openmausbot 0.1.97 → 0.1.98

package/dist-server/shared/device-sign-in.js

@@ -0,0 +1,57 @@
+// Where a person enters the one-time code that signs an engine's CLI in on
+// the machine running OpenMausBot (`codex login --device-auth`, `grok login
+// --device-auth`). The server reads the page and the code from the CLI's
+// output with these rules, and the app checks them again before it shows a
+// link. Neither ever turns arbitrary output into a link, or lets a token ride
+// along in one.
+const CODEX_PAGE = "https://auth.openai.com/codex/device";
+const RULES = {
+    codex: {
+        page: (value) => (/^https:\/\/auth\.openai\.com\/codex\/device\/?$/.test(value) ? CODEX_PAGE : null),
+        code: /^[A-Z0-9]{4,8}-[A-Z0-9]{4,8}$/,
+    },
+    grok: {
+        // xAI's own sign-in hosts. The page may carry the code itself (the
+        // provider's "complete" link); nothing else may ride in its query.
+        page: (value) => {
+            if (!/^https:\/\/[^\s#]+$/.test(value))
+                return null;
+            let url;
+            try {
+                url = new URL(value);
+            }
+            catch {
+                return null;
+            }
+            if (url.username || url.password || url.port || !/(^|\.)(x\.ai|grok\.com)$/.test(url.hostname))
+                return null;
+            return [...url.searchParams.keys()].every((key) => key === "user_code") ? url.href : null;
+        },
+        code: /^[A-Z0-9]{4,12}(?:-[A-Z0-9]{2,12}){0,3}$/,
+    },
+};
+/** The provider's own page for entering `userCode`, or null for anything
+ * else. A code carried in the page's link must be that same code. */
+export function deviceSignInLink(provider, value, userCode) {
+    const page = value ? RULES[provider].page(value) : null;
+    if (!page)
+        return null;
+    return [...new URL(page).searchParams.values()].every((carried) => carried === userCode) ? page : null;
+}
+/** A one-time code as this provider formats it. */
+export function isDeviceSignInCode(provider, value) {
+    return typeof value === "string" && RULES[provider].code.test(value);
+}
+/** The page and the code from a CLI's output, once both lines have arrived
+ * whole: output arrives in chunks that may stop halfway through a code, so
+ * the last, unfinished line is never read. `text` is already free of
+ * terminal styling. */
+export function deviceSignInPrompt(provider, text) {
+    const lines = text.split(/\r?\n/).slice(0, -1).map((line) => line.trim());
+    const at = lines.findIndex((line) => RULES[provider].page(line) !== null);
+    if (at < 0)
+        return null;
+    const userCode = lines.slice(at + 1).map((line) => line.replace(/^code:\s*/i, "")).find((line) => isDeviceSignInCode(provider, line));
+    const authorizationUrl = userCode ? deviceSignInLink(provider, lines[at], userCode) : null;
+    return authorizationUrl && userCode ? { authorizationUrl, userCode } : null;
+}

package/dist-server/shared/team-backup.js

@@ -29,6 +29,8 @@ const task = z.object({
     closedBy: z.object({ botId: key, name, at: timestamp }).optional(),
     /** Only true travels. Absence is unpinned, including backups from before pins. */
     pinned: z.literal(true).optional(),
+    /** A conversation's own turn ceiling. Absence keeps the group default. */
+    turnTimeoutMinutes: z.number().int().min(1).max(1_440).optional(),
     activeLeafId: key.nullable(),
     messages: z.array(message).max(100_000),
 });

package/dist-server/shared/thread-model.js

@@ -0,0 +1,13 @@
+/** The same engine, model, effort and variant. */
+export function sameModelSelection(a, b) {
+    if (!a || !b)
+        return a === b;
+    return a.instanceId === b.instanceId && a.model === b.model && a.effort === b.effort && a.variant === b.variant;
+}
+/** A bot's threads that run on a model of their own, different from the
+ * bot's: the ones "Switch them too" moves onto the bot's model. Reads the
+ * wire shape, where only followsBotModel === false is a thread's own pick, so
+ * a server too old to send it counts none. */
+export function threadsOnOwnModel(botModel, tasks) {
+    return tasks.filter((task) => task.followsBotModel === false && !sameModelSelection(task.modelSelection ?? botModel, botModel));
+}

package/dist-server/vps-container-mcp.js

@@ -16210,6 +16210,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -16255,6 +16257,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -16593,6 +16600,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),

package/dist-server/workspace-backup.worker.js

@@ -12,17 +12,17 @@ import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID a
 import {
   chmodSync,
   closeSync as closeSync2,
-  constants,
+  constants as constants2,
   cpSync,
   createReadStream,
   createWriteStream,
   existsSync,
-  fstatSync,
+  fstatSync as fstatSync2,
   fsyncSync as fsyncSync2,
-  lstatSync,
+  lstatSync as lstatSync2,
   mkdirSync,
   openSync as openSync2,
-  readFileSync,
+  readFileSync as readFileSync2,
   readdirSync,
   readSync,
   realpathSync,
@@ -3007,7 +3007,18 @@ var To = (s4) => {
 
 // server/atomic.ts
 import { randomUUID } from "node:crypto";
-import { closeSync, fsyncSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import {
+  closeSync,
+  constants,
+  fstatSync,
+  fsyncSync,
+  lstatSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "node:fs";
 var RENAME_RETRY_DELAYS_MS = [5, 10, 20, 40, 80];
 var RETRYABLE_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EACCES", "EBUSY"]);
 function sleepSync(ms2) {
@@ -3031,7 +3042,7 @@ function writeFileAtomic(path, data, options2 = {}) {
   try {
     fd = openSync(tmp, "w", options2.mode);
     writeFileSync(fd, data);
-    fsyncSync(fd);
+    if (options2.durable !== false) fsyncSync(fd);
     closeSync(fd);
     fd = null;
     renameWithRetry(tmp, path);
@@ -18769,6 +18780,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -18814,6 +18827,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -19152,6 +19170,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),
@@ -19312,14 +19331,14 @@ function forbiddenArchivePath(path) {
 }
 function folder(path) {
   mkdirSync(path, { recursive: true, mode: 448 });
-  const stat = lstatSync(path);
+  const stat = lstatSync2(path);
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("The backup directory must be a real directory, not a symbolic link.");
   chmodSync(path, 448);
 }
 function backupRoot(dataDir2) {
   const root = resolve(dataDir2);
   if (root === parse3(root).root) throw new Error("A filesystem root cannot be a workspace backup target.");
-  const stat = lstatSync(root);
+  const stat = lstatSync2(root);
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("The workspace data directory must not be a symbolic link.");
   const path = join2(root, ".backups");
   folder(path);
@@ -19329,7 +19348,7 @@ function jobPath(dataDir2, id) {
   if (!ID.test(id)) throw new Error("Invalid workspace backup identifier.");
   const path = join2(backupRoot(dataDir2), id);
   if (entryExists(path)) {
-    const stat = lstatSync(path);
+    const stat = lstatSync2(path);
     if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("Unsafe workspace backup job directory.");
   }
   return path;
@@ -19347,7 +19366,7 @@ function record2(value) {
 }
 function entryExists(path) {
   try {
-    lstatSync(path);
+    lstatSync2(path);
     return true;
   } catch (error51) {
     if (error51.code === "ENOENT") return false;
@@ -19355,11 +19374,11 @@ function entryExists(path) {
   }
 }
 function privateJson(path) {
-  const fd = openSync2(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const fd = openSync2(path, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   try {
-    const stat = fstatSync(fd);
+    const stat = fstatSync2(fd);
     if (!stat.isFile() || stat.size > MAX_METADATA_BYTES) throw new Error("Workspace backup metadata is too large or is not a regular file.");
-    return JSON.parse(readFileSync(fd, "utf8"));
+    return JSON.parse(readFileSync2(fd, "utf8"));
   } finally {
     closeSync2(fd);
   }
@@ -19408,10 +19427,10 @@ function passwordKey(password, salt) {
   });
 }
 function copyRegular(source, destination) {
-  const input = openSync2(source, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const input = openSync2(source, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   let output;
   try {
-    const before = fstatSync(input);
+    const before = fstatSync2(input);
     if (!before.isFile() || before.size > MAX_WORKSPACE_BACKUP_BYTES) throw new Error("A workspace file is not regular or exceeds the 10 GB backup limit.");
     const mode = before.mode & 64 ? 448 : 384;
     output = openSync2(destination, "wx", mode);
@@ -19427,8 +19446,8 @@ function copyRegular(source, destination) {
       let offset = 0;
       while (offset < count) offset += writeSync(output, chunk, offset, count - offset);
     }
-    const after = fstatSync(input);
-    const current = lstatSync(source);
+    const after = fstatSync2(input);
+    const current = lstatSync2(source);
     if (size !== before.size || after.mtimeMs !== before.mtimeMs || after.ctimeMs !== before.ctimeMs || current.ino !== before.ino || current.dev !== before.dev || current.isSymbolicLink()) {
       throw new Error("A workspace file changed during backup. Stop its writer and retry.");
     }
@@ -19440,9 +19459,9 @@ function copyRegular(source, destination) {
   }
 }
 function hashFile(path) {
-  const fd = openSync2(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const fd = openSync2(path, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   try {
-    if (!fstatSync(fd).isFile()) throw new Error("The workspace archive contains an unsafe file.");
+    if (!fstatSync2(fd).isFile()) throw new Error("The workspace archive contains an unsafe file.");
     const hash2 = createHash("sha256");
     const chunk = Buffer.allocUnsafe(1024 * 1024);
     for (; ; ) {
@@ -19499,7 +19518,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
     const root = realpathSync(dataDir2);
     const sourceDb = join2(root, "messages.db");
     if (existsSync(sourceDb)) {
-      if (lstatSync(sourceDb).isSymbolicLink()) throw new Error("The message database must not be a symbolic link.");
+      if (lstatSync2(sourceDb).isSymbolicLink()) throw new Error("The message database must not be a symbolic link.");
       const db = new DatabaseSync(sourceDb, { readOnly: true });
       const completionPulse = setInterval(() => {
       }, 25);
@@ -19524,7 +19543,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
         if (forbiddenArchivePath(path2)) throw new Error("A workspace filename conflicts with a protected authentication or runtime path.");
         if (!validRelative(path2)) throw new Error("A workspace filename cannot be safely restored on supported platforms.");
         const source = join2(directory, name);
-        const stat = lstatSync(source);
+        const stat = lstatSync2(source);
         if (name === "node_modules" && (stat.isDirectory() || stat.isSymbolicLink())) {
           skippedDependencies++;
           continue;
@@ -19568,7 +19587,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
               }
               writeJson(destination, value);
             }
-            copied = { size: lstatSync(destination).size, mode: 384, sha256: hashFile(destination) };
+            copied = { size: lstatSync2(destination).size, mode: 384, sha256: hashFile(destination) };
           } else copied = copyRegular(path2 === "messages.db" ? join2(snapshot, "messages-snapshot.db") : source, destination);
           bytes += copied.size;
           if (bytes > MAX_WORKSPACE_BACKUP_BYTES) throw new Error("The workspace exceeds the 10 GB backup limit.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.97",
+  "version": "0.1.98",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",