specrails-desktop 2.55.0 → 2.55.1

package/server/dist/{agent-chat-manager.js → modules/missions/runtime/agent-chat-manager.js}

@@ -10,29 +10,29 @@ const readline_1 = require("readline");
 const os_1 = require("os");
 const node_path_1 = __importDefault(require("node:path"));
 const promises_1 = require("node:fs/promises");
-const win_spawn_1 = require("./util/win-spawn");
-const providers_1 = require("./providers");
-const runtime_1 = require("./providers/runtime");
-const registry_1 = require("./providers/registry");
-const spawn_lifecycle_1 = require("./spawn-lifecycle");
-const live_session_1 = require("./providers/live-session");
-const live_session_types_1 = require("./providers/live-session-types");
-const cli_prompt_1 = require("./util/cli-prompt");
-const result_event_1 = require("./result-event");
-const desktop_db_1 = require("./desktop-db");
-const feature_flags_1 = require("./feature-flags");
+const win_spawn_1 = require("../../../util/win-spawn");
+const providers_1 = require("../../../providers");
+const runtime_1 = require("../../../providers/runtime");
+const registry_1 = require("../../../providers/registry");
+const spawn_lifecycle_1 = require("../../execution/runtime/spawn-lifecycle");
+const live_session_1 = require("../../../providers/live-session");
+const live_session_types_1 = require("../../../providers/live-session-types");
+const cli_prompt_1 = require("../../../util/cli-prompt");
+const result_event_1 = require("../../accounting/runtime/result-event");
+const desktop_db_1 = require("../../../desktop-db");
+const feature_flags_1 = require("../../../feature-flags");
 const agent_cwd_manager_1 = require("./agent-cwd-manager");
 const agent_operator_prompt_1 = require("./agent-operator-prompt");
-const agent_mcp_config_1 = require("./agent-mcp-config");
-const codex_spawn_1 = require("./plugins/codex-spawn");
-const workspace_resolution_1 = require("./workspace-resolution");
-const external_mcp_1 = require("./external-mcp");
+const agent_mcp_config_1 = require("../../../agent-mcp-config");
+const codex_spawn_1 = require("../../../plugins/codex-spawn");
+const workspace_resolution_1 = require("../../../workspace-resolution");
+const external_mcp_1 = require("../../../external-mcp");
 const agent_tier_1 = require("./agent-tier");
-const agent_capability_1 = require("./mcp/agent-capability");
-const attachment_manager_1 = require("./attachment-manager");
+const agent_capability_1 = require("../../../mcp/agent-capability");
+const attachment_manager_1 = require("../../../attachment-manager");
 const agent_context_resolver_1 = require("./agent-context-resolver");
-const agent_store_1 = require("./agent-store");
-const explore_draft_title_1 = require("./explore-draft-title");
+const agent_store_1 = require("../../agents/runtime/agent-store");
+const explore_draft_title_1 = require("../../conversations/runtime/explore-draft-title");
 const agent_input_store_1 = require("./agent-input-store");
 const agent_steering_1 = require("./agent-steering");
 /**

package/server/dist/{agent-chat-router.js → modules/missions/runtime/agent-chat-router.js}

@@ -8,13 +8,13 @@ exports.createAgentChatRouter = createAgentChatRouter;
 const fs_1 = __importDefault(require("fs"));
 const multer_1 = __importDefault(require("multer"));
 const express_1 = require("express");
-const providers_1 = require("./providers");
-const provider_selection_1 = require("./provider-selection");
+const providers_1 = require("../../../providers");
+const provider_selection_1 = require("../../../provider-selection");
 const agent_tier_1 = require("./agent-tier");
-const feature_flags_1 = require("./feature-flags");
-const attachment_manager_1 = require("./attachment-manager");
-const agent_store_1 = require("./agent-store");
-const transient_children_1 = require("./transient-children");
+const feature_flags_1 = require("../../../feature-flags");
+const attachment_manager_1 = require("../../../attachment-manager");
+const agent_store_1 = require("../../agents/runtime/agent-store");
+const transient_children_1 = require("../../../transient-children");
 const agent_input_store_1 = require("./agent-input-store");
 function isAgentChatEnabled() {
     return process.env.SPECRAILS_AGENT_CHAT !== 'false';

package/server/dist/{agent-context-resolver.js → modules/missions/runtime/agent-context-resolver.js}

@@ -3,14 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildResolvedAgentContextBlock = buildResolvedAgentContextBlock;
 exports.buildAgentProjectContextBlock = buildAgentProjectContextBlock;
 exports.buildAgentHistoryBlock = buildAgentHistoryBlock;
-const agent_store_1 = require("./agent-store");
-const spec_addenda_core_1 = require("./spec-addenda-core");
-const db_1 = require("./db");
-const desktop_db_1 = require("./desktop-db");
-const workspace_resolution_1 = require("./workspace-resolution");
-const ticket_store_1 = require("./ticket-store");
-const project_repositories_1 = require("./project-repositories");
-const code_explorer_router_1 = require("./code-explorer-router");
+const agent_store_1 = require("../../agents/runtime/agent-store");
+const spec_addenda_core_1 = require("../../specs/runtime/spec-addenda-core");
+const db_1 = require("../../../db");
+const desktop_db_1 = require("../../../desktop-db");
+const workspace_resolution_1 = require("../../../workspace-resolution");
+const ticket_store_1 = require("../../specs/runtime/ticket-store");
+const project_repositories_1 = require("../../../project-repositories");
+const code_explorer_router_1 = require("../../code/runtime/code-explorer-router");
 const MAX_BLOCK_CHARS = 28_000;
 const MAX_DESCRIPTION_CHARS = 7_000;
 const MAX_EVENT_PAYLOAD_CHARS = 1_200;

package/server/dist/{agent-fence-promotion.js → modules/missions/runtime/agent-fence-promotion.js}

@@ -7,7 +7,7 @@
 // refuses because no frame was ever registered. This pass re-tags a CLOSED
 // generic fence whose body unambiguously has one protocol shape. Anything
 // ambiguous is left untouched; fences already carrying a protocol tag are
-// never rewritten. Mirror: server/agent-fence-promotion.ts (keep in sync).
+// never rewritten. Mirror: server/modules/missions/runtime/agent-fence-promotion.ts (keep in sync).
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.detectProtocolShape = detectProtocolShape;
 exports.promoteAgentProtocolFences = promoteAgentProtocolFences;

package/server/dist/{agent-input-store.js → modules/missions/runtime/agent-input-store.js}

@@ -14,7 +14,7 @@ exports.cancelPendingAgentInputs = cancelPendingAgentInputs;
 exports.recoverPendingAgentInputs = recoverPendingAgentInputs;
 exports.decorateAgentInputMessages = decorateAgentInputMessages;
 const crypto_1 = require("crypto");
-const agent_store_1 = require("./agent-store");
+const agent_store_1 = require("../../agents/runtime/agent-store");
 exports.MAX_PENDING_AGENT_INPUTS = 50;
 class AgentInputConflictError extends Error {
     code = 'agent_input_conflict';

package/server/dist/{agent-operator-prompt.js → modules/missions/runtime/agent-operator-prompt.js}

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RAIL_LAUNCH_CARD_SYSTEM_CLAUSE = exports.RAIL_LAUNCH_CARD_SECTION = exports.OPERATOR_SYSTEM_PROMPT = exports.OPERATOR_INSTRUCTIONS = void 0;
 exports.buildOperatorInstructions = buildOperatorInstructions;
 exports.buildOperatorSystemPrompt = buildOperatorSystemPrompt;
-const spec_contract_prompt_1 = require("./spec-contract-prompt");
+const spec_contract_prompt_1 = require("../../specs/runtime/spec-contract-prompt");
 // ─── Single source of truth for the in-app operator agent prompts ─────────────
 // OPERATOR_INSTRUCTIONS is the CANONICAL prompt written to CLAUDE.md,
 // AGENTS.md, and GEMINI.md in ~/.specrails/agent-cwd/. Kimi's native
@@ -18,7 +18,7 @@ const spec_contract_prompt_1 = require("./spec-contract-prompt");
 // interpolation, no live data) so Anthropic prompt caching hits on turns 2+.
 // Dynamic per-turn state (pinned project, permission level, provider) rides the
 // user-turn prefix in AgentChatManager — never add it here.
-const feature_flags_1 = require("./feature-flags");
+const feature_flags_1 = require("../../../feature-flags");
 exports.OPERATOR_INSTRUCTIONS = `# Specrails Operator Agent
 
 You are the Specrails operator: an agent embedded INSIDE the Specrails Desktop
@@ -562,8 +562,8 @@ summary later.
   (usually Freestyle for implementation-only work, SDD Quick (OpenSpec) when
   OpenSpec artifacts are in play).
 - **SDD Quick (OpenSpec) launch path.** It requires a local ticket. Update or
-  create the ticket first so it describes the follow-up. If the target OpenSpec
-  change is known, store it in ticket metadata as \`openspecChangeName\` before
+  create the ticket first (for an existing spec, attach an addendum instead of rewriting it). If the target OpenSpec
+  change is known AND there are no open addenda, store it in ticket metadata as \`openspecChangeName\` before
   launch. Then propose \`specrails_rails(launch, mode:'loop',
   loopId:'factory:sdd-quick-openspec')\`. The confirmation prompt must include
   the ticket, OpenSpec target (or "new/unknown"), launch strategy, engine/model,
@@ -603,15 +603,15 @@ summary later.
   relaunch strategy even when \`main\` did not have that spec before the PR. If
   asked why a strategy was chosen, verify against active PR contents before
   answering.
-- **"Change something about work already delivered" = a REVISION launch.** When
+- **"Change something about work already delivered" = a Quick SDD continuation.** When
   the user asks for a modification to a delivery that is awaiting their decision
   (any non-terminal card: \`on_review\`, \`pr_draft\`, \`pr_ready\`, \`no_changes\`,
   \`implementation_failed\`), call \`specrails_rails(launch)\` with
   \`revisionOfDeliveryId\` = that card's \`prDeliveryId\` and \`revisionNote\` = what
   they asked for, in their own words. Do NOT tell them to publish, discard or
   merge first, and do NOT relaunch the ordinary implement/batch mode: a revision
-  runs a dedicated Architect-less loop that builds on the existing branch instead
-  of re-planning from scratch. The rail must still carry exactly that delivery's
+  always uses Quick SDD: pass \`loopId:'factory:sdd-quick-openspec'\` alongside the delivery
+  target. The server preserves the branch while running Quick SDD. The rail must still carry exactly that delivery's
   specs; a mismatch returns \`invalid_revision_target\`, which means re-check the
   rail's spec assignment rather than retrying blindly.
 - **"Resolve / fix the review comments on this PR" = a FOLLOW-UP launch, never a
@@ -652,6 +652,16 @@ summary later.
   \`dismiss_addendum\` withdraws it. Prefer an addendum + normal launch over a
   \`revisionNote\` when the change should stay attached to the spec for later
   runs; the two combine freely.
+  **Addenda on an existing branch/open PR ALWAYS run Quick SDD**, never Revision.
+  Use \`loopId:'factory:sdd-quick-openspec'\`; the server routes addenda there
+  even if the rail stores a different loop. A same-spec pending delivery is
+  continued without requiring publish/discard first. Keep the exact ticket and
+  repository scope; pass the delivery id when known. The runtime assigns a NEW
+  run-specific OpenSpec change for the frozen addenda, so NEVER edit
+  \`openspecChangeName\` to work around an old proposal. Every phase receives
+  the full addendum text and verification must report each id with files/tests.
+  Do not claim an addendum is applied merely because the run archived a change;
+  inspect its per-addendum evidence and report missing/partial/blocked work.
 - \`pr_decision_pending\` therefore only blocks a launch that is neither a
   revision nor a continuation of an open PR head. A delivery that failed
   BEFORE any work was prepared (a busy branch, a refused worktree) is closed

package/server/dist/{agent-spec-framing.js → modules/missions/runtime/agent-spec-framing.js}

@@ -22,9 +22,9 @@
 //    model can emit on the user's behalf. It is a command word, not sentiment.
 //
 // The frame validation below MIRRORS the client parser in
-// client/src/components/agent-chat/agent-problem-frame.ts — the same
+// client/src/features/missions/components/agent-problem-frame.ts — the same
 // server/client parser pair the spec-draft protocol already maintains between
-// server/spec-draft-parser.ts and client/src/lib/spec-draft.ts.
+// server/modules/specs/runtime/spec-draft-parser.ts and client/src/features/specs/lib/spec-draft.ts.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SPEC_FRAMING_MARKER_KIND = exports.FRAMING_RESTORE_TOKEN = exports.FRAMING_WAIVER_TOKEN = void 0;
 exports.hasValidProblemFrame = hasValidProblemFrame;
@@ -32,9 +32,9 @@ exports.evaluateFramingState = evaluateFramingState;
 exports.framingRefusalMessage = framingRefusalMessage;
 exports.checkSpecFraming = checkSpecFraming;
 exports.recordSpecCommitted = recordSpecCommitted;
-const agent_store_1 = require("./agent-store");
+const agent_store_1 = require("../../agents/runtime/agent-store");
 const agent_fence_promotion_1 = require("./agent-fence-promotion");
-const registry_1 = require("./providers/registry");
+const registry_1 = require("../../../providers/registry");
 /** User-typed command word that switches framing off for the conversation. */
 exports.FRAMING_WAIVER_TOKEN = '#noframe';
 /** User-typed command word that switches it back on. */

package/server/dist/{agent-steering.js → modules/missions/runtime/agent-steering.js}

@@ -8,7 +8,7 @@ exports.acknowledgeAgentSteering = acknowledgeAgentSteering;
 exports.acknowledgeAgentInputsRead = acknowledgeAgentInputsRead;
 exports.runWithAgentSteering = runWithAgentSteering;
 const crypto_1 = require("crypto");
-const agent_capability_1 = require("./mcp/agent-capability");
+const agent_capability_1 = require("../../../mcp/agent-capability");
 // Database OBJECT identity isolates independent desktop instances even when a
 // conversation id matches. A turn is keyed by its verified capability, never
 // a client-supplied conversation/project header or an MCP transport session.

package/server/dist/{mission-run-notify.js → modules/missions/runtime/mission-run-notify.js}

@@ -23,7 +23,7 @@ exports.postRunCard = postRunCard;
 exports.settleRunCard = settleRunCard;
 exports.notifyMissionRunFailure = notifyMissionRunFailure;
 const agent_chat_registry_1 = require("./agent-chat-registry");
-const feature_flags_1 = require("./feature-flags");
+const feature_flags_1 = require("../../../feature-flags");
 const agent_failure_briefing_1 = require("./agent-failure-briefing");
 exports.RUN_CARD_ID_PREFIX = 'run:';
 function runCardId(runId) { return `${exports.RUN_CARD_ID_PREFIX}${runId}`; }

package/server/dist/modules/project-settings/adapters/http.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerProjectSettingsHttp = registerProjectSettingsHttp;
+const __1 = require("..");
+/** Inbound adapter: translate HTTP into use cases and domain errors into HTTP. */
+function registerProjectSettingsHttp(router, serviceForRequest) {
+    router.get('/:projectId/settings', (req, res) => {
+        res.json(serviceForRequest(req).getSettings());
+    });
+    router.patch('/:projectId/settings', (req, res) => {
+        try {
+            const settings = serviceForRequest(req).updateSettings(req.body);
+            res.json({ ok: true, settings });
+        }
+        catch (error) {
+            if (error instanceof __1.SettingsValidationError) {
+                res.status(400).json({ error: error.message });
+                return;
+            }
+            console.error('[project-router] settings patch error:', error);
+            res.status(500).json({ error: 'Failed to update settings' });
+        }
+    });
+}

package/server/dist/modules/project-settings/adapters/sqlite.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProjectSettings = getProjectSettings;
+exports.getFreestylePrePrompt = getFreestylePrePrompt;
+exports.updateProjectSettings = updateProjectSettings;
+exports.getQuickContractRefineLast = getQuickContractRefineLast;
+exports.hasQuickContractRefineLast = hasQuickContractRefineLast;
+exports.setQuickContractRefineLast = setQuickContractRefineLast;
+exports.createSqliteProjectSettingsRepository = createSqliteProjectSettingsRepository;
+const domain_1 = require("../domain");
+function parseWorktreeEnvPassthrough(raw) {
+    if (!raw)
+        return [];
+    try {
+        return (0, domain_1.normalizeWorktreeEnvPassthrough)(JSON.parse(raw));
+    }
+    catch {
+        return [];
+    }
+}
+function getProjectSettings(db) {
+    // Read the settings as one snapshot instead of preparing six separate queries.
+    const rows = db.prepare(`
+    SELECT key, value FROM queue_state WHERE key IN (
+      'config.pipeline_telemetry_enabled', 'config.orchestrator_model',
+      'config.pre_prompt', 'config.freestyle_pre_prompt',
+      'config.integration_branch', 'config.worktree_env_passthrough'
+    )
+  `).all();
+    const settings = new Map(rows.map(row => [row.key, row]));
+    const telemetryRow = settings.get('config.pipeline_telemetry_enabled');
+    const modelRow = settings.get('config.orchestrator_model');
+    const prePromptRow = settings.get('config.pre_prompt');
+    const freestylePrePromptRow = settings.get('config.freestyle_pre_prompt');
+    const integrationBranchRow = settings.get('config.integration_branch');
+    const worktreeEnvPassthroughRow = settings.get('config.worktree_env_passthrough');
+    return {
+        pipelineTelemetryEnabled: telemetryRow?.value !== 'false',
+        orchestratorModel: modelRow?.value ?? 'sonnet',
+        orchestratorModelExplicit: modelRow?.value !== undefined,
+        prePrompt: prePromptRow?.value ?? '',
+        freestylePrePrompt: freestylePrePromptRow?.value ?? '',
+        integrationBranch: integrationBranchRow?.value ?? '',
+        worktreeEnvPassthrough: parseWorktreeEnvPassthrough(worktreeEnvPassthroughRow?.value),
+    };
+}
+/** Resolve the effective Freestyle pre-prompt: the per-project override when
+ *  set, otherwise the built-in default. */
+function getFreestylePrePrompt(db) {
+    const override = getProjectSettings(db).freestylePrePrompt.trim();
+    return override || domain_1.DEFAULT_FREESTYLE_PRE_PROMPT;
+}
+function updateProjectSettings(db, patch) {
+    if (patch.pipelineTelemetryEnabled !== undefined) {
+        db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.pipeline_telemetry_enabled', ?)`).run(patch.pipelineTelemetryEnabled ? 'true' : 'false');
+    }
+    if (patch.orchestratorModel !== undefined) {
+        db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.orchestrator_model', ?)`).run(patch.orchestratorModel);
+    }
+    if (patch.prePrompt !== undefined) {
+        if (patch.prePrompt.trim() === '') {
+            db.prepare(`DELETE FROM queue_state WHERE key = 'config.pre_prompt'`).run();
+        }
+        else {
+            db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.pre_prompt', ?)`).run(patch.prePrompt);
+        }
+    }
+    if (patch.freestylePrePrompt !== undefined) {
+        if (patch.freestylePrePrompt.trim() === '') {
+            db.prepare(`DELETE FROM queue_state WHERE key = 'config.freestyle_pre_prompt'`).run();
+        }
+        else {
+            db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.freestyle_pre_prompt', ?)`).run(patch.freestylePrePrompt);
+        }
+    }
+    if (patch.integrationBranch !== undefined) {
+        if (patch.integrationBranch.trim() === '') {
+            db.prepare(`DELETE FROM queue_state WHERE key = 'config.integration_branch'`).run();
+        }
+        else {
+            db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.integration_branch', ?)`).run(patch.integrationBranch.trim());
+        }
+    }
+    if (patch.worktreeEnvPassthrough !== undefined) {
+        const names = (0, domain_1.normalizeWorktreeEnvPassthrough)(patch.worktreeEnvPassthrough);
+        if (names.length === 0) {
+            db.prepare(`DELETE FROM queue_state WHERE key = 'config.worktree_env_passthrough'`).run();
+        }
+        else {
+            db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.worktree_env_passthrough', ?)`).run(JSON.stringify(names));
+        }
+    }
+}
+// ─── Explore Spec acceleration ────────────────────────────────────────────────
+/**
+ * Per-project last-used value for the Quick mode Contract Refine toggle in
+ * the Add Spec modal. Default `false` when never set.
+ */
+function getQuickContractRefineLast(db) {
+    const row = db.prepare(`SELECT value FROM queue_state WHERE key = 'config.add_spec_quick_contract_refine_last'`).get();
+    return row?.value === 'true';
+}
+function hasQuickContractRefineLast(db) {
+    const row = db.prepare(`SELECT 1 FROM queue_state WHERE key = 'config.add_spec_quick_contract_refine_last'`).get();
+    return !!row;
+}
+function setQuickContractRefineLast(db, enabled) {
+    db.prepare(`INSERT OR REPLACE INTO queue_state (key, value) VALUES ('config.add_spec_quick_contract_refine_last', ?)`).run(enabled ? 'true' : 'false');
+}
+/** Bind one project's connection. No global registry or cross-project cache. */
+function createSqliteProjectSettingsRepository(db) {
+    const update = db.transaction((patch) => {
+        updateProjectSettings(db, patch);
+        return getProjectSettings(db);
+    });
+    return {
+        read: () => getProjectSettings(db),
+        update,
+    };
+}

package/server/dist/modules/project-settings/application.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProjectSettingsService = createProjectSettingsService;
+const domain_1 = require("./domain");
+/** Application use cases. No HTTP request, SQL connection or global registry. */
+function createProjectSettingsService(repository) {
+    return {
+        getSettings: () => repository.read(),
+        updateSettings: (input) => repository.update((0, domain_1.parseProjectSettingsPatch)(input)),
+    };
+}

package/server/dist/modules/project-settings/domain.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SettingsValidationError = exports.WORKTREE_ENV_NAME_RE = exports.DEFAULT_FREESTYLE_PRE_PROMPT = void 0;
+exports.normalizeWorktreeEnvPassthrough = normalizeWorktreeEnvPassthrough;
+exports.parseProjectSettingsPatch = parseProjectSettingsPatch;
+const git_branch_name_1 = require("../../shared/git-branch-name");
+/**
+ * Default pre-prompt used by provider-capable Freestyle rails when the project
+ * has no per-project override. Freestyle skips the OpenSpec pipeline entirely:
+ * it hands the selected autonomous provider the spec text plus this instruction and lets it work
+ * autonomously end-to-end.
+ */
+exports.DEFAULT_FREESTYLE_PRE_PROMPT = [
+    'You are operating in FREESTYLE: fully autonomous, end-to-end implementation.',
+    'Implement the following spec COMPLETELY in this repository. You have full access to the codebase and tools.',
+    'Work independently until the feature is done: write the code, the tests, update docs as needed, and make sure everything builds and the test suite passes.',
+    'Do NOT follow any structured architect/developer/reviewer pipeline — use your own judgement and the repo conventions.',
+    'Never ask for confirmation; there is no human to answer. Choose the recommended option and proceed.',
+    'Run every command in the FOREGROUND and wait for it to finish — never background a command (no run_in_background, no trailing `&`): your reply ends the step and anything still running is killed with its output lost.',
+].join('\n');
+exports.WORKTREE_ENV_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const WORKTREE_ENV_MAX_NAMES = 64;
+const WORKTREE_ENV_MAX_NAME_LENGTH = 128;
+function normalizeWorktreeEnvPassthrough(value) {
+    if (!Array.isArray(value))
+        throw new Error('worktreeEnvPassthrough must be an array of environment variable names');
+    const out = [];
+    const seen = new Set();
+    for (const raw of value) {
+        if (typeof raw !== 'string')
+            throw new Error('worktreeEnvPassthrough entries must be strings');
+        const name = raw.trim();
+        if (!name)
+            continue;
+        if (name.length > WORKTREE_ENV_MAX_NAME_LENGTH)
+            throw new Error(`environment variable name is too long: ${name.slice(0, 24)}...`);
+        if (!exports.WORKTREE_ENV_NAME_RE.test(name))
+            throw new Error(`invalid environment variable name: ${name}`);
+        if (seen.has(name))
+            continue;
+        seen.add(name);
+        out.push(name);
+        if (out.length > WORKTREE_ENV_MAX_NAMES)
+            throw new Error(`worktreeEnvPassthrough can contain at most ${WORKTREE_ENV_MAX_NAMES} names`);
+    }
+    return out;
+}
+class SettingsValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SettingsValidationError';
+    }
+}
+exports.SettingsValidationError = SettingsValidationError;
+/** Preserve the existing PATCH contract, including boolean coercion and ignored
+ * unknown fields. Validate the whole input before the repository can write. */
+function parseProjectSettingsPatch(input) {
+    const values = (input ?? {});
+    const patch = {};
+    if (values.pipelineTelemetryEnabled !== undefined) {
+        patch.pipelineTelemetryEnabled = Boolean(values.pipelineTelemetryEnabled);
+    }
+    const validModels = ['sonnet', 'opus', 'haiku'];
+    if (values.orchestratorModel !== undefined) {
+        if (typeof values.orchestratorModel !== 'string' || !validModels.includes(values.orchestratorModel)) {
+            throw new SettingsValidationError(`orchestratorModel must be one of: ${validModels.join(', ')}`);
+        }
+        patch.orchestratorModel = values.orchestratorModel;
+    }
+    for (const key of ['prePrompt', 'freestylePrePrompt']) {
+        if (values[key] !== undefined) {
+            if (typeof values[key] !== 'string')
+                throw new SettingsValidationError(`${key} must be a string`);
+            patch[key] = values[key];
+        }
+    }
+    if (values.worktreeEnvPassthrough !== undefined) {
+        try {
+            patch.worktreeEnvPassthrough = normalizeWorktreeEnvPassthrough(values.worktreeEnvPassthrough);
+        }
+        catch (error) {
+            throw new SettingsValidationError(error instanceof Error ? error.message : 'invalid worktreeEnvPassthrough');
+        }
+    }
+    if (values.integrationBranch !== undefined) {
+        const branch = values.integrationBranch;
+        if (typeof branch !== 'string')
+            throw new SettingsValidationError('integrationBranch must be a string');
+        if (branch.trim() !== '' && !(0, git_branch_name_1.isValidBranchName)(branch)) {
+            throw new SettingsValidationError('integrationBranch is not a valid branch name');
+        }
+        patch.integrationBranch = branch;
+    }
+    return patch;
+}

package/server/dist/modules/project-settings/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SettingsValidationError = exports.normalizeWorktreeEnvPassthrough = exports.WORKTREE_ENV_NAME_RE = exports.DEFAULT_FREESTYLE_PRE_PROMPT = exports.createProjectSettingsService = void 0;
+// Public application API. Infrastructure adapters are wired only at composition roots.
+var application_1 = require("./application");
+Object.defineProperty(exports, "createProjectSettingsService", { enumerable: true, get: function () { return application_1.createProjectSettingsService; } });
+var domain_1 = require("./domain");
+Object.defineProperty(exports, "DEFAULT_FREESTYLE_PRE_PROMPT", { enumerable: true, get: function () { return domain_1.DEFAULT_FREESTYLE_PRE_PROMPT; } });
+Object.defineProperty(exports, "WORKTREE_ENV_NAME_RE", { enumerable: true, get: function () { return domain_1.WORKTREE_ENV_NAME_RE; } });
+Object.defineProperty(exports, "normalizeWorktreeEnvPassthrough", { enumerable: true, get: function () { return domain_1.normalizeWorktreeEnvPassthrough; } });
+Object.defineProperty(exports, "SettingsValidationError", { enumerable: true, get: function () { return domain_1.SettingsValidationError; } });

package/server/dist/modules/project-settings/ports.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/server/dist/{contract-refine-runner.js → modules/specs/runtime/contract-refine-runner.js}

@@ -23,19 +23,19 @@ exports.runContractRefineForQuick = runContractRefineForQuick;
 const node_crypto_1 = require("node:crypto");
 const node_readline_1 = require("node:readline");
 const tree_kill_1 = __importDefault(require("tree-kill"));
-const cli_prompt_1 = require("./util/cli-prompt");
-const spawn_lifecycle_1 = require("./spawn-lifecycle");
-const providers_1 = require("./providers");
-const runtime_1 = require("./providers/runtime");
-const explore_contract_refine_1 = require("./explore-contract-refine");
-const db_1 = require("./db");
-const explore_cwd_manager_1 = require("./explore-cwd-manager");
-const ai_invocations_1 = require("./ai-invocations");
-const result_event_1 = require("./result-event");
+const cli_prompt_1 = require("../../../util/cli-prompt");
+const spawn_lifecycle_1 = require("../../execution/runtime/spawn-lifecycle");
+const providers_1 = require("../../../providers");
+const runtime_1 = require("../../../providers/runtime");
+const explore_contract_refine_1 = require("../../conversations/runtime/explore-contract-refine");
+const db_1 = require("../../../db");
+const explore_cwd_manager_1 = require("../../conversations/runtime/explore-cwd-manager");
+const ai_invocations_1 = require("../../accounting/runtime/ai-invocations");
+const result_event_1 = require("../../accounting/runtime/result-event");
 const ticket_store_1 = require("./ticket-store");
-const workspace_resolution_1 = require("./workspace-resolution");
-const process_admission_1 = require("./process-admission");
-const transient_children_1 = require("./transient-children");
+const workspace_resolution_1 = require("../../../workspace-resolution");
+const process_admission_1 = require("../../../process-admission");
+const transient_children_1 = require("../../../transient-children");
 const REFINE_TIMEOUT_MS = 60_000;
 const CLAUDE_MISSING_SESSION_DIAGNOSTIC = 'No conversation found with session ID';
 /**

package/server/dist/{proposal-manager.js → modules/specs/runtime/proposal-manager.js}

@@ -7,14 +7,14 @@ exports.ProposalManager = void 0;
 const readline_1 = require("readline");
 const crypto_1 = require("crypto");
 const tree_kill_1 = __importDefault(require("tree-kill"));
-const cli_prompt_1 = require("./util/cli-prompt");
-const db_1 = require("./db");
-const command_resolver_1 = require("./command-resolver");
-const providers_1 = require("./providers");
-const runtime_1 = require("./providers/runtime");
-const result_event_1 = require("./result-event");
-const ai_invocations_1 = require("./ai-invocations");
-const workspace_resolution_1 = require("./workspace-resolution");
+const cli_prompt_1 = require("../../../util/cli-prompt");
+const db_1 = require("../../../db");
+const command_resolver_1 = require("../../../command-resolver");
+const providers_1 = require("../../../providers");
+const runtime_1 = require("../../../providers/runtime");
+const result_event_1 = require("../../accounting/runtime/result-event");
+const ai_invocations_1 = require("../../accounting/runtime/ai-invocations");
+const workspace_resolution_1 = require("../../../workspace-resolution");
 // ─── ProposalManager ──────────────────────────────────────────────────────────
 class ProposalManager {
     _broadcast;