agentboot 0.1.0 → 0.3.0

package/scripts/dev-sync.ts

@@ -7,7 +7,7 @@
  *
  * Usage:
  *   npm run dev-sync         (after npm run build)
- *   npm run full-build && npm run dev-sync
+ *   npm run dev-build && npm run dev-sync
  */
 
 import fs from "node:fs";

package/scripts/lib/config.ts

@@ -12,7 +12,12 @@ import path from "node:path";
 export interface AgentBootConfig {
   org: string;
   orgDisplayName?: string;
+
+  // AB-88: N-tier scope model — nodes replace flat groups/teams
+  // Legacy groups/teams still supported for backward compat; converted to nodes internally.
   groups?: Record<string, GroupConfig>;
+  nodes?: Record<string, ScopeNode>;
+
   personas?: {
     enabled?: string[];
     customDir?: string;
@@ -24,6 +29,10 @@ export interface AgentBootConfig {
   instructions?: {
     enabled?: string[];
   };
+
+  // AB-53: Domain layers
+  domains?: DomainReference[];
+
   output?: {
     distPath?: string;
     provenanceHeaders?: boolean;
@@ -46,6 +55,16 @@ export interface AgentBootConfig {
     permissions?: { allow?: string[]; deny?: string[] };
     mcpServers?: Record<string, unknown>;
   };
+
+  // AB-62: Three-tier privacy model
+  privacy?: PrivacyConfig;
+
+  // AB-65: Telemetry configuration
+  telemetry?: TelemetryConfig;
+
+  // AB-61: Managed settings (HARD guardrails for MDM)
+  managed?: ManagedConfig;
+
   validation?: {
     secretPatterns?: string[];
     strictMode?: boolean;
@@ -56,15 +75,238 @@ export interface GroupConfig {
   teams?: string[];
 }
 
+// ---------------------------------------------------------------------------
+// AB-88: N-tier scope model
+// ---------------------------------------------------------------------------
+
+/** A node in the scope tree. Replaces flat groups/teams with arbitrary depth. */
+export interface ScopeNode {
+  /** Display name for this scope level */
+  displayName?: string;
+  /** Child nodes (arbitrary depth) */
+  children?: Record<string, ScopeNode>;
+  /** Personas enabled at this scope (additive to parent) */
+  personas?: string[];
+  /** Additional traits enabled at this scope */
+  traits?: string[];
+  /** Override config values at this scope */
+  config?: Record<string, unknown>;
+}
+
+/**
+ * Flatten a nodes tree into scope paths for compilation.
+ * Returns array of { path: "platform/api", node } tuples.
+ */
+export function flattenNodes(
+  nodes: Record<string, ScopeNode>,
+  prefix = ""
+): Array<{ path: string; node: ScopeNode }> {
+  const result: Array<{ path: string; node: ScopeNode }> = [];
+  for (const [name, node] of Object.entries(nodes)) {
+    const nodePath = prefix ? `${prefix}/${name}` : name;
+    result.push({ path: nodePath, node });
+    if (node.children) {
+      result.push(...flattenNodes(node.children, nodePath));
+    }
+  }
+  return result;
+}
+
+/**
+ * Convert legacy groups/teams config to N-tier nodes.
+ * Groups become depth-1 nodes; teams become depth-2 children.
+ */
+export function groupsToNodes(groups: Record<string, GroupConfig>): Record<string, ScopeNode> {
+  const nodes: Record<string, ScopeNode> = {};
+  for (const [groupName, group] of Object.entries(groups)) {
+    const children: Record<string, ScopeNode> = {};
+    for (const team of group.teams ?? []) {
+      children[team] = {};
+    }
+    const node: ScopeNode = {};
+    if (Object.keys(children).length > 0) {
+      node.children = children;
+    }
+    nodes[groupName] = node;
+  }
+  return nodes;
+}
+
+// ---------------------------------------------------------------------------
+// AB-53: Domain layer references
+// ---------------------------------------------------------------------------
+
+export type DomainReference = string | { name: string; version?: string; path?: string };
+
+export interface DomainManifest {
+  name: string;
+  version: string;
+  description?: string;
+  traits?: string[];
+  personas?: string[];
+  instructions?: string[];
+  requires_core_version?: string;
+}
+
+// ---------------------------------------------------------------------------
+// AB-62: Privacy model
+// ---------------------------------------------------------------------------
+
+export interface PrivacyConfig {
+  /** Three-tier model: private (raw prompts never leave machine),
+   *  privileged (LLM analysis via API, developer approves),
+   *  organizational (anonymized metrics only). */
+  tier?: "private" | "privileged" | "organizational";
+  /** Raw prompts are NEVER collected. This is a design invariant. */
+  rawPrompts?: false;
+  /** Escalation exception for genuinely harmful content (category flag only). */
+  escalationEnabled?: boolean;
+}
+
+// ---------------------------------------------------------------------------
+// AB-65: Telemetry config
+// ---------------------------------------------------------------------------
+
+export interface TelemetryConfig {
+  enabled?: boolean;
+  /** How to identify developers in telemetry.
+   *  false = no developer ID, "hashed" = SHA-256 of email, "email" = raw email. */
+  includeDevId?: false | "hashed" | "email";
+  /** Path to NDJSON log file. Default: ~/.agentboot/telemetry.ndjson */
+  logPath?: string;
+  /** Never include raw prompt content in telemetry. Design invariant. */
+  includeContent?: false;
+}
+
+// ---------------------------------------------------------------------------
+// AB-61: Managed settings (MDM distribution)
+// ---------------------------------------------------------------------------
+
+export interface ManagedConfig {
+  /** Enable managed settings artifact generation */
+  enabled?: boolean;
+  /** MDM platform target */
+  platform?: "jamf" | "intune" | "jumpcloud" | "kandji" | "other";
+  /** Custom output path for managed settings */
+  outputPath?: string;
+  /** HARD guardrails to enforce via managed settings */
+  guardrails?: {
+    /** Force-install specific plugins */
+    forcePlugins?: string[];
+    /** Deny these tool patterns */
+    denyTools?: string[];
+    /** Require audit logging */
+    requireAuditLog?: boolean;
+  };
+}
+
 export interface PersonaConfig {
   name: string;
   description: string;
   invocation?: string;
   model?: string;
   permissionMode?: string;
+  maxTurns?: number;
+  disallowedTools?: string[];
+  tools?: string[];
+  effort?: "low" | "medium" | "high" | "max";
+  autonomy?: "advisory" | "auto-approve" | "autonomous";
+  skills?: string[];
+  memory?: "user" | "project" | "local" | null;
+  background?: boolean;
+  isolation?: "none" | "worktree";
+  tokenBudget?: number;
   traits?: string[];
   groups?: Record<string, { traits?: string[] }>;
   teams?: Record<string, { traits?: string[] }>;
+  /** Per-persona hook configuration */
+  hooks?: Record<string, unknown>;
+  /** Per-persona MCP servers */
+  mcpServers?: Record<string, unknown>;
+}
+
+// ---------------------------------------------------------------------------
+// AB-64: Telemetry event schema
+// ---------------------------------------------------------------------------
+
+export interface TelemetryEvent {
+  event: "persona_invocation" | "persona_error" | "hook_execution" | "session_summary";
+  persona_id: string;
+  persona_version?: string;
+  model?: string;
+  scope?: string;
+  input_tokens?: number;
+  output_tokens?: number;
+  thinking_tokens?: number;
+  tool_calls?: number;
+  duration_ms?: number;
+  cost_usd?: number;
+  findings_count?: {
+    CRITICAL?: number;
+    ERROR?: number;
+    WARN?: number;
+    INFO?: number;
+  };
+  suggestions?: number;
+  timestamp: string;
+  session_id?: string;
+  dev_id?: string;
+}
+
+// ---------------------------------------------------------------------------
+// AB-57: Plugin manifest
+// ---------------------------------------------------------------------------
+
+export interface PluginManifest {
+  name: string;
+  version: string;
+  description: string;
+  author: string;
+  license: string;
+  agentboot_version: string;
+  personas: Array<{
+    id: string;
+    name: string;
+    description: string;
+    model?: string | undefined;
+    agent_path: string;
+    skill_path: string;
+  }>;
+  traits: Array<{
+    id: string;
+    path: string;
+  }>;
+  hooks?: Array<{
+    event: string;
+    path: string;
+  }> | undefined;
+  rules?: Array<{
+    path: string;
+    description?: string | undefined;
+  }> | undefined;
+}
+
+// ---------------------------------------------------------------------------
+// AB-58: Marketplace manifest
+// ---------------------------------------------------------------------------
+
+export interface MarketplaceManifest {
+  $schema?: string;
+  name: string;
+  description: string;
+  maintainer: string;
+  url?: string;
+  entries: MarketplaceEntry[];
+}
+
+export interface MarketplaceEntry {
+  type: "plugin" | "trait" | "domain" | "persona";
+  name: string;
+  version: string;
+  description: string;
+  published_at: string;
+  sha256?: string;
+  path: string;
 }
 
 // ---------------------------------------------------------------------------
@@ -133,5 +375,21 @@ export function loadConfig(configPath: string): AgentBootConfig {
   }
   const raw = fs.readFileSync(configPath, "utf-8");
   const stripped = stripJsoncComments(raw);
-  return JSON.parse(stripped) as AgentBootConfig;
+  const parsed = JSON.parse(stripped);
+
+  // Minimal runtime validation for critical fields
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new Error("Config must be a JSON object");
+  }
+  if (typeof parsed.org !== "string" || parsed.org.length === 0) {
+    throw new Error('Config requires a non-empty "org" field (string)');
+  }
+  if (parsed.personas?.enabled !== undefined && !Array.isArray(parsed.personas.enabled)) {
+    throw new Error('"personas.enabled" must be an array of strings');
+  }
+  if (parsed.sync?.targetDir !== undefined && typeof parsed.sync.targetDir !== "string") {
+    throw new Error('"sync.targetDir" must be a string');
+  }
+
+  return parsed as AgentBootConfig;
 }

package/scripts/lib/frontmatter.ts

@@ -8,7 +8,9 @@
 // Frontmatter parsing
 // ---------------------------------------------------------------------------
 
-const FRONTMATTER_RE = /^---\n([\s\S]+?)\n---/;
+// Matches YAML frontmatter blocks. Uses [\s\S]*? (zero or more) so that
+// empty frontmatter (---\n---) returns an empty Map rather than null.
+const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---/;
 
 export function parseFrontmatter(content: string): Map<string, string> | null {
   const match = FRONTMATTER_RE.exec(content);

package/scripts/validate.ts

@@ -110,7 +110,7 @@ function checkPersonaExistence(config: AgentBootConfig, configDir: string): Chec
 
   const corePersonasDir = path.join(ROOT, "core", "personas");
   const extendDir = config.personas?.customDir
-    ? path.resolve(configDir, config.personas.extend)
+    ? path.resolve(configDir, config.personas.customDir)
     : null;
 
   // Collect all available persona directories.
@@ -183,7 +183,7 @@ function checkTraitReferences(config: AgentBootConfig, configDir: string): Check
   // Scan all persona.config.json files.
   const personaRoots: string[] = [path.join(ROOT, "core", "personas")];
   if (config.personas?.customDir) {
-    const ext = path.resolve(configDir, config.personas.extend);
+    const ext = path.resolve(configDir, config.personas.customDir);
     if (fs.existsSync(ext)) personaRoots.push(ext);
   }
 
@@ -243,7 +243,7 @@ function checkSkillFrontmatter(config: AgentBootConfig, configDir: string): Chec
 
   const personaRoots: string[] = [path.join(ROOT, "core", "personas")];
   if (config.personas?.customDir) {
-    const ext = path.resolve(configDir, config.personas.extend);
+    const ext = path.resolve(configDir, config.personas.customDir);
     if (fs.existsSync(ext)) personaRoots.push(ext);
   }
 
@@ -295,9 +295,14 @@ function checkSkillFrontmatter(config: AgentBootConfig, configDir: string): Chec
 // ---------------------------------------------------------------------------
 
 function buildSecretPatterns(config: AgentBootConfig): RegExp[] {
-  const configPatterns = (config.validation?.secretPatterns ?? []).map(
-    (p) => new RegExp(p)
-  );
+  const configPatterns: RegExp[] = [];
+  for (const p of config.validation?.secretPatterns ?? []) {
+    try {
+      configPatterns.push(new RegExp(p));
+    } catch (e: unknown) {
+      console.error(`  ⚠ Invalid secretPattern regex "${p}": ${e instanceof Error ? e.message : String(e)} — skipping`);
+    }
+  }
   return [...DEFAULT_SECRET_PATTERNS, ...configPatterns];
 }
 
@@ -311,7 +316,7 @@ function checkNoSecrets(config: AgentBootConfig, configDir: string): CheckResult
   ];
 
   if (config.personas?.customDir) {
-    const ext = path.resolve(configDir, config.personas.extend);
+    const ext = path.resolve(configDir, config.personas.customDir);
     if (fs.existsSync(ext)) scanRoots.push(ext);
   }
 

package/website/docusaurus.config.ts

@@ -0,0 +1,117 @@
+import {themes as prismThemes} from 'prism-react-renderer';
+import type {Config} from '@docusaurus/types';
+import type * as Preset from '@docusaurus/preset-classic';
+
+const config: Config = {
+  title: 'AgentBoot',
+  tagline: 'Convention over configuration for agentic development teams',
+  favicon: 'img/favicon.ico',
+
+  future: {
+    v4: true,
+  },
+
+  url: 'https://agentboot.dev',
+  baseUrl: '/',
+
+  organizationName: 'agentboot-dev',
+  projectName: 'agentboot',
+  deploymentBranch: 'gh-pages',
+  trailingSlash: false,
+
+  onBrokenLinks: 'warn',
+
+  i18n: {
+    defaultLocale: 'en',
+    locales: ['en'],
+  },
+
+  presets: [
+    [
+      'classic',
+      {
+        docs: {
+          path: '../docs',
+          sidebarPath: './sidebars.ts',
+          editUrl: 'https://github.com/agentboot-dev/agentboot/tree/main/',
+          // Exclude internal docs from the public site
+          exclude: ['internal/**'],
+        },
+        blog: false, // Disable blog for now
+        theme: {
+          customCss: './src/css/custom.css',
+        },
+      } satisfies Preset.Options,
+    ],
+  ],
+
+  themeConfig: {
+    colorMode: {
+      defaultMode: 'light',
+      respectPrefersColorScheme: true,
+    },
+    navbar: {
+      title: 'AgentBoot',
+      items: [
+        {
+          type: 'docSidebar',
+          sidebarId: 'docsSidebar',
+          position: 'left',
+          label: 'Docs',
+        },
+        {
+          to: '/docs/roadmap',
+          label: 'Roadmap',
+          position: 'left',
+        },
+        {
+          href: 'https://github.com/agentboot-dev/agentboot',
+          label: 'GitHub',
+          position: 'right',
+        },
+      ],
+    },
+    footer: {
+      style: 'dark',
+      links: [
+        {
+          title: 'Documentation',
+          items: [
+            { label: 'Getting Started', to: '/docs/getting-started' },
+            { label: 'Core Concepts', to: '/docs/concepts' },
+            { label: 'CLI Reference', to: '/docs/cli-reference' },
+          ],
+        },
+        {
+          title: 'Guides',
+          items: [
+            { label: 'Extending AgentBoot', to: '/docs/extending' },
+            { label: 'Prompt Authoring', to: '/docs/prompt-guide' },
+            { label: 'Privacy & Safety', to: '/docs/privacy' },
+          ],
+        },
+        {
+          title: 'Community',
+          items: [
+            {
+              label: 'GitHub',
+              href: 'https://github.com/agentboot-dev/agentboot',
+            },
+            {
+              label: 'Issues',
+              href: 'https://github.com/agentboot-dev/agentboot/issues',
+            },
+          ],
+        },
+      ],
+      copyright: `Copyright ${new Date().getFullYear()} AgentBoot Contributors. Apache-2.0 License.`,
+    },
+    prism: {
+      theme: prismThemes.github,
+      darkTheme: prismThemes.dracula,
+      additionalLanguages: ['bash', 'json', 'yaml', 'toml'],
+    },
+  } satisfies Preset.ThemeConfig,
+};
+
+export default config;