aimeat 1.40.1 → 2.1.0

package/dist/public/views/admin/owners-tab.js

@@ -9,13 +9,15 @@
  *
  * @version-history
  *   v1.0.0 — 2026-07-13 — Header added; file pre-dates header standard
+ *   v1.1.0 — 2026-07-18 — Vaihe 2d: hand-rolled <table> → canonical admin <DataTable> (rows/headers
+ *     model); cell content preserved verbatim.
  */
 import { h } from 'preact';
 import htm from 'htm';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
-import { dt, Empty, useToast, Toast } from './shared.js';
+import { dt, Empty, useToast, Toast, DataTable } from './shared.js';
 import { grantRole } from '/js/services/admin.js';
 import { useConfirm } from '/components/Modal.js';
 
@@ -34,34 +36,22 @@ export default function OwnersTab({ data, reload }) {
 
   return html`
     ${toast && html`<${Toast} ...${toast} onDismiss=${clearToast} />`}
-    <div class="adm-card">
-      <div class="scrollable">
-        <table>
-          <thead><tr>
-            <th>${t('dashboard.name')}</th>
-            <th>${t('dashboard.displayName')}</th>
-            <th>${t('dashboard.roles')}</th>
-            <th>${t('dashboard.agents')}</th>
-            <th>${t('dashboard.created')}</th>
-            <th></th>
-          </tr></thead>
-          <tbody>
-            ${owners.map(ow => {
-              const roles = ow.roles || [];
-              const isOp = roles.includes('operator');
-              return html`<tr>
-                <td><strong>${escHtml(ow.name)}</strong></td>
-                <td>${escHtml(ow.display_name || '\u2014')}</td>
-                <td>${roles.length ? roles.map(r => html`<span class="tag" style="font-size:.75rem">${r}</span> `) : html`<span style="color:var(--text-dim)">—</span>`}</td>
-                <td>${ow.agents ? ow.agents.length : 0}</td>
-                <td style="color:var(--text-dim)">${dt(ow.created_at)}</td>
-                <td>${!isOp && html`<button class="adm-btn-sm" onClick=${() => doGrant(ow.name)}>${t('dashboard.grantOperator')}</button>`}</td>
-              </tr>`;
-            })}
-          </tbody>
-        </table>
-      </div>
-    </div>
+    <${DataTable}
+      scroll=${true}
+      headers=${[t('dashboard.name'), t('dashboard.displayName'), t('dashboard.roles'), t('dashboard.agents'), t('dashboard.created'), '']}
+      rows=${owners.map(ow => {
+        const roles = ow.roles || [];
+        const isOp = roles.includes('operator');
+        return [
+          html`<strong>${escHtml(ow.name)}</strong>`,
+          escHtml(ow.display_name || '—'),
+          roles.length ? html`${roles.map(r => html`<span class="tag" style="font-size:.75rem">${r}</span> `)}` : html`<span style="color:var(--text-dim)">—</span>`,
+          ow.agents ? ow.agents.length : 0,
+          html`<span style="color:var(--text-dim)">${dt(ow.created_at)}</span>`,
+          !isOp && html`<button class="adm-btn-sm" onClick=${() => doGrant(ow.name)}>${t('dashboard.grantOperator')}</button>`,
+        ];
+      })}
+    />
     <${ConfirmUI} />
   `;
 }

package/dist/public/views/admin/push-tab.js

@@ -142,8 +142,8 @@ export default function PushTab({ data, reload }) {
     <${ExpandableHelp} title=${t('dashboard.pushHelpTitle')}>${t('dashboard.pushHelpDetail')}</${ExpandableHelp}>
 
     <div class="adm-flex-wrap adm-mb-lg" style="gap:12px;align-items:stretch">
-      <${StatCard} label=${t('dashboard.totalSubscriptions')} value=${push.total_subscriptions || subs.length} color="#06b6d4" />
-      <${StatCard} label=${t('dashboard.activeSubscriptions')} value=${subs.filter(s => s.active !== false).length} color="#22c55e" />
+      <${StatCard} label=${t('dashboard.totalSubscriptions')} value=${push.total_subscriptions || subs.length} tone="cyan" />
+      <${StatCard} label=${t('dashboard.activeSubscriptions')} value=${subs.filter(s => s.active !== false).length} tone="green" />
       <div style="margin-left:auto;display:flex;flex-direction:column;justify-content:center;gap:6px;align-items:flex-end">
         <div class="adm-flex">
           <button

package/dist/public/views/admin/services-tab.js

@@ -28,10 +28,10 @@ import { ActionScriptEditor } from './services-tab.action-editor.js';
 import { ScaffoldForm } from './services-tab.scaffold-form.js';
 import { AvailableExtCard } from './services-tab.available-card.js';
 
-// Extension name → user-facing SPA URL
-const EXT_SPA_URLS = {
-  'marketplace-behaviors': '/v1/marketplace',
-};
+// Extension name → user-facing SPA URL (the marketplace-behaviors → /v1/marketplace
+// entry was removed with the legacy marketplace SPA view; extensions are managed
+// from this panel now, so the map is currently empty).
+const EXT_SPA_URLS = {};
 
 // ── Inline instance panel for a single extension ──
 function ExtensionPanel({ ext, onUninstall }) {

package/dist/public/views/admin/shared.js

@@ -30,9 +30,15 @@ import { DataTable as GenericDataTable } from '/components/DataTable.js';
 import { num, dt, fmtUp, fmtBytes } from '/js/format.js';
 export { num, dt, fmtUp, fmtBytes };
 
-/** Render a badge */
-export function Badge({ type }) {
-  return html`<span class="adm-badge adm-badge-${type}">${type}</span>`;
+/**
+ * Render a badge. `type` picks the tone class (adm-badge-${type}); the visible
+ * text is `label` when given, else the type word itself (so `<Badge type="public" />`
+ * still reads "public"). Previously `label` was silently dropped — 13 call sites
+ * that pass a human label + a semantic tone (e.g. type="success" label="Active")
+ * showed the tone word instead of the label.
+ */
+export function Badge({ type, label }) {
+  return html`<span class="adm-badge adm-badge-${type}">${label != null ? label : type}</span>`;
 }
 
 /**

package/dist/public/views/admin/sharing-groups-tab.js

@@ -4,6 +4,8 @@
  *   Shows group name, owner, member count, entry count, and creation date.
  * @version-history
  *   v1.0.0 -- 2026-05-21 -- Initial creation for Agent Dashboard Phase 1
+ *   v1.1.0 -- 2026-07-18 -- Vaihe 2d: hand-rolled <table> → canonical admin <DataTable>
+ *     (rows/headers model); cell content preserved verbatim.
  */
 import { h } from 'preact';
 import { useState, useEffect, useCallback } from 'preact/hooks';
@@ -12,7 +14,7 @@ import { onLiveUpdate } from '/lib/live-updates.js';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
-import { num, dt, Empty, StatsGrid } from './shared.js';
+import { num, dt, Empty, StatsGrid, DataTable } from './shared.js';
 import { apiGet } from '/js/api.js';
 
 export default function SharingGroupsTab() {
@@ -48,30 +50,16 @@ export default function SharingGroupsTab() {
       ${groups.length === 0 && !loading && html`<${Empty} text=${t('dashboard.sharingGroupsEmpty')} />`}
 
       ${groups.length > 0 && html`
-        <div class="adm-card">
-          <div class="scrollable">
-            <table>
-              <thead><tr>
-                <th>${t('dashboard.sharingGroupsName')}</th>
-                <th>${t('dashboard.sharingGroupsOwner')}</th>
-                <th>${t('dashboard.sharingGroupsMembers')}</th>
-                <th>${t('dashboard.sharingGroupsEntries')}</th>
-                <th>${t('dashboard.sharingGroupsCreated')}</th>
-              </tr></thead>
-              <tbody>
-                ${groups.map(g => html`
-                  <tr>
-                    <td>${escHtml(g.name)}</td>
-                    <td class="mono" style="font-size:.8rem">${escHtml(g.owner_gaii)}</td>
-                    <td>${num(g.member_count)}</td>
-                    <td>${num(g.entry_count)}</td>
-                    <td style="color:var(--text-dim)">${dt(g.created_at)}</td>
-                  </tr>
-                `)}
-              </tbody>
-            </table>
-          </div>
-        </div>
+        <${DataTable}
+          headers=${[t('dashboard.sharingGroupsName'), t('dashboard.sharingGroupsOwner'), t('dashboard.sharingGroupsMembers'), t('dashboard.sharingGroupsEntries'), t('dashboard.sharingGroupsCreated')]}
+          rows=${groups.map(g => [
+            escHtml(g.name),
+            html`<span class="mono" style="font-size:.8rem">${escHtml(g.owner_gaii)}</span>`,
+            num(g.member_count),
+            num(g.entry_count),
+            html`<span style="color:var(--text-dim)">${dt(g.created_at)}</span>`,
+          ])}
+        />
       `}
     </div>
   `;

package/dist/public/views/admin/stats-tab.js

@@ -60,12 +60,12 @@ function successRate(sent, failed) {
   return ((sent / (sent + failed)) * 100).toFixed(1);
 }
 
-function rateColor(rate) {
-  if (rate === null) return 'var(--text-dim)';
+function rateTone(rate) {
+  if (rate === null) return '';
   const n = parseFloat(rate);
-  if (n >= 95) return '#22c55e';
-  if (n >= 80) return '#eab308';
-  return '#ef4444';
+  if (n >= 95) return 'green';
+  if (n >= 80) return 'amber';
+  return 'red';
 }
 
 /** Sum all values in a day-object whose key starts with `prefix`. */
@@ -235,16 +235,16 @@ export default function StatsTab({ data }) {
     <!-- Tunnel Stats -->
     <h3 class="adm-mt-lg adm-text-sm adm-text-accent">${t('dashboard.tunnelStats')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
-      <${StatCard} label=${html`${t('dashboard.tunnelActive')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${gs.tunnel_connections_active ?? ts.connections_active ?? 0} color="#22c55e" />
+      <${StatCard} label=${html`${t('dashboard.tunnelActive')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${gs.tunnel_connections_active ?? ts.connections_active ?? 0} tone="green" />
       <${StatCard} label=${t('dashboard.tunnelTotal')} value=${ts.connections_total || 0} />
-      <${StatCard} label=${t('dashboard.tunnelDisconnections')} value=${ts.disconnections_total || 0} color="#eab308" />
-      <${StatCard} label=${t('dashboard.tunnelReconnects')} value=${ts.reconnects_total || 0} color="#3b82f6" />
+      <${StatCard} label=${t('dashboard.tunnelDisconnections')} value=${ts.disconnections_total || 0} tone="amber" />
+      <${StatCard} label=${t('dashboard.tunnelReconnects')} value=${ts.reconnects_total || 0} tone="blue" />
     </div>
     <div class="adm-grid adm-grid-4">
       <${StatCard} label=${t('dashboard.tunnelMsgSent')} value=${ts.messages_sent_total || 0} />
       <${StatCard} label=${t('dashboard.tunnelMsgReceived')} value=${ts.messages_received_total || 0} />
-      <${StatCard} label=${t('dashboard.tunnelDeliveryFails')} value=${ts.delivery_failures_total || 0} color=${ts.delivery_failures_total > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.tunnelHeartbeatMisses')} value=${ts.heartbeat_misses_total || 0} color=${ts.heartbeat_misses_total > 0 ? '#eab308' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.tunnelDeliveryFails')} value=${ts.delivery_failures_total || 0} tone=${ts.delivery_failures_total > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.tunnelHeartbeatMisses')} value=${ts.heartbeat_misses_total || 0} tone=${ts.heartbeat_misses_total > 0 ? 'amber' : 'green'} />
     </div>
     <div class="adm-grid adm-grid-2">
       <div class="adm-card">
@@ -261,12 +261,12 @@ export default function StatsTab({ data }) {
     <div class="adm-grid adm-grid-4 adm-mt-md">
       <${StatCard} label=${html`${t('dashboard.mailboxItems')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${gs.mailbox_items_total ?? ms.items_total ?? 0} />
       <${StatCard} label=${html`${t('dashboard.mailboxBytes')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${fmtBytes(gs.mailbox_bytes_total ?? ms.bytes_total ?? 0)} />
-      <${StatCard} label=${t('dashboard.mailboxEnqueued')} value=${ms.enqueued_total || 0} color="#3b82f6" />
-      <${StatCard} label=${t('dashboard.mailboxDelivered')} value=${ms.delivered_total || 0} color="#22c55e" />
+      <${StatCard} label=${t('dashboard.mailboxEnqueued')} value=${ms.enqueued_total || 0} tone="blue" />
+      <${StatCard} label=${t('dashboard.mailboxDelivered')} value=${ms.delivered_total || 0} tone="green" />
     </div>
     <div class="adm-grid adm-grid-4">
-      <${StatCard} label=${t('dashboard.mailboxExpired')} value=${ms.expired_total || 0} color=${ms.expired_total > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.mailboxQuotaRejects')} value=${ms.quota_rejections_total || 0} color=${ms.quota_rejections_total > 0 ? '#ef4444' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.mailboxExpired')} value=${ms.expired_total || 0} tone=${ms.expired_total > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.mailboxQuotaRejects')} value=${ms.quota_rejections_total || 0} tone=${ms.quota_rejections_total > 0 ? 'red' : 'green'} />
       <${StatCard} label=${html`${t('dashboard.mailboxOldestAge')} <span class="adm-badge-live">${t('dashboard.live')}</span>`} value=${fmtUp(gs.mailbox_oldest_item_age_seconds ?? ms.oldest_item_age_seconds ?? 0)} color="var(--text-dim)" />
     </div>
 
@@ -274,9 +274,9 @@ export default function StatsTab({ data }) {
     <h3 class="adm-mt-lg adm-text-sm adm-section-cyan">${t('dashboard.emailDelivery')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
       <${StatCard} label=${t('dashboard.emailsSent')} value=${emailSent} />
-      <${StatCard} label=${t('dashboard.emailsFailed')} value=${emailFailed} color=${emailFailed > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.emailsRetried')} value=${emailRetried} color=${emailRetried > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.successRate')} value=${emailRate !== null ? emailRate + '%' : '—'} color=${rateColor(emailRate)} />
+      <${StatCard} label=${t('dashboard.emailsFailed')} value=${emailFailed} tone=${emailFailed > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.emailsRetried')} value=${emailRetried} tone=${emailRetried > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.successRate')} value=${emailRate !== null ? emailRate + '%' : '—'} tone=${rateTone(emailRate)} />
     </div>
     ${sd.email_sent_by_type ? html`
       <div class="adm-card adm-mt-md">
@@ -295,9 +295,9 @@ export default function StatsTab({ data }) {
     <h3 class="adm-mt-lg adm-text-sm adm-section-violet">${t('dashboard.pushDelivery')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
       <${StatCard} label=${t('dashboard.pushSent')} value=${pushSent} />
-      <${StatCard} label=${t('dashboard.pushFailed')} value=${pushFailed} color=${pushFailed > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.expiredSubs')} value=${pushExpired} color=${pushExpired > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.successRate')} value=${pushRate !== null ? pushRate + '%' : '—'} color=${rateColor(pushRate)} />
+      <${StatCard} label=${t('dashboard.pushFailed')} value=${pushFailed} tone=${pushFailed > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.expiredSubs')} value=${pushExpired} tone=${pushExpired > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.successRate')} value=${pushRate !== null ? pushRate + '%' : '—'} tone=${rateTone(pushRate)} />
     </div>
     ${sd.push_sent_by_type ? html`
       <div class="adm-card adm-mt-md">
@@ -315,8 +315,8 @@ export default function StatsTab({ data }) {
     <h3 class="adm-mt-lg adm-text-sm adm-section-amber">${t('dashboard.mailboxNotifications')}</h3>
     <div class="adm-grid adm-grid-3 adm-mt-md">
       <${StatCard} label=${t('dashboard.mailboxNotifSent')} value=${mboxSent} />
-      <${StatCard} label=${t('dashboard.mailboxNotifFailed')} value=${mboxFailed} color=${mboxFailed > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.mailboxNotifBlocked')} value=${mboxBlocked} color=${mboxBlocked > 0 ? '#eab308' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.mailboxNotifFailed')} value=${mboxFailed} tone=${mboxFailed > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.mailboxNotifBlocked')} value=${mboxBlocked} tone=${mboxBlocked > 0 ? 'amber' : 'green'} />
     </div>
     ${(sd.mailbox_notif_blocked_by_type || sd.mailbox_notif_sent_by_type) ? html`
       <div class="adm-card adm-mt-md adm-text-sm adm-mailbox-inline">
@@ -341,24 +341,24 @@ export default function StatsTab({ data }) {
     <!-- Consent Permission Stats -->
     <h3 class="adm-mt-lg adm-text-sm adm-section-purple">${t('dashboard.consentPermStats')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
-      <${StatCard} label=${t('dashboard.consentActiveRules')} value=${cs.active_rules || 0} color="#a855f7" />
-      <${StatCard} label=${t('dashboard.consentByGaii')} value=${cs.by_gaii || 0} color="#3b82f6" />
-      <${StatCard} label=${t('dashboard.consentByGhii')} value=${cs.by_ghii || 0} color="#a855f7" />
-      <${StatCard} label=${t('dashboard.consentByOrganism')} value=${cs.by_organism || 0} color="#22c55e" />
+      <${StatCard} label=${t('dashboard.consentActiveRules')} value=${cs.active_rules || 0} tone="purple" />
+      <${StatCard} label=${t('dashboard.consentByGaii')} value=${cs.by_gaii || 0} tone="blue" />
+      <${StatCard} label=${t('dashboard.consentByGhii')} value=${cs.by_ghii || 0} tone="purple" />
+      <${StatCard} label=${t('dashboard.consentByOrganism')} value=${cs.by_organism || 0} tone="green" />
     </div>
     <div class="adm-grid adm-grid-4">
-      <${StatCard} label=${t('dashboard.consentByDomain')} value=${cs.by_domain || 0} color="#eab308" />
+      <${StatCard} label=${t('dashboard.consentByDomain')} value=${cs.by_domain || 0} tone="amber" />
       <${StatCard} label=${t('dashboard.consentByNode')} value=${cs.by_node || 0} color="var(--text-dim)" />
-      <${StatCard} label=${t('dashboard.consentByWildcard')} value=${cs.by_wildcard || 0} color=${cs.by_wildcard > 0 ? '#ef4444' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.consentByWildcard')} value=${cs.by_wildcard || 0} tone=${cs.by_wildcard > 0 ? 'red' : 'green'} />
       <${StatCard} label=${t('dashboard.consentDataPatterns')} value=${cs.unique_patterns || 0} />
     </div>
 
     <!-- Security Stats -->
     <h3 class="adm-mt-lg adm-text-sm adm-section-red">${t('dashboard.securityStats')}</h3>
     <div class="adm-grid adm-grid-4 adm-mt-md">
-      <${StatCard} label=${t('dashboard.authFailures')} value=${sd.auth_failures_total || 0} color=${sd.auth_failures_total > 0 ? '#ef4444' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.rateLimitHits')} value=${sd.rate_limit_hits_total || 0} color=${sd.rate_limit_hits_total > 0 ? '#eab308' : '#22c55e'} />
-      <${StatCard} label=${t('dashboard.scopeDenials')} value=${sd.scope_denials_total || 0} color=${sd.scope_denials_total > 0 ? '#eab308' : '#22c55e'} />
+      <${StatCard} label=${t('dashboard.authFailures')} value=${sd.auth_failures_total || 0} tone=${sd.auth_failures_total > 0 ? 'red' : 'green'} />
+      <${StatCard} label=${t('dashboard.rateLimitHits')} value=${sd.rate_limit_hits_total || 0} tone=${sd.rate_limit_hits_total > 0 ? 'amber' : 'green'} />
+      <${StatCard} label=${t('dashboard.scopeDenials')} value=${sd.scope_denials_total || 0} tone=${sd.scope_denials_total > 0 ? 'amber' : 'green'} />
     </div>
   `;
 }
@@ -431,7 +431,7 @@ async function renderAllCharts(sd, chartRefs) {
       labels: weekLabels,
       datasets: [
         { label: t('dashboard.thisWeek') || 'This week', data: getWeekData(0), borderColor: '#3b82f6', backgroundColor: '#3b82f622', fill: true },
-        { label: t('dashboard.lastWeek') || 'Last week', data: getWeekData(1), borderColor: '#22c55e', backgroundColor: '#22c55e22', fill: true },
+        { label: t('dashboard.lastWeek') || 'Last week', data: getWeekData(1), borderColor: 'green', backgroundColor: '#22c55e22', fill: true },
       ],
     }, options: chartOpts });
   }
@@ -452,7 +452,7 @@ async function renderAllCharts(sd, chartRefs) {
     refs.chartTunnel = new Chart(tc, { type: 'doughnut', data: {
       labels: [t('dashboard.tunnelMsgSent') || 'Sent', t('dashboard.tunnelMsgReceived') || 'Received', t('dashboard.tunnelDeliveryFails') || 'Rejected', t('dashboard.tunnelMailboxFallbacks') || 'Fallbacks'],
       datasets: [{ data: [tunnel.messages_sent_total || 0, tunnel.messages_received_total || 0, tunnel.delivery_failures_total || 0, tunnel.mailbox_fallbacks_total || 0],
-        backgroundColor: ['#3b82f6', '#22c55e', '#ef4444', '#eab308'] }],
+        backgroundColor: ['#3b82f6', 'green', 'red', 'amber'] }],
     }, options: { responsive: true, plugins: { legend: { labels: { color: '#94a3b8' } } } } });
   }
 

package/dist/public/views/admin.js

@@ -4,6 +4,8 @@
  * @structure Single `loadAll` fetches all dashboard data; tabs render slices of it. SSE
  *            live-updates trigger a debounced, silent background refresh.
  * @version-history
+ *   v1.5.0 — 2026-07-16 — Drop the per-item emoji icons from the sidebar nav and page title
+ *     (label-only menu — the icons added visual noise without aiding scanning).
  *   v1.1.0 — 2026-06-18 — Debounce + silence SSE-driven refresh so busy nodes don't flicker "Loading…".
  *   v1.1.1 — 2026-06-19 — JSDoc type annotations for frontend type-checking
  *   v1.2.0 — 2026-06-24 — Add Applications moderation tab (operator hide/restore apps).
@@ -32,6 +34,7 @@ import MaintenanceTab  from './admin/maintenance-tab.js';
 import HooksTab        from './admin/hooks-tab.js';
 import PortalTab       from './admin/portal-tab.js';
 import StatsTab        from './admin/stats-tab.js';
+import DatabaseTab     from './admin/database-tab.js';
 import UsageTab        from './admin/usage-tab.js';
 import OwnersTab       from './admin/owners-tab.js';
 import AgentsTab       from './admin/agents-tab.js';
@@ -42,6 +45,7 @@ import ChatInstancesTab from './admin/chat-instances-tab.js';
 import RealtimeTab     from './admin/realtime-tab.js';
 import WorkTab         from './admin/work-tab.js';
 import MessagesAdminTab from './admin/messages-tab.js';
+import FeedbackAdminTab from './admin/feedback-tab.js';
 import EmailTab        from './admin/email-tab.js';
 import PushTab         from './admin/push-tab.js';
 import DirectoryTab    from './admin/directory-tab.js';
@@ -58,7 +62,6 @@ import KnowledgeAdminTab from './admin/knowledge-tab.js';
 import PromptsTab        from './admin/prompts-tab.js';
 import PackagesAdminTab  from './admin/packages-tab.js';
 import MemoryAdminTab    from './admin/memory-tab.js';
-import GeneratorDebugTab from './admin/generator-debug-tab.js';
 import CapabilitiesAdminTab from './admin/capabilities-tab.js';
 import AgentTasksAdminTab from './admin/agent-tasks-tab.js';
 import SharingGroupsAdminTab from './admin/sharing-groups-tab.js';
@@ -70,68 +73,69 @@ import SkillsAdminTab      from './admin/skills-tab.js';
 // ── Sidebar nav structure ──
 const NAV_GROUPS = [
   { key: 'dashboard.navNode', items: [
-    { id: 'overview',     icon: '\u{1F4CA}', key: 'dashboard.overview',   component: OverviewTab },
-    { id: 'economy',      icon: '\u{1FA99}', key: 'dashboard.economy',    component: EconomyTab },
-    { id: 'config',       icon: '\u2699',    key: 'dashboard.config',     component: ConfigTab },
-    { id: 'security',     icon: '\u{1F6E1}', key: 'admin.security.title',  component: SecurityTab },
-    { id: 'cors',         icon: '\u{1F512}', key: 'dashboard.cors',       component: CorsTab },
-    { id: 'maintenance',  icon: '\u{1F6A7}', key: 'dashboard.maintenance',component: MaintenanceTab },
-    { id: 'hooks',        icon: '\u{1F517}', key: 'dashboard.hooks',      component: HooksTab },
-    { id: 'portal',       icon: '\u{1F310}', key: 'dashboard.portal',     component: PortalTab },
-    { id: 'subdomains',   icon: '\u{1F517}', key: 'admin.subdomains.title', component: SubdomainsAdminTab },
-    { id: 'stats',        icon: '\u{1F4C8}', key: 'dashboard.stats',      component: StatsTab },
-    { id: 'usage',        icon: '\u{1F4B8}', key: 'dashboard.usage',      component: UsageTab },
-    { id: 'prompts',      icon: '\u{1F4DD}', key: 'dashboard.promptsTab', component: PromptsTab },
+    { id: 'overview',     key: 'dashboard.overview',   component: OverviewTab },
+    { id: 'economy',      key: 'dashboard.economy',    component: EconomyTab },
+    { id: 'config',       key: 'dashboard.config',     component: ConfigTab },
+    { id: 'security',     key: 'admin.security.title',  component: SecurityTab },
+    { id: 'cors',         key: 'dashboard.cors',       component: CorsTab },
+    { id: 'maintenance',  key: 'dashboard.maintenance',component: MaintenanceTab },
+    { id: 'hooks',        key: 'dashboard.hooks',      component: HooksTab },
+    { id: 'portal',       key: 'dashboard.portal',     component: PortalTab },
+    { id: 'subdomains',   key: 'admin.subdomains.title', component: SubdomainsAdminTab },
+    { id: 'stats',        key: 'dashboard.stats',      component: StatsTab },
+    { id: 'database',     key: 'dashboard.database',   component: DatabaseTab },
+    { id: 'usage',        key: 'dashboard.usage',      component: UsageTab },
+    { id: 'prompts',      key: 'dashboard.promptsTab', component: PromptsTab },
   ]},
   { key: 'dashboard.navIdentity', items: [
-    { id: 'owners',  icon: '\u{1F464}', key: 'dashboard.owners',  component: OwnersTab,  count: 'owners' },
-    { id: 'agents',  icon: '\u{1F916}', key: 'dashboard.agents',  component: AgentsTab,  count: 'agents' },
-    { id: 'ghii',    icon: '\u{1F511}', key: 'dashboard.ghii',    component: GhiiTab,    count: 'ghii' },
-    { id: 'agent-integration', icon: '\u{1F50C}', key: 'admin.tabs.agentIntegration', component: AgentIntegrationAdminTab },
+    { id: 'owners',  key: 'dashboard.owners',  component: OwnersTab,  count: 'owners' },
+    { id: 'agents',  key: 'dashboard.agents',  component: AgentsTab,  count: 'agents' },
+    { id: 'ghii',    key: 'dashboard.ghii',    component: GhiiTab,    count: 'ghii' },
+    { id: 'agent-integration', key: 'admin.tabs.agentIntegration', component: AgentIntegrationAdminTab },
   ]},
   { key: 'dashboard.navData', items: [
-    { id: 'actions',       icon: '\u26A1',     key: 'dashboard.actions',       component: ActionsTab,        count: 'actions' },
-    { id: 'boards',        icon: '\u{1F4CB}',  key: 'dashboard.boards',        component: BoardsTab,         count: 'boards' },
-    { id: 'chatInstances', icon: '\u{1F4AC}',  key: 'dashboard.chatInstances', component: ChatInstancesTab,  count: 'chatInstances' },
-    { id: 'realtime',      icon: '\u{1F4E1}',  key: 'dashboard.realtime',      component: RealtimeTab,       count: 'rooms' },
-    { id: 'work',          icon: '\u{1F4E6}',  key: 'dashboard.work',          component: WorkTab,           count: 'work' },
-    { id: 'messages',      icon: '\u{1F4EC}',  key: 'admin.messages.title',    component: MessagesAdminTab },
-    { id: 'memory-admin',  icon: '\u{1F5C4}',  key: 'dashboard.memoryAdmin',   component: MemoryAdminTab },
-    { id: 'agent-tasks',  icon: '\u{1F4CB}',  key: 'dashboard.agentTasksTab', component: AgentTasksAdminTab },
-    { id: 'sharing-groups', icon: '\u{1F465}', key: 'dashboard.sharingGroupsTab', component: SharingGroupsAdminTab },
-    { id: 'capabilities', icon: '⚡',     key: 'capabilities.adminTitle', component: CapabilitiesAdminTab },
-    { id: 'apps',         icon: '\u{1F4F1}', key: 'admin.apps.title',        component: AppsAdminTab },
+    { id: 'actions',       key: 'dashboard.actions',       component: ActionsTab,        count: 'actions' },
+    { id: 'boards',        key: 'dashboard.boards',        component: BoardsTab,         count: 'boards' },
+    { id: 'chatInstances', key: 'dashboard.chatInstances', component: ChatInstancesTab,  count: 'chatInstances' },
+    { id: 'realtime',      key: 'dashboard.realtime',      component: RealtimeTab,       count: 'rooms' },
+    { id: 'work',          key: 'dashboard.work',          component: WorkTab,           count: 'work' },
+    { id: 'messages',      key: 'admin.messages.title',    component: MessagesAdminTab },
+    { id: 'feedback',      key: 'admin.feedback.title',    component: FeedbackAdminTab },
+    { id: 'memory-admin',  key: 'dashboard.memoryAdmin',   component: MemoryAdminTab },
+    { id: 'agent-tasks',  key: 'dashboard.agentTasksTab', component: AgentTasksAdminTab },
+    { id: 'sharing-groups', key: 'dashboard.sharingGroupsTab', component: SharingGroupsAdminTab },
+    { id: 'capabilities', key: 'capabilities.adminTitle', component: CapabilitiesAdminTab },
+    { id: 'apps',         key: 'admin.apps.title',        component: AppsAdminTab },
   ]},
   { key: 'dashboard.navInfrastructure', items: [
-    { id: 'email',  icon: '\u2709',     key: 'dashboard.email',  component: EmailTab },
-    { id: 'push',   icon: '\u{1F514}',  key: 'dashboard.push',   component: PushTab },
-    { id: 'consul',    icon: '\u{1F5C4}',  key: 'dashboard.consul',    component: ConsulTab },
-    { id: 'scheduler', icon: '\u{23F0}',   key: 'dashboard.scheduler', component: SchedulerTab },
-    { id: 'generator-debug', icon: '\u{1F41E}', key: 'dashboard.generatorDebug', component: GeneratorDebugTab },
+    { id: 'email',  key: 'dashboard.email',  component: EmailTab },
+    { id: 'push',   key: 'dashboard.push',   component: PushTab },
+    { id: 'consul',    key: 'dashboard.consul',    component: ConsulTab },
+    { id: 'scheduler', key: 'dashboard.scheduler', component: SchedulerTab },
   ]},
   { key: 'dashboard.navServices', items: [
-    { id: 'directory',   icon: '\u{1F4D6}', key: 'dashboard.directory',      component: DirectoryTab },
-    { id: 'matching',    icon: '\u{1F91D}', key: 'dashboard.matching',       component: MatchingTab },
-    { id: 'services',    icon: '\u{1F9E9}', key: 'dashboard.services',       component: ServicesTab },
-    { id: 'cortex',      icon: '\u{1F4E6}', key: 'dashboard.cortexTab',      component: CortexTab },
-    { id: 'csm',         icon: '\u{1F4E6}', key: 'dashboard.csmManagement',  component: CsmTab },
-    { id: 'knowledge',   icon: '\u{1F9E0}', key: 'knowledge.operator.tabLabel', component: KnowledgeAdminTab },
-    { id: 'skills',      icon: '\u{1F393}', key: 'dashboard.skills.tabLabel',  component: SkillsAdminTab },
-    { id: 'packages',    icon: '\u{1F9F0}', key: 'dashboard.packagesTab',      component: PackagesAdminTab },
+    { id: 'directory',   key: 'dashboard.directory',      component: DirectoryTab },
+    { id: 'matching',    key: 'dashboard.matching',       component: MatchingTab },
+    { id: 'services',    key: 'dashboard.services',       component: ServicesTab },
+    { id: 'cortex',      key: 'dashboard.cortexTab',      component: CortexTab },
+    { id: 'csm',         key: 'dashboard.csmManagement',  component: CsmTab },
+    { id: 'knowledge',   key: 'knowledge.operator.tabLabel', component: KnowledgeAdminTab },
+    { id: 'skills',      key: 'dashboard.skills.tabLabel',  component: SkillsAdminTab },
+    { id: 'packages',    key: 'dashboard.packagesTab',      component: PackagesAdminTab },
   ]},
   { key: 'dashboard.navIntegrations', items: [
-    { id: 'msm', icon: '\u{1F50C}', key: 'dashboard.msmManagement', component: MsmTab, count: 'msm' },
+    { id: 'msm', key: 'dashboard.msmManagement', component: MsmTab, count: 'msm' },
   ]},
   { key: 'dashboard.navFederation', items: [
-    { id: 'federation', icon: '\u{1F310}', key: 'dashboard.federation', component: FederationTab, count: 'peers' },
-    { id: 'genesis',    icon: '\u{1F30D}', key: 'dashboard.genesis',    component: GenesisTab,    count: 'genesis' },
+    { id: 'federation', key: 'dashboard.federation', component: FederationTab, count: 'peers' },
+    { id: 'genesis',    key: 'dashboard.genesis',    component: GenesisTab,    count: 'genesis' },
   ]},
 ];
 
-// Page icon+title lookup
+// Page title lookup
 const PAGE_TITLES = {};
 NAV_GROUPS.forEach(g => g.items.forEach(i => {
-  PAGE_TITLES[i.id] = { icon: i.icon, key: i.key };
+  PAGE_TITLES[i.id] = { key: i.key };
 }));
 
 export default function Admin({ navigate, locale }) {
@@ -386,7 +390,7 @@ export default function Admin({ navigate, locale }) {
   const allItems = NAV_GROUPS.flatMap(g => g.items);
   const activeItem = allItems.find(i => i.id === activePage) || allItems[0];
   const ActiveComponent = activeItem.component;
-  const pageInfo = PAGE_TITLES[activePage] || { icon: '', key: '' };
+  const pageInfo = PAGE_TITLES[activePage] || { key: '' };
 
   const tabProps = { data, reload: loadAll, session, navigate, locale, switchPage };
 
@@ -403,7 +407,6 @@ export default function Admin({ navigate, locale }) {
               class="adm-nav-item ${activePage === item.id ? 'active' : ''}"
               onClick=${() => switchPage(item.id)}
             >
-              <span class="icon">${item.icon}</span>
               <span class="label">${t(item.key)}</span>
               ${item.count != null && counts[item.count] != null
                 ? html`<span class="cnt">${counts[item.count]}</span>`
@@ -417,7 +420,7 @@ export default function Admin({ navigate, locale }) {
       <div class="adm-main">
         <div class="adm-topbar">
           <div class="adm-page-title">
-            <span class="icon">${pageInfo.icon}</span> ${t(pageInfo.key)}
+            ${t(pageInfo.key)}
           </div>
           <div class="adm-topbar-right">
             <button class="adm-btn" onClick=${loadAll} disabled=${loading}>

package/dist/public/views/app-grant.js

@@ -17,6 +17,11 @@
  *   v1.0.0 — 2026-06-20 — Initial (H-2 app-origin isolation, Phase 3: consent page).
  *   v1.1.0 — 2026-06-20 — Popup (web_message) delivery + "trust this app" reframe + Advanced
  *     per-scope subset selection (consent flow wired to apps via the SDK).
+ *   v1.2.0 — 2026-07-19 — Own-app + scope-upgrade fixes (Band Jam findings): the signed-in owner's
+ *     OWN app (server-verified origin_bound + app_owner) auto-approves like the silent bridge and
+ *     shows "Your app" instead of "not yours"; manage mode pre-checks the UNION of granted +
+ *     requested scopes and badges newly requested ones "new" (they used to come unchecked, so
+ *     users silently kept the old grant after an app added a scope).
  */
 import { h } from 'preact';
 import { useState, useEffect } from 'preact/hooks';
@@ -34,6 +39,7 @@ export default function AppGrant() {
   const [advanced, setAdvanced] = useState(false);
   const [selected, setSelected] = useState(() => new Set());
   const [existingGrant, setExistingGrant] = useState(null); // the grant this app already holds (manage mode)
+  const [ownApp, setOwnApp] = useState(false); // server-verified: origin-bound request for the signed-in owner's own app
 
   const requestId = new URLSearchParams(window.location.search).get('req') || '';
   const [authed, setAuthed] = useState(() => !!window.AIMEAT?.auth?.hasSession);
@@ -67,9 +73,19 @@ export default function AppGrant() {
         } catch { /* ignore */ }
         if (!live) return;
         const reqScopes = (res.data.scopes || []).map((s) => s.scope);
-        const granted = grant ? grant.scopes : reqScopes;
+        // The owner's OWN app (server-verified: the redirect origin is bound to exactly this app):
+        // same auto-approve policy as the silent bridge — their own app never needs the trust prompt.
+        // The server computes `own` independently at consent time, so this is UX, not the gate.
+        const myOwner = (window.AIMEAT?.auth?.storedGhii || '').split('@')[0];
+        const own = !!(res.data.origin_bound && res.data.app_owner && myOwner && myOwner === res.data.app_owner);
+        // Pre-check the UNION of already-granted and now-requested scopes: an app update that added
+        // a scope must surface it CHECKED — presenting it unchecked made users keep the old grant
+        // without noticing (the Band Jam scope-upgrade trap).
+        const granted = grant ? [...new Set([...grant.scopes, ...reqScopes])] : reqScopes;
         setExistingGrant(grant);
         setSelected(new Set(granted));
+        setOwnApp(own);
+        if (own && !res.data.manage) { setState({ status: 'autoapprove', request: res.data }); return; }
         // Pass-through: when NOT explicitly managing (the gear) and the app already holds a grant that
         // covers what it's asking for, just approve silently — no second prompt for an app you trust.
         const covers = grant && reqScopes.every((s) => grant.scopes.includes(s));
@@ -170,13 +186,15 @@ export default function AppGrant() {
   return html`
     <div class="agr-wrap">
       <div class="agr-card">
-        <span class="agr-badge">${tr('appGrant.externalBadge', 'External app')}</span>
+        <span class="agr-badge ${ownApp ? 'agr-badge-own' : ''}">${ownApp ? tr('appGrant.ownBadge', 'Your app') : tr('appGrant.externalBadge', 'External app')}</span>
         <h1 class="agr-title">${existingGrant ? tr('appGrant.manageTitle', 'Manage this app’s access') : tr('appGrant.trustTitle', 'Trust this app?')}</h1>
         <div class="agr-app">
           <div class="agr-app-name">${escHtml(req.app_name)}</div>
           <div class="agr-app-origin">${escHtml(req.app_origin)}</div>
         </div>
-        <p class="agr-muted">${tr('appGrant.trustIntro', 'This app is not yours. It gets its OWN scoped, revocable key — never your login session. You can revoke it anytime in Profile › Access.')}</p>
+        <p class="agr-muted">${ownApp
+          ? tr('appGrant.ownIntro', 'This is your own app. It still uses a scoped, revocable key — never your login session.')
+          : tr('appGrant.trustIntro', 'This app is not yours. It gets its OWN scoped, revocable key — never your login session. You can revoke it anytime in Profile › Access.')}</p>
 
         <div class="agr-scopes-label">${tr('appGrant.needsLabel', 'This app needs:')}</div>
         <ul class="agr-scopes">
@@ -186,7 +204,9 @@ export default function AppGrant() {
                 <input type="checkbox" class="agr-scope-check" checked=${selected.has(s.scope)}
                   onChange=${() => toggle(s.scope)} aria-label=${s.scope} />`}
               <span class="agr-scope-text">
-                <span class="agr-scope-desc">${escHtml(s.description || s.scope)}</span>
+                <span class="agr-scope-desc">${escHtml(s.description || s.scope)}
+                  ${existingGrant && !existingGrant.scopes.includes(s.scope) && html`<span class="agr-scope-newbadge">${tr('appGrant.newScope', 'new')}</span>`}
+                </span>
                 <span class="agr-scope-name">${escHtml(s.scope)}</span>
               </span>
             </li>`)}