specrails-desktop 2.45.0 → 2.47.0

package/server/dist/loop-run-manager.js

@@ -5,6 +5,8 @@ exports.truncate = truncate;
 exports.resolveRunVars = resolveRunVars;
 exports.extractChangeId = extractChangeId;
 exports.recoverOrphanLoopStepAccounting = recoverOrphanLoopStepAccounting;
+const agent_runtime_events_1 = require("./agent-runtime-events");
+const agent_runtime_settings_1 = require("./agent-runtime-settings");
 const multi_repo_execution_store_1 = require("./multi-repo-execution-store");
 const win_spawn_1 = require("./util/win-spawn");
 const db_1 = require("./db");
@@ -561,7 +563,7 @@ class LoopRunManager {
     async run(req) {
         // Later fresh steps must verify the admitted spec, even if its caller or
         // backlog changes while the implementation is running.
-        req = { ...req, graph: structuredClone(req.graph) };
+        req = { ...req, runtimeProviderOverride: (0, agent_runtime_settings_1.validateRuntimeProviderOverride)(req.runtimeProviderOverride), graph: structuredClone(req.graph) };
         if (req.spec)
             req = { ...req, spec: structuredClone(req.spec) };
         if (req.executionManifest)
@@ -752,6 +754,12 @@ class LoopRunManager {
                 logLine(line);
                 return;
             }
+            if (eventType === 'runtime-efficiency-event') {
+                const validated = (0, agent_runtime_events_1.runtimeEfficiencyEventLine)(line, runId);
+                if (!validated || (0, agent_runtime_events_1.isRecordedRuntimeEfficiencyEvent)(this.db, runId, validated))
+                    return;
+                line = validated;
+            }
             const s = takeSeq();
             try {
                 (0, db_1.appendEvent)(this.db, runId, s, { event_type: eventType, source: 'stdout', payload: line });
@@ -1099,7 +1107,7 @@ class LoopRunManager {
                         // were noise once the step explorer landed; the log now opens on real
                         // output). `template` is omitted when rendering changed nothing (a
                         // plain free-text prompt would just duplicate `command`).
-                        const stepTitle = `🤖 ${nodeLabel || 'AI Step'} (${nodeProvider}/${nodeModel}${nodeEffort ? `, effort: ${nodeEffort}` : ''})`;
+                        const stepTitle = requiresCoreCompletion ? '🤖 Implementation (agent runtime)' : `🤖 ${nodeLabel || 'AI Step'} (${nodeProvider}/${nodeModel}${nodeEffort ? `, effort: ${nodeEffort}` : ''})`;
                         const stepDetail = {
                             ...(rawTemplate && rawTemplate !== base ? { template: capText(rawTemplate, STEP_TEMPLATE_CAP) } : {}),
                             ...(base ? { command: capText(base, STEP_COMMAND_CAP) } : {}),
@@ -1145,7 +1153,7 @@ class LoopRunManager {
                                     nextEventSeq: takeSeq,
                                     recoveryStepKey: aiRecoveryKey,
                                 })
-                                : this.executors.runAiStep({ coreRun, prompt, sessionId, provider: nodeProvider, model: nodeModel, effort: nodeEffort, profileName: req.profileName, cwd: req.cwd, repoDir: req.repoDir, executionManifest: req.executionManifest, onLine: logLine, onRawLine, onSpawn: (c) => this._activeChild.set(runId, c), aiStepTimeoutMs: effectiveTimeoutMs, idleTimeoutMs });
+                                : this.executors.runAiStep({ runtimeProviderOverride: req.runtimeProviderOverride, coreRun, prompt, sessionId, provider: nodeProvider, model: nodeModel, effort: nodeEffort, profileName: req.profileName, cwd: req.cwd, repoDir: req.repoDir, executionManifest: req.executionManifest, onLine: logLine, onRawLine, onSpawn: (c) => this._activeChild.set(runId, c), aiStepTimeoutMs: effectiveTimeoutMs, idleTimeoutMs });
                         };
                         let res = await runAttempt(aiSessionId);
                         if (this._disposed)
@@ -1691,7 +1699,7 @@ class LoopRunManager {
         // `≥` when any cost-bearing step ended unpriced (timeout/crash) — the figure
         // is a lower bound, not exact. Providers without usage telemetry get an
         // explicit unavailable marker, never a fabricated "$0.0000".
-        logLine(`\n■ Loop execution finished: ${outcome} — ${stepNum} step${stepNum === 1 ? '' : 's'}, ${iteration} decider evaluation${iteration === 1 ? '' : 's'}, ${finalJobUsage.numTurns ?? 'unknown'} agent turns, ` +
+        logLine(`\n■ Loop execution finished: ${outcome} — ` +
             (costAvailable
                 ? `${costUncertain ? '≥ ' : ''}$${totalCost.toFixed(4)}`
                 : 'usage/cost unavailable'));

package/server/dist/mcp/tools/rails.js

@@ -47,6 +47,7 @@ function railsTools() {
                 'stop (destructive — kills all active jobs and loop runs for the rail). ' +
                 'For on_review tickets with an already-open GitHub PR (including a published pr_ready delivery), launch automatically tries to continue that PR head branch; Jira-linked in_progress tickets can do the same when the PR match is explicit; fresh tickets still start from the project integration branch. ' +
                 'When launched from the in-app agent chat without an explicit aiEngine, the engine defaults to your conversation\'s provider. On that same provider, an omitted model inherits the conversation model; an explicit model wins (pass aiEngine to override; launch_all always uses each rail\'s stored engine). ' +
+                'For Implement and Batch Implement, the selected launch provider applies to ALL runtime roles (architect, developer, reviewer); an explicit launch model/effort also applies to each role. Resuming an existing execution keeps its original frozen role configuration; start a new launch to change providers. ' +
                 'User-facing naming: call the free-form autonomous mode "Freestyle"; use "freestyle" as the canonical API enum value for that same capability. ' +
                 'For small OpenSpec-governed work, recommend "SDD Quick (OpenSpec)" and launch with mode "loop" plus loopId "factory:sdd-quick-openspec"; keep Freestyle for ticket-local implementation-only work. ' +
                 'NAMING: railIndex is the 0-BASED internal identity; the dashboard shows rails 1-based ("Rail N" = railIndex N-1). When talking to the user, ALWAYS say "Rail <railIndex + 1>" (or the rail\'s custom name) — results include railLabel with the correct user-facing label.',

package/server/dist/mcp/tools/specs.js

@@ -59,7 +59,8 @@ function specsTools() {
                 '— pass contractRefine: false to skip it, e.g. when the user declined it), ' +
                 'generate (same as create but takes a pre-formed idea string; both accept contextScope/attachments/createLocal), ' +
                 'ai_edit (ai-spawn, AI-edit a ticket title+description), ' +
-                'cancel_ai_edit (abort an in-flight ai-edit), contract_refine (ai-spawn, append/re-fire a Contract Layer — Claude-only; ' +
+                'cancel_ai_edit (abort an in-flight ai-edit), contract_refine (ai-spawn, append/re-fire a Contract Layer — Claude or Codex; ' +
+                'pass numeric id, not ticketId; optional aiEngine selects the provider for origin-less specs, while Explore specs retain their origin provider; ' +
                 'works on Explore-origin AND agent-authored/Quick specs), ' +
                 'smash (ai-spawn, decompose a spec into N child sub-specs under an epic — Claude-only), ' +
                 'smash_undo (destructive, reverse a prior SMASH), delete_epic_children (destructive, delete all children of an epic), ' +
@@ -150,7 +151,7 @@ function specsTools() {
                 aiEngine: zod_1.z
                     .string()
                     .optional()
-                    .describe('create/generate: provider/engine override (must be an installed provider; defaults to primary)'),
+                    .describe('create/generate/contract_refine: provider/engine override (must be installed; contract_refine cannot switch an Explore-origin provider)'),
                 contextScope: zod_1.z
                     .record(zod_1.z.unknown())
                     .optional()
@@ -158,7 +159,7 @@ function specsTools() {
                 contractRefine: zod_1.z
                     .boolean()
                     .optional()
-                    .describe('create/generate/commit_draft: enrich the spec with a Contract Layer post-persist (Claude-only). DEFAULTS TO TRUE — pass false to opt out (e.g. the user asked for no contract layer)'),
+                    .describe('create/generate/commit_draft: enrich the spec with a Contract Layer post-persist (Claude or Codex). DEFAULTS TO TRUE — pass false to opt out (e.g. the user asked for no contract layer)'),
                 attachmentIds: zod_1.z.array(zod_1.z.string()).optional().describe('create/generate/ai_edit: attachment ids (create/generate require pendingSpecId)'),
                 // ── ai_edit ──────────────────────────────────────────────────────
                 instructions: zod_1.z.string().optional().describe('ai_edit: natural-language editing instructions (required)'),
@@ -428,7 +429,9 @@ function specsTools() {
                         return { ...r, hint: WATCH_HINT };
                     }
                     case 'contract_refine': {
-                        const r = await (0, types_1.apiCall)(ctx, 'POST', `${base}/tickets/${requireId()}/contract-refine`);
+                        const r = await (0, types_1.apiCall)(ctx, 'POST', `${base}/tickets/${requireId()}/contract-refine`, {
+                            aiEngine: args.aiEngine,
+                        });
                         return { ...r, hint: CONTRACT_REFINE_HINT };
                     }
                     case 'smash': {

package/server/dist/multi-repo-execution.js

@@ -353,6 +353,7 @@ async function launchMultiRepositoryRail(input, io = {}) {
             };
             await (0, rail_isolated_launch_1.launchIsolatedRail)({
                 ...input, ctx: childCtx, scope: effectiveScope, loopGraph: graph,
+                runtimeStateProject: ctx.project,
                 revision: input.revision && previous ? { ...input.revision, ofDeliveryId: previous.id, decision: previous.decision } : undefined,
                 requiredPrContinuation: continuation,
                 explicitPrTarget: continuation?.prNumber ? { prNumber: continuation.prNumber } : input.explicitPrTarget,

package/server/dist/project-router-jobs.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerJobsRoutes = registerJobsRoutes;
+const agent_runtime_controls_router_1 = require("./agent-runtime-controls-router");
 const ids_1 = require("./ids");
 const db_1 = require("./db");
 const queue_manager_1 = require("./queue-manager");
@@ -229,6 +230,10 @@ function registerJobsRoutes(deps) {
     router.post('/:projectId/jobs/:id/cancel', (req, res) => {
         const id = req.params.id;
         const c = ctx(req);
+        if ((0, agent_runtime_controls_router_1.cancelRuntimeContinuation)(c, id)) {
+            res.json({ ok: true, status: 'canceling' });
+            return;
+        }
         // A loop run is backed by a job row but is NOT a QueueManager job — it is
         // driven by the LoopRunManager. Cancel it through the engine (which settles
         // it 'stopped' → finishJob('canceled') + releases the rail's tickets).
@@ -409,12 +414,13 @@ function registerJobsRoutes(deps) {
         const from = req.query.from;
         const to = req.query.to;
         const { db } = ctx(req);
-        const result = (0, job_listing_1.listUnifiedJobs)(db, { limit, offset, status, from, to });
+        const result = (0, job_listing_1.listUnifiedJobs)(db, { limit, offset, status, from, to, activeRuntimeIds: (0, agent_runtime_controls_router_1.activeRuntimeContinuationIds)(ctx(req)) });
         // Annotate each job with hasTelemetry so the client can show the
         // Export diagnostic button without an extra round trip.
         const jobsWithTelemetry = (0, db_1.getJobsWithTelemetry)(db);
         const annotatedJobs = result.jobs.map((j) => ({
             ...j,
+            ...((0, agent_runtime_controls_router_1.isRuntimeContinuationActive)(ctx(req), j.id) ? { status: 'running', finished_at: null } : {}),
             hasTelemetry: jobsWithTelemetry.has(j.id),
         }));
         res.json({ jobs: annotatedJobs, total: result.total });
@@ -593,7 +599,7 @@ function registerJobsRoutes(deps) {
             interactiveAcceptingTurns = qmMode !== null || loopStepActive || loopPaused;
             interactiveSettleMode = qmMode ?? ((loopStepActive || loopPaused || loopRun) ? 'auto' : null);
         }
-        const annotated = { ...job, hasTelemetry: (0, db_1.hasJobTelemetry)(db, jobId), tickets, interactiveSettleMode, interactiveAcceptingTurns, loopPaused, loopPauseReason };
+        const annotated = { ...job, ...((0, agent_runtime_controls_router_1.isRuntimeContinuationActive)(c, jobId) ? { status: 'running', finished_at: null } : {}), hasTelemetry: (0, db_1.hasJobTelemetry)(db, jobId), tickets, interactiveSettleMode, interactiveAcceptingTurns, loopPaused, loopPauseReason };
         res.json({ job: annotated, events, phaseDefinitions });
     });
     router.delete('/:projectId/jobs', (req, res) => {

package/server/dist/project-router-tickets.js

@@ -271,7 +271,7 @@ function registerTicketsRoutes(deps) {
         const rawScope = req.body?.contextScope;
         // Contract Layer is available only when the selected adapter advertises a
         // safe structured-action implementation.
-        const quickContractRefine = (0, providers_1.getAdapter)(provider).capabilities.structuredActions !== true
+        const quickContractRefine = !(0, runtime_1.supportsContractRefine)((0, providers_1.getAdapter)(provider))
             ? false
             : typeof req.body?.contractRefine === 'boolean'
                 ? req.body.contractRefine
@@ -1057,7 +1057,7 @@ function registerTicketsRoutes(deps) {
             if (conversationId &&
                 created &&
                 convoProvider &&
-                (0, providers_1.getAdapter)(convoProvider).capabilities.structuredActions === true) {
+                (0, runtime_1.supportsContractRefine)((0, providers_1.getAdapter)(convoProvider))) {
                 const createdTicketId = created.id;
                 const convoId = conversationId;
                 console.log(`[project-router] from-draft hook: scheduling refine ticket=${createdTicketId} conv=${convoId}`);
@@ -1093,7 +1093,7 @@ function registerTicketsRoutes(deps) {
                 const requestedAgentProvider = typeof body.agentProvider === 'string' ? body.agentProvider : null;
                 const providerCheck = (0, provider_selection_1.validateRequestedProvider)(project, requestedAgentProvider);
                 const refineProvider = providerCheck.ok ? providerCheck.provider : null;
-                if (refineProvider && (0, providers_1.getAdapter)(refineProvider).capabilities.structuredActions === true) {
+                if (refineProvider && (0, runtime_1.supportsContractRefine)((0, providers_1.getAdapter)(refineProvider))) {
                     const refineTicketId = created.id;
                     const refineTitle = created.title;
                     const refineDescription = created.description;
@@ -1262,7 +1262,7 @@ function registerTicketsRoutes(deps) {
                 return;
             }
             const refineProvider = refineProviderCheck.provider;
-            if ((0, providers_1.getAdapter)(refineProvider).capabilities.structuredActions !== true) {
+            if (!(0, runtime_1.supportsContractRefine)((0, providers_1.getAdapter)(refineProvider))) {
                 res.status(409).json({ error: `contract_refine_unsupported_for_${refineProvider}` });
                 return;
             }

package/server/dist/providers/runtime.js

@@ -5,6 +5,7 @@ exports.isSafeCustomModelAlias = isSafeCustomModelAlias;
 exports.isModelAvailableForAdapter = isModelAvailableForAdapter;
 exports.supportsToolPolicy = supportsToolPolicy;
 exports.pureOutputToolPolicy = pureOutputToolPolicy;
+exports.supportsContractRefine = supportsContractRefine;
 exports.requireToolPolicy = requireToolPolicy;
 exports.reasoningEffortsForModel = reasoningEffortsForModel;
 exports.defaultReasoningEffortForModel = defaultReasoningEffortForModel;
@@ -61,6 +62,11 @@ function pureOutputToolPolicy(adapter) {
         return 'read-only';
     return null;
 }
+/** Contract extraction also supports Codex's enforced read-only transform. */
+function supportsContractRefine(adapter) {
+    return adapter.capabilities.structuredActions === true
+        || (adapter.id === 'codex' && pureOutputToolPolicy(adapter) !== null);
+}
 /** Throw a stable, provider-identifying error for an unsupported boundary. */
 function requireToolPolicy(adapter, policy) {
     if (!supportsToolPolicy(adapter, policy)) {

package/server/dist/rail-isolated-launch.js

@@ -1019,7 +1019,7 @@ async function launchIsolatedRail(input, io = {}) {
         // A paused/interrupted programmatic workflow owns unfinished changes and
         // verification evidence in this exact mount. Keep them available for
         // explicit Core recovery, including a currently clean worktree.
-        if (implementationOutcome === 'failed' && (0, agent_runtime_paths_1.hasAgentRuntimeRequest)(ctx.project, a.runId)) {
+        if (implementationOutcome === 'failed' && (0, agent_runtime_paths_1.hasAgentRuntimeRequest)(input.runtimeStateProject ?? ctx.project, a.runId)) {
             markWorktree(a, 'needs-review');
             return {
                 run: a, implementationOutcome, deliveryOutcome: 'blocked',
@@ -1187,6 +1187,7 @@ async function launchIsolatedRail(input, io = {}) {
         });
         const spec = ctx.getTicketSpec(a.ticketId);
         const enginePromise = ctx.loopRunManager.run({
+            runtimeProviderOverride: input.runtimeProviderOverride,
             runId: a.runId, loopId, loopName, graph: loopGraph, projectId: ctx.project.id,
             cwd: a.handle.worktreePath, repoDir: a.handle.worktreePath,
             repositoryId: singleRepositoryId,

package/server/dist/rails-router.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.prDeliveryRevisionAllowed = prDeliveryRevisionAllowed;
 exports.createRailsRouter = createRailsRouter;
+const agent_runtime_settings_1 = require("./agent-runtime-settings");
 const express_1 = require("express");
 const rails_store_1 = require("./rails-store");
 const queue_manager_1 = require("./queue-manager");
@@ -432,6 +433,14 @@ function createRailsRouter() {
             res.status(400).json({ error: 'Invalid rail index' });
             return;
         }
+        let runtimeProviderOverride;
+        try {
+            runtimeProviderOverride = (0, agent_runtime_settings_1.validateRuntimeProviderOverride)(req.body?.runtimeProviderOverride);
+        }
+        catch {
+            res.status(400).json({ error: 'invalid_runtime_provider_override' });
+            return;
+        }
         let { mode = 'implement' } = req.body ?? {};
         const { repositoryIds: rawRepositoryIds, baseDeliveryIds, profileName, aiEngine, model, loopId: rawLoopId, reasoning_effort, originConversationId, originSurface, targetPrNumber, revisionOfDeliveryId, revisionNote, baseBranch: rawBaseBranch } = req.body ?? {};
         // Revision launch (nontech-review-experience Wave 3): the user asked for a
@@ -635,6 +644,21 @@ function createRailsRouter() {
         // Only pass a provider override when one was actually requested (keeps
         // single-provider rails on the legacy code path).
         const railProvider = requestedEngine ? engineCheck.provider : undefined;
+        // Mission/MCP and Launch-all submit aiEngine or use the saved rail engine.
+        // Resolve this at the shared boundary, not only in the Dashboard payload.
+        if (!runtimeProviderOverride && requestedEngine) {
+            try {
+                runtimeProviderOverride = (0, agent_runtime_settings_1.validateRuntimeProviderOverride)({ provider: engineCheck.provider, ...(model ? { model } : {}), ...(reasoning_effort ? { effort: reasoning_effort } : {}) });
+            }
+            catch {
+                res.status(400).json({ error: 'invalid_runtime_provider_override' });
+                return;
+            }
+        }
+        if (runtimeProviderOverride && runtimeProviderOverride.provider !== engineCheck.provider) {
+            res.status(400).json({ error: 'runtime_provider_mismatch' });
+            return;
+        }
         // Freestyle bypasses the OpenSpec pipeline and hands the raw spec to a
         // provider that explicitly advertises autonomous freestyle support.
         if (mode === 'freestyle' && (0, providers_1.getAdapter)(engineCheck.provider).capabilities.freestyle !== true) {
@@ -907,6 +931,7 @@ function createRailsRouter() {
                         }
                         try {
                             const ids = await (0, rail_isolated_launch_1.launchIsolatedRail)({
+                                runtimeProviderOverride,
                                 ctx: c, railIndex, ticketIds: [...rail.ticketIds], repositoryIds, ...repositoryBases, loopId, loopName, loopGraph,
                                 provider: loopProvider, model: loopModel, effort, scope,
                                 profileName: resolvedProfile,
@@ -1015,6 +1040,7 @@ function createRailsRouter() {
                     };
                     const runPromise = c.loopRunManager
                         .run({
+                        runtimeProviderOverride,
                         runId,
                         loopId,
                         loopName,
@@ -1211,7 +1237,8 @@ function createRailsRouter() {
         // (so we deliberately do NOT delete railLoopRuns here).
         for (const runId of targetLoopRunIds) {
             try {
-                c.loopRunManager.cancel(runId);
+                if (!(0, agent_runtime_controls_router_1.cancelRuntimeContinuation)(c, runId))
+                    c.loopRunManager.cancel(runId);
                 canceledCount++;
             }
             catch (err) {
@@ -1534,3 +1561,4 @@ function createRailsRouter() {
     });
     return router;
 }
+const agent_runtime_controls_router_1 = require("./agent-runtime-controls-router");

package/server/dist/runtime-role-prompts-router.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerRuntimeRolePromptRoutes = registerRuntimeRolePromptRoutes;
+const agent_runtime_settings_1 = require("./agent-runtime-settings");
+const agent_runtime_loader_1 = require("./agent-runtime-loader");
+function registerRuntimeRolePromptRoutes(router) {
+    router.get('/runtime-role-prompts', async (_req, res) => {
+        try {
+            const defaults = (await (0, agent_runtime_loader_1.loadCoreAgentRuntime)()).rolePromptDefaults();
+            res.json({ defaults, overrides: (0, agent_runtime_settings_1.loadRuntimeRolePrompts)() });
+        }
+        catch (error) {
+            res.status(422).json({ message: error.message });
+        }
+    });
+    router.put('/runtime-role-prompts', async (req, res) => {
+        try {
+            const defaults = (await (0, agent_runtime_loader_1.loadCoreAgentRuntime)()).rolePromptDefaults();
+            res.json({ defaults, overrides: (0, agent_runtime_settings_1.saveRuntimeRolePrompts)(req.body.overrides) });
+        }
+        catch (error) {
+            res.status(error instanceof agent_runtime_settings_1.AgentRuntimeConfigError ? 400 : 500).json({ message: error.message });
+        }
+    });
+}

package/server/dist/schemas/agent-runtime.schema.json

@@ -4,10 +4,20 @@
   "title": "Specrails programmatic agent runtime",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schemaVersion", "enabled", "providers", "agents", "verification"],
+  "required": ["schemaVersion", "providers", "agents", "verification"],
   "properties": {
     "schemaVersion": { "const": 1 },
-    "enabled": { "type": "boolean" },
+    "efficiency": { "type": "object", "additionalProperties": false, "required": ["schemaVersion"], "properties": {
+      "schemaVersion": { "const": 1 }, "contextMode": { "enum": ["full", "incremental"] }, "reviewMode": { "enum": ["full", "incremental"] },
+      "planning": { "enum": ["full", "proportional"] }, "acceptDeveloperChecks": { "type": "boolean" },
+      "verification": { "type": "object", "additionalProperties": false, "properties": { "maxConcurrency": { "type": "integer", "minimum": 1, "maximum": 4 } } }
+    } },
+    "rolePrompts": { "type": "object", "additionalProperties": false, "properties": {
+      "architect": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" },
+      "developer": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" },
+      "reviewer": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" }
+    } },
+    "enabled": { "type": "boolean", "deprecated": true, "description": "Accepted for saved configuration compatibility; implementation always uses the agent runtime." },
     "providers": { "type": "array", "items": { "oneOf": [
       { "type": "object", "additionalProperties": false, "required": ["id", "kind", "cli"], "properties": {
         "id": { "$ref": "#/definitions/id" }, "kind": { "const": "cli" }, "cli": { "enum": ["claude", "codex", "gemini", "kimi"] }
@@ -26,6 +36,7 @@
       "maxCostUsd": { "type": "number", "exclusiveMinimum": 0 }, "timeoutMs": { "$ref": "#/definitions/positiveInteger" }
     } },
     "verification": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["repositoryId", "command", "args"], "properties": {
+      "key": { "$ref": "#/definitions/id" }, "label": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "\\S" }, "policy": { "$ref": "#/definitions/checkPolicy" },
       "repositoryId": { "$ref": "#/definitions/id" }, "command": { "type": "string", "minLength": 1 },
       "args": { "type": "array", "items": { "type": "string" } }, "cwd": { "type": "string", "minLength": 1 },
       "env": { "type": "object", "propertyNames": { "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" }, "additionalProperties": { "type": "string" } },
@@ -44,10 +55,21 @@
     } }
   },
   "definitions": {
+    "effort": { "type": "string", "pattern": "^[a-z][a-z0-9_-]{0,31}$" },
+    "inputList": { "type": "array", "maxItems": 256, "items": { "type": "string", "minLength": 1, "maxLength": 4096, "pattern": "\\S" } },
+    "checkPolicy": { "type": "object", "additionalProperties": false, "properties": {
+      "reuse": { "enum": ["never", "snapshot-local"] }, "inputs": { "$ref": "#/definitions/inputList" },
+      "toolchainInputs": { "$ref": "#/definitions/inputList" }, "resources": { "$ref": "#/definitions/inputList" },
+      "deterministic": { "type": "boolean" }, "readOnly": { "type": "boolean" }, "independentGroup": { "$ref": "#/definitions/id" }
+    } },
     "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" },
     "positiveInteger": { "type": "integer", "minimum": 1 },
     "score": { "type": "number", "minimum": 0, "maximum": 100 },
-    "agent": { "type": "object", "additionalProperties": false, "required": ["provider"], "properties": {
+    "agent": { "type": "object", "additionalProperties": false, "required": ["provider"], "dependencies": { "escalation": ["model"] }, "properties": {
+      "effort": { "$ref": "#/definitions/effort" },
+      "escalation": { "type": "object", "additionalProperties": false, "required": ["model"], "properties": {
+        "model": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "^[^-\\r\\n\\u0000][^\\r\\n\\u0000]*$" }, "effort": { "$ref": "#/definitions/effort" }
+      } },
       "provider": { "$ref": "#/definitions/id" }, "model": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "^[^-\\r\\n\\u0000][^\\r\\n\\u0000]*$" },
       "maxTurns": { "$ref": "#/definitions/positiveInteger" }
     } }