openmausbot 0.1.97 → 0.1.99

package/dist-server/cloud-home-start.js

@@ -6,17 +6,28 @@ var __export = (target, all) => {
 
 // server/cloud-home-start.ts
 import { spawn } from "node:child_process";
-import { chownSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { chownSync, readFileSync as readFileSync3, statSync } from "node:fs";
 import { dirname as dirname2, join as join3, posix, resolve } from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 
 // server/cloud-home.ts
-import { existsSync as existsSync2, lstatSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
+import { existsSync as existsSync2, lstatSync as lstatSync2, mkdirSync, readFileSync as readFileSync2, readdirSync } from "node:fs";
 import { join as join2 } from "node:path";
 
 // server/atomic.ts
 import { randomUUID } from "node:crypto";
-import { closeSync, fsyncSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import {
+  closeSync,
+  constants,
+  fstatSync,
+  fsyncSync,
+  lstatSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "node:fs";
 var RENAME_RETRY_DELAYS_MS = [5, 10, 20, 40, 80];
 var RETRYABLE_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EACCES", "EBUSY"]);
 function sleepSync(ms) {
@@ -40,7 +51,7 @@ function writeFileAtomic(path, data, options = {}) {
   try {
     fd = openSync(tmp, "w", options.mode);
     writeFileSync(fd, data);
-    fsyncSync(fd);
+    if (options.durable !== false) fsyncSync(fd);
     closeSync(fd);
     fd = null;
     renameWithRetry(tmp, path);
@@ -14707,11 +14718,11 @@ function prepareCloudHomeVolume(home, machineId) {
   mkdirSync(home, { recursive: true, mode: 448 });
   const marker = join2(home, CLOUD_HOME_MARKER);
   if (existsSync2(marker)) {
-    const stat = lstatSync(marker);
+    const stat = lstatSync2(marker);
     let saved;
     try {
       if (!stat.isFile() || stat.size > 4096) throw new Error();
-      saved = JSON.parse(readFileSync(marker, "utf8"));
+      saved = JSON.parse(readFileSync2(marker, "utf8"));
     } catch {
       throw new Error("This volume's Cloud marker is unreadable. No data was changed.");
     }
@@ -14843,7 +14854,7 @@ function startCloudHome(env = process.env) {
   const home = env.HOME || "/data";
   let ids = null;
   if (process.getuid?.() === 0) {
-    ids = passwdIds(readFileSync2("/etc/passwd", "utf8"), SERVICE_USER);
+    ids = passwdIds(readFileSync3("/etc/passwd", "utf8"), SERVICE_USER);
     if (!ids) throw new Error(`The ${SERVICE_USER} user is missing from this image.`);
     const stat = statSync(home);
     if (stat.uid !== ids.uid || stat.gid !== ids.gid) chownSync(home, ids.uid, ids.gid);
@@ -14864,7 +14875,7 @@ function startCloudHome(env = process.env) {
   const edgeConfig = env.OMB_CLOUD_EDGE_CONFIG || "/app/cloud/Caddyfile";
   if (ids) {
     const problem = codeTrustProblem([process.execPath, fileURLToPath2(import.meta.url), join3(here, "index.js"), edgeBin, edgeConfig], home);
-    if (problem) throw new Error(`This image's code is not safe to run as root: ${problem}. Rebuild it from deploy/fly/Dockerfile.`);
+    if (problem) throw new Error(`This image's code is not safe to run as root: ${problem}. Rebuild it with docker build --target cloud-home.`);
   }
   const { server, edge, secrets, dropped } = cloudHomeChildEnvironments(config2, env, home);
   if (dropped.length) console.log(`cloud home: not passed to the server: ${dropped.join(", ")}`);

package/dist-server/container-mcp.js

@@ -15824,6 +15824,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -15869,6 +15871,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -16207,6 +16214,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),

package/dist-server/desktop-entry.mjs

@@ -0,0 +1,54 @@
+// The packaged desktop forks this file instead of the index.js beside it
+// (electron/server-child-launch.mjs). It turns on Node's on-disk compile
+// cache for this one process, so a relaunch reuses the compiled 5 MB bundle
+// instead of parsing and compiling all of it again, then runs the server
+// unchanged. Copied verbatim to dist-server/desktop-entry.mjs by
+// scripts/bundle-server.mjs: bundling it would inline index.js and defeat
+// the point.
+import module from "node:module";
+import { lstatSync, readdirSync, rmSync, utimesSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+
+const cacheRoot = process.env.OMB_SERVER_COMPILE_CACHE;
+// Engine CLIs, MCP servers and terminals the server spawns must not inherit
+// it. enableCompileCache does not set NODE_COMPILE_CACHE, so they inherit
+// nothing from this.
+delete process.env.OMB_SERVER_COMPILE_CACHE;
+
+let enabled = false;
+if (cacheRoot) {
+  try {
+    enabled = module.enableCompileCache(cacheRoot).status === module.constants.compileCacheStatus.ENABLED;
+  } catch {
+    // An unusable cache costs only the compile it would have saved.
+  }
+}
+
+await import("./index.js");
+
+// Node writes new entries when the process exits normally; a crash or a
+// Windows kill skips that, so write them once the server is up. Then drop
+// caches of other Node versions (one is left behind by each Electron
+// upgrade) that no launch has used for a day. Only `v<node version>-…`
+// directories inside the cache root Node reports are ever removed.
+if (enabled) {
+  setTimeout(() => {
+    try {
+      module.flushCompileCache();
+      const current = module.getCompileCacheDir();
+      if (dirname(current) !== resolve(cacheRoot)) return;
+      const now = new Date();
+      utimesSync(current, now, now);
+      for (const name of readdirSync(cacheRoot)) {
+        if (name === basename(current) || !/^v\d+\.\d+\.\d+-/.test(name)) continue;
+        const stale = join(cacheRoot, name);
+        const stat = lstatSync(stale);
+        if (stat.isDirectory() && now - stat.mtimeMs > 24 * 60 * 60 * 1000) {
+          rmSync(stale, { recursive: true, force: true });
+        }
+      }
+    } catch {
+      // Best effort: anything not written or removed now is retried next launch.
+    }
+  }, 10_000).unref();
+}

package/dist-server/drivers/agents-proxy.js

@@ -131,6 +131,7 @@ function catalogProfileFromEnv(env) {
     voiceNotes: env.OMB_VOICE_NOTES === "1",
     cloudHome: env.OMB_CLOUD_HOME === "1",
     memoryEnabled: env.OMB_MEMORY_ENABLED !== "0",
+    chief: env.OMB_CHIEF_OF_STAFF === "1",
     botId: env.OMB_BOT_ID ?? ""
   };
 }
@@ -184,7 +185,7 @@ var ROUTINE_SCHEDULE_SCHEMA = {
     },
     starts_at: {
       type: "string",
-      description: "Optional for type interval: RFC3339 date-time with an explicit timezone offset that anchors the cadence. Omit to start one interval after the routine is applied (immediately with granted Full Access, otherwise after confirmation)."
+      description: "Optional for type interval: RFC3339 date-time with an explicit timezone offset that anchors the cadence. Omit to start one interval after the routine is applied."
     },
     window_start: {
       type: "string",
@@ -240,7 +241,7 @@ var ROUTINE_FIELDS_SCHEMA = {
   },
   continuity: {
     type: "boolean",
-    description: "Opt in to using the latest completed run's bounded report as historical context. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
+    description: "Opt in to using the latest completed run's bounded report as historical context. Use it for recurring work that builds on last time, such as QA passes, monitoring or follow-ups. Defaults to false; set false in an update to start fresh again. Included in the applied result or pending confirmation."
   },
   overlap: {
     type: "string",
@@ -248,7 +249,9 @@ var ROUTINE_FIELDS_SCHEMA = {
     description: "While this routine is still working, skip scheduled occurrences (default) or queue at most one run. Queue skips further occurrences until the pending run starts; it never builds an unlimited backlog. Manual and webhook requests are separate."
   }
 };
+var CHIEF_PROFILE_TARGET = " A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section.";
 var PROPOSAL_OUTCOME = " Read the result: granted Full Access may apply the change immediately. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success from the permission mode alone; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
+var SELF_CHANGE_OUTCOME = " Read the result: a change to your own routines, skills, profile or model applies immediately, and the person sees it with an Undo; a change for another bot may wait for the person's confirmation. If applied, continue the requested work without another confirmation. Only a pending result requires ending the turn and waiting for the in-app decision. Never claim success without an applied result; report failed or cancelled results honestly. This does not elevate another bot's execution permissions.";
 var toolDefinitions = (externalRuntime) => [
   {
     name: "create_options_card",
@@ -712,7 +715,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_routine",
-    description: "Prepare a new routine after the user explicitly asks to schedule recurring or future work. Call list_routines first for relative dates or times so you use its authoritative current time and timezone. Convert calendar requests (monthly dates, last days, nth weekdays) into a validated five-field cron schedule with an explicit IANA timeZone; keep elapsed every-N-minutes work as interval. Never approximate unsupported requests with a different weekly schedule or an AI date-check routine; explain the limitation instead. Resolve ambiguous dates, times, timezone, destination, or instructions with the user first, and always give one-time schedules an explicit RFC3339 offset. If the user asks for the routine to run as ANOTHER bot in your section, call list_bots and pass that bot's id as for_bot_id; each run retains that bot's own permissions." + PROPOSAL_OUTCOME,
+    description: "Prepare a new routine after the user explicitly asks to schedule recurring or future work. Call list_routines first for relative dates or times so you use its authoritative current time and timezone. Convert calendar requests (monthly dates, last days, nth weekdays) into a validated five-field cron schedule with an explicit IANA timeZone; keep elapsed every-N-minutes work as interval. Never approximate unsupported requests with a different weekly schedule or an AI date-check routine; explain the limitation instead. Resolve ambiguous dates, times, timezone, destination, or instructions with the user first, and always give one-time schedules an explicit RFC3339 offset. If the user asks for the routine to run as ANOTHER bot in your section, call list_bots and pass that bot's id as for_bot_id; each run retains that bot's own permissions." + SELF_CHANGE_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -728,7 +731,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_routine_action",
-    description: "Prepare a user-requested change to one of this bot's existing routines. Use list_routines first to get the routine id. If the user asks to change ANOTHER bot's routine and that bot is in your section, call list_bots and pass that bot's id as for_bot_id; the routine keeps its owner and every run keeps that bot's engine and permissions." + PROPOSAL_OUTCOME,
+    description: "Prepare a user-requested change to one of this bot's existing routines. Use list_routines first to get the routine id. If the user asks to change ANOTHER bot's routine and that bot is in your section, call list_bots and pass that bot's id as for_bot_id; the routine keeps its owner and every run keeps that bot's engine and permissions." + SELF_CHANGE_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -755,7 +758,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_profile",
-    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead. A Chief of Staff may pass for_bot_id (from list_bots) for a requested change to another bot in its section." + PROPOSAL_OUTCOME,
+    description: "Submit user-requested changes to your own name, title, description, standing instructions (SOUL.md), working folder (cwd), or your alert and voice toggles (notifications, speakReplies). Keep SOUL.md short \u2014 who you are and the rules you never break; put step-by-step procedure into a skill instead." + CHIEF_PROFILE_TARGET + SELF_CHANGE_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -767,7 +770,7 @@ var toolDefinitions = (externalRuntime) => [
         cwd: {
           type: "string",
           maxLength: 1024,
-          description: "Absolute path of the folder your tools read and write in (for example /Users/me/Projects/site). It must already exist. An empty string means your private workspace."
+          description: "Absolute path of the folder your tools read and write in (for example /Users/me/Projects/site). It must already exist. An empty string means your private workspace. A new folder waits for the person's confirmation unless this conversation has Full access."
         },
         notifications: {
           type: "boolean",
@@ -788,7 +791,7 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "propose_model",
-    description: "Submit a user-requested switch of this bot's default engine and model. Use the exact instance and model ids the person named, or for a Chief the ids from the team-setup catalog. The card warns about capabilities the switch gains or loses; existing threads keep their current models." + PROPOSAL_OUTCOME,
+    description: "Submit a user-requested switch of this bot's default engine and model. Use the exact instance and model ids the person named, or for a Chief the ids from the team-setup catalog. The result warns about capabilities the switch gains or loses; existing threads keep their current models." + SELF_CHANGE_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -831,12 +834,12 @@ var toolDefinitions = (externalRuntime) => [
   },
   {
     name: "skills_list",
-    description: "List this bot's imported skills (enabled and disabled) and any staged skill writes waiting for the user to confirm. Use this before skill_manage to avoid duplicate names. Listing does not enable anything.",
+    description: "List this bot's imported skills (enabled and disabled) and any staged skill writes still waiting for the user's decision. Use this before skill_manage to avoid duplicate names. Listing does not enable anything.",
     inputSchema: { type: "object", additionalProperties: false, properties: {} }
   },
   {
     name: "skill_manage",
-    description: "Submit a new or updated reusable SKILL.md. Never update unless the user explicitly asked to revise that named skill. While review is pending, a create stays inactive and an update leaves the current version unchanged." + PROPOSAL_OUTCOME,
+    description: "Submit a new or updated reusable SKILL.md. Never update unless the user explicitly asked to revise that named skill. If the result is pending, a create stays inactive and an update leaves the current version unchanged." + SELF_CHANGE_OUTCOME,
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -939,6 +942,16 @@ var toolDefinitions = (externalRuntime) => [
 var SKILL_TOOL_NAMES = /* @__PURE__ */ new Set(["skills_list", "skill_manage"]);
 var SHARED_COMPUTER_TOOL_NAMES = /* @__PURE__ */ new Set(["list_shared_computers", "shared_computer"]);
 var VOICE_TOOL_NAMES = /* @__PURE__ */ new Set(["send_voice_note"]);
+var CHIEF_ONLY_TOOL_NAMES = /* @__PURE__ */ new Set([
+  "create_bot",
+  "list_team_setup",
+  "propose_team_setup",
+  "propose_bot_deletion",
+  "create_room",
+  "manage_room",
+  "retry_thread"
+]);
+var CHIEF_TARGET_TOOL_NAMES = /* @__PURE__ */ new Set(["propose_profile", "propose_model"]);
 var ROOM_ONLY_TOOLS = /* @__PURE__ */ new Set(["list_room_targets", "coordinate_bots", "send_to_bot"]);
 var ROOM_REPLACED_TOOLS = /* @__PURE__ */ new Set(["ask_bot", "delegate_bot", "check_delegation", "wait_delegation", "start_thread"]);
 var EXTERNAL_TOOL_NAMES = /* @__PURE__ */ new Set(["list_bots", "ask_bot", "delegate_bot", "check_delegation", "wait_delegation"]);
@@ -959,14 +972,19 @@ function catalogTools(profile) {
   const AUTHORING_TOOLS = profile.skillAuthoring ? BOT_SCOPED_TOOLS : BOT_SCOPED_TOOLS.filter((tool) => !SKILL_TOOL_NAMES.has(tool.name));
   const SHAREABLE_TOOLS = profile.sharedComputers ? AUTHORING_TOOLS : AUTHORING_TOOLS.filter((tool) => !SHARED_COMPUTER_TOOL_NAMES.has(tool.name));
   const VOICE_READY_TOOLS = profile.voiceNotes ? SHAREABLE_TOOLS : SHAREABLE_TOOLS.filter((tool) => !VOICE_TOOL_NAMES.has(tool.name));
-  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? VOICE_READY_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
+  const ROLE_TOOLS = profile.chief ? VOICE_READY_TOOLS : VOICE_READY_TOOLS.filter((tool) => !CHIEF_ONLY_TOOL_NAMES.has(tool.name)).map((tool) => {
+    if (!CHIEF_TARGET_TOOL_NAMES.has(tool.name)) return tool;
+    const properties = Object.fromEntries(Object.entries(tool.inputSchema.properties).filter(([key]) => key !== "for_bot_id"));
+    return { ...tool, description: tool.description.replace(CHIEF_PROFILE_TARGET, ""), inputSchema: { ...tool.inputSchema, properties } };
+  });
+  return profile.externalRuntime ? BOT_SCOPED_TOOLS.filter((tool) => EXTERNAL_TOOL_NAMES.has(tool.name)) : profile.coordinating ? ROLE_TOOLS.filter((tool) => !ROOM_REPLACED_TOOLS.has(tool.name) || tool.name === "start_thread" && profile.ownThreadCreation).map((tool) => tool.name === "start_thread" ? {
     ...tool,
     description: "Open a separate job on yourself with its own history and run, without switching the person's selected conversation. Use only when the user requests independent jobs (for example one review per pull request). Give a short specific title and complete instructions; you can open at most five per turn. This is not a teammate handoff: use coordinate_bots for teammates and their automatic replies. Self-opened jobs cannot recursively open more jobs. If refused, do not retry; explain what remains.",
     inputSchema: { ...tool.inputSchema, properties: {
       ...tool.inputSchema.properties,
       bot_id: { type: "string", enum: [profile.botId], description: "Leave out, or use your own bot ID. For teammates use coordinate_bots." }
     } }
-  } : tool) : VOICE_READY_TOOLS.filter((tool) => !ROOM_ONLY_TOOLS.has(tool.name));
+  } : tool) : ROLE_TOOLS.filter((tool) => !ROOM_ONLY_TOOLS.has(tool.name));
 }
 
 // node_modules/.pnpm/croner@10.0.1/node_modules/croner/dist/croner.js
@@ -17378,7 +17396,7 @@ ${note}` };
     return { text: `Imported skills:
 ${live}
 
-Staged (waiting for the user to confirm):
+Staged (waiting for the user's decision):
 ${pending}` };
   }
   if (name === "skill_manage") {