open-agents-ai 0.187.339 → 0.187.341

package/dist/index.js

@@ -278214,63 +278214,39 @@ var init_listen = __esm({
         return this._ready;
       }
       async start() {
+        let pyPath = "python3";
+        try {
+          const mod2 = await Promise.resolve().then(() => (init_py_embed(), py_embed_exports));
+          const ensure = mod2.ensureEmbedDeps;
+          const getPy = mod2.getVenvPython;
+          if (typeof ensure === "function") {
+            try {
+              const res = ensure();
+              if (res?.log) this.emit("status", res.log.slice(-500));
+            } catch {
+            }
+          }
+          if (typeof getPy === "function") {
+            pyPath = getPy();
+          }
+        } catch {
+        }
+        this.process = spawn18(pyPath, [
+          this.scriptPath,
+          "--model",
+          this.model,
+          "--chunk-seconds",
+          "3",
+          "--window-seconds",
+          "10"
+        ], {
+          stdio: ["pipe", "pipe", "pipe"],
+          env: { ...process.env }
+        });
         return new Promise((resolve40, reject) => {
           const timeout2 = setTimeout(() => {
             reject(new Error("Whisper fallback: model load timeout (5 min). First run downloads the model."));
           }, 3e5);
-          (async () => {
-            try {
-              const mod2 = await Promise.resolve().then(() => (init_py_embed(), py_embed_exports));
-              const ensure = mod2.ensureEmbedDeps;
-              const getPy = mod2.getVenvPython;
-              if (typeof ensure === "function" && typeof getPy === "function") {
-                try {
-                  const res = ensure();
-                  if (res?.log) this.emit("status", res.log.slice(-500));
-                } catch {
-                }
-                const pyPath = getPy();
-                this.process = spawn18(pyPath, [
-                  this.scriptPath,
-                  "--model",
-                  this.model,
-                  "--chunk-seconds",
-                  "3",
-                  "--window-seconds",
-                  "10"
-                ], {
-                  stdio: ["pipe", "pipe", "pipe"],
-                  env: { ...process.env }
-                });
-              } else {
-                this.process = spawn18("python3", [
-                  this.scriptPath,
-                  "--model",
-                  this.model,
-                  "--chunk-seconds",
-                  "3",
-                  "--window-seconds",
-                  "10"
-                ], {
-                  stdio: ["pipe", "pipe", "pipe"],
-                  env: { ...process.env }
-                });
-              }
-            } catch {
-              this.process = spawn18("python3", [
-                this.scriptPath,
-                "--model",
-                this.model,
-                "--chunk-seconds",
-                "3",
-                "--window-seconds",
-                "10"
-              ], {
-                stdio: ["pipe", "pipe", "pipe"],
-                env: { ...process.env }
-              });
-            }
-          })();
           const rl = createInterface2({ input: this.process.stdout });
           rl.on("line", (line) => {
             try {
@@ -278464,6 +278440,33 @@ var init_listen = __esm({
         if (tc) {
           const TranscribeLive = tc.TranscribeLive;
           if (TranscribeLive) {
+            let tcUpToDate = false;
+            try {
+              const tcPkgPath = join69(dirname18(__require.resolve?.("transcribe-cli/package.json") || ""), "package.json");
+              if (existsSync53(tcPkgPath)) {
+                const tcPkg = JSON.parse(__require("fs").readFileSync(tcPkgPath, "utf8"));
+                tcUpToDate = tcPkg.version && tcPkg.version >= "2.0.1";
+              }
+            } catch {
+              try {
+                const out = execSync44("npm list -g transcribe-cli --depth=0 --json", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 1e4 });
+                const parsed = JSON.parse(out);
+                const ver = parsed?.dependencies?.["transcribe-cli"]?.version || "";
+                tcUpToDate = ver >= "2.0.1";
+              } catch {
+              }
+            }
+            if (!tcUpToDate) {
+              try {
+                execSync44("npm i -g transcribe-cli@latest", { stdio: "pipe", timeout: 12e4 });
+                this.transcribeCliAvailable = null;
+                const reloaded = await this.loadTranscribeCli();
+                if (reloaded?.TranscribeLive) {
+                  tc = reloaded;
+                }
+              } catch {
+              }
+            }
             const venvReady = ensureVenvForTranscribeCli();
             if (!venvReady) {
               transcribeCliError = "venv Python missing numpy (required by transcribe-cli) — using whisper fallback";
@@ -325580,9 +325583,24 @@ function textResponse(res, status, body, contentType = "text/plain") {
 }
 function isOriginAllowed(origin) {
   if (!origin) return true;
-  if (_corsOrigins.includes("*")) return true;
-  if (_corsLocalOnly) return /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin);
-  return _corsOrigins.some((p2) => origin === p2 || p2.includes("*") && new RegExp("^" + p2.replace(/\*/g, ".*") + "$").test(origin));
+  const accessMode = (process.env["OA_ACCESS"] || "").toLowerCase().trim();
+  if (accessMode === "any") return true;
+  if (accessMode === "lan") {
+    try {
+      const u = new URL(origin);
+      const host = u.hostname;
+      if (/^(localhost|127\.\d+\.\d+\.\d+|::1|\[::1\])$/.test(host)) return true;
+      if (/^(10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.|169\.254\.)/.test(host)) return true;
+      if (/^f[cd][0-9a-f]{2}:/i.test(host) || /^fe[89ab][0-9a-f]:/i.test(host)) return true;
+    } catch {
+    }
+  }
+  const corsOrigins = (process.env["OA_CORS_ORIGINS"] || "").split(",").filter(Boolean);
+  if (corsOrigins.includes("*")) return true;
+  if (corsOrigins.length > 0) {
+    return corsOrigins.some((p2) => origin === p2 || p2.includes("*") && new RegExp("^" + p2.replace(/\*/g, ".*") + "$").test(origin));
+  }
+  return /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin);
 }
 function corsHeaders(req2, res) {
   const origin = req2.headers["origin"];
@@ -330436,7 +330454,7 @@ function setTimerEnabled(name11, enabled2) {
     return false;
   }
 }
-var endpointRegistry, modelRouteMap, endpointUsage, metrics, startedAt, _corsOrigins, _corsLocalOnly, runningProcesses, perKeyUsage, CRON_MARKER2;
+var endpointRegistry, modelRouteMap, endpointUsage, metrics, startedAt, runningProcesses, perKeyUsage, CRON_MARKER2;
 var init_serve = __esm({
   "packages/cli/src/api/serve.ts"() {
     "use strict";
@@ -330469,8 +330487,6 @@ var init_serve = __esm({
       totalErrors: 0
     };
     startedAt = Date.now();
-    _corsOrigins = (process.env["OA_CORS_ORIGINS"] || "").split(",").filter(Boolean);
-    _corsLocalOnly = _corsOrigins.length === 0;
     runningProcesses = /* @__PURE__ */ new Map();
     perKeyUsage = /* @__PURE__ */ new Map();
     CRON_MARKER2 = "# OPEN-AGENTS-SCHEDULED:";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.187.339",
+  "version": "0.187.341",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",
@@ -83,6 +83,7 @@
     "ignore": "^6.0.2",
     "nats.ws": "^1.30.3",
     "open-agents-nexus": "^1.17.3",
+    "transcribe-cli": "^2.0.1",
     "ws": "^8.20.0",
     "zod": "^3.24.1"
   },