toolroll 0.9.82 → 0.9.84

package/dist/serve.js

@@ -1,5 +1,7 @@
 import { secretFolder } from "./tool-secret-store.js";
 import { acceptedIdentities, recoverLearning } from "./project-learning.js";
+import { syncProjectIdentities } from "./project-identity.js";
+import { firstTasksOffThread, recoverLearningOffThread } from "./learning-look.js";
 import { loadOrCreateVapidKeys } from "./push.js";
 import { checkoutPlan } from "./checkout-cleanup.js";
 import { latestReleaseFor } from "./server/render-settings.js";
@@ -38,7 +40,8 @@ import { asReadOnlyRequest } from './read-only-request.js';
 import { connectionsOf, localConnectOf, oneClickOf } from "./mcp-connect.js";
 import { MOBILE_VIEWPORT_SCRIPT } from "./mobile-viewport.js";
 import { projectAuthority } from "./project-access.js";
-import { discoverTools, projectToolsOf, secretsSetFor, TOOL_CATALOG, toolSecretStorage, toolStanding } from "./project-tools.js";
+import { discoverTools, projectToolsOf, savedProjectMcp, secretsSetFor, TOOL_CATALOG, toolSecretStorage, toolStanding } from "./project-tools.js";
+import { lookProjectMcp } from "./folder-look.js";
 import { toolRefusal } from "./policy.js";
 import { isEdgeAddress, refuseEdge } from "./server/edge-refusal.js";
 import { announcePasswordBearer, isPasswordBearer, PASSWORD_BEARER_REFUSED, passwordBearerAccepted } from "./password-bearer.js";
@@ -143,6 +146,7 @@ import { createChatHandlers } from './server/chat.js';
 import { createLiveHandlers } from './server/live.js';
 import { createTerminalHandlers, terminalHostFor } from './server/terminals.js';
 import { passwordlessOn } from './passwordless.js';
+import { keepTypedFields, openProjectFor, settingsCrumbs } from './settings-kit.js';
 import { createSweepHandlers } from './server/sweeps.js';
 import { createFlowsHandlers } from './server/flows.js';
 import { createPagesHandlers } from './server/pages.js';
@@ -166,6 +170,9 @@ import { loadConsoleUrl } from "./webhooks.js";
 import { reviewFactsOf } from "./workspace-ui.js";
 import { WorktreePool } from "./worktree.js";
 export function createDecisionServer(options) {
+    // Identities come from what the console's start resolved off its thread (startConsole); a path that didn't answer
+    // stays unresolved, kept restrictive. Without them (embedders, tests) the old synchronous reads apply.
+    const identities = options.identities ?? syncProjectIdentities();
     const { projectFamilyPeek, familiesInView, familyTasksInView, revisionDestination, runIsLive, runIsTaskResult, revisionViewOf, taskViewData, routeViewOf, taskChatFocus, pullRequestTargetOf, failureOf, explainAttempt, taskScreen, armTaskResume, planViewOf, planContractViewOf, revisionDocOf, revisionLedgerOf, resultDetailOf } = createTaskViews({
         get store() { return store; },
         get projectCounts() { return projectCounts; },
@@ -188,12 +195,13 @@ export function createDecisionServer(options) {
     const { authenticateApprover, authenticateCredential, authorizeMutation, projectOf, projectRequestAllowed, identify, lookupSession, restricted, visible, admissionList, codingActorAllowed, codingProjectAllowed, workAccess, familyOf, taskRepoOf, runVisible } = createSharedGuards({
         get store() { return store; },
         get liveCeiling() { return liveCeiling; },
+        identities,
         get codingProjects() { return codingProjects; },
         get unscopedMode() { return unscopedMode; },
         get managedRepos() { return managedRepos; },
         get ceiling() { return ceiling; },
         get allowedHost() { return allowedHost; },
-        get defaultProject() { return defaultProject; },
+        get defaultProject() { return defaultProject(); },
         get actionTarget() { return actionTarget; },
         get team() { return team; },
         get joinSourceOf() { return joinSourceOf; },
@@ -446,20 +454,21 @@ export function createDecisionServer(options) {
     };
     let joinGlobal = { tokens: 30, refilledAt: Date.now() };
     const approvalNonces = new Map();
-    // Resolve startup authority once. Missing paths remain restrictive.
-    // Native additions come only from the controller after its admission checks.
-    const { ceiling, unresolved: unresolvedRepos } = resolveCeiling([...(options.repo === undefined ? [] : [options.repo]), ...(options.repos ?? [])], options.projectRoots ?? []);
-    /** The project every fresh session opens with: the sole configured repo, else none. */
-    const defaultProject = ceiling.repos.length === 1 && ceiling.roots.length === 0 ? ceiling.repos[0] : null;
+    // Startup authority: the configured repos and roots as their identities say (startupCeiling). Missing or unresolved
+    // paths remain restrictive. Native additions come only from the controller after its admission checks.
+    const { ceiling, unresolved: unresolvedRepos, defaultProject, configured, configuredPaths } = startupCeiling([...(options.repo === undefined ? [] : [options.repo]), ...(options.repos ?? [])], options.projectRoots ?? [], options.identities === undefined ? undefined : identities, identities.strict);
     /** No ceiling configured at all: the legacy trust-everything mode, named. */
-    const unscopedMode = ceiling.repos.length === 0 && ceiling.roots.length === 0;
+    // An `up` console (it is handed its admitted set) is never unscoped: with every saved project away it is empty.
+    // Judged by what was configured, never by what has resolved so far: a console whose folders haven't answered yet is
+    // scoped and empty, not unscoped.
+    const unscopedMode = !configured && options.admittedRepos === undefined;
     /** Per-row visibility under the ceiling — the authorization question for reads. */
     /** The exact repositories this console serves now: `up`'s live admitted set when it supplies one, else startup's. */
     const exactRepos = () => options.admittedRepos?.() ?? ceiling.repos;
     const liveCeiling = () => {
         const repos = [...exactRepos(), ...(options.additionalProjectRepos?.() ?? [])];
         // An admitted set that is empty for now is an empty ceiling, never the legacy unscoped mode.
-        return { repos: repos.length === 0 && ceiling.roots.length === 0 && !unscopedMode ? [NO_PROJECT] : repos, roots: ceiling.roots };
+        return { repos: repos.length === 0 && ceiling.roots.length === 0 && !unscopedMode ? [NO_PROJECT] : repos, roots: ceiling.roots, canon: identities.strict };
     };
     /** The explicit, currently proved project list. The callback is supplied
      * only by `up`, after it has independently checked git-ness and the root
@@ -479,7 +488,7 @@ export function createDecisionServer(options) {
         const repos = [];
         const gone = goneRepos();
         for (const path of [...exactRepos(), ...(options.currentRepos?.() ?? [])]) {
-            const canonical = canonicalProject(path) ?? path;
+            const canonical = identities.hot(path);
             if (seen.has(canonical) || !visible(canonical) || gone.has(canonical))
                 continue;
             seen.add(canonical);
@@ -568,7 +577,8 @@ export function createDecisionServer(options) {
             // A service that connects by signing in (or an app's own Connect) is offered only that way.
             catalog: TOOL_CATALOG.filter(one => !names.has(one.name) && oneClickOf(one.name) === null && localConnectOf(one.name) === null),
             connections: connectionsOf(store, repo, toolHome), kit, wanted,
-            found: discoverTools(repo, codex, toolHome).filter(one => !names.has(one.spec.name)),
+            // The project's own .mcp.json as the background pass last read it off the console's thread (never read here).
+            found: discoverTools(repo, codex, toolHome, process.env, options.identities === undefined ? undefined : savedProjectMcp.get(repo) ?? null).filter(one => !names.has(one.spec.name)),
             storage: toolSecretStorage(),
         };
     };
@@ -879,6 +889,7 @@ export function createDecisionServer(options) {
             browser: who.via === 'cookie',
             // Passwordless (read once for rendering; every act proves it again at the act): ceremony fields render as nothing.
             passwordless: who.via === 'cookie' && passwordlessOn(store),
+            openProject: who.via === 'cookie' ? who.session.project : null,
             // v100: signed in with the identity provider: its label, and whether it checked them recently enough to stand in for a password.
             // Cockpit B2: "fresh" is an explicit re-check made on request and not yet spent (read live; one step-up uses it).
             sso: who.via === 'cookie' && who.session.sso !== undefined ? { label: ssoSettings()?.label ?? "your identity provider",
@@ -1027,7 +1038,7 @@ export function createDecisionServer(options) {
         }
         const known = new Set(["/recipes/prepare", "/recipes/preview", "/recipes/import", "/recipes/save", "/recipes/launch", "/tasks/add", "/queue/move", "/queue/note", "/people/invite", "/people/invite-revoke", "/people/revoke", "/people/projects", "/projects/select", "/projects/open", "/mode/confirm", "/mode/sign", "/mode/revoke", "/settings/chat-approval/save", "/settings/chat-approval/off", "/settings/project/live-view"]);
         const placed = url.pathname === "/tasks/add" ? body?.get("repo")?.trim() : null;
-        return { repo: url.pathname.startsWith("/people/") ? null : placed ? canonicalProject(placed) ?? placed : projectOf(who, request) ?? null, taskId: null, runId: null,
+        return { repo: url.pathname.startsWith("/people/") ? null : placed ? identities.strict(placed) ?? placed : projectOf(who, request) ?? null, taskId: null, runId: null,
             action: known.has(url.pathname) ? url.pathname.slice(1).replaceAll("/", " ") : "console request" };
     }
     async function handleGet(route, url, who, request, response) {
@@ -1317,8 +1328,8 @@ export function createDecisionServer(options) {
             return { ok: false, code: "demo", why: "this is a demo database — chat cannot contact an external model" };
         if (unscopedMode)
             return { ok: false, code: "unscoped", why: "chat needs at least one added project" };
-        if (options.currentRepos === undefined && unresolvedRepos.length > 0) {
-            return { ok: false, code: "unresolved", why: "a configured project path did not resolve at startup — fix it and restart before chat will run" };
+        if (options.currentRepos === undefined && unresolvedRepos().length > 0) {
+            return { ok: false, code: "unresolved", why: "a configured project folder hasn't been found yet — chat runs once it answers; if its path is wrong, fix it and restart" };
         }
         if (managedRepos().length === 0)
             return { ok: false, code: "empty", why: "add a project first — chat will include it automatically" };
@@ -1473,13 +1484,20 @@ export function createDecisionServer(options) {
         const ssoFacts = requestContext.getStore()?.sso;
         if (ssoFacts !== undefined) {
             const back = requestContext.getStore()?.returnTo ?? "/";
-            s = { ...s, body: ssoStepUps(s.body, ssoFacts, back), ...(s.workspace?.pageHtml == null ? {} : { workspace: { ...s.workspace, pageHtml: ssoStepUps(s.workspace.pageHtml, ssoFacts, back) } }) };
+            // A typed-only proof (settings-kit.ts) stays a password field: its handler takes nothing else.
+            s = { ...s, body: keepTypedFields(s.body, ssoStepUps, ssoFacts, back), ...(s.workspace?.pageHtml == null ? {} : { workspace: { ...s.workspace, pageHtml: keepTypedFields(s.workspace.pageHtml, ssoStepUps, ssoFacts, back) } }) };
             if (s.workspace?.view?.kind === "flow")
                 s = { ...s, workspace: { ...s.workspace, view: { ...s.workspace.view, stepUp: { label: ssoFacts.label, fresh: ssoFacts.fresh, confirmHref: `/login/sso?reauth=1&return=${encodeURIComponent(back)}` } } } };
         }
         // D5: team chat (the central team service) is deprecated; /chat?team=1 still opens this release, but nothing links to it.
         const sensitive = authored || s.forceSensitive === true;
         const requestFacts = requestContext.getStore();
+        // The settings frame (settings-kit.ts): its breadcrumb, for the shell and the workspace alike.
+        if (s.chrome !== undefined && s.chrome.crumbs === undefined) {
+            const crumbs = settingsCrumbs(new URL(requestFacts?.returnTo ?? '/', 'http://standing-orders.local').pathname, s.title, htmlString(s.body));
+            if (crumbs !== undefined)
+                s = { ...s, chrome: { ...s.chrome, crumbs } };
+        }
         if (requestFacts?.browser && s.chrome && !s.forceSensitive && (requestFacts.workspaceRead || browserAssetsAvailable())) {
             const path = new URL(requestFacts.returnTo, 'http://standing-orders.local');
             path.searchParams.delete('format');
@@ -1554,6 +1572,10 @@ export function createDecisionServer(options) {
             const request = requestFacts.workspaceRequest;
             const workspace = {
                 version: 1, path: currentPath, title: s.title, user: requestFacts.actor ?? '', csrf: requestFacts.csrf, sensitive,
+                // The project picker names the open project; the settings frame carries its breadcrumb.
+                // Only a project this person may see now: never the raw saved path (settings-kit.ts openProjectFor).
+                openProject: openProjectFor(requestFacts.openProject ?? null, s.chrome.project, s.chrome.projects ?? []),
+                ...(s.chrome.crumbs === undefined ? {} : { crumbs: s.chrome.crumbs }),
                 ...(requestFacts.passwordless === true ? { passwordless: true } : {}),
                 ...(requestFacts.actor ? { leadName: leadNameOf(store, requestFacts.actor) } : {}),
                 refreshUrl: path.pathname + path.search,
@@ -1955,6 +1977,8 @@ export function createDecisionServer(options) {
                         for (const provider of PROVIDER_IDS.filter(isKeyedProvider).filter(one => one !== "claude" && one !== "codex"))
                             waits.push(connectionCheck(provider).catch(() => undefined));
                     }
+                    // Project identities, resolved off the thread: what pages asked about, and answers gone stale.
+                    waits.push(identities.refresh([...configuredPaths, ...exactRepos(), ...(options.currentRepos?.() ?? []), ...store.listProjects().map(one => one.path), ...store.knownRepos()]));
                     integrations.refreshIfDue();
                     const sso = ssoSettings();
                     if (sso !== null && (ssoProvider === null || ssoProvider.issuer !== sso.issuer || Date.now() - ssoProvider.at >= 10 * 60_000))
@@ -1991,13 +2015,22 @@ export function createDecisionServer(options) {
                                 continue;
                             const reading = { until: Date.now() + 10 * 60_000, found: entry?.found ?? null, reading: true };
                             firstTasks.set(repo, reading);
-                            waits.push(findFirstTasks(repo, options.firstTaskRunner ?? execRun).then(found => { reading.found = found; }, () => { }).finally(() => { reading.reading = false; }));
+                            // A test's runner reads in-process; otherwise in a process of its own (learning-look.ts), so the hardened
+                            // git's synchronous reads of the project's folder never hold the console's thread.
+                            waits.push((options.firstTaskRunner !== undefined ? findFirstTasks(repo, options.firstTaskRunner) : firstTasksOffThread(repo)).then(found => { reading.found = found; }, () => { }).finally(() => { reading.reading = false; }));
                         }
                     }
                     // Learning recovered from reviewed runs (and a project's saved rows carried to its current identity), which
                     // Settings → Learning and Knowledge used to do as they opened.
                     if (lastChecks.due("learning", 10 * 60_000)) {
                         waits.push(lastChecks.run("learning", async () => {
+                            // Its reads of each project's Git folder are synchronous, so with a database file they run in a process of
+                            // their own (learning-look.ts): a folder that doesn't answer costs its own recovery, never the console. An
+                            // in-memory database (a test) can't be shared, so it is read here.
+                            if (databaseFile !== null) {
+                                await recoverLearningOffThread({ databaseFile, evidenceRoot, repos: managedRepos() }, options.learningRunner === undefined ? {} : { runner: options.learningRunner });
+                                return;
+                            }
                             for (const repo of managedRepos()) {
                                 try {
                                     acceptedIdentities(store, repo);
@@ -2012,6 +2045,11 @@ export function createDecisionServer(options) {
                     }
                     // What Codex has configured, per project, for Settings → Tools to offer.
                     for (const repo of managedRepos()) {
+                        // The project's own .mcp.json, read off the console's thread (folder-look.ts) for the Tools page and the lead.
+                        if (options.identities !== undefined && lastChecks.due(`project-mcp:${repo}`, 10 * 60_000)) {
+                            waits.push(lastChecks.run(`project-mcp:${repo}`, async () => { const looked = await lookProjectMcp(repo); if (looked.ok)
+                                savedProjectMcp.set(repo, looked.value); return looked.ok; }));
+                        }
                         if (lastChecks.due(`codex-tools:${repo}`, 10 * 60_000))
                             waits.push(lastChecks.run(`codex-tools:${repo}`, () => codexServers(repo)));
                     }
@@ -2178,7 +2216,7 @@ export function createDecisionServer(options) {
         get providerFor() { return providerFor; },
         get providerKnown() { return providerKnown; },
         get connectVisits() { return connectVisits; },
-        get defaultProject() { return defaultProject; },
+        get defaultProject() { return defaultProject(); },
         get googleVisits() { return googleVisits; },
         get setupAttemptsLeft() { return setupAttemptsLeft; },
         set setupAttemptsLeft(value) { setupAttemptsLeft = value; },
@@ -2220,6 +2258,7 @@ export function createDecisionServer(options) {
         get revisionLedgerOf() { return revisionLedgerOf; },
         get firstTasks() { return firstTasks; },
         get authenticateCredential() { return authenticateCredential; },
+        get identities() { return identities; },
     };
     const tasksHandlers = createTasksHandlers(handlerRuntime);
     const pagesHandlers = createPagesHandlers(handlerRuntime);
@@ -2297,3 +2336,38 @@ export { diffFileAnchor, editorFileHref, needActionOf, orderChangedFiles, plainC
 export { settingsGroups, settingsTiles } from "./server/render-settings.js";
 export { decisionAnswerScript, earlierVersionsWords, revisionLineageWords } from "./server/render-tasks.js";
 export { SIGN_IN_LINK_MS, SIGN_IN_LINK_PATH } from "./server/session.js";
+/**
+ * The console's configured repos and roots. Without identities (embedders and tests) they resolve once, synchronously,
+ * as before. With them, the console resolves them in the background after it listens (operate.ts startConsole), so
+ * each is read from the last answer: a configured path counts by its real path from the moment its folder answers,
+ * and until then only by its spelling, which the strict `canon` never matches for an unresolved row.
+ */
+function startupCeiling(repos, roots, identities, canon) {
+    const configured = repos.length > 0 || roots.length > 0;
+    const configuredPaths = [...repos, ...roots];
+    if (identities === undefined) {
+        const once = resolveCeiling(repos, roots);
+        return {
+            ceiling: { ...once.ceiling, canon },
+            unresolved: () => once.unresolved,
+            defaultProject: () => once.ceiling.repos.length === 1 && once.ceiling.roots.length === 0 ? once.ceiling.repos[0] : null,
+            configured,
+            configuredPaths,
+        };
+    }
+    // Only resolved entries authorize: an unresolved configured path is in no list, so it matches nothing (not even its
+    // own spelling) and is no session's default until its folder answers.
+    const resolved = (paths) => [...new Set(paths.flatMap(path => { const real = identities.known(path); return typeof real === "string" ? [real] : []; }))];
+    const ceiling = {
+        get repos() { return resolved(repos); },
+        get roots() { return resolved(roots); },
+        canon,
+    };
+    return {
+        ceiling,
+        unresolved: () => [...repos, ...roots].filter(path => typeof identities.known(path) !== "string"),
+        defaultProject: () => repos.length === 1 && roots.length === 0 ? resolved(repos)[0] ?? null : null,
+        configured,
+        configuredPaths,
+    };
+}

package/dist/server/chat.js

@@ -12,10 +12,10 @@ import { CHAT_ACTIONS, mintSharedActionReview, sharedActionPayload, sharedAction
 import { CONSOLE_FORMS, readForm } from "../contracts/console-api.js";
 import { buildDataDocument, composeRequest, isSubscriptionChatProvider, parseAssistantEnvelope, performChatRequest, plausibleChatKey, priceOf, settleForPrice, TURN_WALL_CLOCK_MS, worstCaseForPrice } from "../converse.js";
 import { DEMO_CHAT_SCRIPT, demoChatHtml, demoThreadHtml } from "../demo-chat.js";
-import { withDispatchDiagnoses } from "../dispatch.js";
+import { builderReadyFor, firstRunBuilderRepo, withDispatchDiagnoses } from "../dispatch.js";
 import { readVerifiedArtifact, scanForSecrets } from "../evidence.js";
 import { run as execRun } from "../exec.js";
-import { findFirstTasks, firstTaskSuggestions, HOW_IT_WORKS, SANDBOX_COMMAND } from "../first-run.js";
+import { findFirstTasks, firstTaskSuggestions, HOW_IT_WORKS, SANDBOX_COMMAND, withBuilderStep } from "../first-run.js";
 import { leadBriefHtml } from '../lead-context.js';
 import { configureLeadFollow, leadFollowStatus } from '../lead-follow.js';
 import { leadActivity } from "../lead-voice.js";
@@ -1158,11 +1158,12 @@ export function createChatHandlers(runtime) {
     }
     /** Chat's first run: the steps, first tasks until the first task exists, and the sandbox while no agent is signed in. */
     function chatFirstRun(now, project) {
-        const steps = firstRunStepsNow(now);
+        const repo = project ?? managedRepos()[0] ?? null;
+        // Done only when a task in this project could start: a live builder bound to it, as dispatch decides.
+        const steps = withBuilderStep(firstRunStepsNow(now), builderReadyFor(store, firstRunBuilderRepo(store, project, visible, managedRepos()), now));
         if (steps === null)
             return undefined;
         const taskFiled = steps.find(one => one.key === "task")?.done ?? true;
-        const repo = project ?? managedRepos()[0] ?? null;
         const agent = steps.find(one => one.key === "agent");
         const lead = leadWords();
         return {

package/dist/server/chrome.d.ts

@@ -1,4 +1,5 @@
 import { type BrowserSignIn, type BrowserUpdateNotice, type BrowserWorkspace } from "../browser-workspace.js";
+import { type Crumb } from "../settings-kit.js";
 import { type Decision, type Run } from "../store.js";
 import { type tally } from "../summary.js";
 import { type ServerResponse } from "node:http";
@@ -115,6 +116,8 @@ export type Chrome = {
     csrf?: string;
     /** Where a switch made on this screen returns to. */
     returnTo?: string;
+    /** The settings frame's breadcrumb ("Settings / <page>", settings-kit.ts), set by sendScreen; absent elsewhere. */
+    crumbs?: Crumb[];
 };
 /**
  * A server-rendered region that stays current: when the page's live stream

package/dist/server/chrome.js

@@ -33,6 +33,7 @@ import { PULL_REQUEST_SETTINGS_CSS } from "../pull-request-ui.js";
 import { RECIPE_CSS } from "../recipe-ui.js";
 import { REQUEST_LIMITS_CSS } from "../request-budget-ui.js";
 import { RETENTION_CSS } from "../retention-ui.js";
+import { crumbsHtml, SETTINGS_KIT_CSS } from "../settings-kit.js";
 import { SKILLS_CSS } from "../skills-ui.js";
 import { SPEND_CSS } from "../spend-ui.js";
 import { SSO_CSS } from "../sso-ui.js";
@@ -148,7 +149,7 @@ export const INBOX_TABS_CSS = '.inbox-tabs{display:inline-flex;gap:2px;max-width
     '.inbox-ask{margin:18px 0 0}.inbox-ask>h2{display:flex;align-items:baseline;gap:8px;margin:0 0 4px;font-size:15px;font-weight:600}.inbox-ask>h2 .count{font:500 12px var(--so-mono,ui-monospace,monospace);font-variant-numeric:tabular-nums;color:var(--so-muted)}.inbox-ask h3{font-size:13px;font-weight:600;margin:12px 0 4px}' +
     '.inbox-unread{display:none;position:absolute;top:4px;right:3px;width:6px;height:6px;border-radius:50%;background:var(--so-signal)}' +
     '@media (max-width:760px){.inbox-tabs{display:flex;width:100%}.inbox-tabs a{flex:1;justify-content:center;min-height:44px;padding:0 6px}.inbox-unread{display:block}}';
-export const WORKSPACE_STYLE = styleAsset(STYLE + BRAND_MARK_CSS + INBOX_TABS_CSS + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + INTEGRATIONS_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + SUBAGENT_CSS + KITS_CSS + STARTERS_CSS + GALLERY_CSS + SSO_CSS + CREDENTIALS_CSS + REQUEST_LIMITS_CSS + PEOPLE_AUDIT_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + TASK_STATUS_CSS + LEAD_CONTEXT_CSS + PULL_REQUEST_SETTINGS_CSS + CHECK_SETTINGS_CSS + DISCLOSURE_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
+export const WORKSPACE_STYLE = styleAsset(STYLE + BRAND_MARK_CSS + INBOX_TABS_CSS + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + INTEGRATIONS_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + SUBAGENT_CSS + KITS_CSS + STARTERS_CSS + GALLERY_CSS + SSO_CSS + CREDENTIALS_CSS + REQUEST_LIMITS_CSS + PEOPLE_AUDIT_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + TASK_STATUS_CSS + LEAD_CONTEXT_CSS + PULL_REQUEST_SETTINGS_CSS + CHECK_SETTINGS_CSS + DISCLOSURE_CSS + SETTINGS_KIT_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
 /**
  * A server-rendered region that stays current: when the page's live stream
  * says something changed (GET /live, live-bus.ts), fetch this page's own
@@ -579,8 +580,10 @@ ${update === undefined ? "" : html `<div class="banner update-banner" data-updat
 ${postForm(update.dismissHref, html `<button type="submit">Dismiss</button>`, { attrs: { class: "inline" }, hidden: { version: update.version } })}</div>`}`;
     // The scope bar sits between the banners and the main/split body, so it
     // can never disappear with a responsive pane (portfolio arc §1).
+    // The settings frame's breadcrumb sits above the page's own h1 (its only h1).
+    const crumbs = chrome.crumbs === undefined ? "" : crumbsHtml(chrome.crumbs);
     const content = chrome.listPane === undefined
-        ? html `<div class="content">${demoBanner}${scopeBar}<main>${main}</main></div>`
+        ? html `<div class="content">${demoBanner}${scopeBar}${crumbs}<main>${main}</main></div>`
         : html `<div class="content">${demoBanner}${scopeBar}<div class="split">\
 <div class="list-pane">${chrome.listPane}</div>\
 <div class="detail"><main>${main}</main></div>\

package/dist/server/console.css

@@ -265,12 +265,15 @@
   .project-card .project-name:focus-visible { outline: 2px solid var(--ring); outline-offset: 2px; border-radius: .375rem; }
 
   label { display: block; font-size: 0.8125rem; font-weight: 500; margin: .75rem 0 0; color: var(--foreground); }
-  input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], textarea, select {
-    width: 100%; margin: .35rem 0 0; padding: .45rem .7rem; font: 400 0.875rem/1.4 var(--font-sans);
+  :where(input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], textarea, select) {
+    width: 100%; margin: .35rem 0 0; padding: .45rem .7rem;
     color: var(--foreground); background: var(--card); min-height: 2.125rem;
     border: 1px solid var(--input); border-radius: calc(var(--radius) - 3px);
     transition: border-color .15s, box-shadow .15s;
   }
+  /* The box above is in :where() so a surface's own rules (the workspace's 44px phone targets) win; the type keeps
+     its old weight, so the phone's 16px rule still loses to it as before. */
+  input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], textarea, select { font: 400 0.875rem/1.4 var(--font-sans); }
   @media (hover: hover) and (pointer: fine) { input:hover, textarea:hover, select:hover { border-color: var(--muted-foreground); } }
   input[type=number] { font-family: var(--font-mono); font-variant-numeric: tabular-nums; }
   input[type=radio], input[type=checkbox] { accent-color: var(--ring); }

package/dist/server/flows.js

@@ -43,7 +43,7 @@ import { redirect, respond, SAFETY, taskHref } from "./http.js";
 import { html } from "../html.js";
 import {} from "./session.js";
 export function createFlowsHandlers(runtime) {
-    const { store, clock, sendScreen, chromeFor, consoleProjects, options, visible, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, authenticateCredential, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
+    const { identities, store, clock, sendScreen, chromeFor, consoleProjects, options, visible, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, authenticateCredential, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
     // ---- reads ---------------------------------------------------------------
     /** A gallery template's page (Flows → New → Use this): its questions, the preview of these answers, and Create. */
     function sendGalleryUse(response, who, template, projects, repo, given, name, notice, said = null) {
@@ -839,13 +839,23 @@ export function createFlowsHandlers(runtime) {
             if (body.get("repo") !== project || (who.via === "cookie" && body.get("projectRevision") !== String(who.session.projectRevision)))
                 throw new RecipeError("The open project changed. Reopen this recipe in the intended project.", 409);
             const rootMode = !unscopedMode && ceiling.roots.length > 0;
-            if (rootMode && !(await authorizedProject(liveCeiling(), project)))
-                throw new RecipeError("The project is outside this server's access.", 403);
+            const decidedOn = identities.generation();
+            if (rootMode) {
+                // A mutation's target is resolved now, off the console's thread, and must still be the project it names.
+                const resolved = await identities.resolveNow(project);
+                if (resolved === "no-answer")
+                    throw new RecipeError("The project's folder didn't answer. It may be on a drive that's disconnected, or waiting on macOS. Try again in a moment.", 503);
+                if (resolved !== project || !(await authorizedProject(liveCeiling(), resolved)))
+                    throw new RecipeError("The project is outside this server's access.", 403);
+            }
             const rechecked = authorizeMutation(request, who, readForm(posted, CONSOLE_FORMS.mutationGuard));
             if (rechecked !== null)
                 throw new RecipeError(rechecked.message, rechecked.status);
             if (projectOf(who, request) !== project)
                 throw new RecipeError("The open project changed. Preview the intended project again.", 409);
+            // An identity that changed during the awaits above undoes what they proved.
+            if (identities.generation() !== decidedOn)
+                throw new RecipeError("A project folder changed while this was being checked. Try again.", 409);
             const revision = who.via === "cookie" ? who.session.projectRevision : 0;
             if (step === "prepare") {
                 const id = body.get("recipe") ?? "", version = body.get("recipeRevision") ?? "";

package/dist/server/guards.d.ts

@@ -1,3 +1,4 @@
+import { type ProjectIdentities } from "../project-identity.js";
 import { type FormFieldOf, type FormView } from "../contracts/console-api.js";
 import type { TaskFamily } from "../store.js";
 import { type IncomingMessage, type ServerResponse } from "node:http";
@@ -13,8 +14,11 @@ export interface GuardsRuntime {
     liveCeiling: () => {
         repos: string[];
         roots: readonly string[];
+        canon?: (path: string) => string | null;
     };
     codingProjects: () => string[];
+    /** Project identities read without touching folders (project-identity.ts); absent: the synchronous reads. */
+    identities?: ProjectIdentities;
     unscopedMode: boolean;
     managedRepos: () => string[];
     ceiling: import("../project.js").ProjectCeiling;

package/dist/server/guards.js

@@ -1,3 +1,4 @@
+import { syncProjectIdentities } from "../project-identity.js";
 import { OWNER_ACTIONS, sharedActionPayload } from '../chat-actions.js';
 import { CONSOLE_FORMS, readForm } from "../contracts/console-api.js";
 import { timingSafeEqual } from "node:crypto";
@@ -14,6 +15,7 @@ import { refuse } from "./chrome.js";
 import { matchTaskPath } from "./http.js";
 import { PersistentSessions, SESSION_COOKIE, sessionWithinLifetime } from "./session.js";
 export function createSharedGuards(runtime) {
+    const syncIdentities = syncProjectIdentities();
     // v99: wrong passwords. One address guessing across names runs out of tries here; each name
     // locks on its own (sign-in-guard.ts), and every lock, whatever road it came by, is kept.
     /**
@@ -130,8 +132,9 @@ export function createSharedGuards(runtime) {
             return fallback();
         if (Array.isArray(header))
             return undefined;
-        const canonical = canonicalProject(header);
-        if (canonical === null || !visible(canonical))
+        // A request's path, never resolved on this thread (project-identity.ts): a known identity or exactly a saved one.
+        const canonical = identities().vouched(header, savedIdentities);
+        if (canonical === undefined || !visible(canonical))
             return undefined;
         return canonical;
     }
@@ -152,7 +155,8 @@ export function createSharedGuards(runtime) {
             case 'form-path': {
                 const path = body?.get('path')?.trim() ?? '';
                 // Invalid/missing paths keep the opener's existing 400 response and recoverable form.
-                return path === '' ? null : canonicalProject(path);
+                // Never resolved here: an unknown path passes on to the opener, which resolves it off the thread and checks again.
+                return path === '' ? null : identities().vouched(path, savedIdentities) ?? null;
             }
             case 'task': {
                 const task = matchTaskPath(url.pathname, '(?:/[a-z-]+)?$');
@@ -370,5 +374,10 @@ export function createSharedGuards(runtime) {
     function runVisible(run) {
         return visible(taskRepoOf(run.taskRef));
     }
+    // Defined last, so the reviewed functions above keep their places (password-freshness.test.ts).
+    /** Project identities read without touching a folder (project-identity.ts); absent: the synchronous reads. */
+    function identities() { return runtime.identities ?? syncIdentities; }
+    /** The projects `up` proved and admitted (each its own identity): what a request may name without a read. */
+    function savedIdentities() { return runtime.managedRepos(); }
     return { authenticateApprover, authenticateCredential, authorizeMutation, projectOf, resolveRouteProject, projectRequestAllowed, identify, lookupSession, restricted, visible, admissionList, codingActorAllowed, codingProjectAllowed, workAccess, familyOf, taskRepoOf, runVisible };
 }

package/dist/server/http.d.ts

@@ -17,6 +17,9 @@ import { type Store } from "../store.js";
 import { type SubscriptionLeadRunner } from "../subscription-chat.js";
 import { type launchRuntimeUpdate } from "../toolroll-update.js";
 import { type IncomingMessage, type ServerResponse } from "node:http";
+import { type FolderLookRunner } from "../folder-look.js";
+import { type ProjectIdentities } from "../project-identity.js";
+import { type LearningRunner } from "../learning-look.js";
 export type ServeOptions = {
     /** Tests: runs a person's command for the HTTP MCP gateway instead of operate.ts's. */
     runOperateAs?: import("../mcp-person.js").RunOperateAs;
@@ -172,6 +175,14 @@ export type ServeOptions = {
      * how often they run and ask this computer's agents again. */
     backgroundChecks?: boolean;
     backgroundChecksMs?: number;
+    /** Tests: how a person's folders are read off the console's thread (folder-look.ts), and how long a read may take. */
+    folderLook?: FolderLookRunner;
+    folderLookMs?: number;
+    /** Project identities resolved off the console's thread (project-identity.ts); `up` and `serve` pass them. Absent:
+     * the old synchronous reads (embedders and tests). */
+    identities?: ProjectIdentities;
+    /** Tests: how the background pass runs one project's learning recovery in a process of its own. */
+    learningRunner?: LearningRunner;
     connectionHome?: string;
     /** Test seam for Chat's first tasks: the `gh` and `git grep` reads. */
     firstTaskRunner?: typeof execRun;
@@ -215,6 +226,7 @@ export declare function matchTaskPath(pathname: string, suffixPattern: string):
     verb: string;
 } | null;
 export declare function taskHref(taskId: string): string;
+export declare function runHref(runId: number): string;
 export declare const SAFETY: {
     readonly "Content-Security-Policy": "default-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; worker-src 'self'; img-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'";
     readonly "X-Content-Type-Options": "nosniff";

package/dist/server/http.js

@@ -19,6 +19,9 @@ import {} from "../toolroll-update.js";
 import { timingSafeEqual } from "node:crypto";
 import {} from "node:http";
 import { SIGN_IN_LINK_PATH } from "./session.js";
+import {} from "../folder-look.js";
+import {} from "../project-identity.js";
+import {} from "../learning-look.js";
 // A note is at most NOTE_BYTE_CAP (16,000) UTF-8 bytes, which URL encoding
 // can triple: room for one whole, before canonical text validation.
 export const BODY_CAP = 64 * 1024;
@@ -48,6 +51,9 @@ export function matchTaskPath(pathname, suffixPattern) {
 export function taskHref(taskId) {
     return `/t/${encodeURIComponent(taskId)}`;
 }
+export function runHref(runId) {
+    return `/r/${Math.trunc(runId)}`;
+}
 // ---- rendering -------------------------------------------------------------
 export const SAFETY = {
     "Content-Security-Policy": "default-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; worker-src 'self'; img-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'",
@@ -61,10 +67,13 @@ export function respond(response, status, type, body) {
     // writeHead's headers would otherwise win.
     const own = response.getHeader("content-security-policy");
     const cache = response.getHeader("cache-control");
+    // The first-account form's page sends `same-origin` so its own post names this console (signup-gate.ts).
+    const referrer = response.getHeader("referrer-policy");
     response.writeHead(status, {
         ...SAFETY,
         ...(own === undefined ? {} : { "content-security-policy": own }),
         ...(cache === undefined ? {} : { "Cache-Control": cache }),
+        ...(referrer === "same-origin" ? { "Referrer-Policy": "same-origin" } : {}),
         "Content-Type": type,
     });
     response.end(isHtml(body) ? htmlString(body) : body);