@agimon-ai/doompi-git 0.0.1-alpha.36 → 0.0.1-alpha.38

package/dist/extensions/web.mjs

@@ -1,12 +1,73 @@
-import { defineActivityGroup, defineChannelFile, defineFill, defineGlobalStore, defineSessionStore, defineToolRenderer, defineWebLifecycle, defineWebPlugin, workspaceApiPath } from "@agimon-ai/doompi-core/web";
-import { Button, Dialog, DialogBody, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, Dot, DropdownMenuItem, EmptyState, Input, MessageItem, MessageItemBody, MessageItemHeader, OptionRow, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Spinner, StatusBadge, toolTone } from "@agimon-ai/doompi-web-components";
-import { createElement, useEffect, useState } from "react";
+import { apiResponse, createApiClient, defineActivityGroup, defineApiRoutes, defineChannelFile, defineFill, defineGlobalStore, defineRepositorySettingsPanel, defineSessionStore, defineToolRenderer, defineWebLifecycle, defineWebPlugin, sessionApiAddress } from "@agimon-ai/doompi-core/web";
+import { AlertIcon, BranchIcon, Button, ChevronDownIcon, ChevronRightIcon, CloseIcon, Dialog, DialogBody, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, DiffView, Dot, DropdownMenuItem, EmptyState, Input, Label, MessageIcon, MessageItem, MessageItemBody, MessageItemHeader, OptionRow, RadioGroup, RadioGroupCard, ReviewCommentDraft, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, ShieldIcon, Spinner, StatusBadge, buildReviewPrompt, groupByDirectory, groupRowLabel, reviewCommentAnchor, toolTone } from "@agimon-ai/doompi-web-components";
+import { createElement, useCallback, useEffect, useState } from "react";
+import { sealedTransport } from "@agimon-ai/doompi-web-security/browser";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useStore } from "@tanstack/react-store";
-//#region src/constants/git.ts
-/** Workspace-mounted routes behind the new-session dialog. */
-const GIT_BRANCHES_PATH = "/branches";
-const GIT_SESSIONS_PATH = "/sessions";
+//#region src/types/apiRoutes.ts
+/**
+* The routes the page calls, as data.
+*
+* No scope and no base path: the build reads both off
+* `src/extensions/(backend)/api/git/`, which mounts at global scope and so
+* answers workspace and session requests too. Each route answers only where it
+* belongs (auth on a workspace mount, the review on a session mount), so a
+* client accessor on the wrong scope gets a 404 rather than a second way in.
+*
+* Only what the browser calls is listed. The worktree routes stay HTTP for
+* other callers, but the dock drives worktrees over its channel.
+*/
+var apiRoutes_default = defineApiRoutes({
+	/** Workspace: the new-session dialog's branch list. */
+	branches: {
+		method: "GET",
+		path: "/branches",
+		response: apiResponse()
+	},
+	/** Workspace: a top-level worktree session on an existing or new branch. */
+	createSession: {
+		method: "POST",
+		path: "/sessions",
+		response: apiResponse()
+	},
+	/** Workspace: that workspace's saved remote auth, never the token itself. */
+	auth: {
+		method: "GET",
+		path: "/auth",
+		query: ["repositoryId"],
+		response: apiResponse()
+	},
+	/** Workspace: replaces that workspace's remote auth. Passkey step-up gated for remote devices. */
+	saveAuth: {
+		method: "PUT",
+		path: "/auth",
+		query: ["repositoryId"],
+		response: apiResponse()
+	},
+	/** Session: the files this session's checkout changed against its base. */
+	review: {
+		method: "GET",
+		path: "/review",
+		response: apiResponse()
+	},
+	/** Session: one changed file's hunks. */
+	reviewFile: {
+		method: "GET",
+		path: "/review/file",
+		query: ["path"],
+		response: apiResponse()
+	}
+});
+const api = createApiClient(apiRoutes_default, {
+	scopes: [
+		"global",
+		"workspace",
+		"session"
+	],
+	basePath: "git",
+	transport: (input, init) => sealedTransport.fetch(input, init),
+	sessionAddress: sessionApiAddress
+});
 //#endregion
 //#region src/extensions/workspaces/(frontend)/_lib/newSessionForm.ts
 const MAX_LISTED = 200;
@@ -37,7 +98,7 @@ function baseOptions(branches) {
 	])];
 }
 /** Why the form cannot be submitted yet, or undefined when it can. */
-function formProblem(state) {
+function formProblem$1(state) {
 	if (state.mode === "existing") {
 		if (state.selected === void 0) return "Pick a branch.";
 		if (state.selected.busyAt !== void 0) return `That branch is checked out at ${state.selected.busyAt}.`;
@@ -80,7 +141,7 @@ const MODES = [
 		label: "no branch"
 	}
 ];
-function errorOf(body, status) {
+function errorOf$1(body, status) {
 	return typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : `The cockpit answered ${String(status)}.`;
 }
 /**
@@ -105,12 +166,12 @@ function GitNewSessionDialog({ newSession }) {
 	useEffect(() => {
 		if (workspaceId === void 0 || request === void 0) return;
 		let stale = false;
-		const url = `${workspaceApiPath(workspaceId)}/plugins/git${GIT_BRANCHES_PATH}`;
+		const url = api.workspace(workspaceId).branches.url();
 		request(url).then(async (response) => {
 			const body = await response.json().catch(() => void 0);
 			if (stale) return;
 			if (!response.ok) {
-				setLoadError(errorOf(body, response.status));
+				setLoadError(errorOf$1(body, response.status));
 				return;
 			}
 			const loaded = body;
@@ -133,7 +194,7 @@ function GitNewSessionDialog({ newSession }) {
 		...form,
 		mode
 	};
-	const problem = formProblem(state);
+	const problem = formProblem$1(state);
 	const options = branches === null ? [] : branchOptions(branches, query);
 	const bases = branches === null ? [] : baseOptions(branches);
 	const update = (patch) => setForm((current) => ({
@@ -148,13 +209,13 @@ function GitNewSessionDialog({ newSession }) {
 		let failure;
 		if (body === void 0) failure = await newSession.createPlain(state.name);
 		else try {
-			const response = await newSession.requestWithStepUp(`${workspaceApiPath(newSession.workspaceId)}/plugins/git${GIT_SESSIONS_PATH}`, {
+			const response = await newSession.requestWithStepUp(api.workspace(newSession.workspaceId).createSession.url(), {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify(body)
 			});
 			const answer = await response.json().catch(() => void 0);
-			failure = response.ok ? await newSession.openCreated(answer.sessionId) : errorOf(answer, response.status);
+			failure = response.ok ? await newSession.openCreated(answer.sessionId) : errorOf$1(answer, response.status);
 		} catch {
 			failure = "The cockpit is unreachable.";
 		}
@@ -327,6 +388,1466 @@ function GitNewSessionDialog({ newSession }) {
 //#endregion
 //#region src/extensions/workspaces/(frontend)/fill/GitNewSession.new-session.web.tsx
 var GitNewSession_new_session_web_default = defineFill({ component: GitNewSessionDialog });
+function formFromView(view) {
+	return {
+		method: view.method,
+		keyPath: view.ssh?.keyPath ?? "",
+		host: view.https?.host ?? "github.com",
+		username: view.https?.username ?? "",
+		token: ""
+	};
+}
+const HOST_PATTERN = /^[a-z0-9.-]{1,253}(:\d{1,5})?$/u;
+/** Whether a value holds an ASCII control character; a newline in a credential field could add a line to git's credential protocol. */
+function hasControl(value) {
+	for (let index = 0; index < value.length; index += 1) {
+		const code = value.charCodeAt(index);
+		if (code < 32 || code === 127) return true;
+	}
+	return false;
+}
+/** Whether the saved token can stay: only when one exists and the host has not moved. */
+function keepsToken(form, saved) {
+	return saved.https?.hasToken === true && saved.https.host === form.host.trim().toLowerCase();
+}
+/** The first thing wrong with the form, in words, or undefined when it can be saved. */
+function formProblem(form, saved) {
+	if (form.method === "ssh") {
+		const keyPath = form.keyPath.trim();
+		if (keyPath === "") return void 0;
+		if (hasControl(keyPath)) return "The key path has a control character in it.";
+		if (!keyPath.startsWith("/") && !keyPath.startsWith("~/")) return "Give the key as an absolute path or one under ~/.";
+		return;
+	}
+	if (form.method === "https") {
+		const host = form.host.trim().toLowerCase();
+		if (!HOST_PATTERN.test(host)) return "The host should look like github.com, with an optional :port.";
+		if (form.username.trim() === "") return "A username is required.";
+		if (hasControl(form.username) || hasControl(form.token)) return "Remove the control character from the username or token.";
+		if (form.token === "" && !keepsToken(form, saved)) return saved.https?.hasToken === true ? "The host changed, so enter the token for the new host." : "A token is required.";
+	}
+}
+/** What a save sends. The token goes only when the reader typed one. */
+function saveRequestOf(form) {
+	if (form.method === "ssh") {
+		const keyPath = form.keyPath.trim();
+		return keyPath === "" ? { method: "ssh" } : {
+			method: "ssh",
+			keyPath
+		};
+	}
+	if (form.method === "https") return {
+		method: "https",
+		host: form.host.trim().toLowerCase(),
+		username: form.username.trim(),
+		...form.token === "" ? {} : { token: form.token }
+	};
+	return { method: "none" };
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_components/GitAuthForm.tsx
+/**
+* A workspace's git remote panel body: how doompi-git reaches the remote when
+* you pull, push or rebase from this workspace's sessions in the cockpit.
+*
+* DESIGN PATTERNS:
+* - Per workspace. Worktree sessions use the setup of the workspace they
+*   belong to. A workspace with nothing set uses this machine's own git.
+* - Three choices as cards, the way the theme picker offers them: this
+*   machine's own git, an SSH key, or an HTTPS token.
+* - The token is write-only. The field is never prefilled; a saved token shows
+*   as a badge, and leaving the field empty keeps it.
+* - Form state is the reader's until they save. The owner remounts the form
+*   after a save so it starts again from what the server now holds.
+*
+* AVOID:
+* - Echoing a token back. The view the server sends has none to echo.
+*/
+const METHODS = [
+	{
+		method: "none",
+		title: "this machine's git",
+		detail: "use whatever git on this machine already does: your credential helper, ssh config and agent"
+	},
+	{
+		method: "ssh",
+		title: "SSH key",
+		detail: "a key file on this machine, or your ssh-agent"
+	},
+	{
+		method: "https",
+		title: "HTTPS token",
+		detail: "a username and personal access token for one host"
+	}
+];
+function GitAuthForm({ saved, saving, saveError, savedNotice = false, onSave }) {
+	const [form, setForm] = useState(() => formFromView(saved));
+	const update = (patch) => setForm((current) => ({
+		...current,
+		...patch
+	}));
+	const problem = formProblem(form, saved);
+	const tokenSaved = saved.https?.hasToken === true && saved.https.host === form.host.trim().toLowerCase();
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-auth-form",
+		className: "flex w-full min-w-0 flex-col gap-4",
+		children: [
+			/* @__PURE__ */ jsx(RadioGroup, {
+				"aria-label": "how git reaches your remote",
+				value: form.method,
+				onValueChange: (value) => update({ method: value }),
+				className: "grid grid-cols-1 gap-2 sm:grid-cols-3",
+				children: METHODS.map((choice) => /* @__PURE__ */ jsx(RadioGroupCard, {
+					value: choice.method,
+					"data-testid": `git-auth-method-${choice.method}`,
+					className: "p-3",
+					children: /* @__PURE__ */ jsxs("span", {
+						className: "flex flex-col gap-1",
+						children: [/* @__PURE__ */ jsx("span", {
+							className: "text-sm font-bold text-doom-hi",
+							children: choice.title
+						}), /* @__PURE__ */ jsx("span", {
+							className: "text-2xs text-doom-dim",
+							children: choice.detail
+						})]
+					})
+				}, choice.method))
+			}),
+			form.method === "ssh" ? /* @__PURE__ */ jsxs("div", {
+				className: "flex flex-col gap-1.5 rounded-lg border border-doom-border bg-doom-panel p-3",
+				children: [
+					/* @__PURE__ */ jsx(Label, {
+						htmlFor: "git-auth-key-path",
+						className: "text-xs text-doom-hi",
+						children: "key path"
+					}),
+					/* @__PURE__ */ jsx(Input, {
+						id: "git-auth-key-path",
+						"data-testid": "git-auth-key-path",
+						size: "sm",
+						value: form.keyPath,
+						placeholder: "~/.ssh/id_ed25519",
+						spellCheck: false,
+						onChange: (event) => update({ keyPath: event.target.value })
+					}),
+					/* @__PURE__ */ jsxs("p", {
+						className: "text-2xs text-doom-faint",
+						children: [
+							"Leave it blank to use your ssh config and ssh-agent. A key with a passphrase works only through ssh-agent. An unknown host is refused: run ",
+							/* @__PURE__ */ jsx("code", {
+								className: "text-doom-dim",
+								children: "ssh -T git@github.com"
+							}),
+							" once in a terminal to trust it."
+						]
+					})
+				]
+			}) : null,
+			form.method === "https" ? /* @__PURE__ */ jsxs("div", {
+				className: "grid grid-cols-1 gap-3 rounded-lg border border-doom-border bg-doom-panel p-3 sm:grid-cols-2",
+				children: [
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-col gap-1.5",
+						children: [/* @__PURE__ */ jsx(Label, {
+							htmlFor: "git-auth-host",
+							className: "text-xs text-doom-hi",
+							children: "host"
+						}), /* @__PURE__ */ jsx(Input, {
+							id: "git-auth-host",
+							"data-testid": "git-auth-host",
+							size: "sm",
+							value: form.host,
+							spellCheck: false,
+							onChange: (event) => update({ host: event.target.value })
+						})]
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-col gap-1.5",
+						children: [/* @__PURE__ */ jsx(Label, {
+							htmlFor: "git-auth-username",
+							className: "text-xs text-doom-hi",
+							children: "username"
+						}), /* @__PURE__ */ jsx(Input, {
+							id: "git-auth-username",
+							"data-testid": "git-auth-username",
+							size: "sm",
+							value: form.username,
+							autoComplete: "username",
+							spellCheck: false,
+							onChange: (event) => update({ username: event.target.value })
+						})]
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-col gap-1.5 sm:col-span-2",
+						children: [
+							/* @__PURE__ */ jsxs("span", {
+								className: "flex items-center gap-2",
+								children: [/* @__PURE__ */ jsx(Label, {
+									htmlFor: "git-auth-token",
+									className: "text-xs text-doom-hi",
+									children: "token"
+								}), tokenSaved ? /* @__PURE__ */ jsx(StatusBadge, {
+									tone: "ok",
+									size: "xs",
+									"data-testid": "git-auth-token-saved",
+									children: "token saved"
+								}) : null]
+							}),
+							/* @__PURE__ */ jsx(Input, {
+								id: "git-auth-token",
+								"data-testid": "git-auth-token",
+								size: "sm",
+								type: "password",
+								value: form.token,
+								autoComplete: "new-password",
+								placeholder: tokenSaved ? "leave blank to keep the saved token" : "personal access token",
+								onChange: (event) => update({ token: event.target.value })
+							}),
+							/* @__PURE__ */ jsxs("p", {
+								className: "text-2xs text-doom-faint",
+								children: [
+									"Sent only to ",
+									form.host.trim() === "" ? "this host" : form.host.trim(),
+									". A remote on any other host keeps using this machine's own git credentials."
+								]
+							})
+						]
+					})
+				]
+			}) : null,
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex flex-wrap items-center gap-2",
+				children: [/* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					size: "sm",
+					"data-testid": "git-auth-save",
+					disabled: problem !== void 0 || saving,
+					loading: saving,
+					loadingLabel: "saving",
+					onClick: () => onSave(saveRequestOf(form)),
+					children: "save"
+				}), problem !== void 0 ? /* @__PURE__ */ jsx("span", {
+					"data-testid": "git-auth-problem",
+					className: "text-2xs text-doom-yellow",
+					children: problem
+				}) : saveError !== void 0 ? /* @__PURE__ */ jsxs("span", {
+					role: "alert",
+					"data-testid": "git-auth-error",
+					className: "flex items-center gap-1 text-2xs text-doom-red",
+					children: [/* @__PURE__ */ jsx(AlertIcon, {
+						"aria-hidden": true,
+						className: "h-3 w-3"
+					}), saveError]
+				}) : savedNotice ? /* @__PURE__ */ jsx("span", {
+					"data-testid": "git-auth-saved",
+					className: "text-2xs text-doom-green",
+					children: "saved"
+				}) : null]
+			}),
+			/* @__PURE__ */ jsxs("p", {
+				className: "flex items-start gap-1.5 text-2xs text-doom-faint",
+				children: [/* @__PURE__ */ jsx(ShieldIcon, {
+					"aria-hidden": true,
+					className: "mt-px h-3 w-3 shrink-0"
+				}), /* @__PURE__ */ jsx("span", { children: "Used only when you pull, push or rebase from this workspace's sessions in the cockpit, worktrees included. The agent's own git commands never see these credentials. Stored outside the repository in ~/.pi/.doom/git/credentials.json, readable only by you, and never in the system keychain." })]
+			})
+		]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_components/GitAuthPanel.tsx
+/**
+* A workspace's git remote panel: loads that workspace's saved auth and saves a
+* new one. Lives under settings, in the repository section the host scopes.
+*
+* DESIGN PATTERNS:
+* - Per workspace. The host hands the selected repository; its opaque id is
+*   the only thing sent, and the hub resolves it to an admitted root. A
+*   browser never names a path.
+* - Reads through the host's sealed request and writes through its step-up
+*   request, so a remote device proves itself with a passkey before it can
+*   change credentials. The URLs come from the generated client.
+* - After a save the form remounts from what the server returned, which is how
+*   the token field empties and the "token saved" badge appears.
+*/
+function isAuthView(value) {
+	return typeof value === "object" && value !== null && [
+		"none",
+		"ssh",
+		"https"
+	].includes(String(value.method));
+}
+function errorOf(body, status) {
+	return typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : `The cockpit answered ${String(status)}.`;
+}
+function GitAuthPanel({ repository, request, requestWithStepUp }) {
+	const repositoryId = repository?.id;
+	const [loaded, setLoaded] = useState();
+	const [loadError, setLoadError] = useState();
+	const [saving, setSaving] = useState(false);
+	const [saveError, setSaveError] = useState();
+	const [savedNotice, setSavedNotice] = useState(false);
+	const [generation, setGeneration] = useState(0);
+	useEffect(() => {
+		if (repositoryId === void 0) return;
+		let stale = false;
+		request(api.workspace(repositoryId).auth.url({ query: { repositoryId } })).then(async (response) => {
+			const body = await response.json().catch(() => void 0);
+			if (stale) return;
+			if (response.ok && isAuthView(body)) setLoaded({
+				repositoryId,
+				saved: body
+			});
+			else setLoadError({
+				repositoryId,
+				error: errorOf(body, response.status)
+			});
+		}).catch(() => {
+			if (!stale) setLoadError({
+				repositoryId,
+				error: "The cockpit is unreachable."
+			});
+		});
+		return () => {
+			stale = true;
+		};
+	}, [repositoryId, request]);
+	if (repository === null || repositoryId === void 0) return /* @__PURE__ */ jsx(EmptyState, {
+		"data-testid": "git-auth-no-repository",
+		className: "py-6",
+		title: "pick a repository",
+		description: "git remote auth is set per workspace; choose one above."
+	});
+	const save = async (next) => {
+		setSaving(true);
+		setSaveError(void 0);
+		setSavedNotice(false);
+		try {
+			const response = await requestWithStepUp(api.workspace(repositoryId).saveAuth.url({ query: { repositoryId } }), {
+				method: "PUT",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify(next)
+			});
+			const body = await response.json().catch(() => void 0);
+			if (response.ok && isAuthView(body)) {
+				setLoaded({
+					repositoryId,
+					saved: body
+				});
+				setGeneration((current) => current + 1);
+				setSavedNotice(true);
+			} else setSaveError(errorOf(body, response.status));
+		} catch {
+			setSaveError("The cockpit is unreachable.");
+		} finally {
+			setSaving(false);
+		}
+	};
+	if (loadError?.repositoryId === repositoryId) return /* @__PURE__ */ jsx("p", {
+		role: "alert",
+		"data-testid": "git-auth-load-error",
+		className: "text-xs text-doom-red",
+		children: loadError.error
+	});
+	if (loaded?.repositoryId !== repositoryId) return /* @__PURE__ */ jsxs("span", {
+		"data-testid": "git-auth-loading",
+		className: "flex items-center gap-2",
+		children: [/* @__PURE__ */ jsx(Spinner, {
+			className: "h-3 w-3 text-doom-faint",
+			label: "loading git settings"
+		}), /* @__PURE__ */ jsx("span", {
+			className: "text-xs text-doom-dim",
+			children: "loading…"
+		})]
+	});
+	return /* @__PURE__ */ jsx(GitAuthForm, {
+		saved: loaded.saved,
+		saving,
+		savedNotice,
+		onSave: (next) => void save(next),
+		...saveError === void 0 ? {} : { saveError }
+	}, `${repositoryId}-${String(generation)}`);
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/git.web.tsx
+var git_web_default$1 = defineRepositorySettingsPanel({
+	label: "git remote",
+	detail: "how this workspace's sessions reach the remote when you pull, push or rebase from the cockpit",
+	order: 50,
+	component: GitAuthPanel
+});
+//#endregion
+//#region src/types/gitReview.ts
+/**
+* The cockpit's view of what this session changed against its base: the counts
+* the '# diff' group shows, what the review tab lists and draws, and the manual
+* sync that sits beside them.
+*
+* DESIGN PATTERNS:
+* - Declarations only, shared by the hub and the page.
+* - Its own channel, apart from worktrees. Worktrees are repository
+*   management; the diff is this session's code change.
+* - A diff row carries one line number whose file follows from its marker: the
+*   new file's for context and additions, the old file's for removals. It is
+*   the same shape the shared DiffView draws.
+*
+* AVOID:
+* - Behaviour or node builtins. Browser code imports this file.
+*/
+/** The session channel carrying this checkout's changes and the sync around them. */
+const GIT_CHANGES_TYPE = "git_changes";
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitChangesStore.ts
+/**
+* This session's code change against its base, and the manual sync beside it.
+*
+* DESIGN PATTERNS:
+* - Its own session store and hub channel, apart from worktrees. Worktrees are
+*   repository management; this is the session's diff.
+* - The hub is authoritative: it computes the counts, runs pull, push and
+*   rebase one at a time, and reports pending, errors and a paused rebase here.
+* - The sender lives in a store rather than a module variable, because a web
+*   plugin keeps no mutable module state and the page may reconnect.
+*
+* AVOID:
+* - `sendSessionFrame` for a sync command. That frame is bound for the agent
+*   and never reaches a channel's `receive`.
+*/
+const gitChanges = defineSessionStore({
+	changes: void 0,
+	pending: void 0,
+	error: void 0,
+	errorTarget: void 0
+});
+/** The page's hub socket sender; undefined before start and after dispose, when a command is dropped. */
+const changesSender = defineGlobalStore(void 0);
+/** Binds the page's hub socket for sync commands. The plugin host calls this once per page. */
+function startGitChangesRuntime(runtime) {
+	const send = (frame) => {
+		runtime.sendHubFrame(frame);
+	};
+	changesSender.update(() => send);
+	return () => {
+		changesSender.update((current) => current === send ? void 0 : current);
+	};
+}
+/** Whether a sync command is running for this session. */
+const gitChangesActivitySource = {
+	subscribe(listener) {
+		const subscription = gitChanges.store.subscribe(listener);
+		return () => subscription.unsubscribe();
+	},
+	isActive(sessionId) {
+		return gitChanges.select(gitChanges.store.state, sessionId).pending !== void 0;
+	}
+};
+function isRecord$2(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function optionalText$1(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+function count(value) {
+	return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
+/** The page never trusts a frame's shape: a malformed field drops, the rest still renders. */
+const MAX_CONFLICTS = 100;
+function optionalChanges(value) {
+	if (!isRecord$2(value)) return void 0;
+	const added = count(value.added);
+	const removed = count(value.removed);
+	const files = count(value.files);
+	if (added === void 0 || removed === void 0 || files === void 0) return void 0;
+	const branch = optionalText$1(value.branch);
+	const base = optionalText$1(value.base);
+	const upstream = isRecord$2(value.upstream) ? value.upstream : void 0;
+	const ahead = count(upstream?.ahead);
+	const behind = count(upstream?.behind);
+	const upstreamRef = optionalText$1(upstream?.ref);
+	const conflicts = isRecord$2(value.rebase) && Array.isArray(value.rebase.conflicts) ? value.rebase.conflicts.filter((file) => typeof file === "string").slice(0, MAX_CONFLICTS) : void 0;
+	return {
+		added,
+		removed,
+		files,
+		...branch === void 0 ? {} : { branch },
+		...base === void 0 ? {} : { base },
+		...value.truncated === true ? { truncated: true } : {},
+		...upstreamRef === void 0 || ahead === void 0 || behind === void 0 ? {} : { upstream: {
+			ref: upstreamRef,
+			ahead,
+			behind
+		} },
+		...conflicts === void 0 ? {} : { rebase: { conflicts } }
+	};
+}
+function optionalErrorTarget$1(value) {
+	if (!isRecord$2(value)) return void 0;
+	if (value.action === "pull" || value.action === "rebase" || value.action === "abort-rebase") return { action: value.action };
+	if (value.action === "push") return value.forceRequired === true ? {
+		action: "push",
+		forceRequired: true
+	} : { action: "push" };
+}
+/** The session data channel: 'git_changes' payloads into the store. */
+const gitChangesChannel = gitChanges.channel({
+	channel: GIT_CHANGES_TYPE,
+	parse(input) {
+		if (!isRecord$2(input)) return null;
+		return {
+			changes: optionalChanges(input.changes),
+			pending: optionalText$1(input.pending),
+			error: optionalText$1(input.error),
+			errorTarget: optionalErrorTarget$1(input.errorTarget)
+		};
+	},
+	reduce(_current, next) {
+		return next;
+	}
+});
+/**
+* Asks the hub to pull, push, rebase or abort a paused rebase. `force` is only
+* ever sent after the reader confirmed a lease force for a rejected push.
+*/
+function requestGitSync(sessionId, action, force = false) {
+	const payload = action === "push" && force ? {
+		action: "push",
+		force: true
+	} : { action };
+	changesSender.store.state?.({
+		type: GIT_CHANGES_TYPE,
+		sessionId,
+		payload
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewApi.ts
+/**
+* The review tab's half of the session API: the changed-file list and one
+* file's hunks.
+*
+* The generated client owns the URL and the sealed transport, so nothing here
+* spells a route or reaches for `fetch`. What travels is file contents, which a
+* tunnel's relay must never see in the clear.
+*/
+const UNREACHABLE = "The session is unreachable.";
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** The message a reader is shown: the route's own words, or why there were none. */
+function messageOf(result) {
+	if (result.status === 0) return UNREACHABLE;
+	return result.error === "" ? `The session answered ${String(result.status)}.` : result.error;
+}
+async function fetchReviewSummary(sessionId, signal) {
+	const result = await api.session(sessionId).review(signal === void 0 ? {} : { signal });
+	if (!result.ok) return {
+		ok: false,
+		error: messageOf(result)
+	};
+	if (!isRecord$1(result.data) || !Array.isArray(result.data.files)) return {
+		ok: false,
+		error: "The session answered with no file list."
+	};
+	return {
+		ok: true,
+		summary: result.data
+	};
+}
+async function fetchReviewFile(sessionId, path, signal) {
+	const result = await api.session(sessionId).reviewFile({
+		query: { path },
+		...signal === void 0 ? {} : { signal }
+	});
+	if (!result.ok) return {
+		ok: false,
+		error: messageOf(result)
+	};
+	if (!isRecord$1(result.data) || !Array.isArray(result.data.hunks)) return {
+		ok: false,
+		error: "The session answered with no diff."
+	};
+	return {
+		ok: true,
+		diff: result.data
+	};
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewStore.ts
+const gitReview = defineSessionStore({ comments: [] });
+function addReviewComment(sessionId, comment) {
+	const id = globalThis.crypto.randomUUID();
+	gitReview.update(sessionId, (current) => ({ comments: [...current.comments, {
+		...comment,
+		id
+	}] }));
+}
+function removeReviewComment(sessionId, id) {
+	gitReview.update(sessionId, (current) => ({ comments: current.comments.filter((comment) => comment.id !== id) }));
+}
+function clearReviewComments(sessionId) {
+	gitReview.update(sessionId, () => ({ comments: [] }));
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewView.ts
+/**
+* Pure wording for what the review tab sends the agent, and the one send.
+*
+* Both messages go as `enqueue_automatic`: the host stores it and starts a turn
+* at once when the agent is idle, or after the current one. A `prompt` frame
+* instead fails while a turn runs, and a review lost to that is the worst kind
+* of lost work.
+*/
+/** The opening line of a review, naming what was reviewed. */
+function reviewHeading(count, branch, base) {
+	return `I reviewed ${branch === void 0 ? "this checkout" : `branch ${branch}`} (${base === void 0 ? "its uncommitted changes" : `its changes against ${base}`}) and left ${count === 1 ? "one review comment" : `${String(count)} review comments`}. ${count === 1 ? "Please address it." : "Please address them all."}`;
+}
+/** What "ask agent to resolve" sends: the files, and the steps that finish a paused rebase. */
+function conflictPrompt(branch, conflicts) {
+	const files = conflicts.length === 0 ? "- (git reports no unmerged paths yet)" : conflicts.map((file) => `- ${file}`).join("\n");
+	return [
+		`A rebase of ${branch ?? "this checkout"} stopped on conflicts in:`,
+		"",
+		files,
+		"",
+		"Please resolve them:",
+		"1. Fix the conflict markers in each file, keeping the intent of both sides.",
+		"2. `git add` each resolved file.",
+		"3. Run `GIT_EDITOR=true git rebase --continue`, and repeat if it stops again.",
+		"",
+		"Do not push. I will push from the cockpit once the rebase is done."
+	].join("\n");
+}
+/**
+* Hands one message to the session's queue. Returns the reason it failed, or
+* undefined once the host took it. The sender throws when the session is not
+* connected, which is the only failure a caller can still act on.
+*/
+function deliverToAgent(send, sessionId, message) {
+	try {
+		send(sessionId, {
+			type: "enqueue_automatic",
+			message
+		});
+		return;
+	} catch (error) {
+		return error instanceof Error ? error.message : "The session did not take the message.";
+	}
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/GitReviewBrowser.tsx
+/**
+* The review tab's file list: every changed file, grouped the way the files
+* drawer groups them, with its status, its line counts and its comments.
+*
+* DESIGN PATTERNS:
+* - Picking a row scrolls the diff pane to that file; the list never opens a
+*   tab of its own. One tab holds the whole review.
+* - Grouped while the whole list is in view, flat while a search is active:
+*   a reader searching is pinpointing one path, and headers around two matches
+*   only get in the way.
+* - Each row is a button, reachable with Tab; arrow keys move and pick in one
+*   step, so the diff follows the cursor.
+*
+* AVOID:
+* - Colour classes outside the token set.
+*/
+const STATUS_MARK = {
+	added: {
+		letter: "A",
+		tone: "text-doom-green",
+		label: "added"
+	},
+	modified: {
+		letter: "M",
+		tone: "text-doom-yellow",
+		label: "modified"
+	},
+	deleted: {
+		letter: "D",
+		tone: "text-doom-red",
+		label: "deleted"
+	},
+	untracked: {
+		letter: "U",
+		tone: "text-doom-blue",
+		label: "untracked"
+	},
+	conflicted: {
+		letter: "C",
+		tone: "text-doom-red",
+		label: "conflicted"
+	}
+};
+function GitReviewBrowser({ files, activePath, commentCounts, onPick }) {
+	const [query, setQuery] = useState("");
+	const needle = query.trim().toLocaleLowerCase();
+	const shown = needle === "" ? files : files.filter((file) => file.path.toLocaleLowerCase().includes(needle));
+	const groups = needle === "" ? groupByDirectory(shown, (file) => file.path) : [{
+		prefix: "",
+		items: [...shown]
+	}];
+	const ordered = groups.flatMap((group) => group.items);
+	/** Arrow keys pick the neighbouring row and move focus with it, so the diff follows the cursor. */
+	const onKeyDown = (event) => {
+		if (event.key !== "ArrowDown" && event.key !== "ArrowUp") return;
+		if (ordered.length === 0) return;
+		event.preventDefault();
+		const current = ordered.findIndex((file) => file.path === activePath);
+		const step = event.key === "ArrowDown" ? 1 : -1;
+		const next = current === -1 ? 0 : (current + step + ordered.length) % ordered.length;
+		const file = ordered[next];
+		if (file === void 0) return;
+		onPick(file.path);
+		event.currentTarget.closest("[data-git-review-list]")?.querySelectorAll("[data-git-review-row]")[next]?.focus();
+	};
+	return /* @__PURE__ */ jsxs("nav", {
+		"data-testid": "git-review-browser",
+		"aria-label": "changed files",
+		className: "flex min-h-0 w-64 shrink-0 flex-col border-r border-doom-border-soft",
+		children: [/* @__PURE__ */ jsxs("div", {
+			className: "flex shrink-0 flex-col gap-1 px-3 pt-2.5 pb-1.5",
+			children: [/* @__PURE__ */ jsx(Input, {
+				"data-testid": "git-review-search",
+				"aria-label": "search changed file paths",
+				size: "sm",
+				value: query,
+				placeholder: "search paths…",
+				onChange: (event) => setQuery(event.target.value)
+			}), /* @__PURE__ */ jsx("span", {
+				className: "text-2xs text-doom-faint",
+				children: needle === "" ? `${String(files.length)} changed` : `${String(shown.length)} of ${String(files.length)} match`
+			})]
+		}), /* @__PURE__ */ jsxs("div", {
+			"data-git-review-list": true,
+			className: "min-h-0 flex-1 overflow-y-auto pb-2",
+			children: [groups.map((group) => /* @__PURE__ */ jsxs("div", { children: [group.prefix === "" ? null : /* @__PURE__ */ jsx("div", {
+				className: "truncate px-3 pt-2 pb-1 text-2xs font-bold tracking-wide text-doom-faint",
+				children: group.prefix
+			}), group.items.map((file) => {
+				const mark = STATUS_MARK[file.status];
+				const comments = commentCounts[file.path] ?? 0;
+				const active = file.path === activePath;
+				return /* @__PURE__ */ jsxs(Button, {
+					variant: "ghost",
+					size: "card",
+					"data-git-review-row": true,
+					"aria-current": active ? "true" : void 0,
+					"data-testid": `git-review-browser-file-${file.path}`,
+					title: `${file.path} (${mark.label})`,
+					onClick: () => onPick(file.path),
+					onKeyDown,
+					className: `min-w-0 flex-row items-center gap-1.5 rounded-none border-l-2 py-1.5 ${group.prefix === "" ? "px-3" : "pr-3 pl-5"} ${active ? "border-doom-blue bg-doom-panel" : "border-transparent hover:bg-doom-panel/60"}`,
+					children: [
+						/* @__PURE__ */ jsx("span", {
+							"aria-label": mark.label,
+							className: `w-2.5 shrink-0 text-2xs font-bold ${mark.tone}`,
+							children: mark.letter
+						}),
+						/* @__PURE__ */ jsx("span", {
+							className: "min-w-0 flex-1 truncate text-xs font-bold text-doom-hi",
+							children: groupRowLabel(group.prefix, file.path)
+						}),
+						comments === 0 ? null : /* @__PURE__ */ jsxs("span", {
+							className: "flex shrink-0 items-center gap-0.5 text-2xs text-doom-blue",
+							title: `${String(comments)} comments`,
+							children: [/* @__PURE__ */ jsx(MessageIcon, {
+								"aria-hidden": true,
+								className: "h-2.5 w-2.5"
+							}), comments]
+						}),
+						file.binary ? /* @__PURE__ */ jsx("span", {
+							className: "shrink-0 text-2xs text-doom-faint",
+							children: "binary"
+						}) : /* @__PURE__ */ jsxs("span", {
+							className: "shrink-0 text-2xs",
+							children: [
+								/* @__PURE__ */ jsxs("span", {
+									className: "text-doom-green",
+									children: ["+", file.added]
+								}),
+								" ",
+								/* @__PURE__ */ jsxs("span", {
+									className: "text-doom-red",
+									children: ["-", file.removed]
+								})
+							]
+						})
+					]
+				}, file.path);
+			})] }, group.prefix === "" ? "(root)" : group.prefix)), ordered.length === 0 ? /* @__PURE__ */ jsx("p", {
+				className: "px-3 py-2 text-2xs text-doom-faint",
+				children: "no path matches"
+			}) : null]
+		})]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/GitSyncBar.tsx
+/**
+* The review tab's header: what is being reviewed, and the manual sync that
+* goes with it.
+*
+* DESIGN PATTERNS:
+* - Everything here is a report or a request. The hub runs the git, one
+*   command per session, and answers on the channel: pending while it runs,
+*   an error target when it fails, a paused rebase when it stops on conflicts.
+* - A push the remote rejects is not an error to shrug at: the strip asks
+*   before forcing, and the force it sends is a lease, which git refuses if
+*   the remote holds commits this branch never fetched and integrated.
+* - A paused rebase blocks the sync buttons. The two ways out are named on the
+*   banner, and abort says what it throws away.
+*
+* AVOID:
+* - Colour classes outside the token set.
+*/
+function GitSyncBar({ changes, mergeBase, pending, error, errorTarget, onSync, onForcePush, onAskAgent, onDismissError }) {
+	const busy = pending !== void 0;
+	const paused = changes?.rebase !== void 0;
+	const forceRequired = errorTarget?.action === "push" && "forceRequired" in errorTarget && errorTarget.forceRequired === true;
+	const syncError = error !== void 0 && !forceRequired ? error : void 0;
+	const upstream = changes?.upstream;
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-sync-bar",
+		className: "flex shrink-0 flex-col gap-2 border-b border-doom-border-soft px-3 py-2.5 sm:px-[26px]",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex min-w-0 flex-wrap items-center gap-x-3 gap-y-1.5",
+				children: [
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex min-w-0 items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx(BranchIcon, {
+								"aria-hidden": true,
+								className: "h-3.5 w-3.5 shrink-0 text-doom-faint"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								"data-testid": "git-review-branch",
+								className: "truncate text-sm font-bold text-doom-hi",
+								children: changes?.branch ?? "detached HEAD"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "shrink-0 text-xs text-doom-faint",
+								children: changes?.base === void 0 ? "uncommitted changes" : `vs ${changes.base}`
+							}),
+							mergeBase === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+								className: "shrink-0 text-2xs text-doom-faint",
+								children: ["from ", mergeBase]
+							})
+						]
+					}),
+					changes === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+						"data-testid": "git-review-totals",
+						className: "flex shrink-0 items-center gap-1.5 text-xs",
+						children: [
+							/* @__PURE__ */ jsxs("span", {
+								className: "font-bold text-doom-green",
+								children: ["+", changes.added]
+							}),
+							/* @__PURE__ */ jsxs("span", {
+								className: "font-bold text-doom-red",
+								children: ["-", changes.removed]
+							}),
+							/* @__PURE__ */ jsxs("span", {
+								className: "text-doom-faint",
+								children: [
+									changes.files,
+									changes.truncated ? "+" : "",
+									" ",
+									changes.files === 1 ? "file" : "files"
+								]
+							})
+						]
+					}),
+					/* @__PURE__ */ jsx("span", { className: "min-w-0 flex-1" }),
+					upstream === void 0 ? /* @__PURE__ */ jsx("span", {
+						className: "shrink-0 text-2xs text-doom-faint",
+						children: "no upstream yet"
+					}) : /* @__PURE__ */ jsxs("span", {
+						className: "shrink-0 text-2xs text-doom-faint",
+						title: upstream.ref,
+						children: [
+							"↑",
+							upstream.ahead,
+							" ↓",
+							upstream.behind,
+							" ",
+							upstream.ref
+						]
+					}),
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex shrink-0 items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx(Button, {
+								size: "xs",
+								"data-testid": "git-sync-pull",
+								disabled: busy || paused || upstream === void 0,
+								title: upstream === void 0 ? "push once to set an upstream" : `fetch, then rebase onto ${upstream.ref}`,
+								onClick: () => onSync("pull"),
+								children: "pull"
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								size: "xs",
+								"data-testid": "git-sync-push",
+								disabled: busy || paused || changes?.branch === void 0,
+								title: upstream === void 0 ? "push and set the upstream" : `push to ${upstream.ref}`,
+								onClick: () => onSync("push"),
+								children: "push"
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								size: "xs",
+								"data-testid": "git-sync-rebase",
+								disabled: busy || paused || changes?.base === void 0,
+								title: changes?.base === void 0 ? "no base branch to rebase onto" : `fetch, then rebase onto ${changes.base}`,
+								onClick: () => onSync("rebase"),
+								children: "rebase"
+							})
+						]
+					})
+				]
+			}),
+			pending === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+				"data-testid": "git-sync-pending",
+				className: "flex min-w-0 items-center gap-1.5",
+				children: [/* @__PURE__ */ jsx(Spinner, {
+					className: "h-3 w-3 shrink-0 text-doom-faint",
+					label: pending
+				}), /* @__PURE__ */ jsx("span", {
+					className: "min-w-0 truncate text-xs text-doom-dim",
+					children: pending
+				})]
+			}),
+			syncError === void 0 ? null : /* @__PURE__ */ jsxs("div", {
+				role: "alert",
+				"data-testid": "git-sync-error",
+				className: "flex min-w-0 items-start gap-1.5 text-2xs text-doom-red",
+				children: [
+					/* @__PURE__ */ jsx(AlertIcon, {
+						"aria-hidden": true,
+						className: "mt-px h-3 w-3 shrink-0"
+					}),
+					/* @__PURE__ */ jsx("span", {
+						className: "min-w-0 flex-1",
+						children: syncError
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "xs",
+						className: "h-auto min-h-0 px-1 py-0 text-2xs",
+						onClick: onDismissError,
+						children: "dismiss"
+					})
+				]
+			}),
+			forceRequired ? /* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-push-force-confirm",
+				className: "flex min-w-0 flex-wrap items-center gap-2 rounded-md border border-doom-edge-yellow bg-doom-tint-yellow px-2.5 py-2",
+				children: [
+					/* @__PURE__ */ jsx("span", {
+						className: "min-w-0 flex-1 text-xs text-doom-hi",
+						children: "The remote branch has commits yours replaced, usually after a rebase. Force push with lease? It is refused if the remote holds commits you never fetched and integrated."
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "danger-outline",
+						size: "xs",
+						"data-testid": "git-push-force",
+						disabled: busy,
+						onClick: onForcePush,
+						children: "force push"
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "xs",
+						"data-testid": "git-push-force-cancel",
+						onClick: onDismissError,
+						children: "cancel"
+					})
+				]
+			}) : null,
+			changes?.rebase === void 0 ? null : /* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-rebase-banner",
+				className: "flex min-w-0 flex-col gap-1.5 rounded-md border border-doom-edge-red bg-doom-tint-red px-2.5 py-2",
+				children: [
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex min-w-0 items-center gap-1.5",
+						children: [/* @__PURE__ */ jsx(StatusBadge, {
+							tone: "error",
+							size: "xs",
+							children: "rebase paused"
+						}), /* @__PURE__ */ jsx("span", {
+							className: "text-xs text-doom-hi",
+							children: changes.rebase.conflicts.length === 0 ? "git stopped the rebase" : `conflicts in ${String(changes.rebase.conflicts.length)} ${changes.rebase.conflicts.length === 1 ? "file" : "files"}`
+						})]
+					}),
+					changes.rebase.conflicts.length === 0 ? null : /* @__PURE__ */ jsx("ul", {
+						className: "flex flex-col gap-0.5 pl-1",
+						children: changes.rebase.conflicts.map((file) => /* @__PURE__ */ jsx("li", {
+							className: "truncate font-mono text-2xs text-doom-dim",
+							children: file
+						}, file))
+					}),
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex flex-wrap items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx(Button, {
+								variant: "primary",
+								size: "xs",
+								"data-testid": "git-rebase-ask-agent",
+								disabled: busy,
+								onClick: onAskAgent,
+								children: "ask agent to resolve"
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								variant: "danger-outline",
+								size: "xs",
+								"data-testid": "git-rebase-abort",
+								disabled: busy,
+								onClick: () => onSync("abort-rebase"),
+								children: "abort rebase"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "text-2xs text-doom-faint",
+								children: "abort discards any conflict resolution in progress"
+							})
+						]
+					})
+				]
+			})
+		]
+	});
+}
+const NO_FILES = [];
+/** Stable, URL-safe element id for one file's section. */
+function sectionId(index) {
+	return `git-review-file-${String(index)}`;
+}
+function sideOf(row) {
+	return row.marker === "-" ? "old" : "new";
+}
+function GitReviewView({ sync, summary, files, comments, onLoadFile, onAddComment, onRemoveComment, onSendReview, onDiscard, sendError, initialDraft }) {
+	const entries = summary.state === "ready" ? summary.summary.files : NO_FILES;
+	const [openOverride, setOpenOverride] = useState({});
+	const [picked, setPicked] = useState();
+	const activePath = picked ?? entries[0]?.path;
+	const [draft, setDraft] = useState(initialDraft);
+	useEffect(() => {
+		for (const file of entries.slice(0, 20)) if (files[file.path] === void 0) onLoadFile(file.path);
+	}, [
+		entries,
+		files,
+		onLoadFile
+	]);
+	const commentCounts = {};
+	for (const comment of comments) commentCounts[comment.path] = (commentCounts[comment.path] ?? 0) + 1;
+	const isOpen = (path, index) => openOverride[path] ?? index < 20;
+	const open = (path) => {
+		setOpenOverride((current) => current[path] === true ? current : {
+			...current,
+			[path]: true
+		});
+		if (files[path] === void 0) onLoadFile(path);
+	};
+	const pick = (path) => {
+		setPicked(path);
+		open(path);
+		const index = entries.findIndex((file) => file.path === path);
+		globalThis.document?.getElementById(sectionId(index))?.scrollIntoView({ block: "start" });
+	};
+	const toggle = (path, index) => {
+		if (isOpen(path, index)) setOpenOverride((current) => ({
+			...current,
+			[path]: false
+		}));
+		else open(path);
+	};
+	const submitDraft = (body) => {
+		if (draft === void 0) return;
+		onAddComment({
+			path: draft.path,
+			relPath: draft.path,
+			side: draft.selection.side,
+			startLine: draft.selection.startLine,
+			endLine: draft.selection.endLine,
+			snippet: draft.selection.snippet,
+			body: body.trim()
+		});
+		setDraft(void 0);
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-review-panel",
+		className: "flex min-h-0 flex-1 flex-col",
+		children: [
+			/* @__PURE__ */ jsx(GitSyncBar, {
+				...sync,
+				...summary.state === "ready" && summary.summary.mergeBase !== void 0 ? { mergeBase: summary.summary.mergeBase } : {}
+			}),
+			summary.state === "loading" ? /* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-review-loading",
+				className: "flex flex-1 items-start gap-2 px-4 py-6",
+				children: [/* @__PURE__ */ jsx(Spinner, {
+					className: "h-3 w-3 text-doom-faint",
+					label: "reading changes"
+				}), /* @__PURE__ */ jsx("span", {
+					className: "text-xs text-doom-dim",
+					children: "reading changes…"
+				})]
+			}) : summary.state === "error" ? /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				"data-testid": "git-review-error",
+				className: "flex-1 px-4 py-6 text-xs text-doom-red",
+				children: summary.error
+			}) : !summary.summary.repository ? /* @__PURE__ */ jsx(EmptyState, {
+				"data-testid": "git-review-no-repository",
+				className: "px-4 py-8",
+				title: "not a git checkout",
+				description: "this session's folder is not inside a git repository, so there is nothing to review."
+			}) : entries.length === 0 ? /* @__PURE__ */ jsx(EmptyState, {
+				"data-testid": "git-review-empty",
+				className: "px-4 py-8",
+				title: "no changes",
+				description: summary.summary.base === void 0 ? "nothing uncommitted in this checkout." : `nothing differs from ${summary.summary.base}, committed or not.`
+			}) : /* @__PURE__ */ jsxs("div", {
+				className: "flex min-h-0 flex-1",
+				children: [/* @__PURE__ */ jsx(GitReviewBrowser, {
+					files: entries,
+					commentCounts,
+					onPick: pick,
+					...activePath === void 0 ? {} : { activePath }
+				}), /* @__PURE__ */ jsxs("div", {
+					"data-testid": "git-review-diffs",
+					className: "min-h-0 min-w-0 flex-1 overflow-y-auto",
+					children: [summary.summary.truncated ? /* @__PURE__ */ jsx("p", {
+						className: "px-4 pt-2 text-2xs text-doom-faint",
+						children: "more files changed than the review lists; the rest are left out."
+					}) : null, entries.map((file, index) => /* @__PURE__ */ jsx(FileSection, {
+						id: sectionId(index),
+						entry: file,
+						state: files[file.path],
+						collapsed: !isOpen(file.path, index),
+						comments: comments.filter((comment) => comment.path === file.path),
+						draft: draft?.path === file.path ? draft.selection : void 0,
+						onToggle: () => toggle(file.path, index),
+						onSelect: (selection) => {
+							setPicked(file.path);
+							setDraft({
+								path: file.path,
+								selection
+							});
+						},
+						onSubmitDraft: submitDraft,
+						onCancelDraft: () => setDraft(void 0),
+						onRemoveComment,
+						onRetry: () => onLoadFile(file.path)
+					}, file.path))]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-review-footer",
+				className: "flex shrink-0 flex-wrap items-center gap-2 border-t border-doom-border-soft bg-doom-panel px-3 py-2 sm:px-[26px]",
+				children: [
+					/* @__PURE__ */ jsx(MessageIcon, {
+						"aria-hidden": true,
+						className: "h-3 w-3 text-doom-faint"
+					}),
+					/* @__PURE__ */ jsx("span", {
+						"data-testid": "git-review-comment-count",
+						className: "text-xs text-doom-dim",
+						children: comments.length === 0 ? "no comments yet: select lines or click a line number" : `${String(comments.length)} ${comments.length === 1 ? "comment" : "comments"}`
+					}),
+					/* @__PURE__ */ jsx("span", { className: "min-w-0 flex-1" }),
+					sendError === void 0 ? null : /* @__PURE__ */ jsx("span", {
+						role: "alert",
+						"data-testid": "git-review-send-error",
+						className: "min-w-0 truncate text-2xs text-doom-red",
+						children: sendError
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "xs",
+						"data-testid": "git-review-discard",
+						disabled: comments.length === 0,
+						onClick: onDiscard,
+						children: "discard"
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						size: "sm",
+						"data-testid": "git-review-send",
+						disabled: comments.length === 0,
+						onClick: onSendReview,
+						children: "send review"
+					})
+				]
+			})
+		]
+	});
+}
+const STATUS_WORD = {
+	added: "added",
+	modified: "modified",
+	deleted: "deleted",
+	untracked: "new, untracked",
+	conflicted: "conflicted"
+};
+/** One file: a pinned header, then its diff with comments drawn under the lines they are about. */
+function FileSection({ id, entry, state, collapsed, comments, draft, onToggle, onSelect, onSubmitDraft, onCancelDraft, onRemoveComment, onRetry }) {
+	const renderAfterRow = (row) => {
+		const side = sideOf(row);
+		const here = comments.filter((comment) => (comment.side ?? "new") === side && (comment.endLine ?? comment.startLine) === row.line);
+		const drafting = draft !== void 0 && draft.side === side && draft.endLine === row.line;
+		if (here.length === 0 && !drafting) return null;
+		return /* @__PURE__ */ jsxs("div", {
+			className: "flex flex-col gap-1.5 border-y border-doom-border-soft bg-doom-bg px-2 py-1.5 whitespace-normal",
+			children: [here.map((comment) => /* @__PURE__ */ jsxs("div", {
+				"data-testid": `git-review-comment-${comment.id}`,
+				className: "flex min-w-0 items-start gap-2 rounded-md border border-doom-border-soft bg-doom-panel px-2 py-1.5",
+				children: [
+					/* @__PURE__ */ jsx(MessageIcon, {
+						"aria-hidden": true,
+						className: "mt-0.5 h-3 w-3 shrink-0 text-doom-blue"
+					}),
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex min-w-0 flex-1 flex-col gap-0.5",
+						children: [/* @__PURE__ */ jsx("span", {
+							className: "text-2xs text-doom-faint",
+							children: reviewCommentAnchor(comment)
+						}), /* @__PURE__ */ jsx("span", {
+							className: "text-xs whitespace-pre-wrap text-doom-hi",
+							children: comment.body
+						})]
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "icon",
+						"aria-label": "remove comment",
+						title: "remove comment",
+						onClick: () => onRemoveComment(comment.id),
+						children: /* @__PURE__ */ jsx(CloseIcon, { className: "h-3 w-3" })
+					})
+				]
+			}, comment.id)), drafting ? /* @__PURE__ */ jsx("div", {
+				className: "rounded-md border border-doom-border bg-doom-panel",
+				children: /* @__PURE__ */ jsx(ReviewCommentDraft, {
+					snippet: draft.snippet,
+					startLine: draft.startLine,
+					endLine: draft.endLine,
+					side: draft.side,
+					testIdPrefix: "git-review-comment",
+					onSubmit: onSubmitDraft,
+					onCancel: onCancelDraft
+				})
+			}) : null]
+		});
+	};
+	return /* @__PURE__ */ jsxs("section", {
+		id,
+		"data-testid": `git-review-file-${entry.path}`,
+		className: "border-b border-doom-border-soft",
+		children: [/* @__PURE__ */ jsxs(Button, {
+			variant: "ghost",
+			size: "card",
+			"aria-expanded": !collapsed,
+			onClick: onToggle,
+			className: "sticky top-0 z-10 flex-row items-center gap-1.5 rounded-none border-b border-doom-border-soft bg-doom-rail px-3 py-1.5 hover:bg-doom-panel sm:px-4",
+			children: [
+				collapsed ? /* @__PURE__ */ jsx(ChevronRightIcon, {
+					"aria-hidden": true,
+					className: "h-3 w-3 shrink-0 text-doom-faint"
+				}) : /* @__PURE__ */ jsx(ChevronDownIcon, {
+					"aria-hidden": true,
+					className: "h-3 w-3 shrink-0 text-doom-faint"
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: "min-w-0 flex-1 truncate font-mono text-xs font-bold text-doom-hi",
+					children: entry.path
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: "shrink-0 text-2xs text-doom-faint",
+					children: STATUS_WORD[entry.status]
+				}),
+				comments.length === 0 ? null : /* @__PURE__ */ jsxs("span", {
+					className: "flex shrink-0 items-center gap-0.5 text-2xs text-doom-blue",
+					children: [/* @__PURE__ */ jsx(MessageIcon, {
+						"aria-hidden": true,
+						className: "h-2.5 w-2.5"
+					}), comments.length]
+				}),
+				entry.binary ? null : /* @__PURE__ */ jsxs("span", {
+					className: "shrink-0 text-2xs",
+					children: [
+						/* @__PURE__ */ jsxs("span", {
+							className: "text-doom-green",
+							children: ["+", entry.added]
+						}),
+						" ",
+						/* @__PURE__ */ jsxs("span", {
+							className: "text-doom-red",
+							children: ["-", entry.removed]
+						})
+					]
+				})
+			]
+		}), collapsed ? null : state === void 0 || state.state === "loading" ? /* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2 px-4 py-3",
+			children: [/* @__PURE__ */ jsx(Spinner, {
+				className: "h-3 w-3 text-doom-faint",
+				label: `loading ${entry.path}`
+			}), /* @__PURE__ */ jsx("span", {
+				className: "text-2xs text-doom-faint",
+				children: "loading diff…"
+			})]
+		}) : state.state === "error" ? /* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2 px-4 py-3",
+			children: [/* @__PURE__ */ jsx("span", {
+				role: "alert",
+				className: "text-2xs text-doom-red",
+				children: state.error
+			}), /* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				size: "xs",
+				onClick: onRetry,
+				children: "retry"
+			})]
+		}) : state.diff.binary ? /* @__PURE__ */ jsx("p", {
+			className: "px-4 py-3 text-2xs text-doom-faint",
+			children: "binary file, not drawn"
+		}) : state.diff.tooLarge ? /* @__PURE__ */ jsx("p", {
+			className: "px-4 py-3 text-2xs text-doom-faint",
+			children: "this diff is too large to draw here"
+		}) : /* @__PURE__ */ jsx(DiffView, {
+			hunks: state.diff.hunks,
+			testId: `git-review-diff-${id}`,
+			onSelect,
+			renderAfterRow,
+			className: "py-1"
+		})]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/GitReviewPanel.tsx
+/**
+* The review tab: this session's changes against its base, the comments on
+* them, and the manual sync beside them.
+*
+* DESIGN PATTERNS:
+* - Opened from the '# diff' group as a transient tab, one per session.
+* - The hub's channel says when something changed (counts, base, a paused
+*   rebase); the panel refetches the file list then, and each file's hunks
+*   when it is opened. Nothing polls.
+* - Comments live in a session store and are cleared only after the host took
+*   the message. Both messages go as `enqueue_automatic`, which queues behind a
+*   running turn instead of failing.
+*
+* AVOID:
+* - Sending sync as a session frame. Sync is a channel command; the hub runs
+*   it with the configured auth, one command per session.
+*/
+const REVIEW_TAB_ID = "git-review";
+function reviewTab() {
+	return {
+		id: REVIEW_TAB_ID,
+		label: "review",
+		panel: GitReviewPanel
+	};
+}
+function GitReviewPanel({ sessionId, sendSessionFrame }) {
+	const activity = useStore(gitChanges.store, (state) => gitChanges.select(state, sessionId));
+	const comments = useStore(gitReview.store, (state) => gitReview.select(state, sessionId).comments);
+	const [summary, setSummary] = useState({ state: "loading" });
+	const [files, setFiles] = useState({});
+	const [sendError, setSendError] = useState();
+	const [dismissedError, setDismissedError] = useState();
+	const changes = activity.changes;
+	const fingerprint = JSON.stringify([
+		changes?.branch,
+		changes?.base,
+		changes?.added,
+		changes?.removed,
+		changes?.files,
+		changes?.rebase?.conflicts.length
+	]);
+	useEffect(() => {
+		if (sessionId === null) return;
+		const controller = new AbortController();
+		fetchReviewSummary(sessionId, controller.signal).then((result) => {
+			if (controller.signal.aborted) return;
+			setSummary(result.ok ? {
+				state: "ready",
+				summary: result.summary
+			} : {
+				state: "error",
+				error: result.error
+			});
+			setFiles({});
+		}).catch((error) => {
+			if (controller.signal.aborted) return;
+			setSummary({
+				state: "error",
+				error: error instanceof Error ? error.message : "The changes could not be read."
+			});
+		});
+		return () => controller.abort();
+	}, [sessionId, fingerprint]);
+	const loadFile = useCallback((path) => {
+		if (sessionId === null) return;
+		setFiles((current) => ({
+			...current,
+			[path]: { state: "loading" }
+		}));
+		const settle = (state) => setFiles((current) => ({
+			...current,
+			[path]: state
+		}));
+		fetchReviewFile(sessionId, path).then((result) => settle(result.ok ? {
+			state: "ready",
+			diff: result.diff
+		} : {
+			state: "error",
+			error: result.error
+		})).catch((error) => settle({
+			state: "error",
+			error: error instanceof Error ? error.message : "The diff could not be read."
+		}));
+	}, [sessionId]);
+	if (sessionId === null) return null;
+	const branch = summary.state === "ready" ? summary.summary.branch : changes?.branch;
+	const base = summary.state === "ready" ? summary.summary.base : changes?.base;
+	const error = activity.error === dismissedError ? void 0 : activity.error;
+	const send = (message, onSent) => {
+		const failure = deliverToAgent(sendSessionFrame, sessionId, message);
+		setSendError(failure);
+		if (failure === void 0) onSent?.();
+	};
+	return /* @__PURE__ */ jsx(GitReviewView, {
+		sync: {
+			...changes === void 0 ? {} : { changes },
+			...activity.pending === void 0 ? {} : { pending: activity.pending },
+			...error === void 0 ? {} : { error },
+			...activity.errorTarget === void 0 || error === void 0 ? {} : { errorTarget: activity.errorTarget },
+			onSync: (action) => requestGitSync(sessionId, action),
+			onForcePush: () => requestGitSync(sessionId, "push", true),
+			onAskAgent: () => send(conflictPrompt(branch, changes?.rebase?.conflicts ?? [])),
+			onDismissError: () => setDismissedError(activity.error)
+		},
+		summary,
+		files,
+		comments,
+		onLoadFile: loadFile,
+		onAddComment: (comment) => addReviewComment(sessionId, comment),
+		onRemoveComment: (id) => removeReviewComment(sessionId, id),
+		onSendReview: () => send(buildReviewPrompt(comments, reviewHeading(comments.length, branch, base)), () => clearReviewComments(sessionId)),
+		onDiscard: () => clearReviewComments(sessionId),
+		...sendError === void 0 ? {} : { sendError }
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/activity-group/diff.web.ts
+var diff_web_default = defineActivityGroup({
+	keys: "g d",
+	activeSource: gitChangesActivitySource,
+	marksBackgroundWork: false,
+	transientTab: reviewTab,
+	order: 28
+});
 //#endregion
 //#region src/types/webWorktrees.ts
 /**
@@ -678,9 +2199,70 @@ var git_web_default = defineActivityGroup({
 	order: 30
 });
 //#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/channel/gitChanges.web.ts
+var gitChanges_web_default = defineChannelFile(gitChangesChannel);
+//#endregion
 //#region src/extensions/workspaces/sessions/(frontend)/channel/gitWorktrees.web.ts
 var gitWorktrees_web_default = defineChannelFile(worktreesChannel);
 //#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/DiffActivitySection.tsx
+/**
+* The '# diff' group's body: this session's code change against its base.
+*
+* DESIGN PATTERNS:
+* - One lane, `+A -R`. Files, base, upstream and a paused rebase live in the
+*   review tab's header, which this lane and the group's name both open.
+* - Stays clickable at zero, because the review tab is also where pull, push
+*   and rebase live.
+* - Separate from '# git': worktrees are repository management, this is the
+*   session's own change.
+*
+* AVOID:
+* - Doing work here. This section reports and opens the tab.
+*/
+function DiffActivitySection({ sessionId, openTransientTab }) {
+	const session = useStore(gitChanges.store, (state) => gitChanges.select(state, sessionId));
+	const changes = session.changes;
+	if (sessionId === null || changes === void 0) return /* @__PURE__ */ jsx("p", {
+		"data-testid": "activity-summary-diff",
+		className: "px-2 text-xs text-doom-faint",
+		children: "idle"
+	});
+	const zero = changes.added === 0 && changes.removed === 0;
+	const against = changes.base === void 0 ? "uncommitted" : `vs ${changes.base}`;
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex min-w-0 items-center gap-2 px-1",
+		children: [/* @__PURE__ */ jsxs(Button, {
+			variant: "ghost",
+			size: "xs",
+			"data-testid": "activity-diff-changes",
+			"aria-label": `review changes: ${String(changes.added)} added, ${String(changes.removed)} removed ${against}`,
+			title: `${String(changes.files)} ${changes.files === 1 ? "file" : "files"} ${against}`,
+			className: `gap-1.5 px-1 text-xs font-bold ${zero ? "text-doom-faint" : ""}`,
+			onClick: () => openTransientTab(reviewTab()),
+			children: [/* @__PURE__ */ jsxs("span", {
+				className: zero ? "" : "text-doom-green",
+				children: ["+", changes.added]
+			}), /* @__PURE__ */ jsxs("span", {
+				className: zero ? "" : "text-doom-red",
+				children: ["-", changes.removed]
+			})]
+		}), session.pending === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+			className: "flex min-w-0 items-center gap-1.5",
+			children: [/* @__PURE__ */ jsx(Spinner, {
+				className: "h-3 w-3 shrink-0 text-doom-faint",
+				label: session.pending
+			}), /* @__PURE__ */ jsx("span", {
+				className: "min-w-0 truncate text-xs text-doom-dim",
+				children: session.pending
+			})]
+		})]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/Diff.activity.diff.web.tsx
+var Diff_activity_diff_web_default = defineFill({ component: DiffActivitySection });
+//#endregion
 //#region src/extensions/workspaces/sessions/(frontend)/fill/_components/WorktreeCreateDialog.tsx
 function WorktreeSessionMenu({ sessionId, sessionReservationId }) {
 	return /* @__PURE__ */ jsx(DropdownMenuItem, {
@@ -808,8 +2390,19 @@ function WorktreesActivitySection({ sessionId, openTransientTab }) {
 //#region src/extensions/workspaces/sessions/(frontend)/fill/Worktrees.activity.git.web.tsx
 var Worktrees_activity_git_web_default = defineFill({ component: WorktreesActivitySection });
 //#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/lifecycle/_lib/start.web.ts
+/** Binds both hub channels' senders: worktrees, and this session's diff and sync. */
+function startGitRuntime(runtime) {
+	const stopWorktrees = startWorktreeRuntime(runtime);
+	const stopChanges = startGitChangesRuntime(runtime);
+	return () => {
+		stopChanges();
+		stopWorktrees();
+	};
+}
+//#endregion
 //#region src/extensions/workspaces/sessions/(frontend)/lifecycle/start.web.ts
-var start_web_default = defineWebLifecycle(startWorktreeRuntime);
+var start_web_default = defineWebLifecycle(startGitRuntime);
 //#endregion
 //#region src/extensions/workspaces/sessions/(frontend)/tool/_components/RunWorktreeToolMessage.tsx
 const ACTION_LABEL = {
@@ -868,21 +2461,30 @@ const via = (identity, value) => value === void 0 ? void 0 : {
 };
 const webPlugin = defineWebPlugin({
 	id: "git",
-	workspace: { get fills() {
-		return [via({
-			slot: "new-session",
-			id: "git-new-session"
-		}, GitNewSession_new_session_web_default)];
-	} },
+	workspace: {
+		get fills() {
+			return [via({
+				slot: "new-session",
+				id: "git-new-session"
+			}, GitNewSession_new_session_web_default)];
+		},
+		get repositorySettingsPanel() {
+			return git_web_default$1;
+		}
+	},
 	session: {
 		get activityGroups() {
-			return [via({ name: "git" }, git_web_default)];
+			return [via({ name: "diff" }, diff_web_default), via({ name: "git" }, git_web_default)];
 		},
 		get channels() {
-			return [via({ channel: "git_worktrees" }, gitWorktrees_web_default)];
+			return [via({ channel: "git_changes" }, gitChanges_web_default), via({ channel: "git_worktrees" }, gitWorktrees_web_default)];
 		},
 		get fills() {
 			return [
+				via({
+					slot: "activity.diff",
+					id: "diff"
+				}, Diff_activity_diff_web_default),
 				via({
 					slot: "session-menu",
 					id: "worktree"