openmausbot 0.1.87 → 0.1.88

package/dist-server/shared/options-card.js

@@ -0,0 +1,51 @@
+/** The one bot allowed to create passive choice cards for the Watcher flow. */
+export const WATCHER_OPTIONS_CARD_BOT_ID = "f08dd8e3-f942-4eb4-8783-df32b26b88a4";
+/** Keep agent-authored cards small enough to remain useful on desktop and mobile. */
+export const OPTIONS_CARD_LIMITS = {
+    title: 120,
+    subtitle: 1_000,
+    option: 120,
+    minOptions: 2,
+    maxOptions: 6,
+};
+function record(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function boundedText(value, field, maximum) {
+    if (typeof value !== "string")
+        return { error: `${field} must be a string.` };
+    const text = value.trim();
+    if (!text)
+        return { error: `${field} must not be blank.` };
+    if (text.length > maximum)
+        return { error: `${field} must be at most ${maximum} characters.` };
+    return text;
+}
+/** Normalize untrusted model input before it is persisted into a native card. */
+export function parseOptionsCardInput(value) {
+    if (!record(value))
+        return { ok: false, error: "create_options_card needs an object." };
+    const title = boundedText(value.title, "title", OPTIONS_CARD_LIMITS.title);
+    if (typeof title !== "string")
+        return { ok: false, error: title.error };
+    const subtitle = boundedText(value.subtitle, "subtitle", OPTIONS_CARD_LIMITS.subtitle);
+    if (typeof subtitle !== "string")
+        return { ok: false, error: subtitle.error };
+    if (!Array.isArray(value.options))
+        return { ok: false, error: "options must be an array of strings." };
+    if (value.options.length < OPTIONS_CARD_LIMITS.minOptions || value.options.length > OPTIONS_CARD_LIMITS.maxOptions) {
+        return { ok: false, error: `options must contain ${OPTIONS_CARD_LIMITS.minOptions}-${OPTIONS_CARD_LIMITS.maxOptions} items.` };
+    }
+    const options = [];
+    const seen = new Set();
+    for (let index = 0; index < value.options.length; index += 1) {
+        const option = boundedText(value.options[index], `options[${index}]`, OPTIONS_CARD_LIMITS.option);
+        if (typeof option !== "string")
+            return { ok: false, error: option.error };
+        if (seen.has(option))
+            return { ok: false, error: `options must be unique; "${option}" is repeated.` };
+        seen.add(option);
+        options.push(option);
+    }
+    return { ok: true, value: { title, subtitle, options } };
+}

package/dist-server/shared/profile-request.js

@@ -2,8 +2,9 @@
  * Durable payload carried by a profile confirmation card (propose_profile).
  *
  * The fields a bot may propose for itself (`cwd` is the working folder its
- * tools run in; "" means its private workspace). `before` is the snapshot the
- * user was shown; `expectedRevision` is a hash of the target's whole profile
- * at proposal time so a confirmation fails closed if anything moved.
+ * tools run in; "" means its private workspace; `notifications` and
+ * `speakReplies` are the alert and voice toggles). `before` is the snapshot
+ * the user was shown; `expectedRevision` is a hash of the target's whole
+ * profile at proposal time so a confirmation fails closed if anything moved.
  */
-export const PROFILE_REQUEST_FIELDS = ["name", "title", "description", "soul", "cwd"];
+export const PROFILE_REQUEST_FIELDS = ["name", "title", "description", "soul", "cwd", "notifications", "speakReplies"];

package/dist-server/shared/tightening-request.js

@@ -0,0 +1,87 @@
+/**
+ * Durable payload carried by a tightening card (propose_tightening).
+ *
+ * Authority reductions a bot may propose for itself or (for a Chief) a
+ * section peer. Direction is enforced by shape: the intents cannot express
+ * an escalation — approvalMode targets stop below full and custom, the
+ * booleans only carry their tightening value, and the list fields only
+ * carry removals. `validateTightening` then checks the remaining
+ * state-relative direction (an upward move inside ask/edits/auto, a grant
+ * that is not currently held) against live bot state, at propose AND again
+ * at confirm, so a card that sat open can never apply a transition that
+ * stopped being a reduction. Escalation stays human-only in Edit Profile.
+ */
+import { APPROVAL_MODES } from "./approval-mode.js";
+/** Targets a proposal may name. "full" and "custom" are owner-only. */
+export const TIGHTENING_MODE_TARGETS = ["ask", "edits", "auto"];
+/** Direction check against live state. Pure: the caller supplies the
+ * snapshot, at propose and again at confirm. Every rejection names the
+ * field and the allowed direction. */
+export function validateTightening(before, intents) {
+    const after = {
+        ...before,
+        alwaysAllow: [...before.alwaysAllow],
+        mcpServers: [...before.mcpServers],
+        skills: [...before.skills],
+    };
+    if (intents.approvalMode !== undefined) {
+        const to = intents.approvalMode;
+        const from = before.approvalMode;
+        const reduces = from === "custom"
+            ? to === "ask"
+            : APPROVAL_MODES.indexOf(to) < APPROVAL_MODES.indexOf(from);
+        if (!reduces) {
+            return {
+                ok: false,
+                error: `approvalMode can only tighten: down the selector order (ask, edits, auto, full), or custom to ask. "${to}" does not reduce "${from}".`,
+            };
+        }
+        after.approvalMode = to;
+    }
+    if (intents.composio !== undefined) {
+        if (!before.composio)
+            return { ok: false, error: "composio is already off; it may only be turned off" };
+        after.composio = false;
+    }
+    if (intents.browser !== undefined) {
+        if (!before.browser)
+            return { ok: false, error: "browser is already off; it may only be turned off" };
+        after.browser = false;
+    }
+    if (intents.approvePeerComms !== undefined) {
+        if (before.approvePeerComms)
+            return { ok: false, error: "approvePeerComms is already on; it may only be turned on" };
+        after.approvePeerComms = true;
+    }
+    if (intents.alwaysAllow !== undefined) {
+        const removals = [...new Set(intents.alwaysAllow)];
+        if (!removals.length)
+            return { ok: false, error: "alwaysAllow must name at least one grant to remove" };
+        const unknown = removals.filter((key) => !before.alwaysAllow.includes(key));
+        if (unknown.length) {
+            return { ok: false, error: `alwaysAllow entries may only be removed, never added; not currently granted: ${unknown.join(", ")}` };
+        }
+        after.alwaysAllow = before.alwaysAllow.filter((key) => !removals.includes(key));
+    }
+    if (intents.mcpServers !== undefined) {
+        const removals = [...new Set(intents.mcpServers)];
+        if (!removals.length)
+            return { ok: false, error: "mcpServers must name at least one server to unmount" };
+        const unknown = removals.filter((name) => !before.mcpServers.includes(name));
+        if (unknown.length) {
+            return { ok: false, error: `mcpServers may only unmount servers this bot currently mounts; not mounted: ${unknown.join(", ")}` };
+        }
+        after.mcpServers = before.mcpServers.filter((name) => !removals.includes(name));
+    }
+    if (intents.skills !== undefined) {
+        const removals = [...new Set(intents.skills)];
+        if (!removals.length)
+            return { ok: false, error: "skills must name at least one skill to disable" };
+        const unknown = removals.filter((name) => !before.skills.includes(name));
+        if (unknown.length) {
+            return { ok: false, error: `skills may only be disabled, never enabled; not currently enabled: ${unknown.join(", ")}` };
+        }
+        after.skills = before.skills.filter((name) => !removals.includes(name));
+    }
+    return { ok: true, after };
+}

package/dist-server/src/lib/composer-attachments.js

@@ -426,6 +426,11 @@ export function isPrivateAttachmentPath(path) {
     return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\.[a-z0-9]+$/i
         .test(attachmentBasename(path));
 }
+/** The exact wrapper lines composeMessage writes around a pasted block. The
+ * bot needs them to tell pasted from typed text; a person reading their own
+ * message does not. Anything else on the line keeps the tag visible. */
+const PASTED_TEXT_OPEN = /^ {0,3}<pasted-text(?:[\t ]+index="\d+")?[\t ]*>[\t ]*$/i;
+const PASTED_TEXT_CLOSE = /^[\t ]*<\/pasted-text>[\t ]*$/i;
 /** Recognise CommonMark-style fenced code without pulling a Markdown parser
  * into the composer bundle. An unterminated fence deliberately protects the
  * rest of the message: examples must never turn into actionable attachments. */
@@ -511,8 +516,10 @@ function transcriptBlockStarting(line) {
 }
 const TRANSCRIPT_ATTACHMENT_TAG = /^<attached-(image|file)[\t ]+path="([^"\r\n]*)"(?:[\t ]+name="([^"\r\n]*)")?[\t ]*\/>[\t ]*$/;
 /** Split a stored user message into its display text and attachments for
- * transcript rendering. Markdown exports preserve whitespace; bubbles trim it. */
-export function splitTranscriptAttachments(text, trimDisplay = true) {
+ * transcript rendering. Markdown exports preserve whitespace; bubbles trim it.
+ * Bubbles also hide the `<pasted-text>` wrapper lines and show only what was
+ * pasted; exports keep the message exactly as the bot received it. */
+export function splitTranscriptAttachments(text, trimDisplay = true, hidePasteWrappers = true) {
     const images = [];
     const files = [];
     let display = "";
@@ -541,6 +548,8 @@ export function splitTranscriptAttachments(text, trimDisplay = true) {
                     block = null;
             }
             else if (line.toLowerCase().includes(block.closingToken)) {
+                if (block.hiddenWrapper && PASTED_TEXT_CLOSE.test(line))
+                    consumed = true;
                 block = null;
             }
         }
@@ -565,8 +574,13 @@ export function splitTranscriptAttachments(text, trimDisplay = true) {
                     consumed = true;
                 }
             }
-            if (!consumed)
+            if (!consumed) {
                 block = transcriptBlockStarting(line);
+                if (hidePasteWrappers && block?.kind === "untilToken" && block.closingToken === "</pasted-text>" && PASTED_TEXT_OPEN.test(line)) {
+                    block = { ...block, hiddenWrapper: true };
+                    consumed = true;
+                }
+            }
         }
         if (!consumed)
             display += text.slice(cursor, wholeLineEnd);
@@ -635,6 +649,14 @@ export function attachmentImageUrl(path) {
         return null;
     return `/api/attachments/${encodeURIComponent(name)}`;
 }
+/** Voice notes park as bare generated .mp3 filenames; anything else stays
+ * out of an <audio> src rather than 404ing on a private path. */
+export function attachmentAudioUrl(path) {
+    const name = attachmentBasename(path);
+    if (!/^[A-Za-z0-9-]+\.mp3$/.test(name))
+        return null;
+    return `/api/attachments/${encodeURIComponent(name)}`;
+}
 /** One intake path for files arriving by drop OR by the composer's attach
  * button, so a picked file and a dropped one can never behave differently.
  * Uploaders are injected for deterministic tests: callers own the network,

package/dist-server/vps-container-mcp.js

@@ -112,6 +112,8 @@ function knownDirs() {
     join(home, ".volta", "bin"),
     join(home, ".bun", "bin"),
     join(home, ".asdf", "shims"),
+    join(home, ".local", "share", "mise", "shims"),
+    // mise installer
     join(home, ".deno", "bin"),
     join(home, "bin"),
     ...nvmBinDirs()
@@ -16026,7 +16028,7 @@ var MAX_CONCURRENT_BOT_THREADS = 10;
 var MIN_THREAD_EVENT_LOG_BYTES = 256 * 1024;
 var MAX_THREAD_EVENT_LOG_BYTES = 4 * 1024 * 1024 * 1024;
 var MIN_LOCAL_VM_MAX_INSTANCES = 1;
-var MAX_LOCAL_VM_MAX_INSTANCES = 4;
+var MAX_LOCAL_VM_MAX_INSTANCES = 8;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }