aimeat 1.33.1 → 1.33.2

package/dist/locales/en.json

@@ -4588,6 +4588,18 @@
     "emailLabel": "Email",
     "sendUsername": "Send My Username",
     "usernameSent": "If an account with that email exists, your username was sent.",
+    "signupTitle": "Choose your username",
+    "signupIntro": "You're signing in with Google for the first time. Pick the username for your AIMEAT account.",
+    "signupEmailNote": "Signing up as {email}",
+    "signupUsernameLabel": "Username",
+    "signupSuggestedHint": "We suggested one from your Google account — change it to anything you like.",
+    "signupPermanentWarning": "⚠️ This username is permanent. It identifies you across AIMEAT and cannot be changed later — the only way to change it is to delete your account and create a new one.",
+    "signupAvailable": "✓ Available",
+    "signupTaken": "That username is already taken — pick another.",
+    "signupInvalid": "Username must be 3–64 characters: lowercase letters, numbers and hyphens.",
+    "signupCreateBtn": "Create my account",
+    "signupCreating": "Creating account...",
+    "signupCancelBtn": "Cancel",
     "whyTitle": "✨ What do you get?",
     "whyGhii": "Your own digital identity. Only you control it",
     "whyPrivacy": "Your own private memory space, protected by your password",
@@ -7849,7 +7861,13 @@
       "hideConfirm": "Hide",
       "hideExplain": "This removes the app from the public catalogue, gallery, search, and direct download. The owner keeps a copy with a \"moderated by operator: hidden\" badge but cannot unhide it.",
       "reasonLabel": "Reason (shown to the owner, optional)",
-      "reasonPlaceholder": "e.g. Anonymous / policy violation"
+      "reasonPlaceholder": "e.g. Anonymous / policy violation",
+      "delete": "Delete",
+      "deletedOk": "App permanently deleted.",
+      "deleteTitle": "Delete application",
+      "deleteConfirm": "Permanently delete",
+      "deleteWarn": "⚠️ This removes the app and all its versions from the node entirely. This cannot be undone — the owner loses it too. To just hide it, use Hide instead.",
+      "deleteTypeLabel": "Type the filename to confirm: {filename}"
     },
     "security": {
       "title": "Security",

package/dist/locales/fi.json

@@ -4588,6 +4588,18 @@
     "emailLabel": "Sähköposti",
     "sendUsername": "Lähetä käyttäjätunnukseni",
     "usernameSent": "Jos sähköpostiosoitteella on tili, käyttäjätunnus lähetettiin.",
+    "signupTitle": "Valitse käyttäjätunnuksesi",
+    "signupIntro": "Kirjaudut Googlella ensimmäistä kertaa. Valitse AIMEAT-tilisi käyttäjätunnus.",
+    "signupEmailNote": "Rekisteröidyt osoitteella {email}",
+    "signupUsernameLabel": "Käyttäjätunnus",
+    "signupSuggestedHint": "Ehdotimme tunnusta Google-tilisi perusteella — voit vaihtaa sen mihin tahansa.",
+    "signupPermanentWarning": "⚠️ Tämä käyttäjätunnus on pysyvä. Se tunnistaa sinut koko AIMEATissa eikä sitä voi vaihtaa jälkikäteen — ainoa tapa muuttaa se on poistaa tili ja luoda uusi.",
+    "signupAvailable": "✓ Vapaa",
+    "signupTaken": "Tämä käyttäjätunnus on jo varattu — valitse toinen.",
+    "signupInvalid": "Käyttäjätunnuksen pituus 3–64 merkkiä: pieniä kirjaimia, numeroita ja väliviivoja.",
+    "signupCreateBtn": "Luo tilini",
+    "signupCreating": "Luodaan tiliä...",
+    "signupCancelBtn": "Peruuta",
     "whyTitle": "✨ Mitä saat?",
     "whyGhii": "Oma digitaalinen identiteetti. Vain sinä hallitset sitä",
     "whyPrivacy": "Oman yksityisen muistitilan, suojattuna salasanallasi",
@@ -7849,7 +7861,13 @@
       "hideConfirm": "Piilota",
       "hideExplain": "Tämä poistaa sovelluksen julkisesta katalogista, galleriasta, hausta ja suorasta latauksesta. Omistaja säilyttää kopion merkinnällä \"moderoitu operaattorin toimesta: piilotettu\", mutta ei voi poistaa piilotusta.",
       "reasonLabel": "Syy (näytetään omistajalle, valinnainen)",
-      "reasonPlaceholder": "esim. Anonyymi / käytäntörikkomus"
+      "reasonPlaceholder": "esim. Anonyymi / käytäntörikkomus",
+      "delete": "Poista",
+      "deletedOk": "Sovellus poistettu pysyvästi.",
+      "deleteTitle": "Poista sovellus",
+      "deleteConfirm": "Poista pysyvästi",
+      "deleteWarn": "⚠️ Tämä poistaa sovelluksen ja kaikki sen versiot kokonaan solmusta. Tätä ei voi perua — myös omistaja menettää sen. Jos haluat vain piilottaa, käytä Piilota-toimintoa.",
+      "deleteTypeLabel": "Vahvista kirjoittamalla tiedostonimi: {filename}"
     },
     "security": {
       "title": "Tietoturva",

package/dist/public/css/views/admin.css

@@ -4,6 +4,7 @@
  *   its distinct indigo accent and a permanently-dark sidebar, but all content
  *   surfaces map to global theme.css tokens so they flip with dark/light mode.
  * @version-history
+ *   v1.8.0 — 2026-06-25 — Applications tab: .adm-apps-rowactions (Hide/Restore + Delete row).
  *   v1.7.0 — 2026-06-24 — Applications moderation tab: .adm-apps-* (filters row,
  *     hidden-only toggle, dimmed hidden rows, modal actions).
  *   v1.6.0 — 2026-06-12 — Subdomains tab: .adm-subdomain-form create-form grid
@@ -596,6 +597,7 @@
 .adm-apps-toggle { display: inline-flex; align-items: center; gap: 6px; white-space: nowrap; }
 .adm-apps-row-hidden { opacity: 0.6; }
 .adm-apps-modal-actions { justify-content: flex-end; }
+.adm-apps-rowactions { gap: 6px; flex-wrap: wrap; }
 
 /* Active subtab button */
 .adm-btn-active,

package/dist/public/js/services/admin.js

@@ -82,6 +82,8 @@ export const mintMorsels     = (gaii, amount) => apiPost('/v1/admin/mint', { gai
 export const getAdminApps    = ()       => apiGet('/v1/admin/apps');
 export const moderateApp     = (owner, filename, hidden, reason) =>
   apiPost(`/v1/admin/apps/${encodeURIComponent(owner)}/${encodeURIComponent(filename)}/moderate`, { hidden, reason });
+export const deleteAppAdmin  = (owner, filename) =>
+  apiDelete(`/v1/admin/apps/${encodeURIComponent(owner)}/${encodeURIComponent(filename)}`);
 
 // ── Chat Instances ──
 export const getChatInstances = ()      => apiGet('/v1/chat-instances');

package/dist/public/views/admin/apps-tab.js

@@ -6,10 +6,13 @@
  *   from every public surface (catalogue/gallery/search + direct download); the
  *   owner still sees it in their "My Apps" with a "moderated by operator: hidden"
  *   badge but cannot lift it — only an operator can.
- * @structure AppsAdminTab (default) — load all apps, filter, table, hide-reason modal.
+ * @structure AppsAdminTab (default) — load all apps, filter, table, hide-reason +
+ *   type-to-confirm delete modals.
  * @usage Mounted by the admin dashboard tab router (views/admin.js).
  * @version-history
  *   v1.0.0 — 2026-06-24 — Initial: list-all + hide/restore moderation tool.
+ *   v1.1.0 — 2026-06-25 — Add operator hard-delete (type-to-confirm) — removes an
+ *     app permanently from the node.
  */
 import { h } from 'preact';
 import { useState, useEffect, useCallback, useMemo } from 'preact/hooks';
@@ -28,6 +31,8 @@ export default function AppsAdminTab() {
   const [hiddenOnly, setHiddenOnly] = useState(false);
   // { owner, filename, name, reason } while the hide-reason modal is open
   const [hiding, setHiding] = useState(null);
+  // { owner, filename, name, typed } while the type-to-confirm delete modal is open
+  const [deleting, setDeleting] = useState(null);
   const [busy, setBusy] = useState(false);
   const [msg, showError, showSuccess, clearMsg] = useToast();
 
@@ -89,6 +94,21 @@ export default function AppsAdminTab() {
     }
   }, [load, showSuccess, showError]);
 
+  const doDelete = useCallback(async () => {
+    if (!deleting || deleting.typed !== deleting.filename) return;
+    setBusy(true);
+    try {
+      await adminService.deleteAppAdmin(deleting.owner, deleting.filename);
+      showSuccess(t('admin.apps.deletedOk'));
+      setDeleting(null);
+      await load();
+    } catch (err) {
+      showError(err?.message || String(err));
+    } finally {
+      setBusy(false);
+    }
+  }, [deleting, load, showSuccess, showError]);
+
   return html`
     ${msg && html`<${Toast} type=${msg.type} text=${msg.text} onDismiss=${clearMsg} />`}
     <p class="adm-text-sm adm-text-dim adm-mb-md">${t('admin.apps.desc')}</p>
@@ -140,9 +160,12 @@ export default function AppsAdminTab() {
                         : html`<span class="badge badge-success">${t('admin.apps.statusLive')}</span>`}
                   </td>
                   <td>
-                    ${a.operator_hidden
-                      ? html`<button class="adm-btn-sm adm-btn-success" onClick=${() => doRestore(a)}>${t('admin.apps.restore')}</button>`
-                      : html`<button class="adm-btn-sm adm-btn-danger" onClick=${() => setHiding({ owner: a.owner, filename: a.filename, name: a.manifest?.name || a.filename, reason: '' })}>${t('admin.apps.hide')}</button>`}
+                    <div class="adm-flex adm-apps-rowactions">
+                      ${a.operator_hidden
+                        ? html`<button class="adm-btn-sm adm-btn-success" onClick=${() => doRestore(a)}>${t('admin.apps.restore')}</button>`
+                        : html`<button class="adm-btn-sm adm-btn-danger" onClick=${() => setHiding({ owner: a.owner, filename: a.filename, name: a.manifest?.name || a.filename, reason: '' })}>${t('admin.apps.hide')}</button>`}
+                      <button class="adm-btn-sm adm-btn-danger-solid" onClick=${() => setDeleting({ owner: a.owner, filename: a.filename, name: a.manifest?.name || a.filename, typed: '' })}>${t('admin.apps.delete')}</button>
+                    </div>
                   </td>
                 </tr>
               `)}
@@ -166,5 +189,20 @@ export default function AppsAdminTab() {
         </div>
       `}
     <//>
+
+    <${Modal} open=${!!deleting} onClose=${() => setDeleting(null)} title=${t('admin.apps.deleteTitle')}>
+      ${deleting && html`
+        <p>${t('admin.apps.deleteConfirm')} <strong>${escHtml(deleting.name)}</strong> (<span class="mono">${escHtml(deleting.owner)}</span>)?</p>
+        <p class="adm-text-sm adm-text-error">${t('admin.apps.deleteWarn')}</p>
+        <label class="adm-text-sm adm-mb-half">${t('admin.apps.deleteTypeLabel', { filename: deleting.filename })}</label>
+        <input class="adm-input adm-input-full mono" value=${deleting.typed}
+          placeholder=${deleting.filename}
+          onInput=${e => setDeleting({ ...deleting, typed: e.target.value })} />
+        <div class="adm-flex adm-mt-md adm-apps-modal-actions">
+          <button class="btn-ghost" onClick=${() => setDeleting(null)}>${t('common.cancel')}</button>
+          <button class="btn-danger-solid" disabled=${busy || deleting.typed !== deleting.filename} onClick=${doDelete}>${t('admin.apps.delete')}</button>
+        </div>
+      `}
+    <//>
   `;
 }

package/dist/src/generated/api-types.d.ts

@@ -5335,10 +5335,13 @@ export interface paths {
         /**
          * Google sign-in OIDC redirect callback
          * @description Google redirects the browser here with `code` and `state` after consent. The node
-         *     exchanges the code, maps the Google identity to a GHII (linking to an existing account
-         *     when Google's verified email matches a locally-verified account, otherwise creating a
-         *     new account), establishes an owner session (httpOnly refresh cookie + access token),
-         *     and redirects back to the SPA. On any failure it redirects to `/?auth_error=<CODE>`.
+         *     exchanges the code and maps the Google identity to a GHII. A returning Google user
+         *     (matched by provider subject) or a verified-email match links straight to their account
+         *     and gets an owner session (httpOnly refresh cookie + access token) before redirecting
+         *     back to the SPA. A BRAND-NEW user is NOT auto-created: the node stashes the verified
+         *     Google identity in a short-lived signed cookie and redirects back with `?aimeat_signup=1`,
+         *     and the SPA prompts for a one-time username choice (see `/v1/ghii/login/pending` +
+         *     `/v1/ghii/login/google/finalize`). On any failure it redirects to `/?auth_error=<CODE>`.
          */
         get: operations["ghiiLoginGoogleCallback"];
         put?: never;
@@ -5349,6 +5352,77 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/ghii/login/pending": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read the pending Google sign-up (first-time username choice)
+         * @description After a brand-new Google user is bounced back with `?aimeat_signup=1`, the SPA calls
+         *     this to read the pending sign-up so it can render the one-time username-choice step.
+         *     Reads the short-lived, signed httpOnly cookie set by the callback (the verified Google
+         *     identity never leaves the server — only the suggested username, email, display name and
+         *     post-login redirect are returned). Returns 404 `NO_PENDING_SIGNUP` when absent/expired.
+         */
+        get: operations["ghiiLoginPending"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/ghii/username-available": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Check whether an owner username is valid and free
+         * @description Live validation for the username-choice step (and any registration UI). Generic and
+         *     unauthenticated; rate-limited. Reports whether the name passes the owner-name format
+         *     rules and whether it is currently unclaimed. A same-node `@suffix` is stripped; a
+         *     remote-node identity is reported invalid (cannot be registered here).
+         */
+        get: operations["ghiiUsernameAvailable"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/ghii/login/google/finalize": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Complete a first-time Google sign-up with the chosen username
+         * @description Finalizes a brand-new Google sign-up. Reads the signed pending-signup cookie, validates
+         *     the chosen username (falling back to the suggested one when blank), creates the owner +
+         *     GHII linked to the Google account (with the welcome bonus), and establishes an owner
+         *     session (httpOnly refresh cookie + access token). Idempotent: if the Google identity has
+         *     already resolved to a GHII, that session is established instead. Rate-limited.
+         */
+        post: operations["ghiiLoginGoogleFinalize"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/catalogue/directory": {
         parameters: {
             query?: never;
@@ -23121,6 +23195,134 @@ export interface operations {
             };
         };
     };
+    ghiiLoginPending: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Pending sign-up details */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AimeatEnvelope"] & {
+                        data?: {
+                            /** @description Suggested username (derived from the Google account, free at suggestion time) */
+                            suggested?: string;
+                            email?: string | null;
+                            displayName?: string;
+                            /** @description Same-site path to return to after finalize */
+                            redirect?: string;
+                        };
+                    };
+                };
+            };
+            /** @description No pending Google sign-up (cookie absent or expired) */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AimeatEnvelope"] & {
+                        error?: {
+                            /** @example NO_PENDING_SIGNUP */
+                            code?: unknown;
+                        };
+                    };
+                };
+            };
+        };
+    };
+    ghiiUsernameAvailable: {
+        parameters: {
+            query: {
+                /** @description Candidate username (lowercased; an `@node` suffix for this node is stripped) */
+                name: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Validation result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AimeatEnvelope"] & {
+                        data?: {
+                            name?: string;
+                            valid?: boolean;
+                            available?: boolean;
+                            reason?: string | null;
+                        };
+                    };
+                };
+            };
+        };
+    };
+    ghiiLoginGoogleFinalize: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": {
+                    /** @description The username the user chose or confirmed; blank uses the suggested name */
+                    username?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Account created (or resolved) and session established */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AimeatEnvelope"] & {
+                        data?: {
+                            ghii?: string;
+                            owner?: string;
+                            displayName?: string;
+                            redirect?: string;
+                        };
+                    };
+                };
+            };
+            /** @description No pending sign-up, or invalid username */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Username already taken */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AimeatEnvelope"] & {
+                        error?: {
+                            /** @example NAME_TAKEN */
+                            code?: unknown;
+                        };
+                    };
+                };
+            };
+        };
+    };
     searchDirectory: {
         parameters: {
             query?: {