bosun 0.28.2 → 0.28.4

package/setup.mjs

@@ -22,6 +22,7 @@
 
 import { createInterface } from "node:readline";
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
 import { resolve, dirname, basename, relative, isAbsolute } from "node:path";
 import { execSync } from "node:child_process";
 import { execFileSync } from "node:child_process";
@@ -654,6 +655,18 @@ function detectRepoSlug(cwd) {
   }
 }
 
+function detectRepoRemoteUrl(cwd) {
+  try {
+    return execSync("git remote get-url origin", {
+      encoding: "utf8",
+      cwd: cwd || process.cwd(),
+      stdio: ["pipe", "pipe", "ignore"],
+    }).trim();
+  } catch {
+    return "";
+  }
+}
+
 function detectRepoRoot(cwd) {
   try {
     return execSync("git rev-parse --show-toplevel", {
@@ -679,6 +692,36 @@ function detectProjectName(repoRoot) {
   return basename(repoRoot);
 }
 
+function hasSshKeyMaterial() {
+  if (process.env.SSH_AUTH_SOCK) return true;
+  const home = homedir();
+  if (!home) return false;
+  const candidates = [
+    ".ssh/id_rsa.pub",
+    ".ssh/id_ed25519.pub",
+    ".ssh/id_ecdsa.pub",
+    ".ssh/id_dsa.pub",
+  ];
+  return candidates.some((rel) => existsSync(resolve(home, rel)));
+}
+
+function isSshGitUrl(value) {
+  const text = String(value || "").trim();
+  if (!text) return false;
+  return text.startsWith("git@") || text.startsWith("ssh://");
+}
+
+function buildDefaultGitUrl(slug, repoRoot) {
+  const normalizedSlug = String(slug || "").trim();
+  if (!normalizedSlug) return "";
+  const remote = detectRepoRemoteUrl(repoRoot);
+  if (remote) return remote;
+  const preferSsh = hasSshKeyMaterial();
+  return preferSsh
+    ? `git@github.com:${normalizedSlug}.git`
+    : `https://github.com/${normalizedSlug}.git`;
+}
+
 function formatModelVariant(profile) {
   if (!profile?.model && !profile?.variant) return "";
   if (profile?.model && profile?.variant) {
@@ -1584,7 +1627,13 @@ function buildDefaultWritableRoots(repoRoot) {
     if (parent && parent !== repo) roots.add(parent);
     roots.add(repo);
     roots.add(resolve(repo, ".git"));
+    // Worktree checkout paths (used by task-executor)
+    roots.add(resolve(repo, ".cache", "worktrees"));
+    // Cache directories for agent work logs, build artifacts, etc.
+    roots.add(resolve(repo, ".cache"));
   }
+  // /tmp needed for sandbox temp files, pip installs, etc.
+  roots.add("/tmp");
   return Array.from(roots).join(",");
 }
 
@@ -2222,10 +2271,27 @@ async function main() {
         let repoIdx = 0;
 
         while (addMoreRepos) {
-          const repoUrl = await prompt.ask(
+          let repoUrl = await prompt.ask(
             `    Repo ${repoIdx + 1} — git URL (SSH or HTTPS)`,
-            repoIdx === 0 ? (env.GITHUB_REPO ? `git@github.com:${env.GITHUB_REPO}.git` : "") : "",
+            repoIdx === 0
+              ? buildDefaultGitUrl(env.GITHUB_REPO || slug, repoRoot)
+              : "",
           );
+          if (repoUrl && isSshGitUrl(repoUrl) && !hasSshKeyMaterial()) {
+            warn(
+              "SSH URL detected but no SSH agent/keys found. Cloning may fail unless SSH is configured.",
+            );
+            const switchToHttps = await prompt.confirm(
+              "Use HTTPS URL instead?",
+              true,
+            );
+            if (switchToHttps) {
+              const parsedSlug = parseRepoSlugFromUrl(repoUrl);
+              if (parsedSlug) {
+                repoUrl = `https://github.com/${parsedSlug}.git`;
+              }
+            }
+          }
           const parsedSlug = parseRepoSlugFromUrl(repoUrl);
           const parsedRepoName = parsedSlug ? parsedSlug.split("/")[1] : "";
           const defaultNameFromUrl = repoUrl
@@ -2872,11 +2938,12 @@ async function main() {
       if (ghStatus.ok) break;
 
       warn(
-        "GitHub auth is required to auto-detect projects, create boards, and sync issues.",
+        `GitHub auth is required to auto-detect projects, create boards, and sync issues. ${ghStatus.reason || ""}`.trim(),
       );
       info(
         "If you do not plan to use GitHub as the task manager, pick Internal, Jira, or Vibe-Kanban.",
       );
+      info("Authenticate with GitHub using: gh auth login");
       const ghActionIdx = await prompt.choose(
         "How do you want to proceed?",
         [

package/task-executor.mjs

@@ -113,6 +113,35 @@ const CODEX_TASK_LABELS = (() => {
 
 /** Watchdog interval: how often to check for stalled agent slots */
 const WATCHDOG_INTERVAL_MS = 60_000; // 1 minute
+
+/**
+ * Returns the Co-authored-by trailer for bosun-botswain[bot], or empty string
+ * if the GitHub App ID is not configured. Used to attribute agent commits to
+ * the Bosun GitHub App so the bot shows up as a contributor.
+ *
+ * To enable: set BOSUN_GITHUB_APP_ID=<your-app-id> in .env
+ * App noreply email format: <id>+bosun-botswain[bot]@users.noreply.github.com
+ */
+function getBosunCoAuthorLine() {
+  const appId = String(process.env.BOSUN_GITHUB_APP_ID || "").trim();
+  if (!appId) return "";
+  return `Co-authored-by: bosun-botswain[bot] <${appId}+bosun-botswain[bot]@users.noreply.github.com>`;
+}
+
+/**
+ * Returns a prompt instruction block telling the agent to append the Bosun
+ * co-author trailer to every commit. Empty string when app ID not configured.
+ */
+function getBosunCoAuthorInstruction() {
+  const line = getBosunCoAuthorLine();
+  if (!line) return "";
+  return `\n**Attribution (required — do not omit):**
+Every commit message MUST end with a blank line then this exact trailer:
+\`\`\`
+${line}
+\`\`\`
+`;
+}
 /** Grace period after task timeout before watchdog force-kills the slot */
 const WATCHDOG_GRACE_MS = 10 * 60_000; // 10 minutes — generous buffer, stream analysis handles real issues
 /** Max age for in-progress tasks to auto-resume after monitor restart */
@@ -212,11 +241,30 @@ function normalizeBranchName(value) {
 function extractScopeFromTitle(title) {
   if (!title) return null;
   const match = String(title).match(
-    /(?:^\[P\d+\]\s*)?(?:feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert)\(([^)]+)\)/i,
+    /(?:^\[[^\]]+\]\s*)?(?:feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert)\(([^)]+)\)/i,
   );
   return match ? match[1].toLowerCase().trim() : null;
 }
 
+/**
+ * If TASK_BRANCH_AUTO_MODULE=true (default), extract the conventional-commit
+ * scope from a task title and return the corresponding module branch ref.
+ *
+ * e.g. "[m] feat(veid): add verification" → "origin/veid"
+ *       "[s] fix(market): resolve bid race" → "origin/market"
+ */
+function resolveModuleAutoBaseBranch(title) {
+  const enabled = (process.env.TASK_BRANCH_AUTO_MODULE ?? "true") !== "false";
+  if (!enabled) return null;
+  const scope = extractScopeFromTitle(title);
+  if (!scope) return null;
+  // Exclude generic scopes that don't map to real module branches
+  const generic = new Set(["deps", "app", "sdk", "cli", "api"]);
+  if (generic.has(scope)) return null;
+  const prefix = (process.env.MODULE_BRANCH_PREFIX || "origin/").replace(/\/*$/, "/");
+  return `${prefix}${scope}`;
+}
+
 function collectTaskLabels(task) {
   const labels = [];
   if (!task) return labels;
@@ -350,6 +398,10 @@ function resolveTaskBaseBranch(task, branchRouting, defaultTargetBranch) {
   const fromConfig = resolveUpstreamFromConfig(task, branchRouting);
   if (fromConfig) return normalizeBranchName(fromConfig);
 
+  // Auto-detect module branch from conventional commit scope in title
+  const moduleAuto = resolveModuleAutoBaseBranch(task.title || task.name);
+  if (moduleAuto) return normalizeBranchName(moduleAuto);
+
   return normalizeBranchName(defaultTargetBranch);
 }
 
@@ -3285,12 +3337,25 @@ class TaskExecutor {
     const requestedBranch = String(
       options?.branch || options?.resumeBranch || "",
     ).trim();
+    // Resolve base branch first so direct-mode can reuse it for the working branch
+    const baseBranch = this._resolveTaskBaseBranch(task);
+    // Branch name strategy:
+    //   TASK_BRANCH_MODE=direct  → work directly on the module branch (no ve/ sub-branch),
+    //                              enabling sequential in-place work with real-time conflict
+    //                              resolution by the same team of agents.
+    //   TASK_BRANCH_MODE=worktree (default) → create an isolated ve/<id>-<slug> sub-branch
+    //                              that PRs back into the module/base branch.
+    const branchMode = (process.env.TASK_BRANCH_MODE || "worktree").trim().toLowerCase();
+    const directModeBranch =
+      branchMode === "direct" && baseBranch
+        ? normalizeBranchName(baseBranch)?.replace(/^origin\//, "") || null
+        : null;
     const branch =
       requestedBranch ||
       task.branchName ||
       task.meta?.branch_name ||
+      directModeBranch ||
       `ve/${taskId.substring(0, 8)}-${slugify(taskTitle)}`;
-    const baseBranch = this._resolveTaskBaseBranch(task);
     const taskRepoContext = this._resolveTaskRepoContext(task);
     const executionRepoRoot = taskRepoContext.repoRoot || this.repoRoot;
     const executionRepoSlug = taskRepoContext.repoSlug || this.repoSlug;
@@ -4124,6 +4189,7 @@ class TaskExecutor {
         REPO_ROOT: promptRepoRoot,
         TASK_WORKSPACE: promptWorkspace,
         TASK_REPOSITORY: promptRepository,
+        COAUTHOR_INSTRUCTION: getBosunCoAuthorInstruction(),
       },
       fallbackPrompt,
     );
@@ -4196,6 +4262,11 @@ class TaskExecutor {
       `3. Re-run tests to verify`,
       `4. Commit and push your fixes`,
       ``,
+      ...(getBosunCoAuthorLine() ? [
+        `Attribution: append this trailer after each commit message body (blank line before it):`,
+        getBosunCoAuthorLine(),
+        ``,
+      ] : []),
       `Original task description:`,
       task.description || "See task URL for details.",
     ].join("\n");
@@ -5101,6 +5172,58 @@ class TaskExecutor {
         /* best-effort upstream rebase */
       }
 
+      // Additionally sync with origin/main (or DEFAULT_TARGET_BRANCH) so that
+      // module branches continuously absorb upstream changes before each push.
+      // This surfaces conflicts early — if a merge conflict occurs, we abort the
+      // merge and push as-is; the NEXT agent working on this branch will encounter
+      // the conflict immediately and resolve it inline (no separate conflict-fix task).
+      try {
+        const mainBranch =
+          process.env.DEFAULT_TARGET_BRANCH ||
+          process.env.VK_TARGET_BRANCH?.replace(/^origin\//, "") ||
+          "main";
+        const syncEnabled =
+          (process.env.TASK_UPSTREAM_SYNC_MAIN ?? "true") !== "false";
+        // Only sync main when base branch is NOT already main itself
+        const isMainBase = baseInfo.branch === mainBranch || baseBranch === "main";
+        if (syncEnabled && !isMainBase) {
+          spawnSync("git", ["fetch", "origin", mainBranch, "--quiet"], {
+            cwd: worktreePath,
+            encoding: "utf8",
+            timeout: 30_000,
+          });
+          const mainMergeResult = spawnSync(
+            "git",
+            ["merge", `origin/${mainBranch}`, "--no-edit", "--no-ff", "-X", "ours"],
+            {
+              cwd: worktreePath,
+              encoding: "utf8",
+              timeout: 60_000,
+            },
+          );
+          if (mainMergeResult.status !== 0) {
+            // Conflicts or error — abort and continue with push as-is.
+            // The unresolved divergence will be visible to the next agent.
+            console.warn(
+              `${TAG} upstream main merge (origin/${mainBranch}) had conflicts on ` +
+              `${branch} — aborting merge, pushing branch as-is. ` +
+              `Next agent on this branch will resolve conflicts.`,
+            );
+            spawnSync("git", ["merge", "--abort"], {
+              cwd: worktreePath,
+              encoding: "utf8",
+              timeout: 10_000,
+            });
+          } else {
+            console.log(
+              `${TAG} synced ${branch} with origin/${mainBranch} before push.`,
+            );
+          }
+        }
+      } catch {
+        /* best-effort upstream main sync */
+      }
+
       const safety = evaluateBranchSafetyForPush(worktreePath, {
         baseBranch,
         remote: "origin",

package/telegram-bot.mjs

@@ -59,6 +59,7 @@ import {
   getWorktreeStats,
 } from "./worktree-manager.mjs";
 import { loadExecutorConfig } from "./config.mjs";
+import { resolvePwshRuntime } from "./pwsh-runtime.mjs";
 import {
   getTelegramUiUrl,
   startTelegramUiServer,
@@ -2701,7 +2702,7 @@ const COMMANDS = {
   },
   "/plan": {
     handler: cmdPlan,
-    desc: "Trigger task planner: /plan [count] (default 5)",
+    desc: "Trigger task planner: /plan [count] [prompt] (e.g. /plan 5 fix auth bugs)",
   },
   "/cleanup": {
     handler: cmdCleanupMerged,
@@ -3237,9 +3238,24 @@ const UI_INPUT_HANDLERS = {
     buildCommand: (input) => `/shell ${input}`,
   },
   plan_count: {
-    prompt: "How many tasks should the planner generate?",
+    prompt: "How many tasks should the planner generate? (e.g. 5)",
     buildCommand: (input) => `/plan ${input}`,
   },
+  plan_prompt: {
+    prompt:
+      "Describe what you want the planner to focus on.\n" +
+      "You can prefix with a count: e.g. '10 fix auth bugs and add tests'\n" +
+      "Or just a topic: 'improve error handling across API layer'",
+    buildCommand: (input) => {
+      const trimmed = input.trim();
+      const firstWord = trimmed.split(/\s+/)[0];
+      const maybeCount = parseInt(firstWord, 10);
+      if (Number.isFinite(maybeCount) && maybeCount > 0) {
+        return `/plan ${trimmed}`;
+      }
+      return `/plan 5 ${trimmed}`;
+    },
+  },
   starttask: {
     prompt:
       "Enter the task ID to start manually.\nNext you'll pick executor → SDK → model.",
@@ -4418,7 +4434,10 @@ Object.assign(UI_SCREENS, {
           uiButton("Plan 5", uiCmdAction("/plan 5")),
           uiButton("Plan 10", uiCmdAction("/plan 10")),
         ],
-        [uiButton("Custom Count", uiInputAction("plan_count"))],
+        [
+          uiButton("Custom Count", uiInputAction("plan_count")),
+          uiButton("With Prompt", uiInputAction("plan_prompt")),
+        ],
         uiNavRow("tasks"),
       ]),
   },
@@ -7097,11 +7116,26 @@ async function cmdPlan(chatId, args) {
     return;
   }
 
-  // Parse optional task count: /plan 5 or /plan 10
-  const parsed = parseInt(args?.trim(), 10);
-  const taskCount = Number.isFinite(parsed) && parsed > 0 ? parsed : 5;
+  // Parse optional task count and/or free-form prompt:
+  //   /plan           → 5 tasks, no prompt
+  //   /plan 10        → 10 tasks, no prompt
+  //   /plan fix auth  → 5 tasks, userPrompt="fix auth"
+  //   /plan 10 fix auth → 10 tasks, userPrompt="fix auth"
+  const rawArgs = (args || "").trim();
+  const firstToken = rawArgs.split(/\s+/)[0];
+  const parsedCount = parseInt(firstToken, 10);
+  let taskCount = 5;
+  let userPrompt;
+  if (Number.isFinite(parsedCount) && parsedCount > 0) {
+    taskCount = parsedCount;
+    const remainder = rawArgs.slice(firstToken.length).trim();
+    if (remainder) userPrompt = remainder;
+  } else if (rawArgs) {
+    userPrompt = rawArgs;
+  }
 
-  await sendReply(chatId, `📋 Triggering task planner (${taskCount} tasks)...`);
+  const promptSuffix = userPrompt ? ` — "${userPrompt.slice(0, 60)}${userPrompt.length > 60 ? "…" : ""}"` : "";
+  await sendReply(chatId, `📋 Triggering task planner (${taskCount} tasks${promptSuffix})...`);
 
   try {
     const result = await _triggerTaskPlanner(
@@ -7109,6 +7143,7 @@ async function cmdPlan(chatId, args) {
       { source: "telegram /plan command" },
       {
         taskCount,
+        userPrompt,
         notify: false,
         preferredMode: "codex-sdk",
         allowCodexWhenDisabled: true,
@@ -7398,7 +7433,9 @@ async function cmdShell(chatId, shellArgs) {
 
 function runPwsh(psScript, timeoutMs = 15000) {
   const isWin = process.platform === "win32";
-  const pwsh = isWin ? "powershell.exe" : "pwsh";
+  const pwsh = isWin
+    ? "powershell.exe"
+    : resolvePwshRuntime({ preferBundled: true }).command;
   const script = `& { ${psScript} }`;
   const result = spawnSync(pwsh, ["-NoProfile", "-Command", script], {
     cwd: repoRoot,

package/ui/app.js

@@ -255,25 +255,11 @@ function Header() {
   return html`
     <header class="app-header">
       <div class="app-header-left">
-        <div class="app-header-brand">
-          <div class="app-header-logo">
-            <img src="logo.png" alt="Bosun" class="app-logo-img" />
-          </div>
-          <div class="app-header-titles">
-            <div class="app-header-title">Bosun</div>
-            ${subLabel
-              ? html`<div class="app-header-subtitle">${subLabel}</div>`
-              : null}
-            ${navHint
-              ? html`<div class="app-header-hint">${navHint}</div>`
-              : null}
-          </div>
-        </div>
-      </div>
-      <div class="app-header-right">
         <div class="app-header-workspace">
           <${WorkspaceSwitcher} />
         </div>
+      </div>
+      <div class="app-header-right">
         <div class="header-actions">
           <div class="header-status">
             <div class="connection-pill ${connClass}">

package/ui/components/workspace-switcher.js

@@ -10,6 +10,7 @@ import { signal } from "@preact/signals";
 import htm from "htm";
 import { apiFetch } from "../modules/api.js";
 import { haptic } from "../modules/telegram.js";
+import { Modal } from "./shared.js";
 
 const html = htm.bind(h);
 
@@ -416,42 +417,34 @@ export function WorkspaceManager({ open, onClose }) {
   const loading = workspacesLoading.value;
 
   return html`
-    <div class="ws-manager-overlay" onClick=${(e) => { if (e.target === e.currentTarget) onClose(); }}>
-      <div class="ws-manager-panel">
-        <div class="ws-manager-header">
-          <h2 class="ws-manager-title">Workspace Manager</h2>
-          <div class="ws-manager-header-actions">
-            <button
-              class="ws-manager-btn ghost"
-              onClick=${handleScan}
-              disabled=${scanning}
-              title="Scan disk for workspaces"
-            >${scanning ? html`<${Spinner} /> Scanning…` : "🔍 Scan Disk"}</button>
-            <button class="ws-manager-close-btn" onClick=${onClose} title="Close">✕</button>
-          </div>
-        </div>
+    <${Modal} title="Manage Workspaces" open=${open} onClose=${onClose}>
+      <div class="ws-manager-modal-toolbar">
+        <button
+          class="btn btn-ghost btn-sm"
+          onClick=${handleScan}
+          disabled=${scanning}
+          title="Scan disk for workspaces"
+        >${scanning ? "Scanning…" : "🔍 Scan Disk"}</button>
+      </div>
 
-        <div class="ws-manager-body">
-          ${loading && !wsList.length
-            ? html`<div class="ws-manager-loading"><${Spinner} /> Loading workspaces…</div>`
-            : null
-          }
+      ${loading && !wsList.length
+        ? html`<div class="ws-manager-loading">Loading workspaces…</div>`
+        : null
+      }
 
-          <div class="ws-manager-list">
-            ${wsList.map((ws) => html`
-              <${WorkspaceCard} key=${ws.id} ws=${ws} />
-            `)}
-          </div>
+      <div class="ws-manager-list">
+        ${wsList.map((ws) => html`
+          <${WorkspaceCard} key=${ws.id} ws=${ws} />
+        `)}
+      </div>
 
-          ${!wsList.length && !loading
-            ? html`<div class="ws-manager-empty-state">No workspaces found. Create one or scan disk.</div>`
-            : null
-          }
+      ${!wsList.length && !loading
+        ? html`<div class="ws-manager-empty-state">No workspaces found. Create one or scan disk.</div>`
+        : null
+      }
 
-          <${AddWorkspaceForm} />
-        </div>
-      </div>
-    </div>
+      <${AddWorkspaceForm} />
+    <//>
   `;
 }
 

package/ui/modules/settings-schema.js

@@ -111,6 +111,13 @@ export const SETTINGS_SCHEMA = [
   { key: "STALE_TASK_AGE_HOURS",           label: "Stale Task Age",             category: "kanban", type: "number", defaultVal: 3, min: 1, max: 168, unit: "hours", description: "Hours before an in-progress task with no activity is considered stale and eligible for recovery." },
   { key: "TASK_PLANNER_MODE",              label: "Task Planner Mode",          category: "kanban", type: "select", defaultVal: "kanban", options: ["kanban", "codex-sdk", "disabled"], description: "How the autonomous task planner operates. 'disabled' turns off automatic task generation." },
   { key: "TASK_PLANNER_DEDUP_HOURS",       label: "Planner Dedup Window",       category: "kanban", type: "number", defaultVal: 6, min: 1, max: 72, unit: "hours", description: "Hours to look back for duplicate task detection.", advanced: true },
+
+  // ── Branch Strategy ──────────────────────────────────────────────────
+  { key: "TASK_BRANCH_MODE",               label: "Branch Mode",                 category: "branching", type: "select", defaultVal: "worktree", options: ["worktree", "direct"], description: "worktree: agents use isolated ve/<id>-<slug> sub-branches that PR into the module/base branch (default). direct: agents push directly onto the module branch — sequential, real-time conflict resolution.", restart: true },
+  { key: "TASK_BRANCH_AUTO_MODULE",        label: "Auto Module Branch",          category: "branching", type: "boolean", defaultVal: true, description: "Automatically detect origin/<module> as base_branch from conventional commit titles (e.g. feat(veid): → origin/veid). Enables parallel branch-per-module strategy." },
+  { key: "MODULE_BRANCH_PREFIX",           label: "Module Branch Prefix",        category: "branching", type: "string", defaultVal: "origin/", description: "Prefix prepended to module scope when building module branch refs (default: origin/).", advanced: true },
+  { key: "DEFAULT_TARGET_BRANCH",          label: "Default Target Branch",       category: "branching", type: "string", defaultVal: "main", description: "The main upstream branch agents sync with before pushing (e.g. main). Used for upstream sync and PR base detection." },
+  { key: "TASK_UPSTREAM_SYNC_MAIN",        label: "Upstream Main Sync",          category: "branching", type: "boolean", defaultVal: true, description: "Before each push, merge origin/main into the task branch to keep it continuously in sync with upstream. If a conflict occurs, it is aborted and the next agent on the branch resolves it." },
   { key: "BOSUN_PROMPT_PLANNER",  label: "Planner Prompt Path",         category: "advanced", type: "string", description: "Override the task planner prompt file path.", advanced: true },
 
   // ── Logging / Telemetry ──────────────────────────────────────

package/ui/styles/base.css

@@ -8,6 +8,7 @@
   box-sizing: border-box;
   margin: 0;
   padding: 0;
+  min-width: 0;
 }
 
 html,
@@ -21,8 +22,6 @@ body {
   line-height: 1.5;
   color: var(--text-primary);
   background: var(--bg-primary);
-  background-image: var(--gradient-mesh);
-  background-attachment: fixed;
   -webkit-font-smoothing: antialiased;
   -moz-osx-font-smoothing: grayscale;
   -webkit-tap-highlight-color: transparent;
@@ -34,8 +33,6 @@ body {
 }
 
 #app {
-  /* height: 100% (not min-height) anchors the flex tree so .main-content gets
-     a real bounded height to scroll within instead of growing indefinitely */
   height: 100%;
   overflow: hidden;
   display: flex;
@@ -44,32 +41,10 @@ body {
   z-index: 1;
 }
 
+/* Remove body glow pseudo-elements — they cause visual noise */
 body::before,
 body::after {
-  content: "";
-  position: fixed;
-  pointer-events: none;
-  z-index: 0;
-  inset: auto;
-  opacity: 0.45;
-}
-
-body::before {
-  top: -20%;
-  left: -10%;
-  right: -10%;
-  height: 55%;
-  background: var(--gradient-hero);
-  filter: blur(12px);
-}
-
-body::after {
-  bottom: -25%;
-  left: -20%;
-  right: -20%;
-  height: 60%;
-  background: var(--gradient-radial-glow);
-  filter: blur(18px);
+  display: none;
 }
 
 /* Selection styling */