openmausbot 0.1.89 → 0.1.91

package/dist-server/shared/team-backup.js

@@ -63,6 +63,20 @@ const memory = z.object({
  * against. Shareable exports never carry grants at all, and an import
  * always lands bots grant-less whatever the file says. */
 const connectorTools = z.record(z.string().regex(CONNECTOR_SLUG_PATTERN), z.object({ tools: z.union([z.literal("*"), z.array(z.string().regex(CONNECTOR_TOOL_NAME_PATTERN)).min(1).max(500)]) }));
+/** A responder kind from a newer release restores as the room's first
+ * member as lead (what a room without one does) instead of refusing the
+ * whole backup. Malformed values still fail the schema. */
+function knownRoomResponder(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const group = value;
+    const kind = group.defaultResponder && typeof group.defaultResponder === "object"
+        ? group.defaultResponder.kind : undefined;
+    if (typeof kind !== "string" || ["member", "everyone", "mentions", "auto"].includes(kind))
+        return value;
+    const first = Array.isArray(group.memberIds) && typeof group.memberIds[0] === "string" ? group.memberIds[0] : undefined;
+    return { ...group, defaultResponder: first ? { kind: "member", botId: first } : { kind: "mentions" } };
+}
 const backupSchema = z.object({
     format: z.literal("openmaus.backup"),
     version: z.literal(1),
@@ -86,7 +100,7 @@ const backupSchema = z.object({
         connectorTools: connectorTools.optional(),
         memory: memory.optional(),
     })).min(1).max(200),
-    groups: z.array(z.object({
+    groups: z.array(z.preprocess(knownRoomResponder, z.object({
         ...owner,
         memberIds: z.array(key).max(200),
         dm: z.boolean(),
@@ -95,8 +109,9 @@ const backupSchema = z.object({
             z.object({ kind: z.literal("member"), botId: key }),
             z.object({ kind: z.literal("everyone") }),
             z.object({ kind: z.literal("mentions") }),
+            z.object({ kind: z.literal("auto"), fallbackBotId: key.optional() }),
         ]),
-    })).max(2_000),
+    }))).max(2_000),
     routines: z.array(z.object({
         name, prompt: z.string().trim().min(1).max(200_000),
         target: z.enum(["bot", "room-goal"]), botId: key, groupId: key.optional(),
@@ -136,7 +151,9 @@ export function parseTeamBackup(input) {
         if (group.memberIds.some((id) => !bots.has(id)))
             throw new Error("Invalid backup: unknown room member");
         unique(group.memberIds, "room member");
-        if (group.defaultResponder.kind === "member" && !group.memberIds.includes(group.defaultResponder.botId)) {
+        const lead = group.defaultResponder.kind === "member" ? group.defaultResponder.botId
+            : group.defaultResponder.kind === "auto" ? group.defaultResponder.fallbackBotId : undefined;
+        if (lead !== undefined && !group.memberIds.includes(lead)) {
             throw new Error("Invalid backup: room responder is not a member");
         }
         if (group.dm && (group.memberIds.length !== 2 || group.tasks.length !== 1))

package/dist-server/shared/tool-surface.js

@@ -7,7 +7,7 @@
  * computer is illustrated only after one of these; the built-in browser's
  * read-only calls (snapshot, read, get_text, waits) stay out by the same rule. */
 export const SCREEN_TOUCHING_TOOLS = new Set([
-    // cloud box / remote computer
+    // cloud boat / remote computer
     "screenshot", "click", "type_text", "press_key", "scroll", "computer_batch", "open_url", "browser_click", "browser_fill",
     // built-in browser: the Electron surface's names, kept because a bot on an
     // older remote harness can still call them

package/dist-server/src/lib/composer-attachments.js

@@ -746,3 +746,12 @@ export function composerTakesFocusOnOpen(active, input) {
         return false;
     return !active.closest?.("[role=dialog], [role=alertdialog], [aria-modal=true]");
 }
+/**
+ * Whether a change of reply target should put the caret in the composer.
+ * Choosing a message to reply to means the next thing is typing the reply,
+ * so a newly chosen target takes focus (MOCA-263). Clearing the reply, or the
+ * same target arriving again as the draft re-renders, does not.
+ */
+export function replyTargetTakesFocus(previousId, nextId) {
+    return Boolean(nextId) && nextId !== previousId;
+}

package/dist-server/vps-container-mcp.js

@@ -503,7 +503,7 @@ import { promisify } from "node:util";
 
 // server/config.ts
 import { homedir as homedir2 } from "node:os";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 
 // node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -15041,6 +15041,8 @@ function normalizeImageGenerationUrl(value) {
 // shared/bot-avatar.ts
 var BOT_AVATAR_CROPS = ["mascot", "circle", "rounded", "square"];
 var botAvatarCropSchema = external_exports.enum(BOT_AVATAR_CROPS);
+var AVATAR_ZOOM_MIN = 1;
+var AVATAR_ZOOM_MAX = 3;
 var botAvatarUrlSchema = external_exports.string().regex(
   /^\/api\/attachments\/[A-Za-z0-9-]+\.(?:png|jpg|gif|webp)$/,
   "must be a stored PNG, JPEG, GIF, or WebP attachment"
@@ -15079,6 +15081,9 @@ var profilePatchSchema = external_exports.object({
     error: "avatarUrl must be a stored PNG, JPEG, GIF, or WebP attachment"
   }).optional(),
   avatarCrop: botAvatarCropSchema.optional(),
+  avatarZoom: external_exports.number({ error: "avatarZoom must be a number from 1 to 3" }).finite().min(AVATAR_ZOOM_MIN).max(AVATAR_ZOOM_MAX).optional(),
+  avatarFocusX: external_exports.number({ error: "avatarFocusX must be a number from 0 to 1" }).finite().min(0).max(1).optional(),
+  avatarFocusY: external_exports.number({ error: "avatarFocusY must be a number from 0 to 1" }).finite().min(0).max(1).optional(),
   mascotBody: mascotBodySchema.optional(),
   voice: external_exports.string({ error: "voice must be a string" }).max(BOT_PROFILE_LIMITS.voice, { error: "voice must be at most 200 characters" }).optional(),
   speakReplies: external_exports.boolean({ error: "speakReplies must be true or false" }).optional()
@@ -16014,6 +16019,76 @@ var remoteMutationSchema = remoteEntrySchema.extend({
   headers: external_exports.record(external_exports.string(), external_exports.union([external_exports.string().max(16384), external_exports.literal(true)])).optional()
 });
 
+// server/cloud-overflow.ts
+var CLOUD_SEAT_IDLE_STOP_MS = 5 * 6e4;
+var CLOUD_SEAT_SLEEP_RETRY_MAX_MS = 10 * 6e4;
+
+// server/proxy-paths.ts
+import { existsSync as existsSync2 } from "node:fs";
+import { dirname as dirname2, join as join2 } from "node:path";
+import { fileURLToPath } from "node:url";
+var SERVER_ROOT = dirname2(fileURLToPath(import.meta.url));
+function resolveProxy(relative) {
+  const source = join2(SERVER_ROOT, `${relative}.ts`);
+  return existsSync2(source) ? source : join2(SERVER_ROOT, `${relative}.js`);
+}
+var SPAWNED_PROXIES = {
+  browser: resolveProxy("browser-proxy"),
+  localComputer: resolveProxy("local-computer-proxy"),
+  permission: resolveProxy("permission-proxy"),
+  containerMcp: resolveProxy("container-mcp"),
+  vpsContainerMcp: resolveProxy("vps-container-mcp"),
+  agents: resolveProxy("drivers/agents-proxy"),
+  dweb: resolveProxy("drivers/dweb-proxy"),
+  connectors: resolveProxy("connector-proxy"),
+  mcpGate: resolveProxy("mcp-gate"),
+  phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
+  // Loaded by the external `pi` process via `-e`, not by this server — but
+  // resolved through the same single source of truth so the packaged layout
+  // check can assert it ships.
+  piMcpExtension: resolveProxy("drivers/pi-mcp-extension")
+};
+
+// server/enterprise.ts
+var layerSchema = external_exports.object({
+  customer: external_exports.string().min(1),
+  features: external_exports.array(external_exports.string().min(1)),
+  expiresAt: external_exports.string().nullable()
+});
+var DAY_MS = 24 * 60 * 6e4;
+
+// server/sessions.ts
+var PAIRING_CODE_TTL_MS = 5 * 6e4;
+function daysMs(value, fallbackDays) {
+  const days = Number(value);
+  const ok = Number.isInteger(days) && days >= 1 && days <= 3650;
+  return (ok ? days : fallbackDays) * 24 * 60 * 6e4;
+}
+var SESSION_TTL_MS = daysMs(process.env.OMB_SESSION_TTL_DAYS, 30);
+var SESSION_MAX_AGE_MS = daysMs(process.env.OMB_SESSION_MAX_DAYS, 180);
+var SESSION_RENEW_WHEN_LEFT_MS = SESSION_TTL_MS / 2;
+var STREAM_TICKET_TTL_MS = 5 * 6e4;
+var scopeSchema = external_exports.enum(["admin", "client"]);
+var sessionSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  tokenHash: external_exports.string().length(64),
+  label: external_exports.string().max(80),
+  scopes: external_exports.array(scopeSchema).min(1),
+  createdAt: external_exports.number(),
+  lastSeenAt: external_exports.number(),
+  expiresAt: external_exports.number(),
+  /** Set when the session came from an account sign-in rather than a code. */
+  userId: external_exports.string().max(256).optional(),
+  email: external_exports.string().max(320).optional(),
+  /** Set only by the internal verified-portal issuance path, never by email or pairing input. */
+  membershipAuthority: external_exports.literal("portal").optional()
+});
+var fileSchema = external_exports.object({ version: external_exports.literal(1), sessions: external_exports.array(sessionSchema) });
+
+// server/cloud-home.ts
+var CLOUD_PAIRING_NONCE_MS = 10 * 6e4;
+
 // server/config.ts
 var optionalText = external_exports.string().optional();
 var SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
@@ -16055,7 +16130,8 @@ var browserEngineConfigSchema = external_exports.object({
 var roomConfigSchema = external_exports.object({
   turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
   /** Room handoff tree lifetime. Active execution pauses this clock; the
-   * hard cap is wall-clock and bounds trees that never stop executing. */
+   * hard cap is the maximum stall window, measured wall-clock from the
+   * tree's last durable progress. */
   handoffLifetimeMinutes: external_exports.number().int().min(1).max(MAX_ROOM_TURN_TIMEOUT_MINUTES).optional(),
   handoffMinRunwayMinutes: external_exports.number().int().min(1).max(MAX_ROOM_TURN_TIMEOUT_MINUTES).optional(),
   handoffHardCapMinutes: external_exports.number().int().min(1).max(7 * MAX_ROOM_TURN_TIMEOUT_MINUTES).optional()
@@ -16064,7 +16140,7 @@ var roomConfigSchema = external_exports.object({
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
 var localVmConfigSchema = external_exports.object({
-  mode: external_exports.enum(["shared", "per-bot"]).optional(),
+  mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional()
 });
 var browserProfileSchema = external_exports.object({
@@ -16183,6 +16259,10 @@ var featureConfigSchema = external_exports.object({
   skillAuthoring: external_exports.boolean().optional(),
   /** Show each tool run in the transcript. Off unless explicitly enabled. */
   showToolCalls: external_exports.boolean().optional(),
+  /** Run a routine inside the conversation it reports to, instead of a hidden
+   * thread. Off unless explicitly enabled. The run still starts from its own
+   * instructions, but the messages stay in that chat. */
+  routinesInConversation: external_exports.boolean().optional(),
   /** Experimental built-in browser. Off until explicitly enabled; each bot
    * also has its own switch. */
   browser: external_exports.boolean().optional(),
@@ -16196,8 +16276,23 @@ var featureConfigSchema = external_exports.object({
   claudeUserMcp: external_exports.boolean().optional(),
   /** LLM-generated titles for new bot threads. Off until explicitly
    * enabled; a one-shot that fails or answers junk leaves the first-message
-   * snippet in place — see llmThreadTitlesEnabled. */
-  llmThreadTitles: external_exports.boolean().optional()
+  * snippet in place — see llmThreadTitlesEnabled. */
+  llmThreadTitles: external_exports.boolean().optional(),
+  /** Before each turn, passages from the bot's own memory files and earlier
+   * conversations that share words with the message ride into the turn.
+   * Read-only; on unless explicitly switched off — see autoRecallEnabled. */
+  autoRecall: external_exports.boolean().optional(),
+  /** Idle release for computer claims (#1653): a desktop seat that stays
+   * screen-quiet for 90 seconds is released to waiting turns while its
+   * holder's turn still lives; the previous holder re-claims directly
+   * for 10 minutes and yields to an occupied seat. Off until baked; see
+   * computerClaimIdleReleaseEnabled for how to enable it by hand. */
+  computerClaimIdleRelease: external_exports.boolean().optional(),
+  /** Consented cloud overflow for local computer waits (#1655): a wait
+   * may offer a per-second-billed cloud seat, but only through an explicit
+   * consent card or a configured allowlist — never a silent Auto default.
+   * Off until baked; see cloudOverflowEnabled for how to enable it by hand. */
+  cloudOverflow: external_exports.boolean().optional()
 });
 var onboardingConfigSchema = external_exports.object({
   /** ISO timestamp of finishing (or skipping to the end of) the welcome flow. */
@@ -16304,6 +16399,8 @@ var appConfigSchema = external_exports.object({
   /** Project key used for Sessions, catalog and agent tools. userId/sessionId
    * are non-secret local identifiers used to reuse one Composio Session. */
   composio: external_exports.object({ apiKey: optionalText, userId: optionalText, sessionId: optionalText }).optional(),
+  /** Historical config section name "box" (the persisted config.json key); the
+   * provider is Boat now and the key is kept for compatibility. */
   box: external_exports.object({ token: optionalText }).optional(),
   vps: vpsConfigSchema.optional(),
   /** Optional OpenCode key; persisted write-only and passed only to its child. */
@@ -16323,6 +16420,19 @@ var appConfigSchema = external_exports.object({
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the Chatterbox server address must start with http:// or https://").optional(),
     model: optionalText
   }).optional(),
+  /** The decision model (server/decider): a fast classifier that picks
+   * things for bots, starting with who answers a room message. `key` is
+   * write-only like every credential; `baseUrl` points at a Jev-compatible
+   * server instead of TypeSafe's (an operator setting with no UI); `jobs`
+   * switches each decision on or off. Not `decisions`: that section is the
+   * authorization log's retention. */
+  decider: external_exports.object({
+    enabled: external_exports.boolean().optional(),
+    provider: external_exports.enum(["jev", "off"]).optional(),
+    key: optionalText,
+    baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the decision model address must start with http:// or https://").optional(),
+    jobs: external_exports.object({ roomRouting: external_exports.boolean().optional() }).optional()
+  }).optional(),
   /** Avatar provider credentials stay separate; choosing a router never reuses a cloud key. */
   imageGen: external_exports.object({
     provider: external_exports.enum(["openai", "xai", "custom"]).optional(),
@@ -16353,10 +16463,26 @@ var appConfigSchema = external_exports.object({
     compactAt: external_exports.number().positive().max(1e7).optional(),
     autoCompact: external_exports.boolean().optional()
   }).optional(),
+  /** Memory upkeep timing, for bots with Memory upkeep switched on. */
+  memory: external_exports.object({
+    /** Quiet time after a turn before its facts are captured (ms). */
+    captureQuietMs: external_exports.number().int().min(1e3).max(24 * 60 * 6e4).optional(),
+    /** Local hour (0-23) after which the nightly tidy-up runs. */
+    tidyHour: external_exports.number().int().min(0).max(23).optional()
+  }).strict().optional(),
   threads: threadsConfigSchema.optional(),
   /** The authorization decision log (server/decision-log.ts): days of month
    * files kept, at least; OMB_DECISION_RETENTION_DAYS wins when set. */
   decisions: external_exports.object({ retentionDays: external_exports.number().int().min(1).max(3650).optional() }).strict().optional(),
+  /** #1655 cloud-overflow settings. perSecondCostUsd is the operator's own
+   * verified rate: with no price configured the feature stays inert rather
+   * than show an invented one. allowlistedThreads carries standing consent
+   * for exact thread ids. */
+  cloudOverflow: external_exports.object({
+    perSecondCostUsd: external_exports.number().positive().max(10).optional(),
+    idleStopMs: external_exports.number().int().positive().max(24 * 60 * 6e4).optional(),
+    allowlistedThreads: external_exports.array(external_exports.string().min(1)).max(1e3).optional()
+  }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
@@ -16375,37 +16501,11 @@ var storedAppConfigSchema = appConfigSchema.extend({
 });
 var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true }).extend({ threads: threadsPatchSchema.optional(), newBots: newBotsPatchSchema.optional() });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
-var DATA_DIR = process.env.OMB_DATA_DIR ?? join2(homedir2(), ".openmausbot");
-var LEGACY_DATA_DIR = join2(homedir2(), ".opengrokbot");
-var EVENTS_DIR = join2(DATA_DIR, "events");
-var NATIVE_DIR = join2(DATA_DIR, "native");
-
-// server/proxy-paths.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname2, join as join3 } from "node:path";
-import { fileURLToPath } from "node:url";
-var SERVER_ROOT = dirname2(fileURLToPath(import.meta.url));
-function resolveProxy(relative) {
-  const source = join3(SERVER_ROOT, `${relative}.ts`);
-  return existsSync2(source) ? source : join3(SERVER_ROOT, `${relative}.js`);
-}
-var SPAWNED_PROXIES = {
-  browser: resolveProxy("browser-proxy"),
-  localComputer: resolveProxy("local-computer-proxy"),
-  permission: resolveProxy("permission-proxy"),
-  containerMcp: resolveProxy("container-mcp"),
-  vpsContainerMcp: resolveProxy("vps-container-mcp"),
-  agents: resolveProxy("drivers/agents-proxy"),
-  dweb: resolveProxy("drivers/dweb-proxy"),
-  connectors: resolveProxy("connector-proxy"),
-  mcpGate: resolveProxy("mcp-gate"),
-  phone: resolveProxy("drivers/phone-proxy"),
-  hook: resolveProxy("hooks/omb-hook"),
-  // Loaded by the external `pi` process via `-e`, not by this server — but
-  // resolved through the same single source of truth so the packaged layout
-  // check can assert it ships.
-  piMcpExtension: resolveProxy("drivers/pi-mcp-extension")
-};
+var DEFAULT_CAPTURE_QUIET_MS = 2 * 6e4;
+var DATA_DIR = process.env.OMB_DATA_DIR ?? join3(homedir2(), ".openmausbot");
+var LEGACY_DATA_DIR = join3(homedir2(), ".opengrokbot");
+var EVENTS_DIR = join3(DATA_DIR, "events");
+var NATIVE_DIR = join3(DATA_DIR, "native");
 
 // server/container-computer.ts
 var run = promisify(execFile2);