aimeat 2.7.0 → 3.0.0

package/dist/src/services/agent-connect-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-connect-prompt.js","sourceRoot":"","sources":["../../../src/services/agent-connect-prompt.ts"],"names":[],"mappings":"AAwBA,MAAM,IAAI,GAAG,CAAC,CAAU,EAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAU9D;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAoB,EAAE,IAAsB;IAChF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,CAAC,GAAa,EAAE,CAAC;IAEvB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACb,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,4DAA4D,IAAI,qBAAqB,CAAC,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAC1F,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAC1F,CAAC,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;QAChG,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,IAAI;YACP,CAAC,CAAC,gCAAgC,IAAI,8BAA8B;YACpE,CAAC,CAAC,6DAA6D,CAAC,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,6BAA6B,CAAC,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,yBAAyB,IAAI,IAAI,UAAU,gBAAgB,KAAK,KAAK,CAAC,CAAC;QAC9E,CAAC,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QAC/E,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,yBAAyB,CAAC,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;QAChH,CAAC,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QACzF,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,wBAAwB,CAAC,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;QAClG,CAAC,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;QAChG,CAAC,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,CAAC,CAAC,IAAI,CAAC,0DAA0D,IAAI,8BAA8B,CAAC,CAAC;IACrG,CAAC,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IACrG,CAAC,CAAC,IAAI,CAAC,gDAAgD,KAAK,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;IACtG,CAAC,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IAC7F,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,IAAI;QACP,CAAC,CAAC,kCAAkC,IAAI,qBAAqB;QAC7D,CAAC,CAAC,iEAAiE,CAAC,CAAC;IACzE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,6BAA6B,CAAC,CAAC;IACvD,CAAC,CAAC,IAAI,CAAC,yBAAyB,IAAI,IAAI,aAAa,gBAAgB,KAAK,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IACzF,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACxE,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,yBAAyB,CAAC,CAAC;IACnD,CAAC,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;IAChH,CAAC,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAC9F,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IAC/E,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;IACnG,CAAC,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IACjG,CAAC,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACjE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC/C,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,wBAAwB,CAAC,CAAC;IACjD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;IACpG,CAAC,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAC9F,CAAC,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;IAChG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAoB,EAAE,IAAsB;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACb,OAAO;YACH,2EAA2E,IAAI,0DAA0D,IAAI,gBAAgB,IAAI,CAAC,KAAK,MAAM;YAC7K,6EAA6E;YAC7E,kGAAkG;YAClG,yJAAyJ;SAC5J,CAAC;IACN,CAAC;IACD,OAAO;QACH,0CAA0C,IAAI,8DAA8D,IAAI,gBAAgB,IAAI,CAAC,KAAK,MAAM;QAChJ,gEAAgE;QAChE,mGAAmG;QACnG,yJAAyJ;KAC5J,CAAC;AACN,CAAC"}

package/dist/src/services/agent-health.d.ts

@@ -0,0 +1,104 @@
+/**
+ * @file src/services/agent-health.ts
+ * @description The ONE account-level answer to "is this agent OK". Every surface that shows a
+ *   per-agent verdict — the Agents tab, the fleet board, the home — renders this and computes
+ *   nothing of its own.
+ *
+ *   It exists because four places were answering the same question with four different thresholds
+ *   and the home was not answering it at all: the home card read "Connected and at home" off
+ *   `agents.length` while the Agents tab said "problem" about the same agent, and both were shown
+ *   to the same person one click apart.
+ *
+ *   The frontend's copy of the rules had rotted in a way that could not be seen from the frontend.
+ *   Two of its three problem conditions could never fire — `webhookFailCount` was not in the
+ *   /v1/agents response at all, and `previousReadinessLevel` is not a field on any record — so
+ *   "problem" only ever meant "not seen in 24 h", and a genuinely broken push channel showed as
+ *   healthy. Moving the rules here is what makes them checkable.
+ *
+ *   Purpose-specific windows deliberately stay where they are: workflow reachability
+ *   (services/workflow/engine-reachability.ts) asks "can I dispatch this step right now", presence
+ *   asks "is there a live socket", trust decay is longitudinal. Those are different questions.
+ *   This module answers the account-level one, once.
+ * @structure AGENT_ONLINE_WINDOW_MS · AGENT_STALE_MS · AGENT_WEBHOOK_DOWN_THRESHOLD ·
+ *   BUCKET_RANK · computeAgentHealth · computeAgentHealthMany
+ * @usage
+ *   import { computeAgentHealthMany } from '../services/agent-health.js';
+ *   const health = computeAgentHealthMany(agents, onboardingByGaii);
+ * @version-history
+ *   v1.0.0 — 2026-08-09 — Initial (V1: one status vocabulary, both surfaces project it).
+ */
+import type { AgentRecord } from '../storage/types/identity.js';
+import type { AgentOnboardingRecord } from '../storage/types/agents-messaging.js';
+/**
+ * `lastSeen` within this ⇒ reachable now.
+ *
+ * Adopted from services/workflow/engine-reachability.ts rather than invented: it is already the
+ * window used by the workflow engine, the onboarding validator, offers and the public stats. It is
+ * also the only safe choice — the lastSeen write is throttled to 5 minutes (auth/middleware.ts) and
+ * the check-in buffer flushes every 60 s, so a 5-minute window equals the write throttle and a busy
+ * agent oscillates across it. 10 minutes is twice the throttle plus the flush lag.
+ */
+export declare const AGENT_ONLINE_WINDOW_MS: number;
+/**
+ * No `lastSeen` for this long ⇒ not alive. The same 24 h line the node's public "active agents"
+ * count already draws, so the headline number and the per-agent verdict cannot disagree.
+ */
+export declare const AGENT_STALE_MS: number;
+/**
+ * Consecutive delivery failures ⇒ the push channel is down. The server's existing threshold; the
+ * frontend's dead copy said 5, which never fired and disagreed with this one anyway.
+ */
+export declare const AGENT_WEBHOOK_DOWN_THRESHOLD = 10;
+export type AgentHealthState = 'system' | 'new' | 'onboarding' | 'problem' | 'idle' | 'production';
+export type AgentHealthBucket = 'issue' | 'onboarding' | 'online' | 'quiet' | 'internal';
+export type AgentHealthReason = 'onboarding-failed' | 'never-seen' | 'stale-24h' | 'webhook-down';
+export type AgentDeliveryChannel = 'webhook' | 'webhook-failing' | 'polling' | 'none';
+/** Sort order for a fleet view: an issue must never drown in a long list. */
+export declare const BUCKET_RANK: Record<AgentHealthBucket, number>;
+export interface AgentHealth {
+    state: AgentHealthState;
+    bucket: AgentHealthBucket;
+    rank: number;
+    /** Empty unless state === 'problem'. Ordered most-actionable first; drives the red panel's text. */
+    reasons: AgentHealthReason[];
+    last_seen: string | null;
+    /** Null when never seen. Lets a client say "3h ago" without re-deriving staleness. */
+    seconds_since_seen: number | null;
+    delivery: {
+        channel: AgentDeliveryChannel;
+        webhook_configured: boolean;
+        webhook_enabled: boolean;
+        fail_count: number;
+        last_success_at: string | null;
+        last_failure_at: string | null;
+    };
+    onboarding: {
+        status: AgentOnboardingRecord['status'];
+        readiness_level: AgentOnboardingRecord['readinessLevel'] | null;
+    } | null;
+}
+type HealthAgent = Pick<AgentRecord, 'lastSeen' | 'tags' | 'webhookUrl' | 'webhookEnabled' | 'webhookFailCount' | 'webhookLastSuccess' | 'webhookLastFailure'>;
+/**
+ * The account-level verdict for one agent.
+ *
+ * Order matters: the first match wins, and the ordering is what makes the answer actionable rather
+ * than merely true. An agent still onboarding is not "idle"; a broken one is not "quiet".
+ */
+export declare function computeAgentHealth(agent: HealthAgent, onboarding: AgentOnboardingRecord | null, nowMs?: number): AgentHealth;
+/**
+ * Is an agent in this state one the account can actually count on?
+ *
+ * `problem` is not, and neither is a state that no longer exists. The home's "your home is ready"
+ * used to be satisfied by an agent RECORD, so an account whose every agent was dead still read as
+ * ready — a home is not ready on the strength of a row.
+ */
+export declare function isLiveState(state: AgentHealthState): boolean;
+/**
+ * The same verdict for a whole fleet, with ONE `nowMs` for the page — two cards in one response
+ * must not straddle a threshold boundary and disagree about what time it is.
+ */
+export declare function computeAgentHealthMany(agents: Array<HealthAgent & {
+    gaii: string;
+}>, onboardingByGaii: Record<string, AgentOnboardingRecord | null>, nowMs?: number): Record<string, AgentHealth>;
+export {};
+//# sourceMappingURL=agent-health.d.ts.map

package/dist/src/services/agent-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-health.d.ts","sourceRoot":"","sources":["../../../src/services/agent-health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAElF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAsB,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,KAAK,GAAG,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;AACnG,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AACzF,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,CAAC;AAClG,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,MAAM,CAAC;AAEtF,6EAA6E;AAC7E,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CACO,CAAC;AAWlE,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,oGAAoG;IACpG,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sFAAsF;IACtF,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE;QACN,OAAO,EAAE,oBAAoB,CAAC;QAC9B,kBAAkB,EAAE,OAAO,CAAC;QAC5B,eAAe,EAAE,OAAO,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,CAAC;IACF,UAAU,EAAE;QACR,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACxC,eAAe,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;KACnE,GAAG,IAAI,CAAC;CACZ;AAED,KAAK,WAAW,GAAG,IAAI,CAAC,WAAW,EAC/B,UAAU,GAAG,MAAM,GAAG,YAAY,GAAG,gBAAgB,GAAG,kBAAkB,GACxE,oBAAoB,GAAG,oBAAoB,CAAC,CAAC;AAiBnD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,qBAAqB,GAAG,IAAI,EACxC,KAAK,GAAE,MAAmB,GAC3B,WAAW,CAyDb;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAE5D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,MAAM,EAAE,KAAK,CAAC,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC,EAC9D,KAAK,GAAE,MAAmB,GAC3B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAI7B"}

package/dist/src/services/agent-health.js

@@ -0,0 +1,130 @@
+/**
+ * `lastSeen` within this ⇒ reachable now.
+ *
+ * Adopted from services/workflow/engine-reachability.ts rather than invented: it is already the
+ * window used by the workflow engine, the onboarding validator, offers and the public stats. It is
+ * also the only safe choice — the lastSeen write is throttled to 5 minutes (auth/middleware.ts) and
+ * the check-in buffer flushes every 60 s, so a 5-minute window equals the write throttle and a busy
+ * agent oscillates across it. 10 minutes is twice the throttle plus the flush lag.
+ */
+export const AGENT_ONLINE_WINDOW_MS = 10 * 60_000;
+/**
+ * No `lastSeen` for this long ⇒ not alive. The same 24 h line the node's public "active agents"
+ * count already draws, so the headline number and the per-agent verdict cannot disagree.
+ */
+export const AGENT_STALE_MS = 24 * 60 * 60 * 1000;
+/**
+ * Consecutive delivery failures ⇒ the push channel is down. The server's existing threshold; the
+ * frontend's dead copy said 5, which never fired and disagreed with this one anyway.
+ */
+export const AGENT_WEBHOOK_DOWN_THRESHOLD = 10;
+/** Sort order for a fleet view: an issue must never drown in a long list. */
+export const BUCKET_RANK = { issue: 0, onboarding: 1, online: 2, quiet: 3, internal: 4 };
+const BUCKET_OF = {
+    problem: 'issue',
+    new: 'onboarding',
+    onboarding: 'onboarding',
+    production: 'online',
+    idle: 'quiet',
+    system: 'internal',
+};
+/**
+ * An agent the OWNER marked as node machinery (`system`, or `system:secretary` and the like).
+ * Matches the bare tag as well as the prefixed form, because both exist in real data and the
+ * prefix-only test the frontend used made this branch unreachable for the bare one.
+ */
+function isSystemAgent(tags) {
+    return (tags ?? []).some(t => typeof t === 'string' && (t === 'system' || t.startsWith('system:')));
+}
+function msSince(iso, nowMs) {
+    if (!iso)
+        return null;
+    const t = new Date(iso).getTime();
+    return Number.isFinite(t) ? nowMs - t : null;
+}
+/**
+ * The account-level verdict for one agent.
+ *
+ * Order matters: the first match wins, and the ordering is what makes the answer actionable rather
+ * than merely true. An agent still onboarding is not "idle"; a broken one is not "quiet".
+ */
+export function computeAgentHealth(agent, onboarding, nowMs = Date.now()) {
+    const failCount = agent.webhookFailCount ?? 0;
+    const webhookConfigured = !!agent.webhookUrl;
+    const webhookEnabled = !!(agent.webhookEnabled && agent.webhookUrl);
+    const webhookHealthy = webhookEnabled && failCount < AGENT_WEBHOOK_DOWN_THRESHOLD;
+    const sinceMs = msSince(agent.lastSeen, nowMs);
+    const neverSeen = sinceMs === null;
+    const stale = neverSeen || sinceMs > AGENT_STALE_MS;
+    const seenRecently = sinceMs !== null && sinceMs <= AGENT_ONLINE_WINDOW_MS;
+    const channel = webhookEnabled
+        ? (webhookHealthy ? 'webhook' : 'webhook-failing')
+        : (agent.lastSeen ? 'polling' : 'none');
+    const delivery = {
+        channel,
+        webhook_configured: webhookConfigured,
+        webhook_enabled: webhookEnabled,
+        fail_count: failCount,
+        last_success_at: agent.webhookLastSuccess ?? null,
+        last_failure_at: agent.webhookLastFailure ?? null,
+    };
+    const onboardingOut = onboarding
+        ? { status: onboarding.status, readiness_level: onboarding.readinessLevel ?? null }
+        : null;
+    const base = {
+        reasons: [],
+        last_seen: agent.lastSeen ?? null,
+        seconds_since_seen: sinceMs === null ? null : Math.max(0, Math.round(sinceMs / 1000)),
+        delivery,
+        onboarding: onboardingOut,
+    };
+    const verdict = (state, reasons = []) => ({ ...base, state, bucket: BUCKET_OF[state], rank: BUCKET_RANK[BUCKET_OF[state]], reasons });
+    if (isSystemAgent(agent.tags))
+        return verdict('system');
+    if (!onboarding || onboarding.status === 'pending')
+        return verdict('new');
+    if (onboarding.status === 'in_progress')
+        return verdict('onboarding');
+    // Onboarding is behind it, so the agent is expected to be working. Everything below is about
+    // whether it actually is.
+    const reasons = [];
+    if (onboarding.status === 'failed')
+        reasons.push('onboarding-failed');
+    if (neverSeen)
+        reasons.push('never-seen');
+    else if (stale)
+        reasons.push('stale-24h');
+    // Reported even when it is not the deciding fault: a failing push channel is worth showing
+    // next to an otherwise-alive agent, since the owner is the only one who can fix the endpoint.
+    if (webhookEnabled && failCount >= AGENT_WEBHOOK_DOWN_THRESHOLD)
+        reasons.push('webhook-down');
+    if (reasons.length > 0)
+        return verdict('problem', reasons);
+    // A push agent that never polls is still working. The frontend never knew this, so an agent
+    // delivered to by webhook read as idle forever. Staleness above is unconditional, though: a
+    // configured webhook with no traffic keeps failCount at 0, so it cannot prove liveness.
+    if (seenRecently || webhookHealthy)
+        return verdict('production');
+    return verdict('idle');
+}
+/**
+ * Is an agent in this state one the account can actually count on?
+ *
+ * `problem` is not, and neither is a state that no longer exists. The home's "your home is ready"
+ * used to be satisfied by an agent RECORD, so an account whose every agent was dead still read as
+ * ready — a home is not ready on the strength of a row.
+ */
+export function isLiveState(state) {
+    return state === 'production' || state === 'idle' || state === 'onboarding' || state === 'new';
+}
+/**
+ * The same verdict for a whole fleet, with ONE `nowMs` for the page — two cards in one response
+ * must not straddle a threshold boundary and disagree about what time it is.
+ */
+export function computeAgentHealthMany(agents, onboardingByGaii, nowMs = Date.now()) {
+    const out = {};
+    for (const a of agents)
+        out[a.gaii] = computeAgentHealth(a, onboardingByGaii[a.gaii] ?? null, nowMs);
+    return out;
+}
+//# sourceMappingURL=agent-health.js.map

package/dist/src/services/agent-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-health.js","sourceRoot":"","sources":["../../../src/services/agent-health.ts"],"names":[],"mappings":"AAgCA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAO/C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GACpB,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAElE,MAAM,SAAS,GAAgD;IAC3D,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,YAAY;IACjB,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,UAAU;CACrB,CAAC;AA6BF;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAA0B;IAC7C,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,OAAO,CAAC,GAAuB,EAAE,KAAa;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAC9B,KAAkB,EAClB,UAAwC,EACxC,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,cAAc,IAAI,SAAS,GAAG,4BAA4B,CAAC;IAElF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,KAAK,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,GAAG,cAAc,CAAC;IACpD,MAAM,YAAY,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,sBAAsB,CAAC;IAE3E,MAAM,OAAO,GAAyB,cAAc;QAChD,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAClD,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG;QACb,OAAO;QACP,kBAAkB,EAAE,iBAAiB;QACrC,eAAe,EAAE,cAAc;QAC/B,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACjD,eAAe,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;KACpD,CAAC;IACF,MAAM,aAAa,GAAG,UAAU;QAC5B,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,cAAc,IAAI,IAAI,EAAE;QACnF,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,IAAI,GAAG;QACT,OAAO,EAAE,EAAyB;QAClC,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QACjC,kBAAkB,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACrF,QAAQ;QACR,UAAU,EAAE,aAAa;KAC5B,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,KAAuB,EAAE,UAA+B,EAAE,EAAe,EAAE,CACxF,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAEjG,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtE,6FAA6F;IAC7F,0BAA0B;IAC1B,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtE,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SACrC,IAAI,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,2FAA2F;IAC3F,8FAA8F;IAC9F,IAAI,cAAc,IAAI,SAAS,IAAI,4BAA4B;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE3D,4FAA4F;IAC5F,4FAA4F;IAC5F,wFAAwF;IACxF,IAAI,YAAY,IAAI,cAAc;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IAC/C,OAAO,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,KAAK,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAClC,MAA6C,EAC7C,gBAA8D,EAC9D,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IACrG,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/src/services/agent-message-send.d.ts

@@ -0,0 +1,52 @@
+import type { AimeatConfig } from '../config.js';
+import type { Storage, AgentMessageRecord } from '../storage/interface.js';
+import { type DeclaredProvenance } from './ai-provenance.js';
+import type { createWebhookDispatcher } from './webhook-dispatcher.js';
+export interface AgentMessageSendDeps {
+    storage: Storage;
+    config: AimeatConfig;
+    /** Webhook fan-out for `message.inbound`. Absent on a door that has no dispatcher wired. */
+    webhooks?: ReturnType<typeof createWebhookDispatcher>;
+    /**
+     * The MCP resource-updated transport (`emitResourceUpdated` from mcp/index.ts). Injected rather
+     * than imported because mcp/index.ts imports the tool file that calls this service, and a service
+     * that imports back into that module puts the two in a cycle. WHICH uri and WHEN are decided here,
+     * so the transport is the only part a caller supplies.
+     */
+    emitResourceUpdated?: (agentGaii: string, uri: string) => void;
+}
+export interface AgentMessageSendInput {
+    /** Whose message log this lands in. The surface has already checked the caller may write to it. */
+    agentGaii: string;
+    /**
+     * The RESOLVED identity of the writer: the owner's GHII for an owner session, the agent's own GAII
+     * for an agent one. Never a client-supplied id, and never a raw `req.auth!.sub` for an owner.
+     */
+    senderGaii: string;
+    /** The wire body (snake_case), validated here against AgentMessageCreateSchema. */
+    body: unknown;
+    /** Which door the write came through, recorded as the provenance record's `generator.pipeline`. */
+    pipeline: string;
+    /** A provenance record the caller asked to attach. Checked against the caller's own account. */
+    declaredProvenanceId?: string;
+    /** What the caller stated about how the content was made. */
+    declaredProvenance?: DeclaredProvenance;
+}
+export type AgentMessageSendResult = {
+    ok: true;
+    message: AgentMessageRecord;
+} | {
+    ok: false;
+    status: 400;
+    code: 'INVALID_INPUT';
+    message: string;
+};
+/**
+ * Create one agent message and fire what follows from it.
+ *
+ * Throws only what the provenance layer throws: a ProvenanceScopeError when a caller declares
+ * provenance without holding `provenance:write`. That refusal is deliberate — a caller told its
+ * declaration was accepted while the node recorded something else has been lied to by its own call.
+ */
+export declare function sendAgentMessage(deps: AgentMessageSendDeps, input: AgentMessageSendInput): Promise<AgentMessageSendResult>;
+//# sourceMappingURL=agent-message-send.d.ts.map

package/dist/src/services/agent-message-send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-message-send.d.ts","sourceRoot":"","sources":["../../../src/services/agent-message-send.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGvE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACtD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,qBAAqB;IACpC,mGAAmG;IACnG,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,IAAI,EAAE,OAAO,CAAC;IACd,mGAAmG;IACnG,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC,CA8FjC"}

package/dist/src/services/agent-message-send.js

@@ -0,0 +1,142 @@
+/**
+ * @file agent-message-send.ts
+ * @description THE write path for one agent-dashboard message — the agent↔owner chat the Messages
+ *   subtab renders. Two doors reach it: POST /v1/agents/:name/messages and the MCP tool
+ *   aimeat_message_send. Until this file existed each door built the record for itself, and the two
+ *   copies had drifted in four ways:
+ *     - the tool stamped `processedAt` at creation, the route left it unset (it is set by the status
+ *       PATCH, which is what the field means);
+ *     - the tool broadcast its live-update event to every connected owner, the route scoped it to
+ *       the writer, so an agent sending over MCP woke every other owner's UI;
+ *     - the tool notified the MCP resource URI `aimeat://messages/{thread}`, which no resource
+ *       template serves, while the route and the task-lifecycle path both use
+ *       `aimeat://agents/{name}/messages`;
+ *     - the tool's metadata mapping never grew the option-prompt fields the route has carried since
+ *       May, so a record written through MCP could not answer a question the UI had asked.
+ *   That is what a second copy costs: a fix lands on one door and the other keeps the old behaviour.
+ *   The same defect was fixed three separate times inside aimeat_memory_write before anyone noticed
+ *   the two surfaces were different programs.
+ *
+ *   WHAT STAYS AT THE DOOR. Identity resolution, the access check and the "does this agent exist"
+ *   404 belong to the surface — each has its own answer to give and its own way of saying it. So
+ *   does rendering: this returns a refusal or the stored record and never touches an Express
+ *   response.
+ * @structure
+ *   - AgentMessageSendDeps   — storage + config, plus the two push transports (webhook, MCP resource)
+ *   - AgentMessageSendInput  — who is writing, into whose log, and the wire body
+ *   - AgentMessageSendResult — a refusal or the stored record
+ *   - sendAgentMessage()     — validate → build → mint provenance → store → side effects
+ * @usage
+ *   import { sendAgentMessage } from '../services/agent-message-send.js';
+ *   const result = await sendAgentMessage(
+ *     { storage, config, webhooks: webhookDispatcher, emitResourceUpdated },
+ *     { agentGaii, senderGaii, body: req.body, pipeline: 'rest.agent_message_send' });
+ *   if (!result.ok) { res.status(result.status).json(error(config.nodeId, result.code, result.message)); return; }
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Extracted from routes/agent-messages.ts and mcp/agent-messages.ts (August
+ *     2026 MCP audit, step 8). Where the two copies disagreed the route's behaviour is the one kept:
+ *     it is the copy with tests and users.
+ */
+import { randomUUID } from 'node:crypto';
+import { AgentMessageCreateSchema } from '../models/agent-message-schemas.js';
+import { provenanceForWrite } from './ai-provenance.js';
+import { emitChange } from './event-bus.js';
+import { parseGaiiLoose } from '../utils/gaii.js';
+import { logger } from '../utils/logger.js';
+/**
+ * Create one agent message and fire what follows from it.
+ *
+ * Throws only what the provenance layer throws: a ProvenanceScopeError when a caller declares
+ * provenance without holding `provenance:write`. That refusal is deliberate — a caller told its
+ * declaration was accepted while the node recorded something else has been lied to by its own call.
+ */
+export async function sendAgentMessage(deps, input) {
+    const { storage, config } = deps;
+    const parsed = AgentMessageCreateSchema.safeParse(input.body);
+    if (!parsed.success) {
+        return {
+            ok: false,
+            status: 400,
+            code: 'INVALID_INPUT',
+            message: parsed.error.issues.map(i => `${i.path.join('.')}: ${i.message}`).join('; '),
+        };
+    }
+    const body = parsed.data;
+    const now = new Date().toISOString();
+    // Thread = task: a message linked to a task with no explicit thread joins the task's thread, so a
+    // task's whole conversation (the agent's clarifications, the owner's answers) stays in ONE thread
+    // instead of spawning a fresh random one per message. A random thread is for ad-hoc, task-less chat.
+    const threadId = body.thread_id ?? body.linked_task_id ?? randomUUID();
+    const record = {
+        id: randomUUID(),
+        agentGaii: input.agentGaii,
+        threadId,
+        direction: body.direction,
+        senderGaii: input.senderGaii,
+        content: body.content,
+        // The owner writes inbound (user → agent), which waits in the agent's inbox until it is picked
+        // up; the agent writes outbound (agent → user), which is already in front of its reader.
+        status: body.direction === 'inbound' ? 'pending' : 'delivered',
+        linkedTaskId: body.linked_task_id,
+        metadata: body.metadata ? {
+            tokensUsed: body.metadata.tokens_used,
+            processingMs: body.metadata.processing_ms,
+            proposedTask: body.metadata.proposed_task,
+            prompt: body.metadata.prompt ? {
+                promptId: body.metadata.prompt.prompt_id,
+                question: body.metadata.prompt.question,
+                options: body.metadata.prompt.options,
+                allowOther: body.metadata.prompt.allow_other,
+            } : undefined,
+            promptAnswer: body.metadata.prompt_answer ? {
+                promptId: body.metadata.prompt_answer.prompt_id,
+                choice: body.metadata.prompt_answer.choice,
+                isOther: body.metadata.prompt_answer.is_other,
+            } : undefined,
+        } : undefined,
+        createdAt: now,
+        // TARGET-058. This message is delivered to a named person, which is what decides whether a label
+        // is owed — not whether the world can read it. The record describes `content`; `metadata` is
+        // machine plumbing (token counts, a proposed task) and stays outside the hash. An OWNER writing
+        // here is not stamped as model-written: provenanceForWrite decides that from the principal, which
+        // is why the call is unconditional and carries no direction test.
+        aiProvenanceId: await provenanceForWrite(storage, {
+            principal: input.senderGaii,
+            content: body.content,
+            declaredId: input.declaredProvenanceId,
+            declared: input.declaredProvenance,
+            pipeline: input.pipeline,
+            surface: { visibility: 'private', humanAudience: true },
+            labelPolicy: config.aiLabelPublic,
+            nodeId: config.nodeId,
+            baseUrl: config.baseUrl,
+            enabled: config.aiProvenance,
+        }),
+    };
+    const created = await storage.createMessage(record);
+    // Push, for the direction that has someone waiting: an inbound message is one the agent has not
+    // seen yet. An agent's own outbound message needs no wake-up — it is holding the pen.
+    if (created.direction === 'inbound') {
+        deps.webhooks?.dispatchWebhookEvent(created.agentGaii, 'message.inbound', {
+            message_id: created.id,
+            thread_id: created.threadId,
+            linked_task_id: created.linkedTaskId ?? null,
+            preview: created.content.substring(0, 200),
+            has_proposed_task: !!(created.metadata?.proposedTask),
+            has_prompt_answer: !!(created.metadata?.promptAnswer),
+            created_at: created.createdAt,
+        });
+        const agentName = parseGaiiLoose(created.agentGaii).agent;
+        try {
+            deps.emitResourceUpdated?.(created.agentGaii, `aimeat://agents/${agentName}/messages`);
+        }
+        catch (err) {
+            logger.warn('sendAgentMessage: MCP not connected', { error: String(err) });
+        }
+    }
+    // Owner-scoped: the SSE transport compares the owner segment, so this reaches the writer's own UI
+    // and no one else's. An unscoped emit here used to wake every connected owner on the node.
+    emitChange('agent-messages', created.agentGaii);
+    return { ok: true, message: created };
+}
+//# sourceMappingURL=agent-message-send.js.map

package/dist/src/services/agent-message-send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-message-send.js","sourceRoot":"","sources":["../../../src/services/agent-message-send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAA2B,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAsC5C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA0B,EAC1B,KAA4B;IAE5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACtF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,kGAAkG;IAClG,kGAAkG;IAClG,qGAAqG;IACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,IAAI,UAAU,EAAE,CAAC;IAEvE,MAAM,MAAM,GAAuB;QACjC,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,+FAA+F;QAC/F,yFAAyF;QACzF,MAAM,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;QAC9D,YAAY,EAAE,IAAI,CAAC,cAAc;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACrC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YACzC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBACvC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBACrC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;aAC7C,CAAC,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS;gBAC/C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM;gBAC1C,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ;aAC9C,CAAC,CAAC,CAAC,SAAS;SACd,CAAC,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,GAAG;QACd,iGAAiG;QACjG,6FAA6F;QAC7F,gGAAgG;QAChG,kGAAkG;QAClG,kEAAkE;QAClE,cAAc,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE;YAChD,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,KAAK,CAAC,oBAAoB;YACtC,QAAQ,EAAE,KAAK,CAAC,kBAAkB;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE;YACvD,WAAW,EAAE,MAAM,CAAC,aAAa;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,YAAY;SAC7B,CAAC;KACH,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAEpD,gGAAgG;IAChG,sFAAsF;IACtF,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE;YACxE,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,cAAc,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;YAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1C,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC;YACrD,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC;YACrD,UAAU,EAAE,OAAO,CAAC,SAAS;SAC9B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,SAAS,WAAW,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,kGAAkG;IAClG,2FAA2F;IAC3F,UAAU,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC"}

package/dist/src/services/agent-offers-write.d.ts

@@ -0,0 +1,108 @@
+/**
+ * @file src/services/agent-offers-write.ts
+ * @description Publishing one agent's offers document (`agents.{name}.offers`) — the record the
+ *   profile Offers surface, the owner's "Do" feed, the mesh delegate picker and the EXCHANGE
+ *   projection all read.
+ *
+ *   WHY THIS FILE EXISTS. Two surfaces published that record and each carried its own copy of the
+ *   same six steps: resolve the named agent under the caller's own owner, refuse a foreign one,
+ *   validate the WHOLE document, bump the document version, store the record, and tell the node.
+ *   PUT /v1/agents/:name/offers (routes/agents/offers.ts) and `aimeat_offer_price_set`
+ *   (mcp/commerce.ts) agreed on the shape and had drifted on the part that costs most: both wrote
+ *   with storage.setMemory, so neither answered to the rules the same record answers to when a
+ *   person edits it through /v1/memory. No schema lock, no 1024 kB value ceiling, no key ceiling,
+ *   no byte quota, no archive guard, and none of the fan-out a write sets off — a Tracked Response
+ *   watching the key never evaluated, an event-triggered workflow never started, a federated peer
+ *   waited for the next scheduled sync. An offers document is a memory record, and going through
+ *   services/memory-write.ts is what makes it behave like one on whichever door it arrived at.
+ *
+ *   WHAT IS SHARED AND WHAT IS NOT. Shared here: target resolution, the same-owner refusal, the
+ *   OffersDocSchema validation of the whole document, the version bump, the write and the change
+ *   event. Not shared, because it belongs to one door: how each parses its input, what it does to
+ *   the offers before publishing (the MCP tool patches one offer's price, the REST route replaces
+ *   the list), and how a refusal is rendered.
+ * @structure
+ *   - OffersWriteDeps / OffersWriteCaller / OffersWriteResult — the contract
+ *   - offersKeyFor() — the memory key, in one place
+ *   - loadAgentOffers() — resolve and read, for a door that patches rather than replaces
+ *   - publishAgentOffers() — validate the whole document and store it
+ * @usage
+ *   const out = await publishAgentOffers({ storage, config }, caller, 'trader', offers);
+ *   if (!out.ok) return renderRefusal(out);   // each door renders its own answer
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Extracted from mcp/commerce.ts (August 2026 MCP audit, step 8). The REST
+ *     route routes/agents/offers.ts still holds the second copy of the same sequence; pointing it
+ *     here is a one-line change that belongs to whoever owns that file.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { MemoryRecord, Storage } from '../storage/interface.js';
+import { type Offer } from '../models/offer-schemas.js';
+import { type MemoryWriteResult } from './memory-write.js';
+export interface OffersWriteDeps {
+    storage: Storage;
+    config: AimeatConfig;
+}
+/** Who is publishing, in the terms every surface can supply. */
+export interface OffersWriteCaller {
+    /** The principal that wrote this. Provenance names it, never the namespace it lands in. */
+    principal: string;
+    /** The bare owner name behind the session. A named agent has to belong to it. */
+    owner: string;
+    scopes: string[];
+    roles: string[];
+    /** Which road this came down, for the provenance record: 'mcp.offer_price_set', 'rest.offers'… */
+    pipeline: string;
+    /**
+     * The permission that authorises this publish when it is not `memory:write`. An offers document
+     * is a memory record underneath, but the door in front of it has its own word: the MCP pricing
+     * tool is granted `commerce:sell` and was never asked to hold a memory permission.
+     */
+    authorisingScope?: string;
+}
+/** The refusals services/memory-write.ts can return, so callers can switch on one set of codes. */
+type MemoryWriteRefusal = Extract<MemoryWriteResult, {
+    ok: false;
+}>;
+export interface OffersWriteRefusal {
+    ok: false;
+    status: number;
+    code: 'AGENT_NOT_FOUND' | 'ACCESS_DENIED' | 'INVALID_OFFERS' | MemoryWriteRefusal['code'];
+    message: string;
+    details?: unknown;
+}
+export type OffersWriteResult = {
+    ok: true;
+    agentName: string;
+    agentGaii: string;
+    /** The DOCUMENT's own version counter, which is not the memory record's. */
+    docVersion: number;
+    offers: Offer[];
+    record: MemoryRecord;
+} | OffersWriteRefusal;
+export type OffersReadResult = {
+    ok: true;
+    agentName: string;
+    agentGaii: string;
+    docVersion: number;
+    offers: Offer[];
+} | OffersWriteRefusal;
+/** The memory key an agent's offers live under. */
+export declare function offersKeyFor(agentName: string): string;
+/**
+ * Read one of the caller's own agents' offers, with the same target resolution the publish uses.
+ *
+ * A door that changes one offer needs the current list before it can write the whole document back,
+ * and resolving the agent twice by hand is how the two copies came to disagree about what a bare
+ * name means.
+ */
+export declare function loadAgentOffers(deps: OffersWriteDeps, callerOwner: string, identifier: string): Promise<OffersReadResult>;
+/**
+ * Publish the offers document for one of the caller's own agents.
+ *
+ * The WHOLE document validates, not the entry that changed: a door that patches a single offer would
+ * otherwise store a list it never checked. The document version counts publishes and carries on from
+ * whatever is stored, so a reader can tell one edition from the next.
+ */
+export declare function publishAgentOffers(deps: OffersWriteDeps, caller: OffersWriteCaller, identifier: string, offers: unknown): Promise<OffersWriteResult>;
+export {};
+//# sourceMappingURL=agent-offers-write.d.ts.map

package/dist/src/services/agent-offers-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-offers-write.d.ts","sourceRoot":"","sources":["../../../src/services/agent-offers-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAErE,OAAO,EAAmB,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG9E,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAC9B,2FAA2F;IAC3F,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kGAAkG;IAClG,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,mGAAmG;AACnG,KAAK,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACvB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;CACxB,GACC,kBAAkB,CAAC;AAEzB,MAAM,MAAM,gBAAgB,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,EAAE,CAAA;CAAE,GACvF,kBAAkB,CAAC;AAEzB,mDAAmD;AACnD,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAuBD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACjC,IAAI,EAAE,eAAe,EACrB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAY3B;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACpC,IAAI,EAAE,eAAe,EACrB,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,OAAO,GAChB,OAAO,CAAC,iBAAiB,CAAC,CA+C5B"}