brnch-cli 0.19.0 → 0.19.1

package/README.md

@@ -1,4 +1,4 @@
-# brnch 0.19.0
+# brnch 0.19.1
 
 Command-line client for [Brnch](https://brnch.io) — Git hosting for humans and agents. Single file, no runtime dependencies, Node 20 or newer.
 

package/brnch.mjs

@@ -30573,7 +30573,8 @@ var PLATFORM_TOKEN_PREFIXES = {
   fsfa: "pending second-factor sign-in",
   fbkc: "Buildkite checkout token",
   fsvw: "staff read-only view",
-  fcrt: "container registry token"
+  fcrt: "container registry token",
+  fcpk: "clone-pack build token"
 };
 var PLATFORM_TOKEN_RE = new RegExp(`^(${Object.keys(PLATFORM_TOKEN_PREFIXES).join("|")})_[0-9a-f]{64}$`);
 
@@ -31636,7 +31637,6 @@ var looksLikeHostedLabel = (label2) => /^brnch-hosted(?:-|$)/.test(label2);
 var DEPLOY_LIMITS = {
   maxStepsPerTarget: 12,
   maxWatchPaths: 50,
-  maxTargetsPerRepository: 10,
   maxCommandLength: 2e3,
   maxSummaryLength: 500,
   maxDetailKeys: 20,
@@ -31746,7 +31746,8 @@ var PLANS = Object.freeze({
     storage_bytes_per_seat: 0,
     ai: { fast: 100, strong: 25, agent: 0, assistant: 0 },
     private_repo_members: 5,
-    overage: false
+    overage: false,
+    deploy_targets_per_repository: 1
   },
   pro: {
     id: "pro",
@@ -31765,7 +31766,8 @@ var PLANS = Object.freeze({
     storage_bytes_per_seat: 0,
     ai: { fast: 300, strong: 100, agent: 10, assistant: 100 },
     private_repo_members: 5,
-    overage: true
+    overage: true,
+    deploy_targets_per_repository: 10
   },
   team: {
     id: "team",
@@ -31784,7 +31786,8 @@ var PLANS = Object.freeze({
     storage_bytes_per_seat: 2 * GB,
     ai: { fast: 600, strong: 200, agent: 10, assistant: 100 },
     private_repo_members: Number.POSITIVE_INFINITY,
-    overage: true
+    overage: true,
+    deploy_targets_per_repository: 10
   },
   enterprise: {
     id: "enterprise",
@@ -31803,7 +31806,8 @@ var PLANS = Object.freeze({
     storage_bytes_per_seat: 5 * GB,
     ai: { fast: 1500, strong: 500, agent: 40, assistant: 300 },
     private_repo_members: Number.POSITIVE_INFINITY,
-    overage: true
+    overage: true,
+    deploy_targets_per_repository: 1e3
   }
 });
 
@@ -32211,15 +32215,27 @@ var UpdateRepoRequest = external_exports.object({
   default_branch: external_exports.string().min(1).max(100).optional(),
   /** Replaces the topic list (≤20, lowercase). */
   topics: Topics.optional(),
+  /** The repository Actions switch (ADR-0009 addendum 2026-10-18). Off: no automatic runs, workflow_dispatch refused. */
+  actions_enabled: external_exports.boolean().optional(),
   version: external_exports.number().int()
 });
 var PATH_HISTORY_SCAN_MAX = 500;
 var RepoPathQuery = external_exports.string().min(1).max(4096).transform((p) => p.replace(/\/{2,}/g, "/").replace(/\/+$/, "")).refine((p) => p.length > 0 && !p.startsWith("/"), "path must be relative to the repository root").refine((p) => !/[\u0000-\u001f\u007f]/.test(p), "path must not contain control characters").refine((p) => p.split("/").every((s) => s !== "." && s !== ".."), "path must not contain . or .. segments");
+var isoDate = external_exports.string().max(64).refine((v) => !Number.isNaN(Date.parse(v)), { message: "must be an ISO-8601 date" });
+var queryFlag = external_exports.enum(["1", "true", "0", "false"]).transform((v) => v === "1" || v === "true");
 var CommitListQuery = external_exports.object({
   ref: external_exports.string().optional(),
   path: RepoPathQuery.optional(),
-  scan_limit: external_exports.coerce.number().int().min(1).max(PATH_HISTORY_SCAN_MAX).optional()
-}).refine((q) => q.scan_limit === void 0 || q.path !== void 0, { message: "scan_limit requires path", path: ["scan_limit"] });
+  scan_limit: external_exports.coerce.number().int().min(1).max(PATH_HISTORY_SCAN_MAX).optional(),
+  // Log filters (M6-SCL-02): substring matches, case-insensitive (no regular expressions); dates bound the committer
+  // date, inclusive.
+  author: external_exports.string().min(1).max(200).optional(),
+  grep: external_exports.string().min(1).max(200).optional(),
+  since: isoDate.optional(),
+  until: isoDate.optional(),
+  all_parents: queryFlag.optional()
+}).refine((q) => q.scan_limit === void 0 || q.path !== void 0 || isLogFiltered(q), { message: "scan_limit requires path or a filter", path: ["scan_limit"] });
+var isLogFiltered = (q) => q.author !== void 0 || q.grep !== void 0 || q.since !== void 0 || q.until !== void 0 || q.all_parents === true;
 var RequiredCheckSchema = external_exports.object({
   name: external_exports.string().min(1).max(200),
   subject: external_exports.enum(["head", "candidate"]).default("head"),
@@ -32454,7 +32470,9 @@ var UpdateOrgRequest = external_exports.object({
   /** Idle timeout of new agent sessions in minutes (ADR-0040). */
   agent_session_idle_minutes: external_exports.number().int().min(15).max(1440).optional(),
   /** Brnch Secure Defaults for new repositories (ADR-0081). Turning it on also requires a second factor for admins. */
-  secure_defaults: external_exports.boolean().optional()
+  secure_defaults: external_exports.boolean().optional(),
+  /** The organization's Actions switch (ADR-0009 addendum 2026-10-19): off, no repository of it starts workflow runs. */
+  actions_enabled: external_exports.boolean().optional()
 });
 var OAuthDecisionRequest = external_exports.object({
   approve: external_exports.boolean(),
@@ -33716,6 +33734,16 @@ var CreateConnectionRequest = external_exports.discriminatedUnion("auth", [
     name: Name3,
     credentials: external_exports.object({ api_token: Secret2 })
   }),
+  external_exports.object({
+    // Codex / Claude Code reviews with the key already saved in Settings → AI providers (an OpenAI or Anthropic
+    // provider of this organization). Nothing is copied: the key is read from the provider at every review, so
+    // rotating it there applies here, and deleting the provider stops the reviews.
+    auth: external_exports.literal("ai_provider"),
+    provider: external_exports.enum(["codex", "claude"]),
+    purpose: external_exports.literal("code_review").default("code_review"),
+    name: Name3,
+    config: external_exports.object({ ai_provider_id: external_exports.string().min(1).max(100) })
+  }),
   external_exports.object({
     auth: external_exports.literal("infisical_oidc"),
     provider: external_exports.literal("infisical"),
@@ -34495,6 +34523,48 @@ var MirrorStatus = external_exports.object({
   timings: external_exports.record(external_exports.string(), external_exports.number())
 });
 
+// packages/protocol/src/clone-pack.ts
+var CLONE_PACK_ID = /^cpk_[0-9a-z]{10,40}$/;
+var Authorization2 = external_exports.string().regex(/^Bearer [A-Za-z0-9+/=._~-]{8,4096}$/);
+var HttpUrl2 = external_exports.string().max(2048).regex(/^https?:\/\/[^\s@]+$/);
+var Oid2 = external_exports.string().regex(/^[0-9a-f]{40}$/);
+var RefName3 = external_exports.string().max(1024).regex(/^refs\/[^\s\0]+$/);
+var PackRef = external_exports.object({ name: RefName3, oid: Oid2 });
+var PackJob = external_exports.object({
+  /** One build; one container per id. */
+  id: external_exports.string().regex(CLONE_PACK_ID),
+  /**
+   * The platform's endpoint for this build, `<base>/git` its git remote (storage behind the storage gate, private refs
+   * hidden) and `<base>/pack/:n`, `<base>/idx`, `<base>/complete` its upload; `authorization` holds for all of them and
+   * for nothing else.
+   */
+  base_url: HttpUrl2,
+  authorization: Authorization2,
+  default_branch: external_exports.string().regex(/^[A-Za-z0-9._\/-]{1,200}$/).refine((b) => !b.includes(".."), "invalid branch"),
+  /** The last ready pack, downloaded from `<base>/previous/pack` and `/previous/idx`, and the refs it holds. */
+  previous: external_exports.object({ pack_sha1: Oid2, refs: external_exports.array(PackRef).max(2e4) }).nullable(),
+  limits: external_exports.object({ max_pack_bytes: external_exports.number().int().positive(), part_bytes: external_exports.number().int().positive() }),
+  expires_at: external_exports.iso.datetime()
+});
+var PackComplete = external_exports.object({
+  pack_sha1: Oid2,
+  pack_bytes: external_exports.number().int().positive(),
+  parts: external_exports.number().int().positive().max(1e4),
+  objects: external_exports.number().int().nonnegative(),
+  refs: external_exports.array(PackRef).max(2e4)
+});
+var PackStatus = external_exports.object({
+  id: external_exports.string(),
+  state: external_exports.enum(["running", "completed", "failed"]),
+  phase: external_exports.string().max(40),
+  reason: external_exports.enum(["fetch_failed", "too_large", "upload_failed", "error"]).optional(),
+  message: external_exports.string().max(4e3).nullable(),
+  pack_bytes: external_exports.number().nullable(),
+  objects: external_exports.number().nullable(),
+  updated_at: external_exports.string(),
+  timings: external_exports.record(external_exports.string(), external_exports.number())
+});
+
 // packages/protocol/src/repo-mirrors.ts
 var StopMirrorRequest = external_exports.object({ confirm: external_exports.string().min(3).max(300), expected_version: external_exports.number().int().positive().optional() }).strict();
 var ResetMirrorRefsRequest = external_exports.object({ refs: external_exports.array(external_exports.string().min(1).max(1024)).min(1).max(100) }).strict();
@@ -36023,6 +36093,7 @@ function orgsGroup(t) {
     create: (body, o) => t.json({ method: "POST", path: "/v1/orgs", json: validate2(CreateOrgRequest, body, "CreateOrgRequest"), options: o }),
     list: (q = {}, o) => t.json({ method: "GET", path: "/v1/orgs", query: { ...q }, options: o }),
     get: (org, o) => t.json({ method: "GET", path: path2`/v1/orgs/${org}`, options: o }),
+    update: (org, body, o) => t.json({ method: "PATCH", path: path2`/v1/orgs/${org}`, json: validate2(UpdateOrgRequest, body, "UpdateOrgRequest"), options: o }),
     members: {
       list: (org, q = {}, o) => t.json({ method: "GET", path: path2`/v1/orgs/${org}/members`, query: { ...q }, options: o }),
       update: (org, userId, body, o) => t.json({
@@ -36314,13 +36385,25 @@ function reposGroup(t) {
     /** Raw file bytes; never interpret them as HTML. */
     raw: (repo, q, o) => t.bytes({ method: "GET", path: path2`/v1/repos/${repo}/raw`, query: { ...q }, options: o }),
     /** First-parent history of `ref`; with `path`, only commits that changed it — each page examines at most
-     * `scan_limit` commits and reports how many in `path_scan` (`complete` is false until the walk reaches the root). */
+     * `scan_limit` commits and reports how many in `path_scan` (`complete` is false until the walk reaches the root).
+     * With log filters (`author`, `grep`, `since`, `until`, `all_parents`; substring matches), the same in `log_scan`. */
     commits: (repo, q = {}, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/commits`, query: { ...q }, options: o }),
     /** Write text files to a branch as one commit, through the same checks as a push (ADR-0078). Retry with the same
      * `idempotencyKey`: a retry after an uncertain outcome never commits twice. */
     commitFiles: (repo, body, o) => t.json({ method: "POST", path: path2`/v1/repos/${repo}/commits`, json: validate2(CommitFilesRequest, body, "CommitFilesRequest"), options: o }),
     commit: (repo, oid, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/commits/${oid}`, options: o }),
+    /** The changes that brought a commit onto each ref it landed on (M6-SCL-01). */
+    commitChange: (repo, oid, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/commits/${oid}/change`, options: o }),
+    /** `mode: "two-dot"` diffs the base tree against the head tree instead of against their merge base. */
     compare: (repo, q, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/compare`, query: { ...q }, options: o }),
+    /** The commits in `base..head` (newest first, at most `limit`, max 250) with ahead/behind counts (M6-SCL-02). */
+    compareCommits: (repo, q, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/compare/commits`, query: { ...q }, options: o }),
+    /** Every best common ancestor of two refs or commits (`git merge-base --all`). */
+    mergeBase: (repo, q, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/merge-base`, query: { ...q }, options: o }),
+    /** Whether `ancestor` is in `descendant`'s history; `is_ancestor` is null when the bounded walk cannot decide. */
+    isAncestor: (repo, q, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/is-ancestor`, query: { ...q }, options: o }),
+    /** Branches and tags whose history contains a commit (`git for-each-ref --contains`). */
+    refsContaining: (repo, commit, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/commits/${commit}/refs`, options: o }),
     diff: (repo, q, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/diff`, query: { ...q }, options: o }),
     pushes: (repo, q = {}, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/pushes`, query: { ...q }, options: o }),
     search: (repo, q, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/search`, query: { ...q }, options: o }),
@@ -36628,6 +36711,7 @@ function dbMigrationsGroup(t) {
 }
 
 // packages/sdk/src/groups/deploy.ts
+var isCallOptions = (x) => "signal" in x || "idempotencyKey" in x;
 function deployGroup(t) {
   return {
     stepKinds: (o) => t.json({ method: "GET", path: "/v1/deploy/step-kinds", options: o }),
@@ -36637,7 +36721,14 @@ function deployGroup(t) {
     suggestions: (repo, ref, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/deploy-suggestions`, query: ref ? { ref } : {}, options: o }),
     resources: (repo, connection, type, parent, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/deploy-connections/${connection}/resources`, query: { type, ...parent ? { parent } : {} }, options: o }),
     targets: {
-      list: (repo, o) => t.json({ method: "GET", path: path2`/v1/repos/${repo}/deploy-targets`, options: o }),
+      /**
+       * A page of the repository's targets (50 by default); `name` finds one target by name. Callers from before
+       * pagination passed call options second: those are still taken as call options.
+       */
+      list: (repo, q = {}, o) => {
+        if (isCallOptions(q)) [q, o] = [{}, q];
+        return t.json({ method: "GET", path: path2`/v1/repos/${repo}/deploy-targets`, query: { ...q }, options: o });
+      },
       create: (repo, body, o) => t.json({ method: "POST", path: path2`/v1/repos/${repo}/deploy-targets`, json: validate2(CreateDeployTargetRequest, body, "CreateDeployTargetRequest"), options: o }),
       get: (id2, o) => t.json({ method: "GET", path: path2`/v1/deploy-targets/${id2}`, options: o }),
       update: (id2, body, o) => t.json({ method: "PATCH", path: path2`/v1/deploy-targets/${id2}`, json: validate2(UpdateDeployTargetRequest, body, "UpdateDeployTargetRequest"), options: o }),
@@ -37138,7 +37229,7 @@ function invalidAgentToolFlag(flag) {
 }
 
 // packages/cli/package.json
-var version2 = "0.19.0";
+var version2 = "0.19.1";
 
 // packages/cli/src/brand.ts
 var BRAND = {
@@ -39821,6 +39912,7 @@ function instructionsSnippet(tool) {
     `  - Commit only what you wrote: stage your paths (\`git add <path>\u2026\`), not the person's uncommitted edits (\`git add -A\` takes them too). Do not squash other sessions' or the person's commits into yours.`,
     `  - Commit authors and trailers (\`Agent-Session:\`, \`Co-Authored-By:\`) are claims and attribute nothing; you do not need them for attribution.`,
     `  - Hooks wired: \`${cli} hooks status\`. Codex runs them only after the person trusts them once (\`${cli} hooks trust\` in their terminal).`,
+    `- Ask Brnch which change brought a commit instead of searching \`git log\` or guessing from commit-message words: \`${cli} repo commit-change <commit>\` (MCP: \`commit_change_get\`), for every merge strategy. The change's description and review say why.`,
     `- Record key decisions as you make them: \`${cli} decision "\u2026" --reason "\u2026" --file <path>\`. Blame shows them with the lines they explain.`,
     `- Other agents may be working here at the same time. Run \`${cli} status\` before you start to see who is working on what.`,
     `- Claim ADR numbers, migration numbers, release versions and exclusive operations before you use them, and use exactly the key you get: \`${cli} claim adr:<n> --next\` (also \`migration:<n>\`, \`version:<pkg>:<x.y.z>\`, \`lock:<operation>\`). If a key is taken, take the next; never reuse another session's key.`,
@@ -48487,8 +48579,8 @@ ${renderPlan2(v.plan)}`);
 // packages/cli/src/commands/deploy.ts
 var TERMINAL4 = /* @__PURE__ */ new Set(["succeeded", "failed", "cancelled", "superseded", "blocked"]);
 var NO_DO_PREVIEWS = "previews off: Cloudflare makes no version URLs for Workers that implement a Durable Object (--previews --preview-mode worker_previews uses Worker Previews; it needs a `previews` block in the Wrangler configuration)";
-var renderTargets = (v) => table(
-  v.items.map((t) => ({ ...t, resource: t.resource_name, env: t.environment ?? "-", last_production: t.last_production ? `${t.last_production.status} ${t.last_production.commit_oid.slice(0, 12)}` : "-" })),
+var renderTargets = (v) => listWithCursor(
+  { ...v, items: v.items.map((t) => ({ ...t, resource: t.resource_name, env: t.environment ?? "-", last_production: t.last_production ? `${t.last_production.status} ${t.last_production.commit_oid.slice(0, 12)}` : "-" })) },
   ["name", "id", "platform", "resource", "env", "branch", "runs_on", "previews", "state", "last_production"]
 );
 var renderTarget = (t) => kv({ ...t, approvers: ruleSummary(t.approval_rule), watch_paths: t.watch_paths?.length ? t.watch_paths.join(" ") : "every change", connection: t.connection ? `${t.connection.name} (${t.connection.id}, ${t.connection.state})` : "-", last_production: t.last_production ? `${t.last_production.id} ${t.last_production.status}` : "-" }, [
@@ -48531,10 +48623,12 @@ ${lines2}
 }
 async function targetId(ctx, ref) {
   if (ref.startsWith("dpt_")) return ref;
-  const { items } = await ctx.client("user").deploy.targets.list(await ctx.repoId(void 0, "user"));
-  const t = items.find((x) => x.name === ref);
-  if (!t) throw new CliError(`no deploy target named "${ref}" (have: ${items.map((x) => x.name).join(", ") || "none"})`, EXIT.NOT_FOUND, "NOT_FOUND");
-  return t.id;
+  const client = ctx.client("user");
+  const repo = await ctx.repoId(void 0, "user");
+  const t = (await client.deploy.targets.list(repo, { name: ref })).items.find((x) => x.name === ref);
+  if (t) return t.id;
+  const { items, next_cursor } = await client.deploy.targets.list(repo, { limit: 20 });
+  throw new CliError(`no deploy target named "${ref}" (have: ${items.map((x) => x.name).join(", ") || "none"}${next_cursor ? ", \u2026" : ""})`, EXIT.NOT_FOUND, "NOT_FOUND");
 }
 var orNull = (v) => v === void 0 ? void 0 : v || null;
 async function stepsOf(ctx, spec) {
@@ -48651,7 +48745,7 @@ function registerDeploy(program2, rt) {
 Merges to ${v.branch} deploy automatically. Deploy now: brnch deploy run ${v.id}`);
     })
   );
-  const targets2 = deploy.command("targets").description("Deploy targets of --repo; `protect` requires approvers for a target's production deploys").action(act(rt, async (ctx) => ctx.result(await ctx.client("user").deploy.targets.list(await ctx.repoId(void 0, "user")), renderTargets)));
+  const targets2 = deploy.command("targets").description("Deploy targets of --repo; `protect` requires approvers for a target's production deploys").option("--limit <n>", "page size", (v) => parseIntOption(v, "--limit")).option("--cursor <cursor>", "page cursor").action(act(rt, async (ctx, o) => ctx.result(await ctx.client("user").deploy.targets.list(await ctx.repoId(void 0, "user"), { limit: o.limit, cursor: o.cursor }), renderTargets)));
   protectOptions(targets2.command("protect <target>").description("Require approvals for the target's production deploys and rollbacks (people with deploy:manage). Replaces the current rule")).action(
     act(rt, async (ctx, o, [ref]) => {
       const c8 = ctx.client("user").deploy.targets;
@@ -49342,15 +49436,78 @@ function authGuidance(cli, helperConfigured) {
 }
 
 // packages/cli/src/commands/repo.ts
-var REPO_FIELDS = ["id", "org_slug", "name", "description", "visibility", "default_branch", "lifecycle", "clone_url", "updated_at"];
+var REPO_FIELDS = ["id", "org_slug", "name", "description", "visibility", "default_branch", "lifecycle", "clone_url", "actions_enabled", "updated_at"];
 var renderRepo2 = (r) => kv(r, REPO_FIELDS) + (r.import ? `
 import    ${r.import.status}${r.import.shallow ? " (shallow)" : ""}` : "");
 function renderLog(p) {
   const rows2 = p.items.map((c8) => ({ oid: c8.oid.slice(0, 12), date: c8.committer.date.slice(0, 10), author: c8.author.name, subject: c8.message.split("\n", 1)[0] }));
   const lines2 = [table(rows2, ["oid", "date", "author", "subject"])];
   const s = p.path_scan;
+  const l = p.log_scan;
   if (s) lines2.push(s.complete ? `scanned ${s.scanned_total} commits: full first-parent history of ${s.path}` : `scanned ${s.scanned_total} commits so far; older history not searched yet (more: --cursor ${p.next_cursor})`);
-  else if (p.next_cursor) lines2.push(`(more: --cursor ${p.next_cursor})`);
+  else if (l) {
+    if (l.complete) lines2.push(`scanned ${l.scanned_total} commits: all matching history searched`);
+    else if (l.exhausted) lines2.push(`scanned ${l.scanned_total} commits, the most one search walks; older history not searched`);
+    else lines2.push(`scanned ${l.scanned_total} commits so far; older history not searched yet (more: --cursor ${p.next_cursor})`);
+  } else if (p.next_cursor) lines2.push(`(more: --cursor ${p.next_cursor})`);
+  return lines2.join("\n");
+}
+function renderCommitChange(r) {
+  const lines2 = r.landings.map((l) => {
+    const how2 = l.role === "landing" ? `${l.strategy} commit of` : `brought in by ${l.strategy} of`;
+    const receipt = l.receipt_id ? `, receipt ${l.receipt_id}` : "";
+    return `${l.target_ref.replace(/^refs\/heads\//, "")}: ${how2} #${l.change.number} ${l.change.title} (${l.change.state}; landing ${l.landing_oid.slice(0, 12)}${receipt})`;
+  });
+  if (!lines2.length) lines2.push(r.indexing ? "no change on record yet: earlier landings are still being indexed, ask again shortly" : "no change brought this commit (pushed straight to a branch, or older than the repository on Brnch)");
+  else if (r.indexing) lines2.push("(earlier landings are still being indexed)");
+  return lines2.join("\n");
+}
+var renderTree = (t) => [`${t.path || "/"} at ${t.commit_oid.slice(0, 12)}`, table(t.entries.map((e) => ({ ...e, name: e.type === "tree" ? `${e.name}/` : e.name })), ["mode", "type", "name"])].join("\n");
+function renderBlob(b) {
+  if (b.binary) return `(binary file, ${b.size} bytes; ${BRAND.cli} --json repo blob for its id)`;
+  if (b.truncated || b.encoding !== "utf8") return `(${b.size} bytes, too large to show inline: clone, or download ${b.path} at ${b.commit_oid.slice(0, 12)})`;
+  return b.content;
+}
+function renderBlame(b) {
+  const rows2 = b.lines.map((l) => ({ line: l.line, oid: l.commit_oid.slice(0, 12), date: l.date.slice(0, 10), author: l.author, summary: l.summary }));
+  const lines2 = [table(rows2, ["line", "oid", "date", "author", "summary"])];
+  if (b.partial) lines2.push("partial: the walk ran out of time, older lines may belong to newer commits; the full blame is being computed, ask again shortly");
+  else if (b.truncated) lines2.push("history not walked to the end: unresolved lines are attributed to the oldest commit examined");
+  return lines2.join("\n");
+}
+function renderSearch(r) {
+  const rows2 = r.items.map((i) => ({ kind: i.kind, where: i.path ?? i.title, snippet: i.snippet.replace(/\s+/g, " ").slice(0, 100) }));
+  const lines2 = [table(rows2, ["kind", "where", "snippet"])];
+  const ref = r.index.ref;
+  if (ref) {
+    lines2.push(
+      ref.complete ? `code as of ${ref.name} (${ref.commit_oid.slice(0, 12)}): the index plus the ${ref.searched_files} files it changed` : `incomplete: ${ref.name} changed ${ref.changed_files}${ref.changed_files >= 500 ? "+" : ""} files and ${ref.searched_files} were searched; a missing hit is not proof of absence`
+    );
+  } else if (r.index.commit_oid && !r.index.fresh) lines2.push(`code index is behind the default branch (indexed ${r.index.commit_oid.slice(0, 12)}); catching up`);
+  else if (!r.index.commit_oid && r.index.indexed_at === null) lines2.push("code index not built yet; catching up");
+  if (r.index.truncated) lines2.push("the code index stopped at its size bounds: some files are not searchable");
+  return lines2.join("\n");
+}
+function renderCompare(c8) {
+  const rows2 = c8.files.map((f) => ({ status: f.status, path: f.status === "renamed" ? `${f.old_path} \u2192 ${f.new_path}` : f.new_path ?? f.old_path }));
+  const head = c8.mode === "two-dot" ? `${c8.base_oid.slice(0, 12)}..${c8.head_oid.slice(0, 12)} (trees)` : `${c8.base_oid.slice(0, 12)}...${c8.head_oid.slice(0, 12)} (since merge base ${c8.merge_base_oid?.slice(0, 12) ?? "none: unrelated histories"})`;
+  return [head, table(rows2, ["status", "path"]), ...c8.truncated ? ["(more files changed than listed)"] : []].join("\n");
+}
+function renderRange(r) {
+  const rows2 = r.commits.map((c8) => ({ oid: c8.oid.slice(0, 12), date: c8.committer.date.slice(0, 10), author: c8.author.name, subject: c8.message.split("\n", 1)[0] }));
+  const count = (n) => n === null ? "unknown" : String(n);
+  return [
+    `ahead ${count(r.ahead_by)}, behind ${count(r.behind_by)}`,
+    table(rows2, ["oid", "date", "author", "subject"]),
+    ...r.truncated ? ["(more commits than listed: --limit up to 250)"] : [],
+    ...r.complete ? [] : ["incomplete: the bounded history walk did not finish; counts and the list may be short"]
+  ].join("\n");
+}
+var renderMergeBase = (m) => m.merge_bases.length ? m.merge_bases.join("\n") : m.complete ? "(none: unrelated histories)" : "unknown: the bounded history walk did not finish";
+var renderAncestry = (a) => a.is_ancestor === null ? "unknown: the bounded history walk could not decide (not a no)" : `${a.is_ancestor ? "yes" : "no"}: ${a.ancestor_oid.slice(0, 12)} is ${a.is_ancestor ? "" : "not "}in the history of ${a.descendant_oid.slice(0, 12)}`;
+function renderContaining(r) {
+  const lines2 = r.refs.length ? [...r.refs] : [r.complete ? "(no branch or tag contains it)" : "(none found so far)"];
+  if (r.unknown.length) lines2.push(`not settled (may contain it): ${r.unknown.join(", ")}`);
   return lines2.join("\n");
 }
 function registerOrg(program2, rt) {
@@ -49361,6 +49518,14 @@ function registerOrg(program2, rt) {
       ctx.result(created, (v) => kv(v, ["id", "slug", "name", "created_at"]));
     })
   );
+  org.command("edit [org]").description("Change an organization's settings (organization admins)").option("--actions <on|off>", "turn Actions on or off for every repository of the organization: off starts no runs from pushes, changes or schedules and refuses workflow_dispatch; runs already started go on. A repository can also turn it off for itself (repo edit --actions)").action(
+    act(rt, async (ctx, o, [spec]) => {
+      if (o.actions === void 0) throw usage("nothing to change: pass --actions on|off");
+      if (o.actions !== "on" && o.actions !== "off") throw usage("--actions must be on or off");
+      const updated = await ctx.client("user").orgs.update(spec ?? ctx.org(), { actions_enabled: o.actions === "on" });
+      ctx.result(updated, (v) => kv({ ...v, actions: v.settings.actions_enabled === false ? "off" : "on" }, ["id", "slug", "name", "actions"]));
+    })
+  );
   org.command("list").description("Your personal account and the organizations you belong to").option("--limit <n>", "page size", (v) => parseIntOption(v, "--limit")).option("--cursor <cursor>", "page cursor").action(
     act(rt, async (ctx, o) => {
       const page = await ctx.client("user").orgs.list({ limit: o.limit, cursor: o.cursor });
@@ -49490,13 +49655,93 @@ function registerRepo(program2, rt) {
       ctx.result(await ctx.client("agent").repos.get(await ctx.repoId(spec)), renderRepo2);
     })
   );
-  repo.command("log [repo]").description("First-parent commit history of a ref; with --path, only commits that changed that file or directory (no rename detection)").option("--ref <ref>", "branch, tag or commit (default branch when omitted)").option("--path <path>", "repository-relative file or directory").option("--limit <n>", "page size", (v) => parseIntOption(v, "--limit")).option("--scan-limit <n>", "with --path: commits examined per page (server default 200, max 500)", (v) => parseIntOption(v, "--scan-limit")).option("--cursor <cursor>", "page cursor (resumes a --path walk where it stopped)").action(
+  repo.command("edit [repo]").description("Change a repository's settings (repository admins)").option("--actions <on|off>", "turn Actions on or off: off starts no runs from pushes, changes or schedules and refuses workflow_dispatch; runs already started go on").action(
+    act(rt, async (ctx, o, [spec]) => {
+      if (o.actions === void 0) throw usage("nothing to change: pass --actions on|off");
+      if (o.actions !== "on" && o.actions !== "off") throw usage("--actions must be on or off");
+      const c8 = ctx.client("user");
+      const id2 = await ctx.repoId(spec);
+      const current = await c8.repos.get(id2);
+      ctx.result(await c8.repos.update(id2, { actions_enabled: o.actions === "on", version: current.version }), renderRepo2);
+    })
+  );
+  repo.command("log [repo]").description("First-parent commit history of a ref; with --path, only commits that changed that file or directory (no rename detection); filter like git log with --author, --grep, --since, --until (substring matches) and --all-parents (with --path: git log --full-history)").option("--ref <ref>", "branch, tag or commit (default branch when omitted)").option("--path <path>", "repository-relative file or directory").option("--limit <n>", "page size", (v) => parseIntOption(v, "--limit")).option("--scan-limit <n>", "with --path or a filter: commits examined per page (server default 200, 50 with --all-parents; max 500)", (v) => parseIntOption(v, "--scan-limit")).option("--author <text>", "author name or email contains this (case-insensitive)").option("--grep <text>", "commit message contains this (case-insensitive; not a regular expression)").option("--since <date>", "committed at or after this date (ISO-8601)").option("--until <date>", "committed at or before this date (ISO-8601)").option("--all-parents", "walk merged branches too, not just the first-parent line").option("--cursor <cursor>", "page cursor (resumes a --path walk where it stopped)").action(
     act(rt, async (ctx, o, [spec]) => {
-      if (o.scanLimit !== void 0 && o.path === void 0) throw usage("--scan-limit requires --path");
-      const page = await ctx.client("agent").repos.commits(await ctx.repoId(spec), { ref: o.ref, path: o.path, limit: o.limit, cursor: o.cursor, scan_limit: o.scanLimit });
+      const filtered = o.author !== void 0 || o.grep !== void 0 || o.since !== void 0 || o.until !== void 0 || !!o.allParents;
+      if (o.scanLimit !== void 0 && o.path === void 0 && !filtered) throw usage("--scan-limit requires --path or a filter");
+      const page = await ctx.client("agent").repos.commits(await ctx.repoId(spec), {
+        ref: o.ref,
+        path: o.path,
+        limit: o.limit,
+        cursor: o.cursor,
+        scan_limit: o.scanLimit,
+        author: o.author,
+        grep: o.grep,
+        since: o.since,
+        until: o.until,
+        all_parents: o.allParents || void 0
+      });
       ctx.result(page, renderLog);
     })
   );
+  repo.command("tree [repo]").description("List a directory of a ref without a clone").option("--ref <ref>", "branch, tag or commit (default branch when omitted)").option("--path <path>", "repository-relative directory (root when omitted)").action(
+    act(rt, async (ctx, o, [spec]) => {
+      ctx.result(await ctx.client("agent").repos.tree(await ctx.repoId(spec), { ref: o.ref, path: o.path }), renderTree);
+    })
+  );
+  repo.command("blob <path> [repo]").description("Print a file of a ref without a clone (binary and very large files are described, not printed)").option("--ref <ref>", "branch, tag or commit (default branch when omitted)").action(
+    act(rt, async (ctx, o, [path3, spec]) => {
+      ctx.result(await ctx.client("agent").repos.blob(await ctx.repoId(spec), { ref: o.ref, path: path3 }), renderBlob);
+    })
+  );
+  repo.command("blame <path> [repo]").description("Who last changed each line of a file, without a clone").option("--ref <ref>", "branch, tag or commit (default branch when omitted)").action(
+    act(rt, async (ctx, o, [path3, spec]) => {
+      ctx.result(await ctx.client("agent").repos.blame(await ctx.repoId(spec), { ref: o.ref, path: path3 }), renderBlame);
+    })
+  );
+  repo.command("search <query> [repo]").description("Search code, tasks, changes and comments; with --ref, code as of that branch, tag or commit (says when a ref was searched incompletely)").option("--kind <kind>", "code, task, change or comment").option("--ref <ref>", "search code as of this branch, tag or commit instead of the default branch").action(
+    act(rt, async (ctx, o, [q, spec]) => {
+      if (o.kind !== void 0 && !["code", "task", "change", "comment"].includes(o.kind)) throw usage("--kind must be code, task, change or comment");
+      if (o.ref !== void 0 && o.kind !== void 0 && o.kind !== "code") throw usage("--ref searches code only");
+      ctx.result(await ctx.client("agent").repos.search(await ctx.repoId(spec), { q, kind: o.kind, ref: o.ref }), renderSearch);
+    })
+  );
+  repo.command("compare <base> <head> [repo]").description("Files head changed since its merge base with base (git diff base...head); --two-dot compares the trees; --commits lists the commits in base..head with ahead/behind counts").option("--two-dot", "diff base's tree against head's tree (git diff base head)").option("--commits", "list the commits in base..head instead of the files").option("--limit <n>", "with --commits: commits listed (default 100, max 250)", (v) => parseIntOption(v, "--limit")).action(
+    act(rt, async (ctx, o, [base2, head, spec]) => {
+      if (o.commits && o.twoDot) throw usage("--commits cannot be combined with --two-dot");
+      if (o.limit !== void 0 && !o.commits) throw usage("--limit requires --commits");
+      const c8 = ctx.client("agent");
+      const id2 = await ctx.repoId(spec);
+      if (o.commits) return ctx.result(await c8.repos.compareCommits(id2, { base: base2, head, limit: o.limit }), renderRange);
+      ctx.result(await c8.repos.compare(id2, { base: base2, head, mode: o.twoDot ? "two-dot" : void 0 }), renderCompare);
+    })
+  );
+  repo.command("merge-base <base> <head> [repo]").description("Every best common ancestor of two branches, tags or commits (git merge-base --all), without a clone").action(
+    act(rt, async (ctx, _o, [base2, head, spec]) => {
+      ctx.result(await ctx.client("agent").repos.mergeBase(await ctx.repoId(spec), { base: base2, head }), renderMergeBase);
+    })
+  );
+  repo.command("is-ancestor <ancestor> <descendant> [repo]").description("Whether a commit is in another's history (git merge-base --is-ancestor): yes, no, or unknown when the bounded walk cannot decide").action(
+    act(rt, async (ctx, _o, [ancestor, descendant, spec]) => {
+      ctx.result(await ctx.client("agent").repos.isAncestor(await ctx.repoId(spec), { ancestor, descendant }), renderAncestry);
+    })
+  );
+  repo.command("contains <commit> [repo]").description("Branches and tags whose history contains a commit (git for-each-ref --contains), without a clone").action(
+    act(rt, async (ctx, _o, [commit, spec]) => {
+      ctx.result(await ctx.client("agent").repos.refsContaining(await ctx.repoId(spec), commit), renderContaining);
+    })
+  );
+  repo.command("commit-change <commit> [repo]").description("The change that brought a commit onto each branch it landed on, from Brnch's record of the landing (every merge strategy); ask this instead of searching git log").action(
+    act(rt, async (ctx, _o, [commit, spec]) => {
+      let oid = /^[0-9a-f]{40}$/.test(commit) ? commit : null;
+      if (!oid) {
+        const r = await ctx.deps.gitOutput(["rev-parse", "--verify", "--quiet", `${commit}^{commit}`], ctx.deps.cwd);
+        if (r.code !== 0) throw usage("pass a full 40-character commit id; short ids and revisions like HEAD resolve only inside a clone");
+        oid = r.stdout.trim();
+      }
+      ctx.result(await ctx.client("agent").repos.commitChange(await ctx.repoId(spec), oid), renderCommitChange);
+    })
+  );
   repo.command("clone [repo] [directory]").description("git clone over SSH when this machine is set up for it (`ssh setup`) and the key can be used now, else HTTPS with your login (never written to .git/config); at a terminal without a repository, pick one of yours").option("--ssh", "clone over SSH").option("--https", "clone over HTTPS").action(
     act(rt, async (ctx, o, [spec, dir]) => {
       if (o.ssh && o.https) throw usage("--ssh and --https are mutually exclusive");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brnch-cli",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "Brnch CLI: Git hosting for humans and agents, from the command line",
   "keywords": [
     "git",