bosun 0.41.2 → 0.41.4

package/infra/monitor.mjs

@@ -659,7 +659,11 @@ async function ensureWorkflowAutomationEngine() {
       if (typeof workflowTemplates?.reconcileInstalledTemplates === "function") {
         const reconcile = workflowTemplates.reconcileInstalledTemplates(engine, {
           autoUpdateUnmodified: true,
-          forceUpdateTemplateIds: ["template-task-lifecycle", "template-task-finalization-guard"],
+          forceUpdateTemplateIds: [
+            "template-task-lifecycle",
+            "template-task-finalization-guard",
+            "template-agent-session-monitor",
+          ],
         });
         if (Number(reconcile?.autoUpdated || 0) > 0) {
           console.log(
@@ -720,6 +724,13 @@ async function ensureWorkflowAutomationEngine() {
           );
         }
       }
+
+      // Resume runs paused by a previous monitor shutdown after services are wired.
+      if (typeof engine.resumeInterruptedRuns === "function") {
+        engine.resumeInterruptedRuns().catch((err) => {
+          console.warn(`[workflows] Failed to resume interrupted runs: ${err?.message || err}`);
+        });
+      }
       workflowAutomationInitDone = true;
       return engine;
     } catch (err) {
@@ -6867,8 +6878,8 @@ async function checkMergedPRsAndUpdateTasks() {
       );
       try {
         setInternalTaskStatus(taskId, "done", "review-merge-reconcile");
-      } catch {
-        /* best-effort */
+      } catch (internalErr) {
+        console.warn(`[monitor] review reconcile: setInternalTaskStatus failed for ${taskId}: ${internalErr?.message?.slice(0, 200)}`);
       }
       try {
         updateInternalTask(taskId, {
@@ -6879,20 +6890,23 @@ async function checkMergedPRsAndUpdateTasks() {
             resolvedRepoSlug ||
             undefined,
         });
-      } catch {
-        /* best-effort */
+      } catch (metaErr) {
+        console.warn(`[monitor] review reconcile: updateInternalTask failed for ${taskId}: ${metaErr?.message?.slice(0, 200)}`);
       }
       try {
         await updateTaskStatus(taskId, "done", {
           source: "review-merge-reconcile",
+          bypassWorkflowOwnership: true,
           workflowData: {
             prNumber,
             prUrl,
             repository: resolvedRepoSlug || task?.repository || null,
           },
         });
-      } catch {
-        /* best-effort */
+      } catch (reconcileErr) {
+        console.warn(
+          `[monitor] review reconcile: failed to update kanban status for ${taskId}: ${reconcileErr?.message?.slice(0, 200)}`,
+        );
       }
       summary.movedDone += 1;
     }
@@ -8009,7 +8023,8 @@ async function triggerFlowPostReviewMerge(taskId, context = {}) {
   const autoArgs = ["pr", "merge", String(prNumber)];
   if (resolvedRepoSlug) autoArgs.push("--repo", resolvedRepoSlug);
   autoArgs.push("--body", buildFlowGateMergeBody(taskTitle, id));
-  autoArgs.push("--auto", "--squash");
+  const mergeMethod = process.env.BOSUN_MERGE_METHOD || "merge";
+  autoArgs.push("--auto", `--${mergeMethod}`);
 
   const autoResult = spawnSync("gh", autoArgs, {
     cwd: repoRoot,
@@ -8031,7 +8046,7 @@ async function triggerFlowPostReviewMerge(taskId, context = {}) {
     const directArgs = ["pr", "merge", String(prNumber)];
     if (resolvedRepoSlug) directArgs.push("--repo", resolvedRepoSlug);
     directArgs.push("--body", buildFlowGateMergeBody(taskTitle, id));
-    directArgs.push("--squash");
+    directArgs.push(`--${mergeMethod}`);
     const directResult = spawnSync("gh", directArgs, {
       cwd: repoRoot,
       encoding: "utf8",
@@ -14774,6 +14789,17 @@ async function syncDivergedWorktrees() {
         continue;
       }
 
+      // Safety: refuse to push if HEAD now equals origin/main (would wipe PR changes)
+      try {
+        const headSha = execSync("git rev-parse HEAD", { cwd: wtPath, encoding: "utf8", timeout: 5_000, stdio: ["pipe", "pipe", "pipe"] }).trim();
+        const mainSha = execSync("git rev-parse origin/main", { cwd: wtPath, encoding: "utf8", timeout: 5_000, stdio: ["pipe", "pipe", "pipe"] }).trim();
+        if (headSha === mainSha) {
+          console.warn(`[monitor:worktree-sync] ${branch} HEAD matches origin/main after rebase — aborting push to prevent PR wipe`);
+          failed++;
+          continue;
+        }
+      } catch { /* best-effort check */ }
+
       // Push with --force-with-lease (safe: we just fetched fresh remote refs)
       try {
         execSync(`git push --force-with-lease --set-upstream origin HEAD`, {

package/infra/session-tracker.mjs

@@ -240,16 +240,18 @@ export class SessionTracker {
       if (!session) return;
     }
 
-    session.totalEvents++;
-    session.lastActivityAt = Date.now();
-    session.lastActiveAt = new Date().toISOString();
-
     const maxMessages =
       session.maxMessages === null || session.maxMessages === undefined
         ? this.#maxMessages
         : session.maxMessages;
+    const markActivity = () => {
+      session.totalEvents++;
+      session.lastActivityAt = Date.now();
+      session.lastActiveAt = new Date().toISOString();
+    };
 
     if (typeof event === "string" && event.trim()) {
+      markActivity();
       const msg = {
         type: "system",
         content: event.trim().slice(0, MAX_MESSAGE_CHARS),
@@ -267,8 +269,9 @@ export class SessionTracker {
 
     // Direct message format (role/content)
     if (event && event.role && event.content !== undefined) {
+      markActivity();
       const msg = {
-      id: event.id || `msg-${Date.now()}-${randomToken(6)}`,
+        id: event.id || `msg-${Date.now()}-${randomToken(6)}`,
         type: event.type || undefined,
         role: event.role,
         content: String(event.content).slice(0, MAX_MESSAGE_CHARS),
@@ -299,10 +302,10 @@ export class SessionTracker {
 
     const msg = this.#normalizeEvent(event);
     if (!msg) {
-      this.#markDirty(taskId);
-      return; // Skip uninteresting events — still update timestamp
+      return; // Ignore low-signal events that should not mask idle/stalled sessions
     }
 
+    markActivity();
     // Push to ring buffer (keep only last N)
     session.messages.push(msg);
     if (Number.isFinite(maxMessages) && maxMessages > 0) {

package/kanban/kanban-adapter.mjs

@@ -912,6 +912,15 @@ class InternalAdapter {
     if (typeof patch.workspace === "string") updates.workspace = patch.workspace;
     if (typeof patch.repository === "string") updates.repository = patch.repository;
     if (Array.isArray(patch.repositories)) updates.repositories = patch.repositories;
+    if (hasOwnField(patch, "workflowRuns")) updates.workflowRuns = patch.workflowRuns;
+    if (hasOwnField(patch, "workflowHistory")) updates.workflowHistory = patch.workflowHistory;
+    if (hasOwnField(patch, "workflows")) updates.workflows = patch.workflows;
+    if (hasOwnField(patch, "cooldownUntil")) {
+      updates.cooldownUntil = normalizeTaskStringField(patch.cooldownUntil);
+    }
+    if (hasOwnField(patch, "blockedReason")) {
+      updates.blockedReason = normalizeTaskStringField(patch.blockedReason);
+    }
     if (typeof patch.branchName === "string") {
       updates.branchName = patch.branchName.trim() || null;
     }
@@ -950,6 +959,7 @@ class InternalAdapter {
       }
     }
     const current = getInternalTask(normalizedId);
+    const replaceMeta = patch.replaceMeta === true;
     if (baseBranch) {
       updates.baseBranch = baseBranch;
     }
@@ -967,7 +977,7 @@ class InternalAdapter {
     if (hasOwnField(patch, "dueDate") || dueDate) updates.dueDate = dueDate;
     if (patch.meta && typeof patch.meta === "object") {
       updates.meta = {
-        ...(current?.meta || {}),
+        ...(replaceMeta ? {} : (current?.meta || {})),
         ...patch.meta,
         ...((assigneeProvided || assignee || assignees.length > 0)
           ? {
@@ -1015,6 +1025,9 @@ class InternalAdapter {
       taskData.parentTaskId ?? taskData.meta?.parentTaskId,
     );
     const dueDate = normalizeTaskStringField(taskData.dueDate ?? taskData.meta?.dueDate);
+    const blockedReason = normalizeTaskStringField(
+      taskData.blockedReason ?? taskData.meta?.blockedReason,
+    );
     const created = addInternalTask({
       id,
       title: taskData.title || "Untitled task",
@@ -1026,6 +1039,7 @@ class InternalAdapter {
       storyPoints,
       parentTaskId,
       dueDate,
+      blockedReason,
       priority: taskData.priority || null,
       tags,
       draft,
@@ -1059,6 +1073,7 @@ class InternalAdapter {
         ...(storyPoints != null ? { storyPoints } : {}),
         ...(parentTaskId ? { parentTaskId } : {}),
         ...(dueDate ? { dueDate } : {}),
+        ...(blockedReason ? { blockedReason } : {}),
         ...(taskData.workspace ? { workspace: taskData.workspace } : {}),
         ...(taskData.repository || taskData.repo
           ? { repository: taskData.repository || taskData.repo }
@@ -6149,3 +6164,4 @@ export async function unmarkTaskIgnored(taskId) {
   );
   return false;
 }
+

package/lib/codebase-audit-manifests.mjs

@@ -0,0 +1,117 @@
+import { basename, dirname, extname, relative, resolve } from "node:path";
+
+function human(value) {
+  return String(value || "")
+    .replace(/[-_]+/g, " ")
+    .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
+    .replace(/\s+/g, " ")
+    .trim();
+}
+
+function toPosix(pathValue) {
+  return String(pathValue || "").replace(/\\/g, "/");
+}
+
+function roleFromPath(relPath, content, category) {
+  const base = basename(relPath, extname(relPath)).toLowerCase();
+  if (category === "test") return "Covers regression and behavior checks";
+  if (base === "cli") return "Routes the command-line entrypoint and subcommands";
+  if (base.includes("audit")) return "Implements codebase annotation auditing and reporting";
+  if (base.includes("config")) return "Loads and normalizes configuration state";
+  if (base.includes("server")) return "Hosts request handling and server lifecycle logic";
+  if (base.includes("hook")) return "Applies hook validation and workflow guardrails";
+  if (base.includes("index")) return "Exports the directory entrypoint and shared surface area";
+  if (base.includes("manager")) return "Coordinates lifecycle management and shared state";
+  if (base.includes("store")) return "Persists and retrieves shared state";
+  if (base.includes("parser")) return "Parses structured input into internal state";
+  if (base.includes("logger")) return "Formats and emits logging output";
+  if (/process\.argv|args\s*=\s*process\.argv|main\(/.test(content)) return "Runs command handling and process orchestration";
+  if (/createServer|express\(|fastify\(|http\.createServer/.test(content)) return "Serves HTTP-facing runtime behavior";
+  if (/readFileSync|writeFileSync|readdirSync|statSync|fs\./.test(content)) return "Performs filesystem discovery and state updates";
+  const dirName = human(dirname(relPath).split("/").filter(Boolean).pop() || "repository");
+  const baseName = human(base || "module");
+  return `Owns ${baseName} logic for ${dirName}`;
+}
+
+export function buildSummary(file, readText) {
+  const content = readText(file.absolutePath);
+  const prefix = roleFromPath(file.path, content, file.category);
+  const hints = [];
+  if (/export\s+(async\s+)?function|module\.exports|export\s+const|pub\s+fn|^func\s+/m.test(content)) hints.push("its public API");
+  if (/readFileSync|writeFileSync|mkdirSync|unlinkSync|execFileSync|spawn\(/.test(content)) hints.push("file or process side effects");
+  if (/describe\(|it\(|test\(/.test(content)) hints.push("test coverage");
+  const detail = hints.length > 0 ? `, including ${hints.slice(0, 2).join(" and ")}` : "";
+  return `${prefix}${detail}.`;
+}
+
+export function summaryFromLine(line, fallback) {
+  if (!line) return fallback;
+  return line.replace(/^\s*(?:\/\/|#)\s*(?:CLAUDE|BOSUN):SUMMARY\s*/i, "").trim() || fallback;
+}
+
+export function upsertManagedBlock(existing, block) {
+  const begin = "<!-- bosun-audit:begin -->";
+  const end = "<!-- bosun-audit:end -->";
+  if (!existing) return `${block}\n`;
+  const start = existing.indexOf(begin);
+  if (start !== -1) {
+    const finish = existing.indexOf(end, start + begin.length);
+    if (finish !== -1) {
+      const updated = `${existing.slice(0, start)}${block}${existing.slice(finish + end.length)}`;
+      return `${updated.trimEnd()}\n`;
+    }
+  }
+  return `${existing.trimEnd()}\n\n${block}\n`;
+}
+
+export function buildClaudeManifest(dirPath, entries, repoRoot, summarizeFile) {
+  const relDir = toPosix(relative(repoRoot, dirPath)) || ".";
+  const lines = [
+    "<!-- bosun-audit:begin -->",
+    "# CLAUDE.md",
+    "",
+    "## Protocol",
+    `- Start with \`grep -R \"CLAUDE:SUMMARY\" ${relDir === "." ? "." : relDir}\`.`,
+    "- Read files with warnings before editing adjacent code.",
+    "- Treat this file as a fast map, not exhaustive prose.",
+    "",
+    "## Files",
+  ];
+  for (const entry of entries.slice(0, 12)) {
+    const relFile = toPosix(relative(dirPath, resolve(repoRoot, entry.path))) || basename(entry.path);
+    lines.push(`- \`${relFile}\` - ${summaryFromLine(entry.summaryLine, summarizeFile(entry))}`);
+  }
+  if (entries.length > 12) lines.push(`- Remaining files: ${entries.length - 12} (see \`INDEX.map\`).`);
+  lines.push("", "## Validation", "- Run \`bosun audit conformity\` after documentation-only updates.", "- Regenerate with \`bosun audit manifest\` when file responsibilities change.", "<!-- bosun-audit:end -->");
+  return lines.join("\n");
+}
+
+export function buildAgentsManifest(dirPath, entries, repoRoot, summarizeFile) {
+  const relDir = toPosix(relative(repoRoot, dirPath)) || ".";
+  const scope = relDir === "." ? "repository root" : relDir;
+  const lines = [
+    "<!-- bosun-audit:begin -->",
+    "# AGENTS.md",
+    "",
+    "## Scope",
+    `Audit-managed quick guide for \`${scope}\`. Keep edits documentation-only unless deeper instructions say otherwise.`,
+    "",
+    "## Start Files",
+  ];
+  for (const entry of entries.slice(0, 8)) {
+    lines.push(`- \`${basename(entry.path)}\` - ${summaryFromLine(entry.summaryLine, summarizeFile(entry))}`);
+  }
+  lines.push(
+    "",
+    "## Workflow",
+    "- Read \`CLAUDE.md\` before broad file discovery.",
+    "- Prefer \`grep CLAUDE:SUMMARY\` over opening whole directories.",
+    "- Re-run \`bosun audit index\` after annotation updates.",
+    "",
+    "## Validation",
+    "- \`bosun audit conformity\`",
+    "- \`bosun audit trim\` when manifests drift or grow stale",
+    "<!-- bosun-audit:end -->",
+  );
+  return lines.join("\n");
+}

package/lib/codebase-audit.mjs

@@ -7,7 +7,14 @@ import {
   statSync,
   writeFileSync,
 } from "node:fs";
-import { basename, dirname, extname, relative, resolve } from "node:path";
+import { dirname, extname, relative, resolve } from "node:path";
+import {
+  buildAgentsManifest,
+  buildClaudeManifest,
+  buildSummary,
+  summaryFromLine,
+  upsertManagedBlock,
+} from "./codebase-audit-manifests.mjs";
 
 const SOURCE_TYPES = new Map([
   [".js", { language: "javascript", comment: "//" }],
@@ -77,14 +84,6 @@ function parseCliArgs(argv) {
   return { positionals, flags };
 }
 
-function human(value) {
-  return String(value || "")
-    .replace(/[-_]+/g, " ")
-    .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
-    .replace(/\s+/g, " ")
-    .trim();
-}
-
 function capitalize(value) {
   return value ? value.charAt(0).toUpperCase() + value.slice(1) : value;
 }
@@ -381,37 +380,7 @@ export function scanRepository(rootDir, options = {}) {
   return result;
 }
 
-function roleFromPath(relPath, content, category) {
-  const base = basename(relPath, extname(relPath)).toLowerCase();
-  if (category === "test") return "Covers regression and behavior checks";
-  if (base === "cli") return "Routes the command-line entrypoint and subcommands";
-  if (base.includes("audit")) return "Implements codebase annotation auditing and reporting";
-  if (base.includes("config")) return "Loads and normalizes configuration state";
-  if (base.includes("server")) return "Hosts request handling and server lifecycle logic";
-  if (base.includes("hook")) return "Applies hook validation and workflow guardrails";
-  if (base.includes("index")) return "Exports the directory entrypoint and shared surface area";
-  if (base.includes("manager")) return "Coordinates lifecycle management and shared state";
-  if (base.includes("store")) return "Persists and retrieves shared state";
-  if (base.includes("parser")) return "Parses structured input into internal state";
-  if (base.includes("logger")) return "Formats and emits logging output";
-  if (/process\.argv|args\s*=\s*process\.argv|main\(/.test(content)) return "Runs command handling and process orchestration";
-  if (/createServer|express\(|fastify\(|http\.createServer/.test(content)) return "Serves HTTP-facing runtime behavior";
-  if (/readFileSync|writeFileSync|readdirSync|statSync|fs\./.test(content)) return "Performs filesystem discovery and state updates";
-  const dirName = human(dirname(relPath).split("/").filter(Boolean).pop() || "repository");
-  const baseName = human(base || "module");
-  return `Owns ${baseName} logic for ${dirName}`;
-}
-
-function buildSummary(file) {
-  const content = readText(file.absolutePath);
-  const prefix = roleFromPath(file.path, content, file.category);
-  const hints = [];
-  if (/export\s+(async\s+)?function|module\.exports|export\s+const|pub\s+fn|^func\s+/m.test(content)) hints.push("its public API");
-  if (/readFileSync|writeFileSync|mkdirSync|unlinkSync|execFileSync|spawn\(/.test(content)) hints.push("file or process side effects");
-  if (/describe\(|it\(|test\(/.test(content)) hints.push("test coverage");
-  const detail = hints.length > 0 ? `, including ${hints.slice(0, 2).join(" and ")}` : "";
-  return `${prefix}${detail}.`;
-}
+const summarizeFile = (file) => buildSummary(file, readText);
 
 function buildCommentLine(commentPrefix, marker, text) {
   return `${commentPrefix} ${marker} ${text}`.trimEnd();
@@ -447,7 +416,7 @@ export function generateSummaries(rootDir, options = {}) {
   const scan = scanRepository(rootDir, options);
   const changed = updateFiles(
     scan.files.filter((file) => !file.hasSummary),
-    (file, content) => insertHeaderAnnotation(content, buildCommentLine(file.comment, "CLAUDE:SUMMARY", buildSummary(file))),
+    (file, content) => insertHeaderAnnotation(content, buildCommentLine(file.comment, "CLAUDE:SUMMARY", summarizeFile(file))),
     options,
   );
   return {
@@ -499,16 +468,16 @@ function findFunctionMatches(content, language) {
 
 function analyzeFunctionWarnings(segment) {
   const warnings = [];
-  if (/await\s+import\(|require\(|importlib\.import_module/.test(segment)) {
+  if (/await\s+import\(|\brequire\(|importlib\.import_module/.test(segment)) {
     warnings.push({ kind: "lazy-init", text: "Lazily resolves dependencies at runtime; preserve initialization order and cache behavior." });
   }
-  if (/if\s*\((?:!|typeof\s+)[^)]+\)\s*\{?[\s\S]{0,180}?=\s*(?:await\s+)?(?:new\s+|create|build|init|get|load)/.test(segment) || /sync\.Once|OnceLock|lazy_static!/.test(segment)) {
+  if (/if\s*\((?:!|typeof\s+)[^)]+\)\s*\{?[\s\S]{0,180}?=\s*(?:await\s+)?(?:new\s+|\b(?:create|build|init|get|load)\b)/.test(segment) || /sync\.Once|OnceLock|lazy_static!/.test(segment)) {
     warnings.push({ kind: "singleton", text: "Initializes shared state on demand; changing call order can duplicate or corrupt cached state." });
   }
-  if (/writeFile|appendFile|unlink|rmSync|mkdirSync|spawn\(|exec(?:File)?Sync|fork\(|process\.exit|std::fs::|std::process::Command|os\.WriteFile|os\.Remove|subprocess\./.test(segment)) {
+  if (/\b(?:writeFile|appendFile|unlink|rmSync|mkdirSync)|spawn\(|exec(?:File)?Sync|fork\(|process\.exit|std::fs::|std::process::Command|os\.WriteFile|os\.Remove|subprocess\./.test(segment)) {
     warnings.push({ kind: "side-effects", text: "Performs filesystem or process side effects; audit callers before reordering, retrying, or parallelizing." });
   }
-  if (/process\.env|os\.environ|getenv\(|std::env::var/.test(segment)) {
+  if (/(?:process\.env|os\.environ|\bgetenv\(|std::env::var)/.test(segment)) {
     warnings.push({ kind: "env", text: "Depends on ambient environment state; validate required variables before changing execution flow." });
   }
   return warnings;
@@ -574,73 +543,6 @@ export function generateWarnings(rootDir, options = {}) {
   };
 }
 
-function summaryFromLine(line, fallback) {
-  if (!line) return fallback;
-  return line.replace(/^\s*(?:\/\/|#)\s*(?:CLAUDE|BOSUN):SUMMARY\s*/i, "").trim() || fallback;
-}
-
-function upsertManagedBlock(existing, block) {
-  const begin = "<!-- bosun-audit:begin -->";
-  const end = "<!-- bosun-audit:end -->";
-  if (!existing) return `${block}\n`;
-  if (existing.includes(begin) && existing.includes(end)) {
-    return `${existing.replace(new RegExp(`${begin}[\\s\\S]*?${end}`), block).replace(/\s+$/, "")}\n`;
-  }
-  return `${existing.replace(/\s+$/, "")}\n\n${block}\n`;
-}
-
-function buildClaudeManifest(dirPath, entries, repoRoot) {
-  const relDir = toPosix(relative(repoRoot, dirPath)) || ".";
-  const lines = [
-    "<!-- bosun-audit:begin -->",
-    "# CLAUDE.md",
-    "",
-    "## Protocol",
-    `- Start with \`grep -R \"CLAUDE:SUMMARY\" ${relDir === "." ? "." : relDir}\`.`,
-    "- Read files with warnings before editing adjacent code.",
-    "- Treat this file as a fast map, not exhaustive prose.",
-    "",
-    "## Files",
-  ];
-  for (const entry of entries.slice(0, 12)) {
-    const relFile = toPosix(relative(dirPath, resolve(repoRoot, entry.path))) || basename(entry.path);
-    lines.push(`- \`${relFile}\` - ${summaryFromLine(entry.summaryLine, buildSummary(entry))}`);
-  }
-  if (entries.length > 12) lines.push(`- Remaining files: ${entries.length - 12} (see \`INDEX.map\`).`);
-  lines.push("", "## Validation", "- Run \`bosun audit conformity\` after documentation-only updates.", "- Regenerate with \`bosun audit manifest\` when file responsibilities change.", "<!-- bosun-audit:end -->");
-  return lines.join("\n");
-}
-
-function buildAgentsManifest(dirPath, entries, repoRoot) {
-  const relDir = toPosix(relative(repoRoot, dirPath)) || ".";
-  const scope = relDir === "." ? "repository root" : relDir;
-  const lines = [
-    "<!-- bosun-audit:begin -->",
-    "# AGENTS.md",
-    "",
-    "## Scope",
-    `Audit-managed quick guide for \`${scope}\`. Keep edits documentation-only unless deeper instructions say otherwise.`,
-    "",
-    "## Start Files",
-  ];
-  for (const entry of entries.slice(0, 8)) {
-    lines.push(`- \`${basename(entry.path)}\` - ${summaryFromLine(entry.summaryLine, buildSummary(entry))}`);
-  }
-  lines.push(
-    "",
-    "## Workflow",
-    "- Read \`CLAUDE.md\` before broad file discovery.",
-    "- Prefer \`grep CLAUDE:SUMMARY\` over opening whole directories.",
-    "- Re-run \`bosun audit index\` after annotation updates.",
-    "",
-    "## Validation",
-    "- \`bosun audit conformity\`",
-    "- \`bosun audit trim\` when manifests drift or grow stale",
-    "<!-- bosun-audit:end -->",
-  );
-  return lines.join("\n");
-}
-
 export function generateManifests(rootDir, options = {}) {
   const scan = scanRepository(rootDir, options);
   const byDirectory = new Map();
@@ -657,8 +559,8 @@ export function generateManifests(rootDir, options = {}) {
     const claudePath = resolve(dirPath, "CLAUDE.md");
     const agentsPath = resolve(dirPath, "AGENTS.md");
     if (!options.dryRun) {
-      writeFileSync(claudePath, upsertManagedBlock(existsSync(claudePath) ? readText(claudePath) : "", buildClaudeManifest(dirPath, entries, rootDir)), "utf8");
-      writeFileSync(agentsPath, upsertManagedBlock(existsSync(agentsPath) ? readText(agentsPath) : "", buildAgentsManifest(dirPath, entries, rootDir)), "utf8");
+      writeFileSync(claudePath, upsertManagedBlock(existsSync(claudePath) ? readText(claudePath) : "", buildClaudeManifest(dirPath, entries, rootDir, summarizeFile)), "utf8");
+      writeFileSync(agentsPath, upsertManagedBlock(existsSync(agentsPath) ? readText(agentsPath) : "", buildAgentsManifest(dirPath, entries, rootDir, summarizeFile)), "utf8");
     }
     changed.push(toPosix(relative(rootDir, claudePath)));
     changed.push(toPosix(relative(rootDir, agentsPath)));
@@ -680,7 +582,7 @@ export function buildIndexMap(rootDir, options = {}) {
   const indexPath = resolve(rootDir, "INDEX.map");
   const lines = ["# INDEX.map", ""];
   for (const file of scan.files) {
-    lines.push(`${file.path} => ${summaryFromLine(file.summaryLine, buildSummary(file))}`);
+    lines.push(`${file.path} => ${summaryFromLine(file.summaryLine, summarizeFile(file))}`);
   }
   if (!options.dryRun) writeFileSync(indexPath, `${lines.join("\n")}\n`, "utf8");
   return {
@@ -920,3 +822,4 @@ export async function runAuditCli(argv, io = {}) {
   const shouldFail = command === "conformity" || Boolean(flags.ci);
   return { exitCode: shouldFail && result.ok === false ? 1 : 0, result };
 }
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bosun",
-  "version": "0.41.2",
+  "version": "0.41.4",
   "description": "Bosun Autonomous Engineering — manages AI agent executors with failover, extremely powerful workflow builder, and a massive amount of included default workflow templates for autonomous engineering, creates PRs via Vibe-Kanban API, and sends Telegram notifications. Supports N executors with weighted distribution, multi-repo projects, and auto-setup.",
   "type": "module",
   "license": "Apache-2.0",
@@ -115,8 +115,8 @@
     "test:vitest": "node --max-old-space-size=4096 node_modules/vitest/vitest.mjs run --config vitest.config.mjs",
     "test:node": "node --import ./tests/node-test-bootstrap.mjs --test tests/*.node.test.mjs",
     "test:all": "npm run test:vitest && npm run test:node",
-    "test:e2e": "npx playwright test server/playwright-ui-e2e.mjs",
-    "test:e2e:all": "npx playwright test server/playwright-ui-e2e.mjs server/playwright-ui-smoke.mjs",
+    "test:e2e": "node --import ./tests/node-test-bootstrap.mjs --test tests/portal-ui-smoke.node.test.mjs",
+    "test:e2e:all": "node --import ./tests/node-test-bootstrap.mjs --test tests/portal-ui-smoke.node.test.mjs",
     "test:voice-provider-smoke": "vitest run --config vitest.config.mjs tests/voice-provider-smoke.test.mjs",
     "check:native-call-parity": "vitest run --config vitest.config.mjs tests/voice-provider-smoke.test.mjs tests/native-call-parity-checklist.test.mjs",
     "test:watch": "vitest",
@@ -158,17 +158,21 @@
     "agent/agent-event-bus.mjs",
     "agent/retry-queue.mjs",
     "agent/agent-pool.mjs",
+    "agent/agent-prompt-catalog.mjs",
     "agent/agent-prompts.mjs",
     "agent/agent-sdk.mjs",
     "agent/agent-work-report.mjs",
     "agent/analyze-agent-work-helpers.mjs",
     "agent/analyze-agent-work.mjs",
+    "agent/autofix-git.mjs",
     "infra/anomaly-detector.mjs",
     "agent/autofix.mjs",
+    "agent/autofix-prompts.mjs",
     "shell/claude-shell.mjs",
     "cli.mjs",
     "compat.mjs",
     "shell/codex-config.mjs",
+    "shell/codex-config-file.mjs",
     "bosun.config.example.json",
     "bosun.schema.json",
     "agent/bosun-skills.mjs",
@@ -176,7 +180,10 @@
     "shell/codex-model-profiles.mjs",
     "shell/codex-shell.mjs",
     "config/config.mjs",
+    "config/config-file-names.mjs",
     "config/config-doctor.mjs",
+    "config/executor-config.mjs",
+    "config/workspace-health.mjs",
     "git/conflict-resolver.mjs",
     "workspace/context-cache.mjs",
     "workspace/context-indexer.mjs",
@@ -204,12 +211,17 @@
     "git/git-editor-fix.mjs",
     "git/git-safety.mjs",
     "kanban/kanban-adapter.mjs",
+    "lib/codebase-audit-manifests.mjs",
     "lib/logger.mjs",
     "lib/codebase-audit.mjs",
+    "lib/codebase-audit-warnings.mjs",
     "lib/session-insights.mjs",
     "infra/library-manager.mjs",
+    "infra/library-manager-utils.mjs",
+    "infra/library-manager-well-known-sources.mjs",
     "infra/maintenance.mjs",
     "workflow/manual-flows.mjs",
+    "workflow/manual-flow-audit.mjs",
     "workflow/pipeline-workflows.mjs",
     "workflow/workflow-cli.mjs",
     "workflow/mcp-discovery-proxy.mjs",
@@ -280,6 +292,7 @@
     "voice/voice-agents-sdk.mjs",
     "voice/voice-relay.mjs",
     "voice/voice-tools.mjs",
+    "voice/voice-tool-definitions.mjs",
     "workspace/workspace-manager.mjs",
     "workspace/workspace-monitor.mjs",
     "workspace-reaper.mjs",
@@ -304,6 +317,8 @@
     "workflow/workflow-engine.mjs",
     "workflow/workflow-migration.mjs",
     "workflow/workflow-nodes.mjs",
+    "workflow/workflow-nodes/transforms.mjs",
+    "workflow/workflow-nodes/definitions.mjs",
     "workflow/workflow-nodes/custom-loader.mjs",
     "workflow/project-detection.mjs",
     "workflow/workflow-templates.mjs",