@dev.fast/whiteboard 0.2.4 → 0.2.5-preview.20261013.109

package/dist/{account-alias-_1_7vROx.js → account-alias-D0hF0sKk.js}

@@ -1,8 +1,7 @@
 import { h as ReviewCliInstallStampSchema } from "./src-WCbabvdS.js";
-import { G as readStoreAuth, Z as StoreClient } from "./review-agent-traces-DNJFYzc8.js";
+import { C as disableTraceMachine, E as traceMachineStatus, G as listTraceRepositoryRoots, K as traceRepositoryStatus, Q as removeAgentTraceHook, S as configureTraceMachine, T as traceMachineEnabled, U as disableAllTraceRepositories, W as enableTraceRepository, X as describeTraceHookOwners, Y as AGENT_TRACE_HOOK_AGENTS, Z as installHarnessHooks, dt as StoreClient, n as reviewDesktopStateDir, nt as traceScope, ot as readStoreAuth } from "./review-home-paths-Y9mYWkCI.js";
 import { A as devReviewHome, N as writeFileAtomicAsync, O as withFileLock, P as writePrivateJsonAtomic } from "./s3-config-CAxhO9u_.js";
-import { B as installHarnessHooks, C as disableTraceMachine, E as traceMachineStatus, F as listTraceRepositoryRoots, G as traceScope, I as traceRepositoryStatus, N as disableAllTraceRepositories, P as enableTraceRepository, R as AGENT_TRACE_HOOK_AGENTS, S as configureTraceMachine, T as traceMachineEnabled, V as removeAgentTraceHook, n as reviewDesktopStateDir, z as describeTraceHookOwners } from "./review-home-paths-6zZH-1c9.js";
-import { i as readReviewPackageVersion } from "./package-paths-B6-zxvIO.js";
+import { i as readReviewPackageVersion } from "./package-paths-B9PDoAl6.js";
 import { n as isFile, t as isDirectory } from "./fs-utils-BMPLt0cr.js";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";

package/dist/{agent-cli-BrFqhnzM.js → agent-cli-BBPxwUOd.js}

@@ -1,11 +1,11 @@
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import { a as toolResultText, i as connectReviewInstance, s as ReviewApiError } from "./agent-client-B_b1GtUc.js";
+import { T as traceMachineEnabled } from "./review-home-paths-Y9mYWkCI.js";
+import { a as toolResultText, i as connectReviewInstance, s as ReviewApiError } from "./agent-client-P3J4y8Zn.js";
 import { A as devReviewHome } from "./s3-config-CAxhO9u_.js";
-import { T as traceMachineEnabled } from "./review-home-paths-6zZH-1c9.js";
-import { d as selectReviewInstance, t as REVIEW_INSTANCE_ENV } from "./desktop-discovery-C-Qz54wO.js";
-import { n as reviewSessionAgent } from "./review-telemetry-DBy3eVCo.js";
+import { d as selectReviewInstance, t as REVIEW_INSTANCE_ENV } from "./desktop-discovery-Ba3dD5Cn.js";
+import { n as reviewSessionAgent } from "./review-telemetry-CmM6tCbj.js";
 import { n as REVIEW_VIA_HEADER, t as REVIEW_AGENT_HEADER } from "./request-origin-DA4K1qWY.js";
-import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-DJmTieh5.js";
+import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-CJHBCHMh.js";
 //#region src/review-api/agent-cli.ts
 const reviewAgentCliHelp = "whiteboard api tools  (one line per tool)\nwhiteboard api tools <tool-name>  (its description and input schema)\nwhiteboard api <tool-name> '<json>'\nwhiteboard api <tool-name> -  (read JSON from stdin)\nwhiteboard mcp  (stdio MCP adapter; Whiteboard Desktop or whiteboard server start must be running)\nSelect headless state with DEV_REVIEW_SERVER_DIR or whiteboard --state-dir <path> api/mcp.\n";
 async function runReviewAgentCli(input) {
@@ -23,7 +23,7 @@ async function runReviewAgentCli(input) {
 			[REVIEW_AGENT_HEADER]: reviewSessionAgent(env)
 		};
 		if (mode === "mcp") {
-			const { serveReviewMcp } = await import("./mcp-BDy9Aybd.js");
+			const { serveReviewMcp } = await import("./mcp-t7VN9R3k.js");
 			await serveReviewMcp(async (key, agentKind) => {
 				const connected = await connectReviewInstance(key ? {
 					...env,

package/dist/agent-cli-YSuhE5X8.js

@@ -0,0 +1,2 @@
+import { n as runReviewAgentCli } from "./agent-cli-BBPxwUOd.js";
+export { runReviewAgentCli };

package/dist/{agent-client-B_b1GtUc.js → agent-client-P3J4y8Zn.js}

@@ -1,8 +1,8 @@
+import { C as ReviewInputError } from "./src-DiHP11l3.js";
 import { d as isBooleanValue, f as isNumberValue, m as isStringValue, u as parseJsonText } from "./src-X9phtB2j.js";
 import "./src-WCbabvdS.js";
-import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { d as selectReviewInstance, i as healthyReviewInstance, n as ReviewInstanceUnavailableError, u as reviewInstanceUnavailable } from "./desktop-discovery-C-Qz54wO.js";
-import { a as reviewServerIsHealthy, n as readReviewServerDiscovery, o as reviewServerStateDir, s as serverNotReady } from "./server-discovery-Dbzn3w6Z.js";
+import { d as selectReviewInstance, i as healthyReviewInstance, n as ReviewInstanceUnavailableError, u as reviewInstanceUnavailable } from "./desktop-discovery-Ba3dD5Cn.js";
+import { a as reviewServerIsHealthy, n as readReviewServerDiscovery, o as reviewServerStateDir, s as serverNotReady } from "./server-discovery-ZVi8Ay8J.js";
 //#region ../review-protocol/src/review-api-client.ts
 const defaultRequest = (url, init) => fetch(url, init);
 /** A non-2xx reply; the status tells a caller whether retrying can help. */

package/dist/{authoring-tools-DvIO906l.js → authoring-tools-D8WXsm_g.js}

@@ -1,7 +1,7 @@
-import { g as activityUpdateSchema, h as activityEndSchema, i as commandSchema, m as activityBeginSchema, n as uploadSchema } from "./local-data-Bm84Xdck.js";
-import { x as publishedEditSchema, y as pathTargetSchema } from "./stored-document-migration-BxZWQQjv.js";
-import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { t as findReviewPackageRoot } from "./package-paths-B6-zxvIO.js";
+import { C as ReviewInputError } from "./src-DiHP11l3.js";
+import { g as activityUpdateSchema, h as activityEndSchema, i as commandSchema, m as activityBeginSchema, n as uploadSchema } from "./local-data-BlERtVm2.js";
+import { x as publishedEditSchema, y as pathTargetSchema } from "./stored-document-migration-u4L_1VZa.js";
+import { t as findReviewPackageRoot } from "./package-paths-B9PDoAl6.js";
 import { z } from "zod";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
@@ -92,7 +92,7 @@ const COMPONENT_REFERENCE = [
 	"- call_stack_diff {title, base: frame[], head: frame[], pins?}; either side may be empty",
 	"- frame {source: anchor, label?, key?, parentKey? (an earlier frame on that side), callSite?: anchor, contextSources?: anchor[], via?: {kind: call|queue|callback|rpc, reason}, pins?}",
 	"- database_lens {title, actors: {key: label}, stores: {key: store}, useCases: useCase[] (1 or more), pins?}",
-	"- store {label, storage: relational|document, collections: {key: {label, fields: {key: field}}}, dataStoreKind?: database|objectStore|bucket|artifactStore|fileStore}",
+	"- store {label, storage: relational|document, collections: {key: {label, fields: {key: field}, source?: anchor of its schema declaration}}, dataStoreKind?: database|objectStore|bucket|artifactStore|fileStore}",
 	"- field {label, dataType, nullable?, primaryKey?, references?: {store, collection, field}, fields?: {key: field}}",
 	"- useCase {label, summary?, operations: operation[] (1 or more)}; operation {kind: read|write, actor, store, collection, label, source: anchor, field?, detail?, pins?}, naming declared keys",
 	"",
@@ -166,7 +166,7 @@ function authoringTools(scratchpadAvailable = false, traceEnabled = false) {
 		kind: true
 	});
 	const descriptions = {
-		create: "Create a review of saved working files, immutable commits or a GitHub PR. Revisions are resolved on acceptance. A worktree target reviews the saved files in its checkout, uncommitted ones included and untracked ones left out (git add -N a new file to include it), against base: the branch to compare against, by default the default branch of the repository. The diff starts at the merge base of base and HEAD, which follows rebases. Omitted commits base means source at head with no diff; supply the parent to review introduced changes. For a GitHub PR, pullRequestUrl alone is enough: target and title become optional, and the host fetches the PR into a registered checkout of its repository and pins the current PR head and GitHub diff base, titled from the PR. When a review for that PR exists, it is returned instead, reporting whether its head moved and whether an agent is working on it; update it in place, move its target with review_set_target, or create a separate review with reuseExisting. kind:\"scratchpad\" names the one scratchpad, which the host creates itself. The result carries review, the review as review_list shows it: its target with resolved commits, origin (its PR), repositoryName and repositoryPath, so no follow-up read is needed before diffing. When Desktop is available the review opens there and the result reports opened, softwareMapEnabled and environmentIssues, as review_open does; set open:false to author in the background without taking over Desktop.",
+		create: "Create a review of saved working files, immutable commits or a GitHub PR. Revisions are resolved on acceptance. A worktree target reviews the saved files in its checkout, uncommitted ones included and untracked ones left out (git add -N a new file to include it), against base: the branch to compare against, by default the default branch of the repository. The diff starts at the merge base of base and HEAD, which follows rebases. Omitted commits base means source at head with no diff; supply the parent to review introduced changes. For a GitHub PR, pullRequestUrl alone is enough: target and title become optional, and the host fetches the PR into a registered checkout of its repository and pins the current PR head and GitHub diff base, titled from the PR. When the existing review for that PR is in Trash, creation reports its ID; restore it with review_lifecycle state:\"active\" before continuing. When an active review for that PR exists, it is returned instead, reporting whether its head moved and whether an agent is working on it; update it in place, move its target with review_set_target, or create a separate review with reuseExisting. kind:\"scratchpad\" names the one scratchpad, which the host creates itself. The result carries review, the review as review_list shows it: its target with resolved commits, origin (its PR), repositoryName and repositoryPath, so no follow-up read is needed before diffing. When Desktop is available the review opens there and the result reports opened, softwareMapEnabled and environmentIssues, as review_open does; set open:false to author in the background without taking over Desktop.",
 		set_target: "Move the review to a new target, such as the commits after a rebase or amend, preserving the document and component IDs. Revisions are resolved on acceptance. Returns warnings for retained source ranges in files the new commits changed, to verify, and resources that no longer match; fix them with review_edit. Earlier versions keep their source. Omitted pullRequestUrl keeps the PR within the same repository; changing repositories clears it. Supply a URL to replace it or null to detach.",
 		edit: [
 			"Edit one document component. content is one component, named by its type; each type's fields are in the Components section of session_get_instructions (authoring or scratchpad).",
@@ -178,11 +178,12 @@ function authoringTools(scratchpadAvailable = false, traceEnabled = false) {
 		lens_edit: "Edit one Diff-view lens. Lenses partition the review's change for the Diff view; they sit beside the document (never in it) and version with it. The host assigns durable lens IDs; updates replace only the fields supplied. Write one lens per call while a reader may be watching; each draws in on the Diffs page. Pass your activityId so your courier draws each lens. The result identifies the lens and reports uncategorized: changed lines no lens selects yet, grouped by file. Keep adding lenses until it is empty or what remains is deliberate. review_lens_get reads the current lenses and gaps.",
 		rename: "Change the review title.",
 		restore: "Restore title, source pins, PR identity and content from a saved version.",
-		attention: "Mark a review viewed, dismissed or restored without changing its content.",
-		delete: "Permanently delete this review and its history."
+		attention: "Mark an active review viewed without changing its content or lifecycle. Restore a review from Trash before marking it viewed.",
+		lifecycle: "Move a review between active and trash. Trash retains the review for 30 days before automatic deletion. Moving it back to active restores it; moving it to trash again does not restart that period.",
+		delete: "Permanently delete a review and its history. The review must be in Trash. This cannot be undone."
 	};
 	const tool = (name, description, schema, method, path, commandType) => ({
-		name: `review_${name}`,
+		name: `review_${name === "restore" ? "restore_version" : name}`,
 		description,
 		inputSchema: {
 			...z.toJSONSchema(schema, { io: "input" }),
@@ -220,7 +221,7 @@ function authoringTools(scratchpadAvailable = false, traceEnabled = false) {
 		}), "GET", "/:reviewId/inspect"),
 		tool("lens_get", "Read the review's Diff-view lenses as authored (ids, titles, targets), each lens's resolved fileCount (and unavailable reason, if any), and uncategorized: the changed lines no lens selects yet, by file.", z.strictObject(review), "GET", "/:reviewId/lenses"),
 		tool("history", "List saved document versions.", z.strictObject(review), "GET", "/:reviewId/history"),
-		tool("open", "Show an existing review immediately and prepare current pinned checkouts in the background. Returns softwareMapEnabled and any already-recorded environmentIssues. Missing optional setup is not an issue; use review_environment to recheck.", z.strictObject(review), "POST", "/:reviewId/open"),
+		tool("open", "Show an active review immediately; restore it from Trash before opening it. Prepare current pinned checkouts in the background. Returns softwareMapEnabled and any already-recorded environmentIssues. Missing optional setup is not an issue; use review_environment to recheck.", z.strictObject(review), "POST", "/:reviewId/open"),
 		tool("environment", "Acquire and recheck this review's current base/head language checkouts (not historical or selected commits). Returns acquisition issues, not full LSP health. Missing optional setup and failed setup with a usable checkout stay silent. Set retry:true to rerun failed preparation after an actual language-feature failure; preparation runs in the background.", z.strictObject({
 			...review,
 			retry: z.boolean().optional()

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"0.2.4","commit":"5b00f0e66d034e187a29d270b3690a37b57ccf7b","dirty":true,"builtAt":"2026-10-09T06:23:07.418Z"}
+{"version":"0.2.5-preview.20261013.109","commit":"a3d88565d0643e8a8f9e80f24a9b9d29b6a97e3d","dirty":true,"builtAt":"2026-10-13T01:39:18.933Z"}

package/dist/{cli-gRGxkwc0.js → cli-C0ziP6hg.js}

@@ -1,4 +1,4 @@
-import { r as connectReviewApi } from "./agent-client-B_b1GtUc.js";
+import { r as connectReviewApi } from "./agent-client-P3J4y8Zn.js";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
 //#region src/sharing/cli.ts

package/dist/{cli-runner-Cjl8h376.js → cli-runner-C1gY-HAI.js}

@@ -1,19 +1,18 @@
-import { C as __commonJSMin, S as setLocalVcsCommandObserver, T as __toESM, w as __require } from "./src-CmdiBL20.js";
+import { E as __toESM, S as setLocalVcsCommandObserver, T as __require, w as __commonJSMin } from "./src-DiHP11l3.js";
 import { c as jsonString, n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
 import { a as parseReviewVerbResponse } from "./src-WCbabvdS.js";
-import { $ as emitJsonEvent, G as readStoreAuth, H as DEFAULT_STORE_ORIGIN, J as runStoreLogout, N as requireTraceConsent, P as resolveTraceRepositoryTarget, Q as withStoreAuthorization, V as readTraceUserConfig, X as StoreApiError, Y as runStoreWhoami, Z as StoreClient, b as selectTraceStorage, et as failWithJsonError, g as describeSelection, nt as jsonRequestedInArgv, q as runStoreLogin, tt as humanStream, v as loadS3TraceStorage } from "./review-agent-traces-DNJFYzc8.js";
-import { o as ReviewApiClient, s as ReviewApiError } from "./agent-client-B_b1GtUc.js";
+import { $ as resolveTraceCommand, A as runTraceDeny, E as traceMachineStatus, F as describeSelection, H as resolveTraceRepositoryTarget, J as HOSTED_CAPTURE_SCOPE_DESCRIPTION, K as traceRepositoryStatus, L as loadS3TraceStorage, M as runTraceSessions, N as runTraceStoreDelete, P as runTraceStoreInfo, T as traceMachineEnabled, V as requireTraceConsent, _ as runTraceRepair, b as runTraceGitHook, c as registerTraceCommands, ct as runStoreLogout, d as runTraceList$1, dt as StoreClient, f as runTracePull$1, ft as withStoreAuthorization, g as runTraceInstallMachine, gt as jsonRequestedInArgv, h as runTraceEnable, ht as humanStream, j as runTraceOnboard, k as runTraceAllow, l as resolveTraceReadStorage, lt as runStoreWhoami, m as runTraceDisable, mt as failWithJsonError, nt as traceScope, ot as readStoreAuth, p as runTraceShow, pt as emitJsonEvent, q as readTraceUserConfig, rt as DEFAULT_STORE_ORIGIN, st as runStoreLogin, tt as traceHomeDir, u as runTraceBlame, ut as StoreApiError, v as runTraceStatus, w as readLegacyCaptureSettings, x as runTraceHook, y as runTraceSync, z as selectTraceStorage } from "./review-home-paths-Y9mYWkCI.js";
+import { o as ReviewApiClient, s as ReviewApiError } from "./agent-client-P3J4y8Zn.js";
 import { t as resolveReviewRoot } from "./runtime-CKiWhGrf.js";
 import { A as devReviewHome, C as s3ProfileSchema, D as processIsAlive, E as writeTraceConfigFile, S as readTraceConfigFile, T as sameS3Profile, _ as emptyTraceConfig, c as resolveS3Setup, g as currentStore, h as TraceConfigurationError, i as isS3MockMode, j as normalizeStoreOrigin, k as DEV_REVIEW_HOME_ENV, n as clearTraceEnvCache, o as readTraceEnvFile, p as traceSettingsPath, w as s3Store } from "./s3-config-CAxhO9u_.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
-import { A as runTraceSessions, D as runTraceAllow, E as traceMachineStatus, G as traceScope, H as resolveTraceCommand, I as traceRepositoryStatus, L as HOSTED_CAPTURE_SCOPE_DESCRIPTION, M as runTraceStoreInfo, O as runTraceDeny, T as traceMachineEnabled, W as traceHomeDir, _ as runTraceRepair, b as runTraceGitHook, c as registerTraceCommands, d as runTraceList$1, f as runTracePull$1, g as runTraceInstallMachine, h as runTraceEnable, j as runTraceStoreDelete, k as runTraceOnboard, l as resolveTraceReadStorage, m as runTraceDisable, p as runTraceShow, u as runTraceBlame, v as runTraceStatus, w as readLegacyCaptureSettings, x as runTraceHook, y as runTraceSync } from "./review-home-paths-6zZH-1c9.js";
-import { i as readReviewPackageVersion, r as readBuildInfo, t as findReviewPackageRoot } from "./package-paths-B6-zxvIO.js";
-import { a as readDefaultReviewInstance, d as selectReviewInstance, f as writeDefaultReviewInstance, i as healthyReviewInstance, l as reviewInstanceStartHint, n as ReviewInstanceUnavailableError, o as readReviewInstances, r as clearDefaultReviewInstance, s as requireHealthyReviewDesktop, t as REVIEW_INSTANCE_ENV, u as reviewInstanceUnavailable } from "./desktop-discovery-C-Qz54wO.js";
-import { t as ReviewTelemetry } from "./review-telemetry-DBy3eVCo.js";
-import { a as isOwnedShim, f as windowsInstallerCommand, m as connectPrompts, o as pathShimPath, p as scanLegacySkills, t as aliasInstallationToAccount } from "./account-alias-_1_7vROx.js";
+import { i as readReviewPackageVersion, r as readBuildInfo, t as findReviewPackageRoot } from "./package-paths-B9PDoAl6.js";
+import { a as readDefaultReviewInstance, d as selectReviewInstance, f as writeDefaultReviewInstance, i as healthyReviewInstance, l as reviewInstanceStartHint, n as ReviewInstanceUnavailableError, o as readReviewInstances, r as clearDefaultReviewInstance, s as requireHealthyReviewDesktop, t as REVIEW_INSTANCE_ENV, u as reviewInstanceUnavailable } from "./desktop-discovery-Ba3dD5Cn.js";
+import { t as ReviewTelemetry } from "./review-telemetry-CmM6tCbj.js";
+import { a as isOwnedShim, f as windowsInstallerCommand, m as connectPrompts, o as pathShimPath, p as scanLegacySkills, t as aliasInstallationToAccount } from "./account-alias-D0hF0sKk.js";
 import { t as fuzzyRank } from "./fuzzy-match-BoAmcyak.js";
-import { n as readReviewServerDiscovery, o as reviewServerStateDir, r as readReviewServerHealth, s as serverNotReady } from "./server-discovery-Dbzn3w6Z.js";
-import { t as reviewAgentCliHelp } from "./agent-cli-BrFqhnzM.js";
+import { n as readReviewServerDiscovery, o as reviewServerStateDir, r as readReviewServerHealth, s as serverNotReady } from "./server-discovery-ZVi8Ay8J.js";
+import { t as reviewAgentCliHelp } from "./agent-cli-BBPxwUOd.js";
 import { closeSync, existsSync, fstatSync, mkdirSync, mkdtempSync, openSync, readSync, renameSync, writeFileSync } from "node:fs";
 import { realpath } from "node:fs/promises";
 import path from "node:path";
@@ -394,7 +393,7 @@ async function runReviewAppPick(input, overrides = {}) {
 	else {
 		if (!input.stdin.isTTY) throw new ReviewAppUsageError("whiteboard app pick needs a terminal without --session. Pass --session <uuid> or run it in a terminal.");
 		const root = await runtime.resolveReviewRoot(input.cwd);
-		const reviews = (await client.read("")).filter((review) => review.repositoryPath === root && !review.dismissedAt).sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+		const reviews = (await client.read("")).filter((review) => review.repositoryPath === root && !review.trashedAt).sort((a, b) => b.createdAt.localeCompare(a.createdAt));
 		if (!reviews.length) throw new ReviewAppStateError("No review to show.");
 		const picked = await runtime.pickReview(reviews.map((review) => ({
 			uuid: review.reviewId,
@@ -440,7 +439,7 @@ async function runReviewInfo(input, runtime = {
 	const root = await runtime.resolveReviewRoot(input.cwd);
 	return {
 		event: "info",
-		reviews: reviews.filter((review) => review.repositoryPath === root && (input.all || !review.dismissedAt))
+		reviews: reviews.filter((review) => review.repositoryPath === root && (input.all || !review.trashedAt))
 	};
 }
 //#endregion
@@ -4495,7 +4494,7 @@ async function runReviewCli(input) {
 		process.once("SIGINT", stop);
 		process.once("SIGTERM", stop);
 		try {
-			const { runHeadlessServer } = await import("./headless-host-DcWaxx9P.js");
+			const { runHeadlessServer } = await import("./headless-host-BHD_Vg5F.js");
 			await runHeadlessServer({
 				stateDir,
 				port,
@@ -4546,7 +4545,7 @@ async function runReviewCli(input) {
 		if (problem) throw new Error(`Cannot tell whether a Whiteboard Desktop is using ${stateDir}: ${problem.message}`);
 		const inUse = () => /* @__PURE__ */ new Error(`A Whiteboard server is using ${stateDir}. Stop it first, then run whiteboard server reset-id again.`);
 		if (desktops.instances.some(({ discovery }) => [discovery.appPid, discovery.serverPid].some((pid) => processIsAlive(pid)))) throw inUse();
-		const [{ openReviewProfile }, { withHeadlessServerLock }] = await Promise.all([import("./profile-BQGaX8aX.js"), import("./headless-host-DcWaxx9P.js")]);
+		const [{ openReviewProfile }, { withHeadlessServerLock }] = await Promise.all([import("./profile-j97aRTS7.js"), import("./headless-host-BHD_Vg5F.js")]);
 		const reset = await withHeadlessServerLock(await realpath(stateDir), async () => {
 			const local = await openReviewProfile(stateDir, { manageWorkspaces: false });
 			try {
@@ -4686,14 +4685,14 @@ async function runReviewCli(input) {
 		command.showHelpAfterError(false).error("Markdown review migration is no longer supported. Ask your agent to migrate your old Whiteboard reviews.");
 	});
 	configureJsonOutput(configureJsonOutput(program.command("share").description("Upload an immutable review snapshot and return its share link"), "plain").option("--review <id>", "review ID").option("--version <number>", "Saved version to share").option("--preview", "Open the share link in Whiteboard Preview by default").option("--request-id <uuid>", "Reuse this ID when retrying the same immutable upload").action(async (options) => {
-		const { runShareCli } = await import("./cli-gRGxkwc0.js");
+		const { runShareCli } = await import("./cli-C0ziP6hg.js");
 		state.exitCode = await runShareCli({
 			...input,
 			...options,
 			env: authoringEnv()
 		});
 	}).command("revoke <share-id>").description("Revoke future downloads of a share"), "plain").action(async (shareId, options) => {
-		const { runShareCli } = await import("./cli-gRGxkwc0.js");
+		const { runShareCli } = await import("./cli-C0ziP6hg.js");
 		state.exitCode = await runShareCli({
 			...input,
 			...options,
@@ -4774,7 +4773,7 @@ async function runReviewCli(input) {
 		return commands;
 	} });
 	for (const [name, description] of [["api", "Call a JSON review authoring tool on the running server"], ["mcp", "Serve the JSON review authoring tools over stdio MCP"]]) configureOutput(program.command(name).description(description).argument("[args...]", "tool name and JSON input").allowUnknownOption().allowExcessArguments().helpOption(false).passThroughOptions().addHelpText("after", `\n${reviewAgentCliHelp}`), "plain").action(async (args) => {
-		const { runReviewAgentCli } = await import("./agent-cli-BR2j-2n5.js");
+		const { runReviewAgentCli } = await import("./agent-cli-YSuhE5X8.js");
 		state.exitCode = await runReviewAgentCli({
 			...input,
 			env: authoringEnv(),

package/dist/cli.js

@@ -17,7 +17,7 @@ async function runCli(effectivePath) {
 `);
 		return 1;
 	}
-	const { runReviewCli } = await import("./cli-runner-Cjl8h376.js");
+	const { runReviewCli } = await import("./cli-runner-C1gY-HAI.js");
 	return runReviewCli({
 		argv,
 		cliPaths: {

package/dist/{client-BFClfQLO.js → client-DzcSt6pV.js}

@@ -1,8 +1,7 @@
-import { d as gitAt } from "./src-CmdiBL20.js";
+import { C as ReviewInputError, d as gitAt } from "./src-DiHP11l3.js";
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
 import "./src-WCbabvdS.js";
-import { B as parseMarkdown, C as resourceReferences, E as sourceReferences, K as sourceAnchors, M as lensSchema, N as lensSelections, O as checkReferences, S as resourceReference, _ as hasCodeReferences, b as pinsSchema, c as traceSchema, h as elements, l as textIncludesQuote, n as migrateStoredDocument, o as normalizedSoftwareElementSchema, p as documentSchema, r as migrateStoredLenses, s as normalizedSoftwareRelationshipSchema, t as liftFileLenses, u as anchorPins, z as markdownNodes } from "./stored-document-migration-BxZWQQjv.js";
-import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
+import { B as parseMarkdown, C as resourceReferences, E as sourceReferences, K as sourceAnchors, M as lensSchema, N as lensSelections, O as checkReferences, S as resourceReference, _ as hasCodeReferences, b as pinsSchema, c as traceSchema, h as elements, l as textIncludesQuote, n as migrateStoredDocument, o as normalizedSoftwareElementSchema, p as documentSchema, r as migrateStoredLenses, s as normalizedSoftwareRelationshipSchema, t as liftFileLenses, u as anchorPins, z as markdownNodes } from "./stored-document-migration-u4L_1VZa.js";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { existsSync } from "node:fs";
@@ -127,7 +126,7 @@ function validateShareSources(snapshot) {
 }
 /** Freeze one stored version before any asynchronous source reads. */
 async function exportShare(input) {
-	const { target, kind: _kind, staleSources: _staleSources, sourceUnavailable: _sourceUnavailable, lastEdit: _lastEdit, ...snapshot } = structuredClone(input.store.read(input.reviewId, input.version));
+	const { target, kind: _kind, staleSources: _staleSources, sourceUnavailable: _sourceUnavailable, lastEdit: _lastEdit, trashedAt: _trashedAt, ...snapshot } = structuredClone(input.store.read(input.reviewId, input.version));
 	if (target?.kind === "worktree") throw new ReviewInputError("Pin this review to commits before sharing it.");
 	documentSchema.parse(snapshot.document);
 	checkReferences(snapshot.document);
@@ -439,12 +438,16 @@ var SharedReviewStore = class {
 	attention = /* @__PURE__ */ new Map();
 	listeners = /* @__PURE__ */ new Set();
 	catalogLoaded = false;
+	purgeTimer;
+	purgePending;
 	downloads = /* @__PURE__ */ new Set();
 	trackImport(job) {
 		this.downloads.add(job);
 		job.finally(() => this.downloads.delete(job));
 	}
 	async close() {
+		clearInterval(this.purgeTimer);
+		await this.purgePending;
 		await Promise.allSettled([...this.downloads, ...this.jobs.values()]);
 	}
 	local;
@@ -454,12 +457,28 @@ var SharedReviewStore = class {
 	constructor(root, fetchRepository = fetchPinnedRepository) {
 		this.root = root;
 		this.fetchRepository = fetchRepository;
+		this.purgeTimer = setInterval(() => {
+			this.purgeExpired().catch((error) => console.error("Could not purge expired shared whiteboards:", error));
+		}, 6e4);
+		this.purgeTimer.unref();
+	}
+	purgeExpired() {
+		if (this.purgePending) return this.purgePending;
+		const expired = [...this.attention].filter(([, state]) => state.trashedAt && Date.parse(state.trashedAt) <= Date.now() - 2592e6);
+		const pending = (async () => {
+			for (const [id] of expired) await this.removeLocal(id);
+		})();
+		this.purgePending = pending.finally(() => {
+			this.purgePending = void 0;
+		});
+		return this.purgePending;
 	}
 	connect(store, data) {
 		this.local = {
 			store,
 			data
 		};
+		store.askHistory.setExternalWriteGuard((id) => this.assertWritable(id));
 		data.workspaces.attachExternalReviews({
 			has: (id) => this.has(id) || !this.catalogLoaded && id.startsWith("shared-"),
 			subscribe: (listener) => this.subscribe(listener)
@@ -602,16 +621,32 @@ var SharedReviewStore = class {
 				this.repositories.set(id, repository.id);
 				this.setStatus(id, "ready");
 			} else this.setStatus(id, "error", "Reopen the share link to fetch its repository.");
-			try {
-				this.attention.set(id, z.strictObject({
+			const attentionPath = path.join(this.root, id, "attention.json");
+			if (existsSync(attentionPath)) {
+				const raw = JSON.parse(await readFile(attentionPath, "utf8"));
+				const migrated = Object.hasOwn(raw, "dismissedAt") || Object.hasOwn(raw, "deletedAt");
+				const state = z.strictObject({
 					viewedAt: z.string().nullable(),
-					dismissedAt: z.string().nullable()
-				}).parse(JSON.parse(await readFile(path.join(this.root, id, "attention.json"), "utf8"))));
-			} catch {}
+					trashedAt: z.string().nullable()
+				}).parse(migrated ? {
+					viewedAt: raw.viewedAt,
+					trashedAt: Object.hasOwn(raw, "deletedAt") ? raw.deletedAt : raw.dismissedAt ? (/* @__PURE__ */ new Date()).toISOString() : null
+				} : raw);
+				this.attention.set(id, state);
+				if (migrated) await writeFile(attentionPath, JSON.stringify(state), { mode: 384 });
+			}
 		}
+		await this.purgeExpired();
 		this.catalogLoaded = true;
 		for (const listener of this.listeners) listener();
 	}
+	assertWritable(id) {
+		const trashedAt = this.attention.get(id)?.trashedAt;
+		if (trashedAt) throw new ReviewInputError(`This whiteboard was moved to Trash on ${new Date(trashedAt).toLocaleDateString("en-US", {
+			month: "short",
+			day: "numeric"
+		})}. Restore it with session_lifecycle({"sessionId":"${id}","state":"active"}) to continue.`, 409);
+	}
 	get(id) {
 		const bundle = this.loaded.get(id);
 		if (!bundle) throw new ReviewInputError("Shared review is not available.", 404);
@@ -623,6 +658,7 @@ var SharedReviewStore = class {
 			snapshot: {
 				...validated.snapshot,
 				reviewId: id,
+				trashedAt: this.attention.get(id)?.trashedAt ?? null,
 				pins: validated.snapshot.pins ? {
 					...validated.snapshot.pins,
 					repositoryId
@@ -647,7 +683,7 @@ var SharedReviewStore = class {
 				firstCreatedAt: snapshot.version === 0 ? snapshot.createdAt : void 0,
 				repositoryName: "Shared review",
 				viewedAt: this.attention.get(id)?.viewedAt ?? null,
-				dismissedAt: this.attention.get(id)?.dismissedAt ?? null
+				trashedAt: this.attention.get(id)?.trashedAt ?? null
 			};
 		}).toArray();
 		return this.local?.store.withDiffStats(reviews, mode) ?? reviews;
@@ -680,19 +716,32 @@ var SharedReviewStore = class {
 			recursive: true,
 			force: true
 		});
+		this.local?.store.askHistory.removeReview(id);
 		this.loaded.delete(id);
 		this.validated.delete(id);
 		this.attention.delete(id);
 		for (const listener of this.listeners) listener();
 	}
-	async setAttention(id, action) {
+	async setAttention(id) {
+		await this.updateAttention(id, "view");
+	}
+	async setLifecycle(id, state) {
+		await this.updateAttention(id, state);
+	}
+	async updateAttention(id, action) {
 		this.get(id);
+		const trashedAt = this.attention.get(id)?.trashedAt;
+		if (trashedAt && Date.parse(trashedAt) <= Date.now() - 2592e6) {
+			await this.removeLocal(id);
+			throw new ReviewInputError("The 30-day recovery period has ended. This whiteboard was permanently deleted.", 404);
+		}
+		if (action === "view") this.assertWritable(id);
 		const state = this.attention.get(id) ?? {
 			viewedAt: null,
-			dismissedAt: null
+			trashedAt: null
 		};
 		if (action === "view") state.viewedAt = (/* @__PURE__ */ new Date()).toISOString();
-		else state.dismissedAt = action === "dismiss" ? (/* @__PURE__ */ new Date()).toISOString() : null;
+		else state.trashedAt = action === "trash" ? state.trashedAt ?? (/* @__PURE__ */ new Date()).toISOString() : null;
 		await writeFile(path.join(this.root, id, "attention.json"), JSON.stringify(state), { mode: 384 });
 		this.attention.set(id, state);
 		for (const listener of this.listeners) listener();
@@ -700,6 +749,7 @@ var SharedReviewStore = class {
 	async import(origin, shareId, bundle) {
 		const validated = validateShareBundle(bundle);
 		const id = sharedReviewId(origin, shareId);
+		this.assertWritable(id);
 		await mkdir(this.root, {
 			recursive: true,
 			mode: 448

package/dist/{desktop-discovery-C-Qz54wO.js → desktop-discovery-Ba3dD5Cn.js}

@@ -1,6 +1,6 @@
 import { a as jsonNumber, n as isJsonObject, s as jsonProperty, u as parseJsonText } from "./src-X9phtB2j.js";
 import { n as parseReviewDesktopDiscovery } from "./src-WCbabvdS.js";
-import { a as reviewInstancesDir, o as reviewLegacyDiscoveryPath, r as reviewDevInstanceKey, t as reviewDefaultInstancePath } from "./review-home-paths-6zZH-1c9.js";
+import { a as reviewInstancesDir, o as reviewLegacyDiscoveryPath, r as reviewDevInstanceKey, t as reviewDefaultInstancePath } from "./review-home-paths-Y9mYWkCI.js";
 import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
 import path from "node:path";
 //#region src/desktop-discovery.ts

package/dist/{headless-host-DcWaxx9P.js → headless-host-BHD_Vg5F.js}

@@ -1,9 +1,9 @@
 import { p as isObjectValue } from "./src-X9phtB2j.js";
+import "./review-home-paths-Y9mYWkCI.js";
 import { O as withFileLock, P as writePrivateJsonAtomic } from "./s3-config-CAxhO9u_.js";
-import "./review-home-paths-6zZH-1c9.js";
-import { t as openReviewProfile } from "./profile-RDEioF8b.js";
-import { i as createWhiteboardCore, l as createNodeRequestListener, m as migrateDiffrConfig, n as installProcessErrorTelemetry, p as GlobalReviewDesktopVerbRelay, t as drainServerCrashReport } from "./process-error-telemetry-Dzh5a3s_.js";
-import { i as reviewServerDiscoveryPath, t as headlessServerLockPath } from "./server-discovery-Dbzn3w6Z.js";
+import { t as openReviewProfile } from "./profile-BsYDBr7t.js";
+import { i as createWhiteboardCore, l as createNodeRequestListener, m as migrateDiffrConfig, n as installProcessErrorTelemetry, p as GlobalReviewDesktopVerbRelay, t as drainServerCrashReport } from "./process-error-telemetry-C0swByfp.js";
+import { i as reviewServerDiscoveryPath, t as headlessServerLockPath } from "./server-discovery-ZVi8Ay8J.js";
 import { randomBytes, randomUUID } from "node:crypto";
 import { mkdir, realpath, rm } from "node:fs/promises";
 import { createServer } from "node:http";