phase: 135_git_source_branch

All verification complete. No edits were needed by this pass — the phase work and docs were already consistent and green.

**Phase 135 final verification pass — report**

- Verified all 5 tasks' work present & correct: migration 0024 (reversible), `GitSource.branch` + 4 schema shapes, `validate_branch_name` (full check order per design), `clone_or_pull(…, branch)` (HEAD guard first, `--branch` clone, fetch+ff merge), both call sites pass `row.branch`, UI (add-form field, editor field, row tag), `file://` URL transport.
- Completion criteria: (1) branch-mirrored through Sync + CLI — **pass** (E2E + integration); (2) `branch=None` byte-identical — **pass** (`test_branch_none_argv_is_byte_identical_pre_phase_sequence` green); (3) fixed 422s / local-row 422 / tri-state — **pass**; (4) mismatch fails loudly with remove-and-re-add — **pass** (E2E); (5) coverage 99% >90%, E2E isolated green — **pass**; (6) no regressions — **pass**.
- Tests: `uv run pytest --cov=app --cov-report=term-missing` → 3223 passed, app/ 99%; `uv run pytest tests/e2e/test_git_source_branch.py -v --no-cov` → 4 passed (16.4 s); `uv run ruff check .` clean; `uv run pyright` → 0 errors, 0 warnings.
- Documentation: README.md reviewed in full — phase-135 branch section accurate; the phase's README diff also correctly fixed a pre-existing stale line (shallow `--depth 1` clone vs full-history, phase 107). Routes, env defaults, feature lists verified against code. AGENTS.md — all 10 rules + quick-reference verified (referenced tests, PLAN.md, phases dirs, commands all accurate). **Verified consistent — no changes needed.**
- No live-infrastructure changes (dev DB already running and healthy; no live steps in this phase).
- Next pending phase: `.agents/phases/todo/136_force_push_reset`.

tests/unit/test_source_ignore_paths.py

@@ -384,14 +384,20 @@ def test_save_runs_the_inflight_never_stale_lifecycle() -> None:
     label_i = body.find(f'"{SAVING_LABEL}"', dis_s)
     fetch_i = body.find("`/api/git-sources/${", label_i)
     method_i = body.find('method: "PATCH"', fetch_i)
-    body_i = body.find(
-        "JSON.stringify({ ignore_paths: lines, ...(token ? { token } : {}) })", method_i
-    )
+    # Phase 135 (task 04) widened the body: the branch key lands
+    # BEFORE the (still conditional) token key — git rows always send
+    # it ("" = the tri-state's clear leg), local rows omit it.
+    body_i = body.find("JSON.stringify({\n          ignore_paths: lines,", method_i)
+    branch_key_i = body.find("...(isGitRow ? { branch } : {})", body_i)
+    token_key_i = body.find("...(token ? { token } : {})", branch_key_i)
     assert -1 < guard_i < parse_i < trim_i < drop_i < token_i < inflight_i, (
         "guard → split + trim + drop blank lines → read the token → in-flight"
     )
     assert -1 < dis_c < dis_s < label_i < fetch_i < method_i < body_i, (
-        "disable both + 'Saving…' → the PATCH (lines + token only when non-blank)"
+        "disable both + 'Saving…' → the PATCH"
+    )
+    assert -1 < body_i < branch_key_i < token_key_i, (
+        "the body: lines, branch for git rows, token only when non-blank"
     )
     # Success: close → reload → announce (the exact order) — the
     # update confirmation is the LAST announcement: the reload's