codeden 0.4.3 → 0.4.4

package/README.md

@@ -125,7 +125,7 @@ One `generate_image` tool, available to every agent whatever its provider. It ro
 
 ### Voice
 
-Dictate into the composer (browser speech, or ElevenLabs / OpenAI), with push-to-talk. Have an agent's final message read aloud when its turn completes, with code stripped and long messages summarised first. [Voice and images](https://github.com/leonvanzyl/codeden/blob/main/docs/voice-and-images.md).
+Dictate into the composer (browser speech, or ElevenLabs / OpenAI), with push-to-talk. Have an agent's final message read aloud when its turn completes, with code stripped, as a short TL;DR or the full message. [Voice and images](https://github.com/leonvanzyl/codeden/blob/main/docs/voice-and-images.md).
 
 ### Usage and cost reports
 

package/dist/cli.js

@@ -242,7 +242,7 @@ async function run() {
 		console.log(selfVersion);
 		process.exit(0);
 	}
-	await import("./main-CtuRKdHE.js");
+	await import("./main-CKLHi4sz.js");
 }
 /** Settles once this copy's CLI has loaded (an older launcher that switched here awaits it). */
 const started = run();

package/dist/{main-CtuRKdHE.js → main-CKLHi4sz.js}

@@ -1,5 +1,5 @@
 import { n as __require, r as __toESM, t as __commonJSMin } from "./rolldown-runtime-DegdyBIC.js";
-import { $ as BrowserNavigateRequest, $n as AgentConfigListQuery, $t as NOTICE_BATCH_CODE, A as SessionFileQuery, An as EditQueuedMessageRequest, Ar as prettifyError, At as RespondRequest, B as NetworkStatus, Bn as ProjectConfigFile, Bt as HealthResponse, C as isElectronRuntime, Cn as AutomationGuards, Cr as record, Ct as CreateProjectRequest, D as CODEDEN_VERSION, Dn as Session, Dr as ZodError, Dt as ListSessionsQuery, E as wrapper_default, En as TriagePolicy, Er as unknown, Et as ListInboxQuery, F as ListConflictsQuery, Fn as SpeechSummaryRequest, Ft as StartSessionRequest, G as SetNetworkPasswordResponse, Gn as sortProjects, Gt as SttQuery, H as RemoteAccessFile, Hn as StartedBy, Ht as Settings, I as ListNoticesQuery, In as TerminalClientMessage, It as SteerRequest, J as ImageTestRequest, Jn as InboxItem, Jt as UpdateInstallRequest, K as SignInRequest, Kn as DEFAULT_VISION_PATH, Kt as TtsRequest, L as ResolveConflictRequest, Ln as TerminalQuery, Lt as ThreadItemsQuery, M as RunnerToServerMessage, Mn as GitPushRequest, Mt as SendMessageRequest, N as ServerLock, Nn as RestoreFilesRequest, Nt as SessionStartMeta, O as UsageQuery, On as SessionStatus, Or as toJSONSchema, Ot as ReorderProjectsRequest, P as ArchiveSessionRequest, Pn as SessionResult, Pt as SetSecretRequest, Q as BrowserHistoryRequest, Qn as AgentConfigDiffRequest, Qt as ConflictRecord, R as RoleMessageRequest, Rn as RunnerCommandResults, Rt as UiClientMessage, S as acquireInstallLock, Sn as AutomationAction, Sr as preprocess, St as UpdateAutomationRequest, T as import_websocket_server, Tn as AutomationTrigger, Tr as union$1, Tt as FileWriteRequest, U as SetNetworkAccessRequest, Un as WorkKey, Ut as LOCAL_STT_SAMPLE_RATE, V as PASSWORD_RULE_TEXT, Vn as ConflictDecision, Vt as agentEventToNewEvent, W as SetNetworkPasswordRequest, Wn as Project, Wt as LocalSttModelParams, X as BrowserClientMessage, Xn as messageFrom, Xt as compareVersions, Y as summarizeActivity, Yn as InboxItemKind, Yt as UpdateStatus, Z as BrowserDevServerRequest, Zn as AgentConfigDeleteQuery, Zt as isNewerVersion, _ as importClaudeSdkFrom, _n as ReviewVerdict, _r as literal, _t as StarterSetRequest, a as Hono, an as GithubPr, ar as AutonomyLevel, at as AutomationImportSource, b as runNpm, bn as Artifact, br as object, bt as UpcomingRunsQuery, c as createAdaptorServer, cn as githubPrId, cr as datetime, ct as ImportAutomationsRequest, d as createImageEngineRegistry, dn as FactoryCandidate, dr as array, dt as AutomationProjectRequest, en as CreateGithubIssueRequest, er as AgentConfigLocator, et as BrowserNewTabRequest, f as IMAGE_ASPECT_RATIOS, fn as FactoryDecisionRequest, fr as boolean, ft as CreateAutomationRequest, g as CLAUDE_SDK_VERSION, gn as PutVisionRequest, gr as intersection, gt as SetAutomationEnabledRequest, h as claudeSdkSource, hn as KillSwitchRequest, hr as int, ht as RunAutomationRequest, i as killTree$1, in as GithubListQuery, ir as McpServerUpsertRequest, it as AUTOMATION_IMPORT_LIMITS, j as RunnerLock, jn as GitCommitRequest, jt as SecretKey, k as UsageSettings, kn as DiffScope, kr as safeParse$1, kt as ResolveInboxRequest, l as upgradeWebSocket, ln as parseGithubPrId, lr as _enum, lt as AutomationFileFrontmatter, m as ImageGenerationError, mn as FactoryTuning, mr as discriminatedUnion, mt as ListAutomationsQuery, n as readLock, nn as GithubIssue, nr as McpServerDiffRequest, nt as BrowserViewportRequest, o as tryDecodeURIComponent, on as MergePrRequest, or as ProviderId, ot as DuplicateAutomationRequest, p as resolveImageOutput, pn as FactoryTriageRequest, pr as custom, pt as ListAutomationRunsQuery, q as passwordProblem, qn as FactoryLimits, qt as AppPointer, r as isAlive, rn as GithubLabelRequest, rr as McpServerTarget, rt as BrowserWsQuery, s as bufferToFormData, sn as TriageIssueRequest, sr as ReasoningEffort, st as ExportAutomationsQuery, tn as GithubCommentRequest, tr as AgentConfigWriteRequest, tt as BrowserOpenRequest, u as ImageEngineRegistry, un as DiscoveryArea, ur as _null, ut as AutomationGuardsPatch, v as installClaudeSdk, vn as SetAutonomyModeRequest, vr as looseObject, vt as TriageDecisionRequest, w as ownNodeEnv, wn as AutomationRun, wr as string, wt as FileReadQuery, x as resolveNpm, xn as Automation, xr as optional, xt as UpdateAutomationProjectSettingsRequest, y as isClaudeSdkInstalled, yn as isFactoryMode, yr as number, yt as TriageReport, z as UpdateSessionRequest, zn as SessionOptions, zt as UpdateProjectRequest } from "./runner-BPkTmgxq.js";
+import { $ as BrowserNavigateRequest, $n as InboxItemKind, $t as isNewerVersion, A as SessionFileQuery, An as TriagePolicy, Ar as unknown, At as RespondRequest, B as NetworkStatus, Bn as TerminalClientMessage, Bt as HealthResponse, C as isElectronRuntime, Cn as isFactoryMode, Cr as number, Ct as CreateProjectRequest, D as CODEDEN_VERSION, Dn as AutomationGuards, Dr as record, Dt as ListSessionsQuery, E as wrapper_default, En as AutomationAction, Er as preprocess, Et as ListInboxQuery, F as ListConflictsQuery, Fn as GitCommitRequest, Ft as StartSessionRequest, G as SetNetworkPasswordResponse, Gn as ConflictDecision, Gt as LOCAL_STT_SAMPLE_RATE, H as RemoteAccessFile, Hn as RunnerCommandResults, Ht as READ_ALOUD_FULL_MAX_CHARS, I as ListNoticesQuery, In as GitPushRequest, It as SteerRequest, J as ImageTestRequest, Jn as Project, Jt as TtsRequest, K as SignInRequest, Kn as StartedBy, Kt as LocalSttModelParams, L as ResolveConflictRequest, Ln as RestoreFilesRequest, Lt as ThreadItemsQuery, M as RunnerToServerMessage, Mn as SessionStatus, Mr as toJSONSchema, Mt as SendMessageRequest, N as ServerLock, Nn as DiffScope, Nr as safeParse$1, Nt as SessionStartMeta, O as UsageQuery, On as AutomationRun, Or as string, Ot as ReorderProjectsRequest, P as ArchiveSessionRequest, Pn as EditQueuedMessageRequest, Pr as prettifyError, Pt as SetSecretRequest, Q as BrowserHistoryRequest, Qn as InboxItem, Qt as compareVersions, R as RoleMessageRequest, Rn as SessionResult, Rt as UiClientMessage, S as acquireInstallLock, Sn as SetAutonomyModeRequest, Sr as looseObject, St as UpdateAutomationRequest, T as import_websocket_server, Tn as Automation, Tr as optional, Tt as FileWriteRequest, U as SetNetworkAccessRequest, Un as SessionOptions, Ut as Settings, V as PASSWORD_RULE_TEXT, Vn as TerminalQuery, Vt as agentEventToNewEvent, W as SetNetworkPasswordRequest, Wn as ProjectConfigFile, Wt as speechExcerpt, X as BrowserClientMessage, Xn as DEFAULT_VISION_PATH, Xt as UpdateInstallRequest, Y as summarizeActivity, Yn as sortProjects, Yt as AppPointer, Z as BrowserDevServerRequest, Zn as FactoryLimits, Zt as UpdateStatus, _ as importClaudeSdkFrom, _n as FactoryTuning, _r as custom, _t as StarterSetRequest, a as Hono, an as GithubLabelRequest, ar as AgentConfigWriteRequest, at as AutomationImportSource, b as runNpm, bn as PutVisionRequest, br as intersection, bt as UpcomingRunsQuery, c as createAdaptorServer, cn as MergePrRequest, cr as McpServerUpsertRequest, ct as ImportAutomationsRequest, d as createImageEngineRegistry, dn as parseGithubPrId, dr as ReasoningEffort, dt as AutomationProjectRequest, en as ConflictRecord, er as messageFrom, et as BrowserNewTabRequest, f as IMAGE_ASPECT_RATIOS, fn as DiscoveryArea, fr as datetime, ft as CreateAutomationRequest, g as CLAUDE_SDK_VERSION, gn as FactoryTriageRequest, gr as boolean, gt as SetAutomationEnabledRequest, h as claudeSdkSource, hn as FactoryDecisionRequest, hr as array, ht as RunAutomationRequest, i as killTree$1, in as GithubIssue, ir as AgentConfigLocator, it as AUTOMATION_IMPORT_LIMITS, j as RunnerLock, jn as Session, jr as ZodError, jt as SecretKey, k as UsageSettings, kn as AutomationTrigger, kr as union$1, kt as ResolveInboxRequest, l as upgradeWebSocket, ln as TriageIssueRequest, lr as AutonomyLevel, lt as AutomationFileFrontmatter, m as ImageGenerationError, mn as FactoryCandidate, mr as _null, mt as ListAutomationsQuery, n as readLock, nn as CreateGithubIssueRequest, nr as AgentConfigDiffRequest, nt as BrowserViewportRequest, o as tryDecodeURIComponent, on as GithubListQuery, or as McpServerDiffRequest, ot as DuplicateAutomationRequest, p as resolveImageOutput, pn as FactoryAllowLargeChangeRequest, pr as _enum, pt as ListAutomationRunsQuery, q as passwordProblem, qn as WorkKey, qt as SttQuery, r as isAlive, rn as GithubCommentRequest, rr as AgentConfigListQuery, rt as BrowserWsQuery, s as bufferToFormData, sn as GithubPr, sr as McpServerTarget, st as ExportAutomationsQuery, tn as NOTICE_BATCH_CODE, tr as AgentConfigDeleteQuery, tt as BrowserOpenRequest, u as ImageEngineRegistry, un as githubPrId, ur as ProviderId, ut as AutomationGuardsPatch, v as installClaudeSdk, vn as KillSwitchRequest, vr as discriminatedUnion, vt as TriageDecisionRequest, w as ownNodeEnv, wn as Artifact, wr as object, wt as FileReadQuery, x as resolveNpm, xn as ReviewVerdict, xr as literal, xt as UpdateAutomationProjectSettingsRequest, y as isClaudeSdkInstalled, yn as LEGACY_SIZE_LIMITS, yr as int, yt as TriageReport, z as UpdateSessionRequest, zn as SpeechSummaryRequest, zt as UpdateProjectRequest } from "./runner-DjavcMnG.js";
 import { createRequire } from "node:module";
 import fs, { accessSync, appendFileSync, closeSync, constants, copyFileSync, cpSync, createReadStream, existsSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
 import { homedir, networkInterfaces, tmpdir } from "node:os";
@@ -31573,24 +31573,24 @@ function validateAutomation(a) {
 	if (a.action.type === "triage" && a.trigger.type === "cron") throw badRequest("Triage runs on issue events, not on a schedule", "invalid_trigger");
 }
 // ../server/src/services/automations/import.ts
-const tooLarge = (message) => new ServiceError(413, "import_too_large", message);
+const tooLarge$1 = (message) => new ServiceError(413, "import_too_large", message);
 /** The last path segment of a zip entry or uploaded file name. */
 const baseName = (name) => name.split(/[\\/]/).pop()?.trim() || "automation.md";
 /** Read the `.md` entries of a zip, refusing oversized or overfull archives before inflating. */
 function unzipMarkdown(zipBase64) {
 	const data = Buffer.from(zipBase64, "base64");
 	if (data.length === 0) throw badRequest("The zip is empty or not base64", "invalid_zip");
-	if (data.length > AUTOMATION_IMPORT_LIMITS.maxZipBytes) throw tooLarge(`The zip is larger than ${AUTOMATION_IMPORT_LIMITS.maxZipBytes / 1024} KB`);
+	if (data.length > AUTOMATION_IMPORT_LIMITS.maxZipBytes) throw tooLarge$1(`The zip is larger than ${AUTOMATION_IMPORT_LIMITS.maxZipBytes / 1024} KB`);
 	let entries = 0;
 	let total = 0;
 	const wanted = (file) => {
 		entries++;
-		if (entries > AUTOMATION_IMPORT_LIMITS.maxZipEntries) throw tooLarge(`The zip lists more than ${AUTOMATION_IMPORT_LIMITS.maxZipEntries} entries`);
+		if (entries > AUTOMATION_IMPORT_LIMITS.maxZipEntries) throw tooLarge$1(`The zip lists more than ${AUTOMATION_IMPORT_LIMITS.maxZipEntries} entries`);
 		const name = file.name.replace(/\\/g, "/");
 		if (name.endsWith("/") || name.startsWith("__MACOSX/") || !/\.md$/i.test(name)) return false;
-		if (file.originalSize > AUTOMATION_IMPORT_LIMITS.maxFileChars) throw tooLarge(`${baseName(name)} is larger than ${AUTOMATION_IMPORT_LIMITS.maxFileChars / 1024} KB`);
+		if (file.originalSize > AUTOMATION_IMPORT_LIMITS.maxFileChars) throw tooLarge$1(`${baseName(name)} is larger than ${AUTOMATION_IMPORT_LIMITS.maxFileChars / 1024} KB`);
 		total += file.originalSize;
-		if (total > AUTOMATION_IMPORT_LIMITS.maxTotalChars) throw tooLarge(`The zip holds more than ${AUTOMATION_IMPORT_LIMITS.maxTotalChars / 1024} KB of automations`);
+		if (total > AUTOMATION_IMPORT_LIMITS.maxTotalChars) throw tooLarge$1(`The zip holds more than ${AUTOMATION_IMPORT_LIMITS.maxTotalChars / 1024} KB of automations`);
 		return true;
 	};
 	let files;
@@ -31601,7 +31601,7 @@ function unzipMarkdown(zipBase64) {
 		throw badRequest(`Not a readable zip: ${errorMessage$1(error)}`, "invalid_zip");
 	}
 	return Object.entries(files).map(([name, bytes]) => {
-		if (bytes.length > AUTOMATION_IMPORT_LIMITS.maxFileChars) throw tooLarge(`${baseName(name)} is too large`);
+		if (bytes.length > AUTOMATION_IMPORT_LIMITS.maxFileChars) throw tooLarge$1(`${baseName(name)} is too large`);
 		return {
 			name: baseName(name),
 			content: strFromU8(bytes)
@@ -31630,8 +31630,8 @@ function collectImportFiles(source) {
 		...source.text?.trim() ? [pastedFile(source.text)] : []
 	];
 	if (files.length === 0) throw badRequest("No .md automation files found", "import_empty");
-	if (files.length > AUTOMATION_IMPORT_LIMITS.maxFiles) throw tooLarge(`At most ${AUTOMATION_IMPORT_LIMITS.maxFiles} automations can be imported at once`);
-	if (files.reduce((n, f) => n + f.content.length, 0) > AUTOMATION_IMPORT_LIMITS.maxTotalChars) throw tooLarge(`The import holds more than ${AUTOMATION_IMPORT_LIMITS.maxTotalChars / 1024} KB`);
+	if (files.length > AUTOMATION_IMPORT_LIMITS.maxFiles) throw tooLarge$1(`At most ${AUTOMATION_IMPORT_LIMITS.maxFiles} automations can be imported at once`);
+	if (files.reduce((n, f) => n + f.content.length, 0) > AUTOMATION_IMPORT_LIMITS.maxTotalChars) throw tooLarge$1(`The import holds more than ${AUTOMATION_IMPORT_LIMITS.maxTotalChars / 1024} KB`);
 	const seen = /* @__PURE__ */ new Map();
 	return files.map((f) => {
 		const key = f.name.toLowerCase();
@@ -33984,6 +33984,18 @@ function fixPrompt(item, failed) {
 		"Fix these in the same branch, run the tests, commit and push (call `create_pull_request` again to update the PR), then call `finish`."
 	].filter((l) => l !== "").join("\n");
 }
+/** Message to the PM when a pull request is over the size limit. */
+function tooLargePrompt(item, detail, failed) {
+	const others = failed.filter((c) => c.name !== "size");
+	const pr = item.pr ? `pull request #${item.pr.number}` : "its pull request";
+	return [
+		`Item ${item.id} ("${item.title}", ${pr}) is too large to merge automatically: ${detail}.`,
+		others.length > 0 ? `It also failed: ${others.map((c) => `${c.name} (${c.detail ?? "failed"})`).join("; ")}.` : "Every other check that ran passed.",
+		"Decide now; don't ask the user:",
+		"- If the work can be split, open the parts as smaller issues with `create_issue` (each under the limit, with acceptance criteria). They become candidates; triage them as usual. Then close the oversized pull request on GitHub.",
+		`- If it can't be split (an initial scaffold, a stack migration), call \`factory_allow_large_change\` with item ${item.id} and the reason. The checks run again${others.length > 0 ? ", the builder gets a fix round for the other failures," : ""} and it merges once the rest pass.`
+	].join("\n");
+}
 /** Ask a reviewer to look again after fixes. */
 function reReviewPrompt(item) {
 	return `The author pushed fixes to pull request #${item.pr?.number ?? "?"}. Review the updated change again against the same criteria and call \`factory_submit_review\` once with a fresh verdict.`;
@@ -33998,12 +34010,13 @@ function revertPrompt(opts) {
 * The PM's structured triage instructions for new candidates. `unattended` (dark factory): the
 * PM makes every judgement call itself and records it, since nobody is watching to answer.
 */
-function triageInstructions(items, unattended = false) {
+function triageInstructions(items, unattended = false, sizeLimit = "no limit") {
 	return [
 		`The factory has ${items.length} new candidate${items.length === 1 ? "" : "s"} to triage. Score each against the project vision (read it with read_project_notes or the vision file) and decide:`,
 		...items.map((i) => `- item ${i.id} [${i.source}${i.area ? `/${i.area}` : ""}] "${i.title}": ${i.summary.slice(0, 300)}${i.acceptanceCriteria.length ? ` | criteria: ${i.acceptanceCriteria.join("; ").slice(0, 400)}` : ""}`),
 		"",
 		"For each, call `factory_triage` with decision `accept` (a score from 0 to 1 and, if needed, sharper acceptance criteria) or `reject` (with the reason). Accepted items become GitHub issues and are built and merged automatically within the limits; reject anything outside the vision, too large, or touching protected areas.",
+		sizeLimit === "no limit" ? "" : `Size: pull requests over ${sizeLimit} (lockfiles and generated or vendored files don't count) aren't merged automatically. Split bigger work into separate items that each fit (create the extra ones with \`create_issue\`). If the work can't be split (an initial scaffold, a stack migration), accept it with \`largeChange\` and the reason instead.`,
 		"The vision wins over the current code. When the code doesn't match it (a different stack or architecture, say), the work that brings it in line comes first: score it highest, or open it with `create_issue` if no candidate covers it (new issues become candidates). Reject work that change would throw away, saying it waits for it.",
 		unattended ? "This project runs as a dark factory: nobody is watching, so never ask the user. Make every judgement call yourself from the vision and record the ones that matter with `factory_record_decision` (the user reviews them in the inbox and the daily digest). Flag `needsHuman` only for a protected area, a missing or self-contradicting vision, or something irreversible outside the code, and triage everything else meanwhile." : ""
 	].filter((l) => l !== "").join("\n");
@@ -34235,16 +34248,19 @@ async function answerProviderQuestion(ctx, respond, e) {
 		return false;
 	}
 }
-/** `factory_record_decision`: put a factory agent's own decision in front of the user. */
-function recordDecision(ctx, session, req) {
-	if (!session.projectId) throw badRequest("Only a project's sessions record factory decisions", "no_project");
+/**
+* `factory_record_decision`: put a factory decision in front of the user (the inbox and the
+* daily digest). Also used for the PM's size allowances.
+*/
+function recordDecision(ctx, by, req) {
+	if (!by.projectId) throw badRequest("Only a project's sessions record factory decisions", "no_project");
 	const id = `${DECISION_INBOX_PREFIX}${randomUUID()}`;
 	raiseInbox(ctx, {
 		id,
 		kind: "message",
 		priority: req.needsHuman ? "high" : "low",
-		projectId: session.projectId,
-		sessionId: session.id,
+		projectId: by.projectId,
+		sessionId: by.sessionId,
 		title: `${req.needsHuman ? "Factory needs you" : "Factory decided"}: ${oneLine(req.question, 120)}`,
 		body: [
 			`**Question:** ${req.question}`,
@@ -34697,7 +34713,7 @@ const factoryTools = [
 	}),
 	defineTool({
 		name: "factory_triage",
-		description: "Decide on a factory candidate after scoring it against the vision. `accept` with a score (0..1) and, if needed, sharper acceptance criteria: CodeDen creates the GitHub issue and builds it within the limits. `reject` with the reason (outside the vision, too big, touches protected areas, duplicate).",
+		description: "Decide on a factory candidate after scoring it against the vision. `accept` with a score (0..1) and, if needed, sharper acceptance criteria: CodeDen creates the GitHub issue and builds it within the limits. `reject` with the reason (outside the vision, too big, touches protected areas, duplicate). Work over the size limit that can't be split (an initial scaffold, a stack migration): accept with `largeChange` and the reason.",
 		roles: ["pm"],
 		scope: "project",
 		alwaysLoad: true,
@@ -34713,6 +34729,23 @@ const factoryTools = [
 			};
 		})
 	}),
+	defineTool({
+		name: "factory_allow_large_change",
+		description: "Let a factory item whose pull request failed the size check go ahead after all, because the work can't be split (an initial scaffold, a stack migration). Give the item id and the reason. The merge checks run again; CI, the review, tests and protected areas still apply. Prefer splitting the work into smaller issues when it can be split.",
+		roles: ["pm"],
+		scope: "project",
+		alwaysLoad: true,
+		isAvailable: inFactoryProject,
+		input: FactoryAllowLargeChangeRequest,
+		handler: async (input, { services, projectId }) => asTool(() => {
+			const item = services.factory.allowLargeChange(projectId, input);
+			return {
+				itemId: item.id,
+				stage: item.stage,
+				pr: item.pr
+			};
+		})
+	}),
 	defineTool({
 		name: "factory_record_decision",
 		description: "Record a decision you made on your own instead of asking the user (this project runs as a dark factory, so nobody waits to answer). Give the question you would have asked, what you decided and why, grounded in the vision. It goes to the user's inbox and the daily digest so they can review or override it; nothing waits on it. Set `needsHuman` only for a protected area, a missing or self-contradicting vision, or something irreversible outside the code: that flags it for the user, and you carry on with the work that doesn't depend on it.",
@@ -46527,6 +46560,42 @@ function killTree(pid) {
 		process.kill(pid, "SIGKILL");
 	} catch {}
 }
+// ../server/src/services/factory/large-change.ts
+/**
+* Work that can't be split under the size limit (an initial scaffold, a stack migration). The
+* PM allows it at triage or, after the size check failed, with `factory_allow_large_change`.
+* Either way it is recorded as a factory decision, so the user sees it in the inbox and the
+* digest. Every other merge check still applies.
+*/
+/** Record the PM's allowance for `item` as a factory decision. */
+function recordLargeChange(ctx, item, reason) {
+	recordDecision(ctx, {
+		projectId: item.projectId,
+		sessionId: null
+	}, {
+		question: `"${item.title}" is bigger than the factory's size limit. Split it, or build and merge it as one change?`,
+		decision: "Build and merge it as one change",
+		reasoning: reason
+	});
+}
+/** `factory_allow_large_change`: let an item that failed on size go ahead after all. */
+function allowLargeChange(ctx, projectId, req) {
+	const item = ctx.store.item(req.itemId);
+	if (!item || item.projectId !== projectId) throw notFound(`No factory item ${req.itemId}`, "item_not_found");
+	if (item.stage !== "failed" && item.stage !== "verifying") throw conflict(`Item ${item.id} is ${item.stage}; only an item whose pull request is being verified, or failed its checks, can be allowed`, "not_verifiable");
+	if (item.pr?.state !== "open") throw conflict(`Item ${item.id} has no open pull request`, "no_open_pr");
+	const sizeFailed = item.checks.some((c) => c.name === "size" && c.state === "fail");
+	if (item.stage === "failed" && !sizeFailed) throw conflict(`Item ${item.id} didn't fail on size: ${item.reason ?? ""}`, "not_size");
+	recordLargeChange(ctx, item, req.reason);
+	return ctx.store.updateItem(item.id, (i) => ({
+		...i,
+		largeChange: req.reason,
+		stage: "verifying",
+		reason: null,
+		finishedAt: null,
+		note: "Allowed over the size limit by the PM; checking again"
+	}));
+}
 // ../server/src/services/factory/globs.ts
 /**
 * Small glob matcher for protected paths (§10.1): `**` matches any number of path segments,
@@ -46675,7 +46744,7 @@ function slugify$1(title) {
 // ../server/src/services/factory/outcomes.ts
 const AUDIT_TIMEOUT_MS = 3e5;
 /** Mark an item failed and count it; pauses the loop after too many failures in a row. */
-function failItem(ctx, loop, item, reason) {
+function failItem(ctx, loop, item, reason, opts = {}) {
 	const at = ctx.now().toISOString();
 	ctx.store.updateItem(item.id, (i) => ({
 		...i,
@@ -46684,7 +46753,7 @@ function failItem(ctx, loop, item, reason) {
 		note: null,
 		finishedAt: at
 	}));
-	factoryNotice(ctx, {
+	if (opts.notify !== false) factoryNotice(ctx, {
 		id: `factory.failed:${item.id}`,
 		projectId: item.projectId,
 		target: "pm",
@@ -46694,6 +46763,7 @@ function failItem(ctx, loop, item, reason) {
 		itemIds: [item.id],
 		wake: false
 	});
+	if (opts.countsAsFailure === false) return loop;
 	const next = {
 		...loop,
 		consecutiveFailures: loop.consecutiveFailures + 1
@@ -46947,6 +47017,88 @@ async function regression(ctx, project, loop, item) {
 	next = pauseLoop(ctx, next, `CI on ${branch} failed after merging #${prNumber}; ${revertNote}`, { inbox: false });
 	return next;
 }
+// ../server/src/services/factory/size.ts
+/**
+* The size merge check (§10.1 step 4) counts code someone has to review. Lockfiles and
+* generated or vendored files are left out: a new dependency can add thousands of lockfile
+* lines, and a scaffold copies in UI components nobody reviews line by line.
+*/
+const LOCKFILES = /* @__PURE__ */ new Set([
+	"package-lock.json",
+	"npm-shrinkwrap.json",
+	"pnpm-lock.yaml",
+	"yarn.lock",
+	"bun.lock",
+	"bun.lockb",
+	"deno.lock",
+	"cargo.lock",
+	"poetry.lock",
+	"uv.lock",
+	"pipfile.lock",
+	"pdm.lock",
+	"gemfile.lock",
+	"composer.lock",
+	"go.sum",
+	"flake.lock",
+	"packages.lock.json",
+	"pubspec.lock",
+	"mix.lock",
+	"podfile.lock",
+	"package.resolved"
+]);
+/** Folders whose contents are built, installed or vendored rather than written. */
+const GENERATED_DIRS = [
+	"node_modules",
+	"vendor",
+	"dist",
+	"build",
+	".next",
+	".nuxt",
+	".svelte-kit",
+	"coverage",
+	"__snapshots__",
+	"__generated__"
+];
+/** File names that mark generated output. */
+const GENERATED_NAME = /\.(min\.(js|css)|map|snap|lock)$|\.(gen|generated)\.[a-z]+$/i;
+/** True for files the size check doesn't count (lockfiles, generated or vendored files). */
+function isUncountedFile(path) {
+	const parts = path.replace(/\\/g, "/").split("/");
+	const name = (parts.at(-1) ?? "").toLowerCase();
+	if (LOCKFILES.has(name) || GENERATED_NAME.test(name)) return true;
+	const dirs = parts.slice(0, -1);
+	if (dirs.some((d) => GENERATED_DIRS.includes(d))) return true;
+	return dirs.some((d, i) => d === "components" && dirs[i + 1] === "ui");
+}
+/** Lines and files the size check counts for a PR. */
+function changeSize(pr) {
+	if (!pr.fileLines) return {
+		lines: pr.additions + pr.deletions,
+		files: pr.files.length,
+		uncounted: 0
+	};
+	let lines = 0;
+	let files = 0;
+	for (const f of pr.fileLines) {
+		if (isUncountedFile(f.path)) continue;
+		lines += f.lines;
+		files += 1;
+	}
+	return {
+		lines,
+		files,
+		uncounted: pr.fileLines.length - files
+	};
+}
+/** The size limits as a phrase ("5,000 lines", "no limit"). */
+function sizeLimitText(tuning) {
+	const parts = [tuning.maxChangedLines !== null ? `${tuning.maxChangedLines.toLocaleString("en")} lines` : "", tuning.maxChangedFiles !== null ? `${tuning.maxChangedFiles.toLocaleString("en")} files` : ""].filter(Boolean);
+	return parts.length > 0 ? parts.join(", ") : "no limit";
+}
+/** True when the change is over a limit that is set. */
+function overSizeLimit(size, tuning) {
+	return tuning.maxChangedLines !== null && size.lines > tuning.maxChangedLines || tuning.maxChangedFiles !== null && size.files > tuning.maxChangedFiles;
+}
 // ../server/src/services/factory/store.ts
 /** Stages of items that are still moving through the loop. */
 const ACTIVE_STAGES = [
@@ -46976,7 +47128,8 @@ var FactoryStore = class {
 		this.events = events;
 	}
 	loop(projectId) {
-		return this.db.select().from(factoryLoops).where(eq(factoryLoops.projectId, projectId)).get()?.loop;
+		const loop = this.db.select().from(factoryLoops).where(eq(factoryLoops.projectId, projectId)).get()?.loop;
+		return loop ? upgradeSizeLimits(loop) : void 0;
 	}
 	/** The project's loop, or a fresh idle one (not saved). */
 	loopOrNew(projectId, now = /* @__PURE__ */ new Date()) {
@@ -47044,6 +47197,7 @@ var FactoryStore = class {
 			revertOf: null,
 			triageRequestedAt: null,
 			nudges: {},
+			largeChange: null,
 			mergedAt: null,
 			finishedAt: null,
 			...draft,
@@ -47086,6 +47240,24 @@ var FactoryStore = class {
 		}]);
 	}
 };
+/**
+* Loops saved before 0.4.4 carry the old default size limits (800 lines, 40 files, counting
+* lockfiles and generated files), which blocked ordinary scaffolds. Untouched old defaults
+* become the current defaults; limits someone chose are kept.
+*/
+function upgradeSizeLimits(loop) {
+	const t = loop.tuning;
+	if (t.maxChangedLines !== LEGACY_SIZE_LIMITS.maxChangedLines || t.maxChangedFiles !== LEGACY_SIZE_LIMITS.maxChangedFiles) return loop;
+	const defaults = FactoryTuning.parse({});
+	return {
+		...loop,
+		tuning: {
+			...t,
+			maxChangedLines: defaults.maxChangedLines,
+			maxChangedFiles: defaults.maxChangedFiles
+		}
+	};
+}
 // ../server/src/services/factory/checks.ts
 const ORDER$1 = [
 	"protected_paths",
@@ -47125,9 +47297,11 @@ function evaluateChecks(i) {
 	});
 	if (hits.paths.length > 0 || hits.topics.length > 0) set("protected_paths", "fail", `Touches protected areas (${[hits.paths.length ? `paths: ${list(hits.paths.map((h) => h.path))}` : "", hits.topics.length ? `topics: ${hits.topics.join(", ")}` : ""].filter(Boolean).join("; ")})`, true);
 	else set("protected_paths", "pass", null);
-	const lines = i.pr.additions + i.pr.deletions;
-	if (lines > i.tuning.maxChangedLines || files.length > i.tuning.maxChangedFiles) set("size", "fail", `${lines} lines in ${files.length} files (limit ${i.tuning.maxChangedLines} lines, ${i.tuning.maxChangedFiles} files)`);
-	else set("size", "pass", `${lines} lines in ${files.length} files`);
+	const size = changeSize(i.pr);
+	const measured = `${size.lines.toLocaleString("en")} lines in ${size.files} files${size.uncounted ? ` (${size.uncounted} lockfiles or generated files not counted)` : ""}`;
+	if (!overSizeLimit(size, i.tuning)) set("size", "pass", measured);
+	else if (i.largeChange) set("size", "pass", `${measured}; allowed by the PM: ${i.largeChange}`);
+	else set("size", "fail", `${measured}, over the limit of ${sizeLimitText(i.tuning)}`);
 	switch (i.pr.checks) {
 		case "success":
 			set("ci", "pass", null);
@@ -47238,6 +47412,7 @@ async function advanceVerifying(ctx, project, loop, item) {
 		ciGraceOver: now.getTime() - since > ctx.ciGraceMs,
 		limits: project.factoryLimits,
 		tuning: loop.tuning,
+		largeChange: item.largeChange ?? null,
 		areas: vision.parsed.protectedAreas,
 		now: now.toISOString()
 	});
@@ -47414,6 +47589,7 @@ function failReview(ctx, project, loop, item, reason) {
 /** Failed checks: one more fix round if allowed, otherwise the item fails (and may pause). */
 async function handleFailure(ctx, project, loop, item) {
 	const failed = failedChecks$1(item.checks);
+	if (failed.some((c) => c.name === "size")) return tooLarge(ctx, project, loop, item);
 	const builder = item.builderSessionId ? ctx.repo.find(item.builderSessionId)?.session : void 0;
 	if (item.attempts < loop.tuning.maxFixAttempts && builder !== void 0 && builder.status !== "failed" && builder.status !== "stopped" && item.review?.verdict !== "reject" && builder) {
 		const at = ctx.now().toISOString();
@@ -47436,6 +47612,30 @@ async function handleFailure(ctx, project, loop, item) {
 	if (item.pr) await ctx.github.comment(project.id, item.pr.number, `The CodeDen factory's merge checks failed, so this PR is left for a human:\n\n${failed.map((c) => `- **${c.name}**: ${c.detail ?? "failed"}`).join("\n")}`).catch((error) => ctx.log?.(`factory: comment: ${errorMessage$1(error)}`));
 	return next;
 }
+/**
+* The size check failed. That isn't a quality failure, so it doesn't count towards pausing
+* the loop, and no fix round runs. The PM is woken to split the work into smaller issues or,
+* when it can't be split, to allow it with `factory_allow_large_change`. The PR stays open.
+*/
+async function tooLarge(ctx, project, loop, item) {
+	const failed = failedChecks$1(item.checks);
+	const size = failed.find((c) => c.name === "size");
+	const next = failItem(ctx, loop, item, failed.map((c) => `${c.name}: ${c.detail ?? "failed"}`).join("; "), {
+		countsAsFailure: false,
+		notify: false
+	});
+	factoryNotice(ctx, {
+		id: `factory.too-large:${item.id}:${item.pr?.number ?? ""}`,
+		projectId: item.projectId,
+		target: "pm",
+		event: "failed",
+		title: `Too large to merge automatically: ${item.title}`,
+		text: tooLargePrompt(item, size?.detail ?? "over the size limit", failed),
+		itemIds: [item.id]
+	});
+	if (item.pr) await ctx.github.comment(project.id, item.pr.number, `This PR is larger than the CodeDen factory's size limit (${size?.detail ?? "over the limit"}), so it isn't merged automatically yet. The project manager will split the work into smaller issues or allow it as one change.`).catch((error) => ctx.log?.(`factory: comment: ${errorMessage$1(error)}`));
+	return next;
+}
 // ../server/src/services/factory/loop.ts
 /** Label on issues the factory created or accepted. */
 const FACTORY_LABEL = "codeden-factory";
@@ -47646,7 +47846,7 @@ function requestTriage(ctx, project) {
 		target: "pm",
 		event: "triage_needed",
 		title: `Factory: ${fresh.length} candidate${fresh.length === 1 ? "" : "s"} to triage`,
-		text: triageInstructions(fresh, project.autonomyMode === "dark_factory"),
+		text: triageInstructions(fresh, project.autonomyMode === "dark_factory", sizeLimitText(ctx.store.loopOrNew(project.id).tuning)),
 		itemIds: fresh.map((i) => i.id)
 	});
 	for (const item of fresh) ctx.store.updateItem(item.id, (i) => ({
@@ -47780,6 +47980,7 @@ async function triage(ctx, projectId, req) {
 		labels: [FACTORY_LABEL]
 	});
 	const accepted = issue;
+	if (req.largeChange) recordLargeChange(ctx, item, req.largeChange);
 	return ctx.store.updateItem(item.id, (i) => ({
 		...i,
 		stage: "backlog",
@@ -47787,6 +47988,7 @@ async function triage(ctx, projectId, req) {
 		acceptanceCriteria: criteria,
 		issue: accepted,
 		workKey: `issue:${accepted.number}`,
+		largeChange: req.largeChange ?? i.largeChange ?? null,
 		note: null
 	}));
 }
@@ -48213,9 +48415,18 @@ var FactoryService = class {
 		if (session.projectId) this.soon(session.projectId);
 		return res;
 	}
+	/** `factory_allow_large_change`: the PM lets an item over the size limit merge. */
+	allowLargeChange(projectId, req) {
+		const item = allowLargeChange(this.ctx, projectId, req);
+		this.soon(projectId);
+		return item;
+	}
 	/** `factory_record_decision`: a decision an unattended agent made instead of asking. */
 	recordDecision(session, req) {
-		return recordDecision(this.ctx, session, req);
+		return recordDecision(this.ctx, {
+			projectId: session.projectId,
+			sessionId: session.id
+		}, req);
 	}
 	/** True when nobody answers this session's questions (dark factory PM or factory agent). */
 	isUnattended(sessionId) {
@@ -48371,7 +48582,11 @@ var GithubFactoryPort = class {
 			].includes(c.conclusion)).map((c) => c.name),
 			additions: pr.additions,
 			deletions: pr.deletions,
-			files: pr.files.map((f) => f.path)
+			files: pr.files.map((f) => f.path),
+			fileLines: pr.files.map((f) => ({
+				path: f.path,
+				lines: f.additions + f.deletions
+			}))
 		};
 	}
 	async hasScreenshotEvidence(projectId, prNumber, issueNumber) {
@@ -59283,13 +59498,13 @@ function round(n) {
 	return Math.round(n * 1e6) / 1e6;
 }
 // ../server/src/services/utility.ts
+/** The summary-mode fallback: the first sentence or two, within the TL;DR cap. */
+function shortSpeech(plain) {
+	return speechExcerpt(plain, 220, 2);
+}
 /** Strip code blocks and markdown so text reads naturally aloud (§11.3). */
-function plainSpeech(text, maxChars = 600) {
-	const plain = text.replace(/```[\s\S]*?```/g, " ").replace(/`([^`]*)`/g, "$1").replace(/!\[[^\]]*\]\([^)]*\)/g, " ").replace(/\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/^#{1,6}\s+/gm, "").replace(/^\s*[-*+]\s+/gm, "").replace(/[*_~>|]/g, "").replace(/\s+/g, " ").trim();
-	if (plain.length <= maxChars) return plain;
-	const cut = plain.slice(0, maxChars);
-	const end = cut.lastIndexOf(". ");
-	return end > maxChars / 2 ? cut.slice(0, end + 1) : `${cut.trimEnd()}...`;
+function plainSpeech(text) {
+	return text.replace(/```[\s\S]*?```/g, " ").replace(/`([^`]*)`/g, "$1").replace(/!\[[^\]]*\]\([^)]*\)/g, " ").replace(/\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/^#{1,6}\s+/gm, "").replace(/^\s*[-*+]\s+/gm, "").replace(/[*_~>|]/g, "").replace(/\s+/g, " ").trim();
 }
 function runnerOneShot(runner) {
 	return {
@@ -59303,6 +59518,18 @@ function runnerOneShot(runner) {
 }
 const PREFERENCE = ["claude", "codex"];
 const TIMEOUT_MS = 6e4;
+/** Read-aloud waits on the summary, so it gets less time than the other jobs. */
+const SPEECH_TIMEOUT_MS = 3e4;
+const TLDR_SYSTEM = [
+	"You write the spoken TL;DR of a coding agent's final message. It is read aloud by a text-to-speech voice, so the listener cannot skim.",
+	"Reply with at most two short sentences, under 200 characters in total.",
+	"Say what was done and whether anything needs the user (a decision, a review, a failure). If nothing needs them, don't mention it.",
+	"Plain spoken English only: no markdown, code, file paths, lists, numbers of lines or preamble such as 'Summary:'."
+].join(" ");
+/** Server-side warnings for utility jobs, shown whatever the debug setting (stderr). */
+function defaultWarn(message) {
+	console.warn(`[codeden] ${(/* @__PURE__ */ new Date()).toISOString()} ${message}`);
+}
 /**
 * The real `UtilityService`: a one-shot, tool-less call on a small model (§7.4). The provider
 * comes from settings (`auto` = Claude, then Codex); when the chosen provider fails, the
@@ -59313,51 +59540,70 @@ var ProviderUtilityService = class {
 	constructor(deps) {
 		this.deps = deps;
 	}
+	/** Set while no provider can run one-shots, so that is reported once, not on every job. */
+	reportedNoProvider = false;
+	warn(message) {
+		(this.deps.warn ?? defaultWarn)(message);
+	}
 	async sessionTitle(ctx) {
 		if (!this.deps.settings().utilityModel.jobs.sessionTitles) return null;
 		const source = ctx.firstMessage ?? ctx.finalMessage;
 		if (!source) return null;
-		const title = (await this.run("Write a title of 3 to 6 words for a coding session that starts with the request below. Reply with the title only: no quotes, no trailing punctuation.", `Request:\n${clip(source, 4e3)}`))?.split("\n")[0]?.replace(/^["'#\s]+|["'.\s]+$/g, "").slice(0, 80);
+		const title = (await this.run("session title", "Write a title of 3 to 6 words for a coding session that starts with the request below. Reply with the title only: no quotes, no trailing punctuation.", `Request:\n${clip(source, 4e3)}`))?.split("\n")[0]?.replace(/^["'#\s]+|["'.\s]+$/g, "").slice(0, 80);
 		return title ? title : null;
 	}
 	async suggestFollowups(ctx) {
 		if (!this.deps.settings().utilityModel.jobs.followups || !ctx.finalMessage) return null;
 		const files = ctx.changedFiles?.length ? `\nFiles changed: ${ctx.changedFiles.join(", ")}` : "";
-		const lines = (await this.run("You suggest what a developer might ask a coding agent next. Reply with 2 to 4 short prompts, one per line, written as the developer would type them. No numbering, no quotes, nothing else.", `The agent's final message:\n${clip(ctx.finalMessage, 6e3)}${files}`) ?? "").split("\n").map((l) => l.replace(/^\s*(?:[-*\d.)]+\s*)?/, "").replace(/^["']|["']$/g, "").trim()).filter((l) => l.length > 0 && l.length <= 300).slice(0, 4);
+		const lines = (await this.run("follow-ups", "You suggest what a developer might ask a coding agent next. Reply with 2 to 4 short prompts, one per line, written as the developer would type them. No numbering, no quotes, nothing else.", `The agent's final message:\n${clip(ctx.finalMessage, 6e3)}${files}`) ?? "").split("\n").map((l) => l.replace(/^\s*(?:[-*\d.)]+\s*)?/, "").replace(/^["']|["']$/g, "").trim()).filter((l) => l.length > 0 && l.length <= 300).slice(0, 4);
 		return lines.length >= 2 ? lines.map((prompt) => ({ prompt })) : null;
 	}
 	async speechSummary(text) {
-		const plain = plainSpeech(text, 4e3);
-		if (!this.deps.settings().utilityModel.jobs.readAloudSummary || plain.length <= 240) return {
-			text: plainSpeech(text),
+		const plain = plainSpeech(text);
+		if (this.deps.settings().voice.readAloud.content === "full") return {
+			text: speechExcerpt(plain, READ_ALOUD_FULL_MAX_CHARS),
 			source: "plain"
 		};
-		const out = await this.run("Compress the message below into one or two plain sentences that will be read aloud. No markdown, no code, no lists.", plain);
-		return out ? {
-			text: out.trim(),
+		if (plain.length <= 220) return {
+			text: plain,
+			source: "plain"
+		};
+		const out = await this.run("read-aloud TL;DR", TLDR_SYSTEM, clip(plain, 12e3), { timeoutMs: SPEECH_TIMEOUT_MS });
+		const tldr = out ? plainSpeech(out) : "";
+		if (tldr) return {
+			text: shortSpeech(tldr),
 			source: "utility"
-		} : {
-			text: plainSpeech(text),
+		};
+		this.warn("utility: read-aloud TL;DR unavailable, speaking the message's first sentences");
+		return {
+			text: shortSpeech(plain),
 			source: "plain"
 		};
 	}
 	/** One-shot on the configured provider, falling back to the next; null on failure. */
-	async run(system, prompt) {
+	async run(job, system, prompt, opts = {}) {
 		const { utilityModel } = this.deps.settings();
 		const available = this.deps.oneShot.available();
 		const chosen = utilityModel.provider === "auto" ? null : utilityModel.provider;
 		const order = [chosen, ...PREFERENCE].filter((id, i, all) => !!id && available.includes(id) && all.indexOf(id) === i);
+		if (order.length === 0) {
+			if (!this.reportedNoProvider) this.warn(`utility: no provider can run the utility model (runner lists: ${available.join(", ") || "none"})`);
+			this.reportedNoProvider = true;
+			return null;
+		}
+		this.reportedNoProvider = false;
 		for (const providerId of order) try {
 			const model = providerId === chosen ? utilityModel.model ?? void 0 : void 0;
 			const text = await this.deps.oneShot.oneShot(providerId, {
 				prompt,
 				system,
 				model,
-				timeoutMs: TIMEOUT_MS
+				timeoutMs: opts.timeoutMs ?? TIMEOUT_MS
 			});
 			if (text.trim()) return text.trim();
+			this.warn(`utility: ${job} on ${providerId} returned nothing`);
 		} catch (error) {
-			this.deps.log?.(`utility: ${providerId} failed: ${error instanceof Error ? error.message : String(error)}`);
+			this.warn(`utility: ${job} on ${providerId} failed: ${error instanceof Error ? error.message : String(error)}`);
 		}
 		return null;
 	}
@@ -59897,8 +60143,7 @@ function createServices(opts) {
 	const userHome = opts.userHome ?? homedir();
 	const utility = opts.utility ?? new ProviderUtilityService({
 		settings: () => opts.settings.get(),
-		oneShot: runnerOneShot(opts.runner),
-		log: opts.log
+		oneShot: runnerOneShot(opts.runner)
 	});
 	const projects = new ProjectService({
 		db: opts.db,
@@ -61367,4 +61612,4 @@ main().then((code) => process.exit(code), (error) => {
 });
 export {};
 
-//# sourceMappingURL=main-CtuRKdHE.js.map
+//# sourceMappingURL=main-CKLHi4sz.js.map