@galda/cli 0.10.60 → 0.10.65

package/app/index.html

@@ -2020,6 +2020,12 @@
   .sa-item.lg .sa-act{margin-top:13px;border-top:1px solid var(--hair);padding-top:13px}
   .sa-chatwrap{flex:1;min-width:150px;position:relative;display:flex;align-items:center}
   .sa-chatwrap .sa-chat{padding-right:42px}
+  .sa-replybox{flex:1;min-width:150px;display:flex;flex-direction:column;gap:6px}
+  .sa-replyattach{display:none;gap:6px;flex-wrap:wrap;min-height:0}
+  .sa-replyattach.has{display:flex}
+  .sa-replythumb{position:relative;width:44px;height:44px;border:1px solid var(--hair2);border-radius:7px;overflow:hidden;background:var(--canvas)}
+  .sa-replythumb img{width:100%;height:100%;object-fit:cover;display:block}
+  .sa-replythumb button{position:absolute;right:2px;top:2px;width:17px;height:17px;border:0;border-radius:50%;background:rgba(0,0,0,.72);color:#fff;font:500 12px/17px var(--ui);padding:0;cursor:pointer}
   /* send-back button = the spinning prism ring (§1.5-6), same palette source as the
      main composer's --ringgrad; centre stays transparent so it sits into the row */
   @keyframes iringspin{to{transform:rotate(360deg)}}
@@ -2227,6 +2233,19 @@
   .redesign .ghfoot{margin-top:8px;font-family:var(--mono);font-size:11.5px;color:var(--ink3);display:flex;gap:2px;align-items:center;flex-wrap:wrap}
   .redesign .ghfoot .ghopen{color:var(--ink2);text-decoration:none}
   .redesign .ghfoot .ghopen:hover{color:var(--blue)}
+  /* Keep the useful summary visible, but fold long diffs so the reply box stays nearby. */
+  .redesign .ghwrap{position:relative}
+  .redesign .ghwrap.clip .rdiff2{max-height:264px}
+  .redesign .ghfade{display:none;position:absolute;left:0;right:0;bottom:0;height:52px;pointer-events:none;
+    border-radius:0 0 8px 8px;background:linear-gradient(to bottom,rgba(0,0,0,0),var(--panel))}
+  .redesign .ghwrap.clip .ghfade{display:block}
+  .redesign .ghmore{margin-top:8px;display:inline-flex;align-items:center;gap:7px;font-family:var(--mono);
+    font-size:11.5px;color:var(--ink3);background:transparent;border:0;padding:5px 9px 5px 7px;border-radius:8px;cursor:pointer}
+  .redesign .ghmore:hover{background:var(--hover);color:var(--ink)}
+  .redesign .ghmore .chev{width:11px;height:11px;flex:0 0 auto;transition:transform .16s}
+  .redesign .ghmore .chev path{stroke:currentColor;stroke-width:1.8;fill:none;stroke-linecap:round;stroke-linejoin:round}
+  .redesign .ghmore.open .chev{transform:rotate(180deg)}
+  .redesign .ghmore .n{color:var(--ink2);font-variant-numeric:tabular-nums}
   /* meta links carry NO underline — PR is a real <a href> (spec §5, Masa 2026-07-20) */
   .redesign .rmeta a{text-decoration:none}
   /* Request / What-to-check = full contrast, same ink as the title (spec §2, no fade) */
@@ -3354,7 +3373,7 @@ const savedTheme = (() => {
   if (v !== s) localStorage.setItem('theme', v);
   return v;
 })();
-const state = { repos: null, repoHome: '', /* GET /api/repos — the folders a project can point at (Context Bar) */ projects: [], goals: [], tasks: [], act: {}, actAt: {}, todos: {}, chatTurns: {}, active: localStorage.getItem('sel:project') || 'default', editing: null, attach: [], connectCommand: '', models: ['sonnet'], agentModels: null, agentEfforts: null, agents: ['claude-code', 'codex'], expanded: new Set(), openThreads: new Set(), queueOrder: {}, externalActivity: [], selectedGoal: null, workflowColumns: {}, wfDraft: null, reviewDefinitions: {}, rdDraft: null, connectedApp: localStorage.getItem('sel:agent') || 'claude-code', reviewOpenGoal: null, reviewApprovals: {}, goalDetailOpen: null, qreplyOpen: new Set(), logCollapsed: localStorage.getItem('logCollapsed') !== '0', logEntries: [], layout: localStorage.getItem('layout') || 'flagship', theme: savedTheme, boardskin: localStorage.getItem('boardskin') || 'auto', summaryPattern: Number(localStorage.getItem('summaryPattern')) || 3, peraSpot: 0, skill: null, skillsCache: null, projectRules: {}, rulesOpen: false,
+const state = { repos: null, repoHome: '', /* GET /api/repos — the folders a project can point at (Context Bar) */ projects: [], goals: [], tasks: [], act: {}, actAt: {}, todos: {}, chatTurns: {}, active: localStorage.getItem('sel:project') || 'default', editing: null, attach: [], connectCommand: '', models: ['sonnet'], agentModels: null, agentEfforts: null, agents: ['claude-code', 'codex'], auth: null, expanded: new Set(), openThreads: new Set(), queueOrder: {}, externalActivity: [], selectedGoal: null, workflowColumns: {}, wfDraft: null, reviewDefinitions: {}, rdDraft: null, connectedApp: localStorage.getItem('sel:agent') || 'claude-code', reviewOpenGoal: null, reviewApprovals: {}, goalDetailOpen: null, qreplyOpen: new Set(), logCollapsed: localStorage.getItem('logCollapsed') !== '0', logEntries: [], layout: localStorage.getItem('layout') || 'flagship', theme: savedTheme, boardskin: localStorage.getItem('boardskin') || 'auto', summaryPattern: Number(localStorage.getItem('summaryPattern')) || 3, peraSpot: 0, skill: null, skillsCache: null, projectRules: {}, rulesOpen: false,
   // per-message send overrides set via slash-commands (reset after each send,
   // except model which is sticky in localStorage). palette = open command list.
   msg: { mode: null, model: null, effort: null, skill: null, later: false, review: false },
@@ -7694,29 +7713,67 @@ function showBillingBlocked(blocked){
   billingBlockedActive = true;
 }
 
-// Worker sign-in banner. The server preflights `claude` at boot (/api/state.auth
-// + SSE ev:'auth'); if it isn't signed in, every worker would fail with "Not
-// logged in", so the queue is held server-side and this standing banner tells
-// the user how to fix it. Reuses #errbar + the .bx-ask card (bordered, red as a
-// left rule only — no new chrome), but WITHOUT an auto-hide timer since the
-// condition persists until the user relaunches signed-in. Chrome is English to
-// match the rest of the app.
-const AUTH_REASON_TEXT = {
-  'logged-out': 'Not signed in to claude. Run `claude` in a terminal and /login, then relaunch the manager from that terminal — tasks are paused until then.',
-  'bad-credentials': 'Worker sign-in failed. Check ANTHROPIC_API_KEY, or run `claude` and /login, then relaunch the manager from that terminal.',
-  'probe-failed': 'Couldn’t verify claude sign-in. Ensure the `claude` CLI is installed and signed in, then relaunch the manager.',
-  'rate-limited': 'Claude is temporarily unavailable. Your Claude tasks are safely waiting. Tap “Run with Codex” beside a task to start it now.',
+const AUTH_COPY = {
+  ja: {
+    connectTitle: '接続が必要です', connectBody: 'Claude Codeとの接続が切れています。ボタンから接続してください。', connect: 'Claude Codeを接続', retry: '接続を確認',
+    limitTitle: 'Claudeは利用上限です', limitBody: '作業は安全に待機しています。すぐ続ける場合は、待機中のタスクをCodexへ切り替えられます。', limitWait: '作業は安全に待機しています。Claudeが再び使えるようになると自動で再開します。', codex: 'Codexで続ける',
+  },
+  en: {
+    connectTitle: 'Connect Claude Code', connectBody: 'Claude Code is disconnected. Use the button to reconnect and continue.', connect: 'Connect Claude Code', retry: 'Check connection',
+    limitTitle: 'Claude limit reached', limitBody: 'Your work is safely waiting. Switch the waiting tasks to Codex if you want to continue now.', limitWait: 'Your work is safely waiting and will resume automatically when Claude is available.', codex: 'Continue with Codex',
+  },
 };
 function renderAuthBanner(auth){
   const bar = $('errbar');
-  if (auth && auth.ok === false){
+  state.auth = auth ?? state.auth;
+  if (state.connectedApp === 'claude-code' && state.auth?.ok === false){
     authDown = true;
-    const text = AUTH_REASON_TEXT[auth.reason] || AUTH_REASON_TEXT['logged-out'];
+    const copy = AUTH_COPY[billingLang()];
+    const limited = state.auth.reason === 'rate-limited';
+    const canUseCodex = (state.agents || []).includes('codex');
     bar.classList.add('billing'); // strips #errbar's error fill so the card stands alone
-    bar.innerHTML = `<div class="bx-ask"><div class="bx-qt"><div class="bx-lb">Sign in</div>`
-      + `<div class="bx-q">${esc(text)}</div></div></div>`;
+    bar.innerHTML = `<div class="bx-ask${limited ? ' info' : ''}"><div class="bx-qt"><div class="bx-lb">${limited ? copy.limitTitle : copy.connectTitle}</div>`
+      + `<div class="bx-q">${limited ? (canUseCodex ? copy.limitBody : copy.limitWait) : copy.connectBody}</div></div>`
+      + `<div class="bx-act">${limited && canUseCodex
+        ? `<button class="bx-cta" id="bxUseCodex">${copy.codex}</button>`
+        : limited ? '' : `<button class="bx-cta" id="bxConnectClaude">${copy.connect}</button><button class="bx-cta" id="bxRetryClaude">${copy.retry}</button>`}</div></div>`;
     bar.style.display = 'block';
     clearTimeout(errTimer); // this banner persists — no auto-hide
+    const codex = bar.querySelector('#bxUseCodex');
+    if (codex) codex.onclick = async () => {
+      codex.disabled = true;
+      try {
+        const r = await fetch(withKey('/api/worker-auth/run-with-codex'), { method: 'POST' });
+        const body = await r.json().catch(() => ({}));
+        if (!r.ok) throw new Error(body.error || 'Could not switch to Codex.');
+        renderAuthBanner({ ok: true });
+        showToast(copy === AUTH_COPY.ja ? `${body.changed}件をCodexで再開しました。` : `${body.changed} task${body.changed === 1 ? '' : 's'} resumed with Codex.`);
+        await refresh();
+      } catch (e) { showErr(e.message || 'Could not switch to Codex.'); }
+      finally { codex.disabled = false; }
+    };
+    const connect = bar.querySelector('#bxConnectClaude');
+    if (connect) connect.onclick = async () => {
+      connect.disabled = true;
+      try {
+        const r = await fetch(withKey('/api/worker-auth/connect'), { method: 'POST' });
+        if (!r.ok) throw new Error();
+        showToast(copy === AUTH_COPY.ja ? '接続画面を開きました。完了後に「接続を確認」を押してください。' : 'Connection opened. When finished, choose “Check connection”.');
+      } catch { showErr(copy === AUTH_COPY.ja ? '接続画面を開けませんでした。' : 'Could not open the connection.'); }
+      finally { connect.disabled = false; }
+    };
+    const retry = bar.querySelector('#bxRetryClaude');
+    if (retry) retry.onclick = async () => {
+      retry.disabled = true;
+      try {
+        const r = await fetch(withKey('/api/worker-auth/retry'), { method: 'POST' });
+        const body = await r.json().catch(() => ({}));
+        if (!r.ok) throw new Error();
+        renderAuthBanner(body.auth);
+        if (body.auth?.ok) showToast(copy === AUTH_COPY.ja ? '接続できました。' : 'Connected.');
+      } catch { showErr(copy === AUTH_COPY.ja ? 'まだ接続できていません。' : 'Not connected yet.'); }
+      finally { retry.disabled = false; }
+    };
   } else if (authDown) {
     authDown = false;
     bar.classList.remove('billing');
@@ -7968,7 +8025,7 @@ async function refresh(){
     state.connectCommand = s.connectCommand ?? ''; state.models = s.models ?? ['sonnet']; state.agentModels = s.agentModels ?? null; state.agentEfforts = s.agentEfforts ?? null; state.agents = s.agents ?? ['claude-code', 'codex']; state.uiVersion = s.uiVersion;
     state.billing = s.billing ?? { licensed: false, email: null };
     renderAppSelect(); // picker follows the server's installed-agent set; may correct a stale connectedApp
-    renderAuthBanner(s.auth); // show/clear the worker sign-in banner from the boot preflight
+    renderAuthBanner(s.auth); // only the selected worker's auth can raise a banner
     setAgentModel(state.connectedApp);
     setAgentEffort(state.connectedApp);
     renderModelSelect();
@@ -8065,7 +8122,7 @@ function connectSSE(){
       if (!state.projects.some((p) => p.id === state.active)) state.active = state.projects[0]?.id;
     }
     else if (m.ev === 'ping') { checkUiVersion(m.uiVersion); return; }
-    else if (m.ev === 'auth') { renderAuthBanner(m.auth); return; } // worker sign-in preflight result
+    else if (m.ev === 'auth') { renderAuthBanner(m.auth); return; } // selected worker's sign-in preflight result
     scheduleRender();
   };
   es.onerror = () => {
@@ -8700,7 +8757,23 @@ function closeSummaryPera(){ $('summaryOverlay').classList.remove('show'); }
 // 4 archived / 5 reverted — session-local; the server round-trip is what
 // settles it (see saSync's "returned to review" reset).
 // ============================================================================
-const SA = { open: false, items: [], diffs: {}, actLog: {}, msgs: {}, convOpen: new Set(), shotBox: {}, detOpen: new Set(), focusGid: null, focusScrolled: false, focusTimer: null, cur: null, solo: null };
+const SA = { open: false, items: [], diffs: {}, actLog: {}, msgs: {}, convOpen: new Set(), shotBox: {}, detOpen: new Set(), diffOpen: new Set(), attachments: {}, focusGid: null, focusScrolled: false, focusTimer: null, cur: null, solo: null };
+function saReplyAttachmentsHtml(goalId){
+  return (SA.attachments[goalId] || []).map((a, i) => `<span class="sa-replythumb"><img src="${esc(a.url)}" alt="Attached image"><button type="button" data-saarm="${goalId}:${i}" aria-label="Remove image">×</button></span>`).join('');
+}
+function saPaintAttachments(goalId){
+  const host = document.querySelector(`#seeall [data-saattach="${goalId}"]`);
+  if (!host) return;
+  host.innerHTML = saReplyAttachmentsHtml(goalId);
+  host.classList.toggle('has', Boolean(SA.attachments[goalId]?.length));
+}
+async function saAttachImage(goalId, file){
+  if (!file || !String(file.type).startsWith('image/')) return;
+  const uploaded = await uploadReturn(file);
+  if (!uploaded) return;
+  (SA.attachments[goalId] ||= []).push(uploaded);
+  saPaintAttachments(goalId);
+}
 window.SA = SA; // top-level const isn't a window property; external checks probe window.SA (same convention as window.state above)
 const SA_SVG = {
   ok: '<svg viewBox="0 0 24 24"><path d="M4 12l5 5L20 6"/></svg>',
@@ -8982,13 +9055,13 @@ function saMarkWordSpans(rows){
   }
   return rows;
 }
-function saGhDiffHtml(diff, pr){
+function saGhDiffHtml(diff, pr, goalId){
   const rows = saMarkWordSpans(saUnifiedToGh(diff));
   if (!rows.length) return '';
   // Say what was left out. Before this, a 5000-line change rendered its first 80 rows
   // and stopped — a quiet lie, and the one thing SPEC §7 names as forbidden.
   const more = Math.max(0, saDiffRowCount(diff) - rows.length);
-  return saGhDiffRowsHtml(rows, more, pr || '');
+  return saGhDiffRowsHtml(rows, more, pr || '', goalId);
 }
 // One Activity transcript row (spec §3): You / tool (mono, bold name) / res (green) /
 // Claude. Mirrors the flagship artifact's tx mapping so the pulldown pixel-matches.
@@ -9067,9 +9140,10 @@ function saMsgRowsHtml(msgs, expanded){
 // word-level highlight (h) and, for a huge change, a "…+N 行 · GitHub で開く ↗"
 // footer (only linking to GitHub when a PR exists). Mirrors the flagship artifact's
 // ghDiffHtml so the app pixel-matches. `more` = extra unshown line count; `pr` = url.
-function saGhDiffRowsHtml(rows, more, pr){
+const SA_DIFF_FOLD_OVER = 14;
+function saGhDiffRowsHtml(rows, more, pr, goalId){
   if (!rows || !rows.length) return '';
-  const body = '<div class="rdiff2">' + rows.map((l) => {
+  const inner = rows.map((l) => {
     const cls = l.t === 'add' ? 'gh-add' : l.t === 'del' ? 'gh-del' : 'gh-ctx';
     const mk = l.t === 'add' ? '+' : l.t === 'del' ? '−' : '';
     let code = esc(l.c);
@@ -9080,9 +9154,17 @@ function saGhDiffRowsHtml(rows, more, pr){
       code = `${esc(l.c.slice(0, a))}<span class="gh-hi">${esc(l.c.slice(a, b))}</span>${esc(l.c.slice(b))}`;
     } else if (l.h) { const h = esc(l.h); code = code.replace(h, `<span class="gh-hi">${h}</span>`); }
     return `<div class="ghl ${cls}"><span class="gho">${l.o ?? ''}</span><span class="ghn">${l.n ?? ''}</span><span class="ghm">${mk}</span><span class="ghc">${code}</span></div>`;
-  }).join('') + '</div>';
+  }).join('');
   const foot = more ? `<div class="ghfoot"><span>…+${more} 行</span>${pr ? ` · <a class="ghopen" href="${esc(pr)}" target="_blank" rel="noopener">GitHub で開く ↗</a>` : ''}</div>` : '';
-  return body + foot;
+  if (goalId != null && rows.length > SA_DIFF_FOLD_OVER) {
+    const open = SA.diffOpen.has(goalId);
+    const label = open ? 'Collapse' : `Show all <span class="n">${rows.length}</span> lines`;
+    return `<div class="ghwrap${open ? '' : ' clip'}"><div class="rdiff2">${inner}</div><div class="ghfade"></div></div>`
+      + `<button type="button" class="ghmore${open ? ' open' : ''}" data-ghmore="${goalId}" data-total="${rows.length}" aria-expanded="${open}">`
+      + `<svg class="chev" viewBox="0 0 12 12" aria-hidden="true"><path d="M2.5 4.5 6 8l3.5-3.5"/></svg><span class="ghlabel">${label}</span></button>`
+      + foot;
+  }
+  return `<div class="rdiff2">${inner}</div>` + foot;
 }
 // Screen-recording player for Proof (REVIEW-CARD-SPEC §6). A real file (recordingUrl)
 // renders a native <video controls>; otherwise a self-contained SVG player mockup
@@ -9287,8 +9369,8 @@ function saItemHtml(it, i){
     : (d && d.files.length) ? `<div class="rfiles">${d.files.map((f) => `${esc(f.path)}  <i class="a">+${f.add}</i> <i class="d">−${f.del}</i>`).join('<br>')}</div>`
       : (clientDiff && filePaths.length) ? `<div class="rfiles">${filePaths.map((p) => esc(p)).join('<br>')}</div>` : '';
   const diffHtml = it.ghRows
-    ? saGhDiffRowsHtml(it.ghRows, it.diffTotal || 0, it.pr || '')
-    : hasGitDiff ? saGhDiffHtml(d.diff, it.pr) : clientDiff ? saGhDiffHtml(clientDiff, it.pr) : '';
+    ? saGhDiffRowsHtml(it.ghRows, it.diffTotal || 0, it.pr || '', gk)
+    : hasGitDiff ? saGhDiffHtml(d.diff, it.pr, gk) : clientDiff ? saGhDiffHtml(clientDiff, it.pr, gk) : '';
   const changedBody = isConv ? '' : (changedDescHtml + filesListHtml + diffHtml);
   // ── sensitive-area note (real: classifyChangeRisk forced the pause) ──
   const risk = it.risk;
@@ -9387,7 +9469,7 @@ function saItemHtml(it, i){
     ${conversationSec}
     ${activitySec}
     ${S('Workflow', saWorkflowHtml(it))}
-    <div class="sa-act">${attn ? '' : `<button class="sa-app" data-saact="app:${i}">${SA_SVG.ok}Approve</button><button class="sa-dis" data-saact="dis:${i}">Dismiss</button>`}<div class="sa-chatwrap"><input class="sa-chat" data-i="${i}" data-goal="${it.goalId}" placeholder="Reply, ask, or send back to the AI…"><button class="sa-send" data-saact="send:${i}" title="Send"><svg viewBox="0 0 24 24"><path d="M12 19V5M5 12l7-7 7 7"/></svg></button></div><button class="sa-ic" title="Archive" data-saact="arch:${i}">${SA_SVG.arch}</button><button class="sa-ic" title="Revert" data-saact="rev:${i}">${SA_SVG.trash}</button></div>
+    <div class="sa-act">${attn ? '' : `<button class="sa-app" data-saact="app:${i}">${SA_SVG.ok}Approve</button><button class="sa-dis" data-saact="dis:${i}">Dismiss</button>`}<div class="sa-replybox"><div class="sa-replyattach${SA.attachments[it.goalId]?.length ? ' has' : ''}" data-saattach="${it.goalId}">${saReplyAttachmentsHtml(it.goalId)}</div><div class="sa-chatwrap"><input class="sa-chat" data-i="${i}" data-goal="${it.goalId}" placeholder="Reply, ask, or paste an image…"><button class="sa-send" data-saact="send:${i}" title="Send"><svg viewBox="0 0 24 24"><path d="M12 19V5M5 12l7-7 7 7"/></svg></button></div></div><button class="sa-ic" title="Archive" data-saact="arch:${i}">${SA_SVG.arch}</button><button class="sa-ic" title="Revert" data-saact="rev:${i}">${SA_SVG.trash}</button></div>
   </div>`;
 }
 // Scroll the See-all body so a card's top edge (.rhead) sits at the top of the visible
@@ -9629,6 +9711,24 @@ async function saReplyCall(it, text, outcome){
   if (!r?.ok) throw new Error('reply failed');
   return r.json().catch(() => null);
 }
+// Once feedback becomes rework, remove it from Review immediately and repaint the board
+// from the response. A queued reply appears in To Do; the next worker event promotes it to
+// Doing. Questions/unsure replies keep status=review and never come through this function.
+function saMoveFeedbackOutOfReview(it, body){
+  const goal = body?.goal;
+  const task = body?.task;
+  if (goal?.id) upsert(state.goals, goal);
+  if (task?.id) upsert(state.tasks, task);
+  const at = SA.items.findIndex((row) => row.goalId === it.goalId);
+  const next = at >= 0 ? (SA.items[at + 1] || SA.items[at - 1]) : null;
+  if (at >= 0) SA.items.splice(at, 1);
+  render();
+  if (SA.solo === it.goalId || !SA.items.length) { saRender(); saClose(); return; }
+  SA.cur = next?.goalId ?? SA.items[0]?.goalId ?? null;
+  SA.focusGid = SA.cur;
+  SA.focusScrolled = false;
+  saRender();
+}
 function saCardEl(goalId){ return document.querySelector(`#seeall .sa-item[data-gid="${goalId}"]`); }
 // Flip one card to its "Working on it" head without redrawing anything else (決定2).
 function saFlipWorking(goalId){
@@ -9657,11 +9757,18 @@ function saPaintCard(goalId){
 // instruction (continue).
 async function saSendReply(it, i, text){
   const goalId = it.goalId;
+  const attached = (SA.attachments[goalId] || []).slice();
+  const displayText = text || (attached.length === 1 ? 'Attached an image.' : `Attached ${attached.length} images.`);
+  const workerText = attached.length
+    ? `${text}${text ? '\n\n' : ''}Attached images (read these absolute paths): ${attached.map((a) => a.path).join(', ')}`
+    : text;
+  text = displayText;
   await saEnsureThread(it);              // fold in any existing history BEFORE this reply (so it isn't hidden)
   const seq = saNextSeq();               // reserve send order NOW, so a late-resolving route keeps its place
   // Clear the box in place — keep it FOCUSED, not blurred (saSync skips a rebuild while an
   // input in #seeall has focus, which is what keeps an SSE tick from flashing the panel).
   document.querySelectorAll(`#seeall .sa-item[data-gid="${goalId}"] .sa-chat`).forEach((inp) => { inp.value = ''; });
+  delete SA.attachments[goalId]; saPaintAttachments(goalId);
   // Append the line to the card's own thread immediately — this is what the person sees, and
   // its `seq` fixes its order regardless of when any round trip returns.
   it.rthread = [...(it.rthread || []), { who: 'you', text, seq }];
@@ -9674,7 +9781,7 @@ async function saSendReply(it, i, text){
     it.st = 3; it.rstatus = 'working'; SA.cur = goalId;
     saPaintCard(goalId);
     try {
-      const r = await fetch(withKey(`/api/goals/${goalId}/reply`), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ text }) });
+      const r = await fetch(withKey(`/api/goals/${goalId}/reply`), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ text: workerText }) });
       if (!r.ok) throw new Error('reply failed');
       if (isAttn) {
         // A Needs-you reply picks the goal back up → it belongs in Doing, not lingering in
@@ -9685,6 +9792,7 @@ async function saSendReply(it, i, text){
         render();   // saSync skips the focused card, so this only refreshes the lane behind it
       }
     } catch {
+      SA.attachments[goalId] = attached; saPaintAttachments(goalId);
       it.rthread = it.rthread.filter((m) => m.seq !== seq);   // roll back just this line
       if (!it.rthread.some((m) => m.who === 'you')) { it.st = 0; it.rstatus = null; }
       saPaintCard(goalId); showErr('Reply failed.');
@@ -9697,7 +9805,7 @@ async function saSendReply(it, i, text){
   it.inflight = true; it.rstatus = 'thinking'; SA.cur = goalId;
   saPaintCard(goalId);
   try {
-    let body = await saReplyCall(it, text, 'auto');
+    let body = await saReplyCall(it, workerText, 'auto');
     if (body?.outcome === 'unsure') {
       it.inflight = false; it.rstatus = 'unsure'; it.rchoices = body.choices || REPLY_OUTCOMES_CLIENT;
       saPaintCard(goalId);
@@ -9709,7 +9817,7 @@ async function saSendReply(it, i, text){
         saPaintCard(goalId); return;
       }
       it.inflight = true; it.rstatus = 'thinking'; saPaintCard(goalId);
-      body = await saReplyCall(it, text, picked);
+      body = await saReplyCall(it, workerText, picked);
     }
     it.inflight = false;
     if (body?.outcome === 'answer') {              // a question: the AI answers, the goal never moves
@@ -9719,10 +9827,17 @@ async function saSendReply(it, i, text){
       it.rstatus = null; saPaintCard(goalId);
       return;
     }
-    // continue: the card is now "Working on it".
-    it.st = 3; it.rstatus = 'working'; SA.cur = goalId;
+    // A change request has left Review. The response is the source of truth for whether it
+    // is queued (To Do) or already starting (Doing); reveal that transition immediately.
+    if (body?.goal && body.goal.status !== 'review') {
+      saMoveFeedbackOutOfReview(it, body);
+      return;
+    }
+    // split keeps the original goal in Review; only the newly-created ticket moves away.
+    it.rstatus = null;
     saPaintCard(goalId);
   } catch {
+    SA.attachments[goalId] = attached; saPaintAttachments(goalId);
     it.inflight = false;
     it.rthread = it.rthread.filter((m) => m.seq !== seq);
     if (!it.rthread.length) it.rstatus = null;
@@ -9752,6 +9867,27 @@ async function saAct(it, st, path, body){
 const SA_UNDO = { 1: 'revert-review', 2: 'reopen', 3: 'undismiss', 4: 'unarchive' }; // 07-20c: st 2 = Reject, undo = reopen
 $('seeall').addEventListener('mousedown', (e) => { if (e.target === $('seeall')) saClose(); }); // no-dim dialog: outside = close
 $('seeall').addEventListener('click', async (e) => {
+  // Toggle only the diff in place. Avoiding a full render preserves the review scroll position.
+  const diffMore = e.target.closest('[data-ghmore]');
+  if (diffMore) {
+    const goalId = Number(diffMore.dataset.ghmore);
+    const open = !SA.diffOpen.has(goalId);
+    if (open) SA.diffOpen.add(goalId); else SA.diffOpen.delete(goalId);
+    diffMore.previousElementSibling?.classList.toggle('clip', !open);
+    diffMore.classList.toggle('open', open);
+    diffMore.setAttribute('aria-expanded', String(open));
+    const label = diffMore.querySelector('.ghlabel');
+    if (label) label.innerHTML = open ? 'Collapse' : `Show all <span class="n">${diffMore.dataset.total}</span> lines`;
+    return;
+  }
+  const removeImage = e.target.closest('[data-saarm]');
+  if (removeImage) {
+    const [goalId, index] = removeImage.dataset.saarm.split(':').map(Number);
+    SA.attachments[goalId]?.splice(index, 1);
+    if (!SA.attachments[goalId]?.length) delete SA.attachments[goalId];
+    saPaintAttachments(goalId);
+    return;
+  }
   // "+N more" in a conversation: show the whole thing, in place. Nothing was summarised
   // away, so this only has to stop hiding it (§B3).
   const more = e.target.closest('.convmore');
@@ -9824,7 +9960,7 @@ $('seeall').addEventListener('click', async (e) => {
     // same round-trip as Enter-in-.sa-chat below — one send-back code path either way.
     const inp = $('seeall').querySelector(`.sa-chat[data-i="${i}"]`);
     const text = inp?.value.trim();
-    if (!text) { inp?.focus(); return; }
+    if (!text && !SA.attachments[it.goalId]?.length) { inp?.focus(); return; }
     return saSendReply(it, i, text);
   }
   if (k === 'undo') {
@@ -9840,11 +9976,20 @@ $('seeall').addEventListener('click', async (e) => {
 $('seeall').addEventListener('keydown', (e) => {
   if (!e.target.classList?.contains('sa-chat') || e.key !== 'Enter' || e.isComposing) return;
   const text = e.target.value.trim();
-  if (!text) return;
-  e.preventDefault();
   const it = SA.items[Number(e.target.dataset.i)];
+  if (!text && !SA.attachments[it?.goalId]?.length) return;
+  e.preventDefault();
   if (it) saSendReply(it, Number(e.target.dataset.i), text); // no extra confirm (PRD §5.1): Enter = sent
 });
+$('seeall').addEventListener('paste', (e) => {
+  const input = e.target.closest('.sa-chat');
+  if (!input) return;
+  const images = [...(e.clipboardData?.items || [])].filter((item) => item.type.startsWith('image/'));
+  if (!images.length) return;
+  e.preventDefault();
+  const goalId = Number(input.dataset.goal);
+  for (const item of images) saAttachImage(goalId, item.getAsFile());
+});
 document.addEventListener('keydown', (e) => {
   if (!SA.open || ['INPUT', 'TEXTAREA'].includes(e.target.tagName)) return;
   if (e.key === 'Escape') return saClose();
@@ -10069,6 +10214,7 @@ $('appmenu').addEventListener('click', (e) => {
   renderModelSelect();
   renderEffortSelect();
   renderMsgHint();
+  renderAuthBanner(state.auth);
   $('appmenu').classList.remove('show');
   const projectId = state.active;
   if (projectId) fetch(withKey(`/api/projects/${encodeURIComponent(projectId)}/queue-agent`), {

package/engine/server.mjs

@@ -26,7 +26,7 @@ import { createSerialQueue } from './lib.mjs';
 import { collectProjectRules } from './lib.mjs';
 import { FALLBACK_CODEX_MODELS, loadCodexModels } from './codex-models.mjs';
 import { CLAUDE_MODELS } from './claude-models.mjs';
-import { classifyWorkerPreflight, workerCanStart } from './worker-availability.mjs';
+import { classifyWorkerPreflight, shouldProbeClaudeAuth, workerCanStart } from './worker-availability.mjs';
 import { openPR } from './pr.mjs';
 import { runVerification, exerciseUi } from './verify.mjs';
 
@@ -1183,6 +1183,7 @@ function runClaude({ prompt, cwd, tools, onEvent, onTodos, resume, model, effort
       }
     });
     child.stderr.on('data', (d) => { err += d; });
+    child.on('error', (e) => { err += `${e.message}\n`; });
     child.on('close', (code) => {
       clearTimeout(timer);
       done({ code, timedOut, result: workerResultText({ result, err, code, timedOut, lastAct, timeoutMs: WORKER_TIMEOUT_MS }), sessionId, usage });
@@ -1229,6 +1230,7 @@ function runCodex({ prompt, cwd, onEvent, onTodos, resume, permissionMode = 'acc
       }
     });
     child.stderr.on('data', (d) => { err += d; });
+    child.on('error', (e) => { err += `${e.message}\n`; });
     child.on('close', (code) => {
       clearTimeout(timer);
       done({ code, timedOut, result: workerResultText({ result, err, code, timedOut, lastAct, timeoutMs: WORKER_TIMEOUT_MS }), sessionId, usage });
@@ -1485,13 +1487,16 @@ function startNextStacked(projectId) {
 // in". We probe once at boot and hold the queue + raise a banner instead of
 // failing task after task. Claude waits for the short probe; Codex is gated
 // independently and may start immediately.
-let workerAuth = { ok: null, reason: null, checkedAt: null };
+let workerAuth = shouldProbeClaudeAuth(AVAILABLE_AGENTS)
+  ? { ok: null, reason: null, checkedAt: null }
+  : { ok: true, reason: null, checkedAt: null };
 const publicAuth = () => ({ ok: workerAuth.ok, reason: workerAuth.reason });
 
 // Boot preflight: one cheap Read-only `claude` call; classify the result (pure,
 // in lib) and broadcast so the UI can show/clear the banner. `claude -p` exits 0
 // even when logged out, so classifyAuthProbe reads the text, not the code.
 async function probeWorkerAuth() {
+  if (!shouldProbeClaudeAuth(AVAILABLE_AGENTS)) return workerAuth;
   try {
     const out = await runClaude({ prompt: 'Reply with the single word: ok', cwd: ROOT, tools: 'Read', model: 'haiku' });
     workerAuth = {
@@ -1509,6 +1514,20 @@ async function probeWorkerAuth() {
   return workerAuth;
 }
 
+function openClaudeLogin() {
+  const command = 'claude auth login';
+  if (process.platform === 'darwin') {
+    execFile('osascript', ['-e', `tell application "Terminal" to do script "${command}"`, '-e', 'tell application "Terminal" to activate'], () => {});
+    return true;
+  }
+  if (process.platform === 'win32') {
+    const child = spawn('cmd.exe', ['/c', 'start', '', 'cmd.exe', '/k', command], { detached: true, stdio: 'ignore' });
+    child.once('error', () => {}); child.unref(); return true;
+  }
+  const child = spawn('x-terminal-emulator', ['-e', command], { detached: true, stdio: 'ignore' });
+  child.once('error', () => {}); child.unref(); return true;
+}
+
 // Layer 2 of the intent router: a general planner clarify card has no builder to
 // re-render from, so when the user asks to switch language mid-question we ask
 // the model (cheap, Read-only, no repo edits) to RESTATE the pending question in
@@ -3588,6 +3607,33 @@ const server = createServer(async (req, res) => {
     return json(res, r.action === 'busy' ? 409 : 200, r);
   }
 
+  // Human-sized recovery actions for the worker banner. Login opens Claude's
+  // official interactive auth flow; rate-limit recovery moves only this
+  // identity's queued Claude work and only after an explicit button press.
+  if (url.pathname === '/api/worker-auth/connect' && req.method === 'POST') {
+    return json(res, openClaudeLogin() ? 200 : 500, { opened: true });
+  }
+  if (url.pathname === '/api/worker-auth/retry' && req.method === 'POST') {
+    const auth = await probeWorkerAuth();
+    if (auth.ok) for (const project of projects) pump(project.id);
+    return json(res, 200, { auth: publicAuth() });
+  }
+  if (url.pathname === '/api/worker-auth/run-with-codex' && req.method === 'POST') {
+    if (workerAuth.reason !== 'rate-limited') return json(res, 409, { error: 'Claude work is not rate limited' });
+    if (!AVAILABLE_AGENTS.includes('codex')) return json(res, 409, { error: 'Codex is not connected on this device' });
+    const identity = identityFor(req);
+    const visible = new Set(goals.filter((goal) => goalVisibleTo(goal, identity, MANAGER_OWNER_EMAIL)).map((goal) => goal.id));
+    const queued = tasks.filter((task) => visible.has(task.goalId) && task.status === 'queued' && task.agent === 'claude-code');
+    const goalIds = new Set(queued.map((task) => task.goalId));
+    const model = CODEX_MODELS[0];
+    for (const task of queued) { task.agent = 'codex'; task.model = model; task.sessionId = null; saveTask(task); }
+    for (const goal of goals.filter((item) => goalIds.has(item.id))) {
+      goal.agent = 'codex'; goal.model = model; goal.sessionId = null; goal.startedAt = null; saveGoal(goal);
+    }
+    for (const projectId of new Set(queued.map((task) => task.projectId))) pump(projectId);
+    return json(res, 200, { changed: queued.length, goals: [...goalIds] });
+  }
+
   // The folders a person could actually point a project at: the git repos sitting
   // directly under HOME. A browser cannot open an OS folder dialog that yields a real
   // path (showDirectoryPicker hands back a handle, never a path), so a detected list
@@ -5016,9 +5062,9 @@ server.listen(PORT, '127.0.0.1', () => {
     spawn('open', ['-g', openUrl], { stdio: 'ignore' }).unref();
   }
   console.log(`[manager] projects: ${projects.map((p) => `${p.id}=${p.dir}`).join('  ')}`);
-  probeWorkerAuth().catch(() => {}); // hold Claude tasks + banner if Claude is unavailable
+  if (shouldProbeClaudeAuth(AVAILABLE_AGENTS)) probeWorkerAuth().catch(() => {}); // hold Claude tasks + banner if Claude is unavailable
   setInterval(() => {
-    if (!workerAuth.ok) probeWorkerAuth().catch(() => {});
+    if (shouldProbeClaudeAuth(AVAILABLE_AGENTS) && !workerAuth.ok) probeWorkerAuth().catch(() => {});
   }, 5 * 60_000).unref();
   syncAllExternal().catch(() => {});
   syncGoalMerges().catch(() => {});

package/engine/worker-availability.mjs

@@ -6,3 +6,7 @@ export function classifyWorkerPreflight({ result = '', code = 0 } = {}, { classi
 export function workerCanStart({ agent, auth } = {}) {
   return auth?.ok === true || agent === 'codex';
 }
+
+export function shouldProbeClaudeAuth(agents = []) {
+  return agents.includes('claude-code');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@galda/cli",
-  "version": "0.10.60",
+  "version": "0.10.65",
   "type": "module",
   "description": "Galda - hand off work to Claude Code or Codex, get proof back. Runs on your existing subscription, no extra API cost.",
   "scripts": {