aimeat 2.7.0 → 3.0.0

package/dist/src/services/prompt-defaults/portal.js

@@ -121,12 +121,24 @@ Step 1 — Identify Your Capabilities:
 - If you can only open/fetch GET URLs: You are Tier 0/0.5. You can browse public data. For writes, use micro-memory with access_code or ask your human for help.
 
 Step 2 — Connect to User:
-Ask your user: "Do you have a GHII account on this node? If yes, do you have a connectivity key to share with me?"
-- Has connectivity key: POST {{node_url}}/v1/agents/connect with { "connectivity_key": "<key from user>" }. You receive agent credentials (GAII + private key). Store the private key securely.
-- Has account, no key: Direct your user to generate a connectivity key from their profile page at {{node_url}}/v1/profile -> Agents section -> Generate Connectivity Key
-- No account: Direct your user to register a GHII identity at {{node_url}}/v1/portal
+Ask your user: "Do you already have an account on this node?"
 
-Step 3 — Authenticate:
+- YES, they have an account — become their agent by device authorization (RFC 8628):
+  1. POST {{node_url}}/v1/agents/device-authorize with { "agent_name": "<a short name for yourself>", "owner": "<their username>" }
+  2. Show them the user_code from the response. They approve it in their browser and choose what you may do.
+  3. Poll POST {{node_url}}/v1/agents/device-token every 5 seconds with { "device_code": "<device_code>", "grant_type": "urn:ietf:params:oauth:grant-type:device_code" } until it returns 200 with an access_token.
+  4. Prove the connection works: POST {{node_url}}/v1/memory with { "key": "onboarding.hello_mcp", "value": { "ok": true }, "visibility": "private" }. Until that key exists the connection is unverified and their home is not finished.
+
+- NO account yet — ask them for their EMAIL ADDRESS ONLY, then:
+  POST {{node_url}}/v1/registration-invites with { "email": "<the address they gave>", "agent": { "model": "<your model>", "vendor": "<who made you>", "client": "<the app you are running in>" } }
+  We email them a link. They press it, choose a username, and the account exists. There is no code for them to type, and you never choose the username — it is permanent, and they cannot see from a chat window whether one is free.
+  Tell them the message shows the IP address the call came from and which AI made it, so they can see it was you.
+  Then come back to the YES path and connect yourself as their agent.
+
+If you cannot make POST requests at all, say so plainly and immediately, and send them to {{node_url}}/v1/portal to register themselves. Do not describe what you would have done — they are waiting.
+
+Step 3 — Authenticate (only when you hold an agent KEYPAIR):
+Device authorization already handed you a token, so most agents skip this. It applies when you were registered via POST /v1/agents and hold a private key:
 1. GET {{node_url}}/v1/auth/challenge -> receive a challenge nonce
 2. Sign: Ed25519_sign(your_private_key, your_gaii + current_iso_timestamp)
 3. POST {{node_url}}/v1/auth/token with { "gaii": "your_gaii", "timestamp": "ISO string", "signature": "base64 signature" }
@@ -183,6 +195,46 @@ Help your user with what they want to accomplish. Use hints.next_actions in resp
         variables: ['node_url'],
         usedIn: ['/v1/bootstrap (reserved)'],
     },
+    {
+        id: 'operator-welcome',
+        group: 'portal',
+        name: 'Operator Welcome Message',
+        description: 'The message every new account receives from the operator, in their mailbox. FIRST LINE IS THE SUBJECT, then a blank line, then the message. Edit it here; add a Finnish version under the language overrides. Variables: {{node_url}}, {{display_name}}.',
+        content: `Welcome to your new home.
+
+Hello {{display_name}},
+
+I am the person who runs this node. You now have a home here, and this is its mailbox — messages from people and from your own agents arrive in this one place.
+
+Two things worth knowing on day one:
+
+Your welcome mat is a real page with its own address. Anyone you give the link to can see it, and nothing else of yours is visible until you say so.
+
+Your agent works for you, not for us. You choose what it may do when you approve it, and you can take that back at any time without asking anyone.
+
+If something here does not work, or does not make sense, reply to this message. It reaches a person.`,
+        // NOTE for whoever edits the seed: this prompt is in the `portal` group and is NOT in the
+        // seeder's syncGroups/syncIds, so an operator's edit is never overwritten on boot. Changing
+        // the text here only affects nodes that have never seeded it. That is deliberate — the whole
+        // point of the requirement is that the operator owns these words, not us.
+        variables: ['node_url', 'display_name'],
+        usedIn: ['welcome message to every new account'],
+        locales: {
+            fi: `Tervetuloa uuteen kotiisi.
+
+Hei {{display_name}},
+
+Minä pyöritän tätä solmua. Sinulla on nyt täällä koti, ja tämä on sen postilaatikko — viestit ihmisiltä ja omilta agenteiltasi tulevat tähän samaan paikkaan.
+
+Kaksi asiaa jotka kannattaa tietää ensimmäisenä päivänä:
+
+Tervetulomattosi on oikea sivu omalla osoitteellaan. Kuka tahansa jolle annat linkin näkee sen, eikä mikään muu sinun tiedoistasi näy ennen kuin itse sanot niin.
+
+Agenttisi tekee työtä sinulle, ei meille. Sinä päätät hyväksyessäsi mitä se saa tehdä, ja voit ottaa sen pois milloin tahansa kysymättä keneltäkään.
+
+Jos jokin täällä ei toimi tai ei tunnu järkevältä, vastaa tähän viestiin. Se menee ihmiselle.`,
+        },
+    },
     {
         id: 'anonymous-share',
         group: 'portal',

package/dist/src/services/prompt-defaults/portal.js.map

@@ -1 +1 @@
-{"version":3,"file":"portal.js","sourceRoot":"","sources":["../../../../src/services/prompt-defaults/portal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,sEAAsE;IACtE,sEAAsE;IACtE,wCAAwC;IACxC,sEAAsE;IAEtE;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,iFAAiF;QAC9F,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEAyF4D;QACrE,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC;QAC/C,MAAM,EAAE,CAAC,UAAU,CAAC;KACrB;IAED;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,6HAA6H;QAC1I,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;qJAqBwI;QACjJ,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,MAAM,EAAE,CAAC,eAAe,CAAC;KAC1B;IAED;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,wIAAwI;QACrJ,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mHAoCsG;QAC/G,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,MAAM,EAAE,CAAC,0BAA0B,CAAC;KACrC;IAED;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,6FAA6F;QAC1G,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA0DuB;QAChC,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC;QAC/D,MAAM,EAAE,CAAC,6BAA6B,CAAC;KACxC;CACF,CAAC"}
+{"version":3,"file":"portal.js","sourceRoot":"","sources":["../../../../src/services/prompt-defaults/portal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,sEAAsE;IACtE,sEAAsE;IACtE,wCAAwC;IACxC,sEAAsE;IAEtE;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,iFAAiF;QAC9F,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEAyF4D;QACrE,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC;QAC/C,MAAM,EAAE,CAAC,UAAU,CAAC;KACrB;IAED;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,6HAA6H;QAC1I,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qJAiCwI;QACjJ,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,MAAM,EAAE,CAAC,eAAe,CAAC;KAC1B;IAED;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,wIAAwI;QACrJ,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mHAoCsG;QAC/G,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,MAAM,EAAE,CAAC,0BAA0B,CAAC;KACrC;IAED;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,0PAA0P;QACvQ,OAAO,EAAE;;;;;;;;;;;;qGAYwF;QACjG,0FAA0F;QAC1F,4FAA4F;QAC5F,6FAA6F;QAC7F,0EAA0E;QAC1E,SAAS,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;QACvC,MAAM,EAAE,CAAC,sCAAsC,CAAC;QAChD,OAAO,EAAE;YACP,EAAE,EAAE;;;;;;;;;;;;8FAYoF;SACzF;KACF;IAED;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,6FAA6F;QAC1G,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA0DuB;QAChC,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC;QAC/D,MAAM,EAAE,CAAC,6BAA6B,CAAC;KACxC;CACF,CAAC"}

package/dist/src/services/prompt-defaults.d.ts

@@ -35,6 +35,13 @@ export interface PromptSeedEntry {
     content: string;
     variables: string[];
     usedIn: string[];
+    /**
+     * Optional factory translations, keyed by language tag ('fi'). Seeded ONCE, on first insert —
+     * after that the operator owns them and the seeder never touches them again (same rule the
+     * content already follows). A prompt with no entry here simply serves `content` everywhere,
+     * which is what every prompt did before this field existed.
+     */
+    locales?: Record<string, string>;
 }
 export declare const PROMPT_SEEDS: PromptSeedEntry[];
 //# sourceMappingURL=prompt-defaults.d.ts.map

package/dist/src/services/prompt-defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-defaults.d.ts","sourceRoot":"","sources":["../../../src/services/prompt-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAaD,eAAO,MAAM,YAAY,EAAE,eAAe,EAUzC,CAAC"}
+{"version":3,"file":"prompt-defaults.d.ts","sourceRoot":"","sources":["../../../src/services/prompt-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAaD,eAAO,MAAM,YAAY,EAAE,eAAe,EAUzC,CAAC"}

package/dist/src/services/prompt-defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-defaults.js","sourceRoot":"","sources":["../../../src/services/prompt-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAYH,8FAA8F;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,mBAAmB;IACtB,GAAG,eAAe;IAClB,GAAG,iBAAiB;IACpB,GAAG,YAAY;IACf,GAAG,eAAe;IAClB,GAAG,cAAc;IACjB,GAAG,wBAAwB;CAC5B,CAAC"}
+{"version":3,"file":"prompt-defaults.js","sourceRoot":"","sources":["../../../src/services/prompt-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAmBH,8FAA8F;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,mBAAmB;IACtB,GAAG,eAAe;IAClB,GAAG,iBAAiB;IACpB,GAAG,YAAY;IACf,GAAG,eAAe;IAClB,GAAG,cAAc;IACjB,GAAG,wBAAwB;CAC5B,CAAC"}

package/dist/src/services/prompt-seeder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-seeder.d.ts","sourceRoot":"","sources":["../../../src/services/prompt-seeder.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEvE"}
+{"version":3,"file":"prompt-seeder.d.ts","sourceRoot":"","sources":["../../../src/services/prompt-seeder.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAsEvE"}

package/dist/src/services/prompt-seeder.js

@@ -35,6 +35,10 @@ export async function seedSystemPrompts(storage) {
                 active: true,
                 variables: seed.variables,
                 usedIn: seed.usedIn,
+                // Factory translations travel with the first insert only. On every later boot the branch
+                // below runs instead, and it does not carry `locales` — so an operator's Finnish edit is
+                // never reverted by a deploy, exactly as their English edit is not.
+                locales: seed.locales,
                 version: 1,
                 updatedAt: now,
                 updatedBy: 'system',
@@ -64,9 +68,11 @@ export async function seedSystemPrompts(storage) {
             // Admin edits are preserved in version history and can be restored.
             // syncIds extends this to individual code-owned prompts in other groups
             // (e.g. the portal template-editor prompt, which must track its tag/header
-            // guidance in source). bootstrap-anon and other portal prompts are NOT synced.
+            // guidance in source; and bootstrap-anon, which DESCRIBES API FLOWS — when a flow is
+            // removed, a node still serving the old description sends every agent that reads its
+            // front door to a dead end, and it stayed wrong for exactly that reason).
             const syncGroups = ['generator', 'builders', 'tiers'];
-            const syncIds = ['site-portal'];
+            const syncIds = ['site-portal', 'bootstrap-anon'];
             if ((syncGroups.includes(seed.group) || syncIds.includes(seed.id)) && existing.content !== seed.content) {
                 metaUpdate.content = seed.content;
                 metaUpdate.updatedAt = new Date().toISOString();

package/dist/src/services/prompt-seeder.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-seeder.js","sourceRoot":"","sources":["../../../src/services/prompt-seeder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB;IACtD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,kBAAkB;YAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,CAAC,kBAAkB,CAAC;gBAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,yBAAyB,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,oCAAoC;aACjD,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC;QACb,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,MAAM,UAAU,GAAG;gBACjB,GAAG,QAAQ;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;YAEF,iEAAiE;YACjE,oEAAoE;YACpE,oEAAoE;YACpE,wEAAwE;YACxE,2EAA2E;YAC3E,+EAA+E;YAC/E,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC;YAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxG,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAClC,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,EAAE,+BAA+B,IAAI,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,OAAO,CAAC,kBAAkB,CAAC,UAA6E,CAAC,CAAC;YAChH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,mBAAmB,QAAQ,YAAY,OAAO,mBAAmB,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}
+{"version":3,"file":"prompt-seeder.js","sourceRoot":"","sources":["../../../src/services/prompt-seeder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB;IACtD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,kBAAkB;YAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,CAAC,kBAAkB,CAAC;gBAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,yFAAyF;gBACzF,yFAAyF;gBACzF,oEAAoE;gBACpE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,yBAAyB,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,oCAAoC;aACjD,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC;QACb,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,MAAM,UAAU,GAAG;gBACjB,GAAG,QAAQ;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;YAEF,iEAAiE;YACjE,oEAAoE;YACpE,oEAAoE;YACpE,wEAAwE;YACxE,2EAA2E;YAC3E,qFAAqF;YACrF,qFAAqF;YACrF,0EAA0E;YAC1E,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxG,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAClC,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,EAAE,+BAA+B,IAAI,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,OAAO,CAAC,kBAAkB,CAAC,UAA6E,CAAC,CAAC;YAChH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,mBAAmB,QAAQ,YAAY,OAAO,mBAAmB,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/src/services/push.d.ts

@@ -11,6 +11,9 @@
  *   const push = createPushService(config, storage);
  *   await push.sendNotification(ownerName, { title: '...', body: '...' });
  * @version-history
+ *   v1.2.0 -- 2026-08-11 -- One subscription per DEVICE (audit H-8): sendNotification fans out over
+ *     every device the owner registered and prunes only the endpoint that reported itself gone;
+ *     unsubscribe takes an optional endpoint.
  *   v1.0.0 -- 2026-04-15 -- Initial push notification service
  *   v1.1.0 -- 2026-05-21 -- Add stats counter instrumentation (push_sent, push_failed, push_expired_subs)
  */
@@ -32,6 +35,7 @@ export interface PushPayload {
 }
 export interface PushService {
     readonly enabled: boolean;
+    /** Register one device. A second device joins the first rather than replacing it (audit H-8). */
     subscribe(ownerName: string, subscription: {
         endpoint: string;
         keys: {
@@ -39,7 +43,9 @@ export interface PushService {
             auth: string;
         };
     }): Promise<PushSubscriptionRecord>;
-    unsubscribe(ownerName: string): Promise<boolean>;
+    /** With `endpoint`, drop that one device; without it, every device this owner has. */
+    unsubscribe(ownerName: string, endpoint?: string): Promise<boolean>;
+    /** Deliver to every device the owner has registered. True when at least one accepted it. */
     sendNotification(ownerName: string, payload: PushPayload): Promise<boolean>;
     broadcastToOrganism(organismId: string, payload: PushPayload): Promise<number>;
 }

package/dist/src/services/push.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../../src/services/push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAM/E,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1I,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,WAAW,CA2ErF"}
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../../src/services/push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAM/E,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,iGAAiG;IACjG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1I,sFAAsF;IACtF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,4FAA4F;IAC5F,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,WAAW,CAoFrF"}

package/dist/src/services/push.js

@@ -11,6 +11,9 @@
  *   const push = createPushService(config, storage);
  *   await push.sendNotification(ownerName, { title: '...', body: '...' });
  * @version-history
+ *   v1.2.0 -- 2026-08-11 -- One subscription per DEVICE (audit H-8): sendNotification fans out over
+ *     every device the owner registered and prunes only the endpoint that reported itself gone;
+ *     unsubscribe takes an optional endpoint.
  *   v1.0.0 -- 2026-04-15 -- Initial push notification service
  *   v1.1.0 -- 2026-05-21 -- Add stats counter instrumentation (push_sent, push_failed, push_expired_subs)
  */
@@ -43,34 +46,43 @@ export function createPushService(config, storage) {
             };
             return storage.createPushSubscription(record);
         },
-        async unsubscribe(ownerName) {
-            return storage.deletePushSubscription(ownerName);
+        async unsubscribe(ownerName, endpoint) {
+            return storage.deletePushSubscription(ownerName, endpoint);
         },
         async sendNotification(ownerName, payload) {
             if (!webpush)
                 return false;
-            const sub = await storage.getPushSubscription(ownerName);
-            if (!sub)
+            // FAN OUT. A person has more than one browser, and each is its own row since 2026-08-11.
+            // Delivery is per device: one endpoint failing says nothing about the others, so a dead one is
+            // pruned on its own and the rest still receive. Sequential on purpose — this is a handful of
+            // rows per person, and the push services rate-limit a burst from one sender anyway.
+            const subs = await storage.listPushSubscriptionsByOwner(ownerName);
+            if (!subs.length)
                 return false;
-            try {
-                await webpush.sendNotification({ endpoint: sub.endpoint, keys: sub.keys }, JSON.stringify(payload), { TTL: 86400 });
-                await storage.createPushSubscription({ ...sub, lastUsedAt: new Date().toISOString() });
-                getStats()?.incrementTyped('push_sent', 'general');
-                return true;
-            }
-            catch (err) {
-                const statusCode = err.statusCode;
-                if (statusCode === 404 || statusCode === 410) {
-                    await storage.deletePushSubscription(ownerName);
-                    logger.info('Push subscription expired, removed', { ownerName });
-                    getStats()?.increment('push_expired_subs');
+            let delivered = 0;
+            for (const sub of subs) {
+                try {
+                    await webpush.sendNotification({ endpoint: sub.endpoint, keys: sub.keys }, JSON.stringify(payload), { TTL: 86400 });
+                    await storage.createPushSubscription({ ...sub, lastUsedAt: new Date().toISOString() });
+                    getStats()?.incrementTyped('push_sent', 'general');
+                    delivered++;
                 }
-                else {
-                    logger.warn('Push notification failed', { ownerName, error: String(err) });
+                catch (err) {
+                    const statusCode = err.statusCode;
+                    if (statusCode === 404 || statusCode === 410) {
+                        // The push service says this registration is gone. Remove THAT endpoint; deleting by
+                        // owner here would take the person's working devices down with the dead one.
+                        await storage.deletePushSubscription(ownerName, sub.endpoint);
+                        logger.info('Push subscription expired, removed', { ownerName, endpoint: sub.endpoint });
+                        getStats()?.increment('push_expired_subs');
+                    }
+                    else {
+                        logger.warn('Push notification failed', { ownerName, endpoint: sub.endpoint, error: String(err) });
+                    }
+                    getStats()?.incrementTyped('push_failed', 'general');
                 }
-                getStats()?.incrementTyped('push_failed', 'general');
-                return false;
             }
+            return delivered > 0;
         },
         async broadcastToOrganism(organismId, payload) {
             const organism = await storage.getOrganism(organismId);

package/dist/src/services/push.js.map

@@ -1 +1 @@
-{"version":3,"file":"push.js","sourceRoot":"","sources":["../../../src/services/push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAsB/C,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,OAAgB;IACtE,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAE1F,IAAI,OAAO,GAAqC,IAAI,CAAC;IACrD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,UAAU,CAA8B,CAAC;YAC3D,OAAO,CAAC,eAAe,CACrB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,cAAe,EACtB,MAAM,CAAC,eAAgB,CACxB,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,OAAO,KAAK,OAAO,OAAO,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC;QAErD,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY;YACrC,MAAM,MAAM,GAA2B;gBACrC,SAAS;gBACT,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;YACF,OAAO,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,SAAS;YACzB,OAAO,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO;YACvC,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,gBAAgB,CAC5B,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,EAAE,GAAG,EAAE,KAAK,EAAE,CACf,CAAC;gBACF,MAAM,OAAO,CAAC,sBAAsB,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACvF,QAAQ,EAAE,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAI,GAA+B,CAAC,UAAU,CAAC;gBAC/D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC7C,MAAM,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;oBAChD,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;oBACjE,QAAQ,EAAE,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBACD,QAAQ,EAAE,EAAE,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO;YAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,CAAC;YACxB,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC3D,IAAI,EAAE;oBAAE,IAAI,EAAE,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../../src/services/push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAyB/C,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,OAAgB;IACtE,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAE1F,IAAI,OAAO,GAAqC,IAAI,CAAC;IACrD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,UAAU,CAA8B,CAAC;YAC3D,OAAO,CAAC,eAAe,CACrB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,cAAe,EACtB,MAAM,CAAC,eAAgB,CACxB,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,OAAO,KAAK,OAAO,OAAO,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC;QAErD,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY;YACrC,MAAM,MAAM,GAA2B;gBACrC,SAAS;gBACT,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;YACF,OAAO,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ;YACnC,OAAO,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO;YACvC,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,yFAAyF;YACzF,+FAA+F;YAC/F,6FAA6F;YAC7F,oFAAoF;YACpF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,gBAAgB,CAC5B,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,EAAE,GAAG,EAAE,KAAK,EAAE,CACf,CAAC;oBACF,MAAM,OAAO,CAAC,sBAAsB,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBACvF,QAAQ,EAAE,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;oBACnD,SAAS,EAAE,CAAC;gBACd,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,MAAM,UAAU,GAAI,GAA+B,CAAC,UAAU,CAAC;oBAC/D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC7C,qFAAqF;wBACrF,6EAA6E;wBAC7E,MAAM,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;wBAC9D,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;wBACzF,QAAQ,EAAE,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;oBAC7C,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACrG,CAAC;oBACD,QAAQ,EAAE,EAAE,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,OAAO,SAAS,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO;YAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,CAAC;YACxB,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC3D,IAAI,EAAE;oBAAE,IAAI,EAAE,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/services/quota-alarm.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @file quota-alarm.ts
+ * @description Warns an owner while there is still room to act, instead of letting a memory quota
+ *   arrive as a wall. A principal that fills its key budget through one-key-per-small-fact gets no
+ *   signal at all today: every write succeeds, and then one write fails with a 413 and a keyspace
+ *   that needs reshaping, not a quick delete. This raises a bell notification when a principal
+ *   crosses 80% (and again at 95%) of either the key ceiling or the byte quota.
+ * @structure
+ *   - checkMemoryQuotaAlarm(config, storage, gaii, { keyCount?, usedBytes? }) — fire-and-forget from
+ *     a write path; computes the bands, throttles, and notifies the owner GHII.
+ *   - QUOTA_ALARM_BANDS / QUOTA_ALARM_WINDOW_MS — the thresholds and the per-band repeat window.
+ *   - __resetQuotaAlarmThrottle() — test seam.
+ * @usage import { checkMemoryQuotaAlarm } from '../services/quota-alarm.js';
+ *   void checkMemoryQuotaAlarm(config, storage, gaii, { keyCount, usedBytes });
+ * @version-history
+ *   v1.0.0 — 2026-08-09 — Initial. Born from the memory-key-shape audit: aimeat.io runs the key
+ *     ceiling at 100 000 against a shipped default of 1 000, so the two principals that would have
+ *     failed loudest never failed at all and nobody learned anything. Monitoring is what makes a
+ *     raised ceiling safe.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+/** Percentages at which the owner is told. 80 leaves room to reshape; 95 says it is nearly over. */
+export declare const QUOTA_ALARM_BANDS: readonly [80, 95];
+/** How long before the SAME principal can raise the SAME band again. */
+export declare const QUOTA_ALARM_WINDOW_MS: number;
+/** Test seam — clears the throttle so a test can assert two consecutive alarms. */
+export declare function __resetQuotaAlarmThrottle(): void;
+/**
+ * Raise a bell notification when `gaii` crosses a quota band. Both inputs are optional because the
+ * caller only has the ones it already computed: the write path counts keys just for new keys, and
+ * knows the byte total from the quota check. Never throws — a warning that breaks a write would be
+ * worse than the condition it warns about.
+ */
+export declare function checkMemoryQuotaAlarm(config: AimeatConfig, storage: Storage, gaii: string, usage: {
+    keyCount?: number;
+    usedBytes?: number;
+}): Promise<void>;
+//# sourceMappingURL=quota-alarm.d.ts.map

package/dist/src/services/quota-alarm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-alarm.d.ts","sourceRoot":"","sources":["../../../src/services/quota-alarm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAKvD,oGAAoG;AACpG,eAAO,MAAM,iBAAiB,mBAAoB,CAAC;AAEnD,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,QAAsB,CAAC;AASzD,mFAAmF;AACnF,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAiCD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,IAAI,CAAC,CAwDf"}

package/dist/src/services/quota-alarm.js

@@ -0,0 +1,114 @@
+import { notify } from './notify.js';
+import { parseGaiiLoose } from '../utils/gaii.js';
+import { logger } from '../utils/logger.js';
+/** Percentages at which the owner is told. 80 leaves room to reshape; 95 says it is nearly over. */
+export const QUOTA_ALARM_BANDS = [80, 95];
+/** How long before the SAME principal can raise the SAME band again. */
+export const QUOTA_ALARM_WINDOW_MS = 24 * 60 * 60 * 1000;
+/**
+ * principal|dimension|band -> last notified (ms). In-process on purpose: this is spam control, not
+ * state anyone depends on. A restart may repeat one notification a day early, which costs nothing,
+ * whereas persisting it would spend a memory key to warn about spending memory keys.
+ */
+const lastNotified = new Map();
+/** Test seam — clears the throttle so a test can assert two consecutive alarms. */
+export function __resetQuotaAlarmThrottle() {
+    lastNotified.clear();
+}
+/** Highest band the value has crossed, or null when it is below the lowest. */
+function bandFor(percent) {
+    let hit = null;
+    for (const b of QUOTA_ALARM_BANDS)
+        if (percent >= b)
+            hit = b;
+    return hit;
+}
+/**
+ * Who hears about it. An agent's or an app's pressure is the OWNER's problem, so the alarm always
+ * lands on the owner GHII. An `ext:{name}` namespace has no owner in its identity, so the extension
+ * record is read to find who installed it — done only once a band is actually crossed, so the normal
+ * write path never pays for this lookup.
+ */
+async function resolveRecipient(storage, gaii, nodeId) {
+    if (gaii.startsWith('ext:')) {
+        const name = gaii.slice(4).split('.')[0];
+        if (!name)
+            return null;
+        const ext = await storage.getExtension(name);
+        return ext?.installedBy ? `${ext.installedBy}@${nodeId}` : null;
+    }
+    const { owner } = parseGaiiLoose(gaii);
+    return owner ? `${owner}@${nodeId}` : null;
+}
+/** Human label for the principal in the notification body ("agent news-fetcher", "extension luotain"). */
+function describePrincipal(gaii) {
+    if (gaii.startsWith('ext:'))
+        return `Extension "${gaii.slice(4).split('.')[0]}"`;
+    if (gaii.includes('#'))
+        return `Agent "${gaii.split('#')[0]}"`;
+    return 'Your account';
+}
+/**
+ * Raise a bell notification when `gaii` crosses a quota band. Both inputs are optional because the
+ * caller only has the ones it already computed: the write path counts keys just for new keys, and
+ * knows the byte total from the quota check. Never throws — a warning that breaks a write would be
+ * worse than the condition it warns about.
+ */
+export async function checkMemoryQuotaAlarm(config, storage, gaii, usage) {
+    try {
+        const maxKeys = config.memoryMaxKeysPerAgent;
+        const maxBytes = config.memoryQuotaMb * 1024 * 1024;
+        const dims = [];
+        if (typeof usage.keyCount === 'number' && maxKeys > 0) {
+            dims.push({
+                dim: 'keys',
+                percent: (usage.keyCount / maxKeys) * 100,
+                detail: `${usage.keyCount} of ${maxKeys} memory keys`,
+            });
+        }
+        if (typeof usage.usedBytes === 'number' && maxBytes > 0) {
+            dims.push({
+                dim: 'bytes',
+                percent: (usage.usedBytes / maxBytes) * 100,
+                detail: `${(usage.usedBytes / (1024 * 1024)).toFixed(1)} MB of ${config.memoryQuotaMb} MB`,
+            });
+        }
+        const crossed = dims
+            .map(d => ({ ...d, band: bandFor(d.percent) }))
+            .filter((d) => d.band !== null);
+        if (!crossed.length)
+            return;
+        const now = Date.now();
+        const fresh = crossed.filter(d => {
+            const slot = `${gaii}|${d.dim}|${d.band}`;
+            const seen = lastNotified.get(slot);
+            if (seen !== undefined && now - seen < QUOTA_ALARM_WINDOW_MS)
+                return false;
+            lastNotified.set(slot, now);
+            return true;
+        });
+        if (!fresh.length)
+            return;
+        const recipient = await resolveRecipient(storage, gaii, config.nodeId);
+        if (!recipient)
+            return;
+        for (const d of fresh) {
+            // The body names FOLDING, matching the 413 the caller would eventually hit. A warning that
+            // said only "you are at 80%" would send the reader to delete data, which is the wrong fix for
+            // the shape that got them here.
+            const remedy = d.dim === 'keys'
+                ? `One value may hold ${config.memoryMaxValueSizeKb} kB, so a set of small keys usually belongs in one record holding an array or an object keyed by id. Check which key prefix is growing before deleting anything.`
+                : 'Check which key prefix is growing. Data that has stopped mattering can be archived or aged out; a prefix that grows one key per event usually wants one record per period instead.';
+            await notify(storage, recipient, {
+                type: 'quota_warning',
+                title: `${describePrincipal(gaii)} is at ${Math.floor(d.percent)}% of its memory ${d.dim === 'keys' ? 'key limit' : 'quota'}`,
+                body: `${d.detail}. ${remedy}`,
+                link: '/v1/profile#memory',
+            });
+        }
+    }
+    catch (err) {
+        logger.warn('memory quota alarm is best-effort', { gaii, error: String(err) });
+    }
+}
+//# sourceMappingURL=quota-alarm.js.map

package/dist/src/services/quota-alarm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-alarm.js","sourceRoot":"","sources":["../../../src/services/quota-alarm.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAU,CAAC;AAEnD,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD;;;;GAIG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE/C,mFAAmF;AACnF,MAAM,UAAU,yBAAyB;IACvC,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,+EAA+E;AAC/E,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,iBAAiB;QAAE,IAAI,OAAO,IAAI,CAAC;YAAE,GAAG,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAgB,EAAE,IAAY,EAAE,MAAc;IAC5E,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,0GAA0G;AAC1G,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjF,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/D,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,KAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;QAEpD,MAAM,IAAI,GAAsE,EAAE,CAAC;QACnF,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,MAAM;gBACX,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,GAAG;gBACzC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,OAAO,OAAO,cAAc;aACtD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,OAAO;gBACZ,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,GAAG;gBAC3C,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,aAAa,KAAK;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAoC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC/B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,qBAAqB;gBAAE,OAAO,KAAK,CAAC;YAC3E,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QAE1B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,2FAA2F;YAC3F,8FAA8F;YAC9F,gCAAgC;YAChC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,MAAM;gBAC7B,CAAC,CAAC,sBAAsB,MAAM,CAAC,oBAAoB,kKAAkK;gBACrN,CAAC,CAAC,oLAAoL,CAAC;YACzL,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE;gBAC/B,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE;gBAC7H,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE;gBAC9B,IAAI,EAAE,oBAAoB;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/src/services/quota.d.ts

@@ -7,6 +7,8 @@
  * Micro-memory:  default 500 KB total per agent (hard limit)
  *
  * @version-history
+ *   v1.2.0 — 2026-08-09 — enforceExtensionMemoryLimits() raises the 80%/95% quota alarm, and its
+ *     key-limit error names FOLDING rather than deletion as the remedy (memory-key-shape audit).
  *   v1.1.0 — 2026-06-20 — Security (H-5): add enforceExtensionMemoryLimits() so
  *     extension ctx.memory.set respects the per-value-size + per-key-count limits.
  */

package/dist/src/services/quota.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/services/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAKvD;;sGAEsG;AACtG,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEzF;AAED,yEAAyE;AACzE,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO1F;AAED,8EAA8E;AAC9E,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9F;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAC9C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAcf;AAID,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAID;;;;GAIG;AACH,wBAAsB,gBAAgB,CAClC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,cAAc,GAAE,MAAU,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACnC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAyB3B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAc3B;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAC3C,OAAO,CAAC,IAAI,CAAC,CAYf"}
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/services/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAMvD;;sGAEsG;AACtG,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEzF;AAED,yEAAyE;AACzE,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO1F;AAED,8EAA8E;AAC9E,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9F;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAC9C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAoBf;AAID,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAID;;;;GAIG;AACH,wBAAsB,gBAAgB,CAClC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,cAAc,GAAE,MAAU,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACnC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAyB3B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAc3B;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAC3C,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/src/services/quota.js

@@ -7,11 +7,14 @@
  * Micro-memory:  default 500 KB total per agent (hard limit)
  *
  * @version-history
+ *   v1.2.0 — 2026-08-09 — enforceExtensionMemoryLimits() raises the 80%/95% quota alarm, and its
+ *     key-limit error names FOLDING rather than deletion as the remedy (memory-key-shape audit).
  *   v1.1.0 — 2026-06-20 — Security (H-5): add enforceExtensionMemoryLimits() so
  *     extension ctx.memory.set respects the per-value-size + per-key-count limits.
  */
 import { randomUUID } from 'node:crypto';
 import { parseGaiiLoose } from '../utils/gaii.js';
+import { checkMemoryQuotaAlarm } from './quota-alarm.js';
 // ── Size calculators ──
 /** Total memory size for an agent — summed DB-side (no values loaded). Previously this loaded EVERY
  *  record and re-serialised each value on EVERY write (O(N) per write → O(N² for a bulk import); with
@@ -56,8 +59,14 @@ export async function enforceExtensionMemoryLimits(config, storage, ownerGaii, k
     const existing = await storage.getMemory(ownerGaii, key);
     if (!existing) {
         const keyCount = await storage.countMemory([ownerGaii]); // cheap DB count, not a value load-all
+        // Warn the installer at 80% / 95% while the namespace can still be reshaped. This is the path
+        // an item-per-fetch collector walks, so it is the one that most needs a warning before the wall.
+        void checkMemoryQuotaAlarm(config, storage, ownerGaii, { keyCount: keyCount + 1 });
         if (keyCount >= config.memoryMaxKeysPerAgent) {
-            throw new Error(`QUOTA_EXCEEDED: memory key limit reached (${config.memoryMaxKeysPerAgent}). Delete unused keys first.`);
+            // Same wording as the agent-facing route (routes/memory/crud.ts): name FOLDING as the
+            // remedy, not deletion. An extension that hits this ceiling got there by writing one key
+            // per item fetched, and deleting keys only buys it until the next collection run.
+            throw new Error(`QUOTA_EXCEEDED: memory key limit reached (${config.memoryMaxKeysPerAgent}). One value may hold ${config.memoryMaxValueSizeKb} kB, so fold a set of small keys into one record (e.g. one key per period holding that period's array) rather than deleting data.`);
         }
     }
 }

package/dist/src/services/quota.js.map

@@ -1 +1 @@
-{"version":3,"file":"quota.js","sourceRoot":"","sources":["../../../src/services/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,yBAAyB;AAEzB;;sGAEsG;AACtG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB,EAAE,IAAY;IACpE,OAAO,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAgB,EAAE,IAAY;IACrE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAgB,EAAE,IAAY;IACzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,MAAoB,EACpB,OAAgB,EAChB,SAAiB,EACjB,GAAW,EACX,KAAc;IAEd,MAAM,YAAY,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,2BAA2B,YAAY,QAAQ,CAAC,CAAC;IAC5G,CAAC;IACD,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAG,uCAAuC;QAClG,IAAI,QAAQ,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,qBAAqB,8BAA8B,CAAC,CAAC;QAC7H,CAAC;IACL,CAAC;AACL,CAAC;AAeD,uBAAuB;AAEvB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,eAAuB,EACvB,iBAAyB,CAAC;IAE1B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,GAAG,eAAe,CAAC;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;IAEtD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,wEAAwE;IACxE,MAAM,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC,8BAA8B,CAAC;IAEzE,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QAC1C,OAAO;YACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc;YACtE,MAAM,EAAE,0BAA0B,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,aAAa,OAAO;gBAC5G,iBAAiB,cAAc,2BAA2B,OAAO,GAAG;SAC3E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,eAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,YAAY,GAAG,eAAe,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;IAEvD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;IACnG,MAAM,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC,+BAA+B,CAAC;IAE1E,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QAC1C,OAAO;YACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc;YACtE,MAAM,EAAE,2BAA2B,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,cAAc,OAAO;gBAC9G,iBAAiB,cAAc,2BAA2B,OAAO,GAAG;SAC3E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,eAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,YAAY,GAAG,eAAe,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAEpD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,OAAO;QACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU;QACxC,YAAY,EAAE,cAAc,GAAG,UAAU,EAAE,cAAc,EAAE,CAAC;QAC5D,MAAM,EAAE,gCAAgC,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,kBAAkB,MAAM;KACpH,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,OAAgB,EAChB,IAAY,EACZ,OAAe,EACf,IAA0C;IAE1C,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO;IAEzB,mEAAmE;IACnE,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,CAAC,cAAc,CAAC;QACzB,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE;QACxB,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,CAAC,OAAO;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"quota.js","sourceRoot":"","sources":["../../../src/services/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,yBAAyB;AAEzB;;sGAEsG;AACtG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB,EAAE,IAAY;IACpE,OAAO,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAgB,EAAE,IAAY;IACrE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAgB,EAAE,IAAY;IACzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,MAAoB,EACpB,OAAgB,EAChB,SAAiB,EACjB,GAAW,EACX,KAAc;IAEd,MAAM,YAAY,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,2BAA2B,YAAY,QAAQ,CAAC,CAAC;IAC5G,CAAC;IACD,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAG,uCAAuC;QAClG,8FAA8F;QAC9F,iGAAiG;QACjG,KAAK,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,QAAQ,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC3C,sFAAsF;YACtF,yFAAyF;YACzF,kFAAkF;YAClF,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,qBAAqB,yBAAyB,MAAM,CAAC,oBAAoB,mIAAmI,CAAC,CAAC;QACtR,CAAC;IACL,CAAC;AACL,CAAC;AAeD,uBAAuB;AAEvB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,eAAuB,EACvB,iBAAyB,CAAC;IAE1B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,GAAG,eAAe,CAAC;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;IAEtD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,wEAAwE;IACxE,MAAM,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC,8BAA8B,CAAC;IAEzE,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QAC1C,OAAO;YACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc;YACtE,MAAM,EAAE,0BAA0B,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,aAAa,OAAO;gBAC5G,iBAAiB,cAAc,2BAA2B,OAAO,GAAG;SAC3E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,eAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,YAAY,GAAG,eAAe,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;IAEvD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;IACnG,MAAM,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC,+BAA+B,CAAC;IAE1E,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QAC1C,OAAO;YACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc;YACtE,MAAM,EAAE,2BAA2B,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,cAAc,OAAO;gBAC9G,iBAAiB,cAAc,2BAA2B,OAAO,GAAG;SAC3E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,MAAoB,EACpB,OAAgB,EAChB,IAAY,EACZ,eAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,YAAY,GAAG,eAAe,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAEpD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,OAAO;QACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU;QACxC,YAAY,EAAE,cAAc,GAAG,UAAU,EAAE,cAAc,EAAE,CAAC;QAC5D,MAAM,EAAE,gCAAgC,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,kBAAkB,MAAM;KACpH,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,OAAgB,EAChB,IAAY,EACZ,OAAe,EACf,IAA0C;IAE1C,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO;IAEzB,mEAAmE;IACnE,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,CAAC,cAAc,CAAC;QACzB,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE;QACxB,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,CAAC,OAAO;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/services/schedule-gate.d.ts

@@ -0,0 +1,31 @@
+/** Every schedule kind this node knows. */
+export type ScheduleKind = 'extension' | 'ai' | 'agent_task' | 'eco-capability' | 'connections-publish';
+/**
+ * The scope a caller needs for the capability the schedule DRIVES. A kind absent from this map needs
+ * nothing beyond being allowed to make a schedule at all — which is what the tool's own scope says.
+ */
+export declare const SCHEDULE_KIND_SCOPE: Partial<Record<ScheduleKind, string>>;
+export interface ScheduleCaller {
+    /** True for a session acting as the owner themselves — they act for all their own agents. */
+    isOwnerSession: boolean;
+    scopes: string[];
+}
+export interface ScheduleGateInput {
+    kind: string;
+    cron: string;
+    timezone?: string;
+}
+export interface ScheduleRefusal {
+    status: number;
+    code: 'INVALID_KIND' | 'SCOPE_DENIED' | 'INVALID_CRON';
+    message: string;
+}
+/** Validate a cron expression (or the @activate sentinel) using croner. Moved here from
+ *  routes/schedules.ts so both doors judge the same string the same way. */
+export declare function isValidCron(cron: string, timezone?: string): boolean;
+/**
+ * The three refusals, in the order the route has always applied them. Returns null when the caller
+ * may proceed; the caller then builds and stores the record its own way.
+ */
+export declare function checkScheduleGate(input: ScheduleGateInput, caller: ScheduleCaller): ScheduleRefusal | null;
+//# sourceMappingURL=schedule-gate.d.ts.map

package/dist/src/services/schedule-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-gate.d.ts","sourceRoot":"","sources":["../../../src/services/schedule-gate.ts"],"names":[],"mappings":"AAiCA,2CAA2C;AAC3C,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,IAAI,GAAG,YAAY,GAAG,gBAAgB,GAAG,qBAAqB,CAAC;AAExG;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAIrE,CAAC;AAEF,MAAM,WAAW,cAAc;IAC3B,6FAA6F;IAC7F,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,GAAG,cAAc,GAAG,cAAc,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;CACnB;AAID;4EAC4E;AAC5E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAapE;AAQD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,cAAc,GAAG,eAAe,GAAG,IAAI,CAkB1G"}