specrails-desktop 2.64.1 → 2.65.0

package/server/dist/desktop-router.js

@@ -5,7 +5,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createDesktopRouter = createDesktopRouter;
 const project_settings_1 = require("./modules/project-settings");
-const http_1 = require("./modules/subscription-usage/adapters/http");
+const http_1 = require("./modules/inbox/adapters/http");
+const http_2 = require("./modules/onboarding/adapters/http");
+const providers_1 = require("./modules/onboarding/adapters/providers");
+const runtime_1 = require("./modules/onboarding/adapters/runtime");
+const catalog_1 = require("./modules/onboarding/catalog");
+const http_3 = require("./modules/subscription-usage/adapters/http");
 const runtime_role_prompts_router_1 = require("./runtime-role-prompts-router");
 const express_1 = require("express");
 const agent_runtime_settings_1 = require("./modules/agent-runtime/runtime/agent-runtime-settings");
@@ -16,12 +21,16 @@ const net_1 = __importDefault(require("net"));
 const dns_1 = __importDefault(require("dns"));
 const project_repositories_1 = require("./project-repositories");
 const desktop_db_1 = require("./desktop-db");
+const budget_storage_1 = require("./modules/execution/adapters/budget-storage");
+const budget_overview_1 = require("./modules/execution/runtime/budget-overview");
 const webhook_manager_1 = require("./webhook-manager");
 const core_update_manager_1 = require("./core-update-manager");
+const api_version_1 = require("./api-version");
+const update_channel_1 = require("./update-channel");
 const framework_reseed_1 = require("./framework-reseed");
 const specrails_tech_client_1 = require("./specrails-tech-client");
 const core_compat_1 = require("./core-compat");
-const providers_1 = require("./providers");
+const providers_2 = require("./providers");
 const provider_detection_1 = require("./provider-detection");
 const local_engine_detection_1 = require("./local-engine-detection");
 const local_adapter_registry_1 = require("./providers/local-adapter-registry");
@@ -324,7 +333,52 @@ function publicWebhook(row) {
 function createDesktopRouter(registry, broadcast, usageService) {
     const router = (0, express_1.Router)();
     if (usageService)
-        (0, http_1.registerUsageRoutes)(router, usageService);
+        (0, http_3.registerUsageRoutes)(router, usageService);
+    // "Needs you" inbox: read-only projection across projects (modules/inbox).
+    (0, http_1.registerInboxRoutes)(router, registry);
+    // Sample-project first run (modules/onboarding): create/remove the bundled
+    // sample project and report launch readiness. Registered before the
+    // `/projects` routes below; it shares their registration side effects.
+    (0, http_2.registerOnboardingRoutes)(router, {
+        samples: catalog_1.SAMPLE_CATALOG,
+        files: (0, runtime_1.createSampleFiles)(),
+        git: (0, runtime_1.createSampleGit)(),
+        specs: (0, runtime_1.createSampleSpecs)(),
+        state: (0, runtime_1.createSampleState)({
+            get: (key) => (0, desktop_db_1.getDesktopSetting)(registry.desktopDb, key),
+            set: (key, value) => (0, desktop_db_1.setDesktopSetting)(registry.desktopDb, key, value),
+        }),
+        providers: ({ refresh }) => (0, providers_1.loadPresetCandidates)(refresh),
+        projects: {
+            register: ({ path: projectPath, name }) => {
+                const canonicalPath = canonicalizePath(path_1.default.resolve(projectPath));
+                const detectedNow = (0, provider_detection_1.getDetectedIdsSync)() ?? [];
+                const providers = detectedNow.length > 0 ? [...detectedNow] : ['claude'];
+                const slug = allocateSlug(name, new Set((0, desktop_db_1.listProjects)(registry.desktopDb).map((p) => p.slug)));
+                const id = (0, crypto_1.randomUUID)();
+                const ctx = registry.addProject({ id, slug, name, path: canonicalPath, provider: providers[0], providers, repositories: [], workspacePaths: undefined });
+                broadcast({ type: 'desktop.project_added', project: ctx.project, timestamp: new Date().toISOString() });
+                // Same silent, non-blocking workspace assembly as POST /projects.
+                try {
+                    if (!(0, workspace_resolution_1.isWorkspacePopulated)((0, workspace_manager_1.workspacePathFor)(slug)))
+                        ctx.setupManager.startSilentAssemble(id, canonicalPath, slug, providers);
+                }
+                catch (err) {
+                    console.warn('[desktop] sample silent assemble launch failed (non-fatal):', err);
+                }
+                return { id, name: ctx.project.name, path: canonicalPath };
+            },
+            unregister: (projectId) => {
+                registry.removeProject(projectId);
+                broadcast({ type: 'desktop.project_removed', projectId, timestamp: new Date().toISOString() });
+            },
+            isRegistered: (projectId) => registry.getProjectRow(projectId) !== undefined,
+            get: (projectId) => {
+                const row = registry.getProjectRow(projectId);
+                return row ? { id: row.id, name: row.name, path: row.path } : null;
+            },
+        },
+    });
     // Loops (global, cross-project library) — /api/loops*. Registered here so the
     // routes live on the global `/api` router (loops are NOT project-scoped). The
     // A loop is "running" iff any project's per-project DB has an in-flight
@@ -347,7 +401,7 @@ function createDesktopRouter(registry, broadcast, usageService) {
                     continue; // legacy → migration owns it
                 const missing = detected.filter((p) => {
                     try {
-                        return (0, providers_1.hasAdapter)(p) && !fs_1.default.existsSync(path_1.default.join(workspace, (0, providers_1.getAdapter)(p).projectDirName));
+                        return (0, providers_2.hasAdapter)(p) && !fs_1.default.existsSync(path_1.default.join(workspace, (0, providers_2.getAdapter)(p).projectDirName));
                     }
                     catch {
                         return false;
@@ -411,7 +465,7 @@ function createDesktopRouter(registry, broadcast, usageService) {
         // when the endpoint is down. Their availability is the bounded HTTP probe
         // from the detection cycle (refreshed here so a first call after boot is
         // not blind); an id the snapshot does not know stays unavailable.
-        const localIds = (0, providers_1.listAdapters)().filter(local_adapter_1.isLocalAdapter).map((adapter) => adapter.id);
+        const localIds = (0, providers_2.listAdapters)().filter(local_adapter_1.isLocalAdapter).map((adapter) => adapter.id);
         if (localIds.length > 0) {
             const snapshot = await (0, provider_detection_1.getDetectionSnapshot)();
             for (const id of localIds)
@@ -425,7 +479,7 @@ function createDesktopRouter(registry, broadcast, usageService) {
             gated.gemini = false;
         const providerIssues = {};
         if (gated.kimi) {
-            const readiness = await detectProviderReadiness((0, providers_1.getAdapter)('kimi'));
+            const readiness = await detectProviderReadiness((0, providers_2.getAdapter)('kimi'));
             if (readiness.issue) {
                 gated.kimi = false;
                 providerIssues.kimi = readiness.issue;
@@ -446,13 +500,13 @@ function createDesktopRouter(registry, broadcast, usageService) {
         const tiers = ['quick'];
         if (Object.values(gated).some(Boolean))
             tiers.push('full');
-        const launchDescriptors = Object.fromEntries((0, providers_1.listAdapters)().map((adapter) => [
+        const launchDescriptors = Object.fromEntries((0, providers_2.listAdapters)().map((adapter) => [
             adapter.id,
             { command: adapter.binary, args: [] },
         ]));
         // Display names so app-level selectors (Agent composer, Builder) can label
         // a local engine with its connection label instead of its raw id.
-        const labels = Object.fromEntries((0, providers_1.listAdapters)().map((adapter) => [adapter.id, adapter.displayName]));
+        const labels = Object.fromEntries((0, providers_2.listAdapters)().map((adapter) => [adapter.id, adapter.displayName]));
         res.json({ ...gated, tiers, providerIssues, launchDescriptors, labels });
     });
     router.get('/setup-prerequisites', (req, res) => {
@@ -523,9 +577,9 @@ function createDesktopRouter(registry, broadcast, usageService) {
         // both accepted as of Stage C; future providers register one adapter
         // file and become acceptable here without further changes.
         for (const p of providers) {
-            if (!(0, providers_1.hasAdapter)(p)) {
+            if (!(0, providers_2.hasAdapter)(p)) {
                 res.status(400).json({
-                    error: `provider must be one of: ${[...(0, providers_1.listAdapters)().map((a) => a.id)].join(', ')}`,
+                    error: `provider must be one of: ${[...(0, providers_2.listAdapters)().map((a) => a.id)].join(', ')}`,
                 });
                 return;
             }
@@ -545,7 +599,7 @@ function createDesktopRouter(registry, broadcast, usageService) {
             return;
         }
         if (providers.includes('kimi')) {
-            const readiness = await detectProviderReadiness((0, providers_1.getAdapter)('kimi'));
+            const readiness = await detectProviderReadiness((0, providers_2.getAdapter)('kimi'));
             if (readiness.issue) {
                 res.status(409).json({
                     code: readiness.issue.code,
@@ -818,15 +872,19 @@ function createDesktopRouter(registry, broadcast, usageService) {
         const costAlertThresholdRaw = (0, desktop_db_1.getDesktopSetting)(registry.desktopDb, 'cost_alert_threshold_usd');
         const costAlertThresholdUsd = costAlertThresholdRaw != null ? parseFloat(costAlertThresholdRaw) : null;
         const allowSubagents = (0, desktop_db_1.getGlobalAllowSubagents)(registry.desktopDb);
-        res.json({ port: parseInt(port, 10), specrailsTechUrl, costAlertThresholdUsd, allowSubagents, subagentRuntime: (0, desktop_db_1.getGlobalSubagentRuntime)(registry.desktopDb) });
+        res.json({ port: parseInt(port, 10), specrailsTechUrl, costAlertThresholdUsd, allowSubagents, subagentRuntime: (0, desktop_db_1.getGlobalSubagentRuntime)(registry.desktopDb), updateChannel: (0, desktop_db_1.getUpdateChannel)(registry.desktopDb) });
     });
     // PUT /api/settings — update app-level settings
     router.put('/settings', (req, res) => {
-        const { port, specrailsTechUrl, costAlertThresholdUsd, allowSubagents } = req.body ?? {};
+        const { port, specrailsTechUrl, costAlertThresholdUsd, allowSubagents, updateChannel } = req.body ?? {};
         if (allowSubagents !== undefined && typeof allowSubagents !== 'boolean') {
             res.status(400).json({ error: 'allowSubagents must be a boolean' });
             return;
         }
+        if (updateChannel !== undefined && !(0, update_channel_1.isUpdateChannel)(updateChannel)) {
+            res.status(400).json({ error: 'updateChannel must be "latest" or "stable"' });
+            return;
+        }
         let subagentRuntime;
         if (req.body?.subagentRuntime !== undefined) {
             try {
@@ -877,6 +935,8 @@ function createDesktopRouter(registry, broadcast, usageService) {
             if (previous !== JSON.stringify(subagentRuntime))
                 registry.notifySettingsChanged({ projectId: null });
         }
+        if (updateChannel !== undefined)
+            (0, desktop_db_1.setUpdateChannel)(registry.desktopDb, updateChannel);
         res.json({ ok: true });
     });
     // ─── Budget routes ────────────────────────────────────────────────────────────
@@ -890,8 +950,12 @@ function createDesktopRouter(registry, broadcast, usageService) {
         const budgetUtilizationPct = desktopDailyBudgetUsd != null && desktopDailyBudgetUsd > 0 && unpricedRuns === 0
             ? (costToday / desktopDailyBudgetUsd) * 100
             : null;
+        const caps = (0, budget_storage_1.readDesktopCaps)((key) => (0, desktop_db_1.getDesktopSetting)(registry.desktopDb, key));
         res.json({
             desktopDailyBudgetUsd,
+            desktopWeeklyBudgetUsd: caps.week,
+            desktopMonthlyBudgetUsd: caps.month,
+            runCapUsd: caps.run,
             costAlertThresholdUsd,
             costToday,
             pricedRuns,
@@ -902,6 +966,22 @@ function createDesktopRouter(registry, broadcast, usageService) {
     // PATCH /api/budget — update app-level budget settings
     router.patch('/budget', (req, res) => {
         const { desktopDailyBudgetUsd, costAlertThresholdUsd } = req.body ?? {};
+        // Caps beyond the daily budget (CD5): null clears, a number > 0 sets, anything else is a 400.
+        const capFields = [['desktopWeeklyBudgetUsd', budget_storage_1.DESKTOP_CAP_KEYS.week], ['desktopMonthlyBudgetUsd', budget_storage_1.DESKTOP_CAP_KEYS.month], ['runCapUsd', budget_storage_1.DESKTOP_CAP_KEYS.run]];
+        for (const [field] of capFields) {
+            const value = (req.body ?? {})[field];
+            if (value !== undefined && value !== null && !(typeof value === 'number' && Number.isFinite(value) && value > 0)) {
+                res.status(400).json({ error: 'invalid_cap', field });
+                return;
+            }
+        }
+        for (const [field, key] of capFields) {
+            const value = (req.body ?? {})[field];
+            if (value === null)
+                registry.desktopDb.prepare('DELETE FROM desktop_settings WHERE key = ?').run(key);
+            else if (typeof value === 'number')
+                (0, desktop_db_1.setDesktopSetting)(registry.desktopDb, key, String(value));
+        }
         if (desktopDailyBudgetUsd !== undefined) {
             if (desktopDailyBudgetUsd === null) {
                 registry.desktopDb.prepare('DELETE FROM desktop_settings WHERE key = ?').run('desktop_daily_budget_usd');
@@ -920,6 +1000,23 @@ function createDesktopRouter(registry, broadcast, usageService) {
         }
         res.json({ ok: true });
     });
+    // GET /api/budget/caps — app-wide Budget panel read model: the app-wide caps
+    // with their spend (all projects combined), spend per period split by
+    // provider and the month-end projection (an estimate).
+    router.get('/budget/caps', (_req, res) => {
+        try {
+            const at = new Date();
+            res.json({
+                ...(0, budget_overview_1.readSpendOverview)(registry.listContexts().map((c) => ({ db: c.db, projectId: c.project.id })), at),
+                config: (0, budget_storage_1.readDesktopCaps)((key) => (0, desktop_db_1.getDesktopSetting)(registry.desktopDb, key)),
+                caps: registry.desktopCapStatuses(at),
+            });
+        }
+        catch (err) {
+            console.error('[desktop-router] budget caps error:', err);
+            res.status(500).json({ error: 'budget_caps_unavailable' });
+        }
+    });
     // ─── Agent routes ────────────────────────────────────────────────────────────
     // GET /api/agents — list all registered agents
     router.get('/agents', (_req, res) => {
@@ -1423,12 +1520,28 @@ function createDesktopRouter(registry, broadcast, usageService) {
         // and not members of the WsMessage union; cast at this single boundary.
         broadcast: (msg) => broadcast(msg),
         providers: () => registry.installedProvidersUnion(),
+        channel: () => (0, desktop_db_1.getUpdateChannel)(registry.desktopDb),
         reseed: version => (0, framework_reseed_1.reseedStaleWorkspaces)(registry.listContexts().map(context => ({
             id: context.project.id,
             slug: context.project.slug,
             path: context.project.path,
         })), version),
     });
+    // GET /api/meta — versions a client needs to negotiate with this server.
+    // Additive-only shape; see docs/internals/api-reference.md (versioning policy).
+    router.get('/meta', async (_req, res) => {
+        const channel = (0, desktop_db_1.getUpdateChannel)(registry.desktopDb);
+        const compat = await (0, core_compat_1.checkCoreCompat)().catch(() => null);
+        const core = coreUpdate.getStatus();
+        res.json({
+            apiVersion: api_version_1.API_VERSION,
+            appVersion: compat?.desktopVersion ?? null,
+            coreVersion: core.currentVersion ?? compat?.coreVersion ?? core.bundledVersion ?? null,
+            contractSchemaVersion: compat?.contractSchemaVersion ?? null,
+            channel,
+            updateManifestUrl: (0, update_channel_1.appUpdaterManifestUrl)(channel),
+        });
+    });
     // GET /api/core-update/status — current/bundled/latest versions, no network.
     router.get('/core-update/status', (_req, res) => {
         res.json(coreUpdate.getStatus());

package/server/dist/docs-router.js

@@ -187,9 +187,37 @@ function slugToTitle(slug) {
 function categoryLabel(slug, lang) {
     return CATEGORY_LABELS[lang]?.[slug] ?? CATEGORY_LABELS[DEFAULT_LANG]?.[slug] ?? slugToTitle(slug);
 }
+/**
+ * Headings may carry an explicit, locale-independent anchor: `## Title {#anchor}`.
+ * The anchor is a link target for in-app "Learn more" hints, never part of the
+ * visible title.
+ */
+const HEADING_ANCHOR = /\s*\{#([a-z0-9][a-z0-9-]*)\}\s*$/i;
+function stripHeadingAnchor(text) {
+    return text.replace(HEADING_ANCHOR, '').trim();
+}
 function extractTitle(content, slug) {
     const match = content.match(/^#\s+(.+)$/m);
-    return match ? match[1].trim() : slugToTitle(slug);
+    return match ? stripHeadingAnchor(match[1]) || slugToTitle(slug) : slugToTitle(slug);
+}
+/** Headings outside code fences, with their optional explicit anchors. */
+function extractHeadings(content) {
+    const out = [];
+    let fenced = false;
+    for (const line of content.split('\n')) {
+        if (/^```/.test(line))
+            fenced = !fenced;
+        if (fenced)
+            continue;
+        const m = /^(#{1,4})\s+(.+?)\s*$/.exec(line);
+        if (!m)
+            continue;
+        const anchor = HEADING_ANCHOR.exec(m[2])?.[1]?.toLowerCase() ?? null;
+        const text = stripHeadingAnchor(m[2]);
+        if (text)
+            out.push({ level: m[1].length, text, anchor });
+    }
+    return out;
 }
 /** Parse an `<order>-<slug>.md` filename into { order, slug }. */
 function parseGuideFile(file) {
@@ -202,6 +230,7 @@ function categoryRank(slug) {
     const i = CATEGORY_ORDER.indexOf(slug);
     return i === -1 ? Number.MAX_SAFE_INTEGER : i;
 }
+const MAX_SEARCH_RESULTS = 8;
 /** List the category subdirectories of a localized lang dir (existence-safe). */
 function listCategories(dir) {
     try {
@@ -314,6 +343,43 @@ function createDocsRouter() {
         const categories = guideRoot ? buildCategories(guideRoot, lang) : [];
         res.json({ categories });
     });
+    // Search the guide's page titles and headings in one language (the in-app
+    // `?` cheatsheet lists the matches next to the shortcuts). A page that is
+    // not translated falls back to English, like the index.
+    router.get('/search', (req, res) => {
+        const lang = normalizeLang(req.query.lang);
+        const query = typeof req.query.q === 'string' ? req.query.q.trim().toLocaleLowerCase(lang) : '';
+        const guideRoot = resolveGuideRoot();
+        if (!query || query.length > 80 || !guideRoot) {
+            res.json({ results: [] });
+            return;
+        }
+        const results = [];
+        for (const cat of buildCategories(guideRoot, lang)) {
+            for (const doc of cat.docs) {
+                const resolved = resolveDocFile(guideRoot, lang, cat.slug, doc.slug);
+                if (!resolved)
+                    continue;
+                let content = '';
+                try {
+                    content = fs_1.default.readFileSync(resolved.filePath, 'utf-8');
+                }
+                catch {
+                    continue;
+                }
+                const titleHit = doc.title.toLocaleLowerCase(lang).includes(query);
+                const headings = extractHeadings(content).filter((h) => h.level > 1 && h.text.toLocaleLowerCase(lang).includes(query));
+                if (titleHit) {
+                    results.push({ category: cat.slug, categoryName: cat.name, slug: doc.slug, title: doc.title, heading: null, anchor: null, rank: 0 });
+                }
+                for (const h of headings.slice(0, 3)) {
+                    results.push({ category: cat.slug, categoryName: cat.name, slug: doc.slug, title: doc.title, heading: h.text, anchor: h.anchor, rank: 1 });
+                }
+            }
+        }
+        results.sort((a, b) => a.rank - b.rank);
+        res.json({ results: results.slice(0, MAX_SEARCH_RESULTS).map(({ rank: _rank, ...rest }) => rest) });
+    });
     router.get('/:category/:slug', (req, res) => {
         const { category, slug } = req.params;
         const lang = normalizeLang(req.query.lang);

package/server/dist/feature-flags.js

@@ -9,6 +9,8 @@ exports.isReviewPacketEnabled = isReviewPacketEnabled;
 exports.areDeliveryRevisionsEnabled = areDeliveryRevisionsEnabled;
 exports.isMissionRailCardsEnabled = isMissionRailCardsEnabled;
 exports.isMissionFailureTurnEnabled = isMissionFailureTurnEnabled;
+exports.isMissionReadOnlyEnabled = isMissionReadOnlyEnabled;
+exports.isSpecTriageAutoEnabled = isSpecTriageAutoEnabled;
 function isCodeExplorerEnabled() {
     return process.env.SPECRAILS_CODE_EXPLORER !== 'false';
 }
@@ -97,3 +99,23 @@ function isMissionRailCardsEnabled() {
 function isMissionFailureTurnEnabled() {
     return isMissionRailCardsEnabled() && process.env.SPECRAILS_MISSION_FAILURE_TURN !== 'false';
 }
+/**
+ * Read-only mission agents (mission-read-only-policy). Mission turns spawn with
+ * the provider's native read-only boundary (Claude: no write/exec built-in
+ * tools; Codex: read-only sandbox; Gemini: plan mode; local engines: read-only
+ * tool set) and Core mission sessions get the matching read-only policy, while
+ * the `specrails_*` MCP tools stay callable. Default ON; set
+ * SPECRAILS_MISSION_READ_ONLY="false" to restore the previous write-capable
+ * mission argv and session policy (emergency rollback, no release needed).
+ */
+function isMissionReadOnlyEnabled() {
+    return process.env.SPECRAILS_MISSION_READ_ONLY !== 'false';
+}
+/**
+ * Spec triage (launch-triage): automatic triage of specs on create/edit.
+ * Default ON; set SPECRAILS_SPEC_TRIAGE="false" to stop the automatic triggers
+ * (on-demand `POST /tickets/:id/triage` keeps working).
+ */
+function isSpecTriageAutoEnabled() {
+    return process.env.SPECRAILS_SPEC_TRIAGE !== 'false';
+}

package/server/dist/index.js

@@ -16,6 +16,7 @@ const express_1 = __importDefault(require("express"));
 const ws_1 = require("ws");
 const project_registry_1 = require("./project-registry");
 const desktop_router_1 = require("./desktop-router");
+const api_version_1 = require("./api-version");
 const provider_detection_1 = require("./provider-detection");
 const provider_selection_1 = require("./provider-selection");
 const desktop_db_1 = require("./desktop-db");
@@ -34,11 +35,15 @@ const mobile_1 = require("./mobile");
 const mcp_1 = require("./mcp");
 const agent_chat_manager_1 = require("./modules/missions/runtime/agent-chat-manager");
 const mission_core_sessions_1 = require("./modules/missions/runtime/mission-core-sessions");
+const bindings_1 = require("./modules/flow/adapters/bindings");
+const agent_store_1 = require("./modules/agents/runtime/agent-store");
 const session_host_registry_1 = require("./modules/agent-sessions/runtime/session-host-registry");
 const http_2 = require("./modules/agent-sessions/adapters/http");
 const host_process_1 = require("./modules/agent-sessions/adapters/host-process");
 const core_sessions_availability_1 = require("./modules/agent-sessions/runtime/core-sessions-availability");
 const registry_1 = require("./providers/registry");
+const runtime_1 = require("./providers/runtime");
+const project_env_1 = require("./project-env");
 const agent_capability_1 = require("./mcp/agent-capability");
 const agent_chat_router_1 = require("./modules/missions/runtime/agent-chat-router");
 const blueprint_chat_manager_1 = require("./modules/builder/runtime/blueprint-chat-manager");
@@ -165,6 +170,7 @@ function corsMiddleware(req, res, next) {
         if (ALLOWED_ORIGIN_PATTERN.test(origin)) {
             res.setHeader('Access-Control-Allow-Origin', origin);
             res.setHeader('Vary', 'Origin');
+            res.setHeader('Access-Control-Expose-Headers', api_version_1.API_VERSION_HEADER);
         }
         else {
             // Non-localhost origin — reject with 403
@@ -182,6 +188,9 @@ function corsMiddleware(req, res, next) {
     next();
 }
 app.use(corsMiddleware);
+// Every /api response (desktop, project-scoped, auth failures, 404s) carries the
+// API contract version. Mounted before any /api router so nothing bypasses it.
+app.use('/api', api_version_1.apiVersionHeader);
 app.use('/api/host', (0, host_control_1.createHostControlRouter)({ token: hostControlToken, onShutdown: shutdown }));
 // Provider traffic uses the desktop listener as a stable relay. Mount before
 // every body parser so large/streaming request bodies and Codex event streams
@@ -481,6 +490,7 @@ app.get('/api/health', (_req, res) => {
     res.json({
         status: 'ok',
         version: PKG_VERSION,
+        apiVersion: api_version_1.API_VERSION,
         uptime: Math.floor(process.uptime()),
         projects: _getProjectCount(),
         mode: 'super',
@@ -623,20 +633,7 @@ function applyPtyWsRateLimiting(ws) {
     // Second HTTPS+WSS listener in THIS process; the main server stays loopback.
     // The control plane is desktop-only: loopback + (via /api below) requireAuth.
     // Mounted before the /api desktop router so its sub-path is unambiguous.
-    const mobileGateway = new mobile_1.MobileGateway({
-        desktopDb: registry.desktopDb,
-        desktopPort: port,
-        broadcast,
-        // Companion app preview: each project's browser + the process-log targets.
-        preview: {
-            enabled: () => BROWSER_CAPTURE_ENABLED,
-            browserFor: (projectId) => registry.getContext(projectId)?.browserCaptureManager ?? null,
-            allBrowsers: () => registry.listProjects()
-                .map((project) => registry.getContext(project.id)?.browserCaptureManager)
-                .filter((manager) => manager != null),
-            targets: registry.previewTargets,
-        },
-    });
+    const mobileGateway = new mobile_1.MobileGateway({ desktopDb: registry.desktopDb, desktopPort: port, broadcast });
     _mobileGateway = mobileGateway;
     app.use('/api/mobile', auth_1.requireLoopback, (0, mobile_1.createMobileAdminRouter)({
         gateway: mobileGateway,
@@ -681,7 +678,15 @@ function applyPtyWsRateLimiting(ws) {
     // project scope; missions use it when SPECRAILS_CORE_SESSIONS allows and the
     // selected Core advertises `sessions`. Otherwise missions keep legacy runners.
     const sessionHosts = new session_host_registry_1.SessionHostRegistry({
-        launcher: new host_process_1.CoreHostLauncher({ host: { name: 'specrails-desktop', version: process.env.npm_package_version ?? 'unknown' } }),
+        launcher: new host_process_1.CoreHostLauncher({
+            host: { name: 'specrails-desktop', version: process.env.npm_package_version ?? 'unknown' },
+            // A project scope's host follows that project's agent environment mode
+            // (Core may launch any configured provider, so every adapter's names pass).
+            env: (scope) => {
+                const context = registry.listContexts().find(item => item.project.slug === scope);
+                return (0, project_env_1.projectAgentSourceEnv)(context?.db, (0, runtime_1.providerEnvAllowlist)((0, registry_1.listAdapters)()));
+            },
+        }),
         clock: { now: () => Date.now(), after: (ms, callback) => { const timer = setTimeout(callback, ms); timer.unref?.(); return { cancel: () => clearTimeout(timer) }; } },
         onStatus: (scope, status, detail, code) => {
             console.log(`[agent-sessions] ${scope}: ${status}${detail ? ` (${detail})` : ''}`);
@@ -717,8 +722,18 @@ function applyPtyWsRateLimiting(ws) {
             const context = registry.getContext(conversation.pinned_project_id);
             return context ? (0, sqlite_1.getProjectSettings)(context.db).subagentRuntime : null;
         },
+        // Agent actions audit: mission tool calls land in the pinned project's log.
+        agentAudit: (projectId) => registry.getContext(projectId)?.agentAudit?.recorder ?? null,
     });
     agentChatManager.setCoreSessions(missionCoreSessions);
+    agentChatManager.setAgentAudit((projectId) => registry.getContext(projectId)?.agentAudit?.recorder ?? null);
+    // Flow mode: an active Flow turns a mission turn into a Flow turn. Missions
+    // see only this port; the Flow state lives in each project's database.
+    agentChatManager.setFlowTurnContext((0, bindings_1.createFlowTurnContext)({
+        conversationProject: (conversationId) => (0, agent_store_1.getAgentConversation)(registry.desktopDb, conversationId)?.pinned_project_id ?? null,
+        flowServiceFor: (projectId) => registry.getContext(projectId)?.flow ?? null,
+        availability: () => (0, core_sessions_availability_1.flowAvailability)(),
+    }));
     registry.onSettingsChanged((scope) => { void missionCoreSessions.refreshSubagentPolicy(scope); });
     registry.onProjectRemoved(({ slug }) => { void sessionHosts.stop(slug); });
     // Publish the instance to the process-wide registry so the rails layer can

package/server/dist/jira/jira-adf.js

@@ -6,9 +6,10 @@
 // single internal "text" model and render it to either format at the client
 // boundary (see jira-client.ts `bodyForDeployment`).
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SPECRAILS_COMMENT_PROP_KEY = void 0;
+exports.SPECRAILS_ISSUE_CREATE_PROP_KEY = exports.SPECRAILS_COMMENT_PROP_KEY = void 0;
 exports.textToAdf = textToAdf;
 exports.bodyForDeployment = bodyForDeployment;
+exports.issueCreateMarker = issueCreateMarker;
 exports.commentMarker = commentMarker;
 exports.discardCommentMarker = discardCommentMarker;
 exports.prMergedCommentMarker = prMergedCommentMarker;
@@ -220,6 +221,17 @@ function bodyForDeployment(text, deployment) {
  * both Cloud (v3) and Data Center (v2).
  */
 exports.SPECRAILS_COMMENT_PROP_KEY = 'sh.specrails.marker';
+/**
+ * Jira ISSUE-property key carrying the creation marker of an issue Specrails
+ * created from a local ticket. Entity properties never render, so the marker is
+ * invisible; it lets a retried durable `create` recover an issue whose create
+ * response was lost instead of creating a duplicate.
+ */
+exports.SPECRAILS_ISSUE_CREATE_PROP_KEY = 'sh.specrails.created-from';
+/** Stable creation marker for (project, local ticket). */
+function issueCreateMarker(projectId, localTicketId) {
+    return `[specrails:project=${projectId}:ticket=${localTicketId}]`;
+}
 /**
  * Deterministic idempotency marker. Jira has no native comment idempotency, so
  * before re-posting on retry we GET the issue comments and skip if one already