bosun 0.27.6 → 0.28.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/.env.example +15 -1
  2. package/README.md +4 -1
  3. package/agent-event-bus.mjs +821 -0
  4. package/agent-pool.mjs +205 -3
  5. package/agent-supervisor.mjs +1236 -0
  6. package/agent-work-analyzer.mjs +419 -0
  7. package/anomaly-detector.mjs +32 -14
  8. package/claude-shell.mjs +12 -2
  9. package/config-doctor.mjs +88 -0
  10. package/desktop/main.mjs +81 -4
  11. package/error-detector.mjs +371 -2
  12. package/monitor.mjs +303 -34
  13. package/package.json +5 -2
  14. package/postinstall.mjs +169 -5
  15. package/primary-agent.mjs +154 -2
  16. package/review-agent.mjs +22 -0
  17. package/setup.mjs +606 -60
  18. package/task-executor.mjs +561 -23
  19. package/telegram-bot.mjs +315 -7
  20. package/ui/app.js +14 -9
  21. package/ui/components/agent-selector.js +637 -0
  22. package/ui/components/chat-view.js +276 -16
  23. package/ui/components/session-list.js +38 -72
  24. package/ui/components/shared.js +102 -4
  25. package/ui/demo.html +175 -72
  26. package/ui/favicon.png +0 -0
  27. package/ui/index.html +22 -17
  28. package/ui/logo.png +0 -0
  29. package/ui/logo.svg +31 -0
  30. package/ui/modules/agent-events.js +434 -0
  31. package/ui/modules/settings-schema.js +2 -1
  32. package/ui/modules/streaming.js +640 -0
  33. package/ui/styles/base.css +1 -0
  34. package/ui/styles/components.css +317 -12
  35. package/ui/styles/kanban.css +15 -15
  36. package/ui/styles/layout.css +131 -5
  37. package/ui/styles/sessions.css +555 -74
  38. package/ui/styles/variables.css +50 -50
  39. package/ui/styles/workspace-switcher.css +13 -13
  40. package/ui/styles.monolith.css +2 -2
  41. package/ui/tabs/chat.js +316 -68
  42. package/ui/tabs/control.js +1 -1
  43. package/ui/tabs/settings.js +15 -2
  44. package/ui/tabs/tasks.js +324 -204
  45. package/ui-server.mjs +312 -3
  46. package/workspace-manager.mjs +45 -1
package/.env.example CHANGED
@@ -77,7 +77,21 @@ TELEGRAM_MINIAPP_ENABLED=false
77
77
  # Full public URL override (takes precedence over host/port auto-detection).
78
78
  # Use when you have a reverse proxy or tunnel with HTTPS.
79
79
  # TELEGRAM_UI_BASE_URL=https://your-public-ui.example.com
80
- # Skip Telegram initData authentication (for local browser testing only).
80
+ # ╔══════════════════════════════════════════════════════════════════════╗
81
+ # ║ ⛔ DANGER — SECURITY CRITICAL ║
82
+ # ║ ║
83
+ # ║ Setting ALLOW_UNSAFE=true disables ALL authentication on the UI. ║
84
+ # ║ Anyone who discovers your URL can: ║
85
+ # ║ • Read/modify your tasks and settings ║
86
+ # ║ • Send commands to agents that execute code on YOUR machine ║
87
+ # ║ • Access secrets, API keys, and environment variables ║
88
+ # ║ ║
89
+ # ║ Combined with TELEGRAM_UI_TUNNEL=auto (Cloudflare tunnel), your UI ║
90
+ # ║ gets a PUBLIC internet URL — meaning ANYONE ON THE INTERNET can ║
91
+ # ║ find and control your machine. ║
92
+ # ║ ║
93
+ # ║ ONLY enable this for localhost-only debugging with tunnel DISABLED. ║
94
+ # ╚══════════════════════════════════════════════════════════════════════╝
81
95
  # TELEGRAM_UI_ALLOW_UNSAFE=false
82
96
  # Max age in seconds for initData auth tokens (default: 86400 = 24h)
83
97
  # TELEGRAM_UI_AUTH_MAX_AGE_SEC=86400
package/README.md CHANGED
@@ -1,4 +1,7 @@
1
- # bosun
1
+ <p align="center">
2
+ <img src="site/logo.png" alt="virtengine bosun ai agent" width="150" />
3
+ </p>
4
+ <h1 align="center">bosun</h1>
2
5
 
3
6
  Bosun is a production-grade supervisor for AI coding agents. It routes tasks across executors, automates PR lifecycles, and keeps operators in control through Telegram, the Mini App dashboard, and optional WhatsApp notifications.
4
7