aimeat 1.2.0

package/dist/.env.example

@@ -0,0 +1,300 @@
+# AIMEAT Node Configuration
+# Copy this file to .env and adjust values for your environment.
+# All values shown are defaults — uncomment and change as needed.
+
+# ── Node Identity ──────────────────────────────────────────────
+AIMEAT_NODE_ID="aimeat-local-001-dev"
+AIMEAT_PORT=40050
+# AIMEAT_NODE_TYPE="full"         # full | relay | mirror
+# AIMEAT_BASE_URL="https://your-domain.com"  # Public URL (default: http://localhost:$PORT)
+
+# ── Storage Backend ───────────────────────────────────────────
+# Choose storage: memory (default, data lost on restart), sqlite (file-based, zero-config), mongodb (production)
+# AIMEAT_STORAGE="memory"
+
+# SQLite — file path for the database (auto-created on first run)
+# AIMEAT_SQLITE_PATH="./data/aimeat.db"
+
+# MongoDB — required when AIMEAT_STORAGE=mongodb
+# DATABASE_URL="mongodb://user:pass@localhost:27017/AIMEAT?replicaSet=rs0&authSource=admin"
+
+# ── Operator / Admin ───────────────────────────────────────────
+# Auto-generated on startup if not set (printed to console)
+# AIMEAT_ADMIN_PASSWORD="TestAdminPw123!"
+
+# ── Modes ──────────────────────────────────────────────────────
+# Dev mode: bypasses OTK validation on micro-memory
+# AIMEAT_DEV_MODE=false
+
+# Anonymous mode: no auth required, all agents share one memory space.
+# Runs alongside normal auth — both work simultaneously.
+# On startup creates anonymous owner+agent automatically.
+# Startup logs will show the anonymous prompt URL and share prompt URL.
+# AIMEAT_ANONYMOUS=false
+# CORS: comma-separated list of allowed origins, or * for all (default: *)
+# AIMEAT_CORS_ALLOWED_ORIGINS=*
+# AIMEAT_CORS_ALLOWED_ORIGINS=https://portal.aimeat.fi,https://my-app.example.com
+# ── Auth & Tokens ──────────────────────────────────────────────
+# AIMEAT_JWT_TTL=3600              # JWT lifetime in seconds (default: 1h)
+# AIMEAT_OTK_TTL_MS=300000        # OTK expiry in ms (default: 5min)
+# AIMEAT_OTK_GRACE_MS=60000       # OTK grace period in ms (default: 1min)
+
+# ── Morsel Economy ─────────────────────────────────────────────
+# AIMEAT_WELCOME_BONUS=100
+# AIMEAT_DAILY_ALLOWANCE=50
+# AIMEAT_DAILY_ALLOWANCE_CAP=500
+# AIMEAT_BURN_RATE=0.10
+# AIMEAT_MAX_OPERATOR_MINT_PER_DAY=10000
+# AIMEAT_BOARD_POST_BASE_COST=5
+# AIMEAT_BOARD_POST_COST_PER_KB=2
+
+# ── Features ───────────────────────────────────────────────────
+# AIMEAT_KEYED_BROWSE=true         # Tier 0.5 keyed browse (set "false" to disable)
+# AIMEAT_EXTENDED_FEATURES=true    # Boards, federation, storage, validate (set "false" to disable)
+
+# ── Quotas ─────────────────────────────────────────────────────
+# AIMEAT_MEMORY_QUOTA_MB=10
+# AIMEAT_MEMORY_MAX_VALUE_SIZE_KB=1024
+# AIMEAT_MEMORY_MAX_KEYS=1000
+# AIMEAT_STORAGE_QUOTA_MB=100
+# AIMEAT_STORAGE_MAX_FILE_SIZE_MB=10
+# AIMEAT_STORAGE_MAX_CHUNKED_FILE_SIZE_GB=5
+# AIMEAT_MICRO_MEMORY_QUOTA_KB=500
+# AIMEAT_MICRO_MEMORY_MAX_SETS=50
+# AIMEAT_MICRO_MEMORY_MAX_KEYS_PER_SET=100
+# AIMEAT_MICRO_MEMORY_MAX_VALUE_SIZE=16384
+# AIMEAT_MAX_ACTIONS_PER_AGENT=20
+# AIMEAT_MIN_TRUST_PAID_ACTIONS=10
+# AIMEAT_APP_MAX_SIZE_MB=5
+# AIMEAT_AGENT_PORTING_FEE=50
+# AIMEAT_MEMORY_OVERAGE_MORSELS=10
+# AIMEAT_STORAGE_OVERAGE_MORSELS=100
+# AIMEAT_MAX_URL_LENGTH=8192
+
+# ── Federation ─────────────────────────────────────────────────
+# AIMEAT_FEDERATION_ROLE="standalone"  # operator | contributor | standalone
+# AIMEAT_GENESIS_URL=""                # Genesis node URL (for contributor role)
+# AIMEAT_MAX_RELAY_HOPS=3
+# AIMEAT_DEPEERING_GRACE_HOURS=72
+# AIMEAT_KEY_CACHE_REFRESH_MINUTES=5
+
+# ── Work Queue ─────────────────────────────────────────────────
+# AIMEAT_WEBHOOK_MAX_RETRIES=5
+# AIMEAT_WORK_QUEUE_MAX_PENDING=10
+
+# ── Rate Limits (requests per second) ─────────────────────────
+# Global default — all endpoints inherit this unless overridden
+# AIMEAT_RL_GLOBAL=300
+#
+# Per-tier limits (applied to route groups)
+# AIMEAT_RL_AUTH=20
+# AIMEAT_RL_WORK=60
+# AIMEAT_RL_MEMORY=120
+# AIMEAT_RL_BOARDS=60
+#
+# Per-endpoint overrides (optional — defaults to global if not set)
+# AIMEAT_RL_OWNERS=300
+# AIMEAT_RL_GHII=300
+# AIMEAT_RL_FLAGS=300
+# AIMEAT_RL_APPEALS=300
+# AIMEAT_RL_ADMIN_SETUP=300
+# AIMEAT_RL_FEDERATION=300
+# AIMEAT_RL_CATALOGUE=300
+# AIMEAT_RL_AUTH_CHALLENGE=300
+
+# ── Personal Nodes ───────────────────────────────────────────
+# AIMEAT_PERSONAL_NODES_ENABLED=true
+# AIMEAT_PERSONAL_NODE_MAX_SLOTS=100
+# AIMEAT_PERSONAL_MAILBOX_QUOTA_MB=50
+# AIMEAT_PERSONAL_MAILBOX_RETENTION_DAYS=7
+# AIMEAT_PERSONAL_HEARTBEAT_MS=30000
+# AIMEAT_PERSONAL_OFFLINE_MS=300000
+
+# ── Email / SMTP (Phase 1.1) ────────────────────────────────
+# AIMEAT_SMTP_HOST="smtp.example.com"
+# AIMEAT_SMTP_PORT=587
+# AIMEAT_SMTP_USER="noreply@example.com"
+# AIMEAT_SMTP_PASS="secret"
+# AIMEAT_SMTP_FROM="AIMEAT <noreply@example.com>"
+# AIMEAT_SMTP_SECURE=false
+# AIMEAT_SMTP_REJECT_UNAUTHORIZED=false  # Set to false for STARTTLS with self-signed certs
+# AIMEAT_EMAIL_CONFIRMATION_REQUIRED=false
+
+# ── Consent Layer (Phase 0.3) ────────────────────────────────
+# AIMEAT_CONSENT_EXPIRY_CHECK_INTERVAL_MS=60000  # How often to check for expired consents (default: 1 min)
+# AIMEAT_CONSENT_DEFAULT_SCOPE="federation"       # Default consent scope: private | dmz | federation
+# AIMEAT_CONSENT_MAX_PER_AGENT=100                # Max consent grants per agent
+
+# ── TOTP / 2FA (Phase 0.5) ──────────────────────────────────
+# AIMEAT_TOTP_ENABLED=true                # Enable TOTP 2FA support
+# AIMEAT_TOTP_ISSUER="AIMEAT"             # Issuer name shown in authenticator apps
+# AIMEAT_TOTP_PERIOD=30                   # TOTP code period in seconds
+# AIMEAT_TOTP_WINDOW=1                    # Acceptable time drift window (±1 period)
+# AIMEAT_TOTP_BACKUP_CODE_COUNT=10        # Number of backup codes generated
+# AIMEAT_TOTP_SECRET_ENCRYPTION_KEY=""    # Hex-encoded 32-byte AES key for encrypting TOTP secrets
+#                                          # Generate: openssl rand -hex 32
+# AIMEAT_TOTP_MAX_FAILED_ATTEMPTS=5       # Max failed TOTP attempts before lockout
+# AIMEAT_TOTP_LOCKOUT_SECONDS=300         # Lockout duration after max failed attempts (default: 5 min)
+
+# ── Match Notifications (Phase 1.6) ────────────────────────────
+# AIMEAT_MATCH_NOTIFICATION_INTERVAL_HOURS=24  # How often to check for new matches
+# AIMEAT_MATCH_NOTIFICATION_ENABLED=true        # Operator can disable
+
+# ── AI Matching (Phase 2.1) ─────────────────────────────────
+# AIMEAT_MATCHING_ENABLED=true
+# AIMEAT_MATCH_INTERVAL_HOURS=24          # How often matching runs
+# AIMEAT_MATCH_THRESHOLD=0.5              # Minimum match score (0.0-1.0)
+# AIMEAT_MATCH_MAX_SUGGESTIONS=5          # Max suggestions per user per round
+# AIMEAT_MATCH_MAX_DISTANCE_KM=100        # Max distance for matching
+# AIMEAT_MATCH_COOLDOWN_DAYS=7            # Same pair re-suggested after this
+
+# ── Marketplace (Phase 2.6) ───────────────────────────────────
+# AIMEAT_MARKETPLACE_ENABLED=true           # Enable marketplace feature
+# AIMEAT_MARKETPLACE_LISTING_FEE=2          # Listing fee in morsels
+# AIMEAT_MARKETPLACE_TX_FEE_PERCENT=5       # Transaction fee percentage (buyer pays)
+# AIMEAT_MARKETPLACE_ESCROW=true            # Enable escrow for purchases
+
+# ── IndexNow (Bing/Yandex search indexing) ─────────────────────
+# Generate a key: openssl rand -hex 16
+# After setting, run: pnpm indexnow
+# AIMEAT_INDEXNOW_KEY="your-hex-key-here"
+
+# ── Push Notifications / PWA (Phase 3.1) ────────────────────
+# Generate VAPID keys: npx web-push generate-vapid-keys
+# AIMEAT_PUSH_ENABLED=true
+# AIMEAT_VAPID_PUBLIC_KEY=""
+# AIMEAT_VAPID_PRIVATE_KEY=""
+# AIMEAT_VAPID_SUBJECT="mailto:admin@aimeat.example.com"
+# AIMEAT_PUSH_NOTIFY_TYPES="work_assignment,action_request"  # message types that trigger push notification
+# AIMEAT_PUSH_COOLDOWN_MIN=5                                 # minimum minutes between notifications per node
+# AIMEAT_PUSH_MAX_SUBSCRIPTIONS_PER_NODE=5                   # max push subscriptions per personal node
+# AIMEAT_PUSH_MAX_FAILURES=3                                 # auto-remove subscription after N consecutive failures
+# AIMEAT_EMAIL_RATE_LIMIT_MIN=30                             # minimum minutes between email notifications per node
+
+# ── EUDIW / Identity Verification (Phase 3.3) ────────────────
+# AIMEAT_EUDIW_ENABLED=false
+# AIMEAT_EUDIW_CLIENT_ID="aimeat-verifier-001"
+# AIMEAT_EUDIW_REDIRECT_URI="https://your-node.example/v1/ghii/verify/eudiw/callback"
+# AIMEAT_FTN_ENABLED=false
+# AIMEAT_FTN_PROVIDER_URL="https://tunnistautuminen.suomi.fi"
+# AIMEAT_VC_ISSUER_DID="did:web:your-node.example"
+
+# ── Consul (optional fleet management) ───────────────────────
+# Connect to HashiCorp Consul for centralized config management across nodes.
+# Values in Consul KV take precedence over file/.env but below database overrides.
+# AIMEAT_CONSUL_ENABLED=false
+# AIMEAT_CONSUL_URL=http://localhost:8500
+# AIMEAT_CONSUL_PREFIX=aimeat/config
+# AIMEAT_CONSUL_TOKEN=
+# AIMEAT_CONSUL_WATCH_INTERVAL=30
+# AIMEAT_CONSUL_DATACENTER=
+
+# ── Cross-Federation (Phase 3.4) ────────────────────────────
+# AIMEAT_CROSS_FEDERATION_ENABLED=true
+# AIMEAT_MAX_GENESIS_PEERS=10
+# AIMEAT_GENESIS_SYNC_INTERVAL_HOURS=6
+
+# ── Federation Data Sync ─────────────────────────────────
+# AIMEAT_SYNC_MODE="hybrid"                   # bulk | instant | hybrid
+# AIMEAT_SYNC_INTERVAL_HOURS=6                # Scheduled sync fallback interval
+# AIMEAT_SYNC_BATCH_DELAY_MS=5000             # Event batching window (instant/hybrid mode)
+# AIMEAT_REPLICATION_QUEUE_MAX=10000           # Max replication queue entries
+# AIMEAT_REPLICATION_QUEUE_TTL_HOURS=72        # Max age of replication queue entries
+# AIMEAT_MAX_CONCURRENT_SYNCS=5               # Max parallel outbound sync operations
+# AIMEAT_FEDERATION_TIMEOUT_MS=10000           # Timeout for outbound federation HTTP requests
+# AIMEAT_GENESIS_MEMORY_CACHE=false            # Cache routed genesis memory results locally
+# AIMEAT_GENESIS_MEMORY_CACHE_TTL_HOURS=4      # Genesis memory cache TTL
+
+# ── Cookie Consent (for service builders) ────────────────────
+# Opt-in cookie consent banner for portal HTML pages.
+# Uses vanilla-cookieconsent v3. Disabled by default.
+# AIMEAT_COOKIE_CONSENT_ENABLED=false
+# AIMEAT_COOKIE_CONSENT_CATEGORIES="necessary,analytics,marketing"
+# AIMEAT_COOKIE_CONSENT_POLICY_URL="https://example.com/privacy"
+
+# ── Realtime P2P Rooms ───────────────────────────────────────
+# AIMEAT_REALTIME_ENABLED=true                      # Enable realtime room discovery & signaling
+# AIMEAT_REALTIME_MAX_ROOMS=100                     # Max concurrent rooms on this node
+# AIMEAT_REALTIME_MAX_PEERS_PER_ROOM=20             # Max peers per room
+# AIMEAT_REALTIME_ROOM_IDLE_TIMEOUT_MS=3600000      # Empty room cleanup timeout (default: 1h)
+# AIMEAT_REALTIME_MAX_MESSAGE_SIZE_BYTES=16384      # Max WebSocket message size (default: 16 KB)
+# AIMEAT_STUN_SERVERS="stun:stun.l.google.com:19302,stun:stun1.l.google.com:19302"
+# AIMEAT_TURN_SERVER=""                              # TURN server URL (e.g. turn:turn.example.com:3478)
+# AIMEAT_TURN_USERNAME=""                            # TURN credentials
+# AIMEAT_TURN_CREDENTIAL=""
+# ── Encrypted Chat ────────────────────────────────────────────
+# AIMEAT_ECHAT_ANONYMOUS=false                     # Allow anonymous echat WS connections (default: false)
+
+# ── Node Portal (Site) ──────────────────────────────────────
+# AIMEAT_SITE_ENABLED=true                           # Serve portal at GET /
+# AIMEAT_SITE_MAX_TEMPLATE_SIZE_KB=512               # Max custom template size
+# AIMEAT_SITE_CACHE_TTL_SECONDS=60                   # Resolved HTML cache lifetime
+# AIMEAT_SITE_KV_REGION="Helsinki"                   # Custom KV pair → {{kv:region}}
+# AIMEAT_SITE_KV_CONTACT="admin@example.fi"          # Custom KV pair → {{kv:contact}}
+
+# ── Node Portal Load-Balancer Sync ──────────────────────────
+# AIMEAT_SITE_LB_ENABLED=false                        # Enable LB sync mode (mirrors portal from origin)
+# AIMEAT_SITE_LB_ORIGIN_URL=https://aimeat.io         # Origin node URL to sync from
+# AIMEAT_SITE_LB_SYNC_INTERVAL_MIN=30                 # Sync interval in minutes
+# AIMEAT_SITE_LB_SYNC_ON_STARTUP=true                 # Sync immediately on startup
+
+# ── Setup Wizard (Phase 1.2) ───────────────────────────────
+# Restrict setup wizard access to specific IPs (comma-separated, empty = no restriction)
+# AIMEAT_SETUP_ALLOWED_IPS=127.0.0.1,::1
+
+# ── Content Moderation ─────────────────────────────────────
+# Auto-hide content after this many active flags (default: 5)
+# AIMEAT_AUTO_HIDE_THRESHOLD=5
+
+# ── Statistics ──────────────────────────────────────────────
+AIMEAT_STATS_ENABLED=true
+AIMEAT_STATS_ACCESS=public          # public | authenticated | operator
+
+# ── Scoped Agent Capabilities (REQ-006) ───────────────────────
+# AIMEAT_DEFAULT_AGENT_SCOPES="memory:read,memory:write,catalogue:read"
+# AIMEAT_MAX_AGENT_SCOPES="*"
+
+# ── Prometheus Metrics ─────────────────────────────────────
+# Prometheus metrics endpoint (GET /v1/metrics)
+AIMEAT_METRICS_ENABLED=false
+AIMEAT_METRICS_ACCESS=operator      # public | authenticated | operator
+
+# ── Node Extensions (V8 Isolates) ────────────────────────────
+# AIMEAT_EXTENSIONS_ENABLED=true       # Extension system (default: true)
+# AIMEAT_EXT_MAX_MEMORY_MB=64          # V8 isolate memory limit per action
+# AIMEAT_EXT_TIMEOUT_MS=5000           # V8 isolate CPU timeout per action
+# AIMEAT_EXT_MAX_API_CALLS=50          # Max AIMEAT API calls per action invocation
+# AIMEAT_EXT_MAX_CODE_SIZE_KB=256      # Max JS source size per action
+# AIMEAT_EXT_MAX_INSTALLED=20          # Max extensions installed on this node
+# AIMEAT_EXT_INSTALL_ROLE=operator     # Role required to install extensions: operator | owner (default: operator)
+# AIMEAT_MAX_EXTENSIONS_PER_OWNER=10   # Max extensions per owner when owner-role installs enabled (default: 10)
+
+# ── Service Generator ────────────────────────────────────
+# AIMEAT_GENERATOR_ENABLED=true        # Show Generator tab in profile view (default: true)
+
+# ── Packages & Templates ──────────────────────────────────
+# Master switch for the package system
+# AIMEAT_PACKAGES_ENABLED=true
+# Who can create packages: "operator" (default) or "owner"
+# AIMEAT_PACKAGE_CREATE_ROLE=operator
+# Maximum total size of all components in a package (MB)
+# AIMEAT_PACKAGE_MAX_SIZE_MB=50
+# Maximum number of components per package
+# AIMEAT_PACKAGE_MAX_COMPONENTS=20
+# Maximum packages per author
+# AIMEAT_PACKAGE_MAX_PER_AUTHOR=50
+# Master switch for template gallery
+# AIMEAT_TEMPLATES_ENABLED=true
+# Allow reviews on template listings
+# AIMEAT_TEMPLATE_REVIEWS_ENABLED=true
+# Allow discussions on template listings
+# AIMEAT_TEMPLATE_DISCUSSIONS_ENABLED=true
+# Enable cross-node template sharing via federation
+# AIMEAT_PACKAGE_FEDERATION_ENABLED=false
+# Auto-accept federated templates without operator review
+# AIMEAT_PACKAGE_FEDERATION_AUTO_ACCEPT=false
+
+# ── Portfolio ──
+# AIMEAT_PORTFOLIO=true              # Enable portfolio feature (default: true)
+# AIMEAT_PORTFOLIO_MAX_SIZE_KB=512   # Max portfolio HTML file size (default: 512KB)
+# AIMEAT_PORTFOLIO_MAX_IMAGES=20     # Max images selectable for portfolio prompt (default: 20)

package/dist/bin/aimeat.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=aimeat.d.ts.map

package/dist/bin/aimeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aimeat.d.ts","sourceRoot":"","sources":["../../bin/aimeat.ts"],"names":[],"mappings":""}

package/dist/bin/aimeat.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+/**
+ * AIMEAT CLI entry point.
+ * Delegates to src/index.ts — this file exists as the canonical
+ * bin/ binary per the implementation specification (§2).
+ */
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// Auto-load .env: try CWD first, then the package directory (aimeat/)
+// From dist/bin/aimeat.js -> go up 2 levels to aimeat/
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkgRoot = join(__dirname, '..', '..');
+if (existsSync('.env')) {
+    process.loadEnvFile('.env');
+}
+else if (existsSync(join(pkgRoot, '.env'))) {
+    process.loadEnvFile(join(pkgRoot, '.env'));
+}
+// Dynamic import so .env is loaded before index.ts runs
+await import('../src/index.js');
+//# sourceMappingURL=aimeat.js.map

package/dist/bin/aimeat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aimeat.js","sourceRoot":"","sources":["../../bin/aimeat.ts"],"names":[],"mappings":";AACA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,sEAAsE;AACtE,uDAAuD;AACvD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE5C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACvB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;KAAM,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IAC7C,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,wDAAwD;AACxD,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC"}