toolroll 0.9.81 → 0.9.83

package/dist/server/chat.js

@@ -1396,6 +1396,8 @@ export function createChatHandlers(runtime) {
         const pinnedSettle = settleForPrice(enabled.price, result.answer.tokensIn, result.answer.tokensOut);
         const settled = Math.max(pinnedSettle, result.answer.reportedCostMicrousd ?? 0);
         const envelope = parseAssistantEnvelope(result.answer.text);
+        // v140: what the provider's response body itself reported (absent: unreported, kept NULL).
+        const reported = { modelReported: result.answer.modelReported ?? null, reportedCostUsd: result.answer.reportedCostUsd ?? null };
         if (!envelope.ok) {
             finish({
                 state: "failed",
@@ -1403,6 +1405,7 @@ export function createChatHandlers(runtime) {
                 tokensIn: result.answer.tokensIn,
                 tokensOut: result.answer.tokensOut,
                 settledMicrousd: settled,
+                ...reported,
             });
             tell(null, "the model's answer was malformed and was discarded");
             return;
@@ -1437,6 +1440,7 @@ export function createChatHandlers(runtime) {
             settledMicrousd: settled,
             replyBytes: Buffer.byteLength(envelope.envelope.reply, "utf8"),
             candidateCount: kept,
+            ...reported,
         });
         tell(envelope.envelope.reply, null, envelope.proposalsDiscarded);
     }

package/dist/server/flows.js

@@ -43,7 +43,7 @@ import { redirect, respond, SAFETY, taskHref } from "./http.js";
 import { html } from "../html.js";
 import {} from "./session.js";
 export function createFlowsHandlers(runtime) {
-    const { store, clock, sendScreen, chromeFor, consoleProjects, options, visible, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, authenticateCredential, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
+    const { identities, store, clock, sendScreen, chromeFor, consoleProjects, options, visible, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, authenticateCredential, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
     // ---- reads ---------------------------------------------------------------
     /** A gallery template's page (Flows → New → Use this): its questions, the preview of these answers, and Create. */
     function sendGalleryUse(response, who, template, projects, repo, given, name, notice, said = null) {
@@ -839,8 +839,14 @@ export function createFlowsHandlers(runtime) {
             if (body.get("repo") !== project || (who.via === "cookie" && body.get("projectRevision") !== String(who.session.projectRevision)))
                 throw new RecipeError("The open project changed. Reopen this recipe in the intended project.", 409);
             const rootMode = !unscopedMode && ceiling.roots.length > 0;
-            if (rootMode && !(await authorizedProject(liveCeiling(), project)))
-                throw new RecipeError("The project is outside this server's access.", 403);
+            if (rootMode) {
+                // A mutation's target is resolved now, off the console's thread, and must still be the project it names.
+                const resolved = await identities.resolveNow(project);
+                if (resolved === "no-answer")
+                    throw new RecipeError("The project's folder didn't answer. It may be on a drive that's disconnected, or waiting on macOS. Try again in a moment.", 503);
+                if (resolved !== project || !(await authorizedProject(liveCeiling(), resolved)))
+                    throw new RecipeError("The project is outside this server's access.", 403);
+            }
             const rechecked = authorizeMutation(request, who, readForm(posted, CONSOLE_FORMS.mutationGuard));
             if (rechecked !== null)
                 throw new RecipeError(rechecked.message, rechecked.status);

package/dist/server/guards.d.ts

@@ -1,3 +1,4 @@
+import { type ProjectIdentities } from "../project-identity.js";
 import { type FormFieldOf, type FormView } from "../contracts/console-api.js";
 import type { TaskFamily } from "../store.js";
 import { type IncomingMessage, type ServerResponse } from "node:http";
@@ -13,8 +14,11 @@ export interface GuardsRuntime {
     liveCeiling: () => {
         repos: string[];
         roots: readonly string[];
+        canon?: (path: string) => string | null;
     };
     codingProjects: () => string[];
+    /** Project identities read without touching folders (project-identity.ts); absent: the synchronous reads. */
+    identities?: ProjectIdentities;
     unscopedMode: boolean;
     managedRepos: () => string[];
     ceiling: import("../project.js").ProjectCeiling;

package/dist/server/guards.js

@@ -1,3 +1,4 @@
+import { syncProjectIdentities } from "../project-identity.js";
 import { OWNER_ACTIONS, sharedActionPayload } from '../chat-actions.js';
 import { CONSOLE_FORMS, readForm } from "../contracts/console-api.js";
 import { timingSafeEqual } from "node:crypto";
@@ -14,6 +15,7 @@ import { refuse } from "./chrome.js";
 import { matchTaskPath } from "./http.js";
 import { PersistentSessions, SESSION_COOKIE, sessionWithinLifetime } from "./session.js";
 export function createSharedGuards(runtime) {
+    const syncIdentities = syncProjectIdentities();
     // v99: wrong passwords. One address guessing across names runs out of tries here; each name
     // locks on its own (sign-in-guard.ts), and every lock, whatever road it came by, is kept.
     /**
@@ -130,8 +132,9 @@ export function createSharedGuards(runtime) {
             return fallback();
         if (Array.isArray(header))
             return undefined;
-        const canonical = canonicalProject(header);
-        if (canonical === null || !visible(canonical))
+        // A request's path, never resolved on this thread (project-identity.ts): a known identity or exactly a saved one.
+        const canonical = identities().vouched(header, savedIdentities);
+        if (canonical === undefined || !visible(canonical))
             return undefined;
         return canonical;
     }
@@ -152,7 +155,8 @@ export function createSharedGuards(runtime) {
             case 'form-path': {
                 const path = body?.get('path')?.trim() ?? '';
                 // Invalid/missing paths keep the opener's existing 400 response and recoverable form.
-                return path === '' ? null : canonicalProject(path);
+                // Never resolved here: an unknown path passes on to the opener, which resolves it off the thread and checks again.
+                return path === '' ? null : identities().vouched(path, savedIdentities) ?? null;
             }
             case 'task': {
                 const task = matchTaskPath(url.pathname, '(?:/[a-z-]+)?$');
@@ -370,5 +374,10 @@ export function createSharedGuards(runtime) {
     function runVisible(run) {
         return visible(taskRepoOf(run.taskRef));
     }
+    // Defined last, so the reviewed functions above keep their places (password-freshness.test.ts).
+    /** Project identities read without touching a folder (project-identity.ts); absent: the synchronous reads. */
+    function identities() { return runtime.identities ?? syncIdentities; }
+    /** The projects `up` proved and admitted (each its own identity): what a request may name without a read. */
+    function savedIdentities() { return runtime.managedRepos(); }
     return { authenticateApprover, authenticateCredential, authorizeMutation, projectOf, resolveRouteProject, projectRequestAllowed, identify, lookupSession, restricted, visible, admissionList, codingActorAllowed, codingProjectAllowed, workAccess, familyOf, taskRepoOf, runVisible };
 }

package/dist/server/http.d.ts

@@ -17,6 +17,9 @@ import { type Store } from "../store.js";
 import { type SubscriptionLeadRunner } from "../subscription-chat.js";
 import { type launchRuntimeUpdate } from "../toolroll-update.js";
 import { type IncomingMessage, type ServerResponse } from "node:http";
+import { type FolderLookRunner } from "../folder-look.js";
+import { type ProjectIdentities } from "../project-identity.js";
+import { type LearningRunner } from "../learning-look.js";
 export type ServeOptions = {
     /** Tests: runs a person's command for the HTTP MCP gateway instead of operate.ts's. */
     runOperateAs?: import("../mcp-person.js").RunOperateAs;
@@ -172,6 +175,14 @@ export type ServeOptions = {
      * how often they run and ask this computer's agents again. */
     backgroundChecks?: boolean;
     backgroundChecksMs?: number;
+    /** Tests: how a person's folders are read off the console's thread (folder-look.ts), and how long a read may take. */
+    folderLook?: FolderLookRunner;
+    folderLookMs?: number;
+    /** Project identities resolved off the console's thread (project-identity.ts); `up` and `serve` pass them. Absent:
+     * the old synchronous reads (embedders and tests). */
+    identities?: ProjectIdentities;
+    /** Tests: how the background pass runs one project's learning recovery in a process of its own. */
+    learningRunner?: LearningRunner;
     connectionHome?: string;
     /** Test seam for Chat's first tasks: the `gh` and `git grep` reads. */
     firstTaskRunner?: typeof execRun;

package/dist/server/http.js

@@ -19,6 +19,9 @@ import {} from "../toolroll-update.js";
 import { timingSafeEqual } from "node:crypto";
 import {} from "node:http";
 import { SIGN_IN_LINK_PATH } from "./session.js";
+import {} from "../folder-look.js";
+import {} from "../project-identity.js";
+import {} from "../learning-look.js";
 // A note is at most NOTE_BYTE_CAP (16,000) UTF-8 bytes, which URL encoding
 // can triple: room for one whole, before canonical text validation.
 export const BODY_CAP = 64 * 1024;

package/dist/server/pages.js

@@ -5,10 +5,11 @@ import { handlersOf } from './handler-registry.js';
 import { html, joinHtml, postForm, reauth } from "../html.js";
 /** pages handlers, moved without changing their route bodies. */
 import { createHmac, randomBytes } from "node:crypto";
-import { existsSync, opendirSync, readdirSync, realpathSync } from "node:fs";
+import { realpathSync } from "node:fs";
 import {} from "node:http";
 import { homedir, hostname } from "node:os";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
+import { listFolder, localOrigins } from "../folder-look.js";
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { setImmediate as yieldEventLoop } from "node:timers/promises";
@@ -49,13 +50,13 @@ import { refuse, regionScript, screen, settingsRows, WORKSPACE_STYLE, workToolRo
 import { redirect, respond, safeReturn, SAFETY, taskHref } from "./http.js";
 import { assignmentOf } from "../assignment.js";
 import { assignmentTaskStatusOf } from "../assignment-presentation.js";
-import { browsePage, fleetBody, fleetScript, githubIdentityOf, githubReposPage, homePage, originUrlOf, portfolioOverview, projectsPage, systemPage, workbenchRail } from "./render-pages.js";
+import { browsePage, fleetBody, fleetScript, githubIdentityOf, githubReposPage, homePage, portfolioOverview, projectsPage, systemPage, workbenchRail } from "./render-pages.js";
 import { capsPage } from "./render-settings.js";
 import { decisionAnswerScript, taskBody } from "./render-tasks.js";
 import {} from "./session.js";
 import { rereadBrowser } from "./live.js";
 export function createPagesHandlers(runtime) {
-    const { clock, lastChecks, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
+    const { identities, clock, lastChecks, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
     // The filesystem browser (operator request): pick a project folder by
     // looking, not typing. CONFINED to exactly what opening allows —
     // explicit --repo mode has an enumerable list and gets no browser at
@@ -67,40 +68,32 @@ export function createPagesHandlers(runtime) {
         const { url, who, response } = ctx;
         if (who.via !== "cookie")
             return refuse(response, who, 403, "browsing feeds a browser session's act");
-        const browseRoots = ceiling.roots.length > 0 ? [...ceiling.roots] : unscopedMode ? [realpathSync(homedir())] : [];
+        const browseRoots = ceiling.roots.length > 0 ? [...ceiling.roots] : unscopedMode ? [identities.hot(homedir())] : [];
         if (browseRoots.length === 0) {
             return refuse(response, who, 404, "this server was configured with an explicit repo list — the openable projects are all on the projects page", "/projects");
         }
         const asked = url.searchParams.get("at") ?? browseRoots[0];
-        const canonical = canonicalProject(asked);
-        const inside = canonical !== null &&
-            browseRoots.some(root => canonical === root || canonical.startsWith(`${root}/`));
-        if (canonical === null || !inside) {
+        const within = (path) => browseRoots.some(root => path === root || path.startsWith(`${root}/`));
+        // Spelled outside every root: refused before anything is read. Inside, the look resolves links and checks again.
+        if (!within(resolve(asked))) {
             return refuse(response, who, 403, "that path is outside what this server may browse", "/projects/browse");
         }
-        let entries = [];
-        try {
-            entries = readdirSync(canonical, { withFileTypes: true })
-                .filter(one => one.isDirectory() || one.isSymbolicLink())
-                .filter(one => !one.name.startsWith(".") && one.name !== "node_modules")
-                .slice(0, 400)
-                .map(one => {
-                const path = join(canonical, one.name);
-                // Resolve NOW so a symlink pointing outside the fence renders
-                // as nothing rather than as a door.
-                const resolved = canonicalProject(path);
-                if (resolved === null || !browseRoots.some(root => resolved === root || resolved.startsWith(`${root}/`))) {
-                    return null;
-                }
-                return { name: one.name, path: resolved, git: existsSync(join(resolved, ".git")) };
-            })
-                .filter((one) => one !== null)
-                .sort((a, b) => Number(b.git) - Number(a.git) || a.name.localeCompare(b.name))
-                .slice(0, 200);
+        // Read off the console's thread (folder-look.ts): a folder that doesn't answer never freezes the console.
+        const looked = await listFolder(asked, browseRoots, { ...(options.folderLook === undefined ? {} : { runner: options.folderLook }), ...(options.folderLookMs === undefined ? {} : { deadlineMs: options.folderLookMs }) });
+        if (!looked.ok) {
+            return looked.why === "no-answer"
+                ? refuse(response, who, 503, "This folder didn't answer. It may be on a drive that's disconnected, or waiting on macOS. Try again in a moment.", "/projects")
+                : refuse(response, who, 404, "that directory cannot be read", "/projects/browse");
         }
-        catch {
-            return refuse(response, who, 404, "that directory cannot be read", "/projects/browse");
+        const canonical = looked.value.at;
+        if (canonical === null || !within(canonical)) {
+            return refuse(response, who, 403, "that path is outside what this server may browse", "/projects/browse");
         }
+        // The look kept only folders inside a root; checked here again, as before.
+        const entries = looked.value.entries
+            .filter(one => within(one.path))
+            .sort((a, b) => Number(b.git) - Number(a.git) || a.name.localeCompare(b.name))
+            .slice(0, 200);
         const root = browseRoots.find(one => canonical === one || canonical.startsWith(`${one}/`));
         const parent = canonical === root ? null : canonical.slice(0, canonical.lastIndexOf("/")) || root;
         const csrf = who.session.csrf;
@@ -133,48 +126,28 @@ export function createPagesHandlers(runtime) {
         // (GitHub's rule); the FIRST match wins.
         const localByIdentity = new Map();
         const registered = new Set();
-        for (const project of store.listProjects()) {
-            if (!visible(project.path))
-                continue;
-            registered.add(project.path);
-            const identity = githubIdentityOf(originUrlOf(project.path) ?? "");
-            if (identity !== null && !localByIdentity.has(identity.toLowerCase())) {
-                localByIdentity.set(identity.toLowerCase(), project.path);
-            }
-        }
+        for (const project of store.listProjects())
+            if (visible(project.path))
+                registered.add(project.path);
         // Roots are walked ONLY when there are listed repos to match against
-        // (finding 1), through an iterator that stops at 400 entries — a
-        // directory with a million children costs 400 stats, not a scan.
-        if (listed !== null && listed.ok && listed.repos.length > 0) {
-            for (const root of ceiling.roots) {
-                const children = [];
-                try {
-                    const dir = opendirSync(root);
-                    try {
-                        for (let seen = 0; seen < 400; seen++) {
-                            const entry = dir.readSync();
-                            if (entry === null)
-                                break;
-                            if (entry.isDirectory())
-                                children.push(join(root, entry.name));
-                        }
-                    }
-                    finally {
-                        dir.closeSync();
-                    }
-                }
-                catch {
-                    // an unreadable root offers nothing
-                }
-                for (const child of children) {
-                    if (!existsSync(join(child, ".git")))
-                        continue;
-                    const identity = githubIdentityOf(originUrlOf(child) ?? "");
-                    if (identity !== null && !localByIdentity.has(identity.toLowerCase())) {
-                        localByIdentity.set(identity.toLowerCase(), child);
-                    }
+        // (finding 1), at most 400 folders a root. Every read runs off the
+        // console's thread (folder-look.ts): a folder that doesn't answer
+        // leaves its copies unmatched and the page says so.
+        const roots = listed !== null && listed.ok && listed.repos.length > 0 ? [...ceiling.roots] : [];
+        let localUnanswered = false;
+        if (registered.size > 0 || roots.length > 0) {
+            const looked = await localOrigins([...registered], roots, { ...(options.folderLook === undefined ? {} : { runner: options.folderLook }), ...(options.folderLookMs === undefined ? {} : { deadlineMs: options.folderLookMs }) });
+            if (looked.ok) {
+                const children = looked.value.found.filter(one => roots.some(root => one.path.startsWith(`${root}/`)));
+                for (const one of [...looked.value.registered.filter(row => registered.has(row.path)), ...children]) {
+                    const identity = githubIdentityOf(one.url ?? "");
+                    if (identity !== null && !localByIdentity.has(identity.toLowerCase()))
+                        localByIdentity.set(identity.toLowerCase(), one.path);
                 }
             }
+            else {
+                localUnanswered = looked.why === "no-answer";
+            }
         }
         return sendScreen(response, 200, githubReposPage(chromeFor(who.via === "cookie" ? who.session.project : null, "projects"), {
             listed,
@@ -183,6 +156,7 @@ export function createPagesHandlers(runtime) {
             csrf: who.via === "cookie" ? who.session.csrf : "",
             cloneReady: ceiling.roots.length > 0,
             openProject: who.via === "cookie" ? who.session.project ?? null : null,
+            localUnanswered,
         }));
     }
     // List repositories / Refresh list: ask the GitHub CLI signed in on this machine, then show the page.
@@ -354,7 +328,7 @@ export function createPagesHandlers(runtime) {
             runners: store.listRunners(),
             worktrees: store
                 .listWorktrees()
-                .filter(one => project === null || sameRepo(one.repo, project)),
+                .filter(one => project === null || one.repo === project || identities.hot(one.repo) === identities.hot(project)),
             episode: project === null ? null : store.latestWatchEpisode(project),
             now,
         }));
@@ -378,7 +352,7 @@ export function createPagesHandlers(runtime) {
             }),
             building: store.liveClaims(project, now),
             runners: store.listRunners(),
-            worktrees: store.listWorktrees().filter(one => project === null || sameRepo(one.repo, project)),
+            worktrees: store.listWorktrees().filter(one => project === null || one.repo === project || identities.hot(one.repo) === identities.hot(project)),
             episode: project === null ? null : store.latestWatchEpisode(project),
             outboxPending: store.pendingForAttention().length,
             // External work at a glance (arc 3 finding 24): every dispatch
@@ -665,7 +639,11 @@ export function createPagesHandlers(runtime) {
             return refuse(response, who, 403, "selecting a project is a browser session's act");
         }
         const askedPath = (body.get("path") ?? "").trim();
-        const canonicalPick = askedPath === "" ? null : canonicalProject(askedPath);
+        // Resolved off the console's thread (project-identity.ts): a folder that doesn't answer is said, never waited on.
+        const picked = askedPath === "" ? null : await identities.resolveNow(askedPath);
+        if (picked === "no-answer")
+            return refuse(response, who, 503, "That project's folder didn't answer. It may be on a drive that's disconnected, or waiting on macOS. Try again in a moment.");
+        const canonicalPick = picked;
         if ((askedPath !== "" && canonicalPick === null) || (canonicalPick !== null && (!visible(canonicalPick) || !(await authorizedProject(liveCeiling(), canonicalPick))))) {
             return refuse(response, who, 403, "that project is outside this console's reach");
         }
@@ -702,7 +680,11 @@ export function createPagesHandlers(runtime) {
             return refuse(response, who, 403, "opening a project is a browser session's act");
         }
         const asked = (body.get("path") ?? "").trim();
-        const canonical = asked === "" ? null : canonicalProject(asked);
+        const resolved = asked === "" ? null : await identities.resolveNow(asked);
+        if (resolved === "no-answer") {
+            return void projectsScreen(response, who, "that folder didn't answer — it may be on a drive that's disconnected, or waiting on macOS; try again in a moment", 503, safeReturn(body.get("return")));
+        }
+        const canonical = resolved;
         if (canonical === null) {
             return void projectsScreen(response, who, "that path does not exist on this server", 400, safeReturn(body.get("return")));
         }
@@ -807,13 +789,9 @@ export function createPagesHandlers(runtime) {
         const rootRaw = Number.isInteger(rootIndex) ? ceiling.roots[rootIndex] : undefined;
         if (rootRaw === undefined)
             return projectsScreen(response, who, "pick one of the configured roots", 400);
-        let root;
-        try {
-            root = realpathSync(rootRaw);
-        }
-        catch {
+        const root = await identities.resolveNow(rootRaw);
+        if (root === null || root === "no-answer")
             return projectsScreen(response, who, "that projects root does not resolve right now", 400);
-        }
         const previewed = await (options.ghPreview ?? previewGithubRepo)(shape.owner, shape.name);
         if (!previewed.ok)
             return projectsScreen(response, who, previewed.message, 400);
@@ -886,13 +864,9 @@ export function createPagesHandlers(runtime) {
         const rootRaw = ceiling.roots[record.rootIndex];
         if (rootRaw === undefined)
             return projectsScreen(response, who, "the configured roots changed — preview again", 400);
-        let root;
-        try {
-            root = realpathSync(rootRaw);
-        }
-        catch {
+        const root = await identities.resolveNow(rootRaw);
+        if (root === null || root === "no-answer")
             return projectsScreen(response, who, "that projects root does not resolve right now", 400);
-        }
         if (dirname(record.target) !== root)
             return projectsScreen(response, who, "the configured roots changed — preview again", 400);
         const cloned = await (options.ghClone ?? cloneGithubRepo)(record.nameWithOwner, root, async (cwd) => {
@@ -908,8 +882,8 @@ export function createPagesHandlers(runtime) {
             return projectsScreen(response, who, "the clone answered with a different path than the preview promised — refused; nothing was enrolled", 400);
         }
         // authorizedProject AFTER the repository exists (finding 20).
-        const proved = await authorizedProject(liveCeiling(), cloned.target);
-        const admitted = proved ? (canonicalProject(cloned.target) ?? cloned.target) : null;
+        const clonedAt = await identities.resolveNow(cloned.target);
+        const admitted = typeof clonedAt === "string" && clonedAt !== "no-answer" && (await authorizedProject(liveCeiling(), clonedAt)) ? clonedAt : null;
         if (admitted === null) {
             return projectsScreen(response, who, `the clone landed at ${cloned.target} but did not prove under the ceiling — it was left in place; enroll it by hand`, 400);
         }
@@ -937,7 +911,7 @@ export function createPagesHandlers(runtime) {
         const recentPaths = new Set(recent.map(one => one.path));
         const candidates = new Set();
         for (const path of consoleProjects()) {
-            const canonical = canonicalProject(path) ?? path;
+            const canonical = identities.hot(path);
             if (!recentPaths.has(canonical) && visible(canonical))
                 candidates.add(canonical);
         }

package/dist/server/render-pages.d.ts

@@ -422,22 +422,6 @@ export type ProjectPeek = {
  * GitHub identity. Everything else is null.
  */
 export declare function githubIdentityOf(remoteUrl: string): string | null;
-/**
- * The `origin` remote's url from a repository's OWN .git/config. BOUNDED
- * I/O by construction (ghlist review, finding 1): the final component may
- * not be a symlink (O_NOFOLLOW + lstat), must be a REGULAR file under a
- * size cap, and at most 64 KiB are ever read — a sparse monster or a fifo
- * planted as a "config" reads as null, never as a hang. Parsed LINE BY
- * LINE with real section tracking (finding 2): a `[remote "origin"]`
- * embedded inside some other value never opens the section. null when
- * unreadable or origin-less; a worktree-style `.git` FILE (gitdir pointer)
- * reads null too, which is honest — its identity lives elsewhere. The
- * answer is ADVISORY metadata for offering a button: the /projects/open
- * road re-proves path, ceiling, and git-ness before anything mutates, and
- * a config that lies about its origin can only mislabel a repository the
- * operator was already allowed to open.
- */
-export declare function originUrlOf(repoPath: string): string | null;
 /** The GitHub listing page: the account's repositories with ONE honest
  * action each. Names, descriptions, and paths are gh/filesystem DATA —
  * escaped at the sink like everything else. */
@@ -450,6 +434,8 @@ export declare function githubReposPage(chrome: Chrome, data: {
     csrf: string;
     cloneReady: boolean;
     openProject: string | null;
+    /** A projects folder didn't answer in time: local copies weren't matched this time. */
+    localUnanswered?: boolean;
 }): Screen;
 export declare function projectsPage(chrome: Chrome, recent: {
     path: string;

package/dist/server/render-pages.js

@@ -22,7 +22,6 @@ import { runCostWords, spendLine, tally } from "../summary.js";
 import {} from "../work-index.js";
 import { WORK_VIEWS } from "../workspace-ui.js";
 import { createHash } from "node:crypto";
-import { closeSync, constants as fsConstants, lstatSync, openSync, readSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { buildsViews, CHEVRON_ICON, consoleSpend, FOLDER_PATHS, GRIP_HANDLE, isOverdue, projectChip, relativeAge, safePrUrl, screen, sentenceCase, strokeIcon, TO_FRONT_ICON, when, whenTime } from "./chrome.js";
@@ -865,60 +864,6 @@ export function githubIdentityOf(remoteUrl) {
         return `${ssh[1]}/${ssh[2]}`;
     return null;
 }
-/**
- * The `origin` remote's url from a repository's OWN .git/config. BOUNDED
- * I/O by construction (ghlist review, finding 1): the final component may
- * not be a symlink (O_NOFOLLOW + lstat), must be a REGULAR file under a
- * size cap, and at most 64 KiB are ever read — a sparse monster or a fifo
- * planted as a "config" reads as null, never as a hang. Parsed LINE BY
- * LINE with real section tracking (finding 2): a `[remote "origin"]`
- * embedded inside some other value never opens the section. null when
- * unreadable or origin-less; a worktree-style `.git` FILE (gitdir pointer)
- * reads null too, which is honest — its identity lives elsewhere. The
- * answer is ADVISORY metadata for offering a button: the /projects/open
- * road re-proves path, ceiling, and git-ness before anything mutates, and
- * a config that lies about its origin can only mislabel a repository the
- * operator was already allowed to open.
- */
-export function originUrlOf(repoPath) {
-    const file = join(repoPath, ".git", "config");
-    let fd = null;
-    try {
-        const stat = lstatSync(file);
-        if (!stat.isFile() || stat.size > 1024 * 1024)
-            return null;
-        fd = openSync(file, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
-        const buffer = Buffer.alloc(64 * 1024);
-        const read = readSync(fd, buffer, 0, buffer.length, 0);
-        const config = buffer.toString("utf8", 0, read);
-        let inOrigin = false;
-        for (const line of config.split("\n")) {
-            if (/^\s*\[/.test(line)) {
-                inOrigin = /^\s*\[remote "origin"\]\s*$/.test(line);
-                continue;
-            }
-            if (!inOrigin)
-                continue;
-            const url = /^\s*url\s*=\s*(.+)$/.exec(line)?.[1];
-            if (url !== undefined)
-                return url.trim();
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-    finally {
-        if (fd !== null) {
-            try {
-                closeSync(fd);
-            }
-            catch {
-                // already closed
-            }
-        }
-    }
-}
 /** The GitHub listing page: the account's repositories with ONE honest
  * action each. Names, descriptions, and paths are gh/filesystem DATA —
  * escaped at the sink like everything else. */
@@ -955,6 +900,7 @@ export function githubReposPage(chrome, data) {
     return screen("projects", joinHtml([
         html `<h1>Your GitHub repositories</h1>`,
         html `<p class="meta">Repositories available to the GitHub account signed in on this machine — open one you already have, or clone a new one after a quick preview.</p>`,
+        data.localUnanswered === true ? html `<p class="meta">Your projects folder didn't answer, so copies already on this machine aren't matched yet. Try again in a moment.</p>` : null,
         rows,
         data.listed === null ? null : list("Refresh list"),
         html `<p class="row" style="margin-top:.6rem"><a class="badge" href="/projects">← back to projects</a></p>`,

package/dist/server/render-tasks.js

@@ -2519,6 +2519,7 @@ export function releaseCardHtml(taskId, release, canStop) {
         html `<details><summary>Later commits (${release.landed.length})</summary>${landed}</details>`,
         release.obligations.length === 0 ? "" : html `<details><summary>Still to pass (${release.obligations.length})</summary><ul>${joinHtml(release.obligations.map(one => html `<li>${one}</li>`), "")}</ul></details>`,
         release.nightly === null ? "" : html `<p class="meta">Nightly check of main: ${release.nightly.outcome ?? "running"} at ${release.nightly.sha.slice(0, 7)}${release.openMainFailures > 0 ? ` · ${release.openMainFailures} open failure${release.openMainFailures === 1 ? "" : "s"}` : ""}</p>`,
+        ...release.githubNightly.map(line => html `<p class="meta">${line}</p>`),
         release.carrying && canStop ? postForm(`${taskHref(taskId)}/stop-carrying`, html `<button type="submit" class="secondary">Stop carrying later commits</button>`, { attrs: { class: "inline" } }) : "",
         html `</div>`,
     ], "\n");

package/dist/server/runtime.d.ts

@@ -1,3 +1,4 @@
+import { type ProjectIdentities } from "../project-identity.js";
 import type { FreshFacts } from '../scope.js';
 import type { createPersonalQueueRuntime } from '../lead-queue-runtime.js';
 import type { FlowRooms } from '../flow-live.js';
@@ -95,7 +96,10 @@ export interface ServerRuntime {
     liveCeiling: () => {
         repos: string[];
         roots: readonly string[];
+        canon?: (path: string) => string | null;
     };
+    /** Project identities without reading folders on the console's thread (project-identity.ts). */
+    identities: ProjectIdentities;
     taskScreen: (response: ServerResponse, who: Who, taskId: string, problem: string | null, status: number, scopeDraft?: URLSearchParams, cancelDraft?: string, editPlan?: boolean, page?: TaskPageExtras) => void;
     runVisible: (run: Run) => boolean;
     runIsLive: (run: Pick<Run, "outcome" | "leaseId" | "taskRef">) => boolean;

package/dist/server/runtime.js

@@ -1,3 +1,4 @@
+import {} from "../project-identity.js";
 /** Captured server state and shared guards. Getters preserve live state across requests. */
 import {} from "node:http";
 import {} from '../assignment.js';

package/dist/server/settings.js

@@ -9,6 +9,7 @@ import { CONNECT_CALLBACK, connectionsOf, finishConnect, localConnectOf, oneClic
 import { learningView } from "../project-learning.js";
 import { skillTestResult } from "../project-skills.js";
 import { discoverTools, projectToolsOf } from "../project-tools.js";
+import { lookProjectMcp } from "../folder-look.js";
 import { publishingOf } from '../pull-request-flow.js';
 import { skillTestFeedbackHtml } from "../skills-ui.js";
 import { labelOf, nameOf } from "../subagent-admin.js";
@@ -132,7 +133,7 @@ import { personChip, ROLE_TITLES } from "./chrome.js";
 import { chatReturnWithSaid, goOutside } from "./http.js";
 import { leadSettingsHtml, notificationProjects, SETTINGS_AUTOSAVE_SCRIPT, settingsPage, settingsWorkers, telegramDeliveryWords, telegramTrouble } from "./render-settings.js";
 export function createSettingsHandlers(runtime) {
-    const { store, providerHome, managedRepos, consoleProjects, sendScreen, chromeFor, connectionCheck, connectionKnown, lastChecks, checkRelease, clock, modelCatalog, modelSeams, toolsViewOf, codexServers, projectViewOf, sessions, restricted, options, integrations, consoleOrigin, evidenceRoot, storagePool, visible, ssoSettings, checkLocalAgents, chatKeyFor, chatCatalog, chatCatalogKnown, leadWords, agentSignInCommand, settingsUpdates, phoneSetup, authenticateApprover, authenticateCredential, deletedRepos, projectOf, providerFor, admissionList, toolHome, connectVisits, mintApprovalNonce, consumeApprovalNonce, defaultProject, googleVisits } = runtime;
+    const { identities, store, providerHome, managedRepos, consoleProjects, sendScreen, chromeFor, connectionCheck, connectionKnown, lastChecks, checkRelease, clock, modelCatalog, modelSeams, toolsViewOf, codexServers, projectViewOf, sessions, restricted, options, integrations, consoleOrigin, evidenceRoot, storagePool, visible, ssoSettings, checkLocalAgents, chatKeyFor, chatCatalog, chatCatalogKnown, leadWords, agentSignInCommand, settingsUpdates, phoneSetup, authenticateApprover, authenticateCredential, deletedRepos, projectOf, providerFor, admissionList, toolHome, connectVisits, mintApprovalNonce, consumeApprovalNonce, defaultProject, googleVisits } = runtime;
     // v105: what agent work cost, by month, and the monthly budgets. An instance operator's page.
     async function spendPage(ctx) {
         const { url, who, response, now } = ctx;
@@ -1547,7 +1548,15 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
                 const wanted = body.getAll("import");
                 if (wanted.length === 0)
                     return back("problem", "Choose at least one tool to add.");
-                const found = discoverTools(repo, await codexServers(repo), toolHome);
+                // The project's own .mcp.json read now, off the console's thread (folder-look.ts).
+                let projectConfig;
+                if (options.identities !== undefined) {
+                    const looked = await lookProjectMcp(repo);
+                    if (!looked.ok)
+                        return back("problem", "This project's folder didn't answer. It may be on a drive that's disconnected, or waiting on macOS. Try again in a moment.");
+                    projectConfig = looked.value;
+                }
+                const found = discoverTools(repo, await codexServers(repo), toolHome, process.env, projectConfig);
                 const added = [], problems = [];
                 for (const one of wanted) {
                     const match = found.find(tool => tool.spec.name === one);
@@ -1887,7 +1896,9 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         if (["scope", "full-access", "cap-usd", "nonce", "digest", "token"].some(key => body.getAll(key).length > 1))
             return refuse(response, who, 400, "Submit one value for each field.", "/settings");
         const given = (body.get("scope") ?? "all").trim();
-        const scope = given === "all" || given === "" ? CHAT_APPROVAL_ALL : canonicalProject(given) ?? given;
+        const scope = given === "all" || given === "" ? CHAT_APPROVAL_ALL : identities.vouched(given, consoleProjects) ?? null;
+        if (scope === null)
+            return refuse(response, who, 403, "That isn't one of your projects.", "/settings");
         if (scope !== CHAT_APPROVAL_ALL && !(visible(scope) && store.accountCanAccess(who.name, scope)))
             return refuse(response, who, 403, "That isn't one of your projects.", "/settings");
         const where = scope === CHAT_APPROVAL_ALL ? "all your projects" : projectName(scope);