aimeat 1.25.0 → 1.26.0

package/dist/public/views/profile/organisms/panels.js

@@ -0,0 +1,173 @@
+/**
+ * @file panels.js
+ * @description Small standalone organism panels: OrgSearch (content search across a member's
+ *   readable workspaces), IncomingInvitations (pending invites banner with Accept/Decline), and
+ *   BoardPreview (embedded organism board: latest posts + composer). Extracted from organisms-tab.js
+ *   with no behaviour change.
+ * @structure OrgSearch, IncomingInvitations, BoardPreview
+ * @usage import { OrgSearch, IncomingInvitations, BoardPreview } from '/views/profile/organisms/panels.js';
+ * @version-history
+ *   v1.0.0 — 2026-06-19 — Extracted from organisms-tab.js during the module split.
+ */
+import { h } from 'preact';
+import { useState, useEffect, useCallback, useRef } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { Spinner } from '/views/profile/shared.js';
+import { EmptyState } from '/components/EmptyState.js';
+import * as orgService from '/js/services/organisms.js';
+import { listPosts, createPost } from '/js/services/boards.js';
+import { copyToClipboard } from '/js/utils.js';
+import { relTime } from '/views/profile/organisms/helpers.js';
+
+/**
+ * Content search inside an organism — case-insensitive substring over the records + documents of
+ * every workspace the member can read. Backend: GET /v1/organisms/:id/search. Rendered in the
+ * expanded card for members; opening a hit takes the user to that workspace.
+ */
+export function OrgSearch({ orgId, onOpenWorkspace }) {
+  const [q, setQ] = useState('');
+  const [results, setResults] = useState(null);
+  const [busy, setBusy] = useState(false);
+
+  const doSearch = async () => {
+    const query = q.trim();
+    if (query.length < 2) return;
+    setBusy(true);
+    try {
+      const r = await orgService.searchOrganism(orgId, query);
+      setResults(r?.data?.results || []);
+    } catch { setResults([]); }
+    finally { setBusy(false); }
+  };
+
+  return html`
+    <div class="pj-orgsearch">
+      <div class="flex-row-wrap">
+        <input class="input-field input-sm pj-orgsearch-input" placeholder=${t('organisms.searchPlaceholder') || 'Find records & documents…'} value=${q}
+          onInput=${(e) => setQ(e.target.value)} onKeyDown=${(e) => { if (e.key === 'Enter') doSearch(); }} />
+        <button class="btn-outline btn-sm" disabled=${busy || q.trim().length < 2} onClick=${doSearch}>${t('organisms.search') || 'Search'}</button>
+      </div>
+      ${results !== null && results.length === 0 ? html`<div class="section-desc">${t('organisms.searchNoResults') || 'No matches.'}</div>` : null}
+      ${(results || []).map(r => html`
+        <div class="pj-access-row card-clickable" key=${r.ws + '/' + r.space + '/' + r.id} role="button" onClick=${() => onOpenWorkspace?.(r.ws)}>
+          <span>
+            <b>${(r.title)}</b>
+            <span class="pj-mini"> — ${(r.wsName || r.ws)} · ${(r.space)}</span>
+            <div class="pj-mini">${(r.snippet)}</div>
+          </span>
+        </div>
+      `)}
+    </div>
+  `;
+}
+
+/**
+ * Banner listing the caller's pending organism invitations (status `invited`) across all
+ * organisms, with Accept / Decline. Invited organisms are not in the member's active list, so
+ * this is how an invitee discovers them. Backend: GET /v1/organisms/invitations/mine.
+ */
+export function IncomingInvitations({ showToast, onChanged }) {
+  const [invites, setInvites] = useState([]);
+  const [busy, setBusy] = useState(false);
+  const load = useCallback(async () => {
+    const r = await orgService.listMyInvitations().catch(() => null);
+    setInvites(r?.data?.invitations || []);
+  }, []);
+  useEffect(() => { load(); }, [load]);
+  const liveRef = useRef(load); liveRef.current = load;
+  useEffect(() => {
+    const h = () => liveRef.current();
+    window.addEventListener('aimeat-live-update', h);
+    return () => window.removeEventListener('aimeat-live-update', h);
+  }, []);
+  const act = async (id, accept) => {
+    setBusy(true);
+    try {
+      const r = accept ? await orgService.acceptInvitation(id) : await orgService.declineInvitation(id);
+      if (r?.ok === false) showToast(r?.error?.message || (t('organisms.inviteActionFailed') || 'Failed'));
+      else showToast(accept ? (t('organisms.invitationAccepted') || 'Joined') : (t('organisms.invitationDeclined') || 'Declined'));
+      await load(); onChanged?.();
+    } catch (e) { showToast((e && e.message) || (t('organisms.inviteActionFailed') || 'Failed')); }
+    finally { setBusy(false); }
+  };
+  if (!invites.length) return null;
+  return html`
+    <div class="card">
+      <div class="section-title">${t('organisms.youAreInvited') || 'You’re invited'}</div>
+      ${invites.map(({ membership, organism }) => html`
+        <div class="pj-access-row" key=${organism.id}>
+          <span><b>${(organism.name)}</b>${membership.invitedBy ? html` <span class="pj-mini">— ${(t('organisms.invitedByLabel') || 'invited by {who}').replace('{who}', (membership.invitedBy))}</span>` : null}</span>
+          <span class="flex-row-wrap">
+            <button class="btn-success btn-sm" disabled=${busy} onClick=${() => act(organism.id, true)}>${t('organisms.acceptInvite') || 'Accept'}</button>
+            <button class="btn-ghost btn-sm" disabled=${busy} onClick=${() => act(organism.id, false)}>${t('organisms.declineInvite') || 'Decline'}</button>
+          </span>
+        </div>
+      `)}
+    </div>
+  `;
+}
+
+/* Board tab — embedded preview of the organism's discussion board: latest posts + a composer,
+ * with "Open in Boards" for the full view. The raw board UUID hides behind a copy icon. */
+export function BoardPreview({ boardId, showToast }) {
+  const [posts, setPosts] = useState(null);   // null = loading
+  const [text, setText] = useState('');
+  const [busy, setBusy] = useState(false);
+
+  const load = useCallback(() => {
+    listPosts(boardId).then(p => setPosts(Array.isArray(p) ? p : [])).catch(() => setPosts([]));
+  }, [boardId]);
+  useEffect(() => { load(); }, [load]);
+  const liveRef = useRef(load); liveRef.current = load;
+  useEffect(() => {
+    const h = () => liveRef.current();
+    window.addEventListener('aimeat-live-update', h);
+    return () => window.removeEventListener('aimeat-live-update', h);
+  }, []);
+
+  const send = async () => {
+    const body = text.trim();
+    if (!body) return;
+    setBusy(true);
+    try {
+      const r = await createPost(boardId, body);
+      if (r?.ok === false) showToast(r?.error?.message || 'Failed to post');
+      else { setText(''); load(); }
+    } catch (e) { showToast((e && e.message) || 'Failed to post'); }
+    finally { setBusy(false); }
+  };
+  const copyId = async () => {
+    const ok = await copyToClipboard(boardId);
+    showToast(ok ? (t('organisms.copied') || 'Copied') : (t('organisms.copyFailed') || 'Could not copy'));
+  };
+
+  const ts = (p) => p.created_at || p.createdAt || p.at || '';
+  const latest = [...(posts || [])].sort((a, b) => String(ts(b)).localeCompare(String(ts(a)))).slice(0, 5);
+
+  return html`
+    <div class="card-detail">
+      <div class="pj-tabhead">
+        <div class="section-desc pj-tabhead-desc">${t('organisms.boardPreviewDesc') || 'Latest messages on this organism’s board.'}</div>
+        <button class="pj-icon-btn" title=${(t('organisms.copyId') || 'Copy ID') + ': ' + boardId} onClick=${copyId}>${'📋'}</button>
+        <button class="btn-outline btn-sm" onClick=${() => window.dispatchEvent(new CustomEvent('aimeat-open-tab', { detail: { tabId: 'boards' } }))}>
+          ${t('organisms.openBoardsTab') || 'Open in Boards'}</button>
+      </div>
+      ${posts === null ? html`<${Spinner} />`
+        : latest.length === 0 ? html`<${EmptyState} icon="💬" text=${t('organisms.boardEmpty') || 'No messages yet — write the first one.'} />`
+        : latest.map(p => html`
+          <div class="pj-board-post" key=${p.id || ts(p)}>
+            <div class="pj-board-post-head">
+              <span class="pj-board-author">${(p.author_gaii || p.author || '?')}</span>
+              ${ts(p) ? html`<span class="pj-board-time">${relTime(ts(p))}</span>` : null}
+            </div>
+            <div class="pj-board-body">${(String(p.body || p.content || '').slice(0, 400))}</div>
+          </div>`)}
+      <div class="flex-row-wrap pj-board-composer">
+        <input class="input-field input-sm pj-board-input" placeholder=${t('organisms.writePost') || 'Write a message…'} value=${text}
+          onInput=${(e) => setText(e.target.value)} onKeyDown=${(e) => { if (e.key === 'Enter') send(); }} />
+        <button class="btn-outline btn-sm" disabled=${busy || !text.trim()} onClick=${send}>${t('organisms.send') || 'Send'}</button>
+      </div>
+    </div>`;
+}

package/dist/public/views/profile/organisms/participants-panel.js

@@ -0,0 +1,160 @@
+/**
+ * @file participants-panel.js
+ * @description Workspace participants panel — who takes part in this workspace, as a node → owner →
+ *   agents chart + listing, the viewer's contract agents (with one-click adopt), and (for the
+ *   workspace creator) an access manager. Extracted from organisms-tab.js with no behaviour change.
+ * @structure ParticipantsPanel
+ * @usage import { ParticipantsPanel } from '/views/profile/organisms/participants-panel.js';
+ * @version-history
+ *   v1.0.0 — 2026-06-19 — Extracted from organisms-tab.js during the module split.
+ */
+import { h } from 'preact';
+import { useState, useEffect } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import * as orgService from '/js/services/organisms.js';
+import { listAgents, offersWorkspaceContract, contractNamesOf, adoptContractTask } from '/js/services/agents.js';
+import { Mermaid } from '/components/Mermaid.js';
+
+/* Participants panel — who takes part in this workspace, as a node → owner → agents chart plus a
+ * listing. Built from the records' identity traces (humans + their agents) + organism membership.
+ * The viewer's own agents are named; everyone else's appear as anonymous ghost boxes. */
+export function ParticipantsPanel({ orgId, wsId, showToast }) {
+  const [data, setData] = useState(null);
+  const [show, setShow] = useState(true);
+  const [access, setAccess] = useState(null);     // { requests, members } — only for the workspace creator
+  const [grantee, setGrantee] = useState('');
+  const [role, setRole] = useState('contributor');
+  const [busy, setBusy] = useState(false);
+  // The viewer's own agents advertising a workspace contract (tag 'workspace-contract' +
+  // optional 'contract.<name>' tags) — surfaced here so a user looking at a workspace sees
+  // straight away which of their agents can serve it.
+  const [contractAgents, setContractAgents] = useState([]);
+  const [adoptBusy, setAdoptBusy] = useState('');   // `${gaii}:${contract}` of the in-flight adopt
+  useEffect(() => {
+    listAgents().then(a => setContractAgents((a || []).filter(offersWorkspaceContract))).catch(() => {});
+  }, []);
+  // One-click adoption: queue the agreed adopt-contract task (docs/agent-workspace-contracts.md
+  // §7c) — the agent provisions its contract's spaces itself and the task completion is the ack.
+  const adopt = async (a, contract) => {
+    const key = `${a.gaii}:${contract || ''}`;
+    setAdoptBusy(key);
+    try {
+      const r = await adoptContractTask(a.name, { organismId: orgId, ws: wsId, contract });
+      if (r?.ok === false) showToast?.(r?.error?.message || (t('organisms.adoptFailed') || 'Could not queue the adoption task'));
+      else showToast?.((t('organisms.adoptQueued') || 'Adoption task queued for {agent} — it provisions the contract and reports back').replace('{agent}', a.display_name || a.name));
+    } catch (e) { showToast?.((e && e.message) || (t('organisms.adoptFailed') || 'Could not queue the adoption task')); }
+    finally { setAdoptBusy(''); }
+  };
+  useEffect(() => {
+    let cancelled = false;
+    const fetchIt = () => orgService.getWorkspaceParticipants(orgId, wsId).then(d => { if (!cancelled) setData(d); }).catch(() => {});
+    fetchIt();
+    window.addEventListener('aimeat-live-update', fetchIt);
+    return () => { cancelled = true; window.removeEventListener('aimeat-live-update', fetchIt); };
+  }, [orgId, wsId]);
+  const isManager = !!(data && (data.nodes || []).some(n => (n.owners || []).some(o => o.isSelf && o.isCreator)));
+  const loadAccess = () => orgService.getWorkspaceAccess(orgId, wsId).then(setAccess).catch(() => {});
+  useEffect(() => { if (isManager) loadAccess(); }, [isManager, orgId, wsId, data]);  if (!data || !(data.nodes || []).length) return null;
+  const owners = [];
+  for (const n of data.nodes) for (const o of (n.owners || [])) owners.push({ ...o, node: n.id, isLocalNode: n.isLocal });
+
+  const after = async (p) => { setBusy(true); try { await p; await loadAccess(); } catch (e) { /* the row stays so the user can retry */ } finally { setBusy(false); } };
+  const doGrant = (g, r) => { const name = (g || '').trim(); if (name) { after(orgService.grantWorkspaceRole(orgId, wsId, name, r)); setGrantee(''); } };
+  const doRevoke = (g) => after(orgService.revokeWorkspaceRole(orgId, wsId, g));
+  const doDecide = (requester, decision) => after(orgService.decideWorkspaceAccess(orgId, wsId, requester, decision));
+  const pending = (access?.requests || []).filter(r => r.status === 'pending');
+  const members = access?.members || [];
+
+  return html`
+    <div class="pj-chart">
+      <div class="pj-chart-head">
+        <span class="pj-chart-title">${'👥 '}${t('organisms.participants') || 'Who works here'}</span>
+        <button class="btn-ghost btn-sm" onClick=${() => setShow(s => !s)}>${show ? (t('organisms.hide') || 'Hide') : (t('organisms.show') || 'Show')}</button>
+      </div>
+      ${show ? html`
+        <div class="pj-parts">
+          ${contractAgents.length ? html`
+            <div class="pj-contract-agents">
+              <div class="pj-access-title">${'📜 '}${t('organisms.contractAgents') || 'Your contract agents'}</div>
+              <div class="section-desc">${t('organisms.contractAgentsDesc') || 'These agents of yours advertise a workspace contract — they can process a workspace like this one. Grant access (below) or attach them in the organism Agents tab.'}</div>
+              <div class="pj-part-agents">
+                ${contractAgents.map(a => {
+                  const names = contractNamesOf(a);
+                  // An agent already working in THIS workspace (it appears among the viewer's own
+                  // agents in the participants data) gets a ✓ instead of Adopt buttons — offering
+                  // adoption for an agent that is already here is noise, and the task would be a
+                  // no-op re-provision anyway.
+                  const here = owners.some(o => o.isSelf && (o.agents || []).some(ag => ag.isOwn && ag.name === a.name));
+                  // One adopt action per advertised contract (a single unnamed one falls back to
+                  // the bare marker). The agent does the rest — join, provision, complete the task.
+                  const actions = names.length ? names : [''];
+                  return html`
+                    <span class="pj-part-agent own" key=${a.gaii} title=${a.gaii}>
+                      ${'📜 '}${a.display_name || a.name}
+                      ${here ? html`<span class="badge badge-success pj-mini" title=${t('organisms.contractActiveHint') || 'This agent already works in this workspace'}>${'✓ '}${t('organisms.contractActive') || 'active here'}</span>`
+                        : actions.map(c => html`
+                        <button class="btn-outline btn-sm pj-adopt-btn" key=${c} disabled=${adoptBusy === `${a.gaii}:${c}`}
+                          title=${t('organisms.adoptHint') || 'Queue a task for this agent to adopt its contract into THIS workspace (it provisions the spaces itself)'}
+                          onClick=${() => adopt(a, c)}>
+                          ${adoptBusy === `${a.gaii}:${c}` ? '…' : `${t('organisms.adoptContract') || 'Adopt'}${c ? ` ${c}` : ''}`}
+                        </button>`)}
+                    </span>`;
+                })}
+              </div>
+            </div>` : null}
+          <${Mermaid} chart=${orgService.buildParticipantsMermaid(data)} />
+          <div class="pj-parts-list">
+            ${owners.map((o, i) => html`<div class="pj-part-owner" key=${i}>
+              <div class="pj-part-human">
+                <span>${'👤 '}<strong>${(o.owner)}</strong></span>
+                ${o.isSelf ? html`<span class="badge badge-info pj-mini">${t('organisms.you') || 'you'}</span>` : null}
+                ${o.isCreator ? html`<span class="badge badge-success pj-mini">${t('organisms.creatorTag') || 'creator'}</span>` : null}
+                ${!o.isMember && !o.isSelf ? html`<span class="badge badge-warn pj-mini">${t('organisms.guest') || 'guest'}</span>` : null}
+                ${!o.isLocalNode ? html`<span class="pj-part-node">${'🌐 '}${(o.node)}</span>` : null}
+                ${o.contributions ? html`<span class="pj-part-count" title=${t('organisms.contributions') || 'contributions'}>${o.contributions}</span>` : null}
+              </div>
+              ${(o.agents || []).length ? html`<div class="pj-part-agents">
+                ${o.agents.map((a, j) => html`
+                  <span class="pj-part-agent ${a.isOwn ? 'own' : 'ghost'}" key=${j}
+                    title=${a.isOwn ? '' : (t('organisms.otherAgentHint') || 'Another owner’s agent — you see what it has done here, not its live status')}>
+                    ${'🤖 '}${(a.name)}<span class="pj-part-count">${a.contributions}</span>
+                  </span>`)}
+              </div>` : null}
+            </div>`)}
+          </div>
+          ${isManager ? html`
+            <div class="pj-access">
+              <div class="pj-access-title">${t('organisms.manageAccess') || 'Manage who can work here'}</div>
+              ${pending.map(r => html`<div class="pj-access-row" key=${'req-' + r.requester}>
+                <span class="pj-access-who">${'🙋 '}<strong>${(r.requester)}</strong> <span class="pj-access-note">${t('organisms.requestedAccess') || 'requested access'}</span></span>
+                <span class="pj-access-actions">
+                  <button class="btn-success btn-sm" disabled=${busy} onClick=${() => doDecide(r.requester, 'contributor')}>${t('organisms.addAsContributor') || 'Add as contributor'}</button>
+                  <button class="btn-outline btn-sm" disabled=${busy} onClick=${() => doDecide(r.requester, 'viewer')}>${t('organisms.addAsViewer') || 'as viewer'}</button>
+                  <button class="btn-danger btn-sm" disabled=${busy} onClick=${() => doDecide(r.requester, 'deny')}>${t('organisms.deny') || 'Deny'}</button>
+                </span>
+              </div>`)}
+              ${members.map(m => html`<div class="pj-access-row" key=${'mem-' + m.owner}>
+                <span class="pj-access-who">${'👤 '}<strong>${(m.owner)}</strong> <span class="badge ${m.role === 'contributor' ? 'badge-success' : 'badge-info'} pj-mini">${m.role === 'contributor' ? (t('organisms.roleContributorShort') || 'contributor') : (t('organisms.roleViewerShort') || 'viewer')}</span></span>
+                <span class="pj-access-actions">
+                  ${m.role === 'viewer'
+                    ? html`<button class="btn-outline btn-sm" disabled=${busy} onClick=${() => doGrant(m.owner, 'contributor')}>${t('organisms.makeContributor') || '→ can write'}</button>`
+                    : html`<button class="btn-outline btn-sm" disabled=${busy} onClick=${() => doGrant(m.owner, 'viewer')}>${t('organisms.makeViewer') || '→ read only'}</button>`}
+                  <button class="btn-danger btn-sm" disabled=${busy} onClick=${() => doRevoke(m.owner)}>${t('organisms.remove') || 'Remove'}</button>
+                </span>
+              </div>`)}
+              <div class="pj-access-add">
+                <input class="pj-access-input" placeholder=${t('organisms.addMemberPlaceholder') || 'owner name (or owner@node / agent#owner@node)'} value=${grantee}
+                  onInput=${e => setGrantee(e.target.value)} onKeyDown=${e => { if (e.key === 'Enter') doGrant(grantee, role); }} />
+                <select class="pj-access-role" value=${role} onChange=${e => setRole(e.target.value)}>
+                  <option value="contributor">${t('organisms.roleContributor') || 'contributor (read + write)'}</option>
+                  <option value="viewer">${t('organisms.roleViewer') || 'viewer (read only)'}</option>
+                </select>
+                <button class="btn-primary btn-sm" disabled=${busy || !grantee.trim()} onClick=${() => doGrant(grantee, role)}>${'+ '}${t('organisms.addMember') || 'Add'}</button>
+              </div>
+              <div class="pj-access-hint">${t('organisms.accessHint') || 'Members can be a different account; their agents inherit the role. Viewers read; contributors read + write.'}</div>
+            </div>` : null}
+        </div>` : null}
+    </div>`;
+}

package/dist/public/views/profile/organisms/schema-form.js

@@ -0,0 +1,127 @@
+/**
+ * @file schema-form.js
+ * @description A form rendered from a JSON Schema — typed inputs (enum→select, integer→number,
+ *   array→lines, boolean→checkbox, date/datetime→pickers, else text). Used by the workspace record
+ *   spaces to add/edit drafts of any objectType. Extracted from organisms-tab.js, no behaviour change.
+ * @structure SchemaForm
+ * @usage import { SchemaForm } from '/views/profile/organisms/schema-form.js';
+ * @version-history
+ *   v1.0.0 — 2026-06-19 — Extracted from organisms-tab.js during the module split.
+ */
+import { h } from 'preact';
+import { useState } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { getGhii } from '/js/services/auth.js';
+
+/* A form rendered from a JSON Schema — typed inputs (enum→select, integer→number,
+ * array→lines, boolean→checkbox, else text). Works for any objectType, including ones a
+ * generated manifest declares. New records pre-fill `id` (editable) and requester-style
+ * fields ("x-default": "currentUser", or a requested_by/created_by-shaped name) with the
+ * signed-in GHII. readOnly properties are agent-filled results — hidden here, shown only in
+ * the record view. Labels/hints resolve manifest i18n (wsT) → schema description → raw key.
+ * Save is always clickable: a failed attempt outlines the still-empty required fields. */
+export function SchemaForm({ schema, busy, onSave, onCancel, initial, idPrefix, namespace, wsT }) {
+  const props = (schema && schema.properties) || {};
+  const editable = Object.entries(props).filter(([, def]) => !(def && def.readOnly));
+  const required = new Set(((schema && schema.required) || []).filter(k => k !== 'id' && !(props[k] && props[k].readOnly)));
+  const fieldNames = editable.map(([k]) => k);
+  const [missing, setMissing] = useState(null); // required keys empty at the last save attempt
+  // Seed from an existing record when editing (arrays → newline text for the textarea inputs).
+  const [vals, setVals] = useState(() => {
+    const out = {};
+    for (const [k, def] of Object.entries(props)) {
+      const v = initial && initial[k];
+      if (v === undefined || v === null) continue;
+      out[k] = Array.isArray(v) ? v.join('\n') : (def.type === 'boolean' ? !!v : String(v));
+    }
+    if (!initial) {
+      if (props.id && out.id === undefined) out.id = `${idPrefix || 'rec'}-${Date.now().toString(36)}`;
+      const me = getGhii() || '';
+      for (const [k, def] of editable) {
+        if (out[k] !== undefined || def.type !== 'string' || def.enum) continue;
+        if (def['x-default'] === 'currentUser' || /^(requested_by|created_by|requester|author)$/i.test(k)) out[k] = me;
+      }
+    }
+    return out;
+  });
+  const set = (k, v) => setVals(s => ({ ...s, [k]: v }));
+
+  const buildValue = () => {
+    const out = {};
+    for (const [k, def] of Object.entries(props)) {
+      const raw = vals[k];
+      if (raw === undefined || raw === '') continue;
+      if (def.type === 'integer' || def.type === 'number') out[k] = Number(raw);
+      else if (def.type === 'boolean') out[k] = !!raw;
+      else if (def.type === 'array') out[k] = String(raw).split('\n').map(s => s.trim()).filter(Boolean);
+      else out[k] = raw;
+    }
+    return out;
+  };
+
+  const isEmpty = (k) => vals[k] === undefined || String(vals[k]).trim() === '';
+  // Of the fields flagged at the last attempt, only the ones STILL empty stay outlined.
+  const stillMissing = (missing || []).filter(isEmpty);
+  const trySave = () => {
+    const miss = [...required].filter(isEmpty);
+    setMissing(miss.length ? miss : null);
+    if (!miss.length) onSave(buildValue());
+  };
+
+  const labelOf = (k) => (wsT && wsT(`${namespace}.${k}`)) || k;
+  const hintOf = (k, def) => (wsT && wsT(`${namespace}.${k}.hint`)) || def.description
+    || (k === 'id' && !initial ? (t('organisms.autoIdHint') || 'Pre-filled automatically — change it if you want a memorable id.') : '');
+
+  const control = (k, def) => {
+    if (def.type === 'string' && Array.isArray(def.enum)) {
+      return html`<select class="input-field input-sm" value=${vals[k] ?? ''} onChange=${e => set(k, e.target.value)}>
+          <option value="">—</option>${def.enum.map(o => html`<option value=${o} key=${o}>${o}</option>`)}
+        </select>`;
+    }
+    // Date / datetime fields → native pickers (by schema format, or a name ending in _date).
+    if (def.format === 'date-time') {
+      return html`<input type="datetime-local" class="input-field input-sm" value=${vals[k] ?? ''} onInput=${e => set(k, e.target.value)} />`;
+    }
+    if (def.format === 'date' || (def.type === 'string' && !def.enum && /(_date$|^date$)/i.test(k))) {
+      return html`<input type="date" class="input-field input-sm" value=${vals[k] ?? ''} onInput=${e => set(k, e.target.value)} />`;
+    }
+    if (def.type === 'integer' || def.type === 'number') {
+      return html`<input type="number" class="input-field input-sm" value=${vals[k] ?? ''} onInput=${e => set(k, e.target.value)} />`;
+    }
+    if (def.type === 'array') {
+      return html`<textarea class="input-field input-sm" rows="2" value=${vals[k] ?? ''} onInput=${e => set(k, e.target.value)}></textarea>`;
+    }
+    return html`<input type="text" class="input-field input-sm" value=${vals[k] ?? ''} onInput=${e => set(k, e.target.value)} />`;
+  };
+
+  const field = (k, def) => {
+    const label = labelOf(k) + (required.has(k) ? ' *' : '');
+    if (def.type === 'boolean') {
+      return html`<label class="pj-field pj-field-inline" key=${k}><input type="checkbox" checked=${!!vals[k]} onChange=${e => set(k, e.target.checked)} /><span>${label}</span></label>`;
+    }
+    const hint = hintOf(k, def);
+    const suffix = def.type === 'array' ? ' (' + (t('organisms.onePerLine') || 'one per line') + ')' : '';
+    return html`<label class="pj-field ${stillMissing.includes(k) ? 'pj-field-invalid' : ''}" key=${k}>
+      <span>${label}${suffix}</span>
+      ${hint ? html`<span class="pj-field-hint">${hint}</span>` : null}
+      ${control(k, def)}</label>`;
+  };
+
+  return html`
+    <div class="create-form pj-draft-form">
+      <div class="flex-col">
+        ${fieldNames.length === 0
+          ? html`<div class="pj-empty">${t('organisms.loading') || 'Loading...'}</div>`
+          : fieldNames.map(k => field(k, props[k]))}
+        ${stillMissing.length ? html`<div class="pj-form-error">${(t('organisms.fillRequired') || 'Please fill in the required fields: {fields}')
+            .replace('{fields}', stillMissing.map(labelOf).join(', '))}</div>` : null}
+        <div class="form-actions">
+          <button class="btn-primary btn-sm" onClick=${trySave} disabled=${busy}>${t('organisms.saveDraft') || 'Save draft'}</button>
+          <button class="btn-ghost btn-sm" onClick=${onCancel}>${t('organisms.cancel') || 'Cancel'}</button>
+        </div>
+      </div>
+    </div>
+  `;
+}

package/dist/public/views/profile/organisms/sources-panel.js

@@ -0,0 +1,164 @@
+/**
+ * @file sources-panel.js
+ * @description Workspace Sources panel — references the workspace draws on (memory entries, storage
+ *   files, knowledge packages; own or external/read-only). Pointers ONLY: nothing is copied or moved.
+ *   Attach via a picker with Memory / Storage / Knowledge tabs. Extracted from organisms-tab.js with
+ *   no behaviour change.
+ * @structure SRC_ICON (internal), SourcesPanel
+ * @usage import { SourcesPanel } from '/views/profile/organisms/sources-panel.js';
+ * @version-history
+ *   v1.0.0 — 2026-06-19 — Extracted from organisms-tab.js during the module split.
+ */
+import { h } from 'preact';
+import { useState, useEffect, useCallback, useRef } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import * as orgService from '/js/services/organisms.js';
+import * as memoryService from '/js/services/memory.js';
+import * as knowledgeService from '/js/services/knowledge.js';
+import { EmptyState } from '/components/EmptyState.js';
+import { SearchBar } from '/components/SearchBar.js';
+import { fmtBytes } from '/js/format.js';
+
+const SRC_ICON = { memory: '🧠', storage: '📎', knowledge: '📚' };
+
+/* Sources: references the workspace draws on — memory entries, storage files, and knowledge
+ * packages (own, or external/read-only). Pointers ONLY: nothing is copied or moved; the referenced
+ * data stays where it lives (organism.{id}.meta.sources holds just the pointers). Attach via a
+ * picker with Memory / Storage / Knowledge tabs (Mine, or Discover for memory + knowledge). */
+export function SourcesPanel({ orgId, wsId, showToast }) {
+  const [sources, setSources] = useState([]);
+  const [picking, setPicking] = useState(false);
+  const [tab, setTab] = useState('knowledge');   // memory | storage | knowledge
+  const [scope, setScope] = useState('mine');     // mine | discover (storage has no discover)
+  const [q, setQ] = useState('');
+  const [results, setResults] = useState([]);
+  const [loading, setLoading] = useState(false);
+  const [busy, setBusy] = useState(false);
+
+  const load = useCallback(async () => { setSources(await orgService.getWorkspaceSources(orgId, wsId)); }, [orgId, wsId]);
+  useEffect(() => { load(); }, [load]);
+  useEffect(() => {
+    const h = () => load();
+    window.addEventListener('aimeat-live-update', h);
+    return () => window.removeEventListener('aimeat-live-update', h);
+  }, [load]);
+
+  const persist = async (next) => {
+    setSources(next);
+    const r = await orgService.saveWorkspaceSources(orgId, wsId, next).catch(() => ({ ok: false }));
+    if (r?.ok === false) showToast(t('organisms.sourcesSaveError') || 'Failed to save sources');
+  };
+
+  const doSearch = async () => {
+    setLoading(true);
+    const ql = q.trim().toLowerCase();
+    try {
+      if (tab === 'memory') {
+        if (scope === 'mine') {
+          const items = await memoryService.listMemories();
+          setResults(items.filter(i => !ql || String(i.key).toLowerCase().includes(ql)).slice(0, 100));
+        } else {
+          const d = await memoryService.discoverPublicMemories({ q: q.trim(), limit: 50 });
+          setResults(d.items || []);
+        }
+      } else if (tab === 'storage') {
+        const files = await orgService.listOwnStorageFiles();
+        setResults(files.filter(f => !ql || String(f.key).toLowerCase().includes(ql)));
+      } else if (scope === 'mine') {
+        const pkgs = await knowledgeService.listMyPackages();
+        setResults(pkgs.filter(p => { const n = String(p.value?.name || p.key || ''); return !ql || n.toLowerCase().includes(ql); }));
+      } else {
+        const r = await knowledgeService.discoverPackages({ limit: 50, sort: 'recent' });
+        setResults((r?.data?.packages || []).filter(p => !ql || String(p.name || '').toLowerCase().includes(ql)));
+      }
+    } catch (e) { setResults([]); }
+    finally { setLoading(false); }
+  };
+  const searchRef = useRef(doSearch); searchRef.current = doSearch;
+  // Auto-search when the picker opens or the tab/scope changes — but NOT on every keystroke
+  // (typing only updates q; Enter or the Search button runs it).
+  useEffect(() => { if (picking) searchRef.current(); }, [picking, tab, scope]);
+  // storage has no cross-owner discovery — force 'mine' there
+  useEffect(() => { if (tab === 'storage' && scope !== 'mine') setScope('mine'); }, [tab, scope]);
+
+  const keyOf = (s) => `${s.type}:${s.packageId || (s.ownerGaii || '') + '|' + (s.key || '')}`;
+  const attach = async (item) => {
+    setBusy(true);
+    try {
+      const base = { id: 's-' + Date.now().toString(36) + Math.random().toString(36).slice(2, 5), addedAt: new Date().toISOString() };
+      let src;
+      if (tab === 'memory') {
+        src = { ...base, type: 'memory', key: item.key, ownerGaii: item.owner_gaii || orgService.currentGhii(), label: item.key, external: scope === 'discover' };
+      } else if (tab === 'storage') {
+        src = { ...base, type: 'storage', key: item.key, ownerGaii: orgService.currentGhii(), label: item.key, mime: item.mime_type, external: false };
+      } else {
+        const pid = scope === 'mine' ? ((String(item.key).match(/packages\/([^/]+)\/manifest/) || [])[1] || item.key) : item.package_id;
+        const name = scope === 'mine' ? (item.value?.name || pid) : (item.name || pid);
+        src = { ...base, type: 'knowledge', packageId: pid, label: name, external: scope === 'discover' };
+      }
+      if (sources.some(s => keyOf(s) === keyOf(src))) { showToast(t('organisms.sourceExists') || 'Already added'); return; }
+      await persist([...sources, src]);
+      showToast(t('organisms.sourceAdded') || 'Source added');
+    } finally { setBusy(false); }
+  };
+  const removeSource = (id) => persist(sources.filter(s => s.id !== id));
+
+  const resultRow = (item, i) => {
+    let label, meta;
+    if (tab === 'memory') { label = item.key; meta = (scope === 'discover' ? (item.owner_gaii + ' · ') : '') + (item.visibility || ''); }
+    else if (tab === 'storage') { label = item.key; meta = (item.mime_type || '') + ' · ' + fmtBytes(item.size || 0); }
+    else { label = scope === 'mine' ? (item.value?.name || item.key) : (item.name || item.package_id); meta = (scope === 'mine' ? (item.value?.entries?.length || 0) : (item.entries_count || 0)) + ' ' + (t('organisms.entries') || 'entries'); }
+    return html`
+      <div class="pj-src-result" key=${'r' + i}>
+        <span class="pj-src-result-label" title=${String(label)}>${(String(label))}</span>
+        <span class="pj-src-result-meta">${(String(meta))}</span>
+        <button class="btn-ghost btn-sm" disabled=${busy} onClick=${() => attach(item)}>${t('organisms.attach') || 'Attach'}</button>
+      </div>`;
+  };
+
+  return html`
+    <div class="pj-section pj-sources">
+      <div class="pj-section-head">
+        <span class="pj-section-title">${t('organisms.sources') || 'Sources'}<span class="pj-doc-tag">${sources.length}</span></span>
+        <button class="btn-outline btn-sm" onClick=${() => setPicking(p => !p)}>
+          ${picking ? (t('organisms.close') || 'Close') : ('+ ' + (t('organisms.addSource') || 'Add source'))}
+        </button>
+      </div>
+      <div class="section-desc pj-sources-desc">${t('organisms.sourcesDesc') || 'References this workspace draws on — memory, files, and knowledge packages. Pointers only; the originals stay where they live.'}</div>
+
+      ${picking ? html`
+        <div class="pj-src-picker">
+          <div class="seg" role="tablist">
+            ${['memory', 'storage', 'knowledge'].map(tk => html`<button class="seg-btn ${tab === tk ? 'active' : ''}" key=${tk} onClick=${() => setTab(tk)}>${SRC_ICON[tk]} ${t('organisms.src_' + tk) || tk}</button>`)}
+          </div>
+          <div class="pj-src-controls">
+            ${tab !== 'storage' ? html`
+              <div class="seg">
+                <button class="seg-btn ${scope === 'mine' ? 'active' : ''}" onClick=${() => setScope('mine')}>${t('organisms.mine') || 'Mine'}</button>
+                <button class="seg-btn ${scope === 'discover' ? 'active' : ''}" onClick=${() => setScope('discover')}>${t('organisms.discover') || 'Discover'}</button>
+              </div>` : null}
+            <div class="pj-src-search"><${SearchBar} value=${q} onInput=${e => setQ(e.target.value)} onSubmit=${() => doSearch()} placeholder=${t('organisms.searchSources') || 'Search…'} /></div>
+            <button class="btn-ghost btn-sm" onClick=${doSearch} disabled=${loading}>${t('organisms.search') || 'Search'}</button>
+          </div>
+          <div class="pj-src-results">
+            ${loading ? html`<${EmptyState} text=${t('organisms.loading') || 'Loading…'} />`
+              : results.length === 0 ? html`<${EmptyState} text=${t('organisms.noResults') || 'No results'} />`
+              : results.slice(0, 100).map(resultRow)}
+          </div>
+        </div>` : null}
+
+      ${sources.length === 0 ? html`<${EmptyState} text=${t('organisms.noSources') || 'No sources yet'} />`
+        : html`<div class="pj-src-list">
+          ${sources.map(s => html`
+            <div class="pj-src-item" key=${s.id}>
+              <span class="pj-src-icon">${SRC_ICON[s.type] || '•'}</span>
+              <span class="pj-src-label" title=${s.key || s.packageId || ''}>${(String(s.label || s.key || s.packageId || ''))}</span>
+              ${s.external ? html`<span class="badge badge-muted pj-mini">${t('organisms.external') || 'external'}</span>` : null}
+              <span class="badge badge-info pj-mini">${t('organisms.src_' + s.type) || s.type}</span>
+              <button class="pj-icon-btn" title=${t('organisms.remove') || 'Remove'} onClick=${() => removeSource(s.id)}>✕</button>
+            </div>`)}
+        </div>`}
+    </div>`;
+}