[Tim-Conrad]

Why the change

Tim iterates on texts with agents on the review site, and he could not see what one round changed or publish from there, so the review site now shows each round as marks in the page, takes feedback with papercuts in a local store, and publishes a branch with one Approve click.

Special things to note

• Only the review site changes. No file of SITE in scripts/deploy.sh and no page CSP in the files changed. The review server adds the relay origin to the CSP at serve time only.
• Feedback goes to .papercuts/papercuts.db of the main clone (gitignored, "store": "local" in .github/papercuts.json), never to GitHub issues of this public repo.
• Approve publishes only the commit that Tim saw: the host checks the head again after scripts/check.py, pushes <sha>:refs/heads/<branch> without force, and scripts/ship.sh <pr> <sha> merges with --match-head-commit. The review container gets only the request folder as a writable mount. An agent runs Approve only when Tim says so.

Screenshots

Review bar on a branch with two rounds, 412 px

Before	After

Review bar on a branch with two rounds, 1440 px

Before	After

The bar opened on a phone, 412 px

Before	After

Change outline

The review server learns about git: it serves the worktree of the chosen branch and lists its rounds (commits after the merge base with master).

GET /__review/api/versions?branch=<b>  -> {branch, branches, base: "master", rounds: [{n, sha, subject}], working, gone}
GET /__review/api/text?branch=<b>&rev=<sha|working|master>&path=<url path> -> {html | null}
GET /__review/reload?branch=<b>        -> SSE stamp of that worktree (files + HEAD sha)
POST /__review/api/approve {branch, sha}  (header X-T7d-Review) -> writes .review/approve/request.json
GET  /__review/api/approve             -> .review/approve-status/status.json

Files and their jobs:

  scripts/review/
+   gitread.py          worktrees, rounds, dirty, show; no shell, --end-of-options
~   devserver.py        branch choice (?branch / cookie / main), versions, text, approve API,
~                       papercuts tag + CSP origin; notes API removed; hidden and symlink paths refused
+   textdiff.js         visible-text blocks, Myers word diff, block pairing with a word filter
~   review.js / .css    the bar: branch, from, to, Show changes, Approve; compact on phones
+   approve.py          request from the page or an agent
+   approve-host.sh     host side: check, push the sha, PR, ship.sh <pr> <sha>, clean up
+   approve-install.sh  systemd user path unit
-   show.py             (note screenshots, no notes any more)
~ scripts/ship.sh       optional <sha> -> gh pr merge --match-head-commit
~ docker-compose.dev.yml  git in the image, worktrees mount, relay container in local mode
+ .github/papercuts.json  "store": "local"

Approve, from click to t7d.dev:

page click -> server: sha == head == newest round? -> request.json (atomic, one at a time)
host path unit -> approve-host.sh
  move request away (regular file, max 4 KiB) -> head == sha? -> worktree clean?
  -> scripts/check.py -> head == sha and clean again?
  -> merged PR with this sha? yes: ship only | no: push <sha>, PR (base master)
  -> ship.sh <pr> <sha> -> remove worktree and branch -> status done

Tests: 72 unit tests, 12 node tests, scripts/check.py 0 problems, and check_review.py (browser check at 1440, 390 and 320 px, light and dark) all pass. An end-to-end run on a dev copy of the stack covered two rounds, the marks, one papercut into the local store, and Approve with a fake ship against a local bare origin.

🤖 Generated with Claude Code

https://claude.ai/code/session_01KFxuEteUiyeGMzLJ2VGnGc