toolroll 0.9.87 → 0.9.89

package/dist/project-identity.js

@@ -17,10 +17,14 @@
  * An embedder or test that passes no identities gets `syncProjectIdentities`: the old synchronous reads, unchanged.
  */
 import { resolve } from "node:path";
+import { insideFolder } from "./folder-gate.js";
 import { lookIdentities } from "./folder-look.js";
 import { canonicalProject } from "./project.js";
 /** How long an answer stands before the background pass resolves the path again. */
 const STALE_MS = 60_000;
+/** How long an answer vouches that its folder answers, for `answering`: past it (the background pass every 30 s
+ * renews it each minute), a synchronous read waits for the next look. */
+const ANSWERING_MS = 3 * STALE_MS;
 /** How many folders a pass looks at side by side when they're looked at one by one (within FOLDER_LOOK_CHILDREN). */
 export const IDENTITY_LOOKS = 4;
 export function projectIdentities(look = {}, now = Date.now) {
@@ -137,6 +141,37 @@ export function projectIdentities(look = {}, now = Date.now) {
             passes = pass.then(() => undefined, () => undefined);
             return pass;
         },
+        answering: path => {
+            const when = now();
+            const recent = (at) => when - at < ANSWERING_MS;
+            // Decided on real paths only. First the spelling: a path under an answered spelling (the longest) is read where
+            // that answer says it leads, and only while that answer is recent, since a link can be pointed elsewhere.
+            let real = resolve(path);
+            let spelled = null;
+            for (const [key, answer] of answers) {
+                if (answer.real !== null && insideFolder(real, key) && (spelled === null || key.length > spelled.key.length))
+                    spelled = { key, real: answer.real, at: answer.at };
+            }
+            if (spelled !== null) {
+                if (!recent(spelled.at))
+                    return false;
+                real = resolve(spelled.real, `.${real.slice(spelled.key.length)}`);
+            }
+            // A folder whose last look didn't answer holds back every read inside where it leads, whatever older answer stands.
+            for (const key of suspect)
+                if (insideFolder(real, answers.get(key)?.real ?? key))
+                    return false;
+            // Otherwise the nearest real folder an answer names decides, by its newest answer; "/" vouches for nothing below it.
+            let nearest = null;
+            for (const answer of answers.values()) {
+                const folder = answer.real;
+                if (folder === null || (folder === "/" && real !== "/") || !insideFolder(real, folder))
+                    continue;
+                if (nearest === null || folder.length > nearest.folder.length || (folder.length === nearest.folder.length && answer.at > nearest.at))
+                    nearest = { folder, at: answer.at };
+            }
+            return nearest !== null && recent(nearest.at);
+        },
     };
 }
 /** The synchronous reads, as before: for embedders and tests that pass no identities. */
@@ -149,5 +184,13 @@ export function syncProjectIdentities() {
         resolveNow: async (path) => canonicalProject(path),
         generation: () => 0,
         refresh: async () => true,
+        answering: () => true,
     };
 }
+/** The console's folder gate (folder-gate.ts): its own data folders (the database's, evidence, build checkouts) are read
+ * freely when the console names them; a path read from a file a build can write (`pointer`), and anything else, only
+ * while `answering` vouches for where it leads. */
+export function consoleFolderGate(identities, own) {
+    const folders = [...new Set(own.filter((one) => typeof one === "string" && one !== "").map(one => resolve(one)))];
+    return (path, pointer) => (!pointer && folders.some(folder => insideFolder(path, folder))) || identities.answering(path);
+}

package/dist/project.d.ts

@@ -16,6 +16,7 @@ export type ProjectExec = (file: string, args: readonly string[], options?: RunO
  * One canonicalization for every path that becomes project identity:
  * startup config, a session open, task placement. Comparisons elsewhere
  * fall back to raw equality for legacy rows written before this existed.
+ * Throws FolderUnavailable when the console's folder gate holds the read back (folder-gate.ts).
  */
 export declare function canonicalProject(path: string): string | null;
 /** Two repo identities, canonical when possible, raw-equal as the legacy fallback. */

package/dist/project.js

@@ -13,12 +13,18 @@
 import { realpathSync, statSync } from "node:fs";
 import { basename, resolve, sep } from "node:path";
 import { run } from "./exec.js";
+import { folderAnswers, FolderUnavailable } from "./folder-gate.js";
 /**
  * One canonicalization for every path that becomes project identity:
  * startup config, a session open, task placement. Comparisons elsewhere
  * fall back to raw equality for legacy rows written before this existed.
+ * Throws FolderUnavailable when the console's folder gate holds the read back (folder-gate.ts).
  */
 export function canonicalProject(path) {
+    // In the console, a folder that hasn't answered a look lately is not read on its thread (folder-gate.ts). That is
+    // "unavailable", never "not a folder": it throws, so no caller falls back to the path's spelling because of it.
+    if (!folderAnswers(path))
+        throw new FolderUnavailable(resolve(path));
     try {
         const real = realpathSync(resolve(path));
         return statSync(real).isDirectory() ? real : null;

package/dist/proposal.js

@@ -30,6 +30,7 @@ export { validateTaskText } from "./task-text.js";
 import { resolve } from "node:path";
 import { canonicalProject } from "./project.js";
 import { heuristicSizing, planningSignals, refineFiledSizing } from "./task-sizing.js";
+import { FolderUnavailable } from "./folder-gate.js";
 /** Provenance tokens are part of the audit surface: lowercase, bounded,
  * nothing that could render as anything but itself. */
 const FILED_VIA = /^[a-z][a-z0-9:-]{0,63}$/;
@@ -75,7 +76,16 @@ function checkRepo(given, admitted) {
     // directory resolves through symlinks; a path that does not exist yet
     // still normalizes, because filing must not depend on this machine
     // seeing every repo the plane knows about.
-    const canonical = canonicalProject(given) ?? resolve(given);
+    let canonical;
+    // A folder the console's gate holds back (folder-gate.ts) is unavailable: refused, never filed by its spelling.
+    try {
+        canonical = canonicalProject(given) ?? resolve(given);
+    }
+    catch (error) {
+        if (error instanceof FolderUnavailable)
+            return refuse("bad-repo", "that repository's folder didn't answer — it may be on a drive that's disconnected; try again in a moment");
+        throw error;
+    }
     if (admitted !== undefined && !admitted.includes(canonical)) {
         return refuse("outside-ceiling", "that repository is outside what this surface was configured to show");
     }

package/dist/recipes.js

@@ -12,6 +12,7 @@ import { applyModeToNewFiling } from "./plan-auto.js";
 import { canonicalProject } from "./project.js";
 import { RECIPE_FORMAT, RECIPE_LIMITS, readRecipeDocument } from "./contracts/recipes.js";
 import { resolve } from "node:path";
+import { FolderUnavailable } from "./folder-gate.js";
 export const RECIPE_SCHEMA = `
 CREATE TABLE IF NOT EXISTS workflow_recipe (
   id TEXT NOT NULL, revision INTEGER NOT NULL CHECK(revision > 0),
@@ -47,7 +48,17 @@ export class RecipeError extends Error {
     }
 }
 const honest = (text) => !hasForbiddenControls(text) && !hasDisguisedText(text);
-const recipeProject = (repo) => canonicalProject(repo) ?? resolve(repo);
+const recipeProject = (repo) => {
+    // A project folder the console's gate holds back (folder-gate.ts) is unavailable, never matched by its spelling.
+    try {
+        return canonicalProject(repo) ?? resolve(repo);
+    }
+    catch (error) {
+        if (error instanceof FolderUnavailable)
+            throw new RecipeError("This project's folder didn't answer. Try again in a moment.", 503);
+        throw error;
+    }
+};
 /** What a refusal at each top-level field tells the person, after the path-named line. */
 const FIELD_ADVICE = {
     name: "Name, goal, exclusions, and allowed paths must be readable text.", description: "Name, goal, exclusions, and allowed paths must be readable text.",

package/dist/release.d.ts

@@ -51,8 +51,10 @@ export declare const PROTECTION_MINIMUM_CHECKS: readonly string[];
 /**
  * Pull-request checks a release never waits for or fails on, by exact name and the workflow file that defines them:
  * youiyoux's UI drift check (src/design/KIT.md), which fails a pull request that adds design drift but says nothing
- * about whether a build is safe to release. Only a GitHub Actions run of that name from that workflow is left out; the
- * same name from anywhere else is judged like any other check. Never a required check.
+ * about whether a build is safe to release, and the scripted journeys on a pull request (journeys.yml,
+ * docs/plans/ci-speed.md item 4), advisory while they settle in CI: the release check runs every journey itself. Only a
+ * GitHub Actions run of that name from that workflow is left out; the same name from anywhere else is judged like any
+ * other check. Never a required check.
  */
 export declare const ADVISORY_PR_CHECKS: Readonly<Record<string, string>>;
 /**

package/dist/release.js

@@ -84,10 +84,16 @@ export const PROTECTION_MINIMUM_CHECKS = REQUIRED_PR_CHECKS.filter(name => !PROT
 /**
  * Pull-request checks a release never waits for or fails on, by exact name and the workflow file that defines them:
  * youiyoux's UI drift check (src/design/KIT.md), which fails a pull request that adds design drift but says nothing
- * about whether a build is safe to release. Only a GitHub Actions run of that name from that workflow is left out; the
- * same name from anywhere else is judged like any other check. Never a required check.
+ * about whether a build is safe to release, and the scripted journeys on a pull request (journeys.yml,
+ * docs/plans/ci-speed.md item 4), advisory while they settle in CI: the release check runs every journey itself. Only a
+ * GitHub Actions run of that name from that workflow is left out; the same name from anywhere else is judged like any
+ * other check. Never a required check.
  */
-export const ADVISORY_PR_CHECKS = { "youiyoux · UI drift": ".github/workflows/youiyoux.yml" };
+export const ADVISORY_PR_CHECKS = {
+    "youiyoux · UI drift": ".github/workflows/youiyoux.yml",
+    "journeys · app (scripted)": ".github/workflows/journeys.yml",
+    "journeys · flows (scripted)": ".github/workflows/journeys.yml",
+};
 /** The checks a release's publication waits for on its tag (.github/workflows/publish.yml, docs/plans/test-matrix.md):
  * the release proof (the tagged tree passed every REQUIRED_PR_CHECKS check on its pull request, read from GitHub) and
  * the publish job that needs it. The tag runs no tests again. Nothing else reported on the merge commit (main-push.yml)

package/dist/serve.js

@@ -1,6 +1,7 @@
 import { secretFolder } from "./tool-secret-store.js";
 import { acceptedIdentities, recoverLearning } from "./project-learning.js";
-import { syncProjectIdentities } from "./project-identity.js";
+import { consoleFolderGate, syncProjectIdentities } from "./project-identity.js";
+import { inFolderScope } from "./folder-gate.js";
 import { firstTasksOffThread, recoverLearningOffThread } from "./learning-look.js";
 import { loadOrCreateVapidKeys } from "./push.js";
 import { checkoutPlan } from "./checkout-cleanup.js";
@@ -670,7 +671,7 @@ export function createDecisionServer(options) {
         instrumentRequest(store.telemetry, request, response);
         // Every password checked while answering counts against where this request came from (sign-in-guard.ts).
         // A GET or HEAD only reads (docs/plans/get-side-effects.md): store reads that would tidy up as they go don't.
-        const answer = () => handle(request, response);
+        const answer = () => consoleFolders(options, identities, () => handle(request, response));
         void withPasswordSource(joinSourceOf(request), () => request.method === "GET" || request.method === "HEAD" ? asReadOnlyRequest(answer) : answer()).catch(error => {
             // Every unhandled error is logged (v99): the path and the message, never the request's body or query. The reference
             // is what a person's error page shows, so the log line can be found from it.
@@ -1986,7 +1987,9 @@ export function createDecisionServer(options) {
     // deterministic scan is idle without new meaningful work; shutdown drains it.
     let leadMaintenance = null;
     let leadClosing = false;
-    server.once('listening', () => {
+    // Started in the console's folder scope (folder-gate.ts), so their own timers and the personal queue's kick (which
+    // restores the context it was started in, never a request's) read folders as the console's work does.
+    server.once('listening', () => consoleFolders(options, identities, () => {
         team.start();
         personalQueue.start();
         leadMaintenance = startMaintenance({ intervalMs: 5_000, shouldStop: () => leadClosing,
@@ -1996,7 +1999,7 @@ export function createDecisionServer(options) {
             // Pending delivery is durable and is read again on the next pass; a failure is said where follow status is read.
             onError: error => recordLeadFollowFailure(store, error, clock()),
         });
-    });
+    }));
     // Background checks (docs/plans/get-side-effects.md): what pages show about this computer's agent sign-ins and the
     // services Toolroll uses is asked here, on a timer, and a page reads the last answer. A page visit never starts a
     // process or a network call, and never acts on what a check finds: lifting a sign-in pause and the lead-by-default
@@ -2011,7 +2014,7 @@ export function createDecisionServer(options) {
             }
             catch { /* a page says secrets can't be read; the next action reports why */ }
             backgroundChecks = startMaintenance({ intervalMs: options.backgroundChecksMs ?? BACKGROUND_CHECKS_MS, shouldStop: () => leadClosing,
-                run: async () => {
+                run: () => consoleFolders(options, identities, async () => {
                     const now = Date.now();
                     const waits = [];
                     if (now - agentsCheckedAt >= (options.backgroundChecksMs ?? LOCAL_AGENTS_EVERY_MS)) {
@@ -2109,7 +2112,7 @@ export function createDecisionServer(options) {
                         catch { /* shown as last saved */ }
                     }
                     await Promise.all(waits);
-                },
+                }),
                 onError: () => { }, });
             void backgroundChecks.runNow();
         });
@@ -2415,3 +2418,22 @@ function startupCeiling(repos, roots, identities, canon) {
         configuredPaths,
     };
 }
+/** Each console's folder gate (folder-gate.ts), made once for its options. */
+const consoleGates = new WeakMap();
+/**
+ * Runs the console's own work (a request, a background pass) in its folder scope: with identities resolved off its
+ * thread (up and serve), it reads a person's folder synchronously only while that folder answered a look lately; its
+ * own data (the database's folder, evidence, build checkouts) is read freely. Without identities (embedders, tests):
+ * as before. Work that isn't the console's (a worker in the same process) never runs in it.
+ */
+function consoleFolders(options, identities, work) {
+    if (options.identities === undefined)
+        return work();
+    let gate = consoleGates.get(options);
+    if (gate === undefined) {
+        const databaseFile = options.store.databaseFile();
+        gate = consoleFolderGate(identities, [options.configDir, options.evidenceRoot, options.poolRoot, databaseFile === null ? undefined : dirname(databaseFile)]);
+        consoleGates.set(options, gate);
+    }
+    return inFolderScope(gate, work);
+}

package/dist/server/console.css

@@ -265,16 +265,26 @@
   .project-card .project-name:focus-visible { outline: 2px solid var(--ring); outline-offset: 2px; border-radius: .375rem; }
 
   label { display: block; font-size: 0.8125rem; font-weight: 500; margin: .75rem 0 0; color: var(--foreground); }
-  :where(input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], textarea, select) {
-    width: 100%; margin: .35rem 0 0; padding: .45rem .7rem;
-    color: var(--foreground); background: var(--card); min-height: 2.125rem;
-    border: 1px solid var(--input); border-radius: calc(var(--radius) - 3px);
-    transition: border-color .15s, box-shadow .15s;
-  }
+  /* The kit's field family (src/design/KIT.md "Fields"): one filled surface, no outline, 12px radius; the label above
+     names the field and focus draws the ink ring. A transparent border keeps the edge in forced colours. Textareas
+     grow with their words (no resize grip); selects draw the kit's chevron. */
+  :where(input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], input:not([type]), textarea, select) {
+    width: 100%; margin: .35rem 0 0; padding: .5rem .75rem;
+    color: var(--foreground); background-color: var(--so-field); min-height: 2.25rem;
+    border: 1px solid transparent; border-radius: var(--so-radius-sheet); box-shadow: none;
+    transition: background-color .12s;
+  }
+  :where(textarea) { resize: none; field-sizing: content; min-height: 4.75rem; max-height: 22rem; overflow-y: auto; line-height: 1.5; }
+  :where(select:not([multiple])) {
+    appearance: none; -webkit-appearance: none; padding-right: 2.1rem; cursor: pointer;
+    background-image: linear-gradient(45deg, transparent 50%, var(--so-muted) 50%), linear-gradient(135deg, var(--so-muted) 50%, transparent 50%);
+    background-position: calc(100% - 17px) 52%, calc(100% - 12px) 52%; background-size: 5px 5px, 5px 5px; background-repeat: no-repeat;
+  }
+  :where(input, textarea, select)::placeholder { color: var(--muted-foreground); opacity: 1; }
   /* The box above is in :where() so a surface's own rules (the workspace's 44px phone targets) win; the type keeps
      its old weight, so the phone's 16px rule still loses to it as before. */
   input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], textarea, select { font: 400 0.875rem/1.4 var(--font-sans); }
-  @media (hover: hover) and (pointer: fine) { input:hover, textarea:hover, select:hover { border-color: var(--muted-foreground); } }
+  @media (hover: hover) and (pointer: fine) { :where(input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], input:not([type]), textarea, select):hover { background-color: color-mix(in srgb, var(--so-field) 94%, var(--so-ink)); } }
   input[type=number] { font-family: var(--font-mono); font-variant-numeric: tabular-nums; }
   input[type=radio], input[type=checkbox] { accent-color: var(--ring); }
   .permission-field { border: 0; padding: 0; margin: 1rem 0 0; min-width: 0; }
@@ -312,7 +322,8 @@
     min-height: 8.5rem; max-height: 18rem; margin: 0; padding: .9rem 1rem; resize: vertical;
     border: 0; background: transparent; box-shadow: none; font-size: 1.05rem; line-height: 1.55;
   }
-  .task-prompt textarea:focus-visible { border: 0; box-shadow: none; }
+  .task-prompt textarea:focus-visible { border: 0; box-shadow: none; outline: none; }
+  .task-composer:focus-within { outline: 2px solid var(--so-ring); outline-offset: 2px; }
   @media (hover: hover) and (pointer: fine) { .task-prompt textarea:hover { border: 0; box-shadow: none; } }
   .task-repo { margin: .25rem .45rem .7rem; }
   .task-composer-footer { display: flex; align-items: center; gap: .5rem; padding: .25rem; }
@@ -361,7 +372,7 @@
   }
   input[type=password] { font-family: var(--font-mono); }
   input:focus-visible, textarea:focus-visible, select:focus-visible {
-    outline: none; border-color: var(--ring); box-shadow: 0 0 0 3px color-mix(in srgb, var(--ring) 25%, transparent);
+    outline: 2px solid var(--so-ring); outline-offset: 1px; box-shadow: none;
   }
   button:focus-visible, a:focus-visible, summary:focus-visible { outline: 2px solid var(--ring); outline-offset: 2px; }
 
@@ -2198,7 +2209,8 @@
     width: 100%; min-height: 3.5rem; max-height: 13rem; margin: 0; padding: .75rem .85rem;
     resize: vertical; border: 0; background: transparent; box-shadow: none; font-size: 1rem;
   }
-  .composer textarea:focus-visible { border: 0; box-shadow: none; }
+  .composer textarea:focus-visible { border: 0; box-shadow: none; outline: none; }
+  .composer:focus-within { outline: 2px solid var(--so-ring); outline-offset: 2px; }
   @media (hover: hover) and (pointer: fine) { .composer textarea:hover { border: 0; box-shadow: none; } }
   .composer button {
     flex: 0 0 2.75rem; width: 2.75rem; min-height: 2.75rem; padding: 0; border-radius: 999px;

package/dist/server/kit-standalone.d.ts

@@ -17,6 +17,6 @@
  * HTML without it. It never rides a sensitive page (one that asks for a password or shows a secret), where the page
  * carries no chrome additions.
  */
-export declare const KIT_STANDALONE_SCRIPT = "(function(){\nif(window.__kitStandalone)return;window.__kitStandalone=1;var d=document;\nvar PHONE=\"(max-width: 760px)\";var FOCUSABLE='a[href], button:not([disabled]), input:not([disabled]):not([type=\"hidden\"]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex=\"-1\"])';\nfunction phone(){return window.matchMedia(PHONE).matches;}\nfunction sync(t){var box=t.closest(\".k-composer\");if(!box)return;var st=getComputedStyle(t);var line=parseFloat(st.lineHeight)||21;\nvar pad=(parseFloat(st.paddingTop)||0)+(parseFloat(st.paddingBottom)||0);var max=line*(Number(t.getAttribute(\"data-max\"))||8)+pad;var min=line*(Number(t.getAttribute(\"data-min\"))||1)+pad;\nt.style.height=\"auto\";t.style.height=Math.max(min,Math.min(t.scrollHeight,max))+\"px\";t.style.overflowY=t.scrollHeight>max+1?\"auto\":\"hidden\";\nvar on=t.value.trim()!==\"\";box.classList.toggle(\"has-text\",on);var sends=box.querySelectorAll(\".k-send[data-gate]:not(:disabled)\");for(var i=0;i<sends.length;i++)sends[i].setAttribute(\"aria-disabled\",String(!on));}\nfunction syncAll(){var all=d.querySelectorAll(\".k-composer-ta\");for(var i=0;i<all.length;i++)sync(all[i]);}\nvar stack=[];\nfunction visible(el){return !!el&&el.isConnected&&el.getClientRects().length>0;}\nfunction openPanel(panel,trigger,onClose){if(stack.length)closeTop(\"close\");var floating=panel.classList.contains(\"k-pop\");var ph=phone();\nif(!panel.isConnected)d.body.appendChild(panel);var scrim=d.createElement(\"div\");scrim.className=\"k-scrim\"+(!floating||ph?\" dim\":\"\");panel.parentNode.insertBefore(scrim,panel);\npanel.hidden=false;panel.setAttribute(\"aria-modal\",\"true\");if(!panel.hasAttribute(\"tabindex\"))panel.tabIndex=-1;panel.classList.toggle(\"as-sheet\",floating&&ph);\nif(floating&&!ph&&trigger){var at=trigger.getBoundingClientRect();var w=panel.offsetWidth||336,h=panel.offsetHeight||200;var left=Math.min(Math.max(8,at.right-w),window.innerWidth-w-8);var below=at.bottom+6;var top=below+h>window.innerHeight-8?Math.max(8,at.top-h-6):below;panel.style.left=Math.round(left)+\"px\";panel.style.top=Math.round(top)+\"px\";}\nvar inerted=[];for(var node=panel;node!==d.body&&node.parentElement;node=node.parentElement){var kids=node.parentElement.children;for(var i=0;i<kids.length;i++){var s=kids[i];if(s===node||s===scrim||s.inert)continue;s.inert=true;inerted.push(s);}}\nvar entry={panel:panel,scrim:scrim,trigger:trigger,inerted:inerted,onClose:onClose};stack.push(entry);scrim.addEventListener(\"click\",function(){closeEntry(entry);});\nvar first=panel.querySelector(\"[autofocus]\")||panel.querySelector('input:not([type=\"hidden\"]), textarea, select')||panel;first.focus();}\nfunction closeEntry(entry){var at=stack.indexOf(entry);if(at<0)return;stack.splice(at,1);for(var i=0;i<entry.inerted.length;i++)entry.inerted[i].inert=false;\nentry.scrim.remove();entry.panel.hidden=true;entry.panel.classList.remove(\"as-sheet\");if(visible(entry.trigger))entry.trigger.focus();if(entry.onClose)entry.onClose();}\nfunction closeTop(){var top=stack[stack.length-1];if(top)closeEntry(top);}\nfunction menu(trigger,title,items){var ph=phone();var panel=d.createElement(\"div\");panel.className=ph?\"k-sheet\":\"k-pop k-pop-menu\";panel.setAttribute(\"role\",\"dialog\");\nvar id=\"k-menu-\"+Math.random().toString(36).slice(2,8);panel.setAttribute(\"aria-labelledby\",id);var head=d.createElement(\"div\");head.className=ph?\"k-sheet-h\":\"k-pop-h\";\nvar h=d.createElement(ph?\"h2\":\"h3\");h.id=id;h.textContent=title;var x=d.createElement(\"button\");x.type=\"button\";x.className=\"k-btn k-btn-ghost k-btn-sm k-btn-icon\";x.setAttribute(\"aria-label\",\"Close\");x.setAttribute(\"data-k-close\",\"\");x.textContent=\"\\u00d7\";\nhead.appendChild(h);head.appendChild(x);var list=d.createElement(\"div\");list.className=\"k-menu\";var entry;\nitems.forEach(function(item){var b=d.createElement(\"button\");b.type=\"button\";b.textContent=item.current?item.label+\" \\u00b7 current\":item.label;if(item.current)b.setAttribute(\"aria-current\",\"true\");b.addEventListener(\"click\",function(){closeTop();item.act();});list.appendChild(b);});\npanel.appendChild(head);panel.appendChild(list);openPanel(panel,trigger,function(){panel.remove();});}\nfunction composerMenu(target){var chip=target.closest(\"[data-k-composer-project]\");var plus=target.closest(\"[data-k-composer-plus]\");var id=chip?chip.getAttribute(\"data-k-composer-project\"):plus?plus.getAttribute(\"data-k-composer-plus\"):null;if(id===null)return false;\nvar hidden=d.getElementById(id+\"-project\");function choose(trigger){if(!hidden)return;var items=[];try{var parsed=JSON.parse(hidden.getAttribute(\"data-items\")||\"[]\");if(Array.isArray(parsed))items=parsed.filter(function(one){return typeof one===\"string\";});}catch(e){items=[];}\nmenu(trigger,\"Project\",items.map(function(name){return{label:name,current:name===hidden.value,act:function(){hidden.value=name;var c=d.querySelector('[data-k-composer-project=\"'+CSS.escape(id)+'\"]');if(c){var l=c.querySelector(\"[data-k-project-name]\");if(l)l.textContent=name;c.setAttribute(\"aria-label\",\"Project: \"+name+\". Change\");}hidden.dispatchEvent(new Event(\"change\",{bubbles:true}));}};}));}\nif(chip){choose(chip);return true;}var attach=d.querySelector('input[type=\"file\"][data-k-attach=\"'+CSS.escape(id)+'\"]');var items=[];if(attach)items.push({label:\"Attach a file\",act:function(){attach.click();}});\nif(hidden)items.push({label:\"Choose project\",act:function(){choose(d.querySelector('[data-k-composer-project=\"'+CSS.escape(id)+'\"]')||plus);}});if(items.length)menu(plus,\"Add to your message\",items);return true;}\nd.addEventListener(\"input\",function(e){var t=e.target;if(t&&t.classList&&t.classList.contains(\"k-composer-ta\"))sync(t);});\nd.addEventListener(\"click\",function(e){var t=e.target;if(!t||!t.closest)return;\nif(t.closest('.k-send[data-gate][aria-disabled=\"true\"]')){e.preventDefault();return;}\nvar draft=t.closest(\"[data-k-draft]\");if(draft){var box=d.getElementById((draft.getAttribute(\"data-k-into\")||\"\")+\"-text\");if(box&&!box.disabled){e.preventDefault();var words=draft.getAttribute(\"data-k-draft\")||\"\";var typed=box.value;\nbox.value=typed.trim()===\"\"?words:typed.indexOf(words)>=0?typed:typed.replace(/\\s+$/,\"\")+\"\\n\"+words;sync(box);box.focus();}return;}\nif((t.closest(\"[data-k-composer-project]\")||t.closest(\"[data-k-composer-plus]\"))&&composerMenu(t)){e.preventDefault();return;}\nvar opener=t.closest(\"[data-k-open]\");if(opener){var panel=d.getElementById(opener.getAttribute(\"data-k-open\")||\"\");if(panel){e.preventDefault();openPanel(panel,opener);}return;}\nif(t.closest(\"[data-k-close]\")){var top=stack[stack.length-1];if(top&&top.panel.contains(t)){e.preventDefault();closeEntry(top);}return;}\nvar sw=t.closest(\"button.k-switch[role=switch][data-k-switch]\");if(sw){var on=sw.getAttribute(\"aria-checked\")!==\"true\";sw.setAttribute(\"aria-checked\",String(on));var w=(sw.getAttribute(\"data-k-switch\")||\"On|Off\").split(\"|\");var s=sw.querySelector(\"[data-k-words]\");if(s)s.textContent=(on?w[0]:w[1])||\"\";sw.dispatchEvent(new CustomEvent(\"k-switch\",{bubbles:true,detail:{on:on}}));}});\nd.addEventListener(\"keydown\",function(e){var top=stack[stack.length-1];if(!top)return;if(e.key===\"Escape\"){e.preventDefault();closeEntry(top);return;}if(e.key!==\"Tab\")return;\nvar items=Array.prototype.filter.call(top.panel.querySelectorAll(FOCUSABLE),visible);if(!items.length){e.preventDefault();top.panel.focus();return;}var first=items[0],last=items[items.length-1];\nif(e.shiftKey&&(d.activeElement===first||d.activeElement===top.panel)){e.preventDefault();last.focus();}else if(!e.shiftKey&&d.activeElement===last){e.preventDefault();first.focus();}},true);\nfunction kb(){var v=window.visualViewport;if(!v)return;var covered=Math.max(0,Math.round(window.innerHeight-v.height-v.offsetTop));d.documentElement.style.setProperty(\"--kb\",covered+\"px\");d.documentElement.classList.toggle(\"kb-open\",covered>80);}\nif(window.visualViewport){window.visualViewport.addEventListener(\"resize\",kb);window.visualViewport.addEventListener(\"scroll\",kb);}\nif(d.readyState===\"loading\")d.addEventListener(\"DOMContentLoaded\",syncAll);else syncAll();\n})();";
+export declare const KIT_STANDALONE_SCRIPT = "(function(){\nif(window.__kitStandalone)return;window.__kitStandalone=1;var d=document;\nvar PHONE=\"(max-width: 760px)\";var FOCUSABLE='a[href], button:not([disabled]), input:not([disabled]):not([type=\"hidden\"]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex=\"-1\"])';\nfunction phone(){return window.matchMedia(PHONE).matches;}\nfunction sync(t){var box=t.closest(\".k-composer\");if(!box)return;var st=getComputedStyle(t);var line=parseFloat(st.lineHeight)||21;\nvar pad=(parseFloat(st.paddingTop)||0)+(parseFloat(st.paddingBottom)||0);var max=line*(Number(t.getAttribute(\"data-max\"))||8)+pad;var min=line*(Number(t.getAttribute(\"data-min\"))||1)+pad;\nt.style.height=\"auto\";t.style.height=Math.max(min,Math.min(t.scrollHeight,max))+\"px\";t.style.overflowY=t.scrollHeight>max+1?\"auto\":\"hidden\";\nvar on=t.value.trim()!==\"\";box.classList.toggle(\"has-text\",on);var sends=box.querySelectorAll(\".k-send[data-gate]:not(:disabled)\");for(var i=0;i<sends.length;i++)sends[i].setAttribute(\"aria-disabled\",String(!on));}\nfunction syncAll(){var all=d.querySelectorAll(\".k-composer-ta\");for(var i=0;i<all.length;i++)sync(all[i]);}\nvar stack=[];\nfunction visible(el){return !!el&&el.isConnected&&el.getClientRects().length>0;}\nfunction openPanel(panel,trigger,onClose){if(stack.length)closeTop(\"close\");var floating=panel.classList.contains(\"k-pop\");var ph=phone();\nif(!panel.isConnected)d.body.appendChild(panel);var scrim=d.createElement(\"div\");scrim.className=\"k-scrim\"+(!floating||ph?\" dim\":\"\");panel.parentNode.insertBefore(scrim,panel);\npanel.hidden=false;panel.setAttribute(\"aria-modal\",\"true\");if(!panel.hasAttribute(\"tabindex\"))panel.tabIndex=-1;panel.classList.toggle(\"as-sheet\",floating&&ph);\nif(floating&&!ph&&trigger){var at=trigger.getBoundingClientRect();var w=panel.offsetWidth||336,h=panel.offsetHeight||200;var left=Math.min(Math.max(8,at.right-w),window.innerWidth-w-8);var below=at.bottom+6;var top=below+h>window.innerHeight-8?Math.max(8,at.top-h-6):below;panel.style.left=Math.round(left)+\"px\";panel.style.top=Math.round(top)+\"px\";}\nvar inerted=[];for(var node=panel;node!==d.body&&node.parentElement;node=node.parentElement){var kids=node.parentElement.children;for(var i=0;i<kids.length;i++){var s=kids[i];if(s===node||s===scrim||s.inert)continue;s.inert=true;inerted.push(s);}}\nvar entry={panel:panel,scrim:scrim,trigger:trigger,inerted:inerted,onClose:onClose};stack.push(entry);scrim.addEventListener(\"click\",function(){closeEntry(entry);});\nvar first=panel.querySelector(\"[autofocus]\")||panel.querySelector('input:not([type=\"hidden\"]), textarea, select')||panel;first.focus();}\nfunction closeEntry(entry){var at=stack.indexOf(entry);if(at<0)return;stack.splice(at,1);for(var i=0;i<entry.inerted.length;i++)entry.inerted[i].inert=false;\nentry.scrim.remove();entry.panel.hidden=true;entry.panel.classList.remove(\"as-sheet\");if(visible(entry.trigger))entry.trigger.focus();if(entry.onClose)entry.onClose();}\nfunction closeTop(){var top=stack[stack.length-1];if(top)closeEntry(top);}\nfunction menu(trigger,title,items){var ph=phone();var panel=d.createElement(\"div\");panel.className=ph?\"k-sheet\":\"k-pop k-pop-menu\";panel.setAttribute(\"role\",\"dialog\");\nvar id=\"k-menu-\"+Math.random().toString(36).slice(2,8);panel.setAttribute(\"aria-labelledby\",id);var head=d.createElement(\"div\");head.className=ph?\"k-sheet-h\":\"k-pop-h\";\nvar h=d.createElement(ph?\"h2\":\"h3\");h.id=id;h.textContent=title;var x=d.createElement(\"button\");x.type=\"button\";x.className=\"k-btn k-btn-ghost k-btn-sm k-btn-icon\";x.setAttribute(\"aria-label\",\"Close\");x.setAttribute(\"data-k-close\",\"\");x.textContent=\"\\u00d7\";\nhead.appendChild(h);head.appendChild(x);var list=d.createElement(\"div\");list.className=\"k-menu\";var entry;\nitems.forEach(function(item){var b=d.createElement(\"button\");b.type=\"button\";b.textContent=item.current?item.label+\" \\u00b7 current\":item.label;if(item.current)b.setAttribute(\"aria-current\",\"true\");b.addEventListener(\"click\",function(){closeTop();item.act();});list.appendChild(b);});\npanel.appendChild(head);panel.appendChild(list);openPanel(panel,trigger,function(){panel.remove();});}\nfunction composerMenu(target){var chip=target.closest(\"[data-k-composer-project]\");var plus=target.closest(\"[data-k-composer-plus]\");var id=chip?chip.getAttribute(\"data-k-composer-project\"):plus?plus.getAttribute(\"data-k-composer-plus\"):null;if(id===null)return false;\nvar hidden=d.getElementById(id+\"-project\");function choose(trigger){if(!hidden)return;var items=[];try{var parsed=JSON.parse(hidden.getAttribute(\"data-items\")||\"[]\");if(Array.isArray(parsed))items=parsed.filter(function(one){return typeof one===\"string\";});}catch(e){items=[];}\nmenu(trigger,\"Project\",items.map(function(name){return{label:name,current:name===hidden.value,act:function(){hidden.value=name;var c=d.querySelector('[data-k-composer-project=\"'+CSS.escape(id)+'\"]');if(c){var l=c.querySelector(\"[data-k-project-name]\");if(l)l.textContent=name;c.setAttribute(\"aria-label\",\"Project: \"+name+\". Change\");}hidden.dispatchEvent(new Event(\"change\",{bubbles:true}));}};}));}\nif(chip){choose(chip);return true;}var attach=d.querySelector('input[type=\"file\"][data-k-attach=\"'+CSS.escape(id)+'\"]');var items=[];if(attach)items.push({label:\"Attach a file\",act:function(){attach.click();}});\nif(hidden)items.push({label:\"Choose project\",act:function(){choose(d.querySelector('[data-k-composer-project=\"'+CSS.escape(id)+'\"]')||plus);}});if(items.length)menu(plus,\"Add to your message\",items);return true;}\nd.addEventListener(\"input\",function(e){var t=e.target;if(t&&t.classList&&t.classList.contains(\"k-composer-ta\"))sync(t);});\nd.addEventListener(\"click\",function(e){var t=e.target;if(!t||!t.closest)return;\nif(t.closest('.k-send[data-gate][aria-disabled=\"true\"]')){e.preventDefault();return;}\nvar draft=t.closest(\"[data-k-draft]\");if(draft){var box=d.getElementById((draft.getAttribute(\"data-k-into\")||\"\")+\"-text\");if(box&&!box.disabled){e.preventDefault();var words=draft.getAttribute(\"data-k-draft\")||\"\";var typed=box.value;\nbox.value=typed.trim()===\"\"?words:typed.indexOf(words)>=0?typed:typed.replace(/\\s+$/,\"\")+\"\\n\"+words;sync(box);box.focus();}return;}\nif((t.closest(\"[data-k-composer-project]\")||t.closest(\"[data-k-composer-plus]\"))&&composerMenu(t)){e.preventDefault();return;}\nvar opener=t.closest(\"[data-k-open]\");if(opener){var panel=d.getElementById(opener.getAttribute(\"data-k-open\")||\"\");if(panel){e.preventDefault();openPanel(panel,opener);}return;}\nif(t.closest(\"[data-k-close]\")){var top=stack[stack.length-1];if(top&&top.panel.contains(t)){e.preventDefault();closeEntry(top);}return;}\nvar sw=t.closest(\"button.k-switch[role=switch][data-k-switch]\");if(sw){var on=sw.getAttribute(\"aria-checked\")!==\"true\";sw.setAttribute(\"aria-checked\",String(on));var w=(sw.getAttribute(\"data-k-switch\")||\"On|Off\").split(\"|\");var s=sw.querySelector(\"[data-k-words]\");if(s)s.textContent=(on?w[0]:w[1])||\"\";sw.dispatchEvent(new CustomEvent(\"k-switch\",{bubbles:true,detail:{on:on}}));}});\nd.addEventListener(\"keydown\",function(e){var top=stack[stack.length-1];if(!top)return;if(e.key===\"Escape\"){e.preventDefault();closeEntry(top);return;}if(e.key!==\"Tab\")return;\nvar items=Array.prototype.filter.call(top.panel.querySelectorAll(FOCUSABLE),visible);if(!items.length){e.preventDefault();top.panel.focus();return;}var first=items[0],last=items[items.length-1];\nif(e.shiftKey&&(d.activeElement===first||d.activeElement===top.panel)){e.preventDefault();last.focus();}else if(!e.shiftKey&&d.activeElement===last){e.preventDefault();first.focus();}},true);\nfunction kb(){var v=window.visualViewport;if(!v)return;var covered=Math.max(0,Math.round(window.innerHeight-v.height-v.offsetTop));d.documentElement.style.setProperty(\"--kb\",covered+\"px\");d.documentElement.classList.toggle(\"kb-open\",covered>80);}\nif(window.visualViewport){window.visualViewport.addEventListener(\"resize\",kb);window.visualViewport.addEventListener(\"scroll\",kb);}\nvar root=d.documentElement;root.classList.add(\"k-js\");d.addEventListener(\"keydown\",function(e){if(e.key===\"Tab\"||e.key===\"F6\")root.classList.add(\"k-kbd\");},true);d.addEventListener(\"pointerdown\",function(){root.classList.remove(\"k-kbd\");},true);\nif(d.readyState===\"loading\")d.addEventListener(\"DOMContentLoaded\",syncAll);else syncAll();\n})();";
 /** Whether a page's markup has kit pieces the standalone behaviour wires (a composer, an overlay, a button switch, an idea). */
 export declare const KIT_BEHAVIOR_MARKUP: RegExp;

package/dist/server/kit-standalone.js

@@ -63,6 +63,7 @@ var items=Array.prototype.filter.call(top.panel.querySelectorAll(FOCUSABLE),visi
 if(e.shiftKey&&(d.activeElement===first||d.activeElement===top.panel)){e.preventDefault();last.focus();}else if(!e.shiftKey&&d.activeElement===last){e.preventDefault();first.focus();}},true);
 function kb(){var v=window.visualViewport;if(!v)return;var covered=Math.max(0,Math.round(window.innerHeight-v.height-v.offsetTop));d.documentElement.style.setProperty("--kb",covered+"px");d.documentElement.classList.toggle("kb-open",covered>80);}
 if(window.visualViewport){window.visualViewport.addEventListener("resize",kb);window.visualViewport.addEventListener("scroll",kb);}
+var root=d.documentElement;root.classList.add("k-js");d.addEventListener("keydown",function(e){if(e.key==="Tab"||e.key==="F6")root.classList.add("k-kbd");},true);d.addEventListener("pointerdown",function(){root.classList.remove("k-kbd");},true);
 if(d.readyState==="loading")d.addEventListener("DOMContentLoaded",syncAll);else syncAll();
 })();`;
 /** Whether a page's markup has kit pieces the standalone behaviour wires (a composer, an overlay, a button switch, an idea). */

package/dist/server/kit.d.ts

@@ -90,7 +90,9 @@ export declare function textarea(options: {
     error?: boolean;
     attrs?: Attrs;
 }): Html;
-/** A native select with the kit's chevron: 32px, `sm` 28px in a toolbar, 44px and 16px text on a phone. */
+/** A native select in the field family, with the chevron: 36px, `sm` 28px in a toolbar, 44px and 16px text on a phone.
+ * `chip` draws it as a composer's filled pill (a project inside the message box): still a native select, so it works
+ * without script. */
 export declare function select(options: {
     id?: string;
     name?: string;
@@ -99,6 +101,7 @@ export declare function select(options: {
     current?: string;
     sm?: boolean;
     wide?: boolean;
+    chip?: boolean;
     attrs?: Attrs;
 }): Html;
 /** An on/off setting in a form: a checkbox with role=switch and a visible label (posts `name=on` when on). */
@@ -109,6 +112,15 @@ export declare function switchInput(options: {
     on: boolean;
     attrs?: Attrs;
 }): Html;
+/** An on/off choice inside a composer, drawn as a filled pill chip whose mark fills when on: a checkbox with
+ * role=switch (posts `name=value` when on), so it works without script. Its longer words go under the box (`note`). */
+export declare function toggleChip(options: {
+    id: string;
+    name: string;
+    label: string;
+    on: boolean;
+    attrs?: Attrs;
+}): Html;
 /** Two columns: label and one muted line | the control. `inline` keeps the control beside the label on a phone. */
 export declare function formRow(label: string, hint: string | null, control: Html, variant?: "" | "inline" | "top" | "wide"): Html;
 /** Radio cards: one choice from a few, each with a bold label and one muted line. */
@@ -273,8 +285,9 @@ export declare function sendButton(options?: {
     attrs?: Attrs;
 }): Html;
 /**
- * The message box: one soft rounded container, the textarea grows from `rows` to `maxRows` lines then scrolls,
- * one bottom row inside (+ menu, the project as a quiet chip, small controls, the round send). Textarea
+ * The message box: one filled rounded object, the textarea grows from `rows` to `maxRows` lines then scrolls,
+ * one bottom row inside (+ menu, the project as a filled pill chip, toggle chips, the round send); its note and its
+ * refusal sit under the box (all inside `.k-composer-field`). Textarea
  * `<id>-text` (named `name`), refusal slot `<id>-err`, chosen project a hidden input `<id>-project` (named
  * `projectName`). A refused send keeps the words in the box with the reason in the error slot.
  */
@@ -291,6 +304,7 @@ export declare function composer(options: {
         current: string;
         items: readonly string[];
         name?: string;
+        sub?: string;
     };
     before?: Html;
     send: Html;

package/dist/server/kit.js

@@ -71,18 +71,25 @@ export function input(options) {
 export function textarea(options) {
     return html `<textarea class="k-textarea" id="${options.id}" name="${options.name}" rows="${options.rows ?? 3}"${attributes({ "aria-invalid": options.error ? "true" : undefined, "aria-describedby": `${options.id}-err`, ...options.attrs })}>${options.value ?? ""}</textarea>`;
 }
-/** A native select with the kit's chevron: 32px, `sm` 28px in a toolbar, 44px and 16px text on a phone. */
+/** A native select in the field family, with the chevron: 36px, `sm` 28px in a toolbar, 44px and 16px text on a phone.
+ * `chip` draws it as a composer's filled pill (a project inside the message box): still a native select, so it works
+ * without script. */
 export function select(options) {
     const opts = options.items.map(item => {
         const [value, label] = typeof item === "string" ? [item, item] : item;
         return html `<option value="${value}"${value === options.current ? html ` selected` : ""}>${label}</option>`;
     });
-    return html `<span class="${cls("k-selw", options.sm && "sm", options.wide && "wide")}"><select class="k-sel"${attributes({ id: options.id, name: options.name, "aria-label": options.label, ...options.attrs })}>${opts}</select></span>`;
+    return html `<span class="${cls("k-selw", options.sm && "sm", options.wide && "wide", options.chip && "k-selw-chip")}"><select class="k-sel"${attributes({ id: options.id, name: options.name, "aria-label": options.label, ...options.attrs })}>${opts}</select></span>`;
 }
 /** An on/off setting in a form: a checkbox with role=switch and a visible label (posts `name=on` when on). */
 export function switchInput(options) {
     return html `<label class="k-switch"><input class="k-switch-input" type="checkbox" role="switch" id="${options.id}" name="${options.name}"${options.on ? html ` checked` : ""}${attributes(options.attrs ?? {})}><span class="k-trk" aria-hidden="true"></span><span>${options.label}</span></label>`;
 }
+/** An on/off choice inside a composer, drawn as a filled pill chip whose mark fills when on: a checkbox with
+ * role=switch (posts `name=value` when on), so it works without script. Its longer words go under the box (`note`). */
+export function toggleChip(options) {
+    return html `<label class="k-tchip"><input class="k-switch-input" type="checkbox" role="switch" id="${options.id}" name="${options.name}"${options.on ? html ` checked` : ""}${attributes(options.attrs ?? {})}><span class="k-tchip-mark" aria-hidden="true"></span><span>${options.label}</span></label>`;
+}
 /** Two columns: label and one muted line | the control. `inline` keeps the control beside the label on a phone. */
 export function formRow(label, hint, control, variant = "") {
     return html `<div class="${cls("k-frow", variant)}"><div class="k-frow-l"><span class="k-frow-t">${label}</span>${hint ? html `<span class="k-frow-h">${hint}</span>` : ""}</div><div class="k-frow-c">${control}</div></div>`;
@@ -243,8 +250,9 @@ export function sendButton(options = {}) {
 ${options.stop ? html `<button class="k-send k-stop" type="button" aria-label="${options.stop.label ?? "Stop"}" title="${options.stop.label ?? "Stop"}"${attributes(options.stop.attrs ?? {})}>${icon("stop")}</button>` : ""}</span>`;
 }
 /**
- * The message box: one soft rounded container, the textarea grows from `rows` to `maxRows` lines then scrolls,
- * one bottom row inside (+ menu, the project as a quiet chip, small controls, the round send). Textarea
+ * The message box: one filled rounded object, the textarea grows from `rows` to `maxRows` lines then scrolls,
+ * one bottom row inside (+ menu, the project as a filled pill chip, toggle chips, the round send); its note and its
+ * refusal sit under the box (all inside `.k-composer-field`). Textarea
  * `<id>-text` (named `name`), refusal slot `<id>-err`, chosen project a hidden input `<id>-project` (named
  * `projectName`). A refused send keeps the words in the box with the reason in the error slot.
  */
@@ -252,16 +260,16 @@ export function composer(options) {
     const value = options.value ?? "";
     const textId = `${options.id}-text`;
     const project = options.project
-        ? html `<button class="k-composer-chip" type="button" data-k-composer-project="${options.id}" aria-haspopup="dialog" aria-label="Project: ${options.project.current}. Change"${options.disabled ? html ` disabled` : ""}><span data-k-project-name>${options.project.current}</span>${icon("chevron", true)}</button>\
+        ? html `<button class="k-composer-chip" type="button" data-k-composer-project="${options.id}" aria-haspopup="dialog" aria-label="Project: ${options.project.current}. Change"${options.disabled ? html ` disabled` : ""}><span data-k-project-name>${options.project.current}</span>${options.project.sub ? html `<span class="k-chip-sub">${options.project.sub}</span>` : ""}</button>\
 <input type="hidden" id="${options.id}-project" name="${options.project.name ?? "project"}" value="${options.project.current}" data-items="${JSON.stringify(options.project.items)}">`
         : html ``;
     const plus = options.plus
         ? html `<button class="k-composer-plus" type="button" data-k-composer-plus="${options.id}" aria-haspopup="dialog" aria-label="Add to your message"${options.disabled ? html ` disabled` : ""}>${icon("plus")}</button>`
         : html ``;
-    return html `<div class="${cls("k-composer", options.line && "line", options.disabled && "off", value.trim() && "has-text", options.working && "working")}" data-k-composer="${options.id}">\
+    return html `<div class="k-composer-field"><div class="${cls("k-composer", options.line && "line", options.disabled && "off", value.trim() && "has-text", options.working && "working")}" data-k-composer="${options.id}">\
 <label class="k-sr" for="${textId}">${options.label}</label><div class="k-composer-files" data-k-files="${options.id}"></div>\
 <textarea class="k-composer-ta" id="${textId}" name="${options.name}" rows="${options.rows ?? 1}" data-min="${options.rows ?? 1}" data-max="${options.maxRows ?? 8}"${attributes({ placeholder: options.placeholder, disabled: options.disabled === true, "aria-invalid": options.error ? "true" : undefined, "aria-describedby": `${options.id}-err`, ...options.textAttrs })}>${value}</textarea>\
-<div class="k-composer-bar">${plus}${project}${options.before ?? ""}<span class="k-grow"></span>${options.send}</div>\
+<div class="k-composer-bar">${plus}${project}${options.before ?? ""}<span class="k-grow"></span>${options.send}</div></div>\
 ${options.note ? html `<p class="k-note k-composer-note">${options.note}</p>` : ""}<div class="k-composer-err k-err" id="${options.id}-err" role="alert">${options.error ?? ""}</div></div>`;
 }
 /** A floating panel, hidden until its trigger (`overlayTrigger`) opens it: role=dialog, a labelled Close, Escape

package/dist/server/pages.js

@@ -703,7 +703,7 @@ export function createPagesHandlers(runtime) {
         // connects its builder; there is no separate restart or binding step.
         // The admission asks again, inside its registry lock and its transaction, about the repo it proves.
         const stillAllowed = (repo) => identities.generation() === decidedOn && visible(repo);
-        const admitted = await admitProject(store, { registryFile: options.registryPath ?? null, path: canonical, actor: { label: who.name, origin: "console" }, now, stillAllowed });
+        const admitted = await admitProject(store, { registryFile: options.registryPath ?? null, path: canonical, actor: { label: who.name, origin: "console" }, now, stillAllowed, resolveFolder: identities.resolveNow });
         if (!admitted.ok) {
             return void projectsScreen(response, who, admitted.reason === "not-git" ? "that path is not a git repository" : `that project is valid, but it could not be added — ${admitted.message}`, admitted.reason === "moved" ? 409 : 400, safeReturn(body.get("return")), "open");
         }
@@ -891,7 +891,7 @@ export function createPagesHandlers(runtime) {
             return projectsScreen(response, who, `the clone landed at ${cloned.target} but did not prove under the ceiling — it was left in place; enroll it by hand`, 400, "/", "clone");
         }
         const stillAllowed = (repo) => identities.generation() === decidedOn && visible(repo);
-        const joined = await admitProject(store, { registryFile: options.registryPath ?? null, path: admitted, actor: { label: who.name, origin: "console" }, now, stillAllowed });
+        const joined = await admitProject(store, { registryFile: options.registryPath ?? null, path: admitted, actor: { label: who.name, origin: "console" }, now, stillAllowed, resolveFolder: identities.resolveNow });
         if (!joined.ok) {
             return projectsScreen(response, who, `${cloned.target} is cloned but not added — ${joined.message}`, joined.reason === "moved" ? 409 : 400, "/", "clone");
         }

package/dist/server/render-new-task.js

@@ -7,7 +7,7 @@
 import { html, joinHtml, postForm } from "../html.js";
 import { projectName } from "../project.js";
 import { screen } from "./chrome.js";
-import { btn, composer, disclose, doc, docHeader, dock, field, ideas, input, note, phoneHeader, radios, select, sendButton, switchInput, textarea } from "./kit.js";
+import { btn, composer, disclose, doc, docHeader, dock, field, ideas, input, note, phoneHeader, radios, select, sendButton, textarea, toggleChip } from "./kit.js";
 const FORM_ID = "nt-form";
 const PLAN_ON = "The agent reads the code and asks you anything unclear, then writes the plan.";
 const PLAN_OFF = "The agent writes the plan straight from your words. Faster for small, obvious changes.";
@@ -51,8 +51,8 @@ suggestions = []) {
     const folder = !typed ? "" : field({ id: "nt-repo", label: "Project folder", hint: "No projects yet: name the folder of a git repository.",
         control: input({ id: "nt-repo", name: "repo", value: chosen, hint: true, attrs: { required: true, placeholder: "/path/to/repository", autocapitalize: "none", spellcheck: "false" } }) });
     const bar = joinHtml([
-        typed ? "" : select({ id: "nt-project", name: "repo", label: "Project", items, current: chosen, sm: true }),
-        switchInput({ id: "nt-plan", name: "plan-first", label: "Read code before planning", on: planOn, attrs: { value: "1" } }),
+        typed ? "" : select({ id: "nt-project", name: "repo", label: "Project", items, current: chosen, chip: true }),
+        toggleChip({ id: "nt-plan", name: "plan-first", label: "Read code before planning", on: planOn, attrs: { value: "1" } }),
     ]);
     const box = composer({
         id: "nt", name: "title", label: "What should change?", placeholder: "What should change? One or two sentences is enough.",

package/dist/server/render-tasks.js

@@ -1083,8 +1083,10 @@ export function decisionAnswerScript() {
         `var f=e.target;if(!f||!f.classList||!f.classList.contains("decide-inline"))return;` +
         `e.preventDefault();` +
         `var card=f.closest("[data-decision-id]");` +
-        `var page=f.action.replace(/\\/answer$/,"");` +
-        `fetch(f.action,{method:"POST",credentials:"same-origin",` +
+        // The action attribute, not f.action: a field named "action" would shadow that property (DOM clobbering).
+        `var to=new URL(HTMLFormElement.prototype.getAttribute.call(f,"action")||"",location.href).href;` +
+        `var page=to.replace(/\\/answer$/,"");` +
+        `fetch(to,{method:"POST",credentials:"same-origin",` +
         `headers:{"content-type":"application/x-www-form-urlencoded"},` +
         `body:new URLSearchParams(new FormData(f)).toString()})` +
         `.then(function(r){return r.text().then(function(t){return{r:r,t:t}})})` +

package/dist/setup-guide.js

@@ -6,6 +6,7 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 import { validModelId } from "./provider.js";
 import { planInstall, applyInstall, skillContent, SKILL_DIR, SKILL_FILE } from "./skills.js";
+import { folderAnswers } from "./folder-gate.js";
 export const ASSISTANTS = withAcp({
     claude: { name: "Claude", description: "Use Claude Code for your tasks." },
     codex: { name: "Codex", description: "Use your OpenAI coding assistant." },
@@ -37,6 +38,9 @@ export function modelChoices(provider, configured, home = homedir()) {
     return choices;
 }
 export function detectPreparation(repo) {
+    // In the console, a folder that hasn't answered a look lately is not read on its thread (folder-gate.ts).
+    if (!folderAnswers(repo))
+        return null;
     const has = (file) => existsSync(join(repo, file));
     if (has("package.json")) {
         if (has("pnpm-lock.yaml"))
@@ -59,6 +63,8 @@ export function detectPreparation(repo) {
 }
 /** Browser installation may write only this known file inside its project. */
 export function previewProjectInstructions(repo) {
+    if (!folderAnswers(repo))
+        return { ok: false, message: "This project folder didn't answer. Try again in a moment." };
     try {
         if (!lstatSync(repo).isDirectory())
             return { ok: false, message: "This project folder is unavailable. Reconnect it before adding instructions." };