aimeat 1.3.2 → 1.3.5

package/dist/src/services/upload-zip.js

@@ -0,0 +1,236 @@
+/**
+ * @file upload-zip.ts
+ * @description ZIP parsing for extension and cortex uploads via presigned URL.
+ *   Validates ZIP structure, extracts manifest + scripts/libs, applies security checks
+ *   (magic bytes, zip bomb detection, path traversal prevention).
+ * @structure
+ *   - parseExtensionZip() — ZIP buffer -> ExtensionRecord
+ *   - parseCortexZip() — ZIP buffer -> CortexExtensionRecord + libs
+ *   - extractZipEntries() — internal secure ZIP extraction
+ * @usage
+ *   import { parseExtensionZip, parseCortexZip } from '../services/upload-zip.js';
+ * @version-history
+ *   v1.0.0 — 2026-05-02 — Initial implementation
+ */
+import yauzl from 'yauzl';
+import YAML from 'yaml';
+import { parseCortexManifest } from './cortex-manifest.js';
+const ZIP_MAGIC = Buffer.from([0x50, 0x4b, 0x03, 0x04]);
+const MAX_FILES = 50;
+const MAX_DEPTH = 5;
+const DECOMPRESSION_RATIO = 10;
+export async function parseExtensionZip(buffer, config) {
+    if (buffer.length < 4 || !buffer.subarray(0, 4).equals(ZIP_MAGIC)) {
+        return { ok: false, error: 'Not a valid ZIP file (missing magic bytes)' };
+    }
+    const maxBytes = config.extensionMaxCodeSizeKb * 1024 * MAX_FILES;
+    if (buffer.length > maxBytes) {
+        return { ok: false, error: `ZIP exceeds maximum size of ${Math.round(maxBytes / 1024)}KB` };
+    }
+    let files;
+    try {
+        files = await extractZipEntries(buffer);
+    }
+    catch (err) {
+        return { ok: false, error: `ZIP extraction failed: ${err.message}` };
+    }
+    const manifestBuf = files.get('manifest.yaml');
+    if (!manifestBuf) {
+        return { ok: false, error: 'ZIP must contain manifest.yaml at root' };
+    }
+    let manifest;
+    try {
+        manifest = YAML.parse(manifestBuf.toString('utf-8'));
+    }
+    catch {
+        return { ok: false, error: 'manifest.yaml is not valid YAML' };
+    }
+    const metadata = manifest.metadata;
+    if (!metadata?.name || !metadata?.version || !metadata?.description || !metadata?.author) {
+        return { ok: false, error: 'metadata.name, metadata.version, metadata.description, and metadata.author are required' };
+    }
+    const actions = manifest.actions;
+    if (!Array.isArray(actions) || actions.length === 0) {
+        return { ok: false, error: 'actions array is required and must not be empty' };
+    }
+    // Extract scripts from scripts/ directory
+    const scripts = {};
+    for (const [path, buf] of files) {
+        if (path.startsWith('scripts/') && path.length > 'scripts/'.length) {
+            const filename = path.slice('scripts/'.length);
+            scripts[filename] = buf.toString('utf-8');
+        }
+    }
+    for (const action of actions) {
+        if (!action.id || !action.method || !action.path || !action.script) {
+            return { ok: false, error: 'Each action must have id, method, path, and script fields' };
+        }
+        if (!scripts[action.script]) {
+            return { ok: false, error: `Script "${action.script}" referenced in action "${action.id}" not found in scripts/ directory` };
+        }
+    }
+    for (const [filename, content] of Object.entries(scripts)) {
+        const sizeKb = Buffer.byteLength(content, 'utf-8') / 1024;
+        if (sizeKb > config.extensionMaxCodeSizeKb) {
+            return { ok: false, error: `Script "${filename}" (${Math.round(sizeKb)}KB) exceeds limit of ${config.extensionMaxCodeSizeKb}KB` };
+        }
+    }
+    const name = metadata.name;
+    const manifestConfig = manifest.config;
+    const manifestLimits = manifest.limits;
+    const manifestFederation = manifest.federation;
+    const manifestSchedules = manifest.schedules;
+    const manifestInstances = manifest.instances;
+    const record = {
+        name,
+        version: metadata.version,
+        description: metadata.description,
+        author: metadata.author,
+        status: 'inactive',
+        requiredApis: manifest.required_apis ?? [],
+        actions: actions.map(a => ({
+            id: a.id,
+            method: a.method.toUpperCase(),
+            path: a.path,
+            inputSchema: a.input ?? {},
+            outputSchema: a.output ?? {},
+            scriptContent: scripts[a.script],
+        })),
+        config: {
+            ...(manifestConfig
+                ? Object.fromEntries(Object.entries(manifestConfig).map(([k, v]) => {
+                    if (v && typeof v === 'object' && 'default' in v) {
+                        return [k, v.default];
+                    }
+                    return [k, v];
+                }))
+                : {}),
+            ...(manifestSchedules ? { __schedules: manifestSchedules } : {}),
+        },
+        limits: {
+            memoryMb: Math.min(manifestLimits?.memory_mb ?? config.extensionMaxMemoryMb, config.extensionMaxMemoryMb),
+            timeoutMs: Math.min(manifestLimits?.timeout_ms ?? config.extensionTimeoutMs, config.extensionTimeoutMs),
+            maxApiCalls: Math.min(manifestLimits?.max_api_calls ?? config.extensionMaxApiCalls, config.extensionMaxApiCalls),
+        },
+        federation: {
+            advertise: manifestFederation?.advertise ?? false,
+            capabilities: manifestFederation?.capabilities ?? [],
+        },
+        ...(manifestInstances?.supported ? {
+            instances: {
+                supported: true,
+                configSchema: manifestInstances.config_per_instance ?? undefined,
+            },
+        } : {}),
+        installedBy: 'upload',
+        installedAt: new Date().toISOString(),
+    };
+    return { ok: true, record };
+}
+export async function parseCortexZip(buffer, config, ownerName) {
+    if (buffer.length < 4 || !buffer.subarray(0, 4).equals(ZIP_MAGIC)) {
+        return { ok: false, error: 'Not a valid ZIP file (missing magic bytes)' };
+    }
+    const maxBytes = config.cortexMaxLibSizeKb * 1024 * MAX_FILES;
+    if (buffer.length > maxBytes) {
+        return { ok: false, error: 'ZIP exceeds maximum size' };
+    }
+    let files;
+    try {
+        files = await extractZipEntries(buffer);
+    }
+    catch (err) {
+        return { ok: false, error: `ZIP extraction failed: ${err.message}` };
+    }
+    const manifestBuf = files.get('manifest.yaml');
+    if (!manifestBuf) {
+        return { ok: false, error: 'ZIP must contain manifest.yaml at root' };
+    }
+    const manifestStr = manifestBuf.toString('utf-8');
+    const manifestSizeKb = Buffer.byteLength(manifestStr, 'utf-8') / 1024;
+    if (manifestSizeKb > config.cortexMaxLibSizeKb) {
+        return { ok: false, error: `Manifest size ${Math.round(manifestSizeKb)}KB exceeds limit of ${config.cortexMaxLibSizeKb}KB` };
+    }
+    // Extract libs from libs/ directory
+    const libs = {};
+    for (const [path, buf] of files) {
+        if (path.startsWith('libs/') && path.length > 'libs/'.length) {
+            const filename = path.slice('libs/'.length);
+            const content = buf.toString('utf-8');
+            const sizeKb = Buffer.byteLength(content, 'utf-8') / 1024;
+            if (sizeKb > config.cortexMaxLibSizeKb) {
+                return { ok: false, error: `Lib "${filename}" is ${sizeKb.toFixed(1)}KB, max is ${config.cortexMaxLibSizeKb}KB` };
+            }
+            libs[filename] = content;
+        }
+    }
+    const result = parseCortexManifest(manifestStr, ownerName, Object.keys(libs).length > 0 ? libs : undefined);
+    if (!result.ok || !result.extension) {
+        return { ok: false, error: result.errors?.join('; ') ?? 'Manifest validation failed' };
+    }
+    return { ok: true, extension: result.extension, libs: Object.keys(libs).length > 0 ? libs : undefined };
+}
+// ── Internal ZIP extraction ──
+function extractZipEntries(buffer) {
+    return new Promise((resolve, reject) => {
+        yauzl.fromBuffer(buffer, { lazyEntries: true }, (err, zipfile) => {
+            if (err)
+                return reject(err);
+            const files = new Map();
+            let totalDecompressed = 0;
+            const maxDecompressed = buffer.length * DECOMPRESSION_RATIO;
+            let fileCount = 0;
+            zipfile.on('error', reject);
+            zipfile.on('entry', (entry) => {
+                fileCount++;
+                if (fileCount > MAX_FILES) {
+                    zipfile.close();
+                    return reject(new Error(`ZIP contains more than ${MAX_FILES} files`));
+                }
+                const fileName = entry.fileName;
+                if (fileName.includes('../') || fileName.startsWith('/')) {
+                    zipfile.close();
+                    return reject(new Error(`Dangerous path detected: ${fileName}`));
+                }
+                // Symlink check (Unix external attributes)
+                const unixMode = (entry.externalFileAttributes >> 16) & 0xffff;
+                if ((unixMode & 0o170000) === 0o120000) {
+                    zipfile.close();
+                    return reject(new Error(`Symlink detected: ${fileName}`));
+                }
+                const depth = fileName.split('/').length - 1;
+                if (depth > MAX_DEPTH) {
+                    zipfile.close();
+                    return reject(new Error(`Directory depth exceeds ${MAX_DEPTH}: ${fileName}`));
+                }
+                if (fileName.endsWith('/')) {
+                    zipfile.readEntry();
+                    return;
+                }
+                zipfile.openReadStream(entry, (readErr, stream) => {
+                    if (readErr) {
+                        zipfile.close();
+                        return reject(readErr);
+                    }
+                    const chunks = [];
+                    stream.on('data', (chunk) => {
+                        totalDecompressed += chunk.length;
+                        if (totalDecompressed > maxDecompressed) {
+                            zipfile.close();
+                            return reject(new Error('Decompression ratio exceeded (possible zip bomb)'));
+                        }
+                        chunks.push(chunk);
+                    });
+                    stream.on('end', () => {
+                        files.set(fileName, Buffer.concat(chunks));
+                        zipfile.readEntry();
+                    });
+                    stream.on('error', (e) => { zipfile.close(); reject(e); });
+                });
+            });
+            zipfile.on('end', () => resolve(files));
+            zipfile.readEntry();
+        });
+    });
+}
+//# sourceMappingURL=upload-zip.js.map

package/dist/src/services/upload-zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-zip.js","sourceRoot":"","sources":["../../../src/services/upload-zip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACxD,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAU/B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAoB;IACxE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACD,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA4B,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA+C,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yFAAyF,EAAE,CAAC;IAC3H,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAqD,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACnF,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAgB,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,MAAM,CAAC,MAAM,2BAA2B,MAAM,CAAC,EAAE,mCAAmC,EAAE,CAAC;QACjI,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAC1D,IAAI,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,QAAQ,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC;QACtI,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAc,CAAC;IACrC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAiD,CAAC;IACtF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAuD,CAAC;IAC3F,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAgD,CAAC;IAEpF,MAAM,MAAM,GAAoB;QAC5B,IAAI;QACJ,OAAO,EAAE,QAAQ,CAAC,OAAiB;QACnC,WAAW,EAAE,QAAQ,CAAC,WAAqB;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAgB;QACjC,MAAM,EAAE,UAAU;QAClB,YAAY,EAAG,QAAQ,CAAC,aAA0B,IAAI,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,CAAC,CAAC,EAAY;YAClB,MAAM,EAAG,CAAC,CAAC,MAAiB,CAAC,WAAW,EAAE;YAC1C,IAAI,EAAE,CAAC,CAAC,IAAc;YACtB,WAAW,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE;YACvD,YAAY,EAAG,CAAC,CAAC,MAAkC,IAAI,EAAE;YACzD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,MAAgB,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,EAAE;YACJ,GAAG,CAAC,cAAc;gBACd,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBAC1C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAA6B,EAAE,CAAC;wBAC5E,OAAO,CAAC,CAAC,EAAG,CAA6B,CAAC,OAAO,CAAC,CAAC;oBACvD,CAAC;oBACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,CACL;gBACD,CAAC,CAAC,EAAE,CAAC;YACT,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;QACD,MAAM,EAAE;YACJ,QAAQ,EAAE,IAAI,CAAC,GAAG,CACb,cAAc,EAAE,SAAoB,IAAI,MAAM,CAAC,oBAAoB,EACpE,MAAM,CAAC,oBAAoB,CAC9B;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,CACd,cAAc,EAAE,UAAqB,IAAI,MAAM,CAAC,kBAAkB,EACnE,MAAM,CAAC,kBAAkB,CAC5B;YACD,WAAW,EAAE,IAAI,CAAC,GAAG,CAChB,cAAc,EAAE,aAAwB,IAAI,MAAM,CAAC,oBAAoB,EACxE,MAAM,CAAC,oBAAoB,CAC9B;SACJ;QACD,UAAU,EAAE;YACR,SAAS,EAAG,kBAAkB,EAAE,SAAqB,IAAI,KAAK;YAC9D,YAAY,EAAG,kBAAkB,EAAE,YAAyB,IAAI,EAAE;SACrE;QACD,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/B,SAAS,EAAE;gBACP,SAAS,EAAE,IAAI;gBACf,YAAY,EAAG,iBAAiB,CAAC,mBAA+C,IAAI,SAAS;aAChG;SACJ,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACxC,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,MAAc,EAAE,MAAoB,EAAE,SAAiB;IAEvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACD,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAElD,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtE,IAAI,cAAc,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,uBAAuB,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IACjI,CAAC;IAED,oCAAoC;IACpC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;YAC1D,IAAI,MAAM,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,QAAQ,QAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;YACtH,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAC7B,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE5G,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAAC;IAC3F,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC5G,CAAC;AAED,gCAAgC;AAEhC,SAAS,iBAAiB,CAAC,MAAc;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YAC7D,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YAE5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;YACxC,IAAI,iBAAiB,GAAG,CAAC,CAAC;YAC1B,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC;YAC5D,IAAI,SAAS,GAAG,CAAC,CAAC;YAElB,OAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE7B,OAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAkB,EAAE,EAAE;gBACxC,SAAS,EAAE,CAAC;gBACZ,IAAI,SAAS,GAAG,SAAS,EAAE,CAAC;oBACxB,OAAQ,CAAC,KAAK,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,SAAS,QAAQ,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBAED,MAAM,QAAQ,GAAW,KAAK,CAAC,QAAQ,CAAC;gBAExC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvD,OAAQ,CAAC,KAAK,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACrE,CAAC;gBAED,2CAA2C;gBAC3C,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC;gBAC/D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACrC,OAAQ,CAAC,KAAK,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7C,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;oBACpB,OAAQ,CAAC,KAAK,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,SAAS,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAQ,CAAC,SAAS,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,OAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC/C,IAAI,OAAO,EAAE,CAAC;wBAAC,OAAQ,CAAC,KAAK,EAAE,CAAC;wBAAC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;oBAAC,CAAC;oBAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACjC,iBAAiB,IAAI,KAAK,CAAC,MAAM,CAAC;wBAClC,IAAI,iBAAiB,GAAG,eAAe,EAAE,CAAC;4BACtC,OAAQ,CAAC,KAAK,EAAE,CAAC;4BACjB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;wBACjF,CAAC;wBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC,CAAC,CAAC;oBACH,MAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACnB,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC3C,OAAQ,CAAC,SAAS,EAAE,CAAC;oBACzB,CAAC,CAAC,CAAC;oBACH,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,OAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YAEH,OAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,OAAQ,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/static/app-catalog.html

@@ -96,6 +96,38 @@
       box-shadow: 0 0 0 3px rgba(232, 86, 74, .12);
     }
 
+    .mode-toggle {
+      display: flex;
+      gap: 2px;
+      flex-shrink: 0;
+      background: var(--surface-glass);
+      border: 1px solid var(--border-subtle);
+      border-radius: var(--radius-sm);
+      padding: 2px;
+    }
+
+    .mode-btn {
+      padding: 5px 10px;
+      border: none;
+      border-radius: 6px;
+      background: transparent;
+      color: var(--text-muted);
+      font-size: .78rem;
+      cursor: pointer;
+      transition: all var(--transition);
+      white-space: nowrap;
+    }
+
+    .mode-btn.active {
+      background: var(--accent);
+      color: #fff;
+      font-weight: 600;
+    }
+
+    .mode-btn:hover:not(.active) {
+      background: rgba(0,0,0,.05);
+    }
+
     .header-actions {
       display: flex;
       gap: 8px;
@@ -1002,7 +1034,8 @@
 
     /* ── Published Apps Section ──────────────────────── */
 
-    #published-section {
+    #published-section,
+    #community-section {
       margin: 0 24px 24px;
       position: relative;
       z-index: 1;
@@ -1201,6 +1234,10 @@
 
   <header>
     <h1>My Apps</h1>
+    <div class="mode-toggle">
+      <button id="mode-global" class="mode-btn active" onclick="window._launcher.switchDbMode('global')" title="Shared across all accounts on this browser">&#x1F310; Global</button>
+      <button id="mode-personal" class="mode-btn" onclick="window._launcher.switchDbMode('personal')" title="Private to your account">&#x1F464; Personal</button>
+    </div>
     <input type="text" id="search-input" placeholder="Search apps..." autocomplete="off" spellcheck="false"/>
     <div class="header-actions">
       <button class="icon-btn" id="add-btn" title="Add app">+</button>
@@ -1253,7 +1290,7 @@
     </div>
   </div>
 
-  <!-- Published Apps Section -->
+  <!-- Published Apps Section (own) -->
   <div id="published-section" style="display:none">
     <div class="published-header" onclick="window._launcher.togglePublished()">
       <h2>&#x1F680; Published Apps <span id="published-count"></span></h2>
@@ -1262,12 +1299,24 @@
     <div id="published-grid" class="published-grid"></div>
   </div>
 
+  <!-- Community Apps Section (other users) -->
+  <div id="community-section" style="display:none">
+    <div class="published-header" onclick="window._launcher.toggleCommunity()">
+      <h2>&#x1F30D; Community Apps <span id="community-count"></span></h2>
+      <span class="arrow open" id="community-arrow">&#x25BC;</span>
+    </div>
+    <div id="community-grid" class="published-grid"></div>
+  </div>
+
   <!-- Recently Opened Strip -->
   <div id="recent-section" style="display:none;margin:0 24px 1rem">
     <h3 style="margin:0 0 .5rem;font-size:.9rem;color:#6B7280">&#x1F552; Recently Opened</h3>
     <div id="recent-strip" style="display:flex;gap:.75rem;overflow-x:auto;padding-bottom:.5rem"></div>
   </div>
 
+  <div id="local-apps-header" style="display:none;margin:0 24px 8px">
+    <h2 style="font-size:1rem;font-weight:700;color:#6366f1;display:flex;align-items:center;gap:8px">&#x1F4BE; Local Apps <span id="local-apps-count" style="opacity:.6;font-weight:400"></span></h2>
+  </div>
   <main id="app-grid"></main>
 
   <footer>
@@ -1509,16 +1558,56 @@
 
   // ── IndexedDB wrapper ──────────────────────────────
 
-  const DB_NAME = 'AppLauncherDB';
+  const DB_NAME_GLOBAL = 'AppLauncherDB';
   const DB_VERSION = 2;
   const STORE_NAME = 'apps';
 
   let dbInstance = null;
+  let currentDbMode = localStorage.getItem('appCatalogMode') || 'global';
+
+  function getDbName() {
+    if (currentDbMode === 'personal') {
+      var owner = null;
+      try {
+        if (window.AIMEAT && window.AIMEAT.auth && window.AIMEAT.auth.getSession()) {
+          owner = window.AIMEAT.auth.getSession().owner || null;
+        }
+        if (!owner) {
+          var stored = localStorage.getItem('aimeat_session');
+          if (stored) owner = JSON.parse(stored).owner || null;
+        }
+      } catch(e) {}
+      if (owner) return DB_NAME_GLOBAL + '_' + owner;
+    }
+    return DB_NAME_GLOBAL;
+  }
+
+  function switchDbMode(mode) {
+    if (mode === currentDbMode) return;
+    currentDbMode = mode;
+    localStorage.setItem('appCatalogMode', mode);
+    if (dbInstance) {
+      dbInstance.close();
+      dbInstance = null;
+    }
+    updateModeToggle();
+    refreshAll();
+  }
+
+  function updateModeToggle() {
+    var globalBtn = document.getElementById('mode-global');
+    var personalBtn = document.getElementById('mode-personal');
+    if (!globalBtn || !personalBtn) return;
+    globalBtn.classList.toggle('active', currentDbMode === 'global');
+    personalBtn.classList.toggle('active', currentDbMode === 'personal');
+  }
 
   function openDB() {
-    if (dbInstance) return Promise.resolve(dbInstance);
+    var name = getDbName();
+    if (dbInstance && dbInstance.name === name) return Promise.resolve(dbInstance);
+    if (dbInstance) { dbInstance.close(); dbInstance = null; }
     return new Promise(function (resolve, reject) {
-      const request = indexedDB.open(DB_NAME, DB_VERSION);
+      const request = indexedDB.open(name, DB_VERSION);
 
       request.onupgradeneeded = function (event) {
         const db = event.target.result;
@@ -2291,6 +2380,12 @@
       }
 
       var grid = document.getElementById('app-grid');
+      var localHeader = document.getElementById('local-apps-header');
+      var localCount = document.getElementById('local-apps-count');
+      if (localHeader) {
+        localHeader.style.display = allApps.length > 0 ? '' : 'none';
+        if (localCount) localCount.textContent = '(' + allApps.length + ')';
+      }
 
       if (filtered.length === 0) {
         if (!activeTag && !searchQuery && allApps.length === 0) {
@@ -3111,14 +3206,25 @@
     arrow.classList.toggle('open', publishedVisible);
   }
 
+  var communityVisible = true;
+  function toggleCommunity() {
+    communityVisible = !communityVisible;
+    var grid = document.getElementById('community-grid');
+    var arrow = document.getElementById('community-arrow');
+    grid.style.display = communityVisible ? '' : 'none';
+    arrow.classList.toggle('open', communityVisible);
+  }
+
   function loadPublishedApps() {
     var config = loadConfig();
     var aimeatUrl = config.aimeatUrl ? config.aimeatUrl.replace(/\/+$/, '') : '';
     var section = document.getElementById('published-section');
     var grid = document.getElementById('published-grid');
     var countEl = document.getElementById('published-count');
+    var communitySection = document.getElementById('community-section');
+    var communityGrid = document.getElementById('community-grid');
+    var communityCountEl = document.getElementById('community-count');
 
-    // Get current owner name from session (if logged in)
     var currentOwner = null;
     try {
       if (window.AIMEAT && window.AIMEAT.auth && window.AIMEAT.auth.getSession()) {
@@ -3132,11 +3238,9 @@
       }
     } catch(e) {}
 
-    // Always load local published apps
     getAllApps().then(function(apps) {
       var localPublished = apps.filter(function(a) { return a.published; });
 
-      // Build a lookup of local published apps by filename
       var localByFilename = {};
       for (var i = 0; i < localPublished.length; i++) {
         var lp = localPublished[i];
@@ -3145,13 +3249,12 @@
         }
       }
 
-      // If no aimeatUrl, fall back to local-only display
       if (!aimeatUrl) {
         renderPublishedApps(localPublished, [], localByFilename, aimeatUrl, section, grid, countEl);
+        if (communitySection) communitySection.style.display = 'none';
         return;
       }
 
-      // Fetch server apps
       fetch(aimeatUrl + '/v1/apps')
         .then(function(resp) {
           if (!resp.ok) throw new Error('Server returned ' + resp.status);
@@ -3160,20 +3263,61 @@
         .then(function(json) {
           var serverApps = json.data && json.data.apps ? json.data.apps : [];
 
-          // Filter to current owner's apps if we know who they are
-          if (currentOwner) {
-            serverApps = serverApps.filter(function(a) { return a.owner === currentOwner; });
-          }
+          var ownApps = currentOwner
+            ? serverApps.filter(function(a) { return a.owner === currentOwner; })
+            : [];
+          var communityApps = currentOwner
+            ? serverApps.filter(function(a) { return a.owner !== currentOwner; })
+            : serverApps;
 
-          renderPublishedApps(localPublished, serverApps, localByFilename, aimeatUrl, section, grid, countEl);
+          renderPublishedApps(localPublished, ownApps, localByFilename, aimeatUrl, section, grid, countEl);
+          renderCommunityApps(communityApps, aimeatUrl, communitySection, communityGrid, communityCountEl, currentOwner);
         })
         .catch(function() {
-          // Server fetch failed - fall back to local only
           renderPublishedApps(localPublished, [], localByFilename, aimeatUrl, section, grid, countEl);
+          if (communitySection) communitySection.style.display = 'none';
         });
     });
   }
 
+  function renderCommunityApps(serverApps, aimeatUrl, section, grid, countEl, currentOwner) {
+    if (!section || !grid || !countEl) return;
+    if (serverApps.length === 0) {
+      section.style.display = 'none';
+      return;
+    }
+
+    section.style.display = '';
+    countEl.textContent = '(' + serverApps.length + ')';
+
+    var html = '';
+    for (var i = 0; i < serverApps.length; i++) {
+      var sa = serverApps[i];
+      var name = (sa.manifest && sa.manifest.name) ? sa.manifest.name : (sa.filename || '');
+      var version = sa.version_number ? 'v' + sa.version_number : '';
+      var date = sa.created_at ? new Date(sa.created_at).toLocaleDateString() : '';
+      var author = (sa.manifest && sa.manifest.authorDisplay) ? sa.manifest.authorDisplay : (sa.owner || '');
+      var viewUrl = aimeatUrl + '/v1/apps/' + encodeURIComponent(sa.owner || '') + '/' + encodeURIComponent(sa.filename || '');
+      html +=
+        '<div class="published-card">' +
+          '<div class="published-card-name">' + escapeHtml(name) +
+            (version ? ' <span style="opacity:.5;font-size:.85em">' + escapeHtml(version) + '</span>' : '') +
+          '</div>' +
+          '<div class="published-card-meta">' +
+            '<span>' + escapeHtml(sa.filename || '') + '</span>' +
+            '<span>' + date + '</span>' +
+          '</div>' +
+          '<div class="published-card-meta" style="margin-top:2px">' +
+            '<span style="color:var(--accent)">&#x1F464; ' + escapeHtml(author) + '</span>' +
+          '</div>' +
+          '<div class="published-card-actions">' +
+            '<button onclick="window.open(\'' + escapeHtml(viewUrl) + '?mode=inline\', \'_blank\')">&#x1F441; View</button>' +
+          '</div>' +
+        '</div>';
+    }
+    grid.innerHTML = html;
+  }
+
   function renderPublishedApps(localPublished, serverApps, localByFilename, aimeatUrl, section, grid, countEl) {
     // Merge: build a combined list. Server apps take priority for display data,
     // but we note which source(s) each app comes from.
@@ -4040,6 +4184,8 @@
     submitPublish: submitPublish,
     loadPublishedApps: loadPublishedApps,
     togglePublished: togglePublished,
+    toggleCommunity: toggleCommunity,
+    switchDbMode: switchDbMode,
     unpublishApp: unpublishApp,
     deleteServerApp: deleteServerApp,
     renderRecentlyOpened: renderRecentlyOpened,
@@ -4065,11 +4211,19 @@
   window.showCortexPopup = showCortexPopup;
   window.cortexCopy = cortexCopy;
 
+  function refreshAll() {
+    allApps = [];
+    renderApps();
+    loadPublishedApps();
+    renderRecentlyOpened();
+  }
+
   // ── Bootstrap ─────────────────────────────────────
 
   document.addEventListener('DOMContentLoaded', function () {
     // ── Apply theme on load ─────────────────────────
     applyTheme(loadConfig().theme);
+    updateModeToggle();
 
     renderApps();
     loadPublishedApps();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aimeat",
-  "version": "1.3.2",
-  "description": "AIME AT — AI Memory Exchange and Action Transfer — reference implementation",
+  "version": "1.3.5",
+  "description": "AIME AT - AI Memory Exchange and Action Transfer - reference implementation",
   "type": "module",
   "main": "dist/src/index.js",
   "bin": {