aimeat 1.40.1 → 2.0.0

package/dist/static/app-catalog/js/cortex.js

@@ -372,6 +372,8 @@ function openPromptBuilder(app) {
 
   // Load authoring templates (booster-kit) into the "Start from a template" picker
   loadPbTemplates();
+  // Load capability packs (charts/flows/games/3D…) into the pack picker
+  loadPbPacks();
   // Load the canonical platform-instructions core from the node (single source of truth)
   loadPbCore();
 
@@ -441,6 +443,105 @@ function loadPbTemplates() {
     .catch(function () { /* templates are optional */ });
 }
 
+// Capability packs (library-pack registry): vendored/bundled engines + wrapper cortexes
+// (charts, editable flows, games, 3D, creative canvas…). The picker inlines each SELECTED
+// pack's ai_doc into the composed prompt — chat AIs can't fetch, so the doc must travel
+// with the prompt. Idea text pre-selects packs via their interviewTriggers.
+var pbPacks = [];              // capability-pack index entries
+var pbPackDocs = {};           // id -> { include: [...], ai_doc: '...' } (lazy, cached)
+var pbPackTouched = {};        // id -> true once the user manually (un)checks it
+var PB_PACK_CATEGORIES = ['visualization', 'diagrams', 'canvas', 'game', '3d', 'realtime'];
+
+function pbSelectedPackIds() {
+  return Array.prototype.slice.call(document.querySelectorAll('.pb-pack-cb:checked'))
+    .map(function (cb) { return cb.value; });
+}
+
+function loadPbPacks() {
+  var wrap = document.getElementById('pb-packs');
+  if (!wrap) return;
+  var config = loadConfig();
+  if (!config.aimeatUrl) return;
+  var base = config.aimeatUrl.replace(/\/+$/, '');
+  fetch(base + '/v1/library-packs?lang=' + encodeURIComponent(getLang()))
+    .then(function (r) { return r.json(); })
+    .then(function (d) {
+      var all = (d.data && d.data.packs) || [];
+      pbPacks = all.filter(function (p) {
+        if (p.status === 'deprecated') return false;
+        if (p.kind === 'vendored' || p.kind === 'bundle') return PB_PACK_CATEGORIES.indexOf(p.category) !== -1;
+        if (p.kind === 'cortex') return PB_PACK_CATEGORIES.indexOf(p.category) !== -1 && p.id !== 'aimeat-charts';
+        return false;
+      });
+      wrap.innerHTML = '';
+      pbPacks.forEach(function (p) {
+        var label = document.createElement('label');
+        label.className = 'pb-pack-item';
+        label.title = p.description || '';
+        var cb = document.createElement('input');
+        cb.type = 'checkbox'; cb.className = 'pb-pack-cb'; cb.value = p.id;
+        cb.onchange = function () {
+          pbPackTouched[p.id] = true;
+          if (cb.checked) loadPbPackDoc(base, p.id); else updatePbPreview();
+        };
+        var span = document.createElement('span');
+        span.textContent = p.title;
+        label.appendChild(cb); label.appendChild(span);
+        // AEB reliability tier + per-model proof ledger, so a human picking a pack sees
+        // which model strength it is proven on (not just left in the API).
+        if (p.modelTier) {
+          var badge = document.createElement('span');
+          badge.className = 'pb-pack-tier pb-tier-' + p.modelTier;
+          badge.textContent = p.modelTier;
+          var proven = (p.proofs || []).map(function (pr) { return pr.model + '→' + pr.verdict; }).join(', ');
+          badge.title = 'AEB reliability tier: ' + p.modelTier
+            + (proven ? ' · proven on ' + proven : ' · not yet AEB-run')
+            + (p.apiCaveat ? ' · ⚠ ' + p.apiCaveat : '');
+          label.appendChild(badge);
+        }
+        wrap.appendChild(label);
+      });
+      // Pre-select from the idea text as the user types (never override a manual choice).
+      var desc = document.getElementById('pb-description');
+      if (desc && !desc._pbPackListener) {
+        desc._pbPackListener = true;
+        desc.addEventListener('input', function () { pbMatchPacksToIdea(base); });
+      }
+      pbMatchPacksToIdea(base);
+    })
+    .catch(function () { /* older node without the endpoint — picker stays empty */ });
+}
+
+function pbMatchPacksToIdea(base) {
+  var desc = document.getElementById('pb-description');
+  var text = ((desc && desc.value) || '').toLowerCase();
+  pbPacks.forEach(function (p) {
+    if (pbPackTouched[p.id]) return;
+    var cb = document.querySelector('.pb-pack-cb[value="' + p.id + '"]');
+    if (!cb) return;
+    // Word-start matching: a trigger must begin at a word boundary ('flow' matches
+    // "flowchart", but 'art' would not match "chart"). Suffixes are allowed on purpose
+    // (Finnish inflections: 'kaavio' matches "kaaviot").
+    var hit = (p.interviewTriggers || []).some(function (t) {
+      var esc = String(t).toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+      return new RegExp('(^|[^a-zà-öø-ÿ])' + esc).test(text);
+    });
+    if (hit && !cb.checked) { cb.checked = true; loadPbPackDoc(base, p.id); }
+    else if (!hit && cb.checked) { cb.checked = false; updatePbPreview(); }
+  });
+}
+
+function loadPbPackDoc(base, id) {
+  if (pbPackDocs[id]) { updatePbPreview(); return; }
+  fetch(base + '/v1/library-packs/' + encodeURIComponent(id))
+    .then(function (r) { return r.json(); })
+    .then(function (d) {
+      var pack = d.data && d.data.pack;
+      if (pack) { pbPackDocs[id] = pack; updatePbPreview(); }
+    })
+    .catch(function () { /* pack doc optional — the core prompt still indexes packs */ });
+}
+
 function buildPromptFromBuilder() {
   var config = loadConfig();
   var nodeUrl = config.aimeatUrl ? config.aimeatUrl.replace(/\/+$/, '') : 'https://your-aimeat-node.example';
@@ -471,6 +572,7 @@ function buildPromptFromBuilder() {
     prompt += '3. How should it look and feel? (e.g. dark neon · cozy · sleek minimal · fun colorful) — it must support BOTH light and dark.\n';
     prompt += '4. Data: SHARED (a community space others can see and add to) or PRIVATE (only mine)?\n';
     prompt += '5. Should it use AI features (summaries, suggestions, generation)? If yes I can enable them via aimeat-ai.\n';
+    prompt += '6. Does it need any special capabilities? (charts/graphs · editable flow or mindmap diagrams · static text-defined diagrams · a game or heavy 2D animation · generative art / creative canvas · 3D · live multi-user/realtime) — each maps to a capability pack in Step 2; include only what I pick.\n';
     prompt += 'Skip any question I already answered in my idea above. Use my answers to customise everything in Step 2.\n\n';
   }
 
@@ -631,6 +733,18 @@ function buildPromptFromBuilder() {
     prompt += '\n## Starting template (copy from this)\nUse this skeleton as your base — keep its boot, login pill, and self-hosted theme wiring intact; fill the {{...}} slots; build your views inside <main>. Return the COMPLETE single HTML file based on it.\n```html\n' + window.pbTemplate.content + '\n```\n';
   }
 
+  // Capability packs: inline each SELECTED pack's usage doc — a chat AI can't fetch the
+  // pack endpoint, so the doc travels with the prompt (agentic coders get the same text).
+  var selectedPacks = pbSelectedPackIds().map(function (id) { return pbPackDocs[id]; }).filter(Boolean);
+  if (selectedPacks.length > 0) {
+    prompt += '\n## Selected capability packs (self-hosted on my node — use these, never a CDN)\n';
+    selectedPacks.forEach(function (pack) {
+      prompt += '\n### Pack: ' + pack.id + ' — ' + (pack.title || '') + '\n';
+      prompt += 'Include (in order):\n' + (pack.include || []).map(function (l) { return l; }).join('\n') + '\n';
+      if (pack.ai_doc) prompt += 'Usage:\n' + pack.ai_doc + '\n';
+    });
+  }
+
   return prompt;
 }
 

package/dist/static/app-catalog/js/detail.js

@@ -8,6 +8,8 @@
  *   injected once via initDetail(deps) — so there is no import cycle back through the entry module.
  * @usage import { initDetail, openDetailView, mountLoginPill, ... } from './detail.js'; initDetail({...})
  * @version-history
+ *   v1.3.0 — 2026-07-16 — Add openStagingPreview(owner, filename): mint a preview token for an
+ *     EXISTING staging draft and open it top-level, driving a library card's "Open staging" button.
  *   v1.2.0 — 2026-07-14 — Monetize section (TARGET-034 phase B): own published apps get the
  *     apps.{appId}.tools tool editor (monetize.js) between Skills and Manage-on-server.
  *   v1.1.0 — 2026-07-11 — Own-published apps: "Edit Access Code" in serverMgmtInner + "Attach skill"
@@ -21,6 +23,7 @@ import { dtlBtn, showConfirm, showNotice } from './ui.js';
 import { loadConfig } from './config.js';
 import { t } from './i18n.js';
 import { monetizeSectionInner, monetizeOnOpen } from './monetize.js';
+import { appManifestAgents } from './app-agents.js';
 
 // Injected once at bootstrap by main.js. Functions are main-local; the get* return main's LIVE
 // state (so reads + in-place mutations propagate across the reassignments main does each render).
@@ -476,8 +479,30 @@ function renderDetailView() {
     ? '<div class="dtl-section" id="detail-monetize">' + monetizeSectionInner() + '</div>'
     : '';
 
+  // ── BUNDLED AGENTS (Agent-Bundled Apps) — crew-defs this app ships. The section lists the
+  // agent names and opens the shared Bundled-agents modal (inspector + hosted instances with
+  // prices + deploy-your-own). Manifest read from the server-manifest cache.
+  var agentsHtml = '';
+  if (app.published) {
+    var agOwner = detailServerOwner(app);
+    var agFile = app.publishedFilename || '';
+    var agDefs = appManifestAgents(agOwner, agFile);
+    if (agDefs.length) {
+      agentsHtml =
+        '<div class="dtl-section">' +
+          '<h3>\u{1F916} ' + (t('agents.title') || 'Bundled agents') + '</h3>' +
+          '<div style="font-size:.85rem;color:var(--text-muted);margin-bottom:6px">' + (t('agents.declares') || '') + '</div>' +
+          '<div style="margin-bottom:8px">' + agDefs.map(function(d) {
+            return '<span class="aga-chip">' + escapeHtml(d.agent_name || '') + '</span>';
+          }).join(' ') + '</div>' +
+          dtlBtn('\u{1F916} ' + (t('agents.manage') || 'Inspect & deploy'),
+            'window._launcher.showAppAgentsModal(\'' + jsArg(agOwner) + '\', \'' + jsArg(agFile) + '\')') +
+        '</div>';
+    }
+  }
+
   document.getElementById('detail-body').innerHTML =
-    statusHtml + aboutHtml + aiHtml + versionsHtml + skillsHtml + monetizeHtml + mgmtHtml + actionsHtml;
+    statusHtml + aboutHtml + aiHtml + versionsHtml + skillsHtml + agentsHtml + monetizeHtml + mgmtHtml + actionsHtml;
 }
 
 // Bound skills (skills registry): skills whose frontmatter metadata.binding names this app.
@@ -1178,6 +1203,18 @@ function stageDraftAndPreview(app, contentB64, statusEl) {
     });
 }
 
+// Open the EXISTING staging draft of a published app (no re-save). Mints a short-lived,
+// owner-only preview token and opens the draft top-level on the real app origin, so the
+// owner can try the unpublished staging version instead of the live one. Called straight
+// from a library card's "Open staging" button when the listing reported has_draft.
+function openStagingPreview(owner, filename) {
+  if (!getCortexOwnerToken()) { showNotice(t('detail.draftNeedsSignin')); return; }
+  if (!owner || !filename) { showNotice(t('detail.draftNeedsPublished')); return; }
+  draftApi('POST', owner, filename, 'draft/preview-token')
+    .then(function (data) { window.open(data.preview_url, '_blank', 'noopener'); })
+    .catch(function (err) { showNotice(err.message || 'Draft preview failed'); });
+}
+
 // PUT the CURRENT working bytes THEN publish-draft — always promotes exactly these bytes,
 // so there is no stale-slot window (you never publish an older staged version by accident).
 // Confirms first. onDone(data) runs on success.
@@ -1625,6 +1662,7 @@ export {
   detailAiDiscard,
   detailTestDraftLive,
   detailPublishTestedDraft,
+  openStagingPreview,
   sourceTestDraftLive,
   sourcePublishTested,
   detailEditSource,

package/dist/static/app-catalog/js/i18n-data.js

@@ -30,7 +30,7 @@ export const I18N = {
       'help.whereTitle': 'Where your apps live',
       'help.where': 'Local apps live only in this browser (IndexedDB) — they don\'t follow you to another browser or device. Publish an app to put it on the server, then you can manage it from anywhere. Each app shows as ONE card with a badge saying where it lives.',
       'help.sectionsTitle': 'The two views',
-      'help.sections': 'Two tabs. Library = your apps (local + on the server), each as one card with a status badge — Local (this browser), Listed (public on the server), Unlisted (on the server but hidden from the catalogue, still usable by you and anyone with the link), or Server only (no local copy). Community = apps other people have published.',
+      'help.sections': 'Two tabs. Library = your apps, each as one card whose badge shows its publication state — Listed (published, public in the catalogue), Unlisted (on the server but hidden from the catalogue, still usable by you and anyone with the link), or Local (a draft in this browser, not on the server yet). A purple Staging pill marks an app that also has an unpublished draft waiting. Community = apps other people have published.',
       'help.backupTitle': '"Backup" means two different things',
       'help.backup': 'The 💾 menu (top bar) exports/imports your SERVER apps + extensions as a .zip. Settings → Export/Import JSON backs up this browser\'s LOCAL catalog. They are separate.',
       'help.standaloneTitle': 'Which node this talks to',
@@ -67,7 +67,7 @@ export const I18N = {
       'sec.parkedBlurb': 'Only you can see and use these — they stay usable but are hidden from the public catalogue. Press Publish to move one back to Published Apps.',
       'sec.recent': '🕒 Recently Opened',
       'sec.local': '📚 Your apps',
-      'sec.localNote': 'One card per app. The badge shows where it lives — Local (this browser), Published (on the server), Parked (hidden from the public catalogue), or Server only (no local copy).',
+      'sec.localNote': 'One card per app. The badge shows its publication state — Listed (published, public in the catalogue), Unlisted (on the server but hidden from the public catalogue), or Local (a draft in this browser, not on the server yet). A purple Staging pill marks an app that also has an unpublished draft.',
       'sec.localHint': '💡 Publish a local app to put it on the server — then you can manage it from anywhere.',
       'stats.apps': 'apps',
       'stats.stored': 'stored',
@@ -149,6 +149,8 @@ export const I18N = {
       'pb.step3': 'Add & publish your app',
       'pb.step3hint': 'Got the code or HTML file from the AI? Paste it (or upload the file) here — it goes live on your node and you get a shareable link.',
       'pb.template': 'Start from a template (optional)',
+      'pb.packs': 'Capability packs (optional)',
+      'pb.packsHint': 'Charts, editable flow diagrams, games, 3D… — self-hosted libraries with AI instructions baked into the prompt. Your idea text pre-selects matching packs.',
       'pb.noneTemplate': '(none — build from scratch)',
       'pb.promptPreview': 'Prompt preview',
       'pb.addBtn': '➕ Add your app — paste it or upload the file',
@@ -163,6 +165,12 @@ export const I18N = {
       'card.view': 'Open',
       'card.open': 'Open',
       'card.openHint': 'Open this app',
+      'card.openReleased': 'Open released',
+      'card.openReleasedHint': 'Open the published (live) version',
+      'card.openStaging': 'Open staging',
+      'card.openStagingHint': 'Open the unpublished staging draft to test it — the live app is untouched',
+      'card.stagingBadge': 'Staging',
+      'card.stagingHint': 'This app has an unpublished staging draft waiting alongside the live version',
       'common.menu': 'Menu',
       'status.local': 'Local',
       'status.published': 'Listed',
@@ -185,6 +193,37 @@ export const I18N = {
       'fork.failed': 'Fork failed',
       'detail.forkedFrom': '⑂ Forked from',
       'card.forksHint': 'View the fork lineage (who forked this, and where it came from)',
+      'card.agent': '🤖 Agent',
+      'card.agentHint': 'This app ships its own agent - inspect it, use a hosted instance, or deploy your own',
+      'agents.title': 'Bundled agents',
+      'agents.manage': 'Inspect & deploy',
+      'agents.none': 'This app declares no bundled agents.',
+      'agents.declares': 'This app ships its own agent as a declarative crew definition. Use an instance someone already hosts (their prices below), or deploy your own copy onto your own fleet.',
+      'agents.crew': 'Crew',
+      'agents.tasks': 'Tasks',
+      'agents.hostedTitle': 'Hosted instances',
+      'agents.hostedNone': 'Nobody hosts this agent yet - deploy your own below and be the first.',
+      'agents.hostedError': 'Could not load hosted instances.',
+      'agents.loading': 'Loading…',
+      'agents.you': 'you',
+      'agents.author': 'author',
+      'agents.trust': 'trust',
+      'agents.noOffers': 'No public offers - contact the host to ask.',
+      'agents.askPrice': 'ask for price',
+      'agents.instant': 'instant',
+      'agents.undeploy': 'Undeploy',
+      'agents.deployTitle': 'Deploy your own',
+      'agents.deployDesc': 'Creates a deploy task on YOUR own runner agent (crew-forge). The fleet reads the crew definition from the app manifest and starts the agent under your account - it never runs on anyone else’s fleet.',
+      'agents.runner': 'Runner',
+      'agents.organism': 'Organism',
+      'agents.deployBtn': 'Deploy to my fleet',
+      'agents.needLogin': 'Sign in to deploy this agent onto your own fleet.',
+      'agents.noRunner': 'You have no runner agent yet. Connect a crew-forge (crewaimeat) from Profile → Agents first, then deploy.',
+      'agents.noRunnerOption': 'no agents - connect one first',
+      'agents.deployFailed': 'Deploy failed',
+      'agents.deployStarted': 'Deploy task started on your fleet',
+      'agents.deployQueued': 'Deploy task queued - start it from your agent’s Tasks',
+      'agents.undeployQueued': 'Undeploy task sent to your fleet',
       'lineage.title': 'Fork lineage',
       'lineage.help': 'Every app forked from this one (and where this one came from), with each fork\'s current status. The chain survives a fork being parked or deleted.',
       'lineage.loading': 'Loading lineage…',
@@ -421,7 +460,7 @@ export const I18N = {
       'help.whereTitle': 'Missä appisi asuvat',
       'help.where': 'Paikalliset appit asuvat vain tässä selaimessa (IndexedDB) — ne eivät seuraa toiseen selaimeen tai laitteeseen. Julkaise appi siirtääksesi sen palvelimelle, minkä jälkeen hallitset sitä mistä tahansa. Jokainen appi näkyy YHTENÄ korttina, jonka merkki kertoo missä se sijaitsee.',
       'help.sectionsTitle': 'Kaksi näkymää',
-      'help.sections': 'Kaksi välilehteä. Kirjasto = sinun appisi (paikalliset + palvelimella), jokainen yhtenä korttina tilamerkillä — Paikallinen (tämä selain), Listalla (julkinen palvelimella), Ei listalla (palvelimella mutta piilossa katalogista, sinä ja kuka tahansa linkillä voitte yhä käyttää), tai Vain serverillä (ei paikallista kopiota). Yhteisö = muiden julkaisemat appit.',
+      'help.sections': 'Kaksi välilehteä. Kirjasto = sinun appisi, jokainen yhtenä korttina jonka merkki kertoo julkaisutilan — Listalla (julkaistu, näkyy katalogissa), Ei listalla (palvelimella mutta piilossa katalogista, sinä ja kuka tahansa linkillä voitte yhä käyttää), tai Paikallinen (luonnos tässä selaimessa, ei vielä palvelimella). Violetti Staging-merkki kertoo että apilla on myös julkaisematon luonnos odottamassa. Yhteisö = muiden julkaisemat appit.',
       'help.backupTitle': '"Varmuuskopio" tarkoittaa kahta eri asiaa',
       'help.backup': '💾-valikko (yläpalkki) vie/tuo PALVELIN-appisi + laajennukset .zip-tiedostona. Asetukset → Vie/Tuo JSON varmuuskopioi tämän selaimen PAIKALLISEN katalogin. Ne ovat erillisiä.',
       'help.standaloneTitle': 'Mille nodelle tämä puhuu',
@@ -458,7 +497,7 @@ export const I18N = {
       'sec.parkedBlurb': 'Vain sinä näet ja voit käyttää näitä — ne pysyvät käytettävissä mutta eivät näy julkisessa katalogissa. Paina Julkaise siirtääksesi takaisin julkaistuihin.',
       'sec.recent': '🕒 Viimeksi avatut',
       'sec.local': '📚 Sinun sovelluksesi',
-      'sec.localNote': 'Yksi kortti per sovellus. Merkki kertoo missä se sijaitsee — Paikallinen (tässä selaimessa), Julkaistu (palvelimella), Parkissa (piilotettu julkisesta katalogista) tai Vain serverillä (ei paikallista kopiota).',
+      'sec.localNote': 'Yksi kortti per sovellus. Merkki kertoo julkaisutilan — Listalla (julkaistu, näkyy katalogissa), Ei listalla (palvelimella mutta piilossa julkisesta katalogista) tai Paikallinen (luonnos tässä selaimessa, ei vielä palvelimella). Violetti Staging-merkki kertoo että apilla on myös julkaisematon luonnos.',
       'sec.localHint': '💡 Julkaise paikallinen sovellus viedäksesi sen palvelimelle — sen jälkeen voit hallita sitä mistä tahansa.',
       'stats.apps': 'sovellusta',
       'stats.stored': 'tallennettu',
@@ -540,6 +579,8 @@ export const I18N = {
       'pb.step3': 'Lisää & julkaise sovelluksesi',
       'pb.step3hint': 'Saitko koodin tai HTML-tiedoston tekoälyltä? Liitä se (tai lataa tiedosto) tästä — se tulee live-tilaan solmuusi ja saat jaettavan linkin.',
       'pb.template': 'Aloita mallipohjasta (valinnainen)',
+      'pb.packs': 'Kyvykkyyspaketit (valinnainen)',
+      'pb.packsHint': 'Kaaviot, muokattavat vuokaaviot, pelit, 3D… — itse isännöidyt kirjastot, joiden AI-ohjeet leivotaan promptiin. Ideatekstisi esivalitsee sopivat paketit.',
       'pb.noneTemplate': '(ei mitään — rakenna tyhjästä)',
       'pb.promptPreview': 'Promptin esikatselu',
       'pb.addBtn': '➕ Lisää sovelluksesi — liitä se tai lataa tiedosto',
@@ -554,6 +595,12 @@ export const I18N = {
       'card.view': 'Avaa',
       'card.open': 'Avaa',
       'card.openHint': 'Avaa tämä sovellus',
+      'card.openReleased': 'Avaa julkaistu',
+      'card.openReleasedHint': 'Avaa julkaistu (live) versio',
+      'card.openStaging': 'Avaa staging',
+      'card.openStagingHint': 'Avaa julkaisematon staging-luonnos testattavaksi — live-appi pysyy ennallaan',
+      'card.stagingBadge': 'Staging',
+      'card.stagingHint': 'Tällä sovelluksella on julkaisematon staging-luonnos odottamassa live-version rinnalla',
       'common.menu': 'Valikko',
       'status.local': 'Paikallinen',
       'status.published': 'Listalla',
@@ -576,6 +623,37 @@ export const I18N = {
       'fork.failed': 'Haaroitus epäonnistui',
       'detail.forkedFrom': '⑂ Haaroitettu kohteesta',
       'card.forksHint': 'Näytä haaroitushistoria (kuka haaroitti ja mistä tämä on peräisin)',
+      'card.agent': '🤖 Agentti',
+      'card.agentHint': 'Tämä sovellus tuo mukanaan oman agentin - tutki sitä, käytä valmiiksi ylläpidettyä tai ota käyttöön oma',
+      'agents.title': 'Mukana tulevat agentit',
+      'agents.manage': 'Tutki ja ota käyttöön',
+      'agents.none': 'Tämä sovellus ei määrittele mukana tulevia agentteja.',
+      'agents.declares': 'Sovellus tuo mukanaan oman agentin deklaratiivisena crew-määrityksenä. Käytä jonkun jo ylläpitämää instanssia (hinnat alla) tai ota oma kopio käyttöön omaan laivueeseesi.',
+      'agents.crew': 'Työryhmä',
+      'agents.tasks': 'Tehtävät',
+      'agents.hostedTitle': 'Ylläpidetyt instanssit',
+      'agents.hostedNone': 'Kukaan ei vielä ylläpidä tätä agenttia - ota omasi käyttöön alta ensimmäisenä.',
+      'agents.hostedError': 'Instanssien lataus epäonnistui.',
+      'agents.loading': 'Ladataan…',
+      'agents.you': 'sinä',
+      'agents.author': 'tekijä',
+      'agents.trust': 'luottamus',
+      'agents.noOffers': 'Ei julkisia tarjoomia - kysy ylläpitäjältä.',
+      'agents.askPrice': 'kysy hintaa',
+      'agents.instant': 'välitön',
+      'agents.undeploy': 'Poista käytöstä',
+      'agents.deployTitle': 'Ota oma käyttöön',
+      'agents.deployDesc': 'Luo käyttöönottotehtävän OMALLE ajoagentillesi (crew-forge). Laivue lukee crew-määrityksen sovelluksen manifestista ja käynnistää agentin sinun tilisi alle - se ei koskaan aja kenenkään muun laivueessa.',
+      'agents.runner': 'Ajoagentti',
+      'agents.organism': 'Organismi',
+      'agents.deployBtn': 'Ota käyttöön laivueeseeni',
+      'agents.needLogin': 'Kirjaudu sisään ottaaksesi agentin käyttöön omaan laivueeseesi.',
+      'agents.noRunner': 'Sinulla ei ole vielä ajoagenttia. Yhdistä crew-forge (crewaimeat) ensin: Profiili → Agentit.',
+      'agents.noRunnerOption': 'ei agentteja - yhdistä ensin',
+      'agents.deployFailed': 'Käyttöönotto epäonnistui',
+      'agents.deployStarted': 'Käyttöönottotehtävä käynnistyi laivueessasi',
+      'agents.deployQueued': 'Käyttöönottotehtävä jonossa - käynnistä se agentin Tehtävistä',
+      'agents.undeployQueued': 'Käytöstäpoistotehtävä lähetetty laivueellesi',
       'lineage.title': 'Haaroitushistoria',
       'lineage.help': 'Kaikki tästä haaroitetut sovellukset (ja mistä tämä on peräisin), kunkin haaran nykyinen tila. Ketju säilyy, vaikka haara parkitaan tai poistetaan.',
       'lineage.loading': 'Ladataan historiaa…',

package/dist/static/app-catalog/js/main.js

@@ -13,13 +13,14 @@ import { getAllApps, saveApp, deleteApp, openDB, getDbName, getDbMode, setDbMode
 import { showConfirm, closeConfirm, showNotice, dismissNotice, dtlBtn } from './ui.js';
 import { loadConfig, saveConfig } from './config.js';
 import { extractZip, bundleZip } from './zip.js';
-import { initDetail, refreshServerMgmt, openDetailView, editAppDetails, closeDetailView, detailLaunch, mountLoginPill, detailAboutEdit, detailAboutCancel, detailAboutSave, detailToggleFavorite, detailAccessCodeEdit, detailAccessCodeCancel, detailAccessCodeSave, detailSkillAttachToggle, detailSkillAttach, detailSkillDetach, detailSetScreenshot, detailRefreshScreenshot, detailAiRun, detailAiTest, detailAiKeep, detailAiDiscard, detailTestDraftLive, detailPublishTestedDraft, sourceTestDraftLive, sourcePublishTested, detailEditSource, detailImproveExternal, detailSharePrompt, detailPublish, detailDelete, openPublishedDetail, fetchAppContentBase64, showLineageModal, showProtectionModal, saveProtection, showVersionsModal, restoreVersion, forkVersion } from './detail.js';
+import { initDetail, refreshServerMgmt, openDetailView, editAppDetails, closeDetailView, detailLaunch, mountLoginPill, detailAboutEdit, detailAboutCancel, detailAboutSave, detailToggleFavorite, detailAccessCodeEdit, detailAccessCodeCancel, detailAccessCodeSave, detailSkillAttachToggle, detailSkillAttach, detailSkillDetach, detailSetScreenshot, detailRefreshScreenshot, detailAiRun, detailAiTest, detailAiKeep, detailAiDiscard, detailTestDraftLive, detailPublishTestedDraft, openStagingPreview, sourceTestDraftLive, sourcePublishTested, detailEditSource, detailImproveExternal, detailSharePrompt, detailPublish, detailDelete, openPublishedDetail, fetchAppContentBase64, showLineageModal, showProtectionModal, saveProtection, showVersionsModal, restoreVersion, forkVersion } from './detail.js';
 import { monetizeAddTool, monetizeEditTool, monetizeCancelEdit, monetizeSaveTool, monetizeDeleteTool } from './monetize.js';
 import { loadCortexExtensions, showCortexPopup, cortexCopy, getCortexOwnerToken, openCortexEditor, cortexEditorAddLib, cortexEditorSave, cortexEditorExport, closeCortexEditor, openPromptBuilder, closePbPanel, buildPromptFromBuilder, updatePbPreview } from './cortex.js';
 import { initSettings, applyTheme, updateThemeToggle, toggleTheme, getThemePref, openSettings, saveSettings, syncConfigToServer, loadConfigFromServer, closeSettings, openHelp, closeHelp, exportBackup, handleImportBackup, jsonImportSelectAll, submitJsonImport, removeDuplicateApps, clearAllData } from './settings.js';
 import { initAppsIo, setEditingAppId, addAppFromZip, addAppFromUrl, addAppFromFile, addAppFromSource, showModal, requireSignInThen, parseAppMeta, closeModal, switchTab, handleFileDrop, handleSave } from './apps-io.js';
 import { initServerIo, isOperatorSession, importFromAimeat, processAimeatImport, showPublishModal, submitPublish, toggleCommunity, switchView, showSubdomainModal, submitSubdomainAssign, unassignSubdomain, closeConsents, openConsents, revokeConsent, toggleBackupMenu, toggleCreateMenu, closeCreateMenu, toggleCortexBar, exportBackupZip, importBackupPick, importBackupFile, backupUpdateSummary, backupSelectAll, submitBackupRestore, loadPublishedApps, applyServerFilter, unpublishApp, toggleParkApp, toggleForkApp, deleteServerApp } from './server-io.js';
 import { initRender, setServerManifests, setOwnServerApps, setIframeUrl, serverStateByFilename, serverAppManifests, ownAppProtection, ownServerApps, currentIframeUrl, renderTags, filterByTag, launchApp, launchInTab, viewPublished, launchInIframe, renderApps, renderRecentlyOpened, closeIframe, openExternal, showContextMenu, hideContextMenu, handleContextAction, viewSource, generateSharePrompt, generateHomepagePrompt, onCardDragStart, onCardDragEnd, onCardDragOver, onCardDrop } from './render.js';
+import { initAppAgents, showAppAgentsModal, agentsDeploy, agentsUndeploy } from './app-agents.js';
 
 
   // ── i18n (en / fi) ─────────────────────────────────
@@ -188,6 +189,9 @@ import { initRender, setServerManifests, setOwnServerApps, setIframeUrl, serverS
     submitBackupRestore: submitBackupRestore,
     showVersionsModal: showVersionsModal,
     showLineageModal: showLineageModal,
+    showAppAgentsModal: showAppAgentsModal,
+    agentsDeploy: agentsDeploy,
+    agentsUndeploy: agentsUndeploy,
     showProtectionModal: showProtectionModal,
     saveProtection: saveProtection,
     restoreVersion: restoreVersion,
@@ -201,6 +205,7 @@ import { initRender, setServerManifests, setOwnServerApps, setIframeUrl, serverS
     detailAiDiscard: detailAiDiscard,
     detailTestDraftLive: detailTestDraftLive,
     detailPublishTestedDraft: detailPublishTestedDraft,
+    openStagingPreview: openStagingPreview,
     detailEditSource: detailEditSource,
     detailImproveExternal: detailImproveExternal,
     detailSharePrompt: detailSharePrompt,
@@ -259,6 +264,7 @@ import { initRender, setServerManifests, setOwnServerApps, setIframeUrl, serverS
       getOwnProtection: function () { return ownAppProtection; },
       setIframeUrl: setIframeUrl, isOperatorSession: isOperatorSession
     });
+    initAppAgents({ getServerManifests: function () { return serverAppManifests; } });
     initSettings({ generateId: generateId, renderApps: renderApps, loadPublishedApps: loadPublishedApps });
     initAppsIo({ generateId: generateId, readFileAsText: readFileAsText, renderApps: renderApps, getMainApps: function () { return allApps; } });
     initServerIo({

package/dist/static/app-catalog/js/render.js

@@ -10,6 +10,9 @@
  * @usage import { initRender, renderApps, renderTags, serverStateByFilename, setServerManifests } from './render.js'; initRender({...})
  * @version-history
  *   v1.0.0 — 2026-07-10 — Initial extraction (TARGET-021 Aalto 3 modularization, phase 12).
+ *   v1.1.0 — 2026-07-16 — Card badges now reflect PUBLICATION state only (retire the
+ *     "Server only" concept: a published no-local-copy app is "Listed vN", not "server").
+ *     Add a Staging pill + split Open into "Open released" / "Open staging" when has_draft.
  */
 import { escapeHtml, jsArg, sourceLabel, filterAttr, isSameOriginUrl } from './util.js';
 import { getAllApps, saveApp, deleteApp } from './db.js';
@@ -172,17 +175,19 @@ export let serverStateByFilename = {};
 export let ownAppProtection = {};
 export let serverAppManifests = {}; // moved out of server-io: SSOT for the owner-app manifest cache (detail reads via getServerManifests)
 
-// Status of a unified entry, for its badge.
+// Status of a unified entry, for its badge. The badge shows the app's PUBLICATION
+// state on the server — Listed / Unlisted / (browser-only) Local — NOT whether this
+// browser happens to hold a local copy. A published app with no local twin (e.g.
+// pushed via MCP/VSCode) is still "Listed vN", not a separate "server only" state;
+// materialization of a local copy is an implementation detail the badge never surfaces.
 function libStatus(e) {
-  if (e.parked) return 'parked';
-  if (e.serverOnly) return 'server';
-  if (e.published) return 'published';
-  return 'local';
+  if (e.parked) return 'parked';        // on the server, hidden from the public catalogue
+  if (e.published) return 'published';  // on the server, public in the catalogue
+  return 'local';                       // a draft in this browser, not on the server yet
 }
 function libStatusLabel(e) {
   switch (libStatus(e)) {
     case 'parked':    return t('status.parked');
-    case 'server':    return t('status.serverOnly');
     case 'published': return t('status.published') + (e.versionNumber ? ' v' + e.versionNumber : '');
     default:          return t('status.local');
   }
@@ -209,7 +214,7 @@ function buildLibraryEntries(localApps, serverApps) {
       source: la.source, origin: la.origin,
       aimeatOwner: la.aimeatOwner || null, aimeatFilename: la.aimeatFilename || null,
       addedAt: la.addedAt, lastOpenedAt: la.lastOpenedAt, blob: la.blob,
-      published: !!la.published, parked: false, serverOnly: false,
+      published: !!la.published, parked: false, serverOnly: false, hasDraft: false,
       filename: la.publishedFilename || null, owner: null,
       versionNumber: la.publishedVersionNumber || null,
       viewUrl: la.publishedUrl ? (base + la.publishedUrl) : '',
@@ -222,6 +227,8 @@ function buildLibraryEntries(localApps, serverApps) {
     var sa = serverApps[s];
     var fn = sa.filename || '';
     var prot = (sa.manifest && sa.manifest.protection) || {};
+    // Agent-Bundled Apps: the card gets a 🤖 marker when the manifest declares crew-defs.
+    var shipsAgent = !!(sa.manifest && sa.manifest.cortex && sa.manifest.cortex.agents && sa.manifest.cortex.agents.length);
     var m = fn ? byFilename[fn] : null;
     if (m) {
       m.parked = !!sa.parked;
@@ -229,6 +236,8 @@ function buildLibraryEntries(localApps, serverApps) {
       m.owner = sa.owner || m.owner;
       m.versionNumber = sa.version_number || m.versionNumber;
       m.forkable = !!sa.forkable; m.forks = sa.forks || 0;
+      m.hasDraft = !!sa.has_draft;
+      m.hasAgents = shipsAgent;
       m.protection = prot;
       // EXACTLY what the old "View" used: the CONSTRUCTED served URL (aimeatUrl/v1/apps/<owner>/<file>),
       // NOT the local publishedUrl — so Open opens the app top-level on its origin (and it SSOs)
@@ -245,11 +254,11 @@ function buildLibraryEntries(localApps, serverApps) {
         favorite: false, sortOrder: undefined, openMode: 'tab',
         source: 'server', origin: null,
         aimeatOwner: sa.owner || null, aimeatFilename: fn,
-        published: !sa.parked, parked: !!sa.parked, serverOnly: true,
+        published: !sa.parked, parked: !!sa.parked, serverOnly: true, hasDraft: !!sa.has_draft,
         filename: fn, owner: sa.owner || '',
         versionNumber: sa.version_number || null,
         viewUrl: (base && fn) ? (base + '/v1/apps/' + encodeURIComponent(sa.owner || '') + '/' + encodeURIComponent(fn)) : '',
-        forkable: !!sa.forkable, forks: sa.forks || 0, protection: prot
+        forkable: !!sa.forkable, forks: sa.forks || 0, protection: prot, hasAgents: shipsAgent
       };
       entries.push(se);
       if (fn) byFilename[fn] = se;
@@ -383,6 +392,14 @@ function libraryCardHtml(e, i) {
     : (e.hasLocal
         ? 'window._launcher.launchApp(\'' + jsArg(e.localId) + '\', \'' + jsArg(e.openMode || 'tab') + '\')'
         : detailCall);
+  // When a staging draft exists the single "Open" splits into two labelled buttons so the
+  // released version and the unpublished staging draft are never confused. openStagingPreview
+  // mints a short-lived owner-only preview URL for the draft and opens it top-level.
+  var stagingCall = 'window._launcher.openStagingPreview(\'' + jsArg(e.owner || '') + '\', \'' + jsArg(e.filename || '') + '\')';
+  var openBtns = (e.hasDraft && e.viewUrl)
+    ? '<button onclick="event.stopPropagation(); window._launcher.viewPublished(\'' + jsArg(e.viewUrl) + '?mode=inline\', \'' + jsArg(e.name) + '\')" title="' + escapeHtml(t('card.openReleasedHint')) + '">▶ ' + escapeHtml(t('card.openReleased')) + '</button>' +
+      '<button class="act-staging" onclick="event.stopPropagation(); ' + stagingCall + '" title="' + escapeHtml(t('card.openStagingHint')) + '">⏫ ' + escapeHtml(t('card.openStaging')) + '</button>'
+    : '<button onclick="event.stopPropagation(); ' + openCall + '" title="' + escapeHtml(t('card.openHint')) + '">▶ ' + escapeHtml(t('card.open')) + '</button>';
   var st = libStatus(e);
   var dragAttrs = e.hasLocal
     ? ' draggable="true" ondragstart="window._launcher.onCardDragStart(event)" ondragend="window._launcher.onCardDragEnd(event)" ondragover="window._launcher.onCardDragOver(event)" ondrop="window._launcher.onCardDrop(event)"'
@@ -396,15 +413,17 @@ function libraryCardHtml(e, i) {
       (e.hasLocal ? ' oncontextmenu="window._launcher.showContextMenu(event, \'' + jsArg(e.localId) + '\')"' : '') +
       ' style="animation-delay:' + (i * 0.04) + 's">' +
       '<span class="app-status-badge st-' + st + '">' + escapeHtml(libStatusLabel(e)) + '</span>' +
+      (e.hasDraft ? '<span class="app-staging-badge" title="' + escapeHtml(t('card.stagingHint')) + '">' + escapeHtml(t('card.stagingBadge')) + '</span>' : '') +
       menuBtn +
       '<div class="app-icon">' + escapeHtml(e.icon || '\u{1F4DD}') + '</div>' +
       '<div class="app-name">' + escapeHtml(e.name) +
-        (e.origin === 'ai-published' ? ' <span class="ai-origin-badge">AI</span>' : '') + '</div>' +
+        (e.origin === 'ai-published' ? ' <span class="ai-origin-badge">AI</span>' : '') +
+        (e.hasAgents ? ' <span class="pcb-agent" title="' + escapeHtml(t('card.agentHint')) + '">\u{1F916}</span>' : '') + '</div>' +
       (e.description
         ? '<div class="app-source">' + escapeHtml(e.description) + '</div>'
         : '<div class="app-source">' + sourceLabel(e.source) + '</div>') +
       '<div class="app-actions">' +
-        '<button onclick="event.stopPropagation(); ' + openCall + '" title="' + escapeHtml(t('card.openHint')) + '">▶ ' + escapeHtml(t('card.open')) + '</button>' +
+        openBtns +
         '<button onclick="event.stopPropagation(); ' + detailCall + '">' + escapeHtml(t('ctx.details')) + '</button>' +
       '</div>' +
       (e.favorite ? '<span class="fav-star visible">⭐</span>' : '') +

package/dist/static/app-catalog/js/server-io.js

@@ -1045,6 +1045,9 @@ function renderCommunityApps(serverApps, aimeatUrl, section, grid, countEl, curr
     var date = sa.created_at ? new Date(sa.created_at).toLocaleDateString() : '';
     var author = (sa.manifest && sa.manifest.authorDisplay) ? sa.manifest.authorDisplay : (sa.owner || '');
     var viewUrl = aimeatUrl + '/v1/apps/' + encodeURIComponent(sa.owner || '') + '/' + encodeURIComponent(sa.filename || '');
+    // Agent-Bundled Apps: this app ships its own agent(s) — badge it and offer the
+    // Bundled-agents modal (inspect the crew-def, use a hosted instance, or deploy your own).
+    var shipsAgent = !!(sa.manifest && sa.manifest.cortex && sa.manifest.cortex.agents && sa.manifest.cortex.agents.length);
     html +=
       '<div class="published-card"' + filterAttr(name, (sa.manifest && sa.manifest.tags) || []) + '>' +
         '<div class="published-card-name">' + escapeHtml(name) + '</div>' +
@@ -1061,9 +1064,15 @@ function renderCommunityApps(serverApps, aimeatUrl, section, grid, countEl, curr
             (sa.forkable
               ? '<button onclick="window._launcher.forkVersion(\'' + escapeHtml(sa.owner || '') + '\', \'' + escapeHtml(sa.filename || '') + '\', ' + (sa.version_number || 0) + ')" title="' + escapeHtml(t('card.forkHint')) + '">' + t('card.fork') + '</button>'
               : '') +
+            (shipsAgent
+              ? '<button onclick="window._launcher.showAppAgentsModal(\'' + jsArg(sa.owner || '') + '\', \'' + jsArg(sa.filename || '') + '\')" title="' + escapeHtml(t('card.agentHint')) + '">' + t('card.agent') + '</button>'
+              : '') +
           '</div>' +
-          ((version || (sa.forks && sa.forks > 0))
+          ((version || (sa.forks && sa.forks > 0) || shipsAgent)
             ? '<div class="published-card-badgerow">'
+              + (shipsAgent
+                ? '<span class="pcb-agent" title="' + escapeHtml(t('card.agentHint')) + '">&#x1F916;</span>'
+                : '')
               + ((sa.forks && sa.forks > 0)
                 ? '<span class="pcb-forks" title="' + escapeHtml(t('card.forksHint')) + '" onclick="window._launcher.showLineageModal(\'' + escapeHtml(sa.owner || '') + '\', \'' + escapeHtml(sa.filename || '') + '\')">⑂ ' + sa.forks + '</span>'
                 : '')