The canvas toolbar (ADR-0005, the 2026-08-29 shell amendment, ruling 8A).

8A splits the chrome: the package ships everything that operates on the document that is open - this toolbar, the tabbed inspector, the drawer, the grouped palette - and the host ships everything that decides which document is open. So there is no document name here, no switcher, no theme control and no compile button, and their absence is the ruling rather than an omission. The host renders those into the editor's :header slot.

What is here is zoom, the two fits, and the two document metrics.

The fits set a mode, they do not measure

Fit width and Fit active are modes, not computed percentages, and that is decision 7's constraint showing through: nothing in this section adds a JavaScript hook, and a fit that resolves to a number needs the rendered width of an element, which only the client knows. So the toolbar records which fit the author asked for, the canvas carries it as data-fit, and a stylesheet does what a stylesheet can do with it. The measured form arrives with the read-only measurement hook the decision 7 amendment records (sb-k7r); until then a mode is the honest half, and it is the half a server can test.

Fit active is disabled when there is no block for it to fit, because "fit the active block" with no active block is a control whose only outcome is nothing happening. What counts as one is fittable?, and it is two things rather than one: the author's selection, and the run marks a host is painting. An observer watching a run selects nothing - the marks are the run's own answer to which block matters - so a toolbar that asked only about the selection left that reader with a control disabled over a canvas with marks on it.

It is the canvas panel's header row (parity item 1.2)

The toolbar is not a floating strip of controls above a bare canvas: it is the header row of the canvas panel, and it says which panel it heads. The Canvas heading and the nested tree chip are what make the three panes read as three panes - the palette and the inspector name themselves the same way - and without a name a row of unlabelled buttons is the only pane in the editor that has to be recognised by its contents.

Zoom is ONE segmented control rather than three loose buttons: minus, readout, plus, in one bordered group. That grouping is the whole claim the control makes - the readout is not a fourth button and the two steps are two ends of one thing - and it is made in CSS off .sb-toolbar__zoom rather than in markup, so the events underneath are the same three the shell has always sent.

The two metrics are chips for the same reason the nested tree label is: they are read, never pressed, and a chip is the shape this editor gives a read-only fact. They stay right-aligned, which is where a reader looks last and where a number that changes under them belongs.

Undo and redo are here too

They are not in 8A's list, which enumerates what was newly arranged rather than what the toolbar already held. They operate on the open document, which is the package's half of the split by 8A's own rule.