specrails-desktop 2.58.0 → 2.59.0

package/server/dist/mcp/tools/projects.js

@@ -25,17 +25,42 @@ function projectsTools() {
             name: 'specrails_projects',
             title: 'Projects',
             description: 'List and inspect registered Specrails projects, resolve a project by filesystem path, or unregister one. ' +
-                'Actions: list, get, resolve (by path), unregister (destructive — removes the project and its workspace).',
+                'Actions: list, get, resolve (by project/repository/workspace path), repositories (inventory), repository_add / repository_update (write, configure registered code workspacePaths), repository_remove (destructive), unregister (destructive — removes the project and its workspace).',
             hintTier: 'read',
-            tier: (args) => (args.action === 'unregister' ? 'destructive' : 'read'),
+            tier: (args) => ['unregister', 'repository_remove'].includes(String(args.action)) ? 'destructive' : ['repository_add', 'repository_update'].includes(String(args.action)) ? 'write' : 'read',
             inputSchema: {
-                action: zod_1.z.enum(['list', 'get', 'resolve', 'unregister']).describe('Operation to perform'),
-                projectId: zod_1.z.string().optional().describe('Project id (for get / unregister)'),
-                path: zod_1.z.string().optional().describe('Filesystem path (for resolve)'),
+                action: zod_1.z.enum(['list', 'get', 'resolve', 'repositories', 'repository_add', 'repository_update', 'repository_remove', 'unregister']).describe('Operation to perform'),
+                projectId: zod_1.z.string().optional().describe('Project id; defaults to the active project for get and repository operations; required for unregister'),
+                path: zod_1.z.string().optional().describe('Filesystem path for resolve or repository_add/update; repository root retains its Git/delivery identity'),
+                repositoryId: zod_1.z.string().min(1).optional().describe('Required for repository_update/remove; discover from repositories/get'),
+                name: zod_1.z.string().min(1).optional().describe('Repository display name'),
+                integrationBranch: zod_1.z.string().nullable().optional().describe('Repository integration branch; null clears it'),
+                workspacePaths: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(50).nullable().optional().describe('repository_add/update: code directories inside the repository, absolute or root-relative. null resets to repository root. Independent Git roots need separate memberships. Changes are rejected while active runs depend on this scope.'),
             },
             handler: (ctx, args) => {
                 const action = args.action;
                 switch (action) {
+                    case 'repositories':
+                        return (0, types_1.apiCall)(ctx, 'GET', `${(0, types_1.projectPath)(ctx, args.projectId)}/repositories`);
+                    case 'repository_add':
+                    case 'repository_update':
+                    case 'repository_remove': {
+                        const base = `${(0, types_1.projectPath)(ctx, args.projectId)}/repositories`;
+                        const id = args.repositoryId;
+                        if (action !== 'repository_add' && !id)
+                            throw new Error(`${action} requires repositoryId.`);
+                        if (action === 'repository_remove')
+                            return (0, types_1.apiCall)(ctx, 'DELETE', `${base}/${encodeURIComponent(id)}`);
+                        if (action === 'repository_add' && !args.path)
+                            throw new Error('repository_add requires path.');
+                        const body = {};
+                        for (const key of ['path', 'name', 'integrationBranch', 'workspacePaths'])
+                            if (args[key] !== undefined)
+                                body[key] = args[key];
+                        if (!Object.keys(body).length)
+                            throw new Error('repository_update requires at least one field to update.');
+                        return (0, types_1.apiCall)(ctx, action === 'repository_add' ? 'POST' : 'PATCH', action === 'repository_add' ? base : `${base}/${encodeURIComponent(id)}`, body);
+                    }
                     case 'list':
                         return ctx.registry.listProjects().map((p) => ({ ...serializeProject(p), available: !!ctx.registry.getContext(p.id) }));
                     case 'get': {
@@ -53,7 +78,7 @@ function projectsTools() {
                             throw new Error('resolve requires a "path".');
                         const selected = args.projectId;
                         const key = (0, project_repositories_1.repositoryPathKey)((0, project_repositories_1.canonicalRepositoryPath)(p));
-                        const matches = ctx.registry.listProjects().filter(row => !selected || row.id === selected).flatMap(project => (0, project_repositories_1.getProjectRepositories)(project).filter(repository => (0, project_repositories_1.repositoryPathKey)((0, project_repositories_1.canonicalRepositoryPath)(repository.path)) === key)
+                        const matches = ctx.registry.listProjects().filter(row => !selected || row.id === selected).flatMap(project => (0, project_repositories_1.getProjectRepositories)(project).filter(repository => [repository.path, ...(repository.workspacePaths ?? (repository.workspacePath ? [repository.workspacePath] : []))].some(root => (0, project_repositories_1.repositoryPathKey)((0, project_repositories_1.canonicalRepositoryPath)(root)) === key))
                             .map(repository => ({ project, repository })));
                         if (matches.length > 1)
                             return { resolved: false, ambiguous: true, matches: matches.map(({ project, repository }) => ({ projectId: project.id, projectName: project.name, repositoryId: repository.id, repositoryName: repository.name })) };

package/server/dist/mcp/tools/rails.js

@@ -49,7 +49,7 @@ function railsTools() {
                 'When launched from the in-app agent chat without an explicit aiEngine, the engine defaults to your conversation\'s provider. On that same provider, an omitted model inherits the conversation model; an explicit model wins (pass aiEngine to override; launch_all always uses each rail\'s stored engine). ' +
                 'For Implement, the selected launch provider applies to ALL runtime roles (architect, developer, reviewer); an explicit launch model/effort also applies to each role. Resuming an existing execution keeps its original frozen role configuration; start a new launch to change providers. ' +
                 'User-facing naming: call the free-form autonomous mode "Freestyle"; use "freestyle" as the canonical API enum value for that same capability. ' +
-                'For small OpenSpec-governed work, recommend "SDD Quick (OpenSpec)" and launch with mode "loop" plus loopId "factory:sdd-quick-openspec"; keep Freestyle for ticket-local implementation-only work. ' +
+                'Always honor an explicit workflow selection, including Implement for addenda or delivery changes. Without a preference, for small OpenSpec-governed work, recommend "SDD Quick (OpenSpec)" and launch with mode "loop" plus loopId "factory:sdd-quick-openspec"; keep Freestyle for ticket-local implementation-only work. ' +
                 'NAMING: railIndex is the 0-BASED internal identity; the dashboard shows rails 1-based ("Rail N" = railIndex N-1). When talking to the user, ALWAYS say "Rail <railIndex + 1>" (or the rail\'s custom name) — results include railLabel with the correct user-facing label.',
             hintTier: 'read',
             tier: (a) => {
@@ -68,6 +68,7 @@ function railsTools() {
                     .describe('Operation to perform'),
                 projectId: zod_1.z.string().optional().describe('Project id (defaults to the active project)'),
                 repositoryIds: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(50).optional().describe('launch only: explicit affected repository memberships for the coordinated run; must include every repository required by the assigned specs. Omission uses the assigned specs\' repository selections.'),
+                workspaceSelection: zod_1.z.record(zod_1.z.string(), zod_1.z.array(zod_1.z.string().min(1)).min(1)).optional().describe('launch only: map selected repository IDs to registered code workspace paths; discover workspacePaths through project context. Omission verifies all configured code workspaces. Never use the parent project path unless it is itself a registered code workspace.'),
                 repositoryId: zod_1.z.string().min(1).optional().describe('review_packet only: member of a grouped delivery to inspect; omission returns the public parent with grouped outcomes.'),
                 railIndex: zod_1.z
                     .number()
@@ -129,11 +130,11 @@ function railsTools() {
                 revisionOfDeliveryId: zod_1.z
                     .string()
                     .optional()
-                    .describe('Revise a delivery that is ALREADY awaiting the user\'s decision (launch). Continues with Quick SDD (the Revision loop is retired): pass its prDeliveryId (from rails.prDeliveries) together with revisionNote. Use it whenever the user asks for a change to work you already delivered — never publish/discard/merge first. The rail must still carry exactly that delivery\'s specs.'),
+                    .describe('Revise a delivery that is ALREADY awaiting the user\'s decision (launch). Continues with the explicitly selected loop, defaulting to Quick SDD (the Revision loop is retired): pass its prDeliveryId (from rails.prDeliveries) together with revisionNote. Use it whenever the user asks for a change to work you already delivered — never publish/discard/merge first. The rail must still carry exactly that delivery\'s specs.'),
                 revisionNote: zod_1.z
                     .string()
                     .optional()
-                    .describe('What to change, in the user\'s own words (required with revisionOfDeliveryId). It is injected into every Quick SDD phase and shown on the updated review packet as "what you asked to change".'),
+                    .describe('What to change, in the user\'s own words (required with revisionOfDeliveryId). It is injected into every selected workflow phase and shown on the updated review packet as "what you asked to change".'),
                 followUp: zod_1.z
                     .object({
                     comments: zod_1.z.array(zod_1.z.object({
@@ -257,6 +258,8 @@ function railsTools() {
                             body.targetPrNumber = args.targetPrNumber;
                         if (args.repositoryIds !== undefined)
                             body.repositoryIds = args.repositoryIds;
+                        if (args.workspaceSelection !== undefined)
+                            body.workspaceSelection = args.workspaceSelection;
                         if (args.baseBranch !== undefined)
                             body.baseBranch = args.baseBranch;
                         // Revision of a delivery already awaiting the user's decision: the

package/server/dist/mcp/tools/setup.js

@@ -88,6 +88,8 @@ function setupTools() {
                     .array(zod_1.z.string())
                     .optional()
                     .describe('add_project: providers to install (first = primary/default); de-duped server-side'),
+                workspacePaths: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(50).optional().describe('add_project: code workspace directories inside the primary project root'),
+                repositories: zod_1.z.array(zod_1.z.object({ path: zod_1.z.string().min(1), name: zod_1.z.string().optional(), workspacePaths: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(50).optional(), integrationBranch: zod_1.z.string().nullable().optional() })).max(50).optional().describe('add_project: additional repository memberships with their code workspaces'),
                 // install_config
                 config: zod_1.z
                     .record(zod_1.z.unknown())
@@ -115,6 +117,10 @@ function setupTools() {
                             body.provider = args.provider;
                         if (Array.isArray(args.providers))
                             body.providers = args.providers;
+                        if (args.workspacePaths !== undefined)
+                            body.workspacePaths = args.workspacePaths;
+                        if (args.repositories !== undefined)
+                            body.repositories = args.repositories;
                         return (0, types_1.apiCall)(ctx, 'POST', '/projects', body);
                     }
                     // ─── Per-project ────────────────────────────────────────────────────
@@ -137,6 +143,10 @@ function setupTools() {
                         const body = {};
                         if (Array.isArray(args.providers))
                             body.providers = args.providers;
+                        if (args.workspacePaths !== undefined)
+                            body.workspacePaths = args.workspacePaths;
+                        if (args.repositories !== undefined)
+                            body.repositories = args.repositories;
                         else if (typeof args.provider === 'string')
                             body.provider = args.provider;
                         else

package/server/dist/mcp/tools/specs.js

@@ -313,7 +313,7 @@ function specsTools() {
                         });
                         return {
                             ...r,
-                            hint: 'The addendum is open: launch with factory:sdd-quick-openspec. Rail launches route open addenda to Quick SDD, continue a same-spec pending delivery, and brief every AI step with the full delta and a fresh OpenSpec target. Do not use Revision or edit openspecChangeName. Do not edit the spec description to repeat it.',
+                            hint: 'The addendum is open: respect the user\'s explicit loop selection, including factory:implement; otherwise recommend factory:sdd-quick-openspec. Rail launches continue a same-spec pending delivery, and brief every AI step with the full delta and a fresh OpenSpec target. Do not use Revision or edit openspecChangeName. Do not edit the spec description to repeat it.',
                         };
                     }
                     case 'update_addendum': {

package/server/dist/modules/accounting/runtime/pricing.js

@@ -76,7 +76,10 @@ exports.PRICING = {
     // Opus 5.5: https://platform.claude.com/docs/en/models/opus-5-5/overview
     'claude:opus': { inputPer1M: 4.00, outputPer1M: 20.00, cacheReadPer1M: 0.20, cacheWritePer1M: 5.00, inputIncludesCacheReads: false, lastReviewedAt: '2026-09-24' },
     'claude:claude-opus-5-5': { inputPer1M: 4.00, outputPer1M: 20.00, cacheReadPer1M: 0.20, cacheWritePer1M: 5.00, inputIncludesCacheReads: false, lastReviewedAt: '2026-09-24' },
-    'claude:sonnet': { inputPer1M: 3.00, outputPer1M: 15.00, cacheReadPer1M: 0.30, cacheWritePer1M: 3.75, inputIncludesCacheReads: false, lastReviewedAt: '2026-07-02' },
+    'claude:claude-sonnet-5': { inputPer1M: 3.00, outputPer1M: 15.00, cacheReadPer1M: 0.30, cacheWritePer1M: 3.75, inputIncludesCacheReads: false, lastReviewedAt: '2026-07-02' },
+    // Sonnet 5.5: https://platform.claude.com/docs/en/models/sonnet-5-5/overview
+    'claude:sonnet': { inputPer1M: 2.00, outputPer1M: 10.00, cacheReadPer1M: 0.20, cacheWritePer1M: 2.50, inputIncludesCacheReads: false, lastReviewedAt: '2026-09-30' },
+    'claude:claude-sonnet-5-5': { inputPer1M: 2.00, outputPer1M: 10.00, cacheReadPer1M: 0.20, cacheWritePer1M: 2.50, inputIncludesCacheReads: false, lastReviewedAt: '2026-09-30' },
     'claude:haiku': { inputPer1M: 1.00, outputPer1M: 5.00, cacheReadPer1M: 0.10, cacheWritePer1M: 1.25, inputIncludesCacheReads: false, lastReviewedAt: '2026-07-02' },
     'claude:fable': { inputPer1M: 10.00, outputPer1M: 50.00, cacheReadPer1M: 1.00, cacheWritePer1M: 12.50, inputIncludesCacheReads: false, lastReviewedAt: '2026-07-02' },
 };
@@ -96,6 +99,8 @@ function resolvePriceEntry(providerId, model) {
         // Keep the existing estimates for older concrete Opus generations.
         if (/^claude-opus-(?:4(?:-|$)|5$)/.test(model))
             return exports.PRICING['claude:claude-opus-5'];
+        if (/^claude-sonnet-(?:4(?:-|$)|5$)/.test(model))
+            return exports.PRICING['claude:claude-sonnet-5'];
         const family = CLAUDE_MODEL_FAMILY.exec(model);
         if (family)
             return exports.PRICING[`claude:${family[1]}`];

package/server/dist/modules/agent-runtime/runtime/agent-runtime-bridge.js

@@ -32,13 +32,39 @@ function runtimeChangeName(runId) {
  * cwd is relative to the registered directory; one already inside the scope is kept.
  */
 function scopedHostChecks(checks, repositories = []) {
-    return checks.map(check => {
-        const scope = repositories.find(repository => repository.id === check.repositoryId)?.scope?.[0];
-        if (!scope || (check.cwd !== undefined && (0, node_path_1.isAbsolute)(check.cwd)))
-            return check;
-        const cwd = (check.cwd ?? '.').replace(/\\/g, '/');
-        const inside = cwd === scope || cwd.startsWith(scope + '/');
-        return { ...check, cwd: inside ? cwd : node_path_1.posix.normalize(node_path_1.posix.join(scope, cwd)) };
+    return checks.flatMap(check => {
+        const repository = repositories.find(repository => repository.id === check.repositoryId);
+        const scopes = repository?.scope;
+        if (!repository || !scopes?.length)
+            return [check];
+        if (check.cwd === undefined)
+            return scopes.map((scope, index) => ({ ...check, cwd: scope,
+                ...(check.key && scopes.length > 1 ? { key: check.key.slice(0, 90) + '-workspace-' + index } : {}),
+            }));
+        const declared = repository.registeredScope;
+        const inputCwd = check.cwd.replace(/\\/g, '/');
+        const rawCwd = (0, node_path_1.isAbsolute)(inputCwd) && repository.path ? (0, node_path_1.relative)(repository.path, inputCwd).split(node_path_1.sep).join('/') : inputCwd;
+        if (!(0, node_path_1.isAbsolute)(rawCwd) && declared?.some(root => rawCwd === root || rawCwd.startsWith(root + '/')) && !scopes.some(root => rawCwd === root || rawCwd.startsWith(root + '/')))
+            return [];
+        let cwd = check.cwd.replace(/\\/g, '/');
+        if ((0, node_path_1.isAbsolute)(cwd)) {
+            if (!repository.path)
+                throw new Error('Verification workspace root is unavailable');
+            cwd = (0, node_path_1.relative)(repository.path, cwd).split(node_path_1.sep).join('/');
+        }
+        else {
+            const normalized = node_path_1.posix.normalize(cwd);
+            if (scopes.some(scope => cwd === scope || cwd.startsWith(scope + '/')))
+                cwd = normalized;
+            else if (scopes.length === 1)
+                cwd = node_path_1.posix.join(scopes[0], normalized);
+            else
+                throw new Error('Verification must select an explicit workspace cwd when several scopes are configured');
+        }
+        cwd = node_path_1.posix.normalize(cwd);
+        if (!scopes.some(root => cwd === root || cwd.startsWith(root + '/')))
+            throw new Error(`Verification cwd ${JSON.stringify(check.cwd)} escapes the selected code workspace ${scopes.join(', ')}`);
+        return [{ ...check, cwd }];
     });
 }
 exports.RUNTIME_HOST_ENV_KEYS = [
@@ -80,7 +106,7 @@ function readFrozenRuntimeHost(contextPath, baseEnv, runId) {
  * rail's cancellation and worktree ownership remain in Desktop. */
 async function runAgentRuntimeInvocation(options) {
     const definitionEngine = options.engineVersion === 2 || options.definitionPath !== undefined || options.prepareDefinition !== undefined;
-    if (options.resume && (options.definitionPath || options.prepareDefinition || options.workflowRoleBindings))
+    if (options.resume && (options.definitionPath || options.prepareDefinition || options.workflowRoleBindings || options.loopConfig))
         throw new Error('Resume must use the frozen workflow definition and role bindings');
     const selectedCli = options.resume ? (0, agent_runtime_package_1.resolveRetainedAgentRuntime)(options.contextPath) : (0, agent_runtime_loader_1.findCoreAgentRuntimeCli)();
     let cli = selectedCli;
@@ -96,11 +122,12 @@ async function runAgentRuntimeInvocation(options) {
         if (!Array.isArray(admittedContext.repositories) || !admittedContext.repositories.length || admittedContext.repositories.some(repo => !repo || typeof repo.id !== 'string' || !repo.id))
             throw new Error('Core context is missing its repository scope');
         const source = (0, node_fs_1.existsSync)(options.configPath) ? 'project-role' : 'default';
-        const { config, origins } = (0, agent_runtime_effective_config_1.resolveEffectiveRuntimeConfig)((0, agent_runtime_settings_1.loadRuntimeConfigFile)(options.configPath, options.defaultProvider), {
-            repositoryIds: admittedContext.repositories.map(repo => repo.id), source, providerOverride: options.providerOverride,
+        const { config, origins } = (0, agent_runtime_effective_config_1.resolveEffectiveRuntimeConfig)(options.loopConfig ? (0, agent_runtime_settings_1.loadLoopRuntimeConfig)(options.configPath, options.loopConfig, options.providerOverride ?? { provider: options.defaultProvider ?? 'claude' }) : (0, agent_runtime_settings_1.loadRuntimeConfigFile)(options.configPath, options.defaultProvider), {
+            repositoryIds: admittedContext.repositories.map(repo => repo.id), source: options.loopConfig ? 'loop-role' : source, providerOverride: options.loopConfig ? undefined : options.providerOverride,
         });
         config.verification = scopedHostChecks(config.verification, admittedContext.repositories);
-        config.rolePrompts = { ...(await (0, agent_runtime_loader_1.loadCoreAgentRuntime)()).rolePromptDefaults(), ...(0, agent_runtime_settings_1.loadRuntimeRolePrompts)(), ...config.rolePrompts };
+        if (!options.loopConfig)
+            config.rolePrompts = { ...(await (0, agent_runtime_loader_1.loadCoreAgentRuntime)()).rolePromptDefaults(), ...(0, agent_runtime_settings_1.loadRuntimeRolePrompts)(), ...config.rolePrompts };
         // Core rejects unknown connection keys: drop the desktop-only local-engine
         // fields (label/defaultModel/rates/supportsReasoningEffort) before Core sees it.
         const runtime = await (0, agent_runtime_loader_1.loadCoreAgentRuntime)();
@@ -120,8 +147,13 @@ async function runAgentRuntimeInvocation(options) {
         if (definitionEngine && !draft)
             throw new Error('A new Core workflow requires a definition');
         const selectedOrigins = (0, agent_runtime_effective_config_1.bindWorkflowRoleSelections)(config, draft, options.workflowRoleBindings);
+        if (options.loopConfig && draft?.roles?.includes('loop-decider') && !config.roles?.['loop-decider'])
+            throw new Error('The loop must define its loop-decider agent');
         const workflowOrigins = { ...(0, agent_runtime_effective_config_1.bindWorkflowRoleDefaults)(config, draft), ...selectedOrigins };
-        const override = options.providerOverride;
+        if (options.loopConfig)
+            for (const role of Object.keys(config.roles ?? {}))
+                workflowOrigins[role] = 'loop-role';
+        const override = options.loopConfig ? undefined : options.providerOverride;
         runtime.validateRuntimeConfig(JSON.parse(JSON.stringify(config)));
         (0, agent_runtime_loader_1.validateRequestedRoleEfforts)(runtime, config);
         cli = (0, agent_runtime_package_1.retainAgentRuntime)(cli, options.contextPath);
@@ -169,6 +201,17 @@ async function runAgentRuntimeInvocation(options) {
     const definitionFile = (0, node_path_1.join)((0, node_path_1.dirname)(options.contextPath), 'desktop-workflow-definition.json');
     const requiresVerified = definitionEngine && JSON.parse((0, node_fs_1.readFileSync)(definitionFile, 'utf8')).delivery?.requiresVerified === true;
     const frozenPath = (0, node_path_1.join)((0, node_path_1.dirname)(options.contextPath), 'desktop-runtime-config.json');
+    if ((0, node_fs_1.existsSync)(frozenPath)) {
+        const checks = JSON.parse((0, node_fs_1.readFileSync)(frozenPath, 'utf8')).verification;
+        for (const check of checks) {
+            const repository = admittedContext.repositories?.find(repo => repo.id === check.repositoryId);
+            const cwd = repository?.path ? (0, node_path_1.resolve)(repository.path, check.cwd ?? repository.scope?.[0] ?? '.') : check.cwd;
+            try {
+                options.onLine?.(`[verification scope] ${JSON.stringify({ repositoryId: check.repositoryId, workspace: repository?.name, cwd, command: check.command, args: check.args })}\n`);
+            }
+            catch { /* Advisory log observer. */ }
+        }
+    }
     if ((0, node_fs_1.existsSync)(frozenPath)) {
         const frozen = JSON.parse((0, node_fs_1.readFileSync)(frozenPath, 'utf8'));
         for (const [role, assignment] of [...Object.entries(frozen.agents), ...(frozen.fixer ? [['fixer', frozen.fixer]] : [])]) {

package/server/dist/modules/agent-runtime/runtime/agent-runtime-metrics.js

@@ -121,7 +121,7 @@ function applyRuntimeSelectionOrigins(summary, selection, runId) {
     const record = object(selection), origins = object(record?.origins);
     if (!summary || record?.schemaVersion !== 1 || record.runId !== runId || !origins)
         return summary;
-    if (!['architect', 'developer', 'reviewer'].every(role => ['project-role', 'default', ...(role === 'developer' ? ['explicit-launch-override'] : [])].includes(String(origins[role]))))
+    if (!['architect', 'developer', 'reviewer'].every(role => ['loop-role', 'project-role', 'default', ...(role === 'developer' ? ['explicit-launch-override'] : [])].includes(String(origins[role]))))
         return summary;
     return { ...summary, roles: summary.roles.map(role => {
             const origin = origins[role.role];

package/server/dist/modules/agent-runtime/runtime/agent-runtime-settings-router.js

@@ -84,7 +84,7 @@ function registerAgentRuntimeSettingsRoutes({ router, ctx }) {
     router.get('/:projectId/agent-runtime/verification-suggestions', (req, res) => {
         try {
             const project = ctx(req).project;
-            const repositories = (0, project_repositories_1.getProjectRepositories)(project).map((repository) => ({ id: repository.id, name: repository.name, path: repository.path }));
+            const repositories = (0, project_repositories_1.getProjectRepositories)(project).map((repository) => ({ id: repository.id, name: repository.name, path: repository.path, workspacePath: repository.workspacePath, workspacePaths: repository.workspacePaths }));
             res.json({ repositories: repositories.map(({ id, name }) => ({ id, name })), suggestions: (0, agent_runtime_verification_suggestions_1.suggestVerificationCommands)(repositories) });
         }
         catch {

package/server/dist/modules/agent-runtime/runtime/agent-runtime-settings.js

@@ -6,6 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AgentRuntimeConfigError = exports.REVIEW_THRESHOLD_FLOORS = exports.MAX_OUTPUT_TOKENS_MAX = exports.MAX_OUTPUT_TOKENS_MIN = exports.CONTEXT_WINDOW_TOKENS_MAX = exports.CONTEXT_WINDOW_TOKENS_MIN = exports.RUNTIME_ROLE_ID = void 0;
 exports.stripDesktopConnectionFields = stripDesktopConnectionFields;
 exports.coreConnectionFieldGates = coreConnectionFieldGates;
+exports.validateLoopRuntimeSettings = validateLoopRuntimeSettings;
+exports.loadLoopRuntimeConfig = loadLoopRuntimeConfig;
 exports.validateAgentRuntimeConfig = validateAgentRuntimeConfig;
 exports.defaultAgentRuntimeConfig = defaultAgentRuntimeConfig;
 exports.agentRuntimeConfigPath = agentRuntimeConfigPath;
@@ -121,6 +123,46 @@ exports.REVIEW_THRESHOLD_FLOORS = {
     minScore: 70,
     aspects: { type_correctness: 60, pattern_adherence: 60, test_coverage: 60, security: 75, architectural_alignment: 60 },
 };
+/** Validate a portable recipe without accepting host-owned fields or project fallbacks. */
+function validateLoopRuntimeSettings(input, providers = loadRuntimeProviders()) {
+    if (!input || typeof input !== 'object' || Array.isArray(input) || Object.keys(input).some(key => ![
+        'schemaVersion', 'agents', 'fixer', 'roles', 'rolePrompts', 'limits', 'review', 'architect', 'approvalBeforeArchive', 'efficiency', 'guardrails',
+    ].includes(key)))
+        throw new AgentRuntimeConfigError('Invalid loop agent configuration');
+    // "inherit" is a recipe-only assignment, resolved before Core sees it.
+    const portableProviders = [...providers, { id: 'inherit', kind: 'cli', cli: 'claude' }];
+    const config = validateAgentRuntimeConfig({ ...input, enabled: true, providers: portableProviders, verification: [] });
+    if (['architect', 'developer', 'reviewer', 'fixer'].some(role => !config.rolePrompts?.[role]?.trim()))
+        throw new AgentRuntimeConfigError('Loop agents require an explicit definition for architect, developer, reviewer and fixer');
+    const { enabled: _enabled, providers: _providers, verification: _checks, ...settings } = config;
+    return settings;
+}
+/** Read only repository checks from the old project file. Role migration is explicit. */
+function loadLoopRuntimeConfig(file, input, selection = { provider: 'claude' }) {
+    let verification = [];
+    try {
+        const saved = JSON.parse(node_fs_1.default.readFileSync(file, 'utf8'));
+        if (!saved || typeof saved !== 'object' || Array.isArray(saved))
+            throw new AgentRuntimeConfigError('Saved runtime configuration must be an object');
+        verification = saved.verification ?? [];
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    const providers = loadRuntimeProviders();
+    const settings = validateLoopRuntimeSettings(input, providers);
+    const inherit = (agent) => agent.provider !== 'inherit' ? agent : {
+        ...agent, provider: selection.provider, model: agent.model ?? selection.model, effort: agent.effort ?? selection.effort,
+    };
+    for (const role of ROLES)
+        settings.agents[role] = inherit(settings.agents[role]);
+    if (settings.fixer)
+        settings.fixer = inherit(settings.fixer);
+    for (const [role, agent] of Object.entries(settings.roles ?? {}))
+        settings.roles[role] = inherit(agent);
+    return validateAgentRuntimeConfig({ ...settings, providers, enabled: true, verification });
+}
 const CLI_PROVIDERS = ['claude', 'codex', 'gemini', 'kimi'];
 const ROLES = ['architect', 'developer', 'reviewer'];
 const schemaValidator = new ajv_1.default({ allErrors: true }).compile(agent_runtime_schema_json_1.default);

package/server/dist/modules/agent-runtime/runtime/agent-runtime-verification-suggestions.js

@@ -110,10 +110,16 @@ function otherSuggestions(repository) {
 function suggestVerificationCommands(repositories) {
     const out = [];
     for (const repository of repositories) {
-        if (!repository.path || !node_fs_1.default.existsSync(repository.path))
-            continue;
-        const node = nodeSuggestions(repository);
-        out.push(...(node.length ? node : otherSuggestions(repository)));
+        const workspaces = repository.workspacePaths ?? (repository.workspacePath ? [repository.workspacePath] : [repository.path]);
+        for (const workspace of workspaces) {
+            if (!workspace || !node_fs_1.default.existsSync(workspace))
+                continue;
+            const member = { ...repository, path: workspace };
+            const node = nodeSuggestions(member);
+            const checks = node.length ? node : otherSuggestions(member);
+            const cwd = node_path_1.default.relative(repository.path, workspace).split(node_path_1.default.sep).join('/');
+            out.push(...checks.map(check => cwd ? { ...check, cwd, reason: `${cwd}: ${check.reason}` } : check));
+        }
     }
     return out;
 }

package/server/dist/modules/builder/runtime/milestone-chain.js

@@ -4,14 +4,11 @@
 // "Launch Milestone N": order the milestone's todo specs by their declared
 // dependencies (prerequisites, then execution_order), put ONE spec on each
 // rail (mode `implement`), launch the first through the ORDINARY rails launch
-// route, and — when that spec's delivery settles — launch the next one STACKED
-// on the delivered branch, so a greenfield walking skeleton accumulates without
-// waiting for a merge. Launches are always sequential (the Parallel option was
-// removed); auto-continue is on by default and a failure always pauses. The plan lives in SQLite (survives window close, app
-// restart, machine sleep), advances from the delivery-settle chokepoint (the
-// `rail.pr_state` broadcast tapped in the project's bound broadcast — the
-// engine's `onLoopRunFinished` fires BEFORE the delivery row leaves
-// `building`, so it is only a fallback for delivery-less shared-cwd runs),
+// route, and integrate each completed delivery through the guarded local decision
+// path BEFORE allocating the next worktree from the integration branch. Older
+// adapters without integration retain their historical stacking behavior.
+// Launches are sequential; auto-continue is on by default. The plan lives in
+// SQLite and retains the current delivery through integration and recovery.
 // pauses with a typed reason on any failure (never skips ahead), and is
 // visible/controllable (resume / cancel) from every surface.
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -77,6 +74,7 @@ class MilestoneChainManager {
     db;
     projectId;
     io;
+    integrating = new Set();
     constructor(db, projectId, io) {
         this.db = db;
         this.projectId = projectId;
@@ -218,7 +216,7 @@ class MilestoneChainManager {
     }
     /**
      * Launch a milestone. Always sequential: one spec per rail, each stacked on
-     * the previous delivered branch. `autoAdvance` defaults to ON; turning it off
+     * the accumulated integration branch when integration is bound. `autoAdvance` defaults to ON; turning it off
      * parks the chain at a checkpoint after every delivered rail.
      */
     async start(n, opts = {}) {
@@ -308,7 +306,7 @@ class MilestoneChainManager {
             return;
         }
         const earlierDeliveries = (0, milestone_chain_store_1.parseLaunched)(row).filter((entry) => entry.chunk <= chunkIndex && entry.deliveryId).map((entry) => entry.deliveryId);
-        const multiRepositoryHistory = earlierDeliveries.some((id) => this.io.getDelivery(id)?.executionManifest);
+        const multiRepositoryHistory = !this.io.integrateDelivery && earlierDeliveries.some((id) => this.io.getDelivery(id)?.executionManifest);
         if (!multiRepositoryHistory && head && !(await this.branchExistsSafe(head))) {
             this.pause(row, 'head_missing', { headBranch: head });
             return;
@@ -371,6 +369,56 @@ class MilestoneChainManager {
             return 'chunk_stopped';
         return 'chunk_failed';
     }
+    completeIntegrated(row) {
+        if (!row.current_delivery_id || !(0, milestone_chain_store_1.isActiveChainStatus)(row.status))
+            return;
+        (0, milestone_chain_store_1.updateChain)(this.db, row.id, row.status, { status: 'waiting', currentDeliveryId: null, currentRunIds: [], headBranch: row.integration_branch, pauseReason: 'integration_complete' }, this.now());
+        this.afterChunkSuccess(row.id, row.integration_branch);
+    }
+    /** Keep the delivery attached until its guarded integration is durably confirmed. */
+    async integrateChunk(chainId) {
+        if (!this.io.integrateDelivery || this.integrating.has(chainId))
+            return;
+        const row = (0, milestone_chain_store_1.getChain)(this.db, chainId);
+        if (!row?.current_delivery_id || !(0, milestone_chain_store_1.isActiveChainStatus)(row.status))
+            return;
+        const snap = this.io.getDelivery(row.current_delivery_id);
+        if (!snap) {
+            this.pause(row, 'integration_failed:delivery_missing');
+            return;
+        }
+        if (snap.implementationOutcome === 'partially_succeeded' || snap.implementationOutcome === 'failed') {
+            this.pauseFailedChunk(row, 'chunk_failed');
+            return;
+        }
+        if (snap.decision === 'merged' || snap.decision === 'completed') {
+            this.completeIntegrated(row);
+            return;
+        }
+        this.integrating.add(chainId);
+        (0, milestone_chain_store_1.updateChain)(this.db, row.id, row.status, { status: 'waiting', pauseReason: 'integration_pending' }, this.now());
+        const pending = (0, milestone_chain_store_1.getChain)(this.db, chainId);
+        this.emit(pending);
+        try {
+            const result = await this.io.integrateDelivery(snap);
+            const current = (0, milestone_chain_store_1.getChain)(this.db, chainId);
+            if (!current || !(0, milestone_chain_store_1.isActiveChainStatus)(current.status) || current.current_delivery_id !== snap.id)
+                return;
+            const settled = this.io.getDelivery(snap.id);
+            if (settled?.decision === 'merged' || settled?.decision === 'completed')
+                this.completeIntegrated(current);
+            else
+                this.pause(current, 'integration_failed:' + (result.ok ? 'not_confirmed' : result.error));
+        }
+        catch {
+            const current = (0, milestone_chain_store_1.getChain)(this.db, chainId);
+            if (current && (0, milestone_chain_store_1.isActiveChainStatus)(current.status) && current.current_delivery_id === snap.id)
+                this.pause(current, 'integration_failed:unavailable');
+        }
+        finally {
+            this.integrating.delete(chainId);
+        }
+    }
     /** The delivery-settle chokepoint: a `rail.pr_state` for the in-flight chunk. */
     handleDeliveryState(snap) {
         for (const row of (0, milestone_chain_store_1.listActiveChains)(this.db)) {
@@ -378,6 +426,13 @@ class MilestoneChainManager {
                 continue;
             if (snap.decision === 'building')
                 continue;
+            if (this.io.integrateDelivery && SUCCESS_DECISIONS.has(snap.decision)) {
+                if (row.status === 'running' || row.status === 'waiting' && row.pause_reason === 'integration_pending')
+                    void this.integrateChunk(row.id);
+                else if (row.pause_reason?.startsWith('integration_') && ['merged', 'completed'].includes(snap.decision))
+                    this.completeIntegrated(row);
+                continue;
+            }
             if (SUCCESS_DECISIONS.has(snap.decision)) {
                 const delivered = snap.executionManifest ? null : snap.decision === 'no_changes'
                     ? row.head_branch
@@ -457,6 +512,10 @@ class MilestoneChainManager {
             return { ok: false, status: 404, error: 'chain_not_found' };
         if (row.status !== 'paused' && row.status !== 'awaiting_approval')
             return { ok: false, status: 409, error: 'chain_not_paused', detail: `chain is ${row.status}` };
+        if (this.io.integrateDelivery && row.current_delivery_id && row.pause_reason?.startsWith('integration_')) {
+            await this.integrateChunk(id);
+            return { ok: true, status: 202, chain: (0, milestone_chain_store_1.toChainSnapshot)((0, milestone_chain_store_1.getChain)(this.db, id)) };
+        }
         if (row.head_branch && !(await this.branchExistsSafe(row.head_branch))) {
             (0, milestone_chain_store_1.updateChain)(this.db, row.id, row.status, { status: 'paused', pauseReason: 'head_missing' }, this.now());
             const fresh = (0, milestone_chain_store_1.getChain)(this.db, row.id);
@@ -503,6 +562,13 @@ class MilestoneChainManager {
      */
     async recoverOnStartup() {
         for (const row of (0, milestone_chain_store_1.listActiveChains)(this.db)) {
+            if (this.io.integrateDelivery && row.status === 'waiting' && row.pause_reason?.startsWith('integration_')) {
+                if (row.current_delivery_id)
+                    await this.integrateChunk(row.id);
+                else if (row.pause_reason === 'integration_complete')
+                    this.afterChunkSuccess(row.id, row.integration_branch);
+                continue;
+            }
             if (row.status !== 'running')
                 continue;
             if (row.current_delivery_id) {

package/server/dist/modules/delivery/runtime/delivery-evidence.js

@@ -475,7 +475,7 @@ function projectDefinitionRuntimeEvidence(status, reviewerStepId) {
         if (!['succeeded', 'failed'].includes(scope.status) || !scope.attemptId || !isRecord(scope.output))
             continue;
         const output = scope.output;
-        if (scope.kind === 'verify' && typeof output.receiptId === 'string' && Array.isArray(output.commands)) {
+        if ((scope.kind === 'verify' || scope.kind === 'implementation-step' && output.phase === 'verify') && typeof output.receiptId === 'string' && Array.isArray(output.commands)) {
             for (const raw of output.commands) {
                 if (commands.length >= RUNTIME_LIST_CAP)
                     break;
@@ -487,7 +487,8 @@ function projectDefinitionRuntimeEvidence(status, reviewerStepId) {
             }
         }
         const review = scope.status !== 'succeeded' ? null : scope.kind === 'implementation' ? parseRuntimeReview(output.review)
-            : reviewerStepId === scope.nodePath && scope.kind === 'role-turn' ? parseRuntimeReview(output.structured ?? output) : null;
+            : scope.kind === 'implementation-step' && output.phase === 'reviewer' ? parseRuntimeReview(output)
+                : reviewerStepId === scope.nodePath && scope.kind === 'role-turn' ? parseRuntimeReview(output.structured ?? output) : null;
         if (review)
             scopedReviews.push({ nodePath: scope.nodePath, scopeId: scope.scopeId, attemptId: scope.attemptId, review });
     }

package/server/dist/modules/delivery/runtime/multi-repo-execution.js

@@ -389,6 +389,9 @@ async function launchMultiRepositoryRail(input, io = {}) {
                 if (head.code !== 0 || !/^[a-f0-9]{40,64}$/i.test(head.stdout.trim()))
                     throw new Error(`Cannot freeze HEAD for ${repository.name}`);
                 manifest.repositories.push({ repositoryId: repository.id, name: repository.name, sourcePath: repository.path,
+                    ...(repository.workspacePath ? { workspacePath: repository.workspacePath } : {}),
+                    ...(repository.workspacePaths ? { workspacePaths: [...repository.workspacePaths] } : {}),
+                    ...((input.workspaceSelection?.[repository.id] ?? previousRepository?.selectedWorkspacePaths) ? { selectedWorkspacePaths: [...(input.workspaceSelection?.[repository.id] ?? previousRepository.selectedWorkspacePaths)] } : {}),
                     gitCommonDir: (0, repo_lock_1.repositoryLockKey)(repository.path), baseBranch: child.base_branch, integrationBranch: integrationBranches.get(repository.id) ?? previousRepository?.integrationBranch ?? child.base_branch, baseSha: head.stdout.trim(),
                     worktreePath: worktree.worktree_path, branch: worktree.branch, worktreeId: worktree.id });
             }

package/server/dist/modules/delivery/runtime/rail-isolated-launch.js

@@ -1275,6 +1275,7 @@ async function launchIsolatedRail(input, io = {}) {
             runId: a.runId, loopId, loopName, graph: loopGraph, projectId: ctx.project.id,
             cwd: a.handle.worktreePath, repoDir: a.handle.worktreePath,
             repositoryId: singleRepositoryId,
+            workspacePaths: singleRepositoryId ? input.workspaceSelection?.[singleRepositoryId] : undefined,
             isolation: { branch: a.handle.branch, worktreePath: a.handle.worktreePath },
             railIndex, ticketId: a.ticketIds.length ? a.ticketId : null,
             spec: {

package/server/dist/modules/delivery/runtime/rail-launch-parser.js

@@ -75,6 +75,12 @@ function coerceRailLaunchProposal(value) {
     const mode = modeRaw === 'batch' || modeRaw === 'batch-implement' ? 'implement' : modeRaw;
     if (!exports.RAIL_LAUNCH_MODES.includes(mode))
         return { ok: false, reason: 'invalid_mode' };
+    const repositoryIds = value.repositoryIds;
+    const workspaceSelection = value.workspaceSelection;
+    if (repositoryIds !== undefined && (!Array.isArray(repositoryIds) || !repositoryIds.length || repositoryIds.length > 50 || repositoryIds.some(id => typeof id !== 'string' || !id.trim()) || new Set(repositoryIds).size !== repositoryIds.length))
+        return { ok: false, reason: 'invalid_workspace_selection' };
+    if (workspaceSelection !== undefined && (!isRecord(workspaceSelection) || !Object.keys(workspaceSelection).length || Object.keys(workspaceSelection).length > 50 || Object.entries(workspaceSelection).some(([id, paths]) => !id.trim() || !Array.isArray(paths) || !paths.length || paths.length > 50 || paths.some(item => typeof item !== 'string' || !item.trim() || item.length > 4096) || new Set(paths).size !== paths.length)))
+        return { ok: false, reason: 'invalid_workspace_selection' };
     const newRailRaw = value.newRail;
     const newRail = newRailRaw === true
         ? { name: null }
@@ -89,6 +95,8 @@ function coerceRailLaunchProposal(value) {
             railIndex,
             newRail,
             ticketIds,
+            ...(repositoryIds !== undefined ? { repositoryIds: repositoryIds } : {}),
+            ...(workspaceSelection !== undefined ? { workspaceSelection: workspaceSelection } : {}),
             mode: mode,
             loopId: optString(value.loopId, 120),
             aiEngine: optString(value.aiEngine ?? value.provider ?? value.engine, 80),