opencami 1.7.0 → 1.8.3

package/README.md

@@ -1,6 +1,6 @@
 # OpenCami 🦎
 
-**Version 1.6.0**
+**Version 1.7.0**
 
 A beautiful web client for [OpenClaw](https://github.com/openclaw/openclaw).
 
@@ -15,16 +15,28 @@ A beautiful web client for [OpenClaw](https://github.com/openclaw/openclaw).
 curl -fsSL https://opencami.xyz/install.sh | bash
 ```
 
-Or via npm:
+Then open `http://localhost:3000` (or your configured host/port).
+
+---
+
+## Install (curl)
+
+The recommended install flow is:
+
+```bash
+curl -fsSL https://opencami.xyz/install.sh | bash
+```
+
+This installs OpenCami and prints next-step instructions for required environment variables.
+
+Alternative install:
 
 ```bash
 npm install -g opencami
 opencami
 ```
 
-Opens your browser to the chat interface.
-
-### Options
+CLI options:
 
 | Flag | Description | Default |
 |------|-------------|---------|
@@ -33,18 +45,166 @@ Opens your browser to the chat interface.
 | `--host` | Bind address | `localhost` |
 | `--no-open` | Don't open browser | — |
 
-### Docker
+> Note: `--gateway` sets `OPENCLAW_GATEWAY` internally. For predictable deployments, set `CLAWDBOT_GATEWAY_URL` explicitly in environment.
+
+---
+
+## Configuration (OpenCami environment)
+
+Set these in your shell, service manager, or container environment.
+
+### Required
+
+```bash
+CLAWDBOT_GATEWAY_URL=ws://127.0.0.1:18789
+# pick ONE auth method:
+CLAWDBOT_GATEWAY_TOKEN=...
+# or
+CLAWDBOT_GATEWAY_PASSWORD=...
+```
+
+### Required for remote Tailnet / origin allowlist setups
+
+```bash
+# Must exactly match the browser origin used to access OpenCami
+# Example: https://openclaw-server.tailXXXX.ts.net:3001
+OPENCAMI_ORIGIN=https://openclaw-server.tailXXXX.ts.net:3001
+```
+
+### Optional
+
+```bash
+# Enables compatibility fallback if strict device-auth connect fails
+# Default is strict mode (fallback disabled)
+OPENCAMI_DEVICE_AUTH_FALLBACK=true
+
+FILES_ROOT=/path/to/workspace
+OPENAI_API_KEY=sk-...
+```
+
+---
+
+## Remote Tailnet setup (OpenClaw + OpenCami)
+
+If OpenCami loads remotely but you see **"origin not allowed"** or gateway connect failures, configure both sides.
+
+### 1) OpenClaw gateway config (`gateway.controlUi.allowedOrigins`)
+
+In your OpenClaw config, allow the exact OpenCami browser origin:
+
+```json
+{
+  "gateway": {
+    "controlUi": {
+      "allowedOrigins": [
+        "https://openclaw-server.tailXXXX.ts.net:3001"
+      ]
+    }
+  }
+}
+```
+
+### 2) OpenCami server env (`OPENCAMI_ORIGIN`)
+
+Set `OPENCAMI_ORIGIN` to the same exact value:
+
+```bash
+OPENCAMI_ORIGIN=https://openclaw-server.tailXXXX.ts.net:3001
+```
+
+### 3) Restart gateway
+
+```bash
+openclaw gateway restart
+```
+
+> If you access OpenCami via multiple hostnames/ports, each distinct origin must be listed in `allowedOrigins`.
+
+---
+
+## Device auth notes (strict vs fallback)
+
+OpenCami uses strict device-auth-compatible connect params by default.
+
+- **Strict mode (default):** `OPENCAMI_DEVICE_AUTH_FALLBACK` unset/false
+- **Fallback mode (compatibility):** set `OPENCAMI_DEVICE_AUTH_FALLBACK=true`
+
+Fallback mode retries connect without device identity metadata if strict handshake fails.
+Use fallback only when needed for compatibility, and prefer strict mode long-term.
+
+---
+
+## Security notes
+
+- Prefer `wss://` for remote connections.
+- Prefer token auth (`CLAWDBOT_GATEWAY_TOKEN`) over password.
+- Keep `allowedOrigins` minimal (exact origins only, no wildcards).
+- Treat `OPENCAMI_DEVICE_AUTH_FALLBACK=true` as temporary compatibility mode.
+- Do **not** expose OpenCami directly to the public internet without TLS + access controls.
+- For Tailnet deployments, limit Tailnet device/user access.
+
+---
+
+## Troubleshooting
+
+### "origin not allowed"
+
+Cause: gateway rejected browser origin.
+
+Fix:
+1. Add origin to `gateway.controlUi.allowedOrigins`
+2. Set identical `OPENCAMI_ORIGIN` in OpenCami env
+3. Restart gateway (`openclaw gateway restart`)
+
+### Missing scope `operator.read`
+
+Cause: gateway auth succeeded but token/permissions did not include required operator scope.
+
+Fix:
+- Use a token/password with operator access
+- Verify gateway auth/scopes in OpenClaw
+- Reconnect after updating credentials
+
+### Pairing required / device auth connect issues
+
+If strict connect fails in your deployment:
+
+```bash
+OPENCAMI_DEVICE_AUTH_FALLBACK=true
+```
+
+Then restart OpenCami and retry. Keep this as a compatibility fallback, not the default.
+
+### Can’t connect to gateway at all
+
+Checks:
+
+```bash
+openclaw gateway status
+echo "$CLAWDBOT_GATEWAY_URL"
+echo "$CLAWDBOT_GATEWAY_TOKEN"
+```
+
+Also verify URL scheme (`ws://` local, `wss://` remote).
+
+---
+
+## Docker
 
 ```bash
 docker build -t opencami .
 docker run -p 3000:3000 opencami
 ```
 
+---
+
 ## Features
 
 ### 💬 Chat & Communication
 - ⚡ **Real-time streaming** — persistent WebSocket + SSE, token-by-token
-- 🖼️ **Image attachments** — drag & drop with compression
+- 📎 **File attachments** — upload PDFs, text, code, CSV, JSON via attach button or drag & drop (`/uploads/` + `read` tool workflow)
+- 📄 **File cards** — uploaded files render as clickable cards (filename, icon, size) and open in File Explorer
+- 🖼️ **Image attachments** — drag & drop with compression (images stay Base64 for vision)
 - 🔊 **Voice playback (TTS)** — ElevenLabs → OpenAI → Edge TTS fallback
 - 🎤 **Voice input (STT)** — ElevenLabs Scribe → OpenAI Whisper → Browser
 - 🔔 **Browser notifications** — background tab alerts when assistant replies

package/bin/opencami.js

@@ -18,6 +18,9 @@ function getArg(name, def) {
 const port = parseInt(getArg('port', '3000'), 10);
 const host = getArg('host', '127.0.0.1');
 const gateway = getArg('gateway', 'ws://127.0.0.1:18789');
+const token = getArg('token', '');
+const password = getArg('password', '');
+const origin = getArg('origin', '');
 const noOpen = args.includes('--no-open');
 
 if (args.includes('--help') || args.includes('-h')) {
@@ -27,17 +30,23 @@ if (args.includes('--help') || args.includes('-h')) {
   Usage: opencami [options]
 
   Options:
-    --port <n>       Port to listen on (default: 3000)
-    --host <addr>    Host to bind to (default: 127.0.0.1)
-    --gateway <url>  OpenClaw gateway URL (default: ws://127.0.0.1:18789)
-    --no-open        Don't open browser on start
-    -h, --help       Show this help
+    --port <n>        Port to listen on (default: 3000)
+    --host <addr>     Host to bind to (default: 127.0.0.1)
+    --gateway <url>   OpenClaw gateway URL (default: ws://127.0.0.1:18789)
+    --token <token>   Gateway token (sets CLAWDBOT_GATEWAY_TOKEN)
+    --password <pw>   Gateway password (sets CLAWDBOT_GATEWAY_PASSWORD)
+    --origin <url>    Origin to send in backend WS (sets OPENCAMI_ORIGIN)
+    --no-open         Don't open browser on start
+    -h, --help        Show this help
 `);
   process.exit(0);
 }
 
 // Set gateway env for the app
-process.env.OPENCLAW_GATEWAY = gateway;
+process.env.CLAWDBOT_GATEWAY_URL = gateway;
+if (token) process.env.CLAWDBOT_GATEWAY_TOKEN = token;
+if (password) process.env.CLAWDBOT_GATEWAY_PASSWORD = password;
+if (origin) process.env.OPENCAMI_ORIGIN = origin;
 
 const MIME_TYPES = {
   '.html': 'text/html',

package/dist/client/assets/{CSPContext-a-MQmQQt.js → CSPContext-DeJH85nm.js}

@@ -1 +1 @@
-import{r as t}from"./main-CEuT8-Qi.js";const e=t.createContext(void 0),o={disableStyleElements:!1};function s(){return t.useContext(e)??o}export{s as u};
+import{r as t}from"./main-CgwdHc9W.js";const e=t.createContext(void 0),o={disableStyleElements:!1};function s(){return t.useContext(e)??o}export{s as u};

package/dist/client/assets/{DirectionContext-DRcND-Cm.js → DirectionContext-CxhRpXkm.js}

@@ -1 +1 @@
-import{r as l}from"./main-CEuT8-Qi.js";const E=["top","right","bottom","left"],p=Math.min,h=Math.max,L=Math.round,k=Math.floor,q=t=>({x:t,y:t}),x={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function R(t,e,n){return h(t,p(e,n))}function T(t,e){return typeof t=="function"?t(e):t}function m(t){return t.split("-")[0]}function g(t){return t.split("-")[1]}function b(t){return t==="x"?"y":"x"}function A(t){return t==="y"?"height":"width"}const P=new Set(["top","bottom"]);function y(t){return P.has(m(t))?"y":"x"}function M(t){return b(y(t))}function v(t,e,n){n===void 0&&(n=!1);const s=g(t),i=M(t),o=A(i);let r=i==="x"?s===(n?"end":"start")?"right":"left":s==="start"?"bottom":"top";return e.reference[o]>e.floating[o]&&(r=a(r)),[r,a(r)]}function z(t){const e=a(t);return[c(t),e,c(e)]}function c(t){return t.replace(/start|end/g,e=>d[e])}const u=["left","right"],f=["right","left"],O=["top","bottom"],S=["bottom","top"];function C(t,e,n){switch(t){case"top":case"bottom":return n?e?f:u:e?u:f;case"left":case"right":return e?O:S;default:return[]}}function B(t,e,n,s){const i=g(t);let o=C(m(t),n==="start",s);return i&&(o=o.map(r=>r+"-"+i),e&&(o=o.concat(o.map(c)))),o}function a(t){return t.replace(/left|right|bottom|top/g,e=>x[e])}function w(t){return{top:0,right:0,bottom:0,left:0,...t}}function F(t){return typeof t!="number"?w(t):{top:t,right:t,bottom:t,left:t}}function G(t){const{x:e,y:n,width:s,height:i}=t;return{width:s,height:i,top:n,left:e,right:e+s,bottom:n+i,x:e,y:n}}const j=l.createContext(void 0);function H(){return l.useContext(j)?.direction??"ltr"}export{y as a,a as b,z as c,B as d,T as e,k as f,m as g,v as h,g as i,h as j,M as k,F as l,p as m,G as n,A as o,R as p,b as q,L as r,E as s,q as t,H as u};
+import{r as l}from"./main-CgwdHc9W.js";const E=["top","right","bottom","left"],p=Math.min,h=Math.max,L=Math.round,k=Math.floor,q=t=>({x:t,y:t}),x={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function R(t,e,n){return h(t,p(e,n))}function T(t,e){return typeof t=="function"?t(e):t}function m(t){return t.split("-")[0]}function g(t){return t.split("-")[1]}function b(t){return t==="x"?"y":"x"}function A(t){return t==="y"?"height":"width"}const P=new Set(["top","bottom"]);function y(t){return P.has(m(t))?"y":"x"}function M(t){return b(y(t))}function v(t,e,n){n===void 0&&(n=!1);const s=g(t),i=M(t),o=A(i);let r=i==="x"?s===(n?"end":"start")?"right":"left":s==="start"?"bottom":"top";return e.reference[o]>e.floating[o]&&(r=a(r)),[r,a(r)]}function z(t){const e=a(t);return[c(t),e,c(e)]}function c(t){return t.replace(/start|end/g,e=>d[e])}const u=["left","right"],f=["right","left"],O=["top","bottom"],S=["bottom","top"];function C(t,e,n){switch(t){case"top":case"bottom":return n?e?f:u:e?u:f;case"left":case"right":return e?O:S;default:return[]}}function B(t,e,n,s){const i=g(t);let o=C(m(t),n==="start",s);return i&&(o=o.map(r=>r+"-"+i),e&&(o=o.concat(o.map(c)))),o}function a(t){return t.replace(/left|right|bottom|top/g,e=>x[e])}function w(t){return{top:0,right:0,bottom:0,left:0,...t}}function F(t){return typeof t!="number"?w(t):{top:t,right:t,bottom:t,left:t}}function G(t){const{x:e,y:n,width:s,height:i}=t;return{width:s,height:i,top:n,left:e,right:e+s,bottom:n+i,x:e,y:n}}const j=l.createContext(void 0);function H(){return l.useContext(j)?.direction??"ltr"}export{y as a,a as b,z as c,B as d,T as e,k as f,m as g,v as h,g as i,h as j,M as k,F as l,p as m,G as n,A as o,R as p,b as q,L as r,E as s,q as t,H as u};