bosun 0.40.1 → 0.40.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bosun",
-  "version": "0.40.1",
+  "version": "0.40.2",
   "description": "Bosun Autonomous Engineering — manages AI agent executors with failover, extremely powerful workflow builder, and a massive amount of included default workflow templates for autonomous engineering, creates PRs via Vibe-Kanban API, and sends Telegram notifications. Supports N executors with weighted distribution, multi-repo projects, and auto-setup.",
   "type": "module",
   "license": "Apache-2.0",

package/server/ui-server.mjs

@@ -278,6 +278,7 @@ const repoRoot = resolveRepoRoot();
 const uiRootPreferred = resolve(__dirname, "..", "ui");
 const uiRootFallback = resolve(__dirname, "..", "site", "ui");
 const uiRoot = existsSync(uiRootPreferred) ? uiRootPreferred : uiRootFallback;
+const sharedLibRoot = resolve(__dirname, "..", "lib");
 const libraryInitAttemptedRoots = new Set();
 const MAX_VISION_FRAME_BYTES = Math.max(
   128_000,
@@ -14739,9 +14740,14 @@ async function handleStatic(req, res, url) {
     return;
   }
   const pathname = rawPathname === "/" ? "/index.html" : rawPathname;
-  const filePath = resolve(uiRoot, `.${pathname}`);
-
-  if (!filePath.startsWith(uiRoot)) {
+  const isSharedLibRequest = pathname === "/lib" || pathname.startsWith("/lib/");
+  const staticRoot = isSharedLibRequest ? sharedLibRoot : uiRoot;
+  const staticPathname = isSharedLibRequest
+    ? pathname.slice(4) || "/"
+    : pathname;
+  const filePath = resolve(staticRoot, `.${staticPathname}`);
+
+  if (!filePath.startsWith(staticRoot)) {
     textResponse(res, 403, "Forbidden");
     return;
   }

package/ui/tabs/tasks.js

@@ -450,6 +450,8 @@ function normalizeSprintOptions(raw) {
         label: toText(entry.label || entry.title || entry.name, id),
         status: toText(entry.status),
         goal: toText(entry.goal),
+        executionMode: toText(entry.executionMode || entry.taskOrderMode || entry.sprintOrderMode || "parallel", "parallel"),
+        taskOrderMode: toText(entry.taskOrderMode || entry.executionMode || entry.sprintOrderMode || "parallel", "parallel"),
       };
     })
     .filter(Boolean);
@@ -3555,7 +3557,7 @@ export function TasksTab() {
     const nextGlobalGraph = normalizeDagGraph(globalSource, "DAG of DAGs");
 
     const sprintMetaEntry = sprintOptions.find((entry) => entry.id === resolvedSprint) || null;
-    setDagSprintOrderMode(toText(sprintMetaEntry?.sprintOrderMode || "parallel", "parallel"));
+    setDagSprintOrderMode(toText(sprintMetaEntry?.executionMode || sprintMetaEntry?.taskOrderMode || sprintMetaEntry?.sprintOrderMode || "parallel", "parallel"));
     setDagSprints(sprintOptions);
     setDagSprintGraph(nextSprintGraph);
     setDagGlobalGraph(nextGlobalGraph);
@@ -3912,7 +3914,7 @@ export function TasksTab() {
     try {
       await apiFetch(`/api/tasks/sprints/${encodeURIComponent(dagSelectedSprint)}`, {
         method: "PATCH",
-        body: JSON.stringify({ sprintOrderMode: nextMode }),
+        body: JSON.stringify({ executionMode: nextMode, taskOrderMode: nextMode, sprintOrderMode: nextMode }),
       });
       showToast("Sprint execution mode updated", "success");
       await loadDagViews();