limixbot 0.3.22 → 0.3.24

package/dist-server/package.json

@@ -1 +1 @@
-{"type":"module","version":"0.3.22"}
+{"type":"module","version":"0.3.24"}

package/dist-server/server/index.js

@@ -661,7 +661,7 @@ const CLOUD_ENV = { ...process.env, ...CLOUD_SECRETS };
 const CLOUD_HOME = cloudHomeConfiguration(CLOUD_ENV);
 const CLOUD_TEAM = CLOUD_HOME?.team ?? null, CLOUD_PERSONAL = CLOUD_HOME !== null && CLOUD_TEAM === null, TEAM_LABEL = CLOUD_TEAM ? { label: CLOUD_TEAM.name } : {};
 /** The language set on this server, else (on a Team Cloud) the team's default from the Admin. threadLanguage: the one a line in a conversation is written in, its one person's, else the place's (server/server-lines.ts). */
-const appLanguage = () => cfg.language ?? CLOUD_TEAM?.language;
+const appLanguage = () => cfg.language ?? CLOUD_TEAM?.language ?? (process.env.OMB_UI_LANGUAGE?.trim() || undefined);
 const personLanguages = createPersonLanguages({ dataDir: DATA_DIR, configured: appLanguage, privateTo: (threadId) => teamHost.privateTo(threadId) });
 const threadLanguage = personLanguages.forThread;
 setConversationLanguage(threadLanguage);

package/dist-server/server/initial-greeting.js

@@ -6,6 +6,7 @@ const GREETINGS = {
     es: (name, person) => `Hola${person ? ` ${person}` : ""}, soy ${name}. ¿Qué te gustaría que hiciera?`,
     "pt-br": (name, person) => `Oi${person ? ` ${person}` : ""}, eu sou ${name}. O que você gostaria que eu fizesse?`,
     ko: (name, person) => `안녕하세요${person ? `, ${person}님` : ""}. 저는 ${name}입니다. 무엇을 도와드릴까요?`,
+    vi: (name, person) => `Xin chào${person ? ` ${person}` : ""}, mình là ${name}. Bạn muốn mình giúp việc gì?`,
     "zh-tw": (name, person) => `嗨${person ? ` ${person}` : ""}，我是 ${name}。你想要我幫你做什麼？`,
 };
 /** What the bot says the moment Set me up is pressed: no model is asked, so it is written here. */
@@ -14,6 +15,7 @@ const SETUP_REQUEST_LINES = {
     es: "Genial. Cuéntame con tus propias palabras en qué te gustaría que te ayude y me prepararé para ello. Por ejemplo: \"ordena mi bandeja de entrada cada mañana\" o \"investiga a nuestros competidores cada semana\".",
     "pt-br": "Ótimo. Me conte com suas palavras em que você gostaria de ajuda e eu me preparo para isso. Por exemplo: \"organize minha caixa de entrada toda manhã\" ou \"pesquise nossos concorrentes toda semana\".",
     ko: "좋아요. 도움이 필요한 일을 편하게 말씀해 주시면 거기에 맞게 제가 설정할게요. 예: \"매일 아침 받은편지함 정리해 줘\", \"매주 경쟁사 조사해 줘\".",
+    vi: "Tuyệt. Bạn cứ kể bằng lời của mình về việc cần giúp, mình sẽ tự thiết lập để làm việc đó. Ví dụ: \"sắp xếp hộp thư của tôi mỗi sáng\" hoặc \"tìm hiểu đối thủ của chúng tôi mỗi tuần\".",
     "zh-tw": "好的。用你自己的話告訴我想要幫忙的事，我會照著設定好自己。例如：「每天早上整理我的收件匣」或「每週研究我們的競爭對手」。",
 };
 /** The answers a blank bot's greeting offers on its setup card. Picking one sets the bot up for its words, as
@@ -27,6 +29,8 @@ const SETUP_CHOICES = {
         "Reservas, compras e tarefas", "Dados, planilhas e relatórios"],
     ko: ["리서치와 주제 깊이 파고들기", "이것저것 지켜보기", "이메일, 캘린더, 메시지",
         "예약, 쇼핑, 심부름", "데이터, 스프레드시트, 보고서"],
+    vi: ["Nghiên cứu và tìm hiểu sâu một chủ đề", "Theo dõi mọi việc giúp tôi", "Email, lịch và tin nhắn",
+        "Đặt chỗ, mua sắm và việc vặt", "Dữ liệu, bảng tính và báo cáo"],
     "zh-tw": ["研究與深入探討主題", "幫我留意各種事情", "電子郵件、行事曆和訊息",
         "預約、購物和跑腿", "資料、試算表和報告"],
 };

package/dist-server/server/limix-bot-library.js

@@ -0,0 +1,178 @@
+// Limix bot templates: the "Bot dựng sẵn" list in Templates comes from github.com/leomieo/limix-bot-teams.
+// GET /api/limix/bots reads only the light list in catalog.json (cached ten minutes); GET /api/limix/bots/<id> fetches
+// that one bot's file when the person presses "Dùng mẫu". Everything is checked here before it reaches the page, and a
+// template only describes who the bot is: its routines always arrive paused and nothing is connected for the person.
+import { MASCOT_BODY_IDS } from "../shared/mascot-bodies.js";
+import { MAUS_COLOR_NAMES } from "../shared/wire.js";
+const TEAM_LIBRARY_RAW_ROOT = "https://raw.githubusercontent.com/leomieo/limix-bot-teams/main";
+const LIST_TTL_MS = 10 * 60 * 1000;
+const MAX_CATALOG_BYTES = 256_000;
+const MAX_BOT_BYTES = 64_000;
+const CATEGORIES = ["everyday", "work", "writing", "design", "sales", "personal"];
+const ID = /^[a-z0-9][a-z0-9-]{0,63}$/;
+const NOTE_PATH = /^(?:MEMORY\.md|memory\/[a-z0-9][a-z0-9-]{0,63}\.md)$/;
+const TIME = /^(?:[01]\d|2[0-3]):[0-5]\d$/;
+const isRecord = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
+function text(value, field, max, allowEmpty = false) {
+    if (typeof value !== "string" || (!allowEmpty && !value.trim()))
+        throw new Error(`${field} is required`);
+    const trimmed = value.trim();
+    if (trimmed.length > max)
+        throw new Error(`${field} is too long`);
+    return trimmed;
+}
+function look(value, field) {
+    if (!isRecord(value))
+        throw new Error(`${field} is invalid`);
+    const color = text(value.color, `${field}.color`, 20);
+    const mascotBody = text(value.mascotBody, `${field}.mascotBody`, 20);
+    if (!MAUS_COLOR_NAMES.includes(color))
+        throw new Error(`${field}.color is not a known colour`);
+    if (!MASCOT_BODY_IDS.includes(mascotBody))
+        throw new Error(`${field}.mascotBody is not a known shape`);
+    return { color, mascotBody };
+}
+function category(value, field) {
+    const found = CATEGORIES.find((entry) => entry === value);
+    if (!found)
+        throw new Error(`${field} is not a known category`);
+    return found;
+}
+function apps(value, field) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > 10)
+        throw new Error(`${field} is invalid`);
+    return value.map((app, index) => {
+        const slug = text(app, `${field}[${index}]`, 40);
+        if (!/^[a-z0-9][a-z0-9_-]*$/.test(slug))
+            throw new Error(`${field}[${index}] is invalid`);
+        return slug;
+    });
+}
+export function parseBotListing(value) {
+    if (!isRecord(value) || value.format !== "openmaus.catalog" || value.version !== 1)
+        throw new Error("Danh sách mẫu không đúng định dạng");
+    if (value.bots === undefined)
+        return [];
+    if (!Array.isArray(value.bots) || value.bots.length > 200)
+        throw new Error("Danh sách bot mẫu không hợp lệ");
+    const seen = new Set();
+    const out = [];
+    value.bots.forEach((raw, index) => {
+        const field = `bots[${index}]`;
+        try {
+            if (!isRecord(raw))
+                throw new Error(`${field} is invalid`);
+            const id = text(raw.id, `${field}.id`, 64);
+            if (!ID.test(id) || seen.has(id))
+                throw new Error(`${field}.id is invalid`);
+            const routines = typeof raw.routines === "number" && Number.isSafeInteger(raw.routines) && raw.routines >= 0 && raw.routines <= 10 ? raw.routines : 0;
+            out.push({
+                id, name: text(raw.name, `${field}.name`, 40), title: text(raw.title, `${field}.title`, 80),
+                category: category(raw.category, `${field}.category`), description: text(raw.description, `${field}.description`, 300),
+                try: text(raw.try, `${field}.try`, 200), look: look(raw.look, `${field}.look`), apps: apps(raw.apps, `${field}.apps`), routines,
+            });
+            seen.add(id);
+        }
+        catch {
+            // One broken entry hides that entry only; the rest of the list still shows.
+        }
+    });
+    return out;
+}
+export function parseLibraryBot(value, expectedId) {
+    if (!isRecord(value) || value.format !== "limix.bot" || value.version !== 1)
+        throw new Error("Tệp bot mẫu không đúng định dạng");
+    const id = text(value.id, "id", 64);
+    if (id !== expectedId)
+        throw new Error("Tệp bot mẫu không khớp với danh sách");
+    if (!Array.isArray(value.tryAsking) || value.tryAsking.length === 0 || value.tryAsking.length > 6)
+        throw new Error("tryAsking is invalid");
+    const bot = {
+        id, category: category(value.category, "category"), name: text(value.name, "name", 40), title: text(value.title, "title", 80),
+        description: text(value.description, "description", 300), soul: text(value.soul, "soul", 8_000), look: look(value.look, "look"),
+        tryAsking: value.tryAsking.map((line, index) => text(line, `tryAsking[${index}]`, 200)), apps: apps(value.apps, "apps"),
+    };
+    if (value.notes !== undefined) {
+        if (!isRecord(value.notes) || Object.keys(value.notes).length > 6)
+            throw new Error("notes is invalid");
+        bot.notes = {};
+        for (const [path, note] of Object.entries(value.notes)) {
+            if (!NOTE_PATH.test(path))
+                throw new Error(`notes path ${path} is not allowed`);
+            bot.notes[path] = text(note, `notes.${path}`, 8_000) + "\n";
+        }
+    }
+    if (value.routines !== undefined) {
+        if (!Array.isArray(value.routines) || value.routines.length > 5)
+            throw new Error("routines is invalid");
+        bot.routines = value.routines.map((raw, index) => {
+            const field = `routines[${index}]`;
+            if (!isRecord(raw) || !isRecord(raw.schedule) || raw.schedule.type !== "daily")
+                throw new Error(`${field} is invalid`);
+            const time = text(raw.schedule.time, `${field}.schedule.time`, 5);
+            if (!TIME.test(time))
+                throw new Error(`${field}.schedule.time is invalid`);
+            const weekdays = raw.schedule.weekdays;
+            if (!Array.isArray(weekdays) || weekdays.length === 0 || weekdays.length > 7 || weekdays.some((day) => !Number.isInteger(day) || day < 0 || day > 6)) {
+                throw new Error(`${field}.schedule.weekdays is invalid`);
+            }
+            // Paused, always: the person turns a routine on after reading it.
+            return { name: text(raw.name, `${field}.name`, 80), prompt: text(raw.prompt, `${field}.prompt`, 2_000),
+                schedule: { type: "daily", time, weekdays: [...new Set(weekdays)].sort() }, enabled: false, overlap: "skip" };
+        });
+    }
+    return bot;
+}
+async function fetchJson(url, maxBytes) {
+    const response = await fetch(url, { headers: { accept: "application/json, text/plain;q=0.9" }, redirect: "error", signal: AbortSignal.timeout(10_000) });
+    if (!response.ok)
+        throw new Error(`GitHub trả lỗi HTTP ${response.status}`);
+    const raw = await response.text();
+    if (Buffer.byteLength(raw) > maxBytes)
+        throw new Error("Tệp mẫu quá lớn");
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new Error("GitHub không trả về JSON hợp lệ");
+    }
+}
+let cached = null;
+/** `fresh`: the "Cập nhật" button. Skips this cache and GitHub's (raw files are cached there for about five minutes). */
+async function listing(fresh = false) {
+    if (!fresh && cached && Date.now() - cached.at < LIST_TTL_MS)
+        return cached.bots;
+    try {
+        const bots = parseBotListing(await fetchJson(`${TEAM_LIBRARY_RAW_ROOT}/catalog.json${fresh ? `?t=${Date.now()}` : ""}`, MAX_CATALOG_BYTES));
+        cached = { at: Date.now(), bots };
+        return bots;
+    }
+    catch (error) {
+        if (cached)
+            return cached.bots; // an older list beats none while GitHub is unreachable
+        throw error;
+    }
+}
+/** GET /api/limix/bots, POST /api/limix/bots/refresh and GET /api/limix/bots/<id>. Null for any other path. */
+export async function handleLimixBotLibrary(method, path) {
+    try {
+        if (method === "POST" && path === "/api/limix/bots/refresh")
+            return { status: 200, body: { bots: await listing(true) } };
+        if (method !== "GET")
+            return null;
+        if (path === "/api/limix/bots")
+            return { status: 200, body: { bots: await listing() } };
+        const match = path.match(/^\/api\/limix\/bots\/([a-z0-9][a-z0-9-]{0,63})$/);
+        if (!match)
+            return null;
+        const id = match[1];
+        if (!(await listing()).some((bot) => bot.id === id))
+            return { status: 404, body: { error: "Không có bot mẫu này" } };
+        return { status: 200, body: { bot: parseLibraryBot(await fetchJson(`${TEAM_LIBRARY_RAW_ROOT}/bots/${id}.json?t=${Date.now()}`, MAX_BOT_BYTES), id) } };
+    }
+    catch (error) {
+        return { status: 502, body: { error: error instanceof Error ? error.message : String(error) } };
+    }
+}

package/dist-server/server/limix-skill-hub.js

@@ -109,7 +109,8 @@ export function hubSkills() {
             // A same-named skill the owner imported by hand is not the hub's: never touched by sync.
             enabled: have?.reviewState === "approved",
             updateAvailable: Boolean(have && have.checksum !== entry.checksum),
-            blocked: hubSkillBlocked(entry) ?? (!have && library[entry.id] ? "Thư viện đã có kỹ năng cùng tên không đến từ Hub." : null),
+            blocked: !have && library[entry.id] ? "Thư viện đã có kỹ năng cùng tên không đến từ Hub." : null,
+            risky: hubSkillBlocked(entry),
         };
     });
 }
@@ -120,7 +121,7 @@ export async function installHubSkill(id, options = {}) {
     if (!entry)
         return { error: "Không thấy kỹ năng này trong danh mục Hub. Hãy đồng bộ lại." };
     const blocked = hubSkillBlocked(entry);
-    if (blocked)
+    if (blocked && !options.allowRisky)
         return { error: blocked };
     const installed = installedFromHub().get(id);
     const existing = readSkillLibraryIndex()[id];
@@ -136,7 +137,7 @@ export async function installHubSkill(id, options = {}) {
             return { error: `Danh mục thiếu mã kiểm tra cho ${path}` };
         let response;
         try {
-            response = await fetchText(rawUrl(`skills/${id}/${path}`));
+            response = await fetchText(rawUrl(`${entry.area === "quarantine" ? "quarantine" : "skills"}/${id}/${path}`));
         }
         catch (cause) {
             return { error: `Không tải được ${path}: ${cause instanceof Error ? cause.message : String(cause)}` };
@@ -180,9 +181,6 @@ export async function installHubSkill(id, options = {}) {
 export function setHubSkillEnabled(id, enabled) {
     if (!installedFromHub().has(id))
         return { error: "Kỹ năng này chưa cài từ Hub" };
-    const entry = hubCatalog().find((e) => e.id === id);
-    if (enabled && entry && hubSkillBlocked(entry))
-        return { error: hubSkillBlocked(entry) };
     const result = setLibrarySkillReviewState(id, enabled ? "approved" : "disabled");
     return "error" in result ? { error: result.error } : { ok: true };
 }
@@ -203,7 +201,7 @@ async function autoInstallEligible() {
     for (const skill of hubSkills()) {
         if (budget <= 0)
             return;
-        const eligible = !skill.blocked && skill.kind === "instructions-only" && skill.approval_status === "approved" && (skill.grade === "excellent" || skill.grade === "recommended");
+        const eligible = !skill.blocked && !skill.risky && skill.kind === "instructions-only" && skill.approval_status === "approved" && (skill.grade === "excellent" || skill.grade === "recommended");
         if (!eligible || (skill.installed && !skill.updateAvailable))
             continue;
         budget -= 1;
@@ -232,7 +230,7 @@ export async function handleLimixHub(method, path, body) {
     }
     const id = typeof record.id === "string" ? record.id : "";
     if (method === "POST" && (path === "/api/limix/hub/install" || path === "/api/limix/hub/update")) {
-        const result = await installHubSkill(id, { allowTools: record.allowTools === true });
+        const result = await installHubSkill(id, { allowTools: record.allowTools === true, allowRisky: record.allowRisky === true });
         return "error" in result ? { status: 422, body: result } : { status: 200, body: result };
     }
     if (method === "POST" && path === "/api/limix/hub/enable") {

package/dist-server/server/routes/bot-skills.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { handleLimixBotLibrary } from "../limix-bot-library.js";
 import { setImportedSkillEnabled } from "../imported-skills.js";
 import { setNativeSkillEnabled } from "../native-skill-choices.js";
 import { botSkillTemplateSchema } from "../new-bot-defaults.js";
@@ -14,6 +15,11 @@ export function createBotSkillsRoutes(deps) {
     const { store, cfg, listBotSkills, readBotSkillFile, stagedSkillListing } = deps;
     return async ({ req, res, url, path, method, json, readBody }) => {
         let m = null;
+        if (path.startsWith("/api/limix/bots")) {
+            const library = await handleLimixBotLibrary(method, path);
+            if (library)
+                return json(res, library.status, library.body);
+        }
         if (path.startsWith("/api/limix/hub")) {
             const hub = await handleLimixHub(method, path, method === "POST" ? await readBody(req) : undefined);
             if (hub)

package/dist-server/server/routes/teams.js

@@ -159,7 +159,7 @@ export function createTeamRoutes(deps) {
         }
         if (method === "GET" && path === "/api/team-library/catalog") {
             try {
-                return json(res, 200, await fetchTeamCatalog());
+                return json(res, 200, await fetchTeamCatalog(url.searchParams.get("fresh") ? ((input, init) => fetch(`${String(input)}?t=${Date.now()}`, init)) : fetch));
             }
             catch (error) {
                 return json(res, 502, { error: error instanceof Error ? error.message : "The team library is unavailable" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "limixbot",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "description": "Run the Limix Bot server anywhere and pair your devices to it (Leox ৹ Limix AI)",
   "license": "Apache-2.0",
   "type": "module",