getBates · Kollerro · Mar 10, 2026 · Mar 10, 2026 · Mar 10, 2026 · Mar 10, 2026
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1,40 @@
+# Build output
+build/output/
+*.exe
+
+# OS files
+.DS_Store
+Thumbs.db
+desktop.ini
+
+# Node
+node_modules/
+npm-debug.log
+
+# Plugin data (runtime, not shipped)
+bates-core/plugins/*/data/
+bates-core/plugins/*/node_modules/
+bates-enhance/integrations/*/node_modules/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# Secrets (should never be committed)
+*.env
+.env.*
+credentials.json
+auth-profiles.json
+*.key
+*.pem
+
+# Temporary
+*.tmp
+*.bak
+*.orig
+
+# Search index data
+bates-enhance/integrations/search/search-index/db/
+bates-enhance/integrations/search/search-index/venv/
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -0,0 +1,174 @@
+# Bates Installer — Development Log & Current State
+
+## Architecture
+- **Machine B** (server): Windows + WSL2 + Ubuntu 24.04 + OpenClaw gateway + Tailscale
+- **Machine A** (client): Windows + Tailscale for Windows + dashboard viewer
+- **Installer**: Tauri v2 (Rust + React) — builds to `bates-installer.exe` (~53MB)
+- **NEVER use the NSIS bundle** (`bundle/nsis/*.exe`) — always use `src-tauri/target/release/bates-installer.exe`
+
+## Build Process
+1. Repo at `/home/openclaw/Bates/` on branch `feature/installer-v1`
+2. `build.ps1` Step 4b syncs installer source from WSL repo via `\\wsl$\` path
+3. `build.ps1` Step 4 copies `Desktop\bates-core` + `Desktop\bates-enhance` to Tauri resources
+4. **Must rsync repo → Desktop before building** (or build.ps1 Step 4b handles source, but Desktop\bates-core must be synced manually for runtime files)
+5. Build: `powershell -ExecutionPolicy Bypass -File C:\Users\openclaw\bates-build\build.ps1`
+6. Code signing: Certum SimplySign (must be running)
+
+## Install Flow (Server)
+Welcome → Role → License → SysCheck → API Setup (xAI/Grok included, Anthropic API-only) → Assistant Email → M365 → Teams → Installing → Success
+
+The "Installing" step runs:
+1. `install.ps1` — Windows side: WSL2 enable, Ubuntu install, .wslconfig, scheduled tasks, auto-logon (skipped in GUI mode)
+2. `core-setup.sh` — Linux side: apt packages, Node.js, OpenClaw (pinned to v2026.4.5), Teams plugin, mcporter, Claude Code, Codex CLI, plugins, systemd services
+3. `core-configure.sh` — Config: AI provider auth, M365 tokens, Tailscale install+auth+funnel, Teams bot manifest+sideload, PostHog analytics
+
+## Install Attempts & Bugs Found
+
+### Attempt 1 (2026-04-07 ~19:00)
+**Result**: Failed — hung at auto-logon prompt
+**Bug**: `install.ps1` had `Read-Host` prompts (auto-logon password, reboot confirm) that hang with no terminal in GUI mode
+**Root cause**: Desktop\bates-core was synced from repo for first time, picking up March 30 auto-logon additions that were never tested from Tauri GUI. Previous successful builds used March 23 install.ps1 which had no interactive prompts.
+**Fix**: Set `BATES_NONINTERACTIVE=1` env var in `lib.rs` before launching `install.ps1`. Guard all `Read-Host` with `$env:BATES_NONINTERACTIVE` check. Default `$configureAutoLogon = $false` in non-interactive mode.
+
+### Attempt 2 (2026-04-07 ~20:00)
+**Result**: Failed — scheduled task duration error + auto-logon still hung
+**Bug 1**: `Register-ScheduledTask` with `[TimeSpan]::MaxValue` → "Duration:P99999999DT23H59M59S" rejected on some Windows versions
+**Fix**: Changed to `New-TimeSpan -Days 9999`
+**Bug 2**: `$configureAutoLogon` defaulted to `$true` even in non-interactive mode, falling through to password `Read-Host`
+**Fix**: Default to `$false` when `BATES_NONINTERACTIVE` is set
+
+### Attempt 3 (2026-04-07 ~20:30)
+**Result**: Partial — install completed but Tailscale hung
+**Bug**: Duplicate Tailscale auth — `core-configure.sh` handles Tailscale auth via bash, but `Installing.tsx` ran `tailscale_start_auth()` AGAIN via Rust, creating blank CMD windows and double auth attempts
+**Fix**: Removed duplicate Tailscale auth from `Installing.tsx`. All Tailscale handled in `core-configure.sh` only.
+
+### Attempt 4 (2026-04-07 ~21:00)
+**Result**: Success! Mission Control connected. But Teams not working and CMD windows popping up.
+**Bug 1**: Teams manifest not created — `BATES_TEAMS_ENABLED='True'` (PowerShell capital T) didn't match `== "true"` in bash
+**Fix**: Case-insensitive comparison with `=~ ^[Tt]rue$` and `:-false` default for unset vars
+**Bug 2**: `zip` not installed in Ubuntu — manifest ZIP creation failed silently
+**Fix**: Added `zip` to apt packages in `core-setup.sh`
+**Bug 3**: CMD windows from scheduled tasks — `cmd.exe /c bat` always opens visible window
+**Fix**: Replaced bat files with PowerShell .ps1 scripts, run via `powershell -WindowStyle Hidden`
+**Bug 4**: WSL keepalive used hardcoded `wsl -d Ubuntu` but distro is `Ubuntu-24.04`
+**Fix**: `__DISTRO__` placeholder in bat templates, replaced with actual distro name during install
+
+### Attempt 5 (2026-04-08 ~00:00)
+**Result**: Failed — `BATES_TEAMS_ENABLED: unbound variable`
+**Bug**: `${BATES_TEAMS_ENABLED,,}` (lowercase operator) crashes with `set -u` when variable is unset
+**Fix**: Changed to `${BATES_TEAMS_ENABLED:-false}` with `=~ ^[Tt]rue$` regex comparison
+
+### Attempt 6 (2026-04-08 ~00:30)
+**Result**: Failed — Tailscale Serve already enabled, installer waited for approval that wasn't needed
+**Bug**: On re-install to same tailnet, Serve is already enabled but installer opened the enable URL and waited
+**Fix**: Try `tailscale funnel` first — if it works, skip the browser prompt. Only open enable URL if funnel fails.
+
+### Attempt 7 (2026-04-08 ~01:00)
+**Result**: Failed — `apt-get` lock held by `unattended-upgrades`
+**Bug**: Fresh Ubuntu runs `unattended-upgrades` immediately on boot, grabbing dpkg lock before installer
+**Fix**: Stop + disable `unattended-upgrades`, kill process, wait for lock, clean stale locks. Re-enable after install.
+
+### Attempt 8 (2026-04-08 ~12:00)
+**Result**: Failed — installed OpenClaw v4.8 instead of v4.5 (npm pulled latest)
+**Bug**: `npm install -g openclaw` without version pin installed v4.8 which has breaking changes (removed msteams SDK exports, different dist file hashes, heavier startup)
+**Fix**: Pinned to `openclaw@2026.4.5`
+
+### Attempt 9 (2026-04-08 ~12:30)
+**Result**: Partial success — installed correctly, Mission Control connected, Tailscale worked
+**Remaining bugs**:
+- `tailscale serve` used instead of `tailscale funnel` → only accessible within tailnet, not public internet
+- Teams manifest not created — `teamsEnabled` was `false` because TeamsSetup page required clicking "Set up Teams" button instead of auto-starting
+- CMD windows still appearing (old scheduled tasks, bat files)
+- Mailing list signup on Success page not working (possibly Tauri elevated process blocking fetch)
+
+## Current Fixes Applied (not yet tested in clean install)
+1. `tailscale funnel` instead of `tailscale serve` for public HTTPS
+2. TeamsSetup auto-starts bot creation when M365 work token available
+3. Teams `onNext` debug logging + `install-config.json` retained after install
+4. PowerShell .ps1 scripts for keepalive/watchdog instead of .bat files
+5. Success page shows Tailscale hostname
+6. Client installer auto-installs Tailscale for Windows + auto-discovers server via tailnet scan
+
+## Current Blockers for Next Test
+1. **Teams bot not connecting** — `teamsEnabled` stays `false` despite bot being created. Auto-start fix committed but untested.
+2. **Teams app sideloading** — Graph API upload needs `AppCatalog.Submit` + `TeamsAppInstallation.ReadWriteForUser` scopes (added to M365 OAuth but untested)
+3. **CMD windows** — PowerShell .ps1 replacement committed but untested on fresh install
+4. **Mailing list** — API works from curl but fetch from Tauri elevated process may be blocked
+
+## OpenClaw v4.5 → v4.8 Upgrade (NOT YET DONE)
+v4.8 has breaking changes:
+- 5 MSTeams SDK exports removed (`createTypingCallbacks`, `createReplyPrefixOptions`, `promptChannelAccessConfig`, `createScopedPairingAccess`, `splitOnboardingEntries` alias)
+- `__openclawSendTeamsCard` and `__openclawMessageTransform` removed from pi-embedded
+- Server code restructured: `server-*.js` → `server-*.js` (loader) + `server.impl-*.js`
+- All dist file hashes changed
+- New extensions: arcee, memory-wiki, webhooks
+- New plugin-sdk: approval system, channel-streaming, media generation
+- `subagentName` bug fixed upstream
+- Estimated patch effort: 2-3 hours
+
+## Key Files
+- `bates-core/installer-gui/src-tauri/src/lib.rs` — Rust backend (OAuth, install runner, Tailscale commands)
+- `bates-core/installer-gui/src/App.tsx` — React page flow + state management
+- `bates-core/installer-gui/src/pages/` — Individual installer pages
+- `bates-core/install.ps1` — Windows-side install (WSL, Ubuntu, scheduled tasks)
+- `bates-core/core-setup.sh` — Linux package install (Node, OpenClaw, plugins)
+- `bates-core/core-configure.sh` — Configuration (AI auth, M365, Tailscale, Teams, analytics)
+- `bates-core/core-client-setup.ps1` — Client mode installer (Tailscale + auto-discovery)
+- `bates-core/patches/reapply-patches.sh` — Applies dist patches after OpenClaw install
+- `bates-enhance/integrations/teams/manifest.json.template` — Teams app manifest template
+
+## Environment Variables (install.ps1 → core-configure.sh)
+PowerShell booleans become `'True'`/`'False'` strings — always use case-insensitive comparison in bash:
+```bash
+# WRONG: ${VAR,,} crashes with set -u when unset
+# WRONG: == "true" misses "True" from PowerShell
+# RIGHT:
+if [[ "${VAR:-false}" =~ ^[Tt]rue$ ]]; then
+```
+
+Key vars: `BATES_TEAMS_ENABLED`, `BATES_M365_ENABLED`, `BATES_ANALYTICS_ENABLED`, `BATES_TEAMS_APP_ID`, `BATES_TEAMS_APP_PASSWORD`, `BATES_TEAMS_MS_TOKEN`, `BATES_TAILSCALE_AUTHKEY`
+
+## PostHog Analytics
+- Project key: `phc_isp0qiQK8OMC6xU1OutM7bPjp9iJGZwSG0IcsgmRj0o`
+- Host: `https://us.i.posthog.com`
+- Dashboard: `https://us.posthog.com`
+- Sends `bates_installed` event with version, account type, Teams/M365/Telegram enabled flags
+- Only fires when user opts in (License page checkbox)
+
+## Mailing List
+- API: `https://ptggolkwuahddlmnygyy.supabase.co/rest/v1/rpc/signup_waitlist`
+- Works from curl but may fail from Tauri elevated process
+- Subscribe button on Success page
+
+## Testing
+- **VM**: Windows 11 dev eval, reset between test runs
+- **Tailscale account**: `bateson2026@outlook.com` (test account, tailnet `tail3938eb`)
+- **M365 account**: `rk@fdesk.tech` (work/school)
+- **AI provider**: OpenAI Codex (subscription OAuth)
+- Azure bot app ID changes on each fresh install (created dynamically)
+
+## Code Review Findings (2026-04-08, pre-Attempt 10)
+
+### Critical bugs found and fixed:
+
+1. **M365 OAuth token missing Teams scopes** (HIGH RISK)
+   - Auto-start Teams used `oauth_m365` token (line 651) which had basic scopes only
+   - `Application.ReadWrite.All`, `AppCatalog.Submit`, `TeamsAppInstallation.*` were only in `oauth_microsoft_teams` (line 772)
+   - Bot creation and manifest upload would fail silently with the auto-start token
+   - **Fix**: Added all Teams scopes to the regular M365 OAuth
+
+2. **Teams manifest icons wrong size** (HIGH RISK)
+   - Source icon is 512x512, Teams requires 192x192 (color) and 32x32 (outline)
+   - ImageMagick not installed, fallback copied 512x512 as both → Teams rejects manifest
+   - **Fix**: Added Pillow to pip install, use venv Python for resizing
+
+3. **MSTEAMS_APP_ID used before set** (HIGH RISK)
+   - Manifest template substitution at line 743 used `MSTEAMS_APP_ID`
+   - Variable was set at line 934 (AFTER the Teams block)
+   - Manifest was generated with empty app ID
+   - **Fix**: Set `MSTEAMS_APP_ID` at start of Teams block from `BATES_TEAMS_APP_ID` env var
+
+### Medium risk (cosmetic/non-blocking):
+4. `Invoke-WslBash` uses `cmd /c "wsl ..."` which may flash console windows during install despite `CREATE_NO_WINDOW` flag from parent process
+5. `tailscale_check_status` has 10s timeout — might return empty hostname on slow WSL startup
+6. M365 token could expire during very long installs (>1 hour on slow connections)
diff --git a/DISCLAIMER.txt b/DISCLAIMER.txt
@@ -0,0 +1,80 @@
+BATES AI ASSISTANT
+https://getbates.ai | https://github.com/getBates/Bates
+Created by the Bates Contributors
+
+------------------------------------------------------------------------
+                      IMPORTANT DISCLAIMER
+------------------------------------------------------------------------
+
+PLEASE READ CAREFULLY BEFORE PROCEEDING WITH INSTALLATION.
+
+This software is provided "AS IS", without warranty of any kind, express
+or implied. This is an EXPERIMENTAL, PRE-RELEASE PROJECT under active
+development.
+
+By installing and using this software, you acknowledge and accept the
+following:
+
+1. USE AT YOUR OWN RISK. The authors, contributors, and maintainers of
+   this project accept no responsibility or liability for any damage,
+   data loss, system instability, security incidents, unexpected costs,
+   or any other harm resulting from the use or misuse of this software.
+
+2. SYSTEM MODIFICATIONS. This installer modifies your system
+   configuration, including enabling WSL2, installing packages, creating
+   systemd services, setting up cron jobs, and configuring network
+   services. These changes may affect your system's stability, security,
+   and performance.
+
+3. THIRD-PARTY SERVICES. This software interacts with third-party APIs
+   and services (Anthropic, OpenAI, Google, Telegram, Twilio, Microsoft
+   365, ElevenLabs, and others). You are solely responsible for any
+   costs, terms of service violations, or consequences arising from the
+   use of these services.
+
+4. NO WARRANTY. No guarantee of correctness, security, or fitness for
+   any particular purpose. The installer scripts have been tested on
+   specific hardware and software configurations. Your results may vary.
+
+5. AUTONOMOUS AI AGENTS. This software manages AI agents that can take
+   autonomous actions including sending messages, making API calls,
+   reading and writing files, and executing commands. You are responsible
+   for supervising and configuring these agents appropriately.
+
+6. BACK UP YOUR DATA before running the installer. We strongly recommend
+   testing on a dedicated or non-critical machine first.
+
+7. NO AFFILIATION. This project is not affiliated with, endorsed by, or
+   supported by Anthropic, OpenAI, Google, Microsoft, Telegram, Twilio,
+   ElevenLabs, or any other third-party service mentioned herein.
+
+8. POWERED BY OPENCLAW. Bates is built on OpenClaw, an open-source AI
+   gateway created by Peter Steinberger (MIT License). By installing
+   Bates, you are also installing OpenClaw. OpenClaw's own license terms
+   and security notices apply. See: https://github.com/openclaw/openclaw
+
+------------------------------------------------------------------------
+                     BATES LICENSE (Apache 2.0)
+------------------------------------------------------------------------
+
+Copyright 2025-2026 getBates Contributors
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may
+not use this file except in compliance with the License. You may obtain
+a copy of the License at:
+
+    https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+OpenClaw is licensed separately under the MIT License by Peter
+Steinberger. See the previous page or https://github.com/openclaw/openclaw
+
+------------------------------------------------------------------------
+
+BY PROCEEDING WITH THE INSTALLATION, YOU ACCEPT FULL RESPONSIBILITY FOR
+ANY AND ALL CONSEQUENCES.
diff --git a/OPENCLAW-LICENSE.txt b/OPENCLAW-LICENSE.txt
@@ -0,0 +1,60 @@
+OPENCLAW -- SECURITY NOTICE & LICENSE
+https://openclaw.ai | https://github.com/openclaw/openclaw
+Created by Peter Steinberger
+
+Bates is powered by OpenClaw. Please read the following before
+proceeding.
+
+------------------------------------------------------------------------
+                        SECURITY NOTICE
+------------------------------------------------------------------------
+
+Your AI assistant can execute shell commands, read/write files, access
+network services, and send messages. By installing this software, you
+acknowledge the following:
+
+- PERSONAL ASSISTANT TRUST MODEL. OpenClaw assumes one trusted operator
+  per gateway (single-user model). It is not designed as a hostile
+  multi-tenant security boundary for multiple untrusted users.
+
+- PROMPT INJECTION IS NOT SOLVED. Even with strong safeguards, prompt
+  injection remains possible. Treat inbound DMs as untrusted input.
+  Smaller or weaker AI models face elevated risk.
+
+- THERE IS NO "PERFECTLY SECURE" SETUP. The goal is to be deliberate
+  about who can talk to your bot, where the bot is allowed to act, and
+  what the bot can touch.
+
+- DATA ON DISK IS UNENCRYPTED. Session transcripts containing private
+  messages and tool output are stored on disk under ~/.openclaw/. File
+  system permissions and full-disk encryption are your protections.
+
+- RUN "openclaw security audit" regularly and review configuration
+  hardening guidance before production deployment.
+
+For the full security guide: https://docs.openclaw.ai/gateway/security
+
+------------------------------------------------------------------------
+                          MIT LICENSE
+------------------------------------------------------------------------
+
+Copyright (c) 2025 Peter Steinberger
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.