specrails-desktop 2.63.0 → 2.63.1

package/client/dist/index.html

@@ -204,7 +204,7 @@
         .specrails-splash__mark .pill { opacity: 1; }
       }
     </style>
-    <script type="module" crossorigin src="/assets/index-Culan6y7.js"></script>
+    <script type="module" crossorigin src="/assets/index-CECj3joE.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-CNC7AqOf.js">
     <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-BbYvbtY8.js">
     <link rel="modulepreload" crossorigin href="/assets/react-dom-DDD8FYaU.js">
@@ -214,7 +214,7 @@
     <link rel="modulepreload" crossorigin href="/assets/activity-DiyjsgQV.js">
     <link rel="modulepreload" crossorigin href="/assets/addspec-BOvgmcgk.js">
     <link rel="modulepreload" crossorigin href="/assets/agent-Dip4h2YE.js">
-    <link rel="modulepreload" crossorigin href="/assets/agentRuntime-C_yLPKDy.js">
+    <link rel="modulepreload" crossorigin href="/assets/agentRuntime-BxYS5V7u.js">
     <link rel="modulepreload" crossorigin href="/assets/agents-Doe1sHY5.js">
     <link rel="modulepreload" crossorigin href="/assets/agentstudio-BzugqB_N.js">
     <link rel="modulepreload" crossorigin href="/assets/aiedit-iIjz2_Qk.js">
@@ -243,16 +243,16 @@
     <link rel="modulepreload" crossorigin href="/assets/terminal-BAzpHtpY.js">
     <link rel="modulepreload" crossorigin href="/assets/tickets-D41ZMQpf.js">
     <link rel="modulepreload" crossorigin href="/assets/createLucideIcon-DtODIU64.js">
-    <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-CNOvmgTr.js">
-    <link rel="modulepreload" crossorigin href="/assets/Trans-CVSryAL1.js">
-    <link rel="modulepreload" crossorigin href="/assets/useDesktop-C5JVBeur.js">
+    <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-CcsE5986.js">
+    <link rel="modulepreload" crossorigin href="/assets/Trans-ZiXIfj50.js">
+    <link rel="modulepreload" crossorigin href="/assets/useDesktop-C0mRIlHT.js">
     <link rel="modulepreload" crossorigin href="/assets/provider-capabilities-lePfeT_Y.js">
     <link rel="modulepreload" crossorigin href="/assets/save-LmPSfsvZ.js">
-    <link rel="modulepreload" crossorigin href="/assets/spending-BfjSJjBd.js">
+    <link rel="modulepreload" crossorigin href="/assets/spending-eWiZGhC_.js">
     <link rel="modulepreload" crossorigin href="/assets/chevron-up-6EFqEHBj.js">
     <link rel="modulepreload" crossorigin href="/assets/sparkles-CCfUdFGY.js">
     <link rel="modulepreload" crossorigin href="/assets/x-Bu7X_eR2.js">
-    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-eH_KaAZ1.js">
+    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-BHIUPVmC.js">
     <link rel="modulepreload" crossorigin href="/assets/ban-wqfdzoXt.js">
     <link rel="modulepreload" crossorigin href="/assets/file-text-C0blZHLh.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-x-D2ttKotB.js">
@@ -268,23 +268,23 @@
     <link rel="modulepreload" crossorigin href="/assets/search-BDVp3fkH.js">
     <link rel="modulepreload" crossorigin href="/assets/trash-D8zYUmTg.js">
     <link rel="modulepreload" crossorigin href="/assets/triangle-alert-Cxpn8bqr.js">
-    <link rel="modulepreload" crossorigin href="/assets/jira-api-Bl8xEIpk.js">
+    <link rel="modulepreload" crossorigin href="/assets/jira-api-C_D_RDhl.js">
     <link rel="modulepreload" crossorigin href="/assets/zap-bugHyWzQ.js">
     <link rel="modulepreload" crossorigin href="/assets/clsx-CjueKrWZ.js">
     <link rel="modulepreload" crossorigin href="/assets/utils-BC4DHlz2.js">
     <link rel="modulepreload" crossorigin href="/assets/dialog-DtdR05v1.js">
     <link rel="modulepreload" crossorigin href="/assets/lib-DWJfei6y.js">
-    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-ZHg7WpdH.js">
-    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-NVM6rK3i.js">
+    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-62h40I4t.js">
+    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-CdN5lTyD.js">
     <link rel="modulepreload" crossorigin href="/assets/button-4FS1ZDTp.js">
-    <link rel="modulepreload" crossorigin href="/assets/project-repositories-CvJf1a6H.js">
-    <link rel="modulepreload" crossorigin href="/assets/RepositoryScopeSelector-BSgUqk_u.js">
-    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModalContext-BoafEcm4.js">
+    <link rel="modulepreload" crossorigin href="/assets/project-repositories-Be0CWklo.js">
+    <link rel="modulepreload" crossorigin href="/assets/RepositoryScopeSelector-DeCoUsRN.js">
+    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModalContext-DiPngt2g.js">
     <link rel="modulepreload" crossorigin href="/assets/core-B3mKBIh5.js">
-    <link rel="modulepreload" crossorigin href="/assets/RepositoryDeliveries-DgzNnJmn.js">
-    <link rel="modulepreload" crossorigin href="/assets/useRuntimeRuns-DohBmeg8.js">
+    <link rel="modulepreload" crossorigin href="/assets/RepositoryDeliveries-DAIxIYsl.js">
+    <link rel="modulepreload" crossorigin href="/assets/useRuntimeRuns-B1a6GChu.js">
     <link rel="modulepreload" crossorigin href="/assets/event-Bt7f3wXe.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-D1v33giW.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-BgbCbIua.css">
   </head>
   <body>
     <div id="specrails-splash" aria-hidden="false" role="status" aria-label="Loading Specrails">

package/docs/internals/core-runtime-updates.md

@@ -13,7 +13,7 @@ framework is rejected rather than silently replacing an update.
 
 ## Persistence and publication
 
-The release bundle pins Core 6.5.0 in `desktop-release.yml` and
+The release bundle pins Core 6.6.2 in `desktop-release.yml` and
 `scripts/assemble-bundled-core.lock.json`. Core 6 is the Desktop-only engine: it
 publishes integration contract 5.1 (no standalone `update`) and ships only the
 implement and retry workflows (Batch was folded into implement; Desktop no
@@ -27,8 +27,8 @@ dependency leaks into its tarball (today `@langchain/langgraph-sdk` ships
 module still loads while every staged path stays inside the MSI budget
 (`MAX_STAGED_RELATIVE_PATH`, 120 characters).
 
-The paired CI checkout uses the immutable Core 6.5.0 release commit
-`187f9d24533a99fb1f37c7805b3c5b1375040d25`. Bundle smoke checks use Node 22.22.3,
+The paired CI checkout uses the immutable Core 6.6.2 release commit
+`98b5d3c515967aed170dcb8a31a7462390cc420f`. Bundle smoke checks use Node 22.22.3,
 matching Core's minimum supported Node version and the Desktop release runtime.
 
 Desktop updates retain the complete npm installation, including dependencies,

package/docs/internals/desktop-owned-workflows.md

@@ -54,6 +54,16 @@ real committed full verification and the reviewed/approved candidate before
 publishing the recoverable write set. The final host check certifies the archived
 candidate. Reviewer assertions remain AI evidence and cannot create verification.
 
+A failed archive returns to verification only when the gate reports a stale or
+unverified candidate (`unverified`/`candidate_changed`), at most twice
+(`archiveRetries`). Any other archive failure, such as OpenSpec rejecting a rebuilt
+main spec, repeats identically. Implement ends at `archive-failed` with
+the run log pointing at OpenSpec's reason, instead of looping through verification,
+review and archive until the transition budget runs out. Core's `openspec-validate`
+dry-runs the archive before the plan freezes, so most such specs return to the
+Architect with the offending requirement named. Edited built-in loops keep their
+saved graph: restore or re-edit them to pick up recipe changes.
+
 Implement checks the host candidate hash after each correction. When verification
 failed and the correction leaves that candidate unchanged, it ends unsuccessfully
 with the corrector's explanation instead of rerunning the same failed checks.

package/docs/internals/programmatic-agent-runtime.md

@@ -69,6 +69,22 @@ Desktop negotiates `runtime api` and sends configuration to `runtime validate --
    may only tighten Core's floors (70 overall, 75 security, 60 other aspects).
    Archive approval and low-confidence architect behavior are loop policies.
 
+### Turn limits
+
+Every AI step runs an agent role with a **Maximum turns** ceiling; each tool call
+counts as a turn. Unset roles use Core's default of 100. The Implement recipe runs
+roles `plan`, `build`, `assess` and `correct` (Architect, Developer, Reviewer,
+Fixer) and ships `build`/`correct` at 300. Read and set every ceiling in one place
+under the loop's **Advanced settings → Turn limits**, or per step in its agent
+panel; steps sharing a role share the value. Save and publish: a run freezes its
+limits at launch, so a failed run needs a new launch, not a resume.
+
+`GET /api/loops/:id` (and MCP `specrails_loops get`) returns `turnLimits` with each
+step's role, effective value and source (`step`, `role` or `core-default`). The run
+log prints each used role as `[runtime] build: claude/opus · max 300 turns`, and a
+turn-limit failure names the step and the field to raise. Project agent-runtime
+settings never change loop runs.
+
 Only verification is read from the project's `.specrails/agent-runtime.json` for
 new loop-owned recipes. Historical roles remain available for explicit import
 and old saved graphs. The editor never silently imports a project's settings

package/docs/internals/source-map.md

@@ -5,7 +5,7 @@ architectural dependency declaration. Search a heading or filename and read only
 the relevant source and tests. Feature prefixes group the legacy server files;
 new bounded modules live under `server/modules/`.
 
-Includes 1044 source/build files. Nearby tests are linked where names
+Includes 1047 source/build files. Nearby tests are linked where names
 match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## cli
@@ -384,6 +384,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [LoopMigrationPanel.tsx](../../client/src/features/loops/components/LoopMigrationPanel.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopMigrationPanel.test.tsx)
 - [LoopPreviewModal.tsx](../../client/src/features/loops/components/LoopPreviewModal.tsx)
 - [LoopRunModal.tsx](../../client/src/features/loops/components/LoopRunModal.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopRunModal.test.tsx)
+- [LoopTurnLimits.tsx](../../client/src/features/loops/components/LoopTurnLimits.tsx) · [test](../../client/src/features/loops/components/LoopTurnLimits.test.tsx)
 - [LoopWindowSurface.tsx](../../client/src/features/loops/components/LoopWindowSurface.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopWindowSurface.test.tsx)
 - [TemplatePreviewModal.tsx](../../client/src/features/loops/components/TemplatePreviewModal.tsx) · [test](../../client/src/features/loops/components/__tests__/TemplatePreviewModal.test.tsx)
 
@@ -413,6 +414,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [loop-export.ts](../../client/src/features/loops/lib/loop-export.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-export.test.ts)
 - [loop-graph-rf.ts](../../client/src/features/loops/lib/loop-graph-rf.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-graph-rf.test.ts)
 - [loop-layout.ts](../../client/src/features/loops/lib/loop-layout.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-layout.test.ts)
+- [loop-role-agents.ts](../../client/src/features/loops/lib/loop-role-agents.ts)
 - [loop-run-models.ts](../../client/src/features/loops/lib/loop-run-models.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-run-models.test.ts)
 - [loop-template-filter.ts](../../client/src/features/loops/lib/loop-template-filter.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-template-filter.test.ts)
 - [loop-ticket-need.ts](../../client/src/features/loops/lib/loop-ticket-need.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-ticket-need.test.ts)
@@ -1332,6 +1334,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [loop-shell-invocation.ts](../../server/modules/loops/runtime/loop-shell-invocation.ts)
 - [loop-step-idle.ts](../../server/modules/loops/runtime/loop-step-idle.ts) · [test](../../server/modules/loops/runtime/loop-step-idle.test.ts)
 - [loop-templates.ts](../../server/modules/loops/runtime/loop-templates.ts) · [test](../../server/modules/loops/runtime/loop-templates.test.ts)
+- [loop-turn-limits.ts](../../server/modules/loops/runtime/loop-turn-limits.ts) · [test](../../server/modules/loops/runtime/loop-turn-limits.test.ts)
 - [loops-router.ts](../../server/modules/loops/runtime/loops-router.ts) · [test](../../server/modules/loops/runtime/loops-router.test.ts)
 - [loops-store.ts](../../server/modules/loops/runtime/loops-store.ts) · [test](../../server/modules/loops/runtime/loops-store.test.ts)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.63.0",
+  "version": "2.63.1",
   "license": "MIT",
   "repository": {
     "type": "git",

package/server/dist/mcp/tools/loops.js

@@ -30,7 +30,7 @@ function loopsTools() {
                 'For a standalone ticket-less run use the run action. ' +
                 'Actions: ' +
                 'list (all saved loops), ' +
-                'get (one loop by id), ' +
+                'get (one loop by id, plus turnLimits: each AI step\'s role and effective Maximum turns — set graph.config.agents.roles.<role>.maxTurns, or agents.<role> for built-in roles, then publish; project Agent Runtime settings never change loop runs), ' +
                 'templates (built-in template catalog with graphs), ' +
                 'factory (the built-in loops — factory:implement, factory:freestyle, factory:sdd-quick-openspec — with the graph a rail launch runs; ' +
                 'built-ins are ordinary editable loops whose loopId IS the factory id: change them with update + publish and the change applies to every rail, chat launch and companion that uses that built-in), ' +

package/server/dist/modules/agent-runtime/runtime/agent-runtime-bridge.js

@@ -23,6 +23,7 @@ const agent_runtime_package_1 = require("./agent-runtime-package");
 const agent_runtime_settings_1 = require("./agent-runtime-settings");
 const core_node_runtime_1 = require("../../../core-node-runtime");
 const win_spawn_1 = require("../../../util/win-spawn");
+const loop_turn_limits_1 = require("../../loops/runtime/loop-turn-limits");
 function runtimeChangeName(runId) {
     return 'runtime-' + (0, node_crypto_1.createHash)('sha256').update(runId).digest('hex').slice(0, 20);
 }
@@ -265,9 +266,17 @@ async function runAgentRuntimeInvocation(options) {
     }
     if ((0, node_fs_1.existsSync)(frozenPath)) {
         const frozen = JSON.parse((0, node_fs_1.readFileSync)(frozenPath, 'utf8'));
-        for (const [role, assignment] of [...Object.entries(frozen.agents), ...(frozen.fixer ? [['fixer', frozen.fixer]] : [])]) {
+        // A definition names the roles its steps run (Implement: plan/build/assess/correct); list exactly those with their turn ceiling.
+        const definitionRoles = definitionEngine ? JSON.parse((0, node_fs_1.readFileSync)(definitionFile, 'utf8')).roles : undefined;
+        const used = Array.isArray(definitionRoles) ? new Set(definitionRoles.filter((role) => typeof role === 'string')) : undefined;
+        if (used?.has('developer'))
+            used.add('fixer');
+        const assignments = [...Object.entries(frozen.agents), ...(frozen.fixer ? [['fixer', frozen.fixer]] : []), ...Object.entries(frozen.roles ?? {})]
+            .filter(([role]) => used ? used.has(role) : role in frozen.agents || role === 'fixer');
+        for (const [role, assignment] of assignments) {
+            const turns = assignment.maxTurns === undefined ? `max ${loop_turn_limits_1.CORE_DEFAULT_MAX_TURNS} turns (Core default)` : `max ${assignment.maxTurns} turns`;
             try {
-                options.onLine?.(`[runtime] ${role}: ${assignment.provider}/${assignment.model ?? 'provider default'}\n`);
+                options.onLine?.(`[runtime] ${role}: ${assignment.provider}/${assignment.model ?? 'provider default'} · ${turns}\n`);
             }
             catch { /* Log observers cannot prevent execution. */ }
         }
@@ -378,7 +387,8 @@ async function runAgentRuntimeInvocation(options) {
                 const kind = payload?.type === 'step_succeeded' && payload.outcome === 'fail' ? 'verification_failed' : payload?.type;
                 const completionDetail = payload?.type === 'workflow_failed' && Array.isArray(payload.reasons)
                     ? payload.reasons.filter(reason => typeof reason === 'string' && reason.trim()).join('; ').slice(0, 4_000) : undefined;
-                const detail = payload?.error?.message ?? payload?.message ?? completionDetail;
+                const rawDetail = payload?.error?.message ?? payload?.message ?? completionDetail;
+                const detail = payload?.type === 'step_failed' && typeof rawDetail === 'string' ? (0, loop_turn_limits_1.withTurnLimitHint)(rawDetail, payload.stepId) : rawDetail;
                 const stepKey = JSON.stringify([payload?.scopeId ?? null, payload?.nodePath ?? payload?.stepId ?? null]);
                 if (payload?.type === 'step_failed' && typeof detail === 'string' && detail.trim()) {
                     stepFailures.delete(stepKey);

package/server/dist/modules/delivery/runtime/rail-isolated-launch.js

@@ -447,7 +447,7 @@ function createIsolatedRunSettlement(ports) {
                 run: a, implementationOutcome, deliveryOutcome: 'blocked',
                 initialSha: a.initialSha, finalSha: await readHeadSha(git, a.handle.worktreePath),
                 failureCode: 'settlement_interrupted',
-                failureDetail: 'Programmatic workflow needs attention. Resume it from Agent Runtime settings in its original worktree.',
+                failureDetail: 'Programmatic workflow stopped before delivery; partial changes stay in its original worktree. The run log names the failing step. A resumable step offers Resume on the job page; a raised loop limit (such as a step\'s Maximum turns) needs a new launch.',
                 safeToRelease: false,
             };
         }

package/server/dist/modules/loops/runtime/loop-implement-recipe.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.supportsHostBlockers = exports.HOST_BLOCKER_KINDS = void 0;
+exports.supportsHostBlockers = exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS = exports.HOST_BLOCKER_KINDS = void 0;
 exports.configurableImplementGraph = configurableImplementGraph;
 const agent_runtime_settings_1 = require("../../agent-runtime/runtime/agent-runtime-settings");
 const loop_agents_1 = require("./loop-agents");
@@ -12,6 +12,8 @@ const aspects = { type_correctness: 60, pattern_adherence: 60, test_coverage: 60
 const reviewPolicy = 'approved == true; issues must be empty; score >= 70; ' + Object.entries(aspects).map(([aspect, threshold]) => `${aspect} >= ${threshold}`).join('; ');
 exports.HOST_BLOCKER_KINDS = ['network', 'credential', 'environment-variable', 'toolchain', 'setup', 'environment', 'scope'];
 /** Fixer/developer structured `blocker`: the host ends the run on it instead of counting a correction round. */
+/** Write roles of a large spec routinely exceed Core's default of 100 turns (one cross-repo Developer used 113). */
+exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS = 300;
 const blocker = objectSchema({ kind: { enum: [...exports.HOST_BLOCKER_KINDS] }, command: string, cwd: string, evidence: string, requiredAction: string }, ['kind', 'requiredAction']);
 /** Host-owned environment repair and structured blockers need the paired Core generation. */
 const supportsHostBlockers = (capabilities) => capabilities?.hostBlockers === 1;
@@ -24,9 +26,9 @@ function configurableImplementGraph(capabilities) {
     const agents = (0, loop_agents_1.defaultLoopAgents)();
     agents.roles = {
         plan: { ...agents.agents.architect, access: 'read', artifacts: 'all', openspecSkill: 'openspec-ff-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'architect') },
-        build: { ...agents.agents.developer, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'developer') },
+        build: { ...agents.agents.developer, maxTurns: exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'developer') },
         assess: { ...agents.agents.reviewer, access: 'read', artifacts: 'none', openspecSkill: 'openspec-verify-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'reviewer') },
-        correct: { ...agents.fixer, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'fixer') },
+        correct: { ...agents.fixer, maxTurns: exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'fixer') },
     };
     const nodes = [{ id: 'start', type: 'start', position: { x: 0, y: 0 } }], edges = [];
     const node = (id, label, kind, params, outcomes) => {
@@ -48,7 +50,7 @@ function configurableImplementGraph(capabilities) {
     node('reset-confidence', 'Reset confidence after answer', 'assign', { set: { planInvestigated: false } }, { next: 'architect', failed: 'failed' });
     node('validate', 'Validate OpenSpec', 'openspec-validate', { change }, { pass: 'freeze', fail: 'architect', failed: 'failed' });
     node('freeze', 'Freeze approved artifacts', 'artifact-contract', { change, contractId: 'plan', action: 'freeze' }, { pass: 'initialize-corrections', fail: 'architect', failed: 'failed' });
-    node('initialize-corrections', 'Initialize automatic correction budget', 'assign', { set: { correctionAttempts: 0, correctionLimit: 3, implementationAttempts: 0, implementationLimit: 3 } }, { next: 'developer', failed: 'failed' });
+    node('initialize-corrections', 'Initialize automatic correction budget', 'assign', { set: { correctionAttempts: 0, correctionLimit: 3, implementationAttempts: 0, implementationLimit: 3, archiveRetries: 0 } }, { next: 'developer', failed: 'failed' });
     const implementation = objectSchema({ summary: string, incomplete: strings, blocker }, ['summary', 'incomplete']);
     turn('developer', 'Developer', 'build', `Implement every approved task for change ${change} using the bound official apply skill. Preserve proposal, design and specs; only tick tasks you completed. Report summary and incomplete task descriptions. If a task cannot be finished because of a host precondition or environment blocker outside this change (for example the sandbox forbids starting a local server, a credential or tool is missing), keep the work done, leave that task unchecked and return the structured blocker (kind, command, cwd, evidence, requiredAction). A failing test, a test you cannot make pass, or unexpected browser or tool behaviour is NOT a host blocker: change the test or the implementation instead. The host confirms a blocker by running its own verification before ending the run; a failure it reproduces comes back as a correction. Prior execution evidence and human answers: {{history.text}}`, implementation, 'developer-blocker', writes);
     node('developer-blocker', 'Developer reported a host blocker', 'condition', { expr: 'exists($outputs.developer.structured.blocker) && $outputs.developer.structured.blocker != null' }, { true: 'developer-blocker-kind', false: 'tasks' });
@@ -76,9 +78,14 @@ function configurableImplementGraph(capabilities) {
     node('correction-progress', 'Check correction progress', 'condition', { expr: 'exists($outputs.fixer.candidateHash) && $outputs.fixer.candidateHash != null && $outputs.fixer.candidateHash != $outputs.verify.candidateHash' }, { true: 'tasks', false: 'correction-stalled' });
     node('approve', 'Approve archive', 'approval', { reason: `Approve archiving the reviewed and verified candidate for change ${change}.`, bindCandidate: true, enabled: agents.approvalBeforeArchive === true }, { next: 'approval-policy' });
     node('approval-policy', 'Approval decision', 'condition', { expr: '$outputs.approve.response.approved == true' }, { true: 'archive', false: 'failed' });
-    node('archive', 'Archive OpenSpec', 'openspec-archive', { change, allowArchived: true, requiresVerified: true, reviewedCandidate: '{{outputs.reviewer.candidateHash}}', approvedCandidate: '{{outputs.approve.candidateHash}}' }, { next: 'verify-archive', failed: 'verify' });
+    node('archive', 'Archive OpenSpec', 'openspec-archive', { change, allowArchived: true, requiresVerified: true, reviewedCandidate: '{{outputs.reviewer.candidateHash}}', approvedCandidate: '{{outputs.approve.candidateHash}}' }, { next: 'verify-archive', failed: 'archive-retry' });
+    // Only a stale or unverified candidate is worth re-verifying before another archive attempt.
+    // An OpenSpec rejection (e.g. a requirement without SHALL/MUST) repeats identically, so it ends the run
+    // instead of cycling verify → review → archive until the transition budget runs out.
+    node('archive-retry', 'Archive needs a fresh verification', 'condition', { expr: 'exists($outputs.archive.reason) && ($outputs.archive.reason == "unverified" || $outputs.archive.reason == "candidate_changed") && $vars.archiveRetries < 2' }, { true: 'count-archive-retry', false: 'archive-failed' });
+    node('count-archive-retry', 'Count archive re-verification', 'assign', { increment: { archiveRetries: 1 } }, { next: 'verify', failed: 'failed' });
     node('verify-archive', 'Verify archived candidate', 'verify', verifyParams, verifyEnds('done', 'failed', 'host-blocked-archive'));
-    nodes.push({ id: 'done', type: 'end', position: { x: 0, y: nodes.length * 140 }, data: { outcome: 'success', requiresVerified: true } }, { id: 'failed', type: 'end', position: { x: 360, y: nodes.length * 140 }, data: { outcome: 'failure' } }, { id: 'correction-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction made no candidate changes. Host verification is valid: {{outputs.verify.valid}}. Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}` } }, { id: 'correction-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction limit reached ({{run.correctionAttempts}}/{{run.correctionLimit}}). Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}. Host verification: {{outputs.verify}}` } }, { id: 'implementation-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'The developer made no changes while approved tasks are still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'implementation-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Implementation attempt limit reached ({{run.implementationAttempts}}/{{run.implementationLimit}}) with approved tasks still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'developer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Developer reported a host blocker ({{outputs.developer.structured.blocker.kind}}): {{outputs.developer.structured.blocker.requiredAction}} Evidence: {{outputs.developer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'developer' } : {}) } }, { id: 'fixer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Fixer reported a host blocker ({{outputs.fixer.structured.blocker.kind}}): {{outputs.fixer.structured.blocker.requiredAction}} Evidence: {{outputs.fixer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'fixer' } : {}) } });
+    nodes.push({ id: 'done', type: 'end', position: { x: 0, y: nodes.length * 140 }, data: { outcome: 'success', requiresVerified: true } }, { id: 'failed', type: 'end', position: { x: 360, y: nodes.length * 140 }, data: { outcome: 'failure' } }, { id: 'archive-failed', type: 'end', position: { x: 360, y: (nodes.length + 1) * 140 }, data: { outcome: 'failure', reason: `OpenSpec could not archive change ${change}. The implementation was verified and reviewed; the archive step in the run log shows OpenSpec's reason (for example a requirement whose first body line has no SHALL or MUST). Fix the spec in the original worktree, then archive it there or relaunch.` } }, { id: 'correction-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction made no candidate changes. Host verification is valid: {{outputs.verify.valid}}. Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}` } }, { id: 'correction-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction limit reached ({{run.correctionAttempts}}/{{run.correctionLimit}}). Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}. Host verification: {{outputs.verify}}` } }, { id: 'implementation-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'The developer made no changes while approved tasks are still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'implementation-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Implementation attempt limit reached ({{run.implementationAttempts}}/{{run.implementationLimit}}) with approved tasks still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'developer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Developer reported a host blocker ({{outputs.developer.structured.blocker.kind}}): {{outputs.developer.structured.blocker.requiredAction}} Evidence: {{outputs.developer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'developer' } : {}) } }, { id: 'fixer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Fixer reported a host blocker ({{outputs.fixer.structured.blocker.kind}}): {{outputs.fixer.structured.blocker.requiredAction}} Evidence: {{outputs.fixer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'fixer' } : {}) } });
     if (hostBlockers) {
         const hostBlocked = (id, source) => ({ id, type: 'end', position: { x: 1800, y: nodes.length * 140 }, data: { outcome: 'failure', blockerFrom: source, reason: `Host blocker ({{outputs.${source}.blocker.kind}}): {{outputs.${source}.blocker.reason}} Required action: {{outputs.${source}.blocker.requiredAction}}` } });
         nodes.push(hostBlocked('host-blocked', 'verify'), hostBlocked('host-blocked-archive', 'verify-archive'));

package/server/dist/modules/loops/runtime/loop-turn-limits.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CORE_DEFAULT_MAX_TURNS = void 0;
+exports.loopStepRole = loopStepRole;
+exports.loopTurnLimits = loopTurnLimits;
+exports.withTurnLimitHint = withTurnLimitHint;
+/** Core's ceiling for one role turn when the role sets no `maxTurns` (Core `cli-executor`). */
+exports.CORE_DEFAULT_MAX_TURNS = 100;
+function object(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+/** The agent role a canvas step runs, mirroring the definition compiler. */
+function loopStepRole(id, kind, params) {
+    if (kind === 'prompt')
+        return id === 'fix' ? 'fixer' : id === 'prepare' ? 'architect' : params.access === 'read' ? 'reviewer' : 'developer';
+    if ((kind === 'role-turn' || kind === 'decider') && typeof params.roleId === 'string')
+        return params.roleId;
+    if (kind === 'implementation-step' && ['architect', 'developer', 'reviewer', 'fixer'].includes(String(params.phase)))
+        return String(params.phase);
+    return undefined;
+}
+function roleEngine(agents, role) {
+    if (!agents)
+        return undefined;
+    if (role === 'fixer')
+        return agents.fixer ?? agents.agents.developer;
+    if (role === 'architect' || role === 'developer' || role === 'reviewer')
+        return agents.agents[role];
+    return agents.roles?.[role];
+}
+/** Effective per-step turn ceiling: step engine override, then the loop role, then Core's default. */
+function loopTurnLimits(graph) {
+    const agents = graph.config.agents;
+    const limits = [];
+    const visit = (body) => {
+        for (const node of body.nodes) {
+            if (node.type !== 'core')
+                continue;
+            const params = object(node.data?.params) ? node.data.params : {};
+            const role = loopStepRole(node.id, node.data?.kind, params);
+            if (!role)
+                continue;
+            const label = typeof node.data?.label === 'string' ? node.data.label : undefined;
+            const stepTurns = object(params.engine) ? params.engine.maxTurns : undefined;
+            const roleTurns = roleEngine(agents, role)?.maxTurns;
+            const [maxTurns, source] = typeof stepTurns === 'number' ? [stepTurns, 'step']
+                : typeof roleTurns === 'number' ? [roleTurns, 'role'] : [exports.CORE_DEFAULT_MAX_TURNS, 'core-default'];
+            limits.push({ stepId: node.id, ...(label ? { label } : {}), role, maxTurns, source });
+        }
+    };
+    visit(graph);
+    for (const component of Object.values(graph.components ?? {}))
+        visit(component);
+    return limits;
+}
+const TURN_LIMIT = /reached the configured limit of (\d+) turns for ([\w:-]+)/;
+/** Appends where to raise the limit to Core's turn-limit failure; other messages pass through. */
+function withTurnLimitHint(message, stepId) {
+    const match = message.match(TURN_LIMIT);
+    if (!match)
+        return message;
+    const step = stepId ? `the "${stepId}" step` : `the step that runs role "${match[2]}"`;
+    return `${message} To raise it: Loops ▸ this loop ▸ select ${step} ▸ "Maximum turns" (role "${match[2]}", currently ${match[1]}), save and publish. Project Settings do not change loop runs.`;
+}

package/server/dist/modules/loops/runtime/loops-router.js

@@ -17,6 +17,7 @@ const builtin_loops_1 = require("./builtin-loops");
 const loop_command_catalog_1 = require("./loop-command-catalog");
 const loop_constants_1 = require("./loop-constants");
 const loop_preview_1 = require("./loop-preview");
+const loop_turn_limits_1 = require("./loop-turn-limits");
 const BUILTIN_DELETE_MESSAGE = 'Built-in loops cannot be deleted. Use Restore original to reset it, or Duplicate it to keep a separate copy.';
 async function factoryCapabilities() {
     try {
@@ -281,7 +282,8 @@ function registerLoopsRoutes(router, deps) {
             res.status(404).json({ error: 'Loop not found' });
             return;
         }
-        res.json({ loop });
+        // Effective per-step turn ceilings, so readers (UI, MCP) never guess where the limit lives.
+        res.json({ loop, turnLimits: (0, loop_turn_limits_1.loopTurnLimits)(loop.graph) });
     });
     // ── Create ───────────────────────────────────────────────────────────────────
     router.post('/loops', (req, res) => {

package/server/dist/modules/missions/runtime/agent-operator-prompt.js

@@ -81,6 +81,14 @@ repository members, and runs coordinated AI coding pipelines over their selected
   (\`factory:implement\`, \`factory:freestyle\`, \`factory:sdd-quick-openspec\`)
   are editable in place: \`update\` + \`publish\` changes the built-in for every
   rail that uses it, \`restore_builtin\` resets it; \`duplicate\` makes a copy.
+  **Turn limits live in the loop, never in Settings.** Each AI step runs an
+  agent role with a "Maximum turns" ceiling (Core default 100 when unset).
+  \`specrails_loops(get)\` returns \`turnLimits\` (step → role → effective
+  value). Implement steps run roles plan/build/assess/correct (Architect,
+  Developer, Reviewer, Fixer), stored at \`graph.config.agents.roles.<role>.maxTurns\`.
+  To raise one: Loops ▸ the loop ▸ select the step ▸ "Maximum turns", save and
+  publish (or \`update\` + \`publish\`). Project Agent Runtime settings do not
+  change loop runs, and a failed run keeps its frozen limit: relaunch.
 - **Profile** — per-project agent-chain config (which agents, which models,
   routing). Supported by Claude and Kimi; forced to null on Codex/Gemini rails.
 - **Provider / engine** — claude, codex, gemini or kimi. A project installs one

package/server/dist/schemas/agent-runtime.schema.json

@@ -12,7 +12,7 @@
       "planning": { "enum": ["full", "proportional"] }, "acceptDeveloperChecks": { "type": "boolean" },
       "verification": { "type": "object", "additionalProperties": false, "properties": { "maxConcurrency": { "type": "integer", "minimum": 1, "maximum": 4 } } }
     } },
-    "guardrails": { "type": "object", "additionalProperties": false, "properties": { "plan-validation": { "type": "boolean" }, "genuine-blocking-question": { "type": "boolean" }, "plan-language-hint": { "type": "boolean" }, "frozen-plan-writes": { "type": "boolean" }, "primary-language": { "type": "boolean" }, "duplicate-sibling": { "type": "boolean" }, "one-test-per-module": { "type": "boolean" }, "empty-write": { "type": "boolean" }, "evidence-gated-ticking": { "type": "boolean" }, "inventory-retry": { "type": "boolean" }, "synthetic-corrections": { "type": "boolean" }, "silent-group-closure": { "type": "boolean" }, "verify-per-group": { "type": "boolean" }, "test-reachability": { "type": "boolean" }, "exit-code-honesty": { "type": "boolean" }, "environment-repair": { "type": "boolean" }, "lockfile-repair": { "type": "boolean" }, "verify-idle-timeout": { "type": "boolean" } } },
+    "guardrails": { "type": "object", "additionalProperties": false, "properties": { "plan-validation": { "type": "boolean" }, "genuine-blocking-question": { "type": "boolean" }, "plan-language-hint": { "type": "boolean" }, "frozen-plan-writes": { "type": "boolean" }, "primary-language": { "type": "boolean" }, "duplicate-sibling": { "type": "boolean" }, "one-test-per-module": { "type": "boolean" }, "empty-write": { "type": "boolean" }, "evidence-gated-ticking": { "type": "boolean" }, "inventory-retry": { "type": "boolean" }, "synthetic-corrections": { "type": "boolean" }, "silent-group-closure": { "type": "boolean" }, "verify-per-group": { "type": "boolean" }, "test-reachability": { "type": "boolean" }, "exit-code-honesty": { "type": "boolean" }, "environment-repair": { "type": "boolean" }, "lockfile-repair": { "type": "boolean" }, "verify-idle-timeout": { "type": "boolean" }, "verification-output-adoption": { "type": "boolean" } } },
     "rolePrompts": { "type": "object", "propertyNames": { "pattern": "^[a-z][a-z0-9-]{0,63}$" }, "additionalProperties": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" }, "properties": {
       "architect": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" },
       "developer": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" },