osborn 0.9.153 → 0.9.155

package/Dockerfile.sandbox

@@ -45,7 +45,8 @@ RUN apt-get update -qq && \
     git \
     make \
     g++ \
-    python-is-python3 && \
+    python-is-python3 \
+    util-linux && \
     rm -rf /var/lib/apt/lists/*
 
 ARG OSBORN_VERSION=latest
@@ -100,6 +101,7 @@ ENV OSBORN_CWD=/workspace
 # Caveat: native user modules are tied to the image's Node ABI (currently 22) —
 # a future Node-major image bump would need an `npm rebuild` of volume globals.
 ENV NPM_CONFIG_PREFIX=/workspace/.npm-global
+ENV NPM_CONFIG_CACHE=/tmp/npm-cache
 ENV PATH=/workspace/.npm-global/bin:$PATH
 
 WORKDIR /workspace
@@ -122,6 +124,25 @@ fi
 echo "[sandbox-d] === boot at $(date -Iseconds) ===" >> "$LOGFILE"
 exec > >(tee -a "$LOGFILE") 2>&1
 
+# === Swap on volume ===
+# 8GB swapfile on /workspace (persistent volume). Created once on first boot,
+# reactivated on every subsequent boot (swapon state is lost across cold starts).
+# Gives 8GB RAM + 8GB swap = 16GB addressable — pressure relief when the dev
+# server or concurrent sub-agents spike memory without killing the voice loop.
+SWAPFILE=/workspace/swapfile
+if [ ! -f "$SWAPFILE" ]; then
+  echo "[sandbox-d] Creating 8GB swapfile at $SWAPFILE..."
+  fallocate -l 8G "$SWAPFILE" 2>/dev/null || dd if=/dev/zero of="$SWAPFILE" bs=1M count=8192 status=none
+  chmod 600 "$SWAPFILE"
+  mkswap "$SWAPFILE"
+  echo "[sandbox-d] Swapfile created"
+fi
+if swapon "$SWAPFILE" 2>/dev/null; then
+  echo "[sandbox-d] Swap active: $(free -h | grep Swap)"
+else
+  echo "[sandbox-d] swapon skipped (already active or kernel restriction)"
+fi
+
 # Onboarding-suppression JSON
 ONBOARDING_JSON='{"numStartups":10,"installMethod":"npm","autoUpdates":false,"hasCompletedOnboarding":true,"hasTrustDialogAccepted":true,"hasTrustDialogHooksAccepted":true,"hasCompletedProjectOnboarding":true,"hasAcknowledgedCostThreshold":true,"effortCalloutV2Dismissed":true,"theme":"dark","projects":{"/workspace":{"hasTrustDialogAccepted":true,"hasTrustDialogHooksAccepted":true,"hasCompletedProjectOnboarding":true}}}'
 

package/dist/index.js

@@ -1528,6 +1528,37 @@ function startApiServer(workingDir, port) {
             return;
         }
         // ────────────────────────────────────────────────────────────────────────
+        // ── Port proxy: /proxy/PORT/* → localhost:PORT/proxy/PORT/* ─────────────
+        // Forwards to a local dev server while PRESERVING the full path so that
+        // basePath-aware apps (e.g. Next.js with basePath: '/proxy/3000') receive
+        // the complete URL and can strip the prefix themselves. No cookie required —
+        // the machine is per-user and Fly's HTTPS is the outer auth boundary.
+        const portProxyMatch = url.pathname.match(/^\/proxy\/(\d+)(\/.*)?$/);
+        if (portProxyMatch) {
+            const targetPort = parseInt(portProxyMatch[1]);
+            if (targetPort > 1024 && targetPort < 65536 && targetPort !== 8300 && targetPort !== parseInt(process.env.OSBORN_API_PORT || '8741', 10)) {
+                const portProxyOptions = {
+                    hostname: '127.0.0.1',
+                    port: targetPort,
+                    path: url.pathname + (url.search || ''),
+                    method: req.method,
+                    headers: { ...req.headers, host: `127.0.0.1:${targetPort}` },
+                };
+                const portProxyReq = httpRequest(portProxyOptions, (portProxyRes) => {
+                    res.writeHead(portProxyRes.statusCode || 502, portProxyRes.headers);
+                    portProxyRes.pipe(res);
+                });
+                portProxyReq.on('error', () => {
+                    if (!res.headersSent) {
+                        res.writeHead(502);
+                        res.end('Port proxy error');
+                    }
+                });
+                req.pipe(portProxyReq);
+                return;
+            }
+        }
+        // ────────────────────────────────────────────────────────────────────────
         // ── IDE reverse proxy (cookie-gated fall-through) ────────────────────────
         // Forwards to code-server ONLY when:
         //   1. ideProxyEnabled is true (code-server is confirmed ready), AND
@@ -2709,7 +2740,7 @@ async function main() {
                 const { readSessionHistory } = await import('./session-access.js');
                 const history = readSessionHistory(sessionId, workingDir, {
                     lastN: 10,
-                    types: ['assistant'],
+                    types: ['assistant', 'tool_use'], // tool_use entries also carry Claude's spoken text
                 });
                 recentMessages = history
                     .filter((m) => m.text)
@@ -2725,8 +2756,14 @@ async function main() {
         // BEFORE the previous TTS completed, and we may have already suppressed in-flight
         // tts_say events that arrived during that overlap).
         const carriedSuppressed = lastInterruption?.suppressedText ?? '';
-        lastInterruption = { spokenText: fullText, recentMessages, suppressedText: carriedSuppressed, timestamp: Date.now() };
-        console.log(`📋 Interruption context stored (text: ${fullText.length} chars, JSONL: ${recentMessages.length} chars, suppressed carried: ${carriedSuppressed.length} chars)`);
+        lastInterruption = {
+            spokenText: fullText,
+            recentMessages,
+            suppressedText: carriedSuppressed,
+            fullBlockText: fullBlockText && fullBlockText !== fullText ? fullBlockText : undefined,
+            timestamp: Date.now(),
+        };
+        console.log(`📋 Interruption context stored (text: ${fullText.length} chars, JSONL: ${recentMessages.length} chars, block: ${fullBlockText?.length ?? 0} chars, suppressed carried: ${carriedSuppressed.length} chars)`);
     }
     /**
      * Append text the agent tried to say while the user was speaking, but which we
@@ -2766,6 +2803,7 @@ async function main() {
             spokenText: lastInterruption.spokenText,
             recentMessages: lastInterruption.recentMessages,
             suppressedText: lastInterruption.suppressedText,
+            fullBlockText: lastInterruption.fullBlockText,
         };
         lastInterruption = null;
         return ctx;

package/dist/pipeline-direct-llm.d.ts

@@ -21,6 +21,8 @@ export interface InterruptionContext {
      * and can re-articulate the relevant bits in its next response.
      */
     suppressedText: string;
+    /** Full text of the interrupted TTS block — fallback when JSONL read returns empty */
+    fullBlockText?: string;
 }
 export interface PipelineDirectOptions extends ClaudeLLMOptions {
     onFastBrainResult?: (result: FastBrainPanelResult) => void;

package/dist/pipeline-direct-llm.js

@@ -204,7 +204,10 @@ export class PipelineDirectLLM extends llm.LLM {
                     `Anything in "Your recent messages" below that appears AFTER the quoted heard text is content the user did not hear. The user has no memory of it.`,
                     ``,
                     `Your recent messages (full untruncated — you wrote these):`,
-                    interruptCtx.recentMessages || '(no recent messages found)',
+                    interruptCtx.recentMessages
+                        || (interruptCtx.fullBlockText
+                            ? `(JSONL unavailable — full TTS block text follows)\n"${interruptCtx.fullBlockText}"`
+                            : '(no recent messages found)'),
                     suppressedBlock,
                     ``,
                     `User's message: "${userText}"`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "osborn",
-  "version": "0.9.153",
+  "version": "0.9.155",
   "description": "Voice AI coding assistant - local agent that connects to Osborn frontend",
   "type": "module",
   "bin": {