openmausbot 0.1.84 → 0.1.86

package/dist-server/shared/mention-boundary.js

@@ -0,0 +1,15 @@
+// Keep mention recognition identical in the renderer and server routing.
+// Deliberately allow only opening punctuation/Markdown markers here: `/@bot`
+// remains a URL path, while `(@bot)`, `【@bot】`, and `**@bot**` are tags.
+const OPENING_MENTION_BOUNDARY = /[(*_~[{<'"\u2018\u201c\u3008\u300a\u300c\u300e\u3010\uff08]/u;
+/** Return whether an at-sign starts a standalone mention at this offset. */
+export function isMentionBoundary(text, at) {
+    if (at === 0)
+        return true;
+    const before = text[at - 1];
+    return /\s/u.test(before) || OPENING_MENTION_BOUNDARY.test(before);
+}
+/** A matched name must not be the prefix of a longer Unicode word. */
+export function isMentionNameContinuation(value) {
+    return value !== undefined && /^[\p{L}\p{N}\p{M}_]/u.test(value);
+}

package/dist-server/shared/provider-icon.js

@@ -0,0 +1,110 @@
+export const PROVIDER_ICON_PRESETS = [
+    "openai", "anthropic", "google", "azure", "aws", "xai", "deepseek",
+    "meta", "mistral", "qwen", "moonshot", "cohere", "openrouter",
+];
+export const PROVIDER_ICON_MAX_BYTES = 128 * 1024;
+export const PROVIDER_ICON_MAX_DIMENSION = 1024;
+export const PROVIDER_ICON_MEDIA_TYPES = ["image/png", "image/jpeg", "image/webp"];
+export const PROVIDER_ICON_LABELS = {
+    openai: "OpenAI",
+    anthropic: "Anthropic",
+    google: "Google Gemini",
+    azure: "Microsoft Azure",
+    aws: "Amazon Bedrock (AWS)",
+    xai: "xAI",
+    deepseek: "DeepSeek",
+    meta: "Meta",
+    mistral: "Mistral AI",
+    qwen: "Qwen",
+    moonshot: "Moonshot AI",
+    cohere: "Cohere",
+    openrouter: "OpenRouter",
+};
+function decodedBase64Bytes(value) {
+    const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+    return Math.floor(value.length * 3 / 4) - padding;
+}
+function imageDimensions(bytes, mime) {
+    const u16be = (offset) => bytes[offset] * 256 + bytes[offset + 1];
+    const u16le = (offset) => bytes[offset] + bytes[offset + 1] * 256;
+    const u24le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536;
+    const u32le = (offset) => bytes[offset] + bytes[offset + 1] * 0x100 + bytes[offset + 2] * 0x10000 + bytes[offset + 3] * 0x1000000;
+    const u32be = (offset) => bytes[offset] * 0x1000000 + bytes[offset + 1] * 0x10000 + bytes[offset + 2] * 0x100 + bytes[offset + 3];
+    if (mime === "image/png") {
+        if (bytes.length < 33 || bytes.slice(0, 8).join(",") !== "137,80,78,71,13,10,26,10" ||
+            String.fromCharCode(...bytes.slice(12, 16)) !== "IHDR" ||
+            bytes.slice(-8).join(",") !== "73,69,78,68,174,66,96,130")
+            return null;
+        return { width: u32be(16), height: u32be(20) };
+    }
+    if (mime === "image/jpeg") {
+        if (bytes.length < 12 || bytes[0] !== 0xff || bytes[1] !== 0xd8 || bytes.at(-2) !== 0xff || bytes.at(-1) !== 0xd9)
+            return null;
+        for (let offset = 2; offset + 8 < bytes.length;) {
+            if (bytes[offset] !== 0xff) {
+                offset += 1;
+                continue;
+            }
+            const marker = bytes[offset + 1];
+            if ([0xc0, 0xc1, 0xc2, 0xc3, 0xc5, 0xc6, 0xc7, 0xc9, 0xca, 0xcb, 0xcd, 0xce, 0xcf].includes(marker)) {
+                return { height: u16be(offset + 5), width: u16be(offset + 7) };
+            }
+            if (marker === 0xd8 || marker === 0xd9 || marker === 0x01 || (marker >= 0xd0 && marker <= 0xd7)) {
+                offset += 2;
+                continue;
+            }
+            const length = u16be(offset + 2);
+            if (length < 2)
+                return null;
+            offset += length + 2;
+        }
+        return null;
+    }
+    if (bytes.length < 30 || String.fromCharCode(...bytes.slice(0, 4)) !== "RIFF" ||
+        String.fromCharCode(...bytes.slice(8, 12)) !== "WEBP" || u32le(4) + 8 !== bytes.length)
+        return null;
+    const format = String.fromCharCode(...bytes.slice(12, 16));
+    if (format === "VP8X")
+        return { width: u24le(24) + 1, height: u24le(27) + 1 };
+    if (format === "VP8L" && bytes[20] === 0x2f) {
+        const bits = bytes[21] | bytes[22] << 8 | bytes[23] << 16 | bytes[24] << 24;
+        return { width: (bits & 0x3fff) + 1, height: ((bits >>> 14) & 0x3fff) + 1 };
+    }
+    if (format === "VP8 " && bytes[23] === 0x9d && bytes[24] === 0x01 && bytes[25] === 0x2a) {
+        return { width: u16le(26) & 0x3fff, height: u16le(28) & 0x3fff };
+    }
+    return null;
+}
+/** Validate the complete persisted value. Custom images are local data URLs,
+ * never remote URLs, and use magic bytes so a forged MIME label is rejected. */
+export function providerIconError(icon) {
+    if (icon.kind === "preset") {
+        return PROVIDER_ICON_PRESETS.includes(icon.preset)
+            ? null : "Choose a supported provider icon.";
+    }
+    const match = /^data:(image\/(?:png|jpeg|webp));base64,([A-Za-z0-9+/]+={0,2})$/.exec(icon.dataUrl);
+    if (!match)
+        return "Upload a PNG, JPEG, or WebP image.";
+    const byteLength = decodedBase64Bytes(match[2]);
+    if (byteLength > PROVIDER_ICON_MAX_BYTES) {
+        return "Provider icons must be 128 KB or smaller.";
+    }
+    let decoded;
+    try {
+        decoded = atob(match[2]);
+    }
+    catch {
+        return "The uploaded image is not valid base64.";
+    }
+    if (decoded.length !== byteLength)
+        return "The uploaded image is not valid base64.";
+    const bytes = Uint8Array.from(decoded, (value) => value.charCodeAt(0));
+    const dimensions = imageDimensions(bytes, match[1]);
+    if (!dimensions)
+        return "The uploaded image is incomplete or does not match its file type.";
+    if (dimensions.width < 1 || dimensions.height < 1 || dimensions.width > PROVIDER_ICON_MAX_DIMENSION ||
+        dimensions.height > PROVIDER_ICON_MAX_DIMENSION || dimensions.width * dimensions.height > PROVIDER_ICON_MAX_DIMENSION ** 2) {
+        return `Provider icons must be at most ${PROVIDER_ICON_MAX_DIMENSION} × ${PROVIDER_ICON_MAX_DIMENSION} pixels.`;
+    }
+    return null;
+}

package/dist-server/shared/routines.js

@@ -1 +1,7 @@
-export {};
+/** The statuses both failure indicators count: a run that went wrong and has
+ * not been acknowledged. One home so the sidebar dot, the errors pill, the
+ * logs filter and the bulk-seen sweep cannot drift apart. */
+export const ROUTINE_PROBLEM_STATUSES = ["failed", "missed"];
+export function isRoutineProblemRun(run) {
+    return ROUTINE_PROBLEM_STATUSES.includes(run.status);
+}

package/dist-server/shared/team-backup.js

@@ -20,8 +20,13 @@ const task = z.object({
     key,
     title: z.string().max(2_000),
     createdAt: timestamp,
+    // Travels only when the first message already named this task, so a
+    // restore cannot re-arm one generated title on a row that used it.
+    titleFromFirstMessage: z.literal(true).optional(),
     openedBy: z.object({ botId: key, name, at: timestamp, kind: z.enum(["pair", "work"]).optional() }).optional(),
     closedBy: z.object({ botId: key, name, at: timestamp }).optional(),
+    /** Only true travels. Absence is unpinned, including backups from before pins. */
+    pinned: z.literal(true).optional(),
     activeLeafId: key.nullable(),
     messages: z.array(message).max(100_000),
 });

package/dist-server/src/lib/composer-attachments.js

@@ -691,3 +691,19 @@ export async function intakeFiles(_files, _opts) {
         notice: pathless && failed ? `${pathless} (${failed})` : (pathless ?? failed),
     };
 }
+/**
+ * Whether the composer may pull keyboard focus back into its textarea after an
+ * attachment lands. The draft was the writer's place when focus is still there,
+ * has fallen to the page (a disabled element drops it), or sits on a control
+ * inside the composer such as the paperclip button after the file dialog. A
+ * focused control elsewhere — a dialog, the thread list — is left alone.
+ */
+export function composerShouldRefocus(active, input) {
+    if (!active || active === input)
+        return true;
+    const root = input.ownerDocument;
+    if (active === root.body || active === root.documentElement)
+        return true;
+    const composer = input.closest("[data-tour=composer]");
+    return Boolean(composer?.contains(active));
+}

package/dist-server/vps-container-mcp.js

@@ -183,6 +183,86 @@ function probeLoginShellPath() {
   );
 }
 
+// server/mcp-tool-schema.ts
+var ROOT_COMBINATORS = ["anyOf", "oneOf", "allOf", "not"];
+function isObject(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function branches(value) {
+  return Array.isArray(value) ? value.filter(isObject) : [];
+}
+function objectShape(schema) {
+  const properties = isObject(schema.properties) ? { ...schema.properties } : {};
+  const required2 = new Set(Array.isArray(schema.required) ? schema.required.filter((key) => typeof key === "string") : []);
+  const adopt = (shape) => {
+    for (const [key, value] of Object.entries(shape.properties)) if (!(key in properties)) properties[key] = value;
+  };
+  for (const branch of branches(schema.allOf)) {
+    const shape = objectShape(branch);
+    adopt(shape);
+    for (const key of shape.required) required2.add(key);
+  }
+  for (const keyword of ["anyOf", "oneOf"]) {
+    const choices = branches(schema[keyword]).map(objectShape);
+    if (choices.length === 0) continue;
+    for (const choice of choices) adopt(choice);
+    for (const key of choices[0].required) {
+      if (choices.every((choice) => choice.required.includes(key))) required2.add(key);
+    }
+  }
+  return { properties, required: [...required2] };
+}
+function describesObject(type) {
+  return type === void 0 || type === "object" || Array.isArray(type) && type.includes("object");
+}
+function providerSafeInputSchema(schema) {
+  if (!isObject(schema) || !describesObject(schema.type)) return { type: "object", properties: {} };
+  if (schema.type === "object" && ROOT_COMBINATORS.every((keyword) => !(keyword in schema))) return schema;
+  const { properties, required: required2 } = objectShape(schema);
+  const safe = { ...schema, type: "object", properties };
+  for (const keyword of ROOT_COMBINATORS) delete safe[keyword];
+  if (required2.length > 0) safe.required = required2;
+  else delete safe.required;
+  return safe;
+}
+function createToolListNormalizer() {
+  const pending = /* @__PURE__ */ new Set();
+  const idKey = (id) => `${typeof id}:${String(id)}`;
+  return {
+    observeRequest(line) {
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return;
+      }
+      if (isObject(frame) && frame.method === "tools/list" && (typeof frame.id === "number" || typeof frame.id === "string")) {
+        pending.add(idKey(frame.id));
+      }
+    },
+    rewriteResponse(line) {
+      if (pending.size === 0) return line;
+      let frame;
+      try {
+        frame = JSON.parse(line);
+      } catch {
+        return line;
+      }
+      if (!isObject(frame) || "method" in frame || !pending.delete(idKey(frame.id))) return line;
+      if (!isObject(frame.result) || !Array.isArray(frame.result.tools)) return line;
+      let changed = false;
+      const tools = frame.result.tools.map((tool) => {
+        if (!isObject(tool)) return tool;
+        const inputSchema = providerSafeInputSchema(tool.inputSchema);
+        if (inputSchema === tool.inputSchema) return tool;
+        changed = true;
+        return { ...tool, inputSchema };
+      });
+      return changed ? JSON.stringify({ ...frame, result: { ...frame.result, tools } }) : line;
+    }
+  };
+}
+
 // server/mcp-bridge.ts
 var BRIDGE_INACTIVITY_MS = 45e3;
 var PROBE_TIMEOUT_MS = 1e4;
@@ -352,8 +432,10 @@ function runMcpBridge(options) {
       }
     } : {}
   });
+  const toolLists = createToolListNormalizer();
   let pendingInput = Promise.resolve();
   const inbound = createLineSplitter((line) => {
+    toolLists.observeRequest(line);
     const completion = intercept(line);
     if (completion) pendingInput = completion;
   });
@@ -363,7 +445,7 @@ function runMcpBridge(options) {
     inbound.flush();
     void pendingInput.finally(() => child.stdin.end());
   });
-  const outbound = createLineSplitter((line) => process.stdout.write(line + "\n"));
+  const outbound = createLineSplitter((line) => process.stdout.write(toolLists.rewriteResponse(line) + "\n"));
   child.stdout.on("data", (chunk) => outbound.push(chunk));
   child.stdout.on("end", () => outbound.flush());
   const detach = () => {
@@ -1056,7 +1138,7 @@ __export(util_exports, {
   getParsedType: () => getParsedType,
   getSizableOrigin: () => getSizableOrigin,
   hexToUint8Array: () => hexToUint8Array,
-  isObject: () => isObject,
+  isObject: () => isObject2,
   isPlainObject: () => isPlainObject,
   issue: () => issue,
   joinValues: () => joinValues,
@@ -1219,7 +1301,7 @@ function slugify(input) {
 }
 var captureStackTrace = "captureStackTrace" in Error ? Error.captureStackTrace : (..._args) => {
 };
-function isObject(data) {
+function isObject2(data) {
   return typeof data === "object" && data !== null && !Array.isArray(data);
 }
 var allowsEval = /* @__PURE__ */ cached2(() => {
@@ -1238,7 +1320,7 @@ var allowsEval = /* @__PURE__ */ cached2(() => {
   }
 });
 function isPlainObject(o) {
-  if (isObject(o) === false)
+  if (isObject2(o) === false)
     return false;
   const ctor = o.constructor;
   if (ctor === void 0)
@@ -1246,7 +1328,7 @@ function isPlainObject(o) {
   if (typeof ctor !== "function")
     return true;
   const prot = ctor.prototype;
-  if (isObject(prot) === false)
+  if (isObject2(prot) === false)
     return false;
   if (Object.prototype.hasOwnProperty.call(prot, "isPrototypeOf") === false) {
     return false;
@@ -3459,13 +3541,13 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     }
     return propValues;
   });
-  const isObject2 = isObject;
+  const isObject3 = isObject2;
   const catchall = def.catchall;
   let value;
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -3592,7 +3674,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     return (payload, ctx) => fn(shape, payload, ctx);
   };
   let fastpass;
-  const isObject2 = isObject;
+  const isObject3 = isObject2;
   const jit = !globalConfig.jitless;
   const allowsEval2 = allowsEval;
   const fastEnabled = jit && allowsEval2.value;
@@ -3601,7 +3683,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
   inst._zod.parse = (payload, ctx) => {
     value ?? (value = _normalized.value);
     const input = payload.value;
-    if (!isObject2(input)) {
+    if (!isObject3(input)) {
       payload.issues.push({
         expected: "object",
         code: "invalid_type",
@@ -3777,7 +3859,7 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
   });
   inst._zod.parse = (payload, ctx) => {
     const input = payload.value;
-    if (!isObject(input)) {
+    if (!isObject2(input)) {
       payload.issues.push({
         code: "invalid_type",
         expected: "object",
@@ -14962,6 +15044,97 @@ function isModelVariant(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && value.trim() === value && !new RegExp("\\p{Cc}", "u").test(value);
 }
 
+// shared/provider-icon.ts
+var PROVIDER_ICON_PRESETS = [
+  "openai",
+  "anthropic",
+  "google",
+  "azure",
+  "aws",
+  "xai",
+  "deepseek",
+  "meta",
+  "mistral",
+  "qwen",
+  "moonshot",
+  "cohere",
+  "openrouter"
+];
+var PROVIDER_ICON_MAX_BYTES = 128 * 1024;
+var PROVIDER_ICON_MAX_DIMENSION = 1024;
+function decodedBase64Bytes(value) {
+  const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+  return Math.floor(value.length * 3 / 4) - padding;
+}
+function imageDimensions(bytes, mime) {
+  const u16be = (offset) => bytes[offset] * 256 + bytes[offset + 1];
+  const u16le = (offset) => bytes[offset] + bytes[offset + 1] * 256;
+  const u24le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536;
+  const u32le = (offset) => bytes[offset] + bytes[offset + 1] * 256 + bytes[offset + 2] * 65536 + bytes[offset + 3] * 16777216;
+  const u32be = (offset) => bytes[offset] * 16777216 + bytes[offset + 1] * 65536 + bytes[offset + 2] * 256 + bytes[offset + 3];
+  if (mime === "image/png") {
+    if (bytes.length < 33 || bytes.slice(0, 8).join(",") !== "137,80,78,71,13,10,26,10" || String.fromCharCode(...bytes.slice(12, 16)) !== "IHDR" || bytes.slice(-8).join(",") !== "73,69,78,68,174,66,96,130") return null;
+    return { width: u32be(16), height: u32be(20) };
+  }
+  if (mime === "image/jpeg") {
+    if (bytes.length < 12 || bytes[0] !== 255 || bytes[1] !== 216 || bytes.at(-2) !== 255 || bytes.at(-1) !== 217) return null;
+    for (let offset = 2; offset + 8 < bytes.length; ) {
+      if (bytes[offset] !== 255) {
+        offset += 1;
+        continue;
+      }
+      const marker = bytes[offset + 1];
+      if ([192, 193, 194, 195, 197, 198, 199, 201, 202, 203, 205, 206, 207].includes(marker)) {
+        return { height: u16be(offset + 5), width: u16be(offset + 7) };
+      }
+      if (marker === 216 || marker === 217 || marker === 1 || marker >= 208 && marker <= 215) {
+        offset += 2;
+        continue;
+      }
+      const length = u16be(offset + 2);
+      if (length < 2) return null;
+      offset += length + 2;
+    }
+    return null;
+  }
+  if (bytes.length < 30 || String.fromCharCode(...bytes.slice(0, 4)) !== "RIFF" || String.fromCharCode(...bytes.slice(8, 12)) !== "WEBP" || u32le(4) + 8 !== bytes.length) return null;
+  const format = String.fromCharCode(...bytes.slice(12, 16));
+  if (format === "VP8X") return { width: u24le(24) + 1, height: u24le(27) + 1 };
+  if (format === "VP8L" && bytes[20] === 47) {
+    const bits = bytes[21] | bytes[22] << 8 | bytes[23] << 16 | bytes[24] << 24;
+    return { width: (bits & 16383) + 1, height: (bits >>> 14 & 16383) + 1 };
+  }
+  if (format === "VP8 " && bytes[23] === 157 && bytes[24] === 1 && bytes[25] === 42) {
+    return { width: u16le(26) & 16383, height: u16le(28) & 16383 };
+  }
+  return null;
+}
+function providerIconError(icon) {
+  if (icon.kind === "preset") {
+    return PROVIDER_ICON_PRESETS.includes(icon.preset) ? null : "Choose a supported provider icon.";
+  }
+  const match = /^data:(image\/(?:png|jpeg|webp));base64,([A-Za-z0-9+/]+={0,2})$/.exec(icon.dataUrl);
+  if (!match) return "Upload a PNG, JPEG, or WebP image.";
+  const byteLength = decodedBase64Bytes(match[2]);
+  if (byteLength > PROVIDER_ICON_MAX_BYTES) {
+    return "Provider icons must be 128 KB or smaller.";
+  }
+  let decoded;
+  try {
+    decoded = atob(match[2]);
+  } catch {
+    return "The uploaded image is not valid base64.";
+  }
+  if (decoded.length !== byteLength) return "The uploaded image is not valid base64.";
+  const bytes = Uint8Array.from(decoded, (value) => value.charCodeAt(0));
+  const dimensions = imageDimensions(bytes, match[1]);
+  if (!dimensions) return "The uploaded image is incomplete or does not match its file type.";
+  if (dimensions.width < 1 || dimensions.height < 1 || dimensions.width > PROVIDER_ICON_MAX_DIMENSION || dimensions.height > PROVIDER_ICON_MAX_DIMENSION || dimensions.width * dimensions.height > PROVIDER_ICON_MAX_DIMENSION ** 2) {
+    return `Provider icons must be at most ${PROVIDER_ICON_MAX_DIMENSION} \xD7 ${PROVIDER_ICON_MAX_DIMENSION} pixels.`;
+  }
+  return null;
+}
+
 // server/mcp-registry.ts
 var MAX_ARGS = 64;
 var stdioEntrySchema = external_exports.object({
@@ -15002,11 +15175,26 @@ var MAX_LOCAL_VM_MAX_INSTANCES = 4;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
+var CDP_PORT = /^[0-9]{1,5}$/;
+var CDP_URL = /^(https?|wss?):\/\/\S+$/i;
+function isValidCdpTarget(value) {
+  if (typeof value !== "string" || value === "") return false;
+  if (CDP_PORT.test(value)) {
+    const port = Number(value);
+    return port >= 1 && port <= 65535;
+  }
+  return CDP_URL.test(value);
+}
 var vpsConfigSchema = external_exports.object({
   sshAlias: external_exports.string().refine((value) => value === "" || isValidSshAlias(value), {
     message: "must be a simple SSH config alias"
   }).optional()
 });
+var browserEngineConfigSchema = external_exports.object({
+  attachCdpUrl: external_exports.string().trim().max(2048).refine((value) => value === "" || isValidCdpTarget(value), {
+    message: "browserEngine.attachCdpUrl must be a CDP port (1-65535) or an http(s)/ws(s) URL"
+  }).optional()
+});
 var roomConfigSchema = external_exports.object({
   turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
   /** Room handoff tree lifetime. Active execution pauses this clock; the
@@ -15148,7 +15336,11 @@ var featureConfigSchema = external_exports.object({
   /** Claude bots also load the MCP servers and connectors from this
    * machine's own Claude Code setup (Plugins → MCP servers switch). Off by
    * default: each extra tool costs tokens on every model call. */
-  claudeUserMcp: external_exports.boolean().optional()
+  claudeUserMcp: external_exports.boolean().optional(),
+  /** LLM-generated titles for new bot threads. Off until explicitly
+   * enabled; a one-shot that fails or answers junk leaves the first-message
+   * snippet in place — see llmThreadTitlesEnabled. */
+  llmThreadTitles: external_exports.boolean().optional()
 });
 var onboardingConfigSchema = external_exports.object({
   /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
@@ -15162,6 +15354,10 @@ var instanceConfigSchema = external_exports.object({
   driver: external_exports.string().min(1),
   displayName: optionalText,
   accentColor: optionalText,
+  icon: external_exports.discriminatedUnion("kind", [
+    external_exports.object({ kind: external_exports.literal("preset"), preset: external_exports.enum(PROVIDER_ICON_PRESETS) }).strict(),
+    external_exports.object({ kind: external_exports.literal("custom"), dataUrl: external_exports.string() }).strict().refine((icon) => providerIconError(icon) === null, { message: "Invalid provider icon" })
+  ]).optional(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   enabled: external_exports.boolean().optional(),
   config: external_exports.json().optional()
@@ -15176,6 +15372,20 @@ var defaultModelSelectionSchema = external_exports.object({
   (selection) => selection.variant === void 0 || selection.effort === void 0,
   "choose either a model variant or an effort level"
 );
+var threadsConfigSchema = external_exports.object({
+  maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
+  /** Cap each per-thread events/ and native/ NDJSON log at this many
+   * bytes; absent (the default) keeps today's unbounded growth (#1280). */
+  eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional(),
+  /** Days a closed or archived thread's event logs survive (#1280).
+   * Absent keeps them forever. */
+  eventLogRetentionDays: external_exports.number().int().min(1).max(3650).optional()
+}).strict();
+var threadsPatchSchema = threadsConfigSchema.extend({
+  maxConcurrentPerBot: threadsConfigSchema.shape.maxConcurrentPerBot.optional(),
+  eventLogMaxBytes: threadsConfigSchema.shape.eventLogMaxBytes.nullable(),
+  eventLogRetentionDays: threadsConfigSchema.shape.eventLogRetentionDays.nullable()
+});
 var appConfigSchema = external_exports.object({
   /** Verified by the dedicated domain endpoint, never a generic config patch. */
   customDomain: external_exports.string().optional(),
@@ -15226,6 +15436,7 @@ var appConfigSchema = external_exports.object({
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
    * `fishKey`), "system" (the Mac's built-in voices, no key), or
+   * "xai" (Grok TTS, reusing `xai.key`), or
    * "chatterbox" (a local OpenAI-compatible Chatterbox server; `baseUrl`
    * and `model` are settings, not secrets). Cloud keys stay separate so
    * switching providers never overwrites or misuses the other key. */
@@ -15233,7 +15444,7 @@ var appConfigSchema = external_exports.object({
     key: optionalText,
     fishKey: optionalText,
     voice: optionalText,
-    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox"]).optional(),
+    provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox", "xai"]).optional(),
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the Chatterbox server address must start with http:// or https://").optional(),
     model: optionalText
   }).optional(),
@@ -15262,18 +15473,20 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
-  threads: external_exports.object({
-    maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
-    /** Cap each per-thread events/ and native/ NDJSON log at this many
-     * bytes; absent (the default) keeps today's unbounded growth (#1280). */
-    eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional(),
-    /** Days a closed or archived thread's event logs survive (#1280).
-     * Absent keeps them forever. */
-    eventLogRetentionDays: external_exports.number().int().min(1).max(3650).optional()
-  }).strict().optional(),
+  context: external_exports.object({
+    rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
+    compactAt: external_exports.number().positive().max(1e7).optional(),
+    autoCompact: external_exports.boolean().optional()
+  }).optional(),
+  threads: threadsConfigSchema.optional(),
+  /** The authorization decision log (server/decision-log.ts): days of month
+   * files kept, at least; OMB_DECISION_RETENTION_DAYS wins when set. */
+  decisions: external_exports.object({ retentionDays: external_exports.number().int().min(1).max(3650).optional() }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
+  /** CDP attach target for a bot's browser; see browserEngineConfigSchema. */
+  browserEngine: browserEngineConfigSchema.optional(),
   browserProfiles: browserProfilesSchema.optional(),
   instances: instanceConfigMapSchema.optional(),
   /** User-configured MCP servers, mounted into every capable engine. Kept
@@ -15285,7 +15498,7 @@ var appConfigSchema = external_exports.object({
 var storedAppConfigSchema = appConfigSchema.extend({
   browserProfiles: storedBrowserProfilesSchema.optional()
 });
-var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true });
+var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true }).extend({ threads: threadsPatchSchema.optional() });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
 var DATA_DIR = process.env.OMB_DATA_DIR ?? join2(homedir2(), ".openmausbot");
 var LEGACY_DATA_DIR = join2(homedir2(), ".opengrokbot");
@@ -15312,6 +15525,7 @@ var SPAWNED_PROXIES = {
   connectors: resolveProxy("connector-proxy"),
   mcpGate: resolveProxy("mcp-gate"),
   phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
   // Loaded by the external `pi` process via `-e`, not by this server — but
   // resolved through the same single source of truth so the packaged layout
   // check can assert it ships.

package/enterprise/README.md

@@ -5,24 +5,42 @@ folder has its own [LICENSE](./LICENSE); everything outside it is Apache 2.0.
 
 **Delete this folder and you have the open-source edition.** Core only
 reaches the layer through one hook point, `server/enterprise.ts`, which
-loads `enterprise/server/index.ts` if it exists and otherwise reports the
-open-source edition. No core file imports anything from here.
+loads `enterprise/server/index.ts` (or the bundled `index.js`) if it exists
+and otherwise reports the open-source edition. No core file imports anything
+from here.
+
+Where core looks, in order: `OMB_ENTERPRISE_DIR` when it is set (and then
+only there); otherwise beside the server root (a checkout's `enterprise/`,
+the npm package's `<package>/enterprise/`), then inside it
+(`dist-server/enterprise/`, which is all the Docker image and the packaged
+desktop carry; `scripts/bundle-server.mjs` writes the bundled layer and this
+LICENSE there).
 
 ## How a deployment turns enterprise
 
 Set `OMB_LICENSE_KEY` on the server. The key is `omb1.<claims>.<signature>`:
 the claims are visible JSON (who it is for, which entitlements, when it
 expires), signed with an Ed25519 key whose public half is baked into
-`server/license.ts`. Verification is offline, and one build serves every
-customer, because the key decides the feature set rather than the code.
+`enterprise/server/license.ts`. Verification is offline, and one build serves
+every customer, because the key decides the feature set rather than the code.
 
 `GET /api/edition` reports the outcome:
 
 ```json
-{ "edition": "enterprise", "customer": "Acme", "features": ["sso", "whitelabel"], "expiresAt": "2027-09-02" }
-{ "edition": "oss", "features": [], "notice": "OMB_LICENSE_KEY expired on 2027-09-02; renew it to keep enterprise features" }
+{ "edition": "enterprise", "customer": "Acme", "features": ["budgets", "whitelabel"], "expiresAt": "2027-09-02", "expiresInDays": 12 }
+{ "edition": "enterprise", "customer": "Acme", "features": ["budgets", "whitelabel"], "expiresAt": "2027-09-02", "expiresInDays": -2, "graceEndsAt": "2027-09-09", "notice": "OMB_LICENSE_KEY expired on 2027-09-02; enterprise features keep working until 2027-09-09 while it is renewed" }
+{ "edition": "oss", "features": [], "notice": "enterprise layer disabled: OMB_LICENSE_KEY expired on 2027-09-02; renew it to keep enterprise features" }
 ```
 
+`expiresInDays` is present whenever the key has an expiry; a non-admin
+session's `/api/edition` leaves out `expiresInDays`, `graceEndsAt` and the
+notice. From 30 days
+before it, the server logs a warning at startup and admins see a banner in
+Settings. After the expiry date the features keep working for a 7-day grace
+period, with the notice above and a banner saying until when; then they stop,
+without a restart. The key format and its signature check do not change: the
+layer simply accepts a key that expired less than the grace period ago.
+
 A missing, altered, or expired key does not stop an ordinary standalone
 server: it runs the open-source edition and the notice says what to fix.
 A workspace explicitly configured for hosted sign-in fails closed for remote
@@ -31,12 +49,15 @@ must not silently fall back to standalone email or pairing credentials.
 
 ## Entitlement ids
 
-| id | grants |
-|---|---|
-| `whitelabel` | product name, tagline, accent colour, logo, favicon and support link from `brand.json` (below) |
-| `sso` | identity-header trust behind an OIDC proxy |
-| `admin` | Settings → Workspaces and the optional hosted workspace sign-in adapter |
-| `budgets` | per-bot and per-section spend limits |
+| id | grants | status |
+|---|---|---|
+| `whitelabel` | product name, tagline, accent colour, logo, favicon and support link from `brand.json` (below) | shipped |
+| `sso` | sign-in through a company identity provider | planned: nothing checks it yet |
+| `admin` | Settings → Workspaces and the optional hosted workspace sign-in adapter | shipped |
+| `budgets` | one monthly spend limit for the whole workspace, refusing new turns at the cap, with a warning percentage and admin notices (not per bot or per section) | shipped |
+| `billing` | sell prices per model: a billable column in Usage → History and its CSV, and per-model prices that replace list prices in cost estimates | shipped |
+
+[FEATURES](./FEATURES) is the authoritative list.
 
 Core gates a feature with `entitled("id")` from `server/enterprise.ts`.
 Unknown ids are carried in the key but grant nothing, so keys can be issued