prreviewbuddy 0.25.13 → 0.29.1

package/dist/server.js

@@ -1,4 +1,4 @@
-import { $ as checkCodeFreshness, $t as AgentCancelledError, A as liveUpdateFor, At as workspaceStamps, B as recordTelemetryUploadConsent, C as writePortPreference, D as isUnchanged, E as refreshPrContext, Et as saveWorkspace, Ft as questionsOutstanding, G as withUsageRecorded, Gt as writeAgentPreference, H as BUILD_VERSION, I as runJob, It as reviewerDispositions, J as fillFileUrlTemplate, Jt as AGENT_IDS, K as EXPLAIN_SIMPLY_PROMPT, Lt as processDiscussion, M as agentEnvOf, Mt as isIssueOutstanding, Nt as isQuestionOutstanding, O as askCheckout, Ot as touchWorkspace, P as startKissJob, Pt as issuesOutstanding, Q as removeWorktree, R as readEvents, Rt as describeAuthorship, S as statedWorkspacePort, St as recentReviewGroups, T as updateReview, Ut as clearAgentPreference, V as telemetryUploadConsent, Vt as git, W as feedbackUrl, Wt as readAgentPreference, X as MANAGED_ROOT, Y as ReviewBeingDeletedError, Z as readMarker, Zt as agentFor, _ as DEFAULT_WORKSPACE_PORT, _t as lineagePosition, a as liveJobsFor, at as loadJob, b as parseWorkspacePort, c as readIndexToken, ct as phasesFor, en as AgentUnavailableError, et as checkFreshness, f as readServerRecord, ft as isClaimed, g as writeServerRecord, ht as latestKissRun, i as lineageIds, it as isTerminal, jt as doneVerb, k as UpdateAlreadyRunningError, kt as workspaceRevision, lt as progressSteps, n as deleteLineage, nt as endedAt, o as wasBlocked, ot as saveJob, pt as followedRefName, qt as STORE_ROOT, r as deleteReview, rt as fail, s as discardJob, t as relativeTime$1, tt as allJobs, u as clearServerRecord, ut as purposeOf, v as MAX_WORKSPACE_PORT, vt as loadWorkspace, w as RefreshUnavailableError, wt as reviewedCommit, x as resolveWorkspacePort, xt as previousKissResult, y as MIN_WORKSPACE_PORT, z as record } from "./relative_time-vn8Ex9E8.js";
+import { $ as fillFileUrlTemplate, $t as writeAgentPreference, A as removeWorktree, At as workspaceRevision, Bt as isQuestionOutstanding, C as recordTelemetryUploadConsent, Ct as previousKissResult, D as ReviewBeingDeletedError, Dt as saveWorkspace, E as EXPLAIN_SIMPLY_PROMPT, F as clearServerRecord, Ft as queueStamp, G as DEFAULT_WORKSPACE_PORT, Gt as describeAuthorship, H as BUILD_VERSION, Ht as questionsOutstanding, It as readQueue, J as parseWorkspacePort, Jt as git, K as MAX_WORKSPACE_PORT, L as readServerRecord, Lt as writeQueue, M as relativeTime$1, Mt as dequeueOnComplete, N as readIndexToken, Nt as queueAdd, O as MANAGED_ROOT, Pt as queueRemove, Qt as readAgentPreference, Rt as doneVerb, S as record, T as withUsageRecorded, Tt as reviewedCommit, Ut as reviewerDispositions, V as writeServerRecord, Vt as issuesOutstanding, W as feedbackUrl, Wt as processDiscussion, X as statedWorkspacePort, Xt as resolveModel, Y as resolveWorkspacePort, Z as writePortPreference, Zt as clearAgentPreference, _ as startKissJob, _t as latestKissRun, a as wasBlocked, an as agentFor, at as isTerminal, bt as loadWorkspace, c as updateReview, cn as AgentUnavailableError, d as askCheckout, dt as purposeOf, et as checkCodeFreshness, f as UpdateAlreadyRunningError, gt as indexReviewGroups, h as agentEnvOf, i as liveJobsFor, it as fail, jt as workspaceStamps, k as readMarker, kt as touchWorkspace, l as refreshPrContext, lt as phasesFor, mt as followedRefName, n as deleteReview, nn as AGENT_IDS, nt as allJobs, o as discardJob, ot as loadJob, p as liveUpdateFor, pt as isClaimed, q as MIN_WORKSPACE_PORT, r as lineageIds, rt as endedAt, s as RefreshUnavailableError, sn as AgentCancelledError, st as saveJob, t as deleteLineage, tn as STORE_ROOT, tt as checkFreshness, u as isUnchanged, ut as progressSteps, w as telemetryUploadConsent, wt as recentWorkspaces, x as readEvents, y as runJob, yt as lineagePosition, zt as isIssueOutstanding } from "./delete_review-DUCSC5Bc.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { createHash, timingSafeEqual } from "node:crypto";
@@ -229,6 +229,36 @@ function wayBackSentence(way = wayBack()) {
 	return way.commands.map(({ command, where }) => `${command} in ${where}`).join(", or ");
 }
 //#endregion
+//#region ../../packages/review-harness/src/workspace/rail_icons.ts
+/**
+* The rail's icons, one per row that is not a theme.
+*
+* A pure module, because the client draws the Diagrams row itself when the first drawing lands and
+* cannot import `page.ts`. Themes keep their numbers: the order is information, and an icon there
+* would replace it with decoration.
+*
+* Stroked in `currentColor` on a 24-unit grid, so every icon takes the row's colour, including
+* Stop server's red on hover.
+*/
+var PATHS = {
+	review: "<path d=\"M9 5H7a2 2 0 0 0-2 2v12a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2V7a2 2 0 0 0-2-2h-2\"/><rect x=\"9\" y=\"3\" width=\"6\" height=\"4\" rx=\"1\"/><path d=\"m9 14 2 2 4-4\"/>",
+	kiss: "<path d=\"M12 3v4M12 17v4M3 12h4M17 12h4\"/><circle cx=\"12\" cy=\"12\" r=\"2\"/>",
+	diagrams: "<rect x=\"3\" y=\"3\" width=\"7\" height=\"6\" rx=\"1\"/><rect x=\"14\" y=\"15\" width=\"7\" height=\"6\" rx=\"1\"/><path d=\"M6.5 9v3a2 2 0 0 0 2 2h7a2 2 0 0 1 2 2v-1\"/>",
+	issues: "<circle cx=\"12\" cy=\"12\" r=\"9\"/><path d=\"M12 8v4M12 16h.01\"/>",
+	questions: "<circle cx=\"12\" cy=\"12\" r=\"9\"/><path d=\"M9.1 9a3 3 0 0 1 5.8 1c0 2-3 3-3 3M12 17h.01\"/>",
+	files: "<path d=\"M14 3H7a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2V8z\"/><path d=\"M14 3v5h5M9 13h6M9 17h6\"/>",
+	prcontext: "<path d=\"M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z\"/>",
+	recommendations: "<path d=\"M9 18h6M10 22h4\"/><path d=\"M12 2a7 7 0 0 0-4 12.7c.6.5 1 1.2 1 2V17h6v-.3c0-.8.4-1.5 1-2A7 7 0 0 0 12 2z\"/>",
+	reviews: "<path d=\"M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01\"/>",
+	settings: "<circle cx=\"12\" cy=\"12\" r=\"3\"/><path d=\"M19.4 15a1.7 1.7 0 0 0 .3 1.8l.1.1a2 2 0 1 1-2.8 2.8l-.1-.1a1.7 1.7 0 0 0-1.8-.3 1.7 1.7 0 0 0-1 1.5V21a2 2 0 1 1-4 0v-.1a1.7 1.7 0 0 0-1.1-1.5 1.7 1.7 0 0 0-1.8.3l-.1.1a2 2 0 1 1-2.8-2.8l.1-.1a1.7 1.7 0 0 0 .3-1.8 1.7 1.7 0 0 0-1.5-1H3a2 2 0 1 1 0-4h.1a1.7 1.7 0 0 0 1.5-1.1 1.7 1.7 0 0 0-.3-1.8l-.1-.1a2 2 0 1 1 2.8-2.8l.1.1a1.7 1.7 0 0 0 1.8.3H9a1.7 1.7 0 0 0 1-1.5V3a2 2 0 1 1 4 0v.1a1.7 1.7 0 0 0 1 1.5 1.7 1.7 0 0 0 1.8-.3l.1-.1a2 2 0 1 1 2.8 2.8l-.1.1a1.7 1.7 0 0 0-.3 1.8V9a1.7 1.7 0 0 0 1.5 1H21a2 2 0 1 1 0 4h-.1a1.7 1.7 0 0 0-1.5 1z\"/>",
+	feedback: "<path d=\"m22 2-7 20-4-9-9-4z\"/><path d=\"M22 2 11 13\"/>",
+	stop: "<path d=\"M12 2v10\"/><path d=\"M18.4 6.6a9 9 0 1 1-12.8 0\"/>"
+};
+/** The icon slot for one rail row. Hidden from assistive technology: the label beside it says it. */
+function railIcon(icon) {
+	return `<span class="prb-rail-icon" aria-hidden="true"><svg viewBox="0 0 24 24" focusable="false" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">${PATHS[icon]}</svg></span>`;
+}
+//#endregion
 //#region ../../packages/review-harness/src/domain/utils/file_path.ts
 /**
 * Splits a repo-relative path for display, so the filename can be shown prominently and the
@@ -571,6 +601,119 @@ function humanizeModelId(id) {
 	return display;
 }
 //#endregion
+//#region ../../packages/review-harness/src/domain/utils/agent_label.ts
+/**
+* What a person is shown when a review names the tool that produced it.
+*
+* Here in the domain rather than read off `AgentIdentity.displayName`, because this runs in the
+* extension bundle and the adapter registry reaches `node:child_process`. Deriving the label from
+* the stored `agentId` keeps the client free of node builtins and adds no stored field.
+*
+* A closed set of this product's own adapter ids, which is not the kind of table that goes stale
+* invisibly: adding an adapter is our own act, and anything unrecognised still renders through
+* `humanizeModelId` rather than disappearing. That is why this is not folded into
+* `humanizeModelId` itself, whose value is knowing nothing about which names exist.
+*/
+var AGENT_DISPLAY_NAMES = {
+	claude: "Claude Code",
+	codex: "Codex",
+	gemini: "Gemini CLI"
+};
+/**
+* Absent reads as Claude, matching `agentIdOf` and `agentName`: a session written before agents
+* were selectable ran under Claude, and showing it as unknown would invent a gap in the oldest
+* reviews on disk.
+*/
+var DEFAULT_AGENT_DISPLAY_NAME = AGENT_DISPLAY_NAMES.claude;
+function agentDisplayName(agentId) {
+	if (!agentId) return DEFAULT_AGENT_DISPLAY_NAME;
+	return AGENT_DISPLAY_NAMES[agentId] ?? humanizeModelId(agentId);
+}
+//#endregion
+//#region ../../packages/review-harness/src/domain/ai_review/model_provenance.ts
+/**
+* Values `model` carried when it meant "which agent", before the field was frozen.
+*
+* A closed set of three of our own historical strings, not a catalogue of vendor models, so it
+* never grows and never goes stale. It lives here rather than in `humanizeModelId` on purpose:
+* the corruption belongs to how sessions were once written, and that label function's whole value
+* is knowing nothing about which models exist.
+*/
+var LEGACY_AGENT_IDS = /* @__PURE__ */ new Set([
+	"codex",
+	"claude-code",
+	"gemini-cli"
+]);
+var present = (value) => typeof value === "string" && value !== "" ? value : null;
+function modelProvenanceOf(session) {
+	return {
+		requestedModel: present(session.requestedModel) ?? legacyModel(session.model),
+		observedModel: present(session.observedModel),
+		agentVersion: present(session.agentVersion)
+	};
+}
+/**
+* A legacy `model`, read as a request or discarded.
+*
+* The extension put the model it was about to call into this field, so for its sessions the value
+* really is what was requested. The CLI put an agent id there, which is not a model at all and is
+* dropped rather than displayed: showing "Reviewed with Codex, model Codex" would be the record
+* inventing provenance out of its own filing.
+*/
+function legacyModel(model) {
+	const value = present(model);
+	if (value === null || LEGACY_AGENT_IDS.has(value)) return null;
+	return value;
+}
+/**
+* Whether a coding agent made this, as opposed to the extension calling a provider API.
+*
+* The awkward case is a session with no `agentId` at all, because two different producers leave it
+* empty. A CLI review from before agents were selectable means Claude, which is why
+* `agentDisplayName` defaults that way. An extension review means no agent ran at all, and naming
+* one would credit Claude Code for somebody's OpenAI review.
+*
+* The legacy sentinel tells them apart, which is the last job that field has: only the CLI ever
+* wrote one, so a record with no agent id and no sentinel came from the extension.
+*/
+function producedByAgent(session) {
+	if (session.agentId) return true;
+	const legacy = present(session.model);
+	return legacy !== null && LEGACY_AGENT_IDS.has(legacy);
+}
+/**
+* The full provenance, for the disclosure rather than the page.
+*
+* Opens with "Reviewed with X" rather than "Agent: X", keeping the sentence that was already here:
+* a review is not owned by an agent, it holds analyses, and this names the one being shown.
+*
+* The line that earns this list its place is the last one: a pinned model that nobody confirmed.
+* `--model X` states what we asked for, and on an agent that reports nothing back there is no way
+* to know it was honoured, so the pin is shown alongside the fact that it is unverified. Without
+* that line a reader would take a requested model for a measured one, which is the overstatement
+* this whole split exists to prevent.
+*
+* Said only when something was pinned. On an unpinned run there is no claim outstanding, and a
+* standing "not reported" would be noise on every review anybody ever runs.
+*
+* Both sentences that name an agent are withheld from a review no agent produced, through the same
+* `producedByAgent` distinction `attributionLabel` makes. An extension review has no agent id, and
+* naming one anyway credited Claude Code for somebody's OpenAI review and then reported that Claude
+* Code had not confirmed a model nobody had asked it for. What remains for such a review is the
+* model it requested and the model that answered, which is the whole of what is known about it.
+*/
+function provenanceDetailLines(session) {
+	const agent = producedByAgent(session) ? agentDisplayName(session.agentId) : null;
+	const { requestedModel, observedModel, agentVersion } = modelProvenanceOf(session);
+	return [
+		...agent ? [`Reviewed with ${agent}`] : [],
+		...agentVersion ? [`Agent version ${agentVersion}`] : [],
+		...requestedModel ? [`Requested model ${humanizeModelId(requestedModel)}`] : [],
+		...observedModel ? [`Reported model ${humanizeModelId(observedModel)}`] : [],
+		...agent && requestedModel && !observedModel ? [`Reported model not reported by ${agent}`] : []
+	];
+}
+//#endregion
 //#region ../../packages/review-harness/src/domain/ui/components/pill_tooltips.ts
 /**
 * What every pill in the sidebar actually means, in one place.
@@ -881,7 +1024,8 @@ var CANCEL_BUTTON = `<button type="button" class="pr-helper-cancel-button">Cance
 function renderGeneratingOverview(session, iconUrl) {
 	const activeIndex = session.progress.findIndex((step) => !step.done);
 	const brandMark = iconUrl ? `<img src="${escapeHtml$1(iconUrl)}" class="pr-helper-brand-mark" alt="" />` : "";
-	const poweredByName = session.provider === "openai_compatible" ? humanizeModelId(session.model) : PROVIDER_DISPLAY_NAME[session.provider];
+	const pickedModel = modelProvenanceOf(session).requestedModel;
+	const poweredByName = session.provider === "openai_compatible" && pickedModel ? humanizeModelId(pickedModel) : PROVIDER_DISPLAY_NAME[session.provider];
 	const isThinking = activeIndex === 2;
 	return `
     <div class="pr-helper-generating pr-helper-generating-focused">
@@ -991,8 +1135,7 @@ function coverageDetails(session) {
 * agent: it holds analyses, and this names the one it is currently showing.
 */
 function agentDetails(session) {
-	const name = humanizeModelId(session.model);
-	return name ? [`Reviewed with ${name}`] : [];
+	return provenanceDetailLines(session);
 }
 /**
 * Everything the Analysis details disclosure says, as facts rather than as markup.
@@ -1250,7 +1393,7 @@ function renderGuideSectionCard(section, counts, activeGuidedSectionId, status,
 	const statusBadge = isCompleted ? `<span class="pr-helper-guide-badge pr-helper-completed-badge">Completed</span>` : status === "active" ? `<span class="pr-helper-guide-badge pr-helper-start-here-badge">${escapeHtml$1(activeBadgeLabel)}</span>` : "";
 	const undo = isCompleted ? `<button type="button" class="pr-helper-guide-uncomplete" data-guide-uncomplete="${escapeHtml$1(section.id)}">Mark as not reviewed</button>` : "";
 	return `
-    <section class="pr-helper-guide-section${isCompleted ? " pr-helper-guide-section-completed" : ""}" id="pr-helper-guide-section-${escapeHtml$1(section.id)}" data-guide-section-card="${escapeHtml$1(section.id)}">
+    <section class="pr-helper-guide-section${isCompleted ? " pr-helper-guide-section-completed" : ""}${options?.collapsedSections ? " pr-helper-guide-section-collapsed" : ""}" id="pr-helper-guide-section-${escapeHtml$1(section.id)}" data-guide-section-card="${escapeHtml$1(section.id)}">
       <button type="button" class="pr-helper-guide-section-header" data-guide-toggle="${escapeHtml$1(section.id)}">
         <div class="pr-helper-guide-section-badges">
           ${check}
@@ -2220,6 +2363,9 @@ function phaseSentence(job) {
 function renderFailureBody(job, options = {}) {
 	if (!job.failure) return "";
 	const noun = isWorkPhase(job.failure.phase) ? PHASE_NOUN[job.failure.phase] : job.failure.phase;
+	if (job.failure.stopped) return `<p>${options.lead === false ? "" : "<strong>Review stopped.</strong> "}Nothing went wrong, and what it had finished is kept.</p>
+  <button type="button" class="prb-job-retry" data-job-retry>Carry on</button>
+  <p class="prb-job-note">It picks up from the ${escapeHtml$1(noun)}, not from the start.</p>`;
 	const next = job.failure.kind === "agent_authentication_failed" ? `<p class="prb-job-note">Signing that agent in is what changes this. Once it is signed in, update the review.</p>` : `<button type="button" class="prb-job-retry" data-job-retry>Retry</button>
   <p class="prb-job-note">Retry picks up from the ${escapeHtml$1(noun)}, not from the start.</p>`;
 	return `<p>${options.lead === false ? "" : "<strong>Review paused.</strong> "}${escapeHtml$1(job.failure.message)}</p>
@@ -2584,7 +2730,7 @@ function provenanceFacts(run) {
 		run.completedAt ? `Completed ${relativeTime$1(run.completedAt)}` : "",
 		`Commit ${run.reviewedSha.slice(0, 7)}`,
 		audienceSentence(run.audience),
-		run.agentId ? `Analysed by ${run.agentId}${run.model ? ` (${run.model})` : ""}` : "",
+		run.agentId ? `Analysed by ${agentDisplayName(run.agentId)}${modelSuffix(run)}` : "",
 		`Rubric version ${run.promptVersion}`
 	].filter((fact) => fact !== "");
 }
@@ -2725,6 +2871,22 @@ function renderLocationList(locations) {
     </button></li>`;
 	}).join("")}</ul>`;
 }
+/**
+* The model this run ran under, as far as it is known.
+*
+* Observed over requested, which is the precedence `attributionLabel` applies to a standard
+* review's line and the reason this reads `modelProvenanceOf` rather than a field: what the agent
+* said answered outranks what it was asked for, and only one of the two is ever a claim about what
+* actually happened. Neither known leaves the agent to stand alone rather than inventing a pin.
+*
+* `modelProvenanceOf` is also what keeps the frozen `model` out of here, which on a KISS run only
+* ever held an agent id: "Analysed by Codex (Codex)" was the shape that produced.
+*/
+function modelSuffix(run) {
+	const { requestedModel, observedModel } = modelProvenanceOf(run);
+	const model = observedModel ?? requestedModel;
+	return model ? ` (${humanizeModelId(model)})` : "";
+}
 //#endregion
 //#region ../../packages/review-harness/src/workspace/update_view.ts
 /**
@@ -3351,8 +3513,11 @@ function renderStandardViews(view, sections) {
 		diagrams: true,
 		detailsInHeader: true
 	})}</section>
-      <section class="prb-view" data-view="guide" hidden>${renderGuideTab(session, null, null, { diagrams: true })}</section>
-      <section class="prb-view" data-view="diagram" hidden data-diagram-pane>
+      <section class="prb-view" data-view="guide" hidden>${renderGuideTab(session, null, null, {
+		diagrams: true,
+		collapsedSections: true
+	})}</section>
+      <section class="prb-view" data-view="diagram" hidden data-diagram-pane${view.pendingDiagram ? ` data-diagram-running="${escapeHtml$1(view.pendingDiagram.sectionId ?? "")}"` : ""}>
         <h3 class="prb-doc-title">Diagrams</h3>
         ${renderDiagrams(view.diagrams ?? [], sections, view.reviewedSha ?? null)}
       </section>
@@ -3520,7 +3685,7 @@ function renderHeader(view, freshness) {
 		return `<button type="button" class="prb-fresh-check" data-fresh-check data-state="${state}" aria-expanded="false" title="How this review stands against the branch as it is now">${escapeHtml$1(label)}</button>`;
 	})() : ""}
     ${view.token ? `<button type="button" class="prb-complete" data-complete aria-pressed="${view.complete === true}">${view.complete ? "Reviewed" : "Mark reviewed"}</button>` : ""}
-    ${view.id ? renderIdMenu(view.id) : ""}
+    ${view.id ? renderIdMenu(view.id, Boolean(view.token)) : ""}
     ${view.session.result ? "<button type=\"button\" class=\"prb-ask-toggle\" data-ask-toggle aria-expanded=\"false\">Buddy AI</button>" : ""}
   </div>
 </header>`;
@@ -3535,17 +3700,29 @@ function renderHeader(view, freshness) {
 * the address bar.
 *
 * The same `...` and the same menu markup as the index, deliberately. One gesture, in both places
-* it can be wanted, behaving identically. Copy alone and no delete: removing the review you are
-* currently reading is a different act needing somewhere to send you afterwards, and the list is
-* one click away in the rail.
+* it can be wanted, behaving identically. That includes deleting, with the same confirmation in the
+* same panel and the same sentence. The list is where you land afterwards, since the page you were
+* reading no longer exists. It deletes this review only, as a history row on the list does.
+*
+* No delete where there is no server, which is the offline preview: the item would be a lie there.
 */
-function renderIdMenu(id) {
+function renderIdMenu(id, canDelete) {
+	const safe = escapeHtml$1(id);
 	return `<div class="prb-menu" data-menu>
     <button type="button" class="prb-menu-trigger" data-menu-trigger aria-expanded="false" aria-haspopup="true" aria-label="Actions for this review">&#8943;</button>
     <div class="prb-menu-panel" data-menu-panel hidden>
       <div data-menu-items>
-        <button type="button" class="prb-menu-item" data-copy-id="${escapeHtml$1(id)}">Copy review ID</button>
+        <button type="button" class="prb-menu-item" data-copy-id="${safe}">Copy review ID</button>
+        ${canDelete ? `<button type="button" class="prb-menu-item prb-menu-item-danger" data-delete="${safe}">Delete review</button>` : ""}
       </div>
+      ${canDelete ? `<div class="prb-menu-confirm" data-menu-confirm hidden>
+        <p class="prb-menu-question">Delete this review?</p>
+        <p class="prb-menu-note">This cannot be undone. Your branch and its commits are untouched.</p>
+        <div class="prb-menu-buttons">
+          <button type="button" class="prb-menu-item prb-menu-item-danger" data-confirm-delete>Delete</button>
+          <button type="button" class="prb-menu-item" data-cancel-delete>Cancel</button>
+        </div>
+      </div>` : ""}
     </div>
   </div>`;
 }
@@ -3567,22 +3744,22 @@ function renderIdMenu(id) {
 */
 function renderRailFoot(view) {
 	return `<div class="prb-rail-group prb-rail-foot">
-    ${view.token ? `<a class="prb-rail-item" href="/">
-             <span class="prb-rail-order">&lsaquo;</span>
+    ${view.token ? `<a class="prb-rail-item prb-rail-link" href="/">
+             ${railIcon("reviews")}
              <span class="prb-rail-label"><span class="prb-rail-title">All reviews</span></span>
            </a>
-     <a class="prb-rail-item" href="/settings">
-       <span class="prb-rail-order">&#9881;</span>
+     <a class="prb-rail-item prb-rail-link" href="/settings">
+       ${railIcon("settings")}
        <span class="prb-rail-label"><span class="prb-rail-title">Settings</span></span>
      </a>` : ""}
-    <a class="prb-rail-item" href="${escapeHtml$1(feedbackUrl())}" target="_blank" rel="noopener noreferrer">
-      <span class="prb-rail-order"></span>
+    <a class="prb-rail-item prb-rail-link" href="${escapeHtml$1(feedbackUrl())}" target="_blank" rel="noopener noreferrer">
+      ${railIcon("feedback")}
       <span class="prb-rail-label"><span class="prb-rail-title">Send feedback</span></span>
     </a>
   </div>
   <div class="prb-rail-group prb-rail-ops">
-    ${view.token ? `<button type="button" class="prb-rail-item prb-rail-danger" data-shutdown>
-             <span class="prb-rail-order"></span>
+    ${view.token ? `<button type="button" class="prb-rail-item prb-rail-link prb-rail-danger" data-shutdown>
+             ${railIcon("stop")}
              <span class="prb-rail-label"><span class="prb-rail-title">Stop server</span></span>
            </button>` : ""}
     <p class="prb-build">v${escapeHtml$1(BUILD_VERSION)}</p>
@@ -3634,6 +3811,7 @@ function renderRail(view, sections) {
   ${(view.session.result ? railGroup({
 		id: "prb-rail-review",
 		title: "Review",
+		icon: "review",
 		view: "overview",
 		current: true,
 		badge: null,
@@ -3645,11 +3823,11 @@ function renderRail(view, sections) {
     <div class="prb-rail-path" id="prb-rail-path">
       ${themes || "<p class=\"prb-rail-heading\">No themes</p>"}
     </div>
-    ${(view.diagrams?.length ?? 0) > 0 ? railLink("diagram", "Diagrams", diagramsBadge(view.diagrams?.length ?? 0)) : ""}
-    ${railLink("issues", "Issues", findingsBadge(issuesOutstanding(issues, dispositions)))}
-    ${railLink("questions", "Questions", remainingBadge(questionsOutstanding(questions, answered), "question", "answered"))}
-    ${railLink("files", "Files", totalBadge(view.changeSet.data.files.length, "files"))}
-    ${view.prContext ? railLink("prcontext", "PR context", totalBadge(view.prContext.processed.stats.totalThreads, "PR comment threads")) : railLink("prcontext", "PR context", null, "No pull request was connected to this review")}`
+    ${(view.diagrams?.length ?? 0) > 0 ? railLink("diagram", "diagrams", "Diagrams", diagramsBadge(view.diagrams?.length ?? 0)) : ""}
+    ${railLink("issues", "issues", "Issues", findingsBadge(issuesOutstanding(issues, dispositions)))}
+    ${railLink("questions", "questions", "Questions", remainingBadge(questionsOutstanding(questions, answered), "question", "answered"))}
+    ${railLink("files", "files", "Files", totalBadge(view.changeSet.data.files.length, "files"))}
+    ${view.prContext ? railLink("prcontext", "prcontext", "PR context", totalBadge(view.prContext.processed.stats.totalThreads, "PR comment threads")) : railLink("prcontext", "prcontext", "PR context", null, "No pull request was connected to this review")}`
 	}) : "") || renderRunningRail(view)}
   ${renderKissRail(view)}
   ${renderRailFoot(view)}
@@ -3675,11 +3853,12 @@ function renderRunningRail(view) {
 	return railGroup({
 		id: "prb-rail-review",
 		title: "Review",
+		icon: "review",
 		view: "progress",
 		current: true,
 		badge: null,
 		collapses: "the review",
-		body: view.job && changeIsRead(view.job) ? railLink("files", "Files", totalBadge(files, "files")) : ""
+		body: view.job && changeIsRead(view.job) ? railLink("files", "files", "Files", totalBadge(files, "files")) : ""
 	});
 }
 /**
@@ -3702,11 +3881,12 @@ function renderKissRail(view) {
 	return railGroup({
 		id: "prb-rail-kiss",
 		title: "KISS",
+		icon: "kiss",
 		view: "kiss",
 		current: view.session.result === null && !showsProgress(view),
 		badge: result ? recommendationsBadge(result.recommendations.length) : null,
 		collapses: "the KISS review",
-		body: result ? railLink("kissrecs", "Recommendations", recommendationsBadge(result.recommendations.length)) : ""
+		body: result ? railLink("kissrecs", "recommendations", "Recommendations", recommendationsBadge(result.recommendations.length)) : ""
 	});
 }
 /** The one chevron both twisties draw. Rotated by CSS off `aria-expanded`, never by markup. */
@@ -3726,7 +3906,7 @@ function railGroup(group) {
 	return `<div class="prb-rail-group">
     <div class="prb-rail-row">
       <button type="button" class="prb-rail-item prb-rail-group-title" data-view-nav="${escapeHtml$1(group.view)}"${group.current ? " aria-current=\"true\"" : ""}>
-        <span class="prb-rail-order"></span>
+        ${railIcon(group.icon)}
         <span class="prb-rail-label"><span class="prb-rail-title">${escapeHtml$1(group.title)}</span></span>
         ${renderBadge(group.badge)}
       </button>
@@ -3812,9 +3992,9 @@ function renderBadge(badge) {
 	return `<span class="prb-rail-count${badge.done ? " prb-rail-count-done" : ""}" aria-label="${escapeHtml$1(badge.label)}">${escapeHtml$1(badge.text)}</span>`;
 }
 /** A null badge renders nothing, for the case where zero would be a claim rather than a total. */
-function railLink(view, label, badge, note) {
-	return `<button type="button" class="prb-rail-item" data-view-nav="${view}"${note ? ` title="${escapeHtml$1(note)}"` : ""}>
-    <span class="prb-rail-order"></span>
+function railLink(view, icon, label, badge, note) {
+	return `<button type="button" class="prb-rail-item prb-rail-link" data-view-nav="${view}"${note ? ` title="${escapeHtml$1(note)}"` : ""}>
+    ${railIcon(icon)}
     <span class="prb-rail-label"><span class="prb-rail-title">${escapeHtml$1(label)}</span></span>
     ${renderBadge(badge)}
   </button>`;
@@ -4058,6 +4238,9 @@ function renderShutdownDialog() {
 function renderAsk(view, sections) {
 	const suggestions = buildSuggestions(view, sections);
 	const transcript = view.transcript ?? [];
+	const pending = view.pendingAsk ?? null;
+	const pendingTurn = pending ? `<div class="prb-msg prb-msg-user">${escapeHtml$1(pending.question ?? "")}</div>
+      <div class="prb-thinking" data-ask-pending><i></i><i></i><i></i><span>Reading the change…</span></div>` : "";
 	return `<aside class="prb-ask" aria-label="Ask Buddy AI">
   <div
     class="prb-ask-resize"
@@ -4073,8 +4256,8 @@ function renderAsk(view, sections) {
   </div>
   ${renderPromptBank(view.prompts ?? [])}
   <div class="prb-ask-log" data-ask-log>
-    ${transcript.length > 0 ? transcript.map((exchange) => `<div class="prb-msg prb-msg-user">${escapeHtml$1(exchange.question)}</div>
-      <div class="prb-msg prb-msg-assistant prb-md">${renderMarkdown(exchange.answer)}${renderMessageCopySource(exchange.answer)}</div>`).join("") : `<div class="prb-ask-empty">
+    ${transcript.length > 0 || pending ? transcript.map((exchange) => `<div class="prb-msg prb-msg-user">${escapeHtml$1(exchange.question)}</div>
+      <div class="prb-msg prb-msg-assistant prb-md">${renderMarkdown(exchange.answer)}${renderMessageCopySource(exchange.answer)}</div>`).join("") + pendingTurn : `<div class="prb-ask-empty">
       <p>Ask about this change. Answers come from the review, the diff and the repository on disk — not from anywhere else.</p>
       ${suggestions.map((text) => `<button type="button" class="prb-suggestion" data-suggestion>${escapeHtml$1(text)}</button>`).join("")}
     </div>`}
@@ -4141,6 +4324,40 @@ function countLabel(reviews, branches) {
 	return `${label} · ${branches} branch${branches === 1 ? "" : "es"}`;
 }
 /**
+* Every login the author dropdown offers, once each, in alphabetical order regardless of case.
+* Read from the cards the page is showing, so it never lists somebody with nothing to show.
+*/
+function authorOptions(handles) {
+	return [...new Set(handles.filter((handle) => Boolean(handle)))].sort((a, b) => a.localeCompare(b, void 0, { sensitivity: "base" }));
+}
+/**
+* A card menu's status item, which sets the state it names. The bulk bar's words for the same two
+* actions, so a card and a selection never disagree. Here rather than in the page renderer because
+* the browser relabels the item after a change, and that renderer reaches the store.
+*/
+function markItemLabel(mark) {
+	return mark === "complete" ? "Mark reviewed" : "Mark in progress";
+}
+/**
+* What `Continue reviewing` opens, and whether it exists at all.
+*
+* One rule rather than an expression in the template, because "is there anything to continue" and
+* "what is first" are the same question and must not be able to answer differently -- a button that
+* is present but navigates nowhere is worse than no button.
+*/
+function continueTarget(queue) {
+	return queue[0] ?? null;
+}
+/**
+* The Queue pill, which carries a number only once there is one.
+*
+* "Queue 0" is a count of something that is not there, and reads as a fault. Bare "Queue" reads as
+* the place it is -- empty, and still the thing you would click to put something in it.
+*/
+function queuePillLabel(queued) {
+	return queued === 0 ? "Queue" : `Queue ${queued}`;
+}
+/**
 * The words on the status chip.
 *
 * Here rather than in the renderer because the browser now writes this chip too: marking a
@@ -4173,6 +4390,10 @@ function renderReviewsPage(view) {
 	const now = view.now ?? Date.now();
 	const ordered = [...view.groups].sort((a, b) => Number(b.latest.pinned) - Number(a.latest.pinned) || touchedAt(b.latest) - touchedAt(a.latest));
 	const storedReviews = view.groups.reduce((total, group) => total + group.history.length, 0);
+	const queue = view.queue ?? [];
+	const positions = new Map(queue.map((id, position) => [id, position]));
+	const continues = continueTarget(queue);
+	const front = continues === null ? void 0 : findReview(view.groups, continues);
 	return `<!doctype html>
 <html lang="en">
 <head>
@@ -4194,18 +4415,19 @@ function renderReviewsPage(view) {
   </div>
 </header>
 <main class="prb-index">
-  ${ordered.length === 0 ? "" : renderControls()}
+  ${ordered.length === 0 ? "" : renderControls(queue.length, authorOptions(ordered.map((group) => group.latest.authorHandle)))}
+  ${front === void 0 ? "" : renderContinue(front)}
   ${ordered.length === 0 ? "" : `<div class="prb-index-summary">
     <p class="prb-index-count" data-count>${escapeHtml$1(countLabel(storedReviews, ordered.length))}</p>
     <button type="button" class="prb-index-select" data-select-mode aria-pressed="false">Select</button>
   </div>`}
   <div class="prb-cards" data-cards>
-    ${ordered.map((group) => renderCard(group, now, view.analyses?.get(group.latest.id))).join("")}
+    ${ordered.map((group) => renderCard(group, now, view.analyses?.get(group.latest.id), positions.get(group.latest.id))).join("")}
   </div>
   ${ordered.length === 0 ? `<p class="prb-index-empty">No reviews stored yet. Ask Claude Code to review a change and one will appear here.</p>` : `<p class="prb-index-none" data-no-matches hidden>Nothing matches that.</p>`}
   ${ordered.length > 15 ? renderPager() : ""}
   ${ordered.length === 0 ? "" : renderBulkBar()}
-  <p class="prb-index-note">Reviews are kept for thirty days, on this machine only. Every review has a fixed address, so a link to one is worth keeping and still opens after a restart. Stopping the server deletes nothing; it only stops anything being served until the next review starts it again.</p>
+  <p class="prb-index-note">Reviews are kept for thirty days, on this machine only. Saved reviews and anything in your review queue are kept for ninety days instead, counting from the last time you opened them. Every review has a fixed address, so a link to one is worth keeping and still opens after a restart. Stopping the server deletes nothing; it only stops anything being served until the next review starts it again.</p>
 </main>
 <script src="/assets/reviews.js" type="module"><\/script>
 </body>
@@ -4220,17 +4442,51 @@ function renderReviewsPage(view) {
 * would be four more controls for a question ("show me only the risky ones") that sorting by
 * recency already answers badly and that scanning answers well.
 */
-function renderControls() {
+function renderControls(queued, authors) {
 	return `<div class="prb-index-controls">
     <input type="search" class="prb-index-search" data-search placeholder="Search repo, branch, title, summary or file…" aria-label="Search reviews" spellcheck="false">
+    ${renderAuthorFilter(authors)}
     <div class="prb-index-filters" role="group" aria-label="Filter reviews">
       <button type="button" data-filter="all" aria-pressed="true">All</button>
+      <button type="button" data-filter="queue" aria-pressed="false" data-queue-pill>${escapeHtml$1(queuePillLabel(queued))}</button>
+      <button type="button" data-filter="saved" aria-pressed="false">Saved</button>
       <button type="button" data-filter="in-progress" aria-pressed="false">In progress</button>
       <button type="button" data-filter="complete" aria-pressed="false">Reviewed</button>
     </div>
   </div>`;
 }
 /**
+* Whose pull requests to show.
+*
+* Absent when no card carries a login, which is every page of local-branch reviews: a dropdown
+* whose only choice is Everyone is not a choice.
+*/
+function renderAuthorFilter(authors) {
+	if (authors.length === 0) return "";
+	return `<select class="prb-index-author" name="author" data-author-filter aria-label="Filter by pull request author">
+      <option value="">Everyone</option>${authors.map((handle) => `<option value="${escapeHtml$1(handle)}">@${escapeHtml$1(handle)}</option>`).join("")}
+    </select>`;
+}
+/**
+* The way back into the batch, above the list.
+*
+* A link rather than a button, and carrying the review's own token, because that is what every
+* other way into a review on this page is -- the list is the only thing holding every credential.
+*
+* It names the front of the queue rather than saying only "Continue reviewing", so somebody
+* returning after an hour can tell whether it is about to open what they expect before they click.
+*/
+function renderContinue(review) {
+	return `<a class="prb-index-continue" href="${escapeHtml$1(`/r/${encodeURIComponent(review.id)}?t=${encodeURIComponent(review.token)}`)}">
+    <span class="prb-index-continue-label">Continue reviewing</span>
+    <span class="prb-index-continue-title">${escapeHtml$1(review.title)}</span>
+  </a>`;
+}
+/** The review a queued id refers to. The caller has already guaranteed it is one this page shows. */
+function findReview(groups, id) {
+	for (const group of groups) for (const review of group.history) if (review.id === id) return review;
+}
+/**
 * The pager, with its numbers left out.
 *
 * How many pages there are depends on what the search matched, and matching happens in the browser
@@ -4301,15 +4557,15 @@ function renderBulkBar() {
 * card and is shown only in selection mode, so entering that mode is a stylesheet change rather
 * than a rebuild of the list.
 */
-function renderCard(group, now, analysis) {
+function renderCard(group, now, analysis, queued) {
 	const review = group.latest;
 	const status = statusOf(review);
 	const href = `/r/${encodeURIComponent(review.id)}?t=${encodeURIComponent(review.token)}`;
 	const followed = followedRefName(review.branch, review.headResolvedRef) ?? review.branch;
-	return `<article class="prb-card" data-card data-id="${escapeHtml$1(review.id)}" data-status="${status}" data-pinned="${review.pinned}" data-reviews="${group.history.length}" data-search-text="${escapeHtml$1(groupSearchText(group))}">
+	return `<article class="prb-card" data-card data-id="${escapeHtml$1(review.id)}" data-status="${status}" data-pinned="${review.pinned}"${queued === void 0 ? "" : ` data-queue="${queued}"`}${review.authorHandle ? ` data-author="${escapeHtml$1(review.authorHandle)}"` : ""} data-reviews="${group.history.length}" data-search-text="${escapeHtml$1(groupSearchText(group))}">
     <input type="checkbox" class="prb-card-select" data-select="${escapeHtml$1(review.id)}" aria-label="Select ${escapeHtml$1(followed)}">
-    <button type="button" class="prb-card-pin" data-pin="${escapeHtml$1(review.id)}" aria-pressed="${review.pinned}" aria-label="${review.pinned ? "Unpin" : "Pin"} this review" title="${review.pinned ? "Unpin" : "Pin to the top"}">${review.pinned ? "&#9733;" : "&#9734;"}</button>
-    ${renderCardMenu(group, followed)}
+    <button type="button" class="prb-card-pin" data-pin="${escapeHtml$1(review.id)}" aria-pressed="${review.pinned}" aria-label="${review.pinned ? "Unsave" : "Save"} this review">${review.pinned ? "&#9733;" : "&#9734;"}</button>
+    ${renderCardMenu(group, followed, queued !== void 0, status)}
     <a class="prb-card-link" href="${escapeHtml$1(href)}">
       <div class="prb-card-head">
         <h2>${escapeHtml$1(review.title)}</h2>
@@ -4352,15 +4608,18 @@ function renderCard(group, now, analysis) {
 *
 * The rows underneath carry the per-review menus, and they only exist once there is more than one.
 */
-function renderCardMenu(group, followed) {
+function renderCardMenu(group, followed, queued, status) {
 	const count = group.history.length;
+	const mark = status === "complete" ? "in-progress" : "complete";
 	if (count < 2) return renderMenu({
 		id: group.latest.id,
 		scope: "review",
 		label: `Actions for ${followed}`,
 		action: "Delete review",
 		question: "Delete this review?",
-		copy: "Copy review ID"
+		copy: "Copy review ID",
+		queue: queued ? "remove" : "add",
+		mark
 	});
 	const all = `all ${count} reviews following ${followed}`;
 	return renderMenu({
@@ -4369,6 +4628,8 @@ function renderCardMenu(group, followed) {
 		label: `Actions for ${followed}`,
 		action: `Delete ${all}`,
 		question: `Delete ${all}?`,
+		queue: queued ? "remove" : "add",
+		mark,
 		copy: "Copy latest review ID"
 	});
 }
@@ -4387,10 +4648,14 @@ function renderCardMenu(group, followed) {
 */
 function renderMenu(item) {
 	const id = escapeHtml$1(item.id);
+	const markItem = item.mark === void 0 ? "" : `<button type="button" class="prb-menu-item" data-mark-status="${item.mark}" data-mark-id="${id}">${markItemLabel(item.mark)}</button>`;
+	const queueItem = item.queue === void 0 ? "" : `<button type="button" class="prb-menu-item" data-queue-action="${item.queue}" data-queue-id="${id}">${item.queue === "remove" ? "Remove from review queue" : "Add to review queue"}</button>`;
 	return `<div class="prb-menu" data-menu>
     <button type="button" class="prb-menu-trigger" data-menu-trigger aria-expanded="false" aria-haspopup="true" aria-label="${escapeHtml$1(item.label)}">&#8943;</button>
     <div class="prb-menu-panel" data-menu-panel hidden>
       <div data-menu-items>
+        ${markItem}
+        ${queueItem}
         <button type="button" class="prb-menu-item" data-copy-id="${id}">${escapeHtml$1(item.copy)}</button>
         <button type="button" class="prb-menu-item prb-menu-item-danger" data-delete="${id}" data-scope="${item.scope}">${escapeHtml$1(item.action)}</button>
       </div>
@@ -4481,7 +4746,7 @@ function renderHistoryRow(review, number, latest, now) {
 */
 function renderAnalysisState(analysis) {
 	if (analysis === void 0) return "";
-	if (analysis.phase === "failed") return "<span class=\"prb-card-analysis\" data-analysis=\"stopped\">Analysis stopped</span>";
+	if (analysis.phase === "failed") return analysis.stopped ? "<span class=\"prb-card-analysis\" data-analysis=\"stopped\">Analysis stopped</span>" : "<span class=\"prb-card-analysis\" data-analysis=\"failed\">Analysis failed</span>";
 	return `<span class="prb-card-analysis" data-analysis="running"><i></i>${escapeHtml$1(phasesFor({ purpose: analysis.purpose })[analysis.phase].doing)}</span>`;
 }
 /**
@@ -4916,9 +5181,11 @@ function analysisStates(now = Date.now(), jobs = allJobs()) {
 			});
 			continue;
 		}
-		if (jobs.filter((job) => isTerminal(job) && purposeOf(job) === "review").sort(endedLast)[0]?.phase === "failed") states.set(reviewId, {
+		const ended = jobs.filter((job) => isTerminal(job) && purposeOf(job) === "review").sort(endedLast);
+		if (ended[0]?.phase === "failed") states.set(reviewId, {
 			phase: "failed",
-			purpose: "review"
+			purpose: "review",
+			...ended[0].failure?.stopped ? { stopped: true } : {}
 		});
 	}
 	return states;
@@ -4936,8 +5203,9 @@ function reviewsRevision(live = analysisStates()) {
 	for (const [id, revision] of workspaceStamps()) hash.update(`${id}:${revision}\n`);
 	for (const id of [...live.keys()].sort()) {
 		const state = live.get(id);
-		hash.update(`${id}@${state.purpose}:${state.phase}\n`);
+		hash.update(`${id}@${state.purpose}:${state.phase}${state.stopped ? ":stopped" : ""}\n`);
 	}
+	hash.update(`queue:${queueStamp()}\n`);
 	return hash.digest("base64url");
 }
 //#endregion
@@ -4979,6 +5247,7 @@ var AskFailedError = class extends Error {};
 async function askAboutChange(workspace, question, sectionId, signal) {
 	const cwd = await askCheckout(workspace);
 	const env = agentEnvOf(workspace);
+	const requestedModel = resolveModel({ review: { session: workspace.session } }) ?? void 0;
 	try {
 		return extractAnswer(await withUsageRecorded(workspace.id, "ask", env, (onUsage) => agentFor(env).run({
 			capability: "read-code",
@@ -4986,10 +5255,11 @@ async function askAboutChange(workspace, question, sectionId, signal) {
 			cwd,
 			originRepoPath: workspace.repoPath,
 			env,
+			...requestedModel ? { requestedModel } : {},
 			timeoutMs: ASK_TIMEOUT_MS,
 			signal,
 			onUsage
-		})));
+		}), void 0, requestedModel));
 	} catch (error) {
 		if (error instanceof AgentUnavailableError) throw new AskUnavailableError(`${error.message} It is what this review was made with, so the assistant cannot answer.`);
 		throw explained(error, env);
@@ -5064,6 +5334,86 @@ function buildPrompt$1(workspace, question, sectionId, cwd) {
 	].join("\n");
 }
 //#endregion
+//#region ../../packages/review-harness/src/workspace/assistant_runs.ts
+var RUN_KINDS = ["ask", "diagram"];
+var runs = /* @__PURE__ */ new Map();
+function keyOf(workspaceId, kind) {
+	return `${workspaceId}:${kind}`;
+}
+/**
+* Start a run, or learn that one is already going.
+*
+* One call rather than a check followed by a start, so there is no gap between them for a second
+* request to fall through. The existing run comes back rather than a bare refusal because the
+* caller's next move is to show it, not to report an error.
+*
+* A stopped run gives up its place at once, though its handler may still be unwinding. Stop is
+* over for the reviewer when it answers, and the page reopens Ask then. A stopped run can keep
+* nothing, and `endRun` leaves a newer run alone, so the two cannot collide. An answered run still
+* holds its place until it is saved, or the next question would be asked without it.
+*/
+function beginRun(workspaceId, kind, detail, now = Date.now()) {
+	const key = keyOf(workspaceId, kind);
+	const existing = runs.get(key);
+	if (existing && existing.state !== "stopped") return { alreadyRunning: existing };
+	const controller = new AbortController();
+	const run = {
+		workspaceId,
+		kind,
+		question: detail.question ?? null,
+		sectionId: detail.sectionId,
+		startedAt: now,
+		signal: controller.signal,
+		state: "running",
+		controller
+	};
+	runs.set(key, run);
+	return { run };
+}
+/** Null for a stopped run as well: it is over for the page, whatever its handler is still doing. */
+function reportRun(workspaceId, kind) {
+	const run = runs.get(keyOf(workspaceId, kind));
+	if (!run || run.state === "stopped") return null;
+	return {
+		question: run.question,
+		sectionId: run.sectionId,
+		startedAt: run.startedAt
+	};
+}
+/**
+* The reviewer pressed Stop.
+*
+* Idempotent: a second press, a press after the answer landed, and a press with nothing running are
+* all harmless and all answer false. True only when this call is the one that stopped the run.
+*/
+function stopRun(workspaceId, kind) {
+	const run = runs.get(keyOf(workspaceId, kind));
+	if (!run || run.state !== "running") return false;
+	run.state = "stopped";
+	run.controller.abort();
+	return true;
+}
+/**
+* The agent answered. Call this in the same continuation that received the answer, before anything
+* else is awaited, so a Stop handled in between cannot slip ahead of an answer that had already won.
+*
+* False when Stop got there first, and then the answer must not be kept however complete it is.
+*/
+function completeRun(run) {
+	const held = run;
+	if (held.state !== "running") return false;
+	held.state = "completed";
+	return true;
+}
+/**
+* The run is over, whichever way. Removes this run and only this one: by the time a slow handler
+* gets here a newer run of the same kind may have begun, and it is not this handler's to end.
+*/
+function endRun(run) {
+	const key = keyOf(run.workspaceId, run.kind);
+	if (runs.get(key) === run) runs.delete(key);
+}
+//#endregion
 //#region ../../packages/review-harness/src/workspace/diagram.ts
 /** The same budget a question gets. Drawing is reading, and reading is what takes the time. */
 var DIAGRAM_TIMEOUT_MS = 18e4;
@@ -5120,6 +5470,7 @@ flowchart LR
 async function drawDiagram(workspace, sectionId, signal) {
 	const cwd = await askCheckout(workspace);
 	const env = agentEnvOf(workspace);
+	const requestedModel = resolveModel({ review: { session: workspace.session } }) ?? void 0;
 	let raw;
 	try {
 		raw = await withUsageRecorded(workspace.id, "diagram", env, (onUsage) => agentFor(env).run({
@@ -5128,10 +5479,11 @@ async function drawDiagram(workspace, sectionId, signal) {
 			cwd,
 			originRepoPath: workspace.repoPath,
 			env,
+			...requestedModel ? { requestedModel } : {},
 			timeoutMs: DIAGRAM_TIMEOUT_MS,
 			signal,
 			onUsage
-		}));
+		}), void 0, requestedModel);
 	} catch (error) {
 		if (error instanceof AgentUnavailableError) throw new DiagramUnavailableError(`${error.message} It is what this review was made with, so nothing can be drawn.`);
 		throw error;
@@ -5682,6 +6034,7 @@ async function handle(req, res, options) {
 	if (url.pathname === "/open") return handleOpen(req, res, url.searchParams, options.indexToken);
 	if (url.pathname === "/settings") return void handleSettings(req, res, url.searchParams, options.indexToken);
 	if (url.pathname === "/pin") return handlePin(req, res, options.indexToken);
+	if (url.pathname === "/queue") return handleQueue(req, res, options.indexToken);
 	if (url.pathname === "/delete") return handleDelete(req, res, options.indexToken);
 	if (url.pathname === "/status") return handleStatus(req, res, options.indexToken);
 	if (url.pathname === "/revision") return handleRevision(req, res, options.indexToken);
@@ -5704,8 +6057,10 @@ async function handle(req, res, options) {
 	if (action === "/file") return void sendFile(res, workspace, url.searchParams);
 	if (action === "/ask") return handleAsk(req, res, workspace);
 	if (action === "/diagram") return handleDiagram(req, res, workspace);
+	if (action === "/stop") return handleStop(req, res, workspace);
 	if (action === "/kiss") return handleKiss(req, res, workspace);
 	if (action === "/state") return handleState(req, res, workspace);
+	if (action === "/delete") return handleDeleteOwn(req, res, workspace);
 	if (action === "/event") return handleEvent(req, res, workspace);
 	if (action === "/prefs") return handlePrefs(req, res);
 	if (action === "/prompts") return handlePrompts(req, res);
@@ -5768,8 +6123,14 @@ function handleIndex(req, res, params, indexToken) {
 	const cookie = indexCookieHeader(indexToken);
 	if (onward) return redirect(res, onward, cookie);
 	const states = analysisStates();
+	const queue = readQueue();
+	const kept = new Set(queue);
+	for (const review of recentWorkspaces(Number.MAX_SAFE_INTEGER)) if (review.pinned) kept.add(review.id);
+	const groups = indexReviewGroups(MAX_LISTED_BRANCHES, MAX_KEPT_BRANCHES, kept);
+	const rendered = new Set(groups.flatMap((group) => group.history.map((review) => review.id)));
 	sendHtml(res, 200, renderReviewsPage({
-		groups: recentReviewGroups(MAX_LISTED_BRANCHES),
+		groups,
+		queue: queue.filter((id) => rendered.has(id)),
 		analyses: states,
 		revision: reviewsRevision(states)
 	}), cookie);
@@ -5922,6 +6283,7 @@ async function handleStatus(req, res, indexToken) {
 		workspace.completedAt = complete ? now : void 0;
 		if (!complete) workspace.lastViewedAt = workspace.lastViewedAt ?? now;
 		saveWorkspace(workspace);
+		dequeueOnComplete(id, complete);
 		changed += 1;
 	}
 	send(res, 200, {
@@ -5975,6 +6337,32 @@ async function handlePin(req, res, indexToken) {
 	send(res, 200, { ok: true });
 }
 /**
+* Adding to and taking out of the working set.
+*
+* The index cookie for the same reason as `handlePin` above: this is the list acting on itself, and
+* a review's own token must not be able to rearrange the other reviews around it.
+*
+* The answer carries the queue **as stored**, which is not always the queue the page asked for --
+* the cap applies, duplicates collapse, and a review somebody deleted in another tab drops out on
+* the next write. The browser paints from this rather than from its own optimism, which is the one
+* thing that keeps a pill claiming "Queue 4" honest.
+*
+* An unrecognised action is a 400 rather than a no-op 200. A route that silently accepts a word it
+* does not implement is how a later `top` appears to work while doing nothing.
+*/
+async function handleQueue(req, res, indexToken) {
+	if (!indexToken || !secretMatches(indexToken, indexCookie(req))) return send(res, 403, { error: "Not authorised." });
+	const body = await readJson(req);
+	const id = typeof body?.id === "string" ? body.id : null;
+	const action = body?.action;
+	if (action !== "add" && action !== "remove") return send(res, 400, { error: "Unknown queue action." });
+	if (!id || !loadWorkspace(id)) return send(res, 404, { error: "No such review" });
+	const stored = action === "add" ? queueAdd(id) : queueRemove(id);
+	if (stored === null) return send(res, 500, { error: "The queue could not be saved." });
+	const live = stored.filter((queued) => loadWorkspace(queued) !== null);
+	send(res, 200, { queue: live.length === stored.length ? stored : writeQueue(live) ?? stored });
+}
+/**
 * Delete one review, or everything on one card.
 *
 * Authorised the same way pinning is, and for the same reason: this is the list acting on itself,
@@ -6002,7 +6390,35 @@ async function handleDelete(req, res, indexToken) {
 	const live = (wholeCard ? lineageIds(id) : [id]).flatMap((each) => liveJobsFor(each));
 	if (live.length > 0) return send(res, 409, { error: stillRunning(live.map((one) => one.job.target.branch)) });
 	const report = wholeCard ? await deleteLineage(id) : await deleteReview(id);
-	if (wasBlocked(report)) return send(res, 409, { error: report.live.length > 0 ? stillRunning(report.live.map((one) => one.job.target.branch)) : "This review is being worked on right now, so nothing was deleted. Try again in a moment." });
+	if (wasBlocked(report)) return send(res, 409, { error: blockedSentence(report) });
+	send(res, 200, {
+		ok: true,
+		deleted: report.deleted.length,
+		refusals: report.refusals
+	});
+}
+/** Why a deletion that was allowed to start still removed nothing. */
+function blockedSentence(report) {
+	return report.live.length > 0 ? stillRunning(report.live.map((one) => one.job.target.branch)) : "This review is being worked on right now, so nothing was deleted. Try again in a moment.";
+}
+/**
+* Delete the review a workspace page is showing, from that page.
+*
+* The review's own token rather than the index credential. A page opened from a terminal link has
+* never been shown the list and so holds no index cookie, and this token already writes the review's
+* state. Deleting it is the same authority over the same one record, and it reaches no other review.
+*
+* Only this review, never its card. A page showing one analysis does not get to decide the fate of
+* the others in its lineage; the list is where a whole branch is deleted.
+*
+* POST only, because it is the one route under `/api/` that destroys something.
+*/
+async function handleDeleteOwn(req, res, workspace) {
+	if (req.method !== "POST") return send(res, 405, { error: "Deleting a review needs a POST." });
+	const live = liveJobsFor(workspace.id);
+	if (live.length > 0) return send(res, 409, { error: stillRunning(live.map((one) => one.job.target.branch)) });
+	const report = await deleteReview(workspace.id);
+	if (wasBlocked(report)) return send(res, 409, { error: blockedSentence(report) });
 	send(res, 200, {
 		ok: true,
 		deleted: report.deleted.length,
@@ -6041,7 +6457,7 @@ async function deleteCards(ids) {
 		if (wasBlocked(report)) {
 			blocked.push({
 				id,
-				error: report.live.length > 0 ? stillRunning(report.live.map((one) => one.job.target.branch)) : "This review is being worked on right now, so nothing was deleted. Try again in a moment."
+				error: blockedSentence(report)
 			});
 			continue;
 		}
@@ -6094,6 +6510,15 @@ function indexCookie(req) {
 /** Branches, not reviews: a branch reviewed five times is one card and must not cost five slots. */
 var MAX_LISTED_BRANCHES = 50;
 /**
+* How many branches the reviewer's own working set may add on top of the recency window.
+*
+* Its own constant rather than a second use of the one above, because the two bound different
+* things and sharing a name would imply a ceiling the page does not have: what it lists is at most
+* these two added together. Saved and Queue exist to defeat recency, so they cannot be made to
+* compete for its slots -- saving eleven reviews must not push eleven recent ones off the page.
+*/
+var MAX_KEPT_BRANCHES = 50;
+/**
 * A finished review's workspace was served.
 *
 * **This counts page serves, not people and not sessions.** A reload, a restored tab, the CLI
@@ -6162,6 +6587,8 @@ async function sendWorkspacePage(res, workspace) {
 		repoPath: workspace.repoPath,
 		askWidth: readPreferences().askWidth,
 		transcript: workspace.transcript,
+		pendingAsk: reportRun(workspace.id, "ask"),
+		pendingDiagram: reportRun(workspace.id, "diagram"),
 		prompts: readPromptBank(),
 		complete: workspace.completedAt !== void 0,
 		prContext: workspace.prContext ? {
@@ -6265,7 +6692,9 @@ function jobReport(workspace) {
 	return {
 		...jobStatus(workspace.jobId ? loadJob(workspace.jobId) : null),
 		kiss: jobStatus(kissRun ? loadJob(kissRun.jobId) : null),
-		update: jobStatus(liveUpdateFor(workspace.id))
+		update: jobStatus(liveUpdateFor(workspace.id)),
+		ask: reportRun(workspace.id, "ask"),
+		diagram: reportRun(workspace.id, "diagram")
 	};
 }
 /**
@@ -6474,6 +6903,15 @@ async function handleAsk(req, res, workspace) {
 	const question = typeof body?.question === "string" ? body.question.trim() : "";
 	if (!question) return send(res, 400, { error: "No question given." });
 	const sectionId = typeof body?.sectionId === "string" ? body.sectionId : null;
+	const started = beginRun(workspace.id, "ask", {
+		question,
+		sectionId
+	});
+	if ("alreadyRunning" in started) return send(res, 409, {
+		error: "Buddy AI is still answering the last question on this review.",
+		running: true
+	});
+	const run = started.run;
 	record({
 		event: "assistant_question_asked",
 		reviewId: workspace.id,
@@ -6481,40 +6919,64 @@ async function handleAsk(req, res, workspace) {
 		scoped: sectionId !== null,
 		turn: workspace.transcript.length + 1
 	});
-	const cancel = new AbortController();
-	res.on("close", () => {
-		if (!res.writableEnded) cancel.abort();
-	});
 	const startedAt = Date.now();
-	let answer;
+	const failed = () => record({
+		event: "assistant_answered",
+		reviewId: workspace.id,
+		durationMs: Date.now() - startedAt,
+		ok: false,
+		...run.state === "stopped" ? { cancelled: true } : {}
+	});
 	try {
-		answer = await askAboutChange(workspace, question, sectionId, cancel.signal);
-	} catch (error) {
-		const cancelled = error instanceof AgentCancelledError;
+		let answer;
+		try {
+			answer = await askAboutChange(workspace, question, sectionId, run.signal);
+		} catch (error) {
+			failed();
+			if (run.state === "stopped") return sendIfOpen(res, 200, { stopped: true });
+			throw error;
+		}
+		if (!completeRun(run)) {
+			failed();
+			return sendIfOpen(res, 200, { stopped: true });
+		}
 		record({
 			event: "assistant_answered",
 			reviewId: workspace.id,
 			durationMs: Date.now() - startedAt,
-			ok: false,
-			...cancelled ? { cancelled: true } : {}
+			ok: true
 		});
-		if (cancelled) return;
-		throw error;
+		const fresh = loadWorkspace(workspace.id);
+		if (fresh) {
+			fresh.transcript.push({
+				question,
+				answer,
+				sectionId,
+				askedAt: Date.now()
+			});
+			saveWorkspace(fresh);
+		}
+		sendIfOpen(res, 200, { answer });
+	} finally {
+		endRun(run);
 	}
-	record({
-		event: "assistant_answered",
-		reviewId: workspace.id,
-		durationMs: Date.now() - startedAt,
-		ok: true
-	});
-	workspace.transcript.push({
-		question,
-		answer,
-		sectionId,
-		askedAt: Date.now()
-	});
-	saveWorkspace(workspace);
-	send(res, 200, { answer });
+}
+/** Only while somebody is listening. A page that left took its socket with it. */
+function sendIfOpen(res, status, body) {
+	if (res.writableEnded || res.destroyed) return;
+	send(res, status, body);
+}
+/**
+* The reviewer pressed Stop, on this page or on another one showing the same review.
+*
+* The only way a question or a drawing ends early. Idempotent, so a double press and a press that
+* lands as the answer does are both harmless: the run decides once which of the two won.
+*/
+async function handleStop(req, res, workspace) {
+	const body = await readJson(req);
+	const kind = RUN_KINDS.find((candidate) => candidate === body?.kind);
+	if (!kind) return send(res, 400, { error: "Say what to stop: the question or the drawing." });
+	send(res, 200, { stopped: stopRun(workspace.id, kind) });
 }
 /**
 * Draw the change, or one theme of it, and keep the drawing.
@@ -6528,46 +6990,60 @@ async function handleDiagram(req, res, workspace) {
 	const body = await readJson(req);
 	const sectionId = typeof body?.sectionId === "string" ? body.sectionId : null;
 	const scope = sectionId ?? "change";
-	const existing = (workspace.diagrams ?? []).findIndex((diagram) => diagram.scope === scope);
+	const redraw = (workspace.diagrams ?? []).some((diagram) => diagram.scope === scope);
+	const started = beginRun(workspace.id, "diagram", { sectionId });
+	if ("alreadyRunning" in started) return send(res, 409, {
+		error: "A diagram of this review is already being drawn.",
+		running: true
+	});
+	const run = started.run;
 	record({
 		event: "diagram_requested",
 		reviewId: workspace.id,
 		scoped: sectionId !== null,
-		redraw: existing !== -1
-	});
-	const cancel = new AbortController();
-	res.on("close", () => {
-		if (!res.writableEnded) cancel.abort();
+		redraw
 	});
 	const startedAt = Date.now();
-	let diagram;
+	const failed = () => record({
+		event: "diagram_drawn",
+		reviewId: workspace.id,
+		durationMs: Date.now() - startedAt,
+		ok: false,
+		...run.state === "stopped" ? { cancelled: true } : {}
+	});
 	try {
-		diagram = await drawDiagram(workspace, sectionId, cancel.signal);
-	} catch (error) {
-		const cancelled = error instanceof AgentCancelledError;
+		let diagram;
+		try {
+			diagram = await drawDiagram(workspace, sectionId, run.signal);
+		} catch (error) {
+			failed();
+			if (run.state === "stopped") return sendIfOpen(res, 200, { stopped: true });
+			if (error instanceof DiagramUnavailableError || error instanceof DiagramMalformedError) return sendIfOpen(res, 502, { error: error.message });
+			throw error;
+		}
+		if (!completeRun(run)) {
+			failed();
+			return sendIfOpen(res, 200, { stopped: true });
+		}
 		record({
 			event: "diagram_drawn",
 			reviewId: workspace.id,
 			durationMs: Date.now() - startedAt,
-			ok: false,
-			...cancelled ? { cancelled: true } : {}
+			ok: true
 		});
-		if (cancelled) return;
-		if (error instanceof DiagramUnavailableError || error instanceof DiagramMalformedError) return send(res, 502, { error: error.message });
-		throw error;
+		const fresh = loadWorkspace(workspace.id);
+		if (fresh) {
+			const diagrams = [...fresh.diagrams ?? []];
+			const existing = diagrams.findIndex((one) => one.scope === scope);
+			if (existing === -1) diagrams.push(diagram);
+			else diagrams[existing] = diagram;
+			fresh.diagrams = diagrams;
+			saveWorkspace(fresh);
+		}
+		sendIfOpen(res, 200, { diagram });
+	} finally {
+		endRun(run);
 	}
-	record({
-		event: "diagram_drawn",
-		reviewId: workspace.id,
-		durationMs: Date.now() - startedAt,
-		ok: true
-	});
-	const diagrams = [...workspace.diagrams ?? []];
-	if (existing === -1) diagrams.push(diagram);
-	else diagrams[existing] = diagram;
-	workspace.diagrams = diagrams;
-	saveWorkspace(workspace);
-	send(res, 200, { diagram });
 }
 /**
 * Stop serving, at the request of a workspace.
@@ -6631,6 +7107,7 @@ async function handleState(req, res, workspace) {
 	}
 	if (typeof body?.complete === "boolean") {
 		workspace.completedAt = body.complete ? Date.now() : void 0;
+		dequeueOnComplete(workspace.id, body.complete);
 		changed = true;
 	}
 	if (changed) saveWorkspace(workspace);