factory-work

Work the agent-dispatchable Linear queue for this repository to completion — claimed, implemented, verified, reviewed, and landed — following $FACTORY_ROOT/docs/protocol.md (§7 execution, §14 loops).

Interpret $ARGUMENTS as specific issue IDs, a total ticket cap, and/or an in-flight concurrency cap. Defaults: up to 6 tickets, 3 in flight. no-merge stops after PRs are opened.

1. Build the queue

Resolve the team from this repo (§1 mapping). Query state:Todo AND label:ai:agent-ready AND assignee:none, sorted priority asc then createdAt asc (Linear MCP; on failure retry once, then linear_common GraphQL). Fetch each candidate's full description and confirm it has all five §5 sections — a ticket missing one goes back to Triage with a comment, not into the queue.

Show me the queue (ticket, title, owned paths) before starting, then proceed without waiting for approval.

2. Dispatch — rolling, not batched

Keep up to the concurrency cap in flight. Do not wait for a batch to drain before starting new work: the moment any ticket finishes (PR opened, blocked, or claim lost), re-read the queue and start the next ticket whose Owned Paths don't overlap anything still running. Overlap is checked at each claim against what is actually in flight right now, not against a plan computed at the start.

For each ticket you start:

1. Claim it yourself first (main agent, before spawning): set assignee = self, state In Progress, add ai:in-progress + agent:claude-code; then re-read the ticket — if the assignee isn't us, another agent won the race: skip it and take the next queue item.
2. Create the worktree using the repo's own script if it has one (bin/worktree-up.sh <ISSUE-ID> in BJ29 and any repo following that pattern) — it assigns non-colliding ports and a per-ticket database that a hand-rolled git worktree add does not. Only where no script exists: git worktree add ~/Develop/.worktrees/<repo>/<ISSUE-ID> -b <type>/<ISSUE-ID>-<slug>. The repo's AGENTS.md overrides this command on anything worktree- or environment-related.
3. Spawn a subagent (general-purpose, run in background). When the parent run is Claude Code — identified by CLAUDECODE being set in the environment — pass model: opus — implementation quality is the product while the orchestration stays on the cheaper session model. For every other parent harness, omit the model override so the subagent inherits that harness's configured default. Give it a self-contained prompt containing the full ticket (ID, description, all five sections), the worktree path and its ports/database, and these standing orders:
   • Work only inside the worktree and only on files matching Owned Paths.
   • Heartbeat the Linear ticket at each phase change and at least every 20 minutes, saying what changed since the last one.
   • Verify with the ticket's exact Verification Command; never proceed past a failing verification.
   • Run the UX critique round after verification and before opening the PR when the change introduces or materially changes a user-completable flow, interaction, state transition, error/recovery path, responsive layout, authentication, payment, onboarding, or destructive action. Spawn factory-ux-critic, fix in-scope FIX-FIRST findings, max 2 rounds, and file follow-ups to Triage. Skip it for isolated styling, copy-only edits, static content, icons/assets, and internal/admin-only surfaces unless the ticket identifies UX risk. In every PR, state UX critique: required or UX critique: skipped — <reason>.
     • The critic's spawn prompt must state the environment explicitly: worktree: <absolute path> written out in full (a subagent spawned from a worktree does not reliably inherit that worktree's cwd, and the sibling worktrees of concurrently-running tickets are exactly what it resolves to instead), plus how to launch and reach the app — dev server command and this worktree's assigned port from step 2, not the repo default, or simulator target / electronAppPath, plus bin/dev-login.sh [role] where the repo has it.
     • Before spawning a required critic, create an ux-screenshots/ directory in this run's Factory workspace, alongside (not inside) the repo worktree, and pass its absolute path as artifactDir: <absolute path>. The critic is read-only on the repo. After it returns, retain only the screenshots it actually reports/cites; copy a backend-temporary capture into that directory when necessary. Never commit these images or attach them to Linear.
     • A returned VERDICT: BLOCKED - environment mismatch or unresponsive shell means the spawn prompt was wrong, not that the UX is bad: fix the path or launch details and re-spawn once (it doesn't consume a review round — no review happened). Blocked twice: record UX critique: blocked — <what the environment did> in the PR and Handoff and move on.
   • On success: push the branch, gh pr create --title "..." --body "Fixes <ISSUE-ID>" (append \n\nrun:$FACTORY_RUN_ID to the body when $FACTORY_RUN_ID is set, and omit it in interactive sessions when $FACTORY_RUN_ID is unset), post the mandatory structured ## Handoff comment in the exact format /factory-ticket step 6 defines (PR link, verification command + result, UX critique verdict, files vs Owned Paths, risks) as a mandatory prerequisite before moving the ticket to In Review + ai:needs-review (remove ai:in-progress), and report terminal state STATE: PR_OPEN.
     • When the UX critique captured screenshots, retain at most 4 of them, each ≤ 1 MB (drop or re-capture element-scoped if larger), and declare each retained workspace-relative file in the dispatch result.json as {"kind":"ux-screenshot","path":"ux-screenshots/<filename>.png"}. The ux-screenshot artifact kind marks a PNG capture from the UX critique round: Factory hashes and publishes it through the control API's GET /artifacts/<sha256> endpoint (immutable, content-addressed, operator-reachable only). Compute each file's SHA-256 before writing the PR evidence.
     • Only when $FACTORY_WEB_URL is set, add a bounded ## UX screenshots section to the PR body (or a comment with that heading). The artifact URL $FACTORY_WEB_URL/api/artifacts/<sha256> binds loopback/tailnet with no auth, so GitHub cannot render it: never embed ![…]() images. List one plain-text link per retained screenshot with its sha256 and a one-line caption, for example - [01-upload-list-mobile.png]($FACTORY_WEB_URL/api/artifacts/<sha256>) — sha256 — mobile upload list after fix, followed by the critic verdict. Do not use file://, a temporary browser path, a repository URL, or an unverified guessed hash. When $FACTORY_WEB_URL is unset, skip the whole section (the result.json declarations still stand). Embedding real images is deferred until a GitHub-reachable transport exists.
     • When at least one screenshot was retained, label the PR: gh pr edit <PR> --add-label has-screenshots --add-label type:ui-ux. type:ui-ux is provisioned by factory init --control-plane github; has-screenshots may be missing — if the add fails, create it (gh label create has-screenshots --color 1d76db --description "This pull request has UX-review screenshot evidence") and retry once, or fall back to type:ui-ux alone. Never fail the PR flow on a label error; log it in the Handoff. Apply neither label when no screenshot was captured.
   • On failure or blockage: do not open a PR; comment the ticket with the specific decision or credential needed, move it to Blocked + ai:blocked, and report terminal state STATE: BLOCKED (or STATE: FAILED) back so the orchestrator can notify.
   • The subagent never merges. Discovered out-of-scope work → new Triage issue per §8, not scope creep.