aimeat 1.7.0 → 1.8.0

package/dist/locales/en.json

@@ -267,6 +267,7 @@
       "loadError": "Could not load agents.",
       "trust": "Trust",
       "balance": "Balance",
+      "usesOwnerWallet": "Uses owner's wallet",
       "lastSeen": "Last seen",
       "roles": "Roles",
       "created": "Created",
@@ -590,7 +591,9 @@
       "lifetimeEarned": "Earned",
       "lifetimeSpent": "Spent",
       "lifetimeAllowance": "Allowance Received",
-      "lifetimeWelcome": "Welcome Bonus"
+      "lifetimeWelcome": "Welcome Bonus",
+      "federatedInfo": "Your wallet is on your home node. Morsel balance, transactions, and allowances are managed there.",
+      "federatedHomeNode": "Home node"
     },
     "memory": {
       "title": "Memory",
@@ -644,7 +647,44 @@
       "shareSuccess": "Shared to federation",
       "unshareSuccess": "Removed from federation",
       "selectGroup": "Select group",
-      "noGroups": "No sharing groups. Create one in the Access tab."
+      "skipGroup": "Skip",
+      "noGroups": "No sharing groups. Create one in the Access tab.",
+      "sortLabel": "Sort:",
+      "sortUpdated": "Last updated",
+      "sortCreated": "Created",
+      "sortAlpha": "A-Z",
+      "timeJustNow": "just now",
+      "timeMinsAgo": "{n}m ago",
+      "timeHoursAgo": "{n}h ago",
+      "timeDaysAgo": "{n}d ago",
+      "discoverTitle": "Discover Public",
+      "discoverDesc": "Browse public memory entries shared by other users on this node. Click an entry to preview its contents, then copy it to your own memory.",
+      "discoverSearchPlaceholder": "Search by key, owner, or tag...",
+      "discoverLoading": "Searching public memories...",
+      "discoverCount": "{count} public entries found",
+      "discoverEmpty": "No public memory entries found from other users.",
+      "discoverCopy": "Copy",
+      "discoverCopied": "Copied to your memory!",
+      "browseHome": "Browse Home Node",
+      "browseHomeDesc": "Your memories stored on your home node. Pull them here to use locally.",
+      "browseRemote": "Browse Remote Nodes",
+      "browseRemoteDesc": "Your memories stored on nodes where you've logged in via federation.",
+      "browseRemoteSelect": "Select a peer node to browse your memories there",
+      "remoteEntries": "{count} entries on {node}",
+      "homeEntries": "{count} entries on home node",
+      "pullEntry": "Pull",
+      "pullAllBtn": "Pull All",
+      "pullAllConfirm": "Pull all {count} entries from {node}?",
+      "pullingAll": "Pulling entries...",
+      "pullAllSuccess": "Pulled {count} entries",
+      "noPeers": "No active federation peers",
+      "noRemoteEntries": "No memory entries found on this node",
+      "noHomeEntries": "No memory entries found on your home node",
+      "loadingRemote": "Loading remote memories...",
+      "loadingHome": "Loading home node memories...",
+      "errorLocalhost": "Cannot browse this node. Local/development nodes are not reachable from public nodes. Both nodes must be publicly accessible for cross-node browsing to work.",
+      "errorPeerNotFound": "Peer node not found in the federation directory. It may have been removed or is no longer active.",
+      "errorPeerUnsupported": "This peer node does not support memory browsing yet. It may be running an older version of AIMEAT."
     },
     "files": {
       "title": "Stored Files",
@@ -3375,6 +3415,8 @@
     "fedPeerEmergencyRemoved": "Peer immediately disconnected. All in-flight work cancelled.",
 
     "fedRequestHistoryTitle": "Peering Request History",
+    "fedDeleteRequestConfirm": "Delete this peering request from history?",
+    "fedRequestDeleted": "Peering request deleted",
 
     "fedJoinTitle": "Join Genesis Network",
     "fedJoinExplain": "Connect this node to an existing AIMEAT genesis network. Enter the genesis node URL and select your role. The genesis operator will review and approve your request.",
@@ -4612,7 +4654,8 @@
       "public": "Public",
       "private": "Private",
       "owner": "My Agents",
-      "shared": "My Agents"
+      "shared": "My Agents",
+      "group": "Group"
     },
     "federate": "Federate",
     "federated": "Federated",

package/dist/locales/fi.json

@@ -267,6 +267,7 @@
       "loadError": "Agenttien lataus epäonnistui.",
       "trust": "Luottamus",
       "balance": "Saldo",
+      "usesOwnerWallet": "Käyttää omistajan lompakkoa",
       "lastSeen": "Nähty viimeksi",
       "roles": "Roolit",
       "created": "Luotu",
@@ -590,7 +591,9 @@
       "lifetimeEarned": "Ansaittu",
       "lifetimeSpent": "Käytetty",
       "lifetimeAllowance": "Kiintiö vastaanotettu",
-      "lifetimeWelcome": "Tervetuliaisbonus"
+      "lifetimeWelcome": "Tervetuliaisbonus",
+      "federatedInfo": "Lompakkosi on kotisolmullasi. Morselisaldo, tapahtumat ja päiväkohtaiset lisäykset hallitaan siellä.",
+      "federatedHomeNode": "Kotisolmu"
     },
     "memory": {
       "title": "Muisti",
@@ -644,7 +647,44 @@
       "shareSuccess": "Jaettu federaatioon",
       "unshareSuccess": "Poistettu federaatiosta",
       "selectGroup": "Valitse ryhma",
-      "noGroups": "Ei jakoryhmiä. Luo ryhma Oikeudet-valilehdessa."
+      "skipGroup": "Ohita",
+      "noGroups": "Ei jakoryhmiä. Luo ryhma Oikeudet-valilehdessa.",
+      "sortLabel": "Järjestys:",
+      "sortUpdated": "Viimeksi päivitetty",
+      "sortCreated": "Luotu",
+      "sortAlpha": "A-Ö",
+      "timeJustNow": "juuri nyt",
+      "timeMinsAgo": "{n} min sitten",
+      "timeHoursAgo": "{n} t sitten",
+      "timeDaysAgo": "{n} pv sitten",
+      "discoverTitle": "Selaa julkisia",
+      "discoverDesc": "Selaa muiden kayttajien julkisia muistimerkintoja talla solmulla. Klikkaa merkintaa esikatsellaksesi sisaltoa ja kopioi se omaan muistiisi.",
+      "discoverSearchPlaceholder": "Hae avaimella, omistajalla tai tagilla...",
+      "discoverLoading": "Haetaan julkisia muisteja...",
+      "discoverCount": "{count} julkista merkintaa loydetty",
+      "discoverEmpty": "Ei julkisia muistimerkintoja muilta kayttajilta.",
+      "discoverCopy": "Kopioi",
+      "discoverCopied": "Kopioitu muistiisi!",
+      "browseHome": "Selaa kotisolmua",
+      "browseHomeDesc": "Muistisi kotisolmullasi. Vedä ne tänne käytettäväksi paikallisesti.",
+      "browseRemote": "Selaa etäsolmuja",
+      "browseRemoteDesc": "Muistisi solmuilla joihin olet kirjautunut federaation kautta.",
+      "browseRemoteSelect": "Valitse vertaissolmu selataksesi muistejasi siellä",
+      "remoteEntries": "{count} merkintää solmulla {node}",
+      "homeEntries": "{count} merkintää kotisolmulla",
+      "pullEntry": "Vedä",
+      "pullAllBtn": "Vedä kaikki",
+      "pullAllConfirm": "Vedä kaikki {count} merkintää solmulta {node}?",
+      "pullingAll": "Vedetään merkintöjä...",
+      "pullAllSuccess": "Vedetty {count} merkintää",
+      "noPeers": "Ei aktiivisia federaatiovertaisia",
+      "noRemoteEntries": "Ei muistimerkintöjä tällä solmulla",
+      "noHomeEntries": "Ei muistimerkintöjä kotisolmullasi",
+      "loadingRemote": "Ladataan etämuisteja...",
+      "loadingHome": "Ladataan kotisolmun muisteja...",
+      "errorLocalhost": "Tätä solmua ei voi selata. Paikalliset/kehityssolmut eivät ole saavutettavissa julkisilta solmuilta. Molempien solmujen tulee olla julkisesti saavutettavissa.",
+      "errorPeerNotFound": "Vertaissolmua ei löydy federaatiohakemistosta. Se on voitu poistaa tai se ei ole enää aktiivinen.",
+      "errorPeerUnsupported": "Tämä vertaissolmu ei tue vielä muistien selaamista. Se saattaa käyttää vanhempaa AIMEAT-versiota."
     },
     "files": {
       "title": "Tallennetut tiedostot",
@@ -3375,6 +3415,8 @@
     "fedPeerEmergencyRemoved": "Vertainen katkaistu välittömästi. Kaikki keskeneräiset työt peruutettu.",
 
     "fedRequestHistoryTitle": "Vertaispyyntöjen historia",
+    "fedDeleteRequestConfirm": "Poista tämä vertaisverkkopyyntö historiasta?",
+    "fedRequestDeleted": "Vertaisverkkopyyntö poistettu",
 
     "fedJoinTitle": "Liity genesis-verkkoon",
     "fedJoinExplain": "Yhdistä tämä solmu olemassa olevaan AIMEAT genesis-verkkoon. Syötä genesis-solmun URL ja valitse roolisi. Genesis-operaattori tarkistaa ja hyväksyy pyyntösi.",
@@ -4612,7 +4654,8 @@
       "public": "Julkinen",
       "private": "Yksityinen",
       "owner": "Omat agentit",
-      "shared": "Omat agentit"
+      "shared": "Omat agentit",
+      "group": "Ryhma"
     },
     "federate": "Federoi",
     "federated": "Federoitu",

package/dist/public/css/views/agents-detail.css

@@ -8,6 +8,7 @@
  *   v1.1.0 -- 2026-05-22 -- Add capability badge styles for Capabilities sub-tab
  *   v1.2.0 -- 2026-05-22 -- Add Activity sub-tab styles (stats cards, chart, jobs, event log)
  *   v1.3.0 -- 2026-05-22 -- Add Services and Messages sub-tab styles
+ *   v1.4.0 -- 2026-05-22 -- Add Task TODO list, progress, environment badges, Start button styles
  */
 
 /* Sub-tab bar */
@@ -510,6 +511,10 @@
 .pf .agd-msg-meta-right {
   text-align: right;
 }
+.pf .agd-msg-time {
+  font-weight: 500;
+  color: var(--text-secondary, #6B7280);
+}
 .pf .agd-msg-input {
   display: flex;
   gap: 0.5rem;
@@ -561,3 +566,148 @@
   border-color: var(--accent, #E8564A);
   color: var(--accent, #E8564A);
 }
+
+/* ── Task TODO list ── */
+
+/* Progress badge shown next to task title */
+.pf .agd-todo-progress {
+  font-size: 0.7rem;
+  font-weight: 600;
+  padding: 1px 7px;
+  border-radius: 10px;
+  background: rgba(37, 99, 235, 0.1);
+  color: #2563eb;
+  white-space: nowrap;
+}
+
+/* TODO section wrapper inside expanded task */
+.pf .agd-todo-section {
+  margin: 0.5rem 0;
+}
+.pf .agd-todo-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 0.35rem;
+  font-size: 0.8rem;
+}
+.pf .agd-todo-summary {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+.pf .agd-todo-time {
+  font-size: 0.7rem;
+  color: var(--text-muted, #9CA3AF);
+}
+
+/* Environment badges (AIMEAT / Agent) */
+.pf .agd-env-badge {
+  font-size: 0.6rem;
+  font-weight: 600;
+  padding: 1px 6px;
+  border-radius: 6px;
+  text-transform: uppercase;
+  letter-spacing: 0.3px;
+  white-space: nowrap;
+}
+.pf .agd-env-aimeat {
+  background: rgba(16, 185, 129, 0.12);
+  color: var(--success, #10b981);
+}
+.pf .agd-env-agent {
+  background: rgba(217, 119, 6, 0.12);
+  color: #d97706;
+}
+
+/* TODO item list */
+.pf .agd-todo-list {
+  display: flex;
+  flex-direction: column;
+  gap: 0.25rem;
+}
+.pf .agd-todo-item {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.5rem;
+  padding: 0.4rem 0.5rem;
+  border-radius: var(--radius-xs, 6px);
+  background: var(--card-bg, #FFFFFF);
+  border: 1px solid var(--border, #E5E7EB);
+  font-size: 0.8rem;
+  transition: border-color 0.15s;
+}
+.pf .agd-todo-active {
+  border-color: #2563eb;
+  background: rgba(37, 99, 235, 0.04);
+}
+.pf .agd-todo-done {
+  opacity: 0.7;
+}
+.pf .agd-todo-failed {
+  border-color: var(--danger, #ef4444);
+  background: rgba(239, 68, 68, 0.04);
+}
+.pf .agd-todo-skipped {
+  opacity: 0.5;
+}
+
+/* Status icon column */
+.pf .agd-todo-icon {
+  flex-shrink: 0;
+  font-size: 0.85rem;
+  line-height: 1.4;
+  width: 1.2rem;
+  text-align: center;
+}
+
+/* Content column */
+.pf .agd-todo-content {
+  flex: 1;
+  min-width: 0;
+}
+.pf .agd-todo-title {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  flex-wrap: wrap;
+  font-weight: 500;
+  line-height: 1.4;
+}
+.pf .agd-todo-est {
+  font-size: 0.65rem;
+  color: var(--text-muted, #9CA3AF);
+  white-space: nowrap;
+}
+.pf .agd-todo-desc {
+  font-size: 0.75rem;
+  color: var(--text-dim, #6B7280);
+  line-height: 1.4;
+  margin-top: 0.15rem;
+}
+.pf .agd-todo-reason {
+  font-size: 0.7rem;
+  color: var(--text-muted, #9CA3AF);
+  font-style: italic;
+  margin-top: 0.1rem;
+}
+.pf .agd-todo-verify {
+  font-size: 0.7rem;
+  color: var(--text-muted, #9CA3AF);
+  margin-top: 0.1rem;
+  padding-left: 0.5rem;
+  border-left: 2px solid var(--border, #E5E7EB);
+}
+
+/* Waiting state (no todos yet) */
+.pf .agd-todo-waiting {
+  text-align: center;
+  padding: 1rem;
+  color: var(--text-muted, #9CA3AF);
+  font-size: 0.8rem;
+  font-style: italic;
+  background: var(--card-bg, #FFFFFF);
+  border: 1px dashed var(--border, #E5E7EB);
+  border-radius: var(--radius-xs, 6px);
+  margin: 0.5rem 0;
+}

package/dist/public/css/views/profile.css

@@ -97,14 +97,34 @@
 .pf .wallet-balance-copy:hover{background:rgba(232,86,74,.25)}
 .pf .mem-item{display:flex;justify-content:space-between;align-items:center;padding:.5rem 0;border-bottom:1px solid rgba(232,86,74,.08);font-size:.85rem;cursor:pointer;gap:.5rem}
 .pf .mem-item:hover{background:rgba(232,86,74,.05)}
-.pf .mem-key{font-family:monospace;color:var(--accent,#E8564A);font-weight:500;flex:1}
+.pf .mem-key{font-family:monospace;color:var(--accent,#E8564A);font-weight:500;flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.pf .mem-time{font-size:.7rem;color:var(--text-dim,#6B7280);white-space:nowrap;flex-shrink:0}
+.pf .mem-sort-bar{display:flex;align-items:center;gap:.35rem}
+.pf .mem-sort-select{font-size:.75rem;padding:2px 6px;min-width:auto;width:auto}
 .pf .mem-vis{font-size:.7rem}
 .pf .shield-icon{font-size:.85rem;cursor:pointer;opacity:.6;transition:opacity .2s}
 .pf .shield-icon:hover{opacity:1}
 .pf .key-rules-box{background:#F9FAFB;border:1px solid rgba(139,92,246,.3);border-radius:8px;padding:.75rem;margin-top:.75rem;margin-bottom:.5rem}
 .pf .mem-detail{background:rgba(0,0,0,.04);border:1px solid rgba(232,86,74,.1);border-radius:8px;padding:1rem;margin-top:.5rem;font-size:.85rem}
 .pf .mem-detail pre{white-space:pre-wrap;word-break:break-all;font-family:monospace;color:var(--text,#1A1A2E);font-size:.8rem}
-.pf .mem-detail .mem-actions{display:flex;gap:.5rem;margin-top:.75rem}
+.pf .mem-detail .mem-actions{display:flex;gap:.5rem;margin-top:.75rem;flex-wrap:wrap}
+.pf .mem-browse-panel{background:var(--surface,#F9FAFB);border:1px solid var(--border,#E5E7EB);border-radius:var(--radius,12px);padding:1rem;margin-bottom:1rem}
+.pf .mem-browse-header{display:flex;justify-content:space-between;align-items:flex-start;margin-bottom:.75rem}
+.pf .mem-browse-list{display:flex;flex-direction:column;gap:.5rem}
+.pf .mem-browse-item{display:flex;align-items:center;gap:.75rem;padding:.5rem .75rem;background:var(--card,#FFFFFF);border:1px solid var(--border,#E5E7EB);border-radius:8px;min-width:0}
+.pf .mem-browse-item:hover{border-color:var(--accent,#E8564A)}
+.pf .mem-browse-key{font-family:monospace;color:var(--accent,#E8564A);font-weight:500;flex:1;font-size:.85rem;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.pf .mem-browse-meta{display:flex;align-items:center;gap:.5rem;flex-shrink:0;max-width:40%;overflow:hidden}
+.pf .mem-browse-tags{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:200px}
+.pf .mem-browse-buttons{display:flex;gap:.5rem;flex-wrap:wrap}
+.pf .mem-discover-search{display:flex;gap:.35rem;align-items:center}
+.pf .mem-discover-item{border:1px solid var(--border,#E5E7EB);border-radius:8px;overflow:hidden;background:var(--card,#FFFFFF)}
+.pf .mem-discover-item:hover{border-color:var(--accent,#E8564A)}
+.pf .mem-discover-row{display:flex;align-items:center;gap:.75rem;padding:.5rem .75rem;cursor:pointer;min-width:0}
+.pf .mem-discover-info{flex:1;min-width:0;overflow:hidden}
+.pf .mem-discover-owner{font-size:.7rem;color:var(--text-dim,#6B7280);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.pf .mem-discover-preview{padding:.5rem .75rem;border-top:1px solid var(--border,#E5E7EB);background:var(--bg-dim,#F3F4F6)}
+.pf .mem-discover-preview pre{white-space:pre-wrap;word-break:break-all;font-family:monospace;font-size:.75rem;color:var(--text,#1A1A2E);max-height:300px;overflow-y:auto;margin:0}
 .pf .peer-card{display:flex;justify-content:space-between;align-items:center}
 .pf .peer-status{display:flex;align-items:center;gap:.4rem}
 .pf .peer-dot{width:8px;height:8px;border-radius:50%}

package/dist/public/js/services/generator-spec-validate.js

@@ -8,6 +8,7 @@
  *   - validateDataApiSpec: structural validation of data API spec JSON
  *   - validateComponentSpec: structural validation of component spec JSON
  *   - validateAppDomainSpec: structural validation of app-domain spec JSON
+ *   - validateAppSpec: structural validation of app (HTML page) spec JSON
  *   - validateSpecAgainstProbe: compare spec declarations against probe results
  * @usage
  *   import { validateExtensionSpec, validateSpecAgainstProbe } from '/js/services/generator-spec-validate.js';
@@ -122,6 +123,28 @@ export function validateAppDomainSpec(spec) {
   return { valid: errors.length === 0, errors };
 }
 
+/**
+ * Validate that an app (HTML page) spec has required structure.
+ * @param {object} spec - Parsed app spec JSON
+ * @returns {{ valid: boolean, errors: string[] }}
+ */
+export function validateAppSpec(spec) {
+  const errors = [];
+  if (!spec) return { valid: false, errors: ['Spec is null or undefined'] };
+
+  if (!spec.name) errors.push('Missing spec.name');
+  if (spec.name && !/^[a-z0-9]+(-[a-z0-9]+)*$/.test(spec.name)) {
+    errors.push(`spec.name "${spec.name}" must be ASCII kebab-case`);
+  }
+  if (!spec.title) errors.push('Missing spec.title');
+  if (!spec.appDomainLib) errors.push('Missing spec.appDomainLib — must reference the app-domain cortex libName');
+  if (!Array.isArray(spec.cortexDependencies) || spec.cortexDependencies.length === 0) {
+    errors.push('Missing or empty spec.cortexDependencies — must list all cortex registeredAs names');
+  }
+
+  return { valid: errors.length === 0, errors };
+}
+
 /**
  * Compare extension spec against actual probe results.
  * SPEC IS KING: if probe response doesn't match spec, the CODE is wrong.

package/dist/public/js/services/memory.js

@@ -123,3 +123,42 @@ export async function pullFromHome(key) {
 export async function pushToHome(key) {
   return apiPost('/v1/memory/push-home', { key });
 }
+
+/** List memory entries on the home node (federated sessions). */
+export async function listHomeMemories() {
+  const resp = await apiPost('/v1/memory/list-home', {});
+  return resp?.data?.entries || [];
+}
+
+/** List memory entries on a remote peer node (home sessions). */
+export async function listRemoteMemories(peerNodeId) {
+  const resp = await apiPost('/v1/memory/list-remote', { peer_node_id: peerNodeId });
+  return resp?.data?.entries || [];
+}
+
+/** Pull a memory entry from a remote peer node (home sessions). */
+export async function pullFromRemote(peerNodeId, key) {
+  return apiPost('/v1/memory/pull-remote', { peer_node_id: peerNodeId, key });
+}
+
+/** Discover public memory entries from other users on this node. */
+export async function discoverPublicMemories(opts = {}) {
+  const params = new URLSearchParams();
+  if (opts.prefix) params.set('prefix', opts.prefix);
+  if (opts.owner) params.set('owner', opts.owner);
+  if (opts.q) params.set('q', opts.q);
+  if (opts.limit) params.set('limit', String(opts.limit));
+  if (opts.offset) params.set('offset', String(opts.offset));
+  const qs = params.toString();
+  const data = await apiGet('/v1/memory/discover' + (qs ? '?' + qs : ''));
+  return data?.data || { items: [], total: 0 };
+}
+
+/** Copy a public memory entry from another user to your own memory. */
+export async function copyPublicMemory(sourceGaii, key, visibility) {
+  return apiPost('/v1/memory/copy', {
+    source_gaii: sourceGaii,
+    key,
+    visibility: visibility || 'private',
+  });
+}

package/dist/public/views/admin/federation-tab.js

@@ -38,10 +38,10 @@ export default function FederationTab({ data, reload }) {
 
   useEffect(() => {
     getConfig().then(res => {
-      if (res.ok && res.data?.config) {
-        const c = res.data.config;
-        setAuthPolicy(c.federation?.auth_policy ?? c.federationAuthPolicy ?? 'disabled');
-        const scopes = c.federation?.default_scopes ?? c.federationDefaultScopes ?? 'memory:read,catalogue:read';
+      if (res.ok && res.data?.schema) {
+        const s = res.data.schema;
+        setAuthPolicy(s['federation.auth_policy']?.value ?? 'disabled');
+        const scopes = s['federation.default_scopes']?.value ?? 'memory:read,catalogue:read';
         setDefaultScopes(typeof scopes === 'string' ? scopes.split(',').filter(Boolean) : (scopes || []));
       }
       setAuthPolicyLoading(false);
@@ -385,7 +385,7 @@ export default function FederationTab({ data, reload }) {
                 ${(p.status === 'active' || p.status === 'degraded') && html`
                   <button class="adm-btn-sm" onClick=${() => doRemove(p.node_id)}>${t('dashboard.fedDepeer')}</button>
                 `}
-                ${p.status === 'active' && html`
+                ${(p.status === 'active' || p.status === 'degraded' || p.status === 'offline' || p.status === 'depeering') && html`
                   <button class="adm-btn-sm adm-text-error" onClick=${() => doEmergencyRemove(p.node_id)}>\u26A0 ${t('dashboard.fedEmergencyDepeer')}</button>
                 `}
               </td>

package/dist/public/views/admin/prompts-tab.js

@@ -3,7 +3,6 @@ import { useState } from 'preact/hooks';
 import htm from 'htm';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
-import { escHtml } from '/js/utils.js';
 import { dt, Badge, StatsGrid, Empty, ExpandableHelp, Spinner } from './shared.js';
 import {
   getSystemPrompts, getSystemPrompt, updateSystemPrompt,
@@ -141,8 +140,8 @@ export default function PromptsTab({ data, reload }) {
     return html`
       <div>
         <button class="adm-btn-action" onClick=${() => { setEditId(null); setEditData(null); }}>← ${t('dashboard.promptsTab')}</button>
-        <h3 style="margin:12px 0 4px">${escHtml(editData.name)}</h3>
-        <p class="adm-text-dim adm-text-base" style="margin:0 0 16px">${escHtml(editData.description)}</p>
+        <h3 style="margin:12px 0 4px">${editData.name}</h3>
+        <p class="adm-text-dim adm-text-base" style="margin:0 0 16px">${editData.description}</p>
 
         <!-- Active toggle -->
         <label class="adm-flex-center adm-mb-md" style="cursor:pointer">
@@ -172,8 +171,8 @@ export default function PromptsTab({ data, reload }) {
           <div style="margin:8px 0">
             <strong class="adm-text-base">${t('dashboard.promptsUsedIn')}:</strong>
             ${editData.usedIn.map(u => u.startsWith('/')
-              ? html` <a href="${u}" target="_blank" class="adm-prompt-used-tag" style="text-decoration:none;color:var(--accent,#06b6d4)">${escHtml(u)}</a>`
-              : html` <span class="adm-prompt-used-tag">${escHtml(u)}</span>`
+              ? html` <a href="${u}" target="_blank" class="adm-prompt-used-tag" style="text-decoration:none;color:var(--accent,#06b6d4)">${u}</a>`
+              : html` <span class="adm-prompt-used-tag">${u}</span>`
             )}
           </div>
         `}
@@ -202,7 +201,7 @@ export default function PromptsTab({ data, reload }) {
             : versions.map(v => html`
               <div class="adm-prompt-version-row">
                 <span style="font-weight:600">v${v.version}</span>
-                <span class="adm-text-dim" style="flex:1">${dt(v.changedAt)} · ${escHtml(v.changedBy)}${v.changeNote ? ` · ${escHtml(v.changeNote)}` : ''}</span>
+                <span class="adm-text-dim" style="flex:1">${dt(v.changedAt)} · ${v.changedBy}${v.changeNote ? ` · ${v.changeNote}` : ''}</span>
                 <button class="adm-btn-sm" onClick=${() => handleRestore(v.version)} disabled=${saving}>
                   ${t('dashboard.promptsRestore')}
                 </button>
@@ -263,14 +262,14 @@ export default function PromptsTab({ data, reload }) {
             <div class="adm-hrow" style="cursor:pointer" onClick=${() => openEdit(p.id)}>
               <div style="flex:1">
                 <div class="adm-flex-center" style="gap:6px">
-                  <strong>${escHtml(p.name)}</strong>
+                  <strong>${p.name}</strong>
                   <${Badge} type=${p.active ? 'healthy' : 'critical'} />
                 </div>
-                <div class="adm-text-sm adm-text-dim">${escHtml(p.description)}</div>
+                <div class="adm-text-sm adm-text-dim">${p.description}</div>
                 ${p.usedIn && p.usedIn.length > 0 && html`
                   <div>${p.usedIn.map(u => u.startsWith('/')
-                    ? html`<a href="${u}" target="_blank" class="adm-prompt-used-tag" style="text-decoration:none;color:var(--accent,#06b6d4)" onClick=${e => e.stopPropagation()}>${escHtml(u)}</a> `
-                    : html`<span class="adm-prompt-used-tag">${escHtml(u)}</span> `
+                    ? html`<a href="${u}" target="_blank" class="adm-prompt-used-tag" style="text-decoration:none;color:var(--accent,#06b6d4)" onClick=${e => e.stopPropagation()}>${u}</a> `
+                    : html`<span class="adm-prompt-used-tag">${u}</span> `
                   )}</div>
                 `}
               </div>

package/dist/public/views/profile/access-tab.js

@@ -51,6 +51,8 @@ function SharingGroupsSection({ showToast }) {
   const [editingId, setEditingId] = useState(null);
   const [editName, setEditName] = useState('');
   const [editDesc, setEditDesc] = useState('');
+  const [editRead, setEditRead] = useState(true);
+  const [editWrite, setEditWrite] = useState(false);
   const [saving, setSaving] = useState(false);
 
   const loadGroups = useCallback(async () => {
@@ -119,6 +121,8 @@ function SharingGroupsSection({ showToast }) {
     setEditingId(group.id);
     setEditName(group.name);
     setEditDesc(group.description || '');
+    setEditRead(group.defaultPermissions?.read ?? true);
+    setEditWrite(group.defaultPermissions?.write ?? false);
   }, []);
 
   const handleUpdate = useCallback(async (id) => {
@@ -131,6 +135,7 @@ function SharingGroupsSection({ showToast }) {
       await groupsApi.updateGroup(id, {
         name: editName.trim(),
         description: editDesc.trim() || undefined,
+        default_permissions: { read: editRead, write: editWrite },
       });
       showToast(t('profile.access.sgUpdated') || 'Group updated');
       setEditingId(null);
@@ -297,6 +302,19 @@ function SharingGroupsSection({ showToast }) {
                 <textarea class="input-field input-sm" rows="2"
                   value=${editDesc} onInput=${e => setEditDesc(e.target.value)} />
               </div>
+              <div class="form-row">
+                <label>${t('profile.access.sgDefaultPerms') || 'Default permissions'}</label>
+                <div class="flex-row-wrap">
+                  <label class="flex-row">
+                    <input type="checkbox" checked=${editRead} onChange=${() => setEditRead(!editRead)} />
+                    ${t('profile.access.sgRead') || 'Read'}
+                  </label>
+                  <label class="flex-row">
+                    <input type="checkbox" checked=${editWrite} onChange=${() => setEditWrite(!editWrite)} />
+                    ${t('profile.access.sgWrite') || 'Write'}
+                  </label>
+                </div>
+              </div>
               <div class="form-actions">
                 <button class="btn-primary btn-sm" onClick=${() => handleUpdate(group.id)} disabled=${saving}>
                   ${saving ? '...' : (t('profile.access.sgSave') || 'Save')}

package/dist/public/views/profile/agents-messages-subtab.js

@@ -9,6 +9,7 @@
  *   - ProposedTask -- task proposal from agent with create/adjust buttons
  *   - ThreadList -- horizontal thread selector
  * @version-history
+ *   v1.1.0 -- 2026-05-22 -- Show timestamp on messages, sort oldest-first (chat-style)
  *   v1.0.0 -- 2026-05-22 -- Initial creation for Agent Dashboard Phase 3
  */
 import { h } from 'preact';
@@ -66,7 +67,7 @@ function MessageBubble({ msg, agentName, showToast }) {
         ${msg.content}
       </div>
       <div class="agd-msg-meta ${isInbound ? 'agd-msg-meta-right' : ''}">
-        ${msg.created_at ? timeAgo(msg.created_at) : ''}
+        ${msg.created_at ? html`<span class="agd-msg-time">${new Date(msg.created_at).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })}</span> ${timeAgo(msg.created_at)}` : ''}
         ${msg.tokens_used ? html` · ${msg.tokens_used} ${t('profile.agents.messages.tokensUsed')}` : ''}
       </div>
       ${proposedTask && html`
@@ -199,7 +200,7 @@ export default function AgentMessagesSubtab({ agentName, session, showToast }) {
 
       ${messages.length > 0 && html`
         <div class="agd-msg-history" ref=${historyRef}>
-          ${messages.map(msg => html`
+          ${[...messages].sort((a, b) => new Date(a.created_at || 0) - new Date(b.created_at || 0)).map(msg => html`
             <${MessageBubble} key=${msg.id || msg.created_at} msg=${msg} agentName=${agentName} showToast=${showToast} />
           `)}
         </div>

package/dist/public/views/profile/agents-tab.js

@@ -99,11 +99,15 @@ Node: ${url}
    Body: { "agent_name": "your-name", "owner": "${sess.owner}" }
    Tell me the verification URL so I can approve.
 
-2. After auth, download your full operating instructions:
+2. MANDATORY FIRST ACTION after auth -- download and read your operating instructions:
    GET ${url}/v1/prompts/tier1
-   This file contains your directives, task queue, capabilities
-   reporting, and everything you need to operate on this node.
-   Read it fully before doing anything else.`;
+   This contains your directives, task queue, inbox endpoint, capability
+   reporting instructions, message handling, and your full operating loop.
+   DO NOT call any other endpoint until you have read tier1 completely.
+   The response includes a system_prompt field with step-by-step instructions
+   and structured data fields (directives, task_queue, capabilities, messages)
+   with your personalized endpoint URLs.
+   Use /v1/agents/me/ as shortcut in all agent URLs -- it resolves to your name.`;
 }
 
 /* ── Platform instructions ── */
@@ -457,7 +461,7 @@ export default function AgentsTab({ session, showToast, onStats }) {
             </div>
             <div class="card-subtitle mt-xs">
               ${t('profile.agents.trust')}: ${a.trust_score ?? '-'} \u2502
-              ${t('profile.agents.balance')}: ${a.morsel_balance ?? '-'} \u2502
+              ${t('profile.agents.balance')}: ${t('profile.agents.usesOwnerWallet')} \u2502
               ${t('profile.agents.lastSeen')}: ${a.last_seen ? timeAgo(a.last_seen) : '-'}
             </div>
           </div>
@@ -500,7 +504,7 @@ export default function AgentsTab({ session, showToast, onStats }) {
 
               <div class="agent-detail-row">
                 <span class="agent-detail-label">${t('profile.agents.balance')}</span>
-                <span class="agent-detail-value">${a.morsel_balance ?? '-'}</span>
+                <span class="agent-detail-value">${t('profile.agents.usesOwnerWallet')}</span>
               </div>
 
               <div class="agent-detail-row">