openmausbot 0.1.87 → 0.1.88

package/dist-server/connector-proxy.js

@@ -1,11 +1,113 @@
 // server/connector-proxy.ts
 import readline from "node:readline";
 import { randomUUID } from "node:crypto";
+
+// shared/wire.ts
+var CONNECTOR_SLUG_PATTERN = /^[a-z0-9][a-z0-9_-]{0,80}$/;
+var CONNECTOR_TOOL_NAME_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;
+
+// server/connector-verdict.ts
+function serviceSlugFor(tool) {
+  const underscore = tool.indexOf("_");
+  if (underscore <= 0) return null;
+  return tool.slice(0, underscore).toLowerCase();
+}
+function serviceSlugForCandidates(tool, candidates) {
+  let match = null;
+  for (const candidate of candidates) {
+    if (tool.startsWith(candidate.toUpperCase() + "_") && (match === null || candidate.length > match.length)) {
+      match = candidate;
+    }
+  }
+  return match;
+}
+
+// server/connector-advertisement.ts
+var CONNECTOR_ALLOWED_TOOLS_ENV = "OMB_CONNECTOR_ALLOWED_TOOLS";
+var CONNECTOR_SERVICE_SLUGS_ENV = "OMB_CONNECTOR_SERVICE_SLUGS";
+var CONNECTOR_ALLOWED_TOOLS_MAX_BYTES = 32 * 1024;
+var CONNECTOR_SERVICE_SLUGS_MAX_BYTES = 32 * 1024;
+var CONNECTOR_META_TOOLS = [
+  "COMPOSIO_SEARCH_TOOLS",
+  "COMPOSIO_GET_TOOL_SCHEMAS",
+  "COMPOSIO_MULTI_EXECUTE_TOOL",
+  // Session-level connection meta-tools. COMPOSIO_MANAGE_CONNECTIONS ships
+  // in every Composio session; COMPOSIO_WAIT_FOR_CONNECTIONS is opt-in and
+  // off by default. They prefix as service "composio", which no grant
+  // names, so they ride this list instead of CONNECTION_TOOL_SUFFIXES —
+  // connector-proxy intercepts their calls to surface connection cards.
+  // The filter only keeps names upstream actually lists, so advertising an
+  // opted-out tool changes nothing.
+  "COMPOSIO_MANAGE_CONNECTIONS",
+  "COMPOSIO_WAIT_FOR_CONNECTIONS"
+];
+var CONNECTION_TOOL_SUFFIXES = ["_MANAGE_CONNECTIONS", "_WAIT_FOR_CONNECTIONS"];
+function parseConnectorAllowedToolsEnv(raw) {
+  if (!raw) return null;
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const grants = {};
+  for (const [slug, grant] of Object.entries(value)) {
+    if (!CONNECTOR_SLUG_PATTERN.test(slug)) return null;
+    if (!grant || typeof grant !== "object" || Array.isArray(grant)) return null;
+    const tools = grant.tools;
+    if (tools === "*") {
+      grants[slug] = { tools: "*" };
+      continue;
+    }
+    if (!Array.isArray(tools) || tools.length === 0) return null;
+    if (!tools.every((tool) => typeof tool === "string" && CONNECTOR_TOOL_NAME_PATTERN.test(tool))) {
+      return null;
+    }
+    grants[slug] = { tools };
+  }
+  return grants;
+}
+function parseConnectorServiceSlugsEnv(raw) {
+  if (!raw) return [];
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(value)) return [];
+  return value.every((slug) => typeof slug === "string" && CONNECTOR_SLUG_PATTERN.test(slug)) ? value : [];
+}
+function connectorToolAdvertised(name, grants, candidates = []) {
+  if (Object.keys(grants).length > 0 && CONNECTOR_META_TOOLS.includes(name)) return true;
+  const service = serviceSlugForCandidates(name, candidates) ?? serviceSlugFor(name);
+  const grant = service === null ? void 0 : grants[service];
+  if (!grant) return false;
+  if (grant.tools === "*") return true;
+  if (grant.tools.includes(name)) return true;
+  return CONNECTION_TOOL_SUFFIXES.some((suffix) => name.endsWith(suffix));
+}
+function filterToolsListFrame(frame, grants, candidates = []) {
+  const result = frame.result;
+  if (!result || typeof result !== "object" || Array.isArray(result)) return frame;
+  const tools = result.tools;
+  if (!Array.isArray(tools)) return frame;
+  const kept = tools.filter((tool) => {
+    const name = tool && typeof tool === "object" && !Array.isArray(tool) ? tool.name : void 0;
+    return typeof name === "string" ? connectorToolAdvertised(name, grants, candidates) : true;
+  });
+  return { ...frame, result: { ...result, tools: kept } };
+}
+
+// server/connector-proxy.ts
 var UPSTREAM = process.env.OMB_CONNECTOR_UPSTREAM_URL ?? "";
 var HARNESS = process.env.OMB_HARNESS_URL ?? "http://127.0.0.1:8799";
 var BOT_ID = process.env.OMB_BOT_ID ?? "";
 var THREAD_ID = process.env.OMB_THREAD_ID ?? "";
 var TOKEN = process.env.OMB_CONNECTOR_TOKEN ?? process.env.OMB_COMMS_TOKEN ?? "";
+var ALLOWED_TOOLS = parseConnectorAllowedToolsEnv(process.env[CONNECTOR_ALLOWED_TOOLS_ENV]);
+var SERVICE_SLUGS = parseConnectorServiceSlugsEnv(process.env[CONNECTOR_SERVICE_SLUGS_ENV]);
 var MAX_RESPONSE_BYTES = 20 * 1024 * 1024;
 var INITIALIZE_RELAY_TIMEOUT_MS = 1e3;
 var RELAY_TIMEOUT_MS = 10 * 6e4;
@@ -176,7 +278,9 @@ async function handle(message) {
   }
   try {
     const response = await relay(message);
-    if (response && id !== void 0) send(response);
+    if (response && id !== void 0) {
+      send(method === "tools/list" && ALLOWED_TOOLS ? filterToolsListFrame(response, ALLOWED_TOOLS, SERVICE_SLUGS) : response);
+    }
   } catch (error) {
     if (id === void 0) return;
     const messageText = error instanceof Error ? error.message : String(error);

package/dist-server/container-mcp.js

@@ -44,6 +44,8 @@ function knownDirs() {
     join(home, ".volta", "bin"),
     join(home, ".bun", "bin"),
     join(home, ".asdf", "shims"),
+    join(home, ".local", "share", "mise", "shims"),
+    // mise installer
     join(home, ".deno", "bin"),
     join(home, "bin"),
     ...nvmBinDirs()
@@ -15642,7 +15644,7 @@ var MAX_CONCURRENT_BOT_THREADS = 10;
 var MIN_THREAD_EVENT_LOG_BYTES = 256 * 1024;
 var MAX_THREAD_EVENT_LOG_BYTES = 4 * 1024 * 1024 * 1024;
 var MIN_LOCAL_VM_MAX_INSTANCES = 1;
-var MAX_LOCAL_VM_MAX_INSTANCES = 4;
+var MAX_LOCAL_VM_MAX_INSTANCES = 8;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }

package/dist-server/drivers/agents-proxy.js

@@ -50,6 +50,47 @@ function isCredentialTargetId(value) {
   return typeof value === "string" && Object.prototype.hasOwnProperty.call(CREDENTIAL_TARGETS, value);
 }
 
+// shared/options-card.ts
+var WATCHER_OPTIONS_CARD_BOT_ID = "f08dd8e3-f942-4eb4-8783-df32b26b88a4";
+var OPTIONS_CARD_LIMITS = {
+  title: 120,
+  subtitle: 1e3,
+  option: 120,
+  minOptions: 2,
+  maxOptions: 6
+};
+function record(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function boundedText(value, field, maximum) {
+  if (typeof value !== "string") return { error: `${field} must be a string.` };
+  const text = value.trim();
+  if (!text) return { error: `${field} must not be blank.` };
+  if (text.length > maximum) return { error: `${field} must be at most ${maximum} characters.` };
+  return text;
+}
+function parseOptionsCardInput(value) {
+  if (!record(value)) return { ok: false, error: "create_options_card needs an object." };
+  const title = boundedText(value.title, "title", OPTIONS_CARD_LIMITS.title);
+  if (typeof title !== "string") return { ok: false, error: title.error };
+  const subtitle = boundedText(value.subtitle, "subtitle", OPTIONS_CARD_LIMITS.subtitle);
+  if (typeof subtitle !== "string") return { ok: false, error: subtitle.error };
+  if (!Array.isArray(value.options)) return { ok: false, error: "options must be an array of strings." };
+  if (value.options.length < OPTIONS_CARD_LIMITS.minOptions || value.options.length > OPTIONS_CARD_LIMITS.maxOptions) {
+    return { ok: false, error: `options must contain ${OPTIONS_CARD_LIMITS.minOptions}-${OPTIONS_CARD_LIMITS.maxOptions} items.` };
+  }
+  const options = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (let index = 0; index < value.options.length; index += 1) {
+    const option = boundedText(value.options[index], `options[${index}]`, OPTIONS_CARD_LIMITS.option);
+    if (typeof option !== "string") return { ok: false, error: option.error };
+    if (seen.has(option)) return { ok: false, error: `options must be unique; "${option}" is repeated.` };
+    seen.add(option);
+    options.push(option);
+  }
+  return { ok: true, value: { title, subtitle, options } };
+}
+
 // server/agent-tool-policy.ts
 var READ_ONLY_AGENT_TOOL_NAMES = /* @__PURE__ */ new Set([
   "list_bots",
@@ -206,6 +247,26 @@ var ROUTINE_FIELDS_SCHEMA = {
 };
 var PROPOSAL_OUTCOME = " Read the result: granted Full Access may apply the change immediately. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success from the permission mode alone; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
 var toolDefinitions = (externalRuntime) => [
+  {
+    name: "create_options_card",
+    description: "Show the person a native card with 2-6 choices in this Watcher conversation. The card is passive: a click returns the selected words as a reply and never authorizes or performs an external action. Use it for Watcher's review and draft-selection steps, then wait for the person's response.",
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        title: { type: "string", minLength: 1, maxLength: OPTIONS_CARD_LIMITS.title },
+        subtitle: { type: "string", minLength: 1, maxLength: OPTIONS_CARD_LIMITS.subtitle },
+        options: {
+          type: "array",
+          minItems: OPTIONS_CARD_LIMITS.minOptions,
+          maxItems: OPTIONS_CARD_LIMITS.maxOptions,
+          uniqueItems: true,
+          items: { type: "string", minLength: 1, maxLength: OPTIONS_CARD_LIMITS.option }
+        }
+      },
+      required: ["title", "subtitle", "options"]
+    }
+  },
   {
     name: "tool_result_read",
     description: "Read a missing portion of an oversized agents-tool result using the saved id and next offset from its notice. Returns at most 16,000 characters, only from this bot in this conversation. Use only when the preview is insufficient; do not load every page by default. Results expire after one hour, on app restart, or under cache pressure. This never reruns the original action.",
@@ -356,15 +417,42 @@ var toolDefinitions = (externalRuntime) => [
       required: ["title", "message"]
     }
   },
+  {
+    name: "vm_exec",
+    description: "Run a shell command inside your own Local VM (as the desktop user, starting in /home/cua/workspace) and get its exit code, stdout and stderr back as text. Use this for all command-line work in the VM: pip install --user, running a script, generating or converting a file, checking that a file exists. Do not type commands into a terminal window and read screenshots: that is slow and unreliable. GUI programs you start appear on the VM desktop. For a long job raise timeout_seconds (default 60, at most 300). Only available while you have a Local VM desktop.",
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        command: { type: "string", description: "The shell command to run, for example: python3 make_report.py && ls -l report.pdf" },
+        timeout_seconds: { type: "integer", minimum: 1, maximum: 300, description: "How long it may run before it is stopped. Default 60." }
+      },
+      required: ["command"]
+    }
+  },
+  {
+    name: "attach_file",
+    description: "Attach a finished file to the chat so the user can preview and download it: an image, video, audio clip, PDF, spreadsheet, slide deck or other document you made. Pass its path: a path inside your computer's /home/cua/workspace (for example /home/cua/workspace/report.pdf), or a file in your working folder. Do this instead of pasting a VM path as a link; a path inside a VM cannot be opened from chat. Supported: images (png, jpg, gif, webp), video (mp4, webm, mov), audio (mp3, m4a, aac, wav, ogg, opus, flac), pdf, Word/Excel/PowerPoint and OpenDocument files, and csv, tsv, txt, md, json, rtf. Up to 25 MB (images 10 MB). Finish writing the file first, then call this directly: it reports an error if the file is missing, so you do not need to list or open the folder to check.",
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        path: { type: "string", description: "The file's path, for example /home/cua/workspace/report.pdf." },
+        name: { type: "string", description: "Optional file name to show the user. Defaults to the file's own name." }
+      },
+      required: ["path"]
+    }
+  },
   {
     name: "post_to_room",
-    description: "Put one message into a shared room you belong to, for example when the user asks you to tell the team something. Get group_id from list_rooms. This posts and returns: no room member's turn starts, nobody replies, and nothing comes back except confirmation \u2014 so never use it to ask a question or hand out work (use ask_bot or delegate_bot for those). Post once, say it in full, and tell the user what you posted. If a post is refused, do not retry it: say what you wanted to post in your reply instead.",
+    description: "Put one message into a shared room you belong to, for example when the user asks you to tell the team something. Get group_id from list_rooms. This posts and returns: no room member's turn starts, nobody replies, and nothing comes back except confirmation \u2014 so never use it to ask a question or hand out work (use ask_bot or delegate_bot for those). Post once, say it in full, and tell the user what you posted. Set attach_voice_note true to attach this turn's voice note. If a post is refused, do not retry it: say what you wanted to post in your reply instead.",
     inputSchema: {
       type: "object",
       additionalProperties: false,
       properties: {
         group_id: { type: "string", description: "The room's id, copied exactly from list_rooms." },
-        message: { type: "string", description: "The complete message to post, written for the room to read as it stands." }
+        message: { type: "string", description: "The complete message to post, written for the room to read as it stands." },
+        attach_voice_note: { type: "boolean", description: "True to attach this turn's send_voice_note recording; the message is its caption. Call send_voice_note first." }
       },
       required: ["group_id", "message"]
     }
@@ -383,7 +471,12 @@ var toolDefinitions = (externalRuntime) => [
           model: { type: "string" },
           effort: { type: "string" },
           variant: { type: "string" }
-        }, required: ["instanceId", "model"] }
+        }, required: ["instanceId", "model"] },
+        cwd: {
+          type: "string",
+          maxLength: 1024,
+          description: "Absolute path of the folder this specialist's tools read and write in (for example /Users/me/Projects/site). It must already exist. Leave it out for the specialist's private workspace."
+        }
       },
       required: ["name", "role", "instructions"]
     }
@@ -415,11 +508,13 @@ var toolDefinitions = (externalRuntime) => [
               chiefOfStaff: { type: "boolean", description: "Appoint or remove this team's Chief. At most one Chief per team: explicitly demote the current Chief in the same plan when replacing them. Does not grant access to other teams or change execution permissions." },
               description: { type: "string", maxLength: 4e3 },
               soul: { type: "string", description: "Standing instructions; required with name/title/modelSelection for every new bot." },
+              cwd: { type: "string", maxLength: 1024, description: "Create only: absolute path of the folder the new bot's tools read and write in. It must already exist. Leave it out for a private workspace." },
               section: { type: "string", maxLength: 60, description: "Exact authorized existing team, or a team explicitly named in newTeams. Empty string means General." },
               modelSelection: { type: "object", additionalProperties: false, properties: {
                 instanceId: { type: "string" },
                 model: { type: "string" },
-                effort: { type: "string" }
+                effort: { type: "string" },
+                variant: { type: "string" }
               }, required: ["instanceId", "model"] }
             } }
           },
@@ -645,7 +740,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_profile",
-    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), or working folder (cwd). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section." + PROPOSAL_OUTCOME,
+    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section." + PROPOSAL_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -659,6 +754,14 @@ var toolDefinitions = (externalRuntime) => [
           maxLength: 1024,
           description: "Absolute path of the folder your tools read and write in (for example /Users/me/Projects/site). It must already exist. An empty string means your private workspace."
         },
+        notifications: {
+          type: "boolean",
+          description: "Completion and attention notifications for this bot on the host and paired clients."
+        },
+        speakReplies: {
+          type: "boolean",
+          description: "Speak this bot's replies aloud as they settle, without being asked."
+        },
         reason: { type: "string", minLength: 1, maxLength: 500, description: "One sentence the user will see explaining why." },
         for_bot_id: {
           type: "string",
@@ -668,6 +771,34 @@ var toolDefinitions = (externalRuntime) => [
       required: ["reason"]
     }
   },
+  {
+    name: "propose_model",
+    description: "Submit a user-requested switch of this bot's default engine and model. Use the exact instance and model ids the person named, or for a Chief the ids from the team-setup catalog. The card warns about capabilities the switch gains or loses; existing threads keep their current models." + PROPOSAL_OUTCOME,
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        model_selection: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            instanceId: { type: "string", minLength: 1, description: "Engine instance id, for example codex or claude." },
+            model: { type: "string", minLength: 1, description: "Exact model id on that instance." },
+            effort: { type: "string", description: "Optional effort level the instance offers; omit for the engine default." },
+            variant: { type: "string", description: "Optional explicit model variant; choose this or effort, not both." }
+          },
+          required: ["instanceId", "model"],
+          description: "The new default selection."
+        },
+        reason: { type: "string", minLength: 1, maxLength: 500, description: "One sentence the user will see explaining why." },
+        for_bot_id: {
+          type: "string",
+          description: "Chief of Staff only: the id of another bot in your section whose default model this changes. Omit to change your own."
+        }
+      },
+      required: ["model_selection", "reason"]
+    }
+  },
   {
     name: "skills_list",
     description: "List this bot's imported skills (enabled and disabled) and any staged skill writes waiting for the user to confirm. Use this before skill_manage to avoid duplicate names. Listing does not enable anything.",
@@ -715,12 +846,14 @@ var VOICE_TOOL_NAMES = /* @__PURE__ */ new Set(["send_voice_note"]);
 var ROOM_ONLY_TOOLS = /* @__PURE__ */ new Set(["list_room_targets", "coordinate_bots"]);
 var ROOM_REPLACED_TOOLS = /* @__PURE__ */ new Set(["ask_bot", "delegate_bot", "check_delegation", "wait_delegation", "start_thread", "send_to_thread", "wait_thread"]);
 var EXTERNAL_TOOL_NAMES = /* @__PURE__ */ new Set(["list_bots", "ask_bot", "delegate_bot", "check_delegation", "wait_delegation"]);
+var WATCHER_TOOL_NAMES = /* @__PURE__ */ new Set(["create_options_card"]);
 function availableTools(profile) {
   const TOOLS = toolDefinitions(profile.externalRuntime);
-  const AUTHORING_TOOLS = profile.skillAuthoring ? TOOLS : TOOLS.filter((tool) => !SKILL_TOOL_NAMES.has(tool.name));
+  const BOT_SCOPED_TOOLS = profile.botId === WATCHER_OPTIONS_CARD_BOT_ID ? TOOLS : TOOLS.filter((tool) => !WATCHER_TOOL_NAMES.has(tool.name));
+  const AUTHORING_TOOLS = profile.skillAuthoring ? BOT_SCOPED_TOOLS : BOT_SCOPED_TOOLS.filter((tool) => !SKILL_TOOL_NAMES.has(tool.name));
   const SHAREABLE_TOOLS = profile.sharedComputers ? AUTHORING_TOOLS : AUTHORING_TOOLS.filter((tool) => !SHARED_COMPUTER_TOOL_NAMES.has(tool.name));
   const VOICE_READY_TOOLS = profile.voiceNotes ? SHAREABLE_TOOLS : SHAREABLE_TOOLS.filter((tool) => !VOICE_TOOL_NAMES.has(tool.name));
-  return profile.externalRuntime ? TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? VOICE_READY_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
+  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? VOICE_READY_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
     ...tool,
     description: "Open a separate job on yourself with its own history and run, without switching the person's selected conversation. Use only when the user requests independent jobs (for example one review per pull request). Give a short specific title and complete instructions; you can open at most five per turn. This is not a teammate handoff: use coordinate_bots for teammates and their automatic replies. Self-opened jobs cannot recursively open more jobs. If refused, do not retry; explain what remains.",
     inputSchema: { ...tool.inputSchema, properties: {
@@ -1632,7 +1765,7 @@ __export(external_exports, {
   promise: () => promise,
   property: () => _property,
   readonly: () => readonly,
-  record: () => record,
+  record: () => record2,
   refine: () => refine,
   regex: () => _regex,
   regexes: () => regexes_exports,
@@ -13970,7 +14103,7 @@ __export(schemas_exports2, {
   preprocess: () => preprocess,
   promise: () => promise,
   readonly: () => readonly,
-  record: () => record,
+  record: () => record2,
   refine: () => refine,
   set: () => set,
   strictObject: () => strictObject,
@@ -14939,7 +15072,7 @@ var ZodRecord = /* @__PURE__ */ $constructor("ZodRecord", (inst, def) => {
   inst.keyType = def.keyType;
   inst.valueType = def.valueType;
 });
-function record(keyType, valueType, params) {
+function record2(keyType, valueType, params) {
   if (!valueType || !valueType._zod) {
     return new ZodRecord({
       type: "record",
@@ -15406,7 +15539,7 @@ var stringbool = (...args) => _stringbool({
 }, ...args);
 function json(params) {
   const jsonSchema = lazy(() => {
-    return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema), record(string2(), jsonSchema)]);
+    return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema), record2(string2(), jsonSchema)]);
   });
   return jsonSchema;
 }
@@ -15975,6 +16108,15 @@ function peerName(value) {
   return clip(value.replace(/[[\]]/g, " "), ROSTER_NAME_MAX);
 }
 
+// server/peer-delivery.ts
+var named = (receipt) => peerName(receipt.botName ?? "") || peerName(receipt.botId) || "teammate";
+function renderPeerDeliveryReceipts(receipts) {
+  if (!receipts.length) return "";
+  const line = (receipt) => `${named(receipt)}: ${receipt.outcome} \u2014 ${receipt.detail}`;
+  if (receipts.length === 1) return `Delivery to ${line(receipts[0])}`;
+  return ["Delivery receipts:", ...receipts.map((receipt) => `- ${line(receipt)}`)].join("\n");
+}
+
 // server/drivers/agents-client.ts
 function createHarnessClient(baseUrl, token) {
   async function api(path, init) {
@@ -16348,6 +16490,23 @@ function recallSpeaker(hit) {
   if (typeof hit.from === "string" && hit.from) return hit.from;
   return hit.role === "user" ? "user" : "you";
 }
+var isPeerDeliveryOutcome = (value) => value === "queued" || value === "injected" || value === "failed";
+function deliveryNote(r) {
+  const receipt = r.receipt;
+  if (!receipt || typeof receipt !== "object") return "";
+  const { botId, botName, outcome, detail, taskId, requestId } = receipt;
+  if (typeof botId !== "string" || !botId || typeof detail !== "string" || !detail) return "";
+  if (!isPeerDeliveryOutcome(outcome)) return "";
+  const parsed = {
+    botId,
+    ...typeof botName === "string" && botName ? { botName } : {},
+    outcome,
+    detail,
+    ...typeof taskId === "string" && taskId ? { taskId } : {},
+    ...typeof requestId === "string" && requestId ? { requestId } : {}
+  };
+  return renderPeerDeliveryReceipts([parsed]);
+}
 function recallWhen(at, dateOnly) {
   if (typeof at !== "number" || !Number.isFinite(at)) return "";
   const said = new Date(at);
@@ -16360,6 +16519,43 @@ async function callTool(name, args, context) {
   const { botId: BOT_ID, threadId: THREAD_ID, depth: DEPTH, externalRuntime: EXTERNAL_RUNTIME, coordinating: COORDINATING, turn } = context;
   const { delegationTaskIdsThisTurn } = turn;
   const { api, apiResponse } = context.client;
+  if (name === "vm_exec") {
+    const { ok: ok2, body } = await apiResponse("/api/internal/vm-exec", {
+      method: "POST",
+      body: JSON.stringify({ command: args.command, ...typeof args.timeout_seconds === "number" ? { timeout_seconds: args.timeout_seconds } : {} })
+    });
+    if (!ok2) return { text: String(body.error ?? "Could not run that command."), isError: true };
+    const exitCode = Number(body.exitCode ?? 0);
+    const stdout = String(body.stdout ?? "");
+    const stderr = String(body.stderr ?? "");
+    const lines = [body.timedOut ? "The command was stopped: it ran past its time limit." : `exit code ${exitCode}`];
+    if (stdout) lines.push("--- stdout ---", stdout.replace(/\s+$/, ""));
+    if (stderr) lines.push("--- stderr ---", stderr.replace(/\s+$/, ""));
+    if (!stdout && !stderr && !body.timedOut) lines.push("(no output)");
+    return { text: lines.join("\n"), ...exitCode !== 0 || body.timedOut ? { isError: true } : {} };
+  }
+  if (name === "attach_file") {
+    const { ok: ok2, body } = await apiResponse("/api/internal/attach-file", {
+      method: "POST",
+      body: JSON.stringify({ path: args.path, ...typeof args.name === "string" ? { name: args.name } : {} })
+    });
+    if (!ok2) return { text: String(body.error ?? "Could not attach that file."), isError: true };
+    return { text: `Attached ${String(body.name ?? "the file")} (${Number(body.bytes ?? 0)} bytes). It now appears in the chat with a preview.` };
+  }
+  if (name === "create_options_card") {
+    if (BOT_ID !== WATCHER_OPTIONS_CARD_BOT_ID) {
+      return { text: "create_options_card is not enabled for this bot.", isError: true };
+    }
+    const parsed = parseOptionsCardInput(args);
+    if (!parsed.ok) return { text: parsed.error, isError: true };
+    const result = await api("/api/internal/options-card", {
+      method: "POST",
+      body: JSON.stringify(parsed.value)
+    });
+    return {
+      text: `Rendered the native options card in this Watcher thread (message ${String(result.messageId ?? "created")}). Wait for the person's click or custom response; the card itself authorizes no external action.`
+    };
+  }
   if (SHARED_COMPUTER_TOOL_NAMES.has(name) && !context.sharedComputers) {
     return { text: "Computer sharing is turned off in this workspace. There are no shared computers to use.", isError: true };
   }
@@ -16456,6 +16652,7 @@ Use post_to_room with one of these ids. A post adds one message to the room; it
   if (name === "post_to_room") {
     const groupId = String(args.group_id ?? "").trim();
     const message = String(args.message ?? "").trim();
+    const attachVoiceNote = args.attach_voice_note === true;
     if (!groupId || !message) {
       return { text: "post_to_room needs group_id (from list_rooms) and message.", isError: true };
     }
@@ -16467,12 +16664,12 @@ Use post_to_room with one of these ids. A post adds one message to the room; it
     }
     const r = await api("/api/internal/post-to-room", {
       method: "POST",
-      body: JSON.stringify({ fromBotId: BOT_ID, fromThreadId: THREAD_ID, groupId, message })
+      body: JSON.stringify({ fromBotId: BOT_ID, fromThreadId: THREAD_ID, groupId, message, attachVoiceNote })
     });
     if (r.error) return { text: String(r.error), isError: true };
     turn.roomPostsThisTurn += 1;
     return {
-      text: `Posted in ${r.roomName ?? "the room"}. Nobody's turn was started, so expect no reply \u2014 tell the user it is posted.`
+      text: `Posted in ${r.roomName ?? "the room"}${r.attachedVoiceNote ? " with the voice note attached" : ""}. Nobody's turn was started, so expect no reply \u2014 tell the user it is posted.`
     };
   }
   if (name === "ask_bot") {
@@ -16483,6 +16680,7 @@ Use post_to_room with one of these ids. A post adds one message to the room; it
       method: "POST",
       body: JSON.stringify({ fromBotId: BOT_ID, fromThreadId: THREAD_ID, toBotId, message, depth: DEPTH })
     });
+    const note = deliveryNote(r);
     if (r.timeout) {
       const taskId = String(r.taskId ?? "").trim();
       if (taskId && !EXTERNAL_RUNTIME) delegationTaskIdsThisTurn.add(taskId);
@@ -16490,22 +16688,42 @@ Use post_to_room with one of these ids. A post adds one message to the room; it
       const amount = waitedSeconds < 60 ? waitedSeconds : Math.round(waitedSeconds / 60);
       const unit = waitedSeconds < 60 ? "second" : "minute";
       return {
-        text: `${r.toBotName ?? "That bot"} is still working after ${amount} ${unit}${amount === 1 ? "" : "s"} \u2014 the ask was converted to a delegation so the reply is not lost. Task id: ${taskId}. ${EXTERNAL_RUNTIME ? EXTERNAL_STATUS_GUIDANCE : "Finish your turn now; the result will be delivered to this conversation automatically. Use check_delegation in a later turn only if the user asks for status."}`
+        text: `${r.toBotName ?? "That bot"} is still working after ${amount} ${unit}${amount === 1 ? "" : "s"} \u2014 the ask was converted to a delegation so the reply is not lost. Task id: ${taskId}. ${EXTERNAL_RUNTIME ? EXTERNAL_STATUS_GUIDANCE : "Finish your turn now; the result will be delivered to this conversation automatically. Use check_delegation in a later turn only if the user asks for status."}${note ? `
+
+${note}` : ""}`
       };
     }
     if (r.busy) {
+      if (r.aside === "injected") {
+        return {
+          text: `${r.toBotName ?? "That bot"} is mid-turn; your message was handed to them as an aside \u2014 peer context folded into their current work, not a request that interrupts or replies. Finish your turn and treat their eventual output as possibly informed by it.`
+        };
+      }
+      if (r.aside === "queued") {
+        return {
+          text: `${r.toBotName ?? "That bot"} is mid-turn; your aside is queued and will reach them as context when the turn settles. No reply is expected \u2014 finish your turn.`
+        };
+      }
       const taskId = String(r.taskId ?? "").trim();
       if (taskId) {
         if (!EXTERNAL_RUNTIME) delegationTaskIdsThisTurn.add(taskId);
         return {
-          text: `${r.toBotName ?? "That bot"} is busy right now, so your message was queued as a delegation instead \u2014 ${EXTERNAL_RUNTIME ? "it waits for the peer and any required approval" : "it runs after your current turn ends"}. Task id: ${taskId}. ${EXTERNAL_RUNTIME ? EXTERNAL_STATUS_GUIDANCE : "Finish your turn now; the result will be delivered to this conversation automatically. Use check_delegation in a later turn only if the user asks for status."}`
+          text: `${r.toBotName ?? "That bot"} is busy right now, so your message was queued as a delegation instead \u2014 ${EXTERNAL_RUNTIME ? "it waits for the peer and any required approval" : "it runs after your current turn ends"}. Task id: ${taskId}. ${EXTERNAL_RUNTIME ? EXTERNAL_STATUS_GUIDANCE : "Finish your turn now; the result will be delivered to this conversation automatically. Use check_delegation in a later turn only if the user asks for status."}${note ? `
+
+${note}` : ""}`
         };
       }
-      return { text: `That bot is busy right now \u2014 try again after it finishes.` };
+      return { text: `That bot is busy right now \u2014 try again after it finishes.${note ? `
+
+${note}` : ""}` };
     }
-    if (r.error) return { text: `Couldn't reach that bot: ${r.error}`, isError: true };
+    if (r.error) return { text: `Couldn't reach that bot: ${r.error}${note ? `
+
+${note}` : ""}`, isError: true };
     return { text: `${r.botName ?? "Bot"} replied:
-${r.text ?? "(no reply)"}` };
+${r.text ?? "(no reply)"}${note ? `
+
+${note}` : ""}` };
   }
   if (name === "delegate_bot") {
     const toBotId = String(args.bot_id ?? "").trim();
@@ -16521,12 +16739,17 @@ ${r.text ?? "(no reply)"}` };
     };
     if (reason) body.reason = reason;
     const r = await api(`/api/internal/delegate-bot`, { method: "POST", body: JSON.stringify(body) });
-    if (r.error) return { text: `Couldn't queue the delegation: ${r.error}`, isError: true };
+    const delivery = deliveryNote(r);
+    if (r.error) return { text: `Couldn't queue the delegation: ${r.error}${delivery ? `
+
+${delivery}` : ""}`, isError: true };
     const note = typeof r.message === "string" ? r.message : "Delegation queued.";
     const taskId = typeof r.taskId === "string" ? r.taskId.trim() : "";
     if (taskId && !EXTERNAL_RUNTIME) delegationTaskIdsThisTurn.add(taskId);
     const suffix = taskId ? ` Task id: ${taskId}. ${EXTERNAL_RUNTIME ? EXTERNAL_STATUS_GUIDANCE : "Acknowledge the assignment and finish your turn; the result will be delivered to this conversation automatically. Do not check or wait for it in this turn."}` : "";
-    return { text: `${note}${suffix}` };
+    return { text: `${note}${suffix}${delivery ? `
+
+${delivery}` : ""}` };
   }
   if (name === "check_delegation" || name === "wait_delegation") {
     const taskId = String(args.task_id ?? "").trim();
@@ -16680,7 +16903,8 @@ ${lines.join("\n")}` };
         name: botName,
         role,
         instructions,
-        ...args.modelSelection !== void 0 ? { modelSelection: args.modelSelection } : {}
+        ...args.modelSelection !== void 0 ? { modelSelection: args.modelSelection } : {},
+        ...typeof args.cwd === "string" ? { cwd: args.cwd.trim() } : {}
       })
     });
     turn.createdThisTurn += 1;
@@ -16846,14 +17070,19 @@ ${JSON.stringify(routines, null, 2)}`
     return confirmationResult(r, `${action.replace("_", " ")} on routine ${routineId}`);
   }
   if (name === "propose_profile") {
+    if (args.notifications !== void 0 && typeof args.notifications !== "boolean" || args.speakReplies !== void 0 && typeof args.speakReplies !== "boolean") {
+      return { text: "propose_profile notifications and speakReplies must be true or false.", isError: true };
+    }
     const changes = {};
     if (typeof args.name === "string") changes.name = args.name.trim();
     if (typeof args.title === "string") changes.title = args.title.trim();
     if (typeof args.description === "string") changes.description = args.description.trim();
     if (typeof args.soul === "string") changes.soul = args.soul;
     if (typeof args.cwd === "string") changes.cwd = args.cwd.trim();
+    if (typeof args.notifications === "boolean") changes.notifications = args.notifications;
+    if (typeof args.speakReplies === "boolean") changes.speakReplies = args.speakReplies;
     if (!Object.keys(changes).length) {
-      return { text: "propose_profile needs at least one of name, title, description, soul, or cwd.", isError: true };
+      return { text: "propose_profile needs at least one of name, title, description, soul, cwd, notifications, or speakReplies.", isError: true };
     }
     const forBotId = String(args.for_bot_id ?? "").trim();
     const r = await api("/api/internal/profile-requests", {
@@ -16869,6 +17098,32 @@ ${JSON.stringify(routines, null, 2)}`
     });
     return confirmationResult(r, "the profile change", "profile");
   }
+  if (name === "propose_model") {
+    const raw = args.model_selection;
+    const fields = typeof raw === "object" && raw !== null && !Array.isArray(raw) ? raw : null;
+    if (!fields || typeof fields.instanceId !== "string" || !fields.instanceId.trim() || typeof fields.model !== "string" || !fields.model.trim()) {
+      return { text: "propose_model needs model_selection with instanceId and model.", isError: true };
+    }
+    if (fields.effort !== void 0 && (typeof fields.effort !== "string" || !fields.effort.trim()) || fields.variant !== void 0 && (typeof fields.variant !== "string" || !fields.variant.trim())) {
+      return { text: "propose_model effort and variant must be non-empty strings when supplied.", isError: true };
+    }
+    const selection = { instanceId: fields.instanceId.trim(), model: fields.model.trim() };
+    if (typeof fields.effort === "string" && fields.effort.trim()) selection.effort = fields.effort.trim();
+    if (typeof fields.variant === "string" && fields.variant.trim()) selection.variant = fields.variant.trim();
+    const forBotId = String(args.for_bot_id ?? "").trim();
+    const r = await api("/api/internal/model-requests", {
+      method: "POST",
+      body: JSON.stringify({
+        fromBotId: BOT_ID,
+        fromThreadId: THREAD_ID,
+        modelSelection: selection,
+        reason: args.reason,
+        // JSON.stringify drops the key entirely when no target was named
+        forBotId: forBotId || void 0
+      })
+    });
+    return confirmationResult(r, "the default model change", "model");
+  }
   if (name === "memory_update") {
     if (!["append", "replace", "remove", "supersede"].includes(String(args.action)) || args.action !== "remove" && (typeof args.text !== "string" || !args.text.trim()) || args.action !== "append" && (typeof args.old_text !== "string" || !args.old_text.trim())) {
       return { text: "Use memory_update action=append with text, replace or supersede with text and old_text, or remove with old_text.", isError: true };