aimeat 2.1.0 → 2.3.0

package/dist/public/css/views/app-grant.css

@@ -2,59 +2,121 @@
  * @file public/css/views/app-grant.css
  * @description Styles for the app-grant consent page (agr- prefix) — the trusted apex approval
  *   screen where an owner reviews a published app's requested scopes (H-2 Phase 3).
+ * @structure identity head (icon/monogram + name + origin + badge), title + lede, one-line area
+ *   summary + details disclosure, the exact scope list (checkboxes), guarantees, actions.
  * @version-history
- *   v1.0.0 — 2026-06-20 — Initial (H-2 app-origin isolation, Phase 3).
+ *   v1.0.0 — 2026-06-20 — Initial (H-2 origin isolation, Phase 3).
  *   v1.1.0 — 2026-07-19 — Own-app badge variant + "new" chip for newly requested scopes.
+ *   v1.2.0 — 2026-07-27 — Weight pass: identity head with icon/monogram, collapsed scope list,
+ *     guarantee list, and a card that fits a consent popup without an inner scrollbar (the old
+ *     3rem margin + always-open scope boxes pushed the buttons below the fold).
  */
 
-.agr-wrap { max-width: 540px; margin: 3rem auto; padding: 0 1.25rem; }
+.agr-wrap { max-width: 470px; margin: 1.5rem auto; padding: 0 1rem 1.5rem; }
 
 .agr-card {
   border: 1px solid var(--border);
   border-radius: 14px;
   background: var(--card);
-  padding: 1.75rem 1.6rem;
+  padding: 1.35rem 1.35rem 1.25rem;
 }
 
-.agr-title { font-size: 1.4rem; font-weight: 800; margin: 0 0 1rem; color: var(--text); }
+/* ── Identity: what IS this thing, before what it asks for ─────────────────────────── */
+.agr-head { display: flex; align-items: center; gap: 0.75rem; margin-bottom: 1rem; }
 
-.agr-app {
-  display: flex;
-  flex-direction: column;
-  gap: 0.15rem;
-  padding: 0.8rem 1rem;
+.agr-icon {
+  flex: 0 0 auto;
+  width: 44px;
+  height: 44px;
+  border-radius: 11px;
   border: 1px solid var(--border);
-  border-radius: 10px;
   background: var(--bg-dim);
-  margin-bottom: 1rem;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  overflow: hidden;
+}
+.agr-icon-img { width: 100%; height: 100%; object-fit: cover; }
+.agr-icon-glyph { font-size: 1.4rem; line-height: 1; }
+/* Fallback for apps with no icon: first letter of the name, in the accent colour. */
+.agr-icon-mono { font-size: 1.25rem; font-weight: 800; color: var(--accent); line-height: 1; }
+
+.agr-head-text { min-width: 0; flex: 1 1 auto; }
+.agr-app-name { font-weight: 700; color: var(--text); overflow-wrap: anywhere; }
+.agr-app-origin {
+  font-size: 0.78rem;
+  color: var(--text-dim);
+  font-family: var(--font-mono, monospace);
+  overflow-wrap: anywhere;
 }
-.agr-app-name { font-weight: 700; color: var(--text); }
-.agr-app-origin { font-size: 0.82rem; color: var(--text-dim); font-family: var(--font-mono, monospace); }
 
+.agr-title { font-size: 1.25rem; font-weight: 800; margin: 0 0 0.5rem; color: var(--text); }
+.agr-lede { color: var(--text-dim); font-size: 0.9rem; margin: 0 0 1rem; }
 .agr-muted { color: var(--text-dim); font-size: 0.92rem; margin: 0 0 1rem; }
 
-.agr-scopes-label { font-weight: 700; font-size: 0.9rem; margin-bottom: 0.5rem; color: var(--text); }
+/* ── One line instead of a wall: the areas the app works with ──────────────────────── */
+.agr-summary {
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  background: var(--bg-dim);
+  padding: 0.65rem 0.8rem;
+  font-size: 0.9rem;
+  color: var(--text);
+}
+.agr-summary-label { font-weight: 700; margin-right: 0.35rem; }
+.agr-summary-areas { color: var(--text); }
+
+.agr-details-toggle {
+  background: none;
+  border: none;
+  color: var(--accent);
+  font-size: 0.85rem;
+  font-weight: 600;
+  cursor: pointer;
+  padding: 0.45rem 0;
+  margin: 0;
+}
+.agr-details-toggle:hover { text-decoration: underline; }
 
-.agr-scopes { list-style: none; margin: 0 0 0.75rem; padding: 0; display: flex; flex-direction: column; gap: 0.5rem; }
+.agr-scopes { list-style: none; margin: 0 0 0.5rem; padding: 0; display: flex; flex-direction: column; gap: 0.4rem; }
 .agr-scope {
   display: flex;
   flex-direction: row;
   align-items: flex-start;
   gap: 0.6rem;
-  padding: 0.6rem 0.8rem;
+  padding: 0.5rem 0.7rem;
   border: 1px solid var(--border);
   border-radius: 8px;
   background: var(--surface, var(--bg-dim));
 }
 .agr-scope-check { margin-top: 0.2rem; flex: 0 0 auto; accent-color: var(--accent); width: 1rem; height: 1rem; cursor: pointer; }
 .agr-scope-text { display: flex; flex-direction: column; gap: 0.1rem; min-width: 0; }
-.agr-scope-name { font-family: var(--font-mono, monospace); font-size: 0.82rem; color: var(--accent); }
-.agr-scope-desc { font-size: 0.88rem; color: var(--text); }
+.agr-scope-name { font-family: var(--font-mono, monospace); font-size: 0.78rem; color: var(--accent); }
+.agr-scope-desc { font-size: 0.86rem; color: var(--text); }
+.agr-details-hint { font-size: 0.78rem; color: var(--text-dim); margin: 0 0 0.75rem; }
+
+/* ── The guarantees, said as promises ──────────────────────────────────────────────── */
+.agr-assure { list-style: none; margin: 0.9rem 0 1.1rem; padding: 0; display: flex; flex-direction: column; gap: 0.3rem; }
+.agr-assure li {
+  position: relative;
+  padding-left: 1.25rem;
+  font-size: 0.84rem;
+  color: var(--text-dim);
+}
+.agr-assure li::before {
+  content: '\2713';
+  position: absolute;
+  left: 0;
+  top: 0;
+  color: var(--success, #3dbf6e);
+  font-weight: 700;
+}
 
 /* "External app" badge */
 .agr-badge {
-  display: inline-block;
-  font-size: 0.72rem;
+  flex: 0 0 auto;
+  align-self: flex-start;
+  font-size: 0.66rem;
   font-weight: 700;
   letter-spacing: 0.04em;
   text-transform: uppercase;
@@ -62,8 +124,7 @@
   background: var(--bg-dim);
   border: 1px solid var(--border);
   border-radius: 999px;
-  padding: 0.18rem 0.6rem;
-  margin-bottom: 0.6rem;
+  padding: 0.18rem 0.55rem;
 }
 /* The signed-in owner's OWN app — reassuring, not warning */
 .agr-badge-own { color: var(--success, #3dbf6e); }
@@ -83,19 +144,17 @@
   vertical-align: 0.08em;
 }
 
-/* Advanced toggle (link-style button) */
-.agr-advanced-toggle {
-  background: none;
-  border: none;
-  color: var(--accent);
-  font-size: 0.85rem;
-  font-weight: 600;
-  cursor: pointer;
-  padding: 0.25rem 0;
-  margin: 0 0 1rem;
+.agr-actions { display: flex; gap: 0.6rem; justify-content: flex-end; }
+.agr-btn { min-width: 7rem; text-align: center; }
+
+/* Consent opens in a small popup window: keep the decision reachable on a short viewport. */
+@media (max-height: 620px) {
+  .agr-wrap { margin: 0.75rem auto; }
+  .agr-card { padding: 1rem 1.1rem; }
+  .agr-title { font-size: 1.1rem; }
 }
-.agr-advanced-toggle:hover { text-decoration: underline; }
 
-.agr-actions { display: flex; gap: 0.75rem; justify-content: flex-end; }
-.agr-btn { min-width: 8rem; text-align: center; }
-.agr-next { font-size: 0.8rem; color: var(--text-dim); text-align: center; margin: 0.9rem 0 0; }
+@media (max-width: 420px) {
+  .agr-actions { flex-direction: column-reverse; }
+  .agr-btn { width: 100%; }
+}

package/dist/public/css/views/help.css

@@ -5,6 +5,9 @@
  * @version-history
  *   v1.0.0 — 2026-03-23 — Initial implementation
  *   v1.1.0 — 2026-06-02 — Copied-state selector .hlp-copied → .copied (CopyButton component migration)
+ *   v2.0.0 — 2026-07-28 — Two-tab shell (.hlp-tabs/.hlp-tab), human help (.hlp-steps/-questions/
+ *     -answer/-stuck) and the rendered-markdown prompt box (.hlp-prompt-rendered). The page used
+ *     to print the prompt's markdown source at a human who clicked "Help".
  */
 
 /* ── Container ── */
@@ -135,3 +138,28 @@
     max-height: 360px;
   }
 }
+
+/* ── Two audiences, two tabs (v2.0.0, 2026-07-28) ────────────────────────────
+   The page used to be the agent prompt alone, printed as markdown SOURCE. The
+   human tab is the default; the prompt now renders through <Markdown>. */
+.hlp-tabs { display: flex; gap: .5rem; margin: 0 0 1.5rem; border-bottom: 1px solid var(--border); }
+.hlp-tab {
+  background: none; border: none; border-bottom: 2px solid transparent;
+  padding: .6rem .9rem; margin-bottom: -1px; cursor: pointer;
+  color: var(--text-dim); font-size: .95rem; font-weight: 600; font-family: inherit;
+}
+.hlp-tab:hover { color: var(--text); }
+.hlp-tab.active { color: var(--accent); border-bottom-color: var(--accent); }
+
+.hlp-steps { margin: 0 0 1.75rem; padding-left: 1.3rem; line-height: 1.8; }
+.hlp-steps a { color: var(--accent); }
+.hlp-questions { display: grid; gap: .5rem; margin-bottom: 1.75rem; }
+.hlp-answer { margin: 0; color: var(--text-dim); font-size: .9rem; line-height: 1.6; }
+.hlp-stuck { display: flex; gap: .75rem; flex-wrap: wrap; }
+
+/* The rendered prompt is long; keep it scrollable inside its own box rather than
+   letting it push the endpoint list off the bottom of a phone screen. */
+.hlp-prompt-rendered { max-height: 60vh; overflow-y: auto; margin-top: 1rem; padding: 1rem 1.1rem; border: 1px solid var(--border); border-radius: var(--radius-sm); background: var(--bg-surface, var(--bg-dim)); }
+.hlp-prompt-rendered table { display: block; overflow-x: auto; max-width: 100%; }
+.hlp-endpoints { margin: .9rem 0 0; padding-left: 1.2rem; display: grid; gap: .4rem; color: var(--text-dim); font-size: .88rem; }
+.hlp-endpoints code { background: var(--code-bg); padding: .1rem .4rem; border-radius: .25rem; }

package/dist/public/css/views/inbox.css

@@ -528,7 +528,7 @@
   box-shadow: var(--shadow-md);
 }
 .inbox-row:hover .inbox-bubble-actions { opacity: 1; pointer-events: auto; }
-/* Touch devices have no hover — the per-message actions (↩ reply, ⭐, 🔗, 📓, ✨) would be unreachable.
+/* Touch devices have no hover — the per-message actions (↩ reply, ⧉ copy, ⭐, 🔗, 📓, ✨) would be unreachable.
    Reveal them permanently there so a phone user can actually reply to / act on a message by tapping. */
 @media (hover: none) {
   .inbox-bubble-actions { opacity: 1; pointer-events: auto; }

package/dist/public/css/views/landing.css

@@ -43,6 +43,8 @@
 .ld-askai-box { border: 1px solid var(--border); border-radius: 12px; background: var(--card); padding: 1rem 1.1rem; text-align: left; }
 .ld-askai-prompt { margin: 0; white-space: pre-wrap; word-break: break-word; font-family: var(--font-mono, monospace); font-size: .8rem; line-height: 1.5; color: var(--text); max-height: 260px; overflow-y: auto; }
 .ld-askai-copy { margin-top: .9rem; }
+/* "Show the full prompt" sits between the preview and the copy button. */
+.ld-askai-more { margin-top: .6rem; display: block; font-size: .82rem; }
 .ld-ticker { display: flex; align-items: center; gap: .5rem; justify-content: center; margin: 1rem auto; max-width: 760px; padding: .45rem .9rem; border: 1px solid var(--border); border-radius: 999px; background: var(--card); font-size: .85rem; color: var(--text-dim); white-space: nowrap; overflow: hidden; }
 .ld-ticker-text { overflow: hidden; text-overflow: ellipsis; }
 .ld-ticker-dot { color: var(--success-fg, #2E9E5B); flex: none; }
@@ -115,10 +117,28 @@
 .ld-case-proof:hover { text-decoration: underline; }
 .ld-case-proofnote { font-size: .8rem; color: var(--text-dim); font-style: italic; background: var(--bg-surface, var(--bg-dim)); border-radius: 6px; padding: .45rem .7rem; }
 
+/* Cases grouped by how far up the value ladder they sit: work happens without you →
+   the company runs on it → the company earns on it. A group with no cases is dropped in
+   JS (Group() returns null), not here — htm leaves whitespace nodes, so :empty never matches. */
+.ld-casegroup { margin: 2.5rem 0 0; }
+.ld-casegroup-title { font-size: 1.1rem; font-weight: 700; color: var(--accent); margin: 0; }
+.ld-casegroup .ld-cases { margin-top: .9rem; }
+
+/* Why owning it is the reason to buy — the regulated-buyer argument. */
+.ld-sovereignty { margin: 2.75rem 0 0; }
+.ld-sov-list { margin: .9rem 0 0; padding-left: 1.2rem; display: grid; gap: .5rem; }
+.ld-sov-list li { color: var(--text-dim); font-size: .9rem; line-height: 1.5; }
+
 /* ── Contact card (business + pricing only) ── */
 .ld-contact { max-width: 460px; margin: 2.25rem auto 0; padding: 1.25rem 1.5rem; border: 2px solid var(--accent); border-radius: 14px; background: var(--card); text-align: center; }
 .ld-contact-title { font-size: 1.15rem; font-weight: 800; margin-bottom: .4rem; }
+/* Two people side by side on a wide screen, stacked on a phone. */
+.ld-contact-people { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin-bottom: .5rem; }
+.ld-contact-person { display: flex; flex-direction: column; gap: .2rem; }
+.ld-contact-role { font-size: .8rem; color: var(--text-dim); margin-bottom: .2rem; }
 .ld-contact-name { font-weight: 600; margin-bottom: .35rem; }
+.ld-contact-person .ld-contact-name { margin-bottom: 0; }
+.ld-contact-person .ld-contact-links { flex-direction: column; gap: .15rem; margin-bottom: 0; }
 .ld-contact-links { display: flex; gap: 1rem; justify-content: center; flex-wrap: wrap; margin-bottom: .45rem; }
 .ld-contact-links a { color: var(--accent); text-decoration: none; font-weight: 600; }
 .ld-contact-links a:hover { text-decoration: underline; }

package/dist/public/css/views/members.css

@@ -1,31 +1,61 @@
 /**
  * @file members.css
- * @description Node members showcase grid (published-portfolio owners). Card grid with avatar + name +
- *   bio, linking to each member's portfolio.
+ * @description Node members showcase (published-portfolio owners). Each member renders as an ID
+ *   card: identicon + name + full GHII + bio, linking to their portfolio. Plus the "you can have
+ *   one too" panel above the grid.
  * @version-history
  *   v1.0.0 — 2026-06-23 — Initial.
+ *   v2.0.0 — 2026-07-28 — ID-card layout (avatar beside the identity lines instead of a centred
+ *     column) so the identifier is readable, and the .mbr-yours panel that tells a visitor the
+ *     page is available to them.
  */
 .mbr { max-width: 1100px; margin: 0 auto; padding: 24px 16px; }
 .mbr-title { font-size: 1.6rem; margin: 0 0 6px; }
-.mbr-desc { color: var(--text-dim); margin: 0 0 24px; }
+.mbr-desc { color: var(--text-dim); margin: 0 0 20px; }
+
+/* "You can be on this page too." The list is only interesting to a visitor once they know
+   they can join it. */
+.mbr-yours {
+  display: flex; align-items: center; justify-content: space-between; gap: 16px; flex-wrap: wrap;
+  padding: 16px 18px; margin: 0 0 28px;
+  border: 1px solid var(--accent-border, var(--border)); border-radius: var(--radius-md, 12px);
+  background: var(--accent-subtle, var(--bg-surface, var(--bg-dim)));
+}
+.mbr-yours-text { margin: 0; font-size: 0.92rem; line-height: 1.55; max-width: 62ch; }
+.mbr-yours-cta { white-space: nowrap; }
+
+/* Wider minimum than a plain avatar grid: an identifier is long, and truncating the thing that
+   makes the card an ID card would defeat it. */
 .mbr-grid {
   display: grid;
-  grid-template-columns: repeat(auto-fill, minmax(180px, 1fr));
+  grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));
   gap: 16px;
 }
 .mbr-card {
-  display: flex; flex-direction: column; align-items: center; gap: 8px; text-align: center;
-  padding: 20px 14px; border: 1px solid var(--card-border, var(--border)); border-radius: var(--radius-md, 12px);
+  display: flex; flex-direction: column; gap: 10px;
+  padding: 16px; border: 1px solid var(--card-border, var(--border)); border-radius: var(--radius-md, 12px);
   background: var(--card-bg); text-decoration: none; color: inherit;
   transition: border-color 0.12s, transform 0.12s;
 }
 .mbr-card:hover { border-color: var(--accent); transform: translateY(-2px); }
+
+/* Avatar beside the identity lines, the way a card carries a photo next to a number. */
+.mbr-card-head { display: flex; align-items: center; gap: 12px; min-width: 0; }
 .mbr-avatar {
-  width: 64px; height: 64px; border-radius: var(--radius-full, 50%);
-  display: flex; align-items: center; justify-content: center;
-  font-size: 32px; background: var(--accent-subtle); border: 1px solid var(--accent-border);
+  width: 52px; height: 52px; flex: 0 0 auto; border-radius: var(--radius-full, 50%);
+  display: flex; align-items: center; justify-content: center; overflow: hidden;
+  background: var(--accent-subtle); border: 1px solid var(--accent-border);
+}
+.mbr-avatar svg { width: 100%; height: 100%; }
+.mbr-avatar--emoji { font-size: 26px; }
+.mbr-idlines { min-width: 0; display: flex; flex-direction: column; gap: 2px; }
+.mbr-name { font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+/* The identifier is the card's number: monospace, quiet, and allowed to wrap rather than be cut,
+   because a half-shown identifier is worse than a two-line one. */
+.mbr-ghii {
+  font-family: var(--font-mono, monospace); font-size: 0.72rem; color: var(--text-dim);
+  overflow-wrap: anywhere; line-height: 1.35;
 }
-.mbr-name { font-weight: 600; }
 .mbr-bio {
   font-size: 13px; color: var(--text-dim);
   display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden;

package/dist/public/css/views/portal-dev.css

@@ -10,6 +10,8 @@
  *     .dv-num/.dv-label; dev-portal stats use canonical .stat-card family.
  *   v1.3.0 — 2026-06-02 — Component unification (#11): remove .dv-dot (had a
  *     hardcoded #22c55e); node-badge dot uses canonical <StatusDot>.
+ *   v1.4.0 — 2026-07-28 — Community list leads with Open (apps run on the node) and keeps
+ *     Download as the quieter second action: .dv-app-actions / -open / -download.
  */
 /* ── Dev Portal root vars ── */
 :root {
@@ -90,6 +92,13 @@
 
 /* Panel */
 .dv-panel { background: var(--bg-card); border-radius: 12px; padding: 1.5rem; margin-bottom: 1.5rem; border: 1px solid var(--border); }
+.dv-panel--accent { border-color: var(--love1, #E8564A); }
+.dv-panel-title { margin: 0 0 .5rem; }
+.dv-panel-lead { margin: 0 0 .5rem; }
+.dv-notice-sub { color: var(--text-dim); font-size: .85rem; }
+.dv-mt { margin-top: 1.25rem; }
+.dv-prompt-output--flush { margin-bottom: 0; }
+.dv-prompt-text--single { max-height: none; font-size: .85rem; }
 
 /* Prompt output */
 .dv-prompt-output { position: relative; }
@@ -136,6 +145,10 @@
 .dv-share-url { display: flex; align-items: center; gap: .5rem; background: var(--bg-surface); border: 1px solid var(--success); border-radius: 8px; padding: .6rem 1rem; margin-top: .75rem; font-family: monospace; font-size: .85rem; }
 .dv-share-url input { flex: 1; background: none; border: none; color: var(--text, #1A1A2E); font-family: monospace; font-size: .85rem; outline: none; }
 .dv-share-url .dv-copy-btn { position: static; background: #22c55e; color: #fff; padding: .3rem .6rem; font-size: .8rem; }
+/* .dv-copy-btn is absolutely positioned for the prompt boxes (which are position:relative).
+   In a plain flex row it has no positioned ancestor and escapes to the page corner, so the
+   row pins it back into the flow. */
+.dv-code-row .dv-copy-btn { position: static; }
 
 /* App list */
 .dv-app-list { display: grid; grid-template-columns: repeat(auto-fill, minmax(250px, 1fr)); gap: .75rem; margin-top: 1rem; }
@@ -143,6 +156,12 @@
 .dv-app-name { font-weight: 600; margin-bottom: .25rem; }
 .dv-app-meta { font-size: .75rem; color: var(--text-dim); }
 .dv-app-item a { color: var(--love1, #E8564A); }
+/* Open first: these apps run on the node, they are not files you take home.
+   Download stays available as the quieter second action. */
+.dv-app-actions { display: flex; align-items: center; gap: .6rem; margin-top: .6rem; flex-wrap: wrap; }
+.dv-app-open { font-size: .8rem; padding: .3rem .8rem; }
+.dv-app-download { font-size: .78rem; color: var(--text-dim); }
+.dv-app-item .dv-app-download { color: var(--text-dim); }
 
 @media (max-width: 600px) {
   .dv-platforms { grid-template-columns: repeat(auto-fill, minmax(120px, 1fr)); }
@@ -150,48 +169,48 @@
   .dv-stats { flex-direction: column; }
   .dv-container h1 { font-size: 1.4rem; }
 }
-
-/* ── MCP setup panel: lifted out of ~52 inline styles + a tabStyle() inline-CSS
-   builder + a bespoke non-brand purple/rgba(255,255,255) palette (portal-dev.panels.js).
-   All colours are theme tokens now (purple/info/success/warn tints), so the panel
-   flips correctly in dark mode. ── */
-.dv-callout { border-radius: .5rem; padding: .75rem 1rem; margin-bottom: 1rem; }
-.dv-callout--warn { background: var(--warn-bg); border: 1px solid var(--warn-border); }
-.dv-callout--success { background: var(--success-bg); border: 1px solid var(--success-border); }
-.dv-callout--purple { background: var(--purple-bg); border: 1px solid var(--purple-border); }
-.dv-info-box { margin-top: .75rem; padding: .5rem .75rem; background: var(--info-bg); border: 1px solid var(--info-border); border-radius: .25rem; font-size: .82rem; }
-.dv-setup-tabs { display: flex; gap: 2px; margin-top: .75rem; border-bottom: 1px solid var(--purple-border); }
-.dv-setup-tab { padding: .4rem .75rem; border: none; border-radius: .25rem .25rem 0 0; cursor: pointer; font-size: .8rem; font-weight: 600; background: transparent; color: var(--text-dim); }
-.dv-setup-tab.active { background: var(--purple-bg); color: var(--purple-fg); }
-.dv-tab-content { padding: .75rem 0 0; }
-.dv-panel-desc { font-size: .82rem; color: var(--text-dim); margin: 0 0 .75rem; }
-.dv-field { margin-bottom: .75rem; }
-.dv-field-label { font-size: .8rem; color: var(--text-dim); margin-bottom: .25rem; }
-.dv-code-row { display: flex; align-items: center; gap: .5rem; }
-.dv-code { font-size: .78rem; background: var(--code-bg); padding: .4rem .6rem; border-radius: .25rem; user-select: all; flex: 1; word-break: break-all; }
-.dv-code--inline { font-size: .78rem; background: var(--code-bg); padding: .25rem .5rem; border-radius: .25rem; user-select: all; }
-.dv-code--inline-sm { font-size: .8rem; background: var(--code-bg); padding: .25rem .5rem; border-radius: .25rem; user-select: all; }
-.dv-copy-btn { padding: .3rem .6rem; background: var(--accent); color: #fff; border: none; border-radius: .25rem; cursor: pointer; font-size: .75rem; white-space: nowrap; }
-.dv-copy-btn--alt { padding: .2rem .5rem; background: var(--purple-bg); color: var(--purple-fg); border: 1px solid var(--purple-border); border-radius: .25rem; cursor: pointer; font-size: .75rem; white-space: nowrap; }
-.dv-note { margin-top: .75rem; font-size: .8rem; color: var(--text-dim); font-style: italic; }
-.dv-hint { font-size: .8rem; color: var(--text-dim); margin: 0; font-style: italic; }
-.dv-step-img { max-width: 100%; border-radius: .5rem; border: 1px solid var(--border); }
-.dv-step-media { margin: .5rem 0; }
-.dv-steps { margin: 0; padding-left: 1.25rem; line-height: 1.8; }
-.dv-steps--tight { line-height: 1.6; }
-.dv-step-row { display: flex; align-items: center; gap: .5rem; margin: .4rem 0; }
-.dv-block-sm { font-size: .85rem; }
-.dv-p-mt { margin: .5rem 0 0; font-size: .85rem; }
-.dv-p-mt-muted { margin: .5rem 0 0; font-size: .85rem; color: var(--text-dim); }
-.dv-p-mt-lg { margin: .5rem 0 0; font-size: .9rem; }
-.dv-details { margin-top: .75rem; font-size: .85rem; }
-.dv-details-summary { cursor: pointer; color: var(--text-dim); }
-.dv-details-body { margin-top: .5rem; padding: .5rem; background: var(--bg-surface); border-radius: .25rem; }
-.dv-mt { margin-top: 1rem; }
-.dv-ul-indent { margin-left: 1.5rem; }
-.dv-link { color: var(--accent); text-decoration: underline; }
-.dv-ok-line { color: var(--success); font-size: .85rem; }
-.dv-muted-line { color: var(--text-dim); font-size: .85rem; }
-.dv-p-desc-muted { margin: 0 0 .75rem; color: var(--text-dim); }
-.dv-unavail-sub { font-size: .8rem; margin-top: .5rem; }
-.dv-mt-sm { margin-top: .5rem; font-size: .85rem; }
+
+/* ── MCP setup panel: lifted out of ~52 inline styles + a tabStyle() inline-CSS
+   builder + a bespoke non-brand purple/rgba(255,255,255) palette (portal-dev.panels.js).
+   All colours are theme tokens now (purple/info/success/warn tints), so the panel
+   flips correctly in dark mode. ── */
+.dv-callout { border-radius: .5rem; padding: .75rem 1rem; margin-bottom: 1rem; }
+.dv-callout--warn { background: var(--warn-bg); border: 1px solid var(--warn-border); }
+.dv-callout--success { background: var(--success-bg); border: 1px solid var(--success-border); }
+.dv-callout--purple { background: var(--purple-bg); border: 1px solid var(--purple-border); }
+.dv-info-box { margin-top: .75rem; padding: .5rem .75rem; background: var(--info-bg); border: 1px solid var(--info-border); border-radius: .25rem; font-size: .82rem; }
+.dv-setup-tabs { display: flex; gap: 2px; margin-top: .75rem; border-bottom: 1px solid var(--purple-border); }
+.dv-setup-tab { padding: .4rem .75rem; border: none; border-radius: .25rem .25rem 0 0; cursor: pointer; font-size: .8rem; font-weight: 600; background: transparent; color: var(--text-dim); }
+.dv-setup-tab.active { background: var(--purple-bg); color: var(--purple-fg); }
+.dv-tab-content { padding: .75rem 0 0; }
+.dv-panel-desc { font-size: .82rem; color: var(--text-dim); margin: 0 0 .75rem; }
+.dv-field { margin-bottom: .75rem; }
+.dv-field-label { font-size: .8rem; color: var(--text-dim); margin-bottom: .25rem; }
+.dv-code-row { display: flex; align-items: center; gap: .5rem; }
+.dv-code { font-size: .78rem; background: var(--code-bg); padding: .4rem .6rem; border-radius: .25rem; user-select: all; flex: 1; word-break: break-all; }
+.dv-code--inline { font-size: .78rem; background: var(--code-bg); padding: .25rem .5rem; border-radius: .25rem; user-select: all; }
+.dv-code--inline-sm { font-size: .8rem; background: var(--code-bg); padding: .25rem .5rem; border-radius: .25rem; user-select: all; }
+.dv-copy-btn { padding: .3rem .6rem; background: var(--accent); color: #fff; border: none; border-radius: .25rem; cursor: pointer; font-size: .75rem; white-space: nowrap; }
+.dv-copy-btn--alt { padding: .2rem .5rem; background: var(--purple-bg); color: var(--purple-fg); border: 1px solid var(--purple-border); border-radius: .25rem; cursor: pointer; font-size: .75rem; white-space: nowrap; }
+.dv-note { margin-top: .75rem; font-size: .8rem; color: var(--text-dim); font-style: italic; }
+.dv-hint { font-size: .8rem; color: var(--text-dim); margin: 0; font-style: italic; }
+.dv-step-img { max-width: 100%; border-radius: .5rem; border: 1px solid var(--border); }
+.dv-step-media { margin: .5rem 0; }
+.dv-steps { margin: 0; padding-left: 1.25rem; line-height: 1.8; }
+.dv-steps--tight { line-height: 1.6; }
+.dv-step-row { display: flex; align-items: center; gap: .5rem; margin: .4rem 0; }
+.dv-block-sm { font-size: .85rem; }
+.dv-p-mt { margin: .5rem 0 0; font-size: .85rem; }
+.dv-p-mt-muted { margin: .5rem 0 0; font-size: .85rem; color: var(--text-dim); }
+.dv-p-mt-lg { margin: .5rem 0 0; font-size: .9rem; }
+.dv-details { margin-top: .75rem; font-size: .85rem; }
+.dv-details-summary { cursor: pointer; color: var(--text-dim); }
+.dv-details-body { margin-top: .5rem; padding: .5rem; background: var(--bg-surface); border-radius: .25rem; }
+.dv-mt { margin-top: 1rem; }
+.dv-ul-indent { margin-left: 1.5rem; }
+.dv-link { color: var(--accent); text-decoration: underline; }
+.dv-ok-line { color: var(--success); font-size: .85rem; }
+.dv-muted-line { color: var(--text-dim); font-size: .85rem; }
+.dv-p-desc-muted { margin: 0 0 .75rem; color: var(--text-dim); }
+.dv-unavail-sub { font-size: .8rem; margin-top: .5rem; }
+.dv-mt-sm { margin-top: .5rem; font-size: .85rem; }

package/dist/public/css/views/profile.css

@@ -4,6 +4,9 @@
  *   wallet, memory, agents, extensions, packages, knowledge, generator, and
  *   edit panels. Consumes theme.css tokens so it flips with dark/light mode.
  * @version-history
+ *   v2.18.0 — 2026-07-28 — .ag-spend*: the spending limit on a connected app's card.
+ *   v2.17.0 — 2026-07-25 — .ag-scope-toggle: the Connected Apps scope count is now the disclosure
+ *     button for its badge list (button reset so it still renders as a plain .badge).
  *   v2.16.2 — 2026-07-21 — App-shell scroll model (theme.css v1.24.0): .pf-sidebar sticks to top:0 of
  *     the new .page-content scroll region (was top:var(--nav-height) against the window) and caps at
  *     calc(100dvh − nav-height) so its nav list scrolls without a header-height gap.
@@ -226,6 +229,9 @@
 .pf .wallet-psp{display:flex;flex-direction:column;gap:.5rem;margin-bottom:1.5rem}
 .pf .wallet-psp-row{display:flex;gap:.5rem;flex-wrap:wrap;align-items:center}
 .pf .wallet-psp-input{flex:1;min-width:240px}
+/* Payout rails: the chips that say WHICH rail a sale settles on (fiat via provider vs USDC on-chain). */
+.pf .wallet-rail-row{display:flex;gap:.5rem;flex-wrap:wrap;align-items:center}
+.pf .wallet-rail-row code{font-size:.8em;word-break:break-all}
 .pf .pf-psp-chip{display:inline-block;padding:.1rem .55rem;border-radius:var(--radius-full,999px);border:1px solid var(--border);font-size:.72rem;width:fit-content}
 .pf .pf-psp-chip--ok{color:var(--success,#22c55e);border-color:var(--success,#22c55e)}
 .pf .pf-psp-chip--warn{color:var(--warning,#f59e0b);border-color:var(--warning,#f59e0b)}
@@ -1615,6 +1621,17 @@
 
 /* ── Access tab ── */
 .pf .access-mono     { font-family: monospace; font-size: .75rem; word-break: break-all; color: var(--muted); }
+/* Scope count doubles as the disclosure control for the badge list it summarises: button reset so a
+   <button> carrying .badge looks exactly like the static badges elsewhere in the card. */
+/* Spending limit on a connected app's card. Only an app that asked to spend shows one, so this
+   never appears on the majority of cards and must not push the rest of the layout around. */
+.pf .ag-spend { margin-top: .75rem; padding-top: .75rem; border-top: 1px solid var(--border); }
+.pf .ag-spend-head { display: flex; align-items: baseline; justify-content: space-between; gap: .75rem; flex-wrap: wrap; margin-bottom: .4rem; }
+.pf .ag-spend-row { display: flex; align-items: center; gap: .5rem; flex-wrap: wrap; }
+.pf .ag-spend-input { max-width: 16rem; flex: 1 1 8rem; }
+
+.pf .ag-scope-toggle { border: 0; font-family: inherit; font-size: .66rem; font-weight: 600; cursor: pointer; }
+.pf .ag-scope-toggle:hover { filter: brightness(1.1); }
 .pf .access-key-blur { filter: blur(4px); transition: filter .2s; }
 .pf .access-key-blur.revealed { filter: none; }
 .pf .access-card-warn { border-color: var(--warn); cursor: pointer; }

package/dist/public/js/api.js

@@ -107,6 +107,7 @@ function parseJwtPayload(jwt) {
     const parts = jwt.split('.');
     if (parts.length !== 3) return null;
     return JSON.parse(atob(parts[1].replace(/-/g, '+').replace(/_/g, '/')));
+  // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
   } catch { return null; }
 }
 

package/dist/public/js/app-sandbox.js

@@ -26,6 +26,7 @@ export function isAppHtmlUrl(href) {
   try {
     path = new URL(href, window.location.href).pathname;
   } catch {
+    // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
     return false;
   }
   // /v1/apps/<owner>/<file> — two path segments after /v1/apps/. The bare collection

package/dist/public/js/components/auth-image.js

@@ -12,6 +12,7 @@
 import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
 import htm from 'htm';
+import { swallowed } from '/js/swallowed.js';
 const html = htm.bind(h);
 
 export default function AuthImage({ src, alt, ...props }) {
@@ -42,7 +43,8 @@ export default function AuthImage({ src, alt, ...props }) {
         urlRef.current = url;
         setBlobUrl(url);
       })
-      .catch(() => {
+      .catch((err) => {
+        swallowed('auth-image', err);
         if (!cancelled) setBlobUrl(null);
       });
 

package/dist/public/js/i18n.js

@@ -13,6 +13,7 @@
  *   v1.0.0 — 2026-07-13 — Header added; file pre-dates header standard
  */
 import { detectLocale, persistLocale } from './utils.js';
+import { swallowed } from '/js/swallowed.js';
 
 /** Flatten a nested object into dot-notation keys. */
 function flatten(obj, prefix = '') {
@@ -51,8 +52,9 @@ export async function loadTranslations(locale) {
       const locRes = await fetch(`/locales/${currentLocale}.json?v=${_v}`);
       const locData = await locRes.json();
       translations = { ...fallback, ...flatten(locData) };
-    } catch {
+    } catch (err) {
       // Fall back to English
+      swallowed('i18n: loadTranslations', err);
       translations = fallback;
     }
   }

package/dist/public/js/presence-store.js

@@ -16,6 +16,7 @@
  */
 import { useState, useEffect } from 'preact/hooks';
 import { getPresenceBatch } from '/js/services/presence.js';
+import { swallowed } from '/js/swallowed.js';
 
 const cache = new Map();        // ghii → { status, since }
 const subs = new Map();         // ghii → Set<fn>
@@ -45,8 +46,9 @@ async function flush() {
       lastFetched.set(ghii, now);
       notify(ghii);
     }
-  } catch {
+  } catch (err) {
     /* leave the cache as-is; a later live-update or remount retries */
+    swallowed('presence-store: flush', err);
   }
 }
 

package/dist/public/js/recents.js

@@ -21,6 +21,7 @@ function readAll() {
     const raw = localStorage.getItem(KEY);
     const list = raw ? JSON.parse(raw) : [];
     return Array.isArray(list) ? list : [];
+  // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
   } catch { return []; }
 }
 
@@ -31,6 +32,7 @@ export function recordRecent(item) {
     const list = readAll().filter(x => !(x.type === item.type && x.id === item.id));
     list.unshift({ type: item.type, id: item.id, label: item.label, sub: item.sub || '', data: item.data || {}, at: new Date().toISOString() });
     localStorage.setItem(KEY, JSON.stringify(list.slice(0, CAP)));
+  // eslint-disable-next-line aimeat/no-silent-catch -- recents are a convenience — never break the caller
   } catch { /* recents are a convenience — never break the caller */ }
 }
 

package/dist/public/js/services/agent-activity.js

@@ -13,6 +13,7 @@
  *     subtab's 5 agent-domain mount reads into one call (ledger stays separate).
  */
 import { apiGet } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 export async function getActivity(agentName, days = 30, granularity = 'daily') {
   return apiGet(`/v1/agents/${encodeURIComponent(agentName)}/activity?days=${days}&granularity=${granularity}`);
@@ -31,5 +32,5 @@ export async function getActivityOverview(agentName) {
   try {
     const resp = await apiGet(`/v1/agents/${encodeURIComponent(agentName)}/activity/overview`);
     return resp?.data ?? null;
-  } catch { return null; }
+  } catch (err) { swallowed('agent-activity: getActivityOverview', err); return null; }
 }