@dev.fast/whiteboard 0.3.4 → 0.3.5-preview.20261021.131

package/dist/{client-BN_FDxFr.js → client-UH1bEG7Z.js}

@@ -1,7 +1,8 @@
-import { f as gitAt } from "./src-BMPuxWv4.js";
+import { f as gitAt } from "./src-DtfSndqS.js";
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-DsM3jO8G.js";
-import { C as resourceReference, D as sourceReferences, F as lensSchema, H as markdownNodes, I as lensSelections, U as parseMarkdown, Y as sourceAnchors, _ as hasCodeReferences, c as traceSchema, h as elements, k as checkReferences, l as textIncludesQuote, n as migrateStoredDocument, o as normalizedSoftwareElementSchema, p as documentSchema, r as migrateStoredLenses, s as normalizedSoftwareRelationshipSchema, t as liftFileLenses, u as anchorPins, w as resourceReferences, x as pinsSchema } from "./stored-document-migration-CChxtFAy.js";
+import "./src-DYZLCUP_.js";
+import { f as sourceAnchors } from "./lens-selection-BxPk53c8.js";
+import { $ as parseMarkdown, A as resourceReferences, E as pinsSchema, G as lensSelections, I as sourceReferences, O as readsAtBoardPins, R as checkReferences, W as lensSchema, Z as markdownNodes, _ as boardRepositoryId, c as normalizedSoftwareRelationshipSchema, f as anchorPins, k as resourceReference, l as traceSchema, n as migrateStoredDocument, r as migrateStoredLenses, s as normalizedSoftwareElementSchema, t as liftFileLenses, u as textIncludesQuote, x as elements, y as documentSchema } from "./stored-document-migration-B29lve9-.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -123,11 +124,25 @@ function digestBytes(bytes) {
 	return createHash("sha256").update(bytes).digest("hex");
 }
 function validateShareSources(snapshot) {
-	if (!snapshot.pins && hasCodeReferences(snapshot)) throw new ReviewInputError("Reviews with code references need source pins before sharing.", 409);
+	if (!snapshot.pins && readsAtBoardPins(snapshot)) throw new ReviewInputError("Reviews with code references need source pins before sharing.", 409);
+}
+/** The commits a board's references read at besides its base and head. A
+* recipient fetches them too. A shared board names no repository of its
+* own, so one stands in for its commit links. */
+function referenceCommits(snapshot, repositoryId = boardRepositoryId(snapshot) ?? "shared") {
+	const own = /* @__PURE__ */ new Set([snapshot.pins?.base, snapshot.pins?.head]);
+	const commits = /* @__PURE__ */ new Set();
+	for (const { source } of sourceReferences(snapshot.document, {
+		tolerant: true,
+		repositoryId
+	})) for (const commit of [source.pins?.base, source.pins?.head]) if (commit && !own.has(commit)) commits.add(commit);
+	return [...commits].sort();
 }
 /** Freeze one stored version before any asynchronous source reads. */
 async function exportShare(input) {
-	const { target, kind: _kind, staleSources: _staleSources, sourceUnavailable: _sourceUnavailable, lastEdit: _lastEdit, trashedAt: _trashedAt, ...snapshot } = structuredClone(input.store.read(input.reviewId, input.version));
+	const stored = structuredClone(input.store.read(input.reviewId, input.version));
+	const repositoryId = boardRepositoryId(stored);
+	const { target, staleSources: _staleSources, sourceUnavailable: _sourceUnavailable, lastEdit: _lastEdit, trashedAt: _trashedAt, personEdit: _personEdit, ...snapshot } = stored;
 	if (target?.kind === "worktree") throw new ReviewInputError("Pin this review to commits before sharing it.");
 	documentSchema.parse(snapshot.document);
 	checkReferences(snapshot.document);
@@ -146,14 +161,14 @@ async function exportShare(input) {
 	const json = (value) => add(Buffer.from(JSON.stringify(value)));
 	const resources = [];
 	const maps = {};
-	const sources = [...sourceReferences(snapshot.document), ...lensSelections(snapshot.lenses ?? []).flatMap((selection) => sourceAnchors(selection.source).map((source) => ({
+	const sources = [...sourceReferences(snapshot.document, { repositoryId }), ...lensSelections(snapshot.lenses ?? []).flatMap((selection) => sourceAnchors(selection.source).map((source) => ({
 		...selection,
 		source,
 		peek: false
 	})))];
 	const pins = snapshot.pins;
 	validateShareSources(snapshot);
-	if (Boolean(pins) !== Boolean(input.repository)) throw new ReviewInputError("Shared source pins require a repository.", 409);
+	if ((pins || referenceCommits(stored).length) && !input.repository) throw new ReviewInputError("Shared source pins require a repository.", 409);
 	for (const block of elements(snapshot.document)) {
 		if (block.type !== "markdown") continue;
 		for (const node of markdownNodes(parseMarkdown(block.markdown))) if (node.type === "image") throw new ReviewInputError("Convert Markdown images to managed image blocks before sharing.");
@@ -215,6 +230,14 @@ async function exportShare(input) {
 }
 //#endregion
 //#region src/sharing/repository.ts
+/** A full commit id, SHA-1 or SHA-256. */
+const COMMIT_ID = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/;
+/** Refuses anything but full commit ids, before any of them reaches git:
+* a shared board's commits come from someone else, and one spelled as an
+* option or a refspec would make git do something else. */
+function assertCommitIds(commits) {
+	if (!commits.every((commit) => COMMIT_ID.test(commit))) throw new ReviewInputError("The shared whiteboard names a commit that isn't a full commit id.");
+}
 /** Keep credential helpers but prevent the calling shell from redirecting Git's object store. */
 function sharedGit(cwd, args) {
 	const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_") || [
@@ -230,20 +253,30 @@ function sharedGit(cwd, args) {
 		"core.fsmonitor=false",
 		...args
 	], {
-		env: {
-			...env,
-			GIT_TERMINAL_PROMPT: "0"
-		},
+		env,
 		timeout: 3e5
 	});
 }
 function fetchError(stderr, publishing) {
 	if (/not our ref|couldn't find remote ref|unadvertised object/i.test(stderr)) return new ReviewInputError(publishing ? "Push the reviewed commits to GitHub before sharing." : "The shared commits are no longer available on GitHub. Ask the sender to restore them, then retry.", 409);
+	if (/could not read (?:username|password)|authentication failed|permission denied \(publickey|repository not found|returned error: 40[13]|\bSAML\b/i.test(stderr)) return new ReviewInputError("Git couldn't access this GitHub repository. Your Whiteboard sign-in doesn't grant repository access, so set up Git credentials for it, then retry.", 409);
 	return new ReviewInputError("Could not fetch the GitHub repository. Check your connection and Git credentials for this repository, then retry.", 409);
 }
-/** Recipients need complete history; publication only checks that the commits exist. */
-async function fetchPinnedRepository(root, url, pins, publishing = false) {
-	if (![pins.base, pins.head].every((commit) => /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(commit))) throw new ReviewInputError("Sharing requires immutable base and head commits.");
+/** Recipients need complete history; publication only checks that the commits exist.
+* `commits` are other commits the board's references read at; a plan has
+* only those. */
+async function fetchPinnedRepository(root, url, pins, publishing = false, commits = []) {
+	const named = [...pins ? [{
+		commit: pins.base,
+		ref: "base"
+	}, {
+		commit: pins.head,
+		ref: "head"
+	}] : [], ...commits.map((commit) => ({
+		commit,
+		ref: `commits/${commit}`
+	}))];
+	if (!named.every(({ commit }) => COMMIT_ID.test(commit))) throw new ReviewInputError("Sharing requires immutable base and head commits.");
 	await mkdir(root, {
 		recursive: true,
 		mode: 448
@@ -264,7 +297,7 @@ async function fetchPinnedRepository(root, url, pins, publishing = false) {
 			"remote",
 			"add",
 			"origin",
-			url
+			{ remote: url }
 		]);
 	}
 	const refs = publishing ? "refs/heads/review" : "refs/review";
@@ -274,26 +307,129 @@ async function fetchPinnedRepository(root, url, pins, publishing = false) {
 			"--no-tags",
 			"--force",
 			...publishing ? ["--depth=1", "--filter=tree:0"] : [],
-			publishing ? url : "origin",
-			`${pins.base}:${refs}/base`,
-			`${pins.head}:${refs}/head`
+			{ remote: publishing ? url : "origin" },
+			...named.map(({ commit, ref }) => ({ refspec: {
+				from: commit,
+				to: `${refs}/${ref}`
+			} }))
 		]);
 	} catch (error) {
 		throw fetchError(error instanceof Error && "stderr" in error ? String(error.stderr) : "", publishing);
 	}
-	if (!publishing) for (const commit of [pins.base, pins.head]) await sharedGit(root, [
+	if (!publishing) for (const { commit } of named) await sharedGit(root, [
 		"cat-file",
 		"-e",
-		`${commit}^{commit}`
+		{ rev: `${commit}^{commit}` }
+	]);
+}
+/** Fetches the commits a shared board's links read at into a checkout of
+* its repository, from its origin unless it has them, and keeps each under
+* `refs/review/shared/<share>/<commit>`, so `git gc` can't prune one the
+* board still quotes. */
+async function fetchSharedCommits(root, commits, share) {
+	assertCommitIds(commits);
+	const ref = (commit) => `refs/review/shared/${share}/${commit}`;
+	const missing = [];
+	for (const commit of commits) try {
+		await sharedGit(root, [
+			"cat-file",
+			"-e",
+			{ rev: `${commit}^{commit}` }
+		]);
+		await sharedGit(root, [
+			"update-ref",
+			{ ref: ref(commit) },
+			{ commit }
+		]);
+	} catch {
+		missing.push(commit);
+	}
+	if (!missing.length) return;
+	try {
+		await sharedGit(root, [
+			"fetch",
+			"--no-tags",
+			"origin",
+			...missing.map((commit) => ({ refspec: {
+				from: commit,
+				to: ref(commit),
+				force: true
+			} }))
+		]);
+	} catch (error) {
+		throw fetchError(error instanceof Error && "stderr" in error ? String(error.stderr) : "", false);
+	}
+}
+/** Drops the refs `fetchSharedCommits` kept for a share, once the share is
+* gone, so `git gc` can prune what only it quoted. */
+async function forgetSharedCommits(root, share) {
+	const { stdout } = await sharedGit(root, [
+		"for-each-ref",
+		"--format=%(refname)",
+		{ ref: `refs/review/shared/${share}/` }
+	]);
+	for (const ref of stdout.split("\n").filter(Boolean)) await sharedGit(root, [
+		"update-ref",
+		"-d",
+		{ ref }
+	]);
+}
+/** A managed clone of a repository's default branch, for a shared board
+* with no pins whose repository the receiver has no checkout of. */
+async function cloneSharedRepository(root, url) {
+	await mkdir(root, {
+		recursive: true,
+		mode: 448
+	});
+	await sharedGit(root, ["init", "--quiet"]);
+	await sharedGit(root, [
+		"config",
+		"core.hooksPath",
+		"/dev/null"
+	]);
+	await sharedGit(root, [
+		"config",
+		"core.fsmonitor",
+		"false"
+	]);
+	await sharedGit(root, [
+		"remote",
+		"add",
+		"origin",
+		{ remote: url }
+	]);
+	try {
+		await sharedGit(root, [
+			"fetch",
+			"--no-tags",
+			"origin",
+			"HEAD"
+		]);
+	} catch (error) {
+		throw fetchError(error instanceof Error && "stderr" in error ? String(error.stderr) : "", false);
+	}
+	await sharedGit(root, [
+		"checkout",
+		"--detach",
+		"FETCH_HEAD"
 	]);
 }
-async function repositoryReady(root, pins) {
+async function repositoryReady(root, pins, commits = []) {
+	if (![
+		pins.base,
+		pins.head,
+		...commits
+	].every((commit) => COMMIT_ID.test(commit))) return false;
 	try {
 		if ((await sharedGit(root, ["rev-parse", "HEAD"])).stdout.trim() !== pins.head) return false;
-		for (const commit of [pins.base, pins.head]) await sharedGit(root, [
+		for (const commit of [
+			pins.base,
+			pins.head,
+			...commits
+		]) await sharedGit(root, [
 			"cat-file",
 			"-e",
-			`${commit}^{commit}`
+			{ rev: `${commit}^{commit}` }
 		]);
 		return true;
 	} catch {
@@ -313,28 +449,33 @@ async function readShareRepository(root) {
 	}
 	return { cloneUrl };
 }
-async function verifyShareRepository(root, pins, repository) {
-	const { cloneUrl } = repository ?? await readShareRepository(root);
+/** Fetches through origin itself, so its transport and credentials apply. */
+async function verifyShareRepository(root, pins, commits = []) {
+	const origin = (await sharedGit(root, [
+		"remote",
+		"get-url",
+		"origin"
+	])).stdout.trim();
 	const temporary = await mkdtemp(path.join(tmpdir(), "review-share-check-"));
 	try {
-		await fetchPinnedRepository(temporary, cloneUrl, pins, true);
+		await fetchPinnedRepository(temporary, origin, pins, true, commits);
 	} finally {
 		await rm(temporary, {
 			recursive: true,
 			force: true
 		});
 	}
-	return { cloneUrl };
 }
 //#endregion
 //#region src/sharing/import.ts
 const sharedSnapshotSchema = z.strictObject({
 	reviewId: z.string().min(1),
 	version: z.number().int().nonnegative(),
-	title: z.string().min(1),
+	/** Empty for a board never named; it reads "Untitled". */
+	title: z.string(),
 	pins: pinsSchema.extend({
-		base: z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/),
-		head: z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/)
+		base: z.string().regex(COMMIT_ID),
+		head: z.string().regex(COMMIT_ID)
 	}).optional(),
 	document: documentSchema,
 	lenses: z.array(lensSchema).optional(),
@@ -354,7 +495,7 @@ const counts = z.strictObject({
 	deletions: count
 });
 const mapSchema = z.strictObject({
-	commit: z.string(),
+	commit: z.string().regex(COMMIT_ID),
 	side: z.enum(["base", "head"]),
 	elements: z.array(normalizedSoftwareElementSchema),
 	relationships: z.array(normalizedSoftwareRelationshipSchema),
@@ -387,7 +528,8 @@ function validateShareBundle(bundle) {
 	if (snapshot.reviewId !== manifest.reviewId || snapshot.version !== manifest.version || snapshot.title !== manifest.title) throw new Error("Shared snapshot does not match its manifest.");
 	checkReferences(snapshot.document);
 	validateShareSources(snapshot);
-	if (Boolean(snapshot.pins) !== Boolean(manifest.repository)) throw new Error("Shared source pins require a repository.");
+	assertCommitIds(referenceCommits(snapshot));
+	if (snapshot.pins && !manifest.repository) throw new Error("Shared source pins require a repository.");
 	const presentation = sharePresentationSchema.parse(json(manifest.presentation));
 	if (!snapshot.pins && Object.keys(presentation.maps).length) throw new Error("Shared maps require source pins.");
 	const traces = /* @__PURE__ */ new Map();
@@ -435,6 +577,7 @@ function sharedReviewId(origin, shareId) {
 var SharedReviewStore = class {
 	root;
 	fetchRepository;
+	cloneRepository;
 	loaded = /* @__PURE__ */ new Map();
 	validated = /* @__PURE__ */ new Map();
 	attention = /* @__PURE__ */ new Map();
@@ -456,9 +599,10 @@ var SharedReviewStore = class {
 	repositories = /* @__PURE__ */ new Map();
 	jobs = /* @__PURE__ */ new Map();
 	states = /* @__PURE__ */ new Map();
-	constructor(root, fetchRepository = fetchPinnedRepository) {
+	constructor(root, fetchRepository = fetchPinnedRepository, cloneRepository = cloneSharedRepository) {
 		this.root = root;
 		this.fetchRepository = fetchRepository;
+		this.cloneRepository = cloneRepository;
 		this.purgeTimer = setInterval(() => {
 			this.purgeExpired().catch((error) => console.error("Could not purge expired shared whiteboards:", error));
 		}, 6e4);
@@ -518,14 +662,15 @@ var SharedReviewStore = class {
 		const saved = this.validated.get(id);
 		if (!saved) throw new ReviewInputError("Shared review is not available.", 404);
 		if (!saved.snapshot.pins) {
-			this.setStatus(id, "ready");
+			await this.prepareUnpinned(id, saved.manifest.repository?.cloneUrl);
 			return;
 		}
 		if (!local) throw new ReviewInputError("Repository service is unavailable.", 409);
 		const root = this.repositoryRoot(id);
+		const commits = referenceCommits(saved.snapshot);
 		try {
 			this.setStatus(id, "fetching");
-			if (!await repositoryReady(root, saved.snapshot.pins)) {
+			if (!await repositoryReady(root, saved.snapshot.pins, commits)) {
 				const prior = this.repositories.get(id);
 				await local.data.workspaces.remove(id);
 				if (prior) await local.data.forgetRepository(prior);
@@ -533,11 +678,11 @@ var SharedReviewStore = class {
 					recursive: true,
 					force: true
 				});
-				await this.fetchRepository(root, saved.manifest.repository.cloneUrl, saved.snapshot.pins);
+				await this.fetchRepository(root, saved.manifest.repository.cloneUrl, saved.snapshot.pins, false, commits);
 				await sharedGit(root, [
 					"checkout",
 					"--detach",
-					saved.snapshot.pins.head
+					{ commit: saved.snapshot.pins.head }
 				]);
 			}
 			const repository = await local.data.register(root);
@@ -552,12 +697,7 @@ var SharedReviewStore = class {
 			};
 			this.setStatus(id, "validating");
 			await local.data.validatePins(pins);
-			const references = sourceReferences(saved.snapshot.document).map((item) => item.source);
-			for (const map of Object.values(saved.presentation.maps)) for (const element of map.elements) for (const range of element.sourceRanges ?? []) references.push({
-				...range,
-				side: map.side
-			});
-			await local.data.validateSources(pins, references);
+			await this.validateReferences(saved, repository.id, pins);
 			await local.data.workspaces.open(id, pins);
 			if (local.data.workspaces.list(id).some((workspace) => !workspace.rootPath)) throw new ReviewInputError("Could not prepare the pinned checkout. Retry opening the share.", 409);
 			await writeFile(path.join(this.root, id, "repository.json"), JSON.stringify({
@@ -571,9 +711,71 @@ var SharedReviewStore = class {
 			throw new ReviewInputError(message, 409);
 		}
 	}
+	/** Reads each of a shared board's references at its own commits, in the
+	* checkout of its repository. */
+	async validateReferences(saved, repositoryId, pins) {
+		const references = /* @__PURE__ */ new Map();
+		const add = (at, range) => {
+			const key = JSON.stringify([at.base, at.head]);
+			const group = references.get(key) ?? {
+				pins: at,
+				ranges: []
+			};
+			group.ranges.push(range);
+			references.set(key, group);
+		};
+		for (const { source } of sourceReferences(saved.snapshot.document, { repositoryId })) add({
+			...anchorPins(source, pins),
+			repositoryId
+		}, source);
+		if (pins) for (const map of Object.values(saved.presentation.maps)) for (const element of map.elements) for (const range of element.sourceRanges ?? []) add(pins, {
+			...range,
+			side: map.side
+		});
+		for (const group of references.values()) await this.local.data.validateSources(group.pins, group.ranges);
+	}
+	/** Files an unpinned board under a local checkout of its repository,
+	* else a managed clone. */
+	async prepareUnpinned(id, cloneUrl) {
+		const local = this.local;
+		const saved = this.validated.get(id);
+		if (!cloneUrl || !local) {
+			this.setStatus(id, "ready");
+			return;
+		}
+		const root = this.repositoryRoot(id);
+		try {
+			this.setStatus(id, "fetching");
+			const managed = path.join(await realpath(this.root), ".repositories");
+			let repositoryId = local.store.checkoutsOf(cloneUrl).find((checkout) => !local.store.repositoryPath(checkout).startsWith(managed));
+			if (!repositoryId) {
+				if (!existsSync(path.join(root, ".git"))) {
+					await rm(root, {
+						recursive: true,
+						force: true
+					});
+					await this.cloneRepository(root, cloneUrl);
+				}
+				repositoryId = (await local.data.register(root)).id;
+			}
+			await fetchSharedCommits(local.store.repositoryPath(repositoryId), referenceCommits(saved.snapshot, repositoryId), id);
+			this.setStatus(id, "validating");
+			await this.validateReferences(saved, repositoryId);
+			this.repositories.set(id, repositoryId);
+			await writeFile(path.join(this.root, id, "repository.json"), JSON.stringify({
+				repositoryId,
+				ready: true
+			}), { mode: 384 });
+			this.setStatus(id, "ready");
+		} catch (error) {
+			const message = error instanceof ReviewInputError ? error.message : "Could not prepare the shared repository. Check Git credentials and retry.";
+			this.setStatus(id, "error", message);
+			throw new ReviewInputError(message, 409);
+		}
+	}
 	async assertReady(id) {
 		const saved = this.validated.get(id);
-		if (!saved || saved.snapshot.pins && !await repositoryReady(this.repositoryRoot(id), saved.snapshot.pins)) {
+		if (!saved || saved.snapshot.pins && !await repositoryReady(this.repositoryRoot(id), saved.snapshot.pins, referenceCommits(saved.snapshot))) {
 			this.setStatus(id, "error", "The managed checkout is missing. Reopen the share link to fetch it again.");
 			throw new ReviewInputError(this.status(id).error, 409);
 		}
@@ -612,13 +814,15 @@ var SharedReviewStore = class {
 					repositoryId: z.string(),
 					ready: z.boolean()
 				}).parse(JSON.parse(await readFile(path.join(this.root, id, "repository.json"), "utf8")));
-				if (this.local?.store.repositoryPath(metadata.repositoryId) === path.join(await realpath(this.root), ".repositories", id)) {
+				if (this.local?.store.repositoryPath(metadata.repositoryId) === path.join(await realpath(this.root), ".repositories", id) || !validated.snapshot.pins && this.local?.store.repositories().some((repository) => repository.id === metadata.repositoryId)) {
 					this.repositories.set(id, metadata.repositoryId);
 					prepared = metadata.ready;
 				}
 			} catch {}
-			if (!validated.snapshot.pins) this.setStatus(id, "ready");
-			else if (prepared && this.local && await repositoryReady(this.repositoryRoot(id), validated.snapshot.pins)) {
+			if (!validated.snapshot.pins) {
+				if (this.repositories.has(id) || !validated.manifest.repository) this.setStatus(id, "ready");
+				else this.prepare(id).catch(() => {});
+			} else if (prepared && this.local && await repositoryReady(this.repositoryRoot(id), validated.snapshot.pins, referenceCommits(validated.snapshot))) {
 				const repository = await this.local.data.register(this.repositoryRoot(id));
 				this.repositories.set(id, repository.id);
 				this.setStatus(id, "ready");
@@ -669,6 +873,9 @@ var SharedReviewStore = class {
 					kind: "commits",
 					...validated.snapshot.pins,
 					repositoryId
+				} : repositoryId ? {
+					kind: "project",
+					repositoryId
 				} : void 0,
 				shared: {
 					...bundle.attribution,
@@ -680,10 +887,12 @@ var SharedReviewStore = class {
 	list() {
 		const reviews = this.loaded.keys().filter((id) => this.status(id).stage === "ready" && (!this.validated.get(id)?.snapshot.pins || existsSync(path.join(this.repositoryRoot(id), ".git")))).map((id) => {
 			const { document: _document, ...snapshot } = this.get(id).snapshot;
+			const project = snapshot.target ? this.local?.store.checkoutProject(snapshot.target.repositoryId) : void 0;
 			return {
 				...snapshot,
 				firstCreatedAt: snapshot.version === 0 ? snapshot.createdAt : void 0,
 				repositoryName: "Shared review",
+				...project && { project },
 				viewedAt: this.attention.get(id)?.viewedAt ?? null,
 				trashedAt: this.attention.get(id)?.trashedAt ?? null
 			};
@@ -705,8 +914,10 @@ var SharedReviewStore = class {
 		await this.local?.data.workspaces.remove(id);
 		const repositoryId = this.repositories.get(id);
 		if (repositoryId) {
+			const checkout = this.local?.store.repositoryPath(repositoryId);
+			if (checkout) await forgetSharedCommits(checkout, id).catch((error) => console.error(`Could not drop the refs kept for share ${id}:`, error));
 			await this.local?.data.forgetRepository(repositoryId);
-			this.local?.store.unregisterRepository(repositoryId);
+			await this.local?.store.unregisterRepository(repositoryId);
 		}
 		await rm(this.repositoryRoot(id), {
 			recursive: true,
@@ -999,4 +1210,4 @@ var ShareClient = class {
 	}
 };
 //#endregion
-export { sharedReviewId as a, verifyShareRepository as c, StreamLimitError as d, readBoundedStream as f, SharedReviewStore as i, exportShare as l, shareIdSchema as m, ShareClient as n, validateShareBundle as o, parseShareLink as p, SharePreflightError as r, readShareRepository as s, ShareAuthError as t, validateShareSources as u };
+export { sharedReviewId as a, verifyShareRepository as c, validateShareSources as d, StreamLimitError as f, shareIdSchema as h, SharedReviewStore as i, exportShare as l, parseShareLink as m, ShareClient as n, validateShareBundle as o, readBoundedStream as p, SharePreflightError as r, readShareRepository as s, ShareAuthError as t, referenceCommits as u };

package/dist/{fuzzy-match-BO9bK37N.js → fuzzy-match-D_x3wumC.js}

@@ -1,6 +1,7 @@
-import "./review-home-paths-j2BRAaNv.js";
-import { N as devReviewHome } from "./s3-config-BTO12tCC.js";
-import { n as askAgentIds } from "./thread-state-5pYr6_zM.js";
+import "./review-home-paths-BwH08ihj.js";
+import { N as devReviewHome } from "./s3-config-CjcLyFV5.js";
+import { n as askAgentIds } from "./thread-state-BPpvKFwQ.js";
+import { t as ASK_THREAD_ENV } from "./request-origin-icXPv6jh.js";
 import { createRequire } from "node:module";
 import { constants } from "node:fs";
 import { access, chmod, mkdir, readFile, rename, stat, writeFile } from "node:fs/promises";
@@ -277,7 +278,7 @@ async function detectAskAgents(env = process.env) {
 }
 /** Runs an adapter with this server's runtime, Desktop's being Electron, or
 * the user's CLI itself. */
-const launchAskAgent = async (agent, cwd, { permissions = "read-only", mcpServers = [], env: base = process.env } = {}) => {
+const launchAskAgent = async (agent, cwd, { permissions = "read-only", mcpServers = [], env: base = process.env, threadId } = {}) => {
 	const spec = askAgents[agent];
 	const executable = await findAgent(spec, base);
 	if (!executable) throw new Error(`${spec.name} is not installed.`);
@@ -285,6 +286,7 @@ const launchAskAgent = async (agent, cwd, { permissions = "read-only", mcpServer
 		...base,
 		...askAgentSettings(agent, permissions).env
 	};
+	if (threadId) env[ASK_THREAD_ENV] = threadId;
 	delete env.CLAUDECODE;
 	delete env.CLAUDE_CODE_ENTRYPOINT;
 	const { launch } = spec;

package/dist/{headless-host-CVBOQyRS.js → headless-host-BEe-aFtB.js}

@@ -1,2 +1,2 @@
-import { i as withHeadlessServerLock, n as runHeadlessServer, r as takeOverServerHome, t as HeadlessServerBusyError } from "./headless-host-Cog6SpS9.js";
+import { i as withHeadlessServerLock, n as runHeadlessServer, r as takeOverServerHome, t as HeadlessServerBusyError } from "./headless-host-CEb5d-A0.js";
 export { HeadlessServerBusyError, runHeadlessServer, takeOverServerHome, withHeadlessServerLock };