aimeat 2.1.0 → 2.3.0

package/dist/public/views/profile/access-tab/connected-apps.js

@@ -3,17 +3,103 @@
  * @description Connected Apps section (H-2 app grants) — list + revoke the
  *   scoped, user-approved access tokens published apps hold. Extracted from
  *   access-tab.js to satisfy max-file-lines.
+ * @structure ConnectedAppsSection — loads GET /v1/app-grants, sorts by recency,
+ *   renders one card per app (scopes collapsed behind their count), single revoke
+ *   + a bulk revoke of grants unused for STALE_DAYS.
  * @version-history
  *   v1.0.0 — 2026-07-13 — Extracted from access-tab.js (max-file-lines)
+ *   v1.2.0 — 2026-07-28 — A spending limit on the card of an app that asked to spend. The permission
+ *     answers whether; an owner usually means an amount, and the question had nowhere to live until
+ *     an app could be told apart from its owner at the money layer.
+ *   v1.1.0 — 2026-07-25 — Readability pass: sort most-recently-used first, collapse the
+ *     scope-badge wall behind its count, and add a bulk revoke for long-unused grants.
+ *     (The duplicate rows that made this list unreadable are fixed server-side; this
+ *     keeps it readable once an owner legitimately connects a couple dozen apps.)
  */
 import { h } from 'preact';
-import { useState, useEffect, useCallback, useRef } from 'preact/hooks';
+import { useState, useEffect, useCallback, useRef, useMemo } from 'preact/hooks';
 import htm from 'htm';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
 import { useConfirm } from '/components/Modal.js';
-import { apiGet, apiDelete } from '/js/api.js';
+import { apiGet, apiDelete, apiPatch } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
+
+// A grant untouched for this long is offered for bulk revoke. Long enough that a seasonal app
+// (something used a few times a year) is not swept away without the owner meaning to.
+const STALE_DAYS = 90;
+
+/** ms since the grant was last used, falling back to when it was granted (never-used grants). */
+function idleMs(g, now) {
+  const ts = g.last_used_at || g.granted_at;
+  const parsed = ts ? Date.parse(ts) : NaN;
+  return Number.isNaN(parsed) ? Infinity : now - parsed;
+}
+
+/**
+ * The spending limit for one app, on its own card.
+ *
+ * Shown only for an app that asked to spend at all. A permission is a yes or no; what an owner
+ * usually means is an amount, and until an app could be told apart from its owner at the money layer
+ * the question had nowhere to live. Empty means no limit — the permission alone.
+ */
+function SpendLimit({ grant, showToast, onSaved }) {
+  const [value, setValue] = useState(grant.spend_cap_morsels == null ? '' : String(grant.spend_cap_morsels));
+  const [saving, setSaving] = useState(false);
+  const spent = grant.spent_morsels || 0;
+  const cap = grant.spend_cap_morsels;
+
+  const save = useCallback(async (body, done) => {
+    setSaving(true);
+    try {
+      await apiPatch('/v1/app-grants/' + grant.grant_id + '/spend-cap', body);
+      showToast(done);
+      onSaved();
+    } catch (err) {
+      swallowed('connected-apps-cap', err);
+      showToast(t('profile.access.agCapFailed') || 'Could not change the limit');
+    }
+    setSaving(false);
+  }, [grant.grant_id, showToast, onSaved]);
+
+  return html`
+    <div class="ag-spend">
+      <div class="ag-spend-head">
+        <span class="detail-label">${t('profile.access.agSpendTitle') || 'Spending limit'}</span>
+        <span class="text-meta-sm">
+          ${cap == null
+            ? (t('profile.access.agSpendNoLimit') || 'No limit — it may spend whatever you hold.')
+            : (t('profile.access.agSpendUsed') || '{spent} of {cap} morsels used')
+                .replace('{spent}', String(spent)).replace('{cap}', String(cap))}
+        </span>
+      </div>
+      <div class="ag-spend-row">
+        <input
+          class="input input-sm ag-spend-input"
+          type="number" min="0" step="1" inputmode="numeric"
+          placeholder=${t('profile.access.agSpendPlaceholder') || 'morsels, or empty for no limit'}
+          value=${value}
+          disabled=${saving}
+          onInput=${(e) => setValue(e.target.value)}
+        />
+        <button
+          class="btn-outline btn-sm"
+          disabled=${saving}
+          onClick=${() => save({ cap_morsels: value.trim() === '' ? null : Math.max(0, Math.floor(Number(value))) },
+            t('profile.access.agCapSaved') || 'Spending limit saved')}
+        >${t('profile.access.agCapSave') || 'Set limit'}</button>
+        ${spent > 0 && html`
+          <button
+            class="btn-ghost btn-sm"
+            disabled=${saving}
+            onClick=${() => save({ reset: true }, t('profile.access.agCapReset') || 'Counter cleared')}
+          >${t('profile.access.agCapResetBtn') || 'Clear counter'}</button>
+        `}
+      </div>
+    </div>
+  `;
+}
 
 // Apps the owner has explicitly granted scoped access to (the H-2 app-grant flow). Each
 // holds its OWN revocable token bound to a narrow scope set — never the login session.
@@ -22,10 +108,12 @@ export function ConnectedAppsSection({ showToast, initial }) {
   // `initial` (the app-grants slice of GET /v1/access/overview) seeds us so the mount does no fetch of
   // its own; live-update + post-revoke still reload via the individual endpoint. Absent → self-load.
   const [grants, setGrants] = useState(initial?.grants ?? null);
+  const [expanded, setExpanded] = useState(() => new Set());
+  const [busy, setBusy] = useState(false);
 
   const load = useCallback(async () => {
     try { const r = await apiGet('/v1/app-grants'); setGrants(r.data?.grants || []); }
-    catch { setGrants([]); }
+    catch (err) { swallowed('connected-apps', err); setGrants([]); }
   }, []);
   useEffect(() => { if (!initial) load(); }, [load]);   // eslint-disable-line react-hooks/exhaustive-deps -- seed once from `initial`; fetch only when unseeded
 
@@ -37,6 +125,22 @@ export function ConnectedAppsSection({ showToast, initial }) {
     return () => window.removeEventListener('aimeat-live-update', handler);
   }, []);
 
+  // Most recently used first (never-used sink to the bottom by their grant date), so the apps that
+  // actually touch the owner's data are the ones they see without scrolling.
+  const { sorted, stale } = useMemo(() => {
+    const now = Date.now();
+    const list = [...(grants || [])].sort((a, b) => idleMs(a, now) - idleMs(b, now));
+    return { sorted: list, stale: list.filter(g => idleMs(g, now) > STALE_DAYS * 86400000) };
+  }, [grants]);
+
+  const toggleScopes = useCallback((id) => {
+    setExpanded((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id); else next.add(id);
+      return next;
+    });
+  }, []);
+
   const handleRevoke = useCallback((id, name) => {
     confirm(
       (t('profile.access.agConfirmRevoke') || 'Revoke access for "{name}"? It loses access immediately.').replace('{name}', name),
@@ -51,30 +155,71 @@ export function ConnectedAppsSection({ showToast, initial }) {
     );
   }, [confirm, showToast, load]);
 
+  // Bulk revoke of the stale set. Sequential DELETEs against the existing per-grant endpoint (no new
+  // API surface); partial failures are reported with the count that did go through, never swallowed.
+  const handleRevokeStale = useCallback(() => {
+    confirm(
+      (t('profile.access.agConfirmRevokeUnused') || 'Revoke access for {count} apps unused for over {days} days? They lose access immediately.')
+        .replace('{count}', String(stale.length)).replace('{days}', String(STALE_DAYS)),
+      async () => {
+        setBusy(true);
+        let done = 0, failed = 0;
+        for (const g of stale) {
+          try { await apiDelete('/v1/app-grants/' + g.grant_id); done++; }
+          catch (err) { swallowed('connected-apps', err); failed++; }
+        }
+        setBusy(false);
+        showToast(failed
+          ? (t('profile.access.agRevokedSome') || '{done} revoked, {failed} failed').replace('{done}', String(done)).replace('{failed}', String(failed))
+          : (t('profile.access.agRevokedCount') || '{count} app grants revoked').replace('{count}', String(done)));
+        load();
+      },
+      { danger: true },
+    );
+  }, [confirm, showToast, load, stale]);
+
   return html`
     <h3 class="card-h3 access-h3 mt-section">${t('profile.access.agTitle') || 'Connected Apps'}</h3>
     <div class="section-desc">${t('profile.access.agDesc') || 'Published apps you have granted scoped access to your data. Each holds its own revocable token — never your login session.'}</div>
 
+    ${stale.length > 0 && html`
+      <div class="access-empty-row">
+        <span class="text-meta-sm">
+          ${(t('profile.access.agUnusedNote') || '{count} of these have not been used in over {days} days.')
+            .replace('{count}', String(stale.length)).replace('{days}', String(STALE_DAYS))}
+        </span>
+        <button class="btn-outline btn-sm" disabled=${busy} onClick=${handleRevokeStale}>
+          ${(t('profile.access.agRevokeUnused') || 'Revoke {count} unused').replace('{count}', String(stale.length))}
+        </button>
+      </div>
+    `}
+
     ${grants === null
       ? html`<div class="empty">${t('profile.access.agLoading') || 'Loading...'}</div>`
-      : grants.length === 0
+      : sorted.length === 0
         ? html`<div class="access-empty-row"><span class="text-meta-sm">${t('profile.access.agEmpty') || 'No apps have access to your data.'}</span></div>`
-        : grants.map(g => html`
+        : sorted.map(g => html`
             <div class="card" key=${g.grant_id}>
               <div class="flex-between">
                 <div class="card-title">${escHtml(g.app_name || g.app)}</div>
-                <span class="badge badge-info">${(g.scopes || []).length} ${t('profile.access.agScopes') || 'scopes'}</span>
+                <button
+                  class="badge badge-info ag-scope-toggle"
+                  aria-expanded=${expanded.has(g.grant_id) ? 'true' : 'false'}
+                  title=${t('profile.access.agScopesToggle') || 'Show or hide the granted permissions'}
+                  onClick=${() => toggleScopes(g.grant_id)}
+                >${(g.scopes || []).length} ${t('profile.access.agScopes') || 'scopes'}</button>
               </div>
               <div class="card-subtitle access-mono">${escHtml(g.app_origin || '')}</div>
               <div class="detail-grid">
                 <div class="detail-item"><span class="detail-label">${t('profile.access.agGrantedAt') || 'Granted'}</span><span class="detail-value">${g.granted_at ? new Date(g.granted_at).toLocaleDateString() : '-'}</span></div>
                 <div class="detail-item"><span class="detail-label">${t('profile.access.agLastUsed') || 'Last used'}</span><span class="detail-value">${g.last_used_at ? new Date(g.last_used_at).toLocaleString() : (t('profile.access.agNever') || 'never')}</span></div>
               </div>
-              ${(g.scopes || []).length > 0 && html`
+              ${expanded.has(g.grant_id) && (g.scopes || []).length > 0 && html`
                 <div class="flex-row-wrap mt-half">
                   ${g.scopes.map(s => html`<span class="badge badge-muted" key=${s}>${escHtml(s)}</span>`)}
                 </div>
               `}
+              ${g.can_spend && html`<${SpendLimit} grant=${g} showToast=${showToast} onSaved=${load} />`}
               <div class="card-actions">
                 <button class="btn-danger-solid btn-sm" onClick=${() => handleRevoke(g.grant_id, g.app_name || g.app)}>${t('profile.access.agRevoke') || 'Revoke'}</button>
               </div>

package/dist/public/views/profile/access-tab/sharing-groups.js

@@ -16,6 +16,7 @@ import { escHtml } from '/js/utils.js';
 import { useConfirm } from '/components/Modal.js';
 import { ContactPicker } from '/components/ContactPicker.js';
 import * as groupsApi from '/js/services/sharing-groups.js';
+import { swallowed } from '/js/swallowed.js';
 
 export function SharingGroupsSection({ showToast, initial }) {
   const { confirm, ConfirmUI } = useConfirm();
@@ -47,7 +48,8 @@ export function SharingGroupsSection({ showToast, initial }) {
     try {
       const resp = await groupsApi.listGroups();
       setGroups(resp?.data?.groups || []);
-    } catch {
+    } catch (err) {
+      swallowed('sharing-groups: SharingGroupsSection', err);
       setGroups([]);
     }
   }, []);
@@ -62,6 +64,7 @@ export function SharingGroupsSection({ showToast, initial }) {
         setShowCreate(true);
         setTimeout(() => document.getElementById('access-sharing-groups')?.scrollIntoView({ behavior: 'smooth', block: 'start' }), 400);
       }
+    // eslint-disable-next-line aimeat/no-silent-catch -- noop
     } catch { /* noop */ }
   }, []);
 

package/dist/public/views/profile/access-tab.js

@@ -40,6 +40,7 @@ import { SharingGroupsSection } from './access-tab/sharing-groups.js';
 import { AgentDefaultsSection } from './access-tab/agent-defaults.js';
 import { ConnectedAppsSection } from './access-tab/connected-apps.js';
 import { AccessTokensSection } from './access-tab/access-tokens.js';
+import { swallowed } from '/js/swallowed.js';
 
 /* ═══════════════════════════════════════════════════════════════════
    Main Access Tab
@@ -52,6 +53,7 @@ function jwtExpiry(jwt) {
     if (!payload.exp) return null;
     const until = new Date(payload.exp * 1000);
     return { until, hoursLeft: Math.max(0, (until.getTime() - Date.now()) / 3600000) };
+  // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
   } catch { return null; }
 }
 
@@ -79,7 +81,7 @@ export default function AccessTab({ session, showToast }) {
       setOverview(d);
     }).catch(() => {
       setOverview(null);   // children self-load; parent falls back to its own two reads
-      apiGet('/v1/consent').then(data => setAuthConsents((data.data?.consents || []).filter(c => c.scope === 'auth' && c.status === 'active'))).catch(() => {});
+      apiGet('/v1/consent').then(data => setAuthConsents((data.data?.consents || []).filter(c => c.scope === 'auth' && c.status === 'active'))).catch(err => { swallowed('access-tab: AccessTab', err); });
       apiGet('/v1/ghii/me').then(r => setPubKey(r?.data?.public_key ?? null)).catch(() => setPubKey(null));
     });
   }, []);

package/dist/public/views/profile/agents/agent-card.js

@@ -83,6 +83,7 @@ import TabUsage from './tab-usage.js';
 import TabSchedules from './tab-schedules.js';
 import TabQuality from './tab-quality.js';
 import TabServices from './tab-services.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -127,9 +128,7 @@ async function fetchReadme(agent) {
     const found = Array.isArray(items) ? items.find(it => it.key === key) : null;
     const value = found?.value;
     return typeof value === 'string' ? value : '';
-  } catch {
-    return '';
-  }
+  } catch (err) { swallowed('agent-card', err); return ''; }
 }
 
 // Maps a tab id to its change-count key in the `changes` prop. Badges live ONLY on
@@ -636,7 +635,8 @@ function ProblemZone2({ agent, setActiveTab, showToast }) {
       } else {
         showToast(t('profile.agents.detail.zone2.testWebhookFailed'), true);
       }
-    } catch {
+    } catch (err) {
+      swallowed('agent-card: handleTestWebhook', err);
       showToast(t('profile.agents.detail.zone2.testWebhookFailed'), true);
     }
     setTesting(false);
@@ -652,7 +652,8 @@ function ProblemZone2({ agent, setActiveTab, showToast }) {
       } else {
         showToast(t('profile.agents.detail.zone2.urlUpdateFailed'), true);
       }
-    } catch {
+    } catch (err) {
+      swallowed('agent-card: handleSaveUrl', err);
       showToast(t('profile.agents.detail.zone2.urlUpdateFailed'), true);
     }
   }

package/dist/public/views/profile/agents/tab-activity.js

@@ -26,6 +26,7 @@ import { getActivity, getActivityLog, getActivityOverview } from '/js/services/a
 import { getDirectives } from '/js/services/agent-directives.js';
 import { getWebhookConfig, getTelemetry } from '/js/services/agent-integration.js';
 import { getLedgerUsage } from '/js/services/ledger.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -72,7 +73,7 @@ export default function TabActivity({ agent, agentName }) {
       // not the bare name — filtering by the name matches nothing.
       const [overview, ledgerResp] = await Promise.all([
         getActivityOverview(agentName),
-        getLedgerUsage(agent?.gaii || agentName, { groupBy: 'day' }).catch(() => null),
+        getLedgerUsage(agent?.gaii || agentName, { groupBy: 'day' }).catch(err => { swallowed('tab-activity: loadData', err); return null; }),
       ]);
       let actResp, logResp, dirResp, whResp, telResp;
       if (overview) {
@@ -83,11 +84,11 @@ export default function TabActivity({ agent, agentName }) {
         telResp = { data: overview.telemetry };
       } else {
         [actResp, logResp, dirResp, whResp, telResp] = await Promise.all([
-          getActivity(agentName, 30).catch(() => null),
-          getActivityLog(agentName, 1, 50).catch(() => null),
-          getDirectives(agentName).catch(() => null),
-          getWebhookConfig(agentName).catch(() => null),
-          getTelemetry(agentName, { days: 1 }).catch(() => null),
+          getActivity(agentName, 30).catch(err => { swallowed('tab-activity: loadData', err); return null; }),
+          getActivityLog(agentName, 1, 50).catch(err => { swallowed('tab-activity: loadData', err); return null; }),
+          getDirectives(agentName).catch(err => { swallowed('tab-activity: loadData', err); return null; }),
+          getWebhookConfig(agentName).catch(err => { swallowed('tab-activity: loadData', err); return null; }),
+          getTelemetry(agentName, { days: 1 }).catch(err => { swallowed('tab-activity: loadData', err); return null; }),
         ]);
       }
       setStats(actResp?.data?.activity_stats || null);
@@ -129,7 +130,8 @@ export default function TabActivity({ agent, agentName }) {
         webhookTotalCount: (wh?.success_count ?? 0) + (wh?.fail_count ?? 0),
         mcpActive: agent?.mcpEnabled || agent?.mcp_enabled || false,
       });
-    } catch {
+    } catch (err) {
+      swallowed('tab-activity: webhookTotalCount', err);
       setStats(null);
       setEvents([]);
     }
@@ -155,7 +157,7 @@ export default function TabActivity({ agent, agentName }) {
       setEvents(prev => [...prev, ...newEvents]);
       setLogPage(nextPage);
       setHasMore(newEvents.length >= 50);
-    } catch { /* silent */ }
+    } catch (err) { swallowed('tab-activity: handleLoadMore', err); }
   }
 
   if (loading) {

package/dist/public/views/profile/agents/tab-agent-config.js

@@ -23,6 +23,7 @@ import { onLiveUpdate } from '/lib/live-updates.js';
 import { t } from '/js/i18n.js';
 import { copyToClipboard } from '/js/utils.js';
 import { apiGet, apiPut, apiPatch } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -128,7 +129,8 @@ export default function TabAgentConfig({ agent, agentName, showToast, onDeleteCl
         setSelectedFile(configFiles[0].key);
         setPreview(configFiles[0].content);
       }
-    } catch {
+    } catch (err) {
+      swallowed('tab-agent-config: loadFiles', err);
       if (showSpinner) setFiles([]); // keep old files on a transient live-update refetch
     }
     setLoading(false);

package/dist/public/views/profile/agents/tab-contracts.js

@@ -18,6 +18,7 @@ import { onLiveUpdate } from '/lib/live-updates.js';
 import { t } from '/js/i18n.js';
 import { getAgentEngagements, contractNamesOf, offersWorkspaceContract, adoptContractTask } from '/js/services/agents.js';
 import { retireEngagement, activateEngagement } from '/js/services/organisms.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -53,7 +54,7 @@ export default function TabContracts({ agent, agentName, showToast }) {
   const readopt = async (e) => {
     setBusy(engKey(e));
     try {
-      await activateEngagement(e.organism_id, e.ws, e.agent, e.contract).catch(() => {});
+      await activateEngagement(e.organism_id, e.ws, e.agent, e.contract).catch(err => { swallowed('tab-contracts: readopt', err); });
       await adoptContractTask(agentName, { organismId: e.organism_id, ws: e.ws, contract: e.contract });
       showToast?.(t('profile.agents.detail.contracts.readoptedToast') || 'Re-adopted — the agent will pick this workspace back up');
       await load();

package/dist/public/views/profile/agents/tab-data-access.js

@@ -33,6 +33,7 @@ import { getDirectives, getDataAccessOverview, upsertDirectives } from '/js/serv
 import { updateMemoryFull, deleteMemory, createMemory } from '/js/services/memory.js';
 import * as skillsService from '/js/services/skills.js';
 import { useConfirm } from '/components/Modal.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -133,9 +134,9 @@ export default function TabDataAccess({ agent, agentName, showToast, allAgents }
         keys = (ov.memory_keys || []).map(k => ({ key: k.key, visibility: k.visibility, version: k.version, createdAt: k.created_at, updatedAt: k.updated_at }));
       } else {
         const [dirResp, memResp, links] = await Promise.all([
-          getDirectives(agentName).catch(() => null),
-          apiGet(`/v1/memory?prefix=&per_page=100&agent=${encodeURIComponent(agent.gaii || agentName)}`).catch(() => null),
-          skillsService.getAgentSkillLinks(agentName).catch(() => []),
+          getDirectives(agentName).catch(err => { swallowed('tab-data-access: loadData', err); return null; }),
+          apiGet(`/v1/memory?prefix=&per_page=100&agent=${encodeURIComponent(agent.gaii || agentName)}`).catch(err => { swallowed('tab-data-access: loadData', err); return null; }),
+          skillsService.getAgentSkillLinks(agentName).catch(err => { swallowed('tab-data-access: loadData', err); return []; }),
         ]);
         const data = dirResp?.data || {};
         setMemoryAreas(data.memory_areas || []);
@@ -166,7 +167,8 @@ export default function TabDataAccess({ agent, agentName, showToast, allAgents }
           setEditingKey(null);
         }
       }
-    } catch {
+    } catch (err) {
+      swallowed('tab-data-access: loadData', err);
       setMemoryAreas([]);
       setResources([]);
       setMemoryKeys([]);
@@ -199,7 +201,8 @@ export default function TabDataAccess({ agent, agentName, showToast, allAgents }
         setSkillLibrary(lib);
         const first = [...lib.user, ...lib.node].find(s => !skillLinks.some(l => l.ref === s.ref));
         setSelectedSkillRef(first?.ref ?? '');
-      } catch {
+      } catch (err) {
+        swallowed('tab-data-access: openSkillPicker', err);
         setSkillLibrary({ node: [], user: [] });
       }
     }
@@ -357,7 +360,7 @@ export default function TabDataAccess({ agent, agentName, showToast, allAgents }
       // store the parsed value (object/array/number/etc.); otherwise store the
       // raw string.
       let parsed;
-      try { parsed = JSON.parse(editValue); } catch { parsed = editValue; }
+      try { parsed = JSON.parse(editValue); } catch { parsed = editValue; }   // eslint-disable-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
       await updateMemoryFull(mk.key, { value: parsed, version: mk.version });
       showToast(t('profile.agents.detail.data_access.valueSaved'));
       setEditingKey(null);
@@ -391,7 +394,7 @@ export default function TabDataAccess({ agent, agentName, showToast, allAgents }
       // Preserve value type: store parsed JSON when the text parses, else the
       // raw string.
       let parsed;
-      try { parsed = JSON.parse(newKeyValue); } catch { parsed = newKeyValue; }
+      try { parsed = JSON.parse(newKeyValue); } catch { parsed = newKeyValue; }   // eslint-disable-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
       // Store under the AGENT's GAII (not the owner GHII) so the entry belongs
       // to the agent being viewed.
       const gaii = agent?.gaii || agentName;

package/dist/public/views/profile/agents/tab-helpers.js

@@ -14,11 +14,13 @@ const ORDER_KEY_PREFIX = 'aimeat-agent-order:';
 export function loadAgentOrder(owner) {
   if (!owner) return [];
   try { return JSON.parse(localStorage.getItem(ORDER_KEY_PREFIX + owner) || '[]') || []; }
+  // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
   catch { return []; }
 }
 export function saveAgentOrder(owner, names) {
   if (!owner) return;
   try { localStorage.setItem(ORDER_KEY_PREFIX + owner, JSON.stringify(names)); }
+  // eslint-disable-next-line aimeat/no-silent-catch -- ignore quota/availability errors
   catch { /* ignore quota/availability errors */ }
 }
 
@@ -39,6 +41,7 @@ export function loadCollapsedGroups(owner) {
 export function saveCollapsedGroups(owner, set) {
   if (!owner) return;
   try { localStorage.setItem(COLLAPSE_KEY_PREFIX + owner, JSON.stringify([...set])); }
+  // eslint-disable-next-line aimeat/no-silent-catch -- ignore quota/availability errors
   catch { /* ignore quota/availability errors */ }
 }
 
@@ -53,11 +56,13 @@ const SEEN_KEY_PREFIX = 'aimeat-agent-seen:';
 export function loadSeen(owner) {
   if (!owner) return {};
   try { return JSON.parse(localStorage.getItem(SEEN_KEY_PREFIX + owner) || '{}') || {}; }
+  // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
   catch { return {}; }
 }
 export function saveSeen(owner, data) {
   if (!owner) return;
   try { localStorage.setItem(SEEN_KEY_PREFIX + owner, JSON.stringify(data)); }
+  // eslint-disable-next-line aimeat/no-silent-catch -- ignore quota/availability errors
   catch { /* ignore quota/availability errors */ }
 }
 // Stamp the given agent+tab as seen-now and persist. Read-modify-write against

package/dist/public/views/profile/agents/tab-integration.js

@@ -47,6 +47,7 @@ import { t, tOr } from '/js/i18n.js';
 import { timeAgo } from '/js/utils.js';
 import { CopyButton } from '/components/CopyButton.js';
 import { detectAgentState } from './state-detector.js';
+import { swallowed } from '/js/swallowed.js';
 import {
   getOnboarding, startOnboarding, getIntegrationOverview,
   getWebhookConfig, testWebhook, updateWebhook,
@@ -80,7 +81,7 @@ export default function TabIntegration({ agent, onboarding, showToast, agentName
       // back to the individual reads. Each composite sub-object mirrors the matching endpoint's `.data`.
       const [ov, sbResp] = await Promise.all([
         getIntegrationOverview(agentName),
-        getSkillBundleVersion(agentName).catch(() => null),
+        getSkillBundleVersion(agentName).catch(err => { swallowed('tab-integration: TabIntegration', err); return null; }),
       ]);
       setBundleVersion(sbResp?.data || null);
       if (ov) {
@@ -89,15 +90,15 @@ export default function TabIntegration({ agent, onboarding, showToast, agentName
         setPostChecklist(ov.onboarding?.post_onboarding_checklist || null);
       } else {
         const [whResp, dlResp, obResp] = await Promise.all([
-          getWebhookConfig(agentName).catch(() => null),
-          getDeliveryLog(agentName, 10).catch(() => null),
-          getOnboarding(agentName).catch(() => null),
+          getWebhookConfig(agentName).catch(err => { swallowed('tab-integration: TabIntegration', err); return null; }),
+          getDeliveryLog(agentName, 10).catch(err => { swallowed('tab-integration: TabIntegration', err); return null; }),
+          getOnboarding(agentName).catch(err => { swallowed('tab-integration: TabIntegration', err); return null; }),
         ]);
         setWebhook(whResp?.data || null);
         setDeliveries(dlResp?.data?.deliveries || []);
         setPostChecklist(obResp?.data?.post_onboarding_checklist || null);
       }
-    } catch { /* silent */ }
+    } catch (err) { swallowed('tab-integration: TabIntegration', err); }
     if (showSpinner) setLoading(false);
   }, [agentName]);
 
@@ -124,7 +125,8 @@ export default function TabIntegration({ agent, onboarding, showToast, agentName
         showToast(t('profile.agents.webhook.testFailed'), true);
       }
       loadData();
-    } catch {
+    } catch (err) {
+      swallowed('tab-integration: handleTestWebhook', err);
       showToast(t('profile.agents.webhook.testFailed'), true);
     }
     setTesting(false);
@@ -187,7 +189,8 @@ curl -H "Authorization: Bearer <jwt>" -o skill-bundle.zip "${skillBundleUrl}" &&
       showToast(t('profile.agents.detail.integration.webhookUpdated'));
       setEditingWebhook(false);
       loadData();
-    } catch {
+    } catch (err) {
+      swallowed('tab-integration: handleSaveWebhook', err);
       showToast(t('profile.agents.detail.integration.webhookUpdateError'), true);
     }
     setSavingWebhook(false);
@@ -205,7 +208,7 @@ curl -H "Authorization: Bearer <jwt>" -o skill-bundle.zip "${skillBundleUrl}" &&
       await updateSkillBundle(agentName);
       showToast(t('profile.agents.detail.integration.update'));
       loadData();
-    } catch { /* silent */ }
+    } catch (err) { swallowed('tab-integration: handleUpdateBundle', err); }
     setUpdatingBundle(false);
   }
 
@@ -230,7 +233,7 @@ curl -H "Authorization: Bearer <jwt>" -o skill-bundle.zip "${skillBundleUrl}" &&
     try {
       const resp = await getDeliveryLog(agentName, 200);
       setAllDeliveries(resp?.data?.deliveries || []);
-    } catch { /* silent */ }
+    } catch (err) { swallowed('tab-integration: handleShowAll', err); }
     setShowAllDeliveries(true);
   }
 

package/dist/public/views/profile/agents/tab-messages.js

@@ -33,6 +33,7 @@ import { timeAgo } from '/js/utils.js';
 import { sendMessage, listMessages, listThreads, getMessagesOverview } from '/js/services/agent-messages.js';
 import { getAgentCommands } from '/js/services/agent-integration.js';
 import { Markdown } from '/components/Markdown.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -122,7 +123,7 @@ export default function TabMessages({ agent, agentName, showToast }) {
 
   function applyCommands(value) {
     if (Array.isArray(value)) setCommands(value);
-    else if (typeof value === 'string') { try { setCommands(JSON.parse(value)); } catch { setCommands([]); } }
+    else if (typeof value === 'string') { try { setCommands(JSON.parse(value)); } catch { setCommands([]); } }   // eslint-disable-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
     else setCommands([]);
   }
 
@@ -132,10 +133,11 @@ export default function TabMessages({ agent, agentName, showToast }) {
       const data = resp?.data?.value;
       if (Array.isArray(data)) setCommands(data);
       else if (typeof data === 'string') {
-        try { setCommands(JSON.parse(data)); } catch { setCommands([]); }
+        try { setCommands(JSON.parse(data)); } catch { setCommands([]); }   // eslint-disable-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
       } else {
         setCommands([]);
       }
+    // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
     } catch { setCommands([]); }
   }
 
@@ -145,7 +147,7 @@ export default function TabMessages({ agent, agentName, showToast }) {
       if (activeThread) opts.threadId = activeThread;
       const res = await listMessages(agentName, opts);
       setMessages(res?.data?.messages || []);
-    } catch { setMessages([]); }
+    } catch (err) { swallowed('tab-messages', err); setMessages([]); }
     setLoading(false);
   }
 
@@ -153,7 +155,7 @@ export default function TabMessages({ agent, agentName, showToast }) {
     try {
       const res = await listThreads(agentName);
       setThreads(res?.data?.threads || []);
-    } catch { setThreads([]); }
+    } catch (err) { swallowed('tab-messages', err); setThreads([]); }
   }
 
   useEffect(() => {

package/dist/public/views/profile/agents/tab-quality.js

@@ -33,6 +33,7 @@ import { onLiveUpdate } from '/lib/live-updates.js';
 import { t } from '/js/i18n.js';
 import { getAgentStatistics, getQualityOverview, listTasks, rateTask } from '/js/services/agent-tasks.js';
 import RateModal from './rate-modal.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -98,12 +99,12 @@ export default function TabQuality({ agentName, showToast }) {
       } else {
         const [statsResp, tasksResp] = await Promise.all([
           getAgentStatistics(agentName),
-          listTasks(agentName, { status: 'done', per_page: 100 }).catch(() => null),
+          listTasks(agentName, { status: 'done', per_page: 100 }).catch(err => { swallowed('tab-quality: TabQuality', err); return null; }),
         ]);
         if (statsResp?.data) setData(statsResp.data);
         setDoneTasks(tasksResp?.data?.tasks || []);
       }
-    } catch { /* keep showing the last good data on a transient error */ }
+    } catch (err) { swallowed('tab-quality: TabQuality', err); }
     setLoading(false);
   }, [agentName]);