@meetopenbot/openbot 1.1.1 → 1.2.1

package/dist/build-tools.js

@@ -7,6 +7,7 @@ import { startWorkTools } from "./tools/start-work.js";
 import { threadStatusTools } from "./tools/thread-status.js";
 import { threadTitleTools } from "./tools/thread-title.js";
 import { wrapToolsWithApproval } from "./tools/approval.js";
+export const DEFAULT_APPROVAL_ACTIONS = ["update_channel_spec"];
 /** Always gated: installing an agent changes the workspace. */
 const ALWAYS_APPROVE = ["install_agent"];
 /**
@@ -25,6 +26,6 @@ export function buildOpenbotTools(args) {
         ...threadTitleTools,
         ...args.context.tools,
     };
-    const approvalConfig = args.context.config?.approval ?? { actions: [] };
-    return wrapToolsWithApproval(tools, [...new Set([...ALWAYS_APPROVE, ...(approvalConfig.actions ?? [])])], args.context);
+    const approvalConfig = args.context.config?.approval;
+    return wrapToolsWithApproval(tools, [...new Set([...ALWAYS_APPROVE, ...(approvalConfig?.actions ?? DEFAULT_APPROVAL_ACTIONS)])], args.context);
 }

package/dist/runtime.js

@@ -3,14 +3,18 @@ import { BYOK_ENV_KEYS, isAuthErrorMessage, isCreditsErrorMessage, fetchModelReg
 import { eventsToModelMessages } from './history.js';
 import { addImageParts, eventsHaveImages, pickVisionModel } from './images.js';
 import { buildContext } from './context.js';
-import { OPENBOT_SYSTEM_PROMPT, withUserInstructions } from './system-prompt.js';
+import { OPENBOT_SYSTEM_PROMPT, withGithubGitInstructions, withUserInstructions, } from './system-prompt.js';
 import { AUTO_MODEL_ID, isAutoModel, isRetryableModelError, listAutoModelCandidates, missingByokApiKeyMessage, } from './auto-model.js';
 import { reasoningForModel, resolveModel } from './model.js';
 import { errorFromStreamPart } from './stream-error.js';
 import { createAgentOutputBuffer, isOutputBoundaryPart } from './output-buffer.js';
 async function buildSystemPrompt(state, storage, instructions, host) {
     const context = await buildContext(state, storage, host);
-    const sections = [withUserInstructions(OPENBOT_SYSTEM_PROMPT, instructions), '', context];
+    const sections = [
+        withGithubGitInstructions(withUserInstructions(OPENBOT_SYSTEM_PROMPT, instructions)),
+        '',
+        context,
+    ];
     const threadState = state.threadDetails?.state;
     if (!threadState?.isSmartNamed) {
         sections.push('', '## SYSTEM HINT', 'This thread is unnamed. Please use the `set_thread_title` tool to set a concise, descriptive title (e.g., "Project Brainstorming" instead of "project-brainstorm"). Only do this once.');

package/dist/system-prompt.js

@@ -49,6 +49,12 @@ export const OPENBOT_SYSTEM_PROMPT = [
     "- **Hub-and-spoke**: Specialists cannot talk to each other. You pass context from one to the next.",
     "- **Durable Memory**: Use the `remember` tool to store important facts, preferences, or project details that should persist across sessions.",
     "",
+    "# CLOUD COMPUTER",
+    "This runtime is a remote cloud computer. The human is in the browser at openbot.one and cannot open localhost, 127.0.0.1, or any port on this machine.",
+    "- Never tell them to visit localhost. They need a public HTTPS URL.",
+    "- When you ask a coding agent to run a dev server, preview, or any local process the human should open, tell them to expose it with `cloudflared tunnel --url http://127.0.0.1:<port>` and to add `cloudflared` as a **project devDependency** (not a global install — this image is ephemeral and only workspace files persist).",
+    "- Share the `https://*.trycloudflare.com` URL they print. Quick tunnels change on restart — pass the new one through. If they report a localhost URL, ask them to tunnel it.",
+    "",
     "# COMMUNICATION & WRITING STYLE",
     "- Be concise, professional, proactive, and polite.",
     "- Confirm receipt quickly. For longer work, say where you are taking it and who you will ask.",
@@ -61,6 +67,27 @@ export const OPENBOT_SYSTEM_PROMPT = [
     "- If an asked agent fails, try a different agent or tell the human what blocked them.",
     "- Only ask the human for help after you cannot route or ask anyone who can do the work.",
 ].join("\n");
+/**
+ * Appended when `GITHUB_TOKEN` is in the runtime env (workspace variables are
+ * merged in). Git does not read that variable; coding agents need an inline hint.
+ */
+export const GITHUB_GIT_INSTRUCTIONS = [
+    "# GITHUB GIT",
+    "`GITHUB_TOKEN` is set in this runtime's environment. Git does not read it automatically.",
+    "When you `ask_agent` a coding agent (Claude Code, Codex, Cursor, OpenCode, Pi) to clone, fetch, pull, or push GitHub, tell them in that prompt:",
+    "- `GITHUB_TOKEN` is already in their environment. Never paste the token value into the prompt, chat, or a command you write out.",
+    "- Use it inline and keep `$GITHUB_TOKEN` unexpanded, e.g. `git push https://x-access-token:$GITHUB_TOKEN@github.com/<owner>/<repo>.git <branch>`.",
+    "- Do not write the token into a git remote (`.git/config`) or print `git remote -v` after embedding it.",
+].join("\n");
+export function githubTokenIsSet(env = process.env) {
+    return Boolean(env.GITHUB_TOKEN?.trim());
+}
+/** Append GitHub git guidance when `GITHUB_TOKEN` is present. */
+export function withGithubGitInstructions(basePrompt, env = process.env) {
+    if (!githubTokenIsSet(env))
+        return basePrompt;
+    return `${basePrompt}\n\n${GITHUB_GIT_INSTRUCTIONS}`;
+}
 /** Max characters accepted from the OpenBot plugin `instructions` config field. */
 export const MAX_USER_INSTRUCTIONS_LENGTH = 4000;
 /** Trim and cap user-provided coordinator instructions. */

package/dist/tools/storage.js

@@ -53,6 +53,22 @@ export const storageTools = {
             const { channelId, name, spec, initialState } = (raw ?? {});
             const rawChannelId = normalizeChannelId(channelId || '');
             const widgetId = ctx.toolCallId ?? `create_channel:${rawChannelId || Date.now()}`;
+            if (ctx.agentId !== ctx.host.orchestratorAgentId) {
+                const error = 'Only OpenBot can create Spaces.';
+                await emitCreateChannelWidget(ctx, {
+                    widgetId,
+                    channelId: rawChannelId,
+                    body: error,
+                    state: 'error',
+                });
+                return {
+                    success: false,
+                    channelId: rawChannelId,
+                    channelUrl: '',
+                    error,
+                    output: error,
+                };
+            }
             if (!rawChannelId) {
                 const error = 'channelId is required';
                 await emitCreateChannelWidget(ctx, {
@@ -131,6 +147,77 @@ export const storageTools = {
             }
         },
     },
+    update_channel_spec: {
+        description: 'Replace an existing Space spec with new markdown only when the human explicitly asked for the update or agreed to it.',
+        inputSchema: z.object({
+            channelId: z.string().describe('Existing Space id whose spec should be replaced.'),
+            spec: z.string().describe('Complete replacement markdown for the Space spec.'),
+        }),
+        execute: async (raw, ctx) => {
+            const { channelId, spec } = (raw ?? {});
+            const normalizedChannelId = normalizeChannelId(channelId || '');
+            if (ctx.agentId !== ctx.host.orchestratorAgentId) {
+                const error = 'Only OpenBot can update Space specs.';
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error,
+                    output: error,
+                };
+            }
+            if (!normalizedChannelId) {
+                const error = 'channelId is required';
+                return { success: false, channelId: '', error, output: error };
+            }
+            if (isPlaceholderSpaceId(normalizedChannelId)) {
+                const error = `Refused to update #${normalizedChannelId}: that looks like a placeholder, not a real Space.`;
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error,
+                    output: error,
+                };
+            }
+            if (typeof spec !== 'string') {
+                const error = 'spec is required';
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error,
+                    output: error,
+                };
+            }
+            try {
+                const channels = await ctx.storage.getChannels();
+                const exists = channels.some((channel) => channel.id === normalizedChannelId);
+                if (!exists) {
+                    const error = `Space #${normalizedChannelId} does not exist.`;
+                    return {
+                        success: false,
+                        channelId: normalizedChannelId,
+                        error,
+                        output: error,
+                    };
+                }
+                await ctx.storage.patchChannelSpec({
+                    channelId: normalizedChannelId,
+                    spec,
+                });
+                const output = `Updated the spec for Space #${normalizedChannelId}.`;
+                return { success: true, channelId: normalizedChannelId, output };
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : 'Unknown error';
+                const output = `Failed to update the spec for Space #${normalizedChannelId}: ${message}`;
+                return {
+                    success: false,
+                    channelId: normalizedChannelId,
+                    error: message,
+                    output,
+                };
+            }
+        },
+    },
 };
 export const tools = storageTools;
 export const storageToolPlugin = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meetopenbot/openbot",
-  "version": "1.1.1",
+  "version": "1.2.1",
   "description": "OpenBot coordinator runtime: ask specialists, route work into Spaces, and track todos.",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,7 +25,7 @@
     "@ai-sdk/openai": "^4.0.46",
     "ai": "^7.0.77",
     "zod": "^4.3.5",
-    "@meetopenbot/plugin-sdk": "^1.0.5"
+    "@meetopenbot/plugin-sdk": "^1.1.2"
   },
   "devDependencies": {
     "@types/node": "^20.10.1",