aimeat 1.17.0 → 1.19.0

package/README.md

@@ -15,11 +15,16 @@ AIMEAT is an open protocol for AI agent infrastructure. It gives agents (Claude,
 
 <p align="center">
   <img src="assets/screenshots/portal-landing.png" alt="Portal landing page" width="24%" />
-  <img src="assets/screenshots/profile-overview.png" alt="User profile" width="24%" />
+  <img src="assets/screenshots/profile-overview.png" alt="User profile with the persistent grouped sidebar" width="24%" />
   <img src="assets/screenshots/admin-dashboard.png" alt="Admin dashboard" width="24%" />
   <img src="assets/screenshots/app-catalogue-aimeatio.png" alt="App catalogue" width="24%" />
 </p>
 
+<p align="center">
+  <img src="assets/screenshots/profile-mobile.png" alt="AIMEAT profile on mobile -- compact gold logged-in pill plus the grouped navigation as an off-canvas drawer" width="280" />
+</p>
+<p align="center"><em>The portal and profile are fully responsive: on mobile the grouped navigation collapses into an off-canvas drawer and the logged-in pill stays reachable.</em></p>
+
 ### See it in action (5:50)
 
 An AI agent connects to an AIMEAT node and reaches full operational readiness autonomously:
@@ -153,6 +158,12 @@ For MCP-capable runtimes (Claude Desktop, MCP-aware IDEs), run `aimeat connect s
 
 Claude Pro, ChatGPT Plus, and other MCP-capable AIs connect directly as MCP clients. OpenClaw, Hermes, Claude Code, and Cursor all work. Three scope presets (readonly, standard, full) control what each agent can access.
 
+### Connect agent platforms (Dify, n8n, Open WebUI, ...)
+
+AIMEAT also bridges agent platforms. A tool like Dify, n8n, or Open WebUI is its own island -- the agents and data you build there can't reach agents anywhere else. Pointing the platform at an AIMEAT node changes that, and it's a one-time **MCP** connection: add an MCP server for the node's `/v1/mcp` (or a scoped `/v2/mcp/agent` surface), authorize once in the browser, and the full AIMEAT toolset appears -- no token pasting, no per-tool wiring. The agent can even run Hello Integration on itself (paste the canonical instruction from your profile -> Agents), then immediately read/write shared memory, storage, and knowledge packages, discover other agents, and hire capabilities.
+
+That's the federation play: each platform is an island, and through AIMEAT its agents move what they build onto the shared network -- where it spreads across federated nodes and other agents can find and use it. Walkthrough: [docs/integrations/dify-hello-integration.md](aimeat/docs/integrations/dify-hello-integration.md).
+
 ### Build apps with AI
 
 Tell any AI what you want. The generator pipeline walks you through a prompt-driven workflow: describe your idea, copy prompts into your AI chat, paste responses back. The system validates each component and registers it on your node. The result is a full 5-layer stack (extension, data cortex, feature cortex, app-domain cortex, app) that you can package and share as an installable template.
@@ -299,6 +310,12 @@ With `AIMEAT_ANONYMOUS=true`, anyone can read and do limited writes without regi
 
 Each node runs independently with its own identity and portal. Operators customize through CSS themes (`theme.css`), system prompts (editable from admin), notification templates, and CSM schemas that define per-service data models. Run your own node, your own branding.
 
+### Custom portal templates
+
+The public landing page (`/`) is editable live from the admin **Portal** tab — write the HTML template (with serve-time `{{config:*}}`, `{{memory:portal/*}}`, `{{kv:*}}`, `{{board:*}}` tags), manage portal memory keys and KV pairs, and watch the result render in the inline preview. Following AIMEAT's prompt-driven workflow, the **AI-Assisted Editor** hands you a ready prompt: paste it into any AI chat, paste the JSON bundle it returns back into **Import AI Result**, and your node's front page immediately looks custom. Drop in `<script src="/v1/libs/aimeat-header.js"></script>` and the page also carries the **exact same site header** as the rest of AIMEAT — brand, navigation, theme and language switchers, and the live gold login pill — so visitors can always sign in and reach their profile. Operator templates are trusted: their inline `<script>` runs under the node's CSP via a per-request nonce.
+
+<img src="assets/screenshots/portal-admin-editor.png" alt="Admin Portal tab: live preview of the custom landing page, the HTML template editor with tag reference and active-source status, portal memory keys, KV pairs, and the AI-Assisted Editor (Load AI Prompt -> Import AI Result)" width="760" />
+
 ---
 
 ## Getting Started
@@ -375,6 +392,10 @@ cd aimeat && pnpm exec node --env-file=.env.test.sqlite --import tsx test/run-e2
 
 > The legacy `pnpm test:e2e` (in-memory backend) is deprecated and produces stale failures. Use the SQLite or MongoDB commands instead.
 
+### Synthetic agent traces (dev tool)
+
+[`aimeat/tools/synthtraces/`](aimeat/tools/synthtraces/) is a small self-play harness that generates synthetic AIMEAT agent-session traces: a *persona* model plays the human owner while an *agent* model drives a real node over REST or MCP, producing task-driven traces you can use to benchmark or fine-tune models on the protocol. It runs on free cloud models (OpenRouter `owl-alpha`) or **fully local** via Ollama (`qwen2.5` + `llama3.2`), and ships an eval that scores protocol-correctness (no hallucinated tools, valid memory keys, task completion, token cost). See [tools/README.md](aimeat/tools/README.md).
+
 ---
 
 ## Documentation

package/dist/.env.example

@@ -84,7 +84,12 @@ AIMEAT_PORT=40050
 # AIMEAT_FEDERATION_DEFAULT_SCOPES=memory:read,catalogue:read
 
 # ── Auth & Tokens ──────────────────────────────────────────────
-# AIMEAT_JWT_TTL=3600              # JWT lifetime in seconds (default: 1h)
+# AIMEAT_JWT_TTL=3600              # Legacy / agent JWT lifetime in seconds (default: 1h)
+# Owner sessions: short access token + rotating httpOnly refresh cookie (no key re-signing).
+# AIMEAT_ACCESS_TTL=900            # Owner access-token (JWT) lifetime in seconds (default: 15min)
+# AIMEAT_REFRESH_IDLE_DAYS=30      # Owner refresh-cookie idle window in days (default: 30)
+# AIMEAT_REFRESH_ABSOLUTE_DAYS=90  # Owner refresh-cookie hard cap in days, never extended (default: 90)
+# AIMEAT_REFRESH_GRACE_MS=60000    # Refresh-rotation grace window in ms for concurrency (default: 60s)
 # AIMEAT_OTK_TTL_MS=300000        # OTK expiry in ms (default: 5min)
 # AIMEAT_OTK_GRACE_MS=60000       # OTK grace period in ms (default: 1min)
 

package/dist/locales/en.json

@@ -1,4 +1,92 @@
 {
+  "profile.landing.home": "Home",
+  "profile.landing.menu": "Menu",
+  "profile.tabs.scheduler": "Scheduler",
+  "profile.agents.detail.tabs.schedules": "Schedules",
+  "profile.scheduler.title": "Scheduler",
+  "profile.scheduler.desc": "Every recurring job running for your profile — AIMEAT-managed and your agents' own.",
+  "profile.scheduler.loading": "Loading schedules…",
+  "profile.scheduler.newSchedule": "New schedule",
+  "profile.scheduler.close": "Close",
+  "profile.scheduler.triggered": "Schedule run started",
+  "profile.scheduler.cancelled": "Schedule cancelled",
+  "profile.scheduler.created": "Schedule created",
+  "profile.scheduler.saving": "Saving…",
+  "profile.scheduler.create": "Create schedule",
+  "profile.scheduler.confirmCancel": "Cancel this schedule? Future runs will stop.",
+  "profile.scheduler.managedTitle": "AIMEAT-managed",
+  "profile.scheduler.noManaged": "No managed schedules yet.",
+  "profile.scheduler.extTitle": "Extension cron jobs",
+  "profile.scheduler.internalTitle": "Agent internal",
+  "profile.scheduler.internalNote": "Self-reported by your agents. AIMEAT displays these but does not run them.",
+  "profile.scheduler.never": "Never",
+  "profile.scheduler.byAgent": "created by agent",
+  "profile.scheduler.pause": "Pause",
+  "profile.scheduler.resume": "Resume",
+  "profile.scheduler.runNow": "Run now",
+  "profile.scheduler.cancel": "Cancel",
+  "profile.scheduler.agentDesc": "Schedules running for this agent.",
+  "profile.scheduler.dispatchedTitle": "AIMEAT-dispatched",
+  "profile.scheduler.noDispatched": "No schedules for this agent yet.",
+  "profile.scheduler.noInternal": "This agent has not reported any internal schedules.",
+  "profile.scheduler.col.name": "Name",
+  "profile.scheduler.col.kind": "Type",
+  "profile.scheduler.col.cron": "Schedule",
+  "profile.scheduler.col.agent": "Agent",
+  "profile.scheduler.col.lastRun": "Last run",
+  "profile.scheduler.col.nextRun": "Next run",
+  "profile.scheduler.col.runs": "Runs",
+  "profile.scheduler.col.extension": "Extension",
+  "profile.scheduler.kind.ai": "AI",
+  "profile.scheduler.kind.agent_task": "Agent task",
+  "profile.scheduler.kind.extension": "Extension",
+  "profile.scheduler.kind.core": "Core",
+  "profile.scheduler.kindHint.ai": "server runs a model on your key",
+  "profile.scheduler.kindHint.agent_task": "queues a task for an agent",
+  "profile.scheduler.kindHint.extension": "runs an extension action (free)",
+  "profile.scheduler.field.kind": "Type",
+  "profile.scheduler.field.displayName": "Name",
+  "profile.scheduler.field.schedule": "Schedule",
+  "profile.scheduler.field.inputKeys": "Input memory keys (comma-separated)",
+  "profile.scheduler.field.prompt": "Prompt",
+  "profile.scheduler.field.outputKey": "Output memory key (optional)",
+  "profile.scheduler.field.agent": "Agent",
+  "profile.scheduler.field.taskTitle": "Task title",
+  "profile.scheduler.field.taskDescription": "Task description",
+  "profile.scheduler.field.extensionName": "Extension name",
+  "profile.scheduler.field.actionId": "Action id",
+  "profile.scheduler.field.purpose": "Purpose (optional)",
+  "profile.scheduler.ph.displayName": "e.g. Morning news translation",
+  "profile.scheduler.ph.timezone": "IANA timezone, e.g. Europe/Helsinki",
+  "profile.scheduler.ph.inputKeys": "e.g. news.morning.raw, news.sources",
+  "profile.scheduler.ph.prompt": "e.g. Translate the news below into Finnish and summarise the top 5 items.",
+  "profile.scheduler.ph.outputKey": "auto-generated if left blank",
+  "profile.scheduler.ph.agent": "Select an agent…",
+  "profile.scheduler.ph.purpose": "Why this runs",
+  "profile.scheduler.preset.morning": "Every morning",
+  "profile.scheduler.preset.evening": "Every evening",
+  "profile.scheduler.preset.hourly": "Hourly",
+  "profile.scheduler.preset.custom": "Custom",
+  "profile.scheduler.constraints": "Budget guards (optional)",
+  "profile.scheduler.maxRuns": "Stop after N runs",
+  "profile.scheduler.dailyLimit": "Daily AI spend limit (USD)",
+  "profile.scheduler.err.name": "Name is required",
+  "profile.scheduler.err.cron": "Schedule (cron) is required",
+  "profile.scheduler.err.prompt": "Prompt is required for AI schedules",
+  "profile.scheduler.err.agent": "Select an agent",
+  "profile.scheduler.err.taskTitle": "Task title is required",
+  "profile.scheduler.err.ext": "Extension name and action id are required",
+  "profile.scheduler.budgetTitle": "Schedule budget guards",
+  "profile.scheduler.budgetDesc": "Default opt-in limits applied to schedules created for this agent.",
+  "profile.scheduler.budgetSave": "Save budget guards",
+  "profile.scheduler.budgetSaved": "Budget guards saved",
+  "profile.scheduler.edit": "Edit",
+  "profile.scheduler.save": "Save",
+  "profile.scheduler.saved": "Schedule updated",
+  "profile.scheduler.dispatches": "Creates each run",
+  "profile.scheduler.soon": "soon",
+  "profile.scheduler.paused": "paused",
+  "profile.scheduler.autoKey": "(auto)",
   "common": {
     "cancel": "Cancel",
     "confirm": "Confirm",
@@ -14,7 +102,10 @@
     "name": "Name",
     "add": "Add",
     "yes": "Yes",
-    "no": "No"
+    "no": "No",
+    "copy": "Copy",
+    "copied": "✓ Copied",
+    "error": "Error"
   },
   "nav": {
     "try": "Try it",
@@ -25,7 +116,9 @@
     "logout": "Log Out",
     "loggedInAs": "logged in as",
     "help": "Help",
-    "admin": "Admin"
+    "admin": "Admin",
+    "themeToDark": "Switch to dark mode",
+    "themeToLight": "Switch to light mode"
   },
   "hero": {
     "title": "Your data is yours. Your AI works for you.",
@@ -261,6 +354,13 @@
     },
     "agents": {
       "title": "Your Agents",
+      "active": {
+        "title": "Running now",
+        "empty": "No tasks running right now.",
+        "openHint": "Open this task",
+        "untitled": "Untitled task",
+        "more": "more running (open an agent to see all)"
+      },
       "desc": "Agents are AI identities registered under your account, each with their own identity, scopes, tools, tasks, and memory access. Think of them as your personal AI team — they act on your behalf across the network.",
       "connect": "Connect an Automation Agent",
       "connectDesc": "Connect an AI agent to your account using the AIMEAT connector CLI or an agent-capable runtime. The connector is the easiest path because it gives the agent a persistent identity, approved scopes, local skill bundle, and MCP access to AIMEAT tools:",
@@ -325,6 +425,8 @@
         "domainCatalogue": "Catalogue",
         "domainGenerator": "Generator",
         "domainTask": "Tasks",
+        "domainCortex": "Cortex (install/activate browser libraries)",
+        "domainExt": "Extensions (activate server-side extensions)",
         "permExecute": "Execute",
         "permRead": "Read",
         "permWrite": "Write",
@@ -703,13 +805,16 @@
           "integration": "Integration",
           "tasks": "Tasks",
           "messages": "Messages",
-          "data_access": "Data Access",
+          "data_access": "Memory",
           "directives": "Directives",
           "agent_config": "Agent Config",
           "activity": "Activity",
           "services": "Services",
           "quality": "Quality"
         },
+        "changes": {
+          "title": "New since you last looked"
+        },
         "quality": {
           "performanceTitle": "Performance",
           "performanceDesc": "How much this agent has done and how fast — computed from its tasks.",
@@ -970,7 +1075,7 @@
           "readme": "No README published",
           "tasks": "No tasks yet. Create a task to give this agent work.",
           "messages": "No messages yet. Send a message or use a command.",
-          "data_access": "No data access configured. Use the buttons below to add tags, memory areas, or knowledge packages.",
+          "data_access": "No memory configured yet. Use the buttons below to add tags, memory areas, or knowledge packages.",
           "agent_config": "No configuration files. The agent will push its config files after the skill bundle is installed.",
           "activity": "No activity recorded yet. Events will appear here once the agent starts working.",
           "services": "No services declared. The agent can declare services during Hello Integration Step 11."
@@ -1423,6 +1528,46 @@
       "hoverReveal": "Click to copy",
       "keepSafe": "Keep this safe — it's your owner recovery key.",
       "keyCopied": "Key copied to clipboard!",
+      "patTitle": "Agent Access Tokens",
+      "patDesc": "Create a revocable token an agent can use (as a Bearer header) to log in and test your apps. One token can be shared across all your agents.",
+      "patLabelRequired": "Give the token a name",
+      "patScopeRequired": "Select at least one scope, or Full / Operator",
+      "patCreateError": "Failed to create token",
+      "patConfirmRevoke": "Revoke token \"{name}\"? Agents using it lose access immediately.",
+      "patRevoked": "Token revoked",
+      "patOperator": "Operator",
+      "patFullOwner": "Full owner",
+      "patScopes": "scopes",
+      "patCreatedTitle": "Token created — copy it now",
+      "patShownOnce": "This token is shown only once. Store it now; you cannot see it again.",
+      "patCopied": "Token copied",
+      "patAgentPrompt": "Ready-made agent prompt",
+      "patPromptCopied": "Prompt copied",
+      "patDone": "Done",
+      "patLoading": "Loading...",
+      "patEmpty": "No access tokens yet.",
+      "patCreatedAt": "Created",
+      "patLastUsed": "Last used",
+      "patNever": "never",
+      "patExpires": "Expires",
+      "patNoExpiry": "No expiry",
+      "patRevoke": "Revoke",
+      "patCreate": "New Token",
+      "patCreateTitle": "Create Access Token",
+      "patLabel": "Name",
+      "patLabelPlaceholder": "e.g. App tester",
+      "patLevel": "Permissions",
+      "patFullOwnerHint": "acts as you; sees all apps & data",
+      "patOperatorHint": "full node administration (master key)",
+      "patMasterKeyWarn": "Master key — guard it like a password",
+      "patSelectScopes": "Scopes",
+      "patReadOwnerData": "Also read my data (otherwise a clean sandbox)",
+      "patExpiry": "Expiry",
+      "patExpiry1d": "24 hours",
+      "patExpiry7d": "7 days",
+      "patExpiry30d": "30 days",
+      "patCreateBtn": "Create Token",
+      "patCancel": "Cancel",
       "mcpEndpoint": "MCP Endpoint",
       "mcpDesc": "Use this URL to connect MCP-compatible AI platforms to your node.",
       "fedTitle": "Federation Access",
@@ -3545,6 +3690,20 @@
     "portalLbStatus": "Sync Status",
     "portalLbSyncNow": "Sync Now",
     "portalLbSyncDone": "Portal sync completed.",
+    "portalActiveSource": "Active source",
+    "portalCustomActive": "Custom template",
+    "portalDefaultActive": "Default app (built-in SPA)",
+    "portalDefaultExplain": "No custom template is stored, so visitors see the built-in app. The editor below starts empty. Click \"{action}\" to load the current page's HTML as a starting point, then edit and save it to override the default.",
+    "portalCustomExplain": "A custom template is active and overrides the built-in app. Edit it below and save, or reset to default to bring the built-in app back.",
+    "portalLoadCurrent": "Load current page",
+    "portalLoadCurrentConfirm": "Replace the editor contents with the current page's HTML? Unsaved edits will be lost.",
+    "portalLoadedCurrent": "Loaded current page into the editor — review and click Save Template to apply.",
+    "portalAiBundleExplain": "Paste the JSON bundle the AI produced here. It can include the template, portal memory keys, and KV pairs — they are all applied at once.",
+    "portalAiBundlePlaceholder": "Paste the AI's JSON result here: { \"template\": \"<!DOCTYPE html>...\", \"memory\": { \"portal/about\": \"...\" }, \"kv\": {} }",
+    "portalImportDone": "Imported: {summary}",
+    "portalImportInvalid": "That doesn't look like a valid AI bundle. Expected JSON with a \"template\", \"memory\", or \"kv\" field.",
+    "portalSaveLooksLikeJson": "This looks like an AI JSON bundle, not an HTML template. Paste it into \"Import AI Result\" below instead.",
+    "portalMemorySaved": "Portal memory key saved.",
     "cors": "CORS",
     "corsTitle": "CORS Origin Management",
     "corsNodeDefault": "Node Default Origins",

package/dist/locales/fi.json

@@ -1,4 +1,92 @@
 {
+  "profile.landing.home": "Etusivu",
+  "profile.landing.menu": "Valikko",
+  "profile.tabs.scheduler": "Ajastin",
+  "profile.agents.detail.tabs.schedules": "Ajastukset",
+  "profile.scheduler.title": "Ajastin",
+  "profile.scheduler.desc": "Kaikki profiilisi toistuvat ajastukset — AIMEATin hallinnoimat ja agenttiesi omat.",
+  "profile.scheduler.loading": "Ladataan ajastuksia…",
+  "profile.scheduler.newSchedule": "Uusi ajastus",
+  "profile.scheduler.close": "Sulje",
+  "profile.scheduler.triggered": "Ajastuksen suoritus käynnistetty",
+  "profile.scheduler.cancelled": "Ajastus peruttu",
+  "profile.scheduler.created": "Ajastus luotu",
+  "profile.scheduler.saving": "Tallennetaan…",
+  "profile.scheduler.create": "Luo ajastus",
+  "profile.scheduler.confirmCancel": "Perutaanko tämä ajastus? Tulevat suoritukset pysäytetään.",
+  "profile.scheduler.managedTitle": "AIMEATin hallinnoimat",
+  "profile.scheduler.noManaged": "Ei vielä hallinnoituja ajastuksia.",
+  "profile.scheduler.extTitle": "Laajennusten cron-työt",
+  "profile.scheduler.internalTitle": "Agentin sisäiset",
+  "profile.scheduler.internalNote": "Agenttiesi itse ilmoittamat. AIMEAT näyttää nämä mutta ei suorita niitä.",
+  "profile.scheduler.never": "Ei koskaan",
+  "profile.scheduler.byAgent": "agentin luoma",
+  "profile.scheduler.pause": "Keskeytä",
+  "profile.scheduler.resume": "Jatka",
+  "profile.scheduler.runNow": "Suorita nyt",
+  "profile.scheduler.cancel": "Peruuta",
+  "profile.scheduler.agentDesc": "Tälle agentille ajossa olevat ajastukset.",
+  "profile.scheduler.dispatchedTitle": "AIMEATin lähettämät",
+  "profile.scheduler.noDispatched": "Ei vielä ajastuksia tälle agentille.",
+  "profile.scheduler.noInternal": "Tämä agentti ei ole ilmoittanut sisäisiä ajastuksia.",
+  "profile.scheduler.col.name": "Nimi",
+  "profile.scheduler.col.kind": "Tyyppi",
+  "profile.scheduler.col.cron": "Ajastus",
+  "profile.scheduler.col.agent": "Agentti",
+  "profile.scheduler.col.lastRun": "Edellinen ajo",
+  "profile.scheduler.col.nextRun": "Seuraava ajo",
+  "profile.scheduler.col.runs": "Ajot",
+  "profile.scheduler.col.extension": "Laajennus",
+  "profile.scheduler.kind.ai": "Tekoäly",
+  "profile.scheduler.kind.agent_task": "Agenttitehtävä",
+  "profile.scheduler.kind.extension": "Laajennus",
+  "profile.scheduler.kind.core": "Ydin",
+  "profile.scheduler.kindHint.ai": "palvelin ajaa mallin avaimellasi",
+  "profile.scheduler.kindHint.agent_task": "lisää tehtävän agentin jonoon",
+  "profile.scheduler.kindHint.extension": "ajaa laajennuksen toiminnon (ilmainen)",
+  "profile.scheduler.field.kind": "Tyyppi",
+  "profile.scheduler.field.displayName": "Nimi",
+  "profile.scheduler.field.schedule": "Ajastus",
+  "profile.scheduler.field.inputKeys": "Syötteen muistiavaimet (pilkuin eroteltuna)",
+  "profile.scheduler.field.prompt": "Kehote",
+  "profile.scheduler.field.outputKey": "Tuloksen muistiavain (valinnainen)",
+  "profile.scheduler.field.agent": "Agentti",
+  "profile.scheduler.field.taskTitle": "Tehtävän otsikko",
+  "profile.scheduler.field.taskDescription": "Tehtävän kuvaus",
+  "profile.scheduler.field.extensionName": "Laajennuksen nimi",
+  "profile.scheduler.field.actionId": "Toiminnon tunnus",
+  "profile.scheduler.field.purpose": "Tarkoitus (valinnainen)",
+  "profile.scheduler.ph.displayName": "esim. Aamu-uutisten käännös",
+  "profile.scheduler.ph.timezone": "IANA-aikavyöhyke, esim. Europe/Helsinki",
+  "profile.scheduler.ph.inputKeys": "esim. news.morning.raw, news.sources",
+  "profile.scheduler.ph.prompt": "esim. Käännä alla olevat uutiset suomeksi ja tiivistä 5 tärkeintä.",
+  "profile.scheduler.ph.outputKey": "luodaan automaattisesti jos tyhjä",
+  "profile.scheduler.ph.agent": "Valitse agentti…",
+  "profile.scheduler.ph.purpose": "Miksi tämä ajetaan",
+  "profile.scheduler.preset.morning": "Joka aamu",
+  "profile.scheduler.preset.evening": "Joka ilta",
+  "profile.scheduler.preset.hourly": "Tunneittain",
+  "profile.scheduler.preset.custom": "Mukautettu",
+  "profile.scheduler.constraints": "Budjettirajat (valinnainen)",
+  "profile.scheduler.maxRuns": "Pysäytä N ajon jälkeen",
+  "profile.scheduler.dailyLimit": "Päivittäinen tekoälykulujen raja (USD)",
+  "profile.scheduler.err.name": "Nimi vaaditaan",
+  "profile.scheduler.err.cron": "Ajastus (cron) vaaditaan",
+  "profile.scheduler.err.prompt": "Kehote vaaditaan tekoälyajastuksille",
+  "profile.scheduler.err.agent": "Valitse agentti",
+  "profile.scheduler.err.taskTitle": "Tehtävän otsikko vaaditaan",
+  "profile.scheduler.err.ext": "Laajennuksen nimi ja toiminnon tunnus vaaditaan",
+  "profile.scheduler.budgetTitle": "Ajastusten budjettirajat",
+  "profile.scheduler.budgetDesc": "Oletusarvoiset valinnaiset rajat, jotka koskevat tälle agentille luotuja ajastuksia.",
+  "profile.scheduler.budgetSave": "Tallenna budjettirajat",
+  "profile.scheduler.budgetSaved": "Budjettirajat tallennettu",
+  "profile.scheduler.edit": "Muokkaa",
+  "profile.scheduler.save": "Tallenna",
+  "profile.scheduler.saved": "Ajastus päivitetty",
+  "profile.scheduler.dispatches": "Luo joka ajolla",
+  "profile.scheduler.soon": "pian",
+  "profile.scheduler.paused": "tauolla",
+  "profile.scheduler.autoKey": "(auto)",
   "common": {
     "cancel": "Peruuta",
     "confirm": "Vahvista",
@@ -14,7 +102,10 @@
     "name": "Nimi",
     "add": "Lisää",
     "yes": "Kyllä",
-    "no": "Ei"
+    "no": "Ei",
+    "copy": "Kopioi",
+    "copied": "✓ Kopioitu",
+    "error": "Virhe"
   },
   "nav": {
     "try": "Kokeile",
@@ -25,7 +116,9 @@
     "logout": "Kirjaudu ulos",
     "loggedInAs": "kirjautuneena",
     "help": "Apua",
-    "admin": "Hallinta"
+    "admin": "Hallinta",
+    "themeToDark": "Vaihda tummaan tilaan",
+    "themeToLight": "Vaihda vaaleaan tilaan"
   },
   "hero": {
     "title": "Tietosi on sinun. AI:si työskentelee puolestasi.",
@@ -261,6 +354,13 @@
     },
     "agents": {
       "title": "Agenttisi",
+      "active": {
+        "title": "Käynnissä nyt",
+        "empty": "Ei käynnissä olevia taskeja juuri nyt.",
+        "openHint": "Avaa tämä taski",
+        "untitled": "Nimetön taski",
+        "more": "lisää käynnissä (avaa agentti nähdäksesi kaikki)"
+      },
       "desc": "Agentit ovat tilillesi rekisteröityjä AI-identiteettejä, joilla on oma identiteetti, rajaukset, työkalut, tehtävät ja muistipääsy. Ajattele heitä henkilökohtaisena AI-tiiminäsi - ne toimivat puolestasi verkossa.",
       "connect": "Yhdistä automaatioagentti",
       "connectDesc": "Yhdistä tekoälyagentti tilillesi AIMEAT-liittimellä tai agenttia ajavassa ympäristössä. Liitin on helpoin polku, koska se antaa agentille pysyvän identiteetin, hyväksytyt rajaukset, paikallisen taitopaketin ja MCP-pääsyn AIMEAT-työkaluihin:",
@@ -325,6 +425,8 @@
         "domainCatalogue": "Hakemisto",
         "domainGenerator": "Generaattori",
         "domainTask": "Tehtävät",
+        "domainCortex": "Cortex (asenna/aktivoi selainkirjastoja)",
+        "domainExt": "Laajennukset (aktivoi palvelinpuolen laajennuksia)",
         "permExecute": "Suoritus",
         "permRead": "Luku",
         "permWrite": "Kirjoitus",
@@ -703,13 +805,16 @@
           "integration": "Integraatio",
           "tasks": "Tehtävät",
           "messages": "Viestit",
-          "data_access": "Datayhteydet",
+          "data_access": "Muisti",
           "directives": "Ohjeistukset",
           "agent_config": "Agenttiasetukset",
           "activity": "Toiminta",
           "services": "Palvelut",
           "quality": "Laatu"
         },
+        "changes": {
+          "title": "Uutta sitten kun viimeksi katsoit"
+        },
         "quality": {
           "performanceTitle": "Suorituskyky",
           "performanceDesc": "Kuinka paljon agentti on tehnyt ja kuinka nopeasti — laskettu sen tehtävistä.",
@@ -970,7 +1075,7 @@
           "readme": "Ei README:tä julkaistu",
           "tasks": "Ei tehtäviä. Luo tehtävä antaaksesi agentille työtä.",
           "messages": "Ei viestejä. Lähetä viesti tai käytä komentoa.",
-          "data_access": "Ei datayhteyksien asetuksia. Lisää tunnisteita, muistialueita tai tietopaketteja alla olevilla painikkeilla.",
+          "data_access": "Ei muistia määritetty. Lisää tunnisteita, muistialueita tai tietopaketteja alla olevilla painikkeilla.",
           "agent_config": "Ei asetustiedostoja. Agentti lähettää asetustiedostot taitopaketin asennuksen jälkeen.",
           "activity": "Ei tallennettua toimintaa. Tapahtumat ilmestyvät tähän kun agentti aloittaa työskentelyn.",
           "services": "Ei ilmoitettuja palveluja. Agentti voi ilmoittaa palvelut Hello-integraation vaiheessa 11."
@@ -1423,6 +1528,46 @@
       "hoverReveal": "Klikkaa kopioidaksesi",
       "keepSafe": "Pidä tämä turvassa — se on palautusavaimesi.",
       "keyCopied": "Avain kopioitu leikepöydälle!",
+      "patTitle": "Agenttien käyttötokenit",
+      "patDesc": "Luo peruutettava token, jota agentti voi käyttää (Bearer-headerina) kirjautuakseen ja testatakseen appejasi. Yhtä tokenia voi jakaa kaikille agenteillesi.",
+      "patLabelRequired": "Anna tokenille nimi",
+      "patScopeRequired": "Valitse vähintään yksi scope, tai Full / Operator",
+      "patCreateError": "Tokenin luonti epäonnistui",
+      "patConfirmRevoke": "Peruutetaanko token \"{name}\"? Sitä käyttävät agentit menettävät pääsyn heti.",
+      "patRevoked": "Token peruutettu",
+      "patOperator": "Operaattori",
+      "patFullOwner": "Täysi omistaja",
+      "patScopes": "scopea",
+      "patCreatedTitle": "Token luotu — kopioi se nyt",
+      "patShownOnce": "Token näytetään vain kerran. Tallenna se nyt; et näe sitä enää uudelleen.",
+      "patCopied": "Token kopioitu",
+      "patAgentPrompt": "Valmis agentti-promptti",
+      "patPromptCopied": "Promptti kopioitu",
+      "patDone": "Valmis",
+      "patLoading": "Ladataan...",
+      "patEmpty": "Ei käyttötokeneita vielä.",
+      "patCreatedAt": "Luotu",
+      "patLastUsed": "Viimeksi käytetty",
+      "patNever": "ei koskaan",
+      "patExpires": "Vanhenee",
+      "patNoExpiry": "Ei vanhene",
+      "patRevoke": "Peruuta",
+      "patCreate": "Uusi token",
+      "patCreateTitle": "Luo käyttötoken",
+      "patLabel": "Nimi",
+      "patLabelPlaceholder": "esim. App-testaaja",
+      "patLevel": "Oikeudet",
+      "patFullOwnerHint": "toimii sinuna; näkee kaikki appsit ja datan",
+      "patOperatorHint": "koko noden hallinta (master-avain)",
+      "patMasterKeyWarn": "Master-avain — säilytä kuin salasana",
+      "patSelectScopes": "Scopet",
+      "patReadOwnerData": "Lue myös minun dataani (muuten puhdas hiekkalaatikko)",
+      "patExpiry": "Vanheneminen",
+      "patExpiry1d": "24 tuntia",
+      "patExpiry7d": "7 päivää",
+      "patExpiry30d": "30 päivää",
+      "patCreateBtn": "Luo token",
+      "patCancel": "Peruuta",
       "mcpEndpoint": "MCP-päätepiste",
       "mcpDesc": "Käytä tätä URL:iä yhdistääksesi MCP-yhteensopivat AI-alustat solmuusi.",
       "fedTitle": "Federaatioyhteys",
@@ -3545,6 +3690,20 @@
     "portalLbStatus": "Synkronointitila",
     "portalLbSyncNow": "Synkronoi nyt",
     "portalLbSyncDone": "Portaalin synkronointi valmis.",
+    "portalActiveSource": "Aktiivinen lähde",
+    "portalCustomActive": "Mukautettu mallipohja",
+    "portalDefaultActive": "Oletussovellus (sisäänrakennettu SPA)",
+    "portalDefaultExplain": "Mukautettua mallipohjaa ei ole tallennettu, joten kävijät näkevät sisäänrakennetun sovelluksen. Alla oleva editori on tyhjä. Paina \"{action}\" ladataksesi nykyisen sivun HTML:n lähtökohdaksi, muokkaa sitä ja tallenna korvataksesi oletuksen.",
+    "portalCustomExplain": "Mukautettu mallipohja on käytössä ja korvaa sisäänrakennetun sovelluksen. Muokkaa sitä alla ja tallenna, tai palauta oletukseksi tuodaksesi sisäänrakennetun sovelluksen takaisin.",
+    "portalLoadCurrent": "Lataa nykyinen sivu pohjaksi",
+    "portalLoadCurrentConfirm": "Korvataanko editorin sisältö nykyisen sivun HTML:llä? Tallentamattomat muutokset menetetään.",
+    "portalLoadedCurrent": "Nykyinen sivu ladattu editoriin — tarkista ja paina Tallenna mallipohja ottaaksesi käyttöön.",
+    "portalAiBundleExplain": "Liitä tähän tekoälyn tuottama JSON-paketti. Se voi sisältää mallipohjan, portaalin muistiavaimet ja KV-parit — ne otetaan käyttöön kaikki kerralla.",
+    "portalAiBundlePlaceholder": "Liitä tekoälyn JSON-tulos tähän: { \"template\": \"<!DOCTYPE html>...\", \"memory\": { \"portal/about\": \"...\" }, \"kv\": {} }",
+    "portalImportDone": "Tuotu: {summary}",
+    "portalImportInvalid": "Tämä ei näytä kelvolliselta tekoälypaketilta. Odotettiin JSON, jossa on \"template\", \"memory\" tai \"kv\" -kenttä.",
+    "portalSaveLooksLikeJson": "Tämä näyttää tekoälyn JSON-paketilta, ei HTML-mallipohjalta. Liitä se alla olevaan \"Tuo tekoälyn tulos\" -kenttään.",
+    "portalMemorySaved": "Portaalin muistiavain tallennettu.",
     "cors": "CORS",
     "corsTitle": "CORS-alkuperähallinta",
     "corsNodeDefault": "Solmun oletusalkuperät",

package/dist/public/components/Card.js

@@ -1,14 +1,28 @@
+/**
+ * @file Card.js
+ * @description Canonical themed card container (.card). Renders an optional
+ *   header (title/subtitle) and arbitrary children. The `variant` prop selects
+ *   a tokenized modifier — `variant="glass"` adds `.card-glass` (the former
+ *   profile `.pf-glass-card` appearance) so profile's GlassCard can delegate here.
+ * @structure Card({ title, subtitle, onClick, hoverable, className, variant, children })
+ * @usage import { Card } from '/components/Card.js';  html`<${Card} variant="glass">…<//>`
+ * @version-history
+ *   v1.0.0 — prior — Initial canonical card (title/subtitle/hoverable/className).
+ *   v1.1.0 — 2026-06-02 — Component unification (#22): add `variant` prop;
+ *     `variant="glass"` appends `.card-glass` so profile's GlassCard folds into Card.
+ */
 import { h } from 'preact';
 import htm from 'htm';
 const html = htm.bind(h);
 
 /**
  * Card — themed card container.
- * @param {{ title?: string, subtitle?: string, onClick?: () => void, hoverable?: boolean, className?: string, children: any }} props
+ * @param {{ title?: string, subtitle?: string, onClick?: () => void, hoverable?: boolean, className?: string, variant?: 'glass', children: any }} props
  */
-export function Card({ title, subtitle, onClick, hoverable = true, className = '', children }) {
+export function Card({ title, subtitle, onClick, hoverable = true, className = '', variant, children }) {
+  const variantClass = variant === 'glass' ? 'card-glass' : '';
   return html`
-    <div class="card ${hoverable ? 'card-hoverable' : ''} ${className}" onClick=${onClick}>
+    <div class="card ${variantClass} ${hoverable ? 'card-hoverable' : ''} ${className}" onClick=${onClick}>
       ${(title || subtitle) && html`
         <div class="card-header">
           ${title && html`<span class="card-title">${title}</span>`}

package/dist/public/components/Collapsible.js

@@ -0,0 +1,39 @@
+import { h } from 'preact';
+import htm from 'htm';
+const html = htm.bind(h);
+
+/**
+ * @file Collapsible.js
+ * @description Canonical expand/collapse (chevron) section — a clickable header
+ *   (title + a chevron that rotates 180° when open) with its body rendered only
+ *   while open. CONTROLLED component: the parent owns the `open` state and is
+ *   notified via `onToggle`. Backed by `.collapsible*` in theme.css, whose colors
+ *   are all theme tokens so it flips correctly in dark mode. Establishes the
+ *   canonical shape for the hand-rolled toggles scattered across views
+ *   (.expand-btn + .pf-chevron, .scope-advanced-toggle, .pkv-entry-arrow); those
+ *   bespoke toggles are left in place where their expanded markup is wired into
+ *   view state — this is the target for new collapsible sections.
+ * @structure Collapsible({ title, open, onToggle, children }) — renders
+ *   `<div class="collapsible">` containing a `.collapsible-header` button
+ *   (title + `.collapsible-chevron` with an `.open` modifier) and, when open, a
+ *   `.collapsible-body` wrapping the children.
+ * @usage
+ *   import { Collapsible } from '/components/index.js';
+ *   const [open, setOpen] = useState(false);
+ *   html`<${Collapsible} title=${t('...')} open=${open} onToggle=${() => setOpen(!open)}>
+ *     ${body}
+ *   <//>`
+ * @version-history
+ *   v1.0.0 — 2026-06-02 — Component unification (#23): created canonical
+ *     expand/collapse section, consolidating the .expand-btn + .pf-chevron,
+ *     .scope-advanced-toggle and .pkv-entry-arrow toggle patterns.
+ */
+export function Collapsible({ title, open, onToggle, children }) {
+  return html`<div class="collapsible">
+    <button type="button" class="collapsible-header" aria-expanded=${!!open} onClick=${onToggle}>
+      <span class="collapsible-title">${title}</span>
+      <span class="collapsible-chevron ${open ? 'open' : ''}">▼</span>
+    </button>
+    ${open && html`<div class="collapsible-body">${children}</div>`}
+  </div>`;
+}