opencami 1.8.3 → 1.8.5

package/README.md

@@ -1,7 +1,5 @@
 # OpenCami 🦎
 
-**Version 1.7.0**
-
 A beautiful web client for [OpenClaw](https://github.com/openclaw/openclaw).
 
 [![npm](https://img.shields.io/npm/v/opencami)](https://www.npmjs.com/package/opencami)
@@ -9,128 +7,93 @@ A beautiful web client for [OpenClaw](https://github.com/openclaw/openclaw).
 
 ![OpenCami Chat Interface](docs/screenshots/opencami-chat.jpg)
 
-## Quick Start
-
-```bash
-curl -fsSL https://opencami.xyz/install.sh | bash
-```
-
-Then open `http://localhost:3000` (or your configured host/port).
+## Install
 
----
-
-## Install (curl)
-
-The recommended install flow is:
+### Option 1 (recommended)
 
 ```bash
 curl -fsSL https://opencami.xyz/install.sh | bash
 ```
 
-This installs OpenCami and prints next-step instructions for required environment variables.
-
-Alternative install:
+### Option 2
 
 ```bash
 npm install -g opencami
-opencami
 ```
 
-CLI options:
-
-| Flag | Description | Default |
-|------|-------------|---------|
-| `--port` | Port to serve on | `3000` |
-| `--gateway` | OpenClaw gateway URL | `ws://127.0.0.1:18789` |
-| `--host` | Bind address | `localhost` |
-| `--no-open` | Don't open browser | — |
+## Run
 
-> Note: `--gateway` sets `OPENCLAW_GATEWAY` internally. For predictable deployments, set `CLAWDBOT_GATEWAY_URL` explicitly in environment.
-
----
-
-## Configuration (OpenCami environment)
-
-Set these in your shell, service manager, or container environment.
-
-### Required
+### ✅ Recommended (OpenCami runs on the same machine as the OpenClaw Gateway)
 
 ```bash
-CLAWDBOT_GATEWAY_URL=ws://127.0.0.1:18789
-# pick ONE auth method:
-CLAWDBOT_GATEWAY_TOKEN=...
-# or
-CLAWDBOT_GATEWAY_PASSWORD=...
+opencami --gateway ws://127.0.0.1:18789 --token <GATEWAY_TOKEN>
 ```
 
-### Required for remote Tailnet / origin allowlist setups
+Then open: `http://localhost:3000`
 
-```bash
-# Must exactly match the browser origin used to access OpenCami
-# Example: https://openclaw-server.tailXXXX.ts.net:3001
-OPENCAMI_ORIGIN=https://openclaw-server.tailXXXX.ts.net:3001
-```
+### 🌐 Remote access over Tailscale (keep Gateway local)
 
-### Optional
+This is the safest setup: **Gateway stays on loopback**, you access **OpenCami** via `https://<magicdns>:<port>`.
 
-```bash
-# Enables compatibility fallback if strict device-auth connect fails
-# Default is strict mode (fallback disabled)
-OPENCAMI_DEVICE_AUTH_FALLBACK=true
-
-FILES_ROOT=/path/to/workspace
-OPENAI_API_KEY=sk-...
-```
+1) In OpenClaw, allowlist the exact OpenCami URL (**no trailing slash**):
 
----
-
-## Remote Tailnet setup (OpenClaw + OpenCami)
-
-If OpenCami loads remotely but you see **"origin not allowed"** or gateway connect failures, configure both sides.
-
-### 1) OpenClaw gateway config (`gateway.controlUi.allowedOrigins`)
-
-In your OpenClaw config, allow the exact OpenCami browser origin:
-
-```json
+```json5
 {
   "gateway": {
-    "controlUi": {
-      "allowedOrigins": [
-        "https://openclaw-server.tailXXXX.ts.net:3001"
-      ]
+    "controlUI": {
+      "allowedOrigins": ["https://<magicdns>:3001"]
     }
   }
 }
 ```
 
-### 2) OpenCami server env (`OPENCAMI_ORIGIN`)
-
-Set `OPENCAMI_ORIGIN` to the same exact value:
+2) Restart the gateway:
 
 ```bash
-OPENCAMI_ORIGIN=https://openclaw-server.tailXXXX.ts.net:3001
+openclaw gateway restart
 ```
 
-### 3) Restart gateway
+3) Start OpenCami with the same origin:
 
 ```bash
-openclaw gateway restart
+opencami \
+  --gateway ws://127.0.0.1:18789 \
+  --token <GATEWAY_TOKEN> \
+  --origin https://<magicdns>:3001
 ```
 
-> If you access OpenCami via multiple hostnames/ports, each distinct origin must be listed in `allowedOrigins`.
+> ⚠️ Note: `--gateway` must be `ws://` or `wss://` (not `https://`).
 
----
+## CLI options
+
+```text
+opencami [--port <n>] [--host <addr>] [--gateway <ws(s)://...>] [--token <token>] [--password <pw>] [--origin <url>] [--no-open]
 
-## Device auth notes (strict vs fallback)
+--port <n>        Port to listen on (default: 3000)
+--host <addr>     Host to bind to (default: 127.0.0.1)
+--gateway <url>   OpenClaw gateway WS URL (default: ws://127.0.0.1:18789)
+--token <token>   Gateway token (sets CLAWDBOT_GATEWAY_TOKEN)
+--password <pw>   Gateway password (sets CLAWDBOT_GATEWAY_PASSWORD)
+--origin <url>    Origin header for backend WS (sets OPENCAMI_ORIGIN)
+--no-open         Don't open browser on start
+-h, --help        Show help
+```
+
+## Configuration
 
-OpenCami uses strict device-auth-compatible connect params by default.
+You can also set env vars instead of flags:
 
-- **Strict mode (default):** `OPENCAMI_DEVICE_AUTH_FALLBACK` unset/false
-- **Fallback mode (compatibility):** set `OPENCAMI_DEVICE_AUTH_FALLBACK=true`
+```bash
+CLAWDBOT_GATEWAY_URL=ws://127.0.0.1:18789
+CLAWDBOT_GATEWAY_TOKEN=...
+OPENCAMI_ORIGIN=https://<magicdns>:3001   # only needed for remote HTTPS
+```
 
-Fallback mode retries connect without device identity metadata if strict handshake fails.
-Use fallback only when needed for compatibility, and prefer strict mode long-term.
+## Troubleshooting (quick)
+
+- **"origin not allowed"** → add the exact URL to `gateway.controlUI.allowedOrigins` *and* pass the same value as `--origin` / `OPENCAMI_ORIGIN` (exact match, no trailing `/`).
+- **Pairing required** → approve the device in OpenClaw (`openclaw devices list/approve`).
+- **Fallback (only if needed):** `OPENCAMI_DEVICE_AUTH_FALLBACK=1`
 
 ---
 
@@ -152,28 +115,32 @@ Use fallback only when needed for compatibility, and prefer strict mode long-ter
 Cause: gateway rejected browser origin.
 
 Fix:
-1. Add origin to `gateway.controlUi.allowedOrigins`
-2. Set identical `OPENCAMI_ORIGIN` in OpenCami env
+1. Add origin to `gateway.controlUI.allowedOrigins` (exact match, no trailing `/`)
+2. Set identical `OPENCAMI_ORIGIN` (or `--origin`) in OpenCami
 3. Restart gateway (`openclaw gateway restart`)
 
-### Missing scope `operator.read`
+### Missing scope `operator.admin`
 
-Cause: gateway auth succeeded but token/permissions did not include required operator scope.
+Cause: gateway auth succeeded but the device was paired with insufficient scopes.
 
-Fix:
-- Use a token/password with operator access
-- Verify gateway auth/scopes in OpenClaw
-- Reconnect after updating credentials
+Fix (v1.8.5+): delete the device identity and let OpenCami re-pair automatically:
+
+```bash
+rm ~/.opencami/identity/device.json
+# then restart OpenCami — it will re-pair with full scopes
+```
 
-### Pairing required / device auth connect issues
+### Pairing required / device pending approval
 
-If strict connect fails in your deployment:
+On first connect, OpenCami registers itself as a device on the gateway. Starting with v1.8.5, this happens automatically with full scopes (`operator.admin`, `operator.approvals`, `operator.pairing`) — no manual config required.
 
+If you see a "device pending" error:
 ```bash
-OPENCAMI_DEVICE_AUTH_FALLBACK=true
+openclaw devices list    # find the pending device
+openclaw devices approve <deviceId>
 ```
 
-Then restart OpenCami and retry. Keep this as a compatibility fallback, not the default.
+After approval, OpenCami reconnects and stores a `deviceToken` for future sessions (no shared token needed).
 
 ### Can’t connect to gateway at all
 

package/dist/client/assets/{CSPContext-DeJH85nm.js → CSPContext-6t3O1emU.js}

@@ -1 +1 @@
-import{r as t}from"./main-CgwdHc9W.js";const e=t.createContext(void 0),o={disableStyleElements:!1};function s(){return t.useContext(e)??o}export{s as u};
+import{r as t}from"./main-Dq6jpr6-.js";const e=t.createContext(void 0),o={disableStyleElements:!1};function s(){return t.useContext(e)??o}export{s as u};

package/dist/client/assets/{DirectionContext-CxhRpXkm.js → DirectionContext-C6goXEY_.js}

@@ -1 +1 @@
-import{r as l}from"./main-CgwdHc9W.js";const E=["top","right","bottom","left"],p=Math.min,h=Math.max,L=Math.round,k=Math.floor,q=t=>({x:t,y:t}),x={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function R(t,e,n){return h(t,p(e,n))}function T(t,e){return typeof t=="function"?t(e):t}function m(t){return t.split("-")[0]}function g(t){return t.split("-")[1]}function b(t){return t==="x"?"y":"x"}function A(t){return t==="y"?"height":"width"}const P=new Set(["top","bottom"]);function y(t){return P.has(m(t))?"y":"x"}function M(t){return b(y(t))}function v(t,e,n){n===void 0&&(n=!1);const s=g(t),i=M(t),o=A(i);let r=i==="x"?s===(n?"end":"start")?"right":"left":s==="start"?"bottom":"top";return e.reference[o]>e.floating[o]&&(r=a(r)),[r,a(r)]}function z(t){const e=a(t);return[c(t),e,c(e)]}function c(t){return t.replace(/start|end/g,e=>d[e])}const u=["left","right"],f=["right","left"],O=["top","bottom"],S=["bottom","top"];function C(t,e,n){switch(t){case"top":case"bottom":return n?e?f:u:e?u:f;case"left":case"right":return e?O:S;default:return[]}}function B(t,e,n,s){const i=g(t);let o=C(m(t),n==="start",s);return i&&(o=o.map(r=>r+"-"+i),e&&(o=o.concat(o.map(c)))),o}function a(t){return t.replace(/left|right|bottom|top/g,e=>x[e])}function w(t){return{top:0,right:0,bottom:0,left:0,...t}}function F(t){return typeof t!="number"?w(t):{top:t,right:t,bottom:t,left:t}}function G(t){const{x:e,y:n,width:s,height:i}=t;return{width:s,height:i,top:n,left:e,right:e+s,bottom:n+i,x:e,y:n}}const j=l.createContext(void 0);function H(){return l.useContext(j)?.direction??"ltr"}export{y as a,a as b,z as c,B as d,T as e,k as f,m as g,v as h,g as i,h as j,M as k,F as l,p as m,G as n,A as o,R as p,b as q,L as r,E as s,q as t,H as u};
+import{r as l}from"./main-Dq6jpr6-.js";const E=["top","right","bottom","left"],p=Math.min,h=Math.max,L=Math.round,k=Math.floor,q=t=>({x:t,y:t}),x={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function R(t,e,n){return h(t,p(e,n))}function T(t,e){return typeof t=="function"?t(e):t}function m(t){return t.split("-")[0]}function g(t){return t.split("-")[1]}function b(t){return t==="x"?"y":"x"}function A(t){return t==="y"?"height":"width"}const P=new Set(["top","bottom"]);function y(t){return P.has(m(t))?"y":"x"}function M(t){return b(y(t))}function v(t,e,n){n===void 0&&(n=!1);const s=g(t),i=M(t),o=A(i);let r=i==="x"?s===(n?"end":"start")?"right":"left":s==="start"?"bottom":"top";return e.reference[o]>e.floating[o]&&(r=a(r)),[r,a(r)]}function z(t){const e=a(t);return[c(t),e,c(e)]}function c(t){return t.replace(/start|end/g,e=>d[e])}const u=["left","right"],f=["right","left"],O=["top","bottom"],S=["bottom","top"];function C(t,e,n){switch(t){case"top":case"bottom":return n?e?f:u:e?u:f;case"left":case"right":return e?O:S;default:return[]}}function B(t,e,n,s){const i=g(t);let o=C(m(t),n==="start",s);return i&&(o=o.map(r=>r+"-"+i),e&&(o=o.concat(o.map(c)))),o}function a(t){return t.replace(/left|right|bottom|top/g,e=>x[e])}function w(t){return{top:0,right:0,bottom:0,left:0,...t}}function F(t){return typeof t!="number"?w(t):{top:t,right:t,bottom:t,left:t}}function G(t){const{x:e,y:n,width:s,height:i}=t;return{width:s,height:i,top:n,left:e,right:e+s,bottom:n+i,x:e,y:n}}const j=l.createContext(void 0);function H(){return l.useContext(j)?.direction??"ltr"}export{y as a,a as b,z as c,B as d,T as e,k as f,m as g,v as h,g as i,h as j,M as k,F as l,p as m,G as n,A as o,R as p,b as q,L as r,E as s,q as t,H as u};