openmausbot 0.1.90 → 0.1.92

package/dist-server/workspace-backup.worker.js

@@ -16,7 +16,7 @@ import {
   cpSync,
   createReadStream,
   createWriteStream,
-  existsSync,
+  existsSync as existsSync2,
   fstatSync,
   fsyncSync as fsyncSync2,
   lstatSync,
@@ -31,7 +31,7 @@ import {
   writeFileSync as writeFileSync2,
   writeSync
 } from "node:fs";
-import { isAbsolute, join as join2, parse as parse3, posix, relative, resolve, win32 } from "node:path";
+import { isAbsolute, join as join3, parse as parse3, posix, relative, resolve, win32 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 import { backup, DatabaseSync } from "node:sqlite";
 import { pipeline } from "node:stream/promises";
@@ -3169,6 +3169,7 @@ var WORKSPACE_BACKUP_CLIENT_KEYS = [
   "omb-draft-channel-modes",
   "omb-skin",
   "omb-show-threads",
+  "omb-show-run-card",
   "openmausbot.sidebarDensity",
   "openmausbot.sidebarCollapsedSections.v1",
   "openmausbot.sidebarSectionOrder.v1",
@@ -3178,7 +3179,7 @@ var WORKSPACE_BACKUP_CLIENT_KEYS = [
 
 // server/config.ts
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { join as join2 } from "node:path";
 
 // node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -18683,15 +18684,27 @@ var stdioEntrySchema = external_exports.object({
 var stdioMutationSchema = stdioEntrySchema.extend({
   env: external_exports.record(external_exports.string(), external_exports.union([external_exports.string().max(16384), external_exports.literal(true)])).optional()
 });
+var CLIENT_ID = /^[\x20-\x7e]+$/;
+var SCOPE = /^[\x21\x23-\x5b\x5d-\x7e]+$/;
+var CLIENT_SECRET_MAX = 4096;
+var oauthClientSchema = external_exports.object({
+  clientId: external_exports.string().trim().min(1, "Enter the client ID of the app registered with this server's sign-in provider.").max(512).regex(CLIENT_ID, "A client ID is printable text on one line."),
+  clientSecret: external_exports.string().min(1).max(CLIENT_SECRET_MAX).regex(CLIENT_ID, "A client secret is printable text on one line.").optional(),
+  scopes: external_exports.array(external_exports.string().max(256).regex(SCOPE, "Scopes are single words, like offline_access or api://my-app/mcp.read.")).max(32).optional()
+}).strict();
 var remoteEntrySchema = external_exports.object({
   /** Streamable HTTP unless the entry says the older SSE transport. */
   type: external_exports.enum(["http", "sse"]).optional(),
   url: external_exports.string().trim().min(1).max(2048),
   headers: external_exports.record(external_exports.string(), external_exports.string().max(16384)).optional(),
+  oauth: oauthClientSchema.optional(),
   enabled: external_exports.boolean().optional()
 }).strict();
 var remoteMutationSchema = remoteEntrySchema.extend({
-  headers: external_exports.record(external_exports.string(), external_exports.union([external_exports.string().max(16384), external_exports.literal(true)])).optional()
+  headers: external_exports.record(external_exports.string(), external_exports.union([external_exports.string().max(16384), external_exports.literal(true)])).optional(),
+  oauth: oauthClientSchema.extend({
+    clientSecret: external_exports.union([external_exports.string().min(1).max(CLIENT_SECRET_MAX).regex(CLIENT_ID, "A client secret is printable text on one line."), external_exports.literal(true)]).optional()
+  }).optional()
 });
 
 // server/schema.ts
@@ -18706,11 +18719,82 @@ function schemaIssue(error51, fallback) {
 var CLOUD_SEAT_IDLE_STOP_MS = 5 * 6e4;
 var CLOUD_SEAT_SLEEP_RETRY_MAX_MS = 10 * 6e4;
 
+// server/proxy-paths.ts
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+var SERVER_ROOT = dirname(fileURLToPath(import.meta.url));
+function resolveProxy(relative2) {
+  const source = join(SERVER_ROOT, `${relative2}.ts`);
+  return existsSync(source) ? source : join(SERVER_ROOT, `${relative2}.js`);
+}
+var SPAWNED_PROXIES = {
+  browser: resolveProxy("browser-proxy"),
+  localComputer: resolveProxy("local-computer-proxy"),
+  permission: resolveProxy("permission-proxy"),
+  containerMcp: resolveProxy("container-mcp"),
+  vpsContainerMcp: resolveProxy("vps-container-mcp"),
+  agents: resolveProxy("drivers/agents-proxy"),
+  dweb: resolveProxy("drivers/dweb-proxy"),
+  connectors: resolveProxy("connector-proxy"),
+  mcpGate: resolveProxy("mcp-gate"),
+  phone: resolveProxy("drivers/phone-proxy"),
+  hook: resolveProxy("hooks/omb-hook"),
+  // Loaded by the external `pi` process via `-e`, not by this server — but
+  // resolved through the same single source of truth so the packaged layout
+  // check can assert it ships.
+  piMcpExtension: resolveProxy("drivers/pi-mcp-extension")
+};
+
+// server/enterprise.ts
+var layerSchema = external_exports.object({
+  customer: external_exports.string().min(1),
+  features: external_exports.array(external_exports.string().min(1)),
+  expiresAt: external_exports.string().nullable()
+});
+var DAY_MS = 24 * 60 * 6e4;
+
+// server/sessions.ts
+var PAIRING_CODE_TTL_MS = 5 * 6e4;
+function daysMs(value, fallbackDays) {
+  const days = Number(value);
+  const ok = Number.isInteger(days) && days >= 1 && days <= 3650;
+  return (ok ? days : fallbackDays) * 24 * 60 * 6e4;
+}
+var SESSION_TTL_MS = daysMs(process.env.OMB_SESSION_TTL_DAYS, 30);
+var SESSION_MAX_AGE_MS = daysMs(process.env.OMB_SESSION_MAX_DAYS, 180);
+var SESSION_RENEW_WHEN_LEFT_MS = SESSION_TTL_MS / 2;
+var STREAM_TICKET_TTL_MS = 5 * 6e4;
+var scopeSchema = external_exports.enum(["admin", "client"]);
+var sessionSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  tokenHash: external_exports.string().length(64),
+  label: external_exports.string().max(80),
+  scopes: external_exports.array(scopeSchema).min(1),
+  createdAt: external_exports.number(),
+  lastSeenAt: external_exports.number(),
+  expiresAt: external_exports.number(),
+  /** Set when the session came from an account sign-in rather than a code. */
+  userId: external_exports.string().max(256).optional(),
+  email: external_exports.string().max(320).optional(),
+  /** Set only by the internal verified-portal issuance path, never by email or pairing input. */
+  membershipAuthority: external_exports.literal("portal").optional(),
+  /** A browser sign-in (PairingCode `browser`): accepted only as its browser's cookie, never as a bearer token. */
+  cookieOnly: external_exports.literal(true).optional(),
+  /** Whose OMB Cloud a browser sign-in signed in to (its PairingCode `owner`). */
+  owner: external_exports.string().max(254).optional()
+});
+var fileSchema = external_exports.object({ version: external_exports.literal(1), sessions: external_exports.array(sessionSchema) });
+
+// server/cloud-home.ts
+var CLOUD_PAIRING_NONCE_MS = 10 * 6e4;
+
 // server/config.ts
 var optionalText = external_exports.string().optional();
 var SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
 var LEGACY_BROWSER_PROFILE_ID = /^[A-Za-z0-9_-]{1,40}$/;
 var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
+var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
@@ -18721,6 +18805,8 @@ var MIN_THREAD_EVENT_LOG_BYTES = 256 * 1024;
 var MAX_THREAD_EVENT_LOG_BYTES = 4 * 1024 * 1024 * 1024;
 var MIN_LOCAL_VM_MAX_INSTANCES = 1;
 var MAX_LOCAL_VM_MAX_INSTANCES = 8;
+var MIN_LOCAL_VM_IDLE_TIMEOUT_MINUTES = 5;
+var MAX_LOCAL_VM_IDLE_TIMEOUT_MINUTES = 1440;
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
@@ -18758,7 +18844,8 @@ var roomConfigSchema = external_exports.object({
 );
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
-  maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional()
+  maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
+  idleTimeoutMinutes: external_exports.number().int().min(MIN_LOCAL_VM_IDLE_TIMEOUT_MINUTES).max(MAX_LOCAL_VM_IDLE_TIMEOUT_MINUTES).optional()
 });
 var browserProfileSchema = external_exports.object({
   // "guest" is the throwaway session's reserved id, never a saved profile
@@ -18917,7 +19004,11 @@ var onboardingConfigSchema = external_exports.object({
   /** Which welcome flow was completed; a newer flow may re-show itself. */
   version: external_exports.number().int().min(0).max(1e3).optional(),
   reelSeen: external_exports.boolean().optional(),
-  hintsSeen: external_exports.array(external_exports.string().trim().min(1).max(60)).max(100).optional()
+  hintsSeen: external_exports.array(external_exports.string().trim().min(1).max(60)).max(100).optional(),
+  /** OMB Cloud home only: when a bot's turn first finished on this machine
+   * (cloud-home.ts firstCloudTurnPatch). Written by the server, read by the
+   * Cloud's setup checklist. */
+  firstTurnAt: external_exports.string().trim().max(40).optional()
 }).strict();
 var instanceConfigSchema = external_exports.object({
   driver: external_exports.string().min(1),
@@ -18929,6 +19020,7 @@ var instanceConfigSchema = external_exports.object({
   ]).optional(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   enabled: external_exports.boolean().optional(),
+  access: external_exports.enum(["subscription", "custom", "api"]).optional(),
   config: external_exports.json().optional()
 });
 var instanceConfigMapSchema = external_exports.record(external_exports.string(), instanceConfigSchema);
@@ -18990,7 +19082,12 @@ var appConfigSchema = external_exports.object({
   /** Anthropic API key for Claude Code billed per token, handed only to
    * Claude instances; `url` only for a proxy or a test double. Never a
    * personal-login OAuth token. */
-  anthropic: external_exports.object({ key: optionalText, url: optionalText }).optional(),
+  anthropic: external_exports.object({ key: optionalText, url: optionalText, everyClaudeBot: external_exports.boolean().optional() }).optional(),
+  /** OpenAI's own API key, for the `openai` instance only. Codex keeps its
+   * own ChatGPT or API login and never reads this. */
+  openai: external_exports.object({ key: optionalText }).optional(),
+  /** OpenRouter key, for the `openrouter` instance only. */
+  openrouter: external_exports.object({ key: optionalText }).optional(),
   /** Monthly spend limit for the whole workspace, against the cost engines
    * report to the usage ledger. Enforced only with the `budgets` entitlement. */
   budgets: external_exports.object({
@@ -19024,8 +19121,8 @@ var appConfigSchema = external_exports.object({
   opencodeGo: external_exports.object({ apiKey: optionalText }).optional(),
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
-   * `fishKey`), "system" (the Mac's built-in voices, no key), or
-   * "xai" (Grok TTS, reusing `xai.key`), or
+   * `fishKey`; `fishModel` picks its speech model), "system" (the Mac's
+   * built-in voices, no key), "xai" (Grok TTS, reusing `xai.key`), or
    * "chatterbox" (a local OpenAI-compatible Chatterbox server; `baseUrl`
    * and `model` are settings, not secrets). Cloud keys stay separate so
    * switching providers never overwrites or misuses the other key. */
@@ -19035,7 +19132,21 @@ var appConfigSchema = external_exports.object({
     voice: optionalText,
     provider: external_exports.enum(["elevenlabs", "fish", "system", "chatterbox", "xai"]).optional(),
     baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the Chatterbox server address must start with http:// or https://").optional(),
-    model: optionalText
+    model: optionalText,
+    fishModel: external_exports.enum(FISH_TTS_MODELS).optional()
+  }).optional(),
+  /** The decision model (server/decider): a fast classifier that picks
+   * things for bots, starting with who answers a room message. `key` is
+   * write-only like every credential; `baseUrl` points at a Jev-compatible
+   * server instead of TypeSafe's (an operator setting with no UI); `jobs`
+   * switches each decision on or off. Not `decisions`: that section is the
+   * authorization log's retention. */
+  decider: external_exports.object({
+    enabled: external_exports.boolean().optional(),
+    provider: external_exports.enum(["jev", "off"]).optional(),
+    key: optionalText,
+    baseUrl: external_exports.string().trim().max(2048).refine((value) => !value || /^https?:\/\//i.test(value), "the decision model address must start with http:// or https://").optional(),
+    jobs: external_exports.object({ roomRouting: external_exports.boolean().optional() }).optional()
   }).optional(),
   /** Avatar provider credentials stay separate; choosing a router never reuses a cloud key. */
   imageGen: external_exports.object({
@@ -19111,10 +19222,38 @@ function parseStoredConfig(value) {
   return parsed.data;
 }
 var DEFAULT_CAPTURE_QUIET_MS = 2 * 6e4;
-var DATA_DIR = process.env.OMB_DATA_DIR ?? join(homedir(), ".openmausbot");
-var LEGACY_DATA_DIR = join(homedir(), ".opengrokbot");
-var EVENTS_DIR = join(DATA_DIR, "events");
-var NATIVE_DIR = join(DATA_DIR, "native");
+var DATA_DIR = process.env.OMB_DATA_DIR ?? join2(homedir(), ".openmausbot");
+var LEGACY_DATA_DIR = join2(homedir(), ".opengrokbot");
+var EVENTS_DIR = join2(DATA_DIR, "events");
+var NATIVE_DIR = join2(DATA_DIR, "native");
+var OPENAI_API_INSTANCE = "openai";
+var OPENROUTER_API_INSTANCE = "openrouter";
+var XAI_API_INSTANCE = "xaiApi";
+var CLAUDE_API_INSTANCE = "claudeApi";
+var API_KEY_FLEET = {
+  [OPENAI_API_INSTANCE]: {
+    driver: "openai-compat",
+    displayName: "OpenAI",
+    access: "api",
+    icon: { kind: "preset", preset: "openai" },
+    config: { url: "https://api.openai.com/v1", apiKeyEnv: "OMB_OPENAI_API_KEY", catalog: "openai" }
+  },
+  [CLAUDE_API_INSTANCE]: {
+    driver: "claudeAgent",
+    displayName: "Claude (API key)",
+    access: "api",
+    icon: { kind: "preset", preset: "anthropic" },
+    config: { requireApiKey: true }
+  },
+  [XAI_API_INSTANCE]: { driver: "grok", displayName: "xAI", access: "api", icon: { kind: "preset", preset: "xai" } },
+  [OPENROUTER_API_INSTANCE]: {
+    driver: "openai-compat",
+    displayName: "OpenRouter",
+    access: "api",
+    icon: { kind: "preset", preset: "openrouter" },
+    config: { url: "https://openrouter.ai/api/v1", apiKeyEnv: "OMB_OPENROUTER_API_KEY" }
+  }
+};
 
 // server/workspace-backup-policy.ts
 var PORTABLE_CONFIG_KEYS = [
@@ -19135,13 +19274,14 @@ function portableWorkspaceConfig(value) {
 }
 function excludedWorkspaceAuthPath(path) {
   if (/^command-allowlist\.json(?:$|\.\d+\.[0-9a-f-]+\.tmp$)/.test(path)) return true;
+  if (/^mcp-oauth\.json(?:$|\.\d+\.[0-9a-f-]+\.tmp$)/.test(path)) return true;
   return /^(?:(?:providers|caddy|chrome-profile|\.agent-browser)(?:\/|$)|workspace-credentials\.json$|external-runtimes\.json$|browser-engine-key$)/.test(path) || /^(?:config\.json|webhooks\.json|workspace-credentials\.json|external-runtimes\.json|browser-engine-key|sessions\.json|tunnel-account\.json)\.\d+(?:\.[0-9a-f-]+)?\.tmp$/.test(path) || /^(?:vm-home|vm-homes\/[^/]+)\/\.browser-profiles(?:\/|$)/.test(path);
 }
 function redownloadedOrgLibraryPath(path) {
   return /^org-library\/(?:catalog\.json(?:\.[0-9a-f-]{36}\.tmp)?$|blobs(?:\/|$))/.test(path);
 }
 function ephemeralWorkspaceTokenPath(path) {
-  return /^hook-tokens(?:\/|$)/.test(path);
+  return /^(?:hook-tokens(?:\/|$)|sessions\.json\.open$)/.test(path);
 }
 
 // server/workspace-backup.ts
@@ -19169,7 +19309,13 @@ var EXCLUDED = /* @__PURE__ */ new Set([
   "openmausbot-server.lease",
   "box-create-requests.lock",
   "messages.db-wal",
-  "messages.db-shm"
+  "messages.db-shm",
+  // This machine's decision-model log (server/decider/log.ts): local
+  // measurement of what the classifier picked, not workspace data.
+  "decider-log",
+  // A Cloud home's record of who its owner was (server/cloud-owner.ts): this
+  // machine's own, kept in place by a restore, which settles what it brought.
+  "cloud-owner.json"
 ]);
 var EXCLUSION_NOTES = [
   "Device pairing, server identity, live leases and runtime files (existing destination identities are preserved).",
@@ -19197,13 +19343,13 @@ function backupRoot(dataDir2) {
   if (root === parse3(root).root) throw new Error("A filesystem root cannot be a workspace backup target.");
   const stat = lstatSync(root);
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("The workspace data directory must not be a symbolic link.");
-  const path = join2(root, ".backups");
+  const path = join3(root, ".backups");
   folder(path);
   return path;
 }
 function jobPath(dataDir2, id) {
   if (!ID.test(id)) throw new Error("Invalid workspace backup identifier.");
-  const path = join2(backupRoot(dataDir2), id);
+  const path = join3(backupRoot(dataDir2), id);
   if (entryExists(path)) {
     const stat = lstatSync(path);
     if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("Unsafe workspace backup job directory.");
@@ -19246,14 +19392,14 @@ function writeJson(path, value) {
   writeFileAtomic(path, text, { mode: 384 });
 }
 function assertLocalAuthOutsideSnapshot(dataDir2) {
-  const configPath = join2(dataDir2, "config.json");
-  const config2 = existsSync(configPath) ? privateJson(configPath) : {};
+  const configPath = join3(dataDir2, "config.json");
+  const config2 = existsSync2(configPath) ? privateJson(configPath) : {};
   const instances = record2(config2) && record2(config2.instances) ? config2.instances : {};
   const fields = ["HOME", "USERPROFILE", "CLAUDE_CONFIG_DIR", "CODEX_HOME", "GROK_HOME", "KIMI_CODE_HOME", "HERMES_HOME", "FACTORY_HOME_OVERRIDE", "XDG_CONFIG_HOME", "XDG_DATA_HOME", "LOCALAPPDATA"];
   const check2 = (value, field, home) => {
     if (typeof value !== "string" || !value.trim()) return;
     const text = value.trim();
-    const expanded = text.startsWith("~/") || text.startsWith("~\\") ? join2(home, text.slice(2)) : text;
+    const expanded = text.startsWith("~/") || text.startsWith("~\\") ? join3(home, text.slice(2)) : text;
     const resolved = resolve(expanded);
     const exists = entryExists(resolved);
     const path = relative(exists ? realpathSync(dataDir2) : resolve(dataDir2), exists ? realpathSync(resolved) : resolved).replaceAll("\\", "/");
@@ -19331,7 +19477,7 @@ function hashFile(path) {
   }
 }
 function countJsonArray(path) {
-  if (!existsSync(path)) return 0;
+  if (!existsSync2(path)) return 0;
   const value = privateJson(path);
   if (!Array.isArray(value)) throw new Error("A workspace roster is not a valid JSON array.");
   const ids = /* @__PURE__ */ new Set();
@@ -19344,7 +19490,7 @@ function countJsonArray(path) {
   return value.length;
 }
 function databaseCounts(path) {
-  if (!existsSync(path)) return { threads: 0, messages: 0 };
+  if (!existsSync2(path)) return { threads: 0, messages: 0 };
   const db = new DatabaseSync(path, { readOnly: true });
   try {
     const check2 = db.prepare("PRAGMA quick_check").all();
@@ -19363,27 +19509,27 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
   const salt = randomBytes(16);
   const key = await passwordKey(options2.password, salt);
   const job = newJob(dataDir2, jobId2);
-  const snapshot = join2(job.directory, "snapshot");
-  folder(join2(snapshot, "data"));
+  const snapshot = join3(job.directory, "snapshot");
+  folder(join3(snapshot, "data"));
   const entries = [];
   const warnings = ["Stop external editors and managed desktops before exporting; files written outside this server cannot be frozen by the backup gate.", "Conversation text and user files are not redacted and may contain secrets you pasted. Keep the encrypted backup private.", RESTORE_WARNING];
   let bytes = 0;
   let skippedLinks = 0;
   try {
     const root = realpathSync(dataDir2);
-    const sourceDb = join2(root, "messages.db");
-    if (existsSync(sourceDb)) {
+    const sourceDb = join3(root, "messages.db");
+    if (existsSync2(sourceDb)) {
       if (lstatSync(sourceDb).isSymbolicLink()) throw new Error("The message database must not be a symbolic link.");
       const db = new DatabaseSync(sourceDb, { readOnly: true });
       const completionPulse = setInterval(() => {
       }, 25);
       try {
-        await backup(db, join2(snapshot, "messages-snapshot.db"));
+        await backup(db, join3(snapshot, "messages-snapshot.db"));
       } finally {
         clearInterval(completionPulse);
         db.close();
       }
-      const snapshotDb = new DatabaseSync(join2(snapshot, "messages-snapshot.db"));
+      const snapshotDb = new DatabaseSync(join3(snapshot, "messages-snapshot.db"));
       try {
         snapshotDb.exec("PRAGMA journal_mode = DELETE");
       } finally {
@@ -19397,7 +19543,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
         if (excludedWorkspaceAuthPath(path2) || ephemeralWorkspaceTokenPath(path2) || redownloadedOrgLibraryPath(path2)) continue;
         if (forbiddenArchivePath(path2)) throw new Error("A workspace filename conflicts with a protected authentication or runtime path.");
         if (!validRelative(path2)) throw new Error("A workspace filename cannot be safely restored on supported platforms.");
-        const source = join2(directory, name);
+        const source = join3(directory, name);
         const stat = lstatSync(source);
         if (stat.isSymbolicLink()) {
           let target;
@@ -19417,7 +19563,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
           continue;
         }
         if (entries.length >= MAX_WORKSPACE_BACKUP_FILES) throw new Error("The workspace exceeds the 100,000-entry backup limit.");
-        const destination = join2(snapshot, "data", path2);
+        const destination = join3(snapshot, "data", path2);
         if (stat.isDirectory()) {
           folder(destination);
           entries.push({ path: path2, type: "directory", size: 0, mode: 448 });
@@ -19435,7 +19581,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
               writeJson(destination, value);
             }
             copied = { size: lstatSync(destination).size, mode: 384, sha256: hashFile(destination) };
-          } else copied = copyRegular(path2 === "messages.db" ? join2(snapshot, "messages-snapshot.db") : source, destination);
+          } else copied = copyRegular(path2 === "messages.db" ? join3(snapshot, "messages-snapshot.db") : source, destination);
           bytes += copied.size;
           if (bytes > MAX_WORKSPACE_BACKUP_BYTES) throw new Error("The workspace exceeds the 10 GB backup limit.");
           entries.push({ path: path2, type: "file", ...copied });
@@ -19453,9 +19599,9 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
       files: entries.filter((entry) => entry.type === "file").length,
       directories: entries.filter((entry) => entry.type === "directory").length,
       bytes,
-      bots: countJsonArray(join2(snapshot, "data", "bots.json")),
-      groups: countJsonArray(join2(snapshot, "data", "groups.json")),
-      ...databaseCounts(join2(snapshot, "data", "messages.db")),
+      bots: countJsonArray(join3(snapshot, "data", "bots.json")),
+      groups: countJsonArray(join3(snapshot, "data", "groups.json")),
+      ...databaseCounts(join3(snapshot, "data", "messages.db")),
       exclusions: EXCLUSION_NOTES,
       warnings
     };
@@ -19465,9 +19611,9 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
       clientState: options2.clientState ?? {},
       entries
     };
-    writeJson(join2(snapshot, "manifest.json"), manifest);
-    validateManifest(privateJson(join2(snapshot, "manifest.json")));
-    const path = join2(job.directory, "workspace.ombbackup");
+    writeJson(join3(snapshot, "manifest.json"), manifest);
+    validateManifest(privateJson(join3(snapshot, "manifest.json")));
+    const path = join3(job.directory, "workspace.ombbackup");
     const iv = randomBytes(12);
     const header = Buffer.concat([MAGIC, salt, iv]);
     const cipher = createCipheriv("aes-256-gcm", key, iv);

package/enterprise/server/index.js

@@ -14728,7 +14728,11 @@ var sessionSchema = external_exports.object({
   userId: external_exports.string().max(256).optional(),
   email: external_exports.string().max(320).optional(),
   /** Set only by the internal verified-portal issuance path, never by email or pairing input. */
-  membershipAuthority: external_exports.literal("portal").optional()
+  membershipAuthority: external_exports.literal("portal").optional(),
+  /** A browser sign-in (PairingCode `browser`): accepted only as its browser's cookie, never as a bearer token. */
+  cookieOnly: external_exports.literal(true).optional(),
+  /** Whose OMB Cloud a browser sign-in signed in to (its PairingCode `owner`). */
+  owner: external_exports.string().max(254).optional()
 });
 var fileSchema = external_exports.object({ version: external_exports.literal(1), sessions: external_exports.array(sessionSchema) });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.90",
+  "version": "0.1.92",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",

package/dist/assets/channel-BCuyHjFV.js

@@ -1 +0,0 @@
-import{U as a,C as n}from"./mermaid.core-Dc4OePBL.js";const t=(r,o)=>a.lang.round(n.parse(r)[o]);export{t as c};