Rename the ship app to software_factory (ENG-887)

The name now matches what the app does: staged agent work with gates and
a journal. Rename the class, app name and durable kinds, MCP tool,
directories, routes, prompt paths, and the per-repo config path. A data
migration rewrites stored kinds, event app tags, file app tags, and
settings keys so history and saved settings survive.

Author: czpython

AGENTS.md

@@ -3,7 +3,7 @@
 Druks runs durable agent apps on DBOS and Postgres. It owns
 workflow execution, persisted state and events, gates, webhooks, sandbox access,
 and the shared dashboard. Apps are standalone Python packages
-that self-register through the `druks.apps` entry point. `ship` is the
+that self-register through the `druks.apps` entry point. `software_factory` is the
 bundled reference app for coordinating coding agents through GitHub PRs.
 
 ## Read map
@@ -28,7 +28,7 @@ For app-surface changes, inspect the proof app at
 ## Architectural boundaries
 
 - Keep platform and app ownership explicit. GitHub issue, branch, PR, and
-  coding-agent policy belongs to `ship`, not to Druks core.
+  coding-agent policy belongs to `software_factory`, not to Druks core.
 - Describe durability precisely: completed durable checkpoints are reused when
   orchestration replays, but an interrupted operation may run again. Do not imply
   arbitrary-line resume or exactly-once external side effects.
@@ -130,7 +130,7 @@ truth for CI, including the proof-app install phase.
   routing, architectural boundaries, and contributor rules.
 - Link to one canonical explanation instead of copying it into multiple pages.
 - Verify behavioral claims against current source and focused tests. Distinguish
-  framework capabilities from `ship` behavior and guarantees from policy.
+  framework capabilities from `software_factory` behavior and guarantees from policy.
 - Update this file only when contributor routing, repository structure, commands,
   or a load-bearing architectural invariant changes.
 

README.md

@@ -12,7 +12,7 @@
 > before 1.0; `main` and `latest` are edge builds, not stable releases.
 
 Druks is the self-hosted **home for durable agent apps**, running on the
-Claude and Codex subscriptions you already pay for. Ship comes bundled:
+Claude and Codex subscriptions you already pay for. Software Factory comes bundled:
 autonomous software delivery from ticket to reviewed pull request.
 
 An ordinary agent script loses its place when the process dies. A Druks
@@ -46,7 +46,7 @@ described in [the release process](https://github.com/czpython/druks/blob/main/d
 Re-running is also the upgrade path. Then follow
 [full local setup](https://github.com/czpython/druks/blob/main/docs/full-local.md) to finish in
 the dashboard: connect the agent harnesses and the GitHub App the bundled
-`ship` app acts through; a standalone app may have different
+`software_factory` app acts through; a standalone app may have different
 integration requirements.
 
 Or hand the install to a coding agent — paste this into Claude Code, Codex,
@@ -105,9 +105,9 @@ uvx --from druks druks create app night_watch
 The generated project root carries an `AGENTS.md` with the contracts and a link
 to the authoring guide.
 
-The bundled `ship` app is a concrete example. It coordinates coding
+The bundled `software_factory` app is a concrete example. It coordinates coding
 agents through tickets and GitHub pull requests, but GitHub PR orchestration is
-`ship` behavior—not the definition of Druks.
+`software_factory` behavior—not the definition of Druks.
 
 ## Documentation
 

backend/druks/agents.py

@@ -146,7 +146,7 @@ async def get_timeout(self) -> int:
         return min(resolved, MAX_AGENT_TIMEOUT_SECONDS)
 
     async def __call__(self, **context: object) -> Any:
-        """Run the agent — ``await Ship.implement(...)`` — as a durable step in the
+        """Run the agent — ``await SoftwareFactory.implement(...)`` — as a durable step in the
         current workflow and return its parsed output. An agent run is always memoized —
         this picks which step does it: its own, or the @step it's already inside.
         workflow_id comes from the workflow context, not the caller; everything

backend/druks/api/server.py

@@ -260,7 +260,7 @@ async def _unhandled_exception_handler(
 
 
 # Platform-core routers, mounted by hand at their own prefixes. App routers
-# (core, ship, usage, …) are discovered and mounted under /api/<app> by load().
+# (core, software_factory, usage, …) are discovered and mounted under /api/<app> by load().
 # /api sits behind the identity gate except the identity/connection surface and
 # the health probe; /_external routes carry their own authentication. The
 # boundary test pins the split. The auth and harness-connection routers mount

backend/druks/contrib/review/contracts.py

@@ -1,7 +1,7 @@
 from typing import Literal
 
 from druks.agents import AgentOutput
-from druks.contrib.ship.contracts import FindingOutput
+from druks.contrib.software_factory.contracts import FindingOutput
 
 
 class ReviewReport(AgentOutput):

backend/druks/contrib/review/routes.py

@@ -3,7 +3,7 @@
 from druks.accounts.dependencies import current_account
 from druks.accounts.models import Account
 from druks.contrib.review.workflows import PullRequestReview
-from druks.contrib.ship.models import ProjectRepo
+from druks.contrib.software_factory.models import ProjectRepo
 
 router = APIRouter(prefix="/reviews")
 

backend/druks/contrib/review/subscribers.py

@@ -1,6 +1,6 @@
 from druks.contrib.review.github import get_review_actor
 from druks.contrib.review.workflows import PullRequestReview
-from druks.contrib.ship.models import ProjectRepo
+from druks.contrib.software_factory.models import ProjectRepo
 from druks.signals import subscribe
 
 

backend/druks/contrib/review/workflows.py

@@ -4,7 +4,7 @@
 from druks.contrib.review.app import Review
 from druks.contrib.review.datastructures import PullRequest
 from druks.contrib.review.github import get_review_actor
-from druks.contrib.ship.models import ProjectRepo
+from druks.contrib.software_factory.models import ProjectRepo
 from druks.core.apis.github import GITHUB
 from druks.sandbox import repo as _repo
 from druks.sandbox.layout import get_github_token_remote_path, get_related_root, get_repo_root

backend/druks/contrib/ship/__init__.py …uks/contrib/software_factory/__init__.pybackend/druks/contrib/ship/__init__.py renamed to backend/druks/contrib/software_factory/__init__.py backend/druks/contrib/ship/__init__.py renamed to backend/druks/contrib/software_factory/__init__.py

@@ -4,7 +4,7 @@
 
 from druks.agents import Agent
 from druks.apps import App, AppSettings
-from druks.contrib.ship.contracts import (
+from druks.contrib.software_factory.contracts import (
     ContractRevisionOutput,
     EvaluationOutput,
     ImplementationOutput,
@@ -13,9 +13,9 @@
     ReviewOutput,
     TriageOutput,
 )
-from druks.contrib.ship.ticketing.base import Tracker
-from druks.contrib.ship.ticketing.jira import Jira
-from druks.contrib.ship.ticketing.linear import Linear
+from druks.contrib.software_factory.ticketing.base import Tracker
+from druks.contrib.software_factory.ticketing.jira import Jira
+from druks.contrib.software_factory.ticketing.linear import Linear
 from druks.core import services
 from druks.db import StoredSubject
 from druks.doctor import CheckResult
@@ -33,7 +33,7 @@
 async def check_tracker_identity() -> CheckResult:
     """Whether the selected tracker's identity is connected. Trackerless is a
     choice, not a fault; a selected-but-unconnected tracker is pending setup."""
-    settings = await Ship.settings()
+    settings = await SoftwareFactory.settings()
     if settings.tracker == "none":
         return CheckResult(name="tracker", ok=True, detail="trackerless by choice")
     service = {"linear": services.Linear, "jira": services.Jira}[settings.tracker]
@@ -48,18 +48,22 @@ async def check_tracker_identity() -> CheckResult:
     )
 
 
-class Ship(App):
-    name = "ship"
+class SoftwareFactory(App):
+    name = "software_factory"
     # These tables (projects, work_items, ...) are already unprefixed in core's
     # migration history, so they must stay that way.
     prefix_tables = False
-    icon = "ship"
+    icon = "factory"
     description = (
         "Each stage of the build pipeline runs as its own agent. An agent runs its own "
         "model, or inherits its harness default — the backend dispatches the harness "
         "from the model you pick."
     )
-    navigation = [("/ship", "active"), ("/ship/history", "history"), ("/ship/projects", "projects")]
+    navigation = [
+        ("/software_factory", "active"),
+        ("/software_factory/history", "history"),
+        ("/software_factory/projects", "projects"),
+    ]
 
     class Settings(AppSettings):
         tracker: Literal["none", "linear", "jira"] = Field(
@@ -143,44 +147,44 @@ async def get_tracker(cls, source: str | None = None) -> Tracker | None:
     # them. The attribute name is each agent's id (its durable settings/timeline key).
     generate_plan = Agent(
         description="ticket → implementation plan",
-        prompt="ship/build/generate_plan.md",
+        prompt="software_factory/build/generate_plan.md",
         contract=PlanOutput,
         model="codex",
     )
     review_plan = Agent(
         description="critiques the plan before any work starts",
-        prompt="ship/build/review_plan.md",
+        prompt="software_factory/build/review_plan.md",
         contract=ReviewOutput,
         model="claude",
     )
     revise_contract = Agent(
         description="revises the plan contract on feedback",
-        prompt="ship/build/revise_contract.md",
+        prompt="software_factory/build/revise_contract.md",
         contract=ContractRevisionOutput,
         model="codex",
     )
     implement = Agent(
         description="plan → diff, in a drukbox",
-        prompt="ship/build/implement.md",
+        prompt="software_factory/build/implement.md",
         contract=ImplementationOutput,
         model="claude",
     )
     evaluate_implementation = Agent(
         description="verification + code review of the diff, one verdict",
-        prompt="ship/build/evaluate_implementation.md",
+        prompt="software_factory/build/evaluate_implementation.md",
         contract=EvaluationOutput,
         model="codex",
         effort="medium",
     )
     triage_human_feedback = Agent(
         description="routes a human's PR feedback back into the workflow",
-        prompt="ship/build/triage_human_feedback.md",
+        prompt="software_factory/build/triage_human_feedback.md",
         contract=TriageOutput,
         model="codex",
     )
     repo_profiler = Agent(
         description="reads a repo once and reports its stack, verification commands, and skills",
-        prompt="ship/profile/repo_profiler.md",
+        prompt="software_factory/profile/repo_profiler.md",
         contract=RepoProfilerOutput,
         model="codex",
     )