@7ots/cli 0.1.6 → 0.1.8

package/server/platform/orquesta.mjs

@@ -32,7 +32,7 @@ import { createHash, randomBytes } from 'node:crypto';
 import { resolveLocale, translator } from '../../src/i18n/index.js';
 import { identityPrompt } from '../identity.mjs';
 import { i18nError } from '../i18n.mjs';
-import { TASK_FINAL, addTask, getIntegration, getPlatformState, getTask, openTasks, setIntegration, setPlatformState, tasksLastDay, updateTask } from './store.mjs';
+import { TASK_FINAL, addTask, getIntegration, getPlatformState, getTask, listOts, openTasks, setIntegration, setPlatformState, tasksLastDay, updateTask } from './store.mjs';
 
 const penv = process.env;
 const ORQ = (penv.ORQUESTA_URL || 'https://getorquesta.com').replace(/\/+$/, '');
@@ -201,16 +201,21 @@ async function bearer(accountId) {
   return s.access;
 }
 
-/** Orquesta API as the account (a 401 with OAuth renews the token once). */
-async function orq(accountId, method, path, body) {
-  let r = await http(ORQ + path, { method, body, headers: { Authorization: `Bearer ${await bearer(accountId)}` } });
+/**
+ * Orquesta API as the account (a 401 with OAuth renews the token once). With `ots`, the request acts
+ * for that ot: Orquesta narrows it to the projects linked to the ot (project → Identity → Connected
+ * ots) and to the scopes of each link (read / run / deploy) — never more than the account itself.
+ */
+async function orq(accountId, method, path, body, timeoutMs, ots = null) {
+  const as = ots ? { 'X-Orquesta-External-Agent': `7ots/${ots.id}` } : {};
+  let r = await http(ORQ + path, { method, body, timeoutMs, headers: { Authorization: `Bearer ${await bearer(accountId)}`, ...as } });
   if (r.status === 401) {
     const s = getIntegration(accountId, 'orquesta');
     if (s?.kind !== 'oauth') {
       if (s) setIntegration(accountId, 'orquesta', { ...s, error: 'refused' });
       throw i18nError(409, 'platform.orquesta.reconnect');
     }
-    r = await http(ORQ + path, { method, body, headers: { Authorization: `Bearer ${await refresh(accountId)}` } });
+    r = await http(ORQ + path, { method, body, timeoutMs, headers: { Authorization: `Bearer ${await refresh(accountId)}`, ...as } });
     if (r.status === 401) {
       setIntegration(accountId, 'orquesta', { ...getIntegration(accountId, 'orquesta'), error: 'refused' });
       throw i18nError(409, 'platform.orquesta.reconnect');
@@ -219,12 +224,69 @@ async function orq(accountId, method, path, body) {
   return r;
 }
 
+// ───────────────────────────── the account's own VMs (vm.mjs, provider 'orquesta_user') ─────────────────────────────
+
+/**
+ * Whether the connected account can create servers in its own Orquesta org. Orquesta's infrastructure
+ * routes (POST /api/v1/projects, /api/v1/projects/:id/vm, /api/v1/vms) accept only org API keys (oak_)
+ * with projects:write + vms:write, never OAuth tokens; a key's scopes are only known when Orquesta
+ * answers (403 → 'scopes').
+ */
+export function orquestaVmAccess(accountId) {
+  const s = getIntegration(accountId, 'orquesta');
+  if (!s) return { connected: false, usable: false, reason: 'notConnected' };
+  if (s.error) return { connected: false, usable: false, reason: 'reconnect' };
+  if (s.kind !== 'key') return { connected: true, usable: false, reason: 'needsKey' };
+  return { connected: true, usable: true, reason: null };
+}
+
+/**
+ * Orquesta's infrastructure API as the account → { ok, status, data }. The account's credential stays
+ * sealed here and only ever goes to ORQUESTA_URL; vm.mjs never sees it.
+ */
+export async function orquestaInfra(accountId, method, path, body, timeoutMs = 20_000) {
+  if (!/^\/api\/v1\/(projects|vms)(\/|$)/.test(path)) throw new Error('orquestaInfra: path not allowed');
+  return orq(accountId, method, path, body, timeoutMs);
+}
+
 export async function listProjects(accountId) {
   const r = await orq(accountId, 'GET', '/api/v1/projects');
   if (!r.ok) throw i18nError(424, 'platform.orquesta.failed', { status: r.status });
   return (r.data.projects || []).slice(0, 200).map((p) => ({ id: String(p.id), name: String(p.name || p.slug || p.id).slice(0, 120), online: !!p.agentOnline, lastSeen: p.agentLastSeen || null }));
 }
 
+/**
+ * Tells Orquesta which ots this account has (name + face), so a project admin can connect them to
+ * projects there. An ot with no link yet is seeded with the project chosen in its 7ots panel (read,
+ * plus run when tasks are on) — Orquesta ignores the seed once the ot has any link, and never seeds
+ * `deploy`. Re-sent when the list changes or hourly; failures only log (older Orquesta: 404).
+ */
+const registered = new Map();
+export async function registerOts(accountId, { force = false } = {}) {
+  const ots = listOts(accountId).filter((o) => /^[A-Za-z0-9._:-]{1,128}$/.test(o.id));
+  const agents = ots.map((o) => {
+    const cfg = otsOrquesta(o);
+    return { id: o.id, name: String(o.name || '').slice(0, 80), ...(cfg.project ? { seed: { projectId: cfg.project, scopes: cfg.tasks ? ['read', 'run'] : ['read'] } } : {}) };
+  });
+  const sig = JSON.stringify(agents);
+  const prev = registered.get(accountId);
+  if (!force && prev && prev.sig === sig && Date.now() - prev.at < 3600_000) return prev.agents;
+  const r = await orq(accountId, 'PUT', '/api/v1/external-agents', { provider: '7ots', agents });
+  if (!r.ok) {
+    console.warn(`[7ots] orquesta: registering ots → ${r.status}`);
+    return null;
+  }
+  registered.set(accountId, { sig, at: Date.now(), agents: r.data.agents || [] });
+  return r.data.agents || [];
+}
+
+/** The projects Orquesta lets this ot reach, with the scopes of each link ([] when unknown). */
+export async function otLinks(ots) {
+  const agents = await registerOts(ots.accountId).catch(() => null);
+  const me = (agents || []).find((a) => a.id === ots.id);
+  return (me?.projects || []).map((p) => ({ id: String(p.projectId), name: String(p.projectName || p.projectId), scopes: (p.scopes || []).map(String) }));
+}
+
 // ───────────────────────────── per-ot settings ─────────────────────────────
 
 /** Panel settings of an ot. */
@@ -298,19 +360,19 @@ function promptContent(ots, { task, who, channel }) {
   ].join('\n');
 }
 
-async function fetchPrompt(accountId, id) {
-  const r = await orq(accountId, 'GET', `/api/v1/prompts/${encodeURIComponent(id)}`);
+async function fetchPrompt(accountId, id, ots) {
+  const r = await orq(accountId, 'GET', `/api/v1/prompts/${encodeURIComponent(id)}`, undefined, undefined, ots);
   if (!r.ok) throw i18nError(424, 'platform.orquesta.failed', { status: r.status });
   return r.data.prompt || {};
 }
 
 /** Text the agent produced: `result` when Orquesta has it, else the 'output' log lines. */
-async function outputOf(accountId, id, prompt) {
+async function outputOf(accountId, id, prompt, ots) {
   if (typeof prompt.result === 'string' && prompt.result.trim()) return prompt.result.trim().slice(0, 20000);
   const out = [];
   let after = null;
   for (let page = 0; page < 5; page++) {
-    const r = await orq(accountId, 'GET', `/api/v1/logs?${new URLSearchParams({ promptId: id, ...(after != null ? { afterSequence: String(after) } : {}) })}`);
+    const r = await orq(accountId, 'GET', `/api/v1/logs?${new URLSearchParams({ promptId: id, ...(after != null ? { afterSequence: String(after) } : {}) })}`, undefined, undefined, ots);
     if (!r.ok) break;
     const logs = r.data.logs || [];
     for (const l of logs) if (l.category === 'output' && l.message) out.push(String(l.message));
@@ -323,10 +385,10 @@ async function outputOf(accountId, id, prompt) {
 /** Refreshes a stored task from Orquesta (only while it isn't finished). */
 async function refreshTask(ots, task) {
   if (TASK_FINAL.includes(task.status)) return task;
-  const p = await fetchPrompt(ots.accountId, task.id);
+  const p = await fetchPrompt(ots.accountId, task.id, ots);
   const status = ['pending', 'running', 'completed', 'failed', 'cancelled'].includes(p.status) ? p.status : task.status;
   const patch = { status, error: p.error ? String(p.error) : undefined };
-  if (TASK_FINAL.includes(status)) patch.result = await outputOf(ots.accountId, task.id, p).catch(() => '');
+  if (TASK_FINAL.includes(status)) patch.result = await outputOf(ots.accountId, task.id, p, ots).catch(() => '');
   updateTask(task.id, patch);
   return getTask(ots.id, task.id);
 }
@@ -362,17 +424,19 @@ export async function runTask(ots, { task, who, channel }) {
       if (!TASK_FINAL.includes(cur.status) && Date.now() - cur.createdAt < 24 * 3600_000) return { ok: false, error: t('platform.orquesta.busy', { id: cur.id }) };
     }
     offline = (await listProjects(ots.accountId).catch(() => [])).some((p) => p.id === cfg.project && !p.online);
+    await registerOts(ots.accountId).catch(() => null);
     const r = await orq(ots.accountId, 'POST', '/api/v1/prompts', {
       projectId: cfg.project,
       content: promptContent(ots, { task: text, who, channel }),
       context: `7ots ot "${ots.name}" · ${channel} · ${who}`.slice(0, 500),
       tags: ['7ots', channel],
       source: 'api',
-    });
+    }, undefined, ots);
     if (!r.ok) {
       const code = String(r.data.code || r.data.error || '');
       if (/AGENT_NOT_CONFIGURED/i.test(code)) return { ok: false, error: t('platform.orquesta.noAgent', { url: projectUrl(cfg.project) }), project_url: projectUrl(cfg.project) };
-      if (r.status === 404) return { ok: false, error: t('platform.orquesta.noProject') };
+      // the ot acts with its own links: not connected to that project, or connected without `run`
+      if (r.status === 404 || /EXTERNAL_AGENT_NOT_ALLOWED/.test(code)) return { ok: false, error: t('platform.orquesta.notLinked', { url: projectUrl(cfg.project) }), project_url: projectUrl(cfg.project) };
       if (r.status === 429) return { ok: false, error: t('platform.orquesta.rateLimited') };
       return { ok: false, error: t('platform.orquesta.submitFailed', { status: r.status }) };
     }
@@ -414,7 +478,7 @@ export async function cancelTask(ots, id) {
   const row = getTask(ots.id, id);
   if (!row) return null;
   if (TASK_FINAL.includes(row.status)) return row;
-  const r = await orq(ots.accountId, 'POST', `/api/v1/prompts/${encodeURIComponent(row.id)}/cancel`);
+  const r = await orq(ots.accountId, 'POST', `/api/v1/prompts/${encodeURIComponent(row.id)}/cancel`, undefined, undefined, ots);
   if (!r.ok) throw i18nError(424, 'platform.orquesta.failed', { status: r.status });
   updateTask(row.id, { status: r.data.status || 'cancelled' });
   return getTask(ots.id, row.id);

package/server/platform/profile.mjs

@@ -0,0 +1,161 @@
+/**
+ * Perfil público de un ot: lo que ve una persona al abrir /api/o/<id>/identity en el navegador.
+ *
+ * Portada con el personaje (SVG renderizado aquí, así la primera pintura y la vista previa ya lo
+ * traen; luego el navegador lo anima), quién es, sus rasgos únicos (los mismos de traits.json) y la
+ * tarjeta de contacto <ots-identity> con sus acciones (escuchar, correo, @handle, llamada, vCard).
+ */
+import { renderCharacter } from '../../src/character/Character.js';
+
+const esc = (v) => String(v ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+const hex = (v, def) => (/^#[0-9a-f]{3,8}$/i.test(v || '') ? v : def);
+
+const L = {
+  en: { about: 'About', tone: 'Tone', speaks: 'Speaks', traits: 'Unique traits', traitsSub: 'No two ots share this face. The fingerprint is what makes it one of a kind.', print: 'Fingerprint', contact: 'Contact', json: 'JSON', make: 'Create your own ot', unique: 'One of a kind', soon: 'NFT soon', noBio: '{name} hasn’t written a bio yet.' },
+  es: { about: 'Sobre mí', tone: 'Tono', speaks: 'Habla', traits: 'Rasgos únicos', traitsSub: 'No hay dos ots con esta cara. La huella es lo que lo hace único.', print: 'Huella', contact: 'Contacto', json: 'JSON', make: 'Crea tu propio ot', unique: 'Único', soon: 'NFT pronto', noBio: '{name} todavía no escribió su bio.' },
+  pt: { about: 'Sobre', tone: 'Tom', speaks: 'Fala', traits: 'Traços únicos', traitsSub: 'Não existem dois ots com este rosto. A impressão é o que o torna único.', print: 'Impressão', contact: 'Contato', json: 'JSON', make: 'Crie seu próprio ot', unique: 'Único', soon: 'NFT em breve', noBio: '{name} ainda não escreveu a bio.' },
+};
+
+const LANG_NAMES = { es: 'Español', en: 'English', pt: 'Português', fr: 'Français', de: 'Deutsch', it: 'Italiano', ja: '日本語', zh: '中文', ko: '한국어', ru: 'Русский', ar: 'العربية', hi: 'हिन्दी', nl: 'Nederlands', pl: 'Polski', tr: 'Türkçe', et: 'Eesti' };
+
+/** 32 hex → código de barras de colores: la huella se ve, no solo se lee. */
+function printBars(print) {
+  if (!print) return '';
+  const bars = print.match(/../g).map((b, i) => {
+    const n = parseInt(b, 16);
+    return `<rect x="${i * 16 + 2}" y="${n % 3 === 0 ? 4 : 0}" width="${4 + (n % 8)}" height="${n % 3 === 0 ? 28 : 32}" rx="1.5" fill="hsl(${Math.round((n / 255) * 360)} 80% 65%)"/>`;
+  });
+  return `<svg class="bars" viewBox="0 0 256 32" preserveAspectRatio="none" aria-hidden="true">${bars.join('')}</svg>`;
+}
+
+/**
+ * card: publicIdentity(...) · meta: traitsMeta(...) · ep: base /api/o/<id> · locale: idioma del visitante.
+ */
+export function profilePage(card, meta, ep, locale = 'en') {
+  const l = L[String(locale).slice(0, 2)] || L.en;
+  const name = esc(card.name);
+  const desc = esc(card.tagline || card.role || '');
+  const c1 = hex(card.look?.color, '#6d5dfc');
+  const c2 = hex(card.look?.accent, '#22d3ee');
+  const look = card.look || {};
+  let portrait = `<span class="initial">${esc((look.emoji || card.name.slice(0, 1)).toUpperCase())}</span>`;
+  if (look.kind === 'image' && look.image) portrait = `<img src="${esc(look.image)}" alt="" referrerpolicy="no-referrer">`;
+  else if (look.character && Object.keys(look.character).length) {
+    try {
+      portrait = renderCharacter(look.character, {}, { title: card.name });
+    } catch {}
+  }
+  const langs = [...new Set([card.language, ...(card.languages || [])].filter(Boolean))];
+  const traits = card.personality?.traits || [];
+  const handle = meta?.handle;
+  const attrs = (meta?.attributes || []).filter((a) => a.trait_type !== 'Kind');
+  const tile = (a) => {
+    const v = String(a.value);
+    const sw = /^#[0-9a-f]{3,8}$/i.test(v) ? `<i class="sw" style="background:${v}"></i>` : '';
+    return `<div class="tile"><dt>${esc(a.trait_type)}</dt><dd>${sw}${esc(sw ? v.toUpperCase() : v.replace(/[-_]/g, ' '))}</dd></div>`;
+  };
+  const jsonUrl = `${esc(ep)}/identity?format=json`;
+
+  return `<!doctype html><html lang="${esc(card.language || 'en')}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>${name} · 7ots</title><meta name="description" content="${desc}">
+<meta property="og:title" content="${name} · 7ots"><meta property="og:description" content="${desc}"><meta property="og:type" content="profile">
+<meta name="theme-color" content="${c1}">
+<link rel="alternate" type="application/json" href="${jsonUrl}"><link rel="icon" href="/favicon.ico">
+<link rel="preconnect" href="https://fonts.googleapis.com"><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,600;12..96,800&family=Inter:wght@400;500;600&display=swap">
+<style>
+:root{color-scheme:dark;--c1:${c1};--c2:${c2};--bg:#0b0919;--panel:rgb(255 255 255/.045);--line:rgb(255 255 255/.09);--ink:#f3f1ff;--muted:#a7a2c9;--disp:"Bricolage Grotesque",system-ui,sans-serif}
+*{box-sizing:border-box}html,body{margin:0}
+body{min-height:100vh;font:15px/1.55 Inter,system-ui,-apple-system,"Segoe UI",sans-serif;color:var(--ink);background:var(--bg);overflow-x:hidden}
+body::before{content:"";position:fixed;inset:-20%;z-index:-1;background:radial-gradient(700px 520px at 20% 8%,color-mix(in srgb,var(--c1) 42%,transparent),transparent 65%),radial-gradient(640px 520px at 92% 30%,color-mix(in srgb,var(--c2) 26%,transparent),transparent 65%),radial-gradient(900px 600px at 50% 120%,color-mix(in srgb,var(--c1) 22%,transparent),transparent 60%)}
+a{color:inherit}
+.top{max-width:1080px;margin:0 auto;padding:18px 20px;display:flex;align-items:center;justify-content:space-between;gap:12px}
+.brand{display:flex;align-items:center;gap:8px;font:800 17px var(--disp);text-decoration:none;letter-spacing:-.02em}
+.brand img{width:26px;height:26px;border-radius:7px}
+.cta{font:600 13px Inter,sans-serif;text-decoration:none;padding:8px 14px;border-radius:999px;background:var(--ink);color:#120f2a}
+.cta:hover{opacity:.9}
+main{max-width:1080px;margin:0 auto;padding:8px 20px 56px;display:grid;gap:22px}
+.hero{display:grid;grid-template-columns:minmax(0,300px) minmax(0,1fr);gap:36px;align-items:center;padding:28px;border:1px solid var(--line);border-radius:28px;background:linear-gradient(140deg,color-mix(in srgb,var(--c1) 18%,transparent),rgb(255 255 255/.02) 55%);backdrop-filter:blur(6px)}
+.stage{position:relative;aspect-ratio:1;border-radius:24px;display:grid;place-items:center;background:radial-gradient(circle at 50% 42%,color-mix(in srgb,var(--c2) 30%,transparent),transparent 62%),rgb(0 0 0/.18);overflow:hidden}
+.stage::after{content:"";position:absolute;left:18%;right:18%;bottom:9%;height:7%;border-radius:50%;background:rgb(0 0 0/.35);filter:blur(10px)}
+.stage>.av{position:relative;z-index:1;width:82%;height:82%;display:grid;place-items:center}
+.stage svg{width:100%;height:100%;overflow:visible}
+.stage img{width:100%;height:100%;object-fit:cover;border-radius:18px}
+.initial{font:800 120px var(--disp);color:var(--c1)}
+.who{display:grid;gap:12px;align-content:center;min-width:0}
+.badges{display:flex;flex-wrap:wrap;gap:8px}
+.badge{display:inline-flex;align-items:center;gap:6px;font:600 12px Inter,sans-serif;padding:5px 10px;border-radius:999px;border:1px solid var(--line);background:rgb(255 255 255/.05);color:var(--muted)}
+.badge.u{color:var(--ink);border-color:color-mix(in srgb,var(--c2) 55%,transparent);background:color-mix(in srgb,var(--c2) 14%,transparent)}
+.badge svg{width:13px;height:13px}
+h1{margin:0;font:800 clamp(40px,7vw,68px)/1 var(--disp);letter-spacing:-.035em;overflow-wrap:anywhere}
+.handle{font:600 16px Inter,sans-serif;color:var(--c2)}
+.role{margin:0;font-size:18px;color:var(--muted);text-transform:capitalize}
+.tagline{margin:0;font:600 21px/1.35 var(--disp);letter-spacing:-.01em;max-width:34ch}
+.grid{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,380px);gap:22px;align-items:start}
+.col{display:grid;gap:22px;min-width:0}
+.panel{border:1px solid var(--line);border-radius:22px;background:var(--panel);padding:22px;display:grid;gap:14px}
+.panel h2{margin:0;font:700 13px Inter,sans-serif;letter-spacing:.08em;text-transform:uppercase;color:var(--muted);display:flex;align-items:center;justify-content:space-between;gap:8px}
+.panel h2 small{font:600 11px Inter,sans-serif;letter-spacing:0;text-transform:none;padding:3px 8px;border-radius:999px;background:rgb(255 255 255/.07)}
+.bio{margin:0;font-size:16px;white-space:pre-line}
+.bio.empty{color:var(--muted);font-style:italic}
+.kv{display:grid;grid-template-columns:auto 1fr;gap:10px 16px;margin:0;align-items:baseline}
+.kv dt{color:var(--muted);font-size:13px}
+.kv dd{margin:0}
+.chips{display:flex;flex-wrap:wrap;gap:6px;margin:0;padding:0;list-style:none}
+.chips li{font-size:13px;padding:4px 10px;border-radius:999px;background:rgb(255 255 255/.07);border:1px solid var(--line)}
+.sub{margin:-6px 0 0;color:var(--muted);font-size:13px}
+.tiles{display:grid;grid-template-columns:repeat(auto-fill,minmax(150px,1fr));gap:10px;margin:0}
+.tile{border:1px solid var(--line);border-radius:14px;padding:11px 13px;background:rgb(0 0 0/.15)}
+.tile dt{font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:var(--muted)}
+.tile dd{margin:3px 0 0;font-weight:600;text-transform:capitalize;display:flex;align-items:center;gap:7px;overflow-wrap:anywhere}
+.sw{width:14px;height:14px;border-radius:5px;flex:none;box-shadow:inset 0 0 0 1px rgb(255 255 255/.25)}
+.print{display:grid;gap:8px;padding:14px;border-radius:14px;background:rgb(0 0 0/.25);border:1px solid var(--line)}
+.print span{font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:var(--muted)}
+.print code{font:500 12.5px ui-monospace,SFMono-Regular,Menlo,monospace;overflow-wrap:anywhere;color:var(--ink)}
+.bars{width:100%;height:30px}
+ots-identity{display:block;--ots-bg:#16132e;--ots-fg:#f3f1ff;--ots-line:rgb(255 255 255/.1)}
+.links{display:flex;gap:16px;flex-wrap:wrap;font-size:13px;color:var(--muted);justify-content:center}
+.links a{text-decoration:none}.links a:hover{color:var(--ink)}
+@media (max-width:820px){.hero{grid-template-columns:1fr;gap:22px;padding:20px;text-align:center}.stage{max-width:280px;width:100%;margin:0 auto}.badges,.who{justify-items:center;justify-content:center}.tagline{margin-inline:auto}.grid{grid-template-columns:1fr}}
+@media (max-width:480px){main,.top{padding-inline:16px}.panel{padding:18px}}
+@media (prefers-reduced-motion:no-preference){.stage>.av{animation:float 5s ease-in-out infinite}@keyframes float{50%{transform:translateY(-6px)}}}
+</style></head><body>
+<header class="top"><a class="brand" href="https://7ots.com"><img src="/brand/icon-512.png" alt="">7ots</a><a class="cta" href="https://7ots.com">${l.make}</a></header>
+<main>
+  <section class="hero">
+    <div class="stage"><div class="av" id="av">${portrait}</div></div>
+    <div class="who">
+      <div class="badges">${meta?.fingerprint ? `<span class="badge u"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 3l2.6 5.3 5.9.9-4.3 4.1 1 5.8L12 16.4 6.8 19.1l1-5.8L3.5 9.2l5.9-.9z"/></svg>${l.unique}</span>` : ''}${langs.map((x) => `<span class="badge">${esc(LANG_NAMES[x] || x.toUpperCase())}</span>`).join('')}</div>
+      <h1>${name}</h1>
+      ${handle ? `<span class="handle">@${esc(handle)}</span>` : ''}
+      ${card.role ? `<p class="role">${esc(card.role)}</p>` : ''}
+      ${card.tagline ? `<p class="tagline">“${esc(card.tagline)}”</p>` : ''}
+    </div>
+  </section>
+  <div class="grid">
+    <div class="col">
+      <section class="panel"><h2>${l.about}</h2>
+        ${card.bio ? `<p class="bio">${esc(card.bio)}</p>` : `<p class="bio empty">${esc(l.noBio.replace('{name}', card.name))}</p>`}
+        <dl class="kv">
+          ${card.personality?.tone ? `<dt>${l.tone}</dt><dd>${esc(card.personality.tone)}</dd>` : ''}
+          ${langs.length ? `<dt>${l.speaks}</dt><dd>${esc(langs.map((x) => LANG_NAMES[x] || x).join(' · '))}</dd>` : ''}
+        </dl>
+        ${traits.length ? `<ul class="chips">${traits.map((x) => `<li>${esc(x)}</li>`).join('')}</ul>` : ''}
+      </section>
+      ${attrs.length || meta?.fingerprint ? `<section class="panel"><h2>${l.traits}<small>${l.soon}</small></h2><p class="sub">${l.traitsSub}</p>
+        ${meta?.fingerprint ? `<div class="print"><span>${l.print}</span>${printBars(meta.fingerprint)}<code>${esc(meta.fingerprint)}</code></div>` : ''}
+        <dl class="tiles">${attrs.map(tile).join('')}</dl>
+      </section>` : ''}
+    </div>
+    <div class="col">
+      <section class="panel"><h2>${l.contact}</h2><ots-identity src="${jsonUrl}" face lang="${esc(String(locale).slice(0, 2))}"></ots-identity></section>
+      <p class="links"><a href="${jsonUrl}">${l.json}</a><a href="${esc(ep)}/traits.json">traits.json</a><a href="${esc(ep)}/identity.vcf">vCard</a><a href="https://7ots.com">7ots.com</a></p>
+    </div>
+  </div>
+</main>
+<script src="/api/agent/7ots.js"></script>
+<script>
+(function(){var c=${JSON.stringify(look.kind !== 'image' && look.character ? look.character : null).replace(/</g, '\\u003c')};var el=document.getElementById('av');
+if(!c||!window.SevenOts||!SevenOts.createCharacter)return;try{el.innerHTML='';SevenOts.createCharacter(el,c,{title:${JSON.stringify(card.name).replace(/</g, '\\u003c')}});}catch(e){}})();
+</script>
+</body></html>`;
+}

package/server/platform/routes.mjs

@@ -14,6 +14,7 @@
  *   GET    /api/platform/ots/:id/usage
  *   *      /api/platform/ots/:id/admin/*     misma forma que /api/agent/admin/* (el backoffice
  *                                            edita un ots con ?ots=<id>)
+ *   *      /api/mods, /api/platform/mods/*, /api/device/mods/*   community mods (mods.mjs)
  *   GET    /api/platform/sites               POST { kind, url, name, guide } · POST …/:id/verify · DELETE …/:id  (sites.mjs)
  *   GET    /api/platform/device/:code · POST { approve }   GET /api/platform/devices · DELETE …/:id
  *
@@ -25,9 +26,11 @@
  *   apuchat identity and Orquesta tasks (…/apuchat/*, …/orquesta/*, /auth/apuchat|orquesta): see connect.mjs
  */
 
+import { createReadStream, existsSync, statSync } from 'node:fs';
+import { join } from 'node:path';
 import { MEET_AVATARS, MEET_SCENES, OPENAI_VOICES, GROK_VOICES, defineIdentity, identityPrompt, publicIdentity, toVCard } from '../identity.mjs';
 import { errorText, reqT, requestLocale } from '../i18n.mjs';
-import { monthOf } from './db.mjs';
+import { dataDir, monthOf } from './db.mjs';
 import { randomIdentity, cleanSeed } from '../../src/identity/random.js';
 import { currentAccount } from './auth.mjs';
 import {
@@ -39,6 +42,8 @@ import { createConnect } from './connect.mjs';
 import { createDevice, deviceFromBearer } from './device.mjs';
 import { createVm } from './vm.mjs';
 import { createSites } from './sites.mjs';
+import { profilePage } from './profile.mjs';
+import { createMods } from './mods.mjs';
 import '../../src/i18n/messages/platform.js';
 
 const penv = process.env;
@@ -119,7 +124,8 @@ export function createPlatform({ send, readJson, rateLimit, callLimit, originOf,
       res.setHeader('Vary', 'Accept');
       if (/text\/html/.test(req.headers.accept || '') && !/[?&]format=json\b/.test(req.url)) {
         res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8', 'Cache-Control': 'no-cache' });
-        return res.end(profilePage(card, `${originOf(req)}/api/o/${ots.id}`));
+        const ep = `${originOf(req)}/api/o/${ots.id}`;
+        return res.end(profilePage(card, traitsMeta(ots, ep), ep, requestLocale(req)));
       }
       return send(res, 200, card);
     }
@@ -325,6 +331,7 @@ export function createPlatform({ send, readJson, rateLimit, callLimit, originOf,
     if ((await connect.account(req, res, account, path)) !== false) return;
     if (await device.dashboard(req, res, account, path)) return;
     if (await sites(req, res, account, path)) return;
+    if ((path === '/mods' || path.startsWith('/mods/')) && (await mods.accountApi(req, res, account, path.slice('/mods'.length)))) return;
 
     if (path === '/ots' && req.method === 'GET') {
       const usage = usageByOts(account.id);
@@ -380,6 +387,7 @@ export function createPlatform({ send, readJson, rateLimit, callLimit, originOf,
     if (sub === '' && req.method === 'DELETE') {
       await stopOtsChannels(ots.id);
       await connect.release(account, ots);
+      await vm.releaseOts(ots.id); // its 7ots server (Orquesta VM) goes too; ots_vms cascades with the ot
       deleteOts(ots.id);
       return send(res, 200, { ok: true });
     }
@@ -402,14 +410,25 @@ export function createPlatform({ send, readJson, rateLimit, callLimit, originOf,
   }
 
   const connect = createConnect({ send, readJson, originOf, save });
-  const device = createDevice({ send, readJson, rateLimit, base: (req) => (penv.PLATFORM_URL || originOf(req)).replace(/\/+$/, ''), summary: (o) => otsSummary(o) });
+  const device = createDevice({ send, readJson, rateLimit, base: (req) => (penv.PLATFORM_URL || originOf(req)).replace(/\/+$/, ''), summary: (o) => otsSummary(o), save });
   const sites = createSites({ send, readJson });
+  const mods = createMods({ send, readJson });
   const vm = createVm({ send, readJson, rateLimit, base: (req) => (penv.PLATFORM_URL || originOf(req)).replace(/\/+$/, '') });
 
   /** @returns {Promise<boolean>} true si atendió la ruta */
   return async function handle(req, res, url) {
     const p = url.pathname;
     if (await connect.auth(req, res, url)) return true;
+    // models of mods (uploaded by a pet when it syncs): public, content-addressed, immutable
+    const mf = /^\/mods\/([a-f0-9]{16})\.(glb|vrm)$/.exec(p);
+    if (mf && (req.method === 'GET' || req.method === 'HEAD')) {
+      const file = join(dataDir(), 'mods', `${mf[1]}.${mf[2]}`);
+      if (!existsSync(file)) return send(res, 404, { error: 'not found' }), true;
+      res.writeHead(200, { 'Content-Type': 'model/gltf-binary', 'Content-Length': statSync(file).size, 'Cache-Control': 'public, max-age=31536000, immutable', 'Access-Control-Allow-Origin': '*' });
+      if (req.method === 'HEAD') return res.end(), true;
+      createReadStream(file).pipe(res);
+      return true;
+    }
     const m = p.match(/^\/api\/o\/([a-z0-9_]{4,40})(\/.*)$/);
     if (m) {
       await publicApi(req, res, m[1], m[2]);
@@ -417,9 +436,12 @@ export function createPlatform({ send, readJson, rateLimit, callLimit, originOf,
     }
     // The landing asks before sending the visitor to sign in: each ot is unique, a repeated face can't be created.
     if (p === '/api/look/free' && req.method === 'POST') {
-      const { character } = await readJson(req, 64 * 1024);
-      const ok = character && typeof character === 'object' && !Array.isArray(character);
-      send(res, 200, { free: ok ? !lookTaken({ look: { kind: 'character', character } }) : false });
+      const { character, characters } = await readJson(req, 256 * 1024);
+      const isObj = (c) => c && typeof c === 'object' && !Array.isArray(c);
+      const free = (c) => (isObj(c) ? !lookTaken({ look: { kind: 'character', character: c } }) : false);
+      // en lote (las sugerencias al azar del editor): { characters: [...] } → { free: [bool…] }
+      if (Array.isArray(characters)) send(res, 200, { free: characters.slice(0, 32).map(free) });
+      else send(res, 200, { free: free(character) });
       return true;
     }
     const dv = p.match(/^\/api\/device\/ots\/([a-z0-9_]{4,40})\/vm(\/.*)?$/);
@@ -429,6 +451,17 @@ export function createPlatform({ send, readJson, rateLimit, callLimit, originOf,
       else await vm.device(req, res, who, dv[1], dv[2] || '');
       return true;
     }
+    // community mods: public listing, and the same signed-in api for the pet (bearer) as for the dashboard
+    if (p === '/api/mods' || p.startsWith('/api/mods/')) {
+      if (!(await mods.publicApi(req, res, p.slice('/api/mods'.length)))) send(res, 404, { error: 'not found' });
+      return true;
+    }
+    if (p === '/api/device/mods' || p.startsWith('/api/device/mods/')) {
+      const who = deviceFromBearer(req);
+      if (!who) send(res, 401, { error: 'login' });
+      else if (!(await mods.accountApi(req, res, who.account, p.slice('/api/device/mods'.length)))) send(res, 404, { error: 'not found' });
+      return true;
+    }
     if (p.startsWith('/api/vm/')) {
       await vm.worker(req, res, p.slice('/api/vm'.length));
       return true;
@@ -475,33 +508,6 @@ function sanitizeWidget(w) {
   return out;
 }
 
-const htmlEsc = (v) => String(v ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
-/** Public profile of an ot (what /api/o/<id>/identity shows in a browser): its contact card with the live face. */
-function profilePage(card, ep) {
-  const name = htmlEsc(card.name);
-  const desc = htmlEsc(card.tagline || card.role || '');
-  const lang = htmlEsc(card.language || 'en');
-  const c1 = /^#[0-9a-f]{3,8}$/i.test(card.look?.color || '') ? card.look.color : '#6d5dfc';
-  const c2 = /^#[0-9a-f]{3,8}$/i.test(card.look?.accent || '') ? card.look.accent : '#22d3ee';
-  return `<!doctype html><html lang="${lang}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
-<title>${name} · 7ots</title><meta name="description" content="${desc}">
-<meta property="og:title" content="${name} · 7ots"><meta property="og:description" content="${desc}"><meta property="og:type" content="profile">
-<link rel="alternate" type="application/json" href="${htmlEsc(ep)}/identity?format=json"><link rel="icon" href="/favicon.ico">
-<style>
-:root{color-scheme:dark;--c1:${c1};--c2:${c2}}
-*{box-sizing:border-box}html,body{margin:0;min-height:100%}
-body{min-height:100vh;display:grid;place-items:center;padding:32px 16px;font:15px/1.5 system-ui,-apple-system,"Segoe UI",sans-serif;color:#ece9ff;
-background:radial-gradient(900px 600px at 15% 0%,color-mix(in srgb,var(--c1) 35%,transparent),transparent 60%),radial-gradient(800px 600px at 100% 100%,color-mix(in srgb,var(--c2) 22%,transparent),transparent 60%),#0d0a24}
-main{width:min(440px,100%);display:grid;gap:16px}
-ots-identity{display:block}
-.foot{display:flex;justify-content:space-between;gap:12px;flex-wrap:wrap;font-size:12px;color:#a9a3d6}
-.foot a{color:inherit}
-</style></head><body><main>
-<ots-identity src="${htmlEsc(ep)}/identity?format=json" face></ots-identity>
-<p class="foot"><a href="${htmlEsc(ep)}/identity?format=json">JSON</a><a href="${htmlEsc(ep)}/identity.vcf">vCard</a><a href="https://7ots.com">7ots.com</a></p>
-</main><script src="/api/agent/7ots.js"></script></body></html>`;
-}
-
 /**
  * The ot's unique traits as NFT-style metadata (ERC-721 / Metaplex shape). The face fingerprint is
  * what makes an ot unique (UNIQUE index); the permanent apuchat @handle is its unique name. When

package/server/platform/runtime.mjs

@@ -14,12 +14,12 @@
  */
 
 import { createLLM } from '../llm.mjs';
-import { synthesize as synthesizeWith, ttsProvider } from '../tts.mjs';
+import { synthesize as synthesizeWith, ttsProvider, openaiTtsKey } from '../tts.mjs';
 import { startAgentChannels } from '../channels/index.mjs';
 import { apumailConfigFromEnv } from '../channels/apumail.mjs';
 import { apuchatConfigFromEnv } from '../channels/apuchat.mjs';
 import { i18nError } from '../i18n.mjs';
-import { OTS_KEYS, accountUsage, addUsage, allLiveOts, getOts } from './store.mjs';
+import { OTS_KEYS, accountUsage, addUsage, allLiveOts, getOts, logTurn } from './store.mjs';
 import { orquestaTools } from './orquesta.mjs';
 
 const penv = process.env;
@@ -75,7 +75,7 @@ export function otsEnv(ots) {
 
   // Voz: la suya o la de apuchat de la plataforma.
   let platformTts = false;
-  if (!TTS_KEYS.some((k) => env[k]) && penv.PLATFORM_APUCHAT_VOICE_TOKEN && (!env.TTS_PROVIDER || env.TTS_PROVIDER === 'apuchat')) {
+  if (!TTS_KEYS.some((k) => (k === 'OPENAI_API_KEY' ? openaiTtsKey(env) : env[k])) && penv.PLATFORM_APUCHAT_VOICE_TOKEN && (!env.TTS_PROVIDER || env.TTS_PROVIDER === 'apuchat')) {
     platformTts = true;
     // On the platform's token the engine and model are the platform's, not the ot's.
     delete env.APUCHAT_VOICE_PROVIDER;
@@ -213,6 +213,8 @@ export function otsChannels(ots) {
     log: (...a) => console.log(`[7ots:${id}]`, ...a),
     // Orquesta tasks: only for senders on the ot's own list (see orquesta.mjs), read on every message.
     tools: (ctx) => orquestaTools(current(), ctx),
+    // mails and DMs go to its conversations (dashboard, and the desktop ot through /api/device/…/inbox)
+    onTurn: ({ key, channel, user, reply }) => logTurn(current(), { key, channel: channel === 'dm' ? 'apuchat' : 'apumail', visitor: key.replace(/^\w+:/, ''), user, reply }),
   });
   channels.set(id, { stamp, ch });
   return ch;

package/server/platform/store.mjs

@@ -20,7 +20,7 @@ const parse = (s, fallback) => {
 };
 
 export const SESSION_TTL = 30 * 24 * 3600_000;
-export const MAX_OTS_PER_ACCOUNT = () => Number(process.env.PLATFORM_MAX_OTS || 10);
+export const MAX_OTS_PER_ACCOUNT = () => Number(process.env.PLATFORM_MAX_OTS || 7);
 
 /**
  * Ajustes que cada ots puede cambiar. Lo que no está aquí lo fija la plataforma