openmausbot 0.1.65 → 0.1.67

package/dist-server/vps-container-mcp.js

@@ -25,7 +25,12 @@ function createControlClient(options) {
       const res = await fetchImpl(url2, { headers, signal: AbortSignal.timeout(2e3) });
       if (!res.ok) return UNAVAILABLE;
       const body = await res.json().catch(() => null);
-      return { held: body?.held === true, helpOpen: body?.helpOpen === true };
+      if (typeof body?.held !== "boolean" || typeof body?.helpOpen !== "boolean") return UNAVAILABLE;
+      return {
+        held: body.held,
+        helpOpen: body.helpOpen,
+        ...typeof body.blockedReason === "string" && body.blockedReason.trim() ? { blockedReason: body.blockedReason } : {}
+      };
     } catch {
       return UNAVAILABLE;
     }
@@ -276,7 +281,7 @@ function createGateInterceptor(options) {
         options.forward(line);
         return;
       }
-      const held = await options.isHeld().catch(() => false);
+      const held = await options.isHeld().catch(() => true);
       if (!held) {
         options.forward(line);
         return;
@@ -285,10 +290,11 @@ function createGateInterceptor(options) {
         JSON.stringify({
           jsonrpc: "2.0",
           id: frame.id ?? null,
-          result: { content: [{ type: "text", text: refusalText }], isError: true }
+          result: { content: [{ type: "text", text: options.getRefusalReason?.() ?? refusalText }], isError: true }
         })
       );
     });
+    return queue;
   };
 }
 function createMcpBridgeInterceptor(options) {
@@ -296,8 +302,11 @@ function createMcpBridgeInterceptor(options) {
     isHeld: options.gate.isHeld,
     forward: options.forward,
     refuse: options.answer,
-    refusalText: options.gate.refusalText
-  }) : options.forward;
+    refusalText: options.gate.refusalText,
+    getRefusalReason: options.gate.getRefusalReason
+  }) : (line) => {
+    options.forward(line);
+  };
   return (line) => {
     let frame = null;
     try {
@@ -310,37 +319,47 @@ function createMcpBridgeInterceptor(options) {
       }
       return;
     }
-    afterPing(line);
+    return afterPing(line);
   };
 }
 function runMcpBridge(options) {
   const child = spawn(options.command, options.args, {
     shell: false,
-    env: { ...process.env, PATH: augmentedPath() },
+    env: options.env ?? { ...process.env, PATH: augmentedPath() },
     stdio: ["pipe", "pipe", "pipe"]
   });
   child.stdin.on("error", () => {
   });
   child.stderr.pipe(process.stderr);
   const client = options.gate ? createControlClient({ url: options.gate.url, token: options.gate.token }) : null;
+  let refusalReason;
   const answer = (line) => process.stdout.write(line + "\n");
   const forward = (line) => child.stdin.write(line + "\n");
-  const inbound = createLineSplitter(
-    createMcpBridgeInterceptor({
-      answer,
-      forward,
-      ...options.gate ? {
-        gate: {
-          isHeld: async () => (await client.state(true)).held
-        }
-      } : {}
-    })
-  );
+  const intercept = createMcpBridgeInterceptor({
+    answer,
+    forward,
+    ...options.gate ? {
+      gate: {
+        isHeld: async () => {
+          refusalReason = void 0;
+          const state = await client.state(true);
+          refusalReason = state.blockedReason;
+          return state.held;
+        },
+        getRefusalReason: () => refusalReason
+      }
+    } : {}
+  });
+  let pendingInput = Promise.resolve();
+  const inbound = createLineSplitter((line) => {
+    const completion = intercept(line);
+    if (completion) pendingInput = completion;
+  });
   const onStdin = (chunk) => inbound.push(chunk);
   process.stdin.on("data", onStdin);
   process.stdin.on("end", () => {
     inbound.flush();
-    child.stdin.end();
+    void pendingInput.finally(() => child.stdin.end());
   });
   const outbound = createLineSplitter((line) => process.stdout.write(line + "\n"));
   child.stdout.on("data", (chunk) => outbound.push(chunk));
@@ -15088,6 +15107,9 @@ var defaultModelSelectionSchema = external_exports.object({
 var appConfigSchema = external_exports.object({
   /** Verified by the dedicated domain endpoint, never a generic config patch. */
   customDomain: external_exports.string().optional(),
+  /** Who may sign in with an emailed code (server/account-signin.ts):
+   * addresses or `@domain` entries; admins get every scope, members chat only. */
+  signIn: external_exports.object({ admins: external_exports.array(external_exports.string().max(320)).max(500).optional(), members: external_exports.array(external_exports.string().max(320)).max(5e3).optional() }).optional(),
   defaultModelSelection: defaultModelSelectionSchema.optional(),
   /** CLI-only launch preferences. Never enable remote access implicitly. */
   cliStartup: external_exports.object({
@@ -15148,7 +15170,9 @@ function resolveProxy(relative) {
   return existsSync2(source) ? source : join3(SERVER_ROOT, `${relative}.js`);
 }
 var SPAWNED_PROXIES = {
+  browser: resolveProxy("browser-proxy"),
   computer: resolveProxy("computer-proxy"),
+  localComputer: resolveProxy("local-computer-proxy"),
   permission: resolveProxy("permission-proxy"),
   containerMcp: resolveProxy("container-mcp"),
   vpsContainerMcp: resolveProxy("vps-container-mcp"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",