specrails-desktop 2.8.0 → 2.9.1

package/server/dist/project-registry.js

@@ -23,6 +23,9 @@ const ticket_watcher_1 = require("./ticket-watcher");
 const terminal_manager_1 = require("./terminal-manager");
 const browser_capture_manager_1 = require("./browser-capture-manager");
 const explore_cwd_manager_1 = require("./explore-cwd-manager");
+const artifact_registry_1 = require("./artifact-registry");
+const workspace_resolution_1 = require("./workspace-resolution");
+const workspace_manager_1 = require("./workspace-manager");
 const ticket_store_1 = require("./ticket-store");
 const jira_sync_manager_1 = require("./jira/jira-sync-manager");
 const rails_store_1 = require("./rails-store");
@@ -51,6 +54,22 @@ class ProjectRegistry {
     }
     loadAll() {
         const projects = (0, desktop_db_1.listProjects)(this._desktopDb);
+        // Self-heal the shared artifact registry: project one entry per desktop
+        // project, leaving non-desktop (core-standalone) entries untouched. Wrapped
+        // so a registry write failure never blocks app startup — a missing entry is
+        // recreated on the next addProject/reconcile.
+        try {
+            (0, artifact_registry_1.reconcileFromProjects)(projects.map((p) => ({
+                repoPath: p.path,
+                slug: p.slug,
+                providers: p.providers,
+                primaryProvider: p.provider,
+                desktopProjectId: p.id,
+            })));
+        }
+        catch (err) {
+            console.error('[project-registry] registry reconcile failed (non-fatal):', err);
+        }
         for (const project of projects) {
             try {
                 this._loadProjectContext(project);
@@ -71,11 +90,48 @@ class ProjectRegistry {
     listFailedProjects() {
         return Array.from(this._failedProjects.values());
     }
+    /**
+     * The deduped union of providers across every registered project (from the
+     * desktop DB, so it includes projects that failed to load a per-project DB).
+     * Used by the framework boot `versionCheck` to decide which providerDirs to
+     * materialize. Defaults to `['claude']` when there are no projects yet (so a
+     * fresh install still materializes the claude framework for the first add).
+     */
+    installedProvidersUnion() {
+        const set = new Set();
+        for (const p of (0, desktop_db_1.listProjects)(this._desktopDb)) {
+            const list = p.providers && p.providers.length > 0 ? p.providers : [p.provider];
+            for (const prov of list) {
+                if (prov && prov.length > 0)
+                    set.add(prov);
+            }
+        }
+        return set.size > 0 ? Array.from(set) : ['claude'];
+    }
     addProject(opts) {
         const row = (0, desktop_db_1.addProject)(this._desktopDb, opts);
+        // Mirror the new project into the shared artifact registry so specrails-core
+        // resolves its relocated artifacts. Wrapped so a registry write failure never
+        // breaks project creation — the startup reconcile will recreate the entry.
+        try {
+            (0, artifact_registry_1.mirrorProjectEntry)({
+                repoPath: row.path,
+                slug: row.slug,
+                providers: row.providers,
+                primaryProvider: row.provider,
+                desktopProjectId: row.id,
+            });
+        }
+        catch (err) {
+            console.error('[project-registry] registry mirror failed (non-fatal):', err);
+        }
         return this._loadProjectContext(row);
     }
     removeProject(id) {
+        // Resolve the repo path BEFORE the DB row is deleted below so we can drop the
+        // shared artifact-registry entry. Prefer the live context, fall back to the
+        // desktop DB row (project may be registered-but-not-loaded, e.g. M9 failure).
+        const repoPath = this._contexts.get(id)?.project.path ?? (0, desktop_db_1.getProject)(this._desktopDb, id)?.path;
         const ctx = this._contexts.get(id);
         if (ctx) {
             // Tear down spawners BEFORE closing the DB. QueueManager.shutdown() drops
@@ -163,6 +219,38 @@ class ProjectRegistry {
             catch { /* ignore — non-fatal */ }
             this._contexts.delete(id);
         }
+        // Drop the relocated WORKSPACE for an adopted project whose REGISTRY slug
+        // differs from the desktop slug. The per-project data-dir rm above only
+        // removes `projects/<desktop-slug>`; an adopted repo's workspace lives under
+        // `projects/<registry-slug>/workspace` and would otherwise leak. Resolve the
+        // registry entry (BEFORE removeRegistryEntry deletes it) and, when relocated,
+        // remove the workspace under the registry slug. Best-effort — never blocks
+        // removal. (When the slugs match, the dir is already gone; removeWorkspace
+        // no-ops on a missing dir.)
+        if (repoPath) {
+            try {
+                const art = (0, artifact_registry_1.resolveArtifacts)(repoPath);
+                if (!art.isLegacy && art.entry?.slug) {
+                    // Use the SAME home the registry/workspace live under (== os.homedir()
+                    // in production; overridable via SPECRAILS_REGISTRY_HOME in tests) so
+                    // the workspace dir resolves identically to the registry entry.
+                    (0, workspace_manager_1.removeWorkspace)(art.entry.slug, (0, artifact_registry_1.resolveHome)());
+                }
+            }
+            catch (err) {
+                console.error('[project-registry] workspace remove failed (non-fatal):', err);
+            }
+        }
+        // Drop the shared artifact-registry entry for this repo. Wrapped so a
+        // registry write failure never blocks project removal.
+        if (repoPath) {
+            try {
+                (0, artifact_registry_1.removeRegistryEntry)(repoPath);
+            }
+            catch (err) {
+                console.error('[project-registry] registry remove failed (non-fatal):', err);
+            }
+        }
         (0, desktop_db_1.removeProject)(this._desktopDb, id);
     }
     getContext(id) {
@@ -319,7 +407,12 @@ class ProjectRegistry {
                 if (completedTicketIds.length > 0 &&
                     (status === 'completed' || status === 'failed' || status === 'canceled' || status === 'zombie_terminated')) {
                     try {
-                        const ticketFile = (0, ticket_store_1.resolveTicketStoragePath)(project.path);
+                        // Relocate-artifacts gate: write the job outcome to the workspace
+                        // ticket store when relocated, else the repo-relative store (legacy).
+                        const outcomeExec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+                        const ticketFile = outcomeExec.relocated
+                            ? outcomeExec.ticketsPath
+                            : (0, ticket_store_1.resolveTicketStoragePath)(project.path);
                         const now = new Date().toISOString();
                         let changedIds = [];
                         const store = (0, ticket_store_1.mutateStore)(ticketFile, (s) => {
@@ -453,9 +546,14 @@ class ProjectRegistry {
         // persistent recursive watcher per project, the source of the fd leak that
         // broke terminals. The watcher is now attached lazily on the first
         // code-explorer request (see code-explorer-router.ts).
-        // Load commands for this project
+        // Load commands for this project. Relocate-artifacts: sr/specrails commands
+        // are materialized into the WORKSPACE when the project is relocated; the repo
+        // has none, so scanning project.path would find nothing. Resolve the gate so
+        // command discovery reads the same tree the rails load (legacy ⇒ repo).
         try {
-            const config = (0, config_1.getConfig)(project.path, db, project.name);
+            const cmdExec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+            const commandsRoot = cmdExec.relocated && cmdExec.workspaceDir ? cmdExec.workspaceDir : project.path;
+            const config = (0, config_1.getConfig)(project.path, db, project.name, commandsRoot);
             queueManager.setCommands(config.commands);
         }
         catch {

package/server/dist/project-router-chat.js

@@ -32,7 +32,7 @@ function registerChatRoutes(deps) {
         const rawModel = req.body?.model;
         let model;
         if (rawModel === undefined || rawModel === null || rawModel === '') {
-            model = (0, project_router_helpers_1.resolveDefaultSpecModel)({ projectPath: project.path, provider });
+            model = (0, project_router_helpers_1.resolveDefaultSpecModel)({ projectPath: project.path, slug: project.slug, provider });
         }
         else if ((0, spec_models_1.isValidModelForProvider)(rawModel, provider)) {
             model = rawModel;

package/server/dist/project-router-helpers.js

@@ -21,6 +21,8 @@ const path_1 = __importDefault(require("path"));
 const core_package_1 = require("./core-package");
 const spec_models_1 = require("./spec-models");
 const ticket_store_1 = require("./ticket-store");
+const install_config_path_1 = require("./install-config-path");
+const workspace_resolution_1 = require("./workspace-resolution");
 const TERMINAL_PANEL_ENABLED = process.env.SPECRAILS_TERMINAL_PANEL !== 'false';
 exports.TERMINAL_PANEL_ENABLED = TERMINAL_PANEL_ENABLED;
 // ─── YAML helpers ─────────────────────────────────────────────────────────────
@@ -55,12 +57,23 @@ function serializeInstallConfigYaml(config) {
 // ─── Agent model helpers ──────────────────────────────────────────────────────
 const VALID_MODEL_ALIASES = ['sonnet', 'opus', 'haiku'];
 exports.VALID_MODEL_ALIASES = VALID_MODEL_ALIASES;
+/**
+ * Relocate-artifacts: where the agent `.claude/agents/*.md` files live. When the
+ * project is relocated AND the workspace is populated by core, the agents are
+ * materialized into `<workspace>/.claude/agents` (same reasoning the profiles
+ * router uses for profiles). Legacy ⇒ `<project>/.claude/agents` (byte-identical).
+ */
+function resolveAgentsDir(project) {
+    const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+    const root = exec.relocated && exec.workspaceDir ? exec.workspaceDir : project.path;
+    return path_1.default.join(root, '.claude', 'agents');
+}
 /**
  * Read installed agents from `.claude/agents/*.md` (top-level only, no subdirs).
  * Extracts the `model:` field from YAML frontmatter.
  */
-function readAgentModels(projectPath) {
-    const agentsDir = path_1.default.join(projectPath, '.claude', 'agents');
+function readAgentModels(project) {
+    const agentsDir = resolveAgentsDir(project);
     if (!fs_1.default.existsSync(agentsDir))
         return [];
     let entries;
@@ -97,12 +110,12 @@ function readAgentModels(projectPath) {
     return agents;
 }
 /**
- * Read `.specrails/install-config.yaml` and patch the `model:` line in each
- * `.claude/agents/*.md` frontmatter to match the config's defaults/overrides.
- * No-op if the config file does not exist.
+ * Read the install-config.yaml (per-project HOME dir) and patch the `model:`
+ * line in each `.claude/agents/*.md` frontmatter to match the config's
+ * defaults/overrides. No-op if the config file does not exist.
  */
-function applyModelConfig(projectPath) {
-    const configPath = path_1.default.join(projectPath, '.specrails', 'install-config.yaml');
+function applyModelConfig(project) {
+    const configPath = (0, install_config_path_1.installConfigPath)(project);
     if (!fs_1.default.existsSync(configPath))
         return;
     let configText;
@@ -127,7 +140,7 @@ function applyModelConfig(projectPath) {
                 overrides[m[1]] = m[2];
         }
     }
-    const agentsDir = path_1.default.join(projectPath, '.claude', 'agents');
+    const agentsDir = resolveAgentsDir(project);
     if (!fs_1.default.existsSync(agentsDir))
         return;
     let entries;
@@ -244,16 +257,16 @@ function formatDescriptionWithCriteria(body, criteria) {
  * Resolve the default model used by Add Spec for a project.
  *
  * Order:
- *   1. `models.defaults.model` from `<project>/.specrails/install-config.yaml`,
- *      if it parses AND is in the provider allow-list.
+ *   1. `models.defaults.model` from the install-config.yaml (per-project HOME
+ *      dir), if it parses AND is in the provider allow-list.
  *   2. Provider default from `PROVIDER_DEFAULT_MODEL` (`sonnet` / `gpt-5.5`).
  *
  * Logs a warning when the configured value exists but is not valid for the
  * project's provider.
  */
 function resolveDefaultSpecModel(args) {
-    const { projectPath, provider } = args;
-    const configPath = path_1.default.join(projectPath, '.specrails', 'install-config.yaml');
+    const { projectPath, slug, provider } = args;
+    const configPath = (0, install_config_path_1.installConfigPath)({ slug, path: projectPath });
     if (!fs_1.default.existsSync(configPath))
         return (0, spec_models_1.getProviderDefault)(provider);
     let configText;

package/server/dist/project-router-jobs.js

@@ -96,7 +96,7 @@ function registerJobsRoutes(deps) {
         // response also lists every installed provider so the Add Spec modal can
         // render its AI Engine selector without a second round-trip.
         const provider = (0, provider_selection_1.resolveProvider)(project, typeof req.query.provider === 'string' ? req.query.provider : undefined);
-        const model = (0, project_router_helpers_1.resolveDefaultSpecModel)({ projectPath: project.path, provider });
+        const model = (0, project_router_helpers_1.resolveDefaultSpecModel)({ projectPath: project.path, slug: project.slug, provider });
         const allowed = (0, spec_models_1.getModelsForProvider)(provider);
         res.json({ model, provider, allowed, providers: project.providers });
     });
@@ -389,13 +389,13 @@ function registerJobsRoutes(deps) {
                 skip_reason: inMemory.skipReason,
             };
             const phaseDefinitions = queueManager.phasesForCommand(synthetic.command);
-            const tickets = (0, ticket_store_1.resolveTicketsFromCommand)(project.path, synthetic.command);
+            const tickets = (0, ticket_store_1.resolveTicketsFromCommand)(project.path, synthetic.command, ticketPath(req));
             res.json({ job: { ...synthetic, hasTelemetry: false, tickets }, events: [], phaseDefinitions });
             return;
         }
         const events = (0, db_1.getJobEvents)(db, jobId);
         const phaseDefinitions = queueManager.phasesForCommand(job.command);
-        const tickets = (0, ticket_store_1.resolveTicketsFromCommand)(project.path, job.command);
+        const tickets = (0, ticket_store_1.resolveTicketsFromCommand)(project.path, job.command, ticketPath(req));
         const annotated = { ...job, hasTelemetry: (0, db_1.hasJobTelemetry)(db, jobId), tickets };
         res.json({ job: annotated, events, phaseDefinitions });
     });

package/server/dist/project-router-settings.js

@@ -15,6 +15,7 @@ const context_scope_1 = require("./context-scope");
 const terminal_settings_1 = require("./terminal-settings");
 const terminal_marks_store_1 = require("./terminal-marks-store");
 const project_router_helpers_1 = require("./project-router-helpers");
+const install_config_path_1 = require("./install-config-path");
 function registerSettingsRoutes(deps) {
     const { router, registry, ctx, ticketPath } = deps;
     // ─── Project settings (pipeline telemetry) ───────────────────────────────────
@@ -112,7 +113,7 @@ function registerSettingsRoutes(deps) {
     // ─── Agent models ────────────────────────────────────────────────────────────
     router.get('/:projectId/agent-models', (req, res) => {
         const { project } = ctx(req);
-        const agents = (0, project_router_helpers_1.readAgentModels)(project.path);
+        const agents = (0, project_router_helpers_1.readAgentModels)(project);
         res.json({ agents });
     });
     router.patch('/:projectId/agent-models', (req, res) => {
@@ -138,8 +139,9 @@ function registerSettingsRoutes(deps) {
                 }
             }
         }
-        const configDir = path_1.default.join(project.path, '.specrails');
-        const configPath = path_1.default.join(configDir, 'install-config.yaml');
+        // Relocate-artifacts: the install config lives in the per-project HOME dir,
+        // NEVER `<project>/.specrails` (which would leak into the user's repo).
+        const configPath = (0, install_config_path_1.installConfigPath)(project);
         // Read existing config or build default shape
         let existingConfig = {
             version: 1,
@@ -206,11 +208,11 @@ function registerSettingsRoutes(deps) {
         }
         existingConfig.models = mergedModels;
         try {
-            fs_1.default.mkdirSync(configDir, { recursive: true });
+            fs_1.default.mkdirSync(path_1.default.dirname(configPath), { recursive: true });
             const yaml = (0, project_router_helpers_1.serializeInstallConfigYaml)(existingConfig);
             fs_1.default.writeFileSync(configPath, yaml, 'utf-8');
-            (0, project_router_helpers_1.applyModelConfig)(project.path);
-            const agents = (0, project_router_helpers_1.readAgentModels)(project.path);
+            (0, project_router_helpers_1.applyModelConfig)(project);
+            const agents = (0, project_router_helpers_1.readAgentModels)(project);
             res.json({ agents });
         }
         catch (err) {

package/server/dist/project-router-setup.js

@@ -15,6 +15,8 @@ const queue_manager_1 = require("./queue-manager");
 const command_resolver_1 = require("./command-resolver");
 const changes_reader_1 = require("./changes-reader");
 const project_router_helpers_1 = require("./project-router-helpers");
+const install_config_path_1 = require("./install-config-path");
+const workspace_resolution_1 = require("./workspace-resolution");
 function registerSetupRoutes(deps) {
     const { router, registry, ctx, ticketPath } = deps;
     // ─── Install-config route ─────────────────────────────────────────────────────
@@ -25,10 +27,12 @@ function registerSetupRoutes(deps) {
             res.status(400).json({ error: 'Request body must be a config object' });
             return;
         }
-        const configDir = path_1.default.join(project.path, '.specrails');
-        const configPath = path_1.default.join(configDir, 'install-config.yaml');
+        // Relocate-artifacts: write to the per-project app-managed HOME dir, NEVER
+        // `<project>/.specrails` — so a fresh setup creates ZERO `.specrails` in the
+        // user's repo. See server/install-config-path.ts.
+        const configPath = (0, install_config_path_1.installConfigPath)(project);
         try {
-            fs_1.default.mkdirSync(configDir, { recursive: true });
+            fs_1.default.mkdirSync(path_1.default.dirname(configPath), { recursive: true });
             const yaml = (0, project_router_helpers_1.serializeInstallConfigYaml)(config);
             fs_1.default.writeFileSync(configPath, yaml, 'utf-8');
             res.json({ ok: true, path: configPath });
@@ -45,7 +49,7 @@ function registerSetupRoutes(deps) {
             return;
         }
         res.status(202).json({ ok: true });
-        setupManager.startInstall(project.id, project.path);
+        setupManager.startInstall(project.id, project.path, project.slug);
     });
     router.post('/:projectId/enrich/start', (req, res) => {
         const { project, setupManager } = ctx(req);
@@ -115,7 +119,7 @@ function registerSetupRoutes(deps) {
             tier: setupManager.getInstallTier(project.id) ?? null,
             savedSessionId: savedSessionId ?? null,
             logLines: setupManager.getInstallLog(project.id),
-            summary: setupManager.getSummary(project.path),
+            summary: setupManager.getSummary(project),
         });
     });
     router.post('/:projectId/setup/abort', (req, res) => {
@@ -428,11 +432,17 @@ function registerSetupRoutes(deps) {
     });
     // ─── Integration contract ──────────────────────────────────────────────────
     const DEFAULT_TICKET_CAPABILITIES = ['crud', 'labels', 'status', 'priorities', 'dependencies'];
-    const DEFAULT_TICKET_STORAGE_PATH = '.specrails/local-tickets.json';
     // GET /:projectId/integration-contract — Return the project's integration contract with ticketProvider
     router.get('/:projectId/integration-contract', (req, res) => {
-        const projectPath = ctx(req).project.path;
-        const contractFile = path_1.default.join(projectPath, '.claude', 'integration-contract.json');
+        const project = ctx(req).project;
+        const projectPath = project.path;
+        // Relocate-artifacts: the integration-contract.json + tickets store live in
+        // the workspace when relocated. Mirror the gated ticketPath() so this
+        // informational endpoint reports the path the relocated CLI actually loads,
+        // not a stale repo path. Legacy projects are byte-identical.
+        const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: projectPath });
+        const contractRoot = exec.relocated && exec.workspaceDir ? exec.workspaceDir : projectPath;
+        const contractFile = path_1.default.join(contractRoot, '.claude', 'integration-contract.json');
         let rawContract = {};
         let source = 'default';
         if (fs_1.default.existsSync(contractFile)) {
@@ -445,10 +455,17 @@ function registerSetupRoutes(deps) {
             }
         }
         const rawProvider = rawContract.ticketProvider;
-        const storagePath = rawProvider?.storagePath ?? DEFAULT_TICKET_STORAGE_PATH;
+        // When relocated, the tickets store is the registry entry's ticketsPath (an
+        // absolute workspace path); a custom storagePath from the contract is still
+        // resolved relative to the contract root. Legacy ⇒ ticketPath() (which
+        // honours the contract's custom storagePath).
+        const storagePath = rawProvider?.storagePath;
+        const resolvedStorage = storagePath
+            ? path_1.default.resolve(contractRoot, storagePath)
+            : ticketPath(req);
         const ticketProvider = {
             type: rawProvider?.type ?? 'local',
-            storagePath: path_1.default.resolve(projectPath, storagePath),
+            storagePath: resolvedStorage,
             capabilities: rawProvider?.capabilities ?? DEFAULT_TICKET_CAPABILITIES,
         };
         res.json({ ticketProvider, source });

package/server/dist/project-router-spending.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerSpendingRoutes = registerSpendingRoutes;
 const queue_manager_1 = require("./queue-manager");
 const config_1 = require("./config");
+const workspace_resolution_1 = require("./workspace-resolution");
 const ai_invocations_1 = require("./ai-invocations");
 const spending_1 = require("./spending");
 const ticket_store_1 = require("./ticket-store");
@@ -205,7 +206,11 @@ function registerSpendingRoutes(deps) {
     router.get('/:projectId/config', (req, res) => {
         const { project, db } = ctx(req);
         try {
-            const config = (0, config_1.getConfig)(project.path, db, project.name);
+            // Relocate-artifacts: commands are materialized into the workspace when
+            // relocated; resolve the gate so the /config commands list is non-empty.
+            const cfgExec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+            const commandsRoot = cfgExec.relocated && cfgExec.workspaceDir ? cfgExec.workspaceDir : project.path;
+            const config = (0, config_1.getConfig)(project.path, db, project.name, commandsRoot);
             const dailyBudgetRaw = db.prepare(`SELECT value FROM queue_state WHERE key = 'config.daily_budget_usd'`).get()?.value;
             const dailyBudgetUsd = dailyBudgetRaw != null ? parseFloat(dailyBudgetRaw) : null;
             const zombieTimeoutRaw = db.prepare(`SELECT value FROM queue_state WHERE key = 'config.zombie_timeout_ms'`).get()?.value;

package/server/dist/project-router-tickets.js

@@ -58,6 +58,7 @@ const explore_draft_title_1 = require("./explore-draft-title");
 const cli_prompt_1 = require("./util/cli-prompt");
 const readline_1 = require("readline");
 const tree_kill_1 = __importDefault(require("tree-kill"));
+const workspace_resolution_1 = require("./workspace-resolution");
 const multer_1 = __importDefault(require("multer"));
 const attachment_manager_1 = require("./attachment-manager");
 const project_router_helpers_1 = require("./project-router-helpers");
@@ -160,7 +161,7 @@ function registerTicketsRoutes(deps) {
         const rawModel = req.body?.model;
         let resolvedModel;
         if (rawModel === undefined || rawModel === null || rawModel === '') {
-            resolvedModel = (0, project_router_helpers_1.resolveDefaultSpecModel)({ projectPath: project.path, provider });
+            resolvedModel = (0, project_router_helpers_1.resolveDefaultSpecModel)({ projectPath: project.path, slug: project.slug, provider });
         }
         else if ((0, spec_models_1.isValidModelForProvider)(rawModel, provider)) {
             resolvedModel = rawModel;
@@ -218,7 +219,12 @@ function registerTicketsRoutes(deps) {
         };
         // Persist Quick mode Contract Refine choice (per-project last value).
         (0, db_1.setQuickContractRefineLast)(ctx(req).db, quickContractRefine);
-        const specsPrefix = (0, context_scope_1.buildScopedSystemPromptPrefix)(quickScope, project.path);
+        // Relocate-artifacts: tickets read from the workspace when relocated.
+        const quickSpecRoot = (() => {
+            const e = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+            return e.relocated && e.workspaceDir ? e.workspaceDir : project.path;
+        })();
+        const specsPrefix = (0, context_scope_1.buildScopedSystemPromptPrefix)(quickScope, project.path, quickSpecRoot);
         const codebaseRule = quickScope.full
             ? `- You MAY use Read, Grep, and Glob to inspect the project codebase. Bash is not available.`
             : hasAttachments
@@ -284,13 +290,22 @@ function registerTicketsRoutes(deps) {
             loadUserEnv: provider === 'claude' && quickScope.userMcp,
         });
         const binary = adapter.binary;
+        // Relocate-artifacts gate: spawn from the workspace + SPECRAILS_REPO_DIR when
+        // relocated, else cwd = project.path + process.env (byte-identical legacy).
+        const specGenExec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+        let specGenEnv = process.env;
+        if (specGenExec.relocated) {
+            specGenEnv = { ...process.env, ...specGenExec.env };
+            if (adapter.id === 'gemini')
+                specGenEnv = { ...specGenEnv, GEMINI_CLI_TRUST_WORKSPACE: 'true' };
+        }
         // spawnAiCli reroutes multi-line argv values through stdin on Windows;
         // POSIX argv path unchanged.
-        console.log(`[project-router] spec-gen spawn: ${binary} (cwd=${project.path}, requestId=${requestId})`);
+        console.log(`[project-router] spec-gen spawn: ${binary} (cwd=${specGenExec.cwd}, requestId=${requestId})`);
         const child = (0, cli_prompt_1.spawnAiCli)(binary, args, {
-            env: process.env,
+            env: specGenEnv,
             stdio: ['ignore', 'pipe', 'pipe'],
-            cwd: project.path,
+            cwd: specGenExec.cwd,
         });
         // Watchdog: unlike ai-edit, generate-spec keeps no cancellable handle, so a
         // hung CLI (network stall, model never emitting a terminating event) would
@@ -511,7 +526,7 @@ function registerTicketsRoutes(deps) {
                                 slug: project.slug,
                                 pendingId: pendingSpecId,
                                 realTicketId: created.id,
-                                projectPath: project.path,
+                                ticketStorePath: ticketPath(req),
                             });
                             if (migrated.length > 0) {
                                 created.attachments = migrated;
@@ -894,7 +909,7 @@ function registerTicketsRoutes(deps) {
                         slug: project.slug,
                         pendingId: pendingSpecId,
                         realTicketId: created.id,
-                        projectPath: project.path,
+                        ticketStorePath: ticketPath(req),
                     });
                     if (migrated.length > 0) {
                         created.attachments = migrated;
@@ -1040,7 +1055,7 @@ function registerTicketsRoutes(deps) {
                         slug: project.slug,
                         pendingId: pendingSpecId,
                         realTicketId: created.id,
-                        projectPath: project.path,
+                        ticketStorePath: ticketPath(req),
                     });
                     if (migrated.length > 0) {
                         created.attachments = migrated;
@@ -1147,6 +1162,10 @@ function registerTicketsRoutes(deps) {
                     projectSlug: project.slug,
                     projectPath: project.path,
                     projectName: project.name,
+                    // Relocate-artifacts: pass the gated tickets-store path so SMASH
+                    // reads/writes the same store the rails load (workspace when
+                    // relocated), not a stale repo copy.
+                    ticketsPath: filePath,
                     broadcast: broadcast,
                     mode,
                     model,
@@ -1184,6 +1203,7 @@ function registerTicketsRoutes(deps) {
                 projectSlug: project.slug,
                 projectPath: project.path,
                 projectName: project.name,
+                ticketsPath: ticketPath(req),
                 broadcast: broadcast,
             }, ticketId, smashedAt);
             if (!result.ok) {
@@ -1768,7 +1788,7 @@ function registerTicketsRoutes(deps) {
             const attachment = await attachment_manager_1.attachmentManager.upload({
                 slug: ctx(req).project.slug,
                 ticketKey: parsed.key,
-                projectPath: parsed.isPending ? null : ctx(req).project.path,
+                ticketStorePath: parsed.isPending ? null : ticketPath(req),
                 file: {
                     buffer: file.buffer,
                     originalname: file.originalname,
@@ -1829,7 +1849,7 @@ function registerTicketsRoutes(deps) {
                 slug: ctx(req).project.slug,
                 ticketKey: parsed.key,
                 attachmentId,
-                projectPath: parsed.isPending ? null : ctx(req).project.path,
+                ticketStorePath: parsed.isPending ? null : ticketPath(req),
             });
             if (!ok) {
                 res.status(404).json({ error: 'Attachment not found' });

package/server/dist/project-router.js

@@ -10,6 +10,7 @@ const plugins_router_1 = require("./plugins-router");
 const code_explorer_router_1 = require("./code-explorer-router");
 const jira_router_1 = require("./jira-router");
 const ticket_store_1 = require("./ticket-store");
+const workspace_resolution_1 = require("./workspace-resolution");
 const project_router_jobs_1 = require("./project-router-jobs");
 const project_router_spending_1 = require("./project-router-spending");
 const project_router_chat_1 = require("./project-router-chat");
@@ -88,10 +89,24 @@ function createProjectRouter(registry) {
             projectId: projectCtx.project.id,
             broadcast: projectCtx.broadcast,
             fileSummaryManager: projectCtx.fileSummaryManager,
+            // Relocate-artifacts: summary JSON OUTPUTS live in the workspace when
+            // relocated (source tree still read from project.path). Resolved per-call.
+            resolveSummaryRoot: () => {
+                const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: projectCtx.project.slug, path: projectCtx.project.path });
+                return exec.relocated && exec.workspaceDir ? exec.workspaceDir : projectCtx.project.path;
+            },
         }));
         codeRouter(req, res, next);
     });
-    const ticketPath = (req) => (0, ticket_store_1.resolveTicketStoragePath)(ctx(req).project.path);
+    // Relocate-artifacts gate (single chokepoint for ALL project-router ticket
+    // I/O): relocated ⇒ the registry entry's ticketsPath (workspace); legacy ⇒
+    // resolveTicketStoragePath (preserves integration-contract.json custom
+    // storagePath). Existing in-repo projects are byte-identical.
+    const ticketPath = (req) => {
+        const project = ctx(req).project;
+        const exec = (0, workspace_resolution_1.resolveProjectExecution)({ slug: project.slug, path: project.path });
+        return exec.relocated ? exec.ticketsPath : (0, ticket_store_1.resolveTicketStoragePath)(project.path);
+    };
     const deps = { router, registry, ctx, ticketPath };
     (0, project_router_jobs_1.registerJobsRoutes)(deps);
     (0, project_router_spending_1.registerSpendingRoutes)(deps);