@meetopenbot/openbot 1.1.0 → 1.2.0

package/dist/build-tools.js

@@ -7,6 +7,7 @@ import { startWorkTools } from "./tools/start-work.js";
 import { threadStatusTools } from "./tools/thread-status.js";
 import { threadTitleTools } from "./tools/thread-title.js";
 import { wrapToolsWithApproval } from "./tools/approval.js";
+export const DEFAULT_APPROVAL_ACTIONS = ["update_channel_spec"];
 /** Always gated: installing an agent changes the workspace. */
 const ALWAYS_APPROVE = ["install_agent"];
 /**
@@ -25,6 +26,6 @@ export function buildOpenbotTools(args) {
         ...threadTitleTools,
         ...args.context.tools,
     };
-    const approvalConfig = args.context.config?.approval ?? { actions: [] };
-    return wrapToolsWithApproval(tools, [...new Set([...ALWAYS_APPROVE, ...(approvalConfig.actions ?? [])])], args.context);
+    const approvalConfig = args.context.config?.approval;
+    return wrapToolsWithApproval(tools, [...new Set([...ALWAYS_APPROVE, ...(approvalConfig?.actions ?? DEFAULT_APPROVAL_ACTIONS)])], args.context);
 }

package/dist/system-prompt.js

@@ -1,10 +1,11 @@
+import { settingsVariablesMarkdown, SETTINGS_VARIABLES_MARKDOWN } from '@meetopenbot/plugin-sdk';
 export const OPENBOT_SYSTEM_PROMPT = [
     "# ROLE",
     "You are OpenBot, the coordinator. Humans talk only to you. Specialized agents have their own harnesses; you ask them to do work. You do not impersonate them, and you do not do their jobs yourself.",
     "",
     "# SECURITY POLICY",
     "- **CRITICAL**: Never request API keys, passwords, or sensitive credentials via text or UI widgets; these are managed deterministically via secure forms and must never enter your context.",
-    '- **Credential Guidance**: If an agent or tool requires credentials, inform the user they can be managed under "Settings > Variables".',
+    `- **Credential Guidance**: If an agent or tool requires credentials, tell the user to add them under ${SETTINGS_VARIABLES_MARKDOWN}. When you know the variable name, link to that page with \`?new=ENV_VAR_NAME\` so the client opens Add Variable with the name filled in. Example: ${settingsVariablesMarkdown('LINEAR_API_KEY')}.`,
     "",
     "# CORE MISSION",
     "You are a high-level manager. Not every message is project work.",

package/dist/tools/storage.js

@@ -53,6 +53,22 @@ export const storageTools = {
             const { channelId, name, spec, initialState } = (raw ?? {});
             const rawChannelId = normalizeChannelId(channelId || '');
             const widgetId = ctx.toolCallId ?? `create_channel:${rawChannelId || Date.now()}`;
+            if (ctx.agentId !== ctx.host.orchestratorAgentId) {
+                const error = 'Only OpenBot can create Spaces.';
+                await emitCreateChannelWidget(ctx, {
+                    widgetId,
+                    channelId: rawChannelId,
+                    body: error,
+                    state: 'error',
+                });
+                return {
+                    success: false,
+                    channelId: rawChannelId,
+                    channelUrl: '',
+                    error,
+                    output: error,
+                };
+            }
             if (!rawChannelId) {
                 const error = 'channelId is required';
                 await emitCreateChannelWidget(ctx, {
@@ -131,6 +147,77 @@ export const storageTools = {
             }
         },
     },
+    update_channel_spec: {
+        description: 'Replace an existing Space spec with new markdown only when the human explicitly asked for the update or agreed to it.',
+        inputSchema: z.object({
+            channelId: z.string().describe('Existing Space id whose spec should be replaced.'),
+            spec: z.string().describe('Complete replacement markdown for the Space spec.'),
+        }),
+        execute: async (raw, ctx) => {
+            const { channelId, spec } = (raw ?? {});
+            const normalizedChannelId = normalizeChannelId(channelId || '');
+            if (ctx.agentId !== ctx.host.orchestratorAgentId) {
+                const error = 'Only OpenBot can update Space specs.';
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error,
+                    output: error,
+                };
+            }
+            if (!normalizedChannelId) {
+                const error = 'channelId is required';
+                return { success: false, channelId: '', error, output: error };
+            }
+            if (isPlaceholderSpaceId(normalizedChannelId)) {
+                const error = `Refused to update #${normalizedChannelId}: that looks like a placeholder, not a real Space.`;
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error,
+                    output: error,
+                };
+            }
+            if (typeof spec !== 'string') {
+                const error = 'spec is required';
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error,
+                    output: error,
+                };
+            }
+            try {
+                const channels = await ctx.storage.getChannels();
+                const exists = channels.some((channel) => channel.id === normalizedChannelId);
+                if (!exists) {
+                    const error = `Space #${normalizedChannelId} does not exist.`;
+                    return {
+                        success: false,
+                        channelId: normalizedChannelId,
+                        error,
+                        output: error,
+                    };
+                }
+                await ctx.storage.patchChannelSpec({
+                    channelId: normalizedChannelId,
+                    spec,
+                });
+                const output = `Updated the spec for Space #${normalizedChannelId}.`;
+                return { success: true, channelId: normalizedChannelId, output };
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : 'Unknown error';
+                const output = `Failed to update the spec for Space #${normalizedChannelId}: ${message}`;
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error: message,
+                    output,
+                };
+            }
+        },
+    },
 };
 export const tools = storageTools;
 export const storageToolPlugin = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meetopenbot/openbot",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "OpenBot coordinator runtime: ask specialists, route work into Spaces, and track todos.",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,7 +25,7 @@
     "@ai-sdk/openai": "^4.0.46",
     "ai": "^7.0.77",
     "zod": "^4.3.5",
-    "@meetopenbot/plugin-sdk": "^1.0.4"
+    "@meetopenbot/plugin-sdk": "^1.1.0"
   },
   "devDependencies": {
     "@types/node": "^20.10.1",