specrails-desktop 2.30.2 → 2.31.0

package/server/dist/blueprint-router.js

@@ -4,6 +4,7 @@ exports.isProjectBuilderEnabled = isProjectBuilderEnabled;
 exports.createBlueprintRouter = createBlueprintRouter;
 const express_1 = require("express");
 const providers_1 = require("./providers");
+const runtime_1 = require("./providers/runtime");
 const blueprint_store_1 = require("./blueprint-store");
 function isProjectBuilderEnabled() {
     return process.env.SPECRAILS_PROJECT_BUILDER !== 'false';
@@ -32,11 +33,19 @@ function createBlueprintRouter(deps) {
     router.get('/models', (req, res) => {
         const provider = validProvider(req.query.provider) ?? 'claude';
         const adapter = (0, providers_1.getAdapter)(provider);
+        const toolPolicy = (0, runtime_1.pureOutputToolPolicy)(adapter);
+        const requestedModel = typeof req.query.model === 'string' && req.query.model
+            ? req.query.model
+            : null;
+        const model = requestedModel ?? adapter.defaultModel();
         res.json({
             provider,
-            models: adapter.modelCatalog(),
-            defaultModel: adapter.defaultModel(),
-            efforts: adapter.capabilities.reasoningEfforts ?? [],
+            available: toolPolicy !== null,
+            toolPolicy,
+            models: toolPolicy ? adapter.modelCatalog() : [],
+            defaultModel: toolPolicy ? adapter.defaultModel() : null,
+            model,
+            efforts: toolPolicy ? (0, providers_1.reasoningEffortsForModel)(adapter, model) : [],
         });
     });
     router.get('/conversations', (_req, res) => {
@@ -45,6 +54,10 @@ function createBlueprintRouter(deps) {
     router.post('/conversations', (req, res) => {
         const body = (req.body ?? {});
         const provider = validProvider(body.provider) ?? 'claude';
+        if (!(0, runtime_1.pureOutputToolPolicy)((0, providers_1.getAdapter)(provider))) {
+            res.status(409).json({ error: 'provider_tool_policy_unsupported', provider });
+            return;
+        }
         const model = typeof body.model === 'string' && body.model ? body.model : null;
         const conversation = (0, blueprint_store_1.createBlueprintConversation)(desktopDb, { provider, model });
         res.status(201).json({ conversation });
@@ -71,6 +84,10 @@ function createBlueprintRouter(deps) {
                 res.status(400).json({ error: 'invalid provider' });
                 return;
             }
+            if (!(0, runtime_1.pureOutputToolPolicy)((0, providers_1.getAdapter)(provider))) {
+                res.status(409).json({ error: 'provider_tool_policy_unsupported', provider });
+                return;
+            }
             patch.provider = provider;
             if (provider !== conversation.provider) {
                 // A session id is provider-local; a switch must reset it and the model.
@@ -85,8 +102,7 @@ function createBlueprintRouter(deps) {
             }
             const effectiveProvider = patch.provider ?? conversation.provider;
             if (typeof body.model === 'string' && body.model) {
-                const valid = new Set((0, providers_1.getAdapter)(effectiveProvider).modelCatalog().map((m) => m.value));
-                if (!valid.has(body.model)) {
+                if (!(0, providers_1.isModelAvailableForAdapter)((0, providers_1.getAdapter)(effectiveProvider), body.model)) {
                     res.status(400).json({ error: 'model not in provider catalog' });
                     return;
                 }
@@ -132,10 +148,28 @@ function createBlueprintRouter(deps) {
             res.status(409).json({ error: 'a turn is already streaming' });
             return;
         }
+        const adapter = (0, providers_1.getAdapter)(conversation.provider);
+        if (!(0, runtime_1.pureOutputToolPolicy)(adapter)) {
+            res.status(409).json({
+                error: 'provider_tool_policy_unsupported',
+                provider: conversation.provider,
+            });
+            return;
+        }
+        if (body.model !== undefined
+            && body.model !== null
+            && !(0, providers_1.isModelAvailableForAdapter)(adapter, body.model)) {
+            res.status(400).json({ error: 'model not in provider catalog' });
+            return;
+        }
         const model = typeof body.model === 'string' && body.model ? body.model : undefined;
+        const effectiveModel = model
+            ?? (conversation.model && (0, providers_1.isModelAvailableForAdapter)(adapter, conversation.model)
+                ? conversation.model
+                : adapter.defaultModel());
         let reasoningEffort;
         if (body.reasoning_effort !== undefined) {
-            const allowedEfforts = (0, providers_1.getAdapter)(conversation.provider).capabilities.reasoningEfforts ?? [];
+            const allowedEfforts = (0, providers_1.reasoningEffortsForModel)(adapter, effectiveModel);
             if (typeof body.reasoning_effort !== 'string'
                 || !allowedEfforts.includes(body.reasoning_effort)) {
                 res.status(400).json({ error: 'reasoning effort not in provider catalog' });

package/server/dist/chat-manager.js

@@ -17,6 +17,7 @@ const crypto_1 = require("crypto");
 const spec_draft_parser_1 = require("./spec-draft-parser");
 const attachment_manager_1 = require("./attachment-manager");
 const providers_1 = require("./providers");
+const runtime_1 = require("./providers/runtime");
 const context_scope_1 = require("./context-scope");
 const user_mcp_config_1 = require("./user-mcp-config");
 const binary_probe_1 = require("./binary-probe");
@@ -24,6 +25,7 @@ const explore_stdin_session_1 = require("./explore-stdin-session");
 const workspace_resolution_1 = require("./workspace-resolution");
 const workspace_manager_1 = require("./workspace-manager");
 const blueprint_render_1 = require("./blueprint-render");
+const explore_draft_title_1 = require("./explore-draft-title");
 const COMMAND_INSTRUCTION = 'When you want to suggest a SpecRails command for the user to execute, wrap it in a command block like this: ' +
     ':::command\n/specrails:implement #42\n::: ' +
     'The user will be prompted to confirm before the command runs.';
@@ -607,6 +609,12 @@ class ChatManager {
             const successRate = stats.totalJobs > 0
                 ? Math.round(((stats.totalJobs - stats.failedJobs) / stats.totalJobs) * 100)
                 : null;
+            const totalCost = stats.unpricedRuns > 0 && stats.pricedRuns === 0
+                ? 'unavailable'
+                : `${stats.unpricedRuns > 0 ? 'at least ' : ''}$${stats.totalCostUsd.toFixed(3)}`;
+            const todayCost = stats.unpricedTodayRuns > 0 && stats.pricedTodayRuns === 0
+                ? 'unavailable'
+                : `${stats.unpricedTodayRuns > 0 ? 'at least ' : ''}$${stats.costToday.toFixed(3)}`;
             return (`## Current Dashboard Context\n\n` +
                 `### Active Job\n${activeLine}\n\n` +
                 (jobLines.length > 0 ? `### Recent Jobs\n${jobLines.join('\n')}\n\n` : '') +
@@ -614,8 +622,8 @@ class ChatManager {
                 `- Total jobs: ${stats.totalJobs}\n` +
                 `- Jobs today: ${stats.jobsToday}\n` +
                 (successRate != null ? `- Overall success rate: ${successRate}%\n` : '') +
-                `- Total cost: $${stats.totalCostUsd.toFixed(3)}\n` +
-                `- Cost today: $${stats.costToday.toFixed(3)}`);
+                `- Total cost: ${totalCost}\n` +
+                `- Cost today: ${todayCost}`);
         }
         catch {
             // Context is best-effort; fall back gracefully
@@ -781,6 +789,15 @@ class ChatManager {
         // provider wins; null/legacy conversations fall back to the project
         // primary (this._adapter). Resolved once and used for the whole turn.
         const adapter = this._adapterForConversation(conversation);
+        if (conversation.kind === 'milestone' && !(0, runtime_1.supportsToolPolicy)(adapter, 'read-only')) {
+            this._broadcast({
+                type: 'chat_error',
+                conversationId,
+                error: 'provider_tool_policy_unsupported',
+                timestamp: new Date().toISOString(),
+            });
+            return;
+        }
         if (!(0, binary_probe_1.binaryOnPath)(adapter.binary)) {
             this._broadcast({
                 type: 'chat_error',
@@ -824,19 +841,57 @@ class ChatManager {
                 role: 'user',
                 content: userText,
             });
-            // Resolve slash commands (e.g. /specrails:propose-spec → prompt content)
-            let resolvedText = (0, command_resolver_1.resolveCommand)(userText, this._cwd ?? process.cwd());
+            const lightweight = options?.lightweight ?? false;
+            const conversationScope = this._resolveConversationScope(conversation);
+            const spawnCwd = this._resolveSpawnCwd(conversation.kind, conversationScope, adapter.id);
+            // Kimi print mode does not run the TUI slash-command interceptor. Resolve
+            // its project skill before the generic `.claude/commands` fallback can fold
+            // provider-incompatible content. Other adapters retain the legacy resolver.
+            const isDesktopExploreDraftCommand = /^\/specrails:explore-spec(?:\s|$)/.test(userText);
+            let resolvedText;
+            try {
+                resolvedText = adapter.capabilities.materializeHeadlessSkills
+                    && !isDesktopExploreDraftCommand
+                    ? (0, runtime_1.formatProviderCommand)(adapter, userText, spawnCwd, conversation.session_id ?? undefined)
+                    : (0, command_resolver_1.resolveCommand)(userText, this._cwd ?? process.cwd());
+            }
+            catch (err) {
+                // Headless skill resolution is deliberately fail-closed (sending the
+                // unresolved slash text to Kimi print mode would silently do the wrong
+                // thing), but this happens after an Explore slot is claimed. Surface an
+                // actionable chat error and release the slot just like a terminal child
+                // instead of leaving the conversation permanently marked as streaming.
+                if (conversation.kind === 'explore') {
+                    const life = this._exploreLifecycle.get(conversationId);
+                    if (life) {
+                        life.isStreaming = false;
+                        life.lastActivityAt = Date.now();
+                        if (life.isMinimized)
+                            this._startIdleTimer(conversationId);
+                    }
+                    this._drainExploreQueue();
+                }
+                this._broadcast({
+                    type: 'chat_error',
+                    conversationId,
+                    error: err instanceof Error ? err.message : String(err),
+                    timestamp: new Date().toISOString(),
+                });
+                return;
+            }
             // Fold attachments into the prompt as <user-attachment> text blocks under
             // an "## Attached Resources" section, mirroring how /generate-spec wires
             // them. Errors during extraction are logged and skipped — the chat turn
             // proceeds without that attachment rather than failing.
             let hasAttachments = false;
+            let attachmentImagePaths = [];
             if (options?.attachments && options.attachments.ids.length > 0) {
                 try {
                     const attachmentResult = await this._awaitWhileLive(attachment_manager_1.attachmentManager.getClaudeArgs(options.attachments.slug, options.attachments.ticketKey, options.attachments.ids));
                     if (attachmentResult.disposed)
                         return;
-                    const { textBlocks } = attachmentResult.value;
+                    const { textBlocks, imagePaths } = attachmentResult.value;
+                    attachmentImagePaths = imagePaths;
                     if (textBlocks.length > 0) {
                         resolvedText = `${resolvedText}\n\n## Attached Resources\n\n${textBlocks.join('\n\n')}`;
                         hasAttachments = true;
@@ -853,8 +908,6 @@ class ChatManager {
             // Build spawn args via the resolved adapter. System prompt placement
             // (--system-prompt flag vs prompt-fold) and resume vs fresh-turn are both
             // adapter-driven via capability flags.
-            const lightweight = options?.lightweight ?? false;
-            const conversationScope = this._resolveConversationScope(conversation);
             let systemPrompt = conversation.kind === 'milestone'
                 ? this._buildMilestoneSystemPrompt(conversation)
                 : lightweight
@@ -863,7 +916,10 @@ class ChatManager {
             if (hasAttachments)
                 systemPrompt = `${systemPrompt}\n\n${attachment_manager_1.USER_ATTACHMENT_SYSTEM_NOTE}`;
             const binary = adapter.binary;
-            const model = conversation.model || adapter.defaultModel();
+            const requestedModel = conversation.model;
+            const model = requestedModel && (0, providers_1.isModelAvailableForAdapter)(adapter, requestedModel)
+                ? requestedModel
+                : adapter.defaultModel();
             const action = conversation.session_id && adapter.capabilities.nativeResume
                 ? 'chat-resume'
                 : 'chat-turn';
@@ -921,23 +977,34 @@ class ChatManager {
                             `## User turn\n\n${resolvedText}`;
                 }
             }
+            const foldProjectChatSystemPrompt = !adapter.capabilities.systemPromptArg &&
+                adapter.capabilities.foldProjectChatSystemPrompt === true;
             // Sidebar turns: the volatile dashboard snapshot lives in the user turn
             // (not --system-prompt) so the cacheable system-prompt prefix stays
             // byte-stable across turns — same pattern as the codex scoped-context
-            // prepend above. Gated on systemPromptArg: adapters without it (codex)
-            // drop the system prompt for chat turns entirely (argv stays
-            // user-text-only by design), so they never saw the dashboard block and
-            // must not start receiving it here.
-            if (!lightweight && adapter.capabilities.systemPromptArg) {
+            // prepend above. Kimi explicitly requests the same dynamic context through
+            // a folded prompt; Codex/Gemini keep their cwd-instruction-file contract.
+            if (!lightweight && (adapter.capabilities.systemPromptArg || foldProjectChatSystemPrompt)) {
                 const dashboardContext = this._buildDashboardContextBlock();
                 if (dashboardContext) {
                     promptForAdapter = `${dashboardContext}\n\n## User turn\n\n${promptForAdapter}`;
                 }
             }
+            // Kimi prompt mode has no native system-prompt argument. Fold the stable
+            // sidebar contract exactly once here, after adding volatile dashboard
+            // context. Explore is intentionally excluded: its isolated cwd already
+            // contains provider-native AGENTS.md framing, while the scoped project
+            // context above remains per-turn. Milestone already folded its complete
+            // contract earlier in this function.
+            if (foldProjectChatSystemPrompt &&
+                conversation.kind !== 'explore' &&
+                conversation.kind !== 'milestone') {
+                promptForAdapter = `${systemPrompt}\n\n---\n\n${promptForAdapter}`;
+            }
             const buildRecoveryPrompt = () => buildResumeRecoveryPrompt((0, db_1.getMessages)(this._db, conversationId)
                 .filter((message) => message.id !== persistedUserMessage.id)
                 .map((message) => ({ role: message.role, content: message.content })), promptForAdapter);
-            let args = adapter.buildArgs(action, {
+            const turnOptions = {
                 prompt: promptForAdapter,
                 systemPrompt,
                 model,
@@ -952,14 +1019,15 @@ class ChatManager {
                 // plugin, and connector MCP servers — which require the `user` setting
                 // source. Claude-only (codex reads ~/.codex natively, ignores this).
                 loadUserEnv: adapter.id === 'claude' && !!conversationScope?.userMcp,
-            });
+                imagePaths: adapter.capabilities.supportsImageInput ? attachmentImagePaths : undefined,
+            };
+            let args = adapter.buildArgs(action, turnOptions);
             if (conversationScope) {
                 console.log(`[chat-manager] scope=${JSON.stringify(conversationScope)} flags=${scopeFlags.join(' ')} promptBytes=${Buffer.byteLength(systemPrompt)}`);
             }
             // No OTEL env injection here — ChatManager spawns are interactive user sessions,
             // not pipeline jobs. Telemetry is scoped to QueueManager pipeline runs only.
             // spawnAiCli reroutes multi-line argv values through stdin on Windows.
-            const spawnCwd = this._resolveSpawnCwd(conversation.kind, conversationScope, adapter.id);
             // Relocate-artifacts env for gated spawns: NON-explore (sidebar) turns, and
             // Explore turns with `contextScope.mcp` (they spawn from the workspace when
             // relocated — see `_resolveSpawnCwd`; the env makes the workspace's
@@ -979,6 +1047,7 @@ class ChatManager {
                         spawnEnv = { ...spawnEnv, GEMINI_CLI_TRUST_WORKSPACE: 'true' };
                 }
             }
+            spawnEnv = (0, runtime_1.buildProviderEnv)(adapter, turnOptions, spawnEnv);
             const allowMissingSessionRecovery = adapter.id === 'claude' &&
                 conversation.kind === 'explore' &&
                 exploreMcp &&
@@ -1085,42 +1154,30 @@ class ChatManager {
             const readerHandler = (line) => {
                 if (this._disposed)
                     return;
-                const ev = adapter.parseStreamLine(line);
-                if (!ev)
-                    return;
-                adapterEvents.push(ev);
-                switch (ev.kind) {
-                    case 'text-delta':
-                        emitDelta(ev.text);
-                        break;
-                    case 'session-started':
-                        // Last-wins: Claude rotates session ids across --resume, and only the
-                        // id present at result-time is persisted on disk. Capturing the first
-                        // one leaves DB with a ghost id that fails the next --resume.
-                        if (ev.sessionId)
-                            capturedSessionId = ev.sessionId;
-                        break;
-                    case 'result':
-                        sawResult = true;
-                        // Claude's result event carries the canonical (post-rotation)
-                        // session_id; codex captures from thread.started but mirroring here
-                        // is harmless.
-                        {
+                for (const ev of (0, runtime_1.parseStreamEvents)(adapter, line)) {
+                    adapterEvents.push(ev);
+                    switch (ev.kind) {
+                        case 'text-delta':
+                            emitDelta(ev.text);
+                            break;
+                        case 'session-started':
+                            if (ev.sessionId)
+                                capturedSessionId = ev.sessionId;
+                            break;
+                        case 'result': {
+                            sawResult = true;
                             const sid = ev.payload.session_id;
                             if (sid)
                                 capturedSessionId = sid;
+                            break;
                         }
-                        break;
-                    case 'error':
-                        // Capture the provider's explicit failure reason. Last-wins (codex
-                        // emits `error` then `turn.failed`, both carrying the same message).
-                        capturedErrorMessage = ev.message;
-                        break;
-                    case 'tool-use':
-                    case 'other':
-                        // No-op for ChatManager — adapter parses tool_use into the unified
-                        // event shape but the chat UI does not currently surface them.
-                        break;
+                        case 'error':
+                            capturedErrorMessage = ev.message;
+                            break;
+                        case 'tool-use':
+                        case 'other':
+                            break;
+                    }
                 }
             };
             stdoutReader.on('line', readerHandler);
@@ -1440,7 +1497,7 @@ class ChatManager {
                     // AND sidebar (surface='chat-sidebar') turns — see _recordChatInvocation.
                     const invStatus = wasAborting
                         ? 'aborted'
-                        : code === 0
+                        : code === 0 && !capturedErrorMessage
                             ? 'success'
                             : 'failed';
                     this._recordChatInvocation({
@@ -1457,7 +1514,7 @@ class ChatManager {
                         complete();
                         return;
                     }
-                    if (code === 0) {
+                    if (code === 0 && !capturedErrorMessage) {
                         // Parse out any spec-draft fenced blocks (Explore Spec protocol).
                         // No-op for non-Explore conversations (parser pre-checks for the fence
                         // marker and returns the original text unchanged).
@@ -1603,8 +1660,10 @@ class ChatManager {
             if (!this._projectId)
                 return;
             try {
+                const finishedAt = new Date().toISOString();
                 const { result, estimated } = (0, result_event_1.finaliseInvocationResult)(adapter, adapterEvents, {
                     fallbackModel: model,
+                    durationMs: Math.max(0, Date.parse(finishedAt) - Date.parse(turnStartedAt)),
                 });
                 // MED-1: the persistent-stdin transport reuses ONE long-lived child for
                 // the whole session, so claude's `result` event reports
@@ -1646,7 +1705,7 @@ class ChatManager {
                     conversation_id: conversationId,
                     status,
                     started_at: turnStartedAt,
-                    finished_at: new Date().toISOString(),
+                    finished_at: finishedAt,
                     total_cost_usd_estimated: estimated,
                     // Non-cumulative fields (model, durations, session_id) pass through.
                     ...result,
@@ -1843,33 +1902,31 @@ class ChatManager {
             const onLine = (line) => {
                 if (this._disposed || settled)
                     return;
-                const ev = adapter.parseStreamLine(line);
-                if (!ev)
-                    return;
-                adapterEvents.push(ev);
-                switch (ev.kind) {
-                    case 'text-delta':
-                        emitDelta(ev.text);
-                        break;
-                    case 'session-started':
-                        if (ev.sessionId)
-                            capturedSessionId = ev.sessionId;
-                        break;
-                    case 'result': {
-                        const payload = ev.payload;
-                        if (recoverMissingSession(isMissingClaudeSessionErrorResult(payload) ? payload : null))
+                for (const ev of (0, runtime_1.parseStreamEvents)(adapter, line)) {
+                    adapterEvents.push(ev);
+                    switch (ev.kind) {
+                        case 'text-delta':
+                            emitDelta(ev.text);
+                            break;
+                        case 'session-started':
+                            if (ev.sessionId)
+                                capturedSessionId = ev.sessionId;
+                            break;
+                        case 'result': {
+                            const payload = ev.payload;
+                            if (recoverMissingSession(isMissingClaudeSessionErrorResult(payload) ? payload : null))
+                                break;
+                            if (payload.session_id)
+                                capturedSessionId = payload.session_id;
+                            resultIsError =
+                                payload.is_error === true ||
+                                    (typeof payload.subtype === 'string' && payload.subtype.startsWith('error'));
+                            finishTurn();
+                            break;
+                        }
+                        default:
                             break;
-                        if (payload.session_id)
-                            capturedSessionId = payload.session_id;
-                        // LOW-7: detect a failed turn reported through the result frame.
-                        resultIsError =
-                            payload.is_error === true ||
-                                (typeof payload.subtype === 'string' && payload.subtype.startsWith('error'));
-                        finishTurn();
-                        break;
                     }
-                    default:
-                        break;
                 }
             };
             this._stdinSessions.setHandlers(conversationId, {
@@ -2022,8 +2079,10 @@ class ChatManager {
         // 'explore-spec' — no new surface value (analytics guardrail).
         const surface = opts.kind === 'explore' || opts.kind === 'milestone' ? 'explore-spec' : 'chat-sidebar';
         try {
+            const finishedAt = new Date().toISOString();
             const { result, estimated } = (0, result_event_1.finaliseInvocationResult)(opts.adapter, opts.events, {
                 fallbackModel: opts.model,
+                durationMs: Math.max(0, Date.parse(finishedAt) - Date.parse(opts.startedAt)),
             });
             (0, ai_invocations_1.recordInvocation)(this._db, {
                 id: (0, crypto_1.randomUUID)(),
@@ -2034,7 +2093,7 @@ class ChatManager {
                 conversation_id: opts.conversationId,
                 status: opts.status,
                 started_at: opts.startedAt,
-                finished_at: new Date().toISOString(),
+                finished_at: finishedAt,
                 total_cost_usd_estimated: estimated,
                 ...result,
             });
@@ -2051,14 +2110,33 @@ class ChatManager {
             // Title generation runs on the conversation's own provider.
             const conv = (0, db_1.getConversation)(this._db, conversationId);
             const adapter = this._adapterForConversation(conv ?? {});
+            const toolPolicy = (0, runtime_1.pureOutputToolPolicy)(adapter);
+            if (!toolPolicy) {
+                // Kimi `-p` forces automatic tool approval, so it cannot safely run a
+                // pure-output title turn. Preserve the user-facing feature with the
+                // same deterministic, local fallback used by Agent Chat.
+                const title = (0, explore_draft_title_1.generateAutoTitle)([{ role: 'user', content: firstUserMsg }]);
+                if (title) {
+                    (0, db_1.updateConversation)(this._db, conversationId, { title });
+                    this._broadcast({
+                        type: 'chat_title_update',
+                        conversationId,
+                        title,
+                        timestamp: new Date().toISOString(),
+                    });
+                }
+                return;
+            }
             const titlePrompt = `Generate a 4-6 word title for this conversation. Output ONLY the title text, no quotes or punctuation.\n\n` +
                 `User: ${firstUserMsg.slice(0, 200)}\nAssistant: ${firstResponse.slice(0, 300)}`;
-            const args = adapter.buildArgs('auto-title', {
+            const titleOptions = {
                 prompt: titlePrompt,
                 model: adapter.defaultModel(),
-            });
+                toolPolicy,
+            };
+            const args = adapter.buildArgs('auto-title', titleOptions);
             const child = this._spawnOwned(adapter.binary, args, {
-                env: process.env,
+                env: (0, runtime_1.buildProviderEnv)(adapter, titleOptions),
                 stdio: ['ignore', 'pipe', 'pipe'],
                 cwd: this._cwd,
             });
@@ -2078,15 +2156,13 @@ class ChatManager {
             reader.on('line', (line) => {
                 if (this._disposed)
                     return;
-                const ev = adapter.parseStreamLine(line);
-                if (!ev)
-                    return;
-                titleEvents.push(ev);
-                // Keep the FIRST non-empty text-delta as the title (unchanged behaviour).
-                if (!titleText && ev.kind === 'text-delta') {
-                    const trimmed = ev.text.trim();
-                    if (trimmed)
-                        titleText = trimmed;
+                for (const ev of (0, runtime_1.parseStreamEvents)(adapter, line)) {
+                    titleEvents.push(ev);
+                    if (!titleText && ev.kind === 'text-delta') {
+                        const trimmed = ev.text.trim();
+                        if (trimmed)
+                            titleText = trimmed;
+                    }
                 }
             });
             child.on('error', () => {

package/server/dist/code-explorer-router.js

@@ -13,6 +13,7 @@ const build_dirs_1 = require("./build-dirs");
 const file_provenance_1 = require("./file-provenance");
 const file_summary_manager_1 = require("./file-summary-manager");
 const file_story_1 = require("./file-story");
+const providers_1 = require("./providers");
 const MAX_TREE_PAGE = 2000;
 const MAX_FILE_BYTES = 2 * 1024 * 1024;
 const BINARY_PROBE_BYTES = 8 * 1024;
@@ -346,6 +347,18 @@ function createCodeExplorerRouter(deps) {
     const listByTicket = deps.listProvenanceByTicket ?? file_provenance_1.listProvenanceByTicket;
     // Summary OUTPUT root (workspace when relocated). Source reads use projectPath.
     const summaryRoot = () => deps.resolveSummaryRoot?.() ?? deps.projectPath;
+    const aiTransformProvider = deps.aiTransformProvider;
+    const aiTransformsAvailable = (0, providers_1.pureOutputToolPolicy)((0, providers_1.getAdapter)(aiTransformProvider)) !== null;
+    function requireAiTransforms(res) {
+        if (aiTransformsAvailable)
+            return true;
+        res.status(409).json({
+            error: 'provider_tool_policy_unsupported',
+            provider: aiTransformProvider,
+            requiredPolicy: 'pure-output',
+        });
+        return false;
+    }
     // Short-TTL per-project cache so paginating a large `all` tree reuses ONE
     // synchronous filesystem walk instead of re-walking (and re-statting) on every
     // page — the cursor only slices an already-materialized array. Also caches the
@@ -375,14 +388,16 @@ function createCodeExplorerRouter(deps) {
             res.status(404).end();
             return;
         }
-        // Lazily attach the file-summary watcher on first Code-Explorer use. It is
-        // not attached at registry load (that recursive watcher caused the fd leak
-        // that broke terminals); attachWatcher is idempotent, so this is cheap on
-        // every subsequent request.
-        try {
-            deps.fileSummaryManager.attachWatcher(deps.projectId, deps.projectPath, summaryRoot());
+        // Lazily attach the file-summary watcher on first Code-Explorer use. A
+        // provider without a native pure-output boundary must not attach it:
+        // implicit file-change work and explicit POSTs both fail closed before a
+        // manager or provider process can run.
+        if (aiTransformsAvailable) {
+            try {
+                deps.fileSummaryManager.attachWatcher(deps.projectId, deps.projectPath, summaryRoot());
+            }
+            catch { /* non-fatal */ }
         }
-        catch { /* non-fatal */ }
         next();
     });
     router.get('/tree', (req, res) => {
@@ -694,6 +709,8 @@ function createCodeExplorerRouter(deps) {
     // turn; the file.story_updated WS event fires too so other open viewers of
     // the same file refresh.
     router.post('/file/story/explain', async (req, res) => {
+        if (!requireAiTransforms(res))
+            return;
         const relRaw = req.query.path;
         if (!relRaw || typeof relRaw !== 'string') {
             res.status(400).json({ error: 'path query parameter is required' });
@@ -754,6 +771,8 @@ function createCodeExplorerRouter(deps) {
         }
     });
     router.post('/file/regenerate-summary', async (req, res) => {
+        if (!requireAiTransforms(res))
+            return;
         const relRaw = req.query.path;
         if (!relRaw || typeof relRaw !== 'string') {
             res.status(400).json({ error: 'path query parameter is required' });