aimeat 1.20.0 → 1.20.2

package/dist/locales/en.json

@@ -5523,6 +5523,21 @@
     "hiddenAgent": "An agent whose details you cannot see",
     "otherAgentHint": "Another owner’s agent — you see what it has done here, not its live status",
     "viaAgent": "done via this agent",
+    "manageAccess": "Manage who can work here",
+    "requestedAccess": "requested access",
+    "addAsContributor": "Add as contributor",
+    "addAsViewer": "as viewer",
+    "deny": "Deny",
+    "roleContributorShort": "contributor",
+    "roleViewerShort": "viewer",
+    "makeContributor": "→ can write",
+    "makeViewer": "→ read only",
+    "remove": "Remove",
+    "addMemberPlaceholder": "owner name (or owner@node / agent#owner@node)",
+    "roleContributor": "contributor (read + write)",
+    "roleViewer": "viewer (read only)",
+    "addMember": "Add",
+    "accessHint": "Members can be a different account; their agents inherit the role. Viewers read; contributors read + write.",
     "contributions": "contributions",
     "events": "events",
     "less": "Less",
@@ -5540,8 +5555,12 @@
     "aiPrompt": "AI access prompt:",
     "aiPromptHuman": "For chat",
     "aiPromptAgent": "For coding agent",
+    "contractPrompt": "Create contract agent",
+    "contractPromptHint": "Copy a prompt to build an agent that processes this workspace (reads requests → writes results)",
+    "contractPromptCopied": "Contract-agent prompt copied — paste it to your AI / coding agent.",
     "promptCopied": "Access prompt copied — paste it to your AI.",
-    "addSpaceBtn": "Space",
+    "addSpaceBtn": "Document space",
+    "workspaceOrganism": "Organism",
     "addSpaceTitle": "Add a space",
     "addSpaceDesc": "A document space is a free-form wiki (sections + markdown pages). A record space is a schema-locked list (forms). You can remove spaces in Settings.",
     "modeDocument": "Document (wiki)",
@@ -5576,7 +5595,20 @@
     "sourcesSaveError": "Failed to save sources",
     "publishGated": "Sent for review (publish gate is on)",
     "publishGate": "Require review before publishing",
+    "publishGateHint": "When on, an agent’s publish is held for your review instead of going live",
     "gateToggled": "Publish gate updated",
+    "share": "Share",
+    "shareHint": "Publish document pages to a public, no-login link",
+    "sharePublicTitle": "Public sharing",
+    "sharePublicDesc": "Make published document-space pages readable by anyone with the link — no login required. Drafts are never shared.",
+    "noDocSpaces": "This workspace has no document spaces to share.",
+    "noPublishedDocs": "No published documents yet — publish a page to share it.",
+    "openLink": "open ↗",
+    "openPublicViewer": "Open public viewer",
+    "copyLink": "Copy link",
+    "linkCopied": "Link copied",
+    "copyFailed": "Copy failed",
+    "shareFailed": "Failed to update sharing",
     "needsDecision": "Needs your decision",
     "approve": "Approve",
     "reject": "Reject",
@@ -6192,5 +6224,14 @@
     "exportJson": "Export JSON",
     "copyMarkdown": "Copy as Markdown",
     "copied": "Copied!"
+  },
+  "pwv": {
+    "loading": "Loading…",
+    "sharedDocuments": "Shared documents",
+    "publicBadge": "Public document",
+    "print": "Print / Save as PDF",
+    "selectDocument": "Select a document.",
+    "unavailableTitle": "Nothing to show here",
+    "unavailableDesc": "This workspace has no publicly shared documents, or the link is incomplete."
   }
 }

package/dist/locales/fi.json

@@ -5523,6 +5523,21 @@
     "hiddenAgent": "Agentti jonka tietoja et näe",
     "otherAgentHint": "Toisen omistajan agentti — näet mitä se on tehnyt täällä, et sen nykytilaa",
     "viaAgent": "tehty tämän agentin kautta",
+    "manageAccess": "Hallitse ketkä työskentelevät täällä",
+    "requestedAccess": "pyysi pääsyä",
+    "addAsContributor": "Lisää kirjoittajaksi",
+    "addAsViewer": "lukijaksi",
+    "deny": "Hylkää",
+    "roleContributorShort": "kirjoittaja",
+    "roleViewerShort": "lukija",
+    "makeContributor": "→ saa kirjoittaa",
+    "makeViewer": "→ vain luku",
+    "remove": "Poista",
+    "addMemberPlaceholder": "omistajan nimi (tai owner@node / agent#owner@node)",
+    "roleContributor": "kirjoittaja (luku + kirjoitus)",
+    "roleViewer": "lukija (vain luku)",
+    "addMember": "Lisää",
+    "accessHint": "Jäsen voi olla eri tili; sen agentit perivät roolin. Lukijat lukevat; kirjoittajat lukevat + kirjoittavat.",
     "contributions": "kontribuutiota",
     "events": "tapahtumaa",
     "less": "Vähemmän",
@@ -5540,8 +5555,12 @@
     "aiPrompt": "AI-käyttöohje:",
     "aiPromptHuman": "Chattiin",
     "aiPromptAgent": "Koodausagentille",
+    "contractPrompt": "Luo contract-agentti",
+    "contractPromptHint": "Kopioi kehote agentin rakentamiseksi joka prosessoi tätä workspacea (lukee pyynnöt → kirjoittaa tulokset)",
+    "contractPromptCopied": "Contract-agentti-kehote kopioitu — liitä se tekoälyllesi / koodausagentille.",
     "promptCopied": "Käyttöohje kopioitu — liitä se tekoälyllesi.",
-    "addSpaceBtn": "Tila",
+    "addSpaceBtn": "Dokumenttitila",
+    "workspaceOrganism": "Organismi",
     "addSpaceTitle": "Lisää tila",
     "addSpaceDesc": "Dokumenttitila on vapaamuotoinen wiki (osiot + markdown-sivut). Tietuetila on skeemalukittu lista (lomakkeet). Voit poistaa tiloja asetuksissa.",
     "modeDocument": "Dokumentti (wiki)",
@@ -5578,7 +5597,20 @@
     "sourcesSaveError": "Lähteiden tallennus epäonnistui",
     "publishGated": "Lähetetty tarkistettavaksi (julkaisuportti päällä)",
     "publishGate": "Vaadi tarkistus ennen julkaisua",
+    "publishGateHint": "Päällä ollessaan agentin julkaisu jää tarkistettavaksesi sen sijaan että menisi suoraan liveksi",
     "gateToggled": "Julkaisuportti päivitetty",
+    "share": "Jaa",
+    "shareHint": "Julkaise dokumenttisivuja julkiseen linkkiin ilman kirjautumista",
+    "sharePublicTitle": "Julkinen jako",
+    "sharePublicDesc": "Tee julkaistut dokumenttisivut luettaviksi kenelle tahansa linkin kautta — ilman kirjautumista. Luonnoksia ei koskaan jaeta.",
+    "noDocSpaces": "Tässä työtilassa ei ole jaettavia dokumenttitiloja.",
+    "noPublishedDocs": "Ei julkaistuja dokumentteja vielä — julkaise sivu jakaaksesi sen.",
+    "openLink": "avaa ↗",
+    "openPublicViewer": "Avaa julkinen näkymä",
+    "copyLink": "Kopioi linkki",
+    "linkCopied": "Linkki kopioitu",
+    "copyFailed": "Kopiointi epäonnistui",
+    "shareFailed": "Jaon päivitys epäonnistui",
     "needsDecision": "Vaatii päätöksesi",
     "approve": "Hyväksy",
     "reject": "Hylkää",
@@ -6194,5 +6226,14 @@
     "exportJson": "Vie JSON",
     "copyMarkdown": "Kopioi Markdownina",
     "copied": "Kopioitu!"
+  },
+  "pwv": {
+    "loading": "Ladataan…",
+    "sharedDocuments": "Jaetut dokumentit",
+    "publicBadge": "Julkinen dokumentti",
+    "print": "Tulosta / Tallenna PDF:nä",
+    "selectDocument": "Valitse dokumentti.",
+    "unavailableTitle": "Ei näytettävää",
+    "unavailableDesc": "Tällä työtilalla ei ole julkisesti jaettuja dokumentteja, tai linkki on puutteellinen."
   }
 }

package/dist/public/css/views/profile.css

@@ -53,6 +53,17 @@
  *     var(--success,#22c55e)/var(--danger,#ef4444). Appearance unchanged (values
  *     resolve identically; swatches deliberately do not flip in dark). Shared shape
  *     was already factored onto .badge-label — kept as-is.
+ *   v1.12.0 — 2026-06-09 — Workspace header restyle (pj-): breadcrumb (.pj-ws-crumbs)
+ *     keeps the parent organism visible; inline title+badge (.pj-ws-titlerow); the
+ *     action row became a tinted .pj-toolbar with consistent buttons (card fill +
+ *     shadow so they stop blending into the page), .pj-toolbar-sep separators, and the
+ *     review gate pushed apart (margin-left:auto). .pj-section-head no longer
+ *     space-betweens — add-actions cluster next to their title and lift off the panel;
+ *     the .pj-doc-tag kind chip got an accent-tinted fill so it stops blending in.
+ *   v1.13.0 — 2026-06-09 — Record-item readability: draft rows get a --warn rail +
+ *     bordered/bolder DRAFT chip and the inline Edit button gets the card-fill
+ *     treatment (both were nearly invisible). Expanded fields (.pj-rec-fields .kv-row)
+ *     gain a dotted leader between label and value so each value maps to its key.
  */
 .pf-hero{background:var(--pf-hero-gradient);border-bottom:1px solid var(--border,#E5E7EB)}
 .pf-hero-inner{max-width:1000px;margin:0 auto;padding:2rem 1.5rem 0}
@@ -2018,24 +2029,62 @@
 
 /* ── Projects tab (pj-) ── */
 .pj-ws { display: flex; flex-direction: column; gap: 0.5rem; }
-.pj-gate { margin: 0.25rem 0 0.5rem; }
+
+/* Workspace breadcrumb — keeps the parent organism visible so you always know
+   which organism this workspace belongs to. */
+.pj-ws-crumbs { display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; margin-bottom: 0.2rem; }
+.pj-crumb-sep { color: var(--muted); font-size: 0.85rem; }
+.pj-crumb-org { font-size: 0.85rem; font-weight: 600; color: var(--text); }
+
+/* Title row — workspace name + status badge sit on one line. */
+.pj-ws-titlerow { display: flex; align-items: center; gap: 0.6rem; flex-wrap: wrap; }
+.pj-ws-title { margin: 0; }
+
+/* Workspace action toolbar — a tinted bar so the (otherwise transparent) buttons
+   read as real buttons rather than blending into the page. Consistent gap +
+   vertical separators group the Settings/Add, AI-prompt, and review-gate controls. */
+.pj-toolbar { display: flex; align-items: center; flex-wrap: wrap; gap: 0.5rem; padding: 0.45rem 0.55rem; background: var(--bg-dim); border: 1px solid var(--border); border-radius: 10px; margin: 0.1rem 0 0.4rem; }
+.pj-toolbar .btn-ghost, .pj-toolbar .btn-outline { background: var(--card); box-shadow: var(--shadow-sm); }
+.pj-toolbar .btn-ghost:hover, .pj-toolbar .btn-outline:hover { background: var(--bg-surface); border-color: var(--text-muted); }
+.pj-toolbar-sep { width: 1px; align-self: stretch; min-height: 1.4rem; background: var(--border); margin: 0 0.15rem; }
+/* Publish-gate toggle: a chip grouped with the toolbar (after a separator) so it doesn't float alone */
+.pj-toolbar-gate { background: var(--card); border: 1px solid var(--border); border-radius: 8px; padding: 0.3rem 0.6rem; box-shadow: var(--shadow-sm); }
+.pj-toolbar-gate:hover { border-color: var(--text-muted); }
 .pj-gate-label { display: inline-flex; align-items: center; gap: 0.4rem; font-size: 0.85rem; color: var(--muted); cursor: pointer; }
 .pj-inbox { border: 1px solid var(--border); border-radius: 10px; padding: 0.75rem; background: var(--bg-dim); margin-bottom: 0.5rem; }
 .pj-approval { display: flex; align-items: center; justify-content: space-between; gap: 0.75rem; padding: 0.4rem 0; border-top: 1px solid var(--border); }
 .pj-approval:first-of-type { border-top: none; }
 .pj-approval-text { flex: 1; font-size: 0.88rem; }
 .pj-section { border: 1px solid var(--border); border-radius: 10px; padding: 0.6rem 0.75rem; background: var(--surface); }
-.pj-section-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 0.4rem; }
-.pj-section-title { font-weight: 600; text-transform: capitalize; }
+/* Action buttons sit right after the title (not pushed to the far edge) so they
+   stay visually tied to the panel they act on. */
+.pj-section-head { display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; margin-bottom: 0.4rem; }
+.pj-section-title { font-weight: 600; text-transform: capitalize; margin-right: 0.25rem; }
+/* Lift the add-actions off the panel background so they read as buttons. */
+.pj-section-head .btn-outline, .pj-section-head .btn-ghost { background: var(--card); box-shadow: var(--shadow-sm); }
+.pj-section-head .btn-outline:hover, .pj-section-head .btn-ghost:hover { background: var(--bg-surface); border-color: var(--text-muted); }
 .pj-draft-form { margin: 0.4rem 0; }
 .pj-drafts { display: flex; flex-direction: column; gap: 0.3rem; margin-bottom: 0.3rem; }
 .pj-item { display: flex; align-items: center; gap: 0.5rem; padding: 0.35rem 0; }
-.pj-item-draft { border-left: 3px solid var(--border); padding-left: 0.5rem; }
+/* Draft rows get a warn-coloured rail + a bordered, bolder DRAFT chip so the
+   draft state actually reads (the pale badge alone was nearly invisible). */
+.pj-item-draft { border-left: 3px solid var(--warn); padding-left: 0.5rem; }
+.pj-item-draft .badge-warn { border: 1px solid var(--warn-border); font-weight: 700; }
+/* Lift the inline Edit button off the panel so it stops blending in (same
+   card-fill treatment as the section/toolbar actions). */
+.pj-item .btn-ghost { background: var(--card); box-shadow: var(--shadow-sm); }
+.pj-item .btn-ghost:hover { background: var(--bg-surface); border-color: var(--text-muted); }
 .pj-item-text { flex: 1; font-size: 0.9rem; }
 .pj-rec { border-radius: 6px; }
 .pj-rec-title { flex: 1; text-align: left; background: none; border: none; cursor: pointer; font-size: 0.9rem; color: var(--text); padding: 0; }
 .pj-rec-title:hover { color: var(--accent); }
 .pj-rec-fields { margin: 0.1rem 0 0.4rem 0.6rem; padding: 0.2rem 0.6rem; border-left: 2px solid var(--border); background: var(--bg-dim); border-radius: 0 6px 6px 0; }
+/* Dotted leader between each field label and its value — ties the two ends of a
+   long row together so you can follow which value belongs to which key. */
+.pj-rec-fields .kv-row { align-items: baseline; gap: 0; }
+.pj-rec-fields .kv-label { flex: 1 1 auto; display: flex; align-items: baseline; min-width: 0; color: var(--muted); }
+.pj-rec-fields .kv-label::after { content: ""; flex: 1 1 auto; height: 0; margin: 0 0.45rem; border-bottom: 1px dotted var(--border); transform: translateY(-0.18em); }
+.pj-rec-fields .kv-value { flex: 0 1 auto; text-align: right; }
 .pj-rec-empty { font-size: 0.82rem; padding: 0.2rem 0; }
 .pj-empty { color: var(--muted); font-size: 0.85rem; padding: 0.2rem 0; }
 .pj-decision { font-size: 0.85rem; color: var(--muted); }
@@ -2045,10 +2094,26 @@
 .pj-errors { border: 1px solid var(--danger); border-radius: 10px; padding: 0.6rem 0.75rem; margin: 0.5rem 0; background: var(--bg-dim); }
 .pj-errors-title { font-weight: 600; margin-bottom: 0.3rem; color: var(--danger); }
 .pj-error-line { font-size: 0.82rem; color: var(--text); padding: 0.1rem 0; }
-.pj-doc-tag { font-size: 0.68rem; color: var(--muted); border: 1px solid var(--border); border-radius: 6px; padding: 0 0.3rem; margin-left: 0.4rem; vertical-align: middle; }
+.pj-doc-tag { font-size: 0.68rem; font-weight: 600; color: var(--accent); background: color-mix(in srgb, var(--accent) 10%, var(--bg-dim)); border: 1px solid color-mix(in srgb, var(--accent) 28%, var(--border)); border-radius: 6px; padding: 0.05rem 0.4rem; margin-left: 0.4rem; vertical-align: middle; }
 .pj-doc-row { display: flex; align-items: center; gap: 0.5rem; padding: 0.25rem 0; }
 .pj-doc-link { background: none; border: none; color: var(--accent); cursor: pointer; font-size: 0.9rem; text-align: left; flex: 1; padding: 0; }
 .pj-doc-link:hover { text-decoration: underline; }
+
+/* Public-sharing panel: per-space and per-doc public toggles + the viewer link. */
+.pj-share-space { padding: 0.35rem 0; border-bottom: 1px solid var(--border); }
+.pj-share-space:last-of-type { border-bottom: none; }
+.pj-share-row { display: flex; align-items: center; gap: 0.5rem; cursor: pointer; font-weight: 600; }
+.pj-share-row input, .pj-share-doc input { cursor: pointer; }
+.pj-share-docs { display: flex; flex-direction: column; gap: 0.2rem; margin: 0.3rem 0 0.4rem 1.6rem; }
+.pj-share-doc { display: flex; align-items: center; gap: 0.5rem; cursor: pointer; font-size: 0.9rem; color: var(--text); }
+.pj-share-doc-title { flex: 1; }
+.pj-share-link { color: var(--accent); font-size: 0.82rem; text-decoration: none; }
+.pj-share-link:hover { text-decoration: underline; }
+.pj-share-empty { margin: 0.2rem 0 0.4rem 1.6rem; }
+.pj-share-actions { display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; }
+/* Card fill + shadow so the action buttons stop blending into the tinted panel — matches .pj-toolbar. */
+.pj-share-actions .btn-outline, .pj-share-actions .btn-ghost { background: var(--card); box-shadow: var(--shadow-sm); }
+.pj-share-actions .btn-outline:hover, .pj-share-actions .btn-ghost:hover { background: var(--bg-surface); border-color: var(--text-muted); }
 /* The detail / reading pane — a white, slightly elevated card so it reads as the focused content,
    distinct from the flat tree panel beside it. */
 .pj-doc-view { border: 1px solid var(--border); border-radius: 10px; padding: 1.4rem 1.8rem; margin: 0.4rem 0; background: var(--card); box-shadow: var(--shadow-sm); }
@@ -2116,6 +2181,17 @@
 .pj-part-agent { display: inline-flex; align-items: center; gap: 0.3rem; font-size: 0.8rem; border: 1px solid var(--border); border-radius: 6px; padding: 0.12rem 0.5rem; }
 .pj-part-agent.own { border-color: var(--success); }
 .pj-part-agent.ghost { color: var(--muted); border-style: dashed; opacity: 0.65; }
+/* Manage access — creator adds/roles/removes members in the participants panel */
+.pj-access { margin-top: 0.8rem; padding-top: 0.7rem; border-top: 1px dashed var(--border); display: flex; flex-direction: column; gap: 0.45rem; }
+.pj-access-title { font-size: 0.82rem; font-weight: 600; color: var(--muted); }
+.pj-access-row { display: flex; align-items: center; justify-content: space-between; gap: 0.6rem; flex-wrap: wrap; border: 1px solid var(--border); border-radius: 8px; padding: 0.4rem 0.6rem; background: var(--card); }
+.pj-access-who { display: flex; align-items: center; gap: 0.4rem; font-size: 0.86rem; }
+.pj-access-note { font-size: 0.78rem; color: var(--muted); }
+.pj-access-actions { display: flex; align-items: center; gap: 0.35rem; flex-wrap: wrap; }
+.pj-access-add { display: flex; align-items: center; gap: 0.4rem; flex-wrap: wrap; margin-top: 0.2rem; }
+.pj-access-input { flex: 1 1 14rem; min-width: 10rem; border: 1px solid var(--border); border-radius: 7px; padding: 0.4rem 0.6rem; background: var(--surface); color: var(--text); font-size: 0.86rem; }
+.pj-access-role { border: 1px solid var(--border); border-radius: 7px; padding: 0.4rem 0.5rem; background: var(--surface); color: var(--text); font-size: 0.84rem; }
+.pj-access-hint { font-size: 0.76rem; color: var(--muted); }
 /* Activity panel — GitHub-style contribution heatmap + audit-log feed */
 .pj-act { padding: 0.1rem; }
 .pj-act-count { font-size: 0.72rem; font-weight: 500; color: var(--muted); margin-left: 0.5rem; }

package/dist/public/css/views/public-workspace-viewer.css

@@ -0,0 +1,206 @@
+/**
+ * @file public-workspace-viewer.css
+ * @description Styles for the public (no-login) workspace document viewer. A two-column layout —
+ *   table-of-contents sidebar + rendered markdown — that collapses to a single column on narrow
+ *   screens, plus a print stylesheet so "Print / Save as PDF" produces a clean content-only page.
+ *   All colors/spacing come from theme.css variables (no dark-only rgba, no hardcoded hex).
+ * @version-history
+ *   v1.0.0 — 2026-06-09 — Initial: slice 2 of the workspace public-sharing plan.
+ */
+
+.pwv-container {
+  max-width: 1100px;
+  margin: 0 auto;
+  padding: 1.5rem;
+  display: grid;
+  grid-template-columns: 240px 1fr;
+  gap: 1.5rem;
+  align-items: start;
+  min-height: 60vh;
+}
+
+/* ── Table of contents ── */
+.pwv-toc {
+  position: sticky;
+  top: 1.5rem;
+  background: var(--card);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 0.75rem;
+}
+
+.pwv-toc-head {
+  font-size: 0.75rem;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+  color: var(--muted);
+  padding: 0.25rem 0.5rem 0.5rem;
+}
+
+.pwv-toc-list {
+  display: flex;
+  flex-direction: column;
+  gap: 0.15rem;
+}
+
+.pwv-toc-item {
+  text-align: left;
+  background: transparent;
+  border: none;
+  border-radius: 6px;
+  padding: 0.5rem 0.6rem;
+  font-size: 0.9rem;
+  color: var(--text);
+  cursor: pointer;
+  transition: background 0.12s ease;
+}
+
+.pwv-toc-item:hover {
+  background: var(--bg-dim);
+}
+
+.pwv-toc-item.pwv-active {
+  background: var(--bg-dim);
+  color: var(--accent);
+  font-weight: 600;
+}
+
+/* ── Main content ── */
+.pwv-main {
+  min-width: 0;
+}
+
+.pwv-bar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.75rem;
+  margin-bottom: 1rem;
+}
+
+.pwv-badge {
+  display: inline-block;
+  font-size: 0.72rem;
+  font-weight: 600;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  color: var(--accent);
+  background: var(--bg-dim);
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  padding: 0.2rem 0.7rem;
+}
+
+/* Card fill + shadow so the print button stands out against the page (matches the in-app toolbar). */
+.pwv-print { background: var(--card); box-shadow: var(--shadow-sm); }
+.pwv-print:hover { background: var(--bg-surface); border-color: var(--text-muted); }
+
+.pwv-doc {
+  background: var(--card);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 1.75rem 2rem;
+}
+
+/* ── Markdown typography (scoped to the viewer; mirrors the in-app document view) ── */
+.pwv-doc .md-body { font-size: 0.95rem; line-height: 1.7; color: var(--text); max-width: 78ch; overflow-wrap: break-word; }
+.pwv-doc .md-body > :first-child { margin-top: 0; }
+.pwv-doc .md-body > :last-child { margin-bottom: 0; }
+.pwv-doc .md-body h1,
+.pwv-doc .md-body h2,
+.pwv-doc .md-body h3,
+.pwv-doc .md-body h4,
+.pwv-doc .md-body h5,
+.pwv-doc .md-body h6 { font-weight: 700; line-height: 1.3; color: var(--text); margin: 1.8em 0 0.6em; }
+.pwv-doc .md-body h1 { font-size: 1.7rem; letter-spacing: -0.01em; padding-bottom: 0.3em; border-bottom: 2px solid var(--border); margin-top: 0.2em; }
+.pwv-doc .md-body h2 { font-size: 1.32rem; padding-bottom: 0.25em; border-bottom: 1px solid var(--border); }
+.pwv-doc .md-body h3 { font-size: 1.13rem; }
+.pwv-doc .md-body h4 { font-size: 1rem; }
+.pwv-doc .md-body h5 { font-size: 0.9rem; }
+.pwv-doc .md-body h6 { font-size: 0.85rem; color: var(--muted); }
+.pwv-doc .md-body p { margin: 0.85em 0; }
+.pwv-doc .md-body ul,
+.pwv-doc .md-body ol { margin: 0.7em 0; padding-left: 1.7em; }
+.pwv-doc .md-body ul { list-style: disc; }
+.pwv-doc .md-body ol { list-style: decimal; }
+.pwv-doc .md-body li { margin: 0.32em 0; padding-left: 0.2em; }
+.pwv-doc .md-body li > ul,
+.pwv-doc .md-body li > ol { margin: 0.32em 0; }
+.pwv-doc .md-body a { color: var(--accent); text-decoration: none; }
+.pwv-doc .md-body a:hover { text-decoration: underline; }
+.pwv-doc .md-body strong { font-weight: 700; color: var(--text); }
+.pwv-doc .md-body em { font-style: italic; }
+.pwv-doc .md-body .md-code { font-family: var(--font-mono, ui-monospace, "SF Mono", Menlo, Consolas, monospace); font-size: 0.85em; background: var(--bg-dim); padding: 0.12em 0.42em; border-radius: 4px; border: 1px solid var(--border); }
+.pwv-doc .md-body .md-pre { background: var(--bg-dim); border: 1px solid var(--border); border-radius: 8px; padding: 0.9em 1.1em; overflow-x: auto; margin: 1em 0; line-height: 1.5; }
+.pwv-doc .md-body .md-pre .md-code { background: none; border: none; padding: 0; font-size: 0.84rem; }
+.pwv-doc .md-body blockquote { margin: 1em 0; padding: 0.3em 1.1em; border-left: 3px solid var(--accent); background: var(--bg-dim); border-radius: 0 6px 6px 0; color: var(--muted); }
+.pwv-doc .md-body blockquote p { margin: 0.4em 0; }
+.pwv-doc .md-body table { border-collapse: collapse; margin: 1em 0; width: 100%; font-size: 0.9rem; }
+.pwv-doc .md-body th,
+.pwv-doc .md-body td { border: 1px solid var(--border); padding: 0.45em 0.75em; text-align: left; vertical-align: top; }
+.pwv-doc .md-body th { background: var(--bg-dim); font-weight: 600; }
+.pwv-doc .md-body tbody tr:nth-child(even) { background: var(--bg-dim); }
+.pwv-doc .md-body .md-img { max-width: 100%; height: auto; border-radius: 6px; margin: 0.6em 0; }
+.pwv-doc .md-body hr { border: none; border-top: 1px solid var(--border); margin: 1.6em 0; }
+
+/* ── States ── */
+.pwv-state {
+  color: var(--muted);
+  padding: 2rem 0;
+  text-align: center;
+}
+
+.pwv-error {
+  color: var(--danger, #E8564A);
+}
+
+.pwv-empty {
+  grid-column: 1 / -1;
+  text-align: center;
+  padding: 4rem 1.5rem;
+  color: var(--muted);
+}
+
+.pwv-empty-icon {
+  font-size: 2.5rem;
+  margin-bottom: 0.5rem;
+}
+
+.pwv-empty h2 {
+  color: var(--text);
+  font-size: 1.25rem;
+  margin: 0 0 0.5rem;
+}
+
+/* ── Responsive: stack the TOC above the content on narrow screens ── */
+@media (max-width: 720px) {
+  .pwv-container {
+    grid-template-columns: 1fr;
+  }
+  .pwv-toc {
+    position: static;
+  }
+}
+
+/* ── Print: content only — hide the global site nav, the TOC, the action bar, and the card chrome.
+ * `body.pwv-active` is added by the view while it is mounted (see public-workspace-viewer.js), so the
+ * nav-hiding rule applies only on this page and only the document content reaches paper. ── */
+@media print {
+  /* Physical page margins so the text isn't flush against the paper edges. */
+  @page { margin: 1.8cm; }
+  body.pwv-active .topnav,
+  body.pwv-active .pwv-toc,
+  body.pwv-active .pwv-bar { display: none !important; }
+  body.pwv-active .pwv-container {
+    display: block !important;
+    max-width: none;
+    padding: 0;
+  }
+  body.pwv-active .pwv-doc {
+    border: none;
+    border-radius: 0;
+    padding: 0;
+  }
+  body.pwv-active .pwv-doc .md-body { max-width: none; }
+}

package/dist/public/js/services/organisms.js

@@ -429,11 +429,56 @@ export async function listWorkspaceRequests(orgId, ws) {
   } catch { return []; }
 }
 
-/** Approve or deny a member's access request to your workspace. */
+/** Approve or deny a member's access request to your workspace. decision: 'approve'|'deny'|'viewer'|'contributor'. */
 export async function decideWorkspaceAccess(orgId, ws, requester, decision) {
   return apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access/decision`, { ws, requester, decision });
 }
 
+/** Full access state for a workspace you manage: pending requests + current members with their roles. */
+export async function getWorkspaceAccess(orgId, ws) {
+  try {
+    const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access?ws=${encodeURIComponent(ws)}`);
+    return { requests: Array.isArray(resp?.data?.requests) ? resp.data.requests : [], members: Array.isArray(resp?.data?.members) ? resp.data.members : [] };
+  } catch { return { requests: [], members: [] }; }
+}
+
+/** Directly add (or re-role) a member: role 'viewer' (read) | 'contributor' (read+write). grantee = an
+ *  owner name, GHII, or GAII — the grant applies to that owner (so all their agents inherit it). */
+export async function grantWorkspaceRole(orgId, ws, grantee, role) {
+  return apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access/grant`, { ws, grantee, role });
+}
+
+/** Remove a member's access to a workspace you manage. */
+export async function revokeWorkspaceRole(orgId, ws, grantee) {
+  return apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access/revoke`, { ws, grantee });
+}
+
+/* ── Public document-space sharing (meta.share) ──
+ * Independent of the access roles above: this controls what PUBLISHED document-space pages are
+ * readable by ANYONE with the public viewer link (no login). Creator/admin manages it. ── */
+
+/** Current public-sharing state: { public, spaces: {name:bool}, docs: {"type/id":bool} }. */
+export async function getWorkspaceShare(orgId, ws) {
+  try {
+    const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/share?ws=${encodeURIComponent(ws)}`);
+    const s = resp?.data?.share || {};
+    return { public: !!s.public, spaces: s.spaces || {}, docs: s.docs || {} };
+  } catch { return { public: false, spaces: {}, docs: {} }; }
+}
+
+/** Merge a patch ({ public?, spaces?, docs? }) into the workspace's public-sharing state. */
+export async function setWorkspaceShare(orgId, ws, patch) {
+  const resp = await apiPut(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/share?ws=${encodeURIComponent(ws)}`, patch);
+  const s = resp?.data?.share || {};
+  return { public: !!s.public, spaces: s.spaces || {}, docs: s.docs || {} };
+}
+
+/** The public, no-login viewer URL for a workspace (whole space) or a single document. */
+export function publicViewerUrl(orgId, ws, doc) {
+  const base = `/v1/publicworkspaceviewer?org=${encodeURIComponent(orgId)}&ws=${encodeURIComponent(ws)}`;
+  return doc ? `${base}&type=${encodeURIComponent(doc.type)}&id=${encodeURIComponent(doc.id)}` : base;
+}
+
 /** Create a new (empty) workspace: register it, return its { id, name }. The manifest is written
  *  later by setup/generate. */
 export async function createWorkspace(orgId, name) {
@@ -674,6 +719,82 @@ export async function buildAccessPrompt(orgId, orgName, wsId, ws, variant = 'hum
   ].join('\n');
 }
 
+/** Build a prompt to paste into an AI / coding agent: how to build a CONTRACT AGENT that processes THIS
+ *  workspace. The agent owns a contract (inputs/outputs/lifecycle), provisions its spaces, and runs the
+ *  request→result loop. Mirrors docs/agent-workspace-contracts.md with this workspace's concrete ids. */
+export async function buildContractAgentPrompt(orgId, orgName, wsId, ws) {
+  const nodeUrl = window.location.origin;
+  const m = ws?.manifest || {};
+  const wsName = m.name || wsId;
+  const types = (m.objectTypes || []).filter(ot => ot.backing === 'memory');
+  const described = [];
+  for (const ot of types) {
+    const schema = ot.mode !== 'document' ? await getObjectSchema(orgId, wsId, ot.namespace).catch(() => null) : null;
+    described.push(describeType(ot, schema));
+  }
+  const structure = described.join('\n') || '(no spaces declared yet)';
+  return [
+    `TASK: build an AIMEAT "contract agent" that PROCESSES this workspace — it reads requests, does the`,
+    `work, and writes results back. The agent OWNS a contract: the spaces it READS (inputs), the spaces`,
+    `it WRITES (outputs), and the status lifecycle. Follow the convention exactly so it appears and works`,
+    `smoothly. Full reference: ${nodeUrl}/v1/agents/me/handbook/appdev (the "Workspace contracts" section)`,
+    `and docs/agent-workspace-contracts.md.`,
+    ``,
+    `CONNECTION`,
+    `- Node: ${nodeUrl}`,
+    `- Organism: "${orgName || orgId}"  id: ${orgId}`,
+    `- Workspace: "${wsName}"  ws: ${wsId}`,
+    `- Use the AIMEAT MCP tools (aimeat_workspace_*, aimeat_organism_*) or the shell-callable connector`,
+    `  (aimeat connect call ...) — no LLM is needed in the I/O path. If AIMEAT tools are unavailable, STOP.`,
+    ``,
+    `EXISTING SPACES (don't drop or rename these — UNION them with your contract's spaces):`,
+    structure,
+    ``,
+    `1) DEFINE THE CONTRACT (embed it in the agent):`,
+    `   contract:`,
+    `     id: <capability>                 # e.g. research`,
+    `     inputs:                          # what the agent reads + reacts to`,
+    `       - space: <name>                # objectType NAME, e.g. research-request`,
+    `         mode: records                # records (schema-locked) | document`,
+    `         schema: { id, ..., status: requested|in-progress|done|failed, requested_by, result_ref? }`,
+    `         trigger: status == 'requested'`,
+    `     outputs:                         # what the agent writes`,
+    `       - space: <name>                # e.g. research-result`,
+    `         mode: records`,
+    `         schema: { id, request_ref, ... }`,
+    `     lifecycle: requested → in-progress → done (+ result_ref) | failed`,
+    ``,
+    `2) PROVISION the contract's spaces with add_spaces — the server UNIONS them into the manifest, skips`,
+    `   any that already exist, and fills objectType defaults, so you never resend the whole manifest`,
+    `   (safe + idempotent). Manifest edits are CREATOR-ONLY: a same-owner agent does this itself; for a`,
+    `   cross-owner agent the creator does it.`,
+    `       aimeat_workspace_update { organism_id:"${orgId}", ws:"${wsId}",`,
+    `         add_spaces: [ { name:"<input-space>",  namespace:"shared.<inputs>",  mode:"records" },`,
+    `                       { name:"<output-space>", namespace:"shared.<outputs>", mode:"records" } ],`,
+    `         schemas: { "shared.<inputs>": <jsonSchema>, "shared.<outputs>": <jsonSchema> } }`,
+    `     → returns { added, skipped }. Pass just { name, namespace, mode } per space; defaults are filled.`,
+    ``,
+    `3) AUTHORIZE the agent to write (skip for a same-owner agent — it already can):`,
+    `   POST ${nodeUrl}/v1/organisms/${orgId}/workspace-access/grant`,
+    `     body { "ws":"${wsId}", "grantee":"<agent-owner | agent#owner@node>", "role":"contributor" }`,
+    `   (viewer = read only; contributor = read + write. The creator manages this in "Who works here".)`,
+    ``,
+    `4) RUN THE PROCESSING LOOP (deterministic, repeatable):`,
+    `   discover member workspaces (aimeat_organism_list → aimeat_workspace_list) → for each that has your`,
+    `   input space: aimeat_workspace_read → find inputs where the trigger holds → CLAIM it`,
+    `   (aimeat_workspace_write status:"in-progress" + publish) → do the work → WRITE the output space`,
+    `   (aimeat_workspace_write + publish) → ADVANCE the input (status:"done", result_ref:<outId> + publish).`,
+    `   On error: set the input status:"failed" with an error field.`,
+    ``,
+    `RULES: validate every RECORDS write against its schema (a bad write is rejected). NEVER drop/rename an`,
+    `existing space. Only the creator/same-owner edits the manifest; a contributor writes records only.`,
+    `Writes are attributed to the agent automatically — it appears in "Who works here" + the activity`,
+    `heatmap, and its results are visible to everyone who can read the workspace.`,
+    ``,
+    `Start: read the workspace, decide your input/output spaces, provision them, grant access, run the loop.`,
+  ].join('\n');
+}
+
 /** Manually add an object type to the manifest (no AI). mode 'document' needs no schema;
  *  'records' gets a starter {id,title} schema that can be refined later via Restructure. */
 export async function addSpace(orgId, wsId, manifest, name, mode) {

package/dist/public/llms-template.txt

@@ -387,8 +387,13 @@ for completeness but are NOT needed for typical app building:
 - Agent collaboration (shared memory, organisms)
 - Organism workspaces: an organism can hold manifest-driven workspaces of markdown documents
   (a wiki) and schema-locked record lists, with a draft -> publish -> version flow. Connected
-  agents use the aimeat_workspace_* MCP tools (list / read / write_draft / publish / add_document);
-  the manifest lives at organism.{id}.w.{ws}.meta.manifest.
+  agents use the aimeat_workspace_* MCP tools (list / read / write / publish / object_delete /
+  access / transfer / update / create); the manifest lives at organism.{id}.w.{ws}.meta.manifest.
+  Access is creator-managed: viewer (read) | contributor (read+write). Reading a workspace shows
+  ALL its content. To build an agent that PROCESSES a workspace (reads requests -> writes results),
+  it carries a "contract" (inputs/outputs/lifecycle) — see the guide at
+  GET /v1/agents/me/handbook/appdev (Workspace contracts section), full text in
+  docs/agent-workspace-contracts.md.
 - Micro-memory, App store, Matches, Push notifications
 
 ## Building Apps on AIMEAT

package/dist/public/spa.html

@@ -85,6 +85,7 @@
   <link rel="stylesheet" href="/css/views/admin.css">
   <link rel="stylesheet" href="/css/views/admin-agent-integration.css">
   <link rel="stylesheet" href="/css/views/public-knowledge-viewer.css">
+  <link rel="stylesheet" href="/css/views/public-workspace-viewer.css">
   <script type="importmap">
   {
     "imports": {
@@ -266,6 +267,7 @@
       '/v1/admin':       () => import('/views/admin.js' + B),
       '/v1/help':        () => import('/views/help.js' + B),
       '/v1/publicknowledgeviewer': () => import('/views/public-knowledge-viewer.js' + B),
+      '/v1/publicworkspaceviewer': () => import('/views/public-workspace-viewer.js' + B),
     };
 
     // Match route, handling query params for special views