openmausbot 0.1.87 → 0.1.89

package/dist-server/shared/line-diff.js

@@ -40,3 +40,26 @@ export function lineDiff(before, after) {
         out.push(`+${b[j++]}`);
     return out;
 }
+/** Cap on diff lines rendered inside an approval card. Past this the card
+ * shows the complete proposed document instead of a truncated diff, because
+ * truncation can hide the very instructions being approved. */
+export const MAX_DIFF_LINES = 400;
+/** The SOUL.md review block shared by the profile and team-setup cards:
+ * byte counts, a line diff for reviewable changes, and the complete
+ * replacement when the diff would outrun the card. The full replacement is
+ * already byte-bounded by profile validation and is readable in the same
+ * generic card on desktop and phones. */
+export function soulDiffLines(before, after) {
+    const encoder = new TextEncoder();
+    const bytesBefore = encoder.encode(before).length;
+    const bytesAfter = encoder.encode(after).length;
+    const diff = lineDiff(before, after);
+    if (diff.length > MAX_DIFF_LINES) {
+        return [
+            `SOUL.md (${bytesBefore} → ${bytesAfter} bytes):`,
+            "Large change — complete proposed instructions (replaces the current SOUL.md):",
+            after || "(empty)",
+        ];
+    }
+    return [`SOUL.md (${bytesBefore} → ${bytesAfter} bytes):`, ...diff];
+}

package/dist-server/shared/model-request.js

@@ -0,0 +1 @@
+export {};

package/dist-server/shared/options-card.js

@@ -0,0 +1,51 @@
+/** The one bot allowed to create passive choice cards for the Watcher flow. */
+export const WATCHER_OPTIONS_CARD_BOT_ID = "f08dd8e3-f942-4eb4-8783-df32b26b88a4";
+/** Keep agent-authored cards small enough to remain useful on desktop and mobile. */
+export const OPTIONS_CARD_LIMITS = {
+    title: 120,
+    subtitle: 1_000,
+    option: 120,
+    minOptions: 2,
+    maxOptions: 6,
+};
+function record(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function boundedText(value, field, maximum) {
+    if (typeof value !== "string")
+        return { error: `${field} must be a string.` };
+    const text = value.trim();
+    if (!text)
+        return { error: `${field} must not be blank.` };
+    if (text.length > maximum)
+        return { error: `${field} must be at most ${maximum} characters.` };
+    return text;
+}
+/** Normalize untrusted model input before it is persisted into a native card. */
+export function parseOptionsCardInput(value) {
+    if (!record(value))
+        return { ok: false, error: "create_options_card needs an object." };
+    const title = boundedText(value.title, "title", OPTIONS_CARD_LIMITS.title);
+    if (typeof title !== "string")
+        return { ok: false, error: title.error };
+    const subtitle = boundedText(value.subtitle, "subtitle", OPTIONS_CARD_LIMITS.subtitle);
+    if (typeof subtitle !== "string")
+        return { ok: false, error: subtitle.error };
+    if (!Array.isArray(value.options))
+        return { ok: false, error: "options must be an array of strings." };
+    if (value.options.length < OPTIONS_CARD_LIMITS.minOptions || value.options.length > OPTIONS_CARD_LIMITS.maxOptions) {
+        return { ok: false, error: `options must contain ${OPTIONS_CARD_LIMITS.minOptions}-${OPTIONS_CARD_LIMITS.maxOptions} items.` };
+    }
+    const options = [];
+    const seen = new Set();
+    for (let index = 0; index < value.options.length; index += 1) {
+        const option = boundedText(value.options[index], `options[${index}]`, OPTIONS_CARD_LIMITS.option);
+        if (typeof option !== "string")
+            return { ok: false, error: option.error };
+        if (seen.has(option))
+            return { ok: false, error: `options must be unique; "${option}" is repeated.` };
+        seen.add(option);
+        options.push(option);
+    }
+    return { ok: true, value: { title, subtitle, options } };
+}

package/dist-server/shared/profile-request.js

@@ -2,8 +2,9 @@
  * Durable payload carried by a profile confirmation card (propose_profile).
  *
  * The fields a bot may propose for itself (`cwd` is the working folder its
- * tools run in; "" means its private workspace). `before` is the snapshot the
- * user was shown; `expectedRevision` is a hash of the target's whole profile
- * at proposal time so a confirmation fails closed if anything moved.
+ * tools run in; "" means its private workspace; `notifications` and
+ * `speakReplies` are the alert and voice toggles). `before` is the snapshot
+ * the user was shown; `expectedRevision` is a hash of the target's whole
+ * profile at proposal time so a confirmation fails closed if anything moved.
  */
-export const PROFILE_REQUEST_FIELDS = ["name", "title", "description", "soul", "cwd"];
+export const PROFILE_REQUEST_FIELDS = ["name", "title", "description", "soul", "cwd", "notifications", "speakReplies"];

package/dist-server/shared/tightening-request.js

@@ -0,0 +1,87 @@
+/**
+ * Durable payload carried by a tightening card (propose_tightening).
+ *
+ * Authority reductions a bot may propose for itself or (for a Chief) a
+ * section peer. Direction is enforced by shape: the intents cannot express
+ * an escalation — approvalMode targets stop below full and custom, the
+ * booleans only carry their tightening value, and the list fields only
+ * carry removals. `validateTightening` then checks the remaining
+ * state-relative direction (an upward move inside ask/edits/auto, a grant
+ * that is not currently held) against live bot state, at propose AND again
+ * at confirm, so a card that sat open can never apply a transition that
+ * stopped being a reduction. Escalation stays human-only in Edit Profile.
+ */
+import { APPROVAL_MODES } from "./approval-mode.js";
+/** Targets a proposal may name. "full" and "custom" are owner-only. */
+export const TIGHTENING_MODE_TARGETS = ["ask", "edits", "auto"];
+/** Direction check against live state. Pure: the caller supplies the
+ * snapshot, at propose and again at confirm. Every rejection names the
+ * field and the allowed direction. */
+export function validateTightening(before, intents) {
+    const after = {
+        ...before,
+        alwaysAllow: [...before.alwaysAllow],
+        mcpServers: [...before.mcpServers],
+        skills: [...before.skills],
+    };
+    if (intents.approvalMode !== undefined) {
+        const to = intents.approvalMode;
+        const from = before.approvalMode;
+        const reduces = from === "custom"
+            ? to === "ask"
+            : APPROVAL_MODES.indexOf(to) < APPROVAL_MODES.indexOf(from);
+        if (!reduces) {
+            return {
+                ok: false,
+                error: `approvalMode can only tighten: down the selector order (ask, edits, auto, full), or custom to ask. "${to}" does not reduce "${from}".`,
+            };
+        }
+        after.approvalMode = to;
+    }
+    if (intents.composio !== undefined) {
+        if (!before.composio)
+            return { ok: false, error: "composio is already off; it may only be turned off" };
+        after.composio = false;
+    }
+    if (intents.browser !== undefined) {
+        if (!before.browser)
+            return { ok: false, error: "browser is already off; it may only be turned off" };
+        after.browser = false;
+    }
+    if (intents.approvePeerComms !== undefined) {
+        if (before.approvePeerComms)
+            return { ok: false, error: "approvePeerComms is already on; it may only be turned on" };
+        after.approvePeerComms = true;
+    }
+    if (intents.alwaysAllow !== undefined) {
+        const removals = [...new Set(intents.alwaysAllow)];
+        if (!removals.length)
+            return { ok: false, error: "alwaysAllow must name at least one grant to remove" };
+        const unknown = removals.filter((key) => !before.alwaysAllow.includes(key));
+        if (unknown.length) {
+            return { ok: false, error: `alwaysAllow entries may only be removed, never added; not currently granted: ${unknown.join(", ")}` };
+        }
+        after.alwaysAllow = before.alwaysAllow.filter((key) => !removals.includes(key));
+    }
+    if (intents.mcpServers !== undefined) {
+        const removals = [...new Set(intents.mcpServers)];
+        if (!removals.length)
+            return { ok: false, error: "mcpServers must name at least one server to unmount" };
+        const unknown = removals.filter((name) => !before.mcpServers.includes(name));
+        if (unknown.length) {
+            return { ok: false, error: `mcpServers may only unmount servers this bot currently mounts; not mounted: ${unknown.join(", ")}` };
+        }
+        after.mcpServers = before.mcpServers.filter((name) => !removals.includes(name));
+    }
+    if (intents.skills !== undefined) {
+        const removals = [...new Set(intents.skills)];
+        if (!removals.length)
+            return { ok: false, error: "skills must name at least one skill to disable" };
+        const unknown = removals.filter((name) => !before.skills.includes(name));
+        if (unknown.length) {
+            return { ok: false, error: `skills may only be disabled, never enabled; not currently enabled: ${unknown.join(", ")}` };
+        }
+        after.skills = before.skills.filter((name) => !removals.includes(name));
+    }
+    return { ok: true, after };
+}

package/dist-server/src/lib/composer-attachments.js

@@ -426,6 +426,11 @@ export function isPrivateAttachmentPath(path) {
     return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\.[a-z0-9]+$/i
         .test(attachmentBasename(path));
 }
+/** The exact wrapper lines composeMessage writes around a pasted block. The
+ * bot needs them to tell pasted from typed text; a person reading their own
+ * message does not. Anything else on the line keeps the tag visible. */
+const PASTED_TEXT_OPEN = /^ {0,3}<pasted-text(?:[\t ]+index="\d+")?[\t ]*>[\t ]*$/i;
+const PASTED_TEXT_CLOSE = /^[\t ]*<\/pasted-text>[\t ]*$/i;
 /** Recognise CommonMark-style fenced code without pulling a Markdown parser
  * into the composer bundle. An unterminated fence deliberately protects the
  * rest of the message: examples must never turn into actionable attachments. */
@@ -511,8 +516,10 @@ function transcriptBlockStarting(line) {
 }
 const TRANSCRIPT_ATTACHMENT_TAG = /^<attached-(image|file)[\t ]+path="([^"\r\n]*)"(?:[\t ]+name="([^"\r\n]*)")?[\t ]*\/>[\t ]*$/;
 /** Split a stored user message into its display text and attachments for
- * transcript rendering. Markdown exports preserve whitespace; bubbles trim it. */
-export function splitTranscriptAttachments(text, trimDisplay = true) {
+ * transcript rendering. Markdown exports preserve whitespace; bubbles trim it.
+ * Bubbles also hide the `<pasted-text>` wrapper lines and show only what was
+ * pasted; exports keep the message exactly as the bot received it. */
+export function splitTranscriptAttachments(text, trimDisplay = true, hidePasteWrappers = true) {
     const images = [];
     const files = [];
     let display = "";
@@ -541,6 +548,8 @@ export function splitTranscriptAttachments(text, trimDisplay = true) {
                     block = null;
             }
             else if (line.toLowerCase().includes(block.closingToken)) {
+                if (block.hiddenWrapper && PASTED_TEXT_CLOSE.test(line))
+                    consumed = true;
                 block = null;
             }
         }
@@ -565,8 +574,13 @@ export function splitTranscriptAttachments(text, trimDisplay = true) {
                     consumed = true;
                 }
             }
-            if (!consumed)
+            if (!consumed) {
                 block = transcriptBlockStarting(line);
+                if (hidePasteWrappers && block?.kind === "untilToken" && block.closingToken === "</pasted-text>" && PASTED_TEXT_OPEN.test(line)) {
+                    block = { ...block, hiddenWrapper: true };
+                    consumed = true;
+                }
+            }
         }
         if (!consumed)
             display += text.slice(cursor, wholeLineEnd);
@@ -635,6 +649,14 @@ export function attachmentImageUrl(path) {
         return null;
     return `/api/attachments/${encodeURIComponent(name)}`;
 }
+/** Voice notes park as bare generated .mp3 filenames; anything else stays
+ * out of an <audio> src rather than 404ing on a private path. */
+export function attachmentAudioUrl(path) {
+    const name = attachmentBasename(path);
+    if (!/^[A-Za-z0-9-]+\.mp3$/.test(name))
+        return null;
+    return `/api/attachments/${encodeURIComponent(name)}`;
+}
 /** One intake path for files arriving by drop OR by the composer's attach
  * button, so a picked file and a dropped one can never behave differently.
  * Uploaders are injected for deterministic tests: callers own the network,
@@ -707,3 +729,20 @@ export function composerShouldRefocus(active, input) {
     const composer = input.closest("[data-tour=composer]");
     return Boolean(composer?.contains(active));
 }
+/**
+ * Whether a freshly opened thread's composer should take keyboard focus.
+ * Opening a thread from the sidebar leaves focus on the row or the New thread
+ * button, so the composer takes it from any plain control. It never takes it
+ * from another text field (the sidebar search, a rename) or from an open
+ * dialog, where the person is typing or deciding something else.
+ */
+export function composerTakesFocusOnOpen(active, input) {
+    if (composerShouldRefocus(active, input))
+        return true;
+    if (!active)
+        return true;
+    const tag = active.tagName?.toUpperCase();
+    if (tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || active.isContentEditable)
+        return false;
+    return !active.closest?.("[role=dialog], [role=alertdialog], [aria-modal=true]");
+}

package/dist-server/vps-container-mcp.js

@@ -112,6 +112,8 @@ function knownDirs() {
     join(home, ".volta", "bin"),
     join(home, ".bun", "bin"),
     join(home, ".asdf", "shims"),
+    join(home, ".local", "share", "mise", "shims"),
+    // mise installer
     join(home, ".deno", "bin"),
     join(home, "bin"),
     ...nvmBinDirs()
@@ -16026,7 +16028,7 @@ var MAX_CONCURRENT_BOT_THREADS = 10;
 var MIN_THREAD_EVENT_LOG_BYTES = 256 * 1024;
 var MAX_THREAD_EVENT_LOG_BYTES = 4 * 1024 * 1024 * 1024;
 var MIN_LOCAL_VM_MAX_INSTANCES = 1;
-var MAX_LOCAL_VM_MAX_INSTANCES = 4;
+var MAX_LOCAL_VM_MAX_INSTANCES = 8;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
@@ -16227,6 +16229,13 @@ var defaultModelSelectionSchema = external_exports.object({
   (selection) => selection.variant === void 0 || selection.effort === void 0,
   "choose either a model variant or an effort level"
 );
+var automaticRecoverySchema = external_exports.object({
+  enabled: external_exports.boolean(),
+  backup: defaultModelSelectionSchema.optional()
+}).strict().refine(
+  (recovery) => !recovery.enabled || recovery.backup !== void 0,
+  { message: "Choose a backup model before enabling automatic recovery", path: ["backup"] }
+);
 var threadsConfigSchema = external_exports.object({
   maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
   /** Cap each per-thread events/ and native/ NDJSON log at this many
@@ -16255,6 +16264,7 @@ var appConfigSchema = external_exports.object({
    * addresses or `@domain` entries; admins get every scope, members chat only. */
   signIn: external_exports.object({ admins: external_exports.array(external_exports.string().max(320)).max(500).optional(), members: external_exports.array(external_exports.string().max(320)).max(5e3).optional() }).optional(),
   defaultModelSelection: defaultModelSelectionSchema.optional(),
+  automaticRecovery: automaticRecoverySchema.optional(),
   newBotDefaults: newBotDefaultsSchema.optional(),
   newBots: newBotsConfigSchema.optional(),
   /** CLI-only launch preferences. Never enable remote access implicitly. */