@norman-else/dsh-claude 0.1.19 → 0.1.20

package/lib/index.mjs

@@ -1,16 +1,16 @@
-import { S as TASK_TOOL_NAMES, _ as CLAUDE_PROJECTION_PATH, a as latestClaudeTasks, b as CLAUDE_UPDATE_PATH, c as normalizeTasksEvent, d as CLAUDE_ACTIVITY_EVENT, f as CLAUDE_CODE_PRESET_ID, g as CLAUDE_GLOBAL_SETTINGS_PATH, h as CLAUDE_DOCTOR_PATH, i as latestClaudeSessionBinding, l as redactText, m as CLAUDE_CODE_PROVIDER_IDS, n as currentClaudeActivityCursor, o as normalizeActivity, p as CLAUDE_CODE_PROVIDER, r as latestClaudeContextUsage, s as normalizeContextUsage, t as boundText, u as safeDetail, v as CLAUDE_REPOSITORY_SETUP_PATH, y as CLAUDE_UPDATE_CHECK_PATH } from "./events-DPJaBReT.mjs";
-import { a as projectClaudeCommands, i as CLAUDE_COMMANDS_SERVICE, r as dynamicPresenterDefinition, t as CLAUDE_PRESENTER_NAMES } from "./presenters-DBRIOgJs.mjs";
-import { a as resolveClaudeExecutable, n as ensureManagedPreset, o as runClaudeDoctor, t as ManagedPresetConflictError } from "./preset-installer-DnoSEKGm.mjs";
+import { S as CLAUDE_UPDATE_PATH, _ as CLAUDE_PROJECTION_PATH, a as latestClaudeTasks, b as CLAUDE_REVIEW_COMMENT_PATH, c as normalizeTasksEvent, d as CLAUDE_ACTIVITY_EVENT, f as CLAUDE_CODE_PRESET_ID, g as CLAUDE_GLOBAL_SETTINGS_PATH, h as CLAUDE_DOCTOR_PATH, i as latestClaudeSessionBinding, l as redactText, m as CLAUDE_CODE_PROVIDER_IDS, n as currentClaudeActivityCursor, o as normalizeActivity, p as CLAUDE_CODE_PROVIDER, r as latestClaudeContextUsage, s as normalizeContextUsage, t as boundText, u as safeDetail, v as CLAUDE_REPOSITORY_ACTION_PATH, w as TASK_TOOL_NAMES, x as CLAUDE_UPDATE_CHECK_PATH, y as CLAUDE_REPOSITORY_SETUP_PATH } from "./events-BdDs9ebF.mjs";
+import { n as projectClaudeCommands, t as CLAUDE_COMMANDS_SERVICE } from "./command-bridge-C10-lz6A.mjs";
+import { a as resolveClaudeExecutable, n as ensureManagedPreset, o as runClaudeDoctor, t as ManagedPresetConflictError } from "./preset-installer-DMANIjwu.mjs";
 import z from "@deepseek-ai/schemastery";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { chmod, mkdir, opendir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, extname, isAbsolute, join, resolve } from "node:path";
 import { dshHomePath, resolveDshHome } from "@deepseek-ai/dsh-home-paths";
 import { homedir } from "node:os";
 import { query } from "@anthropic-ai/claude-agent-sdk";
-import { CallId, LlmAdapter, ReasoningEffortId, createToolResultMessage } from "@deepseek-ai/dsh-llm";
 import { EventEmitter } from "node:events";
 import { DSH_ENV_PREFIX, SENSITIVE_ENV_PATTERN } from "@deepseek-ai/dsh-subprocess";
+import { LlmAdapter, ReasoningEffortId } from "@deepseek-ai/dsh-llm";
 import { fileURLToPath } from "node:url";
 //#region src/sidecar.ts
 const SIDECAR_SCHEMA_VERSION = 1;
@@ -22,18 +22,18 @@ function emptyProjection() {
 		activities: []
 	};
 }
-function record$3(value) {
+function record$5(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function finiteInteger(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
-function string$2(value, max) {
+function string$3(value, max) {
 	return typeof value === "string" && value.length > 0 && value.length <= max;
 }
 function binding(value) {
-	const input = record$3(value);
-	if (input === void 0 || !string$2(input.claudeSessionId, 512) || !string$2(input.sdkVersion, 128) || !string$2(input.cwd, 4096) || input.cliVersion !== void 0 && !string$2(input.cliVersion, 128)) return void 0;
+	const input = record$5(value);
+	if (input === void 0 || !string$3(input.claudeSessionId, 512) || !string$3(input.sdkVersion, 128) || !string$3(input.cwd, 4096) || input.cliVersion !== void 0 && !string$3(input.cliVersion, 128)) return void 0;
 	return {
 		claudeSessionId: input.claudeSessionId,
 		sdkVersion: input.sdkVersion,
@@ -42,6 +42,7 @@ function binding(value) {
 	};
 }
 const ACTIVITY_KINDS = /* @__PURE__ */ new Set([
+	"text",
 	"status",
 	"thinking",
 	"tool-call",
@@ -61,22 +62,22 @@ const ACTIVITY_PHASES = /* @__PURE__ */ new Set([
 	"failed"
 ]);
 function activity(value) {
-	const input = record$3(value);
+	const input = record$5(value);
 	if (input === void 0 || !finiteInteger(input.turn) || !finiteInteger(input.step) || !finiteInteger(input.ordinal) || typeof input.kind !== "string" || !ACTIVITY_KINDS.has(input.kind) || input.phase !== void 0 && (typeof input.phase !== "string" || !ACTIVITY_PHASES.has(input.phase))) return void 0;
 	return normalizeActivity(input);
 }
 function contextUsage(value) {
-	const input = record$3(value);
+	const input = record$5(value);
 	if (input === void 0 || !Array.isArray(input.categories)) return void 0;
 	return normalizeContextUsage(input);
 }
 function tasks(value) {
-	const input = record$3(value);
+	const input = record$5(value);
 	if (input === void 0 || !Array.isArray(input.tasks)) return void 0;
 	return normalizeTasksEvent(input.tasks);
 }
 function parseClaudeSidecar(value) {
-	const input = record$3(value);
+	const input = record$5(value);
 	if (input === void 0 || input.schemaVersion !== SIDECAR_SCHEMA_VERSION || !finiteInteger(input.revision) || !Array.isArray(input.activities) || input.activities.length > MAX_ACTIVITIES) throw new Error("dsh-claude: invalid sidecar document");
 	const activities = input.activities.map(activity);
 	if (activities.some((item) => item === void 0)) throw new Error("dsh-claude: invalid sidecar activity");
@@ -525,10 +526,10 @@ function createUserQuestionBridge(userQuestions, activeContext) {
 }
 //#endregion
 //#region src/sdk-messages.ts
-function record$2(value) {
+function record$4(value) {
 	return value !== null && typeof value === "object" ? value : void 0;
 }
-function string$1(value) {
+function string$2(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function taskUsageOf(usage) {
@@ -540,7 +541,7 @@ function taskUsageOf(usage) {
 	return Object.keys(normalized).length === 0 ? void 0 : normalized;
 }
 function resultUsage(message) {
-	const usage = record$2(message.usage);
+	const usage = record$4(message.usage);
 	const normalized = {};
 	if (usage !== void 0) {
 		if (typeof usage.input_tokens === "number") normalized.inputTokens = usage.input_tokens;
@@ -552,26 +553,26 @@ function resultUsage(message) {
 	return normalized;
 }
 function normalizeAssistant(message) {
-	const content = record$2(message.message)?.content;
+	const content = record$4(message.message)?.content;
 	if (!Array.isArray(content)) return [{
 		kind: "protocol-error",
 		title: "Malformed Claude assistant message",
 		detail: message
 	}];
-	const parentToolUseId = string$1(message.parent_tool_use_id);
+	const parentToolUseId = string$2(message.parent_tool_use_id);
 	const normalized = [];
 	for (const item of content) {
-		const block = record$2(item);
+		const block = record$4(item);
 		if (block === void 0) continue;
 		if (block.type === "text") {
-			const text = string$1(block.text);
+			const text = string$2(block.text);
 			if (text !== void 0 && text.length > 0) normalized.push({
 				kind: "assistant-text",
 				text,
 				...parentToolUseId === void 0 ? {} : { parentToolUseId }
 			});
 		} else if (block.type === "thinking") {
-			const text = string$1(block.thinking);
+			const text = string$2(block.thinking);
 			if (text !== void 0 && text.length > 0) normalized.push({
 				kind: "thinking",
 				text,
@@ -579,8 +580,8 @@ function normalizeAssistant(message) {
 				...parentToolUseId === void 0 ? {} : { parentToolUseId }
 			});
 		} else if (block.type === "tool_use") {
-			const toolUseId = string$1(block.id);
-			const toolName = string$1(block.name);
+			const toolUseId = string$2(block.id);
+			const toolName = string$2(block.name);
 			if (toolUseId !== void 0 && toolName !== void 0) normalized.push({
 				kind: "tool-call",
 				toolUseId,
@@ -593,18 +594,18 @@ function normalizeAssistant(message) {
 	return normalized;
 }
 function normalizeUser(message) {
-	const content = record$2(message.message)?.content;
+	const content = record$4(message.message)?.content;
 	if (!Array.isArray(content)) return [{
 		kind: "protocol-error",
 		title: "Malformed Claude user message",
 		detail: message
 	}];
-	const parentToolUseId = string$1(message.parent_tool_use_id);
+	const parentToolUseId = string$2(message.parent_tool_use_id);
 	const normalized = [];
 	for (const item of content) {
-		const block = record$2(item);
+		const block = record$4(item);
 		if (block?.type !== "tool_result") continue;
-		const toolUseId = string$1(block.tool_use_id);
+		const toolUseId = string$2(block.tool_use_id);
 		if (toolUseId === void 0) continue;
 		normalized.push({
 			kind: "tool-result",
@@ -617,11 +618,11 @@ function normalizeUser(message) {
 	return normalized;
 }
 function normalizeSystem(message) {
-	const subtype = string$1(message.subtype);
+	const subtype = string$2(message.subtype);
 	if (subtype === "init") {
-		const sessionId = string$1(message.session_id);
-		const cliVersion = string$1(message.claude_code_version);
-		const cwd = string$1(message.cwd);
+		const sessionId = string$2(message.session_id);
+		const cliVersion = string$2(message.claude_code_version);
+		const cwd = string$2(message.cwd);
 		return sessionId !== void 0 && cliVersion !== void 0 && cwd !== void 0 ? [{
 			kind: "init",
 			sessionId,
@@ -650,20 +651,20 @@ function normalizeSystem(message) {
 		title: `Claude session ${String(message.state)}`
 	}];
 	if (subtype === "permission_denied") {
-		const toolUseId = string$1(message.tool_use_id);
-		const toolName = string$1(message.tool_name);
+		const toolUseId = string$2(message.tool_use_id);
+		const toolName = string$2(message.tool_name);
 		if (toolUseId !== void 0 && toolName !== void 0) return [{
 			kind: "permission-denied",
 			toolUseId,
 			toolName,
-			summary: string$1(message.message) ?? "Claude Code denied the action"
+			summary: string$2(message.message) ?? "Claude Code denied the action"
 		}];
 	}
 	if (subtype === "task_started") {
-		const taskId = string$1(message.task_id);
-		const description = string$1(message.description);
-		const subagentType = string$1(message.subagent_type);
-		const taskType = string$1(message.task_type);
+		const taskId = string$2(message.task_id);
+		const description = string$2(message.description);
+		const subagentType = string$2(message.subagent_type);
+		const taskType = string$2(message.task_type);
 		return [{
 			kind: "subagent",
 			title: description ?? taskId ?? "Claude subagent started",
@@ -678,12 +679,12 @@ function normalizeSystem(message) {
 		}];
 	}
 	if (subtype === "task_progress") {
-		const taskId = string$1(message.task_id);
-		const description = string$1(message.description);
-		const summary = string$1(message.summary);
-		const subagentType = string$1(message.subagent_type);
-		const lastToolName = string$1(message.last_tool_name);
-		const usage = taskUsageOf(record$2(message.usage));
+		const taskId = string$2(message.task_id);
+		const description = string$2(message.description);
+		const summary = string$2(message.summary);
+		const subagentType = string$2(message.subagent_type);
+		const lastToolName = string$2(message.last_tool_name);
+		const usage = taskUsageOf(record$4(message.usage));
 		return [{
 			kind: "subagent",
 			title: summary ?? description ?? "Claude subagent update",
@@ -699,11 +700,11 @@ function normalizeSystem(message) {
 		}];
 	}
 	if (subtype === "task_updated") {
-		const patch = record$2(message.patch);
-		const status = string$1(patch?.status);
-		const taskId = string$1(message.task_id);
-		const description = string$1(patch?.description);
-		const error = string$1(patch?.error);
+		const patch = record$4(message.patch);
+		const status = string$2(patch?.status);
+		const taskId = string$2(message.task_id);
+		const description = string$2(patch?.description);
+		const error = string$2(patch?.error);
 		const taskStatus = status === void 0 ? void 0 : status === "killed" ? "killed" : status === "completed" ? "completed" : status === "failed" ? "failed" : "running";
 		return [{
 			kind: "subagent",
@@ -719,10 +720,10 @@ function normalizeSystem(message) {
 	if (subtype === "task_notification") {
 		const failed = message.status === "failed";
 		const stopped = message.status === "stopped" || message.status === "cancelled";
-		const taskId = string$1(message.task_id);
-		const summary = string$1(message.summary);
+		const taskId = string$2(message.task_id);
+		const summary = string$2(message.summary);
 		const taskStatus = failed ? "failed" : stopped ? "stopped" : "completed";
-		const usage = taskUsageOf(record$2(message.usage));
+		const usage = taskUsageOf(record$4(message.usage));
 		return [{
 			kind: "subagent",
 			title: summary ?? taskId ?? "Claude subagent finished",
@@ -737,10 +738,10 @@ function normalizeSystem(message) {
 	if (subtype === "background_tasks_changed") return [{
 		kind: "background-tasks",
 		tasks: (Array.isArray(message.tasks) ? message.tasks : []).flatMap((item) => {
-			const entry = record$2(item);
-			const taskId = string$1(entry?.task_id);
-			const description = string$1(entry?.description);
-			const taskType = string$1(entry?.task_type);
+			const entry = record$4(item);
+			const taskId = string$2(entry?.task_id);
+			const description = string$2(entry?.description);
+			const taskType = string$2(entry?.task_type);
 			if (taskId === void 0 || description === void 0) return [];
 			return [{
 				taskId,
@@ -756,7 +757,7 @@ function normalizeSystem(message) {
 	}];
 	if (subtype === "informational" || subtype === "notification" || subtype === "local_command_output") return [{
 		kind: message.level === "warning" ? "warning" : "status",
-		title: string$1(message.content) ?? string$1(message.text) ?? "Claude Code notice",
+		title: string$2(message.content) ?? string$2(message.text) ?? "Claude Code notice",
 		detail: message
 	}];
 	if (subtype?.startsWith("hook_") === true || subtype === "plugin_install") return [{
@@ -780,12 +781,12 @@ const RESULT_ERROR_SUBTYPES = /* @__PURE__ */ new Set([
 function normalizeSdkMessage(message) {
 	const value = message;
 	if (value.type === "stream_event") {
-		const event = record$2(value.event);
-		const parentToolUseId = string$1(value.parent_tool_use_id);
+		const event = record$4(value.event);
+		const parentToolUseId = string$2(value.parent_tool_use_id);
 		if (event?.type === "content_block_delta") {
-			const delta = record$2(event.delta);
+			const delta = record$4(event.delta);
 			if (delta?.type === "text_delta") {
-				const text = string$1(delta.text);
+				const text = string$2(delta.text);
 				return text === void 0 ? [] : [{
 					kind: "text-delta",
 					text,
@@ -793,7 +794,7 @@ function normalizeSdkMessage(message) {
 				}];
 			}
 			if (delta?.type === "thinking_delta") {
-				const text = string$1(delta.thinking);
+				const text = string$2(delta.thinking);
 				return text === void 0 ? [] : [{
 					kind: "thinking",
 					text,
@@ -808,7 +809,7 @@ function normalizeSdkMessage(message) {
 	if (value.type === "user") return normalizeUser(value);
 	if (value.type === "system") return normalizeSystem(value);
 	if (value.type === "result") {
-		const sessionId = string$1(value.session_id);
+		const sessionId = string$2(value.session_id);
 		if (sessionId === void 0 || value.subtype !== "success" && !RESULT_ERROR_SUBTYPES.has(String(value.subtype))) return [{
 			kind: "protocol-error",
 			title: "Malformed Claude result message",
@@ -816,11 +817,11 @@ function normalizeSdkMessage(message) {
 		}];
 		const success = value.subtype === "success" && value.is_error !== true;
 		const errors = Array.isArray(value.errors) ? value.errors.filter((item) => typeof item === "string") : void 0;
-		const terminalReason = string$1(value.terminal_reason);
-		const userMessageUuid = string$1(value.user_message_uuid);
-		const permissionDenials = Array.isArray(value.permission_denials) ? value.permission_denials.map((item) => record$2(item)).filter((item) => item !== void 0).map((item) => {
-			const toolName = string$1(item.tool_name);
-			const toolUseId = string$1(item.tool_use_id);
+		const terminalReason = string$2(value.terminal_reason);
+		const userMessageUuid = string$2(value.user_message_uuid);
+		const permissionDenials = Array.isArray(value.permission_denials) ? value.permission_denials.map((item) => record$4(item)).filter((item) => item !== void 0).map((item) => {
+			const toolName = string$2(item.tool_name);
+			const toolUseId = string$2(item.tool_use_id);
 			return toolName === void 0 || toolUseId === void 0 ? void 0 : {
 				toolName,
 				toolUseId
@@ -844,11 +845,10 @@ function normalizeSdkMessage(message) {
 		detail: value.error ?? value.output
 	}];
 	if (value.type === "rate_limit_event") {
-		const status = string$1(record$2(value.rate_limit_info)?.status);
-		const blocking = status !== void 0 && status !== "allowed";
+		const status = string$2(record$4(value.rate_limit_info)?.status);
 		return [{
-			kind: blocking ? "warning" : "status",
-			title: blocking ? "Claude rate limit is blocking requests" : "Claude rate limit status changed",
+			kind: "status",
+			title: status !== void 0 && status !== "allowed" ? "Claude rate limit is blocking requests" : "Claude rate limit status changed",
 			detail: value.rate_limit_info
 		}];
 	}
@@ -1034,6 +1034,7 @@ function rootCallSummary(toolName, input) {
 }
 var ClaudeSupervisor = class {
 	#entries = /* @__PURE__ */ new Map();
+	#interruptions = /* @__PURE__ */ new Map();
 	#runtime;
 	#approval;
 	#userQuestions;
@@ -1041,7 +1042,6 @@ var ClaudeSupervisor = class {
 	#queryFactory;
 	#runDetached;
 	#sidecar;
-	#dynamicPresenterNames = /* @__PURE__ */ new WeakMap();
 	#contextWindows = /* @__PURE__ */ new Map();
 	#disposed = false;
 	#admissionGate = Promise.resolve();
@@ -1082,6 +1082,8 @@ var ClaudeSupervisor = class {
 		return this.#contextWindows.get(model);
 	}
 	runTurn(request) {
+		const interruption = this.#interruptions.get(request.agent.id);
+		if (interruption !== void 0) return interruption.then(() => this.runTurn(request));
 		const operation = this.#admissionGate.then(() => this.#runTurnAdmitted(request));
 		this.#admissionGate = operation.then(() => void 0, () => void 0);
 		return operation;
@@ -1134,6 +1136,8 @@ var ClaudeSupervisor = class {
 			sawActivity: false,
 			sawTextDelta: false,
 			text: "",
+			transcriptText: "",
+			transcriptTextOrdinal: void 0,
 			thinking: "",
 			aborted: false,
 			deniedToolUseIds: /* @__PURE__ */ new Set(),
@@ -1172,7 +1176,7 @@ var ClaudeSupervisor = class {
 		}
 		if (request.signal !== void 0) {
 			const abortListener = () => {
-				this.#interrupt(entry);
+				this.#startInterrupt(entry);
 			};
 			active.abortListener = abortListener;
 			request.signal.addEventListener("abort", abortListener, { once: true });
@@ -1387,7 +1391,14 @@ var ClaudeSupervisor = class {
 			if (message.userMessageUuid !== void 0 && message.userMessageUuid === entry.handshakeUuid) return;
 			if (entry.claudeSessionId === void 0) throw new ClaudeProtocolError("Claude Code sent a result before initialization");
 			if (message.sessionId !== entry.claudeSessionId) throw new ClaudeProtocolError(`Claude Code result session ${message.sessionId} does not match ${entry.claudeSessionId}`);
-			if (message.userMessageUuid !== void 0 && message.userMessageUuid !== active.promptUuid) throw new ClaudeProtocolError(`Claude Code result for user message ${message.userMessageUuid} does not match active request ${active.promptUuid}`);
+			if (active.phase === "waiting-tasks") {
+				await this.#completeProgressSegment(active, message);
+				return;
+			}
+			if (message.userMessageUuid !== void 0 && message.userMessageUuid !== active.promptUuid) {
+				if (active.phase === "follow-up") return;
+				throw new ClaudeProtocolError(`Claude Code result for user message ${message.userMessageUuid} does not match active request ${active.promptUuid}`);
+			}
 			await this.#completeTurn(entry, active, message);
 			return;
 		}
@@ -1398,6 +1409,8 @@ var ClaudeSupervisor = class {
 				if (message.parentToolUseId !== void 0) return;
 				active.sawTextDelta = true;
 				active.text += message.text;
+				active.transcriptText += message.text;
+				await this.#upsertTranscriptText(active);
 				active.output.push({
 					type: "text-delta",
 					text: message.text
@@ -1408,6 +1421,8 @@ var ClaudeSupervisor = class {
 				if (!active.sawTextDelta) {
 					active.sawTextDelta = true;
 					active.text += message.text;
+					active.transcriptText += message.text;
+					await this.#upsertTranscriptText(active);
 					active.output.push({
 						type: "text-delta",
 						text: message.text
@@ -1429,6 +1444,7 @@ var ClaudeSupervisor = class {
 				});
 				return;
 			case "tool-call":
+				if (message.parentToolUseId === void 0) this.#closeTranscriptTextSegment(active);
 				await this.#appendActivity(active, {
 					kind: message.parentToolUseId === void 0 ? "tool-call" : "subagent",
 					phase: "started",
@@ -1439,11 +1455,7 @@ var ClaudeSupervisor = class {
 					summary: message.parentToolUseId === void 0 ? rootCallSummary(message.toolName, message.input) : `Subagent called ${message.toolName}`,
 					detail: message.input
 				});
-				if (message.parentToolUseId === void 0) {
-					active.callNames.set(message.toolUseId, message.toolName);
-					this.#ensureDynamicPresenter(active.agent, message.toolName);
-					if (!TASK_TOOL_NAMES.has(message.toolName)) await this.#appendNativeToolCall(active, message);
-				}
+				if (message.parentToolUseId === void 0) active.callNames.set(message.toolUseId, message.toolName);
 				return;
 			case "tool-result":
 				await this.#appendActivity(active, {
@@ -1455,7 +1467,6 @@ var ClaudeSupervisor = class {
 					detail: message.output,
 					isError: message.isError
 				});
-				if (message.parentToolUseId === void 0 && !TASK_TOOL_NAMES.has(active.callNames.get(message.toolUseId) ?? "")) await this.#appendNativeToolResult(active, message);
 				return;
 			case "subagent":
 				await this.#appendActivity(active, {
@@ -1488,12 +1499,6 @@ var ClaudeSupervisor = class {
 					title: message.toolName,
 					summary: message.summary
 				});
-				if (!TASK_TOOL_NAMES.has(active.callNames.get(message.toolUseId) ?? message.toolName)) await this.#appendNativeToolResult(active, {
-					kind: "tool-result",
-					toolUseId: message.toolUseId,
-					output: message.summary,
-					isError: true
-				});
 				return;
 		}
 	}
@@ -1571,6 +1576,7 @@ var ClaudeSupervisor = class {
 		active.promptUuid = randomUUID();
 		active.sawTextDelta = false;
 		active.text = "";
+		this.#closeTranscriptTextSegment(active);
 		active.thinking = "";
 		await this.#appendSafely(active, {
 			kind: "status",
@@ -1604,9 +1610,43 @@ var ClaudeSupervisor = class {
 		entry.taskSnapshotAt = Date.now();
 		await this.#sidecar.writeTasks(entry.sessionId, [...entry.tasks.values()]).catch(() => void 0);
 	}
+	async #completeProgressSegment(active, result, recordUsage = true) {
+		if (recordUsage && (result.usage.inputTokens !== void 0 || result.usage.outputTokens !== void 0 || result.usage.cumulativeCostUsd !== void 0)) {
+			await this.#appendSafely(active, {
+				kind: "usage",
+				phase: "completed",
+				title: "Claude usage",
+				summary: usageSummary(result.usage),
+				usage: result.usage
+			});
+			active.output.push({
+				type: "usage",
+				usage: result.usage
+			});
+		}
+		if (!active.sawTextDelta && active.text.length === 0 && result.text !== void 0) {
+			active.text = result.text;
+			active.transcriptText = result.text;
+			await this.#upsertTranscriptText(active);
+			active.output.push({
+				type: "text-delta",
+				text: result.text
+			});
+		}
+		await this.#upsertTranscriptText(active);
+		active.output.push({
+			type: "segment-complete",
+			text: active.text
+		});
+		active.sawTextDelta = false;
+		active.text = "";
+		this.#closeTranscriptTextSegment(active);
+		active.thinking = "";
+	}
 	async #completeTurn(entry, active, result) {
 		if (entry.active !== active) return;
 		if (active.aborted) {
+			await this.#upsertTranscriptText(active);
 			await this.#appendSafely(active, {
 				kind: "status",
 				phase: "failed",
@@ -1639,6 +1679,16 @@ var ClaudeSupervisor = class {
 			summary: unmatchedDenials.map((denial) => denial.toolName).join(", ")
 		});
 		if (!result.success) {
+			if (!active.sawTextDelta && active.text.length === 0 && result.text !== void 0) {
+				active.text = result.text;
+				active.transcriptText = result.text;
+				await this.#upsertTranscriptText(active);
+				active.output.push({
+					type: "text-delta",
+					text: result.text
+				});
+			}
+			await this.#upsertTranscriptText(active);
 			const message = result.errors?.join("\n") ?? (result.terminalReason !== void 0 ? `Claude Code failed the turn (${result.terminalReason})` : "Claude Code failed the turn");
 			await this.#appendSafely(active, {
 				kind: "error",
@@ -1651,11 +1701,14 @@ var ClaudeSupervisor = class {
 		} else {
 			if (!active.sawTextDelta && active.text.length === 0 && result.text !== void 0) {
 				active.text = result.text;
+				active.transcriptText = result.text;
+				await this.#upsertTranscriptText(active);
 				active.output.push({
 					type: "text-delta",
 					text: result.text
 				});
 			}
+			await this.#upsertTranscriptText(active);
 			if (active.phase === "primary" && this.#hasRunningTasks(entry, active)) {
 				active.phase = "waiting-tasks";
 				await this.#appendSafely(active, {
@@ -1663,10 +1716,7 @@ var ClaudeSupervisor = class {
 					phase: "updated",
 					title: "Claude Code is waiting for background tasks"
 				});
-				active.output.push({
-					type: "segment-complete",
-					text: active.text
-				});
+				await this.#completeProgressSegment(active, result, false);
 				return;
 			}
 			await this.#appendSafely(active, {
@@ -1686,6 +1736,25 @@ var ClaudeSupervisor = class {
 		entry.lastUsedAt = Date.now();
 		this.#armIdleTimer(entry);
 	}
+	async #upsertTranscriptText(active) {
+		if (active.transcriptText.length === 0) return;
+		const ordinal = active.transcriptTextOrdinal ?? active.cursor.nextOrdinal++;
+		active.transcriptTextOrdinal = ordinal;
+		try {
+			await this.#sidecar.appendActivity(active.agent.id, {
+				kind: "text",
+				phase: "updated",
+				text: active.transcriptText,
+				turn: active.cursor.turn,
+				step: active.cursor.step,
+				ordinal
+			});
+		} catch {}
+	}
+	#closeTranscriptTextSegment(active) {
+		active.transcriptText = "";
+		active.transcriptTextOrdinal = void 0;
+	}
 	async #appendActivity(active, activity) {
 		const ordinal = active.cursor.nextOrdinal++;
 		await this.#sidecar.appendActivity(active.agent.id, {
@@ -1700,53 +1769,14 @@ var ClaudeSupervisor = class {
 	async #appendSafely(active, activity) {
 		await this.#appendActivity(active, activity).catch(() => void 0);
 	}
-	/** Register one presenter-only mirror for a tool name the static preset
-	*  registry does not cover (MCP tools, newly added built-ins). Runs in the
-	*  agent scope so the mirror is visible only to this preset's sessions and
-	*  unwinds with the agent; failure keeps the generic card, never the turn. */
-	#ensureDynamicPresenter(agent, name) {
-		if (CLAUDE_PRESENTER_NAMES.has(name)) return;
-		let known = this.#dynamicPresenterNames.get(agent);
-		if (known === void 0) {
-			known = /* @__PURE__ */ new Set();
-			this.#dynamicPresenterNames.set(agent, known);
-		}
-		if (known.has(name)) return;
-		try {
-			agent.ctx.tools.register(dynamicPresenterDefinition(name));
-			known.add(name);
-		} catch {}
-	}
-	/** Mirror one root Claude tool call into the durable native tool channel so
-	*  the host's tool presentation renders it exactly like a DSH-executed call.
-	*  Presentation duplication is best-effort and never unsettles the turn. */
-	async #appendNativeToolCall(active, message) {
-		try {
-			await active.agent.session.append("tool/call", {
-				turn: active.cursor.turn,
-				step: active.cursor.step,
-				callId: CallId(message.toolUseId),
-				name: message.toolName,
-				arguments: safeDetail(message.input) ?? "{}"
-			});
-		} catch {}
-	}
-	async #appendNativeToolResult(active, message) {
-		const text = typeof message.output === "string" ? redactText(message.output) : safeDetail(message.output) ?? "";
-		try {
-			await active.agent.session.append("tool/result", {
-				turn: active.cursor.turn,
-				step: active.cursor.step,
-				message: createToolResultMessage({
-					callId: CallId(message.toolUseId),
-					content: [{
-						type: "text",
-						text
-					}],
-					isError: message.isError
-				})
-			}, { surfaceOp: "append" });
-		} catch {}
+	#startInterrupt(entry) {
+		const existing = this.#interruptions.get(entry.sessionId);
+		if (existing !== void 0) return existing;
+		const interruption = this.#interrupt(entry).finally(() => {
+			this.#interruptions.delete(entry.sessionId);
+		});
+		this.#interruptions.set(entry.sessionId, interruption);
+		return interruption;
 	}
 	async #interrupt(entry) {
 		const active = entry.active;
@@ -1754,6 +1784,7 @@ var ClaudeSupervisor = class {
 		entry.state = "interrupting";
 		active.aborted = true;
 		active.output.fail(abortFailure());
+		await this.#upsertTranscriptText(active);
 		let interruptError;
 		try {
 			if (((await withTimeout(entry.query.interrupt(), 5e3, "Claude Code interrupt"))?.still_queued ?? []).includes(active.promptUuid)) throw new Error(`Claude Code interrupt left submitted prompt ${active.promptUuid} queued`);
@@ -1775,6 +1806,7 @@ var ClaudeSupervisor = class {
 		const active = entry.active;
 		const stderr = entry.process?.stderrTail();
 		if (active !== void 0) {
+			await this.#upsertTranscriptText(active);
 			if (active.signal !== void 0 && active.abortListener !== void 0) active.signal.removeEventListener("abort", active.abortListener);
 			const unknown = active.sawActivity;
 			entry.state = unknown ? "outcome-unknown" : "disconnected";
@@ -1830,6 +1862,79 @@ var ClaudeSupervisor = class {
 	}
 };
 //#endregion
+//#region src/review-comments.ts
+const MAX_COMMENTS_PER_SESSION = 50;
+const MAX_TEXT_CHARS$1 = 2e3;
+const MAX_PATH_CHARS$1 = 1024;
+const MAX_LINE = 1e7;
+var ReviewCommentError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.name = "ReviewCommentError";
+		this.code = code;
+	}
+};
+function validSide(value) {
+	return value === "old" || value === "new";
+}
+/** Pending line comments queued per session until the next user turn drains them. */
+var ReviewCommentStore = class {
+	#comments = /* @__PURE__ */ new Map();
+	add(sessionId, input) {
+		const path = typeof input.path === "string" ? input.path.trim() : "";
+		const text = typeof input.text === "string" ? input.text.trim() : "";
+		if (path.length === 0 || path.length > MAX_PATH_CHARS$1 || /[\0\r\n]/u.test(path)) throw new ReviewCommentError("invalid-request", "The comment path is invalid.");
+		if (text.length === 0 || text.length > MAX_TEXT_CHARS$1 || text.includes("\0")) throw new ReviewCommentError("invalid-request", "The comment text is invalid.");
+		if (typeof input.line !== "number" || !Number.isSafeInteger(input.line) || input.line < 1 || input.line > MAX_LINE) throw new ReviewCommentError("invalid-request", "The comment line is invalid.");
+		if (!validSide(input.side)) throw new ReviewCommentError("invalid-request", "The comment side is invalid.");
+		const existing = this.#comments.get(sessionId) ?? [];
+		if (existing.length >= MAX_COMMENTS_PER_SESSION) throw new ReviewCommentError("too-many-comments", "Too many pending review comments. Remove one before adding another.");
+		const comment = {
+			id: randomUUID(),
+			path,
+			line: input.line,
+			side: input.side,
+			text
+		};
+		this.#comments.set(sessionId, [...existing, comment]);
+		return comment;
+	}
+	remove(sessionId, id) {
+		const existing = this.#comments.get(sessionId);
+		if (existing === void 0) return false;
+		const next = existing.filter((comment) => comment.id !== id);
+		if (next.length === existing.length) return false;
+		if (next.length === 0) this.#comments.delete(sessionId);
+		else this.#comments.set(sessionId, next);
+		return true;
+	}
+	list(sessionId) {
+		return this.#comments.get(sessionId) ?? [];
+	}
+	/** Remove and return every pending comment; called when a user turn consumes them. */
+	drain(sessionId) {
+		const existing = this.#comments.get(sessionId) ?? [];
+		this.#comments.delete(sessionId);
+		return existing;
+	}
+	disposeSession(sessionId) {
+		this.#comments.delete(sessionId);
+	}
+	dispose() {
+		this.#comments.clear();
+	}
+};
+/** Render drained comments as the prompt block preceding the user's message text. */
+function formatReviewComments(comments) {
+	return [
+		"<user-review-comments>",
+		"The user attached these code review comments to this message. Each references a file and line from the current working tree diff:",
+		...comments.map((comment, index) => `${index + 1}. ${comment.path}:${comment.line}${comment.side === "old" ? " (old side)" : ""} — ${comment.text}`),
+		"</user-review-comments>"
+	].join("\n");
+}
+//#endregion
 //#region src/adapter.ts
 const MODELS = [
 	{
@@ -1926,6 +2031,22 @@ function validateImageRef(ref, attachments, imageIndex) {
 	const maxDimension = "maxImageDimension" in limits && finiteNonNegative(limits.maxImageDimension) ? limits.maxImageDimension : void 0;
 	if (!finiteNonNegative(ref.width) || !finiteNonNegative(ref.height) || ref.width * ref.height > limits.maxImagePixels || maxDimension !== void 0 && (ref.width > maxDimension || ref.height > maxDimension)) throw new Error(`dsh-claude: image ${imageIndex} exceeds the configured dimension limit`);
 }
+/**
+* Prepend the session's pending diff-review comments to the outgoing user
+* prompt. The comments are drained once per turn: they are formatted into one
+* `<user-review-comments>` block placed ahead of the user's own text (or as a
+* leading text block for multi-part prompts) so Claude reads them in the same
+* turn that consumed them.
+*/
+function injectReviewComments(prompt, comments) {
+	if (comments.length === 0) return prompt;
+	const block = formatReviewComments(comments);
+	if (typeof prompt === "string") return `${block}\n\n${prompt}`;
+	return [{
+		type: "text",
+		text: block
+	}, ...prompt];
+}
 function imageBlock(data, mediaType) {
 	return {
 		type: "image",
@@ -2008,12 +2129,14 @@ var ClaudeCodeAdapter = class extends LlmAdapter {
 	#agents;
 	#attachments;
 	#presetIdFor;
-	constructor(supervisor, agents, attachments, presetIdFor) {
+	#drainReviewComments;
+	constructor(supervisor, agents, attachments, presetIdFor, drainReviewComments = () => []) {
 		super();
 		this.#supervisor = supervisor;
 		this.#agents = agents;
 		this.#attachments = attachments;
 		this.#presetIdFor = presetIdFor;
+		this.#drainReviewComments = drainReviewComments;
 	}
 	providerInfo(provider) {
 		return {
@@ -2080,42 +2203,20 @@ var ClaudeCodeAdapter = class extends LlmAdapter {
 		}
 		const events = await this.#supervisor.runTurn({
 			agent,
-			prompt,
+			prompt: injectReviewComments(prompt, this.#drainReviewComments(agent.id)),
 			model: options.model,
 			...thinkingMode === void 0 ? {} : { thinkingMode },
 			...options.signal === void 0 ? {} : { signal: options.signal }
 		});
-		let text = "";
 		let pendingUsage;
 		let completed = false;
-		let blockIndex = 0;
 		try {
-			for await (const event of events) if (event.type === "text-delta") text += event.text;
-			else if (event.type === "usage") pendingUsage = tokenUsage(event.usage);
-			else {
-				if (text.length > 0) {
-					yield {
-						type: "block-start",
-						index: blockIndex,
-						blockType: "text"
-					};
-					yield {
-						type: "text-delta",
-						index: blockIndex,
-						text
-					};
-					yield {
-						type: "block-end",
-						index: blockIndex,
-						block: {
-							type: "text",
-							text
-						}
-					};
-					blockIndex += 1;
+			for await (const event of events) {
+				if (event.type === "text-delta" || event.type === "segment-complete") continue;
+				if (event.type === "usage") {
+					pendingUsage = tokenUsage(event.usage);
+					continue;
 				}
-				text = "";
-				if (event.type === "segment-complete") continue;
 				completed = true;
 				if (pendingUsage !== void 0) yield {
 					type: "usage",
@@ -2129,26 +2230,6 @@ var ClaudeCodeAdapter = class extends LlmAdapter {
 		} catch (error) {
 			if (error.name === "AbortError") {
 				completed = true;
-				if (text.length > 0) {
-					yield {
-						type: "block-start",
-						index: blockIndex,
-						blockType: "text"
-					};
-					yield {
-						type: "text-delta",
-						index: blockIndex,
-						text
-					};
-					yield {
-						type: "block-end",
-						index: blockIndex,
-						block: {
-							type: "text",
-							text
-						}
-					};
-				}
 				yield {
 					type: "finish",
 					reason: {
@@ -2166,8 +2247,8 @@ var ClaudeCodeAdapter = class extends LlmAdapter {
 		if (!completed) throw new Error("dsh-claude: Claude turn stream ended without a result");
 	}
 };
-function createClaudeCodeAdapter(supervisor, agents, attachments, presetIdFor) {
-	return new ClaudeCodeAdapter(supervisor, agents, attachments, presetIdFor);
+function createClaudeCodeAdapter(supervisor, agents, attachments, presetIdFor, drainReviewComments = () => []) {
+	return new ClaudeCodeAdapter(supervisor, agents, attachments, presetIdFor, drainReviewComments);
 }
 //#endregion
 //#region src/http.ts
@@ -2294,8 +2375,8 @@ function registerClaudeDoctorRoutes(ctx, runtime, supervisor, config, resolution
 }
 //#endregion
 //#region src/projection-routes.ts
-const MAX_SESSION_ID_CHARS = 1024;
-function sessionIdFromUrl(rawUrl) {
+const MAX_SESSION_ID_CHARS$2 = 1024;
+function sessionIdFromUrl$1(rawUrl) {
 	try {
 		const pathname = new URL(rawUrl ?? "/", "http://localhost").pathname;
 		const prefix = `${CLAUDE_PROJECTION_PATH}/`;
@@ -2303,21 +2384,21 @@ function sessionIdFromUrl(rawUrl) {
 		const encoded = pathname.slice(prefix.length);
 		if (encoded.length === 0 || encoded.includes("/")) return void 0;
 		const sessionId = decodeURIComponent(encoded);
-		if (sessionId.length === 0 || sessionId.length > MAX_SESSION_ID_CHARS) return void 0;
+		if (sessionId.length === 0 || sessionId.length > MAX_SESSION_ID_CHARS$2) return void 0;
 		return sessionId;
 	} catch {
 		return;
 	}
 }
 /** Register the browser-readable, credential-free sidecar projection endpoint. */
-function registerClaudeProjectionRoute(ctx, sidecar, ownsSession, commandsForSession = () => [], repositoryForSession = async () => void 0) {
+function registerClaudeProjectionRoute(ctx, sidecar, ownsSession, commandsForSession = () => [], repositoryForSession = async () => void 0, reviewCommentsForSession = () => []) {
 	ctx.effect(() => ctx.webServer.register({
 		kind: "prefix",
 		path: CLAUDE_PROJECTION_PATH,
 		handler: async (req, res) => {
 			if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
 			if (!trustedRequest(req)) return json(res, 403, { error: "forbidden" });
-			const sessionId = sessionIdFromUrl(req.url);
+			const sessionId = sessionIdFromUrl$1(req.url);
 			if (sessionId === void 0) return json(res, 400, { error: "invalid session id" });
 			try {
 				const projection = await sidecar.read(sessionId);
@@ -2331,7 +2412,8 @@ function registerClaudeProjectionRoute(ctx, sidecar, ownsSession, commandsForSes
 					activities: projection.activities,
 					...projection.contextUsage === void 0 ? {} : { contextUsage: projection.contextUsage },
 					...projection.tasks === void 0 ? {} : { tasks: projection.tasks },
-					...repository === void 0 ? {} : { repository }
+					...repository === void 0 ? {} : { repository },
+					reviewComments: owned ? reviewCommentsForSession(sessionId) : []
 				});
 			} catch {
 				return json(res, 500, { error: "projection unavailable" });
@@ -2341,16 +2423,17 @@ function registerClaudeProjectionRoute(ctx, sidecar, ownsSession, commandsForSes
 }
 //#endregion
 //#region src/repository-status.ts
-const MAX_OUTPUT_BYTES$1 = 65536;
+const MAX_OUTPUT_BYTES$2 = 65536;
 const MAX_DIFF_BYTES = 262144;
-const GIT_TIMEOUT_MS$1 = 5e3;
+const MAX_UNTRACKED_DIFFS = 50;
+const GIT_TIMEOUT_MS$2 = 5e3;
 const GH_TIMEOUT_MS = 8e3;
 const CACHE_TTL_MS = 5e3;
 const MAX_TEXT_CHARS = 1024;
 function bounded(value) {
 	return value.trim().slice(0, MAX_TEXT_CHARS);
 }
-async function collect$1(handle) {
+async function collect$2(handle) {
 	const outcome = await handle.done;
 	const stdout = handle.collected.stdout?.readFrom(0);
 	return {
@@ -2359,15 +2442,15 @@ async function collect$1(handle) {
 		lossy: stdout?.lossy === true
 	};
 }
-async function run(runtime, executable, args, cwd, timeoutMs, maxBytes = MAX_OUTPUT_BYTES$1) {
+async function run(runtime, executable, args, cwd, timeoutMs, maxBytes = MAX_OUTPUT_BYTES$2) {
 	const signal = AbortSignal.timeout(timeoutMs);
-	return collect$1(runtime.spawn({
+	return collect$2(runtime.spawn({
 		argv: [executable, ...args],
 		cwd,
 		stdio: {
 			stdin: "ignore",
 			stdout: { maxBytes },
-			stderr: { maxBytes: MAX_OUTPUT_BYTES$1 }
+			stderr: { maxBytes: MAX_OUTPUT_BYTES$2 }
 		},
 		graceMs: 1e3,
 		signal,
@@ -2381,6 +2464,9 @@ function parseGitStatus(output) {
 	let branch;
 	let detached = false;
 	let dirty = false;
+	let upstream = false;
+	let ahead;
+	let behind;
 	for (const line of output.split(/\r?\n/u)) {
 		if (line.startsWith("# branch.head ")) {
 			const head = bounded(line.slice(14));
@@ -2388,12 +2474,27 @@ function parseGitStatus(output) {
 			else if (head.length > 0 && head !== "(unknown)") branch = head;
 			continue;
 		}
+		if (line.startsWith("# branch.upstream ")) {
+			upstream = true;
+			continue;
+		}
+		if (line.startsWith("# branch.ab ")) {
+			const counts = /^# branch\.ab \+(\d+) -(\d+)$/u.exec(line);
+			if (counts !== null) {
+				ahead = Number(counts[1]);
+				behind = Number(counts[2]);
+			}
+			continue;
+		}
 		if (line.length > 0 && !line.startsWith("# ")) dirty = true;
 	}
 	return {
 		...branch === void 0 ? {} : { branch },
 		detached,
-		dirty
+		dirty,
+		upstream,
+		...ahead === void 0 ? {} : { ahead },
+		...behind === void 0 ? {} : { behind }
 	};
 }
 function parseDiffNumstat(value) {
@@ -2419,14 +2520,14 @@ function parseGitHubRemote(value) {
 	if (match?.[1] === void 0 || match[2] === void 0) return void 0;
 	return `${match[1]}/${match[2]}`;
 }
-function record$1(value) {
+function record$3(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function aggregateChecks(value) {
 	if (!Array.isArray(value) || value.length === 0) return "none";
 	let pending = false;
 	for (const item of value) {
-		const check = record$1(item);
+		const check = record$3(item);
 		if (check === void 0) continue;
 		const conclusion = typeof check.conclusion === "string" ? check.conclusion.toUpperCase() : void 0;
 		const status = typeof check.status === "string" ? check.status.toUpperCase() : void 0;
@@ -2450,7 +2551,7 @@ function reviewState(value) {
 	return "none";
 }
 function parsePullRequest(value) {
-	const input = record$1(value);
+	const input = record$3(value);
 	if (input === void 0 || !Number.isSafeInteger(input.number) || Number(input.number) <= 0 || typeof input.title !== "string" || typeof input.url !== "string") return void 0;
 	let url;
 	try {
@@ -2471,8 +2572,9 @@ function parsePullRequest(value) {
 		review: reviewState(input.reviewDecision),
 		checks: aggregateChecks(input.statusCheckRollup),
 		...typeof input.mergeStateStatus === "string" ? { mergeState: bounded(input.mergeStateStatus) } : {},
-		...typeof record$1(input.author)?.login === "string" ? { author: bounded(String(record$1(input.author)?.login)) } : {},
+		...typeof record$3(input.author)?.login === "string" ? { author: bounded(String(record$3(input.author)?.login)) } : {},
 		...typeof input.createdAt === "string" && Number.isFinite(Date.parse(input.createdAt)) ? { createdAt: new Date(input.createdAt).toISOString() } : {},
+		...typeof input.mergedAt === "string" && Number.isFinite(Date.parse(input.mergedAt)) ? { mergedAt: new Date(input.mergedAt).toISOString() } : {},
 		...typeof input.baseRefName === "string" && bounded(input.baseRefName).length > 0 ? { baseBranch: bounded(input.baseRefName) } : {}
 	};
 }
@@ -2498,6 +2600,10 @@ var RepositoryStatusService = class {
 		value.catch(() => this.#cache.delete(cwd));
 		return value;
 	}
+	invalidate(cwd) {
+		this.#cache.delete(cwd);
+		this.#lastReady.delete(cwd);
+	}
 	dispose() {
 		this.#cache.clear();
 		this.#lastReady.clear();
@@ -2539,7 +2645,7 @@ var RepositoryStatusService = class {
 				"--show-toplevel",
 				"--absolute-git-dir",
 				"--git-common-dir"
-			], cwd, GIT_TIMEOUT_MS$1);
+			], cwd, GIT_TIMEOUT_MS$2);
 			if (paths.exitCode !== 0) return {
 				status: "not-repository",
 				cwd: safeCwd
@@ -2556,8 +2662,8 @@ var RepositoryStatusService = class {
 				"status",
 				"--porcelain=v2",
 				"--branch",
-				"--untracked-files=no"
-			], cwd, GIT_TIMEOUT_MS$1);
+				"--untracked-files=normal"
+			], cwd, GIT_TIMEOUT_MS$2);
 			if (statusResult.exitCode !== 0) return {
 				status: "unavailable",
 				cwd: safeCwd
@@ -2567,7 +2673,7 @@ var RepositoryStatusService = class {
 				"remote",
 				"get-url",
 				"origin"
-			], cwd, GIT_TIMEOUT_MS$1);
+			], cwd, GIT_TIMEOUT_MS$2);
 			const remote = remoteResult.exitCode === 0 ? parseGitHubRemote(remoteResult.stdout) : void 0;
 			const pullRequest = status.branch === void 0 || remote === void 0 ? void 0 : await this.#pullRequest(cwd, remote, status.branch);
 			const diffBase = pullRequest?.baseBranch === void 0 ? "HEAD" : await this.#mergeBase(cwd, git, pullRequest.baseBranch) ?? "HEAD";
@@ -2600,7 +2706,7 @@ var RepositoryStatusService = class {
 				"merge-base",
 				"HEAD",
 				`refs/remotes/origin/${baseBranch}`
-			], cwd, GIT_TIMEOUT_MS$1);
+			], cwd, GIT_TIMEOUT_MS$2);
 			if (result.exitCode !== 0 || result.lossy) return void 0;
 			const oid = bounded(result.stdout);
 			return /^[0-9a-f]{40}$/iu.test(oid) ? oid : void 0;
@@ -2616,7 +2722,7 @@ var RepositoryStatusService = class {
 				"--numstat",
 				base,
 				"--"
-			], cwd, GIT_TIMEOUT_MS$1);
+			], cwd, GIT_TIMEOUT_MS$2);
 			if (numstat.exitCode !== 0 || numstat.lossy) return void 0;
 			const summary = parseDiffNumstat(numstat.stdout);
 			const patch = await run(this.#runtime, git, [
@@ -2626,20 +2732,70 @@ var RepositoryStatusService = class {
 				"--unified=3",
 				base,
 				"--"
-			], cwd, GIT_TIMEOUT_MS$1, MAX_DIFF_BYTES);
+			], cwd, GIT_TIMEOUT_MS$2, MAX_DIFF_BYTES);
 			if (patch.exitCode !== 0) return {
 				...summary,
 				truncated: true
 			};
+			const untracked = await this.#untrackedDiff(cwd, git);
+			const combinedPatch = `${patch.stdout}${untracked.patch}`;
 			return {
-				...summary,
-				...patch.lossy ? {} : { patch: patch.stdout },
-				truncated: patch.lossy
+				additions: summary.additions + untracked.additions,
+				deletions: summary.deletions,
+				files: summary.files + untracked.files,
+				...patch.lossy ? {} : { patch: combinedPatch.slice(0, MAX_DIFF_BYTES) },
+				truncated: patch.lossy || untracked.truncated || combinedPatch.length > MAX_DIFF_BYTES
 			};
 		} catch {
 			return;
 		}
 	}
+	async #untrackedDiff(cwd, git) {
+		const listed = await run(this.#runtime, git, [
+			"ls-files",
+			"--others",
+			"--exclude-standard",
+			"-z"
+		], cwd, GIT_TIMEOUT_MS$2);
+		if (listed.exitCode !== 0 || listed.lossy) return {
+			additions: 0,
+			files: 0,
+			patch: "",
+			truncated: listed.lossy
+		};
+		const paths = listed.stdout.split("\0").filter((path) => path.length > 0);
+		let additions = 0;
+		let patch = "";
+		let truncated = paths.length > MAX_UNTRACKED_DIFFS;
+		for (const path of paths.slice(0, MAX_UNTRACKED_DIFFS)) {
+			const result = await run(this.#runtime, git, [
+				"diff",
+				"--no-ext-diff",
+				"--no-color",
+				"--unified=3",
+				"--numstat",
+				"--patch",
+				"--no-index",
+				"--",
+				"/dev/null",
+				path
+			], cwd, GIT_TIMEOUT_MS$2, MAX_DIFF_BYTES);
+			if (result.exitCode !== 0 && result.exitCode !== 1) {
+				truncated = true;
+				continue;
+			}
+			const start = result.stdout.indexOf("diff --git ");
+			additions += parseDiffNumstat(start >= 0 ? result.stdout.slice(0, start) : result.stdout).additions;
+			if (result.lossy) truncated = true;
+			else if (start >= 0) patch += result.stdout.slice(start);
+		}
+		return {
+			additions,
+			files: paths.length,
+			patch,
+			truncated
+		};
+	}
 	async #pullRequest(cwd, repository, branch) {
 		const gh = await this.#gh();
 		if (gh === void 0) return void 0;
@@ -2662,8 +2818,8 @@ var RepositoryStatusService = class {
 };
 //#endregion
 //#region src/repository-setup.ts
-const MAX_OUTPUT_BYTES = 131072;
-const GIT_TIMEOUT_MS = 1e4;
+const MAX_OUTPUT_BYTES$1 = 131072;
+const GIT_TIMEOUT_MS$1 = 1e4;
 const GIT_FETCH_TIMEOUT_MS = 6e4;
 const MAX_PATH_CHARS = 4096;
 const MAX_BRANCH_CHARS = 512;
@@ -2676,7 +2832,7 @@ var RepositorySetupError = class extends Error {
 		this.code = code;
 	}
 };
-async function collect(handle) {
+async function collect$1(handle) {
 	const outcome = await handle.done;
 	const stdout = handle.collected.stdout?.readFrom(0);
 	const stderr = handle.collected.stderr?.readFrom(0);
@@ -2969,14 +3125,14 @@ var RepositorySetupService = class {
 		this.#gitPath ??= this.#runtime.resolveExecutable("git");
 		return this.#gitPath;
 	}
-	async #run(executable, args, cwd, timeoutMs = GIT_TIMEOUT_MS) {
-		return collect(this.#runtime.spawn({
+	async #run(executable, args, cwd, timeoutMs = GIT_TIMEOUT_MS$1) {
+		return collect$1(this.#runtime.spawn({
 			argv: [executable, ...args],
 			cwd,
 			stdio: {
 				stdin: "ignore",
-				stdout: { maxBytes: MAX_OUTPUT_BYTES },
-				stderr: { maxBytes: MAX_OUTPUT_BYTES }
+				stdout: { maxBytes: MAX_OUTPUT_BYTES$1 },
+				stderr: { maxBytes: MAX_OUTPUT_BYTES$1 }
 			},
 			graceMs: 1e3,
 			signal: AbortSignal.timeout(timeoutMs),
@@ -3016,30 +3172,400 @@ var RepositorySetupService = class {
 	}
 };
 //#endregion
+//#region src/repository-actions.ts
+const MAX_OUTPUT_BYTES = 262144;
+const MAX_PATCH_CHARS = 65536;
+const MAX_MESSAGE_CHARS = 512;
+const MAX_PR_TEXT_CHARS = 8192;
+const MAX_UNPUSHED_COMMITS = 20;
+const GIT_TIMEOUT_MS = 15e3;
+const REMOTE_TIMEOUT_MS = 6e4;
+const GENERATE_TIMEOUT_MS = 6e4;
+var RepositoryActionError = class extends Error {
+	code;
+	commit;
+	constructor(code, message, commit) {
+		super(message);
+		this.name = "RepositoryActionError";
+		this.code = code;
+		if (commit !== void 0) this.commit = commit;
+	}
+};
+async function collect(handle) {
+	const outcome = await handle.done;
+	const stdout = handle.collected.stdout?.readFrom(0);
+	const stderr = handle.collected.stderr?.readFrom(0);
+	return {
+		exitCode: outcome.exitCode,
+		stdout: stdout?.text ?? "",
+		stderr: stderr?.text ?? "",
+		lossy: stdout?.lossy === true || stderr?.lossy === true
+	};
+}
+function safeText(value, maximum, label) {
+	const text = value.trim();
+	if (text.length === 0 || text.length > maximum || /[\0\r]/u.test(text)) throw new RepositoryActionError("invalid-request", `${label} is invalid.`);
+	return text;
+}
+function isProtectedWarpPath(path) {
+	return basename(path.replaceAll("\\", "/")).toLocaleLowerCase("en-US") === "warp.md";
+}
+function parseRepositoryActionStatus(output) {
+	const files = /* @__PURE__ */ new Map();
+	const records = output.includes("\0") ? output.split("\0") : output.split(/\r?\n/u);
+	for (let position = 0; position < records.length; position += 1) {
+		const line = records[position] ?? "";
+		if (line.length < 4) continue;
+		const index = line[0] ?? " ";
+		const worktree = line[1] ?? " ";
+		let path = line.slice(3);
+		const rename = path.lastIndexOf(" -> ");
+		if (rename >= 0) path = path.slice(rename + 4);
+		if (output.includes("\0") && (index === "R" || index === "C" || worktree === "R" || worktree === "C")) position += 1;
+		if (path.length === 0 || path.includes("\0") || isProtectedWarpPath(path)) continue;
+		files.set(path, {
+			path,
+			staged: index !== " " && index !== "?",
+			unstaged: worktree !== " " && worktree !== "?",
+			untracked: index === "?" && worktree === "?"
+		});
+	}
+	return [...files.values()].sort((left, right) => left.path.localeCompare(right.path));
+}
+function fallbackCommitMessage(files) {
+	if (files.length === 1) return `Update ${files[0]?.path ?? "repository files"}`;
+	return `Update ${files.length} repository files`;
+}
+function normalizedGeneratedMessage(value, fallback) {
+	const first = value.split(/\r?\n/u).map((line) => line.trim()).find(Boolean);
+	if (first === void 0) return fallback;
+	const message = first.replace(/^['"`]+|['"`]+$/gu, "").replace(/[\0\r\n]/gu, " ").trim();
+	return message.length === 0 || message.length > 72 ? fallback : message;
+}
+function validPrUrl(value) {
+	try {
+		const url = new URL(value.trim());
+		return url.protocol === "https:" && url.hostname === "github.com" ? url.href : void 0;
+	} catch {
+		return;
+	}
+}
+function validPullRequestBody(value) {
+	const body = value.trim();
+	const match = /^Summary:\s+([^\r\n]+)\r?\n\r?\nChanges:\s*\r?\n([\s\S]+)$/u.exec(body);
+	const summary = match?.[1]?.trim();
+	const changes = match?.[2]?.trim();
+	if (summary === void 0 || summary.length === 0 || changes === void 0 || changes.length === 0) return false;
+	return !/^#{1,6}\s|^[A-Za-z][A-Za-z ]+:\s*$/mu.test(changes);
+}
+var RepositoryActionService = class {
+	#runtime;
+	#claudeExecutable;
+	#invalidate;
+	#gitExecutable;
+	#ghExecutable;
+	#pending = Promise.resolve();
+	constructor(runtime, claudeExecutable, invalidate = () => {}) {
+		this.#runtime = runtime;
+		this.#claudeExecutable = claudeExecutable;
+		this.#invalidate = invalidate;
+	}
+	preview(cwd) {
+		return this.#preview(cwd);
+	}
+	async generateMessage(cwd, fingerprint) {
+		const preview = await this.#preview(cwd);
+		if (preview.fingerprint !== fingerprint) throw new RepositoryActionError("repository-changed", "Repository changes have changed. Refresh the commit panel.");
+		const fallback = fallbackCommitMessage(preview.files);
+		const prompt = [
+			"Write one concise English git commit subject (imperative mood, maximum 72 characters).",
+			"Return only the subject without quotes, markdown, body, or explanation.",
+			`Files: ${preview.files.map((file) => file.path).join(", ")}`,
+			`Diff:\n${preview.patch.slice(0, 24576)}`
+		].join("\n");
+		try {
+			const result = await this.#run(this.#claudeExecutable, [
+				"-p",
+				"--tools",
+				"",
+				"--output-format",
+				"text",
+				prompt
+			], preview.root, GENERATE_TIMEOUT_MS);
+			return result.exitCode === 0 && !result.lossy ? normalizedGeneratedMessage(result.stdout, fallback) : fallback;
+		} catch {
+			return fallback;
+		}
+	}
+	execute(cwd, request) {
+		const operation = this.#pending.then(() => this.#execute(cwd, request));
+		this.#pending = operation.then(() => void 0, () => void 0);
+		return operation;
+	}
+	async #execute(cwd, request) {
+		const before = await this.#preview(cwd);
+		if (before.fingerprint !== request.fingerprint) throw new RepositoryActionError("repository-changed", "Repository changes have changed. Refresh the commit panel.");
+		if (request.action === "push") {
+			const git = await this.#git();
+			try {
+				await this.#push(git, before.root, before.branch);
+			} catch (error) {
+				throw new RepositoryActionError("push-failed", error instanceof Error ? error.message : "Git push failed.");
+			}
+			this.#invalidate(before.root);
+			return {
+				commit: before.head,
+				pushed: true
+			};
+		}
+		const message = safeText(request.message, MAX_MESSAGE_CHARS, "Commit message");
+		if (before.files.length === 0 && request.action !== "create-pr") throw new RepositoryActionError("nothing-to-commit", "There are no changes to commit.");
+		const git = await this.#git();
+		let oid = before.head;
+		if (before.files.length > 0) {
+			await this.#rejectStagedWarp(git, before.root);
+			if (request.includeUnstaged) {
+				const paths = before.files.filter((file) => file.unstaged || file.untracked).map((file) => file.path);
+				if (paths.length > 0) await this.#mustRun(git, [
+					"add",
+					"--",
+					...paths
+				], before.root, GIT_TIMEOUT_MS, "stage-failed", "Changes could not be staged.");
+			}
+			await this.#rejectStagedWarp(git, before.root);
+			const staged = await this.#run(git, [
+				"diff",
+				"--cached",
+				"--quiet",
+				"--exit-code",
+				"--"
+			], before.root, GIT_TIMEOUT_MS);
+			if (staged.exitCode === 0) throw new RepositoryActionError("nothing-to-commit", "There are no staged changes to commit.");
+			if (staged.exitCode !== 1) throw new RepositoryActionError("repository-unavailable", "The staged changes could not be verified.");
+			await this.#mustRun(git, [
+				"commit",
+				"-m",
+				message,
+				"--"
+			], before.root, GIT_TIMEOUT_MS, "commit-failed", "Git commit failed.");
+			oid = (await this.#mustRun(git, ["rev-parse", "HEAD"], before.root, GIT_TIMEOUT_MS, "commit-failed", "The new commit could not be verified.")).stdout.trim();
+			this.#invalidate(before.root);
+			if (request.action === "commit") return {
+				commit: oid,
+				pushed: false
+			};
+		}
+		try {
+			await this.#push(git, before.root, before.branch);
+		} catch (error) {
+			throw new RepositoryActionError("push-failed", error instanceof Error ? error.message : "Git push failed.", oid);
+		}
+		this.#invalidate(before.root);
+		if (request.action === "commit-push") return {
+			commit: oid,
+			pushed: true
+		};
+		const title = safeText(request.prTitle ?? message, 256, "Pull request title");
+		const body = safeText(request.prBody ?? "", MAX_PR_TEXT_CHARS, "Pull request description");
+		if (!validPullRequestBody(body)) throw new RepositoryActionError("invalid-pr-description", "Pull request description must contain only Summary and Changes sections.", oid);
+		let gh;
+		try {
+			gh = await this.#gh();
+		} catch (error) {
+			throw new RepositoryActionError("gh-unavailable", error instanceof Error ? error.message : "GitHub CLI is unavailable.", oid);
+		}
+		const args = [
+			"pr",
+			"create",
+			"--title",
+			title,
+			"--body",
+			body
+		];
+		if (request.draft !== false) args.push("--draft");
+		if (request.baseBranch !== void 0) args.push("--base", safeText(request.baseBranch, 512, "Base branch"));
+		const created = await this.#run(gh, args, before.root, REMOTE_TIMEOUT_MS);
+		const url = created.exitCode === 0 && !created.lossy ? validPrUrl(created.stdout) : void 0;
+		if (url === void 0) throw new RepositoryActionError("pr-failed", "The pull request could not be created.", oid);
+		return {
+			commit: oid,
+			pushed: true,
+			pullRequestUrl: url
+		};
+	}
+	async #preview(cwd) {
+		const git = await this.#git();
+		const root = (await this.#mustRun(git, [
+			"rev-parse",
+			"--path-format=absolute",
+			"--show-toplevel"
+		], cwd, GIT_TIMEOUT_MS, "not-repository", "The session directory is not a Git repository.")).stdout.trim();
+		const [branchResult, headResult, statusResult, stagedPatch, unstagedPatch] = await Promise.all([
+			this.#run(git, [
+				"symbolic-ref",
+				"--quiet",
+				"--short",
+				"HEAD"
+			], root, GIT_TIMEOUT_MS),
+			this.#run(git, ["rev-parse", "HEAD"], root, GIT_TIMEOUT_MS),
+			this.#run(git, [
+				"status",
+				"--porcelain=v1",
+				"-z",
+				"--untracked-files=all"
+			], root, GIT_TIMEOUT_MS),
+			this.#run(git, [
+				"diff",
+				"--cached",
+				"--no-ext-diff",
+				"--no-color",
+				"--unified=3",
+				"--",
+				":(exclude)WARP.md",
+				":(exclude)**/WARP.md"
+			], root, GIT_TIMEOUT_MS, MAX_OUTPUT_BYTES),
+			this.#run(git, [
+				"diff",
+				"--no-ext-diff",
+				"--no-color",
+				"--unified=3",
+				"--",
+				":(exclude)WARP.md",
+				":(exclude)**/WARP.md"
+			], root, GIT_TIMEOUT_MS, MAX_OUTPUT_BYTES)
+		]);
+		if (branchResult.exitCode !== 0) throw new RepositoryActionError("detached-head", "A detached HEAD cannot be committed from this panel.");
+		if (headResult.exitCode !== 0 || statusResult.exitCode !== 0 || statusResult.lossy) throw new RepositoryActionError("repository-unavailable", "Repository state is unavailable.");
+		const files = parseRepositoryActionStatus(statusResult.stdout);
+		const patch = `${stagedPatch.stdout}${stagedPatch.stdout.length > 0 && unstagedPatch.stdout.length > 0 ? "\n" : ""}${unstagedPatch.stdout}`.slice(0, MAX_PATCH_CHARS);
+		const branch = branchResult.stdout.trim();
+		const head = headResult.stdout.trim();
+		const fingerprint = createHash("sha256").update([
+			head,
+			branch,
+			statusResult.stdout,
+			stagedPatch.stdout,
+			unstagedPatch.stdout
+		].join("\0")).digest("hex");
+		const upstreamResult = await this.#run(git, [
+			"rev-parse",
+			"--abbrev-ref",
+			"--symbolic-full-name",
+			"@{upstream}"
+		], root, GIT_TIMEOUT_MS);
+		const upstream = upstreamResult.exitCode === 0 && !upstreamResult.lossy ? upstreamResult.stdout.trim() : void 0;
+		const logResult = await this.#run(git, [
+			"log",
+			"--format=%H%x09%s",
+			`-n`,
+			String(21),
+			upstream === void 0 ? "HEAD" : "@{upstream}..HEAD",
+			"--"
+		], root, GIT_TIMEOUT_MS);
+		const commitLines = logResult.exitCode === 0 && !logResult.lossy ? logResult.stdout.split(/\r?\n/u).filter((line) => line.includes("	")) : [];
+		const unpushedCommits = commitLines.slice(0, MAX_UNPUSHED_COMMITS).flatMap((line) => {
+			const tab = line.indexOf("	");
+			const hash = line.slice(0, tab);
+			return /^[0-9a-f]{40}$/iu.test(hash) ? [{
+				hash,
+				subject: line.slice(tab + 1).slice(0, 140)
+			}] : [];
+		});
+		return {
+			root,
+			branch,
+			head,
+			fingerprint,
+			files,
+			patch,
+			truncated: stagedPatch.lossy || unstagedPatch.lossy || stagedPatch.stdout.length + unstagedPatch.stdout.length > MAX_PATCH_CHARS,
+			hasStaged: files.some((file) => file.staged),
+			hasUnstaged: files.some((file) => file.unstaged),
+			hasUntracked: files.some((file) => file.untracked),
+			...upstream === void 0 ? {} : { upstream },
+			unpushedCommits,
+			unpushedTruncated: commitLines.length > MAX_UNPUSHED_COMMITS
+		};
+	}
+	async #rejectStagedWarp(git, cwd) {
+		const staged = await this.#run(git, [
+			"diff",
+			"--cached",
+			"--name-only",
+			"--"
+		], cwd, GIT_TIMEOUT_MS);
+		if (staged.exitCode !== 0 || staged.lossy) throw new RepositoryActionError("repository-unavailable", "Staged files could not be verified.");
+		if (staged.stdout.split(/\r?\n/u).some((path) => path.length > 0 && isProtectedWarpPath(path))) throw new RepositoryActionError("protected-warp-file", "WARP.md files cannot be committed. Unstage them before continuing.");
+	}
+	async #push(git, cwd, branch) {
+		const args = (await this.#run(git, [
+			"rev-parse",
+			"--abbrev-ref",
+			"--symbolic-full-name",
+			"@{upstream}"
+		], cwd, GIT_TIMEOUT_MS)).exitCode === 0 ? ["push"] : [
+			"push",
+			"--set-upstream",
+			"origin",
+			branch
+		];
+		await this.#mustRun(git, args, cwd, REMOTE_TIMEOUT_MS, "push-failed", "Git push failed.");
+	}
+	#git() {
+		this.#gitExecutable ??= this.#runtime.resolveExecutable("git");
+		return this.#gitExecutable;
+	}
+	#gh() {
+		this.#ghExecutable ??= this.#runtime.resolveExecutable("gh").catch(() => {
+			throw new RepositoryActionError("gh-unavailable", "GitHub CLI is unavailable.");
+		});
+		return this.#ghExecutable;
+	}
+	async #mustRun(executable, args, cwd, timeoutMs, code, message) {
+		const result = await this.#run(executable, args, cwd, timeoutMs);
+		if (result.exitCode !== 0 || result.lossy) throw new RepositoryActionError(code, message);
+		return result;
+	}
+	#run(executable, args, cwd, timeoutMs, maxBytes = MAX_OUTPUT_BYTES) {
+		return collect(this.#runtime.spawn({
+			argv: [executable, ...args],
+			cwd,
+			stdio: {
+				stdin: "ignore",
+				stdout: { maxBytes },
+				stderr: { maxBytes: MAX_OUTPUT_BYTES }
+			},
+			graceMs: 1e3,
+			signal: AbortSignal.timeout(timeoutMs),
+			env: {}
+		}));
+	}
+};
+//#endregion
 //#region src/repository-setup-routes.ts
-const MAX_BODY_BYTES = 16384;
-function record(value) {
+const MAX_BODY_BYTES$2 = 16384;
+function record$2(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
-async function readJson(req) {
+async function readJson$2(req) {
 	const chunks = [];
 	let size = 0;
 	for await (const chunk of req) {
 		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
 		size += buffer.length;
-		if (size > MAX_BODY_BYTES) throw new RepositorySetupError("body-too-large", "The request body is too large.");
+		if (size > MAX_BODY_BYTES$2) throw new RepositorySetupError("body-too-large", "The request body is too large.");
 		chunks.push(buffer);
 	}
-	const value = record(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+	const value = record$2(JSON.parse(Buffer.concat(chunks).toString("utf8")));
 	if (value === void 0) throw new RepositorySetupError("invalid-request", "The request body is invalid.");
 	return value;
 }
-function string(input, key) {
+function string$1(input, key) {
 	const value = input[key];
 	if (typeof value !== "string") throw new RepositorySetupError("invalid-request", `The ${key} field is required.`);
 	return value;
 }
-function optionalString(input, key) {
+function optionalString$1(input, key) {
 	const value = input[key];
 	if (value === void 0) return void 0;
 	if (typeof value !== "string") throw new RepositorySetupError("invalid-request", `The ${key} field must be a string.`);
@@ -3062,7 +3588,7 @@ async function streamSetup(res, service, input) {
 	try {
 		ndjson(res, {
 			type: "complete",
-			result: await service.setup(string(input, "cwd"), string(input, "branch"), input.worktree, optionalString(input, "branchName"), (stage) => {
+			result: await service.setup(string$1(input, "cwd"), string$1(input, "branch"), input.worktree, optionalString$1(input, "branchName"), (stage) => {
 				if (!ended) ndjson(res, {
 					type: "progress",
 					stage
@@ -3098,15 +3624,15 @@ function registerRepositorySetupRoute(ctx, service) {
 				}
 				if (pathname === "/plugins/dsh-claude/repository/setup") {
 					if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
-					const input = await readJson(req);
+					const input = await readJson$2(req);
 					if (typeof input.worktree !== "boolean") throw new RepositorySetupError("invalid-request", "The worktree field is required.");
 					await streamSetup(res, service, input);
 					return;
 				}
 				if (pathname === `/plugins/dsh-claude/repository/setup/bind`) {
 					if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
-					const input = await readJson(req);
-					await service.bindLease(string(input, "leaseId"), string(input, "sessionId"));
+					const input = await readJson$2(req);
+					await service.bindLease(string$1(input, "leaseId"), string$1(input, "sessionId"));
 					return json(res, 200, { ok: true });
 				}
 				return json(res, 404, { error: "not found" });
@@ -3122,6 +3648,168 @@ function registerRepositorySetupRoute(ctx, service) {
 	}), "dsh-claude: repository setup route");
 }
 //#endregion
+//#region src/repository-action-routes.ts
+const MAX_BODY_BYTES$1 = 16384;
+const MAX_SESSION_ID_CHARS$1 = 1024;
+const ACTIONS = /* @__PURE__ */ new Set([
+	"commit",
+	"commit-push",
+	"push",
+	"create-pr"
+]);
+function record$1(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+async function readJson$1(req) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		size += buffer.length;
+		if (size > MAX_BODY_BYTES$1) throw new RepositoryActionError("body-too-large", "The request body is too large.");
+		chunks.push(buffer);
+	}
+	const value = record$1(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+	if (value === void 0) throw new RepositoryActionError("invalid-request", "The request body is invalid.");
+	return value;
+}
+function sessionId(url) {
+	const value = url.searchParams.get("sessionId");
+	if (value === null || value.length === 0 || value.length > MAX_SESSION_ID_CHARS$1) throw new RepositoryActionError("invalid-session", "The session is invalid.");
+	return value;
+}
+function string(input, key) {
+	const value = input[key];
+	if (typeof value !== "string") throw new RepositoryActionError("invalid-request", `The ${key} field is required.`);
+	return value;
+}
+function optionalString(input, key) {
+	const value = input[key];
+	if (value === void 0) return void 0;
+	if (typeof value !== "string") throw new RepositoryActionError("invalid-request", `The ${key} field must be a string.`);
+	return value;
+}
+function actionRequest(input) {
+	const action = input.action;
+	if (typeof action !== "string" || !ACTIONS.has(action) || typeof input.includeUnstaged !== "boolean") throw new RepositoryActionError("invalid-request", "The repository action is invalid.");
+	return {
+		action,
+		fingerprint: string(input, "fingerprint"),
+		message: action === "push" ? optionalString(input, "message") ?? "" : string(input, "message"),
+		includeUnstaged: input.includeUnstaged,
+		...optionalString(input, "prTitle") === void 0 ? {} : { prTitle: optionalString(input, "prTitle") },
+		...optionalString(input, "prBody") === void 0 ? {} : { prBody: optionalString(input, "prBody") },
+		...optionalString(input, "baseBranch") === void 0 ? {} : { baseBranch: optionalString(input, "baseBranch") },
+		...input.draft === void 0 ? {} : typeof input.draft === "boolean" ? { draft: input.draft } : (() => {
+			throw new RepositoryActionError("invalid-request", "The draft field must be a boolean.");
+		})()
+	};
+}
+function registerRepositoryActionRoute(ctx, service, cwdForSession) {
+	ctx.effect(() => ctx.webServer.register({
+		kind: "prefix",
+		path: CLAUDE_REPOSITORY_ACTION_PATH,
+		handler: async (req, res) => {
+			if (!trustedRequest(req)) return json(res, 403, { error: "forbidden" });
+			const url = new URL(req.url ?? "/", "http://localhost");
+			try {
+				const cwd = cwdForSession(sessionId(url));
+				if (cwd === void 0) throw new RepositoryActionError("session-unavailable", "The Claude session is unavailable.");
+				if (url.pathname === `/plugins/dsh-claude/repository/action/preview`) {
+					if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
+					return json(res, 200, await service.preview(cwd));
+				}
+				if (url.pathname === `/plugins/dsh-claude/repository/action/message`) {
+					if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+					const input = await readJson$1(req);
+					return json(res, 200, { message: await service.generateMessage(cwd, string(input, "fingerprint")) });
+				}
+				if (url.pathname === "/plugins/dsh-claude/repository/action") {
+					if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+					return json(res, 200, await service.execute(cwd, actionRequest(await readJson$1(req))));
+				}
+				return json(res, 404, { error: "not found" });
+			} catch (error) {
+				if (error instanceof RepositoryActionError) return json(res, 409, {
+					error: error.code,
+					message: error.message,
+					...error.commit === void 0 ? {} : { commit: error.commit }
+				});
+				if (error instanceof SyntaxError) return json(res, 400, { error: "invalid-json" });
+				return json(res, 500, {
+					error: "repository-action-unavailable",
+					message: "Repository action is unavailable."
+				});
+			}
+		}
+	}), "dsh-claude: repository action route");
+}
+//#endregion
+//#region src/review-comment-routes.ts
+const MAX_BODY_BYTES = 16384;
+const MAX_SESSION_ID_CHARS = 1024;
+function record(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+async function readJson(req) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		size += buffer.length;
+		if (size > MAX_BODY_BYTES) throw new ReviewCommentError("body-too-large", "The request body is too large.");
+		chunks.push(buffer);
+	}
+	const value = record(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+	if (value === void 0) throw new ReviewCommentError("invalid-request", "The request body is invalid.");
+	return value;
+}
+function sessionIdFromUrl(url) {
+	const value = url.searchParams.get("sessionId");
+	if (value === null || value.length === 0 || value.length > MAX_SESSION_ID_CHARS) throw new ReviewCommentError("invalid-session", "The session is invalid.");
+	return value;
+}
+function registerReviewCommentRoute(ctx, store, ownsSession) {
+	ctx.effect(() => ctx.webServer.register({
+		kind: "prefix",
+		path: CLAUDE_REVIEW_COMMENT_PATH,
+		handler: async (req, res) => {
+			if (!trustedRequest(req)) return json(res, 403, { error: "forbidden" });
+			const url = new URL(req.url ?? "/", "http://localhost");
+			try {
+				const sessionId = sessionIdFromUrl(url);
+				if (!ownsSession(sessionId)) throw new ReviewCommentError("session-unavailable", "The Claude session is unavailable.");
+				if (url.pathname === "/plugins/dsh-claude/review-comments" && req.method === "POST") {
+					const input = await readJson(req);
+					return json(res, 200, { comment: store.add(sessionId, {
+						path: input.path,
+						line: input.line,
+						side: input.side,
+						text: input.text
+					}) });
+				}
+				if (url.pathname === `/plugins/dsh-claude/review-comments/clear` && req.method === "POST") return json(res, 200, { removed: store.drain(sessionId).length });
+				if (url.pathname === `/plugins/dsh-claude/review-comments/remove` && req.method === "POST") {
+					const input = await readJson(req);
+					if (typeof input.id !== "string" || input.id.length === 0 || input.id.length > 128) throw new ReviewCommentError("invalid-request", "The comment id is invalid.");
+					return json(res, 200, { removed: store.remove(sessionId, input.id) });
+				}
+				return json(res, 404, { error: "not found" });
+			} catch (error) {
+				if (error instanceof ReviewCommentError) return json(res, 409, {
+					error: error.code,
+					message: error.message
+				});
+				if (error instanceof SyntaxError) return json(res, 400, { error: "invalid-json" });
+				return json(res, 500, {
+					error: "review-comment-unavailable",
+					message: "Review comments are unavailable."
+				});
+			}
+		}
+	}), "dsh-claude: review comment route");
+}
+//#endregion
 //#region src/update-routes.ts
 const PLUGIN_PACKAGE_NAME = "@norman-else/dsh-claude";
 const UPDATE_TIMEOUT_MS = 3e4;
@@ -3752,6 +4440,7 @@ async function apply(ctx, config) {
 	const sidecar = new ClaudeSidecarRepository();
 	const repositoryStatus = new RepositoryStatusService(ctx.subprocess);
 	const repositorySetup = new RepositorySetupService(ctx.subprocess, { branchPrefix: () => readWorktreeBranchPrefix() });
+	const reviewComments = new ReviewCommentStore();
 	const commandCatalogs = /* @__PURE__ */ new Map();
 	const supervisor = new ClaudeSupervisor({
 		runtime: ctx.subprocess,
@@ -3764,7 +4453,7 @@ async function apply(ctx, config) {
 	let resolutionError;
 	try {
 		supervisorConfig.executablePath = (await resolveClaudeExecutable(ctx.subprocess, config.executablePath === void 0 || config.executablePath.length === 0 ? void 0 : config.executablePath)).path;
-		ctx.llm.registerAdapter([...CLAUDE_CODE_PROVIDER_IDS], createClaudeCodeAdapter(supervisor, ctx.agents, ctx.attachments, (agent) => ctx.agentPresets.composedPreset(agent.ctx)));
+		ctx.llm.registerAdapter([...CLAUDE_CODE_PROVIDER_IDS], createClaudeCodeAdapter(supervisor, ctx.agents, ctx.attachments, (agent) => ctx.agentPresets.composedPreset(agent.ctx), (sessionId) => reviewComments.drain(sessionId)));
 		ctx.effect(() => {
 			const mounted = /* @__PURE__ */ new Map();
 			const pending = /* @__PURE__ */ new Set();
@@ -3825,9 +4514,11 @@ async function apply(ctx, config) {
 		resolutionError = error;
 	}
 	ctx.on("agent/disposed", async ({ agent }) => {
+		reviewComments.disposeSession(agent.id);
 		await supervisor.disposeSession(agent.id);
 		await repositorySetup.cleanupSession(agent.id);
 	});
+	ctx.effect(() => () => reviewComments.dispose(), "dsh-claude: review comments store");
 	ctx.effect(() => () => supervisor.dispose(), "dsh-claude: process supervisor");
 	ctx.effect(() => () => repositoryStatus.dispose(), "dsh-claude: repository status cache");
 	ctx.inject(["webServer"], (webCtx) => {
@@ -3836,15 +4527,22 @@ async function apply(ctx, config) {
 		registerClaudeUpdateRoutes(webCtx, webCtx.subprocess, { ...typeof desktopActions?.requestRestart === "function" ? { requestRestart: desktopActions.requestRestart.bind(desktopActions) } : {} });
 		registerClaudeGlobalSettingsRoute(webCtx);
 		registerRepositorySetupRoute(webCtx, repositorySetup);
-		registerClaudeProjectionRoute(webCtx, sidecar, (sessionId) => {
+		registerRepositoryActionRoute(webCtx, new RepositoryActionService(webCtx.subprocess, supervisorConfig.executablePath, (cwd) => repositoryStatus.invalidate(cwd)), (sessionId) => {
+			const agent = webCtx.agents.get(sessionId);
+			if (agent === void 0 || webCtx.agentPresets.composedPreset(agent.ctx) !== "claude") return void 0;
+			return agent.session.header.cwd;
+		});
+		const ownsClaudeSession = (sessionId) => {
 			const agent = webCtx.agents.get(sessionId);
 			return agent !== void 0 && webCtx.agentPresets.composedPreset(agent.ctx) === "claude";
-		}, (sessionId) => commandCatalogs.get(sessionId) ?? [], async (sessionId) => {
+		};
+		registerReviewCommentRoute(webCtx, reviewComments, ownsClaudeSession);
+		registerClaudeProjectionRoute(webCtx, sidecar, ownsClaudeSession, (sessionId) => commandCatalogs.get(sessionId) ?? [], async (sessionId) => {
 			const agent = webCtx.agents.get(sessionId);
 			if (agent === void 0 || webCtx.agentPresets.composedPreset(agent.ctx) !== "claude") return void 0;
 			const cwd = agent.session.header.cwd;
 			return cwd === void 0 ? void 0 : repositoryStatus.inspect(cwd);
-		});
+		}, (sessionId) => reviewComments.list(sessionId));
 	});
 }
 //#endregion