kaloko 0.4.7 → 0.4.8

package/README.md

@@ -64,6 +64,23 @@ npx kaloko share --pr                 # upload to kaloko.app, comment on the PR
 `npx kaloko help` lists every command. When something does not work (Chrome,
 token, environment URL, evaluator key), `npx kaloko doctor` says what to fix.
 
+## Review only what changed
+
+After `kaloko share`, steps that look exactly as they did in the last accepted
+run (same screenshots, same criteria, automatic checks passing) keep the
+approval a person gave them, with who and when. The rest waits in review
+mode: one step at a time on the canvas, `J`/`K` to move, `A` to approve, `R`
+to return with a note. The share says it in one line:
+
+```
+12 steps unchanged, approvals carried over; 5 need review: https://kaloko.app/acme/runs/…/#review
+```
+
+`npx kaloko review` (or `--json`, or MCP `get_review_queue`) tells an agent
+what still waits for a person, so it can pass the link on. Agents never
+approve for people: their decisions are marked and do not count as a
+person's.
+
 ## Design (Kaloko Design)
 
 Design the screens of a flow as live HTML with your own agent and skills, in the same scenario that development
@@ -121,7 +138,7 @@ captured HTML, page text and console output.
 - **E-mails**: built-in Mailpit client; any other mailbox through a small
   adapter module (`provider: script`, example in `templates/mail/`), or hand a
   message over with `npx kaloko mail --step <id> --file message.eml`.
-- **Service and evaluator**: `KALOKO_TOKEN` for `share`, `feedback`, `inbox` and clean-up (`runs`, `trash`, `prune`, `keep`, `archive`)
+- **Service and evaluator**: `KALOKO_TOKEN` for `share`, `feedback`, `review`, `inbox` and clean-up (`runs`, `trash`, `prune`, `keep`, `archive`)
   (`npx kaloko login` approves one in the browser and saves it to `~/.config/kaloko/.env`, or create it in your
   organization's settings); `TYPESAFE_API_KEY` for the
   semantic evaluator (optional). Both names can be changed in the config.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kaloko",
-  "version": "0.4.7",
+  "version": "0.4.8",
   "description": "See what your AI agents built: every screen, language and device walked, assessed and approved on one canvas.",
   "keywords": [
     "qa",

package/skills/kaloko/SKILL.md

@@ -28,8 +28,9 @@ the canvas, storage and collaboration are the service.
   `kaloko capture` run `kaloko evaluate`) and `kaloko build` ran; you report the summary line,
   failing criteria with evidence, and the preview path (or shared URL).
 - When the run was shared, its URL and the summary are in the issue or PR
-  the work belongs to, and you read `kaloko feedback` and `kaloko inbox`
-  before continuing on that task.
+  the work belongs to, the person got the review-mode link with what waits
+  for them (`kaloko share` prints it; `kaloko review` repeats it), and you
+  read `kaloko feedback` and `kaloko inbox` before continuing on that task.
 - Changes to intent are written back to `ACCEPTANCE.md` (change log row).
 - On a design environment: the folder follows the bundle rules and
   `kaloko design lint` shows no error, `kaloko walk` and `kaloko sync` ran,
@@ -56,12 +57,17 @@ a step in a sync conflict (`--mine`), turning on `html_view`, a real clean-up
 (`kaloko prune --yes`), trashing someone else's run, archiving a scenario, and
 anything the environment profile blocks. Never trash an accepted run, a
 baseline, a run with review comments, or a run linked from an open PR or issue
-comment. Ask the person
+comment. Never approve a
+step or accept a run on a person's behalf; report what waits for them
+(`kaloko review`, MCP `get_review_queue`) instead. Ask the person
 for secret values (passwords, tokens, gate credentials) and for sign-ins only
 they can do; never write secrets into the config, a scenario or a script.
 
 ## Where to look
 
+- A new project or an organization without runs of its own (install, sign in,
+  the sample run, the first flow from a URL or a task, share, point the person
+  to the canvas): [reference/first-run.md](reference/first-run.md)
 - Writing or updating the plan and scenario: [reference/acceptance.md](reference/acceptance.md)
 - Android, iOS (Simulator), Electron and macOS apps, or screens captured by
   another tool (Maestro, Appium, XCUITest) with their UI tree:
@@ -75,8 +81,9 @@ they can do; never write secrets into the config, a scenario or a script.
 - Environments, access (gates, accounts, sign-in), e-mails, readonly and
   production rules, and what is yours to arrange for the project's stack:
   [reference/environments.md](reference/environments.md)
-- Sharing, reviewer feedback, mentions, inbox, verdicts and baselines, and
-  cleaning up runs (trash, prune, keep, archive):
+- Sharing, review mode and approvals carried over unchanged steps, reviewer
+  feedback, mentions, inbox, verdicts and baselines, and cleaning up runs
+  (trash, prune, keep, archive):
   [reference/collaboration.md](reference/collaboration.md)
 - Reading runs, feedback and the inbox over MCP instead of the CLI:
   [reference/mcp.md](reference/mcp.md)

package/skills/kaloko/reference/collaboration.md

@@ -4,7 +4,10 @@ A run is only worth something once the people who decide have seen it. The
 loop teams use:
 
 1. **Share the run** (`kaloko share`, tester token, after asking). The
-   command prints the canvas URL.
+   command prints the canvas URL and one line on what waits for a person,
+   e.g. `12 steps unchanged, approvals carried over; 5 need review: <link>`.
+   Give the person that review-mode link (it ends in `#review`) with the
+   counts, not just the canvas.
 2. **Put the link where the work is tracked.** When the branch has a pull
    request and `gh` is signed in, `kaloko share --pr` posts one comment per
    scenario on it (summary line, canvas link, criteria that need attention
@@ -19,7 +22,10 @@ loop teams use:
    that waits for review and turns green or red with the verdict; do not
    report it as passed before a person accepted the run.
 3. **Read feedback before continuing.** `kaloko feedback` lists the run
-   verdict, open rejections and comments, and failed manual criteria.
+   verdict, returned steps first (with the reviewer's note), open comments,
+   failed manual criteria and how many steps still wait for a person.
+   `kaloko review` (or MCP `get_review_queue`) says exactly what a person
+   still has to decide; see *Review mode* below.
    `kaloko inbox` lists what needs your attention across runs: mentions,
    returned runs, rejected steps in your runs, new runs of scenarios you
    reviewed, and expiry warnings. Both take `--json`; `kaloko inbox --read`
@@ -31,6 +37,34 @@ loop teams use:
    reply in the tracker with the new link. The reviewer who returned it is
    told about the new run automatically.
 
+## Review mode
+
+Reviewers decide in **review mode** on the canvas (`Q`, the Review button,
+or a link ending in `#review`): one step at a time, the steps that need a
+person first (failed, returned, the AI was unsure or did not evaluate,
+changed since the last accepted run, open comments), with the accepted run
+beside it. `J`/`K` move, `A` approves, `R` returns with a note, `C`
+comments; at the end they accept or return the run.
+
+- **Approvals carry over unchanged steps.** When a new run is shared, a step
+  whose screenshots are byte-identical to the last accepted run, whose
+  criteria are the same and whose deterministic checks pass keeps the
+  approval a person gave it there, with its origin (who, when, which run).
+  Only changed or failing steps go to the queue. Anyone can revoke a carried
+  approval; the step then waits again. Organizations on Business can turn
+  this off (Settings → Approvals).
+- A carried approval never accepts the run and never counts for required
+  approvers: the run verdict is always a person's decision.
+- **Report what waits**, do not decide it: run `kaloko review` (add `--json`
+  for the data, `--run <id>` for another run) or MCP `get_review_queue` and
+  tell the person how many steps wait and give them `review_url`.
+- **Never approve or accept on a person's behalf.** Decisions by tokens and
+  agents (MCP `decide_step`, `add_comment` with `approved`) are recorded as
+  yours, shown apart, and do not count as a person's unless the organization
+  allows it. Return a step only when you found a real problem, with a note.
+- Returned steps are feedback: fix them, share a new run, and resolve the
+  thread with what changed (see below).
+
 ## Processing feedback
 
 Comments are threads in three places:
@@ -195,6 +229,15 @@ Settings → Storage (keep the newest N per scenario and environment).
 Everything above is available over the API with an organization token:
 
 - `GET /api/v1/orgs/<org>/feedback?run=<id|latest>[&scenario=<id>]`
+- `GET /api/v1/orgs/<org>/runs/<id>/review-queue` (or
+  `GET /api/v1/orgs/<org>/review-queue?run=<id|latest>&scenario=<id>`):
+  `items` in review order with `reasons`, `decision` (approved, returned or
+  carried, with who and how), `unconfirmed` (an agent's or token's decision
+  that does not count), `changed`, criteria with evidence, `screenshots` and
+  `ref_screenshots`; `carried` with provenance; `counts` (`queue`,
+  `decided`, `pending`, `carried`, `clear`); `reference` (the accepted run);
+  `review_url`. Decisions use the comment and verdict routes;
+  `POST …/runs/<id>/carried/<step>/revoke` revokes a carried approval.
 - `GET|POST /api/v1/orgs/<org>/runs/<id>/comments` (a step: `node_id`;
   the whole run: `node_id: ""`), `GET|POST …/scenarios/<id>/comments`
   (the whole flow), and per comment `PATCH`, `DELETE`, `POST …/<cid>/resolve`

package/skills/kaloko/reference/evaluation.md

@@ -61,3 +61,8 @@ it was not evaluated.
 
 `needs_review` is not a failure: look at the screenshot and state your
 reading, or leave it to the reviewer.
+
+After a share, steps that did not change since the last accepted run keep a
+person's approval; only the rest waits in review mode. Report it as the
+share prints it ("12 steps unchanged, approvals carried over; 5 need review:
+<link>") and never call a carried or agent approval a person's acceptance.

package/skills/kaloko/reference/first-run.md

@@ -0,0 +1,51 @@
+# First run in a new project
+
+Use this when the project has no `kaloko.config.yml` yet, or the organization
+has no shared run of its own. The goal is one real flow on the canvas, shared,
+with a person who knows where to approve it.
+
+## Where the organization stands
+
+- `GET /api/v1/orgs/<org>/getting-started` (MCP tool `get_started`) answers
+  `stage` (`empty`, `sample`, `active`), the sample run's URL, how many real
+  runs exist, the next steps and a prompt to start from.
+- Every new organization has a **sample run**: a tea-shop checkout in Czech
+  and English on desktop and mobile, with one failing step per language, one
+  overflow on the phone and one criterion waiting for a person. It does not
+  count toward the plan and expires after 30 days. `<service>/<org>/sample`
+  opens it; it carries a short guide for the person (open a step, approve,
+  return with a note, share).
+- If the person has never reviewed a run, send them the sample link first:
+  they learn the canvas there, not on your first draft. When it is gone,
+  `POST /api/v1/orgs/<org>/sample` (MCP `add_sample_run`, needs an upload or
+  full token) adds it again. Do not delete it unless asked
+  (`DELETE /api/v1/orgs/<org>/sample`).
+
+## From zero to a first shared run
+
+1. `npm install --save-dev kaloko`, then
+   `npx kaloko init --agent claude --org <org>` (it prints the sample link
+   and these steps). Fill `environments` in `kaloko.config.yml` with the URL
+   the app runs on.
+2. `npx kaloko login`: the person approves a token in the browser. Ask them
+   to; never create or paste tokens yourself.
+3. `npx kaloko doctor` and fix what it marks ✕.
+4. Draft the first scenario:
+   - public pages: `npx kaloko draft <url> [url…]` writes a read-only
+     production scenario and a plan; sharpen purposes and criteria;
+   - a task or the main flow of the app: write `ACCEPTANCE.md` and
+     `qa/scenario.yml` as in [acceptance.md](acceptance.md). Pick the flow a
+     person would show a client (sign-up, checkout, the main form), not every
+     page.
+5. `npx kaloko validate qa/scenario.yml`, then
+   `npx kaloko start --scenario qa/scenario.yml --env local`, `kaloko walk`,
+   `kaloko build`. Fix scenario mechanics until every step has a capture.
+6. Ask before `kaloko share` (see *Ask first* in SKILL.md). After sharing,
+   give the person the canvas URL and say what to look at: the failing
+   criteria with their evidence and the steps that need a decision.
+7. Read `kaloko feedback` when they have looked; fix what they returned and
+   walk again.
+
+Done means: the scenario validates, the run is shared, its URL and summary
+line are in your reply (and in the issue or PR the work belongs to), and the
+person knows whether the sample or this run is what they should open.

package/skills/kaloko/reference/mcp.md

@@ -28,8 +28,13 @@ file.
 | `list_notifications` | the token owner's inbox (`unread_only`, `limit`) |
 | `list_projects` | projects of the organization with counts; the slug is the `project` filter of `list_runs` and the value for `project:` in a scenario |
 | `get_criteria_verdicts` | reviewer verdicts on manual or overridden criteria of a run |
+| `get_review_queue` | what a person still has to decide in a run (`run_id`, or `scenario` / nothing for the newest run): steps in review order with reasons, decisions, approvals carried over unchanged steps with their origin, counts and `review_url` to give the person |
+| `decide_step` | records your (the agent's) decision on a step: `approve`, or `return` with a `note`; marked as an agent's and not counted as a person's. Never use it to approve for a person |
+| `revoke_carried_approval` | revokes an approval carried over to a step that looks unchanged but should be looked at again (`run_id`, `step`) |
 | `get_step_assets` | documentation layer (Business): newest capture of every step of a scenario with stable image, HTML and metadata URLs (`scenario`, `step`, `locale`, `viewport`, `accepted`) |
 | `list_step_changes` | documentation layer: steps whose capture or status changed since the previous accepted run or `since` (`scenario`, `since`, `accepted`); see [documentation.md](documentation.md) |
+| `get_started` | where the organization stands (`empty`, `sample`, `active`), its sample run, the next steps and a prompt; call it in a new project, see [first-run.md](first-run.md) |
+| `add_sample_run` | adds the sample run (or returns the one there is); needs an upload or full token and the Developer / Tester role |
 
 ## Comment tools
 

package/src/cli.mjs

@@ -1,6 +1,7 @@
 import { writeFile, access, readFile, mkdir } from 'node:fs/promises'
 import { existsSync } from 'node:fs'
 import { gzipSync } from 'node:zlib'
+import { createHash } from 'node:crypto'
 import { join, resolve, relative, dirname } from 'node:path'
 import { pathToFileURL } from 'node:url'
 import yaml from 'js-yaml'
@@ -29,9 +30,11 @@ import { resolveItems, fieldsOf, DEFAULT_LIMIT } from './lib/stack.mjs'
 import { DEFAULTS as JEV_DEFAULTS } from './lib/jev.mjs'
 import { expandPacks } from './lib/packs.mjs'
 import { upsertPrComment } from './lib/pr.mjs'
+import { formatReviewQueue, shareReviewLine } from './lib/review.mjs'
 import { htmlViewAllowed } from './lib/htmlview.mjs'
 import { service, serviceUrl } from './lib/service.mjs'
 import { login } from './lib/login.mjs'
+import { initNextSteps, loginNextSteps } from './lib/onboarding.mjs'
 import { walkDesign, syncDesign, publishVersion, historyCmd, referenceCmd, tokensCmd, exportLive, localRevisions, branchCmd, uploadBlobs } from './lib/design-cli.mjs'
 import { designDir, readBase, headKey } from './lib/design.mjs'
 import { lintDesign, formatLint } from './lib/design-lint.mjs'
@@ -111,7 +114,11 @@ Results
   share [--expires 30] [--pr]       Upload the run to kaloko.app (KALOKO_TOKEN, tester role);
                                     --pr adds or updates one comment on the branch's pull request via gh
   feedback [--run id] [--scenario id] [--json]
-                                    Open threads from reviewers (steps, the whole run, the whole flow) with ids and replies
+                                    Open threads from reviewers (steps, the whole run, the whole flow) with ids and replies;
+                                    returned steps first, with their notes
+  review [--run id] [--scenario id] [--json]
+                                    What a person still has to decide on a shared run (failed, unsure, changed, returned,
+                                    commented steps), approvals carried over unchanged steps, and the review-mode link
   comment [--step id | --flow] --note "…" [--status rejected|approved] [--run id] [--scenario id]
   comment --reply|--resolve|--reopen|--edit|--delete <id> [--note "…"] [--flow]
                                     Comment, answer and close feedback from the CLI (resolve with "Fixed in <commit>")
@@ -563,7 +570,13 @@ const commands = {
       await cp(join(packageRoot, 'templates', 'steps', 'consent.mjs'), consentStep)
       say('Added qa/flows/steps/consent.mjs (accepts the consent dialog, if the site has one)')
     }
-    say(`Next: run kaloko login to approve a token in the browser (or create one in the app under Settings → API tokens and put KALOKO_TOKEN into .env).\nScenario template: ${join(packageRoot, 'templates', 'scenario.yml')}`)
+    // the organization's sample run and the way to a first real flow (src/lib/onboarding.mjs)
+    let written = ''
+    try { written = await readFile(existsSync(file) ? file : join(cwd, LEGACY_CONFIG_FILE), 'utf8') } catch {}
+    const org = typeof args.org === 'string' ? args.org : (written.match(/^org:\s*["']?([a-z0-9-]+)["']?\s*$/m) || [])[1]
+    const base = serviceUrl({ share: { url: (written.match(/^share:[ \t]*\n(?:[ \t]+.*\n)*?[ \t]+url:[ \t]*["']?(https?:\/\/[^\s"']+)/m) || [])[1] } })
+    say(initNextSteps({ base, org }).join('\n'))
+    say(`Scenario template: ${join(packageRoot, 'templates', 'scenario.yml')}`)
   },
 
   async validate (args) {
@@ -1000,9 +1013,10 @@ const commands = {
     const body = async (p) => { const raw = await readFile(join(run.dir, p)); const gz = /\.(html|json)$/.test(p) && raw.length > 512; return { data: gz ? gzipSync(raw, { level: 6 }) : raw, gz } }
     // the file list goes first: the service checks limits once and each upload is then a plain write
     // (an older service without the plan answers 404/405 and every upload checks itself, as before)
-    if (files.size > 20) {
+    // screenshots name their SHA-256: the service checks it on arrival and compares unchanged steps with it
+    if (files.size) {
       const plan = []
-      for (const p of files) plan.push({ path: p, bytes: (await body(p)).data.length })
+      for (const p of files) { const { data } = await body(p); plan.push({ path: p, bytes: data.length, ...(/\.(png|webp|jpe?g)$/i.test(p) ? { sha256: createHash('sha256').update(data).digest('hex') } : {}) }) }
       await client.request('POST', `/orgs/${config.org}/runs/${manifest.id}/files`, { files: plan }).catch((e) => { if (!/HTTP (404|405)/.test(e.message)) throw e })
     }
     const queue = [...files]
@@ -1036,6 +1050,9 @@ const commands = {
     meta.shared = { url: fin.url, at: new Date().toISOString(), expires_days: created.expires_days }
     await writeFile(join(run.dir, 'meta.json'), JSON.stringify(meta, null, 2) + '\n')
     say(`Shared ${manifest.id} (${files.size} files, expires in ${created.expires_days} days)\n${fin.url}`)
+    // what waits for a person, with the review-mode link to give them (approvals of unchanged steps carry over)
+    const review = shareReviewLine(fin.review)
+    if (review) say(review)
     const capped = expiryNote(days, created.expires_days)
     if (capped) say(`Note: ${capped}`)
     if (args.pr) {
@@ -1132,12 +1149,38 @@ const commands = {
       for (const x of r.replies || []) say(`      ↳ ${x.email}${x.agent ? ` via ${x.agent}` : ''}: ${x.deleted ? '(deleted)' : x.note}`)
     }
     const flow = data.flow_comments || []
+    // how many steps still wait for a person (review mode); an older service answers 404 and the line is left out
+    const queue = await client.request('GET', `/orgs/${config.org}/review-queue?run=${encodeURIComponent(data.run.id)}`).catch(() => null)
+    if (queue?.counts) say(`  review: ${queue.counts.pending} of ${queue.counts.queue} step(s) wait for a person${queue.counts.carried ? `, ${queue.counts.carried} unchanged kept their approval` : ''} (kaloko review; review mode: ${queue.review_url})`)
     if (!data.items.length && !flow.length) { say('  No open rejections or comments.'); return }
-    for (const r of data.items) thread(r, r.node_id ? `step ${r.node_id}` : 'whole run')
+    // returned steps first: a reviewer said what should change
+    const returned = data.items.filter((r) => r.status === 'rejected')
+    if (returned.length) say(`Returned steps (${returned.length}), fix these first:`)
+    for (const r of returned) thread(r, r.node_id ? `step ${r.node_id}` : 'whole run')
+    if (returned.length && data.items.length > returned.length) say('Comments:')
+    for (const r of data.items.filter((x) => x.status !== 'rejected')) thread(r, r.node_id ? `step ${r.node_id}` : 'whole run')
     for (const r of flow) thread(r, 'whole flow')
     say(`\nAnswer with: kaloko comment --reply <id> --note "…"; close with: kaloko comment --resolve <id> --note "Fixed in <commit>"${flow.length ? ' (add --flow for flow comments)' : ''}`)
   },
 
+  /**
+   * What a person still has to decide on a shared run: the service's review queue (failed, unsure, changed since the
+   * accepted run, returned, commented), the approvals carried over unchanged steps, and the review-mode link. For
+   * agents: report it to the person; never approve on their behalf.
+   */
+  async review (args) {
+    const { config, root } = await context(args)
+    const client = service(config)
+    let runId = typeof args.run === 'string' ? args.run : null
+    let scenarioId = typeof args.scenario === 'string' ? args.scenario : null
+    if (!runId && !scenarioId) {
+      try { const r = await resolveRun({ root, output: config.output }); if (r.meta.shared) runId = r.meta.id; else scenarioId = r.meta.scenario.id } catch {}
+    }
+    const q = new URLSearchParams({ run: runId || 'latest', ...(scenarioId ? { scenario: scenarioId } : {}) })
+    const data = await client.request('GET', `/orgs/${config.org}/review-queue?${q}`)
+    say(args.json ? JSON.stringify(data, null, 2) : formatReviewQueue(data))
+  },
+
   /**
    * Comments from the CLI: on a step (--step), the whole run (default) or the whole flow (--flow); reply, resolve
    * (with a closing note), reopen, edit and delete by id. Targets the shared run (--run, default the current one).
@@ -1236,6 +1279,7 @@ const commands = {
     if (args.print) return
     say(`✓ Signed in to ${r.org_name || r.org} as ${r.email} (${r.scope}; expires ${String(r.expires_at || '').slice(0, 10)}). ${tokenEnv} saved to ${r.file}.`)
     if (config.org && r.org && config.org !== r.org) say(`! ${CONFIG_FILE} names the organization ${config.org}; the token is for ${r.org}.`)
+    for (const line of loginNextSteps({ base, org: r.org })) say(line)
     let projectEnv = ''
     try { projectEnv = await readFile(join(process.cwd(), '.env'), 'utf8') } catch {}
     if (inShell || new RegExp(`^\\s*(export\\s+)?${tokenEnv}\\s*=`, 'm').test(projectEnv)) say(`! ${tokenEnv} is also set ${inShell ? 'in your shell' : 'in this project\'s .env'}, which wins over ~/.config/kaloko/.env. Remove it there to use the new token.`)

package/src/lib/onboarding.mjs

@@ -0,0 +1,33 @@
+// What `kaloko init` and `kaloko login` print next: the organization's sample run (every new organization gets one,
+// a reviewed checkout to try the canvas on) and the way to a first real flow. No service call: the sample link is a
+// stable address that opens the organization's sample run, or its home page when there is none.
+
+export const FIRST_FLOW_PROMPT = 'Use the Kaloko skill: draft a scenario for the main flow of this app on the local environment, walk it in every locale on desktop and mobile, share it and send me the canvas link.'
+
+/** The organization slug from a config, unless it is still the template's placeholder. */
+export const realOrg = (org) => (typeof org === 'string' && /^[a-z0-9][a-z0-9-]{1,40}$/.test(org) && org !== 'my-org' ? org : null)
+
+/** Address of the organization's sample run on the service. */
+export const sampleUrl = (base, org) => `${String(base).replace(/\/$/, '')}/${org}/sample`
+
+/** Lines printed at the end of `kaloko init`. */
+export function initNextSteps ({ base, org, loggedIn = false }) {
+  const o = realOrg(org)
+  return [
+    'Next:',
+    loggedIn ? '  1. Signed in already (KALOKO_TOKEN found).' : '  1. npx kaloko login   (approve a token in the browser; or put KALOKO_TOKEN from Settings → API tokens into .env)',
+    o ? `  2. Try a review on the sample run: ${sampleUrl(base, o)}` : '  2. Set org: in kaloko.config.yml, then open <service>/<org>/sample to try a review on the sample run.',
+    '  3. Your first real flow: npx kaloko draft <your app URL>   (public pages), or ask your agent:',
+    `     "${FIRST_FLOW_PROMPT}"`
+  ]
+}
+
+/** Lines printed after a successful `kaloko login`. */
+export function loginNextSteps ({ base, org }) {
+  const o = realOrg(org)
+  if (!o) return []
+  return [
+    `Sample run to try a review on: ${sampleUrl(base, o)}`,
+    'First real flow: npx kaloko draft <your app URL>, or ask your agent to walk the main flow and share it.'
+  ]
+}

package/src/lib/review.mjs

@@ -0,0 +1,69 @@
+// The service's review queue in words for the terminal (`kaloko review`, `kaloko share`, `kaloko feedback`): what a
+// person still has to decide on a shared run, so an agent can tell them what waits and where. Agents never decide
+// for people; they point them to the review mode link.
+
+const REASON = {
+  fail: 'failed',
+  returned: 'returned',
+  needs_review: 'needs a person’s judgement',
+  not_evaluated: 'not evaluated',
+  revoked: 'carried approval revoked',
+  changed: 'changed since the accepted run',
+  new: 'new',
+  comments: 'open comments'
+}
+const plural = (n, one, many) => `${n} ${n === 1 ? one : many}`
+const day = (iso) => (iso ? String(iso).slice(0, 10) : '')
+const cut = (s, n = 140) => { const t = String(s ?? '').replace(/\s+/g, ' ').trim(); return t.length > n ? `${t.slice(0, n - 1)}…` : t }
+
+/** One line after `kaloko share`: "12 steps unchanged, approvals carried over; 5 need review: <link>". */
+export function shareReviewLine (r) {
+  if (!r || r.queue == null) return null
+  const carried = r.carried ? `${plural(r.carried, 'step', 'steps')} unchanged, approvals carried over; ` : ''
+  if (!r.pending) return `${carried}no step waits for a person; the run still needs its verdict: ${r.url}`
+  return `${carried}${r.pending} ${r.pending === 1 ? 'needs' : 'need'} review: ${r.url}`
+}
+
+/** Who decided and how, in a few words. */
+function decisionText (d) {
+  if (!d) return 'waiting for a person'
+  const via = d.via === 'agent' ? ' (agent)' : d.via === 'token' ? ' (token)' : ''
+  if (d.state === 'carried') return `approval carried over: ${d.by}${via} approved it on ${day(d.at)} in run ${d.from_run}`
+  if (d.state === 'approved') return `approved by ${d.by}${via} on ${day(d.at)}`
+  return `returned by ${d.by}${via} on ${day(d.at)}: ${cut(d.note, 200)}`
+}
+
+/** The whole queue for the terminal. */
+export function formatReviewQueue (q) {
+  if (!q?.run) return 'No published run found.'
+  const c = q.counts || {}
+  const out = []
+  out.push(`Review of ${q.run.id} (${q.run.scenario}${q.run.environment ? `, ${q.run.environment}` : ''}): ${c.decided || 0} of ${plural(c.queue || 0, 'step', 'steps')} decided, ${c.pending || 0} waiting for a person${c.carried ? `; ${plural(c.carried, 'unchanged step', 'unchanged steps')} kept ${c.carried === 1 ? 'its' : 'their'} approval` : ''}`)
+  out.push(q.reference
+    ? `Compared with the accepted run ${q.reference.id} (accepted${q.reference.accepted_by ? ` by ${q.reference.accepted_by}` : ''}${q.reference.accepted_at ? ` on ${day(q.reference.accepted_at)}` : ''})`
+    : 'No accepted run of this scenario yet: every step is new to the reviewers.')
+  if (!q.policy?.carry_over) out.push('Approvals do not carry over in this organization (Settings → Approvals).')
+  for (const it of q.items || []) {
+    const mark = !it.decision ? '○' : it.decision.state === 'returned' ? '↩' : '✓'
+    out.push(`  ${mark} ${it.step}${it.title ? `  ${typeof it.title === 'string' ? it.title : Object.values(it.title)[0]}` : ''} — ${it.reasons.map((r) => REASON[r] || r).join(', ')}`)
+    if (it.changed?.captures?.length) out.push(`      changed: ${it.changed.captures.map((x) => `${x.locale}/${x.viewport}${x.why !== 'pixels' ? ` (${x.why})` : ''}`).join(', ')}${it.changed.criteria ? ' · criteria changed' : ''}`)
+    else if (it.changed?.criteria) out.push('      changed: criteria')
+    for (const cr of (it.criteria || []).filter((x) => x.cells?.length).slice(0, 4)) {
+      const cell = cr.cells.find((x) => x.verdict === 'fail') || cr.cells[0]
+      out.push(`      ${cr.id} [${cell.locale}/${cell.viewport}] ${cell.verdict}${cell.evidence ? `: ${cut(cell.evidence)}` : ''}`)
+    }
+    out.push(`      ${decisionText(it.decision)}`)
+    if (it.unconfirmed) out.push(`      not counted: ${decisionText(it.unconfirmed)}`)
+    if (it.open_comments) out.push(`      ${plural(it.open_comments, 'open comment', 'open comments')} (kaloko feedback)`)
+  }
+  if (!(q.items || []).length) out.push('  Nothing waits for a person on the steps.')
+  if (q.carried?.length) {
+    out.push(`Approvals carried over (${q.carried.length}):`)
+    for (const x of q.carried.slice(0, 12)) out.push(`  ✓ ${x.step} — ${x.approved_by}${x.approved_via && x.approved_via !== 'session' ? ` (${x.approved_via})` : ''}, ${day(x.approved_at)}, ${x.kind === 'run' ? 'accepted run' : 'step approved in'} ${x.from_run}`)
+    if (q.carried.length > 12) out.push(`  … and ${q.carried.length - 12} more`)
+  }
+  const v = q.verdict || {}
+  out.push(`Run verdict: ${v.verdict || 'pending'}${v.by ? ` by ${v.by}${v.via && v.via !== 'session' ? ` (${v.via})` : ''}` : ''}${v.awaiting?.length ? ` · awaiting approval from ${v.awaiting.join(', ')}` : ''}`)
+  out.push(`Review mode for a person: ${q.review_url}`)
+  return out.join('\n')
+}

package/viewer/index.html

@@ -637,6 +637,37 @@ details summary{cursor:pointer;font-size:12.5px;font-weight:500}
 .lb.is-idle .lb__fbar{opacity:0;pointer-events:none}
 .lb.is-focus.is-idle .lb__fshow{display:grid}
 @media (prefers-reduced-motion:no-preference){.lb__fbar{transition:opacity .2s ease}}
+/* ---------- review mode (Kontrola): one step at a time from the queue of steps that need a person ---------- */
+.rvm{position:fixed;inset:0;z-index:23;background:var(--ground);display:grid;grid-template-rows:auto 1fr auto}
+.rvm__top{display:flex;align-items:center;gap:8px 14px;flex-wrap:wrap;padding:10px 16px;background:var(--panel);border-bottom:1px solid var(--line-strong)}
+.rvm__top .spacer,.rvm__foot .spacer{flex:1}
+.rvm__prog{font-size:13px;font-variant-numeric:tabular-nums;white-space:nowrap}
+.rvm__bar{display:block;width:120px;height:6px;border-radius:999px;background:var(--skip-bg);overflow:hidden}
+.rvm__bar i{display:block;height:100%;background:var(--pass)}
+.rvm__body{display:grid;grid-template-columns:minmax(0,1fr) minmax(320px,420px);min-height:0}
+.rvm__stage{overflow:auto;padding:24px;background:var(--panel-2);touch-action:pan-y pinch-zoom}
+.rvm__stage > .lb__img,.rvm__stage > .lb__win{margin:0 auto}
+.rvm__stage .lb__cmp{max-width:100%}
+.rvm__side{overflow:auto;background:var(--panel);border-left:1px solid var(--line)}
+.rvm__foot{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:10px 16px calc(10px + env(safe-area-inset-bottom));background:var(--panel);border-top:1px solid var(--line)}
+.rvm__foot .btn .kbd,.rvm__top .kbd{margin-left:4px}
+.rvm__why{display:flex;flex-wrap:wrap;gap:4px;margin-top:8px}
+.rvm__dec{display:grid;gap:6px}
+.rvm__dec p{margin:0}
+.rvm__ret textarea{width:100%;font:inherit;padding:8px;border:1px solid var(--line-strong);border-radius:6px;background:var(--panel);color:var(--ink)}
+.rvm__end{width:min(720px,100%);margin:0 auto;padding:28px 16px 40px;overflow:auto}
+.rvm__end h3{font-size:22px;letter-spacing:-.01em;margin:0 0 8px;text-wrap:balance}
+.rvm__list{list-style:none;margin:8px 0 0;padding:0;display:grid;gap:4px}
+.rvm__list li{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+.rvm__list button.linkish{text-align:left}
+.rvm__loading{padding:40px;text-align:center;color:var(--muted)}
+.rvm__wrap{overflow:auto;min-height:0}
+#rvBtn .rv-count{display:inline-grid;place-items:center;min-width:18px;height:18px;padding:0 5px;margin-left:4px;border-radius:999px;background:var(--ink);color:var(--panel);font-size:11px;font-weight:600}
+.badge.rv-carry{margin-left:auto}
+@media (max-width:900px){.rvm__body{grid-template-columns:1fr;grid-template-rows:minmax(220px,55%) 1fr}.rvm__side{border-left:0;border-top:1px solid var(--line)}.rvm__stage{padding:12px}.rvm__bar{width:72px}.rvm__keys{display:none}}
+@media (max-width:560px){.rvm__foot{gap:6px;padding:8px 10px calc(8px + env(safe-area-inset-bottom))}.rvm__foot .btn{flex:1 1 auto;justify-content:center;padding:9px 8px}.rvm__foot .spacer{display:none}.rvm__top{padding:8px 10px}.rvm__top .brand small{display:none}}
+@media (hover:none) and (pointer:coarse){.rvm .kbd,.rvm__keys{display:none}}
+@media (max-width:1400px){#rvBtn span[data-t]{display:none}#rvBtn{padding:5px 8px}}@media (max-width:820px){#rvBtn{order:3}}
 </style>
 </head>
 <body>
@@ -652,6 +683,7 @@ details summary{cursor:pointer;font-size:12.5px;font-weight:500}
       <kbd>K</kbd>
     </button>
     <button class="btn" id="rpBtn" title="R"><svg class="i" viewBox="0 0 24 24"><path d="M7 5v14l11-7z"/></svg><span data-t="replay"></span></button>
+    <button class="btn" id="rvBtn" title="Q"><svg class="i" viewBox="0 0 24 24"><path d="M4 6h10M4 12h10M4 18h7"/><path d="m15 17 2.5 2.5L22 15"/></svg><span data-t="rvTitle"></span></button>
     <button class="btn" id="ptBtn" title="P" hidden><svg class="i" viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="13" rx="1.5"/><path d="M8 21h8M12 17v4"/></svg><span data-t="prototype"></span></button>
     <div class="dbar" id="dbar" hidden></div>
     <span class="cmpchip" id="cmpChip" hidden></span>
@@ -721,6 +753,7 @@ details summary{cursor:pointer;font-size:12.5px;font-weight:500}
 </div>
 <div class="rp" id="rp" hidden role="dialog" aria-modal="true" aria-label="Replay"></div>
 <div class="pt" id="pt" hidden role="dialog" aria-modal="true" aria-label="Prototype"></div>
+<div class="rvm" id="rv" hidden role="dialog" aria-modal="true" aria-label="Review"></div>
 <div class="toast" id="toast" hidden></div>
 <script>
 /* Kaloko viewer. Data source:
@@ -751,7 +784,7 @@ const I18N = {
     onlyLocal:'Tento běh je jen lokálně; otevřete jeho složku.', linksExpired:'Odkazy na snímky vypršely. Obnovte stránku.', captured:'Zachyceno', console:'Konzole', errors:'chyb', blocked:'blokovaných požadavků', files:'Soubory',
     pagesWord:'stránek', firstScreen:'první obrazovka', layout:'Rozložení', uploadedBy:'Nahrál', addNote:'Přidat poznámku', viewOptions:'Zobrazení', keyComment:'komentář ke kroku (v detailu)', keyHelp:'tato nápověda', helpTitle:'Zkratky a nápověda', flowComments:'Komentáře k flow', runComments:'Komentáře k běhu', commentsTitle:'Komentáře', allOpen:'Otevřené', openWord:'otevřených', flowCommentsLead:'Platí pro celé flow napříč běhy: chybějící krok, obecná připomínka, nápad.', noStepComments:'Ke kroku zatím nikdo nic nenapsal.', noComments:'Zatím žádné komentáře.', showResolved:'Vyřešené', hideResolved:'Skrýt vyřešené', replyAct:'Odpovědět', reopenAct:'Znovu otevřít', editAct:'Upravit', deleteAct:'Smazat', saveAct:'Uložit', cancel:'Zrušit', edited:'upraveno', commentDeleted:'Komentář byl smazán.', viaAgent:'Napsal agent', showPin:'Ukázat na snímku', pinOnShot:'Připnout na snímek', pinClickShot:'Klikněte do snímku', pinnedOnShot:'Připnuto na snímek', replyPh:'Odpověď… (@jméno upozorní)', flowPh:'Komentář k celému flow… (@jméno upozorní)', runPh:'Komentář k celému běhu… (@jméno upozorní)', commentLabel:'Komentář', ctrlEnter:'Ctrl+Enter odešle', confirmDelete:'Smazat komentář?', deletedToast:'Smazáno', openCommentsN:'Nevyřízené komentáře', showAllN:'Zobrazit všech %N%', screenWord:'obrazovka aplikace', uiTree:'UI strom', platformWord:'Platforma', treeHint:'Klikněte na prvek: ukáže ho na snímku.', treeSearch:'Hledat v UI stromu…', treeOcr:'Text rozpoznaný ze snímku (OCR): bez rolí a ovládacích prvků.', treeLoadFail:'UI strom se nepodařilo načíst.', treeEmpty:'Strom je prázdný.', mapView:'Mapa', indexView:'Index', searchSteps:'Hledat v krocích, kritériích a stránkách…', criteriaCol:'Kritéria', notesCol:'Poznámky', noStepsMatch:'Žádný krok neodpovídá filtru.', riKeys:'/ hledat · ↑↓ vybrat · Enter otevřít · I mapa', consoleWord:'chyb v konzoli', loadingPages:'hledám i ve stránkách stacků…', sortTitle:'Název', runWord:'Běh', openIndex:'Otevřít index', pagesNeedAttention:'stránek chce pozornost', allPagesPass:'všechny stránky prošly', stackLoadFail:'Index stránek se nepodařilo načíst', semanticSample:'sémantický vzorek', downloadCsv:'Stáhnout CSV', allWord:'Vše', criterionFilter:'Nesplněné kritérium', anyCriterion:'Jakékoli kritérium', searchPages:'Hledat v titulku, URL a polích…', sortBy:'Řadit podle', sortOrder:'Pořadí', sortStatus:'Stav (nejhorší první)', sortDir:'Směr řazení', pageWord:'Stránka', statusWord:'Stav', failingCriteria:'Neprošlo', stackKeys:'/ hledat · ↑↓ vybrat · Enter otevřít · Esc zavřít', listView:'Seznam', gridView:'Mřížka', noPagesMatch:'Filtru neodpovídá žádná stránka.', backToIndex:'Zpět na index',
     subject:'Předmět', from:'Od', to:'Komu', received:'Přijato', mailBeforeRun:'přišel před začátkem běhu', noCapture:'Bez snímku', viewEval:'eval.json', decision:'rozhodnutí', mainLane:'Hlavní průchod',
-    downloadZip:'Stáhnout ZIP', downloadZipNote:'Všechny soubory v otevřených formátech a plachta, která se otevře offline z disku', filesWord:'souborů', publicAccess:'veřejný odkaz', orgAccess:'přístup po přihlášení do organizace', projectAll:'Všechny projekty', packNote:'Kritérium z balíčku kontrol (packs ve scénáři)', coverage:'Pokrytí plánu', coverageLine:'kritérií z ACCEPTANCE.md má kontrolu', coverageExtra:'kontrol mimo plán', coverageFull:'Každé plánované kritérium má kontrolu.', coverageSteps:'Kroky v plánu bez uzlu', flakyTitle:'Nestabilní kritéria', flaky:'nestabilní', flakyNote:'Verdikt se liší mezi běhy na stejném commitu a prostředí.', people:'Lidé ve flow', peopleHint:'Kliknutím na osobu zvýrazníte její kroky; přerušované šipky ukazují předání mezi lidmi.', awaiting:'Čeká na schválení od', approvedBy:'schválili', approvedByAll:'Schválili všichni povinní schvalovatelé.', publicRun:'Veřejný běh', publicNote:'Plachta je čitelná bez přihlášení; jména hodnotitelů jsou skrytá.', makePublic:'Zveřejnit běh', makePrivate:'Zrušit zveřejnění', publicHint:'Jen pro scénáře bez osobních údajů', publicConfirm:'Zveřejnit tento běh? Uvidí ho kdokoli s odkazem, bez přihlášení. Použijte jen u scénářů bez osobních údajů.', openInApp:'Otevřít v Kaloku', signInLink:'Přihlásit', replay:'Projít', rpStep:'Krok', rpNext:'Další', rpPrev:'Zpět', rpEnd:'Konec průchodu.', rpRestart:'Znovu od začátku', rpChoose:'Kudy dál?', rpOr:'nebo', rpKeys:'← → krok · čísla volí větev · Esc zavře', rpDecision:'Rozhodnutí', rpBranch:'větev', rpAltOnly:'jiná větev',
+    downloadZip:'Stáhnout ZIP', downloadZipNote:'Všechny soubory v otevřených formátech a plachta, která se otevře offline z disku', filesWord:'souborů', publicAccess:'veřejný odkaz', orgAccess:'přístup po přihlášení do organizace', projectAll:'Všechny projekty', packNote:'Kritérium z balíčku kontrol (packs ve scénáři)', coverage:'Pokrytí plánu', coverageLine:'kritérií z ACCEPTANCE.md má kontrolu', coverageExtra:'kontrol mimo plán', coverageFull:'Každé plánované kritérium má kontrolu.', coverageSteps:'Kroky v plánu bez uzlu', flakyTitle:'Nestabilní kritéria', flaky:'nestabilní', flakyNote:'Verdikt se liší mezi běhy na stejném commitu a prostředí.', people:'Lidé ve flow', peopleHint:'Kliknutím na osobu zvýrazníte její kroky; přerušované šipky ukazují předání mezi lidmi.', awaiting:'Čeká na schválení od', approvedBy:'schválili', approvedByAll:'Schválili všichni povinní schvalovatelé.', viaToken:'přes token', viaAgent:'přes agenta', approvedByTokens:'přes token nebo agenta', publicRun:'Veřejný běh', publicNote:'Plachta je čitelná bez přihlášení; jména hodnotitelů jsou skrytá.', makePublic:'Zveřejnit běh', makePrivate:'Zrušit zveřejnění', publicHint:'Jen pro scénáře bez osobních údajů', publicConfirm:'Zveřejnit tento běh? Uvidí ho kdokoli s odkazem, bez přihlášení. Použijte jen u scénářů bez osobních údajů.', openInApp:'Otevřít v Kaloku', signInLink:'Přihlásit', replay:'Projít', rpStep:'Krok', rpNext:'Další', rpPrev:'Zpět', rpEnd:'Konec průchodu.', rpRestart:'Znovu od začátku', rpChoose:'Kudy dál?', rpOr:'nebo', rpKeys:'← → krok · čísla volí větev · Esc zavře', rpDecision:'Rozhodnutí', rpBranch:'větev', rpAltOnly:'jiná větev',
     compare:'Porovnat', cmpWith:'Porovnáno s', cmpStop:'Ukončit porovnání', cmpOff:'nic', cmpBaseline:'referenční', cmpPrev:'předchozí', cmpTitle:'Rozdíly oproti', cmpNone:'Statusy, verdikty i evidence jsou stejné.', pxChanged:'pixelů jinak', cmpSide:'Vedle sebe', cmpDiff:'Rozdíl', cmpLoadErr:'Porovnávaný běh se nepodařilo načíst.', pxUnavail:'Pixelový rozdíl se počítá jen ve službě (snímky ze stejného původu).', was:'předtím', thisRun:'tento běh', cmpNoCap:'v porovnávaném běhu bez snímku', cmpAdded:'nové kroky', cmpRemoved:'kroky, které zmizely', cmpHint:'Ctrl/⌘ + klik na krok otevře porovnání',
     reviewTitle:'Akceptace a komentáře', approve:'Schválit', reject:'Zamítnout', comment:'Komentovat', notePh:'Co je potřeba změnit, nebo poznámka · @jméno pošle kolegovi upozornění', approved:'schváleno', rejected:'zamítnuto', commented:'komentář', resolved:'vyřešeno', resolve:'Vyřešit', openFeedback:'Otevřená zpětná vazba', noFeedback:'Žádná otevřená zpětná vazba.', saved:'Uloženo', noteRequired:'Napište, co je potřeba změnit.', expires:'Platí do' },
   en: { makePublicVersion:'Make version public', draft:'Draft', liveShared:'live, shared', publishHint:'Publish version saves the whole flow as %V; unchanged steps are reused.', htmlView:'HTML view', htmlViewNote:'A static copy of the page: the site’s scripts removed, styles and images rehosted, secrets stripped.', editTitle:'Edit in the canvas', editText:'Text', editKeep:'keep', editSave:'Save edit', editSaved:'Edit saved as a new revision', editRebased:'The step changed meanwhile; the edit is on the latest revision', editUnapplied:'Not applied (the element no longer exists)', staleCapture:'The screenshot is from the previous revision; Live shows the latest edit.', branches:'Branches', mergeBranch:'Merge into main', mergeConflict:'Step changed on both branches:', mergeTakeBranch:'Take the branch version? (Cancel = keep main)', branchMerged:'Merged', acceptVersion:'Accept version', returnVersion:'Return version', versionVerdict:'Version verdict', draftInfo:'This draft is live and shared: everyone who has it open sees changes as they happen, including the agents’. kaloko sync and canvas edits save steps; Publish version saves the whole flow as a new version.', changedSince:'Changed since', noChangeSince:'No change since', designEnv:'design', version:'Version', versions:'Flow versions', publish:'Publish version', publishName:'Version name (optional)', published:'Published', designRef:'design reference', setDesignRef:'Set as design reference', unsetDesignRef:'Unset design reference', designRefHint:'Implementation is checked against the design reference (pack design).', openDraft:'Open the draft', liveMode:'Live', shotMode:'Screenshot', inspect:'Inspect', pinComment:'Comment on element', pickHint:'Click an element in the preview.', pinnedOn:'On element', unchangedSince:'unchanged since', unchangedSteps:'steps unchanged', changedOnly:'Changed only', stepStatus:'Step status', st_in_progress:'in progress', st_ready_for_review:'ready for review', st_ready_for_dev:'ready for dev', present:'Present', presenting:'You are presenting', stopPresent:'Stop presenting', updatedSteps:'updated', viaAgent:'via', here:'here', copyCss:'Copy CSS', cssCopied:'CSS copied', noToken:'outside the token set', tokenSet:'token', revisionBy:'revision', noLiveOrigin:'Live steps are not enabled on this instance.', draftEmpty:'The draft has no steps yet; run kaloko sync.', prototypeTo:'Prototype: go to', outdated:'outdated', prototype:'Prototype', protoTitle:'Present the prototype', protoHint:'Click through the prototype; ← → previous / next step, Esc to leave.', protoShot:'Screenshots only: live steps are not available here. ← → move through the flow.', protoLocal:'Links open the pages from disk; ← → move through the flow.', protoDevice:'Device frame', protoFull:'Full screen', protoExit:'Leave the prototype', protoNoStep:'The link does not lead to a step of the flow', focus:'Focus', focusTitle:'Show only the preview, full screen', focusExit:'Back to the detail', focusBar:'Preview controls', focusShow:'Show controls', moreTools:'More tools', sheetHandle:'Step detail: tap or drag',     hint:'Drag to pan · Ctrl + wheel to zoom · <span class="kbd">F</span> focus mode (in the detail: the preview only) · <span class="kbd">K</span> scenarios and runs · <span class="kbd">R</span> replay · <span class="kbd">P</span> prototype · <span class="kbd">I</span> map / index · <span class="kbd">←</span><span class="kbd">→</span> previous / next step (in the detail) · <span class="kbd">Esc</span> close', locale:'Tested locale', view:'View', both:'Both', shownRun:'Shown run', allRuns:'All runs', steps:'Flow steps', fit:'Fit flow', stepsWord:'steps', passedWord:'passed', fitLane:'Show the whole section', following:'Following', followEsc:'Esc to stop', followHint:'Follow what they do', visOn:'Others see me', visOff:'Hidden',
@@ -775,7 +808,7 @@ const I18N = {
     onlyLocal:'This run exists locally only; open its folder.', linksExpired:'Links to the captures expired. Reload the page.', captured:'Captured', console:'Console', errors:'errors', blocked:'blocked requests', files:'Files',
     pagesWord:'pages', firstScreen:'first screen', layout:'Layout', uploadedBy:'Uploaded by', addNote:'Add a note', viewOptions:'View', keyComment:'comment on the step (in the detail)', keyHelp:'this help', helpTitle:'Shortcuts and help', flowComments:'Flow comments', runComments:'Run comments', commentsTitle:'Comments', allOpen:'Open', openWord:'open', flowCommentsLead:'For the whole flow across runs: a missing step, a general remark, an idea.', noStepComments:'No comments on this step yet.', noComments:'No comments yet.', showResolved:'Resolved', hideResolved:'Hide resolved', replyAct:'Reply', reopenAct:'Reopen', editAct:'Edit', deleteAct:'Delete', saveAct:'Save', cancel:'Cancel', edited:'edited', commentDeleted:'This comment was deleted.', viaAgent:'Written by an agent', showPin:'Show on the screenshot', pinOnShot:'Pin on the screenshot', pinClickShot:'Click on the screenshot', pinnedOnShot:'Pinned on the screenshot', replyPh:'Reply… (@name notifies)', flowPh:'Comment on the whole flow… (@name notifies)', runPh:'Comment on the whole run… (@name notifies)', commentLabel:'Comment', ctrlEnter:'Ctrl+Enter sends', confirmDelete:'Delete this comment?', deletedToast:'Deleted', openCommentsN:'Open comments', showAllN:'Show all %N%', screenWord:'app screen', uiTree:'UI tree', platformWord:'Platform', treeHint:'Click an element to show it on the screen.', treeSearch:'Search the UI tree…', treeOcr:'Text recognized from the screenshot (OCR): no roles or controls.', treeLoadFail:'The UI tree could not be loaded.', treeEmpty:'The tree is empty.', mapView:'Map', indexView:'Index', searchSteps:'Search steps, criteria and pages…', criteriaCol:'Criteria', notesCol:'Notes', noStepsMatch:'No step matches the filter.', riKeys:'/ search · ↑↓ select · Enter open · I map', consoleWord:'console errors', loadingPages:'also searching the pages of stacks…', sortTitle:'Title', runWord:'Run', openIndex:'Open index', pagesNeedAttention:'pages need attention', allPagesPass:'all pages pass', stackLoadFail:'The page index could not be loaded', semanticSample:'semantic sample', downloadCsv:'Download CSV', allWord:'All', criterionFilter:'Failing criterion', anyCriterion:'Any criterion', searchPages:'Search title, URL and fields…', sortBy:'Sort by', sortOrder:'Order', sortStatus:'Status (worst first)', sortDir:'Sort direction', pageWord:'Page', statusWord:'Status', failingCriteria:'Failing', stackKeys:'/ search · ↑↓ select · Enter open · Esc close', listView:'List', gridView:'Grid', noPagesMatch:'No page matches the filter.', backToIndex:'Back to index',
     subject:'Subject', from:'From', to:'To', received:'Received', mailBeforeRun:'arrived before the run started', noCapture:'No capture', viewEval:'eval.json', decision:'decision', mainLane:'Main path',
-    downloadZip:'Download ZIP', downloadZipNote:'Every file in open formats and the canvas, which opens offline from disk', filesWord:'files', publicAccess:'public link', orgAccess:'access after signing in to the organization', projectAll:'All projects', packNote:'Criterion from a check pack (packs in the scenario)', coverage:'Plan coverage', coverageLine:'criteria from ACCEPTANCE.md have a check', coverageExtra:'checks outside the plan', coverageFull:'Every planned criterion has a check.', coverageSteps:'Steps in the plan without a node', flakyTitle:'Flaky criteria', flaky:'flaky', flakyNote:'The verdict differs between runs on the same commit and environment.', people:'People in the flow', peopleHint:'Click a person to highlight their steps; dashed arrows are hand-offs between people.', awaiting:'Awaiting approval from', approvedBy:'approved by', approvedByAll:'Every required approver has approved.', publicRun:'Public run', publicNote:'The canvas is readable without sign-in; reviewer names are hidden.', makePublic:'Make public', makePrivate:'Make private', publicHint:'Only for scenarios without personal data', publicConfirm:'Make this run public? Anyone with the link can read it without signing in. Use it only for scenarios without personal data.', openInApp:'Open in Kaloko', signInLink:'Sign in', replay:'Replay', rpStep:'Step', rpNext:'Next', rpPrev:'Back', rpEnd:'End of the walkthrough.', rpRestart:'Start over', rpChoose:'Which way?', rpOr:'or', rpKeys:'← → step · digits pick a branch · Esc closes', rpDecision:'Decision', rpBranch:'branch', rpAltOnly:'other branch',
+    downloadZip:'Download ZIP', downloadZipNote:'Every file in open formats and the canvas, which opens offline from disk', filesWord:'files', publicAccess:'public link', orgAccess:'access after signing in to the organization', projectAll:'All projects', packNote:'Criterion from a check pack (packs in the scenario)', coverage:'Plan coverage', coverageLine:'criteria from ACCEPTANCE.md have a check', coverageExtra:'checks outside the plan', coverageFull:'Every planned criterion has a check.', coverageSteps:'Steps in the plan without a node', flakyTitle:'Flaky criteria', flaky:'flaky', flakyNote:'The verdict differs between runs on the same commit and environment.', people:'People in the flow', peopleHint:'Click a person to highlight their steps; dashed arrows are hand-offs between people.', awaiting:'Awaiting approval from', approvedBy:'approved by', approvedByAll:'Every required approver has approved.', viaToken:'by token', viaAgent:'by an agent', approvedByTokens:'by token or agent', publicRun:'Public run', publicNote:'The canvas is readable without sign-in; reviewer names are hidden.', makePublic:'Make public', makePrivate:'Make private', publicHint:'Only for scenarios without personal data', publicConfirm:'Make this run public? Anyone with the link can read it without signing in. Use it only for scenarios without personal data.', openInApp:'Open in Kaloko', signInLink:'Sign in', replay:'Replay', rpStep:'Step', rpNext:'Next', rpPrev:'Back', rpEnd:'End of the walkthrough.', rpRestart:'Start over', rpChoose:'Which way?', rpOr:'or', rpKeys:'← → step · digits pick a branch · Esc closes', rpDecision:'Decision', rpBranch:'branch', rpAltOnly:'other branch',
     compare:'Compare', cmpWith:'Compared with', cmpStop:'Stop comparing', cmpOff:'nothing', cmpBaseline:'baseline', cmpPrev:'previous', cmpTitle:'Differences from', cmpNone:'Statuses, verdicts and evidence are the same.', pxChanged:'pixels changed', cmpSide:'Side by side', cmpDiff:'Diff', cmpLoadErr:'Could not load the compared run.', pxUnavail:'Pixel diff works in the service only (same-origin images).', was:'was', thisRun:'this run', cmpNoCap:'no capture in the compared run', cmpAdded:'new steps', cmpRemoved:'steps that disappeared', cmpHint:'Ctrl/⌘ + click a step to open the comparison',
     reviewTitle:'Sign-off and comments', approve:'Approve', reject:'Reject', comment:'Comment', notePh:'What should change, or a note · @name notifies a colleague', approved:'approved', rejected:'rejected', commented:'comment', resolved:'resolved', resolve:'Resolve', openFeedback:'Open feedback', noFeedback:'No open feedback.', saved:'Saved', noteRequired:'Write what should change.', expires:'Expires' }
 };
@@ -926,6 +959,7 @@ function rerenderComments (all = false) {
   if (S.right) { const top = $('rside').scrollTop; renderReport(); $('rside').scrollTop = top; }
   if (S.open && !$('lb').hidden) { const side = $('lb').querySelector('.lb__side'); const top = side?.scrollTop || 0; openLb(S.open, S.lbVp, { keepFrame: true }); const s2 = $('lb').querySelector('.lb__side'); if (s2) s2.scrollTop = top; }
   if (S.rp && !$('rp').hidden) renderReplay();
+  if (RV.open) { const top = $('rvSide')?.scrollTop || 0; rvRender(); if ($('rvSide')) $('rvSide').scrollTop = top; if (all) rvLoad().then(() => { if (RV.open) rvRender(); }); }
   if (all && S.mode === 'index' && !S.st?.inline && $('riList')) riPaint();
 }
 // unsent text survives re-renders, navigation and reloads (per run or flow, step, and reply or edit)
@@ -1313,7 +1347,7 @@ function renderNodes () {
       ${n.session ? sessChip(n.session) : ''}<div class="node__head"><span class="kind">${ICON[n.kind]}</span><div class="node__t"><div class="node__title">${esc(loc(n.title))}</div><div class="node__path">${httpChip(n)}${esc(loc(n.path) || n.captures?.[S.loc]?.[d?.name]?.mail?.subject || '')}</div></div><span class="badge st-${s}">${MARK[s]} ${s === 'skip' ? '—' : `${ok}/${n.criteria.length}`}</span></div>
       <button class="shots ${S.vp === 'mobile' ? 'shots--mbig' : ''}" data-open="${esc(n.id)}" aria-label="${esc(loc(n.title))}">${S.vp !== 'mobile' && d ? shot(n, d, 256, 160) : ''}${S.vp !== 'desktop' && m ? shot(n, m, 74, 160) : ''}</button>
       ${jevBlock(n)}
-      <div class="node__foot">${attIcons(n)}${cmtBadge(n.id)}${sigBadge(n)}<span class="loc-dots">${RUN.scope.locales.map((l) => `<span class="st-${esc(n.by_locale?.[l] || 'skip')}" title="${esc(l)}: ${esc(T(n.by_locale?.[l] || 'skip'))}">${esc(l)}</span>`).join('')}</span>${S.cmp && cmpNode(n.id) ? `<span class="pxd" data-pxd="${esc(n.id)}" title="${esc(cmpLabel())}">◐ …</span>${cmpCritChanges(n).length ? `<span class="cmpd" title="${esc(T('cmpTitle'))} ${esc(cmpLabel())}">Δ ${cmpCritChanges(n).length}</span>` : ''}` : ''}${changed && !S.cmp ? `<span class="delta" title="${esc(pr.git?.commit || '')}">Δ ${esc(T(before).toLowerCase())} → ${esc(T(n.status).toLowerCase())}</span>` : ''}${reviewState(n.id) ? `<span class="badge st-${reviewState(n.id) === 'approved' ? 'pass' : 'fail'}" style="margin-left:${changed || S.cmp ? '4px' : 'auto'}">${reviewState(n.id) === 'approved' ? '✓ ' + T('approved') : '✕ ' + T('rejected')}</span>` : ''}</div>
+      <div class="node__foot">${attIcons(n)}${cmtBadge(n.id)}${sigBadge(n)}<span class="loc-dots">${RUN.scope.locales.map((l) => `<span class="st-${esc(n.by_locale?.[l] || 'skip')}" title="${esc(l)}: ${esc(T(n.by_locale?.[l] || 'skip'))}">${esc(l)}</span>`).join('')}</span>${S.cmp && cmpNode(n.id) ? `<span class="pxd" data-pxd="${esc(n.id)}" title="${esc(cmpLabel())}">◐ …</span>${cmpCritChanges(n).length ? `<span class="cmpd" title="${esc(T('cmpTitle'))} ${esc(cmpLabel())}">Δ ${cmpCritChanges(n).length}</span>` : ''}` : ''}${changed && !S.cmp ? `<span class="delta" title="${esc(pr.git?.commit || '')}">Δ ${esc(T(before).toLowerCase())} → ${esc(T(n.status).toLowerCase())}</span>` : ''}${reviewState(n.id) ? `<span class="badge st-${reviewState(n.id) === 'approved' ? 'pass' : 'fail'}" style="margin-left:${changed || S.cmp ? '4px' : 'auto'}">${reviewState(n.id) === 'approved' ? '✓ ' + T('approved') : '✕ ' + T('rejected')}</span>` : rvNodeBadge(n.id)}</div>
     </div>`;
   }).join('');
   const tallest = Math.max(0, ...[...$('nodes').querySelectorAll('.node:not(.node--decision)')].map((el) => el.offsetHeight));
@@ -1924,6 +1958,7 @@ function renderChrome () {
   document.querySelectorAll('[data-t]').forEach((el) => { el.textContent = T(el.dataset.t); });
   $('helpBtn').title = `${T('helpTitle')} (?)`; $('helpBtn').setAttribute('aria-label', T('helpTitle'));
   $('hint').innerHTML = `<ul>${T('hint').split(' · ').map((x) => `<li>${x}</li>`).join('')}<li><span class="kbd">C</span> ${esc(T('keyComment'))}</li><li><span class="kbd">?</span> ${esc(T('keyHelp'))}</li></ul>`;
+  $('hint').querySelector('ul')?.insertAdjacentHTML('beforeend', rvHintItem()); // review mode (Q)
   const ib = $('inboxBtn');
   if (app?.user) { ib.hidden = false; ib.href = `/${app.org}/inbox`; ib.innerHTML = `<svg class="i" viewBox="0 0 24 24"><path d="M6 16V11a6 6 0 0 1 12 0v5l1.5 2h-15z"/><path d="M10 20a2 2 0 0 0 4 0"/></svg>${app.unread ? `<b>${esc(app.unread)}</b>` : ''}`; ib.title = 'Inbox'; ib.setAttribute('aria-label', `Inbox${app.unread ? ` (${app.unread})` : ''}`); }
   else if (app && !app.embed) { ib.hidden = false; ib.href = '/login'; ib.textContent = T('signInLink'); }
@@ -2418,6 +2453,9 @@ function setHash (p) {
 }
 function applyHash () {
   const p = new URLSearchParams(location.hash.slice(1));
+  // review mode: #review (the first undecided step), #review=<step>, #review=end (the summary)
+  if (p.has('review')) { const t = p.get('review') || null; if (!RV.open || (t && t !== 'end' && rvCur()?.step !== t)) rvOpen(t); return; }
+  if (RV.open) { RV.open = false; $('rv').hidden = true; }
   if ((p.get('mode') === 'index') !== (S.mode === 'index') && p.has('mode')) { S.mode = p.get('mode') === 'index' ? 'index' : 'map'; applyMode(); }
   const cmp = p.get('cmp');
   if (cmp && cmp !== S.cmp?.id && cmp !== RUN.id) { loadCmp(cmp).then(() => { if (p.get('step') || p.get('replay')) applyHash(); }); return; }
@@ -2532,7 +2570,7 @@ function renderReport () {
   $('rside').innerHTML = `
    <div class="rside__head"><div style="flex:1;min-width:0"><div class="seg-label">${T('summary')}</div><h3>${RUN.issue ? `${RUN.issue.url ? `<a class="pr" href="${esc(RUN.issue.url)}" target="_blank" rel="noopener">${esc(RUN.issue.repo ? RUN.issue.repo + '#' : '#')}${esc(String(RUN.issue.number))}</a>` : '#' + esc(String(RUN.issue.number))} · ` : ''}${esc(RUN.scenario.title)}</h3><div class="node__path">${RUN.project ? esc(RUN.project.slug) + ' · ' : ''}${esc(RUN.scenario.id)} · ${fmtDate(RUN.started_at)} · ${esc(RUN.environment.name)} · ${dur()}</div></div><button class="icon-btn" id="rsClose" aria-label="${T('hide')}">${ICON.close}</button></div>
    ${APP() && isDraft() ? `<div class="sec"><h4>${T('draft')} #${esc(RUN.draft.seq)}</h4><p class="note">${T('draftInfo')}</p><div id="draftChanges" class="note"></div></div>` : ''}
-   ${APP() && !isDraft() ? `<div class="sec verdict-sec"><h4 class="vhead"><span>${isDesign() ? T('versionVerdict') : T('runVerdict')}</span><span class="badge st-${RUN.verdict?.verdict === 'accepted' ? 'pass' : RUN.verdict?.verdict === 'returned' ? 'fail' : 'skip'}">${T(RUN.verdict?.verdict || 'pending')}</span>${RUN.verdict?.baseline ? `<span class="badge st-partial">${T('baseline')}</span>` : ''}</h4>${RUN.verdict?.by || (RUN.baseline_id && RUN.baseline_id !== RUN.id) ? `<p class="note" style="margin:0 0 8px">${RUN.verdict?.by ? `${esc(RUN.verdict.by)} · ${fmtDate(RUN.verdict.at)}` : ''}${RUN.baseline_id && RUN.baseline_id !== RUN.id ? `${RUN.verdict?.by ? ' · ' : ''}<a class="pr" href="${runHref(RUN.baseline_id)}">${T('baseline')} →</a>` : ''}</p>` : ''}${RUN.verdict?.note ? `<p class="note">${esc(RUN.verdict.note)}</p>` : ''}${RUN.verdict?.approvers ? `<p class="note">${RUN.verdict.awaiting.length ? `${T('awaiting')}: <b>${RUN.verdict.awaiting.map(esc).join(', ')}</b>` : `${T('approvedByAll')}`}${RUN.verdict.approved_by.length ? ` · ${T('approvedBy')}: ${RUN.verdict.approved_by.map(esc).join(', ')}` : ''}</p>` : ''}
+   ${APP() && !isDraft() ? `<div class="sec verdict-sec"><h4 class="vhead"><span>${isDesign() ? T('versionVerdict') : T('runVerdict')}</span><span class="badge st-${RUN.verdict?.verdict === 'accepted' ? 'pass' : RUN.verdict?.verdict === 'returned' ? 'fail' : 'skip'}">${T(RUN.verdict?.verdict || 'pending')}</span>${RUN.verdict?.baseline ? `<span class="badge st-partial">${T('baseline')}</span>` : ''}</h4>${RUN.verdict?.by || (RUN.baseline_id && RUN.baseline_id !== RUN.id) ? `<p class="note" style="margin:0 0 8px">${RUN.verdict?.by ? `${esc(RUN.verdict.by)}${RUN.verdict.via === 'token' || RUN.verdict.via === 'agent' ? ` <span class="badge st-skip">${T(RUN.verdict.via === 'agent' ? 'viaAgent' : 'viaToken')}</span>` : ''} · ${fmtDate(RUN.verdict.at)}` : ''}${RUN.baseline_id && RUN.baseline_id !== RUN.id ? `${RUN.verdict?.by ? ' · ' : ''}<a class="pr" href="${runHref(RUN.baseline_id)}">${T('baseline')} →</a>` : ''}</p>` : ''}${RUN.verdict?.note ? `<p class="note">${esc(RUN.verdict.note)}</p>` : ''}${RUN.verdict?.approvers ? `<p class="note">${RUN.verdict.awaiting.length ? `${T('awaiting')}: <b>${RUN.verdict.awaiting.map(esc).join(', ')}</b>` : `${T('approvedByAll')}`}${RUN.verdict.approved_by.length ? ` · ${T('approvedBy')}: ${RUN.verdict.approved_by.map(esc).join(', ')}` : ''}${RUN.verdict.approved_by_tokens?.length ? ` · ${T('approvedBy')} ${T('approvedByTokens')}: ${RUN.verdict.approved_by_tokens.map((a) => esc(a.email)).join(', ')}` : ''}</p>` : ''}
      ${canWrite() ? `<textarea id="rvVerdictNote" hidden rows="2" placeholder="${T('verdictNotePh')}" style="width:100%;font:inherit;padding:8px;border:1px solid var(--line);border-radius:6px;background:var(--panel);color:var(--ink);margin:0 0 8px"></textarea>
      <div class="share__row"><button class="btn btn--primary" data-verdict="accepted">${isDesign() ? T('acceptVersion') : T('accept')}</button><button class="btn" data-verdict="returned">${isDesign() ? T('returnVersion') : T('ret')}</button></div>
      <div class="vmore"><button class="linkish" id="rvNoteShow">${T('addNote')}</button>${RUN.verdict?.verdict === 'accepted' && !isDesign() ? `<button class="linkish" data-baseline="${RUN.verdict.baseline ? 'unset' : 'set'}">${RUN.verdict.baseline ? T('unsetBaseline') : T('setBaseline')}</button>` : ''}${APP().user?.role === 'admin' ? `<button class="linkish" data-public="${RUN.public ? 'off' : 'on'}" title="${T('publicHint')}">${RUN.public ? T('makePrivate') : isDesign() ? T('makePublicVersion') : T('makePublic')}</button>` : ''}</div>` : ''}${RUN.public ? `<p class="note" style="margin:6px 0 0"><span class="badge st-partial">${T('publicRun')}</span> ${T('publicNote')}</p>` : ''}</div>` : ''}
@@ -2924,6 +2962,352 @@ addEventListener('resize', () => { if (!$('pt').hidden) fitPt(); });
 document.addEventListener('fullscreenchange', () => { const b = $('ptFull'); if (b) b.setAttribute('aria-pressed', String(!!document.fullscreenElement)); setTimeout(fitPt, 60); });
 
 /* ---------- boot ---------- */
+/* ---------- review mode (Kontrola): one step at a time from the queue of steps that need a person ----------
+   The queue comes from the service (GET …/runs/<id>/review-queue: order, reasons, decisions, approvals carried over
+   unchanged steps, the accepted run to compare with); a local preview or a public run builds a read-only queue from
+   the run itself. Keys: J/K (→/←) next and previous, A approve, R return with a note, C comment, V this run / side
+   by side / the accepted run, Esc leaves; on a phone a swipe and the buttons do the same. Kept apart from the
+   lightbox (its own overlay #rv and functions rv*), so both can change independently. */
+Object.assign(I18N.cs, {
+  rvTitle: 'Kontrola', rvBtnTitle: 'Kontrola: krok po kroku to, co čeká na člověka', rvDecided: 'rozhodnuto', rvCarriedN: 'převzato',
+  rvKeys: 'J K další a předchozí · A schválit · R vrátit · C komentář · V verze · Esc konec', rvExit: 'Ukončit kontrolu',
+  rvPrev: 'Předchozí', rvNext: 'Další', rvApprove: 'Schválit', rvReturn: 'Vrátit', rvReturnTitle: 'Co se má změnit?',
+  rvReturnPh: 'Napište, co je špatně a jak to má být. Autor běhu to uvidí hned.', rvReturnSend: 'Vrátit krok',
+  rvAccepted: 'přijatý běh', rvViewThis: 'Tento běh', rvViewSide: 'Vedle sebe', rvViewRef: 'Přijatý běh',
+  rvNoRef: 'V přijatém běhu tento snímek není.', rvRefLoading: 'Načítám přijatý běh…', rvLoading: 'Načítám, co čeká na kontrolu…',
+  rvR_fail: 'Selhalo', rvR_returned: 'Vráceno', rvR_needs_review: 'Čeká na posouzení', rvR_not_evaluated: 'Nevyhodnoceno', rvR_revoked: 'Převzetí zrušeno',
+  rvR_changed: 'Změna od přijatého běhu', rvR_new: 'Nový krok', rvR_comments: 'Otevřené komentáře', rvR_carried: 'Schválení převzato',
+  rvWaiting: 'Čeká na rozhodnutí', rvApprovedBy: 'Schváleno', rvReturnedBy: 'Vráceno',
+  rvCarriedStep: (run, by, at) => `Převzato z běhu ${run}, schválil(a) ${by} ${at}.`, rvCarriedRun: (run, by, at) => `Převzato z běhu ${run}, který ${by} přijal(a) ${at}.`,
+  rvCarriedWhy: 'Snímky i kritéria jsou stejné jako v přijatém běhu a automatické kontroly prošly.',
+  rvRevoke: 'Zrušit převzaté schválení', rvRevoked: 'Převzaté schválení je zrušené; krok čeká na kontrolu.',
+  rvUnconfirmed: 'Rozhodnutí agenta nebo tokenu; za rozhodnutí člověka se nepočítá', rvChangedIn: 'Změněné snímky', rvCritChanged: 'Kritéria se od přijatého běhu změnila.',
+  rvApprovedToast: 'Schváleno', rvReturnedToast: 'Vráceno autorovi běhu', rvReadOnly: 'Jen ke čtení', rvLocal: 'Rozhodovat se dá na kaloko.app, až se běh nasdílí.',
+  rvDone: 'Všechny kroky jsou rozhodnuté', rvLeft: (n) => `Na rozhodnutí ${n === 1 ? 'čeká 1 krok' : n < 5 ? `čekají ${n} kroky` : `čeká ${n} kroků`}`,
+  rvNothing: 'Nic nečeká na člověka: kroky prošly a od přijatého běhu se nezměnily.', rvSumApproved: 'schváleno', rvSumReturned: 'vráceno', rvSumClear: 'beze změny a bez připomínek',
+  rvCarriedTitle: 'Převzatá schválení', rvCarriedLead: 'Tyto kroky vypadají stejně jako v přijatém běhu a jejich automatické kontroly prošly. U každého je, kdo ho schválil.',
+  rvShow: 'Zobrazit', rvVerdictLead: 'Převzatá schválení se za přijetí běhu nepočítají: běh jako celek přijímá člověk.',
+  rvReturnedHint: 'Vrácené kroky uvidí autor běhu v inboxu a agent v kaloko feedback.', rvCarriedShort: 'převzato', rvToEnd: 'Souhrn', rvHint: 'kontrola krok po kroku', rvQueue: 'Kroky ke kontrole', rvRefFailed: 'Přijatý běh se nepodařilo načíst.', rvComparedWith: 'Porovnáno s přijatým během'
+})
+Object.assign(I18N.en, {
+  rvTitle: 'Review', rvBtnTitle: 'Review: one step at a time, what waits for a person', rvDecided: 'decided', rvCarriedN: 'carried over',
+  rvKeys: 'J K next and previous · A approve · R return · C comment · V version · Esc leave', rvExit: 'Leave review',
+  rvPrev: 'Previous', rvNext: 'Next', rvApprove: 'Approve', rvReturn: 'Return', rvReturnTitle: 'What should change?',
+  rvReturnPh: 'Say what is wrong and how it should be. The author of the run sees it right away.', rvReturnSend: 'Return the step',
+  rvAccepted: 'accepted run', rvViewThis: 'This run', rvViewSide: 'Side by side', rvViewRef: 'Accepted run',
+  rvNoRef: 'The accepted run has no such screenshot.', rvRefLoading: 'Loading the accepted run…', rvLoading: 'Loading what waits for review…',
+  rvR_fail: 'Failed', rvR_returned: 'Returned', rvR_needs_review: 'Needs a person’s judgement', rvR_not_evaluated: 'Not evaluated', rvR_revoked: 'Carried approval revoked',
+  rvR_changed: 'Changed since the accepted run', rvR_new: 'New step', rvR_comments: 'Open comments', rvR_carried: 'Approval carried over',
+  rvWaiting: 'Waiting for a decision', rvApprovedBy: 'Approved', rvReturnedBy: 'Returned',
+  rvCarriedStep: (run, by, at) => `Carried over from run ${run}: approved by ${by} on ${at}.`, rvCarriedRun: (run, by, at) => `Carried over from run ${run}, which ${by} accepted on ${at}.`,
+  rvCarriedWhy: 'The screenshots and criteria are the same as in the accepted run and the automatic checks passed.',
+  rvRevoke: 'Revoke the carried approval', rvRevoked: 'Carried approval revoked; the step waits for review.',
+  rvUnconfirmed: 'An agent’s or token’s decision; it does not count as a person’s', rvChangedIn: 'Changed screenshots', rvCritChanged: 'The criteria changed since the accepted run.',
+  rvApprovedToast: 'Approved', rvReturnedToast: 'Returned to the author of the run', rvReadOnly: 'Read only', rvLocal: 'Decisions are made on kaloko.app once the run is shared.',
+  rvDone: 'Every step is decided', rvLeft: (n) => `${n} step${n === 1 ? '' : 's'} still wait${n === 1 ? 's' : ''} for a decision`,
+  rvNothing: 'Nothing waits for a person: the steps passed and did not change since the accepted run.', rvSumApproved: 'approved', rvSumReturned: 'returned', rvSumClear: 'unchanged, nothing to look at',
+  rvCarriedTitle: 'Carried-over approvals', rvCarriedLead: 'These steps look the same as in the accepted run and their automatic checks passed. Each says who approved it.',
+  rvShow: 'Show', rvVerdictLead: 'Carried approvals do not count as accepting the run: a person accepts the run as a whole.',
+  rvReturnedHint: 'The author of the run sees returned steps in the inbox, the agent in kaloko feedback.', rvCarriedShort: 'carried over', rvToEnd: 'Summary', rvHint: 'review step by step', rvQueue: 'Steps to review', rvRefFailed: 'The accepted run could not be loaded.', rvComparedWith: 'Compared with the accepted run'
+})
+const RV = { open: false, data: null, idx: 0, view: null, vp: null, refBase: {}, ret: false, busy: false, extra: [] };
+const rvService = () => !!(APP()?.user && APP()?.run && !isDraft());
+const rvWritable = () => rvService() && canWrite();
+const rvItems = () => [...(RV.data?.items || []), ...RV.extra];
+const rvCur = () => rvItems()[RV.idx] || null;
+const RV_GROUP = { fail: 0, returned: 0, needs_review: 1, not_evaluated: 1, revoked: 1, changed: 2, new: 2, comments: 3 };
+const rvDay = (iso) => (iso ? fmtDate(iso).replace(/ \d{2}:\d{2}$/, '') : '');
+const rvOpenCrit = (c) => Object.values(c.by_locale || {}).some((vps) => Object.values(vps || {}).some((r) => ['needs_review', 'not_evaluated'].includes(r?.verdict)));
+
+/** A read-only queue from the run itself (local preview, export, public run): no carry-over, no comparison. */
+function rvLocalQueue () {
+  const items = []; let clear = 0;
+  flowOrder().forEach((n, position) => {
+    const vs = (n.criteria || []).map((c) => c.verdict).filter(Boolean);
+    const reasons = [];
+    if (n.status === 'fail' || vs.includes('fail')) reasons.push('fail');
+    if (vs.includes('needs_review')) reasons.push('needs_review');
+    if (vs.includes('not_evaluated')) reasons.push('not_evaluated');
+    const st = reviewState(n.id);
+    if (st === 'rejected') reasons.unshift('returned');
+    const k = APP() ? stepOpenCount(n.id) : 0;
+    if (k) reasons.push('comments');
+    if (!reasons.length) { clear++; return; }
+    items.push({ step: n.id, title: n.title, reasons, position, open_comments: k, decision: st ? { state: st === 'approved' ? 'approved' : 'returned' } : null, changed: null, ref_captures: null });
+  });
+  const g = (it) => Math.min(...it.reasons.map((r) => RV_GROUP[r] ?? 4));
+  items.sort((a, b) => g(a) - g(b) || a.position - b.position);
+  const decided = items.filter((it) => it.decision).length;
+  return { local: true, run: { id: RUN.id }, reference: null, policy: { carry_over: false }, counts: { steps: screens().length, queue: items.length, decided, pending: items.length - decided, carried: 0, clear }, items, carried: [], verdict: RUN.verdict || null };
+}
+
+async function rvLoad () {
+  if (!rvService()) { RV.data = rvLocalQueue(); rvButton(); return RV.data; }
+  const a = APP();
+  const had = (RV.data?.carried || []).length;
+  try {
+    const res = await fetch(`${a.api}/orgs/${a.org}/runs/${a.run}/review-queue`, { credentials: 'same-origin' });
+    if (!res.ok) throw new Error((await res.json().catch(() => ({}))).error || `HTTP ${res.status}`);
+    RV.data = await res.json();
+  } catch (e) { if (!RV.data) RV.data = rvLocalQueue(); }
+  rvButton();
+  if ((RV.data.carried || []).length || had) renderNodes(); // the carried-over badges on the canvas
+  return RV.data;
+}
+function rvButton () {
+  const b = $('rvBtn'); if (!b) return;
+  const n = RV.data?.counts?.pending || 0;
+  b.title = `${T('rvBtnTitle')} (Q)`;
+  b.querySelector('.rv-count')?.remove();
+  if (n) b.insertAdjacentHTML('beforeend', `<b class="rv-count" aria-label="${esc(T('rvLeft')(n))}">${n}</b>`);
+}
+/** The canvas card of a step whose approval carried over from the accepted run. */
+function rvNodeBadge (id) {
+  const c = (RV.data?.carried || []).find((x) => x.step === id); if (!c) return '';
+  const why = (c.kind === 'run' ? T('rvCarriedRun') : T('rvCarriedStep'))(c.from_run, c.approved_by, rvDay(c.approved_at));
+  return `<span class="badge st-pass rv-carry" title="${esc(why)}">✓ ${esc(T('rvCarriedShort'))}</span>`;
+}
+const rvHintItem = () => `<li><span class="kbd">Q</span> ${esc(T('rvHint'))}</li>`;
+/** An item for a step outside the queue (a carried or clear step opened from the summary or a link). */
+function rvExtraFor (step) {
+  const n = byId(step); if (!n || n.kind === 'decision') return null;
+  const c = (RV.data?.carried || []).find((x) => x.step === step);
+  return { step, title: n.title, reasons: c ? ['carried'] : [], extra: true, decision: c ? { state: 'carried', by: c.approved_by, via: c.approved_via, at: c.approved_at, from_run: c.from_run } : null, carried: c || null, ref_captures: null };
+}
+
+async function rvOpen (target = null) {
+  if (!RUN) return;
+  if (!$('lb').hidden) closeLb();
+  if (S.rp) rpClose();
+  if (!$('br').hidden) closeBrowser();
+  RV.open = true; $('rv').hidden = false;
+  if (!RV.data) { $('rv').innerHTML = `<p class="rvm__loading">${esc(T('rvLoading'))}</p>`; await rvLoad(); }
+  if (!RV.open) return;
+  let items = rvItems();
+  if (target === 'end') RV.idx = items.length;
+  else if (target && target !== '1') {
+    let k = items.findIndex((it) => it.step === target);
+    if (k < 0) { const x = rvExtraFor(target); if (x) { RV.extra.push(x); items = rvItems(); k = items.length - 1; } }
+    RV.idx = k >= 0 ? k : 0;
+  } else { const k = items.findIndex((it) => !it.decision); RV.idx = k >= 0 ? k : items.length; }
+  rvRender();
+  $('rvClose')?.focus({ preventScroll: true });
+}
+function rvClose () {
+  RV.open = false; RV.ret = false; RV.extra = [];
+  $('rv').hidden = true; $('rv').innerHTML = '';
+  setHash(null);
+  $('rvBtn')?.focus({ preventScroll: true });
+}
+function rvGo (d) {
+  const n = rvItems().length;
+  const k = Math.max(0, Math.min(n, RV.idx + d));
+  if (k === RV.idx) return;
+  RV.idx = k; RV.ret = false; rvRender();
+}
+/** The accepted run's files: a signed base like compare uses, loaded once per run. */
+function rvRefBase (id) {
+  if (id in RV.refBase) return RV.refBase[id];
+  RV.refBase[id] = undefined;
+  cmpBase(id).then((b) => { RV.refBase[id] = b; }).catch(() => { RV.refBase[id] = null; }).then(() => { if (RV.open) rvRender(); });
+  return undefined;
+}
+const rvRefSrc = (base, p) => base && typeof p === 'string' && /^(steps|attachments)\/[A-Za-z0-9._\/-]+\.(png|jpe?g|webp)$/.test(p) && !p.includes('..') ? base + p : null;
+
+function rvDecisionHtml (it) {
+  const d = it.decision;
+  const via = (x) => x?.via === 'agent' || x?.via === 'token' ? ` <span class="badge st-skip">${T(x.via === 'agent' ? 'viaAgent' : 'viaToken')}</span>` : '';
+  let h;
+  if (!d) h = `<p><span class="badge st-skip">○ ${esc(T('rvWaiting'))}</span></p>`;
+  else if (d.state === 'carried') {
+    const c = it.carried || { kind: 'step', from_run: d.from_run, approved_by: d.by, approved_at: d.at };
+    h = `<p><span class="badge st-pass">✓ ${esc(T('rvR_carried'))}</span>${via(d)}</p><p class="note">${esc((c.kind === 'run' ? T('rvCarriedRun') : T('rvCarriedStep'))(c.from_run, c.approved_by, rvDay(c.approved_at)))} ${esc(T('rvCarriedWhy'))}</p>${rvWritable() ? `<p><button class="linkish" id="rvRevoke">${esc(T('rvRevoke'))}</button></p>` : ''}`;
+  } else h = `<p><span class="badge st-${d.state === 'approved' ? 'pass' : 'fail'}">${d.state === 'approved' ? '✓' : '↩'} ${esc(T(d.state === 'approved' ? 'rvApprovedBy' : 'rvReturnedBy'))}</span>${via(d)} <span class="note">${esc([d.by, rvDay(d.at)].filter(Boolean).join(' · '))}</span></p>${d.note ? `<p class="note">${noteHtml(d.note)}</p>` : ''}`;
+  if (it.unconfirmed) h += `<p class="note">${esc(T('rvUnconfirmed'))}: ${esc(it.unconfirmed.state === 'approved' ? T('rvApprovedBy') : T('rvReturnedBy'))} · ${esc(it.unconfirmed.by || '')}${it.unconfirmed.agent ? ` (${esc(it.unconfirmed.agent)})` : ''}</p>`;
+  return `<div class="sec rvm__dec">${h}</div>`;
+}
+
+function rvRender () {
+  const box = $('rv'); if (!box || !RV.data) return;
+  const d = RV.data, items = rvItems(), total = d.items.length, c = d.counts || {};
+  const top = `<div class="rvm__top"><span class="brand">Kaloko <small>${esc(T('rvTitle'))}</small></span>
+    <span class="rvm__prog" role="status" aria-live="polite"><b>${esc(c.decided || 0)}</b> ${esc(T('of'))} ${esc(total)} ${esc(T('rvDecided'))}</span><span class="rvm__bar" aria-hidden="true"><i style="width:${total ? Math.round((c.decided || 0) / total * 100) : 100}%"></i></span>
+    ${c.carried ? `<span class="badge st-pass" title="${esc(T('rvCarriedLead'))}">✓ ${esc(c.carried)} ${esc(T('rvCarriedN'))}</span>` : ''}<span class="spacer"></span>
+    <div class="seg" id="rvLoc"></div><div class="seg" id="rvVp"></div><div class="seg" id="rvView"></div><span class="note rvm__keys">${esc(T('rvKeys'))}</span>
+    <button class="icon-btn" id="rvClose" aria-label="${esc(T('rvExit'))}" title="${esc(T('rvExit'))} (Esc)">${ICON.close}</button></div>`;
+  const it = items[RV.idx];
+  if (!it) { box.innerHTML = top + `<div class="rvm__wrap">${rvEndHtml()}</div>${rvFootHtml(null)}`; rvWire(null); setHash({ review: 'end' }); return; }
+  const n = byId(it.step);
+  if (!n) { RV.idx = Math.min(RV.idx + 1, items.length); return rvRender(); }
+  const vps = viewports().filter((x) => n.captures?.[S.loc]?.[x.name]);
+  if (!RV.vp || !vps.some((x) => x.name === RV.vp)) RV.vp = (vps.find((x) => x.name === (S.vp === 'mobile' ? mVp() : dVp())?.name) || vps[0] || viewports()[0]).name;
+  const v = viewports().find((x) => x.name === RV.vp) || viewports()[0];
+  const cap = n.captures?.[S.loc]?.[v.name];
+  const ref = d.reference; const refPath = it.ref_captures?.[S.loc]?.[v.name] || null;
+  const base = ref && refPath ? rvRefBase(ref.id) : null;
+  const refSrc = rvRefSrc(base, refPath);
+  const view = refPath ? (RV.view || (it.reasons.includes('changed') && !lbPhone() ? 'side' : 'this')) : 'this';
+  const shotHtml = n.kind === 'stack'
+    ? `<div class="rp__decision"><div class="seg-label">${ICON.stack} ${esc(n.stack?.count || 0)} ${T('pagesWord')}</div><div class="stack-fan" style="max-width:520px;height:220px;margin:12px auto">${(n.stack?.sample || []).slice(0, 3).map((x) => x.thumb ? `<img src="${esc(asset(x.thumb))}" alt="" style="height:180px">` : '<span class="ph" style="height:180px"></span>').join('')}</div><button class="btn btn--primary" id="rvStack">${T('openIndex')}</button></div>`
+    : cap ? frameImg(cap, v, `<img src="${esc(asset(cap.image || cap.png))}" alt="${esc(loc(n.title))}">`, 'rvImg') : `<p class="lb__empty">${T('notReached')}</p>`;
+  const refHtml = refSrc ? `<div class="lb__img ${v.mobile ? 'lb__img--m' : ''}" style="max-width:${v.mobile ? v.w + 16 : v.w}px"><img src="${esc(refSrc)}" alt="${esc(T('rvAccepted'))}"></div>` : `<p class="note">${esc(base === null ? T('rvRefFailed') : T('rvRefLoading'))}</p>`;
+  const refCap = ref ? `<b>${esc(T('rvViewRef'))}</b> ${fmtDate(ref.started_at)}${ref.accepted_by ? ` · ${esc(ref.accepted_by)}` : ''}` : '';
+  const stage = view === 'side' ? `<div class="lb__cmp"><figure><figcaption><b>${esc(T('rvViewThis'))}</b> ${fmtDate(RUN.started_at)}</figcaption>${shotHtml}</figure><figure><figcaption>${refCap}</figcaption>${refHtml}</figure></div>`
+    : view === 'ref' ? `<div class="lb__cmp" style="grid-template-columns:1fr"><figure><figcaption>${refCap}</figcaption>${refHtml}</figure></div>` : shotHtml;
+  const s = nodeSt(n);
+  const chips = it.reasons.map((r) => `<span class="badge st-${['fail', 'returned'].includes(r) ? 'fail' : ['needs_review', 'not_evaluated', 'revoked', 'changed'].includes(r) ? 'partial' : r === 'carried' ? 'pass' : 'skip'}">${esc(T('rvR_' + r))}</span>`).join('');
+  const changed = it.changed ? `<div class="sec"><h4>${esc(T('rvChangedIn'))}</h4><p class="note">${(it.changed.captures || []).map((x) => `${esc(x.locale)}/${esc(x.viewport)}`).join(', ') || '—'}${it.changed.criteria ? `<br>${esc(T('rvCritChanged'))}` : ''}</p></div>` : '';
+  const crit = n.kind === 'decision' ? '' : `<div class="sec"><h4>${T('criteria')} ${n.kind === 'stack' ? '' : critCounts(n, v)}</h4><ul class="ac">${(n.kind === 'stack' ? n.criteria : critOrder(n, v)).map((x) => { const r = x.by_locale?.[S.loc]?.[v.name] || {}; const st = n.kind === 'stack' ? critSt(x) : VSTAT[r.verdict || 'not_reached']; const ev = r.evidence || r.note || ''; return `<li class="st-${st}"><span class="mark">${MARK[st]}</span><span><span class="id">${esc(x.id)}</span>${esc(critText(x))}${r.score != null ? ` <span class="id">${esc(Number(r.score).toFixed(2))}</span>` : ''}</span>${ev ? (humanEvidence(ev) ? `<span class="ev ev--text">${esc(humanEvidence(ev))}</span>` : `<code class="ev">${esc(ev)}</code>`) : ''}</li>`; }).join('') || `<li class="st-pass"><span class="mark">–</span><span>—</span></li>`}</ul></div>`;
+  const retBox = RV.ret && rvWritable() ? `<div class="sec rvm__ret"><h4><label for="rvRetNote">${esc(T('rvReturnTitle'))}</label></h4><textarea id="rvRetNote" rows="3" placeholder="${esc(T('rvReturnPh'))}">${esc(loadDraft(draftKey('step', n.id, 'return')))}</textarea><div class="share__row" style="margin-top:6px"><button class="btn btn--primary" id="rvRetSend">${esc(T('rvReturnSend'))}</button><button class="btn" id="rvRetCancel">${esc(T('cancel'))}</button><span class="note">${T('ctrlEnter')}</span></div></div>` : '';
+  box.innerHTML = top + `<div class="rvm__body"><div class="rvm__stage" id="rvStage">${stage}</div>
+    <aside class="rvm__side" id="rvSide"><div class="lb__head"><div class="lb__row"><span class="kind">${ICON[n.kind] || ''}</span><span class="badge st-${s}">${MARK[s]} ${T(s)}</span><span class="note">${esc(RV.idx + 1)} / ${esc(items.length)}</span></div>
+      <h3 id="rvStepTitle">${esc(loc(n.title))}</h3><div class="node__path">${esc(cap?.url || loc(n.path) || '')}</div><div class="rvm__why">${chips}</div></div>
+      ${retBox}${rvDecisionHtml(it)}${changed}${n.purpose ? `<div class="sec"><h4>${T('purpose')}</h4><p class="purpose">${esc(n.purpose)}</p></div>` : ''}${crit}
+      ${n.kind !== 'stack' ? commentsBlock({ scope: 'step', nodeId: n.id, compact: true }) : ''}</aside></div>${rvFootHtml(it)}`;
+  rvWire(it, n, v);
+  setHash({ review: it.step });
+}
+function rvFootHtml (it) {
+  const items = rvItems();
+  const act = it && rvWritable() ? `<button class="btn" id="rvRet">${esc(T('rvReturn'))} <span class="kbd">R</span></button><button class="btn" id="rvCmt">${ICON.comment} ${esc(T('comment'))} <span class="kbd">C</span></button><button class="btn btn--primary" id="rvOk">${esc(T('rvApprove'))} <span class="kbd">A</span></button>`
+    : it ? `<span class="note">${esc(T(rvService() ? 'rvReadOnly' : 'rvLocal'))}</span>` : '';
+  return `<div class="rvm__foot"><button class="btn" id="rvPrev" ${RV.idx <= 0 ? 'disabled' : ''}>${ICON.prev} ${esc(T('rvPrev'))} <span class="kbd">K</span></button><span class="spacer"></span>${act}${RV.idx < items.length ? `<button class="btn" id="rvNext">${esc(RV.idx === items.length - 1 ? T('rvToEnd') : T('rvNext'))} ${ICON.next} <span class="kbd">J</span></button>` : ''}</div>`;
+}
+function rvEndHtml () {
+  const d = RV.data, c = d.counts || {}, items = d.items || [];
+  const approved = items.filter((it) => it.decision?.state === 'approved' || it.decision?.state === 'carried').length;
+  const returned = items.filter((it) => it.decision?.state === 'returned').length;
+  const head = !items.length ? T('rvNothing') : c.pending ? T('rvLeft')(c.pending) : T('rvDone');
+  const sum = [`${approved} ${T('rvSumApproved')}`, `${returned} ${T('rvSumReturned')}`, c.carried ? `${c.carried} ${T('rvCarriedN')}` : '', c.clear ? `${c.clear} ${T('rvSumClear')}` : ''].filter(Boolean).join(' · ');
+  const list = items.length ? `<div class="sec"><h4>${esc(T('rvQueue'))}</h4><ul class="rvm__list">${items.map((it, k) => `<li><span class="badge st-${!it.decision ? 'skip' : it.decision.state === 'returned' ? 'fail' : 'pass'}">${!it.decision ? '○' : it.decision.state === 'returned' ? '↩' : '✓'}</span><button class="linkish" data-rv-go="${k}">${esc(loc(byId(it.step)?.title) || it.step)}</button><span class="note">${it.reasons.map((r) => esc(T('rvR_' + r))).join(', ')}</span></li>`).join('')}</ul></div>` : '';
+  const carried = (d.carried || []).length ? `<div class="sec"><h4>${esc(T('rvCarriedTitle'))}</h4><p class="note">${esc(T('rvCarriedLead'))}</p><ul class="rvm__list">${d.carried.map((x) => `<li><span class="badge st-pass">✓</span><button class="linkish" data-rv-show="${esc(x.step)}">${esc(loc(byId(x.step)?.title) || x.step)}</button><span class="note">${esc((x.kind === 'run' ? T('rvCarriedRun') : T('rvCarriedStep'))(x.from_run, x.approved_by, rvDay(x.approved_at)))}</span>${rvWritable() ? `<button class="linkish" data-rv-revoke="${esc(x.step)}">${esc(T('rvRevoke'))}</button>` : ''}</li>`).join('')}</ul></div>` : '';
+  const v = RUN.verdict || d.verdict || {};
+  const verdict = rvWritable() ? `<div class="sec verdict-sec"><h4 class="vhead"><span>${T('runVerdict')}</span><span class="badge st-${v.verdict === 'accepted' ? 'pass' : v.verdict === 'returned' ? 'fail' : 'skip'}">${T(v.verdict || 'pending')}</span></h4><p class="note">${esc(T('rvVerdictLead'))}${returned ? ` ${esc(T('rvReturnedHint'))}` : ''}</p>${v.approvers ? `<p class="note">${v.awaiting?.length ? `${T('awaiting')}: <b>${v.awaiting.map(esc).join(', ')}</b>` : T('approvedByAll')}</p>` : ''}
+    <textarea id="rvVNote" rows="2" placeholder="${esc(T('verdictNotePh'))}" style="width:100%;font:inherit;padding:8px;border:1px solid var(--line);border-radius:6px;background:var(--panel);color:var(--ink);margin:0 0 8px"></textarea>
+    <div class="share__row"><button class="btn btn--primary" data-rv-verdict="accepted">${T('accept')}</button><button class="btn" data-rv-verdict="returned">${T('ret')}</button></div></div>` : '';
+  return `<div class="rvm__end"><h3>${esc(head)}</h3><p class="note">${esc(sum)}</p>${d.reference ? `<p class="note">${esc(T('rvComparedWith'))}: <a class="pr" href="${runHref(d.reference.id)}">${fmtDate(d.reference.started_at)}${d.reference.accepted_by ? ` · ${esc(d.reference.accepted_by)}` : ''}</a></p>` : ''}${list}${carried}${verdict}</div>`;
+}
+function rvWire (it, n, v) {
+  const box = $('rv');
+  seg($('rvLoc'), RUN.scope.locales.map((l) => [l, l]), S.loc, (l) => { S.loc = l; renderAll(); rvRender(); });
+  $('rvLoc').hidden = RUN.scope.locales.length < 2;
+  if (n && n.kind !== 'stack') { const vps = viewports().filter((x) => n.captures?.[S.loc]?.[x.name]); seg($('rvVp'), vps.map((x) => [x.name, vpLabel(x)]), RV.vp, (nv) => { RV.vp = nv; rvRender(); }); $('rvVp').hidden = vps.length < 2; } else $('rvVp').hidden = true;
+  const hasRef = !!(it && it.ref_captures?.[S.loc]?.[RV.vp]);
+  if (hasRef) seg($('rvView'), [['this', T('rvViewThis')], ['side', T('rvViewSide')], ['ref', T('rvViewRef')]], RV.view || (it.reasons.includes('changed') && !lbPhone() ? 'side' : 'this'), (m) => { RV.view = m; rvRender(); });
+  $('rvView').hidden = !hasRef;
+  $('rvClose').onclick = rvClose;
+  $('rvPrev').onclick = () => rvGo(-1);
+  if ($('rvNext')) $('rvNext').onclick = () => rvGo(1);
+  if ($('rvOk')) $('rvOk').onclick = rvApprove;
+  if ($('rvRet')) $('rvRet').onclick = rvReturn;
+  if ($('rvCmt')) $('rvCmt').onclick = rvComment;
+  if ($('rvRevoke')) $('rvRevoke').onclick = () => rvRevoke(it.step);
+  if ($('rvStack')) $('rvStack').onclick = () => { const id = it.step; rvClose(); openStack(id); };
+  if ($('rvRetSend')) {
+    const t = $('rvRetNote'), k = draftKey('step', it.step, 'return');
+    t.addEventListener('input', () => saveDraft(k, t.value));
+    t.addEventListener('keydown', (e) => { if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') { e.preventDefault(); rvReturnSend(); } });
+    $('rvRetSend').onclick = rvReturnSend;
+    $('rvRetCancel').onclick = () => { RV.ret = false; rvRender(); };
+  }
+  box.querySelectorAll('[data-rv-go]').forEach((b) => { b.onclick = () => { RV.idx = Number(b.dataset.rvGo); rvRender(); }; });
+  box.querySelectorAll('[data-rv-show]').forEach((b) => { b.onclick = () => rvOpen(b.dataset.rvShow); });
+  box.querySelectorAll('[data-rv-revoke]').forEach((b) => { b.onclick = () => rvRevoke(b.dataset.rvRevoke); });
+  box.querySelectorAll('[data-rv-verdict]').forEach((b) => { b.onclick = () => rvVerdict(b.dataset.rvVerdict, b); });
+  if (!box.dataset.rvWired) {
+    box.dataset.rvWired = '1';
+    wireComments(box);
+    // a phone: a swipe sideways on the screenshot moves to the next or previous step (not when it pans or zooms)
+    let sw = null;
+    box.addEventListener('touchstart', (e) => { sw = e.touches.length === 1 && e.target.closest('#rvStage') ? { x: e.touches[0].clientX, y: e.touches[0].clientY, t: Date.now() } : null; }, { passive: true });
+    box.addEventListener('touchend', (e) => {
+      const s0 = sw; sw = null; if (!s0) return;
+      const t = e.changedTouches[0], dx = t.clientX - s0.x, dy = t.clientY - s0.y, sc = $('rvStage');
+      if ((window.visualViewport?.scale || 1) > 1.05 || Math.abs(dx) < 60 || Math.abs(dx) < Math.abs(dy) * 1.5 || Date.now() - s0.t > 900) return;
+      if (sc && sc.scrollWidth > sc.clientWidth + 2) return;
+      rvGo(dx < 0 ? 1 : -1);
+    }, { passive: true });
+  }
+  if (RV.ret) requestAnimationFrame(() => $('rvRetNote')?.focus());
+  $('rvStage')?.scrollTo?.(0, 0);
+}
+function rvKey (e) {
+  const k = e.key;
+  if (k === 'Escape') { e.preventDefault(); if (RV.ret) { RV.ret = false; rvRender(); } else rvClose(); return; }
+  if (k === 'j' || k === 'J' || k === 'ArrowRight') { e.preventDefault(); rvGo(1); return; }
+  if (k === 'k' || k === 'K' || k === 'ArrowLeft') { e.preventDefault(); rvGo(-1); return; }
+  if (!rvCur()) return;
+  if (k === 'a' || k === 'A') { e.preventDefault(); rvApprove(); }
+  else if (k === 'r' || k === 'R') { e.preventDefault(); rvReturn(); }
+  else if (k === 'c' || k === 'C') { e.preventDefault(); rvComment(); }
+  else if ((k === 'v' || k === 'V') && $('rvView') && !$('rvView').hidden) { e.preventDefault(); const order = ['this', 'side', 'ref']; const cur = $('rvView').querySelector('[aria-pressed="true"]')?.dataset.v || 'this'; RV.view = order[(order.indexOf(cur) + 1) % 3]; rvRender(); }
+}
+/** After a decision: the queue and the run again, then the next step nobody decided yet. */
+async function rvAfter (step) {
+  await Promise.all([reloadRun().catch(() => {}), rvLoad()]);
+  if (!RV.open) return;
+  const items = rvItems(); const at = items.findIndex((it) => it.step === step);
+  const next = items.findIndex((it, k) => k > at && !it.decision);
+  const first = items.findIndex((it) => !it.decision);
+  RV.idx = next >= 0 ? next : first >= 0 ? first : items.length;
+  RV.ret = false; rvRender();
+}
+async function rvApprove () {
+  const it = rvCur(); if (!it || !rvWritable() || RV.busy) return;
+  const n = byId(it.step); if (!n) return;
+  RV.busy = true; const b = $('rvOk'); if (b) b.disabled = true;
+  try {
+    // the person's look answers what the evaluator could not decide: open criteria pass, then the step is approved
+    if (n.kind !== 'stack') for (const c of (n.criteria || []).filter((x) => x.type !== 'deterministic' && rvOpenCrit(x))) await postJson('/criteria', { node_id: n.id, criterion_id: c.id, verdict: 'pass', note: '' });
+    await cApi('step', '', 'POST', { node_id: n.id, status: 'approved', note: '' });
+    toast(T('rvApprovedToast'));
+    await rvAfter(it.step);
+  } catch (e) { toast(e.message); if (b) b.disabled = false; } finally { RV.busy = false; }
+}
+function rvReturn () { if (!rvCur() || !rvWritable()) return; RV.ret = true; rvRender(); }
+async function rvReturnSend () {
+  const it = rvCur(); const t = $('rvRetNote'); if (!it || !t || RV.busy) return;
+  const note = t.value.trim();
+  if (!note) { toast(T('noteRequired')); t.focus(); return; }
+  RV.busy = true; $('rvRetSend').disabled = true;
+  try {
+    await cApi('step', '', 'POST', { node_id: it.step, status: 'rejected', note, locale: S.loc, viewport: RV.vp || null });
+    saveDraft(draftKey('step', it.step, 'return'), '');
+    toast(T('rvReturnedToast'));
+    await rvAfter(it.step);
+  } catch (e) { toast(e.message); $('rvRetSend') && ($('rvRetSend').disabled = false); } finally { RV.busy = false; }
+}
+function rvComment () {
+  const t = $('rv').querySelector('.c-main .c-text'); if (!t) return;
+  if (lbPhone()) t.scrollIntoView({ behavior: 'smooth', block: 'center' });
+  t.focus({ preventScroll: !lbPhone() });
+}
+async function rvRevoke (step) {
+  if (!rvWritable() || RV.busy) return;
+  RV.busy = true;
+  try {
+    await postJson(`/carried/${encodeURIComponent(step)}/revoke`, {});
+    toast(T('rvRevoked'));
+    RV.extra = RV.extra.filter((x) => x.step !== step);
+    await rvLoad();
+    const k = rvItems().findIndex((it) => it.step === step);
+    if (k >= 0) RV.idx = k;
+    rvRender();
+  } catch (e) { toast(e.message); } finally { RV.busy = false; }
+}
+async function rvVerdict (verdict, b) {
+  const note = $('rvVNote')?.value.trim() || '';
+  if (verdict === 'returned' && !note) { toast(T('noteRequired')); $('rvVNote')?.focus(); return; }
+  b.disabled = true;
+  try { await postJson('/verdict', { verdict, note }); toast(T('saved')); await reloadRun(); await rvLoad(); rvRender(); } catch (e) { toast(e.message); b.disabled = false; }
+}
+/** Starts review mode support once the run is on screen: the button, its count and the hash. */
+function rvInit () {
+  $('rvBtn').onclick = () => rvOpen(null);
+  // the count on the button and the carried-over badges follow the first paint
+  if (rvService()) setTimeout(() => { rvLoad(); }, 0); else { RV.data = rvLocalQueue(); rvButton(); }
+}
+
 let tt; function toast (msg) { const el = $('toast'); el.textContent = msg; el.hidden = false; clearTimeout(tt); tt = setTimeout(() => { el.hidden = true; }, 2600); }
 async function load () {
   if (EMBEDDED) return EMBEDDED;
@@ -3018,6 +3402,7 @@ load().then((data) => {
   $('togRight').onclick = () => { S.right = !S.right; setPanels(); savePanels(); };
   $('rpBtn').onclick = () => rpOpen(null);
   $('ptBtn').hidden = !isDesign(); $('ptBtn').onclick = () => ptOpen(null);
+  rvInit(); // review mode (Q)
   wireComments($('lb')); wireComments($('rside')); wireComments($('rp'));
   // small menus of the top bar: one open at a time, closed by a click elsewhere or Escape
   // wide screens show navigation, language and view options in the bar; narrower ones fold them into ☰
@@ -3041,6 +3426,7 @@ load().then((data) => {
     // (the draft stays); the next Escape closes the overlay. Search boxes keep their own arrow and Enter keys.
     const field = e.target.closest?.('textarea,select,[contenteditable="true"],input:not([type=checkbox]):not([type=radio]):not([type=button])');
     if (field && !['siQ', 'riQ', 'brSearch'].includes(field.id)) { if (e.key === 'Escape') { e.preventDefault(); field.blur(); } return; }
+    if (RV.open) { if (!e.metaKey && !e.ctrlKey && !e.altKey) rvKey(e); return; }
     if (!$('pt').hidden) { if (!e.metaKey && !e.ctrlKey && !e.altKey) ptKey(e); return; }
     if (!$('si').hidden) { if (stackKey(e)) return; if (e.target.closest('input,select,textarea')) return; return; }
     if (S.rp && !$('rp').hidden) { if (!e.target.closest('input,select,textarea')) { e.preventDefault(); rpKey(e); } return; }
@@ -3059,6 +3445,7 @@ load().then((data) => {
     if (S.mode === 'index' && !e.metaKey && !e.ctrlKey && !e.altKey) { if (S.st?.inline ? stackKey(e) : riKey(e)) return; }
     if (e.target.closest('input,select,textarea') || e.metaKey || e.ctrlKey || e.altKey) return;
     if (e.key === 'i' || e.key === 'I') { setMode(S.mode === 'index' ? 'map' : 'index'); return; }
+    if (e.key === 'q' || e.key === 'Q') { e.preventDefault(); rvOpen(null); return; }
     if (e.key === '?') { e.preventDefault(); $('helpBtn').click(); return; }
     if (e.key === 'f' || e.key === 'F') { const any = S.left || S.right; S.left = S.right = !any; setPanels(); }
     if (e.key === 'k' || e.key === 'K' || (e.key === '/' && S.mode !== 'index')) { e.preventDefault(); openBrowser(); }