aimeat 1.17.0 → 1.18.0

package/dist/.env.example

@@ -84,7 +84,12 @@ AIMEAT_PORT=40050
 # AIMEAT_FEDERATION_DEFAULT_SCOPES=memory:read,catalogue:read
 
 # ── Auth & Tokens ──────────────────────────────────────────────
-# AIMEAT_JWT_TTL=3600              # JWT lifetime in seconds (default: 1h)
+# AIMEAT_JWT_TTL=3600              # Legacy / agent JWT lifetime in seconds (default: 1h)
+# Owner sessions: short access token + rotating httpOnly refresh cookie (no key re-signing).
+# AIMEAT_ACCESS_TTL=900            # Owner access-token (JWT) lifetime in seconds (default: 15min)
+# AIMEAT_REFRESH_IDLE_DAYS=30      # Owner refresh-cookie idle window in days (default: 30)
+# AIMEAT_REFRESH_ABSOLUTE_DAYS=90  # Owner refresh-cookie hard cap in days, never extended (default: 90)
+# AIMEAT_REFRESH_GRACE_MS=60000    # Refresh-rotation grace window in ms for concurrency (default: 60s)
 # AIMEAT_OTK_TTL_MS=300000        # OTK expiry in ms (default: 5min)
 # AIMEAT_OTK_GRACE_MS=60000       # OTK grace period in ms (default: 1min)
 

package/dist/locales/en.json

@@ -1,4 +1,85 @@
 {
+  "profile.landing.home": "Home",
+  "profile.landing.menu": "Menu",
+  "profile.tabs.scheduler": "Scheduler",
+  "profile.agents.detail.tabs.schedules": "Schedules",
+  "profile.scheduler.title": "Scheduler",
+  "profile.scheduler.desc": "Every recurring job running for your profile — AIMEAT-managed and your agents' own.",
+  "profile.scheduler.loading": "Loading schedules…",
+  "profile.scheduler.newSchedule": "New schedule",
+  "profile.scheduler.close": "Close",
+  "profile.scheduler.triggered": "Schedule run started",
+  "profile.scheduler.cancelled": "Schedule cancelled",
+  "profile.scheduler.created": "Schedule created",
+  "profile.scheduler.saving": "Saving…",
+  "profile.scheduler.create": "Create schedule",
+  "profile.scheduler.confirmCancel": "Cancel this schedule? Future runs will stop.",
+  "profile.scheduler.managedTitle": "AIMEAT-managed",
+  "profile.scheduler.noManaged": "No managed schedules yet.",
+  "profile.scheduler.extTitle": "Extension cron jobs",
+  "profile.scheduler.internalTitle": "Agent internal",
+  "profile.scheduler.internalNote": "Self-reported by your agents. AIMEAT displays these but does not run them.",
+  "profile.scheduler.never": "Never",
+  "profile.scheduler.byAgent": "created by agent",
+  "profile.scheduler.pause": "Pause",
+  "profile.scheduler.resume": "Resume",
+  "profile.scheduler.runNow": "Run now",
+  "profile.scheduler.cancel": "Cancel",
+  "profile.scheduler.agentDesc": "Schedules running for this agent.",
+  "profile.scheduler.dispatchedTitle": "AIMEAT-dispatched",
+  "profile.scheduler.noDispatched": "No schedules for this agent yet.",
+  "profile.scheduler.noInternal": "This agent has not reported any internal schedules.",
+  "profile.scheduler.col.name": "Name",
+  "profile.scheduler.col.kind": "Type",
+  "profile.scheduler.col.cron": "Schedule",
+  "profile.scheduler.col.agent": "Agent",
+  "profile.scheduler.col.lastRun": "Last run",
+  "profile.scheduler.col.nextRun": "Next run",
+  "profile.scheduler.col.runs": "Runs",
+  "profile.scheduler.col.extension": "Extension",
+  "profile.scheduler.kind.ai": "AI",
+  "profile.scheduler.kind.agent_task": "Agent task",
+  "profile.scheduler.kind.extension": "Extension",
+  "profile.scheduler.kind.core": "Core",
+  "profile.scheduler.kindHint.ai": "server runs a model on your key",
+  "profile.scheduler.kindHint.agent_task": "queues a task for an agent",
+  "profile.scheduler.kindHint.extension": "runs an extension action (free)",
+  "profile.scheduler.field.kind": "Type",
+  "profile.scheduler.field.displayName": "Name",
+  "profile.scheduler.field.schedule": "Schedule",
+  "profile.scheduler.field.inputKeys": "Input memory keys (comma-separated)",
+  "profile.scheduler.field.prompt": "Prompt",
+  "profile.scheduler.field.outputKey": "Output memory key (optional)",
+  "profile.scheduler.field.agent": "Agent",
+  "profile.scheduler.field.taskTitle": "Task title",
+  "profile.scheduler.field.taskDescription": "Task description",
+  "profile.scheduler.field.extensionName": "Extension name",
+  "profile.scheduler.field.actionId": "Action id",
+  "profile.scheduler.field.purpose": "Purpose (optional)",
+  "profile.scheduler.ph.displayName": "e.g. Morning news translation",
+  "profile.scheduler.ph.timezone": "IANA timezone, e.g. Europe/Helsinki",
+  "profile.scheduler.ph.inputKeys": "e.g. news.morning.raw, news.sources",
+  "profile.scheduler.ph.prompt": "e.g. Translate the news below into Finnish and summarise the top 5 items.",
+  "profile.scheduler.ph.outputKey": "auto-generated if left blank",
+  "profile.scheduler.ph.agent": "Select an agent…",
+  "profile.scheduler.ph.purpose": "Why this runs",
+  "profile.scheduler.preset.morning": "Every morning",
+  "profile.scheduler.preset.evening": "Every evening",
+  "profile.scheduler.preset.hourly": "Hourly",
+  "profile.scheduler.preset.custom": "Custom",
+  "profile.scheduler.constraints": "Budget guards (optional)",
+  "profile.scheduler.maxRuns": "Stop after N runs",
+  "profile.scheduler.dailyLimit": "Daily AI spend limit (USD)",
+  "profile.scheduler.err.name": "Name is required",
+  "profile.scheduler.err.cron": "Schedule (cron) is required",
+  "profile.scheduler.err.prompt": "Prompt is required for AI schedules",
+  "profile.scheduler.err.agent": "Select an agent",
+  "profile.scheduler.err.taskTitle": "Task title is required",
+  "profile.scheduler.err.ext": "Extension name and action id are required",
+  "profile.scheduler.budgetTitle": "Schedule budget guards",
+  "profile.scheduler.budgetDesc": "Default opt-in limits applied to schedules created for this agent.",
+  "profile.scheduler.budgetSave": "Save budget guards",
+  "profile.scheduler.budgetSaved": "Budget guards saved",
   "common": {
     "cancel": "Cancel",
     "confirm": "Confirm",
@@ -14,7 +95,10 @@
     "name": "Name",
     "add": "Add",
     "yes": "Yes",
-    "no": "No"
+    "no": "No",
+    "copy": "Copy",
+    "copied": "✓ Copied",
+    "error": "Error"
   },
   "nav": {
     "try": "Try it",
@@ -25,7 +109,9 @@
     "logout": "Log Out",
     "loggedInAs": "logged in as",
     "help": "Help",
-    "admin": "Admin"
+    "admin": "Admin",
+    "themeToDark": "Switch to dark mode",
+    "themeToLight": "Switch to light mode"
   },
   "hero": {
     "title": "Your data is yours. Your AI works for you.",
@@ -325,6 +411,8 @@
         "domainCatalogue": "Catalogue",
         "domainGenerator": "Generator",
         "domainTask": "Tasks",
+        "domainCortex": "Cortex (install/activate browser libraries)",
+        "domainExt": "Extensions (activate server-side extensions)",
         "permExecute": "Execute",
         "permRead": "Read",
         "permWrite": "Write",
@@ -703,13 +791,16 @@
           "integration": "Integration",
           "tasks": "Tasks",
           "messages": "Messages",
-          "data_access": "Data Access",
+          "data_access": "Memory",
           "directives": "Directives",
           "agent_config": "Agent Config",
           "activity": "Activity",
           "services": "Services",
           "quality": "Quality"
         },
+        "changes": {
+          "title": "New since you last looked"
+        },
         "quality": {
           "performanceTitle": "Performance",
           "performanceDesc": "How much this agent has done and how fast — computed from its tasks.",
@@ -970,7 +1061,7 @@
           "readme": "No README published",
           "tasks": "No tasks yet. Create a task to give this agent work.",
           "messages": "No messages yet. Send a message or use a command.",
-          "data_access": "No data access configured. Use the buttons below to add tags, memory areas, or knowledge packages.",
+          "data_access": "No memory configured yet. Use the buttons below to add tags, memory areas, or knowledge packages.",
           "agent_config": "No configuration files. The agent will push its config files after the skill bundle is installed.",
           "activity": "No activity recorded yet. Events will appear here once the agent starts working.",
           "services": "No services declared. The agent can declare services during Hello Integration Step 11."
@@ -1423,6 +1514,46 @@
       "hoverReveal": "Click to copy",
       "keepSafe": "Keep this safe — it's your owner recovery key.",
       "keyCopied": "Key copied to clipboard!",
+      "patTitle": "Agent Access Tokens",
+      "patDesc": "Create a revocable token an agent can use (as a Bearer header) to log in and test your apps. One token can be shared across all your agents.",
+      "patLabelRequired": "Give the token a name",
+      "patScopeRequired": "Select at least one scope, or Full / Operator",
+      "patCreateError": "Failed to create token",
+      "patConfirmRevoke": "Revoke token \"{name}\"? Agents using it lose access immediately.",
+      "patRevoked": "Token revoked",
+      "patOperator": "Operator",
+      "patFullOwner": "Full owner",
+      "patScopes": "scopes",
+      "patCreatedTitle": "Token created — copy it now",
+      "patShownOnce": "This token is shown only once. Store it now; you cannot see it again.",
+      "patCopied": "Token copied",
+      "patAgentPrompt": "Ready-made agent prompt",
+      "patPromptCopied": "Prompt copied",
+      "patDone": "Done",
+      "patLoading": "Loading...",
+      "patEmpty": "No access tokens yet.",
+      "patCreatedAt": "Created",
+      "patLastUsed": "Last used",
+      "patNever": "never",
+      "patExpires": "Expires",
+      "patNoExpiry": "No expiry",
+      "patRevoke": "Revoke",
+      "patCreate": "New Token",
+      "patCreateTitle": "Create Access Token",
+      "patLabel": "Name",
+      "patLabelPlaceholder": "e.g. App tester",
+      "patLevel": "Permissions",
+      "patFullOwnerHint": "acts as you; sees all apps & data",
+      "patOperatorHint": "full node administration (master key)",
+      "patMasterKeyWarn": "Master key — guard it like a password",
+      "patSelectScopes": "Scopes",
+      "patReadOwnerData": "Also read my data (otherwise a clean sandbox)",
+      "patExpiry": "Expiry",
+      "patExpiry1d": "24 hours",
+      "patExpiry7d": "7 days",
+      "patExpiry30d": "30 days",
+      "patCreateBtn": "Create Token",
+      "patCancel": "Cancel",
       "mcpEndpoint": "MCP Endpoint",
       "mcpDesc": "Use this URL to connect MCP-compatible AI platforms to your node.",
       "fedTitle": "Federation Access",

package/dist/locales/fi.json

@@ -1,4 +1,85 @@
 {
+  "profile.landing.home": "Etusivu",
+  "profile.landing.menu": "Valikko",
+  "profile.tabs.scheduler": "Ajastin",
+  "profile.agents.detail.tabs.schedules": "Ajastukset",
+  "profile.scheduler.title": "Ajastin",
+  "profile.scheduler.desc": "Kaikki profiilisi toistuvat ajastukset — AIMEATin hallinnoimat ja agenttiesi omat.",
+  "profile.scheduler.loading": "Ladataan ajastuksia…",
+  "profile.scheduler.newSchedule": "Uusi ajastus",
+  "profile.scheduler.close": "Sulje",
+  "profile.scheduler.triggered": "Ajastuksen suoritus käynnistetty",
+  "profile.scheduler.cancelled": "Ajastus peruttu",
+  "profile.scheduler.created": "Ajastus luotu",
+  "profile.scheduler.saving": "Tallennetaan…",
+  "profile.scheduler.create": "Luo ajastus",
+  "profile.scheduler.confirmCancel": "Perutaanko tämä ajastus? Tulevat suoritukset pysäytetään.",
+  "profile.scheduler.managedTitle": "AIMEATin hallinnoimat",
+  "profile.scheduler.noManaged": "Ei vielä hallinnoituja ajastuksia.",
+  "profile.scheduler.extTitle": "Laajennusten cron-työt",
+  "profile.scheduler.internalTitle": "Agentin sisäiset",
+  "profile.scheduler.internalNote": "Agenttiesi itse ilmoittamat. AIMEAT näyttää nämä mutta ei suorita niitä.",
+  "profile.scheduler.never": "Ei koskaan",
+  "profile.scheduler.byAgent": "agentin luoma",
+  "profile.scheduler.pause": "Keskeytä",
+  "profile.scheduler.resume": "Jatka",
+  "profile.scheduler.runNow": "Suorita nyt",
+  "profile.scheduler.cancel": "Peruuta",
+  "profile.scheduler.agentDesc": "Tälle agentille ajossa olevat ajastukset.",
+  "profile.scheduler.dispatchedTitle": "AIMEATin lähettämät",
+  "profile.scheduler.noDispatched": "Ei vielä ajastuksia tälle agentille.",
+  "profile.scheduler.noInternal": "Tämä agentti ei ole ilmoittanut sisäisiä ajastuksia.",
+  "profile.scheduler.col.name": "Nimi",
+  "profile.scheduler.col.kind": "Tyyppi",
+  "profile.scheduler.col.cron": "Ajastus",
+  "profile.scheduler.col.agent": "Agentti",
+  "profile.scheduler.col.lastRun": "Edellinen ajo",
+  "profile.scheduler.col.nextRun": "Seuraava ajo",
+  "profile.scheduler.col.runs": "Ajot",
+  "profile.scheduler.col.extension": "Laajennus",
+  "profile.scheduler.kind.ai": "Tekoäly",
+  "profile.scheduler.kind.agent_task": "Agenttitehtävä",
+  "profile.scheduler.kind.extension": "Laajennus",
+  "profile.scheduler.kind.core": "Ydin",
+  "profile.scheduler.kindHint.ai": "palvelin ajaa mallin avaimellasi",
+  "profile.scheduler.kindHint.agent_task": "lisää tehtävän agentin jonoon",
+  "profile.scheduler.kindHint.extension": "ajaa laajennuksen toiminnon (ilmainen)",
+  "profile.scheduler.field.kind": "Tyyppi",
+  "profile.scheduler.field.displayName": "Nimi",
+  "profile.scheduler.field.schedule": "Ajastus",
+  "profile.scheduler.field.inputKeys": "Syötteen muistiavaimet (pilkuin eroteltuna)",
+  "profile.scheduler.field.prompt": "Kehote",
+  "profile.scheduler.field.outputKey": "Tuloksen muistiavain (valinnainen)",
+  "profile.scheduler.field.agent": "Agentti",
+  "profile.scheduler.field.taskTitle": "Tehtävän otsikko",
+  "profile.scheduler.field.taskDescription": "Tehtävän kuvaus",
+  "profile.scheduler.field.extensionName": "Laajennuksen nimi",
+  "profile.scheduler.field.actionId": "Toiminnon tunnus",
+  "profile.scheduler.field.purpose": "Tarkoitus (valinnainen)",
+  "profile.scheduler.ph.displayName": "esim. Aamu-uutisten käännös",
+  "profile.scheduler.ph.timezone": "IANA-aikavyöhyke, esim. Europe/Helsinki",
+  "profile.scheduler.ph.inputKeys": "esim. news.morning.raw, news.sources",
+  "profile.scheduler.ph.prompt": "esim. Käännä alla olevat uutiset suomeksi ja tiivistä 5 tärkeintä.",
+  "profile.scheduler.ph.outputKey": "luodaan automaattisesti jos tyhjä",
+  "profile.scheduler.ph.agent": "Valitse agentti…",
+  "profile.scheduler.ph.purpose": "Miksi tämä ajetaan",
+  "profile.scheduler.preset.morning": "Joka aamu",
+  "profile.scheduler.preset.evening": "Joka ilta",
+  "profile.scheduler.preset.hourly": "Tunneittain",
+  "profile.scheduler.preset.custom": "Mukautettu",
+  "profile.scheduler.constraints": "Budjettirajat (valinnainen)",
+  "profile.scheduler.maxRuns": "Pysäytä N ajon jälkeen",
+  "profile.scheduler.dailyLimit": "Päivittäinen tekoälykulujen raja (USD)",
+  "profile.scheduler.err.name": "Nimi vaaditaan",
+  "profile.scheduler.err.cron": "Ajastus (cron) vaaditaan",
+  "profile.scheduler.err.prompt": "Kehote vaaditaan tekoälyajastuksille",
+  "profile.scheduler.err.agent": "Valitse agentti",
+  "profile.scheduler.err.taskTitle": "Tehtävän otsikko vaaditaan",
+  "profile.scheduler.err.ext": "Laajennuksen nimi ja toiminnon tunnus vaaditaan",
+  "profile.scheduler.budgetTitle": "Ajastusten budjettirajat",
+  "profile.scheduler.budgetDesc": "Oletusarvoiset valinnaiset rajat, jotka koskevat tälle agentille luotuja ajastuksia.",
+  "profile.scheduler.budgetSave": "Tallenna budjettirajat",
+  "profile.scheduler.budgetSaved": "Budjettirajat tallennettu",
   "common": {
     "cancel": "Peruuta",
     "confirm": "Vahvista",
@@ -14,7 +95,10 @@
     "name": "Nimi",
     "add": "Lisää",
     "yes": "Kyllä",
-    "no": "Ei"
+    "no": "Ei",
+    "copy": "Kopioi",
+    "copied": "✓ Kopioitu",
+    "error": "Virhe"
   },
   "nav": {
     "try": "Kokeile",
@@ -25,7 +109,9 @@
     "logout": "Kirjaudu ulos",
     "loggedInAs": "kirjautuneena",
     "help": "Apua",
-    "admin": "Hallinta"
+    "admin": "Hallinta",
+    "themeToDark": "Vaihda tummaan tilaan",
+    "themeToLight": "Vaihda vaaleaan tilaan"
   },
   "hero": {
     "title": "Tietosi on sinun. AI:si työskentelee puolestasi.",
@@ -325,6 +411,8 @@
         "domainCatalogue": "Hakemisto",
         "domainGenerator": "Generaattori",
         "domainTask": "Tehtävät",
+        "domainCortex": "Cortex (asenna/aktivoi selainkirjastoja)",
+        "domainExt": "Laajennukset (aktivoi palvelinpuolen laajennuksia)",
         "permExecute": "Suoritus",
         "permRead": "Luku",
         "permWrite": "Kirjoitus",
@@ -703,13 +791,16 @@
           "integration": "Integraatio",
           "tasks": "Tehtävät",
           "messages": "Viestit",
-          "data_access": "Datayhteydet",
+          "data_access": "Muisti",
           "directives": "Ohjeistukset",
           "agent_config": "Agenttiasetukset",
           "activity": "Toiminta",
           "services": "Palvelut",
           "quality": "Laatu"
         },
+        "changes": {
+          "title": "Uutta sitten kun viimeksi katsoit"
+        },
         "quality": {
           "performanceTitle": "Suorituskyky",
           "performanceDesc": "Kuinka paljon agentti on tehnyt ja kuinka nopeasti — laskettu sen tehtävistä.",
@@ -970,7 +1061,7 @@
           "readme": "Ei README:tä julkaistu",
           "tasks": "Ei tehtäviä. Luo tehtävä antaaksesi agentille työtä.",
           "messages": "Ei viestejä. Lähetä viesti tai käytä komentoa.",
-          "data_access": "Ei datayhteyksien asetuksia. Lisää tunnisteita, muistialueita tai tietopaketteja alla olevilla painikkeilla.",
+          "data_access": "Ei muistia määritetty. Lisää tunnisteita, muistialueita tai tietopaketteja alla olevilla painikkeilla.",
           "agent_config": "Ei asetustiedostoja. Agentti lähettää asetustiedostot taitopaketin asennuksen jälkeen.",
           "activity": "Ei tallennettua toimintaa. Tapahtumat ilmestyvät tähän kun agentti aloittaa työskentelyn.",
           "services": "Ei ilmoitettuja palveluja. Agentti voi ilmoittaa palvelut Hello-integraation vaiheessa 11."
@@ -1423,6 +1514,46 @@
       "hoverReveal": "Klikkaa kopioidaksesi",
       "keepSafe": "Pidä tämä turvassa — se on palautusavaimesi.",
       "keyCopied": "Avain kopioitu leikepöydälle!",
+      "patTitle": "Agenttien käyttötokenit",
+      "patDesc": "Luo peruutettava token, jota agentti voi käyttää (Bearer-headerina) kirjautuakseen ja testatakseen appejasi. Yhtä tokenia voi jakaa kaikille agenteillesi.",
+      "patLabelRequired": "Anna tokenille nimi",
+      "patScopeRequired": "Valitse vähintään yksi scope, tai Full / Operator",
+      "patCreateError": "Tokenin luonti epäonnistui",
+      "patConfirmRevoke": "Peruutetaanko token \"{name}\"? Sitä käyttävät agentit menettävät pääsyn heti.",
+      "patRevoked": "Token peruutettu",
+      "patOperator": "Operaattori",
+      "patFullOwner": "Täysi omistaja",
+      "patScopes": "scopea",
+      "patCreatedTitle": "Token luotu — kopioi se nyt",
+      "patShownOnce": "Token näytetään vain kerran. Tallenna se nyt; et näe sitä enää uudelleen.",
+      "patCopied": "Token kopioitu",
+      "patAgentPrompt": "Valmis agentti-promptti",
+      "patPromptCopied": "Promptti kopioitu",
+      "patDone": "Valmis",
+      "patLoading": "Ladataan...",
+      "patEmpty": "Ei käyttötokeneita vielä.",
+      "patCreatedAt": "Luotu",
+      "patLastUsed": "Viimeksi käytetty",
+      "patNever": "ei koskaan",
+      "patExpires": "Vanhenee",
+      "patNoExpiry": "Ei vanhene",
+      "patRevoke": "Peruuta",
+      "patCreate": "Uusi token",
+      "patCreateTitle": "Luo käyttötoken",
+      "patLabel": "Nimi",
+      "patLabelPlaceholder": "esim. App-testaaja",
+      "patLevel": "Oikeudet",
+      "patFullOwnerHint": "toimii sinuna; näkee kaikki appsit ja datan",
+      "patOperatorHint": "koko noden hallinta (master-avain)",
+      "patMasterKeyWarn": "Master-avain — säilytä kuin salasana",
+      "patSelectScopes": "Scopet",
+      "patReadOwnerData": "Lue myös minun dataani (muuten puhdas hiekkalaatikko)",
+      "patExpiry": "Vanheneminen",
+      "patExpiry1d": "24 tuntia",
+      "patExpiry7d": "7 päivää",
+      "patExpiry30d": "30 päivää",
+      "patCreateBtn": "Luo token",
+      "patCancel": "Peruuta",
       "mcpEndpoint": "MCP-päätepiste",
       "mcpDesc": "Käytä tätä URL:iä yhdistääksesi MCP-yhteensopivat AI-alustat solmuusi.",
       "fedTitle": "Federaatioyhteys",

package/dist/public/components/Card.js

@@ -1,14 +1,28 @@
+/**
+ * @file Card.js
+ * @description Canonical themed card container (.card). Renders an optional
+ *   header (title/subtitle) and arbitrary children. The `variant` prop selects
+ *   a tokenized modifier — `variant="glass"` adds `.card-glass` (the former
+ *   profile `.pf-glass-card` appearance) so profile's GlassCard can delegate here.
+ * @structure Card({ title, subtitle, onClick, hoverable, className, variant, children })
+ * @usage import { Card } from '/components/Card.js';  html`<${Card} variant="glass">…<//>`
+ * @version-history
+ *   v1.0.0 — prior — Initial canonical card (title/subtitle/hoverable/className).
+ *   v1.1.0 — 2026-06-02 — Component unification (#22): add `variant` prop;
+ *     `variant="glass"` appends `.card-glass` so profile's GlassCard folds into Card.
+ */
 import { h } from 'preact';
 import htm from 'htm';
 const html = htm.bind(h);
 
 /**
  * Card — themed card container.
- * @param {{ title?: string, subtitle?: string, onClick?: () => void, hoverable?: boolean, className?: string, children: any }} props
+ * @param {{ title?: string, subtitle?: string, onClick?: () => void, hoverable?: boolean, className?: string, variant?: 'glass', children: any }} props
  */
-export function Card({ title, subtitle, onClick, hoverable = true, className = '', children }) {
+export function Card({ title, subtitle, onClick, hoverable = true, className = '', variant, children }) {
+  const variantClass = variant === 'glass' ? 'card-glass' : '';
   return html`
-    <div class="card ${hoverable ? 'card-hoverable' : ''} ${className}" onClick=${onClick}>
+    <div class="card ${variantClass} ${hoverable ? 'card-hoverable' : ''} ${className}" onClick=${onClick}>
       ${(title || subtitle) && html`
         <div class="card-header">
           ${title && html`<span class="card-title">${title}</span>`}

package/dist/public/components/Collapsible.js

@@ -0,0 +1,39 @@
+import { h } from 'preact';
+import htm from 'htm';
+const html = htm.bind(h);
+
+/**
+ * @file Collapsible.js
+ * @description Canonical expand/collapse (chevron) section — a clickable header
+ *   (title + a chevron that rotates 180° when open) with its body rendered only
+ *   while open. CONTROLLED component: the parent owns the `open` state and is
+ *   notified via `onToggle`. Backed by `.collapsible*` in theme.css, whose colors
+ *   are all theme tokens so it flips correctly in dark mode. Establishes the
+ *   canonical shape for the hand-rolled toggles scattered across views
+ *   (.expand-btn + .pf-chevron, .scope-advanced-toggle, .pkv-entry-arrow); those
+ *   bespoke toggles are left in place where their expanded markup is wired into
+ *   view state — this is the target for new collapsible sections.
+ * @structure Collapsible({ title, open, onToggle, children }) — renders
+ *   `<div class="collapsible">` containing a `.collapsible-header` button
+ *   (title + `.collapsible-chevron` with an `.open` modifier) and, when open, a
+ *   `.collapsible-body` wrapping the children.
+ * @usage
+ *   import { Collapsible } from '/components/index.js';
+ *   const [open, setOpen] = useState(false);
+ *   html`<${Collapsible} title=${t('...')} open=${open} onToggle=${() => setOpen(!open)}>
+ *     ${body}
+ *   <//>`
+ * @version-history
+ *   v1.0.0 — 2026-06-02 — Component unification (#23): created canonical
+ *     expand/collapse section, consolidating the .expand-btn + .pf-chevron,
+ *     .scope-advanced-toggle and .pkv-entry-arrow toggle patterns.
+ */
+export function Collapsible({ title, open, onToggle, children }) {
+  return html`<div class="collapsible">
+    <button type="button" class="collapsible-header" aria-expanded=${!!open} onClick=${onToggle}>
+      <span class="collapsible-title">${title}</span>
+      <span class="collapsible-chevron ${open ? 'open' : ''}">▼</span>
+    </button>
+    ${open && html`<div class="collapsible-body">${children}</div>`}
+  </div>`;
+}

package/dist/public/components/CopyButton.js

@@ -1,24 +1,55 @@
-import { h } from 'preact';
-import { useState, useCallback } from 'preact/hooks';
-import htm from 'htm';
-import { copyToClipboard } from '/js/utils.js';
-const html = htm.bind(h);
-
-/**
- * CopyButton — button with visual feedback after copying.
- * @param {{ text: string, label?: string, className?: string }} props
- */
-export function CopyButton({ text, label = 'Copy', className = '' }) {
-  const [copied, setCopied] = useState(false);
-
-  const handleCopy = useCallback(async () => {
-    await copyToClipboard(text);
-    setCopied(true);
-    setTimeout(() => setCopied(false), 2000);
-  }, [text]);
-
-  return html`
-    <button class="btn-ghost ${className}" onClick=${handleCopy}>
-      ${copied ? '✓ Copied' : label}
-    </button>`;
-}
+/**
+ * @file CopyButton.js
+ * @description Canonical clipboard button — copies `text` and shows a brief
+ *   "copied" confirmation. Replaces the ~80 hand-rolled clipboard sites; the
+ *   actual copy is delegated to /js/utils.js copyToClipboard.
+ * @structure CopyButton({ text, label?, copiedLabel?, className?, title?, onCopied? })
+ * @usage import { CopyButton } from '/components/CopyButton.js';
+ *   html`<${CopyButton} text=${value} />`
+ *   html`<${CopyButton} text=${value} label=${t('x.copyUrl')} onCopied=${() => showToast('Copied')} />`
+ * @version-history
+ *   v1.0.0 — 2026-03 — Initial copy button with copied-state feedback
+ *   v1.1.0 — 2026-06-02 — i18n the labels (default t('common.copy') / t('common.copied')),
+ *     add onCopied hook (for sites that also toast), copiedLabel, title, type="button",
+ *     and a `copied` class in the confirmed state (so bespoke classes like
+ *     .dv-copy-btn.copied / .copy-btn.copied can style it) — for the #1 sweep.
+ *   v1.1.1 — 2026-06-02 — Compute the button class as a single interpolated string
+ *     (className-or-base + optional `copied` modifier) — cleaner than two attribute
+ *     holes and avoids a trailing space. Browser-verified: copied→"…btn-sm copied",
+ *     default→"btn-ghost". (A stale cached build had briefly masked the copied class
+ *     during testing — htm itself handles multi-hole class attributes fine.)
+ */
+import { h } from 'preact';
+import { useState, useCallback } from 'preact/hooks';
+import htm from 'htm';
+import { copyToClipboard } from '/js/utils.js';
+import { t } from '/js/i18n.js';
+const html = htm.bind(h);
+
+/**
+ * CopyButton — button with visual feedback after copying.
+ * @param {{ text: string, label?: string, copiedLabel?: string, className?: string,
+ *   title?: string, onCopied?: () => void }} props
+ *   - label / copiedLabel default to i18n t('common.copy') / t('common.copied')
+ *   - onCopied: optional callback after a successful copy (e.g. to also show a toast)
+ */
+export function CopyButton({ text, label, copiedLabel, className = '', title, onCopied }) {
+  const [copied, setCopied] = useState(false);
+
+  const handleCopy = useCallback(async () => {
+    await copyToClipboard(text);
+    setCopied(true);
+    if (onCopied) onCopied();
+    setTimeout(() => setCopied(false), 2000);
+  }, [text, onCopied]);
+
+  // Class as a single computed string: className replaces the btn-ghost base
+  // (so callers can pass btn-primary/btn-outline/etc.), plus the `copied` modifier
+  // when confirmed (bespoke styles like .hlp-copy-btn.copied hook onto it).
+  const cls = `${className || 'btn-ghost'}${copied ? ' copied' : ''}`;
+
+  return html`
+    <button class=${cls} type="button" title=${title} onClick=${handleCopy}>
+      ${copied ? (copiedLabel || t('common.copied')) : (label || t('common.copy'))}
+    </button>`;
+}

package/dist/public/components/DataTable.js

@@ -0,0 +1,57 @@
+import { h } from 'preact';
+import htm from 'htm';
+const html = htm.bind(h);
+
+/**
+ * @file DataTable.js
+ * @description Canonical generic table primitive — renders a plain
+ *   `<table class="data-table ${className}">` (optionally inside a `.scrollable`
+ *   wrapper) backed by the shared `.data-table` block in theme.css, so the table
+ *   look (header row, cell padding, borders, hover) is one tokenized source of
+ *   truth that flips correctly in dark mode. Unlike the admin `DataTable` (which
+ *   wraps this in an `.adm-card`), this component renders NO card/container — the
+ *   caller supplies its own wrapper (`.card`, `.adm-card`, etc.).
+ * @structure DataTable({ headers, rows, scroll, className })
+ *   - headers: array of column header cells (string or VNode)
+ *   - rows: array of rows; each row is an array of cells. A cell may be:
+ *       • a primitive/VNode → rendered as plain `<td>`
+ *       • `{ text, mono?, title?, _html? }` → `<td class="mono"? title=...>`;
+ *         when `_html: true`, `text` is rendered as raw HTML (see SECURITY).
+ *   - scroll: when truthy, wraps the table in `<div class="scrollable">`
+ *   - className: extra class(es) appended to `.data-table` (e.g. for column-width
+ *     or per-view tweaks)
+ * @usage
+ *   import { DataTable } from '/components/index.js';
+ *   html`<div class="card"><${DataTable} headers=${['Key','Value']} rows=${rows} /></div>`
+ *
+ * SECURITY: When a cell object has `_html: true`, `cell.text` is rendered as raw
+ * HTML via dangerouslySetInnerHTML. Callers MUST ensure `cell.text` is sanitized
+ * (use escHtml() for any user-generated content). Only use `_html` for trusted,
+ * server-generated markup like badges.
+ *
+ * @version-history
+ *   v1.0.0 — 2026-06-02 — Component unification (#13): created canonical generic
+ *     DataTable (same _html/mono cell protocol as admin's), backing the shared
+ *     .data-table CSS. The admin shared.js DataTable now wraps this in .adm-card.
+ */
+export function DataTable({ headers, rows, scroll, className }) {
+  const cls = `data-table${className ? ` ${className}` : ''}`;
+  const table = html`<table class=${cls}>
+    <thead><tr>${headers.map(hd => html`<th>${hd}</th>`)}</tr></thead>
+    <tbody>
+      ${rows.map(row => html`<tr>
+        ${row.map(cell => {
+          if (cell && typeof cell === 'object' && cell._html) {
+            return html`<td class=${cell.mono ? 'mono' : ''} title=${cell.title || ''}
+              dangerouslySetInnerHTML=${{ __html: cell.text }}></td>`;
+          }
+          if (cell && typeof cell === 'object' && cell.mono) {
+            return html`<td class="mono" title=${cell.title || ''}>${cell.text}</td>`;
+          }
+          return html`<td>${cell}</td>`;
+        })}
+      </tr>`)}
+    </tbody>
+  </table>`;
+  return scroll ? html`<div class="scrollable">${table}</div>` : table;
+}

package/dist/public/components/EmptyState.js

@@ -0,0 +1,28 @@
+/**
+ * @file EmptyState.js
+ * @description Canonical empty-state placeholder — a centered muted message with an
+ *   optional icon. Replaces the per-view clones (pf-empty / mk-empty / hb-empty /
+ *   agd-empty / pkg-empty …) and the bare `<div class="empty">` scattered across the
+ *   frontend. Renders the themed `.empty` class so it flips with dark/light mode.
+ * @structure EmptyState({ icon?, text, children? })
+ * @usage import { EmptyState } from '/components/EmptyState.js';
+ *   html`<${EmptyState} text=${t('x.empty')} />`
+ *   html`<${EmptyState} icon="🎯" text=${t('x.noMatches')} />`
+ * @version-history
+ *   v1.0.0 — 2026-06-02 — Component unification (#9): single empty-state primitive
+ *     (themed .empty + optional .empty-icon); admin Empty() delegates to it.
+ */
+import { h } from 'preact';
+import htm from 'htm';
+const html = htm.bind(h);
+
+/**
+ * EmptyState — centered muted placeholder.
+ * @param {{ icon?: string, text?: any, children?: any }} props
+ */
+export function EmptyState({ icon, text, children }) {
+  return html`<div class="empty">
+    ${icon ? html`<span class="empty-icon">${icon}</span>` : ''}
+    ${text != null ? text : children}
+  </div>`;
+}