Two selects that never wrote anything, and a queue

The approval card in Auto mode and the missing /effort were one bug. Both
selects hung their hx-patch on an empty sibling form reached by form="…",
and htmx binds a trigger to the annotated element: change fires on the
select and bubbles to its ancestors, which a sibling is not. The live rows
read agent_mode=manual and params_json={} while the browser showed Auto and
Effort: high. policy.py was never involved.

The verb moves onto the control; the empty form stays as value scoping,
which is the half of the CLAUDE.md note that was right. conftest gains
control_named so a test asserts the element carrying the name carries the
verb, rather than asserting the markup that was there throughout.

The composer's highlight was a third instance of the same carelessness in
CSS: .tok-mention is written for the transcript and scoped to nothing, so
the mirror painted its token in accent-coloured monospace over the
textarea's own text. Scoped under .msg; the mirror restates transparency
and font rather than inheriting them, and bleeds by box-shadow.

/effort is now offered before the first prompt and _new_chat reads it.
/index re-walks the project directory on demand, file_write drops the
listing it just invalidated, and the index ladder falls through to SFTP on
a host that refuses exec instead of returning nothing.

A second message during a reply is queued rather than starting a second
concurrent generation: a real Message row with queued set, so it survives a
restart and can be withdrawn. _drain hands one on at the end of a reply,
_inject takes one in at a tool-round boundary so an agent can be steered
mid-task. Stop leaves the queue undelivered. The terminal's Auto toggle
becomes off/copy/send, and send posts straight to the chat without touching
the composer.

@ now offers notes, skills, this chat's attachments and a URL to fetch; a
knowledge base attaches as a reference rather than a copy. copy_document
carries provenance, which was the one attach path that dropped it.

Also fixes an unrelated live bug: the round loop compared against the
global MAX_ROUNDS of 3 while sizing itself from the agent budget of 40, so
agent replies stopped after three rounds and reported forty.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/lembas/web/templates/chat/_message.html

@@ -13,8 +13,16 @@
   escaped plain text for everyone else.
 #}
 {% set streaming = (message.role == "assistant" and not message.complete) %}
+{#
+  Typed while the previous reply was still being written, and not yet handed to
+  a model. It is in the transcript and it is not in the request. It must never
+  carry `sse-connect` -- a queued turn with a streaming shell on it would be the
+  second concurrent reply the queue exists to prevent.
+#}
+{% set queued = (message.role == "user" and message.queued) %}
 
-<article class="msg msg--{{ message.role }}" id="msg-{{ message.id }}"
+<article class="msg msg--{{ message.role }}{{ ' msg--queued' if queued }}"
+         id="msg-{{ message.id }}"
   {% if streaming %}
          hx-ext="sse"
          sse-connect="/api/chats/{{ chat.id }}/messages/{{ message.id }}/stream"
@@ -210,7 +218,24 @@
     </div>
     {% endif %}
 
-    {% if not streaming %}
+    {% if queued %}
+    {# Nothing has been sent to any model. Both buttons sit on the bubble they
+       act on rather than in a toast somewhere, and Edit is deliberately absent:
+       editing rewinds and then starts a reply, which on a row you can press
+       while another reply is streaming is a second concurrent generation behind
+       a pencil. Discard and retype is the honest affordance. #}
+    <footer class="msg__actions msg__actions--queued">
+      <span class="msg__note">{{ icon("clock", "icon--sm") }} Waiting to be sent</span>
+      <button class="btn btn--sm" type="button"
+              hx-post="/api/chats/{{ chat.id }}/messages/{{ message.id }}/send-now"
+              hx-target="#thread" hx-swap="innerHTML">Send now</button>
+      <button class="btn btn--sm" type="button"
+              hx-post="/api/chats/{{ chat.id }}/messages/{{ message.id }}/discard"
+              hx-target="#msg-{{ message.id }}" hx-swap="outerHTML"
+              data-confirm-button="Discard this message?">Discard</button>
+    </footer>
+    <div hidden id="msg-body-{{ message.id }}">{{ message.content }}</div>
+    {% elif not streaming %}
     <footer class="msg__actions">
       <button class="btn btn--icon btn--sm" type="button"
               data-copy="msg-body-{{ message.id }}" aria-label="Copy message">