@dev.fast/whiteboard 0.3.4-preview.20261019.126 → 0.3.4

package/src/review-api/store.ts

@@ -1,21 +1,18 @@
 import { randomUUID } from "node:crypto";
-import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
+import { existsSync } from "node:fs";
 import path from "node:path";
 import { DatabaseSync } from "node:sqlite";
-import { isDeepStrictEqual } from "node:util";
 
-import { type JsonValue, isJsonObject } from "@dev.fast/json";
-import { runVcs } from "@dev.fast/local-vcs";
+import { resolveRepoContextSync } from "@dev.fast/local-vcs";
 import {
-  type BoardIconKind,
   type ReviewApiSummary,
-  boardIconKind,
-  boardTitle,
+  SCRATCHPAD_REVIEW_ID,
 } from "@dev.fast/review-protocol";
 import { sourceAnchors } from "@review/lens-selection.js";
 import {
+  liftFileLenses,
+  migrateStoredDocument,
   migrateStoredLenses,
-  readStoredDocument,
 } from "@review/stored-document-migration.js";
 import {
   type Coverage,
@@ -27,12 +24,6 @@ import { z } from "zod";
 
 import { type ActivitySurface, ReviewActivity } from "./activity.js";
 import { AskHistory } from "./ask-history.js";
-import {
-  type SiblingFacts,
-  dependencyCycle,
-  orderSiblings,
-} from "./board-order.js";
-import { CheckoutGroups } from "./checkout-groups.js";
 import {
   type Lens,
   applyLensEdit,
@@ -42,55 +33,49 @@ import {
 import {
   type Applied,
   type Block,
-  type BoardLinkRef,
   type EditSummary,
   type Element,
   type FileLineRange,
   type Pins,
   ReviewInputError,
   type ReviewTarget,
-  type SourcePins,
   type WrittenComponent,
-  adoptFlowUnits,
   anchorPins,
   applyEdit,
   assignFreshIds,
-  assignMissingIds,
-  boardLinks,
-  boardRepositoryId,
   checkReferences,
-  commitLinkCommits,
   documentAdvice,
   documentSchema,
   editSchema,
   elements,
   explicitPins,
   isUnit,
-  pinDocumentReferences,
   pinnedRepositoryIds,
   resourceReferences,
-  respellCommitLinks,
-  respellDocumentLinks,
-  respellEditLinks,
   reviewTargetSchema,
   sourceReferences,
   summarizeEdit,
 } from "./document.js";
-import { type BoardLinkPreview, boardLinkPreview } from "./link-preview.js";
 import { pullRequestKey, pullRequestUrl, setPullRequest } from "./origin.js";
-import { upgradeStore } from "./store-migrations.js";
-import {
-  BOARD_REPOSITORY_ID_SQL,
-  initializeReviewStoreSchema,
-} from "./store-schema.js";
+import { initializeReviewStoreSchema } from "./store-schema.js";
 
 const reviewId = z.string().min(1);
 
 /** The key older hosts read and write. */
 const statsKey = (pins: Pins) => JSON.stringify([pins, "structural"]);
 
-/** How long a board stays in Trash before it is deleted. */
-const TRASH_DAYS = 30;
+/** There is one scratchpad. Its id is fixed so a skill can name it. */
+export const SCRATCHPAD_ID = SCRATCHPAD_REVIEW_ID;
+
+const DIAGRAM_TYPES = new Set([
+  "sequence",
+  "flow_diagram",
+  "call_stack_diff",
+  "database_lens",
+  "software_map",
+]);
+
+export const SCRATCHPAD_TITLE = "Scratchpad";
 
 const activityId = z
   .string()
@@ -100,16 +85,6 @@ const activityId = z
     "The activityId from review_activity_begin: your courier draws this edit. Never rejects a write.",
   );
 
-const parentId = reviewId.describe(
-  "The reviewId of a top-level review in the same project to nest this one under.",
-);
-
-const dependsOn = z
-  .array(reviewId)
-  .describe(
-    "The reviewIds of reviews in the same project this one builds on. Siblings list after what they depend on.",
-  );
-
 export const commandSchema = z.strictObject({
   operation: z.discriminatedUnion("type", [
     z.strictObject({ type: z.literal("delete"), reviewId }),
@@ -125,10 +100,8 @@ export const commandSchema = z.strictObject({
     }),
     z.strictObject({
       type: z.literal("create"),
-      /** Required unless pullRequestUrl alone names the source; then the PR
-       * title. A person's new board may start with none; it reads
-       * "Untitled" until they name it. */
-      title: z.string().trim().optional(),
+      /** Required unless pullRequestUrl alone names the source; then the PR title. */
+      title: z.string().trim().min(1).optional(),
       target: reviewTargetSchema.optional(),
       pullRequestUrl: pullRequestUrl.optional(),
       /** With pullRequestUrl and no target: the checkout to fetch the PR into. */
@@ -137,7 +110,7 @@ export const commandSchema = z.strictObject({
         .min(1)
         .optional()
         .describe(
-          "Only with pullRequestUrl and no target: the registered checkout to fetch the PR into.",
+          "Only with pullRequestUrl and no target: the registered checkout to fetch the PR into. Default: the existing review's, else the first registered checkout with a remote for the PR's repository.",
         ),
       /** Return the existing review for pullRequestUrl instead of creating one. */
       reuseExisting: z
@@ -146,18 +119,8 @@ export const commandSchema = z.strictObject({
         .describe(
           "Default true: return the existing review for pullRequestUrl. false creates a separate review.",
         ),
-      parentId: parentId.optional(),
-      dependsOn: dependsOn.optional(),
-    }),
-    z.strictObject({
-      type: z.literal("set_parent"),
-      reviewId,
-      parentId: parentId.nullable(),
-    }),
-    z.strictObject({
-      type: z.literal("set_dependencies"),
-      reviewId,
-      dependsOn,
+      /** The one scratchpad: no target, no pins; every reference names its own. */
+      kind: z.literal("scratchpad").optional(),
     }),
     z.strictObject({
       type: z.literal("set_target"),
@@ -190,50 +153,6 @@ export const commandSchema = z.strictObject({
   ]),
 });
 
-/** A person's save of a whole board from the canvas. A block they added
- * has no id and may carry a clientKey, which the response maps to its id. */
-export const personEditSchema = z.strictObject({
-  baseVersion: z.number().int().nonnegative(),
-  /** Empty until the person names the board; it reads "Untitled". */
-  title: z.string().trim(),
-  document: z.array(z.json()),
-});
-
-/** The block a person's canvas has focus in; null clears it. */
-export const focusLeaseSchema = z.strictObject({
-  clientId: z.string().min(1),
-  blockId: z.string().min(1).nullable(),
-  /** false when the canvas closes the board. */
-  open: z.boolean().optional(),
-});
-
-/** A focus lease lasts this long unless renewed. The canvas renews it every
- * few seconds, so a closed or crashed app releases its block on its own. */
-export const FOCUS_LEASE_TTL_MS = 15_000;
-
-/** How often a discard looks again for a canvas letting go of the board. */
-const DISCARD_POLL_MS = 100;
-
-/** What a person's save wrote: the version, and the id each new block got
- * by its clientKey. */
-export interface PersonEditResult {
-  reviewId: string;
-  version: number;
-  ids: Record<string, string>;
-}
-
-/** One row of a board's history. */
-export interface HistoryEntry {
-  version: number;
-  title: string;
-  createdAt: string;
-  /** "you" for a version a person saved from the canvas; absent for one
-   * saved before Whiteboard recorded who wrote it. */
-  author?: "you" | "agent";
-  /** The Ask thread whose edit made this version, if any. */
-  threadId?: string;
-}
-
 /** Source identity displayed in the review header and Home, alongside immutable pins. */
 export interface SnapshotOrigin {
   branch?: string;
@@ -248,68 +167,6 @@ export interface SnapshotOrigin {
   revision?: string;
 }
 
-/**
- * The project of a registered checkout, made on first use. Checkouts of one
- * repository (worktrees, or clones of one GitHub repository) share it. A
- * deleted checkout joins the project of the existing one it belonged to
- * (see `CheckoutGroups.ownerOf`), else gets its own.
- */
-export function projectOfCheckout(
-  db: DatabaseSync,
-  repositoryId: string,
-  groups = new CheckoutGroups(db),
-): string {
-  const {
-    path: root,
-    name,
-    project_id: projectOf,
-  } = db
-    .prepare("SELECT path, name, project_id FROM repositories WHERE id=?")
-    .get(repositoryId)!;
-
-  if (projectOf) return String(projectOf);
-
-  const join = (projectId: string) => {
-    db.prepare("UPDATE repositories SET project_id=? WHERE id=?").run(
-      projectId,
-      repositoryId,
-    );
-
-    return projectId;
-  };
-
-  if (!existsSync(String(root))) {
-    const owner = groups.ownerOf(repositoryId);
-
-    if (owner) return join(projectOfCheckout(db, owner, groups));
-  }
-
-  const group = groups.group(String(root));
-
-  const sibling =
-    group &&
-    db
-      .prepare(
-        "SELECT project_id, path FROM repositories WHERE project_id IS NOT NULL",
-      )
-      .all()
-      .find(
-        ({ path: checkout }) =>
-          groups.group(String(checkout))?.key === group.key,
-      );
-
-  if (sibling) return join(String(sibling.project_id));
-
-  const projectId = randomUUID();
-
-  db.prepare("INSERT INTO projects(id,name) VALUES(?,?)").run(
-    projectId,
-    group?.label ?? String(name),
-  );
-
-  return join(projectId);
-}
-
 export interface Snapshot {
   /** Current lifecycle state, projected onto every version when read. */
   trashedAt?: string | null;
@@ -317,6 +174,8 @@ export interface Snapshot {
   reviewId: string;
   version: number;
   title: string;
+  /** Absent for a review. The scratchpad has no pins, target or lifecycle. */
+  kind?: "scratchpad";
   /** The default pins for references that name none. A document whose
    * references all carry their own pins has neither pins nor target. */
   pins?: Pins;
@@ -332,27 +191,8 @@ export interface Snapshot {
   /** The edit that produced this version, when one did; absent for a
    * rename, set_target, restore or import, which the canvas does not draw. */
   lastEdit?: EditSummary;
-  /** The Ask thread that caused this version when it made no edit to
-   * name it on: a create, rename, retarget or restore. */
-  threadId?: string;
-  /** A person saved this version from the canvas: the blocks they added,
-   * removed or changed. Absent on every other version. */
-  personEdit?: { changed: string[]; ids?: Record<string, string> };
 }
 
-/** The Ask thread a version names, on its edit or on itself; stored in
- * `versions.thread_id` so a thread's boards are one index away. */
-const versionThread = (snapshot: Snapshot) =>
-  snapshot.lastEdit?.threadId ?? snapshot.threadId ?? null;
-
-/** Who is writing: the rules a write keeps depend on it. */
-export type Author =
-  /** An agent, through the API; a thread's agent stamps its versions
-   * with the thread. */
-  | { kind: "agent"; threadId?: string }
-  /** A person, from Desktop or the canvas. */
-  | { kind: "person" };
-
 export interface Result {
   /** Create only: false when an existing review for the same PR came back. */
   created?: boolean;
@@ -376,27 +216,9 @@ export interface Result {
   attention?: true;
   lifecycle?: true;
   deleted?: true;
-  /** After set_parent or set_dependencies: the board's relations. */
-  relations?: BoardRelations;
   warnings?: string[];
 }
 
-/** A board as its place in a project shows it. */
-export interface PlacedBoard {
-  reviewId: string;
-  title: string;
-  target?: ReviewTarget;
-  origin?: SnapshotOrigin;
-}
-
-/** Where a board sits among its project's boards. Kept outside its versions. */
-export interface BoardRelations {
-  parentId: string | null;
-  /** In sibling order. */
-  children: string[];
-  dependsOn: string[];
-}
-
 /** A PR's current comparison: GitHub's head and diff base, fetched locally. */
 export interface ResolvedPullRequest {
   target: ReviewTarget;
@@ -410,10 +232,11 @@ export interface ResolvedPullRequest {
 export interface ReviewProviders {
   headBranch?(pins: Pins, headRef?: string): Promise<string | undefined>;
   projectSource?(snapshot: Snapshot, pins: Pins): Promise<Snapshot>;
-  /** Fetch a PR into the registered checkout the caller names. */
+  /** Fetch a PR into a registered checkout: the named one, else the first
+   * preferred one that still matches, else any whose remote is the PR's. */
   resolvePullRequest?(
     url: string,
-    repository: { id: string },
+    repository: { id?: string; preferred?: string },
   ): Promise<ResolvedPullRequest>;
   /** Undefined when the forge can't be read. */
   pullRequestTitle?(url: string): Promise<string | undefined>;
@@ -427,11 +250,6 @@ export interface ReviewProviders {
   /** Ids of references whose own pins no longer name a usable checkout. */
   unavailableAnchors?(snapshot: Snapshot): Promise<string[]>;
   validatePins(pins: Pins): Promise<void>;
-  /** The full commit a commit ID or its prefix names, if any. */
-  resolveCommit?(
-    repositoryId: string,
-    commit: string,
-  ): Promise<string | undefined>;
   /** The files each side's commit changed from one set of pins to another,
    * or undefined when they can't be diffed commit to commit. */
   filesChangedBetween?(
@@ -444,8 +262,6 @@ export interface ReviewProviders {
     options: { peek: boolean },
   ): Promise<void>;
   validateResource(pins: Pins | undefined, block: Block): Promise<void>;
-  /** A PR's base branch, as last read from GitHub; undefined until read. */
-  pullRequestBaseBranch?(url: string): string | undefined;
 }
 
 /** One instance owned by the desktop server. All writers go through execute().
@@ -679,6 +495,15 @@ export class ReviewStore {
       this.catalogListeners.delete(listener);
     };
   }
+  /** For a host whose listing changed without the store: a preference flip. */
+  invalidateCatalog(): void {
+    for (const listener of this.catalogListeners)
+      try {
+        listener();
+      } catch {
+        // A disconnected viewer must not block other catalog subscribers.
+      }
+  }
   subscribe(listener: (result: Result) => void) {
     this.listeners.add(listener);
 
@@ -689,42 +514,14 @@ export class ReviewStore {
   constructor(
     databasePath: string,
     private readonly providers: ReviewProviders,
-    /** How the checkouts group, if `groupCheckoutsAhead` worked it out. */
-    private readonly checkoutOwners?: ReadonlyMap<string, string>,
   ) {
     // WAL plus a busy timeout: another host on the same home waits instead of failing.
     this.db = new DatabaseSync(databasePath, { timeout: 5000 });
     initializeReviewStoreSchema(this.db);
-    // Each upgrade reads a quoted file once, before its write lock and in it.
-    const files = new Map<string, string | undefined>();
-
-    upgradeStore({
-      db: this.db,
-      prepareCheckouts: () => this.checkouts.prepare(),
-      repositories: () => this.repositories(),
-      repositoryPath: (repositoryId) => this.repositoryPath(repositoryId),
-      repositoryName: (repositoryId) => this.repositoryName(repositoryId),
-      fileAtCommit: (repositoryId, commit, file) => {
-        const key = JSON.stringify([repositoryId, commit, file]);
-
-        if (!files.has(key))
-          files.set(key, this.fileAtCommit(repositoryId, commit, file));
-
-        return files.get(key);
-      },
-      projectOfRepository: (repositoryId) =>
-        this.projectOfRepository(repositoryId),
-      fallbackProject: () => this.fallbackProject(),
-      rewriteVersion: (reviewId, version, snapshot) =>
-        this.rewriteVersion(reviewId, version, snapshot),
-      firstRepositoryProject: () => this.firstRepositoryProject(),
-    });
     this.activity = new ReviewActivity(this.db, (id) =>
       this.assertWritable(id),
     );
-    this.askHistory = new AskHistory(this.db, (id) =>
-      this.assertOutOfTrash(id),
-    );
+    this.askHistory = new AskHistory(this.db);
 
     this.purgeExpired();
     this.purgeTimer = setInterval(() => this.purgeExpired(), 60_000);
@@ -740,136 +537,6 @@ export class ReviewStore {
     this.externalChanges.unref();
   }
 
-  /** Saves a version over what it was; the current one re-indexes its
-   * board's links, as every written version does. */
-  private rewriteVersion(
-    reviewId: string,
-    version: number,
-    snapshot: JsonValue,
-  ) {
-    this.db
-      .prepare("UPDATE versions SET snapshot=? WHERE review_id=? AND version=?")
-      .run(JSON.stringify(snapshot), reviewId, version);
-
-    if (version !== this.currentVersion(reviewId)) return;
-
-    try {
-      this.indexBoardLinks(reviewId, this.read(reviewId).document);
-    } catch {
-      // A version that no longer reads indexes nothing.
-    }
-  }
-
-  /** The project of a registered checkout, made on first use. Checkouts of
-   * one repository (worktrees, or clones of one GitHub repository) share it. */
-  projectOfRepository(repositoryId: string): string {
-    const row = this.db
-      .prepare("SELECT project_id FROM repositories WHERE id=?")
-      .get(repositoryId);
-
-    if (!row) return this.fallbackProject();
-
-    if (row.project_id) return String(row.project_id);
-
-    return projectOfCheckout(this.db, repositoryId, this.checkouts);
-  }
-
-  /** For a board with no repository: the project of the board opened last,
-   * else of the first registered checkout, else one with no repository. */
-  private fallbackProject(): string {
-    const recent = this.db
-      .prepare(
-        `SELECT reviews.project_id FROM reviews
-        JOIN review_attention ON review_attention.review_id=reviews.id
-        WHERE review_attention.viewed_at IS NOT NULL
-        ORDER BY review_attention.viewed_at DESC LIMIT 1`,
-      )
-      .get();
-
-    return recent ? String(recent.project_id) : this.firstRepositoryProject();
-  }
-
-  private firstRepositoryProject(): string {
-    const [first] = this.repositories();
-
-    if (first) return this.projectOfRepository(first.id);
-
-    const empty = this.db
-      .prepare(
-        "SELECT id FROM projects WHERE id NOT IN (SELECT project_id FROM repositories WHERE project_id IS NOT NULL) LIMIT 1",
-      )
-      .get();
-
-    if (empty) return String(empty.id);
-
-    const projectId = randomUUID();
-
-    this.db
-      .prepare("INSERT INTO projects(id,name) VALUES(?,?)")
-      .run(projectId, "Whiteboards");
-
-    return projectId;
-  }
-
-  /** A checkout's project, as the catalog lists it; undefined once the
-   * checkout is unregistered. */
-  checkoutProject(
-    repositoryId: string,
-  ): ReviewApiSummary["project"] | undefined {
-    if (!this.repositories().some(({ id }) => id === repositoryId))
-      return undefined;
-
-    const id = this.projectOfRepository(repositoryId);
-
-    const { name } = this.db
-      .prepare("SELECT name FROM projects WHERE id=?")
-      .get(id)!;
-
-    return { id, name: String(name) };
-  }
-
-  /** Undefined when the file can't be read. */
-  private fileAtCommit(
-    repositoryId: string,
-    commit: string,
-    file: string,
-  ): string | undefined {
-    try {
-      return this.checkouts.fileAt(
-        this.repositoryPath(repositoryId),
-        commit,
-        file,
-      );
-    } catch {
-      return undefined;
-    }
-  }
-
-  /** A checkout's name as its project labels it, else its folder. */
-  private repositoryName(repositoryId: string): string {
-    try {
-      const root = this.repositoryPath(repositoryId);
-
-      return (
-        this.repositoryGroup(root)?.label.split("/").at(-1) ??
-        path.basename(root)
-      );
-    } catch {
-      return "another repository";
-    }
-  }
-
-  /** A board's project. */
-  projectOf(id: string): string {
-    const row = this.db
-      .prepare("SELECT project_id FROM reviews WHERE id=?")
-      .get(id);
-
-    if (!row) this.assertExists(id);
-
-    return String(row!.project_id);
-  }
-
   private dataVersion() {
     return Number(this.db.prepare("PRAGMA data_version").get()!.data_version);
   }
@@ -991,19 +658,34 @@ export class ReviewStore {
       throw error;
     }
   }
-  private checkoutGroups: CheckoutGroups | undefined;
-
-  /** How the store's checkouts group into projects, kept for the open. */
-  private get checkouts() {
-    return (this.checkoutGroups ??= new CheckoutGroups(
-      this.db,
-      undefined,
-      this.checkoutOwners,
-    ));
-  }
+  private readonly repositoryGroups = new Map<
+    string,
+    ReviewApiSummary["repositoryGroup"]
+  >();
+
+  private repositoryGroup(root: string): ReviewApiSummary["repositoryGroup"] {
+    if (this.repositoryGroups.has(root)) return this.repositoryGroups.get(root);
+
+    // Resolving a missing checkout would spawn on every listing.
+    if (!existsSync(root)) return undefined;
+
+    const context = resolveRepoContextSync(root);
+
+    if (!context) return undefined;
+
+    const group = context.githubSlug
+      ? {
+          key: `remote:https://github.com/${context.githubSlug.toLowerCase()}.git`,
+          label: context.githubSlug,
+        }
+      : {
+          key: `git:${context.commonDir}`,
+          label: path.basename(path.dirname(context.commonDir)),
+        };
 
-  private repositoryGroup(root: string) {
-    return this.checkouts.group(root);
+    this.repositoryGroups.set(root, group);
+
+    return group;
   }
 
   registerRepository(root: string) {
@@ -1015,66 +697,16 @@ export class ReviewStore {
       .prepare("SELECT id,name FROM repositories WHERE path=?")
       .get(root)!;
 
-    this.projectOfRepository(String(row.id));
-
     return { id: String(row.id), name: String(row.name) };
   }
-  /** Forgets a checkout no board uses, after every write queued before it,
-   * so a board being made with it keeps it. */
-  unregisterRepository(id: string): Promise<void> {
-    const run = this.pending.then(async () => {
-      this.db.exec("BEGIN IMMEDIATE");
-
-      try {
-        const used = this.db
-          // Document pins and per-reference pins both spell the id in the snapshot.
-          .prepare(`SELECT EXISTS (SELECT 1 FROM versions WHERE instr(snapshot, ?) > 0)
-          OR EXISTS (SELECT 1 FROM resources WHERE repository_id=?) AS used`)
-          .get(`"repositoryId":${JSON.stringify(id)}`, id)!.used;
-
-        // Its project stays, with any boards in it.
-        if (!used)
-          this.db.prepare("DELETE FROM repositories WHERE id=?").run(id);
-
-        this.db.exec("COMMIT");
-      } catch (error) {
-        if (this.db.isTransaction) this.db.exec("ROLLBACK");
-        throw error;
-      }
-    });
-
-    this.pending = run.catch(() => {});
-
-    return run;
-  }
-  /** Checkouts whose remote is cloneUrl, most recently used first. */
-  checkoutsOf(cloneUrl: string): string[] {
-    const key = `remote:${cloneUrl.toLowerCase()}`;
-
-    const used = (repositoryId: string) =>
-      String(
-        this.db
-          .prepare(
-            `SELECT MAX(json_extract(versions.snapshot,'$.createdAt')) AS at
-            FROM reviews JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version
-            WHERE json_extract(versions.snapshot,'$.target.repositoryId')=?`,
-          )
-          .get(repositoryId)?.at ?? "",
-      );
-
-    return this.repositories()
-      .filter((repository) => {
-        try {
-          return this.repositoryGroup(repository.path)?.key === key;
-        } catch {
-          return false;
-        }
-      })
-      .map((repository) => ({ id: repository.id, at: used(repository.id) }))
-      .sort((left, right) => right.at.localeCompare(left.at))
-      .map((repository) => repository.id);
+  unregisterRepository(id: string) {
+    this.db
+      // Document pins and per-reference pins both spell the id in the snapshot.
+      .prepare(`DELETE FROM repositories WHERE id=?
+      AND NOT EXISTS (SELECT 1 FROM versions WHERE instr(snapshot, ?) > 0)
+      AND NOT EXISTS (SELECT 1 FROM resources WHERE repository_id=?)`)
+      .run(id, `"repositoryId":${JSON.stringify(id)}`, id);
   }
-
   /** Registered checkouts, oldest registration first. */
   repositories() {
     return this.db
@@ -1176,14 +808,8 @@ export class ReviewStore {
         404,
       );
   }
-  /** A board that exists and isn't in Trash: the one rule every write
-   * about a board keeps. */
   assertWritable(id: string) {
     this.assertExists(id);
-    this.assertOutOfTrash(id);
-  }
-  /** Refuses a board in Trash, which is read-only until it is restored. */
-  assertOutOfTrash(id: string) {
     const trashedAt = this.trashTime(id);
 
     if (trashedAt)
@@ -1199,57 +825,45 @@ export class ReviewStore {
 
     return row?.deleted_at ? String(row.deleted_at) : null;
   }
-  /** Removes a board for good, from Delete… or Trash's purge. Links into
-   * it stay, and show it as deleted. */
   private removePermanently(id: string) {
-    const { title } = this.read(id);
-
     for (const table of [
+      "ask_conversations",
       "authoring_presences",
       "review_coverage",
       "review_attention",
       "versions",
     ])
       this.db.prepare(`DELETE FROM ${table} WHERE review_id=?`).run(id);
-    this.askHistory.removeReview(id);
-    // Its children move up to top level, its dependencies and the links
-    // on it go, by the schema's foreign keys. Links into it stay, and the
-    // tombstone shows it as deleted, in the project it was in.
-    this.db
-      .prepare(
-        "INSERT OR REPLACE INTO deleted_boards(id,title,deleted_at,project_id) VALUES(?,?,?,(SELECT project_id FROM reviews WHERE id=?))",
-      )
-      .run(id, title, new Date().toISOString(), id);
     this.db.prepare("DELETE FROM reviews WHERE id=?").run(id);
     this.liveSources.delete(id);
   }
-  /** Deletes the boards 30 days in Trash, each as Delete… would. */
   private purgeExpired() {
-    const cutoff = new Date(Date.now() - TRASH_DAYS * 86400000).toISOString();
+    const cutoff = new Date(Date.now() - 30 * 86400000).toISOString();
+    const expired: Result[] = [];
+    this.db.exec("BEGIN IMMEDIATE");
 
-    const expired = () =>
-      this.db
+    try {
+      for (const row of this.db
         .prepare(
-          "SELECT review_id FROM review_attention JOIN reviews ON reviews.id=review_id WHERE deleted_at <= ?",
+          "SELECT review_id,version FROM review_attention JOIN reviews ON reviews.id=review_id WHERE deleted_at <= ?",
         )
-        .all(cutoff)
-        .map((row) => String(row.review_id));
-
-    for (const reviewId of expired())
-      // Restored meanwhile, by another host on this home: it stays.
-      // Trash's own deadline, which no hold or thread stops.
-      this.deleteBoard(
-        this.read(reviewId),
-        { kind: "person" },
-        {
-          guard: () => {
-            if (!expired().includes(reviewId))
-              throw new ReviewInputError("Restored from Trash.", 409);
-          },
-        },
-      );
-  }
+        .all(cutoff)) {
+        const reviewId = String(row.review_id);
+        expired.push({ reviewId, version: Number(row.version), deleted: true });
+        this.removePermanently(reviewId);
+      }
+
+      this.db.exec("COMMIT");
+    } catch (error) {
+      this.db.exec("ROLLBACK");
+      throw error;
+    }
 
+    for (const result of expired) {
+      this.activity.deleted(result.reviewId);
+      this.notify(result);
+    }
+  }
   read(id: string, version?: number): Snapshot {
     const row =
       version === undefined
@@ -1276,7 +890,9 @@ export class ReviewStore {
     // retired attachment representations with their canonical equivalent and
     // drops retired fields.
     // Lenses saved as document blocks read as the snapshot's own.
-    const { document, lenses } = readStoredDocument(snapshot.document);
+    const { document, lenses } = liftFileLenses(
+      migrateStoredDocument(snapshot.document),
+    );
 
     // SAFETY: stored blocks were validated on write; migration only replaces
     // retired representations and lifts retired lens blocks out.
@@ -1322,24 +938,14 @@ export class ReviewStore {
     }
   }
 
-  /** Deletes the tutorial earlier versions shipped. Like any board, each
-   * goes to Trash first, then is deleted from there. */
-  async removeLegacyTutorials(): Promise<void> {
-    const tutorials = this.db
+  /** Reviews of the tutorial earlier versions shipped, for their removal. */
+  legacyTutorialIds(): string[] {
+    return this.db
       .prepare(
         `SELECT reviews.id FROM reviews JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version WHERE json_extract(versions.snapshot,'$.origin.tutorial') = 1`,
       )
       .all()
       .map((row) => String(row.id));
-
-    for (const reviewId of tutorials) {
-      if (!this.trashTime(reviewId))
-        await this.execute({
-          operation: { type: "lifecycle", reviewId, state: "trash" },
-        });
-
-      await this.execute({ operation: { type: "delete", reviewId } });
-    }
   }
 
   list(): ReviewApiSummary[] {
@@ -1357,13 +963,11 @@ export class ReviewStore {
       .prepare(
         `SELECT json_remove(versions.snapshot,'$.document') AS summary,
           (SELECT json_extract(first.snapshot,'$.createdAt') FROM versions AS first WHERE first.review_id=reviews.id ORDER BY first.version LIMIT 1) AS first_created_at,
-          review_attention.viewed_at, review_attention.deleted_at, repositories.name AS repository_name, repositories.path AS repository_path,
-          projects.id AS project_id, projects.name AS project_name
+          review_attention.viewed_at, review_attention.deleted_at, repositories.name AS repository_name, repositories.path AS repository_path
         FROM reviews
-        JOIN projects ON projects.id=reviews.project_id
         JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version
         LEFT JOIN review_attention ON review_attention.review_id=reviews.id
-        LEFT JOIN repositories ON repositories.id=${BOARD_REPOSITORY_ID_SQL}
+        LEFT JOIN repositories ON repositories.id=json_extract(versions.snapshot,'$.pins.repositoryId')
         ${id === undefined ? "" : "WHERE reviews.id=?"}
         ORDER BY reviews.rowid`,
       )
@@ -1399,37 +1003,23 @@ export class ReviewStore {
           repositoryPath: row.repository_path
             ? String(row.repository_path)
             : undefined,
-          project: {
-            id: String(row.project_id),
-            name: String(row.project_name),
-          },
+          repositoryGroup: row.repository_path
+            ? this.repositoryGroup(String(row.repository_path))
+            : undefined,
           repositoryName: row.repository_name
             ? String(row.repository_name)
-            : "(unknown repository)",
+            : (summary.pins?.repositoryId ?? ""),
           viewedAt: row.viewed_at ? String(row.viewed_at) : null,
           trashedAt: row.deleted_at ? String(row.deleted_at) : null,
-          // Any unseen version counts, whoever saved it.
-          changed: !row.viewed_at || summary.createdAt > String(row.viewed_at),
           working: this.activity.isWorking(summary.reviewId),
         };
 
+        if (summary.kind === "scratchpad")
+          listed.contents = this.scratchpadContents();
+
         return listed;
       });
 
-    const graph = this.relationGraph();
-
-    for (const listed of reviews) {
-      const parentId = graph.parents.get(listed.reviewId);
-      const children = graph.children.get(listed.reviewId);
-      const dependsOn = graph.dependsOn.get(listed.reviewId);
-
-      if (parentId) listed.parentId = parentId;
-
-      if (children) listed.children = this.orderChildren(children, graph);
-
-      if (dependsOn) listed.dependsOn = dependsOn;
-    }
-
     return this.withDiffStats(reviews);
   }
 
@@ -1456,6 +1046,34 @@ export class ReviewStore {
     }));
   }
 
+  /** What the pad holds, for its Home card: blocks, and the diagrams among them. */
+  private scratchpadContents(): NonNullable<ReviewApiSummary["contents"]> {
+    const blocks = elements(this.read(SCRATCHPAD_ID).document).filter(
+      (element) => !isUnit(element),
+    );
+
+    return {
+      blocks: blocks.length,
+      diagrams: blocks.filter((block) => DIAGRAM_TYPES.has(block.type)).length,
+    };
+  }
+  /** The one scratchpad, made on first use. A host that loses the race to
+   * another on the same home finds it made. */
+  async ensureScratchpad(): Promise<void> {
+    if (this.has(SCRATCHPAD_ID)) return;
+
+    try {
+      await this.execute({
+        operation: {
+          type: "create",
+          title: SCRATCHPAD_TITLE,
+          kind: "scratchpad",
+        },
+      });
+    } catch (error) {
+      if (!this.has(SCRATCHPAD_ID)) throw error;
+    }
+  }
   /** Two saved board/day pairs in the last fourteen days. */
   feedbackEligible(now = Date.now()): boolean {
     const row = this.db
@@ -1476,33 +1094,17 @@ export class ReviewStore {
     return Number(row?.pairs) >= 2;
   }
 
-  history(id: string): HistoryEntry[] {
+  history(id: string) {
     return this.db
       .prepare(
-        `SELECT version,
-          CASE WHEN json_valid(snapshot) THEN json_extract(snapshot,'$.title') END AS title,
-          CASE WHEN json_valid(snapshot) THEN json_extract(snapshot,'$.createdAt') END AS created_at,
-          author_kind,
-          thread_id
-        FROM versions WHERE review_id=? ORDER BY version`,
+        "SELECT version,json_extract(snapshot,'$.title') AS title,json_extract(snapshot,'$.createdAt') AS created_at FROM versions WHERE review_id=? ORDER BY version",
       )
       .all(id)
-      .map((row) => {
-        const entry: HistoryEntry = {
-          version: Number(row.version),
-          // A version that won't parse still has its place in history.
-          title: String(row.title ?? ""),
-          createdAt: String(row.created_at ?? ""),
-        };
-
-        if (row.author_kind !== null)
-          entry.author = row.author_kind === "person" ? "you" : "agent";
-
-        if (row.author_kind !== "person" && row.thread_id !== null)
-          entry.threadId = String(row.thread_id);
-
-        return entry;
-      });
+      .map((row) => ({
+        version: Number(row.version),
+        title: String(row.title),
+        createdAt: String(row.created_at),
+      }));
   }
   inspect(id: string, targetId?: string, version?: number) {
     const snapshot = this.read(id, version);
@@ -1514,7 +1116,6 @@ export class ReviewStore {
     // oxlint-disable-next-line anti-slop/no-unknown-parameters -- Command boundary: commandSchema.parse below rejects malformed input before mutation.
     input: unknown,
     initial?: { document: Block[]; origin: SnapshotOrigin },
-    author: Author = { kind: "agent" },
   ): Promise<Result> {
     if (this.closing)
       return Promise.reject(new Error("Review store is closing."));
@@ -1535,11 +1136,37 @@ export class ReviewStore {
         )
       : this.startPullRequestTitle(command);
 
-    return this.enqueue(async () => {
+    const run = this.pending.then(async () => {
       const op = command.operation;
       this.purgeExpired();
 
-      if (op.type === "create") {
+      if (
+        op.type !== "create" &&
+        op.type !== "delete" &&
+        op.type !== "lifecycle"
+      )
+        this.assertWritable(op.reviewId);
+
+      // The scratchpad is edited and restored like a review, and nothing else.
+      if (
+        op.type !== "create" &&
+        op.type !== "edit" &&
+        op.type !== "lens_edit" &&
+        op.type !== "restore" &&
+        this.read(op.reviewId).kind === "scratchpad"
+      )
+        throw new ReviewInputError(
+          "The scratchpad has no lifecycle, title or pins of its own.",
+          409,
+        );
+
+      if (op.type === "create" && op.kind === "scratchpad") {
+        if (op.target)
+          throw new ReviewInputError("A scratchpad has no target of its own.");
+
+        if (this.has(SCRATCHPAD_ID))
+          throw new ReviewInputError("The scratchpad already exists.", 409);
+      } else if (op.type === "create") {
         if (!op.target && !op.pullRequestUrl)
           throw new ReviewInputError("Supply a target or a pullRequestUrl.");
 
@@ -1548,7 +1175,7 @@ export class ReviewStore {
             "A checkout for the PR applies only to a create from pullRequestUrl alone; name it in the target instead.",
           );
 
-        if (!op.title && op.target && author.kind !== "person")
+        if (!op.title && op.target)
           throw new ReviewInputError("Supply a title.");
       }
 
@@ -1559,15 +1186,10 @@ export class ReviewStore {
 
       const fromPullRequest = await pullRequest;
 
-      // No commits to resolve; repositoryPath throws if it is unregistered.
-      const resolvedTarget: { target: ReviewTarget; pins?: Pins } | undefined =
-        requestedTarget?.kind === "project"
-          ? (this.repositoryPath(requestedTarget.repositoryId),
-            { target: requestedTarget })
-          : requestedTarget
-            ? await (this.providers.resolveTarget?.(requestedTarget) ??
-                namedCommits(requestedTarget))
-            : fromPullRequest;
+      const resolvedTarget = requestedTarget
+        ? await (this.providers.resolveTarget?.(requestedTarget) ??
+            namedCommits(requestedTarget))
+        : fromPullRequest;
 
       if (requestedTarget && !resolvedTarget)
         throw new ReviewInputError("Review targets are unavailable.");
@@ -1585,1424 +1207,339 @@ export class ReviewStore {
           const result = this.existingReview(
             found,
             others,
-            // A PR always resolves to commits, so pins are set.
-            resolvedTarget!.pins!,
+            resolvedTarget!.pins,
           );
 
-          if (op.parentId || op.dependsOn)
-            result.note += ` Its parent and dependencies were not changed either: set them with session_set_parent and session_set_dependencies.`;
-
           return result;
         }
       }
 
-      // What a board is outside its versions.
-      if (op.type === "set_parent")
-        return this.commitBoardFacts(op.reviewId, author, {
-          parentId: op.parentId,
-        });
-
-      if (op.type === "set_dependencies")
-        return this.commitBoardFacts(op.reviewId, author, {
-          dependsOn: op.dependsOn,
-        });
+      if (op.type === "delete") {
+        this.assertExists(op.reviewId);
 
-      if (op.type === "lifecycle")
-        return this.commitBoardFacts(op.reviewId, author, { state: op.state });
+        if (!this.trashTime(op.reviewId))
+          throw new ReviewInputError(
+            "Move this whiteboard to Trash before deleting it.",
+            409,
+          );
 
-      if (op.type === "attention")
-        return this.commitBoardFacts(op.reviewId, author, { viewed: true });
+        const result: Result = {
+          reviewId: op.reviewId,
+          version: this.read(op.reviewId).version,
+          deleted: true,
+        };
 
-      if (op.type === "delete")
-        return this.deleteBoard(this.read(op.reviewId), author, {
-          fromTrash: true,
-        });
+        this.commitCommand(
+          result,
+          () => this.removePermanently(op.reviewId),
+          () => this.assertMutation(op.reviewId, result.version),
+        );
 
-      const id = op.type === "create" ? randomUUID() : op.reviewId;
+        return result;
+      }
 
-      const previous = op.type === "create" ? undefined : this.read(id);
+      if (op.type === "attention" || op.type === "lifecycle") {
+        const result: Result = {
+          reviewId: op.reviewId,
+          version: this.read(op.reviewId).version,
+          attention: true,
+          ...(op.type === "lifecycle" && {
+            lifecycle: true as const,
+          }),
+        };
 
-      let snapshot: Snapshot =
-        op.type === "create"
-          ? createdSnapshot(
-              id,
-              op,
-              resolvedTarget!,
-              fromPullRequest &&
-                (fromPullRequest.title ||
-                  `PR #${op.pullRequestUrl!.split("/").at(-1)}`),
-              author.kind === "person",
+        this.commitCommand(result, () => {
+          this.db
+            .prepare(
+              "INSERT OR IGNORE INTO review_attention(review_id) VALUES(?)",
             )
-          : structuredClone(previous!);
-
-      delete snapshot.trashedAt;
+            .run(op.reviewId);
 
-      // Overlay state: a degraded read must not persist unavailability.
-      delete snapshot.sourceUnavailable;
-      // Each version describes only its own edit.
-      delete snapshot.lastEdit;
-
-      let nextId = previous
-        ? Number(
-            this.db.prepare("SELECT next_id FROM reviews WHERE id=?").get(id)!
-              .next_id,
-          )
-        : 0;
-
-      let applied: Applied | undefined;
-      let lensTarget: { targetId: string; type: "lens" } | undefined;
-      /** The head a worktree board read at, when it becomes a plan. */
-      let unpinnedWorktree: string | undefined;
-
-      if (
-        (op.type === "create" || op.type === "set_target") &&
-        this.providers.headBranch
-      ) {
-        const pins = resolvedTarget?.pins ?? snapshot.pins;
-
-        if (pins) {
-          const headRef =
-            requestedTarget?.kind === "commits"
-              ? requestedTarget.head
-              : undefined;
-
-          const branch = await this.providers.headBranch(pins, headRef);
-
-          snapshot.origin = { ...snapshot.origin, branch };
-        }
-      }
-
-      if (!requestedTarget && fromPullRequest)
-        snapshot.origin = {
-          ...snapshot.origin,
-          branch: fromPullRequest.branch ?? snapshot.origin?.branch,
-          baseBranch: fromPullRequest.baseBranch,
-        };
-
-      // A base named rather than given as a commit, whole or abbreviated;
-      // a stacked review names the branch below it. A plan compares nothing.
-      if (requestedTarget && requestedTarget.kind !== "project") {
-        const named = requestedTarget.base;
-        const base = resolvedTarget?.pins?.base;
-
-        snapshot.origin = {
-          ...snapshot.origin,
-          baseBranch:
-            named && !base?.startsWith(named.toLowerCase()) ? named : undefined,
-        };
-      }
-
-      switch (op.type) {
-        case "create":
-          if (initial) {
-            snapshot.document = await this.resolveCommitLinks(
-              documentSchema.parse(initial.document),
-              snapshot,
-            );
-            snapshot.origin = {
-              ...snapshot.origin,
-              ...structuredClone(initial.origin),
-            };
-
-            for (const block of snapshot.document)
-              assignFreshIds(block, (prefix) => `${prefix}-${++nextId}`);
-          }
-
-          setPullRequest(snapshot, op.pullRequestUrl, await pullRequestTitle);
-          break;
-        case "rename":
-          snapshot.title = op.title;
-          break;
-        case "set_target":
-          setPullRequest(
-            snapshot,
-            op.pullRequestUrl ??
-              (op.pullRequestUrl === null ||
-              snapshot.target?.repositoryId !==
-                resolvedTarget!.target.repositoryId
-                ? null
-                : undefined),
-            await pullRequestTitle,
-          );
-          snapshot.staleSources = [];
-
-          // A board that loses its pins keeps each reference pointing where it
-          // did.
-          if (snapshot.pins && !resolvedTarget!.pins) {
-            const pinned = pinDocumentReferences(
-              snapshot.document,
-              snapshot.pins,
-            );
-
-            // A worktree quotes uncommitted lines its head commit lacks.
-            if (
-              snapshot.target?.kind === "worktree" &&
-              JSON.stringify(pinned) !== JSON.stringify(snapshot.document)
-            )
-              unpinnedWorktree = snapshot.pins.head;
-            snapshot.document = pinned;
-          }
-
-          snapshot.target = resolvedTarget!.target;
-
-          if (resolvedTarget!.pins) snapshot.pins = resolvedTarget!.pins;
-          else delete snapshot.pins;
-          break;
-        case "restore":
-          snapshot = this.read(id, op.version);
-          delete snapshot.lastEdit;
-          break;
-        case "lens_edit": {
-          const lenses = snapshot.lenses ?? [];
-          const lens = applyLensEdit(lenses, op.edit, () => `lens-${++nextId}`);
-
-          if (lenses.length) snapshot.lenses = lenses;
-          else delete snapshot.lenses;
-          lensTarget = { targetId: lens.id, type: "lens" };
-          snapshot.lastEdit = {
-            type: op.edit.type,
-            targetId: lens.id,
-            blockId: lens.id,
-            kind: "lens",
-            ...(op.edit.type === "update" && {
-              fields: Object.keys(op.edit).filter(
-                (key) => key !== "type" && key !== "targetId",
-              ),
-            }),
-          };
-          break;
-        }
-
-        case "edit": {
-          const edit = respellEditLinks(op.edit);
-
-          applied = applyEdit(
-            snapshot.document,
-            edit,
-            (prefix) => `${prefix}-${++nextId}`,
-          );
-
-          snapshot.lastEdit = summarizeEdit(
-            edit,
-            applied,
-            previous!.document,
-            snapshot.document,
-          );
-
-          // commitVersion normalizes it, as it does every version.
-          break;
-        }
-      }
-
-      const warnings = unpinnedWorktree
-        ? [
-            `Its references now read at ${unpinnedWorktree.slice(0, 7)}, the checkout's last commit, which lacks any uncommitted lines they quoted. Check them.`,
-          ]
-        : [];
-
-      return this.commitVersion({
-        snapshot,
-        previous,
-        nextId,
-        author,
-        warnings,
-        restore: op.type === "restore",
-        repin: op.type === "set_target",
-        projectLive: op.type !== "restore" && !resolvedTarget,
-        result: {
-          ...(op.type === "create" && { created: true }),
-          targetId: applied?.targetId ?? lensTarget?.targetId,
-          ...(applied && { type: applied.type }),
-          ...(lensTarget && { type: lensTarget.type }),
-          ...(applied?.children && { children: applied.children }),
-        },
-        ...(op.type === "create" && {
-          relations: { parentId: op.parentId, dependsOn: op.dependsOn },
-        }),
-        ...((op.type === "edit" || op.type === "lens_edit") && {
-          courier: {
-            surface: op.type === "edit" ? "document" : "lenses",
-            activityId: op.activityId,
-          },
-        }),
-      });
-    });
-  }
-  /**
-   * Commits a board's next version: the one place a version is written.
-   * Whoever writes it, it keeps the same rules:
-   *  - an agent may not change a block a person holds;
-   *  - the version names its author: a thread's names the thread, a
-   *    person's is theirs and never inherits a thread;
-   *  - only a change of repository moves a board to another project, and an
-   *    existing board never takes the project of the board opened last;
-   *  - only links the change adds are checked;
-   *  - the version, its link index, the board's project and its relations
-   *    are written together, and only if the board is still at the version
-   *    read and the rules still hold.
-   * Runs inside the write queue.
-   */
-  private async commitVersion(change: {
-    snapshot: Snapshot;
-    previous: Snapshot | undefined;
-    nextId: number;
-    author: Author;
-    warnings?: string[];
-    restore?: boolean;
-    repin?: boolean;
-    projectLive: boolean;
-    /** The ids a person's save gave new blocks, by client key. */
-    personIds?: Record<string, string>;
-    /** Base version a person's save was made against. */
-    baseVersion?: number;
-    /** A save that, normalized, changes nothing saves no version. */
-    unchangedSavesNothing?: boolean;
-    result?: Omit<Result, "reviewId" | "version">;
-    relations?: { parentId?: string | null; dependsOn?: readonly string[] };
-    courier?: { surface: ActivitySurface; activityId?: string };
-  }): Promise<Result> {
-    const { previous, author } = change;
-    const id = change.snapshot.reviewId;
-    let snapshot = change.snapshot;
-
-    // Attribution: stripped, then stamped for this author alone.
-    delete snapshot.threadId;
-    delete snapshot.personEdit;
-
-    if (snapshot.lastEdit) delete snapshot.lastEdit.threadId;
-
-    if (previous && !change.restore)
-      await this.normalizeDocument(snapshot, previous);
-
-    if (
-      change.unchangedSavesNothing &&
-      previous &&
-      snapshot.title === previous.title &&
-      isDeepStrictEqual(snapshot.document, previous.document)
-    )
-      return { reviewId: id, version: previous.version };
-
-    const touched = previous
-      ? changedBlocks(previous.document, snapshot.document)
-      : [];
-
-    // Refused before any slow check, and again as it commits.
-    const holds = () => {
-      if (author.kind !== "person") this.assertUnleased(id, touched);
-    };
-
-    holds();
-
-    if (author.kind === "person")
-      snapshot.personEdit = {
-        changed: touched,
-        ...(change.personIds && { ids: change.personIds }),
-      };
-    else if (author.threadId) {
-      if (snapshot.lastEdit) snapshot.lastEdit.threadId = author.threadId;
-      else snapshot.threadId = author.threadId;
-    }
-
-    let warnings: string[];
-
-    ({ snapshot, warnings } = await this.prepareVersion(snapshot, previous, {
-      restore: change.restore,
-      repin: change.repin,
-      projectLive: change.projectLive,
-      person: author.kind === "person",
-    }));
-    warnings = [...(change.warnings ?? []), ...warnings];
-
-    const result: Result = {
-      ...change.result,
-      reviewId: id,
-      version: snapshot.version,
-    };
-
-    if (warnings.length) result.warnings = warnings;
-
-    const projectId = this.projectFor(snapshot, previous);
-
-    const previousProject = previous ? this.projectOf(id) : undefined;
-
-    this.commitCommand(
-      result,
-      () => {
-        this.saveVersion(snapshot, change.nextId, projectId, change.author);
-
-        if (change.relations?.parentId)
-          this.setParent(id, change.relations.parentId);
-
-        if (change.relations?.dependsOn)
-          this.setDependencies(id, change.relations.dependsOn);
-
-        // Relations stay inside a project: a retarget out of it drops them.
-        if (
-          previous &&
-          projectId !== previousProject &&
-          this.dropRelationsOutside(id, projectId)
-        )
-          result.warnings = [
-            ...(result.warnings ?? []),
-            "Its parent, children and dependencies were in its old project, so they were dropped: whiteboards relate only within a project.",
-          ];
-      },
-      previous
-        ? () => {
-            // A board in Trash is read-only, whoever writes.
-            this.assertWritable(id);
-
-            if (change.baseVersion !== undefined)
-              assertBaseVersion(change.baseVersion, this.currentVersion(id));
-            else this.assertMutation(id, previous.version);
-            holds();
-          }
-        : undefined,
-      change.courier && {
-        ...change.courier,
-        // The version names the agent whose courier draws it.
-        owned: (owner) => {
-          if (snapshot.lastEdit) snapshot.lastEdit.activityId = owner;
-        },
-      },
-    );
-
-    return result;
-  }
-  /** The project a version puts its board in: a new board's repository's,
-   * or, for a board that has one, its own unless the version moves it to
-   * another registered repository. */
-  private projectFor(snapshot: Snapshot, previous: Snapshot | undefined) {
-    const repository = snapshot.target?.repositoryId;
-
-    if (
-      previous &&
-      (!repository ||
-        repository === previous.target?.repositoryId ||
-        !this.db
-          .prepare("SELECT 1 FROM repositories WHERE id=?")
-          .get(repository))
-    )
-      return this.projectOf(snapshot.reviewId);
-
-    return repository
-      ? this.projectOfRepository(repository)
-      : this.fallbackProject();
-  }
-  private currentVersion(reviewId: string) {
-    return Number(
-      this.db.prepare("SELECT version FROM reviews WHERE id=?").get(reviewId)!
-        .version,
-    );
-  }
-  /** Runs one write after every write queued before it. */
-  private enqueue<T>(work: () => Promise<T>): Promise<T> {
-    if (this.closing)
-      return Promise.reject(new Error("Review store is closing."));
-
-    const run = this.pending.then(work);
-
-    this.pending = run.catch(() => {});
-
-    return run;
-  }
-  /** Respells a document's links and resolves its commit links, as every
-   * save does. A changed reference is no longer stale. */
-  private async normalizeDocument(snapshot: Snapshot, previous: Snapshot) {
-    snapshot.document = await this.resolveCommitLinks(
-      respellDocumentLinks(snapshot.document),
-      snapshot,
-      previous.document,
-    );
-
-    if (snapshot.staleSources?.length) {
-      const oldSources = new Map(
-        sourceReferences(previous.document, {
-          repositoryId: boardRepositoryId(previous),
-        }).map((item) => [item.id, JSON.stringify(item.source)]),
-      );
-
-      const newSources = new Map(
-        sourceReferences(snapshot.document, {
-          repositoryId: boardRepositoryId(snapshot),
-        }).map((item) => [item.id, JSON.stringify(item.source)]),
-      );
-
-      snapshot.staleSources = snapshot.staleSources.filter(
-        (id) => oldSources.get(id) === newSources.get(id) && newSources.has(id),
-      );
-    }
-  }
-  /** Checks a candidate version and numbers it. A worktree board's version
-   * may come back with its live source projected. */
-  private async prepareVersion(
-    candidate: Snapshot,
-    previous: Snapshot | undefined,
-    options: {
-      restore?: boolean;
-      repin?: boolean;
-      projectLive: boolean;
-      /** A person's save: links may name boards deleted since. */
-      person?: boolean;
-    },
-  ): Promise<{ snapshot: Snapshot; warnings: string[] }> {
-    const snapshot =
-      candidate.target?.kind === "worktree" && options.projectLive
-        ? await this.projectLiveSource(candidate)
-        : candidate;
-
-    // Component shapes were checked at entry (or when merging a field patch).
-    // Check cross-references here; do not reparse the whole stored document.
-    checkReferences(snapshot.document);
-
-    // A restore may bring back links to deleted boards, so skip the check.
-    if (!options.restore)
-      this.checkBoardLinks(snapshot, previous, options.person);
-
-    if (
-      snapshot.pins &&
-      (!previous ||
-        JSON.stringify(previous.pins) !== JSON.stringify(snapshot.pins))
-    )
-      await this.providers.validatePins(snapshot.pins);
-
-    // Advice is about what this command wrote; earlier advice stays said.
-    const advised = new Set(documentAdvice(previous?.document ?? []));
-
-    const warnings = [
-      ...documentAdvice(snapshot.document).filter(
-        (advice) => !advised.has(advice),
-      ),
-      ...(await this.validateExternal(snapshot, previous, options.repin)),
-    ];
-
-    snapshot.version = previous ? previous.version + 1 : 0;
-    snapshot.createdAt = new Date().toISOString();
-
-    return { snapshot, warnings };
-  }
-  /** Writes a version; call inside commitCommand. */
-  private saveVersion(
-    snapshot: Snapshot,
-    nextId: number,
-    projectId: string,
-    author: Author,
-  ) {
-    const id = snapshot.reviewId;
-
-    this.db
-      .prepare(
-        "INSERT INTO reviews(id,version,next_id,project_id) VALUES(?,?,?,?) ON CONFLICT(id) DO UPDATE SET version=excluded.version,next_id=excluded.next_id,project_id=excluded.project_id",
-      )
-      .run(id, snapshot.version, nextId, projectId);
-    this.db
-      .prepare(
-        "INSERT INTO versions(review_id,version,snapshot,thread_id,author_kind) VALUES(?,?,?,?,?)",
-      )
-      .run(
-        id,
-        snapshot.version,
-        JSON.stringify(snapshot),
-        versionThread(snapshot),
-        author.kind,
-      );
-    this.indexBoardLinks(id, snapshot.document);
-  }
-  /** Deletes a board and its history, if it is still at the version read
-   * and passes `guard`: Delete… from Trash, Trash's purge and a discarded
-   * empty board all end here. An agent can't delete a board while a person
-   * holds a block in it. */
-  private deleteBoard(
-    { reviewId, version }: Snapshot,
-    author: Author,
-    {
-      guard,
-      fromTrash = false,
-    }: {
-      guard?: () => void;
-      /** Delete…, which is only for a board in Trash. */
-      fromTrash?: boolean;
-    } = {},
-  ): Result {
-    const result: Result = { reviewId, version, deleted: true };
-
-    const rules = () => {
-      guard?.();
-
-      if (fromTrash && !this.trashTime(reviewId))
-        throw new ReviewInputError(
-          "Move this whiteboard to Trash before deleting it.",
-          409,
-        );
-      this.assertMutation(reviewId, version);
-
-      if (author.kind !== "person") this.assertUnheld(reviewId);
-    };
-
-    rules();
-
-    this.commitCommand(result, () => this.removePermanently(reviewId), rules);
-    this.leases.delete(reviewId);
-
-    return result;
-  }
-  /** Writes what a board is outside its versions: its parent or what it
-   * depends on, Trash or back, or that it was viewed. No version is saved,
-   * but the rules are a version's: a board in Trash takes nothing but a
-   * restore, and an agent can't put a board a person is in to Trash. */
-  private commitBoardFacts(
-    reviewId: string,
-    author: Author,
-    fact:
-      | { parentId: string | null }
-      | { dependsOn: readonly string[] }
-      | { state: "active" | "trash" }
-      | { viewed: true },
-  ): Result {
-    const lifecycle = "state" in fact;
-
-    const rules = () => {
-      this.assertExists(reviewId);
-
-      if (!lifecycle) this.assertOutOfTrash(reviewId);
-      else if (fact.state === "trash" && author.kind !== "person")
-        this.assertUnheld(reviewId);
-    };
-
-    rules();
-
-    const result: Result = { reviewId, version: this.read(reviewId).version };
-
-    if (lifecycle || "viewed" in fact) result.attention = true;
-
-    if (lifecycle) result.lifecycle = true;
-
-    this.commitCommand(
-      result,
-      () => {
-        if ("parentId" in fact) this.setParent(reviewId, fact.parentId);
-        else if ("dependsOn" in fact)
-          this.setDependencies(reviewId, fact.dependsOn);
-        else {
-          this.db
-            .prepare(
-              "INSERT OR IGNORE INTO review_attention(review_id) VALUES(?)",
-            )
-            .run(reviewId);
-
-          if ("viewed" in fact)
+          if (op.type === "attention")
             this.db
               .prepare(
                 "UPDATE review_attention SET viewed_at=? WHERE review_id=?",
               )
-              .run(new Date().toISOString(), reviewId);
+              .run(new Date().toISOString(), op.reviewId);
           else {
-            // A second move to Trash keeps the first deadline.
             const timestamp =
-              fact.state === "trash" ? new Date().toISOString() : null;
+              op.state === "trash" ? new Date().toISOString() : null;
 
             this.db
               .prepare(
                 "UPDATE review_attention SET deleted_at=CASE WHEN ? IS NULL THEN NULL ELSE COALESCE(deleted_at, ?) END WHERE review_id=?",
               )
-              .run(timestamp, timestamp, reviewId);
+              .run(timestamp, timestamp, op.reviewId);
           }
-        }
-
-        if ("parentId" in fact || "dependsOn" in fact)
-          result.relations = this.relations(reviewId);
-      },
-      rules,
-    );
-
-    return result;
-  }
-  /** Deletes a board the person made and left as it was: with no title
-   * (it reads "Untitled"), no blocks and no child boards. A title typed as
-   * "Untitled" is a title. A board still open on a canvas, or
-   * one an agent is working on, is kept. A closing canvas saves, then lets
-   * go of the board, so the discard waits for that first. */
-  async discard(reviewId: string): Promise<{ deleted: boolean }> {
-    const deadline = Date.now() + FOCUS_LEASE_TTL_MS;
-
-    while (this.leased(reviewId) && Date.now() < deadline)
-      await new Promise((resolve) => setTimeout(resolve, DISCARD_POLL_MS));
-
-    return this.enqueue(async () => {
-      if (!this.has(reviewId)) return { deleted: false };
-      const snapshot = this.read(reviewId);
-
-      if (
-        this.leased(reviewId) ||
-        this.activity.isWorking(reviewId) ||
-        snapshot.title !== "" ||
-        snapshot.document.length ||
-        this.relations(reviewId).children.length
-      )
-        return { deleted: false };
-
-      this.deleteBoard(snapshot, { kind: "person" });
-
-      return { deleted: true };
-    });
-  }
-  /** Each board's canvas leases by client: the board is open there, and
-   * `blockId` is the block the person is in, if any. In memory: a lease
-   * outlives neither its renewals nor the host. */
-  private readonly leases = new Map<
-    string,
-    Map<string, { blockId: string | null; expiresAt: number }>
-  >();
-
-  /** Whether a canvas still holds the board open. */
-  private leased(reviewId: string) {
-    const now = Date.now();
-
-    return [...(this.leases.get(reviewId)?.values() ?? [])].some(
-      (lease) => lease.expiresAt > now,
-    );
-  }
-
-  /** Records the block a person's canvas has focus in (null for none), or
-   * with `open: false` that the canvas closed the board. */
-  // oxlint-disable-next-line anti-slop/no-unknown-parameters -- Lease boundary: focusLeaseSchema.parse below validates incoming JSON.
-  focus(reviewId: string, input: unknown) {
-    const { clientId, blockId, open } = focusLeaseSchema.parse(input);
-
-    this.assertExists(reviewId);
-    const leases = this.leases.get(reviewId) ?? new Map();
-
-    if (open === false) leases.delete(clientId);
-    else
-      leases.set(clientId, {
-        blockId,
-        expiresAt: Date.now() + FOCUS_LEASE_TTL_MS,
-      });
-
-    if (leases.size) this.leases.set(reviewId, leases);
-    else this.leases.delete(reviewId);
-
-    return { ok: true as const };
-  }
-  /** Refuses an agent's change to a board while a person holds any block
-   * in it. */
-  private assertUnheld(reviewId: string) {
-    const now = Date.now();
-
-    for (const lease of this.leases.get(reviewId)?.values() ?? [])
-      if (lease.expiresAt > now && lease.blockId)
-        throw new ReviewInputError(
-          `The user is editing this block (${lease.blockId}). Edit another block, or try again after they move on.`,
-          409,
-        );
-  }
-
-  /** Refuses an agent's edit to a block a person is editing. */
-  private assertUnleased(reviewId: string, changed: readonly string[]) {
-    const leases = this.leases.get(reviewId);
-
-    if (!leases || !changed.length) return;
-    const now = Date.now();
+        });
 
-    for (const [clientId, lease] of leases)
-      if (lease.expiresAt <= now) leases.delete(clientId);
-      else if (lease.blockId && changed.includes(lease.blockId))
-        throw new ReviewInputError(
-          `The user is editing this block (${lease.blockId}). Edit another block, or try again after they move on.`,
-          409,
-        );
-  }
-  /** Saves a person's whole board as their own version, against the version
-   * they started from. Blocks without ids get fresh ones. */
-  // oxlint-disable-next-line anti-slop/no-unknown-parameters -- Save boundary: personEditSchema and documentSchema parse below validate incoming JSON.
-  personEdit(reviewId: string, input: unknown): Promise<PersonEditResult> {
-    const body = personEditSchema.parse(input);
+        return result;
+      }
 
-    return this.enqueue(async () => {
-      const previous = this.read(reviewId);
+      const id =
+        op.type !== "create"
+          ? op.reviewId
+          : op.kind === "scratchpad"
+            ? SCRATCHPAD_ID
+            : randomUUID();
 
-      assertBaseVersion(body.baseVersion, previous.version);
+      const previous = op.type === "create" ? undefined : this.read(id);
 
-      const { document, nextId, ids } = personDocument(
-        body.document,
-        Number(
-          this.db
-            .prepare("SELECT next_id FROM reviews WHERE id=?")
-            .get(reviewId)!.next_id,
-        ),
-      );
+      let snapshot: Snapshot =
+        op.type === "create"
+          ? createdSnapshot(
+              id,
+              op,
+              resolvedTarget,
+              fromPullRequest &&
+                (fromPullRequest.title ||
+                  `PR #${op.pullRequestUrl!.split("/").at(-1)}`),
+            )
+          : structuredClone(previous!);
 
-      const snapshot = structuredClone(previous);
+      delete snapshot.trashedAt;
 
+      // Overlay state: a degraded read must not persist unavailability.
       delete snapshot.sourceUnavailable;
+      // Each version describes only its own edit.
       delete snapshot.lastEdit;
-      snapshot.title = body.title;
-      snapshot.document = document;
-
-      // `ids` lets the canvas recognise its own save on the stream, even
-      // when the save's response was lost.
-      const { version } = await this.commitVersion({
-        snapshot,
-        previous,
-        nextId,
-        author: { kind: "person" },
-        projectLive: true,
-        personIds: ids,
-        baseVersion: body.baseVersion,
-        unchangedSavesNothing: true,
-      });
-
-      return { reviewId, version, ids };
-    });
-  }
-  /** Where a board sits: its parent, and the parent's children in order,
-   * each with what its header shows. */
-  place(id: string) {
-    const graph = this.relationGraph(true);
-    const parentId = graph.parents.get(id);
-
-    const placed = (reviewId: string): PlacedBoard => {
-      const row = this.db
-        .prepare(
-          `SELECT json_extract(versions.snapshot,'$.title') AS title,
-            json_extract(versions.snapshot,'$.target') AS target,
-            json_extract(versions.snapshot,'$.origin') AS origin
-          FROM reviews JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version
-          WHERE reviews.id=?`,
-        )
-        .get(reviewId)!;
-
-      return {
-        reviewId,
-        title: String(row.title),
-        ...(row.target && {
-          // SAFETY: the target was validated when the version was saved.
-          target: JSON.parse(String(row.target)) as ReviewTarget,
-        }),
-        ...(row.origin && {
-          // SAFETY: the origin was validated when the version was saved.
-          origin: JSON.parse(String(row.origin)) as SnapshotOrigin,
-        }),
-      };
-    };
-
-    return {
-      board: placed(id),
-      ...(parentId && { parent: placed(parentId) }),
-      siblings: parentId
-        ? this.orderChildren(
-            this.listedSiblings(graph.children.get(parentId)!, id),
-            graph,
-          ).map(placed)
-        : [],
-      // A top-level board's own, in the order the sidebar lists them.
-      ...(!parentId && {
-        children: this.orderChildren(
-          this.listedSiblings(graph.children.get(id) ?? [], id),
-          graph,
-        ).map(placed),
-      }),
-    };
-  }
-  /** The siblings Home and the sidebar list, which a board's place counts
-   * among: all but those in Trash, and the board itself. */
-  private listedSiblings(ids: readonly string[], self: string) {
-    const trashed = new Set(this.trashedIds());
-
-    return ids.filter((id) => id === self || !trashed.has(id));
-  }
-  /** A board's parent, its children in sibling order, and what it depends on. */
-  relations(id: string): BoardRelations {
-    const graph = this.relationGraph();
-
-    return {
-      parentId: graph.parents.get(id) ?? null,
-      children: this.orderChildren(graph.children.get(id) ?? [], graph),
-      dependsOn: graph.dependsOn.get(id) ?? [],
-    };
-  }
-  /** Parents, children and dependencies. A board in Trash is out of them
-   * until it is restored, its rows kept; only its own place sees it. */
-  private relationGraph(withTrash = false) {
-    const parents = new Map<string, string>();
-    const children = new Map<string, string[]>();
-    const dependsOn = new Map<string, string[]>();
-    const trashed = new Set(withTrash ? [] : this.trashedIds());
-
-    for (const row of this.db
-      .prepare(
-        "SELECT id, parent_id FROM reviews WHERE parent_id IS NOT NULL ORDER BY rowid",
-      )
-      .all()) {
-      const board = String(row.id);
-      const parent = String(row.parent_id);
-
-      if (trashed.has(board) || trashed.has(parent)) continue;
-
-      parents.set(board, parent);
-      children.set(parent, [...(children.get(parent) ?? []), board]);
-    }
-
-    for (const row of this.db
-      .prepare(
-        "SELECT review_id, depends_on FROM board_dependencies ORDER BY rowid",
-      )
-      .all()) {
-      const board = String(row.review_id);
-      const dependency = String(row.depends_on);
 
-      if (trashed.has(board) || trashed.has(dependency)) continue;
-
-      dependsOn.set(board, [...(dependsOn.get(board) ?? []), dependency]);
-    }
-
-    return { parents, children, dependsOn };
-  }
-  /** Drops a board's parent, children and dependencies in other projects,
-   * after it moved to `projectId`. Whether it dropped any. */
-  private dropRelationsOutside(id: string, projectId: string): boolean {
-    const outside = "SELECT id FROM reviews WHERE project_id!=?";
-
-    const parents = this.db
-      .prepare(
-        `UPDATE reviews SET parent_id=NULL WHERE (id=? AND parent_id IN (${outside})) OR (parent_id=? AND project_id!=?)`,
-      )
-      .run(id, projectId, id, projectId).changes;
-
-    const dependencies = this.db
-      .prepare(
-        `DELETE FROM board_dependencies WHERE (review_id=? AND depends_on IN (${outside})) OR (depends_on=? AND review_id IN (${outside}))`,
-      )
-      .run(id, projectId, id, projectId).changes;
-
-    return Number(parents) + Number(dependencies) > 0;
-  }
-  private orderChildren(
-    children: readonly string[],
-    graph: ReturnType<ReviewStore["relationGraph"]>,
-  ): string[] {
-    if (children.length < 2) return [...children];
-
-    return orderSiblings(
-      this.siblingFacts(children),
-      (id) => graph.dependsOn.get(id) ?? [],
-      (repositoryId, ancestor, of) =>
-        this.isAncestor(repositoryId, ancestor, of),
-    );
-  }
-  private siblingFacts(ids: readonly string[]): SiblingFacts[] {
-    return this.db
-      .prepare(
-        `SELECT reviews.id,
-          (SELECT json_extract(first.snapshot,'$.createdAt') FROM versions AS first
-            WHERE first.review_id=reviews.id ORDER BY first.version LIMIT 1) AS created_at,
-          json_extract(versions.snapshot,'$.pins') AS pins,
-          json_extract(versions.snapshot,'$.origin.branch') AS branch,
-          json_extract(versions.snapshot,'$.origin.pullRequestUrl') AS url
-        FROM reviews JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version
-        WHERE reviews.id IN (${ids.map(() => "?").join(",")})`,
-      )
-      .all(...ids)
-      .map((row) => {
-        const id = String(row.id);
-
-        // SAFETY: pins were validated when the version was saved.
-        const saved = row.pins
-          ? (JSON.parse(String(row.pins)) as Pins)
-          : undefined;
-
-        // A worktree's pins follow its checkout.
-        const pins = this.liveSources.get(id)?.pins ?? saved;
-        const url = row.url ? String(row.url) : undefined;
-        const baseBranch = url && this.providers.pullRequestBaseBranch?.(url);
-
-        return {
-          id,
-          createdAt: String(row.created_at),
-          ...(pins && {
-            repositoryId: pins.repositoryId,
-            base: pins.base,
-            head: pins.head,
-          }),
-          ...(url && row.branch && { headBranch: String(row.branch) }),
-          ...(baseBranch && { baseBranch }),
-        };
-      });
-  }
-  /** Commits never change, so a definite answer is kept. */
-  private readonly ancestry = new Map<string, boolean>();
-
-  /** When git was last asked, for questions with no answer yet. */
-  private readonly ancestryAsked = new Map<string, number>();
-
-  /** Whether `ancestor` is an ancestor of `of`, as far as is known. git is
-   * asked in the background, never on the server thread: until it answers,
-   * or when it fails, the answer is no, and a yes re-sorts the catalog. */
-  private isAncestor(repositoryId: string, ancestor: string, of: string) {
-    const key = `${repositoryId}:${ancestor}:${of}`;
-    const known = this.ancestry.get(key);
-
-    if (known !== undefined) return known;
-
-    const asked = this.ancestryAsked.get(key);
-
-    // A commit not fetched yet may arrive: ask again, but not on every read.
-    if (asked !== undefined && Date.now() - asked < 60_000) return false;
-
-    this.ancestryAsked.set(key, Date.now());
-    let root: string;
-
-    try {
-      root = this.repositoryPath(repositoryId);
-    } catch {
-      return false;
-    }
-
-    // At most a few at once: a parent with many children asks many pairs.
-    this.ancestryQueue.push(() =>
-      runVcs(
-        "git",
-        [
-          "-C",
-          root,
-          "merge-base",
-          "--is-ancestor",
-          { rev: ancestor },
-          { rev: of },
-        ],
-        { timeout: 10_000 },
-      ).then(
-        () => this.knowAncestry(key, true),
-        (error: { code?: unknown }) => {
-          // Exit 1 means no; anything else (a missing commit, a timeout, a
-          // refused operand) is no answer.
-          if (error.code === 1) this.knowAncestry(key, false);
-        },
-      ),
-    );
-    this.askNextAncestry();
-
-    return false;
-  }
-  private readonly ancestryQueue: (() => Promise<void>)[] = [];
-  private ancestryRunning = 0;
-  private askNextAncestry() {
-    while (
-      this.ancestryRunning < ANCESTRY_CONCURRENCY &&
-      this.ancestryQueue.length
-    ) {
-      this.ancestryRunning++;
-      void this.ancestryQueue.shift()!().finally(() => {
-        this.ancestryRunning--;
-        this.askNextAncestry();
-      });
-    }
-  }
-  private knowAncestry(key: string, ancestor: boolean) {
-    this.ancestry.set(key, ancestor);
-    this.ancestryAsked.delete(key);
-
-    if (ancestor && !this.closing) this.catalogChanged();
-  }
-  private catalogChanged() {
-    for (const listener of this.catalogListeners)
-      try {
-        listener();
-      } catch {
-        // A disconnected viewer must not block other catalog subscribers.
-      }
-  }
-  private boardName(id: string) {
-    return `"${boardTitle(this.read(id).title)}" (${id})`;
-  }
-  /** The other board exists and is in the same project. */
-  private checkRelated(id: string, other: string) {
-    if (!this.has(other))
-      throw new ReviewInputError(
-        `Whiteboard ${other} does not exist. Name a whiteboard by its sessionId from session_list.`,
-      );
-
-    if (this.projectOf(id) !== this.projectOf(other))
-      throw new ReviewInputError(
-        `${this.boardName(other)} is in another project than ${this.boardName(id)}. A whiteboard's parent and dependencies are in its own project.`,
-      );
-  }
-  /** One parent, one level: a parent is top-level and a child has no
-   * children. Null makes the board top-level. */
-  private setParent(id: string, parentId: string | null) {
-    if (parentId !== null) {
-      if (parentId === id)
-        throw new ReviewInputError("A whiteboard can't be its own parent.");
-      this.checkRelated(id, parentId);
-      const { parents, children } = this.relationGraph();
-      const grandparent = parents.get(parentId);
-
-      if (grandparent)
-        throw new ReviewInputError(
-          `${this.boardName(parentId)} is a child of ${this.boardName(grandparent)}, and whiteboards nest one level deep. Use ${grandparent} as the parent instead.`,
-        );
-      const own = children.get(id) ?? [];
-
-      if (own.length)
-        throw new ReviewInputError(
-          `${this.boardName(id)} has children (${own.map((child) => this.boardName(child)).join(", ")}), and whiteboards nest one level deep, so it can't become a child. Move its children first with session_set_parent.`,
-        );
-    }
-
-    this.db
-      .prepare("UPDATE reviews SET parent_id=? WHERE id=?")
-      .run(parentId, id);
-  }
-  private setDependencies(id: string, dependsOn: readonly string[]) {
-    const unique = [...new Set(dependsOn)];
-    const graph = this.relationGraph();
-
-    for (const dependency of unique) {
-      if (dependency === id)
-        throw new ReviewInputError("A whiteboard can't depend on itself.");
-
-      const cycle = dependencyCycle(
-        id,
-        dependency,
-        (board) => graph.dependsOn.get(board) ?? [],
-      );
-
-      if (cycle)
-        throw new ReviewInputError(
-          `Depending on ${this.boardName(dependency)} would close a cycle: ${cycle.map((board) => this.boardName(board)).join(" → ")}. Drop one of those dependencies first.`,
-        );
-      this.checkRelated(id, dependency);
-    }
-
-    this.db.prepare("DELETE FROM board_dependencies WHERE review_id=?").run(id);
-
-    const insert = this.db.prepare(
-      "INSERT INTO board_dependencies(review_id,depends_on) VALUES(?,?)",
-    );
-
-    for (const dependency of unique) insert.run(id, dependency);
-  }
-  /** New links must point at a board and block that exist. Saved links are
-   * not rechecked, since their target may have been deleted. */
-  private checkBoardLinks(
-    snapshot: Snapshot,
-    previous?: Snapshot,
-    /** ⌘Z can bring back a link to a board or block deleted since; it
-     * shows as deleted, like any link whose target went away. */
-    person = false,
-  ) {
-    const key = ({ to }: BoardLinkRef) => `${to.board}#${to.block ?? ""}`;
-
-    const kept = new Set(
-      boardLinks(snapshot.reviewId, previous?.document ?? []).map(key),
-    );
-
-    for (const link of boardLinks(snapshot.reviewId, snapshot.document)) {
-      if (kept.has(key(link))) continue;
-      const { from, to } = link;
-
-      const document =
-        to.board === snapshot.reviewId
-          ? snapshot.document
-          : this.has(to.board)
-            ? this.read(to.board).document
-            : undefined;
-
-      if (!document && person && this.wasDeleted(to.board)) continue;
-
-      if (!document)
-        throw new ReviewInputError(
-          `Block ${from.block} links to board ${to.board}, which does not exist. Link a board by its sessionId from session_list.`,
-        );
-
-      if (
-        !person &&
-        to.block !== undefined &&
-        !elements(document).some((element) => element.id === to.block)
-      )
-        throw new ReviewInputError(
-          `Block ${from.block} links to block ${to.block}, which is not on board ${to.board}. Read the board with session_get for its block ids.`,
-        );
-    }
-  }
-  private wasDeleted(id: string) {
-    return (
-      this.db.prepare("SELECT 1 FROM deleted_boards WHERE id=?").get(id) !==
-      undefined
-    );
-  }
-  /** The boards that link to a board or its blocks. */
-  linkingBoards(id: string): string[] {
-    return this.db
-      .prepare("SELECT DISTINCT from_review FROM board_links WHERE to_review=?")
-      .all(id)
-      .map((row) => String(row.from_review));
-  }
-  /** Rebuilds the board_links rows for one board. */
-  private indexBoardLinks(id: string, document: Block[]) {
-    this.db.prepare("DELETE FROM board_links WHERE from_review=?").run(id);
+      let nextId = previous
+        ? Number(
+            this.db.prepare("SELECT next_id FROM reviews WHERE id=?").get(id)!
+              .next_id,
+          )
+        : 0;
 
-    const insert = this.db.prepare(
-      "INSERT INTO board_links(from_review,from_block,to_review,to_block) VALUES(?,?,?,?)",
-    );
+      let applied: Applied | undefined;
+      let lensTarget: { targetId: string; type: "lens" } | undefined;
 
-    for (const { from, to } of boardLinks(id, document))
-      insert.run(from.board, from.block, to.board, to.block ?? null);
-  }
-  /** Link previews by board, version and block; a version never changes. */
-  private readonly linkPreviews = new Map<string, BoardLinkPreview>();
+      if (
+        (op.type === "create" || op.type === "set_target") &&
+        this.providers.headBranch
+      ) {
+        const pins = resolvedTarget?.pins ?? snapshot.pins;
 
-  private linkPreview(target: Snapshot, block?: string): BoardLinkPreview {
-    const key = `${target.reviewId}@${target.version}#${block ?? ""}`;
-    let preview = this.linkPreviews.get(key);
+        if (pins) {
+          const headRef =
+            requestedTarget?.kind === "commits"
+              ? requestedTarget.head
+              : undefined;
 
-    if (!preview) {
-      preview = boardLinkPreview(target.document, block);
+          const branch = await this.providers.headBranch(pins, headRef);
 
-      if (this.linkPreviews.size >= 500)
-        this.linkPreviews.delete(this.linkPreviews.keys().next().value!);
+          snapshot.origin = { ...snapshot.origin, branch };
+        }
+      }
 
-      this.linkPreviews.set(key, preview);
-    }
+      if (!requestedTarget && fromPullRequest)
+        snapshot.origin = {
+          ...snapshot.origin,
+          branch: fromPullRequest.branch ?? snapshot.origin?.branch,
+          baseBranch: fromPullRequest.baseBranch,
+        };
 
-    return preview;
-  }
+      // A base named rather than given as a commit; a stacked review names
+      // the branch below it.
+      if (requestedTarget)
+        snapshot.origin = {
+          ...snapshot.origin,
+          baseBranch:
+            requestedTarget.base === resolvedTarget?.pins.base
+              ? undefined
+              : requestedTarget.base,
+        };
 
-  /** What a link's hover card shows of the board or block it links to,
-   * read when the card opens rather than with every link. Only for a link
-   * the version has. */
-  linkPeek(
-    id: string,
-    to: { board: string; block?: string },
-    version?: number,
-  ): BoardLinkPreview {
-    const linked = boardLinks(id, this.read(id, version).document).some(
-      (link) => link.to.board === to.board && link.to.block === to.block,
-    );
+      switch (op.type) {
+        case "create":
+          if (initial) {
+            snapshot.document = documentSchema.parse(initial.document);
+            snapshot.origin = {
+              ...snapshot.origin,
+              ...structuredClone(initial.origin),
+            };
 
-    if (!linked || !this.has(to.board))
-      throw new ReviewInputError("The board has no such link.", 404);
+            for (const block of snapshot.document)
+              assignFreshIds(block, (prefix) => `${prefix}-${++nextId}`);
+          }
 
-    return this.linkPreview(this.read(to.board), to.block);
-  }
+          setPullRequest(snapshot, op.pullRequestUrl, await pullRequestTitle);
+          break;
+        case "rename":
+          snapshot.title = op.title;
+          break;
+        case "set_target":
+          setPullRequest(
+            snapshot,
+            op.pullRequestUrl ??
+              (op.pullRequestUrl === null ||
+              snapshot.pins?.repositoryId !== resolvedTarget!.pins.repositoryId
+                ? null
+                : undefined),
+            await pullRequestTitle,
+          );
+          snapshot.staleSources = [];
+          snapshot.target = resolvedTarget!.target;
+          snapshot.pins = resolvedTarget!.pins;
+          break;
+        case "restore":
+          snapshot = this.read(id, op.version);
+          delete snapshot.lastEdit;
+          break;
+        case "lens_edit": {
+          if (snapshot.kind === "scratchpad")
+            throw new ReviewInputError(
+              "The scratchpad has no changes of its own to lens.",
+              409,
+            );
 
-  /** "owner / repo" for a board in a GitHub repository, else its folder. */
-  private repositoryLabel(board: Snapshot): string | undefined {
-    const repositoryId = board.target?.repositoryId;
+          const lenses = snapshot.lenses ?? [];
+          const lens = applyLensEdit(lenses, op.edit, () => `lens-${++nextId}`);
 
-    if (!repositoryId) return undefined;
+          if (lenses.length) snapshot.lenses = lenses;
+          else delete snapshot.lenses;
+          lensTarget = { targetId: lens.id, type: "lens" };
+          snapshot.lastEdit = {
+            type: op.edit.type,
+            targetId: lens.id,
+            blockId: lens.id,
+            kind: "lens",
+            ...(op.edit.type === "update" && {
+              fields: Object.keys(op.edit).filter(
+                (key) => key !== "type" && key !== "targetId",
+              ),
+            }),
+          };
+          break;
+        }
 
-    try {
-      return this.repositoryGroup(this.repositoryPath(repositoryId))
-        ?.label.split("/")
-        .join(" / ");
-    } catch {
-      return undefined;
-    }
-  }
+        case "edit": {
+          applied = applyEdit(
+            snapshot.document,
+            op.edit,
+            (prefix) => `${prefix}-${++nextId}`,
+            // The scratchpad is a running log: the newest thought goes on top.
+            { placement: snapshot.kind === "scratchpad" ? "first" : "last" },
+          );
 
-  /** A version's outgoing links and the board's current backlinks. Links to a
-   * deleted board or block are marked missing. */
-  links(id: string, version?: number) {
-    const titles = new Map<string, Snapshot | undefined>();
+          snapshot.lastEdit = summarizeEdit(
+            op.edit,
+            applied,
+            previous!.document,
+            snapshot.document,
+          );
 
-    const board = (reviewId: string) => {
-      if (!titles.has(reviewId))
-        titles.set(
-          reviewId,
-          this.has(reviewId) ? this.read(reviewId) : undefined,
-        );
+          if (snapshot.staleSources?.length) {
+            const oldSources = new Map(
+              sourceReferences(previous!.document).map((item) => [
+                item.id,
+                JSON.stringify(item.source),
+              ]),
+            );
 
-      return titles.get(reviewId);
-    };
+            const newSources = new Map(
+              sourceReferences(snapshot.document).map((item) => [
+                item.id,
+                JSON.stringify(item.source),
+              ]),
+            );
 
-    const outgoing = boardLinks(id, this.read(id, version).document).map(
-      ({ from, to }) => {
-        const target = board(to.board);
-
-        const missing =
-          !target ||
-          (to.block !== undefined &&
-            !elements(target.document).some(
-              (element) => element.id === to.block,
-            ));
-
-        const deleted = target
-          ? undefined
-          : this.db
-              .prepare("SELECT title,deleted_at FROM deleted_boards WHERE id=?")
-              .get(to.board);
-
-        return {
-          from,
-          to,
-          ...(target && {
-            title: target.title,
-            icon: boardIconKind(target.target),
-            ...(this.repositoryLabel(target) && {
-              repository: this.repositoryLabel(target),
-            }),
-            ...(target.origin?.pullRequestNumber && {
-              pullRequestNumber: target.origin.pullRequestNumber,
-              pullRequestUrl: target.origin.pullRequestUrl,
-            }),
-            updatedAt: target.createdAt,
-          }),
-          missing,
-          ...(deleted && {
-            title: String(deleted.title),
-            deletedAt: String(deleted.deleted_at),
-          }),
-        };
-      },
-    );
+            snapshot.staleSources = snapshot.staleSources.filter(
+              (id) =>
+                oldSources.get(id) === newSources.get(id) && newSources.has(id),
+            );
+          }
 
-    const backlinks = this.db
-      .prepare(
-        "SELECT DISTINCT from_review,from_block,to_block FROM board_links WHERE to_review=? AND from_review<>? ORDER BY from_review",
-      )
-      .all(id, id)
-      .map((row) => {
-        const from = board(String(row.from_review));
+          break;
+        }
+      }
 
-        return {
-          from: {
-            board: String(row.from_review),
-            block: String(row.from_block),
-          },
-          to:
-            row.to_block === null
-              ? { board: id }
-              : { board: id, block: String(row.to_block) },
-          title: from?.title ?? "",
-          ...(from && { icon: boardIconKind(from.target) }),
-          ...(from?.origin?.pullRequestNumber && {
-            pullRequestNumber: from.origin.pullRequestNumber,
-            pullRequestUrl: from.origin.pullRequestUrl,
-          }),
-        };
-      });
+      if (
+        snapshot.target?.kind === "worktree" &&
+        op.type !== "restore" &&
+        !resolvedTarget
+      ) {
+        snapshot = await this.projectLiveSource(snapshot);
+      }
 
-    return { outgoing, backlinks };
-  }
-  /** Boards edited by an Ask thread, most recent first. */
-  boardsChangedBy(threadId: string): {
-    reviewId: string;
-    title: string;
-    icon: BoardIconKind;
-    blockId?: string;
-  }[] {
-    return this.db
-      .prepare(
-        `SELECT edits.review_id, MAX(edits.version) AS last
-        FROM versions edits
-        JOIN reviews ON reviews.id=edits.review_id
-        WHERE edits.thread_id=?
-        GROUP BY edits.review_id ORDER BY MAX(json_extract(edits.snapshot,'$.createdAt')) DESC`,
-      )
-      .all(threadId)
-      .map((row) => {
-        const board = this.read(String(row.review_id));
-
-        // The block its last edit there touched, if the board still has it.
-        const blockId = this.read(board.reviewId, Number(row.last)).lastEdit
-          ?.blockId;
-
-        return {
-          reviewId: board.reviewId,
-          title: board.title,
-          icon: boardIconKind(board.target),
-          ...(blockId &&
-            elements(board.document).some(
-              (element) => element.id === blockId,
-            ) && { blockId }),
-        };
-      });
-  }
-  /** The boards each thread changed, newest first, for many threads in one
-   * query. */
-  /** A board's title and icon, read without its document. */
-  /** Where a board lives, as Recent names it: its checkout's folder, else
-   * its project's name. */
-  boardPlace(reviewId: string): string {
-    const row = this.db
-      .prepare(
-        `SELECT repositories.path, projects.name FROM reviews
-        JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version
-        LEFT JOIN repositories ON repositories.id=${BOARD_REPOSITORY_ID_SQL}
-        LEFT JOIN projects ON projects.id=reviews.project_id
-        WHERE reviews.id=?`,
-      )
-      .get(reviewId);
+      // Component shapes were checked at entry (or when merging a field patch).
+      // Check cross-references here; do not reparse the whole stored document.
+      checkReferences(snapshot.document);
 
-    return (
-      (row?.path && path.basename(String(row.path))) ||
-      (row?.name ? String(row.name) : "")
-    );
-  }
-  boardFace(reviewId: string) {
-    const row = this.db
-      .prepare(
-        `SELECT json_extract(versions.snapshot,'$.title') AS title, json_extract(versions.snapshot,'$.target') AS target
-        FROM reviews JOIN versions ON versions.review_id=reviews.id AND versions.version=reviews.version
-        WHERE reviews.id=?`,
+      if (
+        snapshot.pins &&
+        (!previous ||
+          JSON.stringify(previous.pins) !== JSON.stringify(snapshot.pins))
       )
-      .get(reviewId)!;
+        await this.providers.validatePins(snapshot.pins);
 
-    return {
-      reviewId,
-      title: String(row.title),
-      icon: boardIconKind(
-        // SAFETY: the target was validated when the version was saved.
-        row.target
-          ? (JSON.parse(String(row.target)) as ReviewTarget)
-          : undefined,
-      ),
-    };
-  }
-  boardsChangedByThreads(
-    threadIds: readonly string[],
-  ): Map<string, { reviewId: string; title: string; icon: BoardIconKind }[]> {
-    const changed = new Map<
-      string,
-      { reviewId: string; title: string; icon: BoardIconKind }[]
-    >();
+      // Advice is about what this command wrote; earlier advice stays said.
+      const advised = new Set(documentAdvice(previous?.document ?? []));
 
-    if (!threadIds.length) return changed;
-
-    const rows = this.db
-      .prepare(
-        // The thread_id index finds the rows; rowid orders them by when
-        // they were saved without parsing them.
-        `SELECT thread_id AS thread, review_id
-        FROM versions
-        WHERE thread_id IN (${threadIds.map(() => "?").join(",")})
-        GROUP BY thread, review_id ORDER BY MAX(rowid) DESC`,
-      )
-      .all(...threadIds);
+      const warnings = [
+        ...documentAdvice(snapshot.document).filter(
+          (advice) => !advised.has(advice),
+        ),
+        ...(await this.validateExternal(
+          snapshot,
+          previous,
+          op.type === "set_target",
+        )),
+      ];
 
-    const boards = new Map<
-      string,
-      { reviewId: string; title: string; icon: BoardIconKind } | undefined
-    >();
+      snapshot.version = previous ? previous.version + 1 : 0;
+      snapshot.createdAt = new Date().toISOString();
+
+      const result: Result = {
+        ...(op.type === "create" && { created: true }),
+        reviewId: id,
+        version: snapshot.version,
+        targetId: applied?.targetId ?? lensTarget?.targetId,
+        ...(applied && { type: applied.type }),
+        ...(lensTarget && { type: lensTarget.type }),
+        ...(applied?.children && { children: applied.children }),
+      };
 
-    for (const row of rows) {
-      const reviewId = String(row.review_id);
+      if (warnings.length) result.warnings = warnings;
 
-      if (!boards.has(reviewId))
-        boards.set(
-          reviewId,
-          this.has(reviewId) ? this.boardFace(reviewId) : undefined,
-        );
-      const board = boards.get(reviewId);
+      this.commitCommand(
+        result,
+        () => {
+          this.db
+            .prepare(
+              "INSERT INTO reviews(id,version,next_id) VALUES(?,?,?) ON CONFLICT(id) DO UPDATE SET version=excluded.version,next_id=excluded.next_id",
+            )
+            .run(id, snapshot.version, nextId);
+          this.db
+            .prepare(
+              "INSERT INTO versions(review_id,version,snapshot) VALUES(?,?,?)",
+            )
+            .run(id, snapshot.version, JSON.stringify(snapshot));
+        },
+        previous
+          ? () => {
+              this.assertWritable(id);
+              this.assertMutation(id, previous.version);
+            }
+          : undefined,
+        op.type === "edit" || op.type === "lens_edit"
+          ? {
+              surface: op.type === "edit" ? "document" : "lenses",
+              activityId: op.activityId,
+              // The version names the agent whose courier draws it.
+              owned: (owner) => {
+                if (snapshot.lastEdit) snapshot.lastEdit.activityId = owner;
+              },
+            }
+          : undefined,
+      );
 
-      if (!board) continue;
-      const thread = String(row.thread);
+      return result;
+    });
 
-      changed.set(thread, [...(changed.get(thread) ?? []), board]);
-    }
+    this.pending = run.catch(() => {});
 
-    return changed;
+    return run;
   }
   /** Resolve a target-less PR create before it queues, when it will need it. */
   private startPullRequest(
@@ -3010,7 +1547,7 @@ export class ReviewStore {
   ): Promise<ResolvedPullRequest> | undefined {
     const op = command.operation;
 
-    if (op.type !== "create" || op.target || !op.pullRequestUrl)
+    if (op.type !== "create" || op.kind || op.target || !op.pullRequestUrl)
       return undefined;
 
     if (!this.providers.resolvePullRequest)
@@ -3018,14 +1555,7 @@ export class ReviewStore {
         new ReviewInputError("Pull request targets are unavailable."),
       );
 
-    if (!op.repositoryId)
-      return Promise.reject(
-        new ReviewInputError(
-          'Name the checkout to fetch the PR into: target {kind:"pullRequest", repositoryPath, pullRequest}.',
-        ),
-      );
-
-    // A PR whose review is in Trash is refused before it is fetched.
+    // Keep an existing review's checkout so headMoved compares like with like.
     const [existing] =
       op.reuseExisting === false
         ? []
@@ -3041,6 +1571,7 @@ export class ReviewStore {
 
     return this.providers.resolvePullRequest(op.pullRequestUrl, {
       id: op.repositoryId,
+      preferred: existing && this.read(existing).pins?.repositoryId,
     });
   }
   private startPullRequestTitle(
@@ -3089,8 +1620,9 @@ export class ReviewStore {
 
     this.assertReusableReview(reviewId);
 
-    // Worktrees share commits, so comparing heads is enough.
-    const headMoved = snapshot.pins?.head !== requested.head;
+    const headMoved =
+      snapshot.pins?.repositoryId !== requested.repositoryId ||
+      snapshot.pins?.head !== requested.head;
 
     const working = this.activity.read(reviewId).activities ?? [];
 
@@ -3177,7 +1709,7 @@ export class ReviewStore {
     else if (!result.attention)
       this.observedVersions.set(result.reviewId, result.version);
 
-    if ((!result.attention || result.lifecycle) && !result.relations)
+    if (!result.attention || result.lifecycle)
       for (const listener of this.listeners)
         try {
           listener(result);
@@ -3207,42 +1739,6 @@ export class ReviewStore {
       undefined
     );
   }
-  /** Saves each new commit link's commit in full, resolved in the board's
-   * repository; one it does not have rejects the edit, as pins do. A link the
-   * board already had stays as it was saved, even if its commit is gone. */
-  private async resolveCommitLinks(
-    document: Block[],
-    board: Pick<Snapshot, "target" | "pins">,
-    previous?: Block[],
-  ): Promise<Block[]> {
-    const saved = new Set(previous ? commitLinkCommits(previous) : []);
-
-    const commits = commitLinkCommits(document).filter(
-      (commit) => !saved.has(commit),
-    );
-
-    const repositoryId = boardRepositoryId(board);
-
-    // Without a repository the links are rejected as references.
-    if (!commits.length || !repositoryId || !this.providers.resolveCommit)
-      return document;
-
-    const resolved = new Map<string, string>();
-
-    await Promise.all(
-      commits.map(async (commit) => {
-        const full = await this.providers.resolveCommit!(repositoryId, commit);
-
-        if (!full)
-          throw new ReviewInputError(
-            `Commit ${commit} is not in the board's repository. Fetch it first, or link a commit the repository has.`,
-          );
-        resolved.set(commit, full);
-      }),
-    );
-
-    return respellCommitLinks(document, resolved);
-  }
   private async validateExternal(
     snapshot: Snapshot,
     previous?: Snapshot,
@@ -3251,11 +1747,10 @@ export class ReviewStore {
     const warnings: string[] = [];
 
     const references = (
-      board: Pick<Snapshot, "document" | "target" | "pins" | "lenses">,
+      document: Block[],
       tolerant = false,
+      lenses: readonly Lens[] = [],
     ) => {
-      const { document, lenses = [] } = board;
-
       const sources = new Map<
         string,
         { source: FileLineRange; peek: boolean }
@@ -3269,10 +1764,7 @@ export class ReviewStore {
         sources.set(key, { source, peek: peek || (kept?.peek ?? false) });
       };
 
-      for (const { source, peek } of sourceReferences(document, {
-        tolerant,
-        repositoryId: boardRepositoryId(board),
-      }))
+      for (const { source, peek } of sourceReferences(document, { tolerant }))
         add(source, peek === true);
 
       // A lens range is a prose-like link: it must exist, not read as a peek.
@@ -3285,7 +1777,7 @@ export class ReviewStore {
       return { sources, resources };
     };
 
-    const current = references(snapshot, repin);
+    const current = references(snapshot.document, repin, snapshot.lenses);
 
     // Stored content is not re-validated: an edit may fix a link that the
     // current rules reject.
@@ -3302,7 +1794,11 @@ export class ReviewStore {
             .catch(() => undefined)
         : undefined;
 
-    const retained = references(previous ?? { document: [] }, true);
+    const retained = references(
+      previous?.document ?? [],
+      true,
+      previous?.lenses,
+    );
 
     // Independent reads of immutable commits: run them concurrently.
     const checks: Promise<void>[] = [];
@@ -3335,7 +1831,6 @@ export class ReviewStore {
               () => {
                 if (
                   repin &&
-                  !readsWhereItDid(source, previous?.pins) &&
                   (!changed || changed[source.side].has(source.file))
                 )
                   warnings.push(
@@ -3377,167 +1872,6 @@ export class ReviewStore {
   }
 }
 
-/** The highest number in a document's `prefix-N` ids, units included. */
-function highestIdNumber(document: Block[]): number {
-  let highest = 0;
-
-  for (const [, number] of JSON.stringify(document).matchAll(
-    /"id":"[^"]*?-(\d+)"/g,
-  ))
-    highest = Math.max(highest, Number(number));
-
-  return highest;
-}
-
-/** The title of a board a person made and has not named. */
-
-/** A person's save must start from the board's current version. */
-function assertBaseVersion(base: number, current: number) {
-  if (base !== current)
-    throw new ReviewInputError(
-      `The board changed since version ${base}; it is now at version ${current}. Merge the latest version and save again.`,
-      409,
-    );
-}
-
-/**
- * A person's whole document as the store saves it: each new block's
- * clientKey taken, the blocks parsed, a flow's units adopted and every block
- * without an id given the next one after `nextId`. Every save then respells
- * its links (respellDocumentLinks) and resolves commit links it has not
- * saved before. Mutates `input`.
- */
-export function personDocument(input: JsonValue[], nextId: number) {
-  const keys = takeClientKeys(input);
-  const document = documentSchema.parse(input);
-  const allocate = (prefix: string) => `${prefix}-${++nextId}`;
-
-  adoptFlowUnits(document, allocate);
-
-  for (const block of document) assignMissingIds(block, allocate);
-  assertUniqueIds(document);
-
-  return {
-    document,
-    // An id ⌘Z brought back stays; the counter moves past it, so an
-    // agent's next insert can't be given it again.
-    nextId: Math.max(nextId, highestIdNumber(document)),
-    ids: Object.fromEntries(
-      [...keys.byPath].map(([path, key]) => [key, blockAt(document, path).id!]),
-    ),
-  };
-}
-
-const clientKeySchema = z.string().min(1).optional();
-
-/** Removes each block's clientKey from a person's raw document, keeping it
- * by the block's path when the block has no id. Counts the bare blocks. */
-function takeClientKeys(document: JsonValue[]) {
-  const byPath = new Map<string, string>();
-  const seen = new Set<string>();
-  let bare = 0;
-
-  const visit = (list: JsonValue[], prefix: string) =>
-    list.forEach((block, index) => {
-      if (!isJsonObject(block)) return;
-      const path = `${prefix}${index}`;
-      const clientKey = clientKeySchema.parse(block.clientKey);
-
-      delete block.clientKey;
-
-      if (block.id === undefined) {
-        bare++;
-
-        if (clientKey !== undefined) {
-          if (seen.has(clientKey))
-            throw new ReviewInputError(
-              `clientKey ${clientKey} names more than one block. Give each new block its own clientKey.`,
-            );
-          seen.add(clientKey);
-          byPath.set(path, clientKey);
-        }
-      }
-
-      if (Array.isArray(block.children)) visit(block.children, `${path}/`);
-    });
-
-  visit(document, "");
-
-  return { byPath, bare };
-}
-
-/** The block at a path takeClientKeys recorded. */
-function blockAt(document: Block[], path: string): Block {
-  const [first, ...rest] = path.split("/").map(Number);
-  let block = document[first!]!;
-
-  for (const index of rest)
-    if ("children" in block) block = block.children[index]!;
-
-  return block;
-}
-
-/** Ids name one component each across the whole document. */
-function assertUniqueIds(document: Block[]) {
-  const seen = new Set<string>();
-
-  for (const { id } of elements(document)) {
-    if (id === undefined) continue;
-
-    if (seen.has(id))
-      throw new ReviewInputError(
-        `Id ${id} names more than one component. Give each block its own id, or leave a new block's id out.`,
-      );
-    seen.add(id);
-  }
-}
-
-/** Each block's own content by id, nested blocks included. A section or
- * callout is kept without its children, so a change to a child is only the
- * child's. */
-function ownBlocks(document: Block[], into = new Map<string, unknown>()) {
-  for (const block of document) {
-    if ("children" in block) {
-      const { children, ...own } = block;
-
-      if (block.id !== undefined) into.set(block.id, own);
-      ownBlocks(children, into);
-    } else if (block.id !== undefined) into.set(block.id, block);
-  }
-
-  return into;
-}
-
-/** The blocks added, removed or changed from one document to the next. A
- * block moved with its content unchanged did not change. */
-function changedBlocks(before: Block[], after: Block[]): string[] {
-  const old = ownBlocks(before);
-  const now = ownBlocks(after);
-
-  return [...new Set([...old.keys(), ...now.keys()])].filter(
-    (id) => !isDeepStrictEqual(old.get(id), now.get(id)),
-  );
-}
-
-/** Whether a reference's own pins read the commit the board's previous
- * pins did. */
-function readsWhereItDid(
-  source: { side: "base" | "head"; pins?: SourcePins },
-  previous: Pins | undefined,
-): boolean {
-  if (!source.pins || !previous) return false;
-
-  const commit =
-    source.side === "base"
-      ? (source.pins.base ?? source.pins.head)
-      : source.pins.head;
-
-  return (
-    source.pins.repositoryId === previous.repositoryId &&
-    (commit === previous.head || commit === previous.base)
-  );
-}
-
 /** Without a resolver, a commits target that names both commits pins them as
  * given; validatePins still checks they exist. */
 function namedCommits(target: ReviewTarget) {
@@ -3552,28 +1886,33 @@ function namedCommits(target: ReviewTarget) {
  * is kept so stored JSON reads as it always has. */
 function createdSnapshot(
   id: string,
-  op: { title?: string },
-  resolved: { target: ReviewTarget; pins?: Pins },
+  op: { title?: string; kind?: "scratchpad" },
+  resolved: { target: ReviewTarget; pins: Pins } | undefined,
   defaultTitle?: string,
-  /** A person's new board may start untitled. */
-  untitled = false,
 ): Snapshot {
-  const title = op.title || defaultTitle || (untitled ? "" : undefined);
+  const title = op.title ?? defaultTitle;
 
-  if (title === undefined) throw new ReviewInputError("Supply a title.");
+  if (!title) throw new ReviewInputError("Supply a title.");
 
-  const snapshot: Snapshot = {
+  if (!resolved)
+    return {
+      reviewId: id,
+      version: 0,
+      title,
+      kind: op.kind,
+      document: [],
+      createdAt: "",
+    };
+
+  return {
     reviewId: id,
     version: 0,
     title,
+    pins: resolved.pins,
     target: resolved.target,
     document: [],
     createdAt: "",
   };
-
-  if (resolved.pins) snapshot.pins = resolved.pins;
-
-  return snapshot;
 }
 
 export function inspectSnapshot(snapshot: Snapshot, targetId?: string) {
@@ -3601,6 +1940,3 @@ export function inspectSnapshot(snapshot: Snapshot, targetId?: string) {
             : undefined,
   }));
 }
-
-/** How many ancestry questions git answers at once. */
-const ANCESTRY_CONCURRENCY = 8;