openmausbot 0.1.97 → 0.1.98

package/dist-server/cloud-home-start.js

@@ -6,17 +6,28 @@ var __export = (target, all) => {
 
 // server/cloud-home-start.ts
 import { spawn } from "node:child_process";
-import { chownSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { chownSync, readFileSync as readFileSync3, statSync } from "node:fs";
 import { dirname as dirname2, join as join3, posix, resolve } from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 
 // server/cloud-home.ts
-import { existsSync as existsSync2, lstatSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
+import { existsSync as existsSync2, lstatSync as lstatSync2, mkdirSync, readFileSync as readFileSync2, readdirSync } from "node:fs";
 import { join as join2 } from "node:path";
 
 // server/atomic.ts
 import { randomUUID } from "node:crypto";
-import { closeSync, fsyncSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import {
+  closeSync,
+  constants,
+  fstatSync,
+  fsyncSync,
+  lstatSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "node:fs";
 var RENAME_RETRY_DELAYS_MS = [5, 10, 20, 40, 80];
 var RETRYABLE_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EACCES", "EBUSY"]);
 function sleepSync(ms) {
@@ -40,7 +51,7 @@ function writeFileAtomic(path, data, options = {}) {
   try {
     fd = openSync(tmp, "w", options.mode);
     writeFileSync(fd, data);
-    fsyncSync(fd);
+    if (options.durable !== false) fsyncSync(fd);
     closeSync(fd);
     fd = null;
     renameWithRetry(tmp, path);
@@ -14707,11 +14718,11 @@ function prepareCloudHomeVolume(home, machineId) {
   mkdirSync(home, { recursive: true, mode: 448 });
   const marker = join2(home, CLOUD_HOME_MARKER);
   if (existsSync2(marker)) {
-    const stat = lstatSync(marker);
+    const stat = lstatSync2(marker);
     let saved;
     try {
       if (!stat.isFile() || stat.size > 4096) throw new Error();
-      saved = JSON.parse(readFileSync(marker, "utf8"));
+      saved = JSON.parse(readFileSync2(marker, "utf8"));
     } catch {
       throw new Error("This volume's Cloud marker is unreadable. No data was changed.");
     }
@@ -14843,7 +14854,7 @@ function startCloudHome(env = process.env) {
   const home = env.HOME || "/data";
   let ids = null;
   if (process.getuid?.() === 0) {
-    ids = passwdIds(readFileSync2("/etc/passwd", "utf8"), SERVICE_USER);
+    ids = passwdIds(readFileSync3("/etc/passwd", "utf8"), SERVICE_USER);
     if (!ids) throw new Error(`The ${SERVICE_USER} user is missing from this image.`);
     const stat = statSync(home);
     if (stat.uid !== ids.uid || stat.gid !== ids.gid) chownSync(home, ids.uid, ids.gid);
@@ -14864,7 +14875,7 @@ function startCloudHome(env = process.env) {
   const edgeConfig = env.OMB_CLOUD_EDGE_CONFIG || "/app/cloud/Caddyfile";
   if (ids) {
     const problem = codeTrustProblem([process.execPath, fileURLToPath2(import.meta.url), join3(here, "index.js"), edgeBin, edgeConfig], home);
-    if (problem) throw new Error(`This image's code is not safe to run as root: ${problem}. Rebuild it from deploy/fly/Dockerfile.`);
+    if (problem) throw new Error(`This image's code is not safe to run as root: ${problem}. Rebuild it with docker build --target cloud-home.`);
   }
   const { server, edge, secrets, dropped } = cloudHomeChildEnvironments(config2, env, home);
   if (dropped.length) console.log(`cloud home: not passed to the server: ${dropped.join(", ")}`);

package/dist-server/container-mcp.js

@@ -15824,6 +15824,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -15869,6 +15871,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -16207,6 +16214,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),

package/dist-server/desktop-entry.mjs

@@ -0,0 +1,54 @@
+// The packaged desktop forks this file instead of the index.js beside it
+// (electron/server-child-launch.mjs). It turns on Node's on-disk compile
+// cache for this one process, so a relaunch reuses the compiled 5 MB bundle
+// instead of parsing and compiling all of it again, then runs the server
+// unchanged. Copied verbatim to dist-server/desktop-entry.mjs by
+// scripts/bundle-server.mjs: bundling it would inline index.js and defeat
+// the point.
+import module from "node:module";
+import { lstatSync, readdirSync, rmSync, utimesSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+
+const cacheRoot = process.env.OMB_SERVER_COMPILE_CACHE;
+// Engine CLIs, MCP servers and terminals the server spawns must not inherit
+// it. enableCompileCache does not set NODE_COMPILE_CACHE, so they inherit
+// nothing from this.
+delete process.env.OMB_SERVER_COMPILE_CACHE;
+
+let enabled = false;
+if (cacheRoot) {
+  try {
+    enabled = module.enableCompileCache(cacheRoot).status === module.constants.compileCacheStatus.ENABLED;
+  } catch {
+    // An unusable cache costs only the compile it would have saved.
+  }
+}
+
+await import("./index.js");
+
+// Node writes new entries when the process exits normally; a crash or a
+// Windows kill skips that, so write them once the server is up. Then drop
+// caches of other Node versions (one is left behind by each Electron
+// upgrade) that no launch has used for a day. Only `v<node version>-…`
+// directories inside the cache root Node reports are ever removed.
+if (enabled) {
+  setTimeout(() => {
+    try {
+      module.flushCompileCache();
+      const current = module.getCompileCacheDir();
+      if (dirname(current) !== resolve(cacheRoot)) return;
+      const now = new Date();
+      utimesSync(current, now, now);
+      for (const name of readdirSync(cacheRoot)) {
+        if (name === basename(current) || !/^v\d+\.\d+\.\d+-/.test(name)) continue;
+        const stale = join(cacheRoot, name);
+        const stat = lstatSync(stale);
+        if (stat.isDirectory() && now - stat.mtimeMs > 24 * 60 * 60 * 1000) {
+          rmSync(stale, { recursive: true, force: true });
+        }
+      }
+    } catch {
+      // Best effort: anything not written or removed now is retried next launch.
+    }
+  }, 10_000).unref();
+}

package/dist-server/drivers/agents-proxy.js

@@ -131,6 +131,7 @@ function catalogProfileFromEnv(env) {
     voiceNotes: env.OMB_VOICE_NOTES === "1",
     cloudHome: env.OMB_CLOUD_HOME === "1",
     memoryEnabled: env.OMB_MEMORY_ENABLED !== "0",
+    chief: env.OMB_CHIEF_OF_STAFF === "1",
     botId: env.OMB_BOT_ID ?? ""
   };
 }
@@ -240,7 +241,7 @@ var ROUTINE_FIELDS_SCHEMA = {
   },
   continuity: {
     type: "boolean",
-    description: "Opt in to using the latest completed run's bounded report as historical context. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
+    description: "Opt in to using the latest completed run's bounded report as historical context. Use it for recurring work that builds on last time, such as QA passes, monitoring or follow-ups. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
   },
   overlap: {
     type: "string",
@@ -248,6 +249,7 @@ var ROUTINE_FIELDS_SCHEMA = {
     description: "While this routine is still working, skip scheduled occurrences (default) or queue at most one run. Queue skips further occurrences until the pending run starts; it never builds an unlimited backlog. Manual and webhook requests are separate."
   }
 };
+var CHIEF_PROFILE_TARGET = " A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section.";
 var PROPOSAL_OUTCOME = " Read the result: granted Full Access may apply the change immediately. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success from the permission mode alone; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
 var toolDefinitions = (externalRuntime) => [
   {
@@ -755,7 +757,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_profile",
-    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section." + PROPOSAL_OUTCOME,
+    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead." + CHIEF_PROFILE_TARGET + PROPOSAL_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -939,6 +941,16 @@ var toolDefinitions = (externalRuntime) => [
 var SKILL_TOOL_NAMES = /* @__PURE__ */ new Set(["skills_list", "skill_manage"]);
 var SHARED_COMPUTER_TOOL_NAMES = /* @__PURE__ */ new Set(["list_shared_computers", "shared_computer"]);
 var VOICE_TOOL_NAMES = /* @__PURE__ */ new Set(["send_voice_note"]);
+var CHIEF_ONLY_TOOL_NAMES = /* @__PURE__ */ new Set([
+  "create_bot",
+  "list_team_setup",
+  "propose_team_setup",
+  "propose_bot_deletion",
+  "create_room",
+  "manage_room",
+  "retry_thread"
+]);
+var CHIEF_TARGET_TOOL_NAMES = /* @__PURE__ */ new Set(["propose_profile", "propose_model"]);
 var ROOM_ONLY_TOOLS = /* @__PURE__ */ new Set(["list_room_targets", "coordinate_bots", "send_to_bot"]);
 var ROOM_REPLACED_TOOLS = /* @__PURE__ */ new Set(["ask_bot", "delegate_bot", "check_delegation", "wait_delegation", "start_thread"]);
 var EXTERNAL_TOOL_NAMES = /* @__PURE__ */ new Set(["list_bots", "ask_bot", "delegate_bot", "check_delegation", "wait_delegation"]);
@@ -959,14 +971,19 @@ function catalogTools(profile) {
   const AUTHORING_TOOLS = profile.skillAuthoring ? BOT_SCOPED_TOOLS : BOT_SCOPED_TOOLS.filter((tool) => !SKILL_TOOL_NAMES.has(tool.name));
   const SHAREABLE_TOOLS = profile.sharedComputers ? AUTHORING_TOOLS : AUTHORING_TOOLS.filter((tool) => !SHARED_COMPUTER_TOOL_NAMES.has(tool.name));
   const VOICE_READY_TOOLS = profile.voiceNotes ? SHAREABLE_TOOLS : SHAREABLE_TOOLS.filter((tool) => !VOICE_TOOL_NAMES.has(tool.name));
-  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? VOICE_READY_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
+  const ROLE_TOOLS = profile.chief ? VOICE_READY_TOOLS : VOICE_READY_TOOLS.filter((tool) => !CHIEF_ONLY_TOOL_NAMES.has(tool.name)).map((tool) => {
+    if (!CHIEF_TARGET_TOOL_NAMES.has(tool.name)) return tool;
+    const properties = Object.fromEntries(Object.entries(tool.inputSchema.properties).filter(([key]) => key !== "for_bot_id"));
+    return { ...tool, description: tool.description.replace(CHIEF_PROFILE_TARGET, ""), inputSchema: { ...tool.inputSchema, properties } };
+  });
+  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? ROLE_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
     ...tool,
     description: "Open a separate job on yourself with its own history and run, without switching the person's selected conversation. Use only when the user requests independent jobs (for example one review per pull request). Give a short specific title and complete instructions; you can open at most five per turn. This is not a teammate handoff: use coordinate_bots for teammates and their automatic replies. Self-opened jobs cannot recursively open more jobs. If refused, do not retry; explain what remains.",
     inputSchema: { ...tool.inputSchema, properties: {
       ...tool.inputSchema.properties,
       bot_id: { type: "string", enum: [profile.botId], description: "Leave out, or use your own bot ID. For teammates use coordinate_bots." }
     } }
-  } : tool) : VOICE_READY_TOOLS.filter((tool) => !ROOM_ONLY_TOOLS.has(tool.name));
+  } : tool) : ROLE_TOOLS.filter((tool) => !ROOM_ONLY_TOOLS.has(tool.name));
 }
 
 // node_modules/.pnpm/croner@10.0.1/node_modules/croner/dist/croner.js