aimeat 1.25.0 → 1.26.0

package/dist/public/css/views/notebook.css

@@ -0,0 +1,195 @@
+/**
+ * @file notebook.css
+ * @description Styles for the profile Notebook tab (pf-nb-* prefix): capture box, librarian hits,
+ *   and inbox notes. Dark-theme only — all colors/spacing via theme.css variables.
+ * @version-history
+ *   v1.0.0 — 2026-06-19 — Initial: capture + librarian + inbox (slice A).
+ */
+
+.pf-nb-capture {
+  margin-bottom: var(--space-lg, 1.5rem);
+}
+.pf-nb-textarea {
+  width: 100%;
+  resize: vertical;
+  min-height: 5rem;
+  font-family: inherit;
+}
+.pf-nb-capture-actions {
+  display: flex;
+  align-items: center;
+  gap: var(--space-sm, 0.75rem);
+  margin-top: var(--space-sm, 0.75rem);
+  flex-wrap: wrap;
+}
+
+.pf-nb-section {
+  margin-top: var(--space-lg, 1.5rem);
+}
+
+.pf-nb-search {
+  flex: 1;
+}
+
+.pf-nb-scope { margin-bottom: var(--space-sm, 0.75rem); }
+.pf-nb-hit-producer {
+  margin-top: var(--space-xs, 0.4rem);
+  color: var(--text-dim, var(--text));
+}
+
+.pf-nb-hits {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-sm, 0.75rem);
+}
+.pf-nb-hit {
+  background: var(--card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius, 8px);
+  padding: var(--space-sm, 0.75rem) var(--space-md, 1rem);
+}
+.pf-nb-hit-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: var(--space-sm, 0.75rem);
+}
+.pf-nb-hit-title {
+  font-weight: 600;
+  color: var(--text);
+}
+.pf-nb-hit-snippet {
+  margin-top: var(--space-xs, 0.4rem);
+  color: var(--text-dim, var(--text));
+  font-size: 0.9em;
+  line-height: 1.4;
+}
+.pf-nb-hit-foot {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: var(--space-sm, 0.75rem);
+  margin-top: var(--space-xs, 0.4rem);
+}
+.pf-nb-hit-key {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-family: var(--font-mono, monospace);
+}
+
+.pf-nb-inbox {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-sm, 0.75rem);
+}
+.pf-nb-note {
+  background: var(--bg-dim, var(--card));
+  border: 1px solid var(--border);
+  border-radius: var(--radius, 8px);
+  padding: var(--space-sm, 0.75rem) var(--space-md, 1rem);
+}
+.pf-nb-note-text {
+  color: var(--text);
+  word-break: break-word;
+}
+.pf-nb-note-line {
+  display: block;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  color: var(--text-dim, var(--text));
+}
+.pf-nb-note-text--peek {
+  max-height: 9rem;
+  overflow: hidden;
+  position: relative;
+}
+.pf-nb-note-text--peek::after {
+  content: '';
+  position: absolute;
+  left: 0;
+  right: 0;
+  bottom: 0;
+  height: 2.5rem;
+  background: linear-gradient(transparent, var(--bg-dim, var(--card)));
+  pointer-events: none;
+}
+
+.pf-nb-inbox-bar { margin-bottom: var(--space-sm, 0.75rem); }
+.pf-nb-sort { max-width: 12rem; }
+.pf-nb-note-meta {
+  display: flex;
+  align-items: center;
+  gap: var(--space-xs, 0.4rem);
+}
+.pf-nb-view-btn {
+  padding: 0.05rem 0.45rem;
+  line-height: 1.2;
+}
+.pf-nb-note-foot {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: var(--space-sm, 0.75rem);
+  margin-top: var(--space-xs, 0.4rem);
+}
+.pf-nb-note-btns {
+  display: flex;
+  gap: var(--space-xs, 0.4rem);
+}
+
+.pf-nb-suggest {
+  margin-top: var(--space-sm, 0.75rem);
+  padding: var(--space-md, 1rem);
+  background: var(--surface, var(--card));
+  border: 1px solid var(--border);
+  border-radius: var(--radius, 8px);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-xs, 0.4rem);
+}
+.pf-nb-suggest-reason {
+  font-style: italic;
+  margin-bottom: var(--space-xs, 0.4rem);
+}
+.pf-nb-suggest-label {
+  font-size: 0.8em;
+  color: var(--text-dim, var(--text));
+  margin-top: var(--space-xs, 0.4rem);
+}
+.pf-nb-suggest-body {
+  width: 100%;
+  resize: vertical;
+  font-family: inherit;
+}
+.pf-nb-suggest-alts {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: var(--space-xs, 0.4rem);
+  margin-top: var(--space-xs, 0.4rem);
+}
+.pf-nb-suggest-actions {
+  display: flex;
+  align-items: center;
+  gap: var(--space-sm, 0.75rem);
+  margin-top: var(--space-sm, 0.75rem);
+}
+
+.pf-nb-progress { gap: var(--space-sm, 0.75rem); }
+.pf-nb-steps {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: 0.2rem;
+}
+.pf-nb-step {
+  font-size: 0.85em;
+  color: var(--text-dim, var(--text));
+  opacity: 0.6;
+}
+.pf-nb-step.active { opacity: 1; color: var(--text); font-weight: 600; }
+.pf-nb-step.done { opacity: 0.85; color: var(--success, var(--text)); }

package/dist/public/css/views/profile.css

@@ -2427,6 +2427,8 @@
 .pj-doc-imgbar { margin: 0.3rem 0; display: flex; align-items: center; flex-wrap: wrap; gap: 0.4rem; }
 .pj-file-btn { cursor: pointer; }
 .pj-file-btn input { display: none; }
+/* Visually-hidden file input (organism / workspace ZIP import) — replaces inline style="display:none". */
+.pj-hidden-input { display: none; }
 .pj-file-btn-icon { margin-right: 0.15rem; }
 .pj-imgbar-hint { font-size: 0.78rem; color: var(--muted); }
 .pj-img-vis { margin: 0.2rem 0 0.5rem; padding: 0.55rem 0.65rem; border: 1px solid var(--border); border-radius: 8px; background: var(--card); }
@@ -2942,3 +2944,16 @@
 .pf-eco-tech-section-title { font-weight: 700; font-size: .82rem; margin-bottom: .4rem; color: var(--text-dim); }
 .pf-eco-tech-principal { display: inline-block; background: var(--card); border: 1px solid var(--border); border-radius: 6px; padding: .3rem .5rem; word-break: break-all; }
 .pf-eco-tech-access { margin: -.15rem 0 .4rem; }
+
+/* ── Presence control (Koti home) — backed by PresenceControl in landing-page.js.
+   Self-contained card; previews the same <PresenceDot> shown next to people. ── */
+.pf-presence-card { border: 1px solid var(--border); border-radius: 12px; background: var(--card); padding: 1rem 1.1rem; margin-bottom: 1rem; }
+.pf-presence-head { display: flex; align-items: flex-start; justify-content: space-between; gap: 1rem; }
+.pf-presence-head .section-desc { margin-bottom: .75rem; }
+.pf-presence-row { display: flex; align-items: center; justify-content: space-between; gap: 1rem; margin: .5rem 0; }
+.pf-presence-label { font-size: .85rem; font-weight: 600; color: var(--text-dim); }
+.pf-presence-modes { display: inline-flex; gap: .4rem; }
+.pf-presence-pill { border: 1px solid var(--border); background: var(--bg-dim); color: var(--text); border-radius: 999px; padding: .3rem .85rem; font-size: .82rem; cursor: pointer; }
+.pf-presence-pill--on { background: var(--accent); border-color: var(--accent); color: #fff; }
+.pf-presence-pill:disabled { opacity: .6; cursor: default; }
+.pf-presence-hint { font-size: .78rem; color: var(--text-dim); margin: .15rem 0 .35rem; }

package/dist/public/js/api.js

@@ -123,7 +123,9 @@ export function apiPatch(path, body) {
   return api(path, { method: 'PATCH', body: JSON.stringify(body) });
 }
 
-/** DELETE shorthand. */
-export function apiDelete(path) {
-  return api(path, { method: 'DELETE' });
+/** DELETE shorthand. Forwards an optional request body (e.g. `{ target }`). */
+export function apiDelete(path, body) {
+  return api(path, body === undefined
+    ? { method: 'DELETE' }
+    : { method: 'DELETE', body: JSON.stringify(body) });
 }

package/dist/public/js/components/auth-image.js

@@ -7,6 +7,7 @@
  *        html`<${AuthImage} src="/v1/memory/files/foo.png" class="file-thumb" alt="foo" />`
  * @version-history
  *   v1.0.0 — 2026-03-17 — Initial implementation
+ *   v1.0.1 — 2026-06-19 — JSDoc type annotations for frontend type-checking
  */
 import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
@@ -21,7 +22,7 @@ export default function AuthImage({ src, alt, ...props }) {
     if (!src) return;
 
     let cancelled = false;
-    const headers = {};
+    const headers = /** @type {Record<string,string>} */ ({});
 
     if (window.AIMEAT?.auth?.hasSession) {
       const session = window.AIMEAT.auth.getSession();
@@ -32,7 +33,7 @@ export default function AuthImage({ src, alt, ...props }) {
 
     fetch(src, { headers })
       .then(r => {
-        if (!r.ok) throw new Error(r.status);
+        if (!r.ok) throw new Error(String(r.status));
         return r.blob();
       })
       .then(blob => {

package/dist/public/js/components/tag-cloud.js

@@ -12,7 +12,7 @@ import { t } from '/js/i18n.js';
  * @param {Set<string>} props.selected — currently active filter tags
  * @param {(tag: string) => void} props.onToggle — called when a tag is clicked
  * @param {() => void} props.onClear — called when clear button is clicked
- * @param {number} [props.limit] — show only the first N tags behind a "show all" toggle.
+ * @param {number} [props.limit] - show only the first N tags behind a "show all" toggle.
  *   Selected tags always stay visible so an active filter can't hide its own pill.
  */
 export default function TagCloud({ tags, selected, onToggle, onClear, limit }) {

package/dist/public/js/components/tag-editor.js

@@ -9,7 +9,7 @@ import { t } from '/js/i18n.js';
  * @param {Object} props
  * @param {string[]} props.tags — current tags on the item
  * @param {(tags: string[]) => void} props.onSave — called with updated tag array on add/remove
- * @param {number} [props.maxTags=20] — maximum tags allowed
+ * @param {number} [props.maxTags=20] - maximum tags allowed
  */
 export default function TagEditor({ tags, onSave, maxTags = 20 }) {
   const [input, setInput] = useState('');

package/dist/public/js/hooks.js

@@ -52,8 +52,7 @@ export function useApiCall(endpoint, options = {}) {
       if (!cancelled) setLoading(false);
     });
     return () => { cancelled = true; };
-  // deps are intentionally dynamic — eslint-disable-next-line is correct here
-  // eslint-disable-next-line react-hooks/exhaustive-deps
+  // deps are intentionally dynamic (endpoint/method/reloadKey + caller-supplied deps)
   }, [endpoint, method, reloadKey, ...deps]);
 
   /** Call reload() to re-trigger the fetch (e.g. after a mutation). */

package/dist/public/js/presence-store.js

@@ -0,0 +1,97 @@
+/**
+ * @file presence-store.js
+ * @description Shared client-side presence store powering the `usePresence(ghii)`
+ *   hook. Every <PresenceDot> in a list subscribes here; the store COALESCES all
+ *   ghiis requested within one tick into a single batched GET /v1/presence call —
+ *   so a 50-row member list makes one request, not fifty. Results are cached with
+ *   a short TTL and re-fetched on the global `aimeat-live-update` SSE event, so all
+ *   dots flip live without per-component polling.
+ * @structure
+ *   - usePresence(ghii) — preact hook → { status, since } | undefined
+ *   - refreshAll() — invalidate + re-batch all currently-subscribed ghiis
+ *   - internal: cache, subscriber registry, pending-batch flusher
+ * @usage import { usePresence } from '/js/presence-store.js';
+ * @version-history
+ *   v1.0.0 — 2026-06-19 — Initial shared presence store (cache + batch + live refresh).
+ */
+import { useState, useEffect } from 'preact/hooks';
+import { getPresenceBatch } from '/js/services/presence.js';
+
+const cache = new Map();        // ghii → { status, since }
+const subs = new Map();         // ghii → Set<fn>
+const lastFetched = new Map();  // ghii → ms
+let pending = new Set();
+let timer = null;
+let liveBound = false;
+
+const TTL_MS = 60_000;
+const BATCH_DELAY_MS = 40;
+
+function notify(ghii) {
+  const set = subs.get(ghii);
+  if (set) for (const fn of set) fn(cache.get(ghii));
+}
+
+async function flush() {
+  timer = null;
+  const ids = [...pending];
+  pending = new Set();
+  if (!ids.length) return;
+  try {
+    const map = await getPresenceBatch(ids);
+    const now = Date.now();
+    for (const ghii of ids) {
+      cache.set(ghii, map[ghii] || { status: 'unknown', since: null });
+      lastFetched.set(ghii, now);
+      notify(ghii);
+    }
+  } catch {
+    /* leave the cache as-is; a later live-update or remount retries */
+  }
+}
+
+function schedule() {
+  if (!timer) timer = setTimeout(flush, BATCH_DELAY_MS);
+}
+
+function request(ghii, force) {
+  if (!force && lastFetched.has(ghii) && Date.now() - lastFetched.get(ghii) < TTL_MS) return;
+  pending.add(ghii);
+  schedule();
+}
+
+/** Invalidate and re-fetch every currently-subscribed identity (called on SSE updates). */
+export function refreshAll() {
+  lastFetched.clear();
+  for (const ghii of subs.keys()) pending.add(ghii);
+  if (pending.size) schedule();
+}
+
+function bindLive() {
+  if (liveBound) return;
+  liveBound = true;
+  window.addEventListener('aimeat-live-update', refreshAll);
+}
+
+/**
+ * Subscribe to a single identity's presence. Returns { status, since } (or
+ * undefined until the first fetch resolves). Pass a falsy ghii to opt out.
+ */
+export function usePresence(ghii) {
+  const [val, setVal] = useState(() => (ghii ? cache.get(ghii) : undefined));
+  useEffect(() => {
+    if (!ghii) { setVal(undefined); return; }
+    bindLive();
+    let set = subs.get(ghii);
+    if (!set) { set = new Set(); subs.set(ghii, set); }
+    const fn = (v) => setVal(v);
+    set.add(fn);
+    setVal(cache.get(ghii));
+    request(ghii);
+    return () => {
+      set.delete(fn);
+      if (!set.size) subs.delete(ghii);
+    };
+  }, [ghii]);
+  return val;
+}

package/dist/public/js/services/admin.js

@@ -38,6 +38,9 @@ export const patchBoardMembers = (id, body) => apiPatch(`/v1/boards/${encodeURIC
 // ── Work ──
 export const getAdminWork    = ()       => apiGet('/v1/admin/work');
 
+// ── Direct-message delivery telemetry ──
+export const getMessageStats = ()       => apiGet('/v1/admin/messages/stats');
+
 // ── Maintenance ──
 export const getMaintenance  = ()       => apiGet('/v1/admin/maintenance');
 export const setMaintenance  = (enabled, message) => apiPost('/v1/admin/maintenance', { enabled, message });
@@ -62,6 +65,10 @@ export const removePeer = (nodeId) => apiDelete(`/v1/federation/peers/${encodeUR
 export const removePeerEmergency = (nodeId) => apiDelete(`/v1/federation/peers/${encodeURIComponent(nodeId)}?emergency=true`);
 export const testFederationNode = (targetUrl) => apiPost('/v1/federation/test', { target_url: targetUrl });
 export const updatePeerPolicy = (nodeId, policy) => apiPut(`/v1/federation/peers/${encodeURIComponent(nodeId)}`, policy);
+export const promotePeer = (nodeId, opts = {}) => apiPost(`/v1/federation/peers/${encodeURIComponent(nodeId)}/promote`, opts);
+export const getFederationBook = () => apiGet('/v1/federation/book');
+export const rebuildFederationBook = () => apiPost('/v1/federation/book/rebuild', {});
+export const pullFederationBook = () => apiPost('/v1/federation/book/pull', {});
 export const joinGenesisNetwork = (genesisUrl, role) => apiPost('/v1/admin/federation/join', { genesis_url: genesisUrl, role: role || 'contributor' });
 
 // ── Hooks ──
@@ -162,6 +169,8 @@ export const importSiteBundle = (bundle) => apiPost('/v1/site/import', bundle);
 export const clearSiteCache   = ()      => apiPost('/v1/site/cache-invalidate');
 export const getSitePrompt    = ()      => apiGet('/v1/site/prompt');
 export const triggerLbSync    = ()      => apiPost('/v1/admin/site/sync');
+export const getHeaderNav     = ()      => apiGet('/v1/site/header-nav');
+export const saveHeaderNav    = (order, hidden) => apiPut('/v1/site/header-nav', { order, hidden });
 
 // ── Memory (for portal memory keys) ──
 export const addMemory       = (key, value) => apiPost('/v1/memory', { key, value, visibility: 'private' });
@@ -269,9 +278,9 @@ export const getAdminAgentTasks = (params = {}) => {
 
 // ── Sharing Groups (admin) ──
 export const getAdminSharingGroups = () => apiGet('/v1/admin/sharing-groups');
-
-// ── Subdomain mappings (operator) ──
-export const getSubdomainSites   = ()             => apiGet('/v1/admin/subdomains');
-export const createSubdomainSite = (body)         => apiPost('/v1/admin/subdomains', body);
-export const updateSubdomainSite = (sub, updates) => apiPatch(`/v1/admin/subdomains/${encodeURIComponent(sub)}`, updates);
+
+// ── Subdomain mappings (operator) ──
+export const getSubdomainSites   = ()             => apiGet('/v1/admin/subdomains');
+export const createSubdomainSite = (body)         => apiPost('/v1/admin/subdomains', body);
+export const updateSubdomainSite = (sub, updates) => apiPatch(`/v1/admin/subdomains/${encodeURIComponent(sub)}`, updates);
 export const deleteSubdomainSite = (sub)          => apiDelete(`/v1/admin/subdomains/${encodeURIComponent(sub)}`);

package/dist/public/js/services/boards.js

@@ -66,7 +66,7 @@ export async function deletePost(boardId, postId) {
 }
 
 /** Update board members (add/remove GAIIs). */
-export async function updateBoardMembers(boardId, { add, remove }) {
+export async function updateBoardMembers(boardId, { add, remove } = /** @type {{ add?: any, remove?: any }} */ ({})) {
   return api(`/v1/boards/${encodeURIComponent(boardId)}/members`, {
     method: 'PATCH',
     body: JSON.stringify({ add, remove }),

package/dist/public/js/services/ecosystem.js

@@ -41,7 +41,7 @@ export async function listPending() {
 }
 
 /** Approve or deny a pending request by its user code, selecting scopes (and optional data areas). */
-export async function approve(userCode, { action, scopes, data_areas } = {}) {
+export async function approve(userCode, { action, scopes, data_areas } = /** @type {{ action?: string, scopes?: any, data_areas?: any }} */ ({})) {
   return apiPost(`/v1/ecosystem-apps/${encodeURIComponent(userCode)}/approve`, { action, scopes, data_areas });
 }
 

package/dist/public/js/services/foundry-prompts-base.js

@@ -27,7 +27,7 @@ Available building blocks:
 - Cortex: Client-side JS domain library (IIFE on AIMEAT namespace). Wraps extension APIs and memory reads into clean domain methods for apps.
 
 Extensions run in an ISOLATED V8 sandbox with ONLY this API (no Node.js, no global fetch, no setTimeout, no require, no import):
-  ctx.memory.get(key) → value or null (ALWAYS null-check before using: `|| []` or `|| {}`)
+  ctx.memory.get(key) → value or null (ALWAYS null-check before using: \`|| []\` or \`|| {}\`)
   ctx.memory.set(key, value) → void
   ctx.memory.search(prefix) → Array<{ key, value }> (NOT plain strings!)
   ctx.memory.delete(key) → boolean
@@ -1481,7 +1481,7 @@ export function summarizeExtensionApi(result) {
     : '';
 
   if (actionsSection) {
-    const actionBlocks = actionsSection.split(/\n  - id:/);
+    const actionBlocks = actionsSection.split(/\n {2}- id:/);
     for (const block of actionBlocks.slice(1)) {
       const id = block.split('\n')[0].trim();
       const desc = block.match(/description:\s*"([^"]+)"/)?.[1] || '';

package/dist/public/js/services/foundry-smoke.js

@@ -7,6 +7,7 @@
  *   const result = await smokeTest('extension', 'prh-tiedonhaku', session);
  * @version-history
  *   v1.0.0 — 2026-03-26 — Initial smoke test module
+ *   v1.0.1 — 2026-06-19 — JSDoc type annotations for frontend type-checking
  */
 
 import { apiPost, apiGet } from '/js/api.js';
@@ -16,7 +17,7 @@ import { apiPost, apiGet } from '/js/api.js';
  * @param {string} type - Component type: 'extension', 'cortex', 'app'
  * @param {string} registeredAs - The registered name of the component
  * @param {object} session - Auth session for API calls
- * @returns {{ passed: boolean, error: string|null }}
+ * @returns {Promise<{ passed: boolean, error: string|null }>}
  */
 export async function smokeTest(type, registeredAs, session) {
   try {

package/dist/public/js/services/foundry-validate.js

@@ -47,6 +47,7 @@
  *   v5.0.0 — 2026-03-26 — Add validateSkeleton with cross-check against interview
  *     sampleResponse; add validateUnit with anti-pattern scan; add crossCheckSampleData,
  *     extractOutputFieldsNearUrl, deepFieldExists helpers
+ *   v5.0.1 — 2026-06-19 — lint fixes (misleading-char-class/unused-expression/empty-block)
  */
 import { parse as parseYaml, stringify as stringifyYaml } from '/lib/yaml.mjs';
 
@@ -66,7 +67,7 @@ function sanitizeJson(text) {
   // Strip markdown backslash escaping: \[ \] \{ \} \( \) \* \_ \` \| \~ \#
   s = s.replace(/\\([[\]{}()*_`|~#])/g, '$1');
   s = s.replace(/,\s*([}\]])/g, '$1');
-  s = s.replace(/[\u200B\u200C\u200D\uFEFF]/g, '');
+  s = s.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
   return s;
 }
 
@@ -84,7 +85,7 @@ function preCleanYaml(text) {
   s = s.replace(/\\\[/g, '[').replace(/\\\]/g, ']');
   s = s.replace(/\\\{/g, '{').replace(/\\\}/g, '}');
   // Remove zero-width unicode
-  s = s.replace(/[\u200B\u200C\u200D\uFEFF]/g, '');
+  s = s.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
   // Fix common AI mistake: action list items missing "id:" key
   // e.g. "  - refreshQuotes\n    description:" → "  - id: refreshQuotes\n    description:"
   // Only match lines under "actions:" where the list item is a bare word followed by description on next line
@@ -889,11 +890,8 @@ export function validateBlueprint(result) {
       }
     }
 
-    // Preserve new top-level blueprint fields
-    if (parsed.settings) parsed.settings = parsed.settings;
-    if (parsed.testScenarios) parsed.testScenarios = parsed.testScenarios;
-    if (parsed.architecture) parsed.architecture = parsed.architecture;
-
+    // New top-level blueprint fields (settings/testScenarios/architecture) are preserved
+    // automatically — `parsed` is returned in full below.
     return { valid: errors.length === 0, errors, warnings, parsed, extracted: json };
   } catch (e) {
     errors.push(`Invalid JSON: ${e.message}`);
@@ -1022,7 +1020,7 @@ function extractOutputFieldsNearUrl(yaml, url) {
       }
     }
     // Stop at the next action/method
-    if (nearUrl && inOutput && /^  - id:|^  - name:|^\w/.test(line) && !line.includes(url)) {
+    if (nearUrl && inOutput && /^ {2}- id:|^ {2}- name:|^\w/.test(line) && !line.includes(url)) {
       break;
     }
   }

package/dist/public/js/services/foundry.js

@@ -40,6 +40,7 @@
  *   v6.0.0 — 2026-03-26 — Add multi-pass data model: PASS_TYPES, MULTI_PASS_TYPES,
  *     createInitialPasses, createUnitPasses, extractUnitsFromSkeleton, getNextPass,
  *     isDuplicatePrescription; skeleton/unit/test/reflection storage functions
+ *   v6.0.1 — 2026-06-19 — lint fixes (misleading-char-class/unused-expression/empty-block)
  */
 import { apiGet, apiPost, apiPut, apiDelete } from '/js/api.js';
 import { parse as parseYaml, stringify as stringifyYaml } from '/lib/yaml.mjs';
@@ -716,7 +717,7 @@ function cleanYaml(text) {
   s = s.replace(/\\_/g, '_');
   s = s.replace(/\\\[/g, '[').replace(/\\\]/g, ']');
   s = s.replace(/\\\{/g, '{').replace(/\\\}/g, '}');
-  s = s.replace(/[\u200B\u200C\u200D\uFEFF]/g, '');
+  s = s.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
   try {
     const parsed = parseYaml(s);
     return stringifyYaml(parsed, { lineWidth: 0 });
@@ -1050,8 +1051,8 @@ export async function removeComponents(projectId, componentIds, includeMemory, s
         const locale = name.replace(/^.*i18n-/, '');
         if (locale) {
           // Find service slug from sibling extension/csm
-          const extSibling = comps.find(c => c.type === 'extension' && c.registeredAs);
-          const csmSibling = comps.find(c => c.type === 'csm' && c.registeredAs);
+          const extSibling = components.find(c => c.type === 'extension' && c.registeredAs);
+          const csmSibling = components.find(c => c.type === 'csm' && c.registeredAs);
           const svcSlug = extSibling?.registeredAs || csmSibling?.registeredAs?.split('/')?.pop() || '';
           const memKey = svcSlug ? `${svcSlug}.i18n.${locale}` : `i18n.${locale}`;
           try { await apiDelete(`/v1/memory/${encodeURIComponent(memKey)}`); } catch { /* best effort */ }

package/dist/public/js/services/generator-prompts-base.js

@@ -28,7 +28,7 @@ Available building blocks:
 - Cortex: Client-side JS domain library (IIFE on AIMEAT namespace). Wraps extension APIs and memory reads into clean domain methods for apps.
 
 Extensions run in an ISOLATED V8 sandbox with ONLY this API (no Node.js, no global fetch, no setTimeout, no require, no import):
-  ctx.memory.get(key) → value or null (ALWAYS null-check before using: `|| []` or `|| {}`)
+  ctx.memory.get(key) → value or null (ALWAYS null-check before using: \`|| []\` or \`|| {}\`)
   ctx.memory.set(key, value) → void
   ctx.memory.search(prefix) → Array<{ key, value }> (NOT plain strings!)
   ctx.memory.delete(key) → boolean
@@ -1483,7 +1483,7 @@ export function summarizeExtensionApi(result) {
     : '';
 
   if (actionsSection) {
-    const actionBlocks = actionsSection.split(/\n  - id:/);
+    const actionBlocks = actionsSection.split(/\n {2}- id:/);
     for (const block of actionBlocks.slice(1)) {
       const id = block.split('\n')[0].trim();
       const desc = block.match(/description:\s*"([^"]+)"/)?.[1] || '';

package/dist/public/js/services/generator-smoke.js

@@ -7,6 +7,7 @@
  *   const result = await smokeTest('extension', 'prh-tiedonhaku', session);
  * @version-history
  *   v1.0.0 — 2026-03-26 — Initial smoke test module
+ *   v1.0.1 — 2026-06-19 — JSDoc type annotations for frontend type-checking
  */
 
 import { apiPost, apiGet } from '/js/api.js';
@@ -16,7 +17,7 @@ import { apiPost, apiGet } from '/js/api.js';
  * @param {string} type - Component type: 'extension', 'cortex', 'app'
  * @param {string} registeredAs - The registered name of the component
  * @param {object} session - Auth session for API calls
- * @returns {{ passed: boolean, error: string|null }}
+ * @returns {Promise<{ passed: boolean, error: string|null }>}
  */
 export async function smokeTest(type, registeredAs, session) {
   try {

package/dist/public/js/services/generator-validate.js

@@ -44,6 +44,7 @@
  *   v4.5.0 — 2026-03-16 — Cortex validator supports single-block format (YAML + JS
  *     separated by // lib/ comment) in addition to legacy separate blocks. Accept
  *     var/let/const for LIB_NAME declaration.
+ *   v4.5.1 — 2026-06-19 — lint fixes (misleading-char-class/unused-expression/empty-block)
  */
 import { parse as parseYaml, stringify as stringifyYaml } from '../../lib/yaml.mjs';
 
@@ -63,7 +64,7 @@ function sanitizeJson(text) {
   // Strip markdown backslash escaping: \[ \] \{ \} \( \) \* \_ \` \| \~ \#
   s = s.replace(/\\([[\]{}()*_`|~#])/g, '$1');
   s = s.replace(/,\s*([}\]])/g, '$1');
-  s = s.replace(/[\u200B\u200C\u200D\uFEFF]/g, '');
+  s = s.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
   return s;
 }
 
@@ -81,7 +82,7 @@ function preCleanYaml(text) {
   s = s.replace(/\\\[/g, '[').replace(/\\\]/g, ']');
   s = s.replace(/\\\{/g, '{').replace(/\\\}/g, '}');
   // Remove zero-width unicode
-  s = s.replace(/[\u200B\u200C\u200D\uFEFF]/g, '');
+  s = s.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
   // Fix common AI mistake: action list items missing "id:" key
   // e.g. "  - refreshQuotes\n    description:" → "  - id: refreshQuotes\n    description:"
   // Only match lines under "actions:" where the list item is a bare word followed by description on next line
@@ -895,11 +896,8 @@ export function validateBlueprint(result) {
       }
     }
 
-    // Preserve new top-level blueprint fields
-    if (parsed.settings) parsed.settings = parsed.settings;
-    if (parsed.testScenarios) parsed.testScenarios = parsed.testScenarios;
-    if (parsed.architecture) parsed.architecture = parsed.architecture;
-
+    // New top-level blueprint fields (settings/testScenarios/architecture) are preserved
+    // automatically — `parsed` is returned in full below.
     return { valid: errors.length === 0, errors, warnings, parsed, extracted: json };
   } catch (e) {
     errors.push(`Invalid JSON: ${e.message}`);

package/dist/public/js/services/generator.js

@@ -37,6 +37,7 @@
  *   v4.5.0 — 2026-03-19 — Add writeProjectLog for user-action activity logging; fix apiPatch import
  *   v5.0.0 — 2026-03-20 — Remove agent-related functions (replaced by OpenRouter autopilot)
  *   v5.1.0 — 2026-03-21 — Add saveProjectSettings/getProjectSettings for settings collection step
+ *   v5.1.1 — 2026-06-19 — lint fixes (misleading-char-class/unused-expression/empty-block)
  */
 import { apiGet, apiPost, apiPut, apiDelete } from '/js/api.js';
 import { parse as parseYaml, stringify as stringifyYaml } from '/lib/yaml.mjs';
@@ -487,7 +488,7 @@ function cleanYaml(text) {
   s = s.replace(/\\_/g, '_');
   s = s.replace(/\\\[/g, '[').replace(/\\\]/g, ']');
   s = s.replace(/\\\{/g, '{').replace(/\\\}/g, '}');
-  s = s.replace(/[\u200B\u200C\u200D\uFEFF]/g, '');
+  s = s.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
   try {
     const parsed = parseYaml(s);
     return stringifyYaml(parsed, { lineWidth: 0 });