Team collaboration

Project activity feed and plain-text review comments with @mentions — dashboard session API only in v1; no WebSockets or email.

Activity feed

Team-visible events are stored separately from personal analytics — approvals, AI batches, comments, and thread resolution appear on the project Activity page.

Activity summaries never include storage keys, signed URLs, or secrets.

Viewers can read activity; editors and above perform actions that emit events.

Comment threads

Threads attach to review subjects: project, image, metadata generation, AI batch, or batch item.

Comments are plain text only — HTML is stripped, whitespace collapsed, and length is capped.

Mention teammates with @email; matched org members receive stored mentions (no email in v1).

Comments are soft-deleted; threads can be resolved and reopened by members with resolve permission.

Comments never auto-approve metadata.

API access

Dashboard session routes: GET/POST /api/projects/{projectId}/activity, GET/POST /api/projects/{projectId}/comments, POST delete and thread resolve endpoints.

Public API v1 activity read is deferred — use the dashboard feed until a dedicated scope ships.

Webhooks: comment.created and thread.resolved with safe payloads.