toolroll 0.9.87 → 0.9.89

package/dist/chat-channel.js

@@ -12,11 +12,21 @@ import { canonicalProject } from "./project.js";
 import { phoneText, projectLabel } from "./telegram-status.js";
 import { CHAT_CONTROLS, chatControlHref, isChatControl, } from "./chat-controls.js";
 import { CHAT_TASK_ACTIONS, isChatTaskAction } from "./chat-task-actions.js";
+import { FolderUnavailable } from "./folder-gate.js";
 export function channelRepos(store, approver, registry) {
     const seen = new Set();
     const repos = [];
     for (const path of registry) {
-        const canonical = canonicalProject(path) ?? path;
+        let canonical;
+        // A folder the console's gate holds back (folder-gate.ts) is left out, never matched by its spelling.
+        try {
+            canonical = canonicalProject(path) ?? path;
+        }
+        catch (error) {
+            if (error instanceof FolderUnavailable)
+                continue;
+            throw error;
+        }
         if (seen.has(canonical) || !store.accountCanAccess(approver, canonical))
             continue;
         seen.add(canonical);

package/dist/design/kit.css

@@ -87,26 +87,32 @@
 .k-tabs > [aria-selected="true"], .k-tabs > [aria-current] { color: var(--so-ink); border-bottom-color: var(--so-ink); }
 .k-tabs .k-count { margin-left: 2px; }
 
-/* ---------- Fields ---------- */
+/* ---------- Fields: one family (KIT.md "Fields") ----------
+   Every text field, select and secondary text box is one filled surface (--so-field), no outline, radius 12px; the
+   label above names it, the hint and the error sit below it, focus draws the 2px ink ring. A transparent 1px border
+   keeps the box's edge in forced colours. Textareas grow with their words (field-sizing), no resize grip. */
 .k-field { display: grid; gap: 6px; margin: 0; min-width: 0; }
-.k-label { display: block; margin: 0; font: var(--so-typography-caption); color: var(--so-ink); }
+.k-label { display: block; margin: 0; font: 500 12.5px/1.35 var(--so-font-sans); color: var(--so-muted); }
 .k-hint { margin: 0; font-size: 12px; color: var(--so-muted); line-height: 1.45; }
-.k-input.k-input, .k-textarea.k-textarea { box-sizing: border-box; width: 100%; margin: 0; border: 1px solid var(--so-field-line); border-radius: 8px; background: var(--so-paper); color: var(--so-ink); font: 400 13px/1.4 var(--so-font-sans); box-shadow: none; }
-.k-input.k-input { height: 32px; min-height: 0; padding: 0 10px; }
-.k-textarea.k-textarea { min-height: 72px; padding: 8px 10px; resize: vertical; max-width: 640px; }
-.k-input:focus-visible, .k-textarea:focus-visible { outline: 2px solid var(--so-ring); outline-offset: 1px; box-shadow: none; }
+.k-input.k-input, .k-textarea.k-textarea, .k-sel.k-sel { box-sizing: border-box; width: 100%; margin: 0; border: 1px solid transparent; border-radius: 12px; background: var(--so-field); color: var(--so-ink); font: 400 13.5px/1.4 var(--so-font-sans); box-shadow: none; transition: background-color var(--m-quick) var(--m-ease); }
+.k-input.k-input { height: 36px; min-height: 0; padding: 0 12px; }
+.k-textarea.k-textarea { min-height: 76px; max-height: 360px; padding: 10px 12px; resize: none; field-sizing: content; overflow-y: auto; max-width: 640px; line-height: 1.5; }
+.k-input::placeholder, .k-textarea::placeholder { color: var(--so-muted); opacity: 1; }
+.k-input:focus-visible, .k-textarea:focus-visible, .k-sel:focus-visible { outline: 2px solid var(--so-ring); outline-offset: 1px; box-shadow: none; }
 .k-input[aria-invalid="true"], .k-textarea[aria-invalid="true"], .k-sel[aria-invalid="true"] { border-color: var(--so-danger); }
+.k-input:disabled, .k-textarea:disabled, .k-sel:disabled { color: var(--so-muted); cursor: default; }
 .k-err { display: block; margin: 0; font-size: 12px; color: var(--so-fail-ink); line-height: 1.45; }
 .k-err:empty { display: none; }
-/* A native select with the chevron: 32px (sm 28px in a toolbar). */
+/* A native select in the same family, with the chevron: 36px (sm 28px in a toolbar). */
 .k-selw { position: relative; display: inline-block; min-width: 0; max-width: 100%; }
-.k-selw::after { content: ""; position: absolute; right: 12px; top: 50%; margin-top: -5px; width: 6px; height: 6px; border: solid var(--so-muted); border-width: 0 1.5px 1.5px 0; transform: rotate(45deg); pointer-events: none; }
-.k-sel.k-sel { appearance: none; -webkit-appearance: none; box-sizing: border-box; width: 100%; height: 32px; min-height: 0; margin: 0; padding: 0 30px 0 10px; border: 1px solid var(--so-field-line); border-radius: 8px; background: var(--so-paper); color: var(--so-ink); font: 400 13px/1 var(--so-font-sans); text-overflow: ellipsis; cursor: pointer; box-shadow: none; }
-.k-sel:focus-visible { outline: 2px solid var(--so-ring); outline-offset: 1px; }
-.k-sel:disabled { color: var(--so-muted); cursor: default; }
-.k-selw.sm .k-sel { height: 28px; font: 500 12.5px/1 var(--so-font-sans); padding: 0 26px 0 9px; }
-.k-selw.sm::after { right: 10px; }
+.k-selw::after { content: ""; position: absolute; right: 13px; top: 50%; margin-top: -5px; width: 6px; height: 6px; border: solid var(--so-muted); border-width: 0 1.5px 1.5px 0; transform: rotate(45deg); pointer-events: none; }
+.k-sel.k-sel { appearance: none; -webkit-appearance: none; height: 36px; min-height: 0; padding: 0 32px 0 12px; line-height: 1; text-overflow: ellipsis; cursor: pointer; }
+.k-selw.sm .k-sel { height: 28px; border-radius: 999px; font: 500 12.5px/1 var(--so-font-sans); padding: 0 26px 0 11px; }
+.k-selw.sm::after { right: 11px; }
 .k-selw.wide { display: block; width: 100%; }
+/* A select drawn as a pill chip (a composer's project): filled, no box, works without script. */
+.k-selw-chip::after { right: 12px; }
+.k-selw-chip .k-sel.k-sel { height: 36px; border-radius: 999px; padding: 0 30px 0 14px; background: var(--so-composer-control); font: 500 13.5px/1 var(--so-font-sans); }
 /* Switch: a button[role=switch] that says its state, or a checkbox[role=switch] for a form. */
 .k-switch { position: relative; display: inline-flex; align-items: center; gap: 8px; min-height: 28px; margin: 0; padding: 0; border: 0; background: transparent; font: 500 12.5px/1 var(--so-font-sans); color: var(--so-muted); cursor: pointer; box-shadow: none; }
 .k-trk { position: relative; width: 32px; height: 18px; border-radius: 9px; border: 1px solid var(--so-field-line); background: var(--so-paper); transition: background-color var(--m-quick) var(--m-ease), border-color var(--m-quick) var(--m-ease); flex: none; box-sizing: border-box; }
@@ -314,25 +320,49 @@
 .k-swap-in { animation: k-swap var(--m-base) var(--m-ease) both; }
 @keyframes k-swap { from { opacity: 0; transform: translateY(4px); } }
 
-/* ---------- Composer: one soft rounded box; the textarea grows 1 → 8 lines; one bottom row inside ---------- */
-.k-composer { --c-r: 22px; box-sizing: border-box; border: 1px solid var(--so-field-line); border-radius: var(--c-r); background: var(--so-paper); display: grid; padding: 4px 6px 6px; outline: 3px solid transparent; outline-offset: 0; transition: border-color var(--m-quick) var(--m-ease), outline-color var(--m-quick) var(--m-ease); }
-.k-composer:focus-within { border-color: var(--so-ink); outline-color: color-mix(in srgb, var(--so-ink) 10%, transparent); }
-.k-composer.off { border-color: var(--so-line); background: var(--so-raised); }
-.k-composer-ta.k-composer-ta { box-sizing: border-box; width: 100%; min-height: 40px; margin: 0; padding: 10px 10px 6px; border: 0; border-radius: 0; outline: none; resize: none; background: transparent; box-shadow: none; color: var(--so-ink); font: var(--so-typography-body-reading); line-height: 1.5; overflow-y: hidden; scrollbar-width: thin; }
-.k-composer-ta::placeholder { color: var(--so-muted); }
+/* ---------- Composer: one filled rounded object (KIT.md "Composer"); the textarea grows 1 → 8 lines; one bottom row
+   of filled circles and pills inside; its note and refusal sit under it, outside the box ---------- */
+.k-composer-field { display: grid; gap: 6px; min-width: 0; }
+.k-composer { --c-r: 28px; box-sizing: border-box; border: 1px solid transparent; border-radius: var(--c-r); background: var(--so-composer); display: grid; padding: 8px 10px 10px; transition: border-color var(--m-quick) var(--m-ease), background-color var(--m-quick) var(--m-ease); }
+/* Focus: the fill lifts a step (a tap's cue is that and the caret); keyboard focus also draws the 2px ink ring, 3:1 or
+   better in both themes (html.k-kbd from the kit behaviour; without script the ring always shows). The textarea draws
+   no ring of its own. */
+.k-composer { outline: 2px solid transparent; outline-offset: 2px; }
+.k-composer:focus-within { background: color-mix(in srgb, var(--so-composer) 97%, var(--so-ink)); }
+html:not(.k-js) .k-composer:focus-within, html.k-kbd .k-composer:focus-within { outline-color: var(--so-ring); }
+.k-composer.off { background: var(--so-raised); color: var(--so-muted); }
+.k-composer-ta.k-composer-ta { box-sizing: border-box; width: 100%; min-height: 44px; margin: 0; padding: 10px 10px 8px; border: 0; border-radius: 0; outline: none; resize: none; background: transparent; box-shadow: none; color: var(--so-ink); font: 400 17px/1.5 var(--so-font-sans); letter-spacing: -0.005em; overflow-y: hidden; scrollbar-width: thin; }
+.k-composer-ta::placeholder { color: var(--so-muted); opacity: 1; }
 .k-composer-ta:focus, .k-composer-ta:focus-visible { outline: none; box-shadow: none; }
-.k-composer:has(.k-composer-ta[aria-invalid="true"]) { border-color: var(--so-danger); outline-color: transparent; }
+.k-composer:has(.k-composer-ta[aria-invalid="true"]) { border-color: var(--so-danger); }
 .k-composer + .k-err { margin-top: 6px; }
-.k-composer-bar { display: flex; align-items: center; gap: 6px; padding: 2px 0 0 2px; flex-wrap: wrap; min-height: 36px; }
-.k-composer-plus { box-sizing: border-box; width: 32px; height: 32px; min-height: 0; margin: 0; padding: 0; border-radius: 50%; display: grid; place-items: center; color: var(--so-muted); border: 1px solid var(--so-line); background: transparent; cursor: pointer; box-shadow: none; transition: background-color var(--m-quick) var(--m-ease), color var(--m-quick) var(--m-ease); }
-.k-composer-chip { box-sizing: border-box; height: 32px; min-height: 0; margin: 0; display: inline-flex; align-items: center; gap: 4px; padding: 0 8px 0 10px; border: 0; border-radius: 999px; font: 500 12.5px/1 var(--so-font-sans); color: var(--so-muted); background: transparent; cursor: pointer; box-shadow: none; transition: background-color var(--m-quick) var(--m-ease), color var(--m-quick) var(--m-ease); }
+.k-composer-bar { display: flex; align-items: center; gap: 8px; padding: 4px 0 0; flex-wrap: wrap; min-height: 40px; }
+.k-composer-plus { box-sizing: border-box; width: 36px; height: 36px; min-height: 0; margin: 0; padding: 0; border-radius: 50%; display: grid; place-items: center; flex: none; color: var(--so-ink); border: 0; background: var(--so-composer-control); cursor: pointer; box-shadow: none; transition: background-color var(--m-quick) var(--m-ease), color var(--m-quick) var(--m-ease); }
+.k-composer-plus .k-i { width: 18px; height: 18px; }
+/* A pill chip: the primary word, then a dimmer secondary word (a project, then the agent). */
+.k-composer-chip { box-sizing: border-box; height: 36px; min-height: 0; max-width: 100%; margin: 0; display: inline-flex; align-items: center; gap: 6px; padding: 0 14px; border: 0; border-radius: 999px; font: 500 13.5px/1 var(--so-font-sans); color: var(--so-ink); background: var(--so-composer-control); cursor: pointer; box-shadow: none; transition: background-color var(--m-quick) var(--m-ease), color var(--m-quick) var(--m-ease); }
+.k-composer-chip > span { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.k-composer-chip .k-chip-sub { color: var(--so-muted); font-weight: 400; }
 .k-composer-plus:disabled, .k-composer-chip:disabled { opacity: .5; pointer-events: none; }
-/* The round send: ink with text, muted until then; Stop takes its place while the work runs. */
-.k-send-slot { position: relative; display: inline-grid; width: 34px; height: 34px; flex: none; }
-.k-send-slot .k-send { grid-area: 1 / 1; position: relative; box-sizing: border-box; width: 34px; height: 34px; min-height: 0; margin: 0; padding: 0; border-radius: 50%; display: grid; place-items: center; background: var(--so-ink); color: var(--so-paper); border: 0; cursor: pointer; box-shadow: none; transition: background-color var(--m-quick) var(--m-ease), color var(--m-quick) var(--m-ease), transform var(--m-base) var(--m-ease); }
-.k-send::before { content: ""; position: absolute; inset: -5px; }
-.k-send .k-i { width: 17px; height: 17px; stroke-width: 2.2; }
-.k-send[aria-disabled="true"], .k-composer:not(.has-text) .k-send:not(.k-stop) { background: var(--so-raised); color: var(--so-muted); }
+/* A small act inside the bar (Pause and send) is a filled pill like the chips, never an outlined box in the box. */
+.k-composer-bar .k-btn:not(.k-send) { border-color: transparent; border-radius: 999px; background: var(--so-composer-control); }
+.k-composer-plus:focus-visible, .k-composer-chip:focus-visible { outline: 2px solid var(--so-ring); outline-offset: 2px; }
+/* A toggle chip (an on/off choice inside the box, as Read code before planning): a filled pill whose mark fills when
+   on; the checkbox inside is the control (role=switch), so it works without script. */
+.k-tchip { position: relative; box-sizing: border-box; height: 36px; margin: 0; display: inline-flex; align-items: center; gap: 8px; padding: 0 14px 0 12px; border-radius: 999px; background: var(--so-composer-control); color: var(--so-muted); font: 500 13.5px/1 var(--so-font-sans); cursor: pointer; transition: color var(--m-quick) var(--m-ease); }
+.k-tchip > input { position: absolute; inset: 0; width: 100%; height: 100%; margin: 0; opacity: 0; cursor: pointer; z-index: 1; }
+.k-tchip-mark { box-sizing: border-box; width: 14px; height: 14px; border-radius: 50%; border: 1.5px solid currentColor; flex: none; display: grid; place-items: center; transition: background-color var(--m-quick) var(--m-ease), border-color var(--m-quick) var(--m-ease); }
+.k-tchip:has(input:checked) { color: var(--so-ink); }
+.k-tchip:has(input:checked) .k-tchip-mark { background: var(--so-ink); border-color: var(--so-ink); }
+.k-tchip:has(input:checked) .k-tchip-mark::after { content: ""; width: 3px; height: 6px; margin-top: -2px; border: solid var(--so-paper); border-width: 0 1.5px 1.5px 0; transform: rotate(45deg); }
+.k-tchip:has(input:focus-visible) { outline: 2px solid var(--so-ring); outline-offset: 2px; }
+/* The round send: solid ink with a paper arrow once there are words, the muted control fill until then; Stop takes
+   its place while the work runs. */
+.k-send-slot { position: relative; display: inline-grid; width: 36px; height: 36px; flex: none; }
+.k-send-slot .k-send { grid-area: 1 / 1; position: relative; box-sizing: border-box; width: 36px; height: 36px; min-height: 0; margin: 0; padding: 0; border-radius: 50%; display: grid; place-items: center; background: var(--so-ink); color: var(--so-paper); border: 0; cursor: pointer; box-shadow: none; transition: background-color var(--m-quick) var(--m-ease), color var(--m-quick) var(--m-ease), transform var(--m-base) var(--m-ease); }
+.k-send::before { content: ""; position: absolute; inset: -4px; }
+.k-send .k-i { width: 18px; height: 18px; stroke-width: 2.2; }
+.k-send[aria-disabled="true"], .k-composer:not(.has-text) .k-send:not(.k-stop) { background: var(--so-composer-control); color: var(--so-muted); }
 .k-send[aria-disabled="true"] { cursor: default; }
 .k-send:not([aria-disabled="true"]):active { transform: scale(.94); }
 .k-stop { visibility: hidden; }
@@ -344,17 +374,18 @@
 .k-send:focus-visible { outline: 2px solid var(--so-ring); outline-offset: 2px; }
 .k-composer-files { display: flex; flex-wrap: wrap; gap: 6px; padding: 0 8px; }
 .k-composer-files:empty { display: none; }
-.k-composer-file { display: inline-flex; align-items: center; gap: 6px; height: 28px; margin-top: 6px; padding: 0 4px 0 10px; border: 1px solid var(--so-line); border-radius: 999px; font-size: 12px; }
+.k-composer-file { display: inline-flex; align-items: center; gap: 6px; height: 28px; margin-top: 6px; padding: 0 4px 0 12px; border: 0; border-radius: 999px; background: var(--so-composer-control); font-size: 12px; }
 .k-composer-file button { width: 22px; height: 22px; min-height: 0; margin: 0; padding: 0; display: grid; place-items: center; border: 0; border-radius: 50%; background: transparent; color: var(--so-muted); }
-.k-composer-note { padding: 2px 10px 6px; }
-.k-composer-err { padding: 2px 10px 6px; }
+/* Under the box, in small dim words: its note, then its refusal. */
+.k-composer-note.k-composer-note { margin: 0; padding: 0 16px; font-size: 12px; color: var(--so-muted); line-height: 1.45; }
+.k-composer-err { padding: 0 16px; }
 .k-composer-err:empty { display: none; }
 /* One line: the text and the send share a row. */
-.k-composer.line { grid-template-columns: minmax(0, 1fr) auto; align-items: end; padding: 4px 6px 4px 8px; }
-.k-composer.line .k-composer-ta { padding: 8px 6px; min-height: 36px; }
-.k-composer.line .k-composer-bar { padding: 0 0 1px; min-height: 0; }
+.k-composer.line { --c-r: 26px; grid-template-columns: minmax(0, 1fr) auto; align-items: end; padding: 5px 6px 5px 10px; }
+.k-composer.line .k-composer-ta { padding: 9px 6px; min-height: 42px; font-size: 16px; }
+.k-composer.line .k-composer-bar { padding: 0 0 3px; min-height: 0; }
 .k-composer.line .k-composer-bar .k-grow { display: none; }
-.k-composer.line .k-composer-files, .k-composer.line .k-composer-err, .k-composer.line .k-composer-note { grid-column: 1 / -1; }
+.k-composer.line .k-composer-files { grid-column: 1 / -1; }
 /* A composer docked to the bottom rides above the phone keyboard (kit behaviour sets html.kb-open and --kb). */
 .k-composer-dock { position: sticky; bottom: 0; z-index: 4; padding: 12px 24px 14px; background: var(--so-paper); border-top: 1px solid var(--so-line); }
 
@@ -425,8 +456,10 @@
   .k-card:hover { background: color-mix(in srgb, var(--so-raised) 60%, transparent); }
   .k-backlink:hover { color: var(--so-ink); }
   .k-menu > button:hover, .k-menu > a:hover { background: var(--so-soft); }
-  .k-composer-plus:hover { background: var(--so-raised); color: var(--so-ink); }
-  .k-composer-chip:hover { background: var(--so-raised); color: var(--so-ink); }
+  .k-composer-plus:hover, .k-composer-chip:hover, .k-tchip:hover { background: color-mix(in srgb, var(--so-composer-control) 88%, var(--so-ink)); }
+  .k-dock-needs:hover { background: color-mix(in srgb, var(--so-composer-control) 88%, var(--so-ink)); }
+  .k-input:hover, .k-textarea:hover, .k-sel:hover { background: color-mix(in srgb, var(--so-field) 94%, var(--so-ink)); }
+  .k-selw-chip .k-sel:hover { background: color-mix(in srgb, var(--so-composer-control) 88%, var(--so-ink)); }
   .k-nav:hover { background: var(--so-nav-hover); color: var(--so-ink); }
   .k-crumbs a:hover { color: var(--so-ink); }
 }
@@ -437,7 +470,7 @@
 /* ---------- Phone dock: the Needs-you button and the screen's one primary ---------- */
 .k-dock { display: none; }
 /* The Needs-you button (the app shell's dock): a dot, the words, the ink count, and which projects it covers. */
-.k-dock-needs { display: grid; align-content: center; gap: 1px; box-sizing: border-box; width: 136px; min-height: 48px; margin: 0; padding: 0 12px; border-radius: 8px; border: 1px solid var(--so-field-line); background: var(--so-paper); color: var(--so-ink); text-align: left; white-space: nowrap; cursor: pointer; box-shadow: none; }
+.k-dock-needs { display: grid; align-content: center; gap: 1px; box-sizing: border-box; width: 136px; min-height: 48px; margin: 0; padding: 0 14px; border-radius: 14px; border: 1px solid transparent; background: var(--so-composer-control); color: var(--so-ink); text-align: left; white-space: nowrap; cursor: pointer; box-shadow: none; }
 .k-dock-needs-l { display: inline-flex; align-items: center; gap: 7px; font: 500 14px/1.2 var(--so-font-sans); }
 .k-dock-needs-s { overflow: hidden; text-overflow: ellipsis; font-size: 11.5px; color: var(--so-muted); padding-left: 14px; }
 .k-dock-needs:focus-visible { outline: 2px solid var(--so-ring); outline-offset: 2px; }
@@ -509,16 +542,17 @@
   .k-frow .k-err { text-align: left; }
   .k-frow-c .k-seg { width: 100%; }
   .k-frow-c .k-seg > button { flex: 1; justify-content: center; }
-  .k-composer-ta.k-composer-ta { font-size: 16px; }
+  .k-composer-ta.k-composer-ta { font-size: 17px; }
   .k-composer-bar .k-btn-sm { height: 44px; }
-  /* Every composer control is a real 44px target; the circles stay drawn at 36px inside it. */
+  /* Every composer control is a real, filled 44px target. */
+  .k-composer { --c-r: 26px; padding: 6px 8px 8px; }
+  .k-composer-ta.k-composer-ta { padding: 10px 10px 6px; }
   .k-send-slot, .k-send-slot .k-send { width: 44px; height: 44px; }
-  .k-send-slot .k-send { background: radial-gradient(circle, var(--so-ink) 17.5px, transparent 18px); }
-  .k-send[aria-disabled="true"], .k-composer:not(.has-text) .k-send:not(.k-stop) { background: radial-gradient(circle, var(--so-raised) 17.5px, transparent 18px); }
   .k-send::before { content: none; }
-  .k-composer-plus { width: 44px; height: 44px; border: 0; background: radial-gradient(circle, transparent 15.5px, var(--so-line) 16px, var(--so-line) 16.5px, transparent 17px); }
-  .k-composer-chip { height: 44px; }
-  .k-composer-bar { gap: 2px; }
+  .k-composer-plus { width: 44px; height: 44px; }
+  .k-composer-chip, .k-tchip, .k-selw-chip .k-sel.k-sel { height: 44px; }
+  .k-selw-chip .k-sel.k-sel { font-size: 16px; }
+  .k-composer-bar { gap: 6px; }
   .k-composer-file button { width: 32px; height: 32px; }
   .k-composer-dock { padding: 12px 16px 16px; }
   html.kb-open .k-composer-dock { position: fixed; left: 0; right: 0; bottom: var(--kb, 0px); z-index: 13; }
@@ -535,6 +569,9 @@
   .k-dock { display: flex; gap: 8px; align-items: stretch; position: fixed; left: 0; right: 0; bottom: 0; z-index: 12; padding: 10px 12px calc(10px + env(safe-area-inset-bottom)); background: var(--so-paper); border-top: 1px solid var(--so-line); }
   .k-dock-primary { flex: 1; display: flex; }
   .k-dock-primary .k-btn { width: 100%; }
+  /* The dock is filled controls only: a secondary act there is a filled control, never an outlined box. */
+  .k-dock .k-btn-outline { border-color: transparent; background: var(--so-composer-control); }
+  .k-dock .k-btn { min-height: 48px; border-radius: 14px; }
 }
 @media (min-width: 761px) { .k-phone-only { display: none !important; } }
 
@@ -563,9 +600,9 @@ main:has(> .k-out) { max-width: none; margin: 0; padding: 0; }
 .k-refusal .k-empty-t::first-letter, .k-refusal .k-notice > span::first-letter { text-transform: uppercase; }
 
 /* A composer's note can follow its switch: k-on-note while it is on, k-off-note while it is off (no script). */
-.k-composer .k-off-note { display: none; }
-.k-composer:has(.k-switch-input):not(:has(.k-switch-input:checked)) .k-on-note { display: none; }
-.k-composer:has(.k-switch-input):not(:has(.k-switch-input:checked)) .k-off-note { display: inline; }
+.k-composer-field .k-off-note { display: none; }
+.k-composer-field:has(.k-switch-input):not(:has(.k-switch-input:checked)) .k-on-note { display: none; }
+.k-composer-field:has(.k-switch-input):not(:has(.k-switch-input:checked)) .k-off-note { display: inline; }
 
 /* The composer's focus is the box's (KIT.md): the workspace's own :focus-visible ring never lands on its textarea. */
 .k-composer .k-composer-ta.k-composer-ta:focus-visible { outline: none; box-shadow: none; }
@@ -614,7 +651,7 @@ main:has(> .k-out) { max-width: none; margin: 0; padding: 0; }
 
 /* ---------- Reduced motion changes presentation only ---------- */
 @media (prefers-reduced-motion: reduce) {
-  .k-btn, .k-send, .k-composer, .k-composer-plus, .k-composer-chip, .k-trk, .k-trk::after, .k-tabs > *, .k-slots, .k-crow-bar { transition: none; }
+  .k-btn, .k-send, .k-composer, .k-composer-plus, .k-composer-chip, .k-tchip, .k-tchip-mark, .k-input, .k-textarea, .k-sel, .k-trk, .k-trk::after, .k-tabs > *, .k-slots, .k-crow-bar { transition: none; }
   .k-steps-fill { transition: none; }
   .k-grow-in, .k-msg-in, .k-swap-in, .k-scrim, .k-btn.swap .k-face, .k-check-draw path, .k-composer .k-i { animation: none !important; }
   .k-check-draw path { stroke-dashoffset: 0; }

package/dist/design/tokens.css

@@ -8,10 +8,16 @@
   --so-attention: var(--so-signal);
   --so-attention-soft: var(--so-signal-soft);
   --so-code-bg: #fafafa;
+  /* Composer: the filled surface of the message box, one step off the page. */
+  --so-composer: #f2f2f2;
+  /* Composer Control: the filled circle and pill chips inside the composer (+, project, toggle chips) and the empty send. */
+  --so-composer-control: #dcdcdc;
   /* Vermilion: failure and irreversible acts. */
   --so-danger: #c4320a;
   --so-danger-soft: #feebe7;
   --so-ease-out: cubic-bezier(0.23, 1, 0.32, 1);
+  /* Field: the filled surface of a text field, select or secondary text box (the field family: no outline; the label names it, focus draws the ink ring). */
+  --so-field: #ececec;
   /* Field Line: the boundary that identifies a control (fields, outline buttons, switches, radio cards), 3:1 or better on paper. */
   --so-field-line: #8f8f8f;
   --so-font-mono: "Geist Mono", ui-monospace, "SF Mono", "SFMono-Regular", "Menlo", "Consolas", monospace;
@@ -162,8 +168,11 @@
     --so-accent-hover: #ffffff;
     --so-accent-text: #ededed;
     --so-code-bg: #111111;
+    --so-composer: #242424;
+    --so-composer-control: #333333;
     --so-danger: #ff977d;
     --so-danger-soft: rgb(255 151 125 / .12);
+    --so-field: #232323;
     --so-field-line: #6b6b6b;
     --so-ground: #0b0b0b;
     --so-info: #70b8ff;
@@ -210,8 +219,11 @@
   --so-accent-hover: #ffffff;
   --so-accent-text: #ededed;
   --so-code-bg: #111111;
+  --so-composer: #242424;
+  --so-composer-control: #333333;
   --so-danger: #ff977d;
   --so-danger-soft: rgb(255 151 125 / .12);
+  --so-field: #232323;
   --so-field-line: #6b6b6b;
   --so-ground: #0b0b0b;
   --so-info: #70b8ff;

package/dist/egress.js

@@ -18,6 +18,7 @@ import { readdirSync } from "node:fs";
 import { basename, join } from "node:path";
 import { connectFirst, isPublicAddress } from "./scout-net.js";
 import { lookup as dnsLookup } from "node:dns/promises";
+import { folderAnswers } from "./folder-gate.js";
 /** The policy's shape version: a worker enforces the versions it knows and refuses any other. */
 export const NETWORK_POLICY_VERSION = 1;
 export const PROJECT_NETWORK_DEFAULT = { mode: "allowlist", hosts: [], loopback: "proxy-only" };
@@ -114,6 +115,10 @@ const WALK_SKIP = new Set(["node_modules", "vendor", "target", "dist", "build",
  * project's own hosts only.
  */
 export function repositoryEcosystems(repo) {
+    // In the console, a folder that hasn't answered a look lately is not walked on its thread (folder-gate.ts): it names
+    // none, as an unreadable folder does.
+    if (!folderAnswers(repo))
+        return [];
     const paths = [];
     const walk = (folder, depth) => {
         let entries;

package/dist/flow-starters.js

@@ -10,6 +10,7 @@ import { flowDefinitionOf } from "./flow-engine.js";
 import { addFlowTriggerTo, githubRepoOf } from "./flow-triggers.js";
 import { flowFromSteps, ISSUE_LABEL } from "./flows.js";
 import { publishingOf } from "./pull-request-flow.js";
+import { folderAnswers } from "./folder-gate.js";
 export const STARTER_IDS = ["ci-fix", "issue-task", "overnight", "plane-review"];
 export const STARTER_FLOWS = [
     {
@@ -87,6 +88,8 @@ export function planeReviewSteps(own) {
 }
 /** Whether a project is Toolroll's own source. */
 export function isToolrollRepo(repo) {
+    if (!folderAnswers(repo))
+        return false;
     try {
         return JSON.parse(readFileSync(join(repo, "package.json"), "utf8")).name === "toolroll";
     }

package/dist/flow-triggers.js

@@ -52,6 +52,7 @@ import { envValue } from "./names.js";
 import { recordBranchCheckRun, unprovenNoticeRuns } from "./tidy.js";
 import { linearLabelNames, readFormSubmission, readGithubEvent, readGithubIssue, readGithubIssueEventList, readGithubIssueList, readGithubRun, readGithubRunList, readInboundMail, readLinearAnswer, readLinearEvent, readLinearIssue, readWebhookPayload } from "./contracts/trigger-payloads.js";
 import { isRecord } from "./is-record.js";
+import { folderAnswers } from "./folder-gate.js";
 export { FLOW_TRIGGER_KINDS };
 export const CHAT_APP_NAMES = { slack: "Slack", discord: "Discord", teams: "Teams", telegram: "Telegram" };
 /** What each kind is called on the canvas. */
@@ -124,6 +125,9 @@ export function scheduleFromWords(text) {
 }
 /** A GitHub repository as owner/name, read from a project's origin remote when it is on GitHub. */
 export function githubRepoOf(path) {
+    // In the console, a folder that hasn't answered a look lately is not read on its thread (folder-gate.ts).
+    if (!folderAnswers(path))
+        return null;
     try {
         const dot = join(path, ".git");
         const config = statSync(dot).isDirectory() ? readFileSync(join(dot, "config"), "utf8") : null;

package/dist/folder-gate.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Whether the console may read a folder synchronously right now.
+ *
+ * The console answers every page on one thread, so one synchronous read of a folder that has stopped answering (a
+ * drive that hangs, a folder macOS holds in iCloud) freezes the console with it: it listens and answers nothing, not
+ * even /healthz (the 0.9.82 and 0.9.87 deploys). So the console's own work (its request handling and its background
+ * pass, serve.ts) runs inside a folder scope: there, a synchronous read of a person's folder goes ahead only when that
+ * folder answered an off-thread look lately (project-identity.ts `answering`), or it lies in the console's own data.
+ * Otherwise the read isn't made and its caller refuses, says the folder is unavailable, or throws FolderUnavailable.
+ *
+ * Availability never decides authorization: a held-back canonicalization throws FolderUnavailable (project.ts), never
+ * answers null, so no caller falls back to a path's spelling because a folder didn't answer.
+ *
+ * Work outside a console scope (the worker, even in the same process as the console; `up`; the CLI) reads as it
+ * always did.
+ */
+/** One console's answer for a resolved path. `pointer`: the path came from a file a build can write (a checkout's
+ * `.git` or `commondir`), so the console's own folders (build checkouts among them) don't vouch for it by spelling. */
+export type FolderGate = (path: string, pointer: boolean) => boolean;
+/** What a caller says, and throws, when the gate holds a read back. */
+export declare const FOLDER_DIDNT_ANSWER = "the folder didn't answer";
+/** A synchronous read the console's folder gate held back: the folder is unavailable now, which is never a "no". */
+export declare class FolderUnavailable extends Error {
+    readonly path: string;
+    constructor(path: string);
+}
+/** Runs `work` (and everything it starts) inside the console's folder scope. */
+export declare function inFolderScope<T>(gate: FolderGate, work: () => T): T;
+/** Whether a synchronous read of `path` may happen now. Outside a console's folder scope: always. */
+export declare function folderAnswers(path: string, pointer?: boolean): boolean;
+/** `path` is `folder` or inside it (both resolved). */
+export declare function insideFolder(path: string, folder: string): boolean;

package/dist/folder-gate.js

@@ -0,0 +1,43 @@
+/**
+ * Whether the console may read a folder synchronously right now.
+ *
+ * The console answers every page on one thread, so one synchronous read of a folder that has stopped answering (a
+ * drive that hangs, a folder macOS holds in iCloud) freezes the console with it: it listens and answers nothing, not
+ * even /healthz (the 0.9.82 and 0.9.87 deploys). So the console's own work (its request handling and its background
+ * pass, serve.ts) runs inside a folder scope: there, a synchronous read of a person's folder goes ahead only when that
+ * folder answered an off-thread look lately (project-identity.ts `answering`), or it lies in the console's own data.
+ * Otherwise the read isn't made and its caller refuses, says the folder is unavailable, or throws FolderUnavailable.
+ *
+ * Availability never decides authorization: a held-back canonicalization throws FolderUnavailable (project.ts), never
+ * answers null, so no caller falls back to a path's spelling because a folder didn't answer.
+ *
+ * Work outside a console scope (the worker, even in the same process as the console; `up`; the CLI) reads as it
+ * always did.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+import { resolve, sep } from "node:path";
+const scope = new AsyncLocalStorage();
+/** What a caller says, and throws, when the gate holds a read back. */
+export const FOLDER_DIDNT_ANSWER = "the folder didn't answer";
+/** A synchronous read the console's folder gate held back: the folder is unavailable now, which is never a "no". */
+export class FolderUnavailable extends Error {
+    path;
+    constructor(path) {
+        super(FOLDER_DIDNT_ANSWER);
+        this.path = path;
+        this.name = "FolderUnavailable";
+    }
+}
+/** Runs `work` (and everything it starts) inside the console's folder scope. */
+export function inFolderScope(gate, work) {
+    return scope.run(gate, work);
+}
+/** Whether a synchronous read of `path` may happen now. Outside a console's folder scope: always. */
+export function folderAnswers(path, pointer = false) {
+    const gate = scope.getStore();
+    return gate === undefined || gate(resolve(path), pointer);
+}
+/** `path` is `folder` or inside it (both resolved). */
+export function insideFolder(path, folder) {
+    return path === folder || path.startsWith(folder.endsWith(sep) ? folder : folder + sep);
+}

package/dist/project-access.js

@@ -1,6 +1,7 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 import { isAbsolute, resolve } from "node:path";
 import { canonicalProject } from "./project.js";
+import { FolderUnavailable } from "./folder-gate.js";
 export function normalizeProjectAccess(value) {
     if (value === null)
         return null;
@@ -26,7 +27,20 @@ export function readProjectAccess(value) {
     }
 }
 export function projectAccessAllows(access, repo) {
-    return access === null || (repo !== null && access.includes(canonicalProject(repo) ?? resolve(repo)));
+    if (access === null)
+        return true;
+    if (repo === null)
+        return false;
+    // A folder the console's gate holds back (folder-gate.ts) is unavailable: access to it is denied, never decided by
+    // its spelling.
+    try {
+        return access.includes(canonicalProject(repo) ?? resolve(repo));
+    }
+    catch (error) {
+        if (error instanceof FolderUnavailable)
+            return false;
+        throw error;
+    }
 }
 /** SQL: projectAccessAllows for an `approver` row (`alias`) and a project path expression, for the dispatch belts. A
  * null list reaches every project; an unreadable one reaches none. */

package/dist/project-admission.d.ts

@@ -42,9 +42,11 @@ export type Released = {
     removed: boolean;
 };
 export declare const PROJECT_ADDED = "project added";
+/** A folder's real path (a folder), null (not one), or "no-answer" (it didn't answer in time). */
+export type FolderResolver = (path: string) => Promise<string | null | "no-answer">;
 export declare const PROJECT_REMOVED = "project removed";
 /** The checkout root a folder belongs to, canonical; never a shell. */
-export declare function proveProjectRoot(path: string, exec?: ProjectExec): Promise<{
+export declare function proveProjectRoot(path: string, exec?: ProjectExec, resolveFolder?: FolderResolver): Promise<{
     ok: true;
     repo: string;
 } | AdmissionFailure>;
@@ -63,6 +65,9 @@ export declare function admitProject(store: Store, input: {
     /** The caller's authority, asked again about the proved repo inside the locked registry update and inside the
      * database transaction (the console: nothing it proved before an await moved, and the repo is still visible). */
     stillAllowed?: (repo: string) => boolean;
+    /** How the folder and its checkout root are resolved (the console: off its thread, under a deadline). Absent:
+     * canonicalProject. */
+    resolveFolder?: FolderResolver;
 }): Promise<Admitted | AdmissionFailure>;
 /**
  * Remove one project from the lists and the builder. Its tasks, results and

package/dist/project-admission.js

@@ -17,6 +17,7 @@ import { run } from "./exec.js";
 import { canonicalProject, projectName, sameRepo } from "./project.js";
 import { remoteUrlProblem } from "./remote-main.js";
 import { addRepos, loadProjectRegistry, removeRepos, updateRepos } from "./repos.js";
+import { FolderUnavailable } from "./folder-gate.js";
 const ADMISSION_GIT = {
     envAllowlist: ["PATH", "HOME", "TMPDIR", "LANG", "LC_ALL"],
     env: { GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", GIT_NO_REPLACE_OBJECTS: "1" },
@@ -24,15 +25,23 @@ const ADMISSION_GIT = {
 export const PROJECT_ADDED = "project added";
 export const PROJECT_REMOVED = "project removed";
 /** The checkout root a folder belongs to, canonical; never a shell. */
-export async function proveProjectRoot(path, exec = run) {
+export async function proveProjectRoot(path, exec = run, resolveFolder) {
     if (path.trim() === "" || path.length > 4096 || /[\x00-\x1f]/.test(path)) {
         return { ok: false, reason: "unavailable", message: "Choose a valid project folder." };
     }
-    const canonical = canonicalProject(path);
+    // The console resolves both folders off its thread (project-identity.ts resolveNow): its thread never waits on one.
+    const canon = async (one) => resolveFolder === undefined ? canonicalProject(one) : resolveFolder(one);
+    const didntAnswer = (one) => ({ ok: false, reason: "unavailable", message: `${one} didn't answer. It may be on a drive that's disconnected, or waiting on macOS; try again in a moment.` });
+    const canonical = await canon(path);
+    if (canonical === "no-answer")
+        return didntAnswer(path);
     if (canonical === null)
         return { ok: false, reason: "unavailable", message: `${path} isn't a folder on this computer.` };
     const top = await exec("git", ["rev-parse", "--show-toplevel"], { cwd: canonical, timeoutMs: 5_000, ...ADMISSION_GIT });
-    const repo = top.code === 0 ? canonicalProject(top.stdout.trim()) : null;
+    const topReal = top.code === 0 ? await canon(top.stdout.trim()) : null;
+    if (topReal === "no-answer")
+        return didntAnswer(top.stdout.trim());
+    const repo = topReal;
     if (repo === null)
         return { ok: false, reason: "not-git", message: `${path} isn't a Git repository. Run git init there first, or choose a folder inside one.` };
     return { ok: true, repo };
@@ -48,7 +57,7 @@ async function originOf(repo, exec) {
 }
 /** Registry first, then the project and its audit records in one transaction. Re-adds preserve trust. */
 export async function admitProject(store, input) {
-    const proved = await proveProjectRoot(input.path, input.exec);
+    const proved = await proveProjectRoot(input.path, input.exec, input.resolveFolder);
     if (!proved.ok)
         return proved;
     const { repo } = proved;
@@ -110,12 +119,40 @@ export async function admitProject(store, input) {
  * saved project changes nothing.
  */
 export async function releaseProject(store, input) {
-    const asked = canonicalProject(input.path) ?? resolve(input.path);
+    // Removing only narrows: a folder the console's gate holds back (folder-gate.ts) is removed by its exact saved path,
+    // and matches no other spelling.
+    // Latched for the whole removal: once its folder was unavailable, a later answer (during an await below) never
+    // widens it to other spellings.
+    const unavailable = (error) => error instanceof FolderUnavailable;
+    let asked, exactOnly = false;
+    try {
+        asked = canonicalProject(input.path) ?? resolve(input.path);
+    }
+    catch (error) {
+        if (!unavailable(error))
+            throw error;
+        asked = resolve(input.path);
+        exactOnly = true;
+    }
+    const same = (one) => {
+        if (exactOnly)
+            return false;
+        try {
+            return sameRepo(one, asked);
+        }
+        catch (error) {
+            if (unavailable(error)) {
+                exactOnly = true;
+                return false;
+            }
+            throw error;
+        }
+    };
     const loaded = input.registryFile === null ? { repos: [] } : await loadProjectRegistry(input.registryFile);
     if ("error" in loaded)
         return { ok: false, reason: "registry", message: loaded.error };
-    const entries = loaded.repos.filter(one => one === asked || sameRepo(one, asked));
-    const rows = store.listProjects().filter(one => one.path === asked || sameRepo(one.path, asked)).map(one => one.path);
+    const entries = loaded.repos.filter(one => one === asked || same(one));
+    const rows = store.listProjects().filter(one => one.path === asked || same(one.path)).map(one => one.path);
     const repo = entries[0] ?? rows[0] ?? asked;
     if (entries.length === 0 && rows.length === 0)
         return { ok: true, repo, name: projectName(repo), removed: false };

package/dist/project-identity.d.ts

@@ -16,6 +16,7 @@
  *
  * An embedder or test that passes no identities gets `syncProjectIdentities`: the old synchronous reads, unchanged.
  */
+import { type FolderGate } from "./folder-gate.js";
 import { type FolderLookOptions } from "./folder-look.js";
 export type ProjectIdentities = {
     /** For display and grouping only: the last known identity, else the path as saved (resolved lexically). Reads
@@ -36,9 +37,16 @@ export type ProjectIdentities = {
     /** Moves whenever a known identity changes or goes: a decision made before an await is re-checked against it right
      * before its write. */
     generation: () => number;
+    /** Whether a synchronous read inside `path` may happen on the console's thread now (folder-gate.ts): the folder it is
+     * in answered a look within the last few minutes, and no look at it since went unanswered. Reads nothing. */
+    answering: (path: string) => boolean;
 };
 /** How many folders a pass looks at side by side when they're looked at one by one (within FOLDER_LOOK_CHILDREN). */
 export declare const IDENTITY_LOOKS = 4;
 export declare function projectIdentities(look?: FolderLookOptions, now?: () => number): ProjectIdentities;
 /** The synchronous reads, as before: for embedders and tests that pass no identities. */
 export declare function syncProjectIdentities(): ProjectIdentities;
+/** The console's folder gate (folder-gate.ts): its own data folders (the database's, evidence, build checkouts) are read
+ * freely when the console names them; a path read from a file a build can write (`pointer`), and anything else, only
+ * while `answering` vouches for where it leads. */
+export declare function consoleFolderGate(identities: ProjectIdentities, own: readonly (string | undefined)[]): FolderGate;