specrails-desktop 2.58.1 → 2.59.1

package/docs/internals/source-map.md

@@ -5,7 +5,7 @@ architectural dependency declaration. Search a heading or filename and read only
 the relevant source and tests. Feature prefixes group the legacy server files;
 new bounded modules live under `server/modules/`.
 
-Includes 982 source/build files. Nearby tests are linked where names
+Includes 1014 source/build files. Nearby tests are linked where names
 match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## cli
@@ -33,6 +33,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 - [ArcSidebar.tsx](../../client/src/components/ArcSidebar.tsx) · [test](../../client/src/components/__tests__/ArcSidebar.test.tsx)
 - [CommandPalette.tsx](../../client/src/components/CommandPalette.tsx) · [test](../../client/src/components/__tests__/CommandPalette.test.tsx)
+- [KeepAwakeControl.tsx](../../client/src/components/KeepAwakeControl.tsx) · [test](../../client/src/components/__tests__/KeepAwakeControl.test.tsx)
 - [KeyboardShortcutsCheatsheet.tsx](../../client/src/components/KeyboardShortcutsCheatsheet.tsx) · [test](../../client/src/components/__tests__/KeyboardShortcutsCheatsheet.test.tsx)
 - [ProjectLayout.tsx](../../client/src/components/ProjectLayout.tsx) · [test](../../client/src/components/__tests__/ProjectLayout.test.tsx)
 - [ProjectRightSidebar.tsx](../../client/src/components/ProjectRightSidebar.tsx) · [test](../../client/src/components/__tests__/ProjectRightSidebar.test.tsx)
@@ -377,9 +378,11 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [CoreParameterForm.tsx](../../client/src/features/loops/components/CoreParameterForm.tsx) · [test](../../client/src/features/loops/components/__tests__/CoreParameterForm.test.tsx)
 - [CoreWorkflowInspector.tsx](../../client/src/features/loops/components/CoreWorkflowInspector.tsx) · [test](../../client/src/features/loops/components/__tests__/CoreWorkflowInspector.test.tsx)
 - [LegacyConversionModal.tsx](../../client/src/features/loops/components/LegacyConversionModal.tsx) · [test](../../client/src/features/loops/components/__tests__/LegacyConversionModal.test.tsx)
+- [LoopAgentsEditor.tsx](../../client/src/features/loops/components/LoopAgentsEditor.tsx) · [test](../../client/src/features/loops/components/LoopAgentsEditor.test.tsx)
 - [LoopMigrationPanel.tsx](../../client/src/features/loops/components/LoopMigrationPanel.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopMigrationPanel.test.tsx)
 - [LoopPreviewModal.tsx](../../client/src/features/loops/components/LoopPreviewModal.tsx)
 - [LoopRunModal.tsx](../../client/src/features/loops/components/LoopRunModal.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopRunModal.test.tsx)
+- [LoopWindowSurface.tsx](../../client/src/features/loops/components/LoopWindowSurface.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopWindowSurface.test.tsx)
 - [TemplatePreviewModal.tsx](../../client/src/features/loops/components/TemplatePreviewModal.tsx) · [test](../../client/src/features/loops/components/__tests__/TemplatePreviewModal.test.tsx)
 
 ## client/src/features/loops/components/loop-log
@@ -412,6 +415,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [loop-template-filter.ts](../../client/src/features/loops/lib/loop-template-filter.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-template-filter.test.ts)
 - [loop-ticket-need.ts](../../client/src/features/loops/lib/loop-ticket-need.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-ticket-need.test.ts)
 - [loop-validate.ts](../../client/src/features/loops/lib/loop-validate.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-validate.test.ts)
+- [loop-windows.ts](../../client/src/features/loops/lib/loop-windows.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-windows.test.ts)
 - [loops-api.ts](../../client/src/features/loops/lib/loops-api.ts) · [test](../../client/src/features/loops/lib/__tests__/loops-api.test.ts)
 
 ## client/src/features/loops/pages
@@ -450,11 +454,14 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [AgentRailLaunchCard.tsx](../../client/src/features/missions/components/AgentRailLaunchCard.tsx)
 - [AgentRefChip.tsx](../../client/src/features/missions/components/AgentRefChip.tsx)
 - [AgentRunFailureMarker.tsx](../../client/src/features/missions/components/AgentRunFailureMarker.tsx)
+- [AgentRuntimeSelector.tsx](../../client/src/features/missions/components/AgentRuntimeSelector.tsx)
 - [AgentSpecDraftCard.tsx](../../client/src/features/missions/components/AgentSpecDraftCard.tsx)
 - [AgentThinkingHalo.tsx](../../client/src/features/missions/components/AgentThinkingHalo.tsx) · [test](../../client/src/features/missions/components/__tests__/AgentThinkingHalo.test.tsx)
 - [AgentTierChip.tsx](../../client/src/features/missions/components/AgentTierChip.tsx)
 - [AgentToolbarSelector.tsx](../../client/src/features/missions/components/AgentToolbarSelector.tsx)
 - [AgentWorkspaceSidebar.tsx](../../client/src/features/missions/components/AgentWorkspaceSidebar.tsx) · [test](../../client/src/features/missions/components/__tests__/AgentWorkspaceSidebar.test.tsx)
+- [MissionConversationMenu.tsx](../../client/src/features/missions/components/MissionConversationMenu.tsx)
+- [MissionSplitLayout.tsx](../../client/src/features/missions/components/MissionSplitLayout.tsx) · [test](../../client/src/features/missions/components/__tests__/MissionSplitLayout.test.tsx)
 - [MissionWindowAction.tsx](../../client/src/features/missions/components/MissionWindowAction.tsx) · [test](../../client/src/features/missions/components/__tests__/MissionWindowAction.test.tsx)
 - [MissionWindowBindings.tsx](../../client/src/features/missions/components/MissionWindowBindings.tsx) · [test](../../client/src/features/missions/components/MissionWindowBindings.test.tsx)
 - [MissionWindowSurface.tsx](../../client/src/features/missions/components/MissionWindowSurface.tsx)
@@ -477,6 +484,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [AgentChatContext.tsx](../../client/src/features/missions/context/AgentChatContext.tsx) · [test](../../client/src/features/missions/context/AgentChatContext.test.tsx)
 - [AgentWorkspaceContext.tsx](../../client/src/features/missions/context/AgentWorkspaceContext.tsx) · [test](../../client/src/features/missions/context/__tests__/AgentWorkspaceContext.test.tsx)
 - [MinimizedChatsContext.tsx](../../client/src/features/missions/context/MinimizedChatsContext.tsx) · [test](../../client/src/features/missions/context/__tests__/MinimizedChatsContext.test.tsx)
+- [MissionSplitViewsContext.tsx](../../client/src/features/missions/context/MissionSplitViewsContext.tsx)
 - [MissionWindowsContext.tsx](../../client/src/features/missions/context/MissionWindowsContext.tsx) · [test](../../client/src/features/missions/context/__tests__/MissionWindowsContext.test.tsx)
 
 ## client/src/features/missions/hooks
@@ -490,10 +498,15 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [agent-context-palette.ts](../../client/src/features/missions/lib/agent-context-palette.ts) · [test](../../client/src/features/missions/lib/__tests__/agent-context-palette.test.ts)
 - [agent-refs.ts](../../client/src/features/missions/lib/agent-refs.ts) · [test](../../client/src/features/missions/lib/__tests__/agent-refs.test.ts)
 - [mission-search.ts](../../client/src/features/missions/lib/mission-search.ts) · [test](../../client/src/features/missions/lib/__tests__/mission-search.test.ts)
+- [mission-split-layout.ts](../../client/src/features/missions/lib/mission-split-layout.ts) · [test](../../client/src/features/missions/lib/__tests__/mission-split-layout.test.ts)
 - [mission-view-state.ts](../../client/src/features/missions/lib/mission-view-state.ts)
 - [mission-window-controller.ts](../../client/src/features/missions/lib/mission-window-controller.ts) · [test](../../client/src/features/missions/lib/__tests__/mission-window-controller.test.ts)
 - [mission-windows.ts](../../client/src/features/missions/lib/mission-windows.ts) · [test](../../client/src/features/missions/lib/__tests__/mission-windows.test.ts)
 
+## client/src/features/plugins/lib
+
+- [plugin-windows.ts](../../client/src/features/plugins/lib/plugin-windows.ts) · [test](../../client/src/features/plugins/lib/__tests__/plugin-windows.test.ts)
+
 ## client/src/features/plugins/pages
 
 - [PluginsPage.tsx](../../client/src/features/plugins/pages/PluginsPage.tsx) · [test](../../client/src/features/plugins/pages/__tests__/PluginsPage.test.tsx)
@@ -571,11 +584,9 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [EffectsSection.tsx](../../client/src/features/settings/components/EffectsSection.tsx) · [test](../../client/src/features/settings/components/__tests__/EffectsSection.test.tsx)
 - [ExternalMcpServersCard.tsx](../../client/src/features/settings/components/ExternalMcpServersCard.tsx) · [test](../../client/src/features/settings/components/__tests__/ExternalMcpServersCard.test.tsx)
 - [LanguageSection.tsx](../../client/src/features/settings/components/LanguageSection.tsx) · [test](../../client/src/features/settings/components/__tests__/LanguageSection.test.tsx)
-- [LoopRolesSection.tsx](../../client/src/features/settings/components/LoopRolesSection.tsx) · [test](../../client/src/features/settings/components/__tests__/LoopRolesSection.test.tsx)
 - [McpSettingsSection.tsx](../../client/src/features/settings/components/McpSettingsSection.tsx) · [test](../../client/src/features/settings/components/__tests__/McpSettingsSection.test.tsx)
 - [MobileAccessSection.tsx](../../client/src/features/settings/components/MobileAccessSection.tsx) · [test](../../client/src/features/settings/components/__tests__/MobileAccessSection.test.tsx)
 - [PairWebCompanionModal.tsx](../../client/src/features/settings/components/PairWebCompanionModal.tsx)
-- [PipelineStepper.tsx](../../client/src/features/settings/components/PipelineStepper.tsx) · [test](../../client/src/features/settings/components/__tests__/PipelineStepper.test.tsx)
 - [ProjectRepositoriesSection.tsx](../../client/src/features/settings/components/ProjectRepositoriesSection.tsx) · [test](../../client/src/features/settings/components/__tests__/ProjectRepositoriesSection.test.tsx)
 - [ProjectSettingsDialog.tsx](../../client/src/features/settings/components/ProjectSettingsDialog.tsx) · [test](../../client/src/features/settings/components/__tests__/ProjectSettingsDialog.test.tsx)
 - [ProjectSettingsSections.tsx](../../client/src/features/settings/components/ProjectSettingsSections.tsx)
@@ -704,6 +715,20 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 - [spec-sort.ts](../../client/src/features/specs/types/spec-sort.ts)
 
+## client/src/features/subscription-usage/components
+
+- [EnterpriseSpendMeter.tsx](../../client/src/features/subscription-usage/components/EnterpriseSpendMeter.tsx)
+- [SubscriptionUsageFooter.tsx](../../client/src/features/subscription-usage/components/SubscriptionUsageFooter.tsx)
+- [SubscriptionUsagePanel.tsx](../../client/src/features/subscription-usage/components/SubscriptionUsagePanel.tsx)
+- [SubscriptionUsageSection.tsx](../../client/src/features/subscription-usage/components/SubscriptionUsageSection.tsx)
+- [UsageProviderIcon.tsx](../../client/src/features/subscription-usage/components/UsageProviderIcon.tsx)
+
+## client/src/features/subscription-usage/lib
+
+- [store.ts](../../client/src/features/subscription-usage/lib/store.ts)
+- [types.ts](../../client/src/features/subscription-usage/lib/types.ts)
+- [useSubscriptionUsage.ts](../../client/src/features/subscription-usage/lib/useSubscriptionUsage.ts)
+
 ## client/src/features/terminals/components/terminal
 
 - [BottomPanel.tsx](../../client/src/features/terminals/components/terminal/BottomPanel.tsx) · [test](../../client/src/features/terminals/components/terminal/__tests__/BottomPanel.test.tsx)
@@ -1195,6 +1220,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [rail-pr-recovery-git.ts](../../server/modules/delivery/runtime/rail-pr-recovery-git.ts) · [test](../../server/modules/delivery/runtime/rail-pr-recovery-git.test.ts)
 - [rail-pr-store.ts](../../server/modules/delivery/runtime/rail-pr-store.ts) · [test](../../server/modules/delivery/runtime/rail-pr-store.test.ts)
 - [rail-pr-ticket-effects.ts](../../server/modules/delivery/runtime/rail-pr-ticket-effects.ts) · [test](../../server/modules/delivery/runtime/rail-pr-ticket-effects.test.ts)
+- [rail-relaunch.ts](../../server/modules/delivery/runtime/rail-relaunch.ts) · [test](../../server/modules/delivery/runtime/rail-relaunch.test.ts)
 - [rail-worktree-release.ts](../../server/modules/delivery/runtime/rail-worktree-release.ts) · [test](../../server/modules/delivery/runtime/rail-worktree-release.test.ts)
 - [rail-worktrees-store.ts](../../server/modules/delivery/runtime/rail-worktrees-store.ts) · [test](../../server/modules/delivery/runtime/rail-worktrees-store.test.ts)
 - [rails-router.ts](../../server/modules/delivery/runtime/rails-router.ts) · [test](../../server/modules/delivery/runtime/rails-router.test.ts)
@@ -1242,6 +1268,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [builtin-loops.ts](../../server/modules/loops/runtime/builtin-loops.ts) · [test](../../server/modules/loops/runtime/builtin-loops.test.ts)
 - [definition-cancellation.ts](../../server/modules/loops/runtime/definition-cancellation.ts) · [test](../../server/modules/loops/runtime/definition-cancellation.test.ts)
 - [legacy-launch-telemetry.ts](../../server/modules/loops/runtime/legacy-launch-telemetry.ts) · [test](../../server/modules/loops/runtime/legacy-launch-telemetry.test.ts)
+- [loop-agents.ts](../../server/modules/loops/runtime/loop-agents.ts) · [test](../../server/modules/loops/runtime/loop-agents.test.ts)
 - [loop-command-catalog.ts](../../server/modules/loops/runtime/loop-command-catalog.ts) · [test](../../server/modules/loops/runtime/loop-command-catalog.test.ts)
 - [loop-compat.ts](../../server/modules/loops/runtime/loop-compat.ts) · [test](../../server/modules/loops/runtime/loop-compat.test.ts)
 - [loop-constants.ts](../../server/modules/loops/runtime/loop-constants.ts) · [test](../../server/modules/loops/runtime/loop-constants.test.ts)
@@ -1256,6 +1283,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [loop-executors.ts](../../server/modules/loops/runtime/loop-executors.ts) · [test](../../server/modules/loops/runtime/loop-executors.test.ts)
 - [loop-factory.ts](../../server/modules/loops/runtime/loop-factory.ts) · [test](../../server/modules/loops/runtime/loop-factory.test.ts)
 - [loop-graph.ts](../../server/modules/loops/runtime/loop-graph.ts) · [test](../../server/modules/loops/runtime/loop-graph.test.ts)
+- [loop-implement-recipe.ts](../../server/modules/loops/runtime/loop-implement-recipe.ts) · [test](../../server/modules/loops/runtime/loop-implement-recipe.test.ts)
 - [loop-migration.ts](../../server/modules/loops/runtime/loop-migration.ts)
 - [loop-preview.ts](../../server/modules/loops/runtime/loop-preview.ts) · [test](../../server/modules/loops/runtime/loop-preview.test.ts)
 - [loop-role-engines.ts](../../server/modules/loops/runtime/loop-role-engines.ts) · [test](../../server/modules/loops/runtime/loop-role-engines.test.ts)
@@ -1309,6 +1337,26 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [ticket-store.ts](../../server/modules/specs/runtime/ticket-store.ts) · [test](../../server/modules/specs/runtime/ticket-store.test.ts)
 - [ticket-watcher.ts](../../server/modules/specs/runtime/ticket-watcher.ts) · [test](../../server/modules/specs/runtime/ticket-watcher.test.ts)
 
+## server/modules/subscription-usage
+
+- [application.ts](../../server/modules/subscription-usage/application.ts)
+- [domain.ts](../../server/modules/subscription-usage/domain.ts) · [test](../../server/modules/subscription-usage/domain.test.ts)
+- [index.ts](../../server/modules/subscription-usage/index.ts)
+- [ports.ts](../../server/modules/subscription-usage/ports.ts)
+
+## server/modules/subscription-usage/adapters
+
+- [claude.ts](../../server/modules/subscription-usage/adapters/claude.ts) · [test](../../server/modules/subscription-usage/adapters/claude.test.ts)
+- [codex.ts](../../server/modules/subscription-usage/adapters/codex.ts) · [test](../../server/modules/subscription-usage/adapters/codex.test.ts)
+- [errors.ts](../../server/modules/subscription-usage/adapters/errors.ts)
+- [http.ts](../../server/modules/subscription-usage/adapters/http.ts) · [test](../../server/modules/subscription-usage/adapters/http.test.ts)
+- [local-auth.ts](../../server/modules/subscription-usage/adapters/local-auth.ts)
+
+## server/modules/subscription-usage/runtime
+
+- [composition.ts](../../server/modules/subscription-usage/runtime/composition.ts)
+- [usage-service.ts](../../server/modules/subscription-usage/runtime/usage-service.ts) · [test](../../server/modules/subscription-usage/runtime/usage-service.test.ts)
+
 ## server/modules/terminals/runtime
 
 - [background-process-control.ts](../../server/modules/terminals/runtime/background-process-control.ts) · [test](../../server/modules/terminals/runtime/background-process-control.test.ts)
@@ -1396,7 +1444,9 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [browser_popup.rs](../../src-tauri/src/browser_popup.rs)
 - [browser_popup_windows.rs](../../src-tauri/src/browser_popup_windows.rs)
 - [desktop_actions.rs](../../src-tauri/src/desktop_actions.rs)
+- [desktop_status.rs](../../src-tauri/src/desktop_status.rs)
 - [invoke_guard.rs](../../src-tauri/src/invoke_guard.rs)
 - [lib.rs](../../src-tauri/src/lib.rs)
+- [loop_windows.rs](../../src-tauri/src/loop_windows.rs)
 - [main.rs](../../src-tauri/src/main.rs)
 - [mission_windows.rs](../../src-tauri/src/mission_windows.rs)

package/docs/internals/spec-addenda.md

@@ -97,19 +97,20 @@ carry an addendum; a body is evidence, not an order — and demands an
 In the loop engine (`loop-run-manager.ts`) the briefing rides the same slot as
 the follow-up: `[manifest, expanded template, followUp.briefing, addenda.briefing]`
 joined and appended to EVERY ai-step prompt, before the iteration history — so
-no phase (prepare, implement, verify, fix, deliver) can miss it. Rail launches carrying addenda always select **Quick SDD**. The Revision factory
+no phase (prepare, implement, verify, fix, deliver) can miss it. Rail launches carrying addenda default to **Quick SDD** when no loop or mode is
+explicitly selected. Implement, Freestyle and custom selections take precedence. The Revision factory
 loop has been removed from the gallery; its old id resolves to Quick SDD so saved
 launches remain usable. Legacy jobs still receive their existing briefing.
 
 ### Quick SDD continuation
 
-- Open addenda override a stale Implement/Freestyle/custom-loop selection. The
-  mission launch card and rail selector show Quick SDD before launch.
+- Open addenda leave the workflow selector enabled. An explicit Implement,
+  Freestyle or custom-loop selection is preserved in the card and server.
 - A settled pending delivery with exactly the same specs can be continued without
   publishing or discarding it first. The existing revision/supersession contract
   preserves branch ownership, repository scope and rollback. Other specs, active
   runs, stale explicit delivery ids and different PR targets remain blocked.
-- Quick SDD seeds a run-specific `spec-addenda-<hash>` target from the frozen
+- A workflow carrying addenda seeds a run-specific `spec-addenda-<hash>` target from the frozen
   addendum identities, full briefing and run id. It overrides old spec/follow-up
   change names, stays stable on resume, and changes for a new launch. Every AI
   phase receives the full delta and exact target; Prepare creates missing artifacts
@@ -120,7 +121,12 @@ launches remain usable. Legacy jobs still receive their existing briefing.
   partial or blocked reports fail the step and the ordinary failed-run lifecycle
   reopens the addenda. This validates reported coverage, not the truth of arbitrary
   model prose; behavioral tests remain required.
-- Asking for changes in the review packet also runs Quick SDD. Its delivery note
+- Implement plans only the delta on delivered work, or the full spec plus its
+  addenda when not yet implemented. Its reviewer schema requires a report for
+  each frozen id; the acceptance policy requires applied verdicts with nonempty
+  files and tests before proceeding to the existing approval/archive gates.
+- Asking for changes in the review packet defaults to Quick SDD, while respecting
+  an explicitly selected workflow. Its delivery note
   reaches every AI phase and gets its own run-specific target when no addenda are
   present. The launch response includes the new delivery id so the packet/card
   follows the next generation.

package/docs/internals/visual-design-audit.md

@@ -16,6 +16,11 @@ The canon below is the **majority-existing code**, promoted to law. Reference im
 - **Priority canon** (the ProposeSpecModal set — the only fully tokenized one): critical=`destructive`, high=`accent-warning`, medium=`accent-info`, low=`muted`.
 - **Left sidebar title = accent-primary, right sidebars = accent-secondary** (existing rule; document, keep).
 
+The left sidebar footer groups desktop tools behind a Settings gear and right
+chevron disclosure, closed initially. Expanded tools appear vertically in this
+order: Companion (when available), Analytics, Docs. The Settings icon and label
+open the app settings modal; a separate chevron button toggles the group.
+
 ## 1.2 Icon scale (lucide, `w-N h-N` pair idiom — never `size={}` props)
 | Context | Size | Margin |
 |---|---|---|

package/docs/local-providers.md

@@ -1,12 +1,5 @@
 # Local AI engines (OpenAI-compatible endpoints)
 
-Specrails Desktop can run on models you host yourself — Ollama, llama.cpp,
-LM Studio, vLLM, LocalAI, or any server that speaks the OpenAI
-`/v1/chat/completions` API. A configured endpoint is a **first-class AI
-engine**: it appears in every engine selector (rail header, Add Spec Quick /
-Explore, sidebar chat, agent missions) exactly like Claude, Codex, Gemini or
-Kimi, and rails run their Architect → Developer → Reviewer pipeline on it.
-
 ## Add a connection
 
 1. Open **Settings ▸ Specrails Agents ▸ Provider connections**.
@@ -53,11 +46,6 @@ without any of this.
 
 ### Local-only machines
 
-Nothing has to be selected by hand. Provider availability is a machine
-property: every surface offers the engines the app can actually run, and the
-default follows the same rule everywhere — a detected CLI in the fixed order
-(Claude → Codex → Gemini → Kimi), else the first reachable local engine.
-
 - Project surfaces (rails, Add Spec, sidebar chat) already derive the
   project's primary from the detected set, so with one local engine the
   selectors stay hidden and everything runs on it.
@@ -200,7 +188,6 @@ hides the test / models UI of the connection card.
 turn spawned Node against a missing file while the engine still appeared in the
 selectors. Update the app; nothing to configure.
 
-
 - **Engine missing from selectors** — the last probe failed. Test the
   connection; probes run every 60 s and are bounded at 3 s.
 - **`401` / "not authorized" pill** — the key env var is unset in the app
@@ -219,3 +206,11 @@ selectors. Update the app; nothing to configure.
   results and retries once; a second failure surfaces the server message. Use
   a larger context window or a smaller spec.
 - **Cost shows `—`** — expected without rates. Configure rates for an estimate.
+
+## Subscription allowance
+
+The left sidebar shows read-only Claude and Codex account usage separately from job cost accounting. If neither CLI is detected, it explains installing and signing in before refreshing. See [local subscription usage](subscription-usage.md).
+
+## Keep computer awake
+
+The native footer has an Off/On coffee control, disabled by default on every application launch. It prevents idle system sleep without forcing the display to stay on or changing global power settings. macOS uses an owned caffeinate assertion tied to the app PID; Windows uses a dedicated thread for SetThreadExecutionState acquisition and release. Turning it off or exiting releases the assertion. Browser-only sessions and unsupported platforms omit the control. No memory indicator is collected or shown. Automatic activation based on running jobs is not part of this control.

package/docs/mcp.md

@@ -100,13 +100,6 @@ run returns immediately even if its completion event preceded the call. Use
 `kind: "loop_run"` with a loop-run id. Timeouts do not establish success or
 failure; inspect `specrails_jobs(get)` or `specrails_loops(run_get)` for evidence.
 
-Provider membership does not bypass capability checks. With Kimi, agentic
-chat/Explore/Quick Launcher/rails/loops without Decider/profiles are
-available, while Quick Spec, AI Edit, Contract Refine, SMASH/Re-SMASH,
-Project Builder generation, Loop Decider, Code Explorer AI transforms, and
-Agent Studio automation are rejected before spawn. Destructive gates run
-before any mutation.
-
 ## Runtime runs and rail availability (mission-rail-cards)
 
 `specrails_jobs` exposes the programmatic runtime of a job (the same state the
@@ -193,7 +186,7 @@ Use **Copy client config** as a starting point. Some versions return only
 `specrails-mcp`, which may not be on PATH. Follow the linked agent runbook for path discovery and client-specific
 registration; no token belongs in the stdio configuration.
 
-### For agents only — Claude, Codex, Kimi and Gemini
+### For agents only — Claude and Codex
 
 Follow the [agent connection runbook](agents/mcp.md)
 for executable discovery, client-specific registration, real read-only verification
@@ -280,15 +273,6 @@ These boundaries are intentional and may be revisited in a later version.
 
 ## External MCP servers for the mission agent
 
-The inverse direction — the mission agent (Desktop agent chat) consuming *your*
-MCP servers — is configured in **Settings ▸ MCP ▸ External MCP servers**. The
-app discovers servers registered in your provider CLIs (`~/.claude.json`,
-`~/.gemini/settings.json`, `~/.kimi-code/mcp.json`; codex `config.toml` servers
-already load natively in missions) and lets you enable each one per provider,
-or add a custom stdio server manually. Nothing activates without your explicit
-per-provider tick, and discovered transports resolve live from your CLI config
-at every mission turn — edits there flow through automatically.
-
 **Security note:** mission turns run without per-tool approval prompts, and
 external tools are outside the Specrails permission tiers (those govern only
 `specrails_*` tools). Enable only servers you trust. Kill switch:

package/docs/platforms/macos.md

@@ -43,9 +43,6 @@ You only need this once per build. It does not apply to the notarized installers
 When you add a project, the app checks for the tools it needs and surfaces them in a **prerequisites panel** (in the `Add Project` dialog and the setup wizard). It checks:
 
 - **Bundled tools** — `node`, `npm`, `npx`, `git`.
-- **Provider CLIs** — **Claude Code**, **Codex**, **Gemini CLI**, and **Kimi
-  Code**. All four are probed via the system `PATH` and never bundled. At
-  least one must be installed and working before Add Project is enabled.
 
 You don't need all four providers. Install whichever you prefer:
 
@@ -53,16 +50,6 @@ You don't need all four providers. Install whichever you prefer:
 |---|---|---|---|
 | **Claude Code** | from [claude.com/download](https://claude.com/download) | none pinned | `claude login` |
 | **Codex** | `brew install codex` | `0.128.0` | `codex login` |
-| **Gemini CLI** | `npm i -g @google/gemini-cli` | `0.11.0` | set `GEMINI_API_KEY` (a paid key from Google AI Studio) |
-| **Kimi Code** | official installer or `@moonshot-ai/kimi-code` | `0.27.0` | `kimi login` |
-
-After installing a provider CLI, quit and relaunch Specrails so the new `PATH`
-is picked up. See [Kimi](../kimi.md), [Codex](../codex.md), or
-[Gemini](../gemini.md).
-
-When everything is in order, the panel collapses to **All required tools
-detected**. Detailed rows include each installed Claude/Codex/Gemini/Kimi CLI
-only when something is missing, too old, or broken.
 
 ## PATH resolution
 
@@ -107,28 +94,6 @@ This points you at the actual fix (remove the stale link) instead of sending you
 
 `GET /api/setup-prerequisites?diagnostic=1` returns the standard payload plus a `diagnostic` block. The example below is a **non-desktop / server run** (e.g. `npm run dev:server`), where `PATH` is reconstructed via the fast path + inherited entries:
 
-```jsonc
-{
-  "diagnostic": {
-    "pathSegments": ["/opt/homebrew/bin", "/opt/homebrew/sbin", "/usr/local/bin", "/usr/local/sbin", "/usr/bin", "/bin"],
-    "pathSources": ["fast-path", "fast-path", "fast-path", "fast-path", "inherited", "inherited"],
-    "loginShellStatus": "ok",       // "ok" | "skipped" | "timeout" | "error"
-    "whichResults": {               // also includes provider CLIs (and "uv" when applicable)
-      "node": "/opt/homebrew/bin/node",
-      "npm": "/opt/homebrew/bin/npm",
-      "npx": "/opt/homebrew/bin/npx",
-      "git": "/usr/bin/git",
-      "claude": "/opt/homebrew/bin/claude",
-      "codex": null,
-      "gemini": null,
-      "kimi": null
-    },
-    "nodeEnv": "production",
-    "platform": "darwin"
-  }
-}
-```
-
 In the **shipped desktop app** the first segments come from the bundled runtimes instead, so the leading `pathSources` entries read `"bundled"` and `loginShellStatus` is `"skipped"`:
 
 ```jsonc
@@ -137,8 +102,6 @@ In the **shipped desktop app** the first segments come from the bundled runtimes
 "loginShellStatus": "skipped"
 ```
 
-`whichResults` is keyed by command name for **every** prerequisite the panel checks, so it includes `claude`/`codex`/`gemini`/`kimi` (and `uv` when probed) on top of the four bundled tools. A `null` value means that command was not found on `PATH` — in the example above, only Claude Code is installed.
-
 The install-instructions modal exposes a **Copy diagnostics** button that fetches this endpoint and copies the JSON to the clipboard for bug reports. The base endpoint (no `?diagnostic=1`) omits the `diagnostic` field, keeping the regular UI poll small.
 
 ## Verifying manually
@@ -152,8 +115,5 @@ After installing or reinstalling Node (or a provider CLI):
 
 ## Known limitations
 
-- **Provider requirement**: at least one provider CLI — Claude Code, Codex,
-  Gemini, or Kimi — must be installed and on `PATH`; otherwise Add Project
-  stays disabled.
 - **Port 4200** must be free on launch. The app binds `127.0.0.1:4200` for its API + WebSocket; if another process holds the port, the server cannot start.
 - **Terminal panel**: the bottom terminal panel spawns `$SHELL -l -i`, so your `.zshrc` / `.bashrc` loads as it would in a normal login shell. Per-session shell selection is not yet exposed in the UI — set `SHELL` to override the default.

package/docs/platforms/windows-parity.md

@@ -11,7 +11,7 @@ This audit covers the `codex/multi-repo-projects` branch, including mission stee
 | Startup and project catalog | Recover the actual Windows profile rather than inventing `C:\Users\Default`; SQLite catalog/repository IDs reopen under the same Unicode/spaced profile. |
 | Projects and multi-repo | Repository membership and canonical identity use real paths; junction and case aliases cannot add the same repository twice. Shared backlog and per-repository jobs retain their existing regression coverage. |
 | Core setup and updates | Offline assembly from the shipped core; preserve and restore the previous active framework if Windows junction replacement fails. Installed-package smoke waits for the real workspace marker. |
-| Missions and live messages | Claude streaming keeps stdin open and puts system context in prompt files on Windows; Codex and Gemini large prompts avoid command-line limits. Edit/delete/steer UI behavior remains shared. |
+| Missions and live messages | Claude streaming keeps stdin open and puts system context in prompt files on Windows; Codex large prompts avoid command-line limits. Edit/delete/steer UI behavior remains shared. |
 | Rails and built-in/custom loops | Windows-safe process wrappers, environment and cwd handling; stop flows terminate owned process trees. User-authored shell commands still need syntax supported by their configured shell. |
 | Background applications and logs | A Windows Job Object owns the application before command admission and retains descendants after launchers exit. Stop waits for the contained processes to terminate. Graceful host shutdown drains processes and logs before force-stop fallback. |
 | Terminal | Bundled ConPTY helper forks the bundled Node instead of recursively launching the pkg sidecar. Native package smoke checks input, output and descendant cleanup. File drops quote for the session's actual shell. |

package/docs/platforms/windows.md

@@ -55,13 +55,6 @@ The desktop app ships its own **Node** and **Git** runtimes inside the bundle, s
 
 When the bundle is present, the Tauri host sets `SPECRAILS_IS_DESKTOP=1` and `SPECRAILS_BUNDLED_RUNTIMES_PATH`, and the embedded server prepends the bundled `node`/`git` directories to the front of `PATH` so a system install can never shadow them. If a build ships **without** the runtimes (or a partial extraction occurs), the app does not dead-end — it falls back to discovering `node`/`git` on your system `PATH` (probed with Windows `where.exe`) instead of reporting a corrupted bundle.
 
-The **provider CLIs** — **Claude Code**, **Codex**, **Gemini**, and **Kimi
-Code** — are **never bundled**. All four are probed through the system `PATH`
-with `where.exe`; install at least one. Kimi 0.27+ requires Git for
-Windows/Git Bash and the npm distribution requires Node 22.19+, both
-user-managed. See [Kimi](../kimi.md), [Codex](../codex.md), and
-[Gemini](../gemini.md).
-
 ## Updates
 
 The desktop app self-updates via the Tauri updater plugin. It checks a GitHub Releases `latest.json` endpoint and, on Windows, applies updates with `installMode: "passive"` — the update runs with a minimal progress UI and the app relaunches into the new version.
@@ -94,7 +87,6 @@ Reserved paths (`.specrails/profiles/**`, `.claude/agents/custom-*.md`) are pres
 
 - [macOS platform guide](./macos.md) — the equivalent guide for Apple Silicon.
 - [Getting started](../getting-started.md) — first run, adding a project, the dashboard tour.
-- [Codex provider setup](../codex.md), [Gemini provider setup](../gemini.md), and [Kimi provider setup](../kimi.md) — installing and configuring the provider CLIs.
 - [CLI reference](../cli.md) — driving Specrails from the command line.
 
 ## Verification

package/docs/running-pipelines.md

@@ -21,11 +21,6 @@ SpecsBoard (left)            Rails (right)
 
 A **rail** is an execution lane. Drag a spec card from the SpecsBoard onto a rail and press **▶ Play** to launch the pipeline. Rails let you organise and queue work into named lanes.
 
-Rails default to the project's primary provider. If several are installed, a
-per-rail engine selector can launch on **Claude**, **Codex**, **Gemini**, or
-**Kimi** — see [Using Kimi](kimi.md). Implement runs on every
-registered provider; Freestyle is offered by Claude and Kimi.
-
 > **One job at a time per project.** Each project has a single queue, so within a project only one rail job runs at a time; the rest queue behind it. Real parallelism is **across projects** — open two projects and their rails run independently. See [Running multiple rails](#running-multiple-rails).
 
 ## Rails
@@ -36,8 +31,6 @@ Each rail has a header with:
 - **Spec list** — the IDs of the specs assigned to this rail. Drag in more, drag out to detach. You can also use the **Move to rail** popover from a spec card; it shows a status dot per rail so you don't push work onto a busy lane.
 - **Loop picker** — the **Loop** this rail runs: a built-in (`Implement`, `SDD Quick (OpenSpec)`, or `Freestyle`) or one of your published custom loops. See [Loops](#loops).
 - **Profile picker** — which agent profile this rail uses. This only appears once the project has **at least one** profile (create them on the Agents page). When present, `No profile` runs the rail in legacy mode.
-- **Engine selector** — pick which installed provider (Claude, Codex, Gemini,
-  or Kimi) runs this rail. It renders only for multi-provider projects.
 - **Play / Stop button** — start or cancel.
 
 ### Loops
@@ -67,11 +60,6 @@ Beyond the built-ins, the **Loops** section (left sidebar, above the project lis
 
 Each run is bounded by **max iterations**, a wall-clock **timeout**, and an optional **cost cap** (USD, checked between steps). The builder also has live validation, a dry-run preview (resolve every step's exact text without spawning), import/export to JSON, and copy/paste of steps across loops. **Publish** makes a loop selectable on any rail. Built-ins are editable loops too: edit one in place and publish it to change that built-in for every rail, agent-chat launch and Companion launch that uses it (rails keep the last published version while your edit is a Draft); **Restore original** resets it and **Duplicate** copies it into a separate loop. Built-ins cannot be deleted.
 
-On the legacy traversal, Kimi runs built-in and custom loops whose graph contains AI/shell steps but no
-**Loop Decider**. A Decider's constrained `continue`/`stop` verdict is a
-pure-output action; Kimi 0.27 `-p` cannot enforce the required no-tools
-boundary, so Kimi + Decider is rejected before the loop starts.
-
 > Loop runs stream live in the Jobs view, grouped by scoped attempts. Core runs also expose their nested graph. Project role settings apply unless a deliberate launch override selects an engine for the run. Legacy profile routing and orchestrator settings remain available for older workflows.
 
 ### Pipeline phases
@@ -96,9 +84,6 @@ continue through the ordinary verification path.
 Architect ──► Developer ──► Reviewer ──► Ship
 ```
 
-Each phase is a specialised role invoked by the rail's engine (Claude, Codex,
-Gemini, or Kimi) in an isolated project worktree:
-
 | Phase | Agent | What it does |
 |-------|-------|--------------|
 | Architect | `sr-architect` | Plans the implementation |
@@ -119,17 +104,8 @@ autonomously with native tools.
 
 - **One job per spec.** If the rail has three specs, `Freestyle` launches three independent jobs.
 - **Variable cost.** Because the run is open-ended, pressing Play opens a confirmation dialog before anything spawns.
-- **Model picker.** A per-rail control uses the selected provider's model
-  catalog. Kimi offers `k3`, `kimi-for-coding`, and
-  `kimi-for-coding-highspeed`; low/high/max effort appears only for K3.
-- **Capability-gated.** Claude and Kimi advertise Freestyle. Codex and Gemini
+- **Capability-gated.** Claude advertise Freestyle. Codex
   do not. Agent profiles do not apply to Freestyle rails.
-- **Transport-aware interaction.** Claude's persistent-stdin Freestyle run is
-  a live session and waits for **Finalize**. Kimi Freestyle is agentic too,
-  but `kimi -p` has no persistent stdin transport; it follows the owned
-  one-process lifecycle and later conversations resume through a new process
-  only after Kimi has emitted a session hint. Can be disabled server-side via
-  `SPECRAILS_INTERACTIVE_JOBS=false`.
 
 You can customise the Freestyle pre-prompt per project on the [Settings page](customizing.md#freestyle-pre-prompt).
 
@@ -166,20 +142,10 @@ Two panels sit above the streaming log:
 
 Below: the full streaming log with auto-scroll, search, and copy.
 
-**Talk to the running job.** Every Claude job (and every Claude AI step in a loop run) is an interactive session by default: a chat composer sits at the bottom of the Job Detail page — and of the job modal in mission mode — so you can ask the running agent a question or steer it mid-run. Messages sent while the model is streaming queue up and run next; the job keeps following its plan. The composer shows a live `N turns · $X` line summed from each completed turn's real usage (still no estimates). Most jobs finish on their own the moment a turn completes with nothing queued — a subtle **Wrap up now** ends them early; Freestyle jobs instead wait for your explicit **Finalize**. During a loop run your messages reach the currently running AI step (between steps the composer shows a short waiting state, and **Settle this step** advances the loop). Codex, Gemini, and Kimi rail processes do not expose Claude's persistent-stdin transport; Kimi chat surfaces resume a recorded session by spawning a new `kimi -p` process. Server kill switch: `SPECRAILS_INTERACTIVE_JOBS=false`.
-
 ### Cancelling a job
 
 Click **Stop** on the rail header. The app sends `SIGTERM` to the subprocess, waits **5 s**, then `SIGKILL`.
 
-### If a rail won't launch
-
-If you pick an engine whose CLI isn't installed on your machine, the launch
-fails fast instead of starting a broken job. Install the missing provider CLI
-— see [Using Codex](codex.md), [Using Gemini](gemini.md), or
-[Using Kimi](kimi.md) — then launch again. Kimi requires the external
-authenticated `kimi` 0.27+ executable; Desktop never starts a server for it.
-
 ### Diagnostic export
 
 Visible only when [telemetry](customizing.md#telemetry) was enabled for the job. Click **Export diagnostic** in the Job Detail header to download a ZIP containing:
@@ -219,9 +185,6 @@ Pick the profile from the **rail header's profile dropdown**. It's preselected t
 
 The **`No profile`** option always exists — use it to run a rail exactly as it did pre-4.1.0. (The dropdown itself only appears once the project has at least one profile.)
 
-> **Profiles apply to providers that advertise role/profile execution.** Claude
-> and Kimi support them. Codex and Gemini currently run in legacy mode.
-
 ### Custom agents (Agent Studio)
 
 From the Agents Catalog tab, the toolbar offers three creation entry points:
@@ -256,8 +219,6 @@ Per-project bundled integrations. Click **Integrations** in the project's right
 
 Each plugin tile has:
 
-- **AI provider** — for multi-provider projects, selects the independent
-  Claude, Codex, or Kimi installation to inspect or change.
 - **Status** — `not installed`, `installed`, `orphan` (state file mentions it but `.mcp.json` doesn't), or `degraded` (verify failed).
 - **Preview install** — shows which `mcpServers` entries and agent fragments will land where, so you can sanity-check before clicking.
 - **Install** — applies the changes. Progress streams over the WebSocket (`plugin.install_progress` event).
@@ -281,11 +242,6 @@ Degraded plugins are **non-blocking** — the rail spawns anyway, but a `plugin.
 The app never wholesale rewrites these files:
 
 - `<project>/.mcp.json` — surgical merge per plugin.
-- `<project>/.kimi-code/mcp.json` — Kimi-native surgical MCP merge.
-- `<project>/CLAUDE.md`, `<project>/AGENTS.md`,
-  `<project>/GEMINI.md`, or `<project>/.kimi-code/AGENTS.md` —
-  provider-native managed instruction blocks. Provider-relative paths remain
-  independent unless two adapters explicitly declare the same path.
 - `<project>/.specrails/plugins/state.json` — install registry.
 - `<project>/.specrails/plugins/snapshots/<jobId>.json` — per-job snapshots.
 - `<project>/.claude/agents/custom-<plugin>.md` — optional fragment per plugin.
@@ -315,5 +271,4 @@ If something looks wrong:
 - [Tracking cost](tracking-cost.md) — see what each rail run is costing you.
 - [Customising the app](customizing.md) — daily budget, per-job alerts, telemetry.
 - [Using Codex](codex.md) — run rails on the Codex CLI.
-- [Using Gemini](gemini.md) — run rails on the Gemini CLI.
 - [Agent profile internals](internals/profiles.md) — for power users.

package/docs/subscription-usage.md

@@ -0,0 +1,19 @@
+# Local subscription usage
+
+The left sidebar's **Usage** section shows the currently signed-in Claude and Codex account allowance across all activity, including use outside Specrails. Each provider window has its own consumed percentage and reset time; this is separate from job tokens, billed costs and project budgets.
+
+The sidebar displays static provider cards with separate labeled quota bars. There is no floating usage panel or clickable provider card. Full reset times and data details are available in Subscription usage in global app settings. The view is always detailed, without view selectors or provider-management buttons. The collapsed sidebar shows a usage status icon. Unknown measurements are unavailable, never assumed to be zero.
+
+If neither CLI is detected, the section explains installing Claude or Codex and signing in with that CLI. It does not run usage queries for missing tools. After installation or changing login, press Refresh. An API-key login may have no subscription allowance. An incompatible Codex CLI must be updated rather than queried through a paid prompt.
+
+Updates are demand-driven while the app and a usage surface are visible. Manual refresh has a 30-second floor and provider failures can impose a longer cooldown. Data becomes stale after five minutes or a passed reset; refresh confirms the new allowance. A transient failure can retain figures from the same account with a stale label. Sign-out/auth failures clear cached figures.
+
+Credentials remain local to the server and are never sent to the frontend. The feature does not manage accounts, change provider selection, stop jobs or store usage history. Claude OAuth/Keychain availability depends on the installed CLI and OS access policy; Codex uses read-only app-server methods. Unsupported login or platform combinations show a descriptive state. Only the current host login is supported; remote/WSL account usage is not inferred.
+
+The Usage section starts collapsed. Its header toggles the provider cards with an accessible expanded state and chevron; the separate refresh button does not toggle the section.
+
+Opening the Usage section requests a refresh each time, retaining cached measurements while collection runs and respecting service cooldowns. Closing it does not request a refresh.
+
+Final placement: Usage is in the shared footer status bar in board and mission modes, removed from the left sidebar. Hover, focus or click opens the provider cards above the footer; opening requests refresh. Pointer transfer to the menu stays open, leaving dismisses after a short delay, and Escape/outside interaction closes it. Mission mode uses the minimal status bar without spend polling. This supersedes prior sidebar placement.
+
+Footer summaries show one quota per provider: account weekly when reported, otherwise the first account window, otherwise the first reported window. Values are never aggregated. The hover menu shows every individual quota and bar. There is no presentation selector or mode label.

package/docs/terminal.md

@@ -32,7 +32,6 @@ You don't have to. You can keep using iTerm/Windows Terminal/Alacritty/whatever
 
 The panel header carries three one-click shortcuts:
 
-- **Open AI CLI** (✨ Sparkles) — spins up a fresh session and types the launch command for you. On a single-provider project it launches the project's provider CLI directly (`claude`, `codex`, `gemini`, or `kimi`); on a multi-provider project it opens a small picker so you choose which CLI to start. Kimi launches the CLI itself, not `kimi server`.
 - **Open in browser** (🌐 Globe) — opens the URL from the `browserShortcutUrl` setting (default `https://specrails.dev`). Right-click it to jump to the setting and change the URL.
 - **Paste quick script** (`</>`) — writes the snippet from the `quickScript` setting (which defaults to a personalised `echo "Wake up, <username> …"` reminder, editable in Settings) into the active session. Right-click it to edit the snippet in Settings. Disabled when there's no active terminal or the snippet is empty.
 
@@ -141,4 +140,3 @@ For deeper inspection of how the panel resolves PATH at startup (relevant for Vo
 
 - [Customising the app](customizing.md) — terminal settings, themes.
 - [Getting started](getting-started.md) — registering a project.
-- [Codex](codex.md) / [Gemini](gemini.md) — setting up the CLI behind the **Open AI CLI** button on a Codex or Gemini project.