openmausbot 0.1.96 → 0.1.98

package/dist-server/cloud-home-start.js

@@ -6,17 +6,28 @@ var __export = (target, all) => {
 
 // server/cloud-home-start.ts
 import { spawn } from "node:child_process";
-import { chownSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { chownSync, readFileSync as readFileSync3, statSync } from "node:fs";
 import { dirname as dirname2, join as join3, posix, resolve } from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 
 // server/cloud-home.ts
-import { existsSync as existsSync2, lstatSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
+import { existsSync as existsSync2, lstatSync as lstatSync2, mkdirSync, readFileSync as readFileSync2, readdirSync } from "node:fs";
 import { join as join2 } from "node:path";
 
 // server/atomic.ts
 import { randomUUID } from "node:crypto";
-import { closeSync, fsyncSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import {
+  closeSync,
+  constants,
+  fstatSync,
+  fsyncSync,
+  lstatSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "node:fs";
 var RENAME_RETRY_DELAYS_MS = [5, 10, 20, 40, 80];
 var RETRYABLE_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EACCES", "EBUSY"]);
 function sleepSync(ms) {
@@ -40,7 +51,7 @@ function writeFileAtomic(path, data, options = {}) {
   try {
     fd = openSync(tmp, "w", options.mode);
     writeFileSync(fd, data);
-    fsyncSync(fd);
+    if (options.durable !== false) fsyncSync(fd);
     closeSync(fd);
     fd = null;
     renameWithRetry(tmp, path);
@@ -14707,11 +14718,11 @@ function prepareCloudHomeVolume(home, machineId) {
   mkdirSync(home, { recursive: true, mode: 448 });
   const marker = join2(home, CLOUD_HOME_MARKER);
   if (existsSync2(marker)) {
-    const stat = lstatSync(marker);
+    const stat = lstatSync2(marker);
     let saved;
     try {
       if (!stat.isFile() || stat.size > 4096) throw new Error();
-      saved = JSON.parse(readFileSync(marker, "utf8"));
+      saved = JSON.parse(readFileSync2(marker, "utf8"));
     } catch {
       throw new Error("This volume's Cloud marker is unreadable. No data was changed.");
     }
@@ -14838,12 +14849,12 @@ function spawnWithSecrets(command, args, env, secrets, ids) {
 function startCloudHome(env = process.env) {
   process.umask(63);
   const config2 = cloudHomeConfiguration(env);
-  if (!config2) throw new Error("This image runs an OMB Cloud home machine; set its boot contract (docs/cloud-pro.md).");
+  if (!config2) throw new Error("This image runs a My Cloud machine for OpenMausBot Cloud; set its boot contract (docs/cloud-pro.md).");
   for (const warning of config2.warnings) console.warn(`cloud home: ${warning}`);
   const home = env.HOME || "/data";
   let ids = null;
   if (process.getuid?.() === 0) {
-    ids = passwdIds(readFileSync2("/etc/passwd", "utf8"), SERVICE_USER);
+    ids = passwdIds(readFileSync3("/etc/passwd", "utf8"), SERVICE_USER);
     if (!ids) throw new Error(`The ${SERVICE_USER} user is missing from this image.`);
     const stat = statSync(home);
     if (stat.uid !== ids.uid || stat.gid !== ids.gid) chownSync(home, ids.uid, ids.gid);
@@ -14864,7 +14875,7 @@ function startCloudHome(env = process.env) {
   const edgeConfig = env.OMB_CLOUD_EDGE_CONFIG || "/app/cloud/Caddyfile";
   if (ids) {
     const problem = codeTrustProblem([process.execPath, fileURLToPath2(import.meta.url), join3(here, "index.js"), edgeBin, edgeConfig], home);
-    if (problem) throw new Error(`This image's code is not safe to run as root: ${problem}. Rebuild it from deploy/fly/Dockerfile.`);
+    if (problem) throw new Error(`This image's code is not safe to run as root: ${problem}. Rebuild it with docker build --target cloud-home.`);
   }
   const { server, edge, secrets, dropped } = cloudHomeChildEnvironments(config2, env, home);
   if (dropped.length) console.log(`cloud home: not passed to the server: ${dropped.join(", ")}`);

package/dist-server/container-mcp.js

@@ -15824,6 +15824,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -15869,6 +15871,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -16207,6 +16214,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),

package/dist-server/desktop-entry.mjs

@@ -0,0 +1,54 @@
+// The packaged desktop forks this file instead of the index.js beside it
+// (electron/server-child-launch.mjs). It turns on Node's on-disk compile
+// cache for this one process, so a relaunch reuses the compiled 5 MB bundle
+// instead of parsing and compiling all of it again, then runs the server
+// unchanged. Copied verbatim to dist-server/desktop-entry.mjs by
+// scripts/bundle-server.mjs: bundling it would inline index.js and defeat
+// the point.
+import module from "node:module";
+import { lstatSync, readdirSync, rmSync, utimesSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+
+const cacheRoot = process.env.OMB_SERVER_COMPILE_CACHE;
+// Engine CLIs, MCP servers and terminals the server spawns must not inherit
+// it. enableCompileCache does not set NODE_COMPILE_CACHE, so they inherit
+// nothing from this.
+delete process.env.OMB_SERVER_COMPILE_CACHE;
+
+let enabled = false;
+if (cacheRoot) {
+  try {
+    enabled = module.enableCompileCache(cacheRoot).status === module.constants.compileCacheStatus.ENABLED;
+  } catch {
+    // An unusable cache costs only the compile it would have saved.
+  }
+}
+
+await import("./index.js");
+
+// Node writes new entries when the process exits normally; a crash or a
+// Windows kill skips that, so write them once the server is up. Then drop
+// caches of other Node versions (one is left behind by each Electron
+// upgrade) that no launch has used for a day. Only `v<node version>-…`
+// directories inside the cache root Node reports are ever removed.
+if (enabled) {
+  setTimeout(() => {
+    try {
+      module.flushCompileCache();
+      const current = module.getCompileCacheDir();
+      if (dirname(current) !== resolve(cacheRoot)) return;
+      const now = new Date();
+      utimesSync(current, now, now);
+      for (const name of readdirSync(cacheRoot)) {
+        if (name === basename(current) || !/^v\d+\.\d+\.\d+-/.test(name)) continue;
+        const stale = join(cacheRoot, name);
+        const stat = lstatSync(stale);
+        if (stat.isDirectory() && now - stat.mtimeMs > 24 * 60 * 60 * 1000) {
+          rmSync(stale, { recursive: true, force: true });
+        }
+      }
+    } catch {
+      // Best effort: anything not written or removed now is retried next launch.
+    }
+  }, 10_000).unref();
+}

package/dist-server/drivers/agents-proxy.js

@@ -23,7 +23,7 @@ var CREDENTIAL_TARGETS = {
   },
   opencodeGoApiKey: {
     label: "OpenCode API key",
-    description: "Used for OpenCode Go and other key-backed OpenCode providers.",
+    description: "Used for OpenCode Zen and Go.",
     placeholder: "Paste your OpenCode API key",
     helpUrl: "https://opencode.ai/docs/providers/"
   },
@@ -131,6 +131,7 @@ function catalogProfileFromEnv(env) {
     voiceNotes: env.OMB_VOICE_NOTES === "1",
     cloudHome: env.OMB_CLOUD_HOME === "1",
     memoryEnabled: env.OMB_MEMORY_ENABLED !== "0",
+    chief: env.OMB_CHIEF_OF_STAFF === "1",
     botId: env.OMB_BOT_ID ?? ""
   };
 }
@@ -226,7 +227,7 @@ var ROUTINE_FIELDS_SCHEMA = {
     type: "string",
     // "box" is Boat's historical run_on destination id (agents wire contract).
     enum: ["maus", "box"],
-    description: "Default maus keeps the bot's selected model and configured computer, INCLUDING a self-hosted VPS. Omit this field for normal schedules. box runs on the bot's Boat cloud computer, same model; it requires Boat setup and is not the generic cloud/VPS option. Legacy cloud values from list_routines mean box, not VPS."
+    description: "Default maus keeps the bot's selected model and configured computer, INCLUDING a self-hosted VPS. Omit this field for normal schedules. box runs on the bot's cloud computer, same model; it needs cloud computers set up and is not the generic cloud/VPS option. Legacy cloud values from list_routines mean box, not VPS."
   },
   timeout_minutes: {
     type: "integer",
@@ -240,7 +241,7 @@ var ROUTINE_FIELDS_SCHEMA = {
   },
   continuity: {
     type: "boolean",
-    description: "Opt in to using the latest completed run's bounded report as historical context. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
+    description: "Opt in to using the latest completed run's bounded report as historical context. Use it for recurring work that builds on last time, such as QA passes, monitoring or follow-ups. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
   },
   overlap: {
     type: "string",
@@ -248,6 +249,7 @@ var ROUTINE_FIELDS_SCHEMA = {
     description: "While this routine is still working, skip scheduled occurrences (default) or queue at most one run. Queue skips further occurrences until the pending run starts; it never builds an unlimited backlog. Manual and webhook requests are separate."
   }
 };
+var CHIEF_PROFILE_TARGET = " A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section.";
 var PROPOSAL_OUTCOME = " Read the result: granted Full Access may apply the change immediately. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success from the permission mode alone; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
 var toolDefinitions = (externalRuntime) => [
   {
@@ -393,7 +395,7 @@ var toolDefinitions = (externalRuntime) => [
       surface: {
         type: "string",
         enum: ["auto", "cloud", "vm", "local", "browser"],
-        description: "auto = suitable configured computer, cloud = remote Boat/VPS, vm = isolated Local VM, local = user's own desktop, browser = built-in browser. Omit to list."
+        description: "auto = suitable configured computer, cloud = the bot's cloud computer or self-hosted VPS, vm = isolated Local VM, local = user's own desktop, browser = built-in browser. Omit to list."
       }
     } }
   },
@@ -755,7 +757,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_profile",
-    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section." + PROPOSAL_OUTCOME,
+    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead." + CHIEF_PROFILE_TARGET + PROPOSAL_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -939,6 +941,16 @@ var toolDefinitions = (externalRuntime) => [
 var SKILL_TOOL_NAMES = /* @__PURE__ */ new Set(["skills_list", "skill_manage"]);
 var SHARED_COMPUTER_TOOL_NAMES = /* @__PURE__ */ new Set(["list_shared_computers", "shared_computer"]);
 var VOICE_TOOL_NAMES = /* @__PURE__ */ new Set(["send_voice_note"]);
+var CHIEF_ONLY_TOOL_NAMES = /* @__PURE__ */ new Set([
+  "create_bot",
+  "list_team_setup",
+  "propose_team_setup",
+  "propose_bot_deletion",
+  "create_room",
+  "manage_room",
+  "retry_thread"
+]);
+var CHIEF_TARGET_TOOL_NAMES = /* @__PURE__ */ new Set(["propose_profile", "propose_model"]);
 var ROOM_ONLY_TOOLS = /* @__PURE__ */ new Set(["list_room_targets", "coordinate_bots", "send_to_bot"]);
 var ROOM_REPLACED_TOOLS = /* @__PURE__ */ new Set(["ask_bot", "delegate_bot", "check_delegation", "wait_delegation", "start_thread"]);
 var EXTERNAL_TOOL_NAMES = /* @__PURE__ */ new Set(["list_bots", "ask_bot", "delegate_bot", "check_delegation", "wait_delegation"]);
@@ -947,7 +959,7 @@ var LOCAL_VM_TOOL_NAMES = /* @__PURE__ */ new Set(["vm_exec"]);
 var CLOUD_HOME_SURFACE = {
   type: "string",
   enum: ["auto", "cloud", "browser"],
-  description: "auto = suitable configured computer, cloud = remote Boat/VPS, browser = built-in browser. Omit to list. This server runs in the cloud: the user's own computer and a Local VM are not places here."
+  description: "auto = suitable configured computer, cloud = the bot's cloud computer, browser = built-in browser. Omit to list. This server runs in the cloud: the user's own computer and a Local VM are not places here."
 };
 function availableTools(profile) {
   const tools = catalogTools(profile);
@@ -959,14 +971,19 @@ function catalogTools(profile) {
   const AUTHORING_TOOLS = profile.skillAuthoring ? BOT_SCOPED_TOOLS : BOT_SCOPED_TOOLS.filter((tool) => !SKILL_TOOL_NAMES.has(tool.name));
   const SHAREABLE_TOOLS = profile.sharedComputers ? AUTHORING_TOOLS : AUTHORING_TOOLS.filter((tool) => !SHARED_COMPUTER_TOOL_NAMES.has(tool.name));
   const VOICE_READY_TOOLS = profile.voiceNotes ? SHAREABLE_TOOLS : SHAREABLE_TOOLS.filter((tool) => !VOICE_TOOL_NAMES.has(tool.name));
-  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? VOICE_READY_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
+  const ROLE_TOOLS = profile.chief ? VOICE_READY_TOOLS : VOICE_READY_TOOLS.filter((tool) => !CHIEF_ONLY_TOOL_NAMES.has(tool.name)).map((tool) => {
+    if (!CHIEF_TARGET_TOOL_NAMES.has(tool.name)) return tool;
+    const properties = Object.fromEntries(Object.entries(tool.inputSchema.properties).filter(([key]) => key !== "for_bot_id"));
+    return { ...tool, description: tool.description.replace(CHIEF_PROFILE_TARGET, ""), inputSchema: { ...tool.inputSchema, properties } };
+  });
+  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? ROLE_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
     ...tool,
     description: "Open a separate job on yourself with its own history and run, without switching the person's selected conversation. Use only when the user requests independent jobs (for example one review per pull request). Give a short specific title and complete instructions; you can open at most five per turn. This is not a teammate handoff: use coordinate_bots for teammates and their automatic replies. Self-opened jobs cannot recursively open more jobs. If refused, do not retry; explain what remains.",
     inputSchema: { ...tool.inputSchema, properties: {
       ...tool.inputSchema.properties,
       bot_id: { type: "string", enum: [profile.botId], description: "Leave out, or use your own bot ID. For teammates use coordinate_bots." }
     } }
-  } : tool) : VOICE_READY_TOOLS.filter((tool) => !ROOM_ONLY_TOOLS.has(tool.name));
+  } : tool) : ROLE_TOOLS.filter((tool) => !ROOM_ONLY_TOOLS.has(tool.name));
 }
 
 // node_modules/.pnpm/croner@10.0.1/node_modules/croner/dist/croner.js
@@ -16517,7 +16534,7 @@ function routineFields(args) {
   const runOn = destination(args.run_on ?? args.runOn);
   const timeoutMinutes = args.timeout_minutes ?? args.timeoutMinutes;
   if (runOn != null && runOn !== "maus" && runOn !== "cloud") {
-    return { fields, error: 'Use run_on="maus" for the bot\u2019s current model and configured computer (including VPS), or run_on="box" only for the bot\u2019s Boat cloud computer. Legacy "cloud" also means Boat.' };
+    return { fields, error: 'Use run_on="maus" for the bot\u2019s current model and configured computer (including VPS), or run_on="box" only for the bot\u2019s cloud computer. Legacy "cloud" also means box.' };
   }
   if (timeoutMinutes != null && (typeof timeoutMinutes !== "number" || !Number.isInteger(timeoutMinutes) || timeoutMinutes < 5 || timeoutMinutes > 240)) {
     return { fields, error: "timeout_minutes must be a whole number from 5 to 240. Use clear_timeout to remove a limit." };