openmausbot 0.1.66 → 0.1.68

package/dist-server/vps-container-mcp.js

@@ -25,7 +25,12 @@ function createControlClient(options) {
       const res = await fetchImpl(url2, { headers, signal: AbortSignal.timeout(2e3) });
       if (!res.ok) return UNAVAILABLE;
       const body = await res.json().catch(() => null);
-      return { held: body?.held === true, helpOpen: body?.helpOpen === true };
+      if (typeof body?.held !== "boolean" || typeof body?.helpOpen !== "boolean") return UNAVAILABLE;
+      return {
+        held: body.held,
+        helpOpen: body.helpOpen,
+        ...typeof body.blockedReason === "string" && body.blockedReason.trim() ? { blockedReason: body.blockedReason } : {}
+      };
     } catch {
       return UNAVAILABLE;
     }
@@ -276,7 +281,7 @@ function createGateInterceptor(options) {
         options.forward(line);
         return;
       }
-      const held = await options.isHeld().catch(() => false);
+      const held = await options.isHeld().catch(() => true);
       if (!held) {
         options.forward(line);
         return;
@@ -285,10 +290,11 @@ function createGateInterceptor(options) {
         JSON.stringify({
           jsonrpc: "2.0",
           id: frame.id ?? null,
-          result: { content: [{ type: "text", text: refusalText }], isError: true }
+          result: { content: [{ type: "text", text: options.getRefusalReason?.() ?? refusalText }], isError: true }
         })
       );
     });
+    return queue;
   };
 }
 function createMcpBridgeInterceptor(options) {
@@ -296,8 +302,11 @@ function createMcpBridgeInterceptor(options) {
     isHeld: options.gate.isHeld,
     forward: options.forward,
     refuse: options.answer,
-    refusalText: options.gate.refusalText
-  }) : options.forward;
+    refusalText: options.gate.refusalText,
+    getRefusalReason: options.gate.getRefusalReason
+  }) : (line) => {
+    options.forward(line);
+  };
   return (line) => {
     let frame = null;
     try {
@@ -310,37 +319,47 @@ function createMcpBridgeInterceptor(options) {
       }
       return;
     }
-    afterPing(line);
+    return afterPing(line);
   };
 }
 function runMcpBridge(options) {
   const child = spawn(options.command, options.args, {
     shell: false,
-    env: { ...process.env, PATH: augmentedPath() },
+    env: options.env ?? { ...process.env, PATH: augmentedPath() },
     stdio: ["pipe", "pipe", "pipe"]
   });
   child.stdin.on("error", () => {
   });
   child.stderr.pipe(process.stderr);
   const client = options.gate ? createControlClient({ url: options.gate.url, token: options.gate.token }) : null;
+  let refusalReason;
   const answer = (line) => process.stdout.write(line + "\n");
   const forward = (line) => child.stdin.write(line + "\n");
-  const inbound = createLineSplitter(
-    createMcpBridgeInterceptor({
-      answer,
-      forward,
-      ...options.gate ? {
-        gate: {
-          isHeld: async () => (await client.state(true)).held
-        }
-      } : {}
-    })
-  );
+  const intercept = createMcpBridgeInterceptor({
+    answer,
+    forward,
+    ...options.gate ? {
+      gate: {
+        isHeld: async () => {
+          refusalReason = void 0;
+          const state = await client.state(true);
+          refusalReason = state.blockedReason;
+          return state.held;
+        },
+        getRefusalReason: () => refusalReason
+      }
+    } : {}
+  });
+  let pendingInput = Promise.resolve();
+  const inbound = createLineSplitter((line) => {
+    const completion = intercept(line);
+    if (completion) pendingInput = completion;
+  });
   const onStdin = (chunk) => inbound.push(chunk);
   process.stdin.on("data", onStdin);
   process.stdin.on("end", () => {
     inbound.flush();
-    child.stdin.end();
+    void pendingInput.finally(() => child.stdin.end());
   });
   const outbound = createLineSplitter((line) => process.stdout.write(line + "\n"));
   child.stdout.on("data", (chunk) => outbound.push(chunk));
@@ -14936,6 +14955,7 @@ var LEGACY_BROWSER_PROFILE_ID = /^[A-Za-z0-9_-]{1,40}$/;
 var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MAX_CONCURRENT_BOT_THREADS = 10;
 var MIN_LOCAL_VM_MAX_INSTANCES = 1;
 var MAX_LOCAL_VM_MAX_INSTANCES = 4;
 function isValidSshAlias(value) {
@@ -15088,6 +15108,9 @@ var defaultModelSelectionSchema = external_exports.object({
 var appConfigSchema = external_exports.object({
   /** Verified by the dedicated domain endpoint, never a generic config patch. */
   customDomain: external_exports.string().optional(),
+  /** Who may sign in with an emailed code (server/account-signin.ts):
+   * addresses or `@domain` entries; admins get every scope, members chat only. */
+  signIn: external_exports.object({ admins: external_exports.array(external_exports.string().max(320)).max(500).optional(), members: external_exports.array(external_exports.string().max(320)).max(5e3).optional() }).optional(),
   defaultModelSelection: defaultModelSelectionSchema.optional(),
   /** CLI-only launch preferences. Never enable remote access implicitly. */
   cliStartup: external_exports.object({
@@ -15118,6 +15141,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  threads: external_exports.object({ maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS) }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   browserProfiles: browserProfilesSchema.optional(),
@@ -15150,6 +15174,7 @@ function resolveProxy(relative) {
 var SPAWNED_PROXIES = {
   browser: resolveProxy("browser-proxy"),
   computer: resolveProxy("computer-proxy"),
+  localComputer: resolveProxy("local-computer-proxy"),
   permission: resolveProxy("permission-proxy"),
   containerMcp: resolveProxy("container-mcp"),
   vpsContainerMcp: resolveProxy("vps-container-mcp"),

package/enterprise/LICENSE

@@ -0,0 +1,32 @@
+OpenMausBot Enterprise License
+
+Copyright (c) 2026 Milind Soni. All rights reserved.
+
+This directory ("enterprise") and everything in it is NOT covered by the
+Apache License 2.0 that applies to the rest of this repository.
+
+1. Source-available. You may read, build, and evaluate this code, and you may
+   modify it for your own evaluation, so that you know exactly what runs.
+   Development, test, and evaluation use is free of charge.
+
+2. Use requires a license key. Running this code with enterprise features
+   enabled in production requires a valid, unexpired license key issued by
+   the copyright holder for your organization, under a separate agreement
+   that sets the licensed features, seats, and term.
+
+3. No redistribution. You may not redistribute, sublicense, sell, host for
+   third parties, or offer as a service this directory or any modified
+   version of it, and you may not remove, disable, or circumvent the license
+   check. Hosting for third parties, reselling, and white-labelling the
+   product for third parties are permitted only under a written partner
+   agreement with the copyright holder.
+
+4. Everything else is open source. Delete this directory and the remainder
+   of the repository builds and runs as the open-source edition under
+   Apache 2.0, with no obligation under this license.
+
+5. No warranty. This code is provided "as is", without warranty of any kind.
+   To the extent permitted by law, the copyright holder is not liable for
+   any damages arising from its use.
+
+Questions and license keys: soni.mil2001@gmail.com

package/enterprise/README.md

@@ -0,0 +1,89 @@
+# OpenMausBot Enterprise
+
+Source-available features for hosted and white-labelled deployments. This
+folder has its own [LICENSE](./LICENSE); everything outside it is Apache 2.0.
+
+**Delete this folder and you have the open-source edition.** Core only
+reaches the layer through one hook point, `server/enterprise.ts`, which
+loads `enterprise/server/index.ts` if it exists and otherwise reports the
+open-source edition. No core file imports anything from here.
+
+## How a deployment turns enterprise
+
+Set `OMB_LICENSE_KEY` on the server. The key is `omb1.<claims>.<signature>`:
+the claims are visible JSON (who it is for, which entitlements, when it
+expires), signed with an Ed25519 key whose public half is baked into
+`server/license.ts`. Verification is offline, and one build serves every
+customer, because the key decides the feature set rather than the code.
+
+`GET /api/edition` reports the outcome:
+
+```json
+{ "edition": "enterprise", "customer": "Acme", "features": ["sso", "whitelabel"], "expiresAt": "2027-09-02" }
+{ "edition": "oss", "features": [], "notice": "OMB_LICENSE_KEY expired on 2027-09-02; renew it to keep enterprise features" }
+```
+
+A missing, altered, or expired key never stops the server: it runs the
+open-source edition and the notice says what to fix.
+
+## Entitlement ids
+
+| id | grants |
+|---|---|
+| `whitelabel` | product name, tagline, accent colour, logo, favicon and support link from `brand.json` (below) |
+| `sso` | identity-header trust behind an OIDC proxy |
+| `admin` | the admin panel routes |
+| `budgets` | per-bot and per-section spend limits |
+
+Core gates a feature with `entitled("id")` from `server/enterprise.ts`.
+Unknown ids are carried in the key but grant nothing, so keys can be issued
+ahead of a feature landing.
+
+## Issuing keys
+
+```sh
+node enterprise/scripts/issue-license.mjs keygen          # once; prints the public key to add to license.ts
+node enterprise/scripts/issue-license.mjs issue --customer "Acme" --features whitelabel,sso --expires 2027-09-02
+```
+
+The signing key lives outside the repo (default
+`~/.config/openmausbot-enterprise/signing-key.json`). Rotate by generating a
+new pair and appending its public key: keys signed by older pairs keep
+working until they expire.
+
+## What goes where
+
+- Could any open-source user want it? It goes in core, as a public PR.
+- Org-, admin- or tier-flavoured, or something the next enterprise lead
+  would be shown? It lives here, behind an entitlement.
+- Customer-specific brand, skills, packages, connectors? The customer's own
+  repo: data and config, never a fork.
+
+## White-label (`whitelabel`)
+
+Put a `brand.json` in the server's data dir (`OMB_DATA_DIR`, the `/data`
+volume in Docker) or point `OMB_BRAND_FILE` at one:
+
+```json
+{
+  "name": "Reliable Platform",
+  "tagline": "Back office, on autopilot",
+  "accent": "#1D4ED8",
+  "logo": "data:image/svg+xml;base64,…",
+  "favicon": "data:image/png;base64,…",
+  "supportUrl": "https://help.example.com"
+}
+```
+
+Only `name` is required. `logo` is an inline `data:image/…` URI or an
+`https://` URL; `accent` is a 6-digit hex colour, and the text colour on it
+is derived for contrast. The server reads the file on every `GET /api/brand`,
+so edits show on the next reload; the app fetches it before the first paint,
+so the window never flashes the default name. An unlicensed server, or a
+file with a mistake, keeps the default brand and says why in `/api/brand`
+and the startup log.
+
+What `brand.json` cannot change, because it is baked at packaging time: the
+desktop app's bundle and menu-bar name, installer names, the macOS
+permission prompts, the iOS app's name, and the helper apps' paths. A fully
+rebranded desktop build is a per-customer packaging job, not config.