@galda/cli 0.10.88 → 0.10.90

package/CLAUDE.md

@@ -105,6 +105,8 @@
 - Worker/API へは**必ず所有ドメイン `https://galda.app`（custom domain）経由**で参照する。`*.workers.dev` サブドメインを製品コードに焼き込まない（`MANAGER_BILLING_API_URL` 等の既定値は `https://galda.app`）。
 - **Cloudflare/wrangler にデプロイする前に `wrangler whoami` でデプロイ先アカウントを確認**し、Galda/Kodo 所有であること・workers.dev サブドメイン名に客先名や別プロジェクト名が出ていないことを確かめる。怪しければ止めて Masa に確認（本番デプロイは Masa 明示許可制）。
 - **リリースは4面**（① npm ② Fly ③ Worker ④ Masaの常駐インスタンス `~/manager-for-ai`:4400）。①だけ出して④を忘れると「直したのに直ってない」＋relay相互kickループ再発の実例あり（2026-07-16/17）。全文＝`docs/RELEASE-WORKFLOW.md`の「本番は1つじゃない」表。
+- **常駐Managerを直接 `kill`／`launchctl kickstart -k` しない**（2026-07-28、実行中3 workerを同時中断した実例）。再起動は対象checkoutで
+  `node tools/safe-restart-manager.mjs` を使う。このコマンドはDoing／Finalizingが1件でもあれば拒否する。拒否時は完了を待って再実行し、Agent切替で回避しない。
 
 ## relay接続（`app.galda.app`）を伴う作業の掟（Masa明言 2026-07-17・全レーン必読）
 

package/app/index.html

@@ -294,17 +294,6 @@
      .gearpop{}, so out here it was invalid at computed-value time and fell back to
      transparent — measured rgba(0,0,0,0). The chips were never filled to begin with. */
   .ctxbar{display:flex;align-items:center;gap:6px;padding:0 2px 7px;background:none;border:0}
-  /* Feature A: "Replying to #NNN ✕" chip — neutral hairline pill above the composer
-     (real tokens only → theme-adaptive; the ✕ hover moves glyph colour only, §5.5). */
-  .replybind{display:flex;align-items:center;gap:6px;max-width:var(--fscenterw,760px);width:100%;margin:0 auto 6px;padding:0 2px}
-  .replybind[hidden]{display:none}
-  .replybind .rb-seg{display:inline-flex;align-items:center;gap:6px;padding:5px 11px;border-radius:999px;
-    border:1px solid var(--hair);background:var(--panel);font:500 12px/1 var(--ui);color:var(--ink2)}
-  .replybind .rb-seg b{color:var(--ink);font-weight:600;font-family:var(--mono);font-variant-numeric:tabular-nums}
-  .replybind .rb-x{display:grid;place-items:center;width:24px;height:24px;border:0;border-radius:7px;background:transparent;
-    color:var(--ink3);cursor:pointer;transition:color .12s;flex:0 0 24px}
-  .replybind .rb-x:hover{color:var(--ink)}
-  .replybind .rb-x svg{width:13px;height:13px;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
   .ctxchip{display:inline-flex;align-items:center;height:26px;padding:0;gap:0;border-radius:8px;
     border:1px solid var(--hair);background:transparent;position:relative;min-width:0}
   .ctxsel{position:relative}
@@ -1558,6 +1547,14 @@
     line-height:1.15;padding:2.5px 10px;border-radius:7px;box-shadow:inset 0 0 0 1px var(--hair2)}
   #fsRoot .acts2 .errbtn:first-child{color:var(--ink2)}
   #fsRoot .errbtn:hover{background:var(--hover);color:var(--ink)}
+  /* The review/attention dialog is rendered in #seeall, outside #fsRoot.
+     Keep its recovery actions on the same designed component instead of
+     falling back to the browser's unstyled native button. */
+  #seeall .acts2{display:flex;gap:6px;margin-top:3px;align-items:center}
+  #seeall .errbtn{border:0;background:transparent;color:var(--ink3);font-family:var(--mono);font-size:10px;letter-spacing:.02em;cursor:pointer;
+    line-height:1.15;padding:2.5px 10px;border-radius:7px;box-shadow:inset 0 0 0 1px var(--hair2)}
+  #seeall .acts2 .errbtn:first-child{color:var(--ink2)}
+  #seeall .errbtn:hover{background:var(--hover);color:var(--ink)}
   /* AI question in the feed (q2 — §6.5: while current it lives in the chat feed).
      H18 / CDO HANDOFF-question-ui-2026-07-13: QUESTION card = hairline frame +
      2px --blue left rule + mono label + option chips + an always-on free-text
@@ -3029,9 +3026,6 @@
              reply exists (progressive disclosure — DESIGN-RULES §1.5-3, "存在
              しないものの器を先に見せない"). -->
         <div class="peraanswer" id="chatReply" hidden></div>
-        <!-- Feature A: when the composer is bound to the focused goal, this chip shows
-             which conversation you're replying to; ✕ detaches back to new-goal mode. -->
-        <div class="replybind" id="replyBind" hidden><span class="rb-seg"><span id="replyBindLabel">Replying to</span> <b id="replyBindNum"></b></span><button type="button" class="rb-x" id="replyBindX" title="New goal instead" aria-label="Detach"><svg viewBox="0 0 24 24"><path d="M6 6l12 12M18 6 6 18"/></svg></button></div>
         <div class="composer">
           <div class="attachbar" id="attachbar" style="display:none"></div>
           <!-- Slash-command palette (Masa決定 2026-07-07: chips→slash). Floats
@@ -4359,7 +4353,6 @@ function mergeGoalTimeline(goals, externalActivity, projectId){
 function goToGoalInChat(goalId, bindComposer = true){
   state.selectedGoal = goalId;
   if (bindComposer) state.composerDetachedGoal = null;
-  renderReplyBind();   // Feature A: the composer's "Replying to #NNN" chip follows the focused goal — renderStream() alone skips it (only render() calls it)
   renderStream();
   const goalEl = document.querySelector(`#stream [data-goalmsg="${goalId}"]`);
   if (!goalEl) return;
@@ -5852,6 +5845,18 @@ function renderReviewAttach(){
 // 関わらず全部「直して」で、「なんでこうしたの？」と聞いただけでゴールが Doing に戻り
 // ワーカーが走っていた。人はモードを普段選ばない——AI が迷った時だけ選ぶ。
 const REPLY_CHOICE_LABEL = { continue: 'Fix this', rescope: 'Rethink it', split: 'Separate ticket', answer: 'Just a question' };
+function replyChoiceLabel(choice){
+  if (choice?.startsWith('project:')) {
+    const id = choice.slice('project:'.length);
+    return `Implement in ${state.projects?.find((project) => project.id === id)?.name || id}`;
+  }
+  return REPLY_CHOICE_LABEL[choice] ?? choice;
+}
+function replyChoices(body){
+  const routes = body?.choices || REPLY_OUTCOMES_CLIENT;
+  const targets = (body?.projectChoices || []).filter((project) => !project.current).map((project) => `project:${project.id}`);
+  return [...routes, ...targets];
+}
 // The one waiting line's two labels. Local to the reply note on purpose — STATUS_LABEL
 // is the task/workflow vocabulary and this is neither (CDO §5).
 const REPLY_WAIT_ROUTING = 'Thinking…';
@@ -5859,9 +5864,9 @@ const REPLY_WAIT_ANSWERING = 'Answering…';
 function replyWorkerPayload(extra = {}){
   return { ...extra, agent: state.connectedApp, model: state.stickyModel, effort: state.stickyEffort };
 }
-async function postReply(goalId, text, outcome = 'auto'){
+async function postReply(goalId, text, outcome = 'auto', targetProjectId = null){
   const r = await fetch(withKey(`/api/goals/${goalId}/dismiss`), { method: 'POST',
-    headers: { 'content-type': 'application/json' }, body: JSON.stringify(replyWorkerPayload({ text, outcome })) });
+    headers: { 'content-type': 'application/json' }, body: JSON.stringify(replyWorkerPayload({ text, outcome, targetProjectId })) });
   if (!r.ok) throw new Error();
   return r.json();
 }
@@ -6001,7 +6006,7 @@ function saCardThreadHtml(it){
     : it.rstatus === 'working' ? replyWorkingHtml()
     : it.rstatus === 'unsure' ? (replyNoteRowHtml('Which one is this?')
         + `<div class="qchips">${(it.rchoices || []).map((c) =>
-          `<button type="button" class="qchip" data-rc="${esc(c)}" data-rcgoal="${it.goalId}">${esc(REPLY_CHOICE_LABEL[c] ?? c)}</button>`).join('')}</div>`)
+          `<button type="button" class="qchip" data-rc="${esc(c)}" data-rcgoal="${it.goalId}">${esc(replyChoiceLabel(c))}</button>`).join('')}</div>`)
     : '';
   return rows + trailer;
 }
@@ -6046,7 +6051,7 @@ function askReplyDestination(anchorSel, choices){
     // The You row stays above the chips so "this" has something to point at (CDO Q5).
     setReplyNote(anchorSel, replyPastHtml() + said + replyNoteRowHtml('Which one is this?')
       + `<div class="qchips">${(choices || []).map((c) =>
-        `<button type="button" class="qchip" data-rc="${esc(c)}">${esc(REPLY_CHOICE_LABEL[c] ?? c)}</button>`).join('')}</div>`, resolve);
+        `<button type="button" class="qchip" data-rc="${esc(c)}">${esc(replyChoiceLabel(c))}</button>`).join('')}</div>`, resolve);
   });
 }
 // answer (§1.3): nothing was built, so there is no task to watch — the reply comes
@@ -6077,9 +6082,11 @@ async function replyToGoal(goalId, text, anchorSel){
   showReplySent(anchorSel, text, Number(goalId));   // before the round trip: the words stay, and it says it is thinking
   let body = await postReply(goalId, text, 'auto');
   if (body.outcome === 'unsure') {
-    const picked = await askReplyDestination(anchorSel, body.choices);
+    const picked = await askReplyDestination(anchorSel, replyChoices(body));
     if (!picked) return null;
-    body = await postReply(goalId, text, picked);
+    body = picked.startsWith('project:')
+      ? await postReply(goalId, text, 'split', picked.slice('project:'.length))
+      : await postReply(goalId, text, picked);
   }
   // seen + 1: the question itself was just recorded; the answer is the one after it.
   if (body.outcome === 'answer') showAnswerWhenItArrives(anchorSel, goalId, seen + 1);
@@ -6414,7 +6421,6 @@ $('gdRevisionInput').addEventListener('keydown', (e) => {
 function render(){
   renderProjects(); renderStream(); renderQueue(); renderTasks(); renderActPanel(); wireWfEditButtons();
   renderCtxBar();   // the folder above the composer follows the active project
-  renderReplyBind();   // Feature A: show/hide the "Replying to #NNN" chip for the focused goal
   renderFlagship();
   if (state.reviewOpenGoal != null) renderReviewChecklist();
   if (state.goalDetailOpen != null) renderGoalDetail();
@@ -7189,6 +7195,7 @@ const FAILURE_COPY = {
     infra: {
       title: 'Galda基盤エラー',
       timeout: 'Galda側の実行上限や待ち時間で止まりました。変更内容の失敗とは限りません。',
+      interrupted: 'ローカルの実行が中断されました。変更内容やAgentの失敗とは限らないため、同じ作業を再開できます。',
       auth: '接続や認証確認で止まりました。接続を直してから再開できます。',
       relay: 'relay接続で止まりました。接続状態を確認してから再試行できます。',
       chrome: 'Chrome/ブラウザ確認で止まりました。画面確認環境の問題で、実装失敗とは限りません。',
@@ -7198,8 +7205,8 @@ const FAILURE_COPY = {
       unknown: 'Galdaの実行基盤で止まりました。ログを確認し、原因に応じて再試行できます。',
     },
     actions: {
-      retry: '再試行', resume: '再開', connect: 'Connect', check: '接続確認',
-      other: '別Agentで実行', log: 'ログ確認', tests: 'テスト再実行', pr: 'PR再試行',
+      retry: 'Retry', resume: 'Resume', connect: 'Connect', check: 'Check connection',
+      other: 'Try another Agent', log: 'View log', tests: 'Re-run tests', pr: 'Retry PR',
     },
   },
   en: {
@@ -7207,6 +7214,7 @@ const FAILURE_COPY = {
     infra: {
       title: 'Galda system issue',
       timeout: 'Galda stopped this at the run limit or a wait timed out. This is not necessarily a problem with the change.',
+      interrupted: 'The local run was interrupted. This does not necessarily reflect a problem with the change or agent; resume the same work.',
       auth: 'Connection or authentication failed. Reconnect, then continue.',
       relay: 'The relay connection failed. Check the connection, then retry.',
       chrome: 'Chrome/browser verification failed. The UI check environment stopped, not necessarily the implementation.',
@@ -7227,17 +7235,23 @@ function failureLang(){
 function inferErrorClass(text, agent){
   const low = String(text || '').toLowerCase();
   const infra = (reason, actionIds) => ({ owner: 'galda-infra', reason, actionIds });
-  if (/run limit|実行上限|timed out|timeout|タイムアウト/.test(low)) return infra('timeout', ['retry', 'run-with-codex', 'view-log']);
-  if (/spawn|enoent|eacces|command not found|worker tool exited early|作業ツールが途中で終了/.test(low)) return infra('worker-start', ['retry', 'run-with-codex', 'view-log']);
-  if (/auth probe|preflight|not logged in|logged out|not authenticated|authentication|unauthorized|invalid api key|bad credentials|401\b|403\b|接続が必要|認証/.test(low)) return infra('auth', ['connect', 'check-connection', 'run-with-codex', 'view-log']);
+  if (/run limit|実行上限|timed out|timeout|タイムアウト/.test(low)) return infra('timeout', ['retry', 'view-log']);
+  if (/worker was interrupted|作業が途中で中断|exit 143|sigterm|sigint/.test(low)) return infra('interrupted', ['retry', 'view-log']);
+  if (/spawn|enoent|eacces|command not found|worker tool exited early|作業ツールが途中で終了/.test(low)) return infra('worker-start', ['retry', 'view-log']);
+  if (/auth probe|preflight|not logged in|logged out|not authenticated|authentication|unauthorized|invalid api key|bad credentials|401\b|403\b|接続が必要|認証/.test(low)) return infra('auth', ['connect', 'check-connection', 'view-log']);
   if (/relay|websocket|socket|econnreset|econnrefused|billing-api unreachable|cf access|cloudflare access/.test(low)) return infra('relay', ['retry', 'connect', 'view-log']);
   if (/chrome|chromium|puppeteer|target closed|browser|navigation timeout|waiting failed|screenshot|headless/.test(low)) return infra('chrome', ['retry', 'view-log']);
   if (/test runner|node --test|npm test|project tests|server exited \(code \d+\) before it was ready|did not report ready in time|test timed out after|tap|not ok \d+/.test(low)) return infra('test-runner', ['retry-tests', 'view-log']);
   if (/pr step failed|openpr|pull request|github|gh:|gh auth|git push|git fetch|git .*failed|pr作成|pr failed/.test(low)) return infra('pr', ['retry-pr', 'view-log']);
-  return { owner: 'agent', reason: agent === 'codex' ? 'codex' : 'claude-code', actionIds: ['retry', 'run-with-codex', 'view-log'] };
+  return { owner: 'agent', reason: agent === 'codex' ? 'codex' : 'claude-code', actionIds: ['retry', 'view-log'] };
 }
 function taskErrorMeta(t, goal){
-  const meta = t.errorClass || inferErrorClass(t.result, t.agent || goal?.agent);
+  // Reclassify interrupted tasks from their concrete exit text instead of
+  // trusting stale persisted metadata. Older records labelled an external
+  // SIGTERM/restart as an Agent failure and permanently carried a Codex switch.
+  const inferred = inferErrorClass(t.result, t.agent || goal?.agent);
+  const raw = t.status === 'interrupted' ? inferred : (t.errorClass || inferred);
+  const meta = { ...raw, actionIds: (raw.actionIds || []).filter((id) => !['run-with-codex', 'run-with-claude'].includes(id)) };
   const lang = failureLang(), C = FAILURE_COPY[lang];
   const isInfra = meta.owner === 'galda-infra';
   return {
@@ -7251,20 +7265,16 @@ function goalBlockedErrorMeta(g){
   const raw = g.blocked?.errorClass || (g.blocked?.kind === 'test'
     ? { owner: 'galda-infra', reason: 'test-runner', actionIds: ['retry-tests', 'view-log'] }
     : inferErrorClass(g.blocked?.reason, g.agent));
+  const meta = { ...raw, actionIds: (raw.actionIds || []).filter((id) => !['run-with-codex', 'run-with-claude'].includes(id)) };
   const lang = failureLang(), C = FAILURE_COPY[lang];
-  const isInfra = raw.owner === 'galda-infra';
-  return { ...raw, title: isInfra ? C.infra.title : C.agent.title, body: isInfra ? (C.infra[raw.reason] || C.infra.unknown) : C.agent.body, copy: C };
+  const isInfra = meta.owner === 'galda-infra';
+  return { ...meta, title: isInfra ? C.infra.title : C.agent.title, body: isInfra ? (C.infra[meta.reason] || C.infra.unknown) : C.agent.body, copy: C };
 }
 function errorButtonsHtml(meta, { taskId = null, goalId = null, interrupted = false, agent = null, pr = false } = {}){
   const C = meta.copy.actions;
-  const canCodex = goalId != null && agent !== 'codex' && (state.agents || []).includes('codex');
   const out = [];
   for (const id of meta.actionIds || []) {
     if (id === 'retry' && taskId != null) out.push(`<button class="errbtn" data-fsretry="${taskId}">${interrupted ? C.resume : C.retry}</button>`);
-    // This keeps the existing agent-switch endpoint, but says what it really does
-    // for an interrupted run: continue the saved goal with another agent rather
-    // than imply a brand-new, contextless task will be created.
-    else if (id === 'run-with-codex' && canCodex) out.push(`<button class="errbtn" data-fscodex="${goalId}">${interrupted ? (failureLang() === 'ja' ? 'Codexで再開' : 'Resume with Codex') : C.other}</button>`);
     else if (id === 'connect') out.push(`<button class="errbtn" data-fsconnectworker="1">${C.connect}</button>`);
     else if (id === 'check-connection') out.push(`<button class="errbtn" data-fscheckworker="1">${C.check}</button>`);
     else if (id === 'retry-tests' && goalId != null) out.push(`<button class="errbtn" data-fsreverify="${goalId}">${C.tests}</button>`);
@@ -9001,22 +9011,6 @@ function replyBinding(){
   if (REPLY_PLAIN.has(g.status)) return { goal: g, mode: 'plain' };
   return null;
 }
-// The visible, reversible "Replying to #NNN ✕" chip above the composer — never
-// silent (shown whenever bound), always detachable (✕ clears the binding).
-function renderReplyBind(){
-  const el = $('replyBind'); if (!el) return;
-  const b = replyBinding();
-  el.hidden = !b;
-  const inp = $('input');
-  if (b) {
-    const n = goalReviewNumber({ goal: b.goal, tasks: state.tasks }) ?? b.goal.id;
-    const numEl = $('replyBindNum'); if (numEl) numEl.textContent = '#' + n;
-    const lblEl = $('replyBindLabel'); if (lblEl) lblEl.textContent = b.mode === 'answer' ? 'Answering' : 'Replying to';
-    if (inp) inp.placeholder = b.mode === 'answer' ? `Answering #${n}…` : `Reply to #${n}…`;
-  } else if (inp) {
-    inp.placeholder = 'Describe a goal…  ( / for commands )';
-  }
-}
 async function send(){
   const { text, model, effort, mode, skill, later, review } = resolveComposer($('input').value);
   if (!text) return;
@@ -10407,8 +10401,8 @@ async function saCall(ids, path, body){
 // (outcome:'auto', ONE-CONVERSATION §1.4) — this layer never guesses continue vs
 // question. Unlike saAct it does NOT show its outcome first: "Feedback sent" would
 // be a lie when the reply was a question.
-async function saReplyCall(it, text, outcome){
-  const r = await saCall(it.ids, 'dismiss', { text, outcome });
+async function saReplyCall(it, text, outcome, targetProjectId = null){
+  const r = await saCall(it.ids, 'dismiss', { text, outcome, targetProjectId });
   if (!r?.ok) throw new Error('reply failed');
   return r.json().catch(() => null);
 }
@@ -10515,7 +10509,7 @@ async function saSendReply(it, i, text){
   try {
     let body = await saReplyCall(it, workerText, 'auto');
     if (body?.outcome === 'unsure') {
-      it.inflight = false; it.rstatus = 'unsure'; it.rchoices = body.choices || REPLY_OUTCOMES_CLIENT;
+      it.inflight = false; it.rstatus = 'unsure'; it.rchoices = replyChoices(body);
       saPaintCard(goalId);
       const picked = await new Promise((resolve) => { it._routeResolve = resolve; });
       it._routeResolve = null;
@@ -10525,7 +10519,9 @@ async function saSendReply(it, i, text){
         saPaintCard(goalId); return;
       }
       it.inflight = true; it.rstatus = 'thinking'; saPaintCard(goalId);
-      body = await saReplyCall(it, workerText, picked);
+      body = picked.startsWith('project:')
+        ? await saReplyCall(it, workerText, 'split', picked.slice('project:'.length))
+        : await saReplyCall(it, workerText, picked);
     }
     it.inflight = false;
     if (body?.outcome === 'answer') {              // a question: the AI answers, the goal never moves
@@ -11258,8 +11254,6 @@ $('filein').addEventListener('change', () => {
   for (const f of $('filein').files) uploadFile(f);
   $('filein').value = '';
 });
-// Feature A: ✕ on the "Replying to #NNN" chip detaches → back to new-goal mode.
-$('replyBindX').onclick = () => { state.composerDetachedGoal = state.selectedGoal; render(); };
 const IS_MOBILE = () => window.matchMedia('(max-width: 760px)').matches;
 // Phones are chat-first: the Tasks sheet starts FOLDED so the first view is the
 // conversation + composer (the sheet is an 88vw overlay — default-open buried

package/engine/lib.mjs

@@ -1258,13 +1258,20 @@ export function classifyWorkerFailure({ agent = 'claude-code', result = '', err
     actionIds,
   });
   if (timedOut || /run limit|実行上限|timed out|timeout|タイムアウト/.test(low)) {
-    return infra('timeout', ['retry', 'run-with-codex', 'view-log']);
+    return infra('timeout', ['retry', 'view-log']);
+  }
+  // SIGTERM/SIGINT means the local worker was stopped from outside the task
+  // (for example while the local Manager was restarting).  It says nothing
+  // about either the requested change or the chosen agent, so never turn this
+  // recovery path into a suggestion to switch agents.
+  if (code === 143 || code === 130 || /worker was interrupted|作業が途中で中断|exit 143|sigterm|sigint/.test(low)) {
+    return infra('interrupted', ['retry', 'view-log']);
   }
   if (/spawn|enoent|eacces|command not found|executable|worker tool exited early|作業ツールが途中で終了/.test(low)) {
-    return infra('worker-start', ['retry', 'run-with-codex', 'view-log']);
+    return infra('worker-start', ['retry', 'view-log']);
   }
   if (/auth probe|preflight|not logged in|logged out|not authenticated|authentication|unauthorized|invalid api key|bad credentials|401\b|403\b|接続が必要|認証/.test(low)) {
-    return infra('auth', ['connect', 'check-connection', 'run-with-codex', 'view-log']);
+    return infra('auth', ['connect', 'check-connection', 'view-log']);
   }
   if (/relay|websocket|socket|econnreset|econnrefused|billing-api unreachable|cf access|cloudflare access/.test(low)) {
     return infra('relay', ['retry', 'connect', 'view-log']);
@@ -1281,7 +1288,7 @@ export function classifyWorkerFailure({ agent = 'claude-code', result = '', err
   return {
     owner: 'agent',
     reason: agent === 'codex' ? 'codex' : 'claude-code',
-    actionIds: ['retry', agent === 'claude-code' ? 'run-with-codex' : 'run-with-claude', 'view-log'],
+    actionIds: ['retry', 'view-log'],
   };
 }
 
@@ -2451,6 +2458,55 @@ export function dismissGoal({ goalStatus, outcome = 'continue' } = {}) {
   return { ok: true, outcome: 'continue', status: 'running', spawnsWorker: true };
 }
 
+// `outcome:auto` is the contract used by every review reply box in the app.
+// Keep the routing decision in one place: the reply either asks a question,
+// requests a change, rescopes the ticket, starts separate work, or explicitly
+// remains unsure.  Returning unsure is safe because the UI already presents
+// these exact choices without moving the goal.
+export const REPLY_INTENTS = [...REPLY_OUTCOMES, 'unsure'];
+export function buildReplyIntentPrompt({ goalText, reply, currentProject = null, projects = [] } = {}) {
+  const projectLines = (projects ?? []).map((project) =>
+    `- ${project.id}: ${project.name || project.id} | root=${project.dir || '(unknown)'} | scope=${project.note || '(not specified)'}`);
+  return [
+    'You route replies in Agent Manager: a person delegated a coding task, an AI did it, and it came back for review. The person has now replied.',
+    'Decide what the reply ASKS FOR — exactly one of:',
+    '- "continue": fix or change the work that was just done.',
+    '- "rescope": stop and rethink; the request itself should now say something different.',
+    '- "split": a separate piece of work that should not touch this one.',
+    '- "answer": a question about the work. Nothing should be built or changed.',
+    '- "unsure": you genuinely cannot tell. Prefer this over guessing.',
+    'Judge the full meaning. A question followed by a requested change is "continue".',
+    'Also decide which project must receive the requested work.',
+    '- Keep targetProjectId equal to the current project for ordinary fixes to the reviewed work.',
+    '- If the current project is design/docs/prototype-only and the reply asks to implement or launch the chosen design in the real product, select the matching production/code project.',
+    '- Never infer a project that is not listed. If the target is ambiguous, use outcome "unsure" and targetProjectId null.',
+    'Output ONLY one line of raw JSON: {"outcome":"continue|rescope|split|answer|unsure","targetProjectId":"listed-id-or-null"}.',
+    '',
+    `Current project: ${currentProject?.id || '(unknown)'}`,
+    'Available projects:',
+    ...(projectLines.length ? projectLines : ['- (none)']),
+    '',
+    'The request that was worked on:',
+    String(goalText ?? '').slice(0, 2000),
+    '',
+    'Their reply:',
+    String(reply ?? '').slice(0, 4000),
+  ].join('\n');
+}
+
+export function parseReplyIntent(raw) {
+  const unread = { outcome: 'unsure', read: false };
+  if (!raw || typeof raw !== 'string') return unread;
+  const m = raw.match(/\{[\s\S]*\}/);
+  if (!m) return unread;
+  let obj;
+  try { obj = JSON.parse(m[0]); } catch { return unread; }
+  if (!REPLY_INTENTS.includes(obj?.outcome)) return unread;
+  const targetProjectId = typeof obj.targetProjectId === 'string' && obj.targetProjectId.trim()
+    ? obj.targetProjectId.trim() : null;
+  return { outcome: obj.outcome, targetProjectId, read: true };
+}
+
 // 宛先（docs/design/ONE-CONVERSATION.md §1.2）
 //
 // チャットで「#12 の件だけど」と書けたら、そのチケット宛て。**決定論で、我々の推測は
@@ -3180,6 +3236,14 @@ export function workerPrompt(task, goal, lastFailure, agentName = 'claude-code',
   return [
     skill ? `FIRST, use the /${skill} skill via the Skill tool (invoke Skill with the "${skill}" skill) before doing anything else. Then carry out the task below.` : '',
     `You are a ${displayName} worker managed by "Manager for AI". Do the request below inside this project directory.`,
+    task?.projectContext ? [
+      'PROJECT BOUNDARY (source of truth):',
+      `- Project: ${task.projectContext.name || task.projectContext.id}`,
+      `- Root: ${task.projectContext.dir}`,
+      task.projectContext.note ? `- Scope/note: ${task.projectContext.note}` : '',
+      '- Your edits and claims apply only to this project. Never call a design/docs/prototype change a production implementation.',
+      '- If the request requires another project, do not pretend it was implemented here; report the exact project mismatch.',
+    ].filter(Boolean).join('\n') : '',
     goal?.priorFailureMemory?.length ? `\nMANAGER FAILURE MEMORY:\n${latestFailurePolicy(goal.priorFailureMemory)?.text}\nApply this prevention before starting.` : '',
     '',
     // The user's own words, verbatim and in full, are the source of truth.
@@ -3397,7 +3461,9 @@ export function parseRunDeclaration(text) {
   const compare = parseComparePair(raw.compare);
   const title = str(raw.title, 60);
   // Nothing to start, nothing to open, nothing named, and no pair to show = nothing to look at.
-  if (!cmd && !url && !file && !compare && !title) return null;
+  if (!cmd && !url && !file && !compare && !title) {
+    return runDeclError('no-open-target', 'declaration contains no command, URL, artifact file, comparison, or title');
+  }
   // Only http(s): the button opens this in the user's browser. A file:// (or
   // any other scheme) is a worker mistake with a specific fix — declare `file`
   // instead — not a JSON parse failure, so it gets its own reason.

package/engine/server.mjs

@@ -21,7 +21,7 @@ import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 import { pathToFileURL } from 'node:url';
 import { needsProjectFolder, folderLabel, chooseFolderScript, parseChosenFolder, buildFolderQuestion, resolveFolderAnswer, classifyFolderTarget, buildFolderInitConfirm, isFolderInitConfirmed, needsReviewPreference, buildReviewPreferenceQuestion, resolveReviewPreferenceAnswer, routeQuestionAnswer, notUnderstoodNote, parseRelocalizedQuestion, classifyAuthProbe, authBannerText, makeSigninChallenge, parseClaimResponse, isCommandOnPath } from './lib.mjs';
-import { parseStreamEvents, parseCodexEvents, buildCodexArgs, parsePlan, refinePlanTasks, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, classifyWorkerFailure, isForcedStop, taskStatusAfterVerify, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildReviewAttemptLedger, latestGoalOutcomeTask, buildDirtyWorkspacePrBlock, buildGoalProofMd, buildGoalPrBody, buildReviewSummaryPrompt, parseReviewSummary, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, rejectGoal, reopenGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, rebasePreviewUrl, shouldCreateGoalPR, normalizePullRequestUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, resolveTestGate, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, workerPrompt, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, nextRunnableTasks, goalsConflict, detectConflicts, pickFoldTarget, autoFoldReviewsEnabled, parseGitUnifiedDiffLocations, hasTestRelevantChanges, parseFailingTestNames, classifyTestGate, classifyPrSafety, isInconclusiveTestRun, countInfraFlakes, classifyRunFailures, classifyVerifyGate, buildVerificationInfraError, verificationInfraErrorFrom, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, QUEUED_GOAL_STATUSES, verifyLicenseToken, licenseTokenPayload, shouldRefreshLicense, shouldEmitSetupCompleted, pickAnalyticsUid, shouldEmitFreeExhausted, detectRequestLanguage, testFailureReason, manualTestRetryPrompt, isNothingVerifiable, isNothingVerifiableForPR, isSuspiciouslyIncompleteDone, classifyComposerIntentHeuristic, detectPauseIntent, buildIntentPrompt, parseIntentResponse, buildBoardSnapshot, validateBoardSnapshot, boardIsEmpty, decideBoardPull, resolveConnectedAgents, pickAvailableAgent, pickUtilityAgent, utilityModel, liveTakeoverDecision, shouldOpenBrowserOnBoot, goalTaskTitle, buildGoalTask, shouldUsePlannerForGoal, RUN_DECL_FILE, parseRunDeclaration, SHOT_DIR, collectShotNames, parseGoalAddress, REPLY_OUTCOMES, buildGoalMessage, serializeGoalMessage, parseGoalMessages, computeInternalQualityMetrics, classifyInternalQualityTaskError, resolveWorkspaceMode, goalSessionFor, setGoalAgentSession, switchGoalAgentSession, parseApprovalRequest } from './lib.mjs';
+import { parseStreamEvents, parseCodexEvents, buildCodexArgs, parsePlan, refinePlanTasks, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, classifyWorkerFailure, isForcedStop, taskStatusAfterVerify, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildReviewAttemptLedger, latestGoalOutcomeTask, buildDirtyWorkspacePrBlock, buildGoalProofMd, buildGoalPrBody, buildReviewSummaryPrompt, parseReviewSummary, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, rejectGoal, reopenGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, rebasePreviewUrl, shouldCreateGoalPR, normalizePullRequestUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, resolveTestGate, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, workerPrompt, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, nextRunnableTasks, goalsConflict, detectConflicts, pickFoldTarget, autoFoldReviewsEnabled, parseGitUnifiedDiffLocations, hasTestRelevantChanges, parseFailingTestNames, classifyTestGate, classifyPrSafety, isInconclusiveTestRun, countInfraFlakes, classifyRunFailures, classifyVerifyGate, buildVerificationInfraError, verificationInfraErrorFrom, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, QUEUED_GOAL_STATUSES, verifyLicenseToken, licenseTokenPayload, shouldRefreshLicense, shouldEmitSetupCompleted, pickAnalyticsUid, shouldEmitFreeExhausted, detectRequestLanguage, testFailureReason, manualTestRetryPrompt, isNothingVerifiable, isNothingVerifiableForPR, isSuspiciouslyIncompleteDone, classifyComposerIntentHeuristic, detectPauseIntent, buildIntentPrompt, parseIntentResponse, buildBoardSnapshot, validateBoardSnapshot, boardIsEmpty, decideBoardPull, resolveConnectedAgents, pickAvailableAgent, pickUtilityAgent, utilityModel, liveTakeoverDecision, shouldOpenBrowserOnBoot, goalTaskTitle, buildGoalTask, shouldUsePlannerForGoal, RUN_DECL_FILE, parseRunDeclaration, SHOT_DIR, collectShotNames, parseGoalAddress, REPLY_OUTCOMES, buildReplyIntentPrompt, parseReplyIntent, buildGoalMessage, serializeGoalMessage, parseGoalMessages, computeInternalQualityMetrics, classifyInternalQualityTaskError, resolveWorkspaceMode, goalSessionFor, setGoalAgentSession, switchGoalAgentSession, parseApprovalRequest } from './lib.mjs';
 import { createSerialQueue } from './lib.mjs';
 import { parseRequirementEvidence, unmappedChangedFiles } from './lib.mjs';
 import { isPrClosed } from './lib.mjs';
@@ -2288,13 +2288,15 @@ function pauseGoalForApproval(goal, task, request) {
 //
 // 設定は親から引き継ぐ（プロジェクト・エージェント・モデル・effort）。別件とはいえ
 // 同じ場所で同じ人が続けている作業なので、ここで選び直させる理由が無い。
-function createSplitGoal(parent, text, identity) {
+function createSplitGoal(parent, text, identity, targetProjectId = parent.projectId) {
+  const targetProject = projects.find((project) => project.id === targetProjectId);
+  if (!targetProject) throw new Error(`unknown target project: ${targetProjectId}`);
   const goal = {
-    id: nextId++, projectId: parent.projectId, text: text.slice(0, 8000), status: 'planning',
-    wantsPR: resolveWantsPR('auto', text, getReviewDefinition(parent.projectId).defaultWantsPR),
+    id: nextId++, projectId: targetProjectId, text: text.slice(0, 8000), status: 'planning',
+    wantsPR: resolveWantsPR('auto', text, getReviewDefinition(targetProjectId).defaultWantsPR),
     model: parent.model, effort: parent.effort, agent: parent.agent, mode: 'auto',
     skill: null, images: [], source: resolveGoalSource('app'), sourceRef: null,
-    executionPlan: buildExecutionPlan({ projectId: parent.projectId, text, previousSession: false }),
+    executionPlan: buildExecutionPlan({ projectId: targetProjectId, text, previousSession: false }),
     plan: null, pr: undefined, createdAt: new Date().toISOString(),
     // 片方向の印。表示は app（新しいカード「#N の会話から生まれました」／元のカード
     // 「→ #M を切り出しました」）。engine は数字を1つ持つだけ。
@@ -2444,6 +2446,13 @@ function readRunDeclaration(task, workDir) {
   // never broken) and wrote the exact same file:// url a second time. `run` is
   // `{ error, message }` here, distinct from the `null` case below.
   if (run && run.error) {
+    // Valid JSON with only note/check means there is simply nothing to open.
+    // That is common for explanation-only follow-ups and must not manufacture
+    // an "unreadable record" error in Review.
+    if (run.error === 'no-open-target') {
+      sendAct(task, 'run declaration ignored — this result has nothing to open.');
+      return;
+    }
     task.runDeclError = { reason: run.error, message: run.message, snippet: String(raw ?? '').slice(0, 200) };
     sendAct(task, `run declaration ignored — ${run.message}`);
     return;
@@ -2673,6 +2682,7 @@ async function startPreview(task) {
 async function runTask(task) {
   const project = projects.find((p) => p.id === task.projectId);
   const goal = goals.find((g) => g.id === task.goalId);
+  task.projectContext = project ? { id: project.id, name: project.name, dir: project.dir, note: project.note } : null;
   task.status = 'running'; task.startedAt = new Date().toISOString();
   // The goal's "started" clock is set by the first task that actually runs — the
   // signal the board uses to read a 'running' goal as DOING rather than QUEUED
@@ -5447,6 +5457,30 @@ const server = createServer(async (req, res) => {
 // 「聞いてるだけ」への返事 (ONE-CONVERSATION.md §1.3 answer)。
 //
 // 答えるのは**作業した AI 本人**＝その agent の session を resume する。状況一覧しか
+// Resolve the app's `outcome:auto` contract before changing goal state. The
+// utility call is classification-only; the goal's own agent/session still
+// writes an answer or performs the requested change. If routing is unavailable,
+// return unsure so a customer chooses explicitly instead of accidentally
+// starting a ten-minute implementation worker for a question.
+async function judgeReplyIntent(goal, reply) {
+  try {
+    const currentProject = projects.find((project) => project.id === goal.projectId) ?? null;
+    const r = await runUtility({
+      prompt: buildReplyIntentPrompt({ goalText: goal.text, reply, currentProject, projects }),
+      cwd: ROOT,
+      tools: 'Read',
+    });
+    const parsed = parseReplyIntent(r.result);
+    if (!parsed.read) return { outcome: 'unsure', targetProjectId: null };
+    if (parsed.targetProjectId && !projects.some((project) => project.id === parsed.targetProjectId)) {
+      return { outcome: 'unsure', targetProjectId: null };
+    }
+    return { outcome: parsed.outcome, targetProjectId: parsed.targetProjectId };
+  } catch {
+    return { outcome: 'unsure', targetProjectId: null };
+  }
+}
+
 // 知らない別AIでは「なぜそうしたか」に答えられない（Masa確定 2026-07-22）。
 // コードは1文字も変わらない: ツールは Read だけ、permissionMode は 'plan'
 // （Codex 側は read-only サンドボックスに落ちる）。タスクも作らないので看板も
@@ -5497,20 +5531,29 @@ async function answerGoalQuestion(goal, question) {
     let body = '';
     req.on('data', (d) => { body += d; });
     req.on('end', async () => {
-      let text = '', outcome = 'continue', requested = {};
+      let text = '', outcome = 'continue', requested = {}, auto = false;
       try {
         requested = JSON.parse(body || '{}');
         text = String(requested.text ?? '').trim();
         if (REPLY_OUTCOMES.includes(requested.outcome)) outcome = requested.outcome;
+        auto = requested.outcome === 'auto';
       } catch {}
       const worker = applyReplyWorker(goal, requested);
       if (!worker.ok) return json(res, 409, { error: worker.error });
 
-      // A review reply is transport, not a classification request. Legacy clients
-      // send outcome:'auto'; it deliberately means the deterministic default:
-      // preserve the exact words and resume this goal's agent session. Specialized
-      // outcomes work only when an explicit UI action sends one of REPLY_OUTCOMES.
-      if (requested.outcome === 'auto' && !text) return json(res, 400, { error: 'text required' });
+      if (auto) {
+        if (!text) return json(res, 400, { error: 'text required' });
+        const routed = await judgeReplyIntent(goal, text);
+        outcome = routed.outcome;
+        requested.targetProjectId = routed.targetProjectId;
+        if (outcome === 'unsure') return json(res, 200, {
+          goal,
+          outcome,
+          choices: REPLY_OUTCOMES,
+          projectChoices: projects.map((project) => ({ id: project.id, name: project.name, current: project.id === goal.projectId })),
+        });
+        if (requested.targetProjectId && requested.targetProjectId !== goal.projectId) outcome = 'split';
+      }
       // 返事の行き先4種 (ONE-CONVERSATION.md §1.3). 既定は今までどおり continue なので、
       // outcome を送ってこない今の UI の挙動は1ミリも変わらない。
       const result = dismissGoal({ goalStatus: goal.status, outcome });
@@ -5523,8 +5566,23 @@ async function answerGoalQuestion(goal, question) {
         const gate = await requireEntitlementGate(identityFor(req));
         if (!gate.allowed) return json(res, 402, { error: 'free-tier limit reached', blocked: gate.blocked });
         addGoalMessage(goal, { from: 'you', via: 'review', text });
-        const born = createSplitGoal(goal, text, identityFor(req));
-        return json(res, 200, { goal, outcome, splitInto: born.id, born });
+        const targetProjectId = requested.targetProjectId || goal.projectId;
+        if (!projects.some((project) => project.id === targetProjectId)) return json(res, 400, { error: 'unknown target project' });
+        const crossProject = targetProjectId !== goal.projectId;
+        const latest = [...tasks].reverse().find((task) => task.goalId === goal.id && task.result);
+        const handoffText = crossProject ? [
+          `[Cross-project implementation handoff from #${goal.id}]`,
+          `Original request: ${goal.text}`,
+          goal.reviewSummary?.summary ? `Reviewed result: ${goal.reviewSummary.summary}` : '',
+          latest?.result ? `Latest worker result: ${String(latest.result).slice(0, 3000)}` : '',
+          `User's implementation request: ${text}`,
+        ].filter(Boolean).join('\n\n') : text;
+        const born = createSplitGoal(goal, handoffText, identityFor(req), targetProjectId);
+        if (crossProject) {
+          const target = projects.find((project) => project.id === targetProjectId);
+          addGoalMessage(goal, { from: 'manager', via: 'review', text: `Implementation was routed to ${target?.name || targetProjectId} (#${born.id}) instead of editing this project's review.` });
+        }
+        return json(res, 200, { goal, outcome, splitInto: born.id, born, targetProjectId });
       }
 
       // answer: 聞かれただけ。ゴールは review のまま、ワーカーも起こさない（§1.3）。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@galda/cli",
-  "version": "0.10.88",
+  "version": "0.10.90",
   "type": "module",
   "description": "Galda - hand off work to Claude Code or Codex, get proof back. Runs on your existing subscription, no extra API cost.",
   "scripts": {