codeden 0.4.0 → 0.4.2

package/dist/{main-sEg3GS7X.js → main-sdPbRDgf.js}

@@ -1,5 +1,5 @@
 import { n as __require, r as __toESM, t as __commonJSMin } from "./rolldown-runtime-DegdyBIC.js";
-import { $ as BrowserNavigateRequest, $n as AgentConfigLocator, $t as NOTICE_BATCH_CODE, A as SessionFileQuery, An as GitCommitRequest, At as RespondRequest, B as NetworkStatus, Bn as ConflictDecision, Bt as HealthResponse, C as isElectronRuntime, Cn as AutomationRun, Cr as string, Ct as CreateProjectRequest, D as CODEDEN_VERSION, Dn as SessionStatus, Dr as toJSONSchema, Dt as ListSessionsQuery, E as wrapper_default, En as Session, Er as ZodError, Et as ListInboxQuery, F as ListConflictsQuery, Fn as TerminalClientMessage, Ft as StartSessionRequest, G as SetNetworkPasswordResponse, Gn as DEFAULT_VISION_PATH, Gt as SttQuery, H as RemoteAccessFile, Hn as WorkKey, Ht as Settings, I as ListNoticesQuery, In as TerminalQuery, It as SteerRequest, J as ImageTestRequest, Jn as InboxItemKind, Jt as UpdateInstallRequest, K as SignInRequest, Kn as FactoryLimits, Kt as TtsRequest, L as ResolveConflictRequest, Ln as RunnerCommandResults, Lt as ThreadItemsQuery, M as RunnerToServerMessage, Mn as RestoreFilesRequest, Mt as SendMessageRequest, N as ServerLock, Nn as SessionResult, Nt as SessionStartMeta, O as UsageQuery, On as DiffScope, Or as safeParse$1, Ot as ReorderProjectsRequest, P as ArchiveSessionRequest, Pn as SpeechSummaryRequest, Pt as SetSecretRequest, Q as BrowserHistoryRequest, Qn as AgentConfigListQuery, Qt as ConflictRecord, R as RoleMessageRequest, Rn as SessionOptions, Rt as UiClientMessage, S as acquireInstallLock, Sn as AutomationGuards, Sr as record, St as UpdateAutomationRequest, T as import_websocket_server, Tn as TriagePolicy, Tr as unknown, Tt as FileWriteRequest, U as SetNetworkAccessRequest, Un as Project, Ut as LOCAL_STT_SAMPLE_RATE, V as PASSWORD_RULE_TEXT, Vn as StartedBy, Vt as agentEventToNewEvent, W as SetNetworkPasswordRequest, Wn as sortProjects, Wt as LocalSttModelParams, X as BrowserClientMessage, Xn as AgentConfigDeleteQuery, Xt as compareVersions, Y as summarizeActivity, Yn as messageFrom, Yt as UpdateStatus, Z as BrowserDevServerRequest, Zn as AgentConfigDiffRequest, Zt as isNewerVersion, _ as importClaudeSdkFrom, _n as SetAutonomyModeRequest, _r as looseObject, _t as StarterSetRequest, a as Hono, an as GithubPr, ar as ProviderId, at as AutomationImportSource, b as runNpm, bn as Automation, br as optional, bt as UpcomingRunsQuery, c as createAdaptorServer, cn as githubPrId, cr as _enum, ct as ImportAutomationsRequest, d as createImageEngineRegistry, dn as FactoryCandidate, dr as boolean, dt as AutomationProjectRequest, en as CreateGithubIssueRequest, er as AgentConfigWriteRequest, et as BrowserNewTabRequest, f as IMAGE_ASPECT_RATIOS, fn as FactoryTriageRequest, fr as custom, ft as CreateAutomationRequest, g as CLAUDE_SDK_VERSION, gn as ReviewVerdict, gr as literal, gt as SetAutomationEnabledRequest, h as claudeSdkSource, hn as PutVisionRequest, hr as intersection, ht as RunAutomationRequest, i as killTree$1, in as GithubListQuery, ir as AutonomyLevel, it as AUTOMATION_IMPORT_LIMITS, j as RunnerLock, jn as GitPushRequest, jt as SecretKey, k as UsageSettings, kn as EditQueuedMessageRequest, kr as prettifyError, kt as ResolveInboxRequest, l as upgradeWebSocket, ln as parseGithubPrId, lr as _null, lt as AutomationFileFrontmatter, m as ImageGenerationError, mn as KillSwitchRequest, mr as int, mt as ListAutomationsQuery, n as readLock, nn as GithubIssue, nr as McpServerTarget, nt as BrowserViewportRequest, o as tryDecodeURIComponent, on as MergePrRequest, or as ReasoningEffort, ot as DuplicateAutomationRequest, p as resolveImageOutput, pn as FactoryTuning, pr as discriminatedUnion, pt as ListAutomationRunsQuery, q as passwordProblem, qn as InboxItem, qt as AppPointer, r as isAlive, rn as GithubLabelRequest, rr as McpServerUpsertRequest, rt as BrowserWsQuery, s as bufferToFormData, sn as TriageIssueRequest, sr as datetime, st as ExportAutomationsQuery, tn as GithubCommentRequest, tr as McpServerDiffRequest, tt as BrowserOpenRequest, u as ImageEngineRegistry, un as DiscoveryArea, ur as array, ut as AutomationGuardsPatch, v as installClaudeSdk, vn as isFactoryMode, vr as number, vt as TriageDecisionRequest, w as ownNodeEnv, wn as AutomationTrigger, wr as union$1, wt as FileReadQuery, x as resolveNpm, xn as AutomationAction, xr as preprocess, xt as UpdateAutomationProjectSettingsRequest, y as isClaudeSdkInstalled, yn as Artifact, yr as object, yt as TriageReport, z as UpdateSessionRequest, zn as ProjectConfigFile, zt as UpdateProjectRequest } from "./runner-QPAnitMx.js";
+import { $ as BrowserNavigateRequest, $n as AgentConfigListQuery, $t as NOTICE_BATCH_CODE, A as SessionFileQuery, An as EditQueuedMessageRequest, Ar as prettifyError, At as RespondRequest, B as NetworkStatus, Bn as ProjectConfigFile, Bt as HealthResponse, C as isElectronRuntime, Cn as AutomationGuards, Cr as record, Ct as CreateProjectRequest, D as CODEDEN_VERSION, Dn as Session, Dr as ZodError, Dt as ListSessionsQuery, E as wrapper_default, En as TriagePolicy, Er as unknown, Et as ListInboxQuery, F as ListConflictsQuery, Fn as SpeechSummaryRequest, Ft as StartSessionRequest, G as SetNetworkPasswordResponse, Gn as sortProjects, Gt as SttQuery, H as RemoteAccessFile, Hn as StartedBy, Ht as Settings, I as ListNoticesQuery, In as TerminalClientMessage, It as SteerRequest, J as ImageTestRequest, Jn as InboxItem, Jt as UpdateInstallRequest, K as SignInRequest, Kn as DEFAULT_VISION_PATH, Kt as TtsRequest, L as ResolveConflictRequest, Ln as TerminalQuery, Lt as ThreadItemsQuery, M as RunnerToServerMessage, Mn as GitPushRequest, Mt as SendMessageRequest, N as ServerLock, Nn as RestoreFilesRequest, Nt as SessionStartMeta, O as UsageQuery, On as SessionStatus, Or as toJSONSchema, Ot as ReorderProjectsRequest, P as ArchiveSessionRequest, Pn as SessionResult, Pt as SetSecretRequest, Q as BrowserHistoryRequest, Qn as AgentConfigDiffRequest, Qt as ConflictRecord, R as RoleMessageRequest, Rn as RunnerCommandResults, Rt as UiClientMessage, S as acquireInstallLock, Sn as AutomationAction, Sr as preprocess, St as UpdateAutomationRequest, T as import_websocket_server, Tn as AutomationTrigger, Tr as union$1, Tt as FileWriteRequest, U as SetNetworkAccessRequest, Un as WorkKey, Ut as LOCAL_STT_SAMPLE_RATE, V as PASSWORD_RULE_TEXT, Vn as ConflictDecision, Vt as agentEventToNewEvent, W as SetNetworkPasswordRequest, Wn as Project, Wt as LocalSttModelParams, X as BrowserClientMessage, Xn as messageFrom, Xt as compareVersions, Y as summarizeActivity, Yn as InboxItemKind, Yt as UpdateStatus, Z as BrowserDevServerRequest, Zn as AgentConfigDeleteQuery, Zt as isNewerVersion, _ as importClaudeSdkFrom, _n as ReviewVerdict, _r as literal, _t as StarterSetRequest, a as Hono, an as GithubPr, ar as AutonomyLevel, at as AutomationImportSource, b as runNpm, bn as Artifact, br as object, bt as UpcomingRunsQuery, c as createAdaptorServer, cn as githubPrId, cr as datetime, ct as ImportAutomationsRequest, d as createImageEngineRegistry, dn as FactoryCandidate, dr as array, dt as AutomationProjectRequest, en as CreateGithubIssueRequest, er as AgentConfigLocator, et as BrowserNewTabRequest, f as IMAGE_ASPECT_RATIOS, fn as FactoryDecisionRequest, fr as boolean, ft as CreateAutomationRequest, g as CLAUDE_SDK_VERSION, gn as PutVisionRequest, gr as intersection, gt as SetAutomationEnabledRequest, h as claudeSdkSource, hn as KillSwitchRequest, hr as int, ht as RunAutomationRequest, i as killTree$1, in as GithubListQuery, ir as McpServerUpsertRequest, it as AUTOMATION_IMPORT_LIMITS, j as RunnerLock, jn as GitCommitRequest, jt as SecretKey, k as UsageSettings, kn as DiffScope, kr as safeParse$1, kt as ResolveInboxRequest, l as upgradeWebSocket, ln as parseGithubPrId, lr as _enum, lt as AutomationFileFrontmatter, m as ImageGenerationError, mn as FactoryTuning, mr as discriminatedUnion, mt as ListAutomationsQuery, n as readLock, nn as GithubIssue, nr as McpServerDiffRequest, nt as BrowserViewportRequest, o as tryDecodeURIComponent, on as MergePrRequest, or as ProviderId, ot as DuplicateAutomationRequest, p as resolveImageOutput, pn as FactoryTriageRequest, pr as custom, pt as ListAutomationRunsQuery, q as passwordProblem, qn as FactoryLimits, qt as AppPointer, r as isAlive, rn as GithubLabelRequest, rr as McpServerTarget, rt as BrowserWsQuery, s as bufferToFormData, sn as TriageIssueRequest, sr as ReasoningEffort, st as ExportAutomationsQuery, tn as GithubCommentRequest, tr as AgentConfigWriteRequest, tt as BrowserOpenRequest, u as ImageEngineRegistry, un as DiscoveryArea, ur as _null, ut as AutomationGuardsPatch, v as installClaudeSdk, vn as SetAutonomyModeRequest, vr as looseObject, vt as TriageDecisionRequest, w as ownNodeEnv, wn as AutomationRun, wr as string, wt as FileReadQuery, x as resolveNpm, xn as Automation, xr as optional, xt as UpdateAutomationProjectSettingsRequest, y as isClaudeSdkInstalled, yn as isFactoryMode, yr as number, yt as TriageReport, z as UpdateSessionRequest, zn as SessionOptions, zt as UpdateProjectRequest } from "./runner-B20DGEAR.js";
 import { createRequire } from "node:module";
 import fs, { accessSync, appendFileSync, closeSync, constants, copyFileSync, cpSync, createReadStream, existsSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
 import { homedir, networkInterfaces, tmpdir } from "node:os";
@@ -33706,6 +33706,565 @@ var McpTokenStore = class {
 		this.db.update(mcpTokens).set({ revokedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and(eq(mcpTokens.sessionId, sessionId), isNull(mcpTokens.revokedAt))).run();
 	}
 };
+// ../server/src/services/factory/vision.ts
+/**
+* The project vision (§10.1): `.codeden/VISION.md`, required for autopilot and dark factory.
+* Sections are `##` headings; bullets under them are the entries. Protected areas become path
+* globs (anything in backticks, or that looks like a path) and topics (plain words).
+*/
+const VISION_TEMPLATE = `# Vision
+
+Describe what this project is for. The factory scores every piece of work against this file.
+
+## Goals
+- What should this project achieve in the next months?
+
+## Target users
+- Who uses it, and what do they need?
+
+## Principles
+- Small, well-tested changes
+- Keep the public API stable
+
+## Out of scope
+- Things the factory must never propose
+
+## Quality bar
+- Every behaviour change comes with tests
+- CI is green before merge
+
+## Protected areas
+Paths (globs in backticks) and topics that always need a human. The factory never merges
+changes that touch them; they go to your inbox.
+- \`**/auth/**\`
+- \`**/migrations/**\`
+- \`.github/workflows/**\`
+- \`LICENSE\`
+- payments
+- licensing
+`;
+/** Paths that deploy or release, protected unless `allowDeploys` is on. */
+const DEPLOY_GLOBS = [
+	".github/workflows/*deploy*",
+	".github/workflows/*release*",
+	".github/workflows/*publish*",
+	"**/Dockerfile",
+	"**/fly.toml",
+	"**/vercel.json",
+	"**/netlify.toml"
+];
+/** True when `topic` appears as a word or phrase in `text`. */
+function mentionsTopic(text, topic) {
+	const escaped = topic.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/\s+/g, "\\s+");
+	return new RegExp(`\\b${escaped}\\b`, "i").test(text);
+}
+function visionFile(project) {
+	const file = resolve(project.path, project.visionPath);
+	const rel = relative(project.path, file);
+	if (rel.startsWith("..") || isAbsolute(rel)) throw badRequest("The vision path must stay inside the project", "invalid_vision_path");
+	return file;
+}
+/** Read the vision; the template (and `exists: false`) when the file is missing. */
+function readVision(project) {
+	const file = visionFile(project);
+	const exists = existsSync(file);
+	const contents = exists ? readFileSync(file, "utf8") : VISION_TEMPLATE;
+	return {
+		path: project.visionPath,
+		exists,
+		contents,
+		parsed: parseVision(contents)
+	};
+}
+/** Write the vision atomically (in the main checkout; commit it to share it with agents). */
+function writeVision(project, contents) {
+	const file = visionFile(project);
+	mkdirSync(dirname(file), { recursive: true });
+	const tmp = `${file}.${process.pid}.tmp`;
+	writeFileSync(tmp, contents.endsWith("\n") ? contents : `${contents}\n`);
+	renameSync(tmp, file);
+	return readVision(project);
+}
+// ../server/src/services/factory/context.ts
+/** The vision text and its parsed form ("" and empty when the file is missing). */
+function visionOf(project) {
+	try {
+		const v = readVision(project);
+		return {
+			text: v.exists ? v.contents : "",
+			parsed: v.parsed,
+			exists: v.exists
+		};
+	} catch {
+		return {
+			text: "",
+			exists: false,
+			parsed: {
+				goals: [],
+				users: [],
+				principles: [],
+				outOfScope: [],
+				qualityBar: [],
+				protectedAreas: {
+					globs: [],
+					topics: []
+				}
+			}
+		};
+	}
+}
+/** Raise (or refresh) a factory inbox item. */
+function raiseInbox(ctx, item) {
+	const existing = ctx.inbox.find(item.id);
+	if (existing?.status === "open" && existing.title === item.title && existing.body === item.body) return;
+	const now = ctx.now().toISOString();
+	ctx.inbox.put({
+		id: item.id,
+		kind: item.kind,
+		status: "open",
+		priority: item.priority ?? "normal",
+		title: item.title,
+		body: item.body,
+		projectId: item.projectId,
+		sessionId: item.sessionId ?? null,
+		threadId: null,
+		itemId: null,
+		requestId: null,
+		issue: item.issue ?? null,
+		pr: item.pr ?? null,
+		automationRunId: null,
+		createdAt: existing?.createdAt ?? now,
+		updatedAt: now,
+		resolvedAt: null,
+		resolution: null
+	});
+}
+/** Notice for the PM or the orchestrator about the loop. */
+function factoryNotice(ctx, opts) {
+	ctx.notify({
+		id: opts.id,
+		type: "factory.update",
+		projectId: opts.projectId,
+		target: opts.target,
+		sessionId: null,
+		title: opts.title,
+		data: {
+			event: opts.event,
+			text: opts.text,
+			itemIds: opts.itemIds ?? []
+		}
+	}, opts.wake ?? true);
+}
+/** Pause the loop (failures, regression, budget) with an inbox item for everything but budget. */
+function pauseLoop(ctx, loop, reason, opts = { inbox: true }) {
+	if (loop.state === "paused" && loop.pausedReason === reason) return loop;
+	ctx.log?.(`factory: pausing ${loop.projectId}: ${reason}`);
+	const next = {
+		...loop,
+		state: "paused",
+		pausedReason: reason
+	};
+	if (opts.inbox) {
+		raiseInbox(ctx, {
+			id: `inbox:factory-paused:${loop.projectId}`,
+			kind: "run_failed",
+			priority: "high",
+			projectId: loop.projectId,
+			title: "Factory loop paused",
+			body: `${reason}. Resume it from the factory panel once you have looked.`
+		});
+		factoryNotice(ctx, {
+			id: `factory.paused:${loop.projectId}:${ctx.now().toISOString()}`,
+			projectId: loop.projectId,
+			target: "pm",
+			event: "paused",
+			title: "Factory loop paused",
+			text: `${reason}. No new work starts until the user resumes the loop.`,
+			itemIds: opts.items?.map((i) => i.id),
+			wake: false
+		});
+	}
+	return next;
+}
+/**
+* Spend since `day` that counts against the project's daily factory budget: the factory's own
+* sessions (`budgetScope: "factory"`, the default) or the whole project (`"project"`).
+*/
+function budgetSpend(ctx, projectId, day, limits) {
+	if (limits.budgetScope === "project") return ctx.usage.spendSince(day, projectId);
+	const ids = new Set(ctx.sessions.list(projectId).map((s) => s.id));
+	return ctx.usage.spendSince(day, projectId, ids);
+}
+// ../server/src/services/factory/prompts.ts
+/**
+* Prompts of the factory loop (§10.1): improvement finders, builders, independent reviewers,
+* the PM's triage instructions and the follow-ups the loop sends. The server enforces limits;
+* these prompts only carry the judgement work.
+*/
+const AREA_BRIEF = {
+	features: "feature ideas that move the project towards its goals and serve its target users (small, shippable increments)",
+	ux: "user-experience problems: confusing flows, missing feedback, accessibility gaps, rough edges",
+	performance: "performance problems: slow paths, wasteful work, bundle size, blocking I/O",
+	tech_debt: "technical debt that slows work down: duplication, dead code, unclear modules, outdated patterns",
+	test_gaps: "behaviour that is not covered by tests, or tests that are flaky or misleading",
+	security: "security weaknesses: unsafe input handling, secrets, injection, outdated vulnerable dependencies"
+};
+function visionBlock(vision) {
+	return [
+		"<vision>",
+		vision.trim(),
+		"</vision>"
+	].join("\n");
+}
+function criteriaList(item) {
+	return item.acceptanceCriteria.map((c, i) => `${i + 1}. ${c}`).join("\n");
+}
+/** An improvement finder for one area. */
+function discoveryPrompt(opts) {
+	return [
+		`You are an improvement finder for this repository's factory loop. Area: **${opts.area}** — ${AREA_BRIEF[opts.area]}.`,
+		"",
+		"Read the code (do not modify any files, do not commit, do not open pull requests). Find at most 3 concrete, independently shippable improvements in this area that are grounded in the vision below. Each must be small enough for one pull request, must respect the out-of-scope list and must not touch protected areas.",
+		"",
+		visionBlock(opts.vision),
+		"",
+		opts.known.length > 0 ? `Already known (do not repeat): ${opts.known.map((t) => `"${t}"`).join(", ")}.` : "",
+		"Don't ask the user anything: when you're unsure about a candidate, state your assumption in its summary or leave it out. If the code doesn't match the vision (a different stack or architecture, say), the work that brings it in line is a candidate in its own right.",
+		"When done, call `factory_report_candidates` once with your candidates (title, summary of why it matters, testable acceptance criteria, paths it would touch). If you found nothing worth doing, call it with an empty list. Then call `finish` with a one-line summary."
+	].filter((l) => l !== "").join("\n");
+}
+/** The builder of one accepted item. */
+function builderPrompt(item, vision) {
+	return [
+		`Implement ${item.issue ? `GitHub issue #${item.issue.number} (${item.issue.url})` : "the item"}: **${item.title}**`,
+		"",
+		item.summary,
+		"",
+		"Acceptance criteria:",
+		criteriaList(item),
+		"",
+		visionBlock(vision),
+		"",
+		"How to work:",
+		"- Work only in this worktree. Keep the change small and focused on the criteria; stay out of protected areas and never deploy or release anything.",
+		"- Add or update tests that prove every criterion, and run the project's tests and linters until they pass.",
+		"- Don't stop to ask the user: make the reasonable call within the criteria and the vision, and say what you assumed in the pull request description. If you truly cannot go on, call `finish` with outcome `blocked`.",
+		"- Commit, then open the pull request with `create_pull_request` (it links the issue with `Fixes #N`).",
+		"- If you changed anything visible in a UI, start the dev server, take browser screenshots of the change and attach them with `attach_evidence`.",
+		"- Call `finish` with the outcome, a summary, the tests you ran and the changed files.",
+		"An independent reviewer on another provider checks your pull request against the criteria and the vision before CodeDen merges it automatically."
+	].join("\n");
+}
+/** The independent reviewer of one pull request. */
+function reviewerPrompt(item, vision, note, localBase) {
+	const pr = item.pr ? `#${item.pr.number} (${item.pr.url})` : "the pull request";
+	const read = localBase ? `You are in the author's worktree, on the PR branch. Read the change locally and offline: \`git diff ${localBase}...HEAD\`, \`git log --oneline ${localBase}..HEAD\`, and the code around it; run the tests if useful. Do not use the network (no \`gh\`, no fetch). Do not modify files, commit or push.` : `Read the change (for example \`gh pr diff ${item.pr?.number ?? ""}\` and \`gh pr view ${item.pr?.number ?? ""}\`), and the code around it. Do not modify files, commit, push or comment on GitHub.`;
+	return [
+		`You are the independent reviewer of pull request ${pr}: **${item.title}**. Another agent wrote it; CodeDen merges it automatically only if you approve and every other merge check passes.`,
+		note ? `Note: ${note}` : "",
+		"",
+		"Acceptance criteria:",
+		criteriaList(item),
+		"",
+		visionBlock(vision),
+		"",
+		read,
+		"Judge: does it meet every criterion? Does it fit the vision and stay out of its out-of-scope list and protected areas? Are there tests that prove the behaviour (or are none needed)? Any security problems (injection, secrets, unsafe input, risky dependencies)?",
+		"",
+		"Then call `factory_submit_review` exactly once with your verdict: `approve` only when everything holds, `request_changes` for fixable problems, `reject` when the change should not exist. Be specific in the summary."
+	].filter((l) => l !== "").join("\n");
+}
+/** Message to the builder after failed merge checks. */
+function fixPrompt(item, failed) {
+	return [
+		`The merge checks for your pull request${item.pr ? ` #${item.pr.number}` : ""} failed:`,
+		...failed.map((c) => `- ${c.name}: ${c.detail ?? "failed"}`),
+		item.review && item.review.verdict !== "approve" ? `Reviewer: ${item.review.summary}` : "",
+		"",
+		"Fix these in the same branch, run the tests, commit and push (call `create_pull_request` again to update the PR), then call `finish`."
+	].filter((l) => l !== "").join("\n");
+}
+/** Ask a reviewer to look again after fixes. */
+function reReviewPrompt(item) {
+	return `The author pushed fixes to pull request #${item.pr?.number ?? "?"}. Review the updated change again against the same criteria and call \`factory_submit_review\` once with a fresh verdict.`;
+}
+const BUILDER_NUDGE = "You ended your turn without an open pull request. If the work is done, commit it and call `create_pull_request`; if you are blocked, call `finish` with outcome `blocked` and explain why.";
+const REVIEWER_NUDGE = "You ended your turn without a verdict. Call `factory_submit_review` now with `approve`, `request_changes` or `reject`.";
+/** An agent writes the revert when the API cannot (main moved on after the merge). */
+function revertPrompt(opts) {
+	return [`CI on the default branch failed after pull request #${opts.prNumber} ("${opts.title}") was merged as ${opts.sha}.`, `Revert that commit in this worktree (\`git revert --no-edit ${opts.sha}\`), resolve conflicts conservatively, run the tests, and open a pull request titled \`Revert "${opts.title}"\` with \`create_pull_request\`. Do nothing else. Then call \`finish\`.`].join("\n");
+}
+/**
+* The PM's structured triage instructions for new candidates. `unattended` (dark factory): the
+* PM makes every judgement call itself and records it, since nobody is watching to answer.
+*/
+function triageInstructions(items, unattended = false) {
+	return [
+		`The factory has ${items.length} new candidate${items.length === 1 ? "" : "s"} to triage. Score each against the project vision (read it with read_project_notes or the vision file) and decide:`,
+		...items.map((i) => `- item ${i.id} [${i.source}${i.area ? `/${i.area}` : ""}] "${i.title}": ${i.summary.slice(0, 300)}${i.acceptanceCriteria.length ? ` | criteria: ${i.acceptanceCriteria.join("; ").slice(0, 400)}` : ""}`),
+		"",
+		"For each, call `factory_triage` with decision `accept` (a score from 0 to 1 and, if needed, sharper acceptance criteria) or `reject` (with the reason). Accepted items become GitHub issues and are built and merged automatically within the limits; reject anything outside the vision, too large, or touching protected areas.",
+		"The vision wins over the current code. When the code doesn't match it (a different stack or architecture, say), the work that brings it in line comes first: score it highest, or open it with `create_issue` if no candidate covers it (new issues become candidates). Reject work that change would throw away, saying it waits for it.",
+		unattended ? "This project runs as a dark factory: nobody is watching, so never ask the user. Make every judgement call yourself from the vision and record the ones that matter with `factory_record_decision` (the user reviews them in the inbox and the daily digest). Flag `needsHuman` only for a protected area, a missing or self-contradicting vision, or something irreversible outside the code, and triage everything else meanwhile." : ""
+	].filter((l) => l !== "").join("\n");
+}
+// ../server/src/services/factory/sessions.ts
+/** Who starts factory sessions; `id: "factory"` marks them for limits and the kill switch. */
+const FACTORY_STARTER = {
+	kind: "pm",
+	id: "factory"
+};
+/** Statuses that hold a session slot (`maxConcurrentSessions`). */
+const SLOT_STATUSES = /* @__PURE__ */ new Set([
+	"created",
+	"queued",
+	"starting",
+	"running",
+	"waiting"
+]);
+/** Statuses of sessions the kill switch stops. */
+const LIVE_STATUSES = /* @__PURE__ */ new Set([
+	...SLOT_STATUSES,
+	"idle",
+	"interrupted"
+]);
+function isFactorySession(s) {
+	return s.startedBy.kind === FACTORY_STARTER.kind && s.startedBy.id === FACTORY_STARTER.id;
+}
+/** Starts and stops the factory's agent sessions through the normal session service (§8.2). */
+var FactorySessions = class {
+	deps;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/** Factory sessions of a project, newest first. */
+	list(projectId) {
+		return this.deps.repo.list({
+			projectId,
+			role: "agent"
+		}).filter(isFactorySession);
+	}
+	/** Factory sessions holding a slot right now. */
+	activeCount(projectId) {
+		return this.list(projectId).filter((s) => SLOT_STATUSES.has(s.status)).length;
+	}
+	/** Providers the runner offers (the Fake provider only when nothing else is there). */
+	providers() {
+		const ids = this.deps.runner.providers().map((p) => p.id);
+		const real = ids.filter((id) => id !== "fake");
+		return real.length > 0 ? real : ids;
+	}
+	startDiscovery(projectId, area, vision, known) {
+		return this.start({
+			projectId,
+			purpose: `Factory: find ${area.replace("_", " ")} improvements`,
+			workKey: `factory:discover:${area}`,
+			scope: { area: `factory-discover-${area}` },
+			title: `Factory discovery: ${area}`,
+			input: {
+				text: discoveryPrompt({
+					area,
+					vision,
+					known
+				}),
+				attachments: []
+			}
+		});
+	}
+	startBuilder(item, vision, provider) {
+		return this.start({
+			projectId: item.projectId,
+			provider,
+			purpose: `Factory: ${item.title}`.slice(0, 300),
+			workKey: item.workKey,
+			title: item.title.slice(0, 200),
+			issue: item.issue ?? void 0,
+			input: {
+				text: builderPrompt(item, vision),
+				attachments: []
+			}
+		});
+	}
+	/**
+	* Start the reviewer offline: in the builder's worktree when there is one, otherwise (a
+	* revert PR opened through the API) in a new worktree on the PR's head, fetched from origin
+	* by CodeDen before the session starts.
+	*/
+	startReviewer(item, vision, provider, note, pr) {
+		const builder = item.builderSessionId ? this.deps.repo.find(item.builderSessionId)?.session : void 0;
+		const worktree = builder?.worktreePath ?? null;
+		let workspace = { mode: "worktree" };
+		let localBase = null;
+		if (worktree) {
+			workspace = {
+				mode: "existing",
+				path: worktree
+			};
+			localBase = builder?.baseBranch ?? "main";
+		} else if (pr) {
+			workspace = {
+				mode: "worktree",
+				branch: `codeden/review-${item.pr?.number ?? item.id.slice(0, 8)}-${item.id.slice(0, 4)}`,
+				baseRef: `origin/${pr.headBranch}`,
+				fetch: true
+			};
+			localBase = `origin/${pr.baseBranch}`;
+		}
+		return this.start({
+			projectId: item.projectId,
+			provider,
+			purpose: `Factory review: ${item.title}`.slice(0, 300),
+			workKey: `factory:review:${item.pr?.number ?? item.id}`,
+			title: `Review: ${item.title}`.slice(0, 200),
+			issue: item.issue ?? void 0,
+			workspace,
+			input: {
+				text: reviewerPrompt(item, vision, note, localBase),
+				attachments: []
+			}
+		});
+	}
+	startRevert(projectId, merge) {
+		return this.start({
+			projectId,
+			purpose: `Factory: revert #${merge.prNumber} after a CI regression`,
+			workKey: `factory:revert:${merge.sha.slice(0, 7)}`,
+			title: `Revert #${merge.prNumber}`,
+			input: {
+				text: revertPrompt(merge),
+				attachments: []
+			}
+		});
+	}
+	/** Send a follow-up to a session (queued behind a running turn). */
+	async message(sessionId, text) {
+		await this.deps.sessions.send(sessionId, {
+			input: {
+				text,
+				attachments: []
+			},
+			whenBusy: "queue"
+		}, "codeden");
+	}
+	/** Stop every live factory session of a project (kill switch). Returns the stopped ids. */
+	async stopAll(projectId) {
+		const stopped = [];
+		for (const s of this.list(projectId)) {
+			if (!LIVE_STATUSES.has(s.status)) continue;
+			try {
+				await this.deps.sessions.stop(s.id);
+				stopped.push(s.id);
+			} catch (error) {
+				this.deps.log?.(`factory: stop ${s.id}: ${errorMessage$1(error)}`);
+			}
+		}
+		return stopped;
+	}
+	start(req) {
+		return this.deps.sessions.start(StartSessionRequest.parse({
+			role: "agent",
+			startedBy: FACTORY_STARTER,
+			...req
+		}));
+	}
+};
+// ../server/src/services/factory/unattended.ts
+/**
+* Dark factory (§10.1): "set the vision and the limits, then step away". Nobody is watching, so
+* the factory's agents and the project's PM never wait on the user. A question they would have
+* asked is answered at once with {@link UNATTENDED_ANSWER}: decide from the vision, record the
+* decision with `factory_record_decision`, and carry on. The decision reaches the inbox and the
+* daily digest, where the user can review or override it later.
+*/
+/** Prefix of the inbox items `factory_record_decision` raises (the digest lists them). */
+const DECISION_INBOX_PREFIX = "inbox:factory-decision:";
+/** The answer an unattended factory agent gets instead of waiting for the user. */
+const UNATTENDED_ANSWER = [
+	"Not asked: this project runs as a dark factory, so nobody is watching to answer. Decide yourself:",
+	"- Follow the project vision. It wins over the current code: when the code doesn't match the vision (a different stack or architecture, say), the work that brings it in line comes first, as its own item, and work that would be thrown away by it waits.",
+	"- Stay inside the vision's scope and the factory's limits, and prefer the smaller, reversible option.",
+	"Then call `factory_record_decision` with the question, what you decided and why, so the user can review and override it later, and carry on.",
+	"Set `needsHuman: true` only for a protected area, a vision that is missing or contradicts itself, or something irreversible outside the code (deploys, releases, data, money). That flags it for the user without waiting: skip only the work that depends on it.",
+	"If the user is talking to you directly in this conversation, ask them in your reply instead."
+].join("\n");
+/**
+* True when nobody is expected to answer this session's questions: its project is a dark factory
+* and the session is the PM or one of the factory's own agent sessions. Sessions the user
+* started themselves still ask as usual.
+*/
+function isUnattended(project, session) {
+	if (project?.autonomyMode !== "dark_factory") return false;
+	return session.role === "pm" || isFactorySession(session);
+}
+/** The session behind `sessionId` when nobody is expected to answer its questions. */
+function unattendedSession(ctx, sessionId) {
+	const session = ctx.repo.find(sessionId)?.session;
+	if (!session?.projectId) return void 0;
+	let project;
+	try {
+		project = ctx.projects.get(session.projectId);
+	} catch {
+		return;
+	}
+	return isUnattended(project, session) ? session : void 0;
+}
+/** Answers for a provider's own question request, one free-text answer per question. */
+function unattendedAnswers(item) {
+	return Object.fromEntries(item.questions.map((q) => [q.id, [UNATTENDED_ANSWER]]));
+}
+/**
+* A question the provider asked through its own tool (not `ask_user`) in an unattended
+* session: answer it straight away with {@link UNATTENDED_ANSWER}, so the turn never waits.
+*/
+async function answerProviderQuestion(ctx, respond, e) {
+	if (e.type !== "agent.item.started" || !e.sessionId) return false;
+	const item = e.payload.item;
+	if (item?.kind !== "user_question" || item.deferred || item.status !== "in_progress") return false;
+	if (!unattendedSession(ctx, e.sessionId)) return false;
+	try {
+		await respond(e.sessionId, {
+			requestId: item.requestId,
+			response: {
+				kind: "answer",
+				answers: unattendedAnswers(item)
+			}
+		});
+		return true;
+	} catch (error) {
+		ctx.log?.(`factory: answer question in ${e.sessionId}: ${errorMessage$1(error)}`);
+		return false;
+	}
+}
+/** `factory_record_decision`: put a factory agent's own decision in front of the user. */
+function recordDecision(ctx, session, req) {
+	if (!session.projectId) throw badRequest("Only a project's sessions record factory decisions", "no_project");
+	const id = `${DECISION_INBOX_PREFIX}${randomUUID()}`;
+	raiseInbox(ctx, {
+		id,
+		kind: "message",
+		priority: req.needsHuman ? "high" : "low",
+		projectId: session.projectId,
+		sessionId: session.id,
+		title: `${req.needsHuman ? "Factory needs you" : "Factory decided"}: ${oneLine(req.question, 120)}`,
+		body: [
+			`**Question:** ${req.question}`,
+			"",
+			`**Decision:** ${req.decision}`,
+			"",
+			`**Why:** ${req.reasoning}`,
+			"",
+			req.needsHuman ? "The factory carried on with everything that doesn't depend on this. Reply in the session, or change the vision, to settle it." : "Nothing waited on you. To change it, tell the project manager or edit the vision."
+		].join("\n")
+	});
+	return {
+		inboxItemId: id,
+		message: req.needsHuman ? "Recorded and flagged for the user. Don't wait: carry on with the work that doesn't depend on it." : "Recorded. Carry on."
+	};
+}
+function oneLine(text, max) {
+	const line = text.replace(/\s+/g, " ").trim();
+	return line.length > max ? `${line.slice(0, max - 1)}…` : line;
+}
 // ../server/src/mcp/transcript.ts
 function currentTurn(services, sessionId) {
 	const threadId = services.sessionRepo.get(sessionId).rootThreadId;
@@ -33749,7 +34308,8 @@ function postSharedArtifact(services, sessionId, artifact, caption) {
 /**
 * `ask_user` (§8.3, §11.1): a question for the user, shown in the transcript and the inbox.
 * Blocks for a few minutes; unanswered questions stay in the inbox and the answer arrives
-* later as a new message (see `QuestionBroker`).
+* later as a new message (see `QuestionBroker`). In a dark factory the PM and the factory's
+* agents are unattended: they get {@link UNATTENDED_ANSWER} at once and decide themselves.
 */
 const askUser = defineTool({
 	name: "ask_user",
@@ -33767,6 +34327,7 @@ const askUser = defineTool({
 		multiSelect: boolean().optional()
 	}),
 	handler: async (input, { services, sessionId, signal }) => {
+		if (services.factory.isUnattended(sessionId)) return UNATTENDED_ANSWER;
 		const turn = currentTurn(services, sessionId);
 		const outcome = await services.questions.ask(sessionId, turn, {
 			question: input.question,
@@ -34151,6 +34712,19 @@ const factoryTools = [
 				workKey: item.workKey
 			};
 		})
+	}),
+	defineTool({
+		name: "factory_record_decision",
+		description: "Record a decision you made on your own instead of asking the user (this project runs as a dark factory, so nobody waits to answer). Give the question you would have asked, what you decided and why, grounded in the vision. It goes to the user's inbox and the daily digest so they can review or override it; nothing waits on it. Set `needsHuman` only for a protected area, a missing or self-contradicting vision, or something irreversible outside the code: that flags it for the user, and you carry on with the work that doesn't depend on it.",
+		roles: ["agent", "pm"],
+		scope: "session",
+		alwaysLoad: true,
+		isAvailable: (services, caller) => {
+			if (!caller) return true;
+			return caller.sessionId !== null && services.factory.isUnattended(caller.sessionId);
+		},
+		input: FactoryDecisionRequest,
+		handler: async (input, { services, sessionId }) => asTool(() => services.factory.recordDecision(services.sessionRepo.get(sessionId), input))
 	})
 ];
 // ../server/src/mcp/tools/finish.ts
@@ -45953,195 +46527,6 @@ function killTree(pid) {
 		process.kill(pid, "SIGKILL");
 	} catch {}
 }
-// ../server/src/services/factory/vision.ts
-/**
-* The project vision (§10.1): `.codeden/VISION.md`, required for autopilot and dark factory.
-* Sections are `##` headings; bullets under them are the entries. Protected areas become path
-* globs (anything in backticks, or that looks like a path) and topics (plain words).
-*/
-const VISION_TEMPLATE = `# Vision
-
-Describe what this project is for. The factory scores every piece of work against this file.
-
-## Goals
-- What should this project achieve in the next months?
-
-## Target users
-- Who uses it, and what do they need?
-
-## Principles
-- Small, well-tested changes
-- Keep the public API stable
-
-## Out of scope
-- Things the factory must never propose
-
-## Quality bar
-- Every behaviour change comes with tests
-- CI is green before merge
-
-## Protected areas
-Paths (globs in backticks) and topics that always need a human. The factory never merges
-changes that touch them; they go to your inbox.
-- \`**/auth/**\`
-- \`**/migrations/**\`
-- \`.github/workflows/**\`
-- \`LICENSE\`
-- payments
-- licensing
-`;
-/** Paths that deploy or release, protected unless `allowDeploys` is on. */
-const DEPLOY_GLOBS = [
-	".github/workflows/*deploy*",
-	".github/workflows/*release*",
-	".github/workflows/*publish*",
-	"**/Dockerfile",
-	"**/fly.toml",
-	"**/vercel.json",
-	"**/netlify.toml"
-];
-/** True when `topic` appears as a word or phrase in `text`. */
-function mentionsTopic(text, topic) {
-	const escaped = topic.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/\s+/g, "\\s+");
-	return new RegExp(`\\b${escaped}\\b`, "i").test(text);
-}
-function visionFile(project) {
-	const file = resolve(project.path, project.visionPath);
-	const rel = relative(project.path, file);
-	if (rel.startsWith("..") || isAbsolute(rel)) throw badRequest("The vision path must stay inside the project", "invalid_vision_path");
-	return file;
-}
-/** Read the vision; the template (and `exists: false`) when the file is missing. */
-function readVision(project) {
-	const file = visionFile(project);
-	const exists = existsSync(file);
-	const contents = exists ? readFileSync(file, "utf8") : VISION_TEMPLATE;
-	return {
-		path: project.visionPath,
-		exists,
-		contents,
-		parsed: parseVision(contents)
-	};
-}
-/** Write the vision atomically (in the main checkout; commit it to share it with agents). */
-function writeVision(project, contents) {
-	const file = visionFile(project);
-	mkdirSync(dirname(file), { recursive: true });
-	const tmp = `${file}.${process.pid}.tmp`;
-	writeFileSync(tmp, contents.endsWith("\n") ? contents : `${contents}\n`);
-	renameSync(tmp, file);
-	return readVision(project);
-}
-// ../server/src/services/factory/context.ts
-/** The vision text and its parsed form ("" and empty when the file is missing). */
-function visionOf(project) {
-	try {
-		const v = readVision(project);
-		return {
-			text: v.exists ? v.contents : "",
-			parsed: v.parsed,
-			exists: v.exists
-		};
-	} catch {
-		return {
-			text: "",
-			exists: false,
-			parsed: {
-				goals: [],
-				users: [],
-				principles: [],
-				outOfScope: [],
-				qualityBar: [],
-				protectedAreas: {
-					globs: [],
-					topics: []
-				}
-			}
-		};
-	}
-}
-/** Raise (or refresh) a factory inbox item. */
-function raiseInbox(ctx, item) {
-	const existing = ctx.inbox.find(item.id);
-	if (existing?.status === "open" && existing.title === item.title && existing.body === item.body) return;
-	const now = ctx.now().toISOString();
-	ctx.inbox.put({
-		id: item.id,
-		kind: item.kind,
-		status: "open",
-		priority: item.priority ?? "normal",
-		title: item.title,
-		body: item.body,
-		projectId: item.projectId,
-		sessionId: item.sessionId ?? null,
-		threadId: null,
-		itemId: null,
-		requestId: null,
-		issue: item.issue ?? null,
-		pr: item.pr ?? null,
-		automationRunId: null,
-		createdAt: existing?.createdAt ?? now,
-		updatedAt: now,
-		resolvedAt: null,
-		resolution: null
-	});
-}
-/** Notice for the PM or the orchestrator about the loop. */
-function factoryNotice(ctx, opts) {
-	ctx.notify({
-		id: opts.id,
-		type: "factory.update",
-		projectId: opts.projectId,
-		target: opts.target,
-		sessionId: null,
-		title: opts.title,
-		data: {
-			event: opts.event,
-			text: opts.text,
-			itemIds: opts.itemIds ?? []
-		}
-	}, opts.wake ?? true);
-}
-/** Pause the loop (failures, regression, budget) with an inbox item for everything but budget. */
-function pauseLoop(ctx, loop, reason, opts = { inbox: true }) {
-	if (loop.state === "paused" && loop.pausedReason === reason) return loop;
-	ctx.log?.(`factory: pausing ${loop.projectId}: ${reason}`);
-	const next = {
-		...loop,
-		state: "paused",
-		pausedReason: reason
-	};
-	if (opts.inbox) {
-		raiseInbox(ctx, {
-			id: `inbox:factory-paused:${loop.projectId}`,
-			kind: "run_failed",
-			priority: "high",
-			projectId: loop.projectId,
-			title: "Factory loop paused",
-			body: `${reason}. Resume it from the factory panel once you have looked.`
-		});
-		factoryNotice(ctx, {
-			id: `factory.paused:${loop.projectId}:${ctx.now().toISOString()}`,
-			projectId: loop.projectId,
-			target: "pm",
-			event: "paused",
-			title: "Factory loop paused",
-			text: `${reason}. No new work starts until the user resumes the loop.`,
-			itemIds: opts.items?.map((i) => i.id),
-			wake: false
-		});
-	}
-	return next;
-}
-/**
-* Spend since `day` that counts against the project's daily factory budget: the factory's own
-* sessions (`budgetScope: "factory"`, the default) or the whole project (`"project"`).
-*/
-function budgetSpend(ctx, projectId, day, limits) {
-	if (limits.budgetScope === "project") return ctx.usage.spendSince(day, projectId);
-	const ids = new Set(ctx.sessions.list(projectId).map((s) => s.id));
-	return ctx.usage.spendSince(day, projectId, ids);
-}
 // ../server/src/services/factory/globs.ts
 /**
 * Small glob matcher for protected paths (§10.1): `**` matches any number of path segments,
@@ -46388,112 +46773,6 @@ async function runAudit(ctx, command, cwd) {
 		};
 	}
 }
-// ../server/src/services/factory/prompts.ts
-/**
-* Prompts of the factory loop (§10.1): improvement finders, builders, independent reviewers,
-* the PM's triage instructions and the follow-ups the loop sends. The server enforces limits;
-* these prompts only carry the judgement work.
-*/
-const AREA_BRIEF = {
-	features: "feature ideas that move the project towards its goals and serve its target users (small, shippable increments)",
-	ux: "user-experience problems: confusing flows, missing feedback, accessibility gaps, rough edges",
-	performance: "performance problems: slow paths, wasteful work, bundle size, blocking I/O",
-	tech_debt: "technical debt that slows work down: duplication, dead code, unclear modules, outdated patterns",
-	test_gaps: "behaviour that is not covered by tests, or tests that are flaky or misleading",
-	security: "security weaknesses: unsafe input handling, secrets, injection, outdated vulnerable dependencies"
-};
-function visionBlock(vision) {
-	return [
-		"<vision>",
-		vision.trim(),
-		"</vision>"
-	].join("\n");
-}
-function criteriaList(item) {
-	return item.acceptanceCriteria.map((c, i) => `${i + 1}. ${c}`).join("\n");
-}
-/** An improvement finder for one area. */
-function discoveryPrompt(opts) {
-	return [
-		`You are an improvement finder for this repository's factory loop. Area: **${opts.area}** — ${AREA_BRIEF[opts.area]}.`,
-		"",
-		"Read the code (do not modify any files, do not commit, do not open pull requests). Find at most 3 concrete, independently shippable improvements in this area that are grounded in the vision below. Each must be small enough for one pull request, must respect the out-of-scope list and must not touch protected areas.",
-		"",
-		visionBlock(opts.vision),
-		"",
-		opts.known.length > 0 ? `Already known (do not repeat): ${opts.known.map((t) => `"${t}"`).join(", ")}.` : "",
-		"When done, call `factory_report_candidates` once with your candidates (title, summary of why it matters, testable acceptance criteria, paths it would touch). If you found nothing worth doing, call it with an empty list. Then call `finish` with a one-line summary."
-	].filter((l) => l !== "").join("\n");
-}
-/** The builder of one accepted item. */
-function builderPrompt(item, vision) {
-	return [
-		`Implement ${item.issue ? `GitHub issue #${item.issue.number} (${item.issue.url})` : "the item"}: **${item.title}**`,
-		"",
-		item.summary,
-		"",
-		"Acceptance criteria:",
-		criteriaList(item),
-		"",
-		visionBlock(vision),
-		"",
-		"How to work:",
-		"- Work only in this worktree. Keep the change small and focused on the criteria; stay out of protected areas and never deploy or release anything.",
-		"- Add or update tests that prove every criterion, and run the project's tests and linters until they pass.",
-		"- Commit, then open the pull request with `create_pull_request` (it links the issue with `Fixes #N`).",
-		"- If you changed anything visible in a UI, start the dev server, take browser screenshots of the change and attach them with `attach_evidence`.",
-		"- Call `finish` with the outcome, a summary, the tests you ran and the changed files.",
-		"An independent reviewer on another provider checks your pull request against the criteria and the vision before CodeDen merges it automatically."
-	].join("\n");
-}
-/** The independent reviewer of one pull request. */
-function reviewerPrompt(item, vision, note, localBase) {
-	const pr = item.pr ? `#${item.pr.number} (${item.pr.url})` : "the pull request";
-	const read = localBase ? `You are in the author's worktree, on the PR branch. Read the change locally and offline: \`git diff ${localBase}...HEAD\`, \`git log --oneline ${localBase}..HEAD\`, and the code around it; run the tests if useful. Do not use the network (no \`gh\`, no fetch). Do not modify files, commit or push.` : `Read the change (for example \`gh pr diff ${item.pr?.number ?? ""}\` and \`gh pr view ${item.pr?.number ?? ""}\`), and the code around it. Do not modify files, commit, push or comment on GitHub.`;
-	return [
-		`You are the independent reviewer of pull request ${pr}: **${item.title}**. Another agent wrote it; CodeDen merges it automatically only if you approve and every other merge check passes.`,
-		note ? `Note: ${note}` : "",
-		"",
-		"Acceptance criteria:",
-		criteriaList(item),
-		"",
-		visionBlock(vision),
-		"",
-		read,
-		"Judge: does it meet every criterion? Does it fit the vision and stay out of its out-of-scope list and protected areas? Are there tests that prove the behaviour (or are none needed)? Any security problems (injection, secrets, unsafe input, risky dependencies)?",
-		"",
-		"Then call `factory_submit_review` exactly once with your verdict: `approve` only when everything holds, `request_changes` for fixable problems, `reject` when the change should not exist. Be specific in the summary."
-	].filter((l) => l !== "").join("\n");
-}
-/** Message to the builder after failed merge checks. */
-function fixPrompt(item, failed) {
-	return [
-		`The merge checks for your pull request${item.pr ? ` #${item.pr.number}` : ""} failed:`,
-		...failed.map((c) => `- ${c.name}: ${c.detail ?? "failed"}`),
-		item.review && item.review.verdict !== "approve" ? `Reviewer: ${item.review.summary}` : "",
-		"",
-		"Fix these in the same branch, run the tests, commit and push (call `create_pull_request` again to update the PR), then call `finish`."
-	].filter((l) => l !== "").join("\n");
-}
-/** Ask a reviewer to look again after fixes. */
-function reReviewPrompt(item) {
-	return `The author pushed fixes to pull request #${item.pr?.number ?? "?"}. Review the updated change again against the same criteria and call \`factory_submit_review\` once with a fresh verdict.`;
-}
-const BUILDER_NUDGE = "You ended your turn without an open pull request. If the work is done, commit it and call `create_pull_request`; if you are blocked, call `finish` with outcome `blocked` and explain why.";
-const REVIEWER_NUDGE = "You ended your turn without a verdict. Call `factory_submit_review` now with `approve`, `request_changes` or `reject`.";
-/** An agent writes the revert when the API cannot (main moved on after the merge). */
-function revertPrompt(opts) {
-	return [`CI on the default branch failed after pull request #${opts.prNumber} ("${opts.title}") was merged as ${opts.sha}.`, `Revert that commit in this worktree (\`git revert --no-edit ${opts.sha}\`), resolve conflicts conservatively, run the tests, and open a pull request titled \`Revert "${opts.title}"\` with \`create_pull_request\`. Do nothing else. Then call \`finish\`.`].join("\n");
-}
-/** The PM's structured triage instructions for new candidates. */
-function triageInstructions(items) {
-	return [
-		`The factory has ${items.length} new candidate${items.length === 1 ? "" : "s"} to triage. Score each against the project vision (read it with read_project_notes or the vision file) and decide:`,
-		...items.map((i) => `- item ${i.id} [${i.source}${i.area ? `/${i.area}` : ""}] "${i.title}": ${i.summary.slice(0, 300)}${i.acceptanceCriteria.length ? ` | criteria: ${i.acceptanceCriteria.join("; ").slice(0, 400)}` : ""}`),
-		"",
-		"For each, call `factory_triage` with decision `accept` (a score from 0 to 1 and, if needed, sharper acceptance criteria) or `reject` (with the reason). Accepted items become GitHub issues and are built and merged automatically within the limits; reject anything outside the vision, too large, or touching protected areas."
-	].join("\n");
-}
 // ../server/src/services/factory/progress.ts
 const BUSY$2 = /* @__PURE__ */ new Set([
 	"created",
@@ -47367,7 +47646,7 @@ function requestTriage(ctx, project) {
 		target: "pm",
 		event: "triage_needed",
 		title: `Factory: ${fresh.length} candidate${fresh.length === 1 ? "" : "s"} to triage`,
-		text: triageInstructions(fresh),
+		text: triageInstructions(fresh, project.autonomyMode === "dark_factory"),
 		itemIds: fresh.map((i) => i.id)
 	});
 	for (const item of fresh) ctx.store.updateItem(item.id, (i) => ({
@@ -47555,11 +47834,17 @@ function buildDigest(opts) {
 		title: `${i.title}: ${i.reason ?? "needs a human"}`,
 		inboxItemId: null,
 		itemId: i.id
-	})), ...opts.inbox.filter((x) => x.status === "open" && !x.id.startsWith("inbox:factory-digest:")).map((x) => ({
+	})), ...opts.inbox.filter((x) => x.status === "open" && !x.id.startsWith("inbox:factory-digest:") && !(x.id.startsWith("inbox:factory-decision:") && x.priority !== "high")).map((x) => ({
 		title: x.title,
 		inboxItemId: x.id,
 		itemId: null
 	}))];
+	const decisions = opts.inbox.filter((x) => x.id.startsWith("inbox:factory-decision:") && dayOf(x.createdAt) === opts.day).sort((a, b) => a.createdAt.localeCompare(b.createdAt)).map((x) => ({
+		title: x.title,
+		decision: /\*\*Decision:\*\* (.*)/.exec(x.body ?? "")?.[1] ?? "",
+		needsHuman: x.priority === "high",
+		inboxItemId: x.id
+	}));
 	const spend = {
 		usd: Math.round(opts.spend.usd * 100) / 100,
 		tokens: opts.spend.tokens,
@@ -47574,6 +47859,7 @@ function buildDigest(opts) {
 		rejected,
 		spend,
 		waiting,
+		decisions,
 		createdAt: (opts.now ?? /* @__PURE__ */ new Date()).toISOString()
 	};
 	return {
@@ -47596,171 +47882,15 @@ function renderDigest(projectName, d, pausedReason) {
 	lines.push("", `Rejected or failed (${d.rejected.length}):`);
 	for (const r of d.rejected) lines.push(`- ${r.title}: ${r.reason}`);
 	if (d.rejected.length === 0) lines.push("- nothing");
+	if (d.decisions.length > 0) {
+		lines.push("", `Decided on its own (${d.decisions.length}):`);
+		for (const x of d.decisions) lines.push(`- ${x.title}${x.decision ? ` → ${x.decision}` : ""}`);
+	}
 	lines.push("", `Spend: ${budget}`, "", `Waiting on you (${d.waiting.length}):`);
 	for (const w of d.waiting) lines.push(`- ${w.title}`);
 	if (d.waiting.length === 0) lines.push("- nothing");
 	return lines.join("\n");
 }
-// ../server/src/services/factory/sessions.ts
-/** Who starts factory sessions; `id: "factory"` marks them for limits and the kill switch. */
-const FACTORY_STARTER = {
-	kind: "pm",
-	id: "factory"
-};
-/** Statuses that hold a session slot (`maxConcurrentSessions`). */
-const SLOT_STATUSES = /* @__PURE__ */ new Set([
-	"created",
-	"queued",
-	"starting",
-	"running",
-	"waiting"
-]);
-/** Statuses of sessions the kill switch stops. */
-const LIVE_STATUSES = /* @__PURE__ */ new Set([
-	...SLOT_STATUSES,
-	"idle",
-	"interrupted"
-]);
-function isFactorySession(s) {
-	return s.startedBy.kind === FACTORY_STARTER.kind && s.startedBy.id === FACTORY_STARTER.id;
-}
-/** Starts and stops the factory's agent sessions through the normal session service (§8.2). */
-var FactorySessions = class {
-	deps;
-	constructor(deps) {
-		this.deps = deps;
-	}
-	/** Factory sessions of a project, newest first. */
-	list(projectId) {
-		return this.deps.repo.list({
-			projectId,
-			role: "agent"
-		}).filter(isFactorySession);
-	}
-	/** Factory sessions holding a slot right now. */
-	activeCount(projectId) {
-		return this.list(projectId).filter((s) => SLOT_STATUSES.has(s.status)).length;
-	}
-	/** Providers the runner offers (the Fake provider only when nothing else is there). */
-	providers() {
-		const ids = this.deps.runner.providers().map((p) => p.id);
-		const real = ids.filter((id) => id !== "fake");
-		return real.length > 0 ? real : ids;
-	}
-	startDiscovery(projectId, area, vision, known) {
-		return this.start({
-			projectId,
-			purpose: `Factory: find ${area.replace("_", " ")} improvements`,
-			workKey: `factory:discover:${area}`,
-			scope: { area: `factory-discover-${area}` },
-			title: `Factory discovery: ${area}`,
-			input: {
-				text: discoveryPrompt({
-					area,
-					vision,
-					known
-				}),
-				attachments: []
-			}
-		});
-	}
-	startBuilder(item, vision, provider) {
-		return this.start({
-			projectId: item.projectId,
-			provider,
-			purpose: `Factory: ${item.title}`.slice(0, 300),
-			workKey: item.workKey,
-			title: item.title.slice(0, 200),
-			issue: item.issue ?? void 0,
-			input: {
-				text: builderPrompt(item, vision),
-				attachments: []
-			}
-		});
-	}
-	/**
-	* Start the reviewer offline: in the builder's worktree when there is one, otherwise (a
-	* revert PR opened through the API) in a new worktree on the PR's head, fetched from origin
-	* by CodeDen before the session starts.
-	*/
-	startReviewer(item, vision, provider, note, pr) {
-		const builder = item.builderSessionId ? this.deps.repo.find(item.builderSessionId)?.session : void 0;
-		const worktree = builder?.worktreePath ?? null;
-		let workspace = { mode: "worktree" };
-		let localBase = null;
-		if (worktree) {
-			workspace = {
-				mode: "existing",
-				path: worktree
-			};
-			localBase = builder?.baseBranch ?? "main";
-		} else if (pr) {
-			workspace = {
-				mode: "worktree",
-				branch: `codeden/review-${item.pr?.number ?? item.id.slice(0, 8)}-${item.id.slice(0, 4)}`,
-				baseRef: `origin/${pr.headBranch}`,
-				fetch: true
-			};
-			localBase = `origin/${pr.baseBranch}`;
-		}
-		return this.start({
-			projectId: item.projectId,
-			provider,
-			purpose: `Factory review: ${item.title}`.slice(0, 300),
-			workKey: `factory:review:${item.pr?.number ?? item.id}`,
-			title: `Review: ${item.title}`.slice(0, 200),
-			issue: item.issue ?? void 0,
-			workspace,
-			input: {
-				text: reviewerPrompt(item, vision, note, localBase),
-				attachments: []
-			}
-		});
-	}
-	startRevert(projectId, merge) {
-		return this.start({
-			projectId,
-			purpose: `Factory: revert #${merge.prNumber} after a CI regression`,
-			workKey: `factory:revert:${merge.sha.slice(0, 7)}`,
-			title: `Revert #${merge.prNumber}`,
-			input: {
-				text: revertPrompt(merge),
-				attachments: []
-			}
-		});
-	}
-	/** Send a follow-up to a session (queued behind a running turn). */
-	async message(sessionId, text) {
-		await this.deps.sessions.send(sessionId, {
-			input: {
-				text,
-				attachments: []
-			},
-			whenBusy: "queue"
-		}, "codeden");
-	}
-	/** Stop every live factory session of a project (kill switch). Returns the stopped ids. */
-	async stopAll(projectId) {
-		const stopped = [];
-		for (const s of this.list(projectId)) {
-			if (!LIVE_STATUSES.has(s.status)) continue;
-			try {
-				await this.deps.sessions.stop(s.id);
-				stopped.push(s.id);
-			} catch (error) {
-				this.deps.log?.(`factory: stop ${s.id}: ${errorMessage$1(error)}`);
-			}
-		}
-		return stopped;
-	}
-	start(req) {
-		return this.deps.sessions.start(StartSessionRequest.parse({
-			role: "agent",
-			startedBy: FACTORY_STARTER,
-			...req
-		}));
-	}
-};
 // ../server/src/services/factory/status.ts
 function workItem(i) {
 	return {
@@ -48083,6 +48213,14 @@ var FactoryService = class {
 		if (session.projectId) this.soon(session.projectId);
 		return res;
 	}
+	/** `factory_record_decision`: a decision an unattended agent made instead of asking. */
+	recordDecision(session, req) {
+		return recordDecision(this.ctx, session, req);
+	}
+	/** True when nobody answers this session's questions (dark factory PM or factory agent). */
+	isUnattended(sessionId) {
+		return unattendedSession(this.ctx, sessionId) !== void 0;
+	}
 	async halt(projectId) {
 		const stopped = await this.ctx.sessions.stopAll(projectId);
 		for (const item of this.data.items(projectId, ["building", "verifying"])) this.data.updateItem(item.id, (i) => i.stage === "building" && !i.pr ? {
@@ -48146,7 +48284,10 @@ var FactoryService = class {
 		return digest;
 	}
 	onEvents(events) {
-		for (const e of events) if (e.type === "session.updated") {
+		for (const e of events) if (e.type === "agent.item.started") {
+			if (e.payload.item?.kind !== "user_question") continue;
+			setImmediate(() => void answerProviderQuestion(this.ctx, (id, req) => this.deps.sessions.respond(id, req), e));
+		} else if (e.type === "session.updated") {
 			const { session } = e.payload;
 			if (session.projectId && isFactorySession(session)) this.soon(session.projectId);
 		} else if (e.type.startsWith("pr.")) {
@@ -61226,4 +61367,4 @@ main().then((code) => process.exit(code), (error) => {
 });
 export {};
 
-//# sourceMappingURL=main-sEg3GS7X.js.map
+//# sourceMappingURL=main-sdPbRDgf.js.map