aimeat 1.2.0

package/dist/public/js/components/tag-editor.js

@@ -0,0 +1,46 @@
+import { h } from 'preact';
+import { useState } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+
+/**
+ * TagEditor — inline add/remove tag pills with input.
+ * @param {Object} props
+ * @param {string[]} props.tags — current tags on the item
+ * @param {(tags: string[]) => void} props.onSave — called with updated tag array on add/remove
+ * @param {number} [props.maxTags=20] — maximum tags allowed
+ */
+export default function TagEditor({ tags, onSave, maxTags = 20 }) {
+  const [input, setInput] = useState('');
+
+  const addTag = () => {
+    const val = input.trim().slice(0, 64);
+    if (!val || tags.includes(val) || tags.length >= maxTags) return;
+    onSave([...tags, val]);
+    setInput('');
+  };
+
+  const removeTag = (tag) => {
+    onSave(tags.filter(t => t !== tag));
+  };
+
+  return html`
+    <div class="tag-editor">
+      <div class="tag-editor-pills">
+        ${tags.map(tag => html`
+          <span class="tag-pill active" key=${tag} onClick=${() => removeTag(tag)}>
+            ${tag} \u2715
+          </span>
+        `)}
+      </div>
+      <div class="tag-editor-input">
+        <input type="text" class="input-field" placeholder=${t('tags.addPlaceholder') || 'Add tag...'}
+          value=${input} onInput=${e => setInput(e.target.value)}
+          onKeyDown=${e => { if (e.key === 'Enter') { e.preventDefault(); addTag(); } }}
+          maxlength="64" />
+        <button type="button" class="btn-sm" onClick=${addTag} disabled=${!input.trim() || tags.length >= maxTags}>+</button>
+      </div>
+    </div>
+  `;
+}

package/dist/public/js/hooks.js

@@ -0,0 +1,63 @@
+/**
+ * AIMEAT Shared Hooks
+ * Reusable Preact hooks for common data-fetching and UI patterns.
+ */
+import { useState, useEffect } from 'preact/hooks';
+import { api } from '/js/api.js';
+
+/**
+ * Fetch data from an AIMEAT API endpoint with automatic loading/error state.
+ *
+ * @param {string} endpoint - The /v1/* path to fetch
+ * @param {object} [options]
+ * @param {Array}   [options.deps=[]]   - Extra useEffect dependencies (e.g. [agentId])
+ * @param {boolean} [options.skip=false] - Skip the fetch (e.g. when auth not ready)
+ * @param {string}  [options.method='GET'] - HTTP method
+ * @param {object}  [options.body]      - Request body for POST/PUT
+ * @returns {{ data: any, error: string|null, loading: boolean, reload: function }}
+ *
+ * @example
+ * const { data, error, loading, reload } = useApiCall('/v1/memory/profile');
+ * if (loading) return html`<div class="loading-spinner"></div>`;
+ * if (error)   return html`<div class="alert alert-error">${error}</div>`;
+ * return html`<div>${data.value}</div>`;
+ */
+export function useApiCall(endpoint, options = {}) {
+  const { deps = [], skip = false, method = 'GET', body } = options;
+  const [data, setData]       = useState(null);
+  const [error, setError]     = useState(null);
+  const [loading, setLoading] = useState(!skip);
+  const [reloadKey, setReloadKey] = useState(0);
+
+  useEffect(() => {
+    if (skip) { setLoading(false); return; }
+    let cancelled = false;
+    setLoading(true);
+    setError(null);
+    api(endpoint, {
+      method,
+      ...(body ? { body: JSON.stringify(body) } : {}),
+    }).then(r => {
+      if (cancelled) return;
+      if (r.ok) {
+        setData(r.data ?? r);
+        setError(null);
+      } else {
+        setError(r.error?.message ?? String(r.error ?? 'Request failed'));
+        setData(null);
+      }
+    }).catch(() => {
+      if (!cancelled) setError('Network error — please try again');
+    }).finally(() => {
+      if (!cancelled) setLoading(false);
+    });
+    return () => { cancelled = true; };
+  // deps are intentionally dynamic — eslint-disable-next-line is correct here
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [endpoint, method, reloadKey, ...deps]);
+
+  /** Call reload() to re-trigger the fetch (e.g. after a mutation). */
+  function reload() { setReloadKey(k => k + 1); }
+
+  return { data, error, loading, reload };
+}

package/dist/public/js/i18n.js

@@ -0,0 +1,76 @@
+/**
+ * AIMEAT i18n Module
+ * Loads translations from /locales/*.json and provides t() lookup.
+ * Uses nested JSON structure, accessed via dot-notation keys.
+ */
+import { detectLocale, persistLocale } from './utils.js';
+
+/** Flatten a nested object into dot-notation keys. */
+function flatten(obj, prefix = '') {
+  const result = {};
+  for (const [key, val] of Object.entries(obj)) {
+    const fullKey = prefix ? `${prefix}.${key}` : key;
+    if (val && typeof val === 'object' && !Array.isArray(val)) {
+      Object.assign(result, flatten(val, fullKey));
+    } else {
+      result[fullKey] = val;
+    }
+  }
+  return result;
+}
+
+let currentLocale = 'en';
+let translations = {};
+let fallback = {};
+const listeners = new Set();
+const _v = typeof __APP_VERSION__ !== 'undefined' ? __APP_VERSION__ : Date.now();
+
+/** Load translations for a locale. */
+export async function loadTranslations(locale) {
+  currentLocale = locale || detectLocale();
+
+  // Always load English as fallback (cache-bust with version)
+  const enRes = await fetch(`/locales/en.json?v=${_v}`);
+  if (enRes.ok) {
+    const enData = await enRes.json();
+    fallback = flatten(enData);
+  }
+  translations = fallback;
+
+  if (currentLocale !== 'en') {
+    try {
+      const locRes = await fetch(`/locales/${currentLocale}.json?v=${_v}`);
+      const locData = await locRes.json();
+      translations = { ...fallback, ...flatten(locData) };
+    } catch {
+      // Fall back to English
+      translations = fallback;
+    }
+  }
+
+  persistLocale(currentLocale);
+  document.documentElement.lang = currentLocale;
+}
+
+/** Translate a dot-notation key. Returns the key itself if not found. */
+export function t(key) {
+  return translations[key] ?? fallback[key] ?? key;
+}
+
+/** Get current locale. */
+export function getLocale() {
+  return currentLocale;
+}
+
+/** Switch locale and notify listeners. */
+export async function switchLocale(newLocale) {
+  await loadTranslations(newLocale);
+  for (const fn of listeners) fn(currentLocale);
+  window.dispatchEvent(new CustomEvent('lang-change', { detail: { locale: currentLocale } }));
+}
+
+/** Subscribe to locale changes. Returns unsubscribe function. */
+export function onLocaleChange(fn) {
+  listeners.add(fn);
+  return () => listeners.delete(fn);
+}

package/dist/public/js/services/admin.js

@@ -0,0 +1,239 @@
+/**
+ * Admin API Service
+ * All admin dashboard API calls go through this module.
+ */
+import { apiGet, apiPost, apiPut, apiPatch, apiDelete } from '/js/api.js';
+
+// ── Dashboard & Config ──
+export const getDashboard    = ()       => apiGet('/v1/admin/dashboard');
+export const getConfig       = ()       => apiGet('/v1/admin/config');
+export const saveConfig      = (changes)=> apiPut('/v1/admin/config', { changes });
+export const deleteConfig    = (path)   => apiDelete(`/v1/admin/config/${encodeURIComponent(path)}`);
+
+// ── Consul ──
+export const getConsulStatus = ()       => apiGet('/v1/admin/consul');
+export const consulExport    = ()       => apiPost('/v1/admin/consul/export');
+export const consulImport    = ()       => apiPost('/v1/admin/consul/import');
+export const getTranslations = (lang)   => apiGet(`/v1/admin/translations?lang=${lang}`);
+
+// ── Agents & Owners ──
+export const getAdminAgents  = ()       => apiGet('/v1/admin/agents');
+export const getAgentDetail  = (gaii)   => apiGet(`/v1/agents/${encodeURIComponent(gaii)}`);
+export const getOwnerDetail  = (name)   => apiGet(`/v1/owners/${encodeURIComponent(name)}`);
+export const grantRole       = (owner, role) => apiPost('/v1/admin/roles/grant', { owner, role });
+
+// ── Actions & Boards ──
+export const getActions      = ()       => apiGet('/v1/actions');
+export const getBoards       = ()       => apiGet('/v1/boards');
+export const getBoardPosts   = (id, limit = 50) => apiGet(`/v1/boards/${encodeURIComponent(id)}/posts?limit=${limit}`);
+export const createBoard      = (name, visibility, description) => apiPost('/v1/boards', { name, visibility: visibility || 'public', description });
+export const postToBoard     = (id, body, title) => apiPost(`/v1/boards/${encodeURIComponent(id)}/posts`, { body, title: title || 'msg' });
+export const patchBoardMembers = (id, body) => apiPatch(`/v1/boards/${encodeURIComponent(id)}/members`, body);
+
+// ── Work ──
+export const getAdminWork    = ()       => apiGet('/v1/admin/work');
+
+// ── Maintenance ──
+export const getMaintenance  = ()       => apiGet('/v1/admin/maintenance');
+export const setMaintenance  = (enabled, message) => apiPost('/v1/admin/maintenance', { enabled, message });
+
+// ── Seed Examples ──
+export const seedExamples    = ()       => apiPost('/v1/admin/seed-examples');
+
+// ── Backup & Restore ──
+export const getBackup       = ()       => apiGet('/v1/admin/backup');
+export const doRestore       = (data)   => apiPost('/v1/admin/restore', data);
+
+// ── Federation ──
+export const getFederation   = ()       => apiGet('/v1/admin/federation');
+export const getFederationPeers = ()    => apiGet('/v1/federation/peers');
+export const getFederationDirectory = () => apiGet('/v1/federation/directory');
+export const approvePeeringRequest = (id) => apiPut(`/v1/admin/peering/requests/${encodeURIComponent(id)}`, { decision: 'approve' });
+export const rejectPeeringRequest = (id) => apiPut(`/v1/admin/peering/requests/${encodeURIComponent(id)}`, { decision: 'reject' });
+export const activatePeer = (nodeId) => apiPost('/v1/federation/peer/activate', { peer_node_id: nodeId });
+export const addPeerDirect = (nodeId, url, publicKey) => apiPost('/v1/federation/peers', { node_id: nodeId, url, public_key: publicKey || undefined });
+export const removePeer = (nodeId) => apiDelete(`/v1/federation/peers/${encodeURIComponent(nodeId)}`);
+export const removePeerEmergency = (nodeId) => apiDelete(`/v1/federation/peers/${encodeURIComponent(nodeId)}?emergency=true`);
+export const testFederationNode = (targetUrl) => apiPost('/v1/federation/test', { target_url: targetUrl });
+export const joinGenesisNetwork = (genesisUrl, role) => apiPost('/v1/admin/federation/join', { genesis_url: genesisUrl, role: role || 'contributor' });
+
+// ── Hooks ──
+export const getHooks        = ()       => apiGet('/v1/admin/hooks');
+export const deleteHook      = (name)   => apiDelete(`/v1/admin/hooks/${encodeURIComponent(name)}`);
+
+// ── Economy ──
+export const mintMorsels     = (gaii, amount) => apiPost('/v1/admin/mint', { gaii, amount });
+
+// ── Chat Instances ──
+export const getChatInstances = ()      => apiGet('/v1/chat-instances');
+export const createChatChannel = (name, platform) => apiPost('/v1/chat-instances', { app_name: name, platform: platform || 'admin' });
+export const deleteChatInstance = (id)  => apiDelete(`/v1/chat-instances/${encodeURIComponent(id)}`);
+
+// ── Realtime ──
+export const getRealtime     = ()       => apiGet('/v1/admin/realtime');
+export const closeRoom       = (id)     => apiDelete(`/v1/realtime/rooms/${encodeURIComponent(id)}`);
+
+// ── GHII ──
+export const getGhiiUsers    = ()       => apiGet('/v1/admin/ghii');
+export const updateGhiiLevel = (ghii, level) => apiPut(`/v1/admin/ghii/${encodeURIComponent(ghii)}`, { verificationLevel: level });
+export const deleteGhii      = (ghii)   => apiDelete(`/v1/admin/ghii/${encodeURIComponent(ghii)}`);
+export const removeGhiiEmail = (ghii)   => apiDelete(`/v1/admin/ghii/${encodeURIComponent(ghii)}/email`);
+export const clearGhiiCors   = (ghii)   => apiPut(`/v1/admin/ghii/${encodeURIComponent(ghii)}/cors`, { allowed_origins: null });
+
+// ── Email ──
+export const getEmailStatus  = ()       => apiGet('/v1/admin/email/status');
+export const sendTestEmail   = (to, template, locale) => apiPost('/v1/admin/email/test', { to, template, locale });
+export const getEmailTemplates = (locale) => apiGet(`/v1/admin/email/templates?locale=${locale || 'en'}`);
+export const saveEmailTemplate = (id, locale, htmlContent, textContent) => apiPut(`/v1/admin/email/templates/${id}`, { locale, html: htmlContent, text: textContent });
+export const resetEmailTemplate = (id, locale) => apiDelete(`/v1/admin/email/templates/${id}?locale=${locale || 'en'}`);
+export const seedEmailTemplates = () => apiPost('/v1/admin/email/templates/seed');
+export const resetAllEmailTemplates = () => apiPost('/v1/admin/email/templates/reset');
+export const sendGroupEmail  = (group, subject, body) => apiPost('/v1/admin/email/send-group', { group, subject, body });
+
+// ── Directory ──
+export const getDirectoryStats = ()     => apiGet('/v1/admin/directory/stats');
+export const rebuildDirectory  = ()     => apiPost('/v1/admin/directory/rebuild');
+
+// ── Matching ──
+export const getMatchingStats  = ()     => apiGet('/v1/admin/matching');
+export const runMatching       = ()     => apiPost('/v1/admin/matching/run');
+
+// ── Marketplace ──
+export const getMarketplaceStats = ()   => apiGet('/v1/admin/marketplace');
+
+// ── Push ──
+export const getPushStats        = ()                   => apiGet('/v1/admin/push');
+export const savePushTemplate    = (id, locale, fields) => apiPut(`/v1/admin/push/templates/${encodeURIComponent(id)}/${encodeURIComponent(locale)}`, { fields });
+export const testPush            = ()                   => apiPost('/v1/admin/push/test');
+export const resetPushTemplates  = ()                   => apiPost('/v1/admin/push/templates/reset');
+export const getVapidKey         = ()                   => apiGet('/v1/push/vapid-key');
+export const subscribePush       = (endpoint, keys)     => apiPost('/v1/push/subscribe', { endpoint, keys });
+export const unsubscribePush     = ()                   => apiDelete('/v1/push/subscribe');
+
+// ── CSM ──
+export const getCsmTemplates   = ()       => apiGet('/v1/admin/csm');
+export const getCsmDetail      = (name)   => apiGet(`/v1/admin/csm/${encodeURIComponent(name)}`);
+export const deleteCsm         = (name)   => apiDelete(`/v1/admin/csm/${encodeURIComponent(name)}`);
+export const createCsm         = (yaml)   => apiPost('/v1/csm', { yaml });
+export const getCsmFileTemplates = ()     => apiGet('/v1/csm/templates');
+export const getCsmFileTemplate  = (type) => fetch(`/v1/csm/templates/${encodeURIComponent(type)}`, { headers: { 'Accept': 'application/x-yaml' } }).then(r => r.text());
+export const getCsmBuilderPrompt = ()     => apiGet('/v1/portal/prompts/csm-builder');
+
+// ── MSM ──
+export const getMsmIntegrations = ()    => apiGet('/v1/admin/msm');
+export const getMsmDetail       = (name) => apiGet(`/v1/admin/msm/${encodeURIComponent(name)}`);
+export const createMsm          = (yaml, federate) => apiPost('/v1/msm', { yaml, federate });
+export const updateMsm          = (name, updates) => apiPut(`/v1/admin/msm/${encodeURIComponent(name)}`, updates);
+export const deleteMsm          = (name) => apiDelete(`/v1/admin/msm/${encodeURIComponent(name)}`);
+export const getMsmTemplates     = ()    => apiGet('/v1/msm/templates');
+export const getMsmTemplate      = (type) => fetch(`/v1/msm/templates/${encodeURIComponent(type)}`, { headers: { 'Accept': 'application/x-yaml' } }).then(r => r.text());
+
+// ── Genesis ──
+export const getGenesisPeers    = ()          => apiGet('/v1/admin/genesis-peers');
+export const approveGenesisPeer = (id)        => apiPost(`/v1/admin/genesis-peers/${encodeURIComponent(id)}/approve`);
+export const suspendGenesisPeer = (id)        => apiPost(`/v1/admin/genesis-peers/${encodeURIComponent(id)}/suspend`);
+export const removeGenesisPeer  = (id)        => apiDelete(`/v1/admin/genesis-peers/${encodeURIComponent(id)}`);
+
+// ── CORS ──
+export const clearAgentCors  = (gaii)   => apiPut(`/v1/admin/agents/${encodeURIComponent(gaii)}/cors`, { allowed_origins: null });
+export const setAgentCors    = (gaii, origins) => apiPut(`/v1/admin/agents/${encodeURIComponent(gaii)}/cors`, { allowed_origins: origins });
+export const setGhiiCors     = (ghii, origins) => apiPut(`/v1/admin/ghii/${encodeURIComponent(ghii)}/cors`, { allowed_origins: origins });
+
+// ── Portal / Site ──
+export const getSiteMeta      = ()      => apiGet('/v1/site');
+export const getSiteTemplate  = ()      => apiGet('/v1/site/template');
+export const saveSiteTemplate = (tmpl)  => apiPost('/v1/site/template', { template: tmpl });
+export const deleteSiteTemplate = ()    => apiDelete('/v1/site/template');
+export const getSiteChangelog = ()      => apiGet('/v1/site/changelog');
+export const getSiteMemoryKeys = ()     => apiGet('/v1/site/memory-keys');
+export const clearSiteCache   = ()      => apiPost('/v1/site/cache-invalidate');
+export const getSitePrompt    = ()      => apiGet('/v1/site/prompt');
+export const triggerLbSync    = ()      => apiPost('/v1/admin/site/sync');
+
+// ── Memory (for portal memory keys) ──
+export const addMemory       = (key, value) => apiPost('/v1/memory', { key, value, visibility: 'private' });
+export const deleteMemory    = (key)        => apiDelete(`/v1/memory/${encodeURIComponent(key)}`);
+
+// ── Admin Memory (all-owner memory browser) ──
+export const getAdminMemory = (params = {}) => {
+  const q = new URLSearchParams();
+  if (params.prefix) q.set('prefix', params.prefix);
+  if (params.owner) q.set('owner', params.owner);
+  if (params.visibility) q.set('visibility', params.visibility);
+  if (params.limit) q.set('limit', String(params.limit));
+  if (params.offset) q.set('offset', String(params.offset));
+  return apiGet('/v1/admin/memory?' + q.toString());
+};
+export const deleteAdminMemory = (owner, key) => apiDelete(`/v1/admin/memory/${encodeURIComponent(owner)}/${encodeURIComponent(key)}`);
+
+// ── Stats ──
+export const getStats        = ()       => apiGet('/v1/stats');
+
+// ── Extensions & Instances ──
+export const getAvailableExtensions   = ()              => apiGet('/v1/admin/extensions/available');
+export const installBundledExtension  = (name)          => apiPost(`/v1/admin/extensions/available/${encodeURIComponent(name)}/install`);
+export const uninstallExtension       = (name)          => apiDelete(`/v1/extensions/${encodeURIComponent(name)}`);
+export const activateExtension        = (name)          => apiPost(`/v1/extensions/${encodeURIComponent(name)}/activate`);
+export const getExtensions            = ()              => apiGet('/v1/extensions');
+export const getExtensionInstances    = (name)          => apiGet(`/v1/extensions/${encodeURIComponent(name)}/instances`);
+export const createExtensionInstance  = (name, body)    => apiPost(`/v1/extensions/${encodeURIComponent(name)}/instances`, body);
+export const updateExtensionInstance  = (name, id, body)=> apiPatch(`/v1/extensions/${encodeURIComponent(name)}/instances/${encodeURIComponent(id)}`, body);
+export const deleteExtensionInstance  = (name, id)      => apiDelete(`/v1/extensions/${encodeURIComponent(name)}/instances/${encodeURIComponent(id)}`);
+export const getActionScript         = (name, actionId) => apiGet(`/v1/extensions/${encodeURIComponent(name)}/actions/${encodeURIComponent(actionId)}`);
+export const updateActionScript      = (name, actionId, scriptContent) => apiPatch(`/v1/extensions/${encodeURIComponent(name)}/actions/${encodeURIComponent(actionId)}`, { scriptContent });
+export const scaffoldExtension       = (body)           => apiPost('/v1/admin/extensions/scaffold', body);
+export const getDiskScript           = (name, actionId) => apiGet(`/v1/admin/extensions/available/${encodeURIComponent(name)}/scripts/${encodeURIComponent(actionId)}`);
+export const saveDiskScript          = (name, actionId, scriptContent) => apiPut(`/v1/admin/extensions/available/${encodeURIComponent(name)}/scripts/${encodeURIComponent(actionId)}`, { scriptContent });
+export const addDiskAction           = (name, body)      => apiPost(`/v1/admin/extensions/available/${encodeURIComponent(name)}/actions`, body);
+export const reinstallExtension      = (name)           => apiPost(`/v1/admin/extensions/available/${encodeURIComponent(name)}/reinstall`);
+
+// ── Scheduler ──
+export const getSchedulerJobs    = ()              => apiGet('/v1/admin/scheduler/jobs');
+export const triggerSchedulerJob = (id)            => apiPost(`/v1/admin/scheduler/jobs/${encodeURIComponent(id)}/trigger`);
+export const updateSchedulerJob  = (id, updates)   => apiPut(`/v1/admin/scheduler/jobs/${encodeURIComponent(id)}`, updates);
+export const deleteSchedulerJob  = (id)            => apiDelete(`/v1/admin/scheduler/jobs/${encodeURIComponent(id)}`);
+export async function fetchSchedulerExecutionLog(params = {}) {
+  const qs = new URLSearchParams();
+  if (params.jobId) qs.set('jobId', params.jobId);
+  if (params.extensionName) qs.set('extensionName', params.extensionName);
+  if (params.trigger) qs.set('trigger', params.trigger);
+  if (params.result) qs.set('result', params.result);
+  if (params.limit) qs.set('limit', String(params.limit));
+  if (params.offset) qs.set('offset', String(params.offset));
+  return apiGet(`/v1/admin/scheduler/execution-log?${qs.toString()}`);
+}
+
+// ── Knowledge Management ──
+export const getKnowledgePackages = (opts = {}) => {
+  const params = new URLSearchParams();
+  if (opts.flagged) params.set('flagged', 'true');
+  if (opts.author) params.set('author', opts.author);
+  if (opts.content_type) params.set('content_type', opts.content_type);
+  if (opts.page) params.set('page', String(opts.page));
+  return apiGet(`/v1/admin/knowledge?${params.toString()}`);
+};
+export const createSystemKnowledge = (data) =>
+  apiPost('/v1/admin/knowledge/import', data);
+export const deleteKnowledgePackage = (packageId) =>
+  apiDelete(`/v1/admin/knowledge/${encodeURIComponent(packageId)}`);
+export const reviewKnowledgePackage = (packageId, reason, action, customText) =>
+  apiPost(`/v1/admin/knowledge/${encodeURIComponent(packageId)}/review`, {
+    reason, action, custom_text: customText,
+  });
+
+// ── Template Moderation ──
+export const listPendingTemplates  = ()           => apiGet('/v1/templates/pending');
+export const reviewTemplate        = (id)         => apiGet(`/v1/templates/${encodeURIComponent(id)}/review`);
+export const approveTemplate       = (id, comment) => apiPost(`/v1/templates/${encodeURIComponent(id)}/approve`, { comment });
+export const rejectTemplate        = (id, reason) => apiPost(`/v1/templates/${encodeURIComponent(id)}/reject`, { reason });
+export const suspendTemplate       = (id, reason) => apiPost(`/v1/templates/${encodeURIComponent(id)}/suspend`, { reason });
+
+// ── System Prompts ──
+export const getSystemPrompts     = (group) => apiGet('/v1/admin/prompts' + (group ? '?group=' + encodeURIComponent(group) : ''));
+export const getSystemPrompt      = (id)    => apiGet(`/v1/admin/prompts/${encodeURIComponent(id)}`);
+export const updateSystemPrompt   = (id, body) => apiPatch(`/v1/admin/prompts/${encodeURIComponent(id)}`, body);
+export const resetSystemPrompt    = (id)    => apiPost(`/v1/admin/prompts/${encodeURIComponent(id)}/reset`);
+export const resetAllSystemPrompts = ()     => apiPost('/v1/admin/prompts/reset-all');
+export const resetPromptGroup     = (group) => apiPost(`/v1/admin/prompts/reset-group/${encodeURIComponent(group)}`);
+export const getPromptVersions    = (id)    => apiGet(`/v1/admin/prompts/${encodeURIComponent(id)}/versions`);
+export const restorePromptVersion = (id, v) => apiPost(`/v1/admin/prompts/${encodeURIComponent(id)}/versions/${v}/restore`);

package/dist/public/js/services/agents.js

@@ -0,0 +1,57 @@
+/**
+ * AIMEAT Agents Service
+ * Agent CRUD, scope management, and chat sessions.
+ */
+import { apiGet, apiPost, apiDelete, api } from '/js/api.js';
+
+/** List agents owned by the given owner. Returns array. */
+export async function listAgents(owner) {
+  const data = await apiGet('/v1/agents');
+  const list = data?.data?.agents || data?.data || [];
+  return owner ? list.filter(a => a.owner === owner) : list;
+}
+
+/** List chat session agents (name starts with 'session-'). */
+export async function listChatSessions(owner) {
+  const agents = await listAgents(owner);
+  return agents.filter(a => a.name?.startsWith('session-'));
+}
+
+/** Delete an agent by name. */
+export async function deleteAgent(name) {
+  return apiDelete(`/v1/agents/${encodeURIComponent(name)}`);
+}
+
+/** Update agent scopes. */
+export async function updateAgentScopes(name, scopes) {
+  return api(`/v1/agents/${encodeURIComponent(name)}/scopes`, {
+    method: 'PATCH',
+    body: JSON.stringify({ scopes }),
+  });
+}
+
+/** Get agent CORS origins. */
+export async function getAgentCors(name) {
+  const data = await apiGet(`/v1/agents/${encodeURIComponent(name)}/cors`);
+  return data?.data || {};
+}
+
+/** Set agent CORS origins. */
+export async function setAgentCors(name, origins) {
+  return api(`/v1/agents/${encodeURIComponent(name)}/cors`, {
+    method: 'PUT',
+    body: JSON.stringify({ allowed_origins: origins }),
+  });
+}
+
+/** List chat instances (includes MCP sessions). Returns array. */
+export async function listChatInstances() {
+  const data = await apiGet('/v1/chat-instances');
+  const list = data?.data?.chat_instances || [];
+  return Array.isArray(list) ? list : [];
+}
+
+/** Delete a chat instance. */
+export async function deleteChatInstance(id) {
+  return apiDelete(`/v1/chat-instances/${encodeURIComponent(id)}`);
+}

package/dist/public/js/services/apps.js

@@ -0,0 +1,35 @@
+/**
+ * AIMEAT Apps Service
+ * App listing and upload.
+ */
+import { apiGet, apiDelete, apiPatch, api } from '/js/api.js';
+
+/** List all apps. Returns array. */
+export async function listApps() {
+  const data = await apiGet('/v1/apps');
+  return data?.data?.apps || [];
+}
+
+/** Upload an app (HTML file + optional screenshot). */
+export async function uploadApp(filename, contentBase64, mimeType, opts = {}) {
+  const body = { filename, content: contentBase64, mime_type: mimeType || 'text/html' };
+  if (opts.accessCode) body.access_code = opts.accessCode;
+  if (opts.screenshotBase64) {
+    body.screenshot = opts.screenshotBase64;
+    body.screenshot_mime_type = opts.screenshotMimeType || 'image/png';
+  }
+  return api('/v1/apps', {
+    method: 'POST',
+    body: JSON.stringify(body),
+  });
+}
+
+/** Delete an app by filename. */
+export async function deleteApp(filename) {
+  return apiDelete('/v1/apps/' + encodeURIComponent(filename));
+}
+
+/** Update app metadata (e.g. access_code, protected). */
+export async function patchApp(filename, updates) {
+  return apiPatch('/v1/apps/' + encodeURIComponent(filename), updates);
+}

package/dist/public/js/services/auth.js

@@ -0,0 +1,40 @@
+/**
+ * AIMEAT Auth Service
+ * Centralized session/auth access — replaces direct window.AIMEAT.auth usage.
+ */
+
+/** Get current auth session, or null if not logged in. */
+export function getSession() {
+  const a = window.AIMEAT?.auth;
+  if (!a || typeof a.getSession !== 'function') return null;
+  const s = a.getSession();
+  return (s && s.jwt) ? s : null;
+}
+
+/** Check if a session is active. */
+export function hasSession() {
+  return getSession() !== null;
+}
+
+/** Get owner name from session. */
+export function getOwner() {
+  return getSession()?.owner || null;
+}
+
+/** Get GHII from session. */
+export function getGhii() {
+  const s = getSession();
+  return s?.ghii || (s?.owner ? s.owner + '@unknown' : null);
+}
+
+/** Get the node URL (current origin). */
+export function getNodeUrl() {
+  return typeof window !== 'undefined' ? window.location.origin : '';
+}
+
+/** Listen for auth state changes. Returns unsubscribe function. */
+export function onAuthChange(callback) {
+  const handler = () => callback(getSession());
+  window.addEventListener('aimeat-auth-change', handler);
+  return () => window.removeEventListener('aimeat-auth-change', handler);
+}

package/dist/public/js/services/boards.js

@@ -0,0 +1,79 @@
+/**
+ * AIMEAT Boards Service
+ * Board CRUD, subscriptions, posts, reactions.
+ */
+import { api, apiGet, apiPost, apiDelete } from '/js/api.js';
+
+/** List boards the user is subscribed to. Returns array. */
+export async function listSubscriptions() {
+  const data = await apiGet('/v1/boards/subscriptions');
+  return data?.data?.subscriptions || data?.data?.boards || (Array.isArray(data?.data) ? data.data : []);
+}
+
+/** List all public boards. Returns array. */
+export async function listAllBoards() {
+  const data = await apiGet('/v1/boards');
+  return data?.data?.boards || data?.data || [];
+}
+
+/** Create a new board. */
+export async function createBoard(name, description, visibility) {
+  return api('/v1/boards', {
+    method: 'POST',
+    body: JSON.stringify({ name, description, visibility: visibility || 'private' }),
+  });
+}
+
+/** Delete a board (owner only). */
+export async function deleteBoard(boardId) {
+  return apiDelete(`/v1/boards/${encodeURIComponent(boardId)}`);
+}
+
+/** Update board visibility. */
+export async function updateBoardVisibility(boardId, visibility) {
+  return api(`/v1/boards/${encodeURIComponent(boardId)}/visibility`, {
+    method: 'PATCH',
+    body: JSON.stringify({ visibility }),
+  });
+}
+
+/** Subscribe to a board. */
+export async function subscribe(boardId) {
+  return apiPost(`/v1/boards/${encodeURIComponent(boardId)}/subscribe`);
+}
+
+/** List posts in a board. Returns array. */
+export async function listPosts(boardId) {
+  const data = await apiGet(`/v1/boards/${encodeURIComponent(boardId)}/posts`);
+  return data?.data?.posts || data?.data || [];
+}
+
+/** Create a post in a board. */
+export async function createPost(boardId, content) {
+  const title = content.trim().slice(0, 80) || 'Post';
+  return api(`/v1/boards/${encodeURIComponent(boardId)}/posts`, {
+    method: 'POST',
+    body: JSON.stringify({ title, body: content }),
+  });
+}
+
+/** Delete a post. */
+export async function deletePost(boardId, postId) {
+  return apiDelete(`/v1/boards/${encodeURIComponent(boardId)}/posts/${encodeURIComponent(postId)}`);
+}
+
+/** Update board members (add/remove GAIIs). */
+export async function updateBoardMembers(boardId, { add, remove }) {
+  return api(`/v1/boards/${encodeURIComponent(boardId)}/members`, {
+    method: 'PATCH',
+    body: JSON.stringify({ add, remove }),
+  });
+}
+
+/** React to a post with an emoji. */
+export async function reactToPost(boardId, postId, emoji) {
+  return api(`/v1/boards/${encodeURIComponent(boardId)}/posts/${encodeURIComponent(postId)}/react`, {
+    method: 'POST',
+    body: JSON.stringify({ reaction: emoji }),
+  });
+}