openmausbot 0.1.97 → 0.1.99

package/dist-server/server/webhooks.js

@@ -10,6 +10,7 @@ const MAX_ATTEMPTS = 2_000;
 const MAX_EVENT_CHARS = 48_000;
 const RATE_WINDOW_MS = 60_000;
 const RATE_LIMIT = 10;
+const UNAUTHORIZED_REASON = "Invalid webhook URL or secret";
 /** Unfinished (queued, running or waiting) runs one webhook may hold before
  * new deliveries are refused with 429. A webhook can set its own limit; one
  * fanning out a project manager's events needs more than a CI hook does. */
@@ -223,6 +224,8 @@ export class WebhookManager {
     deliveries = [];
     attempts = [];
     rate = new Map();
+    /** Bad-secret requests folded into each webhook's rolling record. */
+    unauthorized = new Map();
     constructor(options) {
         this.options = options;
         this.file = options.file ?? join(DATA_DIR, "webhooks.json");
@@ -305,6 +308,7 @@ export class WebhookManager {
         this.deliveries = this.deliveries.filter((delivery) => !delivery.key.startsWith(`${trigger.endpointId}:`));
         this.attempts = this.attempts.filter((attempt) => attempt.webhookId !== trigger.id);
         this.rate.delete(trigger.endpointId);
+        this.unauthorized.delete(trigger.id);
         this.options.cancelQueued?.(trigger.id, "The webhook was deleted before this delivery started");
         this.save();
         this.options.emit?.({ kind: "webhook.deleted", webhookId: id });
@@ -374,6 +378,33 @@ export class WebhookManager {
             return null;
         return this.recordRejectedForTrigger(trigger, statusCode, reason, event);
     }
+    /** A request with a wrong secret can come from anyone who reaches the
+     * receiver, before any rate limit applies. Each webhook keeps one rolling
+     * record of them, updated in place and saved with the next real change, so
+     * a flood neither pushes real deliveries out of the shared history nor
+     * rewrites the file on every request. */
+    recordUnauthorized(endpointId, event = {}) {
+        const trigger = this.webhooks.find((candidate) => candidate.endpointId === endpointId);
+        if (!trigger)
+            return null;
+        const at = this.attempts.findLastIndex((attempt) => attempt.webhookId === trigger.id && attempt.outcome === "rejected" && attempt.statusCode === 401);
+        if (at === -1) {
+            this.unauthorized.set(trigger.id, 1);
+            return this.appendAttempt(trigger, event, { outcome: "rejected", statusCode: 401, reason: UNAUTHORIZED_REASON, deliveryId: event.deliveryId });
+        }
+        const count = (this.unauthorized.get(trigger.id) ?? 1) + 1;
+        this.unauthorized.set(trigger.id, count);
+        // Same id: clients replace the record they hold instead of adding one.
+        const attempt = this.buildAttempt(trigger, event, {
+            outcome: "rejected",
+            statusCode: 401,
+            reason: `${UNAUTHORIZED_REASON} (${count} requests)`,
+            deliveryId: event.deliveryId,
+        }, this.attempts[at].id);
+        this.attempts[at] = attempt;
+        this.options.emit?.({ kind: "webhook.attempt", attempt: { ...attempt } });
+        return attempt;
+    }
     dispatch(trigger, event) {
         if (!trigger.enabled)
             fail(409, "This webhook is paused");
@@ -524,8 +555,16 @@ export class WebhookManager {
         return attempt;
     }
     appendAttempt(trigger, event, details) {
+        const attempt = this.buildAttempt(trigger, event, details);
+        this.attempts.push(attempt);
+        if (this.attempts.length > MAX_ATTEMPTS)
+            this.attempts.splice(0, this.attempts.length - MAX_ATTEMPTS);
+        this.options.emit?.({ kind: "webhook.attempt", attempt: { ...attempt } });
+        return attempt;
+    }
+    buildAttempt(trigger, event, details, id = randomUUID()) {
         const attempt = {
-            id: randomUUID(),
+            id,
             webhookId: trigger.id,
             receivedAt: this.now(),
             outcome: details.outcome,
@@ -541,10 +580,6 @@ export class WebhookManager {
             attempt.runId = details.runId;
         if (details.reason)
             attempt.reason = details.reason;
-        this.attempts.push(attempt);
-        if (this.attempts.length > MAX_ATTEMPTS)
-            this.attempts.splice(0, this.attempts.length - MAX_ATTEMPTS);
-        this.options.emit?.({ kind: "webhook.attempt", attempt: { ...attempt } });
         return attempt;
     }
     emit(trigger) {

package/dist-server/server/workspace-backup.js

@@ -338,7 +338,12 @@ export async function createWorkspaceBackupSnapshot(dataDir, options, jobId) {
         if (existsSync(sourceDb)) {
             if (lstatSync(sourceDb).isSymbolicLink())
                 throw new Error("The message database must not be a symbolic link.");
-            const db = new DatabaseSync(sourceDb, { readOnly: true });
+            // Another connection may still open this database meanwhile: a copy's
+            // status poll counts its chats (cloud-move.ts workspaceContents). Its
+            // open (WAL recovery) and close (checkpoint) keep a new reader out for a
+            // moment, and without a busy timeout the first backup step fails at once
+            // ("database is locked", or Node's "not an error"). Wait that moment out.
+            const db = new DatabaseSync(sourceDb, { readOnly: true, timeout: 5_000 });
             // Node 26's native backup completion can wait for unrelated event-loop
             // activity after an async scrypt. A scoped pulse prevents an idle server
             // from waiting indefinitely; it owns no data and always stops here.

package/dist-server/shared/device-sign-in.js

@@ -0,0 +1,57 @@
+// Where a person enters the one-time code that signs an engine's CLI in on
+// the machine running OpenMausBot (`codex login --device-auth`, `grok login
+// --device-auth`). The server reads the page and the code from the CLI's
+// output with these rules, and the app checks them again before it shows a
+// link. Neither ever turns arbitrary output into a link, or lets a token ride
+// along in one.
+const CODEX_PAGE = "https://auth.openai.com/codex/device";
+const RULES = {
+    codex: {
+        page: (value) => (/^https:\/\/auth\.openai\.com\/codex\/device\/?$/.test(value) ? CODEX_PAGE : null),
+        code: /^[A-Z0-9]{4,8}-[A-Z0-9]{4,8}$/,
+    },
+    grok: {
+        // xAI's own sign-in hosts. The page may carry the code itself (the
+        // provider's "complete" link); nothing else may ride in its query.
+        page: (value) => {
+            if (!/^https:\/\/[^\s#]+$/.test(value))
+                return null;
+            let url;
+            try {
+                url = new URL(value);
+            }
+            catch {
+                return null;
+            }
+            if (url.username || url.password || url.port || !/(^|\.)(x\.ai|grok\.com)$/.test(url.hostname))
+                return null;
+            return [...url.searchParams.keys()].every((key) => key === "user_code") ? url.href : null;
+        },
+        code: /^[A-Z0-9]{4,12}(?:-[A-Z0-9]{2,12}){0,3}$/,
+    },
+};
+/** The provider's own page for entering `userCode`, or null for anything
+ * else. A code carried in the page's link must be that same code. */
+export function deviceSignInLink(provider, value, userCode) {
+    const page = value ? RULES[provider].page(value) : null;
+    if (!page)
+        return null;
+    return [...new URL(page).searchParams.values()].every((carried) => carried === userCode) ? page : null;
+}
+/** A one-time code as this provider formats it. */
+export function isDeviceSignInCode(provider, value) {
+    return typeof value === "string" && RULES[provider].code.test(value);
+}
+/** The page and the code from a CLI's output, once both lines have arrived
+ * whole: output arrives in chunks that may stop halfway through a code, so
+ * the last, unfinished line is never read. `text` is already free of
+ * terminal styling. */
+export function deviceSignInPrompt(provider, text) {
+    const lines = text.split(/\r?\n/).slice(0, -1).map((line) => line.trim());
+    const at = lines.findIndex((line) => RULES[provider].page(line) !== null);
+    if (at < 0)
+        return null;
+    const userCode = lines.slice(at + 1).map((line) => line.replace(/^code:\s*/i, "")).find((line) => isDeviceSignInCode(provider, line));
+    const authorizationUrl = userCode ? deviceSignInLink(provider, lines[at], userCode) : null;
+    return authorizationUrl && userCode ? { authorizationUrl, userCode } : null;
+}

package/dist-server/shared/team-backup.js

@@ -29,6 +29,8 @@ const task = z.object({
     closedBy: z.object({ botId: key, name, at: timestamp }).optional(),
     /** Only true travels. Absence is unpinned, including backups from before pins. */
     pinned: z.literal(true).optional(),
+    /** A conversation's own turn ceiling. Absence keeps the group default. */
+    turnTimeoutMinutes: z.number().int().min(1).max(1_440).optional(),
     activeLeafId: key.nullable(),
     messages: z.array(message).max(100_000),
 });

package/dist-server/shared/thread-model.js

@@ -0,0 +1,13 @@
+/** The same engine, model, effort and variant. */
+export function sameModelSelection(a, b) {
+    if (!a || !b)
+        return a === b;
+    return a.instanceId === b.instanceId && a.model === b.model && a.effort === b.effort && a.variant === b.variant;
+}
+/** A bot's threads that run on a model of their own, different from the
+ * bot's: the ones "Switch them too" moves onto the bot's model. Reads the
+ * wire shape, where only followsBotModel === false is a thread's own pick, so
+ * a server too old to send it counts none. */
+export function threadsOnOwnModel(botModel, tasks) {
+    return tasks.filter((task) => task.followsBotModel === false && !sameModelSelection(task.modelSelection ?? botModel, botModel));
+}

package/dist-server/vps-container-mcp.js

@@ -16210,6 +16210,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -16255,6 +16257,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -16593,6 +16600,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),

package/dist-server/workspace-backup.worker.js

@@ -12,17 +12,17 @@ import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID a
 import {
   chmodSync,
   closeSync as closeSync2,
-  constants,
+  constants as constants2,
   cpSync,
   createReadStream,
   createWriteStream,
   existsSync,
-  fstatSync,
+  fstatSync as fstatSync2,
   fsyncSync as fsyncSync2,
-  lstatSync,
+  lstatSync as lstatSync2,
   mkdirSync,
   openSync as openSync2,
-  readFileSync,
+  readFileSync as readFileSync2,
   readdirSync,
   readSync,
   realpathSync,
@@ -3007,7 +3007,18 @@ var To = (s4) => {
 
 // server/atomic.ts
 import { randomUUID } from "node:crypto";
-import { closeSync, fsyncSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import {
+  closeSync,
+  constants,
+  fstatSync,
+  fsyncSync,
+  lstatSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "node:fs";
 var RENAME_RETRY_DELAYS_MS = [5, 10, 20, 40, 80];
 var RETRYABLE_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EACCES", "EBUSY"]);
 function sleepSync(ms2) {
@@ -3031,7 +3042,7 @@ function writeFileAtomic(path, data, options2 = {}) {
   try {
     fd = openSync(tmp, "w", options2.mode);
     writeFileSync(fd, data);
-    fsyncSync(fd);
+    if (options2.durable !== false) fsyncSync(fd);
     closeSync(fd);
     fd = null;
     renameWithRetry(tmp, path);
@@ -18769,6 +18780,8 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var FISH_TTS_MODELS = ["s2.1-pro", "s2.1-pro-free"];
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var MIN_MCP_CALL_TIMEOUT_MINUTES = 1;
+var MAX_MCP_CALL_TIMEOUT_MINUTES = 60;
 var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
 var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
 var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
@@ -18814,6 +18827,11 @@ var roomConfigSchema = external_exports.object({
   (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
   { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
 );
+var mcpConfigSchema = external_exports.object({
+  /** Ceiling (minutes) for one bot MCP tool call. Missing values resolve to
+   * 10, preserving the historic chat-mcp-tools constant. */
+  callTimeoutMinutes: external_exports.number().int().min(MIN_MCP_CALL_TIMEOUT_MINUTES).max(MAX_MCP_CALL_TIMEOUT_MINUTES).optional()
+}).strict();
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot", "pool"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional(),
@@ -19152,6 +19170,7 @@ var appConfigSchema = external_exports.object({
    * system language. Unknown tags degrade to English in the renderer. */
   language: optionalText,
   rooms: roomConfigSchema.optional(),
+  mcp: mcpConfigSchema.optional(),
   context: external_exports.object({
     rebuildBytes: external_exports.number().int().min(1024).max(1e6).optional(),
     compactAt: external_exports.number().positive().max(1e7).optional(),
@@ -19312,14 +19331,14 @@ function forbiddenArchivePath(path) {
 }
 function folder(path) {
   mkdirSync(path, { recursive: true, mode: 448 });
-  const stat = lstatSync(path);
+  const stat = lstatSync2(path);
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("The backup directory must be a real directory, not a symbolic link.");
   chmodSync(path, 448);
 }
 function backupRoot(dataDir2) {
   const root = resolve(dataDir2);
   if (root === parse3(root).root) throw new Error("A filesystem root cannot be a workspace backup target.");
-  const stat = lstatSync(root);
+  const stat = lstatSync2(root);
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("The workspace data directory must not be a symbolic link.");
   const path = join2(root, ".backups");
   folder(path);
@@ -19329,7 +19348,7 @@ function jobPath(dataDir2, id) {
   if (!ID.test(id)) throw new Error("Invalid workspace backup identifier.");
   const path = join2(backupRoot(dataDir2), id);
   if (entryExists(path)) {
-    const stat = lstatSync(path);
+    const stat = lstatSync2(path);
     if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("Unsafe workspace backup job directory.");
   }
   return path;
@@ -19347,7 +19366,7 @@ function record2(value) {
 }
 function entryExists(path) {
   try {
-    lstatSync(path);
+    lstatSync2(path);
     return true;
   } catch (error51) {
     if (error51.code === "ENOENT") return false;
@@ -19355,11 +19374,11 @@ function entryExists(path) {
   }
 }
 function privateJson(path) {
-  const fd = openSync2(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const fd = openSync2(path, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   try {
-    const stat = fstatSync(fd);
+    const stat = fstatSync2(fd);
     if (!stat.isFile() || stat.size > MAX_METADATA_BYTES) throw new Error("Workspace backup metadata is too large or is not a regular file.");
-    return JSON.parse(readFileSync(fd, "utf8"));
+    return JSON.parse(readFileSync2(fd, "utf8"));
   } finally {
     closeSync2(fd);
   }
@@ -19408,10 +19427,10 @@ function passwordKey(password, salt) {
   });
 }
 function copyRegular(source, destination) {
-  const input = openSync2(source, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const input = openSync2(source, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   let output;
   try {
-    const before = fstatSync(input);
+    const before = fstatSync2(input);
     if (!before.isFile() || before.size > MAX_WORKSPACE_BACKUP_BYTES) throw new Error("A workspace file is not regular or exceeds the 10 GB backup limit.");
     const mode = before.mode & 64 ? 448 : 384;
     output = openSync2(destination, "wx", mode);
@@ -19427,8 +19446,8 @@ function copyRegular(source, destination) {
       let offset = 0;
       while (offset < count) offset += writeSync(output, chunk, offset, count - offset);
     }
-    const after = fstatSync(input);
-    const current = lstatSync(source);
+    const after = fstatSync2(input);
+    const current = lstatSync2(source);
     if (size !== before.size || after.mtimeMs !== before.mtimeMs || after.ctimeMs !== before.ctimeMs || current.ino !== before.ino || current.dev !== before.dev || current.isSymbolicLink()) {
       throw new Error("A workspace file changed during backup. Stop its writer and retry.");
     }
@@ -19440,9 +19459,9 @@ function copyRegular(source, destination) {
   }
 }
 function hashFile(path) {
-  const fd = openSync2(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const fd = openSync2(path, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   try {
-    if (!fstatSync(fd).isFile()) throw new Error("The workspace archive contains an unsafe file.");
+    if (!fstatSync2(fd).isFile()) throw new Error("The workspace archive contains an unsafe file.");
     const hash2 = createHash("sha256");
     const chunk = Buffer.allocUnsafe(1024 * 1024);
     for (; ; ) {
@@ -19499,8 +19518,8 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
     const root = realpathSync(dataDir2);
     const sourceDb = join2(root, "messages.db");
     if (existsSync(sourceDb)) {
-      if (lstatSync(sourceDb).isSymbolicLink()) throw new Error("The message database must not be a symbolic link.");
-      const db = new DatabaseSync(sourceDb, { readOnly: true });
+      if (lstatSync2(sourceDb).isSymbolicLink()) throw new Error("The message database must not be a symbolic link.");
+      const db = new DatabaseSync(sourceDb, { readOnly: true, timeout: 5e3 });
       const completionPulse = setInterval(() => {
       }, 25);
       try {
@@ -19524,7 +19543,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
         if (forbiddenArchivePath(path2)) throw new Error("A workspace filename conflicts with a protected authentication or runtime path.");
         if (!validRelative(path2)) throw new Error("A workspace filename cannot be safely restored on supported platforms.");
         const source = join2(directory, name);
-        const stat = lstatSync(source);
+        const stat = lstatSync2(source);
         if (name === "node_modules" && (stat.isDirectory() || stat.isSymbolicLink())) {
           skippedDependencies++;
           continue;
@@ -19568,7 +19587,7 @@ async function createWorkspaceBackupSnapshot(dataDir2, options2, jobId2) {
               }
               writeJson(destination, value);
             }
-            copied = { size: lstatSync(destination).size, mode: 384, sha256: hashFile(destination) };
+            copied = { size: lstatSync2(destination).size, mode: 384, sha256: hashFile(destination) };
           } else copied = copyRegular(path2 === "messages.db" ? join2(snapshot, "messages-snapshot.db") : source, destination);
           bytes += copied.size;
           if (bytes > MAX_WORKSPACE_BACKUP_BYTES) throw new Error("The workspace exceeds the 10 GB backup limit.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmausbot",
-  "version": "0.1.97",
+  "version": "0.1.99",
   "description": "Run the OpenMausBot server anywhere and pair your devices to it",
   "license": "Apache-2.0",
   "type": "module",

package/skills/create-verification-skill/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: create-verification-skill
-description: "Create one reviewed skill that teaches a bot how to launch, drive, and verify a specific app or project. Use only when the user explicitly asks for a verification skill."
+description: "Create one skill that teaches a bot how to launch, drive, and verify a specific app or project. Use only when the user explicitly asks for a verification skill."
 ---
 
 # Create a verification skill
 
-Create one compact, project-specific `SKILL.md` through OpenMausBot's normal
-skill review flow. Do not install files directly, enable a skill yourself, or
-silently add scripts to the user's project.
+Create one compact, project-specific `SKILL.md` through `skill_manage`, which
+shows the person every change with an Undo. Do not install skill files
+directly or silently add scripts to the user's project.
 
 ## 1. Inspect before drafting
 
@@ -52,13 +52,14 @@ The proposed `SKILL.md` must contain YAML frontmatter and these sections:
 Keep it concise. Evidence about the user path is input to the draft—not
 permission to retain secrets, audio, screenshots, or coordinates.
 
-## 4. Stage it for review
+## 4. Save it
 
 Call `skills_list` first. If an existing skill already covers the project,
 report that and do not overwrite it. Otherwise call `skill_manage` with
 `action="create"`, the complete `skill_md`, a short `gist`, and the exact
 source used (repository path, URL, or `conversation`).
 
-`skill_manage` only stages the proposal. Tell the user its name and that it is
-inactive until they approve the in-app review card. Never claim it was enabled
-or scheduled automatically.
+Read the `skill_manage` result. If it applied, tell the user the skill's name,
+that it is on, and that they can undo it from the chat. Only if it is pending,
+tell them it stays inactive until they decide on the in-app card. Never claim
+it was enabled without an applied result.

package/skills/create-verification-skill/manifest.json

@@ -2,7 +2,7 @@
   "id": "create-verification-skill",
   "name": "Create Verification Skill",
   "version": "0.1.0",
-  "description": "Stage one reviewed verification skill for a specific app or project.",
+  "description": "Write one verification skill for a specific app or project.",
   "defaultEnabled": true,
   "triggerTerms": [
     "/create-verification-skill",