@galda/cli 0.10.118 → 0.10.120

package/app/index.html

@@ -328,6 +328,11 @@
      hairline-separated from the detected list, matching .appopt grammar. */
   .ctxmenu .appopt.ctxopen{flex-direction:row;align-items:center;gap:7px;border-top:1px solid var(--hair);margin-top:4px;padding-top:8px}
   .ctxmenu .appopt.ctxopen svg{width:14px;height:14px;flex:0 0 14px;stroke:currentColor;stroke-width:1.7;fill:none;stroke-linecap:round;stroke-linejoin:round}
+  /* Working: the folder icon becomes a spinner in its own place, so the row
+     itself says a chooser is opening rather than only the line of text below it.
+     Reuses @keyframes spin — no new motion vocabulary (DESIGN-RULES §5.5). */
+  .ctxmenu .appopt.ctxopen .ctxspin{width:12px;height:12px;flex:0 0 14px;margin:1px;border-radius:50%;
+    border:1.5px solid var(--ink3);border-top-color:transparent;animation:spin 1s linear infinite}
   .ctxmenu .appopt.ctxopen .nm{color:var(--ink);font-size:12.5px;line-height:1.3}
   .appopt{display:flex;align-items:center;gap:7px;height:28px;padding:0 8px;border:0;border-radius:6px;background:transparent;
     color:var(--ink2);font:inherit;font-size:12px;cursor:pointer;text-align:left;width:100%}
@@ -529,15 +534,18 @@
   .badge.upnext{color:var(--invink);background:rgba(var(--tint),.75);border:0;font-weight:700}
   .retrybtn{margin-left:6px;padding:1.5px 9px;border:1px solid var(--hair2);border-radius:6px;background:transparent;color:var(--ink);font-size:10.5px;cursor:pointer}
   .retrybtn.skip{color:var(--ink3)} /* Dismiss reads as the secondary/clear action next to Retry */
-  /* Queue priority badge (To do rows only) — click opens a 高/中/低 popup.
-     No new hues: 高 borrows the existing --amber attention accent, 中/低 stay
-     on the neutral ink scale, so priority never reads as another rainbow. */
+  /* Queue priority badge (To do rows only) — click opens a High/Medium/Low popup.
+     No new hues: high borrows the existing --amber attention accent, medium/low
+     stay on the neutral ink scale, so priority never reads as another rainbow.
+     One mono glyph in a 22px square, unchanged since it held 高: the square is
+     the shape, H/M/L is what fits in it, and the whole word is in the menu where
+     there is room for it. */
   .priosel{position:relative;flex:0 0 auto;align-self:flex-start;margin-top:1px}
   .priobtn{width:22px;height:20px;border:1px solid var(--hair2);border-radius:6px;background:transparent;
     color:var(--ink3);font-family:var(--mono);font-size:10.5px;cursor:pointer;display:grid;place-items:center}
   .priobtn:hover{color:var(--ink);border-color:rgba(var(--tint),.2)}
-  .priobtn.prio-高{color:var(--amber);border-color:rgba(var(--amber-rgb),.4)}
-  .priobtn.prio-中{color:var(--ink2)}
+  .priobtn.prio-high{color:var(--amber);border-color:rgba(var(--amber-rgb),.4)}
+  .priobtn.prio-medium{color:var(--ink2)}
   .priomenu{position:absolute;top:calc(100% + 4px);right:0;min-width:64px;background:var(--surface);border:1px solid var(--hair2);
     border-radius:9px;padding:4px;display:none;flex-direction:column;gap:1px;box-shadow:0 10px 28px rgba(0,0,0,.5);z-index:50}
   .priomenu.show{display:flex}
@@ -666,6 +674,18 @@
   .peratab.on{color:var(--ink);border-color:var(--ink3);background:rgba(var(--tint),.06)}
   .peraask{display:flex;gap:8px;align-items:center;padding:10px 16px 6px}
   .peraask input{flex:1;background:var(--glass);border:1px solid var(--hair2);border-radius:10px;color:var(--ink);font-size:12.5px;padding:8px 12px;outline:none}
+  /* First-run nudge + the npx answer. Deliberately not a painted panel or a
+     boxed card: a box reads as "tappable" (DESIGN-RULES §5.6). This is a line
+     of text and a stroke pointing into the input it is about. */
+  .cnudge{display:none;align-items:center;justify-content:center;gap:10px;margin:14px auto 0;opacity:0;transform:translateY(-3px);
+    transition:opacity .28s ease,transform .28s ease}
+  .cnudge.show{display:flex;opacity:1;transform:none}
+  .cnudge-t{font-size:12.5px;line-height:1.5;color:var(--ink2)}
+  .cnudge-a{width:12px;height:20px;flex:0 0 auto;border-left:1.5px solid var(--ink3);border-bottom:1.5px solid var(--ink3);
+    border-bottom-left-radius:7px;position:relative;opacity:.85}
+  .cnudge-a:after{content:'';position:absolute;right:-1px;bottom:-4px;width:6px;height:6px;
+    border-right:1.5px solid var(--ink3);border-bottom:1.5px solid var(--ink3);transform:rotate(-45deg)}
+    padding:10px 12px;font-family:var(--mono);font-size:12.5px;color:var(--ink);overflow-x:auto;white-space:nowrap}
   .peraanswer{margin:0 16px 8px;font-size:12.5px;line-height:1.55;color:var(--ink2);white-space:pre-wrap;background:rgba(var(--tint),.03);border:1px solid var(--hair2);border-radius:10px;padding:10px 12px}
   .peraanswer.loading{color:var(--ink3);font-style:italic}
   .peraanswer.error{color:var(--danger)}
@@ -2923,13 +2943,31 @@
     /* ---- iOS no-zoom: 16px inputs (extends the shared 16px rule to flagship-only fields) ---- */
     body[data-layout="flagship"] .sa-chat,
     body[data-layout="flagship"] #fsAskbar input{font-size:16px}
-    /* ---- Ledger (#seeall) — full-bleed sheet + no-clip action row ---- */
+    /* ---- Ledger (#seeall) — Claude Code-style mobile reading sheet.
+       A tapped Review should land at the top of the phone viewport, with the
+       content column using the width instead of spending it on desktop gutters. ---- */
+    body[data-layout="flagship"] #seeall.open{place-items:start center;z-index:120;pointer-events:auto}
     body[data-layout="flagship"] #seeall .sa-panel{width:100%!important;max-width:100%!important;
-      margin-top:0;max-height:100%;border-radius:0}
-    body[data-layout="flagship"] #seeall .sa-hd{padding:14px 16px 10px}
+      margin-top:calc(env(safe-area-inset-top) + 6px)!important;
+      max-height:calc(100dvh - env(safe-area-inset-top) - env(safe-area-inset-bottom) - 12px)!important;
+      border-radius:18px 18px 0 0!important}
+    body[data-layout="flagship"] #seeall .sa-hd{padding:14px 18px 10px!important}
     body[data-layout="flagship"] #seeall .sa-hd .keys{display:none} /* keyboard shortcuts — no keyboard on a phone */
-    body[data-layout="flagship"] #seeall .sa-body{padding:12px 14px 16px}
+    body[data-layout="flagship"] #seeall .sa-body{padding:10px 8px 16px}
     body[data-layout="flagship"] #seeall .sa-item{width:100%}
+    body[data-layout="flagship"] #seeall .sa-item.redesign{padding:22px 18px 28px!important}
+    body[data-layout="flagship"] #seeall .sa-body>.sa-item.redesign+.sa-item.redesign{padding-top:30px!important}
+    body[data-layout="flagship"] #seeall .sa-panel .sa-hd:has(~ .sa-body .sa-item.redesign){padding:14px 18px 10px!important}
+    body[data-layout="flagship"] #seeall .revrail.show{width:9px;margin-right:7px}
+    body[data-layout="flagship"] #seeall .revrail button{font-size:0;padding:6px 0}
+    body[data-layout="flagship"] #seeall .revrail button .bar{width:3px;height:18px}
+    body[data-layout="flagship"] #seeall .revrail button.on .bar{height:28px}
+    body[data-layout="flagship"] #seeall .redesign .rtitle{font-size:17px;line-height:1.32;letter-spacing:0}
+    body[data-layout="flagship"] #seeall .redesign .rsec{margin-top:22px!important}
+    body[data-layout="flagship"] #seeall .redesign .rsec-h{font-size:15px;letter-spacing:0}
+    body[data-layout="flagship"] #seeall .redesign .rbody,
+    body[data-layout="flagship"] #seeall .redesign .rreport{font-size:15px;line-height:1.72;letter-spacing:0;max-width:none}
+    body[data-layout="flagship"] #seeall .redesign .rreport code{font-size:13px}
     body[data-layout="flagship"] #seeall .sa-act{flex-wrap:wrap;row-gap:8px}
     body[data-layout="flagship"] #seeall .sa-chatwrap{flex:1 1 100%;order:3;min-width:0}
     body[data-layout="flagship"] #seeall .sa-app,
@@ -2963,8 +3001,15 @@
       max-width:62%;justify-content:center;margin:0}
     /* Review/To Do opener (right) = plain ☰ icon (Masa 2026-07-18: ボタン化はやめ、三本線だけ・
        タップで To Do/Review ドロワー). The base .fshamb rule above already renders the ☰ svg. */
-    body[data-layout="flagship"] #fsRoot .fshamb .fshamb-lb,
-    body[data-layout="flagship"] #fsRoot .fshamb .fshamb-n{display:none}
+    body[data-layout="flagship"] #fsRoot .fshamb .fshamb-lb{display:none}
+    /* Masa 2026-07-31: たまったレビューが右上から分からない → ☰ の右肩に赤ドット。
+       件数はJS(renderFsReview)がfshamb-nに書き込み済みだったが display:none で常に非表示だった。
+       件数の有無だけをJSからのtext contentで判定して出し分ける(空なら消える)。 */
+    body[data-layout="flagship"] #fsRoot .fshamb{position:relative}
+    body[data-layout="flagship"] #fsRoot .fshamb .fshamb-n{display:none;position:absolute;top:2px;right:2px;
+      min-width:9px;height:9px;padding:0;border-radius:50%;background:var(--danger);
+      box-shadow:0 0 0 2px var(--panel);font-size:0;line-height:0;color:transparent}
+    body[data-layout="flagship"] #fsRoot .fshamb .fshamb-n:not(:empty){display:block}
     /* Top bar = chromeless on mobile for ALL themes (Masa 2026-07-18: Midnight で上に変なフレーム
        が出ていた → Gradient と同じく枠/面なしに). Gradient already did this; extend to every theme. */
     body[data-layout="flagship"] #fsRoot .fsrail{background:transparent;box-shadow:none}
@@ -2984,9 +3029,10 @@
       margin:0 0 4px;padding:0 2px 10px;gap:9px;border-bottom:1px solid var(--hair)}
     /* H25③: See-all ledger → scrim + inset panel (a full-bleed sheet let translucent themes show through). */
     body[data-layout="flagship"] #seeall{background:rgba(9,12,20,.55)}
+    body[data-layout="flagship"] #seeall.open{z-index:120}
     body[data-layout="flagship"] #seeall .sa-panel{width:96%!important;max-width:96%!important;
       max-height:calc(100dvh - env(safe-area-inset-top) - 22px)!important;
-      margin-top:calc(env(safe-area-inset-top) + 10px)!important;border-radius:16px!important}
+      margin-top:calc(env(safe-area-inset-top) + 6px)!important;border-radius:18px!important}
   }
   /* Billing UI (H16/H22) — self-serve plan. Tokens only; red is a line/label,
      never a fill (DESIGN-RULES §5.6), and it is --danger (the app's real token —
@@ -3249,6 +3295,13 @@
       <div class="nowdoing" id="fsNowDoing" hidden></div>
       <!-- Clawd HERO (§4.5 初期状態): filled by JS (CLAWD generator), shown via #fsRoot.clawdhero -->
       <div id="fsClawdHero" aria-hidden="true"></div>
+      <!-- Under the waiting hero, pointing down at the box a new person is meant
+           to use. "CONNECTED / WAITING FOR GOALS" says our state; this says
+           theirs. Shown only while the board has nothing on it. -->
+      <div class="cnudge" id="composerNudge">
+        <span class="cnudge-t">Type what you want done, down there.</span>
+        <span class="cnudge-a" aria-hidden="true"></span>
+      </div>
       <!-- H23 mobile empty-state hero (flagship .m-hero) — chips fill the composer (#input) -->
       <div class="m-hero"><h2>What should we build?</h2><p>Describe a goal in plain language. Claude Code runs it, checks its own work, and only calls it done with proof.</p><div class="m-chips"><button class="m-chip">Fix the failing test in lib.mjs</button><button class="m-chip">Add a token-usage counter</button><button class="m-chip">Summarize the open PRs</button></div></div>
       <div class="fsstream"><div id="fsFeed"></div></div>
@@ -3440,6 +3493,20 @@
       <div class="segbtn" id="langSeg"><button data-lang="auto">Auto</button><button data-lang="en">English</button><button data-lang="ja">日本語</button></div></div>
   </div>
 </div></div>
+<!-- "What is Galda? / What can it access?" — the orientation panel.
+     WHY IT EXISTS: the first engineer we handed Galda to reached for the gear
+     button before typing anything. He was not lost, he was CHECKING: people
+     want to know what a tool can touch before they hand it a repository. This
+     answers that where they already are, instead of sending them to a website.
+     Rendered from a constant, entirely locally: NO agent run, NO tokens, no
+     network. Spending someone's quota and 40 seconds to produce a text answer
+     they could have read instantly would be a bad trade, and it would teach
+     the wrong idea of what Galda is (it is not a chatbot).
+     Same overlay/modal parts as Settings above — no new component. -->
+<div class="overlay revfloat" id="aboutOverlay"><div class="modal" style="width:min(560px,94vw)">
+  <div class="perahead" style="border-bottom:1px solid var(--hair)"><div class="peratitle" id="aboutTitle">What is Galda?</div><span style="flex:1"></span><button class="mbtn ghost" id="aboutClose">Close</button></div>
+  <div style="padding:16px;max-height:min(70vh,620px);overflow:auto" id="aboutBody"></div>
+</div></div>
 <!-- Slack-style centered delete confirmation, replacing native confirm() for every goal
      delete (restores a lost decision — see docs/confirmed-behaviors.md). Reusable via the
      confirmDelete({title,preview}) -> Promise<boolean> helper. -->
@@ -3710,18 +3777,34 @@ function pickColumnLabel(columns, bucket, fallback){
 }
 function columnsFor(projectId){ return state.workflowColumns[projectId] ?? DEFAULT_WORKFLOW_COLUMNS; }
 
-// Mirrors engine/lib.mjs TASK_PRIORITIES — kept in sync manually, see the
-// comment on DEFAULT_WORKFLOW_COLUMNS above. Queue execution order is
-// 高→中→低, same-priority ties keep creation/drag order (server.mjs's
-// sortQueueByPriority) — this badge is only for To do (queued) rows, where
-// that ordering actually matters.
-const TASK_PRIORITIES = ['高', '中', '低'];
+// Mirrors engine/lib.mjs TASK_PRIORITIES / normalizePriority — kept in sync
+// manually, see the comment on DEFAULT_WORKFLOW_COLUMNS above. Queue execution
+// order is high→medium→low, same-priority ties keep creation/drag order
+// (server.mjs's sortQueueByPriority) — this badge is only for To do (queued)
+// rows, where that ordering actually matters.
+//
+// The values were 高/中/低 until 2026-07-31. Nothing migrates what is already on
+// disk, so every task written before then still says 高 and must still render as
+// what it is: reading only the new list would have shown it as Medium — the board
+// lying about the order the queue really runs in.
+const TASK_PRIORITIES = ['high', 'medium', 'low'];
+const LEGACY_PRIORITIES = { 高: 'high', 中: 'medium', 低: 'low' };
+// One glyph for the 22px square, the whole word for the menu that has room.
+const PRIORITY_GLYPH = { high: 'H', medium: 'M', low: 'L' };
+const PRIORITY_NAME = { high: 'High', medium: 'Medium', low: 'Low' };
+function normalizePriority(value){
+  const v = String(value ?? '').trim();
+  if (TASK_PRIORITIES.includes(v)) return v;
+  if (LEGACY_PRIORITIES[v]) return LEGACY_PRIORITIES[v];
+  const lower = v.toLowerCase();
+  return TASK_PRIORITIES.includes(lower) ? lower : 'medium';
+}
 function prioBadge(t){
-  const p = TASK_PRIORITIES.includes(t.priority) ? t.priority : '中';
+  const p = normalizePriority(t.priority);
   return `<div class="priosel" data-priosel="${t.id}">
-    <button type="button" class="priobtn prio-${p}" data-priobtn="${t.id}" title="Change priority">${p}</button>
+    <button type="button" class="priobtn prio-${p}" data-priobtn="${t.id}" title="Change priority — ${PRIORITY_NAME[p]}">${PRIORITY_GLYPH[p]}</button>
     <div class="priomenu" data-priomenu="${t.id}">${TASK_PRIORITIES.map((x) =>
-      `<button type="button" class="prioopt${x === p ? ' active' : ''}" data-priotask="${t.id}" data-val="${x}">${x}</button>`).join('')}</div>
+      `<button type="button" class="prioopt${x === p ? ' active' : ''}" data-priotask="${t.id}" data-val="${x}">${PRIORITY_NAME[x]}</button>`).join('')}</div>
   </div>`;
 }
 
@@ -6732,6 +6815,7 @@ $('gdRevisionInput').addEventListener('keydown', (e) => {
 });
 
 function render(){
+  renderComposerNudge();
   renderProjects(); renderStream(); renderQueue(); renderTasks(); renderActPanel(); wireWfEditButtons();
   renderCtxBar();   // the folder above the composer follows the active project
   renderFlagship();
@@ -9018,6 +9102,12 @@ function connectSSE(){
     // fsActiveContext() uses to pick which running goal is "now" when several run
     // in parallel (§1.5-1: never anchor on stale work when something is live).
     else if (m.ev === 'act') { (state.act[m.taskId] ??= []).push(m.line); state.act[m.taskId] = state.act[m.taskId].slice(-1000); state.actAt[m.taskId] = Date.now(); scheduleActRender(); return; }
+    // The agent talking, as opposed to the agent working. Everything above this
+    // line is machinery (a status, a tool call, a to-do list); this is a sentence
+    // somebody wrote to the person waiting, so it goes where the person is
+    // looking — the same turn treatment a chat reply gets, because it is the same
+    // thing. Masa's friend waited three minutes for exactly this and gave up.
+    else if (m.ev === 'say') { sayFromAgent(m); return; }
     else if (m.ev === 'todos') state.todos[m.taskId] = m.todos ?? [];
     else if (m.ev === 'columns') state.workflowColumns[m.projectId] = m.columns;
     else if (m.ev === 'review-definition') state.reviewDefinitions[m.projectId] = m.reviewDefinition;
@@ -9071,7 +9161,8 @@ function bootDisconnected(info){
       background:rgba(4,4,6,.72);-webkit-backdrop-filter:blur(7px);backdrop-filter:blur(7px)}
     #connectGate.on{display:flex}
     #connectGate .cg-card{position:relative;width:100%;max-width:440px;background:var(--panel,#0d0d0f);border:1px solid var(--hair2,rgba(255,255,255,.12));
-      border-radius:18px;padding:30px 28px;text-align:center;box-shadow:0 30px 80px -30px #000}
+      border-radius:18px;padding:28px 26px;text-align:left;box-shadow:0 30px 80px -30px #000;
+      max-height:calc(100vh - 44px);overflow:auto}
     #connectGate h2{font:700 20px/1.3 var(--ui,system-ui);letter-spacing:-.02em;margin:0 0 8px;color:var(--ink,#e9e7e2)}
     #connectGate p{font-size:13.5px;line-height:1.7;color:var(--ink2,#a3a097);margin:0 0 18px}
     #connectGate .cg-cmd{display:flex;align-items:center;justify-content:space-between;gap:12px;background:#0a0a0b;
@@ -9083,6 +9174,14 @@ function bootDisconnected(info){
     #connectGate .cg-hint{font-size:12px;line-height:1.6;color:var(--ink3,#6b6862);margin:0 0 16px}
     #connectGate .cg-hint a{color:var(--blue,#8fb0ff);text-decoration:none}
     #connectGate .cg-hint a:hover{text-decoration:underline}
+    #connectGate .cg-trust{margin:18px 0 0;padding:16px 0 0;border-top:1px solid var(--hair2,rgba(255,255,255,.10))}
+    #connectGate .cg-blanket{font-size:12.5px;line-height:1.6;color:var(--ink,#e9e7e2);font-weight:600;margin:0}
+    #connectGate .cg-acchead{font:500 10px/1 var(--mono,monospace);letter-spacing:.09em;text-transform:uppercase;color:var(--ink3,#6b6862);margin:16px 0 6px}
+    #connectGate .cg-accrow{font-size:12px;line-height:1.45;color:var(--ink2,#a3a097);padding:0 0 0 12px;margin:0 0 6px;position:relative}
+    #connectGate .cg-accrow:before{content:'';position:absolute;left:0;top:7px;width:4px;height:1px;background:var(--ink3,#6b6862);opacity:.7}
+    #connectGate .cg-seclink{margin:14px 0 0;font-size:12px}
+    #connectGate .cg-seclink a{color:var(--blue,#8fb0ff);text-decoration:none}
+    #connectGate .cg-acct{margin:18px 0 0;padding:16px 0 0;border-top:1px solid var(--hair2,rgba(255,255,255,.10))}
     #connectGate .cg-who{font-size:12px;color:var(--ink3,#6b6862);margin:0 0 4px}
     #connectGate .cg-who b{color:var(--ink2,#a3a097)}
     #connectGate .cg-switch{font-size:12px;color:var(--ink3,#6b6862);margin:14px 0 0;transition:color .2s}
@@ -9097,6 +9196,7 @@ function bootDisconnected(info){
     #connectGate .cg-switch.escalated{color:var(--danger);font-weight:600}
     #connectGate .cg-switch.escalated a{color:var(--danger);text-decoration:underline}
     #connectGate .cg-x{position:absolute;top:14px;right:16px;width:28px;height:28px;border:0;background:transparent;color:var(--ink3,#6b6862);font-size:20px;line-height:1;cursor:pointer}
+    #connectGate .cg-waitwrap{display:flex;justify-content:center}
     #connectGate .cg-wait{display:inline-flex;align-items:center;gap:7px;font:500 10.5px/1 var(--mono,monospace);letter-spacing:.08em;color:var(--ink3,#6b6862);margin-top:16px}
     #connectGate .cg-wait i{width:6px;height:6px;border-radius:50%;background:var(--green,#3DDC97);animation:cgpulse 1.8s ease-in-out infinite}
     @keyframes cgpulse{0%,100%{box-shadow:0 0 0 0 color-mix(in srgb,var(--green,#3DDC97) 50%,transparent)}50%{box-shadow:0 0 6px 2px color-mix(in srgb,var(--green,#3DDC97) 35%,transparent)}}
@@ -9116,9 +9216,21 @@ function bootDisconnected(info){
     + '<a href="https://claude.com/claude-code" target="_blank" rel="noreferrer">Claude Code</a> or '
     + '<a href="https://openai.com/codex/" target="_blank" rel="noreferrer">Codex</a>, then run the same command '
     + '— Galda uses whichever agent you have.</p>'
+    // The gate said what to run and never what it would do. "npx? what else is
+    // it going to touch?" is the actual reason people stop here, so the answer
+    // sits with the command. Facts only, in step with docs/SECURITY.md.
+    + '<div class="cg-trust">'
+    + '<p class="cg-blanket">No admin access, no background service, nothing that starts on its own. '
+    + 'Plain JavaScript you can read before you run it, and one folder you can delete.</p>'
+    + '<div class="cg-acchead">What it can access</div>'
+    + NPX_ONBOARDING.access.map(function(t){ return '<div class="cg-accrow">' + esc(t) + '</div>'; }).join('')
+    + '<p class="cg-seclink"><a href="https://galda.app/security" target="_blank" rel="noreferrer">Security and permissions \u2192</a></p>'
+    + '</div>'
+    + '<div class="cg-acct">'
     + '<p class="cg-who">Signed in as <b></b></p>'
     + '<p class="cg-switch">Already running Galda under a different account? Run <code>npx @galda/cli --signin</code> and pick this one. Or <a href="/logout">switch Google account →</a></p>'
-    + '<div class="cg-wait"><i></i>WAITING FOR THIS DEVICE</div></div>';
+    + '</div>'
+    + '<div class="cg-waitwrap"><div class="cg-wait"><i></i>WAITING FOR THIS DEVICE</div></div></div>';
   document.body.appendChild(ov);
   ov.querySelector('.cg-who b').textContent = email || 'your account';
   const open = () => ov.classList.add('on');
@@ -9323,6 +9435,25 @@ function typeChatTurn(turn){
     if (turn.revealed >= full.length) { turn.done = true; stopChatTyper(); renderFsFeed(); }
   }, 16);
 }
+// A worker's opening words (engine: `ev:'say'`). Rendered as a spoken turn, typed
+// out, exactly like the one-shot chat reply — Galda writes nothing of its own
+// here and picks nothing: the sentence is the agent's, and this only puts it
+// where it can be read. The board layout has no centre feed, so it stays in the
+// run log there rather than being invented somewhere new.
+function sayFromAgent({ goalId, text, agent }){
+  const body = String(text ?? '').trim();
+  if (!body || state.layout !== 'flagship') return;
+  const goal = state.goals.find((g) => g.id === goalId);
+  const projectId = goal?.projectId ?? state.active;
+  const turns = (state.chatTurns[projectId] ||= []);
+  // A reconnecting stream can hand us the same opening twice; a person reading it
+  // twice would think the agent had started over.
+  if (turns.some((t) => t.role === 'clawd' && t.text === body)) return;
+  const turn = { role: 'clawd', text: body, revealed: 0, done: false, agent, ts: Date.now() };
+  turns.push(turn);
+  renderFsFeed();
+  if (projectId === state.active) typeChatTurn(turn); else { turn.revealed = body.length; turn.done = true; }
+}
 // A new send starts: finish any in-flight reply cleanly (complete the model turn +
 // drop the caret, hide the board bar) so a half-typed reply never lingers.
 function finalizeChatTyping(){
@@ -11510,7 +11641,7 @@ function renderCtxBar(){
     .join('');
   // Redrawing the menu must not hand back a second chooser: carry the disabled
   // state that setFolderPickerBusy() put on the live button.
-  const openRow = `<button type="button" class="appopt ctxopen${folderPickerBusy ? ' busy' : ''}" id="ctxopenfolder"${folderPickerBusy ? ' disabled' : ''} title="Open the OS folder chooser"><svg viewBox="0 0 24 24"><path d="M3 7a2 2 0 012-2h4l2 2h8a2 2 0 012 2v8a2 2 0 01-2 2H5a2 2 0 01-2-2z"/><path d="M12 11v6M9 14h6"/></svg><span class="nm">Open folder…</span></button>`;
+  const openRow = `<button type="button" class="appopt ctxopen${folderPickerBusy ? ' busy' : ''}" id="ctxopenfolder"${folderPickerBusy ? ' disabled' : ''} title="Open the OS folder chooser">${folderRowInner(folderPickerBusy)}</button>`;
   menu.innerHTML = `${opts}${openRow}<div class="ctxmsg" id="ctxdirmsg"></div>`;
 }
 // Workspace mode is fixed to the isolated worktree (clean separate checkout). The
@@ -11562,17 +11693,37 @@ async function setProjectFolder(dir){
 // request stays in flight for as long as the dialog is up, so "a request is out"
 // is exactly "a dialog is open" — no timer to guess with.
 let folderPickerBusy = false;
+const FOLDER_GLYPH = '<svg viewBox="0 0 24 24"><path d="M3 7a2 2 0 012-2h4l2 2h8a2 2 0 012 2v8a2 2 0 01-2 2H5a2 2 0 01-2-2z"/><path d="M12 11v6M9 14h6"/></svg>';
+// While a chooser is open the icon spins in its own place. Waiting with nothing
+// moving is what "it did nothing" looks like — and it is what made Masa's friend
+// tap ten times (2026-07-31). One source for the row's contents, so the live swap
+// and the next redraw cannot disagree.
+function folderRowInner(busy){
+  return `${busy ? '<span class="ctxspin" aria-hidden="true"></span>' : FOLDER_GLYPH}<span class="nm">Open folder…</span>`;
+}
 function setFolderPickerBusy(busy){
   folderPickerBusy = busy;
   const btn = $('ctxopenfolder');
-  if (btn) { btn.disabled = busy; btn.classList.toggle('busy', busy); }
-}
+  if (btn) { btn.disabled = busy; btn.classList.toggle('busy', busy); btn.innerHTML = folderRowInner(busy); }
+}
+// How long to wait before saying the dialog might not be where they are looking.
+// The engine opens it immediately; on a Mac where the engine was started by launchd
+// it can open behind everything, and there is nothing on screen to say so — which is
+// the other half of what happened to Masa's friend. Long enough not to nag someone
+// who is simply choosing a folder.
+const FOLDER_CHOOSER_SLOW_MS = 6000;
 async function openFolderNative(){
   if (folderPickerBusy) return;
   const msg = $('ctxdirmsg');
   const say = (t, bad) => { if (msg) { msg.textContent = t; msg.classList.toggle('bad', Boolean(bad)); } };
   setFolderPickerBusy(true);
   say('Opening the folder chooser…');
+  // Still open after a while: say where it might be, and point at the way out that
+  // does not need it. The row stays disabled — a second chooser is the bug this
+  // guard exists to prevent, and offering one here would re-create it.
+  const slow = setTimeout(() => {
+    if (folderPickerBusy) say('Still waiting — the chooser may be behind your other windows. You can also pick a folder from the list above.');
+  }, FOLDER_CHOOSER_SLOW_MS);
   try {
     const r = await fetch(withKey('/api/choose-folder'), { method: 'POST' });
     const body = await r.json().catch(() => ({}));
@@ -11581,7 +11732,7 @@ async function openFolderNative(){
     if (body.unsupported) { say('This engine can’t open a folder dialog on this system.', true); return; }
     say(body.error || 'Could not open the folder chooser.', true);
   } catch { say('Could not reach the engine.', true); }
-  finally { setFolderPickerBusy(false); }
+  finally { clearTimeout(slow); setFolderPickerBusy(false); }
 }
 $('ctxdirbtn').onclick = (e) => {
   e.stopPropagation();
@@ -11866,6 +12017,13 @@ $('histBtn').onclick = openHistory;
 $('setBtn').onclick = openSettings;
 $('histClose').onclick = () => $('historyOverlay').classList.remove('show');
 $('setClose').onclick = () => $('settingsOverlay').classList.remove('show');
+// About panel: Close, tapping the backdrop, and Esc all dismiss it (DESIGN-RULES
+// §設定画面 — a dialog must close when you click somewhere unrelated).
+$('aboutClose').onclick = () => closeAbout();
+$('aboutOverlay').onclick = (e) => { if (e.target === $('aboutOverlay')) closeAbout(); };
+document.addEventListener('keydown', (e) => {
+  if (e.key === 'Escape' && $('aboutOverlay')?.classList.contains('show')) { e.stopPropagation(); closeAbout(); }
+}, true);
 $('historyOverlay').addEventListener('click', (e) => { if (e.target === $('historyOverlay')) $('historyOverlay').classList.remove('show'); });
 $('settingsOverlay').addEventListener('click', (e) => { if (e.target === $('settingsOverlay')) $('settingsOverlay').classList.remove('show'); });
 for (const b of $('langSeg').querySelectorAll('button')) b.onclick = () => saveLang(b.dataset.lang);
@@ -12517,7 +12675,13 @@ window.__tbink = (i) => { document.body.dataset.tbink = String(((i | 0) % 3 + 3)
     raf = 0;
     if (document.hidden) { clearFx(); return; }
     const t = (performance.now() - t0) / 1000, d = Math.min(2, devicePixelRatio || 1);
-    fc.setTransform(d, 0, 0, d, 0, 0); fc.clearRect(0, 0, innerWidth, innerHeight);
+    // Clear in backing-store pixels *before* installing the CSS-pixel transform.
+    // Mobile Safari can change its visual viewport as a question answer removes a
+    // card (or as the browser chrome expands). Clearing in transformed viewport
+    // coordinates then leaves pixels from the send ring's former location behind.
+    // The canvas's own dimensions are the only stable full-clear bounds.
+    clearFx();
+    fc.setTransform(d, 0, 0, d, 0, 0);
     if (MODE < 10) tick(t); // TB edge anim (optional, off by default = 10)
     drawSendRing(t);        // send ring (always on while btn mode = 0, independent of TB edge anim)
     raf = requestAnimationFrame(loop);
@@ -12676,11 +12840,133 @@ function gearSetHTML(){
     <button class="optchip${lang === 'en' ? ' on' : ''}" data-gslang="en">EN</button>
     <button class="optchip${lang === 'ja' ? ' on' : ''}" data-gslang="ja">JA</button></div>
   ${billingRow}
+  <div class="srow"><div class="sl">About Galda<span class="sd">What it is, what the agent can touch, and what leaves this machine</span></div>
+    <button class="optchip" data-gabout="1">Open</button></div>
+  ${remoteAccessRow()}
   ${stability}
   ${gearRulesHTML()}
   ${hostReadinessRow()}
   <div class="srow dis"><div class="sl">Data folder<span class="sd">Runs are stored in the engine's chat-runs folder on the host</span></div></div>`;
 }
+// The npx moment, moved to where the intent is.
+//
+// A person who signed up on the web lands on a board with nothing behind it:
+// Galda drives the Claude Code / Codex on THEIR machine, and that is not
+// running yet. Until now the only thing they were told was "Galda is offline —
+// reconnecting…", which is true and useless: it describes our state, not their
+// next step. That is the "run npx" dead end.
+//
+// So the answer arrives when they reach for the composer, which is the moment
+// they have decided to do something. And it has to answer the real hesitation,
+// not just print a command: "npx? what else is it going to do to my machine?"
+//
+// Every line below is a fact about the shipped package, kept in step with
+// docs/SECURITY.md and the same block on galda.app. Do not promise here what
+// is not true there.
+const NPX_ONBOARDING = {
+  why: 'This is a command, not a website, because Galda runs the Claude Code or Codex already installed on your machine, on your own subscription. A website cannot reach them.',
+  blanket: 'No admin access, no background service, nothing that starts on its own. Plain JavaScript you can read before you run it, and one folder you can delete.',
+  access: [
+    'Your project files and tests, inside a throwaway copy',
+    'Its git is read-only: no commit, no push, no checkout, no reset',
+    'Never your working tree, your branch, or your uncommitted changes',
+    'A fixed allowlist of commands, not arbitrary shell',
+    'Nothing at all at install time',
+  ],
+};
+
+// The nudge: with no agent behind the board, point at the composer instead of
+// leaving a new person to guess. Only while there is nothing to do here — it
+// disappears the moment an agent connects.
+function renderComposerNudge(){
+  const n = $('composerNudge');
+  if (!n) return;
+  // Only while there is genuinely nothing here. The moment a first goal exists
+  // the board explains itself and a standing instruction becomes clutter.
+  const empty = !(state.goals || []).length && !(state.tasks || []).length;
+  n.classList.toggle('show', empty);
+}
+
+// The orientation panel's content. A constant, not a request: this renders with
+// zero tokens and no network, because the answer never depends on the project.
+//
+// Every line here is a fact about the shipped code, kept in step with
+// docs/SECURITY.md. Do not add a promise here that is not true there.
+const ABOUT_GALDA = [
+  { h: 'What Galda is', p: [
+    'Galda hands your work to Claude Code or Codex and brings back something you can review.',
+    'It has no AI of its own. It starts the agent already installed and signed in on this machine, on your own subscription, so there is no extra API cost — and your code is never uploaded to Galda to be run through a model.',
+  ] },
+  { h: 'What the agent can do', p: [
+    'Read and edit files, and run tests, inside a private copy of your project.',
+    'Run named commands only — language runtimes, package managers, test and lint runners, and read-only shell tools. Not arbitrary shell.',
+  ] },
+  { h: 'What the agent cannot do', p: [
+    'It cannot commit, push, checkout, or reset. Its git access is read-only: status, log, diff, show, branch, blame, ls-files, rev-parse. Nothing else.',
+    'It cannot touch your working tree. Every task runs in a throwaway git worktree, so your branch and your uncommitted changes are left alone.',
+  ] },
+  { h: 'What leaves this machine', p: [
+    'Model traffic goes from Claude Code or Codex straight to Anthropic or OpenAI. Galda is not in that path.',
+    'With remote access on, what this board displays passes through Galda’s relay so you can open it from your phone. It is encrypted in transit but not end to end, so treat Galda’s server as being in the path.',
+    'Turn remote access off in Settings and no outbound connection is opened at all.',
+  ] },
+  { h: 'Removing it', p: [
+    'Galda installs no background services and runs nothing at install time. Deleting ~/.manager-for-ai removes everything it keeps.',
+  ] },
+];
+function openAbout(){
+  const body = $('aboutBody');
+  if (body) {
+    body.innerHTML = ABOUT_GALDA.map((s) => `
+      <div class="setrow" style="display:block">
+        <div class="setlabel">${esc(s.h)}</div>
+        ${s.p.map((t) => `<div class="setsub" style="margin-top:4px">${esc(t)}</div>`).join('')}
+      </div>`).join('');
+  }
+  $('aboutOverlay')?.classList.add('show');
+}
+function closeAbout(){ $('aboutOverlay')?.classList.remove('show'); }
+// Reachable from the first-run composer link too, once that lands.
+window.openAbout = openAbout;
+
+// Remote access = the relay. On, you can open this board from your phone; the
+// price is that what the board shows crosses Galda's relay server (it is a
+// reverse HTTP tunnel, TLS but not end-to-end encrypted — docs/SECURITY.md).
+// Off, no outbound socket is opened at all.
+//
+// This row exists because that switch already worked and nobody could find it:
+// it was the env var `RELAY_URL=`. The people who most need it are the ones who
+// will never read a source comment. Cursor puts Privacy Mode in Settings for
+// the same reason. Same shape as Language above — a server setting that applies
+// the moment it is chosen, not part of the visual edit session.
+//
+// No row at all when this build has no relay configured (§3 段階開示: never show
+// a switch that controls nothing).
+function remoteAccessRow(){
+  const rp = state.relayPref;
+  if (!rp || !rp.configured) return '';
+  const on = rp.enabled === true;
+  const desc = on
+    ? 'On — reach this board from your phone. What the board shows passes through Galda’s relay.'
+    : 'Off — nothing leaves this machine. This board is not reachable from your phone.';
+  return `<div class="srow"><div class="sl">Remote access<span class="sd">${esc(desc)}</span></div>
+    <button class="optchip${on ? ' on' : ''}" data-grelay="on">On</button>
+    <button class="optchip${on ? '' : ' on'}" data-grelay="off">Off</button></div>`;
+}
+async function loadRelayPref(){
+  try { const r = await fetch(withKey('/api/relay-pref')); state.relayPref = r.ok ? await r.json() : null; }
+  catch { state.relayPref = null; }
+  if ($('gearPop') && custTab === 'settings') buildGearPop();
+}
+async function saveRelayPref(enabled){
+  const r = await fetch(withKey('/api/relay-pref'), {
+    method: 'POST', headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ enabled }),
+  });
+  if (!r.ok) return showErr('Failed to save.');
+  state.relayPref = await r.json();
+  if ($('gearPop').classList.contains('open')) buildGearPop();
+}
 async function loadStability(){
   try { const r = await fetch(withKey('/api/stability')); state.stability = r.ok ? await r.json() : null; }
   catch { state.stability = null; }
@@ -12772,6 +13058,8 @@ function buildGearPop(){
     pop.innerHTML = gearTabsHTML() + gearSetHTML();
     wireGearCommon(pop);
     for (const b of pop.querySelectorAll('[data-gslang]')) b.onclick = () => saveLang(b.dataset.gslang);
+    for (const b of pop.querySelectorAll('[data-grelay]')) b.onclick = () => saveRelayPref(b.dataset.grelay === 'on');
+    for (const b of pop.querySelectorAll('[data-gabout]')) b.onclick = () => openAbout();
     const signBtn = pop.querySelector('[data-gsignin]');
     if (signBtn) signBtn.onclick = async () => {
       const msg = pop.querySelector('#licKeyMsg');
@@ -12797,6 +13085,7 @@ function buildGearPop(){
     if (stabilityBtn) stabilityBtn.onclick = () => { state.stability = null; buildGearPop(); loadStability(); };
     loadProjectRules();
     if (!state.stability) loadStability();
+    if (!state.relayPref) loadRelayPref();
     return;
   }
   if (custTab === 'mcp') {

package/engine/lib.mjs

@@ -1869,8 +1869,8 @@ export function reorderQueue(waiting, ids) {
   return [...orderByIds(queued, ids), ...rest];
 }
 
-// Priority queue ordering: '高' runs before '中' before '低'. A task with no
-// priority (or an unrecognized value) is treated as '中', matching the
+// Priority queue ordering: 'high' runs before 'medium' before 'low'. A task with
+// no priority (or an unrecognized value) is treated as 'medium', matching the
 // default new tasks are created with. Array.prototype.sort is a stable sort
 // (guaranteed by the spec), so this never disturbs the relative order tasks
 // already have within the same priority — that incoming order already
@@ -1879,12 +1879,39 @@ export function reorderQueue(waiting, ids) {
 // for everything it doesn't touch). Callers should feed this the array
 // *after* applying a drag reorder, so a drag only ever re-ranks within a
 // priority band rather than fighting it.
-export const TASK_PRIORITIES = ['高', '中', '低'];
-const PRIORITY_WEIGHT = { 高: 0, 中: 1, 低: 2 };
+//
+// The values were 高/中/低 until 2026-07-31 (Masa: the UI writes its own labels
+// in English — DESIGN-RULES §5.5). They are stored, sorted on, and sent over the
+// API, so the old ones cannot simply be swapped out: every task written before
+// today still says 高 on disk, and a browser tab left open on the old app will
+// keep PUTting 高 for as long as it stays open. Both are accepted forever and
+// normalised on the way in; nothing has to be migrated, and nothing that already
+// exists loses its place in the queue.
+export const TASK_PRIORITIES = ['high', 'medium', 'low'];
+const LEGACY_PRIORITIES = { 高: 'high', 中: 'medium', 低: 'low' };
+export const DEFAULT_PRIORITY = 'medium';
+
+export function normalizePriority(value) {
+  const v = String(value ?? '').trim();
+  if (TASK_PRIORITIES.includes(v)) return v;
+  if (LEGACY_PRIORITIES[v]) return LEGACY_PRIORITIES[v];
+  const lower = v.toLowerCase();
+  if (TASK_PRIORITIES.includes(lower)) return lower;   // 'High' from a hand-written call
+  return DEFAULT_PRIORITY;
+}
+
+// Whether a value is one this product accepts at all — the API's gate. Deliberately
+// wider than TASK_PRIORITIES: an old client sending 高 is not making a mistake.
+export function isAcceptedPriority(value) {
+  const v = String(value ?? '').trim();
+  return TASK_PRIORITIES.includes(v) || Boolean(LEGACY_PRIORITIES[v]) || TASK_PRIORITIES.includes(v.toLowerCase());
+}
+
+const PRIORITY_WEIGHT = { high: 0, medium: 1, low: 2 };
 export function sortQueueByPriority(tasks) {
   return tasks
     .map((t, i) => ({ t, i }))
-    .sort((a, b) => (PRIORITY_WEIGHT[a.t.priority] ?? 1) - (PRIORITY_WEIGHT[b.t.priority] ?? 1) || a.i - b.i)
+    .sort((a, b) => (PRIORITY_WEIGHT[normalizePriority(a.t.priority)] ?? 1) - (PRIORITY_WEIGHT[normalizePriority(b.t.priority)] ?? 1) || a.i - b.i)
     .map(({ t }) => t);
 }
 
@@ -3270,7 +3297,7 @@ export function buildGoalTask(goal, { id, num, passCondition = null, createdAt }
     mode: goal.mode ?? 'auto', skill: goal.skill ?? null,
     workspaceMode: resolveWorkspaceMode(goal.workspaceMode ?? goal.worktree),
     worktree: goal.worktree === false ? false : undefined,
-    status: 'queued', createdAt, priority: '中',
+    status: 'queued', createdAt, priority: DEFAULT_PRIORITY,
     result: null, changedFiles: [], secs: null, activity: [], proof: null, usage: null,
   };
 }

package/engine/server.mjs

@@ -21,7 +21,7 @@ import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 import { pathToFileURL } from 'node:url';
 import { bootBanner, bootDestination, folderLabel, chooseFolderScript, parseChosenFolder, buildFolderQuestion, resolveFolderAnswer, classifyFolderTarget, buildFolderInitConfirm, isFolderInitConfirmed, needsReviewPreference, buildReviewPreferenceQuestion, resolveReviewPreferenceAnswer, routeQuestionAnswer, notUnderstoodNote, parseRelocalizedQuestion, classifyAuthProbe, authBannerText, makeSigninChallenge, parseClaimResponse, isCommandOnPath, hostReadiness, parseRequestedWorkspaceDir } from './lib.mjs';
-import { parseStreamEvents, parseCodexEvents, buildCodexArgs, parsePlan, refinePlanTasks, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, classifyWorkerFailure, isForcedStop, taskStatusAfterVerify, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildReviewAttemptLedger, latestGoalOutcomeTask, buildDirtyWorkspacePrBlock, buildGoalProofMd, buildGoalPrBody, buildReviewSummaryPrompt, parseReviewSummary, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, rejectGoal, reopenGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, rebasePreviewUrl, shouldCreateGoalPR, normalizePullRequestUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, resolveTestGate, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, workerPrompt, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, buildQueueWaits, nextRunnableTasks, goalsConflict, detectConflicts, pickFoldTarget, autoFoldReviewsEnabled, parseGitUnifiedDiffLocations, hasTestRelevantChanges, parseFailingTestNames, classifyTestGate, classifyPrSafety, isInconclusiveTestRun, countInfraFlakes, classifyRunFailures, classifyVerifyGate, buildVerificationInfraError, verificationInfraErrorFrom, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, QUEUED_GOAL_STATUSES, verifyLicenseToken, licenseTokenPayload, shouldRefreshLicense, shouldEmitSetupCompleted, pickAnalyticsUid, shouldEmitFreeExhausted, detectRequestLanguage, testFailureReason, manualTestRetryPrompt, isNothingVerifiable, isNothingVerifiableForPR, isSuspiciouslyIncompleteDone, classifyComposerIntentHeuristic, detectPauseIntent, buildIntentPrompt, parseIntentResponse, buildBoardSnapshot, validateBoardSnapshot, boardIsEmpty, decideBoardPull, resolveConnectedAgents, pickAvailableAgent, pickUtilityAgent, utilityModel, liveTakeoverDecision, shouldOpenBrowserOnBoot, goalTaskTitle, buildGoalTask, shouldUsePlannerForGoal, RUN_DECL_FILE, REQUIREMENT_EVIDENCE_FILE, parseRequirementEvidenceDocument, parseRunDeclaration, SHOT_DIR, collectShotNames, parseGoalAddress, REPLY_OUTCOMES, buildGoalMessage, serializeGoalMessage, parseGoalMessages, computeInternalQualityMetrics, classifyInternalQualityTaskError, resolveWorkspaceMode, goalSessionFor, setGoalAgentSession, switchGoalAgentSession, parseApprovalRequest } from './lib.mjs';
+import { parseStreamEvents, parseCodexEvents, buildCodexArgs, parsePlan, refinePlanTasks, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, classifyWorkerFailure, isForcedStop, taskStatusAfterVerify, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildReviewAttemptLedger, latestGoalOutcomeTask, buildDirtyWorkspacePrBlock, buildGoalProofMd, buildGoalPrBody, buildReviewSummaryPrompt, parseReviewSummary, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, rejectGoal, reopenGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, rebasePreviewUrl, shouldCreateGoalPR, normalizePullRequestUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, DEFAULT_PRIORITY, normalizePriority, isAcceptedPriority, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, resolveTestGate, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, workerPrompt, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, buildQueueWaits, nextRunnableTasks, goalsConflict, detectConflicts, pickFoldTarget, autoFoldReviewsEnabled, parseGitUnifiedDiffLocations, hasTestRelevantChanges, parseFailingTestNames, classifyTestGate, classifyPrSafety, isInconclusiveTestRun, countInfraFlakes, classifyRunFailures, classifyVerifyGate, buildVerificationInfraError, verificationInfraErrorFrom, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, QUEUED_GOAL_STATUSES, verifyLicenseToken, licenseTokenPayload, shouldRefreshLicense, shouldEmitSetupCompleted, pickAnalyticsUid, shouldEmitFreeExhausted, detectRequestLanguage, testFailureReason, manualTestRetryPrompt, isNothingVerifiable, isNothingVerifiableForPR, isSuspiciouslyIncompleteDone, classifyComposerIntentHeuristic, detectPauseIntent, buildIntentPrompt, parseIntentResponse, buildBoardSnapshot, validateBoardSnapshot, boardIsEmpty, decideBoardPull, resolveConnectedAgents, pickAvailableAgent, pickUtilityAgent, utilityModel, liveTakeoverDecision, shouldOpenBrowserOnBoot, goalTaskTitle, buildGoalTask, shouldUsePlannerForGoal, RUN_DECL_FILE, REQUIREMENT_EVIDENCE_FILE, parseRequirementEvidenceDocument, parseRunDeclaration, SHOT_DIR, collectShotNames, parseGoalAddress, REPLY_OUTCOMES, buildGoalMessage, serializeGoalMessage, parseGoalMessages, computeInternalQualityMetrics, classifyInternalQualityTaskError, resolveWorkspaceMode, goalSessionFor, setGoalAgentSession, switchGoalAgentSession, parseApprovalRequest } from './lib.mjs';
 import { migrateRequirementModel, validateRequirementModel } from './requirement-model.mjs';
 import { buildManagerVerificationChecks, buildRequirementVerificationEvidence, mergeRequirementVerificationEvidence } from './requirement-verification.mjs';
 import { readRelayPref, writeRelayPref, resolveRelayEnabled } from './relay-pref.mjs';
@@ -2357,7 +2357,7 @@ function queueReplyTask(goal, text, { from = 'manager', via = 'composer' } = {})
     title: text.replace(/\s+/g, ' ').slice(0, 60), detail: promptText.slice(0, 4000), replyFrom: from,
     workspaceMode: resolveWorkspaceMode(goal.workspaceMode ?? goal.worktree),
     worktree: goal.worktree === false ? false : undefined,
-    passCondition: null, status: 'queued', createdAt: new Date().toISOString(), priority: '中',
+    passCondition: null, status: 'queued', createdAt: new Date().toISOString(), priority: DEFAULT_PRIORITY,
     result: null, changedFiles: [], secs: null, activity: [], proof: null, usage: null,
     userRequirementHistory: tasks.filter((t) => t.goalId === goal.id && (!t.reply || t.replyFrom === 'you')).slice(-12).map((t) => ({ text: t.reply ? t.detail : t.title, status: t.status })),
     // Transport the prior attempts as facts; the worker, not Manager, decides
@@ -4921,11 +4921,22 @@ const server = createServer(async (req, res) => {
         // guarded here.
         const runnable = !pending && !review && !approval;
         const lang = /[぀-ヿ㐀-鿿]/.test(text) ? 'ja' : 'en';
-        // Task 5 (PR運用ヒアリング): ask — once per project, before its first
-        // runnable goal — whether this project wants PRs.
-        const needsReviewPref = runnable && needsReviewPreference({ askedBefore: project.reviewPrefAsked });
-        const reviewPrefQuestion = needsReviewPref ? buildReviewPreferenceQuestion({ lang }) : undefined;
-        if (needsReviewPref) { project.reviewPrefAsked = true; saveProjects(); }
+        // Galda no longer asks "do you want PRs?" (Masa 2026-07-31). It used to ask once
+        // per project, before the first runnable goal, WITHOUT looking at what was asked —
+        // needsReviewPreference() was `return !askedBefore`. A first-time user typing
+        // 「テスト」 got interrogated about pull requests, and because the folder question
+        // had claimed the needsInput slot on message 1, it landed on message 2, out of
+        // nowhere. (That folder question is gone too, as of #642 — this is the other half
+        // of the same interrogation.)
+        //
+        // Nothing needs the answer: resolveWantsPR() already falls back to
+        // `!preferenceKnown && isImplementationRequest(text)`, i.e. a PR for work that looks
+        // like implementation and none for 「テスト」 — which is the behaviour the question
+        // was there to obtain. Projects that already answered keep their setting, and an
+        // agent that genuinely needs to know can ask for itself: the question layer belongs
+        // to Claude Code / Codex, not to Galda.
+        const needsReviewPref = false;
+        const reviewPrefQuestion = undefined;
         // Clamp to whatever agent CLIs are actually installed on this machine
         // (connected-agents Phase A) — a requested/default agent that isn't
         // present would otherwise spawn a worker doomed to fail at launch.
@@ -5317,7 +5328,7 @@ const server = createServer(async (req, res) => {
     return;
   }
 
-  // change a queued task's priority (高/中/低) — re-sorts its project's queue
+  // change a queued task's priority (high/medium/low) — re-sorts its project's queue
   // so a bumped-up task actually runs sooner, not just displays that way.
   const priorityMatch = url.pathname.match(/^\/api\/tasks\/(\d+)\/priority$/);
   if (priorityMatch && req.method === 'PUT') {
@@ -5329,8 +5340,11 @@ const server = createServer(async (req, res) => {
     req.on('end', () => {
       try {
         const { priority } = JSON.parse(body);
-        if (!TASK_PRIORITIES.includes(priority)) return json(res, 400, { error: `priority must be one of: ${TASK_PRIORITIES.join(', ')}` });
-        task.priority = priority;
+        // A browser left open on yesterday's app still sends 高/中/低. Refusing it
+        // would break a tab nobody reloaded, for a rename that is ours, so the old
+        // words are accepted and stored as the new ones.
+        if (!isAcceptedPriority(priority)) return json(res, 400, { error: `priority must be one of: ${TASK_PRIORITIES.join(', ')}` });
+        task.priority = normalizePriority(priority);
         saveTask(task);
         const q = queues.get(task.projectId);
         if (q) { q.waiting = sortQueueByPriority(q.waiting); for (const t of q.waiting) saveTask(t); }
@@ -5506,9 +5520,26 @@ const server = createServer(async (req, res) => {
         const existing = projects.find((p) => p.dir === dir);
         let proj = existing;
         if (!proj) {
-          proj = { id: uniqueProjectId(basename(dir)), name: basename(dir), dir };
-          projects.push(proj); saveProjects();
-          queues.set(proj.id, { running: new Set(), waiting: [] });
+          // The free tier allows one project, and POST /api/projects enforces that — but
+          // this path never did, so every folder someone named here minted another one
+          // (measured 2026-07-31: a first-time user on the free tier ended up with three).
+          // At the cap, "pick a folder" means "this is the folder I work in", so point the
+          // project someone already has at it instead of inventing a second.
+          const atCap = checkFreeTierLimit({ ...computeFreeTierUsage(goal.owner ?? 'owner'), projectCount: projects.length + 1 }).reason === 'project-limit';
+          // Only ever the goal's OWN project. A folder question only fires when that
+          // project's dir is HOME or not a repo, so it is by definition the unusable one
+          // and pointing it at the chosen folder is what the person just asked for. Never
+          // repoint somebody else's project to make room.
+          const reusable = atCap ? projects.find((p) => p.id === goal.projectId) : null;
+          if (reusable) {
+            reusable.dir = dir;
+            saveProjects();
+            proj = reusable;
+          } else {
+            proj = { id: uniqueProjectId(basename(dir)), name: basename(dir), dir };
+            projects.push(proj); saveProjects();
+            queues.set(proj.id, { running: new Set(), waiting: [] });
+          }
         }
         goal.projectId = proj.id;
         goal.question = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@galda/cli",
-  "version": "0.10.118",
+  "version": "0.10.120",
   "type": "module",
   "description": "Galda - hand off work to Claude Code or Codex, get proof back. Runs on your existing subscription, no extra API cost.",
   "scripts": {