Keep working after declining folder trust
“Keep working after declining folder trust”: after an explicit decline, “Continue without folder” opens a no-project chat with a copy of the draft text. The original text and attachments stay in their original chat. The card explains that attachments are not carried. Nothing is sent automatically, and no trust or authentication default changes.
The declined folder stays untrusted; its project hooks and configuration do not load. This does not create a filesystem sandbox: a local full-access agent can still reach the declined folder by absolute path. A filesystem boundary and full attachment transfer are separate work.
The copy-only approach avoids coordinating attachment storage, unfinished file reads and session selection. Failed selection or navigation leaves the original draft intact; edits during selection remain in the original chat.
Gallery: agent-pane.trust-ask/untrusted, agent-pane.trust-ask/untrusted-repo
Design: onboarding and composer recovery guidance. Validation: focused text-copy, failed-selection, navigation and source-preservation regressions; catalog checks pass; before/after below.
Before / after
Declined-folder state, Linux gallery (Chromium, 360 px). Before, the decline bar truncated its text and clipped Undo off the edge. After, it wraps into a card with Trust folder, Continue without folder and Undo, and says that only draft text is copied.
| Before | After | |
|---|---|---|
| Dark |  |  |
| Light |  |  |
The landing lane viewed these after images before landing. The gallery run is at 166f5853; the card UI is unchanged through 9d5eb718, where the later commits changed recovery logic and variable names only.
Agent session: agent session