@dev.fast/whiteboard 0.4.1-preview.20261031.144 → 0.5.0

package/dist/{request-origin-Cr1tW4Vl.js → request-origin-B3_XI2VA.js}

@@ -1,7 +1,7 @@
 import { a as jsonNumber, c as jsonString, i as jsonBoolean, n as isJsonObject } from "./src-X9phtB2j.js";
 import { X as SELECTION_UNAVAILABLE_REASONS } from "./src-B2b8cCoI.js";
-import { _ as REVIEW_DIFF_LAYOUTS, g as REVIEW_COLOR_THEME_KINDS, v as REVIEW_DIFF_LAYOUT_SCOPES } from "./src-Coec7jLU.js";
-import { n as askAgentIds } from "./thread-state-DosGpp3S.js";
+import { _ as REVIEW_DIFF_LAYOUTS, g as REVIEW_COLOR_THEME_KINDS, v as REVIEW_DIFF_LAYOUT_SCOPES } from "./src-DLWol7GZ.js";
+import { n as askAgentIds } from "./thread-state-B7L1mpN_.js";
 import { z } from "zod";
 //#region src/telemetry-clean-text.ts
 const USER_DATA_REGEXES = [
@@ -232,6 +232,7 @@ const SETTING_NAME = [
 	"keymap",
 	"software_map_enabled",
 	"show_release_notes",
+	"update_pill",
 	"diffr_config",
 	"theme",
 	"diff_theme",
@@ -499,6 +500,10 @@ const UI_TELEMETRY_EVENTS = {
 		event: "review_source_tree_opened",
 		properties: { via: SOURCE_TREE_OPENED_VIA }
 	},
+	whiteboard_file_exported: {
+		event: "review_whiteboard_file_exported",
+		properties: {}
+	},
 	diff_layout_changed: {
 		event: "review_diff_layout_changed",
 		properties: {

package/dist/{review-app-launcher-1tcH84u6.js → review-app-launcher-BZEbDKuK.js}

@@ -1,5 +1,5 @@
-import { o as parseReviewVerbResponse } from "./src-Coec7jLU.js";
-import { b as selectReviewInstance, m as healthyReviewInstance, v as reviewInstanceStartHint, y as reviewInstanceUnavailable } from "./server-discovery-nLX2SH_v.js";
+import { o as parseReviewVerbResponse } from "./src-DLWol7GZ.js";
+import { b as selectReviewInstance, m as healthyReviewInstance, v as reviewInstanceStartHint, y as reviewInstanceUnavailable } from "./server-discovery-WmuFl2S3.js";
 import { closeSync, existsSync, fstatSync, mkdtempSync, openSync, readSync } from "node:fs";
 import path from "node:path";
 import { homedir, tmpdir } from "node:os";

package/dist/{review-telemetry-CzYSJMMy.js → review-telemetry-x8u-9EZb.js}

@@ -1,9 +1,9 @@
 import { c as jsonString, l as jsonValueSchema, o as jsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
-import "./src-Coec7jLU.js";
+import "./src-DLWol7GZ.js";
 import "./review-home-paths-LdGS4SpR.js";
 import { F as writeFileAtomic, N as devReviewHome, j as withFileLock, k as processIsAlive } from "./s3-config-CjcLyFV5.js";
 import { i as readReviewPackageVersion, t as findReviewPackageRoot } from "./package-paths-Cg6fnaGp.js";
-import "./request-origin-Cr1tW4Vl.js";
+import "./request-origin-B3_XI2VA.js";
 import { createHmac, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { existsSync, readFileSync, rmSync } from "node:fs";

package/dist/server/desktop-host.js

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { S as splitGitPatchFiles, a as diff, o as diffFileSummaries } from "../src-Y30gweiK.js";
 import { c as jsonString, i as jsonBoolean, n as isJsonObject, p as isObjectValue, s as jsonProperty, u as parseJsonText } from "../src-X9phtB2j.js";
-import { g as readBoundedStream, h as StreamLimitError, u as legacyModeSchema } from "../import-Dnbujw7d.js";
+import { _ as readBoundedStream, d as legacyModeSchema, g as StreamLimitError } from "../import-YAIU6rB0.js";
 import { ot as ReviewInputError, y as resourceReferences } from "../src-B2b8cCoI.js";
-import { A as ReviewGatewayHostSchema, D as ReviewConnectRequestSchema, P as reviewDiffrSummarizerInputSchema, d as ReviewBugReportRequestSchema, f as parseReviewBugReportResponse, m as REVIEW_CLIENT_REMOTE, p as REVIEW_CLIENT_HEADER, r as parseReviewDesktopVerbFrame, s as parseZod, t as parseReviewCliInstallApplyRequest, u as ReviewBugReportMetaV2Schema, y as REVIEW_HOST_HEADER } from "../src-Coec7jLU.js";
+import { A as ReviewGatewayHostSchema, D as ReviewConnectRequestSchema, P as reviewDiffrSummarizerInputSchema, d as ReviewBugReportRequestSchema, f as parseReviewBugReportResponse, m as REVIEW_CLIENT_REMOTE, p as REVIEW_CLIENT_HEADER, r as parseReviewDesktopVerbFrame, s as parseZod, t as parseReviewCliInstallApplyRequest, u as ReviewBugReportMetaV2Schema, y as REVIEW_HOST_HEADER } from "../src-DLWol7GZ.js";
 import { i as reviewInstanceDiscoveryPath, o as reviewLegacyDiscoveryPath } from "../review-home-paths-LdGS4SpR.js";
-import { p as pullRequestProvider } from "../stored-document-migration-Ca9BWqEF.js";
+import { p as pullRequestProvider } from "../stored-document-migration-iwIQ4l5G.js";
 import { L as writePrivateJsonAtomic, N as devReviewHome } from "../s3-config-CjcLyFV5.js";
 import { t as errorMessage } from "../error-message-OtiDonty.js";
 import { i as readReviewPackageVersion, t as findReviewPackageRoot } from "../package-paths-Cg6fnaGp.js";
-import { _ as reviewInstanceIdentity, u as REVIEW_INSTANCE_ENV } from "../server-discovery-nLX2SH_v.js";
-import { t as openReviewProfile } from "../profile-i2n1HdIg.js";
-import { r as reviewTelemetryChannel, t as ReviewTelemetry } from "../review-telemetry-CzYSJMMy.js";
-import { l as REVIEW_TELEMETRY_TABS } from "../request-origin-Cr1tW4Vl.js";
-import { c as removeLegacyReviewSkills, d as skipCliInstall, h as detectConnectAgents, i as finishCliInstallUpdate, l as resetCliInstall, m as connectAgent, n as applyCliInstall, o as pathShimPath, r as declineCliInstall, s as removeCliInstall, t as aliasInstallationToAccount, u as resolveCliInstallStatus } from "../account-alias-DbtsNr_c.js";
-import { C as setDiffrConfigValue, S as saveDiffrSummarizer, T as cliAskTools, _ as HttpJsonError, a as drainServerCrashReport, b as migrateDiffrConfig, c as answerErrorsAsJson, d as captureSanitizedUiTelemetry, f as clientErrorsForSession, g as DEFAULT_MAX_REQUEST_BYTES, h as readBoundedRequestJson, l as createWhiteboardCore, m as createNodeRequestListener, o as installProcessErrorTelemetry, p as recordClientError, r as takeOverServerHome, s as serverCrashReportPath, u as serverJson, v as ReviewServerError, w as testDiffrSummarizer, x as readDiffrConfig, y as GlobalReviewDesktopVerbRelay } from "../headless-host-s4A3qcsl.js";
-import { s as readQuerySchemas } from "../authoring-tools-BEGW2s0A.js";
+import { _ as reviewInstanceIdentity, u as REVIEW_INSTANCE_ENV } from "../server-discovery-WmuFl2S3.js";
+import { t as openReviewProfile } from "../profile--BYIjPkc.js";
+import { r as reviewTelemetryChannel, t as ReviewTelemetry } from "../review-telemetry-x8u-9EZb.js";
+import { l as REVIEW_TELEMETRY_TABS } from "../request-origin-B3_XI2VA.js";
+import { c as removeLegacyReviewSkills, d as skipCliInstall, h as detectConnectAgents, i as finishCliInstallUpdate, l as resetCliInstall, m as connectAgent, n as applyCliInstall, o as pathShimPath, r as declineCliInstall, s as removeCliInstall, t as aliasInstallationToAccount, u as resolveCliInstallStatus } from "../account-alias-Bw3PT3Qo.js";
+import { C as setDiffrConfigValue, S as saveDiffrSummarizer, T as cliAskTools, _ as HttpJsonError, a as drainServerCrashReport, b as migrateDiffrConfig, c as answerErrorsAsJson, d as captureSanitizedUiTelemetry, f as clientErrorsForSession, g as DEFAULT_MAX_REQUEST_BYTES, h as readBoundedRequestJson, l as createWhiteboardCore, m as createNodeRequestListener, o as installProcessErrorTelemetry, p as recordClientError, r as takeOverServerHome, s as serverCrashReportPath, u as serverJson, v as ReviewServerError, w as testDiffrSummarizer, x as readDiffrConfig, y as GlobalReviewDesktopVerbRelay } from "../headless-host-Dl2KZ9IT.js";
+import { s as readQuerySchemas } from "../authoring-tools-CiLy46kh.js";
 import crypto, { createHash, randomBytes } from "node:crypto";
 import { z } from "zod";
 import { Agent, request } from "undici";

package/dist/{server-discovery-nLX2SH_v.js → server-discovery-WmuFl2S3.js}

@@ -1,5 +1,5 @@
 import { a as jsonNumber, n as isJsonObject, s as jsonProperty, u as parseJsonText } from "./src-X9phtB2j.js";
-import { n as parseReviewDesktopDiscovery } from "./src-Coec7jLU.js";
+import { n as parseReviewDesktopDiscovery } from "./src-DLWol7GZ.js";
 import { a as reviewInstancesDir, o as reviewLegacyDiscoveryPath, r as reviewDevInstanceKey, t as reviewDefaultInstancePath } from "./review-home-paths-LdGS4SpR.js";
 import { M as DEV_REVIEW_HOME_ENV, N as devReviewHome, k as processIsAlive } from "./s3-config-CjcLyFV5.js";
 import { z } from "zod";

package/dist/sharing/index.d.ts

@@ -635,6 +635,8 @@ interface ActivityPresence {
   focus?: ActivityFocus;
   /** Where it last wrote; absent until its first attributed write. */
   surface?: ActivitySurface;
+  /** Blocks reserved for it; others' edits on them or inside them are refused. */
+  hold?: string[];
 }
 interface ActivitySnapshot {
   /** Live presences. */

package/dist/sharing/index.js

@@ -1,2 +1,2 @@
-import { c as exportShare, n as shareKey, r as validateShareBundle, s as ShareClient, t as importShare } from "../import-Dnbujw7d.js";
+import { c as ShareClient, i as validateShareBundle, l as exportShare, r as shareKey, t as importShare } from "../import-YAIU6rB0.js";
 export { ShareClient, exportShare, importShare, shareKey, validateShareBundle };

package/dist/{src-Coec7jLU.js → src-DLWol7GZ.js}

@@ -827,6 +827,13 @@ const ReviewVerbRequestSchema = z.discriminatedUnion("name", [
 			reviewId: apiReviewIdSchema,
 			title: requiredString$1
 		})
+	}),
+	z.strictObject({
+		name: z.literal("exportReviewFile"),
+		args: z.strictObject({
+			reviewId: apiReviewIdSchema,
+			version: z.number().int().nonnegative().optional()
+		})
 	})
 ]);
 const ReviewVerbResponseSchema = z.discriminatedUnion("ok", [z.strictObject({

package/dist/{stored-document-migration-Ca9BWqEF.js → stored-document-migration-iwIQ4l5G.js}

@@ -1,7 +1,7 @@
 import { C as renderVcsArgs, v as parseGitRemote, w as runVcs } from "./src-Y30gweiK.js";
 import { d as isBooleanValue, f as isNumberValue, l as jsonValueSchema, m as isStringValue, n as isJsonObject } from "./src-X9phtB2j.js";
 import { C as respellLinks, H as lensTargetsSchema, W as label, at as unionIntervals, et as formatAnchor, ot as ReviewInputError } from "./src-B2b8cCoI.js";
-import "./src-Coec7jLU.js";
+import "./src-DLWol7GZ.js";
 import "./review-home-paths-LdGS4SpR.js";
 import { t as errorMessage } from "./error-message-OtiDonty.js";
 import { randomUUID } from "node:crypto";

package/dist/{thread-state-DosGpp3S.js → thread-state-B7L1mpN_.js}

@@ -1,4 +1,4 @@
-import { M as ReviewSelectedDiffSchema, T as ReviewApiSelectionSourceSchema } from "./src-Coec7jLU.js";
+import { M as ReviewSelectedDiffSchema, T as ReviewApiSelectionSourceSchema } from "./src-DLWol7GZ.js";
 import { z } from "zod";
 import { stat } from "node:fs/promises";
 //#region src/fs-utils.ts

package/dist/{tool-failure-CwTgI76j.js → tool-failure-RLR8m9hq.js}

@@ -1,11 +1,11 @@
 import { m as isStringValue, n as isJsonObject, u as parseJsonText } from "./src-X9phtB2j.js";
 import { M as checkReferences, j as blocks, ot as ReviewInputError } from "./src-B2b8cCoI.js";
-import { l as boardTitle } from "./src-Coec7jLU.js";
+import { l as boardTitle } from "./src-DLWol7GZ.js";
 import "./review-home-paths-LdGS4SpR.js";
-import { n as callAuthoringTool, s as ReviewApiError, t as ToolText } from "./agent-client-CXXjD60Q.js";
+import { n as callAuthoringTool, s as ReviewApiError, t as ToolText } from "./agent-client-CMacGbMp.js";
 import { N as devReviewHome } from "./s3-config-CjcLyFV5.js";
 import { t as findReviewPackageRoot } from "./package-paths-Cg6fnaGp.js";
-import { m as isMissingFileError } from "./thread-state-DosGpp3S.js";
+import { m as isMissingFileError } from "./thread-state-B7L1mpN_.js";
 import { createHash } from "node:crypto";
 import { z } from "zod";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev.fast/whiteboard",
-  "version": "0.4.1-preview.20261031.144",
+  "version": "0.5.0",
   "private": false,
   "license": "MIT",
   "repository": {
@@ -42,7 +42,7 @@
     "@agentclientprotocol/claude-agent-acp": "0.84.0",
     "@agentclientprotocol/codex-acp": "2.0.0",
     "@agentclientprotocol/sdk": "1.5.1",
-    "@hono/node-server": "2.0.12",
+    "@hono/node-server": "2.1.5",
     "@img/sharp-wasm32": "0.35.5",
     "@modelcontextprotocol/server": "2.3.1",
     "@parcel/watcher": "2.6.0",
@@ -59,7 +59,7 @@
     "semver": "7.8.5",
     "sharp": "0.35.5",
     "smol-toml": "1.9.0",
-    "undici": "7.29.1",
+    "undici": "7.30.1",
     "yauzl": "3.4.0",
     "zod": "4.6.6",
     "@dev.fast/diffr": "0.1.23"
@@ -75,13 +75,13 @@
     "tsdown": "0.22.14",
     "tsx": "4.21.0",
     "typescript": "6.0.3",
-    "vitest": "4.1.11",
+    "vitest": "4.1.12",
     "@dev.fast/json": "0.0.0",
-    "@dev.fast/review-share-protocol": "0.3.0",
-    "@dev.fast/review-protocol": "0.0.0",
     "@dev.fast/trace-core": "0.0.0",
-    "@dev.fast/trace-protocol": "0.5.0",
-    "@dev.fast/whiteboard-document": "0.2.0"
+    "@dev.fast/review-share-protocol": "0.3.1",
+    "@dev.fast/whiteboard-document": "0.2.1",
+    "@dev.fast/review-protocol": "0.0.0",
+    "@dev.fast/trace-protocol": "0.5.0"
   },
   "engines": {
     "node": ">=24 <25"
@@ -91,7 +91,7 @@
     "repo": "devdotfast/review",
     "docs": "packages/review/instructions/authoring.md"
   },
-  "gitHead": "92dca469c9d8aa180aad5e48653cefca86079785",
+  "gitHead": "b3f475d81a1ec90ba0b8c597a19b5bf9221c158a",
   "scripts": {
     "prebuild": "pnpm run build:workspace-deps",
     "build": "node --max-old-space-size=8192 node_modules/tsdown/dist/run.mjs",

package/src/cli-runner.ts

@@ -1191,6 +1191,35 @@ export async function runReviewCli(input: ReviewCliInput): Promise<number> {
     });
   });
 
+  configureJsonOutput(
+    program
+      .command("export")
+      .description("Write a review snapshot as a .whiteboard file"),
+    "plain",
+  )
+    .option("--review <id>", "review ID")
+    .option("--version <number>", "Saved version to export")
+    .option(
+      "--out <path>",
+      "File to write, or - for stdout; defaults to <title>.whiteboard here",
+    )
+    .action(
+      async (options: {
+        review?: string;
+        version?: string;
+        out?: string;
+        json?: boolean;
+      }) => {
+        const { runExportCli } = await import("./sharing/cli.js");
+        state.exitCode = await runExportCli({
+          ...input,
+          ...options,
+          cwd,
+          env: authoringEnv(),
+        });
+      },
+    );
+
   // Hosted trace store login. Logging in authenticates a user; it selects
   // no storage by itself.
   configureJsonOutput(

package/src/sharing/cli.ts

@@ -1,4 +1,6 @@
 import { randomUUID } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import path from "node:path";
 import type { Writable } from "node:stream";
 
 import { connectReviewApi } from "@review/review-api/agent-client.js";
@@ -81,3 +83,60 @@ export async function runShareCli(input: {
     return 1;
   }
 }
+
+const exportSchema = z.strictObject({
+  filename: z.string().min(1),
+  text: z.string(),
+});
+
+export async function runExportCli(input: {
+  review?: string;
+  version?: string;
+  out?: string;
+  json?: boolean;
+  cwd: string;
+  env?: NodeJS.ProcessEnv;
+  stdout: Writable;
+  stderr: Writable;
+}) {
+  try {
+    if (!input.review) throw new Error("Use whiteboard export --review <id>.");
+
+    const client = await connectReviewApi(input.env);
+
+    const result = exportSchema.parse(
+      await client.post("/sharing/export", {
+        reviewId: input.review,
+        version:
+          input.version === undefined
+            ? undefined
+            : z.number().int().nonnegative().parse(Number(input.version)),
+      }),
+    );
+
+    if (input.out === "-") {
+      input.stdout.write(result.text);
+
+      return 0;
+    }
+
+    const file = path.resolve(input.cwd, input.out ?? result.filename);
+    await mkdir(path.dirname(file), { recursive: true });
+    await writeFile(file, result.text);
+    input.stdout.write(
+      input.json ? JSON.stringify({ path: file }) + "\n" : file + "\n",
+    );
+
+    return 0;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "Export failed.";
+
+    if (input.json)
+      input.stdout.write(
+        JSON.stringify({ error: { code: "export_failed", message } }) + "\n",
+      );
+    input.stderr.write(message + "\n");
+
+    return 1;
+  }
+}

package/src/sharing/file.ts

@@ -0,0 +1,52 @@
+import { createHash } from "node:crypto";
+
+import {
+  SHARE_FORMAT,
+  type ShareBundle,
+  shareBundleSchema,
+} from "@dev.fast/review-share-protocol";
+import { ReviewInputError } from "@dev.fast/whiteboard-document";
+import { slugify } from "@review/slug.js";
+import { z } from "zod";
+
+export const WHITEBOARD_FILE_EXTENSION = ".whiteboard";
+
+const headerSchema = z.looseObject({ format: z.string() });
+
+export function whiteboardFileName(title: string): string {
+  return `${slugify(title) || "untitled"}${WHITEBOARD_FILE_EXTENSION}`;
+}
+
+export function whiteboardFileText(bundle: ShareBundle): string {
+  return JSON.stringify(bundle, null, 2) + "\n";
+}
+
+export function parseWhiteboardFile(text: string): ShareBundle {
+  let parsed: unknown;
+
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    parsed = undefined;
+  }
+
+  const header = headerSchema.safeParse(parsed);
+
+  if (!header.success)
+    throw new ReviewInputError("This is not a Whiteboard file.", 400);
+
+  if (header.data.format !== SHARE_FORMAT)
+    throw new ReviewInputError(
+      "This file needs a different Whiteboard version.",
+      400,
+    );
+
+  return shareBundleSchema.parse(parsed);
+}
+
+export function whiteboardFileKey(text: string): string {
+  return createHash("sha256")
+    .update("whiteboard-file\0")
+    .update(text)
+    .digest("hex");
+}

package/src/sharing/host.ts

@@ -1,7 +1,13 @@
 import { randomUUID } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import path from "node:path";
 import { Writable } from "node:stream";
 
-import { parseShareLink, shareIdSchema } from "@dev.fast/review-share-protocol";
+import {
+  type ShareBundle,
+  parseShareLink,
+  shareIdSchema,
+} from "@dev.fast/review-share-protocol";
 import {
   DEFAULT_STORE_ORIGIN,
   clearStoreAuth,
@@ -11,7 +17,7 @@ import {
 } from "@dev.fast/trace-core";
 import { ReviewInputError } from "@dev.fast/whiteboard-document";
 import type { LocalReviewData } from "@review/review-api/local-data.js";
-import type { ReviewStore } from "@review/review-api/store.js";
+import type { ReviewStore, Snapshot } from "@review/review-api/store.js";
 import { readBoundedRequestJson } from "@review/server/hono-http.js";
 import type { Hono } from "hono";
 import { z } from "zod";
@@ -19,7 +25,18 @@ import { z } from "zod";
 import { readSharingAuth } from "./auth.js";
 import { ShareAuthError, ShareClient } from "./client.js";
 import { exportShare, validateShareSources } from "./export.js";
-import { importShare, shareKey } from "./import.js";
+import {
+  parseWhiteboardFile,
+  whiteboardFileKey,
+  whiteboardFileName,
+  whiteboardFileText,
+} from "./file.js";
+import {
+  type ShareAttribution,
+  importShare,
+  needsRepository,
+  shareKey,
+} from "./import.js";
 import {
   type cloneSharedRepository,
   type fetchPinnedRepository,
@@ -58,8 +75,19 @@ interface SharingHostOptions extends SharingHostEvents {
   fetch?: typeof fetch;
 }
 
+const importSchema = z.union([
+  z.strictObject({ url: z.string().max(2048) }),
+  z.strictObject({ path: z.string().min(1).max(4096) }),
+]);
+
 interface ImportStatus {
-  stage: "downloading" | "fetching" | "validating" | "ready" | "error";
+  stage:
+    | "downloading"
+    | "reading"
+    | "fetching"
+    | "validating"
+    | "ready"
+    | "error";
   /** The copy, once it is made. */
   reviewId?: string;
   error?: string;
@@ -170,23 +198,15 @@ export function mountSharingHost(
       ...(status.stage === "ready" && { title: store.read(reviewId).title }),
     });
   });
-  app.post("/sharing/import", async (context) => {
-    const { url } = z
-      .strictObject({ url: z.string().max(2048) })
-      .parse(await readBoundedRequestJson(context.req.raw));
-
-    const parsed = parseShareLink(url);
-    const account = await readStoreAuth();
 
-    if (
-      parsed.origin !== DEFAULT_STORE_ORIGIN &&
-      parsed.origin !== account?.origin
-    )
-      throw new ReviewInputError(
-        "This share uses an untrusted service. Sign in to that service before opening its links.",
-        400,
-      );
-    const id = shareKey(parsed.origin, parsed.capability);
+  const startImport = (
+    id: string,
+    initial: "downloading" | "reading",
+    load: () => Promise<{
+      bundle: ShareBundle;
+      attribution?: ShareAttribution;
+    }>,
+  ) => {
     const known = imports.get(id)?.stage;
 
     // A failed import retries, and a deleted copy imports again.
@@ -195,16 +215,14 @@ export function mountSharingHost(
 
       const status: ImportStatus = copy
         ? { stage: "ready", reviewId: copy }
-        : { stage: "downloading" };
+        : { stage: initial };
 
       imports.set(id, status);
 
       if (!copy)
         importing = importing
           .then(async () => {
-            const { bundle, attribution } = await new ShareClient(
-              parsed.origin,
-            ).download(parsed.capability);
+            const { bundle, attribution } = await load();
 
             status.reviewId = await importShare(
               {
@@ -233,7 +251,53 @@ export function mountSharingHost(
 
     const { reviewId: _reviewId, ...status } = imports.get(id)!;
 
-    return context.json({ reviewId: id, ...status }, 202);
+    return { reviewId: id, ...status };
+  };
+
+  app.post("/sharing/import", async (context) => {
+    const input = importSchema.parse(
+      await readBoundedRequestJson(context.req.raw),
+    );
+
+    if ("path" in input) {
+      if (!path.isAbsolute(input.path))
+        throw new ReviewInputError("Use an absolute file path.", 400);
+
+      const text = await readFile(input.path, "utf8").catch(() => {
+        throw new ReviewInputError(
+          `Could not read ${path.basename(input.path)}. Check that the file still exists and Whiteboard can open it.`,
+          400,
+        );
+      });
+
+      return context.json(
+        startImport(whiteboardFileKey(text), "reading", async () => ({
+          bundle: parseWhiteboardFile(text),
+        })),
+        202,
+      );
+    }
+
+    const parsed = parseShareLink(input.url);
+    const account = await readStoreAuth();
+
+    if (
+      parsed.origin !== DEFAULT_STORE_ORIGIN &&
+      parsed.origin !== account?.origin
+    )
+      throw new ReviewInputError(
+        "This share uses an untrusted service. Sign in to that service before opening its links.",
+        400,
+      );
+
+    return context.json(
+      startImport(
+        shareKey(parsed.origin, parsed.capability),
+        "downloading",
+        () => new ShareClient(parsed.origin).download(parsed.capability),
+      ),
+      202,
+    );
   });
 }
 
@@ -247,11 +311,7 @@ export function mountSharingPublisher(
     "readRepository" | "fetch" | "onPublished" | "onRevoked"
   > = {},
 ) {
-  app.post("/sharing/publish", async (context) => {
-    const input = publishSchema.parse(
-      await readBoundedRequestJson(context.req.raw),
-    );
-
+  const shareable = (input: z.infer<typeof publishSchema>) => {
     const snapshot = store.read(input.reviewId, input.version);
 
     if (snapshot.target?.kind === "worktree")
@@ -260,14 +320,11 @@ export function mountSharingPublisher(
       );
 
     validateShareSources(snapshot);
-    const account = await readSharingAuth();
 
-    if (!account)
-      throw new ReviewInputError(
-        "Set DEV_REVIEW_SHARE_TOKEN for CI, or run whiteboard login before sharing.",
-        409,
-      );
+    return snapshot;
+  };
 
+  const shareBundle = async (snapshot: Snapshot) => {
     const repositoryId =
       snapshot.pins?.repositoryId ?? snapshot.target?.repositoryId;
 
@@ -283,7 +340,7 @@ export function mountSharingPublisher(
     const bundle = await exportShare({
       store,
       data,
-      reviewId: input.reviewId,
+      reviewId: snapshot.reviewId,
       version: snapshot.version,
     });
 
@@ -291,6 +348,43 @@ export function mountSharingPublisher(
 
     if (verified) bundle.repository = verified;
 
+    return bundle;
+  };
+
+  app.post("/sharing/export", async (context) => {
+    const snapshot = shareable(
+      publishSchema.parse(await readBoundedRequestJson(context.req.raw)),
+    );
+
+    const bundle = await shareBundle(snapshot);
+
+    // A link falls back to the browser viewer; a file has no such reader.
+    if (!bundle.repository && needsRepository(bundle, snapshot))
+      throw new ReviewInputError(
+        "Exporting pinned code needs a GitHub remote the file's reader can fetch from.",
+      );
+
+    return context.json({
+      filename: whiteboardFileName(snapshot.title),
+      text: whiteboardFileText(bundle),
+    });
+  });
+  app.post("/sharing/publish", async (context) => {
+    const input = publishSchema.parse(
+      await readBoundedRequestJson(context.req.raw),
+    );
+
+    const snapshot = shareable(input);
+    const account = await readSharingAuth();
+
+    if (!account)
+      throw new ReviewInputError(
+        "Set DEV_REVIEW_SHARE_TOKEN for CI, or run whiteboard login before sharing.",
+        409,
+      );
+
+    const bundle = await shareBundle(snapshot);
+
     try {
       const result = await new ShareClient(
         account.origin,

package/src/sharing/import.ts

@@ -116,7 +116,7 @@ export interface ShareAttribution {
 }
 
 /** Commits and traces live in a checkout; a document alone needs none. */
-function needsRepository(
+export function needsRepository(
   bundle: ShareBundle,
   snapshot: Parameters<typeof referenceCommits>[0],
 ) {

package/src/ui-telemetry-events.ts

@@ -146,6 +146,7 @@ export const SETTING_NAME = [
   "keymap",
   "software_map_enabled",
   "show_release_notes",
+  "update_pill",
   "diffr_config",
   "theme",
   "diff_theme",
@@ -430,6 +431,10 @@ export const UI_TELEMETRY_EVENTS = {
     event: "review_source_tree_opened",
     properties: { via: SOURCE_TREE_OPENED_VIA },
   },
+  whiteboard_file_exported: {
+    event: "review_whiteboard_file_exported",
+    properties: {},
+  },
   diff_layout_changed: {
     event: "review_diff_layout_changed",
     properties: {

package/dist/agent-cli-BL1HiH5g.js

@@ -1,2 +0,0 @@
-import { n as runReviewAgentCli } from "./agent-cli-DPt9w5-8.js";
-export { runReviewAgentCli };

package/dist/profile-Bw0hDDNd.js

@@ -1,2 +0,0 @@
-import { t as openReviewProfile } from "./profile-i2n1HdIg.js";
-export { openReviewProfile };