diff --git a/AGENTS.md b/AGENTS.md
index 53d8cd4..2f9b246 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -44,7 +44,12 @@ bun run build:local # binaries + the app for this machine (needs X
| `src/client/codeview.ts`, `mdview.ts`, `diffview.ts` | The three file views; each owns select-all and copy while visible |
| `src/client/term/` | Terminal emulator (`terminal.ts`), renderer, view (input, links, a11y log) |
| `src/client/tree.ts`, `search.ts`, `changes.ts`, `palette.ts` | Sidebar views and the palette (virtualized rows, `aria-activedescendant`); the palette's `pick()` lists anything (File History) and `@` lists symbols |
+| `src/client/navhistory.ts`, `navigation.ts` | Back / Forward: the pure jump list (`NavHistory`) and `Navigation` (injected open/announce/notify, `routeNavZoomKey`); app.ts is glue |
+| `src/client/hidden.ts` | Hidden-character scanner (zero-width, bidi, tag, variation; pure, also imported by the server) |
+| `src/client/unreviewed.ts` | The two unreviewed-file commands and `runUnreviewed`, which announces through the live region; `app.ts` is glue |
| `src/client/symbols.ts`, `reference.ts` | Go to Symbol patterns per language (pure); `path:line` references and their parsing |
+| `src/client/checkpoint.ts`, `src/client/checkpointctl.ts` | Changes since a checkpoint: pure `takeCheckpoint`/`sinceCheckpoint` math, and the controller behind the three Changes checkpoint commands (`app.ts` is glue); client-only, in memory |
+| `src/client/risk.ts` | Risk flags for Changes rows (pure): `riskFlags`, `riskLabel`; hints, never a safety verdict |
| `src/client/styles.css` | All styling; colour tokens at the top, dark and light |
| `test/helpers/fakedom.ts`, `selfake.ts` | Minimal fake DOM for client tests (see limits below) |
| `scripts/shots.ts`, `shots.list.ts`, `demo-repo.ts` | Landing page screenshots: a deterministic demo repo, an isolated server, `packaging/macos/appshot.swift` driving an offscreen WKWebView |
diff --git a/DESIGN.md b/DESIGN.md
index d337e7d..825ff88 100644
--- a/DESIGN.md
+++ b/DESIGN.md
@@ -1082,3 +1082,126 @@ everything under a heavy folder, so a Mac folder could show `main* 1 untracked`
`FileIndex.apply` keeps its own test: its watcher paths can be the heavy folder itself, which must
not restart a build. A nested repository still counts as one untracked folder with no row in
Changes: status cannot tell it from a plain folder, and it does exist.
+
+## 27. Round 18: back and forward navigation
+
+After jumping by `path:line`, Go to Symbol, a search result or a terminal link there was no way back.
+A panel of four (agent-workflow developer, UX/accessibility designer, code-navigation engineer,
+git/security engineer) compared options. B7, a browser-style jump list with Back and Forward, won with
+3 votes and no vetoes. Runners-up: risky-change flags in Changes (2 votes) and a checkpoint diff (2 votes).
+
+The list is `NavHistory` (`navhistory.ts`, pure): a capped list (100) with a current index; jumps within
+10 lines of the current entry merge. `Navigation` (`navigation.ts`) records jumps, reopens entries
+without recording, and announces "Back to path line N" in the polite live region. Keys: Ctrl+- and
+Ctrl+Shift+- on macOS, Ctrl+Alt+- and Ctrl+Shift+- on Linux. The history is never stored or sent.
+
+| Finding | Fix |
+| --- | --- |
+| `src/client/app.ts` constructs the app on import, so tests cannot load it | The jump bookkeeping lives in `src/client/navigation.ts` (`Navigation` with injected open/announce/notify) and the key routing in `routeNavZoomKey`; app.ts is glue |
+| On Linux Ctrl+Alt+- also matched zoom-out (Ctrl+-) | The navigation keys are routed before zoom |
+| The first AC-12 tests matched app.ts source text and broke on the refactor | Replaced by behavioural tests through `routeNavZoomKey` |
+| A file in the history may have vanished | `Editor.open` reports whether the file opened; Back/Forward drop the path and move on |
+
+## 28. Round 19: risk flags in Changes
+
+A panel of four (agent-workflow developer, git/security engineer, UX/accessibility designer,
+code-navigation engineer) picked the next feature. Risk flags in Changes won with 3 votes (agent-workflow
+developer #1, git/security engineer #1, UX/accessibility designer #2). Back/Forward fidelity got 4 votes
+and follows as a separate part; a checkpoint diff got 3 votes but is size L and deferred. Single votes:
+live-change announcements, Go to Definition, a hidden-Unicode detector.
+
+`ChangeEntry` carries git's `oldMode`/`newMode`. `src/client/risk.ts` (pure) turns an entry into flags
+(`exec`, `symlink`, `ci`, `hook`, `lockfile`, `manifest`, `env`); `ChangesView` renders one badge per flag
+after the path, counts flagged rows in the summary and exposes `flags(path)`. The flags are hints, not a verdict.
+
+| Finding | Fix |
+| --- | --- |
+| Existing Changes tests compared whole entries with `toEqual`, so the new mode fields changed seven expectations | Each now names the exact modes: stricter, not looser |
+| The mode of an untracked file must not follow a link or leave the root | It comes from `lstat` after the parent directory's realpath is checked to be inside the root; tests cover a parent link leaving the root and a file that vanishes before `lstat` |
+| A mode-only change has no diff lines | The exec badge is the only sign of a `chmod +x` in the list |
+| The plan claimed a path matches at most one path category, but a directory rule and a name rule can both match (`.husky/.env` is hook and env) | Flags are a set returned in union order; the plan review caught it before any test was written |
+| The Changes summary had no `role="status"` although it is a count that changes | The summary wrap is a status region |
+| Back restored the clicked line, which may be scrolled off screen, and a never-clicked file always went back to line 1 | `Editor.location()` reports the active line only while it is on screen, else the topmost visible line (`CodeView.firstVisibleLine`/`lastVisibleLine`, inclusive) |
+| A Markdown file shown as the rendered preview came back as source | `NavLoc.view = "preview"` is recorded by `location()` and `Editor.landing()`, kept by `NavHistory` on every update path (set or removed together with the line), and `Editor.open(path, { view: "preview" })` reopens the preview; `app.ts` only forwards it |
+| Closing a tab might forget where Back should go | Pinned by tests: history entries survive `Editor.close`, and Back reopens the file; diff and image tabs have no location |
+
+
+## 29. Round 20: hidden characters
+
+A panel of four (git/security engineer, UX/accessibility designer, agent-workflow developer,
+code-navigation engineer) picked the next feature. Hidden characters won with 4 votes (git/security #1,
+UX #2, agent-workflow #3, navigation #4). A checkpoint diff got 3 votes but is size L and was deferred a
+third time. The Changes summary live-region fix (Q1/Q2) got 3 votes and ships as Part B. Single votes:
+Go to Definition, next unreviewed changed file, go to last live change, a repository trust report.
+
+`src/client/hidden.ts` (pure, also imported by the server) defines the counted set once. The server adds
+`hidden` to changed files, Changes rows show a `hidden` badge, the code view marks zero-width, tag and
+variation runs, and "Go to Next Hidden Character" jumps between hits. Results are hints, not verdicts.
+
+| Finding | Fix |
+| --- | --- |
+| The code view renders a line in token segments, so the joiner and variation-selector rules could not see the character before a segment and a BOM starting a later line was never marked | `markHidden` takes `ctx {prev, atFileStart}` and the code view passes them per segment (caught in plan review) |
+| The first tests held raw bidi controls and failed the repo's own invariant against raw bidi in sources | Every hidden character in tests is a `\u` escape |
+| `TextDecoder` strips one leading BOM, so a file starting with two BOMs reported none | The server decodes with the BOM kept and `scanHidden` applies its own offset-0 rule |
+| Go to Next Hidden Character started from its own last jump and skipped hits after a search or Go to Line | It starts from the editor's current position |
+| The marker had `min-width`, which shifted columns | It is zero-width with an outline like the bidi marker |
+| Joiners in Arabic, Persian, Indic text and emoji sequences would be false positives | Joiners after those letters and emoji, a lone U+FE0F, and a BOM at offset 0 are exempt |
+| The Changes summary wrapper was a live region, so any re-render re-announced the whole line, and the count sat inside `.ch-counts`, whose ellipsis could clip it | The wrapper has no live role; one persistent `.ch-riskcount` element carries `role="status"`, sits beside `.ch-counts` and does not shrink |
+
+
+## 30. Round 21: changes since a checkpoint
+
+A panel of four picked the next feature. A checkpoint got 3 votes with two first places (agent-workflow
+developer #1, git/security engineer #1, navigation #2); it had been deferred three times before as size L and
+is scoped here to a client-only, in-memory version. Next/Previous Unreviewed Changed File got 3 votes (UX #1)
+and is next in line. Go to Definition got a first place for the fourth time.
+
+The design is client-only and in memory. `src/client/checkpoint.ts` (pure) has `takeCheckpoint` (bounded:
+500 files, 16 million characters) and `sinceCheckpoint` (statuses and line counts from `diffLines`).
+`src/client/checkpointctl.ts` is the controller behind "Changes: Set Checkpoint", "Changes: Since
+Checkpoint…" and "Changes: Clear Checkpoint"; `app.ts` only wires it to the existing endpoints and the
+palette's `pick()`. Enter opens a read-only diff tab (`Editor.openSinceDiff`) labelled "since HH:MM".
+
+| Finding | Fix |
+| --- | --- |
+| A server checkpoint would have needed the first state-setting route and blobs git cannot keep without writing | The checkpoint is client-only, in memory, read through existing GET endpoints; it is lost on reload |
+| A path in neither `texts` nor `skipped` has no stored text | It means unchanged from the checkpoint's HEAD; its text is read at the checkpoint's `rev` |
+| A path that is no longer changed would look deleted | It reverts to its base text (the text at the checkpoint's `rev`) |
+| Binary and unreadable files cannot be compared | They are skipped and counted in the toast, never put in the comparison |
+| The line counts depend on how a trailing newline splits | The rule drops one final empty element, pinned with examples; `old === now` is compared on strings, so a trailing-newline-only change is kept with 0/0 counts |
+| A rename whose new path was binary or unreadable lost the old path's deletion | A rename is a delete plus an add: the old path is recorded as deleted before the new one is read |
+| Clear Checkpoint during an in-flight Set was undone when the listing resolved | Clear bumps a generation and the late result is dropped |
+| A failed base read left an unhandled rejection and no message | Since Checkpoint resolves and says it could not compare |
+| Since tabs could be re-pointed by git events, stepping or reloads | The since tab is not tied to Changes: no re-pointing, no stepping, no reloads, no position |
+| The Changes summary was rebuilt with innerHTML, replacing the `ch-riskcount` live region so screen readers might not announce the new count | The summary elements are created once; the render updates only their text and the `ch-riskcount` element persists |
+
+
+## 31. Round 22: next unreviewed file
+
+A panel of four picked the next feature. Next/Previous Unreviewed Changed File got 4 of 4 votes this time
+(agent-workflow #1, UX #1, navigation #2, git/security #3) and 3 in panel 4; S1 got 3 votes.
+A repository trust report got a first place (git/security). Go to Definition got a first place for the fifth time
+(navigation). Votes for content-based risk hints: 2.
+
+The search is pure: `nextUnreviewed` in `changes.ts` walks the paths from the current file, wrapping, and
+checks the current file last. `ChangesView.stepUnreviewed` and `unreviewedCount` use the same `seenKey` rule
+as the dimmed rows. `src/client/unreviewed.ts` holds the two palette commands and `runUnreviewed`, which
+announces through the live region (no toast); `unreviewedKey` in `keys.ts` routes Alt+F6 and Alt+Shift+F6
+and is `null` in the terminal. `app.ts` is glue. The checkpoint fix (S1) is `checkpointText` in
+`checkpointctl.ts`: `api.ts` throws an `ApiError` with the HTTP status, and a 404 while reading a file for a
+checkpoint means it vanished (recorded as deleted); every other failure stays skipped. The server answers a
+uniform 404 for a symlink that leaves the root too, so a listing entry whose newMode is 120000 (a symlink)
+is never recorded as deleted: its 404 is skipped.
+
+| Finding | Fix |
+| --- | --- |
+| Stepping with the diff's buttons visited reviewed rows | `stepUnreviewed` goes only to rows that are not reviewed, and returns `null` when none is left |
+| Reviewed was only visual (a dimmed row) | A reviewed row carries a visually hidden ", reviewed" text, so its accessible name says so |
+| The unreviewed search could be wrong at the ends or when everything is reviewed | It is pure (`nextUnreviewed`), wraps, checks the current file last and returns -1 when all are reviewed |
+| The stepping start was first tied to the private keyboard selection, which tests and other callers could not set | The current file is the one whose diff is open (`setCurrent`) |
+| The hidden ", reviewed" text first sat before the directory, so nested rows read "name, reviewed dir" | It follows the directory span: "name dir, reviewed" |
+| One scenario test reused a view where the expected file was already reviewed | The test uses a fresh view and records the step again |
+| A key could fire inside the terminal, which keeps Alt combinations | Routing goes through `unreviewedKey`, which is `null` when the focus is in the terminal |
+| A toast would be missed by screen readers and cover the diff | The result is announced through the polite live region as "path, N unreviewed left"; no toast |
+| A file that vanished while a checkpoint was taken was recorded as skipped instead of deleted | `api.ts` throws `ApiError` with the status; `checkpointText` maps a 404 to deleted (null) and other failures to skipped |
+| The server's uniform 404 for a symlink leaving the root made `checkpointText` record such a symlink as deleted | The controller skips a symlink entry (newMode 120000) whose read gives null; only a non-symlink 404 means vanished, and the server's 404 stays uniform |
diff --git a/README.md b/README.md
index 031eebb..774527b 100644
--- a/README.md
+++ b/README.md
@@ -35,6 +35,9 @@ Every feature below has a screenshot in the [feature tour](https://codeviewer.21
preview scrolls to the heading itself. Covers TypeScript/JavaScript, Python, Rust, Go, C/C++,
Java/Kotlin/C#, Swift, Ruby, PHP, Lua, shell, CSS, Zig, Haskell, Makefiles, YAML/TOML keys and
Dockerfile stages, with patterns, not a parser.
+- **Back and forward:** ⌃- (Ctrl+Alt+- on Linux) returns to where you jumped from, ⌃⇧- (Ctrl+Shift+-) goes
+ forward again, like a browser. Jumps nearby (within 10 lines) merge; files that were deleted are skipped.
+ The history lives in memory only and is announced to screen readers.
- **References for your agent:** ⌥⌘C copies `path:line` (or `path:12-40` for a selection) for the
cursor or the selected lines. The palette also has **Copy Reference with Code** (the reference
plus the lines in a fenced block) and **Insert Reference in Terminal**, which types it at the
@@ -49,11 +52,29 @@ Every feature below has a screenshot in the [feature tour](https://codeviewer.21
- **Review changes (⌘⇧G):** a Changes view in the sidebar lists every file the branch touched
(vs its base branch, working tree included) or only the uncommitted ones (vs `HEAD`), with
`+/−` per file and a one-line summary. Each file opens as a read-only unified diff; ⌥F5 walks
- the changes and moves on to the next file. Reviewed files dim until they change again.
+ the changes and moves on to the next file. Reviewed files dim until they change again, and ⌥F6 / ⌥⇧F6 (or the palette commands "Changes: Next Unreviewed File" / "Changes: Previous Unreviewed File") step through only the files not yet reviewed, announcing how many are left. Screen readers read reviewed rows as "reviewed".
Right-click a file in the Explorer and pick "View Changes" to jump to its diff.
+ - **Risk flags:** rows in Changes carry a small badge, and the summary counts them ("· 2 flagged"),
+ for an added executable bit, a new symbolic link, CI configuration, git hooks, dependency
+ lockfiles, package manifests and build files, and `.env`/registry configuration. They are hints
+ for where to look first, not a safety verdict: they match file names, directories and git modes
+ only, never contents, and they can miss things (a malicious change in an ordinary file is not flagged).
+ The one exception is `hidden`: files up to 1 MiB are scanned for zero-width, tag and variation
+ characters and bidi controls, which render as nothing but can hide text. That is a hint too, not
+ a verdict: legitimate text (emoji, Arabic, Indic scripts) is skipped, but other uses can still match.
+ In the code view such characters get a visible outlined marker (the text is unchanged, so copy
+ works as before), and the palette command "Go to Next Hidden Character" jumps to the next one
+ and announces its name and position.
- **File History:** "Git: File History" in the palette (or "File History" in the Explorer's file
menu) lists the commits that changed the file, renames followed, newest first; type to filter by
subject, Enter to open what that commit changed as a read-only diff tab labelled with its short id.
+ - **Changes since a checkpoint:** "Changes: Set Checkpoint" remembers the text of every uncommitted
+ file; later, "Changes: Since Checkpoint…" lists what changed after that moment (path, `+added
+ −removed`, type to filter) and Enter opens a read-only diff tab labelled "since HH:MM".
+ "Changes: Clear Checkpoint" forgets it. The checkpoint is kept in memory only and is lost on reload;
+ nothing is written or sent anywhere. Binary files, unreadable files and files over the caps
+ (500 files, 16 million characters) are skipped, and the toast counts them ("Checkpoint set (4 files, 2
+ skipped)"). The since tab is fixed content: it does not follow the Changes list.
- Everything updates live as files, the index or refs change.
- **Built-in updates:** "Check for Updates…" (command palette, or the Mac app menu), and an
update pill in the status bar when a new version is out. Installing verifies the release's
@@ -71,7 +92,7 @@ Every feature below has a screenshot in the [feature tour](https://codeviewer.21
tabs coloured by git status, breadcrumbs, several terminals as tabs, and a terminal panel at the
bottom or on the right that can be maximized ("Move Terminal Panel", "Maximize/Restore Terminal
Panel"). The title bar button cycles the System, Dark and Light themes. The palette also has
- Copy Path, Copy Absolute Path, Close All Tabs and Clear Terminal. In a diff tab, ‹ › step to the
+ Changes: Set Checkpoint, Changes: Since Checkpoint… and Changes: Clear Checkpoint, Copy Path, Copy Absolute Path, Close All Tabs and Clear Terminal. In a diff tab, ‹ › step to the
previous or next changed file and "Open file" opens the file itself; the Changes view switches
between "Uncommitted" and "vs main".
- **Keyboard and screen-reader friendly:** ⌘/ lists every shortcut in your platform's key names.
@@ -129,8 +150,11 @@ Closing the app window quits codeviewer. Settings live in `~/.config/codeviewer/
| ⌘W · ⌘⇧[ ⌘⇧] | Close tab · switch tabs (in the terminal: switch terminals) |
| ⌘W in the terminal | Close an exited terminal; a running one asks for a second press (Linux: Ctrl+W stays the shell's) |
| Shift+F10 / Menu | Context menu for the selected explorer entry ("Search in Folder…", "View Changes", "File History") |
+| ⌃- / Ctrl+Alt+- | Go back to the previous location (after a jump: `path:line`, Go to Line or Symbol, a search result, a terminal link, `codeviewer open`) |
+| ⌃⇧- / Ctrl+Shift+- | Go forward again |
| ⌘= ⌘- ⌘0 | Font size (code, terminal and the UI chrome) |
| ⌘⇧G · ⌥F5 / ⌥⇧F5 | Changes · next / previous change (then next file) |
+| ⌥F6 / ⌥⇧F6 | Next / previous unreviewed changed file (Alt+F6 / Alt+Shift+F6 elsewhere) |
| ⌘/ | Every shortcut and the terminal tips, in your platform's key names (⌘⇧7 on layouts where "/" is Shift+7, such as German) |
| ⌘-click in terminal | Open `path:line` or URL |
| Left ⌥ | Meta in the terminal (right ⌥ still types special characters) |
@@ -176,6 +200,9 @@ The server binds to localhost and serves a shell. It was hardened through an adv
- A throwaway profile, locked to the window's own server port.
- External links open in your default browser.
- Terminal clipboard writes always show a notice.
+- **Hidden characters:** the code view marks zero-width, tag and variation characters and bidi
+ controls in place, and Changes counts them per changed file (regular files up to 1 MiB, 32 MiB per
+ listing). Like the other risk flags, a hint, not a verdict.
- **Markdown:** repository files are untrusted. The preview never uses `innerHTML`, shows no raw HTML,
filters link schemes and loads no remote images (the CSP is unchanged).
- **Terminals:** the shell gets a narrow token that only lets `codeviewer open` ask the viewer to show
diff --git a/SECURITY.md b/SECURITY.md
index 9b484d9..97e5e94 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -50,6 +50,15 @@ programs the repository's config names for it (`remote.*.uploadpack`, `core.sshC
exist inside the served root, at most 500 commits and 4 MB of output; each side of a commit's diff is
read with `cat-file` by full object id, never from a revision expression the client chose.
+The Changes listing reads the working-tree text of changed files to count hidden characters
+(zero-width, tag and variation characters and bidi controls): regular files only, opened like every
+other file (`O_NOFOLLOW` after containment in the root), at most 1 MiB each and 32 MiB per listing,
+cached by size and modification time; binary and larger files are not scanned. File modes come from
+the diff git already runs, or `lstat` for untracked files. The resulting risk flags, and the markers
+the code view draws on hidden characters, are hints for review, not a verdict: a harmful change
+in an ordinary file carries no flag. Checkpoints ("Changes: Set Checkpoint") live in the page's
+memory only; nothing is written to disk or sent anywhere.
+
Commands that type into a terminal ("Insert Reference in Terminal") send one line as a paste and
never press Enter, and refuse file names with control characters or command substitution.
After a reload the server restores the terminal's input modes (bracketed paste, mouse) with a parser
diff --git a/docs/assets/features/checkpoint-dark-half.jpg b/docs/assets/features/checkpoint-dark-half.jpg
new file mode 100644
index 0000000..b8ebd4e
Binary files /dev/null and b/docs/assets/features/checkpoint-dark-half.jpg differ
diff --git a/docs/assets/features/checkpoint-dark.jpg b/docs/assets/features/checkpoint-dark.jpg
new file mode 100644
index 0000000..bb8b5bf
Binary files /dev/null and b/docs/assets/features/checkpoint-dark.jpg differ
diff --git a/docs/assets/features/checkpoint-light-half.jpg b/docs/assets/features/checkpoint-light-half.jpg
new file mode 100644
index 0000000..18d90a8
Binary files /dev/null and b/docs/assets/features/checkpoint-light-half.jpg differ
diff --git a/docs/assets/features/checkpoint-light.jpg b/docs/assets/features/checkpoint-light.jpg
new file mode 100644
index 0000000..f45ba5c
Binary files /dev/null and b/docs/assets/features/checkpoint-light.jpg differ
diff --git a/docs/assets/features/commands-dark-half.jpg b/docs/assets/features/commands-dark-half.jpg
index c9862dc..becb9b0 100644
Binary files a/docs/assets/features/commands-dark-half.jpg and b/docs/assets/features/commands-dark-half.jpg differ
diff --git a/docs/assets/features/commands-dark.jpg b/docs/assets/features/commands-dark.jpg
index 63cd979..54d6b5f 100644
Binary files a/docs/assets/features/commands-dark.jpg and b/docs/assets/features/commands-dark.jpg differ
diff --git a/docs/assets/features/commands-light-half.jpg b/docs/assets/features/commands-light-half.jpg
index 047167b..d653778 100644
Binary files a/docs/assets/features/commands-light-half.jpg and b/docs/assets/features/commands-light-half.jpg differ
diff --git a/docs/assets/features/commands-light.jpg b/docs/assets/features/commands-light.jpg
index 136842e..974a03a 100644
Binary files a/docs/assets/features/commands-light.jpg and b/docs/assets/features/commands-light.jpg differ
diff --git a/docs/assets/features/flags-dark-half.jpg b/docs/assets/features/flags-dark-half.jpg
new file mode 100644
index 0000000..c5ae116
Binary files /dev/null and b/docs/assets/features/flags-dark-half.jpg differ
diff --git a/docs/assets/features/flags-dark.jpg b/docs/assets/features/flags-dark.jpg
new file mode 100644
index 0000000..5c8b171
Binary files /dev/null and b/docs/assets/features/flags-dark.jpg differ
diff --git a/docs/assets/features/flags-light-half.jpg b/docs/assets/features/flags-light-half.jpg
new file mode 100644
index 0000000..b7ff72b
Binary files /dev/null and b/docs/assets/features/flags-light-half.jpg differ
diff --git a/docs/assets/features/flags-light.jpg b/docs/assets/features/flags-light.jpg
new file mode 100644
index 0000000..7898d23
Binary files /dev/null and b/docs/assets/features/flags-light.jpg differ
diff --git a/docs/assets/features/help-dark-half.jpg b/docs/assets/features/help-dark-half.jpg
index 0e53b92..02c6aa7 100644
Binary files a/docs/assets/features/help-dark-half.jpg and b/docs/assets/features/help-dark-half.jpg differ
diff --git a/docs/assets/features/help-dark.jpg b/docs/assets/features/help-dark.jpg
index 8b33708..832bd3f 100644
Binary files a/docs/assets/features/help-dark.jpg and b/docs/assets/features/help-dark.jpg differ
diff --git a/docs/assets/features/help-light-half.jpg b/docs/assets/features/help-light-half.jpg
index 46ffb3d..c82ca2b 100644
Binary files a/docs/assets/features/help-light-half.jpg and b/docs/assets/features/help-light-half.jpg differ
diff --git a/docs/assets/features/help-light.jpg b/docs/assets/features/help-light.jpg
index 4190e4f..0cd63f3 100644
Binary files a/docs/assets/features/help-light.jpg and b/docs/assets/features/help-light.jpg differ
diff --git a/docs/index.html b/docs/index.html
index 4eeff4c..d2d2c1c 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -82,7 +82,7 @@
Live while agents work
Git, read-only
-
Status letters in the explorer, gutter markers against HEAD with a peek at the old lines, inline blame, branch, ahead/behind and merge state, a Changes view that lists every file the branch touched as read-only diffs, and the history of any file, one commit at a time. It never writes to your repository.
+
Status letters in the explorer, gutter markers against HEAD with a peek at the old lines, inline blame, branch, ahead/behind and merge state, a Changes view that lists every file the branch touched as read-only diffs, flags risky edits and hidden characters, steps through what you have not reviewed yet and shows what changed since a checkpoint, and the history of any file, one commit at a time. It never writes to your repository.
@@ -120,7 +120,7 @@
Search in files
Go to file
-
Fuzzy-matches file names first, then whole paths. Type path:line to land on a line; an empty box lists recent files.
⌘P
+
Fuzzy-matches file names first, then whole paths. Type path:line to land on a line; an empty box lists recent files. After any jump, ⌃- takes you back to where you were and ⌃⇧- forward again (Ctrl+Alt+- and Ctrl+Shift+- on Linux).
⌘P⌃- / ⌃⇧-
Go to Symbol
@@ -129,7 +129,7 @@
Go to Symbol
Command palette
-
+
Every command with its shortcut: terminals, panels, theme, font size, git, references, updates. The same box takes > for commands, : for a line and @ for symbols.
⌘⇧P
@@ -144,7 +144,7 @@
Explorer with git status
Every shortcut, one key away
-
+
The cheat sheet uses your platform's key names. The whole app works from the keyboard, and lists, the palette and the terminal expose what they show to screen readers.
⌘/
@@ -191,10 +191,20 @@
Review with git
Review the branch
-
Lists every file the branch touched since it left main, or only what is uncommitted, with +/− counts. Each file opens as a read-only diff. ⌥F5 walks hunk by hunk and on to the next file, and reviewed files dim until they change again.
⌘⇧G⌥F5 / ⌥⇧F5
+
Lists every file the branch touched since it left main, or only what is uncommitted, with +/− counts. Each file opens as a read-only diff. ⌥F5 walks hunk by hunk and on to the next file. Reviewed files dim until they change again, and ⌥F6 skips straight to the next file you have not reviewed.
⌘⇧G⌥F5 / ⌥⇧F5⌥F6 / ⌥⇧F6
+
+
Risk flags and hidden characters
+
+
Badges mark the edits worth a second look: an executable bit or symlink, CI workflows, git hooks, lockfiles, manifests, .env and registry files, and invisible Unicode (zero-width, tag and variation characters, bidi controls). The code view outlines each hidden character in place, and Go to Next Hidden Character walks them. Hints, never a verdict.
+
+
+
Changes since a checkpoint
+
+
Changes: Set Checkpoint remembers every uncommitted file. After the agent's next turn, Since Checkpoint… lists only what changed after that moment, each file opening as a diff from the checkpoint to now. Kept in memory only, never on disk.
+
Peek at HEAD
diff --git a/scripts/shots.list.ts b/scripts/shots.list.ts
index 2171692..a7130a2 100644
--- a/scripts/shots.list.ts
+++ b/scripts/shots.list.ts
@@ -49,7 +49,7 @@ export const SHOTS: Shot[] = [
{
name: "commands",
tabs: ["src/router.ts"],
- steps: [s(`mod('p', { shiftKey: true }); const i = await until(() => visible('.palette-input')); typeInto(i, '>git');`, 500)],
+ steps: [s(`mod('p', { shiftKey: true }); const i = await until(() => visible('.palette-input')); typeInto(i, '>changes');`, 500)],
crop: `return rect('.palette', 0);`,
},
{
@@ -83,6 +83,40 @@ export const SHOTS: Shot[] = [
],
crop: `return box(0, 0, 1280, 640);`,
},
+ {
+ // Risky edits made from the terminal: a new CI workflow, chmod +x, a manifest change, and a
+ // comment carrying invisible Unicode tag characters (escaped here: no raw ones in the source).
+ name: "flags",
+ tabs: ["src/router.ts"],
+ layout: { panel: true, panelSize: { bottom: 250, right: 560 } },
+ term: [
+ `mkdir -p .github/workflows && printf 'name: deploy\\non: push\\n' > .github/workflows/deploy.yml`,
+ `chmod +x src/server.ts && perl -pi -e 's/"0.4.0"/"0.5.0"/' package.json`,
+ String.raw`perl -CSD -pi -e 's{^(\s*)(routes\.set\("DELETE)}{$1 . "// Clears finished jobs." . join("", map { chr(0xE0000 + ord) } split //, "skip review") . "\n" . $1 . $2}e' src/router.ts`,
+ ],
+ steps: [
+ s(`mod('j');`, 400),
+ s(`mod('g', { shiftKey: true }); await until(() => visible('.ch-row .risk'));`, 900),
+ s(`await cmd('Go to Next Hidden Character');`, 900),
+ ],
+ crop: `return box(0, 0, 1280, Math.round(lineEl(24).getBoundingClientRect().bottom + 1));`,
+ },
+ {
+ // Set a checkpoint, let the terminal change two files and add one, then list what changed since.
+ name: "checkpoint",
+ tabs: ["src/router.ts"],
+ layout: { panel: true, panelSize: { bottom: 250, right: 560 } },
+ steps: [
+ s(`await until(() => $$('.term-input').length); await sleep(1200); await cmd('Changes: Set Checkpoint');`, 1500),
+ s(`const t = $$('.term-input').at(-1); t.focus(); const dt = new DataTransfer();
+ dt.setData('text/plain', ${JSON.stringify(
+ String.raw`perl -pi -e 's/1-64/1-128/; s/> 64/> 128/' src/router.ts && perl -pi -e 's/Removes every entry\./Removes every entry; the next get misses./' src/cache.ts && printf 'export const VERSION = "0.5.0";\n' > src/version.ts`,
+ )});
+ t.dispatchEvent(new ClipboardEvent('paste', { clipboardData: dt, bubbles: true, cancelable: true })); key('Enter', {}, t);`, 1800),
+ s(`await cmd('Since Checkpoint'); await until(() => visible('.pal-item'));`, 700),
+ ],
+ crop: `return rect('.palette', 0);`,
+ },
{
name: "peek",
tabs: ["src/router.ts"],
diff --git a/scripts/site.ts b/scripts/site.ts
index 28f9d68..2bd5b47 100644
--- a/scripts/site.ts
+++ b/scripts/site.ts
@@ -110,7 +110,7 @@ const fileName = (id: string) => `${esc(placeholder(id))
const FEATURES: [string, string, string][] = [
["terminal", "A real terminal, built in", "A native PTY and a from-scratch xterm-grade emulator: truecolor, mouse, alternate screen, bracketed paste and crisp box drawing. Run Claude Code, Codex, aider, vim or htop right next to the code, and hand the agent a path:12-40 reference: ⌥⌘C copies it, the palette types it at the prompt."],
["live", "Live while agents work", "Files reload in place as they change on disk. Changed lines flash, the explorer marks them, and nothing you are reading jumps."],
- ["git", "Git, read-only", "Status letters in the explorer, gutter markers against HEAD with a peek at the old lines, inline blame, branch, ahead/behind and merge state, a Changes view that lists every file the branch touched as read-only diffs, and the history of any file, one commit at a time. It never writes to your repository."],
+ ["git", "Git, read-only", "Status letters in the explorer, gutter markers against HEAD with a peek at the old lines, inline blame, branch, ahead/behind and merge state, a Changes view that lists every file the branch touched as read-only diffs, flags risky edits and hidden characters, steps through what you have not reviewed yet and shows what changed since a checkpoint, and the history of any file, one commit at a time. It never writes to your repository."],
["fast", "Fast at any size", "Virtualized everything: 100k-line files open instantly, quick-open searches 200k paths as you type, and the terminal streams megabytes per second."],
["lock", "Locked down", "The window can only reach its own local server. Header-token auth, DNS-rebinding and CSRF guards, read-only file access with symlink containment, git hardened against hostile repositories and signed updates. Reviewed adversarially, round after round."],
["native", "Native and small", "A small native Mac app on the system WebKit, with real menus, window tabs and a folder picker. Built with Bun and TypeScript and zero third-party dependencies, so there is no supply chain to audit but this repository."],
@@ -159,8 +159,8 @@ const TOUR: Chapter[] = [
{
shot: "quick-open",
title: "Go to file",
- body: "Fuzzy-matches file names first, then whole paths. Type path:line to land on a line; an empty box lists recent files.",
- keys: ["⌘P"],
+ body: "Fuzzy-matches file names first, then whole paths. Type path:line to land on a line; an empty box lists recent files. After any jump, ⌃- takes you back to where you were and ⌃⇧- forward again (Ctrl+Alt+- and Ctrl+Shift+- on Linux).",
+ keys: ["⌘P", "⌃- / ⌃⇧-"],
alt: "Go to file with “ca” typed, listing cache.ts, cache.test.ts and other matches with the matched letters highlighted.",
},
{
@@ -175,7 +175,7 @@ const TOUR: Chapter[] = [
title: "Command palette",
body: "Every command with its shortcut: terminals, panels, theme, font size, git, references, updates. The same box takes > for commands, : for a line and @ for symbols.",
keys: ["⌘⇧P"],
- alt: "The command palette filtered by “git”: Next Change, Show Changes, File History, Previous Change, Peek HEAD on Current Line, Compare With Base Branch / HEAD and Toggle Automatic Update Checks, with their shortcuts.",
+ alt: "The command palette filtered by “changes”: Set Checkpoint, Since Checkpoint…, Show Changes, Clear Checkpoint, Next and Previous Unreviewed File and Clear Change Markers, with their shortcuts.",
},
{
shot: "find",
@@ -244,11 +244,23 @@ const TOUR: Chapter[] = [
lead: {
shot: "changes",
title: "Review the branch",
- body: "Lists every file the branch touched since it left main, or only what is uncommitted, with +/− counts. Each file opens as a read-only diff. ⌥F5 walks hunk by hunk and on to the next file, and reviewed files dim until they change again.",
- keys: ["⌘⇧G", "⌥F5 / ⌥⇧F5"],
+ body: "Lists every file the branch touched since it left main, or only what is uncommitted, with +/− counts. Each file opens as a read-only diff. ⌥F5 walks hunk by hunk and on to the next file. Reviewed files dim until they change again, and ⌥F6 skips straight to the next file you have not reviewed.",
+ keys: ["⌘⇧G", "⌥F5 / ⌥⇧F5", "⌥F6 / ⌥⇧F6"],
alt: "The Changes view comparing the branch with main: six files with their status letters and line counts, and cache.ts open as a unified diff with added and removed lines.",
},
items: [
+ {
+ shot: "flags",
+ title: "Risk flags and hidden characters",
+ body: "Badges mark the edits worth a second look: an executable bit or symlink, CI workflows, git hooks, lockfiles, manifests, .env and registry files, and invisible Unicode (zero-width, tag and variation characters, bidi controls). The code view outlines each hidden character in place, and Go to Next Hidden Character walks them. Hints, never a verdict.",
+ alt: "The Changes view with 4 flagged files: deploy.yml in .github/workflows marked CI, package.json manifest, router.ts hidden and server.ts exec. router.ts is open on a comment that ends in a red marker where invisible tag characters hide text.",
+ },
+ {
+ shot: "checkpoint",
+ title: "Changes since a checkpoint",
+ body: "Changes: Set Checkpoint remembers every uncommitted file. After the agent's next turn, Since Checkpoint… lists only what changed after that moment, each file opening as a diff from the checkpoint to now. Kept in memory only, never on disk.",
+ alt: "The list of changes since 06:33: src/cache.ts and src/router.ts modified and src/version.ts added, with their added and removed line counts.",
+ },
{
shot: "peek",
title: "Peek at HEAD",
diff --git a/src/client/api.ts b/src/client/api.ts
index 604663e..dc9e9d2 100644
--- a/src/client/api.ts
+++ b/src/client/api.ts
@@ -77,6 +77,11 @@ export interface ChangeFile {
added: number | null;
removed: number | null;
binary: boolean;
+ /** Git octal modes ("000000" when absent on that side; untracked entries carry only newMode). */
+ oldMode?: string;
+ newMode?: string;
+ /** Count of hidden or invisible characters in the current content; absent when none. */
+ hidden?: number;
}
/** One commit of a file's history (see src/server/git.ts HistoryEntry). */
@@ -114,10 +119,20 @@ export interface UpdateInfo {
checkedAt: number;
}
+/** A failed request: the server's message and its HTTP status. */
+export class ApiError extends Error {
+ status: number;
+ constructor(message: string, status: number) {
+ super(message);
+ this.name = "ApiError";
+ this.status = status;
+ }
+}
+
async function check(res: Response): Promise {
if (!res.ok) {
const body = (await res.json().catch(() => ({}))) as { error?: string };
- throw new Error(body.error ?? res.statusText);
+ throw new ApiError(body.error ?? res.statusText, res.status);
}
return res;
}
diff --git a/src/client/app.ts b/src/client/app.ts
index c53b198..c7da05e 100644
--- a/src/client/app.ts
+++ b/src/client/app.ts
@@ -1,5 +1,6 @@
import { wsUrl } from "./auth.ts"; // first: installs the auth header on fetch
import { api, type Info } from "./api.ts";
+import { CHECKPOINT_COMMANDS, CheckpointController, checkpointText } from "./checkpointctl.ts";
import { Editor, type StatusInfo } from "./editor.ts";
import { FileTree } from "./tree.ts";
import { Palette, type Command, type PickItem } from "./palette.ts";
@@ -16,9 +17,12 @@ import { isContextMenuOpen } from "./menu.ts";
import { SearchView } from "./search.ts";
import { ChangesView } from "./changes.ts";
import type { ChangeFile } from "./api.ts";
-import { helpKey, normSideView, referenceKey, searchKey, symbolKey, type SideView } from "./keys.ts";
+import { Navigation, routeNavZoomKey } from "./navigation.ts";
+import { helpKey, normSideView, referenceKey, searchKey, symbolKey, unreviewedKey, type SideView } from "./keys.ts";
+import { liveAnnouncer, runUnreviewed, UNREVIEWED_COMMANDS } from "./unreviewed.ts";
import { reference, referenceWithCode, unsafePath } from "./reference.ts";
-import { headingText } from "./symbols.ts";
+import { headingText, type Sym } from "./symbols.ts";
+import { createHiddenNav } from "./hiddennav.ts";
import { slugify } from "./markdown.ts";
@@ -92,6 +96,28 @@ class App {
private statusRight!: HTMLElement;
private themeBtn!: HTMLButtonElement;
private live!: HTMLElement;
+ private checkpoints = new CheckpointController({
+ changes: () => api.gitChanges("head"),
+ readText: (p) => checkpointText(() => api.file(p)),
+ baseText: (p, rev) => api.gitBase(p, rev),
+ now: () => Date.now(),
+ notify: (m) => this.notify(m),
+ pick: (items, title) => this.palette.pick(items, title),
+ openDiff: (d) => void this.editor.openSinceDiff(d, { focus: true }),
+ });
+ private nav = new Navigation({
+ open: (loc) => this.editor.open(loc.path, loc.view ? { pin: true, view: loc.view, focus: false } : { pin: true, line: loc.line, focus: false }).then((ok) => (void this.tree.reveal(loc.path), ok)),
+ current: () => this.editor.location(),
+ announce: (m) => (this.live.textContent = m),
+ notify: (m) => this.notify(m),
+ });
+ private hiddenNav = createHiddenNav({
+ lines: () => this.editor.active?.code?.lineTexts ?? null,
+ position: () => ({ line: this.editor.location()?.line ?? 1 }),
+ reveal: (l) => this.editor.active?.code?.revealLine(l),
+ announce: (m) => (this.live.textContent = m),
+ toast: (m) => this.notify(m),
+ });
private killArmed = 0;
private help = new Help();
private sideSplit!: HTMLElement;
@@ -149,7 +175,7 @@ class App {
if (tabs.active) await this.editor.open(tabs.active, { focus: false });
this.editor.onChange = () => {
store.set(`tabs:${this.info.root}`, this.editor.serialize());
- this.changes.watching = this.editor.tabs.some((t) => t.isDiff && !t.commit);
+ this.changes.watching = this.editor.tabs.some((t) => t.isDiff && !t.commit && !t.since);
};
}
@@ -190,13 +216,13 @@ class App {
// Sidebar
this.tree = new FileTree(this.info.name);
- this.tree.onOpen = (p, pin) => void this.openFile(p, { pin, focus: pin });
+ this.tree.onOpen = (p, pin) => void this.jump(p, { pin, focus: pin });
this.search = new SearchView();
this.tree.onSearchIn = (dir, ignored) => this.search.searchIn(dir, ignored);
this.tree.onViewChanges = (p) => void this.viewChanges(p);
this.tree.onHistory = (p) => void this.fileHistory(p);
this.search.onReveal = () => this.showSearch();
- this.search.onOpen = (path, line, col, len) => void this.openFile(path, { line, col, len, focus: false });
+ this.search.onOpen = (path, line, col, len) => void this.jump(path, { line, col, len, focus: false });
this.changes = new ChangesView();
this.changes.onOpen = (f, pin) => void this.openDiff(f, pin);
this.changes.onData = (d) => {
@@ -363,8 +389,8 @@ class App {
});
this.palette.recent = this.recent;
- this.palette.onOpenFile = (p, line) => void this.openFile(p, { pin: true, line });
- this.palette.onGoToLine = (n) => this.editor.goToLine(n);
+ this.palette.onOpenFile = (p, line) => void this.jump(p, { pin: true, line });
+ this.palette.onGoToLine = (n) => this.jumpToLine(n);
this.palette.symbols = () => this.symbolItems();
this.palette.commands = this.commands();
@@ -389,6 +415,8 @@ class App {
c("view.theme", "Cycle Theme (System/Dark/Light)", () => this.cycleTheme()),
c("view.zoomIn", "Increase Font Size", () => this.zoom(1), `${MOD}=`),
c("view.zoomOut", "Decrease Font Size", () => this.zoom(-1), `${MOD}-`),
+ c("nav.back", "Go Back", () => this.navigate("back"), key("⌃-", "Ctrl+Alt+-")),
+ c("nav.forward", "Go Forward", () => this.navigate("forward"), key("⌃⇧-", "Ctrl+Shift+-")),
c("view.zoomReset", "Reset Font Size", () => this.zoom(0), `${MOD}0`),
c("search.files", "Search in Files", () => this.showSearch(), IS_MAC ? "⌘⇧F" : "Ctrl+Shift+F"),
c("search.next", "Next Search Result", () => this.search.step(1), "F4"),
@@ -423,6 +451,7 @@ class App {
if (!t) this.notify("Open a file first");
else void this.fileHistory(t.path);
}),
+ ...CHECKPOINT_COMMANDS.map((k) => c(k.id, k.title, () => void (k.id === "changes.checkpoint" ? this.checkpoints.set() : k.id === "changes.sinceCheckpoint" ? this.checkpoints.since() : this.checkpoints.clear()))),
c("git.scope", "Git: Compare With Base Branch / HEAD", () => this.changes.toggleScope()),
c("app.update", "Check for Updates…", () => void this.updates.checkNow()),
c("app.autoUpdate", "Toggle Automatic Update Checks", () => {
@@ -430,8 +459,10 @@ class App {
store.set("updates", { auto });
this.notify(`Automatic update checks ${auto ? "on" : "off"} (from the next launch)`);
}),
+ c("file.nextHidden", "Go to Next Hidden Character", () => this.hiddenNav.next()),
c("git.next", "Git: Next Change", () => this.editor.nextChange(1), key("⌥F5", "Alt+F5")),
c("git.prev", "Git: Previous Change", () => this.editor.nextChange(-1), key("⌥⇧F5", "Alt+Shift+F5")),
+ ...UNREVIEWED_COMMANDS.map((u) => c(u.id, u.title, () => this.stepUnreviewed(u.dir), u.dir === 1 ? key("⌥F6", "Alt+F6") : key("⌥⇧F6", "Alt+Shift+F6"))),
];
}
@@ -442,6 +473,26 @@ class App {
void this.tree.reveal(path);
}
+ /** Opens a file as a jump the Back / Forward history remembers. */
+ private async jump(path: string, opts: { pin?: boolean; line?: number; col?: number; len?: number; focus?: boolean } = {}) {
+ const from = this.editor.location();
+ await this.openFile(path, opts);
+ if (from?.path === path && !opts.line) return; // re-showing the open file is not a jump
+ if (this.editor.location()?.path === path) this.nav.record(from, this.editor.landing(path, opts.line));
+ }
+
+ private jumpToLine(n: number) {
+ const from = this.editor.location();
+ this.editor.goToLine(n);
+ if (from) this.nav.record(from, { path: from.path, line: n });
+ }
+
+ private jumpToSymbol(s: Sym, slug?: string) {
+ const from = this.editor.location();
+ this.editor.revealSymbol(s, slug);
+ if (from) this.nav.record(from, { path: from.path, line: s.line + 1 });
+ }
+
private async openFromTerminal(p: string, line: number) {
let rel = p;
if (rel.startsWith(this.info.root + "/")) rel = rel.slice(this.info.root.length + 1);
@@ -452,7 +503,7 @@ class App {
if (c.startsWith("/") || c.startsWith("~")) break;
const type = await api.stat(c);
if (type === "file") {
- await this.openFile(c, { pin: true, line, focus: false });
+ await this.jump(c, { pin: true, line, focus: false });
return;
}
if (type === "dir") {
@@ -472,6 +523,13 @@ class App {
this.changes.focus();
}
+ /** ⌥F6 / ⌥⇧F6: step to the next / previous unreviewed changed file and announce it. */
+ private stepUnreviewed(dir: 1 | -1) {
+ if (!this.git.repo) return this.notify("Not a git repository");
+ this.showChanges();
+ runUnreviewed(dir, { view: this.changes, announce: liveAnnouncer(this.live) });
+ }
+
private async openDiff(f: ChangeFile, pin: boolean, focus = false) {
const d = this.changes.data;
await this.editor.openDiff(f, { rev: d?.rev ?? null, vs: this.changes.vs }, { pin, focus });
@@ -508,7 +566,7 @@ class App {
detail: `${s.kind} · line ${s.line + 1}`,
icon: `${SYM_LETTER[s.kind]}`,
indent: depths.indexOf(s.depth),
- run: () => this.editor.revealSymbol(s, slug),
+ run: () => this.jumpToSymbol(s, slug),
};
});
}
@@ -614,6 +672,10 @@ class App {
this.applyLayout();
}
+ private navigate(dir: "back" | "forward") {
+ void this.nav.go(dir);
+ }
+
private zoom(d: number) {
const L = this.L;
if (d === 0) {
@@ -769,7 +831,9 @@ class App {
const appKey = IS_MAC || !inTerm;
let handled = true;
const sk = searchKey(e, { isMac: IS_MAC, inTerm: !!inTerm });
- if (sk === "search") this.showSearch();
+ if (routeNavZoomKey(e, { isMac: IS_MAC, inTerm: !!inTerm }, { navigate: (d) => this.navigate(d), zoom: (d) => this.zoom(d) })) {
+ // Go Back / Go Forward and the zoom keys
+ } else if (sk === "search") this.showSearch();
else if (sk === "next" || sk === "prev") this.search.step(sk === "next" ? 1 : -1);
else if (e.ctrlKey && (e.code === "Backquote" || k === "`")) {
if (e.shiftKey) this.newTerminal();
@@ -779,6 +843,7 @@ class App {
else if (symbolKey(e, { isMac: IS_MAC }) && appKey) this.palette.open("@");
else if (referenceKey(e, { isMac: IS_MAC }) && !inTerm) this.copyReference(false);
else if (e.altKey && e.key === "F5" && !inTerm) this.editor.nextChange(e.shiftKey ? -1 : 1);
+ else if (unreviewedKey(e, { inTerm: !!inTerm }) !== null) this.stepUnreviewed(unreviewedKey(e, { inTerm: !!inTerm })!);
else if (mod && e.shiftKey && k === "p") this.palette.open(">");
else if (mod && !e.shiftKey && k === "p" && appKey && (IS_MAC || !inPalette)) this.palette.open(); // Linux: Ctrl+P is the palette's own "up"
else if (mod && e.shiftKey && k === "e") {
@@ -806,9 +871,6 @@ class App {
else this.editor.cycle(dir);
}
else if (e.ctrlKey && e.key === "Tab" && !inTerm) this.editor.cycle(e.shiftKey ? -1 : 1);
- else if (mod && (k === "=" || k === "+") && appKey) this.zoom(1);
- else if (mod && k === "-" && appKey) this.zoom(-1);
- else if (mod && k === "0" && appKey) this.zoom(0);
else if (mod && k === "j" && appKey) this.togglePanel();
else if (helpKey(e, { isMac: IS_MAC }) && appKey) this.help.open();
else if (e.key === "Escape" && this.help.isOpen) this.help.close();
@@ -864,7 +926,7 @@ class App {
} else if (msg.t === "git" && msg.status) {
this.git.set(msg.status as never);
} else if (msg.t === "open" && msg.path) {
- void this.openFile(msg.path, { pin: true, line: msg.line, focus: false });
+ void this.jump(msg.path, { pin: true, line: msg.line, focus: false });
window.focus();
}
};
diff --git a/src/client/changes.ts b/src/client/changes.ts
index 1460d11..d0aed0f 100644
--- a/src/client/changes.ts
+++ b/src/client/changes.ts
@@ -1,5 +1,6 @@
import { api, type ChangeFile, type ChangesData } from "./api.ts";
import type { Letter } from "./git.ts";
+import { riskFlags, riskLabel, type RiskFlag } from "./risk.ts";
import { basename, dirname, esc, h, showHidden } from "./util.ts";
export type Scope = "head" | "branch";
@@ -41,6 +42,30 @@ export function summarize(files: readonly ChangeFile[]): { added: number; remove
/** What "reviewed" was reviewed against: any later edit to the file un-dims its row. */
const seenKey = (f: ChangeFile) => `${f.status}:${f.added}:${f.removed}:${f.oldPath ?? ""}`;
+/** Index of the next path that is not reviewed, searching from `current` in `dir` with wrap-around; -1 when none. */
+export function nextUnreviewed(
+ paths: readonly string[], current: string | null, dir: 1 | -1,
+ isReviewed: (path: string) => boolean,
+): number {
+ const n = paths.length;
+ if (!n) return -1;
+ const c = current === null ? -1 : paths.indexOf(current);
+ if (c < 0) {
+ for (let k = 0; k < n; k++) {
+ const i = dir === 1 ? k : n - 1 - k;
+ if (!isReviewed(paths[i]!)) return i;
+ }
+ return -1;
+ }
+ for (let k = 1; k <= n; k++) {
+ const i = (((c + dir * k) % n) + n) % n; // k = n lands on c itself: checked last
+ if (!isReviewed(paths[i]!)) return i;
+ }
+ return -1;
+}
+
+const BADGE: Record = { exec: "exec", symlink: "symlink", ci: "CI", hook: "hook", lockfile: "lock", manifest: "manifest", env: "env", hidden: "hidden" };
+
const safe = (s: string) => esc(showHidden(s));
const plural = (n: number, one: string, many: string) => `${n} ${n === 1 ? one : many}`;
@@ -74,12 +99,18 @@ export class ChangesView {
private waiters: (() => void)[] = [];
private scopeEl: HTMLElement;
private summary: HTMLElement;
+ // Built once: the live region must persist so screen readers announce a changed count.
+ private countsEl = h("span", { class: "ch-counts" });
+ private riskEl = h("span", { class: "ch-riskcount", role: "status" });
+ private vsEl = h("span", { class: "ch-vs" });
+ private barEl = h("div", { class: "ch-bar empty", style: "--p:50%" });
private list: HTMLElement;
constructor(opts: { debounce?: number } = {}) {
this.debounce = opts.debounce ?? 150;
this.scopeEl = h("div", { class: "ch-scope", role: "group", "aria-label": "Comparison", hidden: true });
this.summary = h("div", { class: "ch-summary-wrap", hidden: true });
+ this.summary.append(h("div", { class: "ch-summary" }, this.countsEl, this.riskEl, this.vsEl), this.barEl);
this.list = h("div", { class: "ch-list", role: "listbox", tabindex: "0", "aria-label": "Changed files" });
this.el = h("div", { class: "changes-view" }, this.scopeEl, this.summary, this.list);
this.scopeEl.addEventListener("click", (e) => {
@@ -108,6 +139,12 @@ export class ChangesView {
this.render();
}
+ /** Risk flags of the listed row with this path ([] for an unknown path or an unflagged row). */
+ flags(path: string): RiskFlag[] {
+ const f = this.files.find((x) => x.path === path);
+ return f ? riskFlags(f) : [];
+ }
+
get scopeName(): Scope {
return this.scope;
}
@@ -251,6 +288,26 @@ export class ChangesView {
return f;
}
+ /** Opens the next/previous file that is not reviewed (wrapping); null when every file is reviewed. */
+ stepUnreviewed(dir: 1 | -1): ChangeFile | null {
+ const next = nextUnreviewed(this.files.map((x) => x.path), this.current, dir, (p) => this.isSeen(p));
+ if (next < 0) return null;
+ const f = this.files[next]!;
+ this.select(next);
+ this.onOpen(f, false);
+ return f;
+ }
+
+ private isSeen(path: string): boolean {
+ const f = this.files.find((x) => x.path === path);
+ return !!f && this.seen.get(path) === seenKey(f);
+ }
+
+ /** Rows in the current list that are not reviewed. */
+ unreviewedCount(): number {
+ return this.files.filter((f) => this.seen.get(f.path) !== seenKey(f)).length;
+ }
+
focus() {
if (this.sel < 0) this.sel = Math.max(0, this.files.findIndex((f) => f.path === this.current));
this.render();
@@ -318,12 +375,15 @@ export class ChangesView {
const commits = d.scope === "branch" && d.commits
? `·${plural(d.commits, "commit", "commits")}`
: "";
+ const flagged = files.filter((f) => riskFlags(f).length).length;
const p = added + removed ? Math.round((added / (added + removed)) * 100) : 50;
- this.summary.innerHTML =
- `
