phase: 105_hidden_folders_toggle

All completion criteria verified. Everything is green.

**Phase 105 final verification pass — all criteria verified**

- Verified the full implementation in the working tree: `git_sources.include_hidden` column + alembic `0019` (dev DB at head, column present), `iter_importable_files`/`import_sources` flag support with `str(root)`-keyed map used by both walk and progress pre-walk, `GitSourcePatchIn` rename with optional fields, sync/CLI pipeline wiring (OR-collision), and the per-row "Hidden" checkbox + tag + error line on the Sources page
- Unit + integration: `uv run pytest` → exit 0 (2148 tests collected, all pass; this sandbox occasionally swallows pytest's final status line — exit codes verified)
- Coverage: `uv run pytest --cov=app --cov-report=term-missing` → **TOTAL 99%** (3879 stmts, 15 miss) — >90% gate ✓
- Dedicated E2E: `uv run pytest tests/e2e/test_hidden_folders_toggle.py -v --no-cov` → **6 passed in 23.20s** (DB up, in isolation)
- Regression E2E in isolation: `test_source_ignore_paths` 6 passed, `test_git_sources_admin` 6 passed, `test_local_directory_sources` 3 passed, `test_sync_button` 3 passed, `test_smoke` 3 passed
- Lint/types: `uv run ruff check .` + `uv run pyright` → clean (0 errors/warnings)

**Completion criteria:** (1) checkbox persists via PATCH 200 → "hidden on" tag + GET round-trips `include_hidden: true`; failure path reverts box + `role="alert"` canned message ✓; (2) flag OFF byte-identical (only `visible.md` indexed), ON indexes `.hidden/note.md` into the KB catalog, `EXCLUDED_DIRS` excluded both states ✓; (3) A2: flag OFF → `detail.pruned==1`, doc gone from catalog ✓; (4) PATCH bool-only/list-only/both/neither no-op, phase-89 fixed 422s unchanged, 404, anonymous 403 (incl. bool-only body) ✓; (5) env-fallback rows render no checkbox, WCAG-clean (aria-label, keyboard focus, visible label, text tag) ✓; (6) full gate green ✓; (7) commit left to the harness per instructions (no `git add`/`commit` run; phase files untouched).

**Deviations:** none — no defects found; no code changes were needed on this pass.

**Next pending phase:** `.agents/phases/todo/98_sync_summary_visibility`.

frontend/assets/styles.css

@@ -2729,6 +2729,56 @@ details.thinking .thinking-text ul { margin: 0 0 0.5rem; }
   white-space: nowrap;
 }
 
+/* Phase 105 (A5): the per-row "Hidden" checkbox — the actions
+   cell, LEFT of the "Ignore paths" button (JS builds it,
+   git-sources.js makeRow). A native labeled checkbox: the
+   visible "Hidden" text + the checkbox's own aria-label
+   (full source value). ~44px hit height matches the action
+   buttons; :focus-visible via the GLOBAL rule (L146) — no
+   per-control ring needed. */
+.git-source-hidden {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.4rem;
+  height: 44px;
+  padding: 0 0.5rem;
+  font-size: 0.8rem;
+  color: var(--ink);
+  cursor: pointer;
+  user-select: none;
+  white-space: nowrap;
+}
+/* --brand checkbox fill: the native check renders in --bg on
+   --brand — VERIFIED (phase 105): built-in dark theme
+   #0f0a0a on #f43f5e = 5.2:1 (the house brand pairing;
+   measured 5.35:1 — WCAG AA ≥4.5:1); every theme-tab-saved
+   palette is gated by the tab's eight-pair contrast check
+   (theme.js PAIRS — "bg" on "brand" at AA_MIN 4.5), so the
+   checked-state ratio stays AA in all themes. */
+.git-source-hidden input[type="checkbox"] {
+  width: 1.05rem;
+  height: 1.05rem;
+  margin: 0;
+  accent-color: var(--brand);
+  cursor: pointer;
+}
+.git-source-hidden:disabled { opacity: 0.5; cursor: wait; }
+/* Phase 105 (A5): the "hidden on" state tag — a copy of the
+   .git-source-ignore-count idiom (TEXT + background, never
+   color alone — WCAG 1.4.1: --ink on --bg 16.7:1). */
+.git-source-hidden-count {
+  display: inline-block;
+  margin-left: 0.55rem;
+  padding: 0.08rem 0.5rem;
+  border: 1px solid var(--line);
+  border-radius: 999px;
+  font-size: 0.72rem;
+  font-weight: 600;
+  color: var(--ink);
+  background: var(--bg);
+  white-space: nowrap;
+}
+
 /* Env-fallback rows carry no Remove (nothing is stored to remove) —
    the tag says where the row comes from (brand pair, 6.9:1). */
 .git-source-env-tag {