@chibitek/chibi 0.1.173 → 0.1.174

package/dist-server/openmausbot.js

@@ -30179,8 +30179,8 @@ var init_claude = __esm({
     DEFAULT_AUTOCOMPACT_TOKENS = 2e5;
     CLAUDE_FLAG_FLOORS = {
       "--strict-mcp-config": [1, 0, 60],
-      "--setting-sources": [1, 0, 122],
-      "--autocompact": [2, 1, 122],
+      "--setting-sources": [1, 0, 125],
+      "--autocompact": [2, 1, 221],
       // 2.1.267 is the first CLI that accepts it; below that the recorded prompt
       // simply is not refreshed, which is the pre-existing behaviour.
       "--system-prompt-snapshot": [2, 1, 267],

package/dist-server/pair-cli.js

@@ -30179,8 +30179,8 @@ var init_claude = __esm({
     DEFAULT_AUTOCOMPACT_TOKENS = 2e5;
     CLAUDE_FLAG_FLOORS = {
       "--strict-mcp-config": [1, 0, 60],
-      "--setting-sources": [1, 0, 122],
-      "--autocompact": [2, 1, 122],
+      "--setting-sources": [1, 0, 125],
+      "--autocompact": [2, 1, 221],
       // 2.1.267 is the first CLI that accepts it; below that the recorded prompt
       // simply is not refreshed, which is the pre-existing behaviour.
       "--system-prompt-snapshot": [2, 1, 267],

package/dist-server/server/dictation.js

@@ -84,6 +84,14 @@ export function checkCleanup(input, output) {
         if (tokens.filter((t) => kept.has(t)).length / tokens.length < 0.6)
             return { ok: false, reason: "overlap" };
     }
+    // a correction swaps a misheard word for the right one; words with nothing
+    // taken out for them were never said
+    const spoken = new Set(contentTokens(input));
+    const written = new Set(contentTokens(cleaned));
+    const added = [...written].filter((t) => !spoken.has(t)).length;
+    const removed = [...spoken].filter((t) => !written.has(t)).length;
+    if (added > removed + 1)
+        return { ok: false, reason: "added" };
     return { ok: true, text: cleaned };
 }
 export async function ask(provider, prompt, timeoutMs) {

package/dist-server/server/drivers/claude.js

@@ -259,12 +259,12 @@ const DEFAULT_AUTOCOMPACT_TOKENS = 200_000;
  *
  * Verified against the published binaries, not the changelog (which never
  * records `--autocompact`): `--strict-mcp-config` is present in 1.0.60 and
- * absent from 1.0.0; `--setting-sources` first appears in 1.0.122 (1.0.120
- * lacks it); `--autocompact` first appears in 2.1.122 (2.1.121 lacks it). */
+ * absent from 1.0.0; `--setting-sources` first appears in 1.0.125 (1.0.124
+ * lacks it); `--autocompact` first appears in 2.1.221 (2.1.220 lacks it). */
 export const CLAUDE_FLAG_FLOORS = {
     "--strict-mcp-config": [1, 0, 60],
-    "--setting-sources": [1, 0, 122],
-    "--autocompact": [2, 1, 122],
+    "--setting-sources": [1, 0, 125],
+    "--autocompact": [2, 1, 221],
     // 2.1.267 is the first CLI that accepts it; below that the recorded prompt
     // simply is not refreshed, which is the pre-existing behaviour.
     "--system-prompt-snapshot": [2, 1, 267],

package/dist-server/server/oauth-account-core.js

@@ -0,0 +1,153 @@
+// What every account tool shares: the account and call types, argument
+// basics, and one authenticated request to Google or Microsoft Graph.
+import { z } from "zod";
+import { OAUTH_PROVIDERS } from "../shared/oauth-providers.js";
+const HTTP_TIMEOUT_MS = 30_000;
+const MAX_RESULT_CHARS = 48_000;
+const MAX_JSON_BYTES = 4 * 1024 * 1024;
+export const MAX_DOWNLOAD_BYTES = 8 * 1024 * 1024;
+export const READS = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true };
+export const CREATES = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true };
+/** Sends mail or invitations to other people: cannot be taken back. */
+export const SENDS = { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true };
+export const accountArg = { type: "string", description: "Email address of the account to use. Optional only when this bot has exactly one account of this provider." };
+export const EMAIL = /^[^\s@<>,;"]+@[^\s@<>,;"]+\.[^\s@<>,;"]+$/;
+export const noNewlines = (value) => !/[\r\n]/.test(value);
+export const base = z.object({ account: z.string().max(320).optional() });
+export class ToolInputError extends Error {
+}
+export function bounded(text, limit = MAX_RESULT_CHARS) {
+    return text.length <= limit ? text : `${text.slice(0, limit)}\n[truncated: ask for less]`;
+}
+export function addresses(value, field) {
+    if (value === undefined)
+        return [];
+    const list = (Array.isArray(value) ? value : value.split(",")).map((item) => item.trim()).filter(Boolean);
+    if (list.length > 50)
+        throw new ToolInputError(`${field}: at most 50 addresses`);
+    for (const item of list) {
+        if (!EMAIL.test(item))
+            throw new ToolInputError(`${field}: "${item.slice(0, 80)}" is not an email address`);
+    }
+    return list;
+}
+export class ProviderApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+export async function readLimited(response, limit) {
+    const declared = Number(response.headers.get("content-length") ?? "0");
+    if (declared > limit) {
+        await response.body?.cancel().catch(() => { });
+        return null;
+    }
+    if (!response.body)
+        return Buffer.alloc(0);
+    const reader = response.body.getReader();
+    const chunks = [];
+    let size = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        size += value.byteLength;
+        if (size > limit) {
+            await reader.cancel().catch(() => { });
+            return null;
+        }
+        chunks.push(value);
+    }
+    return Buffer.concat(chunks);
+}
+export function providerErrorMessage(body, status) {
+    const error = body?.error;
+    const message = typeof error === "string"
+        ? error
+        : error && typeof error === "object" && typeof error.message === "string"
+            ? error.message
+            : "";
+    return (message || `request failed with HTTP ${status}`).split(/\r?\n/)[0].slice(0, 300);
+}
+export async function call(ctx, account, url, init) {
+    const fetcher = ctx.fetch ?? fetch;
+    const { expect, ...request } = init;
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+        const token = await ctx.accessToken(account.id);
+        const headers = new Headers(request.headers);
+        headers.set("authorization", `Bearer ${token}`);
+        if (!headers.has("accept") && expect === "json")
+            headers.set("accept", "application/json");
+        const response = await fetcher(url, { ...request, headers, signal: AbortSignal.timeout(HTTP_TIMEOUT_MS) });
+        if (response.status === 401 && attempt === 0) {
+            await response.body?.cancel().catch(() => { });
+            ctx.invalidate(account.id);
+            continue;
+        }
+        if (!response.ok) {
+            const raw = await readLimited(response, 64 * 1024);
+            let body = null;
+            try {
+                body = raw ? JSON.parse(raw.toString("utf8")) : null;
+            }
+            catch {
+                body = null;
+            }
+            const message = providerErrorMessage(body, response.status);
+            if (response.status === 403)
+                throw new ProviderApiError(403, `${account.email} does not allow this: ${message}`);
+            if (response.status === 404)
+                throw new ProviderApiError(404, `Not found in ${account.email}: ${message}`);
+            throw new ProviderApiError(response.status, `${OAUTH_PROVIDERS[account.provider].label} refused the request for ${account.email}: ${message}`);
+        }
+        if (expect === "none") {
+            await response.body?.cancel().catch(() => { });
+            return undefined;
+        }
+        const bytes = await readLimited(response, expect === "json" ? MAX_JSON_BYTES : MAX_DOWNLOAD_BYTES);
+        if (expect === "bytes")
+            return bytes;
+        if (!bytes)
+            throw new ProviderApiError(502, "The response was too large");
+        try {
+            return JSON.parse(bytes.toString("utf8"));
+        }
+        catch {
+            throw new ProviderApiError(502, "The service returned an unreadable response");
+        }
+    }
+    throw new ProviderApiError(401, `${account.email} needs to sign in again: open Settings → Accounts and connect it again.`);
+}
+export function parse(schema, value, what) {
+    const parsed = schema.safeParse(value);
+    if (!parsed.success)
+        throw new ProviderApiError(502, `Unexpected ${what} response`);
+    return parsed.data;
+}
+export function json(value) {
+    return JSON.stringify(value, null, 1);
+}
+export function htmlToText(html) {
+    return html
+        .replace(/<(script|style)[\s\S]*?<\/\1>/gi, "")
+        .replace(/<br\s*\/?>/gi, "\n")
+        .replace(/<\/(p|div|tr|li|h\d)>/gi, "\n")
+        .replace(/<[^>]+>/g, "")
+        .replace(/&nbsp;/g, " ")
+        .replace(/&amp;/g, "&")
+        .replace(/&lt;/g, "<")
+        .replace(/&gt;/g, ">")
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/\n{3,}/g, "\n\n")
+        .trim();
+}
+export const GRAPH = "https://graph.microsoft.com/v1.0";
+export const graphRecipient = z.object({ emailAddress: z.object({ address: z.string().optional(), name: z.string().optional() }).optional() });
+export function recipient(value) {
+    const address = value?.emailAddress?.address;
+    const name = value?.emailAddress?.name;
+    return address ? (name && name !== address ? `${name} <${address}>` : address) : undefined;
+}