specrails-desktop 2.30.2 → 2.31.0

package/server/dist/project-router-tickets.js

@@ -50,6 +50,7 @@ const explore_smash_1 = require("./explore-smash");
 const ai_invocations_1 = require("./ai-invocations");
 const context_scope_1 = require("./context-scope");
 const result_event_1 = require("./result-event");
+const runtime_1 = require("./providers/runtime");
 const crypto_1 = require("crypto");
 const spec_models_1 = require("./spec-models");
 const provider_selection_1 = require("./provider-selection");
@@ -64,6 +65,48 @@ const workspace_resolution_1 = require("./workspace-resolution");
 const multer_1 = __importDefault(require("multer"));
 const attachment_manager_1 = require("./attachment-manager");
 const project_router_helpers_1 = require("./project-router-helpers");
+/**
+ * A NULL conversation provider is the intentional single-provider encoding:
+ * it means "use this project's primary provider", never "use Claude".
+ */
+function resolveConversationProvider(context, conversationId) {
+    const conversation = (0, db_1.getConversation)(context.db, conversationId);
+    if (!conversation)
+        return null;
+    return conversation.provider ?? context.project.provider ?? 'claude';
+}
+/**
+ * Resolve a ticket-bound structured action without silently changing engines.
+ * An origin conversation owns the action provider because its session/model
+ * state is provider-specific. Explicit requests may confirm that provider but
+ * cannot replace it; missing/stale origins fail closed.
+ */
+function resolveTicketBoundProvider(context, ticket, requested) {
+    const requestedCheck = (0, provider_selection_1.validateRequestedProvider)(context.project, requested);
+    if (!requestedCheck.ok) {
+        return { ok: false, status: 400, error: requestedCheck.error };
+    }
+    if (!ticket.origin_conversation_id) {
+        return { ok: true, provider: requestedCheck.provider };
+    }
+    const originProvider = resolveConversationProvider(context, ticket.origin_conversation_id);
+    if (!originProvider) {
+        return { ok: false, status: 409, error: 'ticket_origin_conversation_not_found' };
+    }
+    const originCheck = (0, provider_selection_1.validateRequestedProvider)(context.project, originProvider);
+    if (!originCheck.ok) {
+        return { ok: false, status: 409, error: originCheck.error };
+    }
+    const hasExplicitRequest = requested !== undefined && requested !== null && requested !== '';
+    if (hasExplicitRequest && requestedCheck.provider !== originCheck.provider) {
+        return {
+            ok: false,
+            status: 400,
+            error: `provider '${requestedCheck.provider}' does not match ticket origin provider '${originCheck.provider}'`,
+        };
+    }
+    return { ok: true, provider: originCheck.provider };
+}
 /**
  * Add Spec on a Jira-backed project: promote the freshly-created LOCAL ticket to
  * a Jira issue (best-effort, server-side). The per-spec `createLocal` escape
@@ -182,10 +225,12 @@ function registerTicketsRoutes(deps) {
         let hasAttachments = false;
         let baseUserPrompt = `Generate a spec for the following idea:\n\n${idea.trim()}`;
         let imageFlags = [];
+        let imagePaths = [];
         if (attachmentIds.length > 0 && pendingSpecId) {
             try {
                 const extracted = await attachment_manager_1.attachmentManager.getClaudeArgs(project.slug, pendingSpecId, attachmentIds);
                 imageFlags = extracted.imageFlags;
+                imagePaths = extracted.imagePaths;
                 if (extracted.textBlocks.length > 0) {
                     hasAttachments = true;
                     baseUserPrompt = `${baseUserPrompt}\n\n## Attached Resources\n\n${extracted.textBlocks.join('\n\n')}`;
@@ -203,9 +248,9 @@ function registerTicketsRoutes(deps) {
         // Awareness controls; Quick still keeps Contract Refine as a top-level
         // field for the refine scheduler.
         const rawScope = req.body?.contextScope;
-        // Contract Layer is Claude-only — force it off for any non-claude engine
-        // (defence-in-depth; the Quick UI hides the toggle for those).
-        const quickContractRefine = provider !== 'claude'
+        // Contract Layer is available only when the selected adapter advertises a
+        // safe structured-action implementation.
+        const quickContractRefine = (0, providers_1.getAdapter)(provider).capabilities.structuredActions !== true
             ? false
             : typeof req.body?.contractRefine === 'boolean'
                 ? req.body.contractRefine
@@ -224,6 +269,18 @@ function registerTicketsRoutes(deps) {
             contractRefine: quickContractRefine,
             userMcp: typeof rawScope?.userMcp === 'boolean' ? rawScope.userMcp : false,
         };
+        const adapter = (0, providers_1.getAdapter)(provider);
+        const quickToolPolicy = quickScope.full
+            ? ((0, runtime_1.supportsToolPolicy)(adapter, 'read-only') ? 'read-only' : null)
+            : (0, runtime_1.pureOutputToolPolicy)(adapter);
+        if (!quickToolPolicy) {
+            res.status(409).json({
+                error: 'provider_tool_policy_unsupported',
+                provider,
+                requiredPolicy: quickScope.full ? 'read-only' : 'pure-output',
+            });
+            return;
+        }
         // Persist Quick mode Contract Refine choice (per-project last value).
         (0, db_1.setQuickContractRefineLast)(ctx(req).db, quickContractRefine);
         // Relocate-artifacts: tickets read from the workspace when relocated.
@@ -278,24 +335,26 @@ function registerTicketsRoutes(deps) {
         // same way. For codex the system prompt folds into the user prompt
         // (no --system-prompt flag) and the extra Claude-only flags are ignored
         // by the codex adapter (it doesn't read extraArgs that don't apply).
-        const adapter = (0, providers_1.getAdapter)(provider);
         const toolFlags = provider === 'claude' ? (0, context_scope_1.toolFlagsForScope)(quickScope) : { args: [] };
         // Full scope grants Read/Grep/Glob. The model spends turns exploring the
         // repo before it writes the spec; 6 was too tight (a few tool calls on a
         // sparse/empty repo hit error_max_turns → exit 1 → opaque failure). 15
         // leaves comfortable headroom while --max-turns still bounds runaway loops.
         const claudeMaxTurns = quickScope.full ? 15 : (hasAttachments ? 3 : 1);
-        const args = adapter.buildArgs('spec-gen', {
+        const specGenOptions = {
             prompt: userPrompt,
             systemPrompt,
             model: resolvedModel,
+            toolPolicy: quickToolPolicy,
             maxTurns: provider === 'claude' ? claudeMaxTurns : undefined,
             extraArgs: provider === 'claude' ? [...toolFlags.args, ...imageFlags] : undefined,
             // "My approved MCPs" (scope.userMcp) loads the developer's user-scope,
             // plugin, and connector MCP servers (claude-only). Quick already spawns
             // from project.path so project `.mcp.json` is discovered without a flag.
-            loadUserEnv: provider === 'claude' && quickScope.userMcp,
-        });
+            loadUserEnv: adapter.capabilities.userMcp === true && quickScope.userMcp,
+            imagePaths: adapter.capabilities.supportsImageInput ? imagePaths : undefined,
+        };
+        const args = adapter.buildArgs('spec-gen', specGenOptions);
         const binary = adapter.binary;
         // Relocate-artifacts gate: spawn from the workspace + SPECRAILS_REPO_DIR when
         // relocated, else cwd = project.path + process.env (byte-identical legacy).
@@ -310,7 +369,7 @@ function registerTicketsRoutes(deps) {
         // POSIX argv path unchanged.
         console.log(`[project-router] spec-gen spawn: ${binary} (cwd=${specGenExec.cwd}, requestId=${requestId})`);
         const child = (0, cli_prompt_1.spawnAiCli)(binary, args, {
-            env: specGenEnv,
+            env: (0, runtime_1.buildProviderEnv)(adapter, specGenOptions, specGenEnv),
             stdio: ['ignore', 'pipe', 'pipe'],
             cwd: specGenExec.cwd,
         });
@@ -386,80 +445,23 @@ function registerTicketsRoutes(deps) {
         stdoutReader.on('line', (line) => {
             if (!admission.isCurrent())
                 return;
-            const adapterEv = adapter.parseStreamLine(line);
-            if (adapterEv)
-                adapterEvents.push(adapterEv);
+            const eventsForLine = (0, runtime_1.parseStreamEvents)(adapter, line);
+            adapterEvents.push(...eventsForLine);
             let parsed = null;
             try {
                 parsed = JSON.parse(line);
             }
             catch { /* skip */ }
-            if (!parsed)
-                return;
-            if (provider === 'codex') {
-                // Codex `exec --json` emits one event per line. Capture the final
-                // `turn.completed` for usage extraction, and accumulate ONLY the
-                // assistant_message text — never the command_execution items or
-                // wrapper events, otherwise the raw JSONL ends up in the ticket
-                // description.
-                if (parsed.type === 'turn.completed') {
-                    lastResultEvent = parsed;
-                    return;
-                }
-                if (parsed.type !== 'item.completed')
-                    return;
-                const item = parsed.item;
-                if (!item || item.type !== 'agent_message')
-                    return;
-                const newText = (item.text ?? '').trim();
-                if (!newText)
-                    return;
-                // Each agent_message is a complete chunk — separate with a blank
-                // line so the parser regexes match cleanly across chunks.
-                buffer += (buffer.endsWith('\n') || buffer.length === 0 ? '' : '\n') + newText + '\n';
-                const msg = {
-                    type: 'spec_gen_stream', projectId, requestId,
-                    delta: newText + '\n', timestamp: new Date().toISOString(),
-                };
-                broadcast(msg);
-                return;
-            }
-            if (provider === 'claude') {
-                // Claude path.
-                if (parsed.type === 'result') {
-                    lastResultEvent = parsed;
-                }
-                if (parsed.type === 'assistant') {
-                    const msg = parsed.message;
-                    const texts = (msg?.content ?? [])
-                        .filter((c) => c.type === 'text')
-                        .map((c) => c.text ?? '');
-                    const newText = texts.join('');
-                    if (newText) {
-                        buffer += newText;
-                        const wsMsg = {
-                            type: 'spec_gen_stream', projectId, requestId,
-                            delta: newText, timestamp: new Date().toISOString(),
-                        };
-                        broadcast(wsMsg);
-                    }
-                }
-                return;
-            }
-            // Adapter-driven path (gemini + future providers): the adapter already
-            // parsed this line into a structured AdapterEvent above (`adapterEv`).
-            // Accumulate assistant text deltas into the buffer and capture the result
-            // event for usage extraction — mirrors the ai-edit endpoint's else branch.
-            // Without this, gemini (which emits `type:'message'`, not `type:'assistant'`)
-            // would never accumulate text → empty buffer → "Empty response from AI".
-            if (adapterEv?.kind === 'result') {
+            if (parsed && eventsForLine.some((event) => event.kind === 'result')) {
                 lastResultEvent = parsed;
             }
-            if (adapterEv?.kind === 'text-delta' && adapterEv.text) {
-                buffer += adapterEv.text;
+            for (const event of eventsForLine) {
+                if (event.kind !== 'text-delta' || !event.text)
+                    continue;
+                buffer += event.text;
                 const wsMsg = {
                     type: 'spec_gen_stream', projectId, requestId,
-                    delta: adapterEv.text, timestamp: new Date().toISOString(),
+                    delta: event.text, timestamp: new Date().toISOString(),
                 };
                 broadcast(wsMsg);
             }
@@ -569,14 +571,8 @@ function registerTicketsRoutes(deps) {
                     // Add Spec → Jira: promote the new ticket to a Jira issue when the
                     // project is Jira-backed (unless the user opted to keep it local).
                     void maybePromoteSpecToJira(ctx(req), created.id, req.body?.createLocal === true, broadcast);
-                    // Quick mode Contract Refine: when toggle is on in the request body
-                    // AND the project setting + kill switch permit it, fire the no-resume
-                    // Quick refine path asynchronously. Claude-only today — codex
-                    // contract refine isn't wired (the spawn hardcodes the `claude`
-                    // binary). Skip silently on codex projects so the ticket lands
-                    // without the misleading "Contract layer skipped — model_error"
-                    // toast that the refine kill-switch would otherwise emit.
-                    if (quickContractRefine && created && provider === 'claude') {
+                    // Quick mode Contract Refine runs on the same selected provider.
+                    if (quickContractRefine && created) {
                         const refineTicketId = created.id;
                         const refineTitle = created.title;
                         const refineDescription = created.description;
@@ -590,16 +586,13 @@ function registerTicketsRoutes(deps) {
                                 projectSlug: project.slug,
                                 projectPath: project.path,
                                 projectName: project.name,
+                                providerId: provider,
                                 broadcast: broadcast,
                             }, refineTicketId, refineTitle, refineDescription, refineModel).catch((err) => {
                                 console.error('[project-router] runContractRefineForQuick error:', err);
                             });
                         });
                     }
-                    else if (quickContractRefine && created && provider === 'codex') {
-                        console.log(`[project-router] quick contract refine skipped for codex project (ticket #${created.id}); ` +
-                            `feature is claude-only today`);
-                    }
                 }
                 catch (err) {
                     console.error('[project-router] generate-spec ticket creation error:', err);
@@ -1022,17 +1015,18 @@ function registerTicketsRoutes(deps) {
             // Add Spec (Explore) → Jira: promote the committed ticket to a Jira issue
             // when the project is Jira-backed (unless the user opted to keep it local).
             void maybePromoteSpecToJira(ctx(req), created.id, body.createLocal === true, broadcast);
-            // Fire Contract Refine post-commit (fire-and-forget). Toggle + kill-switch
-            // are checked inside runContractRefine. Claude-only today — codex
-            // contract refine isn't wired (the spawn hardcodes the `claude`
-            // binary). Skip silently on codex projects.
+            // Fire Contract Refine post-commit (fire-and-forget). Toggle, kill-switch,
+            // and provider capability are checked inside runContractRefine.
             // Gate on the CONVERSATION's own engine, not the project's PRIMARY
             // provider: a multi-provider project with a non-claude primary can still
             // run an Explore on the claude engine + opt into Contract Refine.
             const convoProvider = conversationId
-                ? ((0, db_1.getConversation)(ctx(req).db, conversationId)?.provider ?? 'claude')
+                ? resolveConversationProvider(ctx(req), conversationId)
                 : null;
-            if (conversationId && created && convoProvider === 'claude') {
+            if (conversationId &&
+                created &&
+                convoProvider &&
+                (0, providers_1.getAdapter)(convoProvider).capabilities.structuredActions === true) {
                 const createdTicketId = created.id;
                 const convoId = conversationId;
                 console.log(`[project-router] from-draft hook: scheduling refine ticket=${createdTicketId} conv=${convoId}`);
@@ -1043,13 +1037,16 @@ function registerTicketsRoutes(deps) {
                         projectSlug: project.slug,
                         projectPath: project.path,
                         projectName: project.name,
+                        // A NULL conversation.provider means project primary. Thread the
+                        // already-resolved value so the runner never falls back to Claude.
+                        providerId: convoProvider,
                         broadcast: broadcast,
                     }, convoId, createdTicketId).catch((err) => {
                         console.error('[project-router] runContractRefine error:', err);
                     });
                 });
             }
-            else if (conversationId && created && convoProvider && convoProvider !== 'claude') {
+            else if (conversationId && created && convoProvider) {
                 console.log(`[project-router] from-draft contract refine skipped for ${convoProvider} conversation (ticket #${created.id})`);
             }
             else if (!conversationId && draftTicketId === null && created && body.contractRefine === true) {
@@ -1065,7 +1062,8 @@ function registerTicketsRoutes(deps) {
                 const projectProviders = Array.isArray(project.providers) && project.providers.length > 0
                     ? project.providers
                     : [project.provider].filter((p) => typeof p === 'string');
-                if (projectProviders.includes('claude')) {
+                const refineProvider = projectProviders.find((id) => (0, providers_1.getAdapter)(id).capabilities.structuredActions === true);
+                if (refineProvider) {
                     const refineTicketId = created.id;
                     const refineTitle = created.title;
                     const refineDescription = created.description;
@@ -1077,6 +1075,7 @@ function registerTicketsRoutes(deps) {
                             projectSlug: project.slug,
                             projectPath: project.path,
                             projectName: project.name,
+                            providerId: refineProvider,
                             broadcast: broadcast,
                         }, refineTicketId, refineTitle, refineDescription, null).catch((err) => {
                             console.error('[project-router] from-draft runContractRefineForQuick error:', err);
@@ -1084,7 +1083,7 @@ function registerTicketsRoutes(deps) {
                     });
                 }
                 else {
-                    console.log(`[project-router] from-draft contract refine skipped (ticket #${created.id}): claude not installed on project`);
+                    console.log(`[project-router] from-draft contract refine skipped (ticket #${created.id}): no capable provider installed`);
                 }
             }
         }
@@ -1205,10 +1204,6 @@ function registerTicketsRoutes(deps) {
             res.status(409).json({ error: 'feature_disabled_by_env' });
             return;
         }
-        if (project.provider === 'codex') {
-            res.status(409).json({ error: 'contract_refine_unsupported_for_codex' });
-            return;
-        }
         // Validate the ticket exists.
         try {
             const filePath = ticketPath(req);
@@ -1218,6 +1213,16 @@ function registerTicketsRoutes(deps) {
                 res.status(404).json({ error: 'ticket not found' });
                 return;
             }
+            const refineProviderCheck = resolveTicketBoundProvider({ project, db }, ticket, req.body?.provider ?? req.body?.aiEngine);
+            if (!refineProviderCheck.ok) {
+                res.status(refineProviderCheck.status).json({ error: refineProviderCheck.error });
+                return;
+            }
+            const refineProvider = refineProviderCheck.provider;
+            if ((0, providers_1.getAdapter)(refineProvider).capabilities.structuredActions !== true) {
+                res.status(409).json({ error: `contract_refine_unsupported_for_${refineProvider}` });
+                return;
+            }
             if (!ticket.origin_conversation_id) {
                 // No Explore origin (agent-authored commit_draft / Quick spec that
                 // skipped the refine): fall back to the Quick-style refine, seeded
@@ -1234,6 +1239,7 @@ function registerTicketsRoutes(deps) {
                         projectSlug: project.slug,
                         projectPath: project.path,
                         projectName: project.name,
+                        providerId: refineProvider,
                         broadcast: broadcast,
                     }, ticketId, seedTitle, seedBody, null).catch((err) => {
                         console.error('[project-router] retry runContractRefineForQuick error:', err);
@@ -1250,6 +1256,7 @@ function registerTicketsRoutes(deps) {
                     projectSlug: project.slug,
                     projectPath: project.path,
                     projectName: project.name,
+                    providerId: refineProvider,
                     broadcast: broadcast,
                     ignoreConversationScope: true,
                 }, convoId, ticketId).catch((err) => {
@@ -1284,9 +1291,27 @@ function registerTicketsRoutes(deps) {
                 res.status(statusCode).json({ error: 'ineligible', reason: gate.reason });
                 return;
             }
+            const ticket = store.tickets[String(ticketId)];
             const rawMode = typeof req.body?.mode === 'string' ? req.body.mode : 'simple';
             const mode = rawMode === 'full' ? 'full' : 'simple';
+            const providerCheck = resolveTicketBoundProvider({ project, db }, ticket, req.body?.provider ?? req.body?.aiEngine);
+            if (!providerCheck.ok) {
+                res.status(providerCheck.status).json({ error: providerCheck.error });
+                return;
+            }
+            const smashProvider = providerCheck.provider;
+            if ((0, providers_1.getAdapter)(smashProvider).capabilities.structuredActions !== true) {
+                res.status(409).json({ error: `smash_unsupported_for_${smashProvider}` });
+                return;
+            }
             const model = typeof req.body?.model === 'string' && req.body.model.length > 0 ? req.body.model : null;
+            if (model && !(0, spec_models_1.isValidModelForProvider)(model, smashProvider)) {
+                res.status(400).json({
+                    error: `model is not valid for provider "${smashProvider}"`,
+                    allowed: (0, spec_models_1.getModelsForProvider)(smashProvider),
+                });
+                return;
+            }
             res.status(202).json({ scheduled: true, mode });
             process.nextTick(() => {
                 void (0, smash_runner_1.runSmash)({
@@ -1295,6 +1320,7 @@ function registerTicketsRoutes(deps) {
                     projectSlug: project.slug,
                     projectPath: project.path,
                     projectName: project.name,
+                    providerId: smashProvider,
                     // Relocate-artifacts: pass the gated tickets-store path so SMASH
                     // reads/writes the same store the rails load (workspace when
                     // relocated), not a stale repo copy.
@@ -1364,7 +1390,27 @@ function registerTicketsRoutes(deps) {
         }
         const { project, broadcast, ticketWatcher } = ctx(req);
         try {
+            // This destructive helper exists solely as the first half of Re-SMASH.
+            // Enforce the same provider capability before touching the ticket store;
+            // otherwise a Kimi Re-SMASH could delete every existing child and only
+            // then have POST /smash reject the unsupported structured action.
             const filePath = ticketPath(req);
+            const store = (0, ticket_store_1.readStore)(filePath);
+            const ticket = store.tickets[String(ticketId)];
+            if (!ticket) {
+                res.status(404).json({ error: 'ticket not found' });
+                return;
+            }
+            const providerCheck = resolveTicketBoundProvider(ctx(req), ticket, req.query.provider ?? req.body?.provider ?? req.body?.aiEngine);
+            if (!providerCheck.ok) {
+                res.status(providerCheck.status).json({ error: providerCheck.error });
+                return;
+            }
+            const smashProvider = providerCheck.provider;
+            if ((0, providers_1.getAdapter)(smashProvider).capabilities.structuredActions !== true) {
+                res.status(409).json({ error: `smash_unsupported_for_${smashProvider}` });
+                return;
+            }
             const result = (0, smash_runner_1.applyDeleteEpicChildren)(filePath, ticketId);
             // Pass the real post-write revision (not 0) so the chokidar echo is
             // suppressed; a hardcoded 0 never matches the on-disk revision and
@@ -1590,15 +1636,33 @@ function registerTicketsRoutes(deps) {
         const priorProposal = typeof priorProposalRaw === 'string' && priorProposalRaw.length > 0 ? priorProposalRaw : null;
         const isRefinement = priorProposal !== null;
         const { project, broadcast } = ctx(req);
-        const provider = project.provider ?? 'claude';
+        const providerCheck = (0, provider_selection_1.validateRequestedProvider)(project, req.body?.provider ?? req.body?.aiEngine);
+        if (!providerCheck.ok) {
+            res.status(400).json({ error: providerCheck.error });
+            return;
+        }
+        const provider = providerCheck.provider;
         const adapter = (0, providers_1.getAdapter)(provider);
+        if (!(0, runtime_1.supportsToolPolicy)(adapter, 'read-only')) {
+            res.status(409).json({
+                error: 'provider_tool_policy_unsupported',
+                provider,
+                requiredPolicy: 'read-only',
+            });
+            return;
+        }
         const requestId = (0, ids_1.newId)();
         const projectId = project.id;
         const admission = (0, process_admission_1.captureProcessAdmission)(projectId);
-        // Model used for the spawn (claude runs its CLI default, codex is pinned to
-        // gpt-5.5, other providers use the adapter default). Used only as the
-        // fallback model for cost accounting when the stream carries none.
-        const aiEditModel = provider === 'codex' ? 'gpt-5.5' : adapter.defaultModel();
+        const requestedAiEditModel = typeof req.body?.model === 'string' ? req.body.model : adapter.defaultModel();
+        if (!(0, spec_models_1.isValidModelForProvider)(requestedAiEditModel, provider)) {
+            res.status(400).json({
+                error: `model is not valid for provider "${provider}"`,
+                allowed: (0, spec_models_1.getModelsForProvider)(provider),
+            });
+            return;
+        }
+        const aiEditModel = requestedAiEditModel;
         // Build the focused pre-prompt
         const baseRules = `- Output format MUST be exactly:\n` +
             `    TITLE: <one-line spec title>\n` +
@@ -1635,10 +1699,12 @@ function registerTicketsRoutes(deps) {
                 `## User Instructions\n\n${instructions.trim()}\n\n` +
                 `Output the modified TITLE line followed by the modified description now.`;
         let imageFlags = [];
+        let aiEditImagePaths = [];
         if (attachmentIds.length > 0) {
             try {
                 const extracted = await attachment_manager_1.attachmentManager.getClaudeArgs(project.slug, ticketId, attachmentIds);
                 imageFlags = extracted.imageFlags;
+                aiEditImagePaths = extracted.imagePaths;
                 if (extracted.textBlocks.length > 0) {
                     systemPrompt = `${systemPrompt}\n\n${attachment_manager_1.USER_ATTACHMENT_SYSTEM_NOTE}`;
                     userPrompt = `${userPrompt}\n\n## Attached Files\n\n${extracted.textBlocks.join('\n\n')}`;
@@ -1652,43 +1718,21 @@ function registerTicketsRoutes(deps) {
             res.status(409).json({ error: 'Project is being removed' });
             return;
         }
-        let binary;
-        let args;
-        if (provider === 'codex') {
-            binary = 'codex';
-            // Use gpt-5.5 (default for Codex per CODEX_MODELS/PRESET_DEFAULTS in ModelSelector); never hardcode o4-mini
-            args = ['exec', `${systemPrompt}\n\n${userPrompt}`, '--model', 'gpt-5.5'];
-        }
-        else if (provider === 'claude') {
-            binary = 'claude';
-            args = [
-                '--dangerously-skip-permissions',
-                // AI Edit may ground prose in the repo, but it never needs shell,
-                // network, MCP, or filesystem mutation authority.
-                '--tools', 'Read,Grep,Glob',
-                '--output-format', 'stream-json',
-                '--verbose',
-                '--max-turns', '4',
-                ...imageFlags,
-                '--system-prompt', systemPrompt,
-                '-p', userPrompt,
-            ];
-        }
-        else {
-            // Adapter-driven path (gemini + any future provider): binary, argv, and
-            // stream parsing all come from the registered adapter — no per-provider
-            // hardcoding. The claude/codex shapes above are kept byte-identical.
-            binary = adapter.binary;
-            args = adapter.buildArgs('agent-refine', {
-                prompt: userPrompt,
-                systemPrompt,
-                model: adapter.defaultModel(),
-            });
-        }
+        const binary = adapter.binary;
+        const aiEditOptions = {
+            prompt: userPrompt,
+            systemPrompt,
+            model: aiEditModel,
+            toolPolicy: 'read-only',
+            maxTurns: 4,
+            extraArgs: provider === 'claude' ? imageFlags : undefined,
+            imagePaths: adapter.capabilities.supportsImageInput ? aiEditImagePaths : undefined,
+        };
+        const args = adapter.buildArgs('agent-refine', aiEditOptions);
         // spawnAiCli reroutes multi-line argv values through stdin on Windows.
         console.log(`[project-router] ai-edit spawn: ${binary} (cwd=${project.path}, requestId=${requestId})`);
         const child = (0, cli_prompt_1.spawnAiCli)(binary, args, {
-            env: process.env,
+            env: (0, runtime_1.buildProviderEnv)(adapter, aiEditOptions),
             stdio: ['ignore', 'pipe', 'pipe'],
             cwd: project.path,
         });
@@ -1730,56 +1774,18 @@ function registerTicketsRoutes(deps) {
         const aiEditStartedAt = new Date().toISOString();
         const stdoutReader = (0, readline_1.createInterface)({ input: child.stdout, crlfDelay: Infinity });
         stdoutReader.on('line', (line) => {
-            const aev = adapter.parseStreamLine(line);
-            if (aev)
-                adapterEvents.push(aev);
-            if (provider === 'codex') {
-                if (line) {
-                    buffer += line + '\n';
+            const eventsForLine = (0, runtime_1.parseStreamEvents)(adapter, line);
+            adapterEvents.push(...eventsForLine);
+            for (const event of eventsForLine) {
+                if (event.kind === 'text-delta' && event.text) {
+                    buffer += event.text;
                     const msg = {
                         type: 'ticket_ai_edit_stream', projectId, ticketId: Number(ticketId),
-                        requestId, delta: line + '\n', timestamp: new Date().toISOString(),
+                        requestId, delta: event.text, timestamp: new Date().toISOString(),
                     };
                     broadcast(msg);
                 }
             }
-            else if (provider === 'claude') {
-                let parsed = null;
-                try {
-                    parsed = JSON.parse(line);
-                }
-                catch { /* skip */ }
-                if (!parsed)
-                    return;
-                if (parsed.type === 'assistant') {
-                    const msg = parsed.message;
-                    const texts = (msg?.content ?? [])
-                        .filter((c) => c.type === 'text')
-                        .map((c) => c.text ?? '');
-                    const newText = texts.join('');
-                    if (newText) {
-                        buffer += newText;
-                        const wsMsg = {
-                            type: 'ticket_ai_edit_stream', projectId, ticketId: Number(ticketId),
-                            requestId, delta: newText, timestamp: new Date().toISOString(),
-                        };
-                        broadcast(wsMsg);
-                    }
-                }
-            }
-            else {
-                // Adapter-driven parse (gemini + future providers): uniform AdapterEvent
-                // stream — accumulate assistant text deltas (reuse the event parsed above).
-                const ev = aev;
-                if (ev?.kind === 'text-delta' && ev.text) {
-                    buffer += ev.text;
-                    const wsMsg = {
-                        type: 'ticket_ai_edit_stream', projectId, ticketId: Number(ticketId),
-                        requestId, delta: ev.text, timestamp: new Date().toISOString(),
-                    };
-                    broadcast(wsMsg);
-                }
-            }
         });
         child.on('close', (code) => {
             _aiEditProcesses.delete(requestId);

package/server/dist/project-router.js

@@ -134,6 +134,7 @@ function createProjectRouter(registry) {
                 fileSummaryManager: projectCtx.fileSummaryManager,
                 getTicketSpec: projectCtx.getTicketSpec,
                 fileStoryManager,
+                aiTransformProvider: storyAdapter.id,
                 // Relocate-artifacts: summary JSON OUTPUTS live in the workspace when
                 // relocated (source tree still read from project.path). Resolved per-call.
                 resolveSummaryRoot: () => {