openmausbot 0.1.68 → 0.1.70

package/dist-server/server/store.js

@@ -26,6 +26,7 @@ export function isProjectEmoji(value) {
 const TASK_PATCH_FIELDS = [
     "title", "projectId", "modelSelection", "approvalMode", "autoApprove", "alwaysAllow",
     "unread", "rewound", "pinnedMessageId", "resumeCursors", "lastInstanceId", "cwd",
+    "routineRunId",
 ];
 /** Everything the BOT authored is scrubbed of content-shaped secrets before
  * it is stored: its reply text, a tool title (an ACP engine's title can be
@@ -1444,7 +1445,7 @@ export class Store {
     }
     /** A fresh context on the same bot: new thread, new session, same
      * persona/tools/computer. Becomes the active task. */
-    createTask(botId, title, activate = true, projectId) {
+    createTask(botId, title, activate = true, projectId, openedBy) {
         const bot = this.bot(botId);
         if (!bot)
             return null;
@@ -1455,6 +1456,7 @@ export class Store {
             title: title?.trim().slice(0, 80) || UNTITLED_THREAD,
             createdAt: Date.now(),
             ...(projectId ? { projectId } : {}),
+            ...(openedBy ? { openedBy: structuredClone(openedBy) } : {}),
             resumeCursors: {},
             modelSelection: structuredClone(bot.modelSelection),
             approvalMode: approvalModeFor(bot),
@@ -1472,6 +1474,20 @@ export class Store {
         this.emit({ type: "bot", botId });
         return task;
     }
+    /** Attach (or complete) the opener record after the thread exists — the
+     * handoff id is only known once the thread it targets has an id, so a
+     * peer-opened thread is created first and stamped second. Never reachable
+     * from the HTTP task PATCH: openedBy is not a TASK_PATCH_FIELD. */
+    setTaskOpenedBy(botId, threadId, openedBy) {
+        const bot = this.bot(botId);
+        const task = this.taskByThread(botId, threadId);
+        if (!bot || !task)
+            return null;
+        task.openedBy = structuredClone(openedBy);
+        this.saveBots();
+        this.emit({ type: "bot", botId });
+        return task;
+    }
     switchTask(botId, threadId) {
         const bot = this.bot(botId);
         const task = bot?.tasks?.find((t) => t.threadId === threadId);
@@ -1503,10 +1519,12 @@ export class Store {
         if (!bot.tasks.some((t) => t.threadId === threadId))
             return null;
         bot.tasks = bot.tasks.filter((t) => t.threadId !== threadId);
-        this.deleteThreadRecord(threadId);
-        if (bot.threadId === threadId) {
-            this.mirrorActiveTask(bot, bot.tasks[0]);
+        const visible = bot.tasks.find((task) => !task.routineRunId)
+            ?? this.createTask(botId, undefined, bot.threadId === threadId);
+        if (bot.threadId === threadId || this.taskByThread(botId, bot.threadId)?.routineRunId) {
+            this.mirrorActiveTask(bot, visible);
         }
+        this.deleteThreadRecord(threadId);
         bot.unread = bot.tasks.some((task) => task.unread);
         this.refreshBotActivity(bot);
         this.saveBots();

package/dist-server/server/system-prompt.js

@@ -36,6 +36,7 @@ export function computerPrompt(kind) {
 }
 export const COMPOSIO_PROMPT = " The user's connected apps (Gmail, Calendar, Slack, Notion, and the rest) are reachable through the composio tools — find the right one with COMPOSIO_SEARCH_TOOLS, read its arguments with COMPOSIO_GET_TOOL_SCHEMAS, then run it with COMPOSIO_MULTI_EXECUTE_TOOL. Reach for them before telling the user you have no access to a service.";
 export const CREDENTIAL_PROMPT = " If a supported API key is missing, use request_credential to create a secure credential request. A freshly QR-paired mobile app or the desktop app can show the secure entry card. Never claim it opened unless the request succeeded, and never ask the user to paste credentials into chat.";
+export const THREADS_PROMPT = " A thread is one conversation with its own history and its own run; a bot can have several running at once, and the person sees them as rows under that bot. Use start_thread to open one on yourself for separate work, or on a teammate to hand them a job that should run on its own. Use list_threads to see how the ones you opened are going. When you mention a thread to the person, write its title as #Title so it links. Do not use a ticket comment, a note, or a room post as a stand-in for a thread.";
 export const ROUTINE_PROMPT = " If the user explicitly asks to list or review, schedule, run, or change routines, use list_routines and propose_routine or propose_routine_action. A proposal is not applied until the user confirms its in-app card, so never claim the action completed before that confirmation.";
 export const ROUTINE_EXECUTION_PROMPT = " Execute this routine now: use available peer tools for required handoffs rather than merely announcing that you will wait; after an accepted delegation, end this turn for automatic resumption, and report a concrete blocker if no handoff is possible.";
 export const LEARN_PROMPT = " If the user sends /learn or asks you to save a reusable procedure from this work, use skills_list and skill_manage. Create new skills; update an existing learned skill only when the user explicitly asks to revise that exact name. Include source provenance and wait for the review card decision.";

package/dist-server/server/team-backup.js

@@ -29,6 +29,11 @@ export function createTeamBackup(store, routines, name) {
         const tasks = record.tasks?.length ? record.tasks : [{ threadId: record.threadId, title: "Conversation", createdAt: record.createdAt }];
         return tasks.map((task) => ({
             key: task.threadId, title: task.title, createdAt: task.createdAt,
+            // Who opened the thread travels; the handoff id does not — the
+            // delegation ledger is process-local and never part of a backup.
+            openedBy: "openedBy" in task && task.openedBy
+                ? { botId: task.openedBy.botId, name: task.openedBy.name, at: task.openedBy.at }
+                : undefined,
             activeLeafId: store.activeLeaf(task.threadId),
             messages: store.messagesFor(task.threadId).map((message) => ({
                 id: message.id, role: message.role, text: messageText(message), at: message.at,
@@ -131,10 +136,19 @@ export function importTeamBackup(store, routines, input, selection) {
         }
         for (const source of backup.bots) {
             const bot = store.bot(botIds.get(source.key));
-            const tasks = source.tasks.map((task, i) => ({
-                threadId: i === 0 ? bot.threadId : newId(), title: task.title, createdAt: task.createdAt, resumeCursors: {},
-                modelSelection: structuredClone(selection), activity: "idle", busy: false, unread: false,
-            }));
+            const tasks = source.tasks.map((task, i) => {
+                const record = {
+                    threadId: i === 0 ? bot.threadId : newId(), title: task.title, createdAt: task.createdAt, resumeCursors: {},
+                    modelSelection: structuredClone(selection), activity: "idle", busy: false, unread: false,
+                };
+                // Same rule as a message's `from`: the opener is remapped to its
+                // imported twin, and an opener outside this backup leaves no record
+                // rather than a bot id that resolves to a stranger.
+                const opener = task.openedBy && botIds.get(task.openedBy.botId);
+                if (task.openedBy && opener)
+                    record.openedBy = { botId: opener, name: task.openedBy.name, at: task.openedBy.at };
+                return record;
+            });
             // Own the task IDs before writing their transcripts, so rollback also
             // removes partially imported history if persistence fails midway.
             store.patchBot(bot.id, { tasks, threadId: tasks[source.tasks.findIndex((task) => task.key === source.activeTask)].threadId });

package/dist-server/shared/image-generation.js

@@ -0,0 +1,28 @@
+/** A deliberately configured Images API endpoint, not a provider-returned URL.
+ * Local HTTP is useful for self-hosted routers; internet endpoints require TLS. */
+export function normalizeImageGenerationUrl(value) {
+    const message = "Use an HTTPS API base URL, or HTTP for a local router, without passwords, query parameters or fragments";
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        throw new Error(message);
+    }
+    if (value.length > 2048 || url.username || url.password || url.search || url.hash)
+        throw new Error(message);
+    const host = url.hostname.toLowerCase();
+    const ipv4 = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/.exec(host);
+    const local = host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")
+        || host === "host.docker.internal" || host === "host.containers.internal"
+        || host === "[::1]" || /^\[f[cd][0-9a-f]{2}:/.test(host)
+        || (ipv4 && (Number(ipv4[1]) === 127 || Number(ipv4[1]) === 10
+            || (Number(ipv4[1]) === 192 && Number(ipv4[2]) === 168)
+            || (Number(ipv4[1]) === 172 && Number(ipv4[2]) >= 16 && Number(ipv4[2]) <= 31)));
+    if (url.protocol !== "https:" && !(url.protocol === "http:" && local))
+        throw new Error(message);
+    if (ipv4 && (Number(ipv4[1]) === 0 || (Number(ipv4[1]) === 169 && Number(ipv4[2]) === 254)))
+        throw new Error(message);
+    url.pathname = url.pathname.replace(/\/+$/, "").replace(/\/images\/generations$/, "");
+    return url.toString().replace(/\/+$/, "");
+}

package/dist-server/shared/team-backup.js

@@ -20,6 +20,7 @@ const task = z.object({
     key,
     title: z.string().max(2_000),
     createdAt: timestamp,
+    openedBy: z.object({ botId: key, name, at: timestamp }).optional(),
     activeLeafId: key.nullable(),
     messages: z.array(message).max(100_000),
 });

package/dist-server/vps-container-mcp.js

@@ -141,9 +141,11 @@ function windowsKnownDirs() {
 var cached = null;
 var probed = false;
 var loginShellPath = null;
+var registeredDirs = [];
 function augmentedPath() {
   if (cached === null) {
     cached = mergePaths([
+      ...registeredDirs.filter((d) => existsSync(d)),
       ...process.env.OMB_EXTRA_PATH ? process.env.OMB_EXTRA_PATH.split(delimiter) : [],
       ...process.env.PATH ? process.env.PATH.split(delimiter) : [],
       // Keep the last successful login-shell result while a rescan starts a
@@ -14933,6 +14935,25 @@ function date4(params) {
 // node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// shared/image-generation.ts
+function normalizeImageGenerationUrl(value) {
+  const message = "Use an HTTPS API base URL, or HTTP for a local router, without passwords, query parameters or fragments";
+  let url2;
+  try {
+    url2 = new URL(value.trim());
+  } catch {
+    throw new Error(message);
+  }
+  if (value.length > 2048 || url2.username || url2.password || url2.search || url2.hash) throw new Error(message);
+  const host = url2.hostname.toLowerCase();
+  const ipv43 = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/.exec(host);
+  const local = host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host === "host.docker.internal" || host === "host.containers.internal" || host === "[::1]" || /^\[f[cd][0-9a-f]{2}:/.test(host) || ipv43 && (Number(ipv43[1]) === 127 || Number(ipv43[1]) === 10 || Number(ipv43[1]) === 192 && Number(ipv43[2]) === 168 || Number(ipv43[1]) === 172 && Number(ipv43[2]) >= 16 && Number(ipv43[2]) <= 31);
+  if (url2.protocol !== "https:" && !(url2.protocol === "http:" && local)) throw new Error(message);
+  if (ipv43 && (Number(ipv43[1]) === 0 || Number(ipv43[1]) === 169 && Number(ipv43[2]) === 254)) throw new Error(message);
+  url2.pathname = url2.pathname.replace(/\/+$/, "").replace(/\/images\/generations$/, "");
+  return url2.toString().replace(/\/+$/, "");
+}
+
 // server/contracts.ts
 var EFFORT_LEVELS = ["none", "low", "medium", "high", "xhigh", "max"];
 
@@ -15133,8 +15154,25 @@ var appConfigSchema = external_exports.object({
    * engine: "elevenlabs" (default; needs a key) or "system" (the Mac's
    * built-in voices, no key). */
   tts: external_exports.object({ key: optionalText, voice: optionalText, provider: external_exports.enum(["elevenlabs", "system"]).optional() }).optional(),
-  /** OpenAI key used only by the in-process avatar image generator. */
-  imageGen: external_exports.object({ key: optionalText }).optional(),
+  /** Avatar provider credentials stay separate; choosing a router never reuses a cloud key. */
+  imageGen: external_exports.object({
+    provider: external_exports.enum(["openai", "xai", "custom"]).optional(),
+    key: optionalText,
+    customApiKey: optionalText,
+    customUrl: external_exports.string().trim().max(2048).transform((value, ctx) => {
+      if (!value) return "";
+      try {
+        return normalizeImageGenerationUrl(value);
+      } catch (error51) {
+        ctx.addIssue({ code: "custom", message: error51.message });
+        return external_exports.NEVER;
+      }
+    }).optional(),
+    customModel: external_exports.string().trim().max(200).refine(
+      (value) => !["\r", "\n", "\0"].some((character) => value.includes(character)),
+      "Use a model ID without control characters"
+    ).optional()
+  }).optional(),
   /** Non-secret profile details shown in the sidebar. */
   profile: external_exports.object({ name: optionalText, email: optionalText }).optional(),
   /** UI language override (BCP-47, lowercase). Empty/absent = follow the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.68",
+  "version": "0.1.70",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",