openmausbot 0.1.92 → 0.1.94

package/dist-server/server/config.js

@@ -14,7 +14,6 @@ import { PROVIDER_ICON_PRESETS, providerIconError } from "../shared/provider-ico
 import { isRemoteMcpServer, parseStoredMcpServer } from "./mcp-registry.js";
 import { parseJson, schemaIssue } from "./schema.js";
 import { CLOUD_SEAT_IDLE_STOP_MS } from "./cloud-overflow.js";
-import { cloudHomeConfigured } from "./cloud-home.js";
 const optionalText = z.string().optional();
 const SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
 const LEGACY_BROWSER_PROFILE_ID = /^[A-Za-z0-9_-]{1,40}$/;
@@ -304,6 +303,10 @@ const featureConfigSchema = z.object({
      * consent card or a configured allowlist — never a silent Auto default.
      * Off until baked; see cloudOverflowEnabled for how to enable it by hand. */
     cloudOverflow: z.boolean().optional(),
+    /** Opt-in shared skills library: one store at the data dir that bots
+     * read by assignment instead of per-workspace copies. Off until
+     * explicitly enabled — see skillsLibraryEnabled. */
+    skillsLibrary: z.boolean().optional(),
 });
 /** First-run progress. Kept in the workspace config rather than a browser so
  * it survives cleared site data and is shared by every paired client. Hint
@@ -388,6 +391,7 @@ const appConfigSchema = z.object({
         phone: z.enum(["ios", "android"]).optional(),
     }).optional(),
     mistral: z.object({ key: optionalText }).optional(),
+    cerebras: z.object({ key: optionalText }).optional(),
     xai: z.object({ key: optionalText, url: optionalText }).optional(),
     /** Anthropic API key for Claude Code billed per token, handed only to
      * Claude instances; `url` only for a proxy or a test double. Never a
@@ -473,6 +477,15 @@ const appConfigSchema = z.object({
             .optional(),
         jobs: z.object({ roomRouting: z.boolean().optional() }).optional(),
     }).optional(),
+    /** Live calls: an OpenAI project key for GPT-Live, kept apart from every
+     * other OpenAI credential so a Live call never bills an image or engine key
+     * the user did not hand to it. `voice` is a GPT-Live built-in voice name. */
+    live: z.object({
+        key: optionalText,
+        voice: z.string().trim().max(40).regex(/^[a-z]*$/, "a Live voice is a lowercase built-in voice name").optional(),
+        readTypedReplies: z.boolean().optional(),
+        idleMinutes: z.number().int().min(1).max(60).optional(),
+    }).optional(),
     /** Avatar provider credentials stay separate; choosing a router never reuses a cloud key. */
     imageGen: z.object({
         provider: z.enum(["openai", "xai", "custom"]).optional(),
@@ -629,6 +642,17 @@ export function browserEngineAttachCdpUrl(cfg) {
 export function roomTurnTimeoutMinutes(cfg) {
     return cfg.rooms?.turnTimeoutMinutes ?? DEFAULT_ROOM_TURN_TIMEOUT_MINUTES;
 }
+export const LIVE_IDLE_MINUTES_DEFAULT = 5;
+/** Non-secret Live settings. The key only shows up as `configured`. */
+export function liveSettingsFor(cfg) {
+    const minutes = cfg.live?.idleMinutes;
+    return {
+        configured: Boolean(cfg.live?.key?.trim()),
+        voice: cfg.live?.voice ?? "",
+        readTypedReplies: cfg.live?.readTypedReplies ?? true,
+        idleMinutes: Number.isInteger(minutes) && minutes >= 1 && minutes <= 60 ? minutes : LIVE_IDLE_MINUTES_DEFAULT,
+    };
+}
 /** Room handoff tree budgets in milliseconds. The tree lifetime pauses
  * while a node is actively executing; the hard cap is the maximum stall
  * window, measured wall-clock from the tree's last durable progress. Read
@@ -691,14 +715,11 @@ export function showToolCallsEnabled(cfg) {
 export function routinesInConversationEnabled(cfg) {
     return cfg.features?.routinesInConversation === true;
 }
-/** Workspace-level gate for the experimental built-in browser. A bot's own
- * switch sits under it, so either can withhold the browser. Off until the
- * desktop's first-run welcome turns it on. A Cloud home (cloud-home.ts)
- * skips that welcome, ships the browser in its image and has no other screen
- * of its own, so there it is on unless the person switched it off. */
-export function builtInBrowserEnabled(cfg, env = process.env) {
-    const chosen = cfg.features?.browser;
-    return chosen === undefined ? cloudHomeConfigured(env) : chosen === true;
+/** Workspace-level gate for the built-in browser. A bot's own switch sits
+ * under it, so either can withhold the browser. On unless the person switched
+ * it off: an explicit `false` (Settings, or a bot's computer panel) is kept. */
+export function builtInBrowserEnabled(cfg, _env = process.env) {
+    return cfg.features?.browser !== false;
 }
 /** Opt-in computer sharing: the routes, the agent tools, the advertised
  * capability and the desktop connector. Off unless an explicit `true` turns
@@ -765,6 +786,14 @@ export function cloudOverflowIdleStopMs(cfg) {
 export function cloudOverflowAllowlistedThreads(cfg) {
     return new Set(cfg.cloudOverflow?.allowlistedThreads ?? []);
 }
+/** Opt-in shared skills library (skills lane S1): one store at the data dir
+ * that bots reference by assignment instead of per-workspace copies. Off
+ * unless enabled by hand in ~/.openmausbot/config.json
+ * (`{"features": {"skillsLibrary": true}}`); while off, every skills
+ * surface keeps today's byte-identical per-bot behavior. */
+export function skillsLibraryEnabled(cfg) {
+    return cfg.features?.skillsLibrary === true;
+}
 /** Config sections no provider driver reads. A write that touches only
  * these must not rebuild the fleet: rebuilding disposes every engine child
  * and reloads it, seconds of work that would also interrupt in-flight
@@ -777,6 +806,7 @@ export const FLEET_NEUTRAL_KEYS = new Set([
     // no engine reads it: the harness asks it before a turn starts
     "decider",
     "imageGen",
+    "live",
     "vps",
     "rooms",
     "threads",
@@ -884,6 +914,9 @@ export function loadConfig() {
     cfg.mistral = { ...cfg.mistral };
     if (process.env.MISTRAL_API_KEY !== undefined)
         cfg.mistral.key = process.env.MISTRAL_API_KEY;
+    cfg.cerebras = { ...cfg.cerebras };
+    if (process.env.CEREBRAS_API_KEY !== undefined)
+        cfg.cerebras.key = process.env.CEREBRAS_API_KEY;
     cfg.xai = { ...cfg.xai };
     if (process.env.XAI_API_KEY !== undefined)
         cfg.xai.key = process.env.XAI_API_KEY;
@@ -933,6 +966,9 @@ export function loadConfig() {
     cfg.decider = { ...cfg.decider };
     if (process.env.OMB_JEV_API_KEY !== undefined)
         cfg.decider.key = process.env.OMB_JEV_API_KEY;
+    cfg.live = { ...cfg.live };
+    if (process.env.OMB_OPENAI_LIVE_KEY !== undefined)
+        cfg.live.key = process.env.OMB_OPENAI_LIVE_KEY;
     cfg.imageGen = { ...cfg.imageGen };
     if (process.env.OMB_OPENAI_IMAGE_KEY !== undefined)
         cfg.imageGen.key = process.env.OMB_OPENAI_IMAGE_KEY;
@@ -961,6 +997,7 @@ export function syncCredentialEnv(patch) {
     const secrets = [
         [patch.xai?.key, "XAI_API_KEY"],
         [patch.mistral?.key, "MISTRAL_API_KEY"],
+        [patch.cerebras?.key, "CEREBRAS_API_KEY"],
         [patch.anthropic?.key, "OMB_ANTHROPIC_API_KEY"],
         [patch.openaiCompat?.key, "OPENAI_COMPAT_API_KEY"],
         [patch.openai?.key, "OMB_OPENAI_API_KEY"],
@@ -973,6 +1010,7 @@ export function syncCredentialEnv(patch) {
         [patch.decider?.key, "OMB_JEV_API_KEY"],
         [patch.imageGen?.key, "OMB_OPENAI_IMAGE_KEY"],
         [patch.imageGen?.customApiKey, "OMB_CUSTOM_IMAGE_KEY"],
+        [patch.live?.key, "OMB_OPENAI_LIVE_KEY"],
     ];
     for (const [value, name] of secrets) {
         if (value === undefined)
@@ -1007,6 +1045,7 @@ export function syncCredentialEnv(patch) {
 export const WORKSPACE_CREDENTIAL_ENV = [
     "XAI_API_KEY",
     "MISTRAL_API_KEY",
+    "CEREBRAS_API_KEY",
     "OMB_ANTHROPIC_API_KEY",
     "OMB_ANTHROPIC_API_URL",
     "OMB_HOSTED_MODEL_TOKEN",
@@ -1022,6 +1061,7 @@ export const WORKSPACE_CREDENTIAL_ENV = [
     "OMB_JEV_API_KEY",
     "OMB_OPENAI_IMAGE_KEY",
     "OMB_CUSTOM_IMAGE_KEY",
+    "OMB_OPENAI_LIVE_KEY",
     "COMPOSIO_API_KEY",
     "OMB_COMPOSIO_BROKER_TOKEN",
     // Cloud Pro's included Boat, voice and decision relay tokens
@@ -1079,6 +1119,7 @@ export const PROVIDER_CREDENTIAL_ENV = [
     "OPENCODE_API_KEY",
     "XAI_API_KEY",
     "MISTRAL_API_KEY",
+    "CEREBRAS_API_KEY",
     "CURSOR_API_KEY",
     "CURSOR_AUTH_TOKEN",
 ];
@@ -1111,7 +1152,7 @@ export function saveConfig(patch, options = {}) {
     const storedProfiles = storedBrowserProfilesSchema.safeParse(disk.browserProfiles);
     if (storedProfiles.success)
         disk.browserProfiles = storedProfiles.data;
-    for (const key of ["xai", "anthropic", "mistral", "openai", "openrouter", "openaiCompat", "composio", "box", "opencodeGo", "tts", "decider", "imageGen", "profile", "rooms", "threads", "context", "memory", "localVm", "features", "cloudOverflow", "budgets", "billing", "decisions", "onboarding", "browserEngine", "newBots"]) {
+    for (const key of ["xai", "anthropic", "mistral", "cerebras", "openai", "openrouter", "openaiCompat", "composio", "box", "opencodeGo", "tts", "decider", "imageGen", "live", "profile", "rooms", "threads", "context", "memory", "localVm", "features", "cloudOverflow", "budgets", "billing", "decisions", "onboarding", "browserEngine", "newBots"]) {
         const section = checkedPatch[key];
         if (!section)
             continue;
@@ -1340,6 +1381,8 @@ export function instanceOwnsRouting(cfg, entry, routingDefaults) {
                 || ownUrl(routingDefaults?.url || cfg.openaiCompat?.url || process.env.OPENAI_COMPAT_URL || "https://openrouter.ai/api/v1");
         case "mistral":
             return own(entry.environment?.MISTRAL_API_KEY) || ownUrl("https://api.mistral.ai/v1");
+        case "cerebras":
+            return own(entry.environment?.CEREBRAS_API_KEY) || ownUrl("https://api.cerebras.ai/v1");
         case "grok":
             return own(entry.environment?.XAI_API_KEY) || (own(config.apiKeyEnv) && config.apiKeyEnv !== "XAI_API_KEY")
                 || ownUrl("https://api.x.ai/v1", cfg.xai?.url);
@@ -1357,6 +1400,8 @@ function injectedEnvironment(cfg, instanceId, driver) {
     const environment = new Map();
     if (driver === "mistral" && cfg.mistral?.key)
         environment.set("MISTRAL_API_KEY", cfg.mistral.key);
+    if (driver === "cerebras" && cfg.cerebras?.key)
+        environment.set("CEREBRAS_API_KEY", cfg.cerebras.key);
     if (driver === "grok" && cfg.xai?.key)
         environment.set("XAI_API_KEY", cfg.xai.key);
     // The workspace Anthropic key reaches Claude Code as the variable it
@@ -1453,6 +1498,7 @@ export function instanceConfigs(cfg) {
         computer: { driver: "boxAgent" },
         openaiCompat: { driver: "openai-compat" },
         mistral: { driver: "mistral" },
+        cerebras: { driver: "cerebras" },
         ...API_KEY_FLEET,
         qwen: { driver: "qwenAgent" },
         hermes: { driver: "hermesAgent" },
@@ -1471,6 +1517,7 @@ export function instanceConfigs(cfg) {
         cursor: { driver: "cursorAgent" },
         openaiCompat: { driver: "openai-compat" },
         mistral: { driver: "mistral" },
+        cerebras: { driver: "cerebras" },
         ...API_KEY_FLEET,
         ...CUSTOM_ONLY,
     };

package/dist-server/server/container-computer.js

@@ -82,7 +82,7 @@ export function poolLocalVmTarget(seat) {
         label: `pool-${seat}`,
     };
 }
-/** Only provisioning creates this durable directory; idle removal keeps it. */
+/** Only provisioning creates this durable directory; idle shutdown keeps it. */
 export function localVmWorkspaceExists(target) {
     try {
         return lstatSync(target.workspaceDir, { throwIfNoEntry: false })?.isDirectory() === true;
@@ -269,6 +269,7 @@ function emptyStatus(platform, target) {
         desktopReady: false,
         desktop_error: null,
         create_supported: true,
+        resumable: false,
         ready: false,
         problem: "Install a supported container runtime first",
         image_ref: IMAGE,
@@ -283,21 +284,8 @@ function emptyStatus(platform, target) {
         viewer_url: target.viewerPort ? `http://127.0.0.1:${target.viewerPort}/vnc.html` : "",
     };
 }
-/** Whether a turn may recreate this Local VM itself instead of failing.
- *
- * True for exactly one state: the container is gone, and a plain `run` is all
- * that is needed to bring it back. That is what `LocalVmIdleTimer` leaves
- * behind — it removes an unused Local VM rather than pausing it — so a turn
- * arriving after an idle period should not have to send the person to App
- * Settings for a container the app itself deleted.
- *
- * Every other problem in `statusProblem` stays the person's call and returns
- * false here: no runtime, daemon down, image never prepared, `create_supported`
- * false, and any existing container — stale image, unmanaged, unsafe network,
- * security or persistence. A stopped container is excluded deliberately, since
- * `statusProblem` says this desktop image cannot safely resume and asks for a
- * recreate rather than a start.
- */
+/** Recreate a missing desktop when its image and runtime are already prepared.
+ * This also recovers desktops deleted by older versions' idle cleanup. */
 export function localVmRecreatableOnDemand(status) {
     return Boolean(status.runtime)
         && status.daemonUp
@@ -305,12 +293,28 @@ export function localVmRecreatableOnDemand(status) {
         && status.container === "missing"
         && status.create_supported;
 }
+/** Start only an existing, compatible desktop with the managed safety boundary.
+ * Fails closed on fields left "unknown" by a partial inspect, which
+ * `statusProblem` alone would let through. */
+export function localVmResumable(status) {
+    return Boolean(status.runtime) && status.daemonUp && status.image && status.container === "stopped"
+        && existingContainerProblem(status) === null
+        && status.network === "loopback" && status.security === "hardened" && status.persistence === "durable";
+}
+/** What a turn may do on its own to bring this Local VM up, if anything. */
+export function localVmWakeAction(status) {
+    if (localVmRecreatableOnDemand(status))
+        return "run";
+    if (localVmResumable(status))
+        return "start";
+    return null;
+}
 /** Whether Auto may attach this Local VM without a person choosing it: the
- * desktop is ready, or its image is prepared and the container can simply be
- * recreated after idling away. Anything else — no runtime, daemon down, image
+ * desktop is ready, a compatible stopped desktop can be started, or its image
+ * is prepared and a missing container can be recreated. Anything else — no runtime, daemon down, image
  * never prepared, an unmanaged or unsafe container — stays the person's call. */
 export function autoLocalVmAttachable(status) {
-    return status.ready === true || localVmRecreatableOnDemand(status);
+    return status.ready === true || localVmWakeAction(status) !== null;
 }
 function statusProblem(status) {
     if (!status.runtime)
@@ -324,6 +328,19 @@ function statusProblem(status) {
     }
     if (status.container === "missing")
         return "Create the Local VM";
+    const existing = existingContainerProblem(status);
+    if (existing)
+        return existing;
+    if (status.container === "stopped")
+        return "The Local VM is stopped; start it to continue";
+    if (status.desktop_error)
+        return `The Local VM desktop failed to start: ${status.desktop_error}`;
+    if (!status.desktopReady)
+        return "The Local VM started, but Cua Driver is not ready yet";
+    return null;
+}
+/** Problems with an existing container that only a recreate fixes. */
+function existingContainerProblem(status) {
     if (!status.imageMatches)
         return "The existing Local VM uses an older desktop or Cua Driver; recreate it";
     if (!status.managed)
@@ -334,12 +351,6 @@ function statusProblem(status) {
         return "The existing Local VM is missing safety limits; recreate it";
     if (status.persistence === "unsafe")
         return "The existing Local VM is missing its durable folder; recreate it";
-    if (status.container === "stopped")
-        return "This desktop image cannot safely resume; recreate the Local VM";
-    if (status.desktop_error)
-        return `The Local VM desktop failed to start: ${status.desktop_error}`;
-    if (!status.desktopReady)
-        return "The Local VM started, but Cua Driver is not ready yet";
     return null;
 }
 /** Shared with the BYO-VPS backend (vps-computer.ts): both containers are
@@ -457,6 +468,7 @@ export async function containerComputerStatus(runner = sh, platform = process.pl
             const inspected = JSON.parse(stdout);
             const detail = inspected[0];
             status.container = detail?.State?.Running ? "running" : "stopped";
+            status.stopped_at = status.container === "stopped" ? detail?.State?.FinishedAt ?? null : null;
             status.network = dockerPortsAreLocal(detail?.HostConfig?.PortBindings) ? "loopback" : "unsafe";
             status.viewer_port = dockerViewerPort(detail?.NetworkSettings?.Ports, target.viewerPort);
             status.imageMatches =
@@ -530,6 +542,7 @@ export async function containerComputerStatus(runner = sh, platform = process.pl
     }
     status.problem = statusProblem(status);
     status.ready = status.problem === null;
+    status.resumable = localVmResumable(status);
     return status;
 }
 function loopback(address) {
@@ -597,8 +610,8 @@ function appleWorkspaceMountIsSafe(mounts, platform, expectedWorkspace) {
  * runtime-specific capability exception is Podman's Firefox sandbox chroot.
  * Callers also differ on restart policy — the VPS
  * container must survive a reboot nobody is watching ("unless-stopped"),
- * while the Local VM must NOT auto-resume: its desktop leaves a stale X lock
- * on stop, so a restarted container is a broken one. */
+ * while Local VM starts remain controlled by OMB's idle policy and turn
+ * lifecycle rather than a daemon restart policy. */
 export function dockerSecurityIsHardened(config, options = {}) {
     if (!config)
         return false;
@@ -727,10 +740,8 @@ export async function containerComputerAction(action, runner = sh, platform = pr
     if (action === "run" && !before.create_supported) {
         throw Object.assign(new Error(before.problem ?? "This runtime cannot create a per-bot Local VM"), { status: 409 });
     }
-    if (action === "start") {
-        throw Object.assign(new Error("This desktop image cannot safely resume; remove and recreate the Local VM"), {
-            status: 409,
-        });
+    if (action === "start" && !localVmResumable(before)) {
+        throw Object.assign(new Error(before.problem ?? "The Local VM is not stopped"), { status: 409 });
     }
     if (action === "stop" && before.container !== "running") {
         throw Object.assign(new Error("The Local VM is not running"), { status: 409 });
@@ -943,7 +954,7 @@ export function setupCommands(runtime, platform = process.platform, target = SHA
         run: runtime === "container" && target.key !== SHARED_LOCAL_VM_TARGET.key
             ? null
             : command(containerRunArgs(runtime, "CHANGE_ME", target)),
-        start: null,
+        start: command(["start", target.containerName]),
         stop: command(["stop", target.containerName]),
         remove: command(["rm", runtime === "container" ? "--force" : "-f", target.containerName]),
         view: target.viewerPort ? `http://127.0.0.1:${target.viewerPort}/vnc.html` : "",

package/dist-server/server/decision-log.js

@@ -65,9 +65,10 @@ export function decisionRetentionDays(configured, env = process.env) {
 }
 const actorScope = new AsyncLocalStorage();
 /** Run `work` as a person's card answer: every `source: "user"` row it
- * writes names `actor`, without each resolver having to thread it through. */
-export function withDecisionActor(actor, work) {
-    return actorScope.run(actor, work);
+ * writes names `actor` (and `via`, for an answer spoken on a Live call),
+ * without each resolver having to thread it through. */
+export function withDecisionActor(actor, work, via) {
+    return actorScope.run(via ? { actor, via } : { actor }, work);
 }
 function monthKey(at) {
     return `${at.getUTCFullYear()}-${String(at.getUTCMonth() + 1).padStart(2, "0")}`;
@@ -88,10 +89,12 @@ async function writeDecision(dataDir, record) {
  * the fold that calls this is delivering approvals and cards, and a full
  * disk must not turn into denied tools. */
 export function appendDecision(dataDir, row) {
-    const actor = row.actor ?? (row.source === "user" ? actorScope.getStore() : undefined);
+    const scope = row.source === "user" ? actorScope.getStore() : undefined;
+    const actor = row.actor ?? scope?.actor;
+    const via = row.via ?? scope?.via;
     // Redact now, not when the queue drains: the row is what was true at the
     // moment of the decision.
-    const record = redactSecrets({ at: new Date().toISOString(), ...row, ...(actor ? { actor } : {}) });
+    const record = redactSecrets({ at: new Date().toISOString(), ...row, ...(actor ? { actor } : {}), ...(via ? { via } : {}) });
     const previous = writeQueues.get(dataDir) ?? Promise.resolve();
     // Serialize appends (and the occasional prune) per directory, so two
     // simultaneous approvals keep their decision order.
@@ -258,7 +261,7 @@ export function decisionsCsv(rows) {
             row.summary ?? "",
             row.rule ?? "",
             row.unattended ? "yes" : "",
-            actorLabel(row.actor),
+            row.via === "call" ? `${actorLabel(row.actor)} (by voice)` : actorLabel(row.actor),
             row.threadId,
             row.requestId ?? "",
         ].map(csvCell).join(","));

package/dist-server/server/delegations.js

@@ -192,6 +192,8 @@ export function _loadPending() {
                 if (typeof item.targetThreadId === "string" && item.targetThreadId) {
                     loaded.targetThreadId = item.targetThreadId;
                 }
+                if (item.oneWay === true)
+                    loaded.oneWay = true;
                 return [loaded];
             });
             if (items.length)
@@ -268,7 +270,7 @@ const MAX_QUEUED_PER_THREAD = 6;
 export function queueDelegation(bus, from, item, maxDepth, sourceThreadId = from.threadId) {
     if (item.toBotId === from.id)
         return { result: "self" };
-    if (item.depth >= maxDepth)
+    if (!item.oneWay && item.depth >= maxDepth)
         return { result: "too_deep" };
     const target = bus.store.bot(item.toBotId);
     if (!target)
@@ -347,6 +349,11 @@ onSettled) {
             const from = bus.store.botByThread(threadId) ??
                 bus.store.bot(item.sourceBotId);
             if (!from) {
+                appendDeliveryMessage(bus, threadId, item, {
+                    role: "bot",
+                    kind: "activity",
+                    tool: { name: "Send failed — the sending bot no longer exists", ok: false },
+                });
                 recordDelegationReceipt({
                     id: item.id,
                     sourceThreadId: threadId,
@@ -373,7 +380,7 @@ onSettled) {
                     result: why.slice(0, 200),
                 });
                 try {
-                    bus.store.appendMessage(threadId, {
+                    appendDeliveryMessage(bus, threadId, item, {
                         role: "bot",
                         kind: "activity",
                         tool: { name: `error: delegation failed — ${why.slice(0, 120)}`, ok: false },
@@ -393,7 +400,7 @@ onSettled) {
                 if (outcome === "settled" && stillQueued) {
                     const receipt = findDelegationReceipt(item.id);
                     try {
-                        if (receipt)
+                        if (receipt && !item.oneWay)
                             onSettled?.(receipt);
                     }
                     catch (error) {
@@ -428,6 +435,15 @@ function acknowledgeDelegation(threadId, itemId) {
         pendingDelegations.delete(threadId);
     savePending();
 }
+function appendDeliveryMessage(bus, sourceThreadId, item, message) {
+    const threadId = item.oneWay && item.targetThreadId && bus.store.taskByThread(item.toBotId, item.targetThreadId)
+        ? item.targetThreadId : sourceThreadId;
+    // A failed independent send needs a visible receipt, not a source wake.
+    // Never recreate a deleted conversation just to post that failure.
+    if (item.oneWay && threadId === sourceThreadId && !sourceThreadBelongsToBot(bus.store, item.sourceBotId, sourceThreadId))
+        return;
+    bus.store.appendMessage(threadId, message);
+}
 const isExpired = (item, now) => now - item.queuedAt >= DELEGATION_TTL_MS;
 /** Past the busy-hold cap — the tighter bound that fires while its target is
  * still busy, long before the 24-hour window. */
@@ -457,9 +473,9 @@ function expireDelegation(bus, sourceThreadId, item, ownerId) {
         status: "expired",
         result: busyHold ? `@${name} was still busy after ${busyHoldCapText()}` : `@${name} was not free to take this for 24 hours`,
     });
-    if (!sourceThreadBelongsToBot(bus.store, ownerId, sourceThreadId))
+    if (!item.oneWay && !sourceThreadBelongsToBot(bus.store, ownerId, sourceThreadId))
         return;
-    bus.store.appendMessage(sourceThreadId, {
+    appendDeliveryMessage(bus, sourceThreadId, item, {
         role: "bot",
         kind: "activity",
         tool: {
@@ -511,15 +527,16 @@ export function expireStaleDelegations(bus, now, onSettled) {
             expireDelegation(bus, threadId, item, ownerId ?? item.sourceBotId);
             const receipt = findDelegationReceipt(item.id);
             if (receipt)
-                expired.push(receipt);
+                expired.push({ receipt, oneWay: item.oneWay === true });
         }
     }
     if (!expired.length)
         return 0;
     savePending();
-    for (const receipt of expired) {
+    for (const { receipt, oneWay } of expired) {
         try {
-            onSettled?.(receipt);
+            if (!oneWay)
+                onSettled?.(receipt);
         }
         catch (error) {
             console.error("delegation expired but its source could not be resumed", error);
@@ -533,9 +550,14 @@ export function discardDelegations(bus, threadId) {
     const list = pendingDelegations.get(threadId);
     if (!list?.length)
         return;
-    pendingDelegations.delete(threadId);
+    const kept = list.filter(item => item.oneWay);
+    const dropped = list.filter(item => !item.oneWay);
+    if (kept.length)
+        pendingDelegations.set(threadId, kept);
+    else
+        pendingDelegations.delete(threadId);
     savePending();
-    for (const item of list) {
+    for (const item of dropped) {
         recordDelegationReceipt({
             id: item.id,
             sourceThreadId: threadId,
@@ -545,14 +567,16 @@ export function discardDelegations(bus, threadId) {
             result: "the delegating turn did not finish",
         });
     }
+    if (!dropped.length)
+        return;
     const from = bus.store.botByThread(threadId) ??
-        bus.store.bot(list.find((item) => bus.store.bot(item.sourceBotId))?.sourceBotId ?? list[0].sourceBotId);
+        bus.store.bot(dropped.find((item) => bus.store.bot(item.sourceBotId))?.sourceBotId ?? dropped[0].sourceBotId);
     if (!from)
         return;
     bus.store.appendMessage(threadId, {
         role: "bot",
         kind: "activity",
-        tool: { name: `${list.length} queued delegation${list.length > 1 ? "s" : ""} dropped — the turn did not finish`, ok: false },
+        tool: { name: `${dropped.length} queued delegation${dropped.length > 1 ? "s" : ""} dropped — the turn did not finish`, ok: false },
     });
 }
 async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarget) {
@@ -560,7 +584,7 @@ async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarge
     let target = bus.store.bot(item.toBotId);
     // Retained approval authorizes the message, not a deleted conversation or
     // revoked room membership. Check every retry before writing to its source.
-    if (!sourceThreadBelongsToBot(bus.store, sender.id, sourceThreadId)) {
+    if (!item.oneWay && !sourceThreadBelongsToBot(bus.store, sender.id, sourceThreadId)) {
         recordDelegationReceipt({
             id: item.id,
             sourceThreadId,
@@ -580,7 +604,7 @@ async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarge
             status: "error",
             result: "no such bot",
         });
-        bus.store.appendMessage(sourceThreadId, {
+        appendDeliveryMessage(bus, sourceThreadId, item, {
             role: "bot",
             kind: "activity",
             tool: { name: `error: delegation to ${item.toBotId} failed — no such bot`, ok: false },
@@ -621,7 +645,7 @@ async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarge
         // a denial, which otherwise recreates a deleted source transcript.
         const current = bus.store.bot(item.toBotId);
         const currentSender = bus.store.bot(from.id);
-        if (!current || !currentSender || !sourceThreadBelongsToBot(bus.store, currentSender.id, sourceThreadId)) {
+        if (!current || !currentSender || (!item.oneWay && !sourceThreadBelongsToBot(bus.store, currentSender.id, sourceThreadId))) {
             recordDelegationReceipt({
                 id: item.id,
                 sourceThreadId,
@@ -644,7 +668,7 @@ async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarge
                 approvalOutcome: verdict,
                 result: verdict === "deny" ? "the user denied this handoff" : failure.error,
             });
-            bus.store.appendMessage(sourceThreadId, {
+            appendDeliveryMessage(bus, sourceThreadId, item, {
                 role: "bot",
                 kind: "activity",
                 tool: { name: verdict === "deny" ? `Delegation to @${target.name} denied by user`
@@ -682,8 +706,9 @@ async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarge
     // members; otherwise the exchange falls back to the pair DM.
     const originatingGroup = (item.originatingGroupId ? bus.store.group(item.originatingGroupId) : undefined) ??
         (sourceThreadId ? bus.store.groupByThread(sourceThreadId) : undefined);
-    const channel = getOrCreateChannel(bus.store, sender, target, originatingGroup);
-    mirrorExchange(bus, sender, target, item.message, channel, sourceThreadId);
+    const channel = item.oneWay ? undefined : getOrCreateChannel(bus.store, sender, target, originatingGroup);
+    if (channel)
+        mirrorExchange(bus, sender, target, item.message, channel, sourceThreadId);
     const reasonLine = item.reason ? `\n\n[Reason: ${item.reason}]` : "";
     // A fresh thread's first line gets the shared peer-provenance note from
     // the harness (which knows whether the opener was unattended); the
@@ -691,7 +716,7 @@ async function processOne(bus, approvalBus, from, sourceThreadId, item, runTarge
     const prefixed = item.targetThreadId
         ? item.message
         : `[Delegated by @${sender.name}, another bot in this OpenMausBot workspace. Do the work and reply directly.]\n\n${item.message}${reasonLine}`;
-    await runTarget(item.toBotId, prefixed, item.depth + 1, sourceThreadId, channel, item.id, sender.id, item.targetThreadId);
+    await runTarget(item.toBotId, prefixed, item.oneWay ? 0 : item.depth + 1, sourceThreadId, channel, item.id, sender.id, item.targetThreadId, item.oneWay === true);
     return "dispatched";
 }
 /** "Is the target free to take this handoff right now?" Both shapes ask for
@@ -723,7 +748,7 @@ function holdWhileTargetBusy(bus, target, sourceThreadId, item, canTakeTurn = ta
     item.busySince = Date.now();
     if (!item.waitAnnounced) {
         item.waitAnnounced = true;
-        bus.store.appendMessage(sourceThreadId, {
+        appendDeliveryMessage(bus, sourceThreadId, item, {
             role: "bot",
             kind: "activity",
             tool: { name: waitingChipText(bus.store, target, item) },
@@ -757,7 +782,7 @@ function dropIfThreadGone(bus, target, sourceThreadId, item) {
         status: "dropped",
         result: `the thread opened on @${target.name} was deleted before it could start`,
     });
-    bus.store.appendMessage(sourceThreadId, {
+    appendDeliveryMessage(bus, sourceThreadId, item, {
         role: "bot",
         kind: "activity",
         tool: { name: `Thread on @${target.name} canceled — it was deleted before it could start`, ok: false },
@@ -795,7 +820,7 @@ function dropIfUnreachable(bus, sender, target, sourceThreadId, item) {
         status: "dropped",
         result,
     });
-    bus.store.appendMessage(sourceThreadId, {
+    appendDeliveryMessage(bus, sourceThreadId, item, {
         role: "bot",
         kind: "activity",
         tool: { name: `Delegation to @${target.name} canceled — ${reason}`, ok: false },

package/dist-server/server/digest.js

@@ -1,3 +1,4 @@
+import { toolIdentity } from "../shared/tool-name.js";
 /** Evidence is observed, not inferred from a provider's brand. In particular,
  * OpenAI-compatible and Grok turns now expose structured tool activity too. */
 export function coverageForDriver(_driverKind, fullResults = false, observedTools = false) {
@@ -20,13 +21,19 @@ export function buildTurnDigest(input) {
     for (const m of input.activities) {
         if (m.kind !== "activity" || !m.tool?.itemId || m.turnId !== input.turnId)
             continue;
-        const entry = byName.get(m.tool.name) ?? { name: fitBytes(m.tool.name, 160), count: 0, failed: 0 };
+        // by identity, not by the chip's title: a command-titled chip would
+        // otherwise be its own bucket and carry the unredacted command line into
+        // a row that is FTS-indexed and replayed into rebuilt context
+        const identity = toolIdentity(m.tool.name);
+        const entry = byName.get(identity) ?? { name: fitBytes(identity, 160), count: 0, failed: 0 };
         entry.count += 1;
         if (m.tool.ok === false)
             entry.failed += 1;
+        // the driver's summary is the bounded, redacted one-line command; the
+        // title is neither, so a shell bucket says what it ran only through this
         if (entry.sample === undefined && m.tool.summary)
             entry.sample = fitBytes(m.tool.summary.replace(/\s+/g, " "), 300);
-        byName.set(m.tool.name, entry);
+        byName.set(identity, entry);
     }
     // busiest first; ties keep first-seen order (Map preserves insertion)
     const ranked = [...byName.values()].sort((a, b) => b.count - a.count);
@@ -78,6 +85,9 @@ function firstSentence(reply) {
 export function renderDigest(d) {
     const parts = ["[digest]"];
     if (d.tools.length) {
+        // every entry ends at "×N" or "(N failed)": the phones split the tools
+        // part on exactly that (ios DigestSummary, android TurnDigest), so a
+        // shell bucket's sample stays in the stored digest, not in this line
         const tools = d.tools.map((t) => `${t.name} ×${t.count}${t.failed ? ` (${t.failed} failed)` : ""}`).join(", ");
         parts.push(`tools: ${tools}${d.toolsDropped ? ` +${d.toolsDropped} more` : ""}${d.hookCoverage === "preview" ? " (from tool previews)" : ""}`);
     }