@dev.fast/whiteboard 0.3.4 → 0.3.5-preview.20261021.131

package/dist/{headless-host-Cog6SpS9.js → headless-host-CEb5d-A0.js}

@@ -1,21 +1,22 @@
-import { d as git, r as defaultBranch } from "./src-BMPuxWv4.js";
+import { b as resolveRepoContext, d as git, r as defaultBranch, w as runVcs } from "./src-DtfSndqS.js";
 import { c as jsonString, m as isStringValue, n as isJsonObject, p as isObjectValue, u as parseJsonText } from "./src-X9phtB2j.js";
-import { a as sharedReviewId, c as verifyShareRepository, d as StreamLimitError, f as readBoundedStream, l as exportShare, m as shareIdSchema, n as ShareClient, p as parseShareLink, r as SharePreflightError, s as readShareRepository, t as ShareAuthError, u as validateShareSources } from "./client-BN_FDxFr.js";
-import { a as inspectSnapshot, d as invalidateStructuralComparisons, f as diffrExecutable, i as commandSchema, p as diffrMissingError, r as SCRATCHPAD_ID } from "./local-data-D_9tvdsp.js";
-import { D as ReviewFeedbackSchema, E as ReviewFeedbackContactSchema, M as reviewDiffrSummarizerInputSchema, N as decodeStructuralDiffEvent, a as parseReviewVerbRequest, g as REVIEW_HOST_HEADER, i as parseReviewDesktopVerbResult, k as ReviewOnboardingRunRequestSchema } from "./src-DsM3jO8G.js";
-import { B as TraceStorageDeniedError, D as listReviewTraceSessions, I as isTraceStorageConfigured, O as loadReviewAgentTrace, R as resolveTraceStorage, T as traceMachineEnabled, at as openUrlInBrowser, et as shellQuote, it as clearStoreAuth, ot as readStoreAuth, rt as DEFAULT_STORE_ORIGIN, st as runStoreLogin, z as selectTraceStorage } from "./review-home-paths-j2BRAaNv.js";
-import { E as selectionReferences, G as comparisonKey, I as lensSelections, J as selectionKey, K as formatAnchor, M as UNCATEGORIZED_LENS_ID, Q as emptyCoverage, W as anchorSelection, Z as coverageSources, et as scopedCoverage, h as elements, j as stepSources, nt as unionIntervals, q as resolveDiffSelection, tt as subtractIntervals, u as anchorPins, z as fileLineRangeSchema } from "./stored-document-migration-CChxtFAy.js";
+import { a as sharedReviewId, c as verifyShareRepository, d as validateShareSources, f as StreamLimitError, h as shareIdSchema, l as exportShare, m as parseShareLink, n as ShareClient, p as readBoundedStream, r as SharePreflightError, s as readShareRepository, t as ShareAuthError, u as referenceCommits } from "./client-UH1bEG7Z.js";
+import { f as textualRows, h as diffrMissingError, i as inspectSnapshot, m as diffrExecutable, p as invalidateStructuralComparisons, r as commandSchema } from "./local-data-mbCb1HDH.js";
+import { N as reviewDiffrSummarizerInputSchema, O as ReviewFeedbackContactSchema, P as decodeStructuralDiffEvent, a as parseReviewVerbRequest, c as boardIconKind, i as parseReviewDesktopVerbResult, j as ReviewOnboardingRunRequestSchema, k as ReviewFeedbackSchema, l as boardTitle, m as REVIEW_CLIENT_REMOTE, p as REVIEW_CLIENT_HEADER, y as REVIEW_HOST_HEADER } from "./src-DYZLCUP_.js";
+import { B as TraceStorageDeniedError, D as listReviewTraceSessions, I as isTraceStorageConfigured, O as loadReviewAgentTrace, R as resolveTraceStorage, T as traceMachineEnabled, at as readStoreAuth, et as shellQuote, it as clearStoreAuth, ot as runStoreLogin, rt as DEFAULT_STORE_ORIGIN, z as selectTraceStorage } from "./review-home-paths-BwH08ihj.js";
+import { _ as scopedCoverage, h as emptyCoverage, i as anchorSelection, l as resolveDiffSelection, m as coverageSources, n as SelectionUnavailableError, o as comparisonKey, s as formatAnchor, u as selectionKey, v as subtractIntervals, y as unionIntervals } from "./lens-selection-BxPk53c8.js";
+import { B as stepSources, F as selectionReferences, G as lensSelections, J as fileLineRangeSchema, V as UNCATEGORIZED_LENS_ID, _ as boardRepositoryId, f as anchorPins, g as boardLinks, x as elements } from "./stored-document-migration-B29lve9-.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { A as processStartIdentity, L as writePrivateJsonAtomic, N as devReviewHome, h as TraceConfigurationError, i as isS3MockMode, j as withFileLock } from "./s3-config-BTO12tCC.js";
+import { A as processStartIdentity, L as writePrivateJsonAtomic, N as devReviewHome, h as TraceConfigurationError, i as isS3MockMode, j as withFileLock } from "./s3-config-CjcLyFV5.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
-import { i as readReviewPackageVersion, n as readBuildCommit, t as findReviewPackageRoot } from "./package-paths-C--__jEv.js";
-import { _ as reviewInstanceIdentity, n as desktopOwnsHome, o as reviewServerDiscoveryPath, p as desktopUsesHome, r as headlessServerLockPath, t as DESKTOP_TAKEOVER_SIGNAL } from "./server-discovery-Bey8IqXH.js";
-import { c as askPicksSchema, d as selectionMarkdown, l as askQuestionSchema, n as askAgentIds, r as askChoiceKinds, s as askPermissionsSchema, t as applyAskChange, u as AgentSelectionSchema } from "./thread-state-5pYr6_zM.js";
-import { t as openReviewProfile } from "./profile-DokFw782.js";
-import { a as REVIEW_APP_SESSION_ID_HEADER, c as sanitizeUiTelemetryEvent, i as BUNDLE_FRAME_PATTERN, l as cleanTelemetryText, r as reviewRequestOrigin, s as isReportableCleanedMessage } from "./request-origin-Zcn_CjX4.js";
-import { a as defaultAskPermissions, i as askAgents, l as launchAskAgent, n as askAgentSettings, o as detectAskAgents, r as askAgentTakesMcp, t as fuzzyRank } from "./fuzzy-match-BO9bK37N.js";
-import { a as scratchpadAvailable, c as readQuerySchemas, i as renderInstructions, o as inspectQuerySchema, r as instructionsQuerySchema, s as queryAnchor, t as authoringTools } from "./authoring-tools-BNwuMnz6.js";
-import { a as headlessServerOwner, c as stopBackgroundServer, o as recordedBackgroundServer } from "./background-server-CkvxA-6O.js";
+import { i as readReviewPackageVersion, n as readBuildCommit, t as findReviewPackageRoot } from "./package-paths-BkeQsdaw.js";
+import { _ as reviewInstanceIdentity, n as desktopOwnsHome, o as reviewServerDiscoveryPath, p as desktopUsesHome, r as headlessServerLockPath, t as DESKTOP_TAKEOVER_SIGNAL } from "./server-discovery-DeVTdcqK.js";
+import { c as askPicksSchema, d as selectionMarkdown, l as askQuestionSchema, n as askAgentIds, r as askChoiceKinds, s as askPermissionsSchema, t as applyAskChange, u as AgentSelectionSchema } from "./thread-state-BPpvKFwQ.js";
+import { t as openReviewProfile } from "./profile-duqp5uPa.js";
+import { c as REVIEW_APP_SESSION_ID_HEADER, d as sanitizeUiTelemetryEvent, f as cleanTelemetryText, o as reviewRequestOrigin, r as REVIEW_PERSON_HEADER, s as BUNDLE_FRAME_PATTERN, t as ASK_THREAD_ENV, u as isReportableCleanedMessage } from "./request-origin-icXPv6jh.js";
+import { a as defaultAskPermissions, i as askAgents, l as launchAskAgent, n as askAgentSettings, o as detectAskAgents, r as askAgentTakesMcp, t as fuzzyRank } from "./fuzzy-match-D_x3wumC.js";
+import { a as inspectQuerySchema, i as renderInstructions, o as queryAnchor, r as instructionsQuerySchema, s as readQuerySchemas, t as authoringTools } from "./authoring-tools-BCquUsB3.js";
+import { a as headlessServerOwner, c as stopBackgroundServer, o as recordedBackgroundServer } from "./background-server-Xom8cA_u.js";
 import crypto$1, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
@@ -196,6 +197,12 @@ const STEER_METHOD = "_session/steering";
 /** How an agent says, in its `initialize` response, that it takes steering. */
 const steeringSchema = z.object({ steering: z.object({ supported: z.literal(true) }) });
 const steerOutcomeSchema = z.object({ outcome: z.string() });
+/** A review Codex couldn't run; one it ran has a risk level. */
+const failedReviewSchema = z.object({ review: z.object({
+	status: z.literal("denied"),
+	riskLevel: z.null(),
+	rationale: z.string()
+}) });
 /** MCP servers the reviewer's own agent may bring whose tools only read,
 * so their calls run without asking, like the agent reading files. */
 const READ_ONLY_MCP_SERVERS = /* @__PURE__ */ new Set(["fff"]);
@@ -213,6 +220,7 @@ var AskThread = class {
 	/** The number of changes so far; a snapshot carries the one it includes. */
 	seq = 0;
 	listeners = /* @__PURE__ */ new Set();
+	statusListeners = /* @__PURE__ */ new Set();
 	closers = /* @__PURE__ */ new Set();
 	decisions = /* @__PURE__ */ new Map();
 	process;
@@ -248,6 +256,8 @@ var AskThread = class {
 	needsContext;
 	/** The reviewer changed what the agent may do since it was last told. */
 	permitted = false;
+	/** Why the agent's automatic approval review failed this turn. */
+	reviewFailure;
 	/** The agent could not reopen the session, for a reason signing in would
 	* not fix, so trying again starts a new one. */
 	unloadable = false;
@@ -261,9 +271,6 @@ var AskThread = class {
 	steerable = false;
 	/** Follow-ups waiting for the turn under way to end, oldest first. */
 	queue = [];
-	/** The review the thread answers in, and where it saves; adopting moves
-	* both. */
-	home;
 	constructor(launch, start, mcpServers = () => [], limits = askThreadLimits) {
 		this.launch = launch;
 		this.start = start;
@@ -271,15 +278,6 @@ var AskThread = class {
 		this.id = start.id ?? randomUUID();
 		this.mcpServers = mcpServers(this.id);
 		this.picks = { ...start.picks };
-		this.home = {
-			reviewId: start.reviewId,
-			onSession: start.onSession,
-			onTurn: start.onTurn,
-			onSave: start.onSave,
-			onPermissions: start.onPermissions,
-			onOffer: start.onOffer,
-			onTitle: start.onTitle
-		};
 		this.state = {
 			id: this.id,
 			agent: start.agent,
@@ -297,17 +295,7 @@ var AskThread = class {
 		this.needsContext = !("resume" in start);
 	}
 	get reviewId() {
-		return this.home.reviewId;
-	}
-	/** Moves the thread to another review, as when its agent creates the
-	* review it was asked for, and saves it there as it stands. */
-	adopt(reviewId, hooks) {
-		this.home = {
-			reviewId,
-			...hooks
-		};
-		if (this.sessionId) hooks.onSession?.(this.sessionId);
-		hooks.onSave?.(this.state.entries);
+		return this.start.reviewId;
 	}
 	read() {
 		return this.state;
@@ -318,11 +306,19 @@ var AskThread = class {
 			snapshot: this.state
 		};
 	}
+	get status() {
+		return this.state.status;
+	}
 	/** Every change after the current `seq`, in order. */
 	subscribe(listener) {
 		this.listeners.add(listener);
 		return () => this.listeners.delete(listener);
 	}
+	/** Calls back when the status changes, without following the thread. */
+	onStatusChange(listener) {
+		this.statusListeners.add(listener);
+		return () => this.statusListeners.delete(listener);
+	}
 	/** Whether anything follows the thread, as an open panel does. */
 	watched() {
 		return this.listeners.size > 0;
@@ -487,7 +483,7 @@ var AskThread = class {
 		if (this.closed) return;
 		this.closed = true;
 		try {
-			if (save && this.sessionId && this.state.status !== "starting" && this.state.status !== "failed") this.home.onSave?.(settled(this.state.entries));
+			if (save && this.sessionId && this.state.status !== "starting" && this.state.status !== "failed") this.start.onSave?.(settled(this.state.entries));
 		} finally {
 			for (const resolve of this.decisions.values()) resolve({ outcome: { outcome: "cancelled" } });
 			if (this.connection && this.sessionId) this.connection.agent.notify(methods.agent.session.cancel, { sessionId: this.sessionId }).catch(() => {});
@@ -579,7 +575,8 @@ var AskThread = class {
 		const generation = ++this.generation;
 		const launched = await this.launch(this.start.agent, this.start.cwd, {
 			permissions: this.state.permissions,
-			mcpServers: this.mcpServers
+			mcpServers: this.mcpServers,
+			threadId: this.id
 		});
 		if (this.closed || this.halted || generation !== this.generation) {
 			launched.stop();
@@ -704,7 +701,7 @@ var AskThread = class {
 		const offer = { choices };
 		if (commands) offer.commands = commands;
 		if (accepts) offer.accepts = accepts;
-		this.home.onOffer?.(offer);
+		this.start.onOffer?.(offer);
 	}
 	/** Changes what the agent may do from the next answer: it starts again
 	* in that mode and reopens the conversation. */
@@ -717,7 +714,7 @@ var AskThread = class {
 			permissions
 		});
 		this.permitted = true;
-		this.home.onPermissions?.(permissions);
+		this.start.onPermissions?.(permissions);
 		this.disconnect();
 		this.settings.clear();
 		this.emit({
@@ -759,7 +756,7 @@ var AskThread = class {
 			});
 			if (this.closed) throw new Error("This conversation has ended.");
 			this.sessionId = response.sessionId;
-			this.home.onSession?.(response.sessionId);
+			this.start.onSession?.(response.sessionId);
 			this.greeting = piGreetingSchema.safeParse(response._meta).data?.piAcp.startupInfo;
 			return {
 				sessionId: response.sessionId,
@@ -838,13 +835,23 @@ var AskThread = class {
 			severity: "info",
 			title: `${this.state.agentName} finished without replying.`
 		});
+		const reviewFailed = this.reviewFailure !== void 0 && this.state.permissions === "auto";
+		if (reviewFailed) this.push({
+			kind: "notice",
+			id: randomUUID(),
+			severity: "warning",
+			title: `${this.state.agentName}'s automatic approval review failed, so this conversation is now read-only. Ask again to continue.`,
+			description: this.reviewFailure
+		});
+		this.reviewFailure = void 0;
 		this.emit({
 			type: "set",
 			status: "idle",
 			error: stopReason === "refusal" ? `${this.state.agentName} declined to answer.` : stopReason === "max_tokens" || stopReason === "max_turn_requests" ? `${this.state.agentName} stopped before finishing.` : null
 		});
-		this.home.onTurn?.();
-		this.home.onSave?.(this.state.entries);
+		this.start.onTurn?.();
+		this.start.onSave?.(this.state.entries);
+		if (reviewFailed) await this.permit("read-only");
 		this.askQueued();
 	}
 	async requestPermission(request, signal) {
@@ -957,6 +964,7 @@ var AskThread = class {
 			}
 			case "tool_call":
 				this.noteMcpServer(update);
+				this.noteReview(update);
 				this.push({
 					kind: "tool",
 					id: update.toolCallId,
@@ -969,6 +977,7 @@ var AskThread = class {
 				return;
 			case "tool_call_update":
 				this.noteMcpServer(update);
+				this.noteReview(update);
 				if (!this.state.entries.some((entry) => entry.kind === "tool" && entry.id === update.toolCallId)) {
 					this.push({
 						kind: "tool",
@@ -1034,7 +1043,7 @@ var AskThread = class {
 						type: "set",
 						title
 					});
-					this.home.onTitle?.(title);
+					this.start.onTitle?.(title);
 				}
 				return true;
 			}
@@ -1045,6 +1054,10 @@ var AskThread = class {
 		const server = mcpServerOf(update);
 		if (server) this.mcpCalls.set(update.toolCallId, server);
 	}
+	noteReview(update) {
+		const failed = failedReviewSchema.safeParse(update.rawOutput ?? update.rawInput).data;
+		if (failed && !this.replaying) this.reviewFailure = failed.review.rationale;
+	}
 	/**
 	* In its read-only mode Claude answers by writing a plan and asking to
 	* leave the mode with it. That request is refused, so the plan is shown
@@ -1177,6 +1190,7 @@ var AskThread = class {
 			change
 		};
 		for (const listener of this.listeners) listener(update);
+		if (change.type === "set" && change.status) for (const listener of this.statusListeners) listener();
 	}
 };
 //#endregion
@@ -1261,13 +1275,16 @@ function cliAskTools(cliPath, selector) {
 		}] : []
 	];
 	return {
-		mcpServers: () => {
+		mcpServers: (threadId) => {
 			const cli = cliPath();
 			return cli ? [{
 				name: "whiteboard",
 				command: process.execPath,
 				args: [cli, "mcp"],
-				env: env()
+				env: [...env(), {
+					name: ASK_THREAD_ENV,
+					value: threadId
+				}]
 			}] : [];
 		},
 		cli: () => {
@@ -1295,6 +1312,7 @@ var AskThreads = class {
 	* model. */
 	offers = /* @__PURE__ */ new Map();
 	mcpServers;
+	statusListeners = /* @__PURE__ */ new Set();
 	constructor(launch, tools = {}, limits = askThreadLimits, unwatchedIdleMs = UNWATCHED_IDLE_MS) {
 		this.launch = launch;
 		this.tools = tools;
@@ -1315,6 +1333,8 @@ var AskThreads = class {
 	open(start) {
 		const thread = new AskThread(this.launch, start, this.mcpServers, this.limits);
 		this.threads.set(thread.id, thread);
+		thread.onStatusChange(() => this.statusChanged());
+		this.statusChanged();
 		thread.open();
 		this.sweeper ??= setInterval(() => this.sweep(), SWEEP_MS);
 		this.sweeper.unref?.();
@@ -1345,6 +1365,16 @@ var AskThreads = class {
 			if (now - since >= this.unwatchedIdleMs) this.close(id);
 		}
 	}
+	/** Calls back when a thread opens, closes or changes its status. */
+	subscribeStatus(listener) {
+		this.statusListeners.add(listener);
+		return () => {
+			this.statusListeners.delete(listener);
+		};
+	}
+	statusChanged() {
+		for (const listener of this.statusListeners) listener();
+	}
 	get(id) {
 		return this.threads.get(id);
 	}
@@ -1361,9 +1391,9 @@ var AskThreads = class {
 	}
 	close(id, save = true) {
 		const thread = this.threads.get(id);
-		this.threads.delete(id);
 		this.unwatchedSince.delete(id);
 		thread?.close(save);
+		if (this.threads.delete(id)) this.statusChanged();
 	}
 	closeDeletedReviews(isDeleted) {
 		for (const [id, thread] of this.threads) if (isDeleted(thread.reviewId)) this.close(id, false);
@@ -1376,7 +1406,7 @@ var AskThreads = class {
 };
 //#endregion
 //#region src/server/diffr-config.ts
-const execFileAsync$2 = promisify(execFile);
+const execFileAsync = promisify(execFile);
 let writes = Promise.resolve();
 let testing = false;
 function serialized(operation) {
@@ -1417,7 +1447,7 @@ function diffrArgv(args) {
 async function diffr(args, rootPath, options = {}) {
 	const executable = diffrExecutable();
 	try {
-		const operation = execFileAsync$2(executable, diffrArgv(args), {
+		const operation = execFileAsync(executable, diffrArgv(args), {
 			cwd: rootPath,
 			maxBuffer: 16777216,
 			signal: options.signal ?? AbortSignal.timeout(3e4),
@@ -1847,7 +1877,7 @@ function applyCorsHeaders(request, response) {
 		const varyFields = vary?.split(",").map((field) => field.trim().toLowerCase());
 		if (!varyFields?.includes("*") && !varyFields?.includes("origin")) response.headers.set("vary", vary ? `${vary}, Origin` : "Origin");
 	}
-	response.headers.set("access-control-allow-headers", `content-type, x-review-token, ${REVIEW_APP_SESSION_ID_HEADER}`);
+	response.headers.set("access-control-allow-headers", `content-type, x-review-token, ${REVIEW_PERSON_HEADER}, ${REVIEW_APP_SESSION_ID_HEADER}`);
 	response.headers.set("access-control-allow-methods", "GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS");
 	response.headers.set("access-control-allow-private-network", "true");
 	response.headers.set("access-control-expose-headers", REVIEW_HOST_HEADER);
@@ -2276,11 +2306,15 @@ async function reviewProgress(store, data, snapshot, signal = new AbortControlle
 			return [];
 		}
 		if (!file) {
-			const [base, head] = await Promise.all([data.file(sourcePins, "base", source.file), data.file(sourcePins, "head", source.file)]);
-			if (base.text !== head.text) throw new Error("Changed context file has no alignment.");
-			rows = Array.from({ length: base.text.split("\n").length }, (_, line) => [line, line]);
+			const [base, head] = await Promise.all(["base", "head"].map((side) => data.file(sourcePins, side, source.file).then((value) => value.text, (error) => {
+				if (error instanceof ReviewInputError && error.status === 404) return null;
+				throw error;
+			})));
+			if (base === null && head === null) throw new SelectionUnavailableError("missing_file", "File is unavailable at these pins.");
+			if (base !== null && head !== null && base !== head) throw new SelectionUnavailableError("no_alignment", "Changed context file has no alignment.");
+			rows = textualRows(source.file, "", base?.split("\n").length ?? 0, head?.split("\n").length ?? 0);
 		}
-		if (!rows) throw new Error("File has no text alignment.");
+		if (!rows) throw new SelectionUnavailableError("no_alignment", "File has no text alignment.");
 		const result = resolveDiffSelection(source, rows, file ?? { path: source.file });
 		resolvedSelections[key] = result;
 		return result;
@@ -2288,8 +2322,8 @@ async function reviewProgress(store, data, snapshot, signal = new AbortControlle
 	const resolveAvailable = async (source) => {
 		try {
 			return await resolve(source);
-		} catch {
-			unavailableSelections[selectionKey(source)] = "Source links need updating at these pins";
+		} catch (error) {
+			unavailableSelections[selectionKey(source)] = error instanceof SelectionUnavailableError ? error.reason : "other";
 			return [];
 		}
 	};
@@ -2315,7 +2349,10 @@ async function reviewProgress(store, data, snapshot, signal = new AbortControlle
 			};
 		}
 	}));
-	await Promise.all(selectionReferences(snapshot.document, { tolerant: true }).map(async ({ source }) => {
+	await Promise.all(selectionReferences(snapshot.document, {
+		tolerant: true,
+		repositoryId: boardRepositoryId(snapshot)
+	}).map(async ({ source }) => {
 		try {
 			await resolveAvailable(source);
 		} catch {}
@@ -2331,7 +2368,7 @@ async function reviewProgress(store, data, snapshot, signal = new AbortControlle
 		unavailable: counting || uncategorized.length ? void 0 : "All changed lines are covered by lenses"
 	});
 	const progress = {
-		complete: !counting,
+		complete: !counting && !pendingSources.size,
 		files,
 		referenceFiles,
 		lenses,
@@ -2388,12 +2425,11 @@ function lensReport(lenses, progress) {
 }
 //#endregion
 //#region src/ask/checkout-files.ts
-const execFileAsync$1 = promisify(execFile);
 /** The checkout's files relative to its root: tracked ones, and new ones git
 * does not ignore. None where git cannot list them. */
 async function checkoutFiles(root) {
 	try {
-		const { stdout } = await execFileAsync$1("git", [
+		const { stdout } = await runVcs("git", [
 			"-C",
 			root,
 			"ls-files",
@@ -2564,7 +2600,6 @@ function watchAskThreads(threads, backlog = 256) {
 }
 //#endregion
 //#region src/review-stack.ts
-const execFileAsync = promisify(execFile);
 const GitHubStacksSchema = z.array(z.object({ pull_requests: z.array(z.object({
 	number: z.number().int().positive(),
 	head: z.object({ ref: z.string().min(1) })
@@ -2612,12 +2647,12 @@ async function gitHubStack(subject, reviews, runGitHubApi) {
 }
 /** The chain of reviews through this one, linked by the base each names. */
 async function localStack(subject, reviews, repositoryPath) {
-	const group = reviews.find((review) => review.reviewId === subject.reviewId)?.repositoryGroup?.key;
+	const group = reviews.find((review) => review.reviewId === subject.reviewId)?.project?.id;
 	const current = subject.origin?.branch;
 	if (!group || !current) return [];
 	const main = subject.origin?.baseBranch ? await defaultBranch(repositoryPath).catch(() => null) : null;
 	const name = (ref) => ref.replace(/^origin\//, "");
-	const inGroup = reviews.filter((review) => review.repositoryGroup?.key === group);
+	const inGroup = reviews.filter((review) => review.project?.id === group);
 	const latest = (field, branch) => {
 		const matches = inGroup.filter((review) => review.origin?.[field] === branch);
 		return matches.findLast((review) => !review.trashedAt) ?? matches.at(-1);
@@ -2644,8 +2679,8 @@ async function forkPoint(repositoryPath, main, branch) {
 	const ref = `refs/heads/${branch}`;
 	const fork = await git(repositoryPath, [
 		"merge-base",
-		main,
-		ref
+		{ rev: main },
+		{ rev: ref }
 	], { allowFailure: true });
 	if (!fork.ok) return null;
 	const base = fork.stdout.trim();
@@ -2655,22 +2690,17 @@ async function forkPoint(repositoryPath, main, branch) {
 			"log",
 			"--reverse",
 			"--format=%s",
-			`${base}..${ref}`
+			{ rev: `${base}..${ref}` }
 		], { allowFailure: true })).stdout.split("\n")[0] || null
 	};
 }
 async function defaultRunGitHubApi(host, endpoint) {
-	const { stdout } = await execFileAsync("gh", [
+	const { stdout } = await runVcs("gh", [
 		"api",
 		"--hostname",
-		host,
-		endpoint
+		{ value: host },
+		{ value: endpoint }
 	], {
-		env: {
-			...process.env,
-			GH_PROMPT_DISABLED: "1"
-		},
-		encoding: "utf8",
 		timeout: 1e4,
 		maxBuffer: 2097152
 	});
@@ -2708,7 +2738,6 @@ const publishSchema = z.strictObject({
 /** Mounted behind local host authentication. Account credentials never enter the renderer. */
 function mountSharingHost(app, store, data, shared, options = {}) {
 	const startLogin = options.login ?? runStoreLogin;
-	const openUrl = options.openUrl ?? openUrlInBrowser;
 	let login = { pending: false };
 	app.get("/sharing/account", async (context) => {
 		const account = await readStoreAuth();
@@ -2731,9 +2760,9 @@ function mountSharingHost(app, store, data, shared, options = {}) {
 				traces: false,
 				stdout: discard,
 				stderr: discard,
-				openUrl: async (url) => {
-					login.url = url;
-					await openUrl(url);
+				openUrl: options.openUrl,
+				onDeviceCode: (device) => {
+					Object.assign(login, device);
 				}
 			}).then((code) => {
 				login = { pending: false };
@@ -2802,8 +2831,16 @@ function mountSharingPublisher(app, store, data, options = {}) {
 		validateShareSources(snapshot);
 		const account = await readSharingAuth();
 		if (!account) throw new ReviewInputError("Set DEV_REVIEW_SHARE_TOKEN for CI, or run whiteboard login before sharing.", 409);
-		const root = snapshot.pins ? store.repositoryPath(snapshot.pins.repositoryId) : void 0;
-		const repository = root ? await (options.readRepository ?? readShareRepository)(root) : void 0;
+		const repositoryId = snapshot.pins?.repositoryId ?? snapshot.target?.repositoryId;
+		const root = repositoryId ? store.repositoryPath(repositoryId) : void 0;
+		const readRepository = options.readRepository ?? readShareRepository;
+		const repository = !root ? void 0 : snapshot.pins ? await readRepository(root) : await (async () => {
+			try {
+				return await readRepository(root);
+			} catch {
+				return;
+			}
+		})();
 		const bundle = await exportShare({
 			store,
 			data,
@@ -2811,7 +2848,8 @@ function mountSharingPublisher(app, store, data, options = {}) {
 			version: snapshot.version,
 			repository
 		});
-		const verification = root && snapshot.pins && repository ? verifyRepository(root, snapshot.pins, repository).then(() => ({ ok: true }), (error) => ({
+		const commits = referenceCommits(snapshot);
+		const verification = root && (snapshot.pins || commits.length) && repository ? verifyRepository(root, snapshot.pins, commits).then(() => ({ ok: true }), (error) => ({
 			ok: false,
 			error
 		})) : Promise.resolve({ ok: true });
@@ -2887,8 +2925,14 @@ const clip = (line) => line.trim() === "" ? "(blank line)" : line.length > 120 ?
 */
 async function anchorQuotes(before, after, read) {
 	const key = (id, source) => `${id}\0${selectionKey(source)}`;
-	const known = new Set(before ? selectionReferences(before.document, { tolerant: true }).map(({ id, source }) => key(id, source)) : []);
-	const added = selectionReferences(after.document, { tolerant: true }).filter(({ id, source }) => !known.has(key(id, source)));
+	const known = new Set(before ? selectionReferences(before.document, {
+		tolerant: true,
+		repositoryId: boardRepositoryId(before)
+	}).map(({ id, source }) => key(id, source)) : []);
+	const added = selectionReferences(after.document, {
+		tolerant: true,
+		repositoryId: boardRepositoryId(after)
+	}).filter(({ id, source }) => !known.has(key(id, source)));
 	return {
 		quotes: (await Promise.all(added.slice(0, QUOTE_LIMIT).map(async ({ source }) => {
 			try {
@@ -2913,15 +2957,18 @@ async function anchorQuotes(before, after, read) {
 //#endregion
 //#region src/review-api/document-text.ts
 /** A reading view of saved content, not another document format to maintain. */
-function documentText(snapshot, targetId, full = false) {
+function documentText(snapshot, targetId, full = false, relations) {
 	const target = targetId === void 0 ? void 0 : elements(snapshot.document).find((item) => item.id === targetId);
 	if (targetId !== void 0 && !target) throw new ReviewInputError("Target not found in this version.", 404);
 	const detailed = full || target !== void 0;
-	const lines = [
-		`# ${snapshot.title}`,
-		`Session ${snapshot.reviewId} · version ${snapshot.version}`,
-		""
-	];
+	const lines = [`# ${boardTitle(snapshot.title)}`, `Session ${snapshot.reviewId} · version ${snapshot.version}`];
+	if (relations && targetId === void 0) {
+		const list = (boards) => boards.map((board) => `${boardTitle(board.title)} (${board.id})`).join(", ");
+		if (relations.parent) lines.push(`Parent: ${list([relations.parent])}`);
+		if (relations.children.length) lines.push(`Children, in order: ${list(relations.children)}`);
+		if (relations.dependsOn.length) lines.push(`Depends on: ${list(relations.dependsOn)}`);
+	}
+	lines.push("");
 	const write = (depth, text) => {
 		for (const line of text.split("\n")) lines.push("  ".repeat(depth) + line);
 	};
@@ -3349,7 +3396,7 @@ function registerOnboardingRoutes(app, store, ask, host, run = runCommand) {
 			agent: input.agent,
 			...host.historyHooks({
 				id,
-				reviewId,
+				anchor: { board: reviewId },
 				agent: input.agent,
 				version: created.version,
 				head,
@@ -3497,12 +3544,16 @@ const askDecisionSchema = z.strictObject({
 	permissionId: z.string().min(1),
 	optionId: z.string().min(1)
 });
-const SCRATCHPAD_DISABLED = "The scratchpad is off. Turn it on in Whiteboard Desktop Settings.";
+/** A person's save carries the whole board, which edits one at a time can
+* grow past the size of a single command. */
+const PERSON_EDIT_MAX_BYTES = 16777216;
+/** A request the gateway forwarded from another machine. */
+const remoteCaller = (context) => context.req.header(REVIEW_CLIENT_HEADER) === REVIEW_CLIENT_REMOTE;
 /** Both hosts mount this behind their token authentication. */
 function createReviewApi(store, data, open, shared, capabilities = () => ({
 	desktopAvailable: Boolean(open),
 	softwareMapEnabled: false
-}), scratchpadEnabled = () => false, traceEnabled = async () => false, status = () => ({}), hooks = {}, ask) {
+}), traceEnabled = async () => false, status = () => ({}), hooks = {}, ask) {
 	const app = new Hono();
 	app.onError((error, context) => {
 		if (error instanceof HttpJsonError) return context.json({ error: error.message }, error.statusCode);
@@ -3531,15 +3582,7 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		await next();
 	};
 	const sharedCommandSchema = z.object({ operation: z.object({ reviewId: z.string().optional() }) });
-	const ensureScratchpad = async (id) => {
-		if (open && scratchpadEnabled() && (!id || id === SCRATCHPAD_ID)) await store.ensureScratchpad();
-	};
-	const refuseDisabledScratchpad = (id) => {
-		if (id === SCRATCHPAD_ID && !scratchpadEnabled()) throw new ReviewInputError(SCRATCHPAD_DISABLED, 409);
-	};
 	const sharedGuard = async (context, next) => {
-		refuseDisabledScratchpad(context.req.param("id"));
-		await ensureScratchpad(context.req.param("id"));
 		const id = context.req.param("id");
 		if (!id || !isShared(id)) return next();
 		const query = readQuerySchemas.get.parse({ version: context.req.query("version") });
@@ -3558,23 +3601,53 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		if (!snapshot || version !== void 0 && version !== snapshot.version) throw new ReviewInputError("Shared review version is unavailable.", 404);
 		return snapshot;
 	};
-	const catalog = () => {
-		const local = store.list();
-		return [...scratchpadEnabled() ? local : local.filter((summary) => summary.kind !== "scratchpad"), ...shared?.list() ?? []];
+	/** Adds a PR board's state, as this host last read it from GitHub. */
+	const withPullRequestState = (board) => {
+		const state = data?.pullRequestState(board.origin?.pullRequestUrl ?? board.pullRequestUrl);
+		return state ? {
+			...board,
+			pullRequestState: state
+		} : board;
 	};
-	app.get("/", async (context) => {
-		await ensureScratchpad();
-		return context.json(catalog());
-	});
+	const catalog = () => [...store.list().map(withPullRequestState), ...shared?.list() ?? []];
+	/** Where a board sits among its project's, and its PR's facts, for the
+	* board's header. */
+	const placeOf = (id) => {
+		if (isShared(id) || !store.has(id)) return { siblings: [] };
+		const { board, parent, siblings, children } = store.place(id);
+		const url = board.origin?.pullRequestUrl;
+		const state = data?.pullRequestState(url);
+		const baseBranch = url && data?.pullRequestBaseBranch(url);
+		const headBranch = url && data?.pullRequestHeadBranch(url);
+		const place = ({ reviewId, title, target }) => ({
+			reviewId,
+			title,
+			icon: boardIconKind(target)
+		});
+		const listed = (child) => {
+			const childState = data?.pullRequestState(child.origin?.pullRequestUrl);
+			return {
+				...place(child),
+				...child.origin?.pullRequestNumber && { pullRequestNumber: child.origin.pullRequestNumber },
+				...childState && { pullRequestState: childState }
+			};
+		};
+		return {
+			...state && { pullRequestState: state },
+			...baseBranch && { baseBranch },
+			...headBranch && { headBranch },
+			board: place(board),
+			...parent && { parent: place(parent) },
+			siblings: siblings.map(listed),
+			...children?.length && { children: children.map(listed) }
+		};
+	};
+	app.get("/", (context) => context.json(catalog()));
 	app.get("/feedback-eligibility", (context) => context.json({ eligible: store.feedbackEligible() }));
-	const instructionContext = async () => ({
-		desktopAvailable: Boolean(open),
-		scratchpadEnabled: scratchpadEnabled(),
-		traceEnabled: await traceEnabled()
-	});
+	const instructionContext = async () => ({ traceEnabled: await traceEnabled() });
 	app.get("/authoring", async (context) => {
 		const instructions = await instructionContext();
-		return context.json(authoringTools(scratchpadAvailable(instructions), instructions.traceEnabled));
+		return context.json(authoringTools(instructions.traceEnabled));
 	});
 	app.get("/instructions", async (context) => {
 		const { topic } = instructionsQuerySchema.parse(context.req.query());
@@ -3628,10 +3701,7 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		...status(),
 		desktopAvailable: (await capabilities()).desktopAvailable
 	}));
-	app.get("/capabilities", async (context) => context.json({
-		...await capabilities(),
-		scratchpadEnabled: scratchpadEnabled()
-	}));
+	app.get("/capabilities", async (context) => context.json(await capabilities()));
 	app.get("/:id/activity", (context) => {
 		const id = context.req.param("id");
 		readReview(id);
@@ -3653,6 +3723,9 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			action
 		} : input));
 	});
+	app.post("/:id/person-edit", async (context) => context.json(await store.personEdit(context.req.param("id"), await readBoundedRequestJson(context.req.raw, PERSON_EDIT_MAX_BYTES))));
+	app.post("/:id/focus", async (context) => context.json(store.focus(context.req.param("id"), await readBoundedRequestJson(context.req.raw))));
+	app.post("/:id/discard", async (context) => context.json(await store.discard(context.req.param("id"))));
 	app.get("/watch", (context) => {
 		let input;
 		try {
@@ -3669,6 +3742,16 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		let dirtyList = lists;
 		const dirtyReviews = new Set(reviewIds);
 		let sentList;
+		const linksRevision = /* @__PURE__ */ new Map();
+		const linksKey = (id) => {
+			if (!data || isShared(id) || !store.has(id)) return "";
+			const { outgoing, backlinks } = store.links(id);
+			return JSON.stringify([...outgoing, ...backlinks].map((link) => link.pullRequestUrl && data.pullRequestState(link.pullRequestUrl, { seen: false })));
+		};
+		const linksKeys = new Map([...reviewIds].map((reviewId) => [reviewId, linksKey(reviewId)]));
+		const placeRevision = /* @__PURE__ */ new Map();
+		const placeKey = (id) => JSON.stringify(placeOf(id));
+		const placeKeys = new Map([...reviewIds].map((reviewId) => [reviewId, placeKey(reviewId)]));
 		const readReviewLine = (reviewId) => {
 			try {
 				return {
@@ -3677,7 +3760,9 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 					value: {
 						...readReview(reviewId),
 						activity: store.activity.read(reviewId),
-						coverageRevision: data?.coverageRevision ?? 0
+						coverageRevision: data?.coverageRevision ?? 0,
+						linksRevision: linksRevision.get(reviewId) ?? 0,
+						placeRevision: placeRevision.get(reviewId) ?? 0
 					}
 				};
 			} catch (error) {
@@ -3709,6 +3794,18 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			dirtyReviews.add(reviewId);
 			return true;
 		};
+		/** Bumps the place of each board whose place changed. */
+		const refreshPlaces = () => {
+			let marked = false;
+			for (const [id, key] of placeKeys) {
+				const next = placeKey(id);
+				if (next === key) continue;
+				placeKeys.set(id, next);
+				placeRevision.set(id, (placeRevision.get(id) ?? 0) + 1);
+				marked = markReview(id) || marked;
+			}
+			return marked;
+		};
 		const markLists = () => {
 			dirtyList ||= lists;
 			return lists;
@@ -3721,7 +3818,12 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 					notify();
 				}) ?? (() => {}),
 				store.subscribe((result) => {
-					if (markReview(result.reviewId)) notify();
+					let marked = markReview(result.reviewId);
+					for (const from of store.linkingBoards(result.reviewId)) {
+						linksRevision.set(from, (linksRevision.get(from) ?? 0) + 1);
+						marked = markReview(from) || marked;
+					}
+					if (marked) notify();
 				}),
 				store.activity.subscribe((id) => {
 					if (markReview(id)) notify();
@@ -3729,11 +3831,24 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 				store.activity.subscribeWorking(() => {
 					if (markLists()) notify();
 				}),
+				data?.subscribePullRequestStates(() => {
+					let marked = markLists();
+					marked = refreshPlaces() || marked;
+					for (const reviewId of reviewIds) {
+						const next = linksKey(reviewId);
+						if (next === linksKeys.get(reviewId)) continue;
+						linksKeys.set(reviewId, next);
+						linksRevision.set(reviewId, (linksRevision.get(reviewId) ?? 0) + 1);
+						marked = markReview(reviewId) || marked;
+					}
+					if (marked) notify();
+				}) ?? (() => {}),
 				shared?.subscribe(() => {
 					if (markLists()) notify();
 				}) ?? (() => {}),
 				store.subscribeCatalog(() => {
-					if (markLists()) notify();
+					const marked = refreshPlaces();
+					if (markLists() || marked) notify();
 				})
 			];
 			return () => stops.forEach((stop) => stop());
@@ -3789,19 +3904,18 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			storage: z.enum(["s3", "hosted"]).optional(),
 			trace: z.string().min(1).optional()
 		});
-		const tracePins = (id, version) => {
-			const { pins } = readReview(id, version);
-			if (!pins) throw new ReviewInputError("This document has no source pins of its own.", 409);
-			return pins;
+		const tracePins = async (id, version) => {
+			const snapshot = readReview(id, version);
+			return snapshot.pins ?? await data.documentPins(snapshot);
 		};
 		app.get("/:id/agent-traces", async (context) => {
 			const query = traceQuery.parse(context.req.query());
-			const pins = tracePins(context.req.param("id"), query.version);
+			const pins = await tracePins(context.req.param("id"), query.version);
 			return context.json(await listPinnedTraces(store.repositoryPath(pins.repositoryId), pins, query.storage));
 		});
 		app.get("/:id/agent-traces/:sessionId", async (context) => {
 			const query = traceQuery.parse(context.req.query());
-			const pins = tracePins(context.req.param("id"), query.version);
+			const pins = await tracePins(context.req.param("id"), query.version);
 			const result = await readStoredTrace(store.repositoryPath(pins.repositoryId), context.req.param("sessionId"), query.trace, query.storage);
 			if (!result.ok) return context.json({
 				ok: false,
@@ -3844,7 +3958,16 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			const input = z.strictObject({ path: z.string().min(1) }).parse(await readBoundedRequestJson(context.req.raw));
 			return context.json(await data.register(input.path));
 		});
-		app.post("/resources", async (context) => context.json(await data.upload(await readBoundedRequestJson(context.req.raw, 8388608))));
+		app.post("/resources", async (context) => {
+			const body = await readBoundedRequestJson(context.req.raw, 8388608);
+			const named = z.looseObject({ repositoryPath: z.string().min(1) }).safeParse(body);
+			if (!named.success) return context.json(await data.upload(body));
+			const { repositoryPath, ...upload } = named.data;
+			return context.json(await data.upload({
+				...upload,
+				repositoryId: (await data.register(repositoryPath)).id
+			}));
+		});
 		app.get("/:id/resources/:resourceId", async (context) => {
 			const id = context.req.param("id");
 			const snapshot = readReview(id);
@@ -3951,6 +4074,11 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			const { pins } = await data.resolveSource(readReview(context.req.param("id"), input.version), input.commit, queryAnchor(input));
 			return context.json(await data.changes(pins));
 		});
+		app.get("/:id/commit/:commit", async (context) => {
+			const repositoryId = boardRepositoryId(readReview(context.req.param("id")));
+			if (!repositoryId) throw new ReviewInputError("This board has no repository.", 404);
+			return context.json(await data.commitInfo(repositoryId, context.req.param("commit")));
+		});
 		app.get("/:id/commits", async (context) => {
 			const input = readQuerySchemas.commits.parse(context.req.query());
 			return context.json(await data.commits((await data.resolveSource(readReview(context.req.param("id"), input.version))).pins));
@@ -3977,26 +4105,19 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			});
 			excerpt = `## ${target.side}: ${target.path}:${target.startLine}-${target.endLine} (${source.commit})\n` + source.text.split("\n").map((line) => `    ${line}`).join("\n");
 		}
+		if (target.kind === "block") excerpt = documentText(snapshot, target.blockId, true);
 		const diff = selection.selectedDiff;
 		const text = selectionMarkdown(selection, excerpt, diff ? {
 			base: `a/${diff.oldPath}`,
 			head: `b/${diff.newPath}`
 		} : void 0);
 		return [
-			`Whiteboard: ${snapshot.title}`,
+			`Whiteboard: ${boardTitle(snapshot.title)}`,
 			`Session ID: ${snapshot.reviewId}`,
 			`Version: ${snapshot.version}`,
 			...selection.apiSource?.commit ? [`Selected commit: ${selection.apiSource.commit}`] : [],
-			...selection.apiSource?.pins ? [
-				`Selected repository ID: ${selection.apiSource.pins.repositoryId}`,
-				...selection.apiSource.pins.base ? [`Selected base: ${selection.apiSource.pins.base}`] : [],
-				`Selected head: ${selection.apiSource.pins.head}`
-			] : [],
-			...snapshot.pins ? [
-				`Repository ID: ${snapshot.pins.repositoryId}`,
-				`Session base: ${snapshot.pins.base}`,
-				`Session head: ${snapshot.pins.head}`
-			] : [],
+			...selection.apiSource?.pins ? [...selection.apiSource.pins.base ? [`Selected base: ${selection.apiSource.pins.base}`] : [], `Selected head: ${selection.apiSource.pins.head}`] : [],
+			...snapshot.pins ? [`Session base: ${snapshot.pins.base}`, `Session head: ${snapshot.pins.head}`] : [],
 			`Read this version with session_get({"sessionId":"${snapshot.reviewId}","version":${snapshot.version},"full":true}).`,
 			"",
 			text,
@@ -4005,9 +4126,10 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		].join("\n");
 	}
 	if (ask && data) {
+		const projectOf = (reviewId) => isShared(reviewId) || !store.has(reviewId) ? void 0 : store.projectOf(reviewId);
 		const readThread = (reviewId, threadId) => {
 			const thread = ask.threads.get(threadId);
-			if (!thread || thread.reviewId !== reviewId) throw new ReviewInputError("This conversation has ended.", 404);
+			if (!thread) throw new ReviewInputError("This conversation has ended.", 404);
 			return thread;
 		};
 		/** Where a thread in a review saves itself: its Ask history, recorded
@@ -4057,7 +4179,7 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			const reach = await ask.threads.reach(agent, threadId);
 			const { reviewId } = snapshot;
 			return [
-				`A reviewer is reading "${snapshot.title}" in Whiteboard and has a question about ${selection.target.kind === "review" ? "it" : "a selection"}.`,
+				`A reviewer is reading "${boardTitle(snapshot.title)}" in Whiteboard and has a question about ${selection.target.kind === "review" ? "it" : "a selection"}.`,
 				checkout.live ? "Your working directory is the repository the review describes." : `Your working directory is a checkout of the review's head commit, ${checkout.head}. Answer from this code, not from other branches.`,
 				"Answer the question for a staff engineer: lead with the answer and keep it short. Explain at the level of components and data flow before functions, and check each claim about the code against code you have read.",
 				"Name files by their path from the checkout root, with a line where it helps, as in `src/app.ts:42`; the reviewer can open them from your answer.",
@@ -4108,13 +4230,17 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			const permissions = input.permissions ?? defaultAskPermissions(input.agent);
 			const initialContext = await askContext(id, input.agent, snapshot, checkout, input.selection, version);
 			assertWritable(reviewId);
+			store.askHistory.markViewed(id, createdAt);
 			const thread = ask.threads.open({
 				id,
 				reviewId,
 				agent: input.agent,
 				...historyHooks({
 					id,
-					reviewId,
+					anchor: target.kind === "text" && target.anchor ? {
+						board: reviewId,
+						block: target.anchor.blockId
+					} : { board: reviewId },
 					agent: input.agent,
 					version: snapshot.version,
 					head: checkout.head,
@@ -4138,23 +4264,106 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			});
 			return context.json({ threadId: thread.id });
 		});
+		/** Every project's threads for the sidebar: who runs them, where they
+		* started and live, and which boards they changed. */
+		const projectThreads = (reviewId) => {
+			const entries = store.askHistory.listAll();
+			const ids = entries.map((entry) => entry.id);
+			const edited = store.boardsChangedByThreads(ids);
+			const boards = /* @__PURE__ */ new Map();
+			const board = (id) => {
+				let found = boards.get(id);
+				if (!found) {
+					found = store.has(id) ? store.boardFace(id) : {
+						reviewId: id,
+						icon: boardIconKind(void 0)
+					};
+					boards.set(id, found);
+				}
+				return found;
+			};
+			const project = projectOf(reviewId);
+			return {
+				board: reviewId,
+				...project && { project },
+				threads: entries.map((entry) => {
+					const anchor = entry.anchor ?? { board: reviewId };
+					const status = ask.threads.get(entry.id)?.status;
+					const { viewedAt } = entry;
+					const unread = status !== "starting" && status !== "running" && status !== "waiting" && viewedAt !== void 0 && entry.updatedAt > viewedAt;
+					return {
+						id: entry.id,
+						...entry.projectId && { projectId: entry.projectId },
+						...store.has(anchor.board) && { place: store.boardPlace(anchor.board) },
+						agent: entry.agent,
+						agentName: askAgents[entry.agent].name,
+						opening: entry.question ?? entry.title,
+						pinned: entry.selection.target.kind === "text" && entry.selection.target.anchor !== void 0,
+						...status && { status },
+						...unread && { unread },
+						updatedAt: entry.updatedAt,
+						anchor: {
+							board: board(anchor.board),
+							...anchor.block && { block: anchor.block }
+						},
+						edited: edited.get(entry.id) ?? []
+					};
+				})
+			};
+		};
 		app.get("/:id/ask/threads", (context) => {
 			const reviewId = context.req.param("id");
 			readReview(reviewId);
-			return context.json({ threads: store.askHistory.list(reviewId) });
+			if (context.req.query("watch") !== void 0) {
+				let sent = "";
+				return watch(() => {
+					const line = JSON.stringify(projectThreads(reviewId));
+					if (line === sent) return [];
+					sent = line;
+					return [line];
+				}, (notify) => {
+					let timer;
+					const later = () => {
+						timer ??= setTimeout(() => {
+							timer = void 0;
+							notify();
+						}, 100);
+					};
+					const stops = [
+						store.askHistory.subscribe(later),
+						ask.threads.subscribeStatus(later),
+						store.subscribe((change) => {
+							if (change.deleted || change.lifecycle || change.titleChanged || change.placeChanged || change.threadId || change.external) later();
+						})
+					];
+					return () => {
+						clearTimeout(timer);
+						stops.forEach((stop) => stop());
+					};
+				});
+			}
+			return context.json({
+				threads: store.askHistory.list(reviewId, projectOf(reviewId)),
+				board: reviewId
+			});
 		});
 		app.post("/:id/ask/watch", reviewAccess("read"), async (context) => {
 			const reviewId = context.req.param("id");
 			readReview(reviewId);
 			const { threads } = askWatchSchema.parse(await readBoundedRequestJson(context.req.raw));
 			return watchAskThreads(new Map(threads.map((threadId) => {
-				const thread = ask.threads.get(threadId);
-				return [threadId, thread?.reviewId === reviewId ? thread : void 0];
+				return [threadId, ask.threads.get(threadId)];
 			})));
 		});
+		app.get("/:id/ask/:threadId/boards", (context) => {
+			const threadId = context.req.param("threadId");
+			const anchor = store.askHistory.get(threadId)?.anchor.board ?? ask.threads.get(threadId)?.reviewId;
+			if (remoteCaller(context) || !anchor) throw new ReviewInputError("This conversation was not found.", 404);
+			return context.json({ boards: store.boardsChangedBy(threadId) });
+		});
 		app.get("/:id/ask/:threadId", (context) => {
 			const record = store.askHistory.get(context.req.param("threadId"));
-			if (record?.reviewId !== context.req.param("id")) throw new ReviewInputError("This conversation was not found.", 404);
+			if (!record) throw new ReviewInputError("This conversation was not found.", 404);
 			const target = record.selection.target;
 			return context.json({
 				id: record.id,
@@ -4176,18 +4385,19 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		app.post("/:id/ask/:threadId/open", reviewAccess("edit"), async (context) => {
 			const reviewId = context.req.param("id");
 			const threadId = context.req.param("threadId");
-			if (ask.threads.get(threadId)?.reviewId === reviewId) return context.json({ threadId });
+			if (ask.threads.get(threadId)) return context.json({ threadId });
 			const record = store.askHistory.get(threadId);
 			const { picks } = askOpenSchema.parse(await readBoundedRequestJson(context.req.raw, void 0, {}));
-			if (record?.reviewId !== reviewId) throw new ReviewInputError("This conversation was not found.", 404);
-			const snapshot = readReview(reviewId, record.version);
+			if (!record) throw new ReviewInputError("This conversation was not found.", 404);
+			const anchor = record.anchor.board;
+			const snapshot = readReview(anchor, record.version);
 			const checkout = await data.agentCheckout(snapshot);
 			const target = record.selection.target;
 			const initialContext = await askContext(record.id, record.agent, snapshot, checkout, record.selection, record.version);
 			assertWritable(reviewId);
 			ask.threads.open({
 				id: record.id,
-				reviewId,
+				reviewId: anchor,
 				agent: record.agent,
 				cwd: checkout.rootPath,
 				head: checkout.head,
@@ -4263,27 +4473,91 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			await readThread(context.req.param("id"), context.req.param("threadId")).cancel();
 			return context.json({ ok: true });
 		});
+		app.post("/:id/ask/:threadId/viewed", (context) => {
+			const threadId = context.req.param("threadId");
+			if (!ask.threads.get(threadId) && !store.askHistory.get(threadId)) throw new ReviewInputError("This conversation was not found.", 404);
+			store.askHistory.markViewed(threadId);
+			return context.json({ ok: true });
+		});
 		app.post("/:id/ask/:threadId/close", reviewAccess("read"), (context) => {
 			readThread(context.req.param("id"), context.req.param("threadId"));
 			ask.threads.close(context.req.param("threadId"), !readReview(context.req.param("id")).trashedAt);
 			return context.json({ ok: true });
 		});
 		app.delete("/:id/ask/:threadId", reviewAccess("edit"), (context) => {
-			const reviewId = context.req.param("id");
+			context.req.param("id");
 			const threadId = context.req.param("threadId");
-			if (store.askHistory.get(threadId)?.reviewId !== reviewId) throw new ReviewInputError("This conversation was not found.", 404);
-			if (ask.threads.get(threadId)?.reviewId === reviewId) ask.threads.close(threadId);
+			if (!store.askHistory.get(threadId)) throw new ReviewInputError("This conversation was not found.", 404);
+			if (ask.threads.get(threadId)) ask.threads.close(threadId);
 			store.askHistory.delete(threadId);
 			return context.json({ ok: true });
 		});
 	}
+	app.get("/:id/place", (context) => {
+		const id = context.req.param("id");
+		if (!isShared(id)) store.assertExists(id);
+		return context.json(placeOf(id));
+	});
 	app.get("/:id/stack", async (context) => {
 		const query = readQuerySchemas.get.parse(context.req.query());
 		const id = context.req.param("id");
 		const snapshot = readReview(id, query.version);
 		if (isShared(id) || !snapshot.pins) return context.json({ layers: [] });
-		const layers = await resolveReviewStackLayers(snapshot, store.list(), { repositoryPath: store.repositories().find((repository) => repository.id === snapshot.pins.repositoryId)?.path });
-		return context.json({ layers });
+		const repositoryPath = store.repositories().find((repository) => repository.id === snapshot.pins.repositoryId)?.path;
+		const layers = await resolveReviewStackLayers(snapshot, store.list(), { repositoryPath });
+		const trunk = layers.length > 1 && repositoryPath ? await defaultBranch(repositoryPath).catch(() => null) : null;
+		return context.json({
+			layers: layers.map((layer) => {
+				const state = data?.pullRequestState(layer.pullRequestUrl ?? void 0);
+				return state ? {
+					...layer,
+					pullRequestState: state
+				} : layer;
+			}),
+			...trunk && { base: trunk.ref.replace(/^origin\//, "") }
+		});
+	});
+	app.get("/:id/project", (context) => {
+		const id = context.req.param("id");
+		if (isShared(id)) return context.json({
+			project: null,
+			boards: []
+		});
+		const project = store.summary(id)?.project ?? null;
+		return context.json({
+			project,
+			boards: project ? store.listProject(project.id).filter((board) => !board.trashedAt).map(withPullRequestState) : []
+		});
+	});
+	app.get("/:id/links", (context) => {
+		const id = context.req.param("id");
+		if (isShared(id)) return context.json({
+			outgoing: boardLinks(id, readReview(id).document).map(({ from, to }) => ({
+				from,
+				to,
+				missing: true,
+				elsewhere: true
+			})),
+			backlinks: []
+		});
+		const { version } = readQuerySchemas.get.pick({ version: true }).parse({ version: context.req.query("version") });
+		const { outgoing, backlinks } = store.links(id, version);
+		return context.json({
+			outgoing: outgoing.map(withPullRequestState),
+			backlinks: backlinks.map(withPullRequestState)
+		});
+	});
+	app.get("/:id/links/peek", (context) => {
+		const id = context.req.param("id");
+		if (isShared(id)) return context.json({});
+		const { version } = readQuerySchemas.get.pick({ version: true }).parse({ version: context.req.query("version") });
+		const board = context.req.query("board");
+		const block = context.req.query("block");
+		if (!board) throw new ReviewInputError("Name the linked board.", 400);
+		return context.json(store.linkPeek(id, {
+			board,
+			...block && { block }
+		}, version));
 	});
 	app.get("/:id/history", (context) => {
 		const id = context.req.param("id");
@@ -4292,14 +4566,39 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		return context.json([{
 			version: snapshot.version,
 			title: snapshot.title,
-			createdAt: snapshot.createdAt
+			createdAt: snapshot.createdAt,
+			author: "agent"
 		}]);
 	});
+	/** A board's relations as session_list reports them: only those it has. */
+	const listedRelations = ({ parentId, children, dependsOn }) => {
+		const listed = {};
+		if (parentId) listed.parentId = parentId;
+		if (children.length) listed.children = children;
+		if (dependsOn.length) listed.dependsOn = dependsOn;
+		return listed;
+	};
+	/** A board's relations, each board named by its title. */
+	const relatedBoards = (id) => {
+		const { parentId, children, dependsOn } = store.relations(id);
+		const named = (board) => ({
+			id: board,
+			title: store.read(board).title
+		});
+		return {
+			...parentId && { parent: named(parentId) },
+			children: children.map(named),
+			dependsOn: dependsOn.map(named)
+		};
+	};
 	app.get("/:id/inspect", (context) => {
 		const query = inspectQuerySchema.parse(context.req.query());
 		const id = context.req.param("id");
 		const snapshot = readReview(id, query.version);
-		return context.json(query.format === "text" ? documentText(snapshot, query.targetId, Boolean(query.full)) : query.targetId !== void 0 ? inspectSnapshot(snapshot, query.targetId) : query.full ? snapshot : inspectSnapshot(snapshot));
+		return context.json(query.format === "text" ? documentText(snapshot, query.targetId, Boolean(query.full), isShared(id) ? void 0 : relatedBoards(id)) : query.targetId !== void 0 ? inspectSnapshot(snapshot, query.targetId) : {
+			...query.full ? snapshot : inspectSnapshot(snapshot),
+			...!isShared(id) && listedRelations(store.relations(id))
+		});
 	});
 	app.get("/:id", async (context) => {
 		const query = readQuerySchemas.get.parse(context.req.query());
@@ -4326,17 +4625,13 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 	};
 	app.post("/commands", async (context) => {
 		const { command: body, open: requestedOpen } = takeCreateOpen(await readBoundedRequestJson(context.req.raw));
-		const request = await locateRepositories(body, (path) => {
+		const register = async (path) => data ? data.register(path) : store.registerRepository(path);
+		const request = withBoardRepository(await locateRepositories(await pullRequestTargets(body, register, (url, repositoryId) => {
 			if (!data) throw new ReviewInputError("Repositories are unavailable.");
-			return data.register(path);
-		});
+			return data.resolvePullRequest(url, { id: repositoryId });
+		}, (id) => store.read(id)), register), (id) => store.has(id) ? store.read(id) : void 0);
 		const input = commandSchema.parse(request);
 		const command = sharedCommandSchema.safeParse(input);
-		if (command.success) {
-			refuseDisabledScratchpad(command.data.operation.reviewId);
-			await ensureScratchpad(command.data.operation.reviewId);
-		}
-		if (input.operation.type === "create" && input.operation.kind === "scratchpad") refuseDisabledScratchpad(SCRATCHPAD_ID);
 		if (command.success && command.data.operation.reviewId?.startsWith("shared-")) {
 			const parsed = commandSchema.parse(input);
 			if (shared && parsed.operation.type === "delete") {
@@ -4351,8 +4646,6 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			if (shared && (parsed.operation.type === "attention" || parsed.operation.type === "lifecycle")) {
 				if (parsed.operation.type === "lifecycle") await shared.setLifecycle(parsed.operation.reviewId, parsed.operation.state);
 				else await shared.setAttention(parsed.operation.reviewId);
-				const reviewId = parsed.operation.reviewId;
-				if (shared.get(reviewId).snapshot.trashedAt) ask?.threads.closeDeletedReviews((id) => id === reviewId);
 				return context.json({
 					reviewId: parsed.operation.reviewId,
 					version: shared.get(parsed.operation.reviewId).snapshot.version,
@@ -4361,8 +4654,12 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 			}
 			throw new ReviewInputError("Shared reviews are read-only.", 409);
 		}
-		const result = await store.execute(input);
-		if (result.deleted || result.lifecycle && store.read(result.reviewId).trashedAt) ask?.threads.closeDeletedReviews((id) => id === result.reviewId);
+		const threadId = remoteCaller(context) ? void 0 : context.req.header("x-review-thread")?.trim() || void 0;
+		const author = !remoteCaller(context) && context.req.header("x-review-person") !== void 0 ? { kind: "person" } : {
+			kind: "agent",
+			...threadId && { threadId }
+		};
+		const result = await store.execute(input, void 0, author);
 		if (input.operation.type === "edit" && data && !result.deleted) {
 			const { quotes, unquoted } = await anchorQuotes(result.version > 0 ? store.read(result.reviewId, result.version - 1) : void 0, store.read(result.reviewId, result.version), async (pins, side, file) => (await data.file(pins, side, file)).text);
 			return context.json({
@@ -4382,7 +4679,6 @@ function createReviewApi(store, data, open, shared, capabilities = () => ({
 		if (input.operation.type !== "create") return context.json(result);
 		if (result.created !== false) hooks.onReviewCreated?.({
 			reviewId: result.reviewId,
-			kind: input.operation.kind === "scratchpad" ? "scratchpad" : "review",
 			blocks: store.read(result.reviewId).document.length,
 			...reviewRequestOrigin(context.req.raw.headers)
 		});
@@ -4446,11 +4742,102 @@ async function locateRepositories(body, register) {
 		}
 	};
 }
+/** Turns an agent's pullRequest target into what the store takes: a create
+* from pullRequestUrl, or for set_target the PR's resolved commits. */
+async function pullRequestTargets(body, register, resolve, board) {
+	const target = z.strictObject({
+		kind: z.literal("pullRequest"),
+		repositoryPath: z.string().min(1),
+		pullRequest: z.union([z.string().min(1), z.number().int().positive()])
+	});
+	const located = z.looseObject({ operation: z.discriminatedUnion("type", [z.looseObject({
+		type: z.literal("create"),
+		target
+	}), z.strictObject({
+		type: z.literal("set_target"),
+		reviewId: z.string().min(1),
+		target
+	})]) }).safeParse(body);
+	if (!located.success) return body;
+	const { target: pullRequest, ...operation } = located.data.operation;
+	if (operation.type === "set_target") board(operation.reviewId);
+	const { id: repositoryId } = await register(pullRequest.repositoryPath);
+	const url = await pullRequestAt(pullRequest.repositoryPath, pullRequest.pullRequest);
+	if (operation.type === "create") return {
+		...located.data,
+		operation: {
+			...operation,
+			pullRequestUrl: url,
+			repositoryId
+		}
+	};
+	return {
+		...located.data,
+		operation: {
+			...operation,
+			target: (await resolve(url, repositoryId)).target,
+			pullRequestUrl: url
+		}
+	};
+}
+/** A PR's URL: as given, or its number on the checkout's GitHub repository. */
+async function pullRequestAt(repositoryPath, pullRequest) {
+	if (isStringValue(pullRequest) && !/^\d+$/.test(pullRequest)) return pullRequest;
+	const slug = (await resolveRepoContext(repositoryPath))?.githubSlug;
+	if (!slug) throw new ReviewInputError("This checkout has no GitHub remote to find the PR number in; pass the PR's URL.");
+	return `https://github.com/${slug}/pull/${pullRequest}`;
+}
+/** A pins object as an edit spells it: commits, with no other fields. A
+* diagram may key its own data `pins`, and that is left alone. */
+/** Pins as an agent writes them: the board's repository is the host's to
+* add. */
+const agentPinsSchema = z.strictObject({
+	head: z.string().min(1),
+	base: z.string().min(1).optional()
+});
+/** An object an agent meant as pins: one naming a head, base or repository.
+* Content may have a field called `pins` that is nothing of the kind. */
+const meantAsPins = (value) => isJsonObject(value) && [
+	"head",
+	"base",
+	"repositoryId"
+].some((key) => key in value);
+/** Sets every pins object in an edit to the board's own repository. */
+function withBoardRepository(body, board) {
+	const located = z.looseObject({ operation: z.looseObject({
+		type: z.enum(["edit", "lens_edit"]),
+		reviewId: z.string(),
+		edit: z.json()
+	}) }).safeParse(body);
+	if (!located.success) return body;
+	const snapshot = board(located.data.operation.reviewId);
+	const repositoryId = snapshot ? boardRepositoryId(snapshot) : void 0;
+	const edit = JSON.parse(JSON.stringify(located.data.operation.edit), (key, value) => {
+		if (key !== "pins" || !meantAsPins(value)) return value;
+		const { repositoryId: _ignored, ...written } = value;
+		const pins = agentPinsSchema.safeParse(written);
+		if (!pins.success) throw new ReviewInputError(`Write pins as {head, base?}, each a commit: ${pins.error.issues.map((issue) => `pins.${issue.path.join(".")}: ${issue.message}`).join("; ")}.`);
+		if (!repositoryId) throw new ReviewInputError("This whiteboard has no repository for its pins to name commits of.");
+		return {
+			...pins.data,
+			repositoryId
+		};
+	});
+	return {
+		...located.data,
+		operation: {
+			...located.data.operation,
+			edit
+		}
+	};
+}
 function watch(lines, subscribe) {
 	let stop = () => {};
+	let missed = false;
 	const encoder = new TextEncoder();
 	const send = (controller) => {
-		if (controller.desiredSize === null || controller.desiredSize <= 0) return;
+		missed = controller.desiredSize === null || controller.desiredSize <= 0;
+		if (missed) return;
 		try {
 			const pending = lines();
 			if (pending.length) controller.enqueue(encoder.encode(pending.join("\n") + "\n"));
@@ -4472,7 +4859,9 @@ function watch(lines, subscribe) {
 			});
 			send(controller);
 		},
-		pull: send,
+		pull(controller) {
+			if (missed) send(controller);
+		},
 		cancel() {
 			stop();
 		}
@@ -4614,7 +5003,7 @@ function createWhiteboardCore(input) {
 		if (result.deleted || result.lifecycle) closeDeletedThreads();
 	});
 	const stopShared = askThreads && shared?.subscribe(closeDeletedThreads);
-	const api = createReviewApi(store, data, callbacks.open, shared, callbacks.capabilities, input.scratchpad, () => traceMachineEnabled(), input.status, input.hooks, askThreads && {
+	const api = createReviewApi(store, data, callbacks.open, shared, callbacks.capabilities, () => traceMachineEnabled(), input.status, input.hooks, askThreads && {
 		threads: askThreads,
 		agents: async () => detectAskAgents(await ask?.env)
 	});
@@ -4903,7 +5292,6 @@ async function serve(input) {
 		token: discovery.token,
 		instanceId: discovery.instanceId,
 		softwareMapEnabled: input.softwareMapEnabled,
-		scratchpad: () => false,
 		status: () => ({
 			key: "headless",
 			home: input.stateDir