Review only: skeptical review of fork UI and architecture (do not merge)

.github/FUNDING.yml

@@ -0,0 +1,2 @@
+polar: supamaus
+custom: ["https://buy.polar.sh/polar_cl_EEzWmormSVBD151HkmkyId9j0GPXina0KurfS1fYYcO"]

.github/workflows/ci.yml

@@ -39,6 +39,24 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
         run: pnpm exec vite build
 
+  control-plane:
+    name: control-plane check + workerd tests + dry run
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: pnpm/action-setup@ff378ebe6b225b0680b81c1ad4498ae0d1d3a5e3 # v6.0.10
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: 24
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm control-plane:check
+      - run: pnpm control-plane:test
+      - run: pnpm control-plane:dry-run
+
   package-linux:
     name: package + smoke (Ubuntu 24.04 x64)
     runs-on: ubuntu-24.04
@@ -55,13 +73,30 @@ jobs:
       - name: Install package validation and native smoke tools
         run: >-
           sudo apt-get update && sudo apt-get install -y
-          at-spi2-core dbus-x11 desktop-file-utils libxi6 libxkbcommon0 squashfs-tools xvfb
+          at-spi2-core dbus-x11 desktop-file-utils libxi6 libxkbcommon0 squashfs-tools x11-utils xdotool xvfb
       - run: pnpm install --frozen-lockfile
       - name: Stage the pinned CUA runtime
         run: pnpm build:cua:linux
+      - name: Prove overlay-free X11 input routing
+        run: dbus-run-session -- xvfb-run -a pnpm smoke:cua-x11-input
       - name: Package from the verified offline CUA stage
         run: pnpm package:linux:offline
       - run: node scripts/verify-linux-package.mjs
+      - name: Match a normal Ubuntu package parent on the ephemeral runner
+        run: |
+          test ! -L /opt
+          test "$(stat -c '%F %U:%G' /opt)" = "directory root:root"
+          case "$(stat -c '%a' /opt)" in
+            755) ;;
+            775|777) sudo chmod 0755 /opt ;;
+            *) echo "Unexpected /opt mode: $(stat -c '%a' /opt)" >&2; exit 1 ;;
+          esac
+          test "$(stat -c '%U:%G %a' /opt)" = "root:root 755"
+      - name: Reproduce and verify an in-place DEB upgrade
+        run: |
+          deb=(release/*.deb)
+          test "${#deb[@]}" -eq 1
+          sudo --preserve-env=CI,RUNNER_TEMP node scripts/smoke-deb-upgrade.mjs "${deb[0]}"
       - name: Configure Chromium sandbox for the unpacked app
         run: |
           sudo chown root:root release/linux-unpacked/chrome-sandbox
@@ -70,26 +105,22 @@ jobs:
       - name: Launch packaged app and verify lifecycle
         env:
           OMB_KEEP_SMOKE_DIR: "1"
+          OMB_SMOKE_INSTALLED_DEB: "1"
         run: pnpm smoke:linux-package
+      - name: Remove the installed upgrade fixture
+        if: always()
+        run: sudo dpkg --purge openmausbot || true
       - name: Upload smoke diagnostics on failure
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: failure()
         with:
           name: openmausbot-ubuntu-smoke-diagnostics
           path: |
-            ${{ runner.temp }}/omb-linux-smoke-*
-            ${{ runner.temp }}/omb-linux-smoke-runtime-*
+            /tmp/omb-linux-smoke-*
+            /tmp/omb-linux-smoke-runtime-*
           if-no-files-found: warn
           include-hidden-files: true
           retention-days: 7
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        if: always()
-        with:
-          name: openmausbot-ubuntu-x64
-          path: |
-            release/*.deb
-            release/*.AppImage
-          if-no-files-found: error
 
   ios:
     name: Swift tests + iOS build

.github/workflows/package-linux.yml

@@ -36,16 +36,33 @@ jobs:
       - name: Install package validation and native smoke tools
         run: >-
           sudo apt-get update && sudo apt-get install -y
-          at-spi2-core dbus-x11 desktop-file-utils libxi6 libxkbcommon0 squashfs-tools xvfb
+          at-spi2-core dbus-x11 desktop-file-utils libxi6 libxkbcommon0 squashfs-tools x11-utils xdotool xvfb
       - run: pnpm install --frozen-lockfile
       - name: Clean generated output
         run: pnpm clean
       - name: Stage the pinned CUA runtime
         run: pnpm build:cua:linux
+      - name: Prove overlay-free X11 input routing
+        run: dbus-run-session -- xvfb-run -a pnpm smoke:cua-x11-input
       - name: Package from the verified offline CUA stage
         run: pnpm package:linux:offline
       - name: Verify package contents and metadata
         run: node scripts/verify-linux-package.mjs
+      - name: Match a normal Ubuntu package parent on the ephemeral runner
+        run: |
+          test ! -L /opt
+          test "$(stat -c '%F %U:%G' /opt)" = "directory root:root"
+          case "$(stat -c '%a' /opt)" in
+            755) ;;
+            775|777) sudo chmod 0755 /opt ;;
+            *) echo "Unexpected /opt mode: $(stat -c '%a' /opt)" >&2; exit 1 ;;
+          esac
+          test "$(stat -c '%U:%G %a' /opt)" = "root:root 755"
+      - name: Reproduce and verify an in-place DEB upgrade
+        run: |
+          deb=(release/*.deb)
+          test "${#deb[@]}" -eq 1
+          sudo --preserve-env=CI,RUNNER_TEMP node scripts/smoke-deb-upgrade.mjs "${deb[0]}"
       - name: Configure Chromium sandbox for the unpacked app
         run: |
           sudo chown root:root release/linux-unpacked/chrome-sandbox
@@ -54,7 +71,11 @@ jobs:
       - name: Launch packaged app and verify lifecycle
         env:
           OMB_KEEP_SMOKE_DIR: "1"
+          OMB_SMOKE_INSTALLED_DEB: "1"
         run: pnpm smoke:linux-package
+      - name: Remove the installed upgrade fixture
+        if: always()
+        run: sudo dpkg --purge openmausbot || true
       - name: Prepare release assets
         id: release
         shell: bash
@@ -86,8 +107,8 @@ jobs:
         with:
           name: openmausbot-ubuntu-smoke-diagnostics
           path: |
-            ${{ runner.temp }}/omb-linux-smoke-*
-            ${{ runner.temp }}/omb-linux-smoke-runtime-*
+            /tmp/omb-linux-smoke-*
+            /tmp/omb-linux-smoke-runtime-*
           if-no-files-found: warn
           include-hidden-files: true
           retention-days: 7

.github/workflows/package-win.yml

@@ -63,6 +63,20 @@ jobs:
           [ -f "$res/server/index.js" ] || { echo "::error::missing $res/server/index.js"; fail=1; }
           # missing → the server has nothing to serve → black window
           [ -f "$res/ui/index.html" ] || { echo "::error::missing $res/ui/index.html"; fail=1; }
+          [ -f "$res/cloudflared/cloudflared.exe" ] || {
+            echo "::error::missing $res/cloudflared/cloudflared.exe"; fail=1; }
+          [ -f "$res/licenses/cloudflared-LICENSE.txt" ] || {
+            echo "::error::missing cloudflared Apache 2.0 license"; fail=1; }
+          [ -f "$res/licenses/cloudflared-README.md" ] || {
+            echo "::error::missing cloudflared release provenance"; fail=1; }
+          if [ -f "$res/cloudflared/cloudflared.exe" ]; then
+            expected=c29eee2b121f5436a642eed69fd9767da7e7b8c510fa50aaa130337f931357b5
+            actual=$(sha256sum "$res/cloudflared/cloudflared.exe" | cut -d' ' -f1)
+            [ "$actual" = "$expected" ] || {
+              echo "::error::packaged cloudflared hash is $actual"; fail=1; }
+            "$res/cloudflared/cloudflared.exe" version | grep -Fq "cloudflared version 2026.8.2 " || {
+              echo "::error::packaged cloudflared has the wrong version"; fail=1; }
+          fi
           [ -f "$res/app-update.yml" ] || { echo "::error::missing $res/app-update.yml"; fail=1; }
           if [ -f "$res/app-update.yml" ]; then
             grep -q "openmausbot-releases" "$res/app-update.yml" || {

.github/workflows/release.yml

@@ -106,6 +106,17 @@ jobs:
         run: |
           for app in release/mac-arm64/OpenMausBot.app release/mac/OpenMausBot.app; do
             codesign --verify --deep --strict "$app"
+            bin="$app/Contents/Resources/cloudflared/cloudflared"
+            test -x "$bin" || { echo "::error::missing executable $bin"; exit 1; }
+            test -f "$app/Contents/Resources/licenses/cloudflared-LICENSE.txt" \
+              || { echo "::error::missing cloudflared license in $app"; exit 1; }
+            test -f "$app/Contents/Resources/licenses/cloudflared-README.md" \
+              || { echo "::error::missing cloudflared provenance in $app"; exit 1; }
+            codesign --verify --strict "$bin"
+            app_team=$(codesign -dv --verbose=4 "$app" 2>&1 | sed -n 's/^TeamIdentifier=//p')
+            bin_team=$(codesign -dv --verbose=4 "$bin" 2>&1 | sed -n 's/^TeamIdentifier=//p')
+            test -n "$app_team" && test "$bin_team" = "$app_team" || {
+              echo "::error::cloudflared is not signed by the app's Developer ID team in $app"; exit 1; }
             echo "ok: $app"
           done
 
@@ -133,6 +144,15 @@ jobs:
               lipo -archs "$bin" | grep -q "x86_64" || { echo "::error::$bin lacks x86_64"; exit 1; }
               lipo -archs "$bin" | grep -q "arm64" || { echo "::error::$bin lacks arm64"; exit 1; }
             done
+            cloudflared="$res/cloudflared/cloudflared"
+            expected_arch=x86_64
+            case "$app" in *mac-arm64*) expected_arch=arm64 ;; esac
+            test "$(lipo -archs "$cloudflared")" = "$expected_arch" || {
+              echo "::error::$cloudflared is not the expected $expected_arch executable"; exit 1; }
+            if [ "$(uname -m)" = "$expected_arch" ]; then
+              "$cloudflared" version | grep -Fq "cloudflared version 2026.8.2 " || {
+                echo "::error::$cloudflared has the wrong version"; exit 1; }
+            fi
           done
 
       - name: Notarize all four artifacts
@@ -213,6 +233,14 @@ jobs:
           res=release/win-unpacked/resources
           [ -f "$res/server/index.js" ] || { echo "::error::missing server/index.js"; exit 1; }
           [ -f "$res/ui/index.html" ] || { echo "::error::missing ui/index.html"; exit 1; }
+          [ -f "$res/cloudflared/cloudflared.exe" ] || { echo "::error::missing cloudflared.exe"; exit 1; }
+          [ -f "$res/licenses/cloudflared-LICENSE.txt" ] || { echo "::error::missing cloudflared license"; exit 1; }
+          [ -f "$res/licenses/cloudflared-README.md" ] || { echo "::error::missing cloudflared provenance"; exit 1; }
+          expected=c29eee2b121f5436a642eed69fd9767da7e7b8c510fa50aaa130337f931357b5
+          actual=$(sha256sum "$res/cloudflared/cloudflared.exe" | cut -d' ' -f1)
+          [ "$actual" = "$expected" ] || { echo "::error::cloudflared hash is $actual"; exit 1; }
+          "$res/cloudflared/cloudflared.exe" version | grep -Fq "cloudflared version 2026.8.2 " || {
+            echo "::error::cloudflared has the wrong version"; exit 1; }
           [ -f "$res/app-update.yml" ] || { echo "::error::missing app-update.yml"; exit 1; }
           grep -q "openmausbot-releases" "$res/app-update.yml" || { echo "::error::wrong update repo"; exit 1; }
           if grep -q "publisherName" "$res/app-update.yml"; then
@@ -262,13 +290,32 @@ jobs:
       - name: Install package validation and native smoke tools
         run: >-
           sudo apt-get update && sudo apt-get install -y
-          at-spi2-core dbus-x11 desktop-file-utils libxi6 libxkbcommon0 squashfs-tools xvfb
+          at-spi2-core dbus-x11 desktop-file-utils libxi6 libxkbcommon0 squashfs-tools x11-utils xdotool xvfb
       - run: pnpm install --frozen-lockfile
       - name: Clean generated output
         run: pnpm clean
       - name: Stage the pinned CUA runtime
         run: pnpm build:cua:linux
+      - name: Prove overlay-free X11 input routing
+        run: dbus-run-session -- xvfb-run -a pnpm smoke:cua-x11-input
       - run: pnpm package:linux
+      - name: Verify package contents and metadata
+        run: node scripts/verify-linux-package.mjs
+      - name: Match a normal Ubuntu package parent on the ephemeral runner
+        run: |
+          test ! -L /opt
+          test "$(stat -c '%F %U:%G' /opt)" = "directory root:root"
+          case "$(stat -c '%a' /opt)" in
+            755) ;;
+            775|777) sudo chmod 0755 /opt ;;
+            *) echo "Unexpected /opt mode: $(stat -c '%a' /opt)" >&2; exit 1 ;;
+          esac
+          test "$(stat -c '%U:%G %a' /opt)" = "root:root 755"
+      - name: Reproduce and verify an in-place DEB upgrade
+        run: |
+          deb=(release/*.deb)
+          test "${#deb[@]}" -eq 1
+          sudo --preserve-env=CI,RUNNER_TEMP node scripts/smoke-deb-upgrade.mjs "${deb[0]}"
       - name: Configure Chromium sandbox for the unpacked app
         run: |
           sudo chown root:root release/linux-unpacked/chrome-sandbox
@@ -277,7 +324,11 @@ jobs:
       - name: Smoke the packages
         env:
           OMB_KEEP_SMOKE_DIR: "1"
+          OMB_SMOKE_INSTALLED_DEB: "1"
         run: pnpm smoke:linux-package
+      - name: Remove the installed upgrade fixture
+        if: always()
+        run: sudo dpkg --purge openmausbot || true
       - name: Stable-named copies and checksums
         run: |
           v=$(node -p "require('./package.json').version")

.gitignore

@@ -18,6 +18,9 @@ release
 .wrangler/
 .dev.vars
 .dev.vars.*
+!cloudflare/control-plane/.dev.vars.example
 cloudflare/composio-broker/worker-configuration.d.ts
+cloudflare/control-plane/worker-configuration.d.ts
 .claude/worktrees/
 .vercel/
+.pi/

CONTRIBUTING.md

@@ -39,13 +39,21 @@ pnpm package:mac   # DMG + ZIP; requires Swift/Xcode tools
 pnpm package:linux # Ubuntu x64 .deb + AppImage; no Swift required
 ```
 
+`pnpm dev:desktop` downloads and verifies the pinned Cloudflare Tunnel connector for the current
+platform and architecture before Electron starts. Later launches re-verify and reuse the staged
+binary. Packaging continues to use `pnpm build:cloudflared`, which stages every architecture the
+host's desktop package build requires. To stage only the current development target without
+launching Electron, run `node scripts/prepare-cloudflared.mjs --current`.
+
 For Ubuntu installation and real desktop checks, see [`docs/linux-desktop.md`](docs/linux-desktop.md).
 
 ## Ubuntu release checklist
 
 Ubuntu release packages must come from the manual **Package Ubuntu** workflow on an exact release commit or tag,
 not from a developer workstation. The Ubuntu 24.04 runner builds and verifies both formats, launches the unpacked
-app and AppImage, exercises the bundled Cua lifecycle, and produces one release artifact containing:
+app and AppImage, routes `click` and `type_text` through the overlay-free bundled Cua runtime on Xorg, runs the
+fail-closed Wayland CUA smoke,
+and produces one release artifact containing:
 
 - the versioned `.deb` and AppImage;
 - stable `OpenMausBot-amd64.deb` and `OpenMausBot.AppImage` copies used by the latest-download links;
@@ -110,6 +118,24 @@ The SPI in [`server/contracts.ts`](server/contracts.ts) is deliberately small. A
    failed spawn as a failed turn — never a hang, never a crash.
 5. Bring a contract test following the fake-CLI pattern (scripted fake process + `recordEvents`).
 
+## MCP tool schemas
+
+Tool `inputSchema`s travel through every engine's own MCP-to-provider conversion before a model
+sees them, and those converters are lossy: composition keywords get flattened, dropped, or pruned
+by size-compaction passes (codex only began preserving `oneOf` in mid-2026; others simplify
+harder). A model that never saw your schema's branches guesses shapes forever — that is exactly
+how chat routine proposals failed in the field hours after 0.1.38 shipped (#544).
+
+- **Never use `oneOf`, `anyOf`, `allOf`, `const`, or `format` in a tool `inputSchema`.** Advertise
+  one flat object; put per-variant rules in `description`s. `enum` on plain strings is fine.
+- **Coerce before you reject.** Models stringify nested objects, shorten enum values, and vary
+  case. If an input has one obvious meaning, accept it and normalize on the wire.
+- **Errors must teach.** When you refuse an input, the message states the supported shapes with a
+  literal example the model can copy. "Invalid discriminator value" burns a turn; an example
+  fixes the next call.
+- A schema test should assert the tool surface stays flat
+  (see `server/drivers/agents-proxy.test.ts` — it regexp-guards the serialized schema).
+
 ## Platform rules
 
 - The harness (`server/`) must stay portable Node. Anything macOS-only (TCC, Swift helpers,
@@ -119,8 +145,14 @@ The SPI in [`server/contracts.ts`](server/contracts.ts) is deliberately small. A
   independent capabilities.
 - Test Ubuntu platform claims on a real GNOME session. Xvfb proves packaging and fake-driver orchestration, not
   Wayland portal behavior or real CUA inspection/input delivery.
-- Linux local control must remain explicit: global opt-in plus per-bot **This computer**. Linux Auto, provider
-  full-auto/bypass modes, remembered grants, and cloud approvals must never authorize the user's desktop.
+- Linux local control is enabled only on GNOME/Xorg after explicit opt-in. The owned daemon must start with
+  `--no-overlay`: the decorative full-screen Cua cursor surface is not part of the product contract and must never
+  sit between the person and their desktop. GNOME/Wayland must clear a legacy durable opt-in, report
+  `linux-wayland-seat-safety-blocked`, and never start Cua until it independently passes the real-seat matrix in
+  #345. Xvfb proves the overlay-free arguments, lifecycle, and input routing; it does not waive real-seat evidence.
+  An unrelated app must remain clickable/typeable before any approved action. Global opt-in plus per-bot
+  **This computer** remains mandatory; Linux Auto, full-auto/bypass modes, remembered grants, and cloud approvals
+  must never authorize the user's desktop.
 - Keep CUA discovery shell-free and pin accepted archive, inner-file, manifest, and driver contracts. Packaged Linux
   builds must prefer their reviewed outside-ASAR runtime and fail closed instead of executing ambient PATH code;
   source/dev builds may use the validated explicit/user-local paths. Never add a runtime downloader/self-updater or