Files
roboco/docs/rag/roles/product-owner.md
T
401f8a2cc9 feat(board): Board Programs — the complete twelve-program catalog (Phases 1-3) (#699)
* feat(board): Pest Control — the first project-scoped Board Program

The Product Owner hunts latent defects (what the org records but nobody
reads): a weekly cycle — accelerated off-schedule when the trailing-7-day
rework rate crosses pest_rework_threshold, with the cheap dedup/scope gates
evaluated before the metrics queries — opens one held exploration task
against the least-recently-explored opted-in project (deterministic
round-robin; opted_in_projects gains a stable ORDER BY), with server-
assembled evidence in the spawn prompt (rework hotspots, recurring-findings
and waived-minor ledger aggregates, all capped) plus prior-cycle LEARN
context. The PO calls the new PO-only propose_bug_hunt verb once: ≤5 items,
evidence required per item, targets validated against pest_control
participation. CEO decides per item — approve materializes a BACKLOG task
(source pest_control, never auto-starts), reject records the reason; both
feed the LEARN ledger by exploration task id; all-terminal completes the
cycle. Telegram queue pushes carry working Approve/Reject handlers
mirroring the roadmap kind. Doctrine: board.md Pest Control section +
product-owner verb entry + regenerated verb tables.

* feat(panel): Pest Control review queue

Command Center gains the pest review queue (per-item approve/reject with
reason, mirroring the roadmap queue); the Programs card and the project
settings participates-in checkboxes pick the new program up registry-driven
— the settings section renders for the first time now that a project-scoped
program exists.

* feat(board): Periscope — HoM market-research brief program

Weekly org-scoped cycle: a solo HoM spawn researches the market (web
research with mandatory source URLs — uncited findings are rejected) and
files one structured brief via the new HoM-only propose_market_brief verb:
headline, cited findings, threats/opportunities, positioning note, all
soup-checked and screened through the injection guard at persist time
(web-derived text later reaches prompts; flags recorded, content never
dropped). A brief is a report, not a proposal: the verb completes the
exploration in the same call (the x_feature asymmetry), the cycle ledger
auto-closes, and the CEO gets a best-effort notification with no
approve/reject surface (periscope deliberately never joins Telegram's
action kinds). The latest brief is injected into the roadmap exploration
prompt — Periscope feeds Printer, the first cross-role program input.

* feat(panel): Market Briefs tab (read-only)

Business page gains a Market Briefs tab listing Periscope briefs —
headline, cited findings, threats/opportunities — read-only by design; a
report has nothing to approve.

* feat(board): Coroner — event-triggered Auditor postmortems

The first EVENT program: no cron — three best-effort hooks open an autopsy
when a task bounces to its 3rd revision (the audit chokepoint), is
cancelled after work started, or is budget-blocked; all gated on arming +
one-open-autopsy dedup, none can fail the underlying transition. A solo
Auditor spawn reads the incident (server-assembled findings + transition
context) and files one propose_postmortem: incident summary, root cause,
failed stage (validated against the real status vocabulary), and ONE
process change — a playbook-kind change drafts via PlaybookService
directly into the normal pending-curation queue; the briefed draft_playbook
manifest grant was deliberately NOT added, preserving the existing
'auditor curates but never drafts' invariant test. Complete-at-propose
(report asymmetry), cycle ledger auto-closes, CEO notified link-only.
Integrated as a union with Periscope across the shared program surfaces.

* feat(panel): Coroner postmortems card

Read-only postmortems list under Business → Programs — incident, root
cause, failed stage, process change; nothing to approve, the process-change
artifact (a draft playbook) rides the existing curation queue.

* feat(board): Sentinel — Auditor drift-watch quality reports

Weekly org-scoped cycle: a solo Auditor spawn receives a server-assembled
drift context (waived-findings trend, open findings by severity,
conventions-violation hotspots, top spend — all capped, pure ORM) and files
one propose_quality_report: headline, 1-7 area-validated items with
evidence and suggested actions, overall assessment. Report semantics —
complete-at-propose, cycle auto-closes, CEO notified display-only (never on
Telegram's approve/reject surface); items are structured so a later
convert-to-task control is cheap. Integration adopts Sentinel's module-
level dict-dispatch for board-program routing (xenon-driven), folding all
prior programs in; app router mounting extracted to a helper for the same
budget.

* feat(panel): Quality Reports tab (read-only)

Business page gains the Sentinel quality-reports tab — headline, per-area
observations with evidence and suggested actions; read-only, a report has
nothing to approve.

* feat(board): Spackle — gap-fill audit program

Biweekly project-scoped PO cycle over the half-shipped surface area: API
routes without panel surfaces (and vice versa), armed flags without docs,
docs promises the code doesn't keep, dead-end tabs — the inventory diffing
is the PO's own read-tool work, ordered by the spawn prompt with file:line
citations required; the server injects only prior-cycle LEARN and the
rotation target. Rotation is now a shared module-level helper
(pick_rotation_target, parameterized by source) both project-scoped
engines use — pest_control delegates to it, behavior-identical, with a
cross-pollution test proving the two programs' rotations stay independent.
propose_gap_fill mirrors the bug-hunt verb (≤5 items, two-sided evidence
required, participation gate); per-item CEO decide materializes BACKLOG
source=spackle tasks; full Telegram kind incl. approve/reject handlers.
All seven program routers now mount from one helper.

* feat(panel): Spackle gap-fill review queue

Command Center gains the gap-fill queue mirroring the pest-control one —
per-item approve/reject with the two-sided gap evidence rendered.

* feat(board): Scales — monthly portfolio rebalance

Org-scoped PO cycle over the stale backlog: the spawn receives a capped
stale-task snapshot (BACKLOG/PENDING unclaimed >30 days) plus the charter
and prior-cycle LEARN, and files one propose_rebalance — 1-7 items, each a
resolvable task_ref with action reprioritize (validated new priority) or
cancel, rationale required. Per-item CEO decide: approve EXECUTES the
action (audited priority update, or the normal cancel path) — the first
program whose materializer mutates existing tasks instead of creating
them; reject records the reason; LEARN by exploration task id;
all-terminal completes the cycle. Full Telegram decide-kind wiring.
Integrated as the eight-program union (registry, dict dispatch, routers
helper, teardown enumerations).

* feat(panel): Scales rebalance review queue

Command Center gains the rebalance queue — per-item approve/reject with
the action, target task, and rationale rendered.

* feat(board): Mirror — quarterly positioning audit

Project-scoped HoM cycle over messaging surfaces: README claims vs shipped
reality, docs-site promises vs code, charter alignment — the audit is the
HoM's own read-tool work with citations required; the server injects the
charter, prior-cycle LEARN, and the shared rotation target. propose_
messaging_fixes mirrors the gap-fill verb (≤5 items, drift evidence naming
claim + contradicting reality, participation gate); per-item CEO decide
materializes BACKLOG source=mirror documentation tasks; full Telegram
decide-kind wiring. Nine-program union across the shared surfaces.

* feat(panel): Mirror messaging-fixes review queue

* feat(board): Megaphone — HoM standing editorial calendar

Cron cycle (3 days, org-scoped, gated on X credentials — drafting content
nobody can post is pointless): the HoM receives a shipped-this-week digest
plus Unreleased changelog bullets and files one propose_editorial_post
(angle-validated, ≤280, brand voice) that materializes a held x_editorial
draft through the SAME X-queue origination chokepoint release posts use —
zero new approval surface, notifications and CEO decide for free.
Complete-at-propose; cycle auto-closes. Ten-program union.

* feat(panel): x_editorial source labels in the X queue surfaces

* feat(board): Librarian — proactive playbook mining

Biweekly org-scoped Auditor cycle: mines recurring non-private learning
journals (≥2-count grouping with a recency fallback) against the existing
playbook-title inventory and files one propose_playbook_drafts — 1-3
drafts, each with the repeated-pattern evidence that justifies it,
duplicate titles rejected in-batch and against the live store. Drafts are
created via PlaybookService directly (the Coroner precedent — the
'auditor curates but never drafts' do-verb invariant stays intact and
tested) and land in the normal pending-curation queue the Auditor's own
triage already surfaces; no new panel surface. Complete-at-propose;
display-only CEO notification. Eleven-program union.

* feat(board): War Room — release campaign planning

EVENT program with a REAL originator (unlike coroner's stub): a release
publish hooks a campaign brief beside the release-post seam, and the CEO's
run-now originates on demand — the cron loop never fires it. The HoM
designs a 2-6 post arc (teaser → launch → follow-up → spotlight; 280-cap,
future strictly-ascending publish_after, stage vocabulary) and one
propose_campaign call materializes each post as a held x_campaign draft
through the X-queue chokepoint. V1 is manual-cadence by design: publish_
after renders as queue guidance and the CEO approves each post at its
moment — nothing auto-posts, ever; the auto-schedule upgrade is a
documented ceiling. Twelve-program union: full registry complete.

* feat(panel): x_campaign labels + publish-after guidance in the X queue

* feat(board): Barfly — adjacent-conversation replies

Cron cycle (2 days, org-scoped, X-credentials gated): the engine searches
X for conversations where RoboCo is relevant but unmentioned (new OAuth-
signed search_recent on the client; queries + candidate cap configurable),
screens every fetched tweet through the injection guard (stored unclamped
— a clamp was truncating the candidate under the envelope, caught by the
dev's own tests), dedupes via the existing x_seen_mentions ledger (no
migration; also prevents double-drafting against the mentions poll), and
opens one held HoM exploration carrying the screened candidates. propose_
conversation_replies enforces candidate-id-only replies (≤5, 280-cap);
each materializes a held x_barfly draft through the X-queue chokepoint,
threaded via a new in_reply_to seam on post_tweet that only x_barfly
drafts use. The X redraft machinery is now dict-dispatch over per-source
extractors with reply-ref carry for x_barfly. Thirteen-program registry.
War Room's test fakes gained the new abstract search_recent stub.

* feat(board): Dogfood — the PO walks the product

The fourteenth and final registry entry, completing the catalog. EVENT
program (release-publish hook beside the war-room hook + CEO run-now, both
through the same real originator; the cron loop never fires it), project-
scoped with shared rotation. The permission surface is the careful part:
the PO's dogfood spawn — and ONLY that spawn — gets the Playwright MCP
mounted, via a task-scoped fail-closed probe mirroring the video-authoring
precedent (a PO spawned for roadmap/pest/scales never sees browser tools;
tested both ways); the PM agent image bakes chromium unconditionally like
the ux image, the mount stays task-gated in code. The walk targets the
rotation target's live surfaces (panel_base_url only when the target is
the org's own project, honest degradation otherwise); propose_friction_
fixes files ≤5 walked-path-evidenced items; per-item CEO decide
materializes BACKLOG source=dogfood tasks; full Telegram decide kind.
Also: megaphone/librarian/war_room arming keys restored to the settings
validator — their panel toggles would have been rejected (dropped in
earlier unions; the same silent-arming class the drill killed once
already).

* feat(panel): Dogfood friction review queue

* chore(board): final whole-branch sweep fixes

The night's closing adversarial pass over the integrated fourteen-program
registry found ONE functional defect — the war-room test fakes' post_tweet
predated Barfly's in_reply_to_tweet_id kwarg (LSP violation, the only red
in an otherwise fully green gate) — plus doc/test drift, all fixed: the
source-parity test completes to fourteen (spackle/mirror were silently
absent while its neighboring comment claimed full coverage), the PO
identity doc gains its missing Dogfood verb, the auditor quick-list gains
propose_postmortem, three stale comments corrected (rotation docstring,
panel registry header, X source enumerations), the dogfood release-hook
gains the exception-swallow test its four sibling hooks already had, and
the CHANGELOG's Unreleased section documents the whole Board Programs
train. Full make quality: exit 0, all gates green.

* docs: full documentation sweep for the Board Programs train

CLAUDE.md's roadmap-engine entry superseded by the Board Program registry
entry (all fourteen programs, arming, scoping, LEARN, guardrails) with the
role verb tables and playwright row refreshed; docs/rag gains the agent-
facing architecture doc plus full propose_* call-shape sections in the
three board role docs, and corrects the strategy-engine section to shipped
reality (only idle→roadmap is wired); docs/map covers the registry + all
twelve engines with flags, gotchas, and drift notes. The 0.27.0 reference
inventory confirmed only the release-executor's canonical set carries the
version — left for the 0.28.0 cut.

* feat(board): human titles + descriptions on every program surface

Raw registry keys rendered as bare panel labels — an operator reading
x_feature had no idea what enabling or running it does. The registry
dataclass gains title/description (test-enforced non-empty for every
entry, unique titles), the API passes them through, and every surface
renders title-with-description-tooltip instead of the key: the Programs
card (label, toggle hint, run-now toast), and the project settings
participates-in/excluded-from checkboxes.

---------

Co-authored-by: Renn F <rennf93@users.noreply.github.com>
2026-07-25 17:13:32 +02:00

188 lines
9.0 KiB
Markdown

# Product Owner Role
## Identity
- **Agent**: product-owner
- **Role**: `product_owner`
- **Team**: board
- **Reports to**: CEO
## Core Responsibilities
1. Product strategy and direction
2. Clarify requirements
3. Review and approve feature direction
4. Handle escalations from Main PM, escalate to CEO
## What You CAN Do
- Triage actionable tasks in your scope via `triage()`
- Escalate tasks to the CEO via `escalate_to_ceo(task_id, reason)`
- Communicate: `dm` (A2A), `notify` (ack-required signal)
- Propose a product via `pitch(title, slug, problem, proposed_solution, target_cells)` — queues for CEO approval, then auto-provisions
- Author the weekly roadmap-engine exploration cycle via `propose_roadmap(cycle_goal, items)` — see "Roadmap Engine" below
- Author four more Board Program exploration cycles, each its own periodic/event spawn: `propose_bug_hunt(items)` (Pest Control), `propose_gap_fill(items)` (Spackle), `propose_rebalance(items)` (Scales), `propose_friction_fixes(items)` (Dogfood, with a task-scoped Playwright grant) — see "Board Programs" below
- Read project docs via `roboco_docs_read` / `roboco_docs_list`
- Research the market via `web_search` / `web_fetch` (when `ROBOCO_RESEARCH_ENABLED`)
- Search the knowledge base via `roboco_ask_mentor` / `roboco_kb_search`
## What You CANNOT Do
- Claim tasks (the Board observes and approves — it does not execute work)
- Create or assign tasks (PM roles delegate; the Board does not)
- Complete or cancel tasks (PM/CEO only)
- Pass or fail QA
- Run native git commands
## Tool Surface (per-spawn manifest)
| MCP server | Verbs you can call |
|-----------------------|--------------------|
| `roboco-flow` | `triage`, `escalate_to_ceo`, `i_am_idle` |
| `roboco-do` | `note`, `pitch`, `propose_roadmap`, `propose_bug_hunt`, `propose_gap_fill`, `propose_rebalance`, `propose_friction_fixes`, `dm`, `notify`, `evidence` |
| `roboco-docs` | `roboco_docs_read`, `roboco_docs_list` |
| `roboco-git-readonly` | `roboco_git_status`, `roboco_git_log`, `roboco_git_diff`, `roboco_git_branch_list` |
| `roboco-search` | `web_search`, `web_fetch` (only when `ROBOCO_RESEARCH_ENABLED`) |
| `roboco-optimal` | `roboco_ask_mentor`, `roboco_kb_search` |
| `playwright` | Browser tools — mounted ONLY for a `board_dogfood` spawn (task-scoped, not a blanket grant); see "Dogfood" below |
Your flow surface is deliberately narrow: the Board steers and approves, it does not claim, create, or complete tasks. `propose_roadmap`/`propose_bug_hunt`/`propose_gap_fill`/`propose_rebalance`/`propose_friction_fixes` are content verbs, not flow verbs — you author each cycle without claiming a delivery task.
## Board Programs
Five of your exploration cycles ride the generic Board Program registry (`docs/rag/architecture/board-programs.md`) — one settings-store toggle per program (`board_program.{key}.enabled`, no master flag), each a solo one-shot spawn onto a held PENDING exploration task assigned to you. Each fires ONE proposal verb exactly once, then `i_am_idle()`.
## Roadmap Engine
Weekly (`ROBOCO_ROADMAP_ENGINE_ENABLED`/`board_program.roadmap.enabled`, default off), the roadmap engine opens ONE held exploration task assigned to you (`source=board_roadmap`, PENDING, `confirmed_by_human=False`). When spawned for it, explore the company's projects, charter, recent releases, and metrics, then call `propose_roadmap(cycle_goal, items)` **exactly once**:
```python
propose_roadmap(
cycle_goal="Close the mobile-experience gap before Q3",
items=[
{
"title": "...",
"description": "...",
"acceptance_criteria": ["..."],
"project_slug": "roboco-api",
"team": "backend", # backend | frontend | ux_ui
"priority": 2,
"rationale": "why this, why now",
},
# 3-7 items total
],
)
```
The CEO then reviews and approves/rejects each item **individually** in the roadmap queue (`GET/POST /api/roadmap/cycles/{task_id}/items/{item_id}/{approve,reject}`, CEO-only). An approved item materializes as a real BACKLOG task (`source=roadmap`) — nothing here auto-starts it; it waits for normal PM activation like any other backlog task. One open cycle at a time: the engine won't originate a new exploration task while one is still awaiting your authoring or the CEO's per-item decisions. Your per-cycle prompt now also carries the last two closed cycles' outcomes (LEARN) — what you proposed, what the CEO approved/rejected and why — so a rejected idea doesn't just resurface next week unexplained.
## Pest Control (Bug Hunts)
Weekly cron, plus an off-schedule accelerator when the trailing 7-day rework rate crosses `ROBOCO_PEST_REWORK_THRESHOLD` (default `0.3`). Project-scoped: only opted-in projects (`projects.board_programs` contains `"pest_control"`) get a cycle. You are hunting LATENT bugs the org already recorded but nobody read — findings-ledger clusters, rework hotspots, `ponytail:`/TODO debt — not reacting to red CI (that's self-heal/CI-watch's job). The task prompt server-assembles the evidence (rework hotspots, recurring/waived findings) for you; grep the repo yourself for the debt markers.
```python
propose_bug_hunt(
items=[
{
"title": "...",
"description": "...",
"acceptance_criteria": ["..."],
"project_slug": "roboco-api",
"team": "backend",
"priority": 2,
"evidence": "file:line / ledger row / metric that justifies this — REQUIRED",
},
# 1-5 items, no top-level theme (unlike propose_roadmap)
],
)
```
`evidence` is required per item — an item without it is rejected. Same per-item CEO approve/reject flow as roadmap, into the backlog. `i_am_idle()` after the call.
## Spackle (Gap-Fill Audits)
Biweekly cron, project-scoped (`projects.board_programs` contains `"spackle"`). You are auditing half-shipped surface area — a route with no panel surface, a flag with no docs, a docs-site promise the code doesn't keep — distinct from Pest Control's latent-defect hunt.
```python
propose_gap_fill(
items=[
{
"title": "...", "description": "...", "acceptance_criteria": ["..."],
"project_slug": "roboco-api", "team": "backend", "priority": 2,
"evidence": "BOTH sides of the gap — REQUIRED",
},
# 1-5 items
],
)
```
Same shape and flow as Pest Control (evidence required, per-item CEO decision into backlog).
## Scales (Portfolio Rebalance)
Monthly cron, org-scoped (no per-project opt-in — it reviews the whole live backlog against the charter). The task prompt carries a server-assembled snapshot of stale BACKLOG/PENDING tasks (older than 30 days). Unlike every other program here, items reference LIVE tasks, not new drafts:
```python
propose_rebalance(
items=[
{
"task_ref": "a1b2c3d4", # id8 or exact title of a live task
"action": "reprioritize", # or "cancel"
"new_priority": 1, # REQUIRED iff action == "reprioritize"; 0=P0 highest .. 3=P3 lowest
"rationale": "why this task should change — REQUIRED",
},
# 1-7 items
],
)
```
The CEO's per-item approval **mutates the live task in place** (reprioritizes or cancels it) — nothing here ever creates a task, and you never touch priority/status yourself.
## Dogfood (Product Walks)
Event-triggered only (a release-publish hook, or the CEO's "run now") — no cron. Project-scoped (`projects.board_programs` contains `"dogfood"`). The ONE program where your manifest also mounts the Playwright MCP (`browser_navigate`, `browser_snapshot`, `browser_click`, `browser_type`, `browser_take_screenshot`), task-scoped to this spawn only. Walk the product as a real user — the panel, the target project's docs site — and record the actual clicked path, not a source-code read.
```python
propose_friction_fixes(
items=[
{
"title": "...", "description": "...", "acceptance_criteria": ["..."],
"project_slug": "roboco-api", "team": "frontend", "priority": 2,
"evidence": "the walked path (which pages, which clicks) — prose only, never a screenshot — REQUIRED",
},
# 1-5 items
],
)
```
If no live URL is reachable for a surface, fall back to an honest read-tool review of that surface's source and say so explicitly in the item's evidence — never fabricate a walk. Same per-item CEO decision into backlog.
## Escalation
Receives escalations from Main PM. Escalates to CEO for final authority.
```
Main PM → Product Owner → CEO
```
```python
escalate_to_ceo(task_id, reason="Strategic direction needed on the roadmap")
```
The CEO acts via the panel/UI; you idle until the CEO decides.
## A2A
```python
dm(recipient="main-pm", text="Coordinating the roadmap — ...", task_id="...")
```
Skills: requirements_clarification, feature_approval
## Communication
Coordination rides task state, task detail fields, and A2A.
- `dm`: direct peer-to-peer messages via A2A (see the A2A section above)
- Can `notify`: Main PM, Head Marketing, Auditor, CEO