ArombaDocsChangelogSecurityStatus

Docs

Aromba — Overview

Aromba is an open-source caretaker for your server (later: your Mac). It runs small maintenance jobs called chores, reports to you in Telegram, and can answer questions and fix things when you ask. It works while you are away and helps while you are there.

One-line pitch: “Your server takes care of itself. You get a receipt in the morning.”

Who it is for

  1. Vibe coders — deployed with Claude Code, don’t know sysadmin. Aromba is the admin they don’t have.
  2. Developers — run apps on a VPS, want disk, logs, backups and updates handled without thinking.
  3. Power users — want to plug in their own chores and their own AI model.

Public positioning is dev / vibe-coder only. Other audiences arrive later via optional skills (see below).

Principles

  1. Trust before power. Aromba never deletes user data. Regenerable junk is cleaned; everything else goes to quarantine for 30 days with one-tap restore.
  2. Three colors. Every chore is green (runs itself), yellow (quarantines, never deletes) or red (asks in Telegram first). Anything written by the AI is red.
  3. Free until you ask. Chores, watchers and the morning receipt use no AI. AI is called only when the user asks a question or a watcher finds something abnormal.
  4. The receipt is the product. Every action is logged in one line. The morning receipt is the log, readable by a human.
  5. One chat, one server. The bot answers one Telegram chat only. Everyone else is ignored.
  6. Kill switch always works. /panic stops everything except the chat itself.
  7. Small core, skills grow it. The base install is minimal; chores, capabilities and integrations are skills with a declared weight and permissions. Anyone can add one; the core team promotes it from red to green.
  8. Nearly invisible. Aromba at idle uses under 1% of a core and under 50 MB; chores run at low priority and pause when the server is busy. We show our own footprint on the dashboard.
  9. Safe for people who don’t read. A separate Warden process holds all power; the Worker can only ask. Rights are earned over a week and lost on the first strange move. Nothing here depends on the user understanding it (05-security.md).

What Aromba is not

Website and dashboard — aro.mba

One domain, two halves:

Login happens in the chat: the page shows a code, the bot asks whether it is you, and the same identity connects bot and dashboard with no password and no phone number. Details in 08-dashboard.md.

Phases

PhaseShipsGoal
1 — HookOne-command install, Telegram pairing, first scan report. Touches nothing.The “wow” in 60 seconds
2 — Chores15 core chores, night runs, quarantine, morning receiptFirst real value
3 — AssistantAI key, questions, fixes with approval, voice messagesFirst users stay
4 — Dashboardaro.mba: Space, Map, Health, Trust, Jobs, Receipts, Quarantine, ActivityUsers see the whole picture and share it
5 — Skills for other audiencesCatalog opens to community skills and new audiencesGrowth
6 — MacMenu bar app, same engineSecond platform

Each phase is a public release. Details in 07-roadmap.md.

Skills

The base install is the lightest possible version: engine, bot, assistant with its core tools, and the system skill. Everything else is a skill from the catalog at aro.mba/skills: chore sets (docker, postgres, nextjs…), capabilities (voice, web docs, off-server backups), integrations (GitHub, Cloudflare, Vercel), and knowledge (runbooks that only add text for the assistant). Every skill declares its weight and its permissions, both shown before install. The first scan suggests skills for what it found; the assistant can propose one; the user enables it with a tap. Official skills are signed; community skills run red until reviewed. The skill mechanism exists from phase 2. Skills for other audiences are not mentioned in public materials until phase 5.

Naming

Documents

FileContents
00-overview.mdThis file
01-onboarding.mdInstall script and bot conversation, verbatim
02-chores.mdChore file format, rules, first 15 chores
03-bot.mdCommands, buttons, voice, settings
04-assistant.mdAI architecture and cost rules
05-security.mdSecurity policy
06-architecture.mdDaemon, folders, stack, skills (draft)
07-roadmap.mdPhases with dates
08-dashboard.mdWebsite and dashboard: pages, data, login
09-features.mdFull feature list by user moment, chore builder, community hub
10-voice.mdThe bot’s character: rules, 20 situations with exact lines, style presets
11-money.mdCosts, tiers, founders beta, payments, round model
12-growth.mdFree-only go-to-market: channels, built-in sharing mechanics, launch playbooks, metrics
13-skills.mdBase vs skills, four kinds, manifest, first official skills, install rules
14-failure.mdWhat happens when the relay, Telegram, the AI provider, an update, or the server breaks
15-instruments.mdAromba as another product’s hands: the intake, the instrument, how a job is worked
CLAUDE.mdInstructions for Claude Code