openbot 0.4.7 → 0.5.5

package/dist/app/server.js

@@ -8,7 +8,8 @@ import { createRequire } from 'module';
 const require = createRequire(import.meta.url);
 const pkg = require('../../package.json');
 import { generateId } from 'melony';
-import { DEFAULT_BASE_DIR, loadConfig, resolvePath } from '../app/config.js';
+import { getBaseDir, loadConfig } from '../app/config.js';
+import { isCloudMode } from './cloud-mode.js';
 import { processService } from '../services/process.js';
 import { runAgent, STATE_AGENT_ID, ORCHESTRATOR_AGENT_ID } from '../harness/index.js';
 import { initPlugins } from '../services/plugins/registry.js';
@@ -29,8 +30,10 @@ export async function startServer(options = {}) {
         .passthrough();
     const config = loadConfig();
     processService.syncWorkspaceVariablesToProcessEnv();
-    const baseDir = config.baseDir || DEFAULT_BASE_DIR;
-    const openBotDir = resolvePath(baseDir);
+    if (isCloudMode()) {
+        console.log('[server] Cloud mode enabled');
+    }
+    const openBotDir = getBaseDir();
     const PORT = Number(options.port ?? config.port ?? process.env.PORT ?? 4132);
     const app = express();
     const clients = new Map();
@@ -194,6 +197,21 @@ export async function startServer(options = {}) {
         next();
     });
     app.use(cors());
+    const gatewayToken = process.env.OPENBOT_GATEWAY_TOKEN?.trim();
+    if (gatewayToken) {
+        app.use((req, res, next) => {
+            if (req.path === '/api/health' || req.method === 'OPTIONS') {
+                next();
+                return;
+            }
+            const got = req.get('x-openbot-gateway-token');
+            if (got !== gatewayToken) {
+                res.status(401).json({ error: 'unauthorized' });
+                return;
+            }
+            next();
+        });
+    }
     const resolvePublicBaseUrl = () => getPublicBaseUrl(PORT, config.publicUrl);
     app.use((req, res, next) => {
         const isWorkspaceUpload = req.method === 'POST' &&
@@ -206,7 +224,7 @@ export async function startServer(options = {}) {
         express.json({ limit: '20mb' })(req, res, next);
     });
     app.get('/api/health', (req, res) => {
-        res.json({ status: 'ok', version: pkg.version });
+        res.json({ status: 'ok', version: pkg.version, apiVersion: 1 });
     });
     app.get('/api/events', (req, res) => {
         const { channelId, threadId } = getContext(req);
@@ -567,8 +585,21 @@ export async function startServer(options = {}) {
             res.status(500).json({ error: 'Failed to process state request' });
         }
     });
-    app.listen(PORT, () => {
-        console.log(`\x1b[32mOpenBot server listening at http://localhost:${PORT}\x1b[0m`);
+    const HOST = process.env.HOST || '0.0.0.0';
+    const server = app.listen(PORT, HOST, () => {
+        console.log(`\x1b[32mOpenBot server listening at http://${HOST}:${PORT}\x1b[0m`);
         console.log(`🌐 Visit \x1b[96m\x1b[1mhttps://openbot.one\x1b[0m to connect to this runtime and manage everything from there. ✨`);
     });
+    const shutdown = (signal) => {
+        console.log(`\n[server] Received ${signal}, shutting down...`);
+        server.close(() => {
+            process.exit(0);
+        });
+        setTimeout(() => {
+            console.error('[server] Forced shutdown after timeout');
+            process.exit(1);
+        }, 10000).unref();
+    };
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    process.on('SIGINT', () => shutdown('SIGINT'));
 }

package/dist/harness/index.js

@@ -6,6 +6,7 @@ import { resolvePlugin } from '../services/plugins/registry.js';
 import { abortRegistry, abortKey } from '../services/abort.js';
 import { loadConfig } from '../app/config.js';
 import { getPublicBaseUrl } from '../plugins/storage/files.js';
+import { createPluginHost } from '../services/plugins/host.js';
 export { STATE_AGENT_ID, ORCHESTRATOR_AGENT_ID };
 async function emitEvent(chunk, state, { persistEvents, channelId, threadId, onEvent, parentAgentId, parentToolCallId, }) {
     ensureEventId(chunk);
@@ -67,6 +68,7 @@ export async function runAgent(options) {
             }
         }
         const builder = melony().initialState(state);
+        const pluginHost = createPluginHost(runAgent);
         for (const ref of pluginRefs) {
             const plugin = await resolvePlugin(ref.id);
             if (!plugin)
@@ -79,6 +81,7 @@ export async function runAgent(options) {
                 tools,
                 publicBaseUrl,
                 abortSignal,
+                host: pluginHost,
             }));
         }
         const runtime = builder.build();

package/dist/plugins/approval/index.js

@@ -14,7 +14,7 @@ export const approvalPlugin = {
     description: 'Gate protected tool calls behind a UI confirmation widget.',
     factory: ({ config, storage }) => (builder) => {
         // Actions that require approval. Defaults to bash.
-        const actionsToApprove = config.actions || ['action:bash'];
+        const actionsToApprove = config.actions || ['action:shell_exec'];
         for (const action of actionsToApprove) {
             builder.intercept(action, (event, context) => {
                 // If already approved in this flow, let it pass to the actual handler