code-mower 0.9.3b1__tar.gz → 1.0.0__tar.gz

{code_mower-0.9.3b1 → code_mower-1.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.9.3b1
+Version: 1.0.0
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.12
@@ -66,6 +66,12 @@ first-run adoption gaps. `--preflight` remains the compatibility preset for
 older scripts; `--adoption` adds explicit repo targeting and setup guidance.
 Use `--hosted-builders` or `--orchestrator-only` when the current machine is
 observing/coordinating lanes and will not run local Codex or Claude wrappers.
+For the v1.0 supervised pilot posture, run
+`code-mower doctor --supervised-pilot --repo OWNER/REPO`; use
+`--promoted-pilot` only when `code-mower/gate`, repository auto-merge, and a
+merge-capable gate credential are ready to let green audits drive merge.
+On a self-hosted Mac audit host, add `--runner` to include runner launch and
+wrapper checks in the same proof.
 
 Example, shortened:
 
@@ -95,6 +101,13 @@ wrappers, run `code-mower migration setup-drift --repo-path .` before copying a
 fresh `.code-mower.generated` tree. It is read-only and reports path-level
 classifications (`same`, `differs`, `new`, `repo-only`,
 `missing-from-output`) without file contents or diffs.
+If the repository already has builder or dispatch lanes, rerun setup drift with
+the current builder set, for example `--builders codex,claude,cursor`, before
+opening the reviewed upgrade PR.
+If the report warns that the repo path may be incomplete, rerun it from the
+full repository checkout before treating every generated file as new. If it
+detects reviewer-lane files but no builder-dispatch files, pass `--builders`
+only for repos that actually use builder lanes.
 Use [Upgrade An Existing Repository](docs/upgrade-existing-repo.md) for the
 reviewed PR flow, repo-only file handling, builder identity checks, and
 wrapper/pin drift checks.
@@ -124,7 +137,11 @@ checks Board inputs and local history without exposing local paths by default.
 `code-mower board reset --repo OWNER/REPO --yes` clears only the local Board
 history file. The Board also shows an owner queue, and it
 summarizes reviewer verdict history and spend/latency from local board events
-plus `.code-mower/reviewer-spend.json` when those files exist. Local agents can
+plus `.code-mower/reviewer-spend.json` when those files exist. When
+`code-mower.yml` is present, the Board also embeds a supervised-pilot controller
+summary so the browser view shows the current decision, queue counts, reviewer
+evidence, selected PR or issue, and next action from the same metadata-only
+policy engine as `code-mower controller run`. Local agents can
 publish opt-in status cards by writing metadata-only JSON files to
 `.code-mower/board/agents/*.json`; the Board redacts local paths by default and
 does not upload those cards.
@@ -133,6 +150,12 @@ The local JSON contracts are documented in
 When a team wants the same operator picture on CodeMower.com, run
 `code-mower cloud board-snapshot --repo-slug OWNER/REPO --json` to inspect a
 zero-report, metadata-only mirror event, then add `--yes` only after review.
+The v1.0 supervised-pilot automation and event boundary is defined in
+[Supervised Pilot Contract](docs/supervised-pilot-contract.md).
+As that controller lands, `code-mower controller run --repo OWNER/REPO` is the
+dry-run-first policy check: it selects the current dispatch/merge/owner-action
+decision from metadata, can write a sanitized event with `--event-file`, and
+does not mutate GitHub state.
 
 ## See The Value Shape First
 
@@ -169,14 +192,19 @@ after reinstalling, especially when switching between pipx and uv.
 | B. Build loop in 30 minutes | You want builders plus an orchestrator pattern after the reviewer gate works. | Complete path A, then add the automation token, require `code-mower/gate` from Any source, enable repository auto-merge, prove the self-hosted Mac lane runner with `doctor --runner`, run `init --builders`, and dispatch the first issue. | [Build Loop In 30 Minutes](docs/build-loop-in-30-minutes.md) |
 | C. Builder experiment | You want to compare authoring loops before trusting them broadly. | Use a work order or experiment spec, run `code-mower builder-experiment run` around an explicit command, then review the source-free `authoringRun` artifact and normal audit evidence. | [Builder Experiments](docs/builder-experiments.md) |
 
+When you ask another agent to install, upgrade, orchestrate, build, or review,
+start from the universal prompt in
+[Orchestrator Prompt Pack](docs/orchestrator-prompt-pack.md). It makes the
+agent report its actual host posture, exact installed version, doctor result,
+Board URL, and any owner-only click-list before it mutates the repo.
+
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v0.9.3-beta.1/docs/try-in-10-minutes.md)
-guide. The v0.9 beta includes the completed native Board work plus the adoption
-and upgrade hardening from recent install rehearsals; v0.9.3 keeps the path
-smooth by clarifying starter-package diagnostics, surfacing richer top-level
-lane status detail, showing Board version drift, and reporting standalone pin
-drift during existing-repo upgrades. Package-only users can start from the
-public package rather than a source checkout.
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.0.0/docs/try-in-10-minutes.md)
+guide. The v1.0 supervised-pilot release includes the native Board, the
+controller dry-run and policy contract, adoption and upgrade hardening from
+recent install rehearsals, package-index release checks, provider-diversity
+fixtures, and the universal orchestrator prompt pack. Package-only users can
+start from the public package rather than a source checkout.
 
 ## What Calibration Does And Does Not Prove
 
@@ -207,7 +235,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v0.9.3-beta.1` / `code-mower==0.9.3b1`. The
+the package-index procedure for `v1.0.0` / `code-mower==1.0.0`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 
 ## Optional: Plan Before Coding
@@ -355,8 +383,8 @@ The first recommended lanes are local/manual:
 | Gitar | advisory third signal | informational until calibrated |
 
 Everything else starts manual or informational until your own calibration data
-proves it is useful: Antigravity/Gemini, Hermes, CodeRabbit CLI, Cursor BugBot,
-Qodo, Greptile, Devin, local LLMs, and future ACP bridges.
+proves it is useful: Antigravity/Gemini, Muse, Hermes, CodeRabbit CLI, Cursor
+BugBot, Qodo, Greptile, Devin, local LLMs, and future ACP bridges.
 
 Gemini CLI and Antigravity are distinct lane ids even though both are Google
 surfaces and may use Gemini model infrastructure. Keep their auth, model
@@ -393,8 +421,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index beta baseline is `v0.9.3-beta.1`, with pinned package
-install spec `code-mower==0.9.3b1`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.0.0`, with pinned package
+install spec `code-mower==1.0.0`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -459,6 +487,7 @@ first so local work exercises the same package entrypoint users install.
 - [v0.6 Release Notes](docs/v06-release-notes.md)
 - [v0.8 Release Notes](docs/v08-release-notes.md)
 - [v0.9 Release Notes](docs/v09-release-notes.md)
+- [v1.0 Release Notes](docs/v10-release-notes.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [Demo Calibration Example](examples/demo-calibration/README.md)
 - [Board Demo Rehearsal](examples/board-demo/README.md)

{code_mower-0.9.3b1 → code_mower-1.0.0}/README.md

@@ -49,6 +49,12 @@ first-run adoption gaps. `--preflight` remains the compatibility preset for
 older scripts; `--adoption` adds explicit repo targeting and setup guidance.
 Use `--hosted-builders` or `--orchestrator-only` when the current machine is
 observing/coordinating lanes and will not run local Codex or Claude wrappers.
+For the v1.0 supervised pilot posture, run
+`code-mower doctor --supervised-pilot --repo OWNER/REPO`; use
+`--promoted-pilot` only when `code-mower/gate`, repository auto-merge, and a
+merge-capable gate credential are ready to let green audits drive merge.
+On a self-hosted Mac audit host, add `--runner` to include runner launch and
+wrapper checks in the same proof.
 
 Example, shortened:
 
@@ -78,6 +84,13 @@ wrappers, run `code-mower migration setup-drift --repo-path .` before copying a
 fresh `.code-mower.generated` tree. It is read-only and reports path-level
 classifications (`same`, `differs`, `new`, `repo-only`,
 `missing-from-output`) without file contents or diffs.
+If the repository already has builder or dispatch lanes, rerun setup drift with
+the current builder set, for example `--builders codex,claude,cursor`, before
+opening the reviewed upgrade PR.
+If the report warns that the repo path may be incomplete, rerun it from the
+full repository checkout before treating every generated file as new. If it
+detects reviewer-lane files but no builder-dispatch files, pass `--builders`
+only for repos that actually use builder lanes.
 Use [Upgrade An Existing Repository](docs/upgrade-existing-repo.md) for the
 reviewed PR flow, repo-only file handling, builder identity checks, and
 wrapper/pin drift checks.
@@ -107,7 +120,11 @@ checks Board inputs and local history without exposing local paths by default.
 `code-mower board reset --repo OWNER/REPO --yes` clears only the local Board
 history file. The Board also shows an owner queue, and it
 summarizes reviewer verdict history and spend/latency from local board events
-plus `.code-mower/reviewer-spend.json` when those files exist. Local agents can
+plus `.code-mower/reviewer-spend.json` when those files exist. When
+`code-mower.yml` is present, the Board also embeds a supervised-pilot controller
+summary so the browser view shows the current decision, queue counts, reviewer
+evidence, selected PR or issue, and next action from the same metadata-only
+policy engine as `code-mower controller run`. Local agents can
 publish opt-in status cards by writing metadata-only JSON files to
 `.code-mower/board/agents/*.json`; the Board redacts local paths by default and
 does not upload those cards.
@@ -116,6 +133,12 @@ The local JSON contracts are documented in
 When a team wants the same operator picture on CodeMower.com, run
 `code-mower cloud board-snapshot --repo-slug OWNER/REPO --json` to inspect a
 zero-report, metadata-only mirror event, then add `--yes` only after review.
+The v1.0 supervised-pilot automation and event boundary is defined in
+[Supervised Pilot Contract](docs/supervised-pilot-contract.md).
+As that controller lands, `code-mower controller run --repo OWNER/REPO` is the
+dry-run-first policy check: it selects the current dispatch/merge/owner-action
+decision from metadata, can write a sanitized event with `--event-file`, and
+does not mutate GitHub state.
 
 ## See The Value Shape First
 
@@ -152,14 +175,19 @@ after reinstalling, especially when switching between pipx and uv.
 | B. Build loop in 30 minutes | You want builders plus an orchestrator pattern after the reviewer gate works. | Complete path A, then add the automation token, require `code-mower/gate` from Any source, enable repository auto-merge, prove the self-hosted Mac lane runner with `doctor --runner`, run `init --builders`, and dispatch the first issue. | [Build Loop In 30 Minutes](docs/build-loop-in-30-minutes.md) |
 | C. Builder experiment | You want to compare authoring loops before trusting them broadly. | Use a work order or experiment spec, run `code-mower builder-experiment run` around an explicit command, then review the source-free `authoringRun` artifact and normal audit evidence. | [Builder Experiments](docs/builder-experiments.md) |
 
+When you ask another agent to install, upgrade, orchestrate, build, or review,
+start from the universal prompt in
+[Orchestrator Prompt Pack](docs/orchestrator-prompt-pack.md). It makes the
+agent report its actual host posture, exact installed version, doctor result,
+Board URL, and any owner-only click-list before it mutates the repo.
+
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v0.9.3-beta.1/docs/try-in-10-minutes.md)
-guide. The v0.9 beta includes the completed native Board work plus the adoption
-and upgrade hardening from recent install rehearsals; v0.9.3 keeps the path
-smooth by clarifying starter-package diagnostics, surfacing richer top-level
-lane status detail, showing Board version drift, and reporting standalone pin
-drift during existing-repo upgrades. Package-only users can start from the
-public package rather than a source checkout.
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.0.0/docs/try-in-10-minutes.md)
+guide. The v1.0 supervised-pilot release includes the native Board, the
+controller dry-run and policy contract, adoption and upgrade hardening from
+recent install rehearsals, package-index release checks, provider-diversity
+fixtures, and the universal orchestrator prompt pack. Package-only users can
+start from the public package rather than a source checkout.
 
 ## What Calibration Does And Does Not Prove
 
@@ -190,7 +218,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v0.9.3-beta.1` / `code-mower==0.9.3b1`. The
+the package-index procedure for `v1.0.0` / `code-mower==1.0.0`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 
 ## Optional: Plan Before Coding
@@ -338,8 +366,8 @@ The first recommended lanes are local/manual:
 | Gitar | advisory third signal | informational until calibrated |
 
 Everything else starts manual or informational until your own calibration data
-proves it is useful: Antigravity/Gemini, Hermes, CodeRabbit CLI, Cursor BugBot,
-Qodo, Greptile, Devin, local LLMs, and future ACP bridges.
+proves it is useful: Antigravity/Gemini, Muse, Hermes, CodeRabbit CLI, Cursor
+BugBot, Qodo, Greptile, Devin, local LLMs, and future ACP bridges.
 
 Gemini CLI and Antigravity are distinct lane ids even though both are Google
 surfaces and may use Gemini model infrastructure. Keep their auth, model
@@ -376,8 +404,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index beta baseline is `v0.9.3-beta.1`, with pinned package
-install spec `code-mower==0.9.3b1`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.0.0`, with pinned package
+install spec `code-mower==1.0.0`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -442,6 +470,7 @@ first so local work exercises the same package entrypoint users install.
 - [v0.6 Release Notes](docs/v06-release-notes.md)
 - [v0.8 Release Notes](docs/v08-release-notes.md)
 - [v0.9 Release Notes](docs/v09-release-notes.md)
+- [v1.0 Release Notes](docs/v10-release-notes.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [Demo Calibration Example](examples/demo-calibration/README.md)
 - [Board Demo Rehearsal](examples/board-demo/README.md)

{code_mower-0.9.3b1 → code_mower-1.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "0.9.3b1"
+version = "1.0.0"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.12"
 readme = "README.md"

{code_mower-0.9.3b1 → code_mower-1.0.0}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "0.9.3b1"
+__version__ = "1.0.0"

{code_mower-0.9.3b1 → code_mower-1.0.0}/src/code_mower/board.py

@@ -23,6 +23,8 @@ from urllib.parse import urlparse
 
 from . import __version__ as CODE_MOWER_VERSION
 from . import board_store
+from . import config as code_mower_config
+from . import controller
 from . import lane_status
 from . import reviewer_spend
 
@@ -199,6 +201,11 @@ def status_payload(
     }
     payload["agent_adapters"] = agent_adapters_payload(config)
     payload["owner_queue"] = owner_queue_payload(payload)
+    payload["supervised_pilot"] = supervised_pilot_payload(
+        config,
+        payload,
+        gh_json_runner=gh_json_runner,
+    )
     return payload
 
 
@@ -328,6 +335,183 @@ def owner_queue_payload(status: dict[str, Any]) -> dict[str, Any]:
     }
 
 
+def _supervised_disabled(message: str, *, cycle_state: str = "unavailable") -> dict[str, Any]:
+    return {
+        "schema": controller.SUPERVISED_PILOT_SCHEMA,
+        "enabled": False,
+        "cycle_state": cycle_state,
+        "controller_mode": "dry_run",
+        "decision": {},
+        "queue": {"active_lanes": {}, "metrics": {}, "ready_issue_errors": []},
+        "active_issues": [],
+        "active_prs": [],
+        "message": message,
+    }
+
+
+def _supervised_cycle_state(decision_state: object) -> str:
+    state = str(decision_state or "")
+    if state == "no_work":
+        return "idle"
+    if state == "dispatch_builder":
+        return "dispatch"
+    if state == "ready_to_merge":
+        return "ready"
+    if state == "owner_action":
+        return "owner_action"
+    if state in {"blocked_audit", "failing_check", "not_mergeable"}:
+        return "blocked"
+    if state in {"stale_evidence", "draft_pr", "waiting_for_evidence"}:
+        return "waiting"
+    return "unknown"
+
+
+def _safe_bool(value: object) -> bool:
+    return bool(value)
+
+
+def _safe_reviewer_outcomes(value: object) -> list[dict[str, Any]]:
+    if not isinstance(value, list):
+        return []
+    outcomes = []
+    for item in value:
+        if not isinstance(item, Mapping):
+            continue
+        outcomes.append(
+            {
+                "lane_id": _safe_text(item.get("lane_id"), limit=60),
+                "config_lane_id": _safe_text(item.get("config_lane_id"), limit=80),
+                "verdict": _safe_text(item.get("verdict"), limit=20),
+                "promoted": _safe_bool(item.get("promoted")),
+            }
+        )
+    return outcomes
+
+
+def _supervised_decision_payload(decision: Mapping[str, Any]) -> dict[str, Any]:
+    payload: dict[str, Any] = {
+        "decision_state": _safe_text(decision.get("decision_state"), limit=80),
+        "next_action": _safe_text(decision.get("next_action"), limit=160),
+        "next_detail": _safe_text(decision.get("next_detail"), limit=220),
+        "stop_condition": _safe_text(decision.get("stop_condition"), limit=80),
+        "owner_action_kind": _safe_text(decision.get("owner_action_kind"), limit=80),
+        "lane_id": _safe_text(decision.get("lane_id"), limit=60),
+        "gate_status": _safe_text(decision.get("gate_status"), limit=40),
+        "branch": _safe_text(decision.get("branch"), limit=160),
+        "author": _safe_text(decision.get("author"), limit=80),
+        "head_sha_prefix": _head_prefix(decision.get("head_sha_prefix")),
+        "merge_method": _safe_text(decision.get("merge_method"), limit=40),
+        "author_lane_excluded": _safe_bool(decision.get("author_lane_excluded")),
+        "promoted_reviewers_passed": _safe_bool(decision.get("promoted_reviewers_passed")),
+        "would_mutate": _safe_bool(decision.get("would_mutate")),
+        "reviewer_outcomes": _safe_reviewer_outcomes(decision.get("reviewer_outcomes")),
+    }
+    if pr_number := _int(decision.get("pr_number")):
+        payload["pr_number"] = pr_number
+    if issue_number := _int(decision.get("issue_number")):
+        payload["issue_number"] = issue_number
+    if pr_url := _http_url(decision.get("pr_url")):
+        payload["pr_url"] = pr_url
+    if issue_url := _http_url(decision.get("issue_url")):
+        payload["issue_url"] = issue_url
+    return {key: value for key, value in payload.items() if value not in (None, "", [])}
+
+
+def _supervised_pr_payload(pr: Mapping[str, Any]) -> dict[str, Any]:
+    labels = pr.get("labels") if isinstance(pr.get("labels"), Mapping) else {}
+    payload: dict[str, Any] = {
+        "number": _int(pr.get("number")) or 0,
+        "title": _safe_text(pr.get("title"), limit=180),
+        "url": _http_url(pr.get("url")),
+        "branch": _safe_text(pr.get("branch"), limit=160),
+        "author": _safe_text(pr.get("author"), limit=80),
+        "updated_at": _safe_text(pr.get("updated_at"), limit=80),
+        "head_sha_prefix": _head_prefix(pr.get("head_sha")),
+        "merge_state": _safe_text(pr.get("merge_state"), limit=40),
+        "is_draft": _safe_bool(pr.get("is_draft")),
+        "stale": _safe_bool(pr.get("stale")),
+        "next_action": _safe_text(pr.get("next_action"), limit=160),
+        "next_detail": _safe_text(pr.get("next_detail"), limit=220),
+        "labels": labels,
+    }
+    return {key: value for key, value in payload.items() if value not in (None, "", [])}
+
+
+def _supervised_issue_payload(issue: Mapping[str, Any]) -> dict[str, Any]:
+    payload: dict[str, Any] = {
+        "number": _int(issue.get("number")) or 0,
+        "url": _http_url(issue.get("url")),
+        "author": _safe_text(issue.get("author"), limit=80),
+        "updated_at": _safe_text(issue.get("updated_at"), limit=80),
+        "builder_lane": _safe_text(issue.get("builder_lane"), limit=60),
+        "assigned": _safe_bool(issue.get("assigned")),
+        "dispatched": _safe_bool(issue.get("dispatched")),
+        "owner_action": _safe_bool(issue.get("owner_action")),
+        "labels": [label for label in issue.get("labels") or [] if isinstance(label, str)][:20],
+    }
+    return {key: value for key, value in payload.items() if value not in (None, "", [])}
+
+
+def supervised_pilot_payload(
+    config: BoardConfig,
+    status: dict[str, Any],
+    *,
+    gh_json_runner: lane_status.GitHubJsonRunner = lane_status.run_gh_json,
+) -> dict[str, Any]:
+    config_path = Path(config.repo_path) / "code-mower.yml"
+    if not config_path.is_file():
+        return _supervised_disabled("code-mower.yml not found; supervised pilot state is unavailable")
+    try:
+        raw_config = code_mower_config.load_config(config_path)
+        issues = code_mower_config.validate_config(raw_config)
+    except (OSError, code_mower_config.ConfigError, ValueError):
+        return _supervised_disabled("could not read Code Mower config; run code-mower config validate")
+    if issues:
+        return _supervised_disabled("Code Mower config is invalid; run code-mower config validate")
+
+    remote = status.get("remote") if isinstance(status.get("remote"), Mapping) else {}
+    if remote.get("available"):
+        ready_issues = controller._collect_ready_issues(  # noqa: SLF001 - shared package policy surface for Board.
+            repo=config.repo,
+            config=raw_config,
+            gh_json_runner=gh_json_runner,
+            issue_limit=min(config.pr_limit, 50),
+        )
+    else:
+        ready_issues = {"available": False, "errors": ["remote unavailable"], "issues": []}
+
+    report = controller.evaluate_controller_report(
+        status_report=status,
+        ready_issues=ready_issues,
+        config=raw_config,
+        options=controller.ControllerOptions(repo=config.repo, mode="dry_run", issue_limit=min(config.pr_limit, 50)),
+    )
+    decision = report.get("decision") if isinstance(report.get("decision"), Mapping) else {}
+    queue = report.get("queue") if isinstance(report.get("queue"), Mapping) else {}
+    raw_prs = remote.get("pull_requests") if isinstance(remote.get("pull_requests"), list) else []
+    issue_payload = ready_issues.get("issues") if isinstance(ready_issues.get("issues"), list) else []
+    return {
+        "schema": controller.SUPERVISED_PILOT_SCHEMA,
+        "enabled": True,
+        "cycle_state": _supervised_cycle_state(decision.get("decision_state")),
+        "controller_mode": report.get("mode") or "dry_run",
+        "generated_at": report.get("generated_at") or "",
+        "decision": _supervised_decision_payload(decision),
+        "queue": queue,
+        "active_issues": [
+            _supervised_issue_payload(issue)
+            for issue in issue_payload
+            if isinstance(issue, Mapping)
+        ],
+        "active_prs": [
+            _supervised_pr_payload(pr)
+            for pr in raw_prs
+            if isinstance(pr, Mapping)
+        ],
+        "message": "",
+    }
+
+
 def _verdict_from_done_label(label: str) -> tuple[str, str] | None:
     if label.endswith("-done"):
         return label[: -len("-done")], "PASS"
@@ -652,6 +836,7 @@ def render_board_html(config: BoardConfig) -> str:
   </header>
   <main>
     <div class="summary" id="summary"></div>
+    <section><h2>Supervised Pilot</h2><div class="rows" id="supervised"></div></section>
     <section><h2>Owner Queue</h2><div class="rows" id="owner"></div></section>
     <section><h2>Agent Cards</h2><div class="rows" id="agents"></div></section>
     <section><h2>Open PRs</h2><div class="rows" id="prs"></div></section>
@@ -702,6 +887,12 @@ def render_board_html(config: BoardConfig) -> str:
       const alerts = data.remote?.gate_health?.alerts || [];
       const ownerQueue = data.owner_queue?.entries || [];
       const agentCards = data.agent_adapters?.agents || [];
+      const supervised = data.supervised_pilot || {{}};
+      const supervisedDecision = supervised.decision || {{}};
+      const supervisedQueue = supervised.queue || {{}};
+      const supervisedMetrics = supervisedQueue.metrics || {{}};
+      const supervisedPRs = supervised.active_prs || [];
+      const supervisedIssues = supervised.active_issues || [];
       const timelines = data.timelines || {{}};
       const verdicts = timelines.verdicts?.entries || [];
       const spend = timelines.spend || {{}};
@@ -711,10 +902,22 @@ def render_board_html(config: BoardConfig) -> str:
         data.next_detail ? `<div class="metric"><span class="muted">Detail</span><b>${{esc(data.next_detail)}}</b></div>` : "",
         `<div class="metric"><span class="muted">GitHub</span><b class="${{data.remote?.available ? "ok" : "warn"}}">${{data.remote?.available ? "available" : "unavailable"}}</b></div>`,
         `<div class="metric"><span class="muted">Open PRs</span><b>${{prs.length}}</b></div>`,
+        `<div class="metric"><span class="muted">Pilot</span><b class="${{stateClass(supervised.cycle_state || "")}}">${{esc(supervised.cycle_state || "off")}}</b></div>`,
         `<div class="metric"><span class="muted">Owner queue</span><b class="${{ownerQueue.length ? "warn" : "ok"}}">${{ownerQueue.length}}</b></div>`,
         `<div class="metric"><span class="muted">Agent cards</span><b>${{agentCards.length}}</b></div>`,
         `<div class="metric"><span class="muted">Gate alerts</span><b class="${{alerts.length ? "warn" : "ok"}}">${{alerts.length}}</b></div>`
       ].join(""));
+      const reviewerOutcomes = supervisedDecision.reviewer_outcomes || [];
+      const supervisedRows = supervised.enabled ? [
+        `<div class="row"><div class="line"><b class="${{stateClass(supervised.cycle_state)}}">${{esc(supervised.cycle_state || "unknown")}}</b>${{pill(supervised.controller_mode || "dry_run")}}${{supervisedDecision.decision_state ? pill(supervisedDecision.decision_state) : ""}}</div><div>next: <b>${{esc(supervisedDecision.next_action || "inspect")}}</b></div>${{supervisedDecision.next_detail ? `<div class="muted">${{esc(supervisedDecision.next_detail)}}</div>` : ""}}</div>`,
+        `<div class="row"><div class="line">${{pill(`open PRs ${{supervisedMetrics.open_pr_count ?? supervisedPRs.length}}`)}}${{pill(`ready issues ${{supervisedMetrics.ready_issue_count ?? supervisedIssues.length}}`)}}${{pill(`active lanes ${{supervisedMetrics.active_lane_count ?? 0}}`)}}${{pill(`stale ${{supervisedMetrics.stale_evidence_count ?? 0}}`)}}</div></div>`,
+        supervisedDecision.pr_number ? `<div class="row"><div class="line"><a href="${{esc(href(supervisedDecision.pr_url))}}">Selected PR #${{esc(supervisedDecision.pr_number)}}</a>${{supervisedDecision.lane_id ? pill(supervisedDecision.lane_id) : ""}}${{supervisedDecision.gate_status ? pill(`gate ${{supervisedDecision.gate_status}}`) : ""}}${{supervisedDecision.author_lane_excluded ? pill("author excluded") : ""}}</div><div class="muted">${{esc(supervisedDecision.branch || "")}}${{supervisedDecision.head_sha_prefix ? ` @ ${{esc(supervisedDecision.head_sha_prefix)}}` : ""}}</div></div>` : "",
+        supervisedDecision.issue_number ? `<div class="row"><div class="line"><a href="${{esc(href(supervisedDecision.issue_url))}}">Selected issue #${{esc(supervisedDecision.issue_number)}}</a>${{supervisedDecision.lane_id ? pill(supervisedDecision.lane_id) : ""}}</div></div>` : "",
+        reviewerOutcomes.length ? `<div class="row"><b>Reviewer Evidence</b><div class="muted">${{reviewerOutcomes.map(outcome => `${{esc(outcome.lane_id || outcome.config_lane_id)}}=${{esc(outcome.verdict)}}`).join(", ")}}</div></div>` : "",
+        supervisedIssues.length ? `<div class="row"><b>Ready Issues</b><div class="muted">${{supervisedIssues.slice(0, 5).map(issue => `#${{esc(issue.number)}} ${{esc(issue.builder_lane || "")}}`).join(", ")}}</div></div>` : "",
+        supervisedPRs.length ? `<div class="row"><b>Active PRs</b><div class="muted">${{supervisedPRs.slice(0, 5).map(pr => `#${{esc(pr.number)}} ${{esc(pr.merge_state || "")}}${{pr.stale ? " stale" : ""}}${{pr.is_draft ? " draft" : ""}}`).join(", ")}}</div></div>` : ""
+      ].filter(Boolean).join("") : empty(supervised.message || "Supervised pilot state unavailable.");
+      put("supervised", supervisedRows || empty(supervised.message || "No supervised pilot activity."));
       put("owner", ownerQueue.length ? ownerQueue.map(item => `<div class="row"><div class="line"><a href="${{esc(href(item.url))}}">#${{esc(item.pr_number)}} ${{esc(item.kind)}}</a>${{pill(item.next_action)}}${{pill(item.head_sha_prefix)}}</div><div class="muted">${{esc(item.branch)}} by ${{esc(item.author)}}${{item.updated_at ? ` updated ${{localTime(item.updated_at)}}` : ""}}</div></div>`).join("") : empty(data.owner_queue?.message || "No owner queue items."));
       put("agents", agentCards.length ? agentCards.map(agent => `<div class="row"><div class="line"><b>${{esc(agent.provider)}}</b>${{pill(agent.role)}}${{pill(agent.status)}}${{agent.lane ? pill(agent.lane) : ""}}${{agent.pr_number ? pill(`#${{agent.pr_number}}`) : ""}}</div><div>${{esc(agent.title || agent.next_action || "local agent")}}</div><div class="muted">${{esc(agent.branch || agent.repo || "")}}${{agent.pid ? ` pid=${{esc(agent.pid)}}` : ""}}${{agent.cwd ? ` cwd=${{esc(agent.cwd)}}` : ""}}${{agent.updated_at ? ` updated ${{localTime(agent.updated_at)}}` : ""}}</div></div>`).join("") : empty(data.agent_adapters?.message || "No local agent adapter cards."));
       put("prs", prs.length ? prs.map(pr => `<div class="row">

{code_mower-0.9.3b1 → code_mower-1.0.0}/src/code_mower/calibration/arms.py

@@ -15,6 +15,7 @@ DEFAULT_CLI_LANES = (
     "hermes_cli",
     "coderabbit_cli",
     "grok_build",
+    "muse_cli",
 )
 
 

{code_mower-0.9.3b1 → code_mower-1.0.0}/src/code_mower/calibration/planning.py

@@ -232,6 +232,7 @@ def build_pilot_plan(
                             "gemini_cli",
                             "grok_build",
                             "hermes_cli",
+                            "muse_cli",
                         }:
                             output_leaf = _local_cli_output_leaf(
                                 lane_slug=lane_slug,

{code_mower-0.9.3b1 → code_mower-1.0.0}/src/code_mower/cli.py

@@ -52,6 +52,7 @@ from . import coderabbit_cli_audit_pr
 from . import codex_audit_env_preflight
 from . import codex_audit_pr
 from . import codex_audit_schema_smoke
+from . import controller as code_mower_controller
 from . import code_mower_calibration
 from . import code_mower_context_packs
 from . import code_mower_merge
@@ -70,6 +71,7 @@ from . import local_llm_bakeoff
 from . import local_llm_calibration
 from . import local_llm_profiles
 from . import migration as code_mower_migration
+from . import muse_cli_audit_pr
 from . import next_steps as code_mower_next_steps
 from . import package as code_mower_package
 from . import prompts as code_mower_prompts
@@ -439,6 +441,7 @@ COMMAND_DESCRIPTIONS: dict[str, str] = {
     "config": "Validate or inspect a Code Mower config.",
     "context": "Record local external planning context manifests.",
     "context-packs": "Build selective surrounding-file context packs.",
+    "controller": "Compute supervised-pilot dispatch and merge-policy decisions.",
     "coderabbit-cli": "Run a CodeRabbit CLI informational lane.",
     "codex-audit": "Run a Codex structured audit lane.",
     "codex-audit-env-preflight": "Probe Codex audit environment setup.",
@@ -454,6 +457,7 @@ COMMAND_DESCRIPTIONS: dict[str, str] = {
     "local-llm": "Probe and run local OpenAI-compatible model lanes.",
     "migration": "Rehearse standalone package and wrapper migration paths.",
     "merge-plan": "Inspect merge-readiness signals and lane labels.",
+    "muse-cli": "Run a Muse CLI structured audit lane.",
     "next-steps": "Print the recommended next actions after setup.",
     "package": "Build or inspect package extraction artifacts.",
     "plan": "Create local issue-derived planning artifacts.",
@@ -478,6 +482,7 @@ FIRST_USER_COMMANDS = (
     "reviewer-metrics",
     "cloud",
     "config",
+    "controller",
     "lanes",
     "project-context",
 )
@@ -550,6 +555,7 @@ def _top_level_help(show_all: bool) -> str:
             "Common first run:",
             "  code-mower init --easy",
             "  code-mower doctor --adoption --repo OWNER/REPO",
+            "  code-mower doctor --supervised-pilot --repo OWNER/REPO",
             "  code-mower lanes status --repo OWNER/REPO",
             "  code-mower board serve --repo OWNER/REPO",
             (
@@ -578,6 +584,7 @@ COMMAND_HANDLERS: dict[str, CommandHandler] = {
     "config": _config_main,
     "context": code_mower_work_orders.context_main,
     "context-packs": code_mower_context_packs.main,
+    "controller": code_mower_controller.main,
     "coderabbit-cli": coderabbit_cli_audit_pr.main,
     "codex-audit": codex_audit_pr.main,
     "codex-audit-env-preflight": codex_audit_env_preflight.main,
@@ -593,6 +600,7 @@ COMMAND_HANDLERS: dict[str, CommandHandler] = {
     "local-llm": _local_llm_main,
     "migration": code_mower_migration.main,
     "merge-plan": code_mower_merge.main,
+    "muse-cli": muse_cli_audit_pr.main,
     "next-steps": code_mower_next_steps.main,
     "package": _package_main,
     "plan": code_mower_work_orders.plan_main,

{code_mower-0.9.3b1 → code_mower-1.0.0}/src/code_mower/cloud_client/bundle.py

@@ -25,9 +25,13 @@ SAFE_EVENT_TYPES = {
     "board_snapshot",
     "builder_run",
     "calibration_run",
+    "controller_decision",
     "dogfood_upload",
     "lane_policy_snapshot",
+    "merge_decision",
+    "owner_intervention",
     "provider_catalog_snapshot",
+    "queue_state_snapshot",
     "reviewer_run",
     "value_report_snapshot",
     "work_order",