aimeat 2.6.1 → 3.0.0

package/dist/src/services/agent-offers-write.js

@@ -0,0 +1,98 @@
+import { buildGAII } from '../utils/gaii.js';
+import { OffersDocSchema } from '../models/offer-schemas.js';
+import { writeMemoryRecord } from './memory-write.js';
+import { emitChange } from './event-bus.js';
+/** The memory key an agent's offers live under. */
+export function offersKeyFor(agentName) {
+    return `agents.${agentName}.offers`;
+}
+/**
+ * Resolve what a caller named into one of their OWN agents. A bare name is built into a GAII under
+ * the caller's owner; a full GAII is taken as given and then has to survive the same-owner check,
+ * which is what stops a caller publishing into somebody else's agent.
+ */
+async function resolveOwnAgent(deps, callerOwner, identifier) {
+    const gaii = identifier.includes('#') ? identifier : buildGAII(identifier, callerOwner, deps.config.nodeId);
+    const agent = await deps.storage.getAgent(gaii);
+    if (!agent) {
+        return { ok: false, status: 404, code: 'AGENT_NOT_FOUND', message: `Agent not found: ${identifier}` };
+    }
+    if (agent.owner !== callerOwner) {
+        return { ok: false, status: 403, code: 'ACCESS_DENIED', message: 'You can only publish offers for your own agents' };
+    }
+    return { ok: true, gaii, name: agent.name };
+}
+/**
+ * Read one of the caller's own agents' offers, with the same target resolution the publish uses.
+ *
+ * A door that changes one offer needs the current list before it can write the whole document back,
+ * and resolving the agent twice by hand is how the two copies came to disagree about what a bare
+ * name means.
+ */
+export async function loadAgentOffers(deps, callerOwner, identifier) {
+    const target = await resolveOwnAgent(deps, callerOwner, identifier);
+    if (!target.ok)
+        return target;
+    const rec = await deps.storage.getMemory(target.gaii, offersKeyFor(target.name));
+    const doc = rec?.value ?? {};
+    return {
+        ok: true,
+        agentName: target.name,
+        agentGaii: target.gaii,
+        docVersion: doc.version ?? 0,
+        offers: doc.offers ?? [],
+    };
+}
+/**
+ * Publish the offers document for one of the caller's own agents.
+ *
+ * The WHOLE document validates, not the entry that changed: a door that patches a single offer would
+ * otherwise store a list it never checked. The document version counts publishes and carries on from
+ * whatever is stored, so a reader can tell one edition from the next.
+ */
+export async function publishAgentOffers(deps, caller, identifier, offers) {
+    const target = await resolveOwnAgent(deps, caller.owner, identifier);
+    if (!target.ok)
+        return target;
+    const parsed = OffersDocSchema.safeParse({ offers });
+    if (!parsed.success) {
+        return { ok: false, status: 400, code: 'INVALID_OFFERS', message: parsed.error.message };
+    }
+    const key = offersKeyFor(target.name);
+    const existing = await deps.storage.getMemory(target.gaii, key);
+    const docVersion = (existing?.value?.version ?? 0) + 1;
+    const written = await writeMemoryRecord(deps, {
+        principal: caller.principal,
+        targetGaii: target.gaii,
+        scopes: caller.scopes,
+        roles: caller.roles,
+    }, {
+        key,
+        value: { version: docVersion, updatedAt: new Date().toISOString(), offers: parsed.data.offers },
+        // 'owner' means every one of this owner's principals reads it, which is what the profile
+        // surfaces and the delegate picker rely on. Per-offer `visibility` is a different axis: it
+        // decides which offers a stranger sees, and it lives inside the document.
+        visibility: 'owner',
+        tags: ['offers'],
+        pipeline: caller.pipeline,
+        // The record lands in the agent's own namespace, where every reader looks for it, so there
+        // is no owner copy for the shadowing check to find.
+        ownerScoped: true,
+        ...(caller.authorisingScope ? { authorisingScope: caller.authorisingScope } : {}),
+    });
+    if (!written.ok)
+        return written;
+    // The profile Offers tab and the "Do" feed listen on 'agents' rather than on the memory
+    // firehose. The EXCHANGE projection is deliberately not repeated here: writeMemoryRecord already
+    // reconciles the listing this record is the source of truth for.
+    emitChange('agents');
+    return {
+        ok: true,
+        agentName: target.name,
+        agentGaii: target.gaii,
+        docVersion,
+        offers: parsed.data.offers,
+        record: written.record,
+    };
+}
+//# sourceMappingURL=agent-offers-write.js.map

package/dist/src/services/agent-offers-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-offers-write.js","sourceRoot":"","sources":["../../../src/services/agent-offers-write.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAc,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAA0B,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAoD5C,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC1C,OAAO,UAAU,SAAS,SAAS,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC1B,IAAqB,EACrB,WAAmB,EACnB,UAAkB;IAElB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,oBAAoB,UAAU,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IACzH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,IAAqB,EACrB,WAAmB,EACnB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAI,GAAG,EAAE,KAA4D,IAAI,EAAE,CAAC;IACrF,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,UAAU,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;KAC3B,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,IAAqB,EACrB,MAAyB,EACzB,UAAkB,EAClB,MAAe;IAEf,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7F,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,CAAE,QAAQ,EAAE,KAA0C,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAE7F,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE;QAC1C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;KACtB,EAAE;QACC,GAAG;QACH,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;QAC/F,yFAAyF;QACzF,2FAA2F;QAC3F,0EAA0E;QAC1E,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,CAAC,QAAQ,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,2FAA2F;QAC3F,oDAAoD;QACpD,WAAW,EAAE,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAEhC,wFAAwF;IACxF,iGAAiG;IACjG,iEAAiE;IACjE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC;AACN,CAAC"}

package/dist/src/services/agent-onboard-prompt.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @file src/services/agent-onboard-prompt.ts
+ * @description The agent door's prompt (aimeat_remake/12-ai-rekisteroi.md): the front-page button's
+ *   payload. A person copies it into their own AI chat, and if that AI can make a POST request, it
+ *   gets them an account without their touching the interface at all.
+ *
+ *   Node-served for the same reason as the other two: when a prompt turns out to mislead, the fix
+ *   has to reach the copies people have already pasted into their chats.
+ *
+ *   The single most important line in it is the failure line. This prompt is handed to an AI whose
+ *   abilities are unknown by definition — that is what it is testing — so it is told to say plainly
+ *   and immediately when it cannot, and to send the person to register themselves. A model that
+ *   describes what it would have done leaves someone waiting for an email that will never arrive.
+ * @structure buildAgentOnboardPrompt(config, { lang })
+ * @usage import { buildAgentOnboardPrompt } from '../services/agent-onboard-prompt.js';
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 4b).
+ */
+import type { AimeatConfig } from '../config.js';
+export declare function buildAgentOnboardPrompt(config: AimeatConfig, opts?: {
+    lang?: string;
+}): string;
+//# sourceMappingURL=agent-onboard-prompt.d.ts.map

package/dist/src/services/agent-onboard-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-onboard-prompt.d.ts","sourceRoot":"","sources":["../../../src/services/agent-onboard-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAKjD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,CA6ElG"}

package/dist/src/services/agent-onboard-prompt.js

@@ -0,0 +1,78 @@
+const lang = (v) => (v === 'fi' ? 'fi' : 'en');
+export function buildAgentOnboardPrompt(config, opts = {}) {
+    const l = lang(opts.lang);
+    const node = config.baseUrl.replace(/\/+$/, '');
+    const L = [];
+    if (l === 'fi') {
+        L.push('Puhu minulle suomea.');
+        L.push('');
+        L.push(`Haluan tilin AIMEAT-nimiseen palveluun osoitteessa ${node}, ja haluan että sinä hoidat sen`);
+        L.push('puolestani. Tee nämä järjestyksessä.');
+        L.push('');
+        L.push(`1. Lue ${node}/llms.txt, niin tiedät mistä on kyse.`);
+        L.push('');
+        L.push('2. Kysy minulta **vain sähköpostiosoitteeni**. Älä kysy käyttäjänimeä äläkä salasanaa:');
+        L.push('   minä valitsen ne itse selaimessa, koska käyttäjänimi on pysyvä.');
+        L.push('');
+        L.push('3. Tee tämä kutsu ja täytä omat tietosi rehellisesti:');
+        L.push('');
+        L.push(`     POST ${node}/v1/registration-invites`);
+        L.push('     Content-Type: application/json');
+        L.push('     {');
+        L.push('       "email": "<osoite jonka annoin>",');
+        L.push('       "agent": {');
+        L.push('         "model":  "<mallisi nimi>",');
+        L.push('         "vendor": "<kuka sinut teki>",');
+        L.push('         "client": "<sovellus jossa keskustelemme juuri nyt>"');
+        L.push('       }');
+        L.push('     }');
+        L.push('');
+        L.push('4. Kerro minulle: viesti lähti, katso postilaatikkoosi ja paina siinä olevaa nappia.');
+        L.push('   Kerro myös että viestissä näkyy mistä IP-osoitteesta ja millä tekoälyllä kutsu');
+        L.push('   tehtiin, jotta näen sen tulleen sinulta.');
+        L.push('');
+        L.push('5. Kun olen valmis, kerro mitä seuraavaksi tapahtuu: valitsen käyttäjänimen, teen');
+        L.push('   tervetuloamaton ja kytken sinut agentiksi kotiini. Varaudu siihen että joudumme');
+        L.push('   konfiguroimaan MCP-konnektorin.');
+        L.push('');
+        L.push('**Jos et pysty tekemään tuota kutsua, sano se minulle heti ja suoraan.** Älä kuvaile');
+        L.push('mitä olisit tehnyt. Kerro sen sijaan, missä sovelluksessa keskustelemme, ja neuvo minua');
+        L.push(`rekisteröitymään itse osoitteessa ${node}. Se on täysin kunnollinen lopputulos; hiljainen`);
+        L.push('epäonnistuminen ei ole, koska jään odottamaan viestiä joka ei koskaan tule.');
+        return L.join('\n');
+    }
+    L.push(`I want an account on a service called AIMEAT at ${node}, and I want you to arrange it for`);
+    L.push('me. Do these in order.');
+    L.push('');
+    L.push(`1. Read ${node}/llms.txt so you know what this is.`);
+    L.push('');
+    L.push('2. Ask me for **my email address only**. Do not ask for a username or a password: I pick');
+    L.push('   those myself in the browser, because a username is permanent.');
+    L.push('');
+    L.push('3. Make this call, filling in your own details honestly:');
+    L.push('');
+    L.push(`     POST ${node}/v1/registration-invites`);
+    L.push('     Content-Type: application/json');
+    L.push('     {');
+    L.push('       "email": "<the address I gave you>",');
+    L.push('       "agent": {');
+    L.push('         "model":  "<your model name>",');
+    L.push('         "vendor": "<who made you>",');
+    L.push('         "client": "<the app we are talking in right now>"');
+    L.push('       }');
+    L.push('     }');
+    L.push('');
+    L.push('4. Tell me: the message has been sent, check your inbox, press the button in it. Mention');
+    L.push('   that the message shows the IP address and which AI made the call, so I can see it came');
+    L.push('   from you.');
+    L.push('');
+    L.push('5. When I am done, tell me what happens next: I choose a username, make a welcome mat, and');
+    L.push('   connect you as an agent to my home. Be ready to configure an MCP connector.');
+    L.push('');
+    L.push('**If you cannot make that call, say so immediately and plainly.** Do not describe what you');
+    L.push('would have done. Instead tell me which app we are talking in, and send me to register');
+    L.push(`myself at ${node}. That is a perfectly good outcome; a silent failure is not, because I`);
+    L.push('will sit waiting for an email that never comes.');
+    return L.join('\n');
+}
+//# sourceMappingURL=agent-onboard-prompt.js.map

package/dist/src/services/agent-onboard-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-onboard-prompt.js","sourceRoot":"","sources":["../../../src/services/agent-onboard-prompt.ts"],"names":[],"mappings":"AAqBA,MAAM,IAAI,GAAG,CAAC,CAAU,EAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,UAAU,uBAAuB,CAAC,MAAoB,EAAE,OAA0B,EAAE;IACtF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,GAAa,EAAE,CAAC;IAEvB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACb,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sDAAsD,IAAI,kCAAkC,CAAC,CAAC;QACrG,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,uCAAuC,CAAC,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QACjG,CAAC,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAC7E,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5B,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACxE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QAC/F,CAAC,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC7C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QAC/F,CAAC,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;QAClG,CAAC,CAAC,IAAI,CAAC,qCAAqC,IAAI,kDAAkD,CAAC,CAAC;QACpG,CAAC,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,CAAC,CAAC,IAAI,CAAC,mDAAmD,IAAI,oCAAoC,CAAC,CAAC;IACpG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,qCAAqC,CAAC,CAAC;IAC7D,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;IACnG,CAAC,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC3E,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACnE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;IACpD,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC9C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACtD,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5B,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC/C,CAAC,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACrE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;IACnG,CAAC,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;IACpG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IACrG,CAAC,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IACzF,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IACrG,CAAC,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;IAChG,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,wEAAwE,CAAC,CAAC;IAClG,CAAC,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/src/services/agent-profile-write.d.ts

@@ -0,0 +1,152 @@
+/**
+ * @file src/services/agent-profile-write.ts
+ * @description Writing the owner-managed and self-reported fields of an agent record: tags, mode,
+ *   capabilities, and the platform an agent reports about itself.
+ *
+ *   Every one of these existed twice, once in an HTTP handler and once in an MCP tool, and each
+ *   pair had drifted:
+ *
+ *   - Capabilities. PUT /v1/agents/:name/capabilities stopped folding languages into the domain
+ *     list in May 2026 and gave them their own field; aimeat_agent_capabilities_report kept
+ *     pushing "Language: fi" into domainCapabilities and never wrote `languages`, so an agent that
+ *     onboarded through MCP had a polluted domain list and read as speaking nothing everywhere the
+ *     UI shows languages.
+ *   - Mode. PATCH /v1/agents/:name/mode re-derives the Hello Integration step list when the new
+ *     mode has a different flow, so a crew that self-sets task-runner sees 7/7 instead of 7/16.
+ *     The comment on that code names aimeat_agent_mode_set as the caller it was written for, and
+ *     aimeat_agent_mode_set was the one door that did not have it.
+ *   - Tags. The tool accepted a bare agent name only; the route also accepted a full GAII.
+ *
+ *   The cost of leaving them apart is paid by whoever fixes the next one: three write sites for one
+ *   record, and no way to tell from either which of them is current.
+ * @structure
+ *   - AgentWriteOutcome: a stored record or a refusal code each surface renders its own way
+ *   - normaliseAgentProfile(): the field vocabulary (tags, mode, scopes, name, description)
+ *   - setAgentTags() / setAgentMode(): same-owner gated writes on a named sibling agent
+ *   - setAgentProfile(): several of those fields in one write, for the operator configure tool
+ *   - syncOnboardingFlowToMode(): re-derive the Hello Integration steps after a mode change
+ *   - setAgentCapabilities(): validated capability self-report
+ *   - recordSelfReportedPlatform(): the platform/model stamp written by the identify_platform step
+ * @usage
+ *   const outcome = await setAgentMode({ storage, config }, req.auth!.owner, name, req.body?.mode);
+ *   if (!outcome.ok) return renderRefusal(outcome.code, outcome.message);
+ * @version-history
+ *   v1.2.0 -- 2026-08-11 -- recordSelfReportedPlatform() also sets the mode the reported platform
+ *     implies (workstation), because an agent in the user's own tool cannot pass configure_delivery
+ *     and was left at a checklist that never completes. Only an unchosen mode is overwritten.
+ *   v1.1.0 -- 2026-08-11 -- setAgentProfile() and normaliseAgentProfile(), for the multi-field write
+ *     aimeat_operator_agent_configure was making on its own. That tool wrote tags verbatim where
+ *     this file trims, lowercases, de-duplicates and caps them; it wrote a mode without re-deriving
+ *     the Hello Integration step list; and it accepted an empty scope list, which PATCH
+ *     /v1/agents/:name/scopes refuses. The tag and mode rules are the ones already here; the scope
+ *     and length rules are read from the doors that state them (management.ts and the registration
+ *     schema), so this file is now where an agent record's field vocabulary lives.
+ *   v1.0.0 -- 2026-08-11 -- Extracted from routes/agent-capabilities.ts,
+ *     routes/agents/profile-metadata.ts, mcp/agent-capabilities.ts and mcp/agent-management.ts
+ *     (August 2026 MCP audit, step 8).
+ */
+import type { AimeatConfig } from '../config.js';
+import type { AgentRecord, Storage } from '../storage/interface.js';
+export interface AgentWriteDeps {
+    storage: Storage;
+    config: AimeatConfig;
+}
+/** A refusal carries a code so HTTP can pick a status and a translated message of its own. */
+export interface AgentWriteRefusal {
+    ok: false;
+    code: 'AGENT_NOT_FOUND' | 'ACCESS_DENIED' | 'INVALID_INPUT' | 'UPDATE_FAILED';
+    message: string;
+}
+export type AgentWriteOutcome = {
+    ok: true;
+    agent: AgentRecord;
+} | AgentWriteRefusal;
+/**
+ * Resolve what a caller named into a GAII under the caller's OWN owner. A bare name is built into
+ * a GAII; a full GAII is taken as given and then has to survive the same-owner check below, which
+ * is what stops a caller naming someone else's agent.
+ */
+export declare function resolveAgentTarget(config: AimeatConfig, callerOwner: string, identifier: string): string;
+/** The fields a caller may set on an agent record through this file. Each one arrives unvalidated. */
+export interface AgentProfileFields {
+    displayName?: unknown;
+    description?: unknown;
+    mode?: unknown;
+    tags?: unknown;
+    defaultScopes?: unknown;
+}
+/**
+ * Turn a caller's field bag into the exact record update, or refuse it.
+ *
+ * Separate from the write so a door that proposes a change before applying it can refuse bad input
+ * and show the value it will actually store. Tags come back normalised, which is what makes the
+ * proposal a proposal rather than a guess: `aimeat_operator_agent_configure` shows the owner a diff
+ * and mints a token bound to it, and the token has to bind to the stored form.
+ */
+export declare function normaliseAgentProfile(config: AimeatConfig, fields: AgentProfileFields): {
+    ok: true;
+    updates: Partial<AgentRecord>;
+} | AgentWriteRefusal;
+/** Replace the tag list on a same-owner agent, normalised by the rules in normaliseTags(). */
+export declare function setAgentTags(deps: AgentWriteDeps, callerOwner: string, identifier: string, rawTags: unknown): Promise<AgentWriteOutcome>;
+/**
+ * Set several owner-managed fields of a same-owner agent in one write, with the same vocabulary the
+ * single-field writers use and the same Hello Integration step-list re-derive a mode change owes.
+ *
+ * The caller decides whether the change is ALLOWED (the operator tool's narrow-only rule on scopes
+ * is a privilege question, and it stays where the propose-then-confirm flow can answer it before a
+ * token is minted); this decides whether the values are WELL FORMED and performs the write.
+ */
+export declare function setAgentProfile(deps: AgentWriteDeps, callerOwner: string, identifier: string, fields: AgentProfileFields): Promise<AgentWriteOutcome>;
+/**
+ * Set the operational mode of a same-owner agent, then bring its Hello Integration step list in
+ * line with the mode's flow.
+ *
+ * The step-list sync fires whenever the stored step SET differs from what the mode asks for, so it
+ * also repairs an agent already in the target mode with a stale set, and is a no-op otherwise.
+ * Progress on steps that carry over (same id) is preserved. Best-effort: a sync failure must never
+ * fail the mode change, which is the write the caller asked for.
+ */
+export declare function setAgentMode(deps: AgentWriteDeps, callerOwner: string, identifier: string, rawMode: unknown): Promise<AgentWriteOutcome>;
+/**
+ * Store an agent's capability self-report.
+ *
+ * `liveMcpSession` marks the caller as speaking over an authenticated agent session, which is what
+ * makes an mcp-type capability verified: the connection is the proof. Languages are their own
+ * field, never folded into the domain list.
+ */
+export declare function setAgentCapabilities(deps: AgentWriteDeps, agentGaii: string, input: unknown, opts: {
+    liveMcpSession: boolean;
+}): Promise<AgentWriteOutcome>;
+/**
+ * Stamp the platform (and model) an agent reported about itself during the identify_platform step,
+ * and put the agent in the mode that platform implies.
+ *
+ * Attribution first: platform and model are self-reported, and a platform delegates to subagents on
+ * other models mid-session, so neither is evidence of what ran.
+ *
+ * The mode part is what stops an agent stranding itself. A Claude Desktop / VS Code agent registers
+ * in the default 'interactive' mode and therefore gets the full 13-step Hello Integration, which
+ * includes `configure_delivery` — a step that wants a webhook or a watchdog seen within ten minutes.
+ * A conversation-triggered agent has neither and never will, so its checklist can never complete: it
+ * sits at 9/12 forever while being, in fact, fully connected. That is a real production case (an
+ * external user, August 2026), and the agent's own attempt to fix it made it worse, because it
+ * guessed at the mode vocabulary ("MCP") instead of the value the node accepts.
+ *
+ * The node already knows better than the agent does: `identify_platform` is step two, and the
+ * platform string says whether the agent is node-resident. So the inference happens here, before the
+ * checklist has anything to strand on.
+ *
+ * Only an UNCHOSEN mode is overwritten ('interactive' is the registration default, and undefined is
+ * an older record). A mode someone deliberately set — task-runner, autonomous, coordinator — is left
+ * exactly as it is, and so is an agent already in workstation mode.
+ *
+ * This writes the AGENT RECORD only and returns the mode it moved the agent to. The step list is the
+ * caller's, deliberately: it is confirming a step against an onboarding record it already holds in
+ * memory, and a second writer re-deriving that list underneath would be overwritten by the caller's
+ * own persist a moment later. The caller re-derives with `deriveStepsForMode` and persists once.
+ */
+export declare function recordSelfReportedPlatform(storage: Storage, agentGaii: string, body: Record<string, unknown>): Promise<{
+    modeSetTo?: NonNullable<AgentRecord['mode']>;
+}>;
+//# sourceMappingURL=agent-profile-write.d.ts.map

package/dist/src/services/agent-profile-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-profile-write.d.ts","sourceRoot":"","sources":["../../../src/services/agent-profile-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAA4B,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAS9F,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;CACxB;AAED,8FAA8F;AAC9F,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,iBAAiB,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;IAC9E,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAAG,iBAAiB,CAAC;AAgBrF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAExG;AAuFD,sGAAsG;AACtG,MAAM,WAAW,kBAAkB;IAC/B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;CAAE,GAAG,iBAAiB,CA0CjE;AAED,8FAA8F;AAC9F,wBAAsB,YAAY,CAC9B,IAAI,EAAE,cAAc,EACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACjC,IAAI,EAAE,cAAc,EACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAmB5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAC9B,IAAI,EAAE,cAAc,EACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AA0BD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACtC,IAAI,EAAE,cAAc,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAAC,iBAAiB,CAAC,CA+B5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,0BAA0B,CAC5C,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;CAAE,CAAC,CAmB3D"}