bosun 0.42.6 → 0.43.0

package/.env.example

@@ -91,8 +91,6 @@ TELEGRAM_MINIAPP_ENABLED=false
 # BOSUN_UI_BROWSER_OPEN_MODE=manual
 # Legacy auto-open toggle for UI server (requires BOSUN_UI_BROWSER_OPEN_MODE=auto)
 # BOSUN_UI_AUTO_OPEN_BROWSER=false
-# Daemon startup keeps browser auto-open disabled unless this is explicitly true.
-# BOSUN_UI_AUTO_OPEN_ON_DAEMON=false
 # Show full /?token=... browser URL in logs (default: false; token is hidden)
 # BOSUN_UI_LOG_TOKENIZED_BROWSER_URL=false
 # Setup wizard browser auto-open (default: true when mode=auto)
@@ -382,6 +380,12 @@ VOICE_DELEGATE_EXECUTOR=codex-sdk
 # INTERNAL_EXECUTOR_REVIEW_TIMEOUT_MS=300000
 # Experimental autonomous backlog replenishment (disabled by default)
 # INTERNAL_EXECUTOR_REPLENISH_ENABLED=false
+# Enable deterministic internal harness compile/activate control-plane support
+# BOSUN_HARNESS_ENABLED=false
+# Path to harness profile source (JSON or markdown fenced JSON)
+# BOSUN_HARNESS_SOURCE=.bosun/harness/internal-harness.md
+# Validation mode: off | report | enforce
+# BOSUN_HARNESS_VALIDATION_MODE=report
 # Minimum follow-up tasks to generate per completed task (1-2)
 # INTERNAL_EXECUTOR_REPLENISH_MIN_NEW_TASKS=1
 # Maximum follow-up tasks to generate per completed task (1-3)
@@ -498,6 +502,7 @@ VOICE_DELEGATE_EXECUTOR=codex-sdk
 #   internal - local task-store source of truth (recommended primary)
 #   github  - GitHub Issues
 #   jira    - Jira Issues
+#   gnap    - GNAP projection backend (off by default)
 # KANBAN_BACKEND=internal
 # Sync behavior:
 #   internal-primary - internal task-store remains source-of-truth (recommended)
@@ -598,6 +603,20 @@ VOICE_DELEGATE_EXECUTOR=codex-sdk
 # Optional JSON custom field to store full shared state payload
 # JIRA_CUSTOM_FIELD_SHARED_STATE=customfield_10048
 
+# GNAP backend (KANBAN_BACKEND=gnap)
+# Master toggle for GNAP integration. Must be enabled before selecting gnap.
+# GNAP_ENABLED=false
+# Path to the repo or clone that will host GNAP projection data
+# GNAP_REPO_PATH=
+# Synchronization mode. Bosun currently supports projection-only GNAP wiring.
+# GNAP_SYNC_MODE=projection
+# Where to store GNAP run metadata: git|local
+# GNAP_RUN_STORAGE=git
+# Where to store GNAP message projections: off|git|local
+# GNAP_MESSAGE_STORAGE=off
+# Optional sanitized roadmap export for shared visibility
+# GNAP_PUBLIC_ROADMAP_ENABLED=false
+
 # ─── Sandbox Policy ──────────────────────────────────────────────────────────
 # Controls agent sandbox isolation when using Codex SDK.
 # Options:
@@ -1020,17 +1039,8 @@ COPILOT_CLOUD_DISABLED=true
 # WORKFLOW_RECOVERY_BACKOFF_MAX_MS=60000
 # Random jitter ratio (0.0-0.9) applied to backoff to prevent retry storms.
 # WORKFLOW_RECOVERY_BACKOFF_JITTER_RATIO=0.2
-# Delay startup workflow recovery actions so the daemon can settle before
-# resuming interrupted runs or firing schedule/task-poll recovery.
-# WORKFLOW_RECOVERY_STARTUP_GRACE_MS=30000
-# Additional delay inserted between each startup recovery action.
-# WORKFLOW_RECOVERY_STARTUP_STEP_DELAY_MS=15000
-
-# Bosun MCP policy: by default Bosun-launched agents only receive validated
-# library-managed MCP servers, with required auth pulled from environment.
-# BOSUN_MCP_REQUIRE_AUTH=true
-# BOSUN_MCP_ALLOW_EXTERNAL_SOURCES=false
-# BOSUN_MCP_ALLOW_DEFAULT_SERVERS=false
+# Delay startup interrupted-run replay so the UI/API can become responsive first.
+# WORKFLOW_STARTUP_HISTORY_RECOVERY_DELAY_MS=120000
 
 # ─── GitHub Issue Reconciler ─────────────────────────────────────────────────
 # Periodically reconciles open GitHub issues against open/merged PRs.
@@ -1114,6 +1124,9 @@ COPILOT_CLOUD_DISABLED=true
 # Monitor source hot-reload watcher. Default: enabled in devmode, disabled otherwise.
 # Set to true to force-enable monitor source hot-restart, false to force-disable.
 # SELF_RESTART_WATCH_ENABLED=true
+# Quiet period after the last source-file change before self-restart is allowed.
+# Default: 180000 (3 minutes)
+# SELF_RESTART_QUIET_MS=180000
 # Status file path (default: .cache/orchestrator-status.json)
 # STATUS_FILE=.cache/orchestrator-status.json
 # Log directory (default: ./logs)
@@ -1156,5 +1169,3 @@ COPILOT_CLOUD_DISABLED=true
 
 # OpenTelemetry tracing (optional)
 # BOSUN_OTEL_ENDPOINT=http://localhost:4318/v1/traces
-
-

package/README.md

@@ -65,7 +65,7 @@ Open `https://localhost:3080` to start the setup wizard.
 
 Requires:
 
-- Node.js 18+
+- Node.js 22.13+
 - Git
 - Bash (for `.sh` wrappers) or PowerShell 7+ (for `.ps1` wrappers)
 - GitHub CLI (`gh`) recommended
@@ -144,16 +144,6 @@ Set `primaryAgent` in `.bosun/bosun.config.json` or choose an executor preset du
 - `bosun --daemon --sentinel` starts daemon + sentinel together (recommended for unattended operation).
 - `bosun --terminate` is the clean reset command when you suspect stale/ghost processes.
 
-## VS Code debugging
-
-Bosun now includes workspace debug entries in `.vscode/launch.json` and helper tasks in `.vscode/tasks.json`.
-
-- `Debug Bosun CLI` launches `cli.mjs` with the repo-local `.bosun` config and attaches the debugger to the real CLI entry path.
-- `Debug Bosun Monitor Direct` launches `infra/monitor.mjs` directly when you want to debug monitor logic without stepping through the CLI worker bootstrap.
-- `Debug Bosun Daemon Child (foreground)` runs the daemon-child path without detaching, which is useful for restart-loop and daemon-specific behavior.
-- `Attach to Bosun CLI Startup (9229)` and `Attach to Bosun Monitor Startup (9230)` start Bosun under `--inspect-brk` so you can catch startup failures before normal breakpoints would bind.
-- `Bosun: Terminate Runtime` is the cleanup task to use if a stale monitor/daemon is holding the lock before a debug session.
-
 Telegram operators can pull the weekly agent work summary with `/weekly [days]` or `/report weekly [days]`. To post it automatically once per week, set `TELEGRAM_WEEKLY_REPORT_ENABLED=true` together with `TELEGRAM_WEEKLY_REPORT_DAY`, `TELEGRAM_WEEKLY_REPORT_HOUR`, and optional `TELEGRAM_WEEKLY_REPORT_DAYS`.
 
 ## Documentation

package/agent/agent-event-bus.mjs

@@ -18,6 +18,12 @@
  *   createAgentEventBus(options) → AgentEventBus instance
  *   AgentEventBus class
  *   AGENT_EVENT  — Frozen enum of all event types
+ *
+ * Canonical architecture note:
+ * This bus is the canonical runtime ingress for live agent events into the
+ * observability spine. Surfaces may subscribe or rebroadcast, but canonical
+ * event normalization and harness telemetry recording must remain centralized
+ * here plus `infra/session-telemetry.mjs`.
  */
 
 import {
@@ -26,6 +32,12 @@ import {
   snapshotRetryQueue,
 } from "./retry-queue.mjs";
 import { addSpanEvent, recordAgentError, recordIntervention } from "../infra/tracing.mjs";
+import {
+  getHarnessTelemetrySummary,
+  listHarnessTelemetryEvents,
+  recordHarnessTelemetryEvent,
+} from "../infra/session-telemetry.mjs";
+import { normalizeCanonicalBusEvent } from "../infra/event-schema.mjs";
 
 const TAG = "[agent-event-bus]";
 
@@ -147,6 +159,7 @@ export class AgentEventBus {
         : (typeof globalThis.__bosun_setRetryQueueData === "function"
             ? globalThis.__bosun_setRetryQueueData
             : null);
+    this._configDir = options.configDir || process.cwd();
 
     /** @type {Array<{type: string, taskId: string, payload: object, ts: number}>} ring buffer */
     this._eventLog = [];
@@ -259,6 +272,7 @@ export class AgentEventBus {
     if (this._eventLog.length > this._maxEventLogSize) {
       this._eventLog.shift();
     }
+    this._recordCanonicalEvent(event);
 
     // ── WS broadcast
     if (!opts.skipBroadcast) {
@@ -589,6 +603,7 @@ export class AgentEventBus {
    */
   getStatus() {
     const retryQueue = snapshotRetryQueue(this._retryQueueState);
+    const observability = getHarnessTelemetrySummary({ configDir: this._configDir });
     return {
       started: this._started,
       eventLogSize: this._eventLog.length,
@@ -599,6 +614,10 @@ export class AgentEventBus {
       retryQueue,
       liveness: this.getAgentLiveness(),
       errorPatterns: this.getErrorPatternSummary(),
+      observability: {
+        eventCount: Number(observability?.eventCount || 0),
+        lastEventAt: observability?.lastEventAt || null,
+      },
     };
   }
 
@@ -606,6 +625,13 @@ export class AgentEventBus {
     return snapshotRetryQueue(this._retryQueueState);
   }
 
+  getCanonicalEventLog(filter = {}) {
+    return listHarnessTelemetryEvents({
+      ...filter,
+      source: filter.source || "agent-event-bus",
+    }, { configDir: this._configDir });
+  }
+
   clearRetryQueueTask(taskId, reason = "manual") {
     const id = String(taskId || "").trim();
     if (!id) return;
@@ -637,6 +663,13 @@ export class AgentEventBus {
     }
   }
 
+  _recordCanonicalEvent(event) {
+    recordHarnessTelemetryEvent(
+      normalizeCanonicalBusEvent(event),
+      { configDir: this._configDir },
+    );
+  }
+
   _updateRetryQueue(action, meta = {}) {
     this._retryQueueState = reduceRetryQueue(this._retryQueueState, action);
     const snapshot = snapshotRetryQueue(this._retryQueueState);
@@ -1100,5 +1133,3 @@ export class AgentEventBus {
 export function createAgentEventBus(options) {
   return new AgentEventBus(options);
 }
-
-

package/agent/agent-hooks.mjs

@@ -51,9 +51,6 @@ const MAX_OUTPUT_BYTES = 64 * 1024;
 /** Whether we're running on Windows */
 const IS_WINDOWS = process.platform === "win32";
 
-/** Preferred Windows shell for hook execution. */
-const WINDOWS_SHELL = process.env.ComSpec || "cmd.exe";
-
 /** Default max retries for retryable hooks */
 const DEFAULT_MAX_RETRIES = 2;
 
@@ -844,42 +841,6 @@ function _buildEnv(ctx) {
   return env;
 }
 
-function _getSpawnCommand(command) {
-  const trimmed = String(command ?? "").trim();
-
-  if (IS_WINDOWS) {
-    const lower = trimmed.toLowerCase();
-    if (lower.startsWith("powershell ") || lower.startsWith("powershell.exe ")) {
-      const inlineCommand = trimmed
-        .replace(/^powershell(?:\.exe)?\s+-NoProfile\s+-Command\s+/i, "")
-        .replace(/^powershell(?:\.exe)?\s+-Command\s+/i, "")
-        .replace(/^"|"$/g, "");
-      return {
-        file: "powershell.exe",
-        args: ["-NoProfile", "-Command", inlineCommand],
-      };
-    }
-    if (lower.startsWith("cmd ") || lower.startsWith("cmd.exe ")) {
-      const inlineCommand = trimmed
-        .replace(/^cmd(?:\.exe)?\s+\/d\s+\/s\s+\/c\s+/i, "")
-        .replace(/^cmd(?:\.exe)?\s+\/c\s+/i, "");
-      return {
-        file: WINDOWS_SHELL,
-        args: ["/d", "/s", "/c", inlineCommand],
-      };
-    }
-    return {
-      file: WINDOWS_SHELL,
-      args: ["/d", "/s", "/c", trimmed],
-    };
-  }
-
-  return {
-    file: "/bin/sh",
-    args: ["-c", trimmed],
-  };
-}
-
 // ── Internal: Synchronous Hook Execution ────────────────────────────────────
 
 /**
@@ -931,13 +892,12 @@ function _executeHookSync(hook, ctx, env) {
     };
 
     try {
-      const spawnTarget = _getSpawnCommand(hook.command);
-      const result = spawnSync(spawnTarget.file, spawnTarget.args, {
+      const result = spawnSync(hook.command, {
         cwd,
         env: hookEnv,
         encoding: "utf8",
         timeout,
-        shell: false,
+        shell: true,
         windowsHide: true,
         maxBuffer: MAX_OUTPUT_BYTES,
       });
@@ -1039,11 +999,10 @@ function _executeHookAsyncOnce(hook, ctx, env, attempt) {
 
     let child;
     try {
-      const spawnTarget = _getSpawnCommand(hook.command);
-      child = spawn(spawnTarget.file, spawnTarget.args, {
+      child = spawn(hook.command, {
         cwd,
         env: hookEnv,
-        shell: false,
+        shell: true,
         windowsHide: true,
         stdio: ["ignore", "pipe", "pipe"],
       });
@@ -1294,10 +1253,3 @@ export function registerLibraryHooks(hooksByEvent) {
   }
   return { registered, skipped };
 }
-
-
-
-
-
-
-