aimeat 1.40.1 → 2.1.0

package/dist/public/views/profile/calibrator-tab.js

@@ -10,6 +10,8 @@
  *   v1.0.0 — 2026-03-29 — Initial implementation
  *   v1.1.0 — 2026-03-29 — Extract LlmConfigEditor and CalibrationChart into separate files
  *   v2.0.0 — 2026-03-29 — V2 redesign: batch-based 4-step flow, score bars, template sections
+ *   v2.1.0 — 2026-07-16 — Detail-view mount folds its 4-request waterfall into one GET /v1/calibrator/:id/detail
+ *     (getProjectDetail); individual loaders kept as fallback + interactive re-fetch.
  */
 
 import { h } from 'preact';
@@ -19,11 +21,12 @@ const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { apiGet, apiDelete } from '/js/api.js';
 import { CopyButton } from '/components/CopyButton.js';
+import { useConfirm } from '/components/Modal.js';
 import LlmConfigEditor from '/views/profile/calibrator-llm-editor.js';
 import CalibrationChart from '/views/profile/calibrator-chart.js';
 import BatchCard from '/views/profile/calibrator-batch.js';
 import {
-  listProjects, createProject, getProject, updateProject, deleteProject,
+  listProjects, createProject, getProject, getProjectDetail, updateProject, deleteProject,
   listVersions, getVersion, createVersion,
   listBatches, createBatch,
   getTemplateDefaults,
@@ -120,6 +123,7 @@ function ProjectListView({ onSelect, showToast }) {
 // ── Detail View ──
 
 function ProjectDetailView({ projectId, onBack, showToast }) {
+  const { confirm, ConfirmUI } = useConfirm();
   const [project, setProject] = useState(null);
   const [dimensions, setDimensions] = useState([]);
   const [versions, setVersions] = useState([]);
@@ -153,39 +157,65 @@ function ProjectDetailView({ projectId, onBack, showToast }) {
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 
-  async function loadProject() {
-    try {
-      const { project: proj, dimensions: dims } = await getProject(projectId);
-      setProject(proj);
-      setDimensions(dims || []);
-      setTemplates({
-        analysis: proj.analysisPromptTemplate || '',
-        reflection: proj.reflectionPromptTemplate || '',
-        selfReflection: proj.selfReflectionPromptTemplate || '',
-        synthesis: proj.synthesisPromptTemplate || '',
-      });
-
-      const vers = await listVersions(projectId);
-      setVersions(vers);
+  function applyProject(proj) {
+    setProject(proj);
+    setTemplates({
+      analysis: proj.analysisPromptTemplate || '',
+      reflection: proj.reflectionPromptTemplate || '',
+      selfReflection: proj.selfReflectionPromptTemplate || '',
+      synthesis: proj.synthesisPromptTemplate || '',
+    });
+  }
 
-      if (proj.currentVersion > 0) {
-        const ver = await getVersion(projectId, proj.currentVersion);
-        setCurrentVersion(ver);
-        setPrompt(ver.prompt || '');
-        setTargetOutput(ver.targetOutput || '');
-        setSelectedVersion(ver.version);
+  // Data migration: clean up old V1 run keys (silently). One-time legacy cleanup, kept out of the mount
+  // composite because it deletes.
+  async function cleanupLegacyRuns() {
+    try {
+      const resp = await apiGet(`/v1/memory?prefix=calibrator.${projectId}.run.&tags=calibrator,run`);
+      const oldRuns = resp?.data?.entries || [];
+      for (const r of oldRuns) {
+        try { await apiDelete(`/v1/memory/${encodeURIComponent(r.key)}`); } catch { /* ignore */ }
       }
+    } catch { /* ignore migration errors */ }
+  }
 
-      setBatches(await listBatches(projectId));
+  // Fallback path: the individual four-request waterfall, used when the composite is unavailable.
+  async function loadProjectIndividually() {
+    const { project: proj, dimensions: dims } = await getProject(projectId);
+    applyProject(proj);
+    setDimensions(dims || []);
+    const vers = await listVersions(projectId);
+    setVersions(vers);
+    if (proj.currentVersion > 0) {
+      const ver = await getVersion(projectId, proj.currentVersion);
+      setCurrentVersion(ver);
+      setPrompt(ver.prompt || '');
+      setTargetOutput(ver.targetOutput || '');
+      setSelectedVersion(ver.version);
+    }
+    setBatches(await listBatches(projectId));
+  }
 
-      // Data migration: clean up old V1 run keys (silently)
-      try {
-        const resp = await apiGet(`/v1/memory?prefix=calibrator.${projectId}.run.&tags=calibrator,run`);
-        const oldRuns = resp?.data?.entries || [];
-        for (const r of oldRuns) {
-          try { await apiDelete(`/v1/memory/${encodeURIComponent(r.key)}`); } catch { /* ignore */ }
+  async function loadProject() {
+    try {
+      // Composite mount: project + dimensions + versions + current version + batches in one call.
+      const detail = await getProjectDetail(projectId);
+      if (detail?.project) {
+        applyProject(detail.project);
+        setDimensions(detail.dimensions || []);
+        setVersions(detail.versions || []);
+        if (detail.project.currentVersion > 0 && detail.currentVersion) {
+          const ver = detail.currentVersion;
+          setCurrentVersion(ver);
+          setPrompt(ver.prompt || '');
+          setTargetOutput(ver.targetOutput || '');
+          setSelectedVersion(ver.version);
         }
-      } catch { /* ignore migration errors */ }
+        setBatches(detail.batches || []);
+      } else {
+        await loadProjectIndividually();
+      }
+      await cleanupLegacyRuns();
     } catch (e) {
       showToast?.(e.message, true);
     }
@@ -321,14 +351,15 @@ function ProjectDetailView({ projectId, onBack, showToast }) {
     onBack();
   }
 
-  async function handleDelete() {
-    if (!confirm(t('profile.calibrator.deleteConfirm'))) return;
-    try {
-      await deleteProject(projectId);
-      onBack();
-    } catch (e) {
-      showToast?.(e.message, true);
-    }
+  function handleDelete() {
+    confirm(t('profile.calibrator.deleteConfirm'), async () => {
+      try {
+        await deleteProject(projectId);
+        onBack();
+      } catch (e) {
+        showToast?.(e.message, true);
+      }
+    }, { danger: true });
   }
 
   if (!project) return html`<div class="fnd-cal-empty">...</div>`;
@@ -512,6 +543,7 @@ function ProjectDetailView({ projectId, onBack, showToast }) {
         </div>
       </div>
 
+      <${ConfirmUI} />
     </div>
   `;
 }

package/dist/public/views/profile/capabilities-tab.js

@@ -5,10 +5,16 @@
  * @version-history
  *   v1.0.0 — 2026-05-02 — Initial capability tab (CRUD form)
  *   v2.0.0 — 2026-05-02 — Redesigned: node capabilities listing, policy display, source filter
+ *   v2.1.0 — 2026-07-17 — Replace the native alert()/confirm() with the themed useToast +
+ *     useConfirm (delete now a proper danger dialog, errors a toast); the inline-styled
+ *     delete button becomes .btn-danger.btn-sm.cap-delete-btn (no inline style).
  */
 import { h } from 'preact';
 import { useState, useEffect, useCallback } from 'preact/hooks';
 import htm from 'htm';
+import { EmptyState } from '/components/EmptyState.js';
+import { useToast } from '/components/Toast.js';
+import { useConfirm } from '/components/Modal.js';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
@@ -23,6 +29,8 @@ const POLICY_LABELS = {
 };
 
 export default function CapabilitiesTab() {
+  const { showToast, ToastContainer } = useToast();
+  const { confirm, ConfirmUI } = useConfirm();
   const [caps, setCaps] = useState([]);
   const [policy, setPolicy] = useState(null);
   const [loading, setLoading] = useState(true);
@@ -71,20 +79,21 @@ export default function CapabilitiesTab() {
       setNewCap({ id: '', name: '', summary: '', callable: false, visibility: 'private', tags: '' });
       loadCaps();
     } catch (e) {
-      alert(e.message || 'Failed to create');
+      showToast(e.message || 'Failed to create', true);
     }
   };
 
-  const handleDelete = async (id) => {
-    if (!confirm(t('capabilities.deleteConfirm'))) return;
-    const session = getSession();
-    if (!session) return;
-    try {
-      await session.fetch('/v1/capabilities/' + encodeURIComponent(id), { method: 'DELETE' });
-      loadCaps();
-    } catch (e) {
-      alert(e.message || 'Failed to delete');
-    }
+  const handleDelete = (id) => {
+    confirm(t('capabilities.deleteConfirm'), async () => {
+      const session = getSession();
+      if (!session) return;
+      try {
+        await session.fetch('/v1/capabilities/' + encodeURIComponent(id), { method: 'DELETE' });
+        loadCaps();
+      } catch (e) {
+        showToast(e.message || 'Failed to delete', true);
+      }
+    }, { danger: true });
   };
 
   if (loading) return html`<${Spinner} />`;
@@ -126,7 +135,7 @@ export default function CapabilitiesTab() {
       </div>
 
       <!-- Capability list -->
-      ${!filtered.length ? html`<div class="pf-empty">${t('capabilities.noCapabilities')}</div>` : ''}
+      ${!filtered.length ? html`<${EmptyState} text=${t('capabilities.noCapabilities')} />` : ''}
 
       ${filtered.map(c => {
         const s = c.stats || {};
@@ -183,7 +192,7 @@ export default function CapabilitiesTab() {
                   </details>
                 ` : ''}
                 ${c.source?.type === 'manual' ? html`
-                  <button class="btn-danger" style="margin-top:8px;font-size:.8rem" onClick=${() => handleDelete(c.id)}>
+                  <button class="btn-danger btn-sm cap-delete-btn" onClick=${() => handleDelete(c.id)}>
                     ${t('capabilities.delete')}
                   </button>
                 ` : ''}
@@ -247,6 +256,8 @@ export default function CapabilitiesTab() {
           ` : ''}
         </div>
       ` : ''}
+      <${ToastContainer} />
+      <${ConfirmUI} />
     </div>
   `;
 }

package/dist/public/views/profile/contacts-tab.js

@@ -0,0 +1,139 @@
+/**
+ * @file contacts-tab.js
+ * @description Profile → Contacts tab — the owner's address book. Two groups: SAVED contacts
+ *   (explicitly added; removable) and MESSAGED people (DM conversation peers / gate rows; one
+ *   click saves them). An add box takes an owner name, a member-directory pick, or an email
+ *   (exact-match resolve → add; miss → hint to invite via an organism). Blocked contacts are
+ *   managed in Messages — this tab only counts them and links over.
+ * @structure ContactsTab (default export)
+ * @usage Registered in views/profile.js TABS as id 'contacts'.
+ * @version-history
+ *   v1.0.0 — 2026-07-16 — Initial.
+ *   v1.1.0 — 2026-07-18 — Vaihe 3 card-cohesion: the two contact groups (saved / messaged) are now
+ *     each framed in a `.pf-agd-card` with a canonical `.pf-agd-section-label` header (were bare
+ *     `.detail-label` text over unframed border-bottom row lists). The loose rows now read as two
+ *     cohesive cards instead of a ragged column.
+ */
+import { h } from 'preact';
+import { useState, useEffect, useCallback, useRef } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { onLiveUpdate } from '/lib/live-updates.js';
+import { ContactPicker } from '/components/ContactPicker.js';
+import { PresenceDot } from '/components/PresenceDot.js';
+import * as contactsService from '/js/services/contacts.js';
+
+const KIND_ICON = { ghii: '👤', gaii: '🤖', geai: '🧩' };
+const bare = (id) => String(id || '').split('@')[0];
+const initials = (id) => bare(id).slice(0, 2).toUpperCase();
+
+export default function ContactsTab({ showToast }) {
+  const [contacts, setContacts] = useState(null);
+  const [blockedCount, setBlockedCount] = useState(0);
+  const [who, setWho] = useState('');
+  const [busy, setBusy] = useState(false);
+  const [q, setQ] = useState('');
+  const [emailMiss, setEmailMiss] = useState(null);   // unresolved email → invite hint
+
+  const load = useCallback(async () => {
+    try {
+      const [list, blocked] = await Promise.all([
+        contactsService.listContacts(),
+        contactsService.listContacts({ state: 'blocked' }),
+      ]);
+      setContacts(list);
+      setBlockedCount(blocked.length);
+    } catch { setContacts([]); }
+  }, []);
+  useEffect(() => { load(); }, [load]);
+  const liveRef = useRef(load); liveRef.current = load;
+  useEffect(() => onLiveUpdate(['messages'], () => liveRef.current()), []);
+
+  const add = async (target) => {
+    const id = (target ?? who).trim();
+    if (!id) return;
+    setBusy(true);
+    try {
+      const r = await contactsService.addContact(id);
+      if (r?.ok === false) showToast(r?.error?.message || (t('contacts.addFailed') || 'Could not add the contact'), true);
+      else { showToast(t('contacts.added') || 'Contact saved'); setWho(''); setEmailMiss(null); }
+      await load();
+    } catch (e) { showToast((e && e.message) || (t('contacts.addFailed') || 'Could not add the contact'), true); }
+    finally { setBusy(false); }
+  };
+
+  const remove = async (id) => {
+    setBusy(true);
+    try {
+      const r = await contactsService.removeContact(id);
+      if (r?.ok === false) showToast(r?.error?.message || (t('contacts.removeFailed') || 'Could not remove the contact'), true);
+      else showToast(t('contacts.removed') || 'Contact removed');
+      await load();
+    } catch (e) { showToast((e && e.message) || (t('contacts.removeFailed') || 'Could not remove the contact'), true); }
+    finally { setBusy(false); }
+  };
+
+  const filter = (list) => {
+    const needle = q.trim().toLowerCase();
+    if (!needle) return list;
+    return list.filter(c => c.contact_id.toLowerCase().includes(needle) || (c.display_name || '').toLowerCase().includes(needle));
+  };
+  const all = contacts || [];
+  const saved = filter(all.filter(c => c.origin === 'saved'));
+  const messaged = filter(all.filter(c => c.origin !== 'saved'));
+
+  const row = (c, actions) => html`
+    <div class="pf-ct-row" key=${c.contact_id}>
+      <div class="pf-ct-avatar" aria-hidden="true">${KIND_ICON[c.kind] === '👤' ? initials(c.contact_id) : (KIND_ICON[c.kind] || '👤')}</div>
+      <div class="pf-ct-main">
+        <div class="pf-ct-name">
+          ${c.display_name || bare(c.contact_id)}
+          ${c.kind === 'ghii' ? html` <${PresenceDot} ghii=${c.contact_id} />` : null}
+          ${c.kind !== 'ghii' ? html`<span class="badge badge-info">${c.kind === 'gaii' ? (t('contacts.kindAgent') || 'agent') : (t('contacts.kindApp') || 'app')}</span>` : null}
+        </div>
+        <div class="pf-ct-id">${c.contact_id}${c.has_messages ? ` · ${t('contacts.hasMessages') || 'messaged'}` : ''}</div>
+      </div>
+      ${actions}
+    </div>`;
+
+  return html`
+    <div class="pf-ct">
+      <div class="section-title">${t('contacts.title') || 'Contacts'}</div>
+      <div class="section-desc">${t('contacts.desc') || 'Your address book: people you trust and people you have messaged. Contacts feed the identity pickers everywhere you grant access — organisms, workspaces, and apps.'}</div>
+
+      <div class="pf-ct-addrow">
+        <${ContactPicker} value=${who} onChange=${setWho} onSubmit=${() => add()} valueMode="full"
+          onEmailUnresolved=${(email) => setEmailMiss(email)}
+          placeholder=${t('contacts.addPlaceholder') || 'owner name or email'} disabled=${busy} />
+        <button class="btn-primary btn-sm" disabled=${busy || !who.trim()} onClick=${() => add()}>${'+ '}${t('contacts.add') || 'Add'}</button>
+        <input class="input-field input-sm pf-ct-filter" placeholder=${t('contacts.filterPlaceholder') || 'Filter…'}
+          value=${q} onInput=${(e) => setQ(e.target.value)} />
+      </div>
+      ${emailMiss ? html`
+        <div class="section-desc pf-ct-miss">
+          ${(t('contacts.inviteHint') || 'No account for {email} yet — invite them by email from an organism\'s Members tab (they get an account and the access you choose in one step).').replace('{email}', emailMiss)}
+        </div>` : null}
+
+      ${contacts === null ? html`<div class="section-desc">${t('contacts.loading') || 'Loading…'}</div>` : html`
+        <div class="pf-agd-card pf-ct-group">
+          <div class="pf-agd-section-label">${t('contacts.savedGroup') || 'Saved contacts'} <span class="pf-ct-count">${saved.length}</span></div>
+          ${saved.length ? saved.map(c => row(c, html`
+            <button class="btn-ghost btn-sm" disabled=${busy} onClick=${() => remove(c.contact_id)}>${t('contacts.remove') || 'Remove'}</button>
+          `)) : html`<div class="section-desc">${t('contacts.savedEmpty') || 'Nobody saved yet — add someone above, or save a messaged person below.'}</div>`}
+        </div>
+
+        <div class="pf-agd-card pf-ct-group">
+          <div class="pf-agd-section-label">${t('contacts.messagedGroup') || 'People you\'ve messaged'} <span class="pf-ct-count">${messaged.length}</span></div>
+          ${messaged.length ? messaged.map(c => row(c, html`
+            <button class="btn-outline btn-sm" disabled=${busy} onClick=${() => add(c.contact_id)}>${t('contacts.save') || 'Save'}</button>
+          `)) : html`<div class="section-desc">${t('contacts.messagedEmpty') || 'Direct-message conversations show up here automatically.'}</div>`}
+        </div>
+
+        ${blockedCount > 0 ? html`
+          <div class="section-desc pf-ct-blocked">
+            ${(t('contacts.blockedNote') || '{n} blocked contact(s) — manage them in the Messages tab.').replace('{n}', String(blockedCount))}
+          </div>` : null}
+      `}
+    </div>`;
+}

package/dist/public/views/profile/data-wallet-tab.js

@@ -8,9 +8,16 @@
  *     audit log with day-range selector, GDPR export button
  * @usage Loaded by profile.js route as a lazy tab component.
  * @version-history
- *   v1.0.0 — 2026-03-10 — Initial data wallet tab implementation
- *   v1.1.0 — 2026-03-17 — Refactor: replace all inline styles with CSS classes
+ *   v1.4.0 — 2026-07-18 — Vaihe 2d: the bespoke `audit-table` → canonical generic <DataTable>
+ *     (rows/headers), unifying its look with the node-wide table style. The consents `consent-table`
+ *     stays hand-rolled (its per-row `dw-expiring` highlight isn't expressible via DataTable).
+ *   v1.3.0 — 2026-07-16 — Mount folds consents + audit + permission-summary into GET /v1/data-wallet
+ *     (getDataWalletOverview); individual reads kept as fallback + interactive re-fetch.
+ *   v1.2.0 — 2026-07-16 — Consent-grant recipient input is the shared ContactPicker (contacts +
+ *     directory suggestions + email resolve, full-id mode).
  *   v1.1.1 — 2026-06-19 — lint fixes (misleading-char-class/unused-expression/empty-block)
+ *   v1.1.0 — 2026-03-17 — Refactor: replace all inline styles with CSS classes
+ *   v1.0.0 — 2026-03-10 — Initial data wallet tab implementation
  */
 import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
@@ -19,7 +26,9 @@ const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml, timeAgo } from '/js/utils.js';
 import { Spinner, recipientBadge, isExpiringSoon } from './shared.js';
+import { DataTable } from '/components/DataTable.js';
 import * as consentService from '/js/services/consent.js';
+import { ContactPicker } from '/components/ContactPicker.js';
 
 export default function DataWalletTab({ session, showToast }) {
   const [consents, setConsents] = useState(null);
@@ -30,9 +39,22 @@ export default function DataWalletTab({ session, showToast }) {
   const [consentFilter, setConsentFilter] = useState('');
   const [scopeFilter, setScopeFilter] = useState('all');
   const [selectedConsents, setSelectedConsents] = useState(new Set());
+  const [recipientValue, setRecipientValue] = useState('');
 
   useEffect(() => {
-    if (session) { loadConsents(); loadAudit(30); loadPermSummary(); }
+    if (!session) return;
+    // Mount fold: ONE composite (consents + audit + permission summary). On failure, fall back to the
+    // three individual reads. Interactive re-fetches (grant/revoke, audit day-range) keep the individuals.
+    (async () => {
+      const ov = await consentService.getDataWalletOverview(30);
+      if (ov) {
+        setConsents(Array.isArray(ov.consents) ? ov.consents : []);
+        setAuditEntries(Array.isArray(ov.audit) ? ov.audit : []);
+        setPermSummary(ov.permSummary || null);
+        return;
+      }
+      loadConsents(); loadAudit(30); loadPermSummary();
+    })();
   }, [session]);
 
   async function loadConsents() {
@@ -164,7 +186,7 @@ export default function DataWalletTab({ session, showToast }) {
           e.preventDefault();
           const fd = new FormData(e.target);
           const rType = fd.get('recipientType');
-          let recipVal = fd.get('recipientValue');
+          let recipVal = recipientValue.trim();
           if (rType === 'wildcard') recipVal = '*';
           else if (rType === 'ghii') recipVal = 'ghii:' + recipVal;
           else if (rType === 'domain') recipVal = 'domain:' + recipVal;
@@ -196,7 +218,8 @@ export default function DataWalletTab({ session, showToast }) {
             </div>
             <div>
               <label class="dw-label">${t('permissions.recipient')}</label>
-              <input name="recipientValue" class="input-field w-full" placeholder="agent#owner@node" />
+              <${ContactPicker} value=${recipientValue} onChange=${setRecipientValue} valueMode="full"
+                placeholder="agent#owner@node" />
             </div>
             <div>
               <label class="dw-label">${t('permissions.purpose')}</label>
@@ -316,19 +339,15 @@ export default function DataWalletTab({ session, showToast }) {
     ${!auditEntries ? html`<${Spinner} />`
       : auditEntries.length === 0 ? html`<div class="empty">${t('wallet.audit.empty')}</div>`
       : html`<div class="card scroll-x">
-          <table class="audit-table"><thead><tr>
-            <th>${t('wallet.audit.who')}</th>
-            <th>${t('wallet.audit.what')}</th>
-            <th>${t('wallet.audit.when')}</th>
-            <th>${t('wallet.audit.purpose')}</th>
-          </tr></thead><tbody>
-            ${auditEntries.map(e => html`<tr>
-              <td>${escHtml(e.accessor_gaii || e.accessed_by || e.who || '-')}</td>
-              <td><span class="dw-code-accent">${escHtml(e.data_key || e.key || e.what || '-')}</span></td>
-              <td class="text-meta">${e.accessed_at ? timeAgo(e.accessed_at) : (e.timestamp ? timeAgo(e.timestamp) : '-')}</td>
-              <td>${escHtml(e.purpose || '-')}</td>
-            </tr>`)}
-          </tbody></table>
+          <${DataTable}
+            headers=${[t('wallet.audit.who'), t('wallet.audit.what'), t('wallet.audit.when'), t('wallet.audit.purpose')]}
+            rows=${auditEntries.map(e => [
+              escHtml(e.accessor_gaii || e.accessed_by || e.who || '-'),
+              html`<span class="dw-code-accent">${escHtml(e.data_key || e.key || e.what || '-')}</span>`,
+              html`<span class="text-meta">${e.accessed_at ? timeAgo(e.accessed_at) : (e.timestamp ? timeAgo(e.timestamp) : '-')}</span>`,
+              escHtml(e.purpose || '-'),
+            ])}
+          />
         </div>`
     }
 

package/dist/public/views/profile/discover-tab.js

@@ -16,6 +16,7 @@
 import { h } from 'preact';
 import { useState, useEffect, useCallback } from 'preact/hooks';
 import htm from 'htm';
+import { EmptyState } from '/components/EmptyState.js';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
@@ -137,7 +138,7 @@ export default function DiscoverTab() {
 
       ${loading ? html`<${Spinner} />` : html`
         ${!data.entries.length
-          ? html`<div class="pf-empty">${t('discover.empty')}</div>`
+          ? html`<${EmptyState} text=${t('discover.empty')} />`
           : data.entries.map(e => html`
             <a class="dsc-item" href="#" onClick=${ev => { ev.preventDefault(); openEntry(e); }}>
               <div class="dsc-item-head">

package/dist/public/views/profile/ecosystem-tab.automation.js

@@ -5,6 +5,8 @@
  *   agent picker), and <EcoAutomationSection> (the unified turnkey publish→process→deliver flow).
  *   Extracted from ecosystem-tab.js to satisfy max-file-lines.
  * @version-history
+ *   v1.1.0 — 2026-07-16 — Card mount folds schedules + recipe + organisms + advisories into GET
+ *     /v1/ecosystem-apps/:app/automation (getAutomationOverview); agent list stays separate; fallback kept.
  *   v1.0.0 — 2026-07-13 — Extracted from ecosystem-tab.js (max-file-lines)
  */
 import { h } from 'preact';
@@ -17,7 +19,7 @@ import { timeAgo } from '/js/utils.js';
 import { Modal } from '/components/Modal.js';
 import { JsonValue } from '/components/JsonView.js';
 import { Spinner } from './shared.js';
-import { getAutomationRecipe, putAutomationRecipe, listPendingAdvisories, approveAdvisory, rejectAdvisory } from '/js/services/ecosystem.js';
+import { getAutomationRecipe, getAutomationOverview, putAutomationRecipe, listPendingAdvisories, approveAdvisory, rejectAdvisory } from '/js/services/ecosystem.js';
 import { formatUntil } from './schedule-item.js';
 import { listAppSchedules, createCapabilitySchedule, setScheduleEnabled, triggerSchedule, getScheduleDetail, setScheduleCron } from '/js/services/schedules.js';
 import { listAgents } from '/js/services/agents.js';
@@ -216,16 +218,28 @@ export function EcoAutomationSection({ app, showToast }) {
 
   const load = async () => {
     const ownerName = (currentGhii().split('@')[0]) || '';
-    const [schedList, agentList, recipe, orgResp, advList] = await Promise.all([
-      listAppSchedules(app.app).catch(() => []),
+    // Mount fold: ONE composite (schedules + recipe + organisms + advisories) + the agent list (kept
+    // separate — its domain_capabilities shape drives recipe-agent selection). On composite failure, fall
+    // back to the individual reads.
+    const [ov, agentList] = await Promise.all([
+      getAutomationOverview(app.app),
       listAgents().catch(() => []),
-      getAutomationRecipe(app.app).catch(() => null),
-      (ownerName ? listOrganisms({ member: ownerName }) : Promise.resolve(null)).catch(() => null),
-      listPendingAdvisories(app.app).catch(() => null),
     ]);
+    let schedList, recipe, orgs, advList;
+    if (ov) {
+      schedList = ov.schedules; recipe = ov.recipe; orgs = ov.organisms; advList = ov.advisories;
+    } else {
+      const [s, r, orgResp, a] = await Promise.all([
+        listAppSchedules(app.app).catch(() => []),
+        getAutomationRecipe(app.app).catch(() => null),
+        (ownerName ? listOrganisms({ member: ownerName }) : Promise.resolve(null)).catch(() => null),
+        listPendingAdvisories(app.app).catch(() => null),
+      ]);
+      schedList = s; recipe = r; orgs = orgResp?.data?.organisms || []; advList = a;
+    }
     setSchedules(schedList);
     setAgents(agentList.filter(a => !a.name?.startsWith('session-')));
-    setOrgs(orgResp?.data?.organisms || []);
+    setOrgs(orgs);
     setAdvisories(advList === null ? [] : advList);
 
     // Reflect the publish schedule into the "Run on a schedule" controls.

package/dist/public/views/profile/extensions-tab.js

@@ -41,6 +41,7 @@ import { Spinner } from './shared.js';
 import { Modal, useConfirm } from '/components/Modal.js';
 import { CopyButton } from '/components/CopyButton.js';
 import { StatusDot } from '/components/StatusDot.js';
+import { useMaturityLedger, maturityBadge } from './extensions-tab.maturity.js';
 import * as cortexService from '/js/services/cortex.js';
 import * as v8Ext from '/js/services/extensions.js';
 import { getNodeUrl, getSession } from '/js/services/auth.js';
@@ -73,6 +74,7 @@ export default function ExtensionsTab({ session, showToast }) {
   const [testResult, setTestResult] = useState(null);
   const [testRunning, setTestRunning] = useState(false);
 
+  const packLedger = useMaturityLedger();   // AI-acceleration tier + proofs, joined by lib name
   useEffect(() => {
     if (session) { loadExtensions(); loadServerExtensions(); }
   }, [session]);
@@ -662,7 +664,7 @@ export default function ExtensionsTab({ session, showToast }) {
                 <div class="ext-card-header">
                   <span class="ext-card-name">${ext.name}</span>
                   <span class="ext-card-version">v${ext.version || '?'}</span>
-                  <span class="badge ${isLib ? 'badge-info' : 'badge-dim'}">${isLib ? t('profile.extensions.libraryBadge') : t('profile.extensions.serviceBadge')}</span>
+                  <span class="badge ${isLib ? 'badge-info' : 'badge-dim'}">${isLib ? t('profile.extensions.libraryBadge') : t('profile.extensions.serviceBadge')}</span>${maturityBadge(html, t, packLedger, ext.name)}
                   <span class="ext-visibility-badge public">${'\u{1F310}'}</span>
                 </div>
                 <div class="ext-card-desc">${ext.description || ''}</div>
@@ -690,7 +692,7 @@ export default function ExtensionsTab({ session, showToast }) {
                 <div class="ext-card-header">
                   <span class="ext-card-name">${ext.name}</span>
                   <span class="ext-card-version">v${ext.version || '?'}</span>
-                  <span class="badge ${isLib ? 'badge-info' : 'badge-dim'}">${isLib ? t('profile.extensions.libraryBadge') : t('profile.extensions.serviceBadge')}</span>
+                  <span class="badge ${isLib ? 'badge-info' : 'badge-dim'}">${isLib ? t('profile.extensions.libraryBadge') : t('profile.extensions.serviceBadge')}</span>${maturityBadge(html, t, packLedger, ext.name)}
                   <span class="ext-visibility-badge ${vis}">${vis === 'public' ? '\u{1F310}' : '\u{1F512}'}</span>
                 </div>
                 <div class="ext-card-desc">${ext.description || ''}</div>

package/dist/public/views/profile/extensions-tab.maturity.js

@@ -0,0 +1,40 @@
+/**
+ * @file extensions-tab.maturity.js
+ * @description The AI-acceleration maturity badge for the Cortex Libraries cards — joins each
+ *   library card onto the node's library-pack registry (GET /v1/library-packs) so a user browsing
+ *   their libraries sees how mature/measured each is: its tier (any | frontier | needs-doc) and the
+ *   per-model AEB proofs (which model was tested, pass/fail). Full scheme: tools/aeb/acceleration-tiers.md.
+ * @structure useMaturityLedger() — fetch the tier/proof map once · maturityBadge(html, t, ledger, name)
+ * @usage import { useMaturityLedger, maturityBadge } from './extensions-tab.maturity.js';
+ * @version-history
+ *   v1.0.0 — 2026-07-18 — initial: surface tier + proof ledger on the Cortex Libraries cards.
+ */
+import { useState, useEffect } from 'preact/hooks';
+
+/** Fetch the node's library-pack tier/proof ledger once, keyed by pack id (public endpoint). */
+export function useMaturityLedger() {
+  const [ledger, setLedger] = useState({});
+  useEffect(() => {
+    fetch('/v1/library-packs').then(r => r.json()).then(d => {
+      const map = {};
+      for (const p of (d.data?.packs || [])) if (p.modelTier) map[p.id] = p;
+      setLedger(map);
+    }).catch(() => { /* older node without the endpoint — cards just omit the badge */ });
+  }, []);
+  return ledger;
+}
+
+/**
+ * The tier + measured-on badge for a library card, or null when the pack has no registry tier
+ * (e.g. a community cortex the node hasn't classified). `html` and `t` are passed in so this stays
+ * a plain module (no htm/i18n binding of its own).
+ */
+export function maturityBadge(html, t, ledger, name) {
+  const p = ledger[name];
+  if (!p || !p.modelTier) return null;
+  const proofs = p.proofs || [];
+  const proven = proofs.map(pr => `${pr.model} → ${pr.verdict}${pr.tokens ? ' (' + Math.round(pr.tokens / 1000) + 'k)' : ''}`).join(', ');
+  const title = t('profile.extensions.tier.' + p.modelTier)
+    + ' · ' + (proofs.length ? t('profile.extensions.measuredOn') + ' ' + proven : t('profile.extensions.notMeasured'));
+  return html`<span class="ext-tier ext-tier-${p.modelTier}${proofs.length ? ' ext-tier-measured' : ''}" title=${title}>${p.modelTier}${proofs.length ? ' ✓' : ''}</span>`;
+}