specrails-desktop 2.29.4 → 2.30.0

package/server/dist/project-router.js

@@ -11,6 +11,10 @@ const code_explorer_router_1 = require("./code-explorer-router");
 const jira_router_1 = require("./jira-router");
 const ticket_store_1 = require("./ticket-store");
 const workspace_resolution_1 = require("./workspace-resolution");
+const workspace_manager_1 = require("./workspace-manager");
+const blueprint_render_1 = require("./blueprint-render");
+const blueprint_draft_parser_1 = require("./blueprint-draft-parser");
+const blueprint_spec_quality_1 = require("./blueprint-spec-quality");
 const file_story_manager_1 = require("./file-story-manager");
 const file_summary_generator_1 = require("./file-summary-generator");
 const providers_1 = require("./providers");
@@ -24,15 +28,16 @@ const project_router_terminals_1 = require("./project-router-terminals");
 const project_router_settings_1 = require("./project-router-settings");
 const project_router_loop_runs_1 = require("./project-router-loop-runs");
 const project_router_git_1 = require("./project-router-git");
+const project_router_helpers_1 = require("./project-router-helpers");
 // Re-export the spec helpers from their new home so existing importers
 // (`import { ... } from './project-router'`) keep working unchanged.
-var project_router_helpers_1 = require("./project-router-helpers");
-Object.defineProperty(exports, "stripSpecMetadataSections", { enumerable: true, get: function () { return project_router_helpers_1.stripSpecMetadataSections; } });
-Object.defineProperty(exports, "extractShortSummary", { enumerable: true, get: function () { return project_router_helpers_1.extractShortSummary; } });
-Object.defineProperty(exports, "deriveFallbackShortSummary", { enumerable: true, get: function () { return project_router_helpers_1.deriveFallbackShortSummary; } });
-Object.defineProperty(exports, "lightlyStructurePrompt", { enumerable: true, get: function () { return project_router_helpers_1.lightlyStructurePrompt; } });
-Object.defineProperty(exports, "formatDescriptionWithCriteria", { enumerable: true, get: function () { return project_router_helpers_1.formatDescriptionWithCriteria; } });
-Object.defineProperty(exports, "resolveDefaultSpecModel", { enumerable: true, get: function () { return project_router_helpers_1.resolveDefaultSpecModel; } });
+var project_router_helpers_2 = require("./project-router-helpers");
+Object.defineProperty(exports, "stripSpecMetadataSections", { enumerable: true, get: function () { return project_router_helpers_2.stripSpecMetadataSections; } });
+Object.defineProperty(exports, "extractShortSummary", { enumerable: true, get: function () { return project_router_helpers_2.extractShortSummary; } });
+Object.defineProperty(exports, "deriveFallbackShortSummary", { enumerable: true, get: function () { return project_router_helpers_2.deriveFallbackShortSummary; } });
+Object.defineProperty(exports, "lightlyStructurePrompt", { enumerable: true, get: function () { return project_router_helpers_2.lightlyStructurePrompt; } });
+Object.defineProperty(exports, "formatDescriptionWithCriteria", { enumerable: true, get: function () { return project_router_helpers_2.formatDescriptionWithCriteria; } });
+Object.defineProperty(exports, "resolveDefaultSpecModel", { enumerable: true, get: function () { return project_router_helpers_2.resolveDefaultSpecModel; } });
 function createProjectRouter(registry) {
     const router = (0, express_1.Router)({ mergeParams: true });
     // Middleware: resolve project from :projectId param
@@ -139,6 +144,22 @@ function createProjectRouter(registry) {
         });
         codeRouter(req, res, next);
     });
+    // Project Builder sidebar re-entry (add-project-builder D5): read the
+    // workspace-resident blueprint pair's source of truth. 404 when the project
+    // has no blueprint (every non-Builder project) — the sidebar entry hides.
+    router.get('/:projectId/blueprint', (req, res) => {
+        const project = ctx(req).project;
+        const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+        const workspace = exec.relocated && exec.workspaceDir
+            ? exec.workspaceDir
+            : (project.slug ? (0, workspace_manager_1.workspacePathFor)(project.slug) : null);
+        const blueprint = workspace ? (0, blueprint_render_1.readBlueprint)(workspace) : null;
+        if (!blueprint) {
+            res.status(404).json({ error: 'no blueprint for this project' });
+            return;
+        }
+        res.json({ blueprint });
+    });
     // Relocate-artifacts gate (single chokepoint for ALL project-router ticket
     // I/O): relocated ⇒ the registry entry's ticketsPath (workspace); legacy ⇒
     // resolveTicketStoragePath (preserves integration-contract.json custom
@@ -148,6 +169,108 @@ function createProjectRouter(registry) {
         const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
         return exec.relocated ? exec.ticketsPath : (0, ticket_store_1.resolveTicketStoragePath)(project.path);
     };
+    // Milestone batch commit (add-project-builder D7): insert one blueprint
+    // milestone's generated specs as `M<n>`-labeled todo tickets, flip that
+    // milestone to `committed`, and re-render the blueprint pair. Jira-connected
+    // projects ride the existing materializer on the store mutation unchanged.
+    router.post('/:projectId/blueprint/commit-milestone', (req, res) => {
+        const projectCtx = ctx(req);
+        const project = projectCtx.project;
+        const body = (req.body ?? {});
+        const milestoneId = typeof body.milestoneId === 'string' && /^m[0-9]{1,3}$/i.test(body.milestoneId)
+            ? body.milestoneId.toLowerCase()
+            : null;
+        if (!milestoneId) {
+            res.status(400).json({ error: 'milestoneId (e.g. "m2") is required' });
+            return;
+        }
+        const rawSpecs = Array.isArray(body.specs) ? body.specs : [];
+        if (rawSpecs.length === 0) {
+            res.status(400).json({ error: 'specs must contain at least one titled spec' });
+            return;
+        }
+        const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+        const workspace = exec.relocated && exec.workspaceDir
+            ? exec.workspaceDir
+            : (project.slug ? (0, workspace_manager_1.workspacePathFor)(project.slug) : null);
+        const blueprint = workspace ? (0, blueprint_render_1.readBlueprint)(workspace) : null;
+        if (!workspace || !blueprint) {
+            res.status(404).json({ error: 'no blueprint for this project' });
+            return;
+        }
+        const milestone = blueprint.milestones.find((m) => m.id === milestoneId);
+        if (!milestone) {
+            res.status(404).json({ error: `milestone ${milestoneId} not found in the blueprint` });
+            return;
+        }
+        if (milestone.status !== 'planned') {
+            res.status(409).json({ error: `milestone ${milestoneId} is already ${milestone.status}` });
+            return;
+        }
+        const label = milestoneId.toUpperCase();
+        const quality = (0, blueprint_spec_quality_1.analyzeBuilderSpecBatch)({ specsComplete: body.specsComplete, specs: rawSpecs }, { milestoneLabel: label, minSpecs: 1, maxSpecs: 10, requireScaffold: false });
+        if (!quality.valid) {
+            res.status(400).json({ error: 'milestone_spec_quality_invalid', detail: (0, blueprint_spec_quality_1.firstBuilderSpecQualityDetail)(quality) });
+            return;
+        }
+        const coerced = (0, blueprint_draft_parser_1.coerceBlueprint)({ blueprintVersion: 1, specsComplete: true, m1Specs: rawSpecs });
+        const specs = coerced?.m1Specs ?? [];
+        try {
+            const created = [];
+            (0, ticket_store_1.mutateStore)(ticketPath(req), (store) => {
+                const indexToId = new Map();
+                specs.forEach((spec, index) => {
+                    const id = store.next_id;
+                    store.next_id += 1;
+                    const now = new Date().toISOString();
+                    const labels = spec.labels.includes(label) ? spec.labels : [...spec.labels, label];
+                    const prerequisite = spec.dependsOnIndex;
+                    const prerequisites = prerequisite !== undefined && indexToId.has(prerequisite)
+                        ? [indexToId.get(prerequisite)]
+                        : [];
+                    const ticket = {
+                        id,
+                        title: spec.title,
+                        description: (0, project_router_helpers_1.formatDescriptionWithCriteria)(spec.description, spec.acceptanceCriteria),
+                        status: 'todo',
+                        priority: spec.priority,
+                        labels,
+                        assignee: null,
+                        prerequisites,
+                        metadata: {},
+                        origin_conversation_id: null,
+                        is_epic: false,
+                        parent_epic_id: null,
+                        execution_order: null,
+                        short_summary: spec.shortSummary,
+                        created_at: now,
+                        updated_at: now,
+                        created_by: 'project-builder',
+                        source: 'project-builder',
+                    };
+                    store.tickets[String(id)] = ticket;
+                    created.push(ticket);
+                    indexToId.set(index, id);
+                });
+            });
+            milestone.status = 'committed';
+            milestone.ticketIds = created.map((t) => t.id);
+            (0, blueprint_render_1.writeBlueprintPair)(workspace, blueprint);
+            for (const ticket of created) {
+                projectCtx.broadcast({
+                    type: 'ticket_created',
+                    ticket: ticket,
+                    projectId: project.id,
+                    timestamp: new Date().toISOString(),
+                });
+            }
+            res.status(201).json({ insertedIds: created.map((t) => t.id), milestone: milestone.id });
+        }
+        catch (err) {
+            console.error('[project-router] commit-milestone error:', err);
+            res.status(500).json({ error: 'Failed to commit the milestone' });
+        }
+    });
     const deps = { router, registry, ctx, ticketPath };
     (0, project_router_jobs_1.registerJobsRoutes)(deps);
     (0, project_router_spending_1.registerSpendingRoutes)(deps);

package/server/dist/providers/claude-adapter.js

@@ -71,8 +71,14 @@ function commonFlagsFor(opts) {
     return [
         // No approval bypass is necessary when no tool can be invoked. Keeping it
         // off also makes the pure-output boundary fail closed if Claude ever
-        // changes how it interprets the sentinel.
-        ...(toolPolicy === 'none' ? [] : ['--dangerously-skip-permissions']),
+        // changes how it interprets the sentinel. Read-only work uses Claude's
+        // native plan mode: Read/Grep/Glob stay usable without granting the
+        // blanket permission bypass carried by normal autonomous turns.
+        ...(toolPolicy === 'default'
+            ? ['--dangerously-skip-permissions']
+            : toolPolicy === 'read-only'
+                ? ['--permission-mode', 'plan', '--safe-mode']
+                : []),
         ...toolArgs,
         '--output-format', 'stream-json',
         '--verbose',

package/server/dist/providers/codex-adapter.js

@@ -33,6 +33,9 @@ const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
 const CODEX_MIN_VERSION = '0.128.0';
 exports._CODEX_MIN_VERSION = CODEX_MIN_VERSION;
 const CODEX_MODELS = [
+    { value: 'gpt-5.6-sol', label: 'GPT-5.6 Sol' },
+    { value: 'gpt-5.6-terra', label: 'GPT-5.6 Terra' },
+    { value: 'gpt-5.6-luna', label: 'GPT-5.6 Luna' },
     { value: 'gpt-5.5', label: 'GPT-5.5', default: true },
     { value: 'gpt-5.4', label: 'GPT-5.4' },
     { value: 'gpt-5.4-mini', label: 'GPT-5.4 Mini' },
@@ -41,11 +44,19 @@ const CODEX_MODELS = [
 const SANDBOX_FLAGS = ['--sandbox', 'workspace-write'];
 const RAIL_SANDBOX_FLAGS = ['--sandbox', 'danger-full-access'];
 // `codex exec resume` does NOT accept `--sandbox` (the flag only exists on
-// `codex exec`); pass the policy as a `-c` config override instead so the
-// resumed session honours workspace-write even when the per-project
-// `.codex/config.toml` isn't on the spawn cwd (e.g. explore-cwd).
-const SANDBOX_RESUME_FLAGS = ['-c', 'sandbox_mode="workspace-write"'];
+// `codex exec`); `resumeSandboxFlags` passes the selected policy as a `-c`
+// config override instead, even when the per-project `.codex/config.toml`
+// isn't on the spawn cwd (e.g. explore-cwd).
 const SKIP_GIT_CHECK = '--skip-git-repo-check';
+function sandboxFlags(opts, rail = false) {
+    if (opts.toolPolicy === 'read-only')
+        return ['--sandbox', 'read-only'];
+    return rail ? [...RAIL_SANDBOX_FLAGS] : [...SANDBOX_FLAGS];
+}
+function resumeSandboxFlags(opts) {
+    const mode = opts.toolPolicy === 'read-only' ? 'read-only' : 'workspace-write';
+    return ['-c', `sandbox_mode="${mode}"`];
+}
 /** Fold system prompt into the user prompt for providers without --system-prompt. */
 function fold(systemPrompt, prompt) {
     if (!systemPrompt)
@@ -76,7 +87,7 @@ function buildCodexArgs(action, opts) {
             // ("quiero hacer un tetris"), the long system text dominates the prompt
             // and codex responds to the system instructions instead of the user.
             // Trust AGENTS.md and pass only the user prompt.
-            args.push('exec', '--json', ...SANDBOX_FLAGS, SKIP_GIT_CHECK);
+            args.push('exec', '--json', ...sandboxFlags(opts), SKIP_GIT_CHECK);
             args.push(opts.prompt);
             args.push('--model', opts.model);
             // Native reasoning effort (codex 0.139+). String value is quoted to match
@@ -95,7 +106,7 @@ function buildCodexArgs(action, opts) {
         case 'agent-refine':
         case 'auto-title':
         case 'setup-enrich': {
-            args.push('exec', '--json', ...SANDBOX_FLAGS, SKIP_GIT_CHECK);
+            args.push('exec', '--json', ...sandboxFlags(opts), SKIP_GIT_CHECK);
             args.push(fold(opts.systemPrompt, opts.prompt));
             args.push('--model', opts.model);
             // Native reasoning effort (codex 0.139+). String value is quoted to match
@@ -113,7 +124,7 @@ function buildCodexArgs(action, opts) {
             // See chat-turn note: AGENTS.md in explore-cwd carries the Explore
             // framing; the per-turn argv must stay user-text-only so codex doesn't
             // mistake the system prompt for the user request.
-            args.push('exec', 'resume', '--json', ...SANDBOX_RESUME_FLAGS, SKIP_GIT_CHECK);
+            args.push('exec', 'resume', '--json', ...resumeSandboxFlags(opts), SKIP_GIT_CHECK);
             args.push(opts.sessionId);
             args.push(opts.prompt);
             args.push('--model', opts.model);
@@ -133,7 +144,7 @@ function buildCodexArgs(action, opts) {
             if (!opts.sessionId) {
                 throw new Error(`${action} requires sessionId`);
             }
-            args.push('exec', 'resume', '--json', ...SANDBOX_RESUME_FLAGS, SKIP_GIT_CHECK);
+            args.push('exec', 'resume', '--json', ...resumeSandboxFlags(opts), SKIP_GIT_CHECK);
             args.push(opts.sessionId);
             args.push(fold(opts.systemPrompt, opts.prompt));
             args.push('--model', opts.model);
@@ -157,7 +168,7 @@ function buildCodexArgs(action, opts) {
             // On Windows, Codex's workspace-write sandbox can fail before the first
             // shell command with `windows sandbox: spawn setup refresh`; full access
             // matches the existing fully-autonomous rail contract.
-            args.push('exec', '--json', ...RAIL_SANDBOX_FLAGS, SKIP_GIT_CHECK);
+            args.push('exec', '--json', ...sandboxFlags(opts, true), SKIP_GIT_CHECK);
             args.push(fold(opts.systemPrompt, opts.prompt));
             args.push('--model', opts.model);
             // Native reasoning effort (codex 0.139+). String value is quoted to match
@@ -333,7 +344,9 @@ exports.codexAdapter = {
         profileEnvSupport: true,
         systemPromptArg: false,
         supportsReasoningEffort: true,
-        reasoningEfforts: ['minimal', 'low', 'medium', 'high'], // codex model_reasoning_effort values
+        // codex model_reasoning_effort values. xhigh/max ship with GPT-5.6 (all
+        // tiers); ultra is Sol-only upstream — codex validates the combo itself.
+        reasoningEfforts: ['minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra'],
         supportsImageInput: true, // codex-cli `-i/--image <FILE>...` (verified 0.141)
     },
     modelCatalog: () => CODEX_MODELS,

package/server/dist/providers/gemini-adapter.js

@@ -44,10 +44,19 @@ const GEMINI_MODELS = [
     { value: 'gemini-2.5-flash-lite', label: 'Gemini 2.5 Flash Lite' },
 ];
 const STREAM_JSON_FLAGS = ['--output-format', 'stream-json'];
-// Auto-approve tool calls so headless turns never block on an approval prompt.
-// Parity with codex's workspace-write/full-access sandbox; the non-destructive
-// stance for Explore is carried by GEMINI.md + the system prompt, not a sandbox.
+// Default autonomous turns auto-approve tool calls so they never block on a
+// headless approval prompt. `approvalFlags` replaces this with native plan mode
+// for explicitly read-only work; the two modes are never combined.
 const YOLO_FLAG = '--yolo';
+function approvalFlags(opts) {
+    // Gemini CLI has no Codex-style selectable filesystem sandbox mode. Its
+    // verified native read-only boundary is approval-mode=plan (documented by
+    // the CLI itself as "plan (read-only mode)"). Crucially, never combine it
+    // with --yolo, which would auto-approve every action.
+    return opts.toolPolicy === 'read-only'
+        ? ['--approval-mode', 'plan']
+        : [YOLO_FLAG];
+}
 /** Fold system prompt into the user prompt for providers without --system-prompt. */
 function fold(systemPrompt, prompt) {
     if (!systemPrompt)
@@ -63,12 +72,12 @@ function buildGeminiArgs(action, opts) {
             // short user message ("quiero hacer un tetris") makes the model answer the
             // system instructions instead of the user — so pass user text only and
             // trust GEMINI.md, exactly like the codex adapter trusts AGENTS.md.
-            return ['-p', opts.prompt, ...model, ...STREAM_JSON_FLAGS, YOLO_FLAG, ...(opts.extraArgs ?? [])];
+            return ['-p', opts.prompt, ...model, ...STREAM_JSON_FLAGS, ...approvalFlags(opts), ...(opts.extraArgs ?? [])];
         }
         case 'chat-resume': {
             if (!opts.sessionId)
                 throw new Error(`${action} requires sessionId`);
-            return ['-p', opts.prompt, ...model, ...STREAM_JSON_FLAGS, '--resume', opts.sessionId, YOLO_FLAG, ...(opts.extraArgs ?? [])];
+            return ['-p', opts.prompt, ...model, ...STREAM_JSON_FLAGS, '--resume', opts.sessionId, ...approvalFlags(opts), ...(opts.extraArgs ?? [])];
         }
         case 'chat-stream': {
             // Gemini has no persistent-stdin multi-turn transport; the Explore
@@ -81,12 +90,12 @@ function buildGeminiArgs(action, opts) {
         case 'auto-title':
         case 'setup-enrich':
         case 'rail-job': {
-            return ['-p', fold(opts.systemPrompt, opts.prompt), ...model, ...STREAM_JSON_FLAGS, YOLO_FLAG, ...(opts.extraArgs ?? [])];
+            return ['-p', fold(opts.systemPrompt, opts.prompt), ...model, ...STREAM_JSON_FLAGS, ...approvalFlags(opts), ...(opts.extraArgs ?? [])];
         }
         case 'setup-enrich-resume': {
             if (!opts.sessionId)
                 throw new Error(`${action} requires sessionId`);
-            return ['-p', fold(opts.systemPrompt, opts.prompt), ...model, ...STREAM_JSON_FLAGS, '--resume', opts.sessionId, YOLO_FLAG, ...(opts.extraArgs ?? [])];
+            return ['-p', fold(opts.systemPrompt, opts.prompt), ...model, ...STREAM_JSON_FLAGS, '--resume', opts.sessionId, ...approvalFlags(opts), ...(opts.extraArgs ?? [])];
         }
     }
 }

package/server/dist/rail-isolated-launch.js

@@ -408,10 +408,18 @@ async function launchIsolatedRail(input, io = {}) {
     // overlay their repo's own untracked on-disk entries instead. Resolved ONCE
     // per launch; a resolution failure degrades to the legacy (repo) source.
     let overlaySourceRoot = baseRepo;
+    let overlayFallbackRoots;
     try {
         const exec = resolveExecution({ slug, path: baseRepo });
-        if (exec.relocated && exec.workspaceDir)
+        if (exec.relocated && exec.workspaceDir) {
             overlaySourceRoot = exec.workspaceDir;
+            // The repo as FALLBACK root: repo-resident untracked carve-outs
+            // (OpenSpec's `/opsx:*` commands, `openspec-*` skills, user extras)
+            // are absent from both the checkout (untracked) and the workspace
+            // (the framework ships only `specrails/`), so without this the claude
+            // CLI reports `Unknown command: /opsx:ff` inside isolated rails.
+            overlayFallbackRoots = [baseRepo];
+        }
     }
     catch { /* legacy fallback */ }
     let overlayProviderDir = '.claude';
@@ -668,6 +676,7 @@ async function launchIsolatedRail(input, io = {}) {
                             const res = overlay({
                                 worktreePath: handle.worktreePath,
                                 sourceRoot: overlaySourceRoot,
+                                fallbackSourceRoots: overlayFallbackRoots,
                                 providerDir: overlayProviderDir,
                                 instructionsFilename: overlayInstructions,
                             });
@@ -847,6 +856,7 @@ async function launchIsolatedRail(input, io = {}) {
             a.overlayCleanupEvidence = (0, worktree_overlay_1.revalidateOverlayCleanupEvidence)({
                 worktreePath: a.handle.worktreePath,
                 sourceRoot: overlaySourceRoot,
+                fallbackSourceRoots: overlayFallbackRoots,
                 providerDir: overlayProviderDir,
                 instructionsFilename: overlayInstructions,
             }, a.overlayCleanupEvidence);

package/server/dist/setup-manager.js

@@ -26,8 +26,8 @@ const crypto_1 = require("crypto");
 const artifact_registry_1 = require("./artifact-registry");
 const install_config_path_1 = require("./install-config-path");
 const bundled_core_1 = require("./bundled-core");
-const bundled_openspec_1 = require("./bundled-openspec");
 const path_resolver_1 = require("./path-resolver");
+const offline_assemble_1 = require("./offline-assemble");
 const framework_manager_1 = require("./framework-manager");
 const workspace_resolution_1 = require("./workspace-resolution");
 /**
@@ -90,58 +90,10 @@ function spawnCoreInit(args, cwd) {
         stdio: ['ignore', 'pipe', 'pipe'],
     });
 }
-/**
- * Spawn the BUNDLED specrails-core `init` (offline framework + assemble; openspec
- * is the only network step). Runs `node <bundled-cli> init <args>` with
- * `SPECRAILS_CORE_SCRIPT_DIR` pointed at the bundle so core's template/command
- * sources resolve from the app bundle, NOT a global install or npm registry. The
- * framework was already materialized by FrameworkManager.materialize() (idempotent
- * — core's ensureFramework skips re-materialization), so this call only assembles
- * the workspace by symlink + runs openspec init.
- *
- * Returns null when no bundled core is present (caller falls back to spawnCoreInit).
- */
-function spawnBundledCoreInit(args, cwd) {
-    const cli = (0, bundled_core_1.getBundledCoreCli)();
-    const coreRoot = (0, bundled_core_1.getBundledCoreRoot)();
-    if (!cli || !coreRoot)
-        return null;
-    const fullArgs = [cli, 'init', ...args];
-    // Force RELOCATION (core installs in-repo by default; the desktop keeps the
-    // user's repo pristine + manages the spawn cwd). See spawnCoreInit.
-    const env = { ...(0, win_spawn_1.windowsSpawnEnv)(), SPECRAILS_CORE_SCRIPT_DIR: coreRoot, SPECRAILS_RELOCATE: '1' };
-    // Bundled openspec (offline) — the LAST network step of project-add. When the
-    // app ships @fission-ai/openspec, point specrails-core's `installOpenSpecProject`
-    // at the bundled CLI and the SAME node we run the bundled core with. Tauri
-    // strips exec bits from bundled resources and the openspec CLI is a node script,
-    // so it MUST be invoked as `node <cli> init …` — hence we set BOTH the BIN and
-    // the NODE env (specrails-core's buildOpenSpecInvocation form 1). When absent we
-    // leave them unset → core falls back to `npx @fission-ai/openspec` (still works
-    // online). Bundled core + bundled openspec ⇒ project-add is FULLY OFFLINE.
-    const openspecCli = (0, bundled_openspec_1.getBundledOpenspecCli)();
-    if (openspecCli) {
-        env.SPECRAILS_OPENSPEC_BIN = openspecCli;
-        // Core runs openspec as `<node> <cli> init …`. SPECRAILS_OPENSPEC_NODE MUST be
-        // a REAL node executable — NOT process.execPath (the packaged `specrails-server`
-        // pkg binary), which cannot run openspec's ESM CLI and made `openspec init`
-        // exit with code -1 (→ core throws InstallerError code 50, setup fails). Prefer
-        // the bundled Node; fall back to `node` on PATH (resolveStartupPath prepends the
-        // bundled node bin in desktop mode, so PATH `node` is the bundled node too).
-        env.SPECRAILS_OPENSPEC_NODE = (0, path_resolver_1.resolveBundledNodeExe)() ?? 'node';
-    }
-    // Run the core CLI with the REAL bundled node — NOT process.execPath, which in
-    // the packaged app is the `specrails-server` pkg binary and would re-launch the
-    // server instead of running cli.js (same trap as SPECRAILS_OPENSPEC_NODE above).
-    // Fall back to process.execPath only in dev/tests where it IS node.
-    const nodeBin = (0, path_resolver_1.resolveBundledNodeExe)() ?? process.execPath;
-    console.log(`[SetupManager] spawning BUNDLED core: ${nodeBin} ${fullArgs.join(' ')} (cwd=${cwd})` +
-        (openspecCli ? ' [bundled openspec: offline]' : ' [openspec: npx fallback]'));
-    return (0, win_spawn_1.spawnCli)(nodeBin, fullArgs, {
-        cwd,
-        env,
-        stdio: ['ignore', 'pipe', 'pipe'],
-    });
-}
+// The bundled-core `init` spawn primitive is shared with the Project Builder's
+// orchestrated commit (extract-don't-fork, add-project-builder D4) — the wizard
+// keeps its streaming/phase shell and npx fallback around it.
+// (Imported: spawnBundledCoreInit from ./offline-assemble.)
 // H19: hard cap on the runtime probe. `npx --yes --prefer-online
 // <CORE_PACKAGE_SPEC> version` does a network round-trip to the npm
 // registry, and spawnSync blocks the single event loop — without a timeout a
@@ -867,7 +819,7 @@ class SetupManager {
         }
         // Bundled core (offline, node <cli> init) when available, else legacy npx.
         const child = useBundledCore
-            ? spawnBundledCoreInit(initArgs, projectPath)
+            ? (0, offline_assemble_1.spawnBundledCoreInit)(initArgs, projectPath)
             : spawnCoreInit(initArgs, projectPath);
         this._installProcesses.set(projectId, child);
         this._installLogBuffer.set(projectId, diagHeader);

package/server/dist/spec-models.js

@@ -11,6 +11,9 @@ exports.CLAUDE_MODELS = [
     { value: 'haiku', label: 'Claude Haiku' },
 ];
 exports.CODEX_MODELS = [
+    { value: 'gpt-5.6-sol', label: 'GPT-5.6 Sol' },
+    { value: 'gpt-5.6-terra', label: 'GPT-5.6 Terra' },
+    { value: 'gpt-5.6-luna', label: 'GPT-5.6 Luna' },
     { value: 'gpt-5.5', label: 'GPT-5.5' },
     { value: 'gpt-5.4', label: 'GPT-5.4' },
     { value: 'gpt-5.4-mini', label: 'GPT-5.4 Mini' },

package/server/dist/workspace-manager.js

@@ -99,7 +99,9 @@ function ensureFrameworkAgents(workspaceDir, providerDir, home) {
 }
 /** The framework subtrees `assemble` installs as a single DIR-symlink into
  *  `current/<provider>/` (unlike agents, which are per-file). `/specrails:*`
- *  and `/opsx:*` slash commands live under `commands/`. */
+ *  slash commands live under `commands/`. (`/opsx:*` is NOT framework — the
+ *  external OpenSpec binary installs it into the REPO's provider dir; isolated
+ *  rails receive it via the worktree overlay's repo fallback root.) */
 const DIR_LINKED_SUBTREES = ['commands', 'skills', 'rules'];
 /**
  * Windows repair for the DIR-symlinked framework subtrees (`commands`, `skills`,