openmausbot 0.1.83 → 0.1.85

package/dist-server/vps-container-mcp.js

@@ -183,6 +183,86 @@ function probeLoginShellPath() {
   );
 }
 
+// server/mcp-tool-schema.ts
+var ROOT_COMBINATORS = ["anyOf", "oneOf", "allOf", "not"];
+function isObject(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function branches(value) {
+  return Array.isArray(value) ? value.filter(isObject) : [];
+}
+function objectShape(schema) {
+  const properties = isObject(schema.properties) ? { ...schema.properties } : {};
+  const required2 = new Set(Array.isArray(schema.required) ? schema.required.filter((key) => typeof key === "string") : []);
+  const adopt = (shape) => {
+    for (const [key, value] of Object.entries(shape.properties)) if (!(key in properties)) properties[key] = value;
+  };
+  for (const branch of branches(schema.allOf)) {
+    const shape = objectShape(branch);
+    adopt(shape);
+    for (const key of shape.required) required2.add(key);
+  }
+  for (const keyword of ["anyOf", "oneOf"]) {
+    const choices = branches(schema[keyword]).map(objectShape);
+    if (choices.length === 0) continue;
+    for (const choice of choices) adopt(choice);
+    for (const key of choices[0].required) {
+      if (choices.every((choice) => choice.required.includes(key))) required2.add(key);
+    }
+  }
+  return { properties, required: [...required2] };
+}
+function describesObject(type) {
+  return type === void 0 || type === "object" || Array.isArray(type) && type.includes("object");
+}
+function providerSafeInputSchema(schema) {
+  if (!isObject(schema) || !describesObject(schema.type)) return { type: "object", properties: {} };
+  if (schema.type === "object" && ROOT_COMBINATORS.every((keyword) => !(keyword in schema))) return schema;
+  const { properties, required: required2 } = objectShape(schema);
+  const safe = { ...schema, type: "object", properties };
+  for (const keyword of ROOT_COMBINATORS) delete safe[keyword];
+  if (required2.length > 0) safe.required = required2;
+  else delete safe.required;
+  return safe;
+}
+function createToolListNormalizer() {
+  const pending = /* @__PURE__ */ new Set();
+  const idKey = (id) => `${typeof id}:${String(id)}`;
+  return {
+    observeRequest(line) {
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return;
+      }
+      if (isObject(frame) && frame.method === "tools/list" && (typeof frame.id === "number" || typeof frame.id === "string")) {
+        pending.add(idKey(frame.id));
+      }
+    },
+    rewriteResponse(line) {
+      if (pending.size === 0) return line;
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return line;
+      }
+      if (!isObject(frame) || "method" in frame || !pending.delete(idKey(frame.id))) return line;
+      if (!isObject(frame.result) || !Array.isArray(frame.result.tools)) return line;
+      let changed = false;
+      const tools = frame.result.tools.map((tool) => {
+        if (!isObject(tool)) return tool;
+        const inputSchema = providerSafeInputSchema(tool.inputSchema);
+        if (inputSchema === tool.inputSchema) return tool;
+        changed = true;
+        return { ...tool, inputSchema };
+      });
+      return changed ? JSON.stringify({ ...frame, result: { ...frame.result, tools } }) : line;
+    }
+  };
+}
+
 // server/mcp-bridge.ts
 var BRIDGE_INACTIVITY_MS = 45e3;
 var PROBE_TIMEOUT_MS = 1e4;
@@ -352,8 +432,10 @@ function runMcpBridge(options) {
       }
     } : {}
   });
+  const toolLists = createToolListNormalizer();
   let pendingInput = Promise.resolve();
   const inbound = createLineSplitter((line) => {
+    toolLists.observeRequest(line);
     const completion = intercept(line);
     if (completion) pendingInput = completion;
   });
@@ -363,7 +445,7 @@ function runMcpBridge(options) {
     inbound.flush();
     void pendingInput.finally(() => child.stdin.end());
   });
-  const outbound = createLineSplitter((line) => process.stdout.write(line + "\n"));
+  const outbound = createLineSplitter((line) => process.stdout.write(toolLists.rewriteResponse(line) + "\n"));
   child.stdout.on("data", (chunk) => outbound.push(chunk));
   child.stdout.on("end", () => outbound.flush());
   const detach = () => {
@@ -1056,7 +1138,7 @@ __export(util_exports, {
   getParsedType: () => getParsedType,
   getSizableOrigin: () => getSizableOrigin,
   hexToUint8Array: () => hexToUint8Array,
-  isObject: () => isObject,
+  isObject: () => isObject2,
   isPlainObject: () => isPlainObject,
   issue: () => issue,
   joinValues: () => joinValues,
@@ -1219,7 +1301,7 @@ function slugify(input) {
 }
 var captureStackTrace = "captureStackTrace" in Error ? Error.captureStackTrace : (..._args) => {
 };
-function isObject(data) {
+function isObject2(data) {
   return typeof data === "object" && data !== null && !Array.isArray(data);
 }
 var allowsEval = /* @__PURE__ */ cached2(() => {
@@ -1238,7 +1320,7 @@ var allowsEval = /* @__PURE__ */ cached2(() => {
   }
 });
 function isPlainObject(o) {
-  if (isObject(o) === false)
+  if (isObject2(o) === false)
     return false;
   const ctor = o.constructor;
   if (ctor === void 0)
@@ -1246,7 +1328,7 @@ function isPlainObject(o) {
   if (typeof ctor !== "function")
     return true;
   const prot = ctor.prototype;
-  if (isObject(prot) === false)
+  if (isObject2(prot) === false)
     return false;
   if (Object.prototype.hasOwnProperty.call(prot, "isPrototypeOf") === false) {
     return false;
@@ -3459,13 +3541,13 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     }
     return propValues;
   });
-  const isObject2 = isObject;
+  const isObject3 = isObject2;
   const catchall = def.catchall;
   let value;
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -3592,7 +3674,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     return (payload, ctx) => fn(shape, payload, ctx);
   };
   let fastpass;
-  const isObject2 = isObject;
+  const isObject3 = isObject2;
   const jit = !globalConfig.jitless;
   const allowsEval2 = allowsEval;
   const fastEnabled = jit && allowsEval2.value;
@@ -3601,7 +3683,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -3777,7 +3859,7 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
   });
   inst._zod.parse = (payload, ctx) => {
     const input = payload.value;
-    if (!isObject(input)) {
+    if (!isObject2(input)) {
       payload.issues.push({
         code: "invalid_type",
         expected: "object",
@@ -14962,6 +15044,97 @@ function isModelVariant(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && value.trim() === value && !new RegExp("\\p{Cc}", "u").test(value);
 }
 
+// shared/provider-icon.ts
+var PROVIDER_ICON_PRESETS = [
+  "openai",
+  "anthropic",
+  "google",
+  "azure",
+  "aws",
+  "xai",
+  "deepseek",
+  "meta",
+  "mistral",
+  "qwen",
+  "moonshot",
+  "cohere",
+  "openrouter"
+];
+var PROVIDER_ICON_MAX_BYTES = 128 * 1024;
+var PROVIDER_ICON_MAX_DIMENSION = 1024;
+function decodedBase64Bytes(value) {
+  const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+  return Math.floor(value.length * 3 / 4) - padding;
+}
+function imageDimensions(bytes, mime) {
+  const u16be = (offset) => bytes[offset] * 256 + bytes[offset + 1];
+  const u16le = (offset) => bytes[offset] + bytes[offset + 1] * 256;
+  const u24le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536;
+  const u32le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536 + bytes[offset + 3] * 16777216;
+  const u32be = (offset) => bytes[offset] * 16777216 + bytes[offset + 1] * 65536 + bytes[offset + 2] * 256 + bytes[offset + 3];
+  if (mime === "image/png") {
+    if (bytes.length < 33 || bytes.slice(0, 8).join(",") !== "137,80,78,71,13,10,26,10" || String.fromCharCode(...bytes.slice(12, 16)) !== "IHDR" || bytes.slice(-8).join(",") !== "73,69,78,68,174,66,96,130") return null;
+    return { width: u32be(16), height: u32be(20) };
+  }
+  if (mime === "image/jpeg") {
+    if (bytes.length < 12 || bytes[0] !== 255 || bytes[1] !== 216 || bytes.at(-2) !== 255 || bytes.at(-1) !== 217) return null;
+    for (let offset = 2; offset + 8 < bytes.length; ) {
+      if (bytes[offset] !== 255) {
+        offset += 1;
+        continue;
+      }
+      const marker = bytes[offset + 1];
+      if ([192, 193, 194, 195, 197, 198, 199, 201, 202, 203, 205, 206, 207].includes(marker)) {
+        return { height: u16be(offset + 5), width: u16be(offset + 7) };
+      }
+      if (marker === 216 || marker === 217 || marker === 1 || marker >= 208 && marker <= 215) {
+        offset += 2;
+        continue;
+      }
+      const length = u16be(offset + 2);
+      if (length < 2) return null;
+      offset += length + 2;
+    }
+    return null;
+  }
+  if (bytes.length < 30 || String.fromCharCode(...bytes.slice(0, 4)) !== "RIFF" || String.fromCharCode(...bytes.slice(8, 12)) !== "WEBP" || u32le(4) + 8 !== bytes.length) return null;
+  const format = String.fromCharCode(...bytes.slice(12, 16));
+  if (format === "VP8X") return { width: u24le(24) + 1, height: u24le(27) + 1 };
+  if (format === "VP8L" && bytes[20] === 47) {
+    const bits = bytes[21] | bytes[22] << 8 | bytes[23] << 16 | bytes[24] << 24;
+    return { width: (bits & 16383) + 1, height: (bits >>> 14 & 16383) + 1 };
+  }
+  if (format === "VP8 " && bytes[23] === 157 && bytes[24] === 1 && bytes[25] === 42) {
+    return { width: u16le(26) & 16383, height: u16le(28) & 16383 };
+  }
+  return null;
+}
+function providerIconError(icon) {
+  if (icon.kind === "preset") {
+    return PROVIDER_ICON_PRESETS.includes(icon.preset) ? null : "Choose a supported provider icon.";
+  }
+  const match = /^data:(image\/(?:png|jpeg|webp));base64,([A-Za-z0-9+/]+={0,2})$/.exec(icon.dataUrl);
+  if (!match) return "Upload a PNG, JPEG, or WebP image.";
+  const byteLength = decodedBase64Bytes(match[2]);
+  if (byteLength > PROVIDER_ICON_MAX_BYTES) {
+    return "Provider icons must be 128 KB or smaller.";
+  }
+  let decoded;
+  try {
+    decoded = atob(match[2]);
+  } catch {
+    return "The uploaded image is not valid base64.";
+  }
+  if (decoded.length !== byteLength) return "The uploaded image is not valid base64.";
+  const bytes = Uint8Array.from(decoded, (value) => value.charCodeAt(0));
+  const dimensions = imageDimensions(bytes, match[1]);
+  if (!dimensions) return "The uploaded image is incomplete or does not match its file type.";
+  if (dimensions.width < 1 || dimensions.height < 1 || dimensions.width > PROVIDER_ICON_MAX_DIMENSION || dimensions.height > PROVIDER_ICON_MAX_DIMENSION || dimensions.width * dimensions.height > PROVIDER_ICON_MAX_DIMENSION ** 2) {
+    return `Provider icons must be at most ${PROVIDER_ICON_MAX_DIMENSION} \xD7 ${PROVIDER_ICON_MAX_DIMENSION} pixels.`;
+  }
+  return null;
+}
+
 // server/mcp-registry.ts
 var MAX_ARGS = 64;
 var stdioEntrySchema = external_exports.object({
@@ -15002,11 +15175,26 @@ var MAX_LOCAL_VM_MAX_INSTANCES = 4;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
+var CDP_PORT = /^[0-9]{1,5}$/;
+var CDP_URL = /^(https?|wss?):\/\/\S+$/i;
+function isValidCdpTarget(value) {
+  if (typeof value !== "string" || value === "") return false;
+  if (CDP_PORT.test(value)) {
+    const port = Number(value);
+    return port >= 1 && port <= 65535;
+  }
+  return CDP_URL.test(value);
+}
 var vpsConfigSchema = external_exports.object({
   sshAlias: external_exports.string().refine((value) => value === "" || isValidSshAlias(value), {
     message: "must be a simple SSH config alias"
   }).optional()
 });
+var browserEngineConfigSchema = external_exports.object({
+  attachCdpUrl: external_exports.string().trim().max(2048).refine((value) => value === "" || isValidCdpTarget(value), {
+    message: "browserEngine.attachCdpUrl must be a CDP port (1-65535) or an http(s)/ws(s) URL"
+  }).optional()
+});
 var roomConfigSchema = external_exports.object({
   turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
   /** Room handoff tree lifetime. Active execution pauses this clock; the
@@ -15148,7 +15336,11 @@ var featureConfigSchema = external_exports.object({
   /** Claude bots also load the MCP servers and connectors from this
    * machine's own Claude Code setup (Plugins → MCP servers switch). Off by
    * default: each extra tool costs tokens on every model call. */
-  claudeUserMcp: external_exports.boolean().optional()
+  claudeUserMcp: external_exports.boolean().optional(),
+  /** LLM-generated titles for new bot threads. Off until explicitly
+   * enabled; a one-shot that fails or answers junk leaves the first-message
+   * snippet in place — see llmThreadTitlesEnabled. */
+  llmThreadTitles: external_exports.boolean().optional()
 });
 var onboardingConfigSchema = external_exports.object({
   /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
@@ -15162,6 +15354,10 @@ var instanceConfigSchema = external_exports.object({
   driver: external_exports.string().min(1),
   displayName: optionalText,
   accentColor: optionalText,
+  icon: external_exports.discriminatedUnion("kind", [
+    external_exports.object({ kind: external_exports.literal("preset"), preset: external_exports.enum(PROVIDER_ICON_PRESETS) }).strict(),
+    external_exports.object({ kind: external_exports.literal("custom"), dataUrl: external_exports.string() }).strict().refine((icon) => providerIconError(icon) === null, { message: "Invalid provider icon" })
+  ]).optional(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   enabled: external_exports.boolean().optional(),
   config: external_exports.json().optional()
@@ -15226,6 +15422,7 @@ var appConfigSchema = external_exports.object({
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
    * `fishKey`), "system" (the Mac's built-in voices, no key), or
+   * "xai" (Grok TTS, reusing `xai.key`), or
    * "chatterbox" (a local OpenAI-compatible Chatterbox server; `baseUrl`
    * and `model` are settings, not secrets). Cloud keys stay separate so
    * switching providers never overwrites or misuses the other key. */
@@ -15233,7 +15430,7 @@ var appConfigSchema = external_exports.object({
     key: optionalText,
     fishKey: optionalText,
     voice: optionalText,
-    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox"]).optional(),
+    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox", "xai"]).optional(),
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the Chatterbox server address must start with http:// or https://").optional(),
     model: optionalText
   }).optional(),
@@ -15262,6 +15459,11 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  context: external_exports.object({
+    rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
+    compactAt: external_exports.number().positive().max(1e7).optional(),
+    autoCompact: external_exports.boolean().optional()
+  }).optional(),
   threads: external_exports.object({
     maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
     /** Cap each per-thread events/ and native/ NDJSON log at this many
@@ -15274,6 +15476,8 @@ var appConfigSchema = external_exports.object({
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
+  /** CDP attach target for a bot's browser; see browserEngineConfigSchema. */
+  browserEngine: browserEngineConfigSchema.optional(),
   browserProfiles: browserProfilesSchema.optional(),
   instances: instanceConfigMapSchema.optional(),
   /** User-configured MCP servers, mounted into every capable engine. Kept
@@ -15312,6 +15516,7 @@ var SPAWNED_PROXIES = {
   connectors: resolveProxy("connector-proxy"),
   mcpGate: resolveProxy("mcp-gate"),
   phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
   // Loaded by the external `pi` process via `-e`, not by this server — but
   // resolved through the same single source of truth so the packaged layout
   // check can assert it ships.

package/enterprise/server/index.js

@@ -14602,6 +14602,7 @@ var SPAWNED_PROXIES = {
   connectors: resolveProxy("connector-proxy"),
   mcpGate: resolveProxy("mcp-gate"),
   phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
   // Loaded by the external `pi` process via `-e`, not by this server — but
   // resolved through the same single source of truth so the packaged layout
   // check can assert it ships.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.83",
+  "version": "0.1.85",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",