openmausbot 0.1.93 → 0.1.94

package/dist-server/container-mcp.js

@@ -242,7 +242,7 @@ function resolveCliSpawn(cli, args, env) {
 
 // server/config.ts
 import { homedir as homedir2 } from "node:os";
-import { join as join3 } from "node:path";
+import { join as join2 } from "node:path";
 
 // node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -15544,6 +15544,48 @@ function normalizeCronSchedule(value, after = Date.now()) {
   return schedule;
 }
 
+// shared/tool-scope.ts
+var SERVER_NAME = /^[a-z][a-z0-9_-]{0,31}$/;
+var CONTROL_CHARACTER = /[\x00-\x1f\x7f]/;
+var MAX_SELECTORS = 256;
+var MAX_SELECTOR_LENGTH = 1024;
+function validName(name) {
+  return typeof name === "string" && name.trim().length > 0 && name.length <= MAX_SELECTOR_LENGTH && !CONTROL_CHARACTER.test(name) && !name.includes("*");
+}
+function selectorIdentity(selector) {
+  if (selector.length > MAX_SELECTOR_LENGTH || CONTROL_CHARACTER.test(selector)) return;
+  if (selector.startsWith("native:")) {
+    const name = selector.slice(7);
+    if (name === "*" || validName(name)) return { kind: "native", name };
+  } else if (selector.startsWith("mcp:")) {
+    const separator = selector.indexOf(":", 4);
+    if (separator < 0) return;
+    const server = selector.slice(4, separator);
+    const name = selector.slice(separator + 1);
+    if (SERVER_NAME.test(server) && (name === "*" || validName(name))) {
+      return { kind: "mcp", server, name };
+    }
+  }
+}
+function parseToolScope(value) {
+  if (value === void 0) return { ok: true, scope: void 0 };
+  const invalid = { ok: false, error: "Tool selection must contain only valid allow and deny lists." };
+  if (!value || typeof value !== "object" || Array.isArray(value)) return invalid;
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null) return invalid;
+  const scope = {};
+  for (const key of Reflect.ownKeys(value)) {
+    if (key !== "allow" && key !== "deny") return invalid;
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    if (!descriptor || !("value" in descriptor)) return invalid;
+    const list = descriptor.value;
+    if (!Array.isArray(list) || list.length > MAX_SELECTORS) return invalid;
+    if (!Array.from(list).every((entry) => typeof entry === "string" && selectorIdentity(entry))) return invalid;
+    scope[key] = [...new Set(list)];
+  }
+  return { ok: true, scope };
+}
+
 // server/new-bot-defaults.ts
 var strings = (max, length) => external_exports.array(external_exports.string().max(length)).max(max);
 var clock = external_exports.string().regex(/^(?:[01]\d|2[0-3]):[0-5]\d$/);
@@ -15578,6 +15620,10 @@ var botDefaultsProfileSchema = profilePatchSchema.extend({
   browser: external_exports.boolean().optional(),
   browserProfile: external_exports.string().max(100).nullable().optional(),
   mcpServers: strings(100, 100).nullable().optional(),
+  toolScope: external_exports.custom((value) => value !== void 0 && parseToolScope(value).ok, "Invalid tool selection").transform((value) => {
+    const parsed = parseToolScope(value);
+    return parsed.ok ? parsed.scope : value;
+  }).nullable().optional(),
   parkDirectMessages: external_exports.boolean().optional()
 }).strict();
 var scheduleSchema = external_exports.discriminatedUnion("type", [
@@ -15774,76 +15820,6 @@ var remoteMutationSchema = remoteEntrySchema.extend({
 var CLOUD_SEAT_IDLE_STOP_MS = 5 * 6e4;
 var CLOUD_SEAT_SLEEP_RETRY_MAX_MS = 10 * 6e4;
 
-// server/proxy-paths.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname2, join as join2 } from "node:path";
-import { fileURLToPath } from "node:url";
-var SERVER_ROOT = dirname2(fileURLToPath(import.meta.url));
-function resolveProxy(relative) {
-  const source = join2(SERVER_ROOT, `${relative}.ts`);
-  return existsSync2(source) ? source : join2(SERVER_ROOT, `${relative}.js`);
-}
-var SPAWNED_PROXIES = {
-  browser: resolveProxy("browser-proxy"),
-  localComputer: resolveProxy("local-computer-proxy"),
-  permission: resolveProxy("permission-proxy"),
-  containerMcp: resolveProxy("container-mcp"),
-  vpsContainerMcp: resolveProxy("vps-container-mcp"),
-  agents: resolveProxy("drivers/agents-proxy"),
-  dweb: resolveProxy("drivers/dweb-proxy"),
-  connectors: resolveProxy("connector-proxy"),
-  mcpGate: resolveProxy("mcp-gate"),
-  phone: resolveProxy("drivers/phone-proxy"),
-  hook: resolveProxy("hooks/omb-hook"),
-  // Loaded by the external `pi` process via `-e`, not by this server — but
-  // resolved through the same single source of truth so the packaged layout
-  // check can assert it ships.
-  piMcpExtension: resolveProxy("drivers/pi-mcp-extension")
-};
-
-// server/enterprise.ts
-var layerSchema = external_exports.object({
-  customer: external_exports.string().min(1),
-  features: external_exports.array(external_exports.string().min(1)),
-  expiresAt: external_exports.string().nullable()
-});
-var DAY_MS = 24 * 60 * 6e4;
-
-// server/sessions.ts
-var PAIRING_CODE_TTL_MS = 5 * 6e4;
-function daysMs(value, fallbackDays) {
-  const days = Number(value);
-  const ok = Number.isInteger(days) && days >= 1 && days <= 3650;
-  return (ok ? days : fallbackDays) * 24 * 60 * 6e4;
-}
-var SESSION_TTL_MS = daysMs(process.env.OMB_SESSION_TTL_DAYS, 30);
-var SESSION_MAX_AGE_MS = daysMs(process.env.OMB_SESSION_MAX_DAYS, 180);
-var SESSION_RENEW_WHEN_LEFT_MS = SESSION_TTL_MS / 2;
-var STREAM_TICKET_TTL_MS = 5 * 6e4;
-var scopeSchema = external_exports.enum(["admin", "client"]);
-var sessionSchema = external_exports.object({
-  id: external_exports.string().min(1),
-  tokenHash: external_exports.string().length(64),
-  label: external_exports.string().max(80),
-  scopes: external_exports.array(scopeSchema).min(1),
-  createdAt: external_exports.number(),
-  lastSeenAt: external_exports.number(),
-  expiresAt: external_exports.number(),
-  /** Set when the session came from an account sign-in rather than a code. */
-  userId: external_exports.string().max(256).optional(),
-  email: external_exports.string().max(320).optional(),
-  /** Set only by the internal verified-portal issuance path, never by email or pairing input. */
-  membershipAuthority: external_exports.literal("portal").optional(),
-  /** A browser sign-in (PairingCode `browser`): accepted only as its browser's cookie, never as a bearer token. */
-  cookieOnly: external_exports.literal(true).optional(),
-  /** Whose OMB Cloud a browser sign-in signed in to (its PairingCode `owner`). */
-  owner: external_exports.string().max(254).optional()
-});
-var fileSchema = external_exports.object({ version: external_exports.literal(1), sessions: external_exports.array(sessionSchema) });
-
-// server/cloud-home.ts
-var CLOUD_PAIRING_NONCE_MS = 10 * 6e4;
-
 // server/config.ts
 var optionalText = external_exports.string().optional();
 var SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
@@ -16051,7 +16027,11 @@ var featureConfigSchema = external_exports.object({
    * may offer a per-second-billed cloud seat, but only through an explicit
    * consent card or a configured allowlist — never a silent Auto default.
    * Off until baked; see cloudOverflowEnabled for how to enable it by hand. */
-  cloudOverflow: external_exports.boolean().optional()
+  cloudOverflow: external_exports.boolean().optional(),
+  /** Opt-in shared skills library: one store at the data dir that bots
+   * read by assignment instead of per-workspace copies. Off until
+   * explicitly enabled — see skillsLibraryEnabled. */
+  skillsLibrary: external_exports.boolean().optional()
 });
 var onboardingConfigSchema = external_exports.object({
   /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
@@ -16204,6 +16184,15 @@ var appConfigSchema = external_exports.object({
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the decision model address must start with http:// or https://").optional(),
     jobs: external_exports.object({ roomRouting: external_exports.boolean().optional() }).optional()
   }).optional(),
+  /** Live calls: an OpenAI project key for GPT-Live, kept apart from every
+   * other OpenAI credential so a Live call never bills an image or engine key
+   * the user did not hand to it. `voice` is a GPT-Live built-in voice name. */
+  live: external_exports.object({
+    key: optionalText,
+    voice: external_exports.string().trim().max(40).regex(/^[a-z]*$/, "a Live voice is a lowercase built-in voice name").optional(),
+    readTypedReplies: external_exports.boolean().optional(),
+    idleMinutes: external_exports.number().int().min(1).max(60).optional()
+  }).optional(),
   /** Avatar provider credentials stay separate; choosing a router never reuses a cloud key. */
   imageGen: external_exports.object({
     provider: external_exports.enum(["openai", "xai", "custom"]).optional(),
@@ -16273,10 +16262,10 @@ var storedAppConfigSchema = appConfigSchema.extend({
 var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true }).extend({ threads: threadsPatchSchema.optional(), newBots: newBotsPatchSchema.optional() });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
 var DEFAULT_CAPTURE_QUIET_MS = 2 * 6e4;
-var DATA_DIR = process.env.OMB_DATA_DIR ?? join3(homedir2(), ".openmausbot");
-var LEGACY_DATA_DIR = join3(homedir2(), ".opengrokbot");
-var EVENTS_DIR = join3(DATA_DIR, "events");
-var NATIVE_DIR = join3(DATA_DIR, "native");
+var DATA_DIR = process.env.OMB_DATA_DIR ?? join2(homedir2(), ".openmausbot");
+var LEGACY_DATA_DIR = join2(homedir2(), ".opengrokbot");
+var EVENTS_DIR = join2(DATA_DIR, "events");
+var NATIVE_DIR = join2(DATA_DIR, "native");
 var OPENAI_API_INSTANCE = "openai";
 var OPENROUTER_API_INSTANCE = "openrouter";
 var XAI_API_INSTANCE = "xaiApi";
@@ -16306,6 +16295,34 @@ var API_KEY_FLEET = {
   }
 };
 
+// server/proxy-paths.ts
+import { existsSync as existsSync2 } from "node:fs";
+import { dirname as dirname2, join as join3 } from "node:path";
+import { fileURLToPath } from "node:url";
+var SERVER_ROOT = dirname2(fileURLToPath(import.meta.url));
+function resolveProxy(relative) {
+  const source = join3(SERVER_ROOT, `${relative}.ts`);
+  return existsSync2(source) ? source : join3(SERVER_ROOT, `${relative}.js`);
+}
+var SPAWNED_PROXIES = {
+  browser: resolveProxy("browser-proxy"),
+  localComputer: resolveProxy("local-computer-proxy"),
+  permission: resolveProxy("permission-proxy"),
+  containerMcp: resolveProxy("container-mcp"),
+  vpsContainerMcp: resolveProxy("vps-container-mcp"),
+  agents: resolveProxy("drivers/agents-proxy"),
+  dweb: resolveProxy("drivers/dweb-proxy"),
+  connectors: resolveProxy("connector-proxy"),
+  mcpGate: resolveProxy("mcp-gate"),
+  mcpRemote: resolveProxy("mcp-remote-proxy"),
+  phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
+  // Loaded by the external `pi` process via `-e`, not by this server — but
+  // resolved through the same single source of truth so the packaged layout
+  // check can assert it ships.
+  piMcpExtension: resolveProxy("drivers/pi-mcp-extension")
+};
+
 // server/container-computer.ts
 var run = promisify(execFile2);
 var CUA_DRIVER_VERSION = "0.20.0";

package/dist-server/drivers/agents-proxy.js

@@ -321,6 +321,15 @@ var toolDefinitions = (externalRuntime) => [
       label: { type: "string", description: "Optional short name (one line, at most 60 characters) for this job. Names the new direct assignment thread." }
     }, required: ["bot_ids", "message", "request_key"] }
   },
+  {
+    name: "send_to_bot",
+    description: "Send work one way to another bot in a fresh thread. This is cross-bot only: use start_thread to send independent work to yourself. The recipient owns the new thread; its results, failures and questions stay there and never resume you. Use coordinate_bots when you need the result returned here.",
+    inputSchema: { type: "object", additionalProperties: false, properties: {
+      bot_id: { type: "string", description: "One reachable teammate id from list_bots or list_room_targets." },
+      title: { type: "string", description: "A short one-line title, at most 80 characters." },
+      message: { type: "string", description: "Complete instructions; the recipient does not inherit this conversation." }
+    }, required: ["bot_id", "title", "message"] }
+  },
   {
     name: "list_bots",
     description: "List the other bots (agents) you may contact in your own team and any additional teams the owner has explicitly allowed you to coordinate, with their team, model and current status. Call this to discover exact teammate IDs before assigning work or requesting advice through your available coordination tools.",
@@ -851,7 +860,7 @@ var toolDefinitions = (externalRuntime) => [
 var SKILL_TOOL_NAMES = /* @__PURE__ */ new Set(["skills_list", "skill_manage"]);
 var SHARED_COMPUTER_TOOL_NAMES = /* @__PURE__ */ new Set(["list_shared_computers", "shared_computer"]);
 var VOICE_TOOL_NAMES = /* @__PURE__ */ new Set(["send_voice_note"]);
-var ROOM_ONLY_TOOLS = /* @__PURE__ */ new Set(["list_room_targets", "coordinate_bots"]);
+var ROOM_ONLY_TOOLS = /* @__PURE__ */ new Set(["list_room_targets", "coordinate_bots", "send_to_bot"]);
 var ROOM_REPLACED_TOOLS = /* @__PURE__ */ new Set(["ask_bot", "delegate_bot", "check_delegation", "wait_delegation", "start_thread", "send_to_thread", "wait_thread"]);
 var EXTERNAL_TOOL_NAMES = /* @__PURE__ */ new Set(["list_bots", "ask_bot", "delegate_bot", "check_delegation", "wait_delegation"]);
 var WATCHER_TOOL_NAMES = /* @__PURE__ */ new Set(["create_options_card"]);
@@ -16628,6 +16637,34 @@ async function callTool(name, args, context) {
     }) });
     return { text: JSON.stringify(r), ...r.error ? { isError: true } : {} };
   }
+  if (name === "send_to_bot") {
+    const botId = String(args.bot_id ?? "").trim();
+    const title = String(args.title ?? "").trim();
+    const message = String(args.message ?? "").trim();
+    if (!botId || !title || !message) {
+      return { text: "send_to_bot needs bot_id, title and message.", isError: true };
+    }
+    if (botId === context.botId) {
+      return { text: "send_to_bot is cross-bot only. Use start_thread to send independent work to yourself.", isError: true };
+    }
+    if (turn.threadsOpenedThisTurn >= MAX_THREADS_PER_TURN) {
+      return { text: `You have already opened ${MAX_THREADS_PER_TURN} threads this turn, which is the limit.`, isError: true };
+    }
+    const r = await api("/api/internal/threads", { method: "POST", body: JSON.stringify({
+      fromBotId: context.botId,
+      fromThreadId: context.threadId,
+      toBotId: botId,
+      title,
+      message,
+      depth: context.depth,
+      oneWay: true
+    }) });
+    if (r.error) return { text: `Couldn't send to that bot: ${String(r.error)}`, isError: true };
+    turn.threadsOpenedThisTurn += 1;
+    const destination = `@${String(r.botName ?? "that bot")} in #${String(r.title ?? title)} [thread id: ${String(r.threadId ?? "")}]`;
+    const state = r.approvalRequired === true ? `Send to ${destination} is pending approval. The person's approval card appears after this turn ends; dispatch starts once approved.` : r.state === "queued" ? `Send to ${destination} is queued ${ordinal(Number(r.position) || 1)} for a free slot and can dispatch after this turn ends.` : `Send to ${destination} is pending until this turn ends, then dispatch starts.`;
+    return { text: `${state} Its result stays in that thread; nothing there will resume you.` };
+  }
   if (name === "list_bots") {
     const r = await api(`/api/internal/agents?self=${encodeURIComponent(BOT_ID)}`);
     const bots = r.bots ?? [];