aimeat 2.7.0 → 3.0.0

package/dist/src/services/inactivity-nudge.js

@@ -0,0 +1,207 @@
+import { getActiveEmailService } from './email.js';
+import { outboundEmailHtml } from './email-templates.js';
+import { ONBOARDING_KEYS } from './onboarding-funnel.js';
+import { buildWelcomeMatPrompt } from './welcome-mat-prompt.js';
+import { logger } from '../utils/logger.js';
+/** How long a silence has to last before it is worth a message. */
+export const INACTIVITY_DAYS = 14;
+/**
+ * And how long before the same person may be nudged again. Without it a nightly job mails whoever
+ * is still quiet every single night — the single most likely way this feature turns into spam.
+ */
+export const NUDGE_COOLDOWN_DAYS = 60;
+/**
+ * Accounts that went quiet BEFORE this shipped are left alone. Someone who drifted away months ago
+ * getting "we have not seen you in a while" reads as a system that has been watching, not helping
+ * — the same reasoning the onboarding rescue states for its own epoch.
+ */
+export const NUDGE_FEATURE_EPOCH = '2026-08-07T00:00:00Z';
+const DAY_MS = 24 * 3600 * 1000;
+/** Largest of a set of ISO timestamps, as epoch millis; 0 when none parse. */
+function maxTime(...values) {
+    let best = 0;
+    for (const v of values) {
+        if (!v)
+            continue;
+        const t = Date.parse(v);
+        if (Number.isFinite(t) && t > best)
+            best = t;
+    }
+    return best;
+}
+/**
+ * When this person was last demonstrably alive, from signals the node already keeps:
+ *   - a browser session's `lastUsedAt`, bumped on every refresh-token rotation,
+ *   - a chat instance's `lastSeen`, bumped on every MCP call their AI makes,
+ *   - `lastLoginAt`, which alone is far too coarse: with a 30-day idle refresh window a daily user
+ *     can carry a month-old value, so it is the floor rather than the answer.
+ * Returns 0 when nothing is known, which the caller treats as "cannot tell" rather than "gone".
+ */
+export async function lastSeenAt(storage, g) {
+    let best = maxTime(g.lastLoginAt, g.createdAt);
+    try {
+        const sessions = await storage.listActiveSessions(g.ownerName);
+        best = Math.max(best, maxTime(...sessions.map(s => s.lastUsedAt)));
+    }
+    catch (err) {
+        logger.warn('inactivity-nudge: session read failed', { owner: g.ownerName, error: String(err) });
+    }
+    try {
+        const instances = await storage.listChatInstances({ ownerName: g.ownerName });
+        best = Math.max(best, maxTime(...instances.map(i => i.lastSeen)));
+    }
+    catch (err) {
+        logger.warn('inactivity-nudge: chat instance read failed', { owner: g.ownerName, error: String(err) });
+    }
+    return best;
+}
+/**
+ * May the node send this person a non-transactional email?
+ *
+ * Reads `settings.email_notifications`, the key the profile's notification tab has been writing
+ * all along.
+ *
+ * `defaultWhenAbsent` exists because the two callers genuinely differ, and getting it wrong is
+ * visible to the user either way:
+ *
+ *   - The NUDGE passes **false**. The toggle in the profile renders unchecked when nothing is
+ *     stored, so somebody who looks at it sees "off". Sending anyway would make the switch a lie
+ *     in exactly the way this work set out to fix.
+ *   - The onboarding RESCUE passes **true**, preserving what it does today. Flipping it would
+ *     silently switch off a working feature for every account that has never opened the tab, which
+ *     is not a change to make as a side effect.
+ */
+export async function mayEmailOwner(storage, ghii, defaultWhenAbsent = false) {
+    try {
+        const rec = await storage.getMemory(ghii, 'settings.email_notifications');
+        if (!rec)
+            return defaultWhenAbsent;
+        const v = rec.value;
+        if (typeof v === 'boolean')
+            return v;
+        if (v && typeof v === 'object' && typeof v.enabled === 'boolean')
+            return v.enabled;
+        return defaultWhenAbsent;
+    }
+    catch (err) {
+        // A read failure must not become a send: silence is recoverable, an unwanted email is not.
+        logger.warn('inactivity-nudge: consent read failed', { ghii, error: String(err) });
+        return false;
+    }
+}
+/**
+ * The words. Short, not disappointed in anyone, and the prompt is IN the message — the point is
+ * that reading the email and doing the thing are the same action.
+ */
+export function nudgeEmailContent(config, locale, displayName) {
+    const url = config.baseUrl;
+    if (locale === 'fi') {
+        return {
+            subject: 'Kotisi odottaa sinua',
+            heading: `Hei ${displayName}`,
+            paragraphs: [
+                'Emme ole nähneet sinua vähään aikaan, eikä siinä ole mitään vikaa. Kotisi on yhä pystyssä ja kaikki mitä teit on tallessa.',
+                'Jos haluat tehdä jotain pienen hetken aikana, alla on kehote jonka voit kopioida omaan tekoälykeskusteluusi sellaisenaan. Se päivittää tervetulomattosi eli sen sivun jonka muut näkevät sinusta.',
+            ],
+            closing: `Kotisi on osoitteessa ${url}/v1/home`,
+        };
+    }
+    return {
+        subject: 'Your home is still here',
+        heading: `Hello ${displayName}`,
+        paragraphs: [
+            'We have not seen you in a while, and that is entirely fine. Your home is still up and everything you made is where you left it.',
+            'If you have a few minutes, the prompt below can be copied straight into your own AI chat. It refreshes your welcome mat — the page other people see when they look you up.',
+        ],
+        closing: `Your home is at ${url}/v1/home`,
+    };
+}
+/**
+ * The nightly pass. One email per quiet account, at most once every cooldown.
+ *
+ * Order matters and is the same order the rescue uses, for the same reason: eligibility, then
+ * CONSENT, then send, then marker. Writing the marker before the consent check would mean someone
+ * who later turns notifications back on is never reached again.
+ */
+export async function runInactivityNudgeJob(config, storage, 
+/** Test seam: freeze the clock and the epoch. Production callers pass nothing. */
+opts = {}) {
+    if (!config.inactivityNudge)
+        return { sent: 0, considered: 0 };
+    const email = getActiveEmailService();
+    if (!email || !email.enabled)
+        return { sent: 0, considered: 0 };
+    const now = opts.now ?? Date.now();
+    const epoch = opts.epoch ?? Date.parse(NUDGE_FEATURE_EPOCH);
+    const ghiis = await storage.listGHIIs();
+    let sent = 0;
+    let considered = 0;
+    for (const g of ghiis) {
+        // Verified email only: an unverified notificationEmail can be somebody else's address.
+        if (!g.notificationEmail || g.verificationLevel < 1)
+            continue;
+        if (g.username.startsWith('uxtest-'))
+            continue; // measurement accounts stay out of this
+        const seen = await lastSeenAt(storage, g);
+        if (!seen)
+            continue; // nothing known: not evidence of absence
+        // Epoch compared on the SILENCE, not on account age: an old account that went quiet
+        // yesterday is exactly who this is for; one that went quiet last spring is not.
+        if (seen < epoch)
+            continue;
+        // Compare epoch millis, never formatted dates — core jobs run in server-local time and a
+        // calendar-date comparison in a nightly job is how a pipeline goes quietly dead.
+        if (now - seen < INACTIVITY_DAYS * DAY_MS)
+            continue;
+        considered++;
+        const marker = await storage.getMemory(g.ghii, ONBOARDING_KEYS.inactivityNudge);
+        const prev = marker?.value?.sentAt;
+        const prevAt = prev ? Date.parse(prev) : 0;
+        if (prevAt && now - prevAt < NUDGE_COOLDOWN_DAYS * DAY_MS)
+            continue;
+        if (!await mayEmailOwner(storage, g.ghii))
+            continue;
+        const locale = g.locale === 'fi' ? 'fi' : 'en';
+        const c = nudgeEmailContent(config, locale, g.displayName || g.username);
+        const prompt = buildWelcomeMatPrompt(config, {
+            lang: locale, variant: 'short', displayName: g.displayName || g.username,
+        });
+        const bodyHtml = c.paragraphs.map(p => `<p>${escapeHtml(p)}</p>`).join('')
+            + `<pre style="white-space:pre-wrap;font-family:ui-monospace,Menlo,Consolas,monospace;font-size:13px;line-height:1.5;background:#f6f6f4;border:1px solid #e2e2de;border-radius:8px;padding:14px">${escapeHtml(prompt)}</pre>`
+            + `<p>${escapeHtml(c.closing)}</p>`;
+        const textBody = [...c.paragraphs, '', prompt, '', c.closing].join('\n');
+        const { html, text } = outboundEmailHtml(c.heading, bodyHtml, textBody, locale);
+        const ok = await email.sendRaw(g.notificationEmail, c.subject, html, text).catch(err => {
+            logger.warn('inactivity-nudge: send failed', { owner: g.ownerName, error: String(err) });
+            return false;
+        });
+        // Recorded even when delivery failed, and OVERWRITING the previous marker rather than
+        // writing once: this is a repeatable event, and the cooldown is measured from the last
+        // attempt. A bouncing address must not be retried nightly.
+        const at = new Date(now).toISOString();
+        const history = marker?.value?.count ?? 0;
+        await storage.setMemory({
+            key: ONBOARDING_KEYS.inactivityNudge,
+            ownerGaii: g.ghii,
+            value: { sentAt: at, delivered: ok, count: history + 1, quietSince: new Date(seen).toISOString() },
+            visibility: 'private',
+            tags: ['onboarding-funnel'],
+            ttlHours: null,
+            version: 1,
+            createdAt: marker?.createdAt ?? at,
+            updatedAt: at,
+        });
+        if (ok)
+            sent++;
+    }
+    // Core job successes are not written to the execution log — only errors are. Without this line
+    // a nightly mailer leaves no trace of what it did.
+    if (considered > 0)
+        logger.info(`Inactivity nudge: ${sent} sent of ${considered} quiet account(s)`);
+    return { sent, considered };
+}
+/** Minimal escaping for values interpolated into the email HTML. */
+function escapeHtml(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+//# sourceMappingURL=inactivity-nudge.js.map

package/dist/src/services/inactivity-nudge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inactivity-nudge.js","sourceRoot":"","sources":["../../../src/services/inactivity-nudge.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhC,8EAA8E;AAC9E,SAAS,OAAO,CAAC,GAAG,MAAwC;IACxD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI;YAAE,IAAI,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,CAAa;IAC5D,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9E,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,OAAgB,EAAE,IAAY,EAAE,iBAAiB,GAAG,KAAK;IAEzD,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG;YAAE,OAAO,iBAAiB,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAoD,CAAC;QACnE,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACnF,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,2FAA2F;QAC3F,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,MAAmB,EAAE,WAAmB;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACH,OAAO,EAAE,sBAAsB;YAC/B,OAAO,EAAE,OAAO,WAAW,EAAE;YAC7B,UAAU,EAAE;gBACR,4HAA4H;gBAC5H,mMAAmM;aACtM;YACD,OAAO,EAAE,yBAAyB,GAAG,UAAU;SAClD,CAAC;IACN,CAAC;IACD,OAAO;QACH,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,SAAS,WAAW,EAAE;QAC/B,UAAU,EAAE;YACR,iIAAiI;YACjI,4KAA4K;SAC/K;QACD,OAAO,EAAE,mBAAmB,GAAG,UAAU;KAC5C,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,MAAoB,EACpB,OAAgB;AAChB,kFAAkF;AAClF,OAAyC,EAAE;IAE3C,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAEhE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,uFAAuF;QACvF,IAAI,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC;YAAE,SAAS;QAC9D,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS,CAAG,wCAAwC;QAE1F,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,SAAS,CAA8B,yCAAyC;QAC3F,oFAAoF;QACpF,gFAAgF;QAChF,IAAI,IAAI,GAAG,KAAK;YAAE,SAAS;QAC3B,yFAAyF;QACzF,iFAAiF;QACjF,IAAI,GAAG,GAAG,IAAI,GAAG,eAAe,GAAG,MAAM;YAAE,SAAS;QACpD,UAAU,EAAE,CAAC;QAEb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;QAChF,MAAM,IAAI,GAAI,MAAM,EAAE,KAAyC,EAAE,MAAM,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,mBAAmB,GAAG,MAAM;YAAE,SAAS;QAEpE,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAEpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE;YACzC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ;SAC3E,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;cACpE,iMAAiM,UAAU,CAAC,MAAM,CAAC,QAAQ;cAC3N,MAAM,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhF,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACnF,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,sFAAsF;QACtF,uFAAuF;QACvF,2DAA2D;QAC3D,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,OAAO,GAAI,MAAM,EAAE,KAAwC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC9E,MAAM,OAAO,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,eAAe,CAAC,eAAe;YACpC,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;YAClG,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,CAAC,mBAAmB,CAAC;YAC3B,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;YAClC,SAAS,EAAE,EAAE;SAChB,CAAC,CAAC;QACH,IAAI,EAAE;YAAE,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,+FAA+F;IAC/F,mDAAmD;IACnD,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,YAAY,UAAU,mBAAmB,CAAC,CAAC;IACpG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC"}

package/dist/src/services/install-quotas.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @file src/services/install-quotas.ts
+ * @description How many of a thing one node and one owner may hold.
+ *
+ *   Three ceilings, and each of them was written out twice for a while: once in the HTTP route and
+ *   once in the MCP tool beside it. That is the failure the whole August 2026 audit exists to
+ *   prevent, and it is easy to reintroduce while FIXING it — the tool was missing the cap, so the
+ *   quickest repair is to paste the cap in, and now the number agrees today and diverges the next
+ *   time either copy is touched.
+ *
+ *   Nobody notices a divergence here quickly. A ceiling is a thing that holds for years and then one
+ *   day does not, and the person who raises the limit raises the copy in front of them.
+ * @structure
+ *   - extensionInstallRefusal() — the node-wide and per-owner extension ceilings
+ *   - appQuotaRefusal() — the per-owner published-app ceiling
+ *   - cortexInstallRefusal() — the node-wide cortex ceiling
+ * @usage
+ *   const refusal = await extensionInstallRefusal({ storage, config }, ownerName, isOperator);
+ *   if (refusal) return fail(refusal.message);
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Extracted after the audit's own diff was checked for duplication and these
+ *     three were found copied into the tool surface rather than shared.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export interface QuotaRefusal {
+    status: number;
+    code: 'LIMIT_EXCEEDED' | 'EXTENSION_LIMIT' | 'QUOTA_EXCEEDED';
+    message: string;
+}
+/**
+ * May this owner install one more extension?
+ *
+ * Two ceilings: the node holds at most `extensionMaxInstalled` in total, and one owner at most
+ * `maxExtensionsPerOwner`. An operator bypasses the per-owner one and not the node one. Only a NEW
+ * name counts against either — replacing your own extension in place adds nothing.
+ */
+export declare function extensionInstallRefusal(deps: {
+    storage: Storage;
+    config: AimeatConfig;
+}, ownerName: string, isOperator: boolean): Promise<QuotaRefusal | null>;
+/** May this principal publish or fork one more app? `maxAppsPerAgent` of 0 means no ceiling. */
+export declare function appQuotaRefusal(deps: {
+    storage: Storage;
+    config: AimeatConfig;
+}, callerGhii: string): Promise<QuotaRefusal | null>;
+/** May this node hold one more cortex? Replacing an existing one adds nothing, so pass `isNew`. */
+export declare function cortexInstallRefusal(deps: {
+    storage: Storage;
+    config: AimeatConfig;
+}, isNew: boolean): Promise<QuotaRefusal | null>;
+//# sourceMappingURL=install-quotas.d.ts.map

package/dist/src/services/install-quotas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-quotas.d.ts","sourceRoot":"","sources":["../../../src/services/install-quotas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;IAC9D,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CACzC,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,EAChD,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,OAAO,GACpB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAc9B;AAED,gGAAgG;AAChG,wBAAsB,eAAe,CACjC,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,EAChD,UAAU,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAQ9B;AAED,mGAAmG;AACnG,wBAAsB,oBAAoB,CACtC,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,EAChD,KAAK,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAW9B"}

package/dist/src/services/install-quotas.js

@@ -0,0 +1,47 @@
+/**
+ * May this owner install one more extension?
+ *
+ * Two ceilings: the node holds at most `extensionMaxInstalled` in total, and one owner at most
+ * `maxExtensionsPerOwner`. An operator bypasses the per-owner one and not the node one. Only a NEW
+ * name counts against either — replacing your own extension in place adds nothing.
+ */
+export async function extensionInstallRefusal(deps, ownerName, isOperator) {
+    const { storage, config } = deps;
+    const installed = await storage.listExtensions();
+    if (installed.length >= config.extensionMaxInstalled) {
+        return { status: 409, code: 'LIMIT_EXCEEDED', message: `Maximum ${config.extensionMaxInstalled} extensions allowed` };
+    }
+    if (!isOperator) {
+        const mine = installed.filter(e => e.installedBy === ownerName);
+        if (mine.length >= config.maxExtensionsPerOwner) {
+            return { status: 429, code: 'EXTENSION_LIMIT', message: `Maximum ${config.maxExtensionsPerOwner} extensions per owner` };
+        }
+    }
+    return null;
+}
+/** May this principal publish or fork one more app? `maxAppsPerAgent` of 0 means no ceiling. */
+export async function appQuotaRefusal(deps, callerGhii) {
+    const { storage, config } = deps;
+    if (config.maxAppsPerAgent <= 0)
+        return null;
+    const { total } = await storage.listApps({ ownerGaii: callerGhii, limit: 1 });
+    if (total >= config.maxAppsPerAgent) {
+        return { status: 429, code: 'QUOTA_EXCEEDED', message: `You have reached the maximum of ${config.maxAppsPerAgent} published apps` };
+    }
+    return null;
+}
+/** May this node hold one more cortex? Replacing an existing one adds nothing, so pass `isNew`. */
+export async function cortexInstallRefusal(deps, isNew) {
+    const { storage, config } = deps;
+    if (!isNew)
+        return null;
+    const installed = await storage.listCortexExtensions();
+    if (installed.length >= config.cortexMaxInstalled) {
+        return {
+            status: 413, code: 'QUOTA_EXCEEDED',
+            message: `Maximum ${config.cortexMaxInstalled} cortex extensions allowed. Uninstall unused extensions first.`,
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=install-quotas.js.map

package/dist/src/services/install-quotas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-quotas.js","sourceRoot":"","sources":["../../../src/services/install-quotas.ts"],"names":[],"mappings":"AAgCA;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,IAAgD,EAChD,SAAiB,EACjB,UAAmB;IAEnB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAEjD,IAAI,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,qBAAqB,qBAAqB,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,qBAAqB,uBAAuB,EAAE,CAAC;QAC7H,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,IAAgD,EAChD,UAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,KAAK,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mCAAmC,MAAM,CAAC,eAAe,iBAAiB,EAAE,CAAC;IACxI,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAgD,EAChD,KAAc;IAEd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAChD,OAAO;YACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;YACnC,OAAO,EAAE,WAAW,MAAM,CAAC,kBAAkB,gEAAgE;SAChH,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/src/services/intent-pool-prompt.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file src/services/intent-pool-prompt.ts
+ * @description What a connected agent needs to know about its owner's intent pool, served by the
+ *   node so a correction reaches every agent rather than the copies people pasted last month.
+ *
+ *   The pool is NOT a copy-prompt tool. For a connected agent it is a work queue it reads itself:
+ *   a promoted intent arrives as an ordinary task, and the pool records are readable over the
+ *   memory route. No new MCP tool exists for it and none is needed — that was checked before this
+ *   text was written, not asserted in it.
+ *
+ *   The most important half of this prompt is what NOT to touch. An unpromoted intent is a person's
+ *   own list, and an agent that starts "helpfully" working through it has taken something that was
+ *   never handed over.
+ * @structure buildIntentPoolPrompt(config)
+ * @usage GET /v1/prompts/intent-pool
+ * @version-history
+ *   v1.0.0 — 2026-08-09 — Initial (intent pool, phase 4).
+ */
+import type { AimeatConfig } from '../config.js';
+export declare function buildIntentPoolPrompt(config: AimeatConfig): {
+    full: string;
+    body: string;
+};
+//# sourceMappingURL=intent-pool-prompt.d.ts.map

package/dist/src/services/intent-pool-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-pool-prompt.d.ts","sourceRoot":"","sources":["../../../src/services/intent-pool-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA6D1F"}

package/dist/src/services/intent-pool-prompt.js

@@ -0,0 +1,62 @@
+export function buildIntentPoolPrompt(config) {
+    const url = config.baseUrl;
+    const body = `# Your owner's intent pool
+
+Your owner keeps a list of what they mean to do here. Each item is one memory record in THEIR
+namespace, keyed \`intent.<id>\`. This explains the two ways you meet that list, and the one way you
+must not.
+
+## 1. Work that was handed to you arrives as a TASK
+
+When your owner gives you an item, the node creates an ordinary task. You need no new tool:
+
+- \`aimeat_task_list\` — your queue, as always.
+- A task from the pool carries \`resources.memoryKeys\` containing \`intent.<id>\`, and its scope
+  carries \`kind=intent\` plus \`intent_id\`. That is how you know where it came from.
+- \`aimeat_task_complete\` when it is done.
+
+**Completing the task closes the intent.** The node does that, not you. Do not try to write the
+record yourself — you do not have permission to, and the refusal you would get is correct.
+
+## 2. If the task names a prompt, fetch it — do not invent one
+
+A pooled item often names a node-served prompt rather than carrying its text:
+
+    prompt_ref: "build-app"   →   GET ${url}/v1/prompts/build-app
+
+Fetch it at the moment you do the work. The text is deliberately not stored in the record, so the
+version you get is the current one. If \`prompt_args\` is present, it holds the parameters for that
+prompt.
+
+## 3. You may READ the pool. You may not act on it uninvited
+
+    aimeat_memory_list { prefix: "intent.", owner_scope: true }
+    aimeat_memory_read { key: "intent.<id>", owner_scope: true }
+
+\`owner_scope\` is what reaches your owner's namespace instead of your own; without it you are
+looking at your own records and will find nothing.
+
+Use this to ANSWER: "what is on my list?", "what did I say I wanted to do about X?". That is a
+genuinely useful thing to be able to say.
+
+**Do not start work you find there.** An item that was not promoted to a task was not given to you.
+It is a person's own list, and working through it uninvited is taking something that was not handed
+over — even when you could do it well. If something on the list looks worth doing, say so and let
+them decide.
+
+## 4. Items that close themselves
+
+Some entries carry \`closes_when\`, e.g. \`{ "check": "first_agent" }\`. Those are the node's own
+suggestions and they stop being offered the moment the condition is true. Never mark one done and
+never act on one: it is not a task, and if the situation unwinds it is supposed to come back.
+
+## In one line
+
+Do what you were given, read the rest only to answer questions about it, and let the node close
+what it opened.`;
+    const full = `You are connected to an AIMEAT node at ${url} through MCP.
+
+${body}`;
+    return { full, body };
+}
+//# sourceMappingURL=intent-pool-prompt.js.map

package/dist/src/services/intent-pool-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-pool-prompt.js","sourceRoot":"","sources":["../../../src/services/intent-pool-prompt.ts"],"names":[],"mappings":"AAoBA,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;wCAsBuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+B3B,CAAC;IAEb,MAAM,IAAI,GAAG,0CAA0C,GAAG;;EAE5D,IAAI,EAAE,CAAC;IACL,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/src/services/invitations.d.ts

@@ -30,9 +30,9 @@ export declare class InvitationError extends Error {
 export declare function invitePublic(inv: InvitationRecord): {
     id: string;
     email: string;
-    organism_id: string;
+    organism_id: string | null;
     org_role: "admin" | "member";
-    type: "link" | "code";
+    type: "link" | "registration" | "code";
     provisioned_owner: string | null;
     workspaces: InvitationWorkspaceGrant[];
     status: "pending" | "expired" | "accepted" | "cancelled";
@@ -76,6 +76,52 @@ export interface CreateEmailInvitationResult {
  * invitation email (best-effort). Throws InvitationError on bad email / dedupe / cap violations.
  */
 export declare function createEmailInvitation(storage: Storage, config: AimeatConfig, input: CreateEmailInvitationInput): Promise<CreateEmailInvitationResult>;
+/** The one identity string in `invitedBy` for a node-level invite. A colon cannot appear in an
+ *  owner name (OWNER_RE), so this can never collide with a real inviter. */
+export declare const AGENT_DOOR_INVITER = "node:agent-door";
+/** One live invitation per address at a time — the abuse cap on an OPEN, email-sending endpoint. */
+export declare const REGISTRATION_INVITE_EXPIRY_HOURS = 24;
+/** What the AI said about itself. Every field is its own claim and none is verified. */
+export interface AgentSelfReport {
+    model?: string | null;
+    vendor?: string | null;
+    client?: string | null;
+}
+/** What the SERVER saw. Unlike the self-report, this is evidence. */
+export interface RequestObservation {
+    ip: string;
+    userAgent: string | null;
+    at: string;
+}
+export interface RegistrationInviteInput {
+    email: string;
+    agent: AgentSelfReport;
+    observed: RequestObservation;
+    locale?: string;
+}
+export interface RegistrationInviteResult {
+    /** Absent when the request was suppressed by the per-address cap — the caller must not learn that. */
+    invitation: InvitationRecord | null;
+    acceptUrl: string | null;
+    emailSent: boolean;
+    /** Why nothing was sent, for the node's own logs. NEVER returned to the caller. */
+    suppressed: 'already-pending' | null;
+}
+/**
+ * Mint and send a node-level registration invitation.
+ *
+ * Two properties this function exists to guarantee:
+ *
+ * 1. **The response cannot be used to test addresses.** It returns the same shape whether the
+ *    address is new, already has an account, or already has a pending invite. An endpoint that
+ *    said "already registered" would be an account-enumeration oracle open to the internet.
+ * 2. **The email explains itself.** Nobody asked for it, so it carries what the AI claimed
+ *    (model / vendor / client) beside what the server observed (IP, user agent, time), and says
+ *    plainly that ignoring it means no account is created. That is what turns an open endpoint
+ *    from a weakness into something traceable: every unrequested message writes a full account of
+ *    itself into the mailbox of the person it concerns.
+ */
+export declare function createRegistrationInvitation(storage: Storage, config: AimeatConfig, input: RegistrationInviteInput): Promise<RegistrationInviteResult>;
 /** Find a workspace's registry entry across every member's registry copy (one key per creator).
  *  Standalone twin of routes/organisms/shared.ts findWsEntry so the service layer needs no route
  *  helper bag. */
@@ -97,6 +143,33 @@ export declare function applyInvitationWorkspaceGrants(storage: Storage, config:
     grantee: string;
     invitedBy: string;
 }): Promise<string[]>;
+/**
+ * The inverse of {@link applyInvitationWorkspaceGrants}: strip an organism's access from someone whose
+ * membership has just ended, whether they left, were removed, or were banned.
+ *
+ * Deleting the membership row and pruning members[]/admins[] was never the whole of it, because two
+ * things outlive that row and both of them ARE access:
+ *
+ *   1. `organism.agentGaiis`. Every membership gate in the organism code treats a GAII listed there as
+ *      a member in its own right (routes/organisms/shared.ts memberRole, the nine workspace read
+ *      gates, the MCP workspace tools), so an ejected person kept the whole organism through their own
+ *      agent's token while the roster showed them gone.
+ *   2. The workspace-role consents granted to them. Those are owned by each workspace's CREATOR and
+ *      keyed to the departing owner, so nothing about ending their membership reaches them — they
+ *      would keep serving cross-owner reads of workspace content indefinitely.
+ *
+ * A workspace the departing person created themselves is skipped: those grants are theirs, on their
+ * own content, and revoking them would be this function deciding what someone may do with their own
+ * data. Call it after the membership write, from every door that ends a membership. Returns what it
+ * removed, so a caller can log or report it.
+ */
+export declare function revokeDepartedMemberAccess(storage: Storage, config: AimeatConfig, args: {
+    organism: OrganismRecord;
+    departing: string;
+}): Promise<{
+    detachedAgents: string[];
+    revokedWorkspaces: string[];
+}>;
 export interface NameInviteInput {
     organism: OrganismRecord;
     inviterGhii: string;
@@ -129,6 +202,26 @@ export declare function acceptNameInvitation(storage: Storage, config: AimeatCon
     organism: OrganismRecord;
     membership: OrganismMembershipRecord;
 }): Promise<string[]>;
+/**
+ * The invitee declines: the membership row that WAS the invitation goes away. Throws InvitationError
+ * when there is nothing pending. A roster still showing someone who declined is not a stale list, it
+ * is a wrong answer about who has access, so this emits `organisms` like the accept path does.
+ */
+export declare function declineNameInvitation(storage: Storage, input: {
+    organismId: string;
+    inviteeOwner: string;
+}): Promise<void>;
+/**
+ * Cancel a PENDING email invitation (creator/admin; the caller has already authorized). The record
+ * is kept and flipped to `cancelled` rather than deleted, so the token stays known-dead and an
+ * accept attempt with the old link resolves to a cancelled invitation instead of an unknown one.
+ * Throws InvitationError when the invitation is missing, belongs to another organism, or has
+ * already been used or cancelled.
+ */
+export declare function cancelEmailInvitation(storage: Storage, input: {
+    organismId: string;
+    invitationId: string;
+}): Promise<InvitationRecord>;
 /**
  * DIRECT ADD — a creator/admin adds an existing local owner as an ACTIVE member with role +
  * workspace grants applied immediately, no accept round-trip (product decision 2026-07-16: the

package/dist/src/services/invitations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/services/invitations.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAMnH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAI9C,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AACD,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAuC/F;AAED,2GAA2G;AAC3G,qBAAa,eAAgB,SAAQ,KAAK;IACrB,MAAM,EAAE,MAAM;IAAS,IAAI,EAAE,MAAM;gBAAnC,MAAM,EAAE,MAAM,EAAS,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIxE;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB;;;;;;;;;;;;;;EAgBjD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAElE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ/E;AAED,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,wBAAwB,EAAE,CAYjF;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC5B,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC,CA0EtC;AAQD;;kBAEkB;AAClB,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAC1C,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAUtF;AAOD;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9F,OAAO,CAAC,MAAM,EAAE,CAAC,CAcnB;AAgCD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,yFAAyF;AACzF,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,GAC7D,OAAO,CAAC,wBAAwB,CAAC,CA0BnC;AAED;8EAC8E;AAC9E,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EACtC,KAAK,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5F,OAAO,CAAC,wBAAwB,CAAC,CAgBnC;AAED,iGAAiG;AACjG,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EACtC,KAAK,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EACtC,KAAK,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,GACxE,OAAO,CAAC,MAAM,EAAE,CAAC,CAwBnB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,GAC7D,OAAO,CAAC;IAAE,UAAU,EAAE,wBAAwB,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAiChF"}
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/services/invitations.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAQnH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAI9C,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AACD,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAuC/F;AAED,2GAA2G;AAC3G,qBAAa,eAAgB,SAAQ,KAAK;IACrB,MAAM,EAAE,MAAM;IAAS,IAAI,EAAE,MAAM;gBAAnC,MAAM,EAAE,MAAM,EAAS,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIxE;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB;;;;;;;;;;;;;;EAgBjD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAElE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ/E;AAED,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,wBAAwB,EAAE,CAYjF;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC5B,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC,CA2EtC;AAYD;4EAC4E;AAC5E,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAEpD,oGAAoG;AACpG,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,sGAAsG;IACtG,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACxC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,uBAAuB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CA+DnC;AAQD;;kBAEkB;AAClB,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAC1C,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAUtF;AAOD;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9F,OAAO,CAAC,MAAM,EAAE,CAAC,CAcnB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqCpE;AAgCD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,yFAAyF;AACzF,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,GAC7D,OAAO,CAAC,wBAAwB,CAAC,CA0BnC;AAED;8EAC8E;AAC9E,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EACtC,KAAK,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5F,OAAO,CAAC,wBAAwB,CAAC,CAgBnC;AAED,iGAAiG;AACjG,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EACtC,KAAK,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EACtC,KAAK,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,GACxE,OAAO,CAAC,MAAM,EAAE,CAAC,CAwBnB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,gBAAgB,CAAC,CAW3B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,GAC7D,OAAO,CAAC;IAAE,UAAU,EAAE,wBAAwB,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAiChF"}