run402 4.45.0 → 4.45.1

package/git-remote-run402.mjs

@@ -445,6 +445,14 @@ async function main(argv) {
     }
     const refs = state.refs ?? {};
     for (const ref of Object.keys(refs).sort()) out(`${refs[ref]} ${ref}`);
+    // A snapshot-only vault holds protocol refs but no branch heads, so a
+    // plain `git clone` prints "cloned an empty repository" with no hint the
+    // history exists (blind-acceptance finding, 2026-08-28). Say where it is.
+    const refNames = Object.keys(refs);
+    if (refNames.length > 0 && !refNames.some((r) => r.startsWith("refs/heads/"))) {
+      note(`this vault has no branch heads yet — its history lives on ${refNames.sort()[0]}`);
+      note(`fetch it with: git fetch <remote> '+${refNames.sort()[0]}:${refNames.sort()[0]}' && git checkout -b restored ${refNames.sort()[0]}`);
+    }
     const head = state.head_target;
     // A symref is only advertised when its target is actually present:
     // pointing HEAD at a ref that does not exist is what an empty repository

package/lib/repos.mjs

@@ -1253,8 +1253,27 @@ async function snapshot(args) {
     }
     const result = await sdk.gitvault.push(opts);
     if (manifestOutPath != null) writeManifestOut(manifestOutPath, result);
-    printJson(sdk, summarizeSnapshotPayload(result, { verbose, manifestPath: manifestOutPath }));
+    // Snapshot-only vault (no branch head published): a plain `git clone`
+    // of this vault prints "cloned an empty repository" with no hint the
+    // snapshot exists (blind-acceptance finding, 2026-08-28). Name the
+    // restore path in the result itself.
+    const resultRefNames = Object.keys(result.refs ?? {});
+    const snapshotOnly = resultRefNames.length > 0 && !resultRefNames.some((r) => r.startsWith("refs/heads/"));
+    const payload = summarizeSnapshotPayload(result, { verbose, manifestPath: manifestOutPath });
+    if (snapshotOnly) {
+      const snapRef = resultRefNames.sort()[0];
+      payload.next_actions = [
+        ...(payload.next_actions ?? []),
+        {
+          type: "restore_snapshot_ref",
+          command: `git fetch <remote> '+${snapRef}:${snapRef}' && git checkout -b restored ${snapRef}`,
+          why: `This vault has no branch heads — a plain \`git clone\` will report an empty repository. The snapshot history lives on ${snapRef}; \`git push\` a branch to make plain clones work.`,
+        },
+      ];
+    }
+    printJson(sdk, payload);
     console.error(`published generation ${result.generation} (${result.form})`);
+    if (snapshotOnly) console.error(`note: no branch heads in this vault — a plain clone looks empty; snapshot history is on ${resultRefNames.sort()[0]} (see next_actions)`);
     if (result.mirror_push?.outcome === "pushed") {
       console.error(`mirror: pushed generation ${result.generation} (${result.mirror_push.summary?.objects_copied ?? 0} object(s) copied)`);
     } else if (result.mirror_push?.outcome === "failed") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.45.0",
+  "version": "4.45.1",
   "description": "CLI for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
   "type": "module",
   "bin": {