aimeat 1.35.0 → 1.37.0

package/dist/public/components/NotificationBell.js

@@ -4,11 +4,17 @@
  *   in-app notifications (GET /v1/notifications). Opening the dropdown marks them read. Refreshes on
  *   the SSE `aimeat-live-update` event and a 45s poll, so a workspace-access approval (or request)
  *   surfaces without the user having to guess. Self-contained: reads the JWT from window.AIMEAT.auth.
- * @structure NotificationBell({ t, onNavigate }) — t = i18n fn, onNavigate(path) = SPA navigate.
+ *   Exports openNotificationLink() — the ONE translation from a notification link/URL into SPA
+ *   navigation, shared by the bell dropdown and the service-worker push-click handler (spa.html).
+ * @structure
+ *   - openNotificationLink(link, onNavigate) — deep-link a bell/push notification target
+ *   - NotificationBell({ t, onNavigate }) — t = i18n fn, onNavigate(path) = SPA navigate.
  * @usage import { NotificationBell } from '/components/NotificationBell.js';  html`<${NotificationBell} t=${t} onNavigate=${navigate} />`
  * @version-history
  *   v1.0.0 — 2026-06-08 — Initial: header bell + dropdown + mark-read for the notification inbox.
  *   v1.0.1 — 2026-06-19 — JSDoc type annotations for frontend type-checking
+ *   v1.1.0 — 2026-07-02 — Extract openNotificationLink() so push-notification clicks reuse the
+ *     same deep-link translation as bell clicks (supports both '#hash' and '?tab=' forms).
  */
 import { h } from 'preact';
 import { useState, useEffect, useRef, useCallback } from 'preact/hooks';
@@ -36,6 +42,43 @@ function relTime(iso) {
   } catch { return ''; }
 }
 
+/**
+ * Deep-link a notification target into the SPA. Handles both notification link vocabularies:
+ * the bell's hash form ('/v1/profile#organisms', '/v1/profile#inbox/<conversationId>') and the
+ * push URL form ('/v1/profile?tab=messages#inbox/<id>'). Profile targets switch tabs in place:
+ * prime sessionStorage so a cold profile mount opens the tab, navigate, then dispatch
+ * aimeat-open-tab so an already-mounted profile reacts too. Anything else just navigates.
+ * @param {string} link
+ * @param {(path: string) => void} [onNavigate]
+ */
+export function openNotificationLink(link, onNavigate) {
+  if (!link) return;
+  let url;
+  try { url = new URL(link, window.location.origin); } catch { return; }
+  if (url.origin === window.location.origin && url.pathname === '/v1/profile') {
+    const hashMatch = /^#([a-z]+)(?:\/(.+))?$/i.exec(url.hash || '');
+    const rawTab = url.searchParams.get('tab') || (hashMatch ? hashMatch[1] : '');
+    if (rawTab) {
+      const tabId = rawTab.toLowerCase() === 'inbox' ? 'messages' : rawTab;
+      const rest = hashMatch ? (hashMatch[2] || '') : '';
+      try {
+        sessionStorage.setItem('aimeat-profile-tab', JSON.stringify({ tabId, slot: 'main' }));
+        if (tabId === 'messages' && rest) sessionStorage.setItem('aimeat.inbox.open', rest);
+      } catch { /* noop */ }
+      if (onNavigate) onNavigate('/v1/profile');
+      setTimeout(() => window.dispatchEvent(new CustomEvent('aimeat-open-tab', { detail: { tabId } })), 60);
+      return;
+    }
+  }
+  // App pages ('/v1/apps/<owner>/<file>') and other non-SPA documents are served by the
+  // backend (and may 301 to the isolated app origin) — a hard navigation, not SPA routing.
+  if (/^\/v1\/apps\//.test(url.pathname) || /\.html$/i.test(url.pathname)) {
+    window.location.assign(url.pathname + url.search + url.hash);
+    return;
+  }
+  if (onNavigate) onNavigate(url.pathname + url.search + url.hash);
+}
+
 export function NotificationBell({ t, onNavigate }) {
   const tr = (k, fb) => (t ? t(k) : null) || fb;
   const [items, setItems] = useState([]);
@@ -72,24 +115,7 @@ export function NotificationBell({ t, onNavigate }) {
   };
   const clickNotif = (n) => {
     setOpen(false);
-    if (!n.link) return;
-    // Profile tab deep-links carry a #hash that the SPA router ignores (it matches on pathname
-    // only). Translate them into the profile's tab-open mechanism: prime sessionStorage so a cold
-    // mount opens the tab, navigate to the profile, then dispatch aimeat-open-tab so an
-    // already-mounted profile reacts too. `#inbox[/<conversationId|requests>]` opens that thread.
-    const m = /\/v1\/profile#([a-z]+)(?:\/(.+))?$/i.exec(n.link);
-    if (m) {
-      const tabId = m[1] === 'inbox' ? 'messages' : m[1];
-      const rest = m[2] || '';
-      try {
-        sessionStorage.setItem('aimeat-profile-tab', JSON.stringify({ tabId, slot: 'main' }));
-        if (tabId === 'messages' && rest) sessionStorage.setItem('aimeat.inbox.open', rest);
-      } catch { /* noop */ }
-      if (onNavigate) onNavigate('/v1/profile');
-      setTimeout(() => window.dispatchEvent(new CustomEvent('aimeat-open-tab', { detail: { tabId } })), 60);
-      return;
-    }
-    if (onNavigate) onNavigate(n.link);
+    openNotificationLink(n.link, onNavigate);
   };
 
   return html`

package/dist/public/css/components/markdown.css

@@ -8,6 +8,8 @@
  *   all colors/spacing via theme.css variables.
  * @version-history
  *   v1.0.0 — 2026-06-19 — Initial: extracted the per-view duplicates into one global component sheet.
+ *   v1.1.0 — 2026-07-02 — Styles for the live memory embed (aimeat-memory fence → MemoryEmbed): .md-mem
+ *     container/header/refresh/table/notes.
  */
 
 .md-body {
@@ -65,3 +67,16 @@
 .md-body .md-img { max-width: 100%; height: auto; border-radius: 6px; margin: 0.6em 0; }
 .md-body hr,
 .md-body .md-hr { border: none; border-top: 1px solid var(--border); margin: 1.6em 0; }
+
+/* ── Live memory embed (```aimeat-memory fence → components/MemoryEmbed.js) ── */
+.md-body .md-mem { border: 1px solid var(--border); border-radius: 8px; padding: 0.5em 0.8em 0.7em; margin: 1em 0; background: var(--bg-dim); }
+.md-body .md-mem-head { display: flex; align-items: center; gap: 0.6em; font-size: 0.78rem; color: var(--muted); margin-bottom: 0.35em; }
+.md-body .md-mem-title { font-family: var(--font-mono, ui-monospace, Menlo, Consolas, monospace); overflow-wrap: anywhere; flex: 1; }
+.md-body .md-mem-upd { white-space: nowrap; }
+.md-body .md-mem-refresh { border: none; background: transparent; color: var(--muted); cursor: pointer; border-radius: 4px; padding: 0 0.3em; font-size: 0.9rem; line-height: 1.4; }
+.md-body .md-mem-refresh:hover { color: var(--text); background: var(--surface, var(--card)); }
+.md-body .md-mem table { margin: 0.3em 0 0; background: transparent; }
+.md-body .md-mem-note { color: var(--muted); font-size: 0.88rem; padding: 0.2em 0; }
+.md-body .md-mem-err { color: var(--warning, var(--muted)); }
+.md-body .md-mem-more { color: var(--muted); font-size: 0.78rem; margin-top: 0.3em; }
+.md-body .md-mem-value { font-size: 0.95rem; white-space: pre-wrap; overflow-wrap: anywhere; }

package/dist/public/css/views/agents-detail.css

@@ -4,6 +4,8 @@
  *   Uses agd- prefix to avoid collisions with other profile styles.
  *   All colors use CSS variables from theme.css.
  * @version-history
+ *   v1.14.0 -- 2026-07-03 -- Add Contracts sub-tab styles (.pf-agd-contracts, .agc-caps, .agc-list,
+ *     .agc-row, .agc-where, .agc-org, .agc-since) — agent-side contract-engagement visibility.
  *   v1.13.0 -- 2026-06-24 -- Secretary P5 (S-A): add .pf-agd-badge--specialist (specialist agent type badge).
  *   v1.12.0 -- 2026-06-22 -- Add .pf-agd-capwrap rule so the capabilities summary
  *     ("N tools · N skills · N langs") gets the card content inset (1rem) instead of
@@ -3646,3 +3648,18 @@
 .pf .pf-agd-json-bool { color: var(--accent, #E8564A); font-family: var(--font-mono, monospace); }
 .pf .pf-agd-json-null,
 .pf .pf-agd-json-empty { color: var(--text-muted, #9CA3AF); font-style: italic; }
+
+/* ── Contracts sub-tab — agent-side contract-engagement visibility (active / retired). ── */
+.pf .pf-agd-contracts { padding: 0.25rem 0; }
+.pf .pf-agd-contracts .agc-mt { margin-top: 1rem; }
+.pf .pf-agd-contracts .agc-caps { display: flex; flex-wrap: wrap; gap: 0.35rem; margin: 0.4rem 0 0.2rem; }
+.pf .pf-agd-contracts .agc-list { display: flex; flex-direction: column; gap: 0.35rem; margin-top: 0.4rem; }
+.pf .pf-agd-contracts .agc-row {
+  display: flex; align-items: center; justify-content: space-between; gap: 0.5rem;
+  padding: 0.45rem 0.7rem; border: 1px solid var(--border); border-radius: var(--radius-xs, 6px);
+  background: var(--card);
+}
+.pf .pf-agd-contracts .agc-row--retired { opacity: 0.72; }
+.pf .pf-agd-contracts .agc-where { display: inline-flex; align-items: center; flex-wrap: wrap; gap: 0.4rem; font-size: 0.85rem; }
+.pf .pf-agd-contracts .agc-org { color: var(--text-dim); font-size: 0.78rem; }
+.pf .pf-agd-contracts .agc-since { color: var(--text-muted); font-size: 0.75rem; }

package/dist/public/css/views/portfolio.css

@@ -1,3 +1,14 @@
+/**
+ * @file portfolio.css
+ * @description Styles for the Portfolio view — builder wizard (.portfolio-container
+ *   column) and full-bleed public viewer (.portfolio-viewer-full).
+ * @usage Loaded by spa.html; classes consumed by public/views/portfolio.js.
+ * @version-history
+ *   v1.1.0 — 2026-07-03 — Full-bleed public viewer: .portfolio-viewer-full column fills
+ *     the viewport below the nav, slim toolbar, iframe flexes to remaining height.
+ *   v1.0.0 — 2026-03-06 — Initial portfolio builder + viewer styles.
+ */
+
 /* ── Portfolio View ────────────────────────────────────── */
 
 .portfolio-container {
@@ -248,6 +259,37 @@
   min-height: 60vh;
 }
 
+/* Full-bleed published-portfolio view: a flex column that fills the viewport
+   below the sticky nav; the iframe takes all remaining height and the
+   portfolio scrolls inside it. */
+.portfolio-viewer-full {
+  display: flex;
+  flex-direction: column;
+  height: calc(100vh - var(--nav-height, 64px));
+  height: calc(100dvh - var(--nav-height, 64px));
+}
+
+.portfolio-viewer-bar {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  flex-wrap: wrap;
+  padding: 0.45rem 1rem;
+}
+
+.portfolio-viewer-owner {
+  color: var(--text-dim, #6B7280);
+  font-size: 0.9rem;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.portfolio-viewer-fs {
+  margin-left: auto;
+}
+
 .portfolio-viewer-frame {
   width: 100%;
   border: none;
@@ -256,6 +298,14 @@
   background: #fff;
 }
 
+/* Keep after the base .portfolio-viewer-frame rule — same specificity,
+   the override must win in the cascade. */
+.portfolio-viewer-frame-full {
+  flex: 1;
+  min-height: 0;
+  border-radius: 0;
+}
+
 .portfolio-not-found {
   text-align: center;
   padding: 4rem 2rem;
@@ -337,4 +387,5 @@
 .portfolio-publish-target { font-size: .85rem; color: var(--text-dim); margin-bottom: .75rem; }
 .portfolio-publish-url { font-family: monospace; word-break: break-all; }
 .portfolio-paste-actions { display: flex; gap: .6rem; margin-top: .5rem; flex-wrap: wrap; }
+.portfolio-badge-toggle { margin: -0.25rem 0 0.75rem; }
 .portfolio-preview-frame { margin-top: .75rem; min-height: 420px; width: 100%; border: 1px solid var(--border); border-radius: 8px; background: #fff; }

package/dist/public/css/views/profile.css

@@ -4,6 +4,10 @@
  *   wallet, memory, agents, extensions, packages, knowledge, generator, and
  *   edit panels. Consumes theme.css tokens so it flips with dark/light mode.
  * @version-history
+ *   v2.10.0 — 2026-07-03 — Contract-engagement chips: .pj-eng + .pj-retire-btn for the People panel.
+ *   v2.9.0 — 2026-07-02 — Workspace Apps strip: .pj-apps-strip/-head/-title/-hint/-grid, launch
+ *     cards .pj-app-card/-name/-desc/-meta/-missing, and the pin/unpin picker .pj-apps-picker(-row/
+ *     -name/-owner) + .pj-apps-empty.
  *   v2.8.0 — 2026-06-24 — Secretary P5 (S-C): .ext-instance-cfg-field/-label/-secret/-desc for the
  *     extension instance-create config form (masked secret fields).
  *   v2.7.0 — 2026-06-22 — Home "Usage & quotas" card: .pf-usage-card/.pf-usage-row/.pf-usage-bar/
@@ -1799,6 +1803,11 @@
   border: 1px solid var(--border-soft, #f0f0ec);
 }
 .pf-edit-hint { font-size: .75rem; color: var(--text-dim, #9CA3AF); }
+/* Directory opt-in checkbox row (member "phone book"). */
+.pf-edit-check { display: flex; align-items: flex-start; gap: .6rem; cursor: pointer; }
+.pf-edit-check input { margin-top: .2rem; flex-shrink: 0; }
+.pf-edit-check > span { display: flex; flex-direction: column; gap: .15rem; }
+.pf-edit-check-title { font-size: .9rem; }
 .pf-edit-error { font-size: .81rem; color: var(--danger, #ef4444); padding: 8px 12px; background: var(--danger-soft, #FEF2F2); border-radius: 8px; }
 .pf-edit-footer {
   display: flex; justify-content: flex-end; gap: 10px;
@@ -2173,6 +2182,10 @@
 .pj-contract-agents { border: 1px solid var(--border); border-radius: 10px; padding: 0.5rem 0.75rem; margin-bottom: 0.6rem; background: var(--card); }
 /* The per-contract one-click adopt action inside a contract-agent chip. */
 .pj-adopt-btn { margin-left: 0.4rem; padding: 0.1rem 0.5rem; font-size: 0.78rem; }
+/* A per-contract engagement group (state badge + its adopt/retire action). */
+.pj-eng { display: inline-flex; align-items: center; gap: 0.2rem; }
+/* Retire an active contract engagement — quiet, so it reads as secondary to the green "active" badge. */
+.pj-retire-btn { margin-left: 0.25rem; padding: 0.1rem 0.5rem; font-size: 0.78rem; color: var(--text-dim); }
 .pj-draft-form { margin: 0.4rem 0; }
 .pj-drafts { display: flex; flex-direction: column; gap: 0.3rem; margin-bottom: 0.3rem; }
 .pj-item { display: flex; align-items: center; gap: 0.5rem; padding: 0.35rem 0; }
@@ -3099,3 +3112,21 @@
 .dsc-item-meta { margin-top: .5rem; display: flex; flex-wrap: wrap; align-items: center; gap: .35rem; }
 .dsc-tag { font-size: .72rem; color: var(--muted); background: var(--bg-dim); border-radius: var(--radius-full); padding: .08rem .45rem; }
 .dsc-owner { margin-left: auto; font-size: .72rem; color: var(--muted); font-family: var(--mono); }
+
+/* ── Workspace Apps strip (pinned apps on the workspace Overview) ── */
+.pj-apps-strip { background: var(--card); border: 1px solid var(--border); border-radius: var(--radius); padding: .75rem .9rem; margin-bottom: 1rem; }
+.pj-apps-head { display: flex; flex-wrap: wrap; align-items: center; gap: .6rem; margin-bottom: .5rem; }
+.pj-apps-title { font-weight: 600; font-size: .95rem; }
+.pj-apps-hint { flex: 1; font-size: .78rem; color: var(--muted); }
+.pj-apps-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(180px, 1fr)); gap: .6rem; }
+.pj-app-card { background: var(--bg-dim); border: 1px solid var(--border); border-radius: var(--radius); padding: .6rem .75rem; cursor: pointer; transition: border-color .12s; }
+.pj-app-card:hover, .pj-app-card:focus-visible { border-color: var(--accent-border); box-shadow: var(--shadow-sm); }
+.pj-app-name { font-weight: 600; font-size: .9rem; }
+.pj-app-desc { margin-top: .25rem; font-size: .78rem; color: var(--text-dim); overflow: hidden; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; }
+.pj-app-meta { margin-top: .35rem; font-size: .72rem; color: var(--muted); }
+.pj-app-missing { color: var(--warning, var(--muted)); }
+.pj-apps-empty { font-size: .82rem; color: var(--muted); padding: .25rem 0; }
+.pj-apps-picker { margin-top: .75rem; border-top: 1px solid var(--border); padding-top: .6rem; display: flex; flex-direction: column; gap: .45rem; }
+.pj-apps-picker-row { display: flex; align-items: center; gap: .6rem; padding: .35rem .5rem; background: var(--bg-dim); border: 1px solid var(--border); border-radius: var(--radius); }
+.pj-apps-picker-name { font-size: .87rem; }
+.pj-apps-picker-owner { flex: 1; font-size: .74rem; color: var(--muted); font-family: var(--mono); }

package/dist/public/js/services/agents.js

@@ -53,6 +53,15 @@ export async function adoptContractTask(agentName, { organismId, ws, contract })
   });
 }
 
+/** The agent's contract engagements across every organism/workspace (active + retired), enriched
+ *  with organism + workspace display names. Powers the agent-detail Contracts tab. Returns array. */
+export async function getAgentEngagements(agentName) {
+  try {
+    const data = await apiGet(`/v1/agents/${encodeURIComponent(agentName)}/engagements`);
+    return Array.isArray(data?.data?.engagements) ? data.data.engagements : [];
+  } catch { return []; }
+}
+
 /** List chat session agents (name starts with 'session-'). */
 export async function listChatSessions(owner) {
   const agents = await listAgents(owner);

package/dist/public/js/services/organisms.js

@@ -6,6 +6,9 @@
  *   resolve gate approvals.
  * @usage import * as orgService from '/js/services/organisms.js';
  * @version-history
+ *   v1.6.0 — 2026-07-02 — Workspace generator prompt + agent connect prompt teach rich document
+ *     markdown: mermaid diagrams and aimeat-memory LIVE data blocks (embed a memory key; fresh on
+ *     every open) so AI-authored documentspaces/documents use live embeds instead of static tables.
  *   v1.5.0 — 2026-06-24 — uploadFile(orgId, file): generic blob upload (any document/image) to an
  *     organism's private storage, returning {key,url,mime} — used by the Secretary doc/image intake.
  *   v1.4.0 — 2026-06-23 — Optional color tags: getAllColors()/saveColors() read/write the per-item
@@ -276,7 +279,7 @@ const GENERATOR_PROMPT = `You are the AIMEAT Workspace Architect. Design a works
 
 A workspace is a set of object types. Each type is one of two modes:
 - "records" — structured items with consistent fields, validated by a schema. Use this for trackable things: milestones, tasks, risks, contacts, decisions.
-- "document" — free-form markdown that grows organically, with no schema. Use this whenever the user asks for documents, a wiki, notes, guides, design docs, or an open / free-form format.
+- "document" — free-form markdown that grows organically, with no schema. Use this whenever the user asks for documents, a wiki, notes, guides, design docs, or an open / free-form format. Documents render rich markdown: \`\`\`mermaid fenced blocks become diagrams, and \`\`\`aimeat-memory fenced blocks become LIVE data (the block names a memory key; the document shows that key's current value — array of objects renders as a table — fresh on every open, so agent-maintained data belongs in a memory key + embed, not in pasted static tables). Mention these in a document space's "description" when the space is meant for dashboards or agent-fed reports.
 
 Respond with this shape:
 {
@@ -620,6 +623,12 @@ export async function saveWorkspaceReadme(orgId, wsId, readme) {
   return apiPut(`/v1/organisms/${encodeURIComponent(orgId)}/workspace?ws=${encodeURIComponent(wsId)}`, { ws: wsId, readme });
 }
 
+/** Replace the workspace's pinned-apps list (FULL replace; [] clears). Each entry references a
+ *  published app ({ owner, filename, label? }). Creator/admin only (enforced server-side). */
+export async function saveWorkspaceApps(orgId, wsId, apps) {
+  return apiPut(`/v1/organisms/${encodeURIComponent(orgId)}/workspace?ws=${encodeURIComponent(wsId)}`, { ws: wsId, apps });
+}
+
 /** Overwrite a workspace's manifest (e.g. edited name/summary/policy from Settings). */
 export async function saveManifest(orgId, wsId, manifest) {
   return apiPost('/v1/memory', { key: `${wsRoot(orgId, wsId)}.meta.manifest`, value: manifest, visibility: 'private' });
@@ -709,6 +718,29 @@ export async function revokeWorkspaceRole(orgId, ws, grantee) {
   return apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access/revoke`, { ws, grantee });
 }
 
+/* ── Contract engagements — the first-class (agent × contract × workspace) binding with an
+ * active/retired lifecycle. Adopt writes `active`; Retire flips to `retired` (kept as history).
+ * Distinct from the derived "active here" trace: the engagement is the deactivatable INTENT. ── */
+
+/** List the contract engagements declared in a workspace (active + retired). Returns array. */
+export async function getWorkspaceEngagements(orgId, ws) {
+  try {
+    const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/engagements?ws=${encodeURIComponent(ws)}`);
+    return Array.isArray(resp?.data?.engagements) ? resp.data.engagements : [];
+  } catch { return []; }
+}
+
+/** Activate (adopt) a contract engagement for one of your agents. `agent` = full GAII. */
+export async function activateEngagement(orgId, ws, agent, contract) {
+  return apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/engagements`, { ws, agent, contract });
+}
+
+/** Retire a contract engagement — the agent's loop then skips this workspace (real off-switch).
+ *  Allowed for the agent's owner or the workspace creator. `agent` = full GAII. */
+export async function retireEngagement(orgId, ws, agent, contract) {
+  return apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/engagements/retire`, { ws, agent, contract });
+}
+
 /* ── Public document-space sharing (meta.share) ──
  * Independent of the access roles above: this controls what PUBLISHED document-space pages are
  * readable by ANYONE with the public viewer link (no login). Creator/admin manages it. ── */
@@ -902,6 +934,10 @@ export async function buildAccessPrompt(orgId, orgName, wsId, ws, variant = 'hum
     `- Write/refresh a draft: aimeat_memory_write key="organism.${orgId}.w.${wsId}.{namespace}.{id}.draft" value={...}`,
     `- Attach a file/screenshot: aimeat_storage_upload key="organism.${orgId}.w.${wsId}.img.{name}"`,
     `    then embed it in a document's markdown as  ![alt](/v1/storage/<returned key>)`,
+    `- Live data in documents: a \`\`\`aimeat-memory fenced block (body: key: <memory key>, optional view: table|props|list,`,
+    `    fields: a,b and title: ...) renders that key's CURRENT value on every open — write changing data with`,
+    `    aimeat_memory_write as an array of objects (consistent field names) and embed the key instead of a static table;`,
+    `    re-writing the SAME key updates every document that embeds it. \`\`\`mermaid blocks render as diagrams.`,
     `- Publish a draft:     POST ${nodeUrl}/v1/organisms/${orgId}/publish   body { "ws":"${wsId}", "namespace":"...", "id":"..." }`,
     `    (snapshots .version.N + .latest, consumes the draft; may require operator approval if the publish gate is on)`,
   ].join('\n');