bosun 0.41.0 → 0.41.2

package/infra/session-tracker.mjs

@@ -13,9 +13,11 @@
 
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync, unlinkSync } from "node:fs";
 import { resolve, dirname } from "node:path";
+import { randomBytes } from "node:crypto";
 import { fileURLToPath } from "node:url";
 import { buildSessionInsights } from "../lib/session-insights.mjs";
 import { isTestRuntime } from "./test-runtime.mjs";
+import { addCompletedSession } from "./runtime-accumulator.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const SESSIONS_DIR = resolve(__dirname, "..", "logs", "sessions");
@@ -37,6 +39,15 @@ const MAX_MESSAGE_CHARS = 100_000;
 
 /** Maximum total sessions to keep in memory. */
 const MAX_SESSIONS = 100;
+const TERMINAL_SESSION_STATUSES = new Set(["completed", "failed", "idle", "archived"]);
+
+function isTerminalSessionStatus(status) {
+  return TERMINAL_SESSION_STATUSES.has(String(status || "").trim().toLowerCase());
+}
+
+function randomToken(length = 8) {
+  return randomBytes(Math.ceil(length / 2)).toString("hex").slice(0, length);
+}
 
 function resolveSessionTrackerPersistDir(options = {}) {
   if (options.persistDir !== undefined) {
@@ -182,6 +193,7 @@ export class SessionTracker {
       taskId,
       taskTitle,
       id: taskId,
+      sessionKey: `${taskId}:${Date.now()}:${randomToken(8)}`,
       type: "task",
       maxMessages: this.#maxMessages,
       startedAt: Date.now(),
@@ -192,6 +204,7 @@ export class SessionTracker {
       totalEvents: 0,
       turnCount: 0,
       status: "active",
+      accumulatedAt: null,
       lastActivityAt: Date.now(),
       metadata: {},
       insights: buildSessionInsights({ messages: [] }),
@@ -255,7 +268,7 @@ export class SessionTracker {
     // Direct message format (role/content)
     if (event && event.role && event.content !== undefined) {
       const msg = {
-        id: event.id || `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+      id: event.id || `msg-${Date.now()}-${randomToken(6)}`,
         type: event.type || undefined,
         role: event.role,
         content: String(event.content).slice(0, MAX_MESSAGE_CHARS),
@@ -312,25 +325,8 @@ export class SessionTracker {
     session.endedAt = Date.now();
     session.status = status;
     this.#refreshDerivedState(session);
+    this.#accumulateCompletedSession(session, taskId);
     this.#markDirty(taskId);
-
-    // Lazy import to avoid top-level await issues
-    import("./runtime-accumulator.mjs")
-      .then((module) => {
-        if (module.addCompletedSession) {
-          module.addCompletedSession({
-            id: taskId,
-            taskId: taskId,
-            taskTitle: session.taskTitle,
-            executor: session.executor,
-            model: session.model,
-            startedAt: session.startedAt,
-            endedAt: session.endedAt,
-            status: status,
-          });
-        }
-      })
-      .catch(() => {});
   }
 
   /**
@@ -494,6 +490,8 @@ export class SessionTracker {
    * @param {string} taskId
    */
   removeSession(taskId) {
+    const session = this.#sessions.get(taskId);
+    this.#accumulateCompletedSession(session, taskId);
     this.#sessions.delete(taskId);
     this.#dirty.delete(taskId);
     // Remove persisted session file if it exists
@@ -525,7 +523,7 @@ export class SessionTracker {
    * Create a new session with explicit options.
    * @param {{ id: string, type?: string, taskId?: string, metadata?: Object }} opts
    */
-  createSession({ id, type = "manual", taskId, metadata = {}, maxMessages }) {
+  createSession({ id, type = "manual", taskId, metadata = {}, maxMessages, sessionKey }) {
     // Evict oldest non-active sessions if at capacity
     if (this.#sessions.size >= MAX_SESSIONS && !this.#sessions.has(id)) {
       this.#evictOldest();
@@ -542,6 +540,9 @@ export class SessionTracker {
       id,
       taskId: taskId || id,
       taskTitle: metadata.title || id,
+      sessionKey:
+        String(sessionKey || "").trim() ||
+        `${taskId || id}:${Date.now()}:${randomToken(8)}`,
       type,
       status: "active",
       createdAt: now,
@@ -552,6 +553,7 @@ export class SessionTracker {
       totalEvents: 0,
       turnCount: 0,
       lastActivityAt: Date.now(),
+      accumulatedAt: null,
       metadata,
       maxMessages: resolvedMax,
       insights: buildSessionInsights({ messages: [] }),
@@ -620,10 +622,11 @@ export class SessionTracker {
     const session = this.#sessions.get(sessionId);
     if (!session) return;
     session.status = status;
-    if (status === "completed" || status === "archived") {
+    if (status === "completed" || status === "archived" || status === "failed" || status === "idle") {
       session.endedAt = Date.now();
     }
     this.#refreshDerivedState(session);
+    this.#accumulateCompletedSession(session, sessionId);
     this.#markDirty(sessionId);
   }
 
@@ -696,7 +699,7 @@ export class SessionTracker {
       return { ok: false, error: "Only user messages can be edited" };
     }
 
-    target.id = target.id || `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+    target.id = target.id || `msg-${Date.now()}-${randomToken(6)}`;
     target.content = nextContent.slice(0, MAX_MESSAGE_CHARS);
     target.edited = true;
     target.editedAt = new Date().toISOString();
@@ -816,6 +819,7 @@ export class SessionTracker {
     const type = event._sessionType || "task";
     this.createSession({
       id: taskId,
+      sessionKey: `${taskId}:${Date.now()}:${randomToken(8)}`,
       type,
       taskId,
       metadata: { autoCreated: true },
@@ -837,7 +841,8 @@ export class SessionTracker {
         return (a[1].lastActivityAt || a[1].startedAt) - (b[1].lastActivityAt || b[1].startedAt);
       });
     const toEvict = sorted.slice(0, evictCount);
-    for (const [id] of toEvict) {
+    for (const [id, session] of toEvict) {
+      this.#accumulateCompletedSession(session, id);
       this.#sessions.delete(id);
     }
   }
@@ -857,6 +862,7 @@ export class SessionTracker {
         session.status = "completed";
         session.endedAt = now;
         this.#refreshDerivedState(session);
+        this.#accumulateCompletedSession(session, id);
         this.#markDirty(id);
         reaped++;
       }
@@ -880,6 +886,43 @@ export class SessionTracker {
     }
   }
 
+  #accumulateCompletedSession(session, fallbackTaskId = "") {
+    if (!session || session.accumulatedAt) return false;
+    if (!isTerminalSessionStatus(session.status)) return false;
+    const taskId = String(session.taskId || session.id || fallbackTaskId || "").trim();
+    if (!taskId) return false;
+
+    const now = Date.now();
+    const endedAt = Number.isFinite(Number(session.endedAt)) && Number(session.endedAt) > 0
+      ? Number(session.endedAt)
+      : now;
+    const startedAt = Number.isFinite(Number(session.startedAt))
+      ? Number(session.startedAt)
+      : endedAt;
+    const tokenUsage = session.insights?.tokenUsage || null;
+
+    addCompletedSession({
+      id: session.id || taskId,
+      sessionId: session.id || taskId,
+      sessionKey: session.sessionKey || `${taskId}:${startedAt}:${endedAt}`,
+      taskId,
+      taskTitle: session.taskTitle,
+      executor: session.executor,
+      model: session.model,
+      startedAt,
+      endedAt,
+      durationMs: Math.max(0, endedAt - startedAt),
+      tokenCount: tokenUsage?.totalTokens || 0,
+      inputTokens: tokenUsage?.inputTokens || 0,
+      outputTokens: tokenUsage?.outputTokens || 0,
+      tokenUsage,
+      insights: session.insights || null,
+      status: String(session.status || "completed"),
+    });
+    session.accumulatedAt = new Date().toISOString();
+    return true;
+  }
+
   #refreshDerivedState(session) {
     if (!session) return;
     try {
@@ -917,10 +960,14 @@ export class SessionTracker {
           taskId: session.taskId,
           title: session.taskTitle || session.title || null,
           taskTitle: session.taskTitle || null,
+          sessionKey: session.sessionKey || null,
           type: session.type || "task",
           status: session.status,
           createdAt: session.createdAt || new Date(session.startedAt).toISOString(),
           lastActiveAt: session.lastActiveAt || new Date(session.lastActivityAt).toISOString(),
+          startedAt: session.startedAt || null,
+          endedAt: session.endedAt || null,
+          accumulatedAt: session.accumulatedAt || null,
           turnCount: session.turnCount || 0,
           messages: session.messages || [],
           metadata: session.metadata || {},
@@ -987,20 +1034,30 @@ export class SessionTracker {
         this.#sessions.set(id, {
           id,
           taskId: data.taskId || id,
-          taskTitle: data.metadata?.title || id,
+          taskTitle: data.taskTitle || data.title || data.metadata?.title || id,
+          sessionKey:
+            String(data.sessionKey || "").trim() ||
+            `${data.taskId || id}:${data.startedAt || Date.now()}:${endedAt || data.startedAt || Date.now()}`,
           type: data.type || "task",
           status,
           createdAt: data.createdAt || new Date().toISOString(),
           lastActiveAt: data.lastActiveAt || new Date().toISOString(),
-          startedAt: data.createdAt ? new Date(data.createdAt).getTime() : Date.now(),
+          startedAt: data.startedAt || (data.createdAt ? new Date(data.createdAt).getTime() : Date.now()),
           endedAt,
           messages: data.messages || [],
           totalEvents: (data.messages || []).length,
           turnCount: data.turnCount || 0,
+          accumulatedAt: data.accumulatedAt || null,
           lastActivityAt: lastActive || Date.now(),
           metadata: data.metadata || {},
           insights: data.insights || buildSessionInsights({ messages: data.messages || [] }),
         });
+        const restored = this.#sessions.get(id);
+        if (restored && isTerminalSessionStatus(restored.status) && !restored.accumulatedAt) {
+          if (this.#accumulateCompletedSession(restored, id)) {
+            this.#markDirty(id);
+          }
+        }
       }
     } catch {
       // Directory read failed — proceed without disk data

package/lib/codebase-audit.mjs

@@ -23,8 +23,6 @@ const SOURCE_TYPES = new Map([
 
 const SUMMARY_MARKERS = ["CLAUDE:SUMMARY", "BOSUN:SUMMARY"];
 const WARN_MARKERS = ["CLAUDE:WARN", "BOSUN:WARN"];
-const SUMMARY_LINE_RE = /^\s*(?:\/\/|#)\s*(?:CLAUDE|BOSUN):SUMMARY\b/i;
-const WARN_LINE_RE = /^\s*(?:\/\/|#)\s*(?:CLAUDE|BOSUN):WARN\b/i;
 const GENERATED_PATTERNS = [
   /^\.git(?:\/|$)/,
   /^node_modules(?:\/|$)/,
@@ -151,6 +149,101 @@ function getSourceType(pathValue) {
   return SOURCE_TYPES.get(extname(pathValue).toLowerCase()) || null;
 }
 
+function parseImportSpecifiers(content, language) {
+  if (language !== "javascript" && language !== "typescript") return [];
+  const specs = new Set();
+  const importRegex = /import\s+(?:[^"'`]+?\s+from\s+)?["'`]([^"'`]+)["'`]/g;
+  const dynamicImportRegex = /import\(\s*["'`]([^"'`]+)["'`]\s*\)/g;
+  const requireRegex = /require\(\s*["'`]([^"'`]+)["'`]\s*\)/g;
+  for (const pattern of [importRegex, dynamicImportRegex, requireRegex]) {
+    let match;
+    while ((match = pattern.exec(content)) !== null) {
+      if (match[1]) specs.add(match[1]);
+    }
+    pattern.lastIndex = 0;
+  }
+  return [...specs];
+}
+
+function resolveLocalImportPath(repoRoot, fromFile, specifier) {
+  if (!specifier || !specifier.startsWith(".")) return "";
+  const fromDir = dirname(fromFile);
+  const absoluteBase = resolve(fromDir, specifier);
+  const candidates = [
+    absoluteBase,
+    `${absoluteBase}.js`,
+    `${absoluteBase}.mjs`,
+    `${absoluteBase}.cjs`,
+    `${absoluteBase}.ts`,
+    `${absoluteBase}.tsx`,
+    `${absoluteBase}.jsx`,
+    resolve(absoluteBase, "index.js"),
+    resolve(absoluteBase, "index.mjs"),
+    resolve(absoluteBase, "index.cjs"),
+    resolve(absoluteBase, "index.ts"),
+    resolve(absoluteBase, "index.tsx"),
+    resolve(absoluteBase, "index.jsx"),
+  ];
+  for (const candidate of candidates) {
+    const info = safeStat(candidate);
+    if (info?.isFile()) return toPosix(relative(repoRoot, candidate));
+  }
+  return "";
+}
+
+function findCycleMembers(edgesByFile) {
+  const states = new Map();
+  const stack = [];
+  const inCycles = new Set();
+
+  function visit(node) {
+    const state = states.get(node) || 0;
+    if (state === 2) return;
+    if (state === 1) {
+      const cycleStart = stack.lastIndexOf(node);
+      if (cycleStart >= 0) {
+        for (let index = cycleStart; index < stack.length; index += 1) inCycles.add(stack[index]);
+        inCycles.add(node);
+      }
+      return;
+    }
+    states.set(node, 1);
+    stack.push(node);
+    for (const dep of edgesByFile.get(node) || []) visit(dep);
+    stack.pop();
+    states.set(node, 2);
+  }
+
+  for (const node of edgesByFile.keys()) visit(node);
+  return inCycles;
+}
+
+function appendCircularDependencyWarnings(files, repoRoot, warningKinds) {
+  const sourceSet = new Set(files.map((file) => file.path));
+  const edgesByFile = new Map();
+  for (const file of files) {
+    if (file.language !== "javascript" && file.language !== "typescript") continue;
+    const deps = [];
+    for (const specifier of file.importSpecifiers || []) {
+      const resolved = resolveLocalImportPath(repoRoot, file.absolutePath, specifier);
+      if (resolved && sourceSet.has(resolved)) deps.push(resolved);
+    }
+    edgesByFile.set(file.path, deps);
+  }
+  const cycleMembers = findCycleMembers(edgesByFile);
+  for (const file of files) {
+    if (!cycleMembers.has(file.path)) continue;
+    if (file.warnings.some((warning) => warning.kind === "circular-deps")) continue;
+    file.warnings.push({
+      kind: "circular-deps",
+      text: "Module participates in circular dependency chains; avoid reordering imports or eager top-level side effects.",
+      functionName: "__module__",
+      lineIndex: file.firstFunctionLine,
+    });
+    warningKinds["circular-deps"] = (warningKinds["circular-deps"] || 0) + 1;
+  }
+}
+
 function detectCategory(relPath) {
   if (/(^|\/)(tests?|__tests__|fixtures?|sandbox)(\/|$)|\.(test|spec)\./i.test(relPath)) return "test";
   if (/(^|\/)(config|configs)(\/|$)|(^|\/)(AGENTS|CLAUDE)\.md$/i.test(relPath)) return "config";
@@ -159,15 +252,20 @@ function detectCategory(relPath) {
   return "core";
 }
 
-function hasMarker(content, markers) {
-  const matcher = markers === SUMMARY_MARKERS ? SUMMARY_LINE_RE : WARN_LINE_RE;
-  return content.split(/\r?\n/).some((line) => matcher.test(line));
+function isAnnotationLine(line, markers) {
+  const trimmed = String(line || "").trim();
+  if (!trimmed.startsWith("//") && !trimmed.startsWith("#")) return false;
+  return markers.some((marker) => new RegExp(`\\b${marker}\\b`).test(trimmed));
 }
 
-function extractAnnotationLines(content) {
+function extractAnnotationLines(content, markers = SUMMARY_MARKERS) {
   const lines = content.split(/\r?\n/);
-  const summaryLine = lines.find((line) => SUMMARY_LINE_RE.test(line)) || "";
-  const warnLines = lines.filter((line) => WARN_LINE_RE.test(line));
+  return lines.filter((line) => isAnnotationLine(line, markers));
+}
+
+function collectAnnotations(content) {
+  const summaryLine = extractAnnotationLines(content, SUMMARY_MARKERS)[0] || "";
+  const warnLines = extractAnnotationLines(content, WARN_MARKERS);
   return { summaryLine, warnLines };
 }
 
@@ -210,7 +308,8 @@ export function scanRepository(rootDir, options = {}) {
     if (isGeneratedPath(relPath)) return;
 
     const content = readText(absolutePath);
-    const annotations = extractAnnotationLines(content);
+    const contentLines = content.split(/\r?\n/);
+    const annotations = collectAnnotations(content);
     const functionMatches = findFunctionMatches(content, sourceType.language);
     const warnings = analyzeFileWarnings(content, sourceType.language, functionMatches);
     for (const warning of warnings) {
@@ -223,12 +322,14 @@ export function scanRepository(rootDir, options = {}) {
       language: sourceType.language,
       extension: extname(absolutePath).toLowerCase(),
       comment: sourceType.comment,
-      lines: content === "" ? 0 : content.split(/\r?\n/).length,
+      lines: content === "" ? 0 : contentLines.length,
       category: detectCategory(relPath),
-      hasSummary: hasMarker(content, SUMMARY_MARKERS),
-      hasWarn: hasMarker(content, WARN_MARKERS),
+      hasSummary: annotations.summaryLine !== "",
+      hasWarn: annotations.warnLines.length > 0,
       summaryLine: annotations.summaryLine,
       warnLines: annotations.warnLines,
+      importSpecifiers: parseImportSpecifiers(content, sourceType.language),
+      firstFunctionLine: functionMatches[0]?.lineIndex ?? findInsertionIndex(contentLines),
       warnings,
     });
   }
@@ -261,6 +362,7 @@ export function scanRepository(rootDir, options = {}) {
     const relPath = toPosix(relative(repoRoot, targetDir));
     if (getSourceType(targetDir) && !isGeneratedPath(relPath)) addFile(targetDir);
   }
+  appendCircularDependencyWarnings(files, repoRoot, warningKinds);
 
   const result = {
     rootDir: repoRoot,
@@ -432,7 +534,7 @@ function hasNearbyWarn(lines, lineIndex) {
   const start = Math.max(0, lineIndex - 2);
   const end = Math.min(lines.length - 1, lineIndex + 1);
   for (let index = start; index <= end; index += 1) {
-    if (WARN_LINE_RE.test(lines[index])) return true;
+    if (isAnnotationLine(lines[index], WARN_MARKERS)) return true;
   }
   return false;
 }
@@ -447,8 +549,9 @@ export function generateWarnings(rootDir, options = {}) {
       const inserts = [];
       for (const warning of file.warnings) {
         if (hasNearbyWarn(lines, warning.lineIndex)) continue;
+        const preferredIndex = Number.isInteger(warning.lineIndex) ? warning.lineIndex : findInsertionIndex(lines);
         inserts.push({
-          index: warning.functionName ? warning.lineIndex : findInsertionIndex(lines),
+          index: warning.functionName ? preferredIndex : findInsertionIndex(lines),
           text: buildCommentLine(file.comment, "CLAUDE:WARN", warning.text),
         });
       }
@@ -618,7 +721,8 @@ function findStaleWarnings(content, language) {
   const matcher = patterns[language];
   if (!matcher) return stale;
   for (let index = 0; index < lines.length; index += 1) {
-    if (!WARN_LINE_RE.test(lines[index])) continue;
+    if (!isAnnotationLine(lines[index], WARN_MARKERS)) continue;
+    if (/circular dependency/i.test(lines[index])) continue;
     const window = lines.slice(index + 1, index + 5).join("\n");
     if (!matcher.test(window)) stale.push(index + 1);
   }
@@ -666,9 +770,21 @@ export function runConformity(rootDir, options = {}) {
 
 export function migrateAnnotations(rootDir, options = {}) {
   const scan = scanRepository(rootDir, options);
+  const migrateLegacyAnnotationMarkers = (content) =>
+    content
+      .replace(/BOSUN:SUMMARY/g, "CLAUDE:SUMMARY")
+      .replace(/BOSUN:WARN/g, "CLAUDE:WARN")
+      .replace(
+        /^(\s*(?:\/\/|#)\s*)(?:LEGACY:)?SUMMARY\s*[:\-]\s*/gim,
+        "$1CLAUDE:SUMMARY ",
+      )
+      .replace(
+        /^(\s*(?:\/\/|#)\s*)(?:LEGACY:)?WARN(?:ING)?\s*[:\-]\s*/gim,
+        "$1CLAUDE:WARN ",
+      );
   const changed = updateFiles(
-    scan.files.filter((file) => file.hasSummary || file.hasWarn),
-    (file, content) => content.replace(/BOSUN:SUMMARY/g, "CLAUDE:SUMMARY").replace(/BOSUN:WARN/g, "CLAUDE:WARN"),
+    scan.files,
+    (file, content) => migrateLegacyAnnotationMarkers(content),
     options,
   );
   return {
@@ -804,4 +920,3 @@ export async function runAuditCli(argv, io = {}) {
   const shouldFail = command === "conformity" || Boolean(flags.ci);
   return { exitCode: shouldFail && result.ok === false ? 1 : 0, result };
 }
-

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bosun",
-  "version": "0.41.0",
+  "version": "0.41.2",
   "description": "Bosun Autonomous Engineering — manages AI agent executors with failover, extremely powerful workflow builder, and a massive amount of included default workflow templates for autonomous engineering, creates PRs via Vibe-Kanban API, and sends Telegram notifications. Supports N executors with weighted distribution, multi-repo projects, and auto-setup.",
   "type": "module",
   "license": "Apache-2.0",
@@ -71,10 +71,17 @@
     "./container-runner": "./infra/container-runner.mjs",
     "./compat": "./compat.mjs",
     "./task-cli": "./task/task-cli.mjs",
+    "./task-pipeline": "./task/pipeline.mjs",
+    "./task-msg-hub": "./task/msg-hub.mjs",
+    "./workflow-cli": "./workflow/workflow-cli.mjs",
+    "./pipeline-workflows": "./workflow/pipeline-workflows.mjs",
     "./github-auth-manager": "./github/github-auth-manager.mjs",
     "./git-commit-helpers": "./git/git-commit-helpers.mjs",
     "./opencode-shell": "./shell/opencode-shell.mjs",
-    "./context-indexer": "./workspace/context-indexer.mjs"
+    "./context-indexer": "./workspace/context-indexer.mjs",
+    "./msg-hub": "./workflow/msg-hub.mjs",
+    "./declarative-workflows": "./workflow/declarative-workflows.mjs",
+    "./pipeline": "./workflow/pipeline.mjs"
   },
   "bin": {
     "bosun": "cli.mjs",
@@ -108,6 +115,8 @@
     "test:vitest": "node --max-old-space-size=4096 node_modules/vitest/vitest.mjs run --config vitest.config.mjs",
     "test:node": "node --import ./tests/node-test-bootstrap.mjs --test tests/*.node.test.mjs",
     "test:all": "npm run test:vitest && npm run test:node",
+    "test:e2e": "npx playwright test server/playwright-ui-e2e.mjs",
+    "test:e2e:all": "npx playwright test server/playwright-ui-e2e.mjs server/playwright-ui-smoke.mjs",
     "test:voice-provider-smoke": "vitest run --config vitest.config.mjs tests/voice-provider-smoke.test.mjs",
     "check:native-call-parity": "vitest run --config vitest.config.mjs tests/voice-provider-smoke.test.mjs tests/native-call-parity-checklist.test.mjs",
     "test:watch": "vitest",
@@ -147,6 +156,7 @@
     "agent/agent-custom-tools.mjs",
     "agent/agent-endpoint.mjs",
     "agent/agent-event-bus.mjs",
+    "agent/retry-queue.mjs",
     "agent/agent-pool.mjs",
     "agent/agent-prompts.mjs",
     "agent/agent-sdk.mjs",
@@ -200,7 +210,8 @@
     "infra/library-manager.mjs",
     "infra/maintenance.mjs",
     "workflow/manual-flows.mjs",
-    "workflow-templates/code-quality.mjs",
+    "workflow/pipeline-workflows.mjs",
+    "workflow/workflow-cli.mjs",
     "workflow/mcp-discovery-proxy.mjs",
     "workflow/mcp-workflow-adapter.mjs",
     "workflow/mcp-registry.mjs",
@@ -242,7 +253,10 @@
     "task/task-claims.mjs",
     "task/task-context.mjs",
     "task/task-attachments.mjs",
+    "task/pipeline.mjs",
+    "task/msg-hub.mjs",
     "task/task-executor.mjs",
+    "task/task-executor-pipeline.mjs",
     "task/task-store.mjs",
     "telegram/telegram-bot.mjs",
     "server/ui-server.mjs",
@@ -290,6 +304,7 @@
     "workflow/workflow-engine.mjs",
     "workflow/workflow-migration.mjs",
     "workflow/workflow-nodes.mjs",
+    "workflow/workflow-nodes/custom-loader.mjs",
     "workflow/project-detection.mjs",
     "workflow/workflow-templates.mjs",
     "workflow/workflow-contract.mjs",
@@ -308,11 +323,15 @@
     "workflow-templates/task-execution.mjs",
     "workflow-templates/task-lifecycle.mjs",
     "workflow-templates/issue-continuation.mjs",
+    "workflow-templates/continuation-loop.mjs",
+    "workflow-templates/code-quality.mjs",
     "workflow-templates/bosun-native.mjs",
     "bosun-tui.mjs",
     "tui/",
     "tools/",
-    "ui/vendor/"
+    "ui/vendor/",
+    "workflow/msg-hub.mjs",
+    "workflow/declarative-workflows.mjs"
   ],
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "latest",

package/server/setup-web-server.mjs

@@ -29,6 +29,7 @@ import {
   resolveWorkflowTemplateIds,
   normalizeTemplateOverridesById,
 } from "../workflow/workflow-templates.mjs";
+import { discoverTelegramChats } from "../telegram/get-telegram-chat-id.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -1981,6 +1982,20 @@ function handleValidate(body) {
   return { ok: true, valid: Object.keys(errors).length === 0, errors };
 }
 
+async function handleTelegramChatIdLookup(body) {
+  const token = String(body?.token || "").trim();
+  if (!token) {
+    return { ok: false, status: 400, error: "TELEGRAM_BOT_TOKEN is required" };
+  }
+
+  try {
+    const { chats, message } = await discoverTelegramChats(token);
+    return { ok: true, status: 200, chats, message };
+  } catch (err) {
+    return { ok: false, status: 500, error: err.message || String(err) };
+  }
+}
+
 function handleApply(body) {
   try {
     const { env = {}, configJson = {} } = body || {};
@@ -2579,6 +2594,15 @@ async function handleRequest(req, res) {
           }
           jsonResponse(res, 200, handleValidate(await readBody(req)));
           return;
+        case "telegram-chat-id": {
+          if (req.method !== "POST") {
+            jsonResponse(res, 405, { ok: false, error: "POST required" });
+            return;
+          }
+          const result = await handleTelegramChatIdLookup(await readBody(req));
+          jsonResponse(res, result.status, result);
+          return;
+        }
         case "apply":
           if (req.method !== "POST") {
             jsonResponse(res, 405, { ok: false, error: "POST required" });
@@ -2984,6 +3008,7 @@ export async function startSetupServer(options = {}) {
 export {
   applyTelegramMiniAppSetupEnv,
   applyNonBlockingSetupEnvDefaults,
+  handleTelegramChatIdLookup,
   normalizeWorkflowTemplateOverrides,
   normalizeTelegramUiPort,
   normalizeRepoConfigEntry,