aimeat 2.7.0 → 3.0.0

package/dist/src/services/organism-lifecycle.js

@@ -0,0 +1,320 @@
+/**
+ * @file organism-lifecycle.ts
+ * @description The organism lifecycle WRITES (create, update, join, leave) as one implementation
+ *   for every surface. Until the August 2026 MCP audit these existed twice: once in
+ *   src/routes/organisms/crud.ts (POST /v1/organisms, PUT /v1/organisms/:id, POST /:id/join,
+ *   POST /:id/leave) and once in src/mcp/organisms.ts (aimeat_organism_create / _update / _join /
+ *   _leave), each assembling its own record and calling storage directly.
+ *
+ *   What the second copy cost, measured on the code that was deleted: an organism created over MCP
+ *   wrote no structure snapshot and never reached the public landing feed; a join request made over
+ *   MCP notified nobody, so it sat in a list until an admin happened to look; neither MCP write
+ *   emitted `organisms` on the change bus, so open SPA tabs kept showing the old roster; and the two
+ *   copies stamped the discussion board with different owners. Four side effects, one capability,
+ *   and every one of them was invisible from the surface that had them.
+ *
+ *   The split: this file owns validation, the record shape, id and timestamp generation and the side
+ *   effects. Each surface keeps its own gate (who may call) and its own rendering: HTTP renders the
+ *   envelope, MCP renders text. A refusal is therefore RETURNED here, never written to a response.
+ * @structure
+ *   - OrganismRefusal + refuse() — the returned refusal both surfaces render themselves
+ *   - createOrganismRecord() — board + organism + creator membership, feed and timeline side effects
+ *   - updateOrganismRecord() — validated field updates + the README memory key
+ *   - joinOrganism() — direct join or join request, with the approver notifications
+ *   - leaveOrganism() — membership removal + roster/admin sync
+ * @usage
+ *   const r = await createOrganismRecord({ storage, config }, ownerName, { name, visibility });
+ *   if (!r.ok) { res.status(r.status).json(error(config.nodeId, r.code, r.message)); return; }
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Initial: extracted from routes/organisms/crud.ts + mcp/organisms.ts
+ *     (August 2026 MCP audit step 8). Collapses four differences between the copies: the board owner
+ *     (now always the creator's GHII), the join-request notifications and the change-bus emits (were
+ *     REST-only), the timeline + public-feed side effects of create (were REST-only), and update's
+ *     enum handling (REST stored anything, MCP dropped invalid values silently; both now refuse).
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { emitChange } from './event-bus.js';
+import { notify } from './notify.js';
+import { recordPublicActivity } from './public-activity.js';
+import { updateOrganismStructure } from './structure-snapshot.js';
+import { getOrganismReadme, setOrganismReadme } from './organism-readme.js';
+import { MEMBER_VISIBILITY_VALUES } from './organism-privacy.js';
+import { logger } from '../utils/logger.js';
+function refuse(status, code, message) {
+    return { ok: false, status, code, message };
+}
+const ORGANISM_TYPES = ['community', 'team', 'club', 'cooperative', 'project'];
+const JOIN_POLICIES = ['open', 'approval_required', 'invite_only'];
+const VISIBILITIES = ['public', 'listed', 'private'];
+/** Accept a known enum value, fall back to the default for anything else (creation is tolerant: both
+ *  copies defaulted rather than refused, and a tool that fails on a typo is worse than one that
+ *  creates a community). Update is strict; see updateOrganismRecord. */
+function pickEnum(allowed, value, fallback) {
+    return allowed.includes(value) ? value : fallback;
+}
+/**
+ * Create an organism: its discussion board, the record itself and the creator's membership row.
+ * `creatorOwner` is the BARE owner name. Membership rows, members[], admins[] and creatorGhii are
+ * all keyed that way, and comparing a full GHII against them finds nothing.
+ */
+export async function createOrganismRecord(deps, creatorOwner, input) {
+    const { storage, config } = deps;
+    const name = typeof input.name === 'string' ? input.name.trim() : '';
+    if (name.length < 2)
+        return refuse(400, 'INVALID_INPUT', 'Name is required (min 2 characters)');
+    const description = typeof input.description === 'string' ? input.description : '';
+    const type = pickEnum(ORGANISM_TYPES, input.type, 'community');
+    const joinPolicy = pickEnum(JOIN_POLICIES, input.joinPolicy, 'open');
+    const visibility = pickEnum(VISIBILITIES, input.visibility, 'public');
+    // Roster privacy tier; unset = 'authenticated' (see services/organism-privacy.ts).
+    const memberVisibility = MEMBER_VISIBILITY_VALUES.includes(input.memberVisibility)
+        ? input.memberVisibility
+        : undefined;
+    const maxMembers = Number(input.maxMembers) > 0 ? Number(input.maxMembers) : 500;
+    const id = uuidv4();
+    const now = new Date().toISOString();
+    const boardId = `org-${id}`;
+    // The board belongs to the organism's CREATOR, not to whichever principal made the call.
+    // routes/boards.ts compares board.ownerGaii by equality for update and delete, so a board stamped
+    // with an agent GAII locks the human creator out of the board of their own organism.
+    await storage.createBoard({
+        id: boardId,
+        name: `${name} — Discussion`,
+        description: `Discussion board for ${name}`,
+        visibility: visibility === 'public' ? 'public' : 'shared',
+        ownerGaii: `${creatorOwner}@${config.nodeId}`,
+        allowedGaiis: [],
+        createdAt: now,
+    });
+    const organism = await storage.createOrganism({
+        id,
+        name,
+        description,
+        type,
+        location: (input.location && typeof input.location === 'object' ? input.location : {}),
+        interests: Array.isArray(input.interests) ? input.interests : [],
+        creatorGhii: creatorOwner,
+        admins: [creatorOwner],
+        members: [creatorOwner],
+        agentGaiis: [],
+        boardId,
+        joinPolicy,
+        maxMembers,
+        visibility,
+        memberVisibility,
+        moderationConfig: {
+            flagsEnabled: true,
+            autoHideThreshold: 3,
+            appealsEnabled: true,
+        },
+        memoryNamespace: `organism.${id}`,
+        createdAt: now,
+        updatedAt: now,
+    });
+    await storage.createMembership({
+        id: uuidv4(),
+        organismId: id,
+        ghii: creatorOwner,
+        role: 'creator',
+        status: 'active',
+        joinedAt: now,
+    });
+    emitChange('organisms');
+    // Timeline and landing feed are best-effort: the organism exists either way, and neither is worth
+    // failing the call for. Both used to hang off the REST route alone.
+    void updateOrganismStructure(storage, config, id, { event: 'organism created', actor: creatorOwner })
+        .catch(err => { logger.warn('createOrganismRecord: timeline is best-effort', { error: String(err) }); });
+    // Only public organisms are discoverable, so only they announce.
+    if (visibility === 'public') {
+        void recordPublicActivity(storage, config, {
+            category: 'organisms',
+            actor: creatorOwner,
+            summary: `Organism "${name}" created`,
+            detail: description,
+            link: `/v1/organisms/${id}`,
+        }).catch(err => { logger.warn('createOrganismRecord: feed is best-effort', { error: String(err) }); });
+    }
+    return { ok: true, organism };
+}
+/**
+ * Apply an update to an existing organism, plus the free-form README (a markdown body stored as the
+ * creator-owned memory key `organism.{id}.meta.readme`, not a record column).
+ *
+ * Update is STRICT where create is tolerant: a create with a mistyped visibility still produces a
+ * usable organism, but an update that silently ignores the field leaves the caller believing a
+ * change happened. Anything present and unrecognised is refused.
+ */
+export async function updateOrganismRecord(deps, organism, input) {
+    const { storage, config } = deps;
+    const updates = { updatedAt: new Date().toISOString() };
+    if (input.name !== undefined) {
+        if (typeof input.name !== 'string' || input.name.trim().length < 2) {
+            return refuse(400, 'INVALID_INPUT', 'Name must be a string of at least 2 characters');
+        }
+        updates.name = input.name.trim();
+    }
+    if (input.description !== undefined) {
+        if (typeof input.description !== 'string')
+            return refuse(400, 'INVALID_INPUT', 'description must be a string');
+        updates.description = input.description;
+    }
+    if (input.type !== undefined) {
+        if (!ORGANISM_TYPES.includes(input.type)) {
+            return refuse(400, 'INVALID_INPUT', `type must be one of: ${ORGANISM_TYPES.join(', ')}`);
+        }
+        updates.type = input.type;
+    }
+    if (input.location !== undefined) {
+        if (typeof input.location !== 'object' || input.location === null || Array.isArray(input.location)) {
+            return refuse(400, 'INVALID_INPUT', 'location must be an object');
+        }
+        updates.location = input.location;
+    }
+    if (input.interests !== undefined) {
+        if (!Array.isArray(input.interests) || input.interests.some(i => typeof i !== 'string')) {
+            return refuse(400, 'INVALID_INPUT', 'interests must be an array of strings');
+        }
+        updates.interests = input.interests;
+    }
+    if (input.joinPolicy !== undefined) {
+        if (!JOIN_POLICIES.includes(input.joinPolicy)) {
+            return refuse(400, 'INVALID_INPUT', `join_policy must be one of: ${JOIN_POLICIES.join(', ')}`);
+        }
+        updates.joinPolicy = input.joinPolicy;
+    }
+    if (input.visibility !== undefined) {
+        if (!VISIBILITIES.includes(input.visibility)) {
+            return refuse(400, 'INVALID_INPUT', `visibility must be one of: ${VISIBILITIES.join(', ')}`);
+        }
+        updates.visibility = input.visibility;
+    }
+    if (input.memberVisibility !== undefined) {
+        if (!MEMBER_VISIBILITY_VALUES.includes(input.memberVisibility)) {
+            return refuse(400, 'INVALID_INPUT', `member_visibility must be one of: ${MEMBER_VISIBILITY_VALUES.join(', ')}`);
+        }
+        updates.memberVisibility = input.memberVisibility;
+    }
+    if (input.maxMembers !== undefined) {
+        const n = Number(input.maxMembers);
+        if (!Number.isFinite(n) || n < 1)
+            return refuse(400, 'INVALID_INPUT', 'max_members must be a positive number');
+        updates.maxMembers = Math.floor(n);
+    }
+    if (input.readme !== undefined && typeof input.readme !== 'string') {
+        return refuse(400, 'INVALID_INPUT', 'readme must be a string');
+    }
+    // The README stays owned by the organism's creator so it does not fork into a second copy under
+    // whichever admin edited it last.
+    const readmeSet = typeof input.readme === 'string';
+    if (readmeSet)
+        await setOrganismReadme(storage, config, organism.id, input.readme, organism.creatorGhii);
+    const updated = await storage.updateOrganism(organism.id, updates);
+    const readme = await getOrganismReadme(storage, organism.id);
+    emitChange('organisms');
+    return { ok: true, organism: updated ?? { ...organism, ...updates }, readme, readmeSet };
+}
+/**
+ * Join an organism, or ask to. An `open` organism activates the membership immediately; an
+ * `approval_required` one records a join request and tells the creator plus every admin, with the
+ * approve/reject actions on the notification itself; an `invite_only` one refuses.
+ *
+ * `joinerOwner` is the bare owner name (the key membership rows use).
+ */
+export async function joinOrganism(deps, organism, joinerOwner, message) {
+    const { storage, config } = deps;
+    const id = organism.id;
+    const existing = await storage.getMembership(id, joinerOwner);
+    if (existing && existing.status === 'banned') {
+        return refuse(403, 'BANNED', 'You have been blocked from this organism');
+    }
+    if (existing && existing.status === 'active') {
+        return refuse(409, 'ALREADY_MEMBER', 'You are already a member');
+    }
+    if (existing && existing.status === 'pending') {
+        return refuse(409, 'ALREADY_PENDING', 'You already have a pending join request');
+    }
+    if (existing && existing.status === 'invited') {
+        return refuse(409, 'ALREADY_INVITED', 'You have a pending invitation — accept it instead of requesting to join');
+    }
+    const members = await storage.listMembers(id, { status: 'active' });
+    if (members.length >= organism.maxMembers) {
+        return refuse(409, 'CAPACITY_FULL', 'Organism has reached maximum members');
+    }
+    const now = new Date().toISOString();
+    if (organism.joinPolicy === 'open') {
+        const membership = await storage.createMembership({
+            id: uuidv4(),
+            organismId: id,
+            ghii: joinerOwner,
+            role: 'member',
+            status: 'active',
+            joinedAt: now,
+        });
+        await storage.updateOrganism(id, {
+            members: [...organism.members, joinerOwner],
+            updatedAt: now,
+        });
+        emitChange('organisms');
+        return { ok: true, outcome: 'joined', membership };
+    }
+    if (organism.joinPolicy === 'approval_required') {
+        const joinRequest = await storage.createJoinRequest({
+            id: uuidv4(),
+            organismId: id,
+            ghii: joinerOwner,
+            message: typeof message === 'string' && message ? message : undefined,
+            status: 'pending',
+            createdAt: now,
+        });
+        // Tell the creator + admins, or the request waits until someone opens the list. admins includes
+        // the creator, so dedupe.
+        const approvers = [...new Set([organism.creatorGhii, ...organism.admins])];
+        const reviewEndpoint = `/v1/organisms/${id}/join-requests/${joinRequest.id}/review`;
+        for (const approver of approvers) {
+            await notify(storage, `${approver}@${config.nodeId}`, {
+                type: 'organism_join_request',
+                title: `${joinerOwner} requested to join "${organism.name}"`,
+                body: typeof message === 'string' ? message : '',
+                link: '/v1/profile#organisms',
+                // Approve/Reject post the review endpoint as the admin. Once one admin decides, the others'
+                // clicks return 409 ALREADY_REVIEWED — the bell surfaces that and refreshes.
+                actions: [
+                    { id: 'approve', label: 'Approve', kind: 'api', method: 'POST', endpoint: reviewEndpoint, body: { decision: 'approved' }, style: 'primary' },
+                    { id: 'reject', label: 'Reject', kind: 'api', method: 'POST', endpoint: reviewEndpoint, body: { decision: 'rejected' }, style: 'danger', confirm: true },
+                ],
+            });
+        }
+        emitChange('notifications');
+        emitChange('organisms');
+        return { ok: true, outcome: 'pending', joinRequest };
+    }
+    return refuse(403, 'INVITE_ONLY', 'This organism requires an invitation to join');
+}
+/**
+ * Leave an organism: delete the membership row and drop the leaver from members[] (and admins[] when
+ * they held it). The creator cannot leave: they delete the organism instead, so an organism is never
+ * left without someone who can manage it.
+ */
+export async function leaveOrganism(deps, organism, leaverOwner) {
+    const { storage } = deps;
+    const id = organism.id;
+    if (organism.creatorGhii === leaverOwner) {
+        return refuse(400, 'CREATOR_CANNOT_LEAVE', 'Creator cannot leave. Delete the organism instead.');
+    }
+    const membership = await storage.getMembership(id, leaverOwner);
+    if (!membership || membership.status !== 'active') {
+        return refuse(404, 'NOT_MEMBER', 'You are not a member');
+    }
+    await storage.deleteMembership(membership.id);
+    const updates = {
+        members: organism.members.filter(m => m !== leaverOwner),
+        updatedAt: new Date().toISOString(),
+    };
+    if (organism.admins.includes(leaverOwner)) {
+        updates.admins = organism.admins.filter(a => a !== leaverOwner);
+    }
+    await storage.updateOrganism(id, updates);
+    emitChange('organisms');
+    return { ok: true };
+}
+//# sourceMappingURL=organism-lifecycle.js.map

package/dist/src/services/organism-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organism-lifecycle.js","sourceRoot":"","sources":["../../../src/services/organism-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAGpC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAe5C,SAAS,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,cAAc,GAA6B,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACzG,MAAM,aAAa,GAAmC,CAAC,MAAM,EAAE,mBAAmB,EAAE,aAAa,CAAC,CAAC;AACnG,MAAM,YAAY,GAAmC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAErF;;wEAEwE;AACxE,SAAS,QAAQ,CAAmB,OAAY,EAAE,KAAc,EAAE,QAAW;IAC3E,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChE,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAkB,EAClB,YAAoB,EACpB,KAA0B;IAE1B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,qCAAqC,CAAC,CAAC;IAEhG,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtE,mFAAmF;IACnF,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAA+D,CAAC;QAC/H,CAAC,CAAE,KAAK,CAAC,gBAAuD;QAChE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAEjF,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,EAAE,EAAE,CAAC;IAE5B,yFAAyF;IACzF,kGAAkG;IAClG,qFAAqF;IACrF,MAAM,OAAO,CAAC,WAAW,CAAC;QACxB,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,GAAG,IAAI,eAAe;QAC5B,WAAW,EAAE,wBAAwB,IAAI,EAAE;QAC3C,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACzD,SAAS,EAAE,GAAG,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE;QAC7C,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;QAC5C,EAAE;QACF,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAA+B;QACpH,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,SAAsB,CAAC,CAAC,CAAC,EAAE;QAC9E,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,CAAC,YAAY,CAAC;QACtB,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,UAAU,EAAE,EAAE;QACd,OAAO;QACP,UAAU;QACV,UAAU;QACV,UAAU;QACV,gBAAgB;QAChB,gBAAgB,EAAE;YAChB,YAAY,EAAE,IAAI;YAClB,iBAAiB,EAAE,CAAC;YACpB,cAAc,EAAE,IAAI;SACrB;QACD,eAAe,EAAE,YAAY,EAAE,EAAE;QACjC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,gBAAgB,CAAC;QAC7B,EAAE,EAAE,MAAM,EAAE;QACZ,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IAEH,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,kGAAkG;IAClG,oEAAoE;IACpE,KAAK,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;SAClG,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,iEAAiE;IACjE,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,KAAK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE;YACzC,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,aAAa,IAAI,WAAW;YACrC,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,iBAAiB,EAAE,EAAE;SAC5B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAkB,EAClB,QAAwB,EACxB,KAA0B;IAE1B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,OAAO,GAA4B,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAEjF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,gDAAgD,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,8BAA8B,CAAC,CAAC;QAC/G,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAA8B,CAAC,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,wBAAwB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAA8B,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnG,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,4BAA4B,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAsC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,uCAAuC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAqB,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,UAA0C,CAAC,EAAE,CAAC;YAC9E,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,+BAA+B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAA0C,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,UAA0C,CAAC,EAAE,CAAC;YAC7E,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,8BAA8B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAA0C,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAA+D,CAAC,EAAE,CAAC;YAC9G,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,qCAAqC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAsD,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,uCAAuC,CAAC,CAAC;QAC/G,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,yBAAyB,CAAC,CAAC;IACjE,CAAC;IAED,gGAAgG;IAChG,kCAAkC;IAClC,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;IACnD,IAAI,SAAS;QAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,MAAgB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEnH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7D,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC3F,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAkB,EAClB,QAAwB,EACxB,WAAmB,EACnB,OAAiB;IAEjB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,0CAA0C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,GAAG,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,yEAAyE,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,sCAAsC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC;YAChD,EAAE,EAAE,MAAM,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE;YAC/B,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;YAC3C,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QACH,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,KAAK,mBAAmB,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;YAClD,EAAE,EAAE,MAAM,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACrE,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,gGAAgG;QAChG,0BAA0B;QAC1B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,iBAAiB,EAAE,kBAAkB,WAAW,CAAC,EAAE,SAAS,CAAC;QACpF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE;gBACpD,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,GAAG,WAAW,uBAAuB,QAAQ,CAAC,IAAI,GAAG;gBAC5D,IAAI,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBAChD,IAAI,EAAE,uBAAuB;gBAC7B,4FAA4F;gBAC5F,6EAA6E;gBAC7E,OAAO,EAAE;oBACP,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;oBAC5I,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;iBACzJ;aACF,CAAC,CAAC;QACL,CAAC;QACD,UAAU,CAAC,eAAe,CAAC,CAAC;QAC5B,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,8CAA8C,CAAC,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAkB,EAClB,QAAwB,EACxB,WAAmB;IAEnB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IAEvB,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,GAAG,EAAE,sBAAsB,EAAE,oDAAoD,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAE9C,MAAM,OAAO,GAA4B;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC;QACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1C,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/services/organism-namespace-access.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @file organism-namespace-access.ts
+ * @description Who may read or write an `organism.{id}.*` key. Membership, the namespace role
+ *   (meta = admin/creator write, shared = member, member.{owner} = self) and the consent layer,
+ *   in one function that takes a caller rather than an Express request.
+ *
+ *   WHY IT MOVED HERE. This rule lived entirely inside middleware/workspace-access.ts, which is
+ *   RequestHandler-shaped, so only a road with a `req` could reach it. services/memory-write.ts —
+ *   the shared write the MCP tools call — could therefore carry the FLOOR of the rule and nothing
+ *   above it, and the August 2026 re-measurement found what that cost:
+ *
+ *     - a member holding only a VIEWER grant, or no grant at all, wrote another member's workspace
+ *       content over MCP; revoking a contributor role stopped the web door and not the agent door
+ *     - any active member rewrote organism.{id}.meta.workspaces — the registry every access decision
+ *       reads — and so could add, rename or remove workspaces they do not administer
+ *     - one member overwrote another member's private organism namespace
+ *
+ *   That is the shape the whole audit is about: a guard shaped like one door does not reach the
+ *   other. The rule is the same rule for both now, and the middleware is a wrapper over it.
+ * @structure
+ *   - OrganismAccessCaller — the principal, its owner name and its roles
+ *   - checkOrganismNamespaceAccess() — a refusal, or null when the access is allowed
+ * @usage
+ *   const refusal = await checkOrganismNamespaceAccess({ storage, config }, caller, key, 'write');
+ *   if (refusal) return { ok: false, ...refusal };
+ * @version-history
+ *   v1.0.0 -- 2026-08-11 -- Extracted from middleware/workspace-access.ts (security audit, MCP/REST
+ *     drift): the consent layer, the meta.* admin rule and the member.* self-write rule reach every
+ *     door instead of only the HTTP one.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+/** The session asking, in the terms this rule decides on. */
+export interface OrganismAccessCaller {
+    /** The principal's own id: an agent GAII, a GHII, or an ecosystem id. */
+    principal: string;
+    /** The bare owner name behind that principal. Memberships are keyed by this, not by the GHII. */
+    owner: string;
+    /** The session's roles. 'owner' without 'agent' is the human principal. */
+    roles: string[];
+}
+/** What to answer when the access is refused. `status` and `code` match what the HTTP door sent. */
+export interface OrganismAccessRefusal {
+    status: number;
+    code: 'AUTH_REQUIRED' | 'NOT_FOUND' | 'ACCESS_DENIED' | 'CONSENT_REQUIRED';
+    message: string;
+}
+/**
+ * May this caller touch this organism key?
+ *
+ * Returns null when the access is allowed, including for a key outside the `organism.` namespace,
+ * which this rule has nothing to say about. `mode` separates reads from writes: the meta and member
+ * namespaces are readable by every member and writable by fewer.
+ */
+export declare function checkOrganismNamespaceAccess(deps: {
+    storage: Storage;
+    config: AimeatConfig;
+}, caller: OrganismAccessCaller, key: string, mode: 'read' | 'write'): Promise<OrganismAccessRefusal | null>;
+//# sourceMappingURL=organism-namespace-access.d.ts.map

package/dist/src/services/organism-namespace-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organism-namespace-access.d.ts","sourceRoot":"","sources":["../../../src/services/organism-namespace-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACjC,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,iGAAiG;IACjG,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,oGAAoG;AACpG,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAC3E,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAC9C,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,EAChD,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,OAAO,GACvB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAyHvC"}

package/dist/src/services/organism-namespace-access.js

@@ -0,0 +1,122 @@
+/**
+ * May this caller touch this organism key?
+ *
+ * Returns null when the access is allowed, including for a key outside the `organism.` namespace,
+ * which this rule has nothing to say about. `mode` separates reads from writes: the meta and member
+ * namespaces are readable by every member and writable by fewer.
+ */
+export async function checkOrganismNamespaceAccess(deps, caller, key, mode) {
+    const { storage, config } = deps;
+    const match = /^organism\.([^.]+)\./.exec(key);
+    if (!match)
+        return null;
+    const organismId = match[1];
+    if (!caller.owner) {
+        return { status: 401, code: 'AUTH_REQUIRED', message: 'Authentication required for workspace access' };
+    }
+    const organism = await storage.getOrganism(organismId);
+    if (!organism) {
+        return { status: 404, code: 'NOT_FOUND', message: `Organism not found: ${organismId}` };
+    }
+    // An organism-level agent is attached to the organism rather than a member of it. It reads and
+    // writes the shared namespace, reads meta, and gets nothing else — a workspace key included.
+    if (organism.agentGaiis.includes(caller.principal)) {
+        if (key.startsWith(`organism.${organismId}.shared.`))
+            return null;
+        if (key.startsWith(`organism.${organismId}.meta.`) && mode === 'read')
+            return null;
+        return { status: 403, code: 'ACCESS_DENIED', message: 'Agent not authorized for this workspace namespace' };
+    }
+    const userGhii = await storage.getGHIIByOwner(caller.owner);
+    if (!userGhii) {
+        return { status: 403, code: 'ACCESS_DENIED', message: 'Not a member of this organism' };
+    }
+    // Memberships are keyed by the BARE owner name — organisms.ts (join/leave/admin) and consent.ts
+    // (organism resolution) both look membership up with the owner name, not the full GHII.
+    const membership = await storage.getMembership(organismId, caller.owner);
+    if (!membership || membership.status !== 'active') {
+        return { status: 403, code: 'ACCESS_DENIED', message: 'Not an active member of this organism' };
+    }
+    // An org manager already administers this organism's access, invites, export and archive, so
+    // they need no per-workspace contributor consent on top.
+    const isOrgManager = membership.role === 'creator' || membership.role === 'admin';
+    const ownMemberPrefix = `organism.${organismId}.member.${caller.owner}.`;
+    const isOwnMemberNamespace = key.startsWith(ownMemberPrefix);
+    // A human owner-role session acting as an active member is the principal — it does not consent
+    // to itself. The consent layer governs AGENT access and cross-node sharing.
+    const isHumanOwnerSession = caller.roles.includes('owner') && !caller.roles.includes('agent');
+    // An AGENT of the workspace's own creator is that creator's tool, and likewise does not consent
+    // to itself. A cross-owner member's agent still needs a granted contributor role.
+    let isOwnWorkspaceAgent = false;
+    let wsCreator = null;
+    const wsMatch = /^organism\.[^.]+\.w\.([^.]+)\./.exec(key);
+    const wsId = wsMatch ? wsMatch[1] : null;
+    if (wsId && !isHumanOwnerSession) {
+        const regKey = `organism.${organismId}.meta.workspaces`;
+        const { items } = await storage.listAllMemory({ prefix: regKey, limit: 1000 });
+        for (const rec of items) {
+            if (rec.key !== regKey)
+                continue;
+            const list = rec.value?.workspaces ?? [];
+            const entry = list.find(w => w.id === wsId);
+            if (entry) {
+                wsCreator = entry.createdBy ?? (rec.ownerGaii.includes('#') ? rec.ownerGaii.split('#')[1] : rec.ownerGaii).split('@')[0];
+                if (wsCreator === caller.owner)
+                    isOwnWorkspaceAgent = true;
+                break;
+            }
+        }
+    }
+    const needsConsent = !isOwnMemberNamespace && !isHumanOwnerSession && !isOwnWorkspaceAgent && !isOrgManager;
+    if (needsConsent) {
+        let hasConsent = false;
+        if (wsId) {
+            // Workspace CONTENT: the creator's 'contributor' ROLE grant, and only that, so the
+            // creator can revoke write by removing the grant. A 'viewer' grant is read-only and does
+            // not match here. The role is granted to the OWNER, so all their agents inherit it.
+            if (wsCreator) {
+                const creatorGhii = `${wsCreator}@${config.nodeId}`;
+                const recipient = `ghii:${caller.owner}@${config.nodeId}`;
+                const pattern = `organism.${organismId}.w.${wsId}.**`;
+                const grants = await storage.listConsents(creatorGhii, { status: 'active' });
+                hasConsent = grants.some(c => c.purpose === 'workspace-contributor' && c.dataPattern === pattern && c.recipient === recipient);
+            }
+        }
+        else {
+            // Flat organism namespace: the writer's own contribution consent, owned by the member's
+            // OWNER GHII or one of their agents, whichever made the grant.
+            const ownerGhii = `${caller.owner}@${config.nodeId}`;
+            const agents = await storage.getAgentsByOwner(caller.owner);
+            const accessorPattern = `organism.${organismId}`;
+            for (const accessor of [ownerGhii, ...agents.map(a => a.gaii)]) {
+                if ((await storage.findMatchingConsents(accessor, key, accessorPattern)).length > 0) {
+                    hasConsent = true;
+                    break;
+                }
+            }
+        }
+        if (!hasConsent) {
+            return {
+                status: 403, code: 'CONSENT_REQUIRED',
+                message: `Active consent required for organism workspace access (key: ${key})`,
+            };
+        }
+    }
+    // Meta namespace: every member reads it, only an admin or the creator writes it. It holds the
+    // workspace registry that every access decision above reads, so a plain member writing here
+    // would be deciding who may write everywhere else.
+    if (key.startsWith(`organism.${organismId}.meta.`) && mode === 'write') {
+        if (membership.role !== 'admin' && membership.role !== 'creator') {
+            return { status: 403, code: 'ACCESS_DENIED', message: 'Admin access required for meta namespace' };
+        }
+    }
+    // Member namespace: every member reads it, only its owner writes it.
+    const memberMatch = /^organism\.[^.]+\.member\.([^.]+)\./.exec(key);
+    if (memberMatch && mode === 'write') {
+        if (memberMatch[1] !== caller.owner) {
+            return { status: 403, code: 'ACCESS_DENIED', message: 'Cannot write to another member\'s workspace' };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=organism-namespace-access.js.map

package/dist/src/services/organism-namespace-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organism-namespace-access.js","sourceRoot":"","sources":["../../../src/services/organism-namespace-access.ts"],"names":[],"mappings":"AAkDA;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,IAAgD,EAChD,MAA4B,EAC5B,GAAW,EACX,IAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;IAC3G,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,UAAU,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,+FAA+F;IAC/F,6FAA6F;IAC7F,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,UAAU,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,UAAU,QAAQ,CAAC,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAC5F,CAAC;IAED,gGAAgG;IAChG,wFAAwF;IACxF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IACpG,CAAC;IAED,6FAA6F;IAC7F,yDAAyD;IACzD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC;IAElF,MAAM,eAAe,GAAG,YAAY,UAAU,WAAW,MAAM,CAAC,KAAK,GAAG,CAAC;IACzE,MAAM,oBAAoB,GAAG,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAE7D,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE9F,gGAAgG;IAChG,kFAAkF;IAClF,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,IAAI,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,YAAY,UAAU,kBAAkB,CAAC;QACxD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM;gBAAE,SAAS;YACjC,MAAM,IAAI,GAAI,GAAG,CAAC,KAA2E,EAAE,UAAU,IAAI,EAAE,CAAC;YAChH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,EAAE,CAAC;gBACR,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzH,IAAI,SAAS,KAAK,MAAM,CAAC,KAAK;oBAAE,mBAAmB,GAAG,IAAI,CAAC;gBAC3D,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,oBAAoB,IAAI,CAAC,mBAAmB,IAAI,CAAC,mBAAmB,IAAI,CAAC,YAAY,CAAC;IAE5G,IAAI,YAAY,EAAE,CAAC;QACf,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,IAAI,IAAI,EAAE,CAAC;YACP,mFAAmF;YACnF,yFAAyF;YACzF,oFAAoF;YACpF,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,WAAW,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAG,QAAQ,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1D,MAAM,OAAO,GAAG,YAAY,UAAU,MAAM,IAAI,KAAK,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC7E,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,uBAAuB,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YACnI,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,wFAAwF;YACxF,+DAA+D;YAC/D,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,eAAe,GAAG,YAAY,UAAU,EAAE,CAAC;YACjD,KAAK,MAAM,QAAQ,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAAC,UAAU,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACtH,CAAC;QACL,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;gBACrC,OAAO,EAAE,+DAA+D,GAAG,GAAG;aACjF,CAAC;QACN,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,mDAAmD;IACnD,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,UAAU,QAAQ,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrE,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;QACvG,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,WAAW,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAClC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;QAC1G,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/src/services/outbound/outbound-service.d.ts

@@ -0,0 +1,53 @@
+import type { AimeatConfig } from '../../config.js';
+import type { Storage } from '../../storage/interface.js';
+import type { OutboundContactRecord, OutboundKind, OutboundMessageRecord, OutboundStatus, OutboundChannel } from '../../models/outbound-schemas.js';
+export declare class OutboundError extends Error {
+    readonly code: string;
+    readonly statusCode: number;
+    constructor(code: string, statusCode: number, message: string);
+}
+export interface ContactInput {
+    name: string;
+    email: string;
+    tags?: string[];
+    notes?: string | null;
+}
+/** Creates or returns the owner's contact for an email (one entry per owner per address). */
+export declare function ensureContact(storage: Storage, ownerGhii: string, input: ContactInput): Promise<OutboundContactRecord>;
+/** Owner asserts ownership; absent and not-yours answer identically (404). */
+export declare function requireOwnContact(storage: Storage, ownerGhii: string, id: string): Promise<OutboundContactRecord>;
+/** Records a bounce; the third one suppresses the address until the owner clears it. */
+export declare function recordBounce(storage: Storage, contact: OutboundContactRecord): Promise<OutboundContactRecord>;
+/** Public token-based opt-out (the unsubscribe link) or owner-side toggle. */
+export declare function setOptOut(storage: Storage, contact: OutboundContactRecord, optedOut: boolean): Promise<OutboundContactRecord>;
+export interface SendInput {
+    contactId: string;
+    kind: OutboundKind;
+    subject?: string;
+    /** Message body (plain text; rendered into the standard email layout). */
+    body?: string;
+    /** Owner memory record id under `outbound.template.` holding { subject, body }. */
+    templateId?: string;
+    /** {{var}} substitutions applied to the template subject/body. */
+    variables?: Record<string, string>;
+    /** Attach this invoice (PDF + Finvoice XML) and mark its delivery state. */
+    invoiceId?: string;
+    /** Reply-To for the email channel (the business's own address). */
+    replyTo?: string;
+    /** Display name on the email From header (envelope address stays the node's). */
+    fromName?: string;
+    /**
+     * Send AS this registered company: when the company has its own SMTP identity the mail
+     * leaves through ITS server, from ITS domain. Without one, the node's shared sender is
+     * used — a fallback, not a failure.
+     */
+    companyId?: string;
+}
+export interface SendResult {
+    log: OutboundMessageRecord;
+    channel: OutboundChannel;
+    status: OutboundStatus;
+}
+/** The send. Every outcome is logged; only policy violations throw. */
+export declare function sendOutbound(config: AimeatConfig, storage: Storage, ownerGhii: string, input: SendInput): Promise<SendResult>;
+//# sourceMappingURL=outbound-service.d.ts.map

package/dist/src/services/outbound/outbound-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-service.d.ts","sourceRoot":"","sources":["../../../../src/services/outbound/outbound-service.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAWpJ,qBAAa,aAAc,SAAQ,KAAK;aACV,IAAI,EAAE,MAAM;aAAkB,UAAU,EAAE,MAAM;gBAAhD,IAAI,EAAE,MAAM,EAAkB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI9F;AAKD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,6FAA6F;AAC7F,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA8B5H;AAED,8EAA8E;AAC9E,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAIvH;AAED,wFAAwF;AACxF,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CASnH;AAED,8EAA8E;AAC9E,wBAAsB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAQnI;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,cAAc,CAAC;CACxB;AAeD,uEAAuE;AACvE,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CA2HnI"}