@orion-agents/orion-code 0.3.12 → 0.3.15

package/CHANGELOG.md

@@ -22,11 +22,125 @@ which is **not** a pass.
 
 ## [Unreleased]
 
-## [0.3.12] — CANDIDATE
+## [0.3.15] — CANDIDATE
 
-> **Status: candidate.** Wide Right Workspace + repository-truth + guarded Git
-> mutations (plan docs/plan/v0.3.12-plan.md) plus the v0.3.13 follow-ups that
-> landed on this branch (plans v3/v4/v5). Not merged, tagged or published.
+> **Status: candidate.** Web Workbench visual & interaction convergence
+> (`docs/plan/v0.3.15-plan.md`): copy thinning, unified confirm modal, busy
+> affordances and resource-panel visual tightening. No protocol, API or
+> dependency changes. Not merged, tagged or published.
+
+### Added
+
+- **Pixel brand identity:** the Workbench brand is now true pixel art. A
+  dot-matrix `orion-code` wordmark (`PixelWordmark`, 5×7 grid, run-merged hard
+  rects, integer `scale`) sits in the expanded rail header, and an SVG page
+  icon (`web/public/favicon.svg`) gives the browser tab a real favicon (there
+  was none). `OrionBrandMark` gained an optional `pixel` prop that renders
+  solid two-tone bars with a 1px base shadow; the default gradient glyph used
+  by the boot screen and the collapsed rail is unchanged.
+
+### Fixed
+
+- Restored the keyboard-shortcut reference trigger (now a rail icon), which was
+  lost when the conversation header was removed.
+
+- The eager archived-sessions loader no longer refetches in a loop after a
+  rejected request: `archived_sessions_failed` now claims the workspace
+  (`ownerWorkspaceId`), so the App effect's guard skips settled workspaces, and
+  the fire-and-forget call no longer surfaces the workspace-switch Context race
+  (`The active Context changed before the operation was admitted`) as hundreds
+  of unhandled promise rejections / 409 console errors.
+
+### Changed
+
+- **Copy thinning (T1):** removed or compressed eight explanatory paragraphs in
+  Files / Git / Review / ProjectNavigator / Inspector; details moved to
+  `title` / `aria` attributes (search scope, binary metadata, sensitive-content
+  fence, Git read-model detail, hunk-to-composer hint, diagnostics redaction).
+  Empty states follow icon + one short line.
+- **Transient notices (T1):** Files/Git/Review recovery and success notices now
+  fade out automatically after 4s; error notices persist until replaced
+  (`useAutoNotice`).
+- **Unified confirm modal (T2/D3):** the two remaining `window.confirm` guards
+  — Files discard-unsaved-changes and Inspector clear-Goal — use a shared
+  `ConfirmDialog` (native `<dialog>`: Esc cancel, focus trap, cancel-focused
+  Enter, danger action styling).
+- **Busy affordances (T2):** Files/Git/Review refresh buttons report
+  `aria-busy` with a rotating icon (box size unchanged, reduced-motion aware);
+  the Files save button holds a fixed minimum width so 保存/保存中… no longer
+  shifts the row, and reports `aria-busy` while saving.
+- **Visual convergence (T3):** resource-panel icons unified on the 12/16/20
+  tiers (16px inside panels), search fields and change-list rows reuse the
+  existing radius tokens, and Git group/history headings step back to muted
+  11px type. No new theme tokens.
+- **Banner-free chrome:** the conversation header, the left-rail brand row and
+  the right-rail `PROJECT WORKSPACE` header are removed — conversation content
+  now starts at the top of the column. The theme-cycle and inspector-toggle
+  controls moved to the bottom of the right rail, and the left rail exposes a
+  collapse control in its toolbar. Project and session rows keep the plain
+  folder icon; the `orion-code` mark is used only in the rail header, the
+  collapsed rail and the favicon.
+
+### Tests
+
+- New SSR contracts (`tests/web-ui-resource-copy-v0315.test.tsx`): thinned copy
+  never returns to first paint, busy buttons idle on first paint, confirm-modal
+  markup (focused cancel, danger action, closed shell), goal-clear wiring.
+- E2E locators were unaffected: the only referenced copy (`二进制文件`,
+  `刷新文件树`, `选择文件预览`) is unchanged.
+
+## [0.3.14] — CANDIDATE
+
+> **Status: candidate.** Editable Files panel (guarded `POST /files/write` with
+> revision CAS) and removal of the legacy view-only controls. Not merged,
+> tagged or published.
+
+### Added
+
+- File editing in the Files panel: content view gains a view/edit toggle; the
+  edit mode is a controlled monospace textarea with dirty tracking, explicit
+  save (guarded `POST /files/write`), cancel/Esc with an unsaved-changes
+  confirmation, and a 409 conflict path that offers an explicit reload.
+- `POST /files/write`: workspace-fenced (registry + symlink escape checks),
+  sensitive-path block, 512 KiB text-only payload limit, on-disk stat
+  fingerprint CAS (`file_revision_conflict`), user-gesture header
+  (`file-mutation-v1`), idempotent `file.write` mutation ledger entry, and
+  one-shot snapshot invalidation so Git/Review decorations refresh after a
+  save.
+
+### Fixed
+
+- Resource refreshes keep the inspected file: `ReviewPanel` no longer drops the
+  open diff on a manual refresh, a `refreshEpoch` invalidation or a Git revision
+  conflict recovery; `FilesPanel` keeps the open file on refresh (still reset
+  when the workspace itself changes), so the editor no longer closes mid-edit.
+- The review summary counters are localised (已暂存 / 未暂存 / 未跟踪 / 冲突)
+  instead of raw English labels.
+- Binary detection tolerates an 8 KiB sample that ends inside one UTF-8 code
+  point, so CJK files are no longer rejected as binary on read or save.
+
+### Removed
+
+- The read-only file toolbar: 「跳转」（line jump）, 「复制」 and 「自动换行」
+  controls, the line-number gutter spans and the wrap-only styles.
+- The Review panel's 「验证证据」 module: the evidence list,
+  `WebReviewVerificationV1`, `ReviewServiceV1.verificationPage`, the
+  `GET /review/verification` route and the snapshot's `verification` /
+  `verificationTruncated` fields. The review overview is now composed only from
+  Git facts; durable tool receipts remain available to the runtime.
+
+## [0.3.13] — CANDIDATE
+
+> **Status: candidate.** Development baseline after v0.3.12 (version bump only;
+> no functional changes yet). Not merged, tagged or published.
+
+## [0.3.12] — NPM-PUBLISHED
+
+> **Status: npm-published.** `@orion-agents/orion-code@0.3.12` is available
+> through the npm registry (latest tag). Published 2026-09-07 via PR #252;
+> git tag/release may lag. Wide Right Workspace + repository-truth + guarded
+> Git mutations (v0.3.12-plan) plus resource split layout, conversation
+> history navigator and the unified brand mark (v0.3.13-plan v3/v4/v5).
 
 ### Added
 

package/README.md

@@ -2,13 +2,11 @@
 
 Local-first, goal-driven coding agent for the terminal and browser.
 
-> v0.3.12 candidate — a Wide Right Workspace on top of the vertical rail: pure
-> dock/rail/drawer geometry (detail dockable to 80vw while the conversation
-> keeps a 320px minimum), per-workspace layout preferences, a shared repository
-> snapshot store, progressive Review verification, guarded Git stage/unstage/
-> commit, bounded workspace search and revision-bound file_range Context
-> references. Candidate source is not an npm publication, Git tag, or
-> merge-ready release.
+> v0.3.15 candidate — Web Workbench visual & interaction convergence: thinned
+> explanatory copy across the resource panels, one unified confirm modal
+> replacing the last `window.confirm` guards, busy feedback for refresh/save
+> actions, and Orion-style visual tightening of Files / Git / Review.
+> Candidate source is not an npm publication, Git tag, or merge-ready release.
 
 [中文说明](README.zh-CN.md) ·
 [v0.3.7 plan](docs/plan/v0.3.7-left-rail-improvement-plan.md) ·
@@ -173,7 +171,7 @@ current development environments. Node 20 is upstream EOL and is no longer a v0.
 After the immutable `0.3.5` npm receipt exists:
 
 ```bash
-npm install -g @orion-agents/orion-code@0.3.12
+npm install -g @orion-agents/orion-code@0.3.15
 orion --version
 orion doctor
 ```

package/README.zh-CN.md

@@ -2,10 +2,9 @@
 
 面向终端与浏览器、本地优先的目标驱动 Coding Agent。
 
-> v0.3.12 候选版本：在竖状 rail 之上的**大尺寸右侧工作区**——纯 dock/rail/drawer 几何
-> （详情面可拉宽至 80vw，对话保留 320px 最小宽度）、按 workspace 的布局偏好、共享仓库快照
-> store、Review 验证证据渐进分页、受控 Git stage/unstage/commit、受限工作区搜索与带版本
-> 约束的 file_range Context 引用。Candidate 源码不代表已创建 npm 发布、Git tag 或达到可合并状态。
+> v0.3.15 候选版本：Web Workbench 视觉与交互收敛——资源面板说明文案瘦身、统一确认模态
+> 取代最后的 `window.confirm`、刷新/保存的进行中反馈，以及 Files / Git / Review 的
+> Orion 风格视觉收敛。Candidate 源码不代表已创建 npm 发布、Git tag 或达到可合并状态。
 
 [English](README.md) ·
 [v0.3.7 方案](docs/plan/v0.3.7-left-rail-improvement-plan.md) ·
@@ -102,7 +101,7 @@ Current。Node 20 已结束上游维护，不再属于 v0.3 Runtime 合同。
 当 npm 已存在不可变的 `0.3.4` 发布凭据后：
 
 ```bash
-npm install -g @orion-agents/orion-code@0.3.12
+npm install -g @orion-agents/orion-code@0.3.15
 orion --version
 orion doctor
 ```

package/dist/web/file-read-service.d.ts

@@ -1,3 +1,4 @@
+import { type BigIntStats } from 'fs';
 export type WebFileKindV1 = 'file' | 'directory' | 'symlink';
 export interface WebFileNodeV1 {
     readonly id: string;
@@ -79,6 +80,15 @@ export declare class FileReadServiceV1 {
         readonly cursor?: string;
         readonly limitBytes?: number;
     }): WebFileContentPageV1;
+    /** v0.3.14 — write-path preflight for an existing in-root regular text file. */
+    writePreflight(fileId: string): {
+        readonly canonicalPath: string;
+        readonly relativePath: string;
+        readonly revision: string;
+        readonly sizeBytes: number;
+    };
+    /** v0.3.14 — post-write revision fingerprint for the response. */
+    revisionOf(canonicalPath: string): string;
     private projectNode;
     private resolveNode;
     private resolveRelative;
@@ -86,4 +96,6 @@ export declare class FileReadServiceV1 {
     private encodeCursor;
     private decodeCursor;
 }
+export declare function fingerprintStat(stat: BigIntStats): string;
+export declare function isBinary(buffer: Buffer): boolean;
 //# sourceMappingURL=file-read-service.d.ts.map

package/dist/web/file-read-service.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FileReadServiceV1 = void 0;
+exports.fingerprintStat = fingerprintStat;
+exports.isBinary = isBinary;
 const crypto_1 = require("crypto");
 const fs_1 = require("fs");
 const path_1 = require("path");
@@ -269,7 +271,7 @@ class FileReadServiceV1 {
             if (sample.length > 0) {
                 this.performance.bytesRead += (0, fs_1.readSync)(descriptor, sample, 0, sample.length, 0);
             }
-            const binary = isBinary(sample);
+            const binary = isBinary(validUtf8Prefix(sample));
             if (binary) {
                 return Object.freeze({
                     fileId: input.fileId,
@@ -333,6 +335,27 @@ class FileReadServiceV1 {
             (0, fs_1.closeSync)(descriptor);
         }
     }
+    /** v0.3.14 — write-path preflight for an existing in-root regular text file. */
+    writePreflight(fileId) {
+        this.performance.readOperations += 1;
+        const node = this.resolveNode(fileId);
+        if (!node.stat.isFile()) {
+            throw new errors_1.WebWorkbenchError(409, 'File node is not a regular file.', 'file_not_regular');
+        }
+        if (isSensitiveResolvedPath(this.root, node.relativePath, node.canonicalPath)) {
+            throw new errors_1.WebWorkbenchError(403, 'Sensitive files are not writable in the Web Workbench.', 'sensitive_file_blocked');
+        }
+        return Object.freeze({
+            canonicalPath: node.canonicalPath,
+            relativePath: node.relativePath,
+            revision: fingerprintStat(node.stat),
+            sizeBytes: Number(node.stat.size),
+        });
+    }
+    /** v0.3.14 — post-write revision fingerprint for the response. */
+    revisionOf(canonicalPath) {
+        return fingerprintStat((0, fs_1.statSync)(canonicalPath, { bigint: true }));
+    }
     projectNode(relativePath) {
         const lexicalPath = (0, path_1.resolve)(this.root, relativePath);
         const lexicalStat = (0, fs_1.lstatSync)(lexicalPath, { bigint: true });

package/dist/web/file-write-service.d.ts

@@ -0,0 +1,16 @@
+import { FileReadServiceV1 } from './file-read-service';
+export interface WebFileWriteResultV1 {
+    readonly fileId: string;
+    readonly revision: string;
+    readonly sizeBytes: number;
+}
+export declare class FileWriteServiceV1 {
+    private readonly fileService;
+    constructor(fileService: FileReadServiceV1);
+    writeContent(input: {
+        readonly fileId: string;
+        readonly content: string;
+        readonly expectedRevision: string;
+    }): WebFileWriteResultV1;
+}
+//# sourceMappingURL=file-write-service.d.ts.map

package/dist/web/file-write-service.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileWriteServiceV1 = void 0;
+const fs_1 = require("fs");
+const errors_1 = require("./errors");
+const file_read_service_1 = require("./file-read-service");
+const MAX_WRITE_BYTES = 512 * 1024;
+const WRITE_SAMPLE_BYTES = 8192;
+/**
+ * v0.3.14 — bounded, CAS-guarded writes for an existing in-root text file.
+ *
+ * Safety stack mirrors the read path: the file id resolves through the read
+ * service's fenced registry (workspace escape, symlink escape and sensitive
+ * paths fail closed there), the payload must be valid UTF-8 text without NULs
+ * within 512 KiB, and the write commits only when the on-disk revision still
+ * matches the caller's `expectedRevision` (compare-and-swap against the same
+ * stat fingerprint the read path returns).
+ */
+/**
+ * A bounded sample can end inside one UTF-8 code point (very likely for CJK
+ * text at an 8 KiB boundary); drop the trailing partial byte before judging the
+ * file as binary, mirroring the read path's `validUtf8Prefix`.
+ */
+function completeUtf8Tail(buffer) {
+    for (let trim = 0; trim <= Math.min(3, Math.max(0, buffer.length - 1)); trim += 1) {
+        const candidate = buffer.subarray(0, buffer.length - trim);
+        if (!(0, file_read_service_1.isBinary)(candidate))
+            return candidate;
+    }
+    return buffer;
+}
+class FileWriteServiceV1 {
+    constructor(fileService) {
+        this.fileService = fileService;
+    }
+    writeContent(input) {
+        const content = input.content;
+        if (typeof content !== 'string') {
+            throw new errors_1.WebWorkbenchError(400, 'File content must be a string.', 'file_content_invalid');
+        }
+        if (content.includes('\0')) {
+            throw new errors_1.WebWorkbenchError(415, 'Files containing NUL bytes are not editable in the Web Workbench.', 'file_binary');
+        }
+        const byteLength = Buffer.byteLength(content, 'utf8');
+        if (byteLength > MAX_WRITE_BYTES) {
+            throw new errors_1.WebWorkbenchError(413, 'Edited file content exceeds the 512 KiB Web editor limit.', 'file_too_large');
+        }
+        if (!/^[0-9a-f]{64}$/u.test(input.expectedRevision)) {
+            throw new errors_1.WebWorkbenchError(400, 'expectedRevision is invalid.', 'file_revision_invalid');
+        }
+        const preflight = this.fileService.writePreflight(input.fileId);
+        if (preflight.sizeBytes > MAX_WRITE_BYTES) {
+            throw new errors_1.WebWorkbenchError(413, 'Target file exceeds the 512 KiB Web editor limit.', 'file_too_large');
+        }
+        const payload = Buffer.from(content, 'utf8');
+        // Phase 1 (read descriptor): CAS + binary re-check. An O_WRONLY descriptor
+        // cannot readSync, so the preflight opens its own read handle first.
+        const readDescriptor = (0, fs_1.openSync)(preflight.canonicalPath, fs_1.constants.O_RDONLY);
+        let beforeSize;
+        try {
+            const before = (0, fs_1.fstatSync)(readDescriptor, { bigint: true });
+            beforeSize = before.size;
+            const sample = Buffer.alloc(Math.min(WRITE_SAMPLE_BYTES, Number(before.size)));
+            if (sample.length > 0) {
+                (0, fs_1.readSync)(readDescriptor, sample, 0, sample.length, 0);
+                if ((0, file_read_service_1.isBinary)(completeUtf8Tail(sample))) {
+                    throw new errors_1.WebWorkbenchError(415, 'Target file is not UTF-8 text.', 'file_binary');
+                }
+            }
+            if ((0, file_read_service_1.fingerprintStat)(before) !== input.expectedRevision) {
+                throw new errors_1.WebWorkbenchError(409, 'The file changed on disk before the save could run; reload it first.', 'file_revision_conflict');
+            }
+        }
+        finally {
+            (0, fs_1.closeSync)(readDescriptor);
+        }
+        // Phase 2 (write descriptor): CAS is re-checked by the kernel fingerprint
+        // window being as short as possible between the two handles.
+        const writeDescriptor = (0, fs_1.openSync)(preflight.canonicalPath, fs_1.constants.O_WRONLY);
+        try {
+            const before = (0, fs_1.fstatSync)(writeDescriptor, { bigint: true });
+            if ((0, file_read_service_1.fingerprintStat)(before) !== input.expectedRevision) {
+                throw new errors_1.WebWorkbenchError(409, 'The file changed on disk before the save could run; reload it first.', 'file_revision_conflict');
+            }
+            (0, fs_1.writeSync)(writeDescriptor, payload, 0, payload.length, 0);
+            // Shrink keeps the file exactly as long as the payload.
+            if (beforeSize > BigInt(payload.length)) {
+                (0, fs_1.truncateSync)(preflight.canonicalPath, payload.length);
+            }
+            const after = (0, fs_1.statSync)(preflight.canonicalPath, { bigint: true });
+            return Object.freeze({
+                fileId: input.fileId,
+                revision: (0, file_read_service_1.fingerprintStat)(after),
+                sizeBytes: Number(after.size),
+            });
+        }
+        finally {
+            (0, fs_1.closeSync)(writeDescriptor);
+        }
+    }
+}
+exports.FileWriteServiceV1 = FileWriteServiceV1;
+//# sourceMappingURL=file-write-service.js.map

package/dist/web/protocol.d.ts

@@ -9,7 +9,7 @@ import type { SessionMeta } from '../services/session-storage';
 import type { ToolConfirmationPolicy } from '../services/global-config';
 import type { WebFileContentPageV1, WebFileNodeV1, WebFileTreePageV1 } from './file-read-service';
 import type { WebGitCommitV1, WebGitDiffPageV1, WebGitFileV1, WebGitLogPageV1, WebGitStatusV1 } from './git-read-model-service';
-import type { WebReviewSnapshotV1, WebReviewVerificationV1 } from './review-service';
+import type { WebReviewSnapshotV1 } from './review-service';
 import type { WebSessionRuntimeSummaryV1 } from './session-runtime-registry';
 import type { WebTerminalCreateResultV1, WebTerminalExitV1, WebTerminalGapV1, WebTerminalMetadataV1, WebTerminalOutputFrameV1, WebTerminalStateV1 } from './terminal-manager';
 export declare const WEB_API_VERSION: 1;
@@ -376,7 +376,7 @@ export type WebWorkspaceResourceV1 = 'files' | 'git' | 'review';
 export type WebWorkspaceInvalidationReasonV1 = 'context-change' | 'filesystem-change' | 'terminal-command' | 'tool-finished';
 export type WebToolDetailSummaryV1 = ToolDetailSummary;
 export type WebToolDetailPageV1 = ToolDetailPage;
-export type { WebFileContentPageV1, WebFileNodeV1, WebFileTreePageV1, WebGitCommitV1, WebGitDiffPageV1, WebGitFileV1, WebGitLogPageV1, WebGitStatusV1, WebReviewSnapshotV1, WebReviewVerificationV1, WebTerminalCreateResultV1, WebTerminalExitV1, WebTerminalGapV1, WebTerminalMetadataV1, WebTerminalOutputFrameV1, WebTerminalStateV1, };
+export type { WebFileContentPageV1, WebFileNodeV1, WebFileTreePageV1, WebGitCommitV1, WebGitDiffPageV1, WebGitFileV1, WebGitLogPageV1, WebGitStatusV1, WebReviewSnapshotV1, WebTerminalCreateResultV1, WebTerminalExitV1, WebTerminalGapV1, WebTerminalMetadataV1, WebTerminalOutputFrameV1, WebTerminalStateV1, };
 export interface WebBootstrapV1 {
     readonly apiVersion: 1;
     readonly productVersion: string;

package/dist/web/review-service.d.ts

@@ -1,19 +1,4 @@
-import type { VerifiedDurableToolReceiptRefV1 } from '../runtime/durable-tool-receipt-reader';
 import type { GitReadModelServiceV1, WebGitDiffPageV1, WebGitFileV1 } from './git-read-model-service';
-export interface WebReviewVerificationV1 {
-    readonly callId: string;
-    readonly sessionId: string;
-    readonly threadId: string;
-    readonly sequence: number;
-    readonly toolName: string;
-    readonly state: 'success' | 'error' | 'skipped';
-    readonly terminal: VerifiedDurableToolReceiptRefV1['terminal'];
-    readonly success: boolean;
-    readonly outputBytes: number;
-    readonly hasArtifact: boolean;
-    readonly executionPolicyDigest: string;
-    readonly receiptDigest: string;
-}
 export interface WebReviewSnapshotV1 {
     readonly revision: string;
     readonly repositoryRevision: string;
@@ -26,28 +11,12 @@ export interface WebReviewSnapshotV1 {
     readonly untrackedCount: number;
     readonly conflictCount: number;
     readonly truncated: boolean;
-    readonly verification: readonly WebReviewVerificationV1[];
 }
-/** Review overview composed only from Git facts and doubly verified durable tool receipts. */
+/** Review overview composed only from Git facts. */
 export declare class ReviewServiceV1 {
     private readonly git;
-    private readonly listReceiptRefs;
-    constructor(git: GitReadModelServiceV1, listReceiptRefs: () => Promise<readonly VerifiedDurableToolReceiptRefV1[]> | readonly VerifiedDurableToolReceiptRefV1[]);
+    constructor(git: GitReadModelServiceV1);
     snapshot(): Promise<WebReviewSnapshotV1>;
-    /**
-     * v0.3.12 S2 — progressive verification evidence. The Review summary loads
-     * first; receipts page in behind it, optionally filtered to one session.
-     */
-    verificationPage(input: {
-        readonly sessionId?: string;
-        readonly cursor?: number;
-        readonly pageSize?: number;
-    }): Promise<{
-        readonly items: readonly WebReviewVerificationV1[];
-        readonly nextCursor: number | null;
-        readonly totalForSession: number;
-    }>;
-    private projectVerification;
     diff(input: Parameters<GitReadModelServiceV1['diff']>[0]): Promise<WebGitDiffPageV1>;
 }
 //# sourceMappingURL=review-service.d.ts.map

package/dist/web/review-service.js

@@ -2,21 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ReviewServiceV1 = void 0;
 const crypto_1 = require("crypto");
-/** Review overview composed only from Git facts and doubly verified durable tool receipts. */
+/** Review overview composed only from Git facts. */
 class ReviewServiceV1 {
-    constructor(git, listReceiptRefs) {
+    constructor(git) {
         this.git = git;
-        this.listReceiptRefs = listReceiptRefs;
     }
     async snapshot() {
         // v0.3.9 #237/#228 — collect every Git status page. A repository with more
         // than the single pageSize of changed files was silently truncated before;
         // the review overview must aggregate all pages (bounded by a guard that
         // keeps runaway repositories from looping forever).
-        const [receiptRefs, statusPages] = await Promise.all([
-            this.listReceiptRefs(),
-            collectStatusPages((cursor) => this.git.status({ pageSize: 2000, ...(cursor ? { cursor } : {}) })),
-        ]);
+        const statusPages = await collectStatusPages((cursor) => this.git.status({ pageSize: 2000, ...(cursor ? { cursor } : {}) }));
         const status = statusPages.at(-1) ?? (await this.git.status({ pageSize: 2000 }));
         const conflicted = [];
         const staged = [];
@@ -29,12 +25,8 @@ class ReviewServiceV1 {
             untracked.push(...page.untracked);
         }
         const changedFiles = uniqueFiles([...conflicted, ...staged, ...unstaged, ...untracked]);
-        const verification = this.projectVerification(receiptRefs.slice(0, 100));
         const revision = (0, crypto_1.createHash)('sha256')
-            .update(JSON.stringify({
-            repositoryRevision: status.repositoryRevision,
-            verification,
-        }))
+            .update(JSON.stringify({ repositoryRevision: status.repositoryRevision }))
             .digest('hex');
         return Object.freeze({
             revision,
@@ -48,66 +40,19 @@ class ReviewServiceV1 {
             untrackedCount: untracked.length,
             conflictCount: conflicted.length,
             truncated: statusPages.at(-1)?.truncated ?? false,
-            verification: Object.freeze(verification),
-        });
-    }
-    /**
-     * v0.3.12 S2 — progressive verification evidence. The Review summary loads
-     * first; receipts page in behind it, optionally filtered to one session.
-     */
-    async verificationPage(input) {
-        const refs = await this.listReceiptRefs();
-        const filtered = input.sessionId ? refs.filter(ref => ref.sessionId === input.sessionId) : refs;
-        const offset = Math.max(0, Math.min(filtered.length, Math.trunc(input.cursor ?? 0)));
-        const pageSize = Math.max(1, Math.min(100, Math.trunc(input.pageSize ?? 25)));
-        const page = filtered.slice(offset, offset + pageSize);
-        const nextCursor = offset + page.length < filtered.length ? offset + page.length : null;
-        return Object.freeze({
-            items: Object.freeze(this.projectVerification(page)),
-            nextCursor,
-            totalForSession: filtered.length,
         });
     }
-    projectVerification(refs) {
-        return refs.map(receipt => Object.freeze({
-            callId: receipt.callId,
-            sessionId: receipt.sessionId,
-            threadId: receipt.threadId,
-            sequence: receipt.sequence,
-            toolName: receipt.toolName,
-            state: reviewState(receipt),
-            terminal: receipt.terminal,
-            success: receipt.success,
-            outputBytes: receipt.outputBytes,
-            hasArtifact: receipt.hasArtifact,
-            executionPolicyDigest: receipt.executionPolicyDigest,
-            receiptDigest: receipt.receiptDigest,
-        }));
-    }
     diff(input) {
         return this.git.diff(input);
     }
 }
 exports.ReviewServiceV1 = ReviewServiceV1;
-function reviewState(receipt) {
-    if (receipt.success)
-        return 'success';
-    return receipt.terminal === 'interrupted' || receipt.terminal === 'indeterminate'
-        ? 'skipped'
-        : 'error';
-}
 function uniqueFiles(files) {
     const byId = new Map();
     for (const file of files)
         byId.set(file.fileId, file);
     return [...byId.values()].sort((left, right) => left.path.localeCompare(right.path));
 }
-/**
- * v0.3.9 #237/#228 — page through Git status until the snapshot is fully
- * collected. The bounded guard (64 pages x 2_000 = 128k files) exists to stop
- * runaway repositories from looping; a repository exceeding it stays marked
- * truncated so the UI can still communicate the limit.
- */
 async function collectStatusPages(fetchPage) {
     const pages = [];
     let page = await fetchPage(undefined);

package/dist/web/server.js

@@ -431,6 +431,32 @@ async function handleRequest(context) {
         }));
         return;
     }
+    const fileWriteMatch = path === '/files/write';
+    if (method === 'POST' && fileWriteMatch) {
+        assertMutation(request, context.nonce, context.origin, 'file_mutation_forbidden');
+        assertFileUserGesture(request);
+        const body = requireRecord(await readJson(request), 'File write request');
+        assertOnlyKeys(body, [
+            'requestId',
+            'fileId',
+            'content',
+            'expectedRevision',
+            'workspaceId',
+            'expectedContextRevision',
+        ]);
+        const requestId = requireUuid(body.requestId, 'requestId');
+        const contextGuard = requireContextGuardRecord(body);
+        const fileId = requireText(body.fileId, 'fileId', 256);
+        const content = requireText(body.content, 'content', 512 * 1024 + 8);
+        const expectedRevision = requireFileRevision(body.expectedRevision);
+        const result = await context.workbench.executeMutation(requestId, 'file.write', { fileId, expectedRevision, ...contextGuard }, () => context.workbench.writeFileContent(contextGuard, {
+            fileId,
+            content,
+            expectedRevision,
+        }));
+        sendJson(response, 200, result);
+        return;
+    }
     if (method === 'POST' && (path === '/git/stage' || path === '/git/unstage')) {
         assertMutation(request, context.nonce, context.origin, 'git_mutation_forbidden');
         assertGitUserGesture(request);
@@ -495,15 +521,6 @@ async function handleRequest(context) {
         }));
         return;
     }
-    if (method === 'GET' && path === '/review/verification') {
-        const contextGuard = requireContextGuardQuery(url);
-        const sessionId = url.searchParams.get('sessionId') ?? undefined;
-        const cursorValue = url.searchParams.get('cursor');
-        const cursor = cursorValue === null ? undefined : Number(cursorValue);
-        const pageSize = boundedInteger(url.searchParams.get('pageSize'), 25, 1, 100);
-        sendJson(response, 200, await context.workbench.reviewVerificationPage(contextGuard, { sessionId, cursor, pageSize }));
-        return;
-    }
     if (method === 'GET' && path === '/review') {
         sendJson(response, 200, await context.workbench.review(requireContextGuardQuery(url)));
         return;
@@ -646,6 +663,18 @@ function requireGitRevision(value) {
     }
     return text;
 }
+function assertFileUserGesture(request) {
+    if (request.headers[protocol_1.WEB_USER_GESTURE_HEADER] !== 'file-mutation-v1') {
+        throw new HttpProblem(403, 'File mutations require an explicit browser user gesture.', 'file_user_gesture_required');
+    }
+}
+function requireFileRevision(value) {
+    const text = requireText(value, 'expectedRevision', 64);
+    if (!/^[0-9a-f]{64}$/u.test(text)) {
+        throw new HttpProblem(400, 'expectedRevision must be a file content revision.');
+    }
+    return text;
+}
 function assertGitUserGesture(request) {
     if (request.headers[protocol_1.WEB_USER_GESTURE_HEADER] !== 'git-mutation-v1') {
         throw new HttpProblem(403, 'Git mutations require an explicit browser user gesture.', 'git_user_gesture_required');

package/dist/web/workbench-controller.d.ts

@@ -43,6 +43,7 @@ export declare class WebWorkbenchController {
     private readonly workspaceMutationOwners;
     private readonly pendingWorkspaceMutationStates;
     private fileService;
+    private fileWriteService;
     private gitService;
     private reviewService;
     private contextRevisionValue;
@@ -100,6 +101,16 @@ export declare class WebWorkbenchController {
     readToolDetail(callId: string, offsetBytes: number, limitBytes: number, context?: WebContextGuardV1): Promise<WebToolDetailPageV1>;
     listFiles(context: WebContextGuardV1, input: Parameters<FileReadServiceV1['list']>[0]): import("./file-read-service").WebFileTreePageV1;
     readFileContent(context: WebContextGuardV1, input: Parameters<FileReadServiceV1['readContent']>[0]): import("./file-read-service").WebFileContentPageV1;
+    /** v0.3.14 — guarded CAS write for an existing in-root text file. */
+    writeFileContent(context: WebContextGuardV1, input: {
+        readonly fileId: string;
+        readonly content: string;
+        readonly expectedRevision: string;
+    }): {
+        readonly fileId: string;
+        readonly revision: string;
+        readonly sizeBytes: number;
+    };
     gitStatus(context: WebContextGuardV1, input: Parameters<GitReadModelServiceV1['status']>[0]): Promise<import("./git-read-model-service").WebGitStatusV1>;
     searchFiles(context: WebContextGuardV1, input: {
         readonly query: string;
@@ -137,15 +148,6 @@ export declare class WebWorkbenchController {
     private resolveSafeGitPaths;
     private assertGitRepositoryRevision;
     private fileContextRevision;
-    reviewVerificationPage(context: WebContextGuardV1, input: {
-        readonly sessionId?: string;
-        readonly cursor?: number;
-        readonly pageSize?: number;
-    }): Promise<{
-        readonly items: readonly import("./review-service").WebReviewVerificationV1[];
-        readonly nextCursor: number | null;
-        readonly totalForSession: number;
-    }>;
     gitLog(context: WebContextGuardV1, input: Parameters<GitReadModelServiceV1['log']>[0]): Promise<import("./git-read-model-service").WebGitLogPageV1>;
     gitDiff(context: WebContextGuardV1, input: Parameters<GitReadModelServiceV1['diff']>[0]): Promise<import("./git-read-model-service").WebGitDiffPageV1>;
     review(context: WebContextGuardV1): Promise<import("./review-service").WebReviewSnapshotV1>;