Index: render/conf/users.t
==================================================================
--- render/conf/users.t
+++ render/conf/users.t
@@ -17,29 +17,56 @@
 		case [uint16](5) then acc:lpush('🗝') end
 		else acc:lpush('🕴')
 	end
 end
 
-local num_field = macro(function(acc,name,lbl,min,max,value)
+local push_num_field = macro(function(acc,name,lbl,min,max,value,disable)
 	name = name:asvalue()
 	lbl = lbl:asvalue()
+	local start = '<div class="elem small">'
+	local enabled = start .. string.format('<label for="%s">%s</label><input type="number" id="%s" name="%s" min="', name, lbl, name, name)
+	local disabled = start .. string.format('<label>%s</label><div class="txtbox">', lbl)
 	return quote
 		var decbuf: int8[21]
-	in acc:lpush([string.format('<div class="elem small"><label for="%s">%s</label><input type="number" id="%s" name="%s" min="', name, lbl, name, name)])
-		:push(lib.math.decstr(min, &decbuf[20]),0)
-		:lpush('" max="'):push(lib.math.decstr(max, &decbuf[20]),0)
-		:lpush('" value="'):push(lib.math.decstr(value, &decbuf[20]),0):lpush('"></div>')
+		if disable then
+			acc:lpush([disabled])
+			   :push(lib.math.decstr(value, &decbuf[20]),0):lpush('</div></div>')
+		else
+			acc:lpush([enabled]):push(lib.math.decstr(min, &decbuf[20]),0)
+			   :lpush('" max="'):push(lib.math.decstr(max, &decbuf[20]),0)
+			   :lpush('" value="'):push(lib.math.decstr(value, &decbuf[20]),0):lpush('"></div>')
+		end
 	end
 end)
 
-local terra 
-push_checkbox(acc: &lib.str.acc, name: pstr, lbl: pstr, on: bool, enabled: bool)
-	acc:lpush('<label><input type="checkbox" name="'):ppush(name):lpush('"')
-	if on then acc:lpush(' checked') end
-	if not enabled then acc:lpush(' disabled') end
-	acc:lpush('> '):ppush(lbl):lpush('</label>')
+local input_pusher = function(kind,wrap,uniq)
+	local fn = terra(acc: &lib.str.acc, name: pstr, val: pstr, lbl: pstr, on: bool, enabled: bool, class: pstr)
+		if wrap then acc:lpush('<label>') end
+		acc:lpush(['<input type="'..kind..'" name="']):ppush(name)
+		if not wrap then
+			acc:lpush('" id="'):ppush(name)
+			if uniq then acc:lpush('-'):ppush(val) end
+		end
+		if val:ref()   then acc:lpush('" value="'):ppush(val) end
+		if class:ref() then acc:lpush('" class="'):ppush(class) end
+		acc:lpush('"')
+		if on then acc:lpush(' checked') end
+		if not enabled then acc:lpush(' disabled') end
+		acc:lpush('>')
+		if not wrap then acc:lpush('<label for="'):ppush(name)
+		                 if uniq then acc:lpush('-'):ppush(val) end
+		                 acc:lpush('">')
+		            else acc:lpush(' ') end
+		acc:ppush(lbl):lpush('</label>')
+	end
+	fn.name = string.format('push-input-element<%q>',kind)
+	return fn
 end
+
+local push_checkbox = input_pusher('checkbox',true,false)
+local push_pickbox = input_pusher('checkbox',false,false)
+local push_radio = input_pusher('radio',false,true)
 
 local mode_local, mode_remote, mode_staff, mode_peers, mode_peons, mode_all = 0,1,2,3,4,5
 local terra 
 render_conf_users(co: &lib.srv.convo, path: lib.mem.ptr(pref)): pstr
 	if path.ct == 3 then
@@ -49,77 +76,76 @@
 		-- FIXME allow xids as well, for manual queries
 		if not user then goto e404 end
 		defer user:free()
 		if not co.who:overpowers(user.ptr) then goto e403 end
 
-		var islinkct = false
-		var cinp: lib.str.acc cinp:init(128)
-		var clnk: lib.str.acc clnk:compose('<hr>')
+		var cinp: lib.str.acc cinp:init(256)
+		var clnk: lib.str.acc clnk:init(512)
 		cinp:lpush('<div class="elem-group">')
+		if user.ptr.rights.rank > 0 and (co.who.rights.powers.elevate() or co.who.rights.powers.demote()) then
+			var max = co.who.rights.rank
+			if not co.who.rights.powers.elevate() then max = user.ptr.rights.rank end
+			var min = co.srv.cfg.nranks
+			if not co.who.rights.powers.demote() then min = user.ptr.rights.rank end
+
+			push_num_field(cinp, 'rank', 'rank', max, min, user.ptr.rights.rank, user.ptr.id == co.who.id)
+		end
 		if co.who.rights.powers.herald() then
 			var sanitized: pstr
 			if user.ptr.epithet == nil
 				then sanitized = pstr {ptr='', ct=0}
 				else sanitized = lib.html.sanitize(cs(user.ptr.epithet),true)
 			end
 			cinp:lpush('<div class="elem"><label for="epithet">epithet</label><input type="text" id="epithet" name="epithet" value="'):ppush(sanitized):lpush('"></div>')
 			if user.ptr.epithet ~= nil then sanitized:free() end
 		end
-		if user.ptr.rights.rank > 0 and (co.who.rights.powers.elevate() or co.who.rights.powers.demote()) then
-			var max = co.who.rights.rank
-			if not co.who.rights.powers.elevate() then max = user.ptr.rights.rank end
-			var min = co.srv.cfg.nranks
-			if not co.who.rights.powers.demote() then min = user.ptr.rights.rank end
-
-			num_field(cinp, 'rank', 'rank', max, min, user.ptr.rights.rank)
-		end
 		if co.who.rights.powers.invite() or co.who.rights.powers.discipline() then
 			var min = 0
 			if not (co.who.rights.powers.discipline() or
 				co.who.rights.powers.demote() and co.who.rights.powers.invite())
 					then min = user.ptr.rights.invites end
 			var max = co.srv.cfg.maxinvites
 			if not co.who.rights.powers.invite() then max = user.ptr.rights.invites end
 
-			num_field(cinp, 'invites', 'invites', min, max, user.ptr.rights.invites)
+			push_num_field(cinp, 'invites', 'invites', min, max, user.ptr.rights.invites, false)
 		end
-		cinp:lpush('</div><div class="check-panel">')
+		cinp:lpush('</div><div class="elem"><div class="check-panel">')
 
-		if (user.ptr.rights.rank == 0 and co.who.rights.powers.elevate()) or
-		   (user.ptr.rights.rank >  0 and co.who.rights.powers.demote()) then
-			push_checkbox(&cinp, 'staff', 'site staff member', user.ptr.rights.rank > 0, true)
+		if user.ptr.id ~= co.who.id and
+		   ((user.ptr.rights.rank == 0 and co.who.rights.powers.elevate()) or
+		    (user.ptr.rights.rank >  0 and co.who.rights.powers.demote())) then
+			push_checkbox(&cinp, 'staff', pstr.null(), 'site staff member', user.ptr.rights.rank > 0, true, pstr.null())
 		end
 
-		cinp:lpush('</div>')
+		cinp:lpush('</div></div>')
 
-		if co.who.rights.powers.elevate() or
-		   co.who.rights.powers.demote() then
+		if (co.who.rights.powers.elevate() or
+		   co.who.rights.powers.demote()) and user.ptr.id ~= co.who.id then
 			var map = array([lib.store.privmap])
-			cinp:lpush('<label>powers</label><div class="check-panel">')
+			cinp:lpush('<details><summary>powers</summary><div class="pick-list">')
 				for i=0, [map.type.N] do
-					if (co.who.rights.powers and map[i].priv) == map[i].priv then
-						var name: int8[64]
-						var on = (user.ptr.rights.powers and map[i].priv) == map[i].priv
-						var enabled = (on and co.who.rights.powers.demote()) or
+					if (co.who.rights.powers and map[i].priv):sz() > 0 then
+						var on = (user.ptr.rights.powers and map[i].priv):sz() > 0
+						var enabled = (     on  and co.who.rights.powers.demote() ) or
 									  ((not on) and co.who.rights.powers.elevate())
-						lib.str.cpy(&name[0], 'allow-')
-						lib.str.ncpy(&name[6], map[i].name.ptr, map[i].name.ct)
-						push_checkbox(&cinp, pstr{ptr=&name[0],ct=map[i].name.ct+6},
-							map[i].name, on, enabled)
+						var namea: lib.str.acc namea:compose('power-', map[i].name)
+						var name = namea:finalize()
+						push_pickbox(&cinp, name, pstr.null(), map[i].name, on, enabled, pstr.null())
+						name:free()
 					end
 				end
-			cinp:lpush('</div>')
+			cinp:lpush('</div></details>')
 		end
 
 		-- TODO black mark system? e.g. resolution option for badthink reports
 		-- adds a black mark to the offending user; they can be automatically banned
 		-- or brought up for review after a certain number of offenses; possibly lower
 		-- set of default privs for marked users
 
 		var cinpp = cinp:finalize() defer cinpp:free()
 		var clnkp: pstr
-		if islinkct then clnkp = clnk:finalize() else
+		if clnk.sz > 0 then clnkp = clnk:finalize() else
 			clnk:free()
 			clnkp = pstr { ptr='', ct=0 }
 		end
 		var unym: lib.str.acc unym:init(64)
 		unym:lpush('<a href="/')
@@ -135,11 +161,11 @@
 			inputcontent = cinpp;
 			linkcontent = clnkp;
 		}
 		var ret = pg:tostr()
 		pg.name:free()
-		if islinkct then clnkp:free() end
+		if clnkp.ct > 0 then clnkp:free() end
 		return ret
 	else
 		var modes = array(P'local', P'remote', P'staff', P'titled', P'peons', P'all')
 		var idbuf: int8[lib.math.shorthand.maxlen]
 		var ulst: lib.str.acc ulst:init(256)

Index: srv.t
==================================================================
--- srv.t
+++ srv.t
@@ -541,11 +541,11 @@
 		lib.bail('could not open configuration file ', befile)
 	end
 
 	var f = fr.val
 	var c: lib.mem.vec(lib.store.source) c:init(8)
-	var text: lib.str.acc text:init(64)
+	var text: lib.str.acc text:init(256)
 	do var buf: int8[64]
 		while true do
 			var ct = f:read(buf, [buf.type.N])
 			if ct == 0 then break end
 			text:push(buf, ct)

Index: static/style.scss
==================================================================
--- static/style.scss
+++ static/style.scss
@@ -604,25 +604,25 @@
 	margin: 0.15in 0;
 	> p:first-child { margin-top: 0; }
 	> p:last-child { margin-bottom: 0; }
 	.elem {
 		margin: 0.1in 0;
-		label { display:block; font-weight: bold; padding: 0.03in 0; }
-		.txtbox {
+		> label,summary { display:block; font-weight: bold; padding: 0.03in 0; }
+		> .txtbox {
 			@extend %serif;
 			box-sizing: border-box;
 			padding: 0.08in 0.1in;
 			border: 1px solid black;
 			background: tone(-55%);
 		}
-		input, textarea, .txtbox {
+		> input, textarea, .txtbox {
 			display: block;
 			width: 100%;
 		}
-		textarea { resize: vertical; min-height: 2in; }
+		> textarea { resize: vertical; min-height: 2in; }
 	}
-	:is(.elem,.elem-group) + %button { margin-left: 50%; width: 50%; }
+	body.conf & > %button { margin-left: 50%; width: 50%; }
 	.elem-group {
 		display: flex;
 		flex-flow: row;
 		> .elem {
 			flex-shrink: 1;
@@ -769,7 +769,108 @@
 		margin: 0.2em 0.1em;
 		cursor: default;
 	}
 }
 
-:is(%button, a[href]).neg { --co:  60 }
+:is(%button, a[href]).neg { --co:  30 }
 :is(%button, a[href]).pos { --co: -30 }
+
+.pick-list {
+	display: flex;
+	flex-flow: row wrap;
+	padding: 0.1in;
+	background-color: tone(-50%);
+	border: 1px solid tone(-53%);
+	border-top: 1px solid tone(-57%);
+	border-bottom: 1px solid tone(-45%);
+	margin: 0.3em 0;
+	details & { border: none; background: none; }
+	> input[type="radio"], > input[type="checkbox"] {
+		display: none;
+		&+label {
+			display: block;
+			flex-grow: 1;
+			padding: 0.08in 0.05in;
+			margin: 0.03in;
+			flex-basis: 15%;
+			cursor: pointer;
+			transition: 0.3s;
+			text-align: center;
+			border: 1px solid transparent;
+			text-shadow: 1px 1px black;
+			color: otone(15%);
+			border-radius: 4px;
+			&:nth-child(7n+1) { --co: -10 } //silly hack
+			&:nth-child(7n+2) { --co: -35 }
+			&:nth-child(7n+3) { --co: -20 }
+			&:nth-child(7n+4) { --co: -50 }
+			&:nth-child(7n+5) { --co: -40 }
+			&:nth-child(7n+6) { --co: -5  }
+			&:nth-child(7n+7) { --co: -25 }
+		}
+		&+label:hover {
+			background-color: otone(-35%);
+			color: white;
+		}
+		&:checked+label {
+			border-top: 1px solid otone(-10%);
+			border-bottom: 1px solid otone(-50%);
+			background: linear-gradient(to bottom, otone(-25%,-0.2), otone(-28%,-0.4) 35%, otone(-30%,-0.7));
+			color: white;
+			box-shadow: 0 0 0 1px tone(-60%);
+			&:hover {
+				border-top: 1px solid otone(10%);
+				border-bottom: 1px solid otone(-60%);
+				font-weight: bold;
+			}
+		}
+	}
+}
+
+details {
+	//border: 1px solid tone(-60%);
+	border-top: 1px solid tone(-40%);
+	border-bottom: 1px solid tone(-60%);
+	border-radius: 3px;
+	padding: 0.05in 0.3in;
+	margin: 0.08in 0;
+	// background: linear-gradient(to top, tone(-55%), tone(-50%));
+	background: tone(-50%);
+	& > summary {
+		display: block;
+		margin: 0 -0.25in;
+		cursor: pointer;
+		user-select: none;
+		text-decoration: underline;
+		text-decoration-color: tone(10%,-0.5);
+		text-underline-offset: 0.1em;
+		text-shadow: 1px 1px black;
+		font-weight: normal;
+
+		&:hover {
+			color: white;
+			text-decoration-color: tone(10%,-0.1);
+		}
+		&::marker { display: none; }
+		&::-webkit-details-marker { display: none; }
+		&::before {
+			display: inline-block;
+			content: '➤';
+			padding: 0 0.3em;
+			color: tone(-30%);
+			transition: 0.4s;
+		}
+	}
+	&[open] {
+		// background: linear-gradient(to bottom, tone(-55%), tone(-50%));
+		border-bottom: 1px solid tone(-40%);
+		border-top: 1px solid tone(-60%);
+		> summary {
+			font-weight: bold;
+			&::before {
+				transform: rotate(90deg) scale(1.1);
+				color: tone(-20%);
+				text-shadow: 0 0 8px tone(-30%);
+			}
+		}
+	}
+}

Index: str.t
==================================================================
--- str.t
+++ str.t
@@ -114,13 +114,21 @@
 	if a > b then return a else return b end
 end
 
 terra m.acc:init(run: intptr)
 	--lib.dbg('initializing string accumulator')
-	self.buf = [rawstring](lib.mem.heapa_raw(run))
-	self.run = run
-	self.space = run
+	if run == 0 then
+		lib.warn('attempted to allocate zero-length string accumulator')
+		self.buf = nil
+	else
+		self.buf = [rawstring](lib.mem.heapa_raw(run))
+		if self.buf == nil then
+			lib.warn('string buffer allocation failed, very little memory availble')
+		end
+	end
+	self.run = lib.trn(self.buf == nil, 0, run)
+	self.space = self.run
 	self.sz = 0
 	return self
 end;
 
 terra m.acc:free()
@@ -161,10 +169,11 @@
 	--var llen = len
 	if str == nil then return self end
 	--if str[len - 1] == 0xA then llen = llen - 1 end -- don't display newlines in debug output
 	-- lib.dbg('pushing "',{str,llen},'" onto accumulator')
 	if self.buf == nil then self:init(self.run) end
+	if self.buf == nil then lib.warn('attempted to push string onto unallocated accumulator') return self end
 	if len == 0 then len = m.sz(str) end
 	if len >= self.space - self.sz then
 		self.space = self.space + biggest(self.run,len + 1)
 		self.buf = [rawstring](lib.mem.heapr_raw(self.buf, self.space))
 	end

Index: view/conf-user-ctl.tpl
==================================================================
--- view/conf-user-ctl.tpl
+++ view/conf-user-ctl.tpl
@@ -3,7 +3,7 @@
 		<label>user</label>
 		<div class="txtbox">@name</div>
 	</div>
 	@inputcontent
 	<button>alter</button>
-	@linkcontent
 </form>
+@linkcontent