@saadnvd1/agent-os 0.3.819 → 0.3.821

package/lib/orchestrator/held.ts

@@ -5,6 +5,7 @@ import { AskRefused, raiseAsk, workSubject } from "./asks";
 import { latestApproval } from "./ask-approvals";
 import type { FailureRow } from "./gates";
 import type { Verdict } from "./signoff";
+import { owner, Owner } from "../owner";
 
 const short = (sha: string) => sha.slice(0, 7);
 
@@ -20,7 +21,7 @@ export function heldVerdict(
   // An approval of this head was judged before this (signoff.ts).
   const approval = latestApproval(workspaceId, workSubject(task.id));
   if (approval) {
-    const why = `Saad approved ${approval.sha ? short(approval.sha) : "an earlier commit"}, but PR #${pr}'s head is now ${short(sha)}${moved ? ` and ${moved}` : ""}`;
+    const why = `${Owner()} approved ${approval.sha ? short(approval.sha) : "an earlier commit"}, but PR #${pr}'s head is now ${short(sha)}${moved ? ` and ${moved}` : ""}`;
     try {
       raiseAsk({
         workspaceId,
@@ -46,6 +47,6 @@ export function heldVerdict(
   return {
     ok: false,
     wait: false,
-    text: `${task.name} is with Saad (${held.map((h) => h.gate).join(", ")}: ${held[0].last_reason}). Only he can merge it now, or approve it on his asks list.${waiting}`,
+    text: `${task.name} is with ${owner()} (${held.map((h) => h.gate).join(", ")}: ${held[0].last_reason}). Only he can merge it now, or approve it on his asks list.${waiting}`,
   };
 }

package/lib/orchestrator/mcp-servers.ts

@@ -3,7 +3,7 @@
  * fixed list (tool-names.ts); each workspace adds whole servers, by name, from
  * Settings → Workspaces. Servers carry their own auth and some send outbound
  * (a message, an email), so none is allowed unless named; the brief keeps
- * those actions as hard lines for ask_saad.
+ * those actions as hard lines for ask_owner.
  *
  * Only names are ever read from the Claude config: never env, headers, URLs
  * or tokens.

package/lib/orchestrator/pause.ts

@@ -8,6 +8,7 @@
 
 import { db } from "../db";
 import { getWorkspace } from "../workspaces";
+import { ownerUi } from "../owner";
 import { addNote } from "./notes";
 
 export function isPaused(workspaceId: string): boolean {
@@ -15,7 +16,7 @@ export function isPaused(workspaceId: string): boolean {
 }
 
 export const PAUSED_REFUSAL =
-  "Paused by Saad: acting tools refuse until he resumes. You can still read, note and ask_saad; events wait until then.";
+  "Paused by the owner: acting tools refuse until they resume. You can still read, note and ask_owner; events wait until then.";
 
 export function setPaused(workspaceId: string, paused: boolean): boolean {
   const changed = db
@@ -29,8 +30,8 @@ export function setPaused(workspaceId: string, paused: boolean): boolean {
     addNote(
       workspaceId,
       paused
-        ? "Paused by Saad. Events wait and acting tools refuse until he resumes."
-        : "Resumed by Saad. Events that queued while paused are delivered now.",
+        ? `Paused by ${ownerUi()}. Events wait and acting tools refuse until ${ownerUi() === "you" ? "you resume" : "they resume"}.`
+        : `Resumed by ${ownerUi()}. Events that queued while paused are delivered now.`,
       "pause"
     );
   return changed === 1;

package/lib/orchestrator/questions.ts

@@ -9,6 +9,7 @@
 import { db } from "../db";
 import type { QuestionView } from "./ask-view";
 import { workspaceTask } from "./targets";
+import { owner } from "../owner";
 
 export const MAX_OPEN_QUESTIONS = 10;
 
@@ -79,7 +80,7 @@ export function askQuestion(
       `INSERT INTO orchestrator_questions (workspace_id, text, task) VALUES (?, ?, ?)`
     )
     .run(workspaceId, text, task);
-  return `Question ${lastInsertRowid} is open on Saad's Needs-you strip. Call resolve_question ${lastInsertRowid} once he has answered or it no longer matters.`;
+  return `Question ${lastInsertRowid} is open on ${owner()}'s Needs-you strip. Call resolve_question ${lastInsertRowid} once he has answered or it no longer matters.`;
 }
 
 export function resolveQuestion(

package/lib/orchestrator/recipe-tools.ts

@@ -22,6 +22,7 @@ import {
   type RecipeRun,
 } from "../recipes";
 import { outputsText } from "../recipes/result";
+import { owner } from "../owner";
 
 const when = (iso: string | null) =>
   iso
@@ -38,7 +39,7 @@ function runLine(r: RecipeRun, recipe: Recipe): string {
       ? "timer"
       : r.trigger === "tool"
         ? "you"
-        : "Saad";
+        : owner();
   return `#${r.seq} ${r.status} (${when(r.ended_at ?? r.started_at ?? r.created_at)}, by ${by})${pr}${text}`;
 }
 
@@ -61,7 +62,7 @@ export function recipesText(w: string, name?: string): string {
     return [
       `Recipe "${r.name}" (${r.kind}, ${r.view}, project ${projectName(w, r)})${r.model ? `, model ${r.model}` : ""}${r.max_minutes ? `, time limit ${r.max_minutes} min` : ""}.`,
       timer
-        ? `Timer: ${timer.description} ${timer.timezone}${timer.enabled ? "" : " (off)"}, set by Saad.`
+        ? `Timer: ${timer.description} ${timer.timezone}${timer.enabled ? "" : " (off)"}, set by ${owner()}.`
         : "No timer.",
       `Brief:\n${r.brief}`,
       runs.length
@@ -126,7 +127,7 @@ export function saveRecipe(
     },
     orchestrator?.id ?? null
   );
-  return `Saved recipe "${recipe.name}" (${recipe.kind}, ${project.name}). Run it with run_recipe; Saad sees it in Recipes and sets any timer.`;
+  return `Saved recipe "${recipe.name}" (${recipe.kind}, ${project.name}). Run it with run_recipe; ${owner()} sees it in Recipes and sets any timer.`;
 }
 
 export function updateRecipeTool(
@@ -155,5 +156,5 @@ export function updateRecipeTool(
     },
     orchestrator?.id ?? null
   );
-  return `Updated recipe "${a.new_name ?? recipe.name}". Earlier versions of the brief are kept; Saad sees the change.`;
+  return `Updated recipe "${a.new_name ?? recipe.name}". Earlier versions of the brief are kept; ${owner()} sees the change.`;
 }

package/lib/orchestrator/review.ts

@@ -56,6 +56,7 @@ import { noteQuickReview } from "./quick";
 import { workspaceTask } from "./targets";
 import { untrusted } from "./untrusted";
 import { isFast } from "../project-tier/getProjectTier";
+import { owner } from "../owner";
 
 const short = (sha: string) => sha.slice(0, 7);
 // The most diff one reviewer is given, and the most parts a change too big
@@ -135,7 +136,7 @@ async function reviewJob(
       ...row,
       kind: "review",
       status: "error",
-      detail: `${why}; it's with Saad`,
+      detail: `${why}; it's with ${owner()}`,
     });
   }
   const files = await changedFiles(repo, base, sha);
@@ -247,7 +248,7 @@ function countVerdicts(
     }
   }
   return escalated.length
-    ? `; the ${escalated.join(" and ")} gate is stuck in a loop (the loop guard), so it's with Saad now`
+    ? `; the ${escalated.join(" and ")} gate is stuck in a loop (the loop guard), so it's with ${owner()} now`
     : "";
 }
 
@@ -335,7 +336,7 @@ export async function review(
   const held = holdingEscalations(task.id);
   const pr = held.length ? await prFor(task, true) : null;
   if (held.length && !(pr?.head && reviewWanted(workspaceId, task.id, pr.head)))
-    return `${task.name} is with Saad (${held.map((h) => h.gate).join(", ")}); no review needed from you.`;
+    return `${task.name} is with ${owner()} (${held.map((h) => h.gate).join(", ")}); no review needed from you.`;
   const there = pr ?? (await prFor(task, true));
   if (!there?.head) throw new Error(`${task.name} has no PR to review yet`);
   return reviewAt(workspaceId, taskReviewTarget(task, there), there.head, opts);

package/lib/orchestrator/rules.ts

@@ -9,6 +9,7 @@
 
 import { db } from "../db";
 import { redact } from "./untrusted";
+import { owner } from "../owner";
 
 export type RuleAuthor = "orchestrator" | "saad";
 
@@ -114,7 +115,7 @@ export function removeRule(
   // read can't talk it into removing one.
   if (by === "orchestrator" && rule.added_by === "saad")
     throw new Error(
-      `Rule ${id} is Saad's: only he removes it, in Settings → Workspaces`
+      `Rule ${id} is ${owner()}'s: only he removes it, in Settings → Workspaces`
     );
   db.prepare(
     `UPDATE orchestrator_rules SET removed_at = datetime('now'), removed_by = ?

package/lib/orchestrator/serve.ts

@@ -320,7 +320,7 @@ export async function runTool(
       return await arm(w, p(tool, raw).task);
     case "disarm":
       return disarm(w, p(tool, raw).task);
-    case "ask_saad":
+    case "ask_owner":
       return askSaad(w, p(tool, raw));
     case "question": {
       const a = p(tool, raw);

package/lib/orchestrator/shell-guard.ts

@@ -230,7 +230,7 @@ function aosRefusal(args: string[]): string | null {
     stop: T.stop,
   };
   if (sub === "sweep" && args.includes("--arm"))
-    return `Refused: \`aos sweep --arm\` turns on removing files and databases, which is Saad's call: Health, Clean-up, Turn on. When he has said to, use ${T.sweep_arm} (after ${T.sweep_dry_run}). \`--dry-run\` and \`--disarm\` are fine.`;
+    return `Refused: \`aos sweep --arm\` turns on removing files and databases, which is the owner's call: Health, Clean-up, Turn on. When he has said to, use ${T.sweep_arm} (after ${T.sweep_dry_run}). \`--dry-run\` and \`--disarm\` are fine.`;
   if (sub && tool[sub])
     return `Refused: \`aos ${sub}\` isn't for you; use ${tool[sub]}, which is scoped to this workspace and held by Pause.`;
   return null;
@@ -269,7 +269,7 @@ function ghRefusal(args: string[]): string | null {
     sub === "edit" &&
     optionValues(args, ["-B"], ["--base"]).length
   )
-    return `Refused: retargeting a PR changes what its gates judged; a stack sets its own bases (${T.stack}), and anything else is Saad's call (${T.ask_saad}).`;
+    return `Refused: retargeting a PR changes what its gates judged; a stack sets its own bases (${T.stack}), and anything else is the owner's call (${T.ask_owner}).`;
   if (group !== "api") return null;
   const endpoint = positionals(args, values)[1] ?? "";
   const method = optionValues(args, ["-X"], ["--method"]).pop();
@@ -494,7 +494,7 @@ async function sqliteRefusal(
 }
 
 const SERVER_PATTERN = /node|tsx|server|agent-?os|tmux|next/i;
-const STOP_MSG = `Refused: never stop or restart AgentOS or its tmux; that ends every session it runs, this one included. Stop a session with ${T.stop} or finish it with ${T.done}, and if AgentOS itself needs a restart, ${T.ask_saad}.`;
+const STOP_MSG = `Refused: never stop or restart AgentOS or its tmux; that ends every session it runs, this one included. Stop a session with ${T.stop} or finish it with ${T.done}, and if AgentOS itself needs a restart, ${T.ask_owner}.`;
 
 async function stopRefusal(
   inv: Invocation,
@@ -538,7 +538,7 @@ async function stopRefusal(
   return null;
 }
 
-const SECRET_MSG = `Refused: orchestrators never read secrets (env files, keys, credential stores). If a step needs one, ${T.ask_saad}.`;
+const SECRET_MSG = `Refused: orchestrators never read secrets (env files, keys, credential stores). If a step needs one, ${T.ask_owner}.`;
 
 // Orchestrators may read tokenvault's folders (and run `tv`); writing them
 // is still refused by the write guard.

package/lib/orchestrator/signoff.test-helpers.ts

@@ -118,7 +118,7 @@ export const { followAskVerdicts } = await import("./ask-verdict");
 export const { raiseHeldAsks, HOLD_MIN_MS, HOLD_MAX_MS } =
   await import("./held-asks");
 
-// The one ask a task's escalation leaves on Saad's list.
+// The one ask a task's escalation leaves on the owner's list.
 export function oneGateAsk(w: string, task: string, sha: string) {
   const asks = openAsks(w);
   expect(asks).toHaveLength(1);

package/lib/orchestrator/signoff.ts

@@ -58,6 +58,7 @@ import { repoHasCI } from "./repo-ci";
 import { DIFF_CAP, review } from "./review";
 import { workspaceStack, workspaceTask } from "./targets";
 import { ciSettleIn, waitingState } from "./task-state";
+import { owner, Owner } from "../owner";
 
 const short = (sha: string) => sha.slice(0, 7);
 
@@ -214,7 +215,7 @@ export async function gateVerdict(
   }
   if (approval?.sha === sha) {
     const i = await inputs();
-    const approved = `${work.name} (PR #${pr.number} at ${short(sha)}): Saad approved this commit, but`;
+    const approved = `${work.name} (PR #${pr.number} at ${short(sha)}): ${owner()} approved this commit, but`;
     const stack =
       approval.raised_by === "orchestrator" || !held.length
         ? i.stackRefusal
@@ -268,10 +269,10 @@ export async function gateVerdict(
     { fast }
   );
   const head = `${work.name} (PR #${pr.number} at ${short(sha)}) can't merge:`;
-  const toSaad = outcomes.find((o) => o.state === "escalate");
-  if (toSaad)
+  const toOwner = outcomes.find((o) => o.state === "escalate");
+  if (toOwner)
     return no(
-      `${head}\n- ${escalate(workspaceId, work, toSaad.gate, toSaad.reason!, pr.url, sha)}`
+      `${head}\n- ${escalate(workspaceId, work, toOwner.gate, toOwner.reason!, pr.url, sha)}`
     );
   const failed = outcomes.filter((o) => o.state === "fail");
   const waiting = outcomes.filter((o) => o.state === "wait");
@@ -354,7 +355,7 @@ export async function mergeJudged(
   opts: { wait?: boolean } = {}
 ): Promise<string> {
   if (verdict.approval && !spendApproval(verdict.approval))
-    throw new Error(`Saad's approval for ${task.name} was already used`);
+    throw new Error(`${Owner()}'s approval for ${task.name} was already used`);
   let method: MergeMethod | null = null;
   await refundIfRefused(task.id, verdict.approval, async () => {
     method = await signOffTask(task.id, { head: verdict.sha, wait: opts.wait });
@@ -366,7 +367,7 @@ export async function mergeJudged(
     verdict.fast
       ? `Merged ${task.name} (PR #${verdict.pr}, ${short(verdict.sha)}) on the fast lane: no CI wait or review.`
       : verdict.approval
-        ? `Merged ${task.name} (PR #${verdict.pr}, ${short(verdict.sha)}) on Saad's approval of that commit.`
+        ? `Merged ${task.name} (PR #${verdict.pr}, ${short(verdict.sha)}) on ${owner()}'s approval of that commit.`
         : `Merged ${task.name} (PR #${verdict.pr}, ${short(verdict.sha)}): CI green, review passed, in scope.`
   );
   return `Merged ${task.name}: PR #${verdict.pr} ${method ? MERGED_AS[method] : "merged"} at ${short(verdict.sha)}.`;
@@ -408,7 +409,9 @@ export function landGate(
     const verdict = await judge(workspaceId, task, true);
     if (verdict.ok && verdict.approval) {
       if (!spendApproval(verdict.approval))
-        return { stop: `Saad's approval for ${task.name} was already used` };
+        return {
+          stop: `${Owner()}'s approval for ${task.name} was already used`,
+        };
       claimed.set(sessionId, verdict.approval);
     }
     if (verdict.ok) return { head: verdict.sha };

package/lib/orchestrator/sweep-arm.ts

@@ -24,6 +24,7 @@ import type { SweepRun } from "../worktree-sweep/types";
 import { addNote } from "./notes";
 import { PAUSED_REFUSAL } from "./pause";
 import { getWorkspace } from "../workspaces";
+import { owner } from "../owner";
 
 export const DRY_RUN_FRESH_MS = 60 * 60 * 1000;
 
@@ -165,7 +166,7 @@ export async function sweepArm(
 
 export async function sweepDryRun(machine: string): Promise<string> {
   const m = machineOf(machine);
-  const started = `Dry run started on ${m.name}; it takes a few minutes and removes nothing. When Saad has said to turn the full clean-up on, call sweep_arm: it reads this run.`;
+  const started = `Dry run started on ${m.name}; it takes a few minutes and removes nothing. When ${owner()} has said to turn the full clean-up on, call sweep_arm: it reads this run.`;
   if (m.link) {
     await hostApi(m.link, "/api/worktree-sweep/run", {
       body: { dryRun: true },

package/lib/orchestrator/tool-names.ts

@@ -58,7 +58,7 @@ export const TOOL_NAMES = {
   recipe_update: name("recipe_update"),
   reminders: name("reminders"),
   cancel_reminder: name("cancel_reminder"),
-  ask_saad: name("ask_saad"),
+  ask_owner: name("ask_owner"),
 } as const;
 
 // What it may do, fixed by its role. It acts through its own tools, which

package/lib/orchestrator/tool-schemas.ts

@@ -29,7 +29,7 @@ const group = z
   .max(60)
   .optional()
   .describe(
-    "One of Saad's groups in this workspace, by name (see sessions): file it there when he asked, or when it continues work already in that group. It must exist; you can't create groups"
+    "One of the owner's groups in this workspace, by name (see sessions): file it there when he asked, or when it continues work already in that group. It must exist; you can't create groups"
   );
 
 const sweepMachine = z
@@ -96,7 +96,7 @@ export const TOOL_SHAPES = {
       .boolean()
       .optional()
       .describe(
-        "The message changes the task's scope (Saad added, dropped or changed what it must do): it's recorded on the task's brief, and its review judges the PR against the brief as amended. Only for a change Saad made, never one the task asked for itself"
+        "The message changes the task's scope (the owner added, dropped or changed what it must do): it's recorded on the task's brief, and its review judges the PR against the brief as amended. Only for a change the owner made, never one the task asked for itself"
       ),
   },
   orchestrators: {},
@@ -139,7 +139,7 @@ export const TOOL_SHAPES = {
       .enum(PRIORITIES)
       .optional()
       .describe(
-        "Where it stands in the queue: urgent (a bug Saad hit), blocking (something waits on it), normal (the default), background"
+        "Where it stands in the queue: urgent (a bug the owner hit), blocking (something waits on it), normal (the default), background"
       ),
     machine: z
       .enum(["mac", "any"])
@@ -159,7 +159,7 @@ export const TOOL_SHAPES = {
       .min(1)
       .max(300)
       .optional()
-      .describe("With now: why it can't wait for a slot; logged for Saad"),
+      .describe("With now: why it can't wait for a slot; logged for the owner"),
     ignore_claims: z
       .boolean()
       .optional()
@@ -195,7 +195,7 @@ export const TOOL_SHAPES = {
       .max(200)
       .optional()
       .describe(
-        'Why, in a few words Saad reads on the task card: "touches 6 files across gates and UI", "one-line default change"'
+        'Why, in a few words the owner reads on the task card: "touches 6 files across gates and UI", "one-line default change"'
       ),
   },
   set_task_model: {
@@ -238,7 +238,7 @@ export const TOOL_SHAPES = {
       .max(60)
       .nullable()
       .describe(
-        "One of Saad's groups in this workspace by name, or null to take the session out of its group"
+        "One of the owner's groups in this workspace by name, or null to take the session out of its group"
       ),
   },
   quick_change: {
@@ -282,7 +282,7 @@ export const TOOL_SHAPES = {
       .max(8000)
       .optional()
       .describe(
-        "Amends the plan: recorded on the task's brief as a scope change, so its review judges the PR against it. Only for a change Saad made"
+        "Amends the plan: recorded on the task's brief as a scope change, so its review judges the PR against it. Only for a change the owner made"
       ),
   },
   plan_pieces: {
@@ -317,7 +317,7 @@ export const TOOL_SHAPES = {
       .trim()
       .min(1)
       .max(500)
-      .describe("What Saad said, and when; it goes in the decision log"),
+      .describe("What the owner said, and when; it goes in the decision log"),
   },
   set_priority: {
     task: ref("A queued or running task: name, project/name or id"),
@@ -330,14 +330,14 @@ export const TOOL_SHAPES = {
       .trim()
       .min(1)
       .max(300)
-      .describe("Why it can't wait for a slot; logged for Saad"),
+      .describe("Why it can't wait for a slot; logged for the owner"),
   },
   pause_task: {
     task,
     for: z
       .enum(["1h", "2h", "tomorrow", "until_resumed"])
       .describe(
-        "How long: 1h, 2h, tomorrow (9 AM, Saad's time) or until_resumed (until you or Saad resume it)"
+        "How long: 1h, 2h, tomorrow (9 AM, the owner's time) or until_resumed (until you or the owner resume it)"
       ),
     now: z
       .boolean()
@@ -353,7 +353,7 @@ export const TOOL_SHAPES = {
   archive: { session },
   resurrect: {
     session: ref(
-      "A dropped, done or archived session: its name, project/name or id (from the decision log, or as Saad named it)"
+      "A dropped, done or archived session: its name, project/name or id (from the decision log, or as the owner named it)"
     ),
     reason: z.string().trim().min(1).max(2000),
   },
@@ -481,13 +481,13 @@ export const TOOL_SHAPES = {
   },
   arm: { task },
   disarm: { task },
-  ask_saad: {
+  ask_owner: {
     title: z
       .string()
       .trim()
       .min(1)
       .max(200)
-      .describe("What Saad decides, as a short question"),
+      .describe("What the owner decides, as a short question"),
     detail: z
       .string()
       .trim()

package/lib/orchestrator/tools.ts

@@ -116,23 +116,23 @@ const answer = async (call: Promise<string>): Promise<CallToolResult> => {
 
 const DESCRIPTIONS: Record<ToolName, string> = {
   sessions:
-    "Every session in this workspace: project, view, status, what it's doing, task/PR/CI state and stack position; plain idle and done sessions (on Saad's Done shelf) are listed compactly after them; then external sessions (tmux sessions AgentOS didn't start, here or on other machines, working in a workspace repository), read-only, with their branch's PR.",
+    "Every session in this workspace: project, view, status, what it's doing, task/PR/CI state and stack position; plain idle and done sessions (on the owner's Done shelf) are listed compactly after them; then external sessions (tmux sessions AgentOS didn't start, here or on other machines, working in a workspace repository), read-only, with their branch's PR.",
   read: "The end of one session's terminal or chat, or an external session's screen, as plain text (capped at about 4k tokens).",
   cards: "Cards on this workspace's linked LumifyHub boards, by list.",
   logs: "Session logs AgentOS wrote when tasks merged: the last N headers (task, PR, cost, duration) of the workspace or one project, or one log in full (brief, plan, timeline, usage, outcome). Read straight from the database; nothing is summarised.",
-  send: "Message a session in this workspace over the bus. It arrives as its next prompt. When Saad changes a running task's scope, tell it with scope_change set, so its review judges the PR against the brief as amended. A task still in the queue (by id or name) takes messages too: they are held and reach it with its first prompt; scope_change on one records the change on its brief at once.",
+  send: "Message a session in this workspace over the bus. It arrives as its next prompt. When the owner changes a running task's scope, tell it with scope_change set, so its review judges the PR against the brief as amended. A task still in the queue (by id or name) takes messages too: they are held and reach it with its first prompt; scope_change on one records the change on its brief at once.",
   orchestrators:
     "Every workspace, and whether it has an orchestrator you can message.",
   message_orchestrator:
     "Message another workspace's orchestrator, by workspace name; never any other session there. It arrives as its next prompt, marked as from you and fenced as untrusted.",
   start_task:
-    'Start a task: an agent in its own worktree that ends in a PR. It runs as a chat unless view is terminal (only for a job that needs a TUI). priority (urgent, blocking, normal, background) says where it stands in the queue; machine "mac" pins work that needs this Mac. A busy machine holds a start and the result says why. With after (a task\'s id or name, or "any"), or over the workspace\'s running task limit, it\'s queued and starts by itself; the result says Queued (position N). Its models follow the role settings (planning, implementation, review, scope); give model only when Saad asks for one. Always state plan (true or false) and plan_reason (plan_only true plans, then stops and waits for approve_plan instead of implementing): plan true for a big, unclear or cross-cutting job, false for a small, clear one whose steps you write into the prompt. now true (with now_reason) starts it at once past the running-task limit instead of queueing for a slot, logged; not with after. A strong overlap with work another session has claimed (same branch, or the same files, here or on a linked machine) queues the start after it and says so; the result also lists weaker overlaps. ignore_claims true skips that. piece names the waiting piece of a plan this task builds, so it is claimed and not started a second time. Refused while a brake holds.',
+    'Start a task: an agent in its own worktree that ends in a PR. It runs as a chat unless view is terminal (only for a job that needs a TUI). priority (urgent, blocking, normal, background) says where it stands in the queue; machine "mac" pins work that needs this Mac. A busy machine holds a start and the result says why. With after (a task\'s id or name, or "any"), or over the workspace\'s running task limit, it\'s queued and starts by itself; the result says Queued (position N). Its models follow the role settings (planning, implementation, review, scope); give model only when the owner asks for one. Always state plan (true or false) and plan_reason (plan_only true plans, then stops and waits for approve_plan instead of implementing): plan true for a big, unclear or cross-cutting job, false for a small, clear one whose steps you write into the prompt. now true (with now_reason) starts it at once past the running-task limit instead of queueing for a slot, logged; not with after. A strong overlap with work another session has claimed (same branch, or the same files, here or on a linked machine) queues the start after it and says so; the result also lists weaker overlaps. ignore_claims true skips that. piece names the waiting piece of a plan this task builds, so it is claimed and not started a second time. Refused while a brake holds.',
   set_task_model:
     'Resume a paused task on another model ("provider/model", or a map of role to one), keeping its conversation and worktree; it\'s told to carry on (or message). Refused mid-turn.',
   start_session:
     'Start an agent session in a project with a prompt, for work that isn\'t a PR task. It runs on the implementation model unless you give model (one "provider/model"; Opus only when the work needs deep reasoning), as a chat unless view is terminal (only for a job that needs a TUI). Refused while a brake holds.',
   set_group:
-    "File a session of this workspace in one of Saad's groups (by name), or out of its group with null. Groups only organise his sidebar; they change nothing about the session. You can use groups that exist but can't create, rename or delete them.",
+    "File a session of this workspace in one of the owner's groups (by name), or out of its group with null. Groups only organise his sidebar; they change nothing about the session. You can use groups that exist but can't create, rename or delete them.",
   quick_change:
     "Make a change yourself (without full access, a small low-risk one: a typo, a config value, a one-file fix): cuts a worktree and branch from the project's default branch and returns its path. Its dependencies install in the background (a note says when). You may write there (Write, Edit) and, with Orchestrator full access, run any git there; without it, only `git -C <path> ...` status, diff, add, rm, mv, restore, reset, log, show, and nowhere else in a project. Without full access, anything needing real work, tests or an investigation is a task (start_task).",
   quick_pr:
@@ -146,34 +146,34 @@ const DESCRIPTIONS: Record<ToolName, string> = {
   plan_pieces:
     "A task whose plan split into pieces: each piece, its repo, what it waits on and its state. With merge or drop (position numbers) it edits the pieces still waiting: a merged piece's slice goes to the piece before it, a dropped one is left out and anything waiting on it is held. It can't add pieces or change reasons.",
   drop: "Reject a task: close its PR and remove its worktree. A task still waiting in the queue is removed by its id. Logged with the reason.",
-  move: 'Carry a running task to a linked machine, or back with "here": for heavy test or build work. It keeps its branch, conversation and plan; the gates, events, read, send, stop, done and drop work the same wherever it runs, and the machine it lands on can\'t merge it. Takes a few minutes and runs in the background; an event says when it lands. Refused while paused, for a task waiting on Saad (an escalation or open ask), and for card and stacked tasks.',
+  move: 'Carry a running task to a linked machine, or back with "here": for heavy test or build work. It keeps its branch, conversation and plan; the gates, events, read, send, stop, done and drop work the same wherever it runs, and the machine it lands on can\'t merge it. Takes a few minutes and runs in the background; an event says when it lands. Refused while paused, for a task waiting on the owner (an escalation or open ask), and for card and stacked tasks.',
   sweep_dry_run:
     "Start a dry run of the disk clean-up on this machine or a linked one: it lists what the full clean-up would remove and removes nothing. Takes a few minutes; sweep_arm reads it.",
   sweep_arm:
-    "Turn the full disk clean-up (test leftovers, stale task databases, spares, temp folders, build caches) on or off for this machine or a linked one. Only for when Saad has said to turn it on: put what he said in reason. Turning it on is refused unless that machine's latest dry run finished in the last hour (run sweep_dry_run first, and read its totals). Off is always allowed. Logged in the decision log with the dry run's totals.",
+    "Turn the full disk clean-up (test leftovers, stale task databases, spares, temp folders, build caches) on or off for this machine or a linked one. Only for when the owner has said to turn it on: put what he said in reason. Turning it on is refused unless that machine's latest dry run finished in the last hour (run sweep_dry_run first, and read its totals). Off is always allowed. Logged in the decision log with the dry run's totals.",
   set_priority:
     "Change the priority of a queued task (it re-ranks the line at once) or a running one (it only matters if it is paused and waits to resume). urgent starts first even on a busy machine; background starts last.",
   start_now:
-    "Start a queued task now, past the workspace's running-task limit and its after, when it can't wait for a slot (Saad asked, or it unblocks others). Still refused while paused or braked, and a task that needs a Mac stays queued. Give a reason: it goes in the decision log. Says whether it started, is still held and why, or failed.",
+    "Start a queued task now, past the workspace's running-task limit and its after, when it can't wait for a slot (the owner asked, or it unblocks others). Still refused while paused or braked, and a task that needs a Mac stays queued. Give a reason: it goes in the decision log. Says whether it started, is still held and why, or failed.",
   pause_task:
-    "Pause a running task for a set time: its agent ends at the end of its current step (now true interrupts the step), its worktree and conversation stay, and it frees its slot so the next queued task can start. It resumes by itself at the time, ahead of new arrivals of the same priority, with whatever was held (CI and review notes, messages) in one continue prompt. Refused for a task that is merging, moving, setting up or waiting on Saad. Give a reason; it is shown with the pause.",
+    "Pause a running task for a set time: its agent ends at the end of its current step (now true interrupts the step), its worktree and conversation stay, and it frees its slot so the next queued task can start. It resumes by itself at the time, ahead of new arrivals of the same priority, with whatever was held (CI and review notes, messages) in one continue prompt. Refused for a task that is merging, moving, setting up or waiting on the owner. Give a reason; it is shown with the pause.",
   resume_task:
-    "Resume a task you paused (or the scheduler did) now: it starts at once, past the running-task limit, unless the machine load holds it (the answer says so). A pause Saad set is his to lift: this refuses and says so.",
+    "Resume a task you paused (or the scheduler did) now: it starts at once, past the running-task limit, unless the machine load holds it (the answer says so). A pause the owner set is his to lift: this refuses and says so.",
   stop: "Stop a session's agent mid-turn, even while it's thinking, keeping its conversation, worktree and branch; your next message runs as its next turn.",
   done: "Finish a session whose work is complete: a task's open PR merges through the sign-off gates first (refused naming the failing gate), then its agent stops, its worktree is removed if nothing would be lost, and it lands on the sidebar's Done shelf; it no longer archives (use archive for that). Not a rejection.",
   archive:
-    "Put a finished session away, out of the sidebar (it stays in Archived, and Saad can unarchive it). Nothing is merged or cleaned up: refused while the session is working or has an open PR; done first for finished work.",
+    "Put a finished session away, out of the sidebar (it stays in Archived, and the owner can unarchive it). Nothing is merged or cleaned up: refused while the session is working or has an open PR; done first for finished work.",
   resurrect:
     "Bring a dropped, done or archived session back: the same session and conversation, its worktree (with its uncommitted files and plan) back from what was saved or from its branch, its status as it was (a plan-only task waits for approval again, one with a PR is idle), and a PR a drop closed reopened. Archived sessions just unarchive. Held by Pause and braked like a start. Refused when its conversation is gone, its PR was merged, its project was removed or its branch is in use. Give a reason; it goes in the decision log.",
   add_project:
     "Make a git repository on this machine a project of this workspace, by its absolute path, or move the project already at that path into this workspace when it's in no workspace. Says its default branch, detected from git. Refuses a folder that isn't a git repository or that holds secrets, and a project another workspace has.",
   project_tier:
-    "Read or set a project's tier. production: every merge gate applies (CI, independent review, scope). fast: a task's PR merges as soon as it opens, with no CI wait or review. Without a project, lists this workspace's; with a project, reads it; with a tier too, sets it, only when Saad says to.",
+    "Read or set a project's tier. production: every merge gate applies (CI, independent review, scope). fast: a task's PR merges as soon as it opens, with no CI wait or review. Without a project, lists this workspace's; with a project, reads it; with a tier too, sets it, only when the owner says to.",
   note: "Add a line to this workspace's decision log; it shows in your chat.",
   rule_add:
     'Keep a standing rule for this workspace, in your brief on every start from now on ("never merge #111", "briefs must not name third-party products"). It restricts or informs; it can never approve anything.',
   rule_remove:
-    "Remove a standing rule you kept, by its id, only when Saad says so or it no longer applies (the PR it names merged or closed). Saad's rules are his to remove.",
+    "Remove a standing rule you kept, by its id, only when the owner says so or it no longer applies (the PR it names merged or closed). The owner's rules are his to remove.",
   remind_me:
     "Set a one-off reminder for yourself in this workspace: at the time given it reaches you once as a scheduled prompt (not an approval), even if AgentOS was off then. At least 10 minutes ahead; a few at a time at most.",
   recipes:
@@ -181,26 +181,26 @@ const DESCRIPTIONS: Record<ToolName, string> = {
   run_recipe:
     "Run a recipe now: a fresh task or session starts from its saved brief, plus the last run's reported facts and an optional one-off note. Braked, queued and gated like start_task and start_session. A recipe is never an approval. One run at a time; while it is going this says so. You get an event when it finishes.",
   recipe_save:
-    "Save a recipe when a job comes up a second time. A short brief (the steps belong in a script in the repo), a kind (task: ends in a PR; session: no PR) and a project. It sets no timer: Saad does.",
+    "Save a recipe when a job comes up a second time. A short brief (the steps belong in a script in the repo), a kind (task: ends in a PR; session: no PR) and a project. It sets no timer: The owner does.",
   recipe_update:
-    "Change a recipe's brief or settings (never its timer). Earlier versions are kept and Saad sees the change.",
+    "Change a recipe's brief or settings (never its timer). Earlier versions are kept and the owner sees the change.",
   reminders:
     "List this workspace's upcoming reminders and the last few that ran.",
   cancel_reminder:
-    "Cancel a reminder you set, by its id from reminders. Reminders Saad made are his to change.",
+    "Cancel a reminder you set, by its id from reminders. Reminders the owner made are his to change.",
   review:
     "Start an independent read-only review of a PR at its exact head commit, or read the stored verdict for that commit. Takes a task, or any open PR in a workspace repository by #N, owner/repo#N or URL, even one no task owns.",
   sign_off:
-    "Merge a PR, with its project's merge method, through the gates: CI green and settled, a passing review of that commit, nothing blocked, in scope, stack parent merged. Takes a task, or any open PR in a workspace repository by #N, owner/repo#N or URL (an external PR). Refuses with the failing gate, or a repository outside the workspace. With direct true (and a reason) it merges now at the PR's head without the gates; only with Orchestrator full access, and not while paused or while the task waits on Saad.",
-  arm: "Arm a task's PR to merge: AgentOS merges it, through the same gates as sign_off, the moment they all pass at its head, and tells you with one event. A gate failure comes as one event and it stays armed for the fix; one that goes to Saad disarms it. Survives restarts. Use it instead of calling sign_off until it passes.",
+    "Merge a PR, with its project's merge method, through the gates: CI green and settled, a passing review of that commit, nothing blocked, in scope, stack parent merged. Takes a task, or any open PR in a workspace repository by #N, owner/repo#N or URL (an external PR). Refuses with the failing gate, or a repository outside the workspace. With direct true (and a reason) it merges now at the PR's head without the gates; only with Orchestrator full access, and not while paused or while the task waits on the owner.",
+  arm: "Arm a task's PR to merge: AgentOS merges it, through the same gates as sign_off, the moment they all pass at its head, and tells you with one event. A gate failure comes as one event and it stays armed for the fix; one that goes to the owner disarms it. Survives restarts. Use it instead of calling sign_off until it passes.",
   disarm:
     "Disarm a task armed to merge: it merges only through sign_off again.",
   question:
-    "Mark a question you asked Saad in chat as open: it stays pinned on his Needs-you strip until he answers or you clear it. Use it for anything you need from him that isn't an ask_saad item. The same text while open is the same question.",
+    "Mark a question you asked the owner in chat as open: it stays pinned on his Needs-you strip until he answers or you clear it. Use it for anything you need from him that isn't an ask_owner item. The same text while open is the same question.",
   resolve_question:
-    "Clear an open question once Saad has answered it in chat, or it no longer matters.",
-  ask_saad:
-    "Park an item on Saad's asks list (a decision, or anything crossing a hard line) and carry on; it never waits. One open ask per title. His answer reaches you as an event. To ask whether to merge a PR the gates refuse, give task and sha (its head): his approval lets sign_off merge it once, at that commit, without a review (an AI-attributed body or failing CI still refuses).",
+    "Clear an open question once the owner has answered it in chat, or it no longer matters.",
+  ask_owner:
+    "Park an item on the owner's asks list (a decision, or anything crossing a hard line) and carry on; it never waits. One open ask per title. His answer reaches you as an event. To ask whether to merge a PR the gates refuse, give task and sha (its head): his approval lets sign_off merge it once, at that commit, without a review (an AI-attributed body or failing CI still refuses).",
 };
 
 export function orchestratorTools(

package/lib/owner-label.ts

@@ -0,0 +1,25 @@
+// How the installation owner is named in text. Pure, so client code can use
+// it; lib/owner.ts reads the stored name.
+export const OWNER_NAME_MAX = 40;
+
+export function cleanOwnerName(raw: unknown): string | null {
+  if (typeof raw !== "string") return null;
+  const s = raw
+    .normalize("NFKC")
+    .replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}`]/gu, "")
+    .replace(/\s+/g, " ")
+    .trim();
+  return s ? [...s].slice(0, OWNER_NAME_MAX).join("") : null;
+}
+
+/** Agent prompts: the name, else "the owner". */
+export const ownerInPrompt = (name: string | null, cap = false) =>
+  name ?? (cap ? "The owner" : "the owner");
+
+/** UI text: the name, else "you". */
+export const ownerInUi = (name: string | null, cap = false) =>
+  name ?? (cap ? "You" : "you");
+
+/** "Alex decides" / "You decide": the verb for a name or for "you". */
+export const ownerVerb = (name: string | null, named: string, you: string) =>
+  `${ownerInUi(name, true)} ${name ? named : you}`;

package/lib/owner.ts

@@ -0,0 +1,21 @@
+import { getSetting, putSetting } from "./settings-store";
+import { cleanOwnerName, ownerInPrompt, ownerInUi } from "./owner-label";
+
+export const OWNER_NAME_KEY = "owner.name";
+
+/** The name the installation's owner set, or null. The one reader. */
+export function ownerName(): string | null {
+  return cleanOwnerName(getSetting(OWNER_NAME_KEY));
+}
+
+export function setOwnerName(raw: unknown): string | null {
+  const name = cleanOwnerName(raw);
+  putSetting(OWNER_NAME_KEY, name);
+  return name;
+}
+
+/** For agent text: "Alex" or "the owner". */
+export const owner = () => ownerInPrompt(ownerName());
+export const Owner = () => ownerInPrompt(ownerName(), true);
+/** For text people read: "Alex" or "you". */
+export const ownerUi = (cap = false) => ownerInUi(ownerName(), cap);

package/lib/project-add/index.ts

@@ -20,6 +20,7 @@ import { run, shellPath, spawnOn } from "./shell";
 import { onWindowsDrive, WINDOWS_DRIVE_WARNING } from "../wsl";
 
 import { PROJECT_NAME } from "./name";
+import { owner } from "../owner";
 
 export { PROJECT_NAME };
 // https://host/owner/repo(.git), ssh://…, or git@host:owner/repo(.git).
@@ -151,7 +152,7 @@ export async function addFolder(
     const from = existing.workspace_id;
     if (opts.moveOnlyUnassigned && from && from !== workspaceId)
       throw new Error(
-        `${existing.name} belongs to the ${getWorkspace(from)?.name ?? "another"} workspace; only Saad moves a project between workspaces`
+        `${existing.name} belongs to the ${getWorkspace(from)?.name ?? "another"} workspace; only ${owner()} moves a project between workspaces`
       );
     const outcome =
       !workspaceId || from === workspaceId ? "unchanged" : "moved";