AI: the space builder writes a function as a plain script (it wrote export async function handle) (#113)

ddiff --git a/server/workflows/space.js b/server/workflows/space.js
iindex 9b02368..1d7df5d 100644
---- a/server/workflows/space.js
++++ b/server/workflows/space.js
@@@ -41,7 +41,7 @@ const SDK_REFERENCE = [
  /** Space functions (OpenVibe.Space server/spaces/functions.js): code that runs on the server, not in the page. */
  const FUNCTIONS_REFERENCE = [
      'Server functions, only when the idea needs code the visitor must not see or change (hidden answers, a counter every visitor shares, checking a move or a score before it is saved, a page put together on the server):',
--    '- A file functions/<name>.js (name: a-z, 0-9 and "-") defines async function handle(request, ov). The page calls it with await OV.fn("<name>", body); a link or form may also use /api/<name>.',
++    '- A file functions/<name>.js (name: a-z, 0-9 and "-") is a plain script that defines async function handle(request, ov) { … } (no export, import, require or module.exports). The page calls it with await OV.fn("<name>", body); a link or form may also use /api/<name>.',
      '- request: { method, path, query, headers, body }. ov.user (the signed-in visitor or null), ov.items.list/add/set/remove (the shared lists; adds are the visitor\'s when signed in, otherwise the space\'s), ov.store.get/set/remove (the space\'s own server storage that visitors cannot read, values up to 16 KB), ov.ai.ask(text) (a signed-in visitor), console.log.',
      '- handle returns any JSON value, a string (HTML or text), or { status, body }. It runs in a sandbox: plain modern JavaScript, no require/import, fetch, timers, files or packages, about 1 s of computing and 100 ov calls per request.',
  ].join('\n');
ddiff --git a/test/space-workflows.test.js b/test/space-workflows.test.js
iindex 00c2554..0dc044c 100644
---- a/test/space-workflows.test.js
++++ b/test/space-workflows.test.js
@@@ -19,7 +19,7 @@ t.test('the builder\'s prompt: the SDK reference, and the current files when cha
      assert.match(sys, /OV\.items\.set\(collection, value\)/);
      assert.match(sys, /never ask for passwords, payment details/);
      assert.match(sys, /Phones first: at 360 px wide nothing is squeezed/);
--    assert.match(sys, /functions\/<name>\.js \(name: a-z, 0-9 and "-"\) defines async function handle\(request, ov\)/, 'server functions');
++    assert.match(sys, /functions\/<name>\.js \(name: a-z, 0-9 and "-"\) is a plain script that defines async function handle\(request, ov\) \{ … \} \(no export, import, require or module\.exports\)/, 'server functions');
      assert.match(sys, /OV\.fn\(name, body\)/);
      assert.ok(!/There is no server code/.test(sys));
      const prep = PREPARE['space.app.build']({ prompt: 'a poll about pizza' });