specrails-desktop 2.57.0 → 2.58.0

package/docs/internals/source-map.md

@@ -5,7 +5,7 @@ architectural dependency declaration. Search a heading or filename and read only
 the relevant source and tests. Feature prefixes group the legacy server files;
 new bounded modules live under `server/modules/`.
 
-Includes 942 source/build files. Nearby tests are linked where names
+Includes 982 source/build files. Nearby tests are linked where names
 match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## cli
@@ -76,6 +76,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## client/src/features/agents/components
 
+- [AgentRoleFields.tsx](../../client/src/features/agents/components/AgentRoleFields.tsx) · [test](../../client/src/features/agents/components/__tests__/AgentRoleFields.test.tsx)
 - [AgentStudio.tsx](../../client/src/features/agents/components/AgentStudio.tsx)
 - [AgentsCatalogTab.tsx](../../client/src/features/agents/components/AgentsCatalogTab.tsx)
 - [AiRefineOverlay.tsx](../../client/src/features/agents/components/AiRefineOverlay.tsx)
@@ -96,6 +97,10 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 - [useAgentRefine.ts](../../client/src/features/agents/hooks/useAgentRefine.ts)
 
+## client/src/features/agents/lib
+
+- [agent-role-metadata.ts](../../client/src/features/agents/lib/agent-role-metadata.ts)
+
 ## client/src/features/agents/pages
 
 - [AgentsPage.tsx](../../client/src/features/agents/pages/AgentsPage.tsx)
@@ -106,6 +111,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [CostScatter.tsx](../../client/src/features/analytics/components/CostScatter.tsx) · [test](../../client/src/features/analytics/components/__tests__/CostScatter.test.tsx)
 - [ExportDropdown.tsx](../../client/src/features/analytics/components/ExportDropdown.tsx) · [test](../../client/src/features/analytics/components/__tests__/ExportDropdown.test.tsx)
 - [InvocationsTable.tsx](../../client/src/features/analytics/components/InvocationsTable.tsx) · [test](../../client/src/features/analytics/components/__tests__/InvocationsTable.test.tsx)
+- [LegacyWorkflowUsage.tsx](../../client/src/features/analytics/components/LegacyWorkflowUsage.tsx) · [test](../../client/src/features/analytics/components/__tests__/LegacyWorkflowUsage.test.tsx)
 - [ModelBreakdown.tsx](../../client/src/features/analytics/components/ModelBreakdown.tsx) · [test](../../client/src/features/analytics/components/__tests__/ModelBreakdown.test.tsx)
 - [PeriodSelector.tsx](../../client/src/features/analytics/components/PeriodSelector.tsx) · [test](../../client/src/features/analytics/components/__tests__/PeriodSelector.test.tsx)
 - [ProviderBreakdownCard.tsx](../../client/src/features/analytics/components/ProviderBreakdownCard.tsx) · [test](../../client/src/features/analytics/components/__tests__/ProviderBreakdownCard.test.tsx)
@@ -368,6 +374,10 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## client/src/features/loops/components
 
+- [CoreParameterForm.tsx](../../client/src/features/loops/components/CoreParameterForm.tsx) · [test](../../client/src/features/loops/components/__tests__/CoreParameterForm.test.tsx)
+- [CoreWorkflowInspector.tsx](../../client/src/features/loops/components/CoreWorkflowInspector.tsx) · [test](../../client/src/features/loops/components/__tests__/CoreWorkflowInspector.test.tsx)
+- [LegacyConversionModal.tsx](../../client/src/features/loops/components/LegacyConversionModal.tsx) · [test](../../client/src/features/loops/components/__tests__/LegacyConversionModal.test.tsx)
+- [LoopMigrationPanel.tsx](../../client/src/features/loops/components/LoopMigrationPanel.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopMigrationPanel.test.tsx)
 - [LoopPreviewModal.tsx](../../client/src/features/loops/components/LoopPreviewModal.tsx)
 - [LoopRunModal.tsx](../../client/src/features/loops/components/LoopRunModal.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopRunModal.test.tsx)
 - [TemplatePreviewModal.tsx](../../client/src/features/loops/components/TemplatePreviewModal.tsx) · [test](../../client/src/features/loops/components/__tests__/TemplatePreviewModal.test.tsx)
@@ -379,14 +389,21 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [LoopStepExplorer.tsx](../../client/src/features/loops/components/loop-log/LoopStepExplorer.tsx) · [test](../../client/src/features/loops/components/loop-log/__tests__/LoopStepExplorer.test.tsx)
 - [LoopStepSection.tsx](../../client/src/features/loops/components/loop-log/LoopStepSection.tsx)
 - [NarratedProgress.tsx](../../client/src/features/loops/components/loop-log/NarratedProgress.tsx) · [test](../../client/src/features/loops/components/loop-log/__tests__/NarratedProgress.test.tsx)
+- [RuntimeGraphExplorer.tsx](../../client/src/features/loops/components/loop-log/RuntimeGraphExplorer.tsx) · [test](../../client/src/features/loops/components/loop-log/__tests__/RuntimeGraphExplorer.test.tsx)
 - [completion-model.ts](../../client/src/features/loops/components/loop-log/completion-model.ts)
 - [loop-log-model.ts](../../client/src/features/loops/components/loop-log/loop-log-model.ts) · [test](../../client/src/features/loops/components/loop-log/__tests__/loop-log-model.test.ts)
 - [loop-node-visuals.ts](../../client/src/features/loops/components/loop-log/loop-node-visuals.ts)
 - [narration-commands.ts](../../client/src/features/loops/components/loop-log/narration-commands.ts) · [test](../../client/src/features/loops/components/loop-log/__tests__/narration-commands.test.ts)
 - [narration-model.ts](../../client/src/features/loops/components/loop-log/narration-model.ts) · [test](../../client/src/features/loops/components/loop-log/__tests__/narration-model.test.ts)
+- [runtime-topology.ts](../../client/src/features/loops/components/loop-log/runtime-topology.ts) · [test](../../client/src/features/loops/components/loop-log/__tests__/runtime-topology.test.ts)
+
+## client/src/features/loops/hooks
+
+- [useDefinitionFork.ts](../../client/src/features/loops/hooks/useDefinitionFork.ts) · [test](../../client/src/features/loops/hooks/__tests__/useDefinitionFork.test.ts)
 
 ## client/src/features/loops/lib
 
+- [core-authoring.ts](../../client/src/features/loops/lib/core-authoring.ts) · [test](../../client/src/features/loops/lib/__tests__/core-authoring.test.ts)
 - [loop-clipboard.ts](../../client/src/features/loops/lib/loop-clipboard.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-clipboard.test.ts)
 - [loop-export.ts](../../client/src/features/loops/lib/loop-export.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-export.test.ts)
 - [loop-graph-rf.ts](../../client/src/features/loops/lib/loop-graph-rf.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-graph-rf.test.ts)
@@ -550,6 +567,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [AppearanceSection.tsx](../../client/src/features/settings/components/AppearanceSection.tsx) · [test](../../client/src/features/settings/components/__tests__/AppearanceSection.test.tsx)
 - [CodeSectionSettings.tsx](../../client/src/features/settings/components/CodeSectionSettings.tsx) · [test](../../client/src/features/settings/components/__tests__/CodeSectionSettings.test.tsx)
 - [CoreUpdateSection.tsx](../../client/src/features/settings/components/CoreUpdateSection.tsx) · [test](../../client/src/features/settings/components/__tests__/CoreUpdateSection.test.tsx)
+- [CustomRuntimeRoles.tsx](../../client/src/features/settings/components/CustomRuntimeRoles.tsx) · [test](../../client/src/features/settings/components/__tests__/CustomRuntimeRoles.test.tsx)
 - [EffectsSection.tsx](../../client/src/features/settings/components/EffectsSection.tsx) · [test](../../client/src/features/settings/components/__tests__/EffectsSection.test.tsx)
 - [ExternalMcpServersCard.tsx](../../client/src/features/settings/components/ExternalMcpServersCard.tsx) · [test](../../client/src/features/settings/components/__tests__/ExternalMcpServersCard.test.tsx)
 - [LanguageSection.tsx](../../client/src/features/settings/components/LanguageSection.tsx) · [test](../../client/src/features/settings/components/__tests__/LanguageSection.test.tsx)
@@ -565,7 +583,10 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [RuntimeEfficiencyControls.tsx](../../client/src/features/settings/components/RuntimeEfficiencyControls.tsx)
 - [RuntimeExecutionEvidence.tsx](../../client/src/features/settings/components/RuntimeExecutionEvidence.tsx) · [test](../../client/src/features/settings/components/__tests__/RuntimeExecutionEvidence.test.tsx)
 - [RuntimeGuardrails.tsx](../../client/src/features/settings/components/RuntimeGuardrails.tsx) · [test](../../client/src/features/settings/components/__tests__/RuntimeGuardrails.test.tsx)
+- [RuntimeRecovery.tsx](../../client/src/features/settings/components/RuntimeRecovery.tsx) · [test](../../client/src/features/settings/components/__tests__/RuntimeRecovery.test.tsx)
+- [RuntimeRetention.tsx](../../client/src/features/settings/components/RuntimeRetention.tsx) · [test](../../client/src/features/settings/components/__tests__/RuntimeRetention.test.tsx)
 - [RuntimeRolePrompts.tsx](../../client/src/features/settings/components/RuntimeRolePrompts.tsx) · [test](../../client/src/features/settings/components/__tests__/RuntimeRolePrompts.test.tsx)
+- [RuntimeSteering.tsx](../../client/src/features/settings/components/RuntimeSteering.tsx) · [test](../../client/src/features/settings/components/__tests__/RuntimeSteering.test.tsx)
 - [TerminalSettingsSection.tsx](../../client/src/features/settings/components/TerminalSettingsSection.tsx)
 
 ## client/src/features/settings/components/pickers
@@ -788,7 +809,9 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [check-core-sync.mjs](../../scripts/check-core-sync.mjs) · [test](../../scripts/check-core-sync.test.mjs)
 - [check-package.mjs](../../scripts/check-package.mjs) · [test](../../scripts/check-package.test.mjs)
 - [copy-server-assets.mjs](../../scripts/copy-server-assets.mjs)
+- [coverage-shards.mjs](../../scripts/coverage-shards.mjs) · [test](../../scripts/coverage-shards.test.mjs)
 - [fix-desktop-bundle.mjs](../../scripts/fix-desktop-bundle.mjs)
+- [generate-core-event-fixture.mjs](../../scripts/generate-core-event-fixture.mjs)
 - [generate-icons.mjs](../../scripts/generate-icons.mjs)
 - [generate-mobile-types.mjs](../../scripts/generate-mobile-types.mjs)
 - [generate-source-map.mjs](../../scripts/generate-source-map.mjs) · [test](../../scripts/generate-source-map.test.mjs)
@@ -811,6 +834,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [smoke-windows-installers.ps1](../../scripts/smoke-windows-installers.ps1)
 - [stage-windows-pty.mjs](../../scripts/stage-windows-pty.mjs) · [test](../../scripts/stage-windows-pty.test.mjs)
 - [test-scripts.mjs](../../scripts/test-scripts.mjs)
+- [verified-client.mjs](../../scripts/verified-client.mjs) · [test](../../scripts/verified-client.test.mjs)
 - [verify-chromium-bundle.mjs](../../scripts/verify-chromium-bundle.mjs) · [test](../../scripts/verify-chromium-bundle.test.mjs)
 
 ## server / agent
@@ -1026,14 +1050,21 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [agent-runtime-controls-router.ts](../../server/modules/agent-runtime/runtime/agent-runtime-controls-router.ts)
 - [agent-runtime-controls.ts](../../server/modules/agent-runtime/runtime/agent-runtime-controls.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-controls.test.ts)
 - [agent-runtime-effective-config.ts](../../server/modules/agent-runtime/runtime/agent-runtime-effective-config.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-effective-config.test.ts)
+- [agent-runtime-engines.ts](../../server/modules/agent-runtime/runtime/agent-runtime-engines.ts)
 - [agent-runtime-events.ts](../../server/modules/agent-runtime/runtime/agent-runtime-events.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-events.test.ts)
 - [agent-runtime-history.ts](../../server/modules/agent-runtime/runtime/agent-runtime-history.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-history.test.ts)
 - [agent-runtime-loader.ts](../../server/modules/agent-runtime/runtime/agent-runtime-loader.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-loader.test.ts)
 - [agent-runtime-metrics.ts](../../server/modules/agent-runtime/runtime/agent-runtime-metrics.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-metrics.test.ts)
+- [agent-runtime-package-gc.ts](../../server/modules/agent-runtime/runtime/agent-runtime-package-gc.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-package-gc.test.ts)
+- [agent-runtime-package-lock.ts](../../server/modules/agent-runtime/runtime/agent-runtime-package-lock.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-package-lock.test.ts)
 - [agent-runtime-package.ts](../../server/modules/agent-runtime/runtime/agent-runtime-package.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-package.test.ts)
 - [agent-runtime-paths.ts](../../server/modules/agent-runtime/runtime/agent-runtime-paths.ts)
 - [agent-runtime-recovery.ts](../../server/modules/agent-runtime/runtime/agent-runtime-recovery.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-recovery.test.ts)
 - [agent-runtime-repositories.ts](../../server/modules/agent-runtime/runtime/agent-runtime-repositories.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-repositories.test.ts)
+- [agent-runtime-retention-host.ts](../../server/modules/agent-runtime/runtime/agent-runtime-retention-host.ts)
+- [agent-runtime-retention-quarantine.ts](../../server/modules/agent-runtime/runtime/agent-runtime-retention-quarantine.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-retention-quarantine.test.ts)
+- [agent-runtime-retention-records.ts](../../server/modules/agent-runtime/runtime/agent-runtime-retention-records.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-retention-records.test.ts)
+- [agent-runtime-retention.ts](../../server/modules/agent-runtime/runtime/agent-runtime-retention.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-retention.test.ts)
 - [agent-runtime-settings-router.ts](../../server/modules/agent-runtime/runtime/agent-runtime-settings-router.ts)
 - [agent-runtime-settings.ts](../../server/modules/agent-runtime/runtime/agent-runtime-settings.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-settings.test.ts)
 - [agent-runtime-settlement.ts](../../server/modules/agent-runtime/runtime/agent-runtime-settlement.ts) · [test](../../server/modules/agent-runtime/runtime/agent-runtime-settlement.test.ts)
@@ -1041,10 +1072,12 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## server/modules/agents/runtime
 
+- [agent-catalog.ts](../../server/modules/agents/runtime/agent-catalog.ts)
 - [agent-defaults.ts](../../server/modules/agents/runtime/agent-defaults.ts) · [test](../../server/modules/agents/runtime/agent-defaults.test.ts)
 - [agent-generator.ts](../../server/modules/agents/runtime/agent-generator.ts) · [test](../../server/modules/agents/runtime/agent-generator.test.ts)
 - [agent-refine-db.ts](../../server/modules/agents/runtime/agent-refine-db.ts) · [test](../../server/modules/agents/runtime/agent-refine-db.test.ts)
 - [agent-refine-manager.ts](../../server/modules/agents/runtime/agent-refine-manager.ts) · [test](../../server/modules/agents/runtime/agent-refine-manager.test.ts)
+- [agent-role-descriptor.ts](../../server/modules/agents/runtime/agent-role-descriptor.ts) · [test](../../server/modules/agents/runtime/agent-role-descriptor.test.ts)
 - [agent-store.ts](../../server/modules/agents/runtime/agent-store.ts)
 - [profile-manager.ts](../../server/modules/agents/runtime/profile-manager.ts) · [test](../../server/modules/agents/runtime/profile-manager.test.ts)
 - [profiles-router.ts](../../server/modules/agents/runtime/profiles-router.ts) · [test](../../server/modules/agents/runtime/profiles-router.test.ts)
@@ -1137,7 +1170,10 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 ## server/modules/delivery/runtime
 
 - [active-pr-continuation.ts](../../server/modules/delivery/runtime/active-pr-continuation.ts) · [test](../../server/modules/delivery/runtime/active-pr-continuation.test.ts)
+- [definition-fork.ts](../../server/modules/delivery/runtime/definition-fork.ts) · [test](../../server/modules/delivery/runtime/definition-fork.test.ts)
 - [delivery-evidence.ts](../../server/modules/delivery/runtime/delivery-evidence.ts) · [test](../../server/modules/delivery/runtime/delivery-evidence.test.ts)
+- [isolated-settlement-reconstruction.ts](../../server/modules/delivery/runtime/isolated-settlement-reconstruction.ts) · [test](../../server/modules/delivery/runtime/isolated-settlement-reconstruction.test.ts)
+- [isolated-settlement-store.ts](../../server/modules/delivery/runtime/isolated-settlement-store.ts)
 - [merge-manager.ts](../../server/modules/delivery/runtime/merge-manager.ts) · [test](../../server/modules/delivery/runtime/merge-manager.test.ts)
 - [multi-repo-bases.ts](../../server/modules/delivery/runtime/multi-repo-bases.ts) · [test](../../server/modules/delivery/runtime/multi-repo-bases.test.ts)
 - [multi-repo-checkout.ts](../../server/modules/delivery/runtime/multi-repo-checkout.ts)
@@ -1203,20 +1239,30 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## server/modules/loops/runtime
 
+- [builtin-loops.ts](../../server/modules/loops/runtime/builtin-loops.ts) · [test](../../server/modules/loops/runtime/builtin-loops.test.ts)
+- [definition-cancellation.ts](../../server/modules/loops/runtime/definition-cancellation.ts) · [test](../../server/modules/loops/runtime/definition-cancellation.test.ts)
+- [legacy-launch-telemetry.ts](../../server/modules/loops/runtime/legacy-launch-telemetry.ts) · [test](../../server/modules/loops/runtime/legacy-launch-telemetry.test.ts)
 - [loop-command-catalog.ts](../../server/modules/loops/runtime/loop-command-catalog.ts) · [test](../../server/modules/loops/runtime/loop-command-catalog.test.ts)
+- [loop-compat.ts](../../server/modules/loops/runtime/loop-compat.ts) · [test](../../server/modules/loops/runtime/loop-compat.test.ts)
 - [loop-constants.ts](../../server/modules/loops/runtime/loop-constants.ts) · [test](../../server/modules/loops/runtime/loop-constants.test.ts)
+- [loop-core-factory.ts](../../server/modules/loops/runtime/loop-core-factory.ts) · [test](../../server/modules/loops/runtime/loop-core-factory.test.ts)
 - [loop-decider.ts](../../server/modules/loops/runtime/loop-decider.ts) · [test](../../server/modules/loops/runtime/loop-decider.test.ts)
+- [loop-definition-controls.ts](../../server/modules/loops/runtime/loop-definition-controls.ts) · [test](../../server/modules/loops/runtime/loop-definition-controls.test.ts)
+- [loop-definition-events.ts](../../server/modules/loops/runtime/loop-definition-events.ts) · [test](../../server/modules/loops/runtime/loop-definition-events.test.ts)
+- [loop-definition-recovery.ts](../../server/modules/loops/runtime/loop-definition-recovery.ts) · [test](../../server/modules/loops/runtime/loop-definition-recovery.test.ts)
+- [loop-definition-run.ts](../../server/modules/loops/runtime/loop-definition-run.ts) · [test](../../server/modules/loops/runtime/loop-definition-run.test.ts)
+- [loop-definition.ts](../../server/modules/loops/runtime/loop-definition.ts) · [test](../../server/modules/loops/runtime/loop-definition.test.ts)
 - [loop-effect.ts](../../server/modules/loops/runtime/loop-effect.ts) · [test](../../server/modules/loops/runtime/loop-effect.test.ts)
 - [loop-executors.ts](../../server/modules/loops/runtime/loop-executors.ts) · [test](../../server/modules/loops/runtime/loop-executors.test.ts)
 - [loop-factory.ts](../../server/modules/loops/runtime/loop-factory.ts) · [test](../../server/modules/loops/runtime/loop-factory.test.ts)
 - [loop-graph.ts](../../server/modules/loops/runtime/loop-graph.ts) · [test](../../server/modules/loops/runtime/loop-graph.test.ts)
+- [loop-migration.ts](../../server/modules/loops/runtime/loop-migration.ts)
 - [loop-preview.ts](../../server/modules/loops/runtime/loop-preview.ts) · [test](../../server/modules/loops/runtime/loop-preview.test.ts)
 - [loop-role-engines.ts](../../server/modules/loops/runtime/loop-role-engines.ts) · [test](../../server/modules/loops/runtime/loop-role-engines.test.ts)
 - [loop-run-manager.ts](../../server/modules/loops/runtime/loop-run-manager.ts) · [test](../../server/modules/loops/runtime/loop-run-manager.test.ts)
 - [loop-runs-store.ts](../../server/modules/loops/runtime/loop-runs-store.ts) · [test](../../server/modules/loops/runtime/loop-runs-store.test.ts)
 - [loop-shell-invocation.ts](../../server/modules/loops/runtime/loop-shell-invocation.ts)
 - [loop-step-idle.ts](../../server/modules/loops/runtime/loop-step-idle.ts) · [test](../../server/modules/loops/runtime/loop-step-idle.test.ts)
-- [loop-templates-ported.ts](../../server/modules/loops/runtime/loop-templates-ported.ts)
 - [loop-templates.ts](../../server/modules/loops/runtime/loop-templates.ts) · [test](../../server/modules/loops/runtime/loop-templates.test.ts)
 - [loops-router.ts](../../server/modules/loops/runtime/loops-router.ts) · [test](../../server/modules/loops/runtime/loops-router.test.ts)
 - [loops-store.ts](../../server/modules/loops/runtime/loops-store.ts) · [test](../../server/modules/loops/runtime/loops-store.test.ts)

package/docs/kimi.md

@@ -180,9 +180,9 @@ or read-only behavior.
 | Project Chat and Agent Chat | Text, tools, errors, cancellation, session resume, attachments, and proposals use a fresh owned `kimi -p` process per turn. |
 | Explore | Conversation and proposal/draft work are available under Kimi's autonomous prompt-mode policy. It is not a filesystem sandbox. |
 | Quick Launcher | Agentic commands such as `/opsx:ff` are available. This is distinct from the pure-output **Quick Spec** form. |
-| Rails | Implement, Batch, Freestyle, retry/rerun, worktree isolation, cancellation, and ask-first PR delivery use Core's Kimi skills. |
+| Rails | Implement, Freestyle, retry/rerun, worktree isolation, cancellation, and ask-first PR delivery use Core's Kimi skills. |
 | Loops | Built-in and custom loops are available when the graph has no **Loop Decider**. AI and shell steps keep their normal agentic semantics. |
-| Project Builder delivery | Selecting Kimi as a target project provider and launching an already committed milestone through its Batch rail are available. Blueprint and milestone generation are not. |
+| Project Builder delivery | Selecting Kimi as a target project provider and launching an already committed milestone through its rails (one spec per rail) are available. Blueprint and milestone generation are not. |
 | Profiles and roles | Provider-scoped profiles, exact Kimi models, per-role routing, and manual `custom-*` role creation/editing/execution are available. |
 | MCP and integrations | Project `.kimi-code/mcp.json`, the Desktop bridge, provider-scoped plugins, and Serena are available through additive merges. |
 | Terminal and attachments | The integrated terminal launches the external CLI. Text and validated image references are available; Kimi reads images with `ReadMediaFile`. |

package/docs/local-providers.md

@@ -45,7 +45,7 @@ without any of this.
 
 | Surface | How the local engine executes |
 |---|---|
-| Rails: implement / batch / custom loops | specrails-core's programmatic runtime, all three roles on the connection (`OpenAICompatibleExecutor`) |
+| Rails: implement / custom loops | specrails-core's programmatic runtime, all three roles on the connection (`OpenAICompatibleExecutor`) |
 | Rails: freestyle, verify / fix / decider steps, loop ai-steps | the bundled **local agent runner** |
 | Add Spec Quick + Explore, sidebar chat | the local agent runner (read-only tool set for Explore) |
 | Agent chat / missions | the local agent runner with the Specrails MCP bridge + your enabled external MCP servers |

package/docs/running-pipelines.md

@@ -23,7 +23,7 @@ A **rail** is an execution lane. Drag a spec card from the SpecsBoard onto a rai
 
 Rails default to the project's primary provider. If several are installed, a
 per-rail engine selector can launch on **Claude**, **Codex**, **Gemini**, or
-**Kimi** — see [Using Kimi](kimi.md). Implement and Batch run on every
+**Kimi** — see [Using Kimi](kimi.md). Implement runs on every
 registered provider; Freestyle is offered by Claude and Kimi.
 
 > **One job at a time per project.** Each project has a single queue, so within a project only one rail job runs at a time; the rest queue behind it. Real parallelism is **across projects** — open two projects and their rails run independently. See [Running multiple rails](#running-multiple-rails).
@@ -34,7 +34,7 @@ Each rail has a header with:
 
 - **Status pill** — `idle`, `running`, or `failed`. (There's no separate "completed" state — a rail returns to `idle` when its job finishes cleanly.)
 - **Spec list** — the IDs of the specs assigned to this rail. Drag in more, drag out to detach. You can also use the **Move to rail** popover from a spec card; it shows a status dot per rail so you don't push work onto a busy lane.
-- **Loop picker** — the **Loop** this rail runs: a built-in (`Implement`, `Batch`, or `Freestyle`) or one of your published custom loops. See [Loops](#loops).
+- **Loop picker** — the **Loop** this rail runs: a built-in (`Implement`, `SDD Quick (OpenSpec)`, or `Freestyle`) or one of your published custom loops. See [Loops](#loops).
 - **Profile picker** — which agent profile this rail uses. This only appears once the project has **at least one** profile (create them on the Agents page). When present, `No profile` runs the rail in legacy mode.
 - **Engine selector** — pick which installed provider (Claude, Codex, Gemini,
   or Kimi) runs this rail. It renders only for multi-provider projects.
@@ -42,13 +42,21 @@ Each rail has a header with:
 
 ### Loops
 
-A rail runs a **Loop**, picked in the rail header and persisted per rail. The three **built-in** loops cover the common cases:
+A rail runs a **Loop**, picked in the rail header and persisted per rail. With a compatible Core definition engine, three built-in graphs cover the common cases. Older Core installations retain their existing factories.
 
-| Built-in loop | Command | What it does |
-|------|---------|--------------|
-| **Implement** | `/specrails:implement` | One job covering all the specs on the rail. Runs the full Architect → Developer → Reviewer → Ship pipeline. |
-| **Batch** | `/specrails:batch-implement` | One job that works through the rail's specs sequentially, in dependency-aware waves. |
-| **Freestyle** | (Freestyle) | A provider with native Freestyle capability implements each spec autonomously, bypassing the OpenSpec pipeline. Claude and Kimi support it. |
+| Built-in loop | What it does |
+|------|--------------|
+| **Implement** | Native Architect → Developer → Verify → Reviewer → Archive, with acceptance and verification required for delivery. |
+| **Quick SDD** | Prepare an OpenSpec change, validate it, apply it, verify, archive and verify again. The `revision` and `openspec` aliases remain valid. |
+| **Freestyle** | Implement directly, run configured checks, ask a read-only decider whether every requirement is met, and fix/recheck when necessary. |
+
+The Core palette also offers role turns, questions, approvals, gates, reusable
+components, maps and joins. Drag a piece onto the canvas, connect its named
+outcomes, then edit its parameters. Role turns select from the project's role
+library. The `loop-decider` role inherits the selected review engine and has read
+access with no artifact writes or OpenSpec requirement; its engine and prompt can
+be explicitly configured. A printed `VERIFICATION: PASS` never replaces host-run
+checks. The eight starter templates use these same Core pieces when supported.
 
 Beyond the built-ins, the **Loops** section (left sidebar, above the project list) is a global, n8n-style **visual builder** shared across all your projects. A loop is a graph of typed steps:
 
@@ -57,14 +65,14 @@ Beyond the built-ins, the **Loops** section (left sidebar, above the project lis
 - **Loop Decider** — an AI node that, each iteration, decides **continue** (loop back) or **stop** (exit) based on a goal you write — e.g. *“the verification step reported VERIFICATION: PASS”*. This is what powers autonomous **verify → fix → verify until green** loops.
 - **Start / End** — entry and terminal nodes.
 
-Each run is bounded by **max iterations**, a wall-clock **timeout**, and an optional **cost cap** (USD, checked between steps). The builder also has live validation, a dry-run preview (resolve every step's exact text without spawning), import/export to JSON, and copy/paste of steps across loops. **Fork** a built-in to start from a working graph, then **Publish** to make a loop selectable on any rail.
+Each run is bounded by **max iterations**, a wall-clock **timeout**, and an optional **cost cap** (USD, checked between steps). The builder also has live validation, a dry-run preview (resolve every step's exact text without spawning), import/export to JSON, and copy/paste of steps across loops. **Publish** makes a loop selectable on any rail. Built-ins are editable loops too: edit one in place and publish it to change that built-in for every rail, agent-chat launch and Companion launch that uses it (rails keep the last published version while your edit is a Draft); **Restore original** resets it and **Duplicate** copies it into a separate loop. Built-ins cannot be deleted.
 
-Kimi runs built-in and custom loops whose graph contains AI/shell steps but no
+On the legacy traversal, Kimi runs built-in and custom loops whose graph contains AI/shell steps but no
 **Loop Decider**. A Decider's constrained `continue`/`stop` verdict is a
 pure-output action; Kimi 0.27 `-p` cannot enforce the required no-tools
 boundary, so Kimi + Decider is rejected before the loop starts.
 
-> Loop runs stream live in the Jobs view like any rail job — and the Job Detail view groups a loop's log **by step**: a live chip map of the graph on top, one collapsible section per step below, with follow mode tracking the running step. Provider/model/effort are governed by the **rail**, not the loop's steps.
+> Loop runs stream live in the Jobs view, grouped by scoped attempts. Core runs also expose their nested graph. Project role settings apply unless a deliberate launch override selects an engine for the run. Legacy profile routing and orchestrator settings remain available for older workflows.
 
 ### Pipeline phases
 
@@ -72,8 +80,8 @@ Core versions that declare the shared execution runtime also keep a durable
 journal for each run. Desktop freezes the selected specs, repository roots and
 ownership in `.specrails/pipeline/<runId>/desktop-context.json`; Core owns the
 separate normalized context, phase state and verification receipts. Retries keep
-valid completed work and resume the first incomplete or invalid phase. A batch
-uses one aggregate change, retaining each ticket's requirements and repository
+valid completed work and resume the first incomplete or invalid phase. A multi-spec
+implement run uses one aggregate change, retaining each ticket's requirements and repository
 scope.
 
 Verification can reuse an actual successful command receipt only when its scope,
@@ -82,7 +90,7 @@ are still required, and confidence must pass before archive. A new verification
 step checks receipt freshness again before reporting success. Older Core versions
 continue through the ordinary verification path.
 
-`Implement` and `Batch` run the pipeline phases defined by the slash command's frontmatter — by default:
+`Implement` runs the pipeline phases defined by the slash command's frontmatter — by default:
 
 ```
 Architect ──► Developer ──► Reviewer ──► Ship
@@ -286,13 +294,13 @@ specrails-core's installer also guarantees it never touches `.specrails/plugins/
 
 ## Running many specs at once
 
-Want a whole batch of specs to run from one rail? Use the **Batch** loop:
+Want several specs to run from one rail? Use the built-in **Implement** loop:
 
-1. Drag all the specs you want onto a single rail.
-2. Pick the **Batch** loop on that rail.
+1. Drag the related specs onto a single rail (keep it to 3 or fewer).
+2. Keep the **Implement** loop on that rail.
 3. Press **▶ Play**.
 
-The rail launches one `/specrails:batch-implement` job that works through every assigned spec in dependency-aware waves. Monitor progress on the Jobs page. Because a project runs one job at a time, this is also the way to chain a list of specs without juggling multiple rails.
+The rail launches one `/specrails:implement` job that treats every assigned spec as one aggregate unit of work. For independent specs, spread them across several rails instead — each git-backed rail runs in its own isolated worktree. There is no separate Batch mode any more: rails saved with the old Batch mode run as Implement.
 
 ## Stopping everything
 

package/docs/tracking-cost.md

@@ -8,7 +8,7 @@ Six surfaces, all per-project:
 
 | Surface | What it captures |
 |---------|------------------|
-| **`job`** | Every rail run (the Architect → Developer → Reviewer → Ship pipeline, plus Freestyle and Batch runs) |
+| **`job`** | Every rail run (the Architect → Developer → Reviewer → Ship pipeline, plus Freestyle runs) |
 | **`quick-spec`** | One-shot Quick spec generation (including a Quick-mode Contract Refine run) |
 | **`explore-spec`** | Every Explore conversation turn (including the Explore Contract Refine run) |
 | **`ai-edit`** | The **AI Edit / Refine** overlay (refining an agent or a ticket) |
@@ -178,3 +178,12 @@ For the cross-project view, open **Analytics** from the Arc sidebar on the left.
 - [Using Codex](codex.md) — how cost works when you run a project on Codex (estimated, ~ tilde).
 - [Using Gemini](gemini.md) — how cost works when you run a project on Gemini (also estimated, ~ tilde).
 - [Using Kimi](kimi.md) — why Kimi duration/outcome are recorded while tokens and cost remain unavailable.
+
+## Legacy workflow usage
+
+Project Analytics also shows recorded uses of classic loops, queued native
+commands and local merge-back. This card covers all recorded history for the
+project and is independent of spending filters. Refresh its counters to inspect
+recent use; unavailable storage is shown as unavailable, never zero. A zero count
+alone does not prove the two-release observation period required before retiring
+legacy compatibility. These counts are execution observations, not billed costs.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.57.0",
+  "version": "2.58.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -37,6 +37,7 @@
     "build:mcp-bridge": "node scripts/build-mcp-bridge.mjs",
     "build:local-runner": "node scripts/build-local-runner.mjs",
     "build:desktop": "npm run build:server && cd client && npm run build && cd .. && npm run build:sidecar && npm run build:mcp-bridge && npm run build:local-runner && tauri build",
+    "build:desktop:verified": "npm run build:server && npm run build:sidecar && npm run build:mcp-bridge && npm run build:local-runner && tauri build",
     "assemble-runtimes": "node scripts/assemble-runtimes-local.mjs",
     "build:desktop:local": "npm run assemble-runtimes && npm run build:desktop",
     "generate-icons": "tauri icon src-tauri/icons/icon.svg",

package/server/dist/core-compat.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXPECTED_CORE_CONTRACT_SCHEMA_VERSION = void 0;
 exports.findCoreContract = findCoreContract;
 exports.detectCLISync = detectCLISync;
 exports.detectAvailableCLIs = detectAvailableCLIs;
@@ -18,12 +19,16 @@ const bundled_core_1 = require("./bundled-core");
 const core_runtime_1 = require("./core-runtime");
 // Windows has no `which`; probe PATH via `where` instead.
 const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
+/** Paired development target; older supported contracts remain compatible. */
+exports.EXPECTED_CORE_CONTRACT_SCHEMA_VERSION = '5.1';
 // These must mirror KNOWN_VERBS in cli/specrails-desktop.ts
 const DESKTOP_KNOWN_COMMANDS = new Set([
     'implement',
-    'batch-implement',
     'retry',
 ]);
+// Commands older Cores still ship that Desktop no longer invokes. They are
+// tolerated (not drift) but never required: Batch was folded into implement.
+const DESKTOP_TOLERATED_LEGACY_COMMANDS = new Set(['batch-implement']);
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -50,7 +55,7 @@ function isRenderedProviderContract(provider, value) {
         if (value.updateCommand === 'update' && (!isStringArray(value.cli.updateArgs) || !value.cli.updateArgs.includes('update')))
             return false;
         const workflows = value.workflows;
-        if (!['implement', 'batch-implement', 'retry'].every(name => typeof workflows[name] === 'string' && workflows[name]))
+        if (!['implement', 'retry'].every(name => typeof workflows[name] === 'string' && workflows[name]))
             return false;
         return provider !== 'kimi' || (value.cli.providerBinary === 'kimi'
             && value.cli.skillRunner === '.kimi-code/specrails/run-skill.mjs'
@@ -236,7 +241,7 @@ async function checkCoreCompat() {
     // v3 dropped the `commands` field from the contract — when absent, the
     // command-set check is a no-op (cannot prove drift either way).
     const contractCommands = Array.isArray(contract.commands) ? contract.commands : [];
-    const missingCommands = contractCommands.filter((c) => !DESKTOP_KNOWN_COMMANDS.has(c));
+    const missingCommands = contractCommands.filter((c) => !DESKTOP_KNOWN_COMMANDS.has(c) && !DESKTOP_TOLERATED_LEGACY_COMMANDS.has(c));
     const extraCommands = contract.commands === undefined
         ? []
         : [...DESKTOP_KNOWN_COMMANDS].filter((c) => !contractCommands.includes(c));

package/server/dist/core-execution.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkoutSubdirectory = checkoutSubdirectory;
 exports.prepareCoreExecution = prepareCoreExecution;
 exports.coreVerificationContext = coreVerificationContext;
 exports.checkCoreCompletion = checkCoreCompletion;
@@ -25,6 +26,45 @@ function canonicalPath(path) {
         return (0, node_path_1.join)(canonicalPath(parent), (0, node_path_1.basename)(path));
     }
 }
+/** Where a directory sits inside its git checkout: '' for the checkout root or a directory outside git. */
+function checkoutSubdirectory(directory) {
+    let start;
+    try {
+        start = (0, node_fs_1.realpathSync)(directory);
+    }
+    catch {
+        return '';
+    }
+    for (let current = start;; current = (0, node_path_1.dirname)(current)) {
+        if ((0, node_fs_1.existsSync)((0, node_path_1.join)(current, '.git')))
+            return (0, node_path_1.relative)(current, start).split(node_path_1.sep).join('/');
+        if ((0, node_path_1.dirname)(current) === current)
+            return '';
+    }
+}
+/**
+ * A registered repository may be one package of a larger git checkout (a
+ * monorepo app). An isolated worktree always mounts the whole checkout, so the
+ * registered directory travels to Core as the repository scope; otherwise Core
+ * verifies, edits and reviews every workspace of the checkout.
+ */
+function registeredScope(checkout, sourcePath) {
+    if (!sourcePath)
+        return undefined;
+    const prefix = checkoutSubdirectory(sourcePath);
+    // Core already receives the registered directory itself when it is not a checkout root.
+    if (!prefix || checkoutSubdirectory(checkout) !== '')
+        return undefined;
+    try {
+        return (0, node_fs_1.statSync)((0, node_path_1.join)(checkout, ...prefix.split('/'))).isDirectory() ? [prefix] : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function withoutScope(context) {
+    return { ...context, repositories: context.repositories.map(({ scope: _scope, ...repository }) => repository) };
+}
 /** Stable run identity and frozen inputs are shared by every provider and retry.
  * No cwd/global singleton: two rails in the same workspace get separate files.
  */
@@ -34,9 +74,13 @@ function prepareCoreExecution(input) {
         throw new Error('Invalid Core execution run id');
     const cwd = (0, node_fs_1.realpathSync)(input.cwd);
     (0, core_update_state_1.assertWorkspaceCoreReady)(cwd);
+    const scoped = (repository, sourcePath) => {
+        const scope = registeredScope(repository.path, sourcePath);
+        return scope ? { ...repository, scope } : repository;
+    };
     const repositories = manifest
-        ? manifest.repositories.map(repo => ({ id: repo.repositoryId, name: repo.name, path: (0, node_fs_1.realpathSync)(repo.worktreePath), baseSha: repo.baseSha }))
-        : [{ id: run.repositoryId ?? (run.spec?.repositoryIds?.length === 1 ? run.spec.repositoryIds[0] : run.projectId ? `primary-${run.projectId}` : 'primary'), name: (0, node_path_1.basename)(input.repoDir ?? cwd), path: (0, node_fs_1.realpathSync)(input.repoDir ?? cwd) }];
+        ? manifest.repositories.map(repo => scoped({ id: repo.repositoryId, name: repo.name, path: (0, node_fs_1.realpathSync)(repo.worktreePath), baseSha: repo.baseSha }, repo.sourcePath))
+        : [scoped({ id: run.repositoryId ?? (run.spec?.repositoryIds?.length === 1 ? run.spec.repositoryIds[0] : run.projectId ? `primary-${run.projectId}` : 'primary'), name: (0, node_path_1.basename)(input.repoDir ?? cwd), path: (0, node_fs_1.realpathSync)(input.repoDir ?? cwd) }, input.sourcePath)];
     if (!repositories.length || repositories.some(repo => !SAFE_ID.test(repo.id)))
         throw new Error('Invalid Core repository scope');
     const artifactRepositoryId = manifest?.artifactRepositoryId ?? repositories[0].id;
@@ -76,7 +120,9 @@ function prepareCoreExecution(input) {
     catch (error) {
         if (error.code !== 'EEXIST')
             throw error;
-        if ((0, node_fs_1.readFileSync)(contextPath, 'utf8') !== serialized)
+        const frozen = (0, node_fs_1.readFileSync)(contextPath, 'utf8');
+        // A run admitted before repository scopes existed keeps its frozen whole-checkout context.
+        if (frozen !== serialized && frozen !== JSON.stringify(withoutScope(context), null, 2) + '\n')
             throw new Error('Core execution context changed during an active run; start a new run for changed scope');
     }
     const env = { ...input.env, SPECRAILS_EXECUTION_CONTEXT: contextPath };

package/server/dist/db/migrations.js

@@ -1507,6 +1507,107 @@ const MIGRATIONS = [
         if (!cols.includes('spec_addenda'))
             db.exec(`ALTER TABLE rail_pr_deliveries ADD COLUMN spec_addenda TEXT`);
     },
+    // Migration 64: frozen Core definition launches and restart/fork provenance.
+    // Historical runs stay NULL (legacy); no graph is silently migrated to v2.
+    (db) => {
+        const cols = new Set(db.prepare('PRAGMA table_info(loop_runs)').all().map(row => row.name));
+        for (const [name, type] of Object.entries({ run_request_json: 'TEXT', engine_version: 'INTEGER', fork_of: 'TEXT',
+            runtime_metadata_json: 'TEXT', runtime_status_json: 'TEXT', core_revision: 'INTEGER', core_event_cursor: 'INTEGER',
+            fork_cut_json: 'TEXT', restart_reason: 'TEXT' })) {
+            if (!cols.has(name))
+                db.exec(`ALTER TABLE loop_runs ADD COLUMN ${name} ${type}`);
+        }
+        db.exec('CREATE INDEX IF NOT EXISTS idx_loop_runs_fork_of ON loop_runs(fork_of)');
+    },
+    // Migration 65: definition execution claims — the synchronous admission guard
+    // that keeps a v2 run and its forks from writing to one shared worktree at the
+    // same time. A row is a LIVE owner, never a paused run: settlement, cancel and
+    // restart reconciliation delete it. Additive + idempotent.
+    (db) => {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS definition_execution_claims (
+        run_id                 TEXT PRIMARY KEY,
+        owner                  TEXT NOT NULL,
+        repository_mounts_json TEXT NOT NULL,
+        claimed_at             TEXT NOT NULL DEFAULT (datetime('now')),
+        heartbeat_at           TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+      CREATE INDEX IF NOT EXISTS idx_definition_execution_claims_owner ON definition_execution_claims(owner);
+    `);
+    },
+    // Migration 66: observed legacy launches, independent of release eligibility.
+    (db) => {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS legacy_launch_events (
+        id TEXT PRIMARY KEY,
+        kind TEXT NOT NULL CHECK (kind IN ('legacy_loop_traversal','queue_manager_slash','merge_back')),
+        project_id TEXT NOT NULL,
+        run_id TEXT,
+        at TEXT NOT NULL
+      );
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_legacy_launch_identity ON legacy_launch_events(kind, run_id) WHERE run_id IS NOT NULL;
+      CREATE INDEX IF NOT EXISTS idx_legacy_launch_at ON legacy_launch_events(at);
+    `);
+    },
+    // Migration 67: original isolated-delivery continuation, admitted before Core starts.
+    (db) => {
+        db.exec(`
+      CREATE TABLE definition_delivery_settlements (
+        delivery_id TEXT NOT NULL REFERENCES rail_pr_deliveries(id),
+        run_id TEXT NOT NULL,
+        project_id TEXT NOT NULL,
+        snapshot_json TEXT NOT NULL,
+        result_json TEXT,
+        provenance_recorded INTEGER NOT NULL DEFAULT 0 CHECK(provenance_recorded IN (0,1)),
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+        PRIMARY KEY (delivery_id, run_id)
+      );
+      CREATE INDEX idx_definition_delivery_run ON definition_delivery_settlements(run_id);
+    `);
+    },
+    // Migration 68: durable fork admission and transfer of settlement ownership.
+    (db) => {
+        db.exec(`
+      CREATE TABLE definition_fork_operations (
+        project_id TEXT NOT NULL,
+        source_run_id TEXT NOT NULL REFERENCES loop_runs(id),
+        request_id TEXT NOT NULL,
+        child_run_id TEXT NOT NULL UNIQUE,
+        request_json TEXT NOT NULL,
+        result_json TEXT,
+        adopted INTEGER NOT NULL DEFAULT 0 CHECK(adopted IN (0,1)),
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        PRIMARY KEY (project_id, source_run_id, request_id)
+      );
+      CREATE UNIQUE INDEX idx_definition_fork_adopted_source ON definition_fork_operations(source_run_id) WHERE adopted=1;
+      ALTER TABLE definition_delivery_settlements ADD COLUMN superseded_by TEXT;
+    `);
+    },
+    // Migration 69: durable runtime-history expiration, independent of UI dismissal.
+    // The token identifies owned quarantine for restart-safe cleanup; historical
+    // job/loop accounting remains in its original tables.
+    (db) => {
+        db.exec(`
+      CREATE TABLE runtime_retention_policy (
+        id INTEGER PRIMARY KEY CHECK(id=1),
+        days INTEGER CHECK(days IS NULL OR (days BETWEEN 1 AND 3650))
+      );
+      CREATE TABLE runtime_retention_records (
+        run_id TEXT PRIMARY KEY,
+        expired_at TEXT NOT NULL,
+        disposition TEXT NOT NULL CHECK(disposition IN ('settled','discarded')),
+        previous_status TEXT NOT NULL,
+        quarantine_token TEXT NOT NULL UNIQUE,
+        summary_json TEXT NOT NULL
+      );
+    `);
+    },
+    // Migration 70: the Batch rail mode was removed — `implement` already runs
+    // every rail ticket in one aggregate run. Stored batch rails become implement.
+    (db) => {
+        db.exec(`UPDATE rails SET mode='implement' WHERE mode IN ('batch-implement','batch')`);
+    },
 ];
 function applyMigrations(db) {
     // Ensure the migrations table exists (migration 1 creates it, but we need