openmausbot 0.1.83 → 0.1.85

package/dist-server/container-mcp.js

@@ -3157,13 +3157,13 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     }
     return propValues;
   });
-  const isObject2 = isObject;
+  const isObject3 = isObject;
   const catchall = def.catchall;
   let value;
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -3290,7 +3290,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     return (payload, ctx) => fn(shape, payload, ctx);
   };
   let fastpass;
-  const isObject2 = isObject;
+  const isObject3 = isObject;
   const jit = !globalConfig.jitless;
   const allowsEval2 = allowsEval;
   const fastEnabled = jit && allowsEval2.value;
@@ -3299,7 +3299,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -14660,6 +14660,97 @@ function isModelVariant(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && value.trim() === value && !new RegExp("\\p{Cc}", "u").test(value);
 }
 
+// shared/provider-icon.ts
+var PROVIDER_ICON_PRESETS = [
+  "openai",
+  "anthropic",
+  "google",
+  "azure",
+  "aws",
+  "xai",
+  "deepseek",
+  "meta",
+  "mistral",
+  "qwen",
+  "moonshot",
+  "cohere",
+  "openrouter"
+];
+var PROVIDER_ICON_MAX_BYTES = 128 * 1024;
+var PROVIDER_ICON_MAX_DIMENSION = 1024;
+function decodedBase64Bytes(value) {
+  const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+  return Math.floor(value.length * 3 / 4) - padding;
+}
+function imageDimensions(bytes, mime) {
+  const u16be = (offset) => bytes[offset] * 256 + bytes[offset + 1];
+  const u16le = (offset) => bytes[offset] + bytes[offset + 1] * 256;
+  const u24le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536;
+  const u32le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536 + bytes[offset + 3] * 16777216;
+  const u32be = (offset) => bytes[offset] * 16777216 + bytes[offset + 1] * 65536 + bytes[offset + 2] * 256 + bytes[offset + 3];
+  if (mime === "image/png") {
+    if (bytes.length < 33 || bytes.slice(0, 8).join(",") !== "137,80,78,71,13,10,26,10" || String.fromCharCode(...bytes.slice(12, 16)) !== "IHDR" || bytes.slice(-8).join(",") !== "73,69,78,68,174,66,96,130") return null;
+    return { width: u32be(16), height: u32be(20) };
+  }
+  if (mime === "image/jpeg") {
+    if (bytes.length < 12 || bytes[0] !== 255 || bytes[1] !== 216 || bytes.at(-2) !== 255 || bytes.at(-1) !== 217) return null;
+    for (let offset = 2; offset + 8 < bytes.length; ) {
+      if (bytes[offset] !== 255) {
+        offset += 1;
+        continue;
+      }
+      const marker = bytes[offset + 1];
+      if ([192, 193, 194, 195, 197, 198, 199, 201, 202, 203, 205, 206, 207].includes(marker)) {
+        return { height: u16be(offset + 5), width: u16be(offset + 7) };
+      }
+      if (marker === 216 || marker === 217 || marker === 1 || marker >= 208 && marker <= 215) {
+        offset += 2;
+        continue;
+      }
+      const length = u16be(offset + 2);
+      if (length < 2) return null;
+      offset += length + 2;
+    }
+    return null;
+  }
+  if (bytes.length < 30 || String.fromCharCode(...bytes.slice(0, 4)) !== "RIFF" || String.fromCharCode(...bytes.slice(8, 12)) !== "WEBP" || u32le(4) + 8 !== bytes.length) return null;
+  const format = String.fromCharCode(...bytes.slice(12, 16));
+  if (format === "VP8X") return { width: u24le(24) + 1, height: u24le(27) + 1 };
+  if (format === "VP8L" && bytes[20] === 47) {
+    const bits = bytes[21] | bytes[22] << 8 | bytes[23] << 16 | bytes[24] << 24;
+    return { width: (bits & 16383) + 1, height: (bits >>> 14 & 16383) + 1 };
+  }
+  if (format === "VP8 " && bytes[23] === 157 && bytes[24] === 1 && bytes[25] === 42) {
+    return { width: u16le(26) & 16383, height: u16le(28) & 16383 };
+  }
+  return null;
+}
+function providerIconError(icon) {
+  if (icon.kind === "preset") {
+    return PROVIDER_ICON_PRESETS.includes(icon.preset) ? null : "Choose a supported provider icon.";
+  }
+  const match = /^data:(image\/(?:png|jpeg|webp));base64,([A-Za-z0-9+/]+={0,2})$/.exec(icon.dataUrl);
+  if (!match) return "Upload a PNG, JPEG, or WebP image.";
+  const byteLength = decodedBase64Bytes(match[2]);
+  if (byteLength > PROVIDER_ICON_MAX_BYTES) {
+    return "Provider icons must be 128 KB or smaller.";
+  }
+  let decoded;
+  try {
+    decoded = atob(match[2]);
+  } catch {
+    return "The uploaded image is not valid base64.";
+  }
+  if (decoded.length !== byteLength) return "The uploaded image is not valid base64.";
+  const bytes = Uint8Array.from(decoded, (value) => value.charCodeAt(0));
+  const dimensions = imageDimensions(bytes, match[1]);
+  if (!dimensions) return "The uploaded image is incomplete or does not match its file type.";
+  if (dimensions.width < 1 || dimensions.height < 1 || dimensions.width > PROVIDER_ICON_MAX_DIMENSION || dimensions.height > PROVIDER_ICON_MAX_DIMENSION || dimensions.width * dimensions.height > PROVIDER_ICON_MAX_DIMENSION ** 2) {
+    return `Provider icons must be at most ${PROVIDER_ICON_MAX_DIMENSION} \xD7 ${PROVIDER_ICON_MAX_DIMENSION} pixels.`;
+  }
+  return null;
+}
+
 // server/mcp-registry.ts
 var MAX_ARGS = 64;
 var stdioEntrySchema = external_exports.object({
@@ -14700,11 +14791,26 @@ var MAX_LOCAL_VM_MAX_INSTANCES = 4;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
+var CDP_PORT = /^[0-9]{1,5}$/;
+var CDP_URL = /^(https?|wss?):\/\/\S+$/i;
+function isValidCdpTarget(value) {
+  if (typeof value !== "string" || value === "") return false;
+  if (CDP_PORT.test(value)) {
+    const port = Number(value);
+    return port >= 1 && port <= 65535;
+  }
+  return CDP_URL.test(value);
+}
 var vpsConfigSchema = external_exports.object({
   sshAlias: external_exports.string().refine((value) => value === "" || isValidSshAlias(value), {
     message: "must be a simple SSH config alias"
   }).optional()
 });
+var browserEngineConfigSchema = external_exports.object({
+  attachCdpUrl: external_exports.string().trim().max(2048).refine((value) => value === "" || isValidCdpTarget(value), {
+    message: "browserEngine.attachCdpUrl must be a CDP port (1-65535) or an http(s)/ws(s) URL"
+  }).optional()
+});
 var roomConfigSchema = external_exports.object({
   turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
   /** Room handoff tree lifetime. Active execution pauses this clock; the
@@ -14846,7 +14952,11 @@ var featureConfigSchema = external_exports.object({
   /** Claude bots also load the MCP servers and connectors from this
    * machine's own Claude Code setup (Plugins → MCP servers switch). Off by
    * default: each extra tool costs tokens on every model call. */
-  claudeUserMcp: external_exports.boolean().optional()
+  claudeUserMcp: external_exports.boolean().optional(),
+  /** LLM-generated titles for new bot threads. Off until explicitly
+   * enabled; a one-shot that fails or answers junk leaves the first-message
+   * snippet in place — see llmThreadTitlesEnabled. */
+  llmThreadTitles: external_exports.boolean().optional()
 });
 var onboardingConfigSchema = external_exports.object({
   /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
@@ -14860,6 +14970,10 @@ var instanceConfigSchema = external_exports.object({
   driver: external_exports.string().min(1),
   displayName: optionalText,
   accentColor: optionalText,
+  icon: external_exports.discriminatedUnion("kind", [
+    external_exports.object({ kind: external_exports.literal("preset"), preset: external_exports.enum(PROVIDER_ICON_PRESETS) }).strict(),
+    external_exports.object({ kind: external_exports.literal("custom"), dataUrl: external_exports.string() }).strict().refine((icon) => providerIconError(icon) === null, { message: "Invalid provider icon" })
+  ]).optional(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   enabled: external_exports.boolean().optional(),
   config: external_exports.json().optional()
@@ -14924,6 +15038,7 @@ var appConfigSchema = external_exports.object({
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
    * `fishKey`), "system" (the Mac's built-in voices, no key), or
+   * "xai" (Grok TTS, reusing `xai.key`), or
    * "chatterbox" (a local OpenAI-compatible Chatterbox server; `baseUrl`
    * and `model` are settings, not secrets). Cloud keys stay separate so
    * switching providers never overwrites or misuses the other key. */
@@ -14931,7 +15046,7 @@ var appConfigSchema = external_exports.object({
     key: optionalText,
     fishKey: optionalText,
     voice: optionalText,
-    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox"]).optional(),
+    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox", "xai"]).optional(),
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the Chatterbox server address must start with http:// or https://").optional(),
     model: optionalText
   }).optional(),
@@ -14960,6 +15075,11 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  context: external_exports.object({
+    rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
+    compactAt: external_exports.number().positive().max(1e7).optional(),
+    autoCompact: external_exports.boolean().optional()
+  }).optional(),
   threads: external_exports.object({
     maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
     /** Cap each per-thread events/ and native/ NDJSON log at this many
@@ -14972,6 +15092,8 @@ var appConfigSchema = external_exports.object({
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
+  /** CDP attach target for a bot's browser; see browserEngineConfigSchema. */
+  browserEngine: browserEngineConfigSchema.optional(),
   browserProfiles: browserProfilesSchema.optional(),
   instances: instanceConfigMapSchema.optional(),
   /** User-configured MCP servers, mounted into every capable engine. Kept
@@ -15010,6 +15132,7 @@ var SPAWNED_PROXIES = {
   connectors: resolveProxy("connector-proxy"),
   mcpGate: resolveProxy("mcp-gate"),
   phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
   // Loaded by the external `pi` process via `-e`, not by this server — but
   // resolved through the same single source of truth so the packaged layout
   // check can assert it ships.
@@ -15125,6 +15248,86 @@ function createControlClient(options) {
 }
 var CONTROL_REFUSAL_PLAIN = "A person has taken control of this computer, so this call was NOT performed. Do not retry it \u2014 the screen is changing under their hands. Pause this task, tell the person you are waiting for them to hand control back, and take a fresh screenshot before your next action once they have.";
 
+// server/mcp-tool-schema.ts
+var ROOT_COMBINATORS = ["anyOf", "oneOf", "allOf", "not"];
+function isObject2(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function branches(value) {
+  return Array.isArray(value) ? value.filter(isObject2) : [];
+}
+function objectShape(schema) {
+  const properties = isObject2(schema.properties) ? { ...schema.properties } : {};
+  const required2 = new Set(Array.isArray(schema.required) ? schema.required.filter((key) => typeof key === "string") : []);
+  const adopt = (shape) => {
+    for (const [key, value] of Object.entries(shape.properties)) if (!(key in properties)) properties[key] = value;
+  };
+  for (const branch of branches(schema.allOf)) {
+    const shape = objectShape(branch);
+    adopt(shape);
+    for (const key of shape.required) required2.add(key);
+  }
+  for (const keyword of ["anyOf", "oneOf"]) {
+    const choices = branches(schema[keyword]).map(objectShape);
+    if (choices.length === 0) continue;
+    for (const choice of choices) adopt(choice);
+    for (const key of choices[0].required) {
+      if (choices.every((choice) => choice.required.includes(key))) required2.add(key);
+    }
+  }
+  return { properties, required: [...required2] };
+}
+function describesObject(type) {
+  return type === void 0 || type === "object" || Array.isArray(type) && type.includes("object");
+}
+function providerSafeInputSchema(schema) {
+  if (!isObject2(schema) || !describesObject(schema.type)) return { type: "object", properties: {} };
+  if (schema.type === "object" && ROOT_COMBINATORS.every((keyword) => !(keyword in schema))) return schema;
+  const { properties, required: required2 } = objectShape(schema);
+  const safe = { ...schema, type: "object", properties };
+  for (const keyword of ROOT_COMBINATORS) delete safe[keyword];
+  if (required2.length > 0) safe.required = required2;
+  else delete safe.required;
+  return safe;
+}
+function createToolListNormalizer() {
+  const pending = /* @__PURE__ */ new Set();
+  const idKey = (id) => `${typeof id}:${String(id)}`;
+  return {
+    observeRequest(line) {
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return;
+      }
+      if (isObject2(frame) && frame.method === "tools/list" && (typeof frame.id === "number" || typeof frame.id === "string")) {
+        pending.add(idKey(frame.id));
+      }
+    },
+    rewriteResponse(line) {
+      if (pending.size === 0) return line;
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return line;
+      }
+      if (!isObject2(frame) || "method" in frame || !pending.delete(idKey(frame.id))) return line;
+      if (!isObject2(frame.result) || !Array.isArray(frame.result.tools)) return line;
+      let changed = false;
+      const tools = frame.result.tools.map((tool) => {
+        if (!isObject2(tool)) return tool;
+        const inputSchema = providerSafeInputSchema(tool.inputSchema);
+        if (inputSchema === tool.inputSchema) return tool;
+        changed = true;
+        return { ...tool, inputSchema };
+      });
+      return changed ? JSON.stringify({ ...frame, result: { ...frame.result, tools } }) : line;
+    }
+  };
+}
+
 // server/mcp-bridge.ts
 var BRIDGE_INACTIVITY_MS = 45e3;
 var PROBE_TIMEOUT_MS = 1e4;
@@ -15294,8 +15497,10 @@ function runMcpBridge(options) {
       }
     } : {}
   });
+  const toolLists = createToolListNormalizer();
   let pendingInput = Promise.resolve();
   const inbound = createLineSplitter((line) => {
+    toolLists.observeRequest(line);
     const completion = intercept(line);
     if (completion) pendingInput = completion;
   });
@@ -15305,7 +15510,7 @@ function runMcpBridge(options) {
     inbound.flush();
     void pendingInput.finally(() => child.stdin.end());
   });
-  const outbound = createLineSplitter((line) => process.stdout.write(line + "\n"));
+  const outbound = createLineSplitter((line) => process.stdout.write(toolLists.rewriteResponse(line) + "\n"));
   child.stdout.on("data", (chunk) => outbound.push(chunk));
   child.stdout.on("end", () => outbound.flush());
   const detach = () => {

package/dist-server/drivers/agents-proxy.js

@@ -763,6 +763,7 @@ var READ_ONLY_AGENT_TOOL_NAMES = /* @__PURE__ */ new Set([
   "wait_delegation",
   "session_search",
   "session_read",
+  "tool_result_read",
   "list_routines",
   "skills_list"
 ]);
@@ -798,6 +799,88 @@ function peerName(value) {
   return clip(value.replace(/[[\]]/g, " "), ROSTER_NAME_MAX);
 }
 
+// shared/redact.ts
+var REDACTION_MARKER = /^«redacted \d+ chars»$/;
+var mask = (value) => REDACTION_MARKER.test(value) ? value : `\xABredacted ${value.length} chars\xBB`;
+var KEY_PREFIXES = [
+  /\bom[dg]_[A-Za-z0-9_-]{43}(?![A-Za-z0-9_-])/g,
+  // desktop device and model-only credentials
+  /\bsk-(?:ant-|proj-|live-|test-)?[A-Za-z0-9_-]{16,}/g,
+  // anthropic / openai / stripe
+  /\bxai-[A-Za-z0-9_-]{20,}/g,
+  // xai (grok)
+  /\bgsk_[A-Za-z0-9]{40,}/g,
+  // groq
+  /\bhf_[A-Za-z0-9]{30,}/g,
+  // hugging face
+  /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}/g,
+  // github classic
+  /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
+  // github fine-grained
+  /\bxox[abposr]-[A-Za-z0-9-]{20,}/g,
+  // slack
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  // aws access key id
+  /\bAIza[0-9A-Za-z_-]{30,}/g,
+  // google api key
+  /\bnpm_[A-Za-z0-9]{20,}/g,
+  // npm
+  /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g
+  // jwt
+];
+var BEARER = /(\bBearer\s+)([A-Za-z0-9._~+/=-]{12,})/g;
+var PEM_BLOCK = /(-----BEGIN [A-Z ]*PRIVATE KEY-----)([\s\S]*?)(-----END [A-Z ]*PRIVATE KEY-----)/g;
+var KEY_VALUE = /\b((?:[A-Za-z0-9_-]*_)?(?:api[_-]?key|apikey|secret|token|password|passwd|authorization|auth[_-]?token|access[_-]?key|private[_-]?key)s?)(["']?\s*[=:]\s*)(["']?)([A-Za-z0-9._~+/=-]{8,})\3/gi;
+var KEY_SUFFIX_ASSIGNMENT = /\b([A-Za-z][A-Za-z0-9_-]*[_-]key)s?(=)(["']?)([A-Za-z0-9._~+/=-]+)\3/gi;
+var SECRET_FLAG = /(--(?:token|password|passwd|api-key|apikey|secret|access-key|auth-token)(?:=|\s+))(["']?)(?!-)([A-Za-z0-9._~+/=-]+)\2/gi;
+var URL_USERINFO = /(\b[a-z][a-z0-9+.-]*:\/\/[^\s/:@'"]+:)([^\s/@'"«»]+)(@)/gi;
+function redactSecretsInText(text) {
+  if (!text || text.length < 8) return text;
+  let out = text;
+  out = out.replace(PEM_BLOCK, (_m, open, body, close) => `${open}
+${mask(body.trim())}
+${close}`);
+  for (const re of KEY_PREFIXES) out = out.replace(re, (m2) => mask(m2));
+  out = out.replace(BEARER, (_m, lead, tok) => `${lead}${mask(tok)}`);
+  out = out.replace(KEY_VALUE, (_m, key, sep, quote, value) => `${key}${sep}${quote}${mask(value)}${quote}`);
+  out = out.replace(KEY_SUFFIX_ASSIGNMENT, (_m, key, sep, quote, value) => `${key}${sep}${quote}${mask(value)}${quote}`);
+  out = out.replace(SECRET_FLAG, (_m, flag, quote, value) => `${flag}${quote}${mask(value)}${quote}`);
+  out = out.replace(URL_USERINFO, (_m, lead, secret, at) => `${lead}${mask(secret)}${at}`);
+  return out;
+}
+
+// server/tool-results.ts
+var TOOL_RESULT_PREVIEW_CHARS = 16e3;
+var TOOL_RESULT_MAX_CHARS = 128 * 1024;
+var TOOL_RESULT_TTL_MS = 60 * 6e4;
+var MAX_BYTES = 16 * 1024 * 1024;
+var MAX_OWNER_BYTES = 2 * 1024 * 1024;
+function toolResultPrefix(text, chars) {
+  const prefix = text.slice(0, chars);
+  const last = prefix.charCodeAt(prefix.length - 1);
+  return last >= 55296 && last <= 56319 ? prefix.slice(0, -1) : prefix;
+}
+
+// server/drivers/agents-result.ts
+async function boundedAgentResult(text, save) {
+  if (text.length <= 24e3) return text;
+  const redacted = redactSecretsInText(text);
+  const prefix = toolResultPrefix(redacted, TOOL_RESULT_PREVIEW_CHARS);
+  const retained = toolResultPrefix(redacted, TOOL_RESULT_MAX_CHARS);
+  const truncated = retained.length < redacted.length;
+  try {
+    const saved = await save(retained, truncated);
+    if (!saved || typeof saved.id !== "string" || !/^r-[0-9a-f-]{36}$/.test(saved.id)) throw new Error("Invalid saved result");
+    return `${prefix}
+
+[Large tool result: showing the first ${prefix.length} characters. ${truncated || saved.truncated ? "Only a bounded portion was retained; the remaining tail was omitted." : "The remaining redacted result is temporarily saved."} If a missing detail is needed, call tool_result_read with id "${saved.id}" and offset ${prefix.length}. Saved results expire after one hour, on app restart, or under cache pressure. Do not repeat an action just to retrieve its output.]`;
+  } catch {
+    return `${prefix}
+
+[Large tool result: showing the first ${prefix.length} characters. The remaining output could not be saved. The original operation was not retried. Do not repeat an action just to retrieve its output.]`;
+  }
+}
+
 // server/drivers/agents-proxy.ts
 var HARNESS = process.env.OMB_HARNESS_URL ?? "http://127.0.0.1:8799";
 var BOT_ID = process.env.OMB_BOT_ID ?? "";
@@ -1047,8 +1130,8 @@ var ROUTINE_FIELDS_SCHEMA = {
   schedule: ROUTINE_SCHEDULE_SCHEMA,
   run_on: {
     type: "string",
-    enum: ["maus", "cloud"],
-    description: "Where the routine runs. Defaults to maus (this OpenMausBot setup)."
+    enum: ["maus", "box"],
+    description: "Default maus keeps the bot's selected model and configured computer, INCLUDING a self-hosted VPS. Omit this field for normal schedules. box explicitly switches the agent to the Box-hosted runner; it requires Box setup and is not the generic cloud/VPS option. Legacy cloud values from list_routines mean box, not VPS."
   },
   timeout_minutes: {
     type: "integer",
@@ -1063,10 +1146,28 @@ var ROUTINE_FIELDS_SCHEMA = {
   continuity: {
     type: "boolean",
     description: "Opt in to using the latest completed run's bounded report as historical context. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
+  },
+  overlap: {
+    type: "string",
+    enum: ["skip", "queue"],
+    description: "While this routine is still working, skip scheduled occurrences (default) or queue at most one run. Queue skips further occurrences until the pending run starts; it never builds an unlimited backlog. Manual and webhook requests are separate."
   }
 };
 var PROPOSAL_OUTCOME = " Read the result: granted Full Access may apply the change immediately. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success from the permission mode alone; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
 var TOOLS = [
+  {
+    name: "tool_result_read",
+    description: "Read a missing portion of an oversized agents-tool result using the saved id and next offset from its notice. Returns at most 16,000 characters, only from this bot in this conversation. Use only when the preview is insufficient; do not load every page by default. Results expire after one hour, on app restart, or under cache pressure. This never reruns the original action.",
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        id: { type: "string", description: "Saved result id copied from the truncation notice." },
+        offset: { type: "integer", minimum: 0, description: "Character offset copied from the previous result's notice. Defaults to 0." }
+      },
+      required: ["id"]
+    }
+  },
   {
     name: "list_shared_computers",
     description: "List online desktop computers explicitly shared with this workspace, and their allowed folders/capabilities. These are the user's computers, not this server. An offline or unshared computer cannot be accessed. Folder paths use opaque folder IDs and relative paths.",
@@ -1117,7 +1218,7 @@ var TOOLS = [
   },
   {
     name: "ask_bot",
-    description: "SYNCHRONOUS consultation: send a short question to another bot and stay blocked until its reply is returned inline. Use only when that reply is required to write your current response. Do not use for assigning work, background tasks, or potentially long work; use delegate_bot for those. Returns promptly with a note if that bot is busy.",
+    description: "Brief synchronous consultation: send a short question to another bot. Quick replies return inline; slow replies become asynchronous delegations and return automatically after you finish your turn. Use only when that reply is required to write your current response. Do not use for assigning work, background tasks, or potentially long work; use delegate_bot for those. Returns promptly with a note if that bot is busy.",
     inputSchema: {
       type: "object",
       properties: {
@@ -1359,6 +1460,20 @@ var TOOLS = [
       required: ["action"]
     }
   },
+  {
+    name: "retry_thread",
+    description: "Chief of Staff only. Resume a teammate's thread whose last run failed, stalled or could not start \u2014 the one an incident report named \u2014 exactly where it stopped, keeping its conversation and files. The teammate gets a line saying you asked for the retry and why. Use it when the cause looks transient (a crash, a timeout, a busy service). Use delegate_bot with a corrected brief instead when the request itself needs to change, and tell the person instead when only they can fix the cause (a sign-in, a missing credential, an unanswered question). Never retry the same thread more than twice.",
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        bot_id: { type: "string", description: "The teammate's id, from the incident report or list_bots." },
+        thread_id: { type: "string", description: "The failed thread's id, from the incident report." },
+        note: { type: "string", description: "Optional: one sentence for the teammate about what to watch for this time." }
+      },
+      required: ["bot_id", "thread_id"]
+    }
+  },
   {
     name: "memory_log",
     description: "Write one line to today's log file, memory/log/YYYY-MM-DD.md, stamped with the time and this conversation: what happened, not what is true. Use it for events worth a trace \u2014 a deploy went out, a person decided something, a check failed \u2014 that should not shape future sessions. Logs are never loaded into your prompt; the person can read them, and session_search finds them later. A fact that should hold in every session goes to memory_update instead.",
@@ -1544,6 +1659,11 @@ async function api(path, init) {
   if (!ok2) throw new Error(String(body.error ?? `HTTP ${status}`));
   return body;
 }
+var capResult = (text) => boundedAgentResult(text, (retained, truncated) => api("/api/internal/tool-result", {
+  method: "POST",
+  signal: AbortSignal.timeout(3e3),
+  body: JSON.stringify({ text: retained, truncated })
+}));
 async function apiResponse(path, init) {
   const res = await fetch(HARNESS + path, {
     ...init,
@@ -1566,16 +1686,17 @@ function routineAction(value) {
 }
 function routineFields(args) {
   const fields = {};
-  if (args.run_on != null && args.runOn != null && args.run_on !== args.runOn) {
+  const destination = (value) => value === "box" ? "cloud" : value;
+  if (args.run_on != null && args.runOn != null && destination(args.run_on) !== destination(args.runOn)) {
     return { fields, error: "Choose one run_on destination; run_on and runOn disagree." };
   }
   if (args.timeout_minutes != null && args.timeoutMinutes != null && args.timeout_minutes !== args.timeoutMinutes) {
     return { fields, error: "Choose one timeout_minutes limit; timeout_minutes and timeoutMinutes disagree." };
   }
-  const runOn = args.run_on ?? args.runOn;
+  const runOn = destination(args.run_on ?? args.runOn);
   const timeoutMinutes = args.timeout_minutes ?? args.timeoutMinutes;
   if (runOn != null && runOn !== "maus" && runOn !== "cloud") {
-    return { fields, error: 'run_on must be "maus" or "cloud".' };
+    return { fields, error: 'Use run_on="maus" for the bot\u2019s current model and configured computer (including VPS), or run_on="box" only for the Box-hosted agent. Legacy "cloud" also means Box.' };
   }
   if (timeoutMinutes != null && (typeof timeoutMinutes !== "number" || !Number.isInteger(timeoutMinutes) || timeoutMinutes < 5 || timeoutMinutes > 240)) {
     return { fields, error: "timeout_minutes must be a whole number from 5 to 240. Use clear_timeout to remove a limit." };
@@ -1583,6 +1704,9 @@ function routineFields(args) {
   if (args.continuity != null && typeof args.continuity !== "boolean") {
     return { fields, error: "continuity must be true or false." };
   }
+  if (args.overlap !== void 0 && args.overlap !== "skip" && args.overlap !== "queue") {
+    return { fields, error: "overlap must be skip or queue." };
+  }
   if (args.clear_timeout != null && typeof args.clear_timeout !== "boolean") {
     return { fields, error: "clear_timeout must be true or false." };
   }
@@ -1600,6 +1724,7 @@ function routineFields(args) {
   if (args.clear_timeout === true) fields.timeoutMinutes = null;
   else if (timeoutMinutes != null) fields.timeoutMinutes = timeoutMinutes;
   if (typeof args.continuity === "boolean") fields.continuity = args.continuity;
+  if (args.overlap !== void 0) fields.overlap = args.overlap;
   return { fields };
 }
 function completedProposalResult(r, subject) {
@@ -1643,6 +1768,16 @@ function recallSpeaker(hit) {
   return hit.role === "user" ? "user" : "you";
 }
 async function callTool(name, args) {
+  if (name === "tool_result_read") {
+    if (typeof args.id !== "string" || !/^r-[0-9a-f-]{36}$/.test(args.id) || args.offset !== void 0 && (!Number.isSafeInteger(args.offset) || Number(args.offset) < 0)) {
+      return { text: "Use the saved result id and a non-negative integer offset from its notice.", isError: true };
+    }
+    const r = await api(`/api/internal/tool-result?id=${encodeURIComponent(args.id)}&offset=${args.offset ?? 0}`, { signal: AbortSignal.timeout(3e3) });
+    const text = String(r.text ?? "");
+    return { text: `${text}
+
+[${Number(r.nextOffset) < Number(r.length) ? `Read more with tool_result_read id "${args.id}" and offset ${r.nextOffset}.` : `End of retained result.${r.truncated ? " The original tail exceeded the storage limit and was omitted." : ""}`}]` };
+  }
   if (name === "list_room_targets") {
     const r = await api("/api/internal/room-targets");
     return { text: JSON.stringify(r), ...r.error ? { isError: true } : {} };
@@ -1747,9 +1882,11 @@ Use post_to_room with one of these ids. A post adds one message to the room; it
     if (r.timeout) {
       const taskId = String(r.taskId ?? "").trim();
       if (taskId) delegationTaskIdsThisTurn.add(taskId);
-      const waitedMinutes = Math.max(1, Math.round((Number(r.waitedMs) || 0) / 6e4));
+      const waitedSeconds = Math.max(1, Math.round((Number(r.waitedMs) || 0) / 1e3));
+      const amount = waitedSeconds < 60 ? waitedSeconds : Math.round(waitedSeconds / 60);
+      const unit = waitedSeconds < 60 ? "second" : "minute";
       return {
-        text: `${r.toBotName ?? "That bot"} is still working after ${waitedMinutes} minute${waitedMinutes === 1 ? "" : "s"} \u2014 the ask was converted to a delegation so the reply is not lost. Task id: ${taskId}. Finish your turn now; the result will be delivered to this conversation automatically. Use check_delegation in a later turn only if the user asks for status.`
+        text: `${r.toBotName ?? "That bot"} is still working after ${amount} ${unit}${amount === 1 ? "" : "s"} \u2014 the ask was converted to a delegation so the reply is not lost. Task id: ${taskId}. Finish your turn now; the result will be delivered to this conversation automatically. Use check_delegation in a later turn only if the user asks for status.`
       };
     }
     if (r.busy) {
@@ -2141,6 +2278,18 @@ ${recent.join("\n")}` : "";
     const entry = typeof r.entry === "string" && r.entry ? ` Entry: ${r.entry}` : "";
     return { text: `Memory updated.${entry}${r.truncated ? " MEMORY.md exceeds the prompt load budget; keep it short and curated." : ""}` };
   }
+  if (name === "retry_thread") {
+    const botId = String(args.bot_id ?? "").trim();
+    const threadId = String(args.thread_id ?? "").trim();
+    const note = typeof args.note === "string" ? args.note.trim() : "";
+    if (!botId || !threadId) return { text: "retry_thread needs bot_id and thread_id \u2014 both are in the incident report.", isError: true };
+    const r = await api("/api/internal/retry-thread", {
+      method: "POST",
+      body: JSON.stringify({ fromBotId: BOT_ID, fromThreadId: THREAD_ID, toBotId: botId, toThreadId: threadId, ...note ? { note } : {} })
+    });
+    if (r.error) return { text: `Couldn't retry that thread: ${String(r.error)}`, isError: true };
+    return { text: typeof r.message === "string" ? r.message : "The thread is running again. Its result stays in that thread; you are not woken for it \u2014 check it later with session_search or list_threads if you need to." };
+  }
   if (name === "memory_log") {
     if (typeof args.text !== "string" || !args.text.trim()) {
       return { text: "memory_log needs text: one line about what happened.", isError: true };
@@ -2316,20 +2465,20 @@ async function handle(msg) {
           return;
         }
         if (name === "list_shared_computers") {
-          textResult(id, JSON.stringify(await api("/api/internal/shared-computers")));
+          textResult(id, await capResult(JSON.stringify(await api("/api/internal/shared-computers"))));
           return;
         }
         if (name === "shared_computer") {
           const response = await api("/api/internal/shared-computers", { method: "POST", body: JSON.stringify(params.arguments ?? {}) });
           const result = response.result;
           if (Array.isArray(result?.content)) ok(id, result);
-          else textResult(id, JSON.stringify(result));
+          else textResult(id, await capResult(JSON.stringify(result)));
           return;
         }
         const { text, isError } = await callTool(name, params.arguments ?? {});
-        textResult(id, text, isError);
+        textResult(id, name === "tool_result_read" ? text : await capResult(text), isError);
       } catch (e) {
-        textResult(id, e.message, true);
+        textResult(id, await capResult(e.message), true);
       }
       return;
     }

package/dist-server/enterprise/server/index.js

@@ -14602,6 +14602,7 @@ var SPAWNED_PROXIES = {
   connectors: resolveProxy("connector-proxy"),
   mcpGate: resolveProxy("mcp-gate"),
   phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
   // Loaded by the external `pi` process via `-e`, not by this server — but
   // resolved through the same single source of truth so the packaged layout
   // check can assert it ships.