npm - aimeat - Versions diffs - 1.40.1 → 2.0.0 - Mend

aimeat 1.40.1 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1567) hide show

package/dist/public/views/admin/stats-tab.js CHANGED Viewed

@@ -60,12 +60,12 @@ function successRate(sent, failed) {
   return ((sent / (sent + failed)) * 100).toFixed(1);
 }
-function rateColor(rate) {
-  if (rate === null) return 'var(--text-dim)';
+function rateTone(rate) {
+  if (rate === null) return '';
   const n = parseFloat(rate);
-  if (n >= 95) return '#22c55e';
-  if (n >= 80) return '#eab308';
-  return '#ef4444';
+  if (n >= 95) return 'green';
+  if (n >= 80) return 'amber';
+  return 'red';
 }
 /** Sum all values in a day-object whose key starts with `prefix`. */
@@ -235,16 +235,16 @@ export default function StatsTab({ data }) {
     <!-- Tunnel Stats -->
     <h3 class="adm-mt-lg adm-text-sm adm-text-accent">${t('dashboard.tunnelStats')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
-      <${StatCard} label=${html`${t('dashboard.tunnelActive')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${gs.tunnel_connections_active ?? ts.connections_active ?? 0} color="#22c55e" />
+      <${StatCard} label=${html`${t('dashboard.tunnelActive')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${gs.tunnel_connections_active ?? ts.connections_active ?? 0} tone="green" />
       <${StatCard} label=${t('dashboard.tunnelTotal')} value=${ts.connections_total || 0} />
-      <${StatCard} label=${t('dashboard.tunnelDisconnections')} value=${ts.disconnections_total || 0} color="#eab308" />
-      <${StatCard} label=${t('dashboard.tunnelReconnects')} value=${ts.reconnects_total || 0} color="#3b82f6" />
+      <${StatCard} label=${t('dashboard.tunnelDisconnections')} value=${ts.disconnections_total || 0} tone="amber" />
+      <${StatCard} label=${t('dashboard.tunnelReconnects')} value=${ts.reconnects_total || 0} tone="blue" />
     </div>
     <div class="adm-grid adm-grid-4">
       <${StatCard} label=${t('dashboard.tunnelMsgSent')} value=${ts.messages_sent_total || 0} />
       <${StatCard} label=${t('dashboard.tunnelMsgReceived')} value=${ts.messages_received_total || 0} />
-      <${StatCard} label=${t('dashboard.tunnelDeliveryFails')} value=${ts.delivery_failures_total || 0} color=${ts.delivery_failures_total > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.tunnelHeartbeatMisses')} value=${ts.heartbeat_misses_total || 0} color=${ts.heartbeat_misses_total > 0 ? '#eab308' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.tunnelDeliveryFails')} value=${ts.delivery_failures_total || 0} tone=${ts.delivery_failures_total > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.tunnelHeartbeatMisses')} value=${ts.heartbeat_misses_total || 0} tone=${ts.heartbeat_misses_total > 0 ? 'amber' : 'green'} />
     </div>
     <div class="adm-grid adm-grid-2">
       <div class="adm-card">
@@ -261,12 +261,12 @@ export default function StatsTab({ data }) {
     <div class="adm-grid adm-grid-4 adm-mt-md">
       <${StatCard} label=${html`${t('dashboard.mailboxItems')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${gs.mailbox_items_total ?? ms.items_total ?? 0} />
       <${StatCard} label=${html`${t('dashboard.mailboxBytes')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${fmtBytes(gs.mailbox_bytes_total ?? ms.bytes_total ?? 0)} />
-      <${StatCard} label=${t('dashboard.mailboxEnqueued')} value=${ms.enqueued_total || 0} color="#3b82f6" />
-      <${StatCard} label=${t('dashboard.mailboxDelivered')} value=${ms.delivered_total || 0} color="#22c55e" />
+      <${StatCard} label=${t('dashboard.mailboxEnqueued')} value=${ms.enqueued_total || 0} tone="blue" />
+      <${StatCard} label=${t('dashboard.mailboxDelivered')} value=${ms.delivered_total || 0} tone="green" />
     </div>
     <div class="adm-grid adm-grid-4">
-      <${StatCard} label=${t('dashboard.mailboxExpired')} value=${ms.expired_total || 0} color=${ms.expired_total > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.mailboxQuotaRejects')} value=${ms.quota_rejections_total || 0} color=${ms.quota_rejections_total > 0 ? '#ef4444' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.mailboxExpired')} value=${ms.expired_total || 0} tone=${ms.expired_total > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.mailboxQuotaRejects')} value=${ms.quota_rejections_total || 0} tone=${ms.quota_rejections_total > 0 ? 'red' : 'green'} />
       <${StatCard} label=${html`${t('dashboard.mailboxOldestAge')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${fmtUp(gs.mailbox_oldest_item_age_seconds ?? ms.oldest_item_age_seconds ?? 0)} color="var(--text-dim)" />
     </div>
@@ -274,9 +274,9 @@ export default function StatsTab({ data }) {
     <h3 class="adm-mt-lg adm-text-sm adm-section-cyan">${t('dashboard.emailDelivery')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
       <${StatCard} label=${t('dashboard.emailsSent')} value=${emailSent} />
-      <${StatCard} label=${t('dashboard.emailsFailed')} value=${emailFailed} color=${emailFailed > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.emailsRetried')} value=${emailRetried} color=${emailRetried > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.successRate')} value=${emailRate !== null ? emailRate + '%' : '—'} color=${rateColor(emailRate)} />
+      <${StatCard} label=${t('dashboard.emailsFailed')} value=${emailFailed} tone=${emailFailed > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.emailsRetried')} value=${emailRetried} tone=${emailRetried > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.successRate')} value=${emailRate !== null ? emailRate + '%' : '—'} tone=${rateTone(emailRate)} />
     </div>
     ${sd.email_sent_by_type ? html`
       <div class="adm-card adm-mt-md">
@@ -295,9 +295,9 @@ export default function StatsTab({ data }) {
     <h3 class="adm-mt-lg adm-text-sm adm-section-violet">${t('dashboard.pushDelivery')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
       <${StatCard} label=${t('dashboard.pushSent')} value=${pushSent} />
-      <${StatCard} label=${t('dashboard.pushFailed')} value=${pushFailed} color=${pushFailed > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.expiredSubs')} value=${pushExpired} color=${pushExpired > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.successRate')} value=${pushRate !== null ? pushRate + '%' : '—'} color=${rateColor(pushRate)} />
+      <${StatCard} label=${t('dashboard.pushFailed')} value=${pushFailed} tone=${pushFailed > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.expiredSubs')} value=${pushExpired} tone=${pushExpired > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.successRate')} value=${pushRate !== null ? pushRate + '%' : '—'} tone=${rateTone(pushRate)} />
     </div>
     ${sd.push_sent_by_type ? html`
       <div class="adm-card adm-mt-md">
@@ -315,8 +315,8 @@ export default function StatsTab({ data }) {
     <h3 class="adm-mt-lg adm-text-sm adm-section-amber">${t('dashboard.mailboxNotifications')}</h3>
     <div class="adm-grid adm-grid-3 adm-mt-md">
       <${StatCard} label=${t('dashboard.mailboxNotifSent')} value=${mboxSent} />
-      <${StatCard} label=${t('dashboard.mailboxNotifFailed')} value=${mboxFailed} color=${mboxFailed > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.mailboxNotifBlocked')} value=${mboxBlocked} color=${mboxBlocked > 0 ? '#eab308' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.mailboxNotifFailed')} value=${mboxFailed} tone=${mboxFailed > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.mailboxNotifBlocked')} value=${mboxBlocked} tone=${mboxBlocked > 0 ? 'amber' : 'green'} />
     </div>
     ${(sd.mailbox_notif_blocked_by_type || sd.mailbox_notif_sent_by_type) ? html`
       <div class="adm-card adm-mt-md adm-text-sm adm-mailbox-inline">
@@ -341,24 +341,24 @@ export default function StatsTab({ data }) {
     <!-- Consent Permission Stats -->
     <h3 class="adm-mt-lg adm-text-sm adm-section-purple">${t('dashboard.consentPermStats')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
-      <${StatCard} label=${t('dashboard.consentActiveRules')} value=${cs.active_rules || 0} color="#a855f7" />
-      <${StatCard} label=${t('dashboard.consentByGaii')} value=${cs.by_gaii || 0} color="#3b82f6" />
-      <${StatCard} label=${t('dashboard.consentByGhii')} value=${cs.by_ghii || 0} color="#a855f7" />
-      <${StatCard} label=${t('dashboard.consentByOrganism')} value=${cs.by_organism || 0} color="#22c55e" />
+      <${StatCard} label=${t('dashboard.consentActiveRules')} value=${cs.active_rules || 0} tone="purple" />
+      <${StatCard} label=${t('dashboard.consentByGaii')} value=${cs.by_gaii || 0} tone="blue" />
+      <${StatCard} label=${t('dashboard.consentByGhii')} value=${cs.by_ghii || 0} tone="purple" />
+      <${StatCard} label=${t('dashboard.consentByOrganism')} value=${cs.by_organism || 0} tone="green" />
     </div>
     <div class="adm-grid adm-grid-4">
-      <${StatCard} label=${t('dashboard.consentByDomain')} value=${cs.by_domain || 0} color="#eab308" />
+      <${StatCard} label=${t('dashboard.consentByDomain')} value=${cs.by_domain || 0} tone="amber" />
       <${StatCard} label=${t('dashboard.consentByNode')} value=${cs.by_node || 0} color="var(--text-dim)" />
-      <${StatCard} label=${t('dashboard.consentByWildcard')} value=${cs.by_wildcard || 0} color=${cs.by_wildcard > 0 ? '#ef4444' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.consentByWildcard')} value=${cs.by_wildcard || 0} tone=${cs.by_wildcard > 0 ? 'red' : 'green'} />
       <${StatCard} label=${t('dashboard.consentDataPatterns')} value=${cs.unique_patterns || 0} />
     </div>
     <!-- Security Stats -->
     <h3 class="adm-mt-lg adm-text-sm adm-section-red">${t('dashboard.securityStats')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
-      <${StatCard} label=${t('dashboard.authFailures')} value=${sd.auth_failures_total || 0} color=${sd.auth_failures_total > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.rateLimitHits')} value=${sd.rate_limit_hits_total || 0} color=${sd.rate_limit_hits_total > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.scopeDenials')} value=${sd.scope_denials_total || 0} color=${sd.scope_denials_total > 0 ? '#eab308' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.authFailures')} value=${sd.auth_failures_total || 0} tone=${sd.auth_failures_total > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.rateLimitHits')} value=${sd.rate_limit_hits_total || 0} tone=${sd.rate_limit_hits_total > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.scopeDenials')} value=${sd.scope_denials_total || 0} tone=${sd.scope_denials_total > 0 ? 'amber' : 'green'} />
     </div>
   `;
 }
@@ -431,7 +431,7 @@ async function renderAllCharts(sd, chartRefs) {
       labels: weekLabels,
       datasets: [
         { label: t('dashboard.thisWeek') || 'This week', data: getWeekData(0), borderColor: '#3b82f6', backgroundColor: '#3b82f622', fill: true },
-        { label: t('dashboard.lastWeek') || 'Last week', data: getWeekData(1), borderColor: '#22c55e', backgroundColor: '#22c55e22', fill: true },
+        { label: t('dashboard.lastWeek') || 'Last week', data: getWeekData(1), borderColor: 'green', backgroundColor: '#22c55e22', fill: true },
       ],
     }, options: chartOpts });
   }
@@ -452,7 +452,7 @@ async function renderAllCharts(sd, chartRefs) {
     refs.chartTunnel = new Chart(tc, { type: 'doughnut', data: {
       labels: [t('dashboard.tunnelMsgSent') || 'Sent', t('dashboard.tunnelMsgReceived') || 'Received', t('dashboard.tunnelDeliveryFails') || 'Rejected', t('dashboard.tunnelMailboxFallbacks') || 'Fallbacks'],
       datasets: [{ data: [tunnel.messages_sent_total || 0, tunnel.messages_received_total || 0, tunnel.delivery_failures_total || 0, tunnel.mailbox_fallbacks_total || 0],
-        backgroundColor: ['#3b82f6', '#22c55e', '#ef4444', '#eab308'] }],
+        backgroundColor: ['#3b82f6', 'green', 'red', 'amber'] }],
     }, options: { responsive: true, plugins: { legend: { labels: { color: '#94a3b8' } } } } });
   }

package/dist/public/views/admin.js CHANGED Viewed

@@ -4,6 +4,8 @@
  * @structure Single `loadAll` fetches all dashboard data; tabs render slices of it. SSE
  *            live-updates trigger a debounced, silent background refresh.
  * @version-history
+ *   v1.5.0 — 2026-07-16 — Drop the per-item emoji icons from the sidebar nav and page title
+ *     (label-only menu — the icons added visual noise without aiding scanning).
  *   v1.1.0 — 2026-06-18 — Debounce + silence SSE-driven refresh so busy nodes don't flicker "Loading…".
  *   v1.1.1 — 2026-06-19 — JSDoc type annotations for frontend type-checking
  *   v1.2.0 — 2026-06-24 — Add Applications moderation tab (operator hide/restore apps).
@@ -32,6 +34,7 @@ import MaintenanceTab  from './admin/maintenance-tab.js';
 import HooksTab        from './admin/hooks-tab.js';
 import PortalTab       from './admin/portal-tab.js';
 import StatsTab        from './admin/stats-tab.js';
+import DatabaseTab     from './admin/database-tab.js';
 import UsageTab        from './admin/usage-tab.js';
 import OwnersTab       from './admin/owners-tab.js';
 import AgentsTab       from './admin/agents-tab.js';
@@ -42,6 +45,7 @@ import ChatInstancesTab from './admin/chat-instances-tab.js';
 import RealtimeTab     from './admin/realtime-tab.js';
 import WorkTab         from './admin/work-tab.js';
 import MessagesAdminTab from './admin/messages-tab.js';
+import FeedbackAdminTab from './admin/feedback-tab.js';
 import EmailTab        from './admin/email-tab.js';
 import PushTab         from './admin/push-tab.js';
 import DirectoryTab    from './admin/directory-tab.js';
@@ -58,7 +62,6 @@ import KnowledgeAdminTab from './admin/knowledge-tab.js';
 import PromptsTab        from './admin/prompts-tab.js';
 import PackagesAdminTab  from './admin/packages-tab.js';
 import MemoryAdminTab    from './admin/memory-tab.js';
-import GeneratorDebugTab from './admin/generator-debug-tab.js';
 import CapabilitiesAdminTab from './admin/capabilities-tab.js';
 import AgentTasksAdminTab from './admin/agent-tasks-tab.js';
 import SharingGroupsAdminTab from './admin/sharing-groups-tab.js';
@@ -70,68 +73,69 @@ import SkillsAdminTab      from './admin/skills-tab.js';
 // ── Sidebar nav structure ──
 const NAV_GROUPS = [
   { key: 'dashboard.navNode', items: [
-    { id: 'overview',     icon: '\u{1F4CA}', key: 'dashboard.overview',   component: OverviewTab },
-    { id: 'economy',      icon: '\u{1FA99}', key: 'dashboard.economy',    component: EconomyTab },
-    { id: 'config',       icon: '\u2699',    key: 'dashboard.config',     component: ConfigTab },
-    { id: 'security',     icon: '\u{1F6E1}', key: 'admin.security.title',  component: SecurityTab },
-    { id: 'cors',         icon: '\u{1F512}', key: 'dashboard.cors',       component: CorsTab },
-    { id: 'maintenance',  icon: '\u{1F6A7}', key: 'dashboard.maintenance',component: MaintenanceTab },
-    { id: 'hooks',        icon: '\u{1F517}', key: 'dashboard.hooks',      component: HooksTab },
-    { id: 'portal',       icon: '\u{1F310}', key: 'dashboard.portal',     component: PortalTab },
-    { id: 'subdomains',   icon: '\u{1F517}', key: 'admin.subdomains.title', component: SubdomainsAdminTab },
-    { id: 'stats',        icon: '\u{1F4C8}', key: 'dashboard.stats',      component: StatsTab },
-    { id: 'usage',        icon: '\u{1F4B8}', key: 'dashboard.usage',      component: UsageTab },
-    { id: 'prompts',      icon: '\u{1F4DD}', key: 'dashboard.promptsTab', component: PromptsTab },
+    { id: 'overview',     key: 'dashboard.overview',   component: OverviewTab },
+    { id: 'economy',      key: 'dashboard.economy',    component: EconomyTab },
+    { id: 'config',       key: 'dashboard.config',     component: ConfigTab },
+    { id: 'security',     key: 'admin.security.title',  component: SecurityTab },
+    { id: 'cors',         key: 'dashboard.cors',       component: CorsTab },
+    { id: 'maintenance',  key: 'dashboard.maintenance',component: MaintenanceTab },
+    { id: 'hooks',        key: 'dashboard.hooks',      component: HooksTab },
+    { id: 'portal',       key: 'dashboard.portal',     component: PortalTab },
+    { id: 'subdomains',   key: 'admin.subdomains.title', component: SubdomainsAdminTab },
+    { id: 'stats',        key: 'dashboard.stats',      component: StatsTab },
+    { id: 'database',     key: 'dashboard.database',   component: DatabaseTab },
+    { id: 'usage',        key: 'dashboard.usage',      component: UsageTab },
+    { id: 'prompts',      key: 'dashboard.promptsTab', component: PromptsTab },
   ]},
   { key: 'dashboard.navIdentity', items: [
-    { id: 'owners',  icon: '\u{1F464}', key: 'dashboard.owners',  component: OwnersTab,  count: 'owners' },
-    { id: 'agents',  icon: '\u{1F916}', key: 'dashboard.agents',  component: AgentsTab,  count: 'agents' },
-    { id: 'ghii',    icon: '\u{1F511}', key: 'dashboard.ghii',    component: GhiiTab,    count: 'ghii' },
-    { id: 'agent-integration', icon: '\u{1F50C}', key: 'admin.tabs.agentIntegration', component: AgentIntegrationAdminTab },
+    { id: 'owners',  key: 'dashboard.owners',  component: OwnersTab,  count: 'owners' },
+    { id: 'agents',  key: 'dashboard.agents',  component: AgentsTab,  count: 'agents' },
+    { id: 'ghii',    key: 'dashboard.ghii',    component: GhiiTab,    count: 'ghii' },
+    { id: 'agent-integration', key: 'admin.tabs.agentIntegration', component: AgentIntegrationAdminTab },
   ]},
   { key: 'dashboard.navData', items: [
-    { id: 'actions',       icon: '\u26A1',     key: 'dashboard.actions',       component: ActionsTab,        count: 'actions' },
-    { id: 'boards',        icon: '\u{1F4CB}',  key: 'dashboard.boards',        component: BoardsTab,         count: 'boards' },
-    { id: 'chatInstances', icon: '\u{1F4AC}',  key: 'dashboard.chatInstances', component: ChatInstancesTab,  count: 'chatInstances' },
-    { id: 'realtime',      icon: '\u{1F4E1}',  key: 'dashboard.realtime',      component: RealtimeTab,       count: 'rooms' },
-    { id: 'work',          icon: '\u{1F4E6}',  key: 'dashboard.work',          component: WorkTab,           count: 'work' },
-    { id: 'messages',      icon: '\u{1F4EC}',  key: 'admin.messages.title',    component: MessagesAdminTab },
-    { id: 'memory-admin',  icon: '\u{1F5C4}',  key: 'dashboard.memoryAdmin',   component: MemoryAdminTab },
-    { id: 'agent-tasks',  icon: '\u{1F4CB}',  key: 'dashboard.agentTasksTab', component: AgentTasksAdminTab },
-    { id: 'sharing-groups', icon: '\u{1F465}', key: 'dashboard.sharingGroupsTab', component: SharingGroupsAdminTab },
-    { id: 'capabilities', icon: '⚡',     key: 'capabilities.adminTitle', component: CapabilitiesAdminTab },
-    { id: 'apps',         icon: '\u{1F4F1}', key: 'admin.apps.title',        component: AppsAdminTab },
+    { id: 'actions',       key: 'dashboard.actions',       component: ActionsTab,        count: 'actions' },
+    { id: 'boards',        key: 'dashboard.boards',        component: BoardsTab,         count: 'boards' },
+    { id: 'chatInstances', key: 'dashboard.chatInstances', component: ChatInstancesTab,  count: 'chatInstances' },
+    { id: 'realtime',      key: 'dashboard.realtime',      component: RealtimeTab,       count: 'rooms' },
+    { id: 'work',          key: 'dashboard.work',          component: WorkTab,           count: 'work' },
+    { id: 'messages',      key: 'admin.messages.title',    component: MessagesAdminTab },
+    { id: 'feedback',      key: 'admin.feedback.title',    component: FeedbackAdminTab },
+    { id: 'memory-admin',  key: 'dashboard.memoryAdmin',   component: MemoryAdminTab },
+    { id: 'agent-tasks',  key: 'dashboard.agentTasksTab', component: AgentTasksAdminTab },
+    { id: 'sharing-groups', key: 'dashboard.sharingGroupsTab', component: SharingGroupsAdminTab },
+    { id: 'capabilities', key: 'capabilities.adminTitle', component: CapabilitiesAdminTab },
+    { id: 'apps',         key: 'admin.apps.title',        component: AppsAdminTab },
   ]},
   { key: 'dashboard.navInfrastructure', items: [
-    { id: 'email',  icon: '\u2709',     key: 'dashboard.email',  component: EmailTab },
-    { id: 'push',   icon: '\u{1F514}',  key: 'dashboard.push',   component: PushTab },
-    { id: 'consul',    icon: '\u{1F5C4}',  key: 'dashboard.consul',    component: ConsulTab },
-    { id: 'scheduler', icon: '\u{23F0}',   key: 'dashboard.scheduler', component: SchedulerTab },
-    { id: 'generator-debug', icon: '\u{1F41E}', key: 'dashboard.generatorDebug', component: GeneratorDebugTab },
+    { id: 'email',  key: 'dashboard.email',  component: EmailTab },
+    { id: 'push',   key: 'dashboard.push',   component: PushTab },
+    { id: 'consul',    key: 'dashboard.consul',    component: ConsulTab },
+    { id: 'scheduler', key: 'dashboard.scheduler', component: SchedulerTab },
   ]},
   { key: 'dashboard.navServices', items: [
-    { id: 'directory',   icon: '\u{1F4D6}', key: 'dashboard.directory',      component: DirectoryTab },
-    { id: 'matching',    icon: '\u{1F91D}', key: 'dashboard.matching',       component: MatchingTab },
-    { id: 'services',    icon: '\u{1F9E9}', key: 'dashboard.services',       component: ServicesTab },
-    { id: 'cortex',      icon: '\u{1F4E6}', key: 'dashboard.cortexTab',      component: CortexTab },
-    { id: 'csm',         icon: '\u{1F4E6}', key: 'dashboard.csmManagement',  component: CsmTab },
-    { id: 'knowledge',   icon: '\u{1F9E0}', key: 'knowledge.operator.tabLabel', component: KnowledgeAdminTab },
-    { id: 'skills',      icon: '\u{1F393}', key: 'dashboard.skills.tabLabel',  component: SkillsAdminTab },
-    { id: 'packages',    icon: '\u{1F9F0}', key: 'dashboard.packagesTab',      component: PackagesAdminTab },
+    { id: 'directory',   key: 'dashboard.directory',      component: DirectoryTab },
+    { id: 'matching',    key: 'dashboard.matching',       component: MatchingTab },
+    { id: 'services',    key: 'dashboard.services',       component: ServicesTab },
+    { id: 'cortex',      key: 'dashboard.cortexTab',      component: CortexTab },
+    { id: 'csm',         key: 'dashboard.csmManagement',  component: CsmTab },
+    { id: 'knowledge',   key: 'knowledge.operator.tabLabel', component: KnowledgeAdminTab },
+    { id: 'skills',      key: 'dashboard.skills.tabLabel',  component: SkillsAdminTab },
+    { id: 'packages',    key: 'dashboard.packagesTab',      component: PackagesAdminTab },
   ]},
   { key: 'dashboard.navIntegrations', items: [
-    { id: 'msm', icon: '\u{1F50C}', key: 'dashboard.msmManagement', component: MsmTab, count: 'msm' },
+    { id: 'msm', key: 'dashboard.msmManagement', component: MsmTab, count: 'msm' },
   ]},
   { key: 'dashboard.navFederation', items: [
-    { id: 'federation', icon: '\u{1F310}', key: 'dashboard.federation', component: FederationTab, count: 'peers' },
-    { id: 'genesis',    icon: '\u{1F30D}', key: 'dashboard.genesis',    component: GenesisTab,    count: 'genesis' },
+    { id: 'federation', key: 'dashboard.federation', component: FederationTab, count: 'peers' },
+    { id: 'genesis',    key: 'dashboard.genesis',    component: GenesisTab,    count: 'genesis' },
   ]},
 ];
-// Page icon+title lookup
+// Page title lookup
 const PAGE_TITLES = {};
 NAV_GROUPS.forEach(g => g.items.forEach(i => {
-  PAGE_TITLES[i.id] = { icon: i.icon, key: i.key };
+  PAGE_TITLES[i.id] = { key: i.key };
 }));
 export default function Admin({ navigate, locale }) {
@@ -386,7 +390,7 @@ export default function Admin({ navigate, locale }) {
   const allItems = NAV_GROUPS.flatMap(g => g.items);
   const activeItem = allItems.find(i => i.id === activePage) || allItems[0];
   const ActiveComponent = activeItem.component;
-  const pageInfo = PAGE_TITLES[activePage] || { icon: '', key: '' };
+  const pageInfo = PAGE_TITLES[activePage] || { key: '' };
   const tabProps = { data, reload: loadAll, session, navigate, locale, switchPage };
@@ -403,7 +407,6 @@ export default function Admin({ navigate, locale }) {
               class="adm-nav-item ${activePage === item.id ? 'active' : ''}"
               onClick=${() => switchPage(item.id)}
             >
-              <span class="icon">${item.icon}</span>
               <span class="label">${t(item.key)}</span>
               ${item.count != null && counts[item.count] != null
                 ? html`<span class="cnt">${counts[item.count]}</span>`
@@ -417,7 +420,7 @@ export default function Admin({ navigate, locale }) {
       <div class="adm-main">
         <div class="adm-topbar">
           <div class="adm-page-title">
-            <span class="icon">${pageInfo.icon}</span> ${t(pageInfo.key)}
+            ${t(pageInfo.key)}
           </div>
           <div class="adm-topbar-right">
             <button class="adm-btn" onClick=${loadAll} disabled=${loading}>

package/dist/public/views/companies.js CHANGED Viewed

@@ -18,6 +18,8 @@ import { t } from '/js/i18n.js';
 import { apiGet, apiPost } from '/js/api.js';
 import { DeliverableBody } from '/components/ImageDeliverable.js';
 import { OfferCardView } from '/components/offer-card-view.js';
+import { Spinner } from '/components/Spinner.js';
+import { EmptyState } from '/components/EmptyState.js';
 const html = htm.bind(h);
@@ -129,7 +131,7 @@ export default function CompaniesView() {
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [companies]);
-  if (companies === null) return html`<div class="cm-container"><div class="cm-center"><div class="spinner"></div></div></div>`;
+  if (companies === null) return html`<div class="cm-container"><div class="cm-center"><${Spinner} /></div></div>`;
   if (companies === 'enterprise') return html`<div class="cm-container"><div class="cm-card"><h1 class="cm-title">${t('companies.title')}</h1><p class="cm-desc">${t('companies.enterpriseRequired')}</p></div></div>`;
   return html`
@@ -146,14 +148,14 @@ export default function CompaniesView() {
       ${showOrders && html`
         <div class="cm-col cm-orders-panel">
           <h2 class="cm-col-title">${t('companies.myOrders')}</h2>
-          ${myOrders === null ? html`<div class="cm-center"><div class="spinner"></div></div>`
-            : (myOrders.length === 0 ? html`<p class="cm-empty">${t('companies.noMyOrders')}</p>`
+          ${myOrders === null ? html`<div class="cm-center"><${Spinner} /></div>`
+            : (myOrders.length === 0 ? html`<${EmptyState} text=${t('companies.noMyOrders')} />`
               : html`<ul class="cm-receipt-list">${myOrders.map(o => html`<${ReceiptRow} key=${o.id} o=${o} />`)}</ul>`)}
         </div>`}
       <div class="cm-grid">
         <aside class="cm-col">
           <h2 class="cm-col-title">${t('companies.directory')} (${companies.length})</h2>
-          ${companies.length === 0 && html`<p class="cm-empty">${t('companies.none')}</p>`}
+          ${companies.length === 0 && html`<${EmptyState} text=${t('companies.none')} />`}
           <ul class="cm-dir-list">
             ${companies.map(c => html`<li key=${c.goii}>
               <button class="cm-dir-item ${selected?.slug === c.slug && selected?.owner === c.creatorOwner ? 'active' : ''}" onClick=${() => openCompany(c.creatorOwner, c.slug)}>
@@ -166,8 +168,8 @@ export default function CompaniesView() {
           </ul>
         </aside>
         <section class="cm-col">
-          ${!selected && html`<p class="cm-empty">${t('companies.selectHint')}</p>`}
-          ${selected && !profile && html`<div class="cm-center"><div class="spinner"></div></div>`}
+          ${!selected && html`<${EmptyState} text=${t('companies.selectHint')} />`}
+          ${selected && !profile && html`<div class="cm-center"><${Spinner} /></div>`}
           ${profile && html`
             <div class="cm-profile-head">
               <div class="cm-profile-id">
@@ -182,7 +184,7 @@ export default function CompaniesView() {
                 <a class="btn-outline btn-sm cm-pf-link" href=${profile.org.portfolio.publicUrl} target="_blank">${t('companies.viewPortfolio')}</a>`}
             </div>
             <h3 class="cm-form-title">${t('companies.catalogue')}</h3>
-            ${(profile.offerings ?? []).length === 0 && html`<p class="cm-empty">${t('companies.noOfferings')}</p>`}
+            ${(profile.offerings ?? []).length === 0 && html`<${EmptyState} text=${t('companies.noOfferings')} />`}
             <ul class="cm-cat-list">
               ${(profile.offerings ?? []).map(o => html`<${PublicOfferingCard} key=${o.agentName + '/' + o.offerId} o=${o} owner=${selected.owner} slug=${selected.slug} />`)}
             </ul>

package/dist/public/views/help.js CHANGED Viewed

@@ -15,6 +15,7 @@ import htm from 'htm';
 import { t } from '/js/i18n.js';
 import { useViewCSS } from '/components/useViewCSS.js';
 import { CopyButton } from '/components/CopyButton.js';
+import { Spinner } from '/components/Spinner.js';
 const html = htm.bind(h);
@@ -42,7 +43,7 @@ export default function HelpView() {
         <p class="hlp-desc">${t('help.description')}</p>
         <div class="hlp-prompt-wrapper">
-          ${loading && html`<div class="hlp-loading"><div class="spinner"></div></div>`}
+          ${loading && html`<div class="hlp-loading"><${Spinner} /></div>`}
           ${error && html`<p class="hlp-error">${t('help.loadError')}</p>`}
           ${!loading && !error && html`
             <pre class="hlp-prompt-text"><code>${prompt}</code></pre>

package/dist/public/views/invite-accept.js CHANGED Viewed

@@ -6,10 +6,14 @@
  *   visitor registers right here (username + password; the invited email is shown, locked, and
  *   recorded as verified) and is joined in one atomic POST /v1/invitations/:token/accept. An already
  *   registered / already logged-in visitor (including anyone returning from a social sign-in) accepts
- *   as their current account. Social sign-up + existing-user login reuse AIMEAT.auth.showLoginModal
- *   (its social buttons redirect back here logged-in; then "Accept" joins as that account). On accept
- *   the server sets the refresh cookie, so a full navigation to the redirect boots the SPA logged-in.
- * @structure default export InviteAccept() — load invitation → register-and-join OR accept-as-me.
+ *   as their current account — BUT only when that account's verified email matches the invited
+ *   address (recipient binding; the server enforces it and the page warns up front using the GET
+ *   `viewer` verdict, so a wrong signed-in session cannot silently absorb the grant). Social sign-up +
+ *   existing-user login reuse AIMEAT.auth.showLoginModal. On accept the server sets the refresh cookie
+ *   and returns a redirect target (the inviter's allowlisted app return URL, else the profile); a full
+ *   navigation there boots the SPA / opens the app logged-in.
+ * @structure default export InviteAccept() — load invitation (+viewer) → register-and-join OR
+ *   accept-as-me (email-matched) OR wrong-account panel (sign out / switch account).
  * @usage routed at /v1/invite?token=<token> by spa.html
  * @version-history
  *   v1.0.0 — 2026-07-04 — Initial (email invitations for unregistered users).
@@ -18,9 +22,13 @@
  *   v1.1.0 — 2026-07-10 — Social sign-in providers (GET /v1/auth/providers) rendered as co-equal
  *     "Continue with X" buttons: Google was hidden behind a text link, so invited first-timers
  *     concluded a password was mandatory.
+ *   v1.2.0 — 2026-07-18 — SECURITY (invite-hijack): a signed-in visitor whose verified email does NOT
+ *     match the invited address sees a "wrong account" panel (sign out / switch account) instead of an
+ *     accept button; the server's 403 EMAIL_MISMATCH is rendered the same way as a fallback. Re-fetch
+ *     the `viewer` verdict on login/logout. Redirect follows the accept response's return target.
  */
 import { h } from 'preact';
-import { useState, useEffect } from 'preact/hooks';
+import { useState, useEffect, useCallback } from 'preact/hooks';
 import htm from 'htm';
 import { t } from '/js/i18n.js';
 import { api } from '/js/api.js';
@@ -28,14 +36,16 @@ import { escHtml } from '/js/utils.js';
 const html = htm.bind(h);
 const tr = (key, fallback) => { const v = t(key); return v && v !== key ? v : fallback; };
+const fill = (s, vars) => Object.keys(vars).reduce((acc, k) => acc.split(`{${k}}`).join(vars[k]), s);
 export default function InviteAccept() {
   const token = new URLSearchParams(window.location.search).get('token') || '';
-  const [state, setState] = useState({ status: 'loading', inv: null, error: '' });
+  const [state, setState] = useState({ status: 'loading', inv: null, viewer: null, error: '' });
   const [authed, setAuthed] = useState(() => !!window.AIMEAT?.auth?.hasSession);
   const [form, setForm] = useState({ username: '', password: '', display_name: '' });
   const [submitting, setSubmitting] = useState(false);
   const [formError, setFormError] = useState('');
+  const [mismatch, setMismatch] = useState(false); // server said EMAIL_MISMATCH on POST (fallback path)
   const [providers, setProviders] = useState([]);
   // Social sign-in providers, rendered as co-equal buttons — an invited first-timer should not
@@ -56,10 +66,11 @@ export default function InviteAccept() {
   }
   // Become reactive to an in-place login/logout (username/password via the shared modal, or a
-  // logout on this page) so the view flips between the accept-as-me button and the register form.
+  // logout on this page) so the view flips between accept-as-me and the register form, and so we
+  // re-fetch the server's per-session `viewer` verdict for the newly-active (or cleared) session.
   useEffect(() => {
     const onLogin = () => setAuthed(true);
-    const onLogout = () => setAuthed(false);
+    const onLogout = () => { setAuthed(false); setMismatch(false); };
     window.AIMEAT?.auth?.on?.('login', onLogin);
     window.AIMEAT?.auth?.on?.('logout', onLogout);
     return () => {
@@ -68,30 +79,32 @@ export default function InviteAccept() {
     };
   }, []);
-  // Load the invitation details (public).
+  // Load the invitation details (public). Re-runs when the session changes so `viewer.email_matches`
+  // (whether accepting as the current account is allowed) reflects who is actually signed in.
   useEffect(() => {
-    if (!token) { setState({ status: 'error', error: tr('invite.missing', 'This invitation link is missing its token.') }); return undefined; }
+    if (!token) { setState({ status: 'error', inv: null, viewer: null, error: tr('invite.missing', 'This invitation link is missing its token.') }); return undefined; }
     let live = true;
     api('/v1/invitations/' + encodeURIComponent(token))
-      .then((res) => { if (live) setState({ status: 'ready', inv: res.data.invitation, error: '' }); })
-      .catch((e) => { if (live) setState({ status: 'error', error: e.message || tr('invite.invalid', 'This invitation is invalid, was cancelled, or has expired.') }); });
+      .then((res) => { if (live) setState({ status: 'ready', inv: res.data.invitation, viewer: res.data.viewer || null, error: '' }); })
+      .catch((e) => { if (live) setState({ status: 'error', inv: null, viewer: null, error: e.message || tr('invite.invalid', 'This invitation is invalid, was cancelled, or has expired.') }); });
     return () => { live = false; };
-  }, [token]);
+  }, [token, authed]);
   // POST accept: with a body (new account) or empty (accept as the current session). On success the
-  // server set the refresh cookie — a full navigation boots the SPA logged-in at the redirect.
-  async function accept(body) {
-    setSubmitting(true); setFormError('');
+  // server set the refresh cookie + returned a redirect target — a full navigation opens it logged-in.
+  const accept = useCallback(async (body) => {
+    setSubmitting(true); setFormError(''); setMismatch(false);
     try {
       const res = await api('/v1/invitations/' + encodeURIComponent(token) + '/accept', {
         method: 'POST', body: JSON.stringify(body || {}),
       });
       window.location.href = (res && res.data && res.data.redirect) || '/v1/profile#organisms';
     } catch (e) {
+      if (e && e.code === 'EMAIL_MISMATCH') { setMismatch(true); setSubmitting(false); return; }
       setFormError(e.message || tr('invite.acceptFailed', 'Could not accept the invitation.'));
       setSubmitting(false);
     }
-  }
+  }, [token]);
   function acceptAsNew() {
     const username = form.username.trim();
@@ -105,6 +118,13 @@ export default function InviteAccept() {
     if (window.AIMEAT?.auth?.showLoginModal) window.AIMEAT.auth.showLoginModal({ onLogin: () => setAuthed(true) });
   }
+  // Sign out and stay on the accept page, so the visitor can register the invited email or sign in as
+  // the account it belongs to. The 'logout' event handler above re-fetches the viewer verdict.
+  function signOutAndRetry() {
+    try { window.AIMEAT?.auth?.logout?.(); } catch { /* ignore */ }
+    setAuthed(false); setMismatch(false);
+  }
   if (state.status === 'loading') {
     return html`<div class="inv-wrap"><div class="inv-card"><p class="inv-muted">${tr('common.loading', 'Loading…')}</p></div></div>`;
   }
@@ -120,6 +140,7 @@ export default function InviteAccept() {
   }
   const inv = state.inv;
+  const viewer = state.viewer;
   const org = inv.organism || {};
   const workspaces = inv.workspaces || [];
   const summary = html`
@@ -137,7 +158,31 @@ export default function InviteAccept() {
       ${inv.message ? html`<p class="inv-message">“${escHtml(inv.message)}”</p>` : null}
     </div>`;
-  // Already signed in (incl. returning from a social sign-in): accept as the current account.
+  // Signed in, but this account is NOT the invited party (verified email doesn't match) — OR the
+  // server refused a POST with EMAIL_MISMATCH. Never let a wrong account absorb an operator-curated
+  // invitation: explain, and offer to sign out / switch account rather than showing an accept button.
+  const wrongAccount = authed && (mismatch || (viewer && viewer.email_matches === false));
+  if (wrongAccount) {
+    const who = (viewer && viewer.owner) || (window.AIMEAT?.auth?.getSession?.()?.owner) || '';
+    return html`
+      <div class="inv-wrap">
+        <div class="inv-card">
+          <span class="inv-badge">${tr('invite.badge', 'Invitation')}</span>
+          <h1 class="inv-title">${tr('invite.mismatchTitle', 'Wrong account')}</h1>
+          ${summary}
+          <p class="inv-error">
+            ${who ? fill(tr('invite.signedInAs', "You're signed in as {owner}."), { owner: who }) + ' ' : null}
+            ${fill(tr('invite.mismatchBody', 'This invitation was sent to {email}. It can only be accepted by the account whose verified email is that address. Sign out and open the link again, or ask the inviter to add your account directly.'), { email: inv.email || '' })}
+          </p>
+          <div class="inv-actions">
+            <button class="btn-primary inv-btn" onClick=${signOutAndRetry}>${tr('invite.signOutRetry', 'Sign out')}</button>
+            <button class="btn-outline inv-btn" onClick=${signInInstead}>${tr('invite.switchAccount', 'Use a different account')}</button>
+          </div>
+        </div>
+      </div>`;
+  }
+  // Already signed in as the invited party (verified email matches): accept as the current account.
   if (authed) {
     return html`
       <div class="inv-wrap">
@@ -194,7 +239,7 @@ export default function InviteAccept() {
         <div class="inv-or">${tr('invite.or', 'OR')}</div>
         ${providers.map((p) => html`
           <button key=${p.id} class="btn-outline inv-btn inv-signin" onClick=${() => socialSignIn(p)}>
-            ${tr('invite.continueWith', 'Continue with {label}').replace('{label}', p.label || p.id)}
+            ${fill(tr('invite.continueWith', 'Continue with {label}'), { label: p.label || p.id })}
           </button>`)}
         <button class="btn-outline inv-btn inv-signin" onClick=${signInInstead}>
           ${tr('invite.signInInstead', 'Already have an account? Sign in')}