openmausbot 0.1.94 → 0.1.96

package/dist-server/shared/pairing-link.js

@@ -0,0 +1,144 @@
+// The one `openmausbot://pair` link builder. The desktop's phone setup, the
+// headless server's pairing endpoint and `openmausbot pair` all print this
+// link; the Android and iOS scanners read it (android/core Connection.kt
+// `PairingInvite.parse`, ios CompanionCore Client.swift `PairingInvite.parse`).
+//
+// Every value is written with encodeURIComponent, so a space is `%20`. The
+// desktop used URLSearchParams until Oct 2026, which writes a space as `+`;
+// neither phone read that back as a space, and "Miguel's computer" showed up
+// as "Miguel's+computer". The phones now also read `+` as a space, for links
+// from desktops still running the old builder.
+/** How many fallback routes a link will carry. The list is tiny in practice;
+ * the cap only keeps a pathological interface table from bloating the QR. */
+export const MAX_PAIRING_HOSTS = 8;
+const ENDPOINT_KINDS = new Set(["hosted", "tailnet", "lan", "bonjour"]);
+/** Keep the QR contract strict even though its input came from our own
+ * sidecar. A public URL with credentials or a path is not a companion base
+ * URL, and filtering it is safer than teaching the phone to reinterpret it.
+ * Sorted by priority, deduplicated by origin, capped. */
+export function qrEndpoints(endpoints) {
+    const seen = new Set();
+    const valid = [];
+    for (const endpoint of endpoints ?? []) {
+        if (!endpoint ||
+            !ENDPOINT_KINDS.has(endpoint.kind) ||
+            !Number.isInteger(endpoint.priority) ||
+            endpoint.priority < 0 ||
+            endpoint.priority > 1_000_000) {
+            continue;
+        }
+        try {
+            const parsed = new URL(endpoint.url);
+            const expectedProtocol = endpoint.kind === "hosted" ? "https:" : "http:";
+            const explicitPort = parsed.port ? Number(parsed.port) : null;
+            const hostname = parsed.hostname.toLowerCase().replace(/\.$/, "");
+            if (parsed.protocol !== expectedProtocol ||
+                // No empty DNS label (".ts.net", "mac..local"): the phones refuse
+                // one, and one endpoint they refuse makes them refuse the whole QR.
+                hostname.split(".").includes("") ||
+                (endpoint.kind === "tailnet" && !hostname.endsWith(".ts.net")) ||
+                (explicitPort !== null && (!Number.isInteger(explicitPort) || explicitPort < 1 || explicitPort > 65_535)) ||
+                parsed.username ||
+                parsed.password ||
+                parsed.pathname !== "/" ||
+                parsed.search ||
+                parsed.hash ||
+                seen.has(parsed.origin)) {
+                continue;
+            }
+            seen.add(parsed.origin);
+            valid.push({ url: parsed.origin, kind: endpoint.kind, priority: endpoint.priority });
+        }
+        catch {
+            // One malformed advisory route must not invalidate an otherwise usable
+            // pairing QR. It is simply omitted from the route walk.
+        }
+    }
+    return valid.sort((left, right) => left.priority - right.priority).slice(0, MAX_PAIRING_HOSTS);
+}
+/** URL-safe, unpadded base64 keeps the structured JSON smaller than query
+ * escaping every quote and slash while remaining straightforward to decode
+ * with Foundation on iOS. */
+function encodeEndpoints(endpoints) {
+    const bytes = new TextEncoder().encode(JSON.stringify(endpoints));
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function validSecretPublicKey(value) {
+    if (!value || !/^[A-Za-z0-9_-]{87}$/.test(value))
+        return null;
+    try {
+        const base64 = value.replaceAll("-", "+").replaceAll("_", "/") + "=";
+        const decoded = atob(base64);
+        if (decoded.length !== 65 || decoded.charCodeAt(0) !== 4)
+            return null;
+        let binary = "";
+        for (let index = 0; index < decoded.length; index += 1)
+            binary += decoded[index];
+        return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "") === value
+            ? value
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The `address` value: `host:port` (IPv6 bracketed) or a bare http(s)
+ * origin, or null when it is neither. Both phones refuse an address with
+ * credentials, a path, a query or a fragment, as `qrEndpoints` does. */
+function linkAddress(address, port) {
+    const value = address.trim();
+    if (!value)
+        return null;
+    if (/^https?:\/\//i.test(value)) {
+        try {
+            const parsed = new URL(value);
+            if (parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash)
+                return null;
+            return parsed.origin;
+        }
+        catch {
+            return null;
+        }
+    }
+    if (port === undefined || !Number.isInteger(port) || port < 1 || port > 65_535)
+        return null;
+    const authority = value.includes(":") && !value.startsWith("[") ? `[${value}]` : value;
+    return `${authority}:${port}`;
+}
+/**
+ * A short-lived handoff from a trusted pairing screen to the mobile app. The
+ * credential still has to be redeemed; putting it in the link does not
+ * create or expose the long-lived device token. Null when any required part
+ * is malformed, so a caller never prints a link a phone would refuse.
+ */
+export function phonePairingLink({ address, port, token, code, name, hosts, endpoints, secretPublicKey, }) {
+    const dial = linkAddress(address, port);
+    if (!dial || !/^omb_pair_[A-Za-z0-9_-]{43}$/.test(token))
+        return null;
+    if (code !== undefined && !/^\d{6}$/.test(code))
+        return null;
+    const fields = [["address", dial], ["token", token]];
+    if (code !== undefined)
+        fields.push(["code", code]);
+    if (name?.trim())
+        fields.push(["name", name.trim()]);
+    // Comma-joined, which no hostname or IP literal can contain. Filtered
+    // rather than refused: a bad candidate costs the phone one failed dial,
+    // and dropping the whole link over it would break pairing entirely.
+    const candidates = (hosts ?? [])
+        .map((candidate) => candidate.trim())
+        .filter((candidate) => candidate && !/[\s/?#,[\]]/.test(candidate))
+        .slice(0, MAX_PAIRING_HOSTS);
+    if (candidates.length)
+        fields.push(["hosts", candidates.join(",")]);
+    const routes = qrEndpoints(endpoints);
+    if (routes.length)
+        fields.push(["endpoints", encodeEndpoints(routes)]);
+    const secretKey = validSecretPublicKey(secretPublicKey);
+    if (secretKey)
+        fields.push(["secretKey", secretKey]);
+    return `openmausbot://pair?${fields.map(([key, value]) => `${key}=${encodeURIComponent(value)}`).join("&")}`;
+}

package/dist-server/shared/tool-surface.js

@@ -7,8 +7,9 @@
  * computer is illustrated only after one of these; the built-in browser's
  * read-only calls (snapshot, read, get_text, waits) stay out by the same rule. */
 export const SCREEN_TOUCHING_TOOLS = new Set([
-    // cloud boat / remote computer
-    "screenshot", "click", "type_text", "press_key", "scroll", "computer_batch", "open_url", "browser_click", "browser_fill",
+    // cloud boat / remote computer (server/cloud-computer-tools.ts names its
+    // key tool key_press)
+    "screenshot", "click", "type_text", "press_key", "key_press", "scroll", "computer_batch", "open_url", "browser_click", "browser_fill",
     // built-in browser: the Electron surface's names, kept because a bot on an
     // older remote harness can still call them
     "browser_navigate", "browser_type", "browser_press", "browser_scroll", "browser_hover", "browser_drag",

package/dist-server/vps-container-mcp.js

@@ -16202,10 +16202,6 @@ var remoteMutationSchema = remoteEntrySchema.extend({
   }).optional()
 });
 
-// server/cloud-overflow.ts
-var CLOUD_SEAT_IDLE_STOP_MS = 5 * 6e4;
-var CLOUD_SEAT_SLEEP_RETRY_MAX_MS = 10 * 6e4;
-
 // server/config.ts
 var optionalText = external_exports.string().optional();
 var SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
@@ -16403,17 +16399,6 @@ var featureConfigSchema = external_exports.object({
    * conversations that share words with the message ride into the turn.
    * Read-only; on unless explicitly switched off — see autoRecallEnabled. */
   autoRecall: external_exports.boolean().optional(),
-  /** Idle release for computer claims (#1653): a desktop seat that stays
-   * screen-quiet for 90 seconds is released to waiting turns while its
-   * holder's turn still lives; the previous holder re-claims directly
-   * for 10 minutes and yields to an occupied seat. Off until baked; see
-   * computerClaimIdleReleaseEnabled for how to enable it by hand. */
-  computerClaimIdleRelease: external_exports.boolean().optional(),
-  /** Consented cloud overflow for local computer waits (#1655): a wait
-   * may offer a per-second-billed cloud seat, but only through an explicit
-   * consent card or a configured allowlist — never a silent Auto default.
-   * Off until baked; see cloudOverflowEnabled for how to enable it by hand. */
-  cloudOverflow: external_exports.boolean().optional(),
   /** Opt-in shared skills library: one store at the data dir that bots
    * read by assignment instead of per-workspace copies. Off until
    * explicitly enabled — see skillsLibraryEnabled. */
@@ -16539,8 +16524,12 @@ var appConfigSchema = external_exports.object({
    * provider is Boat now and the key is kept for compatibility. */
   box: external_exports.object({ token: optionalText }).optional(),
   vps: vpsConfigSchema.optional(),
-  /** Optional OpenCode key; persisted write-only and passed only to its child. */
-  opencodeGo: external_exports.object({ apiKey: optionalText }).optional(),
+  /** Optional OpenCode key; persisted write-only and passed only to its child.
+   * `providerKeys`: keys for OpenCode's other providers (Venice, Groq…) by the
+   * environment name OpenCode reads, also write-only and only for its child.
+   * Settings changes go through mergeOpenCodeProviderKeys; the stored copy
+   * is read loosely (storedAppConfigSchema). */
+  opencodeGo: external_exports.object({ apiKey: optionalText, providerKeys: external_exports.record(external_exports.string(), external_exports.string()).optional() }).optional(),
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
    * `fishKey`; `fishModel` picks its speech model), "system" (the Mac's
@@ -16620,15 +16609,6 @@ var appConfigSchema = external_exports.object({
   /** The authorization decision log (server/decision-log.ts): days of month
    * files kept, at least; OMB_DECISION_RETENTION_DAYS wins when set. */
   decisions: external_exports.object({ retentionDays: external_exports.number().int().min(1).max(3650).optional() }).strict().optional(),
-  /** #1655 cloud-overflow settings. perSecondCostUsd is the operator's own
-   * verified rate: with no price configured the feature stays inert rather
-   * than show an invented one. allowlistedThreads carries standing consent
-   * for exact thread ids. */
-  cloudOverflow: external_exports.object({
-    perSecondCostUsd: external_exports.number().positive().max(10).optional(),
-    idleStopMs: external_exports.number().int().positive().max(24 * 60 * 6e4).optional(),
-    allowlistedThreads: external_exports.array(external_exports.string().min(1)).max(1e3).optional()
-  }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
@@ -16643,7 +16623,14 @@ var appConfigSchema = external_exports.object({
   mcpServers: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
 var storedAppConfigSchema = appConfigSchema.extend({
-  browserProfiles: storedBrowserProfilesSchema.optional()
+  browserProfiles: storedBrowserProfilesSchema.optional(),
+  /** Read loosely, like mcpServers: a hand-edited provider key that isn't
+   * text is dropped here, and a bad name or key later
+   * (openCodeProviderKeys), never the whole file. */
+  opencodeGo: external_exports.object({
+    apiKey: optionalText,
+    providerKeys: external_exports.record(external_exports.string(), external_exports.unknown()).catch({}).transform((keys) => Object.fromEntries(Object.entries(keys).filter((entry) => typeof entry[1] === "string"))).optional()
+  }).optional()
 });
 var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true }).extend({ threads: threadsPatchSchema.optional(), newBots: newBotsPatchSchema.optional() });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
@@ -16691,7 +16678,8 @@ function resolveProxy(relative) {
   return existsSync2(source) ? source : join3(SERVER_ROOT, `${relative}.js`);
 }
 var SPAWNED_PROXIES = {
-  browser: resolveProxy("browser-proxy"),
+  // The built-in browser and the cloud computer: argv[2] picks which.
+  harnessMcp: resolveProxy("harness-mcp-proxy"),
   localComputer: resolveProxy("local-computer-proxy"),
   permission: resolveProxy("permission-proxy"),
   containerMcp: resolveProxy("container-mcp"),
@@ -16724,7 +16712,6 @@ var DISPLAY = ":1";
 var CUA_SOCKET = "/run/user/1000/openmausbot-cua.sock";
 var CUA_EXECUTABLE = "/usr/local/libexec/openmausbot/cua-driver";
 var MEMORY_BYTES = 4 * 1024 * 1024 * 1024;
-var SHM_BYTES = 512 * 1024 * 1024;
 function cuaExecArgs(args2, options = {}) {
   return [
     "exec",

package/dist-server/workspace-backup.worker.js

@@ -18761,10 +18761,6 @@ function schemaIssue(error51, fallback) {
   return path ? `${path} ${issue2.message}` : issue2.message;
 }
 
-// server/cloud-overflow.ts
-var CLOUD_SEAT_IDLE_STOP_MS = 5 * 6e4;
-var CLOUD_SEAT_SLEEP_RETRY_MAX_MS = 10 * 6e4;
-
 // server/config.ts
 var optionalText = external_exports.string().optional();
 var SSH_ALIAS = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
@@ -18962,17 +18958,6 @@ var featureConfigSchema = external_exports.object({
    * conversations that share words with the message ride into the turn.
    * Read-only; on unless explicitly switched off — see autoRecallEnabled. */
   autoRecall: external_exports.boolean().optional(),
-  /** Idle release for computer claims (#1653): a desktop seat that stays
-   * screen-quiet for 90 seconds is released to waiting turns while its
-   * holder's turn still lives; the previous holder re-claims directly
-   * for 10 minutes and yields to an occupied seat. Off until baked; see
-   * computerClaimIdleReleaseEnabled for how to enable it by hand. */
-  computerClaimIdleRelease: external_exports.boolean().optional(),
-  /** Consented cloud overflow for local computer waits (#1655): a wait
-   * may offer a per-second-billed cloud seat, but only through an explicit
-   * consent card or a configured allowlist — never a silent Auto default.
-   * Off until baked; see cloudOverflowEnabled for how to enable it by hand. */
-  cloudOverflow: external_exports.boolean().optional(),
   /** Opt-in shared skills library: one store at the data dir that bots
    * read by assignment instead of per-workspace copies. Off until
    * explicitly enabled — see skillsLibraryEnabled. */
@@ -19098,8 +19083,12 @@ var appConfigSchema = external_exports.object({
    * provider is Boat now and the key is kept for compatibility. */
   box: external_exports.object({ token: optionalText }).optional(),
   vps: vpsConfigSchema.optional(),
-  /** Optional OpenCode key; persisted write-only and passed only to its child. */
-  opencodeGo: external_exports.object({ apiKey: optionalText }).optional(),
+  /** Optional OpenCode key; persisted write-only and passed only to its child.
+   * `providerKeys`: keys for OpenCode's other providers (Venice, Groq…) by the
+   * environment name OpenCode reads, also write-only and only for its child.
+   * Settings changes go through mergeOpenCodeProviderKeys; the stored copy
+   * is read loosely (storedAppConfigSchema). */
+  opencodeGo: external_exports.object({ apiKey: optionalText, providerKeys: external_exports.record(external_exports.string(), external_exports.string()).optional() }).optional(),
   /** Voice settings and the selected voice id. `provider` picks the
    * engine: "elevenlabs" (default; needs `key`), "fish" (needs its own
    * `fishKey`; `fishModel` picks its speech model), "system" (the Mac's
@@ -19179,15 +19168,6 @@ var appConfigSchema = external_exports.object({
   /** The authorization decision log (server/decision-log.ts): days of month
    * files kept, at least; OMB_DECISION_RETENTION_DAYS wins when set. */
   decisions: external_exports.object({ retentionDays: external_exports.number().int().min(1).max(3650).optional() }).strict().optional(),
-  /** #1655 cloud-overflow settings. perSecondCostUsd is the operator's own
-   * verified rate: with no price configured the feature stays inert rather
-   * than show an invented one. allowlistedThreads carries standing consent
-   * for exact thread ids. */
-  cloudOverflow: external_exports.object({
-    perSecondCostUsd: external_exports.number().positive().max(10).optional(),
-    idleStopMs: external_exports.number().int().positive().max(24 * 60 * 6e4).optional(),
-    allowlistedThreads: external_exports.array(external_exports.string().min(1)).max(1e3).optional()
-  }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
   onboarding: onboardingConfigSchema.optional(),
@@ -19202,7 +19182,14 @@ var appConfigSchema = external_exports.object({
   mcpServers: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
 var storedAppConfigSchema = appConfigSchema.extend({
-  browserProfiles: storedBrowserProfilesSchema.optional()
+  browserProfiles: storedBrowserProfilesSchema.optional(),
+  /** Read loosely, like mcpServers: a hand-edited provider key that isn't
+   * text is dropped here, and a bad name or key later
+   * (openCodeProviderKeys), never the whole file. */
+  opencodeGo: external_exports.object({
+    apiKey: optionalText,
+    providerKeys: external_exports.record(external_exports.string(), external_exports.unknown()).catch({}).transform((keys) => Object.fromEntries(Object.entries(keys).filter((entry) => typeof entry[1] === "string"))).optional()
+  }).optional()
 });
 var appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true }).extend({ threads: threadsPatchSchema.optional(), newBots: newBotsPatchSchema.optional() });
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());

package/enterprise/server/index.js

@@ -14589,7 +14589,8 @@ function resolveProxy(relative) {
   return existsSync(source) ? source : join(SERVER_ROOT, `${relative}.js`);
 }
 var SPAWNED_PROXIES = {
-  browser: resolveProxy("browser-proxy"),
+  // The built-in browser and the cloud computer: argv[2] picks which.
+  harnessMcp: resolveProxy("harness-mcp-proxy"),
   localComputer: resolveProxy("local-computer-proxy"),
   permission: resolveProxy("permission-proxy"),
   containerMcp: resolveProxy("container-mcp"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.94",
+  "version": "0.1.96",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",

package/dist/assets/channel-CdJX6i8k.js

@@ -1 +0,0 @@
-import{U as a,C as n}from"./mermaid.core-B_BKNCw5.js";const t=(r,o)=>a.lang.round(n.parse(r)[o]);export{t as c};