@agimon-ai/doompi-git 0.0.1-alpha.4 → 0.0.1-alpha.40

package/dist/extensions/web.mjs

@@ -0,0 +1,2619 @@
+import { apiResponse, createApiClient, defineActivityGroup, defineApiRoutes, defineChannelFile, defineFill, defineGlobalStore, defineRepositorySettingsPanel, defineSessionStore, defineToolRenderer, defineWebLifecycle, defineWebPlugin, sessionApiAddress } from "@agimon-ai/doompi-core/web";
+import { AlertIcon, BranchIcon, Button, ChevronDownIcon, ChevronRightIcon, CloseIcon, Dialog, DialogBody, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, DiffView, Dot, DropdownMenuItem, EmptyState, Input, Label, MessageIcon, MessageItem, MessageItemBody, MessageItemHeader, OptionRow, RadioGroup, RadioGroupCard, ReviewCommentDraft, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, ShieldIcon, Spinner, StatusBadge, buildReviewPrompt, reviewCommentAnchor, toolTone } from "@agimon-ai/doompi-web-components";
+import { createElement, useCallback, useEffect, useRef, useState } from "react";
+import { sealedTransport } from "@agimon-ai/doompi-web-security/browser";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { useStore } from "@tanstack/react-store";
+//#region src/types/apiRoutes.ts
+/**
+* The routes the page calls, as data.
+*
+* No scope and no base path: the build reads both off
+* `src/extensions/(backend)/api/git/`, which mounts at global scope and so
+* answers workspace and session requests too. Each route answers only where it
+* belongs (auth on a workspace mount, the review on a session mount), so a
+* client accessor on the wrong scope gets a 404 rather than a second way in.
+*
+* Only what the browser calls is listed. The worktree routes stay HTTP for
+* other callers, but the dock drives worktrees over its channel.
+*/
+var apiRoutes_default = defineApiRoutes({
+	/** Workspace: the new-session dialog's branch list. */
+	branches: {
+		method: "GET",
+		path: "/branches",
+		response: apiResponse()
+	},
+	/** Workspace: a top-level worktree session on an existing or new branch. */
+	createSession: {
+		method: "POST",
+		path: "/sessions",
+		response: apiResponse()
+	},
+	/** Workspace: that workspace's saved remote auth, never the token itself. */
+	auth: {
+		method: "GET",
+		path: "/auth",
+		query: ["repositoryId"],
+		response: apiResponse()
+	},
+	/** Workspace: replaces that workspace's remote auth. Passkey step-up gated for remote devices. */
+	saveAuth: {
+		method: "PUT",
+		path: "/auth",
+		query: ["repositoryId"],
+		response: apiResponse()
+	},
+	/** Session: the files this session's checkout changed against its base. */
+	review: {
+		method: "GET",
+		path: "/review",
+		response: apiResponse()
+	},
+	/** Session: one changed file's hunks. */
+	reviewFile: {
+		method: "GET",
+		path: "/review/file",
+		query: ["path"],
+		response: apiResponse()
+	}
+});
+const api = createApiClient(apiRoutes_default, {
+	scopes: [
+		"global",
+		"workspace",
+		"session"
+	],
+	basePath: "git",
+	transport: (input, init) => sealedTransport.fetch(input, init),
+	sessionAddress: sessionApiAddress
+});
+//#endregion
+//#region src/extensions/workspaces/(frontend)/_lib/newSessionForm.ts
+const MAX_LISTED = 200;
+/** Local branches first, then remote-only ones, filtered by a case-insensitive substring. */
+function branchOptions(branches, query) {
+	const needle = query.trim().toLowerCase();
+	const matches = (text) => needle === "" || text.toLowerCase().includes(needle);
+	const local = branches.local.filter((branch) => matches(branch.name)).map((branch) => ({
+		key: `local:${branch.name}`,
+		name: branch.name,
+		current: branch.name === branches.current,
+		...branch.checkedOutAt === void 0 ? {} : { busyAt: branch.checkedOutAt }
+	}));
+	const remote = branches.remote.filter((branch) => matches(`${branch.remote}/${branch.name}`)).map((branch) => ({
+		key: `remote:${branch.remote}/${branch.name}`,
+		name: branch.name,
+		remote: branch.remote,
+		current: false
+	}));
+	return [...local, ...remote].slice(0, MAX_LISTED);
+}
+/** Every base a new branch can start from: the default first, then remote-tracking names, then local branches. */
+function baseOptions(branches) {
+	return [.../* @__PURE__ */ new Set([
+		...branches.defaultBase === void 0 ? [] : [branches.defaultBase],
+		...branches.remote.map((branch) => `${branch.remote}/${branch.name}`),
+		...branches.local.map((branch) => branch.name)
+	])];
+}
+/** Why the form cannot be submitted yet, or undefined when it can. */
+function formProblem$1(state) {
+	if (state.mode === "existing") {
+		if (state.selected === void 0) return "Pick a branch.";
+		if (state.selected.busyAt !== void 0) return `That branch is checked out at ${state.selected.busyAt}.`;
+	}
+	if (state.mode === "new" && state.newBranch.trim() === "") return "Name the new branch.";
+}
+/** The worktree create request for the form, or undefined in plain mode. */
+function createRequest(state) {
+	const name = state.name.trim();
+	const named = name === "" ? {} : { name };
+	if (state.mode === "existing" && state.selected !== void 0) return {
+		mode: "existing-branch",
+		branch: state.selected.name,
+		...state.selected.remote === void 0 ? {} : { remote: state.selected.remote },
+		...named
+	};
+	if (state.mode === "new") {
+		const baseRef = state.baseRef.trim();
+		return {
+			mode: "new-branch",
+			branch: state.newBranch.trim(),
+			...baseRef === "" ? {} : { baseRef },
+			...named
+		};
+	}
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/fill/_components/GitNewSessionDialog.tsx
+const MODES = [
+	{
+		mode: "existing",
+		label: "existing branch"
+	},
+	{
+		mode: "new",
+		label: "new branch"
+	},
+	{
+		mode: "plain",
+		label: "no branch"
+	}
+];
+function errorOf$1(body, status) {
+	return typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : `The cockpit answered ${String(status)}.`;
+}
+/**
+* The new-session dialog when git is installed: a worktree on an existing or a
+* new branch, or a plain session in the workspace root. A worktree session
+* starts at the top level of the rail, with no parent.
+*/
+function GitNewSessionDialog({ newSession }) {
+	const [branches, setBranches] = useState(null);
+	const [loadError, setLoadError] = useState("");
+	const [form, setForm] = useState({
+		mode: "existing",
+		newBranch: "",
+		baseRef: "",
+		name: ""
+	});
+	const [query, setQuery] = useState("");
+	const [error, setError] = useState("");
+	const [busy, setBusy] = useState(false);
+	const workspaceId = newSession?.workspaceId;
+	const request = newSession?.requestWithStepUp;
+	useEffect(() => {
+		if (workspaceId === void 0 || request === void 0) return;
+		let stale = false;
+		const url = api.workspace(workspaceId).branches.url();
+		request(url).then(async (response) => {
+			const body = await response.json().catch(() => void 0);
+			if (stale) return;
+			if (!response.ok) {
+				setLoadError(errorOf$1(body, response.status));
+				return;
+			}
+			const loaded = body;
+			setBranches(loaded);
+			setForm((current) => ({
+				...current,
+				baseRef: loaded.defaultBase ?? ""
+			}));
+		}).catch(() => {
+			if (!stale) setLoadError("The branches could not be loaded.");
+		});
+		return () => {
+			stale = true;
+		};
+	}, [workspaceId, request]);
+	if (newSession === void 0) return null;
+	const gitReady = branches?.repository === true && loadError === "";
+	const mode = gitReady || branches === null ? form.mode : "plain";
+	const state = {
+		...form,
+		mode
+	};
+	const problem = formProblem$1(state);
+	const options = branches === null ? [] : branchOptions(branches, query);
+	const bases = branches === null ? [] : baseOptions(branches);
+	const update = (patch) => setForm((current) => ({
+		...current,
+		...patch
+	}));
+	const submit = async () => {
+		if (busy || problem !== void 0) return;
+		setBusy(true);
+		setError("");
+		const body = createRequest(state);
+		let failure;
+		if (body === void 0) failure = await newSession.createPlain(state.name);
+		else try {
+			const response = await newSession.requestWithStepUp(api.workspace(newSession.workspaceId).createSession.url(), {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify(body)
+			});
+			const answer = await response.json().catch(() => void 0);
+			failure = response.ok ? await newSession.openCreated(answer.sessionId) : errorOf$1(answer, response.status);
+		} catch {
+			failure = "The cockpit is unreachable.";
+		}
+		if (failure === void 0) return;
+		setError(failure);
+		setBusy(false);
+	};
+	return /* @__PURE__ */ jsx(Dialog, {
+		open: true,
+		onOpenChange: (next) => !next && !busy && newSession.close(),
+		children: /* @__PURE__ */ jsxs(DialogContent, {
+			width: "md",
+			"data-testid": "new-session-dialog",
+			"aria-describedby": void 0,
+			children: [/* @__PURE__ */ jsx(DialogHeader, { children: /* @__PURE__ */ jsx(DialogTitle, { children: "new session" }) }), /* @__PURE__ */ jsxs(DialogBody, { children: [
+				/* @__PURE__ */ jsx("p", {
+					className: "truncate text-xs text-doom-faint",
+					title: newSession.workspaceRoot,
+					children: newSession.workspaceRoot
+				}),
+				gitReady ? /* @__PURE__ */ jsx("div", {
+					role: "radiogroup",
+					"aria-label": "session kind",
+					className: "flex gap-1",
+					children: MODES.map((entry) => /* @__PURE__ */ jsx(Button, {
+						role: "radio",
+						"aria-checked": mode === entry.mode,
+						variant: mode === entry.mode ? "outline" : "ghost",
+						size: "sm",
+						"data-testid": `git-new-session-mode-${entry.mode}`,
+						disabled: busy,
+						className: mode === entry.mode ? "border-doom-blue/60 text-doom-hi" : void 0,
+						onClick: () => update({ mode: entry.mode }),
+						children: entry.label
+					}, entry.mode))
+				}) : branches === null && loadError === "" ? /* @__PURE__ */ jsx("p", {
+					className: "text-xs text-doom-faint",
+					children: "reading branches…"
+				}) : /* @__PURE__ */ jsx("p", {
+					"data-testid": "git-new-session-plain-note",
+					className: "text-xs text-doom-faint",
+					children: loadError || "This workspace is not a git checkout, so the session starts in its folder."
+				}),
+				mode === "existing" && gitReady ? /* @__PURE__ */ jsxs("div", {
+					className: "flex flex-col gap-1",
+					children: [/* @__PURE__ */ jsx(Input, {
+						"data-testid": "git-new-session-branch-search",
+						"aria-label": "find a branch",
+						value: query,
+						autoFocus: true,
+						disabled: busy,
+						onChange: (event) => setQuery(event.target.value),
+						placeholder: "find a branch"
+					}), /* @__PURE__ */ jsxs("div", {
+						role: "listbox",
+						"aria-label": "branches",
+						className: "max-h-48 overflow-y-auto rounded border border-doom-border bg-doom-deep p-1",
+						children: [options.length === 0 ? /* @__PURE__ */ jsx("p", {
+							className: "px-2 py-1 text-2xs text-doom-faint",
+							children: "no matching branches"
+						}) : null, options.map((option) => /* @__PURE__ */ jsxs(OptionRow, {
+							density: "compact",
+							active: form.selected?.key === option.key,
+							disabled: option.busyAt !== void 0 || busy,
+							"data-testid": "git-new-session-branch-option",
+							"data-branch": option.name,
+							"data-remote": option.remote,
+							onClick: () => update({ selected: option }),
+							className: `w-full px-2.5 py-1 text-sm ${option.busyAt !== void 0 ? "opacity-50" : ""}`,
+							children: [/* @__PURE__ */ jsx("span", {
+								className: "min-w-0 flex-1 truncate",
+								children: option.remote === void 0 ? option.name : `${option.remote}/${option.name}`
+							}), /* @__PURE__ */ jsx("span", {
+								className: "shrink-0 text-2xs text-doom-faint",
+								children: option.current && option.busyAt !== void 0 ? "current · checked out" : option.current ? "current" : option.busyAt !== void 0 ? "checked out" : option.remote !== void 0 ? "remote" : ""
+							})]
+						}, option.key))]
+					})]
+				}) : null,
+				mode === "new" && gitReady ? /* @__PURE__ */ jsxs("div", {
+					className: "flex flex-col gap-2",
+					children: [/* @__PURE__ */ jsxs("label", {
+						htmlFor: "git-new-session-new-branch",
+						className: "flex flex-col gap-1",
+						children: [/* @__PURE__ */ jsx("span", {
+							className: "text-xs text-doom-faint",
+							children: "new branch"
+						}), /* @__PURE__ */ jsx(Input, {
+							id: "git-new-session-new-branch",
+							"data-testid": "git-new-session-new-branch",
+							value: form.newBranch,
+							autoFocus: true,
+							disabled: busy,
+							onChange: (event) => update({ newBranch: event.target.value }),
+							placeholder: "feature/my-change"
+						})]
+					}), /* @__PURE__ */ jsxs("span", {
+						className: "flex flex-col gap-1",
+						children: [/* @__PURE__ */ jsx("span", {
+							className: "text-xs text-doom-faint",
+							children: "from"
+						}), /* @__PURE__ */ jsxs(Select, {
+							value: form.baseRef,
+							onValueChange: (baseRef) => update({ baseRef }),
+							disabled: busy,
+							children: [/* @__PURE__ */ jsx(SelectTrigger, {
+								"data-testid": "git-new-session-base",
+								"aria-label": "base branch",
+								children: /* @__PURE__ */ jsx(SelectValue, { placeholder: "base branch" })
+							}), /* @__PURE__ */ jsx(SelectContent, { children: bases.map((base) => /* @__PURE__ */ jsx(SelectItem, {
+								value: base,
+								children: base === branches?.current ? `${base} (current)` : base
+							}, base)) })]
+						})]
+					})]
+				}) : null,
+				/* @__PURE__ */ jsxs("label", {
+					htmlFor: "new-session-name",
+					className: "flex flex-col gap-1",
+					children: [/* @__PURE__ */ jsxs("span", {
+						className: "text-xs text-doom-faint",
+						children: [
+							"name",
+							" ",
+							/* @__PURE__ */ jsxs("span", {
+								className: "text-doom-faint",
+								children: [
+									"(optional",
+									mode === "plain" ? "" : "; defaults to the branch",
+									")"
+								]
+							})
+						]
+					}), /* @__PURE__ */ jsx(Input, {
+						id: "new-session-name",
+						"data-testid": "new-session-name",
+						value: form.name,
+						autoFocus: mode === "plain",
+						disabled: busy,
+						onChange: (event) => update({ name: event.target.value }),
+						onKeyDown: (event) => {
+							if (event.key === "Enter") submit();
+						},
+						placeholder: "session name"
+					})]
+				}),
+				error ? /* @__PURE__ */ jsx("pre", {
+					"data-testid": "new-session-error",
+					className: "max-h-28 overflow-y-auto rounded border border-doom-edge-red bg-doom-tint-red/40 px-2.5 py-2 text-xs whitespace-pre-wrap text-doom-red",
+					children: error
+				}) : null,
+				/* @__PURE__ */ jsxs(DialogFooter, { children: [/* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					"data-testid": "new-session-cancel",
+					disabled: busy,
+					onClick: () => newSession.close(),
+					children: "cancel"
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					"data-testid": "new-session-create",
+					title: problem,
+					disabled: busy || problem !== void 0,
+					onClick: () => void submit(),
+					children: busy ? mode === "plain" ? "creating…" : "creating worktree…" : "create"
+				})] })
+			] })]
+		})
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/fill/GitNewSession.new-session.web.tsx
+var GitNewSession_new_session_web_default = defineFill({ component: GitNewSessionDialog });
+function formFromView(view) {
+	return {
+		method: view.method,
+		keyPath: view.ssh?.keyPath ?? "",
+		host: view.https?.host ?? "github.com",
+		username: view.https?.username ?? "",
+		token: ""
+	};
+}
+const HOST_PATTERN = /^[a-z0-9.-]{1,253}(:\d{1,5})?$/u;
+/** Whether a value holds an ASCII control character; a newline in a credential field could add a line to git's credential protocol. */
+function hasControl(value) {
+	for (let index = 0; index < value.length; index += 1) {
+		const code = value.charCodeAt(index);
+		if (code < 32 || code === 127) return true;
+	}
+	return false;
+}
+/** Whether the saved token can stay: only when one exists and the host has not moved. */
+function keepsToken(form, saved) {
+	return saved.https?.hasToken === true && saved.https.host === form.host.trim().toLowerCase();
+}
+/** The first thing wrong with the form, in words, or undefined when it can be saved. */
+function formProblem(form, saved) {
+	if (form.method === "ssh") {
+		const keyPath = form.keyPath.trim();
+		if (keyPath === "") return void 0;
+		if (hasControl(keyPath)) return "The key path has a control character in it.";
+		if (!keyPath.startsWith("/") && !keyPath.startsWith("~/")) return "Give the key as an absolute path or one under ~/.";
+		return;
+	}
+	if (form.method === "https") {
+		const host = form.host.trim().toLowerCase();
+		if (!HOST_PATTERN.test(host)) return "The host should look like github.com, with an optional :port.";
+		if (form.username.trim() === "") return "A username is required.";
+		if (hasControl(form.username) || hasControl(form.token)) return "Remove the control character from the username or token.";
+		if (form.token === "" && !keepsToken(form, saved)) return saved.https?.hasToken === true ? "The host changed, so enter the token for the new host." : "A token is required.";
+	}
+}
+/** What a save sends. The token goes only when the reader typed one. */
+function saveRequestOf(form) {
+	if (form.method === "ssh") {
+		const keyPath = form.keyPath.trim();
+		return keyPath === "" ? { method: "ssh" } : {
+			method: "ssh",
+			keyPath
+		};
+	}
+	if (form.method === "https") return {
+		method: "https",
+		host: form.host.trim().toLowerCase(),
+		username: form.username.trim(),
+		...form.token === "" ? {} : { token: form.token }
+	};
+	return { method: "none" };
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_components/GitAuthForm.tsx
+/**
+* A workspace's git remote panel body: how doompi-git reaches the remote when
+* you pull, push or rebase from this workspace's sessions in the cockpit.
+*
+* DESIGN PATTERNS:
+* - Per workspace. Worktree sessions use the setup of the workspace they
+*   belong to. A workspace with nothing set uses this machine's own git.
+* - Three choices as cards, the way the theme picker offers them: this
+*   machine's own git, an SSH key, or an HTTPS token.
+* - The token is write-only. The field is never prefilled; a saved token shows
+*   as a badge, and leaving the field empty keeps it.
+* - Form state is the reader's until they save. The owner remounts the form
+*   after a save so it starts again from what the server now holds.
+*
+* AVOID:
+* - Echoing a token back. The view the server sends has none to echo.
+*/
+const METHODS = [
+	{
+		method: "none",
+		title: "this machine's git",
+		detail: "use whatever git on this machine already does: your credential helper, ssh config and agent"
+	},
+	{
+		method: "ssh",
+		title: "SSH key",
+		detail: "a key file on this machine, or your ssh-agent"
+	},
+	{
+		method: "https",
+		title: "HTTPS token",
+		detail: "a username and personal access token for one host"
+	}
+];
+function GitAuthForm({ saved, saving, saveError, savedNotice = false, onSave }) {
+	const [form, setForm] = useState(() => formFromView(saved));
+	const update = (patch) => setForm((current) => ({
+		...current,
+		...patch
+	}));
+	const problem = formProblem(form, saved);
+	const tokenSaved = saved.https?.hasToken === true && saved.https.host === form.host.trim().toLowerCase();
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-auth-form",
+		className: "flex w-full min-w-0 flex-col gap-4",
+		children: [
+			/* @__PURE__ */ jsx(RadioGroup, {
+				"aria-label": "how git reaches your remote",
+				value: form.method,
+				onValueChange: (value) => update({ method: value }),
+				className: "grid grid-cols-1 gap-2 sm:grid-cols-3",
+				children: METHODS.map((choice) => /* @__PURE__ */ jsx(RadioGroupCard, {
+					value: choice.method,
+					"data-testid": `git-auth-method-${choice.method}`,
+					className: "p-3",
+					children: /* @__PURE__ */ jsxs("span", {
+						className: "flex flex-col gap-1",
+						children: [/* @__PURE__ */ jsx("span", {
+							className: "text-sm font-bold text-doom-hi",
+							children: choice.title
+						}), /* @__PURE__ */ jsx("span", {
+							className: "text-2xs text-doom-dim",
+							children: choice.detail
+						})]
+					})
+				}, choice.method))
+			}),
+			form.method === "ssh" ? /* @__PURE__ */ jsxs("div", {
+				className: "flex flex-col gap-1.5 rounded-lg border border-doom-border bg-doom-panel p-3",
+				children: [
+					/* @__PURE__ */ jsx(Label, {
+						htmlFor: "git-auth-key-path",
+						className: "text-xs text-doom-hi",
+						children: "key path"
+					}),
+					/* @__PURE__ */ jsx(Input, {
+						id: "git-auth-key-path",
+						"data-testid": "git-auth-key-path",
+						size: "sm",
+						value: form.keyPath,
+						placeholder: "~/.ssh/id_ed25519",
+						spellCheck: false,
+						onChange: (event) => update({ keyPath: event.target.value })
+					}),
+					/* @__PURE__ */ jsxs("p", {
+						className: "text-2xs text-doom-faint",
+						children: [
+							"Leave it blank to use your ssh config and ssh-agent. A key with a passphrase works only through ssh-agent. An unknown host is refused: run ",
+							/* @__PURE__ */ jsx("code", {
+								className: "text-doom-dim",
+								children: "ssh -T git@github.com"
+							}),
+							" once in a terminal to trust it."
+						]
+					})
+				]
+			}) : null,
+			form.method === "https" ? /* @__PURE__ */ jsxs("div", {
+				className: "grid grid-cols-1 gap-3 rounded-lg border border-doom-border bg-doom-panel p-3 sm:grid-cols-2",
+				children: [
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-col gap-1.5",
+						children: [/* @__PURE__ */ jsx(Label, {
+							htmlFor: "git-auth-host",
+							className: "text-xs text-doom-hi",
+							children: "host"
+						}), /* @__PURE__ */ jsx(Input, {
+							id: "git-auth-host",
+							"data-testid": "git-auth-host",
+							size: "sm",
+							value: form.host,
+							spellCheck: false,
+							onChange: (event) => update({ host: event.target.value })
+						})]
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-col gap-1.5",
+						children: [/* @__PURE__ */ jsx(Label, {
+							htmlFor: "git-auth-username",
+							className: "text-xs text-doom-hi",
+							children: "username"
+						}), /* @__PURE__ */ jsx(Input, {
+							id: "git-auth-username",
+							"data-testid": "git-auth-username",
+							size: "sm",
+							value: form.username,
+							autoComplete: "username",
+							spellCheck: false,
+							onChange: (event) => update({ username: event.target.value })
+						})]
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-col gap-1.5 sm:col-span-2",
+						children: [
+							/* @__PURE__ */ jsxs("span", {
+								className: "flex items-center gap-2",
+								children: [/* @__PURE__ */ jsx(Label, {
+									htmlFor: "git-auth-token",
+									className: "text-xs text-doom-hi",
+									children: "token"
+								}), tokenSaved ? /* @__PURE__ */ jsx(StatusBadge, {
+									tone: "ok",
+									size: "xs",
+									"data-testid": "git-auth-token-saved",
+									children: "token saved"
+								}) : null]
+							}),
+							/* @__PURE__ */ jsx(Input, {
+								id: "git-auth-token",
+								"data-testid": "git-auth-token",
+								size: "sm",
+								type: "password",
+								value: form.token,
+								autoComplete: "new-password",
+								placeholder: tokenSaved ? "leave blank to keep the saved token" : "personal access token",
+								onChange: (event) => update({ token: event.target.value })
+							}),
+							/* @__PURE__ */ jsxs("p", {
+								className: "text-2xs text-doom-faint",
+								children: [
+									"Sent only to ",
+									form.host.trim() === "" ? "this host" : form.host.trim(),
+									". A remote on any other host keeps using this machine's own git credentials."
+								]
+							})
+						]
+					})
+				]
+			}) : null,
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex flex-wrap items-center gap-2",
+				children: [/* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					size: "sm",
+					"data-testid": "git-auth-save",
+					disabled: problem !== void 0 || saving,
+					loading: saving,
+					loadingLabel: "saving",
+					onClick: () => onSave(saveRequestOf(form)),
+					children: "save"
+				}), problem !== void 0 ? /* @__PURE__ */ jsx("span", {
+					"data-testid": "git-auth-problem",
+					className: "text-2xs text-doom-yellow",
+					children: problem
+				}) : saveError !== void 0 ? /* @__PURE__ */ jsxs("span", {
+					role: "alert",
+					"data-testid": "git-auth-error",
+					className: "flex items-center gap-1 text-2xs text-doom-red",
+					children: [/* @__PURE__ */ jsx(AlertIcon, {
+						"aria-hidden": true,
+						className: "h-3 w-3"
+					}), saveError]
+				}) : savedNotice ? /* @__PURE__ */ jsx("span", {
+					"data-testid": "git-auth-saved",
+					className: "text-2xs text-doom-green",
+					children: "saved"
+				}) : null]
+			}),
+			/* @__PURE__ */ jsxs("p", {
+				className: "flex items-start gap-1.5 text-2xs text-doom-faint",
+				children: [/* @__PURE__ */ jsx(ShieldIcon, {
+					"aria-hidden": true,
+					className: "mt-px h-3 w-3 shrink-0"
+				}), /* @__PURE__ */ jsx("span", { children: "Used only when you pull, push or rebase from this workspace's sessions in the cockpit, worktrees included. The agent's own git commands never see these credentials. Stored outside the repository in ~/.pi/.doom/git/credentials.json, readable only by you, and never in the system keychain." })]
+			})
+		]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_components/GitAuthPanel.tsx
+/**
+* A workspace's git remote panel: loads that workspace's saved auth and saves a
+* new one. Lives under settings, in the repository section the host scopes.
+*
+* DESIGN PATTERNS:
+* - Per workspace. The host hands the selected repository; its opaque id is
+*   the only thing sent, and the hub resolves it to an admitted root. A
+*   browser never names a path.
+* - Reads through the host's sealed request and writes through its step-up
+*   request, so a remote device proves itself with a passkey before it can
+*   change credentials. The URLs come from the generated client.
+* - After a save the form remounts from what the server returned, which is how
+*   the token field empties and the "token saved" badge appears.
+*/
+function isAuthView(value) {
+	return typeof value === "object" && value !== null && [
+		"none",
+		"ssh",
+		"https"
+	].includes(String(value.method));
+}
+function errorOf(body, status) {
+	return typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : `The cockpit answered ${String(status)}.`;
+}
+function GitAuthPanel({ repository, request, requestWithStepUp }) {
+	const repositoryId = repository?.id;
+	const [loaded, setLoaded] = useState();
+	const [loadError, setLoadError] = useState();
+	const [saving, setSaving] = useState(false);
+	const [saveError, setSaveError] = useState();
+	const [savedNotice, setSavedNotice] = useState(false);
+	const [generation, setGeneration] = useState(0);
+	useEffect(() => {
+		if (repositoryId === void 0) return;
+		let stale = false;
+		request(api.workspace(repositoryId).auth.url({ query: { repositoryId } })).then(async (response) => {
+			const body = await response.json().catch(() => void 0);
+			if (stale) return;
+			if (response.ok && isAuthView(body)) setLoaded({
+				repositoryId,
+				saved: body
+			});
+			else setLoadError({
+				repositoryId,
+				error: errorOf(body, response.status)
+			});
+		}).catch(() => {
+			if (!stale) setLoadError({
+				repositoryId,
+				error: "The cockpit is unreachable."
+			});
+		});
+		return () => {
+			stale = true;
+		};
+	}, [repositoryId, request]);
+	if (repository === null || repositoryId === void 0) return /* @__PURE__ */ jsx(EmptyState, {
+		"data-testid": "git-auth-no-repository",
+		className: "py-6",
+		title: "pick a repository",
+		description: "git remote auth is set per workspace; choose one above."
+	});
+	const save = async (next) => {
+		setSaving(true);
+		setSaveError(void 0);
+		setSavedNotice(false);
+		try {
+			const response = await requestWithStepUp(api.workspace(repositoryId).saveAuth.url({ query: { repositoryId } }), {
+				method: "PUT",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify(next)
+			});
+			const body = await response.json().catch(() => void 0);
+			if (response.ok && isAuthView(body)) {
+				setLoaded({
+					repositoryId,
+					saved: body
+				});
+				setGeneration((current) => current + 1);
+				setSavedNotice(true);
+			} else setSaveError(errorOf(body, response.status));
+		} catch {
+			setSaveError("The cockpit is unreachable.");
+		} finally {
+			setSaving(false);
+		}
+	};
+	if (loadError?.repositoryId === repositoryId) return /* @__PURE__ */ jsx("p", {
+		role: "alert",
+		"data-testid": "git-auth-load-error",
+		className: "text-xs text-doom-red",
+		children: loadError.error
+	});
+	if (loaded?.repositoryId !== repositoryId) return /* @__PURE__ */ jsxs("span", {
+		"data-testid": "git-auth-loading",
+		className: "flex items-center gap-2",
+		children: [/* @__PURE__ */ jsx(Spinner, {
+			className: "h-3 w-3 text-doom-faint",
+			label: "loading git settings"
+		}), /* @__PURE__ */ jsx("span", {
+			className: "text-xs text-doom-dim",
+			children: "loading…"
+		})]
+	});
+	return /* @__PURE__ */ jsx(GitAuthForm, {
+		saved: loaded.saved,
+		saving,
+		savedNotice,
+		onSave: (next) => void save(next),
+		...saveError === void 0 ? {} : { saveError }
+	}, `${repositoryId}-${String(generation)}`);
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/git.web.tsx
+var git_web_default$1 = defineRepositorySettingsPanel({
+	label: "git remote",
+	detail: "how this workspace's sessions reach the remote when you pull, push or rebase from the cockpit",
+	order: 50,
+	component: GitAuthPanel
+});
+//#endregion
+//#region src/types/gitReview.ts
+/**
+* The cockpit's view of what this session changed against its base: the counts
+* the '# diff' group shows, what the review tab lists and draws, and the manual
+* sync that sits beside them.
+*
+* DESIGN PATTERNS:
+* - Declarations only, shared by the hub and the page.
+* - Its own channel, apart from worktrees. Worktrees are repository
+*   management; the diff is this session's code change.
+* - A diff row carries one line number whose file follows from its marker: the
+*   new file's for context and additions, the old file's for removals. It is
+*   the same shape the shared DiffView draws.
+*
+* AVOID:
+* - Behaviour or node builtins. Browser code imports this file.
+*/
+/** The session channel carrying this checkout's changes and the sync around them. */
+const GIT_CHANGES_TYPE = "git_changes";
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitChangesStore.ts
+/**
+* This session's code change against its base, and the manual sync beside it.
+*
+* DESIGN PATTERNS:
+* - Its own session store and hub channel, apart from worktrees. Worktrees are
+*   repository management; this is the session's diff.
+* - The hub is authoritative: it computes the counts, runs pull, push and
+*   rebase one at a time, and reports pending, errors and a paused rebase here.
+* - The sender lives in a store rather than a module variable, because a web
+*   plugin keeps no mutable module state and the page may reconnect.
+*
+* AVOID:
+* - `sendSessionFrame` for a sync command. That frame is bound for the agent
+*   and never reaches a channel's `receive`.
+*/
+const gitChanges = defineSessionStore({
+	changes: void 0,
+	pending: void 0,
+	error: void 0,
+	errorTarget: void 0
+});
+/** The page's hub socket sender; undefined before start and after dispose, when a command is dropped. */
+const changesSender = defineGlobalStore(void 0);
+/** Binds the page's hub socket for sync commands. The plugin host calls this once per page. */
+function startGitChangesRuntime(runtime) {
+	const send = (frame) => {
+		runtime.sendHubFrame(frame);
+	};
+	changesSender.update(() => send);
+	return () => {
+		changesSender.update((current) => current === send ? void 0 : current);
+	};
+}
+/** Whether a sync command is running for this session. */
+const gitChangesActivitySource = {
+	subscribe(listener) {
+		const subscription = gitChanges.store.subscribe(listener);
+		return () => subscription.unsubscribe();
+	},
+	isActive(sessionId) {
+		return gitChanges.select(gitChanges.store.state, sessionId).pending !== void 0;
+	}
+};
+function isRecord$2(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function optionalText$1(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+function count(value) {
+	return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
+/** The page never trusts a frame's shape: a malformed field drops, the rest still renders. */
+const MAX_CONFLICTS = 100;
+function optionalChanges(value) {
+	if (!isRecord$2(value)) return void 0;
+	const added = count(value.added);
+	const removed = count(value.removed);
+	const files = count(value.files);
+	if (added === void 0 || removed === void 0 || files === void 0) return void 0;
+	const branch = optionalText$1(value.branch);
+	const base = optionalText$1(value.base);
+	const upstream = isRecord$2(value.upstream) ? value.upstream : void 0;
+	const ahead = count(upstream?.ahead);
+	const behind = count(upstream?.behind);
+	const upstreamRef = optionalText$1(upstream?.ref);
+	const conflicts = isRecord$2(value.rebase) && Array.isArray(value.rebase.conflicts) ? value.rebase.conflicts.filter((file) => typeof file === "string").slice(0, MAX_CONFLICTS) : void 0;
+	return {
+		added,
+		removed,
+		files,
+		...branch === void 0 ? {} : { branch },
+		...base === void 0 ? {} : { base },
+		...value.truncated === true ? { truncated: true } : {},
+		...upstreamRef === void 0 || ahead === void 0 || behind === void 0 ? {} : { upstream: {
+			ref: upstreamRef,
+			ahead,
+			behind
+		} },
+		...conflicts === void 0 ? {} : { rebase: { conflicts } }
+	};
+}
+function optionalErrorTarget$1(value) {
+	if (!isRecord$2(value)) return void 0;
+	if (value.action === "pull" || value.action === "rebase" || value.action === "abort-rebase") return { action: value.action };
+	if (value.action === "push") return value.forceRequired === true ? {
+		action: "push",
+		forceRequired: true
+	} : { action: "push" };
+}
+/** The session data channel: 'git_changes' payloads into the store. */
+const gitChangesChannel = gitChanges.channel({
+	channel: GIT_CHANGES_TYPE,
+	parse(input) {
+		if (!isRecord$2(input)) return null;
+		return {
+			changes: optionalChanges(input.changes),
+			pending: optionalText$1(input.pending),
+			error: optionalText$1(input.error),
+			errorTarget: optionalErrorTarget$1(input.errorTarget)
+		};
+	},
+	reduce(_current, next) {
+		return next;
+	}
+});
+/**
+* Asks the hub to pull, push, rebase or abort a paused rebase. `force` is only
+* ever sent after the reader confirmed a lease force for a rejected push.
+*/
+function requestGitSync(sessionId, action, force = false) {
+	const payload = action === "push" && force ? {
+		action: "push",
+		force: true
+	} : { action };
+	changesSender.store.state?.({
+		type: GIT_CHANGES_TYPE,
+		sessionId,
+		payload
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewApi.ts
+/**
+* The review tab's half of the session API: the changed-file list and one
+* file's hunks.
+*
+* The generated client owns the URL and the sealed transport, so nothing here
+* spells a route or reaches for `fetch`. What travels is file contents, which a
+* tunnel's relay must never see in the clear.
+*/
+const UNREACHABLE = "The session is unreachable.";
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** The message a reader is shown: the route's own words, or why there were none. */
+function messageOf(result) {
+	if (result.status === 0) return UNREACHABLE;
+	return result.error === "" ? `The session answered ${String(result.status)}.` : result.error;
+}
+async function fetchReviewSummary(sessionId, signal) {
+	const result = await api.session(sessionId).review(signal === void 0 ? {} : { signal });
+	if (!result.ok) return {
+		ok: false,
+		error: messageOf(result)
+	};
+	if (!isRecord$1(result.data) || !Array.isArray(result.data.files)) return {
+		ok: false,
+		error: "The session answered with no file list."
+	};
+	return {
+		ok: true,
+		summary: result.data
+	};
+}
+async function fetchReviewFile(sessionId, path, signal) {
+	const result = await api.session(sessionId).reviewFile({
+		query: { path },
+		...signal === void 0 ? {} : { signal }
+	});
+	if (!result.ok) return {
+		ok: false,
+		error: messageOf(result)
+	};
+	if (!isRecord$1(result.data) || !Array.isArray(result.data.hunks)) return {
+		ok: false,
+		error: "The session answered with no diff."
+	};
+	return {
+		ok: true,
+		diff: result.data
+	};
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewStore.ts
+const gitReview = defineSessionStore({ comments: [] });
+function addReviewComment(sessionId, comment) {
+	const id = globalThis.crypto.randomUUID();
+	gitReview.update(sessionId, (current) => ({ comments: [...current.comments, {
+		...comment,
+		id
+	}] }));
+}
+function removeReviewComment(sessionId, id) {
+	gitReview.update(sessionId, (current) => ({ comments: current.comments.filter((comment) => comment.id !== id) }));
+}
+function clearReviewComments(sessionId) {
+	gitReview.update(sessionId, () => ({ comments: [] }));
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewView.ts
+/**
+* Pure wording for what the review tab sends the agent, and the one send.
+*
+* Both messages go as `enqueue_automatic`: the host stores it and starts a turn
+* at once when the agent is idle, or after the current one. A `prompt` frame
+* instead fails while a turn runs, and a review lost to that is the worst kind
+* of lost work.
+*/
+/** The opening line of a review, naming what was reviewed. */
+function reviewHeading(count, branch, base) {
+	return `I reviewed ${branch === void 0 ? "this checkout" : `branch ${branch}`} (${base === void 0 ? "its uncommitted changes" : `its changes against ${base}`}) and left ${count === 1 ? "one review comment" : `${String(count)} review comments`}. ${count === 1 ? "Please address it." : "Please address them all."}`;
+}
+/** What "ask agent to resolve" sends: the files, and the steps that finish a paused rebase. */
+function conflictPrompt(branch, conflicts) {
+	const files = conflicts.length === 0 ? "- (git reports no unmerged paths yet)" : conflicts.map((file) => `- ${file}`).join("\n");
+	return [
+		`A rebase of ${branch ?? "this checkout"} stopped on conflicts in:`,
+		"",
+		files,
+		"",
+		"Please resolve them:",
+		"1. Fix the conflict markers in each file, keeping the intent of both sides.",
+		"2. `git add` each resolved file.",
+		"3. Run `GIT_EDITOR=true git rebase --continue`, and repeat if it stops again.",
+		"",
+		"Do not push. I will push from the cockpit once the rebase is done."
+	].join("\n");
+}
+/**
+* Hands one message to the session's queue. Returns the reason it failed, or
+* undefined once the host took it. The sender throws when the session is not
+* connected, which is the only failure a caller can still act on.
+*/
+function deliverToAgent(send, sessionId, message) {
+	try {
+		send(sessionId, {
+			type: "enqueue_automatic",
+			message
+		});
+		return;
+	} catch (error) {
+		return error instanceof Error ? error.message : "The session did not take the message.";
+	}
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/gitReviewTree.ts
+function buildTree(files) {
+	const root = {
+		path: "",
+		dirs: /* @__PURE__ */ new Map(),
+		files: []
+	};
+	for (const file of files) {
+		const parts = file.path.split("/");
+		parts.pop();
+		let dir = root;
+		for (const part of parts) {
+			let next = dir.dirs.get(part);
+			if (next === void 0) {
+				next = {
+					path: dir.path === "" ? part : `${dir.path}/${part}`,
+					dirs: /* @__PURE__ */ new Map(),
+					files: []
+				};
+				dir.dirs.set(part, next);
+			}
+			dir = next;
+		}
+		dir.files.push(file);
+	}
+	return root;
+}
+/** Folders first, then files, each alphabetical; single-child folder chains render as one row. */
+function flattenTree(files, isOpen) {
+	const rows = [];
+	const walk = (dir, depth) => {
+		for (const [segment, child] of [...dir.dirs].sort(([left], [right]) => left.localeCompare(right))) {
+			let name = segment;
+			let node = child;
+			while (node.files.length === 0 && node.dirs.size === 1) {
+				const [[nextName, next]] = [...node.dirs];
+				name = `${name}/${nextName}`;
+				node = next;
+			}
+			const open = isOpen(node.path);
+			rows.push({
+				kind: "dir",
+				path: node.path,
+				name,
+				depth,
+				open
+			});
+			if (open) walk(node, depth + 1);
+		}
+		for (const file of [...dir.files].sort((left, right) => left.path.localeCompare(right.path))) rows.push({
+			kind: "file",
+			file,
+			depth
+		});
+	};
+	walk(buildTree(files), 0);
+	return rows;
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/GitReviewBrowser.tsx
+/**
+* The review tab's file list: every changed file as a folder tree (the VS Code
+* explorer shape), with its status, its line counts and its comments.
+*
+* DESIGN PATTERNS:
+* - Picking a row scrolls the diff pane to that file; the list never opens a
+*   tab of its own. One tab holds the whole review.
+* - Rows show only the file name, so a long path never truncates away the part
+*   that tells files apart. Folders say the rest; the full path is the tooltip.
+* - Folder chains with a single child collapse into one row (`src/web/lib`),
+*   like VS Code's compact folders, so deep trees stay shallow.
+* - Folders fold on click; a search shows every match with its folders open.
+* - Each row is a button, reachable with Tab; arrow keys move and pick in one
+*   step across the visible files, so the diff follows the cursor.
+*
+* AVOID:
+* - Colour classes outside the token set.
+*/
+const STATUS_MARK = {
+	added: {
+		letter: "A",
+		tone: "text-doom-green",
+		label: "added"
+	},
+	modified: {
+		letter: "M",
+		tone: "text-doom-yellow",
+		label: "modified"
+	},
+	deleted: {
+		letter: "D",
+		tone: "text-doom-red",
+		label: "deleted"
+	},
+	untracked: {
+		letter: "U",
+		tone: "text-doom-blue",
+		label: "untracked"
+	},
+	conflicted: {
+		letter: "C",
+		tone: "text-doom-red",
+		label: "conflicted"
+	}
+};
+const baseName = (path) => path.slice(path.lastIndexOf("/") + 1);
+/** Left padding per depth level; tight so deep files keep room for their names. */
+const indent = (depth) => ({ paddingLeft: `${String(.75 + depth * .5)}rem` });
+function GitReviewBrowser({ files, activePath, commentCounts, onPick }) {
+	const [query, setQuery] = useState("");
+	const [collapsed, setCollapsed] = useState(/* @__PURE__ */ new Set());
+	const needle = query.trim().toLocaleLowerCase();
+	const shown = needle === "" ? files : files.filter((file) => file.path.toLocaleLowerCase().includes(needle));
+	const rows = flattenTree(shown, (dirPath) => needle !== "" || !collapsed.has(dirPath));
+	const ordered = rows.flatMap((row) => row.kind === "file" ? [row.file] : []);
+	const listRef = useRef(null);
+	useEffect(() => {
+		if (activePath === void 0) return;
+		(listRef.current?.querySelector(`[data-path="${CSS.escape(activePath)}"]`))?.scrollIntoView({ block: "nearest" });
+	}, [activePath]);
+	const toggle = (dirPath) => {
+		setCollapsed((prev) => {
+			const next = new Set(prev);
+			if (!next.delete(dirPath)) next.add(dirPath);
+			return next;
+		});
+	};
+	const allDirs = () => new Set(flattenTree(files, () => true).flatMap((row) => row.kind === "dir" ? [row.path] : []));
+	/** Arrow keys pick the neighbouring row and move focus with it, so the diff follows the cursor. */
+	const onKeyDown = (event) => {
+		if (event.key !== "ArrowDown" && event.key !== "ArrowUp") return;
+		if (ordered.length === 0) return;
+		event.preventDefault();
+		const current = ordered.findIndex((file) => file.path === activePath);
+		const step = event.key === "ArrowDown" ? 1 : -1;
+		const next = current === -1 ? 0 : (current + step + ordered.length) % ordered.length;
+		const file = ordered[next];
+		if (file === void 0) return;
+		onPick(file.path);
+		event.currentTarget.closest("[data-git-review-list]")?.querySelectorAll("[data-git-review-row]")[next]?.focus();
+	};
+	return /* @__PURE__ */ jsxs("nav", {
+		"data-testid": "git-review-browser",
+		"aria-label": "changed files",
+		className: "flex min-h-0 w-64 shrink-0 flex-col border-r border-doom-border-soft",
+		children: [/* @__PURE__ */ jsxs("div", {
+			className: "flex shrink-0 flex-col gap-1 px-3 pt-2.5 pb-1.5",
+			children: [/* @__PURE__ */ jsx(Input, {
+				"data-testid": "git-review-search",
+				"aria-label": "search changed file paths",
+				size: "sm",
+				value: query,
+				placeholder: "search paths…",
+				onChange: (event) => setQuery(event.target.value)
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "flex items-center justify-between gap-2",
+				children: [/* @__PURE__ */ jsx("span", {
+					className: "text-2xs text-doom-faint",
+					children: needle === "" ? `${String(files.length)} changed` : `${String(shown.length)} of ${String(files.length)} match`
+				}), needle === "" ? /* @__PURE__ */ jsx(Button, {
+					variant: "link",
+					size: "xs",
+					"data-testid": "git-review-fold-all",
+					className: "h-auto px-0",
+					onClick: () => setCollapsed(collapsed.size === 0 ? allDirs() : /* @__PURE__ */ new Set()),
+					children: collapsed.size === 0 ? "collapse all" : "expand all"
+				}) : null]
+			})]
+		}), /* @__PURE__ */ jsxs("div", {
+			ref: listRef,
+			"data-git-review-list": true,
+			className: "min-h-0 flex-1 overflow-y-auto pb-2",
+			children: [rows.map((row) => {
+				if (row.kind === "dir") {
+					const Chevron = row.open ? ChevronDownIcon : ChevronRightIcon;
+					return /* @__PURE__ */ jsxs(Button, {
+						variant: "ghost",
+						size: "card",
+						"aria-expanded": row.open,
+						"data-testid": `git-review-browser-dir-${row.path}`,
+						title: row.path,
+						onClick: () => toggle(row.path),
+						style: indent(row.depth),
+						className: "min-w-0 flex-row items-center gap-1 rounded-none border-l-2 border-transparent py-1 pr-3 hover:bg-doom-panel/60",
+						children: [/* @__PURE__ */ jsx(Chevron, {
+							"aria-hidden": true,
+							className: "h-3 w-3 shrink-0 text-doom-faint"
+						}), /* @__PURE__ */ jsx("span", {
+							className: "min-w-0 flex-1 truncate text-xs text-doom-dim",
+							children: row.name
+						})]
+					}, `dir:${row.path}`);
+				}
+				const { file } = row;
+				const mark = STATUS_MARK[file.status];
+				const comments = commentCounts[file.path] ?? 0;
+				const active = file.path === activePath;
+				return /* @__PURE__ */ jsxs(Button, {
+					variant: "ghost",
+					size: "card",
+					"data-git-review-row": true,
+					"data-path": file.path,
+					"aria-current": active ? "true" : void 0,
+					"data-testid": `git-review-browser-file-${file.path}`,
+					title: `${file.path} (${mark.label})`,
+					onClick: () => onPick(file.path),
+					onKeyDown,
+					style: indent(row.depth),
+					className: `min-w-0 flex-row items-center gap-1.5 rounded-none border-l-2 py-1 pr-3 ${active ? "border-doom-blue bg-doom-panel" : "border-transparent hover:bg-doom-panel/60"}`,
+					children: [
+						/* @__PURE__ */ jsx("span", {
+							"aria-label": mark.label,
+							className: `w-3 shrink-0 text-center text-2xs font-bold ${mark.tone}`,
+							children: mark.letter
+						}),
+						/* @__PURE__ */ jsx("span", {
+							className: `min-w-0 flex-1 truncate text-xs text-doom-hi ${active ? "font-bold" : ""} ${file.status === "deleted" ? "line-through opacity-70" : ""}`,
+							children: baseName(file.path)
+						}),
+						comments === 0 ? null : /* @__PURE__ */ jsxs("span", {
+							className: "flex shrink-0 items-center gap-0.5 text-2xs text-doom-blue",
+							title: `${String(comments)} comments`,
+							children: [/* @__PURE__ */ jsx(MessageIcon, {
+								"aria-hidden": true,
+								className: "h-2.5 w-2.5"
+							}), comments]
+						}),
+						file.binary ? /* @__PURE__ */ jsx("span", {
+							className: "shrink-0 text-2xs text-doom-faint",
+							children: "binary"
+						}) : /* @__PURE__ */ jsxs("span", {
+							className: "shrink-0 text-2xs",
+							children: [
+								/* @__PURE__ */ jsxs("span", {
+									className: "text-doom-green",
+									children: ["+", file.added]
+								}),
+								" ",
+								/* @__PURE__ */ jsxs("span", {
+									className: "text-doom-red",
+									children: ["-", file.removed]
+								})
+							]
+						})
+					]
+				}, file.path);
+			}), ordered.length === 0 ? /* @__PURE__ */ jsx("p", {
+				className: "px-3 py-2 text-2xs text-doom-faint",
+				children: "no path matches"
+			}) : null]
+		})]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/GitSyncBar.tsx
+/**
+* The review tab's header: what is being reviewed, and the manual sync that
+* goes with it.
+*
+* DESIGN PATTERNS:
+* - Everything here is a report or a request. The hub runs the git, one
+*   command per session, and answers on the channel: pending while it runs,
+*   an error target when it fails, a paused rebase when it stops on conflicts.
+* - A push the remote rejects is not an error to shrug at: the strip asks
+*   before forcing, and the force it sends is a lease, which git refuses if
+*   the remote holds commits this branch never fetched and integrated.
+* - A paused rebase blocks the sync buttons. The two ways out are named on the
+*   banner, and abort says what it throws away.
+*
+* AVOID:
+* - Colour classes outside the token set.
+*/
+function GitSyncBar({ changes, mergeBase, pending, error, errorTarget, onSync, onForcePush, onAskAgent, onDismissError }) {
+	const busy = pending !== void 0;
+	const paused = changes?.rebase !== void 0;
+	const forceRequired = errorTarget?.action === "push" && "forceRequired" in errorTarget && errorTarget.forceRequired === true;
+	const syncError = error !== void 0 && !forceRequired ? error : void 0;
+	const upstream = changes?.upstream;
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-sync-bar",
+		className: "flex shrink-0 flex-col gap-2 border-b border-doom-border-soft px-3 py-2.5 sm:px-[26px]",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex min-w-0 flex-wrap items-center gap-x-3 gap-y-1.5",
+				children: [
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex min-w-0 items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx(BranchIcon, {
+								"aria-hidden": true,
+								className: "h-3.5 w-3.5 shrink-0 text-doom-faint"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								"data-testid": "git-review-branch",
+								className: "truncate text-sm font-bold text-doom-hi",
+								children: changes?.branch ?? "detached HEAD"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "shrink-0 text-xs text-doom-faint",
+								children: changes?.base === void 0 ? "uncommitted changes" : `vs ${changes.base}`
+							}),
+							mergeBase === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+								className: "shrink-0 text-2xs text-doom-faint",
+								children: ["from ", mergeBase]
+							})
+						]
+					}),
+					changes === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+						"data-testid": "git-review-totals",
+						className: "flex shrink-0 items-center gap-1.5 text-xs",
+						children: [
+							/* @__PURE__ */ jsxs("span", {
+								className: "font-bold text-doom-green",
+								children: ["+", changes.added]
+							}),
+							/* @__PURE__ */ jsxs("span", {
+								className: "font-bold text-doom-red",
+								children: ["-", changes.removed]
+							}),
+							/* @__PURE__ */ jsxs("span", {
+								className: "text-doom-faint",
+								children: [
+									changes.files,
+									changes.truncated ? "+" : "",
+									" ",
+									changes.files === 1 ? "file" : "files"
+								]
+							})
+						]
+					}),
+					/* @__PURE__ */ jsx("span", { className: "min-w-0 flex-1" }),
+					upstream === void 0 ? /* @__PURE__ */ jsx("span", {
+						className: "shrink-0 text-2xs text-doom-faint",
+						children: "no upstream yet"
+					}) : /* @__PURE__ */ jsxs("span", {
+						className: "shrink-0 text-2xs text-doom-faint",
+						title: upstream.ref,
+						children: [
+							"↑",
+							upstream.ahead,
+							" ↓",
+							upstream.behind,
+							" ",
+							upstream.ref
+						]
+					}),
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex shrink-0 items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx(Button, {
+								size: "xs",
+								"data-testid": "git-sync-pull",
+								disabled: busy || paused || upstream === void 0,
+								title: upstream === void 0 ? "push once to set an upstream" : `fetch, then rebase onto ${upstream.ref}`,
+								onClick: () => onSync("pull"),
+								children: "pull"
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								size: "xs",
+								"data-testid": "git-sync-push",
+								disabled: busy || paused || changes?.branch === void 0,
+								title: upstream === void 0 ? "push and set the upstream" : `push to ${upstream.ref}`,
+								onClick: () => onSync("push"),
+								children: "push"
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								size: "xs",
+								"data-testid": "git-sync-rebase",
+								disabled: busy || paused || changes?.base === void 0,
+								title: changes?.base === void 0 ? "no base branch to rebase onto" : `fetch, then rebase onto ${changes.base}`,
+								onClick: () => onSync("rebase"),
+								children: "rebase"
+							})
+						]
+					})
+				]
+			}),
+			pending === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+				"data-testid": "git-sync-pending",
+				className: "flex min-w-0 items-center gap-1.5",
+				children: [/* @__PURE__ */ jsx(Spinner, {
+					className: "h-3 w-3 shrink-0 text-doom-faint",
+					label: pending
+				}), /* @__PURE__ */ jsx("span", {
+					className: "min-w-0 truncate text-xs text-doom-dim",
+					children: pending
+				})]
+			}),
+			syncError === void 0 ? null : /* @__PURE__ */ jsxs("div", {
+				role: "alert",
+				"data-testid": "git-sync-error",
+				className: "flex min-w-0 items-start gap-1.5 text-2xs text-doom-red",
+				children: [
+					/* @__PURE__ */ jsx(AlertIcon, {
+						"aria-hidden": true,
+						className: "mt-px h-3 w-3 shrink-0"
+					}),
+					/* @__PURE__ */ jsx("span", {
+						className: "min-w-0 flex-1",
+						children: syncError
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "xs",
+						className: "h-auto min-h-0 px-1 py-0 text-2xs",
+						onClick: onDismissError,
+						children: "dismiss"
+					})
+				]
+			}),
+			forceRequired ? /* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-push-force-confirm",
+				className: "flex min-w-0 flex-wrap items-center gap-2 rounded-md border border-doom-edge-yellow bg-doom-tint-yellow px-2.5 py-2",
+				children: [
+					/* @__PURE__ */ jsx("span", {
+						className: "min-w-0 flex-1 text-xs text-doom-hi",
+						children: "The remote branch has commits yours replaced, usually after a rebase. Force push with lease? It is refused if the remote holds commits you never fetched and integrated."
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "danger-outline",
+						size: "xs",
+						"data-testid": "git-push-force",
+						disabled: busy,
+						onClick: onForcePush,
+						children: "force push"
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "xs",
+						"data-testid": "git-push-force-cancel",
+						onClick: onDismissError,
+						children: "cancel"
+					})
+				]
+			}) : null,
+			changes?.rebase === void 0 ? null : /* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-rebase-banner",
+				className: "flex min-w-0 flex-col gap-1.5 rounded-md border border-doom-edge-red bg-doom-tint-red px-2.5 py-2",
+				children: [
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex min-w-0 items-center gap-1.5",
+						children: [/* @__PURE__ */ jsx(StatusBadge, {
+							tone: "error",
+							size: "xs",
+							children: "rebase paused"
+						}), /* @__PURE__ */ jsx("span", {
+							className: "text-xs text-doom-hi",
+							children: changes.rebase.conflicts.length === 0 ? "git stopped the rebase" : `conflicts in ${String(changes.rebase.conflicts.length)} ${changes.rebase.conflicts.length === 1 ? "file" : "files"}`
+						})]
+					}),
+					changes.rebase.conflicts.length === 0 ? null : /* @__PURE__ */ jsx("ul", {
+						className: "flex flex-col gap-0.5 pl-1",
+						children: changes.rebase.conflicts.map((file) => /* @__PURE__ */ jsx("li", {
+							className: "truncate font-mono text-2xs text-doom-dim",
+							children: file
+						}, file))
+					}),
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex flex-wrap items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx(Button, {
+								variant: "primary",
+								size: "xs",
+								"data-testid": "git-rebase-ask-agent",
+								disabled: busy,
+								onClick: onAskAgent,
+								children: "ask agent to resolve"
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								variant: "danger-outline",
+								size: "xs",
+								"data-testid": "git-rebase-abort",
+								disabled: busy,
+								onClick: () => onSync("abort-rebase"),
+								children: "abort rebase"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "text-2xs text-doom-faint",
+								children: "abort discards any conflict resolution in progress"
+							})
+						]
+					})
+				]
+			})
+		]
+	});
+}
+const NO_FILES = [];
+/** Stable, URL-safe element id for one file's section. */
+function sectionId(index) {
+	return `git-review-file-${String(index)}`;
+}
+function sideOf(row) {
+	return row.marker === "-" ? "old" : "new";
+}
+function GitReviewView({ sync, summary, files, comments, onLoadFile, onAddComment, onRemoveComment, onSendReview, onDiscard, sendError, initialDraft }) {
+	const entries = summary.state === "ready" ? summary.summary.files : NO_FILES;
+	const [openOverride, setOpenOverride] = useState({});
+	const [picked, setPicked] = useState();
+	const activePath = picked ?? entries[0]?.path;
+	const [draft, setDraft] = useState(initialDraft);
+	useEffect(() => {
+		for (const file of entries.slice(0, 20)) if (files[file.path] === void 0) onLoadFile(file.path);
+	}, [
+		entries,
+		files,
+		onLoadFile
+	]);
+	const commentCounts = {};
+	for (const comment of comments) commentCounts[comment.path] = (commentCounts[comment.path] ?? 0) + 1;
+	const isOpen = (path, index) => openOverride[path] ?? index < 20;
+	const open = (path) => {
+		setOpenOverride((current) => current[path] === true ? current : {
+			...current,
+			[path]: true
+		});
+		if (files[path] === void 0) onLoadFile(path);
+	};
+	const pick = (path) => {
+		setPicked(path);
+		open(path);
+		const index = entries.findIndex((file) => file.path === path);
+		globalThis.document?.getElementById(sectionId(index))?.scrollIntoView({ block: "start" });
+	};
+	const toggle = (path, index) => {
+		if (isOpen(path, index)) setOpenOverride((current) => ({
+			...current,
+			[path]: false
+		}));
+		else open(path);
+	};
+	const submitDraft = (body) => {
+		if (draft === void 0) return;
+		onAddComment({
+			path: draft.path,
+			relPath: draft.path,
+			side: draft.selection.side,
+			startLine: draft.selection.startLine,
+			endLine: draft.selection.endLine,
+			snippet: draft.selection.snippet,
+			body: body.trim()
+		});
+		setDraft(void 0);
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-review-panel",
+		className: "flex min-h-0 flex-1 flex-col",
+		children: [
+			/* @__PURE__ */ jsx(GitSyncBar, {
+				...sync,
+				...summary.state === "ready" && summary.summary.mergeBase !== void 0 ? { mergeBase: summary.summary.mergeBase } : {}
+			}),
+			summary.state === "loading" ? /* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-review-loading",
+				className: "flex flex-1 items-start gap-2 px-4 py-6",
+				children: [/* @__PURE__ */ jsx(Spinner, {
+					className: "h-3 w-3 text-doom-faint",
+					label: "reading changes"
+				}), /* @__PURE__ */ jsx("span", {
+					className: "text-xs text-doom-dim",
+					children: "reading changes…"
+				})]
+			}) : summary.state === "error" ? /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				"data-testid": "git-review-error",
+				className: "flex-1 px-4 py-6 text-xs text-doom-red",
+				children: summary.error
+			}) : !summary.summary.repository ? /* @__PURE__ */ jsx(EmptyState, {
+				"data-testid": "git-review-no-repository",
+				className: "px-4 py-8",
+				title: "not a git checkout",
+				description: "this session's folder is not inside a git repository, so there is nothing to review."
+			}) : entries.length === 0 ? /* @__PURE__ */ jsx(EmptyState, {
+				"data-testid": "git-review-empty",
+				className: "px-4 py-8",
+				title: "no changes",
+				description: summary.summary.base === void 0 ? "nothing uncommitted in this checkout." : `nothing differs from ${summary.summary.base}, committed or not.`
+			}) : /* @__PURE__ */ jsxs("div", {
+				className: "flex min-h-0 flex-1",
+				children: [/* @__PURE__ */ jsx(GitReviewBrowser, {
+					files: entries,
+					commentCounts,
+					onPick: pick,
+					...activePath === void 0 ? {} : { activePath }
+				}), /* @__PURE__ */ jsxs("div", {
+					"data-testid": "git-review-diffs",
+					className: "min-h-0 min-w-0 flex-1 overflow-y-auto",
+					children: [summary.summary.truncated ? /* @__PURE__ */ jsx("p", {
+						className: "px-4 pt-2 text-2xs text-doom-faint",
+						children: "more files changed than the review lists; the rest are left out."
+					}) : null, entries.map((file, index) => /* @__PURE__ */ jsx(FileSection, {
+						id: sectionId(index),
+						entry: file,
+						state: files[file.path],
+						collapsed: !isOpen(file.path, index),
+						comments: comments.filter((comment) => comment.path === file.path),
+						draft: draft?.path === file.path ? draft.selection : void 0,
+						onToggle: () => toggle(file.path, index),
+						onSelect: (selection) => {
+							setPicked(file.path);
+							setDraft({
+								path: file.path,
+								selection
+							});
+						},
+						onSubmitDraft: submitDraft,
+						onCancelDraft: () => setDraft(void 0),
+						onRemoveComment,
+						onRetry: () => onLoadFile(file.path)
+					}, file.path))]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				"data-testid": "git-review-footer",
+				className: "flex shrink-0 flex-wrap items-center gap-2 border-t border-doom-border-soft bg-doom-panel px-3 py-2 sm:px-[26px]",
+				children: [
+					/* @__PURE__ */ jsx(MessageIcon, {
+						"aria-hidden": true,
+						className: "h-3 w-3 text-doom-faint"
+					}),
+					/* @__PURE__ */ jsx("span", {
+						"data-testid": "git-review-comment-count",
+						className: "text-xs text-doom-dim",
+						children: comments.length === 0 ? "no comments yet: select lines or click a line number" : `${String(comments.length)} ${comments.length === 1 ? "comment" : "comments"}`
+					}),
+					/* @__PURE__ */ jsx("span", { className: "min-w-0 flex-1" }),
+					sendError === void 0 ? null : /* @__PURE__ */ jsx("span", {
+						role: "alert",
+						"data-testid": "git-review-send-error",
+						className: "min-w-0 truncate text-2xs text-doom-red",
+						children: sendError
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "xs",
+						"data-testid": "git-review-discard",
+						disabled: comments.length === 0,
+						onClick: onDiscard,
+						children: "discard"
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						size: "sm",
+						"data-testid": "git-review-send",
+						disabled: comments.length === 0,
+						onClick: onSendReview,
+						children: "send review"
+					})
+				]
+			})
+		]
+	});
+}
+const STATUS_WORD = {
+	added: "added",
+	modified: "modified",
+	deleted: "deleted",
+	untracked: "new, untracked",
+	conflicted: "conflicted"
+};
+/** One file: a pinned header, then its diff with comments drawn under the lines they are about. */
+function FileSection({ id, entry, state, collapsed, comments, draft, onToggle, onSelect, onSubmitDraft, onCancelDraft, onRemoveComment, onRetry }) {
+	const renderAfterRow = (row) => {
+		const side = sideOf(row);
+		const here = comments.filter((comment) => (comment.side ?? "new") === side && (comment.endLine ?? comment.startLine) === row.line);
+		const drafting = draft !== void 0 && draft.side === side && draft.endLine === row.line;
+		if (here.length === 0 && !drafting) return null;
+		return /* @__PURE__ */ jsxs("div", {
+			className: "flex flex-col gap-1.5 border-y border-doom-border-soft bg-doom-bg px-2 py-1.5 whitespace-normal",
+			children: [here.map((comment) => /* @__PURE__ */ jsxs("div", {
+				"data-testid": `git-review-comment-${comment.id}`,
+				className: "flex min-w-0 items-start gap-2 rounded-md border border-doom-border-soft bg-doom-panel px-2 py-1.5",
+				children: [
+					/* @__PURE__ */ jsx(MessageIcon, {
+						"aria-hidden": true,
+						className: "mt-0.5 h-3 w-3 shrink-0 text-doom-blue"
+					}),
+					/* @__PURE__ */ jsxs("span", {
+						className: "flex min-w-0 flex-1 flex-col gap-0.5",
+						children: [/* @__PURE__ */ jsx("span", {
+							className: "text-2xs text-doom-faint",
+							children: reviewCommentAnchor(comment)
+						}), /* @__PURE__ */ jsx("span", {
+							className: "text-xs whitespace-pre-wrap text-doom-hi",
+							children: comment.body
+						})]
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "icon",
+						"aria-label": "remove comment",
+						title: "remove comment",
+						onClick: () => onRemoveComment(comment.id),
+						children: /* @__PURE__ */ jsx(CloseIcon, { className: "h-3 w-3" })
+					})
+				]
+			}, comment.id)), drafting ? /* @__PURE__ */ jsx("div", {
+				className: "rounded-md border border-doom-border bg-doom-panel",
+				children: /* @__PURE__ */ jsx(ReviewCommentDraft, {
+					snippet: draft.snippet,
+					startLine: draft.startLine,
+					endLine: draft.endLine,
+					side: draft.side,
+					testIdPrefix: "git-review-comment",
+					onSubmit: onSubmitDraft,
+					onCancel: onCancelDraft
+				})
+			}) : null]
+		});
+	};
+	return /* @__PURE__ */ jsxs("section", {
+		id,
+		"data-testid": `git-review-file-${entry.path}`,
+		className: "border-b border-doom-border-soft",
+		children: [/* @__PURE__ */ jsxs(Button, {
+			variant: "ghost",
+			size: "card",
+			"aria-expanded": !collapsed,
+			onClick: onToggle,
+			className: "sticky top-0 z-10 flex-row items-center gap-1.5 rounded-none border-b border-doom-border-soft bg-doom-rail px-3 py-1.5 hover:bg-doom-panel sm:px-4",
+			children: [
+				collapsed ? /* @__PURE__ */ jsx(ChevronRightIcon, {
+					"aria-hidden": true,
+					className: "h-3 w-3 shrink-0 text-doom-faint"
+				}) : /* @__PURE__ */ jsx(ChevronDownIcon, {
+					"aria-hidden": true,
+					className: "h-3 w-3 shrink-0 text-doom-faint"
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: "min-w-0 flex-1 truncate font-mono text-xs font-bold text-doom-hi",
+					children: entry.path
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: "shrink-0 text-2xs text-doom-faint",
+					children: STATUS_WORD[entry.status]
+				}),
+				comments.length === 0 ? null : /* @__PURE__ */ jsxs("span", {
+					className: "flex shrink-0 items-center gap-0.5 text-2xs text-doom-blue",
+					children: [/* @__PURE__ */ jsx(MessageIcon, {
+						"aria-hidden": true,
+						className: "h-2.5 w-2.5"
+					}), comments.length]
+				}),
+				entry.binary ? null : /* @__PURE__ */ jsxs("span", {
+					className: "shrink-0 text-2xs",
+					children: [
+						/* @__PURE__ */ jsxs("span", {
+							className: "text-doom-green",
+							children: ["+", entry.added]
+						}),
+						" ",
+						/* @__PURE__ */ jsxs("span", {
+							className: "text-doom-red",
+							children: ["-", entry.removed]
+						})
+					]
+				})
+			]
+		}), collapsed ? null : state === void 0 || state.state === "loading" ? /* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2 px-4 py-3",
+			children: [/* @__PURE__ */ jsx(Spinner, {
+				className: "h-3 w-3 text-doom-faint",
+				label: `loading ${entry.path}`
+			}), /* @__PURE__ */ jsx("span", {
+				className: "text-2xs text-doom-faint",
+				children: "loading diff…"
+			})]
+		}) : state.state === "error" ? /* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2 px-4 py-3",
+			children: [/* @__PURE__ */ jsx("span", {
+				role: "alert",
+				className: "text-2xs text-doom-red",
+				children: state.error
+			}), /* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				size: "xs",
+				onClick: onRetry,
+				children: "retry"
+			})]
+		}) : state.diff.binary ? /* @__PURE__ */ jsx("p", {
+			className: "px-4 py-3 text-2xs text-doom-faint",
+			children: "binary file, not drawn"
+		}) : state.diff.tooLarge ? /* @__PURE__ */ jsx("p", {
+			className: "px-4 py-3 text-2xs text-doom-faint",
+			children: "this diff is too large to draw here"
+		}) : /* @__PURE__ */ jsx(DiffView, {
+			hunks: state.diff.hunks,
+			testId: `git-review-diff-${id}`,
+			onSelect,
+			renderAfterRow,
+			className: "py-1"
+		})]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/GitReviewPanel.tsx
+/**
+* The review tab: this session's changes against its base, the comments on
+* them, and the manual sync beside them.
+*
+* DESIGN PATTERNS:
+* - Opened from the '# diff' group as a transient tab, one per session.
+* - The hub's channel says when something changed (counts, base, a paused
+*   rebase); the panel refetches the file list then, and each file's hunks
+*   when it is opened. Nothing polls.
+* - Comments live in a session store and are cleared only after the host took
+*   the message. Both messages go as `enqueue_automatic`, which queues behind a
+*   running turn instead of failing.
+*
+* AVOID:
+* - Sending sync as a session frame. Sync is a channel command; the hub runs
+*   it with the configured auth, one command per session.
+*/
+const REVIEW_TAB_ID = "git-review";
+function reviewTab() {
+	return {
+		id: REVIEW_TAB_ID,
+		label: "review",
+		panel: GitReviewPanel
+	};
+}
+function GitReviewPanel({ sessionId, sendSessionFrame }) {
+	const activity = useStore(gitChanges.store, (state) => gitChanges.select(state, sessionId));
+	const comments = useStore(gitReview.store, (state) => gitReview.select(state, sessionId).comments);
+	const [summary, setSummary] = useState({ state: "loading" });
+	const [files, setFiles] = useState({});
+	const [sendError, setSendError] = useState();
+	const [dismissedError, setDismissedError] = useState();
+	const changes = activity.changes;
+	const fingerprint = JSON.stringify([
+		changes?.branch,
+		changes?.base,
+		changes?.added,
+		changes?.removed,
+		changes?.files,
+		changes?.rebase?.conflicts.length
+	]);
+	useEffect(() => {
+		if (sessionId === null) return;
+		const controller = new AbortController();
+		fetchReviewSummary(sessionId, controller.signal).then((result) => {
+			if (controller.signal.aborted) return;
+			setSummary(result.ok ? {
+				state: "ready",
+				summary: result.summary
+			} : {
+				state: "error",
+				error: result.error
+			});
+			setFiles({});
+		}).catch((error) => {
+			if (controller.signal.aborted) return;
+			setSummary({
+				state: "error",
+				error: error instanceof Error ? error.message : "The changes could not be read."
+			});
+		});
+		return () => controller.abort();
+	}, [sessionId, fingerprint]);
+	const loadFile = useCallback((path) => {
+		if (sessionId === null) return;
+		setFiles((current) => ({
+			...current,
+			[path]: { state: "loading" }
+		}));
+		const settle = (state) => setFiles((current) => ({
+			...current,
+			[path]: state
+		}));
+		fetchReviewFile(sessionId, path).then((result) => settle(result.ok ? {
+			state: "ready",
+			diff: result.diff
+		} : {
+			state: "error",
+			error: result.error
+		})).catch((error) => settle({
+			state: "error",
+			error: error instanceof Error ? error.message : "The diff could not be read."
+		}));
+	}, [sessionId]);
+	if (sessionId === null) return null;
+	const branch = summary.state === "ready" ? summary.summary.branch : changes?.branch;
+	const base = summary.state === "ready" ? summary.summary.base : changes?.base;
+	const error = activity.error === dismissedError ? void 0 : activity.error;
+	const send = (message, onSent) => {
+		const failure = deliverToAgent(sendSessionFrame, sessionId, message);
+		setSendError(failure);
+		if (failure === void 0) onSent?.();
+	};
+	return /* @__PURE__ */ jsx(GitReviewView, {
+		sync: {
+			...changes === void 0 ? {} : { changes },
+			...activity.pending === void 0 ? {} : { pending: activity.pending },
+			...error === void 0 ? {} : { error },
+			...activity.errorTarget === void 0 || error === void 0 ? {} : { errorTarget: activity.errorTarget },
+			onSync: (action) => requestGitSync(sessionId, action),
+			onForcePush: () => requestGitSync(sessionId, "push", true),
+			onAskAgent: () => send(conflictPrompt(branch, changes?.rebase?.conflicts ?? [])),
+			onDismissError: () => setDismissedError(activity.error)
+		},
+		summary,
+		files,
+		comments,
+		onLoadFile: loadFile,
+		onAddComment: (comment) => addReviewComment(sessionId, comment),
+		onRemoveComment: (id) => removeReviewComment(sessionId, id),
+		onSendReview: () => send(buildReviewPrompt(comments, reviewHeading(comments.length, branch, base)), () => clearReviewComments(sessionId)),
+		onDiscard: () => clearReviewComments(sessionId),
+		...sendError === void 0 ? {} : { sendError }
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/activity-group/diff.web.ts
+var diff_web_default = defineActivityGroup({
+	keys: "g d",
+	activeSource: gitChangesActivitySource,
+	marksBackgroundWork: false,
+	transientTab: reviewTab,
+	order: 28
+});
+//#endregion
+//#region src/types/webWorktrees.ts
+/**
+* The cockpit's view of this session's worktrees.
+*
+* DESIGN PATTERNS:
+* - Declarations only. The channel frame type is a constant so the hub and the
+*   page cannot drift apart on a string.
+* - A view is the subset of a record the dock needs, not the record. The
+*   registry may hold paths and provenance the page has no business rendering.
+*
+* AVOID:
+* - Adding behaviour here. This file is imported by browser code, so it must
+*   stay free of node builtins.
+*/
+/** The data channel carrying one session's worktrees to the page. */
+const GIT_WORKTREES_TYPE = "git_worktrees";
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_lib/worktreesActivityStore.ts
+/**
+* The dock's view of this session's worktrees, and the commands it sends.
+*
+* DESIGN PATTERNS:
+* - Session-scoped store fed by one hub channel. The hub is authoritative; the
+*   page never reads a registry and never guesses.
+* - Actions are channel frames, not prompts. The hub half owns the tool's
+*   operations, so the panel names the work and the hub performs it; a
+*   worktree made from the dock is the same object the tool makes, without
+*   spending a turn of the conversation to ask for it.
+* - The sender lives in a store rather than a module variable, because a web
+*   plugin keeps no mutable module state and the page may reconnect.
+*
+* AVOID:
+* - Calling the hub package API from here. A dock slot gets no sealed request
+*   transport, and raw fetch breaks the remote cockpit.
+* - `sendSessionFrame` for a command. It envelopes the frame as a session
+*   command bound for the agent, which never reaches a channel's `receive`.
+*/
+const worktreeActivity = defineSessionStore({
+	worktrees: [],
+	pending: void 0,
+	error: void 0,
+	errorTarget: void 0
+});
+/** Captures the clicked card, so a focus change cannot retarget an open dialog. */
+const worktreeCreateDialog = defineGlobalStore(null);
+/**
+* The page's hub socket sender, held for as long as the plugin runs.
+*
+* Undefined before `startWorktreeRuntime` and after it disposes; a command
+* sent in that window is dropped rather than queued, because a queue would
+* replay a worktree create against a socket that has since changed sessions.
+*/
+const worktreeSender = defineGlobalStore(void 0);
+/** Binds the page's hub socket. The plugin host calls this once per page. */
+function startWorktreeRuntime(runtime) {
+	const send = (frame) => {
+		runtime.sendHubFrame(frame);
+	};
+	worktreeSender.update(() => send);
+	return () => {
+		worktreeSender.update((current) => current === send ? void 0 : current);
+		worktreeCreateDialog.update(() => null);
+	};
+}
+/**
+* Whether this session has worktree work in flight.
+*
+* A standing worktree is state, not work: it sits there until someone closes
+* it, so counting it would leave the session reading as busy forever, with a
+* "background work is still running" notice under a conversation where
+* nothing is running. Only a create or close actually in progress counts.
+*
+* The group stays visible either way. Declaring an active source at all is
+* what keeps it in the dock; this answers how it is drawn, not whether it is
+* there.
+*/
+const worktreeActivitySource = {
+	subscribe(listener) {
+		const subscription = worktreeActivity.store.subscribe(listener);
+		return () => subscription.unsubscribe();
+	},
+	isActive(sessionId) {
+		return worktreeActivity.select(worktreeActivity.store.state, sessionId).pending !== void 0;
+	}
+};
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function optionalText(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+function optionalErrorTarget(value) {
+	if (!isRecord(value)) return void 0;
+	if (value.action === "create") return { action: "create" };
+	if (value.action === "close" && typeof value.id === "string" && value.id !== "") return {
+		action: "close",
+		id: value.id
+	};
+}
+/** The plugin's session data channel: 'git_worktrees' payloads into the store. */
+const worktreesChannel = worktreeActivity.channel({
+	channel: GIT_WORKTREES_TYPE,
+	parse(input) {
+		if (!isRecord(input) || !Array.isArray(input.worktrees)) return null;
+		return {
+			worktrees: input.worktrees.filter(isRecord),
+			pending: optionalText(input.pending),
+			error: optionalText(input.error),
+			errorTarget: optionalErrorTarget(input.errorTarget)
+		};
+	},
+	reduce(_current, next) {
+		return next;
+	}
+});
+/** Sends one command to the session's worktrees channel. */
+function command(sessionId, payload) {
+	worktreeSender.store.state?.({
+		type: GIT_WORKTREES_TYPE,
+		sessionId,
+		payload
+	});
+}
+/** Asks the hub for a worktree. The hub answers on the same channel. */
+function requestWorktreeCreate(sessionId, branch, baseRef, reservationId) {
+	const trimmedBase = baseRef.trim();
+	command(sessionId, {
+		action: "create",
+		branch: branch.trim(),
+		...trimmedBase === "" ? {} : { baseRef: trimmedBase },
+		...reservationId === void 0 ? {} : { reservationId }
+	});
+}
+/** Asks the hub to close one worktree. Refusal on a dirty tree stays the hub's call. */
+function requestWorktreeClose(sessionId, id) {
+	command(sessionId, {
+		action: "close",
+		id
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/_components/WorktreesPanel.tsx
+/**
+* The '# git' group's tab: this session's worktrees, and the form that makes one.
+*
+* DESIGN PATTERNS:
+* - Lives in the activity dock, opened by the group's name. A worktree is work
+*   in progress belonging to the session that started it, so it sits beside
+*   agents, runners and workflows rather than in a settings screen.
+* - Header, form, then cards, the same rhythm the runners and workflows panels
+*   use. A worktree row is a card because it carries three facts and two
+*   actions, which a single line cannot hold without becoming a puzzle.
+* - Local form state is never reset by a data refresh. Direct lifecycle events
+*   update the list without discarding a half-typed branch name.
+* - Acts through the plugin's own hub channel, so a worktree made here and one
+*   made by the tool take exactly the same path.
+* - Creating waits on the cockpit starting a session, so the hub reports each
+*   phase on that channel and the header shows it turning. A button that looks
+*   idle for two minutes reads as broken.
+*
+* AVOID:
+* - Deriving form state from refreshed store data instead of the user's input.
+* - Colour classes outside the token set. `doom-error`, `doom-line` and
+*   `doom-bright` are not tokens: they compile to nothing and the row silently
+*   loses its border.
+*/
+const WORKTREES_TAB_ID = "git-worktrees";
+function worktreesTab() {
+	return {
+		id: WORKTREES_TAB_ID,
+		label: "worktrees",
+		panel: WorktreesPanel
+	};
+}
+function WorktreesPanel({ sessionId, sessionReservationId }) {
+	const session = useStore(worktreeActivity.store, (state) => worktreeActivity.select(state, sessionId));
+	const [branch, setBranch] = useState("");
+	const [baseRef, setBaseRef] = useState("");
+	const busy = session.pending !== void 0;
+	const canCreate = sessionId !== null && branch.trim() !== "" && !busy;
+	const createError = session.errorTarget?.action === "create" ? session.error : void 0;
+	const closeErrorId = session.errorTarget?.action === "close" ? session.errorTarget.id : void 0;
+	const panelError = session.error !== void 0 && (session.errorTarget === void 0 || closeErrorId !== void 0 && !session.worktrees.some((worktree) => worktree.id === closeErrorId));
+	const create = () => {
+		if (sessionId === null || !canCreate) return;
+		requestWorktreeCreate(sessionId, branch, baseRef, sessionReservationId);
+		if (sessionReservationId === void 0) {
+			setBranch("");
+			setBaseRef("");
+		}
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "git-worktrees-panel",
+		className: "flex min-h-0 flex-1 flex-col overflow-auto",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex min-h-11 shrink-0 items-center gap-2.5 border-b border-doom-border-soft px-3 sm:px-[26px]",
+				children: [
+					/* @__PURE__ */ jsx("span", {
+						className: "text-sm font-bold text-doom-hi",
+						children: "worktrees"
+					}),
+					/* @__PURE__ */ jsx("span", {
+						"data-testid": "git-worktrees-count",
+						className: "text-xs text-doom-faint",
+						children: session.worktrees.length === 0 ? "none yet" : `${String(session.worktrees.length)} open`
+					}),
+					/* @__PURE__ */ jsx("span", { className: "min-w-0 flex-1" }),
+					session.pending === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+						"data-testid": "git-worktree-pending",
+						className: "flex min-w-0 items-center gap-1.5",
+						children: [/* @__PURE__ */ jsx(Spinner, {
+							className: "h-3 w-3 shrink-0 text-doom-faint",
+							label: session.pending
+						}), /* @__PURE__ */ jsx("span", {
+							className: "min-w-0 truncate text-xs text-doom-dim",
+							children: session.pending
+						})]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex shrink-0 flex-col gap-1.5 border-b border-doom-border-soft px-3 py-2.5 sm:px-[26px]",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "flex items-center gap-2",
+					children: [
+						/* @__PURE__ */ jsx(Input, {
+							"data-testid": "git-worktree-branch",
+							"aria-label": "Branch",
+							size: "sm",
+							className: "min-w-0 flex-1",
+							placeholder: "wt/fix-auth",
+							value: branch,
+							onChange: (event) => setBranch(event.target.value),
+							onKeyDown: (event) => {
+								if (event.key === "Enter") create();
+							}
+						}),
+						/* @__PURE__ */ jsx(Input, {
+							"data-testid": "git-worktree-base",
+							"aria-label": "Base ref",
+							size: "sm",
+							placeholder: "base (current)",
+							value: baseRef,
+							onChange: (event) => setBaseRef(event.target.value),
+							className: "w-32 shrink-0"
+						}),
+						/* @__PURE__ */ jsx(Button, {
+							"data-testid": "git-worktree-create",
+							size: "sm",
+							disabled: !canCreate,
+							onClick: create,
+							children: "Create"
+						})
+					]
+				}), createError === void 0 ? /* @__PURE__ */ jsx("p", {
+					className: "text-2xs text-doom-faint",
+					children: "Creates the worktree outside the repository and starts a session nested under this one."
+				}) : /* @__PURE__ */ jsx("p", {
+					role: "alert",
+					"data-testid": "git-worktree-error",
+					className: "text-2xs text-doom-red",
+					children: createError
+				})]
+			}),
+			panelError ? /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				"data-testid": "git-worktree-error",
+				className: "px-3 pt-2 text-2xs text-doom-red sm:px-[26px]",
+				children: session.error
+			}) : null,
+			session.worktrees.length === 0 ? /* @__PURE__ */ jsx(EmptyState, {
+				"data-testid": "git-worktrees-empty",
+				className: "px-4 py-8",
+				title: "no worktrees yet",
+				description: "a worktree is its own checkout on its own branch, with its own session nested under this one."
+			}) : /* @__PURE__ */ jsx("ul", {
+				"data-testid": "git-worktrees-list",
+				className: "flex flex-col gap-2.5 px-3 py-3 sm:px-[26px]",
+				children: session.worktrees.map((worktree) => /* @__PURE__ */ jsx(WorktreeCard, {
+					worktree,
+					sessionId,
+					busy,
+					error: closeErrorId === worktree.id ? session.error : void 0
+				}, worktree.id))
+			})
+		]
+	});
+}
+/** One worktree: what it is, where it is, and the one thing you can do to it. */
+function WorktreeCard({ worktree, sessionId, busy, error }) {
+	return /* @__PURE__ */ jsxs("li", {
+		"data-testid": `git-worktree-${worktree.id}`,
+		className: "flex min-w-0 flex-col gap-1.5 rounded-md border border-doom-border-soft bg-doom-panel p-2.5",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex min-w-0 items-center gap-1.5",
+				children: [
+					/* @__PURE__ */ jsx(Dot, { tone: worktree.orphaned ? "red" : worktree.sessionId === null ? "muted" : "blue" }),
+					/* @__PURE__ */ jsx("span", {
+						className: "min-w-0 flex-1 truncate text-sm font-bold text-doom-hi",
+						children: worktree.branch
+					}),
+					worktree.orphaned ? /* @__PURE__ */ jsx(StatusBadge, {
+						tone: "error",
+						size: "xs",
+						children: "orphaned"
+					}) : null,
+					worktree.unowned ? /* @__PURE__ */ jsx(StatusBadge, {
+						tone: "info",
+						size: "xs",
+						children: "unowned"
+					}) : null
+				]
+			}),
+			/* @__PURE__ */ jsx("span", {
+				className: "min-w-0 truncate text-2xs text-doom-faint",
+				children: worktree.path
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-center gap-1.5 pt-0.5",
+				children: [/* @__PURE__ */ jsx("span", { className: "min-w-0 flex-1" }), sessionId === null ? null : /* @__PURE__ */ jsx(Button, {
+					variant: "danger-outline",
+					size: "xs",
+					disabled: busy,
+					"data-testid": `git-worktree-close-${worktree.id}`,
+					className: "px-2 text-2xs font-bold",
+					onClick: () => requestWorktreeClose(sessionId, worktree.id),
+					children: "close"
+				})]
+			}),
+			error === void 0 ? null : /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				"data-testid": "git-worktree-error",
+				className: "text-2xs text-doom-red",
+				children: error
+			})
+		]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/activity-group/git.web.ts
+var git_web_default = defineActivityGroup({
+	keys: "g w",
+	activeSource: worktreeActivitySource,
+	marksBackgroundWork: false,
+	transientTab: worktreesTab,
+	order: 30
+});
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/channel/gitChanges.web.ts
+var gitChanges_web_default = defineChannelFile(gitChangesChannel);
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/channel/gitWorktrees.web.ts
+var gitWorktrees_web_default = defineChannelFile(worktreesChannel);
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/DiffActivitySection.tsx
+/**
+* The '# diff' group's body: this session's code change against its base.
+*
+* DESIGN PATTERNS:
+* - One lane, `+A -R`. Files, base, upstream and a paused rebase live in the
+*   review tab's header, which this lane and the group's name both open.
+* - Stays clickable at zero, because the review tab is also where pull, push
+*   and rebase live.
+* - Separate from '# git': worktrees are repository management, this is the
+*   session's own change.
+*
+* AVOID:
+* - Doing work here. This section reports and opens the tab.
+*/
+function DiffActivitySection({ sessionId, openTransientTab }) {
+	const session = useStore(gitChanges.store, (state) => gitChanges.select(state, sessionId));
+	const changes = session.changes;
+	if (sessionId === null || changes === void 0) return /* @__PURE__ */ jsx("p", {
+		"data-testid": "activity-summary-diff",
+		className: "px-2 text-xs text-doom-faint",
+		children: "idle"
+	});
+	const zero = changes.added === 0 && changes.removed === 0;
+	const against = changes.base === void 0 ? "uncommitted" : `vs ${changes.base}`;
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex min-w-0 items-center gap-2 px-1",
+		children: [/* @__PURE__ */ jsxs(Button, {
+			variant: "ghost",
+			size: "xs",
+			"data-testid": "activity-diff-changes",
+			"aria-label": `review changes: ${String(changes.added)} added, ${String(changes.removed)} removed ${against}`,
+			title: `${String(changes.files)} ${changes.files === 1 ? "file" : "files"} ${against}`,
+			className: `gap-1.5 px-1 text-xs font-bold ${zero ? "text-doom-faint" : ""}`,
+			onClick: () => openTransientTab(reviewTab()),
+			children: [/* @__PURE__ */ jsxs("span", {
+				className: zero ? "" : "text-doom-green",
+				children: ["+", changes.added]
+			}), /* @__PURE__ */ jsxs("span", {
+				className: zero ? "" : "text-doom-red",
+				children: ["-", changes.removed]
+			})]
+		}), session.pending === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+			className: "flex min-w-0 items-center gap-1.5",
+			children: [/* @__PURE__ */ jsx(Spinner, {
+				className: "h-3 w-3 shrink-0 text-doom-faint",
+				label: session.pending
+			}), /* @__PURE__ */ jsx("span", {
+				className: "min-w-0 truncate text-xs text-doom-dim",
+				children: session.pending
+			})]
+		})]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/Diff.activity.diff.web.tsx
+var Diff_activity_diff_web_default = defineFill({ component: DiffActivitySection });
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/WorktreeCreateDialog.tsx
+function WorktreeSessionMenu({ sessionId, sessionReservationId }) {
+	return /* @__PURE__ */ jsx(DropdownMenuItem, {
+		disabled: sessionId === null,
+		"data-testid": `session-worktree-${sessionReservationId ?? sessionId}`,
+		onSelect: () => {
+			if (sessionId !== null) worktreeCreateDialog.update(() => ({
+				sessionId,
+				...sessionReservationId === void 0 ? {} : { reservationId: sessionReservationId }
+			}));
+		},
+		children: "create worktree session…"
+	});
+}
+function WorktreeCreateOverlay(props) {
+	const target = useStore(worktreeCreateDialog.store);
+	const { holdSessionChannels } = props;
+	useEffect(() => {
+		if (target === null) return;
+		return holdSessionChannels?.(target.sessionId, (frame) => {
+			if (frame.type !== worktreesChannel.channel) return;
+			const payload = worktreesChannel.parse(frame.payload);
+			if (payload !== null) worktreesChannel.apply(target.sessionId, payload);
+		});
+	}, [target, holdSessionChannels]);
+	if (target === null) return null;
+	return /* @__PURE__ */ jsx(Dialog, {
+		open: true,
+		onOpenChange: (open) => {
+			if (!open) worktreeCreateDialog.update(() => null);
+		},
+		children: /* @__PURE__ */ jsxs(DialogContent, {
+			width: "lg",
+			"data-testid": "session-worktree-dialog",
+			children: [/* @__PURE__ */ jsx(DialogHeader, { children: /* @__PURE__ */ jsx(DialogTitle, { children: "create worktree session" }) }), /* @__PURE__ */ jsxs(DialogBody, { children: [/* @__PURE__ */ jsx(DialogDescription, { children: "Creates a separate checkout and a new session. Existing sessions stay in their current directories." }), /* @__PURE__ */ createElement(WorktreesPanel, {
+				...props,
+				key: `${target.sessionId}:${target.reservationId ?? ""}`,
+				sessionId: target.sessionId,
+				sessionReservationId: target.reservationId
+			})] })]
+		})
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/Worktree.session-menu.web.tsx
+var Worktree_session_menu_web_default = defineFill({ component: WorktreeSessionMenu });
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/WorktreeCreate.overlay.web.tsx
+var WorktreeCreate_overlay_web_default = defineFill({ component: WorktreeCreateOverlay });
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/WorktreesActivitySection.tsx
+/**
+* The '# git' group's body in the activity dock.
+*
+* DESIGN PATTERNS:
+* - One line per worktree, the same rule the runners rail follows: enough to
+*   notice it, not enough to work with it. The group's own name opens the tab
+*   that has room.
+* - Idle still shows the launcher. A repository with no worktrees is the state
+*   where someone most wants to make one.
+*
+* AVOID:
+* - Doing work here. This section reports and launches; the panel and the tool
+*   own everything else.
+*/
+function WorktreesActivitySection({ sessionId, openTransientTab }) {
+	const session = useStore(worktreeActivity.store, (state) => worktreeActivity.select(state, sessionId));
+	if (session.worktrees.length === 0 && session.pending === void 0) return /* @__PURE__ */ jsxs("div", {
+		className: "flex items-center gap-2 px-1",
+		children: [/* @__PURE__ */ jsx("p", {
+			"data-testid": "activity-summary-git",
+			className: "px-1 text-xs text-doom-faint",
+			children: "idle"
+		}), sessionId === null ? null : /* @__PURE__ */ jsx(Button, {
+			variant: "link",
+			size: "xs",
+			"data-testid": "activity-git-create",
+			className: "px-0",
+			onClick: () => openTransientTab(worktreesTab()),
+			children: "create a worktree"
+		})]
+	});
+	return /* @__PURE__ */ jsxs("div", {
+		"data-testid": "activity-git-worktrees",
+		className: "flex flex-col gap-0.5",
+		children: [session.pending === void 0 ? null : /* @__PURE__ */ jsxs("span", {
+			className: "flex min-w-0 items-center gap-1.5 px-1",
+			children: [/* @__PURE__ */ jsx(Spinner, {
+				className: "h-3 w-3 shrink-0 text-doom-faint",
+				label: session.pending
+			}), /* @__PURE__ */ jsx("span", {
+				className: "min-w-0 truncate text-xs text-doom-dim",
+				children: session.pending
+			})]
+		}), session.worktrees.map((worktree) => /* @__PURE__ */ jsx(Button, {
+			variant: "ghost",
+			size: "card",
+			"data-testid": `activity-git-worktree-${worktree.id}`,
+			className: "min-w-0 gap-1.5 px-1",
+			onClick: () => openTransientTab(worktreesTab()),
+			children: /* @__PURE__ */ jsxs("span", {
+				className: "flex w-full min-w-0 items-center gap-1.5",
+				children: [
+					/* @__PURE__ */ jsx(Dot, { tone: worktree.orphaned ? "red" : worktree.sessionId === null ? "muted" : "blue" }),
+					/* @__PURE__ */ jsx("span", {
+						className: "min-w-0 flex-1 truncate text-left text-xs font-bold text-doom-hi",
+						children: worktree.branch
+					}),
+					worktree.orphaned ? /* @__PURE__ */ jsx(StatusBadge, {
+						tone: "error",
+						size: "xs",
+						children: "orphaned"
+					}) : null,
+					worktree.unowned ? /* @__PURE__ */ jsx(StatusBadge, {
+						tone: "info",
+						size: "xs",
+						children: "unowned"
+					}) : null
+				]
+			})
+		}, worktree.id))]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/Worktrees.activity.git.web.tsx
+var Worktrees_activity_git_web_default = defineFill({ component: WorktreesActivitySection });
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/lifecycle/_lib/start.web.ts
+/** Binds both hub channels' senders: worktrees, and this session's diff and sync. */
+function startGitRuntime(runtime) {
+	const stopWorktrees = startWorktreeRuntime(runtime);
+	const stopChanges = startGitChangesRuntime(runtime);
+	return () => {
+		stopChanges();
+		stopWorktrees();
+	};
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/lifecycle/start.web.ts
+var start_web_default = defineWebLifecycle(startGitRuntime);
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_components/RunWorktreeToolMessage.tsx
+const ACTION_LABEL = {
+	spawn_worktree: "Create worktree",
+	close_worktree: "Close worktree",
+	list: "List worktrees",
+	status: "Worktree status",
+	merge: "Merge worktree",
+	prune: "Prune worktrees",
+	send: "Message worktree",
+	messages: "Read worktree messages"
+};
+/**
+* The timeline item for `run_worktree`.
+*
+* DESIGN PATTERNS:
+* - Built on MessageItem, like every other tool renderer in the cockpit. That
+*   is what gives it the shared collapse toggle and the RUNNING/OK/ERROR badge
+*   rather than a hand-rolled ellipsis that never resolves.
+* - The action and its subject go in the heading because that is what a reader
+*   scanning a transcript needs: "close_worktree a1b2c3d4" answers the question
+*   the raw JSON arguments make them decode.
+* - A create takes as long as the cockpit needs to start a session, and the
+*   tool streams each phase into `output`, so the body is where the wait is
+*   visible.
+*/
+function RunWorktreeToolMessage({ args, output, running, isError }) {
+	const action = typeof args.action === "string" ? args.action : "";
+	const subject = typeof args.branch === "string" ? args.branch : typeof args.id === "string" ? args.id : "";
+	return /* @__PURE__ */ jsxs(MessageItem, {
+		tone: toolTone({
+			running,
+			isError
+		}),
+		expandable: output !== "",
+		children: [/* @__PURE__ */ jsx(MessageItemHeader, {
+			title: ACTION_LABEL[action] ?? "Worktree",
+			children: subject === "" ? null : /* @__PURE__ */ jsx("span", {
+				className: "min-w-0 truncate text-doom-dim",
+				children: subject
+			})
+		}), output === "" ? null : /* @__PURE__ */ jsx(MessageItemBody, { children: /* @__PURE__ */ jsx("pre", {
+			className: `whitespace-pre-wrap text-xs ${isError ? "text-doom-red" : "text-doom-dim"}`,
+			children: output
+		}) })]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/runWorktree.web.tsx
+var runWorktree_web_default = defineToolRenderer({ message: RunWorktreeToolMessage });
+//#endregion
+//#region generated/web.ts
+const via = (identity, value) => value === void 0 ? void 0 : {
+	...identity,
+	...value
+};
+const webPlugin = defineWebPlugin({
+	id: "git",
+	workspace: {
+		get fills() {
+			return [via({
+				slot: "new-session",
+				id: "git-new-session"
+			}, GitNewSession_new_session_web_default)];
+		},
+		get repositorySettingsPanel() {
+			return git_web_default$1;
+		}
+	},
+	session: {
+		get activityGroups() {
+			return [via({ name: "diff" }, diff_web_default), via({ name: "git" }, git_web_default)];
+		},
+		get channels() {
+			return [via({ channel: "git_changes" }, gitChanges_web_default), via({ channel: "git_worktrees" }, gitWorktrees_web_default)];
+		},
+		get fills() {
+			return [
+				via({
+					slot: "activity.diff",
+					id: "diff"
+				}, Diff_activity_diff_web_default),
+				via({
+					slot: "session-menu",
+					id: "worktree"
+				}, Worktree_session_menu_web_default),
+				via({
+					slot: "overlay",
+					id: "worktree-create"
+				}, WorktreeCreate_overlay_web_default),
+				via({
+					slot: "activity.git",
+					id: "worktrees"
+				}, Worktrees_activity_git_web_default)
+			];
+		},
+		get start() {
+			return start_web_default;
+		},
+		get toolRenderers() {
+			return [via({ tools: ["run_worktree"] }, runWorktree_web_default)];
+		}
+	}
+});
+//#endregion
+export { webPlugin };
+
+//# sourceMappingURL=web.mjs.map