From cc1507a33e0312ce59fffba3541779410295544e Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 18:34:02 +0200
Subject: [PATCH 1/7] fix(web): add repository creation to project settings

- Add repository creation dialog to the project settings repositories tab
- Reuse shared repository API for list/create/delete operations
- Add coverage for the create flow in the settings tab

Quality gates: tsc --noEmit, vitest run src/components/repositories-settings-tab.test.tsx
---
 .../repositories-settings-tab.test.tsx        |  59 ++++++++
 .../components/repositories-settings-tab.tsx  | 126 +++++++++++++++---
 2 files changed, 163 insertions(+), 22 deletions(-)
 create mode 100644 apps/web/src/components/repositories-settings-tab.test.tsx

diff --git a/apps/web/src/components/repositories-settings-tab.test.tsx b/apps/web/src/components/repositories-settings-tab.test.tsx
new file mode 100644
index 0000000..c223e4b
--- /dev/null
+++ b/apps/web/src/components/repositories-settings-tab.test.tsx
@@ -0,0 +1,59 @@
+import { cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { RepositoriesSettingsTab } from "./repositories-settings-tab";
+import * as gitRepositoriesApi from "../api/git_repositories";
+
+const mockRepositories = [
+  {
+    id: "repo-1",
+    name: "Main Repo",
+    path: "/repos/main",
+    project_id: "proj-1",
+    owner_id: "user-1",
+    is_mirror: false,
+    remote_url: null,
+    last_push: null,
+    created_at: null,
+  },
+];
+
+vi.mock("react-router-dom", async () => {
+  const actual = await vi.importActual<typeof import("react-router-dom")>("react-router-dom");
+  return {
+    ...actual,
+    useParams: () => ({ projectId: "proj-1" }),
+  };
+});
+
+afterEach(() => {
+  cleanup();
+  vi.restoreAllMocks();
+});
+
+describe("RepositoriesSettingsTab", () => {
+  it("opens create dialog and submits a repository", async () => {
+    const listMock = vi.spyOn(gitRepositoriesApi, "listRepositories").mockResolvedValue(mockRepositories);
+    const createMock = vi.spyOn(gitRepositoriesApi, "createRepository").mockResolvedValue(mockRepositories[0]);
+
+    render(<RepositoriesSettingsTab />);
+
+    await waitFor(() => {
+      expect(screen.getByText("Main Repo")).toBeInTheDocument();
+    });
+
+    fireEvent.click(screen.getByRole("button", { name: /add repository/i }));
+    fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
+      target: { value: "New Repo" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /create/i }));
+
+    await waitFor(() => {
+      expect(createMock).toHaveBeenCalledWith("proj-1", {
+        name: "New Repo",
+        remote_url: undefined,
+      });
+    });
+    expect(listMock).toHaveBeenCalledTimes(2);
+  });
+});
diff --git a/apps/web/src/components/repositories-settings-tab.tsx b/apps/web/src/components/repositories-settings-tab.tsx
index 3b928de..7ff9a62 100644
--- a/apps/web/src/components/repositories-settings-tab.tsx
+++ b/apps/web/src/components/repositories-settings-tab.tsx
@@ -1,37 +1,77 @@
-import React, { useState, useEffect } from "react";
+import React, { useCallback, useEffect, useState } from "react";
 import { useParams } from "react-router-dom";
-import { apiClient } from "../api/client";
-import { GitRepository } from "../api/git_repositories";
+
+import {
+  createRepository,
+  deleteRepository,
+  listRepositories,
+  type GitRepository,
+  type GitRepositoryCreate,
+} from "../api/git_repositories";
+import { Icon } from "./icon";
 
 export const RepositoriesSettingsTab: React.FC = () => {
   const { projectId } = useParams<{ projectId: string }>();
   const [repositories, setRepositories] = useState<GitRepository[]>([]);
   const [loading, setLoading] = useState(true);
-  const [error, setError] = useState(">");
+  const [showCreate, setShowCreate] = useState(false);
+  const [formName, setFormName] = useState("");
+  const [formRemoteUrl, setFormRemoteUrl] = useState("");
+  const [error, setError] = useState("");
 
-  useEffect(() => {
-    const fetchRepositories = async () => {
-      try {
-        const response = await apiClient.get(
-          `/projects/${projectId}/repositories`
-        );
-        setRepositories(response.data);
-      } catch (err) {
-        setError("Failed to load repositories");
-      } finally {
-        setLoading(false);
-      }
-    };
+  const loadRepositories = useCallback(async () => {
+    if (!projectId) {
+      setLoading(false);
+      return;
+    }
 
-    fetchRepositories();
+    setLoading(true);
+    try {
+      const data = await listRepositories(projectId);
+      setRepositories(data);
+    } catch {
+      setError("Failed to load repositories");
+    } finally {
+      setLoading(false);
+    }
   }, [projectId]);
 
+  useEffect(() => {
+    void loadRepositories();
+  }, [loadRepositories]);
+
+  const handleCreate = async (event: React.FormEvent) => {
+    event.preventDefault();
+    setError("");
+
+    if (!projectId) return;
+    if (!formName.trim()) {
+      setError("Repository name is required");
+      return;
+    }
+
+    try {
+      const input: GitRepositoryCreate = {
+        name: formName.trim(),
+        remote_url: formRemoteUrl.trim() || undefined,
+      };
+      await createRepository(projectId, input);
+      setShowCreate(false);
+      setFormName("");
+      setFormRemoteUrl("");
+      await loadRepositories();
+    } catch {
+      setError("Failed to create repository");
+    }
+  };
+
   const handleDelete = async (repoId: string) => {
+    if (!projectId) return;
     if (!window.confirm("Are you sure you want to delete this repository?")) return;
     try {
-      await apiClient.delete(`/projects/${projectId}/repositories/${repoId}`);
-      setRepositories(repositories.filter((r) => r.id !== repoId));
-    } catch (err) {
+      await deleteRepository(projectId, repoId);
+      setRepositories((current) => current.filter((r) => r.id !== repoId));
+    } catch {
       setError("Failed to delete repository");
     }
   };
@@ -40,7 +80,13 @@ export const RepositoriesSettingsTab: React.FC = () => {
 
   return (
     <div className="repositories-settings-tab">
-      <h2>Repositories</h2>
+      <div className="page-header">
+        <h2>Repositories</h2>
+        <button className="primary-button" onClick={() => setShowCreate(true)} type="button">
+          <Icon name="add" size="sm" />
+          Add Repository
+        </button>
+      </div>
       {error && <div className="error-message">{error}</div>}
 
       <div className="repositories-list">
@@ -66,6 +112,42 @@ export const RepositoriesSettingsTab: React.FC = () => {
           ))
         )}
       </div>
+
+      {showCreate && (
+        <div className="dialog-overlay" role="dialog" aria-modal="true">
+          <div className="dialog">
+            <h3>Add Repository</h3>
+            <form onSubmit={handleCreate} className="stack">
+              <label className="form-field">
+                Name
+                <input
+                  type="text"
+                  value={formName}
+                  onChange={(event) => setFormName(event.target.value)}
+                  placeholder="repository-name"
+                />
+              </label>
+              <label className="form-field">
+                Remote URL (optional)
+                <input
+                  type="text"
+                  value={formRemoteUrl}
+                  onChange={(event) => setFormRemoteUrl(event.target.value)}
+                  placeholder="https://github.com/user/repo.git"
+                />
+              </label>
+              <div className="dialog-actions">
+                <button className="secondary-button" onClick={() => setShowCreate(false)} type="button">
+                  Cancel
+                </button>
+                <button className="primary-button" type="submit">
+                  Create
+                </button>
+              </div>
+            </form>
+          </div>
+        </div>
+      )}
     </div>
   );
 };

From ebfe991a15c344f15afb1ab965b146d8d889efd5 Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 18:38:21 +0200
Subject: [PATCH 2/7] fix(web): support cloning existing repositories

- Make the add repository dialog explicitly support cloning from a remote git server
- Keep blank repo creation as a fallback option
- Add validation and tests for the clone-first flow

Quality gates: tsc --noEmit, vitest run src/components/repositories-settings-tab.test.tsx
---
 .../repositories-settings-tab.test.tsx        | 26 ++++++++++--
 .../components/repositories-settings-tab.tsx  | 41 +++++++++++++++++--
 2 files changed, 60 insertions(+), 7 deletions(-)

diff --git a/apps/web/src/components/repositories-settings-tab.test.tsx b/apps/web/src/components/repositories-settings-tab.test.tsx
index c223e4b..69e5304 100644
--- a/apps/web/src/components/repositories-settings-tab.test.tsx
+++ b/apps/web/src/components/repositories-settings-tab.test.tsx
@@ -32,7 +32,7 @@ afterEach(() => {
 });
 
 describe("RepositoriesSettingsTab", () => {
-  it("opens create dialog and submits a repository", async () => {
+  it("opens create dialog and clones an existing repository", async () => {
     const listMock = vi.spyOn(gitRepositoriesApi, "listRepositories").mockResolvedValue(mockRepositories);
     const createMock = vi.spyOn(gitRepositoriesApi, "createRepository").mockResolvedValue(mockRepositories[0]);
 
@@ -46,14 +46,34 @@ describe("RepositoriesSettingsTab", () => {
     fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
       target: { value: "New Repo" },
     });
-    fireEvent.click(screen.getByRole("button", { name: /create/i }));
+    fireEvent.change(screen.getByPlaceholderText(/github.com\/user\/repo.git/i), {
+      target: { value: "https://github.com/user/repo.git" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /clone repository/i }));
 
     await waitFor(() => {
       expect(createMock).toHaveBeenCalledWith("proj-1", {
         name: "New Repo",
-        remote_url: undefined,
+        remote_url: "https://github.com/user/repo.git",
       });
     });
     expect(listMock).toHaveBeenCalledTimes(2);
   });
+
+  it("shows validation when cloning without a remote url", async () => {
+    vi.spyOn(gitRepositoriesApi, "listRepositories").mockResolvedValue(mockRepositories);
+    render(<RepositoriesSettingsTab />);
+
+    await waitFor(() => {
+      expect(screen.getByText("Main Repo")).toBeInTheDocument();
+    });
+
+    fireEvent.click(screen.getByRole("button", { name: /add repository/i }));
+    fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
+      target: { value: "New Repo" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /clone repository/i }));
+
+    expect(screen.getByText(/remote url is required/i)).toBeInTheDocument();
+  });
 });
diff --git a/apps/web/src/components/repositories-settings-tab.tsx b/apps/web/src/components/repositories-settings-tab.tsx
index 7ff9a62..c7545ee 100644
--- a/apps/web/src/components/repositories-settings-tab.tsx
+++ b/apps/web/src/components/repositories-settings-tab.tsx
@@ -15,6 +15,7 @@ export const RepositoriesSettingsTab: React.FC = () => {
   const [repositories, setRepositories] = useState<GitRepository[]>([]);
   const [loading, setLoading] = useState(true);
   const [showCreate, setShowCreate] = useState(false);
+  const [createMode, setCreateMode] = useState<"clone" | "blank">("clone");
   const [formName, setFormName] = useState("");
   const [formRemoteUrl, setFormRemoteUrl] = useState("");
   const [error, setError] = useState("");
@@ -49,6 +50,10 @@ export const RepositoriesSettingsTab: React.FC = () => {
       setError("Repository name is required");
       return;
     }
+    if (createMode === "clone" && !formRemoteUrl.trim()) {
+      setError("Remote URL is required to clone an existing repository");
+      return;
+    }
 
     try {
       const input: GitRepositoryCreate = {
@@ -57,6 +62,7 @@ export const RepositoriesSettingsTab: React.FC = () => {
       };
       await createRepository(projectId, input);
       setShowCreate(false);
+      setCreateMode("clone");
       setFormName("");
       setFormRemoteUrl("");
       await loadRepositories();
@@ -82,7 +88,11 @@ export const RepositoriesSettingsTab: React.FC = () => {
     <div className="repositories-settings-tab">
       <div className="page-header">
         <h2>Repositories</h2>
-        <button className="primary-button" onClick={() => setShowCreate(true)} type="button">
+        <button
+          className="primary-button"
+          onClick={() => setShowCreate(true)}
+          type="button"
+        >
           <Icon name="add" size="sm" />
           Add Repository
         </button>
@@ -117,9 +127,32 @@ export const RepositoriesSettingsTab: React.FC = () => {
         <div className="dialog-overlay" role="dialog" aria-modal="true">
           <div className="dialog">
             <h3>Add Repository</h3>
+            <p className="muted">
+              Clone an existing repository from a git server, or create a blank bare repo here.
+            </p>
             <form onSubmit={handleCreate} className="stack">
+              <div className="form-field">
+                <label>
+                  <input
+                    type="radio"
+                    name="repository-mode"
+                    checked={createMode === "clone"}
+                    onChange={() => setCreateMode("clone")}
+                  />
+                  Clone existing repository
+                </label>
+                <label>
+                  <input
+                    type="radio"
+                    name="repository-mode"
+                    checked={createMode === "blank"}
+                    onChange={() => setCreateMode("blank")}
+                  />
+                  Create blank repository
+                </label>
+              </div>
               <label className="form-field">
-                Name
+                Repository name
                 <input
                   type="text"
                   value={formName}
@@ -128,7 +161,7 @@ export const RepositoriesSettingsTab: React.FC = () => {
                 />
               </label>
               <label className="form-field">
-                Remote URL (optional)
+                Remote URL {createMode === "clone" ? "(required)" : "(optional)"}
                 <input
                   type="text"
                   value={formRemoteUrl}
@@ -141,7 +174,7 @@ export const RepositoriesSettingsTab: React.FC = () => {
                   Cancel
                 </button>
                 <button className="primary-button" type="submit">
-                  Create
+                  {createMode === "clone" ? "Clone Repository" : "Create Blank Repository"}
                 </button>
               </div>
             </form>

From 5af4de0d7edd6bcae593b5ecc28fefa7c8c91682 Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 18:43:03 +0200
Subject: [PATCH 3/7] refactor(web): reuse repository create dialog

- Extract the repository create dialog into a shared component
- Reuse the same clone/validation flow in project settings and repository management pages
- Keep the shared UI covered with focused tests

Quality gates: tsc --noEmit, vitest run src/components/repositories-settings-tab.test.tsx
---
 .../repositories-settings-tab.test.tsx        |   2 +
 .../components/repositories-settings-tab.tsx  | 105 +-------
 .../components/repository-create-dialog.tsx   | 230 ++++++++++++++++++
 apps/web/src/pages/git-repositories.tsx       | 193 +--------------
 4 files changed, 250 insertions(+), 280 deletions(-)
 create mode 100644 apps/web/src/components/repository-create-dialog.tsx

diff --git a/apps/web/src/components/repositories-settings-tab.test.tsx b/apps/web/src/components/repositories-settings-tab.test.tsx
index 69e5304..eccecc6 100644
--- a/apps/web/src/components/repositories-settings-tab.test.tsx
+++ b/apps/web/src/components/repositories-settings-tab.test.tsx
@@ -46,6 +46,7 @@ describe("RepositoriesSettingsTab", () => {
     fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
       target: { value: "New Repo" },
     });
+    fireEvent.click(screen.getByLabelText(/clone existing repository/i));
     fireEvent.change(screen.getByPlaceholderText(/github.com\/user\/repo.git/i), {
       target: { value: "https://github.com/user/repo.git" },
     });
@@ -72,6 +73,7 @@ describe("RepositoriesSettingsTab", () => {
     fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
       target: { value: "New Repo" },
     });
+    fireEvent.click(screen.getByLabelText(/clone existing repository/i));
     fireEvent.click(screen.getByRole("button", { name: /clone repository/i }));
 
     expect(screen.getByText(/remote url is required/i)).toBeInTheDocument();
diff --git a/apps/web/src/components/repositories-settings-tab.tsx b/apps/web/src/components/repositories-settings-tab.tsx
index c7545ee..af3b315 100644
--- a/apps/web/src/components/repositories-settings-tab.tsx
+++ b/apps/web/src/components/repositories-settings-tab.tsx
@@ -1,13 +1,8 @@
 import React, { useCallback, useEffect, useState } from "react";
 import { useParams } from "react-router-dom";
 
-import {
-  createRepository,
-  deleteRepository,
-  listRepositories,
-  type GitRepository,
-  type GitRepositoryCreate,
-} from "../api/git_repositories";
+import { deleteRepository, listRepositories, type GitRepository } from "../api/git_repositories";
+import { RepositoryCreateDialog } from "./repository-create-dialog";
 import { Icon } from "./icon";
 
 export const RepositoriesSettingsTab: React.FC = () => {
@@ -15,9 +10,6 @@ export const RepositoriesSettingsTab: React.FC = () => {
   const [repositories, setRepositories] = useState<GitRepository[]>([]);
   const [loading, setLoading] = useState(true);
   const [showCreate, setShowCreate] = useState(false);
-  const [createMode, setCreateMode] = useState<"clone" | "blank">("clone");
-  const [formName, setFormName] = useState("");
-  const [formRemoteUrl, setFormRemoteUrl] = useState("");
   const [error, setError] = useState("");
 
   const loadRepositories = useCallback(async () => {
@@ -41,36 +33,6 @@ export const RepositoriesSettingsTab: React.FC = () => {
     void loadRepositories();
   }, [loadRepositories]);
 
-  const handleCreate = async (event: React.FormEvent) => {
-    event.preventDefault();
-    setError("");
-
-    if (!projectId) return;
-    if (!formName.trim()) {
-      setError("Repository name is required");
-      return;
-    }
-    if (createMode === "clone" && !formRemoteUrl.trim()) {
-      setError("Remote URL is required to clone an existing repository");
-      return;
-    }
-
-    try {
-      const input: GitRepositoryCreate = {
-        name: formName.trim(),
-        remote_url: formRemoteUrl.trim() || undefined,
-      };
-      await createRepository(projectId, input);
-      setShowCreate(false);
-      setCreateMode("clone");
-      setFormName("");
-      setFormRemoteUrl("");
-      await loadRepositories();
-    } catch {
-      setError("Failed to create repository");
-    }
-  };
-
   const handleDelete = async (repoId: string) => {
     if (!projectId) return;
     if (!window.confirm("Are you sure you want to delete this repository?")) return;
@@ -124,62 +86,13 @@ export const RepositoriesSettingsTab: React.FC = () => {
       </div>
 
       {showCreate && (
-        <div className="dialog-overlay" role="dialog" aria-modal="true">
-          <div className="dialog">
-            <h3>Add Repository</h3>
-            <p className="muted">
-              Clone an existing repository from a git server, or create a blank bare repo here.
-            </p>
-            <form onSubmit={handleCreate} className="stack">
-              <div className="form-field">
-                <label>
-                  <input
-                    type="radio"
-                    name="repository-mode"
-                    checked={createMode === "clone"}
-                    onChange={() => setCreateMode("clone")}
-                  />
-                  Clone existing repository
-                </label>
-                <label>
-                  <input
-                    type="radio"
-                    name="repository-mode"
-                    checked={createMode === "blank"}
-                    onChange={() => setCreateMode("blank")}
-                  />
-                  Create blank repository
-                </label>
-              </div>
-              <label className="form-field">
-                Repository name
-                <input
-                  type="text"
-                  value={formName}
-                  onChange={(event) => setFormName(event.target.value)}
-                  placeholder="repository-name"
-                />
-              </label>
-              <label className="form-field">
-                Remote URL {createMode === "clone" ? "(required)" : "(optional)"}
-                <input
-                  type="text"
-                  value={formRemoteUrl}
-                  onChange={(event) => setFormRemoteUrl(event.target.value)}
-                  placeholder="https://github.com/user/repo.git"
-                />
-              </label>
-              <div className="dialog-actions">
-                <button className="secondary-button" onClick={() => setShowCreate(false)} type="button">
-                  Cancel
-                </button>
-                <button className="primary-button" type="submit">
-                  {createMode === "clone" ? "Clone Repository" : "Create Blank Repository"}
-                </button>
-              </div>
-            </form>
-          </div>
-        </div>
+        <RepositoryCreateDialog
+          projectId={projectId!}
+          open={showCreate}
+          title="Add Repository"
+          onClose={() => setShowCreate(false)}
+          onCreated={loadRepositories}
+        />
       )}
     </div>
   );
diff --git a/apps/web/src/components/repository-create-dialog.tsx b/apps/web/src/components/repository-create-dialog.tsx
new file mode 100644
index 0000000..5c58521
--- /dev/null
+++ b/apps/web/src/components/repository-create-dialog.tsx
@@ -0,0 +1,230 @@
+import { useEffect, useRef, useState } from "react";
+
+import { createRepository, parseGitUrl, type GitRepositoryCreate, type URLParseResult } from "../api/git_repositories";
+import { Icon } from "./icon";
+
+type CreateMode = "clone" | "blank";
+type UrlValidationStatus = "idle" | "validating" | "valid" | "needs-parsing" | "invalid";
+
+interface RepositoryCreateDialogProps {
+  projectId: string;
+  open: boolean;
+  title: string;
+  onClose: () => void;
+  onCreated: () => Promise<void> | void;
+}
+
+export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCreated }: RepositoryCreateDialogProps) => {
+  const [createMode, setCreateMode] = useState<CreateMode>("clone");
+  const [formName, setFormName] = useState("");
+  const [formRemoteUrl, setFormRemoteUrl] = useState("");
+  const [formError, setFormError] = useState<string | null>(null);
+  const [urlValidation, setUrlValidation] = useState<{
+    status: UrlValidationStatus;
+    result: URLParseResult | null;
+  }>({ status: "idle", result: null });
+  const debounceTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
+
+  useEffect(() => {
+    if (!open && debounceTimer.current) {
+      clearTimeout(debounceTimer.current);
+      debounceTimer.current = null;
+    }
+  }, [open]);
+
+  useEffect(() => {
+    if (!open) return;
+
+    if (debounceTimer.current) {
+      clearTimeout(debounceTimer.current);
+    }
+
+    if (!formRemoteUrl.trim()) {
+      setUrlValidation({ status: "idle", result: null });
+      return;
+    }
+
+    setUrlValidation({ status: "validating", result: null });
+
+    debounceTimer.current = setTimeout(async () => {
+      try {
+        const result = await parseGitUrl(formRemoteUrl.trim());
+        if (result.is_valid_clone_url) {
+          setUrlValidation({ status: "valid", result });
+        } else if (result.needs_parsing) {
+          setUrlValidation({ status: "needs-parsing", result });
+        } else {
+          setUrlValidation({ status: "invalid", result });
+        }
+      } catch {
+        setUrlValidation({ status: "invalid", result: null });
+      }
+    }, 300);
+
+    return () => {
+      if (debounceTimer.current) {
+        clearTimeout(debounceTimer.current);
+      }
+    };
+  }, [formRemoteUrl, open]);
+
+  const resetForm = () => {
+    setCreateMode("clone");
+    setFormName("");
+    setFormRemoteUrl("");
+    setFormError(null);
+    setUrlValidation({ status: "idle", result: null });
+  };
+
+  const handleClose = () => {
+    resetForm();
+    onClose();
+  };
+
+  const handleSubmit = async (event: React.FormEvent) => {
+    event.preventDefault();
+    setFormError(null);
+
+    if (!formName.trim()) {
+      setFormError("Repository name is required");
+      return;
+    }
+
+    if (createMode === "clone" && !formRemoteUrl.trim()) {
+      setFormError("Remote URL is required to clone an existing repository");
+      return;
+    }
+
+    try {
+      const input: GitRepositoryCreate = {
+        name: formName.trim(),
+        remote_url: formRemoteUrl.trim() || undefined,
+      };
+      await createRepository(projectId, input);
+      handleClose();
+      await onCreated();
+    } catch {
+      setFormError("Failed to create repository");
+    }
+  };
+
+  const handleUseSuggestedUrl = () => {
+    if (urlValidation.result?.base_url) {
+      setFormRemoteUrl(urlValidation.result.base_url);
+      setUrlValidation({ status: "idle", result: null });
+      setFormError(null);
+    }
+  };
+
+  const getUrlInputClass = () => {
+    switch (urlValidation.status) {
+      case "valid":
+        return "valid-url";
+      case "needs-parsing":
+        return "needs-parsing-url";
+      case "invalid":
+        return "invalid-url";
+      default:
+        return "";
+    }
+  };
+
+  if (!open) return null;
+
+  return (
+    <div className="dialog-overlay" role="dialog" aria-modal="true">
+      <div className="dialog">
+        <h3>{title}</h3>
+        <p className="muted">
+          Clone an existing repository from a git server, or create a blank bare repo here.
+        </p>
+        <form onSubmit={handleSubmit} className="stack">
+          <div className="form-field">
+            <label>
+              <input
+                type="radio"
+                name="repository-mode"
+                checked={createMode === "clone"}
+                onChange={() => setCreateMode("clone")}
+              />
+              Clone existing repository
+            </label>
+            <label>
+              <input
+                type="radio"
+                name="repository-mode"
+                checked={createMode === "blank"}
+                onChange={() => setCreateMode("blank")}
+              />
+              Create blank repository
+            </label>
+          </div>
+          <label className="form-field">
+            Repository name
+            <input
+              type="text"
+              value={formName}
+              onChange={(event) => setFormName(event.target.value)}
+              placeholder="repository-name"
+            />
+          </label>
+          <label className="form-field">
+            Remote URL {createMode === "clone" ? "(required)" : "(optional)"}
+            <input
+              type="text"
+              value={formRemoteUrl}
+              onChange={(event) => setFormRemoteUrl(event.target.value)}
+              placeholder="https://github.com/user/repo.git"
+              className={getUrlInputClass()}
+            />
+            {urlValidation.status === "validating" && (
+              <span className="validation-status validating">Validating...</span>
+            )}
+            {urlValidation.status === "valid" && (
+              <span className="validation-status valid">
+                <Icon name="success" size="sm" /> Valid git URL
+              </span>
+            )}
+            {urlValidation.status === "needs-parsing" && urlValidation.result && (
+              <div className="url-suggestion">
+                <span className="validation-status warning">
+                  <Icon name="warning" size="sm" /> This looks like a browser URL
+                </span>
+                <div className="suggestion-actions">
+                  <span className="suggested-url">Suggested: {urlValidation.result.base_url}</span>
+                  <button
+                    type="button"
+                    className="secondary-button small"
+                    onClick={handleUseSuggestedUrl}
+                  >
+                    Use Suggested
+                  </button>
+                </div>
+              </div>
+            )}
+            {urlValidation.status === "invalid" && (
+              <span className="validation-status invalid">
+                <Icon name="error" size="sm" /> Invalid URL
+              </span>
+            )}
+          </label>
+          {formError && (
+            <div className="error-message">
+              <p className="error-text">{formError}</p>
+            </div>
+          )}
+          <div className="dialog-actions">
+            <button className="secondary-button" onClick={handleClose} type="button">
+              <Icon name="cancel" size="sm" />
+              Cancel
+            </button>
+            <button className="primary-button" type="submit">
+              <Icon name="add" size="sm" />
+              {createMode === "clone" ? "Clone Repository" : "Create Blank Repository"}
+            </button>
+          </div>
+        </form>
+      </div>
+    </div>
+  );
+};
diff --git a/apps/web/src/pages/git-repositories.tsx b/apps/web/src/pages/git-repositories.tsx
index 45ddc80..1ad2c4e 100644
--- a/apps/web/src/pages/git-repositories.tsx
+++ b/apps/web/src/pages/git-repositories.tsx
@@ -1,19 +1,15 @@
-import { useCallback, useEffect, useRef, useState } from "react";
+import { useCallback, useEffect, useState } from "react";
 import { useNavigate, useParams } from "react-router-dom";
 
 import {
-  createRepository,
   deleteRepository,
   listRepositories,
-  parseGitUrl,
-  type GitRepositoryCreate,
-  type URLParseResult,
 } from "../api/git_repositories";
 import type { GitRepository } from "../api/git_repositories";
 import { Icon } from "../components/icon";
+import { RepositoryCreateDialog } from "../components/repository-create-dialog";
 
 type RepoStatus = "loading" | "ready" | "error";
-type UrlValidationStatus = "idle" | "validating" | "valid" | "needs-parsing" | "invalid";
 
 export const GitRepositoriesPage = () => {
   const { projectId } = useParams<{ projectId: string }>();
@@ -21,19 +17,8 @@ export const GitRepositoriesPage = () => {
   const [status, setStatus] = useState<RepoStatus>("loading");
   const [repositories, setRepositories] = useState<GitRepository[]>([]);
   const [showCreate, setShowCreate] = useState(false);
-  const [formName, setFormName] = useState("");
-  const [formRemoteUrl, setFormRemoteUrl] = useState("");
-  const [formError, setFormError] = useState<string | null>(null);
   const [deleteConfirmId, setDeleteConfirmId] = useState<string | null>(null);
 
-  // URL validation state
-  const [urlValidation, setUrlValidation] = useState<{
-    status: UrlValidationStatus;
-    result: URLParseResult | null;
-  }>({ status: "idle", result: null });
-
-  const debounceTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
-
   const loadRepositories = useCallback(async () => {
     if (!projectId) return;
     setStatus("loading");
@@ -51,98 +36,6 @@ export const GitRepositoriesPage = () => {
     void loadRepositories();
   }, [loadRepositories]);
 
-  // Validate URL with debounce
-  useEffect(() => {
-    if (debounceTimer.current) {
-      clearTimeout(debounceTimer.current);
-    }
-
-    if (!formRemoteUrl.trim()) {
-      setUrlValidation({ status: "idle", result: null });
-      return;
-    }
-
-    setUrlValidation({ status: "validating", result: null });
-
-    debounceTimer.current = setTimeout(async () => {
-      try {
-        const result = await parseGitUrl(formRemoteUrl.trim());
-        if (result.is_valid_clone_url) {
-          setUrlValidation({ status: "valid", result });
-        } else if (result.needs_parsing) {
-          setUrlValidation({ status: "needs-parsing", result });
-        } else {
-          setUrlValidation({ status: "invalid", result });
-        }
-      } catch {
-        setUrlValidation({ status: "invalid", result: null });
-      }
-    }, 300);
-
-    return () => {
-      if (debounceTimer.current) {
-        clearTimeout(debounceTimer.current);
-      }
-    };
-  }, [formRemoteUrl]);
-
-  const getUrlInputClass = () => {
-    switch (urlValidation.status) {
-      case "valid":
-        return "valid-url";
-      case "needs-parsing":
-        return "needs-parsing-url";
-      case "invalid":
-        return "invalid-url";
-      default:
-        return "";
-    }
-  };
-
-  const handleSubmit = async (e: React.FormEvent) => {
-    e.preventDefault();
-    setFormError(null);
-
-    if (!formName.trim()) {
-      setFormError("Repository name is required");
-      return;
-    }
-
-    if (!projectId) return;
-
-    try {
-      const input: GitRepositoryCreate = {
-        name: formName.trim(),
-        remote_url: formRemoteUrl.trim() || undefined,
-      };
-      await createRepository(projectId, input);
-      setShowCreate(false);
-      setFormName("");
-      setFormRemoteUrl("");
-      setUrlValidation({ status: "idle", result: null });
-      await loadRepositories();
-    } catch (err: unknown) {
-      const axiosError = err as { response?: { status: number; data: { detail: { suggested_url: string; message: string } } } };
-      if (axiosError.response?.status === 422 && axiosError.response?.data?.detail?.suggested_url) {
-        // Show URL correction suggestion
-        const detail = axiosError.response.data.detail;
-        setFormError(
-          `${detail.message}\nSuggested: ${detail.suggested_url}`
-        );
-      } else {
-        setFormError("Failed to create repository");
-      }
-    }
-  };
-
-  const handleUseSuggestedUrl = () => {
-    if (urlValidation.result?.base_url) {
-      setFormRemoteUrl(urlValidation.result.base_url);
-      setUrlValidation({ status: "idle", result: null });
-      setFormError(null);
-    }
-  };
-
   const handleDelete = async (repoId: string) => {
     if (!projectId) return;
     try {
@@ -233,81 +126,13 @@ export const GitRepositoriesPage = () => {
       )}
 
       {showCreate && (
-        <div className="dialog-overlay" role="dialog" aria-modal="true">
-          <div className="dialog">
-            <h2>Create Repository</h2>
-            <form onSubmit={handleSubmit} className="stack">
-              <label className="form-field">
-                Name
-                <input
-                  type="text"
-                  value={formName}
-                  onChange={(e) => setFormName(e.target.value)}
-                  placeholder="repository-name"
-                />
-              </label>
-              <label className="form-field">
-                Remote URL (optional)
-                <input
-                  type="text"
-                  value={formRemoteUrl}
-                  onChange={(e) => setFormRemoteUrl(e.target.value)}
-                  placeholder="https://github.com/user/repo.git"
-                  className={getUrlInputClass()}
-                />
-                {urlValidation.status === "validating" && (
-                  <span className="validation-status validating">Validating...</span>
-                )}
-                {urlValidation.status === "valid" && (
-                  <span className="validation-status valid">
-                    <Icon name="success" size="sm" /> Valid git URL
-                  </span>
-                )}
-                {urlValidation.status === "needs-parsing" && urlValidation.result && (
-                  <div className="url-suggestion">
-                    <span className="validation-status warning">
-                      <Icon name="warning" size="sm" /> This looks like a browser URL
-                    </span>
-                    <div className="suggestion-actions">
-                      <span className="suggested-url">
-                        Suggested: {urlValidation.result.base_url}
-                      </span>
-                      <button
-                        type="button"
-                        className="secondary-button small"
-                        onClick={handleUseSuggestedUrl}
-                      >
-                        Use Suggested
-                      </button>
-                    </div>
-                  </div>
-                )}
-                {urlValidation.status === "invalid" && (
-                  <span className="validation-status invalid">
-                    <Icon name="error" size="sm" /> Invalid URL
-                  </span>
-                )}
-              </label>
-              {formError && (
-                <div className="error-message">
-                  {formError.split("\n").map((line, i) => (
-                    <p key={i} className="error-text">{line}</p>
-                  ))}
-                </div>
-              )}
-              <div className="dialog-actions">
-                <button className="secondary-button" onClick={() => setShowCreate(false)} type="button">
-                  <Icon name="cancel" size="sm" />
-                  Cancel
-                </button>
-                <button className="primary-button" type="submit">
-                  <Icon name="add" size="sm" />
-                  Create
-                </button>
-              </div>
-            </form>
-          </div>
-        </div>
+        <RepositoryCreateDialog
+          projectId={projectId!}
+          open={showCreate}
+          title="Create Repository"
+          onClose={() => setShowCreate(false)}
+          onCreated={loadRepositories}
+        />
       )}
     </section>
   );

From 2525c584718df33f0a08502c838149b20276ad3e Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 19:07:04 +0200
Subject: [PATCH 4/7] feat(web): support ssh owner repo clone flow

- Add SSH-only owner/repo clone path for git.commumedia.org
- Preflight remote repository existence with git ls-remote before cloning
- Keep advanced URL paste fallback and blank repository creation
- Add focused backend and frontend coverage plus docs updates

Quality gates: python -m py_compile, vitest run src/components/repositories-settings-tab.test.tsx, npm run typecheck
---
 apps/api/src/api/git_repositories.py          |  29 +++
 .../test_git_repository_clone_preflight.py    |  28 +++
 .../repositories-settings-tab.test.tsx        |  41 ++++-
 .../components/repository-create-dialog.tsx   | 169 ++++++++++++------
 docs/features/repositories.md                 |  12 +-
 .../git-repo-ssh-clone-check/.openspec.yaml   |   2 +
 .../git-repo-ssh-clone-check/design.md        |  45 +++++
 .../git-repo-ssh-clone-check/proposal.md      |  25 +++
 .../changes/git-repo-ssh-clone-check/tasks.md |  22 +++
 9 files changed, 310 insertions(+), 63 deletions(-)
 create mode 100644 apps/api/tests/unit/test_git_repository_clone_preflight.py
 create mode 100644 openspec/changes/git-repo-ssh-clone-check/.openspec.yaml
 create mode 100644 openspec/changes/git-repo-ssh-clone-check/design.md
 create mode 100644 openspec/changes/git-repo-ssh-clone-check/proposal.md
 create mode 100644 openspec/changes/git-repo-ssh-clone-check/tasks.md

diff --git a/apps/api/src/api/git_repositories.py b/apps/api/src/api/git_repositories.py
index 4d04789..b00a20d 100644
--- a/apps/api/src/api/git_repositories.py
+++ b/apps/api/src/api/git_repositories.py
@@ -89,6 +89,32 @@ def _get_repo_path(user_id: uuid.UUID, project_id: uuid.UUID, name: str) -> str:
     return os.path.join(base, str(user_id), str(project_id), f"{name}.git")
 
 
+def _build_provider_clone_url(owner: str, repo: str) -> str:
+    """Build the SSH clone URL for the fixed git provider."""
+    return f"git@git.commumedia.org:{owner}/{repo}.git"
+
+
+def _preflight_remote_repository(remote_url: str) -> None:
+    """Verify a remote repository is reachable before cloning."""
+    try:
+        result = subprocess.run(
+            ["git", "ls-remote", remote_url],
+            capture_output=True,
+            text=True,
+            timeout=60,
+        )
+    except subprocess.TimeoutExpired:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="remote repository check timed out")
+    except FileNotFoundError:
+        raise HTTPException(status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail="git command not found")
+
+    if result.returncode != 0:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="repository not found or inaccessible",
+        )
+
+
 class GitRepositoryCreate(BaseModel):
     name: str
     remote_url: str | None = None
@@ -267,6 +293,9 @@ async def create_repository(
         if parse_result["base_url"]:
             remote_url = parse_result["base_url"]
 
+    if remote_url:
+        _preflight_remote_repository(remote_url)
+
     repo_path = _get_repo_path(user_id, project_id, data.name)
 
     # Ensure parent directory exists
diff --git a/apps/api/tests/unit/test_git_repository_clone_preflight.py b/apps/api/tests/unit/test_git_repository_clone_preflight.py
new file mode 100644
index 0000000..5381879
--- /dev/null
+++ b/apps/api/tests/unit/test_git_repository_clone_preflight.py
@@ -0,0 +1,28 @@
+from unittest.mock import Mock, patch
+
+import pytest
+from fastapi import HTTPException
+
+from src.api.git_repositories import _build_provider_clone_url, _preflight_remote_repository
+
+
+def test_build_provider_clone_url_uses_fixed_host() -> None:
+    assert _build_provider_clone_url("alice", "demo") == "git@git.commumedia.org:alice/demo.git"
+
+
+def test_preflight_remote_repository_allows_accessible_repo() -> None:
+    completed = Mock(returncode=0)
+    with patch("src.api.git_repositories.subprocess.run", return_value=completed) as run_mock:
+        _preflight_remote_repository("git@git.commumedia.org:alice/demo.git")
+
+    run_mock.assert_called_once()
+
+
+def test_preflight_remote_repository_rejects_missing_repo() -> None:
+    completed = Mock(returncode=128)
+    with patch("src.api.git_repositories.subprocess.run", return_value=completed):
+        with pytest.raises(HTTPException) as exc_info:
+            _preflight_remote_repository("git@git.commumedia.org:alice/missing.git")
+
+    assert exc_info.value.status_code == 400
+    assert exc_info.value.detail == "repository not found or inaccessible"
diff --git a/apps/web/src/components/repositories-settings-tab.test.tsx b/apps/web/src/components/repositories-settings-tab.test.tsx
index eccecc6..54bbf56 100644
--- a/apps/web/src/components/repositories-settings-tab.test.tsx
+++ b/apps/web/src/components/repositories-settings-tab.test.tsx
@@ -46,8 +46,39 @@ describe("RepositoriesSettingsTab", () => {
     fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
       target: { value: "New Repo" },
     });
-    fireEvent.click(screen.getByLabelText(/clone existing repository/i));
-    fireEvent.change(screen.getByPlaceholderText(/github.com\/user\/repo.git/i), {
+    fireEvent.change(screen.getByPlaceholderText(/owner/i), {
+      target: { value: "alice" },
+    });
+    fireEvent.change(screen.getByPlaceholderText(/repo-name/i), {
+      target: { value: "demo" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /clone repository/i }));
+
+    await waitFor(() => {
+      expect(createMock).toHaveBeenCalledWith("proj-1", {
+        name: "New Repo",
+        remote_url: "git@git.commumedia.org:alice/demo.git",
+      });
+    });
+    expect(listMock).toHaveBeenCalledTimes(2);
+  });
+
+  it("uses advanced url fallback when requested", async () => {
+    const listMock = vi.spyOn(gitRepositoriesApi, "listRepositories").mockResolvedValue(mockRepositories);
+    const createMock = vi.spyOn(gitRepositoriesApi, "createRepository").mockResolvedValue(mockRepositories[0]);
+
+    render(<RepositoriesSettingsTab />);
+
+    await waitFor(() => {
+      expect(screen.getByText("Main Repo")).toBeInTheDocument();
+    });
+
+    fireEvent.click(screen.getByRole("button", { name: /add repository/i }));
+    fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
+      target: { value: "New Repo" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /use full url instead/i }));
+    fireEvent.change(screen.getByPlaceholderText(/https:\/\/github.com\/user\/repo.git/i), {
       target: { value: "https://github.com/user/repo.git" },
     });
     fireEvent.click(screen.getByRole("button", { name: /clone repository/i }));
@@ -73,9 +104,11 @@ describe("RepositoriesSettingsTab", () => {
     fireEvent.change(screen.getByPlaceholderText(/repository-name/i), {
       target: { value: "New Repo" },
     });
-    fireEvent.click(screen.getByLabelText(/clone existing repository/i));
+    fireEvent.change(screen.getByPlaceholderText(/owner/i), {
+      target: { value: "" },
+    });
     fireEvent.click(screen.getByRole("button", { name: /clone repository/i }));
 
-    expect(screen.getByText(/remote url is required/i)).toBeInTheDocument();
+    expect(screen.getByText(/owner and repository name are required/i)).toBeInTheDocument();
   });
 });
diff --git a/apps/web/src/components/repository-create-dialog.tsx b/apps/web/src/components/repository-create-dialog.tsx
index 5c58521..dda7269 100644
--- a/apps/web/src/components/repository-create-dialog.tsx
+++ b/apps/web/src/components/repository-create-dialog.tsx
@@ -17,7 +17,10 @@ interface RepositoryCreateDialogProps {
 export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCreated }: RepositoryCreateDialogProps) => {
   const [createMode, setCreateMode] = useState<CreateMode>("clone");
   const [formName, setFormName] = useState("");
-  const [formRemoteUrl, setFormRemoteUrl] = useState("");
+  const [owner, setOwner] = useState("");
+  const [repoName, setRepoName] = useState("");
+  const [advancedUrl, setAdvancedUrl] = useState("");
+  const [useAdvancedUrl, setUseAdvancedUrl] = useState(false);
   const [formError, setFormError] = useState<string | null>(null);
   const [urlValidation, setUrlValidation] = useState<{
     status: UrlValidationStatus;
@@ -34,12 +37,16 @@ export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCrea
 
   useEffect(() => {
     if (!open) return;
+    if (!useAdvancedUrl) {
+      setUrlValidation({ status: "idle", result: null });
+      return;
+    }
 
     if (debounceTimer.current) {
       clearTimeout(debounceTimer.current);
     }
 
-    if (!formRemoteUrl.trim()) {
+    if (!advancedUrl.trim()) {
       setUrlValidation({ status: "idle", result: null });
       return;
     }
@@ -48,7 +55,7 @@ export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCrea
 
     debounceTimer.current = setTimeout(async () => {
       try {
-        const result = await parseGitUrl(formRemoteUrl.trim());
+        const result = await parseGitUrl(advancedUrl.trim());
         if (result.is_valid_clone_url) {
           setUrlValidation({ status: "valid", result });
         } else if (result.needs_parsing) {
@@ -66,12 +73,15 @@ export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCrea
         clearTimeout(debounceTimer.current);
       }
     };
-  }, [formRemoteUrl, open]);
+  }, [advancedUrl, open, useAdvancedUrl]);
 
   const resetForm = () => {
     setCreateMode("clone");
     setFormName("");
-    setFormRemoteUrl("");
+    setOwner("");
+    setRepoName("");
+    setAdvancedUrl("");
+    setUseAdvancedUrl(false);
     setFormError(null);
     setUrlValidation({ status: "idle", result: null });
   };
@@ -90,27 +100,41 @@ export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCrea
       return;
     }
 
-    if (createMode === "clone" && !formRemoteUrl.trim()) {
-      setFormError("Remote URL is required to clone an existing repository");
-      return;
-    }
-
     try {
       const input: GitRepositoryCreate = {
         name: formName.trim(),
-        remote_url: formRemoteUrl.trim() || undefined,
+        remote_url: undefined,
       };
+
+      if (createMode === "clone") {
+        if (useAdvancedUrl) {
+          if (!advancedUrl.trim()) {
+            setFormError("Remote URL is required for advanced cloning");
+            return;
+          }
+          input.remote_url = advancedUrl.trim();
+        } else {
+          if (!owner.trim() || !repoName.trim()) {
+            setFormError("Owner and repository name are required");
+            return;
+          }
+          input.remote_url = `git@git.commumedia.org:${owner.trim()}/${repoName.trim()}.git`;
+        }
+      }
+
       await createRepository(projectId, input);
       handleClose();
       await onCreated();
-    } catch {
-      setFormError("Failed to create repository");
+    } catch (error: unknown) {
+      const response = error as { response?: { data?: { detail?: string } } };
+      const detail = response.response?.data?.detail;
+      setFormError(typeof detail === "string" ? detail : "Failed to create repository");
     }
   };
 
   const handleUseSuggestedUrl = () => {
     if (urlValidation.result?.base_url) {
-      setFormRemoteUrl(urlValidation.result.base_url);
+      setAdvancedUrl(urlValidation.result.base_url);
       setUrlValidation({ status: "idle", result: null });
       setFormError(null);
     }
@@ -136,7 +160,7 @@ export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCrea
       <div className="dialog">
         <h3>{title}</h3>
         <p className="muted">
-          Clone an existing repository from a git server, or create a blank bare repo here.
+          Clone an existing repository from git.commumedia.org, or create a blank bare repo here.
         </p>
         <form onSubmit={handleSubmit} className="stack">
           <div className="form-field">
@@ -168,46 +192,85 @@ export const RepositoryCreateDialog = ({ projectId, open, title, onClose, onCrea
               placeholder="repository-name"
             />
           </label>
-          <label className="form-field">
-            Remote URL {createMode === "clone" ? "(required)" : "(optional)"}
-            <input
-              type="text"
-              value={formRemoteUrl}
-              onChange={(event) => setFormRemoteUrl(event.target.value)}
-              placeholder="https://github.com/user/repo.git"
-              className={getUrlInputClass()}
-            />
-            {urlValidation.status === "validating" && (
-              <span className="validation-status validating">Validating...</span>
-            )}
-            {urlValidation.status === "valid" && (
-              <span className="validation-status valid">
-                <Icon name="success" size="sm" /> Valid git URL
-              </span>
-            )}
-            {urlValidation.status === "needs-parsing" && urlValidation.result && (
-              <div className="url-suggestion">
-                <span className="validation-status warning">
-                  <Icon name="warning" size="sm" /> This looks like a browser URL
+          {createMode === "clone" && !useAdvancedUrl && (
+            <>
+              <label className="form-field">
+                Owner
+                <input
+                  type="text"
+                  value={owner}
+                  onChange={(event) => setOwner(event.target.value)}
+                  placeholder="owner"
+                />
+              </label>
+              <label className="form-field">
+                Repository
+                <input
+                  type="text"
+                  value={repoName}
+                  onChange={(event) => setRepoName(event.target.value)}
+                  placeholder="repo-name"
+                />
+              </label>
+              <p className="muted">SSH target: git@git.commumedia.org:{owner || "owner"}/{repoName || "repo"}.git</p>
+              <button
+                type="button"
+                className="secondary-button small"
+                onClick={() => setUseAdvancedUrl(true)}
+              >
+                Use full URL instead
+              </button>
+            </>
+          )}
+          {createMode === "clone" && useAdvancedUrl && (
+            <label className="form-field">
+              Remote URL
+              <input
+                type="text"
+                value={advancedUrl}
+                onChange={(event) => setAdvancedUrl(event.target.value)}
+                placeholder="https://github.com/user/repo.git"
+                className={getUrlInputClass()}
+              />
+              {urlValidation.status === "validating" && (
+                <span className="validation-status validating">Validating...</span>
+              )}
+              {urlValidation.status === "valid" && (
+                <span className="validation-status valid">
+                  <Icon name="success" size="sm" /> Valid git URL
                 </span>
-                <div className="suggestion-actions">
-                  <span className="suggested-url">Suggested: {urlValidation.result.base_url}</span>
-                  <button
-                    type="button"
-                    className="secondary-button small"
-                    onClick={handleUseSuggestedUrl}
-                  >
-                    Use Suggested
-                  </button>
+              )}
+              {urlValidation.status === "needs-parsing" && urlValidation.result && (
+                <div className="url-suggestion">
+                  <span className="validation-status warning">
+                    <Icon name="warning" size="sm" /> This looks like a browser URL
+                  </span>
+                  <div className="suggestion-actions">
+                    <span className="suggested-url">Suggested: {urlValidation.result.base_url}</span>
+                    <button
+                      type="button"
+                      className="secondary-button small"
+                      onClick={handleUseSuggestedUrl}
+                    >
+                      Use Suggested
+                    </button>
+                  </div>
                 </div>
-              </div>
-            )}
-            {urlValidation.status === "invalid" && (
-              <span className="validation-status invalid">
-                <Icon name="error" size="sm" /> Invalid URL
-              </span>
-            )}
-          </label>
+              )}
+              {urlValidation.status === "invalid" && (
+                <span className="validation-status invalid">
+                  <Icon name="error" size="sm" /> Invalid URL
+                </span>
+              )}
+              <button
+                type="button"
+                className="secondary-button small"
+                onClick={() => setUseAdvancedUrl(false)}
+              >
+                Use owner/repo instead
+              </button>
+            </label>
+          )}
           {formError && (
             <div className="error-message">
               <p className="error-text">{formError}</p>
diff --git a/docs/features/repositories.md b/docs/features/repositories.md
index 216bcea..a338ffd 100644
--- a/docs/features/repositories.md
+++ b/docs/features/repositories.md
@@ -12,7 +12,7 @@ Git repositories are managed within projects. You can create bare repositories f
 2. Click the **"New Repository"** button
 3. Fill in the form:
    - **Name**: Repository name (required)
-   - **Remote URL**: For cloning (optional)
+   - **Owner** and **Repository**: For SSH cloning from `git.commumedia.org`
    - **Mirror Clone**: Toggle for mirror clones
 4. Click **"Create Repository"**
 
@@ -25,12 +25,12 @@ Creates a new bare git repository. Use this for:
 
 #### Clone from Remote
 
-Enter a git URL to clone from:
-- `https://github.com/user/repo.git`
-- `git@github.com:user/repo.git`
-- `https://gitlab.com/user/repo.git`
+Enter the repository owner and name to clone from `git.commumedia.org` over SSH:
+- `owner`: `alice`
+- `repository`: `demo`
+- Resulting SSH URL: `git@git.commumedia.org:alice/demo.git`
 
-**Smart URL Parsing:** If you paste a browser URL (like `https://github.com/user/repo/tree/main`), the system will automatically suggest the correct git URL.
+**Advanced fallback:** If needed, you can still paste a full git URL and the system will suggest the correct clone URL.
 
 #### Mirror Clone
 
diff --git a/openspec/changes/git-repo-ssh-clone-check/.openspec.yaml b/openspec/changes/git-repo-ssh-clone-check/.openspec.yaml
new file mode 100644
index 0000000..4a1c677
--- /dev/null
+++ b/openspec/changes/git-repo-ssh-clone-check/.openspec.yaml
@@ -0,0 +1,2 @@
+schema: spec-driven
+created: 2026-05-22
diff --git a/openspec/changes/git-repo-ssh-clone-check/design.md b/openspec/changes/git-repo-ssh-clone-check/design.md
new file mode 100644
index 0000000..5829d65
--- /dev/null
+++ b/openspec/changes/git-repo-ssh-clone-check/design.md
@@ -0,0 +1,45 @@
+## Context
+
+The current repository creation flow already supports cloning remote repositories via `remote_url` and can normalize pasted browser URLs. However, the UI asks for a full URL, which is awkward for the fixed provider `git.commumedia.org`. The requested behavior is to enter `owner` and `repo`, check whether the repository exists, and clone only if it does.
+
+## Goals / Non-Goals
+
+**Goals:**
+- Accept SSH-only `owner` and `repo` inputs for cloning from `git.commumedia.org`
+- Verify repository existence before clone
+- Preserve full URL paste as a fallback path
+- Preserve blank repository creation
+- Reuse the existing repository create endpoint and shared dialog
+
+**Non-Goals:**
+- Supporting multiple git providers
+- Adding a remote repository discovery API
+- Supporting HTTPS clone flow for the new structured path
+- Changing repository storage or clone behavior beyond preflight validation
+
+## Decisions
+
+**1. Provider assumption**
+- Hardcode `git.commumedia.org` for the structured clone path
+- Build SSH URLs as `git@git.commumedia.org:{owner}/{repo}.git`
+
+**2. Existence check**
+- Use `git ls-remote` on the constructed SSH URL before cloning
+- If the command fails, surface a repository-not-found/inaccessible error and do not clone
+
+**3. UI structure**
+- Keep the shared repository creation dialog as the single entry point
+- In clone mode, collect `owner` and `repo` instead of asking for a full URL
+- Keep an advanced paste-URL fallback for existing behavior and browser URL parsing
+- Keep blank repository creation available in the same dialog
+
+**4. Backend behavior**
+- Reuse `POST /projects/{project_id}/repositories`
+- Add preflight logic before the existing `git clone --mirror`
+- Leave the database schema unchanged
+
+## Risks / Trade-offs
+
+**[Risk] SSH auth may still fail even if the repo exists** → Mitigation: preflight error should be explicit and user-facing.
+**[Risk] Command availability** → Mitigation: reuse the same `git` dependency already required for cloning.
+**[Risk] UI complexity** → Mitigation: keep the dialog shared and minimal, with fallback URL paste.
diff --git a/openspec/changes/git-repo-ssh-clone-check/proposal.md b/openspec/changes/git-repo-ssh-clone-check/proposal.md
new file mode 100644
index 0000000..66e512c
--- /dev/null
+++ b/openspec/changes/git-repo-ssh-clone-check/proposal.md
@@ -0,0 +1,25 @@
+## Why
+
+Repository creation already supports cloning from a remote URL, but the current UI only accepts a full URL. For the common fixed-provider case (`git.commumedia.org`), users should be able to enter `owner` and `repo` and have the app verify the repository exists before cloning. If the repository does not exist, the app should surface a clear error. Existing blank repository creation must remain available.
+
+## What Changes
+
+- Change the shared repository create dialog to support an SSH-only clone form with `owner` and `repo`
+- Build the clone target as `git@git.commumedia.org:{owner}/{repo}.git`
+- Preflight clone targets with `git ls-remote` before cloning
+- Return a clear error when the repository is missing or inaccessible
+- Keep the current full URL paste flow as an advanced fallback
+- Keep blank repository creation as a fallback option
+
+## Capabilities
+
+### Modified Capabilities
+
+- `git-repo`: Repository creation UX and clone validation reuse the existing create endpoint and clone path
+
+## Impact
+
+- Frontend: `repository-create-dialog.tsx`, `git-repositories.tsx`, `repositories-settings-tab.tsx`
+- Backend: `git_repositories.py` create endpoint clone preflight
+- Docs: repository creation guidance must reflect SSH-only owner/repo input
+- Tests: add coverage for SSH repo existence checks and fallback URL behavior
diff --git a/openspec/changes/git-repo-ssh-clone-check/tasks.md b/openspec/changes/git-repo-ssh-clone-check/tasks.md
new file mode 100644
index 0000000..542c7b6
--- /dev/null
+++ b/openspec/changes/git-repo-ssh-clone-check/tasks.md
@@ -0,0 +1,22 @@
+## 1. Backend - SSH Existence Check
+
+- [ ] 1.1 Add `git ls-remote` preflight to repository creation in `git_repositories.py`
+- [ ] 1.2 Build SSH clone URL from `owner` and `repo` for `git.commumedia.org`
+- [ ] 1.3 Return a clear error when the repository is missing or inaccessible
+
+## 2. Frontend - Structured Clone Form
+
+- [ ] 2.1 Update `RepositoryCreateDialog` clone mode to accept `owner` and `repo`
+- [ ] 2.2 Keep advanced full-URL paste flow and blank repository fallback
+- [ ] 2.3 Reuse the shared dialog from repository settings and repositories page
+
+## 3. Validation and Docs
+
+- [ ] 3.1 Update repository docs to explain SSH-only owner/repo input
+- [ ] 3.2 Add tests for success, missing repo, and URL fallback behavior
+
+## 4. Quality Gates
+
+- [ ] 4.1 Run backend and frontend targeted tests
+- [ ] 4.2 Run frontend typecheck and lint where applicable
+- [ ] 4.3 Commit and push changes

From 4547105f3b1e8d70645ed9d6f8d63424a397adb8 Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 19:54:42 +0200
Subject: [PATCH 5/7] fix: use working clones for git repos

- Create normal working clones for remote repositories
- Initialize blank repositories with a main branch
- Align pull and branch helpers with unborn HEAD handling
- Gate fetch/pull on repositories with a remote

Quality gates: vitest repositories-settings-tab (passed); api pytest blocked by missing fastapi in environment
---
 apps/api/src/api/git_repositories.py          | 89 +++++++++++++------
 apps/api/src/utils/git_control.py             | 13 ++-
 apps/api/src/utils/git_files.py               | 15 +++-
 .../api/tests/integration/test_git_control.py |  7 ++
 .../test_git_repository_working_clones.py     | 46 ++++++++++
 apps/web/src/components/git-toolbar.tsx       | 12 ++-
 apps/web/src/pages/repo-workspace.tsx         |  2 +-
 .../changes/git-repo-working-clones/design.md | 33 +++++++
 .../git-repo-working-clones/proposal.md       | 17 ++++
 .../changes/git-repo-working-clones/tasks.md  | 19 ++++
 10 files changed, 215 insertions(+), 38 deletions(-)
 create mode 100644 apps/api/tests/unit/test_git_repository_working_clones.py
 create mode 100644 openspec/changes/git-repo-working-clones/design.md
 create mode 100644 openspec/changes/git-repo-working-clones/proposal.md
 create mode 100644 openspec/changes/git-repo-working-clones/tasks.md

diff --git a/apps/api/src/api/git_repositories.py b/apps/api/src/api/git_repositories.py
index b00a20d..8c2bb0e 100644
--- a/apps/api/src/api/git_repositories.py
+++ b/apps/api/src/api/git_repositories.py
@@ -115,6 +115,62 @@ def _preflight_remote_repository(remote_url: str) -> None:
         )
 
 
+def _clone_working_repository(remote_url: str, repo_path: str) -> None:
+    try:
+        result = subprocess.run(
+            ["git", "clone", remote_url, repo_path],
+            capture_output=True,
+            text=True,
+            timeout=300,
+        )
+    except subprocess.TimeoutExpired:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="clone operation timed out")
+    except FileNotFoundError:
+        raise HTTPException(status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail="git command not found")
+
+    if result.returncode != 0:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"failed to clone repository: {result.stderr}",
+        )
+
+
+def _init_working_repository(repo_path: str) -> None:
+    try:
+        result = subprocess.run(
+            ["git", "init", "-b", "main", repo_path],
+            capture_output=True,
+            text=True,
+        )
+    except FileNotFoundError:
+        raise HTTPException(status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail="git command not found")
+
+    if result.returncode == 0:
+        return
+
+    fallback = subprocess.run(
+        ["git", "init", repo_path],
+        capture_output=True,
+        text=True,
+    )
+    if fallback.returncode != 0:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"failed to initialize repository: {fallback.stderr}",
+        )
+
+    ref_result = subprocess.run(
+        ["git", "-C", repo_path, "symbolic-ref", "HEAD", "refs/heads/main"],
+        capture_output=True,
+        text=True,
+    )
+    if ref_result.returncode != 0:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"failed to set initial branch: {ref_result.stderr}",
+        )
+
+
 class GitRepositoryCreate(BaseModel):
     name: str
     remote_url: str | None = None
@@ -243,7 +299,7 @@ async def parse_repository_url(data: URLParseRequest) -> URLParseResponse:
     response_model=GitRepositoryResponse,
     status_code=status.HTTP_201_CREATED,
     summary="Create a repository",
-    description="Create a new git repository in a project. Can clone from remote or initialize bare.",
+    description="Create a new git repository in a project. Can clone from remote or initialize a working repository.",
 )
 async def create_repository(
     project_id: uuid.UUID,
@@ -302,41 +358,16 @@ async def create_repository(
     os.makedirs(os.path.dirname(repo_path), exist_ok=True)
 
     if remote_url:
-        # Clone as mirror
-        try:
-            result = subprocess.run(
-                ["git", "clone", "--mirror", remote_url, repo_path],
-                capture_output=True,
-                text=True,
-                timeout=300,
-            )
-            if result.returncode != 0:
-                raise HTTPException(
-                    status_code=status.HTTP_400_BAD_REQUEST,
-                    detail=f"failed to clone repository: {result.stderr}",
-                )
-        except subprocess.TimeoutExpired:
-            raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="clone operation timed out")
-        except FileNotFoundError:
-            raise HTTPException(status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail="git command not found")
+        _clone_working_repository(remote_url, repo_path)
     else:
-        # Init bare repo
-        try:
-            result = subprocess.run(
-                ["git", "init", "--bare", repo_path],
-                capture_output=True,
-                text=True,
-                check=True,
-            )
-        except FileNotFoundError:
-            raise HTTPException(status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail="git command not found")
+        _init_working_repository(repo_path)
 
     repo = GitRepository(
         name=data.name,
         path=repo_path,
         project_id=project_id,
         owner_id=user_id,
-        is_mirror=bool(remote_url),
+        is_mirror=False,
         remote_url=remote_url,
     )
     session.add(repo)
diff --git a/apps/api/src/utils/git_control.py b/apps/api/src/utils/git_control.py
index 9b5a85a..a5ea7ea 100644
--- a/apps/api/src/utils/git_control.py
+++ b/apps/api/src/utils/git_control.py
@@ -45,7 +45,10 @@ def get_status(repo_path: str) -> GitStatus:
     try:
         branch = _run_git_command(repo_path, "rev-parse", "--abbrev-ref", "HEAD").strip()
     except RuntimeError:
-        branch = "HEAD"
+        try:
+            branch = _run_git_command(repo_path, "symbolic-ref", "--short", "HEAD").strip()
+        except RuntimeError:
+            branch = "HEAD"
 
     status = GitStatus(branch=branch)
 
@@ -215,7 +218,8 @@ def pull(repo_path: str, branch: str | None = None) -> None:
     """
     args = ["pull"]
     if branch:
-        args.extend(["origin", branch])
+        args.append("origin")
+        args.append(branch)
     _run_git_command(repo_path, *args)
 
 
@@ -279,4 +283,7 @@ def get_current_branch(repo_path: str) -> str:
     Returns:
         Current branch name
     """
-    return _run_git_command(repo_path, "rev-parse", "--abbrev-ref", "HEAD").strip()
+    try:
+        return _run_git_command(repo_path, "rev-parse", "--abbrev-ref", "HEAD").strip()
+    except RuntimeError:
+        return _run_git_command(repo_path, "symbolic-ref", "--short", "HEAD").strip()
diff --git a/apps/api/src/utils/git_files.py b/apps/api/src/utils/git_files.py
index c793432..147b655 100644
--- a/apps/api/src/utils/git_files.py
+++ b/apps/api/src/utils/git_files.py
@@ -346,7 +346,20 @@ def list_branches(repo_path: str) -> tuple[list[BranchInfo], str]:
                 )
                 default_branch = branch_name
         except RuntimeError:
-            pass
+            try:
+                output = _run_git_command(repo_path, "symbolic-ref", "--short", "HEAD")
+                branch_name = output.strip()
+                if branch_name:
+                    branches.append(
+                        BranchInfo(
+                            name=branch_name,
+                            is_default=True,
+                            last_commit=None,
+                        )
+                    )
+                    default_branch = branch_name
+            except RuntimeError:
+                pass
 
     return branches, default_branch
 
diff --git a/apps/api/tests/integration/test_git_control.py b/apps/api/tests/integration/test_git_control.py
index 21e2798..a7ab139 100644
--- a/apps/api/tests/integration/test_git_control.py
+++ b/apps/api/tests/integration/test_git_control.py
@@ -63,6 +63,13 @@ class TestGitStatus:
         assert "new.py" in status.untracked
 
 
+def test_get_current_branch_handles_unborn_main() -> None:
+    with tempfile.TemporaryDirectory() as tmpdir:
+        os.system(f"git init -b main {tmpdir} >/dev/null 2>&1")
+
+        assert get_current_branch(tmpdir) == "main"
+
+
 class TestBranchOperations:
     """Tests for branch management functions."""
 
diff --git a/apps/api/tests/unit/test_git_repository_working_clones.py b/apps/api/tests/unit/test_git_repository_working_clones.py
new file mode 100644
index 0000000..de93166
--- /dev/null
+++ b/apps/api/tests/unit/test_git_repository_working_clones.py
@@ -0,0 +1,46 @@
+from unittest.mock import Mock, patch
+
+import pytest
+from fastapi import HTTPException
+
+from src.api.git_repositories import _clone_working_repository, _init_working_repository
+
+
+def test_clone_working_repository_uses_normal_clone() -> None:
+    completed = Mock(returncode=0, stderr="")
+    with patch("src.api.git_repositories.subprocess.run", return_value=completed) as run_mock:
+        _clone_working_repository("git@git.commumedia.org:alice/demo.git", "/tmp/demo.git")
+
+    run_mock.assert_called_once()
+    assert run_mock.call_args.args[0] == ["git", "clone", "git@git.commumedia.org:alice/demo.git", "/tmp/demo.git"]
+
+
+def test_clone_working_repository_raises_on_failure() -> None:
+    completed = Mock(returncode=128, stderr="fatal: repository not found")
+    with patch("src.api.git_repositories.subprocess.run", return_value=completed):
+        with pytest.raises(HTTPException) as exc_info:
+            _clone_working_repository("git@git.commumedia.org:alice/missing.git", "/tmp/missing.git")
+
+    assert exc_info.value.status_code == 400
+    assert "failed to clone repository" in exc_info.value.detail
+
+
+def test_init_working_repository_prefers_init_b() -> None:
+    init_b = Mock(returncode=0, stderr="")
+    with patch("src.api.git_repositories.subprocess.run", return_value=init_b) as run_mock:
+        _init_working_repository("/tmp/new-repo")
+
+    assert run_mock.call_args.args[0] == ["git", "init", "-b", "main", "/tmp/new-repo"]
+
+
+def test_init_working_repository_falls_back_to_symbolic_ref() -> None:
+    init_b = Mock(returncode=1, stderr="unknown switch `b'")
+    init_ok = Mock(returncode=0, stderr="")
+    symbolic_ref = Mock(returncode=0, stderr="")
+
+    with patch("src.api.git_repositories.subprocess.run", side_effect=[init_b, init_ok, symbolic_ref]) as run_mock:
+        _init_working_repository("/tmp/new-repo")
+
+    assert run_mock.call_args_list[0].args[0] == ["git", "init", "-b", "main", "/tmp/new-repo"]
+    assert run_mock.call_args_list[1].args[0] == ["git", "init", "/tmp/new-repo"]
+    assert run_mock.call_args_list[2].args[0] == ["git", "-C", "/tmp/new-repo", "symbolic-ref", "HEAD", "refs/heads/main"]
diff --git a/apps/web/src/components/git-toolbar.tsx b/apps/web/src/components/git-toolbar.tsx
index 15313dc..9ef5f39 100644
--- a/apps/web/src/components/git-toolbar.tsx
+++ b/apps/web/src/components/git-toolbar.tsx
@@ -17,6 +17,7 @@ interface GitToolbarProps {
   repoId: string;
   currentBranch: string;
   branches: string[];
+  hasRemote: boolean;
   onBranchChange: (branch: string) => void;
   onRefresh: () => void;
 }
@@ -26,6 +27,7 @@ export const GitToolbar = ({
   repoId,
   currentBranch,
   branches,
+  hasRemote,
   onBranchChange,
   onRefresh,
 }: GitToolbarProps) => {
@@ -55,6 +57,7 @@ export const GitToolbar = ({
   }, [loadStatus]);
 
   const handleFetch = async () => {
+    if (!hasRemote) return;
     setLoading(true);
     try {
       await fetchRepository(projectId, repoId);
@@ -67,9 +70,10 @@ export const GitToolbar = ({
   };
 
   const handlePull = async () => {
+    if (!hasRemote) return;
     setLoading(true);
     try {
-      await pullRepository(projectId, repoId, currentBranch);
+      await pullRepository(projectId, repoId, currentBranch || undefined);
       await loadStatus();
       onRefresh();
     } catch {
@@ -162,10 +166,10 @@ export const GitToolbar = ({
         </div>
 
         <div className="toolbar-group">
-            <button
+          <button
             className="toolbar-button"
             onClick={handleFetch}
-            disabled={loading}
+            disabled={loading || !hasRemote}
             type="button"
           >
             <Icon name="fetch" size="sm" /> Fetch
@@ -173,7 +177,7 @@ export const GitToolbar = ({
           <button
             className="toolbar-button"
             onClick={handlePull}
-            disabled={loading}
+            disabled={loading || !hasRemote}
             type="button"
           >
             <Icon name="pull" size="sm" /> Pull
diff --git a/apps/web/src/pages/repo-workspace.tsx b/apps/web/src/pages/repo-workspace.tsx
index b013f52..198fb84 100644
--- a/apps/web/src/pages/repo-workspace.tsx
+++ b/apps/web/src/pages/repo-workspace.tsx
@@ -196,6 +196,7 @@ export const RepoWorkspace = () => {
               repoId={selectedRepoId}
               currentBranch={currentBranch}
               branches={branches}
+              hasRemote={Boolean(selectedRepo?.remote_url)}
               onBranchChange={(branch) => {
                 setCurrentBranch(branch);
                 const newParams = new URLSearchParams(searchParams);
@@ -391,4 +392,3 @@ const FileBrowser = ({
     </div>
   );
 };
-
diff --git a/openspec/changes/git-repo-working-clones/design.md b/openspec/changes/git-repo-working-clones/design.md
new file mode 100644
index 0000000..beb0c80
--- /dev/null
+++ b/openspec/changes/git-repo-working-clones/design.md
@@ -0,0 +1,33 @@
+## Context
+
+Repository creation currently produces mirrored bare repos for any remote clone and bare repos for blank creations. The workspace, file browser, commit editor, and git toolbar are built around a working-tree repository model, so users can hit 400s when they try to sync or when the repo has no usable branch state.
+
+## Goals
+
+- Create working clones for remote repositories
+- Create working repos with an initial branch for blank repositories
+- Preserve the existing repository create endpoint and shared UI flow
+- Keep fetch/pull/push aligned with a normal local clone
+
+## Decisions
+
+1. Clone mode
+- Use `git clone` without `--mirror`
+- Keep the existing remote URL preflight and URL parsing behavior
+
+2. Blank repositories
+- Initialize with `git init -b main` when supported
+- Fall back to `git init` plus `git symbolic-ref HEAD refs/heads/main` if needed
+
+3. Branch state
+- Treat `main` as the initial branch name for blank repos
+- Make branch listing and current-branch helpers tolerate unborn `HEAD`
+
+4. Pull behavior
+- Prefer the current branch when no explicit branch is supplied
+- Do not force `origin <branch>` if the branch is unborn or already tracked by the current checkout
+
+## Risks
+
+- Some older git versions may not support `git init -b`; the backend should fall back cleanly
+- Existing blank repos created under the old bare model may still require migration or cleanup outside this change
diff --git a/openspec/changes/git-repo-working-clones/proposal.md b/openspec/changes/git-repo-working-clones/proposal.md
new file mode 100644
index 0000000..c62e06f
--- /dev/null
+++ b/openspec/changes/git-repo-working-clones/proposal.md
@@ -0,0 +1,17 @@
+## Why
+
+The current repository creation flow creates mirrored bare repositories for clone-based repos. That breaks the workspace model because the UI and file editing features expect a normal working clone with an initial branch, remote tracking, and pull/fetch behavior that works from a checked-out branch.
+
+## What Changes
+
+- Create clone-based repositories as normal working clones instead of mirrors
+- Initialize blank repositories as working clones with an initial branch when needed
+- Ensure newly created repos have a usable current branch for workspace browsing and commits
+- Update pull semantics to use the current tracked branch when available
+- Keep fetch behavior available for remote-synced repositories
+
+## Impact
+
+- Backend: repository creation and git control helpers
+- Backend tests: clone, pull, and empty-repo branch behavior
+- Frontend: no intentional UX change beyond sync behavior becoming reliable
diff --git a/openspec/changes/git-repo-working-clones/tasks.md b/openspec/changes/git-repo-working-clones/tasks.md
new file mode 100644
index 0000000..3d60a7d
--- /dev/null
+++ b/openspec/changes/git-repo-working-clones/tasks.md
@@ -0,0 +1,19 @@
+## 1. Backend - Repository Creation
+
+- [x] 1.1 Switch clone-based repository creation from mirror clones to normal working clones
+- [x] 1.2 Initialize blank repositories with a default branch name
+- [x] 1.3 Preserve remote preflight and clear error handling
+
+## 2. Backend - Git Sync Helpers
+
+- [x] 2.1 Update pull behavior to use the current tracked branch when available
+- [x] 2.2 Make branch helpers tolerate unborn HEAD in blank repos
+
+## 3. Tests
+
+- [x] 3.1 Add unit coverage for clone creation and blank repo initialization
+- [x] 3.2 Add coverage for pull behavior on working clones and blank repos
+
+## 4. Quality Gates
+
+- [ ] 4.1 Run targeted API tests

From 10cbe63095cf552869fc8f10daf8682f421e2bea Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 20:02:51 +0200
Subject: [PATCH 6/7] fix: handle unborn HEAD branch creation

- Create orphan branches when HEAD does not exist yet\n- Use current branch as the default branch base in the toolbar\n- Keep push disabled for remote-less repos\n\nQuality gates: vitest repositories-settings-tab (passed); api pytest blocked by missing fastapi in environment
---
 apps/api/src/utils/git_control.py                    |  7 +++++++
 .../tests/unit/test_git_repository_working_clones.py | 12 ++++++++++++
 apps/web/src/components/git-toolbar.tsx              | 10 ++++++----
 3 files changed, 25 insertions(+), 4 deletions(-)

diff --git a/apps/api/src/utils/git_control.py b/apps/api/src/utils/git_control.py
index a5ea7ea..59a6874 100644
--- a/apps/api/src/utils/git_control.py
+++ b/apps/api/src/utils/git_control.py
@@ -121,6 +121,13 @@ def create_branch(repo_path: str, name: str, base_branch: str = "HEAD") -> None:
     Raises:
         RuntimeError: If branch creation fails
     """
+    if base_branch == "HEAD":
+        try:
+            _run_git_command(repo_path, "rev-parse", "--verify", "HEAD")
+        except RuntimeError:
+            _run_git_command(repo_path, "checkout", "--orphan", name)
+            return
+
     _run_git_command(repo_path, "branch", name, base_branch)
 
 
diff --git a/apps/api/tests/unit/test_git_repository_working_clones.py b/apps/api/tests/unit/test_git_repository_working_clones.py
index de93166..1fdd2cb 100644
--- a/apps/api/tests/unit/test_git_repository_working_clones.py
+++ b/apps/api/tests/unit/test_git_repository_working_clones.py
@@ -4,6 +4,7 @@ import pytest
 from fastapi import HTTPException
 
 from src.api.git_repositories import _clone_working_repository, _init_working_repository
+from src.utils.git_control import create_branch
 
 
 def test_clone_working_repository_uses_normal_clone() -> None:
@@ -44,3 +45,14 @@ def test_init_working_repository_falls_back_to_symbolic_ref() -> None:
     assert run_mock.call_args_list[0].args[0] == ["git", "init", "-b", "main", "/tmp/new-repo"]
     assert run_mock.call_args_list[1].args[0] == ["git", "init", "/tmp/new-repo"]
     assert run_mock.call_args_list[2].args[0] == ["git", "-C", "/tmp/new-repo", "symbolic-ref", "HEAD", "refs/heads/main"]
+
+
+def test_create_branch_uses_orphan_checkout_when_head_is_unborn() -> None:
+    verify_head = Mock(returncode=128, stderr="fatal: Needed a single revision")
+    checkout_orphan = Mock(returncode=0, stderr="")
+
+    with patch("src.utils.git_control._run_git_command", side_effect=[verify_head, checkout_orphan]) as run_mock:
+        create_branch("/tmp/new-repo", "feature/test")
+
+    assert run_mock.call_args_list[0].args[1:] == ("rev-parse", "--verify", "HEAD")
+    assert run_mock.call_args_list[1].args[1:] == ("checkout", "--orphan", "feature/test")
diff --git a/apps/web/src/components/git-toolbar.tsx b/apps/web/src/components/git-toolbar.tsx
index 9ef5f39..31a8f07 100644
--- a/apps/web/src/components/git-toolbar.tsx
+++ b/apps/web/src/components/git-toolbar.tsx
@@ -112,7 +112,7 @@ export const GitToolbar = ({
     if (!newBranchName.trim()) return;
     setLoading(true);
     try {
-      await createBranch(projectId, repoId, newBranchName, newBranchBase || "HEAD");
+      await createBranch(projectId, repoId, newBranchName, newBranchBase || currentBranch || "HEAD");
       setShowNewBranch(false);
       setNewBranchName("");
       setNewBranchBase("");
@@ -131,6 +131,8 @@ export const GitToolbar = ({
     status.untracked.length > 0
   );
 
+  const canSync = hasRemote;
+
   return (
     <div className="git-toolbar">
       {error && <div className="toolbar-error">{error}</div>}
@@ -169,7 +171,7 @@ export const GitToolbar = ({
           <button
             className="toolbar-button"
             onClick={handleFetch}
-            disabled={loading || !hasRemote}
+            disabled={loading || !canSync}
             type="button"
           >
             <Icon name="fetch" size="sm" /> Fetch
@@ -177,7 +179,7 @@ export const GitToolbar = ({
           <button
             className="toolbar-button"
             onClick={handlePull}
-            disabled={loading || !hasRemote}
+            disabled={loading || !canSync}
             type="button"
           >
             <Icon name="pull" size="sm" /> Pull
@@ -186,7 +188,7 @@ export const GitToolbar = ({
           <button
             className="toolbar-button"
             onClick={handlePush}
-            disabled={loading || !status?.ahead}
+            disabled={loading || !canSync || !status?.ahead}
             type="button"
           >
             <Icon name="push" size="sm" /> Push

From d0e5feeaa52e61e0045dc5115e4901e05649830f Mon Sep 17 00:00:00 2001
From: marxlaml <miguel@marxlaml.de>
Date: Fri, 22 May 2026 20:29:30 +0200
Subject: [PATCH 7/7] test: fix mock to actually exercise orphan branch path

---
 .../unit/test_git_repository_working_clones.py     | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/apps/api/tests/unit/test_git_repository_working_clones.py b/apps/api/tests/unit/test_git_repository_working_clones.py
index 1fdd2cb..577e809 100644
--- a/apps/api/tests/unit/test_git_repository_working_clones.py
+++ b/apps/api/tests/unit/test_git_repository_working_clones.py
@@ -48,11 +48,17 @@ def test_init_working_repository_falls_back_to_symbolic_ref() -> None:
 
 
 def test_create_branch_uses_orphan_checkout_when_head_is_unborn() -> None:
-    verify_head = Mock(returncode=128, stderr="fatal: Needed a single revision")
-    checkout_orphan = Mock(returncode=0, stderr="")
+    call_count = 0
 
-    with patch("src.utils.git_control._run_git_command", side_effect=[verify_head, checkout_orphan]) as run_mock:
+    def mock_run(repo_path: str, *args: str) -> str:
+        nonlocal call_count
+        call_count += 1
+        if call_count == 1:
+            raise RuntimeError("fatal: Needed a single revision")
+        return ""
+
+    with patch("src.utils.git_control._run_git_command", side_effect=mock_run) as run_mock:
         create_branch("/tmp/new-repo", "feature/test")
 
-    assert run_mock.call_args_list[0].args[1:] == ("rev-parse", "--verify", "HEAD")
+    assert run_mock.call_args_list[0].args[1:] == ("rev-parse", "--verify", "HEAD^{commit}")
     assert run_mock.call_args_list[1].args[1:] == ("checkout", "--orphan", "feature/test")