bosun 0.31.8 → 0.33.0

package/.env.example

@@ -332,9 +332,9 @@ TELEGRAM_MINIAPP_ENABLED=false
 # by the next agent working on that branch. Default: true
 # TASK_UPSTREAM_SYNC_MAIN=true
 
-# ─── GitHub App (Bosun[botswain] Identity + Auth) ────────────────────────────
-# App: https://github.com/apps/bosun-botswain  (slug: bosun-botswain)
-# Bot identity: bosun-botswain[bot]  (appears as contributor on every agent commit)
+# ─── GitHub App (Bosun[VE] Identity + Auth) ────────────────────────────
+# App: https://github.com/apps/bosun-ve  (slug: bosun-ve)
+# Bot identity: bosun-ve[bot]  (appears as contributor on every agent commit)
 #
 # Numeric App ID (shown on the App settings page under "About"):
 # BOSUN_GITHUB_APP_ID=2911413
@@ -350,9 +350,9 @@ TELEGRAM_MINIAPP_ENABLED=false
 # BOSUN_GITHUB_WEBHOOK_SECRET=
 #
 # Path to the PEM private key downloaded from App settings → Generate a private key:
-# BOSUN_GITHUB_PRIVATE_KEY_PATH=/path/to/bosun-botswain.pem
+# BOSUN_GITHUB_PRIVATE_KEY_PATH=/path/to/bosun-ve.pem
 #
-# ─── GitHub App Settings (enable all three in https://github.com/settings/apps/bosun-botswain) ────
+# ─── GitHub App Settings (enable all three in https://github.com/settings/apps/bosun-ve) ────
 # ✅ Callback URL  →  http://127.0.0.1:54317/github/callback  (set this FIRST, then Save)
 # ✅ "Request user authorization (OAuth) during installation"  →  ON
 #      GitHub does OAuth at install time, redirecting to the Callback URL with

package/README.md

@@ -36,6 +36,7 @@ bosun --setup
 ```
 
 Requires:
+
 - Node.js 18+
 - Git
 - Bash (for `.sh` wrappers) or PowerShell 7+ (for `.ps1` wrappers)
@@ -60,6 +61,7 @@ Requires:
 **Source docs (markdown):** `_docs/` is the source of truth for long-form documentation. The website should be generated from the same markdown content so docs stay in sync.
 
 Key references:
+
 - [GitHub adapter enhancements](_docs/KANBAN_GITHUB_ENHANCEMENT.md)
 - [GitHub Projects v2 index](_docs/GITHUB_PROJECTS_V2_INDEX.md)
 - [GitHub Projects v2 quickstart](_docs/GITHUB_PROJECTS_V2_QUICKSTART.md)
@@ -79,6 +81,7 @@ Bosun enforces a strict quality pipeline in both local hooks and CI:
 
 - **Pre-commit hooks** auto-format and lint staged files.
 - **Pre-push hooks** run targeted checks based on changed files (Go, portal, docs).
+- **Demo load smoke test** runs in `npm test` and blocks push if `site/indexv2.html` or `site/ui/demo.html` fails to load required assets.
 - **Prepublish checks** validate package contents and release readiness.
 
 Local commands you can run any time:

package/agent-prompts.mjs

@@ -119,6 +119,12 @@ const PROMPT_DEFS = [
     description:
       "Task management agent prompt with full CRUD access via CLI and REST API.",
   },
+  {
+    key: "frontendAgent",
+    filename: "frontend-agent.md",
+    description:
+      "Front-end specialist agent with screenshot-based validation and visual verification.",
+  },
 ];
 
 export const AGENT_PROMPT_DEFINITIONS = Object.freeze(
@@ -150,6 +156,19 @@ You are an autonomous task orchestrator agent. You receive implementation tasks
 - Existing functionality is preserved.
 - Relevant checks pass.
 - Branch is pushed and ready for PR/review flow.
+
+## Skills & Knowledge Base
+
+Before starting any task, load relevant skills to avoid known pitfalls and
+apply patterns discovered by previous agents:
+
+1. Check if \`.bosun/skills/index.json\` exists in the workspace or bosun home.
+2. Read the index to find skills whose tags match your task's module or domain.
+3. Load and apply any matching skill files from \`.bosun/skills/\`.
+
+After completing a task, if you discovered a non-obvious pattern, workaround, or
+domain-specific fact, write or update a skill file at \`.bosun/skills/<module>.md\`
+so the next agent benefits from your investigation.
 `,
   planner: `# Codex-Task-Planner Agent
 
@@ -227,12 +246,23 @@ You are the always-on reliability guardian for bosun in devmode.
 - Branch: {{BRANCH}}
 - Repository: {{REPO_SLUG}}
 
+## Skills — Load Before Starting
+
+Check for relevant skills before implementing:
+1. Look for \`.bosun/skills/index.json\` (in workspace root or BOSUN_HOME).
+2. Read the index; load skills whose tags match this task's module/domain.
+3. Apply the patterns — especially \`background-task-execution\`, \`error-recovery\`,
+   and \`pr-workflow\` which apply to almost every task.
+
 ## Instructions
-1. Read task requirements carefully.
-2. Implement required code changes.
-3. Run relevant tests/lint/build checks.
-4. Commit with conventional commit format.
-5. Push branch updates.
+1. Load relevant skills as described above.
+2. Read task requirements carefully.
+3. Implement required code changes.
+4. Run relevant tests/lint/build checks.
+5. Commit with conventional commit format.
+6. Push branch updates.
+7. After completing: if you discovered non-obvious patterns, write a skill file
+   at \`.bosun/skills/<module>.md\` for future agents.
 
 ## Critical Rules
 - Do not ask for manual confirmation.
@@ -580,6 +610,75 @@ Types: feat, fix, docs, refactor, test, chore
 Statuses: draft → todo → inprogress → inreview → done
 
 See .bosun/agents/task-manager.md for full documentation.
+`,
+  frontendAgent: `# Frontend Specialist Agent
+
+You are a **front-end development specialist** agent managed by Bosun.
+
+## Core Responsibilities
+
+1. Implement HTML, CSS, and JavaScript/TypeScript UI changes
+2. Build responsive, accessible UI components
+3. Ensure visual accuracy matching specifications
+4. Validate changes through automated testing AND visual verification
+
+## Special Skills
+
+- CSS Grid/Flexbox layout
+- Component architecture (React, Preact, Vue, Svelte, vanilla)
+- Responsive design (mobile-first)
+- Accessibility (WCAG 2.1 AA)
+- CSS animations and transitions
+- Design system adherence
+
+## CRITICAL: Evidence-Based Validation
+
+After completing implementation, you MUST collect visual evidence:
+
+### Screenshot Protocol
+1. Start the dev server if not already running
+2. Navigate to every page/component you modified
+3. Take screenshots at THREE viewport sizes:
+   - Desktop (1920×1080)
+   - Tablet (768×1024)
+   - Mobile (375×812)
+4. Save ALL screenshots to \`.bosun/evidence/\` directory
+5. Use descriptive filenames: \`<page>-<viewport>-<timestamp>.png\`
+6. Also screenshot any interactive states (modals, dropdowns, hover states)
+
+### Evidence Naming Convention
+\`\`\`
+.bosun/evidence/
+  homepage-desktop-1234567890.png
+  homepage-tablet-1234567890.png
+  homepage-mobile-1234567890.png
+  modal-open-desktop-1234567890.png
+  dark-mode-desktop-1234567890.png
+\`\`\`
+
+## Workflow
+1. Read task requirements and any linked designs/specs
+2. Load relevant skills from \`.bosun/skills/\`
+3. Implement frontend changes
+4. Run build: \`npm run build\` (zero errors AND zero warnings)
+5. Run lint: \`npm run lint\`
+6. Run tests: \`npm test\`
+7. Start dev server and collect screenshots (see protocol above)
+8. Commit with conventional format: \`feat(ui): ...\` or \`fix(ui): ...\`
+9. Push branch
+
+## IMPORTANT: Do NOT mark the task complete
+The Bosun workflow engine handles completion verification.
+An independent model will review your screenshots against the task
+requirements before the task is marked as done.
+
+## Task Context
+- Task: {{TASK_TITLE}}
+- Description: {{TASK_DESCRIPTION}}
+- Branch: {{BRANCH}}
+- Working Directory: {{WORKTREE_PATH}}
+
+{{COAUTHOR_INSTRUCTION}}
 `,
 };
 
@@ -646,19 +745,40 @@ export function getDefaultPromptTemplate(key) {
   return DEFAULT_PROMPTS[key] || "";
 }
 
-export function renderPromptTemplate(template, values = {}) {
+export function renderPromptTemplate(template, values = {}, rootDir) {
   if (typeof template !== "string") return "";
   const normalized = {};
   for (const [k, v] of Object.entries(values || {})) {
     normalized[String(k).trim().toUpperCase()] = normalizeTemplateValue(v);
   }
 
-  return template.replace(/\{\{\s*([A-Za-z0-9_]+)\s*\}\}/g, (full, key) => {
+  // Resolve namespaced library refs: {{prompt:name}}, {{agent:name}}, {{skill:name}}
+  let result = template;
+  if (rootDir && _libraryResolver) {
+    try {
+      result = _libraryResolver(result, rootDir, {});
+    } catch {
+      // library resolver failed — skip namespaced refs
+    }
+  }
+
+  return result.replace(/\{\{\s*([A-Za-z0-9_]+)\s*\}\}/g, (full, key) => {
     const hit = normalized[String(key).toUpperCase()];
     return hit == null ? "" : hit;
   });
 }
 
+/**
+ * Register the library reference resolver. Called by library-manager or at
+ * startup to enable {{prompt:name}}, {{agent:name}}, {{skill:name}} syntax.
+ *
+ * @param {(template: string, rootDir: string, vars: Object) => string} resolver
+ */
+let _libraryResolver = null;
+export function setLibraryResolver(resolver) {
+  _libraryResolver = typeof resolver === "function" ? resolver : null;
+}
+
 export function resolvePromptTemplate(template, values, fallback) {
   const base = typeof fallback === "string" ? fallback : "";
   if (typeof template !== "string" || !template.trim()) return base;

package/anomaly-detector.mjs

@@ -1211,3 +1211,57 @@ export function createAnomalyDetector(options = {}) {
  */
 
 export default AnomalyDetector;
+
+// ── Workflow Engine Integration ─────────────────────────────────────────────
+
+/**
+ * Registered workflow engine reference for anomaly → workflow triggers.
+ * @type {import("./workflow-engine.mjs").WorkflowEngine | null}
+ */
+let _workflowEngine = null;
+
+/**
+ * Register a workflow engine to receive anomaly trigger events.
+ * When set, every anomaly emitted will also call engine.evaluateTriggers("anomaly", anomalyData).
+ *
+ * @param {import("./workflow-engine.mjs").WorkflowEngine} engine
+ */
+export function setWorkflowEngine(engine) {
+  _workflowEngine = engine;
+}
+
+/** Get the currently registered workflow engine (or null) */
+export function getWorkflowEngine() {
+  return _workflowEngine;
+}
+
+/**
+ * Create an onAnomaly callback that also fires workflow triggers.
+ * Wraps the user's original callback and additionally invokes
+ * evaluateTriggers on the registered workflow engine.
+ *
+ * @param {(anomaly: Anomaly) => void} [originalCallback]
+ * @returns {(anomaly: Anomaly) => void}
+ */
+export function wrapAnomalyCallback(originalCallback) {
+  return (anomaly) => {
+    // Always call the original callback
+    if (originalCallback) originalCallback(anomaly);
+
+    // Fire workflow triggers if engine is registered
+    if (_workflowEngine?.evaluateTriggers) {
+      try {
+        _workflowEngine.evaluateTriggers("anomaly", {
+          anomalyType: anomaly.type,
+          severity: anomaly.severity,
+          agentId: anomaly.processId || anomaly.shortId,
+          message: anomaly.message,
+          action: anomaly.action,
+          taskTitle: anomaly.taskTitle,
+          data: anomaly.data,
+          timestamp: Date.now(),
+        });
+      } catch { /* workflow trigger errors should not break anomaly detection */ }
+    }
+  };
+}