openmausbot 0.1.72 → 0.1.74

package/dist-server/server/workspace-backup.js

@@ -32,7 +32,7 @@ const EXCLUSION_NOTES = [
     "External project folders, CLI login homes, browser session homes, OS keychains, companion devices and other servers.",
     "VM/container disk layers and remote cloud data; durable files inside this workspace are included.",
 ];
-const RESTORE_WARNING = "Restoring pauses routines, webhooks and calendar calls, and does not resume pending delegations or queued runs. Definitions and historical receipts are retained; review before enabling them again.";
+const RESTORE_WARNING = "Restoring pauses routines, webhooks and calendar calls, and does not resume pending delegations, queued chat messages or queued runs. Definitions and historical receipts are retained; review before enabling them again.";
 function excluded(name) {
     return EXCLUDED.has(name) || excludedWorkspaceAuthPath(name) || name.startsWith("openmausbot-server.lease.") || name.startsWith("box-create-requests.lock.") || /^perm-[A-Za-z0-9_-]+\.sock$/.test(name);
 }
@@ -887,17 +887,32 @@ function prepareRestore(dataDir, id, manifest) {
             });
     }
     const dbPath = join(prepared, "messages.db");
-    if (existsSync(dbPath) && manifest.sourceDataDir !== resolve(dataDir)) {
+    if (existsSync(dbPath)) {
         const db = new DatabaseSync(dbPath);
         try {
-            const update = db.prepare("UPDATE messages SET json = ?, text = ? WHERE thread_id = ? AND id = ?");
             db.exec("BEGIN");
-            for (const row of db.prepare("SELECT thread_id, id, json FROM messages").iterate()) {
-                const message = JSON.parse(String(row.json));
-                rebaseMessage(message, manifest.sourceDataDir, resolve(dataDir));
-                const json = JSON.stringify(message);
-                if (json !== row.json)
-                    update.run(json, record(message) && typeof message.text === "string" ? message.text : null, row.thread_id, row.id);
+            if (manifest.sourceDataDir !== resolve(dataDir)) {
+                const update = db.prepare("UPDATE messages SET json = ?, text = ? WHERE thread_id = ? AND id = ?");
+                for (const row of db.prepare("SELECT thread_id, id, json FROM messages").iterate()) {
+                    const message = JSON.parse(String(row.json));
+                    rebaseMessage(message, manifest.sourceDataDir, resolve(dataDir));
+                    const json = JSON.stringify(message);
+                    if (json !== row.json)
+                        update.run(json, record(message) && typeof message.text === "string" ? message.text : null, row.thread_id, row.id);
+                }
+            }
+            // Import is not a server restart: the source may still be running.
+            // Keep accepted words/receipts for review, but never execute a copy of
+            // its pending work (including when restoring to the original home).
+            if (db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'chat_followups'").get()) {
+                const pause = db.prepare("UPDATE chat_followups SET status = 'interrupted', payload = ? WHERE id = ?");
+                for (const row of db.prepare("SELECT id, payload FROM chat_followups WHERE status IN ('pending', 'dispatching', 'interrupted')").iterate()) {
+                    const payload = JSON.parse(String(row.payload));
+                    rebaseMessage(payload, manifest.sourceDataDir, resolve(dataDir));
+                    if (record(payload))
+                        delete payload.prompt;
+                    pause.run(JSON.stringify(payload), row.id);
+                }
             }
             db.exec("COMMIT");
         }

package/dist-server/shared/approval-mode.js

@@ -1,9 +1,17 @@
-/** The four approval levels exposed by the desktop app. */
-export const APPROVAL_MODES = ["ask", "auto", "full", "custom"];
-/** Only providers with an implemented permission mapping may expose elevation. */
+/** The approval levels exposed by the app. Each one is a provider's own
+ * permission mode, passed through: OpenMausBot never decides a permission
+ * itself (Full access aside, which answers residual prompts because that is
+ * what the person granted). The order is the order the selector shows. */
+export const APPROVAL_MODES = ["ask", "edits", "auto", "full", "custom"];
+/** Only providers with an implemented permission mapping may expose a level.
+ * `edits` (auto-accept edits) exists where the engine has such a mode:
+ * Claude and Grok `acceptEdits`, Antigravity `auto_edit`. Codex's Ask already
+ * runs `workspace-write`, so an edits level would change nothing there. */
 export function supportsApprovalMode(driverKind, mode) {
     if (mode === "custom")
         return driverKind === "codex";
+    if (mode === "edits")
+        return ["claudeAgent", "grokAgent", "antigravityAgent"].includes(driverKind ?? "");
     if (mode !== "full")
         return true;
     return ["codex", "claudeAgent", "antigravityAgent", "cursorAgent", "grokAgent", "opencodeGo"].includes(driverKind ?? "");
@@ -11,13 +19,6 @@ export function supportsApprovalMode(driverKind, mode) {
 export function hasNativeAutoReview(driverKind) {
     return ["codex", "claudeAgent", "cursorAgent", "grokAgent"].includes(driverKind ?? "");
 }
-/** A native reviewer has already declined to decide, or Auto has no native
- * equivalent. Never second-guess that request with the app's heuristic rules.
- * Antigravity and OpenCode Full approve residual ACP tool-permission requests
- * through the app's explicit Full-access grant. Questions remain interactive. */
-export function requiresNativeApproval(driverKind, mode) {
-    return mode === "auto" || (mode === "full" && ["claudeAgent", "cursorAgent", "grokAgent"].includes(driverKind));
-}
 export function isApprovalMode(value) {
     return typeof value === "string" && APPROVAL_MODES.includes(value);
 }

package/dist-server/vps-container-mcp.js

@@ -15114,6 +15114,14 @@ var featureConfigSchema = external_exports.object({
    * also has its own switch. */
   browser: external_exports.boolean().optional()
 });
+var onboardingConfigSchema = external_exports.object({
+  /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
+  completedAt: external_exports.string().trim().max(40).optional(),
+  /** Which welcome flow was completed; a newer flow may re-show itself. */
+  version: external_exports.number().int().min(0).max(1e3).optional(),
+  reelSeen: external_exports.boolean().optional(),
+  hintsSeen: external_exports.array(external_exports.string().trim().min(1).max(60)).max(100).optional()
+}).strict();
 var instanceConfigSchema = external_exports.object({
   driver: external_exports.string().min(1),
   displayName: optionalText,
@@ -15207,6 +15215,7 @@ var appConfigSchema = external_exports.object({
   threads: external_exports.object({ maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS) }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
+  onboarding: onboardingConfigSchema.optional(),
   browserProfiles: browserProfilesSchema.optional(),
   instances: instanceConfigMapSchema.optional(),
   /** User-configured MCP servers, mounted into every capable engine. Kept

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.72",
+  "version": "0.1.74",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",