limixbot 0.3.24 → 0.3.26

package/dist-server/openmausbot.js

@@ -4193,7 +4193,7 @@ string(),skillManifestEntrySchema),stagedSkillWriteSchema=external_exports.objec
 /^[a-f0-9]{64}$/).optional(),warnings:external_exports.array(external_exports.string()),skippedFiles:external_exports.array(external_exports.string()),createdAt:external_exports.string(),baseSha256:external_exports.string().regex(/^[a-f0-9]{64}$/).optional(),baseAppliedStageId:external_exports.string().optional()}).superRefine((entry,ctx)=>{entry.action==="update"&&(!entry.baseSha256||!entry.baseAppliedStageId)&&ctx.addIssue({code:"custom",message:"updated skills require their reviewed base revi\
 sion"})}),stagedStoreSchema=external_exports.object({writes:external_exports.record(external_exports.string(),stagedSkillWriteSchema)})}});import{dirname as dirname29,isAbsolute as isAbsolute14,join as join64,resolve as resolve22}from"node:path";var IMPORTED_SKILLS_DIR,INDEX_PATH,sha256Hex,entrySchema,indexSchema,choicesSchema2,init_imported_skills=__esm({"server/imported-skills.ts"(){"use strict";init_zod();init_skill_fit();init_skill_md();init_atomic();init_config3();init_skill_storage();init_skills();IMPORTED_SKILLS_DIR=join64(DATA_DIR,"imported-skills"),INDEX_PATH=join64(DATA_DIR,"skill-state","imported-skills.json"),sha256Hex=
 external_exports.string().regex(/^[a-f0-9]{64}$/),entrySchema=external_exports.object({description:external_exports.string(),source:external_exports.enum(["claudeCode","codex"]),root:external_exports.string(),origin:external_exports.string(),label:external_exports.string(),sha256:sha256Hex,filesSha256:sha256Hex,importedAt:external_exports.string(),warnings:external_exports.array(external_exports.string()),license:external_exports.string().optional(),compatibility:external_exports.string().optional()}),
-indexSchema=external_exports.record(external_exports.string(),entrySchema),choicesSchema2=external_exports.object({off:external_exports.array(external_exports.string()),on:external_exports.record(external_exports.string(),sha256Hex).default({}),listed:external_exports.array(external_exports.string()).optional()})}});function parseToml(source){let text13=source.charCodeAt(0)===65279?source.slice(1):source,i2=0,root=table(),current=root,fail3=message5=>{throw new TomlError(`line ${text13.slice(0,i2).split(`
+indexSchema=external_exports.record(external_exports.string(),entrySchema),choicesSchema2=external_exports.object({off:external_exports.array(external_exports.string()),on:external_exports.record(external_exports.string(),sha256Hex).default({}),listed:external_exports.array(external_exports.string()).optional(),picked:external_exports.array(external_exports.string()).optional()})}});function parseToml(source){let text13=source.charCodeAt(0)===65279?source.slice(1):source,i2=0,root=table(),current=root,fail3=message5=>{throw new TomlError(`line ${text13.slice(0,i2).split(`
 `).length}: ${message5}`)},spaces=()=>{for(;text13[i2]===" "||text13[i2]==="	";)i2++},comment=()=>{if(text13[i2]==="#")for(;i2<text13.length&&text13[i2]!==`
 `;)i2++},newline=()=>{if(text13[i2]===`
 `)i2+=1;else if(text13[i2]==="\r"&&text13[i2+1]===`

package/dist-server/package.json

@@ -1 +1 @@
-{"type":"module","version":"0.3.24"}
+{"type":"module","version":"0.3.26"}

package/dist-server/pair-cli.js

@@ -4192,7 +4192,7 @@ string(),skillManifestEntrySchema),stagedSkillWriteSchema=external_exports.objec
 /^[a-f0-9]{64}$/).optional(),warnings:external_exports.array(external_exports.string()),skippedFiles:external_exports.array(external_exports.string()),createdAt:external_exports.string(),baseSha256:external_exports.string().regex(/^[a-f0-9]{64}$/).optional(),baseAppliedStageId:external_exports.string().optional()}).superRefine((entry,ctx)=>{entry.action==="update"&&(!entry.baseSha256||!entry.baseAppliedStageId)&&ctx.addIssue({code:"custom",message:"updated skills require their reviewed base revi\
 sion"})}),stagedStoreSchema=external_exports.object({writes:external_exports.record(external_exports.string(),stagedSkillWriteSchema)})}});import{dirname as dirname29,isAbsolute as isAbsolute14,join as join64,resolve as resolve22}from"node:path";var IMPORTED_SKILLS_DIR,INDEX_PATH,sha256Hex,entrySchema,indexSchema,choicesSchema2,init_imported_skills=__esm({"server/imported-skills.ts"(){"use strict";init_zod();init_skill_fit();init_skill_md();init_atomic();init_config3();init_skill_storage();init_skills();IMPORTED_SKILLS_DIR=join64(DATA_DIR,"imported-skills"),INDEX_PATH=join64(DATA_DIR,"skill-state","imported-skills.json"),sha256Hex=
 external_exports.string().regex(/^[a-f0-9]{64}$/),entrySchema=external_exports.object({description:external_exports.string(),source:external_exports.enum(["claudeCode","codex"]),root:external_exports.string(),origin:external_exports.string(),label:external_exports.string(),sha256:sha256Hex,filesSha256:sha256Hex,importedAt:external_exports.string(),warnings:external_exports.array(external_exports.string()),license:external_exports.string().optional(),compatibility:external_exports.string().optional()}),
-indexSchema=external_exports.record(external_exports.string(),entrySchema),choicesSchema2=external_exports.object({off:external_exports.array(external_exports.string()),on:external_exports.record(external_exports.string(),sha256Hex).default({}),listed:external_exports.array(external_exports.string()).optional()})}});function parseToml(source){let text13=source.charCodeAt(0)===65279?source.slice(1):source,i2=0,root=table(),current=root,fail3=message5=>{throw new TomlError(`line ${text13.slice(0,i2).split(`
+indexSchema=external_exports.record(external_exports.string(),entrySchema),choicesSchema2=external_exports.object({off:external_exports.array(external_exports.string()),on:external_exports.record(external_exports.string(),sha256Hex).default({}),listed:external_exports.array(external_exports.string()).optional(),picked:external_exports.array(external_exports.string()).optional()})}});function parseToml(source){let text13=source.charCodeAt(0)===65279?source.slice(1):source,i2=0,root=table(),current=root,fail3=message5=>{throw new TomlError(`line ${text13.slice(0,i2).split(`
 `).length}: ${message5}`)},spaces=()=>{for(;text13[i2]===" "||text13[i2]==="	";)i2++},comment=()=>{if(text13[i2]==="#")for(;i2<text13.length&&text13[i2]!==`
 `;)i2++},newline=()=>{if(text13[i2]===`
 `)i2+=1;else if(text13[i2]==="\r"&&text13[i2+1]===`

package/dist-server/server/imported-skills.js

@@ -47,6 +47,8 @@ const choicesSchema = z.object({
     off: z.array(z.string()),
     on: z.record(z.string(), sha256Hex).default({}),
     listed: z.array(z.string()).optional(),
+    /** Limix Bot: skills from this computer are off for a bot until a person adds one from its store. */
+    picked: z.array(z.string()).optional(),
 });
 /** Every imported skill by name; empty when there are none or the index cannot be trusted. */
 export function readImportedSkills() {
@@ -279,6 +281,8 @@ export function storeImportedSkills(inputs) {
 function enabledFor(name, entry, choices) {
     if (choices.off.includes(name))
         return false;
+    if (!(choices.picked ?? []).includes(name))
+        return false;
     return entry.warnings.length === 0 || choices.on[name] === entry.filesSha256;
 }
 const comparable = (path) => {
@@ -361,9 +365,10 @@ export function setImportedSkillEnabled(botId, name, enabled) {
     const off = choices.off.filter((other) => other !== name);
     const { [name]: _read, ...on } = choices.on;
     const listed = choices.listed?.filter((other) => other !== name);
+    const picked = (choices.picked ?? []).filter((other) => other !== name);
     const next = enabled
-        ? { off, on: entry.warnings.length ? { ...on, [name]: entry.filesSha256 } : on, ...(listed ? { listed: [...listed, name].sort() } : {}) }
-        : { off: [...off, name].sort(), on, ...(listed ? { listed } : {}) };
+        ? { off, on: entry.warnings.length ? { ...on, [name]: entry.filesSha256 } : on, ...(listed ? { listed: [...listed, name].sort() } : {}), picked: [...picked, name].sort() }
+        : { off: [...off, name].sort(), on, ...(listed ? { listed } : {}), picked };
     mkdirSync(dirname(choicesPath(botId)), { recursive: true, mode: 0o700 });
     writeFileAtomic(choicesPath(botId), `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
     return importedSkillListings(botId, new Set()).find((skill) => skill.name === name);

package/dist-server/server/index.js

@@ -442,7 +442,7 @@ import { AGENTS_NODE_FLAG, SPAWNED_PROXIES } from "./proxy-paths.js";
 import { agentsProxyLaunch, agentsToolBridgeEnv, applyAgentsBridge, bridgedToolTitle, turnEngine } from "./agents-bridge-switch.js";
 import { agentsServerEnv, botDrivenConversation, COMPUTER_OFF_REFUSAL, computerPickRefusal, directTurnKind, roomSkillsRefusal } from "./agents-turn.js";
 import { harnessMcpTokenEnv } from "./harness-mcp-token.js";
-import { loadBundledSkills, loadUserSkills, mergeSkills, renderSkillInstructions, selectBundledSkills, skillsLibraryEnabled, readSkillLibraryIndex, } from "./skill-library.js";
+import { loadBundledSkills, loadUserSkills, mergeSkills, renderSkillInstructions, skillsLibraryEnabled, readSkillLibraryIndex, } from "./skill-library.js";
 import { runSkillsLibraryBootSweep } from "./skills-library-migration.js";
 import { installedPlaybookInstructions } from "./installed-playbooks.js";
 import { picture as sharedPicture } from "./package-export.js";
@@ -512,6 +512,7 @@ import { createBotOrderRoutes } from "./routes/bot-order.js";
 import { createBotLifecycleRoutes } from "./routes/bot-lifecycle.js";
 import { createBotSkillsRoutes } from "./routes/bot-skills.js";
 import { startHubAutoSync } from "./limix-skill-hub.js";
+import { limixBundledFor, limixSelectBundled, limixSkillDefaultsMigration } from "./limix-skill-store.js";
 import { createSkillShareRoutes } from "./routes/skill-share.js";
 import { createTeamContextRoutes } from "./routes/team-context.js";
 import { createAppSuggestions } from "./host/app-suggestions.js";
@@ -1436,6 +1437,7 @@ function resyncOpenCodeProviderKeys() {
 const firstEngineRead = holdUntilFirstEngineRead();
 await registry.load(providerConfigs(), decorateHostedProvider);
 const bundledSkills = loadBundledSkills();
+limixSkillDefaultsMigration();
 const availableSkills = () => mergeSkills(bundledSkills, loadUserSkills(join(DATA_DIR, "skills")));
 /** Every turn the engine can mount it, whatever its words: they pick only the skill's instructions. A Cloud home or a hosted workspace has no USB port. */
 const usbPhoneOffered = (instance, skills) => instance.adapter.capabilities.phoneMcp === true &&
@@ -8084,8 +8086,8 @@ async function beginTurn(botId, text, opts) {
                 handoffs.begin(threadId, dispatchClaimId, dispatchContext.handoff);
             const integrations = {};
             let browser = null;
-            const skills = availableSkills(), phoneOffered = usbPhoneOffered(instance, skills) && !proactive.fence.confines(threadId) && !botApiThread(threadId);
-            const selectedSkills = selectBundledSkills(providerText, [
+            const skills = limixBundledFor(bot.id, availableSkills()), phoneOffered = usbPhoneOffered(instance, skills) && !proactive.fence.confines(threadId) && !botApiThread(threadId);
+            const selectedSkills = limixSelectBundled(providerText, [
                 ...(phoneOffered ? ["phoneMcp"] : []),
                 ...(skillAuthoring ? ["skillAuthoring"] : []),
             ], skills);
@@ -10048,8 +10050,8 @@ setupRetry = 0) {
             : undefined, bot.id);
         const roomContext = roomWindow.text;
         const turnImages = usesNativeImageInput ? [...burstImages, ...resolvedLatestImages.images, ...await videoFramesWithin(burstImages.length + resolvedLatestImages.images.length, resolvedLatestImages.videos)] : [];
-        const skills = availableSkills(), phoneOffered = usbPhoneOffered(instance, skills);
-        const selectedSkills = mergeSkills(selectBundledSkills(roomContext, phoneOffered ? ["phoneMcp"] : [], skills), selectBundledSkills(latestUser?.text ?? "", skillAuthoring ? ["skillAuthoring"] : [], skills));
+        const skills = limixBundledFor(bot.id, availableSkills()), phoneOffered = usbPhoneOffered(instance, skills);
+        const selectedSkills = mergeSkills(limixSelectBundled(roomContext, phoneOffered ? ["phoneMcp"] : [], skills), limixSelectBundled(latestUser?.text ?? "", skillAuthoring ? ["skillAuthoring"] : [], skills));
         if (phoneOffered)
             integrations.phone = phoneIntegration(bot.id, threadId, internalGeneration);
         try {

package/dist-server/server/limix-bot-library.js

@@ -4,6 +4,7 @@
 // template only describes who the bot is: its routines always arrive paused and nothing is connected for the person.
 import { MASCOT_BODY_IDS } from "../shared/mascot-bodies.js";
 import { MAUS_COLOR_NAMES } from "../shared/wire.js";
+import { lxs } from "./limix-lang.js";
 const TEAM_LIBRARY_RAW_ROOT = "https://raw.githubusercontent.com/leomieo/limix-bot-teams/main";
 const LIST_TTL_MS = 10 * 60 * 1000;
 const MAX_CATALOG_BYTES = 256_000;
@@ -52,11 +53,11 @@ function apps(value, field) {
 }
 export function parseBotListing(value) {
     if (!isRecord(value) || value.format !== "openmaus.catalog" || value.version !== 1)
-        throw new Error("Danh sách mẫu không đúng định dạng");
+        throw new Error(lxs("Danh sách mẫu không đúng định dạng", "The template list has the wrong format"));
     if (value.bots === undefined)
         return [];
     if (!Array.isArray(value.bots) || value.bots.length > 200)
-        throw new Error("Danh sách bot mẫu không hợp lệ");
+        throw new Error(lxs("Danh sách bot mẫu không hợp lệ", "The template bot list is not valid"));
     const seen = new Set();
     const out = [];
     value.bots.forEach((raw, index) => {
@@ -83,10 +84,10 @@ export function parseBotListing(value) {
 }
 export function parseLibraryBot(value, expectedId) {
     if (!isRecord(value) || value.format !== "limix.bot" || value.version !== 1)
-        throw new Error("Tệp bot mẫu không đúng định dạng");
+        throw new Error(lxs("Tệp bot mẫu không đúng định dạng", "The template bot file has the wrong format"));
     const id = text(value.id, "id", 64);
     if (id !== expectedId)
-        throw new Error("Tệp bot mẫu không khớp với danh sách");
+        throw new Error(lxs("Tệp bot mẫu không khớp với danh sách", "The template bot file does not match the list"));
     if (!Array.isArray(value.tryAsking) || value.tryAsking.length === 0 || value.tryAsking.length > 6)
         throw new Error("tryAsking is invalid");
     const bot = {
@@ -123,20 +124,26 @@ export function parseLibraryBot(value, expectedId) {
                 schedule: { type: "daily", time, weekdays: [...new Set(weekdays)].sort() }, enabled: false, overlap: "skip" };
         });
     }
+    if (value.skills !== undefined) {
+        if (!Array.isArray(value.skills) || value.skills.length > 20 || value.skills.some((name) => typeof name !== "string" || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name) || name.length > 64)) {
+            throw new Error("skills is invalid");
+        }
+        bot.skills = [...new Set(value.skills)];
+    }
     return bot;
 }
 async function fetchJson(url, maxBytes) {
     const response = await fetch(url, { headers: { accept: "application/json, text/plain;q=0.9" }, redirect: "error", signal: AbortSignal.timeout(10_000) });
     if (!response.ok)
-        throw new Error(`GitHub trả lỗi HTTP ${response.status}`);
+        throw new Error(lxs(`GitHub trả lỗi HTTP ${response.status}`, `GitHub returned HTTP ${response.status}`));
     const raw = await response.text();
     if (Buffer.byteLength(raw) > maxBytes)
-        throw new Error("Tệp mẫu quá lớn");
+        throw new Error(lxs("Tệp mẫu quá lớn", "The template file is too large"));
     try {
         return JSON.parse(raw);
     }
     catch {
-        throw new Error("GitHub không trả về JSON hợp lệ");
+        throw new Error(lxs("GitHub không trả về JSON hợp lệ", "GitHub did not return valid JSON"));
     }
 }
 let cached = null;
@@ -169,7 +176,7 @@ export async function handleLimixBotLibrary(method, path) {
             return null;
         const id = match[1];
         if (!(await listing()).some((bot) => bot.id === id))
-            return { status: 404, body: { error: "Không có bot mẫu này" } };
+            return { status: 404, body: { error: lxs("Không có bot mẫu này", "No such template bot") } };
         return { status: 200, body: { bot: parseLibraryBot(await fetchJson(`${TEAM_LIBRARY_RAW_ROOT}/bots/${id}.json?t=${Date.now()}`, MAX_BOT_BYTES), id) } };
     }
     catch (error) {

package/dist-server/server/limix-lang.js

@@ -0,0 +1,2 @@
+// Limix Bot's own server messages: Vietnamese when the app's language is Vietnamese, English otherwise.
+export const lxs = (vi, en) => (/^vi/i.test(process.env.OMB_UI_LANGUAGE?.trim() ?? "") ? vi : en);

package/dist-server/server/limix-skill-hub.js

@@ -1,6 +1,6 @@
 // Limix Skill Hub client: keeps a cached copy of the hub catalog, installs a skill only after every file matches the
 // SHA-256 the catalog pins, and never installs scripts, binaries or MCP files unless the owner allows tools for that
-// one skill. Installed skills land DISABLED; the owner turns them on. Auto Sync (catalog refresh) is on by default,
+// one skill. Installed skills wait in the store ("Kho Kĩ Năng (Skills)"), switched on but on no bot until one is added to it. Auto Sync (catalog refresh) is on by default,
 // Auto Install is off by default.
 import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync } from "node:fs";
@@ -9,6 +9,7 @@ import { isSkillName } from "../shared/skill-md.js";
 import { writeFileAtomic } from "./atomic.js";
 import { DATA_DIR } from "./config.js";
 import { installLibrarySkill, readSkillLibraryIndex, retireLibrarySkill, setLibrarySkillReviewState } from "./skill-library.js";
+import { lxs } from "./limix-lang.js";
 export const HUB_REPO = "leomieo/limix-skill-hub";
 const HUB_BRANCH = "main";
 const SYNC_MIN_GAP_MS = 20 * 60 * 60 * 1000;
@@ -54,11 +55,11 @@ export function syncHub() {
                 return { changed: false, count: hubCatalog().length };
             }
             if (!response.ok)
-                throw new Error(`Hub trả về ${response.status}`);
+                throw new Error(lxs(`Hub trả về ${response.status}`, `The hub returned ${response.status}`));
             const text = await response.text();
             const parsed = JSON.parse(text);
             if (!Array.isArray(parsed.skills))
-                throw new Error("Danh mục Hub không đúng định dạng");
+                throw new Error(lxs("Danh mục Hub không đúng định dạng", "The hub catalog has the wrong format"));
             mkdirSync(hubDir(), { recursive: true, mode: 0o700 });
             writeFileAtomic(catalogFile(), text, { mode: 0o600 });
             saveSettings({ ...settings, etag: response.headers.get("etag"), lastSync: new Date().toISOString(), lastError: null });
@@ -83,9 +84,9 @@ const isToolFile = (path) => SCRIPT.test(path) || MCP_FILE.test(path);
 const sha = (data) => createHash("sha256").update(data).digest("hex");
 export function hubSkillBlocked(entry) {
     if (entry.area === "quarantine" || entry.security_status === "quarantined")
-        return "Skill nằm trong khu cách ly vì có mã nguy hiểm.";
+        return lxs("Skill nằm trong khu cách ly vì có mã nguy hiểm.", "This skill is quarantined because it contains dangerous code.");
     if (entry.approval_status === "quarantined" || entry.approval_status === "rejected")
-        return "Skill bị từ chối.";
+        return lxs("Skill bị từ chối.", "This skill was rejected.");
     return null;
 }
 /** installed state of every catalog entry that came from the hub */
@@ -109,24 +110,24 @@ export function hubSkills() {
             // A same-named skill the owner imported by hand is not the hub's: never touched by sync.
             enabled: have?.reviewState === "approved",
             updateAvailable: Boolean(have && have.checksum !== entry.checksum),
-            blocked: !have && library[entry.id] ? "Thư viện đã có kỹ năng cùng tên không đến từ Hub." : null,
+            blocked: !have && library[entry.id] ? lxs("Thư viện đã có kỹ năng cùng tên không đến từ Hub.", "The library already has a skill with this name that did not come from the hub.") : null,
             risky: hubSkillBlocked(entry),
         };
     });
 }
 export async function installHubSkill(id, options = {}) {
     if (!isSkillName(id))
-        return { error: "Tên kỹ năng không hợp lệ" };
+        return { error: lxs("Tên kỹ năng không hợp lệ", "Invalid skill name") };
     const entry = hubCatalog().find((e) => e.id === id);
     if (!entry)
-        return { error: "Không thấy kỹ năng này trong danh mục Hub. Hãy đồng bộ lại." };
+        return { error: lxs("Không thấy kỹ năng này trong danh mục Hub. Hãy đồng bộ lại.", "This skill is not in the hub catalog. Sync again.") };
     const blocked = hubSkillBlocked(entry);
     if (blocked && !options.allowRisky)
         return { error: blocked };
     const installed = installedFromHub().get(id);
     const existing = readSkillLibraryIndex()[id];
     if (existing && !installed)
-        return { error: "Thư viện đã có kỹ năng cùng tên không đến từ Hub." };
+        return { error: lxs("Thư viện đã có kỹ năng cùng tên không đến từ Hub.", "The library already has a skill with this name that did not come from the hub.") };
     const wanted = Object.keys(entry.file_hashes).filter((path) => path !== "SKILL.md" && (options.allowTools || !isToolFile(path)));
     const skipped = Object.keys(entry.file_hashes).filter((path) => path !== "SKILL.md" && !wanted.includes(path));
     const files = [];
@@ -134,22 +135,22 @@ export async function installHubSkill(id, options = {}) {
     for (const path of ["SKILL.md", ...wanted]) {
         const expected = entry.file_hashes[path];
         if (!expected)
-            return { error: `Danh mục thiếu mã kiểm tra cho ${path}` };
+            return { error: lxs(`Danh mục thiếu mã kiểm tra cho ${path}`, `The catalog has no checksum for ${path}`) };
         let response;
         try {
             response = await fetchText(rawUrl(`${entry.area === "quarantine" ? "quarantine" : "skills"}/${id}/${path}`));
         }
         catch (cause) {
-            return { error: `Không tải được ${path}: ${cause instanceof Error ? cause.message : String(cause)}` };
+            return { error: lxs(`Không tải được ${path}: `, `Couldn't download ${path}: `) + (cause instanceof Error ? cause.message : String(cause)) };
         }
         if (!response.ok)
-            return { error: `Không tải được ${path} (${response.status})` };
+            return { error: lxs(`Không tải được ${path} (${response.status})`, `Couldn't download ${path} (${response.status})`) };
         const bytes = new Uint8Array(await response.arrayBuffer());
         if (bytes.byteLength > FILE_MAX_BYTES)
-            return { error: `${path} quá lớn` };
+            return { error: lxs(`${path} quá lớn`, `${path} is too large`) };
         // Pinned content: a file the hub no longer serves as catalogued is refused, never installed.
         if (sha(bytes) !== expected)
-            return { error: `${path} không khớp mã SHA-256 trong danh mục — đã dừng cài` };
+            return { error: lxs(`${path} không khớp mã SHA-256 trong danh mục — đã dừng cài`, `${path} does not match the SHA-256 in the catalog — install stopped`) };
         if (path === "SKILL.md")
             skillMd = new TextDecoder().decode(bytes);
         else
@@ -160,7 +161,7 @@ export async function installHubSkill(id, options = {}) {
         if ("error" in retired)
             return { error: retired.error };
         if ("stale" in retired)
-            return { error: "Kỹ năng đã bị sửa tay sau khi cài, không cập nhật đè." };
+            return { error: lxs("Kỹ năng đã bị sửa tay sau khi cài, không cập nhật đè.", "This skill was edited by hand after installing, so it is not overwritten.") };
     }
     const result = installLibrarySkill({
         name: id,
@@ -171,7 +172,7 @@ export async function installHubSkill(id, options = {}) {
         ...(entry.tags.length ? { tags: entry.tags } : {}),
         warnings: entry.notes,
         skippedFiles: skipped,
-        reviewState: "disabled",
+        reviewState: "approved",
         ...(files.length ? { files } : {}),
     });
     if ("error" in result)
@@ -180,19 +181,19 @@ export async function installHubSkill(id, options = {}) {
 }
 export function setHubSkillEnabled(id, enabled) {
     if (!installedFromHub().has(id))
-        return { error: "Kỹ năng này chưa cài từ Hub" };
+        return { error: lxs("Kỹ năng này chưa cài từ Hub", "This skill was not installed from the hub") };
     const result = setLibrarySkillReviewState(id, enabled ? "approved" : "disabled");
     return "error" in result ? { error: result.error } : { ok: true };
 }
 export function removeHubSkill(id) {
     const installed = installedFromHub().get(id);
     if (!installed)
-        return { error: "Kỹ năng này chưa cài từ Hub" };
+        return { error: lxs("Kỹ năng này chưa cài từ Hub", "This skill was not installed from the hub") };
     const result = retireLibrarySkill(id, installed.sha256);
     if ("error" in result)
         return { error: result.error };
     if ("stale" in result)
-        return { error: "Kỹ năng đã bị sửa tay sau khi cài, không gỡ tự động." };
+        return { error: lxs("Kỹ năng đã bị sửa tay sau khi cài, không gỡ tự động.", "This skill was edited by hand after installing, so it is not removed automatically.") };
     return { ok: true }; // the bytes stay in the library archive, so a removal can be undone by hand
 }
 /** Auto Install (off by default): only excellent/recommended, approved, instructions-only skills; max 5 per sync. */

package/dist-server/server/limix-skill-store.js

@@ -0,0 +1,180 @@
+// Limix Bot: skills are chosen per bot. A new bot starts with only Limix's core skills (learning new skills, reading
+// links with Agent Reach, operating Windows, the phone helpers) plus the skills it learns itself; everything else waits
+// in the store ("Kho Kĩ Năng (Skills)") until a person adds it to one bot. Settings → Kĩ Năng (Skills) only downloads and
+// installs skills into the store; it never turns a skill on for every bot.
+//
+// Three kinds of skill can be added to a bot from the store:
+//   bundled  — shipped in skills/<id> (ui-ux-pro-max, data-dashboards…): the bot's picks live in
+//              <data>/skill-state/<bot>/limix-bundled.json; core ones are always on and cannot be removed.
+//   library  — installed from the Limix Skill Hub or pasted in Settings: the bot's assignedSkills.
+//   imported — brought in from this computer's Claude Code or Codex: the bot's own switch (opt-in in Limix).
+// `/name` calls any skill the bot has, bundled ones included (limixSelectBundled).
+import { existsSync, mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { isSkillName } from "../shared/skill-md.js";
+import { writeFileAtomic } from "./atomic.js";
+import { DATA_DIR } from "./config.js";
+import { importedSkillListings, setImportedSkillEnabled } from "./imported-skills.js";
+import { listLibrarySkills, loadBundledSkills, mergeSkills, readSkillLibraryIndex, selectBundledSkills, setLibrarySkillEveryBot, setLibrarySkillOptOut, setLibrarySkillReviewState, unassignLibrarySkill, } from "./skill-library.js";
+import { lxs } from "./limix-lang.js";
+/** Always on for every bot. "Learning new skills" itself is the skill-authoring feature, on for every bot already. */
+export const LIMIX_CORE_SKILLS = new Set([
+    "create-verification-skill", "agent-reach", "windows-computer-automation", "phone-connection", "phone-harness",
+]);
+const BOT_ID = /^[\w-]+$/;
+const picksPath = (botId) => join(DATA_DIR, "skill-state", botId, "limix-bundled.json");
+export function bundledPicks(botId) {
+    if (!BOT_ID.test(botId))
+        return new Set();
+    try {
+        const parsed = JSON.parse(readFileSync(picksPath(botId), "utf8"));
+        return new Set(Array.isArray(parsed) ? parsed.filter((name) => typeof name === "string" && isSkillName(name)) : []);
+    }
+    catch {
+        return new Set();
+    }
+}
+function setBundledPick(botId, id, on) {
+    if (!BOT_ID.test(botId) || !isSkillName(id))
+        return;
+    const picks = bundledPicks(botId);
+    if (picks.has(id) === on)
+        return;
+    if (on)
+        picks.add(id);
+    else
+        picks.delete(id);
+    mkdirSync(join(DATA_DIR, "skill-state", botId), { recursive: true, mode: 0o700 });
+    writeFileAtomic(picksPath(botId), `${JSON.stringify([...picks].sort(), null, 2)}\n`, { mode: 0o600 });
+}
+/** The shipped skills one bot has: the core ones and the ones a person added to it. */
+export function limixBundledFor(botId, skills) {
+    const picks = bundledPicks(botId);
+    return skills.filter(({ manifest }) => LIMIX_CORE_SKILLS.has(manifest.id) || picks.has(manifest.id));
+}
+const slashCalled = (text, id) => new RegExp(`(^|\\s)/${id.replace(/[-]/g, "\\-")}(?=$|[\\s.,:;!?])`, "m").test(text);
+/** selectBundledSkills, plus every skill of `skills` the text calls by `/id`. */
+export function limixSelectBundled(text, capabilities, skills) {
+    const available = new Set(capabilities);
+    const called = skills.filter(({ manifest }) => manifest.requiredCapabilities.every((capability) => available.has(capability)) && slashCalled(text, manifest.id));
+    return mergeSkills(selectBundledSkills(text, available, skills), called);
+}
+/** The bot's shipped skills as rows of its Skills page. */
+export function limixBundledListings(botId) {
+    return limixBundledFor(botId, loadBundledSkills()).map(({ manifest }) => ({
+        name: manifest.id, description: manifest.description, enabled: true, editable: false,
+        source: LIMIX_CORE_SKILLS.has(manifest.id) ? lxs("Kĩ năng gốc của Limix Bot", "Limix Bot core skill") : lxs("Kho Kĩ Năng (Skills) · có sẵn", "Skills Store · built in"),
+        sha256: "", importedAt: "", warnings: [], skippedFiles: [], origin: "bundled", core: LIMIX_CORE_SKILLS.has(manifest.id),
+    }));
+}
+/** A bot's switch for one of its shipped skills: off takes an added one away; a core one stays. Null: not shipped. */
+export function limixBundledSwitch(botId, name, enabled) {
+    if (!loadBundledSkills().some(({ manifest }) => manifest.id === name))
+        return null;
+    if (LIMIX_CORE_SKILLS.has(name)) {
+        return enabled ? { status: 200, body: { skill: limixBundledListings(botId).find((skill) => skill.name === name) } }
+            : { status: 409, body: { error: lxs("Kĩ năng gốc của Limix Bot luôn bật cho mọi bot.", "Limix Bot core skills are always on for every bot.") } };
+    }
+    setBundledPick(botId, name, enabled);
+    return { status: 200, body: { skill: { ...limixBundledListings(botId).find((skill) => skill.name === name), name, enabled } } };
+}
+function storeItems(bots, botId) {
+    const bot = bots.bot(botId);
+    const assigned = new Set(bot.assignedSkills ?? []);
+    const picks = bundledPicks(botId);
+    const items = new Map();
+    for (const { manifest } of loadBundledSkills()) {
+        const core = LIMIX_CORE_SKILLS.has(manifest.id);
+        items.set(manifest.id, { name: manifest.id, description: manifest.description, kind: "bundled", added: core || picks.has(manifest.id), core, ready: true, warnings: 0, source: lxs("Có sẵn trong Limix Bot", "Built into Limix Bot") });
+    }
+    for (const skill of listLibrarySkills()) {
+        if (items.has(skill.name))
+            continue;
+        const intact = !skill.warnings.some((warning) => warning.includes("enablement is blocked"));
+        items.set(skill.name, {
+            name: skill.name, description: skill.description, kind: "library", added: assigned.has(skill.name) && skill.enabled, core: false,
+            ready: intact, warnings: skill.warnings.length, source: skill.source.startsWith("limix-hub:") ? lxs("Thư viện kĩ năng Limix", "Limix skill library") : lxs("Đã cài trong Cài đặt", "Installed in Settings"),
+        });
+    }
+    for (const skill of importedSkillListings(botId, new Set())) {
+        if (items.has(skill.name))
+            continue;
+        items.set(skill.name, { name: skill.name, description: skill.description, kind: "imported", added: skill.enabled, core: false, ready: true, warnings: skill.warnings.length, source: skill.source || lxs("Từ máy tính này", "From this computer") });
+    }
+    return [...items.values()].sort((a, b) => Number(b.core) - Number(a.core) || a.name.localeCompare(b.name));
+}
+/** Add one skill to one bot, or take it away. `kind` may be left out: the store finds the name. */
+export function limixStoreSet(bots, botId, name, add, kind) {
+    const bot = bots.bot(botId);
+    if (!bot)
+        return { error: lxs("Không tìm thấy bot.", "Bot not found.") };
+    if (!isSkillName(name))
+        return { error: lxs("Tên kĩ năng không hợp lệ.", "Invalid skill name.") };
+    const item = storeItems(bots, botId).find((entry) => entry.name === name && (!kind || entry.kind === kind));
+    if (!item)
+        return { error: lxs(`Kho chưa có kĩ năng "${name}".`, `The store has no skill "${name}".`) };
+    if (item.kind === "bundled") {
+        if (item.core)
+            return add ? { ok: true } : { error: lxs("Kĩ năng gốc của Limix Bot luôn bật cho mọi bot.", "Limix Bot core skills are always on for every bot.") };
+        setBundledPick(botId, name, add);
+        return { ok: true };
+    }
+    if (item.kind === "imported") {
+        const result = setImportedSkillEnabled(botId, name, add);
+        return "error" in result ? { error: result.error } : { ok: true };
+    }
+    const assigned = bot.assignedSkills ?? [];
+    if (add) {
+        // Adding from the store is the person's choice for this bot, so a skill installed but not yet switched on is switched on.
+        const listing = listLibrarySkills().find((skill) => skill.name === name);
+        if (listing && !listing.enabled) {
+            const approved = setLibrarySkillReviewState(name, "approved");
+            if ("error" in approved)
+                return { error: approved.error };
+        }
+        setLibrarySkillOptOut(botId, name, false);
+        if (!assigned.includes(name))
+            bots.patchBot(botId, { assignedSkills: [...assigned, name] });
+        return { ok: true };
+    }
+    const result = unassignLibrarySkill(botId, name, assigned);
+    if ("unassigned" in result && result.assignedSkills)
+        bots.patchBot(botId, { assignedSkills: result.assignedSkills });
+    return { ok: true };
+}
+/** GET /api/limix/skill-store/<bot> lists the store for that bot; POST {name, add, kind?} adds or takes away one skill. */
+export function handleLimixSkillStore(bots, method, path, body) {
+    const m = path.match(/^\/api\/limix\/skill-store\/([\w-]+)$/);
+    if (!m)
+        return null;
+    const botId = m[1];
+    if (!bots.bot(botId))
+        return { status: 404, body: { error: lxs("Không tìm thấy bot.", "Bot not found.") } };
+    if (method === "GET")
+        return { status: 200, body: { skills: storeItems(bots, botId) } };
+    if (method === "POST") {
+        const raw = (body && typeof body === "object" ? body : {});
+        const kind = raw.kind === "bundled" || raw.kind === "library" || raw.kind === "imported" ? raw.kind : undefined;
+        if (typeof raw.name !== "string" || typeof raw.add !== "boolean")
+            return { status: 400, body: { error: lxs("Cần tên kĩ năng và add.", "A skill name and add are required.") } };
+        const result = limixStoreSet(bots, botId, raw.name, raw.add, kind);
+        return "error" in result ? { status: 422, body: result } : { status: 200, body: { skills: storeItems(bots, botId) } };
+    }
+    return { status: 405, body: { error: "method not allowed" } };
+}
+/** Once: skills that earlier versions turned on for every bot go back to the store. */
+export function limixSkillDefaultsMigration() {
+    const marker = join(DATA_DIR, "skill-state", "limix-skill-defaults-v1.json");
+    if (existsSync(marker))
+        return;
+    try {
+        for (const [name, entry] of Object.entries(readSkillLibraryIndex()))
+            if (entry.everyBot)
+                setLibrarySkillEveryBot(name, false);
+        mkdirSync(join(DATA_DIR, "skill-state"), { recursive: true, mode: 0o700 });
+        writeFileAtomic(marker, `${JSON.stringify({ at: new Date().toISOString() })}\n`, { mode: 0o600 });
+    }
+    catch {
+        // Retried at the next start.
+    }
+}

package/dist-server/server/routes/bot-skills.js

@@ -7,6 +7,7 @@ import { fetchSkillFromSource } from "../skill-fetch.js";
 import { readLocalSkills } from "../limix-skill-folder.js";
 import { loadBundledSkills } from "../skill-library.js";
 import { handleLimixHub } from "../limix-skill-hub.js";
+import { handleLimixSkillStore, LIMIX_CORE_SKILLS, limixBundledListings, limixBundledSwitch } from "../limix-skill-store.js";
 import { skillImportSummary } from "../skill-folder.js";
 import { installLibrarySkill, librarySkillOptOuts, listLibrarySkills, readLibrarySkillFile, readSkillLibraryIndex, setLibrarySkillEveryBot, setLibrarySkillOptOut, setLibrarySkillReviewState, skillsLibraryEnabled, unassignLibrarySkill } from "../skill-library.js";
 import { installSkill, listBotSkillsWithOrigin, listStagedSkillWrites, parseSkillMd, removeSkill, scanSkillText, setSkillEnabled, } from "../skills.js";
@@ -25,8 +26,13 @@ export function createBotSkillsRoutes(deps) {
             if (hub)
                 return json(res, hub.status, hub.body);
         }
+        if (path.startsWith("/api/limix/skill-store/")) {
+            const skillStore = handleLimixSkillStore(store, method, path, method === "POST" ? await readBody(req) : undefined);
+            if (skillStore)
+                return json(res, skillStore.status, skillStore.body);
+        }
         if (method === "GET" && path === "/api/limix/bundled-skills") {
-            const skills = loadBundledSkills().map(({ manifest }) => ({ id: manifest.id, name: manifest.name, description: manifest.description, defaultEnabled: manifest.defaultEnabled, triggerTerms: manifest.triggerTerms }));
+            const skills = loadBundledSkills().map(({ manifest }) => ({ id: manifest.id, name: manifest.name, description: manifest.description, defaultEnabled: manifest.defaultEnabled, triggerTerms: manifest.triggerTerms, core: LIMIX_CORE_SKILLS.has(manifest.id) }));
             return json(res, 200, { skills });
         }
         // Imports land DISABLED: a person enables one after reading SKILL.md and its scan warnings.
@@ -63,14 +69,15 @@ export function createBotSkillsRoutes(deps) {
                 const { skills, library } = listBotSkillsWithOrigin(m[1], store.bot(m[1]).assignedSkills);
                 const names = new Set(skills.map((skill) => skill.name));
                 return json(res, 200, {
-                    skills: [...skills, ...listBotSkills(bot, threadId).filter((skill) => !names.has(skill.name))],
+                    skills: [...skills, ...listBotSkills(bot, threadId).filter((skill) => !names.has(skill.name)),
+                        ...limixBundledListings(bot.id).filter((skill) => !names.has(skill.name) && !listBotSkills(bot, threadId).some((other) => other.name === skill.name))],
                     library,
                     assignedSkills: store.bot(m[1]).assignedSkills,
                     staged: listStagedSkillWrites(m[1]).map(stagedSkillListing),
                 });
             }
             return json(res, 200, {
-                skills: listBotSkills(bot, threadId),
+                skills: [...listBotSkills(bot, threadId), ...limixBundledListings(bot.id)],
                 staged: listStagedSkillWrites(m[1]).map(stagedSkillListing),
             });
         }
@@ -121,8 +128,12 @@ export function createBotSkillsRoutes(deps) {
                 return json(res, 200, { skill });
             }
             const result = setSkillEnabled(m[1], m[2], parsed.data.enabled);
-            if ("error" in result)
+            if ("error" in result) {
+                const shipped = limixBundledSwitch(m[1], m[2], parsed.data.enabled);
+                if (shipped)
+                    return json(res, shipped.status, shipped.body);
                 return json(res, 404, { error: result.error });
+            }
             return json(res, 200, { skill: result });
         }
         if (m && method === "DELETE") {

package/dist-server/shared/first-reply-rescue.js

@@ -2,15 +2,16 @@
 // notice row with what the person can do about it. The row's tool name is a
 // whole plain sentence, so a client that only prints tool names (the phones)
 // still reads it; this payload is what lets the desktop draw its buttons.
+const limixVi = () => /^vi/i.test((typeof process !== "undefined" ? process.env?.OMB_UI_LANGUAGE : "") ?? "");
 /** The waiting row's words, for clients that print the tool name. */
 export function firstReplyWaitingName(botName, ai) {
-    return `notice: ${botName} vẫn chưa nhận được phản hồi từ ${ai}.`;
+    return limixVi() ? `notice: ${botName} vẫn chưa nhận được phản hồi từ ${ai}.` : `notice: ${botName} hasn't heard back from ${ai} yet.`;
 }
 /** The same row once its turn ended without an answer: history, true as it stands. */
 export function firstReplyOverName(botName, ai) {
-    return `notice: ${botName} không nhận được phản hồi từ ${ai}.`;
+    return limixVi() ? `notice: ${botName} không nhận được phản hồi từ ${ai}.` : `notice: ${botName} didn't hear back from ${ai}.`;
 }
 /** The same row once the AI's first output arrived. */
 export function firstReplySettledName(ai) {
-    return `notice: ${ai} đã trả lời, sau một lúc chậm.`;
+    return limixVi() ? `notice: ${ai} đã trả lời, sau một lúc chậm.` : `notice: ${ai} answered after a slow start.`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "limixbot",
-  "version": "0.3.24",
+  "version": "0.3.26",
   "description": "Run the Limix Bot server anywhere and pair your devices to it (Leox ৹ Limix AI)",
   "license": "Apache-2.0",
   "type": "module",