openmausbot 0.1.84 → 0.1.86

package/dist-server/container-mcp.js

@@ -3157,13 +3157,13 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     }
     return propValues;
   });
-  const isObject2 = isObject;
+  const isObject3 = isObject;
   const catchall = def.catchall;
   let value;
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -3290,7 +3290,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     return (payload, ctx) => fn(shape, payload, ctx);
   };
   let fastpass;
-  const isObject2 = isObject;
+  const isObject3 = isObject;
   const jit = !globalConfig.jitless;
   const allowsEval2 = allowsEval;
   const fastEnabled = jit && allowsEval2.value;
@@ -3299,7 +3299,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -14660,6 +14660,97 @@ function isModelVariant(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && value.trim() === value && !new RegExp("\\p{Cc}", "u").test(value);
 }
 
+// shared/provider-icon.ts
+var PROVIDER_ICON_PRESETS = [
+  "openai",
+  "anthropic",
+  "google",
+  "azure",
+  "aws",
+  "xai",
+  "deepseek",
+  "meta",
+  "mistral",
+  "qwen",
+  "moonshot",
+  "cohere",
+  "openrouter"
+];
+var PROVIDER_ICON_MAX_BYTES = 128 * 1024;
+var PROVIDER_ICON_MAX_DIMENSION = 1024;
+function decodedBase64Bytes(value) {
+  const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+  return Math.floor(value.length * 3 / 4) - padding;
+}
+function imageDimensions(bytes, mime) {
+  const u16be = (offset) => bytes[offset] * 256 + bytes[offset + 1];
+  const u16le = (offset) => bytes[offset] + bytes[offset + 1] * 256;
+  const u24le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536;
+  const u32le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536 + bytes[offset + 3] * 16777216;
+  const u32be = (offset) => bytes[offset] * 16777216 + bytes[offset + 1] * 65536 + bytes[offset + 2] * 256 + bytes[offset + 3];
+  if (mime === "image/png") {
+    if (bytes.length < 33 || bytes.slice(0, 8).join(",") !== "137,80,78,71,13,10,26,10" || String.fromCharCode(...bytes.slice(12, 16)) !== "IHDR" || bytes.slice(-8).join(",") !== "73,69,78,68,174,66,96,130") return null;
+    return { width: u32be(16), height: u32be(20) };
+  }
+  if (mime === "image/jpeg") {
+    if (bytes.length < 12 || bytes[0] !== 255 || bytes[1] !== 216 || bytes.at(-2) !== 255 || bytes.at(-1) !== 217) return null;
+    for (let offset = 2; offset + 8 < bytes.length; ) {
+      if (bytes[offset] !== 255) {
+        offset += 1;
+        continue;
+      }
+      const marker = bytes[offset + 1];
+      if ([192, 193, 194, 195, 197, 198, 199, 201, 202, 203, 205, 206, 207].includes(marker)) {
+        return { height: u16be(offset + 5), width: u16be(offset + 7) };
+      }
+      if (marker === 216 || marker === 217 || marker === 1 || marker >= 208 && marker <= 215) {
+        offset += 2;
+        continue;
+      }
+      const length = u16be(offset + 2);
+      if (length < 2) return null;
+      offset += length + 2;
+    }
+    return null;
+  }
+  if (bytes.length < 30 || String.fromCharCode(...bytes.slice(0, 4)) !== "RIFF" || String.fromCharCode(...bytes.slice(8, 12)) !== "WEBP" || u32le(4) + 8 !== bytes.length) return null;
+  const format = String.fromCharCode(...bytes.slice(12, 16));
+  if (format === "VP8X") return { width: u24le(24) + 1, height: u24le(27) + 1 };
+  if (format === "VP8L" && bytes[20] === 47) {
+    const bits = bytes[21] | bytes[22] << 8 | bytes[23] << 16 | bytes[24] << 24;
+    return { width: (bits & 16383) + 1, height: (bits >>> 14 & 16383) + 1 };
+  }
+  if (format === "VP8 " && bytes[23] === 157 && bytes[24] === 1 && bytes[25] === 42) {
+    return { width: u16le(26) & 16383, height: u16le(28) & 16383 };
+  }
+  return null;
+}
+function providerIconError(icon) {
+  if (icon.kind === "preset") {
+    return PROVIDER_ICON_PRESETS.includes(icon.preset) ? null : "Choose a supported provider icon.";
+  }
+  const match = /^data:(image\/(?:png|jpeg|webp));base64,([A-Za-z0-9+/]+={0,2})$/.exec(icon.dataUrl);
+  if (!match) return "Upload a PNG, JPEG, or WebP image.";
+  const byteLength = decodedBase64Bytes(match[2]);
+  if (byteLength > PROVIDER_ICON_MAX_BYTES) {
+    return "Provider icons must be 128 KB or smaller.";
+  }
+  let decoded;
+  try {
+    decoded = atob(match[2]);
+  } catch {
+    return "The uploaded image is not valid base64.";
+  }
+  if (decoded.length !== byteLength) return "The uploaded image is not valid base64.";
+  const bytes = Uint8Array.from(decoded, (value) => value.charCodeAt(0));
+  const dimensions = imageDimensions(bytes, match[1]);
+  if (!dimensions) return "The uploaded image is incomplete or does not match its file type.";
+  if (dimensions.width < 1 || dimensions.height < 1 || dimensions.width > PROVIDER_ICON_MAX_DIMENSION || dimensions.height > PROVIDER_ICON_MAX_DIMENSION || dimensions.width * dimensions.height > PROVIDER_ICON_MAX_DIMENSION ** 2) {
+    return `Provider icons must be at most ${PROVIDER_ICON_MAX_DIMENSION} \xD7 ${PROVIDER_ICON_MAX_DIMENSION} pixels.`;
+  }
+  return null;
+}
+
 // server/mcp-registry.ts
 var MAX_ARGS = 64;
 var stdioEntrySchema = external_exports.object({
@@ -14700,11 +14791,26 @@ var MAX_LOCAL_VM_MAX_INSTANCES = 4;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
+var CDP_PORT = /^[0-9]{1,5}$/;
+var CDP_URL = /^(https?|wss?):\/\/\S+$/i;
+function isValidCdpTarget(value) {
+  if (typeof value !== "string" || value === "") return false;
+  if (CDP_PORT.test(value)) {
+    const port = Number(value);
+    return port >= 1 && port <= 65535;
+  }
+  return CDP_URL.test(value);
+}
 var vpsConfigSchema = external_exports.object({
   sshAlias: external_exports.string().refine((value) => value === "" || isValidSshAlias(value), {
     message: "must be a simple SSH config alias"
   }).optional()
 });
+var browserEngineConfigSchema = external_exports.object({
+  attachCdpUrl: external_exports.string().trim().max(2048).refine((value) => value === "" || isValidCdpTarget(value), {
+    message: "browserEngine.attachCdpUrl must be a CDP port (1-65535) or an http(s)/ws(s) URL"
+  }).optional()
+});
 var roomConfigSchema = external_exports.object({
   turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
   /** Room handoff tree lifetime. Active execution pauses this clock; the
@@ -14846,7 +14952,11 @@ var featureConfigSchema = external_exports.object({
   /** Claude bots also load the MCP servers and connectors from this
    * machine's own Claude Code setup (Plugins → MCP servers switch). Off by
    * default: each extra tool costs tokens on every model call. */
-  claudeUserMcp: external_exports.boolean().optional()
+  claudeUserMcp: external_exports.boolean().optional(),
+  /** LLM-generated titles for new bot threads. Off until explicitly
+   * enabled; a one-shot that fails or answers junk leaves the first-message
+   * snippet in place — see llmThreadTitlesEnabled. */
+  llmThreadTitles: external_exports.boolean().optional()
 });
 var onboardingConfigSchema = external_exports.object({
   /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
@@ -14860,6 +14970,10 @@ var instanceConfigSchema = external_exports.object({
   driver: external_exports.string().min(1),
   displayName: optionalText,
   accentColor: optionalText,
+  icon: external_exports.discriminatedUnion("kind", [
+    external_exports.object({ kind: external_exports.literal("preset"), preset: external_exports.enum(PROVIDER_ICON_PRESETS) }).strict(),
+    external_exports.object({ kind: external_exports.literal("custom"), dataUrl: external_exports.string() }).strict().refine((icon) => providerIconError(icon) === null, { message: "Invalid provider icon" })
+  ]).optional(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   enabled: external_exports.boolean().optional(),
   config: external_exports.json().optional()
@@ -14874,6 +14988,20 @@ var defaultModelSelectionSchema = external_exports.object({
   (selection) => selection.variant === void 0 || selection.effort === void 0,
   "choose either a model variant or an effort level"
 );
+var threadsConfigSchema = external_exports.object({
+  maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
+  /** Cap each per-thread events/ and native/ NDJSON log at this many
+   * bytes; absent (the default) keeps today's unbounded growth (#1280). */
+  eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional(),
+  /** Days a closed or archived thread's event logs survive (#1280).
+   * Absent keeps them forever. */
+  eventLogRetentionDays: external_exports.number().int().min(1).max(3650).optional()
+}).strict();
+var threadsPatchSchema = threadsConfigSchema.extend({
+  maxConcurrentPerBot: threadsConfigSchema.shape.maxConcurrentPerBot.optional(),
+  eventLogMaxBytes: threadsConfigSchema.shape.eventLogMaxBytes.nullable(),
+  eventLogRetentionDays: threadsConfigSchema.shape.eventLogRetentionDays.nullable()
+});
 var appConfigSchema = external_exports.object({
   /** Verified by the dedicated domain endpoint, never a generic config patch. */
   customDomain: external_exports.string().optional(),
@@ -14924,6 +15052,7 @@ var appConfigSchema = external_exports.object({
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
    * `fishKey`), "system" (the Mac's built-in voices, no key), or
+   * "xai" (Grok TTS, reusing `xai.key`), or
    * "chatterbox" (a local OpenAI-compatible Chatterbox server; `baseUrl`
    * and `model` are settings, not secrets). Cloud keys stay separate so
    * switching providers never overwrites or misuses the other key. */
@@ -14931,7 +15060,7 @@ var appConfigSchema = external_exports.object({
     key: optionalText,
     fishKey: optionalText,
     voice: optionalText,
-    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox"]).optional(),
+    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox", "xai"]).optional(),
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the Chatterbox server address must start with http:// or https://").optional(),
     model: optionalText
   }).optional(),
@@ -14960,18 +15089,20 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
-  threads: external_exports.object({
-    maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
-    /** Cap each per-thread events/ and native/ NDJSON log at this many
-     * bytes; absent (the default) keeps today's unbounded growth (#1280). */
-    eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional(),
-    /** Days a closed or archived thread's event logs survive (#1280).
-     * Absent keeps them forever. */
-    eventLogRetentionDays: external_exports.number().int().min(1).max(3650).optional()
-  }).strict().optional(),
+  context: external_exports.object({
+    rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
+    compactAt: external_exports.number().positive().max(1e7).optional(),
+    autoCompact: external_exports.boolean().optional()
+  }).optional(),
+  threads: threadsConfigSchema.optional(),
+  /** The authorization decision log (server/decision-log.ts): days of month
+   * files kept, at least; OMB_DECISION_RETENTION_DAYS wins when set. */
+  decisions: external_exports.object({ retentionDays: external_exports.number().int().min(1).max(3650).optional() }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
+  /** CDP attach target for a bot's browser; see browserEngineConfigSchema. */
+  browserEngine: browserEngineConfigSchema.optional(),
   browserProfiles: browserProfilesSchema.optional(),
   instances: instanceConfigMapSchema.optional(),
   /** User-configured MCP servers, mounted into every capable engine. Kept
@@ -14983,7 +15114,7 @@ var appConfigSchema = external_exports.object({
 var storedAppConfigSchema = appConfigSchema.extend({
   browserProfiles: storedBrowserProfilesSchema.optional()
 });
-var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true });
+var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true }).extend({ threads: threadsPatchSchema.optional() });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
 var DATA_DIR = process.env.OMB_DATA_DIR ?? join2(homedir2(), ".openmausbot");
 var LEGACY_DATA_DIR = join2(homedir2(), ".opengrokbot");
@@ -15010,6 +15141,7 @@ var SPAWNED_PROXIES = {
   connectors: resolveProxy("connector-proxy"),
   mcpGate: resolveProxy("mcp-gate"),
   phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
   // Loaded by the external `pi` process via `-e`, not by this server — but
   // resolved through the same single source of truth so the packaged layout
   // check can assert it ships.
@@ -15125,6 +15257,86 @@ function createControlClient(options) {
 }
 var CONTROL_REFUSAL_PLAIN = "A person has taken control of this computer, so this call was NOT performed. Do not retry it \u2014 the screen is changing under their hands. Pause this task, tell the person you are waiting for them to hand control back, and take a fresh screenshot before your next action once they have.";
 
+// server/mcp-tool-schema.ts
+var ROOT_COMBINATORS = ["anyOf", "oneOf", "allOf", "not"];
+function isObject2(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function branches(value) {
+  return Array.isArray(value) ? value.filter(isObject2) : [];
+}
+function objectShape(schema) {
+  const properties = isObject2(schema.properties) ? { ...schema.properties } : {};
+  const required2 = new Set(Array.isArray(schema.required) ? schema.required.filter((key) => typeof key === "string") : []);
+  const adopt = (shape) => {
+    for (const [key, value] of Object.entries(shape.properties)) if (!(key in properties)) properties[key] = value;
+  };
+  for (const branch of branches(schema.allOf)) {
+    const shape = objectShape(branch);
+    adopt(shape);
+    for (const key of shape.required) required2.add(key);
+  }
+  for (const keyword of ["anyOf", "oneOf"]) {
+    const choices = branches(schema[keyword]).map(objectShape);
+    if (choices.length === 0) continue;
+    for (const choice of choices) adopt(choice);
+    for (const key of choices[0].required) {
+      if (choices.every((choice) => choice.required.includes(key))) required2.add(key);
+    }
+  }
+  return { properties, required: [...required2] };
+}
+function describesObject(type) {
+  return type === void 0 || type === "object" || Array.isArray(type) && type.includes("object");
+}
+function providerSafeInputSchema(schema) {
+  if (!isObject2(schema) || !describesObject(schema.type)) return { type: "object", properties: {} };
+  if (schema.type === "object" && ROOT_COMBINATORS.every((keyword) => !(keyword in schema))) return schema;
+  const { properties, required: required2 } = objectShape(schema);
+  const safe = { ...schema, type: "object", properties };
+  for (const keyword of ROOT_COMBINATORS) delete safe[keyword];
+  if (required2.length > 0) safe.required = required2;
+  else delete safe.required;
+  return safe;
+}
+function createToolListNormalizer() {
+  const pending = /* @__PURE__ */ new Set();
+  const idKey = (id) => `${typeof id}:${String(id)}`;
+  return {
+    observeRequest(line) {
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return;
+      }
+      if (isObject2(frame) && frame.method === "tools/list" && (typeof frame.id === "number" || typeof frame.id === "string")) {
+        pending.add(idKey(frame.id));
+      }
+    },
+    rewriteResponse(line) {
+      if (pending.size === 0) return line;
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return line;
+      }
+      if (!isObject2(frame) || "method" in frame || !pending.delete(idKey(frame.id))) return line;
+      if (!isObject2(frame.result) || !Array.isArray(frame.result.tools)) return line;
+      let changed = false;
+      const tools = frame.result.tools.map((tool) => {
+        if (!isObject2(tool)) return tool;
+        const inputSchema = providerSafeInputSchema(tool.inputSchema);
+        if (inputSchema === tool.inputSchema) return tool;
+        changed = true;
+        return { ...tool, inputSchema };
+      });
+      return changed ? JSON.stringify({ ...frame, result: { ...frame.result, tools } }) : line;
+    }
+  };
+}
+
 // server/mcp-bridge.ts
 var BRIDGE_INACTIVITY_MS = 45e3;
 var PROBE_TIMEOUT_MS = 1e4;
@@ -15294,8 +15506,10 @@ function runMcpBridge(options) {
       }
     } : {}
   });
+  const toolLists = createToolListNormalizer();
   let pendingInput = Promise.resolve();
   const inbound = createLineSplitter((line) => {
+    toolLists.observeRequest(line);
     const completion = intercept(line);
     if (completion) pendingInput = completion;
   });
@@ -15305,7 +15519,7 @@ function runMcpBridge(options) {
     inbound.flush();
     void pendingInput.finally(() => child.stdin.end());
   });
-  const outbound = createLineSplitter((line) => process.stdout.write(line + "\n"));
+  const outbound = createLineSplitter((line) => process.stdout.write(toolLists.rewriteResponse(line) + "\n"));
   child.stdout.on("data", (chunk) => outbound.push(chunk));
   child.stdout.on("end", () => outbound.flush());
   const detach = () => {