openmausbot 0.1.82 → 0.1.84

package/dist-server/shared/redact.js

@@ -0,0 +1,61 @@
+// Keeping secrets out of text that crosses a trust boundary — the native
+// protocol log, tool titles, activity chips. The log keeps the SHAPE and
+// loses the VALUES: a redacted entry still tells you a token was passed,
+// under which name, and how long it was — enough to debug "the proxy got
+// no token" without the token being there.
+//
+// Single home in shared/ so the client (task timeline) and the server
+// (redact.ts deep scrub, native tee) redact identically; server/redact.ts
+// re-exports redactSecretsInText under its historical path.
+/** Keep repeated redaction byte-for-byte stable. Persisted payloads can pass
+ * through both a content scrub and the store-wide scrub; re-masking our own
+ * marker would change its reported length (and any hash over the payload). */
+const REDACTION_MARKER = /^«redacted \d+ chars»$/;
+export const mask = (value) => (REDACTION_MARKER.test(value) ? value : `«redacted ${value.length} chars»`);
+// ── content-shaped secrets ────────────────────────────────────────────
+// High precision on purpose: a generic "long hex/base64" heuristic would
+// rewrite real code in the transcript, so only shapes that are unmistakably
+// credentials match.
+const KEY_PREFIXES = [
+    /\bom[dg]_[A-Za-z0-9_-]{43}(?![A-Za-z0-9_-])/g, // desktop device and model-only credentials
+    /\bsk-(?:ant-|proj-|live-|test-)?[A-Za-z0-9_-]{16,}/g, // anthropic / openai / stripe
+    /\bxai-[A-Za-z0-9_-]{20,}/g, // xai (grok)
+    /\bgsk_[A-Za-z0-9]{40,}/g, // groq
+    /\bhf_[A-Za-z0-9]{30,}/g, // hugging face
+    /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}/g, // github classic
+    /\bgithub_pat_[A-Za-z0-9_]{20,}/g, // github fine-grained
+    /\bxox[abposr]-[A-Za-z0-9-]{20,}/g, // slack
+    /\bAKIA[0-9A-Z]{16}\b/g, // aws access key id
+    /\bAIza[0-9A-Za-z_-]{30,}/g, // google api key
+    /\bnpm_[A-Za-z0-9]{20,}/g, // npm
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, // jwt
+];
+const BEARER = /(\bBearer\s+)([A-Za-z0-9._~+/=-]{12,})/g;
+const PEM_BLOCK = /(-----BEGIN [A-Z ]*PRIVATE KEY-----)([\s\S]*?)(-----END [A-Z ]*PRIVATE KEY-----)/g;
+/** key=value / key: value / key="value" where the key is secret-shaped.
+ * The value must be a single token of some length; prose after a colon
+ * ("password: leave blank…") has spaces and does not match. */
+const KEY_VALUE = /\b((?:[A-Za-z0-9_-]*_)?(?:api[_-]?key|apikey|secret|token|password|passwd|authorization|auth[_-]?token|access[_-]?key|private[_-]?key)s?)(["']?\s*[=:]\s*)(["']?)([A-Za-z0-9._~+/=-]{8,})\3/gi;
+/** `X_KEY=value`, `xai-key=value`: an assignment to a name that ENDS in key
+ * is a credential whatever the value looks like, so no length floor. The
+ * separator before `key` is what keeps `hotkey=` and `keyboard=` out. */
+const KEY_SUFFIX_ASSIGNMENT = /\b([A-Za-z][A-Za-z0-9_-]*[_-]key)s?(=)(["']?)([A-Za-z0-9._~+/=-]+)\3/gi;
+/** `--token abc`, `--password=abc`: the flag names a secret; the value is
+ * whatever single token follows, never another flag. */
+const SECRET_FLAG = /(--(?:token|password|passwd|api-key|apikey|secret|access-key|auth-token)(?:=|\s+))(["']?)(?!-)([A-Za-z0-9._~+/=-]+)\2/gi;
+/** `scheme://user:secret@host` — the password in a URL's userinfo. */
+const URL_USERINFO = /(\b[a-z][a-z0-9+.-]*:\/\/[^\s/:@'"]+:)([^\s/@'"«»]+)(@)/gi;
+export function redactSecretsInText(text) {
+    if (!text || text.length < 8)
+        return text;
+    let out = text;
+    out = out.replace(PEM_BLOCK, (_m, open, body, close) => `${open}\n${mask(body.trim())}\n${close}`);
+    for (const re of KEY_PREFIXES)
+        out = out.replace(re, (m) => mask(m));
+    out = out.replace(BEARER, (_m, lead, tok) => `${lead}${mask(tok)}`);
+    out = out.replace(KEY_VALUE, (_m, key, sep, quote, value) => `${key}${sep}${quote}${mask(value)}${quote}`);
+    out = out.replace(KEY_SUFFIX_ASSIGNMENT, (_m, key, sep, quote, value) => `${key}${sep}${quote}${mask(value)}${quote}`);
+    out = out.replace(SECRET_FLAG, (_m, flag, quote, value) => `${flag}${quote}${mask(value)}${quote}`);
+    out = out.replace(URL_USERINFO, (_m, lead, secret, at) => `${lead}${mask(secret)}${at}`);
+    return out;
+}

package/dist-server/shared/routines.js

@@ -0,0 +1 @@
+export {};

package/dist-server/shared/runtime-events.js

@@ -0,0 +1 @@
+export {};

package/dist-server/shared/webhooks.js

@@ -0,0 +1 @@
+export {};

package/dist-server/shared/wire.js

@@ -0,0 +1,8 @@
+/** Reasoning-effort levels, ascending. A union of everything any engine
+ * accepts; each driver declares the subset its CLI will take. Lives here
+ * because it is part of ModelSelection, which rides the wire. */
+export const EFFORT_LEVELS = ["none", "low", "medium", "high", "xhigh", "max"];
+/** Narrow untrusted API/config input before it becomes a model selection. */
+export function isEffortLevel(value) {
+    return typeof value === "string" && EFFORT_LEVELS.includes(value);
+}

package/dist-server/vps-container-mcp.js

@@ -14954,8 +14954,10 @@ function normalizeImageGenerationUrl(value) {
   return url2.toString().replace(/\/+$/, "");
 }
 
-// server/contracts.ts
+// shared/wire.ts
 var EFFORT_LEVELS = ["none", "low", "medium", "high", "xhigh", "max"];
+
+// server/contracts.ts
 function isModelVariant(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && value.trim() === value && !new RegExp("\\p{Cc}", "u").test(value);
 }
@@ -14989,6 +14991,9 @@ var LEGACY_BROWSER_PROFILE_ID = /^[A-Za-z0-9_-]{1,40}$/;
 var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
+var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
+var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
 var MAX_CONCURRENT_BOT_THREADS = 10;
 var MIN_THREAD_EVENT_LOG_BYTES = 256 * 1024;
 var MAX_THREAD_EVENT_LOG_BYTES = 4 * 1024 * 1024 * 1024;
@@ -15003,8 +15008,16 @@ var vpsConfigSchema = external_exports.object({
   }).optional()
 });
 var roomConfigSchema = external_exports.object({
-  turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES)
-});
+  turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
+  /** Room handoff tree lifetime. Active execution pauses this clock; the
+   * hard cap is wall-clock and bounds trees that never stop executing. */
+  handoffLifetimeMinutes: external_exports.number().int().min(1).max(MAX_ROOM_TURN_TIMEOUT_MINUTES).optional(),
+  handoffMinRunwayMinutes: external_exports.number().int().min(1).max(MAX_ROOM_TURN_TIMEOUT_MINUTES).optional(),
+  handoffHardCapMinutes: external_exports.number().int().min(1).max(7 * MAX_ROOM_TURN_TIMEOUT_MINUTES).optional()
+}).refine(
+  (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
+  { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
+);
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional()
@@ -15253,7 +15266,10 @@ var appConfigSchema = external_exports.object({
     maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
     /** Cap each per-thread events/ and native/ NDJSON log at this many
      * bytes; absent (the default) keeps today's unbounded growth (#1280). */
-    eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional()
+    eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional(),
+    /** Days a closed or archived thread's event logs survive (#1280).
+     * Absent keeps them forever. */
+    eventLogRetentionDays: external_exports.number().int().min(1).max(3650).optional()
   }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.82",
+  "version": "0.1.84",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",