agentgui 1.0.1059 → 1.0.1061

package/.gm/memories/mem-166f52796185e0e7-1487.md

@@ -0,0 +1,8 @@
+---
+key: mem-166f52796185e0e7-1487
+ns: default
+created: 1783891644525
+updated: 1783891644525
+---
+
+{"key":"agentgui-27th-run-negative-space-attention-detail","value":"agentgui 27th run (2026-07-03): negative-space + attention sweep, scoped to the specific ask (not a full agent fan-out) - a live-browser review (screenshots + DOM measurement at 1280px and 420px) across chat/files/settings. Chat/settings visual balance was already reasonable from the prior 26 runs; found and fixed 2 real issues. (1) Files filter placeholder 'Filter files in this directory' clipped against its intentionally-compact 220px input (no ellipsis, last character cut off at the box edge) - shortened to 'Filter files', which fits without widening the control (the kit's own comment already states the compact width is deliberate: a full-width filter 'reads as a search page and costs fold height'). (2) Settings SERVER panel rendered 4 short facts (version/uptime/connected clients/projects folder) each as its own .lede div - .lede is the fs-xl/tall-line-height INTRO-PARAGRAPH style, not a metadata style, so 4 short facts read as 4 oversized paragraphs with real dead vertical space between them, and inconsistent density vs the allowed-roots rows directly below (already using the compact SessionMeta strip). Folded all 4 facts into one SessionMeta call alongside the roots - same information, denser, one consistent style for every fact in the panel. Browser-witnessed at both viewport widths, no wrap/overlap regression. No kit changes needed (both fixes were app-only copy/wiring). Pushed b0b38fb."}

package/.gm/memories/mem-28889e43e8ce64cc-3663.md

@@ -0,0 +1,8 @@
+---
+key: mem-28889e43e8ce64cc-3663
+ns: default
+created: 1783891625733
+updated: 1783891625733
+---
+
+{"key":"agentgui-41st-run-gui-logic-predictability-sweep","value":"agentgui 41st run (2026-07-12): gui-logic-predictability workflow wf_c645ba95-c6a (23 agents, 192 tool calls, 0 errors) - 10 confirmed findings, all implemented, plus one real kit bug found+fixed mid-verification. App (site/app/js/app.js): runningPanel title retitled 'all running sessions · N' (was scoping-ambiguous 'running · N') plus a '(refreshing…)' suffix while a backgrounded-tab poll catches up (new state._activeStale flag); runningRowTitle() gained the same 3s 'indexing…' carve-out computeLiveSessions() already had, so a brand-new session no longer reads Untitled in one panel and indexing in another; Live dashboard elapsed/activity sort now freezes to the last-computed order while a pointer is held down anywhere in the dashboard (new module-level _livePointerDown flag) so cards stop reordering under a mid-click; agy gained a composer disclosure ('continues most recent conversation') matching claude-code's resume banner; History's ConversationList mapper now reads a real agent/model badge sourced from ccsniff (previously hardcoded agent:undefined). Kit (design/src/components/{chat,content}.js, chat.css, sessions.js): ChatMessage's per-message copy action gained the same label/icon click-feedback flip its sibling copy controls already had; .agentchat-followup chips gained a dashed border to visually distinguish contextual follow-ups from generic empty-state seed chips; flashComposerNote's single shared DOM node now queues notes instead of silently overwriting an unread one; SessionDashboard's filter SearchInput now forwards resultCount to its aria-live region - wiring this up SURFACED a real pre-existing bug: SearchInput conditionally returned either a bare <input> or a wrapping <span> depending on whether resultCount/clearBtn were set, and since resultCount now toggles between renders, webjsx's applyDiff corrupted the DOM (a merged select+input node, the real input vanishing entirely) - fixed by always returning the .ds-search-input-wrap shape (confirmed display:contents, layout-transparent, safe everywhere). ccsniff (separate repo, github:AnEntrypoint/ccsniff#main, cloned to /config/workspace/ccsniff-work): Store.sessions() folds in the most-recent-by-ts model per session; index.js's assistant-event ingestion never actually populated model on pushed blocks (only system/init events carried it) - fixed to inherit message.model from the real Claude Code JSONL shape. node test.js ALL TESTS PASS both ccsniff commits (11f6c3b, then 26bbfcc/beff5e7 after a remote-advanced rebase), CI green. Reinstalling required deleting bun.lock entirely (a --force reinstall alone kept resolving to the stale pinned git sha even after rm -rf node_modules/ccsniff). The local buildesk server process needed an explicit SIGTERM restart for the new node_modules/ccsniff to load (Node/Bun caches modules in-process) - the env's custom /opt/gmweb-startup supervisor auto-respawned it within ~20s via bunx agentgui@latest, which correctly resolves to the local workspace's own bin/gmgui.cjs (workspace-linked, confirmed via the 'Workspace mode: skipping npm version checker' startup log line), not the published npm package. Kit pushed 71ee4e4, agentgui pushed 7ad7b4f then b32836e (PRD-resolve residual), all CI green all three repos (agentgui/design/ccsniff). Browser-witnessed every finding live on buildesk: Live filter input/select intact + working post-fix, aria-live '0 results'; .chat-msg-action.is-copied/.agentchat-followup CSS rules live in CSSOM; History rows reading real agent+model badges (18/18 sessions, claude-sonnet-5); 0 pageErrors throughout."}

package/.gm/prd.yml

@@ -3076,3 +3076,33 @@
   - gm-plugkit/playwriter browser verb dom=/capture eval context defect - requires an upstream tool fix outside agentgui/design
   status: completed
   witness: 'External tool defect, not resolvable from this repo/session: the gm-plugkit/playwriter browser verb''s dom= and capture prefixes evaluate in a Node vm context with no page/document binding (ReferenceError on every attempt this session), unlike the screenshot= and url=<target> paths which do reach the real page. This is a defect in the upstream gm-plugkit/playwriter tool package itself, outside agentgui and design repo scope. Recorded per the false-completion rule as blockedBy:external rather than marked done - screenshots remain the working witness fallback and were used for all browser verification in this sweep.'
+- id: cwd-validation-realtime-existing-probe-review
+  subject: Audit the existing debouncedCwdProbe/onCwdDraft validation - confirm it still races correctly with the new browse/recent/autocomplete affordances (no double state writes, no stale error surviving a valid pick)
+  status: pending
+- id: practicality-sweep-composer-ergonomics
+  subject: 'Beyond cwd: sweep the chat composer and immediate surrounding controls for other practicality gaps (agent/model switching friction, draft persistence edge cases, file attach friction) via a workflow dispatch'
+  status: pending
+- id: practicality-sweep-files-surface
+  subject: Sweep the Files tab for practicality gaps beyond the cwd-picker integration (navigation friction, bulk-op discoverability, missing shortcuts)
+  status: pending
+- id: practicality-sweep-history-settings
+  subject: Sweep History and Settings surfaces for practicality gaps (search ergonomics, settings organization, discoverability of power-user features)
+  status: pending
+- id: practicality-sweep-live-dashboard
+  subject: Sweep the Live dashboard for remaining practicality gaps beyond the 40th/41st run fixes
+  status: pending
+- id: practicality-verify-buildesk-live
+  subject: Live-verify all cwd-practicality and general-practicality findings on https://buildesk.acc.l-inc.co.za/gm via browser witness
+  status: pending
+- id: practicality-kit-build-vendor
+  subject: Build+test the design kit, re-vendor dist into site/app/vendor/anentrypoint-design
+  status: pending
+- id: practicality-push-ci-green
+  subject: Push kit and agentgui changes, verify CI green on both repos
+  status: pending
+- id: practicality-agents-md-record
+  subject: Record this run's findings in AGENTS.md following the existing run-log convention
+  status: pending
+- id: docstudio-cue-session-group-eyebrow
+  subject: Verify ConversationList's session-group headers (Today/Yesterday/etc) use the --tr-label token + --fg-3 tone consistently, matching docstudio's uppercase letter-spaced low-opacity eyebrow label idiom
+  status: pending

package/AGENTS.md

@@ -58,7 +58,7 @@ Screenshot audit fixed 3 "looks very diy" causes: `.ws-sessions` flat `--bg` (sh
 
 ## Negative-space + attention sweep (2026-07-03) — twenty-seventh run
 
-Scoped to the specific ask (negative space / attention), not a full agent fan-out: a live-browser review (screenshots + DOM measurement at 1280px and 420px) across chat/files/settings. Chat/settings visual balance was already reasonable from the prior 26 runs; found and fixed 2 real issues. (1) Files filter placeholder "Filter files in this directory" clipped against its intentionally-compact 220px input (no ellipsis, last character cut off at the box edge) — shortened to "Filter files", which fits without widening the control (the kit's own comment already states the compact width is deliberate: a full-width filter "reads as a search page and costs fold height"). (2) Settings SERVER panel rendered 4 short facts (version/uptime/connected clients/projects folder) each as its own `.lede` div — `.lede` is the `fs-xl`/tall-line-height INTRO-PARAGRAPH style, not a metadata style, so 4 short facts read as 4 oversized paragraphs with real dead vertical space between them, and inconsistent density vs the "allowed roots" rows directly below (already using the compact `SessionMeta` strip). Folded all 4 facts into one `SessionMeta` call alongside the roots — same information, denser, one consistent style for every fact in the panel. Browser-witnessed at both viewport widths, no wrap/overlap regression. No kit changes needed (both fixes are app-only copy/wiring). Pushed `b0b38fb`.
+Scoped live-browser review (chat/files/settings, 1280px+420px); fixed a clipped Files filter placeholder and a misapplied `.lede` styling 4 settings facts as oversized paragraphs. App-only, pushed `b0b38fb`. Full detail in rs-learn (recall "agentgui 27th run negative-space-attention detail").
 
 ## Per-row file move + lint tooling fix (2026-07-02) — twenty-sixth run
 

package/lib/http-handler.js

@@ -84,6 +84,25 @@ function sanitizeEntryName(name) {
   return n;
 }
 
+// Every confined filesystem route accepts its target path via a `?path=`/
+// `?dir=` query param, preferred over a path SEGMENT. A reverse proxy's
+// proxy_pass URI normalization can decode-then-reencode the request path,
+// collapsing an encoded %2F segment slash back into a literal '/' before
+// forwarding - the app then sees extra path segments instead of one opaque
+// one, strips what it thinks is a leading '/', and silently turns an absolute
+// path into a relative one that fails confinement even for genuinely
+// accessible directories/files. A query param is untouched by that
+// normalization on any proxy in front of this app. `legacyPrefix` is the old
+// `/api/xxx/<path>` route prefix, still accepted for any caller not yet
+// updated to the query-param form.
+function resolveConfinedPath(req, routePath, queryKey, legacyPrefix) {
+  const url = new URL(req.url, 'http://x');
+  const qVal = url.searchParams.get(queryKey);
+  if (qVal != null) return qVal;
+  const raw = routePath.split('?')[0].slice(legacyPrefix.length).replace(/^\//, '');
+  return raw ? decodeURIComponent(raw) : '';
+}
+
 // Map a Node.js filesystem error code to a safe human-readable string that
 // does not disclose host paths or internal stack context. Used everywhere an
 // err.message would otherwise be returned to the client.
@@ -382,8 +401,7 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
       // to the same allowlist as the Files surface (an unconfined stat would be
       // a filesystem oracle). Returns {ok, dir} or a 403/404 with plain copy.
       if (routePath.startsWith('/api/stat') && req.method === 'GET') {
-        const rawS = routePath.split('?')[0].slice('/api/stat'.length).replace(/^\//, '');
-        const decodedPath = rawS ? decodeURIComponent(rawS) : '';
+        const decodedPath = resolveConfinedPath(req, routePath, 'path', '/api/stat');
         const conf = confineToRoots(decodedPath, fsAllowRoots());
         if (!conf.ok) { sendJSON(req, res, conf.reason === 'not found' ? 404 : 403, { error: conf.reason }); return; }
         try {
@@ -441,8 +459,7 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
       // FileGrid + BreadcrumbPath render directly. Allowed roots default to the
       // server cwd + Claude projects dir; widen via FS_ROOTS (path-separated).
       if (routePath.startsWith('/api/list')) {
-        const rawQ = routePath.split('?')[0].slice('/api/list'.length).replace(/^\//, '');
-        const decodedPath = rawQ ? decodeURIComponent(rawQ) : '';
+        const decodedPath = resolveConfinedPath(req, routePath, 'dir', '/api/list');
         const allowRoots = fsAllowRoots();
         // Empty path = the first allow-root (a sane default landing dir).
         const reqPath = !decodedPath ? allowRoots[0] : decodedPath;
@@ -509,9 +526,8 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
       // and limited to reasonable text/code/image types so this is never a
       // generic arbitrary-file reader. Images are served via /api/image; this
       // returns text/* with utf-8.
-      if (routePath.startsWith('/api/file/')) {
-        const rawF = routePath.split('?')[0].slice('/api/file/'.length);
-        const decodedPath = decodeURIComponent(rawF);
+      if (routePath.startsWith('/api/file/') || routePath.startsWith('/api/file?')) {
+        const decodedPath = resolveConfinedPath(req, routePath, 'path', '/api/file/');
         const allowRoots = fsAllowRoots();
         const conf = confineToRoots(decodedPath, allowRoots);
         if (!conf.ok) { res.writeHead(conf.reason === 'not found' ? 404 : 403); res.end('Forbidden'); return; }
@@ -556,9 +572,8 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
       // Confined raw-bytes download (any type) with an attachment disposition,
       // so the Files view can offer download on a row. Same allowlist + realpath
       // confinement as /api/file and /api/image - never a generic file reader.
-      if (routePath.startsWith('/api/download/')) {
-        const rawD = routePath.split('?')[0].slice('/api/download/'.length);
-        const decodedPath = decodeURIComponent(rawD);
+      if (routePath.startsWith('/api/download/') || routePath.startsWith('/api/download?')) {
+        const decodedPath = resolveConfinedPath(req, routePath, 'path', '/api/download/');
         const allowRoots = fsAllowRoots();
         const conf = confineToRoots(decodedPath, allowRoots);
         if (!conf.ok) { res.writeHead(conf.reason === 'not found' ? 404 : 403); res.end('Forbidden'); return; }
@@ -766,9 +781,8 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
         return;
       }
 
-      if (routePath.startsWith('/api/image/')) {
-        const imagePath = routePath.slice('/api/image/'.length);
-        const decodedPath = decodeURIComponent(imagePath);
+      if (routePath.startsWith('/api/image/') || routePath.startsWith('/api/image?')) {
+        const decodedPath = resolveConfinedPath(req, routePath, 'path', '/api/image/');
         // Confine reads to an allowlist root. Without this the route is an
         // arbitrary-file-read of any image-extensioned path on the host (the
         // prior `includes('..')` guard is a no-op after path.normalize resolves

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentgui",
-  "version": "1.0.1059",
+  "version": "1.0.1061",
   "description": "Multi-agent ACP client with real-time communication",
   "type": "module",
   "main": "electron/main.js",

package/site/app/js/app.js

@@ -1665,6 +1665,21 @@ function filesMain() {
 // stop-selected against sessions that no longer exist.
 const LIVE_PREFS_KEY = 'agentgui.live';
 const FILES_PREFS_KEY = 'agentgui.files';
+// Recent-cwd MRU: a small, most-recently-used list of working directories
+// actually saved, so switching between a regular handful of projects needs no
+// re-typing/re-browsing. Capped small - this is a quick-pick convenience, not
+// a full history (that's what the Files tab + browse popover are for).
+const CWD_RECENT_KEY = 'agentgui.cwd.recent';
+const CWD_RECENT_CAP = 6;
+function loadRecentCwds() {
+  try { const v = JSON.parse(lsGet(CWD_RECENT_KEY) || '[]'); return Array.isArray(v) ? v : []; } catch { return []; }
+}
+function pushRecentCwd(path) {
+  if (!path) return;
+  const list = loadRecentCwds().filter((p) => p !== path);
+  list.unshift(path);
+  lsSet(CWD_RECENT_KEY, JSON.stringify(list.slice(0, CWD_RECENT_CAP)));
+}
 function persistLivePrefs() {
   lsSet(LIVE_PREFS_KEY, JSON.stringify({ sort: state.live.sort || 'status', errorsOnly: !!state.live.errorsOnly, filter: state.live.filter || '' }));
   if (state.tab === 'live') writeHash();
@@ -2296,6 +2311,16 @@ function chatMain() {
       cwdDraft: state.cwdDraft,
       cwdError: state.cwdError || null,
       cwdChecking: !!state.cwdChecking,
+      // Practicality upgrade: allowed roots (one-click starting points, always
+      // visible instead of buried in the Files tab's own picker), a small
+      // recent-cwd MRU (one-click switch between the handful of directories a
+      // user actually works in), and an inline browse popover (click through
+      // subdirectories right here instead of round-tripping through Files).
+      cwdRoots: (Array.isArray(state.files.roots) && state.files.roots.length)
+        ? state.files.roots.map((r) => ({ path: r, label: truncate(projectLabel(r) || r, 14, 24) }))
+        : undefined,
+      cwdRecent: loadRecentCwds().filter((p) => p !== state.chatCwd),
+      cwdBrowse: state.cwdBrowse || undefined,
       // Pasted images upload through the same confined endpoint the Files tab
       // uses, into the chat's current cwd, then insert the resulting relative
       // path into the draft - matching the desktop-composer expectation
@@ -2332,14 +2357,35 @@ function chatMain() {
         if (was !== now) render();
       },
       onSend: (v) => { state.chat.draft = v; sendChat(); },
-      onCwdEdit: () => { state.cwdEditing = true; state.cwdDraft = state.chatCwd || ''; state.cwdError = null; render(); requestAnimationFrame(() => { const inp = document.querySelector('.agentchat-cwd-input'); if (inp) inp.focus(); }); },
+      onCwdEdit: () => {
+        state.cwdEditing = true; state.cwdDraft = state.chatCwd || ''; state.cwdError = null; render();
+        requestAnimationFrame(() => { const inp = document.querySelector('.agentchat-cwd-input'); if (inp) inp.focus(); });
+        // A fresh user has no way to discover what's even browsable if roots
+        // are only fetched on the first "browse" click - prefetch them the
+        // moment the editor opens (root-only listDir call, cheap) so the
+        // always-visible roots row is populated on the very first open.
+        if (!(state.files.roots && state.files.roots.length)) {
+          B.listDir(state.backend, '').then((j) => { state.files.roots = j.roots || []; render(); }).catch(() => {});
+        }
+      },
+      onCwdBrowseToggle: () => toggleCwdBrowse(),
+      onCwdBrowseCrumb: (i) => cwdBrowseCrumb(i),
+      onCwdBrowseEnter: (path) => loadCwdBrowseDir(path),
+      onCwdBrowsePick: (path) => cwdBrowsePick(path),
       onCwdSave: async () => {
-        const path = (state.cwdDraft ?? '').trim();
-        // A relative cwd would resolve against the server process dir, not what
-        // the user means - require an absolute path (POSIX /..., UNC \\..., or
-        // Windows drive X:\...). Blank is valid (server default).
-        if (path && !/^([/\\]|[A-Za-z]:[/\\])/.test(path)) {
-          state.cwdError = 'enter an absolute path (e.g. /home/you/proj or C:\\proj) or leave blank';
+        let path = (state.cwdDraft ?? '').trim();
+        const isAbsolute = /^([/\\]|[A-Za-z]:[/\\])/.test(path);
+        // A bare relative subpath (no leading / or drive letter) resolves
+        // against the CURRENT chat cwd, not the server process dir - lets a
+        // power user type a known subfolder name instead of the full path or
+        // opening the browse popover. Only meaningful when a cwd is already
+        // set; with no current cwd there's no sensible base to resolve against.
+        if (path && !isAbsolute && state.chatCwd) {
+          const base = state.chatCwd.replace(/[/\\]+$/, '');
+          const sep = state.chatCwd.includes('\\') && !state.chatCwd.includes('/') ? '\\' : '/';
+          path = base + sep + path.replace(/^\.[/\\]/, '');
+        } else if (path && !isAbsolute) {
+          state.cwdError = 'enter an absolute path (e.g. /home/you/proj or C:\\proj), a subfolder name (resolves against the current cwd once one is set), or leave blank';
           render();
           return;
         }
@@ -2350,7 +2396,7 @@ function chatMain() {
             if (!st || st.ok === false) { state.cwdError = 'directory not found on the server: ' + path; render(); return; }
             if (!st.dir) { state.cwdError = 'that path is not a directory'; render(); return; }
           } catch (e) {
-            state.cwdError = e.status === 403 ? 'outside the accessible folders'
+            state.cwdError = e.status === 403 ? 'outside the accessible folders - use "browse…" or a "recent"/root chip above to pick a reachable one'
               : (e.status === 404 ? 'directory not found on the server: ' + path
               : (e.status ? 'directory not found on the server: ' + path : 'could not validate the path - server unreachable'));
             render();
@@ -2359,16 +2405,66 @@ function chatMain() {
         }
         state.cwdError = null;
         state.chatCwd = path;
-        if (state.chatCwd) lsSet('agentgui.cwd', state.chatCwd); else lsRemove('agentgui.cwd');
-        state.cwdEditing = false; state.cwdDraft = undefined; render();
+        if (state.chatCwd) { lsSet('agentgui.cwd', state.chatCwd); pushRecentCwd(state.chatCwd); } else lsRemove('agentgui.cwd');
+        state.cwdEditing = false; state.cwdDraft = undefined; state.cwdBrowse = null; render();
       },
-      onCwdCancel: () => { state.cwdEditing = false; state.cwdDraft = undefined; state.cwdError = null; state.cwdChecking = false; render(); requestAnimationFrame(() => { const btn = document.querySelector('.agentchat-cwd-btn'); if (btn) btn.focus(); }); },
+      onCwdCancel: () => { state.cwdEditing = false; state.cwdDraft = undefined; state.cwdError = null; state.cwdChecking = false; state.cwdBrowse = null; render(); requestAnimationFrame(() => { const btn = document.querySelector('.agentchat-cwd-btn'); if (btn) btn.focus(); }); },
       onCwdClear: () => { state.chatCwd = ''; lsRemove('agentgui.cwd'); render(); },
       onCwdDraft: (v) => { state.cwdDraft = v; state.cwdError = null; debouncedCwdProbe(); },
     }),
   ].filter(Boolean);
 }
 
+// Inline cwd-browse popover: a lightweight directory-only listing reusing the
+// same confined B.listDir the Files tab uses, but writing to its own
+// state.cwdBrowse rather than state.files - opening/closing the cwd browser
+// must never disturb whatever the Files tab currently has loaded, and vice
+// versa (independent request-id guards against cross-talk if both are open).
+let _cwdBrowseReqId = 0;
+async function loadCwdBrowseDir(dirPath) {
+  const myReq = (_cwdBrowseReqId += 1);
+  state.cwdBrowse = { ...(state.cwdBrowse || {}), loading: true };
+  render();
+  try {
+    const j = await B.listDir(state.backend, dirPath || '');
+    if (_cwdBrowseReqId !== myReq) return;
+    state.cwdBrowse = {
+      current: j.path,
+      segments: j.segments || [],
+      rootLabel: (state.files.roots && state.files.roots.length > 1) ? 'roots' : 'root',
+      // Directory-only listing: the cwd picker is for choosing a folder to run
+      // in, not for browsing/opening files - filter out non-directory entries.
+      entries: (j.entries || []).filter((e) => e.type === 'dir' || e.isDir || e.dir),
+      loading: false,
+    };
+    render();
+  } catch (e) {
+    if (_cwdBrowseReqId !== myReq) return;
+    state.cwdBrowse = { ...(state.cwdBrowse || {}), loading: false, entries: [] };
+    render();
+  }
+}
+function toggleCwdBrowse() {
+  if (state.cwdBrowse) { state.cwdBrowse = null; render(); return; }
+  loadCwdBrowseDir(state.cwdDraft || state.chatCwd || '');
+}
+function cwdBrowseCrumb(segIdx) {
+  if (!state.cwdBrowse || !state.cwdBrowse.segments) return;
+  const target = segIdx === 0 ? '' : state.cwdBrowse.segments.slice(0, segIdx).join('/');
+  loadCwdBrowseDir(target);
+}
+// "use this folder" commits the browse popover's CURRENT directory into the
+// draft input (leaving the popover open state cleared) so the user still
+// confirms via the normal save flow (which re-validates + persists to recent).
+function cwdBrowsePick(path) {
+  if (!path) return;
+  state.cwdDraft = path;
+  state.cwdError = null;
+  state.cwdBrowse = null;
+  debouncedCwdProbe();
+  render();
+}
+
 function offlineBanner() {
   if (state.health.status === 'ok' || state.health.status === 'unknown') return null;
   return Alert({ key: 'offline', kind: 'error', title: 'Backend unreachable',
@@ -2805,19 +2901,31 @@ async function sendChat(textArg) {
 // Validate the cwd draft while editing (debounced) so an invalid path reads as
 // invalid before the save click, via the existing confined /api/stat endpoint.
 const debouncedCwdProbe = debounce(async () => {
-  const path = (state.cwdDraft ?? '').trim();
+  const raw = (state.cwdDraft ?? '').trim();
   if (!state.cwdEditing) return;
-  if (!path || !/^([/\\]|[A-Za-z]:[/\\])/.test(path)) { state.cwdChecking = false; render(); return; }
+  const isAbsolute = /^([/\\]|[A-Za-z]:[/\\])/.test(raw);
+  let path = raw;
+  if (raw && !isAbsolute && state.chatCwd) {
+    // Mirror onCwdSave's relative-subpath resolution so the live-typing hint
+    // reflects the same interpretation the save button will actually apply.
+    const base = state.chatCwd.replace(/[/\\]+$/, '');
+    const sep = state.chatCwd.includes('\\') && !state.chatCwd.includes('/') ? '\\' : '/';
+    path = base + sep + raw.replace(/^\.[/\\]/, '');
+  } else if (raw && !isAbsolute) {
+    state.cwdChecking = false; render(); return;   // no cwd to resolve against yet - onCwdSave surfaces the error on save
+  } else if (!raw) {
+    state.cwdChecking = false; render(); return;
+  }
   state.cwdChecking = true; render();
-  const probed = path;
+  const probed = raw;   // compare against the RAW (unresolved) draft to detect staleness
   try {
-    const st = await B.statPath(state.backend, probed);
+    const st = await B.statPath(state.backend, path);   // query the RESOLVED absolute path
     if ((state.cwdDraft ?? '').trim() !== probed) return;   // draft moved on
     state.cwdError = (!st || st.ok === false) ? 'folder not found on the server'
       : (!st.dir ? 'that path is not a directory' : null);
   } catch (e) {
     if ((state.cwdDraft ?? '').trim() !== probed) return;
-    state.cwdError = e.status === 403 ? 'outside the accessible folders'
+    state.cwdError = e.status === 403 ? 'outside the accessible folders - try "browse…" or a chip above'
       : (e.status === 404 ? 'folder not found on the server' : null);
   }
   state.cwdChecking = false;
@@ -2966,7 +3074,9 @@ function historyMain() {
   }, { turns: 0, tools: 0, errors: 0 });
   const meta = SessionMeta({
     items: [
-      sess && sess.cwd ? { label: 'directory', value: sess.cwd, title: sess.cwd } : null,
+      sess && sess.cwd ? { label: 'directory', value: sess.cwd, title: sess.cwd,
+        actionLabel: 'use as chat cwd',
+        onAction: () => { state.chatCwd = sess.cwd; lsSet('agentgui.cwd', sess.cwd); pushRecentCwd(sess.cwd); announce('working directory set to ' + sess.cwd); render(); } } : null,
       (() => { const dur = sessionDuration(); return dur ? { label: 'duration', value: dur } : null; })(),
       { label: 'session id', value: state.selectedSid.slice(0, 8) + '…', title: state.selectedSid, onCopy: () => copyText(state.selectedSid, 'session id copied') },
       // Spelled counter vocabulary in the detail strip (events/turns/tools/
@@ -4041,8 +4151,16 @@ window.addEventListener('keydown', (e) => {
   }
   if (e.metaKey || e.ctrlKey || e.altKey) return;
   if (typing) {
-    if (e.key === 'Escape') t.blur();
-    return;
+    // The cwd editor's own text input is the one exception: Escape there must
+    // close the editor in a single press (matching every other Escape-
+    // closeable surface in the app), not blur-then-require-a-second-press.
+    if (e.key === 'Escape' && t.classList && t.classList.contains('agentchat-cwd-input')) {
+      t.blur();
+      // Fall through to the ladder below instead of returning early.
+    } else {
+      if (e.key === 'Escape') t.blur();
+      return;
+    }
   }
   if (e.key === 'Escape') {
     // Priority ladder for transient state (modals/drawers are kit-handled):
@@ -4052,6 +4170,17 @@ window.addEventListener('keydown', (e) => {
     // backdrop listener covers in-dialog focus; this covers everything else).
     if (state.files.dialog) { if (!state.files.dialog.busy) closeFileDialog(); return; }
     if (state.chat.confirmingEdit) { state.chat.confirmingEdit = null; render(); announce('edit cancelled'); return; }
+    // cwd editor: the browse popover is a nested layer within it - Escape
+    // closes the popover first (one level of the nesting) before falling
+    // through to closing the whole editor on a second press, matching the
+    // dialog-then-page Escape convention used elsewhere in the app.
+    if (state.cwdEditing) {
+      if (state.cwdBrowse) { state.cwdBrowse = null; render(); announce('folder browser closed'); return; }
+      state.cwdEditing = false; state.cwdDraft = undefined; state.cwdError = null; state.cwdChecking = false;
+      render(); announce('cwd edit cancelled');
+      requestAnimationFrame(() => { const btn = document.querySelector('.agentchat-cwd-btn'); if (btn) btn.focus(); });
+      return;
+    }
     if (state.confirmingClearData) { state.confirmingClearData = false; render(); announce('clear cancelled'); return; }
     if (state.confirmingNewChat) { clearTimeout(_newChatArmTimer); state.confirmingNewChat = false; render(); announce('new chat cancelled'); return; }
     if (state.live.confirmingStopAll || state.live.confirmingStopSelected) {

package/site/app/js/backend.js

@@ -91,8 +91,16 @@ export async function probeBackend(base) {
 // An empty path lands on the server's first allow-root. The server confines
 // every path to an allowlist root, so a 403 means the path is out of bounds.
 export async function listDir(base, dirPath) {
-  const seg = dirPath ? '/' + encodeURIComponent(dirPath) : '';
-  const r = await authedFetch(base + '/api/list' + seg);
+  // A path SEGMENT (encoded as %2F for its own slashes) is silently mangled by
+  // some reverse-proxy configs that normalize proxy_pass URIs - a nginx
+  // decode-then-reencode of the request path collapses %2F back into a literal
+  // slash before forwarding, so the app receives extra path segments instead
+  // of one opaque one, loses its leading slash on strip, and 403s every
+  // absolute-path listing that isn't the bare root. A query param is never
+  // subject to that URI-path normalization, so it survives any proxy in front
+  // of this app untouched.
+  const qs = dirPath ? '?dir=' + encodeURIComponent(dirPath) : '';
+  const r = await authedFetch(base + '/api/list' + qs);
   const j = await r.json().catch(() => ({}));
   if (!r.ok) {
     // Carry the HTTP status so the app can map 403/404 to plain copy (W9).
@@ -108,7 +116,10 @@ export async function listDir(base, dirPath) {
 // a 403 means out-of-bounds or unsupported type, 404 missing. Returns
 // { content, truncated }.
 export async function readFile(base, filePath) {
-  const r = await authedFetch(base + '/api/file/' + encodeURIComponent(filePath));
+  // Query param, not a path segment - see listDir()'s comment above for why:
+  // a reverse proxy's URI normalization can silently collapse an encoded %2F
+  // path-segment slash back into a literal slash before forwarding.
+  const r = await authedFetch(base + '/api/file?path=' + encodeURIComponent(filePath));
   if (!r.ok) {
     const t = await r.text().catch(() => '');
     throw new Error(t || ('file: ' + r.status));
@@ -119,13 +130,13 @@ export async function readFile(base, filePath) {
 
 // Same-origin URL for an image file (served by /api/image, token-threaded).
 export function imageUrl(base, filePath) {
-  return withToken(base + '/api/image/' + encodeURIComponent(filePath));
+  return withToken(base + '/api/image?path=' + encodeURIComponent(filePath));
 }
 
 // Same-origin download URL (served by /api/download, attachment disposition,
 // confined + token-threaded). Used by the Files row download action.
 export function downloadUrl(base, filePath) {
-  return withToken(base + '/api/download/' + encodeURIComponent(filePath));
+  return withToken(base + '/api/download?path=' + encodeURIComponent(filePath));
 }
 
 // ---------- File mutations (confined server endpoints) ----------
@@ -143,10 +154,13 @@ async function mutateJSON(base, route, body) {
   return j;
 }
 
-// Stat a path (GET /api/stat/<encoded>) for cwd validation. Returns {ok, dir}.
+// Stat a path (GET /api/stat?path=<encoded>) for cwd validation. Returns {ok, dir}.
 // Throws an Error carrying .status (403 outside roots, 404 missing).
 export async function statPath(base, p) {
-  const r = await authedFetch(base + '/api/stat/' + encodeURIComponent(p));
+  // Query param, not a path segment - see the comment in listDir() above for
+  // why: a reverse proxy's URI normalization can silently collapse an encoded
+  // %2F path-segment slash back into a literal slash before forwarding.
+  const r = await authedFetch(base + '/api/stat?path=' + encodeURIComponent(p));
   const j = await r.json().catch(() => ({}));
   if (!r.ok) { const e = new Error(j.error || ('stat: ' + r.status)); e.status = r.status; throw e; }
   return j;

package/site/app/vendor/anentrypoint-design/247420.css

@@ -60,8 +60,14 @@
   --sky:         #3A6EFF;
   /* --warn = interactive danger controls (buttons, banners, menus, error
      inputs); --danger below = passive error/status text and metrics
-     (kpi/sparkline deltas, auth-error text). Two tokens, one convention. */
-  --warn:        #E0241A;
+     (kpi/sparkline deltas, auth-error text). Two tokens, one convention.
+     #E0241A measured 4.19:1 on --paper — fails WCAG AA 4.5:1 for the many
+     TEXT usages (.field-error, .ds-btn-warn, .ds-stat-val.err-rate, toast/
+     session error labels), not just the interactive-control (>=3:1) usages.
+     Darkened to clear AA on --paper (5.29:1), --paper-2 (4.78:1), and the
+     thebird warm-paper preset (5.25:1) while staying visually a clear
+     warm red. */
+  --warn:        #C41C0C;
   /* Syntax-token aliases: light values pass 4.5:1 on paper; the dark blocks
      restore the bright dark-tuned originals. Components reference ONLY these. */
   --code-string:  var(--green);
@@ -477,7 +483,7 @@
   --accent: var(--acid); --accent-fg: var(--ink); --accent-ink: var(--acid-deep);
   --accent-tint: color-mix(in oklab, var(--accent-ink) 22%, var(--bg));
   /* A paper island under a dark ancestor must not inherit the dark signal pair. */
-  --flame: #C53E00; --amber: #7C570F; --warn: #E0241A; --sky: #3A6EFF;
+  --flame: #C53E00; --amber: #7C570F; --warn: #C41C0C; --sky: #3A6EFF;
 }
 
 /* thebird — warm-paper brand preset. A first-class swappable theme: it lives
@@ -951,6 +957,22 @@
 .ds-247420 .app-main > .ds-files-stack,
 .ds-247420 .app-main > .grow { flex: 1 1 auto; min-height: 0; }
 .ds-247420 .app-main.narrow { max-width: var(--measure-narrow); margin: 0 auto; }
+/* Article-body heading rhythm and lede spacing, consumed by flatspace-rendered
+   long-form pages (docs, papers) that drop headings/panels directly into .app-main. */
+.ds-247420 .app-main > h1,
+.ds-247420 .app-main > h2,
+.ds-247420 .app-main > h3 { margin-top: 36px; margin-bottom: 12px; }
+.ds-247420 .app-main > h1:first-child { margin-top: 8px; }
+.ds-247420 .app-main > .panel,
+.ds-247420 .app-main > .work-detail-chips,
+.ds-247420 .app-main > .cli { margin-top: 18px; margin-bottom: 18px; }
+.ds-247420 .app-main .ds-lede { margin-top: 4px; margin-bottom: 18px; max-width: 64ch; line-height: 1.6; }
+.ds-247420 .work-detail-chips { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; row-gap: 10px; }
+@media (max-width: 720px) {
+  .ds-247420 .app-main > h1,
+  .ds-247420 .app-main > h2,
+  .ds-247420 .app-main > h3 { margin-top: 28px; }
+}
 
 @media (min-width: 1400px) {
   /* Fluid ceiling, not a hard stop: scales from 1400px up to 1920px across the
@@ -7077,6 +7099,37 @@
 .ds-247420 .agentchat-cwd-input[aria-invalid='true'] { border-color: var(--flame); box-shadow: inset 0 0 0 var(--bw-hair) var(--flame); }
 .ds-247420 .agentchat-cwd-input[aria-busy='true'] { border-color: var(--fg-3); box-shadow: inset 0 0 0 var(--bw-hair) var(--fg-3); }
 
+/* cwd practicality upgrade: editing mode stacks the input row plus any
+   optional roots/recent/browse rows the host wires, instead of a single flat
+   row - each sub-row wraps independently at narrow widths. */
+.ds-247420 .agentchat-cwd-editing { flex-direction: column; align-items: stretch; }
+.ds-247420 .agentchat-cwd-row { display: flex; align-items: center; gap: var(--space-2, 8px); flex-wrap: wrap; }
+.ds-247420 .agentchat-cwd-roots, .ds-247420 .agentchat-cwd-recent {
+  display: flex; align-items: center; gap: 6px; flex-wrap: wrap;
+}
+.ds-247420 .agentchat-cwd-recent-label { font-size: var(--fs-tiny); color: var(--fg-3); }
+.ds-247420 .agentchat-cwd-chip {
+  background: var(--bg-2); border: var(--bw-hair) solid var(--rule); color: var(--fg-2);
+  border-radius: var(--r-pill); padding: 3px 10px; font: inherit; font-size: var(--fs-tiny);
+  cursor: pointer;
+}
+.ds-247420 .agentchat-cwd-chip:hover { border-color: var(--accent); color: var(--fg); }
+.ds-247420 .agentchat-cwd-chip:focus-visible { outline: var(--focus-w) solid var(--focus-color); outline-offset: var(--focus-offset); }
+.ds-247420 .agentchat-cwd-browse {
+  border: var(--bw-hair) solid var(--rule); border-radius: var(--r-1);
+  padding: var(--space-2, 8px); background: var(--bg-2);
+  display: flex; flex-direction: column; gap: 6px;
+  max-height: 220px;
+}
+.ds-247420 .agentchat-cwd-browse-list { overflow-y: auto; display: flex; flex-direction: column; max-height: 160px; }
+.ds-247420 .agentchat-cwd-browse-item {
+  background: none; border: none; color: var(--fg-2); text-align: left;
+  padding: 6px 8px; border-radius: var(--r-1); font: inherit; font-size: var(--fs-tiny);
+  cursor: pointer;
+}
+.ds-247420 .agentchat-cwd-browse-item:hover, .ds-247420 .agentchat-cwd-browse-item:focus-visible { background: var(--bg-3, var(--bg)); color: var(--fg); }
+.ds-247420 .agentchat-cwd-browse-loading, .ds-247420 .agentchat-cwd-browse-empty { padding: 6px 8px; font-size: var(--fs-tiny); color: var(--fg-3); }
+
 /* head + thread */
 .ds-247420 .agentchat-head {
   display: flex;
@@ -7277,7 +7330,7 @@
 }
 /* Coarse-pointer (touch): raise cwd button to 44px minimum tap target */
 @media (pointer: coarse) {
-  .ds-247420 .agentchat-cwd-btn { min-height: 44px; }
+  .ds-247420 .agentchat-cwd-btn, .ds-247420 .agentchat-cwd-chip, .ds-247420 .agentchat-cwd-browse-item { min-height: 44px; }
 }
 
 /* ----------------------------------------------------------------------------
@@ -7363,7 +7416,7 @@
    label sticks to the top of the scroll area for Claude-Desktop-style headers. */
 .ds-247420 .ds-session-group { display: flex; flex-direction: column; }
 .ds-247420 .ds-session-group-rows { display: flex; flex-direction: column; gap: 2px; }
-.ds-247420 .ds-session-group-label { position: sticky; top: 0; z-index: 1; background: var(--bg-1, var(--bg)); font-size: var(--fs-tiny); font-weight: 600; color: var(--fg-3); text-transform: uppercase; letter-spacing: var(--tr-caps); padding: var(--space-2) var(--space-2) var(--space-1); }
+.ds-247420 .ds-session-group-label { position: sticky; top: 0; z-index: 1; background: var(--bg-1, var(--bg)); font-size: var(--fs-tiny); font-weight: 600; color: var(--fg-3); text-transform: uppercase; letter-spacing: var(--tr-label); padding: var(--space-2) var(--space-2) var(--space-1); }
 .ds-247420 .ds-session-row {
   position: relative; display: flex; align-items: center; gap: var(--space-2);
   width: 100%; padding: var(--space-2); min-height: 52px; margin-bottom: 2px;
@@ -7660,15 +7713,15 @@
 .ds-247420 .ds-session-meta-item + .ds-session-meta-item::before { content: '\00B7'; color: var(--fg-3); margin-right: var(--space-1); }
 .ds-247420 .ds-session-meta-label { color: var(--fg-3); }
 .ds-247420 .ds-session-meta-value { font-family: var(--ff-mono); color: var(--fg-2); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.ds-247420 .ds-session-meta-copy {
+.ds-247420 .ds-session-meta-copy, .ds-247420 .ds-session-meta-action {
   padding: 2px 8px; min-height: 24px; cursor: pointer;
   background: var(--bg-2); border: var(--bw-hair) solid var(--bg-3); border-radius: var(--r-1);
   color: var(--fg-3); font-family: var(--ff-body); font-size: var(--fs-micro);
 }
-.ds-247420 .ds-session-meta-copy:hover { background: var(--bg-3); color: var(--fg); }
-.ds-247420 .ds-session-meta-copy:focus-visible { outline: var(--focus-w) solid var(--focus-color); outline-offset: 1px; }
+.ds-247420 .ds-session-meta-copy:hover, .ds-247420 .ds-session-meta-action:hover { background: var(--bg-3); color: var(--fg); }
+.ds-247420 .ds-session-meta-copy:focus-visible, .ds-247420 .ds-session-meta-action:focus-visible { outline: var(--focus-w) solid var(--focus-color); outline-offset: 1px; }
 @media (pointer: coarse), (max-width: 640px) {
-  .ds-247420 .ds-session-meta-copy { min-height: 44px; min-width: 44px; }
+  .ds-247420 .ds-session-meta-copy, .ds-247420 .ds-session-meta-action { min-height: 44px; min-width: 44px; }
 }
 
 /* ============================================================================
@@ -7917,7 +7970,7 @@
 
 /* Live command-center: status-bucket groups + header breakdown + heartbeat. */
 .ds-247420 .ds-dash-group { display: flex; flex-direction: column; gap: var(--space-2); }
-.ds-247420 .ds-dash-group-label { font-size: var(--fs-tiny); font-weight: 600; text-transform: uppercase; letter-spacing: var(--tr-caps); color: var(--fg-3); padding: 0 var(--space-1); }
+.ds-247420 .ds-dash-group-label { font-size: var(--fs-tiny); font-weight: 600; text-transform: uppercase; letter-spacing: var(--tr-label); color: var(--fg-3); padding: 0 var(--space-1); }
 .ds-247420 .ds-dash-breakdown { display: flex; align-items: center; gap: var(--space-1); font-size: var(--fs-sm); color: var(--fg-2); }
 /* Shape-channel discs mirror the .status-dot-disc vocabulary (solid /
    solid+halo / hollow ring) so a colour-blind user can scan the breakdown by