specrails-desktop 2.63.0 → 2.63.2

package/client/dist/index.html

@@ -204,7 +204,7 @@
         .specrails-splash__mark .pill { opacity: 1; }
       }
     </style>
-    <script type="module" crossorigin src="/assets/index-Culan6y7.js"></script>
+    <script type="module" crossorigin src="/assets/index-CECj3joE.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-CNC7AqOf.js">
     <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-BbYvbtY8.js">
     <link rel="modulepreload" crossorigin href="/assets/react-dom-DDD8FYaU.js">
@@ -214,7 +214,7 @@
     <link rel="modulepreload" crossorigin href="/assets/activity-DiyjsgQV.js">
     <link rel="modulepreload" crossorigin href="/assets/addspec-BOvgmcgk.js">
     <link rel="modulepreload" crossorigin href="/assets/agent-Dip4h2YE.js">
-    <link rel="modulepreload" crossorigin href="/assets/agentRuntime-C_yLPKDy.js">
+    <link rel="modulepreload" crossorigin href="/assets/agentRuntime-BxYS5V7u.js">
     <link rel="modulepreload" crossorigin href="/assets/agents-Doe1sHY5.js">
     <link rel="modulepreload" crossorigin href="/assets/agentstudio-BzugqB_N.js">
     <link rel="modulepreload" crossorigin href="/assets/aiedit-iIjz2_Qk.js">
@@ -243,16 +243,16 @@
     <link rel="modulepreload" crossorigin href="/assets/terminal-BAzpHtpY.js">
     <link rel="modulepreload" crossorigin href="/assets/tickets-D41ZMQpf.js">
     <link rel="modulepreload" crossorigin href="/assets/createLucideIcon-DtODIU64.js">
-    <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-CNOvmgTr.js">
-    <link rel="modulepreload" crossorigin href="/assets/Trans-CVSryAL1.js">
-    <link rel="modulepreload" crossorigin href="/assets/useDesktop-C5JVBeur.js">
+    <link rel="modulepreload" crossorigin href="/assets/useSharedWebSocket-CcsE5986.js">
+    <link rel="modulepreload" crossorigin href="/assets/Trans-ZiXIfj50.js">
+    <link rel="modulepreload" crossorigin href="/assets/useDesktop-C0mRIlHT.js">
     <link rel="modulepreload" crossorigin href="/assets/provider-capabilities-lePfeT_Y.js">
     <link rel="modulepreload" crossorigin href="/assets/save-LmPSfsvZ.js">
-    <link rel="modulepreload" crossorigin href="/assets/spending-BfjSJjBd.js">
+    <link rel="modulepreload" crossorigin href="/assets/spending-eWiZGhC_.js">
     <link rel="modulepreload" crossorigin href="/assets/chevron-up-6EFqEHBj.js">
     <link rel="modulepreload" crossorigin href="/assets/sparkles-CCfUdFGY.js">
     <link rel="modulepreload" crossorigin href="/assets/x-Bu7X_eR2.js">
-    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-eH_KaAZ1.js">
+    <link rel="modulepreload" crossorigin href="/assets/MinimizedChatsContext-BHIUPVmC.js">
     <link rel="modulepreload" crossorigin href="/assets/ban-wqfdzoXt.js">
     <link rel="modulepreload" crossorigin href="/assets/file-text-C0blZHLh.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-x-D2ttKotB.js">
@@ -268,23 +268,23 @@
     <link rel="modulepreload" crossorigin href="/assets/search-BDVp3fkH.js">
     <link rel="modulepreload" crossorigin href="/assets/trash-D8zYUmTg.js">
     <link rel="modulepreload" crossorigin href="/assets/triangle-alert-Cxpn8bqr.js">
-    <link rel="modulepreload" crossorigin href="/assets/jira-api-Bl8xEIpk.js">
+    <link rel="modulepreload" crossorigin href="/assets/jira-api-C_D_RDhl.js">
     <link rel="modulepreload" crossorigin href="/assets/zap-bugHyWzQ.js">
     <link rel="modulepreload" crossorigin href="/assets/clsx-CjueKrWZ.js">
     <link rel="modulepreload" crossorigin href="/assets/utils-BC4DHlz2.js">
     <link rel="modulepreload" crossorigin href="/assets/dialog-DtdR05v1.js">
     <link rel="modulepreload" crossorigin href="/assets/lib-DWJfei6y.js">
-    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-ZHg7WpdH.js">
-    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-NVM6rK3i.js">
+    <link rel="modulepreload" crossorigin href="/assets/getTimezoneOffsetInMilliseconds-62h40I4t.js">
+    <link rel="modulepreload" crossorigin href="/assets/formatDistanceToNow-CdN5lTyD.js">
     <link rel="modulepreload" crossorigin href="/assets/button-4FS1ZDTp.js">
-    <link rel="modulepreload" crossorigin href="/assets/project-repositories-CvJf1a6H.js">
-    <link rel="modulepreload" crossorigin href="/assets/RepositoryScopeSelector-BSgUqk_u.js">
-    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModalContext-BoafEcm4.js">
+    <link rel="modulepreload" crossorigin href="/assets/project-repositories-Be0CWklo.js">
+    <link rel="modulepreload" crossorigin href="/assets/RepositoryScopeSelector-DeCoUsRN.js">
+    <link rel="modulepreload" crossorigin href="/assets/TicketDetailModalContext-DiPngt2g.js">
     <link rel="modulepreload" crossorigin href="/assets/core-B3mKBIh5.js">
-    <link rel="modulepreload" crossorigin href="/assets/RepositoryDeliveries-DgzNnJmn.js">
-    <link rel="modulepreload" crossorigin href="/assets/useRuntimeRuns-DohBmeg8.js">
+    <link rel="modulepreload" crossorigin href="/assets/RepositoryDeliveries-DAIxIYsl.js">
+    <link rel="modulepreload" crossorigin href="/assets/useRuntimeRuns-B1a6GChu.js">
     <link rel="modulepreload" crossorigin href="/assets/event-Bt7f3wXe.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-D1v33giW.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-BgbCbIua.css">
   </head>
   <body>
     <div id="specrails-splash" aria-hidden="false" role="status" aria-label="Loading Specrails">

package/docs/ci-cd.md

@@ -38,7 +38,7 @@ Release admission uses the current run/attempt of the named CI workflow and the
 
 ## Native validation without publication
 
-Manually running `Desktop Release` defaults to `validation_only=true`. Select a trusted branch in this repository: admission requires successful push CI for that exact branch and SHA, and refuses evidence from another branch, a pull request or a fork. Selecting an existing matching release tag instead requires its main push CI. Validation builds retain their artifacts in GitHub Actions; macOS signing/notarization remains mandatory and the existing Windows installer signing policy is unchanged. The entire GitHub Release/Hostinger deployment job is skipped. A passing validation build does not publish a release or move an update channel.
+Manually running `Desktop Release` defaults to `validation_only=true`. Select a trusted branch in this repository: admission requires successful push CI for that exact branch and SHA, and refuses evidence from another branch, a pull request or a fork. Selecting an existing matching release tag instead requires its main push CI. Validation builds retain their artifacts in GitHub Actions; macOS signing/notarization remains mandatory and the existing Windows installer signing policy is unchanged. The entire GitHub Release publication job is skipped. A passing validation build does not publish a release or move an update channel.
 
 Both validation and release builds use `assemble-chromium.mjs --release`. On macOS, the certificate and Apple API key are imported before Chromium assembly. The assembler must sign and notarize Chromium before writing a normal `chromium.tar.gz`; missing credentials or failed verification fail the build. Windows uses the same archive format without changing the browser's Authenticode signature. The archive keeps framework symlinks intact through Tauri resource copying. Staging and packaged macOS smoke tests require Chromium signature and notarization verification as well as actual browser execution.
 
@@ -48,14 +48,13 @@ The macOS job retains `artifacts/chromium-signing/` as the `chromium-signing-mac
 
 ## Credentials and external requirements
 
-### Recover an already published Desktop download channel
+### Download channel
 
-If native builds and GitHub publication succeed but Hostinger installer uploads fail, run **Recover Desktop download channel** on `main` with the existing stable version (for example `2.54.0`). It requires successful main CI and successful native builds for that exact release commit, then streams all three published installers and verifies their sizes and GitHub SHA-256 digests. It atomically replaces only `latest/manifest.json` over verified FTPS, pointing downloads to the existing version-specific GitHub assets. It refuses version downgrades, verifies the public manifest after publication, and does not rebuild, delete installers, or alter the signed Tauri updater. Normal releases continue to use the regular distribution workflow.
+GitHub Releases is the only Desktop download channel. Each release carries the canonical installers, the Tauri updater assets and `manifest.json` (version, sha256 and size per platform, with GitHub asset URLs). The Tauri updater reads `releases/latest/download/latest.json`; specrails.dev reads the latest release through the GitHub API. Nothing is uploaded to Hostinger, so a release has no second publication step to recover.
 
 - `RELEASE_PAT` must be authorized for release-please's pull requests and releases. It also permits tag pushes to trigger publication workflows; events created with the repository's ordinary `GITHUB_TOKEN` generally do not trigger another workflow.
 - Publication uses one of two credentials. When the `NPM_TOKEN` secret is set, it must authenticate an account with publishing permission for `specrails-desktop` (npm now requires such tokens to be granular with *bypass 2FA*, and they expire within 90 days); the workflow checks authentication and gives an explicit error before publishing. When the secret is empty, the job publishes through npm **trusted publishing**: it installs npm 11, removes the empty token line that `setup-node` writes, and lets npm exchange the job's OIDC identity (`id-token: write`) for a short-lived publish grant. That path only works once the package's *Trusted publisher* on npmjs.com names this repository (`fjpulidop/specrails-desktop`) and workflow file (`npm-publish.yml`, no environment); registry configuration is never changed from here. Provenance does **not** grant publishing permission in either mode. An npm `E404` during publication is npm's answer to an unauthorized publish and does not identify which token or permission failed; an `E403` mentioning two-factor authentication means the stored token lacks *bypass 2FA*. [npm publishing and provenance](https://docs.github.com/en/actions/tutorials/publish-packages/publish-nodejs-packages).
 - Existing Apple signing/notarization and Tauri updater signing secrets remain required. Installer build steps retain their platform-specific checks.
-- Hostinger credentials must support **explicit FTPS**, a valid TLS certificate, uploads and `RNFR`/`RNTO` in the release directory. There is no plaintext FTP fallback. A failed transfer or rename fails the workflow before old files are removed. [FTP action protocol and security options](https://github.com/SamKirkland/FTP-Deploy-Action/blob/v4.3.6/action.yml).
 
 No secret, registry authorization, signing certificate, hosting permission or branch protection is configured by these source changes. Dependency installation is separated from npm publishing credentials. Candidate Core packages and publication tarballs use `--ignore-scripts` at the relevant installation/publication boundaries. [npm installation lifecycle options](https://docs.npmjs.com/cli/v11/commands/npm-ci/).
 

package/docs/getting-started.md

@@ -16,7 +16,7 @@ Two options:
 
 ### Option 1 — Desktop app (recommended)
 
-Download a signed build for your OS from `https://specrails.dev/downloads/specrails-desktop/latest/`:
+Download a signed build for your OS from the [latest GitHub Release](https://github.com/fjpulidop/specrails-desktop/releases/latest) (the **Download** button on [specrails.dev](https://specrails.dev) links the same files):
 
 - **macOS** — `specrails-desktop-<version>-aarch64.dmg` (Apple Silicon, notarised)
 - **Windows** — `specrails-desktop-<version>-x64-setup.exe` (NSIS; `-arm64-setup.exe` on ARM64)

package/docs/internals/core-runtime-updates.md

@@ -13,7 +13,7 @@ framework is rejected rather than silently replacing an update.
 
 ## Persistence and publication
 
-The release bundle pins Core 6.5.0 in `desktop-release.yml` and
+The release bundle pins Core 6.6.3 in `desktop-release.yml` and
 `scripts/assemble-bundled-core.lock.json`. Core 6 is the Desktop-only engine: it
 publishes integration contract 5.1 (no standalone `update`) and ships only the
 implement and retry workflows (Batch was folded into implement; Desktop no
@@ -27,8 +27,8 @@ dependency leaks into its tarball (today `@langchain/langgraph-sdk` ships
 module still loads while every staged path stays inside the MSI budget
 (`MAX_STAGED_RELATIVE_PATH`, 120 characters).
 
-The paired CI checkout uses the immutable Core 6.5.0 release commit
-`187f9d24533a99fb1f37c7805b3c5b1375040d25`. Bundle smoke checks use Node 22.22.3,
+The paired CI checkout uses the immutable Core 6.6.3 release commit
+`a8bc8181a206ea9630ae3b02e6198f8519d35604`. Bundle smoke checks use Node 22.22.3,
 matching Core's minimum supported Node version and the Desktop release runtime.
 
 Desktop updates retain the complete npm installation, including dependencies,

package/docs/internals/desktop-owned-workflows.md

@@ -54,6 +54,16 @@ real committed full verification and the reviewed/approved candidate before
 publishing the recoverable write set. The final host check certifies the archived
 candidate. Reviewer assertions remain AI evidence and cannot create verification.
 
+A failed archive returns to verification only when the gate reports a stale or
+unverified candidate (`unverified`/`candidate_changed`), at most twice
+(`archiveRetries`). Any other archive failure, such as OpenSpec rejecting a rebuilt
+main spec, repeats identically. Implement ends at `archive-failed` with
+the run log pointing at OpenSpec's reason, instead of looping through verification,
+review and archive until the transition budget runs out. Core's `openspec-validate`
+dry-runs the archive before the plan freezes, so most such specs return to the
+Architect with the offending requirement named. Edited built-in loops keep their
+saved graph: restore or re-edit them to pick up recipe changes.
+
 Implement checks the host candidate hash after each correction. When verification
 failed and the correction leaves that candidate unchanged, it ends unsuccessfully
 with the corrector's explanation instead of rerunning the same failed checks.

package/docs/internals/programmatic-agent-runtime.md

@@ -69,6 +69,22 @@ Desktop negotiates `runtime api` and sends configuration to `runtime validate --
    may only tighten Core's floors (70 overall, 75 security, 60 other aspects).
    Archive approval and low-confidence architect behavior are loop policies.
 
+### Turn limits
+
+Every AI step runs an agent role with a **Maximum turns** ceiling; each tool call
+counts as a turn. Unset roles use Core's default of 100. The Implement recipe runs
+roles `plan`, `build`, `assess` and `correct` (Architect, Developer, Reviewer,
+Fixer) and ships `build`/`correct` at 300. Read and set every ceiling in one place
+under the loop's **Advanced settings → Turn limits**, or per step in its agent
+panel; steps sharing a role share the value. Save and publish: a run freezes its
+limits at launch, so a failed run needs a new launch, not a resume.
+
+`GET /api/loops/:id` (and MCP `specrails_loops get`) returns `turnLimits` with each
+step's role, effective value and source (`step`, `role` or `core-default`). The run
+log prints each used role as `[runtime] build: claude/opus · max 300 turns`, and a
+turn-limit failure names the step and the field to raise. Project agent-runtime
+settings never change loop runs.
+
 Only verification is read from the project's `.specrails/agent-runtime.json` for
 new loop-owned recipes. Historical roles remain available for explicit import
 and old saved graphs. The editor never silently imports a project's settings

package/docs/internals/source-map.md

@@ -5,7 +5,7 @@ architectural dependency declaration. Search a heading or filename and read only
 the relevant source and tests. Feature prefixes group the legacy server files;
 new bounded modules live under `server/modules/`.
 
-Includes 1044 source/build files. Nearby tests are linked where names
+Includes 1046 source/build files. Nearby tests are linked where names
 match; integration suites may live elsewhere. Use `rg` to find other consumers.
 
 ## cli
@@ -384,6 +384,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [LoopMigrationPanel.tsx](../../client/src/features/loops/components/LoopMigrationPanel.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopMigrationPanel.test.tsx)
 - [LoopPreviewModal.tsx](../../client/src/features/loops/components/LoopPreviewModal.tsx)
 - [LoopRunModal.tsx](../../client/src/features/loops/components/LoopRunModal.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopRunModal.test.tsx)
+- [LoopTurnLimits.tsx](../../client/src/features/loops/components/LoopTurnLimits.tsx) · [test](../../client/src/features/loops/components/LoopTurnLimits.test.tsx)
 - [LoopWindowSurface.tsx](../../client/src/features/loops/components/LoopWindowSurface.tsx) · [test](../../client/src/features/loops/components/__tests__/LoopWindowSurface.test.tsx)
 - [TemplatePreviewModal.tsx](../../client/src/features/loops/components/TemplatePreviewModal.tsx) · [test](../../client/src/features/loops/components/__tests__/TemplatePreviewModal.test.tsx)
 
@@ -413,6 +414,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [loop-export.ts](../../client/src/features/loops/lib/loop-export.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-export.test.ts)
 - [loop-graph-rf.ts](../../client/src/features/loops/lib/loop-graph-rf.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-graph-rf.test.ts)
 - [loop-layout.ts](../../client/src/features/loops/lib/loop-layout.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-layout.test.ts)
+- [loop-role-agents.ts](../../client/src/features/loops/lib/loop-role-agents.ts)
 - [loop-run-models.ts](../../client/src/features/loops/lib/loop-run-models.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-run-models.test.ts)
 - [loop-template-filter.ts](../../client/src/features/loops/lib/loop-template-filter.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-template-filter.test.ts)
 - [loop-ticket-need.ts](../../client/src/features/loops/lib/loop-ticket-need.ts) · [test](../../client/src/features/loops/lib/__tests__/loop-ticket-need.test.ts)
@@ -852,7 +854,6 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [obfuscate-chromium.mjs](../../scripts/obfuscate-chromium.mjs)
 - [paired-core-shards.mjs](../../scripts/paired-core-shards.mjs) · [test](../../scripts/paired-core-shards.test.mjs)
 - [patch-node-pty.mjs](../../scripts/patch-node-pty.mjs) · [test](../../scripts/patch-node-pty.test.mjs)
-- [recover-desktop-channel.mjs](../../scripts/recover-desktop-channel.mjs) · [test](../../scripts/recover-desktop-channel.test.mjs)
 - [release-policy.mjs](../../scripts/release-policy.mjs) · [test](../../scripts/release-policy.test.mjs)
 - [run-native-smoke.ps1](../../scripts/run-native-smoke.ps1)
 - [sign-chromium-macos.mjs](../../scripts/sign-chromium-macos.mjs) · [test](../../scripts/sign-chromium-macos.test.mjs)
@@ -1332,6 +1333,7 @@ match; integration suites may live elsewhere. Use `rg` to find other consumers.
 - [loop-shell-invocation.ts](../../server/modules/loops/runtime/loop-shell-invocation.ts)
 - [loop-step-idle.ts](../../server/modules/loops/runtime/loop-step-idle.ts) · [test](../../server/modules/loops/runtime/loop-step-idle.test.ts)
 - [loop-templates.ts](../../server/modules/loops/runtime/loop-templates.ts) · [test](../../server/modules/loops/runtime/loop-templates.test.ts)
+- [loop-turn-limits.ts](../../server/modules/loops/runtime/loop-turn-limits.ts) · [test](../../server/modules/loops/runtime/loop-turn-limits.test.ts)
 - [loops-router.ts](../../server/modules/loops/runtime/loops-router.ts) · [test](../../server/modules/loops/runtime/loops-router.test.ts)
 - [loops-store.ts](../../server/modules/loops/runtime/loops-store.ts) · [test](../../server/modules/loops/runtime/loops-store.test.ts)
 

package/docs/platforms/macos.md

@@ -7,19 +7,19 @@
 
 ## Installation
 
-Signed, notarized builds are published on every release under:
+Signed, notarized builds are published on every release as GitHub Release assets:
 
-> 📥 `https://specrails.dev/downloads/specrails-desktop/latest/`
+> 📥 [https://github.com/fjpulidop/specrails-desktop/releases/latest](https://github.com/fjpulidop/specrails-desktop/releases/latest)
 
 - `specrails-desktop-<version>-aarch64.dmg` — the Apple Silicon installer.
 
-Versioned copies live at `downloads/specrails-desktop/v<version>/` for archival and deep-linking. A machine-readable `manifest.json` in `latest/` describes the current release (version, sha256, size) so you can verify a download:
+Every earlier version stays on its own [GitHub Release](https://github.com/fjpulidop/specrails-desktop/releases). Each release lists the sha256 of every asset and carries a machine-readable `manifest.json` (version, sha256, size) so you can verify a download:
 
 ```bash
 shasum -a 256 specrails-desktop-<version>-aarch64.dmg
 ```
 
-Compare the output against `platforms["darwin-arm64"].sha256` in `https://specrails.dev/downloads/specrails-desktop/latest/manifest.json`.
+Compare the output against `platforms["darwin-arm64"].sha256` in `https://github.com/fjpulidop/specrails-desktop/releases/latest/download/manifest.json`, or against the sha256 shown next to the asset on the release page.
 
 To install: open the `.dmg` and drag **Specrails** into `Applications/`.
 

package/docs/platforms/windows.md

@@ -11,9 +11,9 @@
 
 ## Installation
 
-Installers are published on every release under:
+Installers are published on every release as GitHub Release assets:
 
-> 📥 `https://specrails.dev/downloads/specrails-desktop/latest/`
+> 📥 [https://github.com/fjpulidop/specrails-desktop/releases/latest](https://github.com/fjpulidop/specrails-desktop/releases/latest)
 
 Pick the installer that matches your CPU architecture:
 
@@ -22,9 +22,9 @@ Pick the installer that matches your CPU architecture:
 | x64 | `specrails-desktop-<version>-x64-setup.exe` |
 | ARM64 | `specrails-desktop-<version>-arm64-setup.exe` |
 
-Windows ships only the NSIS installer. For unattended or managed deployment, run it silently with `/S` (optionally `/D=<install dir>` as the last argument). Releases up to 2.62 also published an `.msi`; see [Updates](#updates) for how those installations migrate. The installer provisions Microsoft Edge WebView2 when it is missing, downloading it through a small embedded bootstrapper (Windows 11 and current Windows 10 already include it). Versioned copies live at `downloads/specrails-desktop/v<version>/` for archival and deep-linking.
+Windows ships only the NSIS installer. For unattended or managed deployment, run it silently with `/S` (optionally `/D=<install dir>` as the last argument). Releases up to 2.62 also published an `.msi`; see [Updates](#updates) for how those installations migrate. The installer provisions Microsoft Edge WebView2 when it is missing, downloading it through a small embedded bootstrapper (Windows 11 and current Windows 10 already include it). Every earlier version stays on its own [GitHub Release](https://github.com/fjpulidop/specrails-desktop/releases).
 
-A machine-readable `manifest.json` in `latest/` describes the current release (version, sha256, size) per platform, including `windows-x64` and `windows-arm64` entries — consumers can read it to build download links without hardcoding a version.
+A machine-readable `manifest.json` asset on each release describes the current release (version, sha256, size) per platform, including `windows-x64` and `windows-arm64` entries — consumers can read it to build download links without hardcoding a version.
 
 ## SmartScreen warning
 
@@ -44,7 +44,7 @@ This warning is expected and will persist until Authenticode code signing is add
 Get-FileHash specrails-desktop-<version>-x64-setup.exe -Algorithm SHA256
 ```
 
-Compare the output against the matching architecture's `sha256` (`platforms["windows-x64"].sha256` or `platforms["windows-arm64"].sha256`) in `https://specrails.dev/downloads/specrails-desktop/latest/manifest.json`.
+Compare the output against the matching architecture's `sha256` (`platforms["windows-x64"].sha256` or `platforms["windows-arm64"].sha256`) in `https://github.com/fjpulidop/specrails-desktop/releases/latest/download/manifest.json`, or against the sha256 shown next to the asset on the release page.
 
 ## What's bundled
 

package/docs/running-pipelines.md

@@ -156,6 +156,18 @@ Visible only when [telemetry](customizing.md#telemetry) was enabled for the job.
 - `summary.md` — human-readable highlights
 - `profile.json`, `plugins.json` — exact snapshots of what ran (when present)
 
+### A run fails with `lease_lost` right after installing dependencies
+
+On Desktop versions that bundle Core 6.6.2 or older, an Implement run on a large repository could fail in the `developer` step shortly after `[environment] yarn install` (or `npm install`) with:
+
+```
+Execution lease expired or was replaced; late effects cannot commit
+```
+
+Core held an execution lease that it renews every few seconds, but it ran the dependency install synchronously. An install longer than about 45 s blocked that renewal, so the lease expired. Core 6.6.3 runs host installs asynchronously and the lease keeps renewing. Update Desktop and launch the spec again.
+
+The interrupted attempt cannot be resumed: its write step was cut off, so the runtime cannot confirm what was applied. Its isolated worktree is preserved, and you can inspect it or delete it.
+
 ## Agent profiles
 
 A **profile** is a named JSON file that bundles the agent chain + per-agent models + routing rules. Different rails can run different profiles.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.63.0",
+  "version": "2.63.2",
   "license": "MIT",
   "repository": {
     "type": "git",

package/server/dist/mcp/tools/loops.js

@@ -30,7 +30,7 @@ function loopsTools() {
                 'For a standalone ticket-less run use the run action. ' +
                 'Actions: ' +
                 'list (all saved loops), ' +
-                'get (one loop by id), ' +
+                'get (one loop by id, plus turnLimits: each AI step\'s role and effective Maximum turns — set graph.config.agents.roles.<role>.maxTurns, or agents.<role> for built-in roles, then publish; project Agent Runtime settings never change loop runs), ' +
                 'templates (built-in template catalog with graphs), ' +
                 'factory (the built-in loops — factory:implement, factory:freestyle, factory:sdd-quick-openspec — with the graph a rail launch runs; ' +
                 'built-ins are ordinary editable loops whose loopId IS the factory id: change them with update + publish and the change applies to every rail, chat launch and companion that uses that built-in), ' +

package/server/dist/modules/agent-runtime/runtime/agent-runtime-bridge.js

@@ -23,6 +23,7 @@ const agent_runtime_package_1 = require("./agent-runtime-package");
 const agent_runtime_settings_1 = require("./agent-runtime-settings");
 const core_node_runtime_1 = require("../../../core-node-runtime");
 const win_spawn_1 = require("../../../util/win-spawn");
+const loop_turn_limits_1 = require("../../loops/runtime/loop-turn-limits");
 function runtimeChangeName(runId) {
     return 'runtime-' + (0, node_crypto_1.createHash)('sha256').update(runId).digest('hex').slice(0, 20);
 }
@@ -265,9 +266,17 @@ async function runAgentRuntimeInvocation(options) {
     }
     if ((0, node_fs_1.existsSync)(frozenPath)) {
         const frozen = JSON.parse((0, node_fs_1.readFileSync)(frozenPath, 'utf8'));
-        for (const [role, assignment] of [...Object.entries(frozen.agents), ...(frozen.fixer ? [['fixer', frozen.fixer]] : [])]) {
+        // A definition names the roles its steps run (Implement: plan/build/assess/correct); list exactly those with their turn ceiling.
+        const definitionRoles = definitionEngine ? JSON.parse((0, node_fs_1.readFileSync)(definitionFile, 'utf8')).roles : undefined;
+        const used = Array.isArray(definitionRoles) ? new Set(definitionRoles.filter((role) => typeof role === 'string')) : undefined;
+        if (used?.has('developer'))
+            used.add('fixer');
+        const assignments = [...Object.entries(frozen.agents), ...(frozen.fixer ? [['fixer', frozen.fixer]] : []), ...Object.entries(frozen.roles ?? {})]
+            .filter(([role]) => used ? used.has(role) : role in frozen.agents || role === 'fixer');
+        for (const [role, assignment] of assignments) {
+            const turns = assignment.maxTurns === undefined ? `max ${loop_turn_limits_1.CORE_DEFAULT_MAX_TURNS} turns (Core default)` : `max ${assignment.maxTurns} turns`;
             try {
-                options.onLine?.(`[runtime] ${role}: ${assignment.provider}/${assignment.model ?? 'provider default'}\n`);
+                options.onLine?.(`[runtime] ${role}: ${assignment.provider}/${assignment.model ?? 'provider default'} · ${turns}\n`);
             }
             catch { /* Log observers cannot prevent execution. */ }
         }
@@ -378,7 +387,8 @@ async function runAgentRuntimeInvocation(options) {
                 const kind = payload?.type === 'step_succeeded' && payload.outcome === 'fail' ? 'verification_failed' : payload?.type;
                 const completionDetail = payload?.type === 'workflow_failed' && Array.isArray(payload.reasons)
                     ? payload.reasons.filter(reason => typeof reason === 'string' && reason.trim()).join('; ').slice(0, 4_000) : undefined;
-                const detail = payload?.error?.message ?? payload?.message ?? completionDetail;
+                const rawDetail = payload?.error?.message ?? payload?.message ?? completionDetail;
+                const detail = payload?.type === 'step_failed' && typeof rawDetail === 'string' ? (0, loop_turn_limits_1.withTurnLimitHint)(rawDetail, payload.stepId) : rawDetail;
                 const stepKey = JSON.stringify([payload?.scopeId ?? null, payload?.nodePath ?? payload?.stepId ?? null]);
                 if (payload?.type === 'step_failed' && typeof detail === 'string' && detail.trim()) {
                     stepFailures.delete(stepKey);

package/server/dist/modules/delivery/runtime/rail-isolated-launch.js

@@ -447,7 +447,7 @@ function createIsolatedRunSettlement(ports) {
                 run: a, implementationOutcome, deliveryOutcome: 'blocked',
                 initialSha: a.initialSha, finalSha: await readHeadSha(git, a.handle.worktreePath),
                 failureCode: 'settlement_interrupted',
-                failureDetail: 'Programmatic workflow needs attention. Resume it from Agent Runtime settings in its original worktree.',
+                failureDetail: 'Programmatic workflow stopped before delivery; partial changes stay in its original worktree. The run log names the failing step. A resumable step offers Resume on the job page; a raised loop limit (such as a step\'s Maximum turns) needs a new launch.',
                 safeToRelease: false,
             };
         }

package/server/dist/modules/loops/runtime/loop-implement-recipe.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.supportsHostBlockers = exports.HOST_BLOCKER_KINDS = void 0;
+exports.supportsHostBlockers = exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS = exports.HOST_BLOCKER_KINDS = void 0;
 exports.configurableImplementGraph = configurableImplementGraph;
 const agent_runtime_settings_1 = require("../../agent-runtime/runtime/agent-runtime-settings");
 const loop_agents_1 = require("./loop-agents");
@@ -12,6 +12,8 @@ const aspects = { type_correctness: 60, pattern_adherence: 60, test_coverage: 60
 const reviewPolicy = 'approved == true; issues must be empty; score >= 70; ' + Object.entries(aspects).map(([aspect, threshold]) => `${aspect} >= ${threshold}`).join('; ');
 exports.HOST_BLOCKER_KINDS = ['network', 'credential', 'environment-variable', 'toolchain', 'setup', 'environment', 'scope'];
 /** Fixer/developer structured `blocker`: the host ends the run on it instead of counting a correction round. */
+/** Write roles of a large spec routinely exceed Core's default of 100 turns (one cross-repo Developer used 113). */
+exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS = 300;
 const blocker = objectSchema({ kind: { enum: [...exports.HOST_BLOCKER_KINDS] }, command: string, cwd: string, evidence: string, requiredAction: string }, ['kind', 'requiredAction']);
 /** Host-owned environment repair and structured blockers need the paired Core generation. */
 const supportsHostBlockers = (capabilities) => capabilities?.hostBlockers === 1;
@@ -24,9 +26,9 @@ function configurableImplementGraph(capabilities) {
     const agents = (0, loop_agents_1.defaultLoopAgents)();
     agents.roles = {
         plan: { ...agents.agents.architect, access: 'read', artifacts: 'all', openspecSkill: 'openspec-ff-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'architect') },
-        build: { ...agents.agents.developer, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'developer') },
+        build: { ...agents.agents.developer, maxTurns: exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'developer') },
         assess: { ...agents.agents.reviewer, access: 'read', artifacts: 'none', openspecSkill: 'openspec-verify-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'reviewer') },
-        correct: { ...agents.fixer, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'fixer') },
+        correct: { ...agents.fixer, maxTurns: exports.IMPLEMENT_WRITE_ROLE_MAX_TURNS, access: 'write', artifacts: 'tasks-checkboxes', openspecSkill: 'openspec-apply-change', prompt: (0, agent_runtime_settings_1.inheritedRolePrompt)(agents.rolePrompts, 'fixer') },
     };
     const nodes = [{ id: 'start', type: 'start', position: { x: 0, y: 0 } }], edges = [];
     const node = (id, label, kind, params, outcomes) => {
@@ -48,7 +50,7 @@ function configurableImplementGraph(capabilities) {
     node('reset-confidence', 'Reset confidence after answer', 'assign', { set: { planInvestigated: false } }, { next: 'architect', failed: 'failed' });
     node('validate', 'Validate OpenSpec', 'openspec-validate', { change }, { pass: 'freeze', fail: 'architect', failed: 'failed' });
     node('freeze', 'Freeze approved artifacts', 'artifact-contract', { change, contractId: 'plan', action: 'freeze' }, { pass: 'initialize-corrections', fail: 'architect', failed: 'failed' });
-    node('initialize-corrections', 'Initialize automatic correction budget', 'assign', { set: { correctionAttempts: 0, correctionLimit: 3, implementationAttempts: 0, implementationLimit: 3 } }, { next: 'developer', failed: 'failed' });
+    node('initialize-corrections', 'Initialize automatic correction budget', 'assign', { set: { correctionAttempts: 0, correctionLimit: 3, implementationAttempts: 0, implementationLimit: 3, archiveRetries: 0 } }, { next: 'developer', failed: 'failed' });
     const implementation = objectSchema({ summary: string, incomplete: strings, blocker }, ['summary', 'incomplete']);
     turn('developer', 'Developer', 'build', `Implement every approved task for change ${change} using the bound official apply skill. Preserve proposal, design and specs; only tick tasks you completed. Report summary and incomplete task descriptions. If a task cannot be finished because of a host precondition or environment blocker outside this change (for example the sandbox forbids starting a local server, a credential or tool is missing), keep the work done, leave that task unchecked and return the structured blocker (kind, command, cwd, evidence, requiredAction). A failing test, a test you cannot make pass, or unexpected browser or tool behaviour is NOT a host blocker: change the test or the implementation instead. The host confirms a blocker by running its own verification before ending the run; a failure it reproduces comes back as a correction. Prior execution evidence and human answers: {{history.text}}`, implementation, 'developer-blocker', writes);
     node('developer-blocker', 'Developer reported a host blocker', 'condition', { expr: 'exists($outputs.developer.structured.blocker) && $outputs.developer.structured.blocker != null' }, { true: 'developer-blocker-kind', false: 'tasks' });
@@ -76,9 +78,14 @@ function configurableImplementGraph(capabilities) {
     node('correction-progress', 'Check correction progress', 'condition', { expr: 'exists($outputs.fixer.candidateHash) && $outputs.fixer.candidateHash != null && $outputs.fixer.candidateHash != $outputs.verify.candidateHash' }, { true: 'tasks', false: 'correction-stalled' });
     node('approve', 'Approve archive', 'approval', { reason: `Approve archiving the reviewed and verified candidate for change ${change}.`, bindCandidate: true, enabled: agents.approvalBeforeArchive === true }, { next: 'approval-policy' });
     node('approval-policy', 'Approval decision', 'condition', { expr: '$outputs.approve.response.approved == true' }, { true: 'archive', false: 'failed' });
-    node('archive', 'Archive OpenSpec', 'openspec-archive', { change, allowArchived: true, requiresVerified: true, reviewedCandidate: '{{outputs.reviewer.candidateHash}}', approvedCandidate: '{{outputs.approve.candidateHash}}' }, { next: 'verify-archive', failed: 'verify' });
+    node('archive', 'Archive OpenSpec', 'openspec-archive', { change, allowArchived: true, requiresVerified: true, reviewedCandidate: '{{outputs.reviewer.candidateHash}}', approvedCandidate: '{{outputs.approve.candidateHash}}' }, { next: 'verify-archive', failed: 'archive-retry' });
+    // Only a stale or unverified candidate is worth re-verifying before another archive attempt.
+    // An OpenSpec rejection (e.g. a requirement without SHALL/MUST) repeats identically, so it ends the run
+    // instead of cycling verify → review → archive until the transition budget runs out.
+    node('archive-retry', 'Archive needs a fresh verification', 'condition', { expr: 'exists($outputs.archive.reason) && ($outputs.archive.reason == "unverified" || $outputs.archive.reason == "candidate_changed") && $vars.archiveRetries < 2' }, { true: 'count-archive-retry', false: 'archive-failed' });
+    node('count-archive-retry', 'Count archive re-verification', 'assign', { increment: { archiveRetries: 1 } }, { next: 'verify', failed: 'failed' });
     node('verify-archive', 'Verify archived candidate', 'verify', verifyParams, verifyEnds('done', 'failed', 'host-blocked-archive'));
-    nodes.push({ id: 'done', type: 'end', position: { x: 0, y: nodes.length * 140 }, data: { outcome: 'success', requiresVerified: true } }, { id: 'failed', type: 'end', position: { x: 360, y: nodes.length * 140 }, data: { outcome: 'failure' } }, { id: 'correction-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction made no candidate changes. Host verification is valid: {{outputs.verify.valid}}. Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}` } }, { id: 'correction-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction limit reached ({{run.correctionAttempts}}/{{run.correctionLimit}}). Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}. Host verification: {{outputs.verify}}` } }, { id: 'implementation-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'The developer made no changes while approved tasks are still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'implementation-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Implementation attempt limit reached ({{run.implementationAttempts}}/{{run.implementationLimit}}) with approved tasks still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'developer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Developer reported a host blocker ({{outputs.developer.structured.blocker.kind}}): {{outputs.developer.structured.blocker.requiredAction}} Evidence: {{outputs.developer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'developer' } : {}) } }, { id: 'fixer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Fixer reported a host blocker ({{outputs.fixer.structured.blocker.kind}}): {{outputs.fixer.structured.blocker.requiredAction}} Evidence: {{outputs.fixer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'fixer' } : {}) } });
+    nodes.push({ id: 'done', type: 'end', position: { x: 0, y: nodes.length * 140 }, data: { outcome: 'success', requiresVerified: true } }, { id: 'failed', type: 'end', position: { x: 360, y: nodes.length * 140 }, data: { outcome: 'failure' } }, { id: 'archive-failed', type: 'end', position: { x: 360, y: (nodes.length + 1) * 140 }, data: { outcome: 'failure', reason: `OpenSpec could not archive change ${change}. The implementation was verified and reviewed; the archive step in the run log shows OpenSpec's reason (for example a requirement whose first body line has no SHALL or MUST). Fix the spec in the original worktree, then archive it there or relaunch.` } }, { id: 'correction-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction made no candidate changes. Host verification is valid: {{outputs.verify.valid}}. Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}` } }, { id: 'correction-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: `Automatic correction limit reached ({{run.correctionAttempts}}/{{run.correctionLimit}}). Acceptance policy: ${reviewPolicy}. Latest review findings: {{run.latestReview}}. Fixer diagnosis: {{outputs.fixer.structured.summary}}. Host verification: {{outputs.verify}}` } }, { id: 'implementation-stalled', type: 'end', position: { x: 720, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'The developer made no changes while approved tasks are still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'implementation-exhausted', type: 'end', position: { x: 1080, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Implementation attempt limit reached ({{run.implementationAttempts}}/{{run.implementationLimit}}) with approved tasks still incomplete. Incomplete: {{outputs.developer.structured.incomplete}}. Developer summary: {{outputs.developer.structured.summary}}' } }, { id: 'developer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Developer reported a host blocker ({{outputs.developer.structured.blocker.kind}}): {{outputs.developer.structured.blocker.requiredAction}} Evidence: {{outputs.developer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'developer' } : {}) } }, { id: 'fixer-blocked', type: 'end', position: { x: 1440, y: nodes.length * 140 }, data: { outcome: 'failure', reason: 'Fixer reported a host blocker ({{outputs.fixer.structured.blocker.kind}}): {{outputs.fixer.structured.blocker.requiredAction}} Evidence: {{outputs.fixer.structured.blocker.evidence}}', ...(hostBlockers ? { blockerFrom: 'fixer' } : {}) } });
     if (hostBlockers) {
         const hostBlocked = (id, source) => ({ id, type: 'end', position: { x: 1800, y: nodes.length * 140 }, data: { outcome: 'failure', blockerFrom: source, reason: `Host blocker ({{outputs.${source}.blocker.kind}}): {{outputs.${source}.blocker.reason}} Required action: {{outputs.${source}.blocker.requiredAction}}` } });
         nodes.push(hostBlocked('host-blocked', 'verify'), hostBlocked('host-blocked-archive', 'verify-archive'));

package/server/dist/modules/loops/runtime/loop-turn-limits.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CORE_DEFAULT_MAX_TURNS = void 0;
+exports.loopStepRole = loopStepRole;
+exports.loopTurnLimits = loopTurnLimits;
+exports.withTurnLimitHint = withTurnLimitHint;
+/** Core's ceiling for one role turn when the role sets no `maxTurns` (Core `cli-executor`). */
+exports.CORE_DEFAULT_MAX_TURNS = 100;
+function object(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+/** The agent role a canvas step runs, mirroring the definition compiler. */
+function loopStepRole(id, kind, params) {
+    if (kind === 'prompt')
+        return id === 'fix' ? 'fixer' : id === 'prepare' ? 'architect' : params.access === 'read' ? 'reviewer' : 'developer';
+    if ((kind === 'role-turn' || kind === 'decider') && typeof params.roleId === 'string')
+        return params.roleId;
+    if (kind === 'implementation-step' && ['architect', 'developer', 'reviewer', 'fixer'].includes(String(params.phase)))
+        return String(params.phase);
+    return undefined;
+}
+function roleEngine(agents, role) {
+    if (!agents)
+        return undefined;
+    if (role === 'fixer')
+        return agents.fixer ?? agents.agents.developer;
+    if (role === 'architect' || role === 'developer' || role === 'reviewer')
+        return agents.agents[role];
+    return agents.roles?.[role];
+}
+/** Effective per-step turn ceiling: step engine override, then the loop role, then Core's default. */
+function loopTurnLimits(graph) {
+    const agents = graph.config.agents;
+    const limits = [];
+    const visit = (body) => {
+        for (const node of body.nodes) {
+            if (node.type !== 'core')
+                continue;
+            const params = object(node.data?.params) ? node.data.params : {};
+            const role = loopStepRole(node.id, node.data?.kind, params);
+            if (!role)
+                continue;
+            const label = typeof node.data?.label === 'string' ? node.data.label : undefined;
+            const stepTurns = object(params.engine) ? params.engine.maxTurns : undefined;
+            const roleTurns = roleEngine(agents, role)?.maxTurns;
+            const [maxTurns, source] = typeof stepTurns === 'number' ? [stepTurns, 'step']
+                : typeof roleTurns === 'number' ? [roleTurns, 'role'] : [exports.CORE_DEFAULT_MAX_TURNS, 'core-default'];
+            limits.push({ stepId: node.id, ...(label ? { label } : {}), role, maxTurns, source });
+        }
+    };
+    visit(graph);
+    for (const component of Object.values(graph.components ?? {}))
+        visit(component);
+    return limits;
+}
+const TURN_LIMIT = /reached the configured limit of (\d+) turns for ([\w:-]+)/;
+/** Appends where to raise the limit to Core's turn-limit failure; other messages pass through. */
+function withTurnLimitHint(message, stepId) {
+    const match = message.match(TURN_LIMIT);
+    if (!match)
+        return message;
+    const step = stepId ? `the "${stepId}" step` : `the step that runs role "${match[2]}"`;
+    return `${message} To raise it: Loops ▸ this loop ▸ select ${step} ▸ "Maximum turns" (role "${match[2]}", currently ${match[1]}), save and publish. Project Settings do not change loop runs.`;
+}

package/server/dist/modules/loops/runtime/loops-router.js

@@ -17,6 +17,7 @@ const builtin_loops_1 = require("./builtin-loops");
 const loop_command_catalog_1 = require("./loop-command-catalog");
 const loop_constants_1 = require("./loop-constants");
 const loop_preview_1 = require("./loop-preview");
+const loop_turn_limits_1 = require("./loop-turn-limits");
 const BUILTIN_DELETE_MESSAGE = 'Built-in loops cannot be deleted. Use Restore original to reset it, or Duplicate it to keep a separate copy.';
 async function factoryCapabilities() {
     try {
@@ -281,7 +282,8 @@ function registerLoopsRoutes(router, deps) {
             res.status(404).json({ error: 'Loop not found' });
             return;
         }
-        res.json({ loop });
+        // Effective per-step turn ceilings, so readers (UI, MCP) never guess where the limit lives.
+        res.json({ loop, turnLimits: (0, loop_turn_limits_1.loopTurnLimits)(loop.graph) });
     });
     // ── Create ───────────────────────────────────────────────────────────────────
     router.post('/loops', (req, res) => {

package/server/dist/modules/missions/runtime/agent-operator-prompt.js

@@ -81,6 +81,14 @@ repository members, and runs coordinated AI coding pipelines over their selected
   (\`factory:implement\`, \`factory:freestyle\`, \`factory:sdd-quick-openspec\`)
   are editable in place: \`update\` + \`publish\` changes the built-in for every
   rail that uses it, \`restore_builtin\` resets it; \`duplicate\` makes a copy.
+  **Turn limits live in the loop, never in Settings.** Each AI step runs an
+  agent role with a "Maximum turns" ceiling (Core default 100 when unset).
+  \`specrails_loops(get)\` returns \`turnLimits\` (step → role → effective
+  value). Implement steps run roles plan/build/assess/correct (Architect,
+  Developer, Reviewer, Fixer), stored at \`graph.config.agents.roles.<role>.maxTurns\`.
+  To raise one: Loops ▸ the loop ▸ select the step ▸ "Maximum turns", save and
+  publish (or \`update\` + \`publish\`). Project Agent Runtime settings do not
+  change loop runs, and a failed run keeps its frozen limit: relaunch.
 - **Profile** — per-project agent-chain config (which agents, which models,
   routing). Supported by Claude and Kimi; forced to null on Codex/Gemini rails.
 - **Provider / engine** — claude, codex, gemini or kimi. A project installs one

package/server/dist/schemas/agent-runtime.schema.json

@@ -12,7 +12,7 @@
       "planning": { "enum": ["full", "proportional"] }, "acceptDeveloperChecks": { "type": "boolean" },
       "verification": { "type": "object", "additionalProperties": false, "properties": { "maxConcurrency": { "type": "integer", "minimum": 1, "maximum": 4 } } }
     } },
-    "guardrails": { "type": "object", "additionalProperties": false, "properties": { "plan-validation": { "type": "boolean" }, "genuine-blocking-question": { "type": "boolean" }, "plan-language-hint": { "type": "boolean" }, "frozen-plan-writes": { "type": "boolean" }, "primary-language": { "type": "boolean" }, "duplicate-sibling": { "type": "boolean" }, "one-test-per-module": { "type": "boolean" }, "empty-write": { "type": "boolean" }, "evidence-gated-ticking": { "type": "boolean" }, "inventory-retry": { "type": "boolean" }, "synthetic-corrections": { "type": "boolean" }, "silent-group-closure": { "type": "boolean" }, "verify-per-group": { "type": "boolean" }, "test-reachability": { "type": "boolean" }, "exit-code-honesty": { "type": "boolean" }, "environment-repair": { "type": "boolean" }, "lockfile-repair": { "type": "boolean" }, "verify-idle-timeout": { "type": "boolean" } } },
+    "guardrails": { "type": "object", "additionalProperties": false, "properties": { "plan-validation": { "type": "boolean" }, "genuine-blocking-question": { "type": "boolean" }, "plan-language-hint": { "type": "boolean" }, "frozen-plan-writes": { "type": "boolean" }, "primary-language": { "type": "boolean" }, "duplicate-sibling": { "type": "boolean" }, "one-test-per-module": { "type": "boolean" }, "empty-write": { "type": "boolean" }, "evidence-gated-ticking": { "type": "boolean" }, "inventory-retry": { "type": "boolean" }, "synthetic-corrections": { "type": "boolean" }, "silent-group-closure": { "type": "boolean" }, "verify-per-group": { "type": "boolean" }, "test-reachability": { "type": "boolean" }, "exit-code-honesty": { "type": "boolean" }, "environment-repair": { "type": "boolean" }, "lockfile-repair": { "type": "boolean" }, "verify-idle-timeout": { "type": "boolean" }, "verification-output-adoption": { "type": "boolean" } } },
     "rolePrompts": { "type": "object", "propertyNames": { "pattern": "^[a-z][a-z0-9-]{0,63}$" }, "additionalProperties": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" }, "properties": {
       "architect": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" },
       "developer": { "type": "string", "minLength": 1, "maxLength": 20000, "pattern": "\\S" },