aimeat 2.7.0 → 3.0.0

package/dist/public/views/portal-classic.js

@@ -5,7 +5,7 @@
  *   mega-prompt for building apps, agent workflows, or connecting an agent runtime.
  *
  * @structure
- *   - buildAppBuilderPrompt / buildAgentPrompt / buildConnectPrompt: compose the copy-paste prompts
+ *   - buildAppBuilderPrompt / buildAgentBuilderPrompt / buildConnectPrompt: compose the copy-paste prompts
  *   - WelcomeBoard: reads/posts the shared welcome board via /v1/memory + /v1/portal/try-memory
  *   - CardGroup / CopyPromptBtn: expandable card + copy-button wrapper primitives
  *   - PortalClassicView (default): assembles hero, board, card groups, and morsels footer
@@ -15,6 +15,12 @@
  *   v1.1.0 — 2026-07-31 — ManagedEnvNote above each of the three copy buttons (app-builder full,
  *     agent and connect compact): what a company-managed AI tool's untrusted-source notice means
  *     and the three routes round it. The prompt builders themselves are unchanged.
+ *   v1.2.0 — 2026-08-08 — Renamed the local buildAgentPrompt → buildAgentBuilderPrompt: the name
+ *     collided with the exported buildAgentPrompt in agents/connect-prompts.js, which builds a
+ *     different text (the device-auth CONNECT prompt). The new name matches its two siblings
+ *     (buildAppBuilderPrompt / buildConnectPrompt). Prompt text unchanged. Copy control unified:
+ *     CopyPromptBtn now passes btn-primary instead of the bespoke .cl-copy-prompt-btn, and the
+ *     "copied" tick comes from the shared t('common.copied') rather than a literal ✔.
  */
 import { h } from 'preact';
 import { useState, useEffect, useCallback } from 'preact/hooks';
@@ -128,7 +134,7 @@ After giving the user the HTML file, always add:
 "If the app doesn't work, press F12 \u2192 Console tab, copy any red errors and paste them here. I'll fix it."`;
 }
 
-function buildAgentPrompt() {
+function buildAgentBuilderPrompt() {
   const n = NODE_URL;
   return `I'd like to build an AI agent workflow using AIMEAT, an open protocol for AI memory, coordination and task management.
 
@@ -328,10 +334,11 @@ function WelcomeBoard() {
 /* ══════════════════════════════════════════════
    COPY BUTTON COMPONENT
    ══════════════════════════════════════════════ */
-// Thin wrapper over the canonical CopyButton \u2014 keeps the classic-portal labels +
-// the .cl-copy-prompt-btn styling; the copy/feedback logic lives in the component.
+// Thin wrapper over the canonical CopyButton \u2014 it exists only to carry the classic-portal
+// labels. The look is the shared .btn-primary and the confirmation is the shared
+// t('common.copied'); the copy/feedback logic lives in the component.
 function CopyPromptBtn({ text, label, copiedLabel, className }) {
-  return html`<${CopyButton} text=${text} label=${label} copiedLabel=${copiedLabel || '\u2714'} className=${className || 'cl-copy-prompt-btn'} />`;
+  return html`<${CopyButton} text=${text} label=${label} copiedLabel=${copiedLabel} className=${className || 'btn-primary'} />`;
 }
 
 /* ══════════════════════════════════════════════
@@ -372,7 +379,7 @@ export default function PortalClassicView({ navigate }) {
   }, []);
 
   const appPrompt = buildAppBuilderPrompt();
-  const agentPrompt = buildAgentPrompt();
+  const agentPrompt = buildAgentBuilderPrompt();
   const connectPrompt = buildConnectPrompt();
 
   return html`
@@ -410,8 +417,7 @@ export default function PortalClassicView({ navigate }) {
           <div class="cl-prompt-actions">
             <${CopyPromptBtn}
               text=${appPrompt}
-              label=${ct('groups.copyPrompt')}
-              copiedLabel=${ct('groups.copied') + ' \u2714'}
+              label=${globalT('common.copyPrompt')}
             />
           </div>
           <div class="cl-prompt-lang-note">${ct('cards.apps.promptLangNote')}</div>
@@ -432,8 +438,10 @@ export default function PortalClassicView({ navigate }) {
         <div class="cl-return-section">
           <div class="cl-return-title">${ct('cards.apps.returnTitle')}</div>
           <div class="cl-return-motivation">${ct('cards.apps.returnMotivation')}</div>
+          <!-- Not a copy control: it navigates. It only ever wore .cl-copy-prompt-btn to borrow
+               that button's look, which is .btn-primary. -->
           <button
-            class="cl-copy-prompt-btn"
+            class="btn-primary"
             type="button"
             onClick=${() => navigate('/v1/profile?tab=apps')}
           >${ct('cards.apps.returnBtnAnon')}</button>
@@ -458,8 +466,7 @@ export default function PortalClassicView({ navigate }) {
           <div class="cl-prompt-actions">
             <${CopyPromptBtn}
               text=${agentPrompt}
-              label=${ct('groups.copyPrompt')}
-              copiedLabel=${ct('groups.copied') + ' \u2714'}
+              label=${globalT('common.copyPrompt')}
             />
           </div>
           <div class="cl-prompt-lang-note">${ct('cards.apps.promptLangNote')}</div>
@@ -480,8 +487,7 @@ export default function PortalClassicView({ navigate }) {
             <div class="cl-prompt-actions">
               <${CopyPromptBtn}
                 text=${connectPrompt}
-                label=${ct('groups.copyPrompt')}
-                copiedLabel=${ct('groups.copied') + ' \u2714'}
+                label=${globalT('common.copyPrompt')}
               />
             </div>
           </div>

package/dist/public/views/portal-dev.js

@@ -18,6 +18,11 @@
  *     organisms, knowledge packages) instead of /v1/stats fields that do not exist, which had
  *     every card rendering 0 on a node with 114 agents. New <StatCard> renders a placeholder
  *     until the fetch resolves rather than a hard zero.
+ *   v1.6.0 — 2026-08-07 — "Keep your AI in sync" panel: the copyable standing-instruction line
+ *     (CLAUDE.md/AGENTS.md/custom instructions) + link to the prefilled per-organism block on
+ *     the profile MCP page. Closes the documented gate where the connection worked but the AI
+ *     silently drifted off the node between sessions (UX-remake v3, P9).
+ *   v1.7.0 — 2026-08-08 — CopyBtn no longer takes a `locale` prop (it has no labels of its own any more).
  */
 import { useState, useEffect, useCallback } from 'preact/hooks';
 import { useViewCSS } from '/components/useViewCSS.js';
@@ -27,6 +32,7 @@ import { BackgroundLayer, BgSelector } from './portal-dev.background.js';
 import { CapTabs } from './portal-dev.panels.js';
 import { UploadSection } from './portal-dev.upload.js';
 import { swallowed } from '/js/swallowed.js';
+import { useSession } from '/js/use-session.js';
 
 // The familiar GitHub "Octocat" mark. fill=currentColor so it inherits the link's themed color.
 const GH_MARK = html`<svg class="gh-mark" viewBox="0 0 16 16" width="16" height="16" fill="currentColor" aria-hidden="true"><path d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z"></path></svg>`;
@@ -35,6 +41,10 @@ const GH_MARK = html`<svg class="gh-mark" viewBox="0 0 16 16" width="16" height=
 // client that speaks it; the browse prompt is the fallback for clients that can only read a URL.
 const MCP_ADD_COMMAND = `claude mcp add aimeat --transport http ${NODE_URL}/v1/mcp`;
 const BROWSE_PROMPT = `Read this URL and follow the instructions to connect to this AIMEAT node: ${NODE_URL}/?format=json`;
+// The standing instruction that makes the connection survive between sessions. Kept in English
+// on purpose: it is written for the AI, and it ends by telling the AI where the richer
+// per-organism block lives (profile → MCP → step 5 serves it prefilled).
+const STAY_SYNC_LINE = `I work on the AIMEAT node at ${NODE_URL} over MCP (connector "aimeat"). At the start of a task, read my context from it; write durable results back through the AIMEAT tools instead of keeping them only in this chat. If the AIMEAT tools are not available in this conversation, tell me plainly.`;
 
 /* One live counter. `value` is undefined until the fetch resolves, and the card shows a
    quiet placeholder instead of 0 — a zero here reads as "nothing runs on this node". */
@@ -60,25 +70,12 @@ export default function PortalDevView({ locale }) {
   const [selectedPlatform, setSelectedPlatform] = useState(null);
   const [selectedVariant, setSelectedVariant] = useState(null);
   const [activeBg, setActiveBg] = useState(3);
-  const [session, setSession] = useState(null);
+  const session = useSession();
 
   useViewCSS('/css/views/portal-dev.css');
 
   const isLoggedIn = !!session;
 
-  // Auth
-  useEffect(() => {
-    const auth = window.AIMEAT?.auth;
-    if (!auth) return;
-    const checkSession = () => {
-      const s = typeof auth.getSession === 'function' ? auth.getSession() : null;
-      setSession(s && s.jwt ? s : null);
-    };
-    checkSession();
-    window.addEventListener('aimeat-auth-change', checkSession);
-    return () => window.removeEventListener('aimeat-auth-change', checkSession);
-  }, []);
-
   // Load platforms + stats
   useEffect(() => {
     fetch('/v1/portal/platforms')
@@ -144,18 +141,33 @@ export default function PortalDevView({ locale }) {
         <p class="dv-panel-lead">${dt('quickStart.mcpDesc', locale)}</p>
         <div class="dv-code-row">
           <code class="dv-code">${MCP_ADD_COMMAND}</code>
-          <${CopyBtn} text=${MCP_ADD_COMMAND} locale=${locale} />
+          <${CopyBtn} text=${MCP_ADD_COMMAND} />
         </div>
         <p class="dv-hint">${dt('quickStart.mcpNote', locale)}</p>
 
         <p class="dv-panel-lead dv-mt">${dt('quickStart.desc', locale)}</p>
         <div class="dv-prompt-output dv-prompt-output--flush">
-          <${CopyBtn} text=${BROWSE_PROMPT} locale=${locale} />
+          <${CopyBtn} text=${BROWSE_PROMPT} />
           <div class="dv-prompt-text dv-prompt-text--single">${BROWSE_PROMPT}</div>
         </div>
         <p class="dv-note">${dt('quickStart.note', locale)}<br/>${dt('quickStart.fallback', locale)}</p>
       </div>
 
+      <!-- Stay in sync: the connection alone does not survive between sessions. The one-line
+           standing instruction is the other half of the setup (the documented failure mode is
+           the AI silently drifting off the node); the profile MCP page builds the full block
+           prefilled with the user's own organisms. -->
+      <div class="dv-panel">
+        <h3 class="dv-panel-title">${dt('staySync.title', locale)}</h3>
+        <p class="dv-panel-lead">${dt('staySync.lead', locale)}</p>
+        <div class="dv-prompt-output dv-prompt-output--flush">
+          <${CopyBtn} text=${STAY_SYNC_LINE} />
+          <div class="dv-prompt-text">${STAY_SYNC_LINE}</div>
+        </div>
+        <p class="dv-note">${dt('staySync.prefilledNote', locale)}${' '}
+          <a class="dv-inline-link" href="/v1/profile?tab=mcp">${dt('staySync.prefilledLink', locale)}</a></p>
+      </div>
+
       <!-- Step 1: Platform -->
       <div class="dv-step">
         <div class="dv-step-header">

package/dist/public/views/portal-dev.panels.js

@@ -7,9 +7,15 @@
  *     handed out the connectivity-key flow removed in v1.1.0 of the node (POST /v1/owners for an
  *     owner_key, X-AIMEAT-Owner-Key, Ed25519 challenge-response), which returns 400 on any
  *     current node. Added an apiMcpHint pointing MCP-capable clients at the one-line path.
+ *   v1.2.0 — 2026-08-08 — The three hand-rolled MCP copy buttons became shared <CopyButton>s (btn-primary / btn-outline
+ *       + btn-copy-inline), which removes the .dv-copy-btn / --alt classes, the two useCallback
+ *       clipboard handlers and the single `copied` flag that all three buttons confusingly shared —
+ *       copying the command used to light up the URL buttons too.
  */
 import { useState, useCallback } from 'preact/hooks';
-import { sanitizeHtml, copyToClipboard } from '/js/utils.js';
+import { sanitizeHtml } from '/js/utils.js';
+import { t as globalT } from '/js/i18n.js';
+import { CopyButton } from '/components/CopyButton.js';
 import { html, NODE_URL, dt, GOAL_LIST, CopyBtn } from './portal-dev.shared.js';
 import { swallowed } from '/js/swallowed.js';
 
@@ -18,21 +24,9 @@ import { swallowed } from '/js/swallowed.js';
    ══════════════════════════════════════════════ */
 function McpPanel({ locale, isLoggedIn, session }) {
   const [setupTab, setSetupTab] = useState('code'); // 'code' | 'cowork' | 'chat'
-  const [copied, setCopied] = useState(false);
 
   const mcpUrl = `${NODE_URL}/v1/mcp`;
-
-  const copyUrl = useCallback(async () => {
-    await copyToClipboard(mcpUrl);
-    setCopied(true);
-    setTimeout(() => setCopied(false), 2000);
-  }, [mcpUrl]);
-
-  const copyCommand = useCallback(async () => {
-    await copyToClipboard(`claude mcp add aimeat --transport http ${mcpUrl}`);
-    setCopied(true);
-    setTimeout(() => setCopied(false), 2000);
-  }, [mcpUrl]);
+  const mcpAddCommand = `claude mcp add aimeat --transport http ${mcpUrl}`;
 
   return html`
     <div class="dv-panel">
@@ -83,11 +77,9 @@ function McpPanel({ locale, isLoggedIn, session }) {
               <div class="dv-field">
                 <div class="dv-field-label">${dt('panel.mcpCodeRunThis', locale)}</div>
                 <div class="dv-code-row">
-                  <code class="dv-code">claude mcp add aimeat --transport http ${mcpUrl}</code>
-                  <button type="button" onClick=${copyCommand}
-                    class="dv-copy-btn">
-                    ${copied ? dt('panel.mcpCopied', locale) : dt('panel.mcpCopyCommand', locale)}
-                  </button>
+                  <code class="dv-code">${mcpAddCommand}</code>
+                  <${CopyButton} text=${mcpAddCommand} className="btn-primary btn-sm btn-copy-inline"
+                    label=${dt('panel.mcpCopyCommand', locale)} />
                 </div>
               </div>
               <p class="dv-hint">
@@ -110,10 +102,8 @@ function McpPanel({ locale, isLoggedIn, session }) {
                   <li>${dt('panel.mcpDesktopStep2', locale)}
                     <div class="dv-step-row">
                       <code class="dv-code--inline">${mcpUrl}</code>
-                      <button type="button" onClick=${copyUrl}
-                        class="dv-copy-btn--alt">
-                        ${copied ? dt('panel.mcpCopied', locale) : dt('panel.mcpCopyUrl', locale)}
-                      </button>
+                      <${CopyButton} text=${mcpUrl} className="btn-outline btn-sm btn-copy-inline"
+                        label=${globalT('common.copyUrl')} />
                     </div>
                   </li>
                   <li>${dt('panel.mcpDesktopStep3', locale)}
@@ -142,10 +132,8 @@ function McpPanel({ locale, isLoggedIn, session }) {
                   <li>${dt('panel.mcpChatStep3', locale)}
                     <div class="dv-step-row">
                       <code class="dv-code--inline-sm">${mcpUrl}</code>
-                      <button type="button" onClick=${copyUrl}
-                        class="dv-copy-btn--alt">
-                        ${copied ? dt('panel.mcpCopied', locale) : dt('panel.mcpCopyUrl', locale)}
-                      </button>
+                      <${CopyButton} text=${mcpUrl} className="btn-outline btn-sm btn-copy-inline"
+                        label=${globalT('common.copyUrl')} />
                     </div>
                   </li>
                   <li>${dt('panel.mcpChatStep4', locale)}</li>
@@ -224,7 +212,7 @@ function ApiPanel({ locale }) {
       <h3>${dt('panel.apiBadge', locale)}</h3>
       <p>${dt('panel.apiDesc', locale)}</p>
       <div class="dv-prompt-output">
-        <${CopyBtn} text=${prompt} locale=${locale} />
+        <${CopyBtn} text=${prompt} />
         <div class="dv-prompt-text">${prompt}</div>
       </div>
       <p class="dv-hint">${dt('panel.apiMcpHint', locale)}</p>
@@ -240,7 +228,7 @@ function BrowsePanel({ locale, onSwitchToPromptPackage }) {
       <h3>${dt('panel.browseBadge', locale)}</h3>
       <p>${dt('panel.browseDesc', locale)}</p>
       <div class="dv-prompt-output">
-        <${CopyBtn} text=${prompt} locale=${locale} />
+        <${CopyBtn} text=${prompt} />
         <div class="dv-prompt-text">${prompt}</div>
       </div>
       <h3 class="dv-mt">${dt('panel.browseUpgradeTitle', locale)}</h3>
@@ -299,7 +287,7 @@ function PromptPackagePanel({ locale, platform, variant, isLoggedIn }) {
       </div>
       ${(selectedGoal || loading) && html`
         <div class="dv-prompt-output">
-          <${CopyBtn} text=${promptText} locale=${locale} />
+          <${CopyBtn} text=${promptText} />
           <div class="dv-prompt-text">${loading ? dt('panel.loading', locale) : promptText}</div>
         </div>
       `}

package/dist/public/views/portal-dev.shared.js

@@ -5,6 +5,9 @@
  *   satisfy max-file-lines.
  * @version-history
  *   v1.0.0 — 2026-07-13 — Extracted from portal-dev.js (max-file-lines)
+ *   v1.1.0 — 2026-08-08 — CopyBtn is now a pure label-free wrapper over <CopyButton>: shared btn-primary btn-sm
+ *       btn-copy-inline styling and the default common.copy / common.copied labels, replacing the
+ *       .dv-copy-btn class and the dev.copy / dev.copied keys. The unused `locale` prop is gone.
  */
 import { h } from 'preact';
 import htm from 'htm';
@@ -49,8 +52,10 @@ export const GOAL_LIST = [
 /* ══════════════════════════════════════════════
    COPY BUTTON
    ══════════════════════════════════════════════ */
-// Thin wrapper over the canonical CopyButton — keeps the dev-portal locale labels
-// (dt) + the .dv-copy-btn styling; the copy/feedback logic lives in the component.
-export function CopyBtn({ text, locale }) {
-  return html`<${CopyButton} text=${text} label=${dt('copy', locale)} copiedLabel=${dt('copied', locale)} className="dv-copy-btn" />`;
+// Thin wrapper over the canonical CopyButton. It used to carry the dev-portal's own copy labels
+// and its own .dv-copy-btn styling; both are now the shared ones — btn-primary, and the default
+// common.copy / common.copied. btn-copy-inline keeps it from stretching the .dv-code-row it
+// sometimes sits in; inside a .dv-prompt-output the container positions it in the corner.
+export function CopyBtn({ text }) {
+  return html`<${CopyButton} text=${text} className="btn-primary btn-sm btn-copy-inline" />`;
 }

package/dist/public/views/portfolio/builder.js

@@ -5,6 +5,9 @@
  *   to satisfy max-file-lines.
  * @version-history
  *   v1.0.0 — 2026-07-13 — Extracted from portfolio.js (max-file-lines)
+ *   v1.1.0 — 2026-08-08 — Copy labels now resolve from the shared common.copy / common.copied / common.copyPrompt /
+ *       common.copyLink / common.copyUrl keys; the per-view copy label keys this file used were
+ *       removed from both locales. Same words on screen.
  */
 import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
@@ -540,7 +543,7 @@ export function PortfolioBuilder({ session, navigate }) {
             <div class="portfolio-prompt-meta">${tr('portfolio.builder.charCount', '{n} characters').replace('{n}', generatedPrompt.length.toLocaleString())}</div>
             <div class="portfolio-prompt-actions">
               <${CopyButton} text=${generatedPrompt} className="btn-primary"
-                label=${t('portfolio.builder.copyPrompt')} copiedLabel=${t('portfolio.builder.promptCopied')} />
+                label=${t('portfolio.builder.copyPrompt')} copiedLabel=${t('common.copied')} />
               <button class="btn-ghost" onClick=${handleDownloadPrompt}>
                 ${t('portfolio.builder.downloadPrompt')}
               </button>

package/dist/public/views/portfolio/shared.js

@@ -32,11 +32,7 @@ export function stampCspNonce(htmlStr) {
   return htmlStr.replace(/<script(?=[\s>])/gi, `<script nonce="${nonce}"`);
 }
 
-/* ── Auth helpers ── */
-export function getSession() {
-  const a = window.AIMEAT?.auth;
-  if (!a || typeof a.getSession !== 'function') return null;
-  const s = a.getSession();
-  if (!s || !s.jwt) return null;
-  return s;
-}
+/* ── Auth helpers ──
+ * This module used to carry its own copy of getSession(). Re-exported from the session service
+ * instead: one implementation of "who is signed in", so a fix there reaches every caller. */
+export { getSession } from '/js/services/auth.js';

package/dist/public/views/portfolio.js

@@ -49,6 +49,8 @@ import { t, getLocale } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
 import { listApps } from '/js/services/apps.js';
 import { NODE_URL, tr, stampCspNonce, getSession } from './portfolio/shared.js';
+import { onAuthChange } from '/js/services/auth.js';
+import { useSession } from '/js/use-session.js';
 import { PortfolioBuilder } from './portfolio/builder.js';
 import { swallowed } from '/js/swallowed.js';
 
@@ -83,7 +85,7 @@ function PortfolioViewer({ username, navigate }) {
     if (!data?.has_html) return undefined;
     const ownerGaiis = Array.isArray(data.owner_gaiis) ? data.owner_gaiis : [];
 
-    const onAuthChange = () => postAuthState(frameRef.current?.contentWindow);
+    const pushAuthStateToFrame = () => postAuthState(frameRef.current?.contentWindow);
 
     const onMessage = async (e) => {
       const win = frameRef.current?.contentWindow;
@@ -111,23 +113,13 @@ function PortfolioViewer({ username, navigate }) {
     };
 
     window.addEventListener('message', onMessage);
-    window.addEventListener('aimeat-auth-change', onAuthChange);
-    // aimeat-auth-change fires from the login pill's onLogout BEFORE the async
-    // auth.logout() has cleared the session, so getSession() still reads the old
-    // state at that moment. The auth lib's own 'login'/'logout' events fire only
-    // AFTER the state change — subscribe to those too so the frame flips reliably.
-    const authApi = window.AIMEAT?.auth;
-    if (authApi?.on) {
-      authApi.on('login', onAuthChange);
-      authApi.on('logout', onAuthChange);
-    }
+    // onAuthChange is the session service's subscription: it is driven by the auth lib's own
+    // post-change events, so the callback never reads a session that has already been signed out.
+    // (This view used to carry a hand-rolled version of exactly that fix; the service now owns it.)
+    const unsubscribeAuth = onAuthChange(pushAuthStateToFrame);
     return () => {
       window.removeEventListener('message', onMessage);
-      window.removeEventListener('aimeat-auth-change', onAuthChange);
-      if (authApi?.off) {
-        authApi.off('login', onAuthChange);
-        authApi.off('logout', onAuthChange);
-      }
+      unsubscribeAuth();
     };
   }, [data]);
 
@@ -263,15 +255,7 @@ function PortfolioViewer({ username, navigate }) {
 
 /* ── Main Export ── */
 export default function Portfolio({ navigate }) {
-  const [session, setSession] = useState(null);
-
-  useEffect(() => {
-    const s = getSession();
-    if (s) setSession(s);
-    const handler = () => setSession(getSession());
-    window.addEventListener('aimeat-auth-change', handler);
-    return () => window.removeEventListener('aimeat-auth-change', handler);
-  }, []);
+  const session = useSession();
 
   // Determine mode from URL
   const path = typeof window !== 'undefined' ? window.location.pathname : '';

package/dist/public/views/profile/access-tab/access-tokens.js

@@ -59,7 +59,6 @@ export function AccessTokensSection({ session, showToast, initial }) {
   const [selScopes, setSelScopes] = useState({});
   const [grantOwner, setGrantOwner] = useState(false);
   const [grantOperator, setGrantOperator] = useState(false);
-  const [readOwnerData, setReadOwnerData] = useState(false);
   const [expiry, setExpiry] = useState('');
 
   const fullLevel = grantOwner || grantOperator;
@@ -80,7 +79,7 @@ export function AccessTokensSection({ session, showToast, initial }) {
 
   const resetForm = () => {
     setShowCreate(false); setLabel(''); setSelScopes({});
-    setGrantOwner(false); setGrantOperator(false); setReadOwnerData(false); setExpiry('');
+    setGrantOwner(false); setGrantOperator(false); setExpiry('');
   };
 
   const toggleScope = (s) => setSelScopes(prev => ({ ...prev, [s]: !prev[s] }));
@@ -96,7 +95,7 @@ export function AccessTokensSection({ session, showToast, initial }) {
     try {
       const body = {
         label: label.trim(), scopes,
-        grant_owner: grantOwner, grant_operator: grantOperator, read_owner_data: readOwnerData,
+        grant_owner: grantOwner, grant_operator: grantOperator,
       };
       if (expiry) body.expires_in = parseInt(expiry, 10);
       const r = await apiPost('/v1/access/tokens', body);
@@ -107,7 +106,7 @@ export function AccessTokensSection({ session, showToast, initial }) {
     } catch (e) {
       showToast(e.message || (t('profile.access.patCreateError') || 'Failed to create token'));
     } finally { setCreating(false); }
-  }, [label, fullLevel, selScopes, grantOwner, grantOperator, readOwnerData, expiry, showToast, load]);
+  }, [label, fullLevel, selScopes, grantOwner, grantOperator, expiry, showToast, load]);
 
   const handleRevoke = useCallback((id, lbl) => {
     confirm(
@@ -228,10 +227,6 @@ export function AccessTokensSection({ session, showToast, initial }) {
                   })}
                 </div>
               `)}
-              <label class="flex-row mt-half">
-                <input type="checkbox" checked=${readOwnerData} onChange=${() => setReadOwnerData(v => !v)} />
-                ${t('profile.access.patReadOwnerData') || 'Also read my data (otherwise a clean sandbox)'}
-              </label>
             </div>
           `}