@dev.fast/whiteboard 0.3.5-preview.20261021.131 → 0.3.5-preview.20261022.134

package/dist/{account-alias-CisiYUZT.js → account-alias-2yTAxoBx.js}

@@ -1,10 +1,11 @@
 import { n as isJsonObject } from "./src-X9phtB2j.js";
-import { E as ReviewCliInstallStampSchema } from "./src-DYZLCUP_.js";
-import { C as disableTraceMachine, E as traceMachineStatus, G as listTraceRepositoryRoots, K as traceRepositoryStatus, Q as removeAgentTraceHook, S as configureTraceMachine, T as traceMachineEnabled, U as disableAllTraceRepositories, W as enableTraceRepository, X as describeTraceHookOwners, Y as AGENT_TRACE_HOOK_AGENTS, Z as installHarnessHooks, at as readStoreAuth, n as reviewDesktopStateDir, nt as traceScope, ut as StoreClient } from "./review-home-paths-BwH08ihj.js";
+import { E as ReviewCliInstallStampSchema } from "./src-DYHVzX3b.js";
+import { G as removeAgentTraceHook, H as AGENT_TRACE_HOOK_AGENTS, I as disableAllTraceRepositories, L as enableTraceRepository, Q as readStoreAuth, R as listTraceRepositoryRoots, U as describeTraceHookOwners, W as installHarnessHooks, Y as traceScope, g as disableTraceMachine, h as configureTraceMachine, rt as StoreClient, v as traceMachineEnabled, y as traceMachineStatus, z as traceRepositoryStatus } from "./src-Z1x4-Qmb.js";
 import { I as writeFileAtomicAsync, L as writePrivateJsonAtomic, N as devReviewHome, j as withFileLock } from "./s3-config-CjcLyFV5.js";
-import { i as readReviewPackageVersion } from "./package-paths-BkeQsdaw.js";
+import { i as readReviewPackageVersion } from "./package-paths-BeYHYjeR.js";
+import { n as reviewDesktopStateDir } from "./review-home-paths-CG-sb9Cw.js";
 import { n as isFile, t as isDirectory } from "./fs-utils-BMPLt0cr.js";
-import { c as findExecutable, s as executableCommand } from "./fuzzy-match-D_x3wumC.js";
+import { c as findExecutable, s as executableCommand } from "./fuzzy-match-CfSxqzBF.js";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
 import { access, chmod, lstat, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
@@ -821,7 +822,7 @@ async function resyncCliInstallUnlocked(input) {
 	const chunks = [];
 	let shimPath;
 	let userPath = stamp.userPath;
-	if (stamp.shimPath && !stamp.commandDisabled) {
+	if (stamp.shimPath) {
 		const installed = await installShim(input, chunks);
 		if (installed.code !== 0) return installed;
 		shimPath = installed.shimPath;
@@ -886,7 +887,6 @@ async function applyCliInstallUnlocked(input) {
 	};
 	const stampShimPath = shimPath ?? (granted ? previous.shimPath : void 0);
 	if (stampShimPath) stamp.shimPath = stampShimPath;
-	if (granted && previous.commandDisabled && input.shim !== true) stamp.commandDisabled = true;
 	if (input.trace !== void 0 || granted && previous.traceManaged) stamp.traceManaged = true;
 	const stampUserPath = userPath ?? (granted && !shimPath ? previous.userPath : void 0);
 	if (stampUserPath) stamp.userPath = stampUserPath;
@@ -1053,7 +1053,6 @@ async function removeCliInstallUnlocked(input) {
 		};
 		if (previous.fingerprint) stamp.fingerprint = previous.fingerprint;
 		if (!input.shim && previous.shimPath) stamp.shimPath = previous.shimPath;
-		if (input.shim || previous.commandDisabled) stamp.commandDisabled = true;
 		if (!input.trace && previous.traceManaged) stamp.traceManaged = true;
 		if (!input.shim && previous.userPath) stamp.userPath = previous.userPath;
 		await writeCurrentStamp(env, stamp);

package/dist/{agent-cli-TJ7_5_B3.js → agent-cli-DpSj5jCW.js}

@@ -1,12 +1,13 @@
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import { T as traceMachineEnabled } from "./review-home-paths-BwH08ihj.js";
-import { a as toolResultText, i as connectReviewInstance, s as ReviewApiError } from "./agent-client-H53ajvrm.js";
+import { v as traceMachineEnabled } from "./src-Z1x4-Qmb.js";
+import { a as toolResultText, i as connectReviewInstance, s as ReviewApiError } from "./agent-client-Dc0vHFJt.js";
 import { N as devReviewHome } from "./s3-config-CjcLyFV5.js";
-import { n as readBuildCommit } from "./package-paths-BkeQsdaw.js";
-import { b as selectReviewInstance, u as REVIEW_INSTANCE_ENV } from "./server-discovery-DeVTdcqK.js";
-import { n as reviewSessionAgent } from "./review-telemetry-AZ0imsmJ.js";
-import { a as REVIEW_VIA_HEADER, i as REVIEW_THREAD_HEADER, n as REVIEW_AGENT_HEADER, t as ASK_THREAD_ENV } from "./request-origin-icXPv6jh.js";
-import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-CQhyLht3.js";
+import { n as readBuildCommit } from "./package-paths-BeYHYjeR.js";
+import "./review-home-paths-CG-sb9Cw.js";
+import { b as selectReviewInstance, u as REVIEW_INSTANCE_ENV } from "./server-discovery-DKLIOgg3.js";
+import { n as reviewSessionAgent } from "./review-telemetry-BM-_KdLi.js";
+import { a as REVIEW_VIA_HEADER, i as REVIEW_THREAD_HEADER, n as REVIEW_AGENT_HEADER, t as ASK_THREAD_ENV } from "./request-origin-CNSLVn7x.js";
+import { i as publicTool, n as RECOVERY, r as callPublicTool, t as toolFailure } from "./tool-failure-C1L1vJyz.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
 //#region src/review-api/install-update.ts
@@ -43,7 +44,7 @@ async function runReviewAgentCli(input) {
 			[REVIEW_THREAD_HEADER, thread ?? ""]
 		]);
 		if (mode === "mcp") {
-			const { serveReviewMcp } = await import("./mcp-cBtzXsmN.js");
+			const { serveReviewMcp } = await import("./mcp-IkZ0jBxU.js");
 			exitOnInstallUpdate(input.stderr);
 			await serveReviewMcp(async (key, agentKind) => {
 				const connected = await connectReviewInstance(key ? {

package/dist/agent-cli-a7X9Th1U.js

@@ -0,0 +1,2 @@
+import { n as runReviewAgentCli } from "./agent-cli-DpSj5jCW.js";
+export { runReviewAgentCli };

package/dist/{agent-client-H53ajvrm.js → agent-client-Dc0vHFJt.js}

@@ -1,7 +1,7 @@
 import { d as isBooleanValue, f as isNumberValue, m as isStringValue, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-DYZLCUP_.js";
+import "./src-DYHVzX3b.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, s as reviewServerIsHealthy, y as reviewInstanceUnavailable } from "./server-discovery-DeVTdcqK.js";
+import { b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, s as reviewServerIsHealthy, y as reviewInstanceUnavailable } from "./server-discovery-DKLIOgg3.js";
 //#region ../review-protocol/src/review-api-client.ts
 const defaultRequest = (url, init) => fetch(url, init);
 /** A non-2xx reply; the status tells a caller whether retrying can help. */
@@ -259,7 +259,7 @@ async function connectReviewInstance(env = process.env, headers = {}, options =
 	const selection = await selectReviewInstance({ env });
 	const discovery = healthyReviewInstance(selection);
 	if (!discovery) {
-		const { ensureServerWithoutDesktop } = await import("./background-server-BSYXD9au.js");
+		const { ensureServerWithoutDesktop } = await import("./background-server-DyWnPJyZ.js");
 		const server = await ensureServerWithoutDesktop({
 			selection,
 			env,

package/dist/{authoring-tools-BCquUsB3.js → authoring-tools-BBksBplC.js}

@@ -1,8 +1,8 @@
 import { n as isJsonObject } from "./src-X9phtB2j.js";
-import { c as activityBeginSchema, l as activityEndSchema, n as uploadSchema, r as commandSchema, u as activityUpdateSchema } from "./local-data-mbCb1HDH.js";
-import { C as pathTargetSchema, D as publishedEditSchema } from "./stored-document-migration-B29lve9-.js";
+import { c as activityBeginSchema, l as activityEndSchema, n as uploadSchema, r as commandSchema, u as activityUpdateSchema } from "./local-data-m4BCbtSA.js";
+import { I as publishedEditSchema, M as pathTargetSchema } from "./stored-document-migration-B-lTO-_P.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
-import { t as findReviewPackageRoot } from "./package-paths-BkeQsdaw.js";
+import { t as findReviewPackageRoot } from "./package-paths-BeYHYjeR.js";
 import { z } from "zod";
 import { readFile } from "node:fs/promises";
 import path from "node:path";

package/dist/{background-server-Xom8cA_u.js → background-server-DHWHzpo5.js}

@@ -1,8 +1,8 @@
-import "./review-home-paths-BwH08ihj.js";
+import "./src-Z1x4-Qmb.js";
 import { D as liveLockOwner, k as processIsAlive } from "./s3-config-CjcLyFV5.js";
-import { t as findReviewPackageRoot } from "./package-paths-BkeQsdaw.js";
-import { a as readReviewServerHealth, c as reviewServerStateDir, i as readReviewServerDiscovery, n as desktopOwnsHome, p as desktopUsesHome, r as headlessServerLockPath } from "./server-discovery-DeVTdcqK.js";
-import { t as desktopApplicationInstalled } from "./review-app-launcher-DZvG5ZAh.js";
+import { t as findReviewPackageRoot } from "./package-paths-BeYHYjeR.js";
+import { a as readReviewServerHealth, c as reviewServerStateDir, i as readReviewServerDiscovery, n as desktopOwnsHome, p as desktopUsesHome, r as headlessServerLockPath } from "./server-discovery-DKLIOgg3.js";
+import { t as desktopApplicationInstalled } from "./review-app-launcher-BZAnR8Vp.js";
 import { mkdir, open, readFile, realpath, stat } from "node:fs/promises";
 import path from "node:path";
 import { spawn } from "node:child_process";

package/dist/{background-server-BSYXD9au.js → background-server-DyWnPJyZ.js}

@@ -1,2 +1,2 @@
-import { a as headlessServerOwner, c as stopBackgroundServer, i as ensureServerWithoutDesktop, r as ensureBackgroundServer } from "./background-server-Xom8cA_u.js";
+import { a as headlessServerOwner, c as stopBackgroundServer, i as ensureServerWithoutDesktop, r as ensureBackgroundServer } from "./background-server-DHWHzpo5.js";
 export { ensureBackgroundServer, ensureServerWithoutDesktop, headlessServerOwner, stopBackgroundServer };

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"0.3.5-preview.20261021.131","commit":"6bf7b672e0c4d566b582d555044a624620c6311f","dirty":true,"builtAt":"2026-10-21T16:51:06.481Z"}
+{"version":"0.3.5-preview.20261022.134","commit":"e6b58d262b3ad613be4acc3a53b79c8720ba6a0b","dirty":true,"builtAt":"2026-10-22T19:59:15.711Z"}

package/dist/{cli-BOnV4cCh.js → cli-qZomwJmK.js}

@@ -1,4 +1,4 @@
-import { r as connectReviewApi } from "./agent-client-H53ajvrm.js";
+import { r as connectReviewApi } from "./agent-client-Dc0vHFJt.js";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
 //#region src/sharing/cli.ts

package/dist/{cli-runner-cRY5NOno.js → cli-runner-D1PRTICL.js}

@@ -1,26 +1,27 @@
-import { D as __commonJSMin, E as setLocalVcsCommandObserver, O as __require, k as __toESM } from "./src-DtfSndqS.js";
+import { D as __commonJSMin, E as setLocalVcsCommandObserver, O as __require, k as __toESM } from "./src-X9ZebeOD.js";
 import { c as jsonString, n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import { S as REVIEW_REMOTE_ATTACH_END, b as REVIEW_REMOTE_AGENT_IDS, h as REVIEW_CLI_INSTALL_TARGET_LABELS, l as boardTitle, x as REVIEW_REMOTE_ATTACH_BEGIN } from "./src-DYZLCUP_.js";
-import { $ as resolveTraceCommand, A as runTraceDeny, E as traceMachineStatus, F as describeSelection, H as resolveTraceRepositoryTarget, J as HOSTED_CAPTURE_SCOPE_DESCRIPTION, K as traceRepositoryStatus, L as loadS3TraceStorage, M as runTraceSessions, N as runTraceStoreDelete, P as runTraceStoreInfo, T as traceMachineEnabled, V as requireTraceConsent, _ as runTraceRepair, at as readStoreAuth, b as runTraceGitHook, c as registerTraceCommands, ct as runStoreWhoami, d as runTraceList$1, dt as withStoreAuthorization, f as runTracePull$1, ft as emitJsonEvent, g as runTraceInstallMachine, h as runTraceEnable, ht as jsonRequestedInArgv, j as runTraceOnboard, k as runTraceAllow, l as resolveTraceReadStorage, lt as StoreApiError, m as runTraceDisable, mt as humanStream, nt as traceScope, ot as runStoreLogin, p as runTraceShow, pt as failWithJsonError, q as readTraceUserConfig, rt as DEFAULT_STORE_ORIGIN, st as runStoreLogout, tt as traceHomeDir, u as runTraceBlame, ut as StoreClient, v as runTraceStatus, w as readLegacyCaptureSettings, x as runTraceHook, y as runTraceSync, z as selectTraceStorage } from "./review-home-paths-BwH08ihj.js";
-import { o as ReviewApiClient, s as ReviewApiError } from "./agent-client-H53ajvrm.js";
-import { t as resolveReviewRoot } from "./runtime-CF4JXdb8.js";
+import { S as REVIEW_REMOTE_ATTACH_END, b as REVIEW_REMOTE_AGENT_IDS, h as REVIEW_CLI_INSTALL_TARGET_LABELS, l as boardTitle, x as REVIEW_REMOTE_ATTACH_BEGIN } from "./src-DYHVzX3b.js";
+import { $ as runStoreLogin, A as loadS3TraceStorage, B as readTraceUserConfig, C as runTraceDeny, D as runTraceStoreInfo, E as runTraceStoreDelete, F as resolveTraceRepositoryTarget, J as traceHomeDir, K as resolveTraceCommand, M as selectTraceStorage, O as describeSelection, P as requireTraceConsent, Q as readStoreAuth, S as runTraceAllow, T as runTraceSessions, V as HOSTED_CAPTURE_SCOPE_DESCRIPTION, X as DEFAULT_STORE_ORIGIN, Y as traceScope, _ as readLegacyCaptureSettings, a as runTracePull$1, at as emitJsonEvent, c as runTraceEnable, ct as jsonRequestedInArgv, d as runTraceStatus, et as runStoreLogout, f as runTraceSync, i as runTraceList$1, it as withStoreAuthorization, l as runTraceInstallMachine, m as runTraceHook, n as resolveTraceReadStorage, nt as StoreApiError, o as runTraceShow, ot as failWithJsonError, p as runTraceGitHook, r as runTraceBlame, rt as StoreClient, s as runTraceDisable, st as humanStream, t as registerTraceCommands, tt as runStoreWhoami, u as runTraceRepair, v as traceMachineEnabled, w as runTraceOnboard, y as traceMachineStatus, z as traceRepositoryStatus } from "./src-Z1x4-Qmb.js";
+import { o as ReviewApiClient, s as ReviewApiError } from "./agent-client-Dc0vHFJt.js";
 import { C as s3ProfileSchema, E as writeTraceConfigFile, N as devReviewHome, P as normalizeStoreOrigin, S as readTraceConfigFile, T as sameS3Profile, _ as emptyTraceConfig, c as resolveS3Setup, g as currentStore, h as TraceConfigurationError, i as isS3MockMode, n as clearTraceEnvCache, o as readTraceEnvFile, p as traceSettingsPath, w as s3Store } from "./s3-config-CjcLyFV5.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
-import { i as readReviewPackageVersion, r as readBuildInfo, t as findReviewPackageRoot } from "./package-paths-BkeQsdaw.js";
-import { a as readReviewServerHealth, b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, f as clearDefaultReviewInstance, g as requireHealthyReviewDesktop, h as readDefaultReviewInstance, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, p as desktopUsesHome, t as DESKTOP_TAKEOVER_SIGNAL, u as REVIEW_INSTANCE_ENV, x as writeDefaultReviewInstance, y as reviewInstanceUnavailable } from "./server-discovery-DeVTdcqK.js";
-import { t as ReviewTelemetry } from "./review-telemetry-AZ0imsmJ.js";
-import { t as fuzzyRank } from "./fuzzy-match-D_x3wumC.js";
-import { _ as isInstallTarget, a as isOwnedShim, f as windowsInstallerCommand, g as ALL_INSTALL_TARGETS, h as detectConnectAgents, m as connectAgent, o as pathShimPath, p as scanLegacySkills, t as aliasInstallationToAccount, v as connectPrompts } from "./account-alias-CisiYUZT.js";
-import { n as focusReviewDesktop, r as runReviewAppLaunch } from "./review-app-launcher-DZvG5ZAh.js";
-import { t as reviewAgentCliHelp } from "./agent-cli-TJ7_5_B3.js";
+import { i as readReviewPackageVersion, r as readBuildInfo, t as findReviewPackageRoot } from "./package-paths-BeYHYjeR.js";
+import { t as resolveReviewRoot } from "./runtime-C6_1K-3Z.js";
+import "./review-home-paths-CG-sb9Cw.js";
+import { a as readReviewServerHealth, b as selectReviewInstance, c as reviewServerStateDir, d as ReviewInstanceUnavailableError, f as clearDefaultReviewInstance, g as requireHealthyReviewDesktop, h as readDefaultReviewInstance, i as readReviewServerDiscovery, l as serverNotReady, m as healthyReviewInstance, p as desktopUsesHome, t as DESKTOP_TAKEOVER_SIGNAL, u as REVIEW_INSTANCE_ENV, x as writeDefaultReviewInstance, y as reviewInstanceUnavailable } from "./server-discovery-DKLIOgg3.js";
+import { t as ReviewTelemetry } from "./review-telemetry-BM-_KdLi.js";
+import { t as fuzzyRank } from "./fuzzy-match-CfSxqzBF.js";
+import { _ as isInstallTarget, a as isOwnedShim, f as windowsInstallerCommand, g as ALL_INSTALL_TARGETS, h as detectConnectAgents, m as connectAgent, o as pathShimPath, p as scanLegacySkills, t as aliasInstallationToAccount, v as connectPrompts } from "./account-alias-2yTAxoBx.js";
+import { n as focusReviewDesktop, r as runReviewAppLaunch } from "./review-app-launcher-BZAnR8Vp.js";
+import { t as reviewAgentCliHelp } from "./agent-cli-DpSj5jCW.js";
 import { existsSync, mkdirSync, renameSync, writeFileSync } from "node:fs";
 import { realpath } from "node:fs/promises";
 import path from "node:path";
-import os from "node:os";
-import { fileURLToPath } from "node:url";
 import { Writable } from "node:stream";
 import { AsyncLocalStorage } from "node:async_hooks";
+import os from "node:os";
 import { Argument, Command, CommanderError, Option } from "commander";
+import { fileURLToPath } from "node:url";
 import { emitKeypressEvents } from "node:readline";
 import { createInterface as createInterface$1 } from "node:readline/promises";
 import pino from "pino";
@@ -4333,7 +4334,7 @@ async function runReviewCli(input) {
 		if (!Number.isInteger(port) || port < 0 || port > 65535) throw new ReviewCliUsageError("--port must be an integer between 0 and 65535.");
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
 		if (options.detach) {
-			const { ensureBackgroundServer } = await import("./background-server-BSYXD9au.js");
+			const { ensureBackgroundServer } = await import("./background-server-DyWnPJyZ.js");
 			const { discovery, started } = await ensureBackgroundServer({
 				stateDir,
 				env,
@@ -4355,7 +4356,7 @@ async function runReviewCli(input) {
 		process.once("SIGINT", stop);
 		process.once("SIGTERM", stop);
 		process.once(DESKTOP_TAKEOVER_SIGNAL, takeover);
-		const { HeadlessServerBusyError, runHeadlessServer } = await import("./headless-host-BEe-aFtB.js");
+		const { HeadlessServerBusyError, runHeadlessServer } = await import("./headless-host-Ck5-JjGV.js");
 		try {
 			await runHeadlessServer({
 				stateDir,
@@ -4392,7 +4393,7 @@ async function runReviewCli(input) {
 	configureJsonOutput(serverCommand.command("stop").description("Stop a background server started by --detach, the CLI, or Desktop").option("--state-dir <path>", "directory selected when starting the server"), "plain").action(async (_options, command) => {
 		const options = command.optsWithGlobals();
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
-		const { headlessServerOwner, stopBackgroundServer } = await import("./background-server-BSYXD9au.js");
+		const { headlessServerOwner, stopBackgroundServer } = await import("./background-server-DyWnPJyZ.js");
 		const owner = await headlessServerOwner(stateDir);
 		const discovery = await readReviewServerDiscovery(stateDir);
 		if (owner === void 0) {
@@ -4420,7 +4421,7 @@ async function runReviewCli(input) {
 		if (!existsSync(path.join(stateDir, "review-api.db"))) throw new Error(`No saved reviews in ${stateDir}, so there is no server id to reset. Check --state-dir.`);
 		const inUse = `A Whiteboard server is using ${stateDir}. Stop it first, then run whiteboard server reset-id again.`;
 		if (await desktopUsesHome(stateDir, env)) return refuse(inUse, options.json);
-		const [{ openReviewProfile }, { withHeadlessServerLock }] = await Promise.all([import("./profile-Dbyidrcr.js"), import("./headless-host-BEe-aFtB.js")]);
+		const [{ openReviewProfile }, { withHeadlessServerLock }] = await Promise.all([import("./profile-BfY9lECc.js"), import("./headless-host-Ck5-JjGV.js")]);
 		const reset = await withHeadlessServerLock(await realpath(stateDir), async () => {
 			const local = await openReviewProfile(stateDir, { manageWorkspaces: false });
 			try {
@@ -4442,7 +4443,7 @@ async function runReviewCli(input) {
 	configureJsonOutput(remote.command("attach").description("Start a background server if none is healthy and report how to reach it").option("--state-dir <path>", "directory for saved reviews and server discovery").option("--groups <groups>", "comma-separated optional extension groups the Desktop has enabled, such as go").option("--replace", "stop a running server of another version that the CLI or Desktop started, and start this one"), "plain").action(async (_options, command) => {
 		const options = command.optsWithGlobals();
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
-		const { remoteAttach } = await import("./remote-attach-BeKuMm_x.js");
+		const { remoteAttach } = await import("./remote-attach-DSGpTOJ4.js");
 		let attach;
 		try {
 			attach = await remoteAttach({
@@ -4469,7 +4470,7 @@ async function runReviewCli(input) {
 	});
 	configureJsonOutput(remote.command("extensions").description("Language extensions for the language server on a remote").command("ensure").description("Download the curated extensions for this machine and list them for the language server").option("--groups <groups>", "comma-separated optional extension groups the Desktop has enabled, such as go"), "plain").action(async (_options, command) => {
 		const { json, groups } = command.optsWithGlobals();
-		const { ensureRemoteExtensions } = await import("./remote-extensions-CX2fAec1.js");
+		const { ensureRemoteExtensions } = await import("./remote-extensions-WtJO7pkb.js");
 		const result = await ensureRemoteExtensions({
 			env,
 			groups: groups?.split(",").map((group) => group.trim())
@@ -4484,7 +4485,7 @@ async function runReviewCli(input) {
 	configureJsonOutput(remote.command("uninstall").description("Remove what Whiteboard Desktop installed on this host, stopping a server it started").addOption(new Option("--keep-reviews", "leave the saved reviews in place").conflicts("deleteReviews")).addOption(new Option("--delete-reviews", "also delete the saved reviews")).option("--state-dir <path>", "directory for saved reviews and server discovery"), "plain").action(async (_options, command) => {
 		const options = command.optsWithGlobals();
 		const stateDir = reviewServerStateDir(authoringEnv(options.stateDir));
-		const { remoteUninstall } = await import("./remote-uninstall-Y3S0YmJs.js");
+		const { remoteUninstall } = await import("./remote-uninstall-Dp2o3qz0.js");
 		let deleteReviews = options.deleteReviews ? true : options.keepReviews ? false : void 0;
 		if (deleteReviews === void 0 && !options.json && input.stdin?.isTTY) {
 			const prompt = createInterface$1({
@@ -4706,14 +4707,14 @@ async function runReviewCli(input) {
 		command.showHelpAfterError(false).error("Markdown review migration is no longer supported. Ask your agent to migrate your old Whiteboard reviews.");
 	});
 	configureJsonOutput(configureJsonOutput(program.command("share").description("Upload an immutable review snapshot and return its share link"), "plain").option("--review <id>", "review ID").option("--version <number>", "Saved version to share").option("--preview", "Open the share link in Whiteboard Preview by default").option("--request-id <uuid>", "Reuse this ID when retrying the same immutable upload").action(async (options) => {
-		const { runShareCli } = await import("./cli-BOnV4cCh.js");
+		const { runShareCli } = await import("./cli-qZomwJmK.js");
 		state.exitCode = await runShareCli({
 			...input,
 			...options,
 			env: authoringEnv()
 		});
 	}).command("revoke <share-id>").description("Revoke future downloads of a share"), "plain").action(async (shareId, options) => {
-		const { runShareCli } = await import("./cli-BOnV4cCh.js");
+		const { runShareCli } = await import("./cli-qZomwJmK.js");
 		state.exitCode = await runShareCli({
 			...input,
 			...options,
@@ -4794,7 +4795,7 @@ async function runReviewCli(input) {
 		return commands;
 	} });
 	for (const [name, description] of [["api", "Call a JSON review authoring tool on the running server"], ["mcp", "Serve the JSON review authoring tools over stdio MCP"]]) configureOutput(program.command(name).description(description).argument("[args...]", "tool name and JSON input").allowUnknownOption().allowExcessArguments().helpOption(false).passThroughOptions().addHelpText("after", `\n${reviewAgentCliHelp}`), "plain").action(async (args) => {
-		const { runReviewAgentCli } = await import("./agent-cli-BglNRDZN.js");
+		const { runReviewAgentCli } = await import("./agent-cli-a7X9Th1U.js");
 		state.exitCode = await runReviewAgentCli({
 			...input,
 			env: authoringEnv(),

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { a as jsonNumber, c as jsonString, o as jsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-DYZLCUP_.js";
+import "./src-DYHVzX3b.js";
 import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -17,7 +17,7 @@ async function runCli(effectivePath) {
 `);
 		return 1;
 	}
-	const { runReviewCli } = await import("./cli-runner-cRY5NOno.js");
+	const { runReviewCli } = await import("./cli-runner-D1PRTICL.js");
 	return runReviewCli({
 		argv,
 		cliPaths: {

package/dist/{client-UH1bEG7Z.js → client-CiB4MRlo.js}

@@ -1,8 +1,8 @@
-import { f as gitAt } from "./src-DtfSndqS.js";
+import { f as gitAt } from "./src-X9ZebeOD.js";
 import { n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-DYZLCUP_.js";
-import { f as sourceAnchors } from "./lens-selection-BxPk53c8.js";
-import { $ as parseMarkdown, A as resourceReferences, E as pinsSchema, G as lensSelections, I as sourceReferences, O as readsAtBoardPins, R as checkReferences, W as lensSchema, Z as markdownNodes, _ as boardRepositoryId, c as normalizedSoftwareRelationshipSchema, f as anchorPins, k as resourceReference, l as traceSchema, n as migrateStoredDocument, r as migrateStoredLenses, s as normalizedSoftwareElementSchema, t as liftFileLenses, u as textIncludesQuote, x as elements, y as documentSchema } from "./stored-document-migration-B29lve9-.js";
+import "./src-DYHVzX3b.js";
+import { f as sourceAnchors } from "./lens-selection-9byzEgvU.js";
+import { $ as lensSchema, A as elements, E as boardRepositoryId, F as pinsSchema, G as sourceReferences, L as readsAtBoardPins, O as documentSchema, R as resourceReference, c as traceSchema, ct as parseMarkdown, et as lensSelections, n as migrateStoredDocument, ot as markdownNodes, q as checkReferences, r as migrateStoredLenses, s as softwareModelDataSchema, t as liftFileLenses, u as pullRequestUrl, x as anchorPins, y as textIncludesQuote, z as resourceReferences } from "./stored-document-migration-B-lTO-_P.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -484,7 +484,7 @@ const sharedSnapshotSchema = z.strictObject({
 		branch: z.string().optional(),
 		baseRef: z.string().optional(),
 		pullRequestNumber: z.number().int().positive().optional(),
-		pullRequestUrl: z.string().optional(),
+		pullRequestUrl: pullRequestUrl.optional(),
 		pullRequestTitle: z.string().optional(),
 		revision: z.string().optional()
 	}).optional()
@@ -494,11 +494,9 @@ const counts = z.strictObject({
 	additions: count,
 	deletions: count
 });
-const mapSchema = z.strictObject({
+const mapSchema = softwareModelDataSchema.extend({
 	commit: z.string().regex(COMMIT_ID),
 	side: z.enum(["base", "head"]),
-	elements: z.array(normalizedSoftwareElementSchema),
-	relationships: z.array(normalizedSoftwareRelationshipSchema),
 	countsByElementPath: z.record(z.string(), counts),
 	unmappedByElementPath: z.record(z.string(), counts.extend({ files: z.array(counts.extend({
 		file: z.string(),
@@ -1139,7 +1137,11 @@ var ShareClient = class {
 		if (!response.ok && response.status !== 412) throw new Error(`Object upload failed (${response.status}).`);
 	}
 	async create(bundle, requestId = randomUUID(), beforeUpload) {
-		validateShareBundle(bundle);
+		try {
+			validateShareBundle(bundle);
+		} catch (cause) {
+			throw new SharePreflightError(new Error("Whiteboard could not prepare this review for sharing. Please report this issue.", { cause }));
+		}
 		const manifestBytes = Buffer.from(JSON.stringify(bundle.manifest));
 		const created = createdSchema.parse(await this.api("/api/shares", "POST", {
 			requestId,

package/dist/{fuzzy-match-D_x3wumC.js → fuzzy-match-CfSxqzBF.js}

@@ -1,15 +1,15 @@
-import "./review-home-paths-BwH08ihj.js";
+import "./src-Z1x4-Qmb.js";
 import { N as devReviewHome } from "./s3-config-CjcLyFV5.js";
-import { n as askAgentIds } from "./thread-state-BPpvKFwQ.js";
-import { t as ASK_THREAD_ENV } from "./request-origin-icXPv6jh.js";
+import { n as askAgentIds } from "./thread-state-CO97FUqK.js";
+import { t as ASK_THREAD_ENV } from "./request-origin-CNSLVn7x.js";
 import { createRequire } from "node:module";
 import { constants } from "node:fs";
 import { access, chmod, mkdir, readFile, rename, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { Readable, Writable } from "node:stream";
 import { homedir } from "node:os";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
-import { Readable, Writable } from "node:stream";
 import { ndJsonStream } from "@agentclientprotocol/sdk";
 import fuzzysort from "fuzzysort";
 //#region src/ask/pi-mcp.ts

package/dist/{headless-host-BEe-aFtB.js → headless-host-Ck5-JjGV.js}

@@ -1,2 +1,2 @@
-import { i as withHeadlessServerLock, n as runHeadlessServer, r as takeOverServerHome, t as HeadlessServerBusyError } from "./headless-host-CEb5d-A0.js";
+import { i as withHeadlessServerLock, n as runHeadlessServer, r as takeOverServerHome, t as HeadlessServerBusyError } from "./headless-host-D9y2sBIj.js";
 export { HeadlessServerBusyError, runHeadlessServer, takeOverServerHome, withHeadlessServerLock };

package/dist/{headless-host-CEb5d-A0.js → headless-host-D9y2sBIj.js}

@@ -1,38 +1,39 @@
-import { b as resolveRepoContext, d as git, r as defaultBranch, w as runVcs } from "./src-DtfSndqS.js";
+import { b as resolveRepoContext, d as git, r as defaultBranch, w as runVcs } from "./src-X9ZebeOD.js";
 import { c as jsonString, m as isStringValue, n as isJsonObject, p as isObjectValue, u as parseJsonText } from "./src-X9phtB2j.js";
-import { a as sharedReviewId, c as verifyShareRepository, d as validateShareSources, f as StreamLimitError, h as shareIdSchema, l as exportShare, m as parseShareLink, n as ShareClient, p as readBoundedStream, r as SharePreflightError, s as readShareRepository, t as ShareAuthError, u as referenceCommits } from "./client-UH1bEG7Z.js";
-import { f as textualRows, h as diffrMissingError, i as inspectSnapshot, m as diffrExecutable, p as invalidateStructuralComparisons, r as commandSchema } from "./local-data-mbCb1HDH.js";
-import { N as reviewDiffrSummarizerInputSchema, O as ReviewFeedbackContactSchema, P as decodeStructuralDiffEvent, a as parseReviewVerbRequest, c as boardIconKind, i as parseReviewDesktopVerbResult, j as ReviewOnboardingRunRequestSchema, k as ReviewFeedbackSchema, l as boardTitle, m as REVIEW_CLIENT_REMOTE, p as REVIEW_CLIENT_HEADER, y as REVIEW_HOST_HEADER } from "./src-DYZLCUP_.js";
-import { B as TraceStorageDeniedError, D as listReviewTraceSessions, I as isTraceStorageConfigured, O as loadReviewAgentTrace, R as resolveTraceStorage, T as traceMachineEnabled, at as readStoreAuth, et as shellQuote, it as clearStoreAuth, ot as runStoreLogin, rt as DEFAULT_STORE_ORIGIN, z as selectTraceStorage } from "./review-home-paths-BwH08ihj.js";
-import { _ as scopedCoverage, h as emptyCoverage, i as anchorSelection, l as resolveDiffSelection, m as coverageSources, n as SelectionUnavailableError, o as comparisonKey, s as formatAnchor, u as selectionKey, v as subtractIntervals, y as unionIntervals } from "./lens-selection-BxPk53c8.js";
-import { B as stepSources, F as selectionReferences, G as lensSelections, J as fileLineRangeSchema, V as UNCATEGORIZED_LENS_ID, _ as boardRepositoryId, f as anchorPins, g as boardLinks, x as elements } from "./stored-document-migration-B29lve9-.js";
+import { a as sharedReviewId, c as verifyShareRepository, d as validateShareSources, f as StreamLimitError, h as shareIdSchema, l as exportShare, m as parseShareLink, n as ShareClient, p as readBoundedStream, r as SharePreflightError, s as readShareRepository, t as ShareAuthError, u as referenceCommits } from "./client-CiB4MRlo.js";
+import { d as textualRows, f as invalidateStructuralComparisons, i as inspectSnapshot, m as diffrMissingError, p as diffrExecutable, r as commandSchema } from "./local-data-m4BCbtSA.js";
+import { N as reviewDiffrSummarizerInputSchema, O as ReviewFeedbackContactSchema, P as decodeStructuralDiffEvent, a as parseReviewVerbRequest, c as boardIconKind, i as parseReviewDesktopVerbResult, j as ReviewOnboardingRunRequestSchema, k as ReviewFeedbackSchema, l as boardTitle, m as REVIEW_CLIENT_REMOTE, p as REVIEW_CLIENT_HEADER, y as REVIEW_HOST_HEADER } from "./src-DYHVzX3b.js";
+import { $ as runStoreLogin, M as selectTraceStorage, N as TraceStorageDeniedError, Q as readStoreAuth, X as DEFAULT_STORE_ORIGIN, Z as clearStoreAuth, b as listReviewTraceSessions, j as resolveTraceStorage, k as isTraceStorageConfigured, q as shellQuote, v as traceMachineEnabled, x as loadReviewAgentTrace } from "./src-Z1x4-Qmb.js";
+import { _ as scopedCoverage, h as emptyCoverage, i as anchorSelection, l as resolveDiffSelection, m as coverageSources, n as SelectionUnavailableError, o as comparisonKey, s as formatAnchor, u as selectionKey, v as subtractIntervals, y as unionIntervals } from "./lens-selection-9byzEgvU.js";
+import { A as elements, E as boardRepositoryId, T as boardLinks, W as selectionReferences, X as UNCATEGORIZED_LENS_ID, Y as stepSources, et as lensSelections, rt as fileLineRangeSchema, x as anchorPins } from "./stored-document-migration-B-lTO-_P.js";
 import { t as ReviewInputError } from "./input-error-OLgB_h31.js";
 import { A as processStartIdentity, L as writePrivateJsonAtomic, N as devReviewHome, h as TraceConfigurationError, i as isS3MockMode, j as withFileLock } from "./s3-config-CjcLyFV5.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
-import { i as readReviewPackageVersion, n as readBuildCommit, t as findReviewPackageRoot } from "./package-paths-BkeQsdaw.js";
-import { _ as reviewInstanceIdentity, n as desktopOwnsHome, o as reviewServerDiscoveryPath, p as desktopUsesHome, r as headlessServerLockPath, t as DESKTOP_TAKEOVER_SIGNAL } from "./server-discovery-DeVTdcqK.js";
-import { c as askPicksSchema, d as selectionMarkdown, l as askQuestionSchema, n as askAgentIds, r as askChoiceKinds, s as askPermissionsSchema, t as applyAskChange, u as AgentSelectionSchema } from "./thread-state-BPpvKFwQ.js";
-import { t as openReviewProfile } from "./profile-duqp5uPa.js";
-import { c as REVIEW_APP_SESSION_ID_HEADER, d as sanitizeUiTelemetryEvent, f as cleanTelemetryText, o as reviewRequestOrigin, r as REVIEW_PERSON_HEADER, s as BUNDLE_FRAME_PATTERN, t as ASK_THREAD_ENV, u as isReportableCleanedMessage } from "./request-origin-icXPv6jh.js";
-import { a as defaultAskPermissions, i as askAgents, l as launchAskAgent, n as askAgentSettings, o as detectAskAgents, r as askAgentTakesMcp, t as fuzzyRank } from "./fuzzy-match-D_x3wumC.js";
-import { a as inspectQuerySchema, i as renderInstructions, o as queryAnchor, r as instructionsQuerySchema, s as readQuerySchemas, t as authoringTools } from "./authoring-tools-BCquUsB3.js";
-import { a as headlessServerOwner, c as stopBackgroundServer, o as recordedBackgroundServer } from "./background-server-Xom8cA_u.js";
+import { i as readReviewPackageVersion, n as readBuildCommit, t as findReviewPackageRoot } from "./package-paths-BeYHYjeR.js";
+import "./review-home-paths-CG-sb9Cw.js";
+import { _ as reviewInstanceIdentity, n as desktopOwnsHome, o as reviewServerDiscoveryPath, p as desktopUsesHome, r as headlessServerLockPath, t as DESKTOP_TAKEOVER_SIGNAL } from "./server-discovery-DKLIOgg3.js";
+import { c as askPicksSchema, d as selectionMarkdown, l as askQuestionSchema, n as askAgentIds, r as askChoiceKinds, s as askPermissionsSchema, t as applyAskChange, u as AgentSelectionSchema } from "./thread-state-CO97FUqK.js";
+import { t as openReviewProfile } from "./profile-BfvRNmRc.js";
+import { c as REVIEW_APP_SESSION_ID_HEADER, d as sanitizeUiTelemetryEvent, f as cleanTelemetryText, o as reviewRequestOrigin, r as REVIEW_PERSON_HEADER, s as BUNDLE_FRAME_PATTERN, t as ASK_THREAD_ENV, u as isReportableCleanedMessage } from "./request-origin-CNSLVn7x.js";
+import { a as defaultAskPermissions, i as askAgents, l as launchAskAgent, n as askAgentSettings, o as detectAskAgents, r as askAgentTakesMcp, t as fuzzyRank } from "./fuzzy-match-CfSxqzBF.js";
+import { a as inspectQuerySchema, i as renderInstructions, o as queryAnchor, r as instructionsQuerySchema, s as readQuerySchemas, t as authoringTools } from "./authoring-tools-BBksBplC.js";
+import { a as headlessServerOwner, c as stopBackgroundServer, o as recordedBackgroundServer } from "./background-server-DHWHzpo5.js";
 import crypto$1, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { mkdir, mkdtemp, readFile, realpath, rm, stat, writeFile } from "node:fs/promises";
 import path, { join, posix } from "node:path";
+import { Writable } from "node:stream";
 import os, { tmpdir } from "node:os";
 import { execFile, spawn } from "node:child_process";
-import { promisify } from "node:util";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import { promisify } from "node:util";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { Writable } from "node:stream";
-import { createServer } from "node:http";
 import { PROTOCOL_VERSION, RequestError, client, methods } from "@agentclientprotocol/sdk";
 import { Hono } from "hono";
 import { stringify } from "smol-toml";
 import { getRequestListener } from "@hono/node-server";
+import { createServer } from "node:http";
 import { streamSSE } from "hono/streaming";
 import { once } from "node:events";
 //#region src/ask/protocol.ts
@@ -1857,8 +1858,21 @@ var ReviewServerError = class extends Error {
 };
 //#endregion
 //#region src/server/hono-http.ts
+const H2_FORBIDDEN_HEADERS = [
+	"connection",
+	"keep-alive",
+	"proxy-connection",
+	"transfer-encoding",
+	"upgrade"
+];
 function createNodeRequestListener(app) {
-	return getRequestListener(app.fetch);
+	return getRequestListener(async (request, env) => {
+		const response = await app.fetch(request, env);
+		if (env.incoming.httpVersionMajor !== 2 || !H2_FORBIDDEN_HEADERS.some((name) => response.headers.has(name))) return response;
+		const stripped = new Response(response.body, response);
+		for (const name of H2_FORBIDDEN_HEADERS) stripped.headers.delete(name);
+		return stripped;
+	});
 }
 function jsonResponse(body, status, options = {}) {
 	const headers = new Headers({ "content-type": options.contentType ?? "application/json; charset=utf-8" });
@@ -2623,6 +2637,27 @@ async function resolveReviewStackLayers(subject, reviews, options = {}) {
 		};
 	});
 }
+const STACKS_FRESH_MS = 6e4;
+const stackReads = /* @__PURE__ */ new WeakMap();
+function readGitHubStacks(runGitHubApi, host, repository, pullRequestNumber) {
+	const reads = stackReads.get(runGitHubApi) ?? /* @__PURE__ */ new Map();
+	stackReads.set(runGitHubApi, reads);
+	const keyOf = (number) => `${host}/${repository}#${number}`;
+	const cached = reads.get(keyOf(pullRequestNumber));
+	if (cached && Date.now() - cached.at < STACKS_FRESH_MS) return cached.stacks;
+	const read = {
+		at: Date.now(),
+		stacks: runGitHubApi(host, `repos/${repository}/stacks?pull_request=${pullRequestNumber}`).then((text) => GitHubStacksSchema.parse(JSON.parse(text)))
+	};
+	reads.set(keyOf(pullRequestNumber), read);
+	read.stacks.then((stacks) => {
+		const stack = stacks.find((candidate) => candidate.pull_requests.some((pr) => pr.number === pullRequestNumber));
+		for (const pr of stack?.pull_requests ?? []) reads.set(keyOf(pr.number), read);
+	}, () => {
+		if (reads.get(keyOf(pullRequestNumber)) === read) reads.delete(keyOf(pullRequestNumber));
+	});
+	return read.stacks;
+}
 async function gitHubStack(subject, reviews, runGitHubApi) {
 	const binding = subject.origin?.pullRequestUrl?.match(/^https:\/\/([a-z0-9.-]+)\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/pull\/([1-9]\d*)$/);
 	if (!binding) return [];
@@ -2631,7 +2666,7 @@ async function gitHubStack(subject, reviews, runGitHubApi) {
 	const repoKey = `https://${host}/${owner}/${repository}`;
 	let stacks;
 	try {
-		stacks = GitHubStacksSchema.parse(JSON.parse(await runGitHubApi(host, `repos/${owner}/${repository}/stacks?pull_request=${number}`)));
+		stacks = await readGitHubStacks(runGitHubApi, host, `${owner}/${repository}`, pullRequestNumber);
 	} catch {
 		return [];
 	}

package/dist/{lens-selection-BxPk53c8.js → lens-selection-9byzEgvU.js}

@@ -1,4 +1,4 @@
-import "./src-DYZLCUP_.js";
+import "./src-DYHVzX3b.js";
 import { z } from "zod";
 //#region src/viewed-coverage.ts
 const coverageSchema = z.object({