npm - @galda/cli - Versions diffs - 0.10.112 → 0.10.114 - Mend

@galda/cli 0.10.112 → 0.10.114

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/CLAUDE.md CHANGED Viewed

@@ -57,6 +57,11 @@
 - **UI（app/index.html・app/theme.css 等）に触る前に、必ず `docs/design/DESIGN-RULES.md` を読むこと**。特に §1.5 レイアウトの憲法（10条）と §5.5 美学。条文に反する実装はせず、変えたい場合は理由を添えて仲田さんの決定を仰ぐ。
 - app/ のUIファイル編集時はhook（tools/design_rules_hook.sh）が自動でリマインドする。リマインドが出たら読んだ上で作業すること。
 - 実装時の詳細契約は `docs/design/CTO-HANDOFF.md`（CDO→CTO引き継ぎ書）に従う。**既存パーツで作れない新しい画面・コンポーネントが必要になったら、自作せず実装前にCDOへ依頼すること。**
+- 🔴 **UIの文言は英語（Masa決定 2026-07-31）**。ボタン・ラベル・見出し・プレースホルダ・空状態・折りたたみの開閉ラベル・トースト/エラーなど**製品が書く文字は全て英語**。日本語のUI文字列を新しく足さない。
+  - 境界は**「誰の言葉か」**。製品が書くもの＝英語。**ユーザーやworkerの発言をそのまま出している所（依頼文・返信・報告・質問の原文）は原文のまま**＝翻訳も言語強制もしない。
+  - **コードのコメントは対象外**（日本語のままでよい）。
+  - 🟡 **例外＝日英の出し分け（`failureLang`/`prefersJapaneseText`/`FAILURE_COPY`/`BILLING_COPY`/`AUTH_COPY`/`summarizeAttention`）は現状維持**（Masa決定 2026-07-31）。**依頼文の言語に追従するのは仕様**。「UIは英語」を根拠にこれらの `ja` を削除しない。英語化するのは**無条件に日本語が出る固定ラベル**だけ。
+  - 全文＝`docs/design/DESIGN-RULES.md` §5.5「文章・コンテンツの品」。
 ## プロダクトの不変条件（実装前に読む・2026-07-30 追加）

package/LICENSE.md ADDED Viewed

@@ -0,0 +1,33 @@
+# Galda CLI license
+Copyright (c) 2026 Kodo Inc. All rights reserved.
+This software is proprietary and source-available. The source is distributed
+so that you can read, audit, and verify what runs on your machine. It is not
+open source.
+## You may
+- Install and run this software, for personal or commercial purposes, subject
+  to a valid Galda subscription where one is required.
+- Read, inspect, and audit the source code, including for security review.
+- Modify it locally for your own use.
+## You may not
+- Redistribute, resell, sublicense, or host this software, in whole or in
+  part, whether modified or unmodified.
+- Use the source code to build or operate a competing product or service.
+- Remove or obscure this notice.
+## No warranty
+This software is provided "as is", without warranty of any kind, express or
+implied, including but not limited to the warranties of merchantability,
+fitness for a particular purpose, and non-infringement. In no event shall the
+copyright holder be liable for any claim, damages, or other liability arising
+from, out of, or in connection with this software or its use.
+## Contact
+https://galda.app

package/app/index.html CHANGED Viewed

@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
 <meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover">
 <title>Galda</title>
 <script>
   // app/index.html is a server-backed SPA, not a standalone artifact. Rendering the
@@ -31,7 +31,7 @@
   /* Design tokens + light/dark palette live in app/theme.css (design/CDO role).
      Everything below consumes those tokens; never hard-code colors here. */
   *{box-sizing:border-box}
-  html,body{height:100%}
+  html,body{height:100%;overflow-x:hidden;overscroll-behavior:none}
   body{margin:0;background:var(--canvas);color:var(--ink);font-family:var(--ui);
     font-size:14px;font-variant-numeric:tabular-nums;-webkit-font-smoothing:antialiased;display:flex;flex-direction:column;overflow:hidden}
   button{font:inherit}
@@ -333,6 +333,14 @@
     color:var(--ink2);font:inherit;font-size:12px;cursor:pointer;text-align:left;width:100%}
   .appopt:hover{background:rgba(var(--tint),.06);color:var(--ink)}
   .appopt.active{color:var(--ink);background:var(--hair2)}
+  /* A chooser is already open somewhere: dim the glyph, no surface, and no hover
+     answer — the row must not look pressable while it cannot open a second one. */
+  .appopt:disabled{cursor:default}
+  .appopt:disabled,.appopt:disabled .nm{color:var(--ink3)}
+  .appopt:disabled:hover{background:transparent}
+  /* the row's own rule sets .nm to full --ink, so say it again at that weight */
+  .ctxmenu .appopt.ctxopen:disabled .nm{color:var(--ink3)}
+  .ctxmenu .appopt.ctxopen:disabled svg{opacity:.45}
   .appopt svg{width:13px;height:13px;stroke:currentColor;stroke-width:1.7;fill:none;stroke-linecap:round;stroke-linejoin:round}
   .modelsel{position:relative}
   .modelbtn{font-family:var(--mono);font-size:10.5px;text-transform:capitalize}
@@ -2325,7 +2333,7 @@
   .redesign .gh-del .ghm{color:#f85149}
   .redesign .gh-hi{border-radius:2px;padding:0 1px}
   .redesign .gh-add .gh-hi{background:rgba(46,204,113,.55)} .redesign .gh-del .gh-hi{background:rgba(248,81,73,.5)}
-  /* huge-diff footer (spec §7): "…+N 行 · GitHub で開く ↗" */
+  /* huge-diff footer (spec §7): "…+N 行 · Open on GitHub ↗" */
   .redesign .ghfoot{margin-top:8px;font-family:var(--mono);font-size:11.5px;color:var(--ink3);display:flex;gap:2px;align-items:center;flex-wrap:wrap}
   .redesign .ghfoot .ghopen{color:var(--ink2);text-decoration:none}
   .redesign .ghfoot .ghopen:hover{color:var(--blue)}
@@ -2378,6 +2386,10 @@
   .redesign .txr .w{flex:0 0 46px;font-size:11px;color:var(--ink3)}
   .redesign .txr.you .w,.redesign .txr.cl .w{color:var(--ink);font-weight:600}
   .redesign .txr .m{flex:1;min-width:0;color:var(--ink2)}
+  /* The existing left-hand Activity / Conversation disclosure owns the full text.
+     When it is closed, its preview is capped at three rendered lines; opening the
+     same › control reveals the unchanged transcript. */
+  .redesign .lacc:not([open]) .lfirst .m{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:3;overflow:hidden}
   .redesign .txr.cl .m{color:var(--ink)}
   .redesign .txr.tool .m{color:var(--ink2);font-family:var(--mono);font-size:12px}
   .redesign .txr.tool .m b{color:var(--ink);font-weight:600}
@@ -2578,7 +2590,7 @@
      magnification / uniform brighten (§5.5: whole-panel uniform, no dark tint).
      DOM panel backgrounds/shadows/blur are stripped; text reads via R2 "wells"
      (local re-blur + tint behind dense text groups) + --tsh. ---- */
-  #glassgl{position:fixed;inset:0;width:100vw;height:100vh;display:none;z-index:-1;pointer-events:none}
+  #glassgl{position:fixed;inset:0;width:100dvw;height:100dvh;display:none;z-index:-1;pointer-events:none}
   body[data-theme="glass"]{background:#0a0a0b}
   body[data-theme="glass"][data-layout="flagship"]{background:transparent} /* WebGL draws the bg (photo is NOT the CSS #themebg here) */
   body[data-theme="glass"][data-layout="flagship"] #glassgl{display:block}
@@ -2650,7 +2662,7 @@
   /* ---- TB縁アニメ canvas (§6.5 確定: 既定=パルス×2番目色・TBのみ周回・Queは含まない).
      Same overlay recipe as the flagship #fx: fixed, pointer-transparent, drawn by the
      TBEDGE rAF loop (JS) which runs only while an animation is selected. ---- */
-  #fx{position:fixed;inset:0;width:100vw;height:100vh;pointer-events:none;z-index:9}
+  #fx{position:fixed;inset:0;width:100dvw;height:100dvh;pointer-events:none;z-index:9}
   /* ---- TB面 (compbg) × flagship: the layout/theme base rules above outrank the generic
      preset rule (cascade order), so re-layer the tint over each base surface here at the
      end of the sheet. §6.5: TB面は全テーマに重ねられる. ---- */
@@ -2830,7 +2842,7 @@
      moves Review/To Do into a right drawer, and exposes project switching from
      the top-left current-project button. Desktop flagship (>640px) is untouched. ---- */
   @media (max-width: 640px){
-    html,body{height:100dvh}
+    html,body{height:100dvh;overflow:hidden;overscroll-behavior:none;touch-action:pan-y}
     body[data-layout="flagship"]{overflow:hidden}
     body[data-layout="flagship"] #fsRoot{height:100dvh;flex-direction:column;padding:8px 24px max(14px, calc(env(safe-area-inset-bottom) + 10px));gap:8px;
       overflow:hidden;position:relative;--fscenterw:100%} /* Masa: side margins — narrower cards (8→18px) */
@@ -2882,7 +2894,7 @@
     /* Masa: composer was too tall — compact it (ChatGPT-like). Controls + send stay on ONE row
        (nowrap; the model/agent chips shrink first, the send never shrinks). */
     body[data-layout="flagship"] #fsRoot .composer{padding:8px 10px;gap:6px;border-radius:14px}
-    body[data-layout="flagship"] #fsRoot .composer textarea{font-size:15px;line-height:1.3;padding:1px 2px 0;max-height:90px}
+    body[data-layout="flagship"] #fsRoot .composer textarea{font-size:16px;line-height:1.3;padding:1px 2px 0;max-height:90px}
     body[data-layout="flagship"] #fsRoot .crow{flex-wrap:nowrap;gap:6px}
     /* collapse the agent button to its icon (drop the "Claude Code" label) so the row fits
        one line with the send fully visible; model + effort keep their text. */
@@ -3051,7 +3063,7 @@
     <div class="spacer"></div>
     <!-- Feedback 7: layout switcher — flip the arrangement live. Increment 1:
          現行 / タスク中央 / 3列カンバン (CSS reflow). 中央フロー・1列 = increment 2. -->
-    <div class="laysel" id="laysel" title="レイアウトを切り替え">
+    <div class="laysel" id="laysel" title="Switch layout">
       <button class="laybtn" data-layout="bflow">B・Center-flow</button>
       <button class="laybtn" data-layout="flagship">Flagship</button>
       <button class="laybtn" data-layout="current">現行</button>
@@ -3060,7 +3072,7 @@
     </div>
     <!-- theme switch — the 5 release themes, English registered names only (v3 §6.5;
          Glass archived 2026-07-07 · legacy "dark" no longer selectable). -->
-    <div class="laysel" id="themesel" title="テーマを切り替え">
+    <div class="laysel" id="themesel" title="Switch theme">
       <button class="laybtn" data-theme="studio">Studio</button>
       <button class="laybtn" data-theme="gradient">Gradient</button>
       <button class="laybtn" data-theme="banff">Banff</button>
@@ -3348,12 +3360,12 @@
 <div class="overlay revfloat" id="summaryOverlay">
   <div class="modal peramodal">
     <div class="perahead">
-      <div class="peratitle">レビューサマリ<span class="peracount" id="peraCount">0</span></div>
+      <div class="peratitle">Review summary<span class="peracount" id="peraCount">0</span></div>
       <div class="peratabs" id="peraTabs"></div>
       <button class="mbtn ghost" id="peraClose">Close</button>
     </div>
     <div class="peraask">
-      <input type="text" id="peraAsk" placeholder="質問する… 例: 今クリティカルなのは？ / 失敗だけまとめて / 優先度順に">
+      <input type="text" id="peraAsk" placeholder="Ask… e.g. What's critical now? / Just the failures / Sorted by priority">
       <button type="button" class="askbtn" id="peraAskBtn" aria-label="Ask"><svg viewBox="0 0 24 24"><path d="M12 19V5M5 12l7-7 7 7"/></svg></button>
     </div>
     <div class="peraanswer" id="peraAnswer" hidden></div>
@@ -3703,7 +3715,7 @@ const TASK_PRIORITIES = ['高', '中', '低'];
 function prioBadge(t){
   const p = TASK_PRIORITIES.includes(t.priority) ? t.priority : '中';
   return `<div class="priosel" data-priosel="${t.id}">
-    <button type="button" class="priobtn prio-${p}" data-priobtn="${t.id}" title="優先度を変更">${p}</button>
+    <button type="button" class="priobtn prio-${p}" data-priobtn="${t.id}" title="Change priority">${p}</button>
     <div class="priomenu" data-priomenu="${t.id}">${TASK_PRIORITIES.map((x) =>
       `<button type="button" class="prioopt${x === p ? ' active' : ''}" data-priotask="${t.id}" data-val="${x}">${x}</button>`).join('')}</div>
   </div>`;
@@ -3721,7 +3733,7 @@ const DEFAULT_REVIEW_DEFINITION = {
 };
 // Shown (faint) under Review when no definition is set yet, so it's obvious the
 // line is editable and what it's for.
-const REVIEW_DEF_HINT = '「英語でプルリクエストを作成して」など、ゴールの完了定義を設定できます';
+const REVIEW_DEF_HINT = 'e.g. "Write the pull request in English" — set what done means for a goal';
 function reviewDefinitionFor(projectId){ return state.reviewDefinitions[projectId] ?? DEFAULT_REVIEW_DEFINITION; }
 // A saved definition on disk may predate the reviewCard/language fields (old
 // review-definitions.json entries are never re-validated on server load), so
@@ -4233,7 +4245,8 @@ function saShotsListHtml(shots){
   if (!list.length) return '';
   if (list.length === 1) return saShotFigHtml(list[0]);
   const older = list.slice(0, -1);
-  return `${saShotFigHtml(list[list.length - 1])}<details class="rshotfold"><summary>ほかの${older.length}枚を表示</summary>${older.map(saShotFigHtml).join('')}</details>`;
+  const label = `Show ${older.length} older screenshot${older.length === 1 ? '' : 's'}`;
+  return `${saShotFigHtml(list[list.length - 1])}<details class="rshotfold"><summary>${label}</summary>${older.map(saShotFigHtml).join('')}</details>`;
 }
 function saPlainPairHtml(pair){
   const col = (sh, label) => `<div class="ba-col"><span class="balabel">${label}</span><img class="proofimg" src="${esc(sh.url)}" alt="${esc(label)}" loading="lazy"></div>`;
@@ -4296,7 +4309,7 @@ function reviewDigestHtml(rows){
       </div>
     </div>`;
   };
-  return `<div class="digestcard"><div class="digesthead">今のレビューまとめ<span class="digestcount">${rows.length}</span></div>
+  return `<div class="digestcard"><div class="digesthead">Pending reviews<span class="digestcount">${rows.length}</span></div>
     <div class="digestrows">${rows.map(item).join('')}</div></div>`;
 }
@@ -4411,7 +4424,7 @@ function reviewActionsHtml(g){
     <div class="rvhead"><span class="dot"></span>レビュー — ${esc(sum.headline)} · ${esc(sum.detail)}</div>
     <div class="rvwhat">${esc(sum.what)}</div>
     <div class="rvitems">${items}</div>
-    <button type="button" class="rvopen reqopen" data-goal="${g.id}">レビューチェックリストを開く →</button>
+    <button type="button" class="rvopen reqopen" data-goal="${g.id}">Open the review checklist →</button>
   </div>`;
 }
@@ -4432,7 +4445,7 @@ function goalRow(g){
     // shouldShowGoalSummary/GOAL_COMPLETE_STATUSES と揃える(そちらは純関数として
     // テスト済み — この行はブラウザ側の複製)。
     const summary = GOAL_COMPLETE_STATUSES.includes(g.status) && g.summary
-      ? `<div class="gsummary"><div class="gslabel"><span class="dot"></span>Manager結論サマリ</div>${esc(g.summary)}</div>` : '';
+      ? `<div class="gsummary"><div class="gslabel"><span class="dot"></span>Manager summary</div>${esc(g.summary)}</div>` : '';
     const pr = g.pr ? `<a class="prlink" href="${esc(g.pr)}" target="_blank">${g.status === 'review' ? 'In review — open the Pull Request' : 'Open the Pull Request'}</a>`
       : g.prError ? (() => {
         const meta = (() => { const raw = g.prErrorClass || inferErrorClass(`PR step failed: ${g.prError}`, g.agent); const C = FAILURE_COPY[failureLang()]; return { ...raw, title: C.infra.title, body: C.infra[raw.reason] || C.infra.pr, copy: C }; })();
@@ -4464,7 +4477,7 @@ function goalRow(g){
 function extRow(c){
   const short = esc((c.hash ?? '').slice(0, 7));
   const when = c.date ? new Date(c.date).toLocaleString() : '';
-  return `<div class="extrow"><span class="exthash">${short}</span><span class="extsubj">${esc(c.subject ?? '')} · Claude Code CLIより</span>${when ? `<span class="extdate">${esc(when)}</span>` : ''}</div>`;
+  return `<div class="extrow"><span class="exthash">${short}</span><span class="extsubj">${esc(c.subject ?? '')} · from Claude Code CLI</span>${when ? `<span class="extdate">${esc(when)}</span>` : ''}</div>`;
 }
 // Mirrors engine/lib.mjs mergeGoalTimeline() — kept in sync manually since
@@ -4753,7 +4766,7 @@ function renderTasks(){
       // half-finished item leaves Attention for good instead of piling up. With
       // no parent goal we fall back to skipping just the task.
       const clear = g
-        ? `<button class="retrybtn skip" data-archivegoal="${g.id}" title="このゴールを片付ける（再作業なし）">Archive</button>`
+        ? `<button class="retrybtn skip" data-archivegoal="${g.id}" title="Retire this goal (no rework)">Archive</button>`
         : `<button class="retrybtn skip" data-skipbtn="${t.id}">Dismiss</button>`;
       cond = `${reason} <button class="retrybtn" data-retrybtn="${t.id}">Retry</button> ${clear}`;
     } else if (t.reply && g) {
@@ -4881,7 +4894,7 @@ function renderTasks(){
   const dAllClear = dGreen === digestCount && !dBlocked;
   // S5 summary (deterministic — no LLM). ⤢ opens the ペライチ dashboard above.
   const reviewDigest = digestCount
-    ? `<div class="s5sum" id="summaryEntry" title="Open the review summary (ペライチ)">
+    ? `<div class="s5sum" id="summaryEntry" title="Open the review summary">
         <span class="s5exp"><svg width="13" height="13" viewBox="0 0 24 24"><path d="M15 4h5v5M20 4l-7 7M9 20H4v-5M4 20l7-7"/></svg></span>
         <span class="s5ring" style="background:conic-gradient(var(--green) 0 ${dPct}%, var(--hair2) ${dPct}% 100%)"><span class="s5in">${dGreen}/${digestCount}</span></span>
         <span class="s5tx"><span class="s5hl">${dAllClear ? 'Ready to review' : `${dGreen} of ${digestCount} ready`}</span><span class="s5sub">${dAllClear ? 'all green' : dGreen === digestCount ? 'blocked needs attention' : 'some failing'} · ${dBlocked ? `${dBlocked} blocked` : 'none blocked'}</span></span>
@@ -4905,7 +4918,7 @@ function renderTasks(){
     // (see saItemHtml's carriesBody) instead — the list row stays just the ask.
     return `<div class="task revrow" data-goal="${g.id}"><div class="ic pending"></div><div class="tx"><div class="name">${esc(checkLine)} ${goalSourceBadge(g.source)}</div>
      <div class="cond">${prChipHtml(g.pr, g.prClosed, 'prbig')}</div>
-     <div class="qreplyrow" data-qreplyrow="${g.id}"${state.qreplyOpen.has(g.id) ? '' : ' hidden'}><input type="text" data-qreplyinput="${g.id}" placeholder="直したい点を書いて送信（Todoに戻して再作業）"><button type="button" class="qreplysend" data-qreplysend="${g.id}" aria-label="Send">${ICONS.up}</button></div></div>
+     <div class="qreplyrow" data-qreplyrow="${g.id}"${state.qreplyOpen.has(g.id) ? '' : ' hidden'}><input type="text" data-qreplyinput="${g.id}" placeholder="What should change? Sends it back to To Do for rework"><button type="button" class="qreplysend" data-qreplysend="${g.id}" aria-label="Send">${ICONS.up}</button></div></div>
      <div class="revquick">
        <button type="button" class="qbtn ok" data-qapprove="${g.id}" title="Approve">${ICONS.check}</button>
        <button type="button" class="qbtn no" data-qdismiss="${g.id}" title="Send back">${ICONS.close}</button>
@@ -5057,7 +5070,7 @@ function renderTasks(){
       // A question keeps the row open: the answer lands under this very box.
       if (body.outcome !== 'answer') state.qreplyOpen.delete(Number(gid));
       await refresh();
-    } catch { showErr('送信に失敗しました'); }
+    } catch { showErr('Could not send.'); }
   };
   for (const b of $('tasklist').querySelectorAll('[data-qreplysend]')) {
     b.onclick = (e) => { e.stopPropagation(); sendQReply(b.dataset.qreplysend, $('tasklist').querySelector(`[data-qreplyinput="${b.dataset.qreplysend}"]`)); };
@@ -5223,8 +5236,8 @@ function openGoalheadReply(id, btn){
   wrap.appendChild(inp); wrap.appendChild(snd); head.insertAdjacentElement('afterend', wrap); inp.focus();
   const send = async () => { const t = inp.value.trim(); if (!t) return;
     let r; try { r = await fetch(withKey(`/api/goals/${id}/reply`), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(replyWorkerPayload({ text: t })) }); }
-    catch { showErr('未開始のゴールは編集を使ってください'); return; }
-    if (!r.ok) showErr('未開始のゴールは編集を使ってください'); await refresh(); };
+    catch { showErr("This goal hasn't started — use Edit instead."); return; }
+    if (!r.ok) showErr("This goal hasn't started — use Edit instead."); await refresh(); };
   inp.onkeydown = (e) => { if (e.key === 'Enter' && !e.isComposing) { e.preventDefault(); send(); } if (e.key === 'Escape') wrap.remove(); };
   snd.onclick = send;
 }
@@ -5249,8 +5262,8 @@ function wirePriority(){
       try {
         const r = await fetch(withKey(`/api/tasks/${b.dataset.priotask}/priority`), { method: 'PUT',
           headers: { 'content-type': 'application/json' }, body: JSON.stringify({ priority: b.dataset.val }) });
-        if (!r.ok) showErr('優先度の変更に失敗しました。'); else await refresh();
-      } catch { showErr('優先度の変更に失敗しました。'); }
+        if (!r.ok) showErr('Could not change the priority.'); else await refresh();
+      } catch { showErr('Could not change the priority.'); }
     };
   }
 }
@@ -5395,21 +5408,21 @@ function renderRdEditor(){
       <span class="rdhint">Any task whose headless-browser check didn't pass (or never ran) forces Review too.</span></span></label>
     <label class="rdrow rddesc"><span><span class="rdlabel">Review instructions</span>
       <span class="rdhint">Goes into the pull request body, so whoever reviews it knows what to look for. The worker doesn't read this while it works — instructions for the AI belong in your project's CLAUDE.md / AGENTS.md.</span>
-      <textarea class="rdtext" id="rdDescription" maxlength="500" rows="2" placeholder="例：「変更前後のスクショを見比べて、余白が揃っているか確認してください」など、レビューする人に伝えたいこと">${esc(state.rdDraft.description ?? '')}</textarea></span></label>
+      <textarea class="rdtext" id="rdDescription" maxlength="500" rows="2" placeholder="e.g. "Compare the before/after screenshots and check the spacing lines up" — what the reviewer should look at">${esc(state.rdDraft.description ?? '')}</textarea></span></label>
-    <div class="rdsub">レビューカードに出す項目 / Review card fields</div>
+    <div class="rdsub">Review card fields</div>
     <label class="rdrow"><input type="checkbox" id="rdCardScreenshots"${state.rdDraft.reviewCard.screenshots ? ' checked' : ''}>
-      <span><span class="rdlabel">スクショ / Screenshots</span>
-      <span class="rdhint">レビューカードに証跡(スクショ/GIF)を表示する。</span></span></label>
+      <span><span class="rdlabel">Screenshots</span>
+      <span class="rdhint">Show the evidence (screenshots/GIFs) on the review card.</span></span></label>
-    <div class="rdsub">出力言語 / Output language</div>
+    <div class="rdsub">Output language</div>
     <label class="rdrow"><select id="rdLanguage">
         <option value="auto"${state.rdDraft.language === 'auto' ? ' selected' : ''}>Auto (match request)</option>
         <option value="ja"${state.rdDraft.language === 'ja' ? ' selected' : ''}>日本語</option>
         <option value="en"${state.rdDraft.language === 'en' ? ' selected' : ''}>English</option>
       </select>
       <span><span class="rdlabel">Review language</span>
-      <span class="rdhint">レビュー要約(確認/変更)などManagerが生成する文言の言語。</span></span></label>`;
+      <span class="rdhint">Language for the text the Manager writes, such as the review summary (What to check / What changed).</span></span></label>`;
   $('rdDefaultWantsPR').addEventListener('change', (e) => { state.rdDraft.defaultWantsPR = e.target.checked; });
   $('rdRequireVerify').addEventListener('change', (e) => { state.rdDraft.requireVerifyPass = e.target.checked; });
   $('rdDescription').addEventListener('input', (e) => { state.rdDraft.description = e.target.value; });
@@ -6315,7 +6328,7 @@ async function sendReviewDismiss(text){
   // these paths, so passing them in the reply text is enough — no API change.
   const imgs = reviewAttach.slice();
   const fullText = imgs.length
-    ? `${text}${text ? '\n\n' : ''}添付画像（workerはこのパスをReadで確認できます）: ${imgs.map((a) => a.path).join(', ')}`
+    ? `${text}${text ? '\n\n' : ''}Attached images (the worker can open these paths with Read): ${imgs.map((a) => a.path).join(', ')}`
     : text;
   try {
     const body = await replyToGoal(goal.id, fullText, '#reviewFixInput');
@@ -7204,7 +7217,7 @@ function renderFsBoard(){
   // flagship mock; a new goal enters via the composer). Earlier this was To-Do-only, which read
   // as "position is off" against the Artifact (Masa 2026-07-18).
   const col = (name, stg, count, html, stage) =>
-    `<section class="fsbcol" data-stage="${stage}" style="--stg:${stg}"><div class="fsbcolhd"><span class="fsbdot"></span><span class="fsbcolnm">${name}</span>${stage === 'doing' ? `<button class="fsbcpause" data-fspause="1" aria-pressed="${paused ? 'true' : 'false'}" title="${paused ? 'Resume — 再開' : 'Pause — 一時停止'}">${paused ? '<svg viewBox="0 0 24 24"><path d="M8 5v14l11-7z"/></svg>' : '<svg viewBox="0 0 24 24"><rect x="6" y="5" width="4" height="14" rx="1"/><rect x="14" y="5" width="4" height="14" rx="1"/></svg>'}</button>` : ''}<span class="fsbcnt">${count}</span><button class="fsbcadd" data-fsnew="1" title="New goal"><svg viewBox="0 0 24 24"><path d="M12 5v14M5 12h14"/></svg></button></div><div class="fsbbody">${html || '<div class="fsbempty">—</div>'}</div><button class="fsbadd" data-fsnew="1" title="New goal"><span class="paplus"></span>New</button></section>`;
+    `<section class="fsbcol" data-stage="${stage}" style="--stg:${stg}"><div class="fsbcolhd"><span class="fsbdot"></span><span class="fsbcolnm">${name}</span>${stage === 'doing' ? `<button class="fsbcpause" data-fspause="1" aria-pressed="${paused ? 'true' : 'false'}" title="${paused ? 'Resume' : 'Pause'}">${paused ? '<svg viewBox="0 0 24 24"><path d="M8 5v14l11-7z"/></svg>' : '<svg viewBox="0 0 24 24"><rect x="6" y="5" width="4" height="14" rx="1"/><rect x="14" y="5" width="4" height="14" rx="1"/></svg>'}</button>` : ''}<span class="fsbcnt">${count}</span><button class="fsbcadd" data-fsnew="1" title="New goal"><svg viewBox="0 0 24 24"><path d="M12 5v14M5 12h14"/></svg></button></div><div class="fsbbody">${html || '<div class="fsbempty">—</div>'}</div><button class="fsbadd" data-fsnew="1" title="New goal"><span class="paplus"></span>New</button></section>`;
   // Depth card (CDO, Masa 2026-07-17): #NN + title, colour on the dot only, and a continuous
   // stroke + n/m ONLY while the goal is actually in flight. The column already names the
   // status, so the card never repeats it. Stopped/failed carry NO bar (a dead bar would claim
@@ -7412,7 +7425,7 @@ function renderFsReview(){
     const rnote = g0?.retest?.passed ? `<span class="rnote">✓ ${esc(g0.retest.note)}</span>` : '';
     const incompleteNote = r.incompleteRequirementCount ? `<span class="rnote">${r.incompleteRequirementCount} requirement${r.incompleteRequirementCount === 1 ? '' : 's'} need review</span>` : '';
     const infraNote = r.verificationInfraError?.detail
-      ? `<span class="rnote">検証基盤エラー · <button type="button" class="retrybtn" data-goalreverify="${r.goalIds[0]}">再検証</button></span>`
+      ? `<span class="rnote">Verification system error · <button type="button" class="retrybtn" data-goalreverify="${r.goalIds[0]}">Re-verify</button></span>`
       : '';
     const conflictNote = g0?.conflictsWith?.length
       ? `<span class="rstat conflict">Potential conflict with ${esc(g0.conflictsWith.map((id) => `#${id}`).join(', '))}</span>` : '<span class="rstat">In review</span>';
@@ -7660,7 +7673,7 @@ function renderFsTodo(){
     }).join('')
     + finalizingGoals.map((g) => `<div class="drow"><div class="trow now" data-fsgoalrow="${g.id}"><span class="st run"></span>${noSpan(g.id)}<span class="tt">${tt(g.reviewSummary?.check || g.plan?.[0] || g.text, 60)}</span><span class="stword wait">Finalizing</span>${fsActs(g.id)}</div></div>`).join('')
     // 一時停止したゴールは Doing に「Paused」1行(アンバー)で留める＋Resume。走行/中断行は上と needsRows で抑止済み。
-    + pgoals.filter((g) => pausedGoalIds.has(g.id)).map((g) => `<div class="drow"><div class="trow now" data-fsgoalrow="${g.id}"><span class="st run int"></span>${noSpan(g.id)}<span class="tt">${tt(g.reviewSummary?.check || g.plan?.[0] || g.text, 60)}</span><span class="stword int">Paused</span><button class="ab txt" data-fspause="1" title="Resume — 再開">Resume</button></div></div>`).join('');
+    + pgoals.filter((g) => pausedGoalIds.has(g.id)).map((g) => `<div class="drow"><div class="trow now" data-fsgoalrow="${g.id}"><span class="st run int"></span>${noSpan(g.id)}<span class="tt">${tt(g.reviewSummary?.check || g.plan?.[0] || g.text, 60)}</span><span class="stword int">Paused</span><button class="ab txt" data-fspause="1" title="Resume">Resume</button></div></div>`).join('');
   // NEEDS YOU: stopped/errored work that used to fold into Doing, now under its own caption so
   // it no longer reads as "still in flight" (Masa 2026-07-19). Three kinds share it, each
   // keeping the affordances it already had — nothing about the failed-task and blocked-goal
@@ -7743,7 +7756,7 @@ function renderFsTodo(){
     : `<span class="num fstdlabel">${nextCount} next · ${doingCount} doing${later.length ? ` · ${later.length} later` : ''}</span>`;
   el.innerHTML = `<div class="lhd sechd" id="fsTodoHd"><span class="hd fstdlabel">To Do</span>${_todoNum}<span class="fold fstdlabel">▾</span></div>
     <div class="tl">
-      ${(doingRows || paused) ? `<span class="tlcap tlcap-doing" style="padding-top:0">Doing<button class="tlcap-pause" data-fspause="1" aria-pressed="${paused ? 'true' : 'false'}" title="${paused ? 'Resume — 再開' : 'Pause — 一時停止'}">${paused ? '<svg viewBox="0 0 24 24"><path d="M8 5v14l11-7z"/></svg>' : '<svg viewBox="0 0 24 24"><rect x="6" y="5" width="4" height="14" rx="1"/><rect x="14" y="5" width="4" height="14" rx="1"/></svg>'}</button></span>${doingRows}` : ''}
+      ${(doingRows || paused) ? `<span class="tlcap tlcap-doing" style="padding-top:0">Doing<button class="tlcap-pause" data-fspause="1" aria-pressed="${paused ? 'true' : 'false'}" title="${paused ? 'Resume' : 'Pause'}">${paused ? '<svg viewBox="0 0 24 24"><path d="M8 5v14l11-7z"/></svg>' : '<svg viewBox="0 0 24 24"><rect x="6" y="5" width="4" height="14" rx="1"/><rect x="14" y="5" width="4" height="14" rx="1"/></svg>'}</button></span>${doingRows}` : ''}
       ${needsRows ? `<span class="tlcap needs"${(doingRows || paused) ? '' : ' style="padding-top:0"'}>Needs you</span>${needsRows}` : ''}
       ${rejected.length ? `<span class="tlcap rejcap"${(doingRows || paused) || needsRows ? '' : ' style="padding-top:0"'}>Dismissed<span class="num">${rejected.length}</span></span>${rejected.map((g) => `<div class="trow up rej" data-fsgoalrow="${g.id}"><span class="st rej"></span>${noSpan(g.id)}<span class="tt">${tt(g.text, 70)}</span><span class="acts"><button class="ab" data-fsreopen="${g.id}" title="Reopen — back to Review">${FS_ICONS.reopen}</button><button class="ab" data-fsrejdel="${g.id}" title="Delete — discard (closes the PR)">${FS_ICONS.del}</button></span></div>`).join('')}` : ''}
       ${(parkedRows || upRows) ? `<span class="tlcap"${(doingRows || paused) || needsRows || rejected.length ? '' : ' style="padding-top:0"'}>Next up</span>${parkedRows}${upRows}` : ''}
@@ -7833,8 +7846,8 @@ function renderFsTodo(){
   for (const b of el.querySelectorAll('[data-fsreply]')) b.onclick = (e) => { e.stopPropagation();
     fsInlineInput(b.closest('.trow'), '', 'Reply to this goal…', async (text) => {
       let r; try { r = await fetch(withKey(`/api/goals/${b.dataset.fsreply}/reply`), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(replyWorkerPayload({ text })) }); }
-      catch { showErr('未開始のゴールは編集を使ってください'); return; }
-      if (!r.ok) showErr('未開始のゴールは編集を使ってください'); await refresh();
+      catch { showErr("This goal hasn't started — use Edit instead."); return; }
+      if (!r.ok) showErr("This goal hasn't started — use Edit instead."); await refresh();
     }); };
   for (const b of el.querySelectorAll('[data-fsedit]')) b.onclick = (e) => { e.stopPropagation();
     const g = state.goals.find((x) => x.id === Number(b.dataset.fsedit));
@@ -9392,7 +9405,7 @@ async function send(){
   if (bind) {
     const batt = state.attach.slice();
     const fullText = batt.length
-      ? `${text}${text ? '\n\n' : ''}添付画像（workerはこのパスをReadで確認できます）: ${batt.map((a) => a.path).join(', ')}`
+      ? `${text}${text ? '\n\n' : ''}Attached images (the worker can open these paths with Read): ${batt.map((a) => a.path).join(', ')}`
       : text;
     // A bound send belongs to this goal's persisted thread.  Do not also add it
     // to the center conversation feed: that made a task reply appear below the
@@ -9479,14 +9492,14 @@ async function askQuestion(){
   if (!q) return;
   const btn = $('peraAskBtn'), out = $('peraAnswer');
   inp.disabled = true; if (btn) btn.disabled = true;
-  out.hidden = false; out.className = 'peraanswer loading'; out.textContent = '考え中…';
+  out.hidden = false; out.className = 'peraanswer loading'; out.textContent = 'Thinking…';
   try {
     const r = await fetch(withKey('/api/ask'), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ question: q }) });
     const body = await r.json().catch(() => ({}));
-    if (!r.ok) throw new Error(body.error || '質問に失敗しました');
-    out.className = 'peraanswer'; out.textContent = body.answer || '(回答なし)';
+    if (!r.ok) throw new Error(body.error || 'Could not ask.');
+    out.className = 'peraanswer'; out.textContent = body.answer || '(no answer)';
   } catch (e) {
-    out.className = 'peraanswer error'; out.textContent = e.message || '質問に失敗しました';
+    out.className = 'peraanswer error'; out.textContent = e.message || 'Could not ask.';
   } finally {
     inp.disabled = false; if (btn) btn.disabled = false;
   }
@@ -9513,8 +9526,8 @@ function peraThumb(r, cls = ''){
 }
 function peraActs(r){
   const ids = r.goalIds.join(',');
-  const okTitle = r.plan ? 'Approve plan — execute' : '承認';
-  return `<span class="pgo"><button class="pbtn ok" data-peraok="${ids}" title="${okTitle}">✓</button><button class="pbtn no" data-perano="${ids}" title="差し戻し">✕</button></span>`;
+  const okTitle = r.plan ? 'Approve plan — execute' : 'Approve';
+  return `<span class="pgo"><button class="pbtn ok" data-peraok="${ids}" title="${okTitle}">✓</button><button class="pbtn no" data-perano="${ids}" title="Send back">✕</button></span>`;
 }
 // Plan-review body: the proposed plan, shown verbatim in the card so the
 // reviewer approves (→ execute) or dismisses (→ revise) with the plan in view.
@@ -9674,7 +9687,7 @@ function latestGoalRunForOutcome(goalId, tasks, outcome){
   const cutoff = outcome ? taskSortTime(outcome) : Infinity;
   const prev = runs.find((t) => t.id !== outcome?.id && taskSortTime(t) <= cutoff) || (!outcome ? runs[0] : null);
   if (!prev) return null;
-  const note = '前回のpreviewを継承しています: 最新replyは新しいpreviewを宣言しませんでした。 / Inherited previous preview: the latest reply did not declare a new preview.';
+  const note = 'Inherited previous preview: the latest reply did not declare a new preview.';
   return {
     taskId: prev.id,
     attemptId: taskAttemptId(outcome) || taskAttemptId(prev),
@@ -9928,7 +9941,7 @@ function saLedgerRows(){
 // 3-for-2 replacement, an add with no matching del, a rewritten line where almost
 // nothing survives — all keep today's behaviour exactly (tint only, no span).
 // How many body rows the diff really has, ignoring the display cap. A big change used
-// to be cut at 80 rows with nothing said (SPEC §7 asks for "…+N 行 · GitHub で開く ↗"
+// to be cut at 80 rows with nothing said (SPEC §7 asks for "…+N 行 · Open on GitHub ↗"
 // precisely so a reviewer is never shown a slice that looks like the whole thing).
 // Same skip rules as saUnifiedToGh below — headers and @@ markers are not rows.
 function saDiffRowCount(diff){
@@ -10092,7 +10105,7 @@ function saMsgRowsHtml(msgs, expanded){
 }
 // Structured GitHub diff (REVIEW-CARD-SPEC §7): renders {o,n,t,c,h} rows with a
-// word-level highlight (h) and, for a huge change, a "…+N 行 · GitHub で開く ↗"
+// word-level highlight (h) and, for a huge change, a "…+N 行 · Open on GitHub ↗"
 // footer (only linking to GitHub when a PR exists). Mirrors the flagship artifact's
 // ghDiffHtml so the app pixel-matches. `more` = extra unshown line count; `pr` = url.
 // Request fold threshold (Masa 2026-07-27): Request is supposed to be the user's short
@@ -10128,7 +10141,7 @@ function saGhDiffRowsHtml(rows, more, pr, goalId){
     } else if (l.h) { const h = esc(l.h); code = code.replace(h, `<span class="gh-hi">${h}</span>`); }
     return `<div class="ghl ${cls}"><span class="gho">${l.o ?? ''}</span><span class="ghn">${l.n ?? ''}</span><span class="ghm">${mk}</span><span class="ghc">${code}</span></div>`;
   }).join('');
-  const foot = more ? `<div class="ghfoot"><span>…+${more} 行</span>${pr ? ` · <a class="ghopen" href="${esc(pr)}" target="_blank" rel="noopener">GitHub で開く ↗</a>` : ''}</div>` : '';
+  const foot = more ? `<div class="ghfoot"><span>…+${more} more lines</span>${pr ? ` · <a class="ghopen" href="${esc(pr)}" target="_blank" rel="noopener">Open on GitHub ↗</a>` : ''}</div>` : '';
   if (goalId != null && rows.length > SA_DIFF_FOLD_OVER) {
     const open = SA.diffOpen.has(goalId);
     const label = open ? 'Collapse' : `Show all <span class="n">${rows.length}</span> lines`;
@@ -10441,7 +10454,7 @@ function saItemHtml(it, i){
   const reportBody = it.report ? `<div class="rreport">${mdLite(it.report, { images: false })}</div>` : '';
   const infra = it.verificationInfraError;
   const infraBody = infra?.detail
-    ? `<div class="rinfra"><p class="rbody">${esc(infra.detail)}</p><button type="button" class="retrybtn" data-saact="reverify:${i}">再検証</button></div>`
+    ? `<div class="rinfra"><p class="rbody">${esc(infra.detail)}</p><button type="button" class="retrybtn" data-saact="reverify:${i}">Re-verify</button></div>`
     : '';
   // ── Screenshots (P2, Masa 2026-07-22): the pictures the AI took of its own result.
   // Full width, at their own aspect — a four-variant comparison sheet is unreadable
@@ -10465,7 +10478,7 @@ function saItemHtml(it, i){
     if (it.recording) proofInner += saVideoFigHtml(it.recordingUrl);
   }
   // ── What changed (spec §4/§7): description + files summary (always) + the diff, which
-  // peeks then "…+N 行 · GitHub で開く ↗" for a huge change (no GitHub link when there's no
+  // peeks then "…+N 行 · Open on GitHub ↗" for a huge change (no GitHub link when there's no
   // PR). Structured recorded rows (ghRows) win over a git/client unified diff. Dropped
   // entirely for a conversational task. ──
   // No prose here (P1, Masa 2026-07-22): reviewSummary.changed was the intake AI writing
@@ -11471,7 +11484,9 @@ function renderCtxBar(){
       // LRM, so the rtl clipping trims the HEAD of the path without reversing the text
       + `<span class="pt">\u200e${esc(folderShort(r.dir))}</span></button>`)
     .join('');
-  const openRow = `<button type="button" class="appopt ctxopen" id="ctxopenfolder" title="Open the OS folder chooser"><svg viewBox="0 0 24 24"><path d="M3 7a2 2 0 012-2h4l2 2h8a2 2 0 012 2v8a2 2 0 01-2 2H5a2 2 0 01-2-2z"/><path d="M12 11v6M9 14h6"/></svg><span class="nm">Open folder…</span></button>`;
+  // Redrawing the menu must not hand back a second chooser: carry the disabled
+  // state that setFolderPickerBusy() put on the live button.
+  const openRow = `<button type="button" class="appopt ctxopen${folderPickerBusy ? ' busy' : ''}" id="ctxopenfolder"${folderPickerBusy ? ' disabled' : ''} title="Open the OS folder chooser"><svg viewBox="0 0 24 24"><path d="M3 7a2 2 0 012-2h4l2 2h8a2 2 0 012 2v8a2 2 0 01-2 2H5a2 2 0 01-2-2z"/><path d="M12 11v6M9 14h6"/></svg><span class="nm">Open folder…</span></button>`;
   menu.innerHTML = `${opts}${openRow}<div class="ctxmsg" id="ctxdirmsg"></div>`;
 }
 // Workspace mode is fixed to the isolated worktree (clean separate checkout). The
@@ -11517,9 +11532,22 @@ async function setProjectFolder(dir){
 // project at the chosen path. This is also correct through the authenticated
 // relay: it forwards the request to the account owner's loopback engine, so the
 // picker opens on that owner's Mac rather than on the hosted relay.
+// One chooser at a time. The dialog opens over in the engine process and can take
+// a moment to appear (and may not come to the front at all), so a second tap used
+// to open a second dialog: ten taps left someone with ten dialogs to dismiss. The
+// request stays in flight for as long as the dialog is up, so "a request is out"
+// is exactly "a dialog is open" — no timer to guess with.
+let folderPickerBusy = false;
+function setFolderPickerBusy(busy){
+  folderPickerBusy = busy;
+  const btn = $('ctxopenfolder');
+  if (btn) { btn.disabled = busy; btn.classList.toggle('busy', busy); }
+}
 async function openFolderNative(){
+  if (folderPickerBusy) return;
   const msg = $('ctxdirmsg');
   const say = (t, bad) => { if (msg) { msg.textContent = t; msg.classList.toggle('bad', Boolean(bad)); } };
+  setFolderPickerBusy(true);
   say('Opening the folder chooser…');
   try {
     const r = await fetch(withKey('/api/choose-folder'), { method: 'POST' });
@@ -11529,6 +11557,7 @@ async function openFolderNative(){
     if (body.unsupported) { say('This engine can’t open a folder dialog on this system.', true); return; }
     say(body.error || 'Could not open the folder chooser.', true);
   } catch { say('Could not reach the engine.', true); }
+  finally { setFolderPickerBusy(false); }
 }
 $('ctxdirbtn').onclick = (e) => {
   e.stopPropagation();

package/bin/manager-for-ai.mjs CHANGED Viewed

@@ -149,21 +149,56 @@ await import(pathToFileURL(join(ROOT, 'engine', 'server.mjs')).href);
 // stable `<id>.<domain>` from any device. Local-first is preserved — the agent
 // still runs here; the relay is only a door. Opt-in via RELAY_URL for now; the
 // public build will default it to the deployed relay. See relay/DEPLOY.md.
+// The user can turn remote access OFF in Settings (docs/SECURITY.md). That is
+// the discoverable form of `RELAY_URL=`: no relay child, no outbound socket.
+// The switch is written by the SERVER process, so we read the file here and
+// watch it, letting the toggle take effect without restarting the CLI.
+const { readRelayPref, resolveRelayEnabled, RELAY_PREF_FILE } =
+  await import(pathToFileURL(join(ROOT, 'engine', 'relay-pref.mjs')).href);
+// Same resolution the server and relay-client use, spelled out here because the
+// DATA_DIR above is scoped to the single-instance check.
+const RELAY_DATA_DIR = process.env.MANAGER_HOME
+  ?? (existsSync(join(ROOT, '.git')) ? join(ROOT, 'engine') : join(homedir(), '.manager-for-ai'));
 if (process.env.RELAY_URL) {
   const { spawn } = await import('node:child_process');
   const { superviseRelay } = await import(pathToFileURL(join(ROOT, 'engine', 'relay-supervisor.mjs')).href);
+  const { watch } = await import('node:fs');
+  let sup = null; // non-null exactly while the relay child is supervised
   // Supervise the relay-client: if the CHILD exits (uncaught throw, single-
   // instance lock refuse) we bring it back with backoff, otherwise the app goes
   // silently offline ("Unsent"). A tight crash loop (a config/lock error) trips a
   // circuit breaker so we stop hammering and say why. relay-client heals its own
   // dropped socket; this heals the whole process dying. See engine/relay-supervisor.mjs.
-  const sup = superviseRelay({
-    spawn: () => spawn(process.execPath, [join(ROOT, 'engine', 'relay-client.mjs')], { stdio: 'inherit', env: process.env }),
-    log: ({ code, signal, delayMs }) => say(`relay-client exited (code ${code ?? 'n/a'}${signal ? `, ${signal}` : ''}) — restarting in ${Math.round(delayMs / 1000)}s`),
-    onGiveUp: () => say('relay-client keeps exiting immediately — giving up; run `npx @galda/cli --signin` or check RELAY_URL'),
-  });
-  const stop = () => sup.stop();
-  process.on('exit', stop);
-  for (const sig of ['SIGINT', 'SIGTERM']) process.on(sig, () => { stop(); process.exit(0); });
-  say(`relay: connecting to ${process.env.RELAY_URL} — your fixed URL goes live once you sign in`);
+  const startRelay = () => {
+    if (sup) return;
+    sup = superviseRelay({
+      spawn: () => spawn(process.execPath, [join(ROOT, 'engine', 'relay-client.mjs')], { stdio: 'inherit', env: process.env }),
+      log: ({ code, signal, delayMs }) => say(`relay-client exited (code ${code ?? 'n/a'}${signal ? `, ${signal}` : ''}) — restarting in ${Math.round(delayMs / 1000)}s`),
+      onGiveUp: () => say('relay-client keeps exiting immediately — giving up; run `npx @galda/cli --signin` or check RELAY_URL'),
+    });
+    say(`relay: connecting to ${process.env.RELAY_URL} — your fixed URL goes live once you sign in`);
+  };
+  const stopRelay = () => { sup?.stop(); sup = null; };
+  const applyPref = () => {
+    const want = resolveRelayEnabled({ relayUrl: process.env.RELAY_URL, pref: readRelayPref(RELAY_DATA_DIR) });
+    if (want && !sup) startRelay();
+    else if (!want && sup) { stopRelay(); say('relay: remote access turned off in Settings — no outbound connection'); }
+  };
+  applyPref();
+  if (!sup) say('relay: remote access is off (Settings) — running fully local');
+  // The switch is written by the SERVER process (POST /api/relay-pref), so the
+  // only way we learn about a click is to watch the file. Same cross-process
+  // idiom as relay-status.json / relay-takeover.req.
+  try {
+    watch(RELAY_DATA_DIR, (_e, name) => { if (name === RELAY_PREF_FILE) applyPref(); }).unref();
+  } catch { /* watching is a nicety: the choice still applies on next start */ }
+  process.on('exit', stopRelay);
+  for (const sig of ['SIGINT', 'SIGTERM']) process.on(sig, () => { stopRelay(); process.exit(0); });
 }

package/docs/SECURITY.md ADDED Viewed

@@ -0,0 +1,183 @@
+# Security and permissions
+What Galda runs on your machine, what it can touch, and what leaves it.
+Every claim below is a statement about the code in this package. Source
+references are given so you can check them yourself in the published tarball
+(`npm pack @galda/cli`).
+日本語の要約は末尾の「日本語」節にあります。
+## What Galda is
+Galda does not contain an AI model and does not talk to one. It starts the
+Claude Code or Codex CLI that is already installed and signed in on your
+machine, and gives you a place to queue work and review the result.
+That has a direct consequence for your code: **your code is never uploaded to
+Galda for inference.** Claude Code and Codex connect to Anthropic or OpenAI
+directly, on your own subscription. Galda is not in that path and never sees
+that traffic.
+## Installation
+**Galda has no install scripts.** `package.json` declares only `start` and
+`test`; there is no `preinstall`, `install`, `postinstall`, or `prepare`.
+Nothing in this package executes as a side effect of `npm install` or `npx`.
+Code runs only when you start Galda yourself.
+To read the code before running it:
+```
+npm pack @galda/cli          # downloads the tarball, runs nothing
+tar -xzf galda-cli-*.tgz     # everything Galda ships is plain JavaScript
+```
+## The local server
+Galda runs an HTTP server on your machine.
+- It binds to **loopback only** (`127.0.0.1` and `::1`), so it is not reachable
+  from your network. See `engine/server.mjs`.
+- Every request requires an access key stored at `~/.manager-for-ai/secret.key`.
+- All state lives in `~/.manager-for-ai/`. Nothing is written elsewhere.
+To remove Galda completely:
+```
+rm -rf ~/.manager-for-ai
+```
+That is the whole uninstall. Galda installs no daemons, no login items, no
+kernel extensions, and no browser extensions.
+## What the agent is allowed to do
+Galda does not hand Claude Code or Codex a blank cheque. The tool set is an
+explicit allowlist (`engine/lib.mjs`, `WORKER_TOOLS`).
+**The agent can:**
+- Read and edit files, through the `Edit` / `Write` / `Read` / `Glob` / `Grep`
+  tools, inside the working copy for the task
+- Run named commands only: language runtimes and package managers (`node`,
+  `npm`, `npx`, `pnpm`, `yarn`, `bun`, `deno`, `python`, `pip`, `go`, `cargo`,
+  `ruby`, `make`), test and lint runners (`pytest`, `jest`, `vitest`, `tsc`,
+  `eslint`, `prettier`), and read-only shell utilities (`cat`, `ls`, `grep`,
+  `find`, `diff`, and similar)
+- Read the web (`WebFetch`, `WebSearch`)
+**The agent cannot:**
+- Run arbitrary shell commands. `Bash` is not granted; only the named commands
+  above are, each as an explicit allowlist entry
+- **Commit, push, checkout, reset, or otherwise change your repository state.**
+  Git is granted read-only: `git status`, `git log`, `git diff`, `git show`,
+  `git branch`, `git blame`, `git ls-files`, `git rev-parse`. Nothing else
+- Edit files through the shell. File changes go through the `Edit` / `Write`
+  tools, so every change appears in the diff you review
+**Work is isolated from your working tree.** Each task runs in a throwaway git
+worktree, not in the checkout you have open. Your branch, your staged changes,
+and your uncommitted work are not touched.
+## What leaves your machine
+Three separate paths. They are worth keeping apart.
+### 1. Model traffic — does not involve Galda
+Claude Code and Codex talk to Anthropic and OpenAI directly, using the
+subscription already configured on your machine. Galda neither proxies nor
+observes this. Their data handling is governed by their terms, not ours.
+### 2. The relay — on by default, and you can turn it off
+By default Galda opens an outbound WebSocket to `app.galda.app`. This is what
+lets you open your board from your phone without a tunnel, port forwarding, or
+ngrok.
+Be clear about what this means. The relay is a reverse HTTP tunnel: a request
+made from `app.galda.app` is forwarded over that socket, replayed against your
+local server, and the response body is streamed back
+(`engine/relay-client.mjs`).
+**Therefore everything your board displays passes through Galda's relay
+server:** task text, activity logs, review summaries, diffs, and proof
+screenshots.
+The connection is TLS-encrypted in transit. **It is not end-to-end encrypted**,
+which means Galda's relay server is in the path and could read what crosses it.
+We would rather write that down than let you assume otherwise. End-to-end
+encryption is on the roadmap and is not implemented today.
+**To turn the relay off entirely:**
+```
+RELAY_URL= npx @galda/cli
+```
+With no relay URL, the relay client is never started and no outbound socket is
+opened (`bin/manager-for-ai.mjs`). You lose remote access from your phone.
+Everything else works exactly the same.
+### 3. Your Galda account — licensing
+Galda checks your license. The verifying public key is compiled into the
+package, so the check itself is offline, but the token is refreshed
+periodically against the billing API. This carries your account identity, not
+your code.
+## Analytics
+Galda records a small set of product events so we can see how the tool is
+actually used and improve it. The list is exhaustive. If it is not named here,
+we do not collect it.
+**What we record:**
+| Event | Purpose |
+|---|---|
+| `signup`, `signin` | Account lifecycle |
+| `task_created`, `task_completed`, `task_failed`, `task_interrupted` | Completion and failure rates, so we can find what breaks |
+| `review_approved`, `review_dismissed` | Whether results are actually usable |
+| Which agent ran (Claude Code or Codex) | Where to spend engineering time |
+| App version, OS, Node version | Compatibility and regression tracking |
+| Crash and error events | Fixing crashes |
+Each carries a timestamp and a pseudonymous account id, and nothing else.
+**What we never record:**
+- The text of your requests
+- Your code, diffs, file contents, or file names
+- Repository names or paths
+- Proof screenshots and recordings
+**Paid business plans: analytics are off.** On business plans no product events
+are collected at all, the way Cursor forces Privacy Mode on for teams. You do
+not have to configure anything.
+**With the relay off, nothing is collected.** Not reduced, not anonymized:
+nothing. A mode sold as "nothing leaves your machine" that quietly reported
+usage would invalidate every other claim on this page, so it does not.
+## Reporting a vulnerability
+<!-- TODO(Masa): security contact address. -->
+## 日本語
+- Galda は AI モデルを内蔵せず、モデルと通信もしません。すでにあなたのマシンに
+  入っている Claude Code / Codex を起動するだけです。**あなたのコードが推論の
+  ために Galda へ送られることはありません。**
+- **インストール時に何も実行しません**（`postinstall` 等が存在しません）。
+- ローカルサーバは **`127.0.0.1` と `::1` にのみ bind** し、ネットワークからは
+  到達できません。アクセスキーが必須です。
+- エージェントに渡している **git は読み取り専用**です。`commit` `push`
+  `checkout` `reset` を持ちません。任意のシェル実行もできません。
+- 各タスクは**使い捨ての git worktree** で動き、あなたの作業ツリーには触れません。
+- 既定では、スマホから使えるように **ボードの表示内容が `app.galda.app` の
+  relay を通ります**（TLS 保護、**E2E 暗号化は未実装**＝経路上に Galda の
+  サーバがいます）。`RELAY_URL= npx @galda/cli` で relay を完全に切れます。
+- アンインストールは `rm -rf ~/.manager-for-ai` だけです。

package/engine/relay-pref.mjs ADDED Viewed

@@ -0,0 +1,57 @@
+// Agent Manager — remote-access preference (the relay on/off switch)
+//
+// WHY THIS EXISTS: the relay is what lets you open your board from your phone,
+// and it is on by default. But everything the board displays crosses Galda's
+// relay server (see docs/SECURITY.md), so some people cannot or will not run
+// it — a security policy that forbids outbound connections, or simply not
+// wanting a third party in the path.
+//
+// That escape hatch already existed as `RELAY_URL= npx @galda/cli`, which is
+// an env var nobody discovers. This makes it a setting, the way Cursor puts
+// Privacy Mode in Settings rather than on the command line.
+//
+// The preference lives in a file in DATA_DIR because the two halves are
+// SEPARATE PROCESSES: the server (:4400) takes the click, the launcher owns
+// the relay child. Same idiom as relay-status.json / relay-takeover.req.
+import { readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+export const RELAY_PREF_FILE = 'relay-pref.json';
+export function relayPrefPath(dataDir) {
+  return join(dataDir, RELAY_PREF_FILE);
+}
+// Should the relay run? Pure — no clock, no I/O, no env.
+//
+//   relayUrl : the configured relay endpoint ('' / undefined = none built in)
+//   pref     : the user's saved choice (true | false | null when never set)
+//
+// Default is ON: a fresh install gets remote access, because that is the
+// product. Only an explicit `false` turns it off, so a corrupt or missing
+// preference file can never silently disable the feature.
+export function resolveRelayEnabled({ relayUrl, pref } = {}) {
+  if (!relayUrl) return false;
+  return pref !== false;
+}
+// Read the saved preference. Returns null when the user has never chosen, so
+// callers can tell "unset" from "explicitly on" — resolveRelayEnabled treats
+// both as on, but the UI may want to say so differently.
+export function readRelayPref(dataDir) {
+  try {
+    const raw = JSON.parse(readFileSync(relayPrefPath(dataDir), 'utf8'));
+    return typeof raw?.enabled === 'boolean' ? raw.enabled : null;
+  } catch {
+    return null; // never set, unreadable, or corrupt — all mean "no choice made"
+  }
+}
+// Save the preference. Throws on a real write failure so the endpoint can
+// report it rather than telling the user it saved something it did not.
+export function writeRelayPref(dataDir, enabled) {
+  const value = enabled === true;
+  writeFileSync(relayPrefPath(dataDir), JSON.stringify({ enabled: value, at: Date.now() }) + '\n');
+  return value;
+}

package/engine/server.mjs CHANGED Viewed

@@ -24,6 +24,7 @@ import { needsProjectFolder, folderLabel, chooseFolderScript, parseChosenFolder,
 import { parseStreamEvents, parseCodexEvents, buildCodexArgs, parsePlan, refinePlanTasks, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, classifyWorkerFailure, isForcedStop, taskStatusAfterVerify, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildReviewAttemptLedger, latestGoalOutcomeTask, buildDirtyWorkspacePrBlock, buildGoalProofMd, buildGoalPrBody, buildReviewSummaryPrompt, parseReviewSummary, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, rejectGoal, reopenGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, rebasePreviewUrl, shouldCreateGoalPR, normalizePullRequestUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, resolveTestGate, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, workerPrompt, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, buildQueueWaits, nextRunnableTasks, goalsConflict, detectConflicts, pickFoldTarget, autoFoldReviewsEnabled, parseGitUnifiedDiffLocations, hasTestRelevantChanges, parseFailingTestNames, classifyTestGate, classifyPrSafety, isInconclusiveTestRun, countInfraFlakes, classifyRunFailures, classifyVerifyGate, buildVerificationInfraError, verificationInfraErrorFrom, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, QUEUED_GOAL_STATUSES, verifyLicenseToken, licenseTokenPayload, shouldRefreshLicense, shouldEmitSetupCompleted, pickAnalyticsUid, shouldEmitFreeExhausted, detectRequestLanguage, testFailureReason, manualTestRetryPrompt, isNothingVerifiable, isNothingVerifiableForPR, isSuspiciouslyIncompleteDone, classifyComposerIntentHeuristic, detectPauseIntent, buildIntentPrompt, parseIntentResponse, buildBoardSnapshot, validateBoardSnapshot, boardIsEmpty, decideBoardPull, resolveConnectedAgents, pickAvailableAgent, pickUtilityAgent, utilityModel, liveTakeoverDecision, shouldOpenBrowserOnBoot, goalTaskTitle, buildGoalTask, shouldUsePlannerForGoal, RUN_DECL_FILE, REQUIREMENT_EVIDENCE_FILE, parseRequirementEvidenceDocument, parseRunDeclaration, SHOT_DIR, collectShotNames, parseGoalAddress, REPLY_OUTCOMES, buildGoalMessage, serializeGoalMessage, parseGoalMessages, computeInternalQualityMetrics, classifyInternalQualityTaskError, resolveWorkspaceMode, goalSessionFor, setGoalAgentSession, switchGoalAgentSession, parseApprovalRequest } from './lib.mjs';
 import { migrateRequirementModel, validateRequirementModel } from './requirement-model.mjs';
 import { buildManagerVerificationChecks, buildRequirementVerificationEvidence, mergeRequirementVerificationEvidence } from './requirement-verification.mjs';
+import { readRelayPref, writeRelayPref, resolveRelayEnabled } from './relay-pref.mjs';
 import { createSerialQueue } from './lib.mjs';
 import { wantsPullRequest } from './lib.mjs';
 import { parseRequirementEvidence, unmappedChangedFiles, previewOpensSomethingElse } from './lib.mjs';
@@ -4436,6 +4437,41 @@ const server = createServer(async (req, res) => {
     catch (e) { return json(res, 500, { error: String(e?.message ?? e) }); }
     return json(res, 200, { ok: true });
   }
+  // GET/POST /api/relay-pref — the remote-access switch in Settings.
+  // Remote access (the relay) is ON by default. Turning it off is the
+  // discoverable form of `RELAY_URL= npx @galda/cli`: with it off no outbound
+  // socket is opened and nothing your board displays crosses our server
+  // (docs/SECURITY.md). The launcher owns the relay child in ANOTHER process,
+  // so we persist the choice to a file it watches — same shape as
+  // relay-takeover.req above.
+  if (url.pathname === '/api/relay-pref' && req.method === 'GET') {
+    const pref = readRelayPref(DATA_DIR);
+    return json(res, 200, {
+      pref,
+      enabled: resolveRelayEnabled({ relayUrl: process.env.RELAY_URL, pref }),
+      configured: Boolean(process.env.RELAY_URL),
+    });
+  }
+  if (url.pathname === '/api/relay-pref' && req.method === 'POST') {
+    let body = '';
+    req.on('data', (d) => { body += d; });
+    req.on('end', () => {
+      let input;
+      try { input = JSON.parse(body || '{}'); } catch { return json(res, 400, { error: 'bad json' }); }
+      // A boolean and nothing else. "off"/0/undefined are how a security
+      // setting silently becomes the opposite of what was clicked.
+      if (typeof input?.enabled !== 'boolean') return json(res, 400, { error: 'enabled must be a boolean' });
+      let saved;
+      try { saved = writeRelayPref(DATA_DIR, input.enabled); }
+      catch (e) { return json(res, 500, { error: String(e?.message ?? e) }); }
+      return json(res, 200, {
+        pref: saved,
+        enabled: resolveRelayEnabled({ relayUrl: process.env.RELAY_URL, pref: saved }),
+        configured: Boolean(process.env.RELAY_URL),
+      });
+    });
+    return;
+  }
   // POST /api/signout — forget the local license so the settings panel can
   // offer a plain "Log out" instead of requiring the `--signin` CLI flag to
   // switch Google accounts. Clears the on-disk token and the in-memory cache;

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@galda/cli",
-  "version": "0.10.112",
+  "version": "0.10.114",
   "type": "module",
   "description": "Galda - hand off work to Claude Code or Codex, get proof back. Runs on your existing subscription, no extra API cost.",
   "scripts": {
@@ -11,7 +11,7 @@
     "puppeteer-core": "^23.11.1",
     "ws": "^8.21.0"
   },
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE.md",
   "bin": {
     "cli": "bin/manager-for-ai.mjs",
     "galda": "bin/manager-for-ai.mjs",
@@ -26,6 +26,8 @@
     "SKILL.md",
     ".mcp.json",
     "README.md",
+    "LICENSE.md",
+    "docs/SECURITY.md",
     "CLAUDE.md",
     "!engine/chat-runs",
     "!engine/test",
@@ -41,10 +43,6 @@
   "engines": {
     "node": ">=20"
   },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/kodo-inc/agent-manager.git"
-  },
   "keywords": [
     "claude",
     "claude-code",
@@ -53,5 +51,9 @@
     "manager",
     "verification",
     "proof"
-  ]
+  ],
+  "homepage": "https://galda.app",
+  "bugs": {
+    "url": "https://galda.app/support"
+  }
 }