aimeat 1.2.6 → 1.3.0

package/dist/src/services/capability-aggregator.js

@@ -0,0 +1,239 @@
+/**
+ * @file capability-aggregator.ts
+ * @description Background job that scans extensions, actions, and cortex modules
+ *   to auto-create/update capability records.
+ * @version-history
+ *   v1.0.0 - 2026-05-02 - Initial aggregator
+ */
+import { createHash } from 'node:crypto';
+import { logger } from '../utils/logger.js';
+function makeSchemaHash(input, output) {
+    return createHash('sha256')
+        .update(JSON.stringify(input ?? {}) + JSON.stringify(output ?? {}))
+        .digest('hex').slice(0, 16);
+}
+function makeDefaultTrust() {
+    return { operatorReviewed: false, reviewedAt: null, vouchCount: 0, publisherTrustScore: 0, codeAudited: false, auditNotes: null };
+}
+function makeDefaultStats() {
+    return { totalInvocations: 0, successCount: 0, errorCount: 0, lastInvokedAt: null, avgResponseMs: 0, lastError: null };
+}
+export async function runCapabilityAggregation(config, storage) {
+    let created = 0, updated = 0, disabled = 0;
+    const seenRefs = new Set();
+    const now = new Date().toISOString();
+    // 1. Scan active extensions
+    try {
+        const extensions = await storage.listExtensions();
+        for (const ext of extensions) {
+            if (ext.status !== 'active' || !ext.actions)
+                continue;
+            for (const action of ext.actions) {
+                const ref = `ext:${ext.name}:${action.id}`;
+                seenRefs.add(ref);
+                const existing = await storage.getCapabilityBySourceRef(ref);
+                const schemaHash = makeSchemaHash(action.inputSchema, action.outputSchema);
+                if (!existing) {
+                    const cap = {
+                        id: ref, name: `${ext.name}: ${action.id}`,
+                        summary: action.description || ext.description || '',
+                        ownerGhii: ext.installedBy || `operator@${config.nodeId}`,
+                        visibility: 'public', scope: 'local', status: 'active',
+                        rejectionReason: null, deprecationMessage: null, replacedBy: null,
+                        source: { type: 'extension', ref, version: ext.version },
+                        authRequired: 'registered', callable: true,
+                        inputSchema: action.inputSchema || null,
+                        outputSchema: action.outputSchema || null,
+                        exports: null,
+                        usage: `await AIMEAT.capabilities.invoke('${ref}', input)`,
+                        whenToUse: '', whenNotToUse: '',
+                        examples: [], dependencies: [], schemaHash,
+                        webhookUrl: null, cost: null, trustRequired: null,
+                        trust: makeDefaultTrust(), redactedFields: [],
+                        operatorOverride: null, stats: makeDefaultStats(),
+                        tags: [], createdAt: now, updatedAt: now,
+                    };
+                    await storage.createCapability(cap);
+                    created++;
+                }
+                else if (existing.status === 'disabled') {
+                    // Re-enable: source is active again (extension was reinstalled)
+                    await storage.updateCapability(existing.id, {
+                        status: 'active',
+                        source: { type: 'extension', ref, version: ext.version },
+                        inputSchema: action.inputSchema || null,
+                        outputSchema: action.outputSchema || null,
+                        schemaHash, updatedAt: now,
+                    });
+                    updated++;
+                }
+                else if (existing.source.version !== ext.version || existing.schemaHash !== schemaHash) {
+                    await storage.updateCapability(existing.id, {
+                        source: { type: 'extension', ref, version: ext.version },
+                        inputSchema: action.inputSchema || null,
+                        outputSchema: action.outputSchema || null,
+                        schemaHash, updatedAt: now,
+                    });
+                    updated++;
+                }
+            }
+        }
+    }
+    catch (err) {
+        logger.error('Capability aggregator: extension scan failed', { error: String(err) });
+    }
+    // 2. Scan published actions (discovery only, callable: false)
+    try {
+        const actions = await storage.listActions();
+        for (const action of actions) {
+            const ref = `action:${action.providerGaii}:${action.id}`;
+            seenRefs.add(ref);
+            const existing = await storage.getCapabilityBySourceRef(ref);
+            if (!existing) {
+                const schemaHash = makeSchemaHash(action.inputSchema, action.outputSchema);
+                const cap = {
+                    id: ref, name: action.displayName || action.id,
+                    summary: action.description || '',
+                    ownerGhii: action.providerGaii,
+                    visibility: 'public', scope: 'local', status: 'active',
+                    rejectionReason: null, deprecationMessage: null, replacedBy: null,
+                    source: { type: 'action', ref, version: action.updatedAt },
+                    authRequired: 'registered', callable: false,
+                    inputSchema: action.inputSchema || null,
+                    outputSchema: action.outputSchema || null,
+                    exports: null,
+                    usage: `POST /v1/work/request with { action_id: '${action.id}', provider_gaii: '${action.providerGaii}', input: {...} }`,
+                    whenToUse: '', whenNotToUse: '',
+                    examples: [], dependencies: [], schemaHash,
+                    webhookUrl: null,
+                    cost: action.pricing ? { morsels: action.pricing.baseMorsels || 0 } : null,
+                    trustRequired: null,
+                    trust: makeDefaultTrust(), redactedFields: [],
+                    operatorOverride: null, stats: makeDefaultStats(),
+                    tags: action.tags || [], createdAt: now, updatedAt: now,
+                };
+                await storage.createCapability(cap);
+                created++;
+            }
+        }
+    }
+    catch (err) {
+        logger.error('Capability aggregator: action scan failed', { error: String(err) });
+    }
+    // 3. Scan active cortex modules (callable in browser)
+    try {
+        const cortexList = await storage.listCortexExtensions({ status: 'active' });
+        logger.info(`Capability aggregator: found ${cortexList.length} active cortex modules`);
+        for (const cortex of cortexList) {
+            const ref = `cortex:${cortex.name}`;
+            seenRefs.add(ref);
+            const existing = await storage.getCapabilityBySourceRef(ref);
+            // Extract lib component exports and API surface from cortex manifest
+            const components = cortex.components || [];
+            const libComponents = components.filter((c) => c.type === 'lib');
+            const promptComponents = components.filter((c) => c.type === 'prompt');
+            let apiSurface = '';
+            let libExports = [];
+            let libFilename = `${cortex.name}.js`;
+            for (const lib of libComponents) {
+                if (lib.exports)
+                    libExports = libExports.concat(lib.exports);
+                if (lib.apiSurface || lib.api_surface)
+                    apiSurface += (lib.apiSurface || lib.api_surface) + '\n';
+                if (lib.filename)
+                    libFilename = lib.filename;
+            }
+            // Extract prompt content for usage guidance
+            let promptContent = '';
+            for (const p of promptComponents) {
+                if (p.content)
+                    promptContent += p.content + '\n';
+            }
+            const usageLines = [`await loadScript('/v1/cortex/${cortex.name}/libs/${libFilename}')`];
+            if (apiSurface)
+                usageLines.push('\nAPI:\n' + apiSurface.trim());
+            if (!existing) {
+                const cap = {
+                    id: ref, name: cortex.name,
+                    summary: cortex.description || '',
+                    ownerGhii: cortex.installedBy || `operator@${config.nodeId}`,
+                    visibility: cortex.visibility === 'public' ? 'public' : 'private',
+                    scope: 'local', status: 'active',
+                    rejectionReason: null, deprecationMessage: null, replacedBy: null,
+                    source: { type: 'cortex', ref, version: cortex.version },
+                    authRequired: 'registered', callable: true,
+                    inputSchema: null, outputSchema: null,
+                    exports: libExports.length > 0 ? libExports.map(name => ({
+                        name, description: '', inputSchema: {}, outputSchema: {}, example: null,
+                    })) : null,
+                    usage: usageLines.join('\n'),
+                    whenToUse: promptContent ? promptContent.slice(0, 500) : '',
+                    whenNotToUse: '',
+                    examples: [],
+                    dependencies: [{ type: 'sdk', id: 'aimeat-data', required: true, minVersion: null }],
+                    schemaHash: '', webhookUrl: null, cost: null, trustRequired: null,
+                    trust: makeDefaultTrust(), redactedFields: [],
+                    operatorOverride: null, stats: makeDefaultStats(),
+                    tags: cortex.tags || [], createdAt: now, updatedAt: now,
+                };
+                await storage.createCapability(cap);
+                created++;
+            }
+            else if (existing.status === 'disabled') {
+                // Re-enable: cortex is active again (was reinstalled)
+                await storage.updateCapability(existing.id, {
+                    status: 'active',
+                    source: { type: 'cortex', ref, version: cortex.version },
+                    exports: libExports.length > 0 ? libExports.map(name => ({
+                        name, description: '', inputSchema: {}, outputSchema: {}, example: null,
+                    })) : existing.exports,
+                    usage: usageLines.join('\n'),
+                    updatedAt: now,
+                });
+                updated++;
+            }
+            else if (existing.exports === null && libExports.length > 0) {
+                // Update existing capability with exports if they were missing
+                await storage.updateCapability(existing.id, {
+                    exports: libExports.map(name => ({
+                        name, description: '', inputSchema: {}, outputSchema: {}, example: null,
+                    })),
+                    usage: usageLines.join('\n'),
+                    whenToUse: promptContent ? promptContent.slice(0, 500) : existing.whenToUse,
+                    updatedAt: now,
+                });
+                updated++;
+            }
+        }
+    }
+    catch (err) {
+        logger.error('Capability aggregator: cortex scan failed', { error: String(err) });
+    }
+    // 4. Disable or delete capabilities whose sources are gone
+    for (const sourceType of ['extension', 'action', 'cortex']) {
+        try {
+            const existing = await storage.listCapabilitiesBySourceType(sourceType);
+            for (const cap of existing) {
+                if (!seenRefs.has(cap.source.ref)) {
+                    if (cap.status === 'active') {
+                        await storage.updateCapability(cap.id, { status: 'disabled', updatedAt: now });
+                        disabled++;
+                    }
+                    else if (cap.status === 'disabled' && cap.source.type !== 'manual') {
+                        // Clean up stale disabled auto-generated capabilities
+                        await storage.deleteCapability(cap.id);
+                        disabled++;
+                    }
+                }
+            }
+        }
+        catch (err) {
+            logger.error('Capability aggregator: cleanup scan failed', { error: String(err) });
+        }
+    }
+    if (created || updated || disabled) {
+        logger.info(`Capability aggregation: ${created} created, ${updated} updated, ${disabled} disabled`);
+    }
+    return { created, updated, disabled };
+}
+//# sourceMappingURL=capability-aggregator.js.map

package/dist/src/services/capability-aggregator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-aggregator.js","sourceRoot":"","sources":["../../../src/services/capability-aggregator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,SAAS,cAAc,CAAC,KAAc,EAAE,MAAe;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;SAClE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACpI,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACzH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAoB,EAAE,OAAgB;IACnF,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,4BAA4B;IAC5B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,SAAS;YACtD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBAE3E,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,GAAG,GAAqB;wBAC5B,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,EAAE;wBAC1C,OAAO,EAAG,MAAc,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE;wBAC7D,SAAS,EAAE,GAAG,CAAC,WAAW,IAAI,YAAY,MAAM,CAAC,MAAM,EAAE;wBACzD,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ;wBACtD,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;wBACjE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;wBACxD,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI;wBAC1C,WAAW,EAAG,MAAc,CAAC,WAAW,IAAI,IAAI;wBAChD,YAAY,EAAG,MAAc,CAAC,YAAY,IAAI,IAAI;wBAClD,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,qCAAqC,GAAG,WAAW;wBAC1D,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;wBAC/B,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU;wBAC1C,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;wBACjD,KAAK,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,EAAE;wBAC7C,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;wBACjD,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;qBACzC,CAAC;oBACF,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;oBACpC,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC1C,gEAAgE;oBAChE,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE;wBAC1C,MAAM,EAAE,QAAQ;wBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;wBACxD,WAAW,EAAG,MAAc,CAAC,WAAW,IAAI,IAAI;wBAChD,YAAY,EAAG,MAAc,CAAC,YAAY,IAAI,IAAI;wBAClD,UAAU,EAAE,SAAS,EAAE,GAAG;qBAC3B,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACzF,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE;wBAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;wBACxD,WAAW,EAAG,MAAc,CAAC,WAAW,IAAI,IAAI;wBAChD,YAAY,EAAG,MAAc,CAAC,YAAY,IAAI,IAAI;wBAClD,UAAU,EAAE,SAAS,EAAE,GAAG;qBAC3B,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAEvG,8DAA8D;IAC9D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,UAAU,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACzD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC3E,MAAM,GAAG,GAAqB;oBAC5B,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,EAAE;oBAC9C,OAAO,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;oBACjC,SAAS,EAAE,MAAM,CAAC,YAAY;oBAC9B,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ;oBACtD,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;oBACjE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE;oBAC1D,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK;oBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;oBACvC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;oBACzC,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,4CAA4C,MAAM,CAAC,EAAE,sBAAsB,MAAM,CAAC,YAAY,mBAAmB;oBACxH,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;oBAC/B,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU;oBAC1C,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;oBAC1E,aAAa,EAAE,IAAI;oBACnB,KAAK,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,EAAE;oBAC7C,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;oBACjD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;iBACxD,CAAC;gBACF,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAEpG,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,gCAAgC,UAAU,CAAC,MAAM,wBAAwB,CAAC,CAAC;QACvF,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAE7D,qEAAqE;YACrE,MAAM,UAAU,GAAI,MAAc,CAAC,UAAU,IAAI,EAAE,CAAC;YACpD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACtE,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAE5E,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,UAAU,GAAa,EAAE,CAAC;YAC9B,IAAI,WAAW,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,IAAI,GAAG,CAAC,OAAO;oBAAE,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC7D,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW;oBAAE,UAAU,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;gBAChG,IAAI,GAAG,CAAC,QAAQ;oBAAE,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC/C,CAAC;YAED,4CAA4C;YAC5C,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;gBACjC,IAAI,CAAC,CAAC,OAAO;oBAAE,aAAa,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YACnD,CAAC;YAED,MAAM,UAAU,GAAG,CAAC,gCAAgC,MAAM,CAAC,IAAI,SAAS,WAAW,IAAI,CAAC,CAAC;YACzF,IAAI,UAAU;gBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,GAAG,GAAqB;oBAC5B,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;oBAC1B,OAAO,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;oBACjC,SAAS,EAAE,MAAM,CAAC,WAAW,IAAI,YAAY,MAAM,CAAC,MAAM,EAAE;oBAC5D,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACjE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ;oBAChC,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;oBACjE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;oBACxD,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI;oBAC1C,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;oBACrC,OAAO,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACvD,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI;qBACxE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;oBACV,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC3D,YAAY,EAAE,EAAE;oBAChB,QAAQ,EAAE,EAAE;oBACZ,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;oBACpF,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;oBACjE,KAAK,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,EAAE;oBAC7C,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;oBACjD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;iBACxD,CAAC;gBACF,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1C,sDAAsD;gBACtD,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC1C,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;oBACxD,OAAO,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACvD,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI;qBACxE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO;oBACtB,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,SAAS,EAAE,GAAG;iBACf,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,+DAA+D;gBAC/D,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC1C,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBAC/B,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI;qBACxE,CAAC,CAAC;oBACH,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;oBAC3E,SAAS,EAAE,GAAG;iBACf,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAEpG,2DAA2D;IAC3D,KAAK,MAAM,UAAU,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;YACxE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC5B,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC/E,QAAQ,EAAE,CAAC;oBACb,CAAC;yBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrE,sDAAsD;wBACtD,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACvC,QAAQ,EAAE,CAAC;oBACb,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACvG,CAAC;IAED,IAAI,OAAO,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,2BAA2B,OAAO,aAAa,OAAO,aAAa,QAAQ,WAAW,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}

package/dist/src/services/capability-invoke.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @file capability-invoke.ts
+ * @description Invoke proxy: routes capability invocations to the correct underlying system.
+ * @version-history
+ *   v1.0.0 - 2026-05-02 - Initial invoke proxy for extensions and manual webhooks
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage, CapabilityRecord } from '../storage/interface.js';
+export interface InvokeResult {
+    capability: string;
+    result: unknown;
+    duration_ms: number;
+    source: {
+        type: string;
+        ref: string;
+    };
+    mode: 'normal' | 'raw';
+}
+export declare function invokeCapability(config: AimeatConfig, storage: Storage, capability: CapabilityRecord, input: Record<string, unknown>, callerGhii: string, jwt: string, mode?: 'normal' | 'raw'): Promise<InvokeResult>;
+//# sourceMappingURL=capability-invoke.d.ts.map

package/dist/src/services/capability-invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-invoke.d.ts","sourceRoot":"","sources":["../../../src/services/capability-invoke.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;CACxB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,gBAAgB,EAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,QAAQ,GAAG,KAAgB,GAChC,OAAO,CAAC,YAAY,CAAC,CA0GvB"}

package/dist/src/services/capability-invoke.js

@@ -0,0 +1,95 @@
+export async function invokeCapability(config, storage, capability, input, callerGhii, jwt, mode = 'normal') {
+    const start = Date.now();
+    if (!capability.callable) {
+        const msg = capability.source.type === 'action'
+            ? `This capability uses the async work queue. ${capability.usage}`
+            : capability.source.type === 'cortex'
+                ? `This capability is browser-only. ${capability.usage}`
+                : `This capability is not directly callable. ${capability.usage}`;
+        throw Object.assign(new Error(msg), { statusCode: 400, code: 'NOT_CALLABLE' });
+    }
+    if (capability.operatorOverride?.disabled) {
+        throw Object.assign(new Error('This capability has been disabled by the operator'), { statusCode: 403, code: 'CAPABILITY_DISABLED' });
+    }
+    if (capability.status === 'disabled') {
+        throw Object.assign(new Error('This capability is no longer available'), { statusCode: 410, code: 'CAPABILITY_GONE' });
+    }
+    let result;
+    switch (capability.source.type) {
+        case 'extension': {
+            const parts = capability.source.ref.split(':');
+            const extName = parts[1];
+            const actionId = parts[2];
+            const response = await fetch(`http://127.0.0.1:${config.port}/v1/ext/${extName}/${actionId}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${jwt}` },
+                body: JSON.stringify(input),
+            });
+            const body = await response.json();
+            if (!body.ok) {
+                throw Object.assign(new Error(body.error?.message || 'Extension invoke failed'), { statusCode: response.status, code: 'EXTENSION_ERROR' });
+            }
+            result = mode === 'raw' ? body : body.data;
+            break;
+        }
+        case 'manual': {
+            if (!capability.webhookUrl) {
+                throw Object.assign(new Error('Webhook URL not configured'), { statusCode: 500, code: 'NO_WEBHOOK' });
+            }
+            // Webhook security: validate URL
+            try {
+                const url = new URL(capability.webhookUrl);
+                if (url.protocol !== 'https:' && url.protocol !== 'http:') {
+                    throw new Error('only http/https');
+                }
+                const host = url.hostname;
+                if (host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '0.0.0.0') {
+                    throw Object.assign(new Error('Webhook URL cannot target localhost'), { statusCode: 400, code: 'WEBHOOK_LOCALHOST' });
+                }
+                if (host === '169.254.169.254') {
+                    throw Object.assign(new Error('Webhook URL cannot target metadata endpoint'), { statusCode: 400, code: 'WEBHOOK_METADATA' });
+                }
+            }
+            catch (urlErr) {
+                if (urlErr.statusCode)
+                    throw urlErr;
+                throw Object.assign(new Error('Invalid webhook URL'), { statusCode: 400, code: 'INVALID_WEBHOOK' });
+            }
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), 10_000);
+            try {
+                const response = await fetch(capability.webhookUrl, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'X-AIMEAT-Node': config.nodeId,
+                        'X-AIMEAT-Timestamp': new Date().toISOString(),
+                    },
+                    body: JSON.stringify({ input, caller: callerGhii, capability: capability.id }),
+                    signal: controller.signal,
+                });
+                if (!response.ok) {
+                    throw Object.assign(new Error('Webhook returned ' + response.status), { statusCode: 502, code: 'WEBHOOK_ERROR' });
+                }
+                const body = await response.json();
+                result = mode === 'raw' ? body : body.result ?? body;
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+            break;
+        }
+        case 'cortex':
+            throw Object.assign(new Error(`This capability is browser-only. Use it in an AIMEAT app: ${capability.usage}`), { statusCode: 400, code: 'BROWSER_ONLY' });
+        default:
+            throw Object.assign(new Error(`Cannot invoke source type: ${capability.source.type}`), { statusCode: 400, code: 'UNSUPPORTED_SOURCE' });
+    }
+    return {
+        capability: capability.id,
+        result,
+        duration_ms: Date.now() - start,
+        source: { type: capability.source.type, ref: capability.source.ref },
+        mode,
+    };
+}
+//# sourceMappingURL=capability-invoke.js.map

package/dist/src/services/capability-invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-invoke.js","sourceRoot":"","sources":["../../../src/services/capability-invoke.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,OAAgB,EAChB,UAA4B,EAC5B,KAA8B,EAC9B,UAAkB,EAClB,GAAW,EACX,OAAyB,QAAQ;IAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC7C,CAAC,CAAC,8CAA8C,UAAU,CAAC,KAAK,EAAE;YAClE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;gBACnC,CAAC,CAAC,oCAAoC,UAAU,CAAC,KAAK,EAAE;gBACxD,CAAC,CAAC,6CAA6C,UAAU,CAAC,KAAK,EAAE,CAAC;QACtE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,UAAU,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QAC1C,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACxI,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACzH,CAAC;IAED,IAAI,MAAe,CAAC;IAEpB,QAAQ,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,WAAW,OAAO,IAAI,QAAQ,EAAE,EAAE;gBAC5F,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,GAAG,EAAE,EAAE;gBACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;YAE9D,IAAI,CAAE,IAAY,CAAC,EAAE,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAE,IAAY,CAAC,KAAK,EAAE,OAAO,IAAI,yBAAyB,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACtJ,CAAC;YACD,MAAM,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAY,CAAC,IAAI,CAAC;YACpD,MAAM;QACR,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACxG,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC3C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACrC,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;gBAC1B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACzF,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACxH,CAAC;gBACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC/H,CAAC;YACH,CAAC;YAAC,OAAO,MAAW,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,UAAU;oBAAE,MAAM,MAAM,CAAC;gBACpC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACtG,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAE7D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE;oBAClD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,eAAe,EAAE,MAAM,CAAC,MAAM;wBAC9B,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBAC/C;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;oBAC9E,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpH,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;gBAC9D,MAAM,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAY,CAAC,MAAM,IAAI,IAAI,CAAC;YAChE,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,QAAQ;YACX,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6DAA6D,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAE7J;YACE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC5I,CAAC;IAED,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,EAAE;QACzB,MAAM;QACN,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;QACpE,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/src/services/config-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-schema.d.ts","sourceRoot":"","sources":["../../../src/services/config-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,GAAG,EAAE,MAAM,YAAY,CAAC;IACxB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC3D,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAClC,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;CACpD;AAID,eAAO,MAAM,aAAa,EAAE,cAAc,EAqRzC,CAAC;AAIF,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAErE,6CAA6C;AAC7C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAEjE,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAE1D,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAW1D,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAY5E;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3D"}
+{"version":3,"file":"config-schema.d.ts","sourceRoot":"","sources":["../../../src/services/config-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,GAAG,EAAE,MAAM,YAAY,CAAC;IACxB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC3D,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAClC,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;CACpD;AAID,eAAO,MAAM,aAAa,EAAE,cAAc,EAyRzC,CAAC;AAIF,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAErE,6CAA6C;AAC7C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAEjE,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAE1D,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAW1D,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAY5E;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3D"}

package/dist/src/services/config-schema.js

@@ -186,6 +186,10 @@ export const CONFIG_FIELDS = [
     { key: 'eudiwRedirectUri', dotPath: 'eudiw.redirect_uri', envVar: 'AIMEAT_EUDIW_REDIRECT_URI', type: 'string', validate: () => true, immutable: false, description: 'EUDIW redirect URI' },
     { key: 'ftnProviderUrl', dotPath: 'eudiw.ftn_provider_url', envVar: 'AIMEAT_FTN_PROVIDER_URL', type: 'string', validate: () => true, immutable: false, description: 'Finnish Trust Network provider URL' },
     { key: 'vcIssuerDid', dotPath: 'eudiw.vc_issuer_did', envVar: 'AIMEAT_VC_ISSUER_DID', type: 'string', validate: () => true, immutable: false, description: 'Verifiable credential issuer DID' },
+    { key: 'ftnClientId', dotPath: 'eudiw.ftn_client_id', envVar: 'AIMEAT_FTN_CLIENT_ID', type: 'string', validate: () => true, immutable: false, description: 'FTN broker OIDC client ID' },
+    { key: 'ftnClientSecret', dotPath: 'eudiw.ftn_client_secret', envVar: 'AIMEAT_FTN_CLIENT_SECRET', type: 'string', validate: () => true, immutable: true, description: 'FTN broker OIDC client secret (secret)', adminDisplay: 'hidden' },
+    { key: 'nonceTtlSeconds', dotPath: 'eudiw.nonce_ttl_seconds', envVar: 'AIMEAT_NONCE_TTL_SECONDS', type: 'number', validate: v => typeof v === 'number' && Number.isInteger(v) && v >= 60 && v <= 3600, immutable: false, description: 'Verification nonce TTL in seconds', range: '60-3600' },
+    { key: 'nationalEidPidClaim', dotPath: 'eudiw.national_eid_pid_claim', envVar: 'AIMEAT_NATIONAL_EID_PID_CLAIM', type: 'string', validate: v => typeof v === 'string' && v.length > 0, immutable: false, description: 'National eID PID claim name (e.g., personal_identity_code)' },
     // ── Setup (immutable) ──
     { key: 'setupAllowedIps', dotPath: 'setup.allowed_ips', envVar: 'AIMEAT_SETUP_ALLOWED_IPS', type: 'string', validate: () => true, immutable: true, description: 'Comma-separated IPs allowed for setup', adminDisplay: 'configured' },
     // ── Moderation (mutable) ──