codeden 0.5.0 → 0.6.0

package/dist/{runner-WAbCC8k2.js → runner-CYnMuxur.js}

@@ -6836,27 +6836,44 @@ const InboxItem = object({
 });
 // ../../packages/contracts/src/factory.ts
 /**
-* Project autonomy modes and dark-factory mode (§10.1). Types only; the factory loop itself
-* lands in M3b.
+* Project autonomy modes, the software factory and the dark factory (§10.1). The factory loop
+* itself lives in `factory-api.ts` and `factory-pipeline.ts`.
 */
+/** The mode ids, in ladder order. */
+const AUTONOMY_MODES = [
+	"manual",
+	"assisted",
+	"software_factory",
+	"dark_factory"
+];
+/** The id the software factory had before 0.6 ("autopilot"); still read from old events. */
+const LEGACY_SOFTWARE_FACTORY = "autopilot";
 /**
 * A ladder climbed one step at a time:
 * - `manual`: you find work and merge; you drive every session.
 * - `assisted` (default): you, the PM and automations find work; you merge.
-* - `autopilot`: the PM finds work; CodeDen merges when every merge check passes.
-* - `dark_factory`: the PM finds work continuously from the vision; CodeDen merges.
+* - `software_factory`: issues filed on GitHub (by you or trusted people) are classified as a
+*   bug, a feature or a docs change and run through that pipeline by a pool of agents, ending
+*   in a pull request with test results and screenshots. You merge, unless auto-merge is on.
+* - `dark_factory`: the software factory plus a scheduled scout that reviews the app against
+*   the vision and files the issues itself.
+*
+* `autopilot` (the software factory's id before 0.6) is still accepted and read as
+* `software_factory`, so old events and API clients keep working.
 */
-const AutonomyMode = _enum([
-	"manual",
-	"assisted",
-	"autopilot",
-	"dark_factory"
-]);
+const AutonomyMode = preprocess((v) => v === LEGACY_SOFTWARE_FACTORY ? "software_factory" : v, _enum(AUTONOMY_MODES));
 /** Default location of a project's vision file, relative to the repo root. */
 const DEFAULT_VISION_PATH = ".codeden/VISION.md";
-/** Limits enforced by the server (never left to agent judgement) for autopilot/dark factory. */
+/** A GitHub login as typed by a person: trimmed, without a leading `@`. */
+const GithubLogin = string().trim().transform((s) => s.replace(/^@/, "")).pipe(string().regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})(?:\[bot\])?$/, "Not a GitHub login"));
+/**
+* Limits and policy of the software and dark factory, enforced by the server (never left to
+* agent judgement).
+*/
 const FactoryLimits = object({
+	/** Agents working at once (the swarm size): builders, reviewers, the scout and its lenses. */
 	maxConcurrentSessions: int().positive().default(2),
+	/** Automatic merges per day (only while `autoMerge` is on). */
 	maxMergesPerDay: int().nonnegative().default(5),
 	/** Daily spend budget; either or both may be set. */
 	dailyBudget: object({
@@ -6865,7 +6882,7 @@ const FactoryLimits = object({
 	}).prefault({}),
 	/**
 	* What counts against the daily budget: `factory` (default) is the factory's own sessions
-	* (discovery, builders, reviewers, reverts); `project` is every session in the project.
+	* (builders, reviewers, the scout, reverts); `project` is every session in the project.
 	*/
 	budgetScope: _enum(["factory", "project"]).default("factory"),
 	/** Pause the loop after this many failed merge checks or reverts in a row. */
@@ -6873,9 +6890,21 @@ const FactoryLimits = object({
 	/** Globs that always escalate to a human (auth, payments, migrations, infra, licensing). */
 	protectedPaths: array(string()).default([]),
 	/** Deploys/releases are off unless explicitly enabled. */
-	allowDeploys: boolean().default(false)
+	allowDeploys: boolean().default(false),
+	/**
+	* Merge pull requests automatically once every merge check passes. Off (the default): the
+	* factory stops at "ready to merge" and you merge on GitHub. Work from an untrusted author
+	* that was let in by hand is never merged automatically, whatever this says.
+	*/
+	autoMerge: boolean().default(false),
+	/**
+	* GitHub logins whose issues the factory takes on by itself. The account CodeDen uses on
+	* GitHub is always trusted. Issues from anyone else (on a public repository: anyone at all)
+	* are listed as ignored and only taken on when you, or the PM at your request, let one in.
+	*/
+	trustedAuthors: array(GithubLogin).max(200).default([])
 });
-/** State of a project's factory loop (discover -> plan -> build -> verify -> merge -> watch). */
+/** State of a project's factory loop. */
 const FactoryLoopState = _enum([
 	"idle",
 	"discovering",
@@ -6911,7 +6940,7 @@ const projectBase = {
 	autonomy: AutonomyLevel.nullable(),
 	/** Project autonomy mode (§10.1). */
 	autonomyMode: AutonomyMode.default("assisted"),
-	/** Vision file, relative to the repo root; required for autopilot and dark factory. */
+	/** Vision file, relative to the repo root; required for the software and dark factory. */
 	visionPath: string().min(1).default(DEFAULT_VISION_PATH),
 	factoryLimits: FactoryLimits.prefault({}),
 	/** Stops this project's factory loop and all its sessions. */
@@ -8510,28 +8539,276 @@ const Artifact = object({
 	itemId: Id.nullable(),
 	createdAt: Timestamp
 });
-// ../../packages/contracts/src/factory-api.ts
+// ../../packages/contracts/src/factory-pipeline.ts
+/**
+* The software factory's pipelines (§10.1): every piece of work is classified as a bug, a
+* feature or a docs change and runs through that type's steps:
+*
+* ```
+* Issue -> Identify type -+-> Bug:      Reproduce -> Create fix -> Review fix  -+-> Merge
+*                         +-> Feature:  Analyze   -> Implement  -> Review      -+
+*                         +-> Docs:     Implement docs change -----------------+
+* ```
+*
+* A failed review sends the work back to the builder (the revise loop). Merging is yours unless
+* auto-merge is on. Also the dark factory's scout: its review rounds, lenses and findings.
+*/
+/** The three pipelines. */
+const WorkType = _enum([
+	"bug",
+	"feature",
+	"docs"
+]);
+/** Who decided the type: a GitHub label, the utility model, keywords, the scout or a person. */
+const ClassifiedBy = _enum([
+	"label",
+	"model",
+	"heuristic",
+	"scout",
+	"system",
+	"user",
+	"pm"
+]);
+/** The "Identify type" step's result. */
+const Classification = object({
+	type: WorkType,
+	confidence: _enum([
+		"high",
+		"medium",
+		"low"
+	]),
+	rationale: string().max(1e3),
+	by: ClassifiedBy,
+	at: Timestamp
+});
 /**
-* The factory loop of autopilot and dark-factory projects (§10.1): work items, merge checks,
-* the reviewer's verdict, the loop record, the vision and the HTTP shapes of `/api/.../factory`.
-* Autopilot and dark factory are experimental in v1.
+* Whether the factory may take work on by itself:
+* - `trusted`: an issue by a trusted author (or the account CodeDen uses), or work the factory
+*   found itself (the scout, a failed check on the default branch, a revert);
+* - `untrusted`: an issue by anyone else; it is listed as ignored and nothing runs on it;
+* - `admitted`: an untrusted issue let in by you or by the PM at your request. It runs through
+*   the pipeline but is never merged automatically.
 */
-/** Modes in which CodeDen finds work and merges automatically. */
-const FACTORY_MODES = ["autopilot", "dark_factory"];
-/** True for autopilot and dark factory. */
-function isFactoryMode(mode) {
-	return FACTORY_MODES.includes(mode);
-}
-/** Areas the improvement finders look at (one discovery session per area). */
+const WorkTrust = _enum([
+	"trusted",
+	"untrusted",
+	"admitted"
+]);
+/** Outcomes of the first step of the bug (reproduce) and feature (analyze) pipelines. */
+const InvestigationOutcome = _enum([
+	"reproduced",
+	"not_reproduced",
+	"implement",
+	"already_done",
+	"needs_info",
+	"out_of_scope"
+]);
+/** What the builder found before writing the fix or the feature. */
+const Investigation = object({
+	kind: _enum(["reproduction", "analysis"]),
+	outcome: InvestigationOutcome,
+	summary: string().max(2e3),
+	/** Reproduction steps, or the spec the feature is built to. */
+	details: string().max(12e3).nullable(),
+	/** The failing test or probe that shows the bug. */
+	testPath: string().max(500).nullable(),
+	at: Timestamp
+});
+/** `factory_report_reproduction`: the bug pipeline's Reproduce step. */
+const FactoryReproductionReport = object({
+	reproduced: boolean(),
+	summary: string().trim().min(1).max(2e3).describe("What you found, in a few sentences"),
+	steps: string().max(4e3).optional().describe("How to reproduce it: commands or steps, in order"),
+	evidence: string().max(8e3).optional().describe("The failing output, trimmed to what shows the bug"),
+	testPath: string().max(500).optional().describe("The failing test or probe you wrote, relative to the repository root")
+});
+/** `factory_submit_analysis`: the feature pipeline's Analyze step. */
+const FactoryAnalysisReport = object({
+	decision: _enum([
+		"implement",
+		"already_done",
+		"needs_info",
+		"out_of_scope"
+	]),
+	summary: string().trim().min(1).max(2e3).describe("Your conclusion, in a few sentences"),
+	spec: string().max(12e3).optional().describe("For `implement`: the spec you will build (API, behaviour, edge cases, docs)"),
+	acceptanceCriteria: array(string().trim().min(1).max(500)).min(1).max(12).optional().describe("For `implement`: testable acceptance criteria")
+}).refine((r) => r.decision !== "implement" || r.spec && r.acceptanceCriteria, { message: "`implement` needs a spec and acceptance criteria" });
+/**
+* Where a work item is in its pipeline (what the dashboard diagram shows):
+* `intake` (waiting to be classified), `ignored` (untrusted author), `queued` (waiting for a
+* free agent), `reproduce` / `analyze` (first step of bugs and features), `implement` (fix,
+* feature or docs change), `review` (merge checks and the independent review), `merge` (ready
+* for you, merging, or watching the default branch after it), `done`, `stopped`.
+*/
+const PipelineStep = _enum([
+	"intake",
+	"ignored",
+	"queued",
+	"reproduce",
+	"analyze",
+	"implement",
+	"review",
+	"merge",
+	"done",
+	"stopped"
+]);
+/** Whether the item's merge checks all passed (none pending or failed). */
+function checksPassed(item) {
+	return item.checks.length > 0 && item.checks.every((c) => c.state === "pass" || c.state === "skipped");
+}
+/** The pipeline step of a work item, from its stage and what it has done so far. */
+function pipelineStep(item) {
+	switch (item.stage) {
+		case "candidate": return "intake";
+		case "ignored": return "ignored";
+		case "backlog": return "queued";
+		case "building":
+			if (!item.investigation && item.type === "bug") return "reproduce";
+			if (!item.investigation && item.type === "feature") return "analyze";
+			return "implement";
+		case "verifying": return checksPassed(item) ? "merge" : "review";
+		case "watching":
+		case "escalated": return "merge";
+		case "merged": return "done";
+		default: return "stopped";
+	}
+}
+/** What the scout's lenses review (one long-lived lens session per area). */
 const DiscoveryArea = _enum([
 	"features",
 	"ux",
 	"performance",
 	"tech_debt",
 	"test_gaps",
-	"security"
+	"security",
+	"bugs",
+	"docs"
 ]);
-/** Where a work item came from. */
+/** `factory_plan_round`: the lenses for this round (none: the scout reviews by itself). */
+const FactoryPlanRoundRequest = object({ lenses: array(object({
+	area: DiscoveryArea,
+	focus: string().trim().min(1).max(1e3).describe("What this lens should look at this round, specific to this app")
+})).max(8) });
+/** One improvement a lens found (`factory_report_findings`). */
+const FactoryFinding = object({
+	title: string().trim().min(3).max(200),
+	summary: string().trim().min(1).max(4e3).describe("What is wrong or missing, and why it matters for the vision"),
+	type: WorkType,
+	severity: _enum([
+		"high",
+		"medium",
+		"low"
+	]).default("medium"),
+	acceptanceCriteria: array(string().trim().min(1).max(500)).min(1).max(12),
+	/** Paths the change would touch, when known. */
+	paths: array(string()).max(50).optional()
+});
+/** A finding as the round keeps it, for the scout to decide on. */
+const ScoutFinding = FactoryFinding.extend({
+	id: string().min(1),
+	area: DiscoveryArea
+});
+/** `factory_file_issue`: the scout files one piece of work as a GitHub issue. */
+const FactoryFileIssueRequest = object({
+	title: string().trim().min(3).max(200),
+	summary: string().trim().min(1).max(8e3).describe("The issue body: what and why, grounded in the vision"),
+	type: WorkType,
+	acceptanceCriteria: array(string().trim().min(1).max(500)).min(1).max(12),
+	priority: _enum([
+		"high",
+		"normal",
+		"low"
+	]).default("normal"),
+	/** Findings this issue covers. */
+	findingIds: array(string()).max(20).optional()
+});
+/** One lens of the current round. */
+const ScoutLensRun = object({
+	area: DiscoveryArea,
+	focus: string(),
+	sessionId: Id,
+	sentAt: Timestamp,
+	reported: boolean(),
+	/** When it was reminded to report (once). */
+	nudgedAt: Timestamp.nullable().default(null)
+});
+/**
+* One review round of the scout: `planning` (the scout picks lenses), `reviewing` (the lenses
+* work), `filing` (the scout files the issues worth doing).
+*/
+const ScoutRound = object({
+	id: string().min(1),
+	phase: _enum([
+		"planning",
+		"reviewing",
+		"filing"
+	]),
+	startedAt: Timestamp,
+	/** When the scout was last sent work in this round (its turn must end after this). */
+	sentAt: Timestamp,
+	nudgedAt: Timestamp.nullable().default(null),
+	lenses: array(ScoutLensRun).default([]),
+	findings: array(ScoutFinding).max(60).default([]),
+	filed: int().nonnegative().default(0)
+});
+/** The scout of a dark factory: its long-lived sessions and the round in progress. */
+const ScoutState = object({
+	sessionId: Id.nullable().default(null),
+	/** One long-lived lens session per area, reused round after round. */
+	lensSessions: partialRecord(DiscoveryArea, Id).default({}),
+	round: ScoutRound.nullable().default(null),
+	lastRoundAt: Timestamp.nullable().default(null),
+	rounds: int().nonnegative().default(0)
+});
+/** The scout as the dashboard shows it. */
+const ScoutStatus = object({
+	phase: _enum([
+		"idle",
+		"planning",
+		"reviewing",
+		"filing"
+	]),
+	sessionId: Id.nullable(),
+	lenses: array(object({
+		area: DiscoveryArea,
+		sessionId: Id,
+		reported: boolean(),
+		active: boolean()
+	})),
+	findings: int().nonnegative(),
+	filed: int().nonnegative(),
+	lastRoundAt: Timestamp.nullable(),
+	/** When the next round may start (it also waits for the queue to run low). */
+	nextRoundAt: Timestamp.nullable(),
+	rounds: int().nonnegative()
+});
+/** Let an ignored issue from an untrusted author in (it is never merged automatically). */
+const FactoryAdmitRequest = object({
+	itemId: Id,
+	/** Skip classification with a type you chose. */
+	type: WorkType.optional()
+});
+/** Correct the type of an item that has not started yet. */
+const FactorySetTypeRequest = object({
+	itemId: Id,
+	type: WorkType,
+	reason: string().trim().max(500).optional()
+});
+// ../../packages/contracts/src/factory-api.ts
+/**
+* The factory loop of software-factory and dark-factory projects (§10.1): work items, merge
+* checks, the reviewer's verdict, the loop record, the vision and the HTTP shapes of
+* `/api/.../factory`. Both modes are experimental. The pipelines themselves are in
+* `factory-pipeline.ts`.
+*/
+/** Modes in which the factory loop runs. */
+const FACTORY_MODES = ["software_factory", "dark_factory"];
+/** True for the software factory and the dark factory. */
+function isFactoryMode(mode) {
+	return FACTORY_MODES.includes(mode);
+}
+/** Where a work item came from: an issue, the scout, a failed check on main, a revert. */
 const FactoryItemSource = _enum([
 	"discovery",
 	"issue",
@@ -8539,15 +8816,18 @@ const FactoryItemSource = _enum([
 	"revert"
 ]);
 /**
-* Where a work item is:
-* - `candidate`: found, waiting for the PM to score it against the vision
-* - `backlog`: accepted (a GitHub issue exists), waiting for a build slot
-* - `building`, `verifying` (merge checks), `watching` (merged, main CI watched)
-* - `merged` (done), `reverted`, `rejected` (by the PM), `failed` (merge checks),
-*   `escalated` (needs a human: protected area or a decision)
+* Where a work item is in its life (the pipeline step is derived from it, see `pipelineStep`):
+* - `candidate`: received, waiting to be classified (Identify type)
+* - `ignored`: an issue by an untrusted author; nothing runs until someone lets it in
+* - `backlog`: classified, waiting for a free agent
+* - `building` (reproduce or analyze, then implement), `verifying` (merge checks, the review,
+*   then ready to merge), `watching` (merged automatically, main CI watched)
+* - `merged` (done), `reverted`, `rejected` (not reproduced, declined, closed), `failed`
+*   (merge checks), `escalated` (touches a protected area: yours to merge)
 */
 const FactoryItemStage = _enum([
 	"candidate",
+	"ignored",
 	"backlog",
 	"building",
 	"verifying",
@@ -8563,6 +8843,7 @@ const MergeCheck = object({
 	name: _enum([
 		"ci",
 		"tests",
+		"test_results",
 		"review",
 		"security",
 		"ui_evidence",
@@ -8610,17 +8891,28 @@ const ReviewVerdict = object({
 const FactoryItem = object({
 	id: Id,
 	projectId: Id,
-	/** `factory:<slug>` while a candidate; `issue:<n>` once its issue exists. */
+	/** `issue:<n>` once its issue exists (`factory:<slug>` before). */
 	workKey: string().min(1),
 	title: string().min(1),
-	/** Why it matters, as the finder or issue described it. */
+	/** The issue body, or why it matters as the scout described it. */
 	summary: string(),
 	source: FactoryItemSource,
 	area: DiscoveryArea.nullable(),
 	acceptanceCriteria: array(string()),
-	/** The PM's score against the vision, 0..1. */
+	/** Priority, 0..1 (higher first); null for issues, which queue in order of arrival. */
 	score: number$1().min(0).max(1).nullable(),
 	stage: FactoryItemStage,
+	/** The pipeline (bug, feature, docs); null until classified. */
+	type: WorkType.nullable().default(null),
+	classification: Classification.nullable().default(null),
+	/** Whether the factory may act on it by itself (see `WorkTrust`). */
+	trust: WorkTrust.default("trusted"),
+	/** GitHub login of the issue's author, when it came from an issue. */
+	author: string().nullable().default(null),
+	/** Who let an untrusted issue in. */
+	admittedBy: _enum(["user", "pm"]).nullable().default(null),
+	/** The bug's reproduction or the feature's analysis, once the builder reported it. */
+	investigation: Investigation.nullable().default(null),
 	issue: GitHubIssueRef.nullable(),
 	pr: GitHubPrRef.nullable(),
 	builderSessionId: Id.nullable(),
@@ -8672,14 +8964,17 @@ const FactoryTuning = object({
 	requireCi: boolean().default(true),
 	/** Security/dependency scan run in the builder's worktree (e.g. `pnpm audit --prod`). */
 	auditCommand: string().min(1).nullable().default(null),
-	/** Fix rounds after failed merge checks before an item fails. */
-	maxFixAttempts: int().nonnegative().default(1),
-	/** Dark factory: start discovery when fewer items than this wait to be built. */
+	/** Revise rounds (failed review or merge checks) before an item fails. */
+	maxFixAttempts: int().nonnegative().default(2),
+	/** Dark factory: the scout starts a round when fewer items than this wait for an agent. */
 	minBacklog: int().nonnegative().default(2),
-	/** Dark factory: minutes between discovery rounds. */
+	/** Dark factory: minutes between the scout's review rounds. */
 	discoveryIntervalMin: int().positive().default(360),
-	/** Discovery sessions per round (round-robin over the areas). */
-	discoveryPerRound: int().positive().default(2),
+	/** Dark factory: most lenses (long-lived reviewer sessions) the scout may use per round. */
+	discoveryPerRound: int().nonnegative().default(2),
+	/** Dark factory: most issues the scout may file per round. */
+	maxIssuesPerRound: int().positive().default(3),
+	/** Dark factory: the areas the scout's lenses may review. */
 	areas: array(DiscoveryArea).default(DiscoveryArea.options),
 	/** Provider for builders (`auto`: the project/role default). */
 	builderProvider: union([literal("auto"), ProviderId]).default("auto"),
@@ -8694,7 +8989,7 @@ const FactoryTuningPatch = object(Object.fromEntries(Object.entries(FactoryTunin
 	const kind = schema._zod.def.type;
 	return [key, (kind === "default" || kind === "prefault" ? schema.unwrap() : schema).optional()];
 })));
-/** A running improvement-finder session. */
+/** A discovery session of loops before 0.6 (kept so old loops still parse). */
 const DiscoveryRun = object({
 	sessionId: Id,
 	area: DiscoveryArea,
@@ -8709,10 +9004,14 @@ const FactoryLoop = object({
 	/** Local day (`YYYY-MM-DD`) the counters below belong to. */
 	day: string(),
 	mergesToday: int().nonnegative(),
-	discovery: array(DiscoveryRun),
-	/** Next area index for round-robin discovery. */
-	nextArea: int().nonnegative(),
-	lastDiscoveryAt: Timestamp.nullable(),
+	/** Unused since 0.6 (the scout replaced the discovery sessions). */
+	discovery: array(DiscoveryRun).default([]),
+	/** Unused since 0.6. */
+	nextArea: int().nonnegative().default(0),
+	/** Unused since 0.6 (see `scout.lastRoundAt`). */
+	lastDiscoveryAt: Timestamp.nullable().default(null),
+	/** The dark factory's scout. */
+	scout: ScoutState.prefault({}),
 	/** Day of the last daily digest. */
 	lastDigestDay: string().nullable(),
 	/** Issues opened before this are not picked up automatically. */
@@ -8807,8 +9106,9 @@ object({
 /** `PUT /api/projects/:id/vision`. */
 const PutVisionRequest = object({ contents: string().min(1).max(2e5) });
 /**
-* `PUT /api/projects/:id/autonomy`. Switching to autopilot or dark factory requires a vision
-* file and limits with a daily budget (sent here, or already saved while in a factory mode).
+* `PUT /api/projects/:id/autonomy`. Switching to the software or dark factory requires a GitHub
+* project, a vision file and limits with a daily budget (sent here, or already saved while in
+* a factory mode).
 */
 const SetAutonomyModeRequest = object({
 	mode: AutonomyMode,
@@ -8819,7 +9119,7 @@ object({
 	projectId: Id,
 	mode: AutonomyMode,
 	limits: FactoryLimits,
-	/** Autopilot and dark factory are experimental in v1. */
+	/** The software and dark factory are experimental. */
 	experimental: boolean()
 });
 /** `POST /api/projects/:id/kill-switch` and `POST /api/factory/kill-switch`. */
@@ -8829,7 +9129,7 @@ object({
 	/** Sessions stopped by turning the switch on. */
 	stoppedSessions: array(Id)
 });
-/** A work item as the factory panel shows it. */
+/** A work item as the factory panel and its pipeline diagram show it. */
 const FactoryWorkItem = object({
 	id: Id,
 	title: string(),
@@ -8837,9 +9137,20 @@ const FactoryWorkItem = object({
 	issue: GitHubIssueRef.nullable(),
 	pr: GitHubPrRef.nullable(),
 	score: number$1().nullable(),
+	/** The builder session. */
 	sessionId: Id.nullable(),
+	/** The independent reviewer's session, once there is one. */
+	reviewerSessionId: Id.nullable().default(null),
+	/** The session working on it right now (the reviewer while reviewing), for the diagram. */
+	activeSessionId: Id.nullable().default(null),
 	stage: FactoryItemStage,
+	step: PipelineStep.default("intake"),
+	type: WorkType.nullable().default(null),
+	trust: WorkTrust.default("trusted"),
+	author: string().nullable().default(null),
 	source: FactoryItemSource,
+	/** Revise rounds so far. */
+	attempts: int().nonnegative().default(0),
 	reason: string().nullable(),
 	note: string().nullable(),
 	updatedAt: Timestamp
@@ -8872,40 +9183,23 @@ object({
 	mergesToday: int().nonnegative(),
 	consecutiveFailures: int().nonnegative(),
 	activeSessions: int().nonnegative(),
+	/** Waiting: being classified (`candidate`) or for a free agent (`backlog`). */
 	backlog: array(FactoryWorkItem),
 	inProgress: array(FactoryWorkItem),
 	mergeChecks: array(FactoryMergeChecks),
 	/** Merged, reverted, failed, rejected and escalated items, newest first. */
 	recent: array(FactoryWorkItem),
+	/** Issues by untrusted authors, newest first; nothing runs on them until let in. */
+	ignored: array(FactoryWorkItem).default([]),
+	/** The account CodeDen uses on GitHub (always trusted); null when unknown. */
+	githubLogin: string().nullable().default(null),
+	/** The dark factory's scout; null in the software factory. */
+	scout: ScoutStatus.nullable().default(null),
 	visionExists: boolean(),
 	lastDigest: FactoryDigest.nullable(),
 	lastTickAt: Timestamp.nullable()
 });
 object({ item: FactoryItem });
-/** A candidate reported by an improvement finder (`factory_report_candidates`). */
-const FactoryCandidate = object({
-	title: string().trim().min(3).max(200),
-	summary: string().trim().min(1).max(4e3),
-	acceptanceCriteria: array(string().trim().min(1).max(500)).min(1).max(12),
-	/** Paths the change would touch, when known. */
-	paths: array(string()).max(50).optional()
-});
-/** The PM's decision on a candidate (`factory_triage`). */
-const FactoryTriageRequest = object({
-	itemId: Id,
-	decision: _enum(["accept", "reject"]),
-	/** Score against the vision, 0..1 (accepts). */
-	score: number$1().min(0).max(1).optional(),
-	/** Replaces the finder's acceptance criteria (accepts). */
-	acceptanceCriteria: array(string().trim().min(1).max(500)).min(1).max(12).optional(),
-	/** Why (required for rejects). */
-	reason: string().trim().min(1).max(1e3).optional(),
-	/**
-	* Accept work that can't be split under the size limit (an initial scaffold, a stack
-	* migration), with the reason. Recorded as a factory decision.
-	*/
-	largeChange: string().trim().min(1).max(500).optional()
-});
 /**
 * `factory_allow_large_change`: the PM lets an item that failed only the size check merge
 * after all, because the work can't be split. The item goes back to verifying.
@@ -9421,7 +9715,8 @@ const Notice = discriminatedUnion("type", [
 				"escalated",
 				"regression",
 				"merged",
-				"failed"
+				"failed",
+				"ready"
 			]),
 			/** Instructions (for the PM) or a summary (for the orchestrator). */
 			text: string(),
@@ -9465,7 +9760,7 @@ object({
 			kind: _enum(["github", "local"]),
 			/**
 			* The project's autonomy mode: tells the PM who merges pull requests (the user in manual and
-			* assisted, the factory loop in autopilot and dark factory).
+			* assisted, the factory loop in the software and dark factory).
 			*/
 			mode: AutonomyMode
 		}),
@@ -12034,7 +12329,7 @@ const BillingMode = _enum([
 	"subscription",
 	"unknown"
 ]);
-/** Who started the work a ledger row belongs to. `factory`: autopilot / dark-factory work. */
+/** Who started the work a ledger row belongs to. `factory`: software- and dark-factory work. */
 const UsageSource = _enum([
 	"user",
 	"orchestrator",
@@ -12265,7 +12560,7 @@ object({
 * rest of the bundle, so the package version is the single source of truth at runtime;
 * everywhere else (workspace, tests) it is `SOURCE_VERSION`.
 */
-const CODEDEN_VERSION = packageVersion() ?? "0.5.0";
+const CODEDEN_VERSION = packageVersion() ?? "0.6.0";
 function packageVersion() {
 	const value = globalThis.__CODEDEN_PACKAGE_VERSION__;
 	return typeof value === "string" && value.length > 0 ? value : void 0;
@@ -30167,7 +30462,7 @@ async function handleMcpRequest(request, upstream) {
 		return await upstream.forward(request);
 	} catch (error) {
 		if (request.signal.aborted) return new Response(null, { status: 499 });
-		return jsonRpcError(502, `CodeDen server unreachable: ${error.message}`);
+		return jsonRpcError(502, `CodeDen server unreachable (it may be restarting; call the same tool again in a few seconds): ${error.message}`);
 	}
 }
 // ../runner/src/process/supervisor.ts
@@ -32465,6 +32760,6 @@ async function startRunner(opts) {
 		close
 	};
 }
-export { SetNetworkPasswordResponse as $, SessionOptions as $n, speechExcerpt as $t, findExecutable as A, PutVisionRequest as An, intersection as Ar, UpdateAutomationProjectSettingsRequest as At, RunnerToServerMessage as B, TriagePolicy as Bn, unknown as Br, SecretKey as Bt, importClaudeSdkFrom as C, FactoryAllowLargeChangeRequest as Cn, _enum as Cr, ListAutomationsQuery as Ct, resolveNpm as D, FactoryTuning as Dn, custom as Dr, TriageDecisionRequest as Dt, runNpm as E, FactoryTriageRequest as En, boolean as Er, StarterSetRequest as Et, CODEDEN_VERSION as F, Automation as Fn, optional as Fr, ListInboxQuery as Ft, ResolveConflictRequest as G, GitCommitRequest as Gn, SteerRequest as Gt, ArchiveSessionRequest as H, SessionStatus as Hn, toJSONSchema as Hr, SessionStartMeta as Ht, UsageQuery as I, AutomationAction as In, preprocess as Ir, ListSessionsQuery as It, NetworkStatus as J, SessionResult as Jn, UpdateProjectRequest as Jt, RoleMessageRequest as K, GitPushRequest as Kn, ThreadItemsQuery as Kt, UsageSettings as L, AutomationGuards as Ln, record as Lr, ReorderProjectsRequest as Lt, ownNodeEnv as M, SetAutonomyModeRequest as Mn, looseObject as Mr, CreateProjectRequest as Mt, import_websocket_server as N, isFactoryMode as Nn, number$1 as Nr, FileReadQuery as Nt, acquireInstallLock as O, KillSwitchRequest as On, discriminatedUnion as Or, TriageReport as Ot, wrapper_default as P, Artifact as Pn, object as Pr, FileWriteRequest as Pt, SetNetworkPasswordRequest as Q, RunnerCommandResults as Qn, Settings as Qt, SessionFileQuery as R, AutomationRun as Rn, string as Rr, ResolveInboxRequest as Rt, CLAUDE_SDK_VERSION as S, DiscoveryArea as Sn, datetime as Sr, ListAutomationRunsQuery as St, isClaudeSdkInstalled as T, FactoryDecisionRequest as Tn, array as Tr, SetAutomationEnabledRequest as Tt, ListConflictsQuery as U, DiffScope as Un, safeParse$1 as Ur, SetSecretRequest as Ut, ServerLock as V, Session as Vn, ZodError as Vr, SendMessageRequest as Vt, ListNoticesQuery as W, EditQueuedMessageRequest as Wn, prettifyError as Wr, StartSessionRequest as Wt, RemoteAccessFile as X, TerminalClientMessage as Xn, agentEventToNewEvent as Xt, PASSWORD_RULE_TEXT as Y, SpeechSummaryRequest as Yn, HealthResponse as Yt, SetNetworkAccessRequest as Z, TerminalQuery as Zn, READ_ALOUD_FULL_MAX_CHARS as Zt, ImageGenerationError as _, GithubPr as _n, McpServerTarget as _r, ImportAutomationsRequest as _t, Hono as a, UpdateInstallRequest as an, sortProjects as ar, BrowserClientMessage as at, mainRepoRoot as b, githubPrId as bn, ProviderId as br, AutomationProjectRequest as bt, createAdaptorServer as c, isNewerVersion as cn, InboxItem as cr, BrowserNavigateRequest as ct, defaultShell as d, NoticeBatchData as dn, AgentConfigDeleteQuery as dr, BrowserViewportRequest as dt, LOCAL_STT_SAMPLE_RATE as en, ProjectConfigFile as er, SignInRequest as et, shellCommandLine as f, CreateGithubIssueRequest as fn, AgentConfigDiffRequest as fr, BrowserWsQuery as ft, resolveImageOutput as g, GithubListQuery as gn, McpServerDiffRequest as gr, ExportAutomationsQuery as gt, IMAGE_ASPECT_RATIOS as h, GithubLabelRequest as hn, AgentConfigWriteRequest as hr, DuplicateAutomationRequest as ht, killTree as i, AppPointer as in, Project as ir, summarizeActivity as it, isElectronRuntime as j, ReviewVerdict as jn, literal as jr, UpdateAutomationRequest as jt, brokenInstallMessage as k, LEGACY_SIZE_LIMITS as kn, int as kr, UpcomingRunsQuery as kt, upgradeWebSocket as l, ConflictRecord as ln, InboxItemKind as lr, BrowserNewTabRequest as lt, createImageEngineRegistry as m, GithubIssue as mn, AgentConfigLocator as mr, AutomationImportSource as mt, readLock as n, SttQuery as nn, StartedBy as nr, ImageTestRequest as nt, tryDecodeURIComponent as o, UpdateStatus as on, DEFAULT_VISION_PATH as or, BrowserDevServerRequest as ot, ImageEngineRegistry as p, GithubCommentRequest as pn, AgentConfigListQuery as pr, AUTOMATION_IMPORT_LIMITS as pt, UpdateSessionRequest as q, RestoreFilesRequest as qn, UiClientMessage as qt, isAlive as r, TtsRequest as rn, WorkKey as rr, BrowserHostClientMessage as rt, bufferToFormData as s, compareVersions$1 as sn, FactoryLimits as sr, BrowserHistoryRequest as st, startRunner as t, LocalSttModelParams as tn, ConflictDecision as tr, passwordProblem as tt, refreshProcessPath as u, NOTICE_BATCH_CODE as un, messageFrom as ur, BrowserOpenRequest as ut, claudeMemoryDir as v, MergePrRequest as vn, McpServerUpsertRequest as vr, AutomationFileFrontmatter as vt, installClaudeSdk as w, FactoryCandidate as wn, _null as wr, RunAutomationRequest as wt, claudeSdkSource as x, parseGithubPrId as xn, ReasoningEffort as xr, CreateAutomationRequest as xt, findGitRoot as y, TriageIssueRequest as yn, AutonomyLevel as yr, AutomationGuardsPatch as yt, RunnerLock as z, AutomationTrigger as zn, union as zr, RespondRequest as zt };
+export { SetNetworkPasswordResponse as $, RestoreFilesRequest as $n, speechExcerpt as $t, findExecutable as A, isFactoryMode as An, _null as Ar, UpdateAutomationProjectSettingsRequest as At, RunnerToServerMessage as B, Artifact as Bn, object as Br, SecretKey as Bt, importClaudeSdkFrom as C, FactoryDecisionRequest as Cn, McpServerTarget as Cr, ListAutomationsQuery as Ct, resolveNpm as D, PutVisionRequest as Dn, ReasoningEffort as Dr, TriageDecisionRequest as Dt, runNpm as E, LEGACY_SIZE_LIMITS as En, ProviderId as Er, StarterSetRequest as Et, CODEDEN_VERSION as F, FactoryPlanRoundRequest as Fn, int as Fr, ListInboxQuery as Ft, ResolveConflictRequest as G, AutomationTrigger as Gn, union as Gr, SteerRequest as Gt, ArchiveSessionRequest as H, AutomationAction as Hn, preprocess as Hr, SessionStartMeta as Ht, UsageQuery as I, FactoryReproductionReport as In, intersection as Ir, ListSessionsQuery as It, NetworkStatus as J, SessionStatus as Jn, toJSONSchema as Jr, UpdateProjectRequest as Jt, RoleMessageRequest as K, TriagePolicy as Kn, unknown as Kr, ThreadItemsQuery as Kt, UsageSettings as L, FactorySetTypeRequest as Ln, literal as Lr, ReorderProjectsRequest as Lt, ownNodeEnv as M, FactoryAnalysisReport as Mn, boolean as Mr, CreateProjectRequest as Mt, import_websocket_server as N, FactoryFileIssueRequest as Nn, custom as Nr, FileReadQuery as Nt, acquireInstallLock as O, ReviewVerdict as On, datetime as Or, TriageReport as Ot, wrapper_default as P, FactoryFinding as Pn, discriminatedUnion as Pr, FileWriteRequest as Pt, SetNetworkPasswordRequest as Q, GitPushRequest as Qn, Settings as Qt, SessionFileQuery as R, ScoutState as Rn, looseObject as Rr, ResolveInboxRequest as Rt, CLAUDE_SDK_VERSION as S, FactoryAllowLargeChangeRequest as Sn, McpServerDiffRequest as Sr, ListAutomationRunsQuery as St, isClaudeSdkInstalled as T, KillSwitchRequest as Tn, AutonomyLevel as Tr, SetAutomationEnabledRequest as Tt, ListConflictsQuery as U, AutomationGuards as Un, record as Ur, SetSecretRequest as Ut, ServerLock as V, Automation as Vn, optional as Vr, SendMessageRequest as Vt, ListNoticesQuery as W, AutomationRun as Wn, string as Wr, StartSessionRequest as Wt, RemoteAccessFile as X, EditQueuedMessageRequest as Xn, prettifyError as Xr, agentEventToNewEvent as Xt, PASSWORD_RULE_TEXT as Y, DiffScope as Yn, safeParse$1 as Yr, HealthResponse as Yt, SetNetworkAccessRequest as Z, GitCommitRequest as Zn, READ_ALOUD_FULL_MAX_CHARS as Zt, ImageGenerationError as _, GithubPr as _n, AgentConfigDeleteQuery as _r, ImportAutomationsRequest as _t, Hono as a, UpdateInstallRequest as an, SessionOptions as ar, BrowserClientMessage as at, mainRepoRoot as b, githubPrId as bn, AgentConfigLocator as br, AutomationProjectRequest as bt, createAdaptorServer as c, isNewerVersion as cn, StartedBy as cr, BrowserNavigateRequest as ct, defaultShell as d, NoticeBatchData as dn, sortProjects as dr, BrowserViewportRequest as dt, LOCAL_STT_SAMPLE_RATE as en, SessionResult as er, SignInRequest as et, shellCommandLine as f, CreateGithubIssueRequest as fn, DEFAULT_VISION_PATH as fr, BrowserWsQuery as ft, resolveImageOutput as g, GithubListQuery as gn, messageFrom as gr, ExportAutomationsQuery as gt, IMAGE_ASPECT_RATIOS as h, GithubLabelRequest as hn, InboxItemKind as hr, DuplicateAutomationRequest as ht, killTree as i, AppPointer as in, RunnerCommandResults as ir, summarizeActivity as it, isElectronRuntime as j, FactoryAdmitRequest as jn, array as jr, UpdateAutomationRequest as jt, brokenInstallMessage as k, SetAutonomyModeRequest as kn, _enum as kr, UpcomingRunsQuery as kt, upgradeWebSocket as l, ConflictRecord as ln, WorkKey as lr, BrowserNewTabRequest as lt, createImageEngineRegistry as m, GithubIssue as mn, InboxItem as mr, AutomationImportSource as mt, readLock as n, SttQuery as nn, TerminalClientMessage as nr, ImageTestRequest as nt, tryDecodeURIComponent as o, UpdateStatus as on, ProjectConfigFile as or, BrowserDevServerRequest as ot, ImageEngineRegistry as p, GithubCommentRequest as pn, FactoryLimits as pr, AUTOMATION_IMPORT_LIMITS as pt, UpdateSessionRequest as q, Session as qn, ZodError as qr, UiClientMessage as qt, isAlive as r, TtsRequest as rn, TerminalQuery as rr, BrowserHostClientMessage as rt, bufferToFormData as s, compareVersions$1 as sn, ConflictDecision as sr, BrowserHistoryRequest as st, startRunner as t, LocalSttModelParams as tn, SpeechSummaryRequest as tr, passwordProblem as tt, refreshProcessPath as u, NOTICE_BATCH_CODE as un, Project as ur, BrowserOpenRequest as ut, claudeMemoryDir as v, MergePrRequest as vn, AgentConfigDiffRequest as vr, AutomationFileFrontmatter as vt, installClaudeSdk as w, FactoryTuning as wn, McpServerUpsertRequest as wr, RunAutomationRequest as wt, claudeSdkSource as x, parseGithubPrId as xn, AgentConfigWriteRequest as xr, CreateAutomationRequest as xt, findGitRoot as y, TriageIssueRequest as yn, AgentConfigListQuery as yr, AutomationGuardsPatch as yt, RunnerLock as z, pipelineStep as zn, number$1 as zr, RespondRequest as zt };
 
-//# sourceMappingURL=runner-WAbCC8k2.js.map
+//# sourceMappingURL=runner-CYnMuxur.js.map