specrails-desktop 2.45.0 → 2.46.0

package/client/dist/index.html

@@ -204,7 +204,7 @@
         .specrails-splash__mark .pill { opacity: 1; }
       }
     </style>
-    <script type="module" crossorigin src="/assets/index-DOKftX7y.js"></script>
+    <script type="module" crossorigin src="/assets/index-DYoyDWim.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-CNC7AqOf.js">
     <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-zu2_FqZY.js">
     <link rel="modulepreload" crossorigin href="/assets/react-dom-DiWzBDP9.js">
@@ -213,7 +213,7 @@
     <link rel="modulepreload" crossorigin href="/assets/activity-DiyjsgQV.js">
     <link rel="modulepreload" crossorigin href="/assets/addspec-D2YIQ0GU.js">
     <link rel="modulepreload" crossorigin href="/assets/agent-Bh9K7iEt.js">
-    <link rel="modulepreload" crossorigin href="/assets/agentRuntime-Bu4xEcRw.js">
+    <link rel="modulepreload" crossorigin href="/assets/agentRuntime-D4RmeuNY.js">
     <link rel="modulepreload" crossorigin href="/assets/agents-ms7TwG16.js">
     <link rel="modulepreload" crossorigin href="/assets/agentstudio-CN2pokQu.js">
     <link rel="modulepreload" crossorigin href="/assets/aiedit-iIjz2_Qk.js">
@@ -232,23 +232,23 @@
     <link rel="modulepreload" crossorigin href="/assets/jobs-DMPU64ms.js">
     <link rel="modulepreload" crossorigin href="/assets/loops-B7YpGizO.js">
     <link rel="modulepreload" crossorigin href="/assets/mcp-CUAN6ORK.js">
-    <link rel="modulepreload" crossorigin href="/assets/narration-C6Ost9nL.js">
+    <link rel="modulepreload" crossorigin href="/assets/narration-Dypjxeel.js">
     <link rel="modulepreload" crossorigin href="/assets/nav-Ch-zHBG5.js">
     <link rel="modulepreload" crossorigin href="/assets/packet-Cx-zRuWn.js">
-    <link rel="modulepreload" crossorigin href="/assets/settings-DzXZCb1h.js">
+    <link rel="modulepreload" crossorigin href="/assets/settings-BlYvaQ7w.js">
     <link rel="modulepreload" crossorigin href="/assets/setup-Ba11l2JA.js">
     <link rel="modulepreload" crossorigin href="/assets/specs-DII0C8gw.js">
     <link rel="modulepreload" crossorigin href="/assets/terminal-BAzpHtpY.js">
     <link rel="modulepreload" crossorigin href="/assets/tickets-W6pBmbrX.js">
     <link rel="modulepreload" crossorigin href="/assets/createLucideIcon-Bjbbp_KS.js">
-    <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-5mj2SMKn.js">
-    <link rel="modulepreload" crossorigin href="/assets/Trans-BHPMWkOw.js">
-    <link rel="modulepreload" crossorigin href="/assets/useDesktop-Duv5ddAa.js">
+    <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-DnxHj8jP.js">
+    <link rel="modulepreload" crossorigin href="/assets/Trans-BwLgX6n7.js">
+    <link rel="modulepreload" crossorigin href="/assets/useDesktop-mxHVQOdx.js">
     <link rel="modulepreload" crossorigin href="/assets/save-B6wGWwBR.js">
-    <link rel="modulepreload" crossorigin href="/assets/spending-lTZ-bm_y.js">
+    <link rel="modulepreload" crossorigin href="/assets/spending-DNM6NAoA.js">
     <link rel="modulepreload" crossorigin href="/assets/sparkles-DrY8hb0X.js">
     <link rel="modulepreload" crossorigin href="/assets/x-CBMI9ejn.js">
-    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-Dsv2eHf_.js">
+    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-B6wVevPq.js">
     <link rel="modulepreload" crossorigin href="/assets/file-text-BcLCfcWZ.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-x-CMYsN4ZH.js">
     <link rel="modulepreload" crossorigin href="/assets/download-CFHyyHcw.js">
@@ -260,23 +260,24 @@
     <link rel="modulepreload" crossorigin href="/assets/search-Cq_gE3Ik.js">
     <link rel="modulepreload" crossorigin href="/assets/trash-2-BOU3WdZZ.js">
     <link rel="modulepreload" crossorigin href="/assets/triangle-alert-H9T4jAmh.js">
-    <link rel="modulepreload" crossorigin href="/assets/jira-api-zrRdZFBB.js">
+    <link rel="modulepreload" crossorigin href="/assets/jira-api-ChjVGJx_.js">
     <link rel="modulepreload" crossorigin href="/assets/zap-CHo3aCD1.js">
     <link rel="modulepreload" crossorigin href="/assets/clsx-CjueKrWZ.js">
     <link rel="modulepreload" crossorigin href="/assets/utils-BC4DHlz2.js">
     <link rel="modulepreload" crossorigin href="/assets/dialog-xXB2q5HJ.js">
     <link rel="modulepreload" crossorigin href="/assets/lib-CGdyxIWg.js">
-    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-BVFky3l_.js">
-    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-Bq8iptrG.js">
+    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-DxAkjvJb.js">
+    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-CeZv93iR.js">
     <link rel="modulepreload" crossorigin href="/assets/button-Ccc9Dc-D.js">
-    <link rel="modulepreload" crossorigin href="/assets/project-repositories-CFRaB9UB.js">
-    <link rel="modulepreload" crossorigin href="/assets/RepositoryScopeSelector-DU6QwNaS.js">
-    <link rel="modulepreload" crossorigin href="/assets/provider-capabilities-B-wOHfLP.js">
-    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModalContext-DW3eQ0I7.js">
+    <link rel="modulepreload" crossorigin href="/assets/project-repositories-BvBj9XH9.js">
+    <link rel="modulepreload" crossorigin href="/assets/RepositoryScopeSelector-DnAFtjTz.js">
+    <link rel="modulepreload" crossorigin href="/assets/provider-capabilities-CXipwrXJ.js">
+    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModalContext-B1X5glzV.js">
     <link rel="modulepreload" crossorigin href="/assets/core-B3mKBIh5.js">
-    <link rel="modulepreload" crossorigin href="/assets/RepositoryDeliveries-ok_Wo65C.js">
+    <link rel="modulepreload" crossorigin href="/assets/RepositoryDeliveries-BQm_3TO8.js">
+    <link rel="modulepreload" crossorigin href="/assets/format-duration-NJVPOPBG.js">
     <link rel="modulepreload" crossorigin href="/assets/event-Bt7f3wXe.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-CBLYwPw6.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-Cfh9aaep.css">
   </head>
   <body>
     <div id="specrails-splash" aria-hidden="false" role="status" aria-label="Loading Specrails">

package/docs/internals/programmatic-agent-runtime.md

@@ -2,7 +2,7 @@
 
 Desktop can hand implementation to Core's **runtime API 1**. Core runs architect, developer, deterministic verification, reviewer and archive as separate LangGraph phases. Desktop keeps project/worktree selection, rail lifecycle, logs, accounting and delivery ownership.
 
-This is an opt-in path in the current source tree. It applies to implementation rail steps and their Core completion check. Mission chat and unrelated AI features keep their existing transports. Provider-native implementation prompts and skills are not invoked inside the programmatic phases.
+This is the only implementation engine in the current source tree. It applies to implementation rail steps and their Core completion check. Mission chat and unrelated AI features keep their existing transports. Provider-native implementation prompts and skills are not invoked inside the programmatic phases.
 
 ## Build the paired source
 
@@ -53,16 +53,16 @@ Desktop negotiates `runtime api` and sends configuration to `runtime validate --
 
 `SPECRAILS_CORE_RUNTIME_PATH` selects this execution module. The existing `SPECRAILS_CORE_BIN` controls the installation/lifecycle resolver and is a different setting. Prefer a paired source bundle when testing the complete installation and execution flow.
 
-## Enable a project
+## Configure a project
 
 1. Open **Project settings → Agent runtime** (its own section in the project dialog).
-2. Choose a provider per role. The model dropdown lists each CLI's catalog with the default marked; turns, attempts and timeout show their defaults in the fields. Claude, Codex, Gemini and Kimi remain available; open **Show provider connections** to add an OpenAI-compatible endpoint for a local or remote model (local endpoints do not require a key; API providers need an explicit model).
+2. Choose a provider per role. The model dropdown lists each CLI's catalog with the default marked; turns, attempts and timeout show their defaults in the fields. Claude, Codex, Gemini and Kimi remain available; open **General settings → Specrails Agents → Provider connections** to add an OpenAI-compatible endpoint for a local or remote model (local endpoints do not require a key; API providers need an explicit model).
 3. Verification commands are optional. A project that never saved runtime settings is prefilled with the checks Desktop detects offline (`package.json` test/type-check/lint scripts with the right package manager, Cargo, Go, pytest, Gradle, Maven, .NET, Make); **Detect project checks** re-runs that detection. Each row is a repository plus one command line (`npm run test -- --strict`; quotes group arguments). Leave the list empty and the architect proposes the project's own checks on each run; repositories with no automated check are still reviewed and recorded as unverified in Core's receipt.
 4. **Review gate** and **Architect confidence** are optional. Review thresholds (overall score and the five aspects: type correctness, pattern adherence, test coverage, security, architectural alignment) can only *tighten* Core's own gate: the floors are 70 overall, 75 for security and 60 for every other aspect, and Desktop rejects lower values before saving (`Review threshold review.minScore must be at least 70 (Core's own review gate)`). Empty fields omit the key so Core's defaults apply. `architect.onLowConfidence` decides what happens when, after one autonomous investigation pass, the architect's design is still low in confidence: `ask` (default) pauses the run with the architect's question; `proceed` continues on stated assumptions.
-5. Enable the runtime and save.
+5. Save the project settings. Implementation always uses the agent runtime.
 6. Start an implementation through the normal rail flow.
 
-Settings are saved at `<project execution .specrails directory>/agent-runtime.json`. Missing or disabled configuration preserves legacy execution. Malformed configuration blocks admission with an error; it is not ignored. Enabling also verifies that Core exposes the expected API.
+Settings are saved at `<project execution .specrails directory>/agent-runtime.json`. Missing configuration uses the default agent runtime. The retired enabled flag cannot select another engine. Malformed configuration blocks admission; it is not ignored. Saving verifies that Core exposes the expected API. Connections are stored globally in `~/.specrails/runtime-providers.json`; project files retain role references, models, limits and verification. Existing embedded connections migrate once, with stable disambiguated IDs on endpoint conflicts. New runs freeze the resolved configuration, while saved runs retain their original snapshot.
 
 Core owns role instructions and permissions. The developer role edits and runs commands inside its CLI sandbox (the same autonomy as the legacy Implement step); architect and reviewer are read-only. A legacy rail profile/model selection does not override the runtime's per-role provider configuration. The JSON schema is [server/schemas/agent-runtime.schema.json](../../server/schemas/agent-runtime.schema.json), mirrored from Core. For a complete configuration, custom executor examples, Kimi capabilities and API tooling details, see [Core's runtime guide](https://github.com/fjpulidop/specrails-core/blob/main/docs/agent-runtime.md) in the paired revision.
 
@@ -77,6 +77,7 @@ The rail creates a frozen Core execution context for its original repository/wor
 | File | Purpose |
 | --- | --- |
 | `desktop-context.json` | Selected repositories, original worktrees, frozen scope and ownership |
+| `desktop-runtime-config.json` | Admission snapshot of project settings with verification commands restricted to the selected repositories; project settings remain unchanged |
 | `desktop-runtime-host.json` | Allowlisted host settings needed to reconstruct execution |
 | `agent-runtime-request.json` | Core's frozen configuration and change name |
 | `state.json`, `receipts/` | Core gates and verification receipts |
@@ -84,11 +85,13 @@ The rail creates a frozen Core execution context for its original repository/wor
 
 A run pauses (Core exit code 2) either on an **approval** (`pendingApproval`, for example before archive) or on a **question** (`pendingQuestion: { stepId, requestedAt, question }`) when the architect is configured to ask on low confidence. A pending question can only be resumed together with an answer: the runs panel shows the question with a textarea and an **Answer and resume** action, which posts `{ "answer": "…" }` (nonempty, at most 20,000 characters). Resuming without an answer while a question is open is rejected with `400 answer_required`. Once Core records `answeredAt`, the question is history and ordinary resume applies again. The bridge reports a paused run's reason in the job log: awaiting approval, or the pending question text.
 
-**Agent runtime → Saved executions** lists recent runs and exposes available resume, archive approval, question answering, interrupted-step recovery and continuation cancellation actions. A continuation resumes from the phase shown, in the original worktree, and writes its progress into that job's log (a `[runtime] continuation started from phase …` banner, tool activity, phase notes and the final outcome). Resuming a run that stopped at the developer attempt limit grants a fresh attempt budget. Wait for the original rail execution to settle before resuming. Active rail jobs are stopped through their job controls; the continuation's Cancel action owns only continuations started from this panel.
+**Implementation cards and job detail** expose resume, archive approval, question answering, interrupted-step recovery and continuation cancellation actions next to the work. Cards query their latest job by original rail identity; job detail queries its exact run. Legacy jobs render no runtime panel. **Jobs → Saved executions** retains the cross-run history. Project settings contain runtime configuration only. A continuation resumes from the phase shown, in the original worktree, and writes its progress into that job's log (a `[runtime] continuation started from phase …` banner, tool activity, phase notes and the final outcome). Resuming a run that stopped at the developer attempt limit grants a fresh attempt budget. Wait for the original rail execution to settle before resuming. Active rail jobs are stopped through their job controls; the continuation's Cancel action owns only continuations started from this panel.
 
 Resume retains valid completed phases and rechecks Core evidence. Changed code or environment requires fresh verification/review. An ambiguous interrupted write requires an explicit recovery action after inspecting partial changes. A changed frozen config/identity requires a new run. Missing original worktrees or mismatched execution manifests block recovery; the controller never invents a replacement worktree.
 
-**A continuation completes Core's work in the original worktree; it does not restart the former rail's delivery phase, create a PR, or mark backlog delivery complete.** Inspect the resulting worktree and deliver through an explicit host/Git operation. This also applies when approval is granted after the original rail has settled. Core archive success is not a claim that a PR was created. The initial uninterrupted successful rail retains its normal host delivery flow.
+Saved executions link directly to the original job log. Continuations broadcast readable logs and raw runtime events to that job, publish `runtime.continuation` lifecycle updates, and reserve the original implementation card until settlement. Jobs list/detail project the continuation as running while it is active (including the running filter); the failed attempt remains in history. Job and card cancellation route to the continuation process. After a successful continuation, Desktop revalidates Core receipts, commits the exact preserved worktrees locally, and reconciles the job and repository delivery cards to completed / ready for review. A new completion event supersedes the earlier failed summary while retaining the failed attempt and its usage. The activity reservation then clears.
+
+**A continuation prepares local delivery for review after Core succeeds; it does not create a PR or merge code.** Use the normal delivery card actions to review and publish. Older successful continuations expose **Prepare delivery**, which performs the same receipt validation and local settlement without invoking a model. This also applies when approval is granted after the original rail has settled. Core archive success is not a claim that a PR was created. The initial uninterrupted successful rail retains its normal host delivery flow.
 
 Disabling project runtime settings affects future admission. Existing runs retain their frozen runtime request and remain available for explicit continuation; they do not switch back to a platform prompt.
 
@@ -122,8 +125,16 @@ A production release must:
 
 Do not relabel an old 5.1.1 bundle or copy only `dist/agent-runtime`: LangGraph and the complete runtime dependency closure are required. Source assembly writes `source-bundle.json` with the Core version, runtime API and lock hash for traceability; it does not publish Core or update the production registry lock.
 
-Enable one project first, verify role outputs and delivery ownership, exercise approval/recovery, then expand. Existing legacy workflows and profile v1 remain supported during this rollout. Core's programmatic archive writes reviewed **complete specification replacements**; it does not merge partial OpenSpec delta snippets. Preserve unchanged requirements in the architect's output and inspect that behavior during the pilot.
+Verify role outputs, delivery ownership and saved-run recovery before releasing the paired app. Implementation has no legacy fallback; profile v1 remains only for other workflows. Core's programmatic archive writes reviewed **complete specification replacements**; it does not merge partial OpenSpec delta snippets. Preserve unchanged requirements in the architect's output and inspect that behavior during the pilot.
 
 See [Core runtime selection and recovery](core-runtime-updates.md) for the separate framework-update lifecycle and [the original evaluation](agent-runtime-framework-evaluation.md) for the architecture rationale.
 
 The [implementation verification record](programmatic-agent-runtime-validation.md) lists the completed checks and outstanding release validation.
+
+## Efficiency metrics
+
+Core's additive runtime metrics v1 are passed from compact status to each saved run's optional `metrics` field. The contextual run panels and Jobs history render a collapsed **Usage and time** panel with reported cost, active execution/agent time, calls and token/cache totals, plus per-phase attempts, duration, provider calls and cost. All eight locales include the panel labels.
+
+Older Core versions continue to work without the panel. The server validates numeric fields and known phase IDs, drops unsupported/malformed metrics and projects only the supported fields; it never forwards arbitrary transcripts from the metrics object. Missing billing is displayed as unavailable rather than zero. Cache tokens are already included in input tokens, and agent duration already includes native tool work. The panel does not estimate savings or measure implementation quality.
+
+The paired `agent-runtime-efficiency` OpenSpec change in specrails-core documents verification ownership, efficient API tools and the measurement contract. Core exposes the same report through `runtime status` / `runtime-result`, so a fixed set of real tasks can be compared without a Desktop database migration.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.45.0",
+  "version": "2.46.0",
   "license": "MIT",
   "repository": {
     "type": "git",

package/server/dist/agent-mcp-config.js

@@ -266,6 +266,11 @@ function codexMcpOverrides(entry) {
     const args = [
         ...c(`mcp_servers.specrails.command=${JSON.stringify(entry.command)}`),
         ...c(`mcp_servers.specrails.args=[${entry.args.map((a) => JSON.stringify(a)).join(', ')}]`),
+        // This invocation owns a server-minted capability. Specrails authorizes
+        // each action against its mission tier; Codex's tool-level prompt cannot
+        // distinguish facade reads from writes and fails under approvalPolicy=never.
+        // Keep this scoped to the internal bridge, never external MCP servers.
+        ...c('mcp_servers.specrails.default_tools_approval_mode="approve"'),
     ];
     for (const [k, v] of Object.entries(entry.env)) {
         args.push(...c(`mcp_servers.specrails.env.${k}=${JSON.stringify(v)}`));

package/server/dist/agent-operator-prompt.js

@@ -79,8 +79,8 @@ repository members, and runs coordinated AI coding pipelines over their selected
   routing). Supported by Claude and Kimi; forced to null on Codex/Gemini rails.
 - **Provider / engine** — claude, codex, gemini or kimi. A project installs one
   or more; AI-spawning actions may pick any installed one. Claude and Kimi
-  support profiles and Freestyle; Contract Refine and SMASH require Claude's
-  structured-action boundary. Persistent interactive jobs remain Claude-only.
+  support profiles and Freestyle; Contract Refine supports Claude and Codex
+  (read-only). SMASH and persistent interactive jobs remain Claude-only.
   Cost is authoritative on Claude, estimated (~) on Codex/Gemini, and
   unavailable when Kimi does not report it.
 

package/server/dist/agent-runtime-bridge.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RUNTIME_HOST_ENV_KEYS = void 0;
-exports.selectAgentRuntime = selectAgentRuntime;
 exports.runtimeChangeName = runtimeChangeName;
 exports.runAgentRuntimeInvocation = runAgentRuntimeInvocation;
+const agent_runtime_repositories_1 = require("./agent-runtime-repositories");
+const node_util_1 = require("node:util");
+const providers_1 = require("./providers");
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
 const node_fs_1 = require("node:fs");
@@ -13,14 +15,6 @@ const agent_runtime_loader_1 = require("./agent-runtime-loader");
 const agent_runtime_settings_1 = require("./agent-runtime-settings");
 const core_node_runtime_1 = require("./core-node-runtime");
 const win_spawn_1 = require("./util/win-spawn");
-/** The stored admission wins over configuration changes for an existing run. */
-function selectAgentRuntime(configPath, contextPath) {
-    if (contextPath && (0, node_fs_1.existsSync)((0, node_path_1.join)((0, node_path_1.dirname)(contextPath), 'agent-runtime-request.json')))
-        return true;
-    if (!(0, node_fs_1.existsSync)(configPath))
-        return false;
-    return (0, agent_runtime_settings_1.validateAgentRuntimeConfig)(JSON.parse((0, node_fs_1.readFileSync)(configPath, 'utf8'))).enabled;
-}
 function runtimeChangeName(runId) {
     return 'runtime-' + (0, node_crypto_1.createHash)('sha256').update(runId).digest('hex').slice(0, 20);
 }
@@ -59,8 +53,55 @@ async function runAgentRuntimeInvocation(options) {
     if (!options.resume)
         saveHostContext(options);
     const args = [cli, options.resume ? 'resume' : 'run', '--context', options.contextPath];
-    if (!options.resume)
-        args.push('--config', options.configPath, '--change', options.change);
+    if (!options.resume) {
+        if (!Array.isArray(admittedContext.repositories) || !admittedContext.repositories.length || admittedContext.repositories.some(repo => !repo || typeof repo.id !== 'string' || !repo.id))
+            throw new Error('Core context is missing its repository scope');
+        const config = (0, agent_runtime_settings_1.loadRuntimeConfigFile)(options.configPath, options.defaultProvider);
+        config.rolePrompts = { ...(await (0, agent_runtime_loader_1.loadCoreAgentRuntime)()).rolePromptDefaults(), ...(0, agent_runtime_settings_1.loadRuntimeRolePrompts)() };
+        if (options.defaultProvider) {
+            const provider = config.providers.find(entry => entry.id === options.defaultProvider);
+            if (!provider)
+                throw new Error(`Selected runtime provider is not configured: ${options.defaultProvider}`);
+            for (const role of Object.values(config.agents)) {
+                if (role.provider !== provider.id) {
+                    role.provider = provider.id;
+                    role.model = options.selectedModel ?? (provider.kind === 'cli' ? (0, providers_1.getAdapter)(provider.cli).defaultModel() : undefined);
+                    if (!role.model)
+                        throw new Error(`Selected runtime provider requires a model: ${provider.id}`);
+                }
+                if (!role.model && provider.kind === 'cli')
+                    role.model = (0, providers_1.getAdapter)(provider.cli).defaultModel();
+            }
+            if (options.selectedModel)
+                config.agents.developer.model = options.selectedModel;
+        }
+        const selected = new Set(admittedContext.repositories.map(repo => repo.id));
+        // Project settings cover every repository; a ticket may select only a subset.
+        // Freeze that subset for admission without changing the project settings.
+        config.verification = config.verification.filter(command => selected.has(command.repositoryId));
+        const scopedPath = (0, node_path_1.join)((0, node_path_1.dirname)(options.contextPath), 'desktop-runtime-config.json');
+        const serialized = JSON.stringify(config, null, 2) + '\n';
+        try {
+            (0, node_fs_1.writeFileSync)(scopedPath, serialized, { flag: 'wx', mode: 0o600 });
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            if ((0, node_fs_1.readFileSync)(scopedPath, 'utf8') !== serialized)
+                throw new Error('Desktop runtime configuration changed; start a new run');
+        }
+        args.push('--config', scopedPath, '--change', options.change);
+    }
+    const frozenPath = (0, node_path_1.join)((0, node_path_1.dirname)(options.contextPath), 'desktop-runtime-config.json');
+    if ((0, node_fs_1.existsSync)(frozenPath)) {
+        const frozen = JSON.parse((0, node_fs_1.readFileSync)(frozenPath, 'utf8'));
+        for (const [role, assignment] of Object.entries(frozen.agents)) {
+            try {
+                options.onLine?.(`[runtime] ${role}: ${assignment.provider}/${assignment.model ?? 'provider default'}\n`);
+            }
+            catch { /* Log observers cannot prevent execution. */ }
+        }
+    }
     for (const [flag, values] of [['approve', options.approve], ['recover', options.recover], ['invalidate', options.invalidate]]) {
         if (values?.length)
             args.push('--' + flag, values.join(','));
@@ -113,7 +154,12 @@ async function runAgentRuntimeInvocation(options) {
                 invalidProtocol = true;
                 return;
             }
-            observe(() => options.onRawLine?.(line));
+            if (event.type === 'agent-event' && event.event && typeof event.event === 'object' && event.event.kind === 'tool-start' && (admittedContext.repositories?.length ?? 0) > 1) {
+                const repositories = (0, agent_runtime_repositories_1.toolRepositories)(event.event, admittedContext.repositories, admittedContext.artifactRoot ?? options.cwd);
+                if (repositories.length)
+                    event.repositories = repositories.map(repo => ({ id: repo.id, name: repo.name || repo.id }));
+            }
+            observe(() => options.onRawLine?.(event.repositories ? JSON.stringify(event) : line));
             if (event.type === 'runtime-result') {
                 if (result)
                     invalidProtocol = true;
@@ -133,11 +179,13 @@ async function runAgentRuntimeInvocation(options) {
                 }
                 else if (payload?.kind === 'tool-start' && typeof payload.tool === 'string') {
                     // Live tool activity keeps a long developer turn from looking hung.
-                    observe(() => options.onLine?.(`[${role}] ${payload.tool}${payload.detail ? ' ' + payload.detail : ''}\n`));
+                    const repositories = event.repositories;
+                    const scope = repositories?.length ? ` [${repositories.map(repo => repo.name).join(' + ')}]` : '';
+                    observe(() => options.onLine?.(`[${role}]${scope} ${payload.tool}${payload.detail ? ' ' + payload.detail : ''}\n`));
                 }
             }
             else if (event.type === 'verification-output' && typeof event.text === 'string') {
-                observe(() => options.onLine?.(String(event.text)));
+                observe(() => options.onLine?.((0, node_util_1.stripVTControlCharacters)(String(event.text))));
             }
             else if (event.type === 'span') {
                 // Trace spans are telemetry; the raw line is already recorded for diagnostics.

package/server/dist/agent-runtime-controls-router.js

@@ -1,9 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRuntimeContinuationActive = isRuntimeContinuationActive;
+exports.activeRuntimeContinuationIds = activeRuntimeContinuationIds;
+exports.cancelRuntimeContinuation = cancelRuntimeContinuation;
 exports.shutdownAgentRuntimeControls = shutdownAgentRuntimeControls;
 exports.registerAgentRuntimeControlRoutes = registerAgentRuntimeControlRoutes;
+const agent_runtime_paths_1 = require("./agent-runtime-paths");
 const agent_runtime_controls_1 = require("./agent-runtime-controls");
 const controllers = new WeakMap();
+function isRuntimeContinuationActive(context, runId) { return controllers.get(context)?.isActive(runId) ?? false; }
+function activeRuntimeContinuationIds(context) { return controllers.get(context)?.activeRunIds() ?? []; }
+function cancelRuntimeContinuation(context, runId) {
+    const controller = controllers.get(context);
+    if (!controller?.isActive(runId))
+        return false;
+    controller.cancel(runId);
+    return true;
+}
 function shutdownAgentRuntimeControls(context) { controllers.get(context)?.shutdown(); }
 function registerAgentRuntimeControlRoutes({ router, ctx }) {
     function controls(request) {
@@ -17,12 +30,32 @@ function registerAgentRuntimeControlRoutes({ router, ctx }) {
     }
     router.get('/:projectId/agent-runtime/runs', async (req, res) => {
         try {
+            if (req.query.railIndex !== undefined) {
+                const railIndex = Number(req.query.railIndex);
+                if (!Number.isSafeInteger(railIndex) || railIndex < 0) {
+                    res.status(400).json({ error: 'invalid_rail_index' });
+                    return;
+                }
+                const context = ctx(req);
+                const latest = context.db.prepare('SELECT id FROM loop_runs WHERE rail_index = ? ORDER BY started_at DESC, rowid DESC LIMIT 1').get(railIndex);
+                res.json({ runs: latest && (0, agent_runtime_paths_1.hasAgentRuntimeRequest)(context.project, latest.id) ? [await controls(req).summary(latest.id)] : [] });
+                return;
+            }
             res.json({ runs: await controls(req).list() });
         }
         catch {
             res.status(500).json({ error: 'runtime_status_failed', message: 'Could not read runtime executions' });
         }
     });
+    router.get('/:projectId/agent-runtime/runs/:runId', async (req, res) => {
+        try {
+            const context = ctx(req), runId = String(req.params.runId);
+            res.json({ runs: (0, agent_runtime_paths_1.hasAgentRuntimeRequest)(context.project, runId) ? [await controls(req).summary(runId)] : [] });
+        }
+        catch {
+            res.status(500).json({ error: 'runtime_status_failed' });
+        }
+    });
     router.post('/:projectId/agent-runtime/runs/:runId/resume', async (req, res) => {
         try {
             await controls(req).resume(String(req.params.runId), (0, agent_runtime_controls_1.validateRuntimeResumeInput)(req.body));
@@ -32,6 +65,15 @@ function registerAgentRuntimeControlRoutes({ router, ctx }) {
             res.status(error instanceof agent_runtime_controls_1.RuntimeControlError ? error.statusCode : 500).json({ error: error instanceof agent_runtime_controls_1.RuntimeControlError ? error.code : 'runtime_resume_failed', message: error instanceof agent_runtime_controls_1.RuntimeControlError ? error.message : 'Could not resume runtime execution' });
         }
     });
+    router.post('/:projectId/agent-runtime/runs/:runId/settle', async (req, res) => {
+        try {
+            await controls(req).settle(String(req.params.runId));
+            res.json({ settled: true });
+        }
+        catch (error) {
+            res.status(error instanceof agent_runtime_controls_1.RuntimeControlError ? error.statusCode : 500).json({ message: error instanceof agent_runtime_controls_1.RuntimeControlError ? error.message : 'Could not prepare delivery' });
+        }
+    });
     router.post('/:projectId/agent-runtime/runs/:runId/cancel', (req, res) => {
         try {
             controls(req).cancel(String(req.params.runId));

package/server/dist/agent-runtime-controls.js

@@ -6,6 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AgentRuntimeControls = exports.RuntimeControlError = void 0;
 exports.validateRuntimeResumeInput = validateRuntimeResumeInput;
 exports.readAgentRuntimeStatus = readAgentRuntimeStatus;
+const agent_runtime_settlement_1 = require("./agent-runtime-settlement");
+const agent_runtime_metrics_1 = require("./agent-runtime-metrics");
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -70,11 +72,13 @@ async function readAgentRuntimeStatus(contextPath, cwd, env) {
 class AgentRuntimeControls {
     ctx;
     dependencies;
+    isActive(runId) { return this.active.has(runId); }
+    activeRunIds() { return [...this.active.keys()]; }
     active = new Map();
     errors = new Map();
     statusCache = new Map();
     disposed = false;
-    constructor(ctx, dependencies = { status: readAgentRuntimeStatus, execute: agent_runtime_bridge_1.runAgentRuntimeInvocation, kill: win_spawn_1.treeKillSafe }) {
+    constructor(ctx, dependencies = { status: readAgentRuntimeStatus, execute: agent_runtime_bridge_1.runAgentRuntimeInvocation, kill: win_spawn_1.treeKillSafe, settle: agent_runtime_settlement_1.settleRuntimeContinuation }) {
         this.ctx = ctx;
         this.dependencies = dependencies;
     }
@@ -149,6 +153,8 @@ class AgentRuntimeControls {
             return { runId, status: state.status === 'running' && !active ? 'interrupted' : state.status, nextStep: state.nextStep,
                 updatedAt: state.updatedAt, error: this.errors.get(runId) ?? state.error, pendingApproval: state.pendingApproval,
                 traceId: state.traceId, pendingQuestion: openQuestion(state),
+                metrics: (0, agent_runtime_metrics_1.readRuntimeEfficiency)(state.metrics),
+                canSettle: !active && state.status === 'succeeded' && this.ctx.db.prepare('SELECT status FROM jobs WHERE id = ?').get(runId)?.status !== 'completed',
                 recoverableSteps, active, canCancel: this.active.has(runId), canResume: !active && parent?.status === 'completed' && state.status !== 'succeeded' };
         }
         catch (error) {
@@ -161,6 +167,8 @@ class AgentRuntimeControls {
         const parent = (0, loop_runs_store_1.getLoopRun)(this.ctx.db, runId);
         if (!parent || parent.status !== 'completed' || this.active.has(runId))
             throw new RuntimeControlError(409, 'runtime_run_active', 'Wait for the original Desktop execution to settle before resuming');
+        if (parent.rail_index != null && [...(this.ctx.railLoopRuns?.values() ?? []), ...(this.ctx.railJobs?.values() ?? [])].some(meta => meta.railIndex === parent.rail_index))
+            throw new RuntimeControlError(409, 'runtime_rail_active', 'Wait for the implementation card to finish its active job before resuming');
         const context = this.context(runId);
         // Reserve before awaiting status so concurrent resume requests cannot race.
         const active = { cancelled: false };
@@ -172,6 +180,8 @@ class AgentRuntimeControls {
             const state = await this.dependencies.status(context.file, context.cwd, context.env);
             if (!state || state.runId !== runId || state.status === 'succeeded')
                 throw new RuntimeControlError(409, 'runtime_not_resumable', 'This execution has no resumable workflow');
+            if (parent.rail_index != null && [...(this.ctx.railLoopRuns?.values() ?? []), ...(this.ctx.railJobs?.values() ?? [])].some(meta => meta.railIndex === parent.rail_index))
+                throw new RuntimeControlError(409, 'runtime_rail_active', 'The implementation card became active while checking the saved execution');
             // A pending question resumes the architect only with the operator's answer.
             if (openQuestion(state) && !input.answer)
                 throw new RuntimeControlError(400, 'answer_required', 'This execution is waiting for an answer to the architect\'s question');
@@ -206,7 +216,20 @@ class AgentRuntimeControls {
                     (0, db_1.appendEvent)(this.ctx.db, runId, ++sequence, { event_type: 'log', source, payload: JSON.stringify({ line: line.replace(/\n$/, '') }) });
                 }
                 catch { /* events table best-effort */ }
+                try {
+                    this.ctx.broadcast?.({ type: 'log', source, line, timestamp: new Date().toISOString(), processId: runId });
+                }
+                catch { /* persisted log remains authoritative */ }
+            };
+            if (parent.rail_index != null)
+                this.ctx.railLoopRuns?.set(runId, { railIndex: parent.rail_index, ticketIds, requiresTerminalIntent: true });
+            const publishActivity = (running) => {
+                try {
+                    this.ctx.broadcast?.({ type: 'runtime.continuation', projectId: this.ctx.project.id, jobId: runId, railIndex: parent.rail_index, active: running });
+                }
+                catch { /* durable log remains available */ }
             };
+            publishActivity(true);
             const requested = [...(input.approve?.length ? ['approve ' + input.approve.join(',')] : []), ...(input.recover?.length ? ['recover ' + input.recover.join(',')] : []), ...(input.invalidate?.length ? ['invalidate ' + input.invalidate.join(',')] : []), ...(input.answer ? ['answered question'] : [])];
             logLine(`[runtime] continuation started from phase ${state.nextStep ?? 'end'}${requested.length ? ' (' + requested.join('; ') + ')' : ''}; the original worktree and frozen scope are reused`);
             void this.dependencies.execute({
@@ -227,6 +250,10 @@ class AgentRuntimeControls {
                         (0, db_1.appendEvent)(this.ctx.db, runId, ++sequence, { event_type: eventType, source: 'stdout', payload: line });
                         (0, loop_runs_store_1.updateLoopStepActivityCheckpoint)(this.ctx.db, runId, stepKey, undefined, Date.now());
                     })();
+                    try {
+                        this.ctx.broadcast?.({ type: 'event', jobId: runId, event_type: eventType, source: 'stdout', payload: line, seq: sequence, timestamp: new Date().toISOString() });
+                    }
+                    catch { /* persisted event remains authoritative */ }
                 },
                 onSpawn: (child) => {
                     active.child = child;
@@ -235,7 +262,7 @@ class AgentRuntimeControls {
                     else if (active.cancelled)
                         this.cancel(runId);
                 },
-            }).then((result) => {
+            }).then(async (result) => {
                 if (this.disposed)
                     return;
                 logLine(result.failed ? `[runtime] continuation ended: ${result.errorText ?? 'failed'}` : '[runtime] continuation completed', result.failed ? 'stderr' : 'stdout');
@@ -243,14 +270,51 @@ class AgentRuntimeControls {
                 (0, loop_run_manager_1.recoverOrphanLoopStepAccounting)(this.ctx.db, new Date().toISOString(), runId);
                 if (result.errorText)
                     this.errors.set(runId, result.errorText);
-            }).catch(() => { this.errors.set(runId, 'Runtime continuation failed. Inspect the saved phase state before retrying.'); })
-                .finally(() => { clearTimeout(active.forceKillTimer); this.active.delete(runId); });
+                if (!result.failed && !active.cancelled)
+                    await this.dependencies.settle?.({ db: this.ctx.db, projectId: this.ctx.project.id, runId, contextPath: context.file, cwd: context.cwd, env: context.env, broadcast: this.ctx.broadcast });
+            }).catch(() => {
+                if (this.disposed)
+                    return;
+                const message = 'Runtime continuation failed. Inspect the saved phase state before retrying.';
+                this.errors.set(runId, message);
+                logLine(`[runtime] ${message}`, 'stderr');
+            })
+                .finally(() => {
+                clearTimeout(active.forceKillTimer);
+                this.active.delete(runId);
+                this.ctx.railLoopRuns?.delete(runId);
+                this.statusCache.delete(runId);
+                publishActivity(false);
+            });
         }
         catch (error) {
             this.active.delete(runId);
+            this.ctx.railLoopRuns?.delete(runId);
+            try {
+                this.ctx.broadcast?.({ type: 'runtime.continuation', projectId: this.ctx.project.id, jobId: runId, railIndex: parent.rail_index, active: false });
+            }
+            catch { /* admission failed */ }
             throw error;
         }
     }
+    async settle(runId) {
+        if (this.active.has(runId) || (0, loop_runs_store_1.getLoopRun)(this.ctx.db, runId)?.status !== 'completed')
+            throw new RuntimeControlError(409, 'runtime_run_active', 'Wait for the execution to settle');
+        const context = this.context(runId);
+        this.active.set(runId, { cancelled: false });
+        try {
+            await (this.dependencies.settle ?? agent_runtime_settlement_1.settleRuntimeContinuation)({ db: this.ctx.db, projectId: this.ctx.project.id, runId, contextPath: context.file, cwd: context.cwd, env: context.env, broadcast: this.ctx.broadcast });
+            this.errors.delete(runId);
+        }
+        catch (error) {
+            throw new RuntimeControlError(409, 'runtime_settlement_blocked', error instanceof Error ? error.message : 'Could not prepare the recovered delivery');
+        }
+        finally {
+            this.active.delete(runId);
+            this.statusCache.delete(runId);
+            this.ctx.broadcast?.({ type: 'runtime.continuation', projectId: this.ctx.project.id, jobId: runId, railIndex: (0, loop_runs_store_1.getLoopRun)(this.ctx.db, runId)?.rail_index ?? null, active: false });
+        }
+    }
     cancel(runId) {
         const active = this.active.get(runId);
         if (!active)

package/server/dist/agent-runtime-loader.js

@@ -68,6 +68,12 @@ async function loadCoreAgentRuntime() {
     }
     return {
         RUNTIME_API_VERSION: 1,
+        rolePromptDefaults() {
+            const result = JSON.parse(invoke(['prompts']));
+            if (result.type !== 'runtime-role-prompts' || !['architect', 'developer', 'reviewer'].every(role => typeof result.defaults?.[role] === 'string' && result.defaults[role].trim()))
+                throw new Error('Core role prompt catalog is unavailable. Update the paired Core bundle.');
+            return result.defaults;
+        },
         validateRuntimeConfig(input) {
             const result = JSON.parse(invoke(['validate', '--stdin'], JSON.stringify(input)));
             if (result.type !== 'runtime-config-valid')

package/server/dist/agent-runtime-metrics.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readRuntimeEfficiency = readRuntimeEfficiency;
+const COUNTS = ['attempts', 'measuredAttempts', 'providerCalls', 'toolCalls', 'inputTokens', 'outputTokens', 'uncachedInputTokens', 'cacheReadInputTokens', 'cacheWriteInputTokens'];
+const KEYS = [...COUNTS, 'durationMs', 'agentDurationMs', 'costUsd'];
+const PHASES = ['architect', 'developer', 'verify', 'reviewer', 'archive'];
+function object(value) { return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : null; }
+function counters(value) {
+    const input = object(value);
+    if (!input)
+        return null;
+    const output = {};
+    for (const key of KEYS) {
+        const number = input[key];
+        if (number === null && key !== 'attempts' && key !== 'measuredAttempts') {
+            output[key] = null;
+            continue;
+        }
+        if (typeof number !== 'number' || !Number.isFinite(number) || number < 0 || (COUNTS.includes(key) && !Number.isSafeInteger(number)))
+            return null;
+        output[key] = number;
+    }
+    if (output.measuredAttempts > output.attempts)
+        return null;
+    return output;
+}
+/** Older Core versions omit metrics; malformed/unknown versions do not break run controls. */
+function readRuntimeEfficiency(value) {
+    const input = object(value);
+    if (input?.schemaVersion !== 1 || !Array.isArray(input.phases) || input.phases.length > PHASES.length)
+        return undefined;
+    const total = counters(input.total);
+    if (!total)
+        return undefined;
+    const phases = [];
+    for (const raw of input.phases) {
+        const phase = object(raw), count = counters(phase);
+        if (!phase || !count || typeof phase.stepId !== 'string' || !PHASES.includes(phase.stepId) || phases.some(item => item.stepId === phase.stepId))
+            return undefined;
+        for (const key of ['providers', 'models'])
+            if (!Array.isArray(phase[key]) || phase[key].length > 50 || !phase[key].every((item) => typeof item === 'string' && item.length > 0 && item.length <= 256))
+                return undefined;
+        phases.push({ ...count, stepId: phase.stepId, providers: [...phase.providers], models: [...phase.models] });
+    }
+    return { schemaVersion: 1, total, phases };
+}