Refusing can say why, and the why is an instruction

"Don't" told the model it was refused and nothing else, so it did the one
sensible thing left and asked what you would rather -- a whole round spent on
something you knew when you pressed the button. "Give reason" opens a box beside
it, and what you write goes back with the refusal.

The reason changes what the model is *told*, not only what it reads, and that is
the whole of the feature. `_not_allowed` branches: given nothing to go on, "say
what you were going to do and ask what they would prefer" is right; given a
reason it is exactly wrong, because the answer is already on the screen above and
the model spends a round asking for it again. So it is pointed at the reason and
told to carry on from it. The "do not look for a way round" half is kept either
way -- that half is about the refusal and holds regardless.

A card-level field rather than `text.<key>`. One card covers everything in the
round for the reason the primitive exists, so one reason answers the round; and
on an approval card `text.<key>` already means a corrected command, which is a
different thing arriving in the same shape. Read only on a refusal, so a reason
typed and then abandoned by pressing Allow cannot travel with a permission.
Bounded where the Reply is built, so nothing downstream thinks about length, and
put on the tool event as well as in the result -- a transcript saying a step was
refused without saying why is one you had to have been watching to understand.

It is also the one thing in a tool result that is genuinely not untrusted: the
reader's own words, stated as theirs, needing no fence.

Both halves of the control are in the DOM with one hidden and the textarea
disabled while hidden, which is the rule the edit box beside it already states:
a field created by a click submits nothing when the click handler fails, and an
empty `reason` arriving would have to be told from one somebody cleared.

The version bump is not incidental. chat.css changed and the service worker
caches it under a name keyed on the version, so without it the first reload
serves the old stylesheet.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/lembas/api/chats.py

@@ -1584,6 +1584,14 @@ async def answer_interaction(
     form = await request.form()
     verdict = str(form.get("verdict") or "").strip()
 
+    # Why they refused, in their own words. A card-level field rather than a
+    # `text.<key>` one: the card covers everything in the round, so one reason
+    # answers the round -- and on an approval card `text.<key>` already means a
+    # corrected command, which is a different thing arriving in the same shape.
+    # Only read on a refusal, so a reason typed and then abandoned by pressing
+    # Allow cannot travel with a permission.
+    reason = str(form.get("reason") or "").strip() if verdict == interaction.DENY else ""
+
     # Gathered in two passes because one field can now arrive several times: a
     # question the model marked `multiple` is checkboxes, and every ticked one
     # posts under the same name. A `setdefault` would keep the first and lose
@@ -1642,6 +1650,7 @@ async def answer_interaction(
         interaction_id,
         verdict=verdict,
         answers=answers,
+        reason=reason,
     )
 
     response = Response(status_code=status.HTTP_204_NO_CONTENT)