kaizen-agent 1.10.0 → 1.11.0

package/README.md

@@ -703,6 +703,19 @@ for f in ~/kaizen/commands/kaizen-*.md; do ln -s "$f" ~/.claude/commands/"$(base
 
 </details>
 
+## Reporting a bug
+
+```
+kaizen issue [what happened]
+```
+
+Opens kaizen's GitHub bug form with your machine filled in: kaizen version, OS, arch,
+CPU, RAM, bun version, terminal. The board does the same from *Report an issue* in its
+footer, and every error it shows carries a *Report* link with the error already in the
+form. Your home folder is written as `~`; no hostname or username is included. Nothing
+is sent until you read it and press Submit on GitHub. `kaizen issue --env` only prints
+the details.
+
 ## License
 
 MIT. *Kaizen (改善) is Japanese for continuous improvement — small changes, checked

package/cli/board.test.ts

@@ -101,3 +101,70 @@ test("planQuestions: a bullet after a blank line is not one more option", () =>
   const qs = planQuestions("## Open questions\nQ: One?\n   - A (recommended)\n   - B\n\n- Note: aside\n")!;
   expect(qs[0]!.options.map((o) => o.label)).toEqual(["A", "B"]);
 });
+
+test("card menu items: appropriate actions and distinct icons across phases", () => {
+  expect(html).toContain('<symbol id="i-open"');
+  expect(html).toContain('<symbol id="i-archive"');
+  expect(html).toContain('<symbol id="i-restore"');
+
+  const ico = (n: string) => `<svg><use href="#i-${n}"/></svg>`;
+  const menuSnippet = (html.slice(html.indexOf("if(k===menuKey){"), html.indexOf("el.innerHTML+=`<div class=\"menu-pop\"", html.indexOf("if(k===menuKey){"))) + "}").replace("const items=[];", "items=[];");
+  const getItems = new Function("c", "archive", `const ico = ${ico.toString()};\nlet k = 1, menuKey = 1, items = [];\n${menuSnippet}\nreturn items;`);
+
+  // Phase 0: Ideas (idea card)
+  const idea = { kind: "idea", status: "idea", column: 0 };
+  const ideaItems = getItems(idea, false);
+  expect(ideaItems.map((i: any) => i ? i[1] : null)).toEqual(["Run", "Edit", "Archive", null, "Reject", "Delete"]);
+  expect(ideaItems[0][2]).toBe(ico("play"));
+  expect(ideaItems[1][2]).toBe(ico("pen"));
+  expect(ideaItems[2][2]).toBe(ico("archive"));
+  expect(ideaItems[4][2]).toBe(ico("x"));
+  expect(ideaItems[5][2]).toBe(ico("trash"));
+
+  // Phase 1: Planning (starting idea)
+  const startingIdea = { kind: "idea", status: "starting", column: 1 };
+  const startItems = getItems(startingIdea, false);
+  expect(startItems.map((i: any) => i ? i[1] : null)).toEqual(["Open", "Run again", "Archive", null, "Remove"]);
+
+  // Phase 1: Planning (run waiting for plan approval)
+  const planWaiting = { kind: "run", status: "waiting", awaiting: "approvals.plan", column: 1 };
+  const planItems = getItems(planWaiting, false);
+  expect(planItems.map((i: any) => i ? i[1] : null)).toEqual(["Review plan", "Archive", null, "Abandon"]);
+  expect(planItems[0][2]).toBe(ico("open"));
+  expect(planItems[1][2]).toBe(ico("archive"));
+  expect(planItems[3][2]).toBe(ico("x"));
+
+  // Phase 2: Building (running run)
+  const buildingRun = { kind: "run", status: "running", column: 2 };
+  const buildItems = getItems(buildingRun, false);
+  expect(buildItems.map((i: any) => i ? i[1] : null)).toEqual(["Open", "Archive", null, "Abandon"]);
+
+  // Phase 3: Review (run waiting for review approval)
+  const reviewWaiting = { kind: "run", status: "waiting", awaiting: "approvals.review", column: 3 };
+  const reviewItems = getItems(reviewWaiting, false);
+  expect(reviewItems.map((i: any) => i ? i[1] : null)).toEqual(["Review work", "Archive", null, "Abandon"]);
+
+  // Phase 3: Review (run waiting on findings)
+  const findingsWaiting = { kind: "run", status: "waiting", awaiting: "findings", column: 3 };
+  const findingsItems = getItems(findingsWaiting, false);
+  expect(findingsItems.map((i: any) => i ? i[1] : null)).toEqual(["See findings", "Archive", null, "Abandon"]);
+
+  // Phase 4: Done (done run - no Abandon)
+  const doneRun = { kind: "run", status: "done", column: 4 };
+  const doneItems = getItems(doneRun, false);
+  expect(doneItems.map((i: any) => i ? i[1] : null)).toEqual(["Open", "Archive"]);
+
+  // Phase 4: Done (abandoned run - no Abandon)
+  const abandonedRun = { kind: "run", status: "abandoned", column: 4 };
+  const abandItems = getItems(abandonedRun, false);
+  expect(abandItems.map((i: any) => i ? i[1] : null)).toEqual(["Open", "Archive"]);
+
+  // Archive view
+  const archRun = getItems(doneRun, true);
+  expect(archRun.map((i: any) => i ? i[1] : null)).toEqual(["Restore", "Open"]);
+  expect(archRun[0][2]).toBe(ico("restore"));
+  expect(archRun[1][2]).toBe(ico("open"));
+
+  const archIdea = getItems(idea, true);
+  expect(archIdea.map((i: any) => i ? i[1] : null)).toEqual(["Restore", "Open", null, "Delete"]);
+});

package/cli/dashboard.ts

@@ -911,6 +911,7 @@ export async function dashboard(
       c.bold(r.cmd[0] === "sh" && r.cmd[2]?.includes("herdr tab create") ? "Started in a new herdr tab" : r.cmd[0] === "tmux" ? "Started in a new tmux window" : "Started in new terminal"),
       "",
       `  ${c.cyan("Agent")}     ${r.agent.name} (${c.bold(r.agent.cmd)})`,
+      ...(r.agent.note ? [`  ${c.amber(r.agent.note)}`] : []),
       `  ${c.cyan("Project")}   ${tilde(r.projectDir)}`,
       `  ${c.cyan("Task")}      ${it.text}`,
       ...(it.where ? [`  ${c.cyan("File")}      ${it.where}`] : []),

package/cli/install.ts

@@ -115,6 +115,20 @@ if (Bun.argv[2] === "sources" || Bun.argv[2] === "gather") {
   process.exit(0);
 }
 
+// `kaizen issue [what happened]` opens kaizen's GitHub bug form with this machine's
+// details filled in; `--env` only prints them.
+if (Bun.argv[2] === "issue") {
+  const { issueUrl, systemInfo } = await import("./state.ts");
+  if (args.has("--env")) { console.log(systemInfo()); process.exit(0); }
+  const what = Bun.argv.slice(3).join(" ");
+  const url = issueUrl({ title: what.split("\n")[0], what });
+  console.log(`\n  ${c.cyan(url)}\n`);
+  console.log(await openUrl(url)
+    ? `  ${c.dim("Opened in your browser. Check it, then submit it on GitHub.")}\n`
+    : `  ${c.dim("Open that link to file the issue.")}\n`);
+  process.exit(0);
+}
+
 if (args.has("--version") || args.has("-v") || args.has("version")) {
   console.log(versionOf(dirname(import.meta.dir)));
   process.exit(0);

package/cli/settings.ts

@@ -6,7 +6,7 @@ import { homedir } from "node:os";
 import { readText } from "./state.ts";
 
 // `text` is a value typed rather than chosen: a path. It has no values to cycle.
-type Setting = { key: string; label: string; group: string; values: string[]; help: string; text?: boolean };
+type Setting = { key: string; label: string; group: string; values: string[]; help: string; text?: boolean; folder?: boolean };
 
 export type PresetName = "low" | "medium" | "ultra";
 
@@ -116,7 +116,7 @@ const SETTINGS: Setting[] = [
   { key: "state.keep_runs", label: "Runs to keep", group: "Project", values: ["5", "10", "20", "50"], help: "Finished runs kept before the oldest is pruned. Open backlog items are rescued first" },
   { key: "dictation.model", label: "Dictation model", group: "Board", values: ["tiny", "base", "small", "large-v3-turbo"], help: "Whisper model the web board dictates with, in the browser. tiny ~60 MB rough; base ~165 MB English-leaning; small ~410 MB accurate across languages; large-v3-turbo ~1.5 GB best, needs a capable GPU. Downloaded once on the next mic press" },
   { key: "sources.every", label: "Gather requests", group: "Board", values: ["off", "1h", "6h", "24h"], help: "How often the board checks your request sources for new ideas while it is running. off: only when you press Gather now" },
-  { key: "board.projects_dir", label: "Projects folder", group: "Board", values: [], text: true, help: `A folder your projects live in, e.g. ${process.platform === "win32" ? join(homedir(), "Projects") : "~/Projects"}. Every folder inside it appears in the board's project list, ready to choose; choosing one sets it up. Empty: only projects kaizen already knows` },
+  { key: "board.projects_dir", label: "Projects folder", group: "Board", values: [], text: true, folder: true, help: `A folder your projects live in, e.g. ${process.platform === "win32" ? join(homedir(), "Projects") : "~/Projects"}. Every folder inside it appears in the board's project list, ready to choose; choosing one sets it up. Empty: only projects kaizen already knows` },
   { key: "ui.mouse", label: "Enable mouse", group: "Terminal", values: ["false", "true"], help: "Click to select, click again to act. While on, the terminal cannot select text with the mouse" },
 ];
 

package/cli/state.test.ts

@@ -4,10 +4,11 @@ import { test, expect, beforeAll, afterAll } from "bun:test";
 import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync, utimesSync, existsSync, readdirSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { tmpdir } from "node:os";
+import { issueUrl, systemInfo, scrubHome, REPO_URL, home as realHome } from "./state.ts";
 import {
   readRuns, readInbox, writeInbox, replaceIdea, abandonRun, allBacklog, backlog,
   statusOf, columnOf, parseItem, startedRuns, boardCards, readArchive, setArchived,
-  requestOf, agentFlags, readNotes, writeNotes, manualCommand, parseNotes, formatNote, appendNote, saveAttachment,
+  requestOf, agentFlags, plainModel, readNotes, writeNotes, manualCommand, parseNotes, formatNote, appendNote, saveAttachment,
   reviewFindings, pickFindings, fixPrompt, approvalPrompt, sessionLaunch, closeSessions, sweepSessions, readSessions, ownerOf, CLOSE_GRACE_MS, gitStatus, runGit, cardsGit, commitPush, readCommit, findTerminal, nativePath, pruneRuns, unrechecked, notice, notifier, notifyArgs, LOGO, type Card,
 } from "./state.ts";
 
@@ -246,6 +247,71 @@ test("agentFlags: per-tool model and effort from the agent block, inline or nest
   expect(agentFlags("/p", "codex", "agent:\n  default: codex\n")).toEqual([]);
 });
 
+test("plainModel: a typed model reaches launch lines only as a plain name", () => {
+  for (const m of ["opus", "gpt-5.1", "gemini-2.5-pro", "anthropic/claude-sonnet-4", "o3:high", "x@y"]) expect(plainModel(m)).toBe(true);
+  for (const m of ["", "x; rm -rf ~", "$(id)", "`id`", "a b", "'q'", "\"q\"", "opus[1m]", "-rf", "x".repeat(81)]) expect(plainModel(m)).toBe(false);
+});
+
+test("each tool gets the opening prompt the way it takes one: agy -i, opencode --prompt, the rest bare", () => {
+  const p = mkdtempSync(join(tmpdir(), "kz-"));   // no .kaizen: no session record
+  const argv = (cmd: string) => sessionLaunch(p, cmd, [cmd], "/kaizen x", "x").fullCmd;
+  expect(argv("agy")).toEqual(["agy", "-i", "/kaizen x"]);
+  expect(argv("opencode")).toEqual(["opencode", "--prompt", "/kaizen x"]);
+  expect(argv("codex")).toEqual(["codex", "/kaizen x"]);
+  expect(argv("gemini")).toEqual(["gemini", "/kaizen x"]);
+  if (process.platform !== "win32") expect(manualCommand("/p", "agy", "/kaizen x", ["--model", "m"])).toBe("cd '/p' && agy --model m -i '/kaizen x'");
+});
+
+test.skipIf(process.platform === "win32")("agent choice: project then global config, a note for a missing tool, a pick, and a run keeps its own", () => {
+  // The global config sits at the home bound at import, so this runs in a child with a scratch HOME.
+  const home = mkdtempSync(join(tmpdir(), "kz-home-")), bin = mkdtempSync(join(tmpdir(), "kz-bin-"));
+  for (const t of ["claude", "codex"]) writeFileSync(join(bin, t), "#!/bin/sh\nexit 0\n", { mode: 0o755 });
+  const script = `const S = await import(${JSON.stringify(join(dirname(import.meta.path), "state.ts"))});
+const fs = require("node:fs"), { join } = require("node:path");
+const P = join(process.env.HOME, "proj"), st = join(P, ".kaizen"), G = join(process.env.HOME, ".kaizen");
+fs.mkdirSync(join(st, "runs", "r1"), { recursive: true }); fs.mkdirSync(G, { recursive: true });
+fs.writeFileSync(join(G, "config.yml"), "agent:\\n  default: codex\\n  codex: { model: gpt-5, effort: low }\\n");
+fs.writeFileSync(join(st, "config.yml"), "mode: approve\\n");
+const out = { chain: [S.detectDefaultAgent(P).cmd, S.agentFlags(P, "codex")] };
+fs.writeFileSync(join(st, "config.yml"), "agent:\\n  default: claude\\n  codex:\\n    model: o3\\n");
+out.project = [S.detectDefaultAgent(P).cmd, S.agentFlags(P, "codex")];
+out.missing = S.detectDefaultAgent(P, "gemini");
+out.pick = [S.detectDefaultAgent(P, "codex").cmd, S.agentFlags(P, "codex", undefined, "gpt-5.1")];
+out.choices = S.agentChoices(P);
+// No terminal on PATH or display in env: the launch fails and hands back its manual line.
+const idea = { severity: null, where: null, text: "x", raw: "x" };
+// macOS always drives Terminal.app, which would open a real window: Linux only.
+if (process.platform === "linux") out.yolo = [S.launchRun(idea, P, undefined, { agent: "codex", yolo: true }), S.launchRun(idea, P, undefined, { agent: "codex" }), S.launchRun(idea, P, undefined, { agent: "gemini", yolo: true })].map((r) => [r.ok, r.agent.cmd, /--dangerously-bypass|--dangerously-skip|--yolo/.test(r.manual)]);
+fs.writeFileSync(join(st, "runs", "r1", "state.json"), JSON.stringify({ agent: "codex" }));
+out.fromState = S.runAgent(st, "r1");
+S.sessionLaunch(P, "codex", ["codex"], "/kaizen x", "x", "r1", "gpt-5.1");
+out.fromRecord = S.runAgent(st, "r1");
+out.tags = [S.boardCards([st], Date.now()).find((c) => c.id === "r1")?.tags];
+S.sessionLaunch(P, "codex", ["codex"], "/kaizen x", "x", "r1", undefined, true);
+out.tags.push(S.boardCards([st], Date.now()).find((c) => c.id === "r1")?.tags);
+console.log(JSON.stringify(out));`;
+  try {
+    const p = Bun.spawnSync(["bun", "-e", script], { cwd: home, env: { ...process.env, HOME: home, PATH: bin + ":" + dirname(process.execPath), DISPLAY: "", WAYLAND_DISPLAY: "", TERMINAL: "", TMUX: "", HERDR_ENV: "" } });
+    if (p.exitCode !== 0) throw new Error(p.stderr.toString());
+    expect(JSON.parse(p.stdout.toString())).toEqual({
+      // A project config.yml with no agent block leaves the global one in force.
+      chain: ["codex", ["-m", "gpt-5", "-c", "model_reasoning_effort=low"]],
+      project: ["claude", ["-m", "o3"]],
+      missing: { name: "Claude Code", cmd: "claude", note: "Gemini CLI is not installed; opened Claude Code instead" },
+      pick: ["codex", ["-m", "gpt-5.1"]],
+      choices: { default: "claude", agents: [
+        { name: "Claude Code", cmd: "claude", model: "", models: true, yolo: true },
+        { name: "Codex", cmd: "codex", model: "o3", models: true, yolo: true },
+      ] },
+      // Yolo adds the tool's bypass flag only when asked for, and not to a fallback tool.
+      ...(process.platform === "linux" ? { yolo: [[false, "codex", true], [false, "codex", false], [false, "claude", false]] } : {}),
+      tags: [["codex"], ["codex", "yolo"]],
+      fromState: { cmd: "codex", model: null },
+      fromRecord: { cmd: "codex", model: "gpt-5.1" },
+    });
+  } finally { rmSync(home, { recursive: true, force: true }); rmSync(bin, { recursive: true, force: true }); }
+});
+
 test("boardCards: a short idea is not retired by a request that merely contains the word", () => {
   const dir = join(mkdtempSync(join(tmpdir(), "kz-")), ".kaizen");
   mkdirSync(join(dir, "runs", "2026-09-01-a"), { recursive: true });
@@ -687,3 +753,48 @@ test("abandonRun closes the run's recorded sessions", () => {
   expect(abandonRun(st, "2026-10-01-z", "no")).toBe(null);
   expect(existsSync(join(st, "sessions", "k.pid"))).toBe(false);
 });
+
+// The folder dialog cannot be opened in a test, but its script can be checked without
+// showing it: compiled on a Mac, parsed on Windows. Elsewhere only the shape is pinned.
+test("folder dialog: each platform's script is well formed", async () => {
+  const { folderDialog } = await import("./web.ts");
+  const mac = folderDialog("darwin")!, win = folderDialog("win32")!;
+  expect(mac.slice(0, 3)).toEqual(["osascript", "-e", "activate"]);
+  expect(win.at(-1)).toContain("FolderBrowserDialog");
+  if (process.platform === "darwin") {
+    const out = join(mkdtempSync(join(tmpdir(), "kaizen-osa-")), "x.scpt");
+    expect(Bun.spawnSync(["osacompile", ...mac.slice(1), "-o", out]).exitCode).toBe(0);
+  }
+  if (process.platform === "win32") {
+    const check = `$e=$null;[void][System.Management.Automation.Language.Parser]::ParseInput($env:KZ_PS,[ref]$null,[ref]$e);exit $e.Count`;
+    expect(Bun.spawnSync([win[0], "-NoProfile", "-Command", check], { env: { ...process.env, KZ_PS: win.at(-1)! } }).exitCode).toBe(0);
+  }
+});
+
+test("issueUrl prefills the bug form's fields, without the home path", () => {
+  const u = new URL(issueUrl({ title: "boom", what: `ENOENT ${realHome}/Projects/x/.kaizen/state.json` }));
+  expect(`${u.origin}${u.pathname}`).toBe(`${REPO_URL}/issues/new`);
+  expect(u.searchParams.get("what")).toBe("ENOENT ~/Projects/x/.kaizen/state.json");
+  expect(u.searchParams.get("env")).toBe(systemInfo());
+  // Every key but GitHub's own must be a field id in the form, or it is dropped silently.
+  const ids = [...readFileSync(join(import.meta.dir, "..", ".github", "ISSUE_TEMPLATE", "bug.yml"), "utf8").matchAll(/^\s+id: (\S+)/gm)].map((m) => m[1]);
+  for (const k of u.searchParams.keys()) if (!["template", "title", "body"].includes(k)) expect(ids).toContain(k);
+  // Without the form on GitHub only `body` is read, so it must hold the machine too.
+  expect(u.searchParams.get("body")).toContain(systemInfo());
+  expect(u.searchParams.get("body")).toContain("ENOENT ~/Projects/x/.kaizen/state.json");
+  expect(systemInfo()).toMatch(/^kaizen: .+\nOS: .+\nCPU: .+\nRAM: \d+ GB\nbun: /);
+});
+
+test("issueUrl stays under GitHub's URL limit for a huge error", () => {
+  const u = issueUrl({ title: "x".repeat(500), what: "é".repeat(20000) });
+  expect(u.length).toBeLessThan(8000);
+  expect(new URL(u).searchParams.get("what")).toContain("…(cut)");
+});
+
+test("scrubHome hides a Windows home however the error spells it", () => {
+  const h = ["C:\\Users\\Firman"];
+  expect(scrubHome(`open C:\\Users\\Firman\\x, "c:\\\\users\\\\firman\\\\y", C:/Users/Firman/z`, h, true))
+    .toBe(`open ~\\x, "~\\\\y", ~/z`);
+  // Case matters off Windows: /home/Ann is not /home/ann.
+  expect(scrubHome("/home/ann/a /home/Ann/b", ["/home/ann"], false)).toBe("~/a /home/Ann/b");
+});

package/cli/state.ts

@@ -3,7 +3,7 @@
 // board (`web.ts`) both import this and draw it their own way.
 import { existsSync, readFileSync, readdirSync, appendFileSync, writeFileSync, mkdirSync, statSync, realpathSync, rmSync } from "node:fs";
 import { join, dirname, win32 } from "node:path";
-import { homedir } from "node:os";
+import { homedir, arch, cpus, release, totalmem, version as osVersion } from "node:os";
 
 // The real path: process.cwd() is always physical, so a raw $HOME that crosses a
 // symlink (/home -> var/home) would never compare equal to it.
@@ -20,25 +20,34 @@ export const KNOWN_AGENTS = [
   { name: "Cursor", dir: ".cursor", cmd: "cursor" },
 ];
 
-export function detectDefaultAgent(projectDir: string): { name: string; cmd: string } {
-  const cfgFile = existsSync(join(projectDir, ".kaizen", "config.yml"))
-    ? join(projectDir, ".kaizen", "config.yml")
-    : join(home, ".kaizen", "config.yml");
-  if (existsSync(cfgFile)) {
-    const text = readText(cfgFile);
-    const m = /^\s*agent:\s*\n\s*default:\s*(\S+)/m.exec(text) || /^\s*agent\.default:\s*(\S+)/m.exec(text);
-    if (m && m[1] && m[1] !== "auto") {
-      const found = KNOWN_AGENTS.find((a) => a.cmd === m[1] || a.name.toLowerCase() === m[1].toLowerCase());
-      if (found && Bun.which(found.cmd)) return found;
-    }
+export type Agent = { name: string; cmd: string; note?: string };
+
+// Each config.yml in the chain, project first: the first one that sets a key decides
+// it, so a project file that is silent about `agent` leaves the global one in force.
+const configTexts = (projectDir: string) =>
+  [join(projectDir, ".kaizen", "config.yml"), join(home, ".kaizen", "config.yml")].filter(existsSync).map(readText);
+
+// `want` is a per-run pick; without one, agent.default from the config chain. A
+// wanted tool that is not installed is swapped for the auto choice, and said so.
+export function detectDefaultAgent(projectDir: string, want?: string): Agent {
+  if (!want) for (const t of configTexts(projectDir)) {
+    const m = /^agent:\n(?:[ \t]+.*\n)*?[ \t]+default:[ \t]*["']?([^"'\s]+)/m.exec(t) || /^agent\.default:[ \t]*["']?([^"'\s]+)/m.exec(t);
+    if (m) { want = m[1]; break; }
   }
+  if (!want || want === "auto") return autoAgent(projectDir);
+  const found = KNOWN_AGENTS.find((a) => a.cmd === want || a.name.toLowerCase() === want!.toLowerCase());
+  if (found && onPath(found.cmd)) return found;
+  const a = autoAgent(projectDir);
+  return { ...a, note: `${found?.name ?? want} is not installed; opened ${a.name} instead` };
+}
 
+function autoAgent(projectDir: string): Agent {
   for (const a of KNOWN_AGENTS) {
-    if (existsSync(join(projectDir, a.dir)) && Bun.which(a.cmd)) return a;
+    if (existsSync(join(projectDir, a.dir)) && onPath(a.cmd)) return a;
   }
-  if (Bun.which("claude")) return { name: "Claude Code", cmd: "claude" };
+  if (onPath("claude")) return { name: "Claude Code", cmd: "claude" };
   for (const a of KNOWN_AGENTS) {
-    if (Bun.which(a.cmd)) return a;
+    if (onPath(a.cmd)) return a;
   }
   return { name: "Claude Code", cmd: "claude" };
 }
@@ -56,22 +65,53 @@ const EFFORT_FLAGS: Record<string, (e: string) => string[]> = {
   codex: (e) => ["-c", `model_reasoning_effort=${e}`],
 };
 
-export function agentFlags(projectDir: string, cmd: string, configText?: string): string[] {
-  if (configText === undefined) {
-    const f = [join(projectDir, ".kaizen", "config.yml"), join(home, ".kaizen", "config.yml")].find(existsSync);
-    configText = f ? readText(f) : "";
-  }
+// Each tool's own skip-every-permission-prompt mode, taken only when the Run form's
+// Yolo is picked for that launch. Flags as each tool's --help spells them.
+export const YOLO_FLAGS: Record<string, string[]> = {
+  claude: ["--dangerously-skip-permissions"], agy: ["--dangerously-skip-permissions"],
+  codex: ["--dangerously-bypass-approvals-and-sandbox"], gemini: ["--yolo"], opencode: ["--auto"],
+};
+
+// How each tool takes the opening prompt and stays interactive. agy refuses a bare
+// argument and exits; opencode reads one as the project folder to open.
+const PROMPT_FLAGS: Record<string, string[]> = { agy: ["-i"], opencode: ["--prompt"] };
+export const promptArgs = (cmd: string, prompt: string) => [...(PROMPT_FLAGS[cmd] ?? []), prompt];
+
+// A model typed on the board reaches launch lines and the manual command as text, so
+// only a plain name is taken: no spaces, quotes, `$`, `;`, backticks or globs.
+export const plainModel = (m: string) => /^[A-Za-z0-9][\w.:\/@-]{0,79}$/.test(m);
+
+// The tool's own block in the first config.yml of the chain that has one.
+function agentConfig(projectDir: string, cmd: string, configText?: string) {
   // ponytail: regex over the yaml, like detectDefaultAgent; a parser when a third key needs it
-  const block = new RegExp(`^agent:\\n(?:[ \\t]+.*\\n)*?[ \\t]+${cmd}:[ \\t]*(\\{[^}]*\\}|\\n(?:[ \\t]+[a-z]+:.*\\n?)+)`, "m").exec(configText);
-  if (!block) return [];
-  const get = (k: string) => new RegExp(`\\b${k}:[ \\t]*["']?([^"',}\\s]+)`).exec(block[1])?.[1];
-  const model = get("model"), effort = get("effort");
+  const re = new RegExp(`^agent:\\n(?:[ \\t]+.*\\n)*?[ \\t]+${cmd}:[ \\t]*(\\{[^}]*\\}|\\n(?:[ \\t]+[a-z]+:.*\\n?)+)`, "m");
+  let block: RegExpExecArray | null = null;
+  for (const t of configText === undefined ? configTexts(projectDir) : [configText]) if ((block = re.exec(t))) break;
+  const get = (k: string) => block && new RegExp(`\\b${k}:[ \\t]*["']?([^"',}\\s]+)`).exec(block[1])?.[1];
+  return { model: get("model") || undefined, effort: get("effort") || undefined };
+}
+
+// `model`: a per-run pick, in place of the configured one. Effort stays configured.
+export function agentFlags(projectDir: string, cmd: string, configText?: string, model?: string): string[] {
+  const cfg = agentConfig(projectDir, cmd, configText);
+  const m = model || cfg.model;
   return [
-    ...(model && MODEL_FLAGS[cmd] ? MODEL_FLAGS[cmd](model) : []),
-    ...(effort && EFFORT_FLAGS[cmd] ? EFFORT_FLAGS[cmd](effort) : []),
+    ...(m && MODEL_FLAGS[cmd] ? MODEL_FLAGS[cmd](m) : []),
+    ...(cfg.effort && EFFORT_FLAGS[cmd] ? EFFORT_FLAGS[cmd](cfg.effort) : []),
   ];
 }
 
+// What the board's Run form offers: the installed tools, the one it would pick, and
+// each one's configured model to start the field from.
+export function agentChoices(projectDir: string) {
+  return {
+    default: detectDefaultAgent(projectDir).cmd,
+    agents: KNOWN_AGENTS.filter((a) => onPath(a.cmd)).map((a) => ({
+      name: a.name, cmd: a.cmd, model: agentConfig(projectDir, a.cmd).model ?? "", models: !!MODEL_FLAGS[a.cmd], yolo: !!YOLO_FLAGS[a.cmd],
+    })),
+  };
+}
+
 // One argument as a POSIX shell reads it literally: a prompt carries quotes, `$`,
 // backticks and, with notes, newlines.
 const shq = (a: string) => `'${a.replace(/'/g, `'\\''`)}'`;
@@ -522,7 +562,7 @@ export type Card = {
   moved?: number;                                  // runs only: state.json mtime
   title?: string;                                  // runs only: first line of the request
   archived: boolean;                               // hidden from the board unless asked for
-  tags?: string[];                                 // runs only: runner, agent, "unrechecked"
+  tags?: string[];                                 // runs only: runner, agent, "yolo", "unrechecked"
   notes?: string;                                  // inbox notes, or runs/<id>/notes.md
 };
 
@@ -852,6 +892,9 @@ export function boardCards(states: string[], now: number): Card[] {
         ? { kind: "idea", status: "starting", text: it.text, state: st, where, column: 1, awaiting: null, dim: true, archived: false, notes: it.notes }
         : { kind: "idea", status: "idea", text: it.text, state: st, where, column: 0, awaiting: null, dim: false, archived: it.status === "archived", notes: it.notes });
     }
+    // Runs started in Yolo. Only yolo records are matched to runs, so a project that
+    // never used it pays one directory read.
+    const yolos = new Set(readSessions(st).filter((s) => s.yolo).map((s) => ownerOf(st, s)));
     for (const r of readRuns(st)) {
       next.push({
         kind: "run", id: r.id, status: statusOf(r, now), text: short(r.id), state: st, where, column: columnOf(r.stage, r.awaiting), moved: r.moved,
@@ -859,7 +902,7 @@ export function boardCards(states: string[], now: number): Card[] {
         awaiting: r.stage === "abandoned" ? null : r.awaiting,
         dim: r.stage === "abandoned",
         archived: archive.has(r.id),
-        tags: [r.runner, r.agent, unrechecked(st, r.id) ? "unrechecked" : undefined].filter((t): t is string => !!t),
+        tags: [r.runner, r.agent, yolos.has(r.id) ? "yolo" : undefined, unrechecked(st, r.id) ? "unrechecked" : undefined].filter((t): t is string => !!t),
         notes: readNotes(st, r.id) || undefined,
       });
     }
@@ -874,8 +917,8 @@ export function boardCards(states: string[], now: number): Card[] {
 // What starting a run needs, minus the screens: the TUI and the web board both
 // launch the same way and only differ in how they tell the user.
 export type Launch =
-  | { ok: true; agent: { name: string; cmd: string }; prompt: string; projectDir: string; cmd: string[] }
-  | { ok: false; agent: { name: string; cmd: string }; prompt: string; projectDir: string; manual: string; why: string };
+  | { ok: true; agent: Agent; prompt: string; projectDir: string; cmd: string[] }
+  | { ok: false; agent: Agent; prompt: string; projectDir: string; manual: string; why: string };
 
 export function projectOf(from: string) {
   return from === join(home, ".kaizen")
@@ -884,7 +927,7 @@ export function projectOf(from: string) {
 }
 
 export function manualCommand(projectDir: string, agentCmd: string, prompt: string, flags: string[] = []) {
-  const bin = [agentCmd, ...flags].join(" ");
+  const bin = [agentCmd, ...flags, ...(PROMPT_FLAGS[agentCmd] ?? [])].join(" ");
   // Pasted into whatever shell the user has. fish reads \' and \\ inside single
   // quotes as escapes, so ' and \ each go in double quotes, which sh and fish read alike.
   const q = (a: string) => `'${a.replace(/['\\]/g, (ch) => (ch === "'" ? `'"'"'` : `'"\\\\"'`))}'`;
@@ -894,10 +937,10 @@ export function manualCommand(projectDir: string, agentCmd: string, prompt: stri
 }
 
 // Agent sessions kaizen opened. Each launch leaves `sessions/<key>.json` in the
-// project's state dir ({run, text, cmd, sessionId, started}) and `<key>.pid`, which
+// project's state dir ({run, text, cmd, model, sessionId, started}) and `<key>.pid`, which
 // the agent writes itself. Only these are ever closed or resumed: a session the user
 // opened by hand has no record.
-export type Session = { key: string; run: string | null; text: string; cmd: string; sessionId: string | null; started: number };
+export type Session = { key: string; run: string | null; text: string; cmd: string; model?: string | null; yolo?: boolean; sessionId: string | null; started: number };
 
 // Tools that take a conversation id at launch and resume it by that id. Every other
 // tool gets a fresh session on each decision, as before.
@@ -1026,34 +1069,53 @@ export function firstSession(st: string, id: string, cmd: string, cwd: string):
   return readSessions(st).find((s) => s.sessionId && s.cmd === cmd && ownerOf(st, s) === id && existsSync(f.transcript(cwd, s.sessionId))) ?? null;
 }
 
+// The tool and model a run was started with: its latest recorded launch, else the
+// agent its state.json names. A decision continues on these whatever the config says now.
+export function runAgent(st: string, id: string): { cmd: string; model: string | null } | null {
+  const s = readSessions(st).filter((x) => ownerOf(st, x) === id).pop();
+  if (s) return { cmd: s.cmd, model: s.model ?? null };
+  try {
+    const a = JSON.parse(readText(join(st, "runs", id, "state.json"))).agent;
+    if (typeof a === "string" && a) return { cmd: a, model: null };
+  } catch { /* no run */ }
+  return null;
+}
+
 // The agent's argv for a launch, and its record. With a run, a decision: it resumes
 // the run's conversation when there is one. A project without a state dir gets no
 // record; making one here would shadow the user's.
-export function sessionLaunch(projectDir: string, cmd: string, base: string[], prompt: string, text: string, run?: string) {
+export function sessionLaunch(projectDir: string, cmd: string, base: string[], prompt: string, text: string, run?: string, model?: string, yolo?: boolean) {
   const st = join(projectDir, ".kaizen");
-  if (!existsSync(st)) return { fullCmd: [...base, prompt], pidFile: undefined, record: undefined };
+  if (!existsSync(st)) return { fullCmd: [...base, ...promptArgs(cmd, prompt)], pidFile: undefined, record: undefined };
   const f = SESSION_FLAGS[cmd];
   const prev = run ? firstSession(st, run, cmd, projectDir) : null;
   const sessionId = f ? prev?.sessionId ?? crypto.randomUUID() : null;
-  const fullCmd = [...base, ...(f && sessionId ? (prev ? f.resume(sessionId) : f.start(sessionId)) : []), prompt];
+  const fullCmd = [...base, ...(f && sessionId ? (prev ? f.resume(sessionId) : f.start(sessionId)) : []), ...promptArgs(cmd, prompt)];
   const key = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   mkdirSync(sessionsDir(st), { recursive: true });
   const record = join(sessionsDir(st), key + ".json");
-  writeFileSync(record, JSON.stringify({ run: run ?? null, text, cmd, sessionId, started: Date.now() }) + "\n");
+  writeFileSync(record, JSON.stringify({ run: run ?? null, text, cmd, model: model ?? null, ...(yolo ? { yolo: true } : {}), sessionId, started: Date.now() }) + "\n");
   return { fullCmd, pidFile: join(sessionsDir(st), key + ".pid"), record };
 }
 
 // run: the run a decision is for. Without it, an idea starting a new run.
-export function launchRun(it: Item, from: string, run?: string): Launch {
+// pick: the tool, model and yolo chosen for a new run; a decision takes the run's own
+// tool and model, and never yolo.
+export function launchRun(it: Item, from: string, run?: string, pick: { agent?: string; model?: string; yolo?: boolean } = {}): Launch {
   const projectDir = projectOf(from);
   // The run will be born here; the board must know the dir or the idea never retires.
   remember(projectDir);
-  const agent = detectDefaultAgent(projectDir);
+  const own = run && !pick.agent ? runAgent(join(projectDir, ".kaizen"), run) : null;
+  const agent = detectDefaultAgent(projectDir, pick.agent ?? own?.cmd);
   const agentBin = Bun.which(agent.cmd) ?? agent.cmd;
   const prompt = requestOf(it.where ? `/kaizen ${it.text} (${it.where})` : `/kaizen ${it.text}`, it.notes, from);
-  const flags = agentFlags(projectDir, agent.cmd);
+  const wanted = pick.model ?? (own?.cmd === agent.cmd ? own.model : null) ?? undefined;
+  const model = wanted && plainModel(wanted) ? wanted : undefined;
+  // Yolo was picked for one tool; a fallback to another opens in its normal mode.
+  const yolo = !!pick.yolo && agent.cmd === pick.agent && !!YOLO_FLAGS[agent.cmd];
+  const flags = [...agentFlags(projectDir, agent.cmd, undefined, model), ...(yolo ? YOLO_FLAGS[agent.cmd] : [])];
   // The idea as its run's request will hold it: without the runner word in front.
-  const s = sessionLaunch(projectDir, agent.cmd, [agentBin, ...flags], prompt, it.text.replace(/^(lite|full|auto|plan)\s+/i, ""), run);
+  const s = sessionLaunch(projectDir, agent.cmd, [agentBin, ...flags], prompt, it.text.replace(/^(lite|full|auto|plan)\s+/i, ""), run, model, yolo);
   const manual = manualCommand(projectDir, agent.cmd, prompt, flags);
   const drop = () => { if (s.record) rmSync(s.record, { force: true }); };
 
@@ -1249,3 +1311,58 @@ export async function commitPush(state: string, id: string, message: string, sho
   record(true);
   return { ok: true, sha };
 }
+
+// ---- issue reports
+
+// Where a bug report goes: package.json's repository, so a fork reports to itself.
+export const REPO_URL = (() => {
+  try {
+    const u = JSON.parse(readFileSync(join(import.meta.dir, "..", "package.json"), "utf8")).repository.url as string;
+    return u.replace(/^git\+/, "").replace(/\.git$/, "");
+  } catch { return "https://github.com/hfadhlullah/kaizen"; }
+})();
+
+// The machine, as an issue's Environment field. Nothing that names the person: no
+// hostname, no username, no paths.
+export function systemInfo(): string {
+  let osName = osVersion();
+  try {
+    if (process.platform === "linux") osName = /^PRETTY_NAME="?([^"\n]*)/m.exec(readFileSync("/etc/os-release", "utf8"))?.[1] || osName;
+    else if (process.platform === "darwin") osName = `macOS ${Bun.spawnSync(["sw_vers", "-productVersion"]).stdout.toString().trim()}`;
+  } catch { /* the kernel's own version string is still an answer */ }
+  let kaizen = "?";
+  try { kaizen = JSON.parse(readFileSync(join(import.meta.dir, "..", "package.json"), "utf8")).version; } catch {}
+  const cpu = cpus();
+  return [
+    `kaizen: ${kaizen}`,
+    `OS: ${osName} (${process.platform} ${release()}, ${arch()})`,
+    `CPU: ${cpu[0]?.model.trim() ?? "?"} × ${cpu.length}`,
+    `RAM: ${Math.round(totalmem() / 2 ** 30)} GB`,
+    `bun: ${Bun.version}`,
+    `terminal: ${process.env.TERM_PROGRAM ?? process.env.TERM ?? "?"}`,
+  ].join("\n");
+}
+
+// The home folder as `~`, so a pasted error does not carry the username. Windows paths
+// also arrive JSON-escaped (`C:\\Users\\x`) or with forward slashes, in any case.
+export function scrubHome(s: string, homes = [home, homedir()], win = process.platform === "win32"): string {
+  const forms = [...new Set(homes.filter((h) => h.length > 1).flatMap((h) => [h, h.replaceAll("\\", "\\\\"), h.replaceAll("\\", "/")]))]
+    .sort((a, b) => b.length - a.length);
+  return forms.reduce((t, h) => t.replace(new RegExp(h.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), win ? "gi" : "g"), "~"), s);
+}
+
+// A new-issue link with the bug form filled in. The user reads and submits it on
+// GitHub; nothing is sent from here. GitHub refuses URLs much past 8 KB, so the error
+// text gives way first.
+export function issueUrl(o: { title?: string; what?: string } = {}): string {
+  let what = scrubHome(o.what ?? "");
+  const title = scrubHome(o.title ?? "").slice(0, 120), env = systemInfo();
+  // `what` and `env` fill the form's fields; `body` carries the same text for when GitHub
+  // has no bug.yml (not pushed yet, a fork without it) and ignores the field params.
+  const build = () => `${REPO_URL}/issues/new?` + new URLSearchParams({
+    template: "bug.yml", title, what, env, body: `### What happened\n\n${what}\n\n### Environment\n\n\`\`\`text\n${env}\n\`\`\``,
+  }).toString();
+  let url = build();
+  while (url.length > 7500 && what) { what = what.slice(0, Math.floor(what.length * 0.8)) + "\n…(cut)"; url = build(); if (what.length < 20) what = ""; }
+  return url;
+}

package/cli/web.ts

@@ -4,9 +4,9 @@ import { existsSync, readdirSync, statSync, watch, appendFileSync, mkdirSync, ty
 import { join, dirname, resolve, sep } from "node:path";
 import {
   home, type Item, type Card, boardCards, knownProjects, remember, locate, label, tilde, searchRoots, findProjects,
-  readInbox, writeInbox, replaceIdea, abandonRun, launchRun, parseItem, short, setArchived, writeNotes,
+  readInbox, writeInbox, replaceIdea, abandonRun, launchRun, parseItem, agentChoices, projectOf, KNOWN_AGENTS, plainModel, short, setArchived, writeNotes,
   appendNote, saveAttachment, pidOnPort, readText, cmdExe, sysExe, powershellExe, runGit, cardsGit, readCommit, commitPush, notice, notifier, LOGO,
-  reviewFindings, pickFindings, fixPrompt, approvalPrompt, nativePath, closeSessions, sweepSessions,
+  reviewFindings, pickFindings, fixPrompt, approvalPrompt, nativePath, closeSessions, sweepSessions, issueUrl,
 } from "./state.ts";
 import { readSources, addSource, removeSource, moveSource, gatherSource, gatherAll, gatherDirs, due } from "./sources.ts";
 import { listNotes, saveNote, renameNote, deleteNote, boardIndex, linksTo } from "./notes.ts";
@@ -315,6 +315,19 @@ export async function web(repoDir: string, opts: Opts = {}) {
         return json({ sources, failed, every: await every() });
       }
 
+      // The Run form's choices for one project: installed tools and their models.
+      // A prefilled GitHub bug form. A redirect, so a plain link opens it with no script
+      // and no popup blocker in the way.
+      if (req.method === "GET" && path === "/issue") {
+        return Response.redirect(issueUrl({ title: url.searchParams.get("title") ?? "", what: url.searchParams.get("what") ?? "" }), 302);
+      }
+
+      if (req.method === "GET" && path === "/agents") {
+        const dir = url.searchParams.get("dir");
+        if (!dir || !states(true).includes(dir)) return bad("unknown state dir", 404);
+        return json(agentChoices(projectOf(dir)));
+      }
+
       if (req.method === "GET" && path === "/settings") {
         const { listSettings } = await import("./settings.ts");
         return json(listSettings(repoDir));
@@ -329,6 +342,28 @@ export async function web(repoDir: string, opts: Opts = {}) {
         return "error" in r ? bad(r.error) : json(r);
       }
 
+      // A page cannot learn a real path from a file input, so the board, which runs
+      // on the user's machine, opens the system's own folder dialog and answers it.
+      if (req.method === "POST" && path === "/pick-folder") {
+        if (!local(req)) return bad("cross-origin write refused", 403);
+        if (picking) return bad("a folder dialog is already open", 409);
+        const cmd = folderDialog();
+        if (!cmd) return bad("No folder dialog found: install zenity or kdialog, or type the path");
+        picking = true;
+        try {
+          const p = Bun.spawn(cmd, { stdin: "ignore", stdout: "pipe", stderr: "pipe" });
+          const [out, err, code] = await Promise.all([new Response(p.stdout).text(), new Response(p.stderr).text(), p.exited]);
+          // osascript ends a folder with "/"; a bare root (/, C:\) keeps its own.
+          const picked = /^([A-Za-z]:)?[\\/]$/.test(out.trim()) ? out.trim() : out.trim().replace(/[\\/]+$/, "");
+          if (code === 0 && picked) return json({ path: picked });
+          // Cancel: exit 1 with nothing said (zenity, kdialog), -128 (osascript), or exit 0 with no path (PowerShell).
+          if (code === 0 || !err.trim() || err.includes("-128")) return json({ cancelled: true });
+          return bad(err.trim().split("\n")[0]);
+        } catch (e) {
+          return bad(e instanceof Error ? e.message : String(e));
+        } finally { picking = false; }
+      }
+
       // Attachments only, never a run's own files: the path must sit under an
       // attachments/ directory of a known state dir, with no way back up.
       if (req.method === "GET" && path === "/file") {
@@ -452,11 +487,15 @@ export async function web(repoDir: string, opts: Opts = {}) {
           const text = String(body.text ?? "").trim();
           const kind = body.kind === "full" || body.kind === "lite" ? body.kind : "";
           if (!text) return bad("empty idea");
+          const agent = typeof body.agent === "string" && body.agent ? body.agent : undefined;
+          if (agent && !KNOWN_AGENTS.some((a) => a.cmd === agent)) return bad("unknown agent");
+          const model = typeof body.model === "string" ? body.model.trim() : "";
+          if (model && !plainModel(model)) return bad("A model name is letters, digits and . : / @ _ - only");
           const it: Item = parseItem(`${kind} ${text}`.trim());
           // A `started` idea may be run again: the terminal the first launch opened
           // can come up empty, and nothing else tells the board a run never began.
           it.notes = readInbox(dir).find((l) => (l.status === "open" || l.status === "started") && l.text === text)?.notes;
-          const r = launchRun(it, dir);
+          const r = launchRun(it, dir, undefined, { agent, model: model || undefined, yolo: body.yolo === true });
           if (r.ok) replaceIdea(dir, text, { status: "started", text });
           changed();
           return json(r.ok
@@ -651,6 +690,29 @@ export async function openApp(url: string) {
 }
 
 // Windows keeps browsers out of PATH; the usual install roots are the next best guess.
+// One dialog at a time: a second click while one is open would stack another.
+let picking = false;
+
+// The system folder picker for this platform, printing the chosen path on stdout.
+// macOS and Windows always have one; on Linux it is whichever desktop tool exists.
+export function folderDialog(platform: string = process.platform): string[] | null {
+  const prompt = "Choose your projects folder";
+  // osascript is a background process: without `activate` its dialog can open behind
+  // the browser. Plain `activate` targets osascript itself, so no Automation prompt.
+  if (platform === "darwin") return ["osascript", "-e", "activate", "-e", `POSIX path of (choose folder with prompt "${prompt}")`];
+  if (platform === "win32") {
+    // An owner form kept on top, or the dialog opens behind the browser.
+    const ps = `[Console]::OutputEncoding=[Text.Encoding]::UTF8;Add-Type -AssemblyName System.Windows.Forms;`
+      + `$o=New-Object System.Windows.Forms.Form -Property @{TopMost=$true};$d=New-Object System.Windows.Forms.FolderBrowserDialog;`
+      + `$d.Description='${prompt}';if($d.ShowDialog($o) -eq 'OK'){[Console]::Out.Write($d.SelectedPath)}`;
+    return [powershellExe(), "-NoProfile", "-STA", "-Command", ps];
+  }
+  const zenity = Bun.which("zenity", { PATH: process.env.PATH });
+  if (zenity) return [zenity, "--file-selection", "--directory", `--title=${prompt}`];
+  const kdialog = Bun.which("kdialog", { PATH: process.env.PATH });
+  return kdialog ? [kdialog, "--getexistingdirectory", home, "--title", prompt] : null;
+}
+
 function winChrome(exe: string) {
   const roots = [process.env["ProgramFiles"], process.env["ProgramFiles(x86)"], process.env["LOCALAPPDATA"]].filter(Boolean) as string[];
   const sub: Record<string, string> = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kaizen-agent",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "Staged workflow for AI agents — code, writing, research, operations: plan, human approval, build, independent review, bounded fix loop.",
   "type": "module",
   "bin": {

package/skills/kaizen/SKILL.md

@@ -62,7 +62,10 @@ If the user typed `/kaizen` with no argument and a run is in progress, treat it
 ## Before doing anything
 
 1. Locate the state directory: `.kaizen/` in the project folder's root, else
-   `~/.kaizen/` keyed by working directory. If neither exists and the user is starting
+   `~/.kaizen/` keyed by working directory. The project folder is the working
+   directory this session started in — never the folder this skill was read from, nor
+   the repository it lives in, even when that has a `.kaizen/` of its own. A run
+   written there is invisible to the board the user launched it from. If neither exists and the user is starting
    work, run `/kaizen init` first: it creates `.kaizen/` with a copy of the `spec*.md`
    files and — where the folder is a git repository — the gitignore entry
    (see [`adapters.md`](adapters.md)). Also append the project folder's absolute path

package/web/board.html

@@ -26,6 +26,11 @@ pre.mark span:nth-child(1){color:var(--ink-hi)}pre.mark span:nth-child(2){color:
 .sel{border:1px solid var(--line);border-radius:var(--r-s);padding:6px 12px;background-color:var(--bg-2);color:var(--ink);font-size:13px}
 select.sel,button.sel{cursor:pointer;appearance:none;padding-right:30px;max-width:100%;background-image:linear-gradient(45deg,transparent 50%,var(--dim) 50%),linear-gradient(135deg,var(--dim) 50%,transparent 50%);background-position:calc(100% - 16px) 50%,calc(100% - 11px) 50%;background-size:5px 5px;background-repeat:no-repeat}
 .sel:hover{border-color:var(--dim)}
+.agents{display:flex;flex-wrap:wrap;gap:6px}
+.agent{display:inline-flex;align-items:center;gap:6px;border:1px solid var(--line);border-radius:var(--r-s);padding:6px 12px;background:var(--bg-2);color:var(--dim);font-size:13px;cursor:pointer}
+.agent svg{width:14px;height:14px}.agent:hover{border-color:var(--dim)}
+.yolo{display:inline-flex;align-items:center;gap:8px;margin-right:auto;font-size:13px;color:var(--ink);cursor:pointer;white-space:nowrap}
+.agent[aria-checked=true]{border-color:var(--accent);color:var(--ink);background:color-mix(in srgb,var(--accent) 14%,var(--bg-2))}
 .hdr .sel{max-width:min(320px,100%);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;text-align:left}
 /* project picker: a select-shaped button over a searchable list */
 .combo{position:relative;max-width:100%;display:flex}
@@ -55,14 +60,14 @@ select.sel,button.sel{cursor:pointer;appearance:none;padding-right:30px;max-widt
 .btn.ghost{background:none;border-color:transparent;color:var(--dim);box-shadow:none}.btn.ghost:hover{color:var(--ink);background:var(--hover)}
 
 /* summary strip: each count is a pill that filters the board */
-.strip{display:flex;gap:8px;padding:10px 28px;flex-wrap:wrap;align-items:center;font-size:13px;color:var(--dim)}
+.strip{display:inline-flex;gap:8px;flex-wrap:wrap;align-items:center;font-size:13px;color:var(--dim)}
 .strip button{display:inline-flex;align-items:center;gap:6px;color:var(--dim);padding:4px 12px;border-radius:var(--r-pill);box-shadow:inset 0 0 0 1px var(--line);transition:background .12s,color .12s}
 .strip button:hover,.strip button.on{color:var(--ink);background:var(--hover)}
 .strip button.attn{color:var(--warn);box-shadow:inset 0 0 0 1px color-mix(in srgb,var(--warn) 45%,transparent)}
 .strip svg{width:14px;height:14px;stroke-width:1.8}
 
 /* board */
-main{flex:1;min-height:0;display:grid;grid-template-columns:repeat(5,minmax(200px,1fr));gap:24px;padding:0 28px 20px;overflow:auto;align-content:start}
+main{flex:1;min-height:0;display:grid;grid-template-columns:repeat(5,minmax(200px,1fr));gap:24px;padding:16px 28px 20px;overflow:auto;align-content:start}
 section h2::before{content:"";display:block;height:16px;margin-top:-16px}
 section{padding-top:16px}
 section h2{margin:0;font-size:13px;color:var(--ink);font-weight:600;display:flex;align-items:center;gap:8px;height:30px;position:sticky;top:0;background:var(--bg);z-index:1}
@@ -118,7 +123,7 @@ section h2 .clear{margin-left:auto;min-height:22px;padding:0 8px}
 .menu-pop button{text-align:left;padding:7px 10px;font-size:13px;font-weight:400;color:var(--ink);border-radius:var(--r-s);display:flex;gap:8px;align-items:center}
 .menu-pop button:hover{background:var(--hover)}
 .menu-pop button.danger{color:var(--danger)}
-.menu-pop svg{width:15px;height:15px}
+.menu-pop svg{width:15px;height:15px;flex-shrink:0}
 .menu-pop hr{border:0;border-top:1px solid var(--line);margin:4px 0}
 .more-btn{width:100%;padding:8px;color:var(--dim);font-size:12px;border:1px dashed var(--line);border-radius:var(--r)}
 .more-btn:hover{color:var(--ink);border-color:var(--dim)}
@@ -145,8 +150,10 @@ section h2 .clear{margin-left:auto;min-height:22px;padding:0 8px}
 
 /* footer */
 .ftr{display:flex;justify-content:space-between;gap:16px;padding:10px 28px;border-top:1px solid var(--line);color:var(--dim);font-size:12px;flex-wrap:wrap;align-items:center}
-.ftr span+span{margin-left:14px}.ftr .st svg{width:12px;height:12px}
-.ftr a{color:var(--dim);cursor:pointer;text-decoration:underline;text-underline-offset:2px}.ftr a:hover{color:var(--ink)}
+.ftr span+span,.ftr a+a{margin-left:14px}.ftr .strip{margin-right:14px;vertical-align:middle;font-size:12px}
+/* The footer is out of the eye's path, so the waiting alert is filled, not just outlined. */
+.ftr .strip .attn{color:var(--ink);background:color-mix(in srgb,var(--warn) 18%,transparent);box-shadow:inset 0 0 0 1px var(--warn)}.ftr .strip .attn:hover,.ftr .strip .attn.on{background:color-mix(in srgb,var(--warn) 30%,transparent)}.ftr .strip .attn svg{color:var(--warn)}.ftr .st svg{width:12px;height:12px}
+.ftr a{color:var(--dim);cursor:pointer;white-space:nowrap;text-decoration:underline;text-underline-offset:2px}.ftr a:hover{color:var(--ink)}
 
 /* side panel */
 .scrim{position:fixed;inset:0;z-index:10;background:color-mix(in srgb,var(--bg) 60%,transparent);backdrop-filter:blur(3px);display:none}
@@ -202,6 +209,7 @@ aside .foot .more .menu-pop{left:0;right:auto;top:auto;bottom:calc(100% + 4px)}.
 .srow>:nth-child(2){grid-column:2;grid-row:1/span 2;align-self:center;justify-self:end}
 .srow .hint{grid-column:1;margin:0;font-size:12px;color:var(--dim);line-height:1.45;max-width:46ch}
 .srow input.sel{width:170px}
+.fpick{display:inline-flex;gap:6px;align-items:center}
 .srow[hidden],.sg[hidden],.sjump button[hidden]{display:none}
 /* search and section chips: pinned to the top of the panel while the rows scroll under it */
 .sq{position:sticky;top:-24px;z-index:1;background:var(--bg-2);padding:24px 0 12px;margin:-24px 0 4px;border-bottom:1px solid var(--line)}.sq input{width:100%;max-width:none}.sq+.sg{margin-top:16px}
@@ -222,10 +230,55 @@ aside .foot .more .menu-pop{left:0;right:auto;top:auto;bottom:calc(100% + 4px)}.
 .car i{display:flex;gap:3px}.car u{width:14px;height:3px;border-radius:2px;background:var(--line)}.car u.on{background:var(--accent)}
 .toast{position:fixed;z-index:12;left:28px;bottom:56px;max-width:calc(100% - 56px);background:var(--ink);color:var(--bg);border-radius:var(--r);padding:10px 16px;font-size:13px;box-shadow:var(--shadow-2);opacity:0;transition:opacity .2s;pointer-events:none}
 .toast.on{opacity:1}
+.toast.on.rep{pointer-events:auto}.toast a{color:inherit;margin-left:8px;text-decoration:underline;text-underline-offset:2px}
 .help{position:fixed;inset:0;z-index:12;display:none;align-items:center;justify-content:center;background:color-mix(in srgb,var(--bg) 60%,transparent);backdrop-filter:blur(3px)}
 .help.on{display:flex}.help div{background:var(--bg-2);border:1px solid var(--line);border-radius:var(--r);padding:24px 28px;line-height:2.2;box-shadow:var(--shadow-2)}
-.help kbd{display:inline-block;min-width:40px;margin-right:12px;padding:0 6px;text-align:center;border:1px solid var(--line);border-radius:var(--r-s);background:var(--bg);font:12px/20px var(--mono);color:var(--ink)}
-@media(max-width:900px){main{grid-template-columns:1fr;padding-inline:16px;gap:8px}.hdr,.strip,.ftr{padding-inline:16px}.more{display:grid}.card:hover .age{display:inline}.toast{left:16px;max-width:calc(100% - 32px)}}
+/* request sources: cards, status badges, top bar, and add-box */
+.src-topbar{display:flex;justify-content:space-between;align-items:center;padding:10px 14px;background:var(--bg);border:1px solid var(--line);border-radius:var(--r);margin:14px 0 16px;gap:12px}
+.src-topbar .meta{display:flex;flex-direction:column;gap:2px}
+.src-topbar .count{font-size:13px;font-weight:600;color:var(--ink)}
+.src-topbar .sched{font-size:12px;color:var(--dim)}
+.src-topbar .sched a{color:var(--accent);text-decoration:none;cursor:pointer}
+.src-topbar .sched a:hover{text-decoration:underline}
+.src-topbar .btn{display:inline-flex;align-items:center;gap:6px}
+.src-topbar .btn svg{width:14px;height:14px}
+.src-list{display:flex;flex-direction:column;gap:10px}
+.src-card{background:var(--bg-2);border:1px solid var(--line);border-radius:var(--r);padding:14px;box-shadow:var(--shadow-1);display:flex;flex-direction:column;gap:9px;transition:border-color .15s}
+.src-card:hover{border-color:color-mix(in srgb,var(--line) 70%,var(--ink))}
+.src-hd{display:flex;justify-content:space-between;align-items:center;gap:10px}
+.src-info{display:flex;align-items:center;gap:8px;min-width:0}
+.src-ico{width:20px;height:20px;flex-shrink:0;color:var(--accent);display:inline-flex;align-items:center;justify-content:center}
+.src-ico svg{width:18px;height:18px}
+.src-title{font-size:14px;font-weight:600;color:var(--ink);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.src-acts{display:flex;align-items:center;gap:4px;flex-shrink:0}
+.src-acts .btn{display:inline-flex;align-items:center;gap:5px}
+.src-acts .btn svg{width:14px;height:14px}
+.src-url{font-size:12px;color:var(--dim);overflow-wrap:anywhere;line-height:1.4}
+.src-url a{color:inherit;text-decoration:none;display:inline-flex;align-items:center;gap:4px}
+.src-url a:hover{color:var(--ink);text-decoration:underline}
+.src-url svg{width:12px;height:12px;stroke-width:1.8;flex-shrink:0}
+.src-status{display:flex;flex-wrap:wrap;align-items:center;gap:6px;font-size:12px}
+.src-badge{display:inline-flex;align-items:center;gap:5px;padding:2px 8px;border-radius:var(--r-pill);font-size:11px;font-weight:500}
+.src-badge.ok{background:color-mix(in srgb,var(--ok) 14%,transparent);color:var(--ok)}
+.src-badge.warn{background:color-mix(in srgb,var(--warn) 20%,transparent);color:var(--ink);font-weight:500}
+.src-badge.warn svg{color:var(--warn)}
+.src-badge.dim{background:color-mix(in srgb,var(--dim) 14%,transparent);color:var(--dim)}
+.src-badge svg{width:12px;height:12px;stroke-width:2;flex-shrink:0}
+.src-dest{display:flex;align-items:center;gap:8px;font-size:12px;color:var(--dim);padding-top:8px;border-top:1px solid var(--line)}
+.src-dest .sel{flex:1;max-width:240px;height:28px;font-size:12px;padding:2px 8px}
+.src-dest .btn{height:28px;padding:0 10px;font-size:12px}
+.src-empty{padding:26px 16px;text-align:center;background:var(--bg);border:1px dashed var(--line);border-radius:var(--r);margin:12px 0 16px}
+.src-empty-ico{width:36px;height:36px;margin:0 auto 10px;color:var(--dim);display:flex;align-items:center;justify-content:center}
+.src-empty-ico svg{width:32px;height:32px}
+.src-empty h4{margin:0 0 6px;font-size:14px;font-weight:600;color:var(--ink)}
+.src-empty p{margin:0 0 12px;font-size:12px;color:var(--dim);line-height:1.5}
+.src-empty-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(130px,1fr));gap:8px;margin-top:12px;text-align:left}
+.src-empty-item{background:var(--bg-2);border:1px solid var(--line);border-radius:var(--r-s);padding:8px 10px;font-size:11px;color:var(--dim);line-height:1.4}
+.src-empty-item strong{display:block;color:var(--ink);font-weight:500;margin-bottom:2px}
+.src-add-box{background:var(--bg-2);border:1px solid var(--line);border-radius:var(--r);padding:16px;margin-top:16px;box-shadow:var(--shadow-1)}
+.src-add-box h3{margin:0 0 12px;font-size:13px;font-weight:600;color:var(--ink);display:flex;align-items:center;gap:6px}
+.src-add-box h3 svg{width:16px;height:16px}
+@media(max-width:900px){main{grid-template-columns:1fr;padding-inline:16px;gap:8px}.hdr,.ftr{padding-inline:16px}.more{display:grid}.card:hover .age{display:inline}.toast{left:16px;max-width:calc(100% - 32px)}}
 @media(prefers-reduced-motion:reduce){*,*::before,*::after{transition:none!important;animation:none!important}}
 </style>
 </head>
@@ -243,6 +296,13 @@ aside .foot .more .menu-pop{left:0;right:auto;top:auto;bottom:calc(100% + 4px)}.
 <symbol id="i-trash" viewBox="0 0 24 24"><path d="M3 6h18M8 6V4h8v2M6 6l1 14h10l1-14M10 11v6M14 11v6"/></symbol>
 <symbol id="i-close" viewBox="0 0 24 24"><path d="M18 6L6 18M6 6l12 12"/></symbol>
 <symbol id="i-more" viewBox="0 0 24 24"><circle cx="5" cy="12" r="1.2" fill="currentColor"/><circle cx="12" cy="12" r="1.2" fill="currentColor"/><circle cx="19" cy="12" r="1.2" fill="currentColor"/></symbol>
+<symbol id="i-open" viewBox="0 0 24 24"><rect x="3" y="3" width="18" height="18" rx="2"/><path d="M15 3v18"/></symbol>
+<symbol id="i-archive" viewBox="0 0 24 24"><rect x="2" y="3" width="20" height="5" rx="1"/><path d="M4 8v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8M10 12h4"/></symbol>
+<symbol id="i-restore" viewBox="0 0 24 24"><path d="M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"/><path d="M3 3v5h5"/></symbol>
+<symbol id="i-sheet" viewBox="0 0 24 24"><rect x="3" y="3" width="18" height="18" rx="2"/><path d="M3 9h18M3 15h18M9 3v18"/></symbol>
+<symbol id="i-doc" viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6M16 13H8M16 17H8M10 9H8"/></symbol>
+<symbol id="i-refresh" viewBox="0 0 24 24"><path d="M21 3v5h-5M3 21v-5h5M20.5 13A9 9 0 0 1 5.7 18.3L3 16M3.5 11A9 9 0 0 1 18.3 5.7L21 8"/></symbol>
+<symbol id="i-ext" viewBox="0 0 24 24"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6M15 3h6v6M10 14L21 3"/></symbol>
 <symbol id="s-idea" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6" stroke-dasharray="2 2.5"/></symbol>
 <symbol id="s-start" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6" stroke-dasharray="2 2.5"/><path d="M6.5 5.5v5l4-2.5z" fill="currentColor" stroke="none"/></symbol>
 <symbol id="s-run" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6"/><path d="M8 2a6 6 0 0 1 0 12z" fill="currentColor" stroke="none"/></symbol>
@@ -273,11 +333,9 @@ aside .foot .more .menu-pop{left:0;right:auto;top:auto;bottom:calc(100% + 4px)}.
   <button class="ib" id="sources" title="Request sources" aria-label="Request sources"><svg><use href="#i-link"/></svg></button>
   <button class="ib" id="settings" title="Settings" aria-label="Settings"><svg><use href="#i-gear"/></svg></button>
 </div>
-<div class="strip" id="strip"></div>
-
 <main id="board" aria-live="polite"></main>
 
-<div class="ftr"><span id="legend"></span><span><a id="kbd">Keyboard shortcuts</a></span></div>
+<div class="ftr"><span id="legend"></span><span><span class="strip" id="strip"></span><a href="/issue" target="_blank" rel="noopener">Report an issue</a><a id="kbd">Keyboard shortcuts</a></span></div>
 
 <div class="scrim" id="scrim"></div>
 <aside id="panel" aria-label="detail">
@@ -374,7 +432,7 @@ function mic(fields){
  return b}
 const m=60e3,h=3600e3,d=86400e3;
 const age=(t,now)=>{const x=now-t;return x<h?Math.round(x/m)+"m":x<d?Math.round(x/h)+"h":Math.round(x/d)+"d"};
-const NAMES={claude:"Claude Code",codex:"Codex",agy:"Antigravity",opencode:"OpenCode",gemini:"Gemini",cursor:"Cursor",unrechecked:"fix not rechecked"};
+const NAMES={claude:"Claude Code",codex:"Codex",agy:"Antigravity",opencode:"OpenCode",gemini:"Gemini",cursor:"Cursor",yolo:"yolo",unrechecked:"fix not rechecked"};
 const MARKS={claude:1,codex:1,agy:1,opencode:1,gemini:1,cursor:1,full:1,lite:1};
 const COLS=["Ideas","Planning","Building","Review","Done"];
 // state.ts statuses onto the icon set in the <defs> above.
@@ -425,7 +483,7 @@ async function follow(idea){
  if(openKey===k)close()}
 // A tab outliving its server would otherwise swallow every click: say so.
 const GONE="The board server is not running — start it with kaizen web (or the shortcut), then reload.";
-async function post(path,body){let r;try{r=await fetch(path,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(body)})}catch{toast(GONE);return{ok:false}}const j=await r.json().catch(()=>({}));if(!r.ok){toast(j.error||j.why||"That did not work");if(j.manual)console.log("run manually:",j.manual)}return j}
+async function post(path,body){let r;try{r=await fetch(path,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(body)})}catch{toast(GONE);return{ok:false}}const j=await r.json().catch(()=>({}));if(!r.ok){const m=j.error||j.why||"That did not work";toast(m,{title:m.slice(0,80),what:`POST ${path} failed (HTTP ${r.status}): ${m}`});if(j.manual)console.log("run manually:",j.manual)}return j}
 
 function card(c){
  const k=key(c),el=document.createElement("div");el.className="card"+(k===openKey?" open":"")+(k===menuKey?" menu":"")+(c.archived?" archived":"");el.tabIndex=0;el.dataset.k=k;el.setAttribute("role","button");
@@ -434,25 +492,35 @@ function card(c){
  if(c.status==="waiting")chips.push(`<span class="chip warn"><i></i>${esc(need(c.awaiting)||"needs you")}</span>`);
  else if(c.status==="running")chips.push(`<span class="chip run"><i></i>running</span>`);
  if(all)chips.push(`<span class="chip">${esc(c.where)}</span>`);
- chips.push(...(c.tags||[]).map(t=>{const mark=MARKS[t]?`<svg><use href="#c-${t}"/></svg>`:"";return `<span class="chip${t==="full"||t==="lite"?" accent":""}">${mark}${esc(NAMES[t]||t)}</span>`}));
+ chips.push(...(c.tags||[]).map(t=>{const mark=MARKS[t]?`<svg><use href="#c-${t}"/></svg>`:"";return `<span class="chip${t==="full"||t==="lite"?" accent":t==="yolo"?" warn":""}"${t==="yolo"?' title="Started in Yolo: the agent runs commands without asking"':""}>${mark}${esc(NAMES[t]||t)}</span>`}));
  // A gathered idea's notes open with the stamp ingest() writes; its chip names the source.
  const g=c.notes&&/^\[[^\]]*\] Gathered from (.+?)\. Outside text/.exec(c.notes);if(g)chips.push(`<span class="chip" title="From ${esc(g[1])}">gathered</span>`);else if(c.notes)chips.push(`<span class="chip">notes</span>`);
  // Information only: the panel's button is where it is committed and pushed.
  if(c.git){const t=c.git==="pushed"?"Committed & pushed":"Not committed & pushed yet";chips.push(`<span class="chip ${c.git==="pushed"?"ok":"warn"}" role="img" title="${t}" aria-label="${t}"><svg><use href="#c-git"/></svg></span>`)}
  const pick=picking&&!archive&&c.column===4;
- el.innerHTML=(pick?`<input type="checkbox" class="pick" ${picked.has(k)?"checked":""} aria-label="Select">`:"")+`<div class="c-id"><span class="st d-${st}"><svg><use href="#s-${st}"/></svg></span><span class="idt">${esc(idt)}</span><span class="age">${c.kind==="run"?age(c.moved||S.now,S.now):""}</span><button class="ib sm more" data-a="menu" title="Actions" aria-label="Actions">${ico("more")}</button></div>
+ el.innerHTML=(pick?`<input type="checkbox" class="pick" ${picked.has(k)?"checked":""} aria-label="Select">`:"")+`<div class="c-id"><span class="st d-${st}"><svg><use href="#s-${st}"/></svg></span><span class="idt">${esc(idt)}</span><span class="age">${c.kind==="run"?age(c.moved||S.now,S.now):""}</span><button class="ib sm more" data-a="menu" title="Actions" aria-label="Actions" aria-haspopup="menu" aria-expanded="${k===menuKey}">${ico("more")}</button></div>
   <div class="c-title">${esc(c.kind==="idea"?c.text:(c.title||c.id))}</div>
   <div class="c-chips">${chips.join("")}</div>`;
  if(k===menuKey){
   const items=[];
-  if(archive){items.push(["restore","Restore",ico("play")]);if(c.kind==="run")items.push(["open","Open",ico("play")]);}
-  else if(c.kind==="idea"&&c.status==="idea")items.push(["run","Run",ico("play")],["edit","Edit",ico("pen")],["reject","Reject",ico("x")],null,["delete","Delete",ico("trash"),"danger"]);
-  else if(c.kind==="idea")items.push(["run","Run again",ico("play")],null,["delete","Remove",ico("trash"),"danger"]);
-  else if(c.status==="waiting"||c.status==="running"||c.status==="stalled")items.push(["open","Open",ico("play")],null,["reject","Abandon",ico("x"),"danger"]);
-  else items.push(["open","Open",ico("play")]);
-  if(!archive&&!(c.kind==="idea"&&c.status!=="idea"))items.push(null,["archive","Archive",ico("x")]);
-  el.innerHTML+=`<div class="menu-pop">${items.map(i=>i?`<button data-a="${i[0]}" class="${i[3]||""}">${i[2]}${i[1]}</button>`:"<hr>").join("")}</div>`}
- el.querySelectorAll("[data-a]").forEach(bt=>bt.onclick=async e=>{e.stopPropagation();const a=bt.dataset.a;menuKey=null;if(a==="menu"){menuKey=k;render();return}if(a==="open"){open(c);return}
+  if(archive){
+   items.push(["restore","Restore",ico("restore")]);
+   items.push(["open","Open",ico("open")]);
+   if(c.kind==="idea")items.push(null,["delete","Delete",ico("trash"),"danger"]);
+  }else if(c.kind==="idea"&&c.status==="idea"){
+   items.push(["run","Run",ico("play")],["edit","Edit",ico("pen")],["archive","Archive",ico("archive")],null,["reject","Reject",ico("x")],["delete","Delete",ico("trash"),"danger"]);
+  }else if(c.kind==="idea"){
+   items.push(["open","Open",ico("open")],["run","Run again",ico("play")],["archive","Archive",ico("archive")],null,["delete","Remove",ico("trash"),"danger"]);
+  }else{
+   const openLabel=c.status==="waiting"?(c.awaiting==="approvals.plan"?"Review plan":c.awaiting==="findings"?"See findings":c.awaiting==="approvals.review"?"Review work":"Open"):"Open";
+   items.push(["open",openLabel,ico("open")]);
+   items.push(["archive","Archive",ico("archive")]);
+   if(c.status==="waiting"||c.status==="running"||c.status==="stalled"){
+    items.push(null,["reject","Abandon",ico("x"),"danger"]);
+   }
+  }
+  el.innerHTML+=`<div class="menu-pop" role="menu">${items.map(i=>i?`<button role="menuitem" data-a="${i[0]}" class="${i[3]||""}">${i[2]}${i[1]}</button>`:"<hr>").join("")}</div>`}
+ el.querySelectorAll("[data-a]").forEach(bt=>bt.onclick=async e=>{e.stopPropagation();const a=bt.dataset.a;const was=menuKey;menuKey=null;if(a==="menu"){menuKey=was===k?null:k;render();return}if(a==="open"){open(c);return}
   if(a==="archive"||a==="restore"){toggleArchive(c,a==="archive");return}
   mode=a;modeKey=k;render()});
  if(pick){el.classList.toggle("picked",picked.has(k));el.onclick=()=>{picked.has(k)?picked.delete(k):picked.add(k);render()};return el}
@@ -464,7 +532,7 @@ function inlineForm(c){
  if(mode==="edit"){li.innerHTML=`<input value="${esc(c.text)}"><textarea placeholder="Notes: links, paths, background">${esc(c.notes||"")}</textarea><div class="q dim" id="clong" hidden>The first line is over 72 characters; logs will cut it short.</div><div class="row"><button class="btn ghost" data-a="c">Cancel</button><button class="btn pri" data-a="s">Save</button></div>`;li.querySelector('[data-a=s]').onclick=async()=>{const next=li.querySelector("input").value.trim(),notes=li.querySelector("textarea").value.trim();mode=null;if(next&&(next!==c.text||notes!==(c.notes||"")))await post("/inbox",{op:"edit",dir,text:c.text,next,notes});load()}}
  if(mode==="reject"){const idea=c.kind==="idea";li.innerHTML=`<div class="q">${idea?"Reject this idea?":"Abandon this run?"} The reason is recorded.</div><input placeholder="Reason"><div class="row"><button class="btn ghost" data-a="c">Keep it</button><button class="btn warn" data-a="s">${idea?"Reject":"Abandon"}</button></div>`;li.querySelector('[data-a=s]').onclick=async()=>{const why=li.querySelector("input").value.trim();if(!why){toast("A reason is required");return}mode=null;const r=idea?await post("/inbox",{op:"reject",dir,text:c.text,reason:why}):await post("/abort",{dir,id:c.id,why});if(r.ok)toast(idea?"Rejected":"Abandoned, reason recorded");load()}}
  if(mode==="delete"){li.innerHTML=`<div class="q">Delete "${esc(c.text)}"?</div><div class="q dim">Not recorded anywhere.</div><div class="row"><button class="btn ghost" data-a="c">Keep it</button><button class="btn danger" data-a="s">Delete</button></div>`;li.querySelector('[data-a=s]').onclick=async()=>{mode=null;const r=await post("/inbox",{op:"delete",dir,text:c.text});if(r.ok)toast("Deleted");load()}}
- if(mode==="run"){li.innerHTML=`<div class="q">Start a run for "${esc(c.text)}"</div><div class="q dim">Opens your agent in a new terminal, or a herdr tab or tmux window when one is running, with the request typed in.</div><div class="q dim">Full: planned, built, then checked by a separate reviewer. Lite: one session does it all, faster and cheaper.</div><div class="row"><button class="btn ghost" data-a="c">Cancel</button><button class="btn" data-a="l">Lite</button><button class="btn pri" data-a="s">Full run</button></div>`;li.querySelector('[data-a=s]').onclick=()=>startRun(c,"full");li.querySelector('[data-a=l]').onclick=()=>startRun(c,"lite")}
+ if(mode==="run"){li.innerHTML=`<div class="q">Start a run for "${esc(c.text)}"</div><div class="q dim">Opens your agent in a new terminal, or a herdr tab or tmux window when one is running, with the request typed in.</div><div class="q dim">Full: planned, built, then checked by a separate reviewer. Lite: one session does it all, faster and cheaper.</div><div id="run-pick" style="display:grid;gap:6px"><div id="run-agent" class="agents" role="radiogroup" aria-label="Agent"></div></div><div class="row"><label class="yolo" id="run-yolo" title="Yolo: the agent runs every command and edit without asking" hidden><button type="button" class="chk" role="switch" aria-checked="false"></button>Yolo</label><button class="btn ghost" data-a="c">Cancel</button><button class="btn" data-a="l">Lite</button><button class="btn pri" data-a="s">Full run</button></div>`;li.querySelector('[data-a=s]').onclick=()=>startRun(c,"full");li.querySelector('[data-a=l]').onclick=()=>startRun(c,"lite");runForm(li,c)}
  li.querySelector('[data-a=c]').onclick=()=>{mode=null;render()};
  // Edit and reject take dictation; the run prompt has no field.
  li.querySelectorAll("input,textarea").forEach((f,i)=>draft(f,"f:"+mode+":"+modeKey+":"+i));
@@ -472,16 +540,42 @@ function inlineForm(c){
  const inp=li.querySelector("input");if(inp){inp.onkeydown=e=>{if(e.key==="Enter")li.querySelector('[data-a=s]').click();if(e.key==="Escape"){mode=null;render()}};setTimeout(()=>inp.focus())}
  return li;}
 
+// The agent and Basic/Yolo picked in the open Run form. Kept here, not in the form:
+// the board is rebuilt on every server change, and the choice must outlive that.
+// Yolo never outlives the form: render() drops it once the form is closed.
+let runPick=null;
+// The tool a launch opened, and why when it is not the one asked for.
+const via=a=>a.name+(a.note?". "+a.note:"");
+async function runForm(li,c){
+ const k=key(c),box=li.querySelector("#run-agent");
+ const d=await fetch("/agents?dir="+encodeURIComponent(c.state)).then(r=>r.json()).catch(()=>null);
+ if(!d||!d.agents||!d.agents.length){li.querySelector("#run-pick").hidden=true;return}
+ // Antigravity and Gemini CLI are both Google's agent on Gemini; offer one of them.
+ if(d.agents.some(a=>a.cmd==="agy"))d.agents=d.agents.filter(a=>a.cmd!=="gemini");
+ if(!runPick||runPick.k!==k)runPick={k,agent:d.agents.some(a=>a.cmd===d.default)?d.default:d.agents[0].cmd};
+ box.innerHTML=d.agents.map(a=>`<button type="button" class="agent" role="radio" aria-checked="${a.cmd===runPick.agent}" data-cmd="${esc(a.cmd)}"><svg><use href="#c-${esc(a.cmd)}"/></svg>${esc(a.name)}</button>`).join("");
+ const yb=li.querySelector("#run-yolo");
+ // Yolo only where the picked tool has a skip-permissions mode; Basic otherwise.
+ const sw=yb.querySelector(".chk");
+ const showYolo=()=>{const can=!!d.agents.find(a=>a.cmd===runPick.agent)?.yolo,on=!!runPick.yolo;yb.hidden=!can;sw.classList.toggle("on",on);sw.setAttribute("aria-checked",on)};
+ box.querySelectorAll(".agent").forEach(b=>b.onclick=()=>{runPick.agent=b.dataset.cmd;box.querySelectorAll(".agent").forEach(x=>x.setAttribute("aria-checked",x===b));showYolo()});
+ sw.onclick=()=>{runPick.yolo=!runPick.yolo;showYolo()};
+ showYolo();
+ box.onkeydown=sw.onkeydown=e=>{if(e.key==="Escape"){mode=null;render()}}}
+
 async function startRun(c,kind){
  mode=null;askNotify();
- const r=await post("/run",{dir:c.state,text:c.text,kind});
- if(r.ok)toast((kind==="full"?"Full":"Lite")+" run opened in your terminal: "+r.agent.name);
+ const p=runPick&&runPick.k===key(c)?runPick:null;runPick=null;
+ const yolo=!!(p&&p.yolo&&!$("run-yolo")?.hidden);
+ const r=await post("/run",{dir:c.state,text:c.text,kind,agent:p?p.agent:undefined,yolo});
+ if(r.ok)toast((kind==="full"?"Full":"Lite")+(yolo?" yolo":"")+" run opened in your terminal: "+via(r.agent));
  load()}
 
 function render(){
  // A closed form leaves no draft behind; an open one is reopened after a reload.
  // A form whose card is gone (restored after a reload, or deleted elsewhere) has nowhere to show.
  if(mode&&mode!=="new"&&!S.cards.some(c=>key(c)===modeKey))mode=null;
+ if(mode!=="run"&&runPick)runPick.yolo=false;
  if(!mode)undraft("f:");try{sessionStorage.setItem("kz-form",JSON.stringify(["new","edit","reject"].includes(mode)?[mode,modeKey]:null))}catch(e){}
  // The board is rebuilt below; the card that had focus gets it back.
  const fk=focusedKey();
@@ -492,7 +586,7 @@ function render(){
  if(n("waiting"))strip.push(`<button class="attn ${filter==="waiting"?"on":""}" data-f="waiting"><svg><use href="#s-wait"/></svg>${n("waiting")} waiting on you</button>`);
  strip.push(`<button class="${filter==="running"?"on":""}" data-f="running"><span class="d-run"><span class="pulse"></span></span>${n("running")} running</button>`);
  if(n("stalled"))strip.push(`<button class="${filter==="stalled"?"on":""}" data-f="stalled"><svg><use href="#s-stall"/></svg>${n("stalled")} stalled</button>`);
- strip.push(`<span class="sp"></span><span>${cs.filter(c=>c.kind==="idea").length} ideas · ${cs.filter(c=>c.kind==="run").length} runs</span>`,`<button class="${archive?"on":""}" data-f="__archive">${archive?"Back to board":"Archive "+nArch}</button>`);
+ strip.push(`<span>${cs.filter(c=>c.kind==="idea").length} ideas · ${cs.filter(c=>c.kind==="run").length} runs</span>`,`<button class="${archive?"on":""}" data-f="__archive">${archive?"Back to board":"Archive "+nArch}</button>`);
  $("strip").innerHTML=strip.join("");
  $("strip").querySelectorAll("button").forEach(c=>c.onclick=()=>{if(c.dataset.f==="__archive"){archive=!archive;filter=null;render();return}filter=filter===c.dataset.f?null:c.dataset.f;render()});
  // [label, folder, from the projects folder]: the button names the current one, the open list is redrawn.
@@ -657,7 +751,7 @@ const APPROVAL={"approvals.plan":"The plan is ready. Read it in the Plan tab, th
 async function decide(c,b,why,answers){b.disabled=true;askNotify();const r=await post("/decide",{dir:c.state,id:c.id,awaiting:c.awaiting,...(why===undefined?{}:{why}),...(answers?{answers}:{})});
  // A failed send keeps the footer, and with it a typed comment.
  if(!r.ok){b.disabled=false;return}
- decided.add(answer(c));toast((why===undefined?"Approved":"Sent back")+" in your terminal: "+r.agent.name);
+ decided.add(answer(c));toast((why===undefined?"Approved":"Sent back")+" in your terminal: "+via(r.agent));
  if(openKey===key(c)){$("pfoot").innerHTML="";openRun(c,true)}}
 function confirmRevise(c){const foot=$("pfoot"),plan=c.awaiting==="approvals.plan";
  foot.innerHTML=`<div class="inl" style="flex:1"><div class="q">${plan?"What should the plan do differently?":"What should change in the work?"}</div><div class="q dim">Opens your agent on this run with your comment.${plan?" It revises the plan and comes back here for approval.":" It changes the work, rechecks it and comes back here."}</div><textarea aria-label="Revise comment"></textarea><div class="row"><button class="btn ghost" data-a="c">Cancel</button><button class="btn pri" data-a="s">Send back</button></div></div>`;
@@ -706,7 +800,7 @@ function fixForm(c){const k=n=>c.id+":"+n,sent=f=>fixSent.has(k(f.n)),fs=runDoc.
  allb.onclick=()=>{const none=picks().length===open.length;open.forEach(f=>none?fixOff.add(k(f.n)):fixOff.delete(k(f.n)));sync()};
  go.onclick=async()=>{const nums=picks();go.disabled=true;askNotify();const r=await post("/fix",{dir:c.state,id:c.id,nums});
   // Sent findings lock as sent, so a second press cannot open a second agent on them.
-  if(r.ok){toast("Fixing "+nums.length+" finding"+(nums.length===1?"":"s")+" in your terminal: "+r.agent.name);nums.forEach(n=>fixSent.add(k(n)));try{sessionStorage.setItem(SK,JSON.stringify([...fixSent]))}catch(e){}openRun(c,true)}else sync()};
+  if(r.ok){toast("Fixing "+nums.length+" finding"+(nums.length===1?"":"s")+" in your terminal: "+via(r.agent));nums.forEach(n=>fixSent.add(k(n)));try{sessionStorage.setItem(SK,JSON.stringify([...fixSent]))}catch(e){}openRun(c,true)}else sync()};
  sync();$("pbody").appendChild(el)}
 // Commit and push, for a finished run in a project with a git remote. What the board
 // did is recorded per run, so the settled label outlives later changes to the tree.
@@ -787,7 +881,7 @@ async function openSettings(){
  const ntHelp="A desktop notification when a run starts waiting on you."+(np?np==="denied"?" Blocked in this browser's site settings.":"":" Not supported in this browser.");
  const names=[...(cfg?groups(cfg.rows).map(([g])=>g):[]),"Browser"];
  $("pbody").innerHTML=`<div class="sq"><input class="sel" id="sq" type="search" placeholder="Search settings" aria-label="Search settings" spellcheck="false" autocomplete="off" value="${esc(setQ)}"><div class="sjump" role="group" aria-label="Jump to section">${names.map(g=>`<button data-g="${esc(g)}">${esc(g)}</button>`).join("")}</div></div>
-  ${cfg?groups(cfg.rows).map(([g,rows])=>`<h3 class="sg">${esc(g)}</h3>${rows.map(r=>{const id="s-"+r.key.replace(/\./g,"-");return row(r.label,r.text?`<input class="sel" id="${id}" value="${esc(r.value)}" placeholder="not set" spellcheck="false">`:ctl(id,r.values,r.value),esc(r.help),id,[r.label,r.help,r.key,g,...r.values].join(" "))}).join("")}`).join(""):`<p class="snone">Settings could not be read. Run <code>kaizen settings</code>.</p>`}
+  ${cfg?groups(cfg.rows).map(([g,rows])=>`<h3 class="sg">${esc(g)}</h3>${rows.map(r=>{const id="s-"+r.key.replace(/\./g,"-");return row(r.label,r.text?(r.folder?`<span class="fpick"><input class="sel" id="${id}" value="${esc(r.value)}" placeholder="not set" spellcheck="false"><button class="btn" id="${id}-pick" type="button">Browse…</button></span>`:`<input class="sel" id="${id}" value="${esc(r.value)}" placeholder="not set" spellcheck="false">`):ctl(id,r.values,r.value),esc(r.help),id,[r.label,r.help,r.key,g,...r.values].join(" "))}).join("")}`).join(""):`<p class="snone">Settings could not be read. Run <code>kaizen settings</code>.</p>`}
   <h3 class="sg">Browser</h3>${row("Theme",ctl("th",["system","light","dark"],cur),"Light or dark for this browser only; system follows your device.","th","theme light dark system browser")}
   ${row("Notifications",`<button class="chk${np==="granted"?" on":""}" id="nt" role="switch" aria-checked="${np==="granted"}"${np&&np!=="denied"?"":" disabled"}></button>`,ntHelp,"nt","notifications "+ntHelp+" browser")}
   <p class="snone" id="snone" hidden></p>`;
@@ -806,7 +900,9 @@ async function openSettings(){
  $("th").onchange=e=>setTheme(e.target.value);
  $("nt").onclick=()=>{askNotify();setTimeout(openSettings,300)};
  if(cfg)cfg.rows.forEach(r=>{const el=$("s-"+r.key.replace(/\./g,"-"));const save=async v=>{const f=document.activeElement?.id;const j=await post("/settings",{key:r.key,value:v});if(j.ok)toast("Saved");await openSettings();if(f?.startsWith("s-preset-"))$(f)?.focus()};
-  if(el.tagName==="SELECT"||el.tagName==="INPUT")el.onchange=async()=>{await save(el.value.trim());if(el.tagName==="INPUT")load()};else el.querySelectorAll("[data-v]").forEach(b=>b.onclick=()=>save(b.dataset.v));if(el.matches(".chk"))el.onclick=()=>save(el.dataset.v)})}
+  if(el.tagName==="SELECT"||el.tagName==="INPUT")el.onchange=async()=>{await save(el.value.trim());if(el.tagName==="INPUT")load()};else el.querySelectorAll("[data-v]").forEach(b=>b.onclick=()=>save(b.dataset.v));if(el.matches(".chk"))el.onclick=()=>save(el.dataset.v);
+  // The system's own folder dialog, opened by the board: a page cannot read a real path.
+  if(r.folder)$(el.id+"-pick").onclick=async()=>{const j=await post("/pick-folder",{});if(j.path){await save(j.path);load()}}})}
 // ---- request sources: links kaizen reads for new ideas. Same panel as settings.
 const SRC="Request sources";
 const srcOpen=()=>$("panel").classList.contains("open")&&$("ptitle").textContent===SRC;
@@ -823,33 +919,50 @@ async function openSources(){
  const d=await fetch("/sources"+q).then(r=>r.json()).catch(()=>null);
  if(!srcOpen())return;
  const host=u=>{try{return new URL(u).hostname}catch{return u}};
+ const srcType=u=>{if(u.includes("docs.google.com/spreadsheets")||u.endsWith(".csv")||u.endsWith(".tsv"))return "sheet";if(u.includes("docs.google.com/document"))return "doc";return "link"};
  const list=d&&d.sources||[];
  // A source belongs to one project, named on its row. Picking another only arms Move: a select
  // changes on every arrow key, and each change would have moved the source. The names are the picker's;
  // a row whose project the picker does not list still gets its own, selected, so Move never points elsewhere.
  const opts=(on,name)=>(on&&!S.projects.some(p=>p.dir===on)?`<option value="${esc(on)}" selected>${esc(name||on)}</option>`:"")+S.projects.map(p=>`<option value="${esc(p.dir)}"${p.dir===on?" selected":""}>${esc(p.label)}</option>`).join("");
- const rows=list.map((s,i)=>`<div class="srow"><label>${esc(s.label||host(s.url))}</label><button class="btn ghost" id="src-rm-${i}" data-rm="${i}" aria-label="Remove ${esc(s.label||host(s.url))}">Remove</button><p class="hint" style="overflow-wrap:anywhere">${s.url.startsWith("https://")?`<a href="${esc(s.url)}" target="_blank" rel="noopener noreferrer" style="color:inherit">${esc(s.url)}</a>`:esc(s.url)}<br>${s.last?(s.last.ok?esc(s.last.note):`<span style="color:var(--ink);font-weight:500">Failed: ${esc(s.last.note)}</span>`)+" · "+ago(s.last.at):"Not gathered yet"}</p><p class="hint" style="margin-top:6px">Ideas go to <select class="sel" id="src-mv-${i}" data-mv="${i}" data-k="${esc(s.dir+" "+s.url)}" aria-label="Project of ${esc(s.label||host(s.url))}">${opts(s.dir,s.project)}</select> <button class="btn" id="src-mb-${i}" aria-label="Move ${esc(s.label||host(s.url))} to the chosen project" disabled>Move</button></p></div>`).join("")+(d&&d.failed||[]).map(f=>`<p style="color:var(--dim)">The sources of ${esc(f)} could not be read.</p>`).join("");
- $("pbody").innerHTML=(d&&d.error?`<p style="color:var(--dim)">${esc(d.error)}</p>`:!d?`<p style="color:var(--dim)">Sources could not be read.</p>`:rows||`<p style="color:var(--dim)">No sources yet. Paste a link to a Google Sheet, a Doc, or a shared note.</p>`)
-  +`<h3 class="sg">Add a source</h3><div style="display:grid;gap:8px;margin-top:10px"><input class="sel" id="src-url" aria-label="Link" placeholder="https://docs.google.com/…" spellcheck="false" autocomplete="off" style="width:100%;max-width:none"><input class="sel" id="src-label" aria-label="Label (optional)" placeholder="Label (optional)" style="width:100%;max-width:none"><select class="sel" id="src-dir" aria-label="Project this source belongs to" style="width:100%;max-width:none">${dir?"":`<option value="">Choose the project it belongs to…</option>`}${opts(dir)}</select><div style="display:flex;gap:8px"><button class="btn pri" id="src-add">Add source</button><button class="btn" id="src-go"${list.length?"":" disabled"}>Gather now</button></div><p class="hint" style="font-size:12px;color:var(--dim);margin:0">${d&&d.every&&d.every!=="off"?`Checked every ${esc(d.every)} while the board is running.`:"Automatic checks are off."} Change it in Settings.</p></div>`;
- $("src-url").value=typed[0];$("src-label").value=typed[1];if(typed[3]!==undefined)$("src-dir").value=typed[3];
+ const topBar=`<div class="src-topbar"><div class="meta"><span class="count">${list.length} source${list.length===1?"":"s"}${dir?` in ${esc(S.projects.find(p=>p.dir===dir)?.label||dir)}`:""}</span><span class="sched">${d&&d.every&&d.every!=="off"?`Auto-check: every ${esc(d.every)}`:"Auto-check: off"} · <a id="src-to-settings" role="button" tabindex="0">Settings</a></span></div><button class="btn sm" id="src-go"${list.length?"":" disabled"}>${ico("refresh")} Gather all</button></div>`;
+ const cards=list.map((s,i)=>{
+  const st=srcType(s.url),title=s.label||host(s.url);
+  const statusHtml=!s.last?`<span class="src-badge dim">Not gathered yet</span>`:s.last.ok?`<span class="src-badge ok"><svg viewBox="0 0 16 16"><path d="M3.5 8.5l3 3 6-6" stroke="currentColor" fill="none" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/></svg>${esc(s.last.note)}</span><span class="hint" style="margin:0">${ago(s.last.at)}</span>`:`<span class="src-badge warn"><svg viewBox="0 0 16 16"><circle cx="8" cy="8" r="6" stroke="currentColor" fill="none" stroke-width="1.8"/><path d="M8 5v3.5M8 11v.1" stroke="currentColor" fill="none" stroke-width="2" stroke-linecap="round"/></svg>Failed: ${esc(s.last.note)}</span><span class="hint" style="margin:0">${ago(s.last.at)}</span>`;
+  return `<div class="src-card" id="src-card-${i}"><div class="src-hd"><div class="src-info"><span class="src-ico" title="${st}">${ico(st==="sheet"?"sheet":st==="doc"?"doc":"link")}</span><span class="src-title" title="${esc(title)}">${esc(title)}</span></div><div class="src-acts"><button class="btn ghost sm" id="src-chk-${i}" data-chk="${i}" aria-label="Check ${esc(title)} now" title="Check this source now">${ico("refresh")} Check</button><button class="btn ghost danger sm" id="src-rm-${i}" data-rm="${i}" aria-label="Remove ${esc(title)}" title="Remove source">${ico("trash")}</button></div></div><div class="src-url"><a href="${esc(s.url)}" target="_blank" rel="noopener noreferrer" title="${esc(s.url)}"><span>${esc(s.url)}</span>${ico("ext")}</a></div><div class="src-status">${statusHtml}</div><div class="src-dest"><span>Ideas go to</span><select class="sel" id="src-mv-${i}" data-mv="${i}" data-k="${esc(s.dir+" "+s.url)}" aria-label="Project of ${esc(title)}">${opts(s.dir,s.project)}</select><button class="btn sm" id="src-mb-${i}" aria-label="Move ${esc(title)} to the chosen project" disabled>Move</button></div></div>`;
+ }).join("")+(d&&d.failed||[]).map(f=>`<p style="color:var(--dim)">The sources of ${esc(f)} could not be read.</p>`).join("");
+ const emptyState=`<div class="src-empty"><div class="src-empty-ico">${ico("link")}</div><h4>No request sources yet</h4><p>Connect shared links to gather requests into your Ideas backlog. Nothing runs automatically until you start it.</p><div class="src-empty-grid"><div class="src-empty-item"><strong>📊 Google Sheets</strong>Public sheets with idea or task rows. Rows marked Done are skipped.</div><div class="src-empty-item"><strong>📄 Google Docs</strong>Shared public docs with items or notes written line by line.</div><div class="src-empty-item"><strong>🌐 Public links</strong>TSV, CSV, or raw text links containing requests.</div></div></div>`;
+ const addBox=`<div class="src-add-box"><h3>${ico("plus")} Add a source</h3><div style="display:grid;gap:8px"><div><label for="src-url" class="hint" style="display:block;margin-bottom:4px;font-weight:500;color:var(--ink)">Link</label><input class="sel" id="src-url" aria-label="Link" placeholder="https://docs.google.com/spreadsheets/d/… or public URL" spellcheck="false" autocomplete="off" style="width:100%;max-width:none"></div><div style="display:grid;grid-template-columns:1fr 1fr;gap:8px"><div><label for="src-label" class="hint" style="display:block;margin-bottom:4px">Label (optional)</label><input class="sel" id="src-label" aria-label="Label (optional)" placeholder="e.g. Feedback Q4" style="width:100%;max-width:none"></div><div><label for="src-dir" class="hint" style="display:block;margin-bottom:4px">Target project</label><select class="sel" id="src-dir" aria-label="Project this source belongs to" style="width:100%;max-width:none">${dir?"":`<option value="">Choose project…</option>`}${opts(dir)}</select></div></div><div style="display:flex;align-items:center;justify-content:space-between;margin-top:6px"><button class="btn pri" id="src-add">Add source</button><span class="hint" style="font-size:11px;color:var(--dim);margin:0">Public links only. For private docs, run /kaizen gather.</span></div></div></div>`;
+ $("pbody").innerHTML=(d&&d.error?`<p style="color:var(--dim)">${esc(d.error)}</p>`:!d?`<p style="color:var(--dim)">Sources could not be read.</p>`:topBar+(list.length?`<div class="src-list">${cards}</div>`:emptyState))+addBox;
+ $("src-url").value=typed[0];$("src-label").value=typed[1];if(typed[3]!==undefined&&$("src-dir"))$("src-dir").value=typed[3];
+ if($("src-to-settings"))$("src-to-settings").onclick=()=>{setQ="sources";openSettings()};
+ const act=async(body,done)=>{const j=await post("/sources",body);if(j.ok){done(j);load()}if(srcOpen())openSources()};
  $("pbody").querySelectorAll("[data-mv]").forEach(m=>{const s=list[+m.dataset.mv],b=$("src-mb-"+m.dataset.mv),to=picked.get(m.dataset.k);
   if(to&&[...m.options].some(o=>o.value===to))m.value=to;
   (m.onchange=()=>{b.disabled=m.value===s.dir})();
   b.onclick=()=>act({op:"move",dir:s.dir,to:m.value,url:s.url},()=>toast(`Source moved. Ideas already gathered stay in ${s.project||"the old project"}.`))});
- // A Move button that went back to disabled cannot take focus; its select can.
- const was=typed[2]&&$(typed[2]);if(was)(was.disabled?$(was.id.replace("src-mb-","src-mv-")):was).focus();
- // Every action names the project it acts on; only "gather everything" goes without one.
- const act=async(body,done)=>{const j=await post("/sources",body);if(j.ok){done(j);load()}if(srcOpen())openSources()};
- $("src-add").onclick=()=>{const url=$("src-url").value.trim();if(!url){$("src-url").focus();return}const to=$("src-dir").value;if(!to){$("src-dir").focus();return}// A new source is read at once, so the user learns now whether the link works.
+ $("pbody").querySelectorAll("[data-chk]").forEach(b=>{const s=list[+b.dataset.chk];
+  b.onclick=()=>{b.disabled=true;b.innerHTML=ico("refresh")+" Checking…";
+   act({op:"gather",dir:s.dir,url:s.url},j=>{const r=j.results&&j.results[0];
+    toast(r?(r.ok?`${s.label||host(s.url)}: ${r.note}`:`Failed: ${r.note}`):"Checked")})}});
+ $("pbody").querySelectorAll("[data-rm]").forEach(b=>{const s=list[+b.dataset.rm];
+  b.onclick=()=>{if(!confirm(`Remove ${s.label||host(s.url)}? Ideas it gathered stay; added again later, it may bring back ones you deleted.`))return;
+   act({op:"remove",dir:list[+b.dataset.rm].dir,url:list[+b.dataset.rm].url},()=>toast("Source removed"))}});
+ const was=typed[2]&&$(typed[2]);if(was)(was.disabled?$(was.id.replace("src-mb-","src-mv-")):was)?.focus();
+ $("src-add").onclick=()=>{const url=$("src-url").value.trim();if(!url){$("src-url").focus();return}const to=$("src-dir").value;if(!to){$("src-dir").focus();return}
   $("src-add").disabled=true;$("src-add").textContent="Adding…";
   (async()=>{const j=await post("/sources",{op:"add",dir:to,url,label:$("src-label").value.trim()});
    if(j.ok){$("src-url").value=$("src-label").value="";const g=await post("/sources",{op:"gather",dir:to,url}),r=g.results&&g.results[0];
     toast(r?(r.ok?`Source added: ${r.note}`:`Source added, but: ${r.note}`):"Source added");load()}
+   else toast(j.error||"Could not add source");
    if(srcOpen())openSources()})()};
  $("src-url").onkeydown=$("src-label").onkeydown=e=>{if(e.key==="Enter")$("src-add").click()};
- $("src-go").onclick=()=>{$("src-go").disabled=true;$("src-go").textContent="Gathering…";act({op:"gather",dir:dir||undefined},j=>{const n=(j.results||[]).reduce((a,r)=>a+r.added,0),bad=(j.results||[]).filter(r=>!r.ok).length;toast((n?`${n} new idea${n===1?"":"s"}`:"Nothing new")+(bad?`, ${bad} source${bad===1?"":"s"} could not be read`:""))})};
- $("pbody").querySelectorAll("[data-rm]").forEach(b=>b.onclick=()=>{const s=list[+b.dataset.rm];if(!confirm(`Remove ${s.label||host(s.url)}? Ideas it gathered stay; added again later, it may bring back ones you deleted.`))return;act({op:"remove",dir:list[+b.dataset.rm].dir,url:list[+b.dataset.rm].url},()=>toast("Source removed"))})}
-let tt;function toast(s){const t=$("toast");t.textContent=s;t.classList.add("on");clearTimeout(tt);tt=setTimeout(()=>t.classList.remove("on"),4000)}
+ if($("src-go"))$("src-go").onclick=()=>{$("src-go").disabled=true;$("src-go").innerHTML=ico("refresh")+" Gathering…";
+  act({op:"gather",dir:dir||undefined},j=>{const n=(j.results||[]).reduce((a,r)=>a+r.added,0),bad=(j.results||[]).filter(r=>!r.ok).length;
+   toast((n?`${n} new idea${n===1?"":"s"}`:"Nothing new")+(bad?`, ${bad} source${bad===1?"":"s"} could not be read`:""))})}}
+// With `report`, the toast carries a link to a prefilled GitHub bug form (/issue) and
+// stays long enough to click it.
+let tt;function toast(s,report){const t=$("toast");t.textContent=s;t.classList.toggle("rep",!!report);if(report){const a=document.createElement("a");a.href="/issue?"+new URLSearchParams(report);a.target="_blank";a.rel="noopener";a.textContent="Report";t.append(" ",a)}t.classList.add("on");clearTimeout(tt);tt=setTimeout(()=>t.classList.remove("on"),report?8000:4000)}
 function askNotify(){try{if(typeof Notification!=="undefined"&&Notification.permission==="default")Notification.requestPermission()}catch(e){}}
 function notifyUser(body){try{if(typeof Notification!=="undefined"&&Notification.permission==="granted")new Notification("kaizen",{body,icon:"/logo.png"})}catch(e){}}
 // The project picker: a button shaped like a select that opens a search field over the list.