prreviewbuddy 0.34.0 → 0.36.4

package/dist/server.js

@@ -1,4 +1,4 @@
-import { $ as feedbackUrl, $t as reviewerDispositions, A as markRead, At as loadWorkspace, Bt as workspaceRevision, C as recordTelemetryUploadConsent, Ct as isClaimed, D as headline, Dt as latestKissRun, E as eventName, Et as indexReviewGroups, F as EXPLAIN_SIMPLY_PROMPT, Ft as reviewedCommit, Gt as queueStamp, H as readIndexToken, Ht as dequeueOnComplete, I as ReviewBeingDeletedError, Jt as doneVerb, K as readServerRecord, Kt as readQueue, L as MANAGED_ROOT, Lt as saveWorkspace, M as readNotification, N as unreadCount$1, Nt as previousKissResult, O as listNotifications, P as withUsageRecorded, Pt as recentWorkspaces, Qt as questionsOutstanding, R as readMarker, S as record, T as announceJob, Ut as queueAdd, V as relativeTime$1, Vt as workspaceStamps, W as clearServerRecord, Wt as queueRemove, X as writeServerRecord, Xt as isQuestionOutstanding, Yt as isIssueOutstanding, Z as BUILD_VERSION, Zt as issuesOutstanding, _ as startKissJob, _n as AgentCancelledError, a as wasBlocked, at as statedWorkspacePort, bt as purposeOf, c as updateReview, cn as readAgentPreference, ct as fillFileUrlTemplate, d as askCheckout, dn as STORE_ROOT, dt as allJobs, en as processDiscussion, et as DEFAULT_WORKSPACE_PORT, f as UpdateAlreadyRunningError, fn as AGENT_IDS, ft as endedAt, gt as saveJob, h as agentEnvOf, hn as agentFor, ht as loadJob, i as liveJobsFor, in as git, it as resolveWorkspacePort, j as pruneNotifications, k as markAllRead, kt as lineagePosition, l as refreshPrContext, ln as writeAgentPreference, lt as checkCodeFreshness, mt as isTerminal, n as deleteReview, nt as MIN_WORKSPACE_PORT, o as discardJob, on as resolveModel, ot as writePortPreference, p as liveUpdateFor, pt as fail, qt as writeQueue, r as lineageIds, rt as parseWorkspacePort, s as RefreshUnavailableError, sn as clearAgentPreference, t as deleteLineage, tn as describeAuthorship, tt as MAX_WORKSPACE_PORT, u as isUnchanged, ut as checkReview, vn as AgentUnavailableError, vt as phasesFor, w as telemetryUploadConsent, wt as followedRefName, x as readEvents, y as runJob, yt as progressSteps, z as removeWorktree, zt as touchWorkspace } from "./delete_review-TNIFNct3.js";
+import { $ as BUILD_VERSION, $t as issuesOutstanding, A as markRead, C as recordTelemetryUploadConsent, D as headline, E as eventName, Et as followedRefName, F as EXPLAIN_SIMPLY_PROMPT, Ft as previousKissResult, Gt as queueAdd, H as readIndexToken, Ht as workspaceRevision, I as ReviewBeingDeletedError, It as recentWorkspaces, J as serverEntryExists, Jt as readQueue, K as readServerRecord, Kt as queueRemove, L as MANAGED_ROOT, Lt as reviewedCommit, M as readNotification, Mt as loadWorkspace, N as unreadCount$1, O as listNotifications, Ot as indexReviewGroups, P as withUsageRecorded, Q as writeServerRecord, Qt as isQuestionOutstanding, R as readMarker, S as record, St as purposeOf, T as announceJob, Tt as isClaimed, Ut as workspaceStamps, V as relativeTime$1, Vt as touchWorkspace, W as clearServerRecord, Wt as dequeueOnComplete, Xt as doneVerb, Y as spawnServer, Yt as writeQueue, Zt as isIssueOutstanding, _ as startKissJob, _n as agentFor, _t as loadJob, a as wasBlocked, at as parseWorkspacePort, bn as AgentUnavailableError, bt as phasesFor, c as updateReview, cn as resolveModel, ct as writePortPreference, d as askCheckout, dn as writeAgentPreference, dt as checkCodeFreshness, en as questionsOutstanding, f as UpdateAlreadyRunningError, ft as checkReview, gt as isTerminal, h as agentEnvOf, ht as fail, i as liveJobsFor, it as MIN_WORKSPACE_PORT, j as pruneNotifications, jt as lineagePosition, k as markAllRead, kt as latestKissRun, l as refreshPrContext, ln as clearAgentPreference, mn as AGENT_IDS, mt as endedAt, n as deleteReview, nn as processDiscussion, nt as DEFAULT_WORKSPACE_PORT, o as discardJob, on as git, ot as resolveWorkspacePort, p as liveUpdateFor, pn as STORE_ROOT, pt as allJobs, qt as queueStamp, r as lineageIds, rn as describeAuthorship, rt as MAX_WORKSPACE_PORT, s as RefreshUnavailableError, st as statedWorkspacePort, t as deleteLineage, tn as reviewerDispositions, tt as feedbackUrl, u as isUnchanged, un as readAgentPreference, ut as fillFileUrlTemplate, vt as saveJob, w as telemetryUploadConsent, x as readEvents, xt as progressSteps, y as runJob, yn as AgentCancelledError, z as removeWorktree, zt as saveWorkspace } from "./delete_review-Kup1LXD_.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { createHash, timingSafeEqual } from "node:crypto";
@@ -253,7 +253,8 @@ var PATHS = {
 	notifications: "<path d=\"M18 8a6 6 0 0 0-12 0c0 7-3 9-3 9h18s-3-2-3-9\"/><path d=\"M13.7 21a2 2 0 0 1-3.4 0\"/>",
 	settings: "<circle cx=\"12\" cy=\"12\" r=\"3\"/><path d=\"M19.4 15a1.7 1.7 0 0 0 .3 1.8l.1.1a2 2 0 1 1-2.8 2.8l-.1-.1a1.7 1.7 0 0 0-1.8-.3 1.7 1.7 0 0 0-1 1.5V21a2 2 0 1 1-4 0v-.1a1.7 1.7 0 0 0-1.1-1.5 1.7 1.7 0 0 0-1.8.3l-.1.1a2 2 0 1 1-2.8-2.8l.1-.1a1.7 1.7 0 0 0 .3-1.8 1.7 1.7 0 0 0-1.5-1H3a2 2 0 1 1 0-4h.1a1.7 1.7 0 0 0 1.5-1.1 1.7 1.7 0 0 0-.3-1.8l-.1-.1a2 2 0 1 1 2.8-2.8l.1.1a1.7 1.7 0 0 0 1.8.3H9a1.7 1.7 0 0 0 1-1.5V3a2 2 0 1 1 4 0v.1a1.7 1.7 0 0 0 1 1.5 1.7 1.7 0 0 0 1.8-.3l.1-.1a2 2 0 1 1 2.8 2.8l-.1.1a1.7 1.7 0 0 0-.3 1.8V9a1.7 1.7 0 0 0 1.5 1H21a2 2 0 1 1 0 4h-.1a1.7 1.7 0 0 0-1.5 1z\"/>",
 	feedback: "<path d=\"m22 2-7 20-4-9-9-4z\"/><path d=\"M22 2 11 13\"/>",
-	stop: "<path d=\"M12 2v10\"/><path d=\"M18.4 6.6a9 9 0 1 1-12.8 0\"/>"
+	stop: "<path d=\"M12 2v10\"/><path d=\"M18.4 6.6a9 9 0 1 1-12.8 0\"/>",
+	restart: "<path d=\"M21 12a9 9 0 1 1-2.64-6.36\"/><path d=\"M21 3v6h-6\"/>"
 };
 /** The icon slot for one rail row. Hidden from assistive technology: the label beside it says it. */
 function railIcon(icon) {
@@ -289,6 +290,14 @@ function unreadLabel(unread) {
 	return unread === 0 ? "Nothing unread" : `${unread} unread`;
 }
 //#endregion
+//#region ../../packages/review-harness/src/workspace/server_status.ts
+/** The dot's accessible name, which is the only form of it a screen reader gets. */
+function serverStatusLabel(status) {
+	if (status === "restarting") return "Workspace server restarting";
+	if (status === "unreachable") return "Workspace server not running";
+	return "Workspace server running";
+}
+//#endregion
 //#region ../../packages/review-harness/src/workspace/workspace_nav.ts
 /**
 * The workspace's own places, and the one model every page draws them from.
@@ -322,10 +331,133 @@ var WORKSPACE_PLACES = [
 * The count beside Notifications. Always rendered, hidden at zero, so the page can reveal it when
 * `/revision` or Mark all read reports a new number. See `client/unread_counts.ts`.
 */
-function unreadCount(unread, style) {
-	const className = style === "rail" ? "prb-rail-count prb-rail-unread" : "prb-unread-badge";
-	const text = unread === 0 ? "" : style === "rail" ? unreadLabel(unread) : String(unread);
-	return `<span class="${className}" data-unread-count data-unread-style="${style}"${unread === 0 ? " hidden" : ""}>${text}</span>`;
+function unreadCount(unread, style, className) {
+	const cls = className ?? (style === "rail" ? "prb-rail-count prb-rail-unread" : "prb-unread-dot");
+	const text = style === "rail" && unread > 0 ? unreadLabel(unread) : "";
+	return `<span class="${cls}" data-unread-count data-unread-style="${style}"${style === "dot" ? " aria-hidden=\"true\"" : ""}${unread === 0 ? " hidden" : ""}>${text}</span>`;
+}
+/**
+* The global strip: the same utility bar above every workspace page, review pages included.
+*
+* It exists because global controls and the current review's identity were sharing one layer, and
+* that layer had run out of room — which is why Notifications had nowhere to live but the foot of
+* the rail, where it was easy to miss. Splitting them gives attention state the top-right corner
+* people already look at.
+*
+* Deliberately thin and deliberately quiet: the wordmark, four icon-sized controls and the build. The bar below
+* it is the one that should read as "this is the thing I am reviewing", so anything that would make
+* this strip compete with it — a fat search field, a row of actions, Settings — belongs in the rail
+* or nowhere. See `shell.css`, `.prb-strip`.
+*
+* The middle is a search slot, laid out in the stylesheet and empty until there is a search behind
+* it. Nothing is rendered there in the meantime: a control that does nothing teaches the reader the
+* page is broken.
+*/
+function renderGlobalBar(options) {
+	const live = options.live ?? true;
+	return `<header class="prb-strip">
+  <span class="prb-wordmark"><b>pr</b>review<b>buddy</b></span>
+  ${live ? renderHeaderNav(options) : ""}
+  ${live ? renderStripReviews(options) : ""}
+  ${live ? renderNotificationsBell(options) : ""}
+  ${live ? renderStripSettings(options) : ""}
+  ${live ? renderStripRestart(options) : ""}
+  ${live ? renderServerStatus() : ""}
+  <p class="prb-build">v${escapeHtml$1(BUILD_VERSION)}</p>
+</header>`;
+}
+/**
+* The bar below the strip: what page this is, and the controls that belong to it.
+*
+* The dominant bar of the composition on every page, as the review's own bar is on a review page.
+* That is the point of the split: the strip is utility chrome and this says what you are looking at.
+*
+* `controls` is the row that page used to draw at the top of its own column — the reviews filters,
+* the Mark all read line — moved up rather than added, so the strip above is the only band the
+* redesign actually costs.
+*/
+function renderContextBar(title, controls = "") {
+	return `<div class="prb-context">
+  <h1 class="prb-page-title">${escapeHtml$1(title)}</h1>
+  ${controls}
+</div>`;
+}
+/**
+* Attention state, where attention state is looked for.
+*
+* Two counts inside one control: the digit the reader sees, capped by `badgeLabel`, and the same
+* fact in words for a screen reader. Both are `data-unread-count`, so `paintUnreadCounts` repaints
+* them from one number — which is why the bell cannot end up saying something the rail contradicts,
+* and why neither needs an `aria-label` that could go stale while the digit moved.
+*
+* A link, not a menu. The bell says something is waiting; the Notifications page is where it is
+* read. Pressing it marks nothing: read state changes only by a deliberate act.
+*/
+function renderNotificationsBell(options) {
+	return `<a class="prb-strip-action prb-bell" href="/notifications"${options.current === "notifications" ? " aria-current=\"true\"" : ""} aria-label="Notifications">
+    ${iconSvg("notifications")}
+    ${unreadCount(options.unread, "dot")}
+    ${unreadCount(options.unread, "rail", "prb-visually-hidden")}
+  </a>`;
+}
+/**
+* The reviews list, first of the places, as the rail orders them.
+*
+* Every workspace place now has an icon here, which is the point: the rail is the only other way to
+* any of them and a narrow window hides it, so from a review page the list a session starts on was
+* one browser Back or nothing. First rather than beside the bell, so the strip reads in the rail's
+* order wherever a reader learned it.
+*/
+function renderStripReviews(options) {
+	return `<a class="prb-strip-action" href="/"${options.current === "reviews" ? " aria-current=\"true\"" : ""} aria-label="Reviews" data-strip-reviews>${iconSvg("reviews")}</a>`;
+}
+/**
+* Settings, as an icon, beside the bell.
+*
+* The controls a reviewer reaches for from anywhere, in the corner they are reached for from. The
+* rail still carries each with its name beside it; these are the shortcut, which is why they are
+* icons and not a second set of labels — and why each carries an `aria-label`, since an icon alone
+* names nothing.
+*/
+function renderStripSettings(options) {
+	return `<a class="prb-strip-action" href="/settings"${options.current === "settings" ? " aria-current=\"true\"" : ""} aria-label="Settings" data-strip-settings>${iconSvg("settings")}</a>`;
+}
+/**
+* Restart: the everyday lifecycle action, and the reason this slot is not Stop server.
+*
+* Restarting is recoverable and needs no terminal — the running server starts its replacement — so
+* it can be a single press with no dialog in front of it. Stopping is a one-way door that only the
+* CLI reopens, which is why it lives on Settings instead.
+*
+* Disabled, with the reason beside it, while this server is making a review: that work runs in the
+* process a restart would end. The note is always rendered and hidden when there is nothing to
+* explain, so a refusal from the server can reveal it without the bar being rebuilt.
+*/
+function renderStripRestart(options) {
+	const driving = options.driving === true;
+	return `<button type="button" class="prb-strip-action" aria-label="Restart server" data-restart${driving ? " disabled" : ""}>${iconSvg("restart")}</button>
+  <span class="prb-strip-note" data-restart-note role="status"${driving ? "" : " hidden"}>${escapeHtml$1(RESTART_WHEN_IDLE)}</span>`;
+}
+/** Said in the strip rather than in a `title`, which this product does not use. */
+var RESTART_WHEN_IDLE = "Restart available when current work finishes";
+/**
+* Whether the workspace server is there, as a dot beside the thing that restarts it.
+*
+* Always `running` when it is rendered, because the server rendering it is the answer: a page being
+* served by a server that is not there cannot happen. What it is *for* is the two states after
+* that — amber while a restart is in flight, red once nothing is answering — which is why it is
+* subtle. It is a health indicator, not a badge.
+*
+* Absent from the offline preview entirely. There is no server behind that page, and a dot claiming
+* one would be the only false thing on it.
+*
+* Its whole visible form is a colour, so its name is a visually-hidden word rather than a `title`:
+* a tooltip is a fact only a mouse can reach, and this product uses none.
+*/
+function renderServerStatus() {
+	return `<span class="prb-server-status" data-server-status="running">
+    <span class="prb-visually-hidden" data-server-status-label>${escapeHtml$1(serverStatusLabel("running"))}</span>
+  </span>`;
 }
 /** The workspace rows, for a rail group. */
 function renderWorkspaceNav(options) {
@@ -335,16 +467,6 @@ function renderWorkspaceNav(options) {
       ${item.place === "notifications" ? unreadCount(options.unread, "rail") : ""}
     </a>`).join("");
 }
-/**
-* Stop server. Operational rather than navigation, and it ends every open review, so it sits apart
-* from the places at the foot of the rail. Pair it with `renderShutdownDialog` on the same page.
-*/
-function renderStopServer() {
-	return `<button type="button" class="prb-rail-item prb-rail-link prb-rail-danger" data-shutdown>
-    ${railIcon("stop")}
-    <span class="prb-rail-label"><span class="prb-rail-title">Stop server</span></span>
-  </button>`;
-}
 function renderShutdownDialog() {
 	return `<dialog class="prb-dialog" data-shutdown-dialog aria-labelledby="prb-shutdown-title">
   <h2 id="prb-shutdown-title">Stop the workspace server?</h2>
@@ -367,22 +489,28 @@ function renderSendFeedback() {
   </a>`;
 }
 /**
-* The whole rail of a workspace page that is not a review: the places at the top, then Send
-* feedback and Stop server at the foot, in the order a review page's rail ends with them.
+* The whole rail of a workspace page that is not a review: the places at the top, then Send feedback
+* at the foot, in the order a review page's rail ends with it.
+*
+* No Stop server. The rail is navigation, and what starts or ends the server is not a place: the
+* strip restarts it and Settings stops it.
 */
 function renderWorkspaceRail(options) {
 	return `<nav class="prb-rail" aria-label="Workspace">
   <div class="prb-rail-group">${renderWorkspaceNav(options)}</div>
   <div class="prb-rail-group prb-rail-foot">${renderSendFeedback()}</div>
-  <div class="prb-rail-group prb-rail-ops">${renderStopServer()}</div>
 </nav>`;
 }
 /**
-* The rail's links in the header, shown only while the rail is hidden by a narrow window. Without it
-* a narrow window would have no way to Notifications, Settings or the feedback form at all.
+* What the rail carries that the strip does not, shown only while a narrow window hides the rail.
+*
+* Which is now the feedback form alone. Every workspace place is an icon in this same strip at
+* every width, so a text link beside one of them would be the same destination twice; before the
+* Reviews icon existed this is where Reviews had to go, and the filter that put it here is gone
+* with the reason for it.
 */
-function renderHeaderNav(options) {
-	return `<nav class="prb-header-nav" aria-label="Workspace">${WORKSPACE_PLACES.map((item) => `<a class="prb-feedback${item.place === "notifications" ? " prb-notifications-link" : ""}" href="${item.href}"${item.place === options.current ? " aria-current=\"true\"" : ""}>${escapeHtml$1(item.label)}${item.place === "notifications" ? unreadCount(options.unread, "badge") : ""}</a>`).join("")}<a class="prb-feedback" href="${escapeHtml$1(feedbackUrl())}" target="_blank" rel="noopener noreferrer">Send feedback</a></nav>`;
+function renderHeaderNav(_options) {
+	return `<nav class="prb-header-nav" aria-label="Workspace"><a class="prb-feedback" href="${escapeHtml$1(feedbackUrl())}" target="_blank" rel="noopener noreferrer">Send feedback</a></nav>`;
 }
 //#endregion
 //#region ../../packages/review-harness/src/domain/utils/file_path.ts
@@ -3622,7 +3750,12 @@ function renderWorkspace(view) {
 <link rel="stylesheet" href="/assets/shell.css">
 </head>
 <body data-api-base="${escapeHtml$1(view.apiBase)}"${view.token ? ` data-token="${escapeHtml$1(view.token)}" data-notifications-since="${Date.now()}"` : ""}${view.editor ? ` data-editor-label="${escapeHtml$1(view.editor.label)}" data-editor-template="${escapeHtml$1(view.editor.template)}"` : ""}${view.repoPath ? ` data-repo-path="${escapeHtml$1(view.repoPath)}"` : ""}${view.revision === void 0 ? "" : ` data-workspace-revision="${escapeHtml$1(String(view.revision))}"`} data-session-id="${escapeHtml$1(view.session.id)}" data-explain-prompt="${escapeHtml$1(EXPLAIN_SIMPLY_PROMPT)}" data-way-back="${escapeHtml$1(wayBackSentence())}" data-default-view="${session.result ? "overview" : showsProgress(view) ? "progress" : "kiss"}">
-${renderHeader(view, freshness)}
+${renderGlobalBar({
+		unread: view.unreadNotifications ?? 0,
+		live: Boolean(view.token),
+		driving: view.driving
+	})}
+${renderReviewBar(view, freshness)}
 ${showsProgress(view) ? "" : renderJobState(view.job ?? null)}
 <div class="prb-fresh-region" data-fresh-region${freshness ? ` data-report="${escapeHtml$1(JSON.stringify(freshness))}"` : ""}${view.availability ? ` data-availability="${escapeHtml$1(JSON.stringify(view.availability))}"` : ""}${view.dismissedFreshnessSha ? ` data-dismissed-sha="${escapeHtml$1(view.dismissedFreshnessSha)}"` : ""}>${renderFreshness(freshness ?? null, {
 		dismissedSha: view.dismissedFreshnessSha,
@@ -3633,7 +3766,6 @@ ${renderUpdateProgress(view.updateJob)}
 ${renderUpdateOutcome(view.lastUpdate)}
 ${renderLineageNotice(view)}
 ${renderReviewBody(view, sections)}
-${view.token ? renderShutdownDialog() : ""}
 ${view.token ? renderPromptDialog() : ""}
 <script type="module" src="/assets/workspace.js"><\/script>
 </body>
@@ -3923,13 +4055,19 @@ function renderSubject(changeSet) {
     ${arrow}
     <span>${against}</span>`;
 }
-function renderHeader(view, freshness) {
+/**
+* The review's own bar, below the global strip.
+*
+* Everything here is about this review and nothing else is: the strip above carries the workspace's
+* own controls, which is what makes room for this one to stay about the change. It is deliberately
+* the dominant bar of the two — the reviewer came here for the review, not for the product.
+*/
+function renderReviewBar(view, freshness) {
 	const { changeSet } = view;
 	const additions = changeSet.data.files.reduce((sum, f) => sum + f.additions, 0);
 	const deletions = changeSet.data.files.reduce((sum, f) => sum + f.deletions, 0);
 	const fileCount = changeSet.data.files.length;
-	return `<header class="prb-header">
-  <span class="prb-wordmark"><b>pr</b>review<b>buddy</b></span>
+	return `<div class="prb-header prb-review-bar">
   <span class="prb-change-ref" title="${escapeHtml$1(changeSet.repoPath)}">
     ${changeSet.isLinkedWorktree ? `<span class="prb-checkout">${escapeHtml$1(changeSet.checkoutName)}</span>` : ""}
     ${view.prContext ? `<a class="prb-pr-chip" href="${escapeHtml$1(view.prContext.prContext.pullRequest.url)}" target="_blank" rel="noopener noreferrer" title="${escapeHtml$1(view.prContext.prContext.pullRequest.title ?? "")}">#${view.prContext.prContext.pullRequest.number}</a>` : ""}
@@ -3948,7 +4086,7 @@ function renderHeader(view, freshness) {
     ${view.id ? renderIdMenu(view.id, Boolean(view.token)) : ""}
     ${view.session.result ? "<button type=\"button\" class=\"prb-ask-toggle\" data-ask-toggle aria-expanded=\"false\">Buddy AI</button>" : ""}
   </div>
-</header>`;
+</div>`;
 }
 /**
 * This review's ID, where somebody looking at this review would think to find it.
@@ -4006,10 +4144,6 @@ function renderRailFoot(view) {
 	return `<div class="prb-rail-group prb-rail-foot">
     ${view.token ? renderWorkspaceNav({ unread: view.unreadNotifications ?? 0 }) : ""}
     ${renderSendFeedback()}
-  </div>
-  <div class="prb-rail-group prb-rail-ops">
-    ${view.token ? renderStopServer() : ""}
-    <p class="prb-build">v${escapeHtml$1(BUILD_VERSION)}</p>
   </div>`;
 }
 /**
@@ -4650,24 +4784,18 @@ function renderReviewsPage(view) {
 <link rel="stylesheet" href="/assets/shell.css">
 </head>
 <body class="prb-index-body" data-way-back="${escapeHtml$1(wayBackSentence())}" data-notifications-since="${now}"${view.revision === void 0 ? "" : ` data-index-revision="${escapeHtml$1(view.revision)}"`} data-live="${anythingRunning(view.analyses ?? /* @__PURE__ */ new Map())}">
-<header class="prb-header">
-  <span class="prb-wordmark"><b>pr</b>review<b>buddy</b></span>
-  <span class="prb-page-title">Reviews</span>
-  <div class="prb-header-stats">
-    ${renderHeaderNav({
+${renderGlobalBar({
 		current: "reviews",
-		unread: view.unreadNotifications ?? 0
+		unread: view.unreadNotifications ?? 0,
+		driving: view.driving
 	})}
-    <span class="prb-build">v${escapeHtml$1(BUILD_VERSION)}</span>
-  </div>
-</header>
+${renderContextBar("Reviews", ordered.length === 0 ? "" : renderControls(queue.length, authorOptions(ordered.map((group) => group.latest.authorHandle))))}
 <div class="prb-shell">
 ${renderWorkspaceRail({
 		current: "reviews",
 		unread: view.unreadNotifications ?? 0
 	})}
 <main class="prb-index">
-  ${ordered.length === 0 ? "" : renderControls(queue.length, authorOptions(ordered.map((group) => group.latest.authorHandle)))}
   ${front === void 0 ? "" : renderContinue(front)}
   ${ordered.length === 0 ? "" : `<div class="prb-index-summary">
     <p class="prb-index-count" data-count>${escapeHtml$1(countLabel(storedReviews, ordered.length))}</p>
@@ -4682,7 +4810,6 @@ ${renderWorkspaceRail({
   <p class="prb-index-note">Reviews are kept for thirty days, on this machine only. Saved reviews and anything in your review queue are kept for ninety days instead, counting from the last time you opened them. Every review has a fixed address, so a link to one is worth keeping and still opens after a restart. Stopping the server deletes nothing; it only stops anything being served until the next review starts it again.</p>
 </main>
 </div>
-${renderShutdownDialog()}
 <script src="/assets/reviews.js" type="module"><\/script>
 </body>
 </html>`;
@@ -5234,24 +5361,18 @@ function renderSettingsPage(view) {
 <link rel="stylesheet" href="/assets/shell.css">
 </head>
 <body class="prb-index-body" data-way-back="${escapeHtml$1(wayBackSentence())}" data-notifications-since="${Date.now()}">
-<header class="prb-header">
-  <span class="prb-wordmark"><b>pr</b>review<b>buddy</b></span>
-  <span class="prb-page-title">Settings</span>
-  <div class="prb-header-stats">
-    ${renderHeaderNav({
+${renderGlobalBar({
 		current: "settings",
-		unread: view.unreadNotifications ?? 0
+		unread: view.unreadNotifications ?? 0,
+		driving: view.driving
 	})}
-    <span class="prb-build">v${escapeHtml$1(BUILD_VERSION)}</span>
-  </div>
-</header>
+${renderContextBar("Settings", renderBack())}
 <div class="prb-shell">
 ${renderWorkspaceRail({
 		current: "settings",
 		unread: view.unreadNotifications ?? 0
 	})}
 <main class="prb-index prb-settings">
-  ${renderBack()}
   ${renderWorkspaceSection(settings, address)}
   ${renderReviewsSection(settings)}
   ${renderPrivacySection(settings)}
@@ -5264,6 +5385,8 @@ ${renderWorkspaceRail({
   <p class="prb-index-note">These are kept in <code>~/.prreviewbuddy/config.json</code>, which you can
   edit by hand, and they are the same settings <code>prreviewbuddy config</code> reads and writes.
   Run <code>prreviewbuddy config path</code> to be told where that file is.</p>
+
+  ${renderServerSection()}
 </main>
 </div>
 ${renderShutdownDialog()}
@@ -5287,6 +5410,25 @@ function renderBack() {
 	return `<a class="prb-settings-back" href="/" data-settings-back><span aria-hidden="true">&lsaquo;</span> All reviews</a>`;
 }
 /**
+* Stopping the server, on the one page where stopping it is a decision rather than a stray click.
+*
+* It used to sit at the foot of every rail, one press from ending every open review, beside the
+* places you navigate with. It is the only action in this product the workspace cannot undo — the
+* page it leaves behind has no server to ask for anything — so it says outright what brings it
+* back, and the strip carries Restart instead, which needs no terminal at all.
+*
+* The dialog it opens is rendered once on this page. See `renderShutdownDialog`.
+*/
+function renderServerSection() {
+	return `<section class="prb-settings-section">
+    <h2>Server</h2>
+    <button type="button" class="prb-settings-danger" data-shutdown>Stop server</button>
+    <p class="prb-settings-help">Stops the local PR Review Buddy workspace. Nothing is deleted and
+    every review keeps its address. Start it again with <code>prreviewbuddy open</code>, from any
+    directory. Restarting instead needs no terminal: the button in the bar above does it.</p>
+  </section>`;
+}
+/**
 * The port, and the two answers to "which port" that a save creates.
 *
 * A running workspace keeps the port it started on, so between saving a change and restarting there
@@ -5365,39 +5507,42 @@ function renderNotificationsPage(view) {
 <link rel="stylesheet" href="/assets/shell.css">
 </head>
 <body class="prb-index-body" data-way-back="${escapeHtml$1(wayBackSentence())}">
-<header class="prb-header">
-  <span class="prb-wordmark"><b>pr</b>review<b>buddy</b></span>
-  <span class="prb-page-title">Notifications</span>
-  <div class="prb-header-stats">
-    ${renderHeaderNav({
+${renderGlobalBar({
 		current: "notifications",
-		unread: view.unreadNotifications ?? 0
+		unread: view.unreadNotifications ?? 0,
+		driving: view.driving
 	})}
-    <span class="prb-build">v${escapeHtml$1(BUILD_VERSION)}</span>
-  </div>
-</header>
+${renderContextBar("Notifications", view.notifications.length === 0 ? "" : renderReadAll(unread))}
 <div class="prb-shell">
 ${renderWorkspaceRail({
 		current: "notifications",
 		unread: view.unreadNotifications ?? 0
 	})}
 <main class="prb-index prb-notifications-page">
-  ${view.notifications.length === 0 ? `<p class="prb-index-empty">Nothing yet. When a review finishes or fails, it appears here.</p>` : `<div class="prb-index-summary">
-    <p class="prb-index-count" data-notifications-count role="status" aria-live="polite">${escapeHtml$1(unreadLabel(unread))}</p>
-    <button type="button" class="prb-index-select" data-notifications-read-all${unread === 0 ? " disabled" : ""}>Mark all read</button>
-  </div>
-  <ol class="prb-notifications" data-notifications>
+  ${view.notifications.length === 0 ? `<p class="prb-index-empty">Nothing yet. When a review finishes or fails, it appears here.</p>` : `<ol class="prb-notifications" data-notifications>
     ${view.notifications.map((notification) => renderEntry(notification, view.gone?.has(notification.id) === true)).join("")}
   </ol>`}
   <p class="prb-index-note">Kept for thirty days, on this machine only.</p>
 </main>
 </div>
-${renderShutdownDialog()}
 <script src="/assets/notifications.js" type="module"><\/script>
 </body>
 </html>`;
 }
 /**
+* The unread count and the one act that clears it, in the bar rather than above the list.
+*
+* It belongs beside the page's name because it is about the page: how many are waiting, and the
+* single control that answers all of them at once. A row's own link marks that row read; this marks
+* the rest. Absent entirely when nothing has ever arrived, because there is then nothing to count.
+*/
+function renderReadAll(unread) {
+	return `<div class="prb-context-controls">
+    <p class="prb-index-count" data-notifications-count role="status" aria-live="polite">${escapeHtml$1(unreadLabel(unread))}</p>
+    <button type="button" class="prb-index-select" data-notifications-read-all${unread === 0 ? " disabled" : ""}>Mark all read</button>
+  </div>`;
+}
+/**
 * One event: what happened, then what to, then when. The whole row opens the review and so marks it
 * read, which is why a row has no Mark read of its own. An event, not a card: nothing about the
 * review's findings belongs here.
@@ -5549,6 +5694,32 @@ function reviewsRevision(live = analysisStates()) {
 	return hash.digest("base64url");
 }
 //#endregion
+//#region ../../packages/review-harness/src/workspace/server_work.ts
+/**
+* Whether this server process is driving any review work of its own.
+*
+* A restart ends this process, and `runJob` and `updateReview` run *inside* it when a page asks for
+* them — so a restart during either loses that work. A review driven from a terminal has its own
+* process and is untouched, which is exactly why this is a count kept here rather than a look at
+* the jobs on disk: `/revision`'s `live` is machine-wide, and refusing a restart because somebody
+* else's terminal is busy would be the control lying about what it costs.
+*
+* In memory on purpose. The question is "is this process busy", and a process cannot outlive its
+* own answer, so there is nothing to keep in a file and nothing that can go stale. A restart or a
+* crash resets it to the truth.
+*/
+var driving = 0;
+/** Count one piece of work for as long as it runs, however it ends. */
+function track(work) {
+	driving += 1;
+	return work.finally(() => {
+		driving -= 1;
+	});
+}
+function isDriving() {
+	return driving > 0;
+}
+//#endregion
 //#region ../../packages/review-harness/src/workspace/ask.ts
 /** Long enough for a real look at the repository; short enough that a hang is not forever. */
 var ASK_TIMEOUT_MS = 18e4;
@@ -6367,7 +6538,8 @@ async function handle(req, res, options) {
 	if (url.pathname === "/health") return send(res, 200, {
 		ok: true,
 		version: BUILD_VERSION,
-		assets: ASSETS.size
+		assets: ASSETS.size,
+		startedAt: startedAt$1(options)
 	});
 	if (url.pathname.startsWith("/assets/")) return sendAsset(res, url.pathname);
 	if (url.pathname === "/") return handleIndex(req, res, url.searchParams, options.indexToken);
@@ -6382,6 +6554,7 @@ async function handle(req, res, options) {
 	if (url.pathname === "/status") return handleStatus(req, res, options.indexToken);
 	if (url.pathname === "/revision") return handleRevision(req, res, options.indexToken);
 	if (url.pathname === "/shutdown") return handleIndexShutdown(req, res, options);
+	if (url.pathname === "/restart") return handleIndexRestart(req, res, options);
 	const match = /^\/(?:r|api)\/([0-9a-f-]{36})(\/[a-z]+)?$/.exec(url.pathname);
 	if (!match) return send(res, 404, { error: "Not found" });
 	const [, id, action] = match;
@@ -6408,7 +6581,7 @@ async function handle(req, res, options) {
 	if (action === "/event") return handleEvent(req, res, workspace);
 	if (action === "/prefs") return handlePrefs(req, res);
 	if (action === "/prompts") return handlePrompts(req, res);
-	if (action === "/shutdown") return handleShutdown(res, options);
+	if (action === "/restart") return handleRestart(req, res, options);
 	return send(res, 404, { error: "Not found" });
 }
 /**
@@ -6477,7 +6650,8 @@ function handleIndex(req, res, params, indexToken) {
 		queue: queue.filter((id) => rendered.has(id)),
 		analyses: states,
 		revision: reviewsRevision(states),
-		unreadNotifications: unreadCount$1()
+		unreadNotifications: unreadCount$1(),
+		driving: isDriving()
 	}), cookie);
 }
 /**
@@ -6564,7 +6738,8 @@ async function handleSettings(req, res, params, indexToken) {
 	}
 	sendHtml(res, 200, renderSettingsPage({
 		settings: readSettings(),
-		unreadNotifications: unreadCount$1()
+		unreadNotifications: unreadCount$1(),
+		driving: isDriving()
 	}), indexCookieHeader(indexToken));
 }
 /**
@@ -6646,7 +6821,8 @@ async function handleNotifications(req, res, params, indexToken) {
 	sendHtml(res, 200, renderNotificationsPage({
 		notifications,
 		gone: new Set(notifications.filter((entry) => !loadWorkspace(entry.reviewId)).map((entry) => entry.id)),
-		unreadNotifications: unreadCount$1()
+		unreadNotifications: unreadCount$1(),
+		driving: isDriving()
 	}), indexCookieHeader(indexToken));
 }
 /**
@@ -6732,6 +6908,7 @@ function handleRevision(req, res, indexToken) {
 	send(res, 200, {
 		revision: reviewsRevision(states),
 		live: anythingRunning(states),
+		driving: isDriving(),
 		unread: unreadCount$1()
 	});
 }
@@ -7009,6 +7186,7 @@ async function sendWorkspacePage(res, workspace) {
 		prompts: readPromptBank(),
 		complete: workspace.completedAt !== void 0,
 		unreadNotifications: unreadCount$1(),
+		driving: isDriving(),
 		prContext: workspace.prContext ? {
 			prContext: workspace.prContext,
 			processed: processDiscussion(workspace.prContext.discussion)
@@ -7213,7 +7391,7 @@ async function handleRefreshPr(res, workspace) {
 async function handleUpdate(res, workspace) {
 	let outcome;
 	try {
-		outcome = await updateReview(workspace);
+		outcome = await track(updateReview(workspace));
 	} catch (error) {
 		if (error instanceof UpdateAlreadyRunningError) return send(res, 409, { error: error.message });
 		outcome = {
@@ -7266,7 +7444,7 @@ async function handleRetry(res, workspace) {
 	if (!workspace.jobId) return send(res, 404, { error: "No job for this review." });
 	const job = loadJob(workspace.jobId);
 	if (!job || !isTerminal(job) || isClaimed(job.id)) return send(res, 409, { error: "This review is still being made. Wait for it to finish before retrying." });
-	runJob(workspace.id).catch(() => {});
+	track(runJob(workspace.id)).catch(() => {});
 	send(res, 200, { ok: true });
 }
 /**
@@ -7485,6 +7663,42 @@ function handleIndexShutdown(req, res, options) {
 	if (req.method !== "POST") return send(res, 405, { error: "Stopping the server is a POST." });
 	handleShutdown(res, options);
 }
+/**
+* When this server began, for anyone asking whether it is still the same one.
+*
+* Fixed per process. A server created without being told falls back to when it was created, which
+* is the same answer for every purpose this serves.
+*/
+var CREATED_AT = Date.now();
+function startedAt$1(options) {
+	return options.startedAt ?? CREATED_AT;
+}
+function handleIndexRestart(req, res, options) {
+	if (!options.indexToken || !secretMatches(options.indexToken, indexCookie(req))) return send(res, 403, { error: "Not authorised." });
+	handleRestart(req, res, options);
+}
+/**
+* Restart this server: the everyday, recoverable lifecycle action.
+*
+* Refused while this process is driving review work of its own, because that work runs here and
+* would die with the process. Work driven from a terminal is another process and is none of this
+* one's business — which is why the guard is `isDriving()` and not the machine-wide `live`.
+*
+* The answer goes out before anything happens, like a shutdown's, and carries the `startedAt` the
+* caller is replacing: the page watches `/health` for that number to change, which is the only way
+* from a browser to tell a handover that worked from one that failed and left this server up.
+*/
+function handleRestart(req, res, options) {
+	if (req.method !== "POST") return send(res, 405, { error: "Restarting the server is a POST." });
+	if (isDriving()) return send(res, 409, { error: "This server is making a review right now. Restarting it would end that; it can be restarted when the current work finishes." });
+	const restart = options.onRestart;
+	if (!restart) return send(res, 500, { error: "This server cannot restart itself." });
+	if (!restart()) return send(res, 500, { error: "The workspace server could not start a replacement, so it is still running. Nothing was stopped." });
+	send(res, 200, {
+		ok: true,
+		startedAt: startedAt$1(options)
+	});
+}
 function handleShutdown(res, options) {
 	send(res, 200, { ok: true });
 	const stop = options.onShutdown ?? (() => process.exit(0));
@@ -7781,17 +7995,107 @@ function startSweeping() {
 	timer.unref();
 	return () => clearInterval(timer);
 }
+//#endregion
+//#region ../../packages/review-harness/src/cli/server.ts
+/**
+* The workspace server process.
+*
+* Started detached by `ensureServer` and left running, so a workspace stays usable after the
+* Claude Code session that produced it has closed. One server serves every review; individual
+* reviews are addressed by id and gated by their own token.
+*/
+var indexToken = readIndexToken();
+/** The same budget the launcher gives a server it starts; this is the same start, from here. */
+var RESTART_TIMEOUT_MS = 15e3;
+/**
+* When this process began serving. One value, used by the record and published on `/health`, so a
+* browser watching a restart can tell the replacement from the server it asked to replace.
+*/
+var startedAt = Date.now();
 var server = createWorkspaceServer({
-	indexToken: readIndexToken(),
-	onShutdown: () => process.kill(process.pid, "SIGTERM")
+	indexToken,
+	startedAt,
+	onShutdown: () => process.kill(process.pid, "SIGTERM"),
+	onRestart: beginRestart
 });
+/**
+* Hand this port over to a fresh process, or refuse and stay exactly as we are.
+*
+* The ordering is the whole design, and none of it is interchangeable:
+*
+*   1. Refuse outright if there is nothing to start. A restart that tore this server down and then
+*      failed would leave no server at all and no way back except a terminal — the very thing a
+*      restart button exists to save someone from.
+*   2. `server.close()` first, so the listener is released, then `closeAllConnections()` to cut the
+*      keep-alive sockets a browser is holding. Without the second the close never completes: the
+*      page that asked for the restart is itself the connection keeping it open.
+*   3. Spawn only from inside the close callback. Spawning alongside it would race the replacement
+*      against a port this process still owns, and the loser exits on a bind error.
+*   4. Exit only once the replacement is answering. If it never does, resume listening and put the
+*      record back: a failed restart must be a no-op, not an outage.
+*
+* Deferred by a tick so the 200 reaches the browser before the listener closes.
+*/
+function beginRestart() {
+	if (!serverEntryExists()) return false;
+	setTimeout(handOver, 50).unref();
+	return true;
+}
+function handOver() {
+	stopSweeping();
+	clearServerRecord();
+	server.close(() => void replaceThisProcess());
+	server.closeAllConnections();
+}
+async function replaceThisProcess() {
+	const port = resolveWorkspacePort();
+	spawnServer();
+	if (await waitForReplacement(port)) process.exit(0);
+	server.listen(port, "127.0.0.1", () => {
+		writeServerRecord({
+			pid: process.pid,
+			port,
+			startedAt
+		});
+	});
+	stopSweeping = startSweeping();
+}
+/**
+* The replacement is a different process, so a different `startedAt` is what proves it is there.
+*
+* Deliberately *not* `checkHealth`'s `'ours'`, which means "reports this build's version". The
+* commonest reason to restart at all is that the file on disk is a newer build than this process,
+* and that replacement reports a version this one has never heard of. Waiting for `'ours'` would
+* time out precisely when the restart had worked, and this process would then fight its own
+* successor for the port.
+*
+* A number that is not ours is enough: nothing else on this machine answers `/health` with a
+* `startedAt`, and a foreign server gives us `null`.
+*/
+async function waitForReplacement(port) {
+	const deadline = Date.now() + RESTART_TIMEOUT_MS;
+	while (Date.now() < deadline) {
+		const since = await servingSince(port);
+		if (since !== null && since !== startedAt) return true;
+		await new Promise((resolve) => setTimeout(resolve, 100));
+	}
+	return false;
+}
+async function servingSince(port) {
+	try {
+		const payload = await (await fetch(`http://127.0.0.1:${port}/health`, { signal: AbortSignal.timeout(1e3) })).json();
+		return typeof payload.startedAt === "number" ? payload.startedAt : null;
+	} catch {
+		return null;
+	}
+}
 server.listen(resolveWorkspacePort(), "127.0.0.1", () => {
 	const address = server.address();
 	if (address === null || typeof address === "string") process.exit(1);
 	writeServerRecord({
 		pid: process.pid,
 		port: address.port,
-		startedAt: Date.now()
+		startedAt
 	});
 });
 server.on("error", () => process.exit(1));
@@ -7800,6 +8104,7 @@ for (const signal of ["SIGINT", "SIGTERM"]) process.on(signal, () => {
 	stopSweeping();
 	clearServerRecord();
 	server.close(() => process.exit(0));
+	server.closeAllConnections();
 });
 //#endregion
 export {};