codeden 0.5.0 → 0.6.1

package/README.md

@@ -2,7 +2,7 @@
 
 # CodeDen
 
-**A local-first harness for coding agents.** Run Claude Code and Codex side by side in a calm, focused workspace, and when you're ready, let a small software factory work through your backlog while every step stays visible in GitHub.
+**A local-first harness for coding agents.** Run Claude Code, Codex and OpenCode side by side in a calm, focused workspace, and when you're ready, let a small software factory work through your backlog while every step stays visible in GitHub.
 
 [![Website](https://img.shields.io/badge/website-codeden.app-e8a33d)](https://www.codeden.app)
 [![npm](https://img.shields.io/npm/v/codeden?color=e8a33d&label=npm)](https://www.npmjs.com/package/codeden)
@@ -18,7 +18,7 @@
 npx codeden
 ```
 
-That's the whole install. CodeDen starts a local server, opens your browser on an already signed-in URL, and reuses the Claude Code, Codex, GitHub and git setup you already have. No accounts, no license keys, no hosted backend, no telemetry.
+That's the whole install. CodeDen starts a local server, opens your browser on an already signed-in URL, and reuses the Claude Code, Codex, OpenCode, GitHub and git setup you already have. No accounts, no license keys, no hosted backend, no telemetry.
 
 Prefer an app? **[Download the desktop app](https://github.com/leonvanzyl/codeden/releases/latest)** for Windows, macOS or Linux: the same CodeDen in its own window, with a tray icon, notifications and automatic updates, and no Node.js needed. See [The desktop app](https://github.com/leonvanzyl/codeden/blob/main/docs/desktop.md).
 
@@ -45,7 +45,7 @@ Prefer an app? **[Download the desktop app](https://github.com/leonvanzyl/codede
 |---|---|
 | **Node.js 24+** | `node --version` |
 | **git** | with `user.name` and `user.email` set |
-| **An agent CLI, signed in** | [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`) and/or [Codex CLI](https://developers.openai.com/codex/cli) (`codex`). At least one is required |
+| **An agent CLI, signed in** | [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`), [Codex CLI](https://developers.openai.com/codex/cli) (`codex`) and/or [OpenCode](https://opencode.ai) 2.2+ (`opencode`). At least one is required |
 | **GitHub CLI** *(optional)* | `gh auth login` unlocks issues, pull requests, evidence and the factory. Local-only folders work without it |
 | **Edge or Chrome** *(optional)* | for the browser panel and the agents' browser tools |
 
@@ -57,7 +57,7 @@ npx codeden            # or: npm i -g codeden && codeden
 
 Or install the **desktop app** from the [latest release](https://github.com/leonvanzyl/codeden/releases/latest) (`CodeDen-Setup-<version>.exe` on Windows, a `.dmg` on macOS, an AppImage or `.deb` on Linux). It needs no Node.js, uses the same data as `npx codeden` (`~/.codeden`), lives in the tray and updates itself. Builds without a publisher signature show a warning the first time you open them: on Windows choose **More info › Run anyway**; on macOS open CodeDen once, then choose **Open Anyway** under **System Settings › Privacy & Security**. If macOS says the app is "damaged", see [Unsigned builds](https://github.com/leonvanzyl/codeden/blob/main/docs/desktop.md#unsigned-builds).
 
-1. The **setup checklist** detects Claude Code, Codex, GitHub, your git identity and a browser, and only asks about what's missing. Each failed check has one fix: an install command, or a **Sign in** button that runs the tool's own login in an embedded terminal.
+1. The **setup checklist** detects Claude Code, Codex, OpenCode, GitHub, your git identity and a browser, and only asks about what's missing. Each failed check has one fix: an install command, or a **Sign in** button that runs the tool's own login in an embedded terminal.
 2. **Add a project:** pick a local folder (a server-side folder picker) or paste a GitHub URL to clone.
 3. **Start a session.** The agent works in its own git worktree and branch, so your checkout is never touched.
 
@@ -95,11 +95,11 @@ Background work you switch on per project: **security audit**, **refactor sweep*
 
 ![A project's automations with their schedules and the next runs](https://raw.githubusercontent.com/leonvanzyl/codeden/main/docs/images/automations.png)
 
-### Autonomy modes, including an experimental dark factory
+### A software factory, and an experimental dark factory
 
-Each project climbs a ladder: **Manual** → **Assisted** (the default) → **Autopilot** → **Dark factory**. In the last two (both **experimental**), a factory loop takes in work from issues, failed checks and improvement finders, builds it in agent sessions, and merges a PR automatically only when every merge check passes: green CI, tests, an independent review by a separate agent session, a security scan, UI evidence, a size limit and no protected areas touched. Limits you set (concurrent sessions, merges per day, a daily budget, pause after repeated failures) are enforced by the server, and a kill switch stops everything with one click. [Autonomy and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/autonomy-and-dark-factory.md).
+Each project climbs a ladder: **Manual** → **Assisted** (the default) → **Software factory** → **Dark factory**. In a **software factory**, the GitHub issues you and the people you trust file are classified as a bug, a feature or a docs change, and a pool of agents runs each through its pipeline: reproduce, fix and review a bug; analyze, implement and review a feature; change the docs. Every pull request carries its test results, and screenshots for UI changes; you merge it, or turn on auto-merge. Issues from anyone else (on a public repository, anyone at all) are ignored until you let one in, and what you let in is never merged automatically. A **dark factory** adds a scheduled scout that reviews the app against your vision with a few long-lived reviewer agents and files the issues itself. The project page draws the pipelines live: click an issue to open the agent working on it. Limits (agents at once, a daily budget, pause after repeated failures) are enforced by the server, and a kill switch stops everything with one click. Both are **experimental**. [The software factory and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/software-factory.md).
 
-![The factory panel: loop stages, budget meters, backlog, merge checks and recent merges](https://raw.githubusercontent.com/leonvanzyl/codeden/main/docs/images/factory-panel.png)
+![The factory panel: the live Bug, Feature and Docs pipelines, the agent pool, budget, merge checks and ignored issues](https://raw.githubusercontent.com/leonvanzyl/codeden/main/docs/images/factory-panel.png)
 
 ### Workbench
 
@@ -152,13 +152,13 @@ When an agent finishes, CodeDen suggests two to four next prompts as one-click c
                 │ runner protocol over WebSocket        │ events + acks
 ┌───────────────▼──────────────────────────────────────┴──────────────┐
 │ RUNNER  (separate process, next to the code)                        │
-│  Claude Agent SDK · codex app-server · terminals (node-pty)         │
+│  Claude Agent SDK · codex app-server · opencode serve · node-pty    │
 │  Chromium over CDP · worktrees, checkpoints, git · MCP proxy        │
 └──────────────────────────────────────────────────────────────────────┘
 ```
 
 - **Two processes.** The **server** owns the database, orchestration, the inbox, automations and GitHub sync, and serves the UI. The **runner** hosts the agent processes, terminals, the browser and git. If the server restarts (an update, a crash), running agents keep going; the runner journals their events until the server is back.
-- **Real SDKs and protocols.** Claude Code runs through the Claude Agent SDK using your installed `claude` binary; Codex runs through `codex app-server` over JSON-RPC. No scraped terminal output.
+- **Real SDKs and protocols.** Claude Code runs through the Claude Agent SDK using your installed `claude` binary; Codex runs through `codex app-server` over JSON-RPC; OpenCode runs as a private `opencode serve` per session, over its HTTP API and event stream. No scraped terminal output.
 - **Everything is an event.** Agent activity is an append-only event log in SQLite, so every action can be seen, replayed and traced to an issue, branch or PR.
 - **Agents reach CodeDen through MCP.** Each session gets a role-scoped token for CodeDen's internal MCP server (`report_progress`, `ask_user`, `create_pull_request`, `attach_evidence`, the browser tools, `generate_image`, ...). Tools outside a role are never listed.
 
@@ -186,7 +186,7 @@ Details and how to report a vulnerability: [docs/security.md](https://github.com
 | API keys | Settings, stored in the OS keychain |
 | Per-project setup | `.codeden/project.json` in the repo: worktree setup commands and the dev server |
 | Automations | `~/.codeden/automations/*.md` (all projects) and `<repo>/.codeden/automations/*.md` |
-| Project vision | `<repo>/.codeden/VISION.md` (autopilot and dark factory) |
+| Project vision | `<repo>/.codeden/VISION.md` (software and dark factory) |
 
 Inside the data directory:
 
@@ -201,6 +201,7 @@ Inside the data directory:
   artifacts/            screenshots and files shared in chat
   orchestrator/         the orchestrator's working directory
   backups/              copies of config files taken before CodeDen overwrote them
+  agent-config/         hooks you switched off on the Agents page (until you enable them)
   logs/runner.log       runner output
   deps/                 Claude Code support, installed on demand
   app/<version>/        CodeDen versions installed by one-click updates
@@ -260,7 +261,7 @@ CodeDen checks npm for a new version when it starts and every 6 hours (only the
 ## FAQ
 
 **Do I need API keys?**
-No. CodeDen runs your installed `claude` and `codex` CLIs, which use their own logins, including claude.ai and ChatGPT subscriptions. CodeDen never implements a login of its own and never asks for a credential it can already use. API keys are an optional extra for Gemini or OpenAI image generation and cloud voice. Check your provider's terms for how your plan may be used.
+No. CodeDen runs your installed `claude`, `codex` and `opencode` CLIs, which use their own logins, including claude.ai and ChatGPT subscriptions. CodeDen never implements a login of its own and never asks for a credential it can already use. API keys are an optional extra for Gemini or OpenAI image generation and cloud voice. Check your provider's terms for how your plan may be used.
 
 **Where does my data go?**
 It stays on your machine, in `~/.codeden/`. CodeDen has no account system and no hosted backend. The only network traffic is what you set up: your agents talking to their providers, GitHub (through your `gh` login), and the optional image and voice engines you enable.
@@ -284,7 +285,7 @@ Windows, macOS and Linux. Windows is tested first.
 Yes. Turn on **Settings › Network access**, set a password, and scan the QR code with your phone on the same Wi-Fi (or over your own VPN such as Tailscale). The UI adapts to phones and tablets, and **Add to Home Screen** opens it full screen. Plain http addresses mean no notifications or microphone on the phone. See [Phones, tablets and network access](https://github.com/leonvanzyl/codeden/blob/main/docs/remote-access.md).
 
 **Is the dark factory safe to leave running?**
-It's experimental. Read [Autonomy and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/autonomy-and-dark-factory.md) first, start with Autopilot on a sandbox repository, set a budget and protected areas, and keep the kill switch in reach.
+It's experimental. Read [The software factory and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/software-factory.md) first, start with the software factory on a sandbox repository with auto-merge off, set a budget, trusted authors and protected areas, and keep the kill switch in reach.
 
 ## Documentation
 
@@ -295,7 +296,7 @@ It's experimental. Read [Autonomy and the dark factory](https://github.com/leonv
 | [Orchestration](https://github.com/leonvanzyl/codeden/blob/main/docs/orchestration.md) | Orchestrator, PMs, agents, work keys, conflicts and notices |
 | [GitHub](https://github.com/leonvanzyl/codeden/blob/main/docs/github.md) | Issues, PRs, checks, reviews and the evidence branch |
 | [Automations](https://github.com/leonvanzyl/codeden/blob/main/docs/automations.md) | Triggers, guards, templates and writing your own |
-| [Autonomy and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/autonomy-and-dark-factory.md) | Modes, the vision file, merge checks, limits and the kill switch |
+| [The software factory and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/software-factory.md) | Modes, pipelines, trusted authors, the scout, the vision file, merge checks, limits and the kill switch |
 | [Workbench](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md) | Diffs, checkpoints, files, terminal, browser, composer, shortcuts |
 | [Agent configuration](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md) | Memory, skills, subagents and MCP servers |
 | [Voice and images](https://github.com/leonvanzyl/codeden/blob/main/docs/voice-and-images.md) | Dictation, read-aloud and image generation |

package/dist/cli.js

@@ -242,7 +242,7 @@ async function run() {
 		console.log(selfVersion);
 		process.exit(0);
 	}
-	await import("./main-BQwSt6Az.js");
+	await import("./main-BTA6NERX.js");
 }
 /** Settles once this copy's CLI has loaded (an older launcher that switched here awaits it). */
 const started = run();

package/dist/drizzle/20261111152627_session_plan_mode/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE `sessions` ADD `plan_mode` integer DEFAULT false NOT NULL;