@dev.fast/whiteboard 0.2.5-preview.20261015.120 → 0.3.0

package/dist/{account-alias-pAq80fex.js → account-alias-CwNaMOwU.js}

@@ -1,10 +1,10 @@
 import { n as isJsonObject } from "./src-X9phtB2j.js";
-import { w as ReviewCliInstallStampSchema } from "./src-C_iUYopM.js";
+import { w as ReviewCliInstallStampSchema } from "./src-DZG1xAqW.js";
 import { C as disableTraceMachine, E as traceMachineStatus, G as listTraceRepositoryRoots, K as traceRepositoryStatus, Q as removeAgentTraceHook, S as configureTraceMachine, T as traceMachineEnabled, U as disableAllTraceRepositories, W as enableTraceRepository, X as describeTraceHookOwners, Y as AGENT_TRACE_HOOK_AGENTS, Z as installHarnessHooks, dt as StoreClient, n as reviewDesktopStateDir, nt as traceScope, ot as readStoreAuth } from "./review-home-paths-Lc02WFuX.js";
 import { A as withFileLock, F as writeFileAtomicAsync, I as writePrivateJsonAtomic, M as devReviewHome } from "./s3-config-DDWWMh5x.js";
 import { i as readReviewPackageVersion } from "./package-paths-jMg6JxDP.js";
-import { f as isDirectory, p as isFile } from "./thread-state-CS-v-hc0.js";
-import { s as findExecutable } from "./fuzzy-match-CufFp9IR.js";
+import { f as isDirectory, p as isFile } from "./thread-state-CaQ2lGdj.js";
+import { s as findExecutable } from "./fuzzy-match-DFPKdSLR.js";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
 import { access, chmod, lstat, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";

package/dist/agent-cli-NWQPsL0W.js

@@ -0,0 +1,2 @@
+import { n as runReviewAgentCli } from "./agent-cli-S0bt9I7V.js";
+export { runReviewAgentCli };

package/dist/{agent-cli-CACGYhRh.js → agent-cli-S0bt9I7V.js}

@@ -1,11 +1,11 @@
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
 import { T as traceMachineEnabled } from "./review-home-paths-Lc02WFuX.js";
-import { a as toolResultText, i as connectReviewInstance, s as ReviewApiError } from "./agent-client-D6xrEdTj.js";
+import { a as toolResultText, i as connectReviewInstance, s as ReviewApiError } from "./agent-client-DjXQy6CL.js";
 import { M as devReviewHome } from "./s3-config-DDWWMh5x.js";
-import { b as selectReviewInstance, u as REVIEW_INSTANCE_ENV } from "./server-discovery-IdX3Wc8g.js";
-import { n as reviewSessionAgent } from "./review-telemetry-kTLRwBj_.js";
-import { n as REVIEW_VIA_HEADER, t as REVIEW_AGENT_HEADER } from "./request-origin-2d7P4ugC.js";
-import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-A9dVocGs.js";
+import { b as selectReviewInstance, u as REVIEW_INSTANCE_ENV } from "./server-discovery-DVqrcIDT.js";
+import { n as reviewSessionAgent } from "./review-telemetry-DnQNwgR1.js";
+import { n as REVIEW_VIA_HEADER, t as REVIEW_AGENT_HEADER } from "./request-origin-D1RNVSeK.js";
+import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-CVJrfi5s.js";
 //#region src/review-api/agent-cli.ts
 const reviewAgentCliHelp = "whiteboard api tools  (one line per tool)\nwhiteboard api tools <tool-name>  (its description and input schema)\nwhiteboard api <tool-name> '<json>'\nwhiteboard api <tool-name> -  (read JSON from stdin)\nwhiteboard mcp  (stdio MCP adapter; Whiteboard Desktop or whiteboard server start must be running)\nSelect headless state with DEV_REVIEW_SERVER_DIR or whiteboard --state-dir <path> api/mcp.\n";
 async function runReviewAgentCli(input) {
@@ -20,7 +20,7 @@ async function runReviewAgentCli(input) {
 		if (extra.length || mode === "mcp" && name) throw new Error("Unexpected arguments. Use whiteboard api --help.");
 		const headers = Object.fromEntries([[REVIEW_VIA_HEADER, mode === "mcp" ? "mcp" : "api"], [REVIEW_AGENT_HEADER, reviewSessionAgent(env)]]);
 		if (mode === "mcp") {
-			const { serveReviewMcp } = await import("./mcp-DqmNumCl.js");
+			const { serveReviewMcp } = await import("./mcp-BY4ExeMQ.js");
 			await serveReviewMcp(async (key, agentKind) => {
 				const connected = await connectReviewInstance(key ? {
 					...env,

package/dist/{agent-client-D6xrEdTj.js → agent-client-DjXQy6CL.js}

@@ -1,7 +1,7 @@
 import { d as isBooleanValue, f as isNumberValue, m as isStringValue, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-C_iUYopM.js";
+import "./src-DZG1xAqW.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, s as reviewServerIsHealthy, y as reviewInstanceUnavailable } from "./server-discovery-IdX3Wc8g.js";
+import { b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, s as reviewServerIsHealthy, y as reviewInstanceUnavailable } from "./server-discovery-DVqrcIDT.js";
 //#region ../review-protocol/src/review-api-client.ts
 const defaultRequest = (url, init) => fetch(url, init);
 /** A non-2xx reply; the status tells a caller whether retrying can help. */
@@ -249,7 +249,7 @@ async function connectReviewInstance(env = process.env, headers = {}, options =
 	const selection = await selectReviewInstance({ env });
 	const discovery = healthyReviewInstance(selection);
 	if (!discovery) {
-		const { ensureServerWithoutDesktop } = await import("./background-server-KKSjffhS.js");
+		const { ensureServerWithoutDesktop } = await import("./background-server-CVL7QpsL.js");
 		const server = await ensureServerWithoutDesktop({
 			selection,
 			env,

package/dist/{authoring-tools-8UhtCkjL.js → authoring-tools-CjFAGHBa.js}

@@ -1,5 +1,5 @@
-import { c as activityEndSchema, i as commandSchema, l as activityUpdateSchema, n as uploadSchema, s as activityBeginSchema } from "./local-data-Bhs4VnzC.js";
-import { S as publishedEditSchema, y as pathTargetSchema } from "./stored-document-migration-DVJJPBGd.js";
+import { c as activityEndSchema, i as commandSchema, l as activityUpdateSchema, n as uploadSchema, s as activityBeginSchema } from "./local-data-DN-A5p0K.js";
+import { S as publishedEditSchema, y as pathTargetSchema } from "./stored-document-migration-DLBhkSfp.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { t as findReviewPackageRoot } from "./package-paths-jMg6JxDP.js";
 import { z } from "zod";
@@ -85,7 +85,8 @@ const COMPONENT_REFERENCE = [
 	"- trace_quote {traceId, eventId, text}",
 	"- software_map {mapVersionId, focusElementId?}",
 	"- sequence {title, actors: {key: label}, steps: step[], pins?}",
-	"- step {from, to (actor keys), label, style?: call|return|async, and exactly one of source: anchor, explanation, or code: {text, language?}; pins?}",
+	"- step {from, to (actor keys), label, style?: call|return|async, and exactly one of source: anchor or anchor[] (at most 4), explanation, or code: {text, language?}; pins?}",
+	"A step's source is the line where its arrow leaves `from` (the call, return or emit). Add an additional range only when that line can't be read without it: the type or schema of what it passes, or the code that builds its argument. Never the callee's body; that is the next step.",
 	"- flow_diagram {title, nodes: flow_node[] (1 to 100), edges: flow_edge[], description?, direction?: right|down, pins?}",
 	"- flow_node {key, label, description?, kind?: process|decision|terminal, attachments?: {label, sources: anchor[], pins?}[], link?: {from or to, label?, style?}}",
 	"- flow_edge {from, to (node keys), label?, style?: solid|dashed}",

package/dist/{background-server-KKSjffhS.js → background-server-CVL7QpsL.js}

@@ -1,2 +1,2 @@
-import { a as headlessServerOwner, c as stopBackgroundServer, i as ensureServerWithoutDesktop, r as ensureBackgroundServer } from "./background-server-D7maQkJV.js";
+import { a as headlessServerOwner, c as stopBackgroundServer, i as ensureServerWithoutDesktop, r as ensureBackgroundServer } from "./background-server-ONy-xKJ1.js";
 export { ensureBackgroundServer, ensureServerWithoutDesktop, headlessServerOwner, stopBackgroundServer };

package/dist/{background-server-D7maQkJV.js → background-server-ONy-xKJ1.js}

@@ -1,8 +1,8 @@
 import "./review-home-paths-Lc02WFuX.js";
 import { D as liveLockOwner, O as processIsAlive } from "./s3-config-DDWWMh5x.js";
 import { t as findReviewPackageRoot } from "./package-paths-jMg6JxDP.js";
-import { a as readReviewServerHealth, c as reviewServerStateDir, i as readReviewServerDiscovery, n as desktopOwnsHome, p as desktopUsesHome, r as headlessServerLockPath } from "./server-discovery-IdX3Wc8g.js";
-import { t as desktopApplicationInstalled } from "./review-app-launcher-C7PUhYox.js";
+import { a as readReviewServerHealth, c as reviewServerStateDir, i as readReviewServerDiscovery, n as desktopOwnsHome, p as desktopUsesHome, r as headlessServerLockPath } from "./server-discovery-DVqrcIDT.js";
+import { t as desktopApplicationInstalled } from "./review-app-launcher-i1hmxOZA.js";
 import { mkdir, open, readFile, realpath, stat } from "node:fs/promises";
 import path from "node:path";
 import { spawn } from "node:child_process";

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"0.2.5-preview.20261015.120","commit":"99b613b6ce358d31fd4cc2b59822a939f7f113cf","dirty":true,"builtAt":"2026-10-15T23:32:28.351Z"}
+{"version":"0.3.0","commit":"027b6c46a487fddc507394d263782a4ab2de6d35","dirty":true,"builtAt":"2026-10-16T16:48:38.669Z"}

package/dist/{cli-CGWs67Pz.js → cli-Cko4zfif.js}

@@ -1,4 +1,4 @@
-import { r as connectReviewApi } from "./agent-client-D6xrEdTj.js";
+import { r as connectReviewApi } from "./agent-client-DjXQy6CL.js";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
 //#region src/sharing/cli.ts

package/dist/{cli-runner-D3XvcVCa.js → cli-runner-DeQ4IhcG.js}

@@ -1,18 +1,18 @@
 import { C as setLocalVcsCommandObserver, E as __toESM, T as __require, w as __commonJSMin } from "./src-BMPuxWv4.js";
 import { c as jsonString, n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import { _ as REVIEW_REMOTE_AGENT_IDS, p as REVIEW_CLI_INSTALL_TARGET_LABELS, v as REVIEW_REMOTE_ATTACH_BEGIN, y as REVIEW_REMOTE_ATTACH_END } from "./src-C_iUYopM.js";
+import { _ as REVIEW_REMOTE_AGENT_IDS, p as REVIEW_CLI_INSTALL_TARGET_LABELS, v as REVIEW_REMOTE_ATTACH_BEGIN, y as REVIEW_REMOTE_ATTACH_END } from "./src-DZG1xAqW.js";
 import { $ as resolveTraceCommand, A as runTraceDeny, E as traceMachineStatus, F as describeSelection, H as resolveTraceRepositoryTarget, J as HOSTED_CAPTURE_SCOPE_DESCRIPTION, K as traceRepositoryStatus, L as loadS3TraceStorage, M as runTraceSessions, N as runTraceStoreDelete, P as runTraceStoreInfo, T as traceMachineEnabled, V as requireTraceConsent, _ as runTraceRepair, b as runTraceGitHook, c as registerTraceCommands, ct as runStoreLogout, d as runTraceList$1, dt as StoreClient, f as runTracePull$1, ft as withStoreAuthorization, g as runTraceInstallMachine, gt as jsonRequestedInArgv, h as runTraceEnable, ht as humanStream, j as runTraceOnboard, k as runTraceAllow, l as resolveTraceReadStorage, lt as runStoreWhoami, m as runTraceDisable, mt as failWithJsonError, nt as traceScope, ot as readStoreAuth, p as runTraceShow, pt as emitJsonEvent, q as readTraceUserConfig, rt as DEFAULT_STORE_ORIGIN, st as runStoreLogin, tt as traceHomeDir, u as runTraceBlame, ut as StoreApiError, v as runTraceStatus, w as readLegacyCaptureSettings, x as runTraceHook, y as runTraceSync, z as selectTraceStorage } from "./review-home-paths-Lc02WFuX.js";
-import { o as ReviewApiClient, s as ReviewApiError } from "./agent-client-D6xrEdTj.js";
+import { o as ReviewApiClient, s as ReviewApiError } from "./agent-client-DjXQy6CL.js";
 import { t as resolveReviewRoot } from "./runtime-CKiWhGrf.js";
 import { C as s3ProfileSchema, E as writeTraceConfigFile, M as devReviewHome, N as normalizeStoreOrigin, S as readTraceConfigFile, T as sameS3Profile, _ as emptyTraceConfig, c as resolveS3Setup, g as currentStore, h as TraceConfigurationError, i as isS3MockMode, n as clearTraceEnvCache, o as readTraceEnvFile, p as traceSettingsPath, w as s3Store } from "./s3-config-DDWWMh5x.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
 import { i as readReviewPackageVersion, r as readBuildInfo, t as findReviewPackageRoot } from "./package-paths-jMg6JxDP.js";
-import { a as readReviewServerHealth, b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, f as clearDefaultReviewInstance, g as requireHealthyReviewDesktop, h as readDefaultReviewInstance, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, p as desktopUsesHome, t as DESKTOP_TAKEOVER_SIGNAL, u as REVIEW_INSTANCE_ENV, x as writeDefaultReviewInstance, y as reviewInstanceUnavailable } from "./server-discovery-IdX3Wc8g.js";
-import { t as ReviewTelemetry } from "./review-telemetry-kTLRwBj_.js";
-import { t as fuzzyRank } from "./fuzzy-match-CufFp9IR.js";
-import { _ as isInstallTarget, a as isOwnedShim, f as windowsInstallerCommand, g as ALL_INSTALL_TARGETS, h as detectConnectAgents, m as connectAgent, o as pathShimPath, p as scanLegacySkills, t as aliasInstallationToAccount, v as connectPrompts } from "./account-alias-pAq80fex.js";
-import { n as focusReviewDesktop, r as runReviewAppLaunch } from "./review-app-launcher-C7PUhYox.js";
-import { t as reviewAgentCliHelp } from "./agent-cli-CACGYhRh.js";
+import { a as readReviewServerHealth, b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, f as clearDefaultReviewInstance, g as requireHealthyReviewDesktop, h as readDefaultReviewInstance, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, p as desktopUsesHome, t as DESKTOP_TAKEOVER_SIGNAL, u as REVIEW_INSTANCE_ENV, x as writeDefaultReviewInstance, y as reviewInstanceUnavailable } from "./server-discovery-DVqrcIDT.js";
+import { t as ReviewTelemetry } from "./review-telemetry-DnQNwgR1.js";
+import { t as fuzzyRank } from "./fuzzy-match-DFPKdSLR.js";
+import { _ as isInstallTarget, a as isOwnedShim, f as windowsInstallerCommand, g as ALL_INSTALL_TARGETS, h as detectConnectAgents, m as connectAgent, o as pathShimPath, p as scanLegacySkills, t as aliasInstallationToAccount, v as connectPrompts } from "./account-alias-CwNaMOwU.js";
+import { n as focusReviewDesktop, r as runReviewAppLaunch } from "./review-app-launcher-i1hmxOZA.js";
+import { t as reviewAgentCliHelp } from "./agent-cli-S0bt9I7V.js";
 import { existsSync, mkdirSync, renameSync, writeFileSync } from "node:fs";
 import { realpath } from "node:fs/promises";
 import path from "node:path";
@@ -4297,7 +4297,7 @@ async function runReviewCli(input) {
 		if (!Number.isInteger(port) || port < 0 || port > 65535) throw new ReviewCliUsageError("--port must be an integer between 0 and 65535.");
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
 		if (options.detach) {
-			const { ensureBackgroundServer } = await import("./background-server-KKSjffhS.js");
+			const { ensureBackgroundServer } = await import("./background-server-CVL7QpsL.js");
 			const { discovery, started } = await ensureBackgroundServer({
 				stateDir,
 				env,
@@ -4319,7 +4319,7 @@ async function runReviewCli(input) {
 		process.once("SIGINT", stop);
 		process.once("SIGTERM", stop);
 		process.once(DESKTOP_TAKEOVER_SIGNAL, takeover);
-		const { HeadlessServerBusyError, runHeadlessServer } = await import("./headless-host-COLvXm9A.js");
+		const { HeadlessServerBusyError, runHeadlessServer } = await import("./headless-host-DHShakz_.js");
 		try {
 			await runHeadlessServer({
 				stateDir,
@@ -4356,7 +4356,7 @@ async function runReviewCli(input) {
 	configureJsonOutput(serverCommand.command("stop").description("Stop a background server started by --detach, the CLI, or Desktop").option("--state-dir <path>", "directory selected when starting the server"), "plain").action(async (_options, command) => {
 		const options = command.optsWithGlobals();
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
-		const { headlessServerOwner, stopBackgroundServer } = await import("./background-server-KKSjffhS.js");
+		const { headlessServerOwner, stopBackgroundServer } = await import("./background-server-CVL7QpsL.js");
 		const owner = await headlessServerOwner(stateDir);
 		const discovery = await readReviewServerDiscovery(stateDir);
 		if (owner === void 0) {
@@ -4384,7 +4384,7 @@ async function runReviewCli(input) {
 		if (!existsSync(path.join(stateDir, "review-api.db"))) throw new Error(`No saved reviews in ${stateDir}, so there is no server id to reset. Check --state-dir.`);
 		const inUse = `A Whiteboard server is using ${stateDir}. Stop it first, then run whiteboard server reset-id again.`;
 		if (await desktopUsesHome(stateDir, env)) return refuse(inUse, options.json);
-		const [{ openReviewProfile }, { withHeadlessServerLock }] = await Promise.all([import("./profile-DY_QhMQ9.js"), import("./headless-host-COLvXm9A.js")]);
+		const [{ openReviewProfile }, { withHeadlessServerLock }] = await Promise.all([import("./profile-BBw-jMW3.js"), import("./headless-host-DHShakz_.js")]);
 		const reset = await withHeadlessServerLock(await realpath(stateDir), async () => {
 			const local = await openReviewProfile(stateDir, { manageWorkspaces: false });
 			try {
@@ -4406,7 +4406,7 @@ async function runReviewCli(input) {
 	configureJsonOutput(remote.command("attach").description("Start a background server if none is healthy and report how to reach it").option("--state-dir <path>", "directory for saved reviews and server discovery").option("--groups <groups>", "comma-separated optional extension groups the Desktop has enabled, such as go").option("--replace", "stop a running server of another version that the CLI or Desktop started, and start this one"), "plain").action(async (_options, command) => {
 		const options = command.optsWithGlobals();
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
-		const { remoteAttach } = await import("./remote-attach-DK4FaWbL.js");
+		const { remoteAttach } = await import("./remote-attach-DJxW9402.js");
 		let attach;
 		try {
 			attach = await remoteAttach({
@@ -4448,7 +4448,7 @@ async function runReviewCli(input) {
 	configureJsonOutput(remote.command("uninstall").description("Remove what Whiteboard Desktop installed on this host, stopping a server it started").addOption(new Option("--keep-reviews", "leave the saved reviews in place").conflicts("deleteReviews")).addOption(new Option("--delete-reviews", "also delete the saved reviews")).option("--state-dir <path>", "directory for saved reviews and server discovery"), "plain").action(async (_options, command) => {
 		const options = command.optsWithGlobals();
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
-		const { remoteUninstall } = await import("./remote-uninstall-CLf9aKCN.js");
+		const { remoteUninstall } = await import("./remote-uninstall-DYmNOetF.js");
 		let deleteReviews = options.deleteReviews ? true : options.keepReviews ? false : void 0;
 		if (deleteReviews === void 0 && !options.json && input.stdin?.isTTY) {
 			const prompt = createInterface$1({
@@ -4670,14 +4670,14 @@ async function runReviewCli(input) {
 		command.showHelpAfterError(false).error("Markdown review migration is no longer supported. Ask your agent to migrate your old Whiteboard reviews.");
 	});
 	configureJsonOutput(configureJsonOutput(program.command("share").description("Upload an immutable review snapshot and return its share link"), "plain").option("--review <id>", "review ID").option("--version <number>", "Saved version to share").option("--preview", "Open the share link in Whiteboard Preview by default").option("--request-id <uuid>", "Reuse this ID when retrying the same immutable upload").action(async (options) => {
-		const { runShareCli } = await import("./cli-CGWs67Pz.js");
+		const { runShareCli } = await import("./cli-Cko4zfif.js");
 		state.exitCode = await runShareCli({
 			...input,
 			...options,
 			env: authoringEnv()
 		});
 	}).command("revoke <share-id>").description("Revoke future downloads of a share"), "plain").action(async (shareId, options) => {
-		const { runShareCli } = await import("./cli-CGWs67Pz.js");
+		const { runShareCli } = await import("./cli-Cko4zfif.js");
 		state.exitCode = await runShareCli({
 			...input,
 			...options,
@@ -4758,7 +4758,7 @@ async function runReviewCli(input) {
 		return commands;
 	} });
 	for (const [name, description] of [["api", "Call a JSON review authoring tool on the running server"], ["mcp", "Serve the JSON review authoring tools over stdio MCP"]]) configureOutput(program.command(name).description(description).argument("[args...]", "tool name and JSON input").allowUnknownOption().allowExcessArguments().helpOption(false).passThroughOptions().addHelpText("after", `\n${reviewAgentCliHelp}`), "plain").action(async (args) => {
-		const { runReviewAgentCli } = await import("./agent-cli-Bs2PzjQx.js");
+		const { runReviewAgentCli } = await import("./agent-cli-NWQPsL0W.js");
 		state.exitCode = await runReviewAgentCli({
 			...input,
 			env: authoringEnv(),

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { a as jsonNumber, c as jsonString, o as jsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-C_iUYopM.js";
+import "./src-DZG1xAqW.js";
 import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -17,7 +17,7 @@ async function runCli(effectivePath) {
 `);
 		return 1;
 	}
-	const { runReviewCli } = await import("./cli-runner-D3XvcVCa.js");
+	const { runReviewCli } = await import("./cli-runner-DeQ4IhcG.js");
 	return runReviewCli({
 		argv,
 		cliPaths: {

package/dist/{client-tIkQ_x_x.js → client-CLqKkzOc.js}

@@ -1,7 +1,7 @@
 import { f as gitAt } from "./src-BMPuxWv4.js";
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-C_iUYopM.js";
-import { B as markdownNodes, C as resourceReference, D as sourceReferences, N as lensSchema, P as lensSelections, V as parseMarkdown, _ as hasCodeReferences, c as traceSchema, h as elements, k as checkReferences, l as textIncludesQuote, n as migrateStoredDocument, o as normalizedSoftwareElementSchema, p as documentSchema, q as sourceAnchors, r as migrateStoredLenses, s as normalizedSoftwareRelationshipSchema, t as liftFileLenses, u as anchorPins, w as resourceReferences, x as pinsSchema } from "./stored-document-migration-DVJJPBGd.js";
+import "./src-DZG1xAqW.js";
+import { C as resourceReference, D as sourceReferences, F as lensSchema, H as markdownNodes, I as lensSelections, U as parseMarkdown, Y as sourceAnchors, _ as hasCodeReferences, c as traceSchema, h as elements, k as checkReferences, l as textIncludesQuote, n as migrateStoredDocument, o as normalizedSoftwareElementSchema, p as documentSchema, r as migrateStoredLenses, s as normalizedSoftwareRelationshipSchema, t as liftFileLenses, u as anchorPins, w as resourceReferences, x as pinsSchema } from "./stored-document-migration-DLBhkSfp.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";

package/dist/{fuzzy-match-CufFp9IR.js → fuzzy-match-DFPKdSLR.js}

@@ -1,6 +1,6 @@
 import "./review-home-paths-Lc02WFuX.js";
 import { M as devReviewHome } from "./s3-config-DDWWMh5x.js";
-import { n as askAgentIds } from "./thread-state-CS-v-hc0.js";
+import { n as askAgentIds } from "./thread-state-CaQ2lGdj.js";
 import { createRequire } from "node:module";
 import { constants } from "node:fs";
 import { access, chmod, mkdir, readFile, rename, stat, writeFile } from "node:fs/promises";

package/dist/{headless-host-CDh2qQbQ.js → headless-host-CoN2f0Sk.js}

@@ -1,21 +1,21 @@
 import { d as git, r as defaultBranch } from "./src-BMPuxWv4.js";
 import { c as jsonString, m as isStringValue, n as isJsonObject, p as isObjectValue, u as parseJsonText } from "./src-X9phtB2j.js";
-import { a as sharedReviewId, c as verifyShareRepository, d as StreamLimitError, f as readBoundedStream, l as exportShare, m as shareIdSchema, n as ShareClient, p as parseShareLink, r as SharePreflightError, s as readShareRepository, t as ShareAuthError, u as validateShareSources } from "./client-tIkQ_x_x.js";
-import { a as inspectSnapshot, d as diffrExecutable, f as diffrMissingError, i as commandSchema, r as SCRATCHPAD_ID, u as invalidateStructuralComparisons } from "./local-data-Bhs4VnzC.js";
-import { A as reviewDiffrSummarizerInputSchema, D as ReviewOnboardingRunRequestSchema, a as parseReviewVerbRequest, g as REVIEW_HOST_HEADER, i as parseReviewDesktopVerbResult, j as decodeStructuralDiffEvent } from "./src-C_iUYopM.js";
+import { a as sharedReviewId, c as verifyShareRepository, d as StreamLimitError, f as readBoundedStream, l as exportShare, m as shareIdSchema, n as ShareClient, p as parseShareLink, r as SharePreflightError, s as readShareRepository, t as ShareAuthError, u as validateShareSources } from "./client-CLqKkzOc.js";
+import { a as inspectSnapshot, d as diffrExecutable, f as diffrMissingError, i as commandSchema, r as SCRATCHPAD_ID, u as invalidateStructuralComparisons } from "./local-data-DN-A5p0K.js";
+import { A as reviewDiffrSummarizerInputSchema, D as ReviewOnboardingRunRequestSchema, a as parseReviewVerbRequest, g as REVIEW_HOST_HEADER, i as parseReviewDesktopVerbResult, j as decodeStructuralDiffEvent } from "./src-DZG1xAqW.js";
 import { B as TraceStorageDeniedError, D as listReviewTraceSessions, I as isTraceStorageConfigured, O as loadReviewAgentTrace, R as resolveTraceStorage, T as traceMachineEnabled, at as openUrlInBrowser, et as shellQuote, it as clearStoreAuth, ot as readStoreAuth, rt as DEFAULT_STORE_ORIGIN, st as runStoreLogin, z as selectTraceStorage } from "./review-home-paths-Lc02WFuX.js";
-import { $ as subtractIntervals, A as UNCATEGORIZED_LENS_ID, E as selectionReferences, G as resolveDiffSelection, H as anchorSelection, K as selectionKey, L as fileLineRangeSchema, P as lensSelections, Q as scopedCoverage, U as comparisonKey, W as formatAnchor, X as emptyCoverage, Y as coverageSources, et as unionIntervals, h as elements, u as anchorPins } from "./stored-document-migration-DVJJPBGd.js";
+import { E as selectionReferences, G as comparisonKey, I as lensSelections, J as selectionKey, K as formatAnchor, M as UNCATEGORIZED_LENS_ID, Q as emptyCoverage, W as anchorSelection, Z as coverageSources, et as scopedCoverage, h as elements, j as stepSources, nt as unionIntervals, q as resolveDiffSelection, tt as subtractIntervals, u as anchorPins, z as fileLineRangeSchema } from "./stored-document-migration-DLBhkSfp.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { A as withFileLock, I as writePrivateJsonAtomic, M as devReviewHome, h as TraceConfigurationError, i as isS3MockMode } from "./s3-config-DDWWMh5x.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
 import { i as readReviewPackageVersion, n as readBuildCommit, t as findReviewPackageRoot } from "./package-paths-jMg6JxDP.js";
-import { i as readReviewServerDiscovery, n as desktopOwnsHome, o as reviewServerDiscoveryPath, p as desktopUsesHome, r as headlessServerLockPath, t as DESKTOP_TAKEOVER_SIGNAL } from "./server-discovery-IdX3Wc8g.js";
-import { c as askPicksSchema, d as selectionMarkdown, l as askQuestionSchema, n as askAgentIds, r as askChoiceKinds, s as askPermissionsSchema, t as applyAskChange, u as AgentSelectionSchema } from "./thread-state-CS-v-hc0.js";
-import { t as openReviewProfile } from "./profile-CbAW3qDm.js";
-import { a as REVIEW_APP_SESSION_ID_HEADER, c as sanitizeUiTelemetryEvent, i as BUNDLE_FRAME_PATTERN, l as cleanTelemetryText, r as reviewRequestOrigin, s as isReportableCleanedMessage } from "./request-origin-2d7P4ugC.js";
-import { a as defaultAskPermissions, c as launchAskAgent, i as askAgents, n as askAgentSettings, o as detectAskAgents, r as askAgentTakesMcp, t as fuzzyRank } from "./fuzzy-match-CufFp9IR.js";
-import { a as scratchpadAvailable, c as readQuerySchemas, i as renderInstructions, o as inspectQuerySchema, r as instructionsQuerySchema, s as queryAnchor, t as authoringTools } from "./authoring-tools-8UhtCkjL.js";
-import { a as headlessServerOwner, c as stopBackgroundServer } from "./background-server-D7maQkJV.js";
+import { i as readReviewServerDiscovery, n as desktopOwnsHome, o as reviewServerDiscoveryPath, p as desktopUsesHome, r as headlessServerLockPath, t as DESKTOP_TAKEOVER_SIGNAL } from "./server-discovery-DVqrcIDT.js";
+import { c as askPicksSchema, d as selectionMarkdown, l as askQuestionSchema, n as askAgentIds, r as askChoiceKinds, s as askPermissionsSchema, t as applyAskChange, u as AgentSelectionSchema } from "./thread-state-CaQ2lGdj.js";
+import { t as openReviewProfile } from "./profile-Dm6irjbg.js";
+import { a as REVIEW_APP_SESSION_ID_HEADER, c as sanitizeUiTelemetryEvent, i as BUNDLE_FRAME_PATTERN, l as cleanTelemetryText, r as reviewRequestOrigin, s as isReportableCleanedMessage } from "./request-origin-D1RNVSeK.js";
+import { a as defaultAskPermissions, c as launchAskAgent, i as askAgents, n as askAgentSettings, o as detectAskAgents, r as askAgentTakesMcp, t as fuzzyRank } from "./fuzzy-match-DFPKdSLR.js";
+import { a as scratchpadAvailable, c as readQuerySchemas, i as renderInstructions, o as inspectQuerySchema, r as instructionsQuerySchema, s as queryAnchor, t as authoringTools } from "./authoring-tools-CjFAGHBa.js";
+import { a as headlessServerOwner, c as stopBackgroundServer } from "./background-server-ONy-xKJ1.js";
 import crypto$1, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
@@ -2959,7 +2959,7 @@ function documentText(snapshot, targetId, full = false) {
 				break;
 			case "step":
 				detail(`${element.from} → ${element.to}: ${element.label} (${element.style})`);
-				if (element.source) detail(element.source);
+				for (const source of stepSources(element)) detail(source);
 				if (detailed && element.explanation) detail(element.explanation);
 				if (detailed && element.code) code(depth + 1, element.code);
 				break;
@@ -3104,6 +3104,11 @@ async function recentFolders(input = {}) {
 //#region src/review-api/onboarding.ts
 const COMMAND_TIMEOUT_MS = 15e3;
 const PULL_REQUEST_LIMIT = 10;
+/** Ignored when the agent does not offer the model. */
+const RUN_PICKS = {
+	claude: { model: "sonnet" },
+	codex: { model: "gpt-6-luna" }
+};
 const runCommand = (file, args, cwd) => new Promise((resolve, reject) => {
 	execFile(file, args, {
 		cwd,
@@ -3361,6 +3366,7 @@ function registerOnboardingRoutes(app, store, ask, host, run = runCommand) {
 			head,
 			selection: { title },
 			context: await runContext(ask, input.agent, id, reviewId),
+			picks: RUN_PICKS[input.agent],
 			question: { text: input.prompt }
 		});
 		host.handOff(reviewId, id);

package/dist/{headless-host-COLvXm9A.js → headless-host-DHShakz_.js}

@@ -1,2 +1,2 @@
-import { i as withHeadlessServerLock, n as runHeadlessServer, r as takeOverServerHome, t as HeadlessServerBusyError } from "./headless-host-CDh2qQbQ.js";
+import { i as withHeadlessServerLock, n as runHeadlessServer, r as takeOverServerHome, t as HeadlessServerBusyError } from "./headless-host-CoN2f0Sk.js";
 export { HeadlessServerBusyError, runHeadlessServer, takeOverServerHome, withHeadlessServerLock };

package/dist/{local-data-Bhs4VnzC.js → local-data-DN-A5p0K.js}

@@ -1,12 +1,12 @@
 import { _ as parseGitRemote, a as diff, b as resolveRepoContextSync, c as diffFileSummariesWorkingTree, d as git, g as listTrackedFilesAtCommit, h as listCommitRange, i as detectLocalVcs, l as diffTrees, m as jjRevisionIsConflicted, n as createBlobBatchReader, p as gitCommonDir, s as diffFileSummariesTrees, t as LocalVcsToolsMissingError, u as diffWorkingTree, v as readFileAtCommit, x as resolveRevision, y as resolveRepoContext } from "./src-BMPuxWv4.js";
 import { c as jsonString, o as jsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import { M as structuralChangeCounts, j as decodeStructuralDiffEvent, k as SCRATCHPAD_REVIEW_ID } from "./src-C_iUYopM.js";
+import { M as structuralChangeCounts, j as decodeStructuralDiffEvent, k as SCRATCHPAD_REVIEW_ID } from "./src-DZG1xAqW.js";
 import { s as safeStorageSegment } from "./review-home-paths-Lc02WFuX.js";
-import { $ as subtractIntervals, C as resourceReference, D as sourceReferences, F as SourceRangeError, I as checkSourcePath, J as coverageSchema, L as fileLineRangeSchema, M as lensEditSchema, O as summarizeEdit, P as lensSelections, R as requireVisibleSource, T as reviewTargetSchema, X as emptyCoverage, Z as intersectIntervals, a as defineSoftwareMap, b as pinnedRepositoryIds, c as traceSchema, d as applyEdit, et as unionIntervals, f as assignFreshIds, g as explicitPins, h as elements, i as SoftwareModelValidationError, j as applyLensEdit, k as checkReferences, l as textIncludesQuote, m as editSchema, n as migrateStoredDocument, p as documentSchema, q as sourceAnchors, r as migrateStoredLenses, t as liftFileLenses, tt as updateCoverage, u as anchorPins, v as isUnit, w as resourceReferences, x as pinsSchema, z as sliceSourceRange } from "./stored-document-migration-DVJJPBGd.js";
+import { $ as intersectIntervals, A as documentAdvice, B as requireVisibleSource, C as resourceReference, D as sourceReferences, I as lensSelections, L as SourceRangeError, N as applyLensEdit, O as summarizeEdit, P as lensEditSchema, Q as emptyCoverage, R as checkSourcePath, T as reviewTargetSchema, V as sliceSourceRange, X as coverageSchema, Y as sourceAnchors, a as defineSoftwareMap, b as pinnedRepositoryIds, c as traceSchema, d as applyEdit, f as assignFreshIds, g as explicitPins, h as elements, i as SoftwareModelValidationError, k as checkReferences, l as textIncludesQuote, m as editSchema, n as migrateStoredDocument, nt as unionIntervals, p as documentSchema, r as migrateStoredLenses, rt as updateCoverage, t as liftFileLenses, tt as subtractIntervals, u as anchorPins, v as isUnit, w as resourceReferences, x as pinsSchema, z as fileLineRangeSchema } from "./stored-document-migration-DLBhkSfp.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { A as withFileLock, I as writePrivateJsonAtomic, O as processIsAlive } from "./s3-config-DDWWMh5x.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
-import { a as askHistoryEntrySchema, i as askEntrySchema, m as isMissingFileError, o as askOfferSchema, s as askPermissionsSchema } from "./thread-state-CS-v-hc0.js";
+import { a as askHistoryEntrySchema, i as askEntrySchema, m as isMissingFileError, o as askOfferSchema, s as askPermissionsSchema } from "./thread-state-CaQ2lGdj.js";
 import { createRequire } from "node:module";
 import crypto, { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -2703,7 +2703,8 @@ var ReviewStore = class {
 			if (snapshot.target?.kind === "worktree" && op.type !== "restore" && !resolvedTarget) snapshot = await this.projectLiveSource(snapshot);
 			checkReferences(snapshot.document);
 			if (snapshot.pins && (!previous || JSON.stringify(previous.pins) !== JSON.stringify(snapshot.pins))) await this.providers.validatePins(snapshot.pins);
-			const warnings = await this.validateExternal(snapshot, previous, op.type === "set_target");
+			const advised = new Set(documentAdvice(previous?.document ?? []));
+			const warnings = [...documentAdvice(snapshot.document).filter((advice) => !advised.has(advice)), ...await this.validateExternal(snapshot, previous, op.type === "set_target")];
 			snapshot.version = previous ? previous.version + 1 : 0;
 			snapshot.createdAt = (/* @__PURE__ */ new Date()).toISOString();
 			const result = {

package/dist/{mcp-DqmNumCl.js → mcp-BY4ExeMQ.js}

@@ -1,7 +1,7 @@
-import { a as toolResultText, s as ReviewApiError } from "./agent-client-D6xrEdTj.js";
+import { a as toolResultText, s as ReviewApiError } from "./agent-client-DjXQy6CL.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { n as REVIEW_STATUS_TOOL, t as authoringTools } from "./authoring-tools-8UhtCkjL.js";
-import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-A9dVocGs.js";
+import { n as REVIEW_STATUS_TOOL, t as authoringTools } from "./authoring-tools-CjFAGHBa.js";
+import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-CVJrfi5s.js";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";

package/dist/profile-BBw-jMW3.js

@@ -0,0 +1,2 @@
+import { t as openReviewProfile } from "./profile-Dm6irjbg.js";
+export { openReviewProfile };

package/dist/{profile-CbAW3qDm.js → profile-Dm6irjbg.js}

@@ -1,4 +1,4 @@
-import { o as initializeReviewStoreSchema, t as openLocalReviewStore } from "./local-data-Bhs4VnzC.js";
+import { o as initializeReviewStoreSchema, t as openLocalReviewStore } from "./local-data-DN-A5p0K.js";
 import "./review-home-paths-Lc02WFuX.js";
 import { A as withFileLock } from "./s3-config-DDWWMh5x.js";
 import { access, mkdir } from "node:fs/promises";

package/dist/{remote-attach-DK4FaWbL.js → remote-attach-DJxW9402.js}

@@ -1,7 +1,7 @@
 import { i as readReviewPackageVersion } from "./package-paths-jMg6JxDP.js";
-import { a as readReviewServerHealth, l as serverNotReady } from "./server-discovery-IdX3Wc8g.js";
-import { c as stopBackgroundServer, o as recordedBackgroundServer, r as ensureBackgroundServer } from "./background-server-D7maQkJV.js";
-import { t as ensureRemoteLanguageServer } from "./remote-language-server-BIP6hw3K.js";
+import { a as readReviewServerHealth, l as serverNotReady } from "./server-discovery-DVqrcIDT.js";
+import { c as stopBackgroundServer, o as recordedBackgroundServer, r as ensureBackgroundServer } from "./background-server-ONy-xKJ1.js";
+import { t as ensureRemoteLanguageServer } from "./remote-language-server-CGsCaqro.js";
 import path from "node:path";
 import { spawn } from "node:child_process";
 import { gt, valid } from "semver";

package/dist/{remote-language-server-BIP6hw3K.js → remote-language-server-CGsCaqro.js}

@@ -1,7 +1,7 @@
 import "./review-home-paths-Lc02WFuX.js";
 import { A as withFileLock, k as processStartIdentity } from "./s3-config-DDWWMh5x.js";
 import { t as findReviewPackageRoot } from "./package-paths-jMg6JxDP.js";
-import { n as cliSpawn, s as spawnDetached } from "./background-server-D7maQkJV.js";
+import { n as cliSpawn, s as spawnDetached } from "./background-server-ONy-xKJ1.js";
 import { r as remoteServerPaths, t as ensureRemoteExtensions } from "./remote-extensions-BCAbQZTv.js";
 import { randomBytes } from "node:crypto";
 import { z } from "zod";

package/dist/{remote-uninstall-CLf9aKCN.js → remote-uninstall-DYmNOetF.js}

@@ -1,9 +1,9 @@
-import { b as REVIEW_REMOTE_INSTALL_LOCK, x as REVIEW_REMOTE_WRAPPER_MARK } from "./src-C_iUYopM.js";
+import { b as REVIEW_REMOTE_INSTALL_LOCK, x as REVIEW_REMOTE_WRAPPER_MARK } from "./src-DZG1xAqW.js";
 import "./review-home-paths-Lc02WFuX.js";
 import { j as DEV_REVIEW_HOME_ENV } from "./s3-config-DDWWMh5x.js";
-import { c as stopBackgroundServer, o as recordedBackgroundServer } from "./background-server-D7maQkJV.js";
+import { c as stopBackgroundServer, o as recordedBackgroundServer } from "./background-server-ONy-xKJ1.js";
 import { i as whiteboardRemoteHome } from "./remote-extensions-BCAbQZTv.js";
-import { n as remoteLanguageServerGroups, r as stopProcessGroup } from "./remote-language-server-BIP6hw3K.js";
+import { n as remoteLanguageServerGroups, r as stopProcessGroup } from "./remote-language-server-CGsCaqro.js";
 import { existsSync } from "node:fs";
 import { lstat, mkdir, readFile, readdir, rm, stat } from "node:fs/promises";
 import path from "node:path";

package/dist/{request-origin-2d7P4ugC.js → request-origin-D1RNVSeK.js}

@@ -1,5 +1,5 @@
 import { a as jsonNumber, c as jsonString, i as jsonBoolean, n as isJsonObject } from "./src-X9phtB2j.js";
-import { S as REVIEW_THEME_CHOICES, h as REVIEW_DIFF_LAYOUT_SCOPES, m as REVIEW_DIFF_LAYOUTS } from "./src-C_iUYopM.js";
+import { S as REVIEW_THEME_CHOICES, h as REVIEW_DIFF_LAYOUT_SCOPES, m as REVIEW_DIFF_LAYOUTS } from "./src-DZG1xAqW.js";
 import { z } from "zod";
 //#region src/telemetry-clean-text.ts
 const USER_DATA_REGEXES = [

package/dist/{review-app-launcher-C7PUhYox.js → review-app-launcher-i1hmxOZA.js}

@@ -1,5 +1,5 @@
-import { o as parseReviewVerbResponse } from "./src-C_iUYopM.js";
-import { b as selectReviewInstance, m as healthyReviewInstance, v as reviewInstanceStartHint, y as reviewInstanceUnavailable } from "./server-discovery-IdX3Wc8g.js";
+import { o as parseReviewVerbResponse } from "./src-DZG1xAqW.js";
+import { b as selectReviewInstance, m as healthyReviewInstance, v as reviewInstanceStartHint, y as reviewInstanceUnavailable } from "./server-discovery-DVqrcIDT.js";
 import { closeSync, existsSync, fstatSync, mkdtempSync, openSync, readSync } from "node:fs";
 import path from "node:path";
 import { homedir, tmpdir } from "node:os";

package/dist/{review-telemetry-kTLRwBj_.js → review-telemetry-DnQNwgR1.js}

@@ -1,9 +1,9 @@
 import { c as jsonString, l as jsonValueSchema, o as jsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-C_iUYopM.js";
+import "./src-DZG1xAqW.js";
 import "./review-home-paths-Lc02WFuX.js";
 import { A as withFileLock, M as devReviewHome, O as processIsAlive, P as writeFileAtomic } from "./s3-config-DDWWMh5x.js";
 import { i as readReviewPackageVersion, t as findReviewPackageRoot } from "./package-paths-jMg6JxDP.js";
-import "./request-origin-2d7P4ugC.js";
+import "./request-origin-D1RNVSeK.js";
 import { createHmac, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { existsSync, readFileSync, rmSync } from "node:fs";

package/dist/server/desktop-host.js

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { S as splitGitPatchFiles, a as diff, o as diffFileSummaries } from "../src-BMPuxWv4.js";
 import { c as jsonString, i as jsonBoolean, n as isJsonObject, p as isObjectValue, s as jsonProperty, u as parseJsonText } from "../src-X9phtB2j.js";
-import { d as StreamLimitError, f as readBoundedStream, i as SharedReviewStore } from "../client-tIkQ_x_x.js";
-import { A as reviewDiffrSummarizerInputSchema, E as ReviewGatewayHostSchema, T as ReviewConnectRequestSchema, c as ReviewBugReportMetaV2Schema, d as REVIEW_CLIENT_HEADER, f as REVIEW_CLIENT_REMOTE, g as REVIEW_HOST_HEADER, l as ReviewBugReportRequestSchema, r as parseReviewDesktopVerbFrame, s as parseZod, t as parseReviewCliInstallApplyRequest, u as parseReviewBugReportResponse } from "../src-C_iUYopM.js";
+import { d as StreamLimitError, f as readBoundedStream, i as SharedReviewStore } from "../client-CLqKkzOc.js";
+import { A as reviewDiffrSummarizerInputSchema, E as ReviewGatewayHostSchema, T as ReviewConnectRequestSchema, c as ReviewBugReportMetaV2Schema, d as REVIEW_CLIENT_HEADER, f as REVIEW_CLIENT_REMOTE, g as REVIEW_HOST_HEADER, l as ReviewBugReportRequestSchema, r as parseReviewDesktopVerbFrame, s as parseZod, t as parseReviewCliInstallApplyRequest, u as parseReviewBugReportResponse } from "../src-DZG1xAqW.js";
 import { i as reviewInstanceDiscoveryPath, o as reviewLegacyDiscoveryPath } from "../review-home-paths-Lc02WFuX.js";
-import { w as resourceReferences } from "../stored-document-migration-DVJJPBGd.js";
+import { w as resourceReferences } from "../stored-document-migration-DLBhkSfp.js";
 import { t as ReviewInputError } from "../input-error-OLgB_h31.js";
 import { I as writePrivateJsonAtomic, M as devReviewHome } from "../s3-config-DDWWMh5x.js";
 import { t as errorMessage } from "../error-message-OtiDonty.js";
 import { i as readReviewPackageVersion, t as findReviewPackageRoot } from "../package-paths-jMg6JxDP.js";
-import { _ as reviewInstanceIdentity, u as REVIEW_INSTANCE_ENV } from "../server-discovery-IdX3Wc8g.js";
-import { t as openReviewProfile } from "../profile-CbAW3qDm.js";
-import { r as reviewTelemetryChannel, t as ReviewTelemetry } from "../review-telemetry-kTLRwBj_.js";
-import { o as REVIEW_TELEMETRY_TABS } from "../request-origin-2d7P4ugC.js";
-import { c as removeLegacyReviewSkills, d as skipCliInstall, h as detectConnectAgents, i as finishCliInstallUpdate, l as resetCliInstall, m as connectAgent, n as applyCliInstall, o as pathShimPath, r as declineCliInstall, s as removeCliInstall, t as aliasInstallationToAccount, u as resolveCliInstallStatus } from "../account-alias-pAq80fex.js";
-import { C as saveDiffrSummarizer, E as cliAskTools, S as readDiffrConfig, T as testDiffrSummarizer, _ as DEFAULT_MAX_REQUEST_BYTES, a as drainServerCrashReport, b as GlobalReviewDesktopVerbRelay, c as answerErrorsAsJson, d as legacyModeSchema, f as captureSanitizedUiTelemetry, g as readBoundedRequestJson, h as createNodeRequestListener, l as createWhiteboardCore, m as recordClientError, o as installProcessErrorTelemetry, p as clientErrorsForSession, r as takeOverServerHome, s as serverCrashReportPath, u as serverJson, v as HttpJsonError, w as setDiffrConfigValue, x as migrateDiffrConfig, y as ReviewServerError } from "../headless-host-CDh2qQbQ.js";
-import { c as readQuerySchemas } from "../authoring-tools-8UhtCkjL.js";
+import { _ as reviewInstanceIdentity, u as REVIEW_INSTANCE_ENV } from "../server-discovery-DVqrcIDT.js";
+import { t as openReviewProfile } from "../profile-Dm6irjbg.js";
+import { r as reviewTelemetryChannel, t as ReviewTelemetry } from "../review-telemetry-DnQNwgR1.js";
+import { o as REVIEW_TELEMETRY_TABS } from "../request-origin-D1RNVSeK.js";
+import { c as removeLegacyReviewSkills, d as skipCliInstall, h as detectConnectAgents, i as finishCliInstallUpdate, l as resetCliInstall, m as connectAgent, n as applyCliInstall, o as pathShimPath, r as declineCliInstall, s as removeCliInstall, t as aliasInstallationToAccount, u as resolveCliInstallStatus } from "../account-alias-CwNaMOwU.js";
+import { C as saveDiffrSummarizer, E as cliAskTools, S as readDiffrConfig, T as testDiffrSummarizer, _ as DEFAULT_MAX_REQUEST_BYTES, a as drainServerCrashReport, b as GlobalReviewDesktopVerbRelay, c as answerErrorsAsJson, d as legacyModeSchema, f as captureSanitizedUiTelemetry, g as readBoundedRequestJson, h as createNodeRequestListener, l as createWhiteboardCore, m as recordClientError, o as installProcessErrorTelemetry, p as clientErrorsForSession, r as takeOverServerHome, s as serverCrashReportPath, u as serverJson, v as HttpJsonError, w as setDiffrConfigValue, x as migrateDiffrConfig, y as ReviewServerError } from "../headless-host-CoN2f0Sk.js";
+import { c as readQuerySchemas } from "../authoring-tools-CjFAGHBa.js";
 import crypto, { createHash, randomBytes } from "node:crypto";
 import { z } from "zod";
 import fs, { existsSync, readFileSync } from "node:fs";
@@ -1111,6 +1111,7 @@ function createGatewayHosts(input) {
 					previous.delete(given.alias);
 					current.languageFeatures = given.languageFeatures;
 					current.languageFeaturesDetail = given.languageFeaturesDetail;
+					current.languageFeaturesPending = given.languageFeaturesPending;
 					current.languageGroups = given.languageGroups;
 					next.push(current);
 				} else {
@@ -1145,9 +1146,10 @@ function createGatewayHosts(input) {
 		}
 	};
 }
-const languageOf = ({ languageFeatures, languageFeaturesDetail, languageGroups }) => ({
+const languageOf = ({ languageFeatures, languageFeaturesDetail, languageFeaturesPending, languageGroups }) => ({
 	...languageFeatures !== void 0 && { languageFeatures },
 	...languageFeaturesDetail !== void 0 && { languageFeaturesDetail },
+	...languageFeaturesPending && { languageFeaturesPending },
 	...languageGroups !== void 0 && { languageGroups }
 });
 //#endregion
@@ -1171,7 +1173,8 @@ function decorate(entry, state, hostState) {
 		hostState,
 		available: {
 			sourceWindows: features,
-			...reason && { reason }
+			...reason && { reason },
+			...online && state.languageFeaturesPending && { pending: true }
 		}
 	};
 }

package/dist/{server-discovery-IdX3Wc8g.js → server-discovery-DVqrcIDT.js}

@@ -1,5 +1,5 @@
 import { a as jsonNumber, n as isJsonObject, s as jsonProperty, u as parseJsonText } from "./src-X9phtB2j.js";
-import { n as parseReviewDesktopDiscovery } from "./src-C_iUYopM.js";
+import { n as parseReviewDesktopDiscovery } from "./src-DZG1xAqW.js";
 import { a as reviewInstancesDir, o as reviewLegacyDiscoveryPath, r as reviewDevInstanceKey, t as reviewDefaultInstancePath } from "./review-home-paths-Lc02WFuX.js";
 import { M as devReviewHome, O as processIsAlive, j as DEV_REVIEW_HOME_ENV } from "./s3-config-DDWWMh5x.js";
 import { z } from "zod";

package/dist/sharing/index.d.ts

@@ -274,6 +274,7 @@ interface ReviewApiSummary {
     sourceWindows: boolean;
     /** Why they are off: the host's sentence, or its language features detail. */
     reason?: string;
+    pending?: true;
   };
 }
 interface ReviewSourceEntry {
@@ -319,6 +320,7 @@ declare const ReviewGatewayHostSchema: z.ZodObject<{
   }, z.core.$strict>>;
   languageFeatures: z.ZodOptional<z.ZodBoolean>;
   languageFeaturesDetail: z.ZodOptional<z.ZodString>;
+  languageFeaturesPending: z.ZodOptional<z.ZodLiteral<true>>;
   languageGroups: z.ZodOptional<z.ZodArray<z.ZodObject<{
     group: z.ZodString;
     installed: z.ZodBoolean;
@@ -334,6 +336,7 @@ interface ReviewGatewayHostState {
   installCommand?: string;
   languageFeatures?: boolean;
   languageFeaturesDetail?: string;
+  languageFeaturesPending?: true;
   languageGroups?: ReviewGatewayHost["languageGroups"];
   declined?: true;
 }
@@ -452,7 +455,7 @@ declare const stepSchema: z.ZodObject<{
     return: "return";
     async: "async";
   }>>;
-  source: any;
+  source: z.ZodOptional<z.ZodUnion<readonly [any, z.ZodArray<any>]>>;
   pins: any;
   explanation: z.ZodOptional<z.ZodString>;
   code: z.ZodOptional<z.ZodObject<{
@@ -518,7 +521,7 @@ declare const leafSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
       return: "return";
       async: "async";
     }>>;
-    source: any;
+    source: z.ZodOptional<z.ZodUnion<readonly [any, z.ZodArray<any>]>>;
     pins: any;
     explanation: z.ZodOptional<z.ZodString>;
     code: z.ZodOptional<z.ZodObject<{
@@ -759,7 +762,7 @@ declare const editSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         return: "return";
         async: "async";
       }>>;
-      source: any;
+      source: z.ZodOptional<z.ZodUnion<readonly [any, z.ZodArray<any>]>>;
       pins: any;
       explanation: z.ZodOptional<z.ZodString>;
       code: z.ZodOptional<z.ZodObject<{
@@ -944,7 +947,7 @@ declare const editSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
       return: "return";
       async: "async";
     }>>;
-    source: any;
+    source: z.ZodOptional<z.ZodUnion<readonly [any, z.ZodArray<any>]>>;
     pins: any;
     explanation: z.ZodOptional<z.ZodString>;
     code: z.ZodOptional<z.ZodObject<{

package/dist/sharing/index.js

@@ -1,2 +1,2 @@
-import { a as sharedReviewId, c as verifyShareRepository, i as SharedReviewStore, l as exportShare, n as ShareClient, o as validateShareBundle } from "../client-tIkQ_x_x.js";
+import { a as sharedReviewId, c as verifyShareRepository, i as SharedReviewStore, l as exportShare, n as ShareClient, o as validateShareBundle } from "../client-CLqKkzOc.js";
 export { ShareClient, SharedReviewStore, exportShare, sharedReviewId, validateShareBundle, verifyShareRepository };

package/dist/{src-C_iUYopM.js → src-DZG1xAqW.js}

@@ -321,6 +321,7 @@ const ReviewGatewayHostSchema = z.strictObject({
 	]) }).optional(),
 	languageFeatures: z.boolean().optional(),
 	languageFeaturesDetail: stringAllowEmpty.optional(),
+	languageFeaturesPending: z.literal(true).optional(),
 	languageGroups: z.array(z.strictObject({
 		group: requiredString$1,
 		installed: z.boolean(),

package/dist/{stored-document-migration-DVJJPBGd.js → stored-document-migration-DLBhkSfp.js}

@@ -1,5 +1,5 @@
 import { f as isNumberValue, l as jsonValueSchema, m as isStringValue, n as isJsonObject } from "./src-X9phtB2j.js";
-import "./src-C_iUYopM.js";
+import "./src-DZG1xAqW.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { z } from "zod";
 import { fromMarkdown } from "mdast-util-from-markdown";
@@ -1393,6 +1393,8 @@ const section = {
 };
 //#endregion
 //#region src/review-api/blocks/sequence.ts
+/** A call that needs more lines than this is rare; a function body is not. */
+const callSiteLines = 12;
 const stepSchema = z.strictObject({
 	...identity,
 	type: z.literal("step").default("step"),
@@ -1404,7 +1406,9 @@ const stepSchema = z.strictObject({
 		"return",
 		"async"
 	]).default("call"),
-	source: anchorSchema.optional(),
+	/** The call site this arrow stands for, then any ranges directly about
+	* that call, each shown as its own card. */
+	source: z.union([anchorSchema, z.array(anchorSchema).min(1).max(4)]).optional(),
 	pins: elementPins,
 	explanation: label$1.optional(),
 	code: z.strictObject(codeFields).optional()
@@ -1413,6 +1417,10 @@ const stepSchema = z.strictObject({
 	s.explanation,
 	s.code
 ].filter((v) => v !== void 0).length === 1, "A step needs exactly one of source, explanation, or code.");
+/** A step's ranges in order; a single anchor is a list of one. */
+function stepSources(step) {
+	return step.source === void 0 ? [] : [step.source].flat();
+}
 const sequence = {
 	type: "sequence",
 	schema: defineBlock("sequence", {
@@ -1422,12 +1430,36 @@ const sequence = {
 		pins: elementPins
 	}),
 	check(block) {
+		const pins = (step) => JSON.stringify(step.pins ?? block.pins);
 		for (const step of block.steps) {
 			requireKey(block.actors, step.from);
 			requireKey(block.actors, step.to);
+			const own = stepSources(step);
+			for (const [at, range] of own.entries()) {
+				if (own.some((other, index) => index !== at && covers(range, other))) throw new ReviewInputError(`Range ${range} repeats another range of its step.`);
+				for (const [index, other] of block.steps.entries()) if (at > 0 && other !== step && pins(other) === pins(step) && stepSources(other).some((theirs) => covers(range, theirs))) throw new ReviewInputError(`Range ${range} is step ${index + 1}'s code; link the step instead.`);
+			}
 		}
+	},
+	advise(block) {
+		return block.steps.flatMap((step, index) => stepSources(step).flatMap((range) => {
+			const lines = oneSideLines(parseAnchor(range));
+			return lines && lines > callSiteLines ? [`Step ${index + 1} of "${block.title}" pins ${lines} lines at ${range}. A step's source is its call site; pin the call, not the function body.`] : [];
+		}));
 	}
 };
+/** Lines in a one-sided selection; a selection across sides has no count. */
+function oneSideLines({ start, end }) {
+	return start.side === end.side ? end.line - start.line + 1 : void 0;
+}
+/** Whether `outer` equals or contains `inner`, in the same file. Across
+* sides, only the same anchor counts. */
+function covers(outer, inner) {
+	if (outer === inner) return true;
+	const a = parseAnchor(outer);
+	const b = parseAnchor(inner);
+	return a.file === b.file && oneSideLines(a) !== void 0 && oneSideLines(b) !== void 0 && a.start.side === b.start.side && a.start.line <= b.start.line && a.end.line >= b.end.line;
+}
 //#endregion
 //#region src/review-api/blocks/software_map.ts
 const software_map = {
@@ -1500,6 +1532,14 @@ function checkReferences(document) {
 	};
 	document.forEach(visit);
 }
+function adviseBlock(type, block) {
+	return blocks[type].advise?.(block) ?? [];
+}
+/** Every block's warnings about allowed content that is usually a mistake. */
+function documentAdvice(document) {
+	const visit = (block) => [...adviseBlock(block.type, block), ..."children" in block ? block.children.flatMap(visit) : []];
+	return document.flatMap(visit);
+}
 //#endregion
 //#region src/review-api/document.ts
 const text = z.string();
@@ -1649,12 +1689,12 @@ function documentReferences(document, { tolerant = false, markdown = true } = {}
 			label: element.caption,
 			peek: true
 		}));
-		if (element.type === "sequence") return element.steps.flatMap((step) => step.source ? select(step.source, step.pins ?? element.pins).map((source) => ({
-			id: step.id,
+		if (element.type === "sequence") return element.steps.flatMap((step) => stepSources(step).flatMap((anchor, index) => select(anchor, step.pins ?? element.pins).map((source) => ({
+			id: index ? `${step.id}:source:${index}` : step.id,
 			source,
 			label: step.label,
 			peek: true
-		})) : []);
+		}))));
 		if (element.type === "flow_diagram") return element.nodes.flatMap((node) => node.attachments.flatMap((attachment, index) => attachment.sources.flatMap((anchor, sourceIndex) => select(anchor, attachment.pins ?? element.pins).map((source) => ({
 			id: `${element.id}:${node.key}:${index}:${sourceIndex}`,
 			source,
@@ -2646,4 +2686,4 @@ function liftFileLenses(document) {
 	};
 }
 //#endregion
-export { subtractIntervals as $, UNCATEGORIZED_LENS_ID as A, markdownNodes as B, resourceReference as C, sourceReferences as D, selectionReferences as E, SourceRangeError as F, resolveDiffSelection as G, anchorSelection as H, checkSourcePath as I, coverageSchema as J, selectionKey as K, fileLineRangeSchema as L, lensEditSchema as M, lensSchema as N, summarizeEdit as O, lensSelections as P, scopedCoverage as Q, requireVisibleSource as R, publishedEditSchema as S, reviewTargetSchema as T, comparisonKey as U, parseMarkdown as V, formatAnchor as W, emptyCoverage as X, coverageSources as Y, intersectIntervals as Z, hasCodeReferences as _, defineSoftwareMap as a, pinnedRepositoryIds as b, traceSchema as c, applyEdit as d, unionIntervals as et, assignFreshIds as f, explicitPins as g, elements as h, SoftwareModelValidationError as i, applyLensEdit as j, checkReferences as k, textIncludesQuote as l, editSchema as m, migrateStoredDocument as n, normalizedSoftwareElementSchema as o, documentSchema as p, sourceAnchors as q, migrateStoredLenses as r, normalizedSoftwareRelationshipSchema as s, liftFileLenses as t, updateCoverage as tt, anchorPins as u, isUnit as v, resourceReferences as w, pinsSchema as x, pathTargetSchema as y, sliceSourceRange as z };
+export { intersectIntervals as $, documentAdvice as A, requireVisibleSource as B, resourceReference as C, sourceReferences as D, selectionReferences as E, lensSchema as F, comparisonKey as G, markdownNodes as H, lensSelections as I, selectionKey as J, formatAnchor as K, SourceRangeError as L, UNCATEGORIZED_LENS_ID as M, applyLensEdit as N, summarizeEdit as O, lensEditSchema as P, emptyCoverage as Q, checkSourcePath as R, publishedEditSchema as S, reviewTargetSchema as T, parseMarkdown as U, sliceSourceRange as V, anchorSelection as W, coverageSchema as X, sourceAnchors as Y, coverageSources as Z, hasCodeReferences as _, defineSoftwareMap as a, pinnedRepositoryIds as b, traceSchema as c, applyEdit as d, scopedCoverage as et, assignFreshIds as f, explicitPins as g, elements as h, SoftwareModelValidationError as i, stepSources as j, checkReferences as k, textIncludesQuote as l, editSchema as m, migrateStoredDocument as n, unionIntervals as nt, normalizedSoftwareElementSchema as o, documentSchema as p, resolveDiffSelection as q, migrateStoredLenses as r, updateCoverage as rt, normalizedSoftwareRelationshipSchema as s, liftFileLenses as t, subtractIntervals as tt, anchorPins as u, isUnit as v, resourceReferences as w, pinsSchema as x, pathTargetSchema as y, fileLineRangeSchema as z };

package/dist/{thread-state-CS-v-hc0.js → thread-state-CaQ2lGdj.js}

@@ -1,4 +1,4 @@
-import { C as ReviewApiSelectionSourceSchema, O as ReviewSelectedDiffSchema } from "./src-C_iUYopM.js";
+import { C as ReviewApiSelectionSourceSchema, O as ReviewSelectedDiffSchema } from "./src-DZG1xAqW.js";
 import { z } from "zod";
 import { stat } from "node:fs/promises";
 //#region src/fs-utils.ts

package/dist/{tool-failure-A9dVocGs.js → tool-failure-CVJrfi5s.js}

@@ -1,5 +1,5 @@
 import { m as isStringValue, n as isJsonObject } from "./src-X9phtB2j.js";
-import { n as callAuthoringTool, s as ReviewApiError, t as ToolText } from "./agent-client-D6xrEdTj.js";
+import { n as callAuthoringTool, s as ReviewApiError, t as ToolText } from "./agent-client-DjXQy6CL.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 //#region src/review-api/public-tools.ts
 function publicDescription(text) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev.fast/whiteboard",
-  "version": "0.2.5-preview.20261015.120",
+  "version": "0.3.0",
   "private": false,
   "license": "MIT",
   "repository": {
@@ -74,10 +74,10 @@
     "tsx": "4.21.0",
     "typescript": "6.0.3",
     "vitest": "4.1.11",
-    "@dev.fast/review-protocol": "0.0.0",
     "@dev.fast/json": "0.0.0",
     "@dev.fast/review-share-protocol": "0.1.2",
     "@dev.fast/trace-core": "0.0.0",
+    "@dev.fast/review-protocol": "0.0.0",
     "@dev.fast/trace-protocol": "0.5.0"
   },
   "engines": {
@@ -88,7 +88,7 @@
     "repo": "devdotfast/review",
     "docs": "packages/review/instructions/authoring.md"
   },
-  "gitHead": "99b613b6ce358d31fd4cc2b59822a939f7f113cf",
+  "gitHead": "027b6c46a487fddc507394d263782a4ab2de6d35",
   "scripts": {
     "prebuild": "pnpm run build:workspace-deps",
     "build": "node --max-old-space-size=8192 node_modules/tsdown/dist/run.mjs",

package/src/review-api/blocks/definition.ts

@@ -17,12 +17,14 @@ export const elementPins = sourcePinsSchema
 
 /**
  * One block kind: the strict schema the store parses with, and the rules a
- * field schema cannot express. `check` throws ReviewInputError.
+ * field schema cannot express. `check` throws ReviewInputError; `advise`
+ * returns warnings for content that is allowed but usually a mistake.
  */
 export interface BlockDefinition<Content extends { type: string }> {
   type: Content["type"];
   schema: z.ZodType<Content>;
   check?(block: Content): void;
+  advise?(block: Content): string[];
 }
 
 /** The strict schema for a block's own fields; id and type are added here. */

package/src/review-api/blocks/index.ts

@@ -86,3 +86,22 @@ export function checkReferences(document: Block[]): void {
 
   document.forEach(visit);
 }
+
+function adviseBlock<K extends BlockType>(
+  type: K,
+  block: Extract<Block, { type: K }>,
+): string[] {
+  const definition: Definitions[K] = blocks[type];
+
+  return definition.advise?.(block) ?? [];
+}
+
+/** Every block's warnings about allowed content that is usually a mistake. */
+export function documentAdvice(document: Block[]): string[] {
+  const visit = (block: Block): string[] => [
+    ...adviseBlock(block.type, block),
+    ...("children" in block ? block.children.flatMap(visit) : []),
+  ];
+
+  return document.flatMap(visit);
+}

package/src/review-api/blocks/sequence.ts

@@ -1,4 +1,10 @@
-import { anchorSchema } from "@review/lens-selection.js";
+import {
+  type Anchor,
+  type DiffSelection,
+  anchorSchema,
+  parseAnchor,
+} from "@review/lens-selection.js";
+import { ReviewInputError } from "@review/review-api/input-error.js";
 import { z } from "zod";
 
 import { codeFields } from "./code.js";
@@ -12,6 +18,9 @@ import {
   text,
 } from "./definition.js";
 
+/** A call that needs more lines than this is rare; a function body is not. */
+const callSiteLines = 12;
+
 export const stepSchema = z
   .strictObject({
     ...identity,
@@ -20,7 +29,11 @@ export const stepSchema = z
     to: label,
     label,
     style: z.enum(["call", "return", "async"]).default("call"),
-    source: anchorSchema.optional(),
+    /** The call site this arrow stands for, then any ranges directly about
+     * that call, each shown as its own card. */
+    source: z
+      .union([anchorSchema, z.array(anchorSchema).min(1).max(4)])
+      .optional(),
     pins: elementPins,
     explanation: label.optional(),
     code: z.strictObject(codeFields).optional(),
@@ -34,6 +47,11 @@ export const stepSchema = z
 
 export type Step = z.infer<typeof stepSchema>;
 
+/** A step's ranges in order; a single anchor is a list of one. */
+export function stepSources(step: Pick<Step, "source">): Anchor[] {
+  return step.source === undefined ? [] : [step.source].flat();
+}
+
 /** Kept for callers that parsed sequences directly. */
 export const sequenceSchema = defineBlock("sequence", {
   title: label,
@@ -48,9 +66,69 @@ export const sequence = {
   type: "sequence",
   schema: sequenceSchema,
   check(block: SequenceBlock) {
+    const pins = (step: Step) => JSON.stringify(step.pins ?? block.pins);
+
     for (const step of block.steps) {
       requireKey(block.actors, step.from);
       requireKey(block.actors, step.to);
+
+      const own = stepSources(step);
+
+      for (const [at, range] of own.entries()) {
+        if (own.some((other, index) => index !== at && covers(range, other)))
+          throw new ReviewInputError(
+            `Range ${range} repeats another range of its step.`,
+          );
+
+        // A range after the call site that holds another step's range is
+        // that step's code: the callee is the next step, not more of this
+        // one. The call site itself may repeat, as a call and its return do.
+        for (const [index, other] of block.steps.entries())
+          if (
+            at > 0 &&
+            other !== step &&
+            pins(other) === pins(step) &&
+            stepSources(other).some((theirs) => covers(range, theirs))
+          )
+            throw new ReviewInputError(
+              `Range ${range} is step ${index + 1}'s code; link the step instead.`,
+            );
+      }
     }
   },
+  advise(block: SequenceBlock) {
+    return block.steps.flatMap((step, index) =>
+      stepSources(step).flatMap((range) => {
+        const lines = oneSideLines(parseAnchor(range)!);
+
+        return lines && lines > callSiteLines
+          ? [
+              `Step ${index + 1} of "${block.title}" pins ${lines} lines at ${range}. A step's source is its call site; pin the call, not the function body.`,
+            ]
+          : [];
+      }),
+    );
+  },
 } satisfies BlockDefinition<SequenceBlock>;
+
+/** Lines in a one-sided selection; a selection across sides has no count. */
+function oneSideLines({ start, end }: DiffSelection): number | undefined {
+  return start.side === end.side ? end.line - start.line + 1 : undefined;
+}
+
+/** Whether `outer` equals or contains `inner`, in the same file. Across
+ * sides, only the same anchor counts. */
+function covers(outer: Anchor, inner: Anchor): boolean {
+  if (outer === inner) return true;
+  const a = parseAnchor(outer)!;
+  const b = parseAnchor(inner)!;
+
+  return (
+    a.file === b.file &&
+    oneSideLines(a) !== undefined &&
+    oneSideLines(b) !== undefined &&
+    a.start.side === b.start.side &&
+    a.start.line <= b.start.line &&
+    a.end.line >= b.end.line
+  );
+}

package/src/review-api/component-reference.ts

@@ -15,7 +15,8 @@ export const COMPONENT_REFERENCE = [
   "- trace_quote {traceId, eventId, text}",
   "- software_map {mapVersionId, focusElementId?}",
   "- sequence {title, actors: {key: label}, steps: step[], pins?}",
-  "- step {from, to (actor keys), label, style?: call|return|async, and exactly one of source: anchor, explanation, or code: {text, language?}; pins?}",
+  "- step {from, to (actor keys), label, style?: call|return|async, and exactly one of source: anchor or anchor[] (at most 4), explanation, or code: {text, language?}; pins?}",
+  "A step's source is the line where its arrow leaves `from` (the call, return or emit). Add an additional range only when that line can't be read without it: the type or schema of what it passes, or the code that builds its argument. Never the callee's body; that is the next step.",
   "- flow_diagram {title, nodes: flow_node[] (1 to 100), edges: flow_edge[], description?, direction?: right|down, pins?}",
   "- flow_node {key, label, description?, kind?: process|decision|terminal, attachments?: {label, sources: anchor[], pins?}[], link?: {from or to, label?, style?}}",
   "- flow_edge {from, to (node keys), label?, style?: solid|dashed}",

package/src/review-api/document-text.ts

@@ -1,4 +1,9 @@
-import { type Element, ReviewInputError, elements } from "./document.js";
+import {
+  type Element,
+  ReviewInputError,
+  elements,
+  stepSources,
+} from "./document.js";
 import type { Snapshot } from "./store.js";
 
 /** A reading view of saved content, not another document format to maintain. */
@@ -79,7 +84,7 @@ export function documentText(
           `${element.from} → ${element.to}: ${element.label} (${element.style})`,
         );
 
-        if (element.source) detail(element.source);
+        for (const source of stepSources(element)) detail(source);
 
         if (detailed && element.explanation) detail(element.explanation);
 

package/src/review-api/document.ts

@@ -31,7 +31,7 @@ import {
   blockSchema,
   blocks,
 } from "./blocks/index.js";
-import { type Step, stepSchema } from "./blocks/sequence.js";
+import { type Step, stepSchema, stepSources } from "./blocks/sequence.js";
 import type { Lens } from "./diff-lenses.js";
 import { ReviewInputError } from "./input-error.js";
 
@@ -45,6 +45,7 @@ export {
   blockSchema,
   blocks,
   checkReferences,
+  documentAdvice,
 } from "./blocks/index.js";
 
 export { type Frame, frameSchema } from "./blocks/call_stack_diff.js";
@@ -67,6 +68,7 @@ export {
   type Step,
   sequenceSchema,
   stepSchema,
+  stepSources,
 } from "./blocks/sequence.js";
 
 const text = z.string();
@@ -321,16 +323,18 @@ function documentReferences(
     // A step, frame and operation render the range as a peek, so a
     // whitespace-only range is an authoring mistake for each of them; prose
     // links and context sources only need the range to exist.
+    // Each of a step's ranges is its own reference, so a stale one marks only
+    // itself. The first keeps the step's id, as a single source always had.
     if (element.type === "sequence")
       return element.steps.flatMap((step) =>
-        step.source
-          ? select(step.source, step.pins ?? element.pins).map((source) => ({
-              id: step.id!,
-              source,
-              label: step.label,
-              peek: true,
-            }))
-          : [],
+        stepSources(step).flatMap((anchor, index) =>
+          select(anchor, step.pins ?? element.pins).map((source) => ({
+            id: index ? `${step.id}:source:${index}` : step.id!,
+            source,
+            label: step.label,
+            peek: true,
+          })),
+        ),
       );
 
     if (element.type === "flow_diagram")

package/src/review-api/onboarding.ts

@@ -10,7 +10,11 @@ import {
   type ReviewOnboardingTarget,
   type ReviewOnboardingTargetsResponse,
 } from "@dev.fast/review-protocol";
-import { askAgentIds } from "@review/ask/thread-state.js";
+import {
+  type AskAgentId,
+  type AskPicks,
+  askAgentIds,
+} from "@review/ask/thread-state.js";
 import type { AskThreadHooks } from "@review/ask/thread.js";
 import { readBoundedRequestJson } from "@review/server/hono-http.js";
 import type { Hono } from "hono";
@@ -26,6 +30,12 @@ const COMMAND_TIMEOUT_MS = 15_000;
 
 const PULL_REQUEST_LIMIT = 10;
 
+/** Ignored when the agent does not offer the model. */
+const RUN_PICKS: Partial<Record<AskAgentId, AskPicks>> = {
+  claude: { model: "sonnet" },
+  codex: { model: "gpt-6-luna" },
+};
+
 /** Runs one subprocess and resolves its stdout; rejects on failure. */
 export type OnboardingRun = (
   file: string,
@@ -466,6 +476,7 @@ export function registerOnboardingRoutes(
       head,
       selection: { title },
       context: await runContext(ask, input.agent, id, reviewId),
+      picks: RUN_PICKS[input.agent],
       question: { text: input.prompt },
     });
 

package/src/review-api/store.ts

@@ -44,6 +44,7 @@ import {
   applyEdit,
   assignFreshIds,
   checkReferences,
+  documentAdvice,
   documentSchema,
   editSchema,
   elements,
@@ -1452,11 +1453,19 @@ export class ReviewStore {
       )
         await this.providers.validatePins(snapshot.pins);
 
-      const warnings = await this.validateExternal(
-        snapshot,
-        previous,
-        op.type === "set_target",
-      );
+      // Advice is about what this command wrote; earlier advice stays said.
+      const advised = new Set(documentAdvice(previous?.document ?? []));
+
+      const warnings = [
+        ...documentAdvice(snapshot.document).filter(
+          (advice) => !advised.has(advice),
+        ),
+        ...(await this.validateExternal(
+          snapshot,
+          previous,
+          op.type === "set_target",
+        )),
+      ];
 
       snapshot.version = previous ? previous.version + 1 : 0;
       snapshot.createdAt = new Date().toISOString();

package/src/server/review-gateway-hosts.ts

@@ -55,6 +55,7 @@ interface Host extends GatewayRemote {
   problem?: ReviewGatewayHost["problem"];
   languageFeatures?: boolean;
   languageFeaturesDetail?: string;
+  languageFeaturesPending?: true;
   languageGroups?: ReviewGatewayHost["languageGroups"];
   installing?: ReviewGatewayHost["installing"];
   declined?: true;
@@ -316,6 +317,7 @@ export function createGatewayHosts(input: {
           previous.delete(given.alias);
           current.languageFeatures = given.languageFeatures;
           current.languageFeaturesDetail = given.languageFeaturesDetail;
+          current.languageFeaturesPending = given.languageFeaturesPending;
           current.languageGroups = given.languageGroups;
           next.push(current);
         } else {
@@ -362,12 +364,17 @@ export type GatewayHosts = ReturnType<typeof createGatewayHosts>;
 const languageOf = ({
   languageFeatures,
   languageFeaturesDetail,
+  languageFeaturesPending,
   languageGroups,
 }: Pick<
   ReviewGatewayHost,
-  "languageFeatures" | "languageFeaturesDetail" | "languageGroups"
+  | "languageFeatures"
+  | "languageFeaturesDetail"
+  | "languageFeaturesPending"
+  | "languageGroups"
 >) => ({
   ...(languageFeatures !== undefined && { languageFeatures }),
   ...(languageFeaturesDetail !== undefined && { languageFeaturesDetail }),
+  ...(languageFeaturesPending && { languageFeaturesPending }),
   ...(languageGroups !== undefined && { languageGroups }),
 });

package/src/server/review-gateway-list.ts

@@ -43,6 +43,7 @@ function decorate(
     available: {
       sourceWindows: features,
       ...(reason && { reason }),
+      ...(online && state.languageFeaturesPending && { pending: true }),
     },
   };
 }

package/dist/agent-cli-Bs2PzjQx.js

@@ -1,2 +0,0 @@
-import { n as runReviewAgentCli } from "./agent-cli-CACGYhRh.js";
-export { runReviewAgentCli };

package/dist/profile-DY_QhMQ9.js

@@ -1,2 +0,0 @@
-import { t as openReviewProfile } from "./profile-CbAW3qDm.js";
-export { openReviewProfile };