aimeat 1.9.0 → 1.9.2

package/README.md

@@ -20,6 +20,19 @@ AIMEAT is an open protocol for AI agent infrastructure. It gives agents (Claude,
   <img src="assets/screenshots/app-catalogue-aimeatio.png" alt="App catalogue" width="24%" />
 </p>
 
+### See it in action (5:50)
+
+An AI agent connects to an AIMEAT node and reaches full operational readiness autonomously:
+
+[![AIMEAT Agent Hello Integration](https://img.youtube.com/vi/ncBX9BaoAWM/maxresdefault.jpg)](https://youtu.be/ncBX9BaoAWM)
+
+`0:45` Device auth with automatic polling (RFC 8628) | `2:10` Skill bundle download + boot sequence | `3:40` 11-step Hello Integration | `4:30` Test task proposed, executed, completed | `5:20` Commands + config registered, agent operational
+
+<p align="center">
+  <img src="assets/screenshots/agent_hello_integration_finished.png" alt="Agent Hello Integration completed -- 11/11 steps passed, capabilities reported, commands registered" width="70%" />
+</p>
+<p align="center"><em>After Hello Integration: agent detail view showing connection status, platform, skill bundle version, readiness (all 11 steps passed), identity, and delivery log.</em></p>
+
 ---
 
 ## Why AIMEAT Exists

package/dist/locales/en.json

@@ -261,14 +261,16 @@
       "title": "Your Agents",
       "desc": "Agents are AI identities registered under your account, each with their own memory, wallet, and skills. Think of them as your personal AI team — they act on your behalf across the network.",
       "connect": "Connect an Automation Agent",
-      "connectDesc": "If you have OpenClaw or any other AI automation agent, give it this prompt to register an agent under your account:",
+      "connectDesc": "Connect an AI agent to your account using the AIMEAT connector CLI or by pasting a prompt to your AI chat:",
+      "cliInstall": "Install the AIMEAT connector and authenticate:",
+      "cliServe": "After connecting, start the MCP server:",
+      "cliDesc": "The connector handles authentication, downloads your agent’s configuration, and provides all AIMEAT tools as an MCP server.",
+      "noNodejs": "Don’t have Node.js?",
+      "pasteAlt": "Or paste to your AI chat",
+      "pasteDesc": "For environments without terminal access, copy this prompt and paste it into your AI chat:",
       "copyPrompt": "Copy Prompt",
-      "downloadInstructions": "Download Instructions",
-      "copyFullInstructions": "Copy Full Instructions",
       "copied": "Copied!",
       "copyGaii": "Copy GAII",
-      "noAgent": "Don’t have an automation agent yet?",
-      "seeHow": "See how to get one",
       "empty": "No agents registered yet.",
       "loadError": "Could not load agents.",
       "trust": "Trust",

package/dist/locales/fi.json

@@ -261,14 +261,16 @@
       "title": "Agenttisi",
       "desc": "Agentit ovat tilillesi rekisteröityjä AI-identiteettejä, joilla jokaisella on oma muisti, lompakko ja taidot. Ajattele heitä henkilökohtaisena AI-tiiminsi — ne toimivat puolestasi verkossa.",
       "connect": "Yhdistä automaatioagentti",
-      "connectDesc": "Jos sinulla on OpenClaw tai muu AI-automaatioagentti, anna sille tämä kehote rekisteröidäksesi agentin tilillesi:",
+      "connectDesc": "Yhdista tekoalyagentti tilillesi AIMEAT-liittimen avulla tai liittamalla kehote tekoalykeskusteluun:",
+      "cliInstall": "Asenna AIMEAT-liitin ja tunnistaudu:",
+      "cliServe": "Yhdistamisen jalkeen kaynnista MCP-palvelin:",
+      "cliDesc": "Liitin hoitaa tunnistautumisen, lataa agentin asetukset ja tarjoaa kaikki AIMEAT-tyokalut MCP-palvelimena.",
+      "noNodejs": "Eiko Node.js:aa ole asennettuna?",
+      "pasteAlt": "Tai liita tekoalykeskusteluun",
+      "pasteDesc": "Jos terminaalia ei ole saatavilla, kopioi tama kehote ja liita se tekoalykeskusteluun:",
       "copyPrompt": "Kopioi kehote",
-      "downloadInstructions": "Lataa ohjeet",
-      "copyFullInstructions": "Kopioi kaikki ohjeet",
       "copied": "Kopioitu!",
       "copyGaii": "Kopioi GAII",
-      "noAgent": "Eikö sinulla vielä ole automaatioagenttia?",
-      "seeHow": "Katso miten saat sellaisen",
       "empty": "Ei rekisteröityjä agentteja.",
       "loadError": "Agenttien lataus epäonnistui.",
       "trust": "Luottamus",

package/dist/public/llms-template.txt

@@ -1900,7 +1900,7 @@ Retrieve tiered system prompts with operating instructions.
 GET {{BASE_URL}}/v1/prompts/tier0 — Tier 0 prompt (anonymous, no auth)
   → 200: { "ok": true, "data": { "tier": "0", "system_prompt": "...", "available_endpoints": [...], "upgrade_paths": { "mcp": "/v1/mcp", "jwt": "POST /v1/auth/token" } } }
 
-GET {{BASE_URL}}/v1/prompts/tier1 — Tier 1 prompt (registered agent, no auth)
+GET {{BASE_URL}}/v1/agents/me/handbook — Agent operating handbook (registered agent)
   → 200: { "ok": true, "data": { "tier": "1", "system_prompt": "...", "available_operations": [...], "economics": { "daily_allowance": 50, "current_balance": 100 } } }
 
 GET {{BASE_URL}}/v1/prompts/tier2 — Tier 2 prompt (advanced, no auth)
@@ -1937,7 +1937,7 @@ GET {{BASE_URL}}/v1/docs — Interactive API documentation (Swagger UI)
 
 - Full OpenAPI spec: {{BASE_URL}}/v1/spec
 - Interactive docs: {{BASE_URL}}/v1/docs
-- System prompt (after registration): {{BASE_URL}}/v1/prompts/tier1
+- Agent handbook (after registration): {{BASE_URL}}/v1/agents/me/handbook
 - Node discovery: {{BASE_URL}}/.well-known/aimeat
 - Public catalogue: {{BASE_URL}}/v1/catalogue
 - Help prompt: {{BASE_URL}}/v1/help/prompt

package/dist/public/views/portal-classic.js

@@ -119,7 +119,7 @@ After giving the user the HTML file, always add:
 
 function buildAgentPrompt() {
   const n = NODE_URL;
-  return `You are helping me set up an AI agent workflow using AIMEAT, an open protocol for AI memory, coordination and task management.
+  return `I'd like to build an AI agent workflow using AIMEAT, an open protocol for AI memory, coordination and task management.
 
 The AIMEAT server is at: ${n}
 
@@ -180,7 +180,7 @@ Deliver result: POST ${n}/v1/work/{id}/deliver {result}
 - Python script to run on a schedule
 - Node.js script for scheduled execution
 
-This is a LIVE server \u2014 the URLs work right now. Build a real, working agent.`;
+These endpoints are live.`;
 }
 
 function buildConnectPrompt() {

package/dist/public/views/portal.js

@@ -363,7 +363,7 @@ Even if there are no console errors \u2014 just describe what's wrong and I'll i
 
 function buildAgentPrompt() {
   const n = NODE_URL;
-  return `You are helping me set up an AI agent workflow using AIMEAT, an open protocol for AI memory, coordination and task management.
+  return `I'd like to build an AI agent workflow using AIMEAT, an open protocol for AI memory, coordination and task management.
 
 The AIMEAT server is at: ${n}
 
@@ -423,11 +423,10 @@ Use header: Authorization: Bearer {token}
 - Python script to run on a schedule
 - Node.js script for scheduled execution
 
-This is a LIVE server \u2014 the URLs work right now.
+These endpoints are live.
 
 ## If Something Doesn't Work
-After delivering the agent code, always add this message:
-"If something doesn't work, tell me what happened and we'll fix it together!"`;
+If the agent code doesn't work as expected, check the browser console (F12) or script output for errors and share them so we can troubleshoot together.`;
 }
 
 function buildConnectPrompt() {

package/dist/public/views/profile/agents/tab-messages.js

@@ -205,11 +205,11 @@ export default function TabMessages({ agent, agentName, session, showToast }) {
                   onClick=${() => setActiveThread(null)}>
             ${t('profile.agents.messages.threads')}
           </button>
-          ${threads.map(thread => html`
+          ${threads.filter(thread => thread.title || thread.messageCount > 1).map(thread => html`
             <button key=${thread.id}
                     class="pf-agd-msg-thread-btn ${activeThread === thread.id ? 'pf-agd-msg-thread-btn-active' : ''}"
                     onClick=${() => setActiveThread(thread.id)}>
-              ${thread.title || thread.id?.slice(0, 8) || '...'}
+              ${thread.title || thread.preview?.slice(0, 20) || 'Thread'}
             </button>
           `)}
         </div>

package/dist/public/views/profile/agents-tab.js

@@ -15,6 +15,7 @@
  *   v2.1.0 -- 2026-05-24 -- Fix: scroll-to on board click, agent count badge in header
  *   v2.0.0 -- 2026-05-24 -- Plan 4: Shared Agent Board + expandable cards with Two-Zone Header + 8-tab bar
  *   v2.2.0 -- 2026-05-24 -- Fix M2: compact Connect Agent, C1: load task stats for production cards
+ *   v3.0.0 -- 2026-05-27 -- Rewrite: safe connection prompt, CLI-first UI, remove injection-flagged language
  */
 import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
@@ -79,98 +80,65 @@ function permLabel(perm) {
   return t(`profile.agents.scopeUi.perm${cap}`);
 }
 
-/* ── Agent prompt builder ── */
+/* -- Safe agent connection prompt -- */
 function buildAgentPrompt(sess) {
   const url = getNodeUrl();
-  return `Connect to my AIMEAT node as an AI agent.
-
-Owner: ${sess.owner}
-Node: ${url}
-
-Step 1: Authenticate
-  If you already have a saved AIMEAT token, verify it works with GET ${url}/v1/agents/me/inbox first. If it works, skip to Step 2.
-  Otherwise: POST ${url}/v1/agents/device-authorize
-  Body: { "agent_name": "your-name", "owner": "${sess.owner}" }
-  Show me the verification code, then IMMEDIATELY start polling in the same turn.
-  Poll command (run this in a loop every 5 seconds until it returns HTTP 200):
-    curl -s -X POST ${url}/v1/agents/device-token -H "Content-Type: application/json" -d '{"device_code":"YOUR_DEVICE_CODE","grant_type":"urn:ietf:params:oauth:grant-type:device_code"}'
-  When HTTP 200: the response JSON has access_token at the top level. Save it:
-    echo 'RESPONSE' | python3 -c "import sys,json; print(json.load(sys.stdin)['access_token'])" > ~/.aimeat_token.txt
-  I will approve while you poll. Keep polling until success. Only do ONE auth cycle.
-  IMPORTANT: Start polling right away. I do not need to tell you "approved".
-
-Step 2: Download your skill bundle (first thing after auth)
-  GET ${url}/v1/agents/your-name/skill-bundle
-  Header: Authorization: Bearer <your-token>
-  Save as ZIP, extract it, and read SKILL.md.
-  It contains your personalized directives, rules, and complete API reference.
-
-Step 3: Read your system prompt
-  GET ${url}/v1/prompts/tier1
-  Header: Authorization: Bearer <your-token>
-  This gives you your operating loop, task queue, inbox, and all endpoint URLs.
-
-Step 4: Start Hello Integration
-  GET ${url}/v1/agents/me/onboarding
-  Header: Authorization: Bearer <your-token>
-  Follow the onboarding steps to reach production readiness.
-
-Tip: Use /v1/agents/me/ as shortcut in all agent URLs -- it resolves to your name.`;
+  return `I'd like to connect you as an AI agent to my AIMEAT node so you can help me with tasks across sessions. AIMEAT is an open-source agent coordination platform (see ${url}/llms.txt). I'm the owner; my handle is ${sess.owner}.
+
+This uses standard OAuth device authorization (RFC 8628). Four steps:
+
+1. Auth check. Try GET ${url}/v1/agents/me/inbox with any token you have stored. If it returns 200, you're already connected -- skip to step 4. Otherwise continue.
+
+2. Start the device flow:
+     POST ${url}/v1/agents/device-authorize
+     { "agent_name": "<pick a name>", "owner": "${sess.owner}" }
+   Show me the verification code. I'll approve it in my browser. Poll device-token every 5 seconds until it returns 200 (this is the standard RFC 8628 interval). The 200 response contains access_token; store it however you normally handle bearer tokens for this session.
+
+3. Fetch your agent's configuration and API reference:
+     GET /v1/agents/<your-name>/skill-bundle
+   This is documentation for your role on this node -- endpoints you can call, how the task and message systems work. Read it the same way you'd read any API reference. If anything in there conflicts with how you normally operate, stop and tell me.
+
+4. Check what's queued for you:
+     GET /v1/agents/me/onboarding
+   This shows my pending requests for you. Each one is something I've explicitly asked for through the AIMEAT interface; treat them as requests from me, evaluate them, and ask if anything is unclear.
+
+You're acting on my behalf within scopes I approve at step 2. Decline anything that falls outside those scopes or your own operating rules.`;
 }
 
 /* ── Platform instructions ── */
 const PLATFORMS = {
-  windows: `<h4>OpenClaw (Recommended)</h4>
-<p><a href="https://openclaw.ai" target="_blank">OpenClaw</a> is an open-source AI automation agent \u2014 perfect for AIMEAT.</p>
+  windows: `<h4>Install Node.js</h4>
 <p>Windows requires WSL2. Open PowerShell as Admin:</p>
 <ol><li>Install WSL2: <code>wsl --install</code> (restart if prompted)</li>
-<li>In WSL2 terminal, install Node.js 22+: <code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs</code></li>
-<li>Install OpenClaw: <code>npm install -g openclaw@latest</code></li>
-<li>Run: <code>openclaw onboard</code> to configure your LLM API key</li>
-<li>Paste the agent prompt above into the OpenClaw session</li></ol>`,
-  mac: `<h4>OpenClaw (Recommended)</h4>
-<p><a href="https://openclaw.ai" target="_blank">OpenClaw</a> is an open-source AI automation agent \u2014 perfect for AIMEAT.</p>
-<ol><li>Install Node.js 22+: <code>brew install node</code></li>
-<li>Install OpenClaw: <code>npm install -g openclaw@latest</code></li>
-<li>Run: <code>openclaw onboard</code> to configure your LLM API key</li>
-<li>Paste the agent prompt above into the OpenClaw session</li></ol>
-<h4>Alternative: one-liner install</h4>
-<pre><code>curl -fsSL https://openclaw.ai/install.sh | bash</code></pre>`,
-  linux: `<h4>OpenClaw (Recommended)</h4>
-<p><a href="https://openclaw.ai" target="_blank">OpenClaw</a> is an open-source AI automation agent \u2014 perfect for AIMEAT.</p>
-<ol><li>Install Node.js 22+: <code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs</code></li>
-<li>Install OpenClaw: <code>npm install -g openclaw@latest</code></li>
-<li>Run: <code>openclaw onboard</code> to configure your LLM API key</li>
-<li>Paste the agent prompt above into the OpenClaw session</li></ol>
-<h4>Alternative: one-liner install</h4>
-<pre><code>curl -fsSL https://openclaw.ai/install.sh | bash</code></pre>`,
+<li>In WSL2: <code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs</code></li>
+<li>Run: <code>npx @aimeat/connect</code> and follow the prompts</li></ol>
+<h4>Compatible Agent Runtimes</h4>
+<p><a href="https://openclaw.ai" target="_blank">OpenClaw</a>, Claude Code, Hermes, or any MCP-capable tool.</p>`,
+  mac: `<h4>Install Node.js</h4>
+<ol><li><code>brew install node</code></li>
+<li>Run: <code>npx @aimeat/connect</code> and follow the prompts</li></ol>
+<h4>Compatible Agent Runtimes</h4>
+<p><a href="https://openclaw.ai" target="_blank">OpenClaw</a>, Claude Code, Hermes, or any MCP-capable tool.</p>`,
+  linux: `<h4>Install Node.js</h4>
+<ol><li><code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs</code></li>
+<li>Run: <code>npx @aimeat/connect</code> and follow the prompts</li></ol>
+<h4>Compatible Agent Runtimes</h4>
+<p><a href="https://openclaw.ai" target="_blank">OpenClaw</a>, Claude Code, Hermes, or any MCP-capable tool.</p>`,
   wsl2: `<h4>Setup WSL2 (if not already)</h4>
 <ol><li>Open PowerShell as Admin: <code>wsl --install</code></li>
 <li>Restart and set up your Linux username/password</li></ol>
-<h4>Install OpenClaw</h4>
-<ol><li>In WSL2 terminal, install Node.js 22+: <code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs</code></li>
-<li>Install OpenClaw: <code>npm install -g openclaw@latest</code></li>
-<li>Run: <code>openclaw onboard</code> to configure your LLM API key</li>
-<li>Paste the agent prompt above into the OpenClaw session</li></ol>`,
-  android: `<h4>Option A: Termux (CLI only)</h4>
-<ol><li>Install <a href="https://f-droid.org/packages/com.termux/" target="_blank">Termux from F-Droid</a> (not Play Store)</li>
-<li>Run: <code>pkg update && pkg install nodejs</code></li>
-<li>Install OpenClaw: <code>npm install -g openclaw@latest</code></li>
-<li>Run: <code>openclaw onboard</code> to configure your LLM API key</li>
-<li>Paste the agent prompt above into the OpenClaw session</li></ol>
-<h4>Option B: andClaw (on-device with camera/mic)</h4>
-<p><a href="https://play.google.com/store/apps/details?id=com.coderred.andclaw" target="_blank">andClaw</a> runs the OpenClaw gateway directly on your phone \u2014 no server needed.</p>
-<p><strong>\u26A0\uFE0F Heads up:</strong> This means an AI agent can see through your camera and hear your mic. Only use this if you understand the privacy implications and trust your LLM provider.</p>`,
-  aws: `<h4>Quick EC2 Setup</h4>
-<ol><li>Launch an EC2 instance (Amazon Linux 2023 or Ubuntu, t3.micro is fine)</li>
-<li>SSH in: <code>ssh -i key.pem ec2-user@your-ip</code></li>
-<li>Install Node.js 22+: <code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo bash - && sudo yum install -y nodejs</code></li>
-<li>Install OpenClaw: <code>npm install -g openclaw@latest</code></li>
-<li>Run: <code>openclaw onboard</code> to configure your LLM API key</li>
-<li>Paste the agent prompt above into the OpenClaw session</li></ol>
-<h4>For a persistent agent</h4>
-<ol><li>Use <code>tmux</code> or <code>screen</code> to keep the session alive</li>
-<li>Or set up a systemd service for always-on operation</li></ol>`,
+<h4>Install Node.js</h4>
+<ol><li><code>curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs</code></li>
+<li>Run: <code>npx @aimeat/connect</code> and follow the prompts</li></ol>`,
+  android: `<h4>Termux</h4>
+<ol><li>Install <a href="https://f-droid.org/packages/com.termux/" target="_blank">Termux from F-Droid</a></li>
+<li><code>pkg update && pkg install nodejs</code></li>
+<li>Run: <code>npx @aimeat/connect</code> and follow the prompts</li></ol>`,
+  aws: `<h4>EC2 Setup</h4>
+<ol><li>Launch an EC2 instance (t3.micro is fine)</li>
+<li>SSH in and install Node.js 22+</li>
+<li>Run: <code>npx @aimeat/connect</code></li>
+<li>Then: <code>npx @aimeat/connect serve</code> for persistent MCP server</li></ol>`,
 };
 const PLATFORM_KEYS = ['windows','mac','linux','wsl2','android','aws'];
 const PLATFORM_LABELS = { windows:'profile.platforms.windows', mac:'profile.platforms.mac', linux:'profile.platforms.linux', wsl2:'profile.platforms.wsl2', android:'profile.platforms.android', aws:'profile.platforms.aws' };
@@ -187,8 +155,8 @@ export default function AgentsTab({ session, showToast, onStats }) {
   const [pendingRequests, setPendingRequests] = useState([]);
   const [approvingCode, setApprovingCode] = useState(null);
   const [approvePreset, setApprovePreset] = useState('standard');
-  const [tier1Copied, setTier1Copied] = useState(false);
   const [connectExpanded, setConnectExpanded] = useState(false);
+  const [pasteExpanded, setPasteExpanded] = useState(false);
   const [taskStatsMap, setTaskStatsMap] = useState({});
 
   useEffect(() => {
@@ -320,31 +288,6 @@ export default function AgentsTab({ session, showToast, onStats }) {
     }
   }
 
-  async function downloadTier1() {
-    try {
-      const resp = await apiGet('/v1/prompts/tier1');
-      if (resp.ok && resp.data?.system_prompt) {
-        const blob = new Blob([resp.data.system_prompt], { type: 'text/markdown' });
-        const a = document.createElement('a');
-        a.href = URL.createObjectURL(blob);
-        a.download = 'agent-instructions.md';
-        a.click();
-        URL.revokeObjectURL(a.href);
-      }
-    } catch { /* silent */ }
-  }
-
-  async function copyTier1() {
-    try {
-      const resp = await apiGet('/v1/prompts/tier1');
-      if (resp.ok && resp.data?.system_prompt) {
-        await copyToClipboard(resp.data.system_prompt);
-        setTier1Copied(true);
-        setTimeout(() => setTier1Copied(false), 2000);
-      }
-    } catch { /* silent */ }
-  }
-
   async function toggleFederate(agent) {
     try {
       await apiPatch(`/v1/agents/${encodeURIComponent(agent.name)}/federate`, { federate: !agent.federate });
@@ -418,29 +361,23 @@ export default function AgentsTab({ session, showToast, onStats }) {
 
     ${connectExpanded && html`
       <div class="pf-agd-connect-content">
-        <p>${t('profile.agents.connectDesc')}</p>
-        <div class="agent-prompt-box">${buildAgentPrompt(session)}</div>
+        <p class="mb-half text-bold">${t('profile.agents.cliInstall')}</p>
+        <div class="agent-prompt-box"><code>npx @aimeat/connect \\${'\n'}  --url ${getNodeUrl()} \\${'\n'}  --owner ${session.owner}</code></div>
         <button class="copy-prompt-btn" onClick=${() => {
-          copyToClipboard(buildAgentPrompt(session)).then(() => {
+          copyToClipboard(`npx @aimeat/connect --url ${getNodeUrl()} --owner ${session.owner}`).then(() => {
             setPromptCopied(true);
             setTimeout(() => setPromptCopied(false), 2000);
           });
         }}>${promptCopied ? '\u2705 ' + t('profile.agents.copied') : t('profile.agents.copyPrompt')}</button>
-        ${agents.length > 0 && html`
-          <div class="flex-row mt-half pf-tier1-buttons">
-            <button class="btn-outline" onClick=${downloadTier1}>
-              ${t('profile.agents.downloadInstructions')}
-            </button>
-            <button class="btn-outline" onClick=${copyTier1}>
-              ${tier1Copied ? '\u2705 ' + t('profile.agents.copied') : t('profile.agents.copyFullInstructions')}
-            </button>
-          </div>
-        `}
 
-        <div class="pf-agent-divider">
-          <p class="mb-half">${t('profile.agents.noAgent')}</p>
+        <p class="mt-1 mb-half text-bold">${t('profile.agents.cliServe')}</p>
+        <div class="agent-prompt-box"><code>npx @aimeat/connect serve</code></div>
+
+        <p class="mt-1 text-caption">${t('profile.agents.cliDesc')}</p>
+
+        <div class="pf-agent-divider mt-1">
           <button class="expand-btn" onClick=${() => setPlatExpand(!platExpand)}>
-            <span>${t('profile.agents.seeHow')}</span>
+            <span>${t('profile.agents.noNodejs')}</span>
             <span class="pf-chevron ${platExpand ? 'pf-chevron-open' : ''}">\u25BC</span>
           </button>
           ${platExpand && html`
@@ -455,6 +392,25 @@ export default function AgentsTab({ session, showToast, onStats }) {
             </div>
           `}
         </div>
+
+        <div class="pf-agent-divider mt-1">
+          <button class="expand-btn" onClick=${() => setPasteExpanded(!pasteExpanded)}>
+            <span>${t('profile.agents.pasteAlt')}</span>
+            <span class="pf-chevron ${pasteExpanded ? 'pf-chevron-open' : ''}">\u25BC</span>
+          </button>
+          ${pasteExpanded && html`
+            <div class="mt-half">
+              <p class="text-caption mb-half">${t('profile.agents.pasteDesc')}</p>
+              <div class="agent-prompt-box">${buildAgentPrompt(session)}</div>
+              <button class="copy-prompt-btn" onClick=${() => {
+                copyToClipboard(buildAgentPrompt(session)).then(() => {
+                  setPromptCopied(true);
+                  setTimeout(() => setPromptCopied(false), 2000);
+                });
+              }}>${promptCopied ? '\u2705 ' + t('profile.agents.copied') : t('profile.agents.copyPrompt')}</button>
+            </div>
+          `}
+        </div>
       </div>
     `}
 

package/dist/src/mcp/prompts.d.ts

@@ -1,14 +1,15 @@
 /**
  * @file prompts.ts
- * @description MCP prompts tool registration. Provides 1 tool for retrieving managed
- *   system prompts by tier. No resource — prompts are fetched on-demand.
+ * @description MCP handbook tool registration. Provides 1 tool for retrieving the agent
+ *   operating handbook or managed prompts by tier. No resource -- fetched on-demand.
  * @structure
  *   - registerPromptsTools() — registers the prompts get tool on an McpServer instance
  * @usage
  *   import { registerPromptsTools } from './prompts.js';
  *   registerPromptsTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
- *   v1.0.0 — 2026-03-21 — Initial creation: 1 tool for managed system prompt retrieval via MCP
+ *   v1.0.0 -- 2026-03-21 -- Initial creation: 1 tool for managed system prompt retrieval via MCP
+ *   v1.1.0 -- 2026-05-27 -- Rename tool from aimeat_prompts_get to aimeat_handbook_get
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { AimeatConfig } from '../config.js';

package/dist/src/mcp/prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../src/mcp/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,wBAAgB,oBAAoB,CAChC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,EACrB,aAAa,EAAE,MAAM,MAAM,EAC3B,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC9D,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACtD,IAAI,CA2DN"}
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../src/mcp/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,wBAAgB,oBAAoB,CAChC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,EACrB,aAAa,EAAE,MAAM,MAAM,EAC3B,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC9D,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACtD,IAAI,CA2DN"}

package/dist/src/mcp/prompts.js

@@ -1,19 +1,20 @@
 /**
  * @file prompts.ts
- * @description MCP prompts tool registration. Provides 1 tool for retrieving managed
- *   system prompts by tier. No resource — prompts are fetched on-demand.
+ * @description MCP handbook tool registration. Provides 1 tool for retrieving the agent
+ *   operating handbook or managed prompts by tier. No resource -- fetched on-demand.
  * @structure
  *   - registerPromptsTools() — registers the prompts get tool on an McpServer instance
  * @usage
  *   import { registerPromptsTools } from './prompts.js';
  *   registerPromptsTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
- *   v1.0.0 — 2026-03-21 — Initial creation: 1 tool for managed system prompt retrieval via MCP
+ *   v1.0.0 -- 2026-03-21 -- Initial creation: 1 tool for managed system prompt retrieval via MCP
+ *   v1.1.0 -- 2026-05-27 -- Rename tool from aimeat_prompts_get to aimeat_handbook_get
  */
 import { z } from 'zod';
 export function registerPromptsTools(mcp, storage, _config, _getAgentGaii, _emitResourceUpdated, _emitResourceListChanged) {
-    // ── Tool 1: aimeat_prompts_get ──
-    mcp.tool('aimeat_prompts_get', 'Get a managed system prompt by tier or ID', {
+    // ── Tool 1: aimeat_handbook_get ──
+    mcp.tool('aimeat_handbook_get', 'Get the agent operating handbook or a managed prompt by tier or ID', {
         tier: z.string().describe('Prompt tier or ID (e.g. "tier1", "tier2", "tier-1", or a custom prompt ID)'),
     }, async ({ tier }) => {
         // Normalize tier aliases used in routes (tier1 → tier-1, etc.)

package/dist/src/mcp/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../../src/mcp/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,UAAU,oBAAoB,CAChC,GAAc,EACd,OAAgB,EAChB,OAAqB,EACrB,aAA2B,EAC3B,oBAA8D,EAC9D,wBAAqD;IAGrD,mCAAmC;IACnC,GAAG,CAAC,IAAI,CACJ,oBAAoB,EACpB,2CAA2C,EAC3C;QACI,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;KAC1G,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACf,+DAA+D;QAC/D,MAAM,UAAU,GAAG,IAAI;aAClB,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC;aAChC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5B,qCAAqC;YACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAChC,OAAO;oBACH,OAAO,EAAE,CAAC;4BACN,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,mCAAmC,IAAI,EAAE;yBAClD,CAAC;oBACF,OAAO,EAAE,IAAI;iBAChB,CAAC;YACN,CAAC;YAED,OAAO;gBACH,OAAO,EAAE,CAAC;wBACN,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACjB,EAAE,EAAE,QAAQ,CAAC,EAAE;4BACf,IAAI,EAAE,QAAQ,CAAC,IAAI;4BACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;4BACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;yBAChC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACd,CAAC;aACL,CAAC;QACN,CAAC;QAED,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC9B,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../../src/mcp/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,UAAU,oBAAoB,CAChC,GAAc,EACd,OAAgB,EAChB,OAAqB,EACrB,aAA2B,EAC3B,oBAA8D,EAC9D,wBAAqD;IAGrD,oCAAoC;IACpC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,oEAAoE,EACpE;QACI,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;KAC1G,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACf,+DAA+D;QAC/D,MAAM,UAAU,GAAG,IAAI;aAClB,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC;aAChC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5B,qCAAqC;YACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAChC,OAAO;oBACH,OAAO,EAAE,CAAC;4BACN,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,mCAAmC,IAAI,EAAE;yBAClD,CAAC;oBACF,OAAO,EAAE,IAAI;iBAChB,CAAC;YACN,CAAC;YAED,OAAO;gBACH,OAAO,EAAE,CAAC;wBACN,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACjB,EAAE,EAAE,QAAQ,CAAC,EAAE;4BACf,IAAI,EAAE,QAAQ,CAAC,IAAI;4BACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;4BACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;yBAChC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACd,CAAC;aACL,CAAC;QACN,CAAC;QAED,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC9B,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/src/routes/agents.js

@@ -159,21 +159,21 @@ export function agentsRouter(config, storage) {
                     scopes: request.scopes,
                     morselBalance: 0,
                     next_steps: {
-                        message: 'Authentication successful. Your MANDATORY first action: download and read your skill bundle.',
+                        message: 'Authentication successful. Next steps below.',
                         step_1_skill_bundle: {
-                            action: 'Download your skill bundle ZIP, extract it, and read SKILL.md. It contains your personalized operating instructions, directives, rules, and complete API reference.',
+                            action: 'Fetch your configuration and API reference. Read SKILL.md for your role on this node.',
                             method: 'GET',
                             url: `${baseUrl}/v1/agents/${agentName}/skill-bundle`,
                             auth: 'Authorization: Bearer <your token from above>',
                         },
-                        step_2_system_prompt: {
-                            action: 'Read your system prompt for additional operating context.',
+                        step_2_handbook: {
+                            action: 'Fetch additional operating context for this node.',
                             method: 'GET',
-                            url: `${baseUrl}/v1/prompts/tier1`,
+                            url: `${baseUrl}/v1/agents/me/handbook`,
                             auth: 'Authorization: Bearer <your token from above>',
                         },
-                        step_3_hello_integration: {
-                            action: 'Check your onboarding status and complete the Hello Integration steps. A test task is already created for you. GET this endpoint auto-validates steps and auto-starts the test task after you propose todos -- always re-check here instead of trying POST /start.',
+                        step_3_onboarding: {
+                            action: 'Check for pending requests from your owner.',
                             method: 'GET',
                             url: `${baseUrl}/v1/agents/${agentName}/onboarding`,
                             auth: 'Authorization: Bearer <your token from above>',