[ancongui]

Factory now provides a paged overview of authorized product projects, component repositories and individual runs. The 3D floor leads the view, with scope controls, a run board and exact plan/source-control links below it. Aggregate counts cover the full authorized scope. Recorded task state remains separate from observed worker activity.

The account panel adds preferences, sign-out and owner-managed read-only project tokens. Administration stays restricted to administrators. Native authorization rechecks current identity, session, membership and token scope/revocation after awaited work. The local Keycloak setup uses the forge identity.

The runtime now consumes the checksummed official pyfly 26.10.22 wheel. The lock changes pyfly, Starlette 1.10.0 and required timezone data; standalone Agentic 26.10.1 and Pydantic AI 2.55.0 remain unchanged. Existing runs retain their recorded runtime. New sandbox extras are not enabled by this dependency update.

Validation:

• Fresh npm install; 860 Studio unit tests, TypeScript, ESLint, formatting and production build pass. Production dependency audit reports no vulnerabilities.
• Native PostgreSQL/DI/web/security acceptance on pyfly 26.10.22: 53 distinct cases pass, including personal tokens, dashboard authorization, identity, migrations, full application construction and final-await session/token revocation. All 53 cases passed in one fresh fixture with the declared optional analytics dependency installed; no failures or skips. All owned database processes were drained. The earlier 21 prerequisite failure remains recorded separately.
• Full backend typing (418 modules), Ruff and the focused authorization/exporter/route regression cohorts pass. This is separate from the full hosted Python suite.
• The hosted browser run exposed two obsolete navigation fixtures and a real reduced-motion defect. Live motion gates are now checked before each animation frame. Four focused browser regressions pass, covering freeze/resume, context loss, paused-run handoff and explicit publication. A later combined identity/API-reset journey completed its assertions after the test's 30-second control window; its window is now 60 seconds, with all assertions unchanged and seven focused context cases passing. Product deadlines and retry behavior are unchanged.
• All 638 documentation images were freshly captured in 116 browser cases and bound to the current source inputs. Strict root/Pages builds, 22 Python and 10 Node documentation contracts, 75 pages, 10,748 local URL checks and 74 social cards pass.

The screenshots use controlled walkthrough fixtures. These checks do not establish live identity-provider federation or CRM product acceptance. The combined current head requires a successful full hosted CI run before merge; no cloud runtime is deployed.