aimeat 2.1.0 → 2.2.0

package/dist/public/views/profile/libraries-tab.js

@@ -32,11 +32,19 @@ const KIND_GROUPS = [
 ];
 const TIER_FILTERS = ['all', 'any', 'frontier', 'needs-doc'];
 
+// The tier is an INSTRUCTION to the reader ("this API has no training-data priors, so an
+// AI must fetch its doc"), not a statement that documentation is missing. The raw key
+// `needs-doc` read as "docs missing" to everyone including the registry's own author, so
+// the badge shows the instruction and keeps the key only as a CSS/filter value.
+function tierLabel(tier) {
+  return t('profile.extensions.tierLabel.' + tier) || tier;
+}
+
 function tierBadge(p) {
   if (!p.modelTier) return null;
   const measured = p.proofs && p.proofs.length;
   return html`<span class="ext-tier ext-tier-${p.modelTier}${measured ? ' ext-tier-measured' : ''}"
-    title=${t('profile.extensions.tier.' + p.modelTier)}>${p.modelTier}</span>`;
+    title=${t('profile.extensions.tier.' + p.modelTier)}>${tierLabel(p.modelTier)}</span>`;
 }
 
 function statusBadge(p) {
@@ -157,7 +165,7 @@ export default function LibrariesTab() {
         <div class="lib-tier-filters">
           ${TIER_FILTERS.map(tf => html`
             <button class=${'btn-ghost lib-tier-btn' + (tier === tf ? ' lib-tier-active' : '')}
-              onClick=${() => setTier(tf)}>${tf === 'all' ? t('librariesTab.tierAll') : tf}</button>`)}
+              onClick=${() => setTier(tf)}>${tf === 'all' ? t('librariesTab.tierAll') : tierLabel(tf)}</button>`)}
         </div>
         <label class="lib-measured-toggle">
           <input type="checkbox" checked=${measuredOnly} onChange=${e => setMeasuredOnly(e.target.checked)} />

package/dist/public/views/profile/wallet-tab.js

@@ -3,6 +3,11 @@
  * @description Profile tab for morsel wallet: balance overview, lifetime stats,
  *   morsel request form, and transaction history with expandable details.
  * @version-history
+ *   v1.5.1 — 2026-07-25 — The x402 chip reports every currency → token pair the node can settle
+ *     (USD → USDC, EUR → EURC) instead of a single hardcoded token (TARGET-042).
+ *   v1.5.0 — 2026-07-25 — Payout rails: an x402 USDC payout-address section beside the Stripe one, so a
+ *     seller can set the address a stablecoin sale settles to and tell the two rails apart (Stripe moves
+ *     fiat through a provider; x402 settles USDC on-chain to an address the seller controls).
  *   v1.0.0 — 2026-03-16 — Initial wallet tab
  *   v1.1.0 — 2026-03-17 — Replace inline styles with CSS classes
  *   v1.2.0 — 2026-05-22 — Show info message for federated users instead of infinite spinner
@@ -83,6 +88,64 @@ function PspSection() {
     </div>`;
 }
 
+/* "Stablecoin payouts (x402)" — the seller's on-chain payout address.
+ * A different rail from Stripe, and the difference matters at sale time: Stripe settles EUR/USD to a
+ * connected account through a provider that holds the funds; x402 settles a stablecoin on-chain
+ * straight to this address, non-custodially, with the node holding no key. The token follows the
+ * price (USD → USDC, EUR → EURC) and ONE address receives them all, so the chip reports the pairs
+ * the node can actually settle rather than naming a single token. A money sale over x402 without an
+ * address fails with SELLER_NO_X402_ADDRESS, which is exactly what this section prevents. */
+function X402Section() {
+  const [state, setState] = useState(null);
+  const [addr, setAddr] = useState('');
+  const [busy, setBusy] = useState(false);
+  const [msg, setMsg] = useState('');
+  const load = useCallback(() => {
+    apiGet('/v1/commerce/payout').then(r => setState(r.data ?? null)).catch(() => setState(false));
+  }, []);
+  useEffect(() => { load(); }, [load]);
+  useEffect(() => {
+    const handler = () => load();
+    window.addEventListener('aimeat-live-update', handler);
+    return () => window.removeEventListener('aimeat-live-update', handler);
+  }, [load]);
+  if (state === null || state === false) return null;
+  const x = state.x402 || {};
+  if (!x.enabled) return null;              // the operator has not enabled the rail on this node
+  const valid = /^0x[a-fA-F0-9]{40}$/.test(addr.trim());
+  async function save() {
+    setBusy(true); setMsg('');
+    try { await apiPut('/v1/commerce/payout/x402', { address: addr.trim() }); setAddr(''); setMsg(t('profile.wallet.x402Saved')); load(); }
+    catch (e) { setMsg(e.message || 'Save failed'); }
+    finally { setBusy(false); }
+  }
+  async function remove() {
+    setBusy(true); setMsg('');
+    try { await apiDelete('/v1/commerce/payout/x402'); setMsg(t('profile.wallet.x402Removed')); load(); }
+    catch (e) { setMsg(e.message || 'Remove failed'); }
+    finally { setBusy(false); }
+  }
+  return html`
+    <div class="section-title mt-2">${t('profile.wallet.x402Title')}</div>
+    <div class="section-desc">${t('profile.wallet.x402Desc')}</div>
+    <div class="card wallet-psp">
+      <div class="wallet-rail-row">
+        ${x.configured
+          ? html`<span class="pf-psp-chip pf-psp-chip--ok">${t('profile.wallet.x402Configured')} <code>${x.address}</code></span>`
+          : html`<span class="pf-psp-chip pf-psp-chip--warn">${t('profile.wallet.x402Missing')}</span>`}
+        <span class="pf-psp-chip">${(x.assets || []).map(a => `${a.currency} → ${a.symbol}`).join(' · ')} · ${x.network}${x.testnet ? ` · ${t('profile.wallet.x402Testnet')}` : ''}</span>
+      </div>
+      <div class="wallet-psp-row">
+        <input class="input-field input-sm wallet-psp-input" type="text" spellcheck="false" placeholder="0x…"
+               value=${addr} onInput=${(e) => setAddr(e.target.value)} />
+        <button class="btn-primary btn-sm" disabled=${busy || !valid} onClick=${save}>${t('profile.wallet.x402Save')}</button>
+        ${x.configured && html`<button class="btn-ghost btn-sm" disabled=${busy} onClick=${remove}>${t('profile.wallet.x402Remove')}</button>`}
+      </div>
+      ${addr.trim() && !valid && html`<span class="text-meta">${t('profile.wallet.x402Invalid')}</span>`}
+      ${msg && html`<span class="text-meta">${msg}</span>`}
+    </div>`;
+}
+
 /* "Money purchases & sales" — real-money (EUR/USD) checkout activity, separate from morsels.
  * Purchases come from the buyer's checkout sessions, sales from received orders; both filtered to
  * money currencies (minor units → major). Renders nothing when there is no money activity. */
@@ -247,6 +310,7 @@ export default function WalletTab({ session, showToast, onStats }) {
 
     <!-- Selling & payment provider (individual seller's own Stripe key; EE nodes only) -->
     <${PspSection} />
+    <${X402Section} />
 
     <!-- Real-money (EUR/USD) purchases & sales, separate from the morsel ledger -->
     <${MoneyActivity} initial=${moneyInitial} />

package/dist/scripts/check-openapi.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check-openapi.d.ts.map

package/dist/scripts/check-openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-openapi.d.ts","sourceRoot":"","sources":["../../scripts/check-openapi.ts"],"names":[],"mappings":""}

package/dist/scripts/check-openapi.js

@@ -0,0 +1,139 @@
+/**
+ * @file check-openapi.ts
+ * @description Pre-commit / CI guard for `openapi.yaml`. Rule 3 makes the spec the canonical API
+ *   contract, but nothing verified it was still machine-readable — and it had quietly stopped being
+ *   so in two different ways, both found live on main:
+ *
+ *     1. A DANGLING $ref (`#/components/schemas/SuccessEnvelope`; the schema is `AimeatEnvelope`)
+ *        broke `pnpm generate:types` outright. Rule 3's OWN tool could not run.
+ *     2. A PORTABILITY trap: `description: Whole document portion public? }` inside a flow mapping.
+ *        The repo's `yaml` package and openapi-typescript both accept it, so nothing here complained
+ *        — but PyYAML rejects it, and PyYAML is what most Python OpenAPI tooling is built on
+ *        (openapi-spec-validator, prance, datamodel-code-generator). A consumer would have seen a
+ *        syntax error instead of our API, and we would never have known.
+ *
+ *   So this checks three things, cheapest first, and each one exists because it already failed.
+ * @structure
+ *   - parse with the `yaml` package (genuine syntax errors)
+ *   - resolve every internal `$ref` (the break that stopped codegen)
+ *   - flag unquoted flow-mapping scalars containing `?` (accepted here, rejected by YAML 1.1 parsers)
+ * @usage  pnpm check:openapi   (exits non-zero on a parse error, a dangling $ref, or a portability trap)
+ * @version-history
+ *   v1.0.0 — 2026-07-26 — Initial guard, after both failure modes were found live on main.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { parse as parseYaml, parseDocument, visit, isCollection } from 'yaml';
+const here = dirname(fileURLToPath(import.meta.url));
+const SPEC = join(here, '..', '..', 'openapi.yaml');
+const raw = readFileSync(SPEC, 'utf8');
+// ── 1. Does it parse at all? ────────────────────────────────────────────────
+let doc;
+try {
+    doc = parseYaml(raw, { strict: true });
+}
+catch (err) {
+    console.error('✗ openapi.yaml does not parse');
+    console.error(`  ${err.message}`);
+    process.exit(1);
+}
+// ── 2. Does every internal $ref resolve? ────────────────────────────────────
+/** Resolve a `#/a/b/c` JSON pointer against the document. undefined when it dangles. */
+function resolvePointer(root, ref) {
+    const parts = ref.slice(2).split('/').map(p => p.replace(/~1/g, '/').replace(/~0/g, '~'));
+    let node = root;
+    for (const part of parts) {
+        if (node === null || typeof node !== 'object')
+            return undefined;
+        node = node[part];
+        if (node === undefined)
+            return undefined;
+    }
+    return node;
+}
+const dangling = [];
+let refCount = 0;
+function walk(node, path) {
+    if (Array.isArray(node)) {
+        node.forEach((v, i) => walk(v, `${path}/${i}`));
+        return;
+    }
+    if (node === null || typeof node !== 'object')
+        return;
+    for (const [key, value] of Object.entries(node)) {
+        if (key === '$ref' && typeof value === 'string') {
+            // Only internal pointers are ours to guarantee; an external file/URL ref is the
+            // codegen tool's business.
+            if (value.startsWith('#/')) {
+                refCount++;
+                if (resolvePointer(doc, value) === undefined)
+                    dangling.push({ path, ref: value });
+            }
+            continue;
+        }
+        walk(value, `${path}/${key.replace(/~/g, '~0').replace(/\//g, '~1')}`);
+    }
+}
+walk(doc, '#');
+// ── 3. Portability: plain scalars inside { } that YAML 1.1 parsers reject ───
+// `?` is an indicator character. Inside a flow collection a PLAIN (unquoted) scalar containing one
+// is accepted by the `yaml` package but rejected by PyYAML, so the spec parses here and fails for a
+// Python consumer. Quoting the value fixes it and costs nothing.
+//
+// This walks the AST rather than the text: a line-based scan cannot tell a real flow mapping from a
+// `{ … }` that is merely prose inside a block description, and this file is full of the latter (12
+// false positives on the first attempt). Node type PLAIN + an ancestor collection with flow=true is
+// the exact condition, and nothing else.
+const portability = [];
+const lineStarts = [0];
+for (let i = 0; i < raw.length; i++)
+    if (raw[i] === '\n')
+        lineStarts.push(i + 1);
+const lineOf = (offset) => {
+    let lo = 0, hi = lineStarts.length - 1;
+    while (lo < hi) {
+        const mid = (lo + hi + 1) >> 1;
+        if (lineStarts[mid] <= offset)
+            lo = mid;
+        else
+            hi = mid - 1;
+    }
+    return lo + 1;
+};
+const cst = parseDocument(raw);
+visit(cst, {
+    Scalar(_key, node, path) {
+        if (node.type !== 'PLAIN')
+            return;
+        const value = typeof node.value === 'string' ? node.value : '';
+        if (!value.includes('?'))
+            return;
+        const inFlow = path.some(p => isCollection(p) && p.flow === true);
+        if (!inFlow)
+            return;
+        const line = node.range ? lineOf(node.range[0]) : 0;
+        portability.push({ line, text: raw.split(/\r?\n/)[line - 1]?.trim() ?? value });
+    },
+});
+// ── Report ──────────────────────────────────────────────────────────────────
+let failed = false;
+if (dangling.length) {
+    failed = true;
+    console.error(`✗ ${dangling.length} dangling $ref(s) — \`pnpm generate:types\` cannot run:`);
+    for (const d of dangling)
+        console.error(`  ${d.ref}\n    at ${d.path}`);
+}
+if (portability.length) {
+    failed = true;
+    console.error(`✗ ${portability.length} unquoted flow scalar(s) containing "?" — this file parses here but`);
+    console.error('  fails in PyYAML-based OpenAPI tooling. Quote the value:');
+    for (const p of portability)
+        console.error(`  openapi.yaml:${p.line}  ${p.text.slice(0, 110)}`);
+}
+if (failed)
+    process.exit(1);
+const spec = doc;
+console.log(`✓ openapi.yaml parses, all ${refCount} internal $refs resolve, no flow-scalar portability traps `
+    + `— ${Object.keys(spec.paths ?? {}).length} paths, ${Object.keys(spec.components?.schemas ?? {}).length} schemas.`);
+//# sourceMappingURL=check-openapi.js.map

package/dist/scripts/check-openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-openapi.js","sourceRoot":"","sources":["../../scripts/check-openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAE9E,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AACpD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAEvC,+EAA+E;AAC/E,IAAI,GAAY,CAAC;AACjB,IAAI,CAAC;IACD,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,+EAA+E;AAE/E,wFAAwF;AACxF,SAAS,cAAc,CAAC,IAAa,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,GAAI,IAAgC,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,QAAQ,GAAoC,EAAE,CAAC;AACrD,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB,SAAS,IAAI,CAAC,IAAa,EAAE,IAAY;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,OAAO;IACX,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9C,gFAAgF;YAChF,2BAA2B;YAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,QAAQ,EAAE,CAAC;gBACX,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,SAAS;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;AACL,CAAC;AACD,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAEf,+EAA+E;AAC/E,mGAAmG;AACnG,oGAAoG;AACpG,iEAAiE;AACjE,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,oGAAoG;AACpG,yCAAyC;AACzC,MAAM,WAAW,GAAqC,EAAE,CAAC;AACzD,MAAM,UAAU,GAAa,CAAC,CAAC,CAAC,CAAC;AACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;IAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACjF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAU,EAAE;IACtC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM;YAAE,EAAE,GAAG,GAAG,CAAC;;YAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;AAC/B,KAAK,CAAC,GAAG,EAAE;IACP,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI;QACnB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAClC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAK,CAAwB,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;CACJ,CAAC,CAAC;AAEH,+EAA+E;AAC/E,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClB,MAAM,GAAG,IAAI,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,yDAAyD,CAAC,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;IACrB,MAAM,GAAG,IAAI,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,MAAM,qEAAqE,CAAC,CAAC;IAC5G,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,IAAI,MAAM;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5B,MAAM,IAAI,GAAG,GAA8F,CAAC;AAC5G,OAAO,CAAC,GAAG,CACP,8BAA8B,QAAQ,4DAA4D;MAChG,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,WAAW,CACtH,CAAC"}

package/dist/scripts/embed-viewport.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @file embed-viewport.ts
+ * @description Keeps the copy of aimeat-viewport.js that is embedded inside other cortex packs
+ *   byte-identical to the source. Cortex packs are served live and each declares a single script
+ *   tag with no `requires`, so a pack that needs the shared camera cannot simply depend on it —
+ *   splitting a pack into two files would break every app carrying the old single tag. The camera
+ *   is therefore copied INTO the consuming pack between generated markers, and this script is the
+ *   only thing allowed to write that region. `--check` (pre-commit + CI) fails on drift, so the
+ *   duplicate can never quietly diverge from the source.
+ * @structure
+ *   - SOURCE / TARGETS  → the camera file and every pack that embeds it
+ *   - detectEol/toEol   → preserve each target's existing line endings (Windows checkouts)
+ *   - main()            → write mode (default) or --check mode (exit 1 on drift)
+ * @usage
+ *   pnpm sync:viewport     # rewrite the embedded region in every target
+ *   pnpm check:viewport    # verify, non-zero exit on drift
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial (TARGET-051 Slice 1): aimeat-dag embeds aimeat-viewport.
+ *   v1.1.0 — 2026-07-25 — Also assert every pack's VERSION constant matches its manifest;
+ *     they crossed once already (constant 1.0.1 while the manifest said 1.0.2).
+ */
+export {};
+//# sourceMappingURL=embed-viewport.d.ts.map

package/dist/scripts/embed-viewport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-viewport.d.ts","sourceRoot":"","sources":["../../scripts/embed-viewport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG"}

package/dist/scripts/embed-viewport.js

@@ -0,0 +1,116 @@
+/**
+ * @file embed-viewport.ts
+ * @description Keeps the copy of aimeat-viewport.js that is embedded inside other cortex packs
+ *   byte-identical to the source. Cortex packs are served live and each declares a single script
+ *   tag with no `requires`, so a pack that needs the shared camera cannot simply depend on it —
+ *   splitting a pack into two files would break every app carrying the old single tag. The camera
+ *   is therefore copied INTO the consuming pack between generated markers, and this script is the
+ *   only thing allowed to write that region. `--check` (pre-commit + CI) fails on drift, so the
+ *   duplicate can never quietly diverge from the source.
+ * @structure
+ *   - SOURCE / TARGETS  → the camera file and every pack that embeds it
+ *   - detectEol/toEol   → preserve each target's existing line endings (Windows checkouts)
+ *   - main()            → write mode (default) or --check mode (exit 1 on drift)
+ * @usage
+ *   pnpm sync:viewport     # rewrite the embedded region in every target
+ *   pnpm check:viewport    # verify, non-zero exit on drift
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial (TARGET-051 Slice 1): aimeat-dag embeds aimeat-viewport.
+ *   v1.1.0 — 2026-07-25 — Also assert every pack's VERSION constant matches its manifest;
+ *     they crossed once already (constant 1.0.1 while the manifest said 1.0.2).
+ */
+import { readFileSync, writeFileSync, readdirSync, existsSync } from 'node:fs';
+import { join, dirname, relative } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO = join(__dirname, '..');
+const BUNDLED = join(REPO, 'public', 'cortex-bundled');
+const SOURCE = join(BUNDLED, 'aimeat-viewport.js');
+const TARGETS = [join(BUNDLED, 'aimeat-dag.js')];
+const BEGIN = '/* BEGIN embedded aimeat-viewport — GENERATED, DO NOT EDIT (pnpm sync:viewport) */';
+const END = '/* END embedded aimeat-viewport */';
+/** Windows checkouts may hold CRLF; keep whatever the target already uses. */
+function detectEol(text) {
+    return text.includes('\r\n') ? '\r\n' : '\n';
+}
+function toEol(text, eol) {
+    const lf = text.replace(/\r\n/g, '\n');
+    return eol === '\n' ? lf : lf.replace(/\n/g, '\r\n');
+}
+function main() {
+    const check = process.argv.includes('--check');
+    const source = readFileSync(SOURCE, 'utf-8');
+    let drifted = 0;
+    for (const target of TARGETS) {
+        const rel = relative(REPO, target).replace(/\\/g, '/');
+        const current = readFileSync(target, 'utf-8');
+        const eol = detectEol(current);
+        const begin = current.indexOf(BEGIN);
+        const end = current.indexOf(END);
+        if (begin === -1 || end === -1 || end < begin) {
+            console.error(`✗ ${rel}: embed markers missing or out of order.`);
+            console.error(`  Expected a region delimited by:\n    ${BEGIN}\n    ${END}`);
+            process.exit(1);
+        }
+        const head = current.slice(0, begin + BEGIN.length);
+        const tail = current.slice(end);
+        const body = toEol(source, eol);
+        const next = head + eol + body + (body.endsWith(eol) ? '' : eol) + tail;
+        if (next === current) {
+            if (!check)
+                console.log(`✓ ${rel}: already in sync`);
+            continue;
+        }
+        drifted++;
+        if (check) {
+            console.error(`✗ ${rel}: embedded aimeat-viewport has drifted from public/cortex-bundled/aimeat-viewport.js`);
+        }
+        else {
+            writeFileSync(target, next, 'utf-8');
+            console.log(`✓ ${rel}: embedded region updated`);
+        }
+    }
+    drifted += checkVersions(check);
+    if (check) {
+        if (drifted > 0) {
+            console.error(`\n${drifted} problem(s). Run: pnpm sync:viewport (embed) and align the versions by hand.`);
+            process.exit(1);
+        }
+        console.log('✓ embedded aimeat-viewport is in sync; pack VERSION constants match their manifests');
+    }
+}
+/**
+ * A cortex pack that exposes a VERSION constant must report the version its manifest declares.
+ * These drift trivially — the manifest gets bumped to make the seeder republish, the constant is
+ * forgotten, and from then on the lib lies to anyone reading it from the console. Checking it is
+ * three lines; noticing it in production is not.
+ */
+function checkVersions(check) {
+    let bad = 0;
+    for (const file of readdirSync(BUNDLED)) {
+        if (!file.endsWith('.js'))
+            continue;
+        const js = readFileSync(join(BUNDLED, file), 'utf-8');
+        const yamlPath = join(BUNDLED, file.replace(/\.js$/, '.yaml'));
+        if (!existsSync(yamlPath))
+            continue;
+        // Only the pack's OWN constant, not one embedded from another pack.
+        const own = js.split(BEGIN)[0] + (js.includes(END) ? js.split(END).slice(1).join(END) : '');
+        const m = own.match(/VERSION:\s*'([\d.]+)'/);
+        if (!m)
+            continue;
+        const y = readFileSync(yamlPath, 'utf-8').match(/^\s*version:\s*"([\d.]+)"/m);
+        if (!y)
+            continue;
+        if (m[1] !== y[1]) {
+            bad++;
+            console.error(`✗ ${file}: VERSION constant is ${m[1]} but ${file.replace(/\.js$/, '.yaml')} declares ${y[1]}`);
+        }
+        else if (!check) {
+            console.log(`✓ ${file}: VERSION ${m[1]} matches its manifest`);
+        }
+    }
+    return bad;
+}
+main();
+//# sourceMappingURL=embed-viewport.js.map

package/dist/scripts/embed-viewport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-viewport.js","sourceRoot":"","sources":["../../scripts/embed-viewport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AAEjD,MAAM,KAAK,GAAG,oFAAoF,CAAC;AACnG,MAAM,GAAG,GAAG,oCAAoC,CAAC;AAEjD,8EAA8E;AAC9E,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AACD,SAAS,KAAK,CAAC,IAAY,EAAE,GAAkB;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,IAAI;IACX,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;YAC9C,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,0CAA0C,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,0CAA0C,KAAK,SAAS,GAAG,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAExE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,mBAAmB,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,OAAO,EAAE,CAAC;QACV,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,sFAAsF,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,2BAA2B,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,8EAA8E,CAAC,CAAC;YAC1G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,oEAAoE;QACpE,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC;YAAE,SAAS;QAEjB,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9E,IAAI,CAAC,CAAC;YAAE,SAAS;QAEjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,GAAG,EAAE,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;aAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/src/auth/sse-domain-scopes.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @file sse-domain-scopes.ts
+ * @description Authorization for the SSE live-update stream: which change DOMAINS a given
+ *   principal may be told about. The stream carries no payload (only domain names), but a
+ *   domain name plus its timing is still metadata: an app granted `memory:read` must not
+ *   learn that the owner's messages, wallet or agent tasks just changed. H-2 app-origin
+ *   isolation fences an app's DATA access; this fences its CHANGE-NOTIFICATION access the
+ *   same way, using the very same scope vocabulary the owner approved at sign-in.
+ *
+ *   Owner sessions (a human on the apex portal) see everything — the whole keyspace is
+ *   theirs. Every other principal (app grant, agent, ecosystem app, anonymous) is RESTRICTED:
+ *   a domain is forwarded only when the principal holds the scope that domain maps to, and a
+ *   domain absent from the map is DENIED. Deny-by-default is deliberate: a new domain added
+ *   elsewhere in the node must not silently start leaking to sandboxed apps. Adding the
+ *   mapping is a one-line, reviewable decision.
+ * @structure DOMAIN_SCOPE (domain → required scope) · isOwnerPrincipal · allowedDomains ·
+ *   filterDomains
+ * @usage
+ *   const restricted = !isOwnerPrincipal(req.auth!);
+ *   const allow = allowedDomains(req.auth!.scopes);        // Set<string> | null (null = all)
+ *   const visible = filterDomains(['memory', 'wallet'], allow);
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial: scope-gated SSE domains (an app-grant stream no longer
+ *     sees every domain in the owner's keyspace).
+ */
+/**
+ * Change domain → the scope a RESTRICTED principal must hold to be told about it.
+ * Keys are the domain strings passed to `emitChange(domain, …)`. Anything not listed here
+ * is invisible to restricted principals (operator/infra domains: config, features, admin-*,
+ * federation, disputes, appeals, verification, totp, ghii, owners, consent, flags, feedback,
+ * instances, extensions, cortex, skills, portfolio, ecosystem-apps, presence, realtime).
+ */
+export declare const DOMAIN_SCOPE: Readonly<Record<string, string>>;
+/**
+ * True for a human owner session on the apex portal — the principal whose keyspace this is.
+ * An app grant carries roles ['app'] (never 'owner'), so it is restricted even though it acts
+ * on the owner's behalf; agents and ecosystem apps are restricted for the same reason.
+ */
+export declare function isOwnerPrincipal(auth: {
+    roles?: string[];
+}): boolean;
+/**
+ * The domains a restricted principal holding `scopes` may be told about, or `null` when no
+ * filtering applies (owner sessions). A wildcard scope ('*') also disables filtering — the
+ * node's own dev/default-scope escape hatch, unchanged in meaning here.
+ */
+export declare function allowedDomains(scopes: string[] | undefined): Set<string> | null;
+/** Keep only the domains this principal may see. `allow === null` passes everything through. */
+export declare function filterDomains(domains: string[], allow: Set<string> | null): string[];
+//# sourceMappingURL=sse-domain-scopes.d.ts.map

package/dist/src/auth/sse-domain-scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-domain-scopes.d.ts","sourceRoot":"","sources":["../../../src/auth/sse-domain-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqDxD,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAIpE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAQ/E;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,CAGpF"}

package/dist/src/auth/sse-domain-scopes.js

@@ -0,0 +1,111 @@
+/**
+ * @file sse-domain-scopes.ts
+ * @description Authorization for the SSE live-update stream: which change DOMAINS a given
+ *   principal may be told about. The stream carries no payload (only domain names), but a
+ *   domain name plus its timing is still metadata: an app granted `memory:read` must not
+ *   learn that the owner's messages, wallet or agent tasks just changed. H-2 app-origin
+ *   isolation fences an app's DATA access; this fences its CHANGE-NOTIFICATION access the
+ *   same way, using the very same scope vocabulary the owner approved at sign-in.
+ *
+ *   Owner sessions (a human on the apex portal) see everything — the whole keyspace is
+ *   theirs. Every other principal (app grant, agent, ecosystem app, anonymous) is RESTRICTED:
+ *   a domain is forwarded only when the principal holds the scope that domain maps to, and a
+ *   domain absent from the map is DENIED. Deny-by-default is deliberate: a new domain added
+ *   elsewhere in the node must not silently start leaking to sandboxed apps. Adding the
+ *   mapping is a one-line, reviewable decision.
+ * @structure DOMAIN_SCOPE (domain → required scope) · isOwnerPrincipal · allowedDomains ·
+ *   filterDomains
+ * @usage
+ *   const restricted = !isOwnerPrincipal(req.auth!);
+ *   const allow = allowedDomains(req.auth!.scopes);        // Set<string> | null (null = all)
+ *   const visible = filterDomains(['memory', 'wallet'], allow);
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial: scope-gated SSE domains (an app-grant stream no longer
+ *     sees every domain in the owner's keyspace).
+ */
+/**
+ * Change domain → the scope a RESTRICTED principal must hold to be told about it.
+ * Keys are the domain strings passed to `emitChange(domain, …)`. Anything not listed here
+ * is invisible to restricted principals (operator/infra domains: config, features, admin-*,
+ * federation, disputes, appeals, verification, totp, ghii, owners, consent, flags, feedback,
+ * instances, extensions, cortex, skills, portfolio, ecosystem-apps, presence, realtime).
+ */
+export const DOMAIN_SCOPE = Object.freeze({
+    // Owner data the app already reads
+    memory: 'memory:read',
+    personal: 'memory:read',
+    files: 'storage:read',
+    // Structured spaces
+    organisms: 'organism:read',
+    schemas: 'organism:read',
+    templates: 'organism:read',
+    csm: 'organism:read',
+    msm: 'organism:read',
+    // Public discovery surfaces
+    catalogue: 'catalogue:read',
+    apps: 'catalogue:read',
+    'app-store': 'catalogue:read',
+    site: 'catalogue:read',
+    // Social
+    boards: 'social:read',
+    groups: 'social:read',
+    matches: 'social:read',
+    // Conversations
+    messages: 'messages:read',
+    'agent-messages': 'messages:read',
+    chat: 'messages:read',
+    // Economy
+    wallet: 'wallet:read',
+    // Knowledge
+    knowledge: 'knowledge:read',
+    packages: 'knowledge:read',
+    // The owner's fleet
+    'agent-tasks': 'task:read',
+    agents: 'task:read',
+    work: 'task:read',
+    actions: 'task:read',
+    'agent-usage': 'task:read',
+    'agent-capabilities': 'task:read',
+    'agent-directives': 'task:read',
+    'agent-onboarding': 'task:read',
+    // Automation
+    workflows: 'workflow:read',
+    scheduler: 'workflow:read',
+    // Nudges
+    notifications: 'notifications:send',
+    push: 'notifications:send',
+});
+/**
+ * True for a human owner session on the apex portal — the principal whose keyspace this is.
+ * An app grant carries roles ['app'] (never 'owner'), so it is restricted even though it acts
+ * on the owner's behalf; agents and ecosystem apps are restricted for the same reason.
+ */
+export function isOwnerPrincipal(auth) {
+    const roles = auth.roles ?? [];
+    if (roles.includes('app') || roles.includes('agent') || roles.includes('ecosystem'))
+        return false;
+    return roles.includes('owner');
+}
+/**
+ * The domains a restricted principal holding `scopes` may be told about, or `null` when no
+ * filtering applies (owner sessions). A wildcard scope ('*') also disables filtering — the
+ * node's own dev/default-scope escape hatch, unchanged in meaning here.
+ */
+export function allowedDomains(scopes) {
+    const held = new Set(scopes ?? []);
+    if (held.has('*'))
+        return null;
+    const out = new Set();
+    for (const [domain, needed] of Object.entries(DOMAIN_SCOPE)) {
+        if (held.has(needed))
+            out.add(domain);
+    }
+    return out;
+}
+/** Keep only the domains this principal may see. `allow === null` passes everything through. */
+export function filterDomains(domains, allow) {
+    if (!allow)
+        return domains;
+    return domains.filter(d => allow.has(d));
+}
+//# sourceMappingURL=sse-domain-scopes.js.map

package/dist/src/auth/sse-domain-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-domain-scopes.js","sourceRoot":"","sources":["../../../src/auth/sse-domain-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC1E,mCAAmC;IACnC,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,cAAc;IAErB,oBAAoB;IACpB,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,eAAe;IACxB,SAAS,EAAE,eAAe;IAC1B,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,eAAe;IAEpB,4BAA4B;IAC5B,SAAS,EAAE,gBAAgB;IAC3B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,gBAAgB;IAC7B,IAAI,EAAE,gBAAgB;IAEtB,SAAS;IACT,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,aAAa;IAEtB,gBAAgB;IAChB,QAAQ,EAAE,eAAe;IACzB,gBAAgB,EAAE,eAAe;IACjC,IAAI,EAAE,eAAe;IAErB,UAAU;IACV,MAAM,EAAE,aAAa;IAErB,YAAY;IACZ,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,gBAAgB;IAE1B,oBAAoB;IACpB,aAAa,EAAE,WAAW;IAC1B,MAAM,EAAE,WAAW;IACnB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,WAAW;IACpB,aAAa,EAAE,WAAW;IAC1B,oBAAoB,EAAE,WAAW;IACjC,kBAAkB,EAAE,WAAW;IAC/B,kBAAkB,EAAE,WAAW;IAE/B,aAAa;IACb,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAE1B,SAAS;IACT,aAAa,EAAE,oBAAoB;IACnC,IAAI,EAAE,oBAAoB;CAC3B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAA4B;IACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,OAAiB,EAAE,KAAyB;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/cli/connect/mcp/tools/agent-tasks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-tasks.d.ts","sourceRoot":"","sources":["../../../../../../src/cli/connect/mcp/tools/agent-tasks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAK7D,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAqJrF"}
+{"version":3,"file":"agent-tasks.d.ts","sourceRoot":"","sources":["../../../../../../src/cli/connect/mcp/tools/agent-tasks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAK7D,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAuJrF"}

package/dist/src/cli/connect/mcp/tools/agent-tasks.js

@@ -28,7 +28,8 @@ export function registerAgentTasksTools(mcp, registry) {
         title: z.string().describe('Short human-readable title for the task. Shows up in the owner\'s dashboard. Example: "Research 2026 agent orchestration trends".'),
         description: z.string().describe('The actual prompt / instruction for the target agent. This is what its liaison / runtime will read and act on.'),
         status: z.enum(['draft', 'queued']).optional().describe('Default "queued" (visible to the target agent immediately). Use "draft" if you want the owner to review before it goes live.'),
-    }, annotationsFor('aimeat_task_create'), async ({ agent_name, target_agent, title, description, status }) => {
+        files: z.array(z.string()).max(20).optional().describe('Files the target agent needs, by REFERENCE: "<owner@node>/<storage key>" each (a bare key means a file the calling agent owns). The caller must be able to read each file itself; the target agent gets a presigned download_url from aimeat_task_get.'),
+    }, annotationsFor('aimeat_task_create'), async ({ agent_name, target_agent, title, description, status, files }) => {
         const { client } = pickAgent(registry, agent_name);
         const body = {
             title,
@@ -39,6 +40,8 @@ export function registerAgentTasksTools(mcp, registry) {
             verification: { user_expects: '', technical_checks: [] },
             todos: [],
         };
+        if (files?.length)
+            body.resources = { files: files.map(ref => ({ ref })) };
         const resp = await client.post(`/v1/agents/${encodeURIComponent(target_agent)}/tasks`, body);
         return { content: [{ type: 'text', text: JSON.stringify(resp.data ?? resp, null, 2) }] };
     });