mirror of
https://github.com/rennf93/roboco.git
synced 2026-08-03 07:23:24 +02:00
46d89b58fe
* feat(goals): company charter singleton — data layer (Business Goals slice 1)
First slice of the company-in-a-box "Business Goals" phase: a single CEO-owned
charter row (north star + objectives + constraints + operating policy) that
will be injected into every agent's context_briefing so all work is goal-aware.
- CompanyGoalsTable: singleton table (all-zeros id), JSON objectives /
constraints / operating_policy, updated_at / updated_by.
- migration 032: create + seed the singleton row (offline-renderable; column
server-defaults fill an INSERT of just the id).
- CompanyGoalsService: get() (empty defaults when unset) + upsert() (singleton,
partial update, caller commits).
- tests: empty defaults, roundtrip, singleton + partial-update preservation.
Next slices (mapped, not yet built): briefing injection (BriefingInputs +
build_context_briefing + EvidenceRepo), API route (GET any / PUT CEO-only),
panel /goals page, and base/Board/PM prompt mentions.
* feat(goals): inject the company charter into every agent briefing (slice 2)
The charter is now goal-aware context for every agent:
- BriefingInputs gains company_goals; build_context_briefing surfaces it.
- EvidenceRepo.company_goals(): single-row lookup returning a COMPACT charter
(north star + objectives + constraints + operating policy; audit columns
dropped, lists capped) or None when unset, so an empty charter never bloats
the per-verb briefing.
- _briefing_for wires it into every context_briefing.
Tests: briefing surfaces company_goals (defaults None); repo returns None for an
absent/empty charter and the compact dict when set.
* feat(goals): company charter API — GET any agent, PUT CEO-only (slice 3)
- routes/company_goals.py: GET returns the charter (any authenticated agent —
it drives every briefing); PUT is CEO-only (403 otherwise), partial update via
model_dump(exclude_unset=True), explicit commit.
- schemas/company_goals.py: response + partial-update models.
- registered at /api/company-goals.
- tests: GET open to any role, CEO update persists + is readable, non-CEO 403.
* feat(goals): make the company charter actionable in agent prompts (slice 5)
Agents already receive company_goals in the briefing (slice 2); now tell them to
act on it:
- base.md: universal "Align with the company charter" section — favour work and
trade-offs that advance the objectives, honour the constraints, flag conflicts;
never a license to leave your role.
- board / main_pm / cell_pm: role-specific lines tying triage / cell-routing /
subtask decomposition to the charter.
Prompts are composed at spawn from base.md + roles/*.md directly (compose_prompt),
so no _generated regeneration is needed.
* feat(goals): company charter panel page (slice 4)
CEO-facing editor for the charter at /company-goals:
- lib/api/company-goals.ts: get / update (PUT) client.
- company-goals-card.tsx: edit north star + constraints (one per line) +
objectives / operating_policy (JSON, parsed + validated with toast errors);
display derives from server state (no set-state-in-effect).
- (dashboard)/company-goals/page.tsx + a "Company Goals" sidebar nav link.
tsc --noEmit + eslint clean. Completes Phase 1 (Business Goals): data, briefing
injection, API, prompts, panel.
* fix(test): make test_app route assertions robust to FastAPI 0.137 _IncludedRouter
FastAPI 0.137 stopped flattening include_router into app.routes — each include is
now an _IncludedRouter (a BaseRoute with no .path), so `{r.path for r in
app.routes}` raised AttributeError and the two router-registration tests failed
(the bump arrived via the claude-agent-sdk update in uv.lock). Add
_registered_paths(): OpenAPI schema paths (the stable public contract) plus each
included router's prefix, which also covers the websocket /ws mount (never in the
schema). Drops the now-incorrect type: ignore[attr-defined].
* feat(research): pluggable web search/fetch for Board + PM agents
Add a provider-agnostic web-research capability so the Board and PMs can
ground decisions in current external evidence the knowledge base can't
answer.
- ResearchService selects a provider adapter from config: Tavily, Brave,
and Exa adapters plus a NullProvider that degrades gracefully when no
key is set. Result count and fetched-content size are clamped to caps.
- /api/research/search and /api/research/fetch: role-gated to Board + PMs
(and the CEO), with a per-agent/day Redis quota that fails open.
- roboco-search MCP server (web_search / web_fetch) calls those routes;
the provider key stays server-side and agent containers never egress.
Mounted per role by the orchestrator, behind a master switch.
- Charter-aware prompt guidance for Board, Main PM, and Cell PM.
Additive: with no key configured it is a no-op and the existing delivery
lifecycle is unchanged.
* feat(pitch): Board pitch -> CEO approve -> auto-provision repos
Add an additive origination path so a product can be proposed, approved,
and stood up without manual repo/Project setup.
- Pitch entity + migration (pitches table); PitchService create/list/
reject/approve.
- GitHubProvisioningService: the one place that creates repos (POST
/orgs/{org}/repos). Server-side token/org; when unconfigured the whole
approve path is inert and nothing is created.
- On approval: provision one repo per target cell, register a Project per
repo, create a Product when multi-cell, and seed one Main-PM delivery
task — all reusing the existing Product / coordination-task machinery.
- /api/pitches: Board authors (PO/HoM), CEO approves/rejects, Board+PM+CEO
view. Errors mapped via a single translator.
Additive: the delivery lifecycle is untouched; with no provisioning token
the capability is a no-op. Agent-facing pitch tool + panel are follow-ups.
* feat(strategy): dormant autonomous strategy engine (engine 2)
Add a second, optional engine that watches the company against its
standing goals and surfaces what needs the CEO — without touching the
delivery lifecycle (engine 1).
- StrategyEngine.assess() reports observations: the company is idle while
goals stand, and tasks stranded in 'blocked' past a threshold.
- run_cycle() notifies the CEO (notify-only; it never spends, builds, or
auto-approves — originating work stays a CEO decision).
- Orchestrator runs it on its own interval, started/stopped with the other
background loops; the loop returns immediately unless enabled.
DORMANT by default (strategy_engine_enabled=False): the loop never runs and
a standard deployment is unchanged. Auto-origination is a further opt-in.
* docs(changelog): record Business Goals, Web Research, Pitch->Provision, and the dormant strategy engine under Unreleased
* feat(secretary): wire the Secretary role end-to-end (foundation)
Add SECRETARY as a distinct role — the CEO's conversational chief-of-staff,
governed separately from the Prompter (which stays read-only/human-only).
This is the role foundation only; authority, the live agent, and the panel
land in following commits.
- foundation/identity: Role.SECRETARY (board level), seeded secretary-1 agent,
role-level mapping.
- journaling read tier (ALL — it advises the CEO), role_config entry,
per-role model (opus), prompt-layer mapping + roles/secretary.md.
- i_am_idle gains SECRETARY so the role has a verb surface.
- migration 034: add 'secretary' to the agentrole enum (mirrors 025).
- Role-registry tests updated for the new role.
Inert by itself (nothing spawns it yet); additive — existing roles unchanged.
* feat(secretary): directives + gate-list authority (backend)
The Secretary acts only under CEO command. Low-risk directives (relay a
dictated message) execute immediately; high-impact ones — charter edits,
task start/cancel/override, pitch approval, announcements — are recorded
pending and run only after the CEO confirms (the gate list).
- secretary_directives table (migration 035) as the command audit + queue.
- SecretaryService: read company state; submit (direct->run, gated->queue +
notify CEO); confirm/reject; execution runs with the CEO as actor through
the existing services (the Secretary never holds CEO authority itself).
- /api/secretary: submit + state/task reads (Secretary or CEO); list/confirm/
reject (CEO only). Writes commit explicitly.
* feat(secretary): live conversational agent (container + bridge)
Stand up the Secretary as a persistent Claude-SDK container the CEO chats
with, mirroring the Intake agent and reusing its driver/session machinery.
- secretary_driver: build_secretary_options exposes read_company_state /
read_task / submit_directive as SDK tools that call /api/secretary/* with
the agent's HMAC token; backend-call logic is module-level + tested.
- secretary_main: container entrypoint (receiver + relay) reusing IntakeDriver.
- orchestrator: start/spawn/reap secretary session + run-cmd builder; no
workspace clone (reads state via API), mints a role=secretary token.
- secretary_live routes: panel <-> container bridge over the live registry.
- agent-secretary image (Dockerfile + compose build service).
Inert until a session is started; additive — intake and all agents unchanged.
* feat(secretary): panel chat + directive confirmation queue
The CEO's Secretary surface: a live chat (SSE) to talk to the Secretary, and
a 'Needs your confirmation' queue listing gated directives the Secretary
proposed — each with Confirm / Reject. Adds the sidebar nav entry.
- lib/api/secretary.ts: live (start/stream/status/send/stop) + directive
(list/confirm/reject) + state clients (all as the CEO).
- hooks/use-secretary.ts: drives one chat, accumulating SSE token deltas.
- secretary page: chat pane + pending-directive cards.
Completes the Secretary end-to-end (role + authority + live agent + panel).
* feat(pitch): agent-facing pitch tool + pitches panel
Complete the pitch path: the Board can now author pitches through the gateway,
and the CEO reviews/approves them in the panel.
- content_actions.pitch (Board-only) -> PitchService.create, returning an
Envelope; wired as a do-tool (do_server + /api/v1/do/pitch + schema) and
added to the Board's do-tools.
- Panel /pitches page: lists pitches with CEO Approve & provision / Reject;
sidebar nav entry.
Pitch (Phase 4) is now end-to-end: author -> CEO approve -> auto-provision.
* feat(cockpit): read-only 'is the business winning?' summary
A pure aggregation for the CEO over existing data — no new state, no writes.
- CockpitService.summary(): charter north-star/objectives, delivery counts
(in-flight/blocked/awaiting-CEO), 30-day spend vs the charter's budget cap,
pending pitches, and the strategy engine's signals (what needs you). Stamped
basis='proxy' — performance is a proxy until real launches.
- GET /api/cockpit/summary (CEO / Board / Main PM / Secretary).
- Panel /cockpit page + sidebar nav.
Reuses goals + usage + StrategyEngine.assess(); reads only.
* docs(changelog): add the Secretary and Cockpit to Unreleased
* fix(test): isolate the company-goals empty-defaults test from committed state
The shared test DB persists committed writes across tests; a route test
commits a charter, so the unit test's 'unset' assertion must establish its
own clean precondition rather than assume global emptiness.
* fix(gateway): lower evidence_repo complexity to rank A (xenon gate)
company_goals()'s 4-way `or` emptiness check tipped the module average to
rank B; `any(...)` is equivalent and keeps the module under the gate's A bar.
* chore(compose): mirror agent-secretary-image build into docker-compose.yaml
Both compose files are byte-identical and tracked; .yaml carries the same
agent-secretary-image build service already present in docker-compose.yml.
* chore(lifecycle): regenerate artifacts for secretary i_am_idle
The secretary role gained i_am_idle in the lifecycle spec; regenerate the
generated prompt/doc/json artifacts so foundation-check stays green.
* docs(changelog): cut the company-in-a-box phases to 0.4.0
Label the six additive phases (business goals, web research, pitch-provision,
strategy engine, secretary, cockpit) as 0.4.0; tag v0.4.0 is held until the
branch merges to master so it points at the release commit.
---------
Co-authored-by: Renn F <rennf93@users.noreply.github.com>
161 lines
8.6 KiB
Markdown
161 lines
8.6 KiB
Markdown
# Changelog
|
|
|
|
All notable changes to RoboCo are documented in this file.
|
|
|
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
|
## [0.4.0] - 2026-06-15
|
|
|
|
### Added
|
|
|
|
- **Business Goals — the company charter.** A single CEO-owned charter (north
|
|
star, prioritized objectives, constraints, operating policy) injected
|
|
compactly into every agent's briefing so all work is goal-aware.
|
|
`GET /api/company-goals` (any agent) / `PUT` (CEO-only), with a panel editor.
|
|
- **Web research for the Board and PMs.** Pluggable `web_search` / `web_fetch`
|
|
exposed through a `roboco-search` MCP server backed by `/api/research/*`, with
|
|
Tavily / Brave / Exa adapters and a graceful no-op when no provider is
|
|
configured. The provider key stays server-side — agent containers never make
|
|
the external request themselves — and a per-agent daily quota (Redis,
|
|
fail-open) bounds cost.
|
|
- **Pitch → approve → provision.** The Board proposes a product (a "pitch");
|
|
on CEO approval the system provisions a GitHub repo per target cell, registers
|
|
a Project for each (and a Product when multi-cell), and seeds one Main-PM
|
|
delivery task — reusing the existing Product / coordination-task machinery.
|
|
Default-off: with no provisioning token configured, approval is refused and
|
|
nothing is created.
|
|
- **Autonomous strategy engine (dormant).** An optional second engine that
|
|
watches the company against its standing goals and surfaces drift, idle, and
|
|
long-stranded blocked work to the CEO (notify-only — it never spends, builds,
|
|
or auto-approves). Off by default; the delivery lifecycle is unchanged.
|
|
- **The Secretary — the CEO's chief-of-staff.** A live conversational agent (its
|
|
own role, distinct from the Prompter) the CEO chats with in the panel. It acts
|
|
only under the CEO's command: it reads company state and relays dictated
|
|
messages directly, but high-impact actions — editing the charter, starting /
|
|
cancelling / overriding tasks, approving a pitch, announcements — are queued
|
|
and run only after the CEO's explicit confirmation (the gate list). Its
|
|
authority is HMAC-scoped to the secretary role and routed through the existing
|
|
enforcement, never a parallel permission model.
|
|
- **The Cockpit.** A read-only `/cockpit` view answering "is the business
|
|
winning, what's happening, what needs me" — the charter, delivery counts,
|
|
30-day spend vs the budget cap, pending pitches, and the strategy engine's
|
|
signals. Honestly stamped `basis: proxy` (a proxy until real launches).
|
|
|
|
All of these are additive and opt-in or default-off — an unconfigured deployment
|
|
behaves exactly as before.
|
|
|
|
## [0.3.0] - 2026-06-15
|
|
|
|
### Added
|
|
|
|
- **In-house RAG engine.** Replaced the piragi/torch retrieval stack with an
|
|
in-house pgvector engine (asyncpg), then added **hybrid retrieval** —
|
|
pgvector cosine fused with Postgres full-text ranking — retiring HyDE, plus
|
|
an embed-once / concurrent-search pass that cut multi-index query latency.
|
|
- **Self-hosted LLM provider** with dynamic model discovery, so agents can run
|
|
against a local or self-hosted model endpoint.
|
|
- **Quality gates at the source.** Developers run a fast quality gate at
|
|
`i_am_done` and the full fast gate (including complexity) at their desk; QA
|
|
requires a per-acceptance-criterion verdict before passing; cells run two
|
|
developers in parallel with split-before-claim sizing.
|
|
- **Board redraft loop** — the Board can send a drafted task back to intake for
|
|
an in-context re-draft before it starts.
|
|
- **Transcript retention** — a background sweep prunes old agent transcripts,
|
|
with a panel-tunable retention window.
|
|
- **`tests/` type-gated under mypy** — the whole test suite now type-checks in CI.
|
|
|
|
### Fixed
|
|
|
|
- **PR-divergence respawn-loop meltdown.** Capped the PM respawn loop-gate,
|
|
added CEO god-mode status override, a PR-conflict auto-resolver (rebase →
|
|
close-superseded / re-merge / escalate), and sequence-ordered sibling merge;
|
|
the dispatcher can now claim an ownerless `awaiting_pm_review` task without
|
|
transitioning it.
|
|
- **Git robustness.** Fall back to a permitted merge method when the repo
|
|
refuses the requested one, and retarget a PR's base to the default branch
|
|
when the resolved base is missing on the remote.
|
|
- **RAG outage.** Migrated the live `chunks_*` tables to the in-house schema
|
|
(offline-renderable migration), closed engine audit gaps, decoded jsonb
|
|
metadata returned as a string by asyncpg, and kept the embedding model
|
|
resident to stop ingest timeouts.
|
|
- **Panel.** Fixed task lifecycle (updates, merge, reassignment, copy),
|
|
responsive grids + mobile overflow, the status dropdown duplicating the
|
|
current status, the orchestrator-status reachability signal, and surfaced
|
|
the CEO "Approve & Start" gate so it can't be missed.
|
|
- **Usage attribution.** Agent transcripts are attributed by an
|
|
orchestrator-assigned session id, fixing zeroed token/cost capture for
|
|
review-role agents.
|
|
- Composed the prompter role layer for the intake agent; aligned auditor
|
|
channel permissions; made the app route-registration test robust to FastAPI
|
|
0.137; cleared an xenon complexity failure and fixable test warnings.
|
|
|
|
### Security
|
|
|
|
- Documented that WebSocket authentication is REST-only and `/ws/system` is
|
|
unauthenticated.
|
|
|
|
## [0.2.0] - 2026-06-11
|
|
|
|
### Added
|
|
|
|
- **Provider rate-limit handling.** End-to-end backpressure for LLM-provider
|
|
429s: a Redis-backed `RateLimitStateTracker`, a spawn gate that **queues**
|
|
(never drops) work while a provider is rate-limited, agent parking via
|
|
`i_am_blocked(reason="rate_limited")`, and a background probe-and-resume loop
|
|
that auto-revives parked agents when the limit lifts — escalating to the CEO
|
|
after repeated failed probes. Surfaced live in the panel via a rate-limit
|
|
banner.
|
|
- **Token usage & cost analytics.** Per-agent-session token capture read from
|
|
the Claude Code transcript (`/usage/sync`), persisted to spawn-session rows
|
|
and daily rollups, with provider-aware pricing (Anthropic models priced;
|
|
local/Ollama models intentionally $0). Visible on the usage dashboard.
|
|
- **`/ws/system` operator WebSocket stream** with a `websocket_bridge` that
|
|
forwards system events from the event bus to panel clients in real time — the
|
|
rate-limit lifecycle and live token/cost usage (`USAGE_UPDATE` /
|
|
`USAGE_SNAPSHOT`), so the dashboard's "Token Usage & Cost" panel updates over
|
|
the socket and falls back to HTTP polling when it drops.
|
|
|
|
### Fixed
|
|
|
|
- Agent workspaces now install the project's `dev` extra (`uv sync --extra dev`)
|
|
so spawned agents have the full `make quality` toolchain (ruff/mypy/xenon) and
|
|
can gate their own work — closing the gap that let lint/type/complexity debt
|
|
merge unchecked.
|
|
- Token-usage capture: the dashboard previously recorded zeros because nothing
|
|
populated the per-session counters.
|
|
- Panel rate-limit endpoint shape (`/api/system/rate-limits` returns the
|
|
`{ entries: [...] }` envelope the dashboard expects) and the doubled
|
|
`/ws/ws/system` WebSocket path.
|
|
- Control-panel logo and all `/public` assets returning 500 — the panel image
|
|
copied them without chowning to the non-root runtime user.
|
|
- Provider-aware pricing (Opus corrected to $5/$25 per 1M; non-Anthropic models
|
|
no longer warn or mis-price).
|
|
|
|
## [0.1.0] - 2026-06-09
|
|
|
|
### Added
|
|
|
|
- Initial public release of **RoboCo** — an open-source AI agent "company": a
|
|
virtual organization of 20 AI agents and 1 human CEO that plans, builds,
|
|
reviews, documents, and ships software.
|
|
- Organizational hierarchy: on-demand Intake, Board (Product Owner, Head of
|
|
Marketing, Auditor), Main PM, and Backend / Frontend / UX-UI cells.
|
|
- **Task Assistant** (the intake Prompter): a live, codebase-aware chat that
|
|
interviews the CEO and drafts a well-formed, board-ready task — objective,
|
|
per-cell breakdown, and acceptance criteria — then launches it into the
|
|
lifecycle (Board review, or straight to the Main PM).
|
|
- Agent gateway (`roboco-flow`, `roboco-do`) backed by the server-side
|
|
Choreographer; intent-verb tool surface per role.
|
|
- Task lifecycle state machine with role-based transitions and git workflow
|
|
(PR-before-QA, CEO approval for major work).
|
|
- A2A protocol, journals, channels/notifications, kanban, and RAG (piragi +
|
|
pgvector) knowledge base.
|
|
- Next.js control panel (`panel/`) behind a single nginx entry point.
|
|
- Multi-agent workspace management with per-project encrypted git tokens.
|
|
|
|
[0.4.0]: https://github.com/rennf93/roboco/compare/v0.3.0...HEAD
|
|
[0.3.0]: https://github.com/rennf93/roboco/compare/v0.2.0...v0.3.0
|
|
[0.2.0]: https://github.com/rennf93/roboco/compare/v0.1.0...v0.2.0
|
|
[0.1.0]: https://github.com/rennf93/roboco/releases/tag/v0.1.0
|