aimeat 1.2.6 → 1.3.0

package/dist/src/storage/providers/sqlite/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/storage/providers/sqlite/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CA+jC5D"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/storage/providers/sqlite/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CA4oC5D"}

package/dist/src/storage/providers/sqlite/schema.js

@@ -526,6 +526,18 @@ export function initializeSchema(db) {
       createdAt      TEXT NOT NULL
     );
 
+    -- ── Verification Nonces ──
+    CREATE TABLE IF NOT EXISTS verification_nonces (
+      id             TEXT PRIMARY KEY,
+      owner          TEXT NOT NULL,
+      type           TEXT NOT NULL,
+      state          TEXT NOT NULL UNIQUE,
+      nonce          TEXT NOT NULL,
+      redirectUri    TEXT NOT NULL DEFAULT '',
+      createdAt      TEXT NOT NULL,
+      expiresAt      TEXT NOT NULL
+    );
+
     -- ── Genesis Peers ──
     CREATE TABLE IF NOT EXISTS genesis_peers (
       id              TEXT PRIMARY KEY,
@@ -1065,6 +1077,71 @@ export function initializeSchema(db) {
     CREATE INDEX IF NOT EXISTS idx_package_instances_owner ON package_instances(owner);
     CREATE INDEX IF NOT EXISTS idx_package_instances_package ON package_instances(packageGroupId);
 
+    -- Capabilities
+    CREATE TABLE IF NOT EXISTS capabilities (
+      id                TEXT PRIMARY KEY,
+      name              TEXT NOT NULL,
+      summary           TEXT NOT NULL DEFAULT '',
+      ownerGhii         TEXT NOT NULL,
+      visibility        TEXT NOT NULL DEFAULT 'private',
+      scope             TEXT NOT NULL DEFAULT 'local',
+      status            TEXT NOT NULL DEFAULT 'draft',
+      rejectionReason   TEXT,
+      deprecationMessage TEXT,
+      replacedBy        TEXT,
+      sourceType        TEXT NOT NULL,
+      sourceRef         TEXT NOT NULL,
+      sourceVersion     TEXT NOT NULL DEFAULT '',
+      authRequired      TEXT NOT NULL DEFAULT 'registered',
+      callable          INTEGER NOT NULL DEFAULT 0,
+      inputSchema       TEXT,
+      outputSchema      TEXT,
+      exports           TEXT,
+      usage             TEXT NOT NULL DEFAULT '',
+      whenToUse         TEXT NOT NULL DEFAULT '',
+      whenNotToUse      TEXT NOT NULL DEFAULT '',
+      examples          TEXT NOT NULL DEFAULT '[]',
+      dependencies      TEXT NOT NULL DEFAULT '[]',
+      schemaHash        TEXT NOT NULL DEFAULT '',
+      webhookUrl        TEXT,
+      cost              TEXT,
+      trustRequired     REAL,
+      trust             TEXT NOT NULL DEFAULT '{"operatorReviewed":false,"reviewedAt":null,"vouchCount":0,"publisherTrustScore":0,"codeAudited":false,"auditNotes":null}',
+      redactedFields    TEXT NOT NULL DEFAULT '[]',
+      operatorOverride  TEXT,
+      stats             TEXT NOT NULL DEFAULT '{"totalInvocations":0,"successCount":0,"errorCount":0,"lastInvokedAt":null,"avgResponseMs":0,"lastError":null}',
+      tags              TEXT NOT NULL DEFAULT '[]',
+      createdAt         TEXT NOT NULL,
+      updatedAt         TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_capabilities_owner ON capabilities(ownerGhii);
+    CREATE INDEX IF NOT EXISTS idx_capabilities_source ON capabilities(sourceType, sourceRef);
+    CREATE INDEX IF NOT EXISTS idx_capabilities_status ON capabilities(status);
+    CREATE INDEX IF NOT EXISTS idx_capabilities_visibility ON capabilities(visibility);
+
+    CREATE TABLE IF NOT EXISTS capability_logs (
+      id            TEXT PRIMARY KEY,
+      capabilityId  TEXT NOT NULL,
+      callerGhii    TEXT NOT NULL,
+      input         TEXT NOT NULL DEFAULT '{}',
+      status        TEXT NOT NULL,
+      durationMs    INTEGER NOT NULL DEFAULT 0,
+      error         TEXT,
+      timestamp     TEXT NOT NULL,
+      FOREIGN KEY (capabilityId) REFERENCES capabilities(id) ON DELETE CASCADE
+    );
+    CREATE INDEX IF NOT EXISTS idx_capability_logs_cap ON capability_logs(capabilityId, timestamp);
+    CREATE INDEX IF NOT EXISTS idx_capability_logs_status ON capability_logs(capabilityId, status);
+
+    CREATE TABLE IF NOT EXISTS capability_vouches (
+      capabilityId  TEXT NOT NULL,
+      userGhii      TEXT NOT NULL,
+      comment       TEXT,
+      createdAt     TEXT NOT NULL,
+      PRIMARY KEY (capabilityId, userGhii),
+      FOREIGN KEY (capabilityId) REFERENCES capabilities(id) ON DELETE CASCADE
+    );
+
   `);
     // ── Schema migrations for existing databases ──
     // ALTER TABLE ADD COLUMN is idempotent-safe: if the column exists, it throws

package/dist/src/storage/providers/sqlite/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../../src/storage/providers/sqlite/schema.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAqB;IACpD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsiCP,CAAC,CAAC;IAEH,iDAAiD;IACjD,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QACpE,IAAI,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IAC7G,CAAC,CAAC;IAEF,4CAA4C;IAC5C,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAEjD,6CAA6C;IAC7C,aAAa,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAElD,8CAA8C;IAC9C,aAAa,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAElD,wDAAwD;IACxD,aAAa,CAAC,gBAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,aAAa,CAAC,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAEvD,yDAAyD;IACzD,aAAa,CAAC,QAAQ,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AAClE,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../../src/storage/providers/sqlite/schema.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAqB;IACpD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmnCP,CAAC,CAAC;IAEH,iDAAiD;IACjD,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QACpE,IAAI,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IAC7G,CAAC,CAAC;IAEF,4CAA4C;IAC5C,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAEjD,6CAA6C;IAC7C,aAAa,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAElD,8CAA8C;IAC9C,aAAa,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAElD,wDAAwD;IACxD,aAAa,CAAC,gBAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,aAAa,CAAC,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAEvD,yDAAyD;IACzD,aAAa,CAAC,QAAQ,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AAClE,CAAC"}

package/dist/src/storage/repositories/capability.repository.d.ts

@@ -0,0 +1,35 @@
+import type { CapabilityRecord, CapabilityLogEntry, CapabilityOverride, CapabilityTrust, CapabilityFilter } from '../interface.js';
+export interface CapabilityRepository {
+    createCapability(record: CapabilityRecord): Promise<CapabilityRecord>;
+    getCapability(id: string): Promise<CapabilityRecord | null>;
+    updateCapability(id: string, updates: Partial<CapabilityRecord>): Promise<CapabilityRecord | null>;
+    deleteCapability(id: string): Promise<boolean>;
+    listCapabilities(filters: CapabilityFilter): Promise<{
+        capabilities: CapabilityRecord[];
+        total: number;
+    }>;
+    listCapabilitiesByOwner(ownerGhii: string): Promise<CapabilityRecord[]>;
+    getCapabilityBySourceRef(sourceRef: string): Promise<CapabilityRecord | null>;
+    listCapabilitiesBySourceType(sourceType: string): Promise<CapabilityRecord[]>;
+    incrementCapabilityStats(id: string, delta: {
+        success: number;
+        error: number;
+        totalMs: number;
+        lastError?: string;
+    }): Promise<void>;
+    addCapabilityLog(entry: CapabilityLogEntry): Promise<void>;
+    listCapabilityLogs(capabilityId: string, filters: {
+        status?: 'success' | 'error';
+        page?: number;
+        perPage?: number;
+    }): Promise<{
+        logs: CapabilityLogEntry[];
+        total: number;
+    }>;
+    deleteCapabilityLogsBefore(before: string): Promise<number>;
+    setCapabilityOverride(id: string, override: CapabilityOverride | null): Promise<void>;
+    setCapabilityTrust(id: string, trust: Partial<CapabilityTrust>): Promise<void>;
+    incrementVouchCount(id: string): Promise<void>;
+    decrementVouchCount(id: string): Promise<void>;
+}
+//# sourceMappingURL=capability.repository.d.ts.map

package/dist/src/storage/repositories/capability.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.repository.d.ts","sourceRoot":"","sources":["../../../../src/storage/repositories/capability.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnI,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC5D,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/C,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1G,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxE,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC9E,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE9E,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAC1C,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KACrE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;QAChD,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5D,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD"}

package/dist/src/storage/repositories/capability.repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=capability.repository.js.map

package/dist/src/storage/repositories/capability.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.repository.js","sourceRoot":"","sources":["../../../../src/storage/repositories/capability.repository.ts"],"names":[],"mappings":""}

package/dist/src/storage/repositories/index.d.ts

@@ -31,4 +31,5 @@ export type { SystemPromptRepository } from './system-prompt.repository.js';
 export type { PackageRepository } from './package.repository.js';
 export type { TemplateListingRepository } from './template-listing.repository.js';
 export type { PackageInstanceRepository } from './package-instance.repository.js';
+export type { CapabilityRepository } from './capability.repository.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/storage/repositories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/storage/repositories/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAChF,YAAY,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AAC5F,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,YAAY,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/storage/repositories/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAChF,YAAY,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AAC5F,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,YAAY,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/src/storage/repositories/node.repository.d.ts

@@ -1,4 +1,4 @@
-import type { MaintenanceState, PushSubscriptionRecord, TrustedIssuerRecord, RealtimeRoomRecord, SiteChangeLogEntry, ExtensionRecord, EscrowHoldRecord, CortexExtensionRecord } from '../interface.js';
+import type { MaintenanceState, PushSubscriptionRecord, TrustedIssuerRecord, VerificationNonceRecord, RealtimeRoomRecord, SiteChangeLogEntry, ExtensionRecord, EscrowHoldRecord, CortexExtensionRecord } from '../interface.js';
 export interface NodeRepository {
     setNodeKey(publicKey: string, privateKey: string): Promise<void>;
     getNodeKey(): Promise<{
@@ -18,6 +18,10 @@ export interface NodeRepository {
         type?: string;
     }): Promise<TrustedIssuerRecord[]>;
     deleteTrustedIssuer(id: string): Promise<boolean>;
+    createVerificationNonce(record: VerificationNonceRecord): Promise<VerificationNonceRecord>;
+    getVerificationNonce(state: string): Promise<VerificationNonceRecord | null>;
+    deleteVerificationNonce(state: string): Promise<void>;
+    cleanExpiredNonces(): Promise<number>;
     createRealtimeRoom(room: RealtimeRoomRecord): Promise<RealtimeRoomRecord>;
     getRealtimeRoom(id: string): Promise<RealtimeRoomRecord | null>;
     listRealtimeRooms(filter?: {

package/dist/src/storage/repositories/node.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.repository.d.ts","sourceRoot":"","sources":["../../../../src/storage/repositories/node.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,UAAU,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACxE,kBAAkB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvE,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxF,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC/E,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,qBAAqB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC3D,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/E,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAClE,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACxE,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC7E,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAChE,iBAAiB,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACzG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjF,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAC5D,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACvE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAClG,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAChE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3F,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACpF,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnE,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrF,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACxE,oBAAoB,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClJ,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACpH,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE"}
+{"version":3,"file":"node.repository.d.ts","sourceRoot":"","sources":["../../../../src/storage/repositories/node.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,UAAU,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACxE,kBAAkB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvE,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxF,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC/E,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,qBAAqB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC3D,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/E,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAClE,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACxE,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC7E,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,uBAAuB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3F,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC7E,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAChE,iBAAiB,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACzG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjF,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAC5D,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACvE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAClG,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAChE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3F,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACpF,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnE,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrF,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACxE,oBAAoB,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClJ,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACpH,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE"}

package/dist/static/app-catalog.html

@@ -1110,6 +1110,36 @@
       font-size: .85rem;
     }
 
+    .published-source-badge {
+      display: inline-block;
+      font-size: .62rem;
+      font-weight: 600;
+      text-transform: uppercase;
+      letter-spacing: .03em;
+      padding: 2px 6px;
+      border-radius: 4px;
+      vertical-align: middle;
+      margin-left: 6px;
+    }
+
+    .published-source-badge.local {
+      background: rgba(52, 211, 153, .12);
+      color: #34d399;
+      border: 1px solid rgba(52, 211, 153, .3);
+    }
+
+    .published-source-badge.server {
+      background: rgba(99, 102, 241, .10);
+      color: #6366f1;
+      border: 1px solid rgba(99, 102, 241, .25);
+    }
+
+    .published-source-badge.both {
+      background: rgba(245, 158, 11, .10);
+      color: #d97706;
+      border: 1px solid rgba(245, 158, 11, .25);
+    }
+
     /* ── Cortex Extensions Bar ──────────────────────── */
 
     .cortex-mini-card{background:#FFFFFF;border:1px solid #E5E7EB;border-radius:10px;padding:.75rem 1rem;cursor:pointer;min-width:160px;flex-shrink:0;transition:all .15s}
@@ -3082,43 +3112,140 @@
   }
 
   function loadPublishedApps() {
+    var config = loadConfig();
+    var aimeatUrl = config.aimeatUrl ? config.aimeatUrl.replace(/\/+$/, '') : '';
+    var section = document.getElementById('published-section');
+    var grid = document.getElementById('published-grid');
+    var countEl = document.getElementById('published-count');
+
+    // Get current owner name from session (if logged in)
+    var currentOwner = null;
+    try {
+      if (window.AIMEAT && window.AIMEAT.auth && window.AIMEAT.auth.getSession()) {
+        currentOwner = window.AIMEAT.auth.getSession().owner || null;
+      }
+      if (!currentOwner) {
+        var stored = localStorage.getItem('aimeat_session');
+        if (stored) {
+          currentOwner = JSON.parse(stored).owner || null;
+        }
+      }
+    } catch(e) {}
+
+    // Always load local published apps
     getAllApps().then(function(apps) {
-      var published = apps.filter(function(a) { return a.published; });
-      var section = document.getElementById('published-section');
-      var grid = document.getElementById('published-grid');
-      var countEl = document.getElementById('published-count');
+      var localPublished = apps.filter(function(a) { return a.published; });
+
+      // Build a lookup of local published apps by filename
+      var localByFilename = {};
+      for (var i = 0; i < localPublished.length; i++) {
+        var lp = localPublished[i];
+        if (lp.publishedFilename) {
+          localByFilename[lp.publishedFilename] = lp;
+        }
+      }
 
-      if (published.length === 0) {
-        section.style.display = 'none';
+      // If no aimeatUrl, fall back to local-only display
+      if (!aimeatUrl) {
+        renderPublishedApps(localPublished, [], localByFilename, aimeatUrl, section, grid, countEl);
         return;
       }
 
-      section.style.display = '';
-      countEl.textContent = '(' + published.length + ')';
-      var config = loadConfig();
-      var aimeatUrl = config.aimeatUrl ? config.aimeatUrl.replace(/\/+$/, '') : '';
-
-      var html = '';
-      for (var i = 0; i < published.length; i++) {
-        var app = published[i];
-        var url = app.publishedUrl ? (aimeatUrl + app.publishedUrl) : '';
-        html +=
-          '<div class="published-card">' +
-            '<div class="published-card-name">' + escapeHtml(app.name || app.publishedFilename || 'Untitled') + (app.publishedVersionNumber ? ' <span style="opacity:.5;font-size:.85em">v' + app.publishedVersionNumber + '</span>' : '') + '</div>' +
-            '<div class="published-card-meta">' +
-              '<span>' + escapeHtml(app.publishedFilename || '') + '</span>' +
-              '<span>' + (app.publishedAt ? new Date(app.publishedAt).toLocaleDateString() : '') + '</span>' +
-            '</div>' +
-            '<div class="published-card-actions">' +
-              (url ? '<button onclick="window.open(\'' + escapeHtml(url) + '?mode=inline\', \'_blank\')">&#x1F441; View</button>' : '') +
-              '<button onclick="window._launcher.unpublishApp(\'' + escapeHtml(app.id) + '\')" class="danger">&#x1F5D1; Remove</button>' +
-            '</div>' +
-          '</div>';
-      }
-      grid.innerHTML = html;
+      // Fetch server apps
+      fetch(aimeatUrl + '/v1/apps')
+        .then(function(resp) {
+          if (!resp.ok) throw new Error('Server returned ' + resp.status);
+          return resp.json();
+        })
+        .then(function(json) {
+          var serverApps = json.data && json.data.apps ? json.data.apps : [];
+
+          // Filter to current owner's apps if we know who they are
+          if (currentOwner) {
+            serverApps = serverApps.filter(function(a) { return a.owner === currentOwner; });
+          }
+
+          renderPublishedApps(localPublished, serverApps, localByFilename, aimeatUrl, section, grid, countEl);
+        })
+        .catch(function() {
+          // Server fetch failed - fall back to local only
+          renderPublishedApps(localPublished, [], localByFilename, aimeatUrl, section, grid, countEl);
+        });
     });
   }
 
+  function renderPublishedApps(localPublished, serverApps, localByFilename, aimeatUrl, section, grid, countEl) {
+    // Merge: build a combined list. Server apps take priority for display data,
+    // but we note which source(s) each app comes from.
+    var merged = [];
+    var seenFilenames = {};
+
+    // Add server apps first
+    for (var s = 0; s < serverApps.length; s++) {
+      var sa = serverApps[s];
+      var filename = sa.filename || '';
+      var localMatch = localByFilename[filename] || null;
+      var source = localMatch ? 'both' : 'server';
+      seenFilenames[filename] = true;
+      merged.push({
+        name: (sa.manifest && sa.manifest.name) ? sa.manifest.name : filename,
+        filename: filename,
+        version: sa.version_number ? 'v' + sa.version_number : '',
+        date: sa.created_at ? new Date(sa.created_at).toLocaleDateString() : '',
+        viewUrl: aimeatUrl + '/v1/apps/' + encodeURIComponent(sa.owner || '') + '/' + encodeURIComponent(filename),
+        source: source,
+        localId: localMatch ? localMatch.id : null
+      });
+    }
+
+    // Add local-only apps (not already seen from server)
+    for (var l = 0; l < localPublished.length; l++) {
+      var lp = localPublished[l];
+      var lpFilename = lp.publishedFilename || '';
+      if (lpFilename && seenFilenames[lpFilename]) continue;
+      var lpUrl = lp.publishedUrl ? (aimeatUrl + lp.publishedUrl) : '';
+      merged.push({
+        name: lp.name || lpFilename || 'Untitled',
+        filename: lpFilename,
+        version: lp.publishedVersionNumber ? 'v' + lp.publishedVersionNumber : '',
+        date: lp.publishedAt ? new Date(lp.publishedAt).toLocaleDateString() : '',
+        viewUrl: lpUrl,
+        source: 'local',
+        localId: lp.id
+      });
+    }
+
+    if (merged.length === 0) {
+      section.style.display = 'none';
+      return;
+    }
+
+    section.style.display = '';
+    countEl.textContent = '(' + merged.length + ')';
+
+    var html = '';
+    for (var i = 0; i < merged.length; i++) {
+      var app = merged[i];
+      var badgeClass = app.source === 'both' ? 'both' : (app.source === 'server' ? 'server' : 'local');
+      var badgeLabel = app.source === 'both' ? 'local + server' : app.source;
+      html +=
+        '<div class="published-card">' +
+          '<div class="published-card-name">' + escapeHtml(app.name) + (app.version ? ' <span style="opacity:.5;font-size:.85em">' + escapeHtml(app.version) + '</span>' : '') +
+            ' <span class="published-source-badge ' + badgeClass + '">' + badgeLabel + '</span>' +
+          '</div>' +
+          '<div class="published-card-meta">' +
+            '<span>' + escapeHtml(app.filename) + '</span>' +
+            '<span>' + app.date + '</span>' +
+          '</div>' +
+          '<div class="published-card-actions">' +
+            (app.viewUrl ? '<button onclick="window.open(\'' + escapeHtml(app.viewUrl) + '?mode=inline\', \'_blank\')">&#x1F441; View</button>' : '') +
+            (app.localId ? '<button onclick="window._launcher.unpublishApp(\'' + escapeHtml(app.localId) + '\')" class="danger">&#x1F5D1; Remove</button>' : '') +
+          '</div>' +
+        '</div>';
+    }
+    grid.innerHTML = html;
+  }
+
   function unpublishApp(appId) {
     if (!confirm('Remove this published app from the server?')) return;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aimeat",
-  "version": "1.2.6",
+  "version": "1.3.0",
   "description": "AIME AT — AI Memory Exchange and Action Transfer — reference implementation",
   "type": "module",
   "main": "dist/src/index.js",
@@ -115,6 +115,10 @@
     "@modelcontextprotocol/sdk": "^1.27.1",
     "@noble/ed25519": "^3.0.0",
     "@noble/hashes": "^2.0.1",
+    "@sd-jwt/core": "^0.19.0",
+    "@sd-jwt/decode": "^0.19.0",
+    "@sd-jwt/types": "^0.19.0",
+    "@sd-jwt/utils": "^0.19.0",
     "ajv": "^8.18.0",
     "ajv-formats": "^3.0.1",
     "archiver": "^7.0.1",
@@ -128,6 +132,7 @@
     "jose": "^6.1.3",
     "minidenticons": "^4.2.1",
     "nodemailer": "^8.0.5",
+    "openid-client": "^6.8.4",
     "otpauth": "^9.5.0",
     "prom-client": "^15.1.3",
     "qrcode": "^1.5.4",

package/prisma/schema.prisma

@@ -687,6 +687,19 @@ model TrustedIssuer {
   @@index([url])
 }
 
+model VerificationNonce {
+  id          String   @id @map("_id")
+  owner       String
+  type        String
+  state       String   @unique
+  nonce       String
+  redirectUri String   @default("")
+  createdAt   DateTime @default(now())
+  expiresAt   DateTime
+
+  @@index([expiresAt])
+}
+
 model GenesisPeer {
   id            String   @id @map("_id")
   genesisNodeId String
@@ -1084,3 +1097,76 @@ model PackageInstance {
   @@index([owner])
   @@index([packageGroupId])
 }
+
+model Capability {
+  id                 String   @id @map("_id")
+  name               String
+  summary            String   @default("")
+  ownerGhii          String
+  visibility         String   @default("private")
+  scope              String   @default("local")
+  status             String   @default("draft")
+  rejectionReason    String?
+  deprecationMessage String?
+  replacedBy         String?
+  sourceType         String
+  sourceRef          String
+  sourceVersion      String   @default("")
+  authRequired       String   @default("registered")
+  callable           Boolean  @default(false)
+  inputSchema        Json?
+  outputSchema       Json?
+  exports            Json?    // CapabilityExport[]
+  usage              String   @default("")
+  whenToUse          String   @default("")
+  whenNotToUse       String   @default("")
+  examples           Json     @default("[]")   // Array<{ description, input, output }>
+  dependencies       Json     @default("[]")   // CapabilityDependency[]
+  schemaHash         String   @default("")
+  webhookUrl         String?
+  cost               Json?    // { morsels, perUnit? }
+  trustRequired      Float?
+  trust              Json     // CapabilityTrust
+  redactedFields     Json     @default("[]")   // string[]
+  operatorOverride   Json?    // CapabilityOverride
+  stats              Json     // CapabilityStats
+  tags               Json     @default("[]")   // string[]
+  createdAt          DateTime @default(now())
+  updatedAt          DateTime @updatedAt
+
+  logs               CapabilityLog[]
+  vouches            CapabilityVouch[]
+
+  @@index([ownerGhii])
+  @@index([sourceType, sourceRef])
+  @@index([status])
+  @@index([visibility])
+}
+
+model CapabilityLog {
+  id           String   @id @default(auto()) @map("_id") @db.ObjectId
+  capabilityId String
+  callerGhii   String
+  input        Json     @default("{}")
+  status       String
+  durationMs   Int      @default(0)
+  error        String?
+  timestamp    DateTime @default(now())
+
+  capability   Capability @relation(fields: [capabilityId], references: [id], onDelete: Cascade)
+
+  @@index([capabilityId, timestamp])
+  @@index([capabilityId, status])
+}
+
+model CapabilityVouch {
+  id           String   @id @default(auto()) @map("_id") @db.ObjectId
+  capabilityId String
+  userGhii     String
+  comment      String?
+  createdAt    DateTime @default(now())
+
+  capability   Capability @relation(fields: [capabilityId], references: [id], onDelete: Cascade)
+
+  @@unique([capabilityId, userGhii])
+}