aimeat 1.18.0 → 1.19.0

package/README.md

@@ -15,11 +15,16 @@ AIMEAT is an open protocol for AI agent infrastructure. It gives agents (Claude,
 
 <p align="center">
   <img src="assets/screenshots/portal-landing.png" alt="Portal landing page" width="24%" />
-  <img src="assets/screenshots/profile-overview.png" alt="User profile" width="24%" />
+  <img src="assets/screenshots/profile-overview.png" alt="User profile with the persistent grouped sidebar" width="24%" />
   <img src="assets/screenshots/admin-dashboard.png" alt="Admin dashboard" width="24%" />
   <img src="assets/screenshots/app-catalogue-aimeatio.png" alt="App catalogue" width="24%" />
 </p>
 
+<p align="center">
+  <img src="assets/screenshots/profile-mobile.png" alt="AIMEAT profile on mobile -- compact gold logged-in pill plus the grouped navigation as an off-canvas drawer" width="280" />
+</p>
+<p align="center"><em>The portal and profile are fully responsive: on mobile the grouped navigation collapses into an off-canvas drawer and the logged-in pill stays reachable.</em></p>
+
 ### See it in action (5:50)
 
 An AI agent connects to an AIMEAT node and reaches full operational readiness autonomously:
@@ -153,6 +158,12 @@ For MCP-capable runtimes (Claude Desktop, MCP-aware IDEs), run `aimeat connect s
 
 Claude Pro, ChatGPT Plus, and other MCP-capable AIs connect directly as MCP clients. OpenClaw, Hermes, Claude Code, and Cursor all work. Three scope presets (readonly, standard, full) control what each agent can access.
 
+### Connect agent platforms (Dify, n8n, Open WebUI, ...)
+
+AIMEAT also bridges agent platforms. A tool like Dify, n8n, or Open WebUI is its own island -- the agents and data you build there can't reach agents anywhere else. Pointing the platform at an AIMEAT node changes that, and it's a one-time **MCP** connection: add an MCP server for the node's `/v1/mcp` (or a scoped `/v2/mcp/agent` surface), authorize once in the browser, and the full AIMEAT toolset appears -- no token pasting, no per-tool wiring. The agent can even run Hello Integration on itself (paste the canonical instruction from your profile -> Agents), then immediately read/write shared memory, storage, and knowledge packages, discover other agents, and hire capabilities.
+
+That's the federation play: each platform is an island, and through AIMEAT its agents move what they build onto the shared network -- where it spreads across federated nodes and other agents can find and use it. Walkthrough: [docs/integrations/dify-hello-integration.md](aimeat/docs/integrations/dify-hello-integration.md).
+
 ### Build apps with AI
 
 Tell any AI what you want. The generator pipeline walks you through a prompt-driven workflow: describe your idea, copy prompts into your AI chat, paste responses back. The system validates each component and registers it on your node. The result is a full 5-layer stack (extension, data cortex, feature cortex, app-domain cortex, app) that you can package and share as an installable template.
@@ -299,6 +310,12 @@ With `AIMEAT_ANONYMOUS=true`, anyone can read and do limited writes without regi
 
 Each node runs independently with its own identity and portal. Operators customize through CSS themes (`theme.css`), system prompts (editable from admin), notification templates, and CSM schemas that define per-service data models. Run your own node, your own branding.
 
+### Custom portal templates
+
+The public landing page (`/`) is editable live from the admin **Portal** tab — write the HTML template (with serve-time `{{config:*}}`, `{{memory:portal/*}}`, `{{kv:*}}`, `{{board:*}}` tags), manage portal memory keys and KV pairs, and watch the result render in the inline preview. Following AIMEAT's prompt-driven workflow, the **AI-Assisted Editor** hands you a ready prompt: paste it into any AI chat, paste the JSON bundle it returns back into **Import AI Result**, and your node's front page immediately looks custom. Drop in `<script src="/v1/libs/aimeat-header.js"></script>` and the page also carries the **exact same site header** as the rest of AIMEAT — brand, navigation, theme and language switchers, and the live gold login pill — so visitors can always sign in and reach their profile. Operator templates are trusted: their inline `<script>` runs under the node's CSP via a per-request nonce.
+
+<img src="assets/screenshots/portal-admin-editor.png" alt="Admin Portal tab: live preview of the custom landing page, the HTML template editor with tag reference and active-source status, portal memory keys, KV pairs, and the AI-Assisted Editor (Load AI Prompt -> Import AI Result)" width="760" />
+
 ---
 
 ## Getting Started
@@ -375,6 +392,10 @@ cd aimeat && pnpm exec node --env-file=.env.test.sqlite --import tsx test/run-e2
 
 > The legacy `pnpm test:e2e` (in-memory backend) is deprecated and produces stale failures. Use the SQLite or MongoDB commands instead.
 
+### Synthetic agent traces (dev tool)
+
+[`aimeat/tools/synthtraces/`](aimeat/tools/synthtraces/) is a small self-play harness that generates synthetic AIMEAT agent-session traces: a *persona* model plays the human owner while an *agent* model drives a real node over REST or MCP, producing task-driven traces you can use to benchmark or fine-tune models on the protocol. It runs on free cloud models (OpenRouter `owl-alpha`) or **fully local** via Ollama (`qwen2.5` + `llama3.2`), and ships an eval that scores protocol-correctness (no hallucinated tools, valid memory keys, task completion, token cost). See [tools/README.md](aimeat/tools/README.md).
+
 ---
 
 ## Documentation

package/dist/locales/en.json

@@ -80,6 +80,13 @@
   "profile.scheduler.budgetDesc": "Default opt-in limits applied to schedules created for this agent.",
   "profile.scheduler.budgetSave": "Save budget guards",
   "profile.scheduler.budgetSaved": "Budget guards saved",
+  "profile.scheduler.edit": "Edit",
+  "profile.scheduler.save": "Save",
+  "profile.scheduler.saved": "Schedule updated",
+  "profile.scheduler.dispatches": "Creates each run",
+  "profile.scheduler.soon": "soon",
+  "profile.scheduler.paused": "paused",
+  "profile.scheduler.autoKey": "(auto)",
   "common": {
     "cancel": "Cancel",
     "confirm": "Confirm",
@@ -347,6 +354,13 @@
     },
     "agents": {
       "title": "Your Agents",
+      "active": {
+        "title": "Running now",
+        "empty": "No tasks running right now.",
+        "openHint": "Open this task",
+        "untitled": "Untitled task",
+        "more": "more running (open an agent to see all)"
+      },
       "desc": "Agents are AI identities registered under your account, each with their own identity, scopes, tools, tasks, and memory access. Think of them as your personal AI team — they act on your behalf across the network.",
       "connect": "Connect an Automation Agent",
       "connectDesc": "Connect an AI agent to your account using the AIMEAT connector CLI or an agent-capable runtime. The connector is the easiest path because it gives the agent a persistent identity, approved scopes, local skill bundle, and MCP access to AIMEAT tools:",
@@ -3676,6 +3690,20 @@
     "portalLbStatus": "Sync Status",
     "portalLbSyncNow": "Sync Now",
     "portalLbSyncDone": "Portal sync completed.",
+    "portalActiveSource": "Active source",
+    "portalCustomActive": "Custom template",
+    "portalDefaultActive": "Default app (built-in SPA)",
+    "portalDefaultExplain": "No custom template is stored, so visitors see the built-in app. The editor below starts empty. Click \"{action}\" to load the current page's HTML as a starting point, then edit and save it to override the default.",
+    "portalCustomExplain": "A custom template is active and overrides the built-in app. Edit it below and save, or reset to default to bring the built-in app back.",
+    "portalLoadCurrent": "Load current page",
+    "portalLoadCurrentConfirm": "Replace the editor contents with the current page's HTML? Unsaved edits will be lost.",
+    "portalLoadedCurrent": "Loaded current page into the editor — review and click Save Template to apply.",
+    "portalAiBundleExplain": "Paste the JSON bundle the AI produced here. It can include the template, portal memory keys, and KV pairs — they are all applied at once.",
+    "portalAiBundlePlaceholder": "Paste the AI's JSON result here: { \"template\": \"<!DOCTYPE html>...\", \"memory\": { \"portal/about\": \"...\" }, \"kv\": {} }",
+    "portalImportDone": "Imported: {summary}",
+    "portalImportInvalid": "That doesn't look like a valid AI bundle. Expected JSON with a \"template\", \"memory\", or \"kv\" field.",
+    "portalSaveLooksLikeJson": "This looks like an AI JSON bundle, not an HTML template. Paste it into \"Import AI Result\" below instead.",
+    "portalMemorySaved": "Portal memory key saved.",
     "cors": "CORS",
     "corsTitle": "CORS Origin Management",
     "corsNodeDefault": "Node Default Origins",

package/dist/locales/fi.json

@@ -80,6 +80,13 @@
   "profile.scheduler.budgetDesc": "Oletusarvoiset valinnaiset rajat, jotka koskevat tälle agentille luotuja ajastuksia.",
   "profile.scheduler.budgetSave": "Tallenna budjettirajat",
   "profile.scheduler.budgetSaved": "Budjettirajat tallennettu",
+  "profile.scheduler.edit": "Muokkaa",
+  "profile.scheduler.save": "Tallenna",
+  "profile.scheduler.saved": "Ajastus päivitetty",
+  "profile.scheduler.dispatches": "Luo joka ajolla",
+  "profile.scheduler.soon": "pian",
+  "profile.scheduler.paused": "tauolla",
+  "profile.scheduler.autoKey": "(auto)",
   "common": {
     "cancel": "Peruuta",
     "confirm": "Vahvista",
@@ -347,6 +354,13 @@
     },
     "agents": {
       "title": "Agenttisi",
+      "active": {
+        "title": "Käynnissä nyt",
+        "empty": "Ei käynnissä olevia taskeja juuri nyt.",
+        "openHint": "Avaa tämä taski",
+        "untitled": "Nimetön taski",
+        "more": "lisää käynnissä (avaa agentti nähdäksesi kaikki)"
+      },
       "desc": "Agentit ovat tilillesi rekisteröityjä AI-identiteettejä, joilla on oma identiteetti, rajaukset, työkalut, tehtävät ja muistipääsy. Ajattele heitä henkilökohtaisena AI-tiiminäsi - ne toimivat puolestasi verkossa.",
       "connect": "Yhdistä automaatioagentti",
       "connectDesc": "Yhdistä tekoälyagentti tilillesi AIMEAT-liittimellä tai agenttia ajavassa ympäristössä. Liitin on helpoin polku, koska se antaa agentille pysyvän identiteetin, hyväksytyt rajaukset, paikallisen taitopaketin ja MCP-pääsyn AIMEAT-työkaluihin:",
@@ -3676,6 +3690,20 @@
     "portalLbStatus": "Synkronointitila",
     "portalLbSyncNow": "Synkronoi nyt",
     "portalLbSyncDone": "Portaalin synkronointi valmis.",
+    "portalActiveSource": "Aktiivinen lähde",
+    "portalCustomActive": "Mukautettu mallipohja",
+    "portalDefaultActive": "Oletussovellus (sisäänrakennettu SPA)",
+    "portalDefaultExplain": "Mukautettua mallipohjaa ei ole tallennettu, joten kävijät näkevät sisäänrakennetun sovelluksen. Alla oleva editori on tyhjä. Paina \"{action}\" ladataksesi nykyisen sivun HTML:n lähtökohdaksi, muokkaa sitä ja tallenna korvataksesi oletuksen.",
+    "portalCustomExplain": "Mukautettu mallipohja on käytössä ja korvaa sisäänrakennetun sovelluksen. Muokkaa sitä alla ja tallenna, tai palauta oletukseksi tuodaksesi sisäänrakennetun sovelluksen takaisin.",
+    "portalLoadCurrent": "Lataa nykyinen sivu pohjaksi",
+    "portalLoadCurrentConfirm": "Korvataanko editorin sisältö nykyisen sivun HTML:llä? Tallentamattomat muutokset menetetään.",
+    "portalLoadedCurrent": "Nykyinen sivu ladattu editoriin — tarkista ja paina Tallenna mallipohja ottaaksesi käyttöön.",
+    "portalAiBundleExplain": "Liitä tähän tekoälyn tuottama JSON-paketti. Se voi sisältää mallipohjan, portaalin muistiavaimet ja KV-parit — ne otetaan käyttöön kaikki kerralla.",
+    "portalAiBundlePlaceholder": "Liitä tekoälyn JSON-tulos tähän: { \"template\": \"<!DOCTYPE html>...\", \"memory\": { \"portal/about\": \"...\" }, \"kv\": {} }",
+    "portalImportDone": "Tuotu: {summary}",
+    "portalImportInvalid": "Tämä ei näytä kelvolliselta tekoälypaketilta. Odotettiin JSON, jossa on \"template\", \"memory\" tai \"kv\" -kenttä.",
+    "portalSaveLooksLikeJson": "Tämä näyttää tekoälyn JSON-paketilta, ei HTML-mallipohjalta. Liitä se alla olevaan \"Tuo tekoälyn tulos\" -kenttään.",
+    "portalMemorySaved": "Portaalin muistiavain tallennettu.",
     "cors": "CORS",
     "corsTitle": "CORS-alkuperähallinta",
     "corsNodeDefault": "Solmun oletusalkuperät",

package/dist/public/css/views/agents-detail.css

@@ -4,6 +4,10 @@
  *   Uses agd- prefix to avoid collisions with other profile styles.
  *   All colors use CSS variables from theme.css.
  * @version-history
+ *   v1.10.0 -- 2026-06-03 -- Add fleet "running now" panel styles (.pf-agd-active,
+ *     -head, -empty, -list, -row, -dot, -agent, -title, -time) for the cross-agent
+ *     active-tasks list between the board and the agent list. All colors tokenized
+ *     (var(--success) running dot/hover, var(--card-bg)/-alt, --border, --text-dim/-muted).
  *   v1.9.0 -- 2026-06-02 -- Component unification (#24 search bar): tokenize the
  *     hardcoded hex fallbacks in .pf-agd-search-input (var(--border, #E5E7EB) ->
  *     var(--border); var(--card-bg, #FFFFFF) -> var(--card); var(--text, #1A1A2E)
@@ -49,6 +53,7 @@
  *   v2.22.0 -- 2026-06-02 -- Add divider line above the tab bar (border-top + spacing) so tabs don't blend with the status row above
  *   v2.23.0 -- 2026-06-02 -- Compact .md-body styles for agent message bubbles (Markdown-rendered outbound replies)
  *   v2.24.0 -- 2026-06-02 -- Compact .md-body styles for Markdown-rendered non-JSON task memory values (pf-agd-task-memory-md)
+ *   v2.25.0 -- 2026-06-03 -- Compact .md-body styles for Markdown-rendered task descriptions (pf-agd-task-desc) so long agent-authored prompts render with structure
  *   v2.11.0 -- 2026-05-31 -- Widen the solo pop-out window (and pf-agd-solo max-width) so the agent card matches the list-view width and the full tab bar fits
  *   v2.12.0 -- 2026-05-31 -- Add completed-task deliverable styles (pf-agd-deliverable*) linking a task to its agent-memory output key
  *   v2.13.0 -- 2026-05-31 -- Add per-task blur-title toggle styles (pf-agd-blur-toggle, pf-agd-task-title--blurred) for hiding sensitive titles in screen recordings
@@ -1231,6 +1236,76 @@
   padding: 1rem;
   margin-bottom: 1rem;
 }
+
+/* Fleet "running now" panel (between the board and the agent list). */
+.pf .pf-agd-active {
+  background: var(--card-bg, #FFFFFF);
+  border: 1px solid var(--border, #E5E7EB);
+  border-radius: var(--radius, 8px);
+  padding: 0.75rem 1rem;
+  margin-bottom: 1rem;
+}
+.pf .pf-agd-active-head {
+  margin-bottom: 0.5rem;
+}
+.pf .pf-agd-active-empty {
+  font-size: 0.8rem;
+  color: var(--text-dim, #6B7280);
+}
+.pf .pf-agd-active-list {
+  display: flex;
+  flex-direction: column;
+  gap: 0.25rem;
+}
+.pf .pf-agd-active-row {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  width: 100%;
+  text-align: left;
+  background: var(--card-bg-alt, #F3F4F6);
+  border: 1px solid var(--border, #E5E7EB);
+  border-radius: var(--radius-xs, 6px);
+  padding: 0.4rem 0.6rem;
+  font: inherit;
+  color: inherit;
+  cursor: pointer;
+  transition: border-color 0.15s, background 0.15s;
+}
+.pf .pf-agd-active-row:hover {
+  background: var(--card-bg, #FFFFFF);
+  border-color: var(--success, #10B981);
+}
+.pf .pf-agd-active-dot {
+  flex: 0 0 auto;
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: var(--success, #10B981);
+}
+.pf .pf-agd-active-agent {
+  flex: 0 0 auto;
+  max-width: 30%;
+  font-weight: 600;
+  font-size: 0.8rem;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.pf .pf-agd-active-title {
+  flex: 1 1 auto;
+  min-width: 0;
+  font-size: 0.8rem;
+  color: var(--text-dim, #6B7280);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.pf .pf-agd-active-time {
+  flex: 0 0 auto;
+  font-size: 0.72rem;
+  color: var(--text-muted, #9CA3AF);
+}
 .pf .pf-agd-board-grid {
   display: grid;
   grid-template-columns: repeat(3, 1fr);
@@ -3295,6 +3370,76 @@
 }
 .pf .pf-agd-task-memory-md .md-body th { background: var(--card-bg, #FFFFFF); }
 
+/* Markdown-rendered task descriptions (agent-authored prompts are often long and
+   structured). Compact, mirroring the task-memory variant. The expanded card
+   background is grey (--card-bg-alt), so code chips get a white fill + border for
+   contrast. Paragraphs keep the dim base colour; headings use the normal text
+   colour to stand out. */
+.pf .pf-agd-task-desc .md-body > :first-child { margin-top: 0; }
+.pf .pf-agd-task-desc .md-body > :last-child { margin-bottom: 0; }
+.pf .pf-agd-task-desc .md-body p { margin: 0.3rem 0; }
+.pf .pf-agd-task-desc .md-body h1,
+.pf .pf-agd-task-desc .md-body h2,
+.pf .pf-agd-task-desc .md-body h3,
+.pf .pf-agd-task-desc .md-body h4 {
+  margin: 0.5rem 0 0.2rem;
+  line-height: 1.3;
+  font-size: 0.85rem;
+  color: var(--text, #1A1A2E);
+}
+.pf .pf-agd-task-desc .md-body h1 { font-size: 0.95rem; }
+.pf .pf-agd-task-desc .md-body h2 { font-size: 0.9rem; }
+.pf .pf-agd-task-desc .md-body ul,
+.pf .pf-agd-task-desc .md-body ol { margin: 0.3rem 0; padding-left: 1.3rem; }
+.pf .pf-agd-task-desc .md-body li { margin: 0.12rem 0; }
+.pf .pf-agd-task-desc .md-body a { color: var(--accent, #E8564A); }
+.pf .pf-agd-task-desc .md-body strong { color: var(--text, #1A1A2E); }
+.pf .pf-agd-task-desc .md-body blockquote {
+  margin: 0.35rem 0;
+  padding: 0.15rem 0.55rem;
+  border-left: 3px solid var(--border, #E5E7EB);
+  color: var(--text-dim, #6B7280);
+}
+.pf .pf-agd-task-desc .md-body .md-code {
+  font-family: var(--font-mono, ui-monospace, Menlo, Consolas, monospace);
+  font-size: 0.72rem;
+  background: var(--card-bg, #FFFFFF);
+  border: 1px solid var(--border, #E5E7EB);
+  padding: 0.02rem 0.3rem;
+  border-radius: 4px;
+}
+.pf .pf-agd-task-desc .md-body .md-pre {
+  margin: 0.4rem 0;
+  padding: 0.55rem;
+  background: var(--card-bg, #FFFFFF);
+  border: 1px solid var(--border, #E5E7EB);
+  border-radius: 6px;
+  overflow-x: auto;
+}
+.pf .pf-agd-task-desc .md-body .md-pre .md-code {
+  display: block;
+  white-space: pre;
+  background: none;
+  border: none;
+  padding: 0;
+  tab-size: 4;
+  font-size: 0.72rem;
+  line-height: 1.35;
+  color: var(--text, #1A1A2E);
+}
+.pf .pf-agd-task-desc .md-body table {
+  border-collapse: collapse;
+  margin: 0.35rem 0;
+  font-size: 0.72rem;
+}
+.pf .pf-agd-task-desc .md-body th,
+.pf .pf-agd-task-desc .md-body td {
+  border: 1px solid var(--border, #E5E7EB);
+  padding: 0.2rem 0.45rem;
+  text-align: left;
+}
+.pf .pf-agd-task-desc .md-body th { background: var(--card-bg, #FFFFFF); }
+
 /* Structured JSON view: key/value rows, nested blocks indented with a guide line. */
 .pf .pf-agd-json-block { display: flex; flex-direction: column; gap: 0.05rem; }
 .pf .pf-agd-json-row {

package/dist/public/css/views/scheduler.css

@@ -98,3 +98,19 @@
 .sch-form-actions { display: flex; justify-content: flex-end; }
 
 .sch-budget-section { margin-bottom: 1rem; }
+
+/* ── Editable schedule card (master + agent views) ── */
+.sch-card-list { display: flex; flex-direction: column; gap: 0.6rem; }
+.sch-card {
+  background: var(--card); border: 1px solid var(--border); border-radius: var(--radius);
+  padding: 0.75rem 0.9rem; display: flex; flex-direction: column; gap: 0.5rem;
+}
+.sch-card-head { display: flex; align-items: flex-start; justify-content: space-between; gap: 0.75rem; flex-wrap: wrap; }
+.sch-card-title { display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; min-width: 0; }
+.sch-card-meta { display: flex; flex-wrap: wrap; gap: 0.3rem 1rem; font-size: 0.82rem; color: var(--text); }
+.sch-meta-k { color: var(--text-dim); }
+.sch-card-dispatch { background: var(--bg-dim); border-radius: var(--radius-sm); padding: 0.5rem 0.7rem; }
+.sch-dispatch-label { font-size: 0.66rem; font-weight: 700; letter-spacing: 0.05em; text-transform: uppercase; color: var(--text-dim); margin-bottom: 0.2rem; }
+.sch-dispatch-title { font-weight: 600; font-size: 0.9rem; color: var(--text); white-space: pre-wrap; }
+.sch-dispatch-body { font-size: 0.84rem; color: var(--text-dim); margin-top: 0.15rem; white-space: pre-wrap; word-break: break-word; }
+.sch-edit { display: flex; flex-direction: column; gap: 0.55rem; border-top: 1px solid var(--border); padding-top: 0.6rem; }

package/dist/public/js/services/admin.js

@@ -152,6 +152,9 @@ export const saveSiteTemplate = (tmpl)  => apiPost('/v1/site/template', { templa
 export const deleteSiteTemplate = ()    => apiDelete('/v1/site/template');
 export const getSiteChangelog = ()      => apiGet('/v1/site/changelog');
 export const getSiteMemoryKeys = ()     => apiGet('/v1/site/memory-keys');
+export const setSiteMemory    = (key, value) => apiPost('/v1/site/memory', { key, value });
+export const deleteSiteMemory = (key)   => apiDelete(`/v1/site/memory/${encodeURIComponent(key)}`);
+export const importSiteBundle = (bundle) => apiPost('/v1/site/import', bundle);
 export const clearSiteCache   = ()      => apiPost('/v1/site/cache-invalidate');
 export const getSitePrompt    = ()      => apiGet('/v1/site/prompt');
 export const triggerLbSync    = ()      => apiPost('/v1/admin/site/sync');

package/dist/public/llms-template.txt

@@ -35,6 +35,16 @@ write the HTML using the starter template and SDK libraries below.
 Do not ask about deployment, cortex, extensions, CSM, or
 architecture. Just ask what the app should do and start building.
 
+Two starter templates follow. Pick by who needs to read the content:
+
+- **Starter Template** (default, login-gated) — the visitor signs in and
+  works with their own data (notes, trackers, multiplayer, galleries).
+  Nothing renders until there is a session.
+- **Public viewer template** (readable without login) — the content is
+  shown to everyone, no account required; the owner logs in only to edit.
+  Use it for public-facing readers: a public newspaper, directory,
+  noticeboard, or gallery that pulls from PUBLIC memory.
+
 ### Starter Template (use this for every app)
 
 ```html
@@ -93,6 +103,164 @@ entry: index.html
 </html>
 ```
 
+### Public viewer template — readable without login
+
+Use this when the content must be visible to anyone, with no account
+(public newspaper, directory, noticeboard, gallery). It differs from the
+default Starter Template in three ways:
+
+1. **`startApp()` runs for everyone.** The login bar still mounts, but the
+   app never waits for a session — anonymous visitors render immediately.
+2. **Reads use `getPublic(gaii, key)` only.** This is the single read that
+   works without a token (it hits `GET /v1/memory/:gaii/:key` and returns
+   PUBLIC entries). Do NOT use `AIMEAT.data.get/list/search` for the shown
+   content — those require a session and read the *caller's* namespace, not
+   the publisher's. There is no anonymous "list public keys" call.
+3. **Content lives behind one public index key.** The publisher keeps a
+   single PUBLIC key (a "front page") whose value lists each item with its
+   own `gaii` + `key`. The viewer reads the index, then fans out to each
+   item. The bodies can sit under many different authors (e.g. several
+   writer agents) — only the index has a fixed home, and it carries every
+   item's full `gaii`, so the app never has to know each author up front.
+
+```html
+<!-- AIMEAT App Manifest
+name: public-viewer
+version: 1.0.0
+description: Reads public memory and shows it to everyone — no login required
+entry: index.html
+-->
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Public Viewer</title>
+  <link href="https://cdn.jsdelivr.net/npm/daisyui@5" rel="stylesheet" />
+  <script src="https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4"></script>
+</head>
+<body class="bg-base-100 min-h-screen flex flex-col">
+  <nav class="navbar bg-base-200 shadow-sm px-4">
+    <div class="flex-1"><span class="text-lg font-bold">Public Viewer</span></div>
+    <!-- Login bar mounts for everyone. Anonymous visitors just read; the
+         owner can sign in to edit. Reading never depends on it. -->
+    <div class="flex-none"><span id="header-auth"></span></div>
+  </nav>
+  <div id="app" class="flex-1 p-4">Loading…</div>
+  <script>
+    // ── Where the public index lives (fill these in) ──
+    // PUBLISHER is the gaii that owns INDEX_KEY:
+    //   • owner-run public site → the owner GHII, e.g. 'alice@aimeat-fi-001-genesis'
+    //   • agent/pipeline-fed feed → the publishing agent GAII,
+    //     e.g. 'editor#alice@aimeat-fi-001-genesis'
+    // (To auto-derive the owner GHII from the app's /v1/apps/:owner/ URL, read
+    //  it from location.pathname — but an explicit value is clearer and avoids
+    //  guessing the node id.)
+    const PUBLISHER = 'OWNER_OR_AGENT@NODE_ID';   // ← set this
+    const INDEX_KEY = 'newspaper.frontpage';      // ← a PUBLIC key holding the item list
+
+    function loadScript(src) {
+      return new Promise((resolve, reject) => {
+        const s = document.createElement('script');
+        s.src = src; s.onload = resolve; s.onerror = reject;
+        document.head.appendChild(s);
+      });
+    }
+
+    async function boot() {
+      await loadScript('/v1/libs/aimeat-auth.js');
+      await loadScript('/v1/libs/aimeat-data.js');
+
+      // The login bar renders for everyone. Owner login unlocks editing;
+      // logout returns to read-only. Re-render on either so the UI matches.
+      AIMEAT.auth.mountLoginButton('#header-auth', {
+        onLogin: () => location.reload(),
+        onLogout: () => location.reload(),
+      });
+
+      // Restore an existing session if there is one — but DO NOT gate on it.
+      await AIMEAT.auth.login();   // owner session, or null for an anonymous visitor
+      startApp();                  // ALWAYS render — anonymous visitors included
+    }
+
+    async function startApp() {
+      const session = AIMEAT.auth.getSession();      // null when nobody is logged in
+      // Editing is offered only when the logged-in owner actually owns the index.
+      // For a pipeline-fed feed (PUBLISHER is an agent), the app stays read-only
+      // and the pipeline maintains the front page.
+      const canEdit = !!session && session.ghii === PUBLISHER;
+      const app = document.getElementById('app');
+
+      // ── Anonymous-safe read: the public front-page index ──
+      const index = await AIMEAT.data.getPublic(PUBLISHER, INDEX_KEY) || [];
+      // index item shape (you choose it): { gaii, key, title, date, summary }
+
+      // Fan out to each item's public body. Items may live under different
+      // authors — the index carries each item's full gaii.
+      const items = (await Promise.all(index.map(async (item) => {
+        const body = await AIMEAT.data.getPublic(item.gaii, item.key);
+        return body ? { ...item, body } : null;
+      }))).filter(Boolean);
+
+      render(app, items, canEdit);
+    }
+
+    function render(app, items, canEdit) {
+      const header = canEdit
+        ? '<div class="mb-4"><button id="new-btn" class="btn btn-primary btn-sm">New article</button></div>'
+        : '';
+      const body = items.length
+        ? items.map(a =>
+            '<article class="card bg-base-200 mb-3"><div class="card-body">' +
+            '<h2 class="card-title">' + esc(a.title || a.key) + '</h2>' +
+            '<p class="text-xs opacity-60">' + esc(a.date || '') + '</p>' +
+            // Public content can come from anyone — ALWAYS escape before insert.
+            // Never assign a raw public value to innerHTML.
+            '<div>' + esc(typeof a.body === 'string' ? a.body : (a.body.text ?? JSON.stringify(a.body))) + '</div>' +
+            '</div></article>'
+          ).join('')
+        : '<p class="opacity-70">No content published yet.</p>';
+      app.innerHTML = header + body;
+      if (canEdit) document.getElementById('new-btn').onclick = publishArticle;
+    }
+
+    // Owner-only: write a PUBLIC article and prepend it to the PUBLIC index.
+    // Both writes land in the owner's GHII namespace (= PUBLISHER here), so the
+    // viewer reads them straight back via getPublic.
+    async function publishArticle() {
+      const title = prompt('Title?'); if (!title) return;
+      const text = prompt('Body?') || '';
+      const session = AIMEAT.auth.getSession();
+      const now = new Date().toISOString();
+      const key = 'newspaper.article.' + Date.now();
+      await AIMEAT.data.set(key, { title, text, date: now }, { visibility: 'public' });
+      const index = await AIMEAT.data.getPublic(PUBLISHER, INDEX_KEY) || [];
+      index.unshift({ gaii: session.ghii, key, title, date: now });
+      await AIMEAT.data.set(INDEX_KEY, index, { visibility: 'public' });
+      location.reload();
+    }
+
+    function esc(s) { const d = document.createElement('div'); d.textContent = s == null ? '' : String(s); return d.innerHTML; }
+    boot();
+  </script>
+</body>
+</html>
+```
+
+**Public viewer rules:**
+- Call `startApp()` unconditionally. Never `if (session) startApp()` — that is
+  what leaves anonymous visitors stuck on "Loading…".
+- `getPublic(gaii, key)` is the only anonymous read. `get/list/search/set`
+  all require a login and operate on the caller's own namespace.
+- Everything the public sees must be written with `visibility: 'public'` —
+  the index key and every item body.
+- The index is the single source the app must know; it carries each item's
+  full `gaii`, so bodies can be spread across many author agents.
+- Public content is untrusted input. Escape it before inserting into the DOM
+  (the template's `esc()` does this). Never `innerHTML` a raw public value.
+- Owner editing is a UX affordance gated on `session.ghii === PUBLISHER`; the
+  server is the real boundary (it rejects public writes without an owner session).
+
 ### SDK Libraries (add to boot() as needed)
 
 | Library | Load with | Use for |
@@ -340,7 +508,7 @@ entry: index.html
       // AIMEAT.data.delete(key) — delete entry
       // AIMEAT.data.search(query) — search across keys and values
       // AIMEAT.data.list() — list all keys
-      // AIMEAT.data.getPublic(gaii, key) — read another user's public data
+      // AIMEAT.data.getPublic(gaii, key) — read another user's public data (no login required)
 
       // Example: load saved data or initialize
       let notes = await AIMEAT.data.get('my-app.notes') || [];
@@ -576,7 +744,7 @@ await AIMEAT.data.update(key, value, version) // optimistic locking update
 await AIMEAT.data.delete(key)            // delete entry
 await AIMEAT.data.list()                 // list all keys
 await AIMEAT.data.search(query)          // full-text search
-await AIMEAT.data.getPublic(gaii, key)   // read another user's public data
+await AIMEAT.data.getPublic(gaii, key)   // read another user's public data (no login — the only anonymous read; see "Public viewer template")
 ```
 
 **AIMEAT.storage** (`/v1/libs/aimeat-storage.js`):

package/dist/public/oauth-consent.html

@@ -363,7 +363,13 @@
               });
             }
           } else {
-            throw new Error(d.error_description || d.error || t('errorGeneric'));
+            // d.error may be an OAuth string ("invalid_request") OR an AIMEAT
+            // envelope object ({code,message}); never stringify the object as
+            // "[object Object]" — surface the real message.
+            const msg = d.error_description
+              || (typeof d.error === 'string' ? d.error : d.error && d.error.message)
+              || t('errorGeneric');
+            throw new Error(msg);
           }
         } catch (err) {
           errEl.textContent = err.message;