bosun 0.37.0 → 0.37.2

package/kanban-adapter.mjs

@@ -5823,6 +5823,23 @@ export function getKanbanBackendName() {
 // Convenience exports: direct task operations via active adapter
 // ---------------------------------------------------------------------------
 
+// ── Workflow Event Bridge (lazy-loaded from monitor.mjs) ──────────────────
+let _kanbanQueueWorkflowEvent = null;
+function emitKanbanEvent(eventType, eventData = {}) {
+  if (!_kanbanQueueWorkflowEvent) {
+    import("./monitor.mjs")
+      .then((mod) => {
+        if (typeof mod.queueWorkflowEvent === "function") {
+          _kanbanQueueWorkflowEvent = mod.queueWorkflowEvent;
+          _kanbanQueueWorkflowEvent(eventType, eventData);
+        }
+      })
+      .catch(() => {});
+    return;
+  }
+  _kanbanQueueWorkflowEvent(eventType, eventData);
+}
+
 export async function listProjects() {
   return getKanbanAdapter().listProjects();
 }
@@ -5836,7 +5853,9 @@ export async function getTask(taskId) {
 }
 
 export async function updateTaskStatus(taskId, status, options) {
-  return getKanbanAdapter().updateTaskStatus(taskId, status, options);
+  const result = await getKanbanAdapter().updateTaskStatus(taskId, status, options);
+  emitKanbanEvent("task.status_updated", { taskId, status, options });
+  return result;
 }
 
 export async function updateTask(taskId, patch) {
@@ -5851,11 +5870,19 @@ export async function updateTask(taskId, patch) {
 }
 
 export async function createTask(projectId, taskData) {
-  return getKanbanAdapter().createTask(projectId, taskData);
+  const result = await getKanbanAdapter().createTask(projectId, taskData);
+  emitKanbanEvent("task.created", {
+    projectId,
+    taskId: result?.id || null,
+    title: taskData?.title || null,
+  });
+  return result;
 }
 
 export async function deleteTask(taskId) {
-  return getKanbanAdapter().deleteTask(taskId);
+  const result = await getKanbanAdapter().deleteTask(taskId);
+  emitKanbanEvent("task.deleted", { taskId });
+  return result;
 }
 
 export async function addComment(taskId, body) {

package/library-manager.mjs

@@ -102,6 +102,8 @@ function nowISO() {
  * @property {string[]} [skills]         - skill library refs to inject
  * @property {Object} [hookProfile]      - hook profile overrides
  * @property {Object} [env]              - extra env vars for the agent
+ * @property {string[]} [enabledTools]   - list of tool IDs enabled for this agent (null = all)
+ * @property {string[]} [enabledMcpServers] - list of MCP server IDs enabled for this agent
  */
 
 /**
@@ -631,6 +633,7 @@ export const BUILTIN_AGENT_PROFILES = [
     hookProfile: null,
     env: {},
     tags: ["ui", "frontend", "portal", "css", "web"],
+    agentType: "task",
   },
   {
     id: "backend-agent",
@@ -645,6 +648,7 @@ export const BUILTIN_AGENT_PROFILES = [
     hookProfile: null,
     env: {},
     tags: ["api", "server", "backend", "database"],
+    agentType: "task",
   },
   {
     id: "devops-agent",
@@ -659,6 +663,7 @@ export const BUILTIN_AGENT_PROFILES = [
     hookProfile: null,
     env: {},
     tags: ["ci", "cd", "build", "deploy", "infra", "devops"],
+    agentType: "task",
   },
   {
     id: "docs-agent",
@@ -673,6 +678,7 @@ export const BUILTIN_AGENT_PROFILES = [
     hookProfile: null,
     env: {},
     tags: ["docs", "documentation", "readme", "markdown"],
+    agentType: "task",
   },
   {
     id: "test-agent",
@@ -687,6 +693,66 @@ export const BUILTIN_AGENT_PROFILES = [
     hookProfile: null,
     env: {},
     tags: ["test", "testing", "e2e", "unit", "coverage"],
+    agentType: "task",
+  },
+  {
+    id: "voice-agent-female",
+    name: "Voice Agent (Female)",
+    description: "Conversational voice specialist with concise guidance and call-friendly pacing.",
+    titlePatterns: ["\\bvoice\\b", "\\bcall\\b", "\\bmeeting\\b", "\\bassistant\\b"],
+    scopes: ["voice", "assistant"],
+    sdk: null,
+    model: null,
+    promptOverride: null,
+    skills: ["concise-voice-guidance", "conversation-memory"],
+    hookProfile: null,
+    env: {},
+    tags: ["voice", "assistant", "realtime", "female", "default", "audio-agent"],
+    agentType: "voice",
+    voiceAgent: true,
+    voicePersona: "female",
+    voiceInstructions: "You are Nova, a female voice agent. Be concise, warm, and practical. Use tools for facts and execution. Keep spoken responses short and clear.",
+    enabledTools: null,
+    enabledMcpServers: [],
+  },
+  {
+    id: "voice-agent-male",
+    name: "Voice Agent (Male)",
+    description: "Operational voice specialist focused on diagnostics and execution.",
+    titlePatterns: ["\\bvoice\\b", "\\bcall\\b", "\\bmeeting\\b", "\\bassistant\\b"],
+    scopes: ["voice", "assistant"],
+    sdk: null,
+    model: null,
+    promptOverride: null,
+    skills: ["ops-diagnostics", "task-execution"],
+    hookProfile: null,
+    env: {},
+    tags: ["voice", "assistant", "realtime", "male", "default", "audio-agent"],
+    agentType: "voice",
+    voiceAgent: true,
+    voicePersona: "male",
+    voiceInstructions: "You are Atlas, a male voice agent. Be direct and execution-oriented. Prefer actionable status updates. Use tools proactively for diagnostics.",
+    enabledTools: null,
+    enabledMcpServers: [],
+  },
+  {
+    id: "voice-agent",
+    name: "Voice Agent",
+    description: "Default voice assistant agent. Handles real-time voice sessions, tool calls, and delegate orchestration. Customize tools and MCP servers for voice interactions.",
+    titlePatterns: ["\\bvoice\\b", "\\bcall\\b", "\\bmeeting\\b", "\\bassistant\\b"],
+    scopes: ["voice", "assistant"],
+    sdk: null,
+    model: null,
+    promptOverride: null,
+    skills: [],
+    hookProfile: null,
+    env: {},
+    tags: ["voice", "assistant", "realtime", "default"],
+    agentType: "voice",
+    voiceAgent: true,
+    voicePersona: "neutral",
+    enabledTools: null,
+    enabledMcpServers: [],
   },
 ];
 

package/maintenance.mjs

@@ -28,6 +28,26 @@ import {
 } from "./worktree-manager.mjs";
 
 const isWindows = process.platform === "win32";
+
+// ── Workflow event bridge ─────────────────────────────────────────────────
+// Lazy-loaded to avoid circular imports (monitor → maintenance → monitor).
+let _queueWorkflowEvent = null;
+function emitMaintenanceEvent(eventType, data = {}) {
+  if (_queueWorkflowEvent) {
+    _queueWorkflowEvent(eventType, data);
+    return;
+  }
+  import("./monitor.mjs")
+    .then((mod) => {
+      if (typeof mod.queueWorkflowEvent === "function") {
+        _queueWorkflowEvent = mod.queueWorkflowEvent;
+        _queueWorkflowEvent(eventType, data);
+      }
+    })
+    .catch(() => {
+      /* best-effort — monitor not available during tests */
+    });
+}
 const BRANCH_SYNC_LOG_THROTTLE_MS = Math.max(
   5_000,
   Number(process.env.BRANCH_SYNC_LOG_THROTTLE_MS || "300000") || 300000,
@@ -1318,11 +1338,7 @@ export async function runMaintenanceSweep(opts = {}) {
     /* best-effort */
   }
 
-  console.log(
-    `[maintenance] sweep complete: ${staleKilled} stale orchestrators, ${pushesReaped} stuck pushes, ${worktreesPruned} worktrees pruned, ${branchesSynced} branches synced, ${branchesDeleted} stale branches deleted`,
-  );
-
-  return {
+  const result = {
     staleKilled,
     pushesReaped,
     worktreesPruned,
@@ -1330,4 +1346,13 @@ export async function runMaintenanceSweep(opts = {}) {
     tasksArchived,
     branchesDeleted,
   };
+
+  console.log(
+    `[maintenance] sweep complete: ${staleKilled} stale orchestrators, ${pushesReaped} stuck pushes, ${worktreesPruned} worktrees pruned, ${branchesSynced} branches synced, ${branchesDeleted} stale branches deleted`,
+  );
+
+  // Emit workflow event so event-driven workflows can react to sweep results
+  emitMaintenanceEvent("maintenance.sweep_complete", result);
+
+  return result;
 }

package/monitor.mjs

@@ -12235,12 +12235,66 @@ runGuarded("startup-maintenance-sweep", () =>
 safeSetInterval("flush-error-queue", () => flushErrorQueue(), 60 * 1000);
 
 // ── Periodic maintenance: every 5 min, reap stuck pushes & prune worktrees ──
+// If a workflow replaces maintenance.mjs, skip the direct call and let
+// the workflow engine handle it via trigger.schedule evaluation.
 const maintenanceIntervalMs = 5 * 60 * 1000;
 safeSetInterval("maintenance-sweep", () => {
+  if (isWorkflowReplacingModule("maintenance.mjs")) return;
   const childPid = currentChild ? currentChild.pid : undefined;
   return runMaintenanceSweep({ repoRoot, childPid });
 }, maintenanceIntervalMs);
 
+// ── Workflow schedule trigger polling ───────────────────────────────────────
+// Check all installed workflows that use trigger.schedule and fire any whose
+// interval has elapsed. This makes schedule-based templates (workspace hygiene,
+// nightly reports, etc.) actually execute without hardcoded safeSetInterval calls.
+const scheduleCheckIntervalMs = 60 * 1000; // check every 60s
+safeSetInterval("workflow-schedule-check", async () => {
+  try {
+    const engine = await ensureWorkflowAutomationEngine();
+    if (!engine?.evaluateScheduleTriggers) return;
+
+    const triggered = engine.evaluateScheduleTriggers();
+    if (!Array.isArray(triggered) || triggered.length === 0) return;
+
+    for (const match of triggered) {
+      const workflowId = String(match?.workflowId || "").trim();
+      if (!workflowId) continue;
+      void engine
+        .execute(workflowId, {
+          _triggerSource: "schedule-poll",
+          _triggeredBy: match?.triggeredBy || null,
+          _lastRunAt: Date.now(),
+          repoRoot,
+        })
+        .then((ctx) => {
+          const runId = ctx?.id || "unknown";
+          const runStatus =
+            Array.isArray(ctx?.errors) && ctx.errors.length > 0
+              ? "failed"
+              : "completed";
+          console.log(
+            `[workflows] schedule-run ${runStatus} workflow=${workflowId} runId=${runId}`,
+          );
+        })
+        .catch((err) => {
+          console.warn(
+            `[workflows] schedule-run failed workflow=${workflowId}: ${err?.message || err}`,
+          );
+        });
+    }
+
+    if (triggered.length > 0) {
+      console.log(
+        `[workflows] schedule poll triggered ${triggered.length} workflow run(s)`,
+      );
+    }
+  } catch (err) {
+    // Schedule evaluation must not crash the monitor
+    console.warn(`[workflows] schedule-check error: ${err?.message || err}`);
+  }
+}, scheduleCheckIntervalMs);
+
 // ── Periodic merged PR check: every 10 min, move merged PRs to done ─────────
 const mergedPRCheckIntervalMs = 10 * 60 * 1000;
 safeSetInterval("merged-pr-check", () => checkMergedPRsAndUpdateTasks(), mergedPRCheckIntervalMs);
@@ -13307,4 +13361,6 @@ export {
   // Container runner re-exports
   getContainerStatus,
   isContainerEnabled,
+  // Workflow event bridge — for fleet/kanban modules to emit events
+  queueWorkflowEvent,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bosun",
-  "version": "0.37.0",
+  "version": "0.37.2",
   "description": "AI-powered orchestrator supervisor — manages AI agent executors with failover, auto-restarts on failure, analyzes crashes with Codex SDK, creates PRs via Vibe-Kanban API, and sends Telegram notifications. Supports N executors with weighted distribution, multi-repo projects, and auto-setup.",
   "type": "module",
   "license": "Apache 2.0",
@@ -62,6 +62,7 @@
     "./agent-hooks": "./agent-hooks.mjs",
     "./hook-profiles": "./hook-profiles.mjs",
     "./agent-hook-bridge": "./agent-hook-bridge.mjs",
+    "./agent-tool-config": "./agent-tool-config.mjs",
     "./startup-service": "./startup-service.mjs",
     "./telegram-sentinel": "./telegram-sentinel.mjs",
     "./whatsapp-channel": "./whatsapp-channel.mjs",
@@ -240,6 +241,7 @@
     "agent-hooks.mjs",
     "hook-profiles.mjs",
     "agent-hook-bridge.mjs",
+    "agent-tool-config.mjs",
     "agent-supervisor.mjs",
     "agent-work-analyzer.mjs",
     "startup-service.mjs",
@@ -260,6 +262,7 @@
     "workflow-templates/planning.mjs",
     "workflow-templates/reliability.mjs",
     "workflow-templates/security.mjs",
+    "workflow-templates/task-batch.mjs",
     "workflow-templates/task-lifecycle.mjs",
     "ui/vendor/"
   ],

package/setup-web-server.mjs

@@ -439,9 +439,12 @@ function buildStableSetupDefaults({
     voiceModel: "gpt-audio-1.5",
     voiceVisionModel: "gpt-4.1-nano",
     voiceId: "alloy",
-    voiceTurnDetection: "server_vad",
+    voiceTurnDetection: "semantic_vad",
     voiceFallbackMode: "browser",
     voiceDelegateExecutor: "codex-sdk",
+    voiceTranscriptionEnabled: true,
+    voiceTranscriptionModel: "gpt-4o-transcribe",
+    voiceAzureTranscriptionEnabled: false,
     openaiRealtimeApiKey: "",
     azureOpenaiRealtimeEndpoint: "",
     azureOpenaiRealtimeApiKey: "",
@@ -892,7 +895,7 @@ function applyNonBlockingSetupEnvDefaults(envMap, env = {}, sourceEnv = process.
       sourceEnv.VOICE_TURN_DETECTION,
     ),
     ["server_vad", "semantic_vad", "none"],
-    "server_vad",
+    "semantic_vad",
   );
   envMap.VOICE_FALLBACK_MODE = normalizeEnumValue(
     pickNonEmptyValue(
@@ -914,6 +917,32 @@ function applyNonBlockingSetupEnvDefaults(envMap, env = {}, sourceEnv = process.
     ["codex-sdk", "copilot-sdk", "claude-sdk", "gemini-sdk", "opencode-sdk"],
     "codex-sdk",
   );
+  envMap.VOICE_TRANSCRIPTION_ENABLED = toBooleanEnvString(
+    pickNonEmptyValue(
+      env.voiceTranscriptionEnabled,
+      env.VOICE_TRANSCRIPTION_ENABLED,
+      envMap.VOICE_TRANSCRIPTION_ENABLED,
+      sourceEnv.VOICE_TRANSCRIPTION_ENABLED,
+    ),
+    true,
+  );
+  envMap.VOICE_TRANSCRIPTION_MODEL = String(
+    pickNonEmptyValue(
+      env.voiceTranscriptionModel,
+      env.VOICE_TRANSCRIPTION_MODEL,
+      envMap.VOICE_TRANSCRIPTION_MODEL,
+      sourceEnv.VOICE_TRANSCRIPTION_MODEL,
+    ) || "gpt-4o-transcribe",
+  ).trim() || "gpt-4o-transcribe";
+  envMap.VOICE_AZURE_TRANSCRIPTION_ENABLED = toBooleanEnvString(
+    pickNonEmptyValue(
+      env.voiceAzureTranscriptionEnabled,
+      env.VOICE_AZURE_TRANSCRIPTION_ENABLED,
+      envMap.VOICE_AZURE_TRANSCRIPTION_ENABLED,
+      sourceEnv.VOICE_AZURE_TRANSCRIPTION_ENABLED,
+    ),
+    false,
+  );
 
   const openaiRealtimeApiKey = pickNonEmptyValue(
     env.openaiRealtimeApiKey,
@@ -1481,14 +1510,12 @@ async function handleVoiceEndpointTest(body) {
       // Strip path suffix so users can paste full URLs without double-path 404s.
       let base = String(azureEndpoint).replace(/\/+$/, "");
       try { const u = new URL(base); base = `${u.protocol}//${u.host}`; } catch { /* keep as-is */ }
-      // Single-deployment GET only requires Cognitive Services User role.
-      // Use the GA api-version (2024-10-21) for broad compatibility across
-      // classic Azure OpenAI and Azure AI Foundry resources.
-      const dep = String(deployment || "").trim();
-      testUrl = dep
-        ? `${base}/openai/deployments/${encodeURIComponent(dep)}?api-version=2024-10-21`
-        : `${base}/openai/models?api-version=2024-10-21`;
+      // Prefer /openai/models as a credential check — it works on both classic
+      // Azure OpenAI resources AND Azure AI Foundry "Global Standard" deployments.
+      // If a deployment name is provided, we verify it separately after confirming
+      // the endpoint + key are valid.
       headers["api-key"] = apiKey;
+      testUrl = `${base}/openai/models?api-version=2024-10-21`;
     } else if (normalizedProvider === "claude") {
       testUrl = "https://api.anthropic.com/v1/models";
       headers["anthropic-version"] = "2023-06-01";
@@ -1525,6 +1552,36 @@ async function handleVoiceEndpointTest(body) {
     clearTimeout(timer);
     const latencyMs = Date.now() - start;
     if (resp.ok || resp.status === 200) {
+      // For Azure with a deployment name, do a secondary check to verify the
+      // deployment exists. We try chat/completions with max_tokens=1 — realtime
+      // deployments return 400 (wrong endpoint type) which still confirms existence.
+      if (normalizedProvider === "azure" && deployment) {
+        const dep = String(deployment).trim();
+        try {
+          let base = String(azureEndpoint).replace(/\/+$/, "");
+          try { const u = new URL(base); base = `${u.protocol}//${u.host}`; } catch { /* keep */ }
+          const depUrl = `${base}/openai/deployments/${encodeURIComponent(dep)}/chat/completions?api-version=2024-10-21`;
+          const depCtrl = new AbortController();
+          const depTimer = setTimeout(() => depCtrl.abort(), 8_000);
+          const depResp = await fetch(depUrl, {
+            method: "POST",
+            headers: { ...headers, "Content-Type": "application/json" },
+            body: JSON.stringify({ messages: [{ role: "user", content: "test" }], max_tokens: 1 }),
+            signal: depCtrl.signal,
+          });
+          clearTimeout(depTimer);
+          // 200 = chat model works, 400 = realtime model (expected), both confirm deployment exists
+          if (depResp.ok || depResp.status === 400) {
+            return { ok: true, latencyMs, deployment: dep };
+          }
+          if (depResp.status === 404) {
+            return { ok: false, error: `Credentials valid but deployment "${dep}" not found — check the deployment name in Azure AI Foundry`, latencyMs };
+          }
+          return { ok: true, latencyMs, warning: `Credentials valid. Could not verify deployment "${dep}" (HTTP ${depResp.status})` };
+        } catch {
+          return { ok: true, latencyMs, warning: `Credentials valid. Could not verify deployment "${dep}" (timeout)` };
+        }
+      }
       return { ok: true, latencyMs };
     }
     const text = await resp.text().catch(() => "");
@@ -1535,9 +1592,13 @@ async function handleVoiceEndpointTest(body) {
     } catch {
       // Keep generic HTTP status message.
     }
-    // Friendly message when the deployment name itself is not found (key is fine)
-    if (resp.status === 404 && deployment) {
-      error = `Deployment "${deployment}" not found — check deployment name in Azure AI Foundry`;
+    // Azure-specific: provide helpful messages for common errors
+    if (normalizedProvider === "azure") {
+      if (resp.status === 401 || resp.status === 403) {
+        error = `Authentication failed (HTTP ${resp.status}) — check API key and endpoint URL`;
+      } else if (resp.status === 404) {
+        error = `Endpoint not found (HTTP 404) — check the Azure endpoint URL. Use https://<resource>.openai.azure.com`;
+      }
     }
     return { ok: false, error, latencyMs };
   } catch (err) {

package/setup.mjs

@@ -1955,7 +1955,7 @@ function normalizeSetupConfiguration({
   env.VOICE_TURN_DETECTION = normalizeEnum(
     env.VOICE_TURN_DETECTION,
     ["server_vad", "semantic_vad", "none"],
-    "server_vad",
+    "semantic_vad",
   );
   env.VOICE_FALLBACK_MODE = normalizeEnum(
     env.VOICE_FALLBACK_MODE,
@@ -3305,7 +3305,7 @@ async function main() {
       );
       env.VOICE_TURN_DETECTION = await prompt.ask(
         "Turn detection (server_vad|semantic_vad|none)",
-        process.env.VOICE_TURN_DETECTION || "server_vad",
+        process.env.VOICE_TURN_DETECTION || "semantic_vad",
       );
       env.VOICE_FALLBACK_MODE = await prompt.ask(
         "Fallback mode (browser|disabled)",
@@ -5659,7 +5659,7 @@ async function runNonInteractive({
   env.AZURE_OPENAI_REALTIME_DEPLOYMENT =
     process.env.AZURE_OPENAI_REALTIME_DEPLOYMENT || "gpt-realtime-1.5";
   env.VOICE_ID = process.env.VOICE_ID || "alloy";
-  env.VOICE_TURN_DETECTION = process.env.VOICE_TURN_DETECTION || "server_vad";
+  env.VOICE_TURN_DETECTION = process.env.VOICE_TURN_DETECTION || "semantic_vad";
   env.VOICE_FALLBACK_MODE = process.env.VOICE_FALLBACK_MODE || "browser";
   env.VOICE_DELEGATE_EXECUTOR =
     process.env.VOICE_DELEGATE_EXECUTOR ||