specrails-desktop 2.29.2 → 2.29.4

package/client/dist/assets/{spending-C4p06nen.js → spending-BLb5pj6G.js}

@@ -1 +1 @@
-import{o as e}from"./i18n-CgaRxpII.js";var t={job:`analytics:surfaces.job`,"quick-spec":`analytics:surfaces.quickSpec`,"explore-spec":`analytics:surfaces.exploreSpec`,"ai-edit":`analytics:surfaces.aiEdit`,smash:`analytics:surfaces.smash`,"file-summary":`analytics:surfaces.fileSummary`,loop:`analytics:surfaces.loop`,"chat-sidebar":`analytics:surfaces.chatSidebar`,"spec-launcher":`analytics:surfaces.specLauncher`,proposal:`analytics:surfaces.proposal`,"agent-studio":`analytics:surfaces.agentStudio`,setup:`analytics:surfaces.setup`},n={bg:`bg-muted/40`,text:`text-muted-foreground`,ring:`ring-border/40`,dot:`bg-muted-foreground`},r={job:{bg:`bg-accent-info/15`,text:`text-accent-info`,ring:`ring-accent-info/40`,dot:`bg-accent-info`},"quick-spec":{bg:`bg-accent-secondary/15`,text:`text-accent-secondary`,ring:`ring-accent-secondary/40`,dot:`bg-accent-secondary`},"explore-spec":{bg:`bg-accent-highlight/15`,text:`text-accent-highlight`,ring:`ring-accent-highlight/40`,dot:`bg-accent-highlight`},"ai-edit":{bg:`bg-accent-success/15`,text:`text-accent-success`,ring:`ring-accent-success/40`,dot:`bg-accent-success`},smash:{bg:`bg-accent-highlight/15`,text:`text-accent-highlight`,ring:`ring-accent-highlight/40`,dot:`bg-accent-highlight`},"file-summary":{bg:`bg-accent-warning/15`,text:`text-accent-warning`,ring:`ring-accent-warning/40`,dot:`bg-accent-warning`},loop:{bg:`bg-accent-primary/15`,text:`text-accent-primary`,ring:`ring-accent-primary/40`,dot:`bg-accent-primary`},"chat-sidebar":{bg:`bg-accent-info/15`,text:`text-accent-info`,ring:`ring-accent-info/40`,dot:`bg-accent-info`},"spec-launcher":{bg:`bg-accent-secondary/15`,text:`text-accent-secondary`,ring:`ring-accent-secondary/40`,dot:`bg-accent-secondary`},proposal:{bg:`bg-accent-highlight/15`,text:`text-accent-highlight`,ring:`ring-accent-highlight/40`,dot:`bg-accent-highlight`},"agent-studio":{bg:`bg-accent-success/15`,text:`text-accent-success`,ring:`ring-accent-success/40`,dot:`bg-accent-success`},setup:{bg:`bg-accent-primary/15`,text:`text-accent-primary`,ring:`ring-accent-primary/40`,dot:`bg-accent-primary`}};function i(e,t){return new Proxy(e,{get(e,n,r){return typeof n==`string`&&!(n in e)?t(n):Reflect.get(e,n,r)}})}var a=i(Object.defineProperties({},Object.fromEntries(Object.keys(t).map(n=>[n,{get:()=>e.t(t[n]),enumerable:!0}]))),e=>e),o=i(r,()=>n);export{a as n,o as t};
+import{o as e}from"./i18n-cK5pPbj8.js";var t={job:`analytics:surfaces.job`,"quick-spec":`analytics:surfaces.quickSpec`,"explore-spec":`analytics:surfaces.exploreSpec`,"ai-edit":`analytics:surfaces.aiEdit`,smash:`analytics:surfaces.smash`,"file-summary":`analytics:surfaces.fileSummary`,loop:`analytics:surfaces.loop`,"chat-sidebar":`analytics:surfaces.chatSidebar`,"spec-launcher":`analytics:surfaces.specLauncher`,proposal:`analytics:surfaces.proposal`,"agent-studio":`analytics:surfaces.agentStudio`,setup:`analytics:surfaces.setup`},n={bg:`bg-muted/40`,text:`text-muted-foreground`,ring:`ring-border/40`,dot:`bg-muted-foreground`},r={job:{bg:`bg-accent-info/15`,text:`text-accent-info`,ring:`ring-accent-info/40`,dot:`bg-accent-info`},"quick-spec":{bg:`bg-accent-secondary/15`,text:`text-accent-secondary`,ring:`ring-accent-secondary/40`,dot:`bg-accent-secondary`},"explore-spec":{bg:`bg-accent-highlight/15`,text:`text-accent-highlight`,ring:`ring-accent-highlight/40`,dot:`bg-accent-highlight`},"ai-edit":{bg:`bg-accent-success/15`,text:`text-accent-success`,ring:`ring-accent-success/40`,dot:`bg-accent-success`},smash:{bg:`bg-accent-highlight/15`,text:`text-accent-highlight`,ring:`ring-accent-highlight/40`,dot:`bg-accent-highlight`},"file-summary":{bg:`bg-accent-warning/15`,text:`text-accent-warning`,ring:`ring-accent-warning/40`,dot:`bg-accent-warning`},loop:{bg:`bg-accent-primary/15`,text:`text-accent-primary`,ring:`ring-accent-primary/40`,dot:`bg-accent-primary`},"chat-sidebar":{bg:`bg-accent-info/15`,text:`text-accent-info`,ring:`ring-accent-info/40`,dot:`bg-accent-info`},"spec-launcher":{bg:`bg-accent-secondary/15`,text:`text-accent-secondary`,ring:`ring-accent-secondary/40`,dot:`bg-accent-secondary`},proposal:{bg:`bg-accent-highlight/15`,text:`text-accent-highlight`,ring:`ring-accent-highlight/40`,dot:`bg-accent-highlight`},"agent-studio":{bg:`bg-accent-success/15`,text:`text-accent-success`,ring:`ring-accent-success/40`,dot:`bg-accent-success`},setup:{bg:`bg-accent-primary/15`,text:`text-accent-primary`,ring:`ring-accent-primary/40`,dot:`bg-accent-primary`}};function i(e,t){return new Proxy(e,{get(e,n,r){return typeof n==`string`&&!(n in e)?t(n):Reflect.get(e,n,r)}})}var a=i(Object.defineProperties({},Object.fromEntries(Object.keys(t).map(n=>[n,{get:()=>e.t(t[n]),enumerable:!0}]))),e=>e),o=i(r,()=>n);export{a as n,o as t};

package/client/dist/assets/{useBrowserCaptureSession-2OqX0vap.js → useBrowserCaptureSession-DR1_jL56.js}

@@ -1 +1 @@
-import{a as e}from"./rolldown-runtime-CNC7AqOf.js";import{n as t}from"./jsx-runtime-zu2_FqZY.js";import{o as n}from"./i18n-CgaRxpII.js";import{t as r}from"./createLucideIcon-Bjbbp_KS.js";import{a as i,n as a}from"./auth-D_5bQv5W.js";import{t as o}from"./api-B2M7CtDw.js";var s=r(`arrow-right`,[[`path`,{d:`M5 12h14`,key:`1ays0h`}],[`path`,{d:`m12 5 7 7-7 7`,key:`xquz4c`}]]),c=r(`globe`,[[`circle`,{cx:`12`,cy:`12`,r:`10`,key:`1mglay`}],[`path`,{d:`M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20`,key:`13o1zl`}],[`path`,{d:`M2 12h20`,key:`9i4pu4`}]]),l=r(`rotate-cw`,[[`path`,{d:`M21 12a9 9 0 1 1-9-9c2.52 0 4.93 1 6.74 2.74L21 8`,key:`1p45f6`}],[`path`,{d:`M21 3v5h-5`,key:`1q7to0`}]]),u=e(t(),1);function d(){return typeof window<`u`&&`__TAURI_INTERNALS__`in window||typeof window<`u`&&window.location.protocol!==`http:`&&window.location.protocol!==`https:`?`ws://localhost:4200`:`${window.location.protocol===`https:`?`wss:`:`ws:`}//${window.location.host}`}var f=d();function p(){let e={BASE_URL:`/`,DEV:!1,MODE:`production`,PROD:!0,SSR:!1}.VITE_FEATURE_BROWSER_CAPTURE;return typeof e!=`string`||e!==`false`}var m={desktop:{width:1280,height:800},tablet:{width:768,height:1024},mobile:{width:375,height:667}},h=class extends Error{},g=class extends Error{};function _(e){if(!e)throw Error(`A project owner is required for browser sessions`);return`${i}/api/projects/${encodeURIComponent(e)}`}async function v(e,t){let n=await fetch(`${_(e)}/browser/sessions`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({initialUrl:t})});if(n.status===409)throw new h(`Too many open browser sessions`);if(n.status===502)throw new g(`The browser failed to launch`);if(!n.ok)throw Error(`Failed to open browser (${n.status})`);return(await n.json()).session}async function y(e,t,n,r){let i=await fetch(`${_(e)}/browser/sessions/${t}/navigate`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:n,url:r})});if(!i.ok)throw Error(`Navigation failed (${i.status})`);return await i.json()}async function b(e,t,n,r,i){let a=await fetch(`${_(e)}/browser/sessions/${t}/capture`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({rect:n,pendingSpecId:r,captureNetwork:i?.captureNetwork??!0})});if(!a.ok)throw Error(await x(a));return await a.json()}async function x(e){let t=await e.json().then(e=>e.error).catch(()=>void 0);return t?`Capture failed (${e.status}): ${t}`:`Capture failed (${e.status})`}async function S(e,t,n,r,i,a=m){let o=await fetch(`${_(e)}/browser/sessions/${t}/capture-breakpoints`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({rect:n,anchorPoint:r,pendingSpecId:i,breakpoints:a})});if(!o.ok)throw Error(await x(o));return await o.json()}async function C(e,t,n){let r=new FormData;r.append(`file`,t,n);let i=await fetch(`${o()}/tickets/${e}/attachments`,{method:`POST`,body:r});if(!i.ok)throw Error(`Upload failed (${i.status})`);return(await i.json()).attachment}async function w(e,t,n,r){let i=await fetch(`${_(e)}/browser/sessions/${t}/clipboard`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:n,text:r})});if(!i.ok)throw Error(`Clipboard failed (${i.status})`);return await i.json()}async function T(e,t,n,r){let i=await fetch(`${_(e)}/browser/sessions/${t}/element`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({selector:n,direction:r})});if(!i.ok)throw Error(`Element navigate failed (${i.status})`);return(await i.json()).probe}async function E(e,t,n){try{await fetch(`${_(e)}/browser/sessions/${t}/popup-view`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({target:n})})}catch{}}function D(e){if(!e||e===`about:blank`)return`…`;try{return new URL(e).hostname||`…`}catch{return`…`}}async function O(e,t){try{await fetch(`${_(e)}/browser/sessions/${t}`,{method:`DELETE`})}catch{}}function k(e,t){return`${f||(typeof window<`u`?`${window.location.protocol===`https:`?`wss:`:`ws:`}//${window.location.host}`:`ws://localhost:4200`)}/ws/browser/${e}?projectId=${encodeURIComponent(t)}`}function A(e,t){let n=k(e,t),r=a(),i=r?new WebSocket(n,[`specrails-desktop`,r]):new WebSocket(n);return i.binaryType=`arraybuffer`,i}function j(e,t=e=>requestAnimationFrame(e),n=e=>cancelAnimationFrame(e)){let r=null,i=null,a=null,o=!1,s=()=>{a!=null&&(n(a),a=null);let t=r,o=i;r=null,i=null,t&&(!o||t.x!==o.x||t.y!==o.y)&&e({type:`mouse`,action:`move`,x:t.x,y:t.y}),o&&e({type:`wheel`,x:o.x,y:o.y,deltaX:o.deltaX,deltaY:o.deltaY})},c=()=>{a==null&&!o&&(a=t(()=>{a=null,s()}))};return{move(e,t){o||(r={x:e,y:t},c())},wheel(e,t,n,r){o||(i?(i.x=e,i.y=t,i.deltaX+=n,i.deltaY+=r):i={x:e,y:t,deltaX:n,deltaY:r},c())},flush(){o||s()},dispose(){o||(o=!0,a!=null&&(n(a),a=null),r=null,i=null)}}}function M(e,t,n){let r=t.width>0?(e.x-t.left)/t.width:0,i=t.height>0?(e.y-t.top)/t.height:0,a=Math.min(Math.max(r,0),1)*n.width,o=Math.min(Math.max(i,0),1)*n.height;return{x:Math.round(a),y:Math.round(o)}}function N(e,t,n){let r=n.width>0?t.width/n.width:0,i=n.height>0?t.height/n.height:0;return{left:t.left+e.x*r,top:t.top+e.y*i,width:e.width*r,height:e.height*i}}function P(e,t){return{x:Math.min(e.x,t.x),y:Math.min(e.y,t.y),width:Math.abs(e.x-t.x),height:Math.abs(e.y-t.y)}}function F(e,t=8){return e.width>=t&&e.height>=t}function I(e,t){let n=Math.max(1,t.width),r=Math.max(1,t.height),i=Math.max(0,Math.min(e.x,n-1)),a=Math.max(0,Math.min(e.y,r-1)),o=Math.min(n,Math.max(i+1,e.x+e.width)),s=Math.min(r,Math.max(a+1,e.y+e.height));return{x:Math.round(i),y:Math.round(a),width:Math.round(o-i),height:Math.round(s-a)}}function L(e){return{nodeCount:e.nodes.length,htmlBytes:e.html.length,truncated:e.htmlTruncated,networkCount:e.networkRequests?.length??0}}function R(e){let t=e.schedule??(e=>requestAnimationFrame(e)),n=e.cancel??(e=>cancelAnimationFrame(e)),r=e.now??(()=>typeof performance<`u`?performance.now():Date.now()),i=e.release??(()=>{}),a={received:0,decoded:0,drawn:0,droppedStale:0,droppedUndrawn:0,decodeMsTotal:0,drawMsTotal:0},o=!1,s=!1,c=null,l=null,u=null,d=()=>{u=null;let t=l;if(l=null,t==null||o){t!=null&&f(t);return}let n=r();try{e.draw(t),a.drawn++,a.drawMsTotal+=r()-n}catch{}finally{f(t)}},f=e=>{try{i(e)}catch{}},p=()=>{u==null&&!o&&(u=t(d))},m=t=>{s=!0;let n=r();e.decode(t).then(e=>{if(o){f(e);return}a.decoded++,a.decodeMsTotal+=r()-n,l!=null&&(a.droppedUndrawn++,f(l)),l=e,p(),h()},()=>{h()})},h=()=>{if(o){s=!1;return}let e=c;c=null,e==null?s=!1:m(e)};return{push(e){if(!o){if(a.received++,s){c!=null&&a.droppedStale++,c=e;return}m(e)}},stats(){return{...a}},dispose(){if(!o){if(o=!0,c=null,u!=null){try{n(u)}catch{}u=null}l!=null&&(f(l),l=null)}}}}var z=`specrails-desktop:browser-capture-debug`;function B(){try{return typeof localStorage<`u`&&localStorage.getItem(z)===`1`}catch{return!1}}function V(e,t,n){let r=Math.max(1,n),i=t.decoded-e.decoded,a=t.drawn-e.drawn,o=e=>Math.round(e*10)/10;return{fpsReceived:o((t.received-e.received)*1e3/r),fpsDrawn:o(a*1e3/r),droppedStale:t.droppedStale-e.droppedStale,droppedUndrawn:t.droppedUndrawn-e.droppedUndrawn,avgDecodeMs:i>0?o((t.decodeMsTotal-e.decodeMsTotal)/i):0,avgDrawMs:a>0?o((t.drawMsTotal-e.drawMsTotal)/a):0}}function H(e,t=e=>console.table([e]),n=2e3,r=()=>Date.now()){let i=e(),a=r(),o=setInterval(()=>{let n=e(),o=r();t(V(i,n,o-a)),i=n,a=o},n);return()=>clearInterval(o)}function U(e){let{projectId:t,open:r,initialUrl:i}=e,a=(0,u.useRef)(null),o=(0,u.useRef)(null),s=(0,u.useRef)(null),c=(0,u.useRef)(0),l=(0,u.useRef)(new Map),d=(0,u.useCallback)(()=>{if(c.current!==0||l.current.size===0)return;let e=[...l.current.values()];l.current.clear();for(let t of e)O(t.projectId,t.sessionId)},[]),[f,p]=(0,u.useState)({status:`connecting`,errorMsg:null,url:null,title:null,viewport:{width:1280,height:800},hoverRect:null,hoverSelector:null,hoverPath:null,popup:null});(0,u.useEffect)(()=>{if(!r||!t)return;let e=!1,u=null;p(e=>({...e,status:`connecting`,errorMsg:null,popup:null}));let d=R({decode:e=>createImageBitmap(new Blob([e],{type:`image/jpeg`})),draw:e=>{let t=a.current;t&&(t.width!==e.width&&(t.width=e.width),t.height!==e.height&&(t.height=e.height),t.getContext(`2d`)?.drawImage(e,0,0))},release:e=>e.close()}),f=B()?H(()=>d.stats()):null;return(async()=>{try{let r=await v(t,i);if(e){O(t,r.id);return}u=r.id,s.current={id:r.id,projectId:t},p(e=>({...e,url:r.url,title:r.title,viewport:{width:r.viewportWidth,height:r.viewportHeight}}));let a=A(r.id,t);o.current=a,a.onmessage=e=>{if(typeof e.data==`string`){try{let t=JSON.parse(e.data);if(t.type===`ready`)p(e=>({...e,status:`ready`,url:t.url??e.url,title:t.title??e.title,viewport:t.viewport??e.viewport}));else if(t.type===`nav`)p(e=>({...e,url:t.url??e.url,title:t.title??e.title}));else if(t.type===`hover`)p(e=>({...e,hoverRect:t.rect??null,hoverSelector:t.selector??null,hoverPath:t.path??null}));else if(t.type===`popup`){let e=typeof t.count==`number`?t.count:0;p(n=>({...n,popup:e>0?{count:e,active:t.active===!0,url:t.url??null}:null}))}}catch{}return}d.push(e.data)},a.onopen=()=>{e||p(e=>({...e,status:`ready`}))},a.onerror=()=>{e||p(e=>({...e,status:`error`,errorMsg:n.t(`browser:session.connectionError`)}))},a.onclose=()=>{e||p(e=>e.status===`ready`?{...e,status:`error`,errorMsg:n.t(`browser:session.lostConnection`)}:e)}}catch(t){if(e)return;let r=t instanceof h?n.t(`browser:session.tooManySessions`):t instanceof g?n.t(`browser:session.launchFailed`):n.t(`browser:session.openFailed`);p(e=>({...e,status:`error`,errorMsg:r}))}})(),()=>{e=!0,f?.(),d.dispose();let n=o.current;if(n){n.onmessage=null,n.onopen=null,n.onerror=null,n.onclose=null;try{n.close()}catch{}}o.current=null;let r=u;r&&s.current?.id===r&&s.current.projectId===t&&(s.current=null),r&&(c.current>0?l.current.set(`${t}\0${r}`,{sessionId:r,projectId:t}):O(t,r))}},[r,t,i,d]);let m=(0,u.useCallback)(e=>{let t=o.current;if(t&&t.readyState===WebSocket.OPEN)try{t.send(JSON.stringify({type:`input`,event:e}))}catch{}},[]),_=(0,u.useCallback)(async(e,t)=>{let n=s.current;if(n)try{let r=await y(n.projectId,n.id,e,t);if(s.current?.id!==n.id||s.current.projectId!==n.projectId)return;p(e=>({...e,url:r.url,title:r.title}))}catch{}},[]),x=(0,u.useCallback)(async(e,t,n)=>{let r=s.current;if(!r)throw Error(`No active browser session`);c.current+=1;try{return await b(r.projectId,r.id,e,t,n)}finally{c.current=Math.max(0,c.current-1),d()}},[d]),C=(0,u.useCallback)(async(e,t,n,r)=>{let i=s.current;if(!i)throw Error(`No active browser session`);c.current+=1;try{return await S(i.projectId,i.id,e,t,n,r)}finally{c.current=Math.max(0,c.current-1),d()}},[d]),D=(0,u.useCallback)(async(e,t)=>{let n=s.current;return n?w(n.projectId,n.id,e,t):{text:``}},[]),k=(0,u.useCallback)((e,t)=>{let n=Math.max(1,Math.round(e)),r=Math.max(1,Math.round(t));p(e=>({...e,viewport:{width:n,height:r}})),m({type:`resize`,width:n,height:r})},[m]),j=(0,u.useCallback)(e=>{let t=o.current;if(t&&t.readyState===WebSocket.OPEN)try{t.send(JSON.stringify({type:`probe`,x:e.x,y:e.y}))}catch{}},[]),M=(0,u.useCallback)(()=>{p(e=>e.hoverRect||e.hoverPath?{...e,hoverRect:null,hoverSelector:null,hoverPath:null}:e)},[]),N=(0,u.useCallback)(async(e,t)=>{let n=s.current;return n?T(n.projectId,n.id,e,t):null},[]),P=(0,u.useCallback)(e=>{let t=s.current;t&&(p(t=>t.popup?{...t,popup:{...t.popup,active:e===`popup`}}:t),E(t.projectId,t.id,e))},[]);return{...f,canvasRef:a,forwardInput:m,navigate:_,capture:x,captureBreakpoints:C,clipboard:D,navigateElement:N,setViewport:k,probe:j,clearHover:M,setPopupView:P}}export{L as a,M as c,P as d,C as f,s as g,c as h,j as i,N as l,l as m,m as n,p as o,f as p,I as r,F as s,U as t,D as u};
+import{a as e}from"./rolldown-runtime-CNC7AqOf.js";import{n as t}from"./jsx-runtime-zu2_FqZY.js";import{o as n}from"./i18n-cK5pPbj8.js";import{t as r}from"./createLucideIcon-Bjbbp_KS.js";import{a as i,n as a}from"./auth-D_5bQv5W.js";import{t as o}from"./api-B2M7CtDw.js";var s=r(`arrow-right`,[[`path`,{d:`M5 12h14`,key:`1ays0h`}],[`path`,{d:`m12 5 7 7-7 7`,key:`xquz4c`}]]),c=r(`globe`,[[`circle`,{cx:`12`,cy:`12`,r:`10`,key:`1mglay`}],[`path`,{d:`M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20`,key:`13o1zl`}],[`path`,{d:`M2 12h20`,key:`9i4pu4`}]]),l=r(`rotate-cw`,[[`path`,{d:`M21 12a9 9 0 1 1-9-9c2.52 0 4.93 1 6.74 2.74L21 8`,key:`1p45f6`}],[`path`,{d:`M21 3v5h-5`,key:`1q7to0`}]]),u=e(t(),1);function d(){return typeof window<`u`&&`__TAURI_INTERNALS__`in window||typeof window<`u`&&window.location.protocol!==`http:`&&window.location.protocol!==`https:`?`ws://localhost:4200`:`${window.location.protocol===`https:`?`wss:`:`ws:`}//${window.location.host}`}var f=d();function p(){let e={BASE_URL:`/`,DEV:!1,MODE:`production`,PROD:!0,SSR:!1}.VITE_FEATURE_BROWSER_CAPTURE;return typeof e!=`string`||e!==`false`}var m={desktop:{width:1280,height:800},tablet:{width:768,height:1024},mobile:{width:375,height:667}},h=class extends Error{},g=class extends Error{};function _(e){if(!e)throw Error(`A project owner is required for browser sessions`);return`${i}/api/projects/${encodeURIComponent(e)}`}async function v(e,t){let n=await fetch(`${_(e)}/browser/sessions`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({initialUrl:t})});if(n.status===409)throw new h(`Too many open browser sessions`);if(n.status===502)throw new g(`The browser failed to launch`);if(!n.ok)throw Error(`Failed to open browser (${n.status})`);return(await n.json()).session}async function y(e,t,n,r){let i=await fetch(`${_(e)}/browser/sessions/${t}/navigate`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:n,url:r})});if(!i.ok)throw Error(`Navigation failed (${i.status})`);return await i.json()}async function b(e,t,n,r,i){let a=await fetch(`${_(e)}/browser/sessions/${t}/capture`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({rect:n,pendingSpecId:r,captureNetwork:i?.captureNetwork??!0})});if(!a.ok)throw Error(await x(a));return await a.json()}async function x(e){let t=await e.json().then(e=>e.error).catch(()=>void 0);return t?`Capture failed (${e.status}): ${t}`:`Capture failed (${e.status})`}async function S(e,t,n,r,i,a=m){let o=await fetch(`${_(e)}/browser/sessions/${t}/capture-breakpoints`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({rect:n,anchorPoint:r,pendingSpecId:i,breakpoints:a})});if(!o.ok)throw Error(await x(o));return await o.json()}async function C(e,t,n){let r=new FormData;r.append(`file`,t,n);let i=await fetch(`${o()}/tickets/${e}/attachments`,{method:`POST`,body:r});if(!i.ok)throw Error(`Upload failed (${i.status})`);return(await i.json()).attachment}async function w(e,t,n,r){let i=await fetch(`${_(e)}/browser/sessions/${t}/clipboard`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:n,text:r})});if(!i.ok)throw Error(`Clipboard failed (${i.status})`);return await i.json()}async function T(e,t,n,r){let i=await fetch(`${_(e)}/browser/sessions/${t}/element`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({selector:n,direction:r})});if(!i.ok)throw Error(`Element navigate failed (${i.status})`);return(await i.json()).probe}async function E(e,t,n){try{await fetch(`${_(e)}/browser/sessions/${t}/popup-view`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({target:n})})}catch{}}function D(e){if(!e||e===`about:blank`)return`…`;try{return new URL(e).hostname||`…`}catch{return`…`}}async function O(e,t){try{await fetch(`${_(e)}/browser/sessions/${t}`,{method:`DELETE`})}catch{}}function k(e,t){return`${f||(typeof window<`u`?`${window.location.protocol===`https:`?`wss:`:`ws:`}//${window.location.host}`:`ws://localhost:4200`)}/ws/browser/${e}?projectId=${encodeURIComponent(t)}`}function A(e,t){let n=k(e,t),r=a(),i=r?new WebSocket(n,[`specrails-desktop`,r]):new WebSocket(n);return i.binaryType=`arraybuffer`,i}function j(e,t=e=>requestAnimationFrame(e),n=e=>cancelAnimationFrame(e)){let r=null,i=null,a=null,o=!1,s=()=>{a!=null&&(n(a),a=null);let t=r,o=i;r=null,i=null,t&&(!o||t.x!==o.x||t.y!==o.y)&&e({type:`mouse`,action:`move`,x:t.x,y:t.y}),o&&e({type:`wheel`,x:o.x,y:o.y,deltaX:o.deltaX,deltaY:o.deltaY})},c=()=>{a==null&&!o&&(a=t(()=>{a=null,s()}))};return{move(e,t){o||(r={x:e,y:t},c())},wheel(e,t,n,r){o||(i?(i.x=e,i.y=t,i.deltaX+=n,i.deltaY+=r):i={x:e,y:t,deltaX:n,deltaY:r},c())},flush(){o||s()},dispose(){o||(o=!0,a!=null&&(n(a),a=null),r=null,i=null)}}}function M(e,t,n){let r=t.width>0?(e.x-t.left)/t.width:0,i=t.height>0?(e.y-t.top)/t.height:0,a=Math.min(Math.max(r,0),1)*n.width,o=Math.min(Math.max(i,0),1)*n.height;return{x:Math.round(a),y:Math.round(o)}}function N(e,t,n){let r=n.width>0?t.width/n.width:0,i=n.height>0?t.height/n.height:0;return{left:t.left+e.x*r,top:t.top+e.y*i,width:e.width*r,height:e.height*i}}function P(e,t){return{x:Math.min(e.x,t.x),y:Math.min(e.y,t.y),width:Math.abs(e.x-t.x),height:Math.abs(e.y-t.y)}}function F(e,t=8){return e.width>=t&&e.height>=t}function I(e,t){let n=Math.max(1,t.width),r=Math.max(1,t.height),i=Math.max(0,Math.min(e.x,n-1)),a=Math.max(0,Math.min(e.y,r-1)),o=Math.min(n,Math.max(i+1,e.x+e.width)),s=Math.min(r,Math.max(a+1,e.y+e.height));return{x:Math.round(i),y:Math.round(a),width:Math.round(o-i),height:Math.round(s-a)}}function L(e){return{nodeCount:e.nodes.length,htmlBytes:e.html.length,truncated:e.htmlTruncated,networkCount:e.networkRequests?.length??0}}function R(e){let t=e.schedule??(e=>requestAnimationFrame(e)),n=e.cancel??(e=>cancelAnimationFrame(e)),r=e.now??(()=>typeof performance<`u`?performance.now():Date.now()),i=e.release??(()=>{}),a={received:0,decoded:0,drawn:0,droppedStale:0,droppedUndrawn:0,decodeMsTotal:0,drawMsTotal:0},o=!1,s=!1,c=null,l=null,u=null,d=()=>{u=null;let t=l;if(l=null,t==null||o){t!=null&&f(t);return}let n=r();try{e.draw(t),a.drawn++,a.drawMsTotal+=r()-n}catch{}finally{f(t)}},f=e=>{try{i(e)}catch{}},p=()=>{u==null&&!o&&(u=t(d))},m=t=>{s=!0;let n=r();e.decode(t).then(e=>{if(o){f(e);return}a.decoded++,a.decodeMsTotal+=r()-n,l!=null&&(a.droppedUndrawn++,f(l)),l=e,p(),h()},()=>{h()})},h=()=>{if(o){s=!1;return}let e=c;c=null,e==null?s=!1:m(e)};return{push(e){if(!o){if(a.received++,s){c!=null&&a.droppedStale++,c=e;return}m(e)}},stats(){return{...a}},dispose(){if(!o){if(o=!0,c=null,u!=null){try{n(u)}catch{}u=null}l!=null&&(f(l),l=null)}}}}var z=`specrails-desktop:browser-capture-debug`;function B(){try{return typeof localStorage<`u`&&localStorage.getItem(z)===`1`}catch{return!1}}function V(e,t,n){let r=Math.max(1,n),i=t.decoded-e.decoded,a=t.drawn-e.drawn,o=e=>Math.round(e*10)/10;return{fpsReceived:o((t.received-e.received)*1e3/r),fpsDrawn:o(a*1e3/r),droppedStale:t.droppedStale-e.droppedStale,droppedUndrawn:t.droppedUndrawn-e.droppedUndrawn,avgDecodeMs:i>0?o((t.decodeMsTotal-e.decodeMsTotal)/i):0,avgDrawMs:a>0?o((t.drawMsTotal-e.drawMsTotal)/a):0}}function H(e,t=e=>console.table([e]),n=2e3,r=()=>Date.now()){let i=e(),a=r(),o=setInterval(()=>{let n=e(),o=r();t(V(i,n,o-a)),i=n,a=o},n);return()=>clearInterval(o)}function U(e){let{projectId:t,open:r,initialUrl:i}=e,a=(0,u.useRef)(null),o=(0,u.useRef)(null),s=(0,u.useRef)(null),c=(0,u.useRef)(0),l=(0,u.useRef)(new Map),d=(0,u.useCallback)(()=>{if(c.current!==0||l.current.size===0)return;let e=[...l.current.values()];l.current.clear();for(let t of e)O(t.projectId,t.sessionId)},[]),[f,p]=(0,u.useState)({status:`connecting`,errorMsg:null,url:null,title:null,viewport:{width:1280,height:800},hoverRect:null,hoverSelector:null,hoverPath:null,popup:null});(0,u.useEffect)(()=>{if(!r||!t)return;let e=!1,u=null;p(e=>({...e,status:`connecting`,errorMsg:null,popup:null}));let d=R({decode:e=>createImageBitmap(new Blob([e],{type:`image/jpeg`})),draw:e=>{let t=a.current;t&&(t.width!==e.width&&(t.width=e.width),t.height!==e.height&&(t.height=e.height),t.getContext(`2d`)?.drawImage(e,0,0))},release:e=>e.close()}),f=B()?H(()=>d.stats()):null;return(async()=>{try{let r=await v(t,i);if(e){O(t,r.id);return}u=r.id,s.current={id:r.id,projectId:t},p(e=>({...e,url:r.url,title:r.title,viewport:{width:r.viewportWidth,height:r.viewportHeight}}));let a=A(r.id,t);o.current=a,a.onmessage=e=>{if(typeof e.data==`string`){try{let t=JSON.parse(e.data);if(t.type===`ready`)p(e=>({...e,status:`ready`,url:t.url??e.url,title:t.title??e.title,viewport:t.viewport??e.viewport}));else if(t.type===`nav`)p(e=>({...e,url:t.url??e.url,title:t.title??e.title}));else if(t.type===`hover`)p(e=>({...e,hoverRect:t.rect??null,hoverSelector:t.selector??null,hoverPath:t.path??null}));else if(t.type===`popup`){let e=typeof t.count==`number`?t.count:0;p(n=>({...n,popup:e>0?{count:e,active:t.active===!0,url:t.url??null}:null}))}}catch{}return}d.push(e.data)},a.onopen=()=>{e||p(e=>({...e,status:`ready`}))},a.onerror=()=>{e||p(e=>({...e,status:`error`,errorMsg:n.t(`browser:session.connectionError`)}))},a.onclose=()=>{e||p(e=>e.status===`ready`?{...e,status:`error`,errorMsg:n.t(`browser:session.lostConnection`)}:e)}}catch(t){if(e)return;let r=t instanceof h?n.t(`browser:session.tooManySessions`):t instanceof g?n.t(`browser:session.launchFailed`):n.t(`browser:session.openFailed`);p(e=>({...e,status:`error`,errorMsg:r}))}})(),()=>{e=!0,f?.(),d.dispose();let n=o.current;if(n){n.onmessage=null,n.onopen=null,n.onerror=null,n.onclose=null;try{n.close()}catch{}}o.current=null;let r=u;r&&s.current?.id===r&&s.current.projectId===t&&(s.current=null),r&&(c.current>0?l.current.set(`${t}\0${r}`,{sessionId:r,projectId:t}):O(t,r))}},[r,t,i,d]);let m=(0,u.useCallback)(e=>{let t=o.current;if(t&&t.readyState===WebSocket.OPEN)try{t.send(JSON.stringify({type:`input`,event:e}))}catch{}},[]),_=(0,u.useCallback)(async(e,t)=>{let n=s.current;if(n)try{let r=await y(n.projectId,n.id,e,t);if(s.current?.id!==n.id||s.current.projectId!==n.projectId)return;p(e=>({...e,url:r.url,title:r.title}))}catch{}},[]),x=(0,u.useCallback)(async(e,t,n)=>{let r=s.current;if(!r)throw Error(`No active browser session`);c.current+=1;try{return await b(r.projectId,r.id,e,t,n)}finally{c.current=Math.max(0,c.current-1),d()}},[d]),C=(0,u.useCallback)(async(e,t,n,r)=>{let i=s.current;if(!i)throw Error(`No active browser session`);c.current+=1;try{return await S(i.projectId,i.id,e,t,n,r)}finally{c.current=Math.max(0,c.current-1),d()}},[d]),D=(0,u.useCallback)(async(e,t)=>{let n=s.current;return n?w(n.projectId,n.id,e,t):{text:``}},[]),k=(0,u.useCallback)((e,t)=>{let n=Math.max(1,Math.round(e)),r=Math.max(1,Math.round(t));p(e=>({...e,viewport:{width:n,height:r}})),m({type:`resize`,width:n,height:r})},[m]),j=(0,u.useCallback)(e=>{let t=o.current;if(t&&t.readyState===WebSocket.OPEN)try{t.send(JSON.stringify({type:`probe`,x:e.x,y:e.y}))}catch{}},[]),M=(0,u.useCallback)(()=>{p(e=>e.hoverRect||e.hoverPath?{...e,hoverRect:null,hoverSelector:null,hoverPath:null}:e)},[]),N=(0,u.useCallback)(async(e,t)=>{let n=s.current;return n?T(n.projectId,n.id,e,t):null},[]),P=(0,u.useCallback)(e=>{let t=s.current;t&&(p(t=>t.popup?{...t,popup:{...t.popup,active:e===`popup`}}:t),E(t.projectId,t.id,e))},[]);return{...f,canvasRef:a,forwardInput:m,navigate:_,capture:x,captureBreakpoints:C,clipboard:D,navigateElement:N,setViewport:k,probe:j,clearHover:M,setPopupView:P}}export{L as a,M as c,P as d,C as f,s as g,c as h,j as i,N as l,l as m,m as n,p as o,f as p,I as r,F as s,U as t,D as u};

package/client/dist/assets/{useDesktop-X8YB9xzv.js → useDesktop-D4DxBGPU.js}

@@ -1 +1 @@
-import{a as e}from"./rolldown-runtime-CNC7AqOf.js";import{n as t,t as n}from"./jsx-runtime-zu2_FqZY.js";import{o as r}from"./i18n-CgaRxpII.js";import{n as i}from"./dist-bVqfYmby.js";import{a}from"./auth-D_5bQv5W.js";import{n as o}from"./useSharedWebSocket-DaPh7QBL.js";import{n as s}from"./api-B2M7CtDw.js";var c=e(t(),1),l=new Map;function u(e,t){return`${e}:${t}`}function d(e){return(e instanceof Error?e.message:e==null?``:String(e)).trim()||`Request failed`}function f(e){if(!e)return;let t=`${e}:`;for(let e of l.keys())e.startsWith(t)&&l.delete(e)}function p({namespace:e,projectId:t,initialValue:n,fetcher:r,pollInterval:i=0}){let a=t?u(t,e):null,[o,s]=(0,c.useState)(()=>a&&l.has(a)?l.get(a):n),[f,p]=(0,c.useState)(()=>!a||!l.has(a)),[m,h]=(0,c.useState)(f),[g,_]=(0,c.useState)(null),v=(0,c.useRef)(r);v.current=r;let y=(0,c.useRef)(n);y.current=n;let b=(0,c.useRef)(a);b.current=a;let x=(0,c.useRef)(0),S=(0,c.useRef)(null),C=(0,c.useCallback)(async(e,t,n)=>{let r=++x.current;S.current?.abort();let i=new AbortController;S.current=i,n&&b.current===e&&(h(!0),_(null));try{let n=await v.current({projectId:t,signal:i.signal});if(i.signal.aborted||r!==x.current)return;l.set(e,n),b.current===e&&(s(n),_(null))}catch(t){if(i.signal.aborted||r!==x.current)return;b.current===e&&_(d(t))}finally{r===x.current&&(S.current===i&&(S.current=null),b.current===e&&(h(!1),p(!1)))}},[]);return(0,c.useEffect)(()=>{if(x.current+=1,S.current?.abort(),S.current=null,_(null),!a||!t){s(y.current),p(!0),h(!1);return}let e=l.has(a);e?(s(l.get(a)),p(!1),h(!1)):(s(y.current),p(!0),h(!0)),C(a,t,!e);let n;return i>0&&(n=setInterval(()=>{C(a,t,!1)},i)),()=>{x.current+=1,S.current?.abort(),S.current=null,n&&clearInterval(n)}},[a,t,i,C]),{data:o,isLoading:m,isFirstLoad:f,error:g,refresh:(0,c.useCallback)(async()=>{!a||!t||await C(a,t,!0)},[a,t,C])}}var m=n();function h(e){return e.providers&&e.providers.length>0?e.providers:[e.provider]}var g=(0,c.createContext)(null),_=`specrails-desktop:activeProjectId`;function v(e){try{e?localStorage.setItem(_,e):localStorage.removeItem(_)}catch{}}function y(){try{return localStorage.getItem(_)}catch{return null}}function b({children:e}){let[t,n]=(0,c.useState)([]),[l,u]=(0,c.useState)(null),[d,p]=(0,c.useState)(!0),[h,_]=(0,c.useState)(!1),[b,x]=(0,c.useState)(new Set),S=(0,c.useRef)(null),C=(0,c.useRef)(new Set),w=(0,c.useCallback)(e=>{v(e),s(e),u(t=>(t!==null&&t!==e&&(S.current&&clearTimeout(S.current),_(!0),S.current=setTimeout(()=>_(!1),400)),e))},[]),{registerHandler:T,unregisterHandler:E}=o();(0,c.useEffect)(()=>{async function e(){try{let e=await fetch(`${a}/api/projects`);if(!e.ok)return;let t=await e.json();n(t.projects),t.setupProjectIds&&t.setupProjectIds.length>0&&x(new Set(t.setupProjectIds))}catch{}finally{p(!1)}}e()},[]);let D=(0,c.useCallback)(e=>{let t=e;if(typeof t.type==`string`){if(t.type===`desktop.projects`){if(!Array.isArray(t.projects))return;let e=t.projects;n(e),u(t=>{let n;if(t&&e.find(e=>e.id===t))n=t;else{let t=y();n=t&&e.find(e=>e.id===t)?t:e.length>0?e[0].id:null}return v(n),s(n),n}),p(!1)}else if(t.type===`desktop.project_added`){let e=t.project;n(t=>t.find(t=>t.id===e.id)?t:[...t,e]),C.current.has(e.id)?C.current.delete(e.id):(i.success(r.t(`nav:projects.added`,{name:e.name})),w(e.id))}else if(t.type===`desktop.project_removed`){let e=t.projectId;i.success(r.t(`nav:projects.removed`)),f(e),n(t=>t.filter(t=>t.id!==e)),u(t=>t===e?(v(null),s(null),null):t)}}},[]);(0,c.useLayoutEffect)(()=>(T(`desktop`,D),()=>E(`desktop`)),[D,T,E]);let O=(0,c.useCallback)(async(e,t,r=[`claude`])=>{try{let i={path:e,providers:r.length>0?r:[`claude`]};t&&(i.name=t);let a=await fetch(`/api/projects`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify(i)});if(!a.ok){let e=await a.json();throw Error(e.error??`HTTP ${a.status}`)}let o=await a.json();return C.current.add(o.project.id),n(e=>e.find(e=>e.id===o.project.id)?e:[...e,o.project]),w(o.project.id),o}catch(e){throw console.error(`[useDesktop] addProject error:`,e),e}},[w]),k=(0,c.useCallback)(async e=>{try{let t=await fetch(`${a}/api/projects/${e}`,{method:`DELETE`});if(!t.ok){let e=await t.json();throw Error(e.error??`HTTP ${t.status}`)}f(e),n(t=>t.filter(t=>t.id!==e)),x(t=>{if(!t.has(e))return t;let n=new Set(t);return n.delete(e),n}),u(t=>t===e?(v(null),s(null),null):t)}catch(e){throw console.error(`[useDesktop] removeProject error:`,e),e}},[]),A=(0,c.useCallback)(e=>{x(t=>new Set([...t,e]))},[]),j=(0,c.useCallback)(e=>{x(t=>{let n=new Set(t);return n.delete(e),n})},[]),M=(0,c.useMemo)(()=>({projects:t,activeProjectId:l,setActiveProjectId:w,addProject:O,removeProject:k,isLoading:d,isSwitchingProject:h,setupProjectIds:b,startSetupWizard:A,completeSetupWizard:j}),[t,l,w,O,k,d,h,b,A,j]);return(0,m.jsx)(g.Provider,{value:M,children:e})}var x={projects:[],activeProjectId:null,setActiveProjectId:()=>{},addProject:async()=>null,removeProject:async()=>{},isLoading:!1,isSwitchingProject:!1,setupProjectIds:new Set,startSetupWizard:()=>{},completeSetupWizard:()=>{}};function S(){return(0,c.useContext)(g)??x}export{p as i,h as n,S as r,b as t};
+import{a as e}from"./rolldown-runtime-CNC7AqOf.js";import{n as t,t as n}from"./jsx-runtime-zu2_FqZY.js";import{o as r}from"./i18n-cK5pPbj8.js";import{n as i}from"./dist-bVqfYmby.js";import{a}from"./auth-D_5bQv5W.js";import{n as o}from"./useSharedWebSocket-DaPh7QBL.js";import{n as s}from"./api-B2M7CtDw.js";var c=e(t(),1),l=new Map;function u(e,t){return`${e}:${t}`}function d(e){return(e instanceof Error?e.message:e==null?``:String(e)).trim()||`Request failed`}function f(e){if(!e)return;let t=`${e}:`;for(let e of l.keys())e.startsWith(t)&&l.delete(e)}function p({namespace:e,projectId:t,initialValue:n,fetcher:r,pollInterval:i=0}){let a=t?u(t,e):null,[o,s]=(0,c.useState)(()=>a&&l.has(a)?l.get(a):n),[f,p]=(0,c.useState)(()=>!a||!l.has(a)),[m,h]=(0,c.useState)(f),[g,_]=(0,c.useState)(null),v=(0,c.useRef)(r);v.current=r;let y=(0,c.useRef)(n);y.current=n;let b=(0,c.useRef)(a);b.current=a;let x=(0,c.useRef)(0),S=(0,c.useRef)(null),C=(0,c.useCallback)(async(e,t,n)=>{let r=++x.current;S.current?.abort();let i=new AbortController;S.current=i,n&&b.current===e&&(h(!0),_(null));try{let n=await v.current({projectId:t,signal:i.signal});if(i.signal.aborted||r!==x.current)return;l.set(e,n),b.current===e&&(s(n),_(null))}catch(t){if(i.signal.aborted||r!==x.current)return;b.current===e&&_(d(t))}finally{r===x.current&&(S.current===i&&(S.current=null),b.current===e&&(h(!1),p(!1)))}},[]);return(0,c.useEffect)(()=>{if(x.current+=1,S.current?.abort(),S.current=null,_(null),!a||!t){s(y.current),p(!0),h(!1);return}let e=l.has(a);e?(s(l.get(a)),p(!1),h(!1)):(s(y.current),p(!0),h(!0)),C(a,t,!e);let n;return i>0&&(n=setInterval(()=>{C(a,t,!1)},i)),()=>{x.current+=1,S.current?.abort(),S.current=null,n&&clearInterval(n)}},[a,t,i,C]),{data:o,isLoading:m,isFirstLoad:f,error:g,refresh:(0,c.useCallback)(async()=>{!a||!t||await C(a,t,!0)},[a,t,C])}}var m=n();function h(e){return e.providers&&e.providers.length>0?e.providers:[e.provider]}var g=(0,c.createContext)(null),_=`specrails-desktop:activeProjectId`;function v(e){try{e?localStorage.setItem(_,e):localStorage.removeItem(_)}catch{}}function y(){try{return localStorage.getItem(_)}catch{return null}}function b({children:e}){let[t,n]=(0,c.useState)([]),[l,u]=(0,c.useState)(null),[d,p]=(0,c.useState)(!0),[h,_]=(0,c.useState)(!1),[b,x]=(0,c.useState)(new Set),S=(0,c.useRef)(null),C=(0,c.useRef)(new Set),w=(0,c.useCallback)(e=>{v(e),s(e),u(t=>(t!==null&&t!==e&&(S.current&&clearTimeout(S.current),_(!0),S.current=setTimeout(()=>_(!1),400)),e))},[]),{registerHandler:T,unregisterHandler:E}=o();(0,c.useEffect)(()=>{async function e(){try{let e=await fetch(`${a}/api/projects`);if(!e.ok)return;let t=await e.json();n(t.projects),t.setupProjectIds&&t.setupProjectIds.length>0&&x(new Set(t.setupProjectIds))}catch{}finally{p(!1)}}e()},[]);let D=(0,c.useCallback)(e=>{let t=e;if(typeof t.type==`string`){if(t.type===`desktop.projects`){if(!Array.isArray(t.projects))return;let e=t.projects;n(e),u(t=>{let n;if(t&&e.find(e=>e.id===t))n=t;else{let t=y();n=t&&e.find(e=>e.id===t)?t:e.length>0?e[0].id:null}return v(n),s(n),n}),p(!1)}else if(t.type===`desktop.project_added`){let e=t.project;n(t=>t.find(t=>t.id===e.id)?t:[...t,e]),C.current.has(e.id)?C.current.delete(e.id):(i.success(r.t(`nav:projects.added`,{name:e.name})),w(e.id))}else if(t.type===`desktop.project_removed`){let e=t.projectId;i.success(r.t(`nav:projects.removed`)),f(e),n(t=>t.filter(t=>t.id!==e)),u(t=>t===e?(v(null),s(null),null):t)}}},[]);(0,c.useLayoutEffect)(()=>(T(`desktop`,D),()=>E(`desktop`)),[D,T,E]);let O=(0,c.useCallback)(async(e,t,r=[`claude`])=>{try{let i={path:e,providers:r.length>0?r:[`claude`]};t&&(i.name=t);let a=await fetch(`/api/projects`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify(i)});if(!a.ok){let e=await a.json();throw Error(e.error??`HTTP ${a.status}`)}let o=await a.json();return C.current.add(o.project.id),n(e=>e.find(e=>e.id===o.project.id)?e:[...e,o.project]),w(o.project.id),o}catch(e){throw console.error(`[useDesktop] addProject error:`,e),e}},[w]),k=(0,c.useCallback)(async e=>{try{let t=await fetch(`${a}/api/projects/${e}`,{method:`DELETE`});if(!t.ok){let e=await t.json();throw Error(e.error??`HTTP ${t.status}`)}f(e),n(t=>t.filter(t=>t.id!==e)),x(t=>{if(!t.has(e))return t;let n=new Set(t);return n.delete(e),n}),u(t=>t===e?(v(null),s(null),null):t)}catch(e){throw console.error(`[useDesktop] removeProject error:`,e),e}},[]),A=(0,c.useCallback)(e=>{x(t=>new Set([...t,e]))},[]),j=(0,c.useCallback)(e=>{x(t=>{let n=new Set(t);return n.delete(e),n})},[]),M=(0,c.useMemo)(()=>({projects:t,activeProjectId:l,setActiveProjectId:w,addProject:O,removeProject:k,isLoading:d,isSwitchingProject:h,setupProjectIds:b,startSetupWizard:A,completeSetupWizard:j}),[t,l,w,O,k,d,h,b,A,j]);return(0,m.jsx)(g.Provider,{value:M,children:e})}var x={projects:[],activeProjectId:null,setActiveProjectId:()=>{},addProject:async()=>null,removeProject:async()=>{},isLoading:!1,isSwitchingProject:!1,setupProjectIds:new Set,startSetupWizard:()=>{},completeSetupWizard:()=>{}};function S(){return(0,c.useContext)(g)??x}export{p as i,h as n,S as r,b as t};

package/client/dist/index.html

@@ -204,7 +204,7 @@
         .specrails-splash__mark .pill { opacity: 1; }
       }
     </style>
-    <script type="module" crossorigin src="/assets/index-C1_-BTXy.js"></script>
+    <script type="module" crossorigin src="/assets/index-CCq_kIrF.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-CNC7AqOf.js">
     <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-zu2_FqZY.js">
     <link rel="modulepreload" crossorigin href="/assets/react-dom-DiWzBDP9.js">
@@ -213,7 +213,7 @@
     <link rel="modulepreload" crossorigin href="/assets/createLucideIcon-Bjbbp_KS.js">
     <link rel="modulepreload" crossorigin href="/assets/activity-DiyjsgQV.js">
     <link rel="modulepreload" crossorigin href="/assets/addspec-Rw8uVBC1.js">
-    <link rel="modulepreload" crossorigin href="/assets/agent-4rmXoo_p.js">
+    <link rel="modulepreload" crossorigin href="/assets/agent-BqEfA5u5.js">
     <link rel="modulepreload" crossorigin href="/assets/agents-DhG7mg6-.js">
     <link rel="modulepreload" crossorigin href="/assets/agentstudio-BIUe1Im2.js">
     <link rel="modulepreload" crossorigin href="/assets/aiedit-iIjz2_Qk.js">
@@ -223,8 +223,8 @@
     <link rel="modulepreload" crossorigin href="/assets/chat-BGD7MXAy.js">
     <link rel="modulepreload" crossorigin href="/assets/code-BDXEM4ml.js">
     <link rel="modulepreload" crossorigin href="/assets/commands-DyUZQ1FI.js">
-    <link rel="modulepreload" crossorigin href="/assets/common-DVQuhs-m.js">
-    <link rel="modulepreload" crossorigin href="/assets/dashboard-CpCmJvMB.js">
+    <link rel="modulepreload" crossorigin href="/assets/common-DHsv9N5d.js">
+    <link rel="modulepreload" crossorigin href="/assets/dashboard-Cslu_GCH.js">
     <link rel="modulepreload" crossorigin href="/assets/explore-DgBACn39.js">
     <link rel="modulepreload" crossorigin href="/assets/integrations-mB-7zoyT.js">
     <link rel="modulepreload" crossorigin href="/assets/jira-CmKWERE0.js">
@@ -237,19 +237,19 @@
     <link rel="modulepreload" crossorigin href="/assets/specs-DII0C8gw.js">
     <link rel="modulepreload" crossorigin href="/assets/terminal-BFRZnMPP.js">
     <link rel="modulepreload" crossorigin href="/assets/tickets-D_yDquEw.js">
-    <link rel="modulepreload" crossorigin href="/assets/i18n-CgaRxpII.js">
-    <link rel="modulepreload" crossorigin href="/assets/Trans-B_vKZ-Hb.js">
+    <link rel="modulepreload" crossorigin href="/assets/i18n-cK5pPbj8.js">
+    <link rel="modulepreload" crossorigin href="/assets/Trans-Cm9rhdnG.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-bVqfYmby.js">
     <link rel="modulepreload" crossorigin href="/assets/arrow-left-CpIR4j7G.js">
     <link rel="modulepreload" crossorigin href="/assets/auth-D_5bQv5W.js">
     <link rel="modulepreload" crossorigin href="/assets/api-B2M7CtDw.js">
-    <link rel="modulepreload" crossorigin href="/assets/useBrowserCaptureSession-2OqX0vap.js">
+    <link rel="modulepreload" crossorigin href="/assets/useBrowserCaptureSession-DR1_jL56.js">
     <link rel="modulepreload" crossorigin href="/assets/arrow-up-right-9DoMn7fD.js">
     <link rel="modulepreload" crossorigin href="/assets/sparkles-DrY8hb0X.js">
     <link rel="modulepreload" crossorigin href="/assets/x-CBMI9ejn.js">
     <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-DaPh7QBL.js">
-    <link rel="modulepreload" crossorigin href="/assets/useDesktop-X8YB9xzv.js">
-    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-DiFvZDPW.js">
+    <link rel="modulepreload" crossorigin href="/assets/useDesktop-D4DxBGPU.js">
+    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-DJAkRYps.js">
     <link rel="modulepreload" crossorigin href="/assets/external-link-BcU5EWZp.js">
     <link rel="modulepreload" crossorigin href="/assets/chevron-right-CViMxucY.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-x-CMYsN4ZH.js">
@@ -272,11 +272,11 @@
     <link rel="modulepreload" crossorigin href="/assets/dialog-CzIekCw0.js">
     <link rel="modulepreload" crossorigin href="/assets/jira-api-BgFIr8eD.js">
     <link rel="modulepreload" crossorigin href="/assets/lib-CGdyxIWg.js">
-    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-BxHAksaU.js">
-    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-ByHIauTQ.js">
-    <link rel="modulepreload" crossorigin href="/assets/spending-C4p06nen.js">
-    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModal-9UEyK974.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-BflYQpWm.css">
+    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-DwzZXHtg.js">
+    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-BAXZRbEO.js">
+    <link rel="modulepreload" crossorigin href="/assets/spending-BLb5pj6G.js">
+    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModal-CFh7GOv5.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-BT6xDQjB.css">
   </head>
   <body>
     <div id="specrails-splash" aria-hidden="false" role="status" aria-label="Loading Specrails">

package/docs/internals/safe-pr-review-flow.md

@@ -9,13 +9,24 @@
 
 ## The single source of truth
 
-`rail_pr_deliveries` (per-project `jobs.sqlite`, migrations 36/38/48–50; CRUD in
+`rail_pr_deliveries` (per-project `jobs.sqlite`, migrations 36/38/48–54; CRUD in
 `server/rail-pr-store.ts`) stores one durable **generation** per implementation launch. A partial
 unique index enforces one non-terminal generation per rail. Reimplementing an attached PR creates
-generation B and atomically moves generation A to terminal `superseded`; A can never reappear after
-B closes. `supersedes_delivery_id` preserves that lineage and `is_continuation` records that the
+generation B and atomically moves generation A to terminal `superseded`; A cannot reappear through
+ordinary replay after B closes. The sole exception is an allocation rollback committed in the same
+transaction: B becomes terminal and restored A carries `restored_from_delivery_id=B` as exact causal
+proof. `supersedes_delivery_id` preserves forward lineage and `is_continuation` records that the
 PR/head branch is borrowed review state rather than a resource this generation owns.
 
+Every projected snapshot also carries `createdAt`/`updatedAt`; claim, transition, release, recovery,
+and supersession writes advance the latter with a strictly monotonic millisecond UTC logical clock.
+Consumers replace a different generation only through an explicit supersedes link or a strictly
+later valid `createdAt`, and advance the same id only with newer update evidence under a deterministic fail-closed tie policy.
+Delivery ids already observed terminal or superseded are tombstoned against non-terminal replay.
+Only the exact paired rollback above may consume such a tombstone; a delayed predecessor without
+that durable proof remains rejected. Missing or ambiguous ordering evidence fails closed instead of
+letting arrival order resurrect an old card.
+
 The important rule is that no single enum carries all truth. The row has orthogonal axes:
 
 - `implementation_outcome`: `running | succeeded | partially_succeeded | failed | unknown` —
@@ -27,6 +38,10 @@ The important rule is that no single enum carries all truth. The row has orthogo
   `merged`, `discarded`, `superseded`).
 - `status_code` + bounded `status_detail`: localized stage/reason and secondary diagnostics.
 - `delivery_sha`: the exact verified object used by an existing-PR push or retry.
+- `supersedes_delivery_id` / `restored_from_delivery_id`: forward replacement and exact failed-
+  replacement rollback lineage.
+- `safety_archives`: deduplicated roots for persistent overlay quarantine batches; shown as neutral recovery
+  evidence rather than cleanup failures.
 - `pr_state`: `none | local-only | pushed | pr-created`, independent of all three axes.
 
 `branches` is the durable per-unit record: ticket/run, branch, actual implementation result,
@@ -44,7 +59,10 @@ engine succeeded + no branch delta    → no_changes
 mixed clean units                     → on_review / partial (explicit subset)
 engine succeeded + commit/ref unsafe  → pr_failed / blocked (worktree preserved)
 verified existing-PR push failed      → pr_failed / retryable_failure (exact SHA retained)
-GitHub reports CLOSED, not merged      → pr_closed
+exact OPEN head/base contains SHA      → attached delivery verified
+exact CLOSED head/base contains SHA    → pr_closed
+exact MERGED in a decision action      → merged immediately (terminal)
+stale/retargeted/terminal missing SHA  → on_review, PR detached, SHA retained
 new generation replaces prior one     → prior generation superseded (terminal)
 fresh no-change accepted              → completed (terminal; no merge claimed)
 ```
@@ -54,10 +72,30 @@ truthfully with “delivery needs attention”. A fresh no-op never offers Creat
 no-op leaves the existing PR untouched. Partial cards name the included and failed units before
 delivery.
 
-Continuation cleanup is ownership-aware: **Dismiss** clears the follow-up card/worktree but never
+Continuation cleanup is ownership-aware: **Dismiss** clears the follow-up card/worktree when its
+final live preflight proves that removal is lossless, but never
 closes the pre-existing PR, deletes its head branch, or returns its tickets from review. A blocked
-dirty follow-up requires an explicit destructive “Discard local result” confirmation, while still
-preserving the external PR/branch. Fresh deliveries keep the full discard semantics.
+dirty follow-up requires an explicit “Discard local result” confirmation, while still preserving
+the external PR/branch. That confirmation terminalizes the workflow result; it does not authorize
+forced byte deletion. New tracked, untracked, or ignored files keep the worktree and its checked-out
+branch mounted with an actionable cleanup warning. If this computer has no authenticated live
+worktree path, the blocked continuation shows ownership-safe **Dismiss** instead of claiming that a
+local result will be discarded; the existing PR/branch/review state remains untouched. Fresh deliveries keep the full PR/ticket discard
+semantics under the same lossless local preflight.
+
+When a terminal dashboard action removes the card while recovery data remains, the cleanup warning
+stays visible indefinitely with the retained location and a localized Copy recovery details action.
+Agent Chat keeps the same evidence in terminal history.
+
+A dismissed continuation remains a strict historical anchor for the next local-only iteration. With
+no active delivery, the resolver considers only the newest terminal generation that overlaps any
+requested ticket. Reuse requires that row itself to be a discarded continuation for the exact full
+ticket set, with one valid PR/head/base/SHA; GitHub must still report that exact PR `OPEN` at that SHA,
+every available ref must agree, and no prior worktree may remain mounted or unsettled. A newer subset,
+superset, fresh, malformed, merged, completed, or superseded generation shadows older history. Failed
+historical proof blocks Jira/PR heuristics instead of silently selecting a different review. The next
+generation stores the verified baseline SHA and terminal predecessor lineage before worktree
+allocation so a crash is retryable and same-timestamp clients still elect the replacement.
 
 Fresh no-change cards offer explicit **Mark done** and **Refine** outcomes. Mark done uses terminal
 `completed` and moves review tickets to Done without claiming a merge; Refine explicitly returns
@@ -74,19 +112,69 @@ actionable.
 - `prMode` is captured once. Admission is rechecked inside the per-repository allocation lock;
   two requests cannot both create a generation or reuse the ticket-keyed worktree.
 - A continuation supersedes its prior generation and creates the new `building` row in one DB
-  transaction. Allocation failure closes the new row and restores the prior generation atomically.
+  transaction. Allocation failure closes the new row and restores the prior generation atomically,
+  recording the failed replacement id so every client can safely undo its tombstone for that pair.
 - Isolation units remain `per-ticket` or one `all`-scope batch unit. Initial/final SHAs plus commit
   verification distinguish changed, resumed, and no-change results.
 - Per-unit settlement returns structured execution + delivery results. `onLoopRunFinished` receives
   the engine outcome only; commit/status/ref/provenance/push failures cannot rewrite it.
-- Clean, committed worktrees may be released. Dirty, unknown, or ref-mismatched worktrees become
-  `needs-review` and are never force-removed automatically. Push failure retains the exact SHA.
+- Clean, committed worktrees may be released only after a final live preflight proves tracked and
+  untracked status (apart from durably recorded Specrails overlay paths), plus exact worktree HEAD
+  and branch ref. Gitignored paths are release-safe only when covered by the IMMUTABLE settlement
+  snapshot (`DeliverBranchRecord.settlementIgnoredPaths`, captured the moment the worktree was
+  proven clean) — run-created build caches (`__pycache__`, `node_modules`) release cleanly, while an
+  ignored path that APPEARS after settlement, a failed/oversized capture (>400 paths → null), a
+  legacy row without a snapshot, or conflicting per-branch snapshots all preserve the worktree
+  (`durableSettlementIgnoredPaths`, cleanup-and-checkout-tolerate-run-artifacts). Authenticated overlay roots are atomically renamed to a unique
+  persistent same-filesystem quarantine batch and revalidated there; automatic cleanup never unlinks that
+  quarantine, so a raced replacement or open-descriptor write remains recoverable. The batch root is
+  persisted before the first move and pointers are never evicted while their bytes remain on disk. A recreated
+  original path makes final non-force removal fail closed. Each quarantine batch root is persisted and shown
+  in a collapsed card section without changing an otherwise successful delivery to
+  `cleanup_incomplete`. If a terminal dashboard action creates an archive, a persistent notification
+  exposes its exact paths and a Copy paths action before the card is removed. Dirty, unknown,
+  ignored-user-data, concurrent-write, or ref-
+  mismatched worktrees become retryable `needs-review`; push failure retains the exact SHA.
 - Project admission remains closed while startup reconciliation runs under the repo lock. Every
   stale `building` shape becomes actionable; successful interrupted work is preserved and labelled
   `settlement_interrupted`, while only all-failed runs become `implementation_failed`.
 - Operation leases are process capabilities. Startup clears every prior-process lease before card
   projection, marks the still-active delivery `operation_interrupted`, and leaves its durable SHA,
   PR and unit evidence intact so the user can safely retry.
+- Migrated successful `settlement_interrupted` and `recovery_unavailable` rows with an existing PR
+  are re-examined at startup. Startup and the explicit recovery action share one bounded,
+  fail-closed scan over refs, reflogs, and unreachable objects; a command/read failure, malformed
+  output, excessive combined candidate set, or ambiguous marker can never become false proof of a
+  unique result. Every refs/reflogs, unreachable-object, or recorded-branch candidate must carry the unique `(run <id>)` settlement
+  marker in its **commit subject**; branch/worktree association or a marker found only in the body
+  is never causal proof. The unreachable-object scan runs at most once per serialized reconciliation,
+  accepts only a bounded, unambiguous set of commit objects, and fails closed on malformed or excessive
+  output. A terminal `released`/legacy `failed` branch tip is only a fallback under
+  that same subject rule. One unambiguous run-owned commit becomes `delivery_sha` and a Retry push action
+  when absent from the recorded open PR. If GitHub already exposes that exact causal commit, the
+  row is classified as delivered without a no-op push. Startup audits earlier legacy recoveries
+  that already reached draft/ready too, replacing a frozen old PR-head SHA with the run-owned
+  commit when needed. Existing-PR recovery repairs `is_continuation=true` before exposing actions;
+  per-unit `branchOwnership=borrowed-pr|preexisting` independently prevents branch deletion without
+  incorrectly making every fresh replacement PR a borrowed continuation.
+  Before persisting or pushing a recovered orphan, Specrails pins it under a delivery-specific
+  `refs/specrails/recovery/*` ref. The ref survives crashes and protects the object from Git garbage
+  collection until exact remote delivery is proved or the user explicitly discards the result.
+  Discovery still runs when a ledger path exists but is dirty, recreated, or unauthenticated; if a
+  distinct worktree result and run-owned orphan coexist, both are preserved and neither is selected,
+  bundled, or pushed automatically. Restart preserves a `recover-and-retry` recovery-family status,
+  and explicit discard may remove a pre-persistence ref only after its exact run/final ownership is
+  re-proven. If the ref was advanced from marker-bearing ancestor A to descendant B before a crash,
+  that exact delivery ref selects B rather than letting the global scan manufacture self-ambiguity.
+  Successful successor delivery and startup settlement retry clean up exact ancestor refs.
+  A later unrelated branch tip is never substituted for the durable final SHA or unique run-marked
+  object, and all matching units are updated together. Dirty, missing, mismatched, unmarked or
+  ambiguous evidence stays blocked and preserved. Once the exact causal SHA is proven, a transient
+  GitHub lookup instead stays retryable and Retry push revalidates before mutation.
+- A blocked legacy card exposes a worktree path only after the path is proved absolute,
+  non-symlink, outside the main checkout, uniquely present in this repository's live worktree
+  registry, and checked out on the recorded branch/HEAD. Historical or other-device paths are
+  removed from the snapshot instead of being presented as available.
 - `GET /rails` is hydration-only and never invokes crash recovery. This avoids misclassifying the
   normal live window between durable loop completion and commit/ref/push settlement.
 - Startup retries pending terminal ticket effects in-process and re-projects active and terminal
@@ -116,12 +204,17 @@ entries. Each allocated worktree therefore gets `applyWorktreeOverlay(...)` at l
   `worktrees/` entry are never linked (nested pipeline worktrees stay local). `.mcp.json`
   and the instruction file (CLAUDE.md/AGENTS.md/GEMINI.md per provider) are COPIED when
   the checkout lacks them. Windows: junction → dereferencing-copy fallback.
-- **Never on the PR**: every overlay-owned path lands in a worktree-local manifest
-  (`.sr-rail-overlay.json`, unioned across passes so a RESUMED worktree keeps prior
-  entries claimed) and is excluded from `commitWorktree`'s stage via `:(exclude)`
-  pathspecs. Excluded paths are untracked by construction, so no real work can be lost;
-  a no-op overlay keeps the byte-identical `git add -A`. Worktree removal (`git worktree
-  remove --force`) deletes the symlinks as entries without following them.
+- **Never on the PR**: every allocator-created overlay path is excluded from staging with a literal
+  top-level pathspec. The writable worktree manifest is not cleanup authority; settlement persists
+  fingerprints captured from the trusted source/created entries. Cleanup atomically renames each
+  authenticated root into a unique sibling quarantine, revalidates it after the move, discloses
+  raced content there, and never deletes or restores quarantined paths automatically over a
+  possibly recreated source. A modified or
+  concurrently extended overlay is preserved as user data, while a no-op
+  overlay keeps the byte-identical ordinary staging behavior.
+  Successful quarantine batches deliberately remain beside the former worktree; automatic GC is
+  out of scope because deleting a path still writable through an open descriptor would reintroduce
+  the data-loss race. A future cleanup flow must be explicit and inspectable.
 - **Degrade, don't abort**: entry-level failures produce `warnings` — surfaced as a
   server log line plus the project-scoped `rail.overlay_degraded` WS event — and the
   spawn proceeds (a partial surface beats an aborted rail). `applyWorktreeOverlay` never
@@ -153,6 +246,24 @@ same repository lock as recovery, launch allocation and checkout, revalidates it
 after waiting for that lock, and uses bounded Git/GitHub command timeouts so a wedged child cannot
 block the repository forever.
 
+Every path that observes an attached PR—continuation admission, Retry push, post-push
+verification, Verify PR/poll, and Reopen—uses the same causal check: recorded PR identity, exact
+head/base, lifecycle, and inclusion of immutable `delivery_sha`. Admission is read-only and accepts
+only exact `OPEN` evidence; otherwise it refuses the launch without superseding the preserved card.
+Immediately before any existing-PR push, including automatic second-iteration settlement, the local
+`origin` must resolve to exactly one push URL identifying the repository that owns the same-repository
+PR. A fork, multiple URLs, ambiguous URL, missing remote, or mismatch preserves the immutable SHA and
+fails retryably without mutation. The push targets that already-verified raw URL, not the mutable
+`origin` alias, closing the verification/use window. URLs with credential-bearing userinfo,
+passwords, query strings, or fragments are rejected before they can enter process arguments or
+persisted diagnostics; Git/`gh` credential helpers remain the authentication channel.
+Exact `MERGED` evidence containing that SHA terminalizes immediately in a Retry/Reopen/Verify
+decision action. A definitively stale/retargeted PR, or a `CLOSED`/`MERGED` PR without that SHA, is
+detached by that action to `on_review` with the SHA and local branch preserved for a new PR.
+Transient observation failure keeps the evidence and fails retryably.
+Initial settlement records exact post-push `CLOSED` as `pr_closed`; exact post-push `MERGED` stays
+attached and ready for Verify so that explicit decision can commit terminal ticket intent atomically.
+
 - **create-pr** — deferred `deliverRailAsPr` (`server/rail-pr-delivery.ts`: 1 unit → its
   branch; N → assembled onto the conventional batch branch off the integration branch, one PR
   covering every ticket). The PR **title and canonical body are composed here** (see "Branch
@@ -167,24 +278,50 @@ block the repository forever.
   labelled retryable. Tickets stay `on_review`.
 - **publish** — `gh pr ready <url>` → `pr_ready` (the draft opens for the team's normal review).
   Requires a real `pr_url`.
-- **discard** — for a fresh delivery, best-effort `gh pr close <url> --delete-branch`; remove the launch's worktrees
+- **discard** — for a fresh delivery, best-effort `gh pr close <url>` without unleased remote-head
+  deletion; remove the launch's worktrees
   (ledger rows closed as `failed`); delete only branches durably recorded as created by this
-  delivery (owned per-unit sources plus its exact assembled head; preferred names are never
+  delivery only while each live local tip still equals its frozen SHA (owned per-unit sources plus
+  its exact assembled head; advanced or remote heads are preserved, preferred names are never
   recomputed, and the integration branch is NEVER deleted); → `discarded`; revert
   still-`on_review` tickets → `todo` (a manually re-triaged spec is respected) + Jira
   `onRailDiscard`. Failures are retained in `cleanup_warnings` and disclosed. For a continuation,
   discard can remove only the explicitly confirmed blocked local iteration: it preserves the
-  borrowed PR/head and review ticket state.
+  borrowed PR/head and review ticket state. Startup repairs migrated continuation ownership before
+  exposing actions, and per-unit `borrowed-pr` evidence independently keeps stale surfaces safe.
 - **dismiss** — continuation acknowledgement. Clears the generation and owned clean
   worktree while preserving the existing PR, head branch and `on_review` tickets.
 - **acknowledge-no-changes** — fresh no-change acceptance → terminal `completed`, tickets Done,
   with no PR/merge claim. Jira receives its own no-PR completion comment. Refine remains the
   explicitly backlog-returning path and always uses Jira `todo`; it never inherits the configured
   discard/cancellation status.
-- **poll-merge** — observes state, exact head/base/head OID, merge commit and PR commit set;
-  `MERGED` becomes `merged` only when that immutable evidence contains `delivery_sha`, then tickets
-  → `done` + Jira `onRailMerged`. `OPEN` is observation-only; `CLOSED` without merge → `pr_closed`.
-- **reopen** — `gh pr reopen` from `pr_closed`, returning to draft or ready according to GitHub.
+- **recover-and-retry** — for one exact successful `settlement_interrupted` continuation, confirms
+  use of its recorded run/unit and authenticated isolated worktree. Authentication is repeated
+  immediately before staging; symlinks, the main checkout, reused directories and unregistered
+  paths fail closed. Private/overlay paths are excluded from add and from the final `commit --only`
+  pathspec; pre-staged forbidden entries are safely unstaged, hooks are bypassed, and the index is
+  re-audited. The candidate must fast-forward the live PR head. GitHub must prove a same-repository
+  PR and the local `origin` push URL must identify that exact PR repository before the immutable SHA
+  is pushed without force. A merge racing recovery returns verified success rather than a warning.
+  The user's main checkout is never switched, staged, stashed, committed, or cleaned by this action.
+  If the worktree was already removed, the same action scans refs, reflogs, and unreachable commits
+  before declaring the result absent. Baseline equality means “already delivered” only with an exact
+  durable final SHA/run marker, and means “no changes” only when every matching unit durably records
+  `changed=false` and `initialSha=finalSha=live PR head`. Otherwise the row becomes
+  `recovery_unavailable`: the card offers a secondary Recheck action, keeps Inspect/log access and
+  explains that Git evidence is local to the computer where the run executed instead of repeating
+  an impossible Commit or Checkout action.
+- **poll-merge / Verify PR** — observes state, exact head/base/head OID, merge commit and PR commit
+  set. `OPEN` remains delivery-verified only while its exact head is `delivery_sha`; a missing
+  remote commit restores Retry push instead of merely saying “not merged”. `MERGED` becomes
+  `merged` immediately when immutable evidence contains `delivery_sha`, then tickets → `done` + Jira
+  `onRailMerged`. Exact `CLOSED` containing the SHA → `pr_closed`; missing-SHA terminal evidence
+  detaches to `on_review`. Successful retry/check responses carry the verified SHA, remote head and
+  whether a push actually ran for immediate user feedback.
+- **reopen** — before and after `gh pr reopen`, revalidates exact PR/head/base and inclusion of
+  `delivery_sha`; mismatch or missing-SHA evidence detaches to `on_review` instead of retaining or
+  reopening the stale attachment. A valid reopen returns to draft or ready according to GitHub;
+  an exact merge racing the action terminalizes, while an exact still-closed result reports failure.
 - **merge-local** — builds the complete merge in an isolated temporary checkout and advances the
   user's revalidated clean base only after all branches succeed.
 
@@ -250,32 +387,86 @@ the `expectedDecision` they rendered.
   one-shot `rail.pr_delivered`): broadcast at row INSERT (`building`), build-settle, and every
   decision mutation. **`GET /rails`** returns `prDeliveries: Record<railIndex, snapshot>`
   (newest non-terminal row per slot) for late-join hydration.
+- **Monotonic generation arbitration.** Dashboard and Agent Chat retain terminal/superseded id
+  tombstones, accept a different id only through explicit lineage, strictly later `createdAt`, or
+  the exact `A.restoredFromDeliveryId=B` rollback after B terminalizes, and advance the same id only
+  through newer `updatedAt` evidence. A delayed A snapshot without that paired proof cannot replace
+  B, and a non-terminal replay cannot ordinarily reopen an id already observed terminal.
 - **Option A — dashboard.** `client/src/context/RailPrDecisionContext.tsx` (registerHandler on
   the shared socket + `GET /rails` seed) feeds `RailPrDecisionStrip` on `RailRow` (both density
   branches): on_review → Create PR / Discard; pr_draft → Open PR + Publish / Discard (degraded →
-  retry); pr_ready → Check merge; no_changes → Done/refine; pr_closed → Reopen; pr_failed derives
-  retry-vs-blocked actions from `delivery_outcome`. Logs remain available after settle. Buttons
+  retry); pr_ready → Verify PR; no_changes → Done/refine; pr_closed → Reopen; pr_failed derives
+  retry-vs-blocked actions from `delivery_outcome`. A blocked legacy continuation without
+  `delivery_sha` never offers Checkout: it exposes any live preserved worktree through Inspect local
+  result and offers the confirmed Commit & retry push action above. A `recovery_unavailable` row
+  replaces that primary action with Check again; a clone without the original worktree/object never
+  claims that the implementation failed or that local progress was discarded. Ordinary Checkout is restricted
+  to a delivery with an immutable SHA; the server repeats that guard under the repo lock and refuses
+  a dirty or unreadable main checkout before releasing a worktree or changing any ref. Checkout
+  re-reads and uses only the current attached PR branch and immutable `delivery_sha` after acquiring
+  the repository lock, never the pre-lock snapshot. A same-named local/remote branch must equal that
+  SHA before switching, and the final branch plus HEAD are verified afterward; divergence is
+  preserved and a failed fast-forward can never be reported as success. Logs remain available after settle. Buttons
   disable in flight and apply the authoritative HTTP snapshot immediately.
 - **Option B — agent chat.** When the row carries `origin_conversation_id`, settle posts a
   **persisted inline card**: a `'system'`-role `agent_messages` row (role is unconstrained TEXT —
   no migration; TS unions widened) whose content is the `PrDecisionCardEnvelope` JSON.
-  `AgentChatManager.postPrDecisionCard` / `updatePrDecisionCard` (update-in-place on every
-  transition, so cold-load shows terminal states correctly) are reached from rails code via the
+  `AgentChatManager.postPrDecisionCard` / `updatePrDecisionCard` (idempotent update-in-place on
+  every transition, transactionally consolidating legacy duplicate rows by delivery id) are reached via the
   process-wide `server/agent-chat-registry.ts` singleton (null-safe: tests/disabled builds).
   Live updates ride the app-global `agent_pr_decision` WS event; the client renders
-  `AgentPrDecisionCard` and POSTs the same project-scoped `/rails/pr-decision`.
-- **Race:** a stale generation or occupied operation lease returns 409 before effects. Clients
+  `AgentPrDecisionCard` and POSTs the same project-scoped `/rails/pr-decision`. Client hydration,
+  WS upsert and rendering also dedupe by delivery id, so stale blocked and current ready cards can
+  never expose two contradictory Checkout/Discard action sets.
+- **Race / hydration ABA guard:** a stale generation or occupied operation lease returns 409 before effects. Clients
   distinguish `operation_in_progress` from a stale decision, show the active operation, disable
   actions, apply the response snapshot, ignore terminal events for an older delivery id, and
-  hydrate again on focus/reconnect.
+  hydrate again on focus/reconnect. Each dashboard GET captures accepted per-rail mutation versions;
+  a live replacement or terminal deletion wins over its stale seed. Only accepted snapshots advance
+  that guard, so an ignored terminal for old A cannot make the same GET drop valid B.
+  Confirmation dialogs are bound to the exact delivery id/decision that opened them and disappear
+  when that generation changes; Checkout carries the same exact id through client and server, and
+  a rejected stale action never mutates or produces a success toast for B.
 
 ## Relaunch guard
 
 `POST /rails/:i/launch` returns **409 `{ error: 'pr_decision_pending', prDeliveryId }`** for an
 unresolved fresh delivery. An active `pr_draft`/`pr_ready` generation covering the same tickets is
-a verified continuation contract instead: launch revalidates it again under the repo lock,
-supersedes it atomically and runs only on that PR head. A stale concurrent request receives 409
-before it can allocate or claim anything. Legacy / non-isolated launches are unaffected.
+a continuation contract only after exact `OPEN` identity, head/base, and `delivery_sha` evidence is
+revalidated again under the repo lock, and its allocated worktree/local ref both equal that frozen
+SHA. External PR discovery requires an explicit PR number or authoritative Jira key; the list match
+is only discovery, and an exact authoritative PR view must freeze its live `headRefOid` before local
+allocation. Local ticket numbers, title similarity, and unrelated `Fixes #<id>` text are not
+authority. Any other evidence refuses admission and preserves
+the existing card for Retry push or Verify PR; those decision actions terminalize exact `MERGED`
+evidence or detach stale/missing-SHA terminal evidence to `on_review`. Only a verified continuation
+is superseded atomically and run on that PR head. A stale
+concurrent request receives 409 before it can allocate or claim anything. Legacy / non-isolated
+launches are unaffected.
+
+## Explicit target PR (deliver-rail-into-existing-pr)
+
+The launch body accepts an optional `targetPrNumber` — the user's explicit designation of an
+existing open PR as the delivery destination ("extend PR #151"). It bypasses the automatic-inference
+status gates (which never probe GitHub for a `todo` ticket) but keeps the authoritative validation
+ladder: `resolveExplicitPrTarget` (`server/active-pr-continuation.ts`) resolves the number to its
+canonical URL, observes the lifecycle, and throws `ExplicitPrTargetError` with a distinct code —
+`target_pr_not_found` (404) / `target_pr_not_open` / `target_pr_fork` (`isCrossRepository !== false`)
+/ `target_pr_invalid` / `target_pr_unfetchable` (all 409) — rejecting the launch BEFORE any delivery
+row or worktree exists; there is never a silent fallback to a fresh integration-branch run. The
+router also 400s `invalid_target_pr` (shape) and `target_pr_requires_pr_mode` (loops/PR-delivery off,
+non-isolated launch, or isolation unavailable). A valid target becomes one `ActivePrContinuationTarget`
+(`source: 'explicit-target'`) applied to every launch ticket — the existing single-checkout collapse,
+born-attached generation (`pr_url`/`pr_number` at insert, `isContinuation`, `borrowed-pr` ownership),
+and attached-PR decision card all reuse the automatic-continuation machinery byte-identically. The
+PR's `baseRefName` wins over the configured integration branch. When the slot has a continuable
+delivery for the SAME PR the continuation contract drives instead (explicit target dropped as
+redundant); a DIFFERENT number 409s `pr_decision_pending`. Surfaces: dashboard rail header
+`RailTargetPrSelector` (candidates from `GET /rails/:i/pr-candidates` — the automatic matchers
+without the status gate, display-only, fork rows disabled — plus manual number entry; selection is
+one-shot, consumed by the launch) with `TargetPrLaunchDialog` confirming number/title/head branch;
+MCP `specrails_rails(launch, targetPrNumber)` with operator-prompt teaching ("user names a PR →
+pass it; never create a duplicate"). Fork PR push support and multi-PR batches remain out of scope.
 
 ## Ticket lifecycle — `on_review`
 
@@ -400,14 +591,25 @@ the launch INSERT. As-built:
 - **D11 — premium decision UI**: disable-on-click reconciled to authoritative snapshots, tooltips
   (base branch, PR url), designed degraded/failed states, distinct stale-vs-operation-busy 409 UX;
   English source strings, all 8 locales, locale-parity green.
-- **D12 — no automatic data loss**: dirty, unknown and ref-mismatched worktrees are
-  `needs-review`; only explicit consequence-specific cleanup may force-remove them.
+- **D12 — no automatic data loss**: live tracked/untracked/ignored state, HEAD, and branch ref are
+  revalidated before non-force automatic release; overlay roots are atomically moved into persistent
+  quarantine rather than unlinked; dirty, concurrent, unknown, user-ignored, ref-
+  mismatched, or advanced worktrees/branches are preserved.
 - **D13 — one active generation**: migration 48 supersedes historical duplicates and a partial
-  unique index enforces one active row per rail.
+  unique index enforces one active row per rail; snapshot consumers enforce lineage with
+  `createdAt`, same-id order with `updatedAt`, terminal/superseded tombstones, exact-generation
+  confirmations, an accepted-mutation ABA guard, and one exact failed-replacement rollback proof.
 - **D14 — operation lease before effects**: a decision claims before Git/GitHub/ticket work;
   the loser has no external side effects and HTTP returns the authoritative snapshot.
-- **D15 — exact/idempotent delivery**: continuation retry pushes `delivery_sha`; ambiguous PR
-  creation resolves exact open head/base identity; CLOSED is distinct and reopenable.
+- **D15 — exact/idempotent delivery**: continuation retry pushes `delivery_sha`; admission,
+  retry/post-push, poll and reopen all validate exact PR/head/base plus SHA inclusion. Admission is
+  read-only and refuses non-exact continuations; inferred external PRs freeze the authoritative live
+  head before worktree allocation, post-run verification permits only a matched HEAD/ref advance,
+  and pre-push settlement freezes the new exact SHA and proves `origin` owns the attached PR before
+  every automatic or user-triggered push. Decision actions terminalize exact MERGED evidence
+  or detach stale/retargeted/terminal-without-SHA attachments to `on_review` with the SHA preserved.
+  Legacy recovery accepts only a unique run marker in the commit
+  subject. Ambiguous PR creation resolves exact open head/base identity.
 - **D16 — crash recovery before admission**: startup preserves successful interrupted work and
   makes every stale `building` generation actionable before another launch can reuse its path.
 - **D17 — ownership-aware continuation cleanup**: dismiss/discard never closes or deletes the
@@ -417,6 +619,16 @@ the launch INSERT. As-built:
   mutating newer work, and terminal Agent cards are re-projected.
 - **D19 — truthful no-change completion**: fresh no-change has Mark done (`completed`) and Refine;
   a continuation only dismisses its borrowed follow-up.
+- **D20 — preserved-result recovery**: startup also recovers one uniquely run-marked unreachable
+  commit; otherwise both cards hide misleading Checkout, reveal live delivery-owned worktrees, and
+  offer a lease-guarded Commit & retry push that is exact-baseline, fast-forward, immutable-SHA and
+  non-force while leaving the user's main checkout untouched. Recovery worktrees, commit index
+  pathspecs, same-repository PR ownership, origin identity, and checkout cleanliness all fail closed.
+- **D21 — orphan protection and truthful device-local fallback**: startup and manual Recheck share
+  one bounded refs/reflogs/unreachable scan; an exact orphan is pinned under an internal recovery ref
+  before durable/network mutation. No evidence, ambiguous evidence, or a later unrelated branch tip
+  stays non-destructive and renders localized other-computer guidance instead of looping Commit or
+  Checkout.
 
 ## Kill-switch
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.29.2",
+  "version": "2.29.4",
   "license": "MIT",
   "repository": {
     "type": "git",