openmausbot 0.1.76 → 0.1.78

package/dist-server/server/agent-tool-policy.js

@@ -7,6 +7,7 @@
 export const READ_ONLY_AGENT_TOOL_NAMES = new Set([
     "list_bots",
     "list_team_setup",
+    "list_shared_computers",
     "list_rooms",
     "list_threads",
     "check_delegation",

package/dist-server/server/auto-approve.js

@@ -7,6 +7,22 @@
 // verdict the app synthesizes is Full access, because that level is the
 // person's explicit, separately confirmed grant to answer every prompt.
 // Questions never come through here: a bot's question always reaches a human.
+/** A failed delivery is a runtime error, not another permission decision.
+ * An expired ask must never become a fresh Allow/Deny card. */
+export async function deliverFullAccessApproval(adapter, threadId, requestId, turnId, isCurrent = () => false) {
+    if (!adapter)
+        return "failed";
+    try {
+        return await adapter.respondToRequest(threadId, requestId, { behavior: "allow" });
+    }
+    catch {
+        // Some adapters ignore the optional native turn id. Recheck the
+        // server's owning generation before interrupting that thread.
+        if (turnId && isCurrent())
+            await adapter.interruptTurn(threadId, turnId).catch(() => { });
+        return "failed";
+    }
+}
 /** Full access is the person's explicit grant to this receiving bot, including
  * delegated work. It never inherits the sender's mode or elevates another bot.
  * Custom is a provider-config choice rather than an app Full-access grant, so

package/dist-server/server/bot-overview.js

@@ -1,4 +1,5 @@
 import { approvalModeFor } from "../shared/approval-mode.js";
+import { cronScheduleLabel } from "../shared/cron-label.js";
 /** The first paragraph of a SOUL.md-style persona, capped at 240 characters
  * so a settings-dialog card never renders a full standing-instructions
  * document inline. */
@@ -32,6 +33,8 @@ function clockTime(hhmm) {
  * approval card's scheduleText() carries the anchor instant and timezone
  * name because a card must be exact; a plain-language overview must not. */
 function schedulePhrase(schedule, timeZone) {
+    if (schedule.type === "cron")
+        return cronScheduleLabel(schedule);
     if (schedule.type === "once") {
         const date = new Date(schedule.at).toLocaleDateString("en-US", { month: "long", day: "numeric", timeZone });
         return `Once on ${date} at ${time(schedule.at, timeZone)}`;
@@ -178,7 +181,7 @@ function wontLines(facts) {
         lines.push("Command approvals follow the provider's custom configuration.");
     if (facts.bot.peers?.length === 0)
         lines.push("Cannot initiate contact with other bots.");
-    else if (facts.bot.approvePeerComms)
+    else if (mode !== "full" && facts.bot.approvePeerComms)
         lines.push("Asks before contacting other bots.");
     // "Has no connected apps." is definite when apps are off for this bot,
     // not configured, or unsupported by its engine — no inventory needed. Only
@@ -191,7 +194,8 @@ function wontLines(facts) {
         lines.push("Can't use a computer.");
     if (!facts.routines.some((routine) => routine.enabled))
         lines.push("Won't act on a schedule.");
-    lines.push("Profile proposal cards require your approval.");
+    if (mode !== "full")
+        lines.push("Profile proposal cards require your approval.");
     return lines;
 }
 export function buildBotOverview(facts) {

package/dist-server/server/bot-package.js

@@ -3,6 +3,8 @@ import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 import { schemaIssue } from "./schema.js";
 import { isSkillName, parseSkillMd, SKILL_FILE_MAX_BYTES } from "./skills.js";
 import { BOT_PROFILE_LIMITS } from "../shared/bot-profile.js";
+import { normalizeCronSchedule } from "../shared/routine-schedule.js";
+import { cronScheduleLabel } from "../shared/cron-label.js";
 export const BOT_PACKAGE_FORMAT = "openmaus.package";
 export const BOT_PACKAGE_VERSION = 1;
 export const BOTMRR_MARKDOWN_VERSION = 1;
@@ -58,6 +60,7 @@ const intervalWindow = z.object({
     message: "must end later on the same day",
 });
 const packageRoutineScheduleSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("cron"), expression: requiredText(256), timeZone: requiredText(100) }).strict(),
     z.object({ type: z.literal("once"), at: z.number().int() }),
     z.object({
         type: z.literal("daily"),
@@ -73,6 +76,15 @@ const packageRoutineScheduleSchema = z.discriminatedUnion("type", [
         endsAt: z.number().int().nonnegative().max(MAX_DATE_MS).optional(),
     }),
 ]).superRefine((schedule, context) => {
+    if (schedule.type === "cron") {
+        try {
+            normalizeCronSchedule(schedule);
+        }
+        catch (error) {
+            context.addIssue({ code: "custom", message: error instanceof Error ? error.message : "Invalid cron schedule" });
+        }
+        return;
+    }
     if (schedule.type !== "interval")
         return;
     if (schedule.window) {
@@ -321,9 +333,11 @@ export function renderBotPackageMarkdown(document) {
         `**Owner:** \`${routine.agent}\`  `,
         `**Schedule:** ${routine.schedule.type === "daily"
             ? `${routine.schedule.time} on weekdays ${routine.schedule.weekdays.join(", ")}`
-            : routine.schedule.type === "interval"
-                ? intervalScheduleText(routine.schedule)
-                : `once at ${routine.schedule.at}`}  `,
+            : routine.schedule.type === "cron"
+                ? `${cronScheduleLabel(routine.schedule)} (\`${routine.schedule.expression}\`)`
+                : routine.schedule.type === "interval"
+                    ? intervalScheduleText(routine.schedule)
+                    : `once at ${routine.schedule.at}`}  `,
         `**Run limit:** ${routine.timeoutMinutes === undefined ? "none" : `${routine.timeoutMinutes} minutes`}  `,
         "**Initial state:** paused — the user must enable it",
         "",

package/dist-server/server/browser-live.js

@@ -564,6 +564,9 @@ export class BrowserLive {
     closeForSession(session) { for (const viewer of this.viewers.values())
         if (viewer.session === session)
             this.close(viewer); }
+    closeForOwner(owner) { for (const viewer of this.viewers.values())
+        if (viewer.owner === owner)
+            this.close(viewer); }
     closeForBot(botId) { for (const viewer of this.viewers.values())
         if (viewer.botId === botId)
             this.close(viewer); }

package/dist-server/server/chief-of-staff.js

@@ -29,7 +29,7 @@ export function chiefOfStaffSystemPrompt(chiefId, bots, canDelegate, trustedOpen
     });
     const delegation = canDelegate
         ? boundedCoordination
-            ? "Use list_bots or list_room_targets for the live reachable roster. Use coordinate_bots to ask actual teammates for advice or assign concrete work. Outside a room, each assignment gets a separate conversation using the recipient's own model and permissions. Busy teammates queue. Give self-contained briefs, then end your turn; you resume automatically after their results return. Leads can coordinate their own specialists. Do not poll, send acknowledgements as new work, or substitute native helpers for named bots. On return, verify the requested outcome, resolve decisions within the user's scope, request concrete corrections with rework=true when necessary, and return one consolidated answer. Consultations are advice, not proof that work or tests ran."
+            ? "Use list_bots or list_room_targets for the live reachable roster. Use coordinate_bots to ask actual teammates for advice or assign concrete work. Outside a room, everything you send a teammate continues your one standing conversation with them, using their own model and permissions, so they still have the context of your earlier assignments. Busy teammates queue. Give self-contained briefs, then end your turn; you resume automatically after their results return. Leads can coordinate their own specialists. Do not poll, send acknowledgements as new work, or substitute native helpers for named bots. On return, verify the requested outcome, resolve decisions within the user's scope, request concrete corrections with rework=true when necessary, and return one consolidated answer. Consultations are advice, not proof that work or tests ran."
             : [
                 "Use list_bots to confirm the live roster and IDs. When assigning work to a teammate, use delegate_bot: it returns immediately, keeps you available to the user, and delivers the teammate's outcome back into this conversation automatically — success or failure. When the result arrives you are woken with it: report it to the user and act. If the teammate fails or stalls, tell the user plainly and decide the next step yourself.",
                 "After delegate_bot accepts the task, acknowledge the handoff and continue with any independent work or end your turn. Do not call wait_delegation or repeatedly poll check_delegation in the same turn.",
@@ -46,7 +46,7 @@ export function chiefOfStaffSystemPrompt(chiefId, bots, canDelegate, trustedOpen
         "Own the outcome: understand the request, decide what to handle yourself, coordinate the right specialists when useful, and return one concise consolidated answer.",
         "Do not delegate trivial work merely to appear busy. Never invent a teammate's progress or result. Normal permission and approval rules still apply.",
         delegation,
-        canDelegate ? "When the user asks you to assemble or configure a team, use list_team_setup for the exact authorized teams, bot IDs and model catalog, then propose_team_setup once with all named specialists and their profile/model changes. Include new teams explicitly; the combined card reviews their creation and your access. Existing thread models stay unchanged. End your turn after the proposal: the user's decision automatically resumes you once with a structured result. Do not ask for another yes, poll, or repeat the proposal. After successful setup, use the available coordination tools for already requested work. Use create_bot only for a single specialist when no combined setup was requested. For explicitly requested bot deletion, use propose_bot_deletion separately. Do not create duplicate or unnecessary bots." : "",
+        canDelegate ? "When the user asks you to assemble or configure a team, use list_team_setup for the exact authorized teams, bot IDs and model catalog, then propose_team_setup once with all named specialists and their profile/model changes. Include new teams explicitly; the plan covers their creation and your access. Existing thread models and other bots' execution permissions stay unchanged. Follow the tool result: granted Full Access may apply the plan immediately; after an applied result, continue already-requested work without another confirmation. Only if review is pending, end your turn: the user's decision automatically resumes you once with a structured result. Report failed or cancelled results honestly. Do not ask for another yes, poll, or repeat the proposal. After successful setup, use the available coordination tools for already requested work. Use create_bot only for a single specialist when no combined setup was requested. For explicitly requested bot deletion, use propose_bot_deletion separately and follow its applied or pending result too. Do not create duplicate or unnecessary bots." : "",
         chief?.managedSections?.length ? "Reachable teammates in your allowed teams:" : `Current ${sectionName} section team:`,
         roster,
         trustedOpenMausStatus,

package/dist-server/server/config.js

@@ -208,6 +208,10 @@ const featureConfigSchema = z.object({
     /** Experimental built-in browser. Off until explicitly enabled; each bot
      * also has its own switch. */
     browser: z.boolean().optional(),
+    /** Opt-in computer sharing (a desktop lending folders, a terminal or
+     * computer control to a workspace). Off until explicitly enabled; there is
+     * no Settings toggle — see sharedComputersEnabled. */
+    sharedComputers: z.boolean().optional(),
 });
 /** First-run progress. Kept in the workspace config rather than a browser so
  * it survives cleared site data and is shared by every paired client. Hint
@@ -435,6 +439,18 @@ export function showToolCallsEnabled(cfg) {
 export function builtInBrowserEnabled(cfg) {
     return cfg.features?.browser === true;
 }
+/** Opt-in computer sharing: the routes, the agent tools, the advertised
+ * capability and the desktop connector. Off unless an explicit `true` turns
+ * it on, because the reviewed feature still has open security holes (a
+ * read-only folder grant could be escalated to a shell).
+ *
+ * Deliberately NOT a Settings toggle: this is a maintainer-only escape hatch
+ * for an unfinished feature, not a user preference. Someone who needs it
+ * enables it by hand in `~/.openmausbot/config.json`
+ * (`{"features": {"sharedComputers": true}}`) and restarts the server. */
+export function sharedComputersEnabled(cfg) {
+    return cfg.features?.sharedComputers === true;
+}
 /** Config sections no provider driver reads. A write that touches only
  * these must not rebuild the fleet: rebuilding disposes every engine child
  * and reloads it, seconds of work that would also interrupt in-flight

package/dist-server/server/drivers/acp/core.js

@@ -35,7 +35,7 @@ import { supportsApprovalMode } from "../../../shared/approval-mode.js";
 // packaged server dir entirely. See server/proxy-paths.ts.
 const COMPUTER_PROXY_PATH = SPAWNED_PROXIES.computer;
 import { appendNative } from "../native.js";
-import { commandSummary } from "../../tool-summary.js";
+import { commandSummary, toolDetailPreview } from "../../tool-summary.js";
 import { SPAWNED_PROXIES } from "../../proxy-paths.js";
 const envOr = (key, fallback) => Number(process.env[key] ?? fallback);
 const INIT_TIMEOUT = envOr("OPENMAUS_ACP_INIT_TIMEOUT_MS", 300_000);
@@ -620,6 +620,7 @@ export function createAcpDriver(support) {
                                 itemId: u.toolCallId,
                                 title: String(u.rawInput?.command ?? u.title ?? "tool").slice(0, 80),
                                 summary: commandSummary(u.rawInput),
+                                input: toolDetailPreview(u.rawInput),
                             });
                             break;
                         }
@@ -631,6 +632,7 @@ export function createAcpDriver(support) {
                                     itemType: "tool",
                                     itemId: u.toolCallId,
                                     ok: u.status !== "failed",
+                                    output: toolDetailPreview(u.rawOutput ?? u.content),
                                 });
                             }
                             break;

package/dist-server/server/drivers/agents-proxy.js

@@ -22,9 +22,9 @@
 //                                          never move bots or sections
 //   request_credential(id, reason?)       → show a secure, allowlisted key card
 //   list_routines()                       → inspect this bot's scheduled work
-//   propose_routine(...)                  → show a confirmation card for a new routine
-//   propose_routine_action(...)           → show a confirmation card for a routine change
-//   propose_profile(...)                  → show a confirmation card for a profile change
+//   propose_routine(...)                  → apply or request confirmation for a new routine
+//   propose_routine_action(...)           → apply or request confirmation for a routine change
+//   propose_profile(...)                  → apply or request confirmation for a profile change
 //
 // Speaks raw JSON-RPC 2.0 over stdio (no MCP SDK — house style, matches
 // computer-proxy / permission-proxy). All state comes from env, injected by
@@ -35,6 +35,7 @@
 //   OMB_TURN_DEPTH   this turn's comms depth (the harness refuses recursion)
 import readline from "node:readline";
 import { CREDENTIAL_TARGETS, isCredentialTargetId } from "../../shared/credential-request.js";
+import { normalizeCronSchedule } from "../../shared/routine-schedule.js";
 import { agentToolAnnotations } from "../agent-tool-policy.js";
 import { peerName } from "../peer-roster.js";
 const HARNESS = process.env.OMB_HARNESS_URL ?? "http://127.0.0.1:8799";
@@ -43,6 +44,9 @@ const THREAD_ID = process.env.OMB_THREAD_ID ?? "";
 const TOKEN = process.env.OMB_COMMS_TOKEN ?? "";
 const DEPTH = Number(process.env.OMB_TURN_DEPTH ?? "0") || 0;
 const SKILL_AUTHORING_ENABLED = process.env.OMB_SKILL_AUTHORING_ENABLED === "1";
+// Opt-in computer sharing (server features.sharedComputers). Off unless the
+// harness says "1", the same way skill authoring is gated above.
+const SHARED_COMPUTERS_ENABLED = process.env.OMB_SHARED_COMPUTERS_ENABLED === "1";
 const MAX_CREATED_PER_TURN = 4;
 let createdThisTurn = 0;
 // Same spirit as MAX_CREATED_PER_TURN above and MAX_QUEUED_PER_THREAD in
@@ -83,12 +87,22 @@ const WEEKDAYS = [
 const ROUTINE_SCHEDULE_SCHEMA = {
     type: "object",
     additionalProperties: false,
-    description: 'Either {"type":"once","at":RFC3339} for one future run, {"type":"weekly","time":"HH:MM","weekdays":[...]} for chosen days, {"type":"daily","time":"HH:MM"} for every day, or {"type":"interval","every_minutes":15} to repeat. Intervals can optionally be limited with weekdays, window_start + window_end, and ends_at.',
+    description: 'Use {"type":"cron","expression":"0 9 1 * *","timeZone":"Asia/Kolkata"} for 09:00 on the first of each month, once with at for one future run, weekly with time + weekdays, daily with time, or interval with every_minutes for elapsed-time repetition. Intervals can optionally be limited with weekdays, window_start + window_end, and ends_at.',
     properties: {
         type: {
             type: "string",
-            enum: ["once", "weekly", "daily", "interval"],
-            description: "once = a single future run; weekly = chosen weekdays; daily = every day; interval = every N minutes.",
+            enum: ["once", "weekly", "daily", "interval", "cron"],
+            description: "once = a single future run; weekly = chosen weekdays; daily = every day; interval = every N elapsed minutes; cron = a calendar rule in an explicit timezone.",
+        },
+        expression: {
+            type: "string",
+            maxLength: 256,
+            description: "Only for cron: five fields, minute hour day-of-month month weekday. Examples: 0 9 1 * * = monthly on day 1 at 09:00; 0 9 L * * = last day of each month; 0 9 * * MON#2 = second Monday of each month. Lists, ranges and steps are supported. No seconds, year, or @ macros. Never substitute daily AI date checks for a calendar rule.",
+        },
+        timeZone: {
+            type: "string",
+            maxLength: 128,
+            description: "Required for cron: explicit IANA timezone, for example Asia/Kolkata, America/New_York, or UTC. Use the user's requested zone; resolve ambiguity before proposing. Do not send a numeric offset or local-time abbreviation.",
         },
         at: {
             type: "string",
@@ -111,7 +125,7 @@ const ROUTINE_SCHEDULE_SCHEMA = {
         },
         starts_at: {
             type: "string",
-            description: "Optional for type interval: RFC3339 date-time with an explicit timezone offset that anchors the cadence. Omit to start one interval after confirmation.",
+            description: "Optional for type interval: RFC3339 date-time with an explicit timezone offset that anchors the cadence. Omit to start one interval after the routine is applied (immediately with granted Full Access, otherwise after confirmation).",
         },
         window_start: {
             type: "string",
@@ -154,7 +168,8 @@ const SHORT_WEEKDAYS = {
 };
 const SUPPORTED_SCHEDULES = 'Supported schedules: {"type":"once","at":"2026-09-01T09:00:00+05:30"} (future RFC3339 with explicit offset), ' +
     '{"type":"weekly","time":"09:00","weekdays":["monday","friday"]}, {"type":"daily","time":"09:00"}, ' +
-    'or {"type":"interval","every_minutes":15,"weekdays":["monday","friday"],"window_start":"09:00","window_end":"17:00"}.';
+    '{"type":"interval","every_minutes":15,"weekdays":["monday","friday"],"window_start":"09:00","window_end":"17:00"}, ' +
+    'or {"type":"cron","expression":"0 9 1 * *","timeZone":"Asia/Kolkata"} (monthly at 09:00 on day 1; five fields and an explicit IANA timezone).';
 /** A schedule as the harness accepts it, or a message telling the model
  * exactly what to send instead. Coercion first, error second: models
  * routinely stringify nested objects, say "daily", or shorten weekday
@@ -179,7 +194,9 @@ function normalizeScheduleInput(args) {
             ? ["type", "time", "weekdays"]
             : type === "interval"
                 ? ["type", "every_minutes", "everyMinutes", "starts_at", "anchorAt", "weekdays", "every_day", "window_start", "window_end", "window", "all_day", "ends_at", "endsAt", "never_ends"]
-                : null;
+                : type === "cron"
+                    ? ["type", "expression", "timeZone"]
+                    : null;
     // Provider conversions may send unused optional fields as null. Ignore
     // those, but never silently discard an actual scheduling constraint (for
     // example timezone or a misspelled starts_at) and approve different work.
@@ -187,6 +204,14 @@ function normalizeScheduleInput(args) {
     if (unsupported) {
         return { error: `Unsupported ${type} schedule field "${unsupported}". Weekly and daily times use the computer's timezone from list_routines. ${SUPPORTED_SCHEDULES}` };
     }
+    if (type === "cron") {
+        try {
+            return { schedule: { ...normalizeCronSchedule({ type, expression: raw.expression, timeZone: raw.timeZone }) } };
+        }
+        catch (error) {
+            return { error: `${error instanceof Error ? error.message : "Invalid cron schedule"}. ${SUPPORTED_SCHEDULES}` };
+        }
+    }
     if (type === "once") {
         if (typeof raw.at !== "string" || !raw.at.trim()) {
             return { error: `A once schedule needs "at": a future RFC3339 date-time with an explicit offset, for example 2026-09-01T09:00:00+05:30.` };
@@ -308,7 +333,7 @@ function normalizeScheduleInput(args) {
             },
         };
     }
-    if (type === "cron" || type === "hourly" || type === "minutes") {
+    if (type === "hourly" || type === "minutes") {
         return { error: `Use an interval schedule for every-N-minutes work. ${SUPPORTED_SCHEDULES}` };
     }
     return { error: `Unknown schedule type "${type || "(missing)"}". ${SUPPORTED_SCHEDULES}` };
@@ -339,10 +364,25 @@ const ROUTINE_FIELDS_SCHEMA = {
     },
     continuity: {
         type: "boolean",
-        description: "Opt in to using the latest completed run's bounded report as historical context. Defaults to false; set false in an update to start fresh again. Shown on the confirmation card.",
+        description: "Opt in to using the latest completed run's bounded report as historical context. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation.",
     },
 };
+const PROPOSAL_OUTCOME = " Read the result: granted Full Access may apply the change immediately. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success from the permission mode alone; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
 const TOOLS = [
+    {
+        name: "list_shared_computers",
+        description: "List online desktop computers explicitly shared with this workspace, and their allowed folders/capabilities. These are the user's computers, not this server. An offline or unshared computer cannot be accessed. Folder paths use opaque folder IDs and relative paths.",
+        inputSchema: { type: "object", properties: {}, additionalProperties: false },
+    },
+    {
+        name: "shared_computer",
+        description: "Use a desktop explicitly shared by the user. Discover computer_id and folder_id with list_shared_computers. list_files/read_file/write_file are confined to chosen folders; paths are relative. read_file returns sha256; overwriting requires expected_sha256. Binary files support base64 encoding. run_command requires a SEPARATE unrestricted terminal grant. computer_tools lists the native computer-control tools; computer_call invokes one with arguments and needs a SEPARATE computer-control grant. Never substitute the server's filesystem when this desktop is offline. Actions are not retried automatically; inspect an uncertain outcome before retrying.",
+        inputSchema: { type: "object", additionalProperties: false, properties: {
+                computer_id: { type: "string" }, action: { type: "string", enum: ["list_files", "read_file", "write_file", "run_command", "computer_tools", "computer_call"] },
+                folder_id: { type: "string" }, path: { type: "string" }, content: { type: "string" }, encoding: { type: "string", enum: ["utf8", "base64"] }, expected_sha256: { type: "string" },
+                command: { type: "string" }, tool_name: { type: "string" }, arguments: { type: "object", additionalProperties: true },
+            }, required: ["computer_id", "action"] },
+    },
     {
         name: "list_room_targets",
         description: "Discover actual OpenMausBot teammates and rooms in your allowed teams. Works in a normal bot conversation too; no room is required. Returns bot and room IDs, roles and working folders, never other conversations' history. Use these bots, not native coding helpers with similar names, when the user asks their team to work together.",
@@ -350,13 +390,14 @@ const TOOLS = [
     },
     {
         name: "coordinate_bots",
-        description: "Ask existing OpenMausBot teammates for advice or assign concrete work. From normal chat each assignment gets a separate recipient conversation; from a room it defaults to this room. Use group_id from list_room_targets for a specific room. Name 1-4 bot_ids: they receive only your brief and use their own model, tools and permissions. Busy bots queue. They can consult their specialists; all results return here and resume you automatically. Include exact file paths, constraints and what must be verified. After sending all assignments, END your turn; do not poll or wait. On return, resolve tradeoffs, verify the requested outcome and request concrete corrections if necessary before giving one final answer. Do not send acknowledgements as new work.",
+        description: "Ask existing OpenMausBot teammates for advice or assign concrete work. From normal chat every assignment you send a teammate continues your one standing conversation with that teammate, so they keep the context of what you asked before; from a room it defaults to this room. Use group_id from list_room_targets for a specific room. Name 1-4 bot_ids: they receive only your brief and use their own model, tools and permissions. Busy bots queue. They can consult their specialists; all results return here and resume you automatically. Include exact file paths, constraints and what must be verified. After sending all assignments, END your turn; do not poll or wait. On return, resolve tradeoffs, verify the requested outcome and request concrete corrections if necessary before giving one final answer. Do not send acknowledgements as new work.",
         inputSchema: { type: "object", additionalProperties: false, properties: {
-                group_id: { type: "string", description: "Optional destination room. Omit for this room, or separate recipient tasks when chatting directly." },
+                group_id: { type: "string", description: "Optional destination room. Omit for this room, or your standing conversation with each teammate when chatting directly." },
                 bot_ids: { type: "array", items: { type: "string" }, minItems: 1, maxItems: 4, uniqueItems: true },
                 message: { type: "string", minLength: 1, maxLength: 4000, description: "Self-contained question or task for these teammates. Send separate requests when responsibilities differ." },
                 request_key: { type: "string", description: "A short unique assignment key. Reuse for an identical retry." },
                 rework: { type: "boolean", description: "True only for concrete additional work from someone who already completed a request." },
+                label: { type: "string", description: "Optional short name (one line, at most 60 characters) for this job. Used only when the teammate is still working on your previous assignment and this one therefore runs in its own thread beside your standing conversation." },
             }, required: ["bot_ids", "message", "request_key"] },
     },
     {
@@ -480,7 +521,7 @@ const TOOLS = [
     },
     {
         name: "propose_team_setup",
-        description: "Chief of Staff only: propose all requested specialist creation, profile/model configuration, and authorized team moves in ONE combined review card. Nothing changes until the user applies it. Use exact catalog engine/model IDs from list_team_setup. Combine all fields for each bot; use the same create key or botId to coalesce repeated entries. New teams must be named explicitly in newTeams and have a specialist in this plan; the card also asks to authorize your access to just those new teams. Existing unauthorized teams cannot be included. Models change bot defaults for groups/new threads; existing threads and execution permissions stay unchanged. After proposing, end your turn. The decision and structured result automatically resume you once; do not ask again, poll, or repeat the proposal.",
+        description: "Chief of Staff only: submit all requested specialist creation, profile/model configuration, and authorized team moves in ONE combined plan. Use exact catalog engine/model IDs from list_team_setup. Combine all fields for each bot; use the same create key or botId to coalesce repeated entries. New teams must be named explicitly in newTeams and have a specialist in this plan; access is granted only to those new teams. Existing unauthorized teams cannot be included. Models change bot defaults for groups/new threads; existing threads and execution permissions stay unchanged. If review is pending, the decision and structured result automatically resume you once; do not ask again, poll, or repeat the proposal." + PROPOSAL_OUTCOME,
         inputSchema: {
             type: "object", additionalProperties: false,
             properties: {
@@ -507,14 +548,14 @@ const TOOLS = [
     },
     {
         name: "propose_bot_deletion",
-        description: "Chief of Staff only: when the user explicitly asks to delete a named teammate, create a separate confirmation card for that exact bot. Deletion removes its conversations, memory, instructions and skills; generated project files remain. Running work and owned computers can block deletion. Never delete yourself, substitute an archive, or put deletion into a setup batch. End your turn after proposing; the decision and result resume you once.",
+        description: "Chief of Staff only: when the user explicitly asks to delete a named teammate, submit a separate deletion request for that exact bot. Deletion removes its conversations, memory, instructions and skills; generated project files remain. Running work and owned computers can block deletion. Never delete yourself, substitute an archive, or put deletion into a setup batch. If review is pending, the decision and result resume you once." + PROPOSAL_OUTCOME,
         inputSchema: { type: "object", additionalProperties: false, properties: {
                 bot_id: { type: "string", minLength: 1 }, reason: { type: "string", minLength: 1, maxLength: 500 },
             }, required: ["bot_id", "reason"] },
     },
     {
         name: "create_room",
-        description: "Create a room in your own section when the user asks for one (maximum four per turn). Chiefs only. Choose active peers from list_bots; you are included automatically as the default responder. This creates no turns or messages. Section moves stay with the user. If peer approval is enabled, ask the user to make the room change instead.",
+        description: "Create a room in your own section when the user asks for one (maximum four per turn). Chiefs only. Choose active peers from list_bots; you are included automatically as the default responder. This creates no turns or messages. Section moves stay with the user. Follow the tool result under the effective access level; if permission is refused, ask the user to make the room change instead, without trying another route.",
         inputSchema: {
             type: "object",
             additionalProperties: false,
@@ -538,7 +579,7 @@ const TOOLS = [
     },
     {
         name: "manage_room",
-        description: "Manage a room from list_rooms: rename it, change its bulletin, or add/remove/set members. Chiefs only, within your own section and allowed peers; keep yourself as a member. Busy rooms, pending approvals and team-goal leads are protected. You cannot move rooms or bots between sections. If peer approval is enabled or the change is refused, ask the user to make the change instead.",
+        description: "Manage a room from list_rooms: rename it, change its bulletin, or add/remove/set members. Chiefs only, within your own section and allowed peers; keep yourself as a member. Busy rooms, pending approvals and team-goal leads are protected. You cannot move rooms or bots between sections. Follow the tool result under the effective access level; if the change is refused, report the blocker and ask the user to make the change instead, without trying another route.",
         inputSchema: {
             type: "object",
             additionalProperties: false,
@@ -646,7 +687,7 @@ const TOOLS = [
     },
     {
         name: "propose_routine",
-        description: "Prepare a new routine after the user explicitly asks to schedule recurring or future work. Call list_routines first for relative dates or times so you use its authoritative current time and timezone. This only creates a durable confirmation card; it does NOT enable the routine. Resolve ambiguous dates, times, timezone, destination, or instructions with the user first, and always give one-time schedules an explicit RFC3339 offset. After calling it, end the turn and do not claim the routine exists until the user confirms the card. If the user asks for the routine to run as ANOTHER bot in your section, call list_bots and pass that bot's id as for_bot_id.",
+        description: "Prepare a new routine after the user explicitly asks to schedule recurring or future work. Call list_routines first for relative dates or times so you use its authoritative current time and timezone. Convert calendar requests (monthly dates, last days, nth weekdays) into a validated five-field cron schedule with an explicit IANA timeZone; keep elapsed every-N-minutes work as interval. Never approximate unsupported requests with a different weekly schedule or an AI date-check routine; explain the limitation instead. Resolve ambiguous dates, times, timezone, destination, or instructions with the user first, and always give one-time schedules an explicit RFC3339 offset. If the user asks for the routine to run as ANOTHER bot in your section, call list_bots and pass that bot's id as for_bot_id; each run retains that bot's own permissions." + PROPOSAL_OUTCOME,
         inputSchema: {
             type: "object",
             additionalProperties: false,
@@ -662,7 +703,7 @@ const TOOLS = [
     },
     {
         name: "propose_routine_action",
-        description: "Prepare a user-requested change to one of this bot's existing routines. This only creates a durable confirmation card; it does NOT apply the change. Use list_routines first to get the routine id. After calling it, end the turn and do not claim the action completed until the user confirms the card.",
+        description: "Prepare a user-requested change to one of this bot's existing routines. Use list_routines first to get the routine id." + PROPOSAL_OUTCOME,
         inputSchema: {
             type: "object",
             additionalProperties: false,
@@ -685,7 +726,7 @@ const TOOLS = [
     },
     {
         name: "propose_profile",
-        description: "Propose changes to your own name, title, description, standing instructions (SOUL.md), or working folder (cwd). This only creates a confirmation card; nothing changes until the user approves it. After calling it, end the turn and do not claim the change is applied. Keep SOUL.md short — who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) to propose a change for another bot in its section.",
+        description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), or working folder (cwd). Keep SOUL.md short — who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section." + PROPOSAL_OUTCOME,
         inputSchema: {
             type: "object",
             additionalProperties: false,
@@ -715,7 +756,7 @@ const TOOLS = [
     },
     {
         name: "skill_manage",
-        description: "Stage a new or updated reusable SKILL.md for the user to review. Create stays inactive until approval; update leaves the current version unchanged until approval. Never update unless the user explicitly asked to revise that named skill. After calling this, end the turn and wait for the in-app decision.",
+        description: "Submit a new or updated reusable SKILL.md. Never update unless the user explicitly asked to revise that named skill. While review is pending, a create stays inactive and an update leaves the current version unchanged." + PROPOSAL_OUTCOME,
         inputSchema: {
             type: "object",
             additionalProperties: false,
@@ -735,7 +776,7 @@ const TOOLS = [
                 },
                 gist: {
                     type: "string",
-                    description: "Optional one-line summary shown on the user's confirmation card.",
+                    description: "Optional one-line summary of the skill change, included in its applied result or pending review.",
                 },
                 source: {
                     type: "string",
@@ -753,15 +794,30 @@ const SKILL_TOOL_NAMES = new Set(["skills_list", "skill_manage"]);
 const AUTHORING_TOOLS = SKILL_AUTHORING_ENABLED
     ? TOOLS
     : TOOLS.filter((tool) => !SKILL_TOOL_NAMES.has(tool.name));
+// A workspace with computer sharing off refuses the routes behind these two,
+// so they must not be advertised at all: a model that sees a tool it cannot
+// use spends turns discovering that.
+const SHARED_COMPUTER_TOOL_NAMES = new Set(["list_shared_computers", "shared_computer"]);
+const SHAREABLE_TOOLS = SHARED_COMPUTERS_ENABLED
+    ? AUTHORING_TOOLS
+    : AUTHORING_TOOLS.filter((tool) => !SHARED_COMPUTER_TOOL_NAMES.has(tool.name));
 // One teamwork path in room turns; keep all unrelated integrations available.
 // Ordinary direct chats use this same bounded coordinator. Goal-owned turns
 // retain their independent loop and cannot start a second coordinator.
 const ROOM_ONLY_TOOLS = new Set(["list_room_targets", "coordinate_bots"]);
 const ROOM_REPLACED_TOOLS = new Set(["ask_bot", "delegate_bot", "check_delegation", "wait_delegation", "start_thread", "send_to_thread", "wait_thread"]);
 const COORDINATING = process.env.OMB_ROOM_TURN === "1";
+const OWN_THREAD_CREATION = process.env.OMB_OWN_THREAD_CREATION === "1";
 const AVAILABLE_TOOLS = COORDINATING
-    ? AUTHORING_TOOLS.filter(tool => !ROOM_REPLACED_TOOLS.has(tool.name))
-    : AUTHORING_TOOLS.filter(tool => !ROOM_ONLY_TOOLS.has(tool.name));
+    ? SHAREABLE_TOOLS.filter(tool => !ROOM_REPLACED_TOOLS.has(tool.name) || (tool.name === "start_thread" && OWN_THREAD_CREATION))
+        .map(tool => tool.name === "start_thread" ? {
+        ...tool,
+        description: "Open a separate job on yourself with its own history and run, without switching the person's selected conversation. Use only when the user requests independent jobs (for example one review per pull request). Give a short specific title and complete instructions; you can open at most five per turn. This is not a teammate handoff: use coordinate_bots for teammates and their automatic replies. Self-opened jobs cannot recursively open more jobs. If refused, do not retry; explain what remains.",
+        inputSchema: { ...tool.inputSchema, properties: { ...tool.inputSchema.properties,
+                bot_id: { type: "string", enum: [BOT_ID], description: "Leave out, or use your own bot ID. For teammates use coordinate_bots." },
+            } },
+    } : tool)
+    : SHAREABLE_TOOLS.filter(tool => !ROOM_ONLY_TOOLS.has(tool.name));
 const send = (msg) => process.stdout.write(JSON.stringify(msg) + "\n");
 const ok = (id, result) => send({ jsonrpc: "2.0", id, result });
 const rpcErr = (id, code, message) => send({ jsonrpc: "2.0", id, error: { code, message } });
@@ -845,7 +901,26 @@ function routineFields(args) {
         fields.continuity = args.continuity;
     return { fields };
 }
+/** Full Access is decided by the harness, not inferred from a model claim or
+ * local environment flag. Missing state preserves older pending responses. */
+function completedProposalResult(r, subject) {
+    const state = r.state;
+    const result = jsonRecord(r.result) ? r.result : undefined;
+    const error = typeof r.error === "string" ? r.error : typeof result?.error === "string" ? result.error : undefined;
+    const attention = error ?? (r.settlementPending && typeof r.message === "string" ? r.message : undefined);
+    if ((!state || state === "pending") && !error)
+        return undefined;
+    const summary = typeof r.summary === "string" && r.summary.trim() ? `\n\n${r.summary.trim()}` : "";
+    const details = result ? `\n\nResult: ${JSON.stringify(result)}` : "";
+    if (state !== "applied" || (result?.state !== undefined && result.state !== "applied")) {
+        return { text: `The request for ${subject} did not complete successfully.${error ? ` ${error}` : ""}${summary}${details}\n\nDo not claim it was applied. Address the reported blocker rather than repeating the request or asking for a duplicate confirmation.`, isError: true };
+    }
+    return { text: `Applied ${subject}.${summary}${details}${attention ? `\n\nNeeds attention: ${attention}` : ""}\n\nNo additional confirmation is needed. Continue the requested work; do not wait for a review card or ask the user to approve this change again.` };
+}
 function confirmationResult(r, fallback, noun = "routine") {
+    const completed = completedProposalResult(r, fallback);
+    if (completed)
+        return completed;
     const summary = typeof r.summary === "string" && r.summary.trim() ? `\n\n${r.summary.trim()}` : "";
     return {
         text: `A confirmation card is now visible to the user for ${fallback}.${summary}\n\nThis change has not been applied yet. End this turn and wait for the user to confirm or deny the card; do not claim the ${noun} was created or changed before confirmation.`,
@@ -871,7 +946,7 @@ async function callTool(name, args) {
     if (name === "coordinate_bots") {
         const r = await api("/api/internal/coordinate-bots", { method: "POST", body: JSON.stringify({
                 groupId: args.group_id, botIds: args.bot_ids, message: args.message,
-                requestKey: args.request_key, rework: args.rework,
+                requestKey: args.request_key, rework: args.rework, label: args.label,
             }) });
         return { text: JSON.stringify(r), ...(r.error ? { isError: true } : {}) };
     }
@@ -1089,6 +1164,9 @@ async function callTool(name, args) {
             };
         }
         const toBotId = typeof args.bot_id === "string" ? args.bot_id.trim() : "";
+        if (COORDINATING && toBotId && toBotId !== BOT_ID) {
+            return { text: "Use coordinate_bots for teammates; start_thread only opens a separate job on yourself.", isError: true };
+        }
         const folder = typeof args.folder === "string" ? args.folder.trim() : "";
         const body = { fromBotId: BOT_ID, fromThreadId: THREAD_ID, title, message, depth: DEPTH };
         if (toBotId)
@@ -1142,6 +1220,9 @@ async function callTool(name, args) {
                 ...(deleting ? { targetBotId: args.bot_id, reason: args.reason } : { plan: args }),
             }),
         });
+        const completed = completedProposalResult(result, deleting ? "the requested bot deletion" : "the requested team setup");
+        if (completed)
+            return completed;
         return { text: `One review card is visible: ${String(result.title)}. Nothing has been applied. End this turn; the decision and structured result resume you automatically once. Do not ask again, poll, or repeat this proposal.` };
     }
     if (name === "create_bot") {
@@ -1458,7 +1539,7 @@ async function callTool(name, args) {
         const skills = Array.isArray(r.skills) ? r.skills : [];
         const staged = Array.isArray(r.staged) ? r.staged : [];
         if (!skills.length && !staged.length) {
-            return { text: "This bot has no imported skills and nothing staged. Use skill_manage action=\"create\" to stage one for the user to confirm." };
+            return { text: "This bot has no imported skills and nothing staged. Use skill_manage action=\"create\" for a user-requested skill, then follow its applied or pending result." };
         }
         const live = skills.length
             ? skills.map((skill) => {
@@ -1511,7 +1592,10 @@ async function callTool(name, args) {
             }),
         });
         const nameLabel = typeof r.name === "string" ? r.name : "the skill";
-        const warningText = Array.isArray(r.warnings) && r.warnings.length ? `\n\nScan warnings (shown to the user):\n- ${r.warnings.join("\n- ")}` : "";
+        const warningText = Array.isArray(r.warnings) && r.warnings.length ? `\n\nScan warnings:\n- ${r.warnings.join("\n- ")}` : "";
+        const completed = completedProposalResult(r, args.action === "update" ? `the update to skill “${nameLabel}”` : `the new skill “${nameLabel}”`);
+        if (completed)
+            return { ...completed, text: completed.text + warningText };
         const status = args.action === "update"
             ? "The current version remains unchanged until the user reviews and applies the update."
             : "The skill is staged and inactive until the user reviews and enables it.";
@@ -1550,6 +1634,27 @@ async function handle(msg) {
             if (!AVAILABLE_TOOLS.some((t) => t.name === name))
                 return rpcErr(id, -32602, `Unknown tool: ${name}`);
             try {
+                // Second lock. With sharing off the tool is not in AVAILABLE_TOOLS, so
+                // a call is already refused above as an unknown tool — the same answer
+                // a build without the feature gives. This keeps the handler itself
+                // refusing if that list is ever assembled differently.
+                if (SHARED_COMPUTER_TOOL_NAMES.has(name) && !SHARED_COMPUTERS_ENABLED) {
+                    textResult(id, "Computer sharing is turned off in this workspace. There are no shared computers to use.", true);
+                    return;
+                }
+                if (name === "list_shared_computers") {
+                    textResult(id, JSON.stringify(await api("/api/internal/shared-computers")));
+                    return;
+                }
+                if (name === "shared_computer") {
+                    const response = await api("/api/internal/shared-computers", { method: "POST", body: JSON.stringify(params.arguments ?? {}) });
+                    const result = response.result;
+                    if (Array.isArray(result?.content))
+                        ok(id, result);
+                    else
+                        textResult(id, JSON.stringify(result));
+                    return;
+                }
                 const { text, isError } = await callTool(name, (params.arguments ?? {}));
                 textResult(id, text, isError);
             }

package/dist-server/server/drivers/boxagent.js

@@ -64,7 +64,7 @@ export const BoxAgentDriver = {
             const model = turn.model || MODELS.default;
             const prompt = [
                 turn.system,
-                "You are working on your own cloud computer — its desktop, Chrome, and shell are yours.",
+                "You are working on the assigned cloud computer — use its desktop, Chrome, and shell within the access described above.",
                 "",
                 turn.text,
             ]