openmausbot 0.1.63 → 0.1.66

package/dist-server/browser-proxy.js

@@ -0,0 +1,121 @@
+// server/browser-proxy.ts
+import { pathToFileURL } from "node:url";
+var MAX_INPUT_BYTES = 1048576;
+var MAX_OUTPUT_BYTES = 16777216;
+var MAX_PENDING = 16;
+function failure(id, method, message, code = -32603) {
+  return method === "tools/call" ? { jsonrpc: "2.0", id, result: { content: [{ type: "text", text: message }], isError: true } } : { jsonrpc: "2.0", id, error: { code, message } };
+}
+async function boundedJson(response) {
+  if (!response.body) throw new Error("Browser server returned an empty response.");
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  try {
+    for (; ; ) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > MAX_OUTPUT_BYTES) throw new Error("Browser response exceeded the size limit.");
+      chunks.push(Buffer.from(value));
+    }
+    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+  } finally {
+    await reader.cancel().catch(() => {
+    });
+  }
+}
+async function browserProxyRequest(frame, connection) {
+  if (!frame || typeof frame !== "object" || Array.isArray(frame)) return failure(null, null, "Invalid request.", -32600);
+  const message = frame;
+  const id = message.id ?? null;
+  if (message.jsonrpc !== "2.0" || typeof message.method !== "string" || id !== null && typeof id !== "number" && typeof id !== "string") return failure(null, null, "Invalid request.", -32600);
+  if (!Object.hasOwn(message, "id")) return void 0;
+  if (message.method === "initialize") return {
+    jsonrpc: "2.0",
+    id,
+    result: { protocolVersion: "2024-11-05", capabilities: { tools: {} }, serverInfo: { name: "openmausbot-browser", version: "1" } }
+  };
+  if (message.method === "ping") return { jsonrpc: "2.0", id, result: {} };
+  if (message.method !== "tools/list" && message.method !== "tools/call") return failure(id, message.method, "Method not found.", -32601);
+  try {
+    const url = new URL(connection.url);
+    if (!connection.token || url.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) || url.username || url.password || url.pathname !== "/" || url.search || url.hash) {
+      throw new Error("Browser connection is not configured. Start a new bot turn from OpenMausBot.");
+    }
+    const body = JSON.stringify({ method: message.method, params: message.params ?? {} });
+    if (Buffer.byteLength(body) > MAX_INPUT_BYTES) throw new Error("Browser request exceeded the size limit.");
+    const response = await fetch(new URL("/api/internal/browser/mcp", url), {
+      method: "POST",
+      redirect: "error",
+      headers: { "content-type": "application/json", authorization: `Bearer ${connection.token}` },
+      body,
+      signal: AbortSignal.timeout(13e4)
+    });
+    const payload = await boundedJson(response);
+    if (!response.ok || !payload || typeof payload !== "object" || !Object.hasOwn(payload, "result")) {
+      throw new Error(typeof payload?.error === "string" ? payload.error.slice(0, 2e3) : "Browser server is unavailable. Start a new bot turn or try again.");
+    }
+    return { jsonrpc: "2.0", id, result: payload.result };
+  } catch (error) {
+    return failure(id, message.method, error instanceof Error && !/fetch failed|abort|timeout/i.test(error.message) ? error.message : "Browser connection was interrupted. Do not repeat the action until its state is checked.");
+  }
+}
+function run() {
+  const connection = { url: process.env.OMB_HARNESS_URL ?? "", token: process.env.OMB_BROWSER_TOKEN ?? "" };
+  let input = Buffer.alloc(0);
+  let pending = 0;
+  const output = (message) => {
+    if (message === void 0) return;
+    const line = `${JSON.stringify(message)}
+`;
+    if (Buffer.byteLength(line) > MAX_OUTPUT_BYTES || process.stdout.writableLength > MAX_OUTPUT_BYTES * 2) {
+      process.stdin.destroy();
+      process.exitCode = 1;
+      return;
+    }
+    process.stdout.write(line);
+  };
+  process.stdout.on("error", () => {
+    process.stdin.destroy();
+    process.exitCode = 1;
+  });
+  process.stdin.on("data", (chunk) => {
+    input = Buffer.concat([input, chunk]);
+    let newline;
+    while ((newline = input.indexOf(10)) !== -1) {
+      if (newline > MAX_INPUT_BYTES) {
+        process.stdin.destroy();
+        process.exitCode = 1;
+        return;
+      }
+      const line = input.subarray(0, newline).toString("utf8");
+      input = input.subarray(newline + 1);
+      if (!line.trim()) continue;
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        output(failure(null, null, "Parse error.", -32700));
+        continue;
+      }
+      if (pending >= MAX_PENDING) {
+        const request = frame;
+        if (request && Object.hasOwn(request, "id")) output(failure(request.id ?? null, request.method, "Too many pending browser requests."));
+        continue;
+      }
+      pending++;
+      void browserProxyRequest(frame, connection).then(output).finally(() => {
+        pending--;
+      });
+    }
+    if (input.length > MAX_INPUT_BYTES) {
+      process.stdin.destroy();
+      process.exitCode = 1;
+    }
+  });
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) run();
+export {
+  browserProxyRequest
+};

package/dist-server/container-mcp.js

@@ -14803,6 +14803,8 @@ var defaultModelSelectionSchema = external_exports.object({
   effort: external_exports.enum(EFFORT_LEVELS).optional()
 });
 var appConfigSchema = external_exports.object({
+  /** Verified by the dedicated domain endpoint, never a generic config patch. */
+  customDomain: external_exports.string().optional(),
   defaultModelSelection: defaultModelSelectionSchema.optional(),
   /** CLI-only launch preferences. Never enable remote access implicitly. */
   cliStartup: external_exports.object({
@@ -14846,7 +14848,7 @@ var appConfigSchema = external_exports.object({
 var storedAppConfigSchema = appConfigSchema.extend({
   browserProfiles: storedBrowserProfilesSchema.optional()
 });
-var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true });
+var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
 var DATA_DIR = process.env.OMB_DATA_DIR ?? join2(homedir2(), ".openmausbot");
 var LEGACY_DATA_DIR = join2(homedir2(), ".opengrokbot");
@@ -14863,6 +14865,7 @@ function resolveProxy(relative) {
   return existsSync2(source) ? source : join3(SERVER_ROOT, `${relative}.js`);
 }
 var SPAWNED_PROXIES = {
+  browser: resolveProxy("browser-proxy"),
   computer: resolveProxy("computer-proxy"),
   permission: resolveProxy("permission-proxy"),
   containerMcp: resolveProxy("container-mcp"),