openmausbot 0.1.86 → 0.1.87

package/dist-server/permission-proxy.js

@@ -8,10 +8,11 @@ var MAX_OPTIONS = 12;
 var MAX_QUESTION_TEXT = 400;
 var MAX_LABEL = 120;
 var MAX_DESCRIPTION = 400;
+var MAX_CUSTOM_ANSWER = 2e3;
 function text(value, limit) {
   if (typeof value !== "string") return void 0;
   const trimmed = value.trim();
-  return trimmed ? trimmed.slice(0, limit) : void 0;
+  return trimmed ? trimmed.slice(0, limit).trim() : void 0;
 }
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -59,19 +60,38 @@ function parseAskQuestions(input) {
   }
   return questions.length ? questions : null;
 }
+var OMB_ASK_FENCE = /(^|\n)[ \t]{0,3}(`{3,}|~{3,})[ \t]*omb-ask[ \t]*\r?\n([\s\S]*?)\r?\n[ \t]{0,3}\2[ \t]*(?=\r?\n|$)/;
+var OMB_ASK_FENCE_GLOBAL = new RegExp(OMB_ASK_FENCE.source, OMB_ASK_FENCE.flags + "g");
+var MAX_ANSWER_ECHO = 6 * MAX_CUSTOM_ANSWER;
 function questionAnswersByQuestion(message, questions) {
-  const answers = {};
-  const known = new Map(questions.map((entry) => [entry.question, entry.question]));
-  for (const block of message.split("\n\n")) {
-    const match = /^Q: ([\s\S]+?)\nA: ([\s\S]+)$/.exec(block.trim());
-    if (!match) continue;
-    const question = known.get(match[1].trim());
-    if (question) answers[question] = match[2].trim();
+  return questionAnswersById(message, questions.map((question) => ({ id: question.question, question })));
+}
+function questionAnswersById(message, questions) {
+  const answers = /* @__PURE__ */ Object.create(null);
+  const idByText = /* @__PURE__ */ new Map();
+  const ambiguous = /* @__PURE__ */ new Set();
+  for (const { id, question } of questions) {
+    if (idByText.has(question.question)) {
+      ambiguous.add(question.question);
+      continue;
+    }
+    idByText.set(question.question, id);
+  }
+  const blocks = message.matchAll(/(?:^|\n\n)Q: ([\s\S]+?)\nA: ([\s\S]*?)(?=\n\nQ: |$)/g);
+  let sawBlock = false;
+  for (const match of blocks) {
+    sawBlock = true;
+    const asked = match[1].trim();
+    if (ambiguous.has(asked)) continue;
+    const id = idByText.get(asked);
+    const answer = match[2].trim();
+    if (id && answer) answers[id] = answer;
   }
   if (Object.keys(answers).length) return answers;
+  if (sawBlock) return {};
   const only = questions.length === 1 ? questions[0] : void 0;
   const flat = message.trim();
-  return only && flat ? { [only.question]: flat } : {};
+  return only && flat ? { [only.id]: flat } : {};
 }
 
 // server/permission-proxy.ts

package/dist-server/server/attachments.js

@@ -539,6 +539,61 @@ export function saveImage(bytes, mime, requestedUploadId) {
         reservation.release();
     }
 }
+/** Persist one synthesized audio note. Providers return audio/mpeg buffers;
+ * the same atomic-write and quota discipline as saveImage applies, with a
+ * fixed .mp3 extension because the accepted mime determines it exactly. */
+export function saveAudio(bytes, mime) {
+    const normalized = mime.split(";")[0].trim().toLowerCase();
+    if (normalized !== "audio/mpeg") {
+        throw Object.assign(new Error("unsupported audio type"), { status: 400 });
+    }
+    if (bytes.byteLength === 0)
+        throw Object.assign(new Error("empty audio"), { status: 400 });
+    if (bytes.byteLength > FILE_MAX_BYTES) {
+        throw Object.assign(new Error(`audio exceeds ${FILE_MAX_BYTES} bytes`), { status: 413 });
+    }
+    ensureAttachmentsDir();
+    const reservation = new AttachmentReservation();
+    reservation.reserve(bytes.byteLength);
+    const id = randomUUID();
+    const name = `${id}.mp3`;
+    const path = join(ATTACHMENTS_DIR, name);
+    const partialPath = join(ATTACHMENTS_DIR, `.openmaus-upload-${id}-${randomUUID()}.partial`);
+    activePartials.add(partialPath);
+    let partialCleanupFailed = false;
+    try {
+        writeFileSync(partialPath, bytes, { mode: 0o600, flag: "wx" });
+        try {
+            linkSync(partialPath, path);
+            addCommittedBytes(bytes.byteLength);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            const saved = readFileSync(path);
+            if (!saved.equals(bytes)) {
+                throw Object.assign(new Error("audio destination already exists with different bytes"), { status: 409 });
+            }
+        }
+        unlinkSync(partialPath);
+        return { path, mime: normalized, bytes: bytes.byteLength };
+    }
+    catch (error) {
+        try {
+            unlinkSync(partialPath);
+        }
+        catch {
+            partialCleanupFailed = true;
+        }
+        throw error;
+    }
+    finally {
+        activePartials.delete(partialPath);
+        if (partialCleanupFailed)
+            invalidateAttachmentAccounting();
+        reservation.release();
+    }
+}
 /** HTTP uploads take the same per-ID lock as streamed files. saveImage stays
  * synchronous for generated avatars, while this wrapper prevents an image
  * and a document using the same caller-supplied UUID from committing with

package/dist-server/server/auto-approve.js

@@ -4,8 +4,7 @@
 // provider's own permission mode passed straight through (Claude `auto`,
 // Grok `--permission-mode`, Codex `approvalsReviewer`, …), and a request that
 // reaches this process is one the provider left for a person. The only
-// verdict the app synthesizes is Full access, because that level is the
-// person's explicit, separately confirmed grant to answer every prompt.
+// grants the app applies are Full access and the person's exact saved commands.
 // Questions never come through here: a bot's question always reaches a human.
 import { supportsApprovalMode } from "../shared/approval-mode.js";
 /** A failed delivery is a runtime error, not another permission decision.
@@ -55,7 +54,7 @@ export function delegationInheritsFullAccess(input) {
 // the permission path in permission-proxy). Approving it there does not
 // produce an answer: the CLI runs the tool with none and the model is told
 // "The user did not answer the questions." — a question silently lost.
-const ASKS_A_PERSON = new Set(["askuserquestion", "ask_user"]);
+const ASKS_A_PERSON = new Set(["askuserquestion", "ask_user", "omb-ask"]);
 export function autoVerdict(mode, tool, context) {
     // A question is for a person, whatever channel it arrived on — and
     // whatever the mode: even Full has no answer to give, only an approval
@@ -70,6 +69,8 @@ export function autoVerdict(mode, tool, context) {
         return { approve: `approved ${tool} (full access)`, source: "full-access" };
     if (context?.requiresExplicitApproval)
         return { approve: null, source: "explicit-approval-block" };
+    if (context?.commandAllowed)
+        return { approve: `approved ${tool} (saved command)`, source: "command-allowlist" };
     if (mode === "auto" || mode === "custom")
         return { approve: null, source: "native-approval" };
     return { approve: null, source: "no-grant" };

package/dist-server/server/auto-vm-claims.js

@@ -18,5 +18,6 @@ export function startAutoVmClaim(table, threadId, generation) {
     slot.begin = slot.claim().then(() => { slot.claimed = true; }, (error) => {
         slot.failed = true;
         slot.failure = error instanceof Error ? error.message : String(error);
+        slot.onRejected?.(slot.failure);
     });
 }

package/dist-server/server/bot-package.js

@@ -1,300 +1,26 @@
-import { z } from "zod";
-import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
-import { schemaIssue } from "./schema.js";
-import { isSkillName, parseSkillMd, SKILL_FILE_MAX_BYTES } from "./skills.js";
-import { BOT_PROFILE_LIMITS } from "../shared/bot-profile.js";
-import { normalizeCronSchedule } from "../shared/routine-schedule.js";
+import { stringify as stringifyYaml } from "yaml";
 import { cronScheduleLabel } from "../shared/cron-label.js";
-export const BOT_PACKAGE_FORMAT = "openmaus.package";
-export const BOT_PACKAGE_VERSION = 1;
-export const BOTMRR_MARKDOWN_VERSION = 1;
+import { BOTMRR_MARKDOWN_VERSION, isPackageDocument, PACKAGE_FORMAT, PACKAGE_V1_MAX_SKILLS, PACKAGE_V1_VERSION, parsePackageV1, utf8Bytes, } from "../shared/package-format.js";
+// The package file format (v1 and v2) lives in shared/package-format.ts: one
+// validation gate for the server, the renderer and Admin. This module keeps
+// the v1 names the v1 exporter and its Markdown playbook are written in, and
+// re-exports the v2 reader so server code has one place to import from.
+export { canonicalJson, downgradeToV1, PACKAGE_MAX_BYTES, PACKAGE_VERSION, PackageFormatError, packageKeys, packageScanFindings, packageSecretFindings, packageSummary, parsePackageDocument, redactPackageSecrets, upgradeV1, } from "../shared/package-format.js";
+export const BOT_PACKAGE_FORMAT = PACKAGE_FORMAT;
+export const BOT_PACKAGE_VERSION = PACKAGE_V1_VERSION;
+export { BOTMRR_MARKDOWN_VERSION };
 export const BOT_PACKAGE_SKILLS_VERSION = 1;
-export const BOT_PACKAGE_MAX_SKILLS = 20;
+export const BOT_PACKAGE_MAX_SKILLS = PACKAGE_V1_MAX_SKILLS;
 const BOT_PACKAGE_MARKDOWN_MAX_BYTES = 1_000_000;
-const COLORS = [
-    "green",
-    "blue",
-    "red",
-    "orange",
-    "purple",
-    "cyan",
-    "pink",
-    "yellow",
-    "teal",
-    "coral",
-];
-const requiredText = (max) => z.string({ error: "must be text" }).trim().min(1, { message: "is required" }).max(max, { message: "is too long" });
-const optionalText = (max) => z
-    .union([z.string({ error: "must be text" }), z.null(), z.undefined()])
-    .transform((value) => value?.trim() || undefined)
-    .refine((value) => value === undefined || value.length <= max, { message: "is too long" })
-    .optional();
-const key = requiredText(64).regex(/^[a-z0-9][a-z0-9_-]*$/, {
-    message: "may only contain lowercase letters, numbers, - and _",
-});
-const MAX_DATE_MS = 8_640_000_000_000_000;
-const skillName = requiredText(64).refine(isSkillName, {
-    message: "must be a lowercase skill name",
-});
-const portableSource = optionalText(2_000).refine((value) => value === undefined || !/^(?:[a-z]:[\\/]|[\\/]|\\\\|file:)/i.test(value), { message: "must not be an absolute path" });
-const skillInstructions = z
-    .string({ error: "must be text" })
-    .min(1, { message: "is required" })
-    .max(SKILL_FILE_MAX_BYTES, { message: "is too long" })
-    .refine((value) => Buffer.byteLength(value, "utf8") <= SKILL_FILE_MAX_BYTES, { message: "is too large" })
-    .refine((value) => /^---\r?\n/.test(value), { message: "must start with SKILL.md frontmatter" });
-const portableSkillSchema = z.object({
-    name: skillName,
-    description: requiredText(1_024),
-    source: portableSource,
-    license: optionalText(200),
-    compatibility: optionalText(200),
-    instructions: skillInstructions,
-});
-const CLOCK_TIME = /^([01]\d|2[0-3]):[0-5]\d$/;
-const intervalWeekdays = z.array(z.number().int().min(0).max(6)).min(1).max(7).refine((weekdays) => new Set(weekdays).size === weekdays.length, "must contain unique weekdays");
-const intervalWindow = z.object({
-    start: z.string().regex(CLOCK_TIME, { message: "must use HH:MM" }),
-    end: z.string().regex(CLOCK_TIME, { message: "must use HH:MM" }),
-}).strict().refine(({ start, end }) => start < end, {
-    message: "must end later on the same day",
-});
-const packageRoutineScheduleSchema = z.discriminatedUnion("type", [
-    z.object({ type: z.literal("cron"), expression: requiredText(256), timeZone: requiredText(100) }).strict(),
-    z.object({ type: z.literal("once"), at: z.number().int() }),
-    z.object({
-        type: z.literal("daily"),
-        time: requiredText(5).regex(CLOCK_TIME, { message: "must use HH:MM" }),
-        weekdays: z.array(z.number().int().min(0).max(6)).min(1).max(7),
-    }),
-    z.object({
-        type: z.literal("interval"),
-        everyMinutes: z.number().int().min(5).max(1_440),
-        anchorAt: z.number().int().nonnegative().max(MAX_DATE_MS),
-        weekdays: intervalWeekdays.optional(),
-        window: intervalWindow.optional(),
-        endsAt: z.number().int().nonnegative().max(MAX_DATE_MS).optional(),
-    }),
-]).superRefine((schedule, context) => {
-    if (schedule.type === "cron") {
-        try {
-            normalizeCronSchedule(schedule);
-        }
-        catch (error) {
-            context.addIssue({ code: "custom", message: error instanceof Error ? error.message : "Invalid cron schedule" });
-        }
-        return;
-    }
-    if (schedule.type !== "interval")
-        return;
-    if (schedule.window) {
-        const [startHour, startMinute] = schedule.window.start.split(":").map(Number);
-        const [endHour, endMinute] = schedule.window.end.split(":").map(Number);
-        const windowMinutes = endHour * 60 + endMinute - (startHour * 60 + startMinute);
-        if (windowMinutes < schedule.everyMinutes) {
-            context.addIssue({
-                code: "custom",
-                message: "must be at least as long as the interval cadence",
-                path: ["window"],
-            });
-        }
-    }
-    if (schedule.endsAt !== undefined && schedule.endsAt < schedule.anchorAt) {
-        context.addIssue({
-            code: "custom",
-            message: "must not be before the interval anchor",
-            path: ["endsAt"],
-        });
-    }
-});
-const packageSchema = z.object({
-    format: z.literal(BOT_PACKAGE_FORMAT, { error: "This is not an OpenMaus package" }),
-    version: z.literal(BOT_PACKAGE_VERSION, { error: "Package version is not supported" }),
-    package: z.object({
-        id: requiredText(80).regex(/^[a-z0-9][a-z0-9-]*$/, { message: "must be a lowercase slug" }),
-        release: requiredText(30).regex(/^\d+\.\d+\.\d+$/, { message: "must be semantic versioning" }),
-        name: requiredText(100),
-        tagline: requiredText(160),
-        summary: requiredText(2_000),
-        category: requiredText(80),
-        author: z.object({ name: requiredText(100), url: optionalText(500) }),
-        license: requiredText(80),
-        featured: z.boolean().optional(),
-        tags: z.array(requiredText(80)).max(30).optional(),
-        outcomes: z.array(requiredText(240)).min(1).max(12),
-        setupMinutes: z.number().int().min(1).max(240),
-        requirements: z.object({
-            apps: z.array(z.object({
-                slug: key,
-                label: requiredText(100),
-                reason: requiredText(240),
-                optional: z.boolean().optional(),
-            })).max(30),
-            capabilities: z.array(requiredText(80)).max(20),
-            platforms: z.array(requiredText(80)).max(10).optional(),
-        }),
-        agents: z.array(z.object({
-            key,
-            name: requiredText(100),
-            title: optionalText(200),
-            description: optionalText(4_000),
-            soul: z.string().refine((value) => Buffer.byteLength(value, "utf8") <= BOT_PROFILE_LIMITS.soul, {
-                error: "standing instructions must be at most 24000 bytes",
-            }).optional(),
-            appearance: z.object({
-                color: z.enum(COLORS, { error: "is not supported" }),
-                mascotExpression: optionalText(80),
-                mascotBody: optionalText(40),
-            }),
-            playbooks: z.array(key).max(40).optional(),
-            skills: z.array(skillName).max(BOT_PACKAGE_MAX_SKILLS).optional(),
-        })).min(1).max(200),
-        chiefOfStaff: key.optional(),
-        rooms: z.array(z.object({
-            key,
-            name: requiredText(100),
-            members: z.array(key).min(1).max(200),
-            bulletin: optionalText(12_000),
-            defaultResponder: z.discriminatedUnion("kind", [
-                z.object({ kind: z.literal("agent"), agent: key }),
-                z.object({ kind: z.literal("everyone") }),
-                z.object({ kind: z.literal("mentions") }),
-            ]),
-        })).max(30).optional(),
-        routines: z.array(z.object({
-            key,
-            name: requiredText(80),
-            agent: key,
-            prompt: requiredText(20_000),
-            runOn: z.enum(["maus", "cloud"]),
-            schedule: packageRoutineScheduleSchema,
-            durationMinutes: z.number().int().min(5).max(240),
-            timeoutMinutes: z.number().int().min(5).max(240).optional(),
-            overlap: z.enum(["skip", "queue"]).optional(),
-            enabledAfterInstall: z.literal(false),
-        })).max(50).optional(),
-        playbooks: z.array(z.object({
-            key,
-            name: requiredText(100),
-            summary: requiredText(300),
-            triggers: z.array(requiredText(100)).min(1).max(30),
-            instructions: requiredText(24_000),
-        })).max(80).optional(),
-        skills: z.object({
-            version: z.literal(BOT_PACKAGE_SKILLS_VERSION),
-            entries: z.array(portableSkillSchema).min(1).max(BOT_PACKAGE_MAX_SKILLS),
-        }).optional(),
-        examples: z.array(z.object({
-            title: requiredText(120),
-            input: requiredText(4_000),
-            output: requiredText(8_000),
-        })).max(12).optional(),
-    }),
-});
 export function isBotPackage(value) {
-    if (typeof value === "string")
-        return /^---\r?\n[\s\S]*?\bbotmrr:\s*1\b/m.test(value);
-    return Boolean(value) && typeof value === "object" && !Array.isArray(value) &&
-        value.format === BOT_PACKAGE_FORMAT;
+    return isPackageDocument(value);
 }
-function markdownDocument(markdown) {
-    if (Buffer.byteLength(markdown) > BOT_PACKAGE_MARKDOWN_MAX_BYTES)
-        throw new Error("The bot playbook is too large");
-    const frontmatter = markdown.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
-    if (!frontmatter)
-        throw new Error("This Markdown is missing YAML frontmatter");
-    let metadata;
-    try {
-        metadata = parseYaml(frontmatter[1]);
-    }
-    catch {
-        throw new Error("This Markdown has invalid YAML frontmatter");
-    }
-    if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) {
-        throw new Error("This Markdown is missing its BotMRR blueprint");
-    }
-    const { botmrr, ...definition } = metadata;
-    if (botmrr !== BOTMRR_MARKDOWN_VERSION)
-        throw new Error("BotMRR Markdown version is not supported");
-    for (const heading of ["Activation", "Mission", "Outcomes", "Connections", "Team", "Chief of Staff", "Completion rule"]) {
-        if (!markdown.includes(`## ${heading}`))
-            throw new Error(`This Markdown is missing its ${heading} section`);
-    }
-    return {
-        format: BOT_PACKAGE_FORMAT,
-        version: BOT_PACKAGE_VERSION,
-        package: definition,
-    };
-}
-/** Parse and cross-reference one complete, portable package. Unknown fields
- * are stripped; ids, grants, credentials, paths, model selections, and
- * runtime state therefore cannot ride through the package boundary. */
+/** Parse and cross-reference one complete v1 package. Unknown fields are
+ * stripped; ids, grants, credentials, paths, model selections, and runtime
+ * state therefore cannot ride through the package boundary. v2 documents
+ * go through parsePackageDocument instead. */
 export function parseBotPackage(value) {
-    const source = typeof value === "string" ? markdownDocument(value) : value;
-    const parsed = packageSchema.safeParse(source);
-    if (!parsed.success)
-        throw new Error(schemaIssue(parsed.error, "This is not a bot package"));
-    const pkg = parsed.data.package;
-    const unique = (values, label) => {
-        const seen = new Set();
-        for (const value of values) {
-            if (seen.has(value))
-                throw new Error(`Duplicate ${label} key: ${value}`);
-            seen.add(value);
-        }
-        return seen;
-    };
-    const agents = unique(pkg.agents.map((agent) => agent.key), "agent");
-    const playbooks = unique((pkg.playbooks ?? []).map((playbook) => playbook.key), "playbook");
-    const skills = unique((pkg.skills?.entries ?? []).map((skill) => skill.name), "skill");
-    unique((pkg.rooms ?? []).map((room) => room.key), "room");
-    unique((pkg.routines ?? []).map((routine) => routine.key), "routine");
-    if (pkg.chiefOfStaff && !agents.has(pkg.chiefOfStaff)) {
-        throw new Error(`Unknown Chief of Staff: ${pkg.chiefOfStaff}`);
-    }
-    for (const agent of pkg.agents) {
-        for (const playbook of agent.playbooks ?? []) {
-            if (!playbooks.has(playbook))
-                throw new Error(`Agent ${agent.key} references unknown playbook: ${playbook}`);
-        }
-        const assignedSkills = unique(agent.skills ?? [], `skill in agent ${agent.key}`);
-        for (const skill of assignedSkills) {
-            if (!skills.has(skill))
-                throw new Error(`Agent ${agent.key} references unknown skill: ${skill}`);
-        }
-    }
-    const referencedSkills = new Set(pkg.agents.flatMap((agent) => agent.skills ?? []));
-    for (const skill of pkg.skills?.entries ?? []) {
-        const parsed = parseSkillMd(skill.instructions);
-        if ("error" in parsed)
-            throw new Error(`Skill ${skill.name} is invalid: ${parsed.error}`);
-        if (parsed.name !== skill.name)
-            throw new Error(`Skill ${skill.name} does not match its SKILL.md name`);
-        if (parsed.description !== skill.description)
-            throw new Error(`Skill ${skill.name} does not match its description`);
-        for (const field of ["license", "compatibility"]) {
-            if (skill[field] !== undefined && skill[field] !== parsed[field]) {
-                throw new Error(`Skill ${skill.name} does not match its ${field}`);
-            }
-        }
-        if (!referencedSkills.has(skill.name))
-            throw new Error(`Skill ${skill.name} is not referenced by an agent`);
-    }
-    for (const room of pkg.rooms ?? []) {
-        const members = unique(room.members, `member in room ${room.key}`);
-        for (const member of members) {
-            if (!agents.has(member))
-                throw new Error(`Room ${room.key} references unknown agent: ${member}`);
-        }
-        if (room.defaultResponder.kind === "agent" && !members.has(room.defaultResponder.agent)) {
-            throw new Error(`Room ${room.key} has an unknown default responder`);
-        }
-    }
-    for (const routine of pkg.routines ?? []) {
-        if (!agents.has(routine.agent))
-            throw new Error(`Routine ${routine.key} references unknown agent: ${routine.agent}`);
-    }
-    return parsed.data;
+    return parsePackageV1(value);
 }
 const list = (values) => values.map((value) => `- ${value}`).join("\n");
 const WEEKDAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
@@ -368,7 +94,7 @@ export function renderBotPackageMarkdown(document) {
         ? pkg.requirements.apps.map((app) => `- **${app.label}${app.optional ? " (optional)" : ""}:** ${app.reason}`).join("\n")
         : "- No connected apps are required.";
     const markdown = `---\n${frontmatter}\n---\n\n# ${pkg.name}\n\n${pkg.tagline}\n\n> **Give this file to your Chief of Staff.** It is the complete team blueprint. Any agent system can run it; OpenMausBot can also install it directly.\n\n## Activation\n\nYou are the Chief of Staff for this blueprint. Read the whole document before acting. Confirm the user's goal and any missing inputs, then create or delegate to the specialist roles below. Preserve their names, ownership, boundaries, shared-room rules, and playbooks. If your platform cannot literally spawn agents, perform the roles one at a time and keep their outputs clearly separated.\n\nNever request pasted passwords or secret keys. Use the platform's normal connection flow. Do not send messages, publish content, spend money, delete data, or enable a schedule without the user's explicit approval. All routines start paused.\n\n## Mission\n\n${pkg.summary}\n\n## Outcomes\n\n${list(pkg.outcomes)}\n\n## Connections\n\n${connections}\n\n## Team\n\n${agents}\n\n## Chief of Staff\n\nThe Chief of Staff role is \`${pkg.chiefOfStaff ?? pkg.agents[0].key}\`. This role owns delegation, synthesis, conflict resolution, and the final answer to the user.\n${rooms ? `\n## Shared rooms\n\n${rooms}\n` : ""}${routines ? `\n## Suggested routines\n\n${routines}\n` : ""}${playbooks ? `\n## Playbooks\n\n${playbooks}\n` : ""}${examples ? `\n## Example job\n\n${examples}\n` : ""}\n## Completion rule\n\nReturn one clear result to the user, distinguish evidence from inference, cite source links when the work uses external material, and state what still needs human approval or a connected app.\n`;
-    if (Buffer.byteLength(markdown) > BOT_PACKAGE_MARKDOWN_MAX_BYTES)
+    if (utf8Bytes(markdown) > BOT_PACKAGE_MARKDOWN_MAX_BYTES)
         throw new Error("The bot playbook is too large");
     return markdown;
 }

package/dist-server/server/bot-profile.js

@@ -1,22 +1,10 @@
 import { z } from "zod";
 import { BOT_AVATAR_CROPS, botAvatarCropSchema, botAvatarUrlSchema } from "../shared/bot-avatar.js";
-import { BOT_PROFILE_LIMITS } from "../shared/bot-profile.js";
+import { BOT_PROFILE_LIMITS, fitsOnOneLine } from "../shared/bot-profile.js";
 import { MASCOT_BODY_IDS, mascotBodySchema } from "../shared/mascot-bodies.js";
-/** A name or title is quoted inside prompts and cards as one line — a
- * roster entry, a "Name: …" speaker line, the bracketed provenance note.
- * Text that can break out of that line (a newline, a control byte, the
- * Unicode separators) is refused at the door rather than flattened later,
- * so what the person sees in the sidebar is what every prompt sees too.
- * Written as a scan because a control-character class is the kind of
- * literal the linter (rightly) refuses. */
-export function fitsOnOneLine(value) {
-    for (let i = 0; i < value.length; i += 1) {
-        const code = value.charCodeAt(i);
-        if (code < 0x20 || (code >= 0x7f && code <= 0x9f) || code === 0x2028 || code === 0x2029)
-            return false;
-    }
-    return true;
-}
+// Shared with the package format, which checks the same rule on names it
+// carries; re-exported under its historical path.
+export { fitsOnOneLine } from "../shared/bot-profile.js";
 export const BOT_PROFILE_PATCH_FIELDS = [
     "name",
     "title",
@@ -29,7 +17,7 @@ export const BOT_PROFILE_PATCH_FIELDS = [
     "voice",
     "speakReplies",
 ];
-const profilePatchSchema = z.object({
+export const profilePatchSchema = z.object({
     name: z
         .string({ error: "name must be a string" })
         .max(BOT_PROFILE_LIMITS.name, { error: "name must be at most 100 characters" })

package/dist-server/server/box-create-idempotency.js

@@ -33,7 +33,7 @@ function isRequest(value) {
 }
 function recoveryStateError(detail, cause) {
     return Object.assign(new Error(`Cloud computer creation is paused because its recovery state is ${detail}. `
-        + "Check ascii.dev for an unnamed Box before repairing OpenMausBot's local state."), { status: 503, cause });
+        + "Check boat.dev for an unnamed Box before repairing OpenMausBot's local state."), { status: 503, cause });
 }
 function loadFresh() {
     let raw;
@@ -337,7 +337,7 @@ export function beginBoxCreate(botId, requestBody) {
                 // Once the provider forgets the idempotency key, retrying it (or using
                 // a new key) may create a second billable Box. Absence cannot be
                 // inferred from a lost response, so stop for manual reconciliation.
-                throw recoveryStateError("older than ascii.dev's 24-hour retry window");
+                throw recoveryStateError("older than boat.dev's 24-hour retry window");
             }
             return { request: { ...pending }, startedNow: false };
         }
@@ -356,7 +356,7 @@ export function beginBoxCreate(botId, requestBody) {
 /** Persist the returned identity before the caller attempts to rename it. */
 export function rememberCreatedBox(request, boxId) {
     if (!BOX_ID.test(boxId))
-        throw new Error("ascii.dev returned an invalid cloud computer id");
+        throw new Error("boat.dev returned an invalid cloud computer id");
     return withJournalLock((requests) => {
         const current = requests.find((candidate) => (candidate.botId === request.botId
             && candidate.requestBody === request.requestBody