aimeat 1.34.0 → 1.36.0

package/dist/.env.example

@@ -269,6 +269,31 @@ AIMEAT_PORT=40050
 # AIMEAT_GOOGLE_OAUTH_CLIENT_SECRET=""                         # OAuth 2.0 client secret
 # AIMEAT_GOOGLE_OAUTH_REDIRECT_URI=""                          # default: <baseUrl>/v1/ghii/login/google/callback
 
+# ── Social login — Casdoor sign-in (OIDC) ────────────────────
+# Casdoor is an open-source IdP. In its admin: create an Application, add the redirect URI below,
+# then copy the client id/secret here. Casdoor is the authority for its org's accounts, so AIMEAT
+# treats emails it returns as verified (enables link-by-email) — only enable IdPs you trust for that.
+# AIMEAT_CASDOOR_OAUTH_ENABLED=false
+# AIMEAT_CASDOOR_OAUTH_ENDPOINT=""                             # Casdoor server URL, e.g. https://casdoor.example.com
+# AIMEAT_CASDOOR_OAUTH_CLIENT_ID=""                            # Application client ID from Casdoor
+# AIMEAT_CASDOOR_OAUTH_CLIENT_SECRET=""                        # Application client secret from Casdoor
+# AIMEAT_CASDOOR_OAUTH_REDIRECT_URI=""                         # default: <baseUrl>/v1/ghii/login/casdoor/callback
+
+# ── Social login — Microsoft Entra ID sign-in (OIDC) ─────────
+# Register an app (free) at https://entra.microsoft.com → App registrations. Add a "Web" platform
+# with the redirect URI below and create a client secret. TENANT controls who may sign in:
+#   • a Directory (tenant) GUID  → ONLY that org's members (enterprise gating; AIMEAT also checks the
+#     `tid` claim and treats the email as verified so members auto-link).
+#   • common        → any work/school account AND personal Microsoft accounts (widest).
+#   • organizations → any work/school account (any org).  • consumers → personal accounts only.
+# Note: for the non-GUID modes strict issuer validation can be finicky; pin a tenant GUID for the
+# most reliable + gated setup.
+# AIMEAT_ENTRA_OAUTH_ENABLED=false
+# AIMEAT_ENTRA_OAUTH_TENANT="common"                           # tenant GUID | common | organizations | consumers
+# AIMEAT_ENTRA_OAUTH_CLIENT_ID=""                              # Application (client) ID from the app registration
+# AIMEAT_ENTRA_OAUTH_CLIENT_SECRET=""                          # Client secret value from the app registration
+# AIMEAT_ENTRA_OAUTH_REDIRECT_URI=""                           # default: <baseUrl>/v1/ghii/login/entra/callback
+
 # ── Consul (optional fleet management) ───────────────────────
 # Connect to HashiCorp Consul for centralized config management across nodes.
 # Values in Consul KV take precedence over file/.env but below database overrides.

package/dist/locales/en.json

@@ -559,7 +559,7 @@
     "wf": {
       "title": "Design a workflow",
       "quick": "Design workflow",
-      "prompt": "Describe the outcome you want — I'll chain your specialists/agents into a workflow to reach it.",
+      "prompt": "Describe the outcome you want — I'll chain your specialists and Builders into a workflow (a multi-step pipeline) to reach it.",
       "placeholder": "e.g. Every evening, gather the day's news and publish an edition…",
       "design": "Design",
       "designing": "Designing the chain…",
@@ -742,10 +742,28 @@
     "apply": "Set up my Secretary",
     "applying": "Setting up…",
     "hireDone": "Your Secretary is set up.",
+    "briefsReady": "Work briefs ready to hand to a Builder",
     "fillingWorkspaces": "Filling your workspaces with real content…",
     "workspacesFilled": "Workspaces filled with real content",
+    "workspacesFilledIssues": "couldn't fill these yet",
     "emptyRemoved": "empty ones removed",
     "fillError": "Couldn't fill the workspaces",
+    "settingUpTitle": "Setting up your Secretary…",
+    "settingUpHint": "Hang tight — this can take a minute while it writes real content into each workspace.",
+    "stepStructure": "Creating your space and workspaces…",
+    "stepFilling": "Filling workspace",
+    "stepDone": "Done — finishing up…",
+    "mode": {
+      "title": "How should your Secretary work?",
+      "intro": "Either way, it fills your workspaces with real content right now. This choice is about what it does ON ITS OWN afterwards. You can change it any time.",
+      "draftTitle": "Prepare things for me (recommended)",
+      "draftDesc": "It keeps your workspaces up to date on its own and drafts what's next — but leaves it for you to approve. Nothing is published without your OK. Uses your AI credits.",
+      "actTitle": "Run things for me",
+      "actDesc": "Fully autonomous: it fills, updates and publishes on its own, every day, without asking. Uses your AI credits.",
+      "offTitle": "Only when I ask",
+      "offDesc": "It fills your workspaces now, then waits. It won't spend or act on its own until you turn it on.",
+      "changeLater": "You can change this any time under the Secretary's “How I work”."
+    },
     "hireError": "Couldn't set up the Secretary",
     "hireBadShape": "The pasted result is missing required fields (brain.purpose, organism.name, workspaces).",
     "hiredStatus": "Secretary is set up",
@@ -760,6 +778,13 @@
     "inappError": "Couldn't generate",
     "inappEmpty": "The AI returned nothing.",
     "howIWork": "How I work",
+    "autonomy": {
+      "suggest": "Suggest only",
+      "suggestHint": "I watch, keep things current, and surface what needs attention — but I ask before acting.",
+      "assist": "Handle the small stuff",
+      "assistHint": "I also file notes, post reminders and briefings on my own. Heavy work is always a Work Brief you hand to a Builder."
+    },
+    "advancedBands": "Advanced — per-capability control",
     "stopSpending": "Stop spending",
     "stopSpendingHint": "Pause everything that costs morsels or acts on its own. The Secretary can still think, draft, and message you.",
     "dailyBudget": "Daily morsel budget",
@@ -981,6 +1006,24 @@
     "reliability": "Reliability",
     "reliabilityBuilding": "building…",
     "reliabilityHint": "Average score of the Secretary's reviewed decisions — its own track record, not its marketplace trust.",
+    "brief": {
+      "startHere": "👉 Start here:",
+      "title": "Hand to a Builder",
+      "subtitle": "Heavy work the Secretary prepared — a big AI builds it via MCP. You never invent content here.",
+      "mcpNote": "Open one in Claude Desktop (it needs your AIMEAT MCP connected), or send it to an already-connected Builder.",
+      "connectLink": "Connect a Builder",
+      "heavyBadge": "Heavy",
+      "dispatchedBadge": "Dispatched",
+      "preview": "Preview what the Builder receives",
+      "openClaude": "Open in Claude Desktop",
+      "sendBuilder": "Send to a connected Builder…",
+      "waiting": "Waiting on the Builder…",
+      "dispatchedNote": "Sent — the Builder is working on it via MCP. This clears itself when the task finishes (or use Done).",
+      "noBuilder": "Connect a Builder to dispatch",
+      "done": "Done",
+      "dispatched": "Brief sent to the Builder.",
+      "dispatchFailed": "Couldn't dispatch the brief."
+    },
     "dash": {
       "todayTitle": "Today",
       "refresh": "Refresh",
@@ -1039,7 +1082,7 @@
       "startNewTitle": "Start something new",
       "nextStep": "Next step",
       "allSettled": "all steps settled",
-      "hint": "Tell me a goal — I'll propose a repeatable routine. Approve each step (band-gated) and I'll run it and track the results.",
+      "hint": "Tell me a goal — I'll propose a repeatable routine: light, recurring checks I run and track myself (for heavy building, I hand a Builder a Work Brief instead). Approve each step (band-gated).",
       "placeholder": "What do you want to make progress on?",
       "propose": "Propose a routine",
       "proposing": "Designing…",
@@ -1072,7 +1115,9 @@
       "delegateWorkflowPick": "Run a workflow…",
       "delegateWorkflowGo": "Run workflow",
       "delegateDesignWf": "Design new workflow",
-      "delegatePick": "Pick an agent…",
+      "delegatePick": "Pick who runs it…",
+      "delegateSpecialists": "Specialists (node-local)",
+      "delegateBuilders": "Builders (connected AI)",
       "delegateGo": "Delegate",
       "delegateNoAgent": "Pick an agent to delegate to first",
       "delegateNoAgents": "No other agents to delegate to — connect one in Manage → crew.",
@@ -4902,6 +4947,8 @@
     "cancelBtn": "Cancel",
     "orLabel": "OR",
     "googleSignIn": "Continue with Google",
+    "casdoorSignIn": "Continue with Casdoor",
+    "entraSignIn": "Continue with Microsoft",
     "working": "Working...",
     "errUserShort": "Username must be at least 3 characters",
     "errPassShort": "Password must be at least 4 characters",
@@ -4934,11 +4981,13 @@
     "sendUsername": "Send My Username",
     "usernameSent": "If an account with that email exists, your username was sent.",
     "signupTitle": "Choose your username",
-    "signupIntro": "You're signing in with Google for the first time. Pick the username for your AIMEAT account.",
+    "signupIntro": "You're signing in for the first time. Pick the username for your AIMEAT account.",
     "signupEmailNote": "Signing up as {email}",
     "signupUsernameLabel": "Username",
-    "signupSuggestedHint": "We suggested one from your Google account — change it to anything you like.",
+    "signupSuggestedHint": "We suggested one from your account — change it to anything you like.",
     "signupPermanentWarning": "⚠️ This username is permanent. It identifies you across AIMEAT and cannot be changed later — the only way to change it is to delete your account and create a new one.",
+    "signupDisplayNameLabel": "Display name",
+    "signupDisplayNameHint": "Shown to others — not permanent, you can change it anytime later.",
     "signupAvailable": "✓ Available",
     "signupTaken": "That username is already taken — pick another.",
     "signupInvalid": "Username must be 3–64 characters: lowercase letters, numbers and hyphens.",
@@ -8108,7 +8157,10 @@
       "complete_test_task": "Complete Test Task",
       "publish_commands": "Publish Slash Commands",
       "publish_config": "Publish Runtime Config",
-      "declare_services": "Declare Services"
+      "declare_services": "Declare Services",
+      "declare_offerings": "Declare Offerings",
+      "make_workflow_compatible": "Make an Offer Workflow-Compatible",
+      "price_offer": "Price an Offer"
     },
     "stepDescriptions": {
       "authenticate": "Agent is authenticated via device auth",

package/dist/locales/fi.json

@@ -559,7 +559,7 @@
     "wf": {
       "title": "Suunnittele workflow",
       "quick": "Suunnittele workflow",
-      "prompt": "Kuvaa haluttu lopputulema — ketjutan specialistisi/agenttisi workflow:ksi sen saavuttamiseksi.",
+      "prompt": "Kuvaa haluttu lopputulema — ketjutan specialistisi ja Builderit workflow:ksi (monivaiheinen putki) sen saavuttamiseksi.",
       "placeholder": "esim. Joka ilta kokoa päivän uutiset ja julkaise painos…",
       "design": "Suunnittele",
       "designing": "Suunnittelen ketjua…",
@@ -742,10 +742,28 @@
     "apply": "Pystytä sihteerini",
     "applying": "Pystytetään…",
     "hireDone": "Sihteerisi on pystytetty.",
+    "briefsReady": "Työbriiffit valmiina annettavaksi Builderille",
     "fillingWorkspaces": "Täytetään työtilojasi oikealla sisällöllä…",
     "workspacesFilled": "Työtilat täytetty oikealla sisällöllä",
+    "workspacesFilledIssues": "näitä ei voitu vielä täyttää",
     "emptyRemoved": "tyhjiä poistettu",
     "fillError": "Työtilojen täyttö epäonnistui",
+    "settingUpTitle": "Pystytetään sihteeriäsi…",
+    "settingUpHint": "Hetki — tämä voi kestää minuutin, kun se kirjoittaa oikeaa sisältöä jokaiseen työtilaan.",
+    "stepStructure": "Luodaan tila ja työtilat…",
+    "stepFilling": "Täytetään työtila",
+    "stepDone": "Valmis — viimeistellään…",
+    "mode": {
+      "title": "Miten sihteerisi toimii?",
+      "intro": "Kummassakin tapauksessa se täyttää työtilasi oikealla sisällöllä heti nyt. Tämä valinta koskee sitä mitä se tekee OMIN PÄIN sen jälkeen. Voit muuttaa tätä milloin vain.",
+      "draftTitle": "Valmistele puolestani (suositus)",
+      "draftDesc": "Pitää työtilat ajan tasalla itse ja luonnostelee seuraavat askeleet — mutta jättää ne sinun hyväksyttäväksesi. Mitään ei julkaista ilman lupaasi. Käyttää AI-krediittejäsi.",
+      "actTitle": "Hoida puolestani",
+      "actDesc": "Täysin autonominen: täyttää, päivittää ja julkaisee itse, joka päivä, kysymättä. Käyttää AI-krediittejäsi.",
+      "offTitle": "Vain kun pyydän",
+      "offDesc": "Täyttää työtilat nyt, sitten odottaa. Ei kuluta eikä toimi omin päin ennen kuin laitat sen päälle.",
+      "changeLater": "Voit muuttaa tätä milloin vain sihteerin ”How I work” -kohdasta."
+    },
     "hireError": "Sihteerin pystytys epäonnistui",
     "hireBadShape": "Liitetystä tuloksesta puuttuu pakollisia kenttiä (brain.purpose, organism.name, workspaces).",
     "hiredStatus": "Sihteeri on pystytetty",
@@ -760,6 +778,13 @@
     "inappError": "Luonti epäonnistui",
     "inappEmpty": "AI ei palauttanut mitään.",
     "howIWork": "Miten toimin",
+    "autonomy": {
+      "suggest": "Vain ehdota",
+      "suggestHint": "Seuraan, pidän asiat ajan tasalla ja nostan esiin mikä vaatii huomiota — mutta kysyn ennen kuin toimin.",
+      "assist": "Hoida pienet asiat",
+      "assistHint": "Kirjaan myös muistiinpanot, muistutukset ja briiffit itse. Raskas työ on aina Work Brief jonka annat Builderille."
+    },
+    "advancedBands": "Lisäasetukset — kyvykkyyskohtainen hallinta",
     "stopSpending": "Lopeta kulutus",
     "stopSpendingHint": "Keskeytä kaikki mikä kuluttaa morsseja tai toimii itsenäisesti. Sihteeri voi yhä ajatella, luonnostella ja viestiä sinulle.",
     "dailyBudget": "Päivittäinen morssi-budjetti",
@@ -981,6 +1006,24 @@
     "reliability": "Luotettavuus",
     "reliabilityBuilding": "kerätään…",
     "reliabilityHint": "Sihteerin arvioitujen päätösten keskiarvopistemäärä — sen oma näyttö, ei markkinapaikan luottamus.",
+    "brief": {
+      "startHere": "👉 Aloita tästä:",
+      "title": "Anna Builderille",
+      "subtitle": "Raskas työ jonka Sihteeri valmisteli — iso äly rakentaa sen MCP:llä. Et keksi sisältöä täällä.",
+      "mcpNote": "Avaa yksi Claude Desktopissa (siinä pitää olla AIMEAT-MCP kytkettynä), tai lähetä jo kytketylle Builderille.",
+      "connectLink": "Kytke Builder",
+      "heavyBadge": "Raskas",
+      "dispatchedBadge": "Lähetetty",
+      "preview": "Esikatsele mitä Builder saa",
+      "openClaude": "Avaa Claude Desktopissa",
+      "sendBuilder": "Lähetä kytketylle Builderille…",
+      "waiting": "Odotetaan Builderia…",
+      "dispatchedNote": "Lähetetty — Builder työstää sitä MCP:llä. Tämä poistuu itsestään kun task valmistuu (tai paina Valmis).",
+      "noBuilder": "Kytke Builder lähettääksesi",
+      "done": "Valmis",
+      "dispatched": "Briiffi lähetetty Builderille.",
+      "dispatchFailed": "Briiffin lähetys epäonnistui."
+    },
     "dash": {
       "todayTitle": "Tänään",
       "refresh": "Päivitä",
@@ -1039,7 +1082,7 @@
       "startNewTitle": "Aloita jotain uutta",
       "nextStep": "Seuraava vaihe",
       "allSettled": "kaikki vaiheet käsitelty",
-      "hint": "Kerro tavoite — ehdotan toistettavan rutiinin. Hyväksy jokainen vaihe (lupakaistan mukaan), niin ajan sen ja seuraan tuloksia.",
+      "hint": "Kerro tavoite — ehdotan toistettavan rutiinin: kevyitä, toistuvia tarkistuksia jotka ajan ja seuraan itse (raskaaseen rakentamiseen annan Builderille Work Briefin). Hyväksy jokainen vaihe (lupakaistan mukaan).",
       "placeholder": "Missä haluat edistyä?",
       "propose": "Ehdota rutiinia",
       "proposing": "Suunnitellaan…",
@@ -1072,7 +1115,9 @@
       "delegateWorkflowPick": "Aja työnkulku…",
       "delegateWorkflowGo": "Aja työnkulku",
       "delegateDesignWf": "Suunnittele uusi workflow",
-      "delegatePick": "Valitse agentti…",
+      "delegatePick": "Valitse kuka ajaa sen…",
+      "delegateSpecialists": "Specialistit (node-paikalliset)",
+      "delegateBuilders": "Builderit (kytketty AI)",
       "delegateGo": "Delegoi",
       "delegateNoAgent": "Valitse ensin agentti, jolle delegoidaan",
       "delegateNoAgents": "Ei muita agentteja delegoitavaksi — yhdistä sellainen kohdassa Hallinta → tiimi.",
@@ -4902,6 +4947,8 @@
     "cancelBtn": "Peruuta",
     "orLabel": "TAI",
     "googleSignIn": "Jatka Googlella",
+    "casdoorSignIn": "Jatka Casdoorilla",
+    "entraSignIn": "Jatka Microsoftilla",
     "working": "Käsitellään...",
     "errUserShort": "Käyttäjänimen tulee olla vähintään 3 merkkiä",
     "errPassShort": "Salasanan tulee olla vähintään 4 merkkiä",
@@ -4934,11 +4981,13 @@
     "sendUsername": "Lähetä käyttäjätunnukseni",
     "usernameSent": "Jos sähköpostiosoitteella on tili, käyttäjätunnus lähetettiin.",
     "signupTitle": "Valitse käyttäjätunnuksesi",
-    "signupIntro": "Kirjaudut Googlella ensimmäistä kertaa. Valitse AIMEAT-tilisi käyttäjätunnus.",
+    "signupIntro": "Kirjaudut ensimmäistä kertaa. Valitse AIMEAT-tilisi käyttäjätunnus.",
     "signupEmailNote": "Rekisteröidyt osoitteella {email}",
     "signupUsernameLabel": "Käyttäjätunnus",
-    "signupSuggestedHint": "Ehdotimme tunnusta Google-tilisi perusteella — voit vaihtaa sen mihin tahansa.",
+    "signupSuggestedHint": "Ehdotimme tunnusta tilisi perusteella — voit vaihtaa sen mihin tahansa.",
     "signupPermanentWarning": "⚠️ Tämä käyttäjätunnus on pysyvä. Se tunnistaa sinut koko AIMEATissa eikä sitä voi vaihtaa jälkikäteen — ainoa tapa muuttaa se on poistaa tili ja luoda uusi.",
+    "signupDisplayNameLabel": "Näyttönimi",
+    "signupDisplayNameHint": "Näkyy muille — ei pysyvä, voit vaihtaa sen milloin tahansa myöhemmin.",
     "signupAvailable": "✓ Vapaa",
     "signupTaken": "Tämä käyttäjätunnus on jo varattu — valitse toinen.",
     "signupInvalid": "Käyttäjätunnuksen pituus 3–64 merkkiä: pieniä kirjaimia, numeroita ja väliviivoja.",
@@ -8108,7 +8157,10 @@
       "complete_test_task": "Suorita testitehtävä",
       "publish_commands": "Julkaise slash-komennot",
       "publish_config": "Julkaise runtime-konfiguraatio",
-      "declare_services": "Ilmoita palvelut"
+      "declare_services": "Ilmoita palvelut",
+      "declare_offerings": "Ilmoita tarjoukset",
+      "make_workflow_compatible": "Tee tarjouksesta työnkulkuyhteensopiva",
+      "price_offer": "Hinnoittele tarjous"
     },
     "stepDescriptions": {
       "authenticate": "Agentti on tunnistautunut laitevarmennuksen kautta",

package/dist/public/css/views/secretary.css

@@ -1016,3 +1016,55 @@
   display: flex; flex-direction: column; gap: 0.5rem;
 }
 .sec-modal .sec-input, .sec-modal .sec-stand-body { margin-top: 0.2rem; }
+
+/* Live setup-progress overlay — a top-level modal shown through the whole setup (incl. the slow fill),
+   surviving the hire→dashboard switch so the owner always sees what's happening and how far along it is. */
+.sec-setup-overlay { position: fixed; inset: 0; z-index: 3000; display: flex; align-items: center; justify-content: center;
+  background: rgba(0, 0, 0, 0.45); padding: 1rem; }
+.sec-setup-box { background: var(--card); border: 1px solid var(--border); border-radius: 14px; box-shadow: var(--shadow);
+  padding: 1.25rem 1.5rem; width: min(28rem, 96vw); display: flex; flex-direction: column; gap: 0.5rem; }
+.sec-setup-row { display: flex; align-items: center; gap: 0.5rem; font-weight: 600; margin: 0.25rem 0 0.5rem; }
+.sec-progress-bar { height: 8px; border-radius: 999px; background: var(--bg-dim, var(--border)); overflow: hidden; }
+.sec-progress-fill { height: 100%; background: var(--accent); border-radius: 999px; transition: width 0.4s ease; }
+
+/* "How should your Secretary work?" autonomy step (asked once, up front, during setup). */
+.sec-mode-box { width: min(34rem, 96vw); }
+.sec-mode-opt { display: flex; gap: 0.6rem; align-items: flex-start; padding: 0.6rem 0.75rem; border: 1px solid var(--border);
+  border-radius: 10px; cursor: pointer; }
+.sec-mode-opt + .sec-mode-opt { margin-top: 0.4rem; }
+.sec-mode-opt--on { border-color: var(--accent); background: var(--bg-dim, var(--card)); }
+.sec-mode-opt input { margin-top: 0.2rem; accent-color: var(--accent); }
+.sec-mode-opt-t { font-weight: 700; display: block; }
+
+/* Work Brief tray — heavy work the Secretary prepared for a Builder (the light-vs-heavy seam). */
+.sec-brief-tray { border-color: var(--accent-border, var(--accent)); }
+.sec-brief-tray .sec-count { font-size: 0.78rem; font-weight: 600; padding: 0.05rem 0.45rem; border-radius: 999px;
+  background: var(--accent-soft, var(--bg-dim)); color: var(--accent); margin-left: 0.35rem; }
+.sec-brief-banner { margin: 0 0 0.5rem; padding: 0.45rem 0.6rem; font-size: 0.82rem; color: var(--text-dim);
+  background: var(--bg-dim); border: 1px solid var(--border); border-radius: var(--radius-sm, 8px); }
+.sec-brief-wait { margin-top: 0.3rem; }
+.sec-brief { padding: 0.65rem 0; border-top: 1px solid var(--border); }
+.sec-brief:first-of-type { border-top: none; }
+.sec-brief-top { display: flex; align-items: baseline; flex-wrap: wrap; gap: 0.45rem; }
+.sec-brief-obj { font-weight: 600; color: var(--text); }
+.sec-brief-ws { margin-left: auto; }
+.sec-brief-badge { font-size: 0.66rem; font-weight: 700; text-transform: uppercase; letter-spacing: 0.03em;
+  padding: 0.05rem 0.4rem; border-radius: 999px; background: var(--accent-soft, var(--bg-dim));
+  border: 1px solid var(--accent-border, var(--accent)); color: var(--accent); }
+.sec-brief-badge.is-dispatched { background: var(--info-bg, var(--bg-dim)); border-color: var(--info-border, var(--border)); color: var(--info-fg, var(--text-dim)); }
+.sec-brief-detail { margin: 0.4rem 0; }
+.sec-brief-detail > summary { cursor: pointer; color: var(--accent); font-size: 0.82rem; }
+.sec-brief-md { margin-top: 0.5rem; padding: 0.6rem 0.75rem; background: var(--bg-dim); border: 1px solid var(--border);
+  border-radius: var(--radius-sm, 8px); max-height: 22rem; overflow: auto; font-size: 0.85rem; }
+.sec-brief-actions { display: flex; align-items: center; flex-wrap: wrap; gap: 0.5rem; margin-top: 0.35rem; }
+.sec-select { padding: 0.3rem 0.5rem; border: 1px solid var(--border); border-radius: var(--radius-sm, 8px);
+  background: var(--card); color: var(--text); font-size: 0.82rem; }
+
+/* One autonomy toggle (collapses the per-capability band sprawl). */
+.sec-autonomy { display: flex; flex-direction: column; gap: 0.4rem; margin-bottom: 0.75rem; }
+.sec-auto-opt { display: flex; gap: 0.6rem; align-items: flex-start; padding: 0.55rem 0.7rem; border: 1px solid var(--border);
+  border-radius: 10px; cursor: pointer; }
+.sec-auto-opt--on { border-color: var(--accent); background: var(--bg-dim, var(--card)); }
+.sec-auto-opt input { margin-top: 0.2rem; accent-color: var(--accent); }
+.sec-adv { margin-top: 0.75rem; }
+.sec-adv > summary { cursor: pointer; color: var(--text-dim); font-size: 0.85rem; }

package/dist/public/js/i18n.js

@@ -63,6 +63,15 @@ export function t(key, vars) {
   return str;
 }
 
+/** Translate a key, but fall back to `fallbackText` when the key is missing.
+ *  t() returns the raw key string on a miss (truthy), which defeats the common
+ *  `t(key) || serverProvidedTitle` pattern -- use this when a server-provided
+ *  label should win over a raw key. */
+export function tOr(key, fallbackText, vars) {
+  const val = t(key, vars);
+  return val === key ? (fallbackText ?? key) : val;
+}
+
 /** Get current locale. */
 export function getLocale() {
   return currentLocale;

package/dist/public/js/services/secretary-helpers.js

@@ -8,6 +8,10 @@
  * @structure CONTRACT · buildInterviewPrompt · buildDesignPrompt · extractJson · snapshotOf · genCtxId · sanitizeQuickActions · migrateConfig · buildDecisionRecord
  * @usage import { buildInterviewPrompt, extractJson, sanitizeQuickActions, migrateConfig } from '/js/services/secretary-helpers.js';
  * @version-history
+ *   v0.7.0 — 2026-06-30 — Sharpen the CONTRACT to state the rule plainly: DOCUMENTS ARE THE DEFAULT (most
+ *     workspaces are flexible information → mostly/all document spaces); a RECORDS space is only for
+ *     same-shaped, list-like data (actions/tasks/bugs/pipeline/tracker) and legitimately starts empty —
+ *     so the user's AI stops over-producing rigid record spaces that the don't-invent fill leaves blank.
  *   v0.6.0 — 2026-06-30 — CONTRACT steers the design toward DOCUMENT spaces (free-form markdown, the
  *     default) and treats RECORDS spaces as the exception (only genuine lists/task-sets) — workspaces
  *     were coming out mostly as rigid record spaces.
@@ -85,10 +89,10 @@ export const CONTRACT = `\`\`\`json
 }
 \`\`\`
 
-A workspace's "manifest.objectTypes" are its SPACES, and each space is one of two kinds. PREFER DOCUMENT spaces:
-- A DOCUMENT space — free-form markdown pages about a topic (guides, write-ups, notes, plans, analysis, anything). Declare it as { "name": "<type>", "namespace": "<ns>", "mode": "document" } with NO fields and NO schema. This is the DEFAULT choice: it holds any kind of information and can be shaped freely, so most spaces should be document spaces.
-- A RECORDS space — a schema-locked list where every entry shares the SAME fixed fields. Use this ONLY when the content is genuinely a list or task-like set (a pipeline, a task list, a tracker). Declare it as { "name": "<type>", "namespace": "<ns>", "mode": "records", "fields": [ { "name": "<field>", "type": "text|number|date|select|boolean|reference" } ] } AND provide a matching JSON Schema under "schemas" keyed by its namespace.
-Lean toward document spaces; reach for a records space only when fixed, repeating fields clearly fit. Full manifest shape: { "manifestVersion": "1.0", "name": "<the workspace name>", "kind": "<short-slug>", "status": "active", "objectTypes": [ …the spaces above ] }.
+A workspace's "manifest.objectTypes" are its SPACES, and each space is one of two kinds. DOCUMENTS ARE THE DEFAULT — most workspaces are flexible information and should be all (or mostly) document spaces:
+- A DOCUMENT space — free-form markdown pages about a topic (guides, write-ups, notes, plans, analysis, anything). Declare it as { "name": "<type>", "namespace": "<ns>", "mode": "document" } with NO fields and NO schema. This is the DEFAULT: it holds any kind of information and can be shaped and edited freely. When in doubt, use a document space.
+- A RECORDS space — a schema-locked list where every entry shares the SAME fixed fields. Use this ONLY for genuinely list-like, repeating data: actions, tasks, bugs, a sales pipeline, a tracker — the SAME shape over and over, that you add rows to over time. Declare it as { "name": "<type>", "namespace": "<ns>", "mode": "records", "fields": [ { "name": "<field>", "type": "text|number|date|select|boolean|reference" } ] } AND provide a matching JSON Schema under "schemas" keyed by its namespace. A records space legitimately starts empty and fills as real items occur — so do not use one for content you want written up now.
+Default to document spaces; reach for a records space only when same-shaped, list-like rows clearly fit. A workspace may be entirely document spaces. Full manifest shape: { "manifestVersion": "1.0", "name": "<the workspace name>", "kind": "<short-slug>", "status": "active", "objectTypes": [ …the spaces above ] }.
 If you are NOT confident you can produce a VALID manifest + schemas, OMIT both fields for that workspace — they will be designed automatically afterward. Never output an invalid or half-finished manifest.
 
 "strategy" is the OPTIONAL steering frame for this area: where we are, where we're going, and how. Include it ONLY when the user wants this area steered that way (many goal-driven areas benefit; some areas are just ongoing upkeep — then OMIT the field entirely). EVERY sub-field is itself optional — include only the ones the user gave you real material for; never invent vision/mission/progress/names. When included:

package/dist/public/js/services/secretary-policy.js

@@ -7,9 +7,14 @@
  *   autonomous tick read it); for now it is authored + persisted here. Bands: act (do it + log) /
  *   draft (prepare, ask to approve) / ask (decision card) / off. `discover` is locked to act + free
  *   (read-only, never blocked by stop-spending). Full design: docs/plans/2026-06-23-secretary-feature.md §6/§9.
- * @structure BANDS · SECRETARY_CAPABILITIES · defaultPolicy() · mergePolicy()
- * @usage import { SECRETARY_CAPABILITIES, BANDS, defaultPolicy } from '/js/services/secretary-policy.js';
+ * @structure BANDS · SECRETARY_CAPABILITIES · LIGHT_AUTONOMY_CAPS · defaultPolicy() · mergePolicy() · autonomyPreset() · autonomyLevelOf()
+ * @usage import { SECRETARY_CAPABILITIES, BANDS, defaultPolicy, autonomyPreset, autonomyLevelOf } from '/js/services/secretary-policy.js';
  * @version-history
+ *   v0.3.0 — 2026-07-01 — Light-vs-heavy seam: dropped `author_content` (heavy authoring is now a Work
+ *     Brief a Builder executes, never a band). Added the two-state autonomy preset (autonomyPreset /
+ *     autonomyLevelOf + LIGHT_AUTONOMY_CAPS) so the UI can show ONE toggle (suggest-only vs handle-the-
+ *     small-stuff) that sets the underlying per-capability bands — the band machinery + parity tests are
+ *     unchanged; the toggle is sugar over the same bands map.
  *   v0.2.0 — 2026-06-24 — Phase 3d: mark Enterprise-only capabilities (third-party messaging, transacting,
  *     spending) with `enterprise: true` — gated/locked in the Community Secretary (which lacks the
  *     messages:send / work:request / wallet scopes). The explicit third-party-send gate.
@@ -31,7 +36,6 @@ export const SECRETARY_CAPABILITIES = [
   { id: 'file_intake',         defaultBand: 'act' },
   { id: 'briefing',            defaultBand: 'act' },
   { id: 'reminders',           defaultBand: 'act' },
-  { id: 'author_content',      defaultBand: 'off',   costs: true },
   { id: 'curate_knowledge',    defaultBand: 'draft' },
   { id: 'draft_replies',       defaultBand: 'draft' },
   { id: 'create_resource',     defaultBand: 'ask' },
@@ -41,6 +45,10 @@ export const SECRETARY_CAPABILITIES = [
   { id: 'spend',               defaultBand: 'ask',   costs: true, enterprise: true },
 ];
 
+/** The LIGHT capabilities the one autonomy toggle flips: in "assist" they act, in "suggest" they only
+ *  surface (ask). Everything else keeps its conservative default — heavy work is never a band, it's a Brief. */
+export const LIGHT_AUTONOMY_CAPS = ['file_intake', 'briefing', 'reminders', 'curate_knowledge'];
+
 /** The conservative default operating model seeded when the Secretary is hired. */
 export function defaultPolicy() {
   const bands = {};
@@ -48,6 +56,23 @@ export function defaultPolicy() {
   return { stopSpending: false, dailyMorselBudget: null, bands };
 }
 
+/** The two-state autonomy preset behind the single UI toggle. 'suggest' = the Secretary only surfaces
+ *  things for you (light caps → ask); 'assist' = it handles the small stuff itself (light caps → act).
+ *  Returns a full bands map (the other capabilities keep their conservative defaults). */
+export function autonomyPreset(level) {
+  const bands = {};
+  for (const c of SECRETARY_CAPABILITIES) bands[c.id] = c.defaultBand;
+  const lightBand = level === 'assist' ? 'act' : 'ask';
+  for (const id of LIGHT_AUTONOMY_CAPS) if (bands[id] !== undefined) bands[id] = lightBand;
+  return bands;
+}
+
+/** Which preset a stored bands map looks like: 'assist' iff every light cap is acting, else 'suggest'. */
+export function autonomyLevelOf(bands) {
+  const b = bands || {};
+  return LIGHT_AUTONOMY_CAPS.every((id) => b[id] === 'act') ? 'assist' : 'suggest';
+}
+
 /** Merge a stored (possibly partial / older) policy onto the current defaults so new capabilities
  *  always have a band and locked ones stay correct. */
 export function mergePolicy(stored) {

package/dist/public/spa.html

@@ -544,6 +544,9 @@
       const [morsels, setMorsels] = useState(null);
       const [menuOpen, setMenuOpen] = useState(false);
       const [secretaryAvailable, setSecretaryAvailable] = useState(false);
+      // Node feature flags from /v1/site/header-nav (e.g. { secretary }). Empty until the fetch resolves,
+      // so optional surfaces stay hidden until we positively learn they're enabled (no flash).
+      const [features, setFeatures] = useState({});
       // Header nav config: { order, hidden }. Defaults to all visible in declared order
       // until the public /v1/site/header-nav fetch resolves (no flash of empty nav).
       const [navConfig, setNavConfig] = useState({ order: PUBLIC_NAV_LINKS.map(l => l.id), hidden: [] });
@@ -574,6 +577,7 @@
             const order = Array.isArray(d.data.order) ? d.data.order : PUBLIC_NAV_LINKS.map(l => l.id);
             const hidden = Array.isArray(d.data.hidden) ? d.data.hidden : [];
             setNavConfig({ order, hidden });
+            setFeatures(d.data.features || {});
           })
           .catch(e => console.warn('Header nav fetch failed:', e.message));
         return () => { cancelled = true; };
@@ -644,7 +648,7 @@
                   class="${link.matchActive !== false && currentPath === link.path ? 'active' : ''}">${t(link.key) || link.fallback || link.key}</a>
               `)}
               ${session && html`
-                ${secretaryAvailable && html`
+                ${secretaryAvailable && features.secretary && html`
                   <a href="/v1/secretary" class="sec-nav-link ${currentPath === '/v1/secretary' ? 'active' : ''}"
                     title=${t('nav.secretary')} onClick=${(e) => { handleNav(e, '/v1/secretary'); setMenuOpen(false); }}>
                     <span class="sec-nav-icon"><svg viewBox="0 0 24 24" aria-hidden="true">

package/dist/public/views/my-company.js

@@ -22,6 +22,8 @@
  *     (revenue / orders / cost-per-task / commission income + per-agent table) from GET /v1/orgs/:slug/governance.
  *   v0.7.0 — 2026-06-24 — Secretary Phase 6 (slice 1): Company model admin subtab — prompt-driven builder
  *     (describe → generate in-app / copy-prompt → review → apply) for departments/roles/people/reporting (GET/PUT /v1/orgs/:slug/model).
+ *   v0.8.0 — 2026-07-01 — Company Secretary subtab hidden unless the node enables the Secretary feature
+ *     (AIMEAT_SECRETARY_ENABLED, read from /v1/site/header-nav `features.secretary`). Governance + model unaffected.
  */
 import { h } from 'preact';
 import { useState, useEffect, useCallback } from 'preact/hooks';
@@ -760,6 +762,7 @@ export default function MyCompanyView() {
   const [newName, setNewName] = useState('');
   const [newBusinessId, setNewBusinessId] = useState('');
   const [busy, setBusy] = useState(false);
+  const [featSecretary, setFeatSecretary] = useState(false);  // node opt-in: show the company Secretary subtab
 
   async function loadOrgs() {
     setState('loading');
@@ -771,6 +774,15 @@ export default function MyCompanyView() {
     }
   }
   useEffect(() => { loadOrgs(); }, []);
+  // Company Secretary is opt-in per node (AIMEAT_SECRETARY_ENABLED); hide its admin subtab when off.
+  useEffect(() => {
+    let cancelled = false;
+    fetch('/v1/site/header-nav')
+      .then(r => r.json())
+      .then(d => { if (!cancelled && d?.ok) setFeatSecretary(!!(d.data?.features && d.data.features.secretary)); })
+      .catch(() => {});
+    return () => { cancelled = true; };
+  }, []);
 
   async function loadOrders(org) {
     try { const r = await apiGet(`/v1/orgs/${encodeURIComponent(org.slug)}/orders`); setOrdersReceived(r.data?.orders ?? []); }
@@ -872,7 +884,7 @@ export default function MyCompanyView() {
             </div>
 
             <div class="mc-subtabs">
-              ${['catalog', ...(selected.role === 'admin' ? ['orders', 'customers', 'portfolio', 'secretary', 'governance', 'model', 'settings'] : []), 'members'].map(id => html`
+              ${['catalog', ...(selected.role === 'admin' ? ['orders', 'customers', 'portfolio', ...(featSecretary ? ['secretary'] : []), 'governance', 'model', 'settings'] : []), 'members'].map(id => html`
                 <button class="mc-subtab ${subTab === id ? 'active' : ''}" key=${id} onClick=${() => setSubTab(id)}>${t('myCompany.tab' + id.charAt(0).toUpperCase() + id.slice(1))}</button>`)}
               <span class="mc-role-chip">${t('myCompany.role' + (selected.role || 'member').charAt(0).toUpperCase() + (selected.role || 'member').slice(1))}</span>
             </div>

package/dist/public/views/profile/agents/agent-card.js

@@ -3,6 +3,8 @@
  * @description Agent card component with collapsed/expanded states,
  *   Two-Zone Header (identity + state-dependent status), and tab bar.
  * @version-history
+ *   v1.18.0 -- 2026-06-30 -- Onboarding step labels use tOr() so a missing agentOnboarding.steps.*
+ *     key falls back to the server-provided step.title instead of rendering the raw key.
  *   v1.17.0 -- 2026-06-24 -- Secretary P5 (S-A): render a "Specialist · <role>" badge for agents tagged
  *     system:specialist, so the new specialist agent type is recognizable in the Agents tab.
  *   v1.16.0 -- 2026-06-21 -- Unseen-change badges are now has-unseen DOTS (no count) — the
@@ -59,7 +61,7 @@
 import { h } from 'preact';
 import { useState, useEffect, useCallback, useRef } from 'preact/hooks';
 import htm from 'htm';
-import { t } from '/js/i18n.js';
+import { t, tOr } from '/js/i18n.js';
 import { apiGet, apiPatch } from '/js/api.js';
 import { timeAgo } from '/js/utils.js';
 import { detectAgentState, getDefaultTab, getStateColor } from './state-detector.js';
@@ -437,7 +439,7 @@ function renderCollapsedStats(state, agent, onboarding) {
       return html`${agent.last_seen ? `${t('profile.agents.detail.lastSeen')}: ${timeAgo(agent.last_seen)}` : ''} | ${t('profile.agents.detail.state.newSummary')}`;
     case 'onboarding': {
       const nextStep = onboarding?.steps?.find(s => s.status === 'pending');
-      return html`${agent.last_seen ? `${t('profile.agents.detail.lastSeen')}: ${timeAgo(agent.last_seen)}` : ''} ${nextStep ? `| ${t('profile.agents.detail.state.next')}: ${t('agentOnboarding.steps.' + nextStep.id) || nextStep.title || nextStep.id}` : ''}`;
+      return html`${agent.last_seen ? `${t('profile.agents.detail.lastSeen')}: ${timeAgo(agent.last_seen)}` : ''} ${nextStep ? `| ${t('profile.agents.detail.state.next')}: ${tOr('agentOnboarding.steps.' + nextStep.id, nextStep.title || nextStep.id)}` : ''}`;
     }
     case 'problem':
       return html`${t('profile.agents.detail.state.problemSummary')} | ${agent.last_seen ? `${t('profile.agents.detail.lastSeen')}: ${timeAgo(agent.last_seen)}` : ''}`;
@@ -483,7 +485,7 @@ function renderZone2(state, agent, onboarding, setActiveTab, showToast) {
         <div class="pf-agd-zone2 pf-agd-zone2--onboarding">
           <div class="pf-agd-zone2-title">
             ${t('profile.agents.detail.zone2.onboardingTitle')}: ${passed} / ${total}
-            ${nextStep ? html`<span class="pf-agd-zone2-desc"> ${t('profile.agents.detail.state.next')}: ${t('agentOnboarding.steps.' + nextStep.id) || nextStep.title || nextStep.id}</span>` : ''}
+            ${nextStep ? html`<span class="pf-agd-zone2-desc"> ${t('profile.agents.detail.state.next')}: ${tOr('agentOnboarding.steps.' + nextStep.id, nextStep.title || nextStep.id)}</span>` : ''}
           </div>
           <div class="pf-agd-progress-bar">
             <div class="pf-agd-progress-fill" style="width: ${pct}%"></div>
@@ -491,7 +493,7 @@ function renderZone2(state, agent, onboarding, setActiveTab, showToast) {
           <div class="pf-agd-step-pills">
             ${steps.map(s => html`
               <span key=${s.id} class="pf-agd-step-pill pf-agd-step-pill--${s.status}">
-                ${s.status === 'passed' ? '✓' : '○'} ${t('agentOnboarding.steps.' + s.id) || s.title || s.id}
+                ${s.status === 'passed' ? '✓' : '○'} ${tOr('agentOnboarding.steps.' + s.id, s.title || s.id)}
               </span>
             `)}
           </div>

package/dist/public/views/profile/agents/tab-integration.js

@@ -4,6 +4,9 @@
  *   during onboarding or production status (connection, platform, readiness,
  *   identity, delivery log) after completion.
  * @version-history
+ *   v1.8.0 -- 2026-06-30 -- Onboarding checklist step labels use tOr() so a missing
+ *     agentOnboarding.steps.* key falls back to the server-provided step.title (which carries
+ *     the howTo-enriched onboarding payload) instead of rendering the raw i18n key.
  *   v1.7.0 -- 2026-06-10 -- Webhook fields (URL, fail count, Test/Edit) hidden while delivery
  *     is polling; a "+ Set up webhook" reveal opens the URL form for switching methods.
  *   v1.6.0 -- 2026-06-02 -- Component unification (#1): the 3 copy buttons (agent prompt,
@@ -29,7 +32,7 @@ import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
 import htm from 'htm';
 import { onLiveUpdate } from '/lib/live-updates.js';
-import { t } from '/js/i18n.js';
+import { t, tOr } from '/js/i18n.js';
 import { timeAgo } from '/js/utils.js';
 import { CopyButton } from '/components/CopyButton.js';
 import { detectAgentState } from './state-detector.js';
@@ -241,7 +244,7 @@ function renderOnboardingView(onboarding, agentName, handleRerun, rerunning, cur
             <span class="pf-agd-step-icon">
               ${step.status === 'passed' ? '✓' : step.status === 'failed' ? '✗' : '○'}
             </span>
-            <span class="pf-agd-step-name">${i + 1}. ${t('agentOnboarding.steps.' + step.id) || step.title || step.id}</span>
+            <span class="pf-agd-step-name">${i + 1}. ${tOr('agentOnboarding.steps.' + step.id, step.title || step.id)}</span>
             <span class="pf-agd-step-detail">
               ${step.validatedAt ? timeAgo(step.validatedAt) : ''}
               ${step.validationDetail ? ` -- ${step.validationDetail}` : ''}