toyon 0.21.0 → 0.22.0

package/dist/daemon.js

@@ -1,6 +1,6 @@
 // @bun
 // ../daemon/src/index.ts
-import { rmSync as rmSync9, writeFileSync as writeFileSync14 } from "fs";
+import { rmSync as rmSync10, writeFileSync as writeFileSync14 } from "fs";
 import { homedir as homedir15 } from "os";
 import { dirname as dirname15, join as join36 } from "path";
 import { fileURLToPath } from "url";
@@ -6762,7 +6762,7 @@ ${text.slice(text.length - (CONTEXT_CHARS - HEAD_CHARS))}`;
 }
 
 // ../shared/src/protocol/limits.ts
-var PROTOCOL_VERSION = 142;
+var PROTOCOL_VERSION = 143;
 var PAGE_ERROR_MAX_CHARS = 2000;
 var PAGE_TITLE_MAX_CHARS = 1000;
 var FILE_MAX_CHARS = 5000000;
@@ -7283,7 +7283,7 @@ var clientMsgSchema = discriminatedUnion("t", [
     value: string2().max(100)
   }),
   object({ t: literal("set-keep-awake"), mode: _enum(KEEP_AWAKE_MODES) }),
-  object({ t: literal("install-agent"), agent: id }),
+  object({ t: literal("install-agent"), agent: id, anyway: boolean2().optional() }),
   object({
     t: literal("agent-auth"),
     worktreeId: id,
@@ -8393,7 +8393,8 @@ function viewerOf(path) {
 }
 var RENDERINGS = [
   [/\.(md|markdown)$/i, "markdown"],
-  [/\.html?$/i, "html"]
+  [/\.html?$/i, "html"],
+  [/\.svg$/i, "svg"]
 ];
 function renderedAs(path) {
   return RENDERINGS.find(([re]) => re.test(path))?.[1] ?? null;
@@ -8832,7 +8833,7 @@ async function turnRemoteOff(ts, daemonPort, file, was) {
 // ../daemon/package.json
 var package_default = {
   name: "@toyon/daemon",
-  version: "0.21.0",
+  version: "0.22.0",
   private: true,
   type: "module",
   main: "src/index.ts",
@@ -13927,7 +13928,8 @@ function same(a, b) {
 }
 
 // ../daemon/src/agent/registry.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync10, lstatSync, mkdirSync as mkdirSync6, readFileSync as readFileSync8, rmSync as rmSync3, unlinkSync, writeFileSync as writeFileSync5 } from "fs";
+import { rm, symlink } from "fs/promises";
 import { homedir as homedir3 } from "os";
 import { dirname as dirname3, isAbsolute as isAbsolute2, join as join8, resolve as resolve3 } from "path";
 
@@ -14614,6 +14616,7 @@ function makePaths(home = process.env.TOYON_HOME ?? join5(homedir(), ".toyon"))
     cacheDir: join5(home, "cache.noindex"),
     themesDir: join5(home, "themes"),
     agentsDir: process.env.TOYON_AGENTS_DIR ?? join5(home, "agents"),
+    agentsFrom: process.env.TOYON_AGENTS_FROM || null,
     agentsFile: join5(home, "agents.json"),
     scratchDir: join5(home, "scratch"),
     gitCredentialsFile: join5(home, "git-credentials")
@@ -14964,14 +14967,39 @@ function installErrorLine(stderr) {
   const lines = stderr.split(`
 `).map((l) => l.trim()).filter(Boolean);
   const first = lines.find((l) => l.startsWith("error:"))?.slice("error:".length).trim();
-  const line = first || lines.at(-1) || "no output";
-  if (UNTRUSTED_CA.test(line))
-    return `${line}. A certificate bun does not trust, usually a proxy's: set NODE_EXTRA_CA_CERTS to its file and restart Toyon`;
-  return line;
+  return first || lines.at(-1) || "no output";
+}
+function explainInstallError(line) {
+  if (UNTRUSTED_CA.test(line)) {
+    return {
+      text: `${line}. A certificate bun does not trust, usually a proxy's: set NODE_EXTRA_CA_CERTS to its file and restart Toyon`
+    };
+  }
+  if (AGE_BLOCK.test(line)) {
+    return {
+      text: `${line}. bun's minimumReleaseAge rule in ~/.bunfig.toml holds this version back: wait it out, or install anyway to set the rule aside for this download`,
+      held: true
+    };
+  }
+  return { text: line };
+}
+function mirrorWithout(line) {
+  const m = MIRROR_404.exec(line);
+  return m?.[1] && m[1] !== PUBLIC_REGISTRY_HOST ? m[1] : null;
 }
 var UNTRUSTED_CA = /UNKNOWN_CERTIFICATE_VERIFICATION_ERROR|SELF_SIGNED_CERT|UNABLE_TO_GET_ISSUER_CERT|UNABLE_TO_VERIFY_LEAF_SIGNATURE/;
-var bunInstall = async (dir) => {
-  const r = await run(process.execPath, ["install", "--no-progress", "--no-summary"], dir, { NO_COLOR: "1", FORCE_COLOR: "0" }, { timeoutMs: 30 * 60000 });
+var MIRROR_404 = /^GET https?:\/\/([^/\s]+)\/\S* - 404$/;
+var AGE_BLOCK = /blocked by minimum-release-age/;
+var PUBLIC_REGISTRY_HOST = "registry.npmjs.org";
+var PUBLIC_REGISTRY = `https://${PUBLIC_REGISTRY_HOST}/`;
+function publicRegistryRc(pkg) {
+  const scope = pkg.startsWith("@") ? pkg.slice(0, pkg.indexOf("/")) : null;
+  return `registry=${PUBLIC_REGISTRY}
+${scope ? `${scope}:registry=${PUBLIC_REGISTRY}
+` : ""}`;
+}
+var bunInstall = async (dir, _pkg, _version, opts = {}) => {
+  const r = await run(process.execPath, ["install", "--no-progress", "--no-summary", ...opts.pastAge ? ["--minimum-release-age=0"] : []], dir, { NO_COLOR: "1", FORCE_COLOR: "0" }, { timeoutMs: 30 * 60000 });
   return { ok: r.ok, err: r.ok ? "" : installErrorLine(r.err) };
 };
 var RETRY_AFTER_MS = 30000;
@@ -14994,17 +15022,19 @@ class AgentRegistry {
   host;
   sandbox;
   now;
+  borrowFrom;
   specs = new Map;
   installing = new Map;
   installErrors = new Map;
   failures = new Map;
   onChange = null;
-  constructor(specs, dir, installer = bunInstall, host = hostTraits(), sandbox = { problem: () => null }, now = Date.now) {
+  constructor(specs, dir, installer = bunInstall, host = hostTraits(), sandbox = { problem: () => null }, now = Date.now, borrowFrom = null) {
     this.dir = dir;
     this.installer = installer;
     this.host = host;
     this.sandbox = sandbox;
     this.now = now;
+    this.borrowFrom = borrowFrom;
     for (const s of specs)
       this.specs.set(s.id, s);
   }
@@ -15038,10 +15068,13 @@ class AgentRegistry {
     return null;
   }
   installed(spec) {
+    return this.installedIn(this.dir, spec);
+  }
+  installedIn(base, spec) {
     const name = this.packageName(spec);
     if (!name || spec.run.kind === "command")
       return null;
-    const pkgDir = join8(this.dir, spec.id, "node_modules", name);
+    const pkgDir = join8(base, spec.id, "node_modules", name);
     if (spec.run.kind === "npm-native") {
       const bin = join8(pkgDir, spec.run.bin);
       return existsSync10(bin) ? bin : null;
@@ -15078,10 +15111,13 @@ class AgentRegistry {
     if (this.installing.has(spec.id))
       return { reason: "installing" };
     const failed = this.installErrors.get(spec.id);
-    const missing = failed !== undefined ? failedReason(failed) : spec.onDemand ? "not installed" : "not installed yet";
+    const missing = failed ? failedReason(failed.why) : spec.onDemand ? "not installed" : "not installed yet";
     if (boxed)
-      return { reason: failed !== undefined ? `${missing}; ${boxed}` : boxed };
-    return { reason: missing, install: failed !== undefined ? { failed } : "missing" };
+      return { reason: failed ? `${missing}; ${boxed}` : boxed };
+    return {
+      reason: missing,
+      install: failed ? { failed: failed.why, ...failed.held ? { held: true } : {} } : "missing"
+    };
   }
   command(spec) {
     const why = this.unavailable(spec);
@@ -15099,7 +15135,7 @@ class AgentRegistry {
       return base;
     return confine(base, prepared.bounds, (spec.stateDirs ?? []).map((d) => resolve3(homedir3(), d)));
   }
-  install(id) {
+  install(id, opts = {}) {
     const spec = this.specs.get(id);
     if (!spec)
       throw new UserError(`unknown agent "${id}"`);
@@ -15108,7 +15144,7 @@ class AgentRegistry {
       return Promise.resolve();
     const running = this.installing.get(id);
     if (running)
-      return running;
+      return opts.anyway ? running.then(() => this.install(id, opts)) : running;
     if (this.installed(spec) && this.installedVersion(spec) === spec.run.version) {
       this.installErrors.delete(id);
       this.failures.delete(id);
@@ -15118,20 +15154,47 @@ class AgentRegistry {
     const dir = join8(this.dir, id);
     const p = (async () => {
       try {
+        const borrowed = await this.borrow(spec, version);
+        if (borrowed) {
+          this.installErrors.delete(id);
+          this.failures.delete(id);
+          log.info("agents", `${id} ready, linked from ${borrowed}`);
+          return;
+        }
+        disown(dir);
         mkdirSync6(dir, { recursive: true });
         writeFileSync5(join8(dir, "package.json"), `${JSON.stringify({ name: `toyon-agent-${id}`, private: true, dependencies: { [pkg]: version } }, null, 2)}
 `);
         log.info("agents", `installing ${pkg}@${version} for ${id}`);
-        const r = await this.installer(dir, pkg, version);
+        const rc = join8(dir, ".npmrc");
+        rmSync3(rc, { force: true });
+        const fetch2 = () => this.installer(dir, pkg, version, { pastAge: opts.anyway === true });
+        let r = await fetch2();
+        let why = r.ok ? null : explainInstallError(r.err);
+        const mirror = r.ok ? null : mirrorWithout(r.err);
+        if (mirror) {
+          log.info("agents", `${mirror} does not carry ${pkg}; fetching it from the public registry`);
+          writeFileSync5(rc, publicRegistryRc(pkg));
+          r = await fetch2();
+          if (!r.ok) {
+            rmSync3(rc, { force: true });
+            const again = explainInstallError(r.err);
+            why = {
+              ...again,
+              text: `${mirror} does not carry the package, and from the public registry: ${again.text}`
+            };
+          } else
+            why = null;
+        }
         if (r.ok && this.installed(spec)) {
           this.installErrors.delete(id);
           this.failures.delete(id);
           log.info("agents", `${id} ready`);
           return;
         }
-        this.fail(id, r.err || "no bin after install");
+        this.fail(id, why?.text || "no bin after install", why?.held === true);
       } catch (e) {
-        this.fail(id, e instanceof Error ? e.message : String(e));
+        this.fail(id, e instanceof Error ? e.message : String(e), false);
       }
     })().finally(() => {
       this.installing.delete(id);
@@ -15141,16 +15204,33 @@ class AgentRegistry {
     this.onChange?.();
     return p;
   }
-  fail(id, why) {
-    this.installErrors.set(id, why);
+  async borrow(spec, version) {
+    const from = this.borrowFrom;
+    if (!from || resolve3(from) === resolve3(this.dir))
+      return null;
+    if (!this.installedIn(from, spec) || this.installedVersionIn(from, spec) !== version)
+      return null;
+    const src = join8(from, spec.id);
+    const own = join8(this.dir, spec.id);
+    disown(own);
+    await rm(own, { recursive: true, force: true });
+    mkdirSync6(this.dir, { recursive: true });
+    await symlink(src, own);
+    return src;
+  }
+  fail(id, why, held) {
+    this.installErrors.set(id, { why, held });
     this.failures.set(id, { at: this.now(), retries: this.failures.get(id)?.retries ?? 0 });
     log.warn("agents", `${id}: ${failedReason(why)}`);
   }
   installedVersion(spec) {
+    return this.installedVersionIn(this.dir, spec);
+  }
+  installedVersionIn(base, spec) {
     const name = this.packageName(spec);
     if (!name)
       return null;
-    const pkgJson = join8(this.dir, spec.id, "node_modules", name, "package.json");
+    const pkgJson = join8(base, spec.id, "node_modules", name, "package.json");
     try {
       return JSON.parse(readFileSync8(pkgJson, "utf8")).version ?? null;
     } catch {
@@ -15188,7 +15268,7 @@ class AgentRegistry {
         id: spec.id,
         installed,
         pinned: spec.run.version,
-        ...failed !== undefined ? { error: failedReason(failed) } : {}
+        ...failed ? { error: failedReason(failed.why), ...failed.held ? { held: true } : {} } : {}
       });
     }
     return out;
@@ -15273,9 +15353,13 @@ function managedSpecs(specs, managed) {
   const kept = managed.customAgents ? specs : specs.filter((s) => s.builtin);
   return managed.agents === null ? kept : kept.filter((s) => managed.agents?.includes(s.id));
 }
-function loadAgentRegistry(agentsFile, agentsDir, sandbox, managed = MANAGED_DEFAULTS) {
+function loadAgentRegistry(agentsFile, agentsDir, sandbox, managed = MANAGED_DEFAULTS, agentsFrom = null) {
   const specs = managed.customAgents && existsSync10(agentsFile) ? parseAgentsFile(readFileSync8(agentsFile, "utf8"), BUILTIN_AGENTS) : BUILTIN_AGENTS;
-  return new AgentRegistry(managedSpecs(specs, managed), agentsDir, undefined, undefined, sandbox);
+  return new AgentRegistry(managedSpecs(specs, managed), agentsDir, undefined, undefined, sandbox, undefined, agentsFrom);
+}
+function disown(dir) {
+  if (lstatSync(dir, { throwIfNoEntry: false })?.isSymbolicLink())
+    unlinkSync(dir);
 }
 
 // ../daemon/src/agent/acp/session.ts
@@ -17185,6 +17269,12 @@ var CLAUDE = {
       upstream: "The ACP draft for subagent sessions (agent-client-protocol#1992) is the real shape; the adapter " + "serves it behind the AIR `nativeSubagentSessions` capability only.",
       open: true
     },
+    mcpServerIcon: {
+      gap: "An MCP server's tool arrives under its wire name (`mcp__<server>__<tool>`) with the server repeated " + "as `_meta.claudeCode.mcpServer: { name, source }` and nothing of the server itself: not the `icons` " + "or `websiteUrl` the server sent at MCP initialize (spec 2025-11-25). The adapter forwards the SDK's " + "`mcpServer` whole; the SDK's `mcpServerStatus().serverInfo` is `{ name, version }`, so the icons " + "are dropped inside Claude Code, before the adapter sees them.",
+      here: "agent-tools.ts mcpTool reads the server off the wire name and toolCall.ts draws the cube beside it; " + "the meta's `name` and `source` go unread. No flag.",
+      upstream: "anthropics/claude-code#95558 (open, no maintainer reply; five earlier tickets closed by the stale " + "bot) asks the CLI and Desktop to render `serverInfo.icons`; the SDK host side, `serverInfo` and " + "the per-call `mcpServer` carrying `icons` and `websiteUrl` from the handshake, is toyon's comment " + "there. Then one adapter PR forwards them under the same meta key " + "(the fork can carry it meanwhile), and map.ts passes the icon that matches the theme to the row. " + "A second handshake from toyon or the adapter to fetch them is ruled out: it doubles every " + "connection, OAuth included, for a glyph.",
+      open: true
+    },
     rateLimitMeta: {
       gap: 'The account\'s rate-limit windows ride `usage_update._meta["_claude/rateLimit"]`, a private key.',
       here: "ratelimit.ts reads it. No flag: a key that moves is a parse that returns null.",
@@ -17611,6 +17701,12 @@ class AcpSession {
     this.clearReaper();
     await this.dropConn("restart");
   }
+  async lapse(why) {
+    this.clearReaper();
+    this.cancelAsks("expired");
+    this.stop();
+    await this.dropConn(why);
+  }
   setCommands(next) {
     if (sameCommands(this.commandList, next))
       return;
@@ -17622,7 +17718,7 @@ class AcpSession {
     return this.queue.length;
   }
   get unsettled() {
-    return this.queue.length > 0 || this.steered.length > 0 || this.refused !== null || this.asks.size > 0;
+    return this.queue.length > 0 || this.steered.length > 0 || this.refused !== null;
   }
   get queueItems() {
     return this.waiting().map(queued);
@@ -20108,10 +20204,15 @@ class RuntimeRegistry {
   }
   busy(id) {
     const agent = this.agentFor(id);
-    if (agent && (agent.status !== "idle" || agent.unsettled))
+    if (agent && (agent.status !== "idle" && agent.status !== "waiting" || agent.unsettled))
       return true;
     return this.holdCount(id) > 0;
   }
+  async lapse(id, why) {
+    const agent = this.agentFor(id);
+    if (agent?.status === "waiting")
+      await agent.lapse(why);
+  }
   anyBusy() {
     for (const id of this.runtimes.keys())
       if (this.busy(id))
@@ -21357,7 +21458,7 @@ function transcriptsUnder(dir) {
 }
 
 // ../daemon/src/core/assets.ts
-import { existsSync as existsSync17, readdirSync as readdirSync6, rmSync as rmSync3, statSync as statSync5 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync6, rmSync as rmSync4, statSync as statSync5 } from "fs";
 import { join as join15, resolve as resolve6 } from "path";
 function locateAssets(here, env = process.env) {
   const packaged = existsSync17(join15(here, "shell", "index.html"));
@@ -21395,7 +21496,7 @@ function pruneAssets(shellDist) {
     if (newest - f.mtime <= KEEP_MS)
       continue;
     try {
-      rmSync3(f.path, { recursive: true, force: true });
+      rmSync4(f.path, { recursive: true, force: true });
       gone++;
     } catch {}
   }
@@ -21559,7 +21660,7 @@ class IdlePolicy {
     const signal = await (this.d.memory ?? memoryTight)();
     if (!signal?.tight)
       return;
-    const pick = this.d.state.worktrees.filter((w) => this.candidate(w.id)).sort((a, b) => this.entry(a.id).activeAt - this.entry(b.id).activeAt)[0];
+    const pick = this.d.state.worktrees.filter((w) => this.candidate(w.id) && this.awakeProcs(w.id)).sort((a, b) => this.entry(a.id).activeAt - this.entry(b.id).activeAt)[0];
     if (!pick)
       return;
     log.info("idle", `${signal.why}; ${pick.id} is the least recently used`);
@@ -21607,11 +21708,14 @@ class IdlePolicy {
     const wt = this.d.state.worktree(id);
     if (!wt || this.isViewed(id) || this.busy(id))
       return false;
+    const card = this.d.runtime.agentFor(id)?.status === "waiting";
     const procs = this.d.runtime.get(id)?.procs;
     if (!procs || procs.asleep)
-      return false;
+      return card;
     const states = procs.states();
-    if (states.length === 0 || states.some((s) => s.status === "starting"))
+    if (states.length === 0 && !card)
+      return false;
+    if (states.some((s) => s.status === "starting"))
       return false;
     if (wt.kind === "spare") {
       return !this.d.state.worktrees.some((w) => w.repoId === wt.repoId && w.id !== id && this.busy(w.id));
@@ -21627,6 +21731,10 @@ class IdlePolicy {
   busy(id) {
     return this.d.runtime.busy(id);
   }
+  awakeProcs(id) {
+    const procs = this.d.runtime.get(id)?.procs;
+    return !!procs && !procs.asleep;
+  }
   reconsider(id) {
     if (!this.candidate(id)) {
       this.disarm(id);
@@ -21672,6 +21780,7 @@ class IdlePolicy {
       this.arm(id, this.sleepMs - idle);
       return;
     }
+    fireAndForget(id, this.d.runtime.lapse(id, `nobody answered for ${humanMs(this.sleepMs)}`), "lapse");
     this.sleep(id, `nobody looked for ${humanMs(this.sleepMs)}`);
   }
   sleep(id, why) {
@@ -22202,7 +22311,7 @@ class GrantCodes {
 // ../daemon/src/core/helper.ts
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync19 } from "fs";
-import { chmod, copyFile as copyFile3, mkdir as mkdir2, readFile as readFile3, rm, writeFile as writeFile2 } from "fs/promises";
+import { chmod, copyFile as copyFile3, mkdir as mkdir2, readFile as readFile3, rm as rm2, writeFile as writeFile2 } from "fs/promises";
 import { basename as basename6, dirname as dirname7, join as join17 } from "path";
 var EXECUTABLE = "Toyon";
 function helperWanted(where) {
@@ -22320,7 +22429,7 @@ class Helper {
       }
       await this.run(["iconutil", "-c", "icns", set, "-o", join17(resources, "AppIcon.icns")]);
     }
-    await rm(tmp, { recursive: true, force: true });
+    await rm2(tmp, { recursive: true, force: true });
   }
 }
 
@@ -24461,7 +24570,7 @@ function isFileAt(abs) {
 
 // ../daemon/src/repos/create.ts
 import { existsSync as existsSync24, realpathSync as realpathSync3, statSync as statSync8 } from "fs";
-import { appendFile as appendFile2, mkdir as mkdir3, rm as rm2 } from "fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir3, rm as rm3 } from "fs/promises";
 import { homedir as homedir9 } from "os";
 import { dirname as dirname9, join as join20, resolve as resolve8 } from "path";
 function isInside(dir, parent) {
@@ -24577,14 +24686,14 @@ function cloneError(stderr) {
 }
 async function undoCreate(dir) {
   try {
-    await rm2(dir, { recursive: true, force: true });
+    await rm3(dir, { recursive: true, force: true });
   } catch (e) {
     log.warn(dir, "could not clean up a half-made project", e);
   }
 }
 async function undoInit(dir) {
   try {
-    await rm2(join20(dir, ".git"), { recursive: true, force: true });
+    await rm3(join20(dir, ".git"), { recursive: true, force: true });
   } catch (e) {
     log.warn(dir, "could not take back a half-made .git", e);
   }
@@ -24592,7 +24701,7 @@ async function undoInit(dir) {
 async function unmakeProject(dir, made) {
   const target = made === "folder" ? dir : join20(dir, ".git");
   try {
-    await rm2(target, { recursive: true, force: true });
+    await rm3(target, { recursive: true, force: true });
   } catch (e) {
     throw new UserError(`could not remove ${target}: ${e instanceof Error ? e.message : String(e)}`);
   }
@@ -24652,12 +24761,47 @@ function looksBinary(text) {
 import { spawn as spawn5 } from "child_process";
 import { stat as stat3, unlink } from "fs/promises";
 
+// ../daemon/src/git/forge.ts
+function githubRepoUrl(remoteUrl) {
+  const m = remoteUrl.match(/^git@github\.com:(.+?)(?:\.git)?\/?$/) ?? remoteUrl.match(/^(?:https|ssh):\/\/(?:[^@/]+@)?github\.com\/(.+?)(?:\.git)?\/?$/);
+  return m ? `https://github.com/${m[1]}` : null;
+}
+function prInSubject(subject) {
+  const m = /\(#(\d+)\)\s*$/.exec(subject) ?? /^Merge pull request #(\d+)\b/.exec(subject);
+  return m ? Number(m[1]) : null;
+}
+function commitPage(repoUrl, commit) {
+  const pr = prInSubject(commit.subject);
+  return pr === null ? { url: `${repoUrl}/commit/${commit.sha}` } : { url: `${repoUrl}/pull/${pr}`, pr };
+}
+
 // ../daemon/src/git/blame.ts
 var NONE = { commits: [], lines: [] };
 var UNCOMMITTED = "0".repeat(40);
 async function blameFile(cwd, file, ref) {
-  const r = await gitRaw(cwd, "blame", "--porcelain", ...ref ? [ref] : [], "--", file);
-  return r.ok ? parseBlame(r.out) : NONE;
+  const [r, origin, fetched] = await Promise.all([
+    gitRaw(cwd, "blame", "--porcelain", ...ref ? [ref] : [], "--", file),
+    git(cwd, "remote", "get-url", "origin"),
+    git(cwd, "for-each-ref", "--count=1", "refs/remotes/origin")
+  ]);
+  if (!r.ok)
+    return NONE;
+  const blame = parseBlame(r.out);
+  const repoUrl = origin.ok ? githubRepoUrl(origin.out) : null;
+  if (repoUrl && fetched.ok && fetched.out && blame.commits.length > 0) {
+    const local = await unpushed(cwd, blame.commits.map((c) => c.sha));
+    for (const c of blame.commits)
+      if (!local.has(c.sha))
+        Object.assign(c, commitPage(repoUrl, c));
+  }
+  return blame;
+}
+async function unpushed(cwd, shas) {
+  const r = await git(cwd, "rev-list", ...shas, "--not", "--remotes=origin");
+  if (!r.ok)
+    return new Set(shas);
+  return new Set(r.out.split(`
+`).filter(Boolean));
 }
 function parseBlame(out) {
   const commits = [];
@@ -26094,7 +26238,7 @@ class AfterLand {
 }
 
 // ../daemon/src/repos/registry.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync8, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync27, mkdirSync as mkdirSync8, rmSync as rmSync5, writeFileSync as writeFileSync11 } from "fs";
 import { homedir as homedir10 } from "os";
 import { basename as basename9, dirname as dirname10, join as join24 } from "path";
 
@@ -28304,7 +28448,7 @@ class RepoRegistry {
     const moved = rel !== was && existsSync27(join24(repo.path, was));
     if (moved && !(kind === "local" && await isTracked(repo.path, was))) {
       try {
-        rmSync4(join24(repo.path, was));
+        rmSync5(join24(repo.path, was));
       } catch (e) {
         log.warn(repoId, `could not remove ${was}`, e);
       }
@@ -31320,7 +31464,7 @@ var handlers = {
   "install-agent"(msg, _ctx, s) {
     if (!s.agents.get(msg.agent))
       throw new UserError(`unknown agent "${msg.agent}"`);
-    fireAndForget(msg.agent, s.agents.install(msg.agent), "agent install");
+    fireAndForget(msg.agent, s.agents.install(msg.agent, { anyway: msg.anyway === true }), "agent install");
   },
   async "agent-auth"(msg, _ctx, s) {
     requireRun(s, msg.worktreeId);
@@ -33179,11 +33323,11 @@ class BackendShare {
 // ../daemon/src/worktrees/cache.ts
 import { createHash as createHash4 } from "crypto";
 import { existsSync as existsSync32, readFileSync as readFileSync19 } from "fs";
-import { mkdir as mkdir5, readdir as readdir2, rename, rm as rm4, stat as stat5, utimes, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir5, readdir as readdir2, rename, rm as rm5, stat as stat5, utimes, writeFile as writeFile3 } from "fs/promises";
 import { join as join29 } from "path";
 
 // ../daemon/src/core/clone.ts
-import { mkdir as mkdir4, rm as rm3 } from "fs/promises";
+import { mkdir as mkdir4, rm as rm4 } from "fs/promises";
 import { dirname as dirname12 } from "path";
 async function cloneTree(src, dst) {
   const started = Date.now();
@@ -33200,7 +33344,7 @@ async function cloneTree(src, dst) {
       return { ok: true, how, ms: Date.now() - started };
     error = r.err.split(`
 `)[0] ?? r.err;
-    await rm3(dst, { recursive: true, force: true });
+    await rm4(dst, { recursive: true, force: true });
   }
   return { ok: false, error };
 }
@@ -33356,7 +33500,7 @@ class ArtifactCache {
     } catch (e) {
       log.warn(worktreeId, "cache publish failed", e);
       if (tmp)
-        await rm4(tmp, { recursive: true, force: true });
+        await rm5(tmp, { recursive: true, force: true });
     } finally {
       if (slot)
         this.making.delete(slot);
@@ -33366,7 +33510,7 @@ class ArtifactCache {
   async prune(familyDir) {
     const entries = await listEntries(familyDir);
     for (const e of entries.slice(KEEP_PER_FAMILY))
-      await rm4(e.dir, { recursive: true, force: true });
+      await rm5(e.dir, { recursive: true, force: true });
   }
   async sweep() {
     const root = this.d.paths.cacheDir;
@@ -33379,7 +33523,7 @@ class ArtifactCache {
     for (const repoId of repoIds) {
       const repoDir = join29(root, repoId);
       if (!this.d.state.repo(repoId)) {
-        await rm4(repoDir, { recursive: true, force: true });
+        await rm5(repoDir, { recursive: true, force: true });
         continue;
       }
       let families;
@@ -33398,7 +33542,7 @@ class ArtifactCache {
         }
         for (const n of names)
           if (n.startsWith(TMP))
-            await rm4(join29(familyDir, n), { recursive: true, force: true });
+            await rm5(join29(familyDir, n), { recursive: true, force: true });
         const entries = await listEntries(familyDir);
         let newest = 0;
         for (const e of entries) {
@@ -33407,7 +33551,7 @@ class ArtifactCache {
             newest = Math.max(newest, s.mtimeMs);
         }
         if (Date.now() - newest > STALE_MS)
-          await rm4(familyDir, { recursive: true, force: true });
+          await rm5(familyDir, { recursive: true, force: true });
       }
     }
   }
@@ -35798,12 +35942,12 @@ function rankRefs({ refs, merged, prs, query, defaultBranch, rowIdForPath }) {
 }
 
 // ../daemon/src/worktrees/service.ts
-import { cpSync, existsSync as existsSync37, readFileSync as readFileSync22, rmSync as rmSync8 } from "fs";
-import { rm as rm5 } from "fs/promises";
+import { cpSync, existsSync as existsSync37, readFileSync as readFileSync22, rmSync as rmSync9 } from "fs";
+import { rm as rm6 } from "fs/promises";
 import { dirname as dirname14, join as join35 } from "path";
 
 // ../daemon/src/git/archive.ts
-import { rmSync as rmSync5 } from "fs";
+import { rmSync as rmSync6 } from "fs";
 var archiveRef = (worktreeId) => `refs/toyon/archive/${worktreeId}`;
 var SNAPSHOT_SUBJECT = "toyon: uncommitted work";
 var SNAPSHOT_AUTHOR = "toyon";
@@ -35846,7 +35990,7 @@ async function snapshotCommit(wtPath, head, indexFile) {
     ], wtPath);
     return commit.ok ? commit.out : null;
   } finally {
-    rmSync5(indexFile, { force: true });
+    rmSync6(indexFile, { force: true });
   }
 }
 async function keptAt(repoPath, ref) {
@@ -36418,14 +36562,14 @@ ${r.err}`))
   return { ok: true, message: `PR #${number} merged` };
 }
 function compareUrl(remoteUrl, base, branch) {
-  const m = remoteUrl.match(/^git@github\.com:(.+?)(?:\.git)?$/) ?? remoteUrl.match(/^https:\/\/github\.com\/(.+?)(?:\.git)?$/);
-  if (!m)
+  const repo = githubRepoUrl(remoteUrl);
+  if (!repo)
     return null;
-  return `https://github.com/${m[1]}/compare/${encodeURIComponent(base)}...${encodeURIComponent(branch)}?expand=1`;
+  return `${repo}/compare/${encodeURIComponent(base)}...${encodeURIComponent(branch)}?expand=1`;
 }
 
 // ../daemon/src/git/turn.ts
-import { copyFileSync, existsSync as existsSync34, rmSync as rmSync6 } from "fs";
+import { copyFileSync, existsSync as existsSync34, rmSync as rmSync7 } from "fs";
 import { join as join31 } from "path";
 var turnRef = (worktreeId, which) => `refs/toyon/turns/${worktreeId}/${which}`;
 var SNAPSHOT_SUBJECT2 = "toyon: tree at a send";
@@ -36476,7 +36620,7 @@ async function treeNow(wtPath, head, dirty) {
   const full = async () => (await run(GIT, ["add", "-A"], wtPath, env)).ok ? writeTree() : null;
   let tree = await full();
   if (!tree) {
-    rmSync6(index, { force: true });
+    rmSync7(index, { force: true });
     if (!(await run(GIT, ["read-tree", "HEAD"], wtPath, env)).ok)
       return null;
     tree = await full();
@@ -36549,7 +36693,7 @@ async function dropTurnRefs(repoPath, worktreeId) {
 }
 
 // ../daemon/src/worktrees/archive.ts
-import { existsSync as existsSync35, mkdirSync as mkdirSync9, readdirSync as readdirSync9, readFileSync as readFileSync21, renameSync as renameSync7, rmSync as rmSync7, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync35, mkdirSync as mkdirSync9, readdirSync as readdirSync9, readFileSync as readFileSync21, renameSync as renameSync7, rmSync as rmSync8, writeFileSync as writeFileSync13 } from "fs";
 import { basename as basename12, dirname as dirname13, join as join32 } from "path";
 class WorktreeArchive {
   dir;
@@ -36593,7 +36737,7 @@ class WorktreeArchive {
   delete(id) {
     if (!this.records.has(id))
       return;
-    rmSync7(this.filesOf(id).dir, { recursive: true, force: true });
+    rmSync8(this.filesOf(id).dir, { recursive: true, force: true });
     this.records.delete(id);
   }
   list(repo) {
@@ -36695,7 +36839,7 @@ function move(from, to) {
   if (!existsSync35(from))
     return;
   mkdirSync9(dirname13(to), { recursive: true });
-  rmSync7(to, { recursive: true, force: true });
+  rmSync8(to, { recursive: true, force: true });
   renameSync7(from, to);
 }
 
@@ -37746,7 +37890,7 @@ var BASE_IGNORE = "base .gitignore";
 var REFUSAL_CHARS = 400;
 async function deleteTree(path) {
   try {
-    await rm5(path, { recursive: true, force: true });
+    await rm6(path, { recursive: true, force: true });
     return true;
   } catch (e) {
     log.warn("rm", `could not delete ${path}`, e);
@@ -38316,7 +38460,7 @@ class WorktreeService {
       try {
         await this.removeDirectory(repo, wt);
       } catch (e) {
-        rmSync8(this.plansScratch(wt.id), { recursive: true, force: true });
+        rmSync9(this.plansScratch(wt.id), { recursive: true, force: true });
         throw e;
       }
       if (hasOwnBranch(wt)) {
@@ -38438,8 +38582,8 @@ class WorktreeService {
   deleteChat(worktreeId) {
     const files = this.chatFiles(worktreeId);
     try {
-      rmSync8(files.transcript, { force: true });
-      rmSync8(files.attachments, { recursive: true, force: true });
+      rmSync9(files.transcript, { force: true });
+      rmSync9(files.attachments, { recursive: true, force: true });
     } catch (e) {
       log.warn(worktreeId, "could not delete transcript or attachments", e);
     }
@@ -40062,7 +40206,7 @@ var knocks = new Knocks(hub);
 var origins = new Origins({ setting, port, branded: () => branded });
 var linuxSandbox = new LinuxSandbox;
 await linuxSandbox.refresh();
-var agents = loadAgentRegistry(paths.agentsFile, paths.agentsDir, linuxSandbox, managed.policy);
+var agents = loadAgentRegistry(paths.agentsFile, paths.agentsDir, linuxSandbox, managed.policy, paths.agentsFrom);
 if (state.defaultAgent !== undefined && !agents.get(state.defaultAgent))
   state.clearDefaultAgent();
 var readiness2 = new AgentReadiness({
@@ -40442,7 +40586,7 @@ async function shutdown(signal, opts = {}) {
   const deadline = new Promise((resolve) => setTimeout(resolve, 5000));
   await Promise.race([Promise.all([runtime.shutdown(), exec.stopAll()]), deadline]);
   state.flushGroups();
-  rmSync9(paths.pidFile, { force: true });
+  rmSync10(paths.pidFile, { force: true });
   if (opts.respawn) {
     await Bun.sleep(250);
     log.info("daemon", "starting the replacement");