@saadnvd1/agent-os 0.3.819 → 0.3.824

package/lib/orchestrator/tools.ts

@@ -116,23 +116,23 @@ const answer = async (call: Promise<string>): Promise<CallToolResult> => {
 
 const DESCRIPTIONS: Record<ToolName, string> = {
   sessions:
-    "Every session in this workspace: project, view, status, what it's doing, task/PR/CI state and stack position; plain idle and done sessions (on Saad's Done shelf) are listed compactly after them; then external sessions (tmux sessions AgentOS didn't start, here or on other machines, working in a workspace repository), read-only, with their branch's PR.",
+    "Every session in this workspace: project, view, status, what it's doing, task/PR/CI state and stack position; plain idle and done sessions (on the owner's Done shelf) are listed compactly after them; then external sessions (tmux sessions AgentOS didn't start, here or on other machines, working in a workspace repository), read-only, with their branch's PR.",
   read: "The end of one session's terminal or chat, or an external session's screen, as plain text (capped at about 4k tokens).",
   cards: "Cards on this workspace's linked LumifyHub boards, by list.",
   logs: "Session logs AgentOS wrote when tasks merged: the last N headers (task, PR, cost, duration) of the workspace or one project, or one log in full (brief, plan, timeline, usage, outcome). Read straight from the database; nothing is summarised.",
-  send: "Message a session in this workspace over the bus. It arrives as its next prompt. When Saad changes a running task's scope, tell it with scope_change set, so its review judges the PR against the brief as amended. A task still in the queue (by id or name) takes messages too: they are held and reach it with its first prompt; scope_change on one records the change on its brief at once.",
+  send: "Message a session in this workspace over the bus. It arrives as its next prompt. When the owner changes a running task's scope, tell it with scope_change set, so its review judges the PR against the brief as amended. A task still in the queue (by id or name) takes messages too: they are held and reach it with its first prompt; scope_change on one records the change on its brief at once.",
   orchestrators:
     "Every workspace, and whether it has an orchestrator you can message.",
   message_orchestrator:
     "Message another workspace's orchestrator, by workspace name; never any other session there. It arrives as its next prompt, marked as from you and fenced as untrusted.",
   start_task:
-    'Start a task: an agent in its own worktree that ends in a PR. It runs as a chat unless view is terminal (only for a job that needs a TUI). priority (urgent, blocking, normal, background) says where it stands in the queue; machine "mac" pins work that needs this Mac. A busy machine holds a start and the result says why. With after (a task\'s id or name, or "any"), or over the workspace\'s running task limit, it\'s queued and starts by itself; the result says Queued (position N). Its models follow the role settings (planning, implementation, review, scope); give model only when Saad asks for one. Always state plan (true or false) and plan_reason (plan_only true plans, then stops and waits for approve_plan instead of implementing): plan true for a big, unclear or cross-cutting job, false for a small, clear one whose steps you write into the prompt. now true (with now_reason) starts it at once past the running-task limit instead of queueing for a slot, logged; not with after. A strong overlap with work another session has claimed (same branch, or the same files, here or on a linked machine) queues the start after it and says so; the result also lists weaker overlaps. ignore_claims true skips that. piece names the waiting piece of a plan this task builds, so it is claimed and not started a second time. Refused while a brake holds.',
+    'Start a task: an agent in its own worktree that ends in a PR. It runs as a chat unless view is terminal (only for a job that needs a TUI). priority (urgent, blocking, normal, background) says where it stands in the queue; machine "mac" pins work that needs this Mac. A busy machine holds a start and the result says why. With after (a task\'s id or name, or "any"), or over the workspace\'s running task limit, it\'s queued and starts by itself; the result says Queued (position N). Its models follow the role settings (planning, implementation, review, scope); give model only when the owner asks for one. Always state plan (true or false) and plan_reason (plan_only true plans, then stops and waits for approve_plan instead of implementing): plan true for a big, unclear or cross-cutting job, false for a small, clear one whose steps you write into the prompt. now true (with now_reason) starts it at once past the running-task limit instead of queueing for a slot, logged; not with after. A strong overlap with work another session has claimed (same branch, or the same files, here or on a linked machine) queues the start after it and says so; the result also lists weaker overlaps. ignore_claims true skips that. piece names the waiting piece of a plan this task builds, so it is claimed and not started a second time. Refused while a brake holds.',
   set_task_model:
     'Resume a paused task on another model ("provider/model", or a map of role to one), keeping its conversation and worktree; it\'s told to carry on (or message). Refused mid-turn.',
   start_session:
     'Start an agent session in a project with a prompt, for work that isn\'t a PR task. It runs on the implementation model unless you give model (one "provider/model"; Opus only when the work needs deep reasoning), as a chat unless view is terminal (only for a job that needs a TUI). Refused while a brake holds.',
   set_group:
-    "File a session of this workspace in one of Saad's groups (by name), or out of its group with null. Groups only organise his sidebar; they change nothing about the session. You can use groups that exist but can't create, rename or delete them.",
+    "File a session of this workspace in one of the owner's groups (by name), or out of its group with null. Groups only organise his sidebar; they change nothing about the session. You can use groups that exist but can't create, rename or delete them.",
   quick_change:
     "Make a change yourself (without full access, a small low-risk one: a typo, a config value, a one-file fix): cuts a worktree and branch from the project's default branch and returns its path. Its dependencies install in the background (a note says when). You may write there (Write, Edit) and, with Orchestrator full access, run any git there; without it, only `git -C <path> ...` status, diff, add, rm, mv, restore, reset, log, show, and nowhere else in a project. Without full access, anything needing real work, tests or an investigation is a task (start_task).",
   quick_pr:
@@ -146,34 +146,34 @@ const DESCRIPTIONS: Record<ToolName, string> = {
   plan_pieces:
     "A task whose plan split into pieces: each piece, its repo, what it waits on and its state. With merge or drop (position numbers) it edits the pieces still waiting: a merged piece's slice goes to the piece before it, a dropped one is left out and anything waiting on it is held. It can't add pieces or change reasons.",
   drop: "Reject a task: close its PR and remove its worktree. A task still waiting in the queue is removed by its id. Logged with the reason.",
-  move: 'Carry a running task to a linked machine, or back with "here": for heavy test or build work. It keeps its branch, conversation and plan; the gates, events, read, send, stop, done and drop work the same wherever it runs, and the machine it lands on can\'t merge it. Takes a few minutes and runs in the background; an event says when it lands. Refused while paused, for a task waiting on Saad (an escalation or open ask), and for card and stacked tasks.',
+  move: 'Carry a running task to a linked machine, or back with "here": for heavy test or build work. It keeps its branch, conversation and plan; the gates, events, read, send, stop, done and drop work the same wherever it runs, and the machine it lands on can\'t merge it. Takes a few minutes and runs in the background; an event says when it lands. Refused while paused, for a task waiting on the owner (an escalation or open ask), and for card and stacked tasks.',
   sweep_dry_run:
     "Start a dry run of the disk clean-up on this machine or a linked one: it lists what the full clean-up would remove and removes nothing. Takes a few minutes; sweep_arm reads it.",
   sweep_arm:
-    "Turn the full disk clean-up (test leftovers, stale task databases, spares, temp folders, build caches) on or off for this machine or a linked one. Only for when Saad has said to turn it on: put what he said in reason. Turning it on is refused unless that machine's latest dry run finished in the last hour (run sweep_dry_run first, and read its totals). Off is always allowed. Logged in the decision log with the dry run's totals.",
+    "Turn the full disk clean-up (test leftovers, stale task databases, spares, temp folders, build caches) on or off for this machine or a linked one. Only for when the owner has said to turn it on: put what he said in reason. Turning it on is refused unless that machine's latest dry run finished in the last hour (run sweep_dry_run first, and read its totals). Off is always allowed. Logged in the decision log with the dry run's totals.",
   set_priority:
     "Change the priority of a queued task (it re-ranks the line at once) or a running one (it only matters if it is paused and waits to resume). urgent starts first even on a busy machine; background starts last.",
   start_now:
-    "Start a queued task now, past the workspace's running-task limit and its after, when it can't wait for a slot (Saad asked, or it unblocks others). Still refused while paused or braked, and a task that needs a Mac stays queued. Give a reason: it goes in the decision log. Says whether it started, is still held and why, or failed.",
+    "Start a queued task now, past the workspace's running-task limit and its after, when it can't wait for a slot (the owner asked, or it unblocks others). Still refused while paused or braked, and a task that needs a Mac stays queued. Give a reason: it goes in the decision log. Says whether it started, is still held and why, or failed.",
   pause_task:
-    "Pause a running task for a set time: its agent ends at the end of its current step (now true interrupts the step), its worktree and conversation stay, and it frees its slot so the next queued task can start. It resumes by itself at the time, ahead of new arrivals of the same priority, with whatever was held (CI and review notes, messages) in one continue prompt. Refused for a task that is merging, moving, setting up or waiting on Saad. Give a reason; it is shown with the pause.",
+    "Pause a running task for a set time: its agent ends at the end of its current step (now true interrupts the step), its worktree and conversation stay, and it frees its slot so the next queued task can start. It resumes by itself at the time, ahead of new arrivals of the same priority, with whatever was held (CI and review notes, messages) in one continue prompt. Refused for a task that is merging, moving, setting up or waiting on the owner. Give a reason; it is shown with the pause.",
   resume_task:
-    "Resume a task you paused (or the scheduler did) now: it starts at once, past the running-task limit, unless the machine load holds it (the answer says so). A pause Saad set is his to lift: this refuses and says so.",
+    "Resume a task you paused (or the scheduler did) now: it starts at once, past the running-task limit, unless the machine load holds it (the answer says so). A pause the owner set is his to lift: this refuses and says so.",
   stop: "Stop a session's agent mid-turn, even while it's thinking, keeping its conversation, worktree and branch; your next message runs as its next turn.",
   done: "Finish a session whose work is complete: a task's open PR merges through the sign-off gates first (refused naming the failing gate), then its agent stops, its worktree is removed if nothing would be lost, and it lands on the sidebar's Done shelf; it no longer archives (use archive for that). Not a rejection.",
   archive:
-    "Put a finished session away, out of the sidebar (it stays in Archived, and Saad can unarchive it). Nothing is merged or cleaned up: refused while the session is working or has an open PR; done first for finished work.",
+    "Put a finished session away, out of the sidebar (it stays in Archived, and the owner can unarchive it). Nothing is merged or cleaned up: refused while the session is working or has an open PR; done first for finished work.",
   resurrect:
     "Bring a dropped, done or archived session back: the same session and conversation, its worktree (with its uncommitted files and plan) back from what was saved or from its branch, its status as it was (a plan-only task waits for approval again, one with a PR is idle), and a PR a drop closed reopened. Archived sessions just unarchive. Held by Pause and braked like a start. Refused when its conversation is gone, its PR was merged, its project was removed or its branch is in use. Give a reason; it goes in the decision log.",
   add_project:
     "Make a git repository on this machine a project of this workspace, by its absolute path, or move the project already at that path into this workspace when it's in no workspace. Says its default branch, detected from git. Refuses a folder that isn't a git repository or that holds secrets, and a project another workspace has.",
   project_tier:
-    "Read or set a project's tier. production: every merge gate applies (CI, independent review, scope). fast: a task's PR merges as soon as it opens, with no CI wait or review. Without a project, lists this workspace's; with a project, reads it; with a tier too, sets it, only when Saad says to.",
+    "Read or set a project's tier. production: every merge gate applies (CI, independent review, scope). fast: a task's PR merges as soon as it opens, with no CI wait or review. Without a project, lists this workspace's; with a project, reads it; with a tier too, sets it, only when the owner says to.",
   note: "Add a line to this workspace's decision log; it shows in your chat.",
   rule_add:
     'Keep a standing rule for this workspace, in your brief on every start from now on ("never merge #111", "briefs must not name third-party products"). It restricts or informs; it can never approve anything.',
   rule_remove:
-    "Remove a standing rule you kept, by its id, only when Saad says so or it no longer applies (the PR it names merged or closed). Saad's rules are his to remove.",
+    "Remove a standing rule you kept, by its id, only when the owner says so or it no longer applies (the PR it names merged or closed). The owner's rules are his to remove.",
   remind_me:
     "Set a one-off reminder for yourself in this workspace: at the time given it reaches you once as a scheduled prompt (not an approval), even if AgentOS was off then. At least 10 minutes ahead; a few at a time at most.",
   recipes:
@@ -181,26 +181,26 @@ const DESCRIPTIONS: Record<ToolName, string> = {
   run_recipe:
     "Run a recipe now: a fresh task or session starts from its saved brief, plus the last run's reported facts and an optional one-off note. Braked, queued and gated like start_task and start_session. A recipe is never an approval. One run at a time; while it is going this says so. You get an event when it finishes.",
   recipe_save:
-    "Save a recipe when a job comes up a second time. A short brief (the steps belong in a script in the repo), a kind (task: ends in a PR; session: no PR) and a project. It sets no timer: Saad does.",
+    "Save a recipe when a job comes up a second time. A short brief (the steps belong in a script in the repo), a kind (task: ends in a PR; session: no PR) and a project. It sets no timer: The owner does.",
   recipe_update:
-    "Change a recipe's brief or settings (never its timer). Earlier versions are kept and Saad sees the change.",
+    "Change a recipe's brief or settings (never its timer). Earlier versions are kept and the owner sees the change.",
   reminders:
     "List this workspace's upcoming reminders and the last few that ran.",
   cancel_reminder:
-    "Cancel a reminder you set, by its id from reminders. Reminders Saad made are his to change.",
+    "Cancel a reminder you set, by its id from reminders. Reminders the owner made are his to change.",
   review:
     "Start an independent read-only review of a PR at its exact head commit, or read the stored verdict for that commit. Takes a task, or any open PR in a workspace repository by #N, owner/repo#N or URL, even one no task owns.",
   sign_off:
-    "Merge a PR, with its project's merge method, through the gates: CI green and settled, a passing review of that commit, nothing blocked, in scope, stack parent merged. Takes a task, or any open PR in a workspace repository by #N, owner/repo#N or URL (an external PR). Refuses with the failing gate, or a repository outside the workspace. With direct true (and a reason) it merges now at the PR's head without the gates; only with Orchestrator full access, and not while paused or while the task waits on Saad.",
-  arm: "Arm a task's PR to merge: AgentOS merges it, through the same gates as sign_off, the moment they all pass at its head, and tells you with one event. A gate failure comes as one event and it stays armed for the fix; one that goes to Saad disarms it. Survives restarts. Use it instead of calling sign_off until it passes.",
+    "Merge a PR, with its project's merge method, through the gates: CI green and settled, a passing review of that commit, nothing blocked, in scope, stack parent merged. Takes a task, or any open PR in a workspace repository by #N, owner/repo#N or URL (an external PR). Refuses with the failing gate, or a repository outside the workspace. With direct true (and a reason) it merges now at the PR's head without the gates; only with Orchestrator full access, and not while paused or while the task waits on the owner.",
+  arm: "Arm a task's PR to merge: AgentOS merges it, through the same gates as sign_off, the moment they all pass at its head, and tells you with one event. A gate failure comes as one event and it stays armed for the fix; one that goes to the owner disarms it. Survives restarts. Use it instead of calling sign_off until it passes.",
   disarm:
     "Disarm a task armed to merge: it merges only through sign_off again.",
   question:
-    "Mark a question you asked Saad in chat as open: it stays pinned on his Needs-you strip until he answers or you clear it. Use it for anything you need from him that isn't an ask_saad item. The same text while open is the same question.",
+    "Mark a question you asked the owner in chat as open: it stays pinned on his Needs-you strip until he answers or you clear it. Use it for anything you need from him that isn't an ask_owner item. The same text while open is the same question.",
   resolve_question:
-    "Clear an open question once Saad has answered it in chat, or it no longer matters.",
-  ask_saad:
-    "Park an item on Saad's asks list (a decision, or anything crossing a hard line) and carry on; it never waits. One open ask per title. His answer reaches you as an event. To ask whether to merge a PR the gates refuse, give task and sha (its head): his approval lets sign_off merge it once, at that commit, without a review (an AI-attributed body or failing CI still refuses).",
+    "Clear an open question once the owner has answered it in chat, or it no longer matters.",
+  ask_owner:
+    "Park an item on the owner's asks list (a decision, or anything crossing a hard line) and carry on; it never waits. One open ask per title. His answer reaches you as an event. To ask whether to merge a PR the gates refuse, give task and sha (its head): his approval lets sign_off merge it once, at that commit, without a review (an AI-attributed body or failing CI still refuses).",
 };
 
 export function orchestratorTools(

package/lib/owner-label.ts

@@ -0,0 +1,25 @@
+// How the installation owner is named in text. Pure, so client code can use
+// it; lib/owner.ts reads the stored name.
+export const OWNER_NAME_MAX = 40;
+
+export function cleanOwnerName(raw: unknown): string | null {
+  if (typeof raw !== "string") return null;
+  const s = raw
+    .normalize("NFKC")
+    .replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}`]/gu, "")
+    .replace(/\s+/g, " ")
+    .trim();
+  return s ? [...s].slice(0, OWNER_NAME_MAX).join("") : null;
+}
+
+/** Agent prompts: the name, else "the owner". */
+export const ownerInPrompt = (name: string | null, cap = false) =>
+  name ?? (cap ? "The owner" : "the owner");
+
+/** UI text: the name, else "you". */
+export const ownerInUi = (name: string | null, cap = false) =>
+  name ?? (cap ? "You" : "you");
+
+/** "Alex decides" / "You decide": the verb for a name or for "you". */
+export const ownerVerb = (name: string | null, named: string, you: string) =>
+  `${ownerInUi(name, true)} ${name ? named : you}`;

package/lib/owner.ts

@@ -0,0 +1,21 @@
+import { getSetting, putSetting } from "./settings-store";
+import { cleanOwnerName, ownerInPrompt, ownerInUi } from "./owner-label";
+
+export const OWNER_NAME_KEY = "owner.name";
+
+/** The name the installation's owner set, or null. The one reader. */
+export function ownerName(): string | null {
+  return cleanOwnerName(getSetting(OWNER_NAME_KEY));
+}
+
+export function setOwnerName(raw: unknown): string | null {
+  const name = cleanOwnerName(raw);
+  putSetting(OWNER_NAME_KEY, name);
+  return name;
+}
+
+/** For agent text: "Alex" or "the owner". */
+export const owner = () => ownerInPrompt(ownerName());
+export const Owner = () => ownerInPrompt(ownerName(), true);
+/** For text people read: "Alex" or "you". */
+export const ownerUi = (cap = false) => ownerInUi(ownerName(), cap);

package/lib/project-add/index.ts

@@ -20,6 +20,7 @@ import { run, shellPath, spawnOn } from "./shell";
 import { onWindowsDrive, WINDOWS_DRIVE_WARNING } from "../wsl";
 
 import { PROJECT_NAME } from "./name";
+import { owner } from "../owner";
 
 export { PROJECT_NAME };
 // https://host/owner/repo(.git), ssh://…, or git@host:owner/repo(.git).
@@ -151,7 +152,7 @@ export async function addFolder(
     const from = existing.workspace_id;
     if (opts.moveOnlyUnassigned && from && from !== workspaceId)
       throw new Error(
-        `${existing.name} belongs to the ${getWorkspace(from)?.name ?? "another"} workspace; only Saad moves a project between workspaces`
+        `${existing.name} belongs to the ${getWorkspace(from)?.name ?? "another"} workspace; only ${owner()} moves a project between workspaces`
       );
     const outcome =
       !workspaceId || from === workspaceId ? "unchanged" : "moved";

package/lib/schedules/index.ts

@@ -29,6 +29,7 @@ import {
   type ScheduleRun,
 } from "./store";
 import { isPaused } from "../orchestrator/pause";
+import { ownerUi } from "../owner";
 
 export * from "./store";
 export { schedulesEnabled, startScheduler, tick } from "./scheduler";
@@ -52,7 +53,7 @@ function creatorOf(s: Schedule): ScheduleView["createdBy"] {
   const creator = s.created_by_session_id
     ? getSessionRow(s.created_by_session_id)
     : null;
-  if (!creator) return { kind: "saad", name: "Saad" };
+  if (!creator) return { kind: "saad", name: ownerUi(true) };
   return creator.role === "orchestrator"
     ? { kind: "orchestrator", name: "Orchestrator" }
     : { kind: "session", name: creator.name };

package/lib/session-logs/gather.ts

@@ -20,6 +20,7 @@ import { PLAN_FILE } from "../models/plan-step";
 import { estimateCost, rowModel } from "../usage/cost";
 import { sessionPath } from "../session-url";
 import type { LogData, LogEvent, LogUsageRow } from "./build";
+import { ownerUi } from "../owner";
 
 const expandHome = (p: string) => p.replace(/^~/, os.homedir());
 
@@ -146,7 +147,7 @@ function askEvents(id: string): LogEvent[] {
   return rows.flatMap((a): LogEvent[] => {
     const raised: LogEvent = {
       at: a.created_at,
-      text: `Escalated to Saad (${a.kind})`,
+      text: `Escalated to ${ownerUi()} (${a.kind})`,
       sha: a.sha,
       quote: a.title,
       detail: a.detail || null,
@@ -156,7 +157,7 @@ function askEvents(id: string): LogEvent[] {
       raised,
       {
         at: a.resolved_at,
-        text: `Saad ${a.status === "approved" ? "approved" : a.status === "declined" ? "declined" : "answered"}`,
+        text: `${ownerUi(true)} ${a.status === "approved" ? "approved" : a.status === "declined" ? "declined" : "answered"}`,
         sha: a.sha,
         quote: a.title,
         detail: a.answer,

package/lib/tasks/queue.ts

@@ -68,6 +68,7 @@ export type {
   StartOutcome,
 } from "./queue-types";
 import { setTask } from "../db/session-parts";
+import { owner } from "../owner";
 export { afterMet, hasFinished, resolveAfter, slotState } from "./queue-rows";
 export { findQueued, listQueue, queuedView } from "./queue-view";
 export { tickOnce, tickQueue, tickQueueSoon } from "./queue-tick";
@@ -234,7 +235,8 @@ export async function startQueuedForOrchestrator(
     outcome: "held",
     text,
   });
-  if (isPaused(workspaceId)) return held("the orchestrator is paused by Saad");
+  if (isPaused(workspaceId))
+    return held(`the orchestrator is paused by ${owner()}`);
   if (isRemoteHost(r.host_id ?? project.host_id))
     return held(
       "it runs on another machine, and the orchestrator starts tasks on this one only"

package/lib/tasks/start.ts

@@ -41,6 +41,7 @@ import {
   startSetup,
 } from "../sessions/setup-progress";
 import { recordSetup, setupNote, setupOutcome, type TaskSetup } from "./setup";
+import { owner } from "../owner";
 
 const execFileAsync = promisify(execFile);
 
@@ -62,7 +63,8 @@ export function launchHold(sessionId: string): string | null {
     .get(sessionId, sessionId, sessionId) as
     { workspace_id: string } | undefined;
   if (!row) return null;
-  if (isPaused(row.workspace_id)) return "the orchestrator is paused by Saad";
+  if (isPaused(row.workspace_id))
+    return `the orchestrator is paused by ${owner()}`;
   const window = brakesEnabled() ? windowRefusal(readUsage()) : null;
   return window ? `held by the brakes: ${window}` : null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saadnvd1/agent-os",
-  "version": "0.3.819",
+  "version": "0.3.824",
   "description": "Self-hosted web UI for managing Claude Code sessions",
   "bin": {
     "agent-os": "scripts/agent-os"