aimeat 1.26.0 → 1.27.1

package/README.md

@@ -346,6 +346,13 @@ npx aimeat seed     # seed example packages (in another terminal, server must be
 npx aimeat connect --url https://your-node --owner your-handle
 ```
 
+**App thumbnails (optional).** `aimeat screenshot-worker` renders each published app and stores a
+thumbnail shown in the App Catalogue and on the landing wall (`--watch N` keeps it backfilling). It
+drives your machine's installed **Chrome/Edge** via Playwright — **no browser download** on
+Windows/desktop; a headless server runs `npx playwright install chromium` once. Auth uses a
+long-lived operator token (mint one with `POST /v1/access/tokens`, `grant_operator: true`). The node
+runs fine without it — screenshots are an opt-in operator feature.
+
 ### From source
 
 Requires Node.js 24+ and pnpm 10+. MongoDB is optional.

package/dist/.env.example

@@ -8,6 +8,15 @@ AIMEAT_PORT=40050
 # AIMEAT_NODE_TYPE="full"         # full | relay | mirror
 # AIMEAT_BASE_URL="https://your-domain.com"  # Public URL (default: http://localhost:$PORT)
 
+# ── App Origin Isolation (H-2) ─────────────────────────────────
+# User-published apps run on a dedicated origin so they can never reach the
+# authenticated SPA's session. Requires DNS + a *.apps.<host> TLS cert + an nginx
+# server_name block (see docs/internal/app-origin-deployment.md). Keep DISABLED
+# until that infra is live — enabling it without DNS/cert would 301 apps to a host
+# that does not resolve.
+# AIMEAT_APP_HOST="apps.your-domain.com"   # default: apps.<AIMEAT_BASE_URL host>, empty for localhost/IP
+# AIMEAT_APP_ORIGIN_ENABLED=false          # true → apex inline app HTML 301s to the app origin
+
 # ── Storage Backend ───────────────────────────────────────────
 # Choose storage: memory (default, data lost on restart), sqlite (file-based, zero-config),
 # mongodb (production), or postgresql (production). `postgres` is accepted as an alias.
@@ -38,6 +47,8 @@ AIMEAT_PORT=40050
 # On startup creates anonymous owner+agent automatically.
 # Startup logs will show the anonymous prompt URL and share prompt URL.
 # AIMEAT_ANONYMOUS=false
+# AIMEAT_SCREENSHOT_AUTO=false             # true → node auto-generates app thumbnails (needs a headless browser; uses system Edge/Chrome)
+# AIMEAT_SCREENSHOT_INTERVAL_MIN=15        # minutes between auto-screenshot scans
 # CORS: comma-separated list of allowed origins, or * for all (default: *)
 # By architecture, AIMEAT accepts requests from any origin -- the platform
 # is Bearer-token-only (OAuth 2.1), no cookies, so CORS is not the protection
@@ -250,6 +261,14 @@ AIMEAT_PORT=40050
 # AIMEAT_NONCE_TTL_SECONDS=300                                 # verification nonce TTL (60-3600)
 # AIMEAT_NATIONAL_EID_PID_CLAIM="personal_identity_code"       # FI: personal_identity_code, SE: personalNumber, DK: dk.cpr
 
+# ── Social login — Google sign-in (OIDC) ─────────────────────
+# Create OAuth credentials at https://console.cloud.google.com/apis/credentials
+# Authorized redirect URI must exactly match the callback below.
+# AIMEAT_GOOGLE_OAUTH_ENABLED=false
+# AIMEAT_GOOGLE_OAUTH_CLIENT_ID=""                             # OAuth 2.0 client ID from Google Cloud Console
+# AIMEAT_GOOGLE_OAUTH_CLIENT_SECRET=""                         # OAuth 2.0 client secret
+# AIMEAT_GOOGLE_OAUTH_REDIRECT_URI=""                          # default: <baseUrl>/v1/ghii/login/google/callback
+
 # ── Consul (optional fleet management) ───────────────────────
 # Connect to HashiCorp Consul for centralized config management across nodes.
 # Values in Consul KV take precedence over file/.env but below database overrides.