specrails-desktop 2.64.2 → 2.65.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.64.2",
+  "version": "2.65.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -51,6 +51,7 @@
     "ci": "npm run typecheck && npm run check-core-compat && npm run test:scripts && npm run test:coverage && npm run test:coverage --prefix client && npm run build && npm run check:package",
     "audit:source": "node scripts/audit-source.mjs",
     "docs:source-map": "node scripts/generate-source-map.mjs",
+    "metrics:baseline": "node scripts/metrics-baseline.mjs",
     "audit:architecture": "node scripts/audit-server-modules.mjs --check && node scripts/audit-client-features.mjs --check"
   },
   "dependencies": {
@@ -61,22 +62,22 @@
     "chokidar": "^5.0.0",
     "cross-spawn": "^7.0.6",
     "diff": "^9.0.0",
-    "express": "^5.2.1",
-    "js-yaml": "4.3.2",
+    "express": "^5.3.0",
+    "js-yaml": "5.5.0",
     "multer": "^2.2.0",
     "node-pty": "^1.0.0",
     "pdf-parse": "^2.4.5",
-    "playwright": "^1.60.0",
-    "read-excel-file": "^9.0.6",
+    "playwright": "^1.64.1",
+    "read-excel-file": "^9.3.12",
     "selfsigned": "^5.5.0",
     "tree-kill": "^1.2.2",
     "werift": "^0.23.0",
     "ws": "^8.22.0",
-    "zod": "^3.25.76"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@babel/parser": "^7.29.9",
-    "@tauri-apps/cli": "^2.0.0",
+    "@babel/parser": "^8.0.7",
+    "@tauri-apps/cli": "^2.12.3",
     "@types/better-sqlite3": "^7.6.0",
     "@types/cross-spawn": "^6.0.6",
     "@types/express": "^5.0.6",
@@ -87,7 +88,7 @@
     "@types/supertest": "^7.2.0",
     "@types/ws": "^8.5.0",
     "@vitest/coverage-v8": "^5.0.3",
-    "concurrently": "^9.2.1",
+    "concurrently": "^10.0.6",
     "esbuild": "^0.28.1",
     "supertest": "^7.2.2",
     "tsx": "^4.23.0",

package/server/dist/agent-mcp-config.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.GEMINI_PLAN_MCP_POLICY_FILE = void 0;
 exports.resolveBridgeScript = resolveBridgeScript;
 exports.resolveNodeCommand = resolveNodeCommand;
 exports.buildSpecrailsMcpEntry = buildSpecrailsMcpEntry;
@@ -12,6 +13,7 @@ exports.prepareAgentMcpSpec = prepareAgentMcpSpec;
 exports.rotateAgentSessionCapability = rotateAgentSessionCapability;
 exports.removeAgentCapabilityFile = removeAgentCapabilityFile;
 exports.prepareAgentMcp = prepareAgentMcp;
+exports.writeGeminiPlanMcpPolicy = writeGeminiPlanMcpPolicy;
 exports.syncExternalServersIntoJsonFile = syncExternalServersIntoJsonFile;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
@@ -378,10 +380,44 @@ function prepareAgentMcp(opts) {
         // via env — the same pattern every other gemini spawn path already uses
         // (chat-manager / queue-manager / cli-prompt). Verified empirically against
         // gemini-cli 0.49.0 (see docs/internals note on FQN tool prefixing).
-        return { extraArgs: [], env: { GEMINI_CLI_TRUST_WORKSPACE: 'true' } };
+        // Read-only missions run in Gemini's native plan mode, which removes every
+        // MCP tool from the session. A plan-mode-scoped policy allows exactly the
+        // servers registered above (verified on gemini-cli 0.49.0); every built-in
+        // write/shell tool stays denied by plan mode itself.
+        const extraArgs = opts.readOnly
+            ? ['--policy', writeGeminiPlanMcpPolicy(path_1.default.dirname(file), ['specrails', ...external.map((server) => server.name)])]
+            : [];
+        return { extraArgs, env: { GEMINI_CLI_TRUST_WORKSPACE: 'true' } };
     }
     return { extraArgs: [], env: {} };
 }
+/** Names Gemini's policy engine can match without TOML escaping concerns. */
+const GEMINI_POLICY_SERVER_NAME = /^[A-Za-z0-9_-]{1,64}$/;
+exports.GEMINI_PLAN_MCP_POLICY_FILE = 'specrails-plan-mcp-policy.toml';
+/**
+ * Write the plan-mode policy that keeps the named MCP servers callable in a
+ * read-only Gemini turn. Rules apply only in plan mode (`modes = ["plan"]`), at
+ * user tier, so they cannot widen a default/yolo session. Returns the file path.
+ */
+function writeGeminiPlanMcpPolicy(dir, serverNames) {
+    const names = [...new Set(serverNames)].filter((name) => GEMINI_POLICY_SERVER_NAME.test(name));
+    const rules = names.map((name) => [
+        '[[rule]]',
+        'toolName = "*"',
+        `mcpName = ${JSON.stringify(name)}`,
+        'decision = "allow"',
+        'priority = 100',
+        'modes = ["plan"]',
+    ].join('\n'));
+    const file = path_1.default.join(dir, exports.GEMINI_PLAN_MCP_POLICY_FILE);
+    fs_1.default.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    fs_1.default.writeFileSync(file, `# Written by Specrails for read-only missions. Plan mode only.\n${rules.join('\n\n')}\n`, { mode: 0o600 });
+    try {
+        fs_1.default.chmodSync(file, 0o600);
+    }
+    catch { /* best-effort */ }
+    return file;
+}
 /** Merge `mcpServers.specrails` into a JSON config file (read-if-exists,
  *  preserve every other key, corrupt file → start fresh, chmod 600). Shape is
  *  shared by claude-style `.mcp.json` and gemini `.gemini/settings.json` —

package/server/dist/api-version.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.API_VERSION_HEADER = exports.API_VERSION = void 0;
+exports.apiVersionHeader = apiVersionHeader;
+/**
+ * Version of the local HTTP API contract (`/api/**`).
+ *
+ * Bump ONLY on a breaking change (a removed route or field, or a changed
+ * meaning). Additive changes keep the version. Deprecated routes/fields are
+ * announced in CHANGELOG under "Deprecations" and kept for at least two minor
+ * releases — see docs/internals/api-reference.md#versioning-and-deprecation-policy.
+ */
+exports.API_VERSION = 1;
+exports.API_VERSION_HEADER = 'X-Specrails-Api-Version';
+/** Stamps every `/api` response (including errors and auth rejections). */
+function apiVersionHeader(_req, res, next) {
+    res.setHeader(exports.API_VERSION_HEADER, String(exports.API_VERSION));
+    next();
+}

package/server/dist/command-resolver.js

@@ -32,7 +32,8 @@ Use this draft schema. Omit fields you do not want to update:
 \`\`\`spec-draft
 {
   "title": "Concise, action-oriented title",
-  "description": "## Problem Statement\\n2-3 sentences.\\n\\n## Proposed Solution\\n3-5 sentences.\\n\\n## Out of Scope\\n- bullet\\n\\n## Technical Considerations\\n- bullet\\n\\n## Estimated Complexity\\nMedium - one sentence justification.",
+  "description": "## Problem Statement\\n2-3 sentences.\\n\\n## Proposed Solution\\n3-5 sentences.\\n\\n## Technical Considerations\\n- bullet\\n\\n## Estimated Complexity\\nMedium - one sentence justification.",
+  "nonGoals": ["What this spec deliberately does NOT change or deliver"],
   "labels": ["short-label"],
   "priority": "low | medium | high | critical",
   "acceptanceCriteria": ["Short, testable criterion"],
@@ -44,7 +45,8 @@ Use this draft schema. Omit fields you do not want to update:
 Rules:
 - Ask only the clarifying questions genuinely needed to make the spec concrete.
 - Keep visible replies brief.
-- Set \`ready: true\` only when the draft has a title, description, acceptance criteria, and no outstanding clarifying question.
+- \`nonGoals\` lists 1-5 things the spec deliberately leaves out (shown as \"Out of scope\" under the description); keep them out of \`description\`.
+- Set \`ready: true\` only when the draft has a title, description, acceptance criteria, at least one non-goal, and no outstanding clarifying question.
 - Never call \`/specrails:propose-spec\`, \`/specrails:implement\`, or any slash command with side effects.
 
 The user's idea follows below. Begin the Explore Spec conversation.

package/server/dist/core-compat.js

@@ -21,7 +21,7 @@ const core_runtime_1 = require("./core-runtime");
 // Windows has no `which`; probe PATH via `where` instead.
 const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
 /** Paired development target; older supported contracts (5.1) remain compatible. */
-exports.EXPECTED_CORE_CONTRACT_SCHEMA_VERSION = '5.2';
+exports.EXPECTED_CORE_CONTRACT_SCHEMA_VERSION = '5.9';
 // These must mirror KNOWN_VERBS in cli/specrails-desktop.ts
 const DESKTOP_KNOWN_COMMANDS = new Set([
     'implement',

package/server/dist/core-execution.js

@@ -70,7 +70,8 @@ function prepareCoreExecution(input) {
     };
     const repositories = manifest
         ? manifest.repositories.map(repo => scoped({ id: repo.repositoryId, name: repo.name, path: (0, node_fs_1.realpathSync)(repo.worktreePath), baseSha: repo.baseSha }, repo.workspacePath ?? repo.sourcePath, repo.workspacePaths, repo.selectedWorkspacePaths))
-        : [scoped({ id: run.repositoryId ?? (run.spec?.repositoryIds?.length === 1 ? run.spec.repositoryIds[0] : run.projectId ? `primary-${run.projectId}` : 'primary'), name: (0, node_path_1.basename)(input.repoDir ?? cwd), path: (0, node_fs_1.realpathSync)(input.repoDir ?? cwd) }, input.sourcePath, input.workspacePaths, input.selectedWorkspacePaths)];
+        : [scoped({ id: run.repositoryId ?? (run.spec?.repositoryIds?.length === 1 ? run.spec.repositoryIds[0] : run.projectId ? `primary-${run.projectId}` : 'primary'), name: (0, node_path_1.basename)(input.repoDir ?? cwd), path: (0, node_fs_1.realpathSync)(input.repoDir ?? cwd),
+                ...(input.repositoryBaseSha && /^[a-f0-9]{40,64}$/.test(input.repositoryBaseSha) ? { baseSha: input.repositoryBaseSha } : {}) }, input.sourcePath, input.workspacePaths, input.selectedWorkspacePaths)];
     if (!repositories.length || repositories.some(repo => !SAFE_ID.test(repo.id)))
         throw new Error('Invalid Core repository scope');
     const artifactRepositoryId = manifest?.artifactRepositoryId ?? repositories[0].id;

package/server/dist/core-update-manager.js

@@ -4,6 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CoreUpdateManager = exports.CORE_PACKAGE = void 0;
+exports.coreDistTagFor = coreDistTagFor;
+exports.fetchChannelFromRegistry = fetchChannelFromRegistry;
 const child_process_1 = require("child_process");
 const fs_1 = __importDefault(require("fs"));
 const os_1 = __importDefault(require("os"));
@@ -15,12 +17,13 @@ const bundled_core_1 = require("./bundled-core");
 const core_runtime_1 = require("./core-runtime");
 const core_package_1 = require("./core-package");
 const artifact_registry_1 = require("./artifact-registry");
+const update_channel_1 = require("./update-channel");
 /** Voluntary Core updates retain the complete npm package and dependencies,
  * publish its framework, then await every project refresh. Partial refreshes
  * remain explicitly pending across restart and can retry without the network.
  * Older packages/frameworks remain available for diagnosis and recovery. */
 exports.CORE_PACKAGE = 'specrails-core';
-const REGISTRY_URL = `https://registry.npmjs.org/${exports.CORE_PACKAGE}/latest`;
+const REGISTRY_BASE = `https://registry.npmjs.org/${exports.CORE_PACKAGE}`;
 const CHECK_TIMEOUT_MS = 10_000;
 const INSTALL_TIMEOUT_MS = 180_000;
 class CoreUpdateManager {
@@ -28,9 +31,13 @@ class CoreUpdateManager {
     broadcast;
     providersFn;
     fetchLatestFn;
+    channelFn;
     npmInstallFn;
     makeFrameworkFn;
     latestVersion = null;
+    /** Channel the cached `latestVersion` was resolved for (legacy caches: latest). */
+    latestChannel = update_channel_1.DEFAULT_UPDATE_CHANNEL;
+    latestDistTag = null;
     lastCheckedAt = null;
     updating = false;
     pendingVersion = null;
@@ -40,7 +47,8 @@ class CoreUpdateManager {
         this.home = opts.home;
         this.broadcast = opts.broadcast;
         this.providersFn = opts.providers ?? (() => ['claude']);
-        this.fetchLatestFn = opts.fetchLatest ?? (() => fetchLatestFromRegistry());
+        this.fetchLatestFn = opts.fetchLatest ?? ((channel) => fetchChannelFromRegistry(channel));
+        this.channelFn = opts.channel ?? (() => update_channel_1.DEFAULT_UPDATE_CHANNEL);
         this.npmInstallFn = opts.npmInstall ?? defaultNpmInstall;
         this.makeFrameworkFn =
             opts.makeFramework ??
@@ -51,6 +59,8 @@ class CoreUpdateManager {
             if (typeof cached.latestVersion === 'string' && (0, semver_lite_1.isValidVersion)(cached.latestVersion) && Number.isFinite(cached.lastCheckedAt)) {
                 this.latestVersion = cached.latestVersion;
                 this.lastCheckedAt = cached.lastCheckedAt;
+                this.latestChannel = (0, update_channel_1.isUpdateChannel)(cached.channel) ? cached.channel : update_channel_1.DEFAULT_UPDATE_CHANNEL;
+                this.latestDistTag = cached.distTag === 'stable' || cached.distTag === 'latest' ? cached.distTag : this.latestChannel;
             }
             if (typeof cached.pendingVersion === 'string' && (0, semver_lite_1.isValidVersion)(cached.pendingVersion)) {
                 this.pendingVersion = cached.pendingVersion;
@@ -63,22 +73,38 @@ class CoreUpdateManager {
     isAvailable() {
         return (0, core_runtime_1.getCoreRuntimeStatus)(this.home).runtime !== null || (0, framework_manager_1.readCurrentFrameworkVersion)(this.home) !== null;
     }
+    currentChannel() {
+        try {
+            const channel = this.channelFn();
+            return (0, update_channel_1.isUpdateChannel)(channel) ? channel : update_channel_1.DEFAULT_UPDATE_CHANNEL;
+        }
+        catch {
+            return update_channel_1.DEFAULT_UPDATE_CHANNEL;
+        }
+    }
+    /** Cached target for the CURRENT channel; a check made for another channel never offers its version. */
+    channelLatest() {
+        return this.latestChannel === this.currentChannel() ? this.latestVersion : null;
+    }
     /** Current status — no network (uses the cached latest from the last check). */
     getStatus() {
+        const channel = this.currentChannel();
+        const latestVersion = this.channelLatest();
+        const resolvedDistTag = latestVersion === null ? null : this.latestDistTag;
         const selected = (0, core_runtime_1.getCoreRuntimeStatus)(this.home);
         const bundledVersion = (0, bundled_core_1.getBundledCoreVersion)();
         const frameworkVersion = (0, framework_manager_1.readCurrentFrameworkVersion)(this.home);
         const currentVersion = frameworkVersion ?? selected.runtime?.version ?? null;
         const updateAvailable = this.pendingVersion !== null ||
-            this.latestVersion != null &&
+            latestVersion != null &&
                 currentVersion != null &&
-                ((0, semver_lite_1.isNewer)(this.latestVersion, currentVersion) || selected.error !== null && this.latestVersion === currentVersion) &&
-                (0, core_package_1.isSupportedCoreVersion)(this.latestVersion);
+                ((0, semver_lite_1.isNewer)(latestVersion, currentVersion) || selected.error !== null && latestVersion === currentVersion) &&
+                (0, core_package_1.isSupportedCoreVersion)(latestVersion);
         return {
             available: this.isAvailable(),
             currentVersion,
             bundledVersion,
-            latestVersion: this.latestVersion,
+            latestVersion,
             updateAvailable,
             updating: this.updating,
             lastCheckedAt: this.lastCheckedAt,
@@ -88,15 +114,23 @@ class CoreUpdateManager {
             runtimeError: selected.error,
             pendingVersion: this.pendingVersion,
             migrationError: this.migrationError,
+            channel,
+            resolvedDistTag,
+            channelFallback: channel === 'stable' && resolvedDistTag === 'latest',
         };
     }
-    /** Hit npm for the latest published version, cache it, return refreshed status. */
+    /** Hit npm for the selected channel's dist-tag, cache it, return refreshed status. */
     async checkForUpdate() {
-        const latest = await this.fetchLatestFn();
+        const channel = this.currentChannel();
+        const fetched = await this.fetchLatestFn(channel);
+        const release = typeof fetched === 'string' ? { version: fetched, distTag: 'latest' } : fetched;
+        const latest = release.version;
         if (!(0, semver_lite_1.isValidVersion)(latest)) {
             throw new Error(`core-update: npm returned an unparseable version "${latest}"`);
         }
         this.latestVersion = latest.trim().replace(/^[v=]+/, '');
+        this.latestChannel = channel;
+        this.latestDistTag = release.distTag === 'stable' ? 'stable' : 'latest';
         this.lastCheckedAt = Date.now();
         this.persistStatus();
         return this.getStatus();
@@ -114,7 +148,7 @@ class CoreUpdateManager {
         if (!this.isAvailable()) {
             return { ok: false, error: 'Core updates are unavailable in this build.' };
         }
-        const requested = (targetVersion ?? this.pendingVersion ?? this.latestVersion ?? '').trim().replace(/^[v=]+/, '');
+        const requested = (targetVersion ?? this.pendingVersion ?? this.channelLatest() ?? '').trim().replace(/^[v=]+/, '');
         if (!requested || !(0, semver_lite_1.isValidVersion)(requested)) {
             return { ok: false, error: 'No valid target version to update to. Check for updates first.' };
         }
@@ -270,7 +304,7 @@ class CoreUpdateManager {
         try {
             const root = (0, core_runtime_1.managedCoreRoot)(this.home);
             fs_1.default.mkdirSync(root, { recursive: true, mode: 0o700 });
-            (0, artifact_registry_1.atomicWrite)(path_1.default.join(root, 'update-status.json'), JSON.stringify({ latestVersion: this.latestVersion, lastCheckedAt: this.lastCheckedAt, pendingVersion: this.pendingVersion, migrationError: this.migrationError }));
+            (0, artifact_registry_1.atomicWrite)(path_1.default.join(root, 'update-status.json'), JSON.stringify({ latestVersion: this.latestVersion, channel: this.latestChannel, distTag: this.latestDistTag, lastCheckedAt: this.lastCheckedAt, pendingVersion: this.pendingVersion, migrationError: this.migrationError }));
         }
         catch (error) {
             if (required)
@@ -305,15 +339,39 @@ function realTmpDir() {
         return dir;
     }
 }
-/** GET the latest published version from the npm registry (no npm binary needed). */
-async function fetchLatestFromRegistry() {
+/** npm dist-tag a channel reads. Exported for tests and docs parity. */
+function coreDistTagFor(channel) {
+    return channel === 'stable' ? 'stable' : 'latest';
+}
+/**
+ * Resolve a channel against the npm registry (no npm binary needed). `stable`
+ * reads the `stable` dist-tag; only a 404 for that tag (Core has not published
+ * one yet) falls back to `latest`, reported as `distTag: 'latest'`. Any other
+ * failure fails the check instead of silently changing channel.
+ */
+async function fetchChannelFromRegistry(channel, fetchImpl = fetch) {
+    const distTag = coreDistTagFor(channel);
+    const version = await fetchDistTag(distTag, fetchImpl);
+    if (version !== null)
+        return { version, distTag };
+    if (distTag === 'latest')
+        throw new Error('npm registry returned 404');
+    const fallback = await fetchDistTag('latest', fetchImpl);
+    if (fallback === null)
+        throw new Error('npm registry returned 404');
+    return { version: fallback, distTag: 'latest' };
+}
+/** Version for a dist-tag, or null when the registry has no such tag (404). */
+async function fetchDistTag(distTag, fetchImpl) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), CHECK_TIMEOUT_MS);
     try {
-        const res = await fetch(REGISTRY_URL, {
+        const res = await fetchImpl(`${REGISTRY_BASE}/${distTag}`, {
             signal: controller.signal,
             headers: { accept: 'application/json' },
         });
+        if (res.status === 404)
+            return null;
         if (!res.ok) {
             throw new Error(`npm registry returned ${res.status}`);
         }

package/server/dist/db/job-search.js

@@ -0,0 +1,248 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JOB_SEARCH_MAX_LIMIT = exports.JOB_SEARCH_DEFAULT_LIMIT = exports.JOB_SEARCH_BACKFILL_JOBS = exports.JOB_SEARCH_MAX_DOCS = exports.JOB_SEARCH_MAX_PHASES = exports.JOB_SEARCH_MAX_TEXT = void 0;
+exports.createJobSearchSchema = createJobSearchSchema;
+exports.pruneJobSearch = pruneJobSearch;
+exports.indexJob = indexJob;
+exports.indexJobPhase = indexJobPhase;
+exports.safeIndexJob = safeIndexJob;
+exports.safeIndexJobPhase = safeIndexJobPhase;
+exports.safeRemoveJobSearch = safeRemoveJobSearch;
+exports.rebuildJobSearchIndex = rebuildJobSearchIndex;
+exports.searchJobs = searchJobs;
+const search_snippet_1 = require("../util/search-snippet");
+/** Longest text kept per document. */
+exports.JOB_SEARCH_MAX_TEXT = 300;
+/** Phase documents kept per job. */
+exports.JOB_SEARCH_MAX_PHASES = 30;
+/** Documents kept per project; beyond it the oldest tenth is dropped. */
+exports.JOB_SEARCH_MAX_DOCS = 30_000;
+/** Jobs the backfill indexes (newest first). */
+exports.JOB_SEARCH_BACKFILL_JOBS = 5_000;
+exports.JOB_SEARCH_DEFAULT_LIMIT = 8;
+exports.JOB_SEARCH_MAX_LIMIT = 30;
+function createJobSearchSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS job_search_docs (
+      id     INTEGER PRIMARY KEY AUTOINCREMENT,
+      job_id TEXT NOT NULL,
+      field  TEXT NOT NULL,
+      text   TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_job_search_docs_job ON job_search_docs(job_id);
+    CREATE VIRTUAL TABLE IF NOT EXISTS job_search_fts USING fts5(
+      text,
+      content='job_search_docs',
+      content_rowid='id',
+      tokenize='trigram remove_diacritics 1'
+    );
+    CREATE TRIGGER IF NOT EXISTS job_search_docs_ai AFTER INSERT ON job_search_docs BEGIN
+      INSERT INTO job_search_fts(rowid, text) VALUES (new.id, new.text);
+    END;
+    CREATE TRIGGER IF NOT EXISTS job_search_docs_ad AFTER DELETE ON job_search_docs BEGIN
+      INSERT INTO job_search_fts(job_search_fts, rowid, text) VALUES ('delete', old.id, old.text);
+    END;
+    CREATE TRIGGER IF NOT EXISTS job_search_docs_au AFTER UPDATE ON job_search_docs BEGIN
+      INSERT INTO job_search_fts(job_search_fts, rowid, text) VALUES ('delete', old.id, old.text);
+      INSERT INTO job_search_fts(rowid, text) VALUES (new.id, new.text);
+    END;
+  `);
+}
+function clip(value) {
+    if (typeof value !== 'string')
+        return null;
+    const flat = value.replace(/\s+/g, ' ').trim();
+    if (!flat)
+        return null;
+    return flat.length > exports.JOB_SEARCH_MAX_TEXT ? `${flat.slice(0, exports.JOB_SEARCH_MAX_TEXT - 1)}…` : flat;
+}
+function diagnosisDocs(raw) {
+    if (typeof raw !== 'string' || !raw)
+        return [];
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return [];
+    const d = parsed;
+    const docs = [];
+    const kind = clip(typeof d.kind === 'string' ? d.kind.replace(/_/g, ' ') : null);
+    if (kind)
+        docs.push(['failure', kind]);
+    const phase = clip(d.phase);
+    if (phase)
+        docs.push(['phase', phase]);
+    const detail = clip(d.detail);
+    if (detail)
+        docs.push(['detail', detail]);
+    const blocker = d.blocker;
+    if (blocker && typeof blocker === 'object') {
+        const b = blocker;
+        const reason = clip(b.reason);
+        if (reason)
+            docs.push(['detail', reason]);
+        const action = clip(b.requiredAction);
+        if (action)
+            docs.push(['detail', action]);
+    }
+    return docs;
+}
+function collectDocs(db, jobId) {
+    const job = db.prepare('SELECT command FROM jobs WHERE id = ?').get(jobId);
+    if (!job)
+        return null;
+    const docs = [];
+    const command = clip(job.command);
+    if (command)
+        docs.push(['command', command]);
+    const run = db.prepare('SELECT loop_name, failure_diagnosis FROM loop_runs WHERE id = ?').get(jobId);
+    const loop = clip(run?.loop_name);
+    if (loop)
+        docs.push(['loop', loop]);
+    const seen = new Set();
+    const phases = db.prepare('SELECT phase FROM job_phases WHERE job_id = ? ORDER BY updated_at LIMIT ?').all(jobId, exports.JOB_SEARCH_MAX_PHASES);
+    for (const { phase } of phases) {
+        const text = clip(phase);
+        if (text && !seen.has(text)) {
+            seen.add(text);
+            docs.push(['phase', text]);
+        }
+    }
+    for (const doc of diagnosisDocs(run?.failure_diagnosis)) {
+        if (doc[0] === 'phase') {
+            if (seen.has(doc[1]))
+                continue;
+            seen.add(doc[1]);
+        }
+        docs.push(doc);
+    }
+    return docs;
+}
+/** Drop the oldest tenth when the project is over budget; forget deleted jobs. */
+function pruneJobSearch(db) {
+    db.prepare('DELETE FROM job_search_docs WHERE job_id NOT IN (SELECT id FROM jobs)').run();
+    const { n } = db.prepare('SELECT COUNT(*) AS n FROM job_search_docs').get();
+    if (n <= exports.JOB_SEARCH_MAX_DOCS)
+        return;
+    const drop = Math.ceil(exports.JOB_SEARCH_MAX_DOCS / 10);
+    db.prepare('DELETE FROM job_search_docs WHERE id IN (SELECT id FROM job_search_docs ORDER BY id LIMIT ?)').run(drop);
+}
+/** Replace every document of one job with what the database knows now. Idempotent. */
+function indexJob(db, jobId, opts = {}) {
+    const docs = collectDocs(db, jobId);
+    const tx = db.transaction(() => {
+        db.prepare('DELETE FROM job_search_docs WHERE job_id = ?').run(jobId);
+        if (docs) {
+            const insert = db.prepare('INSERT INTO job_search_docs (job_id, field, text) VALUES (?, ?, ?)');
+            for (const [field, text] of docs)
+                insert.run(jobId, field, text);
+        }
+        if (opts.prune !== false)
+            pruneJobSearch(db);
+    });
+    tx();
+}
+/** Add one phase title (a phase event) without rebuilding the job's documents. */
+function indexJobPhase(db, jobId, phase) {
+    const text = clip(phase);
+    if (!text)
+        return;
+    const existing = db.prepare("SELECT COUNT(*) AS n, SUM(text = ?) AS same FROM job_search_docs WHERE job_id = ? AND field = 'phase'").get(text, jobId);
+    if ((existing.same ?? 0) > 0 || existing.n >= exports.JOB_SEARCH_MAX_PHASES)
+        return;
+    db.prepare("INSERT INTO job_search_docs (job_id, field, text) VALUES (?, 'phase', ?)").run(jobId, text);
+}
+/** Best-effort hook: indexing never fails the write that triggered it. */
+function safeIndexJob(db, jobId) {
+    try {
+        indexJob(db, jobId);
+    }
+    catch { /* index is derived data; the backfill repairs it */ }
+}
+function safeIndexJobPhase(db, jobId, phase) {
+    try {
+        indexJobPhase(db, jobId, phase);
+    }
+    catch { /* see safeIndexJob */ }
+}
+/** Forget the documents of jobs about to be deleted. */
+function safeRemoveJobSearch(db, where) {
+    try {
+        if ('jobId' in where)
+            db.prepare('DELETE FROM job_search_docs WHERE job_id = ?').run(where.jobId);
+        else
+            db.prepare(`DELETE FROM job_search_docs WHERE job_id IN (${where.selectIds})`).run(...where.params);
+    }
+    catch { /* table absent on a hand-built database */ }
+}
+/** One-time (re-runnable) backfill: rebuild the whole index from jobs, phases and loop runs. */
+function rebuildJobSearchIndex(db) {
+    const tx = db.transaction(() => {
+        db.prepare('DELETE FROM job_search_docs').run();
+        const ids = db.prepare('SELECT id FROM jobs ORDER BY started_at DESC LIMIT ?').all(exports.JOB_SEARCH_BACKFILL_JOBS);
+        for (const { id } of ids)
+            indexJob(db, id, { prune: false });
+        return ids.length;
+    });
+    return tx();
+}
+function searchJobs(db, rawQuery, limit = exports.JOB_SEARCH_DEFAULT_LIMIT) {
+    const query = rawQuery.trim();
+    if (!query)
+        return [];
+    const cap = Math.max(1, Math.min(exports.JOB_SEARCH_MAX_LIMIT, Math.floor(limit)));
+    let rows;
+    if ([...query].length >= search_snippet_1.TRIGRAM_MIN_CHARS) {
+        rows = db.prepare(`WITH hits AS (
+         SELECT d.job_id AS job_id, d.field AS field,
+                bm25(job_search_fts) AS rank,
+                highlight(job_search_fts, 0, ?, ?) AS marked
+         FROM job_search_fts JOIN job_search_docs d ON d.id = job_search_fts.rowid
+         WHERE job_search_fts MATCH ?
+       ),
+       ranked AS (
+         SELECT job_id, field, rank, marked,
+                row_number() OVER (PARTITION BY job_id ORDER BY rank, field) AS rn
+         FROM hits
+       )
+       SELECT r.job_id, r.field, r.marked, j.command, j.status, j.started_at
+       FROM ranked r JOIN jobs j ON j.id = r.job_id
+       WHERE r.rn = 1
+       ORDER BY r.rank, j.started_at DESC
+       LIMIT ?`).all(search_snippet_1.MARK_START, search_snippet_1.MARK_END, (0, search_snippet_1.ftsPhrase)(query), cap);
+    }
+    else {
+        const escaped = query.replace(/[\\%_]/g, (c) => `\\${c}`);
+        const scan = db.prepare(`SELECT d.job_id AS job_id, d.field AS field, d.text AS text, j.command, j.status, j.started_at
+       FROM job_search_docs d JOIN jobs j ON j.id = d.job_id
+       WHERE d.text LIKE ? ESCAPE '\\'
+       ORDER BY d.id DESC LIMIT ?`).all(`%${escaped}%`, search_snippet_1.FALLBACK_SCAN_ROWS);
+        const needle = query.toLowerCase();
+        const seen = new Set();
+        rows = [];
+        for (const row of scan) {
+            if (seen.has(row.job_id))
+                continue;
+            seen.add(row.job_id);
+            const at = row.text.toLowerCase().indexOf(needle);
+            const marked = at < 0
+                ? row.text
+                : row.text.slice(0, at) + search_snippet_1.MARK_START + row.text.slice(at, at + needle.length) + search_snippet_1.MARK_END + row.text.slice(at + needle.length);
+            rows.push({ ...row, marked });
+            if (rows.length >= cap)
+                break;
+        }
+    }
+    return rows.map((r) => ({
+        jobId: r.job_id,
+        command: r.command,
+        status: r.status,
+        startedAt: r.started_at,
+        field: r.field,
+        snippet: (0, search_snippet_1.parseMarkedSnippet)((0, search_snippet_1.windowMarked)(r.marked)),
+    }));
+}

package/server/dist/db/jobs.js

@@ -17,6 +17,7 @@ exports.deleteJob = deleteJob;
 exports.purgeJobs = purgeJobs;
 exports.skipJob = skipJob;
 exports.getPipelineJobs = getPipelineJobs;
+const job_search_1 = require("./job-search");
 function createJob(db, job) {
     // Promotion is atomic: after a crash the job is either still replayable in
     // queued_jobs or is a running jobs row, never absent from both. INSERT OR
@@ -27,6 +28,7 @@ function createJob(db, job) {
         db.prepare('DELETE FROM queued_jobs WHERE id = ?').run(job.id);
     });
     promote();
+    (0, job_search_1.safeIndexJob)(db, job.id);
 }
 /** Idempotently persist a job that has been admitted but has not started. */
 function upsertQueuedJob(db, job) {
@@ -121,12 +123,14 @@ function finishJob(db, jobId, result) {
       session_id          = ?
     WHERE id = ?
   `).run(result.status, result.exit_code, new Date().toISOString(), result.tokens_in ?? null, result.tokens_out ?? null, result.tokens_cache_read ?? null, result.tokens_cache_create ?? null, result.total_cost_usd ?? null, result.total_cost_usd_estimated ? 1 : 0, result.num_turns ?? null, result.model ?? null, result.duration_ms ?? null, result.duration_api_ms ?? null, result.session_id ?? null, jobId);
+    (0, job_search_1.safeIndexJob)(db, jobId);
 }
 function appendEvent(db, jobId, seq, event) {
     db.prepare('INSERT INTO events (job_id, seq, event_type, source, payload) VALUES (?, ?, ?, ?, ?)').run(jobId, seq, event.event_type, event.source ?? null, event.payload);
 }
 function upsertPhase(db, jobId, phase, state) {
     db.prepare('INSERT OR REPLACE INTO job_phases (job_id, phase, state, updated_at) VALUES (?, ?, ?, ?)').run(jobId, phase, state, new Date().toISOString());
+    (0, job_search_1.safeIndexJobPhase)(db, jobId, phase);
 }
 function listJobs(db, opts) {
     const limit = Math.min(opts.limit ?? 50, 200);
@@ -202,6 +206,7 @@ function deleteJob(db, jobId) {
         db.prepare('DELETE FROM telemetry_summaries WHERE jobId = ?').run(id);
         db.prepare('DELETE FROM job_profiles WHERE job_id = ?').run(id);
         db.prepare('DELETE FROM file_provenance WHERE job_id = ?').run(id);
+        (0, job_search_1.safeRemoveJobSearch)(db, { jobId: id });
         db.prepare('DELETE FROM jobs WHERE id = ?').run(id);
     });
     tx(jobId);
@@ -237,6 +242,7 @@ function purgeJobs(db, opts) {
         db.prepare(`DELETE FROM telemetry_summaries WHERE jobId IN (${sel})`).run(...params);
         db.prepare(`DELETE FROM job_profiles WHERE job_id IN (${sel})`).run(...params);
         db.prepare(`DELETE FROM file_provenance WHERE job_id IN (${sel})`).run(...params);
+        (0, job_search_1.safeRemoveJobSearch)(db, { selectIds: sel, params });
         // Clear inbound FK references from NON-purged jobs to purged jobs.
         db.prepare(`UPDATE jobs SET depends_on_job_id = NULL WHERE depends_on_job_id IN (${sel})`).run(...params);
         return db.prepare(`DELETE FROM jobs WHERE ${where}`).run(...params).changes;