local-kanban 1.8.3 → 1.9.0

package/CHANGELOG.md

@@ -3,6 +3,61 @@
 Notable changes, newest first. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 and the project uses [semantic versioning](https://semver.org/).
 
+## [1.9.0]
+
+### Added
+
+- **You can pick the project folder instead of typing it.** The wizard offered a list of folders
+  from one directory and, past that, a text field where a typo produced a project pointing nowhere.
+  There is now a "Choose…" button: it opens the real system folder dialog, and where there isn't one
+  (a server with no desktop, another OS) the board falls back to its own folder browser. Either way
+  the path is checked before the project is created. A browser page cannot read an absolute path by
+  itself, so the board's own server does the looking.
+
+- **The sync section explains itself now.** It used to be two empty fields and no context: what
+  this does, whether it applies to one project or the whole board, and what exactly ends up on
+  GitHub. It now says all of it before you type anything, including the part that matters most:
+  the repository holds the issues for the whole board, you should make it private, and task titles,
+  descriptions and comments are copied there in full. That is the only feature here that sends
+  anything off your machine, so it says so out loud.
+
+- **The deploy skill is picked from a list now.** The wizard asked for a "custom deploy skill" as
+  free text, which assumes you already know which skills you have, and an empty field quietly turned
+  into the shared `deploy` skill: nobody chose it, it was simply assigned. The list shows deploy
+  skills rather than everything in your skills folder, says where to make your own, and "not set"
+  stays a real answer, because a project without a deploy is a normal project.
+
+### Fixed
+
+- **The folder dropdown was drawn by the operating system**, which ignores everything about how the
+  rest of the board looks. It now uses the same control as every other dropdown here. The field was
+  also labelled "Project key", the same words as the task-key field two rows above it.
+
+- **A failed update now ends with the command to run.** The most common way an update fails is that
+  the global package directory is not writable, and there is nothing the board can do about that
+  by itself — only you, in a terminal, can. It used to answer with the path to an npm debug log,
+  because it picked the longest line npm marked as an error, and npm's longest lines are its own
+  stack frames and file paths. It now names the cause and shows the exact command it just tried,
+  with the same `--prefix`, so the one you run updates the copy that is actually running.
+
+- **The update dialog says what happens to your work.** Two things you cannot check for yourself:
+  your tasks are untouched, because they live in the data directory apart from the code, and — for
+  an npm install — the Claude Code skills are a *copy*, so after updating they need
+  `local-kanban skills`. Without that Claude keeps reading the instructions from the old version
+  and gives no sign of it.
+
+- **The sync section links to the README**, where the same thing is written out in more detail.
+
+## [1.8.4]
+
+### Changed
+
+- **Releases publish themselves again, and carry provenance.** Publishing is now authorised by a
+  trusted publisher — npm trusts this repository's release workflow directly — instead of a token
+  that the account's two-factor policy would not accept anyway. Every version from here on is signed
+  by the build that produced it, which anyone can check on the package page; 1.6.3 through 1.8.3 were
+  published by hand and carry no such signature.
+
 ## [1.8.3]
 
 ### Added

package/README.md

@@ -94,6 +94,8 @@ ln -s "$(pwd)/skills/deploy" ~/.claude/skills/deploy
 
 Set the owner and issues repo in **Settings → Sync** on the board (or env `KB_GH_OWNER` / `KB_GH_REPO`). Without them the board runs in local-only mode: no queue, no warnings. With them, every task becomes an issue and every project gets a `kb: <slug>` GitHub Project with matching columns. Sync is one-way (board → GitHub) and runs in the background.
 
+One repository holds the issues for the whole board, not one per project, and you create it yourself before filling the fields. **Make it private:** titles, descriptions and comments are copied there in full, and this is the only feature that sends anything off your machine. The `gh` CLI has to be signed in with the `project` scope (`gh auth login && gh auth refresh -s project`) - without that scope the issue is still created, but the card never appears on the Projects board, which is a confusing way to find out.
+
 ## Updating
 
 From npm:

package/README.ru.md

@@ -94,6 +94,8 @@ ln -s "$(pwd)/skills/deploy" ~/.claude/skills/deploy
 
 Укажи owner и репозиторий для issues в **Настройки → Синхронизация** (или env `KB_GH_OWNER` / `KB_GH_REPO`). Без них доска работает в local-only режиме: без очереди и предупреждений. С ними каждая задача становится issue, а каждый проект получает GitHub Project `kb: <slug>` с теми же колонками. Синк односторонний (доска → GitHub), фоновый.
 
+Issues всей доски лежат в ОДНОМ репозитории, а не по одному на проект, и создать его надо самому до того, как заполнять поля. **Сделай его приватным:** заголовки, описания и комментарии уезжают туда целиком, и это единственная функция, которая вообще что-то отправляет с твоей машины. `gh` должен быть авторизован со scope `project` (`gh auth login && gh auth refresh -s project`) - без него issue создастся, а карточка в Projects не появится, и понять причину будет непросто.
+
 ## Обновление
 
 Доска сама замечает новую версию и предлагает кнопку в **Настройках → О доске**: она ставит

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-kanban",
-  "version": "1.8.3",
+  "version": "1.9.0",
   "license": "MIT",
   "author": "Dannylamao",
   "repository": {

package/public/app.js

@@ -2,7 +2,7 @@
 import './js/init.js';
 import { state, api, retryUnsaved } from './js/core.js';
 import { refresh } from './js/sse.js';
-import { selectProject, loadProjects, loadTasks, styledConfirm, styledPrompt } from './js/sidebar.js';
+import { loadProjects, loadTasks, openFolderPicker, renderFolderBrowser, selectProject, styledConfirm, styledPrompt } from './js/sidebar.js';
 import { openDrawer, closeDrawer, deleteTask, cancelTask, setKbCursor } from './js/drawer.js';
 import { openProjectSettings, closeProjectSettings } from './js/project.js';
 import { openSettingsModal, getSetting, setSetting, applyTheme } from './js/settings.js';
@@ -14,5 +14,6 @@ Object.assign(window, {
   openDrawer, closeDrawer, deleteTask, cancelTask, setKbCursor,
   openProjectSettings, closeProjectSettings, openSettingsModal, getSetting, setSetting, applyTheme,
   renderDashboard, styledConfirm, styledPrompt, checkVersion,
+  openFolderPicker, renderFolderBrowser,
   retryUnsaved,
 });

package/public/js/core.js

@@ -83,6 +83,7 @@ const I18N_RU = {
   'All projects': 'Все проекты',
   'all self-healed': 'всё починилось само',
   'All set!': 'Готово!',
+  'another folder on this computer…': 'другая папка на этом компьютере…',
   'Appearance': 'Оформление',
   'applies after page reload': 'применится после перезагрузки страницы',
   'Archive': 'Архивировать',
@@ -130,6 +131,7 @@ const I18N_RU = {
   'Checking the file and starting the board…': 'Проверяю файл и поднимаю доску…',
   'checking…': 'проверяю…',
   'Chime': 'Перезвон',
+  'Choose…': 'Выбрать…',
   'Chord': 'Аккорд',
   'Claude can finish the setup for you — copy this and paste it into its chat:': 'Дальше настройку может провести сам Claude — скопируй это и вставь ему в чат:',
   'Claude Code skills live in skills/ — symlink or copy them into ~/.claude/skills:': 'Скиллы Claude Code лежат в папке skills/ — симлинк или копия в ~/.claude/skills:',
@@ -208,6 +210,7 @@ const I18N_RU = {
   'Delete the task permanently (comments included)?': 'Удалить задачу навсегда (вместе с комментариями)?',
   'Demo project': 'Демо-проект',
   'Deploy skill': 'Deploy-скилл',
+  'Deploy skill': 'Деплой-скилл',
   'Deploy skills': 'Деплой-скиллы',
   'Deploy skills of the projects': 'Деплой-скиллы проектов',
   'Deploying': 'Деплою',
@@ -354,6 +357,7 @@ const I18N_RU = {
   'name: latin letters, digits, hyphen': 'имя: латиница, цифры, дефис',
   'name: latin letters, digits, hyphen, underscore only': 'имя: только латиница, цифры, дефис и подчёркивание',
   'needs attention': 'требует внимания',
+  'Needs the gh CLI, signed in with the project scope:': 'Нужен gh CLI, авторизованный со scope project:',
   'new': 'новая',
   'new folder': 'новая папка',
   'New project folder': 'Новая папка проекта',
@@ -370,6 +374,8 @@ const I18N_RU = {
   'no backups yet': 'пока нет бэкапов',
   'Claude moves these columns itself': 'эти колонки двигает сам Claude',
   'no file': 'файла нет',
+  'no folders inside': 'внутри нет папок',
+  'no such folder on this computer': 'такой папки на этом компьютере нет',
   'not deleted': 'не удалено',
   'not installed': 'не установлен',
   'not set': 'не задан',
@@ -377,11 +383,13 @@ const I18N_RU = {
   'not there': 'нет файла',
   'nothing is written to disk until you save': 'на диск ничего не записано, пока не сохранишь',
   'nothing to save': 'нечего сохранять',
+  'One repository for the whole board, not one per project. Create it yourself first, and make it private: task titles, descriptions and comments are copied there in full. This is the only thing on this board that leaves your machine.': 'Репозиторий ОДИН на всю доску, а не по одному на проект. Создай его заранее сам и сделай приватным: заголовки, описания и комментарии задач уезжают туда целиком. Это единственное, что покидает твою машину.',
   'Other Claude skills': 'Прочие скиллы Claude',
   'Overwrite': 'Перезаписать',
   'Overwrite this file?': 'Перезаписать этот файл?',
   'own skill': 'свой скилл',
   'Paths & deploy': 'Пути и деплой',
+  'Project folder': 'Папка проекта',
   'restarting…': 'перезапускаюсь…',
   'Revert': 'Вернуть как в файле',
   's': 'с',
@@ -395,17 +403,26 @@ const I18N_RU = {
   'Skills': 'Скиллы',
   'Skills are the instructions Claude reads. They live outside the board, in ~/.claude/skills, and the board only shows and updates them.': 'Скиллы — инструкции, по которым работает Claude. Они лежат вне доски, в ~/.claude/skills; доска их только показывает и обновляет.',
   'The board': 'Доска',
+  'The board can mirror its tasks to GitHub: every task becomes an issue, and each project gets its own Projects v2 board. Handy when someone else needs to see the work, or when you want the history somewhere besides this machine.': 'Доска умеет зеркалить задачи в GitHub: каждая задача становится issue, а у каждого проекта заводится свой Projects v2. Пригождается, когда работу должен видеть кто-то ещё или когда историю хочется хранить не только на этой машине.',
   'the board has no shared version of this skill — it is your own': 'у доски нет общей версии этого скилла — он ваш собственный',
   'the field above takes a skill name — “deploy” is the shared one': 'в поле выше — имя скилла; «deploy» это общий',
+  'The mirror is one-way: the board writes to GitHub and never reads back. Turning it off is emptying these fields.': 'Зеркало одностороннее: доска пишет в GitHub и обратно ничего не читает. Выключить — очистить эти поля.',
   'The project has no local folder — set one above and the notes will show up here.': 'У проекта нет локальной папки — укажи её выше, и заметки появятся здесь.',
   'The project notes and the deploy skill — Claude opens them before touching the code. Paths are absolute: copy one and paste it into the chat.': 'Заметки проекта и деплой-скилл — Claude открывает их до того, как трогать код. Пути полные: скопируй и вставь в чат.',
   'the skill Claude follows to ship this project; “deploy” is the shared one. A new one is created in Settings → Skills.': 'каким скиллом Claude выкатывает этот проект; «deploy» — общий. Свой заводится в «Настройки → Скиллы».',
   'the skill is not installed — the file will be created on save': 'скилл не установлен — файл появится при сохранении',
   'the update did not go through': 'обновиться не удалось',
+  'Run it yourself': 'Выполни сам',
+  'The same in the README, in more detail': 'То же самое в README, подробнее',
+  'the board is not allowed to do this — the command is the same one it just tried': 'у доски нет на это прав — команда та же, что она только что пробовала',
+  'Your tasks are not touched: they live in the data directory, apart from the code.': 'Задачи не пострадают: они лежат в папке данных, отдельно от кода.',
+  'Afterwards refresh the skills Claude reads:': 'После обновления освежи скиллы, которые читает Claude:',
+  'and refresh the skills:': 'и освежи скиллы:',
   'this is a link — only the link is removed, the file it points to stays': 'это ссылка — снимется только она, файл по ту сторону останется',
   'this is a symlink — saving rewrites the file it points to:': 'это ссылка — сохранение перезапишет файл, на который она ведёт:',
   'This project is gone': 'Этого проекта больше нет',
   'this skill was already on disk — added it to the list': 'такой скилл уже лежал на диске — добавил его в список',
+  'too many folders to show them all': 'папок слишком много, показаны не все',
   'Update the board now? It will restart.': 'Обновить доску сейчас? Она перезапустится.',
   'update with: npm install -g local-kanban@latest': 'обновить: npm install -g local-kanban@latest',
   Archive: 'Архив',
@@ -603,6 +620,7 @@ const I18N_RU = {
   'updating…': 'обновляю…',
   'Updating…': 'Обновляю…',
   'Upload': 'Загрузить',
+  'Use this folder': 'Выбрать эту папку',
   'used by': 'используют',
   'Using the board at work': 'Пользуешься доской в работе',
   'version': 'версия',
@@ -632,11 +650,13 @@ const I18N_RU = {
   'Where do we start?': 'С чего начнём?',
   'Which chaos do we sort out?': 'Какой хаос разгребём?',
   'with the to-do status:': 'со статусом сделать:',
+  'Without that scope an issue is still created, but the card never lands on the Projects board.': 'Без этого scope issue создастся, а карточка в Projects так и не появится.',
   'Work time': 'Время в работе',
   'working columns are moved by Claude only': 'рабочие колонки двигает только Claude',
   'Year': 'Год',
   'Years': 'Годы',
   'Yesterday': 'Вчера',
+  'your own deploy skill is created and edited in Settings → Skills': 'свой деплой-скилл создаётся и правится в «Настройках → Скиллы»',
   '“Ready to work on” are tasks in the To do column — they can be picked up right now. “In the backlog” are ideas not yet selected for work.': '«Готово к работе» — задачи в колонке «Сделать», их можно брать сейчас. «В бэклоге» — идеи, ещё не отобранные в работу.',
   '‹ Back': '‹ Назад',
   '↑ High': '↑ Высокий',
@@ -830,7 +850,7 @@ export const api = async (method, path, body, opts = {}) => {
   const data = await res.json().catch(() => ({}));
   if (!res.ok) {
     if (!opts.quiet && path !== '/api/errors') reportError(`${method} ${path}`, `HTTP ${res.status}: ${data.error || ''}`.trim());
-    throw apiError(data.error || res.status, { status: res.status });
+    throw apiError(data.error || res.status, { status: res.status, body: data });
   }
   return data;
 };

package/public/js/project.js

@@ -124,18 +124,21 @@ export async function renderProjectSettings(force) {
   renderDocs(p);
 }
 
-function buildSkillSelect(p, list) {
-  const host = $('ps-skill');
-  if (!host) return;
-  const cur = p.deploy_skill || '';
+export function skillOptions(cur, list) {
   const names = list ? list.map((s) => s.name) : (cur ? [cur] : []);
   if (cur && !names.includes(cur)) names.unshift(cur);
   const known = new Set((list || []).map((s) => s.name));
-  const options = [{ value: '', label: tr('not set — no deploy') }, ...names.map((name) => ({
+  return [{ value: '', label: tr('not set — no deploy') }, ...names.map((name) => ({
     value: name,
     label: name === 'deploy' ? `${name} · ${tr('shared')}` : (list && !known.has(name) ? `${name} · ${tr('not installed')}` : name),
   }))];
-  buildSelect(host, { value: cur, options });
+}
+
+function buildSkillSelect(p, list) {
+  const host = $('ps-skill');
+  if (!host) return;
+  const cur = p.deploy_skill || '';
+  buildSelect(host, { value: cur, options: skillOptions(cur, list) });
 }
 async function loadSkillOptions(p) {
   let info;

package/public/js/settings.js

@@ -257,6 +257,15 @@ async function renderSection(sec) {
     });
   } else if (sec === 'sync') {
     body.innerHTML = `<div class="sm-h">${tr('GitHub sync')}</div>`
+      + `<div class="sync-about">`
+      + `<p>${tr('The board can mirror its tasks to GitHub: every task becomes an issue, and each project gets its own Projects v2 board. Handy when someone else needs to see the work, or when you want the history somewhere besides this machine.')}</p>`
+      + `<p>${tr('One repository for the whole board, not one per project. Create it yourself first, and make it private: task titles, descriptions and comments are copied there in full. This is the only thing on this board that leaves your machine.')}</p>`
+      + `<p>${tr('The mirror is one-way: the board writes to GitHub and never reads back. Turning it off is emptying these fields.')}</p>`
+      + `<p class="muted">${tr('Needs the gh CLI, signed in with the project scope:')}</p>`
+      + '<pre class="onb-code">gh auth login &amp;&amp; gh auth refresh -s project</pre>'
+      + `<p class="muted">${tr('Without that scope an issue is still created, but the card never lands on the Projects board.')}</p>`
+      + `<p class="muted"><a href="https://github.com/lamaohub/local-kanban#github-sync-optional" target="_blank" rel="noopener noreferrer">${tr('The same in the README, in more detail')}</a></p>`
+      + `</div>`
       + `<div class="set-col"><span class="set-lab">${tr('Owner and issues repository')}<small id="sync-cfg-hint">${tr('empty — sync is off, the board runs locally')}</small></span>`
       + `<div class="sync-cfg-row"><input type="text" id="sync-owner" placeholder="${tr('owner (GitHub user)')}"><input type="text" id="sync-repo" placeholder="${tr('owner/repo for issues')}"><button class="btn-ghost" id="sync-cfg-save">${tr('Save')}</button></div></div>`
       + `<div class="set-row"><span class="set-lab" id="set-sync">…<small id="set-sync-last"></small></span><button class="btn-ghost" id="set-sync-retry">${tr('Retry failed')}</button></div>`
@@ -412,6 +421,8 @@ async function renderSection(sec) {
       + `<div class="set-row upd-row"><span class="set-lab"><span id="about-branch-lab">${tr('Board updates')}</span><small id="about-upd-sub">…</small></span>`
       + `<span class="about-upd-side"><span class="about-fresh" id="about-upd"></span>`
       + `<button class="btn-ghost hidden" id="about-do-upd">${tr('Install the update')}</button></span></div>`
+      + `<div class="set-col hidden" id="about-upd-fail"><span class="set-lab">${tr('Run it yourself')}<small>${tr('the board is not allowed to do this — the command is the same one it just tried')}</small></span>`
+      + '<pre class="onb-code" id="about-upd-cmd"></pre></div>'
       + `<div class="set-row hidden" id="about-dev-row"><span class="set-lab">${tr('dev branch')}<small id="about-dev-sub">…</small></span><span class="about-fresh" id="about-dev"></span></div>`
       + `<div class="set-row"><span class="set-lab">${tr('Check for updates')}<small id="about-recheck-sub">${tr('re-read branch state from GitHub')}</small></span><button class="btn-ghost" id="about-recheck">${tr('Check')}</button></div>`
       + `<div class="set-row"><span class="set-lab">${tr('Reload the page')}<small>${tr('re-read the board code right now')}</small></span><button class="btn-ghost" id="about-reload">${tr('Reload now')}</button></div>`
@@ -467,9 +478,19 @@ async function renderSection(sec) {
     api('GET', '/api/about').catch(() => null).then((a) => { about = a; })
       .then(() => api('GET', '/api/update-check')).then(renderUpd)
       .catch(() => { const s = $('about-upd-sub'); if (s) s.textContent = '—'; });
+    const showFailCmd = (cmd) => {
+      const wrap = $('about-upd-fail');
+      if (!wrap) return;
+      $('about-upd-cmd').textContent = cmd || '';
+      wrap.classList.toggle('hidden', !cmd);
+    };
     $('about-do-upd').onclick = async () => {
       const btn = $('about-do-upd'); const sub = $('about-upd-sub'); const el = $('about-upd');
-      if (!(await styledConfirm(tr('Update the board now? It will restart.')))) return;
+      const ask = [tr('Update the board now? It will restart.'),
+        tr('Your tasks are not touched: they live in the data directory, apart from the code.')];
+      if (about?.packaged) ask.push(`${tr('Afterwards refresh the skills Claude reads:')} local-kanban skills`);
+      if (!(await styledConfirm(ask.join('\n')))) return;
+      showFailCmd('');
       const label = btn.textContent;
       let phase = tr('installing…'); let sec = 0;
       const paint = () => { el.textContent = `${phase} ${sec}${tr('s')}`; };
@@ -483,10 +504,21 @@ async function renderSection(sec) {
         btn.textContent = label;
       };
       let r;
-      try { r = await api('POST', '/api/update', null, { quiet: true }); }
-      catch (err) { stop(tr('Did not work out'), true); sub.textContent = `${tr('the update did not go through')}: ${err.message || err}`; btn.disabled = false; return; }
-      if (!r?.ok) { stop(tr('Did not work out'), true); sub.textContent = `${tr('the update did not go through')}: ${(r?.output || '').split('\n').pop() || '—'}`; btn.disabled = false; return; }
-      if (r.restart !== 'pm2') { stop('', false); sub.textContent = tr('updated — start the board again to pick it up'); return; }
+      try {
+        r = await api('POST', '/api/update', null, { quiet: true });
+      } catch (err) {
+        stop(tr('Did not work out'), true);
+        sub.textContent = `${tr('the update did not go through')}: ${err.message || err}`;
+        showFailCmd(err.body?.cmd);
+        btn.disabled = false; return;
+      }
+      if (!r?.ok) { stop(tr('Did not work out'), true); sub.textContent = `${tr('the update did not go through')}: ${(r?.output || '').split('\n').pop() || '—'}`; showFailCmd(r?.cmd); btn.disabled = false; return; }
+      if (r.restart !== 'pm2') {
+        stop('', false);
+        sub.textContent = tr('updated — start the board again to pick it up')
+          + (about?.packaged ? ` · ${tr('and refresh the skills:')} local-kanban skills` : '');
+        return;
+      }
       phase = tr('restarting…'); sec = 0; paint();
       for (let i = 0; i < 60; i++) {
         await new Promise((ok) => setTimeout(ok, 1000));

package/public/js/sidebar.js

@@ -1,10 +1,12 @@
 
-import { renderBoard } from './board.js';
+import { buildSelect, renderBoard, selVal } from './board.js';
+
+const GENERIC_DEPLOY = 'deploy';
 import { renderChaos } from './chaos.js';
 import { $, ALL, CALENDAR, CHAOS, DASH, HIDDEN_SECTIONS, HORIZON, LANG, SETTINGS, SIDEBAR_SECTIONS, api, esc, ic, seg, setupPrompt, state, tr } from './core.js';
 import { renderDashboard } from './dash.js';
 import { renderCalendar, renderHorizon } from './horizon.js';
-import { openProjectSettings, renderProjectSettings } from './project.js';
+import { openProjectSettings, renderProjectSettings, skillOptions } from './project.js';
 import { openSettingsModal, plural, setSetting, syncLangToServer } from './settings.js';
 import { copyText, refresh, showView } from './sse.js';
 
@@ -344,6 +346,37 @@ function wizSlugify(name) {
     .replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 40);
 }
 
+export async function openFolderPicker() {
+  const box = $('wiz-browser'); const input = $('wiz-path');
+  if (!box || !input) return;
+  try {
+    const r = await api('POST', '/api/fs/pick', null, { quiet: true });
+    if (r?.path) { input.value = r.path; box.classList.add('hidden'); return; }
+    if (r?.cancelled) return;
+  } catch {  }
+  await renderFolderBrowser(input.value.trim() || undefined);
+}
+
+export async function renderFolderBrowser(path) {
+  const box = $('wiz-browser');
+  if (!box) return;
+  let d;
+  const ask = (p) => api('GET', p ? `/api/fs?path=${encodeURIComponent(p)}` : '/api/fs', null, { quiet: true });
+  try { d = await ask(path); } catch { try { d = await ask(); } catch { return; } }
+  const child = (n) => (d.path.endsWith('/') ? d.path + n : `${d.path}/${n}`);
+  box.classList.remove('hidden');
+  box.innerHTML = `<div class="wizb-path">${esc(d.path)}</div>`
+    + '<div class="wizb-list">'
+    + (d.parent ? `<div class="wizb-row wizb-up" data-p="${esc(d.parent)}">..</div>` : '')
+    + d.dirs.map((n) => `<div class="wizb-row" data-p="${esc(child(n))}">${esc(n)}</div>`).join('')
+    + (d.dirs.length ? '' : `<div class="wizb-note">${tr('no folders inside')}</div>`)
+    + (d.truncated ? `<div class="wizb-note">${tr('too many folders to show them all')}</div>` : '')
+    + '</div>'
+    + `<button type="button" class="btn-primary wizb-pick">${tr('Use this folder')}</button>`;
+  box.querySelectorAll('.wizb-row').forEach((r) => { r.onclick = () => renderFolderBrowser(r.dataset.p); });
+  box.querySelector('.wizb-pick').onclick = () => { $('wiz-path').value = d.path; box.classList.add('hidden'); };
+}
+
 function openProjectWizard() {
   document.getElementById('proj-wizard')?.remove();
   const overlay = document.createElement('div');
@@ -380,14 +413,13 @@ function openProjectWizard() {
     let html = `<label class="pp-field">${tr('Project name')}<input id="wiz-name" type="text" placeholder="my project"></label>`
       + `<label class="pp-field">${tr('Key (slug + task prefix)')}<input id="wiz-slug" type="text" placeholder="my-project"></label>`;
     if (withLocal) {
-      html += `<div class="pp-field">${tr('Project key')}
-        <select id="wiz-folder" class="wiz-select">
-          ${type === 'local' ? `<option value="">${tr('no folder — just a task list')}</option>` : ''}
-          ${folders.map((f) => `<option value="${esc(f)}">${tr('folder')} ${esc(f)} (${esc(state.folders.root || '~')})</option>`).join('')}
-          <option value="__manual__">${tr('enter the folder path…')}</option>
-          ${type === 'localserver' ? `<option value="__clone__">${tr('clone from a git URL…')}</option>` : ''}
-        </select>
-        <input id="wiz-path" type="text" class="hidden" placeholder="/full/path/to/the/folder">
+      html += `<div class="pp-field">${tr('Project folder')}
+        <div id="wiz-folder"></div>
+        <div id="wiz-path-row" class="wiz-path-row hidden">
+          <input id="wiz-path" type="text" placeholder="/full/path/to/the/folder">
+          <button type="button" class="btn-ghost" id="wiz-browse">${tr('Choose…')}</button>
+        </div>
+        <div id="wiz-browser" class="wiz-browser hidden"></div>
         <input id="wiz-git" type="text" class="hidden" placeholder="git@github.com:me/repo.git or https://…"></div>`;
     }
     if (withServer) {
@@ -395,7 +427,8 @@ function openProjectWizard() {
         + `<label class="pp-field">${tr('Server path')}<input id="wiz-spath" type="text" placeholder="/var/www/my-project"></label>`
         + `<label class="pp-field">${tr('pm2 processes (comma-separated)')}<input id="wiz-pm2" type="text" placeholder="my-api, my-web"></label>`
         + `<label class="pp-field">${tr('Domain (to verify after deploy)')}<input id="wiz-domain" type="text" placeholder="example.com"></label>`
-        + `<label class="pp-field">${tr('Custom deploy skill')}<input id="wiz-skill" type="text"></label>`;
+        + `<div class="pp-field">${tr('Deploy skill')}<div id="wiz-skill"></div>`
+        + `<small class="pp-hint">${tr('your own deploy skill is created and edited in Settings → Skills')}</small></div>`;
     }
     body.innerHTML = html;
     actions.innerHTML = `<button class="btn-primary wiz-create">${tr('Create')}</button><button class="btn-ghost wiz-back">${tr('‹ Back')}</button>`;
@@ -407,10 +440,34 @@ function openProjectWizard() {
     nameEl.oninput = () => { if (!slugTouched) slugEl.value = wizSlugify(nameEl.value); };
     const folderSel = $('wiz-folder');
     if (folderSel) {
-      folderSel.onchange = () => {
-        $('wiz-path').classList.toggle('hidden', folderSel.value !== '__manual__');
-        $('wiz-git').classList.toggle('hidden', folderSel.value !== '__clone__');
+      const options = [
+        ...(type === 'local' ? [{ value: '', label: tr('no folder — just a task list') }] : []),
+        ...folders.map((f) => ({ value: f, label: `${tr('folder')} ${f} (${state.folders.root || '~'})` })),
+        { value: '__manual__', label: tr('another folder on this computer…') },
+        ...(type === 'localserver' ? [{ value: '__clone__', label: tr('clone from a git URL…') }] : []),
+      ];
+      const onFolderChange = (v) => {
+        $('wiz-path-row').classList.toggle('hidden', v !== '__manual__');
+        $('wiz-browser').classList.add('hidden');
+        $('wiz-git').classList.toggle('hidden', v !== '__clone__');
+        if (v === '__manual__') openFolderPicker();
       };
+      buildSelect(folderSel, { value: type === 'local' ? '' : (options[0]?.value ?? ''), options, onChange: onFolderChange });
+      $('wiz-browse').onclick = openFolderPicker;
+    }
+    const skillHost = $('wiz-skill');
+    if (skillHost) {
+      buildSelect(skillHost, { value: GENERIC_DEPLOY, options: skillOptions(GENERIC_DEPLOY, null) });
+      api('GET', '/api/skills', null, { quiet: true })
+        .then((info) => {
+          if (!$('wiz-skill')) return;
+          const generic = info.generic_deploy_skill || GENERIC_DEPLOY;
+          const own = new Set(info.own_skills || []);
+          const deployish = (info.items || []).filter((s) => s.name === generic || s.used_by?.length || own.has(s.name));
+          const has = deployish.some((s) => s.name === generic);
+          buildSelect($('wiz-skill'), { value: has ? generic : '', options: skillOptions(generic, deployish) });
+        })
+        .catch(() => {  });
     }
     actions.querySelector('.wiz-create').onclick = () => wizCreate(type).catch((e) => err(e.message));
     nameEl.focus();
@@ -428,10 +485,12 @@ function openProjectWizard() {
     btn.disabled = true;
     try {
       if (type !== 'server') {
-        const mode = $('wiz-folder')?.value ?? '';
+        const mode = $('wiz-folder') ? selVal($('wiz-folder')) : '';
         if (mode === '__manual__') {
           const p = $('wiz-path').value.trim();
           if (!p) throw new Error(tr('give the folder path'));
+          try { await api('GET', `/api/fs?path=${encodeURIComponent(p)}`, null, { quiet: true }); }
+          catch { throw new Error(`${tr('no such folder on this computer')}: ${p}`); }
           body.path = p;
         } else if (mode === '__clone__') {
           const url = $('wiz-git').value.trim();
@@ -454,7 +513,8 @@ function openProjectWizard() {
         if (pm2.length) body.pm2_services = JSON.stringify(pm2);
         const domain = $('wiz-domain').value.trim();
         if (domain) body.domain = domain;
-        body.deploy_skill = $('wiz-skill').value.trim() || 'deploy';
+        const skill = selVal($('wiz-skill'));
+        if (skill) body.deploy_skill = skill;
       }
       if (type === 'server') {
         btn.textContent = tr('checking git on the server…');

package/public/style.css

@@ -141,6 +141,23 @@ body {
 }
 .btn-ghost:hover { color: var(--text); }
 a.btn-ghost { text-decoration: none; }
+.sync-about { font-size: 12.5px; line-height: 1.5; color: var(--text); display: flex; flex-direction: column; gap: 7px; margin-bottom: 4px; }
+.sync-about p { margin: 0; }
+.sync-about .muted, .sync-about p.muted { color: var(--muted); }
+.sync-about code { font-size: 11.5px; background: var(--chip-bg); padding: 1px 5px; border-radius: 5px; }
+.pp-hint { display: block; margin-top: 5px; color: var(--muted); font-size: 11.5px; }
+.wiz-path-row { display: flex; gap: 8px; align-items: center; }
+.wiz-path-row input { flex: 1; min-width: 0; }
+.wiz-browser {
+  margin-top: 8px; border: 1px solid var(--border); border-radius: 8px;
+  padding: 8px; display: flex; flex-direction: column; gap: 8px;
+}
+.wizb-path { font-size: 11.5px; color: var(--muted); overflow-wrap: anywhere; }
+.wizb-list { max-height: 190px; overflow-y: auto; display: flex; flex-direction: column; }
+.wizb-row { padding: 5px 7px; border-radius: 6px; cursor: pointer; font-size: 13px; }
+.wizb-row:hover { background: var(--chip-bg); }
+.wizb-up { color: var(--muted); }
+.wizb-note { padding: 5px 7px; font-size: 11.5px; color: var(--muted); }
 .about-upd-side { display: flex; align-items: center; gap: 10px; justify-content: flex-end; flex-shrink: 0; }
 .set-row.upd-row { flex-wrap: wrap; }
 .set-row.upd-row .set-lab { flex: 1 1 200px; min-width: 0; }

package/src/routes/projects.js

@@ -1,6 +1,7 @@
 import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, realpathSync, rmSync, statSync } from 'node:fs';
 import { execFile } from 'node:child_process';
 import { join, basename, resolve, sep } from 'node:path';
+import { homedir } from 'node:os';
 import { db, DATA_DIR, genPrefix, usedPrefixes, makePrefix, kvGet, kvSet, logError } from '../db.js';
 import { localRoot, panelUrl, panelInfo } from '../config.js';
 import { emit } from '../bus.js';
@@ -223,6 +224,47 @@ export default async function projectRoutes(app) {
 
   app.get('/api/projects/folders', () => scanFolders());
 
+  const FS_LIMIT = 500;
+  app.get('/api/fs', (req, reply) => {
+    const raw = req.query?.path;
+    if (raw !== undefined && typeof raw !== 'string') return reply.code(400).send({ error: 'path: expected a string' });
+    const dir = raw ? resolve(String(raw).replace(/^~(?=$|\/)/, homedir())) : localRoot();
+    let st;
+    try { st = statSync(dir); } catch { return reply.code(404).send({ error: 'no such folder' }); }
+    if (!st.isDirectory()) return reply.code(400).send({ error: 'not a folder' });
+    let names;
+    try { names = readdirSync(dir, { withFileTypes: true }); }
+    catch (e) { return reply.code(403).send({ error: `cannot read the folder: ${e.code || e.message}` }); }
+    const dirs = names.filter((d) => d.isDirectory() && !d.name.startsWith('.')).map((d) => d.name).sort();
+    const parent = resolve(dir, '..');
+    return {
+      path: dir,
+      parent: parent === dir ? null : parent,
+      dirs: dirs.slice(0, FS_LIMIT),
+      truncated: dirs.length > FS_LIMIT,
+      home: homedir(),
+      root: localRoot(),
+    };
+  });
+
+  const PICKERS = {
+    darwin: ['osascript', ['-e', 'tell application "System Events" to activate', '-e', 'POSIX path of (choose folder with prompt "Choose the project folder")']],
+    linux: ['zenity', ['--file-selection', '--directory', '--title=Choose the project folder']],
+  };
+  app.post('/api/fs/pick', async (req, reply) => {
+    const spec = PICKERS[process.platform];
+    if (!spec) return reply.code(501).send({ error: `no folder dialog on ${process.platform}` });
+    const [cmd, args] = spec;
+    const res = await new Promise((done) => {
+      execFile(cmd, args, { timeout: 180000 }, (err, out, errOut) => done({ err, out: String(out || '').trim(), errOut: String(errOut || '') }));
+    });
+    if (res.err) {
+      if (!res.out) return { path: null, cancelled: true };
+      return reply.code(500).send({ error: res.errOut.trim() || res.err.message });
+    }
+    return { path: res.out || null, cancelled: !res.out };
+  });
+
   app.post('/api/projects/folders', (req, reply) => {
     const raw = req.body?.name;
     if (raw !== undefined && raw !== null && typeof raw !== 'string' && typeof raw !== 'number') {

package/src/routes/system.js

@@ -53,10 +53,13 @@ export function globalPrefixOf(root, name) {
   return prefix ? (root.startsWith(sep) ? sep + prefix : prefix) : null;
 }
 
+const NPM_NOISE = /^npm error(\s+at\b|\s*[{}]|\s+A complete log of this run\b|\s+(errno|syscall|path|dest|stack|code|signal|cmd|args|file):)/i;
 export function failureReason(output, fallback = '') {
   const lines = String(output || '').split('\n').map((l) => l.trim()).filter(Boolean);
   const marked = lines.filter((l) => /^(error\b|fatal:|npm error)/i.test(l));
-  const pick = marked.length ? marked.reduce((a, b) => (b.length > a.length ? b : a)) : lines.at(-1);
+  const pool = marked.filter((l) => !NPM_NOISE.test(l));
+  const best = (pool.length ? pool : marked);
+  const pick = best.length ? best.reduce((a, b) => (b.length > a.length ? b : a)) : lines.at(-1);
   return (pick || fallback || '').slice(0, 300);
 }
 
@@ -315,7 +318,11 @@ export default async function systemRoutes(app) {
     const output = res.text.slice(-2000);
     if (res.err) {
       logError('server', 'update', `update via ${plan.how} failed: ${res.err.message}`, output);
-      return reply.code(500).send({ ok: false, how: plan.how, output, error: failureReason(output, res.err.message) });
+
+      return reply.code(500).send({
+        ok: false, how: plan.how, output, cmd: [plan.cmd, ...plan.args].join(' '),
+        error: failureReason(output, res.err.message),
+      });
     }
     const restart = restartMode();
     if (restart === 'pm2') setTimeout(() => process.exit(0), 400).unref();