODEX_MODELS, DEFAULT_CODEX_MODEL, DEFAULT_GEMINI_MODEL, GEMINI_MODELS, GeminiModel } from './models.cjs';
 import '../repo-Dr--T0wp.cjs';
 import 'drizzle-orm/libsql';
-import 'drizzle-orm/sqlite-core';
 import '../agentic-tool-F4yIQb5n.cjs';
+import 'drizzle-orm/sqlite-core';
 
 /**
  * Tool Types - Base types for agentic coding tools

package/dist/core/tools/index.d.ts

@@ -1,7 +1,7 @@
 import { d as Message, M as MessageRole } from '../message-DvBzHu7V.js';
 import { M as MessageID, a as SessionID, T as TaskID } from '../id-DMqyogFB.js';
 import { PermissionMode } from '@anthropic-ai/claude-agent-sdk';
-import { f as MessagesRepository, g as SessionRepository, S as SessionMCPServerRepository, M as MCPServerRepository, W as WorktreeRepository } from '../worktrees-Bo5VOy-g.js';
+import { f as MessagesRepository, g as SessionRepository, S as SessionMCPServerRepository, M as MCPServerRepository, W as WorktreeRepository } from '../worktrees-BGyg0_jA.js';
 import { PermissionService } from '../permissions/index.js';
 import { TokenUsage } from '../utils/pricing.js';
 import { T as TaskStatus, e as Task } from '../task-DuIfiUbW.js';
@@ -10,8 +10,8 @@ import { P as PermissionMode$1 } from '../session-De4TwIM_.js';
 export { CODEX_MINI_MODEL, CODEX_MODELS, DEFAULT_CODEX_MODEL, DEFAULT_GEMINI_MODEL, GEMINI_MODELS, GeminiModel } from './models.js';
 import '../repo-BoA8D6Uf.js';
 import 'drizzle-orm/libsql';
-import 'drizzle-orm/sqlite-core';
 import '../agentic-tool-BKO8MCeP.js';
+import 'drizzle-orm/sqlite-core';
 
 /**
  * Tool Types - Base types for agentic coding tools

package/dist/core/utils/url.cjs

@@ -0,0 +1,53 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/utils/url.ts
+var url_exports = {};
+__export(url_exports, {
+  normalizeOptionalHttpUrl: () => normalizeOptionalHttpUrl
+});
+module.exports = __toCommonJS(url_exports);
+function normalizeOptionalHttpUrl(value, fieldName = "value") {
+  if (value === null || value === void 0) {
+    return void 0;
+  }
+  if (typeof value !== "string") {
+    throw new Error(`${fieldName} must be a string`);
+  }
+  const trimmed = value.trim();
+  if (trimmed.length === 0) {
+    return void 0;
+  }
+  try {
+    const parsed = new URL(trimmed);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      throw new Error(`${fieldName} must use http or https`);
+    }
+    return parsed.toString();
+  } catch (error) {
+    if (error instanceof Error && error.message.startsWith(fieldName)) {
+      throw error;
+    }
+    throw new Error(`${fieldName} must be a valid http(s) URL`);
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  normalizeOptionalHttpUrl
+});

package/dist/core/utils/url.d.cts

@@ -0,0 +1,20 @@
+/**
+ * URL normalization utilities
+ *
+ * Provides shared helpers for validating and normalizing user-provided URLs.
+ */
+/**
+ * Normalize an optional HTTP(S) URL string.
+ *
+ * - Trims whitespace
+ * - Returns `undefined` for empty or missing values
+ * - Validates that protocol is http or https
+ * - Returns canonical `.toString()` representation
+ *
+ * @param value - Potential URL value from user input
+ * @param fieldName - Friendly field name for error messages
+ * @throws Error if the URL is present but invalid or not http(s)
+ */
+declare function normalizeOptionalHttpUrl(value: unknown, fieldName?: string): string | undefined;
+
+export { normalizeOptionalHttpUrl };

package/dist/core/utils/url.d.ts

@@ -0,0 +1,20 @@
+/**
+ * URL normalization utilities
+ *
+ * Provides shared helpers for validating and normalizing user-provided URLs.
+ */
+/**
+ * Normalize an optional HTTP(S) URL string.
+ *
+ * - Trims whitespace
+ * - Returns `undefined` for empty or missing values
+ * - Validates that protocol is http or https
+ * - Returns canonical `.toString()` representation
+ *
+ * @param value - Potential URL value from user input
+ * @param fieldName - Friendly field name for error messages
+ * @throws Error if the URL is present but invalid or not http(s)
+ */
+declare function normalizeOptionalHttpUrl(value: unknown, fieldName?: string): string | undefined;
+
+export { normalizeOptionalHttpUrl };

package/dist/core/utils/url.js

@@ -0,0 +1,28 @@
+// src/utils/url.ts
+function normalizeOptionalHttpUrl(value, fieldName = "value") {
+  if (value === null || value === void 0) {
+    return void 0;
+  }
+  if (typeof value !== "string") {
+    throw new Error(`${fieldName} must be a string`);
+  }
+  const trimmed = value.trim();
+  if (trimmed.length === 0) {
+    return void 0;
+  }
+  try {
+    const parsed = new URL(trimmed);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      throw new Error(`${fieldName} must use http or https`);
+    }
+    return parsed.toString();
+  } catch (error) {
+    if (error instanceof Error && error.message.startsWith(fieldName)) {
+      throw error;
+    }
+    throw new Error(`${fieldName} must be a valid http(s) URL`);
+  }
+}
+export {
+  normalizeOptionalHttpUrl
+};

package/dist/core/{worktrees-Bo5VOy-g.d.ts → worktrees-BGyg0_jA.d.ts}

@@ -3,6 +3,7 @@ import { d as Message } from './message-DvBzHu7V.js';
 import { M as MessageID, a as SessionID, T as TaskID, U as UUID } from './id-DMqyogFB.js';
 import { c as Worktree } from './repo-BoA8D6Uf.js';
 import { LibSQLDatabase } from 'drizzle-orm/libsql';
+import { c as CodexSandboxMode, d as CodexApprovalPolicy } from './agentic-tool-BKO8MCeP.js';
 import { e as Task } from './task-DuIfiUbW.js';
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 
@@ -228,6 +229,10 @@ declare const sessions: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
                 permission_config?: {
                     allowedTools?: string[];
                     mode?: PermissionMode;
+                    codex?: {
+                        sandboxMode: CodexSandboxMode;
+                        approvalPolicy: CodexApprovalPolicy;
+                    };
                 };
                 model_config?: {
                     mode: "alias" | "exact";
@@ -268,6 +273,10 @@ declare const sessions: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
                 permission_config?: {
                     allowedTools?: string[];
                     mode?: PermissionMode;
+                    codex?: {
+                        sandboxMode: CodexSandboxMode;
+                        approvalPolicy: CodexApprovalPolicy;
+                    };
                 };
                 model_config?: {
                     mode: "alias" | "exact";

package/dist/core/{worktrees-DZ3DkdlA.d.cts → worktrees-BnZ6TnB3.d.cts}

@@ -3,6 +3,7 @@ import { d as Message } from './message-BoxZISHg.cjs';
 import { M as MessageID, a as SessionID, T as TaskID, U as UUID } from './id-DMqyogFB.cjs';
 import { c as Worktree } from './repo-Dr--T0wp.cjs';
 import { LibSQLDatabase } from 'drizzle-orm/libsql';
+import { c as CodexSandboxMode, d as CodexApprovalPolicy } from './agentic-tool-F4yIQb5n.cjs';
 import { e as Task } from './task-BIEgT1DK.cjs';
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 
@@ -228,6 +229,10 @@ declare const sessions: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
                 permission_config?: {
                     allowedTools?: string[];
                     mode?: PermissionMode;
+                    codex?: {
+                        sandboxMode: CodexSandboxMode;
+                        approvalPolicy: CodexApprovalPolicy;
+                    };
                 };
                 model_config?: {
                     mode: "alias" | "exact";
@@ -268,6 +273,10 @@ declare const sessions: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
                 permission_config?: {
                     allowedTools?: string[];
                     mode?: PermissionMode;
+                    codex?: {
+                        sandboxMode: CodexSandboxMode;
+                        approvalPolicy: CodexApprovalPolicy;
+                    };
                 };
                 model_config?: {
                     mode: "alias" | "exact";

package/dist/daemon/declarations.d.ts

@@ -1,5 +1,5 @@
 import { ExpressApplication, Service } from '@agor/core/feathers';
-import { AuthenticatedUser as AuthenticatedUser$1, AuthenticatedParams as AuthenticatedParams$1, CreateHookContext as CreateHookContext$1, HookContext as HookContext$1, Session, Params, Task, Repo, Board, Message, Worktree, WorktreeID } from '@agor/core/types';
+import { AuthenticatedUser as AuthenticatedUser$1, AuthenticatedParams as AuthenticatedParams$1, CreateHookContext as CreateHookContext$1, HookContext as HookContext$1, Session, Params, Task, Repo, Worktree, Board, Message, WorktreeID } from '@agor/core/types';
 
 /**
  * FeathersJS Type Declarations for Agor Daemon
@@ -65,7 +65,12 @@ interface ReposServiceImpl extends Service<Repo, Partial<Repo>, Params> {
         name: string;
         ref: string;
         createBranch?: boolean;
-    }, params?: Params): Promise<Repo>;
+        pullLatest?: boolean;
+        sourceBranch?: string;
+        issue_url?: string;
+        pull_request_url?: string;
+        boardId?: string;
+    }, params?: Params): Promise<Worktree>;
     removeWorktree(id: string, name: string, params?: Params): Promise<Repo>;
 }
 /**

package/dist/daemon/index.js

@@ -106,6 +106,12 @@ var routes_exports = {};
 __export(routes_exports, {
   setupMCPRoutes: () => setupMCPRoutes
 });
+import { normalizeOptionalHttpUrl } from "@agor/core/utils/url";
+function coerceString(value) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
 function setupMCPRoutes(app) {
   const handler = async (req, res) => {
     try {
@@ -269,6 +275,52 @@ function setupMCPRoutes(app) {
                 }
               }
             },
+            {
+              name: "agor_worktrees_create",
+              description: "Create a worktree (and optional branch) for a repository, with optional board/issue/PR links",
+              inputSchema: {
+                type: "object",
+                properties: {
+                  repoId: {
+                    type: "string",
+                    description: "Repository ID where the worktree will be created"
+                  },
+                  worktreeName: {
+                    type: "string",
+                    description: "Slug name for the worktree directory (lowercase letters, numbers, hyphens)"
+                  },
+                  ref: {
+                    type: "string",
+                    description: "Git ref to checkout. Defaults to the worktree name when creating a new branch."
+                  },
+                  createBranch: {
+                    type: "boolean",
+                    description: "Whether to create a new branch. Defaults to true unless ref is a commit SHA."
+                  },
+                  sourceBranch: {
+                    type: "string",
+                    description: "Base branch when creating a new branch (defaults to the repo default branch)."
+                  },
+                  pullLatest: {
+                    type: "boolean",
+                    description: "Pull latest from remote before creating the branch (defaults to true for new branches)."
+                  },
+                  boardId: {
+                    type: "string",
+                    description: "Board ID to immediately place the worktree on (positions to default coordinates)."
+                  },
+                  issueUrl: {
+                    type: "string",
+                    description: "Issue URL to associate with the worktree."
+                  },
+                  pullRequestUrl: {
+                    type: "string",
+                    description: "Pull request URL to associate with the worktree."
+                  }
+                },
+                required: ["repoId", "worktreeName"]
+              }
+            },
             // Board tools
             {
               name: "agor_boards_get",
@@ -401,6 +453,10 @@ function setupMCPRoutes(app) {
         const { name, arguments: args } = mcpRequest.params || {};
         console.log(`\u{1F527} MCP tool call: ${name}`);
         console.log(`   Arguments:`, JSON.stringify(args || {}).substring(0, 200));
+        const baseServiceParams = {
+          user: context.userId ? { user_id: context.userId } : void 0,
+          authenticated: true
+        };
         if (name === "agor_sessions_list") {
           const query = {};
           if (args?.limit) query.$limit = args.limit;
@@ -469,12 +525,8 @@ function setupMCPRoutes(app) {
           if (args.taskId) {
             spawnData.task_id = args.taskId;
           }
-          const serviceParams = {
-            user: context.userId ? { user_id: context.userId } : void 0,
-            authenticated: true
-          };
           console.log(`\u{1F331} MCP spawning subsession from ${context.sessionId.substring(0, 8)}`);
-          const childSession = await app.service("sessions").spawn(context.sessionId, spawnData, serviceParams);
+          const childSession = await app.service("sessions").spawn(context.sessionId, spawnData, baseServiceParams);
           console.log(`\u2705 Subsession created: ${childSession.session_id.substring(0, 8)}`);
           console.log(
             `\u{1F680} Triggering prompt execution for subsession ${childSession.session_id.substring(0, 8)}`
@@ -486,7 +538,7 @@ function setupMCPRoutes(app) {
               stream: true
             },
             {
-              ...serviceParams,
+              ...baseServiceParams,
               route: { id: childSession.session_id }
             }
           );
@@ -541,6 +593,127 @@ function setupMCPRoutes(app) {
               }
             ]
           };
+        } else if (name === "agor_worktrees_create") {
+          const repoId = coerceString(args?.repoId);
+          if (!repoId) {
+            return res.status(400).json({
+              jsonrpc: "2.0",
+              id: mcpRequest.id,
+              error: {
+                code: -32602,
+                message: "Invalid params: repoId is required"
+              }
+            });
+          }
+          const worktreeName = coerceString(args?.worktreeName);
+          if (!worktreeName) {
+            return res.status(400).json({
+              jsonrpc: "2.0",
+              id: mcpRequest.id,
+              error: {
+                code: -32602,
+                message: "Invalid params: worktreeName is required"
+              }
+            });
+          }
+          if (!WORKTREE_NAME_PATTERN.test(worktreeName)) {
+            return res.status(400).json({
+              jsonrpc: "2.0",
+              id: mcpRequest.id,
+              error: {
+                code: -32602,
+                message: "Invalid params: worktreeName must use lowercase letters, numbers, or hyphens"
+              }
+            });
+          }
+          const reposService = app.service("repos");
+          let repo;
+          try {
+            repo = await reposService.get(repoId);
+          } catch {
+            return res.status(404).json({
+              jsonrpc: "2.0",
+              id: mcpRequest.id,
+              error: {
+                code: -32602,
+                message: `Repository ${repoId} not found`
+              }
+            });
+          }
+          const defaultBranch = coerceString(repo.default_branch) ?? "main";
+          let createBranch = typeof args?.createBranch === "boolean" ? args.createBranch : true;
+          let ref = coerceString(args?.ref);
+          let sourceBranch = coerceString(args?.sourceBranch);
+          let pullLatest = typeof args?.pullLatest === "boolean" ? args.pullLatest : void 0;
+          if (ref && GIT_SHA_PATTERN.test(ref)) {
+            createBranch = false;
+            pullLatest = false;
+            sourceBranch = void 0;
+          }
+          if (createBranch) {
+            if (!ref) {
+              ref = worktreeName;
+            }
+            if (!sourceBranch) {
+              sourceBranch = defaultBranch;
+            }
+            if (pullLatest === void 0) {
+              pullLatest = true;
+            }
+          } else {
+            if (!ref) {
+              return res.status(400).json({
+                jsonrpc: "2.0",
+                id: mcpRequest.id,
+                error: {
+                  code: -32602,
+                  message: "Invalid params: ref is required when createBranch is false"
+                }
+              });
+            }
+            sourceBranch = void 0;
+            if (pullLatest === void 0) {
+              pullLatest = false;
+            }
+          }
+          const boardId = coerceString(args?.boardId);
+          let issueUrl;
+          let pullRequestUrl;
+          try {
+            issueUrl = normalizeOptionalHttpUrl(args?.issueUrl, "issueUrl");
+            pullRequestUrl = normalizeOptionalHttpUrl(args?.pullRequestUrl, "pullRequestUrl");
+          } catch (validationError) {
+            return res.status(400).json({
+              jsonrpc: "2.0",
+              id: mcpRequest.id,
+              error: {
+                code: -32602,
+                message: validationError instanceof Error ? validationError.message : "Invalid URL parameter"
+              }
+            });
+          }
+          const worktree = await reposService.createWorktree(
+            repoId,
+            {
+              name: worktreeName,
+              ref,
+              createBranch,
+              ...pullLatest !== void 0 ? { pullLatest } : {},
+              ...sourceBranch ? { sourceBranch } : {},
+              ...issueUrl ? { issue_url: issueUrl } : {},
+              ...pullRequestUrl ? { pull_request_url: pullRequestUrl } : {},
+              ...boardId ? { boardId } : {}
+            },
+            baseServiceParams
+          );
+          mcpResponse = {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(worktree, null, 2)
+              }
+            ]
+          };
         } else if (name === "agor_boards_get") {
           if (!args?.boardId) {
             return res.status(400).json({
@@ -695,10 +868,13 @@ function setupMCPRoutes(app) {
   app.post("/mcp", handler);
   console.log("\u2705 MCP routes registered at POST /mcp");
 }
+var WORKTREE_NAME_PATTERN, GIT_SHA_PATTERN;
 var init_routes = __esm({
   "src/mcp/routes.ts"() {
     "use strict";
     init_tokens();
+    WORKTREE_NAME_PATTERN = /^[a-z0-9-]+$/;
+    GIT_SHA_PATTERN = /^[0-9a-f]{40}$/i;
   }
 });
 
@@ -2443,8 +2619,12 @@ var WorktreesService = class extends DrizzleService {
   async patch(id, data, params) {
     const currentWorktree = await this.get(id, params);
     const oldBoardId = currentWorktree.board_id;
+    const boardIdProvided = Object.hasOwn(data, "board_id");
     const newBoardId = data.board_id;
     const updatedWorktree = await super.patch(id, data, params);
+    if (!boardIdProvided) {
+      return updatedWorktree;
+    }
     if (oldBoardId !== newBoardId) {
       const boardObjectsService = this.app.service("board-objects");
       try {