omni-notify-mcp 1.3.307 → 1.3.309

package/dist/shared/agentSession.js

@@ -172,7 +172,7 @@ export function ownerBoundLaunch(invocation, ownerPid, cwd, guardDir) {
     }
     return {
         cmd: process.execPath,
-        args: [path.join(guardDir, "ownerGuard.js"), String(ownerPid), encoded(invocation.cmd), encoded(JSON.stringify(invocation.args)), encoded(cwd)],
+        args: [path.join(guardDir, "ownerGuard.cjs"), String(ownerPid), encoded(invocation.cmd), encoded(JSON.stringify(invocation.args)), encoded(cwd)],
     };
 }
 // GATE: how long a CLI tree gets to exit on SIGTERM before it is SIGKILLed — POSIX only; Windows stops it at once

package/dist/shared/webhost/bullseyeWebHost.js

@@ -51,8 +51,30 @@ const PICK_BODY_BYTES = 4_096;
 function wholeRecord(record) {
     return record !== null && typeof record === "object" && Number.isInteger(record.port) && /^[0-9a-f]+$/.test(String(record.token)) && typeof record.label === "string" && typeof record.extension === "string" && record.pages !== null && typeof record.pages === "object";
 }
-/** The live windows serving `extension` on this machine, grouped by the workspace each runs in: label -> { page -> entry address carrying that window's key }. Two windows on one workspace answer with the newest record. */
-function workspacesServed(extension) {
+const PUBLIC_NAME = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i;
+/**
+ * THE ONE PRODUCER OF A PUBLIC ADDRESS BASE (#3867). The gateway puts the public name it served the request under on
+ * `x-forwarded-host`; every address a page is handed for a request that came through it is built on this base, never on
+ * the loopback bind. Undefined for a request made on this machine, whose addresses are the loopback ones. A name that
+ * is not a host name THROWS a TypeError.
+ */
+function publicBase(request) {
+    const forwarded = request.headers["x-forwarded-host"];
+    if (forwarded === undefined) {
+        return undefined;
+    }
+    if (typeof forwarded !== "string" || !PUBLIC_NAME.test(forwarded)) {
+        throw new TypeError(`x-forwarded-host is not a host name: ${JSON.stringify(forwarded)}`);
+    }
+    return `https://${forwarded.toLowerCase()}`;
+}
+/**
+ * The live windows serving `extension` on this machine, grouped by the workspace each runs in: label -> { page -> entry
+ * address }. On this machine the address carries that window's key on the loopback port; through the gateway (`base`
+ * is its public address) it is the public address naming that window, which the gateway's own session admits. Two
+ * windows on one workspace answer with the newest record.
+ */
+function workspacesServed(extension, base) {
     const directory = recordDirectory(extension);
     const served = new Map();
     if (!fs.existsSync(directory)) {
@@ -83,7 +105,8 @@ function workspacesServed(extension) {
         served.set(label, Object.fromEntries(Object.entries(record.pages).map(([page, info]) => {
             // NULL-OK: field search is OPTIONAL and therefore it is ok to check for NULL
             const search = info.search ?? "";
-            return [page, `http://127.0.0.1:${record.port}/${encodeURIComponent(page)}/${search}${search === "" ? "?" : "&"}${TOKEN_PARAMETER}=${record.token}`];
+            const at = `/${encodeURIComponent(page)}/${search}${search === "" ? "?" : "&"}`;
+            return [page, base === undefined ? `http://127.0.0.1:${record.port}${at}${TOKEN_PARAMETER}=${record.token}` : `${base}${at}window=${record.pid}`];
         })));
     }
     return served;
@@ -703,6 +726,16 @@ class WebHost {
             return send(response, 403, MIME[".txt"], "this host serves 127.0.0.1 only");
         }
         const url = new URL(request.url, `http://127.0.0.1:${this.port}`);
+        let base;
+        try {
+            base = publicBase(request);
+        }
+        catch (err) {
+            if (!(err instanceof TypeError))
+                throw err;
+            // OWNER: this request's trigger root — a gateway name that is not a host name is answered 400 with the reason, and no address is built on it.
+            return send(response, 400, MIME[".txt"], err.message);
+        }
         if (url.searchParams.get(TOKEN_PARAMETER) === PROCESS.token) {
             url.searchParams.delete(TOKEN_PARAMETER);
             return send(response, 302, MIME[".txt"], "", {
@@ -727,7 +760,7 @@ class WebHost {
             let workspaces;
             let current;
             try {
-                workspaces = Object.fromEntries([...this.workspaces()].sort(([a], [b]) => a.localeCompare(b)));
+                workspaces = Object.fromEntries([...this.workspaces(base)].sort(([a], [b]) => a.localeCompare(b)));
                 // NULL-OK: field at is OPTIONAL and therefore it is ok to check for NULL
                 current = this.currentOf(new URLSearchParams(url.searchParams.get("at") ?? ""));
             }
@@ -763,7 +796,7 @@ class WebHost {
             return this.serveFile(url.pathname.slice("/fs".length), response);
         }
         if (url.pathname === "/") {
-            return send(response, 200, MIME[".html"], indexPage(this), { "Cache-Control": "no-store" });
+            return send(response, 200, MIME[".html"], indexPage(this, base), { "Cache-Control": "no-store" });
         }
         const [, first, rest] = /^\/([^/]*)\/?(.*)$/.exec(url.pathname);
         const page = this.pages.get(decodeURIComponent(first));
@@ -778,13 +811,13 @@ class WebHost {
         }
         const home = url.searchParams.get("bullseye-peek");
         if (home !== null && ROSTER_EXTENSIONS.has(this.extension)) {
-            return send(response, 200, MIME[".html"], peekedRosterPage(this.label, home, workspacesServed(this.extension).get(home)?.[page.name]), { "Cache-Control": "no-store" });
+            return send(response, 200, MIME[".html"], peekedRosterPage(this.label, home, workspacesServed(this.extension, base).get(home)?.[page.name]), { "Cache-Control": "no-store" });
         }
         return this.serveDocument(page, response);
     }
-    /** The workspaces a page of this host can switch to: label -> { page -> address }. A window's host lists every live window serving the same extension. */
-    workspaces() {
-        return workspacesServed(this.extension);
+    /** The workspaces a page of this host can switch to: label -> { page -> address }, built on `base` when the request came through the gateway. A window's host lists every live window serving the same extension. */
+    workspaces(base) {
+        return workspacesServed(this.extension, base);
     }
     /** The workspace the page asking is on, from the address it opened (`at`). A window's host is on its own window's workspace whatever the page asked. */
     currentOf() {
@@ -1050,9 +1083,9 @@ class ServiceHost extends WebHost {
         }
     }
 }
-function indexPage(host) {
+function indexPage(host, base) {
     const rows = [...host.pages.values()]
-        .map((page) => `<li><a href="${escapeAttribute(page.url)}">${page.live ? "🟢" : "⚪"} ${escapeAttribute(page.title)}</a></li>`)
+        .map((page) => `<li><a href="${escapeAttribute(base === undefined ? page.url : `${base}/${encodeURIComponent(page.name)}/${page.search}`)}">${page.live ? "🟢" : "⚪"} ${escapeAttribute(page.title)}</a></li>`)
         .join("");
     return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>${escapeAttribute(host.extension)}</title></head>
 <body style="font:14px system-ui,sans-serif;padding:24px;background:#1e1e1e;color:#ccc"><div>${escapeAttribute(host.extension)} · ${escapeAttribute(host.label)}</div><ul>${rows}</ul></body></html>`;

package/dist/shared/webhost/webviewShim.js

@@ -1,5 +1,60 @@
 "use strict";
 const PICKER_SOURCE = String.raw `
+  var BASE_CSS = [
+    "@media (max-width: 480px) {",
+    "  html { -webkit-text-size-adjust: 100%; }",
+    "  :root { --vscode-font-size: 14px !important; }",
+    "  body { font-size: 14px; }",
+    "  *, *::before, *::after { box-sizing: border-box; }",
+    "  .filter-group, .be-seg { flex-wrap: wrap; max-width: 100%; }",
+    "  table { display: block; max-width: 100%; overflow-x: auto; }",
+    "  body { overflow-wrap: break-word; }",
+    "  img, video, canvas { max-width: 100%; }",
+    "  pre { max-width: 100%; overflow-x: auto; }",
+    "  :where(textarea, input:not([type=checkbox]):not([type=radio]):not([type=range])) { font-size: 16px; }",
+    "  :where(button:not([class*=be-]), select:not([class*=be-])) { min-height: 32px; }",
+    "}"
+  ].join(" ");
+
+  var MIN_PHONE_FONT = 12;
+  var floorTimer = 0;
+
+  function floorFonts() {
+    floorTimer = 0;
+    document.body.querySelectorAll("*").forEach(function (el) {
+      if (parseFloat(getComputedStyle(el).fontSize) < MIN_PHONE_FONT) {
+        el.style.setProperty("font-size", MIN_PHONE_FONT + "px", "important");
+      }
+    });
+  }
+
+  function floorFontsSoon() {
+    if (floorTimer === 0) {
+      floorTimer = setTimeout(floorFonts, 300);
+    }
+  }
+
+  function baseStyles() {
+    if (document.getElementById("__bullseye-base") !== null) {
+      return;
+    }
+    var style = document.createElement("style");
+    style.id = "__bullseye-base";
+    style.textContent = BASE_CSS;
+    document.head.insertBefore(style, document.head.firstChild);
+    if (window.matchMedia("(max-width: 480px)").matches) {
+      var watch = function () {
+        new MutationObserver(floorFontsSoon).observe(document.body, { childList: true, subtree: true });
+        floorFontsSoon();
+      };
+      if (document.readyState === "loading") {
+        document.addEventListener("DOMContentLoaded", watch);
+      } else {
+        watch();
+      }
+    }
+  }
+
   function notice(id, text) {
     if (document.getElementById(id) !== null) {
       return;
@@ -27,7 +82,7 @@ const PICKER_SOURCE = String.raw `
   function workspaceBox() {
     var box = document.createElement("div");
     box.id = "bullseye-workspace";
-    box.style.cssText = "display:flex;flex-wrap:wrap;justify-content:flex-end;gap:8px;align-items:center;box-sizing:border-box;min-height:24px;font:12px system-ui,sans-serif;" + barColours + ";border-bottom:1px solid #454545;padding:2px 8px;pointer-events:auto";
+    box.style.cssText = "display:flex;flex-wrap:nowrap;justify-content:flex-end;gap:8px;align-items:center;box-sizing:border-box;min-height:24px;max-width:100%;overflow:hidden;font:12px system-ui,sans-serif;" + barColours + ";border-bottom:1px solid #454545;padding:2px 8px;pointer-events:auto";
     return box;
   }
 
@@ -37,10 +92,11 @@ const PICKER_SOURCE = String.raw `
 
   function choose(text, labels, current, onChange, emptyText) {
     var holder = document.createElement("label");
+    holder.style.cssText = "min-width:0;white-space:nowrap";
     holder.textContent = text;
     var select = document.createElement("select");
     select.setAttribute("aria-label", text.trim());
-    select.style.cssText = "font:inherit;" + barColours + ";color-scheme:dark;border:0";
+    select.style.cssText = "font:inherit;" + barColours + ";color-scheme:dark;border:0;min-width:0;max-width:42vw;text-overflow:ellipsis";
     labels.forEach(function (name) {
       var option = document.createElement("option");
       option.style.cssText = name === current ? "background:#094771;color:#fff;font-weight:600" : barColours;
@@ -136,6 +192,7 @@ const PICKER_SOURCE = String.raw `
   function peekBadge(served, labels) {
     var box = workspaceBox();
     box.style.background = "#5a3d00";
+    box.style.flexWrap = "wrap";
     box.style.color = "#fff";
     var words = document.createElement("span");
     words.textContent = "👁 Peeking at " + served.current + " — look only: nothing here can start or change work";
@@ -255,6 +312,7 @@ const SHIM_SOURCE = String.raw `(function () {
   };
 
   function start() {
+    baseStyles();
     open();
     workspacePicker();
   }
@@ -270,6 +328,7 @@ const PICKER_PAGE_SOURCE = String.raw `(function () {
   var page = document.currentScript.getAttribute("data-page");
   var peekable = false;
 ` + PICKER_SOURCE + String.raw `
+  baseStyles();
   if (document.readyState === "loading") {
     document.addEventListener("DOMContentLoaded", workspacePicker);
   } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-notify-mcp",
-  "version": "1.3.307",
+  "version": "1.3.309",
   "description": "Reach your AI agents from anywhere — and let them reach you. One stdio process serves the whole tool surface to Claude Code, GitHub Copilot Chat and Codex: desktop, Telegram, Slack, ntfy, Discord, Teams and SMS are configured in one file, and agents notify you when long work finishes or a decision is needed, ask you a question and wait for your answer, and receive and reply to the messages you send them — with Do Not Disturb and idle detection deciding what actually gets through.",
   "main": "dist/index.js",
   "type": "module",